name: [linux-clang, linux-clang-openssl, linux-gcc]
include:
- name: linux-clang
- os: ubuntu-18.04
+ os: ubuntu-latest
compiler: clang
makevars: CPPFLAGS=-Werror
configureopts: --enable-asan
- name: linux-clang-openssl
- os: ubuntu-18.04
+ os: ubuntu-latest
compiler: clang
makevars: CPPFLAGS=-Werror
configureopts: --with-crypto-impl=openssl
- name: linux-gcc
- os: ubuntu-18.04
+ os: ubuntu-latest
compiler: gcc
steps:
- name: Checkout repository
if: startsWith(matrix.os, 'ubuntu')
run: |
sudo apt-get update -qq
- sudo apt-get install -y bison gettext keyutils ldap-utils libcmocka-dev libldap2-dev libkeyutils-dev libresolv-wrapper libsasl2-dev libssl-dev python3-kdcproxy python3-pip slapd tcsh
+ sudo apt-get install -y bison gettext keyutils ldap-utils libcmocka-dev libldap2-dev libkeyutils-dev libsasl2-dev libssl-dev python3-kdcproxy python3-pip slapd tcsh
pip3 install pyrad
- name: Build
env:
fi
windows:
- runs-on: windows-2019
+ runs-on: windows-latest
env:
KRB_INSTALL_DIR: C:\kfw
steps:
shell: cmd
run: |
mkdir %KRB_INSTALL_DIR%
+ - uses: ilammy/msvc-dev-cmd@v1
+ with:
+ arch: x86
- name: Build 32-bit
shell: cmd
run: |
cd src
- call "C:\Program Files (x86)\Microsoft Visual Studio\2019\Enterprise\VC\Auxiliary\Build\vcvars32.bat"
set
set PATH=%PATH%;%wix%bin
nmake -f Makefile.in prep-windows
cd windows\installer\wix
nmake
rename kfw.msi kfw32.msi
+ - uses: ilammy/msvc-dev-cmd@v1
+ with:
+ arch: x64
- name: Build 64-bit
shell: cmd
run: |
cd src
- call "C:\Program Files (x86)\Microsoft Visual Studio\2019\Enterprise\VC\Auxiliary\Build\vcvars64.bat"
set
set PATH=%PATH%;%wix%bin;"%WindowsSdkVerBinPath%"\x86
nmake clean
jobs:
doc-older-sphinx:
- runs-on: ubuntu-18.04
+ runs-on: ubuntu-22.04
steps:
- name: Checkout repository
uses: actions/checkout@v1
- name: Linux setup
run: |
sudo apt-get update -qq
- sudo apt-get install -y doxygen python3-lxml python3-pip python-sphinx
+ sudo apt-get install -y doxygen python3-lxml python3-pip python3-sphinx
pip3 install Cheetah3
- name: Build documentation
run: |
cd src/doc
make -f Makefile.in SPHINX_ARGS=-W htmlsrc
doc-newest-sphinx:
- runs-on: ubuntu-18.04
+ runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v1
--- /dev/null
+*~
+*.a
+*.dll
+*.dylib
+*.exe
+*.exp
+*.lib
+*.map
+*.o
+*.obj
+*.pc
+*.pyc
+*.so
+binutils.versions
+darwin.exports
+hpux.exports
+lib*.so.*
+Makefile
+OBJS.*
+obj/
+skiptests
+testdir/
+testlog
+testtrace
+
+# Ignore the build directory
+/build/
+
+# The autom4te cache directory
+autom4te.cache/
+
+# Generated by Dolphin for individual settings for directories
+.directory
+
+# Generated by Kate-Part
+*.kate-swp
+*.new
+
+# KDevelop files
+.kdev4/
+*.kdev4
+
+# Files generated by merges
+*.orig
+
+# macOS files
+.DS_Store
+.AppleDouble
+.LSOverride
+
+# macOS Resource Forks
+._*
+
+# macOS Files that might appear in the root of a volume
+.DocumentRevisions-V100
+.fseventsd
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+
+# macOS Directories potentially created on remote AFP share
+.AppleDB
+.AppleDesktop
+Network Trash Folder
+Temporary Items
+.apdisk
+
+# Windows image file caches
+Thumbs.db
+ehthumbs.db
+
+# Folder config file
+Desktop.ini
+
+# Recycle Bin used on file shares
+$RECYCLE.BIN/
+
+# Windows Installer files
+*.cab
+*.msi
+*.msm
+*.msp
+
+# Windows shortcuts
+*.lnk
+
+# Visual Studio
+.vscode
+
+# TortoiseGit Project-level settings
+/.tgitconfig
+
+# Eclipse generated files
+
+*.pydevproject
+.autotools
+.metadata
+.gradle
+bin/
+tmp/
+*.tmp
+*.bak
+*.swp
+*~.nib
+local.properties
+.settings/
+.loadpath
+
+# Eclipse Core
+.project
+
+# Eclipse External tool builders
+.externalToolBuilders/
+
+# Eclipse Locally stored "Eclipse launch configurations"
+*.launch
+
+# Eclipse CDT-specific
+.cproject
+
+# Eclipse PDT-specific
+.buildpath
+
+# Eclipse sbteclipse plugin
+.target
+
+# Eclipse TeXlipse plugin
+.texlipse
+
+# Eclipse STS (Spring Tool Suite)
+.springBeans
+
+/doc/version.py
+
+/doc/html/
+/doc/pdf/
+
+# Emacs tags table
+/src/TAGS
+
+/src/config.log
+/src/config.status
+/src/configure
+/src/pyrunenv.vals
+/src/runenv.py
+
+/src/appl/gss-sample/gss-client
+/src/appl/gss-sample/gss-server
+
+/src/appl/sample/sclient/sclient
+
+/src/appl/sample/sserver/sserver
+
+/src/appl/simple/client/sim_client
+
+/src/appl/simple/server/sim_server
+
+/src/appl/user_user/uuclient
+/src/appl/user_user/uuserver
+
+/src/build-tools/krb5-config
+
+/src/ccapi/lib/ccapi_err.c
+/src/ccapi/lib/ccapi_err.h
+/src/ccapi/lib/win/srctmp/
+
+/src/ccapi/server/win/srctmp/
+
+/src/ccapi/test/ccapi_ccache.c
+/src/ccapi/test/ccapi_ccache_iterator.c
+/src/ccapi/test/ccapi_context.c
+/src/ccapi/test/ccapi_context_change_time.c
+/src/ccapi/test/ccapi_credentials.c
+/src/ccapi/test/ccapi_credentials_iterator.c
+/src/ccapi/test/ccapi_err.c
+/src/ccapi/test/ccapi_intermediates/
+/src/ccapi/test/ccapi_ipc.c
+/src/ccapi/test/ccapi_string.c
+/src/ccapi/test/ccapi_test/
+/src/ccapi/test/ccapi_v2.c
+/src/ccapi/test/cci_cred_union.c
+/src/ccapi/test/cci_debugging.h
+/src/ccapi/test/cci_identifier.c
+/src/ccapi/test/cci_message.c
+/src/ccapi/test/cci_os_identifier.c
+/src/ccapi/test/cci_types.h
+/src/ccapi/test/ccs_reply.h
+/src/ccapi/test/ccs_request.h
+/src/ccapi/test/ccs_request_c.c
+/src/ccapi/test/pingtest2.pdb
+/src/ccapi/test/pingtest2.exe.manifest
+/src/ccapi/test/testall1.exe
+/src/ccapi/test/testall1.map
+/src/ccapi/test/win-utils.h
+
+/src/clients/kdestroy/kdestroy
+
+/src/clients/kinit/kinit
+
+/src/clients/klist/klist
+
+/src/clients/kpasswd/kpasswd
+
+/src/clients/ksu/ksu
+
+/src/clients/kswitch/kswitch
+
+/src/clients/kvno/kvno
+
+/src/doc/Doxyfile
+/src/doc/doxy/
+/src/doc/paths.py
+/src/doc/rst_apiref/
+/src/doc/rst_composite/
+/src/doc/html_subst/
+
+/src/include/autoconf.h
+/src/include/autoconf.h.in
+/src/include/autoconf.stamp
+/src/include/autoconf.stmp
+/src/include/com_err.h
+/src/include/db-config.h
+/src/include/db.h
+/src/include/gssapi/
+/src/include/kadm5/
+/src/include/kdc_j_encode.h
+/src/include/krb5.stamp
+/src/include/osconf.h
+/src/include/private-and-public-decls
+/src/include/profile.h
+/src/include/ss/
+/src/include/verto-k5ev.h
+/src/include/verto.h
+/src/include/*_err.h
+
+/src/include/gssrpc/types.h
+
+/src/include/krb5/krb5.h
+
+/src/kadmin/cli/getdate.c
+/src/kadmin/cli/kadmin
+/src/kadmin/cli/kadmin.local
+/src/kadmin/cli/kadmin_ct.c
+
+/src/kadmin/dbutil/import_err.c
+/src/kadmin/dbutil/import_err.h
+/src/kadmin/dbutil/kdb5_util
+/src/kadmin/dbutil/t_tdumputil
+
+/src/kadmin/ktutil/ktutil
+/src/kadmin/ktutil/ktutil_ct.c
+
+/src/kadmin/server/kadmind
+
+/src/kdc/kdc5_err.[ch]
+/src/kdc/krb5kdc
+/src/kdc/rtest
+/src/kdc/t_ndr
+/src/kdc/t_replay
+
+/src/lib/k5sprt32.def
+
+/src/lib/crypto/builtin/aes/aes-gen
+/src/lib/crypto/builtin/aes/kresults.out
+
+/src/lib/crypto/builtin/camellia/camellia-gen
+/src/lib/crypto/builtin/camellia/kresults.out
+
+/src/lib/crypto/builtin/des/destest
+/src/lib/crypto/builtin/des/verify
+
+/src/lib/crypto/builtin/sha1/t_shs
+/src/lib/crypto/builtin/sha1/t_shs3
+
+/src/lib/crypto/crypto_tests/aes-test
+/src/lib/crypto/crypto_tests/camellia-test
+/src/lib/crypto/crypto_tests/camellia-vt.txt
+/src/lib/crypto/crypto_tests/t_cf2
+/src/lib/crypto/crypto_tests/t_cf2.output
+/src/lib/crypto/crypto_tests/t_cksum4
+/src/lib/crypto/crypto_tests/t_cksum5
+/src/lib/crypto/crypto_tests/t_cksums
+/src/lib/crypto/crypto_tests/t_cmac
+/src/lib/crypto/crypto_tests/t_cts
+/src/lib/crypto/crypto_tests/t_decrypt
+/src/lib/crypto/crypto_tests/t_derive
+/src/lib/crypto/crypto_tests/t_encrypt
+/src/lib/crypto/crypto_tests/t_fork
+/src/lib/crypto/crypto_tests/t_hmac
+/src/lib/crypto/crypto_tests/t_mddriver
+/src/lib/crypto/crypto_tests/t_mddriver4
+/src/lib/crypto/crypto_tests/t_nfold
+/src/lib/crypto/crypto_tests/t_prf
+/src/lib/crypto/crypto_tests/t_prf.output
+/src/lib/crypto/crypto_tests/t_sha2
+/src/lib/crypto/crypto_tests/t_short
+/src/lib/crypto/crypto_tests/t_str2key
+/src/lib/crypto/crypto_tests/vk.txt
+/src/lib/crypto/crypto_tests/vt.txt
+
+/src/lib/gssapi/merged-gssapi-header.h
+
+/src/lib/gssapi/generic/errmap.h
+/src/lib/gssapi/generic/gssapi.h
+/src/lib/gssapi/generic/gssapi_err_generic.[ch]
+/src/lib/gssapi/generic/t_seqstate
+
+/src/lib/gssapi/krb5/error_map.h
+/src/lib/gssapi/krb5/gssapi_err_krb5.[ch]
+
+/src/lib/kadm5/chpass_util_strings.[ch]
+/src/lib/kadm5/kadm_err.[ch]
+
+/src/lib/kdb/adb_err.[ch]
+
+/src/lib/kdb/t_sort_key_data
+/src/lib/kdb/t_stringattr
+/src/lib/kdb/t_ulog
+/src/lib/kdb/test.ulog
+
+/src/lib/krad/t_attr
+/src/lib/krad/t_attrset
+/src/lib/krad/t_client
+/src/lib/krad/t_code
+/src/lib/krad/t_packet
+/src/lib/krad/t_remote
+
+/src/lib/krb5/ccache/kcmrpc.c
+/src/lib/krb5/ccache/kcmrpc.h
+/src/lib/krb5/ccache/t_cc
+/src/lib/krb5/ccache/t_cccol
+/src/lib/krb5/ccache/t_cccursor
+/src/lib/krb5/ccache/t_marshal
+/src/lib/krb5/ccache/testcache
+
+/src/lib/krb5/error_tables/*_err.[ch]
+
+/src/lib/krb5/keytab/t_keytab
+
+/src/lib/krb5/krb/t_authdata
+/src/lib/krb5/krb/t_cc_config
+/src/lib/krb5/krb/t_copy_context
+/src/lib/krb5/krb/t_deltat
+/src/lib/krb5/krb/t_etypes
+/src/lib/krb5/krb/t_expand
+/src/lib/krb5/krb/t_expire_warn
+/src/lib/krb5/krb/t_get_etype_info
+/src/lib/krb5/krb/t_in_ccache
+/src/lib/krb5/krb/t_kerb
+/src/lib/krb5/krb/t_pac
+/src/lib/krb5/krb/t_parse_host_string
+/src/lib/krb5/krb/t_princ
+/src/lib/krb5/krb/t_ser
+/src/lib/krb5/krb/t_vfy_increds
+/src/lib/krb5/krb/t_walk_rtree
+/src/lib/krb5/krb/t_response_items
+/src/lib/krb5/krb/t_sname_match
+/src/lib/krb5/krb/t_valid_times
+
+/src/lib/krb5/os/t_expand_path
+/src/lib/krb5/os/t_locate_kdc
+/src/lib/krb5/os/t_std_conf
+/src/lib/krb5/os/t_trace
+
+/src/lib/krb5/rcache/t_memrcache
+/src/lib/krb5/rcache/t_rcfile2
+/src/lib/krb5/rcache/testrcache
+
+/src/lib/krb5/unicode/.links
+/src/lib/krb5/unicode/ucdata.[ch]
+/src/lib/krb5/unicode/ucgendat.c
+/src/lib/krb5/unicode/uctable.h
+/src/lib/krb5/unicode/ure.[ch]
+/src/lib/krb5/unicode/urestubs.c
+
+/src/lib/rpc/types.stamp
+
+/src/lib/rpc/unit-test/client
+/src/lib/rpc/unit-test/server
+
+/src/man/*.sub
+
+/src/plugins/kdb/db2/libdb2/test/__dbtest
+/src/plugins/kdb/db2/libdb2/test/dbtest
+
+/src/plugins/kdb/ldap/ldap_util/getdate.c
+/src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util
+
+/src/plugins/preauth/pkinit/pkinit_kdf_test
+
+/src/plugins/preauth/spake/t_vectors
+
+/src/po/*.mo
+
+/src/kprop/kprop
+/src/kprop/kpropd
+/src/kprop/kproplog
+
+/src/tests/adata
+/src/tests/au.log
+/src/tests/etinfo
+/src/tests/forward
+/src/tests/gcred
+/src/tests/hist
+/src/tests/hooks
+/src/tests/hrealm
+/src/tests/icinterleave
+/src/tests/icred
+/src/tests/kdbtest
+/src/tests/kdc.conf
+/src/tests/krb5.conf
+/src/tests/localauth
+/src/tests/plugorder
+/src/tests/rdreq
+/src/tests/replay
+/src/tests/responder
+/src/tests/s2p
+/src/tests/s4u2proxy
+/src/tests/s4u2self
+/src/tests/t_inetd
+/src/tests/unlockiter
+
+/src/tests/asn.1/expected_encode.out
+/src/tests/asn.1/expected_trval.out
+/src/tests/asn.1/krb5_decode_leak
+/src/tests/asn.1/krb5_decode_test
+/src/tests/asn.1/krb5_encode_test
+/src/tests/asn.1/t_trval
+/src/tests/asn.1/test.out
+/src/tests/asn.1/trval.out
+
+/src/tests/create/kdb5_mkdums
+
+/src/tests/gss-threads/gss-client
+/src/tests/gss-threads/gss-server
+
+/src/tests/gssapi/ccinit
+/src/tests/gssapi/ccrefresh
+/src/tests/gssapi/reload
+/src/tests/gssapi/t_accname
+/src/tests/gssapi/t_add_cred
+/src/tests/gssapi/t_bindings
+/src/tests/gssapi/t_ccselect
+/src/tests/gssapi/t_ciflags
+/src/tests/gssapi/t_context
+/src/tests/gssapi/t_credstore
+/src/tests/gssapi/t_enctypes
+/src/tests/gssapi/t_err
+/src/tests/gssapi/t_export_cred
+/src/tests/gssapi/t_export_name
+/src/tests/gssapi/t_gssexts
+/src/tests/gssapi/t_imp_cred
+/src/tests/gssapi/t_imp_name
+/src/tests/gssapi/t_invalid
+/src/tests/gssapi/t_inq_cred
+/src/tests/gssapi/t_inq_mechs_name
+/src/tests/gssapi/t_iov
+/src/tests/gssapi/t_lifetime
+/src/tests/gssapi/t_namingexts
+/src/tests/gssapi/t_oid
+/src/tests/gssapi/t_pcontok
+/src/tests/gssapi/t_prf
+/src/tests/gssapi/t_s4u
+/src/tests/gssapi/t_s4u2proxy_krb5
+/src/tests/gssapi/t_saslname
+/src/tests/gssapi/t_spnego
+/src/tests/gssapi/t_srcattrs
+/src/tests/gssapi/t_store_cred
+/src/tests/gssapi/t_inq_ctx
+
+/src/tests/hammer/kdc5_hammer
+
+/src/tests/misc/test_chpw_message
+/src/tests/misc/test_cxx_gss
+/src/tests/misc/test_cxx_k5int
+/src/tests/misc/test_cxx_kadm5
+/src/tests/misc/test_cxx_krb5
+/src/tests/misc/test_cxx_rpc
+/src/tests/misc/test_getpw
+
+/src/tests/ldap
+/src/tests/mkeystash_compat/bigendian
+/src/tests/mkeystash_compat/kdc.conf
+/src/tests/mkeystash_compat/krb5.conf
+
+/src/tests/verify/kdb5_verify
+
+/src/util/et/compile_et
+/src/util/et/et?.[ch]
+/src/util/et/t_com_err
+/src/util/et/test?.[ch]
+/src/util/et/test_et
+
+/src/util/gss-kernel-lib/autoconf.h
+/src/util/gss-kernel-lib/com_err.h
+/src/util/gss-kernel-lib/gssapi/
+/src/util/gss-kernel-lib/gssapi*.h
+/src/util/gss-kernel-lib/k5-*.h
+/src/util/gss-kernel-lib/k5seal*.c
+/src/util/gss-kernel-lib/k5unseal*.c
+/src/util/gss-kernel-lib/krb5.h
+/src/util/gss-kernel-lib/krb5/
+/src/util/gss-kernel-lib/osconf.h
+/src/util/gss-kernel-lib/port-sockets.h
+/src/util/gss-kernel-lib/profile.h
+/src/util/gss-kernel-lib/socket-utils.h
+/src/util/gss-kernel-lib/t_kgss_kernel
+/src/util/gss-kernel-lib/t_kgss_user
+/src/util/gss-kernel-lib/util_*.c
+
+/src/util/k5ev/rename.h
+
+/src/util/profile/*.bak
+/src/util/profile/modtest.conf
+/src/util/profile/prof_err.[ch]
+/src/util/profile/profile.h
+/src/util/profile/test?.ini
+/src/util/profile/test_include_dir/
+/src/util/profile/test_load
+/src/util/profile/test_parse
+/src/util/profile/test_profile
+/src/util/profile/test_vtable
+/src/util/profile/testinc.ini
+/src/util/profile/testinc2.ini
+
+/src/util/ss/ct_c.awk
+/src/util/ss/ct_c.sed
+/src/util/ss/mk_cmds
+/src/util/ss/ss_err.[ch]
+/src/util/ss/std_rqs.c
+
+/src/util/support/libkrb5support.exports
+/src/util/support/t_base64
+/src/util/support/t_hashtab
+/src/util/support/t_hex
+/src/util/support/t_json
+/src/util/support/t_k5buf
+/src/util/support/t_path
+/src/util/support/t_path_win
+/src/util/support/t_unal
+/src/util/support/t_utf8
+/src/util/support/t_utf16
+
+/src/util/verto/rename.h
+
+/src/plugins/kdb/db2/libdb2/test/t.be.db
+/src/plugins/kdb/db2/libdb2/test/t.le.db
+
+/src/windows/installer/wix/custom/custom.exp
+/src/windows/installer/wix/kfw.wixobj
+/src/windows/installer/wix/kfw.wixpdb
+
+/src/windows/leash/htmlhelp/MITKerberosHelp.chm
+/src/windows/leash/kfwribbon.bml
+/src/windows/leash/kfwribbon.h
+/src/windows/leash/kfwribbon.rc
+/src/windows/leash/out2con.sav
-Copyright (C) 1985-2022 by the Massachusetts Institute of Technology.
+Copyright (C) 1985-2023 by the Massachusetts Institute of Technology.
All rights reserved.
======================================================================
+ Copyright (C) 2022 United States Government as represented by the
+ Secretary of the Navy. All rights reserved.
+
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+
+ * Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+
+ * Redistributions in binary form must reproduce the above
+ copyright notice, this list of conditions and the following
+ disclaimer in the documentation and/or other materials provided
+ with the distribution.
+
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ OF THE POSSIBILITY OF SUCH DAMAGE.
+
+======================================================================
+
Copyright (C) 1991, 1992, 1994 by Cygnus Support.
Permission to use, copy, modify, and distribute this software and
- Kerberos Version 5, Release 1.20
+ Kerberos Version 5, Release 1.21
Release Notes
The MIT Kerberos Team
Copyright and Other Notices
---------------------------
-Copyright (C) 1985-2022 by the Massachusetts Institute of Technology
+Copyright (C) 1985-2023 by the Massachusetts Institute of Technology
and its contributors. All rights reserved.
Please see the file named NOTICE for additional notices.
interface to our bug database is read-only for guests, and the primary
way to interact with our bug database is via email.
-PAC transition
---------------
+PAC transitions
+---------------
Beginning with release 1.20, the KDC will include minimal PACs in
tickets instead of AD-SIGNEDPATH authdata. S4U requests (protocol
transition and constrained delegation) must now contain valid PACs in
-the incoming tickets. If only some KDCs in a realm have been upgraded
-across version 1.20, the upgraded KDCs will reject S4U requests
-containing tickets from non-upgraded KDCs and vice versa.
+the incoming tickets. Beginning with release 1.21, service ticket
+PACs will contain a new KDC checksum buffer, to mitigate a hash
+collision attack against the old KDC checksum. If only some KDCs in a
+realm have been upgraded across versions 1.20 or 1.21, the upgraded
+KDCs will reject S4U requests containing tickets from non-upgraded
+KDCs and vice versa.
+
+Triple-DES and RC4 transitions
+------------------------------
-Triple-DES transition
----------------------
+Beginning with the krb5-1.21 release, the KDC will not issue tickets
+with triple-DES or RC4 session keys unless explicitly configured using
+the new allow_des3 and allow_rc4 variables in [libdefaults]. To
+facilitate the negotiation of session keys, the KDC will assume that
+all services can handle aes256-sha1 session keys unless the service
+principal has a session_enctypes string attribute.
Beginning with the krb5-1.19 release, a warning will be issued if
initial credentials are acquired using the des3-cbc-sha1 encryption
-type. In future releases, this encryption type will be disabled by
-default and eventually removed.
+type. Beginning with the krb5-1.21 release, a warning will also be
+issued for the arcfour-hmac encryption type. In future releases,
+these encryption types will be disabled by default and eventually
+removed.
-Beginning with the krb5-1.18 release, single-DES encryption types have
-been removed.
+Beginning with the krb5-1.18 release, all support for single-DES
+encryption types has been removed.
-Major changes in 1.20.1 (2022-11-15)
+Major changes in 1.21.2 (2023-08-14)
------------------------------------
This is a bug fix release.
-* Fix integer overflows in PAC parsing [CVE-2022-42898].
-
-* Fix null deref in KDC when decoding invalid NDR.
+* Fix double-free in KDC TGS processing [CVE-2023-39975].
-* Fix memory leak in OTP kdcpreauth module.
+krb5-1.21.2 changes by ticket ID
+--------------------------------
-* Fix PKCS11 module path search.
+9101 Fix double-free in KDC TGS processing
-krb5-1.20.1 changes by ticket ID
---------------------------------
+Major changes in 1.21.1 (2023-07-10)
+------------------------------------
-9061 Fix memory leak in SPAKE kdcpreauth module
-9062 Fix net-server.c when AI_NUMERICSERV is undefined
-9063 Fix memory leak in OTP kdcpreauth module
-9064 Free verto context later in KDC cleanup
-9065 Fix uncommon PKINIT memory leak
-9067 Fix PKCS11 module path search
-9073 Fix null deref in KDC when decoding invalid NDR
-9074 Fix integer overflows in PAC parsing
+This is a bug fix release.
-Major changes in 1.20 (2022-05-26)
-----------------------------------
+* Fix potential uninitialized pointer free in kadm5 XDR parsing
+ [CVE-2023-36054].
-Administrator experience:
+krb5-1.21.1 changes by ticket ID
+--------------------------------
-* Added a "disable_pac" realm relation to suppress adding PAC authdata
- to tickets, for realms which do not need to support S4U requests.
+9099 Ensure array count consistency in kadm5 RPC
-* Most credential cache types will use atomic replacement when a cache
- is reinitialized using kinit or refreshed from the client keytab.
+Major changes in 1.21 (2023-06-05)
+----------------------------------
-* kprop can now propagate databases with a dump size larger than 4GB,
- if both the client and server are upgraded.
+User experience:
-* kprop can now work over NATs that change the destination IP address,
- if the client is upgraded.
+* Added a credential cache type providing compatibility with the macOS
+ 11 native credential cache.
Developer experience:
-* Updated the KDB interface. The sign_authdata() method is replaced
- with the issue_pac() method, allowing KDB modules to add logon info
- and other buffers to the PAC issued by the KDC.
+* libkadm5 will use the provided krb5_context object to read
+ configuration values, instead of creating its own.
-* Host-based initiator names are better supported in the GSS krb5
- mechanism.
+* Added an interface to retrieve the ticket session key from a GSS
+ context.
Protocol evolution:
-* Replaced AD-SIGNEDPATH authdata with minimal PACs.
+* The KDC will no longer issue tickets with RC4 or triple-DES session
+ keys unless explicitly configured with the new allow_rc4 or
+ allow_des3 variables respectively.
-* To avoid spurious replay errors, password change requests will not
- be attempted over UDP until the attempt over TCP fails.
+* The KDC will assume that all services can handle aes256-sha1 session
+ keys unless the service principal has a session_enctypes string
+ attribute.
-* PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
+* Support for PAC full KDC checksums has been added to mitigate an
+ S4U2Proxy privilege escalation attack.
-Code quality:
+* The PKINIT client will advertise a more modern set of supported CMS
+ algorithms.
-* Updated all code using OpenSSL to be compatible with OpenSSL 3.
+Code quality:
-* Reorganized the libk5crypto build system to allow the OpenSSL
- back-end to pull in material from the builtin back-end depending on
- the OpenSSL version.
+* Removed unused code in libkrb5, libkrb5support, and the PKINIT
+ module.
-* Simplified the PRNG logic to always use the platform PRNG.
+* Modernized the KDC code for processing TGS requests, the code for
+ encrypting and decrypting key data, the PAC handling code, and the
+ GSS library packet parsing and composition code.
-* Converted the remaining Tcl tests to Python.
+* Improved the test framework's detection of memory errors in daemon
+ processes when used with asan.
-krb5-1.20 changes by ticket ID
+krb5-1.21 changes by ticket ID
------------------------------
-7707 Credential cache API does not support atomic reinitialization
-8010 gss_store_cred should initialize ccache and work with collections
-8970 Wrong Encryption types shown in MIT Kerberos Ticket Manager on Windows
-8976 all-liblinks build target fails when symlinks not supported
-8977 Allow kprop over more types of NATs
-8978 Support host-based GSS initiator names
-8980 Add APIs for marshalling credentials
-8981 Documentation__krb5.conf
-8983 Infer name type when creating principals
-8988 Only require one valid pkinit anchor/pool value
-8990 Add KCM_OP_GET_CRED_LIST for faster iteration
-8991 Fix PKINIT memory leaks
-8994 Fix gss-krb5 handling of high sequence numbers
-8995 KCM interop issue with KRB5_TC_ flags
-8997 Use KCM_OP_RETRIEVE in KCM client
-8998 Simplify krb5_cccol_have_content()
-8999 Add additional KRB5_TRACE points
-9000 Fix multiple UPN handling in PKINIT client certs
-9002 Check for undefined kadm5 policy mask bits
-9003 Add duplicate check to kadm5_create_policy()
-9009 Update IRC pointer in resources.rst
-9010 Add MAXHOSTNAME guard in Windows public header
-9011 Fix some principal realm canonicalization cases
-9012 Allow kinit with keytab to defer canonicalization
-9013 Fix kadmin -k with fallback or referral realm
-9017 Clarify and correct interposer plugin docs
-9019 make check fails: OSError: AF_UNIX path too long
-9022 Potential integer overflows
-9024 Find gss_get_mic_iov extensions in GSS modules
-9025 Use version-independent OpenLDAP links in docs
-9027 Add OpenLDAP advice to princ_dns.rst
-9028 Constify name field in four plugin vtables
-9031 Fix verification of RODC-issued PAC KDC signature
-9032 Always use platform PRNG
-9034 Use builtin MD4, RC4 for OpenSSL 3.0
-9035 Avoid use after free during libkrad cleanup
-9036 Support larger RADIUS attributes in libkrad
-9037 Race condition in krb5_set_password()
-9038 Issue an error from KDC on S4U2Self failures
-9039 Fix PAC handling of authtimes after y2038
-9040 Use 14 instead of 9 for unkeyed SHA-1 checksum
-9041 Add PA-REDHAT-IDP-OAUTH2 padata type
-9042 Don't fail krb5_cc_select() for no default realm
-9043 Add PAC ticket signature APIs
-9044 Replace AD-SIGNEDPATH with minimal PACs
-9047 Avoid passing null for asprintf strings
-9048 Pass client flag to KDB for client preauth match
-9049 Add replace_reply_key kdcpreauth callback
-9050 Implement replaced_reply_key input to issue_pac()
-9051 Clarify certauth interface documentation
-9056 Fix iprop with fallback
-9060 Read GSS configuration files with mtime 0
+9052 Support macOS 11 native credential cache
+9053 Make kprop work for dump files larger than 4GB
+9054 Replace macros with typedefs in gssrpc types.h
+9055 Use SHA-256 instead of SHA-1 for PKINIT CMS digest
+9057 Omit LDFLAGS from krb5-config --libs output
+9058 Add configure variable for default PKCS#11 module
+9059 Use context profile for libkadm5 configuration
+9066 Set reasonable supportedCMSTypes in PKINIT
+9069 Update error checking for OpenSSL CMS_verify
+9071 Add and use ts_interval() helper
+9072 Avoid small read overrun in UTF8 normalization
+9076 Use memmove() in Unicode functions
+9077 Fix aclocal.m4 syntax error for autoconf 2.72
+9078 Fix profile crash on memory exhaustion
+9079 Fix preauth crash on memory exhaustion
+9080 Fix gic_keytab crash on memory exhaustion
+9082 Fix policy DB fallback error handling
+9083 Fix kpropd crash with unrecognized option
+9084 Add PAC full checksums
+9085 Fix read overruns in SPNEGO parsing
+9086 Fix possible double-free during KDB creation
+9087 Fix meridian type in getdate.y
+9088 Use control flow guard flag in Windows builds
+9089 Add pac_privsvr_enctype string attribute
+9090 Convey realm names to certauth modules
+9091 Add GSS_C_INQ_ODBC_SESSION_KEY
+9092 Fix maintainer-mode build for binutils 2.37
+9093 Add PA-REDHAT-PASSKEY padata type
Acknowledgements
----------------
Peter Eriksson
Juha Erkkilä
Gilles Espinasse
+ Sergey Fedorov
Ronni Feldt
Bill Fellows
JC Ferguson
Brian Johannesmeyer
Joel Johnson
Lutz Justen
+ Ganesh Kamath
Alexander Karaivanov
Anders Kaseorg
Bar Katz
Paul Moore
Keiichi Mori
Michael Morony
+ Robert Morris
Sam Morris
Zbysek Mraz
Edward Murrell
Tianjiao Yin
Nickolai Zeldovich
Bean Zhang
+ ChenChen Zhou
Hanz van Zijst
Gertjan Zwartjes
The above is not an exhaustive list; many others have contributed in
various ways to the MIT Kerberos development effort over the years.
-Other acknowledgments (for bug reports and patches) are in the
-doc/CHANGES file.
[**-x** *db_args*]
[command args...]
-.. _kadmin_synopsis_end:
-
DESCRIPTION
-----------
Specifies the database specific arguments. See the next section
for supported options.
-.. _kadmin_options_end:
-
Starting with release 1.14, if any command-line arguments remain after
the options, they will be treated as a single query to be executed.
This mode of operation is intended for scripts and behaves differently
Principal "jennifer@ATHENA.MIT.EDU" created.
kadmin:
-.. _add_principal_end:
-
.. _modify_principal:
modify_principal
authentication attempts without enough time between them according
to its password policy) so that it can successfully authenticate.
-.. _modify_principal_end:
-
.. _rename_principal:
rename_principal
Alias: **renprinc**
-.. _rename_principal_end:
-
.. _delete_principal:
delete_principal
Alias: **delprinc**
-.. _delete_principal_end:
-
.. _change_password:
change_password
Password for systest@BLEEP.COM changed.
kadmin:
-.. _change_password_end:
-
.. _purgekeys:
purgekeys
This command requires the **modify** privilege.
-.. _purgekeys_end:
-
.. _get_principal:
get_principal
tlyu/admin@BLEEP.COM 786100034 0 0
kadmin:
-.. _get_principal_end:
-
.. _list_principals:
list_principals
testuser@SECURE-TEST.OV.COM
kadmin:
-.. _list_principals_end:
-
.. _get_strings:
get_strings
Alias: **getstrs**
-.. _get_strings_end:
-
.. _set_string:
set_string
is in the same format as those used by the **pkinit_cert_match**
option in :ref:`krb5.conf(5)`. (New in release 1.16.)
+**pac_privsvr_enctype**
+ Forces the encryption type of the PAC KDC checksum buffers to the
+ specified encryption type for tickets issued to this server, by
+ deriving a key from the local krbtgt key if it is of a different
+ encryption type. It may be necessary to set this value to
+ "aes256-sha1" on the cross-realm krbtgt entry for an Active
+ Directory realm when using aes-sha2 keys on the local krbtgt
+ entry.
+
This command requires the **modify** privilege.
Alias: **setstr**
set_string host/foo.mit.edu session_enctypes aes128-cts
set_string user@FOO.COM otp "[{""type"":""hotp"",""username"":""al""}]"
-.. _set_string_end:
-
.. _del_string:
del_string
Alias: **delstr**
-.. _del_string_end:
-
.. _add_policy:
add_policy
kadmin: add_policy -maxlife "2 days" -minlength 5 guests
kadmin:
-.. _add_policy_end:
-
.. _modify_policy:
modify_policy
Alias: **modpol**
-.. _modify_policy_end:
-
.. _delete_policy:
delete_policy
(yes/no): yes
kadmin:
-.. _delete_policy_end:
-
.. _get_policy:
get_policy
With the LDAP KDC database module, the reference count field is not
meaningful.
-.. _get_policy_end:
-
.. _list_policies:
list_policies
test-pol-nopw
kadmin:
-.. _list_policies_end:
-
.. _ktadd:
ktadd
FILE:/tmp/foo-new-keytab
kadmin:
-.. _ktadd_end:
-
.. _ktremove:
ktremove
FILE:/etc/krb5.keytab
kadmin:
-.. _ktremove_end:
-
lock
~~~~
If you need to install the Kerberos V5 programs on an application
server, please refer to the Kerberos V5 Installation Guide. Once you
have installed the software, you need to add that host to the Kerberos
-database (see :ref:`add_mod_del_princs`), and generate a keytab for
-that host, that contains the host's key. You also need to make sure
-the host's clock is within your maximum clock skew of the KDCs.
+database (see :ref:`principals`), and generate a keytab for that host,
+that contains the host's key. You also need to make sure the host's
+clock is within your maximum clock skew of the KDCs.
Keytabs
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
To generate a keytab, or to add a principal to an existing keytab, use
-the **ktadd** command from kadmin.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _ktadd:
- :end-before: _ktadd_end:
-
-
-Examples
-########
-
-Here is a sample session, using configuration files that enable only
-AES encryption::
+the **ktadd** command from kadmin. Here is a sample session, using
+configuration files that enable only AES encryption::
kadmin: ktadd host/daffodil.mit.edu@ATHENA.MIT.EDU
Entry for principal host/daffodil.mit.edu with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab
Entry for principal host/daffodil.mit.edu with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab
- kadmin:
Removing principals from keytabs
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
To remove a principal from an existing keytab, use the kadmin
-**ktremove** command.
+**ktremove** command::
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _ktremove:
- :end-before: _ktremove_end:
+ kadmin: ktremove host/daffodil.mit.edu@ATHENA.MIT.EDU
+ Entry for principal host/daffodil.mit.edu with kvno 2 removed from keytab FILE:/etc/krb5.keytab.
+ Entry for principal host/daffodil.mit.edu with kvno 2 removed from keytab FILE:/etc/krb5.keytab.
Using a keytab to acquire client credentials
The libdefaults section may contain any of the following relations:
+**allow_des3**
+ Permit the KDC to issue tickets with des3-cbc-sha1 session keys.
+ In future releases, this flag will allow des3-cbc-sha1 to be used
+ at all. The default value for this tag is false. (Added in
+ release 1.21.)
+
+**allow_rc4**
+ Permit the KDC to issue tickets with arcfour-hmac session keys.
+ In future releases, this flag will allow arcfour-hmac to be used
+ at all. The default value for this tag is false. (Added in
+ release 1.21.)
+
**allow_weak_crypto**
If this flag is set to false, then weak encryption types (as noted
in :ref:`Encryption_types` in :ref:`kdc.conf(5)`) will be filtered
All keyword/values are optional. *modname* specifies the location
of a library implementing PKCS #11. If a value is encountered
with no keyword, it is assumed to be the *modname*. If no
- module-name is specified, the default is ``opensc-pkcs11.so``.
+ module-name is specified, the default is |pkcs11_modname|.
``slotid=`` and/or ``token=`` may be specified to force the use of
a particular smard card reader or token if there is more than one
available. ``certid=`` and/or ``certlabel=`` may be specified to
ldap_service_password_file
ldap_servers
- 8. Create the realm using :ref:`kdb5_ldap_util(8)` (see
- :ref:`ldap_create_realm`)::
+ 8. Create the realm using :ref:`kdb5_ldap_util(8)`:
kdb5_ldap_util create -subtrees ou=users,dc=example,dc=com -s
commands and options.
-kadmin options
---------------
-
-You can invoke :ref:`kadmin(1)` or kadmin.local with any of the
-following options:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: kadmin_synopsis:
- :end-before: kadmin_synopsis_end:
-
-**OPTIONS**
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _kadmin_options:
- :end-before: _kadmin_options_end:
-
-
-Date Format
------------
-
-For the supported date-time formats see :ref:`getdate` section
-in :ref:`datetime`.
-
+.. _principals:
Principals
----------
Each entry in the Kerberos database contains a Kerberos principal and
the attributes and policies associated with that principal.
-
-.. _add_mod_del_princs:
-
-Adding, modifying and deleting principals
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
To add a principal to the database, use the :ref:`kadmin(1)`
-**add_principal** command.
-
-To modify attributes of a principal, use the kadmin
-**modify_principal** command.
-
-To delete a principal, use the kadmin **delete_principal** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _add_principal:
- :end-before: _add_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _modify_principal:
- :end-before: _modify_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _delete_principal:
- :end-before: _delete_principal_end:
+**add_principal** command. User principals should usually be created
+with the ``+requires_preauth -allow_svr`` options to help mitigate
+dictionary attacks (see :ref:`dictionary`)::
+ kadmin: addprinc +requires_preauth -allow_svr alice
+ Enter password for principal "alice@KRBTEST.COM":
+ Re-enter password for principal "alice@KRBTEST.COM":
-Examples
-########
+User principals which will authenticate with :ref:`pkinit` should
+instead by created with the ``-nokey`` option:
-If you want to create a principal which is contained by a LDAP object,
-all you need to do is::
+ kadmin: addprinc -nokey alice
- kadmin: addprinc -x dn=cn=jennifer,dc=example,dc=com jennifer
- No policy specified for "jennifer@ATHENA.MIT.EDU";
- defaulting to no policy.
- Enter password for principal jennifer@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal jennifer@ATHENA.MIT.EDU: <=Type it again.
- Principal "jennifer@ATHENA.MIT.EDU" created.
- kadmin:
-
-If you want to create a principal under a specific LDAP container and
-link to an existing LDAP object, all you need to do is::
-
- kadmin: addprinc -x containerdn=dc=example,dc=com -x linkdn=cn=david,dc=example,dc=com david
- No policy specified for "david@ATHENA.MIT.EDU";
- defaulting to no policy.
- Enter password for principal david@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal david@ATHENA.MIT.EDU: <=Type it again.
- Principal "david@ATHENA.MIT.EDU" created.
- kadmin:
+Service principals can be created with the ``-nokey`` option;
+long-term keys will be added when a keytab is generated::
-If you want to associate a ticket policy to a principal, all you need
-to do is::
+ kadmin: addprinc -nokey host/foo.mit.edu
+ kadmin: ktadd -k foo.keytab host/foo.mit.edu
+ Entry for principal host/foo.mit.edu with kvno 1, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:foo.keytab.
+ Entry for principal host/foo.mit.edu with kvno 1, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:foo.keytab.
- kadmin: modprinc -x tktpolicy=userpolicy david
- Principal "david@ATHENA.MIT.EDU" modified.
- kadmin:
-
-If, on the other hand, you want to set up an account that expires on
-January 1, 2000, that uses a policy called "stduser", with a temporary
-password (which you want the user to change immediately), you would
-type the following::
-
- kadmin: addprinc david -expire "1/1/2000 12:01am EST" -policy stduser +needchange
- Enter password for principal david@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal
- david@ATHENA.MIT.EDU: <= Type it again.
- Principal "david@ATHENA.MIT.EDU" created.
- kadmin:
+To modify attributes of an existing principal, use the kadmin
+**modify_principal** command::
-If you want to delete a principal::
+ kadmin: modprinc -expire tomorrow alice
+ Principal "alice@KRBTEST.COM" modified.
- kadmin: delprinc jennifer
- Are you sure you want to delete the principal
- "jennifer@ATHENA.MIT.EDU"? (yes/no): yes
- Principal "jennifer@ATHENA.MIT.EDU" deleted.
- Make sure that you have removed this principal from
- all ACLs before reusing.
- kadmin:
+To delete a principal, use the kadmin **delete_principal** command::
+ kadmin: delprinc alice
+ Are you sure you want to delete the principal "alice@KRBTEST.COM"? (yes/no): yes
+ Principal "alice@KRBTEST.COM" deleted.
+ Make sure that you have removed this principal from all ACLs before reusing.
-Retrieving information about a principal
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To change a principal's password, use the kadmin **change_password**
+command. Password changes made through kadmin are subject to the same
+password policies as would apply to password changes made through
+:ref:`kpasswd(1)`.
-To retrieve a listing of the attributes and/or policies associated
-with a principal, use the :ref:`kadmin(1)` **get_principal** command.
+To view the attributes of a principal, use the kadmin`
+**get_principal** command.
To generate a listing of principals, use the kadmin
**list_principals** command.
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _get_principal:
- :end-before: _get_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _list_principals:
- :end-before: _list_principals_end:
-
-
-Changing passwords
-~~~~~~~~~~~~~~~~~~
-
-To change a principal's password use the :ref:`kadmin(1)`
-**change_password** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _change_password:
- :end-before: _change_password_end:
-
-.. note::
-
- Password changes through kadmin are subject to the same
- password policies as would apply to password changes through
- :ref:`kpasswd(1)`.
-
.. _policies:
and character classes a password must contain, and the number of old
passwords kept in the database.
+To add a new policy, use the :ref:`kadmin(1)` **add_policy** command::
-Adding, modifying and deleting policies
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To add a new policy, use the :ref:`kadmin(1)` **add_policy** command.
+ kadmin: addpol -maxlife "1 year" -history 3 stduser
To modify attributes of a principal, use the kadmin **modify_policy**
+command. To delete a policy, use the kadmin **delete_policy**
command.
-To delete a policy, use the kadmin **delete_policy** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _add_policy:
- :end-before: _add_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _modify_policy:
- :end-before: _modify_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _delete_policy:
- :end-before: _delete_policy_end:
-
-.. note::
-
- You must cancel the policy from *all* principals before
- deleting it. The *delete_policy* command will fail if the policy
- is in use by any principals.
-
-
-Retrieving policies
-~~~~~~~~~~~~~~~~~~~
+To associate a policy with a principal, use the kadmin
+**modify_principal** command with the **-policy** option:
-To retrieve a policy, use the :ref:`kadmin(1)` **get_policy** command.
+ kadmin: modprinc -policy stduser alice
+ Principal "alice@KRBTEST.COM" modified.
-You can retrieve the list of policies with the kadmin
-**list_policies** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _get_policy:
- :end-before: _get_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _list_policies:
- :end-before: _list_policies_end:
-
-
-Policies and principals
-~~~~~~~~~~~~~~~~~~~~~~~
-
-Policies can be applied to principals as they are created by using
-the **-policy** flag to :ref:`add_principal`. Existing principals can
-be modified by using the **-policy** or **-clearpolicy** flag to
-:ref:`modify_principal`.
+A principal entry may be associated with a nonexistent policy, either
+because the policy did not exist at the time of associated or was
+deleted afterwards. kadmin will warn when associated a principal with
+a nonexistent policy, and will annotate the policy name with "[does
+not exist]" in the **get_principal** output.
.. _updating_history_key:
-----------------------------------
The :ref:`kdb5_util(8)` command is the primary tool for administrating
-the Kerberos database.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_synopsis:
- :end-before: _kdb5_util_synopsis_end:
-
-**OPTIONS**
+the Kerberos database when using the DB2 or LMDB modules (see
+:ref:`dbtypes`). Creating a database is described in
+:ref:`create_db`.
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_options:
- :end-before: _kdb5_util_options_end:
-
-.. toctree::
- :maxdepth: 1
+To create a stash file using the master password (because the database
+was not created with one using the ``create -s`` flag, or after
+restoring from a backup which did not contain the stash file), use the
+kdb5_util **stash** command::
+ $ kdb5_util stash
+ kdb5_util: Cannot find/read stored master key while reading master key
+ kdb5_util: Warning: proceeding without master key
+ Enter KDC database master key: <= Type the KDC database master password.
-Dumping a Kerberos database to a file
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To destroy a database, use the kdb5_util destroy command::
-To dump a Kerberos database into a file, use the :ref:`kdb5_util(8)`
-**dump** command on one of the KDCs.
+ $ kdb5_util destroy
+ Deleting KDC database stored in '/var/krb5kdc/principal', are you sure?
+ (type 'yes' to confirm)? yes
+ OK, deleting database '/var/krb5kdc/principal'...
+ ** Database '/var/krb5kdc/principal' destroyed.
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_dump:
- :end-before: _kdb5_util_dump_end:
+.. _restore_from_dump:
-Examples
-########
+Dumping and loading a Kerberos database
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-::
+To dump a Kerberos database into a text file for backup or transfer
+purposes, use the :ref:`kdb5_util(8)` **dump** command on one of the
+KDCs::
- shell% kdb5_util dump dumpfile
- shell%
+ $ kdb5_util dump dumpfile
- shell% kbd5_util dump -verbose dumpfile
+ $ kbd5_util dump -verbose dumpfile
kadmin/admin@ATHENA.MIT.EDU
krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
kadmin/history@ATHENA.MIT.EDU
K/M@ATHENA.MIT.EDU
kadmin/changepw@ATHENA.MIT.EDU
- shell%
-If you specify which principals to dump, you must use the full
-principal, as in the following example::
+You may specify which principals to dump, using full principal names
+including realm::
- shell% kdb5_util dump -verbose dumpfile K/M@ATHENA.MIT.EDU kadmin/admin@ATHENA.MIT.EDU
+ $ kdb5_util dump -verbose someprincs K/M@ATHENA.MIT.EDU kadmin/admin@ATHENA.MIT.EDU
kadmin/admin@ATHENA.MIT.EDU
K/M@ATHENA.MIT.EDU
- shell%
-
-Otherwise, the principals will not match those in the database and
-will not be dumped::
-
- shell% kdb5_util dump -verbose dumpfile K/M kadmin/admin
- shell%
-
-If you do not specify a dump file, kdb5_util will dump the database to
-the standard output.
-
-
-.. _restore_from_dump:
-
-Restoring a Kerberos database from a dump file
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
To restore a Kerberos database dump from a file, use the
-:ref:`kdb5_util(8)` **load** command on one of the KDCs.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_load:
- :end-before: _kdb5_util_load_end:
-
+:ref:`kdb5_util(8)` **load** command::
-Examples
-########
+ $ kdb5_util load dumpfile
-To dump a single principal and later load it, updating the database:
-
-::
-
- shell% kdb5_util dump dumpfile principal@REALM
- shell%
-
- shell% kdb5_util load -update dumpfile
- shell%
+To update an existing database with a partial dump file containing
+only some principals, use the ``-update`` flag::
+ $ kdb5_util load -update someprincs
.. note::
If the database file exists, and the *-update* flag was not
given, *kdb5_util* will overwrite the existing database.
-.. note::
-
- Using kdb5_util to dump and reload the principal database is
- only necessary when upgrading from versions of krb5 prior
- to 1.2.0---newer versions will use the existing database as-is.
-
-
-.. _create_stash:
-
-Creating a stash file
-~~~~~~~~~~~~~~~~~~~~~
-
-A stash file allows a KDC to authenticate itself to the database
-utilities, such as :ref:`kadmind(8)`, :ref:`krb5kdc(8)`, and
-:ref:`kdb5_util(8)`.
-
-To create a stash file, use the :ref:`kdb5_util(8)` **stash** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_stash:
- :end-before: _kdb5_util_stash_end:
-
-
-Example
-#######
-
- shell% kdb5_util stash
- kdb5_util: Cannot find/read stored master key while reading master key
- kdb5_util: Warning: proceeding without master key
- Enter KDC database master key: <= Type the KDC database master password.
- shell%
-
-If you do not specify a stash file, kdb5_util will stash the key in
-the file specified in your :ref:`kdc.conf(5)` file.
-
-
-Creating and destroying a Kerberos database
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to create a new Kerberos database, use the
-:ref:`kdb5_util(8)` **create** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_create:
- :end-before: _kdb5_util_create_end:
-
-If you need to destroy the current Kerberos database, use the
-:ref:`kdb5_util(8)` **destroy** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_destroy:
- :end-before: _kdb5_util_destroy_end:
-
-
-Examples
-########
-
-::
-
- shell% kdb5_util -r ATHENA.MIT.EDU create -s
- Loading random data
- Initializing database '/usr/local/var/krb5kdc/principal' for realm 'ATHENA.MIT.EDU',
- master key name 'K/M@ATHENA.MIT.EDU'
- You will be prompted for the database Master Password.
- It is important that you NOT FORGET this password.
- Enter KDC database master key: <= Type the master password.
- Re-enter KDC database master key to verify: <= Type it again.
- shell%
-
- shell% kdb5_util -r ATHENA.MIT.EDU destroy
- Deleting KDC database stored in '/usr/local/var/krb5kdc/principal', are you sure?
- (type 'yes' to confirm)? <= yes
- OK, deleting database '/usr/local/var/krb5kdc/principal'...
- ** Database '/usr/local/var/krb5kdc/principal' destroyed.
- shell%
-
.. _updating_master_key:
Operations on the LDAP database
-------------------------------
-The :ref:`kdb5_ldap_util(8)` is the primary tool for administrating
-the Kerberos LDAP database. It allows an administrator to manage
-realms, Kerberos services (KDC and Admin Server) and ticket policies.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_synopsis:
- :end-before: _kdb5_ldap_util_synopsis_end:
-
-**OPTIONS**
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_options:
- :end-before: _kdb5_ldap_util_options_end:
-
-
-.. _ldap_create_realm:
-
-Creating a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to create a new realm, use the :ref:`kdb5_ldap_util(8)`
-**create** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_create:
- :end-before: _kdb5_ldap_util_create_end:
-
-
-.. _ldap_mod_realm:
-
-Modifying a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to modify a realm, use the :ref:`kdb5_ldap_util(8)`
-**modify** command as follows.
+The :ref:`kdb5_ldap_util(8)` command is the primary tool for
+administrating the Kerberos database when using the LDAP module.
+Creating an LDAP Kerberos database is describe in :ref:`conf_ldap`.
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_modify:
- :end-before: _kdb5_ldap_util_modify_end:
+To view a list of realms in the LDAP database, use the kdb5_ldap_util
+**list** command::
+ $ kdb5_ldap_util list
+ KRBTEST.COM
-Destroying a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To modify the attributes of a realm, use the kdb5_ldap_util **modify**
+command. For example, to change the default realm's maximum ticket
+life::
-If you need to destroy a Kerberos realm, use the
-:ref:`kdb5_ldap_util(8)` **destroy** command as follows.
+ $ kdb5_ldap_util modify -maxtktlife "10 hours"
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_destroy:
- :end-before: _kdb5_ldap_util_destroy_end:
+To display the attributes of a realm, use the kdb5_ldap_util **view**
+command::
+ $ kdb5_ldap_util view
+ Realm Name: KRBTEST.COM
+ Maximum Ticket Life: 0 days 00:10:00
-Retrieving information about a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+To remove a realm from the LDAP database, destroying its contents, use
+the kdb5_ldap_util **destroy** command::
-If you need to display the attributes of a realm, use the
-:ref:`kdb5_ldap_util(8)` **view** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_view:
- :end-before: _kdb5_ldap_util_view_end:
-
-
-Listing available Kerberos realms
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to display the list of the realms, use the
-:ref:`kdb5_ldap_util(8)` **list** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_list:
- :end-before: _kdb5_ldap_util_list_end:
-
-
-.. _stash_ldap:
-
-Stashing service object's password
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-The :ref:`kdb5_ldap_util(8)` **stashsrvpw** command allows an
-administrator to store the password of service object in a file. The
-KDC and Administration server uses this password to authenticate to
-the LDAP server.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_stashsrvpw:
- :end-before: _kdb5_ldap_util_stashsrvpw_end:
+ $ kdb5_ldap_util destroy
+ Deleting KDC database of 'KRBTEST.COM', are you sure?
+ (type 'yes' to confirm)? yes
+ OK, deleting database of 'KRBTEST.COM'...
+ ** Database of 'KRBTEST.COM' destroyed.
Ticket Policy operations
~~~~~~~~~~~~~~~~~~~~~~~~
-Creating a Ticket Policy
-########################
-
-To create a new ticket policy in directory , use the
-:ref:`kdb5_ldap_util(8)` **create_policy** command. Ticket policy
-objects are created under the realm container.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_create_policy:
- :end-before: _kdb5_ldap_util_create_policy_end:
-
-
-Modifying a Ticket Policy
-#########################
-
-To modify a ticket policy in directory, use the
-:ref:`kdb5_ldap_util(8)` **modify_policy** command.
+Unlike the DB2 and LMDB modules, the LDAP module supports ticket
+policy objects, which can be associated with principals to restrict
+maximum ticket lifetimes and set mandatory principal flags. Ticket
+policy objects are distinct from the password policies described
+earlier on this page, and are chiefly managed through kdb5_ldap_util
+rather than kadmin. To create a new ticket policy, use the
+kdb5_ldap_util **create_policy** command::
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_modify_policy:
- :end-before: _kdb5_ldap_util_modify_policy_end:
+ $ kdb5_ldap_util create_policy -maxrenewlife "2 days" users
+To associate a ticket policy with a principal, use the
+:ref:`kadmin(1)` **modify_principal** (or **add_principal**) command
+with the **-x tktpolicy=**\ *policy* option::
-Retrieving Information About a Ticket Policy
-############################################
+ $ kadmin.local modprinc -x tktpolicy=users alice
-To display the attributes of a ticket policy, use the
-:ref:`kdb5_ldap_util(8)` **view_policy** command.
+To remove a ticket policy reference from a principal, use the same
+command with an empty *policy*::
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_view_policy:
- :end-before: _kdb5_ldap_util_view_policy_end:
+ $ kadmin.local modprinc -x tktpolicy= alice
+To list the existing ticket policy objects, use the kdb5_ldap_util
+**list_policy** command::
-Destroying a Ticket Policy
-##########################
+ $ kdb5_ldap_util list_policy
+ users
-To destroy an existing ticket policy, use the :ref:`kdb5_ldap_util(8)`
-**destroy_policy** command.
+To modify the attributes of a ticket policy object, use the
+kdb5_ldap_util **modify_policy** command::
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_destroy_policy:
- :end-before: _kdb5_ldap_util_destroy_policy_end:
+ $ kdb5_ldap_util modify_policy -allow_svr +requires_preauth users
+To view the attributes of a ticket policy object, use the
+kdb5_ldap_util **view_policy** command::
-Listing available Ticket Policies
-#################################
+ $ kdb5_ldap_util view_policy users
+ Ticket policy: users
+ Maximum renewable life: 2 days 00:00:00
+ Ticket flags: REQUIRES_PRE_AUTH DISALLOW_SVR
-To list the name of ticket policies in a realm, use the
-:ref:`kdb5_ldap_util(8)` **list_policy** command.
+To destroy an ticket policy object, use the kdb5_ldap_util
+**destroy_policy** command::
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_list_policy:
- :end-before: _kdb5_ldap_util_list_policy_end:
+ $ kdb5_ldap_util destroy_policy users
+ This will delete the policy object 'users', are you sure?
+ (type 'yes' to confirm)? yes
+ ** policy object 'users' deleted.
.. _xrealm_authn:
+.. _dbtypes:
+
Database types
==============
The KDC chooses the session key enctype by taking the intersection of
its **permitted_enctypes** list, the list of long-term keys for the
most recent kvno of the service, and the client's requested list of
-enctypes.
+enctypes. Starting in krb5-1.21, all services are assumed to support
+aes256-cts-hmac-sha1-96; also, des3-cbc-sha1 and arcfour-hmac session
+keys will not be issued by default.
Starting in krb5-1.11, it is possible to set a string attribute on a
service principal to control what session key enctypes the KDC may
-issue for service tickets for that principal. See :ref:`set_string`
-in :ref:`kadmin(1)` for details.
+issue for service tickets for that principal, overriding the service's
+long-term keys and the assumption of aes256-cts-hmac-sha1-96 support.
+See :ref:`set_string` in :ref:`kadmin(1)` for details.
Choosing enctypes for a service
acceptable risk for your environment and the weak enctypes are
required for backward compatibility.
+**allow_des3**
+ was added in release 1.21 and defaults to *false*. Unless this
+ flag is set to *true*, the KDC will not issue tickets with
+ des3-cbc-sha1 session keys. In a future release, this flag will
+ control whether des3-cbc-sha1 is permitted in similar fashion to
+ weak enctypes.
+
+**allow_rc4**
+ was added in release 1.21 and defaults to *false*. Unless this
+ flag is set to *true*, the KDC will not issue tickets with
+ arcfour-hmac session keys. In a future release, this flag will
+ control whether arcfour-hmac is permitted in similar fashion to
+ weak enctypes.
+
**permitted_enctypes**
controls the set of enctypes that a service will permit for
session keys and for ticket and authenticator encryption. The KDC
In order to generate a keytab for a host, the host must have a
principal in the Kerberos database. The procedure for adding hosts to
-the database is described fully in :ref:`add_mod_del_princs`. (See
+the database is described fully in :ref:`principals`. (See
:ref:`replica_host_key` for a brief description.) The keytab is
generated by running :ref:`kadmin(1)` and issuing the :ref:`ktadd`
command.
Once your KDCs are set up and running, you are ready to use
:ref:`kadmin(1)` to load principals for your users, hosts, and other
services into the Kerberos database. This procedure is described
-fully in :ref:`add_mod_del_princs`.
+fully in :ref:`principals`.
You may occasionally want to use one of your replica KDCs as the
primary. This might happen if you are upgrading the primary KDC, or
KRB5_PAC_SERVER_CHECKSUM.rst
KRB5_PAC_TICKET_CHECKSUM.rst
KRB5_PAC_UPN_DNS_INFO.rst
+ KRB5_PAC_FULL_CHECKSUM.rst
KRB5_PADATA_AFS3_SALT.rst
KRB5_PADATA_AP_REQ.rst
KRB5_PADATA_AS_CHECKSUM.rst
KRB5_PADATA_SESAME.rst
KRB5_PADATA_SPAKE.rst
KRB5_PADATA_REDHAT_IDP_OAUTH2.rst
+ KRB5_PADATA_REDHAT_PASSKEY.rst
KRB5_PADATA_SVR_REFERRAL_INFO.rst
KRB5_PADATA_TGS_REQ.rst
KRB5_PADATA_USE_SPECIFIED_KVNO.rst
This option allows one to specify libraries to be passed to the
linker (e.g., ``-l<library>``)
+**PKCS11_MODNAME=**\ *library*
+ Override the built-in default PKCS11 library name.
+
**SS_LIB=**\ *libs*...
If ``-lss`` is not the correct way to link in your installed ss
library, for example if additional support libraries are needed,
# General information about the project.
project = u'MIT Kerberos'
-copyright = u'1985-2022, MIT'
+copyright = u'1985-2023, MIT'
# The version info for the project you're documenting, acts as replacement for
# |version| and |release|, also used in various other places throughout the
ccache = '``@CCNAME@``'
keytab = '``@KTNAME@``'
ckeytab = '``@CKTNAME@``'
+ pkcs11_modname = '``@PKCS11MOD@``'
elif 'pathsubs' in tags:
# Read configured paths from a file produced by the build system.
exec(open("paths.py").read())
ccache = ':ref:`DEFCCNAME <paths>`'
keytab = ':ref:`DEFKTNAME <paths>`'
ckeytab = ':ref:`DEFCKTNAME <paths>`'
+ pkcs11_modname = ':ref:`PKCS11_MODNAME <paths>`'
rst_epilog = '\n'
rst_epilog += '.. |ccache| replace:: %s\n' % ccache
rst_epilog += '.. |keytab| replace:: %s\n' % keytab
rst_epilog += '.. |ckeytab| replace:: %s\n' % ckeytab
+ rst_epilog += '.. |pkcs11_modname| replace:: %s\n' % pkcs11_modname
rst_epilog += '''
.. |krb5conf| replace:: ``/etc/krb5.conf``
.. |defkeysalts| replace:: ``aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal``
Copyright
=========
-Copyright |copy| 1985-2022 by the Massachusetts Institute of
+Copyright |copy| 1985-2023 by the Massachusetts Institute of
Technology and its contributors. All rights reserved.
See :ref:`mitK5license` for additional copyright and license
+++ /dev/null
-# Sphinx build info version 1
-# This file hashes the configuration used when building these files. When it is not found, a full rebuild will be done.
-config: 4589d7c44f844024e4f4513691a68240
-tags: 645f666f9bcd5a90fca523b33c5a78b7
+++ /dev/null
-Contributing to the MIT Kerberos Documentation
-==============================================
-
-We are looking for documentation writers and editors who could contribute
-towards improving the MIT KC documentation content. If you are an experienced
-Kerberos developer and/or administrator, please consider sharing your knowledge
-and experience with the Kerberos Community. You can suggest your own topic or
-write about any of the topics listed
-`here <https://k5wiki.kerberos.org/wiki/Projects/Documentation_Tasks>`__.
-
-If you have any questions, comments, or suggestions on the existing documents,
-please send your feedback via email to krb5-bugs@mit.edu. The HTML version of
-this documentation has a "FEEDBACK" link to the krb5-bugs@mit.edu email
-address with a pre-constructed subject line.
-
-
-Background
-----------
-
-Starting with release 1.11, the Kerberos documentation set is
-unified in a central form. Man pages, HTML documentation, and PDF
-documents are compiled from reStructuredText sources, and the application
-developer documentation incorporates Doxygen markup from the source
-tree. This project was undertaken along the outline described
-`here <https://k5wiki.kerberos.org/wiki/Projects/Kerberos_Documentation>`__.
-
-Previous versions of Kerberos 5 attempted to maintain separate documentation
-in the texinfo format, with separate groff manual pages. Having the API
-documentation disjoint from the source code implementing that API
-resulted in the documentation becoming stale, and over time the documentation
-ceased to match reality. With a fresh start and a source format that is
-easier to use and maintain, reStructuredText-based documents should provide
-an improved experience for the user. Consolidating all the documentation
-formats into a single source document makes the documentation set easier
-to maintain.
+++ /dev/null
-Administration programs
-========================
-
-.. toctree::
- :maxdepth: 1
-
- kadmin_local.rst
- kadmind.rst
- kdb5_util.rst
- kdb5_ldap_util.rst
- krb5kdc.rst
- kprop.rst
- kpropd.rst
- kproplog.rst
- ktutil.rst
- k5srvutil.rst
- sserver.rst
+++ /dev/null
-.. _k5srvutil(1):
-
-k5srvutil
-=========
-
-SYNOPSIS
---------
-
-**k5srvutil** *operation*
-[**-i**]
-[**-f** *filename*]
-[**-e** *keysalts*]
-
-DESCRIPTION
------------
-
-k5srvutil allows an administrator to list keys currently in
-a keytab, to obtain new keys for a principal currently in a keytab,
-or to delete non-current keys from a keytab.
-
-*operation* must be one of the following:
-
-**list**
- Lists the keys in a keytab, showing version number and principal
- name.
-
-**change**
- Uses the kadmin protocol to update the keys in the Kerberos
- database to new randomly-generated keys, and updates the keys in
- the keytab to match. If a key's version number doesn't match the
- version number stored in the Kerberos server's database, then the
- operation will fail. If the **-i** flag is given, k5srvutil will
- prompt for confirmation before changing each key. If the **-k**
- option is given, the old and new keys will be displayed.
- Ordinarily, keys will be generated with the default encryption
- types and key salts. This can be overridden with the **-e**
- option. Old keys are retained in the keytab so that existing
- tickets continue to work, but **delold** should be used after
- such tickets expire, to prevent attacks against the old keys.
-
-**delold**
- Deletes keys that are not the most recent version from the keytab.
- This operation should be used some time after a change operation
- to remove old keys, after existing tickets issued for the service
- have expired. If the **-i** flag is given, then k5srvutil will
- prompt for confirmation for each principal.
-
-**delete**
- Deletes particular keys in the keytab, interactively prompting for
- each key.
-
-In all cases, the default keytab is used unless this is overridden by
-the **-f** option.
-
-k5srvutil uses the :ref:`kadmin(1)` program to edit the keytab in
-place.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kadmin(1)`, :ref:`ktutil(1)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _kadmin(1):
-
-kadmin
-======
-
-SYNOPSIS
---------
-
-.. _kadmin_synopsis:
-
-**kadmin**
-[**-O**\|\ **-N**]
-[**-r** *realm*]
-[**-p** *principal*]
-[**-q** *query*]
-[[**-c** *cache_name*]\|[**-k** [**-t** *keytab*]]\|\ **-n**]
-[**-w** *password*]
-[**-s** *admin_server*\ [:*port*]]
-[command args...]
-
-**kadmin.local**
-[**-r** *realm*]
-[**-p** *principal*]
-[**-q** *query*]
-[**-d** *dbname*]
-[**-e** *enc*:*salt* ...]
-[**-m**]
-[**-x** *db_args*]
-[command args...]
-
-.. _kadmin_synopsis_end:
-
-
-DESCRIPTION
------------
-
-kadmin and kadmin.local are command-line interfaces to the Kerberos V5
-administration system. They provide nearly identical functionalities;
-the difference is that kadmin.local directly accesses the KDC
-database, while kadmin performs operations using :ref:`kadmind(8)`.
-Except as explicitly noted otherwise, this man page will use "kadmin"
-to refer to both versions. kadmin provides for the maintenance of
-Kerberos principals, password policies, and service key tables
-(keytabs).
-
-The remote kadmin client uses Kerberos to authenticate to kadmind
-using the service principal ``kadmin/admin`` or ``kadmin/ADMINHOST``
-(where *ADMINHOST* is the fully-qualified hostname of the admin
-server). If the credentials cache contains a ticket for one of these
-principals, and the **-c** credentials_cache option is specified, that
-ticket is used to authenticate to kadmind. Otherwise, the **-p** and
-**-k** options are used to specify the client Kerberos principal name
-used to authenticate. Once kadmin has determined the principal name,
-it requests a service ticket from the KDC, and uses that service
-ticket to authenticate to kadmind.
-
-Since kadmin.local directly accesses the KDC database, it usually must
-be run directly on the primary KDC with sufficient permissions to read
-the KDC database. If the KDC database uses the LDAP database module,
-kadmin.local can be run on any host which can access the LDAP server.
-
-
-OPTIONS
--------
-
-.. _kadmin_options:
-
-**-r** *realm*
- Use *realm* as the default database realm.
-
-**-p** *principal*
- Use *principal* to authenticate. Otherwise, kadmin will append
- ``/admin`` to the primary principal name of the default ccache,
- the value of the **USER** environment variable, or the username as
- obtained with getpwuid, in order of preference.
-
-**-k**
- Use a keytab to decrypt the KDC response instead of prompting for
- a password. In this case, the default principal will be
- ``host/hostname``. If there is no keytab specified with the
- **-t** option, then the default keytab will be used.
-
-**-t** *keytab*
- Use *keytab* to decrypt the KDC response. This can only be used
- with the **-k** option.
-
-**-n**
- Requests anonymous processing. Two types of anonymous principals
- are supported. For fully anonymous Kerberos, configure PKINIT on
- the KDC and configure **pkinit_anchors** in the client's
- :ref:`krb5.conf(5)`. Then use the **-n** option with a principal
- of the form ``@REALM`` (an empty principal name followed by the
- at-sign and a realm name). If permitted by the KDC, an anonymous
- ticket will be returned. A second form of anonymous tickets is
- supported; these realm-exposed tickets hide the identity of the
- client but not the client's realm. For this mode, use ``kinit
- -n`` with a normal principal name. If supported by the KDC, the
- principal (but not realm) will be replaced by the anonymous
- principal. As of release 1.8, the MIT Kerberos KDC only supports
- fully anonymous operation.
-
-**-c** *credentials_cache*
- Use *credentials_cache* as the credentials cache. The cache
- should contain a service ticket for the ``kadmin/admin`` or
- ``kadmin/ADMINHOST`` (where *ADMINHOST* is the fully-qualified
- hostname of the admin server) service; it can be acquired with the
- :ref:`kinit(1)` program. If this option is not specified, kadmin
- requests a new service ticket from the KDC, and stores it in its
- own temporary ccache.
-
-**-w** *password*
- Use *password* instead of prompting for one. Use this option with
- care, as it may expose the password to other users on the system
- via the process list.
-
-**-q** *query*
- Perform the specified query and then exit.
-
-**-d** *dbname*
- Specifies the name of the KDC database. This option does not
- apply to the LDAP database module.
-
-**-s** *admin_server*\ [:*port*]
- Specifies the admin server which kadmin should contact.
-
-**-m**
- If using kadmin.local, prompt for the database master password
- instead of reading it from a stash file.
-
-**-e** "*enc*:*salt* ..."
- Sets the keysalt list to be used for any new keys created. See
- :ref:`Keysalt_lists` in :ref:`kdc.conf(5)` for a list of possible
- values.
-
-**-O**
- Force use of old AUTH_GSSAPI authentication flavor.
-
-**-N**
- Prevent fallback to AUTH_GSSAPI authentication flavor.
-
-**-x** *db_args*
- Specifies the database specific arguments. See the next section
- for supported options.
-
-.. _kadmin_options_end:
-
-Starting with release 1.14, if any command-line arguments remain after
-the options, they will be treated as a single query to be executed.
-This mode of operation is intended for scripts and behaves differently
-from the interactive mode in several respects:
-
-* Query arguments are split by the shell, not by kadmin.
-* Informational and warning messages are suppressed. Error messages
- and query output (e.g. for **get_principal**) will still be
- displayed.
-* Confirmation prompts are disabled (as if **-force** was given).
- Password prompts will still be issued as required.
-* The exit status will be non-zero if the query fails.
-
-The **-q** option does not carry these behavior differences; the query
-will be processed as if it was entered interactively. The **-q**
-option cannot be used in combination with a query in the remaining
-arguments.
-
-.. _dboptions:
-
-DATABASE OPTIONS
-----------------
-
-Database options can be used to override database-specific defaults.
-Supported options for the DB2 module are:
-
- **-x dbname=**\ \*filename*
- Specifies the base filename of the DB2 database.
-
- **-x lockiter**
- Make iteration operations hold the lock for the duration of
- the entire operation, rather than temporarily releasing the
- lock while handling each principal. This is the default
- behavior, but this option exists to allow command line
- override of a [dbmodules] setting. First introduced in
- release 1.13.
-
- **-x unlockiter**
- Make iteration operations unlock the database for each
- principal, instead of holding the lock for the duration of the
- entire operation. First introduced in release 1.13.
-
-Supported options for the LDAP module are:
-
- **-x host=**\ *ldapuri*
- Specifies the LDAP server to connect to by a LDAP URI.
-
- **-x binddn=**\ *bind_dn*
- Specifies the DN used to bind to the LDAP server.
-
- **-x bindpwd=**\ *password*
- Specifies the password or SASL secret used to bind to the LDAP
- server. Using this option may expose the password to other
- users on the system via the process list; to avoid this,
- instead stash the password using the **stashsrvpw** command of
- :ref:`kdb5_ldap_util(8)`.
-
- **-x sasl_mech=**\ *mechanism*
- Specifies the SASL mechanism used to bind to the LDAP server.
- The bind DN is ignored if a SASL mechanism is used. New in
- release 1.13.
-
- **-x sasl_authcid=**\ *name*
- Specifies the authentication name used when binding to the
- LDAP server with a SASL mechanism, if the mechanism requires
- one. New in release 1.13.
-
- **-x sasl_authzid=**\ *name*
- Specifies the authorization name used when binding to the LDAP
- server with a SASL mechanism. New in release 1.13.
-
- **-x sasl_realm=**\ *realm*
- Specifies the realm used when binding to the LDAP server with
- a SASL mechanism, if the mechanism uses one. New in release
- 1.13.
-
- **-x debug=**\ *level*
- sets the OpenLDAP client library debug level. *level* is an
- integer to be interpreted by the library. Debugging messages
- are printed to standard error. New in release 1.12.
-
-
-COMMANDS
---------
-
-When using the remote client, available commands may be restricted
-according to the privileges specified in the :ref:`kadm5.acl(5)` file
-on the admin server.
-
-.. _add_principal:
-
-add_principal
-~~~~~~~~~~~~~
-
- **add_principal** [*options*] *newprinc*
-
-Creates the principal *newprinc*, prompting twice for a password. If
-no password policy is specified with the **-policy** option, and the
-policy named ``default`` is assigned to the principal if it exists.
-However, creating a policy named ``default`` will not automatically
-assign this policy to previously existing principals. This policy
-assignment can be suppressed with the **-clearpolicy** option.
-
-This command requires the **add** privilege.
-
-Aliases: **addprinc**, **ank**
-
-Options:
-
-**-expire** *expdate*
- (:ref:`getdate` string) The expiration date of the principal.
-
-**-pwexpire** *pwexpdate*
- (:ref:`getdate` string) The password expiration date.
-
-**-maxlife** *maxlife*
- (:ref:`duration` or :ref:`getdate` string) The maximum ticket life
- for the principal.
-
-**-maxrenewlife** *maxrenewlife*
- (:ref:`duration` or :ref:`getdate` string) The maximum renewable
- life of tickets for the principal.
-
-**-kvno** *kvno*
- The initial key version number.
-
-**-policy** *policy*
- The password policy used by this principal. If not specified, the
- policy ``default`` is used if it exists (unless **-clearpolicy**
- is specified).
-
-**-clearpolicy**
- Prevents any policy from being assigned when **-policy** is not
- specified.
-
-{-\|+}\ **allow_postdated**
- **-allow_postdated** prohibits this principal from obtaining
- postdated tickets. **+allow_postdated** clears this flag.
-
-{-\|+}\ **allow_forwardable**
- **-allow_forwardable** prohibits this principal from obtaining
- forwardable tickets. **+allow_forwardable** clears this flag.
-
-{-\|+}\ **allow_renewable**
- **-allow_renewable** prohibits this principal from obtaining
- renewable tickets. **+allow_renewable** clears this flag.
-
-{-\|+}\ **allow_proxiable**
- **-allow_proxiable** prohibits this principal from obtaining
- proxiable tickets. **+allow_proxiable** clears this flag.
-
-{-\|+}\ **allow_dup_skey**
- **-allow_dup_skey** disables user-to-user authentication for this
- principal by prohibiting others from obtaining a service ticket
- encrypted in this principal's TGT session key.
- **+allow_dup_skey** clears this flag.
-
-{-\|+}\ **requires_preauth**
- **+requires_preauth** requires this principal to preauthenticate
- before being allowed to kinit. **-requires_preauth** clears this
- flag. When **+requires_preauth** is set on a service principal,
- the KDC will only issue service tickets for that service principal
- if the client's initial authentication was performed using
- preauthentication.
-
-{-\|+}\ **requires_hwauth**
- **+requires_hwauth** requires this principal to preauthenticate
- using a hardware device before being allowed to kinit.
- **-requires_hwauth** clears this flag. When **+requires_hwauth** is
- set on a service principal, the KDC will only issue service tickets
- for that service principal if the client's initial authentication was
- performed using a hardware device to preauthenticate.
-
-{-\|+}\ **ok_as_delegate**
- **+ok_as_delegate** sets the **okay as delegate** flag on tickets
- issued with this principal as the service. Clients may use this
- flag as a hint that credentials should be delegated when
- authenticating to the service. **-ok_as_delegate** clears this
- flag.
-
-{-\|+}\ **allow_svr**
- **-allow_svr** prohibits the issuance of service tickets for this
- principal. In release 1.17 and later, user-to-user service
- tickets are still allowed unless the **-allow_dup_skey** flag is
- also set. **+allow_svr** clears this flag.
-
-{-\|+}\ **allow_tgs_req**
- **-allow_tgs_req** specifies that a Ticket-Granting Service (TGS)
- request for a service ticket for this principal is not permitted.
- **+allow_tgs_req** clears this flag.
-
-{-\|+}\ **allow_tix**
- **-allow_tix** forbids the issuance of any tickets for this
- principal. **+allow_tix** clears this flag.
-
-{-\|+}\ **needchange**
- **+needchange** forces a password change on the next initial
- authentication to this principal. **-needchange** clears this
- flag.
-
-{-\|+}\ **password_changing_service**
- **+password_changing_service** marks this principal as a password
- change service principal.
-
-{-\|+}\ **ok_to_auth_as_delegate**
- **+ok_to_auth_as_delegate** allows this principal to acquire
- forwardable tickets to itself from arbitrary users, for use with
- constrained delegation.
-
-{-\|+}\ **no_auth_data_required**
- **+no_auth_data_required** prevents PAC or AD-SIGNEDPATH data from
- being added to service tickets for the principal.
-
-{-\|+}\ **lockdown_keys**
- **+lockdown_keys** prevents keys for this principal from leaving
- the KDC via kadmind. The chpass and extract operations are denied
- for a principal with this attribute. The chrand operation is
- allowed, but will not return the new keys. The delete and rename
- operations are also denied if this attribute is set, in order to
- prevent a malicious administrator from replacing principals like
- krbtgt/* or kadmin/* with new principals without the attribute.
- This attribute can be set via the network protocol, but can only
- be removed using kadmin.local.
-
-**-randkey**
- Sets the key of the principal to a random value.
-
-**-nokey**
- Causes the principal to be created with no key. New in release
- 1.12.
-
-**-pw** *password*
- Sets the password of the principal to the specified string and
- does not prompt for a password. Note: using this option in a
- shell script may expose the password to other users on the system
- via the process list.
-
-**-e** *enc*:*salt*,...
- Uses the specified keysalt list for setting the keys of the
- principal. See :ref:`Keysalt_lists` in :ref:`kdc.conf(5)` for a
- list of possible values.
-
-**-x** *db_princ_args*
- Indicates database-specific options. The options for the LDAP
- database module are:
-
- **-x dn=**\ *dn*
- Specifies the LDAP object that will contain the Kerberos
- principal being created.
-
- **-x linkdn=**\ *dn*
- Specifies the LDAP object to which the newly created Kerberos
- principal object will point.
-
- **-x containerdn=**\ *container_dn*
- Specifies the container object under which the Kerberos
- principal is to be created.
-
- **-x tktpolicy=**\ *policy*
- Associates a ticket policy to the Kerberos principal.
-
- .. note::
-
- - The **containerdn** and **linkdn** options cannot be
- specified with the **dn** option.
- - If the *dn* or *containerdn* options are not specified while
- adding the principal, the principals are created under the
- principal container configured in the realm or the realm
- container.
- - *dn* and *containerdn* should be within the subtrees or
- principal container configured in the realm.
-
-Example::
-
- kadmin: addprinc jennifer
- No policy specified for "jennifer@ATHENA.MIT.EDU";
- defaulting to no policy.
- Enter password for principal jennifer@ATHENA.MIT.EDU:
- Re-enter password for principal jennifer@ATHENA.MIT.EDU:
- Principal "jennifer@ATHENA.MIT.EDU" created.
- kadmin:
-
-.. _add_principal_end:
-
-.. _modify_principal:
-
-modify_principal
-~~~~~~~~~~~~~~~~
-
- **modify_principal** [*options*] *principal*
-
-Modifies the specified principal, changing the fields as specified.
-The options to **add_principal** also apply to this command, except
-for the **-randkey**, **-pw**, and **-e** options. In addition, the
-option **-clearpolicy** will clear the current policy of a principal.
-
-This command requires the *modify* privilege.
-
-Alias: **modprinc**
-
-Options (in addition to the **addprinc** options):
-
-**-unlock**
- Unlocks a locked principal (one which has received too many failed
- authentication attempts without enough time between them according
- to its password policy) so that it can successfully authenticate.
-
-.. _modify_principal_end:
-
-.. _rename_principal:
-
-rename_principal
-~~~~~~~~~~~~~~~~
-
- **rename_principal** [**-force**] *old_principal* *new_principal*
-
-Renames the specified *old_principal* to *new_principal*. This
-command prompts for confirmation, unless the **-force** option is
-given.
-
-This command requires the **add** and **delete** privileges.
-
-Alias: **renprinc**
-
-.. _rename_principal_end:
-
-.. _delete_principal:
-
-delete_principal
-~~~~~~~~~~~~~~~~
-
- **delete_principal** [**-force**] *principal*
-
-Deletes the specified *principal* from the database. This command
-prompts for deletion, unless the **-force** option is given.
-
-This command requires the **delete** privilege.
-
-Alias: **delprinc**
-
-.. _delete_principal_end:
-
-.. _change_password:
-
-change_password
-~~~~~~~~~~~~~~~
-
- **change_password** [*options*] *principal*
-
-Changes the password of *principal*. Prompts for a new password if
-neither **-randkey** or **-pw** is specified.
-
-This command requires the **changepw** privilege, or that the
-principal running the program is the same as the principal being
-changed.
-
-Alias: **cpw**
-
-The following options are available:
-
-**-randkey**
- Sets the key of the principal to a random value.
-
-**-pw** *password*
- Set the password to the specified string. Using this option in a
- script may expose the password to other users on the system via
- the process list.
-
-**-e** *enc*:*salt*,...
- Uses the specified keysalt list for setting the keys of the
- principal. See :ref:`Keysalt_lists` in :ref:`kdc.conf(5)` for a
- list of possible values.
-
-**-keepold**
- Keeps the existing keys in the database. This flag is usually not
- necessary except perhaps for ``krbtgt`` principals.
-
-Example::
-
- kadmin: cpw systest
- Enter password for principal systest@BLEEP.COM:
- Re-enter password for principal systest@BLEEP.COM:
- Password for systest@BLEEP.COM changed.
- kadmin:
-
-.. _change_password_end:
-
-.. _purgekeys:
-
-purgekeys
-~~~~~~~~~
-
- **purgekeys** [**-all**\|\ **-keepkvno** *oldest_kvno_to_keep*] *principal*
-
-Purges previously retained old keys (e.g., from **change_password
--keepold**) from *principal*. If **-keepkvno** is specified, then
-only purges keys with kvnos lower than *oldest_kvno_to_keep*. If
-**-all** is specified, then all keys are purged. The **-all** option
-is new in release 1.12.
-
-This command requires the **modify** privilege.
-
-.. _purgekeys_end:
-
-.. _get_principal:
-
-get_principal
-~~~~~~~~~~~~~
-
- **get_principal** [**-terse**] *principal*
-
-Gets the attributes of principal. With the **-terse** option, outputs
-fields as quoted tab-separated strings.
-
-This command requires the **inquire** privilege, or that the principal
-running the the program to be the same as the one being listed.
-
-Alias: **getprinc**
-
-Examples::
-
- kadmin: getprinc tlyu/admin
- Principal: tlyu/admin@BLEEP.COM
- Expiration date: [never]
- Last password change: Mon Aug 12 14:16:47 EDT 1996
- Password expiration date: [never]
- Maximum ticket life: 0 days 10:00:00
- Maximum renewable life: 7 days 00:00:00
- Last modified: Mon Aug 12 14:16:47 EDT 1996 (bjaspan/admin@BLEEP.COM)
- Last successful authentication: [never]
- Last failed authentication: [never]
- Failed password attempts: 0
- Number of keys: 1
- Key: vno 1, aes256-cts-hmac-sha384-192
- MKey: vno 1
- Attributes:
- Policy: [none]
-
- kadmin: getprinc -terse systest
- systest@BLEEP.COM 3 86400 604800 1
- 785926535 753241234 785900000
- tlyu/admin@BLEEP.COM 786100034 0 0
- kadmin:
-
-.. _get_principal_end:
-
-.. _list_principals:
-
-list_principals
-~~~~~~~~~~~~~~~
-
- **list_principals** [*expression*]
-
-Retrieves all or some principal names. *expression* is a shell-style
-glob expression that can contain the wild-card characters ``?``,
-``*``, and ``[]``. All principal names matching the expression are
-printed. If no expression is provided, all principal names are
-printed. If the expression does not contain an ``@`` character, an
-``@`` character followed by the local realm is appended to the
-expression.
-
-This command requires the **list** privilege.
-
-Alias: **listprincs**, **get_principals**, **getprincs**
-
-Example::
-
- kadmin: listprincs test*
- test3@SECURE-TEST.OV.COM
- test2@SECURE-TEST.OV.COM
- test1@SECURE-TEST.OV.COM
- testuser@SECURE-TEST.OV.COM
- kadmin:
-
-.. _list_principals_end:
-
-.. _get_strings:
-
-get_strings
-~~~~~~~~~~~
-
- **get_strings** *principal*
-
-Displays string attributes on *principal*.
-
-This command requires the **inquire** privilege.
-
-Alias: **getstrs**
-
-.. _get_strings_end:
-
-.. _set_string:
-
-set_string
-~~~~~~~~~~
-
- **set_string** *principal* *name* *value*
-
-Sets a string attribute on *principal*. String attributes are used to
-supply per-principal configuration to the KDC and some KDC plugin
-modules. The following string attribute names are recognized by the
-KDC:
-
-**require_auth**
- Specifies an authentication indicator which is required to
- authenticate to the principal as a service. Multiple indicators
- can be specified, separated by spaces; in this case any of the
- specified indicators will be accepted. (New in release 1.14.)
-
-**session_enctypes**
- Specifies the encryption types supported for session keys when the
- principal is authenticated to as a server. See
- :ref:`Encryption_types` in :ref:`kdc.conf(5)` for a list of the
- accepted values.
-
-**otp**
- Enables One Time Passwords (OTP) preauthentication for a client
- *principal*. The *value* is a JSON string representing an array
- of objects, each having optional ``type`` and ``username`` fields.
-
-**pkinit_cert_match**
- Specifies a matching expression that defines the certificate
- attributes required for the client certificate used by the
- principal during PKINIT authentication. The matching expression
- is in the same format as those used by the **pkinit_cert_match**
- option in :ref:`krb5.conf(5)`. (New in release 1.16.)
-
-This command requires the **modify** privilege.
-
-Alias: **setstr**
-
-Example::
-
- set_string host/foo.mit.edu session_enctypes aes128-cts
- set_string user@FOO.COM otp "[{""type"":""hotp"",""username"":""al""}]"
-
-.. _set_string_end:
-
-.. _del_string:
-
-del_string
-~~~~~~~~~~
-
- **del_string** *principal* *key*
-
-Deletes a string attribute from *principal*.
-
-This command requires the **delete** privilege.
-
-Alias: **delstr**
-
-.. _del_string_end:
-
-.. _add_policy:
-
-add_policy
-~~~~~~~~~~
-
- **add_policy** [*options*] *policy*
-
-Adds a password policy named *policy* to the database.
-
-This command requires the **add** privilege.
-
-Alias: **addpol**
-
-The following options are available:
-
-**-maxlife** *time*
- (:ref:`duration` or :ref:`getdate` string) Sets the maximum
- lifetime of a password.
-
-**-minlife** *time*
- (:ref:`duration` or :ref:`getdate` string) Sets the minimum
- lifetime of a password.
-
-**-minlength** *length*
- Sets the minimum length of a password.
-
-**-minclasses** *number*
- Sets the minimum number of character classes required in a
- password. The five character classes are lower case, upper case,
- numbers, punctuation, and whitespace/unprintable characters.
-
-**-history** *number*
- Sets the number of past keys kept for a principal. This option is
- not supported with the LDAP KDC database module.
-
-.. _policy_maxfailure:
-
-**-maxfailure** *maxnumber*
- Sets the number of authentication failures before the principal is
- locked. Authentication failures are only tracked for principals
- which require preauthentication. The counter of failed attempts
- resets to 0 after a successful attempt to authenticate. A
- *maxnumber* value of 0 (the default) disables lockout.
-
-.. _policy_failurecountinterval:
-
-**-failurecountinterval** *failuretime*
- (:ref:`duration` or :ref:`getdate` string) Sets the allowable time
- between authentication failures. If an authentication failure
- happens after *failuretime* has elapsed since the previous
- failure, the number of authentication failures is reset to 1. A
- *failuretime* value of 0 (the default) means forever.
-
-.. _policy_lockoutduration:
-
-**-lockoutduration** *lockouttime*
- (:ref:`duration` or :ref:`getdate` string) Sets the duration for
- which the principal is locked from authenticating if too many
- authentication failures occur without the specified failure count
- interval elapsing. A duration of 0 (the default) means the
- principal remains locked out until it is administratively unlocked
- with ``modprinc -unlock``.
-
-**-allowedkeysalts**
- Specifies the key/salt tuples supported for long-term keys when
- setting or changing a principal's password/keys. See
- :ref:`Keysalt_lists` in :ref:`kdc.conf(5)` for a list of the
- accepted values, but note that key/salt tuples must be separated
- with commas (',') only. To clear the allowed key/salt policy use
- a value of '-'.
-
-Example::
-
- kadmin: add_policy -maxlife "2 days" -minlength 5 guests
- kadmin:
-
-.. _add_policy_end:
-
-.. _modify_policy:
-
-modify_policy
-~~~~~~~~~~~~~
-
- **modify_policy** [*options*] *policy*
-
-Modifies the password policy named *policy*. Options are as described
-for **add_policy**.
-
-This command requires the **modify** privilege.
-
-Alias: **modpol**
-
-.. _modify_policy_end:
-
-.. _delete_policy:
-
-delete_policy
-~~~~~~~~~~~~~
-
- **delete_policy** [**-force**] *policy*
-
-Deletes the password policy named *policy*. Prompts for confirmation
-before deletion. The command will fail if the policy is in use by any
-principals.
-
-This command requires the **delete** privilege.
-
-Alias: **delpol**
-
-Example::
-
- kadmin: del_policy guests
- Are you sure you want to delete the policy "guests"?
- (yes/no): yes
- kadmin:
-
-.. _delete_policy_end:
-
-.. _get_policy:
-
-get_policy
-~~~~~~~~~~
-
- **get_policy** [ **-terse** ] *policy*
-
-Displays the values of the password policy named *policy*. With the
-**-terse** flag, outputs the fields as quoted strings separated by
-tabs.
-
-This command requires the **inquire** privilege.
-
-Alias: **getpol**
-
-Examples::
-
- kadmin: get_policy admin
- Policy: admin
- Maximum password life: 180 days 00:00:00
- Minimum password life: 00:00:00
- Minimum password length: 6
- Minimum number of password character classes: 2
- Number of old keys kept: 5
- Reference count: 17
-
- kadmin: get_policy -terse admin
- admin 15552000 0 6 2 5 17
- kadmin:
-
-The "Reference count" is the number of principals using that policy.
-With the LDAP KDC database module, the reference count field is not
-meaningful.
-
-.. _get_policy_end:
-
-.. _list_policies:
-
-list_policies
-~~~~~~~~~~~~~
-
- **list_policies** [*expression*]
-
-Retrieves all or some policy names. *expression* is a shell-style
-glob expression that can contain the wild-card characters ``?``,
-``*``, and ``[]``. All policy names matching the expression are
-printed. If no expression is provided, all existing policy names are
-printed.
-
-This command requires the **list** privilege.
-
-Aliases: **listpols**, **get_policies**, **getpols**.
-
-Examples::
-
- kadmin: listpols
- test-pol
- dict-only
- once-a-min
- test-pol-nopw
-
- kadmin: listpols t*
- test-pol
- test-pol-nopw
- kadmin:
-
-.. _list_policies_end:
-
-.. _ktadd:
-
-ktadd
-~~~~~
-
- | **ktadd** [options] *principal*
- | **ktadd** [options] **-glob** *princ-exp*
-
-Adds a *principal*, or all principals matching *princ-exp*, to a
-keytab file. Each principal's keys are randomized in the process.
-The rules for *princ-exp* are described in the **list_principals**
-command.
-
-This command requires the **inquire** and **changepw** privileges.
-With the **-glob** form, it also requires the **list** privilege.
-
-The options are:
-
-**-k[eytab]** *keytab*
- Use *keytab* as the keytab file. Otherwise, the default keytab is
- used.
-
-**-e** *enc*:*salt*,...
- Uses the specified keysalt list for setting the new keys of the
- principal. See :ref:`Keysalt_lists` in :ref:`kdc.conf(5)` for a
- list of possible values.
-
-**-q**
- Display less verbose information.
-
-**-norandkey**
- Do not randomize the keys. The keys and their version numbers stay
- unchanged. This option cannot be specified in combination with the
- **-e** option.
-
-An entry for each of the principal's unique encryption types is added,
-ignoring multiple keys with the same encryption type but different
-salt types.
-
-Alias: **xst**
-
-Example::
-
- kadmin: ktadd -k /tmp/foo-new-keytab host/foo.mit.edu
- Entry for principal host/foo.mit.edu@ATHENA.MIT.EDU with kvno 3,
- encryption type aes256-cts-hmac-sha1-96 added to keytab
- FILE:/tmp/foo-new-keytab
- kadmin:
-
-.. _ktadd_end:
-
-.. _ktremove:
-
-ktremove
-~~~~~~~~
-
- **ktremove** [options] *principal* [*kvno* | *all* | *old*]
-
-Removes entries for the specified *principal* from a keytab. Requires
-no permissions, since this does not require database access.
-
-If the string "all" is specified, all entries for that principal are
-removed; if the string "old" is specified, all entries for that
-principal except those with the highest kvno are removed. Otherwise,
-the value specified is parsed as an integer, and all entries whose
-kvno match that integer are removed.
-
-The options are:
-
-**-k[eytab]** *keytab*
- Use *keytab* as the keytab file. Otherwise, the default keytab is
- used.
-
-**-q**
- Display less verbose information.
-
-Alias: **ktrem**
-
-Example::
-
- kadmin: ktremove kadmin/admin all
- Entry for principal kadmin/admin with kvno 3 removed from keytab
- FILE:/etc/krb5.keytab
- kadmin:
-
-.. _ktremove_end:
-
-lock
-~~~~
-
-Lock database exclusively. Use with extreme caution! This command
-only works with the DB2 KDC database module.
-
-unlock
-~~~~~~
-
-Release the exclusive database lock.
-
-list_requests
-~~~~~~~~~~~~~
-
-Lists available for kadmin requests.
-
-Aliases: **lr**, **?**
-
-quit
-~~~~
-
-Exit program. If the database was locked, the lock is released.
-
-Aliases: **exit**, **q**
-
-
-HISTORY
--------
-
-The kadmin program was originally written by Tom Yu at MIT, as an
-interface to the OpenVision Kerberos administration program.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kpasswd(1)`, :ref:`kadmind(8)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _kadmind(8):
-
-kadmind
-=======
-
-SYNOPSIS
---------
-
-**kadmind**
-[**-x** *db_args*]
-[**-r** *realm*]
-[**-m**]
-[**-nofork**]
-[**-proponly**]
-[**-port** *port-number*]
-[**-P** *pid_file*]
-[**-p** *kdb5_util_path*]
-[**-K** *kprop_path*]
-[**-k** *kprop_port*]
-[**-F** *dump_file*]
-
-DESCRIPTION
------------
-
-kadmind starts the Kerberos administration server. kadmind typically
-runs on the primary Kerberos server, which stores the KDC database.
-If the KDC database uses the LDAP module, the administration server
-and the KDC server need not run on the same machine. kadmind accepts
-remote requests from programs such as :ref:`kadmin(1)` and
-:ref:`kpasswd(1)` to administer the information in these database.
-
-kadmind requires a number of configuration files to be set up in order
-for it to work:
-
-:ref:`kdc.conf(5)`
- The KDC configuration file contains configuration information for
- the KDC and admin servers. kadmind uses settings in this file to
- locate the Kerberos database, and is also affected by the
- **acl_file**, **dict_file**, **kadmind_port**, and iprop-related
- settings.
-
-:ref:`kadm5.acl(5)`
- kadmind's ACL (access control list) tells it which principals are
- allowed to perform administration actions. The pathname to the
- ACL file can be specified with the **acl_file** :ref:`kdc.conf(5)`
- variable; by default, it is |kdcdir|\ ``/kadm5.acl``.
-
-After the server begins running, it puts itself in the background and
-disassociates itself from its controlling terminal.
-
-kadmind can be configured for incremental database propagation.
-Incremental propagation allows replica KDC servers to receive
-principal and policy updates incrementally instead of receiving full
-dumps of the database. This facility can be enabled in the
-:ref:`kdc.conf(5)` file with the **iprop_enable** option. Incremental
-propagation requires the principal ``kiprop/PRIMARY\@REALM`` (where
-PRIMARY is the primary KDC's canonical host name, and REALM the realm
-name). In release 1.13, this principal is automatically created and
-registered into the datebase.
-
-
-OPTIONS
--------
-
-**-r** *realm*
- specifies the realm that kadmind will serve; if it is not
- specified, the default realm of the host is used.
-
-**-m**
- causes the master database password to be fetched from the
- keyboard (before the server puts itself in the background, if not
- invoked with the **-nofork** option) rather than from a file on
- disk.
-
-**-nofork**
- causes the server to remain in the foreground and remain
- associated to the terminal.
-
-**-proponly**
- causes the server to only listen and respond to Kerberos replica
- incremental propagation polling requests. This option can be used
- to set up a hierarchical propagation topology where a replica KDC
- provides incremental updates to other Kerberos replicas.
-
-**-port** *port-number*
- specifies the port on which the administration server listens for
- connections. The default port is determined by the
- **kadmind_port** configuration variable in :ref:`kdc.conf(5)`.
-
-**-P** *pid_file*
- specifies the file to which the PID of kadmind process should be
- written after it starts up. This file can be used to identify
- whether kadmind is still running and to allow init scripts to stop
- the correct process.
-
-**-p** *kdb5_util_path*
- specifies the path to the kdb5_util command to use when dumping the
- KDB in response to full resync requests when iprop is enabled.
-
-**-K** *kprop_path*
- specifies the path to the kprop command to use to send full dumps
- to replicas in response to full resync requests.
-
-**-k** *kprop_port*
- specifies the port by which the kprop process that is spawned by
- kadmind connects to the replica kpropd, in order to transfer the
- dump file during an iprop full resync request.
-
-**-F** *dump_file*
- specifies the file path to be used for dumping the KDB in response
- to full resync requests when iprop is enabled.
-
-**-x** *db_args*
- specifies database-specific arguments. See :ref:`Database Options
- <dboptions>` in :ref:`kadmin(1)` for supported arguments.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kpasswd(1)`, :ref:`kadmin(1)`, :ref:`kdb5_util(8)`,
-:ref:`kdb5_ldap_util(8)`, :ref:`kadm5.acl(5)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _kdb5_ldap_util(8):
-
-kdb5_ldap_util
-===============
-
-SYNOPSIS
---------
-
-.. _kdb5_ldap_util_synopsis:
-
-**kdb5_ldap_util**
-[**-D** *user_dn* [**-w** *passwd*]]
-[**-H** *ldapuri*]
-**command**
-[*command_options*]
-
-.. _kdb5_ldap_util_synopsis_end:
-
-
-DESCRIPTION
------------
-
-kdb5_ldap_util allows an administrator to manage realms, Kerberos
-services and ticket policies.
-
-
-COMMAND-LINE OPTIONS
---------------------
-
-.. _kdb5_ldap_util_options:
-
-**-r** *realm*
- Specifies the realm to be operated on.
-
-**-D** *user_dn*
- Specifies the Distinguished Name (DN) of the user who has
- sufficient rights to perform the operation on the LDAP server.
-
-**-w** *passwd*
- Specifies the password of *user_dn*. This option is not
- recommended.
-
-**-H** *ldapuri*
- Specifies the URI of the LDAP server.
-
-By default, kdb5_ldap_util operates on the default realm (as specified
-in :ref:`krb5.conf(5)`) and connects and authenticates to the LDAP
-server in the same manner as :ref:kadmind(8)` would given the
-parameters in :ref:`dbdefaults` in :ref:`kdc.conf(5)`.
-
-.. _kdb5_ldap_util_options_end:
-
-
-COMMANDS
---------
-
-create
-~~~~~~
-
-.. _kdb5_ldap_util_create:
-
- **create**
- [**-subtrees** *subtree_dn_list*]
- [**-sscope** *search_scope*]
- [**-containerref** *container_reference_dn*]
- [**-k** *mkeytype*]
- [**-kv** *mkeyVNO*]
- [**-M** *mkeyname*]
- [**-m|-P** *password*\|\ **-sf** *stashfilename*]
- [**-s**]
- [**-maxtktlife** *max_ticket_life*]
- [**-maxrenewlife** *max_renewable_ticket_life*]
- [*ticket_flags*]
-
-Creates realm in directory. Options:
-
-**-subtrees** *subtree_dn_list*
- Specifies the list of subtrees containing the principals of a
- realm. The list contains the DNs of the subtree objects separated
- by colon (``:``).
-
-**-sscope** *search_scope*
- Specifies the scope for searching the principals under the
- subtree. The possible values are 1 or one (one level), 2 or sub
- (subtrees).
-
-**-containerref** *container_reference_dn*
- Specifies the DN of the container object in which the principals
- of a realm will be created. If the container reference is not
- configured for a realm, the principals will be created in the
- realm container.
-
-**-k** *mkeytype*
- Specifies the key type of the master key in the database. The
- default is given by the **master_key_type** variable in
- :ref:`kdc.conf(5)`.
-
-**-kv** *mkeyVNO*
- Specifies the version number of the master key in the database;
- the default is 1. Note that 0 is not allowed.
-
-**-M** *mkeyname*
- Specifies the principal name for the master key in the database.
- If not specified, the name is determined by the
- **master_key_name** variable in :ref:`kdc.conf(5)`.
-
-**-m**
- Specifies that the master database password should be read from
- the TTY rather than fetched from a file on the disk.
-
-**-P** *password*
- Specifies the master database password. This option is not
- recommended.
-
-**-sf** *stashfilename*
- Specifies the stash file of the master database password.
-
-**-s**
- Specifies that the stash file is to be created.
-
-**-maxtktlife** *max_ticket_life*
- (:ref:`getdate` string) Specifies maximum ticket life for
- principals in this realm.
-
-**-maxrenewlife** *max_renewable_ticket_life*
- (:ref:`getdate` string) Specifies maximum renewable life of
- tickets for principals in this realm.
-
-*ticket_flags*
- Specifies global ticket flags for the realm. Allowable flags are
- documented in the description of the **add_principal** command in
- :ref:`kadmin(1)`.
-
-Example::
-
- kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU create -subtrees o=org -sscope SUB
- Password for "cn=admin,o=org":
- Initializing database for realm 'ATHENA.MIT.EDU'
- You will be prompted for the database Master Password.
- It is important that you NOT FORGET this password.
- Enter KDC database master key:
- Re-enter KDC database master key to verify:
-
-.. _kdb5_ldap_util_create_end:
-
-modify
-~~~~~~
-
-.. _kdb5_ldap_util_modify:
-
- **modify**
- [**-subtrees** *subtree_dn_list*]
- [**-sscope** *search_scope*]
- [**-containerref** *container_reference_dn*]
- [**-maxtktlife** *max_ticket_life*]
- [**-maxrenewlife** *max_renewable_ticket_life*]
- [*ticket_flags*]
-
-Modifies the attributes of a realm. Options:
-
-**-subtrees** *subtree_dn_list*
- Specifies the list of subtrees containing the principals of a
- realm. The list contains the DNs of the subtree objects separated
- by colon (``:``). This list replaces the existing list.
-
-**-sscope** *search_scope*
- Specifies the scope for searching the principals under the
- subtrees. The possible values are 1 or one (one level), 2 or sub
- (subtrees).
-
-**-containerref** *container_reference_dn* Specifies the DN of the
- container object in which the principals of a realm will be
- created.
-
-**-maxtktlife** *max_ticket_life*
- (:ref:`getdate` string) Specifies maximum ticket life for
- principals in this realm.
-
-**-maxrenewlife** *max_renewable_ticket_life*
- (:ref:`getdate` string) Specifies maximum renewable life of
- tickets for principals in this realm.
-
-*ticket_flags*
- Specifies global ticket flags for the realm. Allowable flags are
- documented in the description of the **add_principal** command in
- :ref:`kadmin(1)`.
-
-Example::
-
- shell% kdb5_ldap_util -r ATHENA.MIT.EDU -D cn=admin,o=org -H
- ldaps://ldap-server1.mit.edu modify +requires_preauth
- Password for "cn=admin,o=org":
- shell%
-
-.. _kdb5_ldap_util_modify_end:
-
-view
-~~~~
-
-.. _kdb5_ldap_util_view:
-
- **view**
-
-Displays the attributes of a realm.
-
-Example::
-
- kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU view
- Password for "cn=admin,o=org":
- Realm Name: ATHENA.MIT.EDU
- Subtree: ou=users,o=org
- Subtree: ou=servers,o=org
- SearchScope: ONE
- Maximum ticket life: 0 days 01:00:00
- Maximum renewable life: 0 days 10:00:00
- Ticket flags: DISALLOW_FORWARDABLE REQUIRES_PWCHANGE
-
-.. _kdb5_ldap_util_view_end:
-
-destroy
-~~~~~~~
-
-.. _kdb5_ldap_util_destroy:
-
- **destroy** [**-f**]
-
-Destroys an existing realm. Options:
-
-**-f**
- If specified, will not prompt the user for confirmation.
-
-Example::
-
- shell% kdb5_ldap_util -r ATHENA.MIT.EDU -D cn=admin,o=org -H
- ldaps://ldap-server1.mit.edu destroy
- Password for "cn=admin,o=org":
- Deleting KDC database of 'ATHENA.MIT.EDU', are you sure?
- (type 'yes' to confirm)? yes
- OK, deleting database of 'ATHENA.MIT.EDU'...
- shell%
-
-.. _kdb5_ldap_util_destroy_end:
-
-list
-~~~~
-
-.. _kdb5_ldap_util_list:
-
- **list**
-
-Lists the names of realms under the container.
-
-Example::
-
- shell% kdb5_ldap_util -D cn=admin,o=org -H
- ldaps://ldap-server1.mit.edu list
- Password for "cn=admin,o=org":
- ATHENA.MIT.EDU
- OPENLDAP.MIT.EDU
- MEDIA-LAB.MIT.EDU
- shell%
-
-.. _kdb5_ldap_util_list_end:
-
-stashsrvpw
-~~~~~~~~~~
-
-.. _kdb5_ldap_util_stashsrvpw:
-
- **stashsrvpw**
- [**-f** *filename*]
- *name*
-
-Allows an administrator to store the password for service object in a
-file so that KDC and Administration server can use it to authenticate
-to the LDAP server. Options:
-
-**-f** *filename*
- Specifies the complete path of the service password file. By
- default, ``/usr/local/var/service_passwd`` is used.
-
-*name*
- Specifies the name of the object whose password is to be stored.
- If :ref:`krb5kdc(8)` or :ref:`kadmind(8)` are configured for
- simple binding, this should be the distinguished name it will
- use as given by the **ldap_kdc_dn** or **ldap_kadmind_dn**
- variable in :ref:`kdc.conf(5)`. If the KDC or kadmind is
- configured for SASL binding, this should be the authentication
- name it will use as given by the **ldap_kdc_sasl_authcid** or
- **ldap_kadmind_sasl_authcid** variable.
-
-Example::
-
- kdb5_ldap_util stashsrvpw -f /home/andrew/conf_keyfile
- cn=service-kdc,o=org
- Password for "cn=service-kdc,o=org":
- Re-enter password for "cn=service-kdc,o=org":
-
-.. _kdb5_ldap_util_stashsrvpw_end:
-
-create_policy
-~~~~~~~~~~~~~
-
-.. _kdb5_ldap_util_create_policy:
-
- **create_policy**
- [**-maxtktlife** *max_ticket_life*]
- [**-maxrenewlife** *max_renewable_ticket_life*]
- [*ticket_flags*]
- *policy_name*
-
-Creates a ticket policy in the directory. Options:
-
-**-maxtktlife** *max_ticket_life*
- (:ref:`getdate` string) Specifies maximum ticket life for
- principals.
-
-**-maxrenewlife** *max_renewable_ticket_life*
- (:ref:`getdate` string) Specifies maximum renewable life of
- tickets for principals.
-
-*ticket_flags*
- Specifies the ticket flags. If this option is not specified, by
- default, no restriction will be set by the policy. Allowable
- flags are documented in the description of the **add_principal**
- command in :ref:`kadmin(1)`.
-
-*policy_name*
- Specifies the name of the ticket policy.
-
-Example::
-
- kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU create_policy -maxtktlife "1 day"
- -maxrenewlife "1 week" -allow_postdated +needchange
- -allow_forwardable tktpolicy
- Password for "cn=admin,o=org":
-
-.. _kdb5_ldap_util_create_policy_end:
-
-modify_policy
-~~~~~~~~~~~~~
-
-.. _kdb5_ldap_util_modify_policy:
-
- **modify_policy**
- [**-maxtktlife** *max_ticket_life*]
- [**-maxrenewlife** *max_renewable_ticket_life*]
- [*ticket_flags*]
- *policy_name*
-
-Modifies the attributes of a ticket policy. Options are same as for
-**create_policy**.
-
-Example::
-
- kdb5_ldap_util -D cn=admin,o=org -H
- ldaps://ldap-server1.mit.edu -r ATHENA.MIT.EDU modify_policy
- -maxtktlife "60 minutes" -maxrenewlife "10 hours"
- +allow_postdated -requires_preauth tktpolicy
- Password for "cn=admin,o=org":
-
-.. _kdb5_ldap_util_modify_policy_end:
-
-view_policy
-~~~~~~~~~~~
-
-.. _kdb5_ldap_util_view_policy:
-
- **view_policy**
- *policy_name*
-
-Displays the attributes of the named ticket policy.
-
-Example::
-
- kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU view_policy tktpolicy
- Password for "cn=admin,o=org":
- Ticket policy: tktpolicy
- Maximum ticket life: 0 days 01:00:00
- Maximum renewable life: 0 days 10:00:00
- Ticket flags: DISALLOW_FORWARDABLE REQUIRES_PWCHANGE
-
-.. _kdb5_ldap_util_view_policy_end:
-
-destroy_policy
-~~~~~~~~~~~~~~
-
-.. _kdb5_ldap_util_destroy_policy:
-
- **destroy_policy**
- [**-force**]
- *policy_name*
-
-Destroys an existing ticket policy. Options:
-
-**-force**
- Forces the deletion of the policy object. If not specified, the
- user will be prompted for confirmation before deleting the policy.
-
-*policy_name*
- Specifies the name of the ticket policy.
-
-Example::
-
- kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU destroy_policy tktpolicy
- Password for "cn=admin,o=org":
- This will delete the policy object 'tktpolicy', are you sure?
- (type 'yes' to confirm)? yes
- ** policy object 'tktpolicy' deleted.
-
-.. _kdb5_ldap_util_destroy_policy_end:
-
-list_policy
-~~~~~~~~~~~
-
-.. _kdb5_ldap_util_list_policy:
-
- **list_policy**
-
-Lists ticket policies.
-
-Example::
-
- kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU list_policy
- Password for "cn=admin,o=org":
- tktpolicy
- tmppolicy
- userpolicy
-
-.. _kdb5_ldap_util_list_policy_end:
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kadmin(1)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _kdb5_util(8):
-
-kdb5_util
-=========
-
-SYNOPSIS
---------
-
-.. _kdb5_util_synopsis:
-
-**kdb5_util**
-[**-r** *realm*]
-[**-d** *dbname*]
-[**-k** *mkeytype*]
-[**-kv** *mkeyVNO*]
-[**-M** *mkeyname*]
-[**-m**]
-[**-sf** *stashfilename*]
-[**-P** *password*]
-[**-x** *db_args*]
-*command* [*command_options*]
-
-.. _kdb5_util_synopsis_end:
-
-DESCRIPTION
------------
-
-kdb5_util allows an administrator to perform maintenance procedures on
-the KDC database. Databases can be created, destroyed, and dumped to
-or loaded from ASCII files. kdb5_util can create a Kerberos master
-key stash file or perform live rollover of the master key.
-
-When kdb5_util is run, it attempts to acquire the master key and open
-the database. However, execution continues regardless of whether or
-not kdb5_util successfully opens the database, because the database
-may not exist yet or the stash file may be corrupt.
-
-Note that some KDC database modules may not support all kdb5_util
-commands.
-
-
-COMMAND-LINE OPTIONS
---------------------
-
-.. _kdb5_util_options:
-
-**-r** *realm*
- specifies the Kerberos realm of the database.
-
-**-d** *dbname*
- specifies the name under which the principal database is stored;
- by default the database is that listed in :ref:`kdc.conf(5)`. The
- password policy database and lock files are also derived from this
- value.
-
-**-k** *mkeytype*
- specifies the key type of the master key in the database. The
- default is given by the **master_key_type** variable in
- :ref:`kdc.conf(5)`.
-
-**-kv** *mkeyVNO*
- Specifies the version number of the master key in the database;
- the default is 1. Note that 0 is not allowed.
-
-**-M** *mkeyname*
- principal name for the master key in the database. If not
- specified, the name is determined by the **master_key_name**
- variable in :ref:`kdc.conf(5)`.
-
-**-m**
- specifies that the master database password should be read from
- the keyboard rather than fetched from a file on disk.
-
-**-sf** *stash_file*
- specifies the stash filename of the master database password. If
- not specified, the filename is determined by the
- **key_stash_file** variable in :ref:`kdc.conf(5)`.
-
-**-P** *password*
- specifies the master database password. Using this option may
- expose the password to other users on the system via the process
- list.
-
-**-x** *db_args*
- specifies database-specific options. See :ref:`kadmin(1)` for
- supported options.
-
-.. _kdb5_util_options_end:
-
-
-COMMANDS
---------
-
-create
-~~~~~~
-
-.. _kdb5_util_create:
-
- **create** [**-s**]
-
-Creates a new database. If the **-s** option is specified, the stash
-file is also created. This command fails if the database already
-exists. If the command is successful, the database is opened just as
-if it had already existed when the program was first run.
-
-.. _kdb5_util_create_end:
-
-destroy
-~~~~~~~
-
-.. _kdb5_util_destroy:
-
- **destroy** [**-f**]
-
-Destroys the database, first overwriting the disk sectors and then
-unlinking the files, after prompting the user for confirmation. With
-the **-f** argument, does not prompt the user.
-
-.. _kdb5_util_destroy_end:
-
-stash
-~~~~~
-
-.. _kdb5_util_stash:
-
- **stash** [**-f** *keyfile*]
-
-Stores the master principal's keys in a stash file. The **-f**
-argument can be used to override the *keyfile* specified in
-:ref:`kdc.conf(5)`.
-
-.. _kdb5_util_stash_end:
-
-dump
-~~~~
-
-.. _kdb5_util_dump:
-
- **dump** [**-b7**\|\ **-r13**\|\ **-r18**]
- [**-verbose**] [**-mkey_convert**] [**-new_mkey_file**
- *mkey_file*] [**-rev**] [**-recurse**] [*filename*
- [*principals*...]]
-
-Dumps the current Kerberos and KADM5 database into an ASCII file. By
-default, the database is dumped in current format, "kdb5_util
-load_dump version 7". If filename is not specified, or is the string
-"-", the dump is sent to standard output. Options:
-
-**-b7**
- causes the dump to be in the Kerberos 5 Beta 7 format ("kdb5_util
- load_dump version 4"). This was the dump format produced on
- releases prior to 1.2.2.
-
-**-r13**
- causes the dump to be in the Kerberos 5 1.3 format ("kdb5_util
- load_dump version 5"). This was the dump format produced on
- releases prior to 1.8.
-
-**-r18**
- causes the dump to be in the Kerberos 5 1.8 format ("kdb5_util
- load_dump version 6"). This was the dump format produced on
- releases prior to 1.11.
-
-**-verbose**
- causes the name of each principal and policy to be printed as it
- is dumped.
-
-**-mkey_convert**
- prompts for a new master key. This new master key will be used to
- re-encrypt principal key data in the dumpfile. The principal keys
- themselves will not be changed.
-
-**-new_mkey_file** *mkey_file*
- the filename of a stash file. The master key in this stash file
- will be used to re-encrypt the key data in the dumpfile. The key
- data in the database will not be changed.
-
-**-rev**
- dumps in reverse order. This may recover principals that do not
- dump normally, in cases where database corruption has occurred.
-
-**-recurse**
- causes the dump to walk the database recursively (btree only).
- This may recover principals that do not dump normally, in cases
- where database corruption has occurred. In cases of such
- corruption, this option will probably retrieve more principals
- than the **-rev** option will.
-
- .. versionchanged:: 1.15
- Release 1.15 restored the functionality of the **-recurse**
- option.
-
- .. versionchanged:: 1.5
- The **-recurse** option ceased working until release 1.15,
- doing a normal dump instead of a recursive traversal.
-
-.. _kdb5_util_dump_end:
-
-load
-~~~~
-
-.. _kdb5_util_load:
-
- **load** [**-b7**\|\ **-r13**\|\ **-r18**] [**-hash**]
- [**-verbose**] [**-update**] *filename*
-
-Loads a database dump from the named file into the named database. If
-no option is given to determine the format of the dump file, the
-format is detected automatically and handled as appropriate. Unless
-the **-update** option is given, **load** creates a new database
-containing only the data in the dump file, overwriting the contents of
-any previously existing database. Note that when using the LDAP KDC
-database module, the **-update** flag is required.
-
-Options:
-
-**-b7**
- requires the database to be in the Kerberos 5 Beta 7 format
- ("kdb5_util load_dump version 4"). This was the dump format
- produced on releases prior to 1.2.2.
-
-**-r13**
- requires the database to be in Kerberos 5 1.3 format ("kdb5_util
- load_dump version 5"). This was the dump format produced on
- releases prior to 1.8.
-
-**-r18**
- requires the database to be in Kerberos 5 1.8 format ("kdb5_util
- load_dump version 6"). This was the dump format produced on
- releases prior to 1.11.
-
-**-hash**
- stores the database in hash format, if using the DB2 database
- type. If this option is not specified, the database will be
- stored in btree format. This option is not recommended, as
- databases stored in hash format are known to corrupt data and lose
- principals.
-
-**-verbose**
- causes the name of each principal and policy to be printed as it
- is dumped.
-
-**-update**
- records from the dump file are added to or updated in the existing
- database. Otherwise, a new database is created containing only
- what is in the dump file and the old one destroyed upon successful
- completion.
-
-.. _kdb5_util_load_end:
-
-ark
-~~~
-
- **ark** [**-e** *enc*:*salt*,...] *principal*
-
-Adds new random keys to *principal* at the next available key version
-number. Keys for the current highest key version number will be
-preserved. The **-e** option specifies the list of encryption and
-salt types to be used for the new keys.
-
-add_mkey
-~~~~~~~~
-
- **add_mkey** [**-e** *etype*] [**-s**]
-
-Adds a new master key to the master key principal, but does not mark
-it as active. Existing master keys will remain. The **-e** option
-specifies the encryption type of the new master key; see
-:ref:`Encryption_types` in :ref:`kdc.conf(5)` for a list of possible
-values. The **-s** option stashes the new master key in the stash
-file, which will be created if it doesn't already exist.
-
-After a new master key is added, it should be propagated to replica
-servers via a manual or periodic invocation of :ref:`kprop(8)`. Then,
-the stash files on the replica servers should be updated with the
-kdb5_util **stash** command. Once those steps are complete, the key
-is ready to be marked active with the kdb5_util **use_mkey** command.
-
-use_mkey
-~~~~~~~~
-
- **use_mkey** *mkeyVNO* [*time*]
-
-Sets the activation time of the master key specified by *mkeyVNO*.
-Once a master key becomes active, it will be used to encrypt newly
-created principal keys. If no *time* argument is given, the current
-time is used, causing the specified master key version to become
-active immediately. The format for *time* is :ref:`getdate` string.
-
-After a new master key becomes active, the kdb5_util
-**update_princ_encryption** command can be used to update all
-principal keys to be encrypted in the new master key.
-
-list_mkeys
-~~~~~~~~~~
-
- **list_mkeys**
-
-List all master keys, from most recent to earliest, in the master key
-principal. The output will show the kvno, enctype, and salt type for
-each mkey, similar to the output of :ref:`kadmin(1)` **getprinc**. A
-``*`` following an mkey denotes the currently active master key.
-
-purge_mkeys
-~~~~~~~~~~~
-
- **purge_mkeys** [**-f**] [**-n**] [**-v**]
-
-Delete master keys from the master key principal that are not used to
-protect any principals. This command can be used to remove old master
-keys all principal keys are protected by a newer master key.
-
-**-f**
- does not prompt for confirmation.
-
-**-n**
- performs a dry run, showing master keys that would be purged, but
- not actually purging any keys.
-
-**-v**
- gives more verbose output.
-
-update_princ_encryption
-~~~~~~~~~~~~~~~~~~~~~~~
-
- **update_princ_encryption** [**-f**] [**-n**] [**-v**]
- [*princ-pattern*]
-
-Update all principal records (or only those matching the
-*princ-pattern* glob pattern) to re-encrypt the key data using the
-active database master key, if they are encrypted using a different
-version, and give a count at the end of the number of principals
-updated. If the **-f** option is not given, ask for confirmation
-before starting to make changes. The **-v** option causes each
-principal processed to be listed, with an indication as to whether it
-needed updating or not. The **-n** option performs a dry run, only
-showing the actions which would have been taken.
-
-tabdump
-~~~~~~~
-
- **tabdump** [**-H**] [**-c**] [**-e**] [**-n**] [**-o** *outfile*]
- *dumptype*
-
-Dump selected fields of the database in a tabular format suitable for
-reporting (e.g., using traditional Unix text processing tools) or
-importing into relational databases. The data format is tab-separated
-(default), or optionally comma-separated (CSV), with a fixed number of
-columns. The output begins with a header line containing field names,
-unless suppression is requested using the **-H** option.
-
-The *dumptype* parameter specifies the name of an output table (see
-below).
-
-Options:
-
-**-H**
- suppress writing the field names in a header line
-
-**-c**
- use comma separated values (CSV) format, with minimal quoting,
- instead of the default tab-separated (unquoted, unescaped) format
-
-**-e**
- write empty hexadecimal string fields as empty fields instead of
- as "-1".
-
-**-n**
- produce numeric output for fields that normally have symbolic
- output, such as enctypes and flag names. Also requests output of
- time stamps as decimal POSIX time_t values.
-
-**-o** *outfile*
- write the dump to the specified output file instead of to standard
- output
-
-Dump types:
-
-**keydata**
- principal encryption key information, including actual key data
- (which is still encrypted in the master key)
-
- **name**
- principal name
- **keyindex**
- index of this key in the principal's key list
- **kvno**
- key version number
- **enctype**
- encryption type
- **key**
- key data as a hexadecimal string
- **salttype**
- salt type
- **salt**
- salt data as a hexadecimal string
-
-**keyinfo**
- principal encryption key information (as in **keydata** above),
- excluding actual key data
-
-**princ_flags**
- principal boolean attributes. Flag names print as hexadecimal
- numbers if the **-n** option is specified, and all flag positions
- are printed regardless of whether or not they are set. If **-n**
- is not specified, print all known flag names for each principal,
- but only print hexadecimal flag names if the corresponding flag is
- set.
-
- **name**
- principal name
- **flag**
- flag name
- **value**
- boolean value (0 for clear, or 1 for set)
-
-**princ_lockout**
- state information used for tracking repeated password failures
-
- **name**
- principal name
- **last_success**
- time stamp of most recent successful authentication
- **last_failed**
- time stamp of most recent failed authentication
- **fail_count**
- count of failed attempts
-
-**princ_meta**
- principal metadata
-
- **name**
- principal name
- **modby**
- name of last principal to modify this principal
- **modtime**
- timestamp of last modification
- **lastpwd**
- timestamp of last password change
- **policy**
- policy object name
- **mkvno**
- key version number of the master key that encrypts this
- principal's key data
- **hist_kvno**
- key version number of the history key that encrypts the key
- history data for this principal
-
-**princ_stringattrs**
- string attributes (key/value pairs)
-
- **name**
- principal name
- **key**
- attribute name
- **value**
- attribute value
-
-**princ_tktpolicy**
- per-principal ticket policy data, including maximum ticket
- lifetimes
-
- **name**
- principal name
- **expiration**
- principal expiration date
- **pw_expiration**
- password expiration date
- **max_life**
- maximum ticket lifetime
- **max_renew_life**
- maximum renewable ticket lifetime
-
-Examples::
-
- $ kdb5_util tabdump -o keyinfo.txt keyinfo
- $ cat keyinfo.txt
- name keyindex kvno enctype salttype salt
- K/M@EXAMPLE.COM 0 1 aes256-cts-hmac-sha384-192 normal -1
- foo@EXAMPLE.COM 0 1 aes128-cts-hmac-sha1-96 normal -1
- bar@EXAMPLE.COM 0 1 aes128-cts-hmac-sha1-96 normal -1
- $ sqlite3
- sqlite> .mode tabs
- sqlite> .import keyinfo.txt keyinfo
- sqlite> select * from keyinfo where enctype like 'aes256-%';
- K/M@EXAMPLE.COM 1 1 aes256-cts-hmac-sha384-192 normal -1
- sqlite> .quit
- $ awk -F'\t' '$4 ~ /aes256-/ { print }' keyinfo.txt
- K/M@EXAMPLE.COM 1 1 aes256-cts-hmac-sha384-192 normal -1
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kadmin(1)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _kprop(8):
-
-kprop
-=====
-
-SYNOPSIS
---------
-
-**kprop**
-[**-r** *realm*]
-[**-f** *file*]
-[**-d**]
-[**-P** *port*]
-[**-s** *keytab*]
-*replica_host*
-
-
-DESCRIPTION
------------
-
-kprop is used to securely propagate a Kerberos V5 database dump file
-from the primary Kerberos server to a replica Kerberos server, which is
-specified by *replica_host*. The dump file must be created by
-:ref:`kdb5_util(8)`.
-
-
-OPTIONS
--------
-
-**-r** *realm*
- Specifies the realm of the primary server.
-
-**-f** *file*
- Specifies the filename where the dumped principal database file is
- to be found; by default the dumped database file is normally
- |kdcdir|\ ``/replica_datatrans``.
-
-**-P** *port*
- Specifies the port to use to contact the :ref:`kpropd(8)` server
- on the remote host.
-
-**-d**
- Prints debugging information.
-
-**-s** *keytab*
- Specifies the location of the keytab file.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kpropd(8)`, :ref:`kdb5_util(8)`, :ref:`krb5kdc(8)`,
-:ref:`kerberos(7)`
+++ /dev/null
-.. _kpropd(8):
-
-kpropd
-======
-
-SYNOPSIS
---------
-
-**kpropd**
-[**-r** *realm*]
-[**-A** *admin_server*]
-[**-a** *acl_file*]
-[**-f** *replica_dumpfile*]
-[**-F** *principal_database*]
-[**-p** *kdb5_util_prog*]
-[**-P** *port*]
-[**--pid-file**\ =\ *pid_file*]
-[**-D**]
-[**-d**]
-[**-s** *keytab_file*]
-
-DESCRIPTION
------------
-
-The *kpropd* command runs on the replica KDC server. It listens for
-update requests made by the :ref:`kprop(8)` program. If incremental
-propagation is enabled, it periodically requests incremental updates
-from the primary KDC.
-
-When the replica receives a kprop request from the primary, kpropd
-accepts the dumped KDC database and places it in a file, and then runs
-:ref:`kdb5_util(8)` to load the dumped database into the active
-database which is used by :ref:`krb5kdc(8)`. This allows the primary
-Kerberos server to use :ref:`kprop(8)` to propagate its database to
-the replica servers. Upon a successful download of the KDC database
-file, the replica Kerberos server will have an up-to-date KDC
-database.
-
-Where incremental propagation is not used, kpropd is commonly invoked
-out of inetd(8) as a nowait service. This is done by adding a line to
-the ``/etc/inetd.conf`` file which looks like this::
-
- kprop stream tcp nowait root /usr/local/sbin/kpropd kpropd
-
-kpropd can also run as a standalone daemon, backgrounding itself and
-waiting for connections on port 754 (or the port specified with the
-**-P** option if given). Standalone mode is required for incremental
-propagation. Starting in release 1.11, kpropd automatically detects
-whether it was run from inetd and runs in standalone mode if it is
-not. Prior to release 1.11, the **-S** option is required to run
-kpropd in standalone mode; this option is now accepted for backward
-compatibility but does nothing.
-
-Incremental propagation may be enabled with the **iprop_enable**
-variable in :ref:`kdc.conf(5)`. If incremental propagation is
-enabled, the replica periodically polls the primary KDC for updates, at
-an interval determined by the **iprop_replica_poll** variable. If the
-replica receives updates, kpropd updates its log file with any updates
-from the primary. :ref:`kproplog(8)` can be used to view a summary of
-the update entry log on the replica KDC. If incremental propagation
-is enabled, the principal ``kiprop/replicahostname@REALM`` (where
-*replicahostname* is the name of the replica KDC host, and *REALM* is
-the name of the Kerberos realm) must be present in the replica's
-keytab file.
-
-:ref:`kproplog(8)` can be used to force full replication when iprop is
-enabled.
-
-
-OPTIONS
---------
-
-**-r** *realm*
- Specifies the realm of the primary server.
-
-**-A** *admin_server*
- Specifies the server to be contacted for incremental updates; by
- default, the primary admin server is contacted.
-
-**-f** *file*
- Specifies the filename where the dumped principal database file is
- to be stored; by default the dumped database file is |kdcdir|\
- ``/from_master``.
-
-**-F** *kerberos_db*
- Path to the Kerberos database file, if not the default.
-
-**-p**
- Allows the user to specify the pathname to the :ref:`kdb5_util(8)`
- program; by default the pathname used is |sbindir|\
- ``/kdb5_util``.
-
-**-D**
- In this mode, kpropd will not detach itself from the current job
- and run in the background. Instead, it will run in the
- foreground.
-
-**-d**
- Turn on debug mode. kpropd will print out debugging messages
- during the database propogation and will run in the foreground
- (implies **-D**).
-
-**-P**
- Allow for an alternate port number for kpropd to listen on. This
- is only useful in combination with the **-S** option.
-
-**-a** *acl_file*
- Allows the user to specify the path to the kpropd.acl file; by
- default the path used is |kdcdir|\ ``/kpropd.acl``.
-
-**--pid-file**\ =\ *pid_file*
- In standalone mode, write the process ID of the daemon into
- *pid_file*.
-
-**-s** *keytab_file*
- Path to a keytab to use for acquiring acceptor credentials.
-
-**-x** *db_args*
- Database-specific arguments. See :ref:`Database Options
- <dboptions>` in :ref:`kadmin(1)` for supported arguments.
-
-
-FILES
------
-
-kpropd.acl
- Access file for kpropd; the default location is
- ``/usr/local/var/krb5kdc/kpropd.acl``. Each entry is a line
- containing the principal of a host from which the local machine
- will allow Kerberos database propagation via :ref:`kprop(8)`.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kprop(8)`, :ref:`kdb5_util(8)`, :ref:`krb5kdc(8)`,
-:ref:`kerberos(7)`, inetd(8)
+++ /dev/null
-.. _kproplog(8):
-
-kproplog
-========
-
-SYNOPSIS
---------
-
-**kproplog** [**-h**] [**-e** *num*] [-v]
-**kproplog** [-R]
-
-
-DESCRIPTION
------------
-
-The kproplog command displays the contents of the KDC database update
-log to standard output. It can be used to keep track of incremental
-updates to the principal database. The update log file contains the
-update log maintained by the :ref:`kadmind(8)` process on the primary
-KDC server and the :ref:`kpropd(8)` process on the replica KDC
-servers. When updates occur, they are logged to this file.
-Subsequently any KDC replica configured for incremental updates will
-request the current data from the primary KDC and update their log
-file with any updates returned.
-
-The kproplog command requires read access to the update log file. It
-will display update entries only for the KDC it runs on.
-
-If no options are specified, kproplog displays a summary of the update
-log. If invoked on the primary, kproplog also displays all of the
-update entries. If invoked on a replica KDC server, kproplog displays
-only a summary of the updates, which includes the serial number of the
-last update received and the associated time stamp of the last update.
-
-
-OPTIONS
--------
-
-**-R**
- Reset the update log. This forces full resynchronization. If
- used on a replica then that replica will request a full resync.
- If used on the primary then all replicas will request full
- resyncs.
-
-**-h**
- Display a summary of the update log. This information includes
- the database version number, state of the database, the number of
- updates in the log, the time stamp of the first and last update,
- and the version number of the first and last update entry.
-
-**-e** *num*
- Display the last *num* update entries in the log. This is useful
- when debugging synchronization between KDC servers.
-
-**-v**
- Display individual attributes per update. An example of the
- output generated for one entry::
-
- Update Entry
- Update serial # : 4
- Update operation : Add
- Update principal : test@EXAMPLE.COM
- Update size : 424
- Update committed : True
- Update time stamp : Fri Feb 20 23:37:42 2004
- Attributes changed : 6
- Principal
- Key data
- Password last changed
- Modifying principal
- Modification time
- TL data
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kpropd(8)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _krb5kdc(8):
-
-krb5kdc
-=======
-
-SYNOPSIS
---------
-
-**krb5kdc**
-[**-x** *db_args*]
-[**-d** *dbname*]
-[**-k** *keytype*]
-[**-M** *mkeyname*]
-[**-p** *portnum*]
-[**-m**]
-[**-r** *realm*]
-[**-n**]
-[**-w** *numworkers*]
-[**-P** *pid_file*]
-[**-T** *time_offset*]
-
-
-DESCRIPTION
------------
-
-krb5kdc is the Kerberos version 5 Authentication Service and Key
-Distribution Center (AS/KDC).
-
-
-OPTIONS
--------
-
-The **-r** *realm* option specifies the realm for which the server
-should provide service. This option may be specified multiple times
-to serve multiple realms. If no **-r** option is given, the default
-realm (as specified in :ref:`krb5.conf(5)`) will be served.
-
-The **-d** *dbname* option specifies the name under which the
-principal database can be found. This option does not apply to the
-LDAP database.
-
-The **-k** *keytype* option specifies the key type of the master key
-to be entered manually as a password when **-m** is given; the default
-is |defmkey|.
-
-The **-M** *mkeyname* option specifies the principal name for the
-master key in the database (usually ``K/M`` in the KDC's realm).
-
-The **-m** option specifies that the master database password should
-be fetched from the keyboard rather than from a stash file.
-
-The **-n** option specifies that the KDC does not put itself in the
-background and does not disassociate itself from the terminal.
-
-The **-P** *pid_file* option tells the KDC to write its PID into
-*pid_file* after it starts up. This can be used to identify whether
-the KDC is still running and to allow init scripts to stop the correct
-process.
-
-The **-p** *portnum* option specifies the default UDP and TCP port
-numbers which the KDC should listen on for Kerberos version 5
-requests, as a comma-separated list. This value overrides the port
-numbers specified in the :ref:`kdcdefaults` section of
-:ref:`kdc.conf(5)`, but may be overridden by realm-specific values.
-If no value is given from any source, the default port is 88.
-
-The **-w** *numworkers* option tells the KDC to fork *numworkers*
-processes to listen to the KDC ports and process requests in parallel.
-The top level KDC process (whose pid is recorded in the pid file if
-the **-P** option is also given) acts as a supervisor. The supervisor
-will relay SIGHUP signals to the worker subprocesses, and will
-terminate the worker subprocess if the it is itself terminated or if
-any other worker process exits.
-
-The **-x** *db_args* option specifies database-specific arguments.
-See :ref:`Database Options <dboptions>` in :ref:`kadmin(1)` for
-supported arguments.
-
-The **-T** *offset* option specifies a time offset, in seconds, which
-the KDC will operate under. It is intended only for testing purposes.
-
-EXAMPLE
--------
-
-The KDC may service requests for multiple realms (maximum 32 realms).
-The realms are listed on the command line. Per-realm options that can
-be specified on the command line pertain for each realm that follows
-it and are superseded by subsequent definitions of the same option.
-
-For example::
-
- krb5kdc -p 2001 -r REALM1 -p 2002 -r REALM2 -r REALM3
-
-specifies that the KDC listen on port 2001 for REALM1 and on port 2002
-for REALM2 and REALM3. Additionally, per-realm parameters may be
-specified in the :ref:`kdc.conf(5)` file. The location of this file
-may be specified by the **KRB5_KDC_PROFILE** environment variable.
-Per-realm parameters specified in this file take precedence over
-options specified on the command line. See the :ref:`kdc.conf(5)`
-description for further details.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kdb5_util(8)`, :ref:`kdc.conf(5)`, :ref:`krb5.conf(5)`,
-:ref:`kdb5_ldap_util(8)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _ktutil(1):
-
-ktutil
-======
-
-SYNOPSIS
---------
-
-**ktutil**
-
-
-DESCRIPTION
------------
-
-The ktutil command invokes a command interface from which an
-administrator can read, write, or edit entries in a keytab. (Kerberos
-V4 srvtab files are no longer supported.)
-
-
-COMMANDS
---------
-
-list
-~~~~
-
- **list** [**-t**] [**-k**] [**-e**]
-
-Displays the current keylist. If **-t**, **-k**, and/or **-e** are
-specified, also display the timestamp, key contents, or enctype
-(respectively).
-
-Alias: **l**
-
-read_kt
-~~~~~~~
-
- **read_kt** *keytab*
-
-Read the Kerberos V5 keytab file *keytab* into the current keylist.
-
-Alias: **rkt**
-
-write_kt
-~~~~~~~~
-
- **write_kt** *keytab*
-
-Write the current keylist into the Kerberos V5 keytab file *keytab*.
-
-Alias: **wkt**
-
-clear_list
-~~~~~~~~~~
-
- **clear_list**
-
-Clear the current keylist.
-
-Alias: **clear**
-
-delete_entry
-~~~~~~~~~~~~
-
- **delete_entry** *slot*
-
-Delete the entry in slot number *slot* from the current keylist.
-
-Alias: **delent**
-
-add_entry
-~~~~~~~~~
-
- **add_entry** {**-key**\|\ **-password**} **-p** *principal*
- **-k** *kvno* [**-e** *enctype*] [**-f**\|\ **-s** *salt*]
-
-Add *principal* to keylist using key or password. If the **-f** flag
-is specified, salt information will be fetched from the KDC; in this
-case the **-e** flag may be omitted, or it may be supplied to force a
-particular enctype. If the **-f** flag is not specified, the **-e**
-flag must be specified, and the default salt will be used unless
-overridden with the **-s** option.
-
-Alias: **addent**
-
-list_requests
-~~~~~~~~~~~~~
-
- **list_requests**
-
-Displays a listing of available commands.
-
-Aliases: **lr**, **?**
-
-quit
-~~~~
-
- **quit**
-
-Quits ktutil.
-
-Aliases: **exit**, **q**
-
-
-EXAMPLE
--------
-
- ::
-
- ktutil: add_entry -password -p alice@BLEEP.COM -k 1 -e
- aes128-cts-hmac-sha1-96
- Password for alice@BLEEP.COM:
- ktutil: add_entry -password -p alice@BLEEP.COM -k 1 -e
- aes256-cts-hmac-sha1-96
- Password for alice@BLEEP.COM:
- ktutil: write_kt alice.keytab
- ktutil:
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kadmin(1)`, :ref:`kdb5_util(8)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _sserver(8):
-
-sserver
-=======
-
-SYNOPSIS
---------
-
-**sserver**
-[ **-p** *port* ]
-[ **-S** *keytab* ]
-[ *server_port* ]
-
-
-DESCRIPTION
------------
-
-sserver and :ref:`sclient(1)` are a simple demonstration client/server
-application. When sclient connects to sserver, it performs a Kerberos
-authentication, and then sserver returns to sclient the Kerberos
-principal which was used for the Kerberos authentication. It makes a
-good test that Kerberos has been successfully installed on a machine.
-
-The service name used by sserver and sclient is sample. Hence,
-sserver will require that there be a keytab entry for the service
-``sample/hostname.domain.name@REALM.NAME``. This keytab is generated
-using the :ref:`kadmin(1)` program. The keytab file is usually
-installed as |keytab|.
-
-The **-S** option allows for a different keytab than the default.
-
-sserver is normally invoked out of inetd(8), using a line in
-``/etc/inetd.conf`` that looks like this::
-
- sample stream tcp nowait root /usr/local/sbin/sserver sserver
-
-Since ``sample`` is normally not a port defined in ``/etc/services``,
-you will usually have to add a line to ``/etc/services`` which looks
-like this::
-
- sample 13135/tcp
-
-When using sclient, you will first have to have an entry in the
-Kerberos database, by using :ref:`kadmin(1)`, and then you have to get
-Kerberos tickets, by using :ref:`kinit(1)`. Also, if you are running
-the sclient program on a different host than the sserver it will be
-connecting to, be sure that both hosts have an entry in /etc/services
-for the sample tcp port, and that the same port number is in both
-files.
-
-When you run sclient you should see something like this::
-
- sendauth succeeded, reply is:
- reply len 32, contents:
- You are nlgilman@JIMI.MIT.EDU
-
-
-COMMON ERROR MESSAGES
----------------------
-
-1) kinit returns the error::
-
- kinit: Client not found in Kerberos database while getting
- initial credentials
-
- This means that you didn't create an entry for your username in the
- Kerberos database.
-
-2) sclient returns the error::
-
- unknown service sample/tcp; check /etc/services
-
- This means that you don't have an entry in /etc/services for the
- sample tcp port.
-
-3) sclient returns the error::
-
- connect: Connection refused
-
- This probably means you didn't edit /etc/inetd.conf correctly, or
- you didn't restart inetd after editing inetd.conf.
-
-4) sclient returns the error::
-
- sclient: Server not found in Kerberos database while using
- sendauth
-
- This means that the ``sample/hostname@LOCAL.REALM`` service was not
- defined in the Kerberos database; it should be created using
- :ref:`kadmin(1)`, and a keytab file needs to be generated to make
- the key for that service principal available for sclient.
-
-5) sclient returns the error::
-
- sendauth rejected, error reply is:
- "No such file or directory"
-
- This probably means sserver couldn't find the keytab file. It was
- probably not installed in the proper directory.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`sclient(1)`, :ref:`kerberos(7)`, services(5), inetd(8)
+++ /dev/null
-Advanced topics
-===============
-
-
-.. toctree::
- :maxdepth: 1
-
- retiring-des.rst
+++ /dev/null
-.. _retiring-des:
-
-Retiring DES
-=======================
-
-Version 5 of the Kerberos protocol was originally implemented using
-the Data Encryption Standard (DES) as a block cipher for encryption.
-While it was considered secure at the time, advancements in computational
-ability have rendered DES vulnerable to brute force attacks on its 56-bit
-keyspace. As such, it is now considered insecure and should not be
-used (:rfc:`6649`).
-
-History
--------
-
-DES was used in the original Kerberos implementation, and was the
-only cryptosystem in krb5 1.0. Partial support for triple-DES (3DES) was
-added in version 1.1, with full support following in version 1.2.
-The Advanced Encryption Standard (AES), which supersedes DES, gained
-partial support in version 1.3.0 of krb5 and full support in version 1.3.2.
-However, deployments of krb5 using Kerberos databases created with older
-versions of krb5 will not necessarily start using strong crypto for
-ordinary operation without administrator intervention.
-
-MIT krb5 began flagging deprecated encryption types with release 1.17,
-and removed DES (single-DES) support in release 1.18. As a
-consequence, a release prior to 1.18 is required to perform these
-migrations.
-
-Types of keys
--------------
-
-* The database master key: This key is not exposed to user requests,
- but is used to encrypt other key material stored in the kerberos
- database. The database master key is currently stored as ``K/M``
- by default.
-* Password-derived keys: User principals frequently have keys
- derived from a password. When a new password is set, the KDC
- uses various string2key functions to generate keys in the database
- for that principal.
-* Keytab keys: Application server principals generally use random
- keys which are not derived from a password. When the database
- entry is created, the KDC generates random keys of various enctypes
- to enter in the database, which are conveyed to the application server
- and stored in a keytab.
-* Session keys: These are short-term keys generated by the KDC while
- processing client requests, with an enctype selected by the KDC.
-
-For details on the various enctypes and how enctypes are selected by the KDC
-for session keys and client/server long-term keys, see :ref:`enctypes`.
-When using the :ref:`kadmin(1)` interface to generate new long-term keys,
-the **-e** argument can be used to force a particular set of enctypes,
-overriding the KDC default values.
-
-.. note::
-
- When the KDC is selecting a session key, it has no knowledge about the
- kerberos installation on the server which will receive the service ticket,
- only what keys are in the database for the service principal.
- In order to allow uninterrupted operation to
- clients while migrating away from DES, care must be taken to ensure that
- kerberos installations on application server machines are configured to
- support newer encryption types before keys of those new encryption types
- are created in the Kerberos database for those server principals.
-
-Upgrade procedure
------------------
-
-This procedure assumes that the KDC software has already been upgraded
-to a modern version of krb5 that supports non-DES keys, so that the
-only remaining task is to update the actual keys used to service requests.
-The realm used for demonstrating this procedure, ZONE.MIT.EDU,
-is an example of the worst-case scenario, where all keys in the realm
-are DES. The realm was initially created with a very old version of krb5,
-and **supported_enctypes** in :ref:`kdc.conf(5)` was set to a value
-appropriate when the KDC was installed, but was not updated as the KDC
-was upgraded:
-
-::
-
- [realms]
- ZONE.MIT.EDU = {
- [...]
- master_key_type = des-cbc-crc
- supported_enctypes = des-cbc-crc:normal des:normal des:v4 des:norealm des:onlyrealm des:afs3
- }
-
-This resulted in the keys for all principals in the realm being forced
-to DES-only, unless specifically requested using :ref:`kadmin(1)`.
-
-Before starting the upgrade, all KDCs were running krb5 1.11,
-and the database entries for some "high-value" principals were:
-
-::
-
- [root@casio krb5kdc]# kadmin.local -r ZONE.MIT.EDU -q 'getprinc krbtgt/ZONE.MIT.EDU'
- [...]
- Number of keys: 1
- Key: vno 1, des-cbc-crc:v4
- [...]
- [root@casio krb5kdc]# kadmin.local -r ZONE.MIT.EDU -q 'getprinc kadmin/admin'
- [...]
- Number of keys: 1
- Key: vno 15, des-cbc-crc
- [...]
- [root@casio krb5kdc]# kadmin.local -r ZONE.MIT.EDU -q 'getprinc kadmin/changepw'
- [...]
- Number of keys: 1
- Key: vno 14, des-cbc-crc
- [...]
-
-The ``krbtgt/REALM`` key appears to have never been changed since creation
-(its kvno is 1), and all three database entries have only a des-cbc-crc key.
-
-The krbtgt key and KDC keys
-~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-Perhaps the biggest single-step improvement in the security of the cell
-is gained by strengthening the key of the ticket-granting service principal,
-``krbtgt/REALM``---if this principal's key is compromised, so is the
-entire realm. Since the server that will handle service tickets
-for this principal is the KDC itself, it is easy to guarantee that it
-will be configured to support any encryption types which might be
-selected. However, the default KDC behavior when creating new keys is to
-remove the old keys, which would invalidate all existing tickets issued
-against that principal, rendering the TGTs cached by clients useless.
-Instead, a new key can be created with the old key retained, so that
-existing tickets will still function until their scheduled expiry
-(see :ref:`changing_krbtgt_key`).
-
-::
-
- [root@casio krb5kdc]# enctypes=aes256-cts-hmac-sha1-96:normal,\
- > aes128-cts-hmac-sha1-96:normal,des3-hmac-sha1:normal,des-cbc-crc:normal
- [root@casio krb5kdc]# kadmin.local -r ZONE.MIT.EDU -q "cpw -e ${enctypes} -randkey \
- > -keepold krbtgt/ZONE.MIT.EDU"
- Authenticating as principal root/admin@ZONE.MIT.EDU with password.
- Key for "krbtgt/ZONE.MIT.EDU@ZONE.MIT.EDU" randomized.
-
-.. note::
-
- The new ``krbtgt@REALM`` key should be propagated to replica KDCs
- immediately so that TGTs issued by the primary KDC can be used to
- issue service tickets on replica KDCs. Replica KDCs will refuse
- requests using the new TGT kvno until the new krbtgt entry has
- been propagated to them.
-
-It is necessary to explicitly specify the enctypes for the new database
-entry, since **supported_enctypes** has not been changed. Leaving
-**supported_enctypes** unchanged makes a potential rollback operation
-easier, since all new keys of new enctypes are the result of explicit
-administrator action and can be easily enumerated.
-Upgrading the krbtgt key should have minimal user-visible disruption other
-than that described in the note above, since only clients which list the
-new enctypes as supported will use them, per the procedure
-in :ref:`session_key_selection`.
-Once the krbtgt key is updated, the session and ticket keys for user
-TGTs will be strong keys, but subsequent requests
-for service tickets will still get DES keys until the service principals
-have new keys generated. Application service
-remains uninterrupted due to the key-selection procedure on the KDC.
-
-After the change, the database entry is now:
-
-::
-
- [root@casio krb5kdc]# kadmin.local -r ZONE.MIT.EDU -q 'getprinc krbtgt/ZONE.MIT.EDU'
- [...]
- Number of keys: 5
- Key: vno 2, aes256-cts-hmac-sha1-96
- Key: vno 2, aes128-cts-hmac-sha1-96
- Key: vno 2, des3-cbc-sha1
- Key: vno 2, des-cbc-crc
- Key: vno 1, des-cbc-crc:v4
- [...]
-
-Since the expected disruptions from rekeying the krbtgt principal are
-minor, after a short testing period, it is
-appropriate to rekey the other high-value principals, ``kadmin/admin@REALM``
-and ``kadmin/changepw@REALM``. These are the service principals used for
-changing user passwords and updating application keytabs. The kadmin
-and password-changing services are regular kerberized services, so the
-session-key-selection algorithm described in :ref:`session_key_selection`
-applies. It is particularly important to have strong session keys for
-these services, since user passwords and new long-term keys are conveyed
-over the encrypted channel.
-
-::
-
- [root@casio krb5kdc]# enctypes=aes256-cts-hmac-sha1-96:normal,\
- > aes128-cts-hmac-sha1-96:normal,des3-hmac-sha1:normal
- [root@casio krb5kdc]# kadmin.local -r ZONE.MIT.EDU -q "cpw -e ${enctypes} -randkey \
- > kadmin/admin"
- Authenticating as principal root/admin@ZONE.MIT.EDU with password.
- Key for "kadmin/admin@ZONE.MIT.EDU" randomized.
- [root@casio krb5kdc]# kadmin.local -r ZONE.MIT.EDU -q "cpw -e ${enctypes} -randkey \
- > kadmin/changepw"
- Authenticating as principal root/admin@ZONE.MIT.EDU with password.
- Key for "kadmin/changepw@ZONE.MIT.EDU" randomized.
-
-It is not necessary to retain a single-DES key for these services, since
-password changes are not part of normal daily workflow, and disruption
-from a client failure is likely to be minimal. Furthermore, if a kerberos
-client experiences failure changing a user password or keytab key,
-this indicates that that client will become inoperative once services
-are rekeyed to non-DES enctypes. Such problems can be detected early
-at this stage, giving more time for corrective action.
-
-Adding strong keys to application servers
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-Before switching the default enctypes for new keys over to strong enctypes,
-it may be desired to test upgrading a handful of services with the
-new configuration before flipping the switch for the defaults. This
-still requires using the **-e** argument in :ref:`kadmin(1)` to get non-default
-enctypes:
-
-::
-
- [root@casio krb5kdc]# enctypes=aes256-cts-hmac-sha1-96:normal,\
- > aes128-cts-hmac-sha1-96:normal,des3-cbc-sha1:normal,des-cbc-crc:normal
- [root@casio krb5kdc]# kadmin -r ZONE.MIT.EDU -p zephyr/zephyr@ZONE.MIT.EDU -k -t \
- > /etc/zephyr/krb5.keytab -q "ktadd -e ${enctypes} \
- > -k /etc/zephyr/krb5.keytab zephyr/zephyr@ZONE.MIT.EDU"
- Authenticating as principal zephyr/zephyr@ZONE.MIT.EDU with keytab /etc/zephyr/krb5.keytab.
- Entry for principal zephyr/zephyr@ZONE.MIT.EDU with kvno 4, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/zephyr/krb5.keytab.
- Entry for principal zephyr/zephyr@ZONE.MIT.EDU with kvno 4, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/zephyr/krb5.keytab.
- Entry for principal zephyr/zephyr@ZONE.MIT.EDU with kvno 4, encryption type des3-cbc-sha1 added to keytab WRFILE:/etc/zephyr/krb5.keytab.
- Entry for principal zephyr/zephyr@ZONE.MIT.EDU with kvno 4, encryption type des-cbc-crc added to keytab WRFILE:/etc/zephyr/krb5.keytab.
-
-Be sure to remove the old keys from the application keytab, per best
-practice.
-
-::
-
- [root@casio krb5kdc]# k5srvutil -f /etc/zephyr/krb5.keytab delold
- Authenticating as principal zephyr/zephyr@ZONE.MIT.EDU with keytab /etc/zephyr/krb5.keytab.
- Entry for principal zephyr/zephyr@ZONE.MIT.EDU with kvno 3 removed from keytab WRFILE:/etc/zephyr/krb5.keytab.
-
-Adding strong keys by default
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-Once the high-visibility services have been rekeyed, it is probably
-appropriate to change :ref:`kdc.conf(5)` to generate keys with the new
-encryption types by default. This enables server administrators to generate
-new enctypes with the **change** subcommand of :ref:`k5srvutil(1)`,
-and causes user password
-changes to add new encryption types for their entries. It will probably
-be necessary to implement administrative controls to cause all user
-principal keys to be updated in a reasonable period of time, whether
-by forcing password changes or a password synchronization service that
-has access to the current password and can add the new keys.
-
-::
-
- [realms]
- ZONE.MIT.EDU = {
- supported_enctypes = aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal des3-cbc-sha1:normal des3-hmac-sha1:normal des-cbc-crc:normal
-
-.. note::
-
- The krb5kdc process must be restarted for these changes to take effect.
-
-At this point, all service administrators can update their services and the
-servers behind them to take advantage of strong cryptography.
-If necessary, the server's krb5 installation should be configured and/or
-upgraded to a version supporting non-DES keys. See :ref:`enctypes` for
-krb5 version and configuration settings.
-Only when the service is configured to accept non-DES keys should
-the key version number be incremented and new keys generated
-(``k5srvutil change && k5srvutil delold``).
-
-::
-
- root@dr-willy:~# k5srvutil change
- Authenticating as principal host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU with keytab /etc/krb5.keytab.
- Entry for principal host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU with kvno 3, encryption type AES-256 CTS mode with 96-bit SHA-1 HMAC added to keytab WRFILE:/etc/krb5.keytab.
- Entry for principal host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU with kvno 3, encryption type AES-128 CTS mode with 96-bit SHA-1 HMAC added to keytab WRFILE:/etc/krb5.keytab.
- Entry for principal host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU with kvno 3, encryption type Triple DES cbc mode with HMAC/sha1 added to keytab WRFILE:/etc/krb5.keytab.
- Entry for principal host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU with kvno 3, encryption type DES cbc mode with CRC-32 added to keytab WRFILE:/etc/krb5.keytab.
- root@dr-willy:~# klist -e -k -t /etc/krb5.keytab
- Keytab name: WRFILE:/etc/krb5.keytab
- KVNO Timestamp Principal
- ---- ----------------- --------------------------------------------------------
- 2 10/10/12 17:03:59 host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU (DES cbc mode with CRC-32)
- 3 12/12/12 15:31:19 host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU (AES-256 CTS mode with 96-bit SHA-1 HMAC)
- 3 12/12/12 15:31:19 host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU (AES-128 CTS mode with 96-bit SHA-1 HMAC)
- 3 12/12/12 15:31:19 host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU (Triple DES cbc mode with HMAC/sha1)
- 3 12/12/12 15:31:19 host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU (DES cbc mode with CRC-32)
- root@dr-willy:~# k5srvutil delold
- Authenticating as principal host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU with keytab /etc/krb5.keytab.
- Entry for principal host/dr-willy.xvm.mit.edu@ZONE.MIT.EDU with kvno 2 removed from keytab WRFILE:/etc/krb5.keytab.
-
-When a single service principal is shared by multiple backend servers in
-a load-balanced environment, it may be necessary to schedule downtime
-or adjust the population in the load-balanced pool in order to propagate
-the updated keytab to all hosts in the pool with minimal service interruption.
-
-Removing DES keys from usage
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-This situation remains something of a testing or transitory state,
-as new DES keys are still being generated, and will be used if requested
-by a client. To make more progress removing DES from the realm, the KDC
-should be configured to not generate such keys by default.
-
-.. note::
-
- An attacker posing as a client can implement a brute force attack against
- a DES key for any principal, if that key is in the current (highest-kvno)
- key list. This attack is only possible if **allow_weak_crypto = true**
- is enabled on the KDC. Setting the **+requires_preauth** flag on a
- principal forces this attack to be an online attack, much slower than
- the offline attack otherwise available to the attacker. However, setting
- this flag on a service principal is not always advisable; see the entry in
- :ref:`add_principal` for details.
-
-The following KDC configuration will not generate DES keys by default:
-
-::
-
- [realms]
- ZONE.MIT.EDU = {
- supported_enctypes = aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal des3-cbc-sha1:normal des3-hmac-sha1:normal
-
-.. note::
-
- As before, the KDC process must be restarted for this change to take
- effect. It is best practice to update kdc.conf on all KDCs, not just the
- primary, to avoid unpleasant surprises should the primary fail and a
- replica need to be promoted.
-
-It is now appropriate to remove the legacy single-DES key from the
-``krbtgt/REALM`` entry:
-
-::
-
- [root@casio krb5kdc]# kadmin.local -r ZONE.MIT.EDU -q "cpw -randkey -keepold \
- > krbtgt/ZONE.MIT.EDU"
- Authenticating as principal host/admin@ATHENA.MIT.EDU with password.
- Key for "krbtgt/ZONE.MIT.EDU@ZONE.MIT.EDU" randomized.
-
-After the maximum ticket lifetime has passed, the old database entry
-should be removed.
-
-::
-
- [root@casio krb5kdc]# kadmin.local -r ZONE.MIT.EDU -q 'purgekeys krbtgt/ZONE.MIT.EDU'
- Authenticating as principal root/admin@ZONE.MIT.EDU with password.
- Old keys for principal "krbtgt/ZONE.MIT.EDU@ZONE.MIT.EDU" purged.
-
-After the KDC is restarted with the new **supported_enctypes**,
-all user password changes and application keytab updates will not
-generate DES keys by default.
-
-::
-
- contents-vnder-pressvre:~> kpasswd zonetest@ZONE.MIT.EDU
- Password for zonetest@ZONE.MIT.EDU: [enter old password]
- Enter new password: [enter new password]
- Enter it again: [enter new password]
- Password changed.
- contents-vnder-pressvre:~> kadmin -r ZONE.MIT.EDU -q 'getprinc zonetest'
- [...]
- Number of keys: 3
- Key: vno 9, aes256-cts-hmac-sha1-96
- Key: vno 9, aes128-cts-hmac-sha1-96
- Key: vno 9, des3-cbc-sha1
- [...]
-
- [kaduk@glossolalia ~]$ kadmin -p kaduk@ZONE.MIT.EDU -r ZONE.MIT.EDU -k \
- > -t kaduk-zone.keytab -q 'ktadd -k kaduk-zone.keytab kaduk@ZONE.MIT.EDU'
- Authenticating as principal kaduk@ZONE.MIT.EDU with keytab kaduk-zone.keytab.
- Entry for principal kaduk@ZONE.MIT.EDU with kvno 3, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:kaduk-zone.keytab.
- Entry for principal kaduk@ZONE.MIT.EDU with kvno 3, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:kaduk-zone.keytab.
- Entry for principal kaduk@ZONE.MIT.EDU with kvno 3, encryption type des3-cbc-sha1 added to keytab WRFILE:kaduk-zone.keytab.
-
-Once all principals have been re-keyed, DES support can be disabled on the
-KDC (**allow_weak_crypto = false**), and client machines can remove
-**allow_weak_crypto = true** from their :ref:`krb5.conf(5)` configuration
-files, completing the migration. **allow_weak_crypto** takes precedence over
-all places where DES enctypes could be explicitly configured. DES keys will
-not be used, even if they are present, when **allow_weak_crypto = false**.
-
-Support for legacy services
-~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If there remain legacy services which do not support non-DES enctypes
-(such as older versions of AFS), **allow_weak_crypto** must remain
-enabled on the KDC. Client machines need not have this setting,
-though---applications which require DES can use API calls to allow
-weak crypto on a per-request basis, overriding the system krb5.conf.
-However, having **allow_weak_crypto** set on the KDC means that any
-principals which have a DES key in the database could still use those
-keys. To minimize the use of DES in the realm and restrict it to just
-legacy services which require DES, it is necessary to remove all other
-DES keys. The realm has been configured such that at password and
-keytab change, no DES keys will be generated by default. The task
-then reduces to requiring user password changes and having server
-administrators update their service keytabs. Administrative outreach
-will be necessary, and if the desire to eliminate DES is sufficiently
-strong, the KDC administrators may choose to randkey any principals
-which have not been rekeyed after some timeout period, forcing the
-user to contact the helpdesk for access.
-
-The Database Master Key
------------------------
-
-This procedure does not alter ``K/M@REALM``, the key used to encrypt key
-material in the Kerberos database. (This is the key stored in the stash file
-on the KDC if stash files are used.) However, the security risk of
-a single-DES key for ``K/M`` is minimal, given that access to material
-encrypted in ``K/M`` (the Kerberos database) is generally tightly controlled.
-If an attacker can gain access to the encrypted database, they likely
-have access to the stash file as well, rendering the weak cryptography
-broken by non-cryptographic means. As such, upgrading ``K/M`` to a stronger
-encryption type is unlikely to be a high-priority task.
-
-Is is possible to upgrade the master key used for the database, if
-desired. Using :ref:`kdb5_util(8)`'s **add_mkey**, **use_mkey**, and
-**update_princ_encryption** commands, a new master key can be added
-and activated for use on new key material, and the existing entries
-converted to the new master key.
+++ /dev/null
-Application servers
-===================
-
-If you need to install the Kerberos V5 programs on an application
-server, please refer to the Kerberos V5 Installation Guide. Once you
-have installed the software, you need to add that host to the Kerberos
-database (see :ref:`add_mod_del_princs`), and generate a keytab for
-that host, that contains the host's key. You also need to make sure
-the host's clock is within your maximum clock skew of the KDCs.
-
-
-Keytabs
--------
-
-A keytab is a host's copy of its own keylist, which is analogous to a
-user's password. An application server that needs to authenticate
-itself to the KDC has to have a keytab that contains its own principal
-and key. Just as it is important for users to protect their
-passwords, it is equally important for hosts to protect their keytabs.
-You should always store keytab files on local disk, and make them
-readable only by root, and you should never send a keytab file over a
-network in the clear. Ideally, you should run the :ref:`kadmin(1)`
-command to extract a keytab on the host on which the keytab is to
-reside.
-
-
-.. _add_princ_kt:
-
-Adding principals to keytabs
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To generate a keytab, or to add a principal to an existing keytab, use
-the **ktadd** command from kadmin.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _ktadd:
- :end-before: _ktadd_end:
-
-
-Examples
-########
-
-Here is a sample session, using configuration files that enable only
-AES encryption::
-
- kadmin: ktadd host/daffodil.mit.edu@ATHENA.MIT.EDU
- Entry for principal host/daffodil.mit.edu with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab
- Entry for principal host/daffodil.mit.edu with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab
- kadmin:
-
-
-Removing principals from keytabs
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To remove a principal from an existing keytab, use the kadmin
-**ktremove** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _ktremove:
- :end-before: _ktremove_end:
-
-
-Using a keytab to acquire client credentials
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-While keytabs are ordinarily used to accept credentials from clients,
-they can also be used to acquire initial credentials, allowing one
-service to authenticate to another.
-
-To manually obtain credentials using a keytab, use the :ref:`kinit(1)`
-**-k** option, together with the **-t** option if the keytab is not in
-the default location.
-
-Beginning with release 1.11, GSSAPI applications can be configured to
-automatically obtain initial credentials from a keytab as needed. The
-recommended configuration is as follows:
-
-#. Create a keytab containing a single entry for the desired client
- identity.
-
-#. Place the keytab in a location readable by the service, and set the
- **KRB5_CLIENT_KTNAME** environment variable to its filename.
- Alternatively, use the **default_client_keytab_name** profile
- variable in :ref:`libdefaults`, or use the default location of
- |ckeytab|.
-
-#. Set **KRB5CCNAME** to a filename writable by the service, which
- will not be used for any other purpose. Do not manually obtain
- credentials at this location. (Another credential cache type
- besides **FILE** can be used if desired, as long the cache will not
- conflict with another use. A **MEMORY** cache can be used if the
- service runs as a long-lived process. See :ref:`ccache_definition`
- for details.)
-
-#. Start the service. When it authenticates using GSSAPI, it will
- automatically obtain credentials from the client keytab into the
- specified credential cache, and refresh them before they expire.
-
-
-Clock Skew
-----------
-
-A Kerberos application server host must keep its clock synchronized or
-it will reject authentication requests from clients. Modern operating
-systems typically provide a facility to maintain the correct time;
-make sure it is enabled. This is especially important on virtual
-machines, where clocks tend to drift more rapidly than normal machine
-clocks.
-
-The default allowable clock skew is controlled by the **clockskew**
-variable in :ref:`libdefaults`.
-
-
-Getting DNS information correct
--------------------------------
-
-Several aspects of Kerberos rely on name service. When a hostname is
-used to name a service, clients may canonicalize the hostname using
-forward and possibly reverse name resolution. The result of this
-canonicalization must match the principal entry in the host's keytab,
-or authentication will fail. To work with all client canonicalization
-configurations, each host's canonical name must be the fully-qualified
-host name (including the domain), and each host's IP address must
-reverse-resolve to the canonical name.
-
-Configuration of hostnames varies by operating system. On the
-application server itself, canonicalization will typically use the
-``/etc/hosts`` file rather than the DNS. Ensure that the line for the
-server's hostname is in the following form::
-
- IP address fully-qualified hostname aliases
-
-Here is a sample ``/etc/hosts`` file::
-
- # this is a comment
- 127.0.0.1 localhost localhost.mit.edu
- 10.0.0.6 daffodil.mit.edu daffodil trillium wake-robin
-
-The output of ``klist -k`` for this example host should look like::
-
- viola# klist -k
- Keytab name: /etc/krb5.keytab
- KVNO Principal
- ---- ------------------------------------------------------------
- 2 host/daffodil.mit.edu@ATHENA.MIT.EDU
-
-If you were to ssh to this host with a fresh credentials cache (ticket
-file), and then :ref:`klist(1)`, the output should list a service
-principal of ``host/daffodil.mit.edu@ATHENA.MIT.EDU``.
-
-
-.. _conf_firewall:
-
-Configuring your firewall to work with Kerberos V5
---------------------------------------------------
-
-If you need off-site users to be able to get Kerberos tickets in your
-realm, they must be able to get to your KDC. This requires either
-that you have a replica KDC outside your firewall, or that you
-configure your firewall to allow UDP requests into at least one of
-your KDCs, on whichever port the KDC is running. (The default is port
-88; other ports may be specified in the KDC's :ref:`kdc.conf(5)`
-file.) Similarly, if you need off-site users to be able to change
-their passwords in your realm, they must be able to get to your
-Kerberos admin server on the kpasswd port (which defaults to 464). If
-you need off-site users to be able to administer your Kerberos realm,
-they must be able to get to your Kerberos admin server on the
-administrative port (which defaults to 749).
-
-If your on-site users inside your firewall will need to get to KDCs in
-other realms, you will also need to configure your firewall to allow
-outgoing TCP and UDP requests to port 88, and to port 464 to allow
-password changes. If your on-site users inside your firewall will
-need to get to Kerberos admin servers in other realms, you will also
-need to allow outgoing TCP and UDP requests to port 749.
-
-If any of your KDCs are outside your firewall, you will need to allow
-kprop requests to get through to the remote KDC. :ref:`kprop(8)` uses
-the ``krb5_prop`` service on port 754 (tcp).
-
-The book *UNIX System Security*, by David Curry, is a good starting
-point for learning to configure firewalls.
+++ /dev/null
-.. _auth_indicator:
-
-Authentication indicators
-=========================
-
-As of release 1.14, the KDC can be configured to annotate tickets if
-the client authenticated using a stronger preauthentication mechanism
-such as :ref:`PKINIT <pkinit>` or :ref:`OTP <otp_preauth>`. These
-annotations are called "authentication indicators." Service
-principals can be configured to require particular authentication
-indicators in order to authenticate to that service. An
-authentication indicator value can be any string chosen by the KDC
-administrator; there are no pre-set values.
-
-To use authentication indicators with PKINIT or OTP, first configure
-the KDC to include an indicator when that preauthentication mechanism
-is used. For PKINIT, use the **pkinit_indicator** variable in
-:ref:`kdc.conf(5)`. For OTP, use the **indicator** variable in the
-token type definition, or specify the indicators in the **otp** user
-string as described in :ref:`otp_preauth`.
-
-To require an indicator to be present in order to authenticate to a
-service principal, set the **require_auth** string attribute on the
-principal to the indicator value to be required. If you wish to allow
-one of several indicators to be accepted, you can specify multiple
-indicator values separated by spaces.
-
-For example, a realm could be configured to set the authentication
-indicator value "strong" when PKINIT is used to authenticate, using a
-setting in the :ref:`kdc_realms` subsection::
-
- pkinit_indicator = strong
-
-A service principal could be configured to require the "strong"
-authentication indicator value::
-
- $ kadmin setstr host/high.value.server require_auth strong
- Password for user/admin@KRBTEST.COM:
-
-A user who authenticates with PKINIT would be able to obtain a ticket
-for the service principal::
-
- $ kinit -X X509_user_identity=FILE:/my/cert.pem,/my/key.pem user
- $ kvno host/high.value.server
- host/high.value.server@KRBTEST.COM: kvno = 1
-
-but a user who authenticates with a password would not::
-
- $ kinit user
- Password for user@KRBTEST.COM:
- $ kvno host/high.value.server
- kvno: KDC policy rejects request while getting credentials for
- host/high.value.server@KRBTEST.COM
-
-GSSAPI server applications can inspect authentication indicators
-through the :ref:`auth-indicators <gssapi_authind_attr>` name
-attribute.
+++ /dev/null
-Backups of secure hosts
-=======================
-
-When you back up a secure host, you should exclude the host's keytab
-file from the backup. If someone obtained a copy of the keytab from a
-backup, that person could make any host masquerade as the host whose
-keytab was compromised. In many configurations, knowledge of the
-host's keytab also allows root access to the host. This could be
-particularly dangerous if the compromised keytab was from one of your
-KDCs. If the machine has a disk crash and the keytab file is lost, it
-is easy to generate another keytab file. (See :ref:`add_princ_kt`.)
-If you are unable to exclude particular files from backups, you should
-ensure that the backups are kept as secure as the host's root
-password.
-
-
-Backing up the Kerberos database
---------------------------------
-
-As with any file, it is possible that your Kerberos database could
-become corrupted. If this happens on one of the replica KDCs, you
-might never notice, since the next automatic propagation of the
-database would install a fresh copy. However, if it happens to the
-primary KDC, the corrupted database would be propagated to all of the
-replicas during the next propagation. For this reason, MIT recommends
-that you back up your Kerberos database regularly. Because the primary
-KDC is continuously dumping the database to a file in order to
-propagate it to the replica KDCs, it is a simple matter to have a cron
-job periodically copy the dump file to a secure machine elsewhere on
-your network. (Of course, it is important to make the host where
-these backups are stored as secure as your KDCs, and to encrypt its
-transmission across your network.) Then if your database becomes
-corrupted, you can load the most recent dump onto the primary KDC.
-(See :ref:`restore_from_dump`.)
+++ /dev/null
-Configuration Files
-===================
-
-Kerberos uses configuration files to allow administrators to specify
-settings on a per-machine basis. :ref:`krb5.conf(5)` applies to all
-applications using the Kerboros library, on clients and servers.
-For KDC-specific applications, additional settings can be specified in
-:ref:`kdc.conf(5)`; the two files are merged into a configuration profile
-used by applications accessing the KDC database directly. :ref:`kadm5.acl(5)`
-is also only used on the KDC, it controls permissions for modifying the
-KDC database.
-
-Contents
---------
-.. toctree::
- :maxdepth: 1
-
- krb5_conf
- kdc_conf
- kadm5_acl
+++ /dev/null
-.. _kadm5.acl(5):
-
-kadm5.acl
-=========
-
-DESCRIPTION
------------
-
-The Kerberos :ref:`kadmind(8)` daemon uses an Access Control List
-(ACL) file to manage access rights to the Kerberos database.
-For operations that affect principals, the ACL file also controls
-which principals can operate on which other principals.
-
-The default location of the Kerberos ACL file is
-|kdcdir|\ ``/kadm5.acl`` unless this is overridden by the *acl_file*
-variable in :ref:`kdc.conf(5)`.
-
-SYNTAX
-------
-
-Empty lines and lines starting with the sharp sign (``#``) are
-ignored. Lines containing ACL entries have the format::
-
- principal permissions [target_principal [restrictions] ]
-
-.. note::
-
- Line order in the ACL file is important. The first matching entry
- will control access for an actor principal on a target principal.
-
-*principal*
- (Partially or fully qualified Kerberos principal name.) Specifies
- the principal whose permissions are to be set.
-
- Each component of the name may be wildcarded using the ``*``
- character.
-
-*permissions*
- Specifies what operations may or may not be performed by a
- *principal* matching a particular entry. This is a string of one or
- more of the following list of characters or their upper-case
- counterparts. If the character is *upper-case*, then the operation
- is disallowed. If the character is *lower-case*, then the operation
- is permitted.
-
- == ======================================================
- a [Dis]allows the addition of principals or policies
- c [Dis]allows the changing of passwords for principals
- d [Dis]allows the deletion of principals or policies
- e [Dis]allows the extraction of principal keys
- i [Dis]allows inquiries about principals or policies
- l [Dis]allows the listing of all principals or policies
- m [Dis]allows the modification of principals or policies
- p [Dis]allows the propagation of the principal database (used in :ref:`incr_db_prop`)
- s [Dis]allows the explicit setting of the key for a principal
- x Short for admcilsp. All privileges (except ``e``)
- \* Same as x.
- == ======================================================
-
-.. note::
-
- The ``extract`` privilege is not included in the wildcard
- privilege; it must be explicitly assigned. This privilege
- allows the user to extract keys from the database, and must be
- handled with great care to avoid disclosure of important keys
- like those of the kadmin/* or krbtgt/* principals. The
- **lockdown_keys** principal attribute can be used to prevent
- key extraction from specific principals regardless of the
- granted privilege.
-
-*target_principal*
- (Optional. Partially or fully qualified Kerberos principal name.)
- Specifies the principal on which *permissions* may be applied.
- Each component of the name may be wildcarded using the ``*``
- character.
-
- *target_principal* can also include back-references to *principal*,
- in which ``*number`` matches the corresponding wildcard in
- *principal*.
-
-*restrictions*
- (Optional) A string of flags. Allowed restrictions are:
-
- {+\|-}\ *flagname*
- flag is forced to the indicated value. The permissible flags
- are the same as those for the **default_principal_flags**
- variable in :ref:`kdc.conf(5)`.
-
- *-clearpolicy*
- policy is forced to be empty.
-
- *-policy pol*
- policy is forced to be *pol*.
-
- -{*expire, pwexpire, maxlife, maxrenewlife*} *time*
- (:ref:`getdate` string) associated value will be forced to
- MIN(*time*, requested value).
-
- The above flags act as restrictions on any add or modify operation
- which is allowed due to that ACL line.
-
-.. warning::
-
- If the kadmind ACL file is modified, the kadmind daemon needs to be
- restarted for changes to take effect.
-
-EXAMPLE
--------
-
-Here is an example of a kadm5.acl file::
-
- */admin@ATHENA.MIT.EDU * # line 1
- joeadmin@ATHENA.MIT.EDU ADMCIL # line 2
- joeadmin/*@ATHENA.MIT.EDU i */root@ATHENA.MIT.EDU # line 3
- */root@ATHENA.MIT.EDU ci *1@ATHENA.MIT.EDU # line 4
- */root@ATHENA.MIT.EDU l * # line 5
- sms@ATHENA.MIT.EDU x * -maxlife 9h -postdateable # line 6
-
-(line 1) Any principal in the ``ATHENA.MIT.EDU`` realm with an
-``admin`` instance has all administrative privileges except extracting
-keys.
-
-(lines 1-3) The user ``joeadmin`` has all permissions except
-extracting keys with his ``admin`` instance,
-``joeadmin/admin@ATHENA.MIT.EDU`` (matches line 1). He has no
-permissions at all with his null instance, ``joeadmin@ATHENA.MIT.EDU``
-(matches line 2). His ``root`` and other non-``admin``, non-null
-instances (e.g., ``extra`` or ``dbadmin``) have inquire permissions
-with any principal that has the instance ``root`` (matches line 3).
-
-(line 4) Any ``root`` principal in ``ATHENA.MIT.EDU`` can inquire
-or change the password of their null instance, but not any other
-null instance. (Here, ``*1`` denotes a back-reference to the
-component matching the first wildcard in the actor principal.)
-
-(line 5) Any ``root`` principal in ``ATHENA.MIT.EDU`` can generate
-the list of principals in the database, and the list of policies
-in the database. This line is separate from line 4, because list
-permission can only be granted globally, not to specific target
-principals.
-
-(line 6) Finally, the Service Management System principal
-``sms@ATHENA.MIT.EDU`` has all permissions except extracting keys, but
-any principal that it creates or modifies will not be able to get
-postdateable tickets or tickets with a life of longer than 9 hours.
-
-MODULE BEHAVIOR
----------------
-
-The ACL file can coexist with other authorization modules in release
-1.16 and later, as configured in the :ref:`kadm5_auth` section of
-:ref:`krb5.conf(5)`. The ACL file will positively authorize
-operations according to the rules above, but will never
-authoritatively deny an operation, so other modules can authorize
-operations in addition to those authorized by the ACL file.
-
-To operate without an ACL file, set the *acl_file* variable in
-:ref:`kdc.conf(5)` to the empty string with ``acl_file = ""``.
-
-SEE ALSO
---------
-
-:ref:`kdc.conf(5)`, :ref:`kadmind(8)`
+++ /dev/null
-.. _kdc.conf(5):
-
-kdc.conf
-========
-
-The kdc.conf file supplements :ref:`krb5.conf(5)` for programs which
-are typically only used on a KDC, such as the :ref:`krb5kdc(8)` and
-:ref:`kadmind(8)` daemons and the :ref:`kdb5_util(8)` program.
-Relations documented here may also be specified in krb5.conf; for the
-KDC programs mentioned, krb5.conf and kdc.conf will be merged into a
-single configuration profile.
-
-Normally, the kdc.conf file is found in the KDC state directory,
-|kdcdir|. You can override the default location by setting the
-environment variable **KRB5_KDC_PROFILE**.
-
-Please note that you need to restart the KDC daemon for any configuration
-changes to take effect.
-
-Structure
----------
-
-The kdc.conf file is set up in the same format as the
-:ref:`krb5.conf(5)` file.
-
-
-Sections
---------
-
-The kdc.conf file may contain the following sections:
-
-==================== =================================================
-:ref:`kdcdefaults` Default values for KDC behavior
-:ref:`kdc_realms` Realm-specific database configuration and settings
-:ref:`dbdefaults` Default database settings
-:ref:`dbmodules` Per-database settings
-:ref:`logging` Controls how Kerberos daemons perform logging
-==================== =================================================
-
-
-.. _kdcdefaults:
-
-[kdcdefaults]
-~~~~~~~~~~~~~
-
-Some relations in the [kdcdefaults] section specify default values for
-realm variables, to be used if the [realms] subsection does not
-contain a relation for the tag. See the :ref:`kdc_realms` section for
-the definitions of these relations.
-
-* **host_based_services**
-* **kdc_listen**
-* **kdc_ports**
-* **kdc_tcp_listen**
-* **kdc_tcp_ports**
-* **no_host_referral**
-* **restrict_anonymous_to_tgt**
-
-The following [kdcdefaults] variables have no per-realm equivalent:
-
-**kdc_max_dgram_reply_size**
- Specifies the maximum packet size that can be sent over UDP. The
- default value is 4096 bytes.
-
-**kdc_tcp_listen_backlog**
- (Integer.) Set the size of the listen queue length for the KDC
- daemon. The value may be limited by OS settings. The default
- value is 5.
-
-**spake_preauth_kdc_challenge**
- (String.) Specifies the group for a SPAKE optimistic challenge.
- See the **spake_preauth_groups** variable in :ref:`libdefaults`
- for possible values. The default is not to issue an optimistic
- challenge. (New in release 1.17.)
-
-
-.. _kdc_realms:
-
-[realms]
-~~~~~~~~
-
-Each tag in the [realms] section is the name of a Kerberos realm. The
-value of the tag is a subsection where the relations define KDC
-parameters for that particular realm. The following example shows how
-to define one parameter for the ATHENA.MIT.EDU realm::
-
- [realms]
- ATHENA.MIT.EDU = {
- max_renewable_life = 7d 0h 0m 0s
- }
-
-The following tags may be specified in a [realms] subsection:
-
-**acl_file**
- (String.) Location of the access control list file that
- :ref:`kadmind(8)` uses to determine which principals are allowed
- which permissions on the Kerberos database. To operate without an
- ACL file, set this relation to the empty string with ``acl_file =
- ""``. The default value is |kdcdir|\ ``/kadm5.acl``. For more
- information on Kerberos ACL file see :ref:`kadm5.acl(5)`.
-
-**database_module**
- (String.) This relation indicates the name of the configuration
- section under :ref:`dbmodules` for database-specific parameters
- used by the loadable database library. The default value is the
- realm name. If this configuration section does not exist, default
- values will be used for all database parameters.
-
-**database_name**
- (String, deprecated.) This relation specifies the location of the
- Kerberos database for this realm, if the DB2 module is being used
- and the :ref:`dbmodules` configuration section does not specify a
- database name. The default value is |kdcdir|\ ``/principal``.
-
-**default_principal_expiration**
- (:ref:`abstime` string.) Specifies the default expiration date of
- principals created in this realm. The default value is 0, which
- means no expiration date.
-
-**default_principal_flags**
- (Flag string.) Specifies the default attributes of principals
- created in this realm. The format for this string is a
- comma-separated list of flags, with '+' before each flag that
- should be enabled and '-' before each flag that should be
- disabled. The **postdateable**, **forwardable**, **tgt-based**,
- **renewable**, **proxiable**, **dup-skey**, **allow-tickets**, and
- **service** flags default to enabled.
-
- There are a number of possible flags:
-
- **allow-tickets**
- Enabling this flag means that the KDC will issue tickets for
- this principal. Disabling this flag essentially deactivates
- the principal within this realm.
-
- **dup-skey**
- Enabling this flag allows the KDC to issue user-to-user
- service tickets for this principal.
-
- **forwardable**
- Enabling this flag allows the principal to obtain forwardable
- tickets.
-
- **hwauth**
- If this flag is enabled, then the principal is required to
- preauthenticate using a hardware device before receiving any
- tickets.
-
- **no-auth-data-required**
- Enabling this flag prevents PAC or AD-SIGNEDPATH data from
- being added to service tickets for the principal.
-
- **ok-as-delegate**
- If this flag is enabled, it hints the client that credentials
- can and should be delegated when authenticating to the
- service.
-
- **ok-to-auth-as-delegate**
- Enabling this flag allows the principal to use S4USelf tickets.
-
- **postdateable**
- Enabling this flag allows the principal to obtain postdateable
- tickets.
-
- **preauth**
- If this flag is enabled on a client principal, then that
- principal is required to preauthenticate to the KDC before
- receiving any tickets. On a service principal, enabling this
- flag means that service tickets for this principal will only
- be issued to clients with a TGT that has the preauthenticated
- bit set.
-
- **proxiable**
- Enabling this flag allows the principal to obtain proxy
- tickets.
-
- **pwchange**
- Enabling this flag forces a password change for this
- principal.
-
- **pwservice**
- If this flag is enabled, it marks this principal as a password
- change service. This should only be used in special cases,
- for example, if a user's password has expired, then the user
- has to get tickets for that principal without going through
- the normal password authentication in order to be able to
- change the password.
-
- **renewable**
- Enabling this flag allows the principal to obtain renewable
- tickets.
-
- **service**
- Enabling this flag allows the the KDC to issue service tickets
- for this principal. In release 1.17 and later, user-to-user
- service tickets are still allowed if the **dup-skey** flag is
- set.
-
- **tgt-based**
- Enabling this flag allows a principal to obtain tickets based
- on a ticket-granting-ticket, rather than repeating the
- authentication process that was used to obtain the TGT.
-
-**dict_file**
- (String.) Location of the dictionary file containing strings that
- are not allowed as passwords. The file should contain one string
- per line, with no additional whitespace. If none is specified or
- if there is no policy assigned to the principal, no dictionary
- checks of passwords will be performed.
-
-**disable_pac**
- (Boolean value.) If true, the KDC will not issue PACs for this
- realm, and S4U2Self and S4U2Proxy operations will be disabled.
- The default is false, which will permit the KDC to issue PACs.
- New in release 1.20.
-
-**encrypted_challenge_indicator**
- (String.) Specifies the authentication indicator value that the KDC
- asserts into tickets obtained using FAST encrypted challenge
- pre-authentication. New in 1.16.
-
-**host_based_services**
- (Whitespace- or comma-separated list.) Lists services which will
- get host-based referral processing even if the server principal is
- not marked as host-based by the client.
-
-**iprop_enable**
- (Boolean value.) Specifies whether incremental database
- propagation is enabled. The default value is false.
-
-**iprop_ulogsize**
- (Integer.) Specifies the maximum number of log entries to be
- retained for incremental propagation. The default value is 1000.
- Prior to release 1.11, the maximum value was 2500. New in release
- 1.19.
-
-**iprop_master_ulogsize**
- The name for **iprop_ulogsize** prior to release 1.19. Its value is
- used as a fallback if **iprop_ulogsize** is not specified.
-
-**iprop_replica_poll**
- (Delta time string.) Specifies how often the replica KDC polls
- for new updates from the primary. The default value is ``2m``
- (that is, two minutes). New in release 1.17.
-
-**iprop_slave_poll**
- (Delta time string.) The name for **iprop_replica_poll** prior to
- release 1.17. Its value is used as a fallback if
- **iprop_replica_poll** is not specified.
-
-**iprop_listen**
- (Whitespace- or comma-separated list.) Specifies the iprop RPC
- listening addresses and/or ports for the :ref:`kadmind(8)` daemon.
- Each entry may be an interface address, a port number, or an
- address and port number separated by a colon. If the address
- contains colons, enclose it in square brackets. If no address is
- specified, the wildcard address is used. If kadmind fails to bind
- to any of the specified addresses, it will fail to start. The
- default (when **iprop_enable** is true) is to bind to the wildcard
- address at the port specified in **iprop_port**. New in release
- 1.15.
-
-**iprop_port**
- (Port number.) Specifies the port number to be used for
- incremental propagation. When **iprop_enable** is true, this
- relation is required in the replica KDC configuration file, and
- this relation or **iprop_listen** is required in the primary
- configuration file, as there is no default port number. Port
- numbers specified in **iprop_listen** entries will override this
- port number for the :ref:`kadmind(8)` daemon.
-
-**iprop_resync_timeout**
- (Delta time string.) Specifies the amount of time to wait for a
- full propagation to complete. This is optional in configuration
- files, and is used by replica KDCs only. The default value is 5
- minutes (``5m``). New in release 1.11.
-
-**iprop_logfile**
- (File name.) Specifies where the update log file for the realm
- database is to be stored. The default is to use the
- **database_name** entry from the realms section of the krb5 config
- file, with ``.ulog`` appended. (NOTE: If **database_name** isn't
- specified in the realms section, perhaps because the LDAP database
- back end is being used, or the file name is specified in the
- [dbmodules] section, then the hard-coded default for
- **database_name** is used. Determination of the **iprop_logfile**
- default value will not use values from the [dbmodules] section.)
-
-**kadmind_listen**
- (Whitespace- or comma-separated list.) Specifies the kadmin RPC
- listening addresses and/or ports for the :ref:`kadmind(8)` daemon.
- Each entry may be an interface address, a port number, or an
- address and port number separated by a colon. If the address
- contains colons, enclose it in square brackets. If no address is
- specified, the wildcard address is used. If kadmind fails to bind
- to any of the specified addresses, it will fail to start. The
- default is to bind to the wildcard address at the port specified
- in **kadmind_port**, or the standard kadmin port (749). New in
- release 1.15.
-
-**kadmind_port**
- (Port number.) Specifies the port on which the :ref:`kadmind(8)`
- daemon is to listen for this realm. Port numbers specified in
- **kadmind_listen** entries will override this port number. The
- assigned port for kadmind is 749, which is used by default.
-
-**key_stash_file**
- (String.) Specifies the location where the master key has been
- stored (via kdb5_util stash). The default is |kdcdir|\
- ``/.k5.REALM``, where *REALM* is the Kerberos realm.
-
-**kdc_listen**
- (Whitespace- or comma-separated list.) Specifies the UDP
- listening addresses and/or ports for the :ref:`krb5kdc(8)` daemon.
- Each entry may be an interface address, a port number, or an
- address and port number separated by a colon. If the address
- contains colons, enclose it in square brackets. If no address is
- specified, the wildcard address is used. If no port is specified,
- the standard port (88) is used. If the KDC daemon fails to bind
- to any of the specified addresses, it will fail to start. The
- default is to bind to the wildcard address on the standard port.
- New in release 1.15.
-
-**kdc_ports**
- (Whitespace- or comma-separated list, deprecated.) Prior to
- release 1.15, this relation lists the ports for the
- :ref:`krb5kdc(8)` daemon to listen on for UDP requests. In
- release 1.15 and later, it has the same meaning as **kdc_listen**
- if that relation is not defined.
-
-**kdc_tcp_listen**
- (Whitespace- or comma-separated list.) Specifies the TCP
- listening addresses and/or ports for the :ref:`krb5kdc(8)` daemon.
- Each entry may be an interface address, a port number, or an
- address and port number separated by a colon. If the address
- contains colons, enclose it in square brackets. If no address is
- specified, the wildcard address is used. If no port is specified,
- the standard port (88) is used. To disable listening on TCP, set
- this relation to the empty string with ``kdc_tcp_listen = ""``.
- If the KDC daemon fails to bind to any of the specified addresses,
- it will fail to start. The default is to bind to the wildcard
- address on the standard port. New in release 1.15.
-
-**kdc_tcp_ports**
- (Whitespace- or comma-separated list, deprecated.) Prior to
- release 1.15, this relation lists the ports for the
- :ref:`krb5kdc(8)` daemon to listen on for UDP requests. In
- release 1.15 and later, it has the same meaning as
- **kdc_tcp_listen** if that relation is not defined.
-
-**kpasswd_listen**
- (Comma-separated list.) Specifies the kpasswd listening addresses
- and/or ports for the :ref:`kadmind(8)` daemon. Each entry may be
- an interface address, a port number, or an address and port number
- separated by a colon. If the address contains colons, enclose it
- in square brackets. If no address is specified, the wildcard
- address is used. If kadmind fails to bind to any of the specified
- addresses, it will fail to start. The default is to bind to the
- wildcard address at the port specified in **kpasswd_port**, or the
- standard kpasswd port (464). New in release 1.15.
-
-**kpasswd_port**
- (Port number.) Specifies the port on which the :ref:`kadmind(8)`
- daemon is to listen for password change requests for this realm.
- Port numbers specified in **kpasswd_listen** entries will override
- this port number. The assigned port for password change requests
- is 464, which is used by default.
-
-**master_key_name**
- (String.) Specifies the name of the principal associated with the
- master key. The default is ``K/M``.
-
-**master_key_type**
- (Key type string.) Specifies the master key's key type. The
- default value for this is |defmkey|. For a list of all possible
- values, see :ref:`Encryption_types`.
-
-**max_life**
- (:ref:`duration` string.) Specifies the maximum time period for
- which a ticket may be valid in this realm. The default value is
- 24 hours.
-
-**max_renewable_life**
- (:ref:`duration` string.) Specifies the maximum time period
- during which a valid ticket may be renewed in this realm.
- The default value is 0.
-
-**no_host_referral**
- (Whitespace- or comma-separated list.) Lists services to block
- from getting host-based referral processing, even if the client
- marks the server principal as host-based or the service is also
- listed in **host_based_services**. ``no_host_referral = *`` will
- disable referral processing altogether.
-
-**reject_bad_transit**
- (Boolean value.) If set to true, the KDC will check the list of
- transited realms for cross-realm tickets against the transit path
- computed from the realm names and the capaths section of its
- :ref:`krb5.conf(5)` file; if the path in the ticket to be issued
- contains any realms not in the computed path, the ticket will not
- be issued, and an error will be returned to the client instead.
- If this value is set to false, such tickets will be issued
- anyways, and it will be left up to the application server to
- validate the realm transit path.
-
- If the disable-transited-check flag is set in the incoming
- request, this check is not performed at all. Having the
- **reject_bad_transit** option will cause such ticket requests to
- be rejected always.
-
- This transit path checking and config file option currently apply
- only to TGS requests.
-
- The default value is true.
-
-**restrict_anonymous_to_tgt**
- (Boolean value.) If set to true, the KDC will reject ticket
- requests from anonymous principals to service principals other
- than the realm's ticket-granting service. This option allows
- anonymous PKINIT to be enabled for use as FAST armor tickets
- without allowing anonymous authentication to services. The
- default value is false. New in release 1.9.
-
-**spake_preauth_indicator**
- (String.) Specifies an authentication indicator value that the
- KDC asserts into tickets obtained using SPAKE pre-authentication.
- The default is not to add any indicators. This option may be
- specified multiple times. New in release 1.17.
-
-**supported_enctypes**
- (List of *key*:*salt* strings.) Specifies the default key/salt
- combinations of principals for this realm. Any principals created
- through :ref:`kadmin(1)` will have keys of these types. The
- default value for this tag is |defkeysalts|. For lists of
- possible values, see :ref:`Keysalt_lists`.
-
-
-.. _dbdefaults:
-
-[dbdefaults]
-~~~~~~~~~~~~
-
-The [dbdefaults] section specifies default values for some database
-parameters, to be used if the [dbmodules] subsection does not contain
-a relation for the tag. See the :ref:`dbmodules` section for the
-definitions of these relations.
-
-* **ldap_kerberos_container_dn**
-* **ldap_kdc_dn**
-* **ldap_kdc_sasl_authcid**
-* **ldap_kdc_sasl_authzid**
-* **ldap_kdc_sasl_mech**
-* **ldap_kdc_sasl_realm**
-* **ldap_kadmind_dn**
-* **ldap_kadmind_sasl_authcid**
-* **ldap_kadmind_sasl_authzid**
-* **ldap_kadmind_sasl_mech**
-* **ldap_kadmind_sasl_realm**
-* **ldap_service_password_file**
-* **ldap_conns_per_server**
-
-
-.. _dbmodules:
-
-[dbmodules]
-~~~~~~~~~~~
-
-The [dbmodules] section contains parameters used by the KDC database
-library and database modules. Each tag in the [dbmodules] section is
-the name of a Kerberos realm or a section name specified by a realm's
-**database_module** parameter. The following example shows how to
-define one database parameter for the ATHENA.MIT.EDU realm::
-
- [dbmodules]
- ATHENA.MIT.EDU = {
- disable_last_success = true
- }
-
-The following tags may be specified in a [dbmodules] subsection:
-
-**database_name**
- This DB2-specific tag indicates the location of the database in
- the filesystem. The default is |kdcdir|\ ``/principal``.
-
-**db_library**
- This tag indicates the name of the loadable database module. The
- value should be ``db2`` for the DB2 module, ``klmdb`` for the LMDB
- module, or ``kldap`` for the LDAP module.
-
-**disable_last_success**
- If set to ``true``, suppresses KDC updates to the "Last successful
- authentication" field of principal entries requiring
- preauthentication. Setting this flag may improve performance.
- (Principal entries which do not require preauthentication never
- update the "Last successful authentication" field.). First
- introduced in release 1.9.
-
-**disable_lockout**
- If set to ``true``, suppresses KDC updates to the "Last failed
- authentication" and "Failed password attempts" fields of principal
- entries requiring preauthentication. Setting this flag may
- improve performance, but also disables account lockout. First
- introduced in release 1.9.
-
-**ldap_conns_per_server**
- This LDAP-specific tag indicates the number of connections to be
- maintained per LDAP server.
-
-**ldap_kdc_dn** and **ldap_kadmind_dn**
- These LDAP-specific tags indicate the default DN for binding to
- the LDAP server. The :ref:`krb5kdc(8)` daemon uses
- **ldap_kdc_dn**, while the :ref:`kadmind(8)` daemon and other
- administrative programs use **ldap_kadmind_dn**. The kadmind DN
- must have the rights to read and write the Kerberos data in the
- LDAP database. The KDC DN must have the same rights, unless
- **disable_lockout** and **disable_last_success** are true, in
- which case it only needs to have rights to read the Kerberos data.
- These tags are ignored if a SASL mechanism is set with
- **ldap_kdc_sasl_mech** or **ldap_kadmind_sasl_mech**.
-
-**ldap_kdc_sasl_mech** and **ldap_kadmind_sasl_mech**
- These LDAP-specific tags specify the SASL mechanism (such as
- ``EXTERNAL``) to use when binding to the LDAP server. New in
- release 1.13.
-
-**ldap_kdc_sasl_authcid** and **ldap_kadmind_sasl_authcid**
- These LDAP-specific tags specify the SASL authentication identity
- to use when binding to the LDAP server. Not all SASL mechanisms
- require an authentication identity. If the SASL mechanism
- requires a secret (such as the password for ``DIGEST-MD5``), these
- tags also determine the name within the
- **ldap_service_password_file** where the secret is stashed. New
- in release 1.13.
-
-**ldap_kdc_sasl_authzid** and **ldap_kadmind_sasl_authzid**
- These LDAP-specific tags specify the SASL authorization identity
- to use when binding to the LDAP server. In most circumstances
- they do not need to be specified. New in release 1.13.
-
-**ldap_kdc_sasl_realm** and **ldap_kadmind_sasl_realm**
- These LDAP-specific tags specify the SASL realm to use when
- binding to the LDAP server. In most circumstances they do not
- need to be set. New in release 1.13.
-
-**ldap_kerberos_container_dn**
- This LDAP-specific tag indicates the DN of the container object
- where the realm objects will be located.
-
-**ldap_servers**
- This LDAP-specific tag indicates the list of LDAP servers that the
- Kerberos servers can connect to. The list of LDAP servers is
- whitespace-separated. The LDAP server is specified by a LDAP URI.
- It is recommended to use ``ldapi:`` or ``ldaps:`` URLs to connect
- to the LDAP server.
-
-**ldap_service_password_file**
- This LDAP-specific tag indicates the file containing the stashed
- passwords (created by ``kdb5_ldap_util stashsrvpw``) for the
- **ldap_kdc_dn** and **ldap_kadmind_dn** objects, or for the
- **ldap_kdc_sasl_authcid** or **ldap_kadmind_sasl_authcid** names
- for SASL authentication. This file must be kept secure.
-
-**mapsize**
- This LMDB-specific tag indicates the maximum size of the two
- database environments in megabytes. The default value is 128.
- Increase this value to address "Environment mapsize limit reached"
- errors. New in release 1.17.
-
-**max_readers**
- This LMDB-specific tag indicates the maximum number of concurrent
- reading processes for the databases. The default value is 128.
- New in release 1.17.
-
-**nosync**
- This LMDB-specific tag can be set to improve the throughput of
- kadmind and other administrative agents, at the expense of
- durability (recent database changes may not survive a power outage
- or other sudden reboot). It does not affect the throughput of the
- KDC. The default value is false. New in release 1.17.
-
-**unlockiter**
- If set to ``true``, this DB2-specific tag causes iteration
- operations to release the database lock while processing each
- principal. Setting this flag to ``true`` can prevent extended
- blocking of KDC or kadmin operations when dumps of large databases
- are in progress. First introduced in release 1.13.
-
-The following tag may be specified directly in the [dbmodules]
-section to control where database modules are loaded from:
-
-**db_module_dir**
- This tag controls where the plugin system looks for database
- modules. The value should be an absolute path.
-
-.. _logging:
-
-[logging]
-~~~~~~~~~
-
-The [logging] section indicates how :ref:`krb5kdc(8)` and
-:ref:`kadmind(8)` perform logging. It may contain the following
-relations:
-
-**admin_server**
- Specifies how :ref:`kadmind(8)` performs logging.
-
-**kdc**
- Specifies how :ref:`krb5kdc(8)` performs logging.
-
-**default**
- Specifies how either daemon performs logging in the absence of
- relations specific to the daemon.
-
-**debug**
- (Boolean value.) Specifies whether debugging messages are
- included in log outputs other than SYSLOG. Debugging messages are
- always included in the system log output because syslog performs
- its own priority filtering. The default value is false. New in
- release 1.15.
-
-Logging specifications may have the following forms:
-
-**FILE=**\ *filename* or **FILE:**\ *filename*
- This value causes the daemon's logging messages to go to the
- *filename*. If the ``=`` form is used, the file is overwritten.
- If the ``:`` form is used, the file is appended to.
-
-**STDERR**
- This value causes the daemon's logging messages to go to its
- standard error stream.
-
-**CONSOLE**
- This value causes the daemon's logging messages to go to the
- console, if the system supports it.
-
-**DEVICE=**\ *<devicename>*
- This causes the daemon's logging messages to go to the specified
- device.
-
-**SYSLOG**\ [\ **:**\ *severity*\ [\ **:**\ *facility*\ ]]
- This causes the daemon's logging messages to go to the system log.
-
- For backward compatibility, a severity argument may be specified,
- and must be specified in order to specify a facility. This
- argument will be ignored.
-
- The facility argument specifies the facility under which the
- messages are logged. This may be any of the following facilities
- supported by the syslog(3) call minus the LOG\_ prefix: **KERN**,
- **USER**, **MAIL**, **DAEMON**, **AUTH**, **LPR**, **NEWS**,
- **UUCP**, **CRON**, and **LOCAL0** through **LOCAL7**. If no
- facility is specified, the default is **AUTH**.
-
-In the following example, the logging messages from the KDC will go to
-the console and to the system log under the facility LOG_DAEMON, and
-the logging messages from the administrative server will be appended
-to the file ``/var/adm/kadmin.log`` and sent to the device
-``/dev/tty04``. ::
-
- [logging]
- kdc = CONSOLE
- kdc = SYSLOG:INFO:DAEMON
- admin_server = FILE:/var/adm/kadmin.log
- admin_server = DEVICE=/dev/tty04
-
-If no logging specification is given, the default is to use syslog.
-To disable logging entirely, specify ``default = DEVICE=/dev/null``.
-
-
-.. _otp:
-
-[otp]
-~~~~~
-
-Each subsection of [otp] is the name of an OTP token type. The tags
-within the subsection define the configuration required to forward a
-One Time Password request to a RADIUS server.
-
-For each token type, the following tags may be specified:
-
-**server**
- This is the server to send the RADIUS request to. It can be a
- hostname with optional port, an ip address with optional port, or
- a Unix domain socket address. The default is
- |kdcdir|\ ``/<name>.socket``.
-
-**secret**
- This tag indicates a filename (which may be relative to |kdcdir|)
- containing the secret used to encrypt the RADIUS packets. The
- secret should appear in the first line of the file by itself;
- leading and trailing whitespace on the line will be removed. If
- the value of **server** is a Unix domain socket address, this tag
- is optional, and an empty secret will be used if it is not
- specified. Otherwise, this tag is required.
-
-**timeout**
- An integer which specifies the time in seconds during which the
- KDC should attempt to contact the RADIUS server. This tag is the
- total time across all retries and should be less than the time
- which an OTP value remains valid for. The default is 5 seconds.
-
-**retries**
- This tag specifies the number of retries to make to the RADIUS
- server. The default is 3 retries (4 tries).
-
-**strip_realm**
- If this tag is ``true``, the principal without the realm will be
- passed to the RADIUS server. Otherwise, the realm will be
- included. The default value is ``true``.
-
-**indicator**
- This tag specifies an authentication indicator to be included in
- the ticket if this token type is used to authenticate. This
- option may be specified multiple times. (New in release 1.14.)
-
-In the following example, requests are sent to a remote server via UDP::
-
- [otp]
- MyRemoteTokenType = {
- server = radius.mydomain.com:1812
- secret = SEmfiajf42$
- timeout = 15
- retries = 5
- strip_realm = true
- }
-
-An implicit default token type named ``DEFAULT`` is defined for when
-the per-principal configuration does not specify a token type. Its
-configuration is shown below. You may override this token type to
-something applicable for your situation::
-
- [otp]
- DEFAULT = {
- strip_realm = false
- }
-
-PKINIT options
---------------
-
-.. note::
-
- The following are pkinit-specific options. These values may
- be specified in [kdcdefaults] as global defaults, or within
- a realm-specific subsection of [realms]. Also note that a
- realm-specific value over-rides, does not add to, a generic
- [kdcdefaults] specification. The search order is:
-
-1. realm-specific subsection of [realms]::
-
- [realms]
- EXAMPLE.COM = {
- pkinit_anchors = FILE:/usr/local/example.com.crt
- }
-
-2. generic value in the [kdcdefaults] section::
-
- [kdcdefaults]
- pkinit_anchors = DIR:/usr/local/generic_trusted_cas/
-
-For information about the syntax of some of these options, see
-:ref:`Specifying PKINIT identity information <pkinit_identity>` in
-:ref:`krb5.conf(5)`.
-
-**pkinit_anchors**
- Specifies the location of trusted anchor (root) certificates which
- the KDC trusts to sign client certificates. This option is
- required if pkinit is to be supported by the KDC. This option may
- be specified multiple times.
-
-**pkinit_dh_min_bits**
- Specifies the minimum number of bits the KDC is willing to accept
- for a client's Diffie-Hellman key. The default is 2048.
-
-**pkinit_allow_upn**
- Specifies that the KDC is willing to accept client certificates
- with the Microsoft UserPrincipalName (UPN) Subject Alternative
- Name (SAN). This means the KDC accepts the binding of the UPN in
- the certificate to the Kerberos principal name. The default value
- is false.
-
- Without this option, the KDC will only accept certificates with
- the id-pkinit-san as defined in :rfc:`4556`. There is currently
- no option to disable SAN checking in the KDC.
-
-**pkinit_eku_checking**
- This option specifies what Extended Key Usage (EKU) values the KDC
- is willing to accept in client certificates. The values
- recognized in the kdc.conf file are:
-
- **kpClientAuth**
- This is the default value and specifies that client
- certificates must have the id-pkinit-KPClientAuth EKU as
- defined in :rfc:`4556`.
-
- **scLogin**
- If scLogin is specified, client certificates with the
- Microsoft Smart Card Login EKU (id-ms-kp-sc-logon) will be
- accepted.
-
- **none**
- If none is specified, then client certificates will not be
- checked to verify they have an acceptable EKU. The use of
- this option is not recommended.
-
-**pkinit_identity**
- Specifies the location of the KDC's X.509 identity information.
- This option is required if pkinit is to be supported by the KDC.
-
-**pkinit_indicator**
- Specifies an authentication indicator to include in the ticket if
- pkinit is used to authenticate. This option may be specified
- multiple times. (New in release 1.14.)
-
-**pkinit_pool**
- Specifies the location of intermediate certificates which may be
- used by the KDC to complete the trust chain between a client's
- certificate and a trusted anchor. This option may be specified
- multiple times.
-
-**pkinit_revoke**
- Specifies the location of Certificate Revocation List (CRL)
- information to be used by the KDC when verifying the validity of
- client certificates. This option may be specified multiple times.
-
-**pkinit_require_crl_checking**
- The default certificate verification process will always check the
- available revocation information to see if a certificate has been
- revoked. If a match is found for the certificate in a CRL,
- verification fails. If the certificate being verified is not
- listed in a CRL, or there is no CRL present for its issuing CA,
- and **pkinit_require_crl_checking** is false, then verification
- succeeds.
-
- However, if **pkinit_require_crl_checking** is true and there is
- no CRL information available for the issuing CA, then verification
- fails.
-
- **pkinit_require_crl_checking** should be set to true if the
- policy is such that up-to-date CRLs must be present for every CA.
-
-**pkinit_require_freshness**
- Specifies whether to require clients to include a freshness token
- in PKINIT requests. The default value is false. (New in release
- 1.17.)
-
-.. _Encryption_types:
-
-Encryption types
-----------------
-
-Any tag in the configuration files which requires a list of encryption
-types can be set to some combination of the following strings.
-Encryption types marked as "weak" and "deprecated" are available for
-compatibility but not recommended for use.
-
-==================================================== =========================================================
-des3-cbc-raw Triple DES cbc mode raw (weak)
-des3-cbc-sha1 des3-hmac-sha1 des3-cbc-sha1-kd Triple DES cbc mode with HMAC/sha1 (deprecated)
-aes256-cts-hmac-sha1-96 aes256-cts aes256-sha1 AES-256 CTS mode with 96-bit SHA-1 HMAC
-aes128-cts-hmac-sha1-96 aes128-cts aes128-sha1 AES-128 CTS mode with 96-bit SHA-1 HMAC
-aes256-cts-hmac-sha384-192 aes256-sha2 AES-256 CTS mode with 192-bit SHA-384 HMAC
-aes128-cts-hmac-sha256-128 aes128-sha2 AES-128 CTS mode with 128-bit SHA-256 HMAC
-arcfour-hmac rc4-hmac arcfour-hmac-md5 RC4 with HMAC/MD5 (deprecated)
-arcfour-hmac-exp rc4-hmac-exp arcfour-hmac-md5-exp Exportable RC4 with HMAC/MD5 (weak)
-camellia256-cts-cmac camellia256-cts Camellia-256 CTS mode with CMAC
-camellia128-cts-cmac camellia128-cts Camellia-128 CTS mode with CMAC
-des3 The triple DES family: des3-cbc-sha1
-aes The AES family: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, aes256-cts-hmac-sha384-192, and aes128-cts-hmac-sha256-128
-rc4 The RC4 family: arcfour-hmac
-camellia The Camellia family: camellia256-cts-cmac and camellia128-cts-cmac
-==================================================== =========================================================
-
-The string **DEFAULT** can be used to refer to the default set of
-types for the variable in question. Types or families can be removed
-from the current list by prefixing them with a minus sign ("-").
-Types or families can be prefixed with a plus sign ("+") for symmetry;
-it has the same meaning as just listing the type or family. For
-example, "``DEFAULT -rc4``" would be the default set of encryption
-types with RC4 types removed, and "``des3 DEFAULT``" would be the
-default set of encryption types with triple DES types moved to the
-front.
-
-While **aes128-cts** and **aes256-cts** are supported for all Kerberos
-operations, they are not supported by very old versions of our GSSAPI
-implementation (krb5-1.3.1 and earlier). Services running versions of
-krb5 without AES support must not be given keys of these encryption
-types in the KDC database.
-
-The **aes128-sha2** and **aes256-sha2** encryption types are new in
-release 1.15. Services running versions of krb5 without support for
-these newer encryption types must not be given keys of these
-encryption types in the KDC database.
-
-
-.. _Keysalt_lists:
-
-Keysalt lists
--------------
-
-Kerberos keys for users are usually derived from passwords. Kerberos
-commands and configuration parameters that affect generation of keys
-take lists of enctype-salttype ("keysalt") pairs, known as *keysalt
-lists*. Each keysalt pair is an enctype name followed by a salttype
-name, in the format *enc*:*salt*. Individual keysalt list members are
-separated by comma (",") characters or space characters. For example::
-
- kadmin -e aes256-cts:normal,aes128-cts:normal
-
-would start up kadmin so that by default it would generate
-password-derived keys for the **aes256-cts** and **aes128-cts**
-encryption types, using a **normal** salt.
-
-To ensure that people who happen to pick the same password do not have
-the same key, Kerberos 5 incorporates more information into the key
-using something called a salt. The supported salt types are as
-follows:
-
-================= ============================================
-normal default for Kerberos Version 5
-norealm same as the default, without using realm information
-onlyrealm uses only realm information as the salt
-special generate a random salt
-================= ============================================
-
-
-Sample kdc.conf File
---------------------
-
-Here's an example of a kdc.conf file::
-
- [kdcdefaults]
- kdc_listen = 88
- kdc_tcp_listen = 88
- [realms]
- ATHENA.MIT.EDU = {
- kadmind_port = 749
- max_life = 12h 0m 0s
- max_renewable_life = 7d 0h 0m 0s
- master_key_type = aes256-cts-hmac-sha1-96
- supported_enctypes = aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal
- database_module = openldap_ldapconf
- }
-
- [logging]
- kdc = FILE:/usr/local/var/krb5kdc/kdc.log
- admin_server = FILE:/usr/local/var/krb5kdc/kadmin.log
-
- [dbdefaults]
- ldap_kerberos_container_dn = cn=krbcontainer,dc=mit,dc=edu
-
- [dbmodules]
- openldap_ldapconf = {
- db_library = kldap
- disable_last_success = true
- ldap_kdc_dn = "cn=krbadmin,dc=mit,dc=edu"
- # this object needs to have read rights on
- # the realm container and principal subtrees
- ldap_kadmind_dn = "cn=krbadmin,dc=mit,dc=edu"
- # this object needs to have read and write rights on
- # the realm container and principal subtrees
- ldap_service_password_file = /etc/kerberos/service.keyfile
- ldap_servers = ldaps://kerberos.mit.edu
- ldap_conns_per_server = 5
- }
-
-
-FILES
-------
-
-|kdcdir|\ ``/kdc.conf``
-
-
-SEE ALSO
----------
-
-:ref:`krb5.conf(5)`, :ref:`krb5kdc(8)`, :ref:`kadm5.acl(5)`
+++ /dev/null
-.. _krb5.conf(5):
-
-krb5.conf
-=========
-
-The krb5.conf file contains Kerberos configuration information,
-including the locations of KDCs and admin servers for the Kerberos
-realms of interest, defaults for the current realm and for Kerberos
-applications, and mappings of hostnames onto Kerberos realms.
-Normally, you should install your krb5.conf file in the directory
-``/etc``. You can override the default location by setting the
-environment variable **KRB5_CONFIG**. Multiple colon-separated
-filenames may be specified in **KRB5_CONFIG**; all files which are
-present will be read. Starting in release 1.14, directory names can
-also be specified in **KRB5_CONFIG**; all files within the directory
-whose names consist solely of alphanumeric characters, dashes, or
-underscores will be read.
-
-
-Structure
----------
-
-The krb5.conf file is set up in the style of a Windows INI file.
-Lines beginning with '#' or ';' (possibly after initial whitespace)
-are ignored as comments. Sections are headed by the section name, in
-square brackets. Each section may contain zero or more relations, of
-the form::
-
- foo = bar
-
-or::
-
- fubar = {
- foo = bar
- baz = quux
- }
-
-Placing a '\*' after the closing bracket of a section name indicates
-that the section is *final*, meaning that if the same section appears
-within a later file specified in **KRB5_CONFIG**, it will be ignored.
-A subsection can be marked as final by placing a '\*' after either the
-tag name or the closing brace.
-
-The krb5.conf file can include other files using either of the
-following directives at the beginning of a line::
-
- include FILENAME
- includedir DIRNAME
-
-*FILENAME* or *DIRNAME* should be an absolute path. The named file or
-directory must exist and be readable. Including a directory includes
-all files within the directory whose names consist solely of
-alphanumeric characters, dashes, or underscores. Starting in release
-1.15, files with names ending in ".conf" are also included, unless the
-name begins with ".". Included profile files are syntactically
-independent of their parents, so each included file must begin with a
-section header. Starting in release 1.17, files are read in
-alphanumeric order; in previous releases, they may be read in any
-order.
-
-The krb5.conf file can specify that configuration should be obtained
-from a loadable module, rather than the file itself, using the
-following directive at the beginning of a line before any section
-headers::
-
- module MODULEPATH:RESIDUAL
-
-*MODULEPATH* may be relative to the library path of the krb5
-installation, or it may be an absolute path. *RESIDUAL* is provided
-to the module at initialization time. If krb5.conf uses a module
-directive, :ref:`kdc.conf(5)` should also use one if it exists.
-
-
-Sections
---------
-
-The krb5.conf file may contain the following sections:
-
-=================== =======================================================
-:ref:`libdefaults` Settings used by the Kerberos V5 library
-:ref:`realms` Realm-specific contact information and settings
-:ref:`domain_realm` Maps server hostnames to Kerberos realms
-:ref:`capaths` Authentication paths for non-hierarchical cross-realm
-:ref:`appdefaults` Settings used by some Kerberos V5 applications
-:ref:`plugins` Controls plugin module registration
-=================== =======================================================
-
-Additionally, krb5.conf may include any of the relations described in
-:ref:`kdc.conf(5)`, but it is not a recommended practice.
-
-.. _libdefaults:
-
-[libdefaults]
-~~~~~~~~~~~~~
-
-The libdefaults section may contain any of the following relations:
-
-**allow_weak_crypto**
- If this flag is set to false, then weak encryption types (as noted
- in :ref:`Encryption_types` in :ref:`kdc.conf(5)`) will be filtered
- out of the lists **default_tgs_enctypes**,
- **default_tkt_enctypes**, and **permitted_enctypes**. The default
- value for this tag is false.
-
-**canonicalize**
- If this flag is set to true, initial ticket requests to the KDC
- will request canonicalization of the client principal name, and
- answers with different client principals than the requested
- principal will be accepted. The default value is false.
-
-**ccache_type**
- This parameter determines the format of credential cache types
- created by :ref:`kinit(1)` or other programs. The default value
- is 4, which represents the most current format. Smaller values
- can be used for compatibility with very old implementations of
- Kerberos which interact with credential caches on the same host.
-
-**clockskew**
- Sets the maximum allowable amount of clockskew in seconds that the
- library will tolerate before assuming that a Kerberos message is
- invalid. The default value is 300 seconds, or five minutes.
-
- The clockskew setting is also used when evaluating ticket start
- and expiration times. For example, tickets that have reached
- their expiration time can still be used (and renewed if they are
- renewable tickets) if they have been expired for a shorter
- duration than the **clockskew** setting.
-
-**default_ccache_name**
- This relation specifies the name of the default credential cache.
- The default is |ccache|. This relation is subject to parameter
- expansion (see below). New in release 1.11.
-
-**default_client_keytab_name**
- This relation specifies the name of the default keytab for
- obtaining client credentials. The default is |ckeytab|. This
- relation is subject to parameter expansion (see below).
- New in release 1.11.
-
-**default_keytab_name**
- This relation specifies the default keytab name to be used by
- application servers such as sshd. The default is |keytab|. This
- relation is subject to parameter expansion (see below).
-
-**default_rcache_name**
- This relation specifies the name of the default replay cache.
- The default is ``dfl:``. This relation is subject to parameter
- expansion (see below). New in release 1.18.
-
-**default_realm**
- Identifies the default Kerberos realm for the client. Set its
- value to your Kerberos realm. If this value is not set, then a
- realm must be specified with every Kerberos principal when
- invoking programs such as :ref:`kinit(1)`.
-
-**default_tgs_enctypes**
- Identifies the supported list of session key encryption types that
- the client should request when making a TGS-REQ, in order of
- preference from highest to lowest. The list may be delimited with
- commas or whitespace. See :ref:`Encryption_types` in
- :ref:`kdc.conf(5)` for a list of the accepted values for this tag.
- Starting in release 1.18, the default value is the value of
- **permitted_enctypes**. For previous releases or if
- **permitted_enctypes** is not set, the default value is
- |defetypes|.
-
- Do not set this unless required for specific backward
- compatibility purposes; stale values of this setting can prevent
- clients from taking advantage of new stronger enctypes when the
- libraries are upgraded.
-
-**default_tkt_enctypes**
- Identifies the supported list of session key encryption types that
- the client should request when making an AS-REQ, in order of
- preference from highest to lowest. The format is the same as for
- default_tgs_enctypes. Starting in release 1.18, the default
- value is the value of **permitted_enctypes**. For previous
- releases or if **permitted_enctypes** is not set, the default
- value is |defetypes|.
-
- Do not set this unless required for specific backward
- compatibility purposes; stale values of this setting can prevent
- clients from taking advantage of new stronger enctypes when the
- libraries are upgraded.
-
-**dns_canonicalize_hostname**
- Indicate whether name lookups will be used to canonicalize
- hostnames for use in service principal names. Setting this flag
- to false can improve security by reducing reliance on DNS, but
- means that short hostnames will not be canonicalized to
- fully-qualified hostnames. If this option is set to ``fallback`` (new
- in release 1.18), DNS canonicalization will only be performed the
- server hostname is not found with the original name when
- requesting credentials. The default value is true.
-
-**dns_lookup_kdc**
- Indicate whether DNS SRV records should be used to locate the KDCs
- and other servers for a realm, if they are not listed in the
- krb5.conf information for the realm. (Note that the admin_server
- entry must be in the krb5.conf realm information in order to
- contact kadmind, because the DNS implementation for kadmin is
- incomplete.)
-
- Enabling this option does open up a type of denial-of-service
- attack, if someone spoofs the DNS records and redirects you to
- another server. However, it's no worse than a denial of service,
- because that fake KDC will be unable to decode anything you send
- it (besides the initial ticket request, which has no encrypted
- data), and anything the fake KDC sends will not be trusted without
- verification using some secret that it won't know.
-
-**dns_uri_lookup**
- Indicate whether DNS URI records should be used to locate the KDCs
- and other servers for a realm, if they are not listed in the
- krb5.conf information for the realm. SRV records are used as a
- fallback if no URI records were found. The default value is true.
- New in release 1.15.
-
-**enforce_ok_as_delegate**
- If this flag to true, GSSAPI credential delegation will be
- disabled when the ``ok-as-delegate`` flag is not set in the
- service ticket. If this flag is false, the ``ok-as-delegate``
- ticket flag is only enforced when an application specifically
- requests enforcement. The default value is false.
-
-**err_fmt**
- This relation allows for custom error message formatting. If a
- value is set, error messages will be formatted by substituting a
- normal error message for %M and an error code for %C in the value.
-
-**extra_addresses**
- This allows a computer to use multiple local addresses, in order
- to allow Kerberos to work in a network that uses NATs while still
- using address-restricted tickets. The addresses should be in a
- comma-separated list. This option has no effect if
- **noaddresses** is true.
-
-**forwardable**
- If this flag is true, initial tickets will be forwardable by
- default, if allowed by the KDC. The default value is false.
-
-**ignore_acceptor_hostname**
- When accepting GSSAPI or krb5 security contexts for host-based
- service principals, ignore any hostname passed by the calling
- application, and allow clients to authenticate to any service
- principal in the keytab matching the service name and realm name
- (if given). This option can improve the administrative
- flexibility of server applications on multihomed hosts, but could
- compromise the security of virtual hosting environments. The
- default value is false. New in release 1.10.
-
-**k5login_authoritative**
- If this flag is true, principals must be listed in a local user's
- k5login file to be granted login access, if a :ref:`.k5login(5)`
- file exists. If this flag is false, a principal may still be
- granted login access through other mechanisms even if a k5login
- file exists but does not list the principal. The default value is
- true.
-
-**k5login_directory**
- If set, the library will look for a local user's k5login file
- within the named directory, with a filename corresponding to the
- local username. If not set, the library will look for k5login
- files in the user's home directory, with the filename .k5login.
- For security reasons, .k5login files must be owned by
- the local user or by root.
-
-**kcm_mach_service**
- On macOS only, determines the name of the bootstrap service used to
- contact the KCM daemon for the KCM credential cache type. If the
- value is ``-``, Mach RPC will not be used to contact the KCM
- daemon. The default value is ``org.h5l.kcm``.
-
-**kcm_socket**
- Determines the path to the Unix domain socket used to access the
- KCM daemon for the KCM credential cache type. If the value is
- ``-``, Unix domain sockets will not be used to contact the KCM
- daemon. The default value is
- ``/var/run/.heim_org.h5l.kcm-socket``.
-
-**kdc_default_options**
- Default KDC options (Xored for multiple values) when requesting
- initial tickets. By default it is set to 0x00000010
- (KDC_OPT_RENEWABLE_OK).
-
-**kdc_timesync**
- Accepted values for this relation are 1 or 0. If it is nonzero,
- client machines will compute the difference between their time and
- the time returned by the KDC in the timestamps in the tickets and
- use this value to correct for an inaccurate system clock when
- requesting service tickets or authenticating to services. This
- corrective factor is only used by the Kerberos library; it is not
- used to change the system clock. The default value is 1.
-
-**noaddresses**
- If this flag is true, requests for initial tickets will not be
- made with address restrictions set, allowing the tickets to be
- used across NATs. The default value is true.
-
-**permitted_enctypes**
- Identifies the encryption types that servers will permit for
- session keys and for ticket and authenticator encryption, ordered
- by preference from highest to lowest. Starting in release 1.18,
- this tag also acts as the default value for
- **default_tgs_enctypes** and **default_tkt_enctypes**. The
- default value for this tag is |defetypes|.
-
-**plugin_base_dir**
- If set, determines the base directory where krb5 plugins are
- located. The default value is the ``krb5/plugins`` subdirectory
- of the krb5 library directory. This relation is subject to
- parameter expansion (see below) in release 1.17 and later.
-
-**preferred_preauth_types**
- This allows you to set the preferred preauthentication types which
- the client will attempt before others which may be advertised by a
- KDC. The default value for this setting is "17, 16, 15, 14",
- which forces libkrb5 to attempt to use PKINIT if it is supported.
-
-**proxiable**
- If this flag is true, initial tickets will be proxiable by
- default, if allowed by the KDC. The default value is false.
-
-**qualify_shortname**
- If this string is set, it determines the domain suffix for
- single-component hostnames when DNS canonicalization is not used
- (either because **dns_canonicalize_hostname** is false or because
- forward canonicalization failed). The default value is the first
- search domain of the system's DNS configuration. To disable
- qualification of shortnames, set this relation to the empty string
- with ``qualify_shortname = ""``. (New in release 1.18.)
-
-**rdns**
- If this flag is true, reverse name lookup will be used in addition
- to forward name lookup to canonicalizing hostnames for use in
- service principal names. If **dns_canonicalize_hostname** is set
- to false, this flag has no effect. The default value is true.
-
-**realm_try_domains**
- Indicate whether a host's domain components should be used to
- determine the Kerberos realm of the host. The value of this
- variable is an integer: -1 means not to search, 0 means to try the
- host's domain itself, 1 means to also try the domain's immediate
- parent, and so forth. The library's usual mechanism for locating
- Kerberos realms is used to determine whether a domain is a valid
- realm, which may involve consulting DNS if **dns_lookup_kdc** is
- set. The default is not to search domain components.
-
-**renew_lifetime**
- (:ref:`duration` string.) Sets the default renewable lifetime
- for initial ticket requests. The default value is 0.
-
-**spake_preauth_groups**
- A whitespace or comma-separated list of words which specifies the
- groups allowed for SPAKE preauthentication. The possible values
- are:
-
- ============ ================================
- edwards25519 Edwards25519 curve (:rfc:`7748`)
- P-256 NIST P-256 curve (:rfc:`5480`)
- P-384 NIST P-384 curve (:rfc:`5480`)
- P-521 NIST P-521 curve (:rfc:`5480`)
- ============ ================================
-
- The default value for the client is ``edwards25519``. The default
- value for the KDC is empty. New in release 1.17.
-
-**ticket_lifetime**
- (:ref:`duration` string.) Sets the default lifetime for initial
- ticket requests. The default value is 1 day.
-
-**udp_preference_limit**
- When sending a message to the KDC, the library will try using TCP
- before UDP if the size of the message is above
- **udp_preference_limit**. If the message is smaller than
- **udp_preference_limit**, then UDP will be tried before TCP.
- Regardless of the size, both protocols will be tried if the first
- attempt fails.
-
-**verify_ap_req_nofail**
- If this flag is true, then an attempt to verify initial
- credentials will fail if the client machine does not have a
- keytab. The default value is false.
-
-**client_aware_channel_bindings**
- If this flag is true, then all application protocol authentication
- requests will be flagged to indicate that the application supports
- channel bindings when operating over a secure channel. The
- default value is false.
-
-.. _realms:
-
-[realms]
-~~~~~~~~
-
-Each tag in the [realms] section of the file is the name of a Kerberos
-realm. The value of the tag is a subsection with relations that
-define the properties of that particular realm. For each realm, the
-following tags may be specified in the realm's subsection:
-
-**admin_server**
- Identifies the host where the administration server is running.
- Typically, this is the primary Kerberos server. This tag must be
- given a value in order to communicate with the :ref:`kadmind(8)`
- server for the realm.
-
-**auth_to_local**
- This tag allows you to set a general rule for mapping principal
- names to local user names. It will be used if there is not an
- explicit mapping for the principal name that is being
- translated. The possible values are:
-
- **RULE:**\ *exp*
- The local name will be formulated from *exp*.
-
- The format for *exp* is **[**\ *n*\ **:**\ *string*\ **](**\
- *regexp*\ **)s/**\ *pattern*\ **/**\ *replacement*\ **/g**.
- The integer *n* indicates how many components the target
- principal should have. If this matches, then a string will be
- formed from *string*, substituting the realm of the principal
- for ``$0`` and the *n*'th component of the principal for
- ``$n`` (e.g., if the principal was ``johndoe/admin`` then
- ``[2:$2$1foo]`` would result in the string
- ``adminjohndoefoo``). If this string matches *regexp*, then
- the ``s//[g]`` substitution command will be run over the
- string. The optional **g** will cause the substitution to be
- global over the *string*, instead of replacing only the first
- match in the *string*.
-
- **DEFAULT**
- The principal name will be used as the local user name. If
- the principal has more than one component or is not in the
- default realm, this rule is not applicable and the conversion
- will fail.
-
- For example::
-
- [realms]
- ATHENA.MIT.EDU = {
- auth_to_local = RULE:[2:$1](johndoe)s/^.*$/guest/
- auth_to_local = RULE:[2:$1;$2](^.*;admin$)s/;admin$//
- auth_to_local = RULE:[2:$2](^.*;root)s/^.*$/root/
- auth_to_local = DEFAULT
- }
-
- would result in any principal without ``root`` or ``admin`` as the
- second component to be translated with the default rule. A
- principal with a second component of ``admin`` will become its
- first component. ``root`` will be used as the local name for any
- principal with a second component of ``root``. The exception to
- these two rules are any principals ``johndoe/*``, which will
- always get the local name ``guest``.
-
-**auth_to_local_names**
- This subsection allows you to set explicit mappings from principal
- names to local user names. The tag is the mapping name, and the
- value is the corresponding local user name.
-
-**default_domain**
- This tag specifies the domain used to expand hostnames when
- translating Kerberos 4 service principals to Kerberos 5 principals
- (for example, when converting ``rcmd.hostname`` to
- ``host/hostname.domain``).
-
-**disable_encrypted_timestamp**
- If this flag is true, the client will not perform encrypted
- timestamp preauthentication if requested by the KDC. Setting this
- flag can help to prevent dictionary attacks by active attackers,
- if the realm's KDCs support SPAKE preauthentication or if initial
- authentication always uses another mechanism or always uses FAST.
- This flag persists across client referrals during initial
- authentication. This flag does not prevent the KDC from offering
- encrypted timestamp. New in release 1.17.
-
-**http_anchors**
- When KDCs and kpasswd servers are accessed through HTTPS proxies, this tag
- can be used to specify the location of the CA certificate which should be
- trusted to issue the certificate for a proxy server. If left unspecified,
- the system-wide default set of CA certificates is used.
-
- The syntax for values is similar to that of values for the
- **pkinit_anchors** tag:
-
- **FILE:** *filename*
-
- *filename* is assumed to be the name of an OpenSSL-style ca-bundle file.
-
- **DIR:** *dirname*
-
- *dirname* is assumed to be an directory which contains CA certificates.
- All files in the directory will be examined; if they contain certificates
- (in PEM format), they will be used.
-
- **ENV:** *envvar*
-
- *envvar* specifies the name of an environment variable which has been set
- to a value conforming to one of the previous values. For example,
- ``ENV:X509_PROXY_CA``, where environment variable ``X509_PROXY_CA`` has
- been set to ``FILE:/tmp/my_proxy.pem``.
-
-**kdc**
- The name or address of a host running a KDC for that realm. An
- optional port number, separated from the hostname by a colon, may
- be included. If the name or address contains colons (for example,
- if it is an IPv6 address), enclose it in square brackets to
- distinguish the colon from a port separator. For your computer to
- be able to communicate with the KDC for each realm, this tag must
- be given a value in each realm subsection in the configuration
- file, or there must be DNS SRV records specifying the KDCs.
-
-**kpasswd_server**
- Points to the server where all the password changes are performed.
- If there is no such entry, DNS will be queried (unless forbidden
- by **dns_lookup_kdc**). Finally, port 464 on the **admin_server**
- host will be tried.
-
-**master_kdc**
- The name for **primary_kdc** prior to release 1.19. Its value is
- used as a fallback if **primary_kdc** is not specified.
-
-**primary_kdc**
- Identifies the primary KDC(s). Currently, this tag is used in only
- one case: If an attempt to get credentials fails because of an
- invalid password, the client software will attempt to contact the
- primary KDC, in case the user's password has just been changed, and
- the updated database has not been propagated to the replica
- servers yet. New in release 1.19.
-
-**v4_instance_convert**
- This subsection allows the administrator to configure exceptions
- to the **default_domain** mapping rule. It contains V4 instances
- (the tag name) which should be translated to some specific
- hostname (the tag value) as the second component in a Kerberos V5
- principal name.
-
-**v4_realm**
- This relation is used by the krb524 library routines when
- converting a V5 principal name to a V4 principal name. It is used
- when the V4 realm name and the V5 realm name are not the same, but
- still share the same principal names and passwords. The tag value
- is the Kerberos V4 realm name.
-
-
-.. _domain_realm:
-
-[domain_realm]
-~~~~~~~~~~~~~~
-
-The [domain_realm] section provides a translation from hostnames to
-Kerberos realms. Each tag is a domain name, providing the mapping for
-that domain and all subdomains. If the tag begins with a period
-(``.``) then it applies only to subdomains. The Kerberos realm may be
-identified either in the realms_ section or using DNS SRV records.
-Tag names should be in lower case. For example::
-
- [domain_realm]
- crash.mit.edu = TEST.ATHENA.MIT.EDU
- .dev.mit.edu = TEST.ATHENA.MIT.EDU
- mit.edu = ATHENA.MIT.EDU
-
-maps the host with the name ``crash.mit.edu`` into the
-``TEST.ATHENA.MIT.EDU`` realm. The second entry maps all hosts under the
-domain ``dev.mit.edu`` into the ``TEST.ATHENA.MIT.EDU`` realm, but not
-the host with the name ``dev.mit.edu``. That host is matched
-by the third entry, which maps the host ``mit.edu`` and all hosts
-under the domain ``mit.edu`` that do not match a preceding rule
-into the realm ``ATHENA.MIT.EDU``.
-
-If no translation entry applies to a hostname used for a service
-principal for a service ticket request, the library will try to get a
-referral to the appropriate realm from the client realm's KDC. If
-that does not succeed, the host's realm is considered to be the
-hostname's domain portion converted to uppercase, unless the
-**realm_try_domains** setting in [libdefaults] causes a different
-parent domain to be used.
-
-
-.. _capaths:
-
-[capaths]
-~~~~~~~~~
-
-In order to perform direct (non-hierarchical) cross-realm
-authentication, configuration is needed to determine the
-authentication paths between realms.
-
-A client will use this section to find the authentication path between
-its realm and the realm of the server. The server will use this
-section to verify the authentication path used by the client, by
-checking the transited field of the received ticket.
-
-There is a tag for each participating client realm, and each tag has
-subtags for each of the server realms. The value of the subtags is an
-intermediate realm which may participate in the cross-realm
-authentication. The subtags may be repeated if there is more then one
-intermediate realm. A value of "." means that the two realms share
-keys directly, and no intermediate realms should be allowed to
-participate.
-
-Only those entries which will be needed on the client or the server
-need to be present. A client needs a tag for its local realm with
-subtags for all the realms of servers it will need to authenticate to.
-A server needs a tag for each realm of the clients it will serve, with
-a subtag of the server realm.
-
-For example, ``ANL.GOV``, ``PNL.GOV``, and ``NERSC.GOV`` all wish to
-use the ``ES.NET`` realm as an intermediate realm. ANL has a sub
-realm of ``TEST.ANL.GOV`` which will authenticate with ``NERSC.GOV``
-but not ``PNL.GOV``. The [capaths] section for ``ANL.GOV`` systems
-would look like this::
-
- [capaths]
- ANL.GOV = {
- TEST.ANL.GOV = .
- PNL.GOV = ES.NET
- NERSC.GOV = ES.NET
- ES.NET = .
- }
- TEST.ANL.GOV = {
- ANL.GOV = .
- }
- PNL.GOV = {
- ANL.GOV = ES.NET
- }
- NERSC.GOV = {
- ANL.GOV = ES.NET
- }
- ES.NET = {
- ANL.GOV = .
- }
-
-The [capaths] section of the configuration file used on ``NERSC.GOV``
-systems would look like this::
-
- [capaths]
- NERSC.GOV = {
- ANL.GOV = ES.NET
- TEST.ANL.GOV = ES.NET
- TEST.ANL.GOV = ANL.GOV
- PNL.GOV = ES.NET
- ES.NET = .
- }
- ANL.GOV = {
- NERSC.GOV = ES.NET
- }
- PNL.GOV = {
- NERSC.GOV = ES.NET
- }
- ES.NET = {
- NERSC.GOV = .
- }
- TEST.ANL.GOV = {
- NERSC.GOV = ANL.GOV
- NERSC.GOV = ES.NET
- }
-
-When a subtag is used more than once within a tag, clients will use
-the order of values to determine the path. The order of values is not
-important to servers.
-
-
-.. _appdefaults:
-
-[appdefaults]
-~~~~~~~~~~~~~
-
-Each tag in the [appdefaults] section names a Kerberos V5 application
-or an option that is used by some Kerberos V5 application[s]. The
-value of the tag defines the default behaviors for that application.
-
-For example::
-
- [appdefaults]
- telnet = {
- ATHENA.MIT.EDU = {
- option1 = false
- }
- }
- telnet = {
- option1 = true
- option2 = true
- }
- ATHENA.MIT.EDU = {
- option2 = false
- }
- option2 = true
-
-The above four ways of specifying the value of an option are shown in
-order of decreasing precedence. In this example, if telnet is running
-in the realm EXAMPLE.COM, it should, by default, have option1 and
-option2 set to true. However, a telnet program in the realm
-``ATHENA.MIT.EDU`` should have ``option1`` set to false and
-``option2`` set to true. Any other programs in ATHENA.MIT.EDU should
-have ``option2`` set to false by default. Any programs running in
-other realms should have ``option2`` set to true.
-
-The list of specifiable options for each application may be found in
-that application's man pages. The application defaults specified here
-are overridden by those specified in the realms_ section.
-
-
-.. _plugins:
-
-[plugins]
-~~~~~~~~~
-
- * pwqual_ interface
- * kadm5_hook_ interface
- * clpreauth_ and kdcpreauth_ interfaces
-
-Tags in the [plugins] section can be used to register dynamic plugin
-modules and to turn modules on and off. Not every krb5 pluggable
-interface uses the [plugins] section; the ones that do are documented
-here.
-
-New in release 1.9.
-
-Each pluggable interface corresponds to a subsection of [plugins].
-All subsections support the same tags:
-
-**disable**
- This tag may have multiple values. If there are values for this
- tag, then the named modules will be disabled for the pluggable
- interface.
-
-**enable_only**
- This tag may have multiple values. If there are values for this
- tag, then only the named modules will be enabled for the pluggable
- interface.
-
-**module**
- This tag may have multiple values. Each value is a string of the
- form ``modulename:pathname``, which causes the shared object
- located at *pathname* to be registered as a dynamic module named
- *modulename* for the pluggable interface. If *pathname* is not an
- absolute path, it will be treated as relative to the
- **plugin_base_dir** value from :ref:`libdefaults`.
-
-For pluggable interfaces where module order matters, modules
-registered with a **module** tag normally come first, in the order
-they are registered, followed by built-in modules in the order they
-are documented below. If **enable_only** tags are used, then the
-order of those tags overrides the normal module order.
-
-The following subsections are currently supported within the [plugins]
-section:
-
-.. _ccselect:
-
-ccselect interface
-##################
-
-The ccselect subsection controls modules for credential cache
-selection within a cache collection. In addition to any registered
-dynamic modules, the following built-in modules exist (and may be
-disabled with the disable tag):
-
-**k5identity**
- Uses a .k5identity file in the user's home directory to select a
- client principal
-
-**realm**
- Uses the service realm to guess an appropriate cache from the
- collection
-
-**hostname**
- If the service principal is host-based, uses the service hostname
- to guess an appropriate cache from the collection
-
-.. _pwqual:
-
-pwqual interface
-################
-
-The pwqual subsection controls modules for the password quality
-interface, which is used to reject weak passwords when passwords are
-changed. The following built-in modules exist for this interface:
-
-**dict**
- Checks against the realm dictionary file
-
-**empty**
- Rejects empty passwords
-
-**hesiod**
- Checks against user information stored in Hesiod (only if Kerberos
- was built with Hesiod support)
-
-**princ**
- Checks against components of the principal name
-
-.. _kadm5_hook:
-
-kadm5_hook interface
-####################
-
-The kadm5_hook interface provides plugins with information on
-principal creation, modification, password changes and deletion. This
-interface can be used to write a plugin to synchronize MIT Kerberos
-with another database such as Active Directory. No plugins are built
-in for this interface.
-
-.. _kadm5_auth:
-
-kadm5_auth interface
-####################
-
-The kadm5_auth section (introduced in release 1.16) controls modules
-for the kadmin authorization interface, which determines whether a
-client principal is allowed to perform a kadmin operation. The
-following built-in modules exist for this interface:
-
-**acl**
- This module reads the :ref:`kadm5.acl(5)` file, and authorizes
- operations which are allowed according to the rules in the file.
-
-**self**
- This module authorizes self-service operations including password
- changes, creation of new random keys, fetching the client's
- principal record or string attributes, and fetching the policy
- record associated with the client principal.
-
-.. _clpreauth:
-
-.. _kdcpreauth:
-
-clpreauth and kdcpreauth interfaces
-###################################
-
-The clpreauth and kdcpreauth interfaces allow plugin modules to
-provide client and KDC preauthentication mechanisms. The following
-built-in modules exist for these interfaces:
-
-**pkinit**
- This module implements the PKINIT preauthentication mechanism.
-
-**encrypted_challenge**
- This module implements the encrypted challenge FAST factor.
-
-**encrypted_timestamp**
- This module implements the encrypted timestamp mechanism.
-
-.. _hostrealm:
-
-hostrealm interface
-###################
-
-The hostrealm section (introduced in release 1.12) controls modules
-for the host-to-realm interface, which affects the local mapping of
-hostnames to realm names and the choice of default realm. The following
-built-in modules exist for this interface:
-
-**profile**
- This module consults the [domain_realm] section of the profile for
- authoritative host-to-realm mappings, and the **default_realm**
- variable for the default realm.
-
-**dns**
- This module looks for DNS records for fallback host-to-realm
- mappings and the default realm. It only operates if the
- **dns_lookup_realm** variable is set to true.
-
-**domain**
- This module applies heuristics for fallback host-to-realm
- mappings. It implements the **realm_try_domains** variable, and
- uses the uppercased parent domain of the hostname if that does not
- produce a result.
-
-.. _localauth:
-
-localauth interface
-###################
-
-The localauth section (introduced in release 1.12) controls modules
-for the local authorization interface, which affects the relationship
-between Kerberos principals and local system accounts. The following
-built-in modules exist for this interface:
-
-**default**
- This module implements the **DEFAULT** type for **auth_to_local**
- values.
-
-**rule**
- This module implements the **RULE** type for **auth_to_local**
- values.
-
-**names**
- This module looks for an **auth_to_local_names** mapping for the
- principal name.
-
-**auth_to_local**
- This module processes **auth_to_local** values in the default
- realm's section, and applies the default method if no
- **auth_to_local** values exist.
-
-**k5login**
- This module authorizes a principal to a local account according to
- the account's :ref:`.k5login(5)` file.
-
-**an2ln**
- This module authorizes a principal to a local account if the
- principal name maps to the local account name.
-
-.. _certauth:
-
-certauth interface
-##################
-
-The certauth section (introduced in release 1.16) controls modules for
-the certificate authorization interface, which determines whether a
-certificate is allowed to preauthenticate a user via PKINIT. The
-following built-in modules exist for this interface:
-
-**pkinit_san**
- This module authorizes the certificate if it contains a PKINIT
- Subject Alternative Name for the requested client principal, or a
- Microsoft UPN SAN matching the principal if **pkinit_allow_upn**
- is set to true for the realm.
-
-**pkinit_eku**
- This module rejects the certificate if it does not contain an
- Extended Key Usage attribute consistent with the
- **pkinit_eku_checking** value for the realm.
-
-**dbmatch**
- This module authorizes or rejects the certificate according to
- whether it matches the **pkinit_cert_match** string attribute on
- the client principal, if that attribute is present.
-
-
-PKINIT options
---------------
-
-.. note::
-
- The following are PKINIT-specific options. These values may
- be specified in [libdefaults] as global defaults, or within
- a realm-specific subsection of [libdefaults], or may be
- specified as realm-specific values in the [realms] section.
- A realm-specific value overrides, not adds to, a generic
- [libdefaults] specification. The search order is:
-
-1. realm-specific subsection of [libdefaults]::
-
- [libdefaults]
- EXAMPLE.COM = {
- pkinit_anchors = FILE:/usr/local/example.com.crt
- }
-
-2. realm-specific value in the [realms] section::
-
- [realms]
- OTHERREALM.ORG = {
- pkinit_anchors = FILE:/usr/local/otherrealm.org.crt
- }
-
-3. generic value in the [libdefaults] section::
-
- [libdefaults]
- pkinit_anchors = DIR:/usr/local/generic_trusted_cas/
-
-
-.. _pkinit_identity:
-
-Specifying PKINIT identity information
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-The syntax for specifying Public Key identity, trust, and revocation
-information for PKINIT is as follows:
-
-**FILE:**\ *filename*\ [**,**\ *keyfilename*]
- This option has context-specific behavior.
-
- In **pkinit_identity** or **pkinit_identities**, *filename*
- specifies the name of a PEM-format file containing the user's
- certificate. If *keyfilename* is not specified, the user's
- private key is expected to be in *filename* as well. Otherwise,
- *keyfilename* is the name of the file containing the private key.
-
- In **pkinit_anchors** or **pkinit_pool**, *filename* is assumed to
- be the name of an OpenSSL-style ca-bundle file.
-
-**DIR:**\ *dirname*
- This option has context-specific behavior.
-
- In **pkinit_identity** or **pkinit_identities**, *dirname*
- specifies a directory with files named ``*.crt`` and ``*.key``
- where the first part of the file name is the same for matching
- pairs of certificate and private key files. When a file with a
- name ending with ``.crt`` is found, a matching file ending with
- ``.key`` is assumed to contain the private key. If no such file
- is found, then the certificate in the ``.crt`` is not used.
-
- In **pkinit_anchors** or **pkinit_pool**, *dirname* is assumed to
- be an OpenSSL-style hashed CA directory where each CA cert is
- stored in a file named ``hash-of-ca-cert.#``. This infrastructure
- is encouraged, but all files in the directory will be examined and
- if they contain certificates (in PEM format), they will be used.
-
- In **pkinit_revoke**, *dirname* is assumed to be an OpenSSL-style
- hashed CA directory where each revocation list is stored in a file
- named ``hash-of-ca-cert.r#``. This infrastructure is encouraged,
- but all files in the directory will be examined and if they
- contain a revocation list (in PEM format), they will be used.
-
-**PKCS12:**\ *filename*
- *filename* is the name of a PKCS #12 format file, containing the
- user's certificate and private key.
-
-**PKCS11:**\ [**module_name=**]\ *modname*\ [**:slotid=**\ *slot-id*][**:token=**\ *token-label*][**:certid=**\ *cert-id*][**:certlabel=**\ *cert-label*]
- All keyword/values are optional. *modname* specifies the location
- of a library implementing PKCS #11. If a value is encountered
- with no keyword, it is assumed to be the *modname*. If no
- module-name is specified, the default is ``opensc-pkcs11.so``.
- ``slotid=`` and/or ``token=`` may be specified to force the use of
- a particular smard card reader or token if there is more than one
- available. ``certid=`` and/or ``certlabel=`` may be specified to
- force the selection of a particular certificate on the device.
- See the **pkinit_cert_match** configuration option for more ways
- to select a particular certificate to use for PKINIT.
-
-**ENV:**\ *envvar*
- *envvar* specifies the name of an environment variable which has
- been set to a value conforming to one of the previous values. For
- example, ``ENV:X509_PROXY``, where environment variable
- ``X509_PROXY`` has been set to ``FILE:/tmp/my_proxy.pem``.
-
-
-PKINIT krb5.conf options
-~~~~~~~~~~~~~~~~~~~~~~~~
-
-**pkinit_anchors**
- Specifies the location of trusted anchor (root) certificates which
- the client trusts to sign KDC certificates. This option may be
- specified multiple times. These values from the config file are
- not used if the user specifies X509_anchors on the command line.
-
-**pkinit_cert_match**
- Specifies matching rules that the client certificate must match
- before it is used to attempt PKINIT authentication. If a user has
- multiple certificates available (on a smart card, or via other
- media), there must be exactly one certificate chosen before
- attempting PKINIT authentication. This option may be specified
- multiple times. All the available certificates are checked
- against each rule in order until there is a match of exactly one
- certificate.
-
- The Subject and Issuer comparison strings are the :rfc:`2253`
- string representations from the certificate Subject DN and Issuer
- DN values.
-
- The syntax of the matching rules is:
-
- [*relation-operator*\ ]\ *component-rule* ...
-
- where:
-
- *relation-operator*
- can be either ``&&``, meaning all component rules must match,
- or ``||``, meaning only one component rule must match. The
- default is ``&&``.
-
- *component-rule*
- can be one of the following. Note that there is no
- punctuation or whitespace between component rules.
-
- | **<SUBJECT>**\ *regular-expression*
- | **<ISSUER>**\ *regular-expression*
- | **<SAN>**\ *regular-expression*
- | **<EKU>**\ *extended-key-usage-list*
- | **<KU>**\ *key-usage-list*
-
- *extended-key-usage-list* is a comma-separated list of
- required Extended Key Usage values. All values in the list
- must be present in the certificate. Extended Key Usage values
- can be:
-
- * pkinit
- * msScLogin
- * clientAuth
- * emailProtection
-
- *key-usage-list* is a comma-separated list of required Key
- Usage values. All values in the list must be present in the
- certificate. Key Usage values can be:
-
- * digitalSignature
- * keyEncipherment
-
- Examples::
-
- pkinit_cert_match = ||<SUBJECT>.*DoE.*<SAN>.*@EXAMPLE.COM
- pkinit_cert_match = &&<EKU>msScLogin,clientAuth<ISSUER>.*DoE.*
- pkinit_cert_match = <EKU>msScLogin,clientAuth<KU>digitalSignature
-
-**pkinit_eku_checking**
- This option specifies what Extended Key Usage value the KDC
- certificate presented to the client must contain. (Note that if
- the KDC certificate has the pkinit SubjectAlternativeName encoded
- as the Kerberos TGS name, EKU checking is not necessary since the
- issuing CA has certified this as a KDC certificate.) The values
- recognized in the krb5.conf file are:
-
- **kpKDC**
- This is the default value and specifies that the KDC must have
- the id-pkinit-KPKdc EKU as defined in :rfc:`4556`.
-
- **kpServerAuth**
- If **kpServerAuth** is specified, a KDC certificate with the
- id-kp-serverAuth EKU will be accepted. This key usage value
- is used in most commercially issued server certificates.
-
- **none**
- If **none** is specified, then the KDC certificate will not be
- checked to verify it has an acceptable EKU. The use of this
- option is not recommended.
-
-**pkinit_dh_min_bits**
- Specifies the size of the Diffie-Hellman key the client will
- attempt to use. The acceptable values are 1024, 2048, and 4096.
- The default is 2048.
-
-**pkinit_identities**
- Specifies the location(s) to be used to find the user's X.509
- identity information. If this option is specified multiple times,
- each value is attempted in order until certificates are found.
- Note that these values are not used if the user specifies
- **X509_user_identity** on the command line.
-
-**pkinit_kdc_hostname**
- The presence of this option indicates that the client is willing
- to accept a KDC certificate with a dNSName SAN (Subject
- Alternative Name) rather than requiring the id-pkinit-san as
- defined in :rfc:`4556`. This option may be specified multiple
- times. Its value should contain the acceptable hostname for the
- KDC (as contained in its certificate).
-
-**pkinit_pool**
- Specifies the location of intermediate certificates which may be
- used by the client to complete the trust chain between a KDC
- certificate and a trusted anchor. This option may be specified
- multiple times.
-
-**pkinit_require_crl_checking**
- The default certificate verification process will always check the
- available revocation information to see if a certificate has been
- revoked. If a match is found for the certificate in a CRL,
- verification fails. If the certificate being verified is not
- listed in a CRL, or there is no CRL present for its issuing CA,
- and **pkinit_require_crl_checking** is false, then verification
- succeeds.
-
- However, if **pkinit_require_crl_checking** is true and there is
- no CRL information available for the issuing CA, then verification
- fails.
-
- **pkinit_require_crl_checking** should be set to true if the
- policy is such that up-to-date CRLs must be present for every CA.
-
-**pkinit_revoke**
- Specifies the location of Certificate Revocation List (CRL)
- information to be used by the client when verifying the validity
- of the KDC certificate presented. This option may be specified
- multiple times.
-
-
-.. _parameter_expansion:
-
-Parameter expansion
--------------------
-
-Starting with release 1.11, several variables, such as
-**default_keytab_name**, allow parameters to be expanded.
-Valid parameters are:
-
- ================= ===================================================
- %{TEMP} Temporary directory
- %{uid} Unix real UID or Windows SID
- %{euid} Unix effective user ID or Windows SID
- %{USERID} Same as %{uid}
- %{null} Empty string
- %{LIBDIR} Installation library directory
- %{BINDIR} Installation binary directory
- %{SBINDIR} Installation admin binary directory
- %{username} (Unix) Username of effective user ID
- %{APPDATA} (Windows) Roaming application data for current user
- %{COMMON_APPDATA} (Windows) Application data for all users
- %{LOCAL_APPDATA} (Windows) Local application data for current user
- %{SYSTEM} (Windows) Windows system folder
- %{WINDOWS} (Windows) Windows folder
- %{USERCONFIG} (Windows) Per-user MIT krb5 config file directory
- %{COMMONCONFIG} (Windows) Common MIT krb5 config file directory
- ================= ===================================================
-
-Sample krb5.conf file
----------------------
-
-Here is an example of a generic krb5.conf file::
-
- [libdefaults]
- default_realm = ATHENA.MIT.EDU
- dns_lookup_kdc = true
- dns_lookup_realm = false
-
- [realms]
- ATHENA.MIT.EDU = {
- kdc = kerberos.mit.edu
- kdc = kerberos-1.mit.edu
- kdc = kerberos-2.mit.edu
- admin_server = kerberos.mit.edu
- primary_kdc = kerberos.mit.edu
- }
- EXAMPLE.COM = {
- kdc = kerberos.example.com
- kdc = kerberos-1.example.com
- admin_server = kerberos.example.com
- }
-
- [domain_realm]
- mit.edu = ATHENA.MIT.EDU
-
- [capaths]
- ATHENA.MIT.EDU = {
- EXAMPLE.COM = .
- }
- EXAMPLE.COM = {
- ATHENA.MIT.EDU = .
- }
-
-FILES
------
-
-|krb5conf|
-
-
-SEE ALSO
---------
-
-syslog(3)
+++ /dev/null
-.. _conf_ldap:
-
-Configuring Kerberos with OpenLDAP back-end
-===========================================
-
-
- 1. Make sure the LDAP server is using local authentication
- (``ldapi://``) or TLS (``ldaps``). See
- https://www.openldap.org/doc/admin/tls.html for instructions on
- configuring TLS support in OpenLDAP.
-
- 2. Add the Kerberos schema file to the LDAP Server using the OpenLDAP
- LDIF file from the krb5 source directory
- (``src/plugins/kdb/ldap/libkdb_ldap/kerberos.openldap.ldif``).
- The following example uses local authentication::
-
- ldapadd -Y EXTERNAL -H ldapi:/// -f /path/to/kerberos.openldap.ldif
-
- 3. Choose DNs for the :ref:`krb5kdc(8)` and :ref:`kadmind(8)` servers
- to bind to the LDAP server, and create them if necessary. Specify
- these DNs with the **ldap_kdc_dn** and **ldap_kadmind_dn**
- directives in :ref:`kdc.conf(5)`. The kadmind DN will also be
- used for administrative commands such as :ref:`kdb5_util(8)`.
-
- Alternatively, you may configure krb5kdc and kadmind to use SASL
- authentication to access the LDAP server; see the :ref:`dbmodules`
- relations **ldap_kdc_sasl_mech** and similar.
-
- 4. Specify a location for the LDAP service password file by setting
- **ldap_service_password_file**. Use ``kdb5_ldap_util stashsrvpw``
- to stash passwords for the KDC and kadmind DNs chosen above. For
- example::
-
- kdb5_ldap_util stashsrvpw -f /path/to/service.keyfile cn=krbadmin,dc=example,dc=com
-
- Skip this step if you are using SASL authentication and the
- mechanism does not require a password.
-
- 5. Choose a DN for the global Kerberos container entry (but do not
- create the entry at this time). Specify this DN with the
- **ldap_kerberos_container_dn** directive in :ref:`kdc.conf(5)`.
- Realm container entries will be created underneath this DN.
- Principal entries may exist either underneath the realm container
- (the default) or in separate trees referenced from the realm
- container.
-
- 6. Configure the LDAP server ACLs to enable the KDC and kadmin server
- DNs to read and write the Kerberos data. If
- **disable_last_success** and **disable_lockout** are both set to
- true in the :ref:`dbmodules` subsection for the realm, then the
- KDC DN only requires read access to the Kerberos data.
-
- Sample access control information::
-
- access to dn.base=""
- by * read
-
- access to dn.base="cn=Subschema"
- by * read
-
- # Provide access to the realm container.
- access to dn.subtree= "cn=EXAMPLE.COM,cn=krbcontainer,dc=example,dc=com"
- by dn.exact="cn=kdc-service,dc=example,dc=com" write
- by dn.exact="cn=adm-service,dc=example,dc=com" write
- by * none
-
- # Provide access to principals, if not underneath the realm container.
- access to dn.subtree= "ou=users,dc=example,dc=com"
- by dn.exact="cn=kdc-service,dc=example,dc=com" write
- by dn.exact="cn=adm-service,dc=example,dc=com" write
- by * none
-
- access to *
- by * read
-
- If the locations of the container and principals or the DNs of the
- service objects for a realm are changed then this information
- should be updated.
-
- 7. In :ref:`kdc.conf(5)`, make sure the following relations are set
- in the :ref:`dbmodules` subsection for the realm::
-
- db_library (set to ``kldap``)
- ldap_kerberos_container_dn
- ldap_kdc_dn
- ldap_kadmind_dn
- ldap_service_password_file
- ldap_servers
-
- 8. Create the realm using :ref:`kdb5_ldap_util(8)` (see
- :ref:`ldap_create_realm`)::
-
- kdb5_ldap_util create -subtrees ou=users,dc=example,dc=com -s
-
- Use the **-subtrees** option if the principals are to exist in a
- separate subtree from the realm container. Before executing the
- command, make sure that the subtree mentioned above
- ``(ou=users,dc=example,dc=com)`` exists. If the principals will
- exist underneath the realm container, omit the **-subtrees** option
- and do not worry about creating the principal subtree.
-
- For more information, refer to the section :ref:`ops_on_ldap`.
-
- The realm object is created under the
- **ldap_kerberos_container_dn** specified in the configuration
- file. This operation will also create the Kerberos container, if
- not present already. This container can be used to store
- information related to multiple realms.
-
- 9. Add an ``eq`` index for ``krbPrincipalName`` to speed up principal
- lookup operations. See
- https://www.openldap.org/doc/admin/tuning.html#Indexes for
- details.
-
-With the LDAP back end it is possible to provide aliases for principal
-entries. Currently we provide no administrative utilities for
-creating aliases, so it must be done by direct manipulation of the
-LDAP entries.
-
-An entry with aliases contains multiple values of the
-*krbPrincipalName* attribute. Since LDAP attribute values are not
-ordered, it is necessary to specify which principal name is canonical,
-by using the *krbCanonicalName* attribute. Therefore, to create
-aliases for an entry, first set the *krbCanonicalName* attribute of
-the entry to the canonical principal name (which should be identical
-to the pre-existing *krbPrincipalName* value), and then add additional
-*krbPrincipalName* attributes for the aliases.
-
-Principal aliases are only returned by the KDC when the client
-requests canonicalization. Canonicalization is normally requested for
-service principals; for client principals, an explicit flag is often
-required (e.g., ``kinit -C``) and canonicalization is only performed
-for initial ticket requests.
+++ /dev/null
-Database administration
-=======================
-
-A Kerberos database contains all of a realm's Kerberos principals,
-their passwords, and other administrative information about each
-principal. For the most part, you will use the :ref:`kdb5_util(8)`
-program to manipulate the Kerberos database as a whole, and the
-:ref:`kadmin(1)` program to make changes to the entries in the
-database. (One notable exception is that users will use the
-:ref:`kpasswd(1)` program to change their own passwords.) The kadmin
-program has its own command-line interface, to which you type the
-database administrating commands.
-
-:ref:`kdb5_util(8)` provides a means to create, delete, load, or dump
-a Kerberos database. It also contains commands to roll over the
-database master key, and to stash a copy of the key so that the
-:ref:`kadmind(8)` and :ref:`krb5kdc(8)` daemons can use the database
-without manual input.
-
-:ref:`kadmin(1)` provides for the maintenance of Kerberos principals,
-password policies, and service key tables (keytabs). Normally it
-operates as a network client using Kerberos authentication to
-communicate with :ref:`kadmind(8)`, but there is also a variant, named
-kadmin.local, which directly accesses the Kerberos database on the
-local filesystem (or through LDAP). kadmin.local is necessary to set
-up enough of the database to be able to use the remote version.
-
-kadmin can authenticate to the admin server using the service
-principal ``kadmin/admin`` or ``kadmin/HOST`` (where *HOST* is the
-hostname of the admin server). If the credentials cache contains a
-ticket for either service principal and the **-c** ccache option is
-specified, that ticket is used to authenticate to KADM5. Otherwise,
-the **-p** and **-k** options are used to specify the client Kerberos
-principal name used to authenticate. Once kadmin has determined the
-principal name, it requests a ``kadmin/admin`` Kerberos service ticket
-from the KDC, and uses that service ticket to authenticate to KADM5.
-
-See :ref:`kadmin(1)` for the available kadmin and kadmin.local
-commands and options.
-
-
-kadmin options
---------------
-
-You can invoke :ref:`kadmin(1)` or kadmin.local with any of the
-following options:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: kadmin_synopsis:
- :end-before: kadmin_synopsis_end:
-
-**OPTIONS**
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _kadmin_options:
- :end-before: _kadmin_options_end:
-
-
-Date Format
------------
-
-For the supported date-time formats see :ref:`getdate` section
-in :ref:`datetime`.
-
-
-Principals
-----------
-
-Each entry in the Kerberos database contains a Kerberos principal and
-the attributes and policies associated with that principal.
-
-
-.. _add_mod_del_princs:
-
-Adding, modifying and deleting principals
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To add a principal to the database, use the :ref:`kadmin(1)`
-**add_principal** command.
-
-To modify attributes of a principal, use the kadmin
-**modify_principal** command.
-
-To delete a principal, use the kadmin **delete_principal** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _add_principal:
- :end-before: _add_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _modify_principal:
- :end-before: _modify_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _delete_principal:
- :end-before: _delete_principal_end:
-
-
-Examples
-########
-
-If you want to create a principal which is contained by a LDAP object,
-all you need to do is::
-
- kadmin: addprinc -x dn=cn=jennifer,dc=example,dc=com jennifer
- No policy specified for "jennifer@ATHENA.MIT.EDU";
- defaulting to no policy.
- Enter password for principal jennifer@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal jennifer@ATHENA.MIT.EDU: <=Type it again.
- Principal "jennifer@ATHENA.MIT.EDU" created.
- kadmin:
-
-If you want to create a principal under a specific LDAP container and
-link to an existing LDAP object, all you need to do is::
-
- kadmin: addprinc -x containerdn=dc=example,dc=com -x linkdn=cn=david,dc=example,dc=com david
- No policy specified for "david@ATHENA.MIT.EDU";
- defaulting to no policy.
- Enter password for principal david@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal david@ATHENA.MIT.EDU: <=Type it again.
- Principal "david@ATHENA.MIT.EDU" created.
- kadmin:
-
-If you want to associate a ticket policy to a principal, all you need
-to do is::
-
- kadmin: modprinc -x tktpolicy=userpolicy david
- Principal "david@ATHENA.MIT.EDU" modified.
- kadmin:
-
-If, on the other hand, you want to set up an account that expires on
-January 1, 2000, that uses a policy called "stduser", with a temporary
-password (which you want the user to change immediately), you would
-type the following::
-
- kadmin: addprinc david -expire "1/1/2000 12:01am EST" -policy stduser +needchange
- Enter password for principal david@ATHENA.MIT.EDU: <= Type the password.
- Re-enter password for principal
- david@ATHENA.MIT.EDU: <= Type it again.
- Principal "david@ATHENA.MIT.EDU" created.
- kadmin:
-
-If you want to delete a principal::
-
- kadmin: delprinc jennifer
- Are you sure you want to delete the principal
- "jennifer@ATHENA.MIT.EDU"? (yes/no): yes
- Principal "jennifer@ATHENA.MIT.EDU" deleted.
- Make sure that you have removed this principal from
- all ACLs before reusing.
- kadmin:
-
-
-Retrieving information about a principal
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To retrieve a listing of the attributes and/or policies associated
-with a principal, use the :ref:`kadmin(1)` **get_principal** command.
-
-To generate a listing of principals, use the kadmin
-**list_principals** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _get_principal:
- :end-before: _get_principal_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _list_principals:
- :end-before: _list_principals_end:
-
-
-Changing passwords
-~~~~~~~~~~~~~~~~~~
-
-To change a principal's password use the :ref:`kadmin(1)`
-**change_password** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _change_password:
- :end-before: _change_password_end:
-
-.. note::
-
- Password changes through kadmin are subject to the same
- password policies as would apply to password changes through
- :ref:`kpasswd(1)`.
-
-
-.. _policies:
-
-Policies
---------
-
-A policy is a set of rules governing passwords. Policies can dictate
-minimum and maximum password lifetimes, minimum number of characters
-and character classes a password must contain, and the number of old
-passwords kept in the database.
-
-
-Adding, modifying and deleting policies
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To add a new policy, use the :ref:`kadmin(1)` **add_policy** command.
-
-To modify attributes of a principal, use the kadmin **modify_policy**
-command.
-
-To delete a policy, use the kadmin **delete_policy** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _add_policy:
- :end-before: _add_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _modify_policy:
- :end-before: _modify_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _delete_policy:
- :end-before: _delete_policy_end:
-
-.. note::
-
- You must cancel the policy from *all* principals before
- deleting it. The *delete_policy* command will fail if the policy
- is in use by any principals.
-
-
-Retrieving policies
-~~~~~~~~~~~~~~~~~~~
-
-To retrieve a policy, use the :ref:`kadmin(1)` **get_policy** command.
-
-You can retrieve the list of policies with the kadmin
-**list_policies** command.
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _get_policy:
- :end-before: _get_policy_end:
-
-.. include:: admin_commands/kadmin_local.rst
- :start-after: _list_policies:
- :end-before: _list_policies_end:
-
-
-Policies and principals
-~~~~~~~~~~~~~~~~~~~~~~~
-
-Policies can be applied to principals as they are created by using
-the **-policy** flag to :ref:`add_principal`. Existing principals can
-be modified by using the **-policy** or **-clearpolicy** flag to
-:ref:`modify_principal`.
-
-
-.. _updating_history_key:
-
-Updating the history key
-~~~~~~~~~~~~~~~~~~~~~~~~
-
-If a policy specifies a number of old keys kept of two or more, the
-stored old keys are encrypted in a history key, which is found in the
-key data of the ``kadmin/history`` principal.
-
-Currently there is no support for proper rollover of the history key,
-but you can change the history key (for example, to use a better
-encryption type) at the cost of invalidating currently stored old
-keys. To change the history key, run::
-
- kadmin: change_password -randkey kadmin/history
-
-This command will fail if you specify the **-keepold** flag. Only one
-new history key will be created, even if you specify multiple key/salt
-combinations.
-
-In the future, we plan to migrate towards encrypting old keys in the
-master key instead of the history key, and implementing proper
-rollover support for stored old keys.
-
-
-.. _privileges:
-
-Privileges
-----------
-
-Administrative privileges for the Kerberos database are stored in the
-file :ref:`kadm5.acl(5)`.
-
-.. note::
-
- A common use of an admin instance is so you can grant
- separate permissions (such as administrator access to the
- Kerberos database) to a separate Kerberos principal. For
- example, the user ``joeadmin`` might have a principal for
- his administrative use, called ``joeadmin/admin``. This
- way, ``joeadmin`` would obtain ``joeadmin/admin`` tickets
- only when he actually needs to use those permissions.
-
-
-.. _db_operations:
-
-Operations on the Kerberos database
------------------------------------
-
-The :ref:`kdb5_util(8)` command is the primary tool for administrating
-the Kerberos database.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_synopsis:
- :end-before: _kdb5_util_synopsis_end:
-
-**OPTIONS**
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_options:
- :end-before: _kdb5_util_options_end:
-
-.. toctree::
- :maxdepth: 1
-
-
-Dumping a Kerberos database to a file
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To dump a Kerberos database into a file, use the :ref:`kdb5_util(8)`
-**dump** command on one of the KDCs.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_dump:
- :end-before: _kdb5_util_dump_end:
-
-
-Examples
-########
-
-::
-
- shell% kdb5_util dump dumpfile
- shell%
-
- shell% kbd5_util dump -verbose dumpfile
- kadmin/admin@ATHENA.MIT.EDU
- krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
- kadmin/history@ATHENA.MIT.EDU
- K/M@ATHENA.MIT.EDU
- kadmin/changepw@ATHENA.MIT.EDU
- shell%
-
-If you specify which principals to dump, you must use the full
-principal, as in the following example::
-
- shell% kdb5_util dump -verbose dumpfile K/M@ATHENA.MIT.EDU kadmin/admin@ATHENA.MIT.EDU
- kadmin/admin@ATHENA.MIT.EDU
- K/M@ATHENA.MIT.EDU
- shell%
-
-Otherwise, the principals will not match those in the database and
-will not be dumped::
-
- shell% kdb5_util dump -verbose dumpfile K/M kadmin/admin
- shell%
-
-If you do not specify a dump file, kdb5_util will dump the database to
-the standard output.
-
-
-.. _restore_from_dump:
-
-Restoring a Kerberos database from a dump file
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To restore a Kerberos database dump from a file, use the
-:ref:`kdb5_util(8)` **load** command on one of the KDCs.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_load:
- :end-before: _kdb5_util_load_end:
-
-
-Examples
-########
-
-To dump a single principal and later load it, updating the database:
-
-::
-
- shell% kdb5_util dump dumpfile principal@REALM
- shell%
-
- shell% kdb5_util load -update dumpfile
- shell%
-
-
-.. note::
-
- If the database file exists, and the *-update* flag was not
- given, *kdb5_util* will overwrite the existing database.
-
-.. note::
-
- Using kdb5_util to dump and reload the principal database is
- only necessary when upgrading from versions of krb5 prior
- to 1.2.0---newer versions will use the existing database as-is.
-
-
-.. _create_stash:
-
-Creating a stash file
-~~~~~~~~~~~~~~~~~~~~~
-
-A stash file allows a KDC to authenticate itself to the database
-utilities, such as :ref:`kadmind(8)`, :ref:`krb5kdc(8)`, and
-:ref:`kdb5_util(8)`.
-
-To create a stash file, use the :ref:`kdb5_util(8)` **stash** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_stash:
- :end-before: _kdb5_util_stash_end:
-
-
-Example
-#######
-
- shell% kdb5_util stash
- kdb5_util: Cannot find/read stored master key while reading master key
- kdb5_util: Warning: proceeding without master key
- Enter KDC database master key: <= Type the KDC database master password.
- shell%
-
-If you do not specify a stash file, kdb5_util will stash the key in
-the file specified in your :ref:`kdc.conf(5)` file.
-
-
-Creating and destroying a Kerberos database
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to create a new Kerberos database, use the
-:ref:`kdb5_util(8)` **create** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_create:
- :end-before: _kdb5_util_create_end:
-
-If you need to destroy the current Kerberos database, use the
-:ref:`kdb5_util(8)` **destroy** command.
-
-.. include:: admin_commands/kdb5_util.rst
- :start-after: _kdb5_util_destroy:
- :end-before: _kdb5_util_destroy_end:
-
-
-Examples
-########
-
-::
-
- shell% kdb5_util -r ATHENA.MIT.EDU create -s
- Loading random data
- Initializing database '/usr/local/var/krb5kdc/principal' for realm 'ATHENA.MIT.EDU',
- master key name 'K/M@ATHENA.MIT.EDU'
- You will be prompted for the database Master Password.
- It is important that you NOT FORGET this password.
- Enter KDC database master key: <= Type the master password.
- Re-enter KDC database master key to verify: <= Type it again.
- shell%
-
- shell% kdb5_util -r ATHENA.MIT.EDU destroy
- Deleting KDC database stored in '/usr/local/var/krb5kdc/principal', are you sure?
- (type 'yes' to confirm)? <= yes
- OK, deleting database '/usr/local/var/krb5kdc/principal'...
- ** Database '/usr/local/var/krb5kdc/principal' destroyed.
- shell%
-
-
-.. _updating_master_key:
-
-Updating the master key
-~~~~~~~~~~~~~~~~~~~~~~~
-
-Starting with release 1.7, :ref:`kdb5_util(8)` allows the master key
-to be changed using a rollover process, with minimal loss of
-availability. To roll over the master key, follow these steps:
-
-#. On the primary KDC, run ``kdb5_util list_mkeys`` to view the
- current master key version number (KVNO). If you have never rolled
- over the master key before, this will likely be version 1::
-
- $ kdb5_util list_mkeys
- Master keys for Principal: K/M@KRBTEST.COM
- KVNO: 1, Enctype: aes256-cts-hmac-sha384-192, Active on: Thu Jan 01 00:00:00 UTC 1970 *
-
-#. On the primary KDC, run ``kdb5_util use_mkey 1`` to ensure that a
- master key activation list is present in the database. This step
- is unnecessary in release 1.11.4 or later, or if the database was
- initially created with release 1.7 or later.
-
-#. On the primary KDC, run ``kdb5_util add_mkey -s`` to create a new
- master key and write it to the stash file. Enter a secure password
- when prompted. If this is the first time you are changing the
- master key, the new key will have version 2. The new master key
- will not be used until you make it active.
-
-#. Propagate the database to all replica KDCs, either manually or by
- waiting until the next scheduled propagation. If you do not have
- any replica KDCs, you can skip this and the next step.
-
-#. On each replica KDC, run ``kdb5_util list_mkeys`` to verify that
- the new master key is present, and then ``kdb5_util stash`` to
- write the new master key to the replica KDC's stash file.
-
-#. On the primary KDC, run ``kdb5_util use_mkey 2`` to begin using the
- new master key. Replace ``2`` with the version of the new master
- key, as appropriate. You can optionally specify a date for the new
- master key to become active; by default, it will become active
- immediately. Prior to release 1.12, :ref:`kadmind(8)` must be
- restarted for this change to take full effect.
-
-#. On the primary KDC, run ``kdb5_util update_princ_encryption``.
- This command will iterate over the database and re-encrypt all keys
- in the new master key. If the database is large and uses DB2, the
- primary KDC will become unavailable while this command runs, but
- clients should fail over to replica KDCs (if any are present)
- during this time period. In release 1.13 and later, you can
- instead run ``kdb5_util -x unlockiter update_princ_encryption`` to
- use unlocked iteration; this variant will take longer, but will
- keep the database available to the KDC and kadmind while it runs.
-
-#. Wait until the above changes have propagated to all replica KDCs
- and until all running KDC and kadmind processes have serviced
- requests using updated principal entries.
-
-#. On the primary KDC, run ``kdb5_util purge_mkeys`` to clean up the
- old master key.
-
-
-.. _ops_on_ldap:
-
-Operations on the LDAP database
--------------------------------
-
-The :ref:`kdb5_ldap_util(8)` is the primary tool for administrating
-the Kerberos LDAP database. It allows an administrator to manage
-realms, Kerberos services (KDC and Admin Server) and ticket policies.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_synopsis:
- :end-before: _kdb5_ldap_util_synopsis_end:
-
-**OPTIONS**
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_options:
- :end-before: _kdb5_ldap_util_options_end:
-
-
-.. _ldap_create_realm:
-
-Creating a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to create a new realm, use the :ref:`kdb5_ldap_util(8)`
-**create** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_create:
- :end-before: _kdb5_ldap_util_create_end:
-
-
-.. _ldap_mod_realm:
-
-Modifying a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to modify a realm, use the :ref:`kdb5_ldap_util(8)`
-**modify** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_modify:
- :end-before: _kdb5_ldap_util_modify_end:
-
-
-Destroying a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to destroy a Kerberos realm, use the
-:ref:`kdb5_ldap_util(8)` **destroy** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_destroy:
- :end-before: _kdb5_ldap_util_destroy_end:
-
-
-Retrieving information about a Kerberos realm
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to display the attributes of a realm, use the
-:ref:`kdb5_ldap_util(8)` **view** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_view:
- :end-before: _kdb5_ldap_util_view_end:
-
-
-Listing available Kerberos realms
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you need to display the list of the realms, use the
-:ref:`kdb5_ldap_util(8)` **list** command as follows.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_list:
- :end-before: _kdb5_ldap_util_list_end:
-
-
-.. _stash_ldap:
-
-Stashing service object's password
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-The :ref:`kdb5_ldap_util(8)` **stashsrvpw** command allows an
-administrator to store the password of service object in a file. The
-KDC and Administration server uses this password to authenticate to
-the LDAP server.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_stashsrvpw:
- :end-before: _kdb5_ldap_util_stashsrvpw_end:
-
-
-Ticket Policy operations
-~~~~~~~~~~~~~~~~~~~~~~~~
-
-Creating a Ticket Policy
-########################
-
-To create a new ticket policy in directory , use the
-:ref:`kdb5_ldap_util(8)` **create_policy** command. Ticket policy
-objects are created under the realm container.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_create_policy:
- :end-before: _kdb5_ldap_util_create_policy_end:
-
-
-Modifying a Ticket Policy
-#########################
-
-To modify a ticket policy in directory, use the
-:ref:`kdb5_ldap_util(8)` **modify_policy** command.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_modify_policy:
- :end-before: _kdb5_ldap_util_modify_policy_end:
-
-
-Retrieving Information About a Ticket Policy
-############################################
-
-To display the attributes of a ticket policy, use the
-:ref:`kdb5_ldap_util(8)` **view_policy** command.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_view_policy:
- :end-before: _kdb5_ldap_util_view_policy_end:
-
-
-Destroying a Ticket Policy
-##########################
-
-To destroy an existing ticket policy, use the :ref:`kdb5_ldap_util(8)`
-**destroy_policy** command.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_destroy_policy:
- :end-before: _kdb5_ldap_util_destroy_policy_end:
-
-
-Listing available Ticket Policies
-#################################
-
-To list the name of ticket policies in a realm, use the
-:ref:`kdb5_ldap_util(8)` **list_policy** command.
-
-.. include:: admin_commands/kdb5_ldap_util.rst
- :start-after: _kdb5_ldap_util_list_policy:
- :end-before: _kdb5_ldap_util_list_policy_end:
-
-
-.. _xrealm_authn:
-
-Cross-realm authentication
---------------------------
-
-In order for a KDC in one realm to authenticate Kerberos users in a
-different realm, it must share a key with the KDC in the other realm.
-In both databases, there must be krbtgt service principals for both realms.
-For example, if you need to do cross-realm authentication between the realms
-``ATHENA.MIT.EDU`` and ``EXAMPLE.COM``, you would need to add the
-principals ``krbtgt/EXAMPLE.COM@ATHENA.MIT.EDU`` and
-``krbtgt/ATHENA.MIT.EDU@EXAMPLE.COM`` to both databases.
-These principals must all have the same passwords, key version
-numbers, and encryption types; this may require explicitly setting
-the key version number with the **-kvno** option.
-
-In the ATHENA.MIT.EDU and EXAMPLE.COM cross-realm case, the administrators
-would run the following commands on the KDCs in both realms::
-
- shell%: kadmin.local -e "aes256-cts:normal"
- kadmin: addprinc -requires_preauth krbtgt/ATHENA.MIT.EDU@EXAMPLE.COM
- Enter password for principal krbtgt/ATHENA.MIT.EDU@EXAMPLE.COM:
- Re-enter password for principal krbtgt/ATHENA.MIT.EDU@EXAMPLE.COM:
- kadmin: addprinc -requires_preauth krbtgt/EXAMPLE.COM@ATHENA.MIT.EDU
- Enter password for principal krbtgt/EXAMPLE.COM@ATHENA.MIT.EDU:
- Enter password for principal krbtgt/EXAMPLE.COM@ATHENA.MIT.EDU:
- kadmin:
-
-.. note::
-
- Even if most principals in a realm are generally created
- with the **requires_preauth** flag enabled, this flag is not
- desirable on cross-realm authentication keys because doing
- so makes it impossible to disable preauthentication on a
- service-by-service basis. Disabling it as in the example
- above is recommended.
-
-.. note::
-
- It is very important that these principals have good
- passwords. MIT recommends that TGT principal passwords be
- at least 26 characters of random ASCII text.
-
-
-.. _changing_krbtgt_key:
-
-Changing the krbtgt key
------------------------
-
-A Kerberos Ticket Granting Ticket (TGT) is a service ticket for the
-principal ``krbtgt/REALM``. The key for this principal is created
-when the Kerberos database is initialized and need not be changed.
-However, it will only have the encryption types supported by the KDC
-at the time of the initial database creation. To allow use of newer
-encryption types for the TGT, this key has to be changed.
-
-Changing this key using the normal :ref:`kadmin(1)`
-**change_password** command would invalidate any previously issued
-TGTs. Therefore, when changing this key, normally one should use the
-**-keepold** flag to change_password to retain the previous key in the
-database as well as the new key. For example::
-
- kadmin: change_password -randkey -keepold krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
-
-.. warning::
-
- After issuing this command, the old key is still valid
- and is still vulnerable to (for instance) brute force
- attacks. To completely retire an old key or encryption
- type, run the kadmin **purgekeys** command to delete keys
- with older kvnos, ideally first making sure that all
- tickets issued with the old keys have expired.
-
-Only the first krbtgt key of the newest key version is used to encrypt
-ticket-granting tickets. However, the set of encryption types present
-in the krbtgt keys is used by default to determine the session key
-types supported by the krbtgt service (see
-:ref:`session_key_selection`). Because non-MIT Kerberos clients
-sometimes send a limited set of encryption types when making AS
-requests, it can be important for the krbtgt service to support
-multiple encryption types. This can be accomplished by giving the
-krbtgt principal multiple keys, which is usually as simple as not
-specifying any **-e** option when changing the krbtgt key, or by
-setting the **session_enctypes** string attribute on the krbtgt
-principal (see :ref:`set_string`).
-
-Due to a bug in releases 1.8 through 1.13, renewed and forwarded
-tickets may not work if the original ticket was obtained prior to a
-krbtgt key change and the modified ticket is obtained afterwards.
-Upgrading the KDC to release 1.14 or later will correct this bug.
-
-
-.. _incr_db_prop:
-
-Incremental database propagation
---------------------------------
-
-Overview
-~~~~~~~~
-
-At some very large sites, dumping and transmitting the database can
-take more time than is desirable for changes to propagate from the
-primary KDC to the replica KDCs. The incremental propagation support
-added in the 1.7 release is intended to address this.
-
-With incremental propagation enabled, all programs on the primary KDC
-that change the database also write information about the changes to
-an "update log" file, maintained as a circular buffer of a certain
-size. A process on each replica KDC connects to a service on the
-primary KDC (currently implemented in the :ref:`kadmind(8)` server) and
-periodically requests the changes that have been made since the last
-check. By default, this check is done every two minutes.
-
-Incremental propagation uses the following entries in the per-realm
-data in the KDC config file (See :ref:`kdc.conf(5)`):
-
-====================== =============== ===========================================
-iprop_enable *boolean* If *true*, then incremental propagation is enabled, and (as noted below) normal kprop propagation is disabled. The default is *false*.
-iprop_master_ulogsize *integer* Indicates the number of entries that should be retained in the update log. The default is 1000; the maximum number is 2500.
-iprop_replica_poll *time interval* Indicates how often the replica should poll the primary KDC for changes to the database. The default is two minutes.
-iprop_port *integer* Specifies the port number to be used for incremental propagation. This is required in both primary and replica configuration files.
-iprop_resync_timeout *integer* Specifies the number of seconds to wait for a full propagation to complete. This is optional on replica configurations. Defaults to 300 seconds (5 minutes).
-iprop_logfile *file name* Specifies where the update log file for the realm database is to be stored. The default is to use the *database_name* entry from the realms section of the config file :ref:`kdc.conf(5)`, with *.ulog* appended. (NOTE: If database_name isn't specified in the realms section, perhaps because the LDAP database back end is being used, or the file name is specified in the *dbmodules* section, then the hard-coded default for *database_name* is used. Determination of the *iprop_logfile* default value will not use values from the *dbmodules* section.)
-====================== =============== ===========================================
-
-Both primary and replica sides must have a principal named
-``kiprop/hostname`` (where *hostname* is the lowercase,
-fully-qualified, canonical name for the host) registered in the
-Kerberos database, and have keys for that principal stored in the
-default keytab file (|keytab|). The ``kiprop/hostname`` principal may
-have been created automatically for the primary KDC, but it must
-always be created for replica KDCs.
-
-On the primary KDC side, the ``kiprop/hostname`` principal must be
-listed in the kadmind ACL file :ref:`kadm5.acl(5)`, and given the
-**p** privilege (see :ref:`privileges`).
-
-On the replica KDC side, :ref:`kpropd(8)` should be run. When
-incremental propagation is enabled, it will connect to the kadmind on
-the primary KDC and start requesting updates.
-
-The normal kprop mechanism is disabled by the incremental propagation
-support. However, if the replica has been unable to fetch changes
-from the primary KDC for too long (network problems, perhaps), the log
-on the primary may wrap around and overwrite some of the updates that
-the replica has not yet retrieved. In this case, the replica will
-instruct the primary KDC to dump the current database out to a file
-and invoke a one-time kprop propagation, with special options to also
-convey the point in the update log at which the replica should resume
-fetching incremental updates. Thus, all the keytab and ACL setup
-previously described for kprop propagation is still needed.
-
-If an environment has a large number of replicas, it may be desirable
-to arrange them in a hierarchy instead of having the primary serve
-updates to every replica. To do this, run ``kadmind -proponly`` on
-each intermediate replica, and ``kpropd -A upstreamhostname`` on
-downstream replicas to direct each one to the appropriate upstream
-replica.
-
-There are several known restrictions in the current implementation:
-
-- The incremental update protocol does not transport changes to policy
- objects. Any policy changes on the primary will result in full
- resyncs to all replicas.
-- The replica's KDB module must support locking; it cannot be using the
- LDAP KDB module.
-- The primary and replica must be able to initiate TCP connections in
- both directions, without an intervening NAT.
-
-
-Sun/MIT incremental propagation differences
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-Sun donated the original code for supporting incremental database
-propagation to MIT. Some changes have been made in the MIT source
-tree that will be visible to administrators. (These notes are based
-on Sun's patches. Changes to Sun's implementation since then may not
-be reflected here.)
-
-The Sun config file support looks for ``sunw_dbprop_enable``,
-``sunw_dbprop_master_ulogsize``, and ``sunw_dbprop_slave_poll``.
-
-The incremental propagation service is implemented as an ONC RPC
-service. In the Sun implementation, the service is registered with
-rpcbind (also known as portmapper) and the client looks up the port
-number to contact. In the MIT implementation, where interaction with
-some modern versions of rpcbind doesn't always work well, the port
-number must be specified in the config file on both the primary and
-replica sides.
-
-The Sun implementation hard-codes pathnames in ``/var/krb5`` for the
-update log and the per-replica kprop dump files. In the MIT
-implementation, the pathname for the update log is specified in the
-config file, and the per-replica dump files are stored in
-|kdcdir|\ ``/replica_datatrans_hostname``.
+++ /dev/null
-Database types
-==============
-
-A Kerberos database can be implemented with one of three built-in
-database providers, called KDB modules. Software which incorporates
-the MIT krb5 KDC may also provide its own KDB module. The following
-subsections describe the three built-in KDB modules and the
-configuration specific to them.
-
-The database type can be configured with the **db_library** variable
-in the :ref:`dbmodules` subsection for the realm. For example::
-
- [dbmodules]
- ATHENA.MIT.EDU = {
- db_library = db2
- }
-
-If the ``ATHENA.MIT.EDU`` realm subsection contains a
-**database_module** setting, then the subsection within
-``[dbmodules]`` should use that name instead of ``ATHENA.MIT.EDU``.
-
-To transition from one database type to another, stop the
-:ref:`kadmind(8)` service, use ``kdb5_util dump`` to create a dump
-file, change the **db_library** value and set any appropriate
-configuration for the new database type, and use ``kdb5_util load`` to
-create and populate the new database. If the new database type is
-LDAP, create the new database using ``kdb5_ldap_util`` and populate it
-from the dump file using ``kdb5_util load -update``. Then restart the
-:ref:`krb5kdc(8)` and :ref:`kadmind(8)` services.
-
-
-Berkeley database module (db2)
-------------------------------
-
-The default KDB module is ``db2``, which uses a version of the
-Berkeley DB library. It creates four files based on the database
-pathname. If the pathname ends with ``principal`` then the four files
-are:
-
-* ``principal``, containing principal entry data
-* ``principal.ok``, a lock file for the principal database
-* ``principal.kadm5``, containing policy object data
-* ``principal.kadm5.lock``, a lock file for the policy database
-
-For large databases, the :ref:`kdb5_util(8)` **dump** command (perhaps
-invoked by :ref:`kprop(8)` or by :ref:`kadmind(8)` for incremental
-propagation) may cause :ref:`krb5kdc(8)` to stop for a noticeable
-period of time while it iterates over the database. This delay can be
-avoided by disabling account lockout features so that the KDC does not
-perform database writes (see :ref:`disable_lockout`). Alternatively,
-a slower form of iteration can be enabled by setting the
-**unlockiter** variable to ``true``. For example::
-
- [dbmodules]
- ATHENA.MIT.EDU = {
- db_library = db2
- unlockiter = true
- }
-
-In rare cases, a power failure or other unclean system shutdown may
-cause inconsistencies in the internal pointers within a database file,
-such that ``kdb5_util dump`` cannot retrieve all principal entries in
-the database. In this situation, it may be possible to retrieve all
-of the principal data by running ``kdb5_util dump -recurse`` to
-iterate over the database using the tree pointers instead of the
-iteration pointers. Running ``kdb5_util dump -rev`` to iterate over
-the database backwards may also retrieve some of the data which is not
-retrieved by a normal dump operation.
-
-
-Lightning Memory-Mapped Database module (klmdb)
------------------------------------------------
-
-The klmdb module was added in release 1.17. It uses the LMDB library,
-and may offer better performance and reliability than the db2 module.
-It creates four files based on the database pathname. If the pathname
-ends with ``principal``, then the four files are:
-
-* ``principal.mdb``, containing policy object data and most principal
- entry data
-* ``principal.mdb-lock``, a lock file for the primary database
-* ``principal.lockout.mdb``, containing the account lockout attributes
- (last successful authentication time, last failed authentication
- time, and number of failed attempts) for each principal entry
-* ``principal.lockout.mdb-lock``, a lock file for the lockout database
-
-Separating out the lockout attributes ensures that the KDC will never
-block on an administrative operation such as a database dump or load.
-It also allows the KDC to operate without write access to the primary
-database. If both account lockout features are disabled (see
-:ref:`disable_lockout`), the lockout database files will be created
-but will not subsequently be opened, and the account lockout
-attributes will always have zero values.
-
-Because LMDB creates a memory map to the database files, it requires a
-configured memory map size which also determines the maximum size of
-the database. This size is applied equally to the two databases, so
-twice the configured size will be consumed in the process address
-space; this is primarily a limitation on 32-bit platforms. The
-default value of 128 megabytes should be sufficient for several
-hundred thousand principal entries. If the limit is reached, kadmin
-operations will fail and the error message "Environment mapsize limit
-reached" will appear in the kadmind log file. In this case, the
-**mapsize** variable can be used to increase the map size. The
-following example sets the map size to 512 megabytes::
-
- [dbmodules]
- ATHENA.MIT.EDU = {
- db_library = klmdb
- mapsize = 512
- }
-
-LMDB has a configurable maximum number of readers. The default value
-of 128 should be sufficient for most deployments. If you are going to
-use a large number of KDC worker processes, it may be necessary to set
-the **max_readers** variable to a larger number.
-
-By default, LMDB synchronizes database files to disk after each write
-transaction to ensure durability in the case of an unclean system
-shutdown. The klmdb module always turns synchronization off for the
-lockout database to ensure reasonable KDC performance, but leaves it
-on for the primary database. If high throughput for administrative
-operations (including password changes) is required, the **nosync**
-variable can be set to "true" to disable synchronization for the
-primary database.
-
-The klmdb module does not support explicit locking with the
-:ref:`kadmin(1)` **lock** command.
-
-
-LDAP module (kldap)
--------------------
-
-The kldap module stores principal and policy data using an LDAP
-server. To use it you must configure an LDAP server to use the
-Kerberos schema. See :ref:`conf_ldap` for details.
-
-Because :ref:`krb5kdc(8)` is single-threaded, latency in LDAP database
-accesses may limit KDC operation throughput. If the LDAP server is
-located on the same server host as the KDC and accessed through an
-``ldapi://`` URL, latency should be minimal. If this is not possible,
-consider starting multiple KDC worker processes with the
-:ref:`krb5kdc(8)` **-w** option to enable concurrent processing of KDC
-requests.
-
-The kldap module does not support explicit locking with the
-:ref:`kadmin(1)` **lock** command.
+++ /dev/null
-.. _dictionary:
-
-Addressing dictionary attack risks
-==================================
-
-Kerberos initial authentication is normally secured using the client
-principal's long-term key, which for users is generally derived from a
-password. Using a pasword-derived long-term key carries the risk of a
-dictionary attack, where an attacker tries a sequence of possible
-passwords, possibly requiring much less effort than would be required
-to try all possible values of the key. Even if :ref:`password policy
-objects <policies>` are used to force users not to pick trivial
-passwords, dictionary attacks can sometimes be successful against a
-significant fraction of the users in a realm. Dictionary attacks are
-not a concern for principals using random keys.
-
-A dictionary attack may be online or offline. An online dictionary
-attack is performed by trying each password in a separate request to
-the KDC, and is therefore visible to the KDC and also limited in speed
-by the KDC's processing power and the network capacity between the
-client and the KDC. Online dictionary attacks can be mitigated using
-:ref:`account lockout <lockout>`. This measure is not totally
-satisfactory, as it makes it easy for an attacker to deny access to a
-client principal.
-
-An offline dictionary attack is performed by obtaining a ciphertext
-generated using the password-derived key, and trying each password
-against the ciphertext. This category of attack is invisible to the
-KDC and can be performed much faster than an online attack. The
-attack will generally take much longer with more recent encryption
-types (particularly the ones based on AES), because those encryption
-types use a much more expensive string-to-key function. However, the
-best defense is to deny the attacker access to a useful ciphertext.
-The required defensive measures depend on the attacker's level of
-network access.
-
-An off-path attacker has no access to packets sent between legitimate
-users and the KDC. An off-path attacker could gain access to an
-attackable ciphertext either by making an AS request for a client
-principal which does not have the **+requires_preauth** flag, or by
-making a TGS request (after authenticating as a different user) for a
-server principal which does not have the **-allow_svr** flag. To
-address off-path attackers, a KDC administrator should set those flags
-on principals with password-derived keys::
-
- kadmin: add_principal +requires_preauth -allow_svr princname
-
-An attacker with passive network access (one who can monitor packets
-sent between legitimate users and the KDC, but cannot change them or
-insert their own packets) can gain access to an attackable ciphertext
-by observing an authentication by a user using the most common form of
-preauthentication, encrypted timestamp. Any of the following methods
-can prevent dictionary attacks by attackers with passive network
-access:
-
-* Enabling :ref:`SPAKE preauthentication <spake>` (added in release
- 1.17) on the KDC, and ensuring that all clients are able to support
- it.
-
-* Using an :ref:`HTTPS proxy <https>` for communication with the KDC,
- if the attacker cannot monitor communication between the proxy
- server and the KDC.
-
-* Using FAST, protecting the initial authentication with either a
- random key (such as a host key) or with :ref:`anonymous PKINIT
- <anonymous_pkinit>`.
-
-An attacker with active network access (one who can inject or modify
-packets sent between legitimate users and the KDC) can try to fool the
-client software into sending an attackable ciphertext using an
-encryption type and salt string of the attacker's choosing. Any of the
-following methods can prevent dictionary attacks by active attackers:
-
-* Enabling SPAKE preauthentication and setting the
- **disable_encrypted_timestamp** variable to ``true`` in the
- :ref:`realms` subsection of the client configuration.
-
-* Using an HTTPS proxy as described above, configured in the client's
- krb5.conf realm configuration. If :ref:`KDC discovery
- <kdc_discovery>` is used to locate a proxy server, an active
- attacker may be able to use DNS spoofing to cause the client to use
- a different HTTPS server or to not use HTTPS.
-
-* Using FAST as described above.
-
-If :ref:`PKINIT <pkinit>` or :ref:`OTP <otp_preauth>` are used for
-initial authentication, the principal's long-term keys are not used
-and dictionary attacks are usually not a concern.
+++ /dev/null
-.. _enctypes:
-
-Encryption types
-================
-
-Kerberos can use a variety of cipher algorithms to protect data. A
-Kerberos **encryption type** (also known as an **enctype**) is a
-specific combination of a cipher algorithm with an integrity algorithm
-to provide both confidentiality and integrity to data.
-
-
-Enctypes in requests
---------------------
-
-Clients make two types of requests (KDC-REQ) to the KDC: AS-REQs and
-TGS-REQs. The client uses the AS-REQ to obtain initial tickets
-(typically a Ticket-Granting Ticket (TGT)), and uses the TGS-REQ to
-obtain service tickets.
-
-The KDC uses three different keys when issuing a ticket to a client:
-
-* The long-term key of the service: the KDC uses this to encrypt the
- actual service ticket. The KDC only uses the first long-term key in
- the most recent kvno for this purpose.
-
-* The session key: the KDC randomly chooses this key and places one
- copy inside the ticket and the other copy inside the encrypted part
- of the reply.
-
-* The reply-encrypting key: the KDC uses this to encrypt the reply it
- sends to the client. For AS replies, this is a long-term key of the
- client principal. For TGS replies, this is either the session key of the
- authenticating ticket, or a subsession key.
-
-Each of these keys is of a specific enctype.
-
-Each request type allows the client to submit a list of enctypes that
-it is willing to accept. For the AS-REQ, this list affects both the
-session key selection and the reply-encrypting key selection. For the
-TGS-REQ, this list only affects the session key selection.
-
-
-.. _session_key_selection:
-
-Session key selection
----------------------
-
-The KDC chooses the session key enctype by taking the intersection of
-its **permitted_enctypes** list, the list of long-term keys for the
-most recent kvno of the service, and the client's requested list of
-enctypes.
-
-Starting in krb5-1.11, it is possible to set a string attribute on a
-service principal to control what session key enctypes the KDC may
-issue for service tickets for that principal. See :ref:`set_string`
-in :ref:`kadmin(1)` for details.
-
-
-Choosing enctypes for a service
--------------------------------
-
-Generally, a service should have a key of the strongest
-enctype that both it and the KDC support. If the KDC is running a
-release earlier than krb5-1.11, it is also useful to generate an
-additional key for each enctype that the service can support. The KDC
-will only use the first key in the list of long-term keys for encrypting
-the service ticket, but the additional long-term keys indicate the
-other enctypes that the service supports.
-
-As noted above, starting with release krb5-1.11, there are additional
-configuration settings that control session key enctype selection
-independently of the set of long-term keys that the KDC has stored for
-a service principal.
-
-
-Configuration variables
------------------------
-
-The following ``[libdefaults]`` settings in :ref:`krb5.conf(5)` will
-affect how enctypes are chosen.
-
-**allow_weak_crypto**
- defaults to *false* starting with krb5-1.8. When *false*, removes
- weak enctypes from **permitted_enctypes**,
- **default_tkt_enctypes**, and **default_tgs_enctypes**. Do not
- set this to *true* unless the use of weak enctypes is an
- acceptable risk for your environment and the weak enctypes are
- required for backward compatibility.
-
-**permitted_enctypes**
- controls the set of enctypes that a service will permit for
- session keys and for ticket and authenticator encryption. The KDC
- and other programs that access the Kerberos database will ignore
- keys of non-permitted enctypes. Starting in release 1.18, this
- setting also acts as the default for **default_tkt_enctypes** and
- **default_tgs_enctypes**.
-
-**default_tkt_enctypes**
- controls the default set of enctypes that the Kerberos client
- library requests when making an AS-REQ. Do not set this unless
- required for specific backward compatibility purposes; stale
- values of this setting can prevent clients from taking advantage
- of new stronger enctypes when the libraries are upgraded.
-
-**default_tgs_enctypes**
- controls the default set of enctypes that the Kerberos client
- library requests when making a TGS-REQ. Do not set this unless
- required for specific backward compatibility purposes; stale
- values of this setting can prevent clients from taking advantage
- of new stronger enctypes when the libraries are upgraded.
-
-The following per-realm setting in :ref:`kdc.conf(5)` affects the
-generation of long-term keys.
-
-**supported_enctypes**
- controls the default set of enctype-salttype pairs that :ref:`kadmind(8)`
- will use for generating long-term keys, either randomly or from
- passwords
-
-
-Enctype compatibility
----------------------
-
-See :ref:`Encryption_types` for additional information about enctypes.
-
-========================== ========== ======== =======
-enctype weak? krb5 Windows
-========================== ========== ======== =======
-des-cbc-crc weak <1.18 >=2000
-des-cbc-md4 weak <1.18 ?
-des-cbc-md5 weak <1.18 >=2000
-des3-cbc-sha1 deprecated >=1.1 none
-arcfour-hmac deprecated >=1.3 >=2000
-arcfour-hmac-exp weak >=1.3 >=2000
-aes128-cts-hmac-sha1-96 >=1.3 >=Vista
-aes256-cts-hmac-sha1-96 >=1.3 >=Vista
-aes128-cts-hmac-sha256-128 >=1.15 none
-aes256-cts-hmac-sha384-192 >=1.15 none
-camellia128-cts-cmac >=1.9 none
-camellia256-cts-cmac >=1.9 none
-========================== ========== ======== =======
-
-krb5 releases 1.18 and later do not support single-DES. krb5 releases
-1.8 and later disable the single-DES enctypes by default. Microsoft
-Windows releases Windows 7 and later disable single-DES enctypes by
-default.
-
-krb5 releases 1.17 and later flag deprecated encryption types
-(including ``des3-cbc-sha1`` and ``arcfour-hmac``) in KDC logs and
-kadmin output. krb5 release 1.19 issues a warning during initial
-authentication if ``des3-cbc-sha1`` is used. Future releases will
-disable ``des3-cbc-sha1`` by default and eventually remove support for
-it.
-
-
-Migrating away from older encryption types
-------------------------------------------
-
-Administrator intervention may be required to migrate a realm away
-from legacy encryption types, especially if the realm was created
-using krb5 release 1.2 or earlier. This migration should be performed
-before upgrading to krb5 versions which disable or remove support for
-legacy encryption types.
-
-If there is a **supported_enctypes** setting in :ref:`kdc.conf(5)` on
-the KDC, make sure that it does not include weak or deprecated
-encryption types. This will ensure that newly created keys do not use
-those encryption types by default.
-
-Check the ``krbtgt/REALM`` principal using the :ref:`kadmin(1)`
-**getprinc** command. If it lists a weak or deprecated encryption
-type as the first key, it must be migrated using the procedure in
-:ref:`changing_krbtgt_key`.
-
-Check the ``kadmin/history`` principal, which should have only one key
-entry. If it uses a weak or deprecated encryption type, it should be
-upgraded following the notes in :ref:`updating_history_key`.
-
-Check the other kadmin principals: kadmin/changepw, kadmin/admin, and
-any kadmin/hostname principals that may exist. These principals can
-be upgraded with **change_password -randkey** in kadmin.
-
-Check the ``K/M`` entry. If it uses a weak or deprecated encryption
-type, it should be upgraded following the procedure in
-:ref:`updating_master_key`.
-
-User and service principals using legacy encryption types can be
-enumerated with the :ref:`kdb5_util(8)` **tabdump keyinfo** command.
-
-Service principals can be migrated with a keytab rotation on the
-service host, which can be accomplished using the :ref:`k5srvutil(1)`
-**change** and **delold** commands. Allow enough time for existing
-tickets to expire between the change and delold operations.
-
-User principals with password-based keys can be migrated with a
-password change. The realm administrator can set a password
-expiration date using the :ref:`kadmin(1)` **modify_principal
--pwexpire** command to force a password change.
-
-If a legacy encryption type has not yet been disabled by default in
-the version of krb5 running on the KDC, it can be disabled
-administratively with the **permitted_enctypes** variable. For
-example, setting **permitted_enctypes** to ``DEFAULT -des3 -rc4`` will
-cause any database keys of the triple-DES and RC4 encryption types to
-be ignored.
+++ /dev/null
-Environment variables
-=====================
-
-This content has moved to :ref:`kerberos(7)`.
+++ /dev/null
-Host configuration
-==================
-
-All hosts running Kerberos software, whether they are clients,
-application servers, or KDCs, can be configured using
-:ref:`krb5.conf(5)`. Here we describe some of the behavior changes
-you might want to make.
-
-
-Default realm
--------------
-
-In the :ref:`libdefaults` section, the **default_realm** realm
-relation sets the default Kerberos realm. For example::
-
- [libdefaults]
- default_realm = ATHENA.MIT.EDU
-
-The default realm affects Kerberos behavior in the following ways:
-
-* When a principal name is parsed from text, the default realm is used
- if no ``@REALM`` component is specified.
-
-* The default realm affects login authorization as described below.
-
-* For programs which operate on a Kerberos database, the default realm
- is used to determine which database to operate on, unless the **-r**
- parameter is given to specify a realm.
-
-* A server program may use the default realm when looking up its key
- in a :ref:`keytab file <keytab_file>`, if its realm is not
- determined by :ref:`domain_realm` configuration or by the server
- program itself.
-
-* If :ref:`kinit(1)` is passed the **-n** flag, it requests anonymous
- tickets from the default realm.
-
-In some situations, these uses of the default realm might conflict.
-For example, it might be desirable for principal name parsing to use
-one realm by default, but for login authorization to use a second
-realm. In this situation, the first realm can be configured as the
-default realm, and **auth_to_local** relations can be used as
-described below to use the second realm for login authorization.
-
-
-.. _login_authorization:
-
-Login authorization
--------------------
-
-If a host runs a Kerberos-enabled login service such as OpenSSH with
-GSSAPIAuthentication enabled, login authorization rules determine
-whether a Kerberos principal is allowed to access a local account.
-
-By default, a Kerberos principal is allowed access to an account if
-its realm matches the default realm and its name matches the account
-name. (For historical reasons, access is also granted by default if
-the name has two components and the second component matches the
-default realm; for instance, ``alice/ATHENA.MIT.EDU@ATHENA.MIT.EDU``
-is granted access to the ``alice`` account if ``ATHENA.MIT.EDU`` is
-the default realm.)
-
-The simplest way to control local access is using :ref:`.k5login(5)`
-files. To use these, place a ``.k5login`` file in the home directory
-of each account listing the principal names which should have login
-access to that account. If it is not desirable to use ``.k5login``
-files located in account home directories, the **k5login_directory**
-relation in the :ref:`libdefaults` section can specify a directory
-containing one file per account uname.
-
-By default, if a ``.k5login`` file is present, it controls
-authorization both positively and negatively--any principal name
-contained in the file is granted access and any other principal name
-is denied access, even if it would have had access if the ``.k5login``
-file didn't exist. The **k5login_authoritative** relation in the
-:ref:`libdefaults` section can be set to false to make ``.k5login``
-files provide positive authorization only.
-
-The **auth_to_local** relation in the :ref:`realms` section for the
-default realm can specify pattern-matching rules to control login
-authorization. For example, the following configuration allows access
-to principals from a different realm than the default realm::
-
- [realms]
- DEFAULT.REALM = {
- # Allow access to principals from OTHER.REALM.
- #
- # [1:$1@$0] matches single-component principal names and creates
- # a selection string containing the principal name and realm.
- #
- # (.*@OTHER\.REALM) matches against the selection string, so that
- # only principals in OTHER.REALM are matched.
- #
- # s/@OTHER\.REALM$// removes the realm name, leaving behind the
- # principal name as the account name.
- auth_to_local = RULE:[1:$1@$0](.*@OTHER\.REALM)s/@OTHER\.REALM$//
-
- # Also allow principals from the default realm. Omit this line
- # to only allow access to principals in OTHER.REALM.
- auth_to_local = DEFAULT
- }
-
-The **auth_to_local_names** subsection of the :ref:`realms` section
-for the default realm can specify explicit mappings from principal
-names to local accounts. The key used in this subsection is the
-principal name without realm, so it is only safe to use in a Kerberos
-environment with a single realm or a tightly controlled set of realms.
-An example use of **auth_to_local_names** might be::
-
- [realms]
- ATHENA.MIT.EDU = {
- auth_to_local_names = {
- # Careful, these match principals in any realm!
- host/example.com = hostaccount
- fred = localfred
- }
- }
-
-Local authorization behavior can also be modified using plugin
-modules; see :ref:`hostrealm_plugin` for details.
-
-
-.. _plugin_config:
-
-Plugin module configuration
----------------------------
-
-Many aspects of Kerberos behavior, such as client preauthentication
-and KDC service location, can be modified through the use of plugin
-modules. For most of these behaviors, you can use the :ref:`plugins`
-section of krb5.conf to register third-party modules, and to switch
-off registered or built-in modules.
-
-A plugin module takes the form of a Unix shared object
-(``modname.so``) or Windows DLL (``modname.dll``). If you have
-installed a third-party plugin module and want to register it, you do
-so using the **module** relation in the appropriate subsection of the
-[plugins] section. The value for **module** must give the module name
-and the path to the module, separated by a colon. The module name
-will often be the same as the shared object's name, but in unusual
-cases (such as a shared object which implements multiple modules for
-the same interface) it might not be. For example, to register a
-client preauthentication module named ``mypreauth`` installed at
-``/path/to/mypreauth.so``, you could write::
-
- [plugins]
- clpreauth = {
- module = mypreauth:/path/to/mypreauth.so
- }
-
-Many of the pluggable behaviors in MIT krb5 contain built-in modules
-which can be switched off. You can disable a built-in module (or one
-you have registered) using the **disable** directive in the
-appropriate subsection of the [plugins] section. For example, to
-disable the use of .k5identity files to select credential caches, you
-could write::
-
- [plugins]
- ccselect = {
- disable = k5identity
- }
-
-If you want to disable multiple modules, specify the **disable**
-directive multiple times, giving one module to disable each time.
-
-Alternatively, you can explicitly specify which modules you want to be
-enabled for that behavior using the **enable_only** directive. For
-example, to make :ref:`kadmind(8)` check password quality using only a
-module you have registered, and no other mechanism, you could write::
-
- [plugins]
- pwqual = {
- module = mymodule:/path/to/mymodule.so
- enable_only = mymodule
- }
-
-Again, if you want to specify multiple modules, specify the
-**enable_only** directive multiple times, giving one module to enable
-each time.
-
-Some Kerberos interfaces use different mechanisms to register plugin
-modules.
-
-
-KDC location modules
-~~~~~~~~~~~~~~~~~~~~
-
-For historical reasons, modules to control how KDC servers are located
-are registered simply by placing the shared object or DLL into the
-"libkrb5" subdirectory of the krb5 plugin directory, which defaults to
-|libdir|\ ``/krb5/plugins``. For example, Samba's winbind krb5
-locator plugin would be registered by placing its shared object in
-|libdir|\ ``/krb5/plugins/libkrb5/winbind_krb5_locator.so``.
-
-
-.. _gssapi_plugin_config:
-
-GSSAPI mechanism modules
-~~~~~~~~~~~~~~~~~~~~~~~~
-
-GSSAPI mechanism modules are registered using the file
-|sysconfdir|\ ``/gss/mech`` or configuration files in the
-|sysconfdir|\ ``/gss/mech.d`` directory with a ``.conf``
-suffix. Each line in these files has the form::
-
- name oid pathname [options] <type>
-
-Only the name, oid, and pathname are required. *name* is the
-mechanism name, which may be used for debugging or logging purposes.
-*oid* is the object identifier of the GSSAPI mechanism to be
-registered. *pathname* is a path to the module shared object or DLL.
-*options* (if present) are options provided to the plugin module,
-surrounded in square brackets. *type* (if present) can be used to
-indicate a special type of module. Currently the only special module
-type is "interposer", for a module designed to intercept calls to
-other mechanisms.
-
-If the environment variable **GSS_MECH_CONFIG** is set, its value is
-used as the sole mechanism configuration filename.
-
-
-.. _profile_plugin_config:
-
-Configuration profile modules
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-A configuration profile module replaces the information source for
-:ref:`krb5.conf(5)` itself. To use a profile module, begin krb5.conf
-with the line::
-
- module PATHNAME:STRING
-
-where *PATHNAME* is a path to the module shared object or DLL, and
-*STRING* is a string to provide to the module. The module will then
-take over, and the rest of krb5.conf will be ignored.
+++ /dev/null
-.. _https:
-
-HTTPS proxy configuration
-=========================
-
-In addition to being able to use UDP or TCP to communicate directly
-with a KDC as is outlined in RFC4120, and with kpasswd services in a
-similar fashion, the client libraries can attempt to use an HTTPS
-proxy server to communicate with a KDC or kpasswd service, using the
-protocol outlined in [MS-KKDCP].
-
-Communicating with a KDC through an HTTPS proxy allows clients to
-contact servers when network firewalls might otherwise prevent them
-from doing so. The use of TLS also encrypts all traffic between the
-clients and the KDC, preventing observers from conducting password
-dictionary attacks or from observing the client and server principals
-being authenticated, at additional computational cost to both clients
-and servers.
-
-An HTTPS proxy server is provided as a feature in some versions of
-Microsoft Windows Server, and a WSGI implementation named `kdcproxy`
-is available in the python package index.
-
-
-Configuring the clients
------------------------
-
-To use an HTTPS proxy, a client host must trust the CA which issued
-that proxy's SSL certificate. If that CA's certificate is not in the
-system-wide default set of trusted certificates, configure the
-following relation in the client host's :ref:`krb5.conf(5)` file in
-the appropriate :ref:`realms` subsection::
-
- http_anchors = FILE:/etc/krb5/cacert.pem
-
-Adjust the pathname to match the path of the file which contains a
-copy of the CA's certificate. The `http_anchors` option is documented
-more fully in :ref:`krb5.conf(5)`.
-
-Configure the client to access the KDC and kpasswd service by
-specifying their locations in its :ref:`krb5.conf(5)` file in the form
-of HTTPS URLs for the proxy server::
-
- kdc = https://server.fqdn/KdcProxy
- kpasswd_server = https://server.fqdn/KdcProxy
-
-If the proxy and client are properly configured, client commands such
-as ``kinit``, ``kvno``, and ``kpasswd`` should all function normally.
+++ /dev/null
-For administrators
-==================
-
-.. toctree::
- :maxdepth: 1
-
- install.rst
- conf_files/index.rst
- realm_config.rst
- database.rst
- dbtypes.rst
- lockout.rst
- conf_ldap.rst
- appl_servers.rst
- host_config.rst
- backup_host.rst
- pkinit.rst
- otp.rst
- spake.rst
- dictionary.rst
- princ_dns.rst
- enctypes.rst
- https.rst
- auth_indicator.rst
-
-.. toctree::
- :maxdepth: 1
-
- admin_commands/index.rst
- ../mitK5defaults.rst
- env_variables.rst
- troubleshoot.rst
- advanced/index.rst
- various_envs.rst
+++ /dev/null
-Installation guide
-==================
-
-Contents
---------
-
-.. toctree::
- :maxdepth: 2
-
- install_kdc.rst
- install_clients.rst
- install_appl_srv.rst
-
-
-Additional references
----------------------
-
-#. Debian: `Setting up MIT Kerberos 5
- <http://techpubs.spinlocksolutions.com/dklar/kerberos.html>`_
-#. Solaris: `Configuring the Kerberos Service
- <https://docs.oracle.com/cd/E19253-01/816-4557/6maosrjv2/index.html>`_
+++ /dev/null
-UNIX Application Servers
-========================
-
-An application server is a host that provides one or more services
-over the network. Application servers can be "secure" or "insecure."
-A "secure" host is set up to require authentication from every client
-connecting to it. An "insecure" host will still provide Kerberos
-authentication, but will also allow unauthenticated clients to
-connect.
-
-If you have Kerberos V5 installed on all of your client machines, MIT
-recommends that you make your hosts secure, to take advantage of the
-security that Kerberos authentication affords. However, if you have
-some clients that do not have Kerberos V5 installed, you can run an
-insecure server, and still take advantage of Kerberos V5's single
-sign-on capability.
-
-
-.. _keytab_file:
-
-The keytab file
----------------
-
-All Kerberos server machines need a keytab file to authenticate to the
-KDC. By default on UNIX-like systems this file is named |keytab|.
-The keytab file is an local copy of the host's key. The keytab file
-is a potential point of entry for a break-in, and if compromised,
-would allow unrestricted access to its host. The keytab file should
-be readable only by root, and should exist only on the machine's local
-disk. The file should not be part of any backup of the machine,
-unless access to the backup data is secured as tightly as access to
-the machine's root password.
-
-In order to generate a keytab for a host, the host must have a
-principal in the Kerberos database. The procedure for adding hosts to
-the database is described fully in :ref:`add_mod_del_princs`. (See
-:ref:`replica_host_key` for a brief description.) The keytab is
-generated by running :ref:`kadmin(1)` and issuing the :ref:`ktadd`
-command.
-
-For example, to generate a keytab file to allow the host
-``trillium.mit.edu`` to authenticate for the services host, ftp, and
-pop, the administrator ``joeadmin`` would issue the command (on
-``trillium.mit.edu``)::
-
- trillium% kadmin
- Authenticating as principal root/admin@ATHENA.MIT.EDU with password.
- Password for root/admin@ATHENA.MIT.EDU:
- kadmin: ktadd host/trillium.mit.edu ftp/trillium.mit.edu pop/trillium.mit.edu
- Entry for principal host/trillium.mit.edu@ATHENA.MIT.EDU with kvno 3, encryption type aes256-cts-hmac-sha384-192 added to keytab FILE:/etc/krb5.keytab.
- kadmin: Entry for principal ftp/trillium.mit.edu@ATHENA.MIT.EDU with kvno 3, encryption type aes256-cts-hmac-sha384-192 added to keytab FILE:/etc/krb5.keytab.
- kadmin: Entry for principal pop/trillium.mit.edu@ATHENA.MIT.EDU with kvno 3, encryption type aes256-cts-hmac-sha384-192 added to keytab FILE:/etc/krb5.keytab.
- kadmin: quit
- trillium%
-
-If you generate the keytab file on another host, you need to get a
-copy of the keytab file onto the destination host (``trillium``, in
-the above example) without sending it unencrypted over the network.
-
-
-Some advice about secure hosts
-------------------------------
-
-Kerberos V5 can protect your host from certain types of break-ins, but
-it is possible to install Kerberos V5 and still leave your host
-vulnerable to attack. Obviously an installation guide is not the
-place to try to include an exhaustive list of countermeasures for
-every possible attack, but it is worth noting some of the larger holes
-and how to close them.
-
-We recommend that backups of secure machines exclude the keytab file
-(|keytab|). If this is not possible, the backups should at least be
-done locally, rather than over a network, and the backup tapes should
-be physically secured.
-
-The keytab file and any programs run by root, including the Kerberos
-V5 binaries, should be kept on local disk. The keytab file should be
-readable only by root.
+++ /dev/null
-Installing and configuring UNIX client machines
-===============================================
-
-The Kerberized client programs include :ref:`kinit(1)`,
-:ref:`klist(1)`, :ref:`kdestroy(1)`, and :ref:`kpasswd(1)`. All of
-these programs are in the directory |bindir|.
-
-You can often integrate Kerberos with the login system on client
-machines, typically through the use of PAM. The details vary by
-operating system, and should be covered in your operating system's
-documentation. If you do this, you will need to make sure your users
-know to use their Kerberos passwords when they log in.
-
-You will also need to educate your users to use the ticket management
-programs kinit, klist, and kdestroy. If you do not have Kerberos
-password changing integrated into the native password program (again,
-typically through PAM), you will need to educate users to use kpasswd
-in place of its non-Kerberos counterparts passwd.
-
-
-Client machine configuration files
-----------------------------------
-
-Each machine running Kerberos should have a :ref:`krb5.conf(5)` file.
-At a minimum, it should define a **default_realm** setting in
-:ref:`libdefaults`. If you are not using DNS SRV records
-(:ref:`kdc_hostnames`) or URI records (:ref:`kdc_discovery`), it must
-also contain a :ref:`realms` section containing information for your
-realm's KDCs.
-
-Consider setting **rdns** to false in order to reduce your dependence
-on precisely correct DNS information for service hostnames. Turning
-this flag off means that service hostnames will be canonicalized
-through forward name resolution (which adds your domain name to
-unqualified hostnames, and resolves CNAME records in DNS), but not
-through reverse address lookup. The default value of this flag is
-true for historical reasons only.
-
-If you anticipate users frequently logging into remote hosts
-(e.g., using ssh) using forwardable credentials, consider setting
-**forwardable** to true so that users obtain forwardable tickets by
-default. Otherwise users will need to use ``kinit -f`` to get
-forwardable tickets.
-
-Consider adjusting the **ticket_lifetime** setting to match the likely
-length of sessions for your users. For instance, if most of your
-users will be logging in for an eight-hour workday, you could set the
-default to ten hours so that tickets obtained in the morning expire
-shortly after the end of the workday. Users can still manually
-request longer tickets when necessary, up to the maximum allowed by
-each user's principal record on the KDC.
-
-If a client host may access services in different realms, it may be
-useful to define a :ref:`domain_realm` mapping so that clients know
-which hosts belong to which realms. However, if your clients and KDC
-are running release 1.7 or later, it is also reasonable to leave this
-section out on client machines and just define it in the KDC's
-krb5.conf.
+++ /dev/null
-Installing KDCs
-===============
-
-When setting up Kerberos in a production environment, it is best to
-have multiple replica KDCs alongside with a primary KDC to ensure the
-continued availability of the Kerberized services. Each KDC contains
-a copy of the Kerberos database. The primary KDC contains the
-writable copy of the realm database, which it replicates to the
-replica KDCs at regular intervals. All database changes (such as
-password changes) are made on the primary KDC. Replica KDCs provide
-Kerberos ticket-granting services, but not database administration,
-when the primary KDC is unavailable. MIT recommends that you install
-all of your KDCs to be able to function as either the primary or one
-of the replicas. This will enable you to easily switch your primary
-KDC with one of the replicas if necessary (see
-:ref:`switch_primary_replica`). This installation procedure is based
-on that recommendation.
-
-.. warning::
-
- - The Kerberos system relies on the availability of correct time
- information. Ensure that the primary and all replica KDCs have
- properly synchronized clocks.
-
- - It is best to install and run KDCs on secured and dedicated
- hardware with limited access. If your KDC is also a file
- server, FTP server, Web server, or even just a client machine,
- someone who obtained root access through a security hole in any
- of those areas could potentially gain access to the Kerberos
- database.
-
-
-Install and configure the primary KDC
--------------------------------------
-
-Install Kerberos either from the OS-provided packages or from the
-source (See :ref:`do_build`).
-
-.. note::
-
- For the purpose of this document we will use the following
- names::
-
- kerberos.mit.edu - primary KDC
- kerberos-1.mit.edu - replica KDC
- ATHENA.MIT.EDU - realm name
- .k5.ATHENA.MIT.EDU - stash file
- admin/admin - admin principal
-
- See :ref:`mitK5defaults` for the default names and locations
- of the relevant to this topic files. Adjust the names and
- paths to your system environment.
-
-
-Edit KDC configuration files
-----------------------------
-
-Modify the configuration files, :ref:`krb5.conf(5)` and
-:ref:`kdc.conf(5)`, to reflect the correct information (such as
-domain-realm mappings and Kerberos servers names) for your realm.
-(See :ref:`mitK5defaults` for the recommended default locations for
-these files).
-
-Most of the tags in the configuration have default values that will
-work well for most sites. There are some tags in the
-:ref:`krb5.conf(5)` file whose values must be specified, and this
-section will explain those.
-
-If the locations for these configuration files differs from the
-default ones, set **KRB5_CONFIG** and **KRB5_KDC_PROFILE** environment
-variables to point to the krb5.conf and kdc.conf respectively. For
-example::
-
- export KRB5_CONFIG=/yourdir/krb5.conf
- export KRB5_KDC_PROFILE=/yourdir/kdc.conf
-
-
-krb5.conf
-~~~~~~~~~
-
-If you are not using DNS TXT records (see :ref:`mapping_hostnames`),
-you must specify the **default_realm** in the :ref:`libdefaults`
-section. If you are not using DNS URI or SRV records (see
-:ref:`kdc_hostnames` and :ref:`kdc_discovery`), you must include the
-**kdc** tag for each *realm* in the :ref:`realms` section. To
-communicate with the kadmin server in each realm, the **admin_server**
-tag must be set in the
-:ref:`realms` section.
-
-An example krb5.conf file::
-
- [libdefaults]
- default_realm = ATHENA.MIT.EDU
-
- [realms]
- ATHENA.MIT.EDU = {
- kdc = kerberos.mit.edu
- kdc = kerberos-1.mit.edu
- admin_server = kerberos.mit.edu
- }
-
-
-kdc.conf
-~~~~~~~~
-
-The kdc.conf file can be used to control the listening ports of the
-KDC and kadmind, as well as realm-specific defaults, the database type
-and location, and logging.
-
-An example kdc.conf file::
-
- [kdcdefaults]
- kdc_listen = 88
- kdc_tcp_listen = 88
-
- [realms]
- ATHENA.MIT.EDU = {
- kadmind_port = 749
- max_life = 12h 0m 0s
- max_renewable_life = 7d 0h 0m 0s
- master_key_type = aes256-cts
- supported_enctypes = aes256-cts:normal aes128-cts:normal
- # If the default location does not suit your setup,
- # explicitly configure the following values:
- # database_name = /var/krb5kdc/principal
- # key_stash_file = /var/krb5kdc/.k5.ATHENA.MIT.EDU
- # acl_file = /var/krb5kdc/kadm5.acl
- }
-
- [logging]
- # By default, the KDC and kadmind will log output using
- # syslog. You can instead send log output to files like this:
- kdc = FILE:/var/log/krb5kdc.log
- admin_server = FILE:/var/log/kadmin.log
- default = FILE:/var/log/krb5lib.log
-
-Replace ``ATHENA.MIT.EDU`` and ``kerberos.mit.edu`` with the name of
-your Kerberos realm and server respectively.
-
-.. note::
-
- You have to have write permission on the target directories
- (these directories must exist) used by **database_name**,
- **key_stash_file**, and **acl_file**.
-
-
-.. _create_db:
-
-Create the KDC database
------------------------
-
-You will use the :ref:`kdb5_util(8)` command on the primary KDC to
-create the Kerberos database and the optional :ref:`stash_definition`.
-
-.. note::
-
- If you choose not to install a stash file, the KDC will
- prompt you for the master key each time it starts up. This
- means that the KDC will not be able to start automatically,
- such as after a system reboot.
-
-:ref:`kdb5_util(8)` will prompt you for the master password for the
-Kerberos database. This password can be any string. A good password
-is one you can remember, but that no one else can guess. Examples of
-bad passwords are words that can be found in a dictionary, any common
-or popular name, especially a famous person (or cartoon character),
-your username in any form (e.g., forward, backward, repeated twice,
-etc.), and any of the sample passwords that appear in this manual.
-One example of a password which might be good if it did not appear in
-this manual is "MITiys4K5!", which represents the sentence "MIT is
-your source for Kerberos 5!" (It's the first letter of each word,
-substituting the numeral "4" for the word "for", and includes the
-punctuation mark at the end.)
-
-The following is an example of how to create a Kerberos database and
-stash file on the primary KDC, using the :ref:`kdb5_util(8)` command.
-Replace ``ATHENA.MIT.EDU`` with the name of your Kerberos realm::
-
- shell% kdb5_util create -r ATHENA.MIT.EDU -s
-
- Initializing database '/usr/local/var/krb5kdc/principal' for realm 'ATHENA.MIT.EDU',
- master key name 'K/M@ATHENA.MIT.EDU'
- You will be prompted for the database Master Password.
- It is important that you NOT FORGET this password.
- Enter KDC database master key: <= Type the master password.
- Re-enter KDC database master key to verify: <= Type it again.
- shell%
-
-This will create five files in |kdcdir| (or at the locations specified
-in :ref:`kdc.conf(5)`):
-
-* two Kerberos database files, ``principal``, and ``principal.ok``
-* the Kerberos administrative database file, ``principal.kadm5``
-* the administrative database lock file, ``principal.kadm5.lock``
-* the stash file, in this example ``.k5.ATHENA.MIT.EDU``. If you do
- not want a stash file, run the above command without the **-s**
- option.
-
-For more information on administrating Kerberos database see
-:ref:`db_operations`.
-
-
-.. _admin_acl:
-
-Add administrators to the ACL file
-----------------------------------
-
-Next, you need create an Access Control List (ACL) file and put the
-Kerberos principal of at least one of the administrators into it.
-This file is used by the :ref:`kadmind(8)` daemon to control which
-principals may view and make privileged modifications to the Kerberos
-database files. The ACL filename is determined by the **acl_file**
-variable in :ref:`kdc.conf(5)`; the default is |kdcdir|\
-``/kadm5.acl``.
-
-For more information on Kerberos ACL file see :ref:`kadm5.acl(5)`.
-
-.. _addadmin_kdb:
-
-Add administrators to the Kerberos database
--------------------------------------------
-
-Next you need to add administrative principals (i.e., principals who
-are allowed to administer Kerberos database) to the Kerberos database.
-You *must* add at least one principal now to allow communication
-between the Kerberos administration daemon kadmind and the kadmin
-program over the network for further administration. To do this, use
-the kadmin.local utility on the primary KDC. kadmin.local is designed
-to be run on the primary KDC host without using Kerberos
-authentication to an admin server; instead, it must have read and
-write access to the Kerberos database on the local filesystem.
-
-The administrative principals you create should be the ones you added
-to the ACL file (see :ref:`admin_acl`).
-
-In the following example, the administrative principal ``admin/admin``
-is created::
-
- shell% kadmin.local
-
- kadmin.local: addprinc admin/admin@ATHENA.MIT.EDU
-
- No policy specified for "admin/admin@ATHENA.MIT.EDU";
- assigning "default".
- Enter password for principal admin/admin@ATHENA.MIT.EDU: <= Enter a password.
- Re-enter password for principal admin/admin@ATHENA.MIT.EDU: <= Type it again.
- Principal "admin/admin@ATHENA.MIT.EDU" created.
- kadmin.local:
-
-.. _start_kdc_daemons:
-
-Start the Kerberos daemons on the primary KDC
----------------------------------------------
-
-At this point, you are ready to start the Kerberos KDC
-(:ref:`krb5kdc(8)`) and administrative daemons on the primary KDC. To
-do so, type::
-
- shell% krb5kdc
- shell% kadmind
-
-Each server daemon will fork and run in the background.
-
-.. note::
-
- Assuming you want these daemons to start up automatically at
- boot time, you can add them to the KDC's ``/etc/rc`` or
- ``/etc/inittab`` file. You need to have a
- :ref:`stash_definition` in order to do this.
-
-You can verify that they started properly by checking for their
-startup messages in the logging locations you defined in
-:ref:`krb5.conf(5)` (see :ref:`logging`). For example::
-
- shell% tail /var/log/krb5kdc.log
- Dec 02 12:35:47 beeblebrox krb5kdc[3187](info): commencing operation
- shell% tail /var/log/kadmin.log
- Dec 02 12:35:52 beeblebrox kadmind[3189](info): starting
-
-Any errors the daemons encounter while starting will also be listed in
-the logging output.
-
-As an additional verification, check if :ref:`kinit(1)` succeeds
-against the principals that you have created on the previous step
-(:ref:`addadmin_kdb`). Run::
-
- shell% kinit admin/admin@ATHENA.MIT.EDU
-
-
-Install the replica KDCs
-------------------------
-
-You are now ready to start configuring the replica KDCs.
-
-.. note::
-
- Assuming you are setting the KDCs up so that you can easily
- switch the primary KDC with one of the replicas, you should
- perform each of these steps on the primary KDC as well as
- the replica KDCs, unless these instructions specify
- otherwise.
-
-
-.. _replica_host_key:
-
-Create host keytabs for replica KDCs
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-Each KDC needs a ``host`` key in the Kerberos database. These keys
-are used for mutual authentication when propagating the database dump
-file from the primary KDC to the secondary KDC servers.
-
-On the primary KDC, connect to administrative interface and create the
-host principal for each of the KDCs' ``host`` services. For example,
-if the primary KDC were called ``kerberos.mit.edu``, and you had a
-replica KDC named ``kerberos-1.mit.edu``, you would type the
-following::
-
- shell% kadmin
- kadmin: addprinc -randkey host/kerberos.mit.edu
- No policy specified for "host/kerberos.mit.edu@ATHENA.MIT.EDU"; assigning "default"
- Principal "host/kerberos.mit.edu@ATHENA.MIT.EDU" created.
-
- kadmin: addprinc -randkey host/kerberos-1.mit.edu
- No policy specified for "host/kerberos-1.mit.edu@ATHENA.MIT.EDU"; assigning "default"
- Principal "host/kerberos-1.mit.edu@ATHENA.MIT.EDU" created.
-
-It is not strictly necessary to have the primary KDC server in the
-Kerberos database, but it can be handy if you want to be able to swap
-the primary KDC with one of the replicas.
-
-Next, extract ``host`` random keys for all participating KDCs and
-store them in each host's default keytab file. Ideally, you should
-extract each keytab locally on its own KDC. If this is not feasible,
-you should use an encrypted session to send them across the network.
-To extract a keytab directly on a replica KDC called
-``kerberos-1.mit.edu``, you would execute the following command::
-
- kadmin: ktadd host/kerberos-1.mit.edu
- Entry for principal host/kerberos-1.mit.edu with kvno 2, encryption
- type aes256-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab.
- Entry for principal host/kerberos-1.mit.edu with kvno 2, encryption
- type aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab.
- Entry for principal host/kerberos-1.mit.edu with kvno 2, encryption
- type aes256-cts-hmac-sha384-192 added to keytab FILE:/etc/krb5.keytab.
- Entry for principal host/kerberos-1.mit.edu with kvno 2, encryption
- type arcfour-hmac added to keytab FILE:/etc/krb5.keytab.
-
-If you are instead extracting a keytab for the replica KDC called
-``kerberos-1.mit.edu`` on the primary KDC, you should use a dedicated
-temporary keytab file for that machine's keytab::
-
- kadmin: ktadd -k /tmp/kerberos-1.keytab host/kerberos-1.mit.edu
- Entry for principal host/kerberos-1.mit.edu with kvno 2, encryption
- type aes256-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab.
- Entry for principal host/kerberos-1.mit.edu with kvno 2, encryption
- type aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab.
-
-The file ``/tmp/kerberos-1.keytab`` can then be installed as
-``/etc/krb5.keytab`` on the host ``kerberos-1.mit.edu``.
-
-
-Configure replica KDCs
-~~~~~~~~~~~~~~~~~~~~~~
-
-Database propagation copies the contents of the primary's database,
-but does not propagate configuration files, stash files, or the kadm5
-ACL file. The following files must be copied by hand to each replica
-(see :ref:`mitK5defaults` for the default locations for these files):
-
-* krb5.conf
-* kdc.conf
-* kadm5.acl
-* master key stash file
-
-Move the copied files into their appropriate directories, exactly as
-on the primary KDC. kadm5.acl is only needed to allow a replica to
-swap with the primary KDC.
-
-The database is propagated from the primary KDC to the replica KDCs
-via the :ref:`kpropd(8)` daemon. You must explicitly specify the
-principals which are allowed to provide Kerberos dump updates on the
-replica machine with a new database. Create a file named kpropd.acl
-in the KDC state directory containing the ``host`` principals for each
-of the KDCs::
-
- host/kerberos.mit.edu@ATHENA.MIT.EDU
- host/kerberos-1.mit.edu@ATHENA.MIT.EDU
-
-.. note::
-
- If you expect that the primary and replica KDCs will be
- switched at some point of time, list the host principals
- from all participating KDC servers in kpropd.acl files on
- all of the KDCs. Otherwise, you only need to list the
- primary KDC's host principal in the kpropd.acl files of the
- replica KDCs.
-
-Then, add the following line to ``/etc/inetd.conf`` on each KDC
-(adjust the path to kpropd)::
-
- krb5_prop stream tcp nowait root /usr/local/sbin/kpropd kpropd
-
-You also need to add the following line to ``/etc/services`` on each
-KDC, if it is not already present (assuming that the default port is
-used)::
-
- krb5_prop 754/tcp # Kerberos replica propagation
-
-Restart inetd daemon.
-
-Alternatively, start :ref:`kpropd(8)` as a stand-alone daemon. This is
-required when incremental propagation is enabled.
-
-Now that the replica KDC is able to accept database propagation,
-you’ll need to propagate the database from the primary server.
-
-NOTE: Do not start the replica KDC yet; you still do not have a copy
-of the primary's database.
-
-
-.. _kprop_to_replicas:
-
-Propagate the database to each replica KDC
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-First, create a dump file of the database on the primary KDC, as
-follows::
-
- shell% kdb5_util dump /usr/local/var/krb5kdc/replica_datatrans
-
-Then, manually propagate the database to each replica KDC, as in the
-following example::
-
- shell% kprop -f /usr/local/var/krb5kdc/replica_datatrans kerberos-1.mit.edu
-
- Database propagation to kerberos-1.mit.edu: SUCCEEDED
-
-You will need a script to dump and propagate the database. The
-following is an example of a Bourne shell script that will do this.
-
-.. note::
-
- Remember that you need to replace ``/usr/local/var/krb5kdc``
- with the name of the KDC state directory.
-
-::
-
- #!/bin/sh
-
- kdclist = "kerberos-1.mit.edu kerberos-2.mit.edu"
-
- kdb5_util dump /usr/local/var/krb5kdc/replica_datatrans
-
- for kdc in $kdclist
- do
- kprop -f /usr/local/var/krb5kdc/replica_datatrans $kdc
- done
-
-You will need to set up a cron job to run this script at the intervals
-you decided on earlier (see :ref:`db_prop`).
-
-Now that the replica KDC has a copy of the Kerberos database, you can
-start the krb5kdc daemon::
-
- shell% krb5kdc
-
-As with the primary KDC, you will probably want to add this command to
-the KDCs' ``/etc/rc`` or ``/etc/inittab`` files, so they will start
-the krb5kdc daemon automatically at boot time.
-
-
-Propagation failed?
-###################
-
-You may encounter the following error messages. For a more detailed
-discussion on possible causes and solutions click on the error link
-to be redirected to :ref:`troubleshoot` section.
-
-.. include:: ./troubleshoot.rst
- :start-after: _prop_failed_start:
- :end-before: _prop_failed_end:
-
-
-Add Kerberos principals to the database
----------------------------------------
-
-Once your KDCs are set up and running, you are ready to use
-:ref:`kadmin(1)` to load principals for your users, hosts, and other
-services into the Kerberos database. This procedure is described
-fully in :ref:`add_mod_del_princs`.
-
-You may occasionally want to use one of your replica KDCs as the
-primary. This might happen if you are upgrading the primary KDC, or
-if your primary KDC has a disk crash. See the following section for
-the instructions.
-
-
-.. _switch_primary_replica:
-
-Switching primary and replica KDCs
-----------------------------------
-
-You may occasionally want to use one of your replica KDCs as the
-primary. This might happen if you are upgrading the primary KDC, or
-if your primary KDC has a disk crash.
-
-Assuming you have configured all of your KDCs to be able to function
-as either the primary KDC or a replica KDC (as this document
-recommends), all you need to do to make the changeover is:
-
-If the primary KDC is still running, do the following on the *old*
-primary KDC:
-
-#. Kill the kadmind process.
-#. Disable the cron job that propagates the database.
-#. Run your database propagation script manually, to ensure that the
- replicas all have the latest copy of the database (see
- :ref:`kprop_to_replicas`).
-
-On the *new* primary KDC:
-
-#. Start the :ref:`kadmind(8)` daemon (see :ref:`start_kdc_daemons`).
-#. Set up the cron job to propagate the database (see
- :ref:`kprop_to_replicas`).
-#. Switch the CNAMEs of the old and new primary KDCs. If you can't do
- this, you'll need to change the :ref:`krb5.conf(5)` file on every
- client machine in your Kerberos realm.
-
-
-Incremental database propagation
---------------------------------
-
-If you expect your Kerberos database to become large, you may wish to
-set up incremental propagation to replica KDCs. See
-:ref:`incr_db_prop` for details.
+++ /dev/null
-.. _lockout:
-
-Account lockout
-===============
-
-As of release 1.8, the KDC can be configured to lock out principals
-after a number of failed authentication attempts within a period of
-time. Account lockout can make it more difficult to attack a
-principal's password by brute force, but also makes it easy for an
-attacker to deny access to a principal.
-
-
-Configuring account lockout
----------------------------
-
-Account lockout only works for principals with the
-**+requires_preauth** flag set. Without this flag, the KDC cannot
-know whether or not a client successfully decrypted the ticket it
-issued. It is also important to set the **-allow_svr** flag on a
-principal to protect its password from an off-line dictionary attack
-through a TGS request. You can set these flags on a principal with
-:ref:`kadmin(1)` as follows::
-
- kadmin: modprinc +requires_preauth -allow_svr PRINCNAME
-
-Account lockout parameters are configured via :ref:`policy objects
-<policies>`. There may be an existing policy associated with user
-principals (such as the "default" policy), or you may need to create a
-new one and associate it with each user principal.
-
-The policy parameters related to account lockout are:
-
-* :ref:`maxfailure <policy_maxfailure>`: the number of failed attempts
- before the principal is locked out
-* :ref:`failurecountinterval <policy_failurecountinterval>`: the
- allowable interval between failed attempts
-* :ref:`lockoutduration <policy_lockoutduration>`: the amount of time
- a principal is locked out for
-
-Here is an example of setting these parameters on a new policy and
-associating it with a principal::
-
- kadmin: addpol -maxfailure 10 -failurecountinterval 180
- -lockoutduration 60 lockout_policy
- kadmin: modprinc -policy lockout_policy PRINCNAME
-
-
-Testing account lockout
------------------------
-
-To test that account lockout is working, try authenticating as the
-principal (hopefully not one that might be in use) multiple times with
-the wrong password. For instance, if **maxfailure** is set to 2, you
-might see::
-
- $ kinit user
- Password for user@KRBTEST.COM:
- kinit: Password incorrect while getting initial credentials
- $ kinit user
- Password for user@KRBTEST.COM:
- kinit: Password incorrect while getting initial credentials
- $ kinit user
- kinit: Client's credentials have been revoked while getting initial credentials
-
-
-Account lockout principal state
--------------------------------
-
-A principal entry keeps three pieces of state related to account
-lockout:
-
-* The time of last successful authentication
-* The time of last failed authentication
-* A counter of failed attempts
-
-The time of last successful authentication is not actually needed for
-the account lockout system to function, but may be of administrative
-interest. These fields can be observed with the **getprinc** kadmin
-command. For example::
-
- kadmin: getprinc user
- Principal: user@KRBTEST.COM
- ...
- Last successful authentication: [never]
- Last failed authentication: Mon Dec 03 12:30:33 EST 2012
- Failed password attempts: 2
- ...
-
-A principal which has been locked out can be administratively unlocked
-with the **-unlock** option to the **modprinc** kadmin command::
-
- kadmin: modprinc -unlock PRINCNAME
-
-This command will reset the number of failed attempts to 0.
-
-
-KDC replication and account lockout
------------------------------------
-
-The account lockout state of a principal is not replicated by either
-traditional :ref:`kprop(8)` or incremental propagation. Because of
-this, the number of attempts an attacker can make within a time period
-is multiplied by the number of KDCs. For instance, if the
-**maxfailure** parameter on a policy is 10 and there are four KDCs in
-the environment (a primary and three replicas), an attacker could make
-as many as 40 attempts before the principal is locked out on all four
-KDCs.
-
-An administrative unlock is propagated from the primary to the replica
-KDCs during the next propagation. Propagation of an administrative
-unlock will cause the counter of failed attempts on each replica to
-reset to 1 on the next failure.
-
-If a KDC environment uses a replication strategy other than kprop or
-incremental propagation, such as the LDAP KDB module with multi-master
-LDAP replication, then account lockout state may be replicated between
-KDCs and the concerns of this section may not apply.
-
-
-.. _disable_lockout:
-
-KDC performance and account lockout
------------------------------------
-
-In order to fully track account lockout state, the KDC must write to
-the the database on each successful and failed authentication.
-Writing to the database is generally more expensive than reading from
-it, so these writes may have a significant impact on KDC performance.
-As of release 1.9, it is possible to turn off account lockout state
-tracking in order to improve performance, by setting the
-**disable_last_success** and **disable_lockout** variables in the
-database module subsection of :ref:`kdc.conf(5)`. For example::
-
- [dbmodules]
- DB = {
- disable_last_success = true
- disable_lockout = true
- }
-
-Of the two variables, setting **disable_last_success** will usually
-have the largest positive impact on performance, and will still allow
-account lockout policies to operate. However, it will make it
-impossible to observe the last successful authentication time with
-kadmin.
-
-
-KDC setup and account lockout
------------------------------
-
-To update the account lockout state on principals, the KDC must be
-able to write to the principal database. For the DB2 module, no
-special setup is required. For the LDAP module, the KDC DN must be
-granted write access to the principal objects. If the KDC DN has only
-read access, account lockout will not function.
+++ /dev/null
-.. _otp_preauth:
-
-OTP Preauthentication
-=====================
-
-OTP is a preauthentication mechanism for Kerberos 5 which uses One
-Time Passwords (OTP) to authenticate the client to the KDC. The OTP
-is passed to the KDC over an encrypted FAST channel in clear-text.
-The KDC uses the password along with per-user configuration to proxy
-the request to a third-party RADIUS system. This enables
-out-of-the-box compatibility with a large number of already widely
-deployed proprietary systems.
-
-Additionally, our implementation of the OTP system allows for the
-passing of RADIUS requests over a UNIX domain stream socket. This
-permits the use of a local companion daemon which can handle the
-details of authentication.
-
-
-Defining token types
---------------------
-
-Token types are defined in either :ref:`krb5.conf(5)` or
-:ref:`kdc.conf(5)` according to the following format::
-
- [otp]
- <name> = {
- server = <host:port or filename> (default: see below)
- secret = <filename>
- timeout = <integer> (default: 5 [seconds])
- retries = <integer> (default: 3)
- strip_realm = <boolean> (default: true)
- indicator = <string> (default: none)
- }
-
-If the server field begins with '/', it will be interpreted as a UNIX
-socket. Otherwise, it is assumed to be in the format host:port. When
-a UNIX domain socket is specified, the secret field is optional and an
-empty secret is used by default. If the server field is not
-specified, it defaults to |kdcrundir|\ ``/<name>.socket``.
-
-When forwarding the request over RADIUS, by default the principal is
-used in the User-Name attribute of the RADIUS packet. The strip_realm
-parameter controls whether the principal is forwarded with or without
-the realm portion.
-
-If an indicator field is present, tickets issued using this token type
-will be annotated with the specified authentication indicator (see
-:ref:`auth_indicator`). This key may be specified multiple times to
-add multiple indicators.
-
-
-The default token type
-----------------------
-
-A default token type is used internally when no token type is specified for a
-given user. It is defined as follows::
-
- [otp]
- DEFAULT = {
- strip_realm = false
- }
-
-The administrator may override the internal ``DEFAULT`` token type
-simply by defining a configuration with the same name.
-
-
-Token instance configuration
-----------------------------
-
-To enable OTP for a client principal, the administrator must define
-the **otp** string attribute for that principal. (See
-:ref:`set_string`.) The **otp** user string is a JSON string of the
-format:
-
-.. code-block:: xml
-
- [{
- "type": <string>,
- "username": <string>,
- "indicators": [<string>, ...]
- }, ...]
-
-This is an array of token objects. Both fields of token objects are
-optional. The **type** field names the token type of this token; if
-not specified, it defaults to ``DEFAULT``. The **username** field
-specifies the value to be sent in the User-Name RADIUS attribute. If
-not specified, the principal name is sent, with or without realm as
-defined in the token type. The **indicators** field specifies a list
-of authentication indicators to annotate tickets with, overriding any
-indicators specified in the token type.
-
-For ease of configuration, an empty array (``[]``) is treated as
-equivalent to one DEFAULT token (``[{}]``).
-
-
-Other considerations
---------------------
-
-#. FAST is required for OTP to work.
+++ /dev/null
-.. _pkinit:
-
-PKINIT configuration
-====================
-
-PKINIT is a preauthentication mechanism for Kerberos 5 which uses
-X.509 certificates to authenticate the KDC to clients and vice versa.
-PKINIT can also be used to enable anonymity support, allowing clients
-to communicate securely with the KDC or with application servers
-without authenticating as a particular client principal.
-
-
-Creating certificates
----------------------
-
-PKINIT requires an X.509 certificate for the KDC and one for each
-client principal which will authenticate using PKINIT. For anonymous
-PKINIT, a KDC certificate is required, but client certificates are
-not. A commercially issued server certificate can be used for the KDC
-certificate, but generally cannot be used for client certificates.
-
-The instruction in this section describe how to establish a
-certificate authority and create standard PKINIT certificates. Skip
-this section if you are using a commercially issued server certificate
-as the KDC certificate for anonymous PKINIT, or if you are configuring
-a client to use an Active Directory KDC.
-
-
-Generating a certificate authority certificate
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-You can establish a new certificate authority (CA) for use with a
-PKINIT deployment with the commands::
-
- openssl genrsa -out cakey.pem 2048
- openssl req -key cakey.pem -new -x509 -out cacert.pem -days 3650
-
-The second command will ask for the values of several certificate
-fields. These fields can be set to any values. You can adjust the
-expiration time of the CA certificate by changing the number after
-``-days``. Since the CA certificate must be deployed to client
-machines each time it changes, it should normally have an expiration
-time far in the future; however, expiration times after 2037 may cause
-interoperability issues in rare circumstances.
-
-The result of these commands will be two files, cakey.pem and
-cacert.pem. cakey.pem will contain a 2048-bit RSA private key, which
-must be carefully protected. cacert.pem will contain the CA
-certificate, which must be placed in the filesystems of the KDC and
-each client host. cakey.pem will be required to create KDC and client
-certificates.
-
-
-Generating a KDC certificate
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-A KDC certificate for use with PKINIT is required to have some unusual
-fields, which makes generating them with OpenSSL somewhat complicated.
-First, you will need a file containing the following::
-
- [kdc_cert]
- basicConstraints=CA:FALSE
- keyUsage=nonRepudiation,digitalSignature,keyEncipherment,keyAgreement
- extendedKeyUsage=1.3.6.1.5.2.3.5
- subjectKeyIdentifier=hash
- authorityKeyIdentifier=keyid,issuer
- issuerAltName=issuer:copy
- subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:kdc_princ_name
-
- [kdc_princ_name]
- realm=EXP:0,GeneralString:${ENV::REALM}
- principal_name=EXP:1,SEQUENCE:kdc_principal_seq
-
- [kdc_principal_seq]
- name_type=EXP:0,INTEGER:2
- name_string=EXP:1,SEQUENCE:kdc_principals
-
- [kdc_principals]
- princ1=GeneralString:krbtgt
- princ2=GeneralString:${ENV::REALM}
-
-If the above contents are placed in extensions.kdc, you can generate
-and sign a KDC certificate with the following commands::
-
- openssl genrsa -out kdckey.pem 2048
- openssl req -new -out kdc.req -key kdckey.pem
- env REALM=YOUR_REALMNAME openssl x509 -req -in kdc.req \
- -CAkey cakey.pem -CA cacert.pem -out kdc.pem -days 365 \
- -extfile extensions.kdc -extensions kdc_cert -CAcreateserial
- rm kdc.req
-
-The second command will ask for the values of certificate fields,
-which can be set to any values. In the third command, substitute your
-KDC's realm name for YOUR_REALMNAME. You can adjust the certificate's
-expiration date by changing the number after ``-days``. Remember to
-create a new KDC certificate before the old one expires.
-
-The result of this operation will be in two files, kdckey.pem and
-kdc.pem. Both files must be placed in the KDC's filesystem.
-kdckey.pem, which contains the KDC's private key, must be carefully
-protected.
-
-If you examine the KDC certificate with ``openssl x509 -in kdc.pem
--text -noout``, OpenSSL will not know how to display the KDC principal
-name in the Subject Alternative Name extension, so it will appear as
-``othername:<unsupported>``. This is normal and does not mean
-anything is wrong with the KDC certificate.
-
-
-Generating client certificates
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-PKINIT client certificates also must have some unusual certificate
-fields. To generate a client certificate with OpenSSL for a
-single-component principal name, you will need an extensions file
-(different from the KDC extensions file above) containing::
-
- [client_cert]
- basicConstraints=CA:FALSE
- keyUsage=digitalSignature,keyEncipherment,keyAgreement
- extendedKeyUsage=1.3.6.1.5.2.3.4
- subjectKeyIdentifier=hash
- authorityKeyIdentifier=keyid,issuer
- issuerAltName=issuer:copy
- subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:princ_name
-
- [princ_name]
- realm=EXP:0,GeneralString:${ENV::REALM}
- principal_name=EXP:1,SEQUENCE:principal_seq
-
- [principal_seq]
- name_type=EXP:0,INTEGER:1
- name_string=EXP:1,SEQUENCE:principals
-
- [principals]
- princ1=GeneralString:${ENV::CLIENT}
-
-If the above contents are placed in extensions.client, you can
-generate and sign a client certificate with the following commands::
-
- openssl genrsa -out clientkey.pem 2048
- openssl req -new -key clientkey.pem -out client.req
- env REALM=YOUR_REALMNAME CLIENT=YOUR_PRINCNAME openssl x509 \
- -CAkey cakey.pem -CA cacert.pem -req -in client.req \
- -extensions client_cert -extfile extensions.client \
- -days 365 -out client.pem
- rm client.req
-
-Normally, the first two commands should be run on the client host, and
-the resulting client.req file transferred to the certificate authority
-host for the third command. As in the previous steps, the second
-command will ask for the values of certificate fields, which can be
-set to any values. In the third command, substitute your realm's name
-for YOUR_REALMNAME and the client's principal name (without realm) for
-YOUR_PRINCNAME. You can adjust the certificate's expiration date by
-changing the number after ``-days``.
-
-The result of this operation will be two files, clientkey.pem and
-client.pem. Both files must be present on the client's host;
-clientkey.pem, which contains the client's private key, must be
-protected from access by others.
-
-As in the KDC certificate, OpenSSL will display the client principal
-name as ``othername:<unsupported>`` in the Subject Alternative Name
-extension of a PKINIT client certificate.
-
-If the client principal name contains more than one component
-(e.g. ``host/example.com@REALM``), the ``[principals]`` section of
-``extensions.client`` must be altered to contain multiple entries.
-(Simply setting ``CLIENT`` to ``host/example.com`` would generate a
-certificate for ``host\/example.com@REALM`` which would not match the
-multi-component principal name.) For a two-component principal, the
-section should read::
-
- [principals]
- princ1=GeneralString:${ENV::CLIENT1}
- princ2=GeneralString:${ENV::CLIENT2}
-
-The environment variables ``CLIENT1`` and ``CLIENT2`` must then be set
-to the first and second components when running ``openssl x509``.
-
-
-Configuring the KDC
--------------------
-
-The KDC must have filesystem access to the KDC certificate (kdc.pem)
-and the KDC private key (kdckey.pem). Configure the following
-relation in the KDC's :ref:`kdc.conf(5)` file, either in the
-:ref:`kdcdefaults` section or in a :ref:`kdc_realms` subsection (with
-appropriate pathnames)::
-
- pkinit_identity = FILE:/var/lib/krb5kdc/kdc.pem,/var/lib/krb5kdc/kdckey.pem
-
-If any clients will authenticate using regular (as opposed to
-anonymous) PKINIT, the KDC must also have filesystem access to the CA
-certificate (cacert.pem), and the following configuration (with the
-appropriate pathname)::
-
- pkinit_anchors = FILE:/var/lib/krb5kdc/cacert.pem
-
-Because of the larger size of requests and responses using PKINIT, you
-may also need to allow TCP access to the KDC::
-
- kdc_tcp_listen = 88
-
-Restart the :ref:`krb5kdc(8)` daemon to pick up the configuration
-changes.
-
-The principal entry for each PKINIT-using client must be configured to
-require preauthentication. Ensure this with the command::
-
- kadmin -q 'modprinc +requires_preauth YOUR_PRINCNAME'
-
-Starting with release 1.12, it is possible to remove the long-term
-keys of a principal entry, which can save some space in the database
-and help to clarify some PKINIT-related error conditions by not asking
-for a password::
-
- kadmin -q 'purgekeys -all YOUR_PRINCNAME'
-
-These principal options can also be specified at principal creation
-time as follows::
-
- kadmin -q 'add_principal +requires_preauth -nokey YOUR_PRINCNAME'
-
-By default, the KDC requires PKINIT client certificates to have the
-standard Extended Key Usage and Subject Alternative Name attributes
-for PKINIT. Starting in release 1.16, it is possible to authorize
-client certificates based on the subject or other criteria instead of
-the standard PKINIT Subject Alternative Name, by setting the
-**pkinit_cert_match** string attribute on each client principal entry.
-For example::
-
- kadmin set_string user@REALM pkinit_cert_match "<SUBJECT>CN=user@REALM$"
-
-The **pkinit_cert_match** string attribute follows the syntax used by
-the :ref:`krb5.conf(5)` **pkinit_cert_match** relation. To allow the
-use of non-PKINIT client certificates, it will also be necessary to
-disable key usage checking using the **pkinit_eku_checking** relation;
-for example::
-
- [kdcdefaults]
- pkinit_eku_checking = none
-
-
-
-Configuring the clients
------------------------
-
-Client hosts must be configured to trust the issuing authority for the
-KDC certificate. For a newly established certificate authority, the
-client host must have filesystem access to the CA certificate
-(cacert.pem) and the following relation in :ref:`krb5.conf(5)` in the
-appropriate :ref:`realms` subsection (with appropriate pathnames)::
-
- pkinit_anchors = FILE:/etc/krb5/cacert.pem
-
-If the KDC certificate is a commercially issued server certificate,
-the issuing certificate is most likely included in a system directory.
-You can specify it by filename as above, or specify the whole
-directory like so::
-
- pkinit_anchors = DIR:/etc/ssl/certs
-
-A commercially issued server certificate will usually not have the
-standard PKINIT principal name or Extended Key Usage extensions, so
-the following additional configuration is required::
-
- pkinit_eku_checking = kpServerAuth
- pkinit_kdc_hostname = hostname.of.kdc.certificate
-
-Multiple **pkinit_kdc_hostname** relations can be configured to
-recognize multiple KDC certificates. If the KDC is an Active
-Directory domain controller, setting **pkinit_kdc_hostname** is
-necessary, but it should not be necessary to set
-**pkinit_eku_checking**.
-
-To perform regular (as opposed to anonymous) PKINIT authentication, a
-client host must have filesystem access to a client certificate
-(client.pem), and the corresponding private key (clientkey.pem).
-Configure the following relations in the client host's
-:ref:`krb5.conf(5)` file in the appropriate :ref:`realms` subsection
-(with appropriate pathnames)::
-
- pkinit_identities = FILE:/etc/krb5/client.pem,/etc/krb5/clientkey.pem
-
-If the KDC and client are properly configured, it should now be
-possible to run ``kinit username`` without entering a password.
-
-
-.. _anonymous_pkinit:
-
-Anonymous PKINIT
-----------------
-
-Anonymity support in Kerberos allows a client to obtain a ticket
-without authenticating as any particular principal. Such a ticket can
-be used as a FAST armor ticket, or to securely communicate with an
-application server anonymously.
-
-To configure anonymity support, you must generate or otherwise procure
-a KDC certificate and configure the KDC host, but you do not need to
-generate any client certificates. On the KDC, you must set the
-**pkinit_identity** variable to provide the KDC certificate, but do
-not need to set the **pkinit_anchors** variable or store the issuing
-certificate if you won't have any client certificates to verify. On
-client hosts, you must set the **pkinit_anchors** variable (and
-possibly **pkinit_kdc_hostname** and **pkinit_eku_checking**) in order
-to trust the issuing authority for the KDC certificate, but do not
-need to set the **pkinit_identities** variable.
-
-Anonymity support is not enabled by default. To enable it, you must
-create the principal ``WELLKNOWN/ANONYMOUS`` using the command::
-
- kadmin -q 'addprinc -randkey WELLKNOWN/ANONYMOUS'
-
-Some Kerberos deployments include application servers which lack
-proper access control, and grant some level of access to any user who
-can authenticate. In such an environment, enabling anonymity support
-on the KDC would present a security issue. If you need to enable
-anonymity support for TGTs (for use as FAST armor tickets) without
-enabling anonymous authentication to application servers, you can set
-the variable **restrict_anonymous_to_tgt** to ``true`` in the
-appropriate :ref:`kdc_realms` subsection of the KDC's
-:ref:`kdc.conf(5)` file.
-
-To obtain anonymous credentials on a client, run ``kinit -n``, or
-``kinit -n @REALMNAME`` to specify a realm. The resulting tickets
-will have the client name ``WELLKNOWN/ANONYMOUS@WELLKNOWN:ANONYMOUS``.
-
-
-Freshness tokens
-----------------
-
-Freshness tokens can ensure that the client has recently had access to
-its certificate private key. If freshness tokens are not required by
-the KDC, a client program with temporary possession of the private key
-can compose requests for future timestamps and use them later.
-
-In release 1.17 and later, freshness tokens are supported by the
-client and are sent by the KDC when the client indicates support for
-them. Because not all clients support freshness tokens yet, they are
-not required by default. To check if freshness tokens are supported
-by a realm's clients, look in the KDC logs for the lines::
-
- PKINIT: freshness token received from <client principal>
- PKINIT: no freshness token received from <client principal>
-
-To require freshness tokens for all clients in a realm (except for
-clients authenticating anonymously), set the
-**pkinit_require_freshness** variable to ``true`` in the appropriate
-:ref:`kdc_realms` subsection of the KDC's :ref:`kdc.conf(5)` file. To
-test that this option is in effect, run ``kinit -X disable_freshness``
-and verify that authentication is unsuccessful.
+++ /dev/null
-Principal names and DNS
-=======================
-
-Kerberos clients can do DNS lookups to canonicalize service principal
-names. This can cause difficulties when setting up Kerberos
-application servers, especially when the client's name for the service
-is different from what the service thinks its name is.
-
-
-Service principal names
------------------------
-
-A frequently used kind of principal name is the host-based service
-principal name. This kind of principal name has two components: a
-service name and a hostname. For example, ``imap/imap.example.com``
-is the principal name of the "imap" service on the host
-"imap.example.com". Other possible service names for the first
-component include "host" (remote login services such as ssh), "HTTP",
-and "nfs" (Network File System).
-
-Service administrators often publish well-known hostname aliases that
-they would prefer users to use instead of the canonical name of the
-service host. This gives service administrators more flexibility in
-deploying services. For example, a shell login server might be named
-"long-vanity-hostname.example.com", but users will naturally prefer to
-type something like "login.example.com". Hostname aliases also allow
-for administrators to set up load balancing for some sorts of services
-based on rotating ``CNAME`` records in DNS.
-
-
-Service principal canonicalization
-----------------------------------
-
-In the MIT krb5 client library, canonicalization of host-based service
-principals is controlled by the **dns_canonicalize_hostname**,
-**rnds**, and **qualify_shortname** variables in :ref:`libdefaults`.
-
-If **dns_canonicalize_hostname** is set to ``true`` (the default
-value), the client performs forward resolution by looking up the IPv4
-and/or IPv6 addresses of the hostname using ``getaddrinfo()``. This
-process will typically add a domain suffix to the hostname if needed,
-and follow CNAME records in the DNS. If **rdns** is also set to
-``true`` (the default), the client will then perform a reverse lookup
-of the first returned Internet address using ``getnameinfo()``,
-finding the name associated with the PTR record.
-
-If **dns_canonicalize_hostname** is set to ``false``, the hostname is
-not canonicalized using DNS. If the hostname has only one component
-(i.e. it contains no "." characters), the host's primary DNS search
-domain will be appended, if there is one. The **qualify_shortname**
-variable can be used to override or disable this suffix.
-
-If **dns_canonicalize_hostname** is set to ``fallback`` (added in
-release 1.18), the hostname is initially treated according to the
-rules for ``dns_canonicalize_hostname=false``. If a ticket request
-fails because the service principal is unknown, the hostname will be
-canonicalized according to the rules for
-``dns_canonicalize_hostname=true`` and the request will be retried.
-
-In all cases, the hostname is converted to lowercase, and any trailing
-dot is removed.
-
-
-
-Reverse DNS mismatches
-----------------------
-
-Sometimes, an enterprise will have control over its forward DNS but
-not its reverse DNS. The reverse DNS is sometimes under the control
-of the Internet service provider of the enterprise, and the enterprise
-may not have much influence in setting up reverse DNS records for its
-address space. If there are difficulties with getting forward and
-reverse DNS to match, it is best to set ``rdns = false`` on client
-machines.
-
-
-Overriding application behavior
--------------------------------
-
-Applications can choose to use a default hostname component in their
-service principal name when accepting authentication, which avoids
-some sorts of hostname mismatches. Because not all relevant
-applications do this yet, using the :ref:`krb5.conf(5)` setting::
-
- [libdefaults]
- ignore_acceptor_hostname = true
-
-will allow the Kerberos library to override the application's choice
-of service principal hostname and will allow a server program to
-accept incoming authentications using any key in its keytab that
-matches the service name and realm name (if given). This setting
-defaults to "false" and is available in releases krb5-1.10 and later.
-
-
-Provisioning keytabs
---------------------
-
-One service principal entry that should be in the keytab is a
-principal whose hostname component is the canonical hostname that
-``getaddrinfo()`` reports for all known aliases for the host. If the
-reverse DNS information does not match this canonical hostname, an
-additional service principal entry should be in the keytab for this
-different hostname.
-
-
-Specific application advice
----------------------------
-
-Secure shell (ssh)
-~~~~~~~~~~~~~~~~~~
-
-Setting ``GSSAPIStrictAcceptorCheck = no`` in the configuration file
-of modern versions of the openssh daemon will allow the daemon to try
-any key in its keytab when accepting a connection, rather than looking
-for the keytab entry that matches the host's own idea of its name
-(typically the name that ``gethostname()`` returns). This requires
-krb5-1.10 or later.
-
-OpenLDAP (ldapsearch, etc.)
-~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-OpenLDAP's SASL implementation performs reverse DNS lookup in order to
-canonicalize service principal names, even if **rdns** is set to
-``false`` in the Kerberos configuration. To disable this behavior,
-add ``SASL_NOCANON on`` to ``ldap.conf``, or set the
-``LDAPSASL_NOCANON`` environment variable.
+++ /dev/null
-Realm configuration decisions
-=============================
-
-Before installing Kerberos V5, it is necessary to consider the
-following issues:
-
-* The name of your Kerberos realm (or the name of each realm, if you
- need more than one).
-* How you will assign your hostnames to Kerberos realms.
-* Which ports your KDC and and kadmind services will use, if they will
- not be using the default ports.
-* How many replica KDCs you need and where they should be located.
-* The hostnames of your primary and replica KDCs.
-* How frequently you will propagate the database from the primary KDC
- to the replica KDCs.
-
-
-Realm name
-----------
-
-Although your Kerberos realm can be any ASCII string, convention is to
-make it the same as your domain name, in upper-case letters.
-
-For example, hosts in the domain ``example.com`` would be in the
-Kerberos realm::
-
- EXAMPLE.COM
-
-If you need multiple Kerberos realms, MIT recommends that you use
-descriptive names which end with your domain name, such as::
-
- BOSTON.EXAMPLE.COM
- HOUSTON.EXAMPLE.COM
-
-
-.. _mapping_hostnames:
-
-Mapping hostnames onto Kerberos realms
---------------------------------------
-
-Mapping hostnames onto Kerberos realms is done in one of three ways.
-
-The first mechanism works through a set of rules in the
-:ref:`domain_realm` section of :ref:`krb5.conf(5)`. You can specify
-mappings for an entire domain or on a per-hostname basis. Typically
-you would do this by specifying the mappings for a given domain or
-subdomain and listing the exceptions.
-
-The second mechanism is to use KDC host-based service referrals. With
-this method, the KDC's krb5.conf has a full [domain_realm] mapping for
-hosts, but the clients do not, or have mappings for only a subset of
-the hosts they might contact. When a client needs to contact a server
-host for which it has no mapping, it will ask the client realm's KDC
-for the service ticket, and will receive a referral to the appropriate
-service realm.
-
-To use referrals, clients must be running MIT krb5 1.6 or later, and
-the KDC must be running MIT krb5 1.7 or later. The
-**host_based_services** and **no_host_referral** variables in the
-:ref:`kdc_realms` section of :ref:`kdc.conf(5)` can be used to
-fine-tune referral behavior on the KDC.
-
-It is also possible for clients to use DNS TXT records, if
-**dns_lookup_realm** is enabled in :ref:`krb5.conf(5)`. Such lookups
-are disabled by default because DNS is an insecure protocol and security
-holes could result if DNS records are spoofed. If enabled, the client
-will try to look up a TXT record formed by prepending the prefix
-``_kerberos`` to the hostname in question. If that record is not
-found, the client will attempt a lookup by prepending ``_kerberos`` to the
-host's domain name, then its parent domain, up to the top-level domain.
-For the hostname ``boston.engineering.example.com``, the names looked up
-would be::
-
- _kerberos.boston.engineering.example.com
- _kerberos.engineering.example.com
- _kerberos.example.com
- _kerberos.com
-
-The value of the first TXT record found is taken as the realm name.
-
-Even if you do not choose to use this mechanism within your site,
-you may wish to set it up anyway, for use when interacting with other sites.
-
-
-Ports for the KDC and admin services
-------------------------------------
-
-The default ports used by Kerberos are port 88 for the KDC and port
-749 for the admin server. You can, however, choose to run on other
-ports, as long as they are specified in each host's
-:ref:`krb5.conf(5)` files or in DNS SRV records, and the
-:ref:`kdc.conf(5)` file on each KDC. For a more thorough treatment of
-port numbers used by the Kerberos V5 programs, refer to the
-:ref:`conf_firewall`.
-
-
-Replica KDCs
-------------
-
-Replica KDCs provide an additional source of Kerberos ticket-granting
-services in the event of inaccessibility of the primary KDC. The
-number of replica KDCs you need and the decision of where to place them,
-both physically and logically, depends on the specifics of your
-network.
-
-Kerberos authentication requires that each client be able to contact a
-KDC. Therefore, you need to anticipate any likely reason a KDC might
-be unavailable and have a replica KDC to take up the slack.
-
-Some considerations include:
-
-* Have at least one replica KDC as a backup, for when the primary KDC
- is down, is being upgraded, or is otherwise unavailable.
-* If your network is split such that a network outage is likely to
- cause a network partition (some segment or segments of the network
- to become cut off or isolated from other segments), have a replica
- KDC accessible to each segment.
-* If possible, have at least one replica KDC in a different building
- from the primary, in case of power outages, fires, or other
- localized disasters.
-
-
-.. _kdc_hostnames:
-
-Hostnames for KDCs
-------------------
-
-MIT recommends that your KDCs have a predefined set of CNAME records
-(DNS hostname aliases), such as ``kerberos`` for the primary KDC and
-``kerberos-1``, ``kerberos-2``, ... for the replica KDCs. This way,
-if you need to swap a machine, you only need to change a DNS entry,
-rather than having to change hostnames.
-
-As of MIT krb5 1.4, clients can locate a realm's KDCs through DNS
-using SRV records (:rfc:`2782`), assuming the Kerberos realm name is
-also a DNS domain name. These records indicate the hostname and port
-number to contact for that service, optionally with weighting and
-prioritization. The domain name used in the SRV record name is the
-realm name. Several different Kerberos-related service names are
-used:
-
-_kerberos._udp
- This is for contacting any KDC by UDP. This entry will be used
- the most often. Normally you should list port 88 on each of your
- KDCs.
-_kerberos._tcp
- This is for contacting any KDC by TCP. Normally you should use
- port 88. This entry should be omitted if the KDC does not listen
- on TCP ports, as was the default prior to release 1.13.
-_kerberos-master._udp
- This entry should refer to those KDCs, if any, that will
- immediately see password changes to the Kerberos database. If a
- user is logging in and the password appears to be incorrect, the
- client will retry with the primary KDC before failing with an
- "incorrect password" error given.
-
- If you have only one KDC, or for whatever reason there is no
- accessible KDC that would get database changes faster than the
- others, you do not need to define this entry. _kerberos-adm._tcp
- This should list port 749 on your primary KDC. Support for it is
- not complete at this time, but it will eventually be used by the
- :ref:`kadmin(1)` program and related utilities. For now, you will
- also need the **admin_server** variable in :ref:`krb5.conf(5)`.
-_kerberos-master._tcp
- The corresponding TCP port for _kerberos-master._udp, assuming the
- primary KDC listens on a TCP port.
-_kpasswd._udp
- This entry should list port 464 on your primary KDC. It is used
- when a user changes her password. If this entry is not defined
- but a _kerberos-adm._tcp entry is defined, the client will use the
- _kerberos-adm._tcp entry with the port number changed to 464.
-_kpasswd._tcp
- The corresponding TCP port for _kpasswd._udp.
-
-The DNS SRV specification requires that the hostnames listed be the
-canonical names, not aliases. So, for example, you might include the
-following records in your (BIND-style) zone file::
-
- $ORIGIN foobar.com.
- _kerberos TXT "FOOBAR.COM"
- kerberos CNAME daisy
- kerberos-1 CNAME use-the-force-luke
- kerberos-2 CNAME bunny-rabbit
- _kerberos._udp SRV 0 0 88 daisy
- SRV 0 0 88 use-the-force-luke
- SRV 0 0 88 bunny-rabbit
- _kerberos-master._udp SRV 0 0 88 daisy
- _kerberos-adm._tcp SRV 0 0 749 daisy
- _kpasswd._udp SRV 0 0 464 daisy
-
-Clients can also be configured with the explicit location of services
-using the **kdc**, **master_kdc**, **admin_server**, and
-**kpasswd_server** variables in the :ref:`realms` section of
-:ref:`krb5.conf(5)`. Even if some clients will be configured with
-explicit server locations, providing SRV records will still benefit
-unconfigured clients, and be useful for other sites.
-
-
-.. _kdc_discovery:
-
-KDC Discovery
--------------
-
-As of MIT krb5 1.15, clients can also locate KDCs in DNS through URI
-records (:rfc:`7553`). Limitations with the SRV record format may
-result in extra DNS queries in situations where a client must failover
-to other transport types, or find a primary server. The URI record
-can convey more information about a realm's KDCs with a single query.
-
-The client performs a query for the following URI records:
-
-* ``_kerberos.REALM`` for finding KDCs.
-* ``_kerberos-adm.REALM`` for finding kadmin services.
-* ``_kpasswd.REALM`` for finding password services.
-
-The URI record includes a priority, weight, and a URI string that
-consists of case-insensitive colon separated fields, in the form
-``scheme:[flags]:transport:residual``.
-
-* *scheme* defines the registered URI type. It should always be
- ``krb5srv``.
-* *flags* contains zero or more flag characters. Currently the only
- valid flag is ``m``, which indicates that the record is for a
- primary server.
-* *transport* defines the transport type of the residual URL or
- address. Accepted values are ``tcp``, ``udp``, or ``kkdcp`` for the
- MS-KKDCP type.
-* *residual* contains the hostname, IP address, or URL to be
- contacted using the specified transport, with an optional port
- extension. The MS-KKDCP transport type uses a HTTPS URL, and can
- include a port and/or path extension.
-
-An example of URI records in a zone file::
-
- _kerberos.EXAMPLE.COM URI 10 1 krb5srv:m:tcp:kdc1.example.com
- URI 20 1 krb5srv:m:udp:kdc2.example.com:89
- URI 40 1 krb5srv::udp:10.10.0.23
- URI 30 1 krb5srv::kkdcp:https://proxy:89/auth
-
-URI lookups are enabled by default, and can be disabled by setting
-**dns_uri_lookup** in the :ref:`libdefaults` section of
-:ref:`krb5.conf(5)` to False. When enabled, URI lookups take
-precedence over SRV lookups, falling back to SRV lookups if no URI
-records are found.
-
-
-.. _db_prop:
-
-Database propagation
---------------------
-
-The Kerberos database resides on the primary KDC, and must be
-propagated regularly (usually by a cron job) to the replica KDCs. In
-deciding how frequently the propagation should happen, you will need
-to balance the amount of time the propagation takes against the
-maximum reasonable amount of time a user should have to wait for a
-password change to take effect.
-
-If the propagation time is longer than this maximum reasonable time
-(e.g., you have a particularly large database, you have a lot of
-replicas, or you experience frequent network delays), you may wish to
-cut down on your propagation delay by performing the propagation in
-parallel. To do this, have the primary KDC propagate the database to
-one set of replicas, and then have each of these replicas propagate
-the database to additional replicas.
-
-See also :ref:`incr_db_prop`
+++ /dev/null
-.. _spake:
-
-SPAKE Preauthentication
-=======================
-
-SPAKE preauthentication (added in release 1.17) uses public key
-cryptography techniques to protect against :ref:`password dictionary
-attacks <dictionary>`. Unlike :ref:`PKINIT <pkinit>`, it does not
-require any additional infrastructure such as certificates; it simply
-needs to be turned on. Using SPAKE preauthentication may modestly
-increase the CPU and network load on the KDC.
-
-SPAKE preauthentication can use one of four elliptic curve groups for
-its password-authenticated key exchange. The recommended group is
-``edwards25519``; three NIST curves (``P-256``, ``P-384``, and
-``P-521``) are also supported.
-
-By default, SPAKE with the ``edwards25519`` group is enabled on
-clients, but the KDC does not offer SPAKE by default. To turn it on,
-set the **spake_preauth_groups** variable in :ref:`libdefaults` to a
-list of allowed groups. This variable affects both the client and the
-KDC. Simply setting it to ``edwards25519`` is recommended::
-
- [libdefaults]
- spake_preauth_groups = edwards25519
-
-Set the **+requires_preauth** and **-allow_svr** flags on client
-principal entries, as you would for any preauthentication mechanism::
-
- kadmin: modprinc +requires_preauth -allow_svr PRINCNAME
-
-Clients which do not implement SPAKE preauthentication will fall back
-to encrypted timestamp.
-
-An active attacker can force a fallback to encrypted timestamp by
-modifying the initial KDC response, defeating the protection against
-dictionary attacks. To prevent this fallback on clients which do
-implement SPAKE preauthentication, set the
-**disable_encrypted_timestamp** variable to ``true`` in the
-:ref:`realms` subsection for realms whose KDCs offer SPAKE
-preauthentication.
-
-By default, SPAKE preauthentication requires an extra network round
-trip to the KDC during initial authentication. If most of the clients
-in a realm support SPAKE, this extra round trip can be eliminated
-using an optimistic challenge, by setting the
-**spake_preauth_kdc_challenge** variable in :ref:`kdcdefaults` to a
-single group name::
-
- [kdcdefaults]
- spake_preauth_kdc_challenge = edwards25519
-
-Using optimistic challenge will cause the KDC to do extra work for
-initial authentication requests that do not result in SPAKE
-preauthentication, but will save work when SPAKE preauthentication is
-used.
+++ /dev/null
-.. _troubleshoot:
-
-Troubleshooting
-===============
-
-.. _trace_logging:
-
-Trace logging
--------------
-
-Most programs using MIT krb5 1.9 or later can be made to provide
-information about internal krb5 library operations using trace
-logging. To enable this, set the **KRB5_TRACE** environment variable
-to a filename before running the program. On many operating systems,
-the filename ``/dev/stdout`` can be used to send trace logging output
-to standard output.
-
-Some programs do not honor **KRB5_TRACE**, either because they use
-secure library contexts (this generally applies to setuid programs and
-parts of the login system) or because they take direct control of the
-trace logging system using the API.
-
-Here is a short example showing trace logging output for an invocation
-of the :ref:`kvno(1)` command::
-
- shell% env KRB5_TRACE=/dev/stdout kvno krbtgt/KRBTEST.COM
- [9138] 1332348778.823276: Getting credentials user@KRBTEST.COM ->
- krbtgt/KRBTEST.COM@KRBTEST.COM using ccache
- FILE:/me/krb5/build/testdir/ccache
- [9138] 1332348778.823381: Retrieving user@KRBTEST.COM ->
- krbtgt/KRBTEST.COM@KRBTEST.COM from
- FILE:/me/krb5/build/testdir/ccache with result: 0/Unknown code 0
- krbtgt/KRBTEST.COM@KRBTEST.COM: kvno = 1
-
-
-List of errors
---------------
-
-Frequently seen errors
-~~~~~~~~~~~~~~~~~~~~~~
-
-#. :ref:`init_creds_ETYPE_NOSUPP`
-
-#. :ref:`cert_chain_ETYPE_NOSUPP`
-
-#. :ref:`err_cert_chain_cert_expired`
-
-
-Errors seen by admins
-~~~~~~~~~~~~~~~~~~~~~
-
-.. _prop_failed_start:
-
-#. :ref:`kprop_no_route`
-
-#. :ref:`kprop_con_refused`
-
-#. :ref:`kprop_sendauth_exchange`
-
-.. _prop_failed_end:
-
------
-
-.. _init_creds_etype_nosupp:
-
-KDC has no support for encryption type while getting initial credentials
-........................................................................
-
-.. _cert_chain_etype_nosupp:
-
-
-credential verification failed: KDC has no support for encryption type
-......................................................................
-
-This most commonly happens when trying to use a principal with only
-DES keys, in a release (MIT krb5 1.7 or later) which disables DES by
-default. DES encryption is considered weak due to its inadequate key
-size. If you cannot migrate away from its use, you can re-enable DES
-by adding ``allow_weak_crypto = true`` to the :ref:`libdefaults`
-section of :ref:`krb5.conf(5)`.
-
-
-.. _err_cert_chain_cert_expired:
-
-Cannot create cert chain: certificate has expired
-.................................................
-
-This error message indicates that PKINIT authentication failed because
-the client certificate, KDC certificate, or one of the certificates in
-the signing chain above them has expired.
-
-If the KDC certificate has expired, this message appears in the KDC
-log file, and the client will receive a "Preauthentication failed"
-error. (Prior to release 1.11, the KDC log file message erroneously
-appears as "Out of memory". Prior to release 1.12, the client will
-receive a "Generic error".)
-
-If the client or a signing certificate has expired, this message may
-appear in trace_logging_ output from :ref:`kinit(1)` or, starting in
-release 1.12, as an error message from kinit or another program which
-gets initial tickets. The error message is more likely to appear
-properly on the client if the principal entry has no long-term keys.
-
-.. _kprop_no_route:
-
-kprop: No route to host while connecting to server
-..................................................
-
-Make sure that the hostname of the replica KDC (as given to kprop) is
-correct, and that any firewalls between the primary and the replica
-allow a connection on port 754.
-
-.. _kprop_con_refused:
-
-kprop: Connection refused while connecting to server
-....................................................
-
-If the replica KDC is intended to run kpropd out of inetd, make sure
-that inetd is configured to accept krb5_prop connections. inetd may
-need to be restarted or sent a SIGHUP to recognize the new
-configuration. If the replica is intended to run kpropd in standalone
-mode, make sure that it is running.
-
-.. _kprop_sendauth_exchange:
-
-kprop: Server rejected authentication (during sendauth exchange) while authenticating to server
-...............................................................................................
-
-Make sure that:
-
-#. The time is synchronized between the primary and replica KDCs.
-#. The master stash file was copied from the primary to the expected
- location on the replica.
-#. The replica has a keytab file in the default location containing a
- ``host`` principal for the replica's hostname.
+++ /dev/null
-Various links
-=============
-
-Whitepapers
------------
-
-#. https://kerberos.org/software/whitepapers.html
-
-
-Tutorials
----------
-
-#. Fulvio Ricciardi <https://www.kerberos.org/software/tutorial.html>_
-
-
-Troubleshooting
----------------
-
-#. https://wiki.ncsa.illinois.edu/display/ITS/Windows+Kerberos+Troubleshooting
-
-#. https://www.shrubbery.net/solaris9ab/SUNWaadm/SYSADV6/p27.html
-
-#. https://docs.oracle.com/cd/E19253-01/816-4557/trouble-1/index.html
-
-#. https://docs.microsoft.com/en-us/previous-versions/tn-archive/bb463167(v=technet.10)#EBAA
-
-#. https://bugs.launchpad.net/ubuntu/+source/libpam-heimdal/+bug/86528
+++ /dev/null
-Developing with GSSAPI
-======================
-
-The GSSAPI (Generic Security Services API) allows applications to
-communicate securely using Kerberos 5 or other security mechanisms.
-We recommend using the GSSAPI (or a higher-level framework which
-encompasses GSSAPI, such as SASL) for secure network communication
-over using the libkrb5 API directly.
-
-GSSAPIv2 is specified in :rfc:`2743` and :rfc:`2744`. Also see
-:rfc:`7546` for a description of how to use the GSSAPI in a client or
-server program.
-
-This documentation will describe how various ways of using the
-GSSAPI will behave with the krb5 mechanism as implemented in MIT krb5,
-as well as krb5-specific extensions to the GSSAPI.
-
-
-Name types
-----------
-
-A GSSAPI application can name a local or remote entity by calling
-gss_import_name_, specifying a name type and a value. The following
-name types are supported by the krb5 mechanism:
-
-* **GSS_C_NT_HOSTBASED_SERVICE**: The value should be a string of the
- form ``service`` or ``service@hostname``. This is the most common
- way to name target services when initiating a security context, and
- is the most likely name type to work across multiple mechanisms.
-
-* **GSS_KRB5_NT_PRINCIPAL_NAME**: The value should be a principal name
- string. This name type only works with the krb5 mechanism, and is
- defined in the ``<gssapi/gssapi_krb5.h>`` header.
-
-* **GSS_C_NT_USER_NAME** or **GSS_C_NULL_OID**: The value is treated
- as an unparsed principal name string, as above. These name types
- may work with mechanisms other than krb5, but will have different
- interpretations in those mechanisms. **GSS_C_NT_USER_NAME** is
- intended to be used with a local username, which will parse into a
- single-component principal in the default realm.
-
-* **GSS_C_NT_ANONYMOUS**: The value is ignored. The anonymous
- principal is used, allowing a client to authenticate to a server
- without asserting a particular identity (which may or may not be
- allowed by a particular server or Kerberos realm).
-
-* **GSS_C_NT_MACHINE_UID_NAME**: The value is uid_t object. On
- Unix-like systems, the username of the uid is looked up in the
- system user database and the resulting username is parsed as a
- principal name.
-
-* **GSS_C_NT_STRING_UID_NAME**: As above, but the value is a decimal
- string representation of the uid.
-
-* **GSS_C_NT_EXPORT_NAME**: The value must be the result of a
- gss_export_name_ call.
-
-* **GSS_KRB5_NT_ENTERPRISE_NAME**: The value should be a krb5
- enterprise name string (see :rfc:`6806` section 5), in the form
- ``user@suffix``. This name type is used to convey alias names, and
- is defined in the ``<gssapi/gssapi_krb5.h>`` header. (New in
- release 1.17.)
-
-* **GSS_KRB5_NT_X509_CERT**: The value should be an X.509 certificate
- encoded according to :rfc:`5280`. This name form can be used for
- the desired_name parameter of gss_acquire_cred_impersonate_name(),
- to identify the S4U2Self user by certificate. (New in release
- 1.19.)
-
-
-Initiator credentials
----------------------
-
-A GSSAPI client application uses gss_init_sec_context_ to establish a
-security context. The *initiator_cred_handle* parameter determines
-what tickets are used to establish the connection. An application can
-either pass **GSS_C_NO_CREDENTIAL** to use the default client
-credential, or it can use gss_acquire_cred_ beforehand to acquire an
-initiator credential. The call to gss_acquire_cred_ may include a
-*desired_name* parameter, or it may pass **GSS_C_NO_NAME** if it does
-not have a specific name preference.
-
-If the desired name for a krb5 initiator credential is a host-based
-name, it is converted to a principal name of the form
-``service/hostname`` in the local realm, where *hostname* is the local
-hostname if not specified. The hostname will be canonicalized using
-forward name resolution, and possibly also using reverse name
-resolution depending on the value of the **rdns** variable in
-:ref:`libdefaults`.
-
-If a desired name is specified in the call to gss_acquire_cred_, the
-krb5 mechanism will attempt to find existing tickets for that client
-principal name in the default credential cache or collection. If the
-default cache type does not support a collection, and the default
-cache contains credentials for a different principal than the desired
-name, a **GSS_S_CRED_UNAVAIL** error will be returned with a minor
-code indicating a mismatch.
-
-If no existing tickets are available for the desired name, but the
-name has an entry in the default client :ref:`keytab_definition`, the
-krb5 mechanism will acquire initial tickets for the name using the
-default client keytab.
-
-If no desired name is specified, credential acquisition will be
-deferred until the credential is used in a call to
-gss_init_sec_context_ or gss_inquire_cred_. If the call is to
-gss_init_sec_context_, the target name will be used to choose a client
-principal name using the credential cache selection facility. (This
-facility might, for instance, try to choose existing tickets for a
-client principal in the same realm as the target service). If there
-are no existing tickets for the chosen principal, but it is present in
-the default client keytab, the krb5 mechanism will acquire initial
-tickets using the keytab.
-
-If the target name cannot be used to select a client principal
-(because the credentials are used in a call to gss_inquire_cred_), or
-if the credential cache selection facility cannot choose a principal
-for it, the default credential cache will be selected if it exists and
-contains tickets.
-
-If the default credential cache does not exist, but the default client
-keytab does, the krb5 mechanism will try to acquire initial tickets
-for the first principal in the default client keytab.
-
-If the krb5 mechanism acquires initial tickets using the default
-client keytab, the resulting tickets will be stored in the default
-cache or collection, and will be refreshed by future calls to
-gss_acquire_cred_ as they approach their expire time.
-
-
-Acceptor names
---------------
-
-A GSSAPI server application uses gss_accept_sec_context_ to establish
-a security context based on tokens provided by the client. The
-*acceptor_cred_handle* parameter determines what
-:ref:`keytab_definition` entries may be authenticated to by the
-client, if the krb5 mechanism is used.
-
-The simplest choice is to pass **GSS_C_NO_CREDENTIAL** as the acceptor
-credential. In this case, clients may authenticate to any service
-principal in the default keytab (typically |keytab|, or the value of
-the **KRB5_KTNAME** environment variable). This is the recommended
-approach if the server application has no specific requirements to the
-contrary.
-
-A server may acquire an acceptor credential with gss_acquire_cred_ and
-a *cred_usage* of **GSS_C_ACCEPT** or **GSS_C_BOTH**. If the
-*desired_name* parameter is **GSS_C_NO_NAME**, then clients will be
-allowed to authenticate to any service principal in the default
-keytab, just as if no acceptor credential was supplied.
-
-If a server wishes to specify a *desired_name* to gss_acquire_cred_,
-the most common choice is a host-based name. If the host-based
-*desired_name* contains just a *service*, then clients will be allowed
-to authenticate to any host-based service principal (that is, a
-principal of the form ``service/hostname@REALM``) for the named
-service, regardless of hostname or realm, as long as it is present in
-the default keytab. If the input name contains both a *service* and a
-*hostname*, clients will be allowed to authenticate to any host-based
-principal for the named service and hostname, regardless of realm.
-
-.. note::
-
- If a *hostname* is specified, it will be canonicalized
- using forward name resolution, and possibly also using
- reverse name resolution depending on the value of the
- **rdns** variable in :ref:`libdefaults`.
-
-.. note::
-
- If the **ignore_acceptor_hostname** variable in
- :ref:`libdefaults` is enabled, then *hostname* will be
- ignored even if one is specified in the input name.
-
-.. note::
-
- In MIT krb5 versions prior to 1.10, and in Heimdal's
- implementation of the krb5 mechanism, an input name with
- just a *service* is treated like an input name of
- ``service@localhostname``, where *localhostname* is the
- string returned by gethostname().
-
-If the *desired_name* is a krb5 principal name or a local system name
-type which is mapped to a krb5 principal name, clients will only be
-allowed to authenticate to that principal in the default keytab.
-
-
-Name Attributes
----------------
-
-In release 1.8 or later, the gss_inquire_name_ and
-gss_get_name_attribute_ functions, specified in :rfc:`6680`, can be
-used to retrieve name attributes from the *src_name* returned by
-gss_accept_sec_context_. The following attributes are defined when
-the krb5 mechanism is used:
-
-.. _gssapi_authind_attr:
-
-* "auth-indicators" attribute:
-
-This attribute will be included in the gss_inquire_name_ output if the
-ticket contains :ref:`authentication indicators <auth_indicator>`.
-One indicator is returned per invocation of gss_get_name_attribute_,
-so multiple invocations may be necessary to retrieve all of the
-indicators from the ticket. (New in release 1.15.)
-
-
-Credential store extensions
----------------------------
-
-Beginning with release 1.11, the following GSSAPI extensions declared
-in ``<gssapi/gssapi_ext.h>`` can be used to specify how credentials
-are acquired or stored::
-
- struct gss_key_value_element_struct {
- const char *key;
- const char *value;
- };
- typedef struct gss_key_value_element_struct gss_key_value_element_desc;
-
- struct gss_key_value_set_struct {
- OM_uint32 count;
- gss_key_value_element_desc *elements;
- };
- typedef const struct gss_key_value_set_struct gss_key_value_set_desc;
- typedef const gss_key_value_set_desc *gss_const_key_value_set_t;
-
- OM_uint32 gss_acquire_cred_from(OM_uint32 *minor_status,
- const gss_name_t desired_name,
- OM_uint32 time_req,
- const gss_OID_set desired_mechs,
- gss_cred_usage_t cred_usage,
- gss_const_key_value_set_t cred_store,
- gss_cred_id_t *output_cred_handle,
- gss_OID_set *actual_mechs,
- OM_uint32 *time_rec);
-
- OM_uint32 gss_store_cred_into(OM_uint32 *minor_status,
- gss_cred_id_t input_cred_handle,
- gss_cred_usage_t cred_usage,
- const gss_OID desired_mech,
- OM_uint32 overwrite_cred,
- OM_uint32 default_cred,
- gss_const_key_value_set_t cred_store,
- gss_OID_set *elements_stored,
- gss_cred_usage_t *cred_usage_stored);
-
-The additional *cred_store* parameter allows the caller to specify
-information about how the credentials should be obtained and stored.
-The following options are supported by the krb5 mechanism:
-
-* **ccache**: For acquiring initiator credentials, the name of the
- :ref:`credential cache <ccache_definition>` to which the handle will
- refer. For storing credentials, the name of the cache or collection
- where the credentials will be stored (see below).
-
-* **client_keytab**: For acquiring initiator credentials, the name of
- the :ref:`keytab <keytab_definition>` which will be used, if
- necessary, to refresh the credentials in the cache.
-
-* **keytab**: For acquiring acceptor credentials, the name of the
- :ref:`keytab <keytab_definition>` to which the handle will refer.
- In release 1.19 and later, this option also determines the keytab to
- be used for verification when initiator credentials are acquired
- using a password and verified.
-
-* **password**: For acquiring initiator credentials, this option
- instructs the mechanism to acquire fresh credentials into a unique
- memory credential cache. This option may not be used with the
- **ccache** or **client_keytab** options, and a *desired_name* must
- be specified. (New in release 1.19.)
-
-* **rcache**: For acquiring acceptor credentials, the name of the
- :ref:`replay cache <rcache_definition>` to be used when processing
- the initiator tokens. (New in release 1.13.)
-
-* **verify**: For acquiring initiator credentials, this option
- instructs the mechanism to verify the credentials by obtaining a
- ticket to a service with a known key. The service key is obtained
- from the keytab specified with the **keytab** option or the default
- keytab. The value may be the name of a principal in the keytab, or
- the empty string. If the empty string is given, any ``host``
- service principal in the keytab may be used. (New in release 1.19.)
-
-In release 1.20 or later, if a collection name is specified for
-**cache** in a call to gss_store_cred_into(), an existing cache for
-the client principal within the collection will be selected, or a new
-cache will be created within the collection. If *overwrite_cred* is
-false and the selected credential cache already exists, a
-**GSS_S_DUPLICATE_ELEMENT** error will be returned. If *default_cred*
-is true, the primary cache of the collection will be switched to the
-selected cache.
-
-
-Importing and exporting credentials
------------------------------------
-
-The following GSSAPI extensions can be used to import and export
-credentials (declared in ``<gssapi/gssapi_ext.h>``)::
-
- OM_uint32 gss_export_cred(OM_uint32 *minor_status,
- gss_cred_id_t cred_handle,
- gss_buffer_t token);
-
- OM_uint32 gss_import_cred(OM_uint32 *minor_status,
- gss_buffer_t token,
- gss_cred_id_t *cred_handle);
-
-The first function serializes a GSSAPI credential handle into a
-buffer; the second unseralizes a buffer into a GSSAPI credential
-handle. Serializing a credential does not destroy it. If any of the
-mechanisms used in *cred_handle* do not support serialization,
-gss_export_cred will return **GSS_S_UNAVAILABLE**. As with other
-GSSAPI serialization functions, these extensions are only intended to
-work with a matching implementation on the other side; they do not
-serialize credentials in a standardized format.
-
-A serialized credential may contain secret information such as ticket
-session keys. The serialization format does not protect this
-information from eavesdropping or tampering. The calling application
-must take care to protect the serialized credential when communicating
-it over an insecure channel or to an untrusted party.
-
-A krb5 GSSAPI credential may contain references to a credential cache,
-a client keytab, an acceptor keytab, and a replay cache. These
-resources are normally serialized as references to their external
-locations (such as the filename of the credential cache). Because of
-this, a serialized krb5 credential can only be imported by a process
-with similar privileges to the exporter. A serialized credential
-should not be trusted if it originates from a source with lower
-privileges than the importer, as it may contain references to external
-credential cache, keytab, or replay cache resources not accessible to
-the originator.
-
-An exception to the above rule applies when a krb5 GSSAPI credential
-refers to a memory credential cache, as is normally the case for
-delegated credentials received by gss_accept_sec_context_. In this
-case, the contents of the credential cache are serialized, so that the
-resulting token may be imported even if the original memory credential
-cache no longer exists.
-
-
-Constrained delegation (S4U)
-----------------------------
-
-The Microsoft S4U2Self and S4U2Proxy Kerberos protocol extensions
-allow an intermediate service to acquire credentials from a client to
-a target service without requiring the client to delegate a
-ticket-granting ticket, if the KDC is configured to allow it.
-
-To perform a constrained delegation operation, the intermediate
-service must submit to the KDC an "evidence ticket" from the client to
-the intermediate service. An evidence ticket can be acquired when the
-client authenticates to the intermediate service with Kerberos, or
-with an S4U2Self request if the KDC allows it. The MIT krb5 GSSAPI
-library represents an evidence ticket using a "proxy credential",
-which is a special kind of gss_cred_id_t object whose underlying
-credential cache contains the evidence ticket and a krbtgt ticket for
-the intermediate service.
-
-To acquire a proxy credential during client authentication, the
-service should first create an acceptor credential using the
-**GSS_C_BOTH** usage. The application should then pass this
-credential as the *acceptor_cred_handle* to gss_accept_sec_context_,
-and also pass a *delegated_cred_handle* output parameter to receive a
-proxy credential containing the evidence ticket. The output value of
-*delegated_cred_handle* may be a delegated ticket-granting ticket if
-the client sent one, or a proxy credential if not. If the library can
-determine that the client's ticket is not a valid evidence ticket, it
-will place **GSS_C_NO_CREDENTIAL** in *delegated_cred_handle*.
-
-To acquire a proxy credential using an S4U2Self request, the service
-can use the following GSSAPI extension::
-
- OM_uint32 gss_acquire_cred_impersonate_name(OM_uint32 *minor_status,
- gss_cred_id_t icred,
- gss_name_t desired_name,
- OM_uint32 time_req,
- gss_OID_set desired_mechs,
- gss_cred_usage_t cred_usage,
- gss_cred_id_t *output_cred,
- gss_OID_set *actual_mechs,
- OM_uint32 *time_rec);
-
-The parameters to this function are similar to those of
-gss_acquire_cred_, except that *icred* is used to make an S4U2Self
-request to the KDC for a ticket from *desired_name* to the
-intermediate service. Both *icred* and *desired_name* are required
-for this function; passing **GSS_C_NO_CREDENTIAL** or
-**GSS_C_NO_NAME** will cause the call to fail. *icred* must contain a
-krbtgt ticket for the intermediate service. The result of this
-operation is a proxy credential. (Prior to release 1.18, the result
-of this operation may be a regular credential for *desired_name*, if
-the KDC issues a non-forwardable ticket.)
-
-Once the intermediate service has a proxy credential, it can simply
-pass it to gss_init_sec_context_ as the *initiator_cred_handle*
-parameter, and the desired service as the *target_name* parameter.
-The GSSAPI library will present the krbtgt ticket and evidence ticket
-in the proxy credential to the KDC in an S4U2Proxy request; if the
-intermediate service has the appropriate permissions, the KDC will
-issue a ticket from the client to the target service. The GSSAPI
-library will then use this ticket to authenticate to the target
-service.
-
-If an application needs to find out whether a credential it holds is a
-proxy credential and the name of the intermediate service, it can
-query the credential with the **GSS_KRB5_GET_CRED_IMPERSONATOR** OID
-(new in release 1.16, declared in ``<gssapi/gssapi_krb5.h>``) using
-the gss_inquire_cred_by_oid extension (declared in
-``<gssapi/gssapi_ext.h>``)::
-
- OM_uint32 gss_inquire_cred_by_oid(OM_uint32 *minor_status,
- const gss_cred_id_t cred_handle,
- gss_OID desired_object,
- gss_buffer_set_t *data_set);
-
-If the call succeeds and *cred_handle* is a proxy credential,
-*data_set* will be set to a single-element buffer set containing the
-unparsed principal name of the intermediate service. If *cred_handle*
-is not a proxy credential, *data_set* will be set to an empty buffer
-set. If the library does not support the query,
-gss_inquire_cred_by_oid will return **GSS_S_UNAVAILABLE**.
-
-
-AEAD message wrapping
----------------------
-
-The following GSSAPI extensions (declared in
-``<gssapi/gssapi_ext.h>``) can be used to wrap and unwrap messages
-with additional "associated data" which is integrity-checked but is
-not included in the output buffer::
-
- OM_uint32 gss_wrap_aead(OM_uint32 *minor_status,
- gss_ctx_id_t context_handle,
- int conf_req_flag, gss_qop_t qop_req,
- gss_buffer_t input_assoc_buffer,
- gss_buffer_t input_payload_buffer,
- int *conf_state,
- gss_buffer_t output_message_buffer);
-
- OM_uint32 gss_unwrap_aead(OM_uint32 *minor_status,
- gss_ctx_id_t context_handle,
- gss_buffer_t input_message_buffer,
- gss_buffer_t input_assoc_buffer,
- gss_buffer_t output_payload_buffer,
- int *conf_state,
- gss_qop_t *qop_state);
-
-Wrap tokens created with gss_wrap_aead will successfully unwrap only
-if the same *input_assoc_buffer* contents are presented to
-gss_unwrap_aead.
-
-
-IOV message wrapping
---------------------
-
-The following extensions (declared in ``<gssapi/gssapi_ext.h>``) can
-be used for in-place encryption, fine-grained control over wrap token
-layout, and for constructing wrap tokens compatible with Microsoft DCE
-RPC::
-
- typedef struct gss_iov_buffer_desc_struct {
- OM_uint32 type;
- gss_buffer_desc buffer;
- } gss_iov_buffer_desc, *gss_iov_buffer_t;
-
- OM_uint32 gss_wrap_iov(OM_uint32 *minor_status,
- gss_ctx_id_t context_handle,
- int conf_req_flag, gss_qop_t qop_req,
- int *conf_state,
- gss_iov_buffer_desc *iov, int iov_count);
-
- OM_uint32 gss_unwrap_iov(OM_uint32 *minor_status,
- gss_ctx_id_t context_handle,
- int *conf_state, gss_qop_t *qop_state,
- gss_iov_buffer_desc *iov, int iov_count);
-
- OM_uint32 gss_wrap_iov_length(OM_uint32 *minor_status,
- gss_ctx_id_t context_handle,
- int conf_req_flag,
- gss_qop_t qop_req, int *conf_state,
- gss_iov_buffer_desc *iov,
- int iov_count);
-
- OM_uint32 gss_release_iov_buffer(OM_uint32 *minor_status,
- gss_iov_buffer_desc *iov,
- int iov_count);
-
-The caller of gss_wrap_iov provides an array of gss_iov_buffer_desc
-structures, each containing a type and a gss_buffer_desc structure.
-Valid types include:
-
-* **GSS_C_BUFFER_TYPE_DATA**: A data buffer to be included in the
- token, and to be encrypted or decrypted in-place if the token is
- confidentiality-protected.
-
-* **GSS_C_BUFFER_TYPE_HEADER**: The GSSAPI wrap token header and
- underlying cryptographic header.
-
-* **GSS_C_BUFFER_TYPE_TRAILER**: The cryptographic trailer, if one is
- required.
-
-* **GSS_C_BUFFER_TYPE_PADDING**: Padding to be combined with the data
- during encryption and decryption. (The implementation may choose to
- place padding in the trailer buffer, in which case it will set the
- padding buffer length to 0.)
-
-* **GSS_C_BUFFER_TYPE_STREAM**: For unwrapping only, a buffer
- containing a complete wrap token in standard format to be unwrapped.
-
-* **GSS_C_BUFFER_TYPE_SIGN_ONLY**: A buffer to be included in the
- token's integrity protection checksum, but not to be encrypted or
- included in the token itself.
-
-For gss_wrap_iov, the IOV list should contain one HEADER buffer,
-followed by zero or more SIGN_ONLY buffers, followed by one or more
-DATA buffers, followed by a TRAILER buffer. The memory pointed to by
-the buffers is not required to be contiguous or in any particular
-order. If *conf_req_flag* is true, DATA buffers will be encrypted
-in-place, while SIGN_ONLY buffers will not be modified.
-
-The type of an output buffer may be combined with
-**GSS_C_BUFFER_FLAG_ALLOCATE** to request that gss_wrap_iov allocate
-the buffer contents. If gss_wrap_iov allocates a buffer, it sets the
-**GSS_C_BUFFER_FLAG_ALLOCATED** flag on the buffer type.
-gss_release_iov_buffer can be used to release all allocated buffers
-within an iov list and unset their allocated flags. Here is an
-example of how gss_wrap_iov can be used with allocation requested
-(*ctx* is assumed to be a previously established gss_ctx_id_t)::
-
- OM_uint32 major, minor;
- gss_iov_buffer_desc iov[4];
- char str[] = "message";
-
- iov[0].type = GSS_IOV_BUFFER_TYPE_HEADER | GSS_IOV_BUFFER_FLAG_ALLOCATE;
- iov[1].type = GSS_IOV_BUFFER_TYPE_DATA;
- iov[1].buffer.value = str;
- iov[1].buffer.length = strlen(str);
- iov[2].type = GSS_IOV_BUFFER_TYPE_PADDING | GSS_IOV_BUFFER_FLAG_ALLOCATE;
- iov[3].type = GSS_IOV_BUFFER_TYPE_TRAILER | GSS_IOV_BUFFER_FLAG_ALLOCATE;
-
- major = gss_wrap_iov(&minor, ctx, 1, GSS_C_QOP_DEFAULT, NULL,
- iov, 4);
- if (GSS_ERROR(major))
- handle_error(major, minor);
-
- /* Transmit or otherwise use resulting buffers. */
-
- (void)gss_release_iov_buffer(&minor, iov, 4);
-
-If the caller does not choose to request buffer allocation by
-gss_wrap_iov, it should first call gss_wrap_iov_length to query the
-lengths of the HEADER, PADDING, and TRAILER buffers. DATA buffers
-must be provided in the iov list so that padding length can be
-computed correctly, but the output buffers need not be initialized.
-Here is an example of using gss_wrap_iov_length and gss_wrap_iov::
-
- OM_uint32 major, minor;
- gss_iov_buffer_desc iov[4];
- char str[1024] = "message", *ptr;
-
- iov[0].type = GSS_IOV_BUFFER_TYPE_HEADER;
- iov[1].type = GSS_IOV_BUFFER_TYPE_DATA;
- iov[1].buffer.value = str;
- iov[1].buffer.length = strlen(str);
-
- iov[2].type = GSS_IOV_BUFFER_TYPE_PADDING;
- iov[3].type = GSS_IOV_BUFFER_TYPE_TRAILER;
-
- major = gss_wrap_iov_length(&minor, ctx, 1, GSS_C_QOP_DEFAULT,
- NULL, iov, 4);
- if (GSS_ERROR(major))
- handle_error(major, minor);
- if (strlen(str) + iov[0].buffer.length + iov[2].buffer.length +
- iov[3].buffer.length > sizeof(str))
- handle_out_of_space_error();
- ptr = str + strlen(str);
- iov[0].buffer.value = ptr;
- ptr += iov[0].buffer.length;
- iov[2].buffer.value = ptr;
- ptr += iov[2].buffer.length;
- iov[3].buffer.value = ptr;
-
- major = gss_wrap_iov(&minor, ctx, 1, GSS_C_QOP_DEFAULT, NULL,
- iov, 4);
- if (GSS_ERROR(major))
- handle_error(major, minor);
-
-If the context was established using the **GSS_C_DCE_STYLE** flag
-(described in :rfc:`4757`), wrap tokens compatible with Microsoft DCE
-RPC can be constructed. In this case, the IOV list must include a
-SIGN_ONLY buffer, a DATA buffer, a second SIGN_ONLY buffer, and a
-HEADER buffer in that order (the order of the buffer contents remains
-arbitrary). The application must pad the DATA buffer to a multiple of
-16 bytes as no padding or trailer buffer is used.
-
-gss_unwrap_iov may be called with an IOV list just like one which
-would be provided to gss_wrap_iov. DATA buffers will be decrypted
-in-place if they were encrypted, and SIGN_ONLY buffers will not be
-modified.
-
-Alternatively, gss_unwrap_iov may be called with a single STREAM
-buffer, zero or more SIGN_ONLY buffers, and a single DATA buffer. The
-STREAM buffer is interpreted as a complete wrap token. The STREAM
-buffer will be modified in-place to decrypt its contents. The DATA
-buffer will be initialized to point to the decrypted data within the
-STREAM buffer, unless it has the **GSS_C_BUFFER_FLAG_ALLOCATE** flag
-set, in which case it will be initialized with a copy of the decrypted
-data. Here is an example (*token* and *token_len* are assumed to be a
-pre-existing pointer and length for a modifiable region of data)::
-
- OM_uint32 major, minor;
- gss_iov_buffer_desc iov[2];
-
- iov[0].type = GSS_IOV_BUFFER_TYPE_STREAM;
- iov[0].buffer.value = token;
- iov[0].buffer.length = token_len;
- iov[1].type = GSS_IOV_BUFFER_TYPE_DATA;
- major = gss_unwrap_iov(&minor, ctx, NULL, NULL, iov, 2);
- if (GSS_ERROR(major))
- handle_error(major, minor);
-
- /* Decrypted data is in iov[1].buffer, pointing to a subregion of
- * token. */
-
-.. _gssapi_mic_token:
-
-IOV MIC tokens
---------------
-
-The following extensions (declared in ``<gssapi/gssapi_ext.h>``) can
-be used in release 1.12 or later to construct and verify MIC tokens
-using an IOV list::
-
- OM_uint32 gss_get_mic_iov(OM_uint32 *minor_status,
- gss_ctx_id_t context_handle,
- gss_qop_t qop_req,
- gss_iov_buffer_desc *iov,
- int iov_count);
-
- OM_uint32 gss_get_mic_iov_length(OM_uint32 *minor_status,
- gss_ctx_id_t context_handle,
- gss_qop_t qop_req,
- gss_iov_buffer_desc *iov,
- iov_count);
-
- OM_uint32 gss_verify_mic_iov(OM_uint32 *minor_status,
- gss_ctx_id_t context_handle,
- gss_qop_t *qop_state,
- gss_iov_buffer_desc *iov,
- int iov_count);
-
-The caller of gss_get_mic_iov provides an array of gss_iov_buffer_desc
-structures, each containing a type and a gss_buffer_desc structure.
-Valid types include:
-
-* **GSS_C_BUFFER_TYPE_DATA** and **GSS_C_BUFFER_TYPE_SIGN_ONLY**: The
- corresponding buffer for each of these types will be signed for the
- MIC token, in the order provided.
-
-* **GSS_C_BUFFER_TYPE_MIC_TOKEN**: The GSSAPI MIC token.
-
-The type of the MIC_TOKEN buffer may be combined with
-**GSS_C_BUFFER_FLAG_ALLOCATE** to request that gss_get_mic_iov
-allocate the buffer contents. If gss_get_mic_iov allocates the
-buffer, it sets the **GSS_C_BUFFER_FLAG_ALLOCATED** flag on the buffer
-type. gss_release_iov_buffer can be used to release all allocated
-buffers within an iov list and unset their allocated flags. Here is
-an example of how gss_get_mic_iov can be used with allocation
-requested (*ctx* is assumed to be a previously established
-gss_ctx_id_t)::
-
- OM_uint32 major, minor;
- gss_iov_buffer_desc iov[3];
-
- iov[0].type = GSS_IOV_BUFFER_TYPE_DATA;
- iov[0].buffer.value = "sign1";
- iov[0].buffer.length = 5;
- iov[1].type = GSS_IOV_BUFFER_TYPE_SIGN_ONLY;
- iov[1].buffer.value = "sign2";
- iov[1].buffer.length = 5;
- iov[2].type = GSS_IOV_BUFFER_TYPE_MIC_TOKEN | GSS_IOV_BUFFER_FLAG_ALLOCATE;
-
- major = gss_get_mic_iov(&minor, ctx, GSS_C_QOP_DEFAULT, iov, 3);
- if (GSS_ERROR(major))
- handle_error(major, minor);
-
- /* Transmit or otherwise use iov[2].buffer. */
-
- (void)gss_release_iov_buffer(&minor, iov, 3);
-
-If the caller does not choose to request buffer allocation by
-gss_get_mic_iov, it should first call gss_get_mic_iov_length to query
-the length of the MIC_TOKEN buffer. Here is an example of using
-gss_get_mic_iov_length and gss_get_mic_iov::
-
- OM_uint32 major, minor;
- gss_iov_buffer_desc iov[2];
- char data[1024];
-
- iov[0].type = GSS_IOV_BUFFER_TYPE_MIC_TOKEN;
- iov[1].type = GSS_IOV_BUFFER_TYPE_DATA;
- iov[1].buffer.value = "message";
- iov[1].buffer.length = 7;
-
- major = gss_get_mic_iov_length(&minor, ctx, GSS_C_QOP_DEFAULT, iov, 2);
- if (GSS_ERROR(major))
- handle_error(major, minor);
- if (iov[0].buffer.length > sizeof(data))
- handle_out_of_space_error();
- iov[0].buffer.value = data;
-
- major = gss_get_mic_iov(&minor, ctx, GSS_C_QOP_DEFAULT, iov, 2);
- if (GSS_ERROR(major))
- handle_error(major, minor);
-
-
-.. _gss_accept_sec_context: https://tools.ietf.org/html/rfc2744.html#section-5.1
-.. _gss_acquire_cred: https://tools.ietf.org/html/rfc2744.html#section-5.2
-.. _gss_export_name: https://tools.ietf.org/html/rfc2744.html#section-5.13
-.. _gss_get_name_attribute: https://tools.ietf.org/html/6680.html#section-7.5
-.. _gss_import_name: https://tools.ietf.org/html/rfc2744.html#section-5.16
-.. _gss_init_sec_context: https://tools.ietf.org/html/rfc2744.html#section-5.19
-.. _gss_inquire_name: https://tools.ietf.org/html/rfc6680.txt#section-7.4
-.. _gss_inquire_cred: https://tools.ietf.org/html/rfc2744.html#section-5.21
+++ /dev/null
-Differences between Heimdal and MIT Kerberos API
-================================================
-
-.. tabularcolumns:: |l|l|
-
-.. table::
-
- ======================================== =================================================
- :c:func:`krb5_auth_con_getaddrs()` H5l: If either of the pointers to local_addr
- and remote_addr is not NULL, it is freed
- first and then reallocated before being
- populated with the content of corresponding
- address from authentication context.
- :c:func:`krb5_auth_con_setaddrs()` H5l: If either address is NULL, the previous
- address remains in place
- :c:func:`krb5_auth_con_setports()` H5l: Not implemented as of version 1.3.3
- :c:func:`krb5_auth_con_setrecvsubkey()` H5l: If either port is NULL, the previous
- port remains in place
- :c:func:`krb5_auth_con_setsendsubkey()` H5l: Not implemented as of version 1.3.3
- :c:func:`krb5_cc_set_config()` MIT: Before version 1.10 it was assumed that
- the last argument *data* is ALWAYS non-zero.
- :c:func:`krb5_cccol_last_change_time()` MIT: not implemented
- :c:func:`krb5_set_default_realm()` H5l: Caches the computed default realm context
- field. If the second argument is NULL,
- it tries to retrieve it from libdefaults or DNS.
- MIT: Computes the default realm each time
- if it wasn't explicitly set in the context
- ======================================== =================================================
+++ /dev/null
-For application developers
-==========================
-
-.. toctree::
- :maxdepth: 1
-
- gssapi.rst
- y2038.rst
- h5l_mit_apidiff.rst
- init_creds.rst
- princ_handle.rst
-
-.. toctree::
- :maxdepth: 1
-
- refs/index.rst
+++ /dev/null
-Initial credentials
-===================
-
-Software that performs tasks such as logging users into a computer
-when they type their Kerberos password needs to get initial
-credentials (usually ticket granting tickets) from Kerberos. Such
-software shares some behavior with the :ref:`kinit(1)` program.
-
-Whenever a program grants access to a resource (such as a local login
-session on a desktop computer) based on a user successfully getting
-initial Kerberos credentials, it must verify those credentials against
-a secure shared secret (e.g., a host keytab) to ensure that the user
-credentials actually originate from a legitimate KDC. Failure to
-perform this verification is a critical vulnerability, because a
-malicious user can execute the "Zanarotti attack": the user constructs
-a fake response that appears to come from the legitimate KDC, but
-whose contents come from an attacker-controlled KDC.
-
-Some applications read a Kerberos password over the network (ideally
-over a secure channel), which they then verify against the KDC. While
-this technique may be the only practical way to integrate Kerberos
-into some existing legacy systems, its use is contrary to the original
-design goals of Kerberos.
-
-The function :c:func:`krb5_get_init_creds_password` will get initial
-credentials for a client using a password. An application that needs
-to verify the credentials can call :c:func:`krb5_verify_init_creds`.
-Here is an example of code to obtain and verify TGT credentials, given
-strings *princname* and *password* for the client principal name and
-password::
-
- krb5_error_code ret;
- krb5_creds creds;
- krb5_principal client_princ = NULL;
-
- memset(&creds, 0, sizeof(creds));
- ret = krb5_parse_name(context, princname, &client_princ);
- if (ret)
- goto cleanup;
- ret = krb5_get_init_creds_password(context, &creds, client_princ,
- password, NULL, NULL, 0, NULL, NULL);
- if (ret)
- goto cleanup;
- ret = krb5_verify_init_creds(context, &creds, NULL, NULL, NULL, NULL);
-
- cleanup:
- krb5_free_principal(context, client_princ);
- krb5_free_cred_contents(context, &creds);
- return ret;
-
-Options for get_init_creds
---------------------------
-
-The function :c:func:`krb5_get_init_creds_password` takes an options
-parameter (which can be a null pointer). Use the function
-:c:func:`krb5_get_init_creds_opt_alloc` to allocate an options
-structure, and :c:func:`krb5_get_init_creds_opt_free` to free it. For
-example::
-
- krb5_error_code ret;
- krb5_get_init_creds_opt *opt = NULL;
- krb5_creds creds;
-
- memset(&creds, 0, sizeof(creds));
- ret = krb5_get_init_creds_opt_alloc(context, &opt);
- if (ret)
- goto cleanup;
- krb5_get_init_creds_opt_set_tkt_life(opt, 24 * 60 * 60);
- ret = krb5_get_init_creds_password(context, &creds, client_princ,
- password, NULL, NULL, 0, NULL, opt);
- if (ret)
- goto cleanup;
-
- cleanup:
- krb5_get_init_creds_opt_free(context, opt);
- krb5_free_cred_contents(context, &creds);
- return ret;
-
-Getting anonymous credentials
------------------------------
-
-As of release 1.8, it is possible to obtain fully anonymous or
-partially anonymous (realm-exposed) credentials, if the KDC supports
-it. The MIT KDC supports issuing fully anonymous credentials as of
-release 1.8 if configured appropriately (see :ref:`anonymous_pkinit`),
-but does not support issuing realm-exposed anonymous credentials at
-this time.
-
-To obtain fully anonymous credentials, call
-:c:func:`krb5_get_init_creds_opt_set_anonymous` on the options
-structure to set the anonymous flag, and specify a client principal
-with the KDC's realm and a single empty data component (the principal
-obtained by parsing ``@``\ *realmname*). Authentication will take
-place using anonymous PKINIT; if successful, the client principal of
-the resulting tickets will be
-``WELLKNOWN/ANONYMOUS@WELLKNOWN:ANONYMOUS``. Here is an example::
-
- krb5_get_init_creds_opt_set_anonymous(opt, 1);
- ret = krb5_build_principal(context, &client_princ, strlen(myrealm),
- myrealm, "", (char *)NULL);
- if (ret)
- goto cleanup;
- ret = krb5_get_init_creds_password(context, &creds, client_princ,
- password, NULL, NULL, 0, NULL, opt);
- if (ret)
- goto cleanup;
-
-To obtain realm-exposed anonymous credentials, set the anonymous flag
-on the options structure as above, but specify a normal client
-principal in order to prove membership in the realm. Authentication
-will take place as it normally does; if successful, the client
-principal of the resulting tickets will be ``WELLKNOWN/ANONYMOUS@``\
-*realmname*.
-
-User interaction
-----------------
-
-Authenticating a user usually requires the entry of secret
-information, such as a password. A password can be supplied directly
-to :c:func:`krb5_get_init_creds_password` via the *password*
-parameter, or the application can supply prompter and/or responder
-callbacks instead. If callbacks are used, the user can also be
-queried for other secret information such as a PIN, informed of
-impending password expiration, or prompted to change a password which
-has expired.
-
-Prompter callback
-~~~~~~~~~~~~~~~~~
-
-A prompter callback can be specified via the *prompter* and *data*
-parameters to :c:func:`krb5_get_init_creds_password`. The prompter
-will be invoked each time the krb5 library has a question to ask or
-information to present. When the prompter callback is invoked, the
-*banner* argument (if not null) is intended to be displayed to the
-user, and the questions to be answered are specified in the *prompts*
-array. Each prompt contains a text question in the *prompt* field, a
-*hidden* bit to indicate whether the answer should be hidden from
-display, and a storage area for the answer in the *reply* field. The
-callback should fill in each question's ``reply->data`` with the
-answer, up to a maximum number of ``reply->length`` bytes, and then
-reset ``reply->length`` to the length of the answer.
-
-A prompter callback can call :c:func:`krb5_get_prompt_types` to get an
-array of type constants corresponding to the prompts, to get
-programmatic information about the semantic meaning of the questions.
-:c:func:`krb5_get_prompt_types` may return a null pointer if no prompt
-type information is available.
-
-Text-based applications can use a built-in text prompter
-implementation by supplying :c:func:`krb5_prompter_posix` as the
-*prompter* parameter and a null pointer as the *data* parameter. For
-example::
-
- ret = krb5_get_init_creds_password(context, &creds, client_princ,
- NULL, krb5_prompter_posix, NULL, 0,
- NULL, NULL);
-
-Responder callback
-~~~~~~~~~~~~~~~~~~
-
-A responder callback can be specified through the init_creds options
-using the :c:func:`krb5_get_init_creds_opt_set_responder` function.
-Responder callbacks can present a more sophisticated user interface
-for authentication secrets. The responder callback is usually invoked
-only once per authentication, with a list of questions produced by all
-of the allowed preauthentication mechanisms.
-
-When the responder callback is invoked, the *rctx* argument can be
-accessed to obtain the list of questions and to answer them. The
-:c:func:`krb5_responder_list_questions` function retrieves an array of
-question types. For each question type, the
-:c:func:`krb5_responder_get_challenge` function retrieves additional
-information about the question, if applicable, and the
-:c:func:`krb5_responder_set_answer` function sets the answer.
-
-Responder question types, challenges, and answers are UTF-8 strings.
-The question type is a well-known string; the meaning of the challenge
-and answer depend on the question type. If an application does not
-understand a question type, it cannot interpret the challenge or
-provide an answer. Failing to answer a question typically results in
-the prompter callback being used as a fallback.
-
-Password question
-#################
-
-The :c:macro:`KRB5_RESPONDER_QUESTION_PASSWORD` (or ``"password"``)
-question type requests the user's password. This question does not
-have a challenge, and the response is simply the password string.
-
-One-time password question
-##########################
-
-The :c:macro:`KRB5_RESPONDER_QUESTION_OTP` (or ``"otp"``) question
-type requests a choice among one-time password tokens and the PIN and
-value for the chosen token. The challenge and answer are JSON-encoded
-strings, but an application can use convenience functions to avoid
-doing any JSON processing itself.
-
-The :c:func:`krb5_responder_otp_get_challenge` function decodes the
-challenge into a krb5_responder_otp_challenge structure. The
-:c:func:`krb5_responder_otp_set_answer` function selects one of the
-token information elements from the challenge and supplies the value
-and pin for that token.
-
-PKINIT password or PIN question
-###############################
-
-The :c:macro:`KRB5_RESPONDER_QUESTION_PKINIT` (or ``"pkinit"``) question
-type requests PINs for hardware devices and/or passwords for encrypted
-credentials which are stored on disk, potentially also supplying
-information about the state of the hardware devices. The challenge and
-answer are JSON-encoded strings, but an application can use convenience
-functions to avoid doing any JSON processing itself.
-
-The :c:func:`krb5_responder_pkinit_get_challenge` function decodes the
-challenges into a krb5_responder_pkinit_challenge structure. The
-:c:func:`krb5_responder_pkinit_set_answer` function can be used to
-supply the PIN or password for a particular client credential, and can
-be called multiple times.
-
-Example
-#######
-
-Here is an example of using a responder callback::
-
- static krb5_error_code
- my_responder(krb5_context context, void *data,
- krb5_responder_context rctx)
- {
- krb5_error_code ret;
- krb5_responder_otp_challenge *chl;
-
- if (krb5_responder_get_challenge(context, rctx,
- KRB5_RESPONDER_QUESTION_PASSWORD)) {
- ret = krb5_responder_set_answer(context, rctx,
- KRB5_RESPONDER_QUESTION_PASSWORD,
- "open sesame");
- if (ret)
- return ret;
- }
- ret = krb5_responder_otp_get_challenge(context, rctx, &chl);
- if (ret == 0 && chl != NULL) {
- ret = krb5_responder_otp_set_answer(context, rctx, 0, "1234",
- NULL);
- krb5_responder_otp_challenge_free(context, rctx, chl);
- if (ret)
- return ret;
- }
- return 0;
- }
-
- static krb5_error_code
- get_creds(krb5_context context, krb5_principal client_princ)
- {
- krb5_error_code ret;
- krb5_get_init_creds_opt *opt = NULL;
- krb5_creds creds;
-
- memset(&creds, 0, sizeof(creds));
- ret = krb5_get_init_creds_opt_alloc(context, &opt);
- if (ret)
- goto cleanup;
- ret = krb5_get_init_creds_opt_set_responder(context, opt, my_responder,
- NULL);
- if (ret)
- goto cleanup;
- ret = krb5_get_init_creds_password(context, &creds, client_princ,
- NULL, NULL, NULL, 0, NULL, opt);
-
- cleanup:
- krb5_get_init_creds_opt_free(context, opt);
- krb5_free_cred_contents(context, &creds);
- return ret;
- }
-
-Verifying initial credentials
------------------------------
-
-Use the function :c:func:`krb5_verify_init_creds` to verify initial
-credentials. It takes an options structure (which can be a null
-pointer). Use :c:func:`krb5_verify_init_creds_opt_init` to initialize
-the caller-allocated options structure, and
-:c:func:`krb5_verify_init_creds_opt_set_ap_req_nofail` to set the
-"nofail" option. For example::
-
- krb5_verify_init_creds_opt vopt;
-
- krb5_verify_init_creds_opt_init(&vopt);
- krb5_verify_init_creds_opt_set_ap_req_nofail(&vopt, 1);
- ret = krb5_verify_init_creds(context, &creds, NULL, NULL, NULL, &vopt);
-
-The confusingly named "nofail" option, when set, means that the
-verification must actually succeed in order for
-:c:func:`krb5_verify_init_creds` to indicate success. The default
-state of this option (cleared) means that if there is no key material
-available to verify the user credentials, the verification will
-succeed anyway. (The default can be changed by a configuration file
-setting.)
-
-This accommodates a use case where a large number of unkeyed shared
-desktop workstations need to allow users to log in using Kerberos.
-The security risks from this practice are mitigated by the absence of
-valuable state on the shared workstations---any valuable resources
-that the users would access reside on networked servers.
+++ /dev/null
-Principal manipulation and parsing
-==================================
-
-Kerberos principal structure
-
-..
-
-:c:type:`krb5_principal_data`
-
-:c:type:`krb5_principal`
-
-..
-
-Create and free principal
-
-..
-
-:c:func:`krb5_build_principal()`
-
-:c:func:`krb5_build_principal_alloc_va()`
-
-:c:func:`krb5_build_principal_ext()`
-
-:c:func:`krb5_copy_principal()`
-
-:c:func:`krb5_free_principal()`
-
-:c:func:`krb5_cc_get_principal()`
-
-..
-
-Comparing
-
-..
-
-:c:func:`krb5_principal_compare()`
-
-:c:func:`krb5_principal_compare_flags()`
-
-:c:func:`krb5_principal_compare_any_realm()`
-
-:c:func:`krb5_sname_match()`
-
-:c:func:`krb5_sname_to_principal()`
-
-..
-
-
-Parsing:
-
-..
-
-:c:func:`krb5_parse_name()`
-
-:c:func:`krb5_parse_name_flags()`
-
-:c:func:`krb5_unparse_name()`
-
-:c:func:`krb5_unparse_name_flags()`
-
-..
-
-Utilities:
-
-..
-
-:c:func:`krb5_is_config_principal()`
-
-:c:func:`krb5_kuserok()`
-
-:c:func:`krb5_set_password()`
-
-:c:func:`krb5_set_password_using_ccache()`
-
-:c:func:`krb5_set_principal_realm()`
-
-:c:func:`krb5_realm_compare()`
-
-..
+++ /dev/null
-krb5 API
-========
-
-
-Frequently used public interfaces
-----------------------------------
-
-.. toctree::
- :maxdepth: 1
-
- krb5_build_principal.rst
- krb5_build_principal_alloc_va.rst
- krb5_build_principal_ext.rst
- krb5_cc_close.rst
- krb5_cc_default.rst
- krb5_cc_default_name.rst
- krb5_cc_destroy.rst
- krb5_cc_dup.rst
- krb5_cc_get_name.rst
- krb5_cc_get_principal.rst
- krb5_cc_get_type.rst
- krb5_cc_initialize.rst
- krb5_cc_new_unique.rst
- krb5_cc_resolve.rst
- krb5_change_password.rst
- krb5_chpw_message.rst
- krb5_expand_hostname.rst
- krb5_free_context.rst
- krb5_free_error_message.rst
- krb5_free_principal.rst
- krb5_fwd_tgt_creds.rst
- krb5_get_default_realm.rst
- krb5_get_error_message.rst
- krb5_get_host_realm.rst
- krb5_get_credentials.rst
- krb5_get_fallback_host_realm.rst
- krb5_get_init_creds_keytab.rst
- krb5_get_init_creds_opt_alloc.rst
- krb5_get_init_creds_opt_free.rst
- krb5_get_init_creds_opt_get_fast_flags.rst
- krb5_get_init_creds_opt_set_address_list.rst
- krb5_get_init_creds_opt_set_anonymous.rst
- krb5_get_init_creds_opt_set_canonicalize.rst
- krb5_get_init_creds_opt_set_change_password_prompt.rst
- krb5_get_init_creds_opt_set_etype_list.rst
- krb5_get_init_creds_opt_set_expire_callback.rst
- krb5_get_init_creds_opt_set_fast_ccache.rst
- krb5_get_init_creds_opt_set_fast_ccache_name.rst
- krb5_get_init_creds_opt_set_fast_flags.rst
- krb5_get_init_creds_opt_set_forwardable.rst
- krb5_get_init_creds_opt_set_in_ccache.rst
- krb5_get_init_creds_opt_set_out_ccache.rst
- krb5_get_init_creds_opt_set_pa.rst
- krb5_get_init_creds_opt_set_pac_request.rst
- krb5_get_init_creds_opt_set_preauth_list.rst
- krb5_get_init_creds_opt_set_proxiable.rst
- krb5_get_init_creds_opt_set_renew_life.rst
- krb5_get_init_creds_opt_set_responder.rst
- krb5_get_init_creds_opt_set_salt.rst
- krb5_get_init_creds_opt_set_tkt_life.rst
- krb5_get_init_creds_password.rst
- krb5_get_profile.rst
- krb5_get_prompt_types.rst
- krb5_get_renewed_creds.rst
- krb5_get_validated_creds.rst
- krb5_init_context.rst
- krb5_init_secure_context.rst
- krb5_is_config_principal.rst
- krb5_is_thread_safe.rst
- krb5_kt_close.rst
- krb5_kt_client_default.rst
- krb5_kt_default.rst
- krb5_kt_default_name.rst
- krb5_kt_dup.rst
- krb5_kt_get_name.rst
- krb5_kt_get_type.rst
- krb5_kt_resolve.rst
- krb5_kuserok.rst
- krb5_parse_name.rst
- krb5_parse_name_flags.rst
- krb5_principal_compare.rst
- krb5_principal_compare_any_realm.rst
- krb5_principal_compare_flags.rst
- krb5_prompter_posix.rst
- krb5_realm_compare.rst
- krb5_responder_get_challenge.rst
- krb5_responder_list_questions.rst
- krb5_responder_set_answer.rst
- krb5_responder_otp_get_challenge.rst
- krb5_responder_otp_set_answer.rst
- krb5_responder_otp_challenge_free.rst
- krb5_responder_pkinit_get_challenge.rst
- krb5_responder_pkinit_set_answer.rst
- krb5_responder_pkinit_challenge_free.rst
- krb5_set_default_realm.rst
- krb5_set_password.rst
- krb5_set_password_using_ccache.rst
- krb5_set_principal_realm.rst
- krb5_set_trace_callback.rst
- krb5_set_trace_filename.rst
- krb5_sname_match.rst
- krb5_sname_to_principal.rst
- krb5_unparse_name.rst
- krb5_unparse_name_ext.rst
- krb5_unparse_name_flags.rst
- krb5_unparse_name_flags_ext.rst
- krb5_us_timeofday.rst
- krb5_verify_authdata_kdc_issued.rst
-
-Rarely used public interfaces
---------------------------------
-
-.. toctree::
- :maxdepth: 1
-
- krb5_425_conv_principal.rst
- krb5_524_conv_principal.rst
- krb5_address_compare.rst
- krb5_address_order.rst
- krb5_address_search.rst
- krb5_allow_weak_crypto.rst
- krb5_aname_to_localname.rst
- krb5_anonymous_principal.rst
- krb5_anonymous_realm.rst
- krb5_appdefault_boolean.rst
- krb5_appdefault_string.rst
- krb5_auth_con_free.rst
- krb5_auth_con_genaddrs.rst
- krb5_auth_con_get_checksum_func.rst
- krb5_auth_con_getaddrs.rst
- krb5_auth_con_getauthenticator.rst
- krb5_auth_con_getflags.rst
- krb5_auth_con_getkey.rst
- krb5_auth_con_getkey_k.rst
- krb5_auth_con_getlocalseqnumber.rst
- krb5_auth_con_getrcache.rst
- krb5_auth_con_getrecvsubkey.rst
- krb5_auth_con_getrecvsubkey_k.rst
- krb5_auth_con_getremoteseqnumber.rst
- krb5_auth_con_getsendsubkey.rst
- krb5_auth_con_getsendsubkey_k.rst
- krb5_auth_con_init.rst
- krb5_auth_con_set_checksum_func.rst
- krb5_auth_con_set_req_cksumtype.rst
- krb5_auth_con_setaddrs.rst
- krb5_auth_con_setflags.rst
- krb5_auth_con_setports.rst
- krb5_auth_con_setrcache.rst
- krb5_auth_con_setrecvsubkey.rst
- krb5_auth_con_setrecvsubkey_k.rst
- krb5_auth_con_setsendsubkey.rst
- krb5_auth_con_setsendsubkey_k.rst
- krb5_auth_con_setuseruserkey.rst
- krb5_cc_cache_match.rst
- krb5_cc_copy_creds.rst
- krb5_cc_end_seq_get.rst
- krb5_cc_get_config.rst
- krb5_cc_get_flags.rst
- krb5_cc_get_full_name.rst
- krb5_cc_move.rst
- krb5_cc_next_cred.rst
- krb5_cc_remove_cred.rst
- krb5_cc_retrieve_cred.rst
- krb5_cc_select.rst
- krb5_cc_set_config.rst
- krb5_cc_set_default_name.rst
- krb5_cc_set_flags.rst
- krb5_cc_start_seq_get.rst
- krb5_cc_store_cred.rst
- krb5_cc_support_switch.rst
- krb5_cc_switch.rst
- krb5_cccol_cursor_free.rst
- krb5_cccol_cursor_new.rst
- krb5_cccol_cursor_next.rst
- krb5_cccol_have_content.rst
- krb5_clear_error_message.rst
- krb5_check_clockskew.rst
- krb5_copy_addresses.rst
- krb5_copy_authdata.rst
- krb5_copy_authenticator.rst
- krb5_copy_checksum.rst
- krb5_copy_context.rst
- krb5_copy_creds.rst
- krb5_copy_data.rst
- krb5_copy_error_message.rst
- krb5_copy_keyblock.rst
- krb5_copy_keyblock_contents.rst
- krb5_copy_principal.rst
- krb5_copy_ticket.rst
- krb5_find_authdata.rst
- krb5_free_addresses.rst
- krb5_free_ap_rep_enc_part.rst
- krb5_free_authdata.rst
- krb5_free_authenticator.rst
- krb5_free_cred_contents.rst
- krb5_free_creds.rst
- krb5_free_data.rst
- krb5_free_data_contents.rst
- krb5_free_default_realm.rst
- krb5_free_enctypes.rst
- krb5_free_error.rst
- krb5_free_host_realm.rst
- krb5_free_keyblock.rst
- krb5_free_keyblock_contents.rst
- krb5_free_keytab_entry_contents.rst
- krb5_free_string.rst
- krb5_free_ticket.rst
- krb5_free_unparsed_name.rst
- krb5_get_etype_info.rst
- krb5_get_permitted_enctypes.rst
- krb5_get_server_rcache.rst
- krb5_get_time_offsets.rst
- krb5_init_context_profile.rst
- krb5_init_creds_free.rst
- krb5_init_creds_get.rst
- krb5_init_creds_get_creds.rst
- krb5_init_creds_get_error.rst
- krb5_init_creds_get_times.rst
- krb5_init_creds_init.rst
- krb5_init_creds_set_keytab.rst
- krb5_init_creds_set_password.rst
- krb5_init_creds_set_service.rst
- krb5_init_creds_step.rst
- krb5_init_keyblock.rst
- krb5_is_referral_realm.rst
- krb5_kdc_sign_ticket.rst
- krb5_kdc_verify_ticket.rst
- krb5_kt_add_entry.rst
- krb5_kt_end_seq_get.rst
- krb5_kt_get_entry.rst
- krb5_kt_have_content.rst
- krb5_kt_next_entry.rst
- krb5_kt_read_service_key.rst
- krb5_kt_remove_entry.rst
- krb5_kt_start_seq_get.rst
- krb5_make_authdata_kdc_issued.rst
- krb5_marshal_credentials.rst
- krb5_merge_authdata.rst
- krb5_mk_1cred.rst
- krb5_mk_error.rst
- krb5_mk_ncred.rst
- krb5_mk_priv.rst
- krb5_mk_rep.rst
- krb5_mk_rep_dce.rst
- krb5_mk_req.rst
- krb5_mk_req_extended.rst
- krb5_mk_safe.rst
- krb5_os_localaddr.rst
- krb5_pac_add_buffer.rst
- krb5_pac_free.rst
- krb5_pac_get_buffer.rst
- krb5_pac_get_types.rst
- krb5_pac_init.rst
- krb5_pac_parse.rst
- krb5_pac_sign.rst
- krb5_pac_sign_ext.rst
- krb5_pac_verify.rst
- krb5_pac_verify_ext.rst
- krb5_pac_get_client_info.rst
- krb5_prepend_error_message.rst
- krb5_principal2salt.rst
- krb5_rd_cred.rst
- krb5_rd_error.rst
- krb5_rd_priv.rst
- krb5_rd_rep.rst
- krb5_rd_rep_dce.rst
- krb5_rd_req.rst
- krb5_rd_safe.rst
- krb5_read_password.rst
- krb5_salttype_to_string.rst
- krb5_server_decrypt_ticket_keytab.rst
- krb5_set_default_tgs_enctypes.rst
- krb5_set_error_message.rst
- krb5_set_kdc_recv_hook.rst
- krb5_set_kdc_send_hook.rst
- krb5_set_real_time.rst
- krb5_string_to_cksumtype.rst
- krb5_string_to_deltat.rst
- krb5_string_to_enctype.rst
- krb5_string_to_salttype.rst
- krb5_string_to_timestamp.rst
- krb5_timeofday.rst
- krb5_timestamp_to_sfstring.rst
- krb5_timestamp_to_string.rst
- krb5_tkt_creds_free.rst
- krb5_tkt_creds_get.rst
- krb5_tkt_creds_get_creds.rst
- krb5_tkt_creds_get_times.rst
- krb5_tkt_creds_init.rst
- krb5_tkt_creds_step.rst
- krb5_unmarshal_credentials.rst
- krb5_verify_init_creds.rst
- krb5_verify_init_creds_opt_init.rst
- krb5_verify_init_creds_opt_set_ap_req_nofail.rst
- krb5_vprepend_error_message.rst
- krb5_vset_error_message.rst
- krb5_vwrap_error_message.rst
- krb5_wrap_error_message.rst
-
-
-Public interfaces that should not be called directly
--------------------------------------------------------
-
-.. toctree::
- :maxdepth: 1
-
- krb5_c_block_size.rst
- krb5_c_checksum_length.rst
- krb5_c_crypto_length.rst
- krb5_c_crypto_length_iov.rst
- krb5_c_decrypt.rst
- krb5_c_decrypt_iov.rst
- krb5_c_derive_prfplus.rst
- krb5_c_encrypt.rst
- krb5_c_encrypt_iov.rst
- krb5_c_encrypt_length.rst
- krb5_c_enctype_compare.rst
- krb5_c_free_state.rst
- krb5_c_fx_cf2_simple.rst
- krb5_c_init_state.rst
- krb5_c_is_coll_proof_cksum.rst
- krb5_c_is_keyed_cksum.rst
- krb5_c_keyed_checksum_types.rst
- krb5_c_keylengths.rst
- krb5_c_make_checksum.rst
- krb5_c_make_checksum_iov.rst
- krb5_c_make_random_key.rst
- krb5_c_padding_length.rst
- krb5_c_prf.rst
- krb5_c_prfplus.rst
- krb5_c_prf_length.rst
- krb5_c_random_add_entropy.rst
- krb5_c_random_make_octets.rst
- krb5_c_random_os_entropy.rst
- krb5_c_random_to_key.rst
- krb5_c_string_to_key.rst
- krb5_c_string_to_key_with_params.rst
- krb5_c_valid_cksumtype.rst
- krb5_c_valid_enctype.rst
- krb5_c_verify_checksum.rst
- krb5_c_verify_checksum_iov.rst
- krb5_cksumtype_to_string.rst
- krb5_decode_authdata_container.rst
- krb5_decode_ticket.rst
- krb5_deltat_to_string.rst
- krb5_encode_authdata_container.rst
- krb5_enctype_to_name.rst
- krb5_enctype_to_string.rst
- krb5_free_checksum.rst
- krb5_free_checksum_contents.rst
- krb5_free_cksumtypes.rst
- krb5_free_tgt_creds.rst
- krb5_k_create_key.rst
- krb5_k_decrypt.rst
- krb5_k_decrypt_iov.rst
- krb5_k_encrypt.rst
- krb5_k_encrypt_iov.rst
- krb5_k_free_key.rst
- krb5_k_key_enctype.rst
- krb5_k_key_keyblock.rst
- krb5_k_make_checksum.rst
- krb5_k_make_checksum_iov.rst
- krb5_k_prf.rst
- krb5_k_reference_key.rst
- krb5_k_verify_checksum.rst
- krb5_k_verify_checksum_iov.rst
-
-
-Legacy convenience interfaces
-------------------------------
-
-.. toctree::
- :maxdepth: 1
-
- krb5_recvauth.rst
- krb5_recvauth_version.rst
- krb5_sendauth.rst
-
-
-Deprecated public interfaces
-------------------------------
-
-.. toctree::
- :maxdepth: 1
-
- krb5_524_convert_creds.rst
- krb5_auth_con_getlocalsubkey.rst
- krb5_auth_con_getremotesubkey.rst
- krb5_auth_con_initivector.rst
- krb5_build_principal_va.rst
- krb5_c_random_seed.rst
- krb5_calculate_checksum.rst
- krb5_checksum_size.rst
- krb5_encrypt.rst
- krb5_decrypt.rst
- krb5_eblock_enctype.rst
- krb5_encrypt_size.rst
- krb5_finish_key.rst
- krb5_finish_random_key.rst
- krb5_cc_gen_new.rst
- krb5_get_credentials_renew.rst
- krb5_get_credentials_validate.rst
- krb5_get_in_tkt_with_password.rst
- krb5_get_in_tkt_with_skey.rst
- krb5_get_in_tkt_with_keytab.rst
- krb5_get_init_creds_opt_init.rst
- krb5_init_random_key.rst
- krb5_kt_free_entry.rst
- krb5_random_key.rst
- krb5_process_key.rst
- krb5_string_to_key.rst
- krb5_use_enctype.rst
- krb5_verify_checksum.rst
+++ /dev/null
-krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal.
-=======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_425_conv_principal(krb5_context context, const char * name, const char * instance, const char * realm, krb5_principal * princ)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **name** - V4 name
-
- **[in]** **instance** - V4 instance
-
- **[in]** **realm** - Realm
-
- **[out]** **princ** - V5 principal
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function builds a *princ* from V4 specification based on given input *name.instance@realm* .
-
-
-
-Use :c:func:`krb5_free_principal()` to free *princ* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal.
-=======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_524_conv_principal(krb5_context context, krb5_const_principal princ, char * name, char * inst, char * realm)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **princ** - V5 Principal
-
- **[out]** **name** - V4 principal's name to be filled in
-
- **[out]** **inst** - V4 principal's instance name to be filled in
-
- **[out]** **realm** - Principal's realm name to be filled in
-
-
-..
-
-
-:retval:
- - 0 Success
- - KRB5_INVALID_PRINCIPAL Invalid principal name
- - KRB5_CONFIG_CANTOPEN Can't open or find Kerberos configuration file
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function separates a V5 principal *princ* into *name* , *instance* , and *realm* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials.
-==========================================================================================
-
-..
-
-.. c:function:: int krb5_524_convert_creds(krb5_context context, krb5_creds * v5creds, struct credentials * v4creds)
-
-..
-
-
-:param:
-
- **context**
-
- **v5creds**
-
- **v4creds**
-
-
-..
-
-
-:retval:
- - KRB524_KRB4_DISABLED (always)
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- Not implemented
-
-
-
-
+++ /dev/null
-krb5_address_compare - Compare two Kerberos addresses.
-========================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_address_compare(krb5_context context, const krb5_address * addr1, const krb5_address * addr2)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **addr1** - First address to be compared
-
- **[in]** **addr2** - Second address to be compared
-
-
-..
-
-
-
-:return:
- - TRUE if the addresses are the same, FALSE otherwise
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_address_order - Return an ordering of the specified addresses.
-=====================================================================
-
-..
-
-.. c:function:: int krb5_address_order(krb5_context context, const krb5_address * addr1, const krb5_address * addr2)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **addr1** - First address
-
- **[in]** **addr2** - Second address
-
-
-..
-
-
-:retval:
- - 0 if The two addresses are the same
- - < 0 First address is less than second
- - > 0 First address is greater than second
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_address_search - Search a list of addresses for a specified address.
-===========================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_address_search(krb5_context context, const krb5_address * addr, krb5_address *const * addrlist)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **addr** - Address to search for
-
- **[in]** **addrlist** - Address list to be searched (or NULL)
-
-
-..
-
-
-
-:return:
- - TRUE if addr is listed in addrlist , or addrlist is NULL; FALSE otherwise
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- If *addrlist* contains only a NetBIOS addresses, it will be treated as a null list.
-
-
-
-
+++ /dev/null
-krb5_allow_weak_crypto - Allow the application to override the profile's allow_weak_crypto setting.
-=====================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_allow_weak_crypto(krb5_context context, krb5_boolean enable)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enable** - Boolean flag
-
-
-..
-
-
-:retval:
- - 0 (always)
-
-
-..
-
-
-
-
-
-
-
-This function allows an application to override the allow_weak_crypto setting. It is primarily for use by aklog.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_aname_to_localname - Convert a principal name to a local name.
-=====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_aname_to_localname(krb5_context context, krb5_const_principal aname, int lnsize_in, char * lname)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **aname** - Principal name
-
- **[in]** **lnsize_in** - Space available in *lname*
-
- **[out]** **lname** - Local name buffer to be filled in
-
-
-..
-
-
-:retval:
- - 0 Success
- - System errors
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-If *aname* does not correspond to any local account, KRB5_LNAME_NOTRANS is returned. If *lnsize_in* is too small for the local name, KRB5_CONFIG_NOTENUFSPACE is returned.
-
-
-
-Local names, rather than principal names, can be used by programs that translate to an environment-specific name (for example, a user account name).
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_anonymous_principal - Build an anonymous principal.
-==========================================================
-
-..
-
-.. c:function:: krb5_const_principal krb5_anonymous_principal(void None)
-
-..
-
-
-:param:
-
- **None**
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function returns constant storage that must not be freed.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :data:`KRB5_ANONYMOUS_PRINCSTR`
-
-
-
-
-
+++ /dev/null
-krb5_anonymous_realm - Return an anonymous realm data.
-========================================================
-
-..
-
-.. c:function:: const krb5_data * krb5_anonymous_realm(void None)
-
-..
-
-
-:param:
-
- **None**
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function returns constant storage that must not be freed.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :data:`KRB5_ANONYMOUS_REALMSTR`
-
-
-
-
-
+++ /dev/null
-krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf.
-===============================================================================================
-
-..
-
-.. c:function:: void krb5_appdefault_boolean(krb5_context context, const char * appname, const krb5_data * realm, const char * option, int default_value, int * ret_value)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **appname** - Application name
-
- **[in]** **realm** - Realm name
-
- **[in]** **option** - Option to be checked
-
- **[in]** **default_value** - Default value to return if no match is found
-
- **[out]** **ret_value** - Boolean value of *option*
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function gets the application defaults for *option* based on the given *appname* and/or *realm* .
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_appdefault_string()`
-
-
-
-
-
+++ /dev/null
-krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf.
-=============================================================================================
-
-..
-
-.. c:function:: void krb5_appdefault_string(krb5_context context, const char * appname, const krb5_data * realm, const char * option, const char * default_value, char ** ret_value)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **appname** - Application name
-
- **[in]** **realm** - Realm name
-
- **[in]** **option** - Option to be checked
-
- **[in]** **default_value** - Default value to return if no match is found
-
- **[out]** **ret_value** - String value of *option*
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function gets the application defaults for *option* based on the given *appname* and/or *realm* .
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_appdefault_boolean()`
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_free - Free a krb5_auth_context structure.
-==========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_free(krb5_context context, krb5_auth_context auth_context)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context to be freed
-
-
-..
-
-
-:retval:
- - 0 (always)
-
-
-..
-
-
-
-
-
-
-
-This function frees an auth context allocated by :c:func:`krb5_auth_con_init()` .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket.
-===================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_genaddrs(krb5_context context, krb5_auth_context auth_context, int infd, int flags)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **infd** - Connected socket descriptor
-
- **[in]** **flags** - Flags
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function sets the local and/or remote addresses in *auth_context* based on the local and remote endpoints of the socket *infd* . The following flags determine the operations performed:
-
-
-
-
-
- - :data:`KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR` Generate local address.
-
-
- - :data:`KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR` Generate remote address.
-
-
- - :data:`KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR` Generate local address and port.
-
-
- - :data:`KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR` Generate remote address and port.
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context.
-===================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_get_checksum_func(krb5_context context, krb5_auth_context auth_context, krb5_mk_req_checksum_func * func, void ** data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **func** - Checksum callback
-
- **[out]** **data** - Callback argument
-
-
-..
-
-
-:retval:
- - 0 (always)
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getaddrs - Retrieve address fields from an auth context.
-========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getaddrs(krb5_context context, krb5_auth_context auth_context, krb5_address ** local_addr, krb5_address ** remote_addr)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **local_addr** - Local address (NULL if not needed)
-
- **[out]** **remote_addr** - Remote address (NULL if not needed)
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context.
-===================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getauthenticator(krb5_context context, krb5_auth_context auth_context, krb5_authenticator ** authenticator)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **authenticator** - Authenticator
-
-
-..
-
-
-:retval:
- - 0 Success. Otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_free_authenticator()` to free *authenticator* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure.
-=============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getflags(krb5_context context, krb5_auth_context auth_context, krb5_int32 * flags)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **flags** - Flags bit mask
-
-
-..
-
-
-:retval:
- - 0 (always)
-
-
-..
-
-
-
-
-
-
-
-Valid values for *flags* are:
-
- - :data:`KRB5_AUTH_CONTEXT_DO_TIME` Use timestamps
-
-
- - :data:`KRB5_AUTH_CONTEXT_RET_TIME` Save timestamps
-
-
- - :data:`KRB5_AUTH_CONTEXT_DO_SEQUENCE` Use sequence numbers
-
-
- - :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` Save sequence numbers
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock.
-=====================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getkey(krb5_context context, krb5_auth_context auth_context, krb5_keyblock ** keyblock)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **keyblock** - Session key
-
-
-..
-
-
-:retval:
- - 0 Success. Otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a keyblock containing the session key from *auth_context* . Use :c:func:`krb5_free_keyblock()` to free *keyblock* when it is no longer needed
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getkey_k - Retrieve the session key from an auth context.
-=========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getkey_k(krb5_context context, krb5_auth_context auth_context, krb5_key * key)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **key** - Session key
-
-
-..
-
-
-:retval:
- - 0 (always)
-
-
-..
-
-
-
-
-
-
-
-This function sets *key* to the session key from *auth_context* . Use :c:func:`krb5_k_free_key()` to release *key* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context.
-============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getlocalseqnumber(krb5_context context, krb5_auth_context auth_context, krb5_int32 * seqnumber)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **seqnumber** - Local sequence number
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Retrieve the local sequence number from *auth_context* and return it in *seqnumber* . The :data:`KRB5_AUTH_CONTEXT_DO_SEQUENCE` flag must be set in *auth_context* for this function to be useful.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getlocalsubkey
-============================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getlocalsubkey(krb5_context context, krb5_auth_context auth_context, krb5_keyblock ** keyblock)
-
-..
-
-
-:param:
-
- **context**
-
- **auth_context**
-
- **keyblock**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_auth_con_getsendsubkey() .
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getrcache - Retrieve the replay cache from an auth context.
-===========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getrcache(krb5_context context, krb5_auth_context auth_context, krb5_rcache * rcache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **rcache** - Replay cache handle
-
-
-..
-
-
-:retval:
- - 0 (always)
-
-
-..
-
-
-
-
-
-
-
-This function fetches the replay cache from *auth_context* . The caller should not close *rcache* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock.
-=================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getrecvsubkey(krb5_context ctx, krb5_auth_context ac, krb5_keyblock ** keyblock)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **ac** - Authentication context
-
- **[out]** **keyblock** - Receiving subkey
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a keyblock containing the receiving subkey from *auth_context* . Use :c:func:`krb5_free_keyblock()` to free *keyblock* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock.
-===================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getrecvsubkey_k(krb5_context ctx, krb5_auth_context ac, krb5_key * key)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **ac** - Authentication context
-
- **[out]** **key** - Receiving subkey
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function sets *key* to the receiving subkey from *auth_context* . Use :c:func:`krb5_k_free_key()` to release *key* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context.
-==============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getremoteseqnumber(krb5_context context, krb5_auth_context auth_context, krb5_int32 * seqnumber)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **seqnumber** - Remote sequence number
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Retrieve the remote sequence number from *auth_context* and return it in *seqnumber* . The :data:`KRB5_AUTH_CONTEXT_DO_SEQUENCE` flag must be set in *auth_context* for this function to be useful.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getremotesubkey
-=============================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getremotesubkey(krb5_context context, krb5_auth_context auth_context, krb5_keyblock ** keyblock)
-
-..
-
-
-:param:
-
- **context**
-
- **auth_context**
-
- **keyblock**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_auth_con_getrecvsubkey() .
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock.
-============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getsendsubkey(krb5_context ctx, krb5_auth_context ac, krb5_keyblock ** keyblock)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **ac** - Authentication context
-
- **[out]** **keyblock** - Send subkey
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a keyblock containing the send subkey from *auth_context* . Use :c:func:`krb5_free_keyblock()` to free *keyblock* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context.
-================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_getsendsubkey_k(krb5_context ctx, krb5_auth_context ac, krb5_key * key)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **ac** - Authentication context
-
- **[out]** **key** - Send subkey
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function sets *key* to the send subkey from *auth_context* . Use :c:func:`krb5_k_free_key()` to release *key* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_init - Create and initialize an authentication context.
-=======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_init(krb5_context context, krb5_auth_context * auth_context)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **auth_context** - Authentication context
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates an authentication context to hold configuration and state relevant to krb5 functions for authenticating principals and protecting messages once authentication has occurred.
-
-
-
-By default, flags for the context are set to enable the use of the replay cache ( :data:`KRB5_AUTH_CONTEXT_DO_TIME` ), but not sequence numbers. Use :c:func:`krb5_auth_con_setflags()` to change the flags.
-
-
-
-The allocated *auth_context* must be freed with :c:func:`krb5_auth_con_free()` when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_initivector - Cause an auth context to use cipher state.
-========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_initivector(krb5_context context, krb5_auth_context auth_context)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Prepare *auth_context* to use cipher state when :c:func:`krb5_mk_priv()` or :c:func:`krb5_rd_priv()` encrypt or decrypt data.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context.
-===============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_set_checksum_func(krb5_context context, krb5_auth_context auth_context, krb5_mk_req_checksum_func func, void * data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **func** - Checksum callback
-
- **[in]** **data** - Callback argument
-
-
-..
-
-
-:retval:
- - 0 (always)
-
-
-..
-
-
-
-
-
-
-
-Set a callback to obtain checksum data in :c:func:`krb5_mk_req()` . The callback will be invoked after the subkey and local sequence number are stored in *auth_context* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context.
-============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_set_req_cksumtype(krb5_context context, krb5_auth_context auth_context, krb5_cksumtype cksumtype)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **cksumtype** - Checksum type
-
-
-..
-
-
-:retval:
- - 0 Success. Otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function sets the checksum type in *auth_context* to be used by :c:func:`krb5_mk_req()` for the authenticator checksum.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context.
-=================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_setaddrs(krb5_context context, krb5_auth_context auth_context, krb5_address * local_addr, krb5_address * remote_addr)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **local_addr** - Local address
-
- **[in]** **remote_addr** - Remote address
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function releases the storage assigned to the contents of the local and remote addresses of *auth_context* and then sets them to *local_addr* and *remote_addr* respectively.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_auth_con_genaddrs()`
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure.
-==============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_setflags(krb5_context context, krb5_auth_context auth_context, krb5_int32 flags)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **flags** - Flags bit mask
-
-
-..
-
-
-:retval:
- - 0 (always)
-
-
-..
-
-
-
-
-
-
-
-Valid values for *flags* are:
-
- - :data:`KRB5_AUTH_CONTEXT_DO_TIME` Use timestamps
-
-
- - :data:`KRB5_AUTH_CONTEXT_RET_TIME` Save timestamps
-
-
- - :data:`KRB5_AUTH_CONTEXT_DO_SEQUENCE` Use sequence numbers
-
-
- - :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` Save sequence numbers
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_setports - Set local and remote port fields in an auth context.
-===============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_setports(krb5_context context, krb5_auth_context auth_context, krb5_address * local_port, krb5_address * remote_port)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **local_port** - Local port
-
- **[in]** **remote_port** - Remote port
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function releases the storage assigned to the contents of the local and remote ports of *auth_context* and then sets them to *local_port* and *remote_port* respectively.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_auth_con_genaddrs()`
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_setrcache - Set the replay cache in an auth context.
-====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_setrcache(krb5_context context, krb5_auth_context auth_context, krb5_rcache rcache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **rcache** - Replay cache haddle
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function sets the replay cache in *auth_context* to *rcache* . *rcache* will be closed when *auth_context* is freed, so the caller should relinquish that responsibility.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock.
-============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_setrecvsubkey(krb5_context ctx, krb5_auth_context ac, krb5_keyblock * keyblock)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **ac** - Authentication context
-
- **[in]** **keyblock** - Receiving subkey
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function sets the receiving subkey in *ac* to a copy of *keyblock* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context.
-==============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_setrecvsubkey_k(krb5_context ctx, krb5_auth_context ac, krb5_key key)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **ac** - Authentication context
-
- **[in]** **key** - Receiving subkey
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function sets the receiving subkey in *ac* to *key* , incrementing its reference count.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock.
-=======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_setsendsubkey(krb5_context ctx, krb5_auth_context ac, krb5_keyblock * keyblock)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **ac** - Authentication context
-
- **[in]** **keyblock** - Send subkey
-
-
-..
-
-
-:retval:
- - 0 Success. Otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function sets the send subkey in *ac* to a copy of *keyblock* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context.
-=========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_setsendsubkey_k(krb5_context ctx, krb5_auth_context ac, krb5_key key)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **ac** - Authentication context
-
- **[out]** **key** - Send subkey
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function sets the send subkey in *ac* to *key* , incrementing its reference count.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_auth_con_setuseruserkey - Set the session key in an auth context.
-========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_auth_con_setuseruserkey(krb5_context context, krb5_auth_context auth_context, krb5_keyblock * keyblock)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **keyblock** - User key
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_build_principal - Build a principal name using null-terminated strings.
-==============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_build_principal(krb5_context context, krb5_principal * princ, unsigned int rlen, const char * realm, ... )
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **princ** - Principal name
-
- **[in]** **rlen** - Realm name length
-
- **[in]** **realm** - Realm name
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Call :c:func:`krb5_free_principal()` to free *princ* when it is no longer needed.
-
-
-
-Beginning with release 1.20, the name type of the principal will be inferred as **KRB5_NT_SRV_INST** or **KRB5_NT_WELLKNOWN** based on the principal name. The type will be **KRB5_NT_PRINCIPAL** if a type cannot be inferred.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- :c:func:`krb5_build_principal()` and :c:func:`krb5_build_principal_alloc_va()` perform the same task. :c:func:`krb5_build_principal()` takes variadic arguments. :c:func:`krb5_build_principal_alloc_va()` takes a pre-computed *varargs* pointer.
-
-
-
-
+++ /dev/null
-krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list.
-=====================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_build_principal_alloc_va(krb5_context context, krb5_principal * princ, unsigned int rlen, const char * realm, va_list ap)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **princ** - Principal structure
-
- **[in]** **rlen** - Realm name length
-
- **[in]** **realm** - Realm name
-
- **[in]** **ap** - List of char * components, ending with NULL
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Similar to :c:func:`krb5_build_principal()` , this function builds a principal name, but its name components are specified as a va_list.
-
-
-
-Use :c:func:`krb5_free_principal()` to deallocate *princ* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_build_principal_ext - Build a principal name using length-counted strings.
-=================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_build_principal_ext(krb5_context context, krb5_principal * princ, unsigned int rlen, const char * realm, ... )
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **princ** - Principal name
-
- **[in]** **rlen** - Realm name length
-
- **[in]** **realm** - Realm name
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function creates a principal from a length-counted string and a variable-length list of length-counted components. The list of components ends with the first 0 length argument (so it is not possible to specify an empty component with this function). Call :c:func:`krb5_free_principal()` to free allocated memory for principal when it is no longer needed.
-
-
-
-Beginning with release 1.20, the name type of the principal will be inferred as **KRB5_NT_SRV_INST** or **KRB5_NT_WELLKNOWN** based on the principal name. The type will be **KRB5_NT_PRINCIPAL** if a type cannot be inferred.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_build_principal_va
-=======================
-
-..
-
-.. c:function:: krb5_error_code krb5_build_principal_va(krb5_context context, krb5_principal princ, unsigned int rlen, const char * realm, va_list ap)
-
-..
-
-
-:param:
-
- **context**
-
- **princ**
-
- **rlen**
-
- **realm**
-
- **ap**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_build_principal_alloc_va() .
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_block_size - Return cipher block size.
-===============================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_block_size(krb5_context context, krb5_enctype enctype, size_t * blocksize)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[out]** **blocksize** - Block size for *enctype*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_checksum_length - Return the length of checksums for a checksum type.
-==============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_checksum_length(krb5_context context, krb5_cksumtype cksumtype, size_t * length)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cksumtype** - Checksum type
-
- **[out]** **length** - Checksum length
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_crypto_length - Return a length of a message field specific to the encryption type.
-============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_crypto_length(krb5_context context, krb5_enctype enctype, krb5_cryptotype type, unsigned int * size)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[in]** **type** - Type field (See :data:`KRB5_CRYPTO_TYPE` types)
-
- **[out]** **size** - Length of the *type* specific to *enctype*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array.
-============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_crypto_length_iov(krb5_context context, krb5_enctype enctype, krb5_crypto_iov * data, size_t num_data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[inout]** **data** - IOV array
-
- **[in]** **num_data** - Size of *data*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Padding is set to the actual padding required based on the provided *data* buffers. Typically this API is used after setting up the data buffers and :data:`KRB5_CRYPTO_TYPE_SIGN_ONLY` buffers, but before actually allocating header, trailer and padding.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_decrypt - Decrypt data using a key (operates on keyblock).
-===================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_decrypt(krb5_context context, const krb5_keyblock * key, krb5_keyusage usage, const krb5_data * cipher_state, const krb5_enc_data * input, krb5_data * output)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Encryption key
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[inout]** **cipher_state** - Cipher state; specify NULL if not needed
-
- **[in]** **input** - Encrypted data
-
- **[out]** **output** - Decrypted data
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function decrypts the data block *input* and stores the output into *output* . The actual decryption key will be derived from *key* and *usage* if key derivation is specified for the encryption type. If non-null, *cipher_state* specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The caller must initialize *output* and allocate at least enough space for the result. The usual practice is to allocate an output buffer as long as the ciphertext, and let :c:func:`krb5_c_decrypt()` trim *output->length* . For some enctypes, the resulting *output->length* may include padding bytes.
-
-
-
-
+++ /dev/null
-krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock).
-====================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_decrypt_iov(krb5_context context, const krb5_keyblock * keyblock, krb5_keyusage usage, const krb5_data * cipher_state, krb5_crypto_iov * data, size_t num_data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keyblock** - Encryption key
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[in]** **cipher_state** - Cipher state; specify NULL if not needed
-
- **[inout]** **data** - IOV array. Modified in-place.
-
- **[in]** **num_data** - Size of *data*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function decrypts the data block *data* and stores the output in-place. The actual decryption key will be derived from *keyblock* and *usage* if key derivation is specified for the encryption type. If non-null, *cipher_state* specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5_crypto_iov structures before calling into this API.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_c_decrypt_iov()`
-
-
-
-
-
-
-.. note::
-
- On return from a :c:func:`krb5_c_decrypt_iov()` call, the *data->length* in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.
-
-
-
-
+++ /dev/null
-krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+).
-=================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_derive_prfplus(krb5_context context, const krb5_keyblock * k, const krb5_data * input, krb5_enctype enctype, krb5_keyblock ** out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **k** - KDC contribution key
-
- **[in]** **input** - Input string
-
- **[in]** **enctype** - Output key enctype (or **ENCTYPE_NULL** )
-
- **[out]** **out** - Derived keyblock
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function uses PRF+ as defined in RFC 6113 to derive a key from another key and an input string. If *enctype* is **ENCTYPE_NULL** , the output key will have the same enctype as the input key.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_encrypt - Encrypt data using a key (operates on keyblock).
-===================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_encrypt(krb5_context context, const krb5_keyblock * key, krb5_keyusage usage, const krb5_data * cipher_state, const krb5_data * input, krb5_enc_data * output)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Encryption key
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[inout]** **cipher_state** - Cipher state; specify NULL if not needed
-
- **[in]** **input** - Data to be encrypted
-
- **[out]** **output** - Encrypted data
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function encrypts the data block *input* and stores the output into *output* . The actual encryption key will be derived from *key* and *usage* if key derivation is specified for the encryption type. If non-null, *cipher_state* specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The caller must initialize *output* and allocate at least enough space for the result (using :c:func:`krb5_c_encrypt_length()` to determine the amount of space needed). *output->length* will be set to the actual length of the ciphertext.
-
-
-
-
+++ /dev/null
-krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock).
-====================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_encrypt_iov(krb5_context context, const krb5_keyblock * keyblock, krb5_keyusage usage, const krb5_data * cipher_state, krb5_crypto_iov * data, size_t num_data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keyblock** - Encryption key
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[in]** **cipher_state** - Cipher state; specify NULL if not needed
-
- **[inout]** **data** - IOV array. Modified in-place.
-
- **[in]** **num_data** - Size of *data*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function encrypts the data block *data* and stores the output in-place. The actual encryption key will be derived from *keyblock* and *usage* if key derivation is specified for the encryption type. If non-null, *cipher_state* specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5_crypto_iov structures before calling into this API.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_c_decrypt_iov()`
-
-
-
-
-
-
-.. note::
-
- On return from a :c:func:`krb5_c_encrypt_iov()` call, the *data->length* in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.
-
-
-
-
+++ /dev/null
-krb5_c_encrypt_length - Compute encrypted data length.
-========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_encrypt_length(krb5_context context, krb5_enctype enctype, size_t inputlen, size_t * length)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[in]** **inputlen** - Length of the data to be encrypted
-
- **[out]** **length** - Length of the encrypted data
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function computes the length of the ciphertext produced by encrypting *inputlen* bytes including padding, confounder, and checksum.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_enctype_compare - Compare two encryption types.
-========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_enctype_compare(krb5_context context, krb5_enctype e1, krb5_enctype e2, krb5_boolean * similar)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **e1** - First encryption type
-
- **[in]** **e2** - Second encryption type
-
- **[out]** **similar** - **TRUE** if types are similar, **FALSE** if not
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function determines whether two encryption types use the same kind of keys.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() .
-=======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_free_state(krb5_context context, const krb5_keyblock * key, krb5_data * state)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Key
-
- **[in]** **state** - Cipher state to be freed
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings.
-===========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_fx_cf2_simple(krb5_context context, const krb5_keyblock * k1, const char * pepper1, const krb5_keyblock * k2, const char * pepper2, krb5_keyblock ** out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **k1** - KDC contribution key
-
- **[in]** **pepper1** - String"PKINIT"
-
- **[in]** **k2** - Reply key
-
- **[in]** **pepper2** - String"KeyExchange"
-
- **[out]** **out** - Output key
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function computes the KRB-FX-CF2 function over its inputs and places the results in a newly allocated keyblock. This function is simple in that it assumes that *pepper1* and *pepper2* are C strings with no internal nulls and that the enctype of the result will be the same as that of *k1* . *k1* and *k2* may be of different enctypes.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_init_state - Initialize a new cipher state.
-====================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_init_state(krb5_context context, const krb5_keyblock * key, krb5_keyusage usage, krb5_data * new_state)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Key
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[out]** **new_state** - New cipher state
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof.
-===============================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_c_is_coll_proof_cksum(krb5_cksumtype ctype)
-
-..
-
-
-:param:
-
- **[in]** **ctype** - Checksum type
-
-
-..
-
-
-
-:return:
- - TRUE if ctype is collision-proof, FALSE if it is not collision-proof or not a valid checksum type.
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_is_keyed_cksum - Test whether a checksum type is keyed.
-================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_c_is_keyed_cksum(krb5_cksumtype ctype)
-
-..
-
-
-:param:
-
- **[in]** **ctype** - Checksum type
-
-
-..
-
-
-
-:return:
- - TRUE if ctype is a keyed checksum type, FALSE otherwise.
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type.
-=====================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_keyed_checksum_types(krb5_context context, krb5_enctype enctype, unsigned int * count, krb5_cksumtype ** cksumtypes)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[out]** **count** - Count of allowable checksum types
-
- **[out]** **cksumtypes** - Array of allowable checksum types
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_free_cksumtypes()` to free *cksumtypes* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_keylengths - Return length of the specified key in bytes.
-==================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_keylengths(krb5_context context, krb5_enctype enctype, size_t * keybytes, size_t * keylength)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[out]** **keybytes** - Number of bytes required to make a key
-
- **[out]** **keylength** - Length of final key
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_make_checksum - Compute a checksum (operates on keyblock).
-===================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_make_checksum(krb5_context context, krb5_cksumtype cksumtype, const krb5_keyblock * key, krb5_keyusage usage, const krb5_data * input, krb5_checksum * cksum)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cksumtype** - Checksum type (0 for mandatory type)
-
- **[in]** **key** - Encryption key for a keyed checksum
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[in]** **input** - Input data
-
- **[out]** **cksum** - Generated checksum
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function computes a checksum of type *cksumtype* over *input* , using *key* if the checksum type is a keyed checksum. If *cksumtype* is 0 and *key* is non-null, the checksum type will be the mandatory-to-implement checksum type for the key's encryption type. The actual checksum key will be derived from *key* and *usage* if key derivation is specified for the checksum type. The newly created *cksum* must be released by calling :c:func:`krb5_free_checksum_contents()` when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_c_verify_checksum()`
-
-
-
-
-
-
-.. note::
-
- This function is similar to :c:func:`krb5_k_make_checksum()` , but operates on keyblock *key* .
-
-
-
-
+++ /dev/null
-krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)
-===========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_make_checksum_iov(krb5_context context, krb5_cksumtype cksumtype, const krb5_keyblock * key, krb5_keyusage usage, krb5_crypto_iov * data, size_t num_data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cksumtype** - Checksum type (0 for mandatory type)
-
- **[in]** **key** - Encryption key for a keyed checksum
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[inout]** **data** - IOV array
-
- **[in]** **num_data** - Size of *data*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Create a checksum in the :data:`KRB5_CRYPTO_TYPE_CHECKSUM` element over :data:`KRB5_CRYPTO_TYPE_DATA` and :data:`KRB5_CRYPTO_TYPE_SIGN_ONLY` chunks in *data* . Only the :data:`KRB5_CRYPTO_TYPE_CHECKSUM` region is modified.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_c_verify_checksum_iov()`
-
-
-
-
-
-
-.. note::
-
- This function is similar to :c:func:`krb5_k_make_checksum_iov()` , but operates on keyblock *key* .
-
-
-
-
+++ /dev/null
-krb5_c_make_random_key - Generate an enctype-specific random encryption key.
-==============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_make_random_key(krb5_context context, krb5_enctype enctype, krb5_keyblock * k5_random_key)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type of the generated key
-
- **[out]** **k5_random_key** - An allocated and initialized keyblock
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_free_keyblock_contents()` to free *k5_random_key* when no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_padding_length - Return a number of padding octets.
-============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_padding_length(krb5_context context, krb5_enctype enctype, size_t data_length, unsigned int * size)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[in]** **data_length** - Length of the plaintext to pad
-
- **[out]** **size** - Number of padding octets
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - KRB5_BAD_ENCTYPE
-
-
-..
-
-
-
-
-
-
-
-This function returns the number of the padding octets required to pad *data_length* octets of plaintext.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_prf - Generate enctype-specific pseudo-random bytes.
-=============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_prf(krb5_context context, const krb5_keyblock * keyblock, krb5_data * input, krb5_data * output)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keyblock** - Key
-
- **[in]** **input** - Input data
-
- **[out]** **output** - Output data
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function selects a pseudo-random function based on *keyblock* and computes its value over *input* , placing the result into *output* . The caller must preinitialize *output* and allocate space for the result, using :c:func:`krb5_c_prf_length()` to determine the required length.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type.
-==============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_prf_length(krb5_context context, krb5_enctype enctype, size_t * len)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[out]** **len** - Length of PRF output
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+.
-====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_prfplus(krb5_context context, const krb5_keyblock * k, const krb5_data * input, krb5_data * output)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **k** - KDC contribution key
-
- **[in]** **input** - Input data
-
- **[out]** **output** - Pseudo-random output buffer
-
-
-..
-
-
-
-:return:
- - 0 on success, E2BIG if output->length is too large for PRF+ to generate, ENOMEM on allocation failure, or an error code from krb5_c_prf()
-
-..
-
-
-
-
-
-
-
-This function fills *output* with PRF+(k, input) as defined in RFC 6113 section 5.1. The caller must preinitialize *output* and allocate the desired amount of space. The length of the pseudo-random output will match the length of *output* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- RFC 4402 defines a different PRF+ operation. This function does not implement that operation.
-
-
-
-
+++ /dev/null
-krb5_c_random_add_entropy
-=========================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_random_add_entropy(krb5_context context, unsigned int randsource, const krb5_data * data)
-
-..
-
-
-:param:
-
- **context**
-
- **randsource**
-
- **data**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED This call is no longer necessary.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_random_make_octets - Generate pseudo-random bytes.
-===========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_random_make_octets(krb5_context context, krb5_data * data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **data** - Random data
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Fills in *data* with bytes from the PRNG used by krb5 crypto operations. The caller must preinitialize *data* and allocate the desired amount of space.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_random_os_entropy
-========================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_random_os_entropy(krb5_context context, int strong, int * success)
-
-..
-
-
-:param:
-
- **context**
-
- **strong**
-
- **success**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED This call is no longer necessary.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_random_seed
-==================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_random_seed(krb5_context context, krb5_data * data)
-
-..
-
-
-:param:
-
- **context**
-
- **data**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED This call is no longer necessary.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_random_to_key - Generate an enctype-specific key from random data.
-===========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_random_to_key(krb5_context context, krb5_enctype enctype, krb5_data * random_data, krb5_keyblock * k5_random_key)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[in]** **random_data** - Random input data
-
- **[out]** **k5_random_key** - Resulting key
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function takes random input data *random_data* and produces a valid key *k5_random_key* for a given *enctype* .
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_c_keylengths()`
-
-
-
-
-
-
-.. note::
-
- It is assumed that *k5_random_key* has already been initialized and *k5_random_key->contents* has been allocated with the correct length.
-
-
-
-
+++ /dev/null
-krb5_c_string_to_key - Convert a string (such a password) to a key.
-=====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_string_to_key(krb5_context context, krb5_enctype enctype, const krb5_data * string, const krb5_data * salt, krb5_keyblock * key)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[in]** **string** - String to be converted
-
- **[in]** **salt** - Salt value
-
- **[out]** **key** - Generated key
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function converts *string* to a *key* of encryption type *enctype* , using the specified *salt* . The newly created *key* must be released by calling :c:func:`krb5_free_keyblock_contents()` when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters.
-===============================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_string_to_key_with_params(krb5_context context, krb5_enctype enctype, const krb5_data * string, const krb5_data * salt, const krb5_data * params, krb5_keyblock * key)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[in]** **string** - String to be converted
-
- **[in]** **salt** - Salt value
-
- **[in]** **params** - Parameters
-
- **[out]** **key** - Generated key
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function is similar to :c:func:`krb5_c_string_to_key()` , but also takes parameters which may affect the algorithm in an enctype-dependent way. The newly created *key* must be released by calling :c:func:`krb5_free_keyblock_contents()` when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type.
-=================================================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_c_valid_cksumtype(krb5_cksumtype ctype)
-
-..
-
-
-:param:
-
- **[in]** **ctype** - Checksum type
-
-
-..
-
-
-
-:return:
- - TRUE if ctype is valid, FALSE if not
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type.
-=====================================================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_c_valid_enctype(krb5_enctype ktype)
-
-..
-
-
-:param:
-
- **[in]** **ktype** - Encryption type
-
-
-..
-
-
-
-:return:
- - TRUE if ktype is valid, FALSE if not
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_c_verify_checksum - Verify a checksum (operates on keyblock).
-====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_verify_checksum(krb5_context context, const krb5_keyblock * key, krb5_keyusage usage, const krb5_data * data, const krb5_checksum * cksum, krb5_boolean * valid)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Encryption key for a keyed checksum
-
- **[in]** **usage** - *key* usage
-
- **[in]** **data** - Data to be used to compute a new checksum using *key* to compare *cksum* against
-
- **[in]** **cksum** - Checksum to be verified
-
- **[out]** **valid** - Non-zero for success, zero for failure
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function verifies that *cksum* is a valid checksum for *data* . If the checksum type of *cksum* is a keyed checksum, *key* is used to verify the checksum. If the checksum type in *cksum* is 0 and *key* is not NULL, the mandatory checksum type for *key* will be used. The actual checksum key will be derived from *key* and *usage* if key derivation is specified for the checksum type.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- This function is similar to :c:func:`krb5_k_verify_checksum()` , but operates on keyblock *key* .
-
-
-
-
+++ /dev/null
-krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock).
-===============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_c_verify_checksum_iov(krb5_context context, krb5_cksumtype cksumtype, const krb5_keyblock * key, krb5_keyusage usage, const krb5_crypto_iov * data, size_t num_data, krb5_boolean * valid)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cksumtype** - Checksum type (0 for mandatory type)
-
- **[in]** **key** - Encryption key for a keyed checksum
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[in]** **data** - IOV array
-
- **[in]** **num_data** - Size of *data*
-
- **[out]** **valid** - Non-zero for success, zero for failure
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Confirm that the checksum in the :data:`KRB5_CRYPTO_TYPE_CHECKSUM` element is a valid checksum of the :data:`KRB5_CRYPTO_TYPE_DATA` and :data:`KRB5_CRYPTO_TYPE_SIGN_ONLY` regions in the iov.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_c_make_checksum_iov()`
-
-
-
-
-
-
-.. note::
-
- This function is similar to :c:func:`krb5_k_verify_checksum_iov()` , but operates on keyblock *key* .
-
-
-
-
+++ /dev/null
-krb5_calculate_checksum
-=======================
-
-..
-
-.. c:function:: krb5_error_code krb5_calculate_checksum(krb5_context context, krb5_cksumtype ctype, krb5_const_pointer in, size_t in_length, krb5_const_pointer seed, size_t seed_length, krb5_checksum * outcksum)
-
-..
-
-
-:param:
-
- **context**
-
- **ctype**
-
- **in**
-
- **in_length**
-
- **seed**
-
- **seed_length**
-
- **outcksum**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED See krb5_c_make_checksum()
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_cache_match - Find a credential cache with a specified client principal.
-==================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_cache_match(krb5_context context, krb5_principal client, krb5_ccache * cache_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **client** - Client principal
-
- **[out]** **cache_out** - Credential cache handle
-
-
-..
-
-
-:retval:
- - 0 Success
- - KRB5_CC_NOTFOUND None
-
-
-..
-
-
-
-
-
-
-
-Find a cache within the collection whose default principal is *client* . Use *krb5_cc_close* to close *ccache* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.10
-
-
+++ /dev/null
-krb5_cc_close - Close a credential cache handle.
-==================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_close(krb5_context context, krb5_ccache cache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function closes a credential cache handle *cache* without affecting the contents of the cache.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_copy_creds - Copy a credential cache.
-===============================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_copy_creds(krb5_context context, krb5_ccache incc, krb5_ccache outcc)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **incc** - Credential cache to be copied
-
- **[out]** **outcc** - Copy of credential cache to be filled in
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_default - Resolve the default credential cache name.
-==============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_default(krb5_context context, krb5_ccache * ccache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **ccache** - Pointer to credential cache name
-
-
-..
-
-
-:retval:
- - 0 Success
- - KV5M_CONTEXT Bad magic number for _krb5_context structure
- - KRB5_FCC_INTERNAL The name of the default credential cache cannot be obtained
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Create a handle to the default credential cache as given by :c:func:`krb5_cc_default_name()` .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_default_name - Return the name of the default credential cache.
-=========================================================================
-
-..
-
-.. c:function:: const char * krb5_cc_default_name(krb5_context context)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
-
-..
-
-
-
-:return:
- - Name of default credential cache for the current user.
-
-..
-
-
-
-
-
-
-
-Return a pointer to the default credential cache name for *context* , as determined by a prior call to :c:func:`krb5_cc_set_default_name()` , by the KRB5CCNAME environment variable, by the default_ccache_name profile variable, or by the operating system or build-time default value. The returned value must not be modified or freed by the caller. The returned value becomes invalid when *context* is destroyed :c:func:`krb5_free_context()` or if a subsequent call to :c:func:`krb5_cc_set_default_name()` is made on *context* .
-
-
-
-The default credential cache name is cached in *context* between calls to this function, so if the value of KRB5CCNAME changes in the process environment after the first call to this function on, that change will not be reflected in later calls with the same context. The caller can invoke :c:func:`krb5_cc_set_default_name()` with a NULL value of *name* to clear the cached value and force the default name to be recomputed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_destroy - Destroy a credential cache.
-===============================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_destroy(krb5_context context, krb5_ccache cache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Permission errors
-
-..
-
-
-
-
-
-
-
-This function destroys any existing contents of *cache* and closes the handle to it.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_dup - Duplicate ccache handle.
-========================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_dup(krb5_context context, krb5_ccache in, krb5_ccache * out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **in** - Credential cache handle to be duplicated
-
- **[out]** **out** - Credential cache handle
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Create a new handle referring to the same cache as *in* . The new handle and *in* can be closed independently.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries.
-==========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_end_seq_get(krb5_context context, krb5_ccache cache, krb5_cc_cursor * cursor)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[in]** **cursor** - Cursor
-
-
-..
-
-
-:retval:
- - 0 (always)
-
-
-..
-
-
-
-
-
-
-
-This function finishes processing credential cache entries and invalidates *cursor* .
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_cc_start_seq_get()` , :c:func:`krb5_cc_next_cred()`
-
-
-
-
-
+++ /dev/null
-krb5_cc_gen_new
-===============
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_gen_new(krb5_context context, krb5_ccache * cache)
-
-..
-
-
-:param:
-
- **context**
-
- **cache**
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_get_config - Get a configuration value from a credential cache.
-=========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_get_config(krb5_context context, krb5_ccache id, krb5_const_principal principal, const char * key, krb5_data * data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **id** - Credential cache handle
-
- **[in]** **principal** - Configuration for this principal; if NULL, global for the whole cache
-
- **[in]** **key** - Name of config variable
-
- **[out]** **data** - Data to be fetched
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *data* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_get_flags - Retrieve flags from a credential cache structure.
-=======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_get_flags(krb5_context context, krb5_ccache cache, krb5_flags * flags)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[out]** **flags** - Flag bit mask
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-.. warning::
-
- For memory credential cache always returns a flag mask of 0.
-
-
-
-
-
+++ /dev/null
-krb5_cc_get_full_name - Retrieve the full name of a credential cache.
-=======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_get_full_name(krb5_context context, krb5_ccache cache, char ** fullname_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[out]** **fullname_out** - Full name of cache
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_free_string()` to free *fullname_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.10
-
-
+++ /dev/null
-krb5_cc_get_name - Retrieve the name, but not type of a credential cache.
-===========================================================================
-
-..
-
-.. c:function:: const char * krb5_cc_get_name(krb5_context context, krb5_ccache cache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
-
-..
-
-
-
-:return:
- - On success - the name of the credential cache.
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-.. warning::
-
- Returns the name of the credential cache. The result is an alias into *cache* and should not be freed or modified by the caller. This name does not include the cache type, so should not be used as input to :c:func:`krb5_cc_resolve()` .
-
-
-
-
-
+++ /dev/null
-krb5_cc_get_principal - Get the default principal of a credential cache.
-==========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_get_principal(krb5_context context, krb5_ccache cache, krb5_principal * principal)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[out]** **principal** - Primary principal
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Returns the default client principal of a credential cache as set by :c:func:`krb5_cc_initialize()` .
-
-
-
-Use :c:func:`krb5_free_principal()` to free *principal* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_get_type - Retrieve the type of a credential cache.
-=============================================================
-
-..
-
-.. c:function:: const char * krb5_cc_get_type(krb5_context context, krb5_ccache cache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
-
-..
-
-
-
-:return:
- - The type of a credential cache as an alias that must not be modified or freed by the caller.
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_initialize - Initialize a credential cache.
-=====================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_initialize(krb5_context context, krb5_ccache cache, krb5_principal principal)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[in]** **principal** - Default principal name
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - System errors; Permission errors; Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Destroy any existing contents of *cache* and initialize it for the default principal *principal* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_move - Move a credential cache.
-=========================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_move(krb5_context context, krb5_ccache src, krb5_ccache dst)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **src** - The credential cache to move the content from
-
- **[in]** **dst** - The credential cache to move the content to
-
-
-..
-
-
-:retval:
- - 0 Success; src is closed.
-
-
-:return:
- - Kerberos error codes; src is still allocated.
-
-..
-
-
-
-
-
-
-
-This function reinitializes *dst* and populates it with the credentials and default principal of *src* ; then, if successful, destroys *src* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name.
-==============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_new_unique(krb5_context context, const char * type, const char * hint, krb5_ccache * id)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **type** - Credential cache type name
-
- **[in]** **hint** - Unused
-
- **[out]** **id** - Credential cache handle
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_next_cred - Retrieve the next entry from the credential cache.
-========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_next_cred(krb5_context context, krb5_ccache cache, krb5_cc_cursor * cursor, krb5_creds * creds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[in]** **cursor** - Cursor
-
- **[out]** **creds** - Next credential cache entry
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function fills in *creds* with the next entry in *cache* and advances *cursor* .
-
-
-
-Use :c:func:`krb5_free_cred_contents()` to free *creds* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_cc_start_seq_get()` , krb5_end_seq_get()
-
-
-
-
-
+++ /dev/null
-krb5_cc_remove_cred - Remove credentials from a credential cache.
-===================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_remove_cred(krb5_context context, krb5_ccache cache, krb5_flags flags, krb5_creds * creds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[in]** **flags** - Bitwise-ORed search flags
-
- **[in]** **creds** - Credentials to be matched
-
-
-..
-
-
-:retval:
- - KRB5_CC_NOSUPP Not implemented for this cache type
-
-
-:return:
- - No matches found; Data cannot be deleted; Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function accepts the same flag values as :c:func:`krb5_cc_retrieve_cred()` .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-.. warning::
-
- This function is not implemented for some cache types.
-
-
-
-
-
+++ /dev/null
-krb5_cc_resolve - Resolve a credential cache name.
-====================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_resolve(krb5_context context, const char * name, krb5_ccache * cache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **name** - Credential cache name to be resolved
-
- **[out]** **cache** - Credential cache handle
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Fills in *cache* with a *cache* handle that corresponds to the name in *name* . *name* should be of the form **type:residual** , and *type* must be a type known to the library. If the *name* does not contain a colon, interpret it as a file name.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache.
-===================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_retrieve_cred(krb5_context context, krb5_ccache cache, krb5_flags flags, krb5_creds * mcreds, krb5_creds * creds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[in]** **flags** - Flags bit mask
-
- **[in]** **mcreds** - Credentials to match
-
- **[out]** **creds** - Credentials matching the requested value
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function searches a credential cache for credentials matching *mcreds* and returns it if found.
-
-
-
-Valid values for *flags* are:
-
-
-
-
-
- - :data:`KRB5_TC_MATCH_TIMES` The requested lifetime must be at least as great as in *mcreds* .
-
-
- - :data:`KRB5_TC_MATCH_IS_SKEY` The *is_skey* field much match exactly.
-
-
- - :data:`KRB5_TC_MATCH_FLAGS` Flags set in *mcreds* must be set.
-
-
- - :data:`KRB5_TC_MATCH_TIMES_EXACT` The requested lifetime must match exactly.
-
-
- - :data:`KRB5_TC_MATCH_FLAGS_EXACT` Flags must match exactly.
-
-
- - :data:`KRB5_TC_MATCH_AUTHDATA` The authorization data must match.
-
-
- - :data:`KRB5_TC_MATCH_SRV_NAMEONLY` Only the name portion of the principal name must match, not the realm.
-
-
- - :data:`KRB5_TC_MATCH_2ND_TKT` The second tickets must match.
-
-
- - :data:`KRB5_TC_MATCH_KTYPE` The encryption key types must match.
-
-
- - :data:`KRB5_TC_SUPPORTED_KTYPES` Check all matching entries that have any supported encryption type and return the one with the encryption type listed earliest.
-
- Use :c:func:`krb5_free_cred_contents()` to free *creds* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_select - Select a credential cache to use with a server principal.
-============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_select(krb5_context context, krb5_principal server, krb5_ccache * cache_out, krb5_principal * princ_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **server** - Server principal
-
- **[out]** **cache_out** - Credential cache handle
-
- **[out]** **princ_out** - Client principal
-
-
-..
-
-
-
-:return:
- - If an appropriate cache is found, 0 is returned, cache_out is set to the selected cache, and princ_out is set to the default principal of that cache.
-
-..
-
-
-
-
-
-
-
-Select a cache within the collection containing credentials most appropriate for use with *server* , according to configured rules and heuristics.
-
-
-
-Use :c:func:`krb5_cc_close()` to release *cache_out* when it is no longer needed. Use :c:func:`krb5_free_principal()` to release *princ_out* when it is no longer needed. Note that *princ_out* is set in some error conditions.
-
-
-
-If the appropriate client principal can be authoritatively determined but the cache collection contains no credentials for that principal, then KRB5_CC_NOTFOUND is returned, *cache_out* is set to NULL, and *princ_out* is set to the appropriate client principal.
-
-
-
-If no configured mechanism can determine the appropriate cache or principal, KRB5_CC_NOTFOUND is returned and *cache_out* and *princ_out* are set to NULL.
-
-
-
-Any other error code indicates a fatal error in the processing of a cache selection mechanism.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.10
-
-
+++ /dev/null
-krb5_cc_set_config - Store a configuration value in a credential cache.
-=========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_set_config(krb5_context context, krb5_ccache id, krb5_const_principal principal, const char * key, krb5_data * data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **id** - Credential cache handle
-
- **[in]** **principal** - Configuration for a specific principal; if NULL, global for the whole cache
-
- **[in]** **key** - Name of config variable
-
- **[in]** **data** - Data to store, or NULL to remove
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-.. warning::
-
- Before version 1.10 *data* was assumed to be always non-null.
-
-
-.. note::
-
- Existing configuration under the same key is over-written.
-
-
-
-
+++ /dev/null
-krb5_cc_set_default_name - Set the default credential cache name.
-===================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_set_default_name(krb5_context context, const char * name)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **name** - Default credential cache name or NULL
-
-
-..
-
-
-:retval:
- - 0 Success
- - KV5M_CONTEXT Bad magic number for _krb5_context structure
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Set the default credential cache name to *name* for future operations using *context* . If *name* is NULL, clear any previous application-set default name and forget any cached value of the default name for *context* .
-
-
-
-Calls to this function invalidate the result of any previous calls to :c:func:`krb5_cc_default_name()` using *context* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_set_flags - Set options flags on a credential cache.
-==============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_set_flags(krb5_context context, krb5_ccache cache, krb5_flags flags)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[in]** **flags** - Flag bit mask
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function resets *cache* flags to *flags* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache.
-==============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_start_seq_get(krb5_context context, krb5_ccache cache, krb5_cc_cursor * cursor)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[out]** **cursor** - Cursor
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
- :c:func:`krb5_cc_end_seq_get()` must be called to complete the retrieve operation.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- If the cache represented by *cache* is modified between the time of the call to this function and the time of the final :c:func:`krb5_cc_end_seq_get()` , these changes may not be reflected in the results of :c:func:`krb5_cc_next_cred()` calls.
-
-
-
-
+++ /dev/null
-krb5_cc_store_cred - Store credentials in a credential cache.
-===============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_store_cred(krb5_context context, krb5_ccache cache, krb5_creds * creds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
- **[in]** **creds** - Credentials to be stored in cache
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Permission errors; storage failure errors; Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function stores *creds* into *cache* . If *creds->server* and the server in the decoded ticket *creds->ticket* differ, the credentials will be stored under both server principal names.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cc_support_switch - Determine whether a credential cache type supports switching.
-========================================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_cc_support_switch(krb5_context context, const char * type)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **type** - Credential cache type
-
-
-..
-
-
-:retval:
- - TRUE if type supports switching
- - FALSE if it does not or is not a valid credential cache type.
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.10
-
-
+++ /dev/null
-krb5_cc_switch - Make a credential cache the primary cache for its collection.
-================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cc_switch(krb5_context context, krb5_ccache cache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cache** - Credential cache handle
-
-
-..
-
-
-:retval:
- - 0 Success, or the type of cache doesn't support switching
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-If the type of *cache* supports it, set *cache* to be the primary credential cache for the collection it belongs to.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_cccol_cursor_free - Free a credential cache collection cursor.
-=====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cccol_cursor_free(krb5_context context, krb5_cccol_cursor * cursor)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cursor** - Cursor
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_cccol_cursor_new()` , :c:func:`krb5_cccol_cursor_next()`
-
-
-
-
-
+++ /dev/null
-krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches.
-============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cccol_cursor_new(krb5_context context, krb5_cccol_cursor * cursor)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **cursor** - Cursor
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Get a new cache iteration *cursor* that will iterate over all known credential caches independent of type.
-
-
-
-Use :c:func:`krb5_cccol_cursor_free()` to release *cursor* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_cccol_cursor_next()`
-
-
-
-
-
+++ /dev/null
-krb5_cccol_cursor_next - Get the next credential cache in the collection.
-===========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cccol_cursor_next(krb5_context context, krb5_cccol_cursor cursor, krb5_ccache * ccache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cursor** - Cursor
-
- **[out]** **ccache** - Credential cache handle
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_cc_close()` to close *ccache* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_cccol_cursor_new()` , :c:func:`krb5_cccol_cursor_free()`
-
-
-
-
-
-
-.. note::
-
- When all caches are iterated over and the end of the list is reached, *ccache* is set to NULL.
-
-
-
-
+++ /dev/null
-krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches.
-=====================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cccol_have_content(krb5_context context)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
-
-..
-
-
-:retval:
- - 0 At least one initialized cache is present in the collection
- - KRB5_CC_NOTFOUND The collection contains no caches
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_change_password - Change a password for an existing Kerberos account.
-============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_change_password(krb5_context context, krb5_creds * creds, const char * newpw, int * result_code, krb5_data * result_code_string, krb5_data * result_string)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **creds** - Credentials for kadmin/changepw service
-
- **[in]** **newpw** - New password
-
- **[out]** **result_code** - Numeric error code from server
-
- **[out]** **result_code_string** - String equivalent to *result_code*
-
- **[out]** **result_string** - Change password response from the KDC
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Change the password for the existing principal identified by *creds* .
-
-
-
-The possible values of the output *result_code* are:
-
-
-
-
-
- - :data:`KRB5_KPASSWD_SUCCESS` (0) - success
-
-
- - :data:`KRB5_KPASSWD_MALFORMED` (1) - Malformed request error
-
-
- - :data:`KRB5_KPASSWD_HARDERROR` (2) - Server error
-
-
- - :data:`KRB5_KPASSWD_AUTHERROR` (3) - Authentication error
-
-
- - :data:`KRB5_KPASSWD_SOFTERROR` (4) - Password change rejected
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time.
-===================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_check_clockskew(krb5_context context, krb5_timestamp date)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **date** - Timestamp to check
-
-
-..
-
-
-:retval:
- - 0 Success
- - KRB5KRB_AP_ERR_SKEW date is not within allowable clock skew
-
-
-..
-
-
-
-
-
-
-
-This function checks if *date* is close enough to the current time according to the configured allowable clock skew.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.10
-
-
+++ /dev/null
-krb5_checksum_size
-==================
-
-..
-
-.. c:function:: size_t krb5_checksum_size(krb5_context context, krb5_cksumtype ctype)
-
-..
-
-
-:param:
-
- **context**
-
- **ctype**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED See krb5_c_checksum_length()
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_chpw_message - Get a result message for changing or setting a password.
-==============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_chpw_message(krb5_context context, const krb5_data * server_string, char ** message_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **server_string** - Data returned from the remote system
-
- **[out]** **message_out** - A message displayable to the user
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function processes the *server_string* returned in the *result_string* parameter of :c:func:`krb5_change_password()` , :c:func:`krb5_set_password()` , and related functions, and returns a displayable string. If *server_string* contains Active Directory structured policy information, it will be converted into human-readable text.
-
-
-
-Use :c:func:`krb5_free_string()` to free *message_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_cksumtype_to_string - Convert a checksum type to a string.
-=================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_cksumtype_to_string(krb5_cksumtype cksumtype, char * buffer, size_t buflen)
-
-..
-
-
-:param:
-
- **[in]** **cksumtype** - Checksum type
-
- **[out]** **buffer** - Buffer to hold converted checksum type
-
- **[in]** **buflen** - Storage available in *buffer*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_clear_error_message - Clear the extended error message in a context.
-===========================================================================
-
-..
-
-.. c:function:: void krb5_clear_error_message(krb5_context ctx)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function unsets the extended error message in a context, to ensure that it is not mistakenly applied to another occurrence of the same error code.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_addresses - Copy an array of addresses.
-===================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_addresses(krb5_context context, krb5_address *const * inaddr, krb5_address *** outaddr)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **inaddr** - Array of addresses to be copied
-
- **[out]** **outaddr** - Copy of array of addresses
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a new address array containing a copy of *inaddr* . Use :c:func:`krb5_free_addresses()` to free *outaddr* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_authdata - Copy an authorization data list.
-=======================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_authdata(krb5_context context, krb5_authdata *const * in_authdat, krb5_authdata *** out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **in_authdat** - List of *krb5_authdata* structures
-
- **[out]** **out** - New array of *krb5_authdata* structures
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a new authorization data list containing a copy of *in_authdat* , which must be null-terminated. Use :c:func:`krb5_free_authdata()` to free *out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The last array entry in *in_authdat* must be a NULL pointer.
-
-
-
-
+++ /dev/null
-krb5_copy_authenticator - Copy a krb5_authenticator structure.
-================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_authenticator(krb5_context context, const krb5_authenticator * authfrom, krb5_authenticator ** authto)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **authfrom** - krb5_authenticator structure to be copied
-
- **[out]** **authto** - Copy of krb5_authenticator structure
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a new krb5_authenticator structure with the content of *authfrom* . Use :c:func:`krb5_free_authenticator()` to free *authto* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_checksum - Copy a krb5_checksum structure.
-======================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_checksum(krb5_context context, const krb5_checksum * ckfrom, krb5_checksum ** ckto)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ckfrom** - Checksum to be copied
-
- **[out]** **ckto** - Copy of krb5_checksum structure
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a new krb5_checksum structure with the contents of *ckfrom* . Use :c:func:`krb5_free_checksum()` to free *ckto* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_context - Copy a krb5_context structure.
-====================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_context(krb5_context ctx, krb5_context * nctx_out)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[out]** **nctx_out** - New context structure
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-The newly created context must be released by calling :c:func:`krb5_free_context()` when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_creds - Copy a krb5_creds structure.
-================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_creds(krb5_context context, const krb5_creds * incred, krb5_creds ** outcred)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **incred** - Credentials structure to be copied
-
- **[out]** **outcred** - Copy of *incred*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a new credential with the contents of *incred* . Use :c:func:`krb5_free_creds()` to free *outcred* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_data - Copy a krb5_data object.
-===========================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_data(krb5_context context, const krb5_data * indata, krb5_data ** outdata)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **indata** - Data object to be copied
-
- **[out]** **outdata** - Copy of *indata*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a new krb5_data object with the contents of *indata* . Use :c:func:`krb5_free_data()` to free *outdata* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_error_message - Copy the most recent extended error message from one context to another.
-====================================================================================================
-
-..
-
-.. c:function:: void krb5_copy_error_message(krb5_context dest_ctx, krb5_context src_ctx)
-
-..
-
-
-:param:
-
- **[in]** **dest_ctx** - Library context to copy message to
-
- **[in]** **src_ctx** - Library context with current message
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_keyblock - Copy a keyblock.
-=======================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_keyblock(krb5_context context, const krb5_keyblock * from, krb5_keyblock ** to)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **from** - Keyblock to be copied
-
- **[out]** **to** - Copy of keyblock *from*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a new keyblock with the same contents as *from* . Use :c:func:`krb5_free_keyblock()` to free *to* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_keyblock_contents - Copy the contents of a keyblock.
-================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_keyblock_contents(krb5_context context, const krb5_keyblock * from, krb5_keyblock * to)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **from** - Key to be copied
-
- **[out]** **to** - Output key
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function copies the contents of *from* to *to* . Use :c:func:`krb5_free_keyblock_contents()` to free *to* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_principal - Copy a principal.
-=========================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_principal(krb5_context context, krb5_const_principal inprinc, krb5_principal * outprinc)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **inprinc** - Principal to be copied
-
- **[out]** **outprinc** - Copy of *inprinc*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a new principal structure with the contents of *inprinc* . Use :c:func:`krb5_free_principal()` to free *outprinc* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_copy_ticket - Copy a krb5_ticket structure.
-==================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_copy_ticket(krb5_context context, const krb5_ticket * from, krb5_ticket ** pto)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **from** - Ticket to be copied
-
- **[out]** **pto** - Copy of ticket
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a new krb5_ticket structure containing the contents of *from* . Use :c:func:`krb5_free_ticket()` to free *pto* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_decode_authdata_container - Unwrap authorization data.
-=============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_decode_authdata_container(krb5_context context, krb5_authdatatype type, const krb5_authdata * container, krb5_authdata *** authdata)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **type** - :data:`KRB5_AUTHDATA` type of *container*
-
- **[in]** **container** - Authorization data to be decoded
-
- **[out]** **authdata** - List of decoded authorization data
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_encode_authdata_container()`
-
-
-
-
-
+++ /dev/null
-krb5_decode_ticket - Decode an ASN.1-formatted ticket.
-========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_decode_ticket(const krb5_data * code, krb5_ticket ** rep)
-
-..
-
-
-:param:
-
- **[in]** **code** - ASN.1-formatted ticket
-
- **[out]** **rep** - Decoded ticket information
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_decrypt
-============
-
-..
-
-.. c:function:: krb5_error_code krb5_decrypt(krb5_context context, krb5_const_pointer inptr, krb5_pointer outptr, size_t size, krb5_encrypt_block * eblock, krb5_pointer ivec)
-
-..
-
-
-:param:
-
- **context**
-
- **inptr**
-
- **outptr**
-
- **size**
-
- **eblock**
-
- **ivec**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_c_* API family.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_deltat_to_string - Convert a relative time value to a string.
-====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_deltat_to_string(krb5_deltat deltat, char * buffer, size_t buflen)
-
-..
-
-
-:param:
-
- **[in]** **deltat** - Relative time value to convert
-
- **[out]** **buffer** - Buffer to hold time string
-
- **[in]** **buflen** - Storage available in *buffer*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_eblock_enctype
-===================
-
-..
-
-.. c:function:: krb5_enctype krb5_eblock_enctype(krb5_context context, const krb5_encrypt_block * eblock)
-
-..
-
-
-:param:
-
- **context**
-
- **eblock**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_c_* API family.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_encode_authdata_container - Wrap authorization data in a container.
-==========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_encode_authdata_container(krb5_context context, krb5_authdatatype type, krb5_authdata *const * authdata, krb5_authdata *** container)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **type** - :data:`KRB5_AUTHDATA` type of *container*
-
- **[in]** **authdata** - List of authorization data to be encoded
-
- **[out]** **container** - List of encoded authorization data
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-The result is returned in *container* as a single-element list.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_decode_authdata_container()`
-
-
-
-
-
+++ /dev/null
-krb5_encrypt
-============
-
-..
-
-.. c:function:: krb5_error_code krb5_encrypt(krb5_context context, krb5_const_pointer inptr, krb5_pointer outptr, size_t size, krb5_encrypt_block * eblock, krb5_pointer ivec)
-
-..
-
-
-:param:
-
- **context**
-
- **inptr**
-
- **outptr**
-
- **size**
-
- **eblock**
-
- **ivec**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_c_* API family.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_encrypt_size
-=================
-
-..
-
-.. c:function:: size_t krb5_encrypt_size(size_t length, krb5_enctype crypto)
-
-..
-
-
-:param:
-
- **length**
-
- **crypto**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_c_* API family.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_enctype_to_name - Convert an encryption type to a name or alias.
-=======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_enctype_to_name(krb5_enctype enctype, krb5_boolean shortest, char * buffer, size_t buflen)
-
-..
-
-
-:param:
-
- **[in]** **enctype** - Encryption type
-
- **[in]** **shortest** - Flag
-
- **[out]** **buffer** - Buffer to hold encryption type string
-
- **[in]** **buflen** - Storage available in *buffer*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-If *shortest* is FALSE, this function returns the enctype's canonical name (like"aes128-cts-hmac-sha1-96"). If *shortest* is TRUE, it return the enctype's shortest alias (like"aes128-cts").
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_enctype_to_string - Convert an encryption type to a string.
-==================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_enctype_to_string(krb5_enctype enctype, char * buffer, size_t buflen)
-
-..
-
-
-:param:
-
- **[in]** **enctype** - Encryption type
-
- **[out]** **buffer** - Buffer to hold encryption type string
-
- **[in]** **buflen** - Storage available in *buffer*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_expand_hostname - Canonicalize a hostname, possibly using name service.
-==============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_expand_hostname(krb5_context context, const char * host, char ** canonhost_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **host** - Input hostname
-
- **[out]** **canonhost_out** - Canonicalized hostname
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function canonicalizes orig_hostname, possibly using name service lookups if configuration permits. Use :c:func:`krb5_free_string()` to free *canonhost_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.15
-
-
+++ /dev/null
-krb5_find_authdata - Find authorization data elements.
-========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_find_authdata(krb5_context context, krb5_authdata *const * ticket_authdata, krb5_authdata *const * ap_req_authdata, krb5_authdatatype ad_type, krb5_authdata *** results)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ticket_authdata** - Authorization data list from ticket
-
- **[in]** **ap_req_authdata** - Authorization data list from AP request
-
- **[in]** **ad_type** - Authorization data type to find
-
- **[out]** **results** - List of matching entries
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function searches *ticket_authdata* and *ap_req_authdata* for elements of type *ad_type* . Either input list may be NULL, in which case it will not be searched; otherwise, the input lists must be terminated by NULL entries. This function will search inside AD-IF-RELEVANT containers if found in either list. Use :c:func:`krb5_free_authdata()` to free *results* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.10
-
-
+++ /dev/null
-krb5_finish_key
-===============
-
-..
-
-.. c:function:: krb5_error_code krb5_finish_key(krb5_context context, krb5_encrypt_block * eblock)
-
-..
-
-
-:param:
-
- **context**
-
- **eblock**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_c_* API family.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_finish_random_key
-======================
-
-..
-
-.. c:function:: krb5_error_code krb5_finish_random_key(krb5_context context, const krb5_encrypt_block * eblock, krb5_pointer * ptr)
-
-..
-
-
-:param:
-
- **context**
-
- **eblock**
-
- **ptr**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_c_* API family.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_addresses - Free the data stored in array of addresses.
-===================================================================
-
-..
-
-.. c:function:: void krb5_free_addresses(krb5_context context, krb5_address ** val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Array of addresses to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* and the array itself.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The last entry in the array must be a NULL pointer.
-
-
-
-
+++ /dev/null
-krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure.
-====================================================================
-
-..
-
-.. c:function:: void krb5_free_ap_rep_enc_part(krb5_context context, krb5_ap_rep_enc_part * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - AP-REP enc part to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* and the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_authdata - Free the storage assigned to array of authentication data.
-=================================================================================
-
-..
-
-.. c:function:: void krb5_free_authdata(krb5_context context, krb5_authdata ** val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Array of authentication data to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* and the array itself.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The last entry in the array must be a NULL pointer.
-
-
-
-
+++ /dev/null
-krb5_free_authenticator - Free a krb5_authenticator structure.
-================================================================
-
-..
-
-.. c:function:: void krb5_free_authenticator(krb5_context context, krb5_authenticator * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Authenticator structure to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* and the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_checksum - Free a krb5_checksum structure.
-======================================================
-
-..
-
-.. c:function:: void krb5_free_checksum(krb5_context context, krb5_checksum * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Checksum structure to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* and the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_checksum_contents - Free the contents of a krb5_checksum structure.
-===============================================================================
-
-..
-
-.. c:function:: void krb5_free_checksum_contents(krb5_context context, krb5_checksum * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Checksum structure to free contents of
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* , but not the structure itself. It sets the checksum's data pointer to null and (beginning in release 1.19) sets its length to zero.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_cksumtypes - Free an array of checksum types.
-=========================================================
-
-..
-
-.. c:function:: void krb5_free_cksumtypes(krb5_context context, krb5_cksumtype * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Array of checksum types to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_context - Free a krb5 library context.
-==================================================
-
-..
-
-.. c:function:: void krb5_free_context(krb5_context context)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees a *context* that was created by :c:func:`krb5_init_context()` or :c:func:`krb5_init_secure_context()` .
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_cred_contents - Free the contents of a krb5_creds structure.
-========================================================================
-
-..
-
-.. c:function:: void krb5_free_cred_contents(krb5_context context, krb5_creds * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Credential structure to free contents of
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* , but not the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_creds - Free a krb5_creds structure.
-================================================
-
-..
-
-.. c:function:: void krb5_free_creds(krb5_context context, krb5_creds * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Credential structure to be freed.
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* and the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_data - Free a krb5_data structure.
-==============================================
-
-..
-
-.. c:function:: void krb5_free_data(krb5_context context, krb5_data * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Data structure to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* and the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field.
-===============================================================================================
-
-..
-
-.. c:function:: void krb5_free_data_contents(krb5_context context, krb5_data * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Data structure to free contents of
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* , but not the structure itself. It sets the structure's data pointer to null and (beginning in release 1.19) sets its length to zero.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() .
-==============================================================================================
-
-..
-
-.. c:function:: void krb5_free_default_realm(krb5_context context, char * lrealm)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **lrealm** - Realm to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_enctypes - Free an array of encryption types.
-=========================================================
-
-..
-
-.. c:function:: void krb5_free_enctypes(krb5_context context, krb5_enctype * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Array of enctypes to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.12
-
-
+++ /dev/null
-krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() .
-=====================================================================================
-
-..
-
-.. c:function:: void krb5_free_error(krb5_context context, krb5_error * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Error data structure to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* and the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_error_message - Free an error message generated by krb5_get_error_message() .
-=========================================================================================
-
-..
-
-.. c:function:: void krb5_free_error_message(krb5_context ctx, const char * msg)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **msg** - Pointer to error message
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() .
-=============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_free_host_realm(krb5_context context, char *const * realmlist)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **realmlist** - List of realm names to be released
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_keyblock - Free a krb5_keyblock structure.
-======================================================
-
-..
-
-.. c:function:: void krb5_free_keyblock(krb5_context context, krb5_keyblock * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Keyblock to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* and the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure.
-===============================================================================
-
-..
-
-.. c:function:: void krb5_free_keyblock_contents(krb5_context context, krb5_keyblock * key)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Keyblock to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *key* , but not the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_keytab_entry_contents - Free the contents of a key table entry.
-===========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_free_keytab_entry_contents(krb5_context context, krb5_keytab_entry * entry)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **entry** - Key table entry whose contents are to be freed
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The pointer is not freed.
-
-
-
-
+++ /dev/null
-krb5_free_principal - Free the storage assigned to a principal.
-=================================================================
-
-..
-
-.. c:function:: void krb5_free_principal(krb5_context context, krb5_principal val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Principal to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_string - Free a string allocated by a krb5 function.
-================================================================
-
-..
-
-.. c:function:: void krb5_free_string(krb5_context context, char * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - String to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.10
-
-
+++ /dev/null
-krb5_free_tgt_creds - Free an array of credential structures.
-===============================================================
-
-..
-
-.. c:function:: void krb5_free_tgt_creds(krb5_context context, krb5_creds ** tgts)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **tgts** - Null-terminated array of credentials to free
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The last entry in the array *tgts* must be a NULL pointer.
-
-
-
-
+++ /dev/null
-krb5_free_ticket - Free a ticket.
-===================================
-
-..
-
-.. c:function:: void krb5_free_ticket(krb5_context context, krb5_ticket * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Ticket to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *val* and the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_free_unparsed_name - Free a string representation of a principal.
-========================================================================
-
-..
-
-.. c:function:: void krb5_free_unparsed_name(krb5_context context, char * val)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **val** - Name string to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message.
-=========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_fwd_tgt_creds(krb5_context context, krb5_auth_context auth_context, const char * rhost, krb5_principal client, krb5_principal server, krb5_ccache cc, int forwardable, krb5_data * outbuf)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **rhost** - Remote host
-
- **[in]** **client** - Client principal of TGT
-
- **[in]** **server** - Principal of server to receive TGT
-
- **[in]** **cc** - Credential cache handle (NULL to use default)
-
- **[in]** **forwardable** - Whether TGT should be forwardable
-
- **[out]** **outbuf** - KRB-CRED message
-
-
-..
-
-
-:retval:
- - 0 Success
- - ENOMEM Insufficient memory
- - KRB5_PRINC_NOMATCH Requested principal and ticket do not match
- - KRB5_NO_TKT_SUPPLIED Request did not supply a ticket
- - KRB5_CC_BADNAME Credential cache name or principal name malformed
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Get a TGT for use at the remote host *rhost* and format it into a KRB-CRED message. If *rhost* is NULL and *server* is of type :data:`KRB5_NT_SRV_HST` , the second component of *server* will be used.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_credentials - Get an additional ticket.
-==================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_credentials(krb5_context context, krb5_flags options, krb5_ccache ccache, krb5_creds * in_creds, krb5_creds ** out_creds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **options** - Options
-
- **[in]** **ccache** - Credential cache handle
-
- **[in]** **in_creds** - Input credentials
-
- **[out]** **out_creds** - Output updated credentials
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Use *ccache* or a TGS exchange to get a service ticket matching *in_creds* .
-
-
-
-Valid values for *options* are:
-
- - :data:`KRB5_GC_CACHED` Search only credential cache for the ticket
-
-
- - :data:`KRB5_GC_USER_USER` Return a user to user authentication ticket
-
- *in_creds* must be non-null. *in_creds->client* and *in_creds->server* must be filled in to specify the client and the server respectively. If any authorization data needs to be requested for the service ticket (such as restrictions on how the ticket can be used), specify it in *in_creds->authdata* ; otherwise set *in_creds->authdata* to NULL. The session key type is specified in *in_creds->keyblock.enctype* , if it is nonzero.
-
-
-
-The expiration date is specified in *in_creds->times.endtime* . The KDC may return tickets with an earlier expiration date. If *in_creds->times.endtime* is set to 0, the latest possible expiration date will be requested.
-
-
-
-Any returned ticket and intermediate ticket-granting tickets are stored in *ccache* .
-
-
-
-Use :c:func:`krb5_free_creds()` to free *out_creds* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_credentials_renew
-==========================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_credentials_renew(krb5_context context, krb5_flags options, krb5_ccache ccache, krb5_creds * in_creds, krb5_creds ** out_creds)
-
-..
-
-
-:param:
-
- **context**
-
- **options**
-
- **ccache**
-
- **in_creds**
-
- **out_creds**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_get_renewed_creds.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_credentials_validate
-=============================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_credentials_validate(krb5_context context, krb5_flags options, krb5_ccache ccache, krb5_creds * in_creds, krb5_creds ** out_creds)
-
-..
-
-
-:param:
-
- **context**
-
- **options**
-
- **ccache**
-
- **in_creds**
-
- **out_creds**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_get_validated_creds.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_default_realm - Retrieve the default realm.
-======================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_default_realm(krb5_context context, char ** lrealm)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **lrealm** - Default realm name
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Retrieves the default realm to be used if no user-specified realm is available.
-
-
-
-Use :c:func:`krb5_free_default_realm()` to free *lrealm* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_error_message - Get the (possibly extended) error message for a code.
-================================================================================
-
-..
-
-.. c:function:: const char * krb5_get_error_message(krb5_context ctx, krb5_error_code code)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **code** - Error code
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-The behavior of :c:func:`krb5_get_error_message()` is only defined the first time it is called after a failed call to a krb5 function using the same context, and only when the error code passed in is the same as that returned by the krb5 function.
-
-
-
-This function never returns NULL, so its result may be used unconditionally as a C string.
-
-
-
-The string returned by this function must be freed using :c:func:`krb5_free_error_message()`
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- Future versions may return the same string for the second and following calls.
-
-
-
-
+++ /dev/null
-krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC.
-======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_etype_info(krb5_context context, krb5_principal principal, krb5_get_init_creds_opt * opt, krb5_enctype * enctype_out, krb5_data * salt_out, krb5_data * s2kparams_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **principal** - Principal whose information is requested
-
- **[in]** **opt** - Initial credential options
-
- **[out]** **enctype_out** - The enctype chosen by KDC
-
- **[out]** **salt_out** - Salt returned from KDC
-
- **[out]** **s2kparams_out** - String-to-key parameters returned from KDC
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - A Kerberos error code
-
-..
-
-
-
-
-
-
-
-Send an initial ticket request for *principal* and extract the encryption type, salt type, and string-to-key parameters from the KDC response. If the KDC provides no etype-info, set *enctype_out* to **ENCTYPE_NULL** and set *salt_out* and *s2kparams_out* to empty. If the KDC etype-info provides no salt, compute the default salt and place it in *salt_out* . If the KDC etype-info provides no string-to-key parameters, set *s2kparams_out* to empty.
-
-
-
- *opt* may be used to specify options which affect the initial request, such as request encryption types or a FAST armor cache (see :c:func:`krb5_get_init_creds_opt_set_etype_list()` and :c:func:`krb5_get_init_creds_opt_set_fast_ccache_name()` ).
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *salt_out* and *s2kparams_out* when they are no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.17
-
-
+++ /dev/null
-krb5_get_fallback_host_realm
-============================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_fallback_host_realm(krb5_context context, krb5_data * hdata, char *** realmsp)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **hdata** - Host name (or NULL)
-
- **[out]** **realmsp** - Null-terminated list of realm names
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Fill in *realmsp* with a pointer to a null-terminated list of realm names obtained through heuristics or insecure resolution methods which have lower priority than KDC referrals.
-
-
-
-If *host* is NULL, the local host's realms are determined.
-
-
-
-Use :c:func:`krb5_free_host_realm()` to release *realmsp* when it is no longer needed.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_host_realm - Get the Kerberos realm names for a host.
-================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_host_realm(krb5_context context, const char * host, char *** realmsp)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **host** - Host name (or NULL)
-
- **[out]** **realmsp** - Null-terminated list of realm names
-
-
-..
-
-
-:retval:
- - 0 Success
- - ENOMEM Insufficient memory
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Fill in *realmsp* with a pointer to a null-terminated list of realm names. If there are no known realms for the host, a list containing the referral (empty) realm is returned.
-
-
-
-If *host* is NULL, the local host's realms are determined.
-
-
-
-Use :c:func:`krb5_free_host_realm()` to release *realmsp* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_in_tkt_with_keytab
-===========================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_in_tkt_with_keytab(krb5_context context, krb5_flags options, krb5_address *const * addrs, krb5_enctype * ktypes, krb5_preauthtype * pre_auth_types, krb5_keytab arg_keytab, krb5_ccache ccache, krb5_creds * creds, krb5_kdc_rep ** ret_as_reply)
-
-..
-
-
-:param:
-
- **context**
-
- **options**
-
- **addrs**
-
- **ktypes**
-
- **pre_auth_types**
-
- **arg_keytab**
-
- **ccache**
-
- **creds**
-
- **ret_as_reply**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_get_init_creds_keytab() .
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_in_tkt_with_password
-=============================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_in_tkt_with_password(krb5_context context, krb5_flags options, krb5_address *const * addrs, krb5_enctype * ktypes, krb5_preauthtype * pre_auth_types, const char * password, krb5_ccache ccache, krb5_creds * creds, krb5_kdc_rep ** ret_as_reply)
-
-..
-
-
-:param:
-
- **context**
-
- **options**
-
- **addrs**
-
- **ktypes**
-
- **pre_auth_types**
-
- **password**
-
- **ccache**
-
- **creds**
-
- **ret_as_reply**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_get_init_creds_password() .
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_in_tkt_with_skey
-=========================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_in_tkt_with_skey(krb5_context context, krb5_flags options, krb5_address *const * addrs, krb5_enctype * ktypes, krb5_preauthtype * pre_auth_types, const krb5_keyblock * key, krb5_ccache ccache, krb5_creds * creds, krb5_kdc_rep ** ret_as_reply)
-
-..
-
-
-:param:
-
- **context**
-
- **options**
-
- **addrs**
-
- **ktypes**
-
- **pre_auth_types**
-
- **key**
-
- **ccache**
-
- **creds**
-
- **ret_as_reply**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_get_init_creds().
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_keytab - Get initial credentials using a key table.
-=========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_keytab(krb5_context context, krb5_creds * creds, krb5_principal client, krb5_keytab arg_keytab, krb5_deltat start_time, const char * in_tkt_service, krb5_get_init_creds_opt * k5_gic_options)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **creds** - New credentials
-
- **[in]** **client** - Client principal
-
- **[in]** **arg_keytab** - Key table handle
-
- **[in]** **start_time** - Time when ticket becomes valid (0 for now)
-
- **[in]** **in_tkt_service** - Service name of initial credentials (or NULL)
-
- **[in]** **k5_gic_options** - Initial credential options
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function requests KDC for an initial credentials for *client* using a client key stored in *arg_keytab* . If *in_tkt_service* is specified, it is parsed as a principal name (with the realm ignored) and used as the service principal for the request; otherwise the ticket-granting service is used.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure.
-======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_alloc(krb5_context context, krb5_get_init_creds_opt ** opt)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **opt** - New options structure
-
-
-..
-
-
-:retval:
- - 0 - Success; Kerberos errors otherwise.
-
-
-..
-
-
-
-
-
-
-
-This function is the preferred way to create an options structure for getting initial credentials, and is required to make use of certain options. Use :c:func:`krb5_get_init_creds_opt_free()` to free *opt* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_free - Free initial credential options.
-=================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_free(krb5_context context, krb5_get_init_creds_opt * opt)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options structure to free
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_get_init_creds_opt_alloc()`
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options.
-===============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_get_fast_flags(krb5_context context, krb5_get_init_creds_opt * opt, krb5_flags * out_flags)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options
-
- **[out]** **out_flags** - FAST flags
-
-
-..
-
-
-:retval:
- - 0 - Success; Kerberos errors otherwise.
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_init
-============================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_init(krb5_get_init_creds_opt * opt)
-
-..
-
-
-:param:
-
- **opt**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Use krb5_get_init_creds_opt_alloc() instead.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options.
-====================================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_address_list(krb5_get_init_creds_opt * opt, krb5_address ** addresses)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Options structure
-
- **[in]** **addresses** - Null-terminated array of addresses
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options.
-========================================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_anonymous(krb5_get_init_creds_opt * opt, int anonymous)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Options structure
-
- **[in]** **anonymous** - Whether to make an anonymous request
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function may be used to request anonymous credentials from the KDC by setting *anonymous* to non-zero. Note that anonymous credentials are only a request; clients must verify that credentials are anonymous if that is a requirement.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.
-=============================================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_canonicalize(krb5_get_init_creds_opt * opt, int canonicalize)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Options structure
-
- **[in]** **canonicalize** - Whether to canonicalize client principal
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options.
-==============================================================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_change_password_prompt(krb5_get_init_creds_opt * opt, int prompt)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Options structure
-
- **[in]** **prompt** - Whether to prompt to change password
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This flag is on by default. It controls whether :c:func:`krb5_get_init_creds_password()` will react to an expired-password error by prompting for a new password and attempting to change the old one.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options.
-========================================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_etype_list(krb5_get_init_creds_opt * opt, krb5_enctype * etype_list, int etype_list_length)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Options structure
-
- **[in]** **etype_list** - Array of encryption types
-
- **[in]** **etype_list_length** - Length of *etype_list*
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options.
-=========================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_set_expire_callback(krb5_context context, krb5_get_init_creds_opt * opt, krb5_expire_callback_func cb, void * data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options structure
-
- **[in]** **cb** - Callback function
-
- **[in]** **data** - Callback argument
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Set a callback to receive password and account expiration times.
-
-
-
- *cb* will be invoked if and only if credentials are successfully acquired. The callback will receive the *context* from the calling function and the *data* argument supplied with this API. The remaining arguments should be interpreted as follows:
-
-
-
-If *is_last_req* is true, then the KDC reply contained last-req entries which unambiguously indicated the password expiration, account expiration, or both. (If either value was not present, the corresponding argument will be 0.) Furthermore, a non-zero *password_expiration* should be taken as a suggestion from the KDC that a warning be displayed.
-
-
-
-If *is_last_req* is false, then *account_expiration* will be 0 and *password_expiration* will contain the expiration time of either the password or account, or 0 if no expiration time was indicated in the KDC reply. The callback should independently decide whether to display a password expiration warning.
-
-
-
-Note that *cb* may be invoked even if credentials are being acquired for the kadmin/changepw service in order to change the password. It is the caller's responsibility to avoid displaying a password expiry warning in this case.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-.. warning::
-
- Setting an expire callback with this API will cause :c:func:`krb5_get_init_creds_password()` not to send password expiry warnings to the prompter, as it ordinarily may.
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options.
-===============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_set_fast_ccache(krb5_context context, krb5_get_init_creds_opt * opt, krb5_ccache ccache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options
-
- **[in]** **ccache** - Credential cache handle
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function is similar to :c:func:`krb5_get_init_creds_opt_set_fast_ccache_name()` , but uses a credential cache handle instead of a name.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options.
-=================================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_set_fast_ccache_name(krb5_context context, krb5_get_init_creds_opt * opt, const char * fast_ccache_name)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options
-
- **[in]** **fast_ccache_name** - Credential cache name
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Sets the location of a credential cache containing an armor ticket to protect an initial credential exchange using the FAST protocol extension.
-
-
-
-In version 1.7, setting an armor ccache requires that FAST be used for the exchange. In version 1.8 or later, setting the armor ccache causes FAST to be used if the KDC supports it; :c:func:`krb5_get_init_creds_opt_set_fast_flags()` must be used to require that FAST be used.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options.
-========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_set_fast_flags(krb5_context context, krb5_get_init_creds_opt * opt, krb5_flags flags)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options
-
- **[in]** **flags** - FAST flags
-
-
-..
-
-
-:retval:
- - 0 - Success; Kerberos errors otherwise.
-
-
-..
-
-
-
-
-
-
-
-The following flag values are valid:
-
- - :data:`KRB5_FAST_REQUIRED` - Require FAST to be used
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options.
-============================================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_forwardable(krb5_get_init_creds_opt * opt, int forwardable)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Options structure
-
- **[in]** **forwardable** - Whether credentials should be forwardable
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options.
-======================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_set_in_ccache(krb5_context context, krb5_get_init_creds_opt * opt, krb5_ccache ccache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options
-
- **[in]** **ccache** - Credential cache handle
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-If an input credential cache is set, then the krb5_get_init_creds family of APIs will read settings from it. Setting an input ccache is desirable when the application wishes to perform authentication in the same way (using the same preauthentication mechanisms, and making the same non-security- sensitive choices) as the previous authentication attempt, which stored information in the passed-in ccache.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options.
-========================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_set_out_ccache(krb5_context context, krb5_get_init_creds_opt * opt, krb5_ccache ccache)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options
-
- **[in]** **ccache** - Credential cache handle
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-If an output credential cache is set, then the krb5_get_init_creds family of APIs will write credentials to it. Setting an output ccache is desirable both because it simplifies calling code and because it permits the krb5_get_init_creds APIs to write out configuration information about the realm to the ccache.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options.
-======================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_set_pa(krb5_context context, krb5_get_init_creds_opt * opt, const char * attr, const char * value)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options structure
-
- **[in]** **attr** - Preauthentication option name
-
- **[in]** **value** - Preauthentication option value
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function allows the caller to supply options for preauthentication. The values of *attr* and *value* are supplied to each preauthentication module available within *context* .
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket.
-======================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_set_pac_request(krb5_context context, krb5_get_init_creds_opt * opt, krb5_boolean req_pac)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options structure
-
- **[in]** **req_pac** - Whether to request a PAC or not
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-If this option is set, the AS request will include a PAC-REQUEST pa-data item explicitly asking the KDC to either include or not include a privilege attribute certificate in the ticket authorization data. By default, no request is made; typically the KDC will default to including a PAC if it supports them.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.15
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options.
-=======================================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_preauth_list(krb5_get_init_creds_opt * opt, krb5_preauthtype * preauth_list, int preauth_list_length)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Options structure
-
- **[in]** **preauth_list** - Array of preauthentication types
-
- **[in]** **preauth_list_length** - Length of *preauth_list*
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function can be used to perform optimistic preauthentication when getting initial credentials, in combination with :c:func:`krb5_get_init_creds_opt_set_salt()` and :c:func:`krb5_get_init_creds_opt_set_pa()` .
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options.
-========================================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_proxiable(krb5_get_init_creds_opt * opt, int proxiable)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Options structure
-
- **[in]** **proxiable** - Whether credentials should be proxiable
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options.
-=========================================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_renew_life(krb5_get_init_creds_opt * opt, krb5_deltat renew_life)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Pointer to *options* field
-
- **[in]** **renew_life** - Ticket renewal lifetime
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options.
-===================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_opt_set_responder(krb5_context context, krb5_get_init_creds_opt * opt, krb5_responder_fn responder, void * data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **opt** - Options structure
-
- **[in]** **responder** - Responder function
-
- **[in]** **data** - Responder data argument
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options.
-=============================================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_salt(krb5_get_init_creds_opt * opt, krb5_data * salt)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Options structure
-
- **[in]** **salt** - Salt data
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-When getting initial credentials with a password, a salt string it used to convert the password to a key. Normally this salt is obtained from the first KDC reply, but when performing optimistic preauthentication, the client may need to supply the salt string with this function.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options.
-===============================================================================================
-
-..
-
-.. c:function:: void krb5_get_init_creds_opt_set_tkt_life(krb5_get_init_creds_opt * opt, krb5_deltat tkt_life)
-
-..
-
-
-:param:
-
- **[in]** **opt** - Options structure
-
- **[in]** **tkt_life** - Ticket lifetime
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_init_creds_password - Get initial credentials using a password.
-==========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_init_creds_password(krb5_context context, krb5_creds * creds, krb5_principal client, const char * password, krb5_prompter_fct prompter, void * data, krb5_deltat start_time, const char * in_tkt_service, krb5_get_init_creds_opt * k5_gic_options)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **creds** - New credentials
-
- **[in]** **client** - Client principal
-
- **[in]** **password** - Password (or NULL)
-
- **[in]** **prompter** - Prompter function
-
- **[in]** **data** - Prompter callback data
-
- **[in]** **start_time** - Time when ticket becomes valid (0 for now)
-
- **[in]** **in_tkt_service** - Service name of initial credentials (or NULL)
-
- **[in]** **k5_gic_options** - Initial credential options
-
-
-..
-
-
-:retval:
- - 0 Success
- - EINVAL Invalid argument
- - KRB5_KDC_UNREACH Cannot contact any KDC for requested realm
- - KRB5_PREAUTH_FAILED Generic Pre-athentication failure
- - KRB5_LIBOS_PWDINTR Password read interrupted
- - KRB5_REALM_CANT_RESOLVE Cannot resolve network address for KDC in requested realm
- - KRB5KDC_ERR_KEY_EXP Password has expired
- - KRB5_LIBOS_BADPWDMATCH Password mismatch
- - KRB5_CHPW_PWDNULL New password cannot be zero length
- - KRB5_CHPW_FAIL Password change failed
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function requests KDC for an initial credentials for *client* using *password* . If *password* is NULL, a password will be prompted for using *prompter* if necessary. If *in_tkt_service* is specified, it is parsed as a principal name (with the realm ignored) and used as the service principal for the request; otherwise the ticket-granting service is used.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys.
-=============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_permitted_enctypes(krb5_context context, krb5_enctype ** ktypes)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **ktypes** - Zero-terminated list of encryption types
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function returns the list of encryption types permitted for session keys within *context* , as determined by configuration or by a previous call to :c:func:`krb5_set_default_tgs_enctypes()` .
-
-
-
-Use :c:func:`krb5_free_enctypes()` to free *ktypes* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_profile - Retrieve configuration profile from the context.
-=====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_profile(krb5_context context, struct _profile_t ** profile)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **profile** - Pointer to data read from a configuration file
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function creates a new *profile* object that reflects profile in the supplied *context* .
-
-
-
-The *profile* object may be freed with profile_release() function. See profile.h and profile API for more details.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_prompt_types - Get prompt types array from a context.
-================================================================
-
-..
-
-.. c:function:: krb5_prompt_type * krb5_get_prompt_types(krb5_context context)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
-
-..
-
-
-
-:return:
- - Pointer to an array of prompt types corresponding to the prompter's prompts arguments. Each type has one of the following values: KRB5_PROMPT_TYPE_PASSWORD KRB5_PROMPT_TYPE_NEW_PASSWORD KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN KRB5_PROMPT_TYPE_PREAUTH
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential.
-========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_renewed_creds(krb5_context context, krb5_creds * creds, krb5_principal client, krb5_ccache ccache, const char * in_tkt_service)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **creds** - Renewed credentials
-
- **[in]** **client** - Client principal name
-
- **[in]** **ccache** - Credential cache
-
- **[in]** **in_tkt_service** - Server principal string (or NULL)
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function gets a renewed credential using an existing one from *ccache* . If *in_tkt_service* is specified, it is parsed (with the realm part ignored) and used as the server principal of the credential; otherwise, the ticket-granting service is used.
-
-
-
-If successful, the renewed credential is placed in *creds* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_server_rcache - Generate a replay cache object for server use and open it.
-=====================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_server_rcache(krb5_context context, const krb5_data * piece, krb5_rcache * rcptr)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **piece** - Unused (replay cache identifier)
-
- **[out]** **rcptr** - Handle to an open rcache
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a handle to the default replay cache. Use krb5_rc_close() to close *rcptr* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- Prior to release 1.18, this function creates a handle to a different replay cache for each unique value of *piece* .
-
-
+++ /dev/null
-krb5_get_time_offsets - Return the time offsets from the os context.
-======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_time_offsets(krb5_context context, krb5_timestamp * seconds, krb5_int32 * microseconds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **seconds** - Time offset, seconds portion
-
- **[out]** **microseconds** - Time offset, microseconds portion
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function returns the time offsets in *context* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_get_validated_creds - Get validated credentials from the KDC.
-====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_get_validated_creds(krb5_context context, krb5_creds * creds, krb5_principal client, krb5_ccache ccache, const char * in_tkt_service)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **creds** - Validated credentials
-
- **[in]** **client** - Client principal name
-
- **[in]** **ccache** - Credential cache
-
- **[in]** **in_tkt_service** - Server principal string (or NULL)
-
-
-..
-
-
-:retval:
- - 0 Success
- - KRB5_NO_2ND_TKT Request missing second ticket
- - KRB5_NO_TKT_SUPPLIED Request did not supply a ticket
- - KRB5_PRINC_NOMATCH Requested principal and ticket do not match
- - KRB5_KDCREP_MODIFIED KDC reply did not match expectations
- - KRB5_KDCREP_SKEW Clock skew too great in KDC reply
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function gets a validated credential using a postdated credential from *ccache* . If *in_tkt_service* is specified, it is parsed (with the realm part ignored) and used as the server principal of the credential; otherwise, the ticket-granting service is used.
-
-
-
-If successful, the validated credential is placed in *creds* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_context - Create a krb5 library context.
-====================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_context(krb5_context * context)
-
-..
-
-
-:param:
-
- **[out]** **context** - Library context
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-The *context* must be released by calling :c:func:`krb5_free_context()` when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-.. warning::
-
- Any program or module that needs the Kerberos code to not trust the environment must use :c:func:`krb5_init_secure_context()` , or clean out the environment.
-
-
-
-
-
+++ /dev/null
-krb5_init_context_profile - Create a krb5 library context using a specified profile.
-======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_context_profile(struct _profile_t * profile, krb5_flags flags, krb5_context * context)
-
-..
-
-
-:param:
-
- **[in]** **profile** - Profile object (NULL to create default profile)
-
- **[in]** **flags** - Context initialization flags
-
- **[out]** **context** - Library context
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Create a context structure, optionally using a specified profile and initialization flags. If *profile* is NULL, the default profile will be created from config files. If *profile* is non-null, a copy of it will be made for the new context; the caller should still clean up its copy. Valid flag values are:
-
-
-
-
-
- - :data:`KRB5_INIT_CONTEXT_SECURE` Ignore environment variables
-
-
- - :data:`KRB5_INIT_CONTEXT_KDC` Use KDC configuration if creating profile
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_creds_free - Free an initial credentials context.
-=============================================================
-
-..
-
-.. c:function:: void krb5_init_creds_free(krb5_context context, krb5_init_creds_context ctx)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - Initial credentials context
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
- *context* must be the same as the one passed to :c:func:`krb5_init_creds_init()` for this initial credentials context.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_creds_get - Acquire credentials using an initial credentials context.
-=================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_creds_get(krb5_context context, krb5_init_creds_context ctx)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - Initial credentials context
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function synchronously obtains credentials using a context created by :c:func:`krb5_init_creds_init()` . On successful return, the credentials can be retrieved with :c:func:`krb5_init_creds_get_creds()` .
-
-
-
- *context* must be the same as the one passed to :c:func:`krb5_init_creds_init()` for this initial credentials context.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context.
-================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_creds_get_creds(krb5_context context, krb5_init_creds_context ctx, krb5_creds * creds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - Initial credentials context
-
- **[out]** **creds** - Acquired credentials
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function copies the acquired initial credentials from *ctx* into *creds* , after the successful completion of :c:func:`krb5_init_creds_get()` or :c:func:`krb5_init_creds_step()` . Use :c:func:`krb5_free_cred_contents()` to free *creds* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context.
-==============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_creds_get_error(krb5_context context, krb5_init_creds_context ctx, krb5_error ** error)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - Initial credentials context
-
- **[out]** **error** - Error from KDC, or NULL if none was received
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context.
-========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_creds_get_times(krb5_context context, krb5_init_creds_context ctx, krb5_ticket_times * times)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - Initial credentials context
-
- **[out]** **times** - Ticket times for acquired credentials
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-The initial credentials context must have completed obtaining credentials via either :c:func:`krb5_init_creds_get()` or :c:func:`krb5_init_creds_step()` .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_creds_init - Create a context for acquiring initial credentials.
-============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_creds_init(krb5_context context, krb5_principal client, krb5_prompter_fct prompter, void * data, krb5_deltat start_time, krb5_get_init_creds_opt * options, krb5_init_creds_context * ctx)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **client** - Client principal to get initial creds for
-
- **[in]** **prompter** - Prompter callback
-
- **[in]** **data** - Prompter callback argument
-
- **[in]** **start_time** - Time when credentials become valid (0 for now)
-
- **[in]** **options** - Options structure (NULL for default)
-
- **[out]** **ctx** - New initial credentials context
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a new context for acquiring initial credentials. Use :c:func:`krb5_init_creds_free()` to free *ctx* when it is no longer needed.
-
-
-
-Any subsequent calls to :c:func:`krb5_init_creds_step()` , :c:func:`krb5_init_creds_get()` , or :c:func:`krb5_init_creds_free()` for this initial credentials context must use the same *context* argument as the one passed to this function.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials.
-=========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_creds_set_keytab(krb5_context context, krb5_init_creds_context ctx, krb5_keytab keytab)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - Initial credentials context
-
- **[in]** **keytab** - Key table handle
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function supplies a keytab containing the client key for an initial credentials request.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_creds_set_password - Set a password for acquiring initial credentials.
-==================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_creds_set_password(krb5_context context, krb5_init_creds_context ctx, const char * password)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - Initial credentials context
-
- **[in]** **password** - Password
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function supplies a password to be used to construct the client key for an initial credentials request.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials.
-==============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_creds_set_service(krb5_context context, krb5_init_creds_context ctx, const char * service)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - Initial credentials context
-
- **[in]** **service** - Service principal string
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function supplies a service principal string to acquire initial credentials for instead of the default krbtgt service. *service* is parsed as a principal name; any realm part is ignored.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_creds_step - Get the next KDC request for acquiring initial credentials.
-====================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_creds_step(krb5_context context, krb5_init_creds_context ctx, krb5_data * in, krb5_data * out, krb5_data * realm, unsigned int * flags)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - Initial credentials context
-
- **[in]** **in** - KDC response (empty on the first call)
-
- **[out]** **out** - Next KDC request
-
- **[out]** **realm** - Realm for next KDC request
-
- **[out]** **flags** - Output flags
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function constructs the next KDC request in an initial credential exchange, allowing the caller to control the transport of KDC requests and replies. On the first call, *in* should be set to an empty buffer; on subsequent calls, it should be set to the KDC's reply to the previous request.
-
-
-
-If more requests are needed, *flags* will be set to :data:`KRB5_INIT_CREDS_STEP_FLAG_CONTINUE` and the next request will be placed in *out* . If no more requests are needed, *flags* will not contain :data:`KRB5_INIT_CREDS_STEP_FLAG_CONTINUE` and *out* will be empty.
-
-
-
-If this function returns **KRB5KRB_ERR_RESPONSE_TOO_BIG** , the caller should transmit the next request using TCP rather than UDP. If this function returns any other error, the initial credential exchange has failed.
-
-
-
- *context* must be the same as the one passed to :c:func:`krb5_init_creds_init()` for this initial credentials context.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_keyblock - Initialize an empty krb5_keyblock .
-==========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_keyblock(krb5_context context, krb5_enctype enctype, size_t length, krb5_keyblock ** out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enctype** - Encryption type
-
- **[in]** **length** - Length of keyblock (or 0)
-
- **[out]** **out** - New keyblock structure
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Initialize a new keyblock and allocate storage for the contents of the key. It is legal to pass in a length of 0, in which case contents are left unallocated. Use :c:func:`krb5_free_keyblock()` to free *out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- If *length* is set to 0, contents are left unallocated.
-
-
-
-
+++ /dev/null
-krb5_init_random_key
-====================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_random_key(krb5_context context, const krb5_encrypt_block * eblock, const krb5_keyblock * keyblock, krb5_pointer * ptr)
-
-..
-
-
-:param:
-
- **context**
-
- **eblock**
-
- **keyblock**
-
- **ptr**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_c_* API family.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_init_secure_context - Create a krb5 library context using only configuration files.
-==========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_init_secure_context(krb5_context * context)
-
-..
-
-
-:param:
-
- **[out]** **context** - Library context
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Create a context structure, using only system configuration files. All information passed through the environment variables is ignored.
-
-
-
-The *context* must be released by calling :c:func:`krb5_free_context()` when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_is_config_principal - Test whether a principal is a configuration principal.
-===================================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_is_config_principal(krb5_context context, krb5_const_principal principal)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **principal** - Principal to check
-
-
-..
-
-
-
-:return:
- - TRUE if the principal is a configuration principal (generated part of krb5_cc_set_config() ); FALSE otherwise.
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM.
-======================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_is_referral_realm(const krb5_data * r)
-
-..
-
-
-:param:
-
- **[in]** **r** - Realm to check
-
-
-..
-
-
-
-:return:
- - TRUE if r is zero-length, FALSE otherwise
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support.
-=============================================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_is_thread_safe(void None)
-
-..
-
-
-:param:
-
- **None**
-
-
-..
-
-
-:retval:
- - TRUE if the library is threadsafe; FALSE otherwise
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock.
-====================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_create_key(krb5_context context, const krb5_keyblock * key_data, krb5_key * out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key_data** - Keyblock
-
- **[out]** **out** - Opaque key
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - KRB5_BAD_ENCTYPE
-
-
-..
-
-
-
-
-
-
-
-The reference count on a key *out* is set to 1. Use :c:func:`krb5_k_free_key()` to free *out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_k_decrypt - Decrypt data using a key (operates on opaque key).
-=====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_decrypt(krb5_context context, krb5_key key, krb5_keyusage usage, const krb5_data * cipher_state, const krb5_enc_data * input, krb5_data * output)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Encryption key
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[inout]** **cipher_state** - Cipher state; specify NULL if not needed
-
- **[in]** **input** - Encrypted data
-
- **[out]** **output** - Decrypted data
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function decrypts the data block *input* and stores the output into *output* . The actual decryption key will be derived from *key* and *usage* if key derivation is specified for the encryption type. If non-null, *cipher_state* specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The caller must initialize *output* and allocate at least enough space for the result. The usual practice is to allocate an output buffer as long as the ciphertext, and let :c:func:`krb5_c_decrypt()` trim *output->length* . For some enctypes, the resulting *output->length* may include padding bytes.
-
-
-
-
+++ /dev/null
-krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key).
-======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_decrypt_iov(krb5_context context, krb5_key key, krb5_keyusage usage, const krb5_data * cipher_state, krb5_crypto_iov * data, size_t num_data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Encryption key
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[in]** **cipher_state** - Cipher state; specify NULL if not needed
-
- **[inout]** **data** - IOV array. Modified in-place.
-
- **[in]** **num_data** - Size of *data*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function decrypts the data block *data* and stores the output in-place. The actual decryption key will be derived from *key* and *usage* if key derivation is specified for the encryption type. If non-null, *cipher_state* specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5_crypto_iov structures before calling into this API.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_k_encrypt_iov()`
-
-
-
-
-
-
-.. note::
-
- On return from a :c:func:`krb5_c_decrypt_iov()` call, the *data->length* in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.
-
-
-
-
+++ /dev/null
-krb5_k_encrypt - Encrypt data using a key (operates on opaque key).
-=====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_encrypt(krb5_context context, krb5_key key, krb5_keyusage usage, const krb5_data * cipher_state, const krb5_data * input, krb5_enc_data * output)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Encryption key
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[inout]** **cipher_state** - Cipher state; specify NULL if not needed
-
- **[in]** **input** - Data to be encrypted
-
- **[out]** **output** - Encrypted data
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function encrypts the data block *input* and stores the output into *output* . The actual encryption key will be derived from *key* and *usage* if key derivation is specified for the encryption type. If non-null, *cipher_state* specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The caller must initialize *output* and allocate at least enough space for the result (using :c:func:`krb5_c_encrypt_length()` to determine the amount of space needed). *output->length* will be set to the actual length of the ciphertext.
-
-
-
-
+++ /dev/null
-krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key).
-======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_encrypt_iov(krb5_context context, krb5_key key, krb5_keyusage usage, const krb5_data * cipher_state, krb5_crypto_iov * data, size_t num_data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Encryption key
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[in]** **cipher_state** - Cipher state; specify NULL if not needed
-
- **[inout]** **data** - IOV array. Modified in-place.
-
- **[in]** **num_data** - Size of *data*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function encrypts the data block *data* and stores the output in-place. The actual encryption key will be derived from *key* and *usage* if key derivation is specified for the encryption type. If non-null, *cipher_state* specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5_crypto_iov structures before calling into this API.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_k_decrypt_iov()`
-
-
-
-
-
-
-.. note::
-
- On return from a :c:func:`krb5_c_encrypt_iov()` call, the *data->length* in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.
-
-
-
-
+++ /dev/null
-krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero.
-=======================================================================================
-
-..
-
-.. c:function:: void krb5_k_free_key(krb5_context context, krb5_key key)
-
-..
-
-
-:param:
-
- **context**
-
- **key**
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure.
-====================================================================
-
-..
-
-.. c:function:: krb5_enctype krb5_k_key_enctype(krb5_context context, krb5_key key)
-
-..
-
-
-:param:
-
- **context**
-
- **key**
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure.
-==================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_key_keyblock(krb5_context context, krb5_key key, krb5_keyblock ** key_data)
-
-..
-
-
-:param:
-
- **context**
-
- **key**
-
- **key_data**
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_k_make_checksum - Compute a checksum (operates on opaque key).
-=====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_make_checksum(krb5_context context, krb5_cksumtype cksumtype, krb5_key key, krb5_keyusage usage, const krb5_data * input, krb5_checksum * cksum)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cksumtype** - Checksum type (0 for mandatory type)
-
- **[in]** **key** - Encryption key for a keyed checksum
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[in]** **input** - Input data
-
- **[out]** **cksum** - Generated checksum
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function computes a checksum of type *cksumtype* over *input* , using *key* if the checksum type is a keyed checksum. If *cksumtype* is 0 and *key* is non-null, the checksum type will be the mandatory-to-implement checksum type for the key's encryption type. The actual checksum key will be derived from *key* and *usage* if key derivation is specified for the checksum type. The newly created *cksum* must be released by calling :c:func:`krb5_free_checksum_contents()` when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_c_verify_checksum()`
-
-
-
-
-
-
-.. note::
-
- This function is similar to :c:func:`krb5_c_make_checksum()` , but operates on opaque *key* .
-
-
-
-
+++ /dev/null
-krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)
-=============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_make_checksum_iov(krb5_context context, krb5_cksumtype cksumtype, krb5_key key, krb5_keyusage usage, krb5_crypto_iov * data, size_t num_data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cksumtype** - Checksum type (0 for mandatory type)
-
- **[in]** **key** - Encryption key for a keyed checksum
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[inout]** **data** - IOV array
-
- **[in]** **num_data** - Size of *data*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Create a checksum in the :data:`KRB5_CRYPTO_TYPE_CHECKSUM` element over :data:`KRB5_CRYPTO_TYPE_DATA` and :data:`KRB5_CRYPTO_TYPE_SIGN_ONLY` chunks in *data* . Only the :data:`KRB5_CRYPTO_TYPE_CHECKSUM` region is modified.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_k_verify_checksum_iov()`
-
-
-
-
-
-
-.. note::
-
- This function is similar to :c:func:`krb5_c_make_checksum_iov()` , but operates on opaque *key* .
-
-
-
-
+++ /dev/null
-krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key).
-======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_prf(krb5_context context, krb5_key key, krb5_data * input, krb5_data * output)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Key
-
- **[in]** **input** - Input data
-
- **[out]** **output** - Output data
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function selects a pseudo-random function based on *key* and computes its value over *input* , placing the result into *output* . The caller must preinitialize *output* and allocate space for the result.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- This function is similar to :c:func:`krb5_c_prf()` , but operates on opaque *key* .
-
-
-
-
+++ /dev/null
-krb5_k_reference_key - Increment the reference count on a key.
-================================================================
-
-..
-
-.. c:function:: void krb5_k_reference_key(krb5_context context, krb5_key key)
-
-..
-
-
-:param:
-
- **context**
-
- **key**
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_k_verify_checksum - Verify a checksum (operates on opaque key).
-======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_verify_checksum(krb5_context context, krb5_key key, krb5_keyusage usage, const krb5_data * data, const krb5_checksum * cksum, krb5_boolean * valid)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Encryption key for a keyed checksum
-
- **[in]** **usage** - *key* usage
-
- **[in]** **data** - Data to be used to compute a new checksum using *key* to compare *cksum* against
-
- **[in]** **cksum** - Checksum to be verified
-
- **[out]** **valid** - Non-zero for success, zero for failure
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function verifies that *cksum* is a valid checksum for *data* . If the checksum type of *cksum* is a keyed checksum, *key* is used to verify the checksum. If the checksum type in *cksum* is 0 and *key* is not NULL, the mandatory checksum type for *key* will be used. The actual checksum key will be derived from *key* and *usage* if key derivation is specified for the checksum type.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- This function is similar to :c:func:`krb5_c_verify_checksum()` , but operates on opaque *key* .
-
-
-
-
+++ /dev/null
-krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key).
-=================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_k_verify_checksum_iov(krb5_context context, krb5_cksumtype cksumtype, krb5_key key, krb5_keyusage usage, const krb5_crypto_iov * data, size_t num_data, krb5_boolean * valid)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **cksumtype** - Checksum type (0 for mandatory type)
-
- **[in]** **key** - Encryption key for a keyed checksum
-
- **[in]** **usage** - Key usage (see :data:`KRB5_KEYUSAGE` types)
-
- **[in]** **data** - IOV array
-
- **[in]** **num_data** - Size of *data*
-
- **[out]** **valid** - Non-zero for success, zero for failure
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Confirm that the checksum in the :data:`KRB5_CRYPTO_TYPE_CHECKSUM` element is a valid checksum of the :data:`KRB5_CRYPTO_TYPE_DATA` and :data:`KRB5_CRYPTO_TYPE_SIGN_ONLY` regions in the iov.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_k_make_checksum_iov()`
-
-
-
-
-
-
-.. note::
-
- This function is similar to :c:func:`krb5_c_verify_checksum_iov()` , but operates on opaque *key* .
-
-
-
-
+++ /dev/null
-krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature.
-===========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kdc_sign_ticket(krb5_context context, krb5_enc_tkt_part * enc_tkt, const krb5_pac pac, krb5_const_principal server_princ, krb5_const_principal client_princ, const krb5_keyblock * server, const krb5_keyblock * privsvr, krb5_boolean with_realm)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enc_tkt** - The ticket for the signature
-
- **[in]** **pac** - PAC handle
-
- **[in]** **server_princ** - Canonical ticket server name
-
- **[in]** **client_princ** - PAC_CLIENT_INFO principal (or NULL)
-
- **[in]** **server** - Key for server checksum
-
- **[in]** **privsvr** - Key for KDC and ticket checksum
-
- **[in]** **with_realm** - If true, include the realm of *principal*
-
-
-..
-
-
-:retval:
- - 0 on success, otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Sign *pac* using the keys *server* and *privsvr* . Include a ticket signature over *enc_tkt* if *server_princ* is not a TGS or kadmin/changepw principal name. Add the signed PAC's encoding to the authorization data of *enc_tkt* in the first slot, wrapped in an AD-IF-RELEVANT container. If *client_princ* is non-null, add a PAC_CLIENT_INFO buffer, including the realm if *with_realm* is true.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.20
-
-
+++ /dev/null
-krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.
-=============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kdc_verify_ticket(krb5_context context, const krb5_enc_tkt_part * enc_tkt, krb5_const_principal server_princ, const krb5_keyblock * server, const krb5_keyblock * privsvr, krb5_pac * pac_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enc_tkt** - Ticket enc-part, possibly containing a PAC
-
- **[in]** **server_princ** - Canonicalized name of ticket server
-
- **[in]** **server** - Key to validate server checksum (or NULL)
-
- **[in]** **privsvr** - Key to validate KDC checksum (or NULL)
-
- **[out]** **pac_out** - Verified PAC (NULL if no PAC included)
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-If a PAC is present in *enc_tkt* , verify its signatures. If *privsvr* is not NULL and *server_princ* is not a krbtgt or kadmin/changepw service, require a ticket signature over *enc_tkt* in addition to the KDC signature. Place the verified PAC in *pac_out* . If an invalid PAC signature is found, return an error matching the Windows KDC protocol code for that condition as closely as possible.
-
-
-
-If no PAC is present in *enc_tkt* , set *pac_out* to NULL and return successfully.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- This function does not validate the PAC_CLIENT_INFO buffer. If a specific value is expected, the caller can make a separate call to :c:func:`krb5_pac_verify_ext()` with a principal but no keys.
-
-
-
-.. note::
-
- New in 1.20
-
-
+++ /dev/null
-krb5_kt_add_entry - Add a new entry to a key table.
-=====================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_add_entry(krb5_context context, krb5_keytab id, krb5_keytab_entry * entry)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **id** - Key table handle
-
- **[in]** **entry** - Entry to be added
-
-
-..
-
-
-:retval:
- - 0 Success
- - ENOMEM Insufficient memory
- - KRB5_KT_NOWRITE Key table is not writeable
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_client_default - Resolve the default client key table.
-================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_client_default(krb5_context context, krb5_keytab * keytab_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **keytab_out** - Key table handle
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Fill *keytab_out* with a handle to the default client key table.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_kt_close - Close a key table handle.
-===========================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_close(krb5_context context, krb5_keytab keytab)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keytab** - Key table handle
-
-
-..
-
-
-:retval:
- - 0 None
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_default - Resolve the default key table.
-==================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_default(krb5_context context, krb5_keytab * id)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **id** - Key table handle
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Set *id* to a handle to the default key table. The key table is not opened.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_default_name - Get the default key table name.
-========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_default_name(krb5_context context, char * name, int name_size)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **name** - Default key table name
-
- **[in]** **name_size** - Space available in *name*
-
-
-..
-
-
-:retval:
- - 0 Success
- - KRB5_CONFIG_NOTENUFSPACE Buffer is too short
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Fill *name* with the name of the default key table for *context* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_dup - Duplicate keytab handle.
-========================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_dup(krb5_context context, krb5_keytab in, krb5_keytab * out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **in** - Key table handle to be duplicated
-
- **[out]** **out** - Key table handle
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Create a new handle referring to the same key table as *in* . The new handle and *in* can be closed independently.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.12
-
-
+++ /dev/null
-krb5_kt_end_seq_get - Release a keytab cursor.
-================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_end_seq_get(krb5_context context, krb5_keytab keytab, krb5_kt_cursor * cursor)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keytab** - Key table handle
-
- **[out]** **cursor** - Cursor
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function should be called to release the cursor created by :c:func:`krb5_kt_start_seq_get()` .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_free_entry
-==================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_free_entry(krb5_context context, krb5_keytab_entry * entry)
-
-..
-
-
-:param:
-
- **context**
-
- **entry**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Use krb5_free_keytab_entry_contents instead.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_get_entry - Get an entry from a key table.
-====================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_get_entry(krb5_context context, krb5_keytab keytab, krb5_const_principal principal, krb5_kvno vno, krb5_enctype enctype, krb5_keytab_entry * entry)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keytab** - Key table handle
-
- **[in]** **principal** - Principal name
-
- **[in]** **vno** - Key version number (0 for highest available)
-
- **[in]** **enctype** - Encryption type (0 zero for any enctype)
-
- **[out]** **entry** - Returned entry from key table
-
-
-..
-
-
-:retval:
- - 0 Success
- - Kerberos error codes on failure
-
-
-..
-
-
-
-
-
-
-
-Retrieve an entry from a key table which matches the *keytab* , *principal* , *vno* , and *enctype* . If *vno* is zero, retrieve the highest-numbered kvno matching the other fields. If *enctype* is 0, match any enctype.
-
-
-
-Use :c:func:`krb5_free_keytab_entry_contents()` to free *entry* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- If *vno* is zero, the function retrieves the highest-numbered-kvno entry that matches the specified principal.
-
-
-
-
+++ /dev/null
-krb5_kt_get_name - Get a key table name.
-==========================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_get_name(krb5_context context, krb5_keytab keytab, char * name, unsigned int namelen)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keytab** - Key table handle
-
- **[out]** **name** - Key table name
-
- **[in]** **namelen** - Maximum length to fill in name
-
-
-..
-
-
-:retval:
- - 0 Success
- - KRB5_KT_NAME_TOOLONG Key table name does not fit in namelen bytes
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Fill *name* with the name of *keytab* including the type and delimiter.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_get_type - Return the type of a key table.
-====================================================
-
-..
-
-.. c:function:: const char * krb5_kt_get_type(krb5_context context, krb5_keytab keytab)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keytab** - Key table handle
-
-
-..
-
-
-
-:return:
- - The type of a key table as an alias that must not be modified or freed by the caller.
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_have_content - Check if a keytab exists and contains entries.
-=======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_have_content(krb5_context context, krb5_keytab keytab)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keytab** - Key table handle
-
-
-..
-
-
-:retval:
- - 0 Keytab exists and contains entries
- - KRB5_KT_NOTFOUND Keytab does not contain entries
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_kt_next_entry - Retrieve the next entry from the key table.
-==================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_next_entry(krb5_context context, krb5_keytab keytab, krb5_keytab_entry * entry, krb5_kt_cursor * cursor)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keytab** - Key table handle
-
- **[out]** **entry** - Returned key table entry
-
- **[in]** **cursor** - Key table cursor
-
-
-..
-
-
-:retval:
- - 0 Success
- - KRB5_KT_END - if the last entry was reached
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Return the next sequential entry in *keytab* and advance *cursor* . Callers must release the returned entry with :c:func:`krb5_kt_free_entry()` .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_read_service_key - Retrieve a service key from a key table.
-=====================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_read_service_key(krb5_context context, krb5_pointer keyprocarg, krb5_principal principal, krb5_kvno vno, krb5_enctype enctype, krb5_keyblock ** key)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keyprocarg** - Name of a key table (NULL to use default name)
-
- **[in]** **principal** - Service principal
-
- **[in]** **vno** - Key version number (0 for highest available)
-
- **[in]** **enctype** - Encryption type (0 for any type)
-
- **[out]** **key** - Service key from key table
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error code if not found or keyprocarg is invalid.
-
-..
-
-
-
-
-
-
-
-Open and search the specified key table for the entry identified by *principal* , *enctype* , and *vno* . If no key is found, return an error code.
-
-
-
-The default key table is used, unless *keyprocarg* is non-null. *keyprocarg* designates a specific key table.
-
-
-
-Use :c:func:`krb5_free_keyblock()` to free *key* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_remove_entry - Remove an entry from a key table.
-==========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_remove_entry(krb5_context context, krb5_keytab id, krb5_keytab_entry * entry)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **id** - Key table handle
-
- **[in]** **entry** - Entry to remove from key table
-
-
-..
-
-
-:retval:
- - 0 Success
- - KRB5_KT_NOWRITE Key table is not writable
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_resolve - Get a handle for a key table.
-=================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_resolve(krb5_context context, const char * name, krb5_keytab * ktid)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **name** - Name of the key table
-
- **[out]** **ktid** - Key table handle
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Resolve the key table name *name* and set *ktid* to a handle identifying the key table. Use :c:func:`krb5_kt_close()` to free *ktid* when it is no longer needed.
-
-
-
- *name* must be of the form **type:residual** , where *type* must be a type known to the library and *residual* portion should be specific to the particular keytab type. If no *type* is given, the default is **FILE** .
-
-
-
-If *name* is of type **FILE** , the keytab file is not opened by this call.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kt_start_seq_get - Start a sequential retrieval of key table entries.
-============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_kt_start_seq_get(krb5_context context, krb5_keytab keytab, krb5_kt_cursor * cursor)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **keytab** - Key table handle
-
- **[out]** **cursor** - Cursor
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Prepare to read sequentially every key in the specified key table. Use :c:func:`krb5_kt_end_seq_get()` to release the cursor when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_kuserok - Determine if a principal is authorized to log in as a local user.
-==================================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_kuserok(krb5_context context, krb5_principal principal, const char * luser)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **principal** - Principal name
-
- **[in]** **luser** - Local username
-
-
-..
-
-
-:retval:
- - TRUE Principal is authorized to log in as user; FALSE otherwise.
-
-
-..
-
-
-
-
-
-
-
-Determine whether *principal* is authorized to log in as a local user *luser* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data.
-==================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_make_authdata_kdc_issued(krb5_context context, const krb5_keyblock * key, krb5_const_principal issuer, krb5_authdata *const * authdata, krb5_authdata *** ad_kdcissued)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Session key
-
- **[in]** **issuer** - The name of the issuing principal
-
- **[in]** **authdata** - List of authorization data to be signed
-
- **[out]** **ad_kdcissued** - List containing AD-KDCIssued authdata
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function wraps a list of authorization data entries *authdata* in an AD-KDCIssued container (see RFC 4120 section 5.2.6.2) signed with *key* . The result is returned in *ad_kdcissued* as a single-element list.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_marshal_credentials - Serialize a krb5_creds object.
-===========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_marshal_credentials(krb5_context context, krb5_creds * in_creds, krb5_data ** data_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **in_creds** - The credentials object to serialize
-
- **[out]** **data_out** - The serialized credentials
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Serialize *creds* in the format used by the FILE ccache format (vesion 4) and KCM ccache protocol.
-
-
-
-Use :c:func:`krb5_free_data()` to free *data_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_merge_authdata - Merge two authorization data lists into a new list.
-===========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_merge_authdata(krb5_context context, krb5_authdata *const * inauthdat1, krb5_authdata *const * inauthdat2, krb5_authdata *** outauthdat)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **inauthdat1** - First list of *krb5_authdata* structures
-
- **[in]** **inauthdat2** - Second list of *krb5_authdata* structures
-
- **[out]** **outauthdat** - Merged list of *krb5_authdata* structures
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Merge two authdata arrays, such as the array from a ticket and authenticator. Use :c:func:`krb5_free_authdata()` to free *outauthdat* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The last array entry in *inauthdat1* and *inauthdat2* must be a NULL pointer.
-
-
-
-
+++ /dev/null
-krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials.
-============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_mk_1cred(krb5_context context, krb5_auth_context auth_context, krb5_creds * creds, krb5_data ** der_out, krb5_replay_data * rdata_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **creds** - Pointer to credentials
-
- **[out]** **der_out** - Encoded credentials
-
- **[out]** **rdata_out** - Replay cache data (NULL if not needed)
-
-
-..
-
-
-:retval:
- - 0 Success
- - ENOMEM Insufficient memory
- - KRB5_RC_REQUIRED Message replay detection requires rcache parameter
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This is a convenience function that calls :c:func:`krb5_mk_ncred()` with a single set of credentials.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_mk_error - Format and encode a KRB_ERROR message.
-========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_mk_error(krb5_context context, const krb5_error * dec_err, krb5_data * enc_err)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **dec_err** - Error structure to be encoded
-
- **[out]** **enc_err** - Encoded error structure
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates a **KRB_ERROR** message in *enc_err* . Use :c:func:`krb5_free_data_contents()` to free *enc_err* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_mk_ncred - Format a KRB-CRED message for an array of credentials.
-========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_mk_ncred(krb5_context context, krb5_auth_context auth_context, krb5_creds ** creds, krb5_data ** der_out, krb5_replay_data * rdata_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **creds** - Null-terminated array of credentials
-
- **[out]** **der_out** - Encoded credentials
-
- **[out]** **rdata_out** - Replay cache information (NULL if not needed)
-
-
-..
-
-
-:retval:
- - 0 Success
- - ENOMEM Insufficient memory
- - KRB5_RC_REQUIRED Message replay detection requires rcache parameter
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function takes an array of credentials *creds* and formats a **KRB-CRED** message *der_out* to pass to :c:func:`krb5_rd_cred()` .
-
-
-
-The local and remote addresses in *auth_context* are optional; if either is specified, they are used to form the sender and receiver addresses in the KRB-CRED message.
-
-
-
-If the :data:`KRB5_AUTH_CONTEXT_DO_TIME` flag is set in *auth_context* , an entry for the message is entered in an in-memory replay cache to detect if the message is reflected by an attacker. If :data:`KRB5_AUTH_CONTEXT_DO_TIME` is not set, no replay cache is used. If :data:`KRB5_AUTH_CONTEXT_RET_TIME` is set in *auth_context* , the timestamp used for the KRB-CRED message is stored in *rdata_out* .
-
-
-
-If either :data:`KRB5_AUTH_CONTEXT_DO_SEQUENCE` or :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` is set, the *auth_context* local sequence number is included in the KRB-CRED message and then incremented. If :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` is set, the sequence number used is stored in *rdata_out* .
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *der_out* when it is no longer needed.
-
-
-
-The message will be encrypted using the send subkey of *auth_context* if it is present, or the session key otherwise. If neither key is present, the credentials will not be encrypted, and the message should only be sent over a secure channel. No replay cache entry is used in this case.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The *rdata_out* argument is required if the :data:`KRB5_AUTH_CONTEXT_RET_TIME` or :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` flag is set in *auth_context* .
-
-
-
-
+++ /dev/null
-krb5_mk_priv - Format a KRB-PRIV message.
-===========================================
-
-..
-
-.. c:function:: krb5_error_code krb5_mk_priv(krb5_context context, krb5_auth_context auth_context, const krb5_data * userdata, krb5_data * der_out, krb5_replay_data * rdata_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **userdata** - User data for **KRB-PRIV** message
-
- **[out]** **der_out** - Formatted **KRB-PRIV** message
-
- **[out]** **rdata_out** - Replay data (NULL if not needed)
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function is similar to :c:func:`krb5_mk_safe()` , but the message is encrypted and integrity-protected, not just integrity-protected.
-
-
-
-The local address in *auth_context* must be set, and is used to form the sender address used in the KRB-PRIV message. The remote address is optional; if specified, it will be used to form the receiver address used in the message.
-
-
-
-If the :data:`KRB5_AUTH_CONTEXT_DO_TIME` flag is set in *auth_context* , a timestamp is included in the KRB-PRIV message, and an entry for the message is entered in an in-memory replay cache to detect if the message is reflected by an attacker. If :data:`KRB5_AUTH_CONTEXT_DO_TIME` is not set, no replay cache is used. If :data:`KRB5_AUTH_CONTEXT_RET_TIME` is set in *auth_context* , a timestamp is included in the KRB-PRIV message and is stored in *rdata_out* .
-
-
-
-If either :data:`KRB5_AUTH_CONTEXT_DO_SEQUENCE` or :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` is set, the *auth_context* local sequence number is included in the KRB-PRIV message and then incremented. If :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` is set, the sequence number used is stored in *rdata_out* .
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *der_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The *rdata_out* argument is required if the :data:`KRB5_AUTH_CONTEXT_RET_TIME` or :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` flag is set in *auth_context* .
-
-
-
-
+++ /dev/null
-krb5_mk_rep - Format and encrypt a KRB_AP_REP message.
-========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_mk_rep(krb5_context context, krb5_auth_context auth_context, krb5_data * outbuf)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **outbuf** - **AP-REP** message
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function fills in *outbuf* with an AP-REP message using information from *auth_context* .
-
-
-
-If the flags in *auth_context* indicate that a sequence number should be used (either :data:`KRB5_AUTH_CONTEXT_DO_SEQUENCE` or :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` ) and the local sequence number in *auth_context* is 0, a new number will be generated with krb5_generate_seq_number().
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *outbuf* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC.
-========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_mk_rep_dce(krb5_context context, krb5_auth_context auth_context, krb5_data * outbuf)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[out]** **outbuf** - **AP-REP** message
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *outbuf* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_mk_req - Create a KRB_AP_REQ message.
-============================================
-
-..
-
-.. c:function:: krb5_error_code krb5_mk_req(krb5_context context, krb5_auth_context * auth_context, krb5_flags ap_req_options, const char * service, const char * hostname, krb5_data * in_data, krb5_ccache ccache, krb5_data * outbuf)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[inout]** **auth_context** - Pre-existing or newly created auth context
-
- **[in]** **ap_req_options** - :data:`AP_OPTS` options
-
- **[in]** **service** - Service name, or NULL to use **"host"**
-
- **[in]** **hostname** - Host name, or NULL to use local hostname
-
- **[in]** **in_data** - Application data to be checksummed in the authenticator, or NULL
-
- **[in]** **ccache** - Credential cache used to obtain credentials for the desired service.
-
- **[out]** **outbuf** - **AP-REQ** message
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function is similar to :c:func:`krb5_mk_req_extended()` except that it uses a given *hostname* , *service* , and *ccache* to construct a service principal name and obtain credentials.
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *outbuf* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials.
-================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_mk_req_extended(krb5_context context, krb5_auth_context * auth_context, krb5_flags ap_req_options, krb5_data * in_data, krb5_creds * in_creds, krb5_data * outbuf)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[inout]** **auth_context** - Pre-existing or newly created auth context
-
- **[in]** **ap_req_options** - :data:`AP_OPTS` options
-
- **[in]** **in_data** - Application data to be checksummed in the authenticator, or NULL
-
- **[in]** **in_creds** - Credentials for the service with valid ticket and key
-
- **[out]** **outbuf** - **AP-REQ** message
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Valid *ap_req_options* are:
-
- - :data:`AP_OPTS_USE_SESSION_KEY` - Use the session key when creating the request used for user to user authentication.
-
-
- - :data:`AP_OPTS_MUTUAL_REQUIRED` - Request a mutual authentication packet from the receiver.
-
-
- - :data:`AP_OPTS_USE_SUBKEY` - Generate a subsession key from the current session key obtained from the credentials.
-
- This function creates a KRB_AP_REQ message using supplied credentials *in_creds* . *auth_context* may point to an existing auth context or to NULL, in which case a new one will be created. If *in_data* is non-null, a checksum of it will be included in the authenticator contained in the KRB_AP_REQ message. Use :c:func:`krb5_free_data_contents()` to free *outbuf* when it is no longer needed.
-
-
-
-On successful return, the authenticator is stored in *auth_context* with the *client* and *checksum* fields nulled out. (This is to prevent pointer-sharing problems; the caller should not need these fields anyway, since the caller supplied them.)
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_mk_req()`
-
-
-
-
-
+++ /dev/null
-krb5_mk_safe - Format a KRB-SAFE message.
-===========================================
-
-..
-
-.. c:function:: krb5_error_code krb5_mk_safe(krb5_context context, krb5_auth_context auth_context, const krb5_data * userdata, krb5_data * der_out, krb5_replay_data * rdata_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **userdata** - User data in the message
-
- **[out]** **der_out** - Formatted **KRB-SAFE** buffer
-
- **[out]** **rdata_out** - Replay data. Specify NULL if not needed
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function creates an integrity protected **KRB-SAFE** message using data supplied by the application.
-
-
-
-Fields in *auth_context* specify the checksum type, the keyblock that can be used to seed the checksum, full addresses (host and port) for the sender and receiver, and :data:`KRB5_AUTH_CONTEXT` flags.
-
-
-
-The local address in *auth_context* must be set, and is used to form the sender address used in the KRB-SAFE message. The remote address is optional; if specified, it will be used to form the receiver address used in the message.
-
-
-
-If the :data:`KRB5_AUTH_CONTEXT_DO_TIME` flag is set in *auth_context* , a timestamp is included in the KRB-SAFE message, and an entry for the message is entered in an in-memory replay cache to detect if the message is reflected by an attacker. If :data:`KRB5_AUTH_CONTEXT_DO_TIME` is not set, no replay cache is used. If :data:`KRB5_AUTH_CONTEXT_RET_TIME` is set in *auth_context* , a timestamp is included in the KRB-SAFE message and is stored in *rdata_out* .
-
-
-
-If either :data:`KRB5_AUTH_CONTEXT_DO_SEQUENCE` or :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` is set, the *auth_context* local sequence number is included in the KRB-SAFE message and then incremented. If :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` is set, the sequence number used is stored in *rdata_out* .
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *der_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The *rdata_out* argument is required if the :data:`KRB5_AUTH_CONTEXT_RET_TIME` or :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` flag is set in *auth_context* .
-
-
-
-
+++ /dev/null
-krb5_os_localaddr - Return all interface addresses for this host.
-===================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_os_localaddr(krb5_context context, krb5_address *** addr)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **addr** - Array of krb5_address pointers, ending with NULL
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_free_addresses()` to free *addr* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_pac_add_buffer - Add a buffer to a PAC handle.
-=====================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_pac_add_buffer(krb5_context context, krb5_pac pac, krb5_ui_4 type, const krb5_data * data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **pac** - PAC handle
-
- **[in]** **type** - Buffer type
-
- **[in]** **data** - contents
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function adds a buffer of type *type* and contents *data* to *pac* if there isn't already a buffer of this type present.
-
-
-
-The valid values of *type* is one of the following:
-
- - :data:`KRB5_PAC_LOGON_INFO` - Logon information
-
-
- - :data:`KRB5_PAC_CREDENTIALS_INFO` - Credentials information
-
-
- - :data:`KRB5_PAC_SERVER_CHECKSUM` - Server checksum
-
-
- - :data:`KRB5_PAC_PRIVSVR_CHECKSUM` - KDC checksum
-
-
- - :data:`KRB5_PAC_CLIENT_INFO` - Client name and ticket information
-
-
- - :data:`KRB5_PAC_DELEGATION_INFO` - Constrained delegation information
-
-
- - :data:`KRB5_PAC_UPN_DNS_INFO` - User principal name and DNS information
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_pac_free - Free a PAC handle.
-====================================
-
-..
-
-.. c:function:: void krb5_pac_free(krb5_context context, krb5_pac pac)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **pac** - PAC to be freed
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function frees the contents of *pac* and the structure itself.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_pac_get_buffer - Retrieve a buffer value from a PAC.
-===========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_pac_get_buffer(krb5_context context, krb5_pac pac, krb5_ui_4 type, krb5_data * data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **pac** - PAC handle
-
- **[in]** **type** - Type of buffer to retrieve
-
- **[out]** **data** - Buffer value
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *data* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_pac_get_client_info - Read client information from a PAC.
-================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_pac_get_client_info(krb5_context context, const krb5_pac pac, krb5_timestamp * authtime_out, char ** princname_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **pac** - PAC handle
-
- **[out]** **authtime_out** - Authentication timestamp (NULL if not needed)
-
- **[out]** **princname_out** - Client account name
-
-
-..
-
-
-:retval:
- - 0 on success, ENOENT if no PAC_CLIENT_INFO buffer is present in pac , ERANGE if the buffer contains invalid lengths.
-
-
-..
-
-
-
-
-
-
-
-Read the PAC_CLIENT_INFO buffer in *pac* . Place the client account name as a string in *princname_out* . If *authtime_out* is not NULL, place the initial authentication timestamp in *authtime_out* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.18
-
-
+++ /dev/null
-krb5_pac_get_types - Return an array of buffer types in a PAC handle.
-=======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_pac_get_types(krb5_context context, krb5_pac pac, size_t * len, krb5_ui_4 ** types)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **pac** - PAC handle
-
- **[out]** **len** - Number of entries in *types*
-
- **[out]** **types** - Array of buffer types
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle.
-===============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_pac_init(krb5_context context, krb5_pac * pac)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **pac** - New PAC handle
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_pac_free()` to free *pac* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_pac_parse - Unparse an encoded PAC into a new handle.
-============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_pac_parse(krb5_context context, const void * ptr, size_t len, krb5_pac * pac)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ptr** - PAC buffer
-
- **[in]** **len** - Length of *ptr*
-
- **[out]** **pac** - PAC handle
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Use :c:func:`krb5_pac_free()` to free *pac* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_pac_sign
-=============
-
-..
-
-.. c:function:: krb5_error_code krb5_pac_sign(krb5_context context, krb5_pac pac, krb5_timestamp authtime, krb5_const_principal principal, const krb5_keyblock * server_key, const krb5_keyblock * privsvr_key, krb5_data * data)
-
-..
-
-
-:param:
-
- **context**
-
- **pac**
-
- **authtime**
-
- **principal**
-
- **server_key**
-
- **privsvr_key**
-
- **data**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Use krb5_kdc_sign_ticket() instead.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_pac_sign_ext
-=================
-
-..
-
-.. c:function:: krb5_error_code krb5_pac_sign_ext(krb5_context context, krb5_pac pac, krb5_timestamp authtime, krb5_const_principal principal, const krb5_keyblock * server_key, const krb5_keyblock * privsvr_key, krb5_boolean with_realm, krb5_data * data)
-
-..
-
-
-:param:
-
- **context**
-
- **pac**
-
- **authtime**
-
- **principal**
-
- **server_key**
-
- **privsvr_key**
-
- **with_realm**
-
- **data**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Use krb5_kdc_sign_ticket() instead.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_pac_verify - Verify a PAC.
-=================================
-
-..
-
-.. c:function:: krb5_error_code krb5_pac_verify(krb5_context context, const krb5_pac pac, krb5_timestamp authtime, krb5_const_principal principal, const krb5_keyblock * server, const krb5_keyblock * privsvr)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **pac** - PAC handle
-
- **[in]** **authtime** - Expected timestamp
-
- **[in]** **principal** - Expected principal name (or NULL)
-
- **[in]** **server** - Key to validate server checksum (or NULL)
-
- **[in]** **privsvr** - Key to validate KDC checksum (or NULL)
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function validates *pac* against the supplied *server* , *privsvr* , *principal* and *authtime* . If *principal* is NULL, the principal and authtime are not verified. If *server* or *privsvr* is NULL, the corresponding checksum is not verified.
-
-
-
-If successful, *pac* is marked as verified.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- A checksum mismatch can occur if the PAC was copied from a cross-realm TGT by an ignorant KDC; also macOS Server Open Directory (as of 10.6) generates PACs with no server checksum at all. One should consider not failing the whole authentication because of this reason, but, instead, treating the ticket as if it did not contain a PAC or marking the PAC information as non-verified.
-
-
-
-
+++ /dev/null
-krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm.
-======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_pac_verify_ext(krb5_context context, const krb5_pac pac, krb5_timestamp authtime, krb5_const_principal principal, const krb5_keyblock * server, const krb5_keyblock * privsvr, krb5_boolean with_realm)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **pac** - PAC handle
-
- **[in]** **authtime** - Expected timestamp
-
- **[in]** **principal** - Expected principal name (or NULL)
-
- **[in]** **server** - Key to validate server checksum (or NULL)
-
- **[in]** **privsvr** - Key to validate KDC checksum (or NULL)
-
- **[in]** **with_realm** - If true, expect the realm of *principal*
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function is similar to :c:func:`krb5_pac_verify()` , but adds a parameter *with_realm* . If *with_realm* is true, the PAC_CLIENT_INFO field is expected to include the realm of *principal* as well as the name. This flag is necessary to verify PACs in cross-realm S4U2Self referral TGTs.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.17
-
-
+++ /dev/null
-krb5_parse_name - Convert a string principal name to a krb5_principal structure.
-==================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_parse_name(krb5_context context, const char * name, krb5_principal * principal_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **name** - String representation of a principal name
-
- **[out]** **principal_out** - New principal
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Convert a string representation of a principal name to a krb5_principal structure.
-
-
-
-A string representation of a Kerberos name consists of one or more principal name components, separated by slashes, optionally followed by the @ character and a realm name. If the realm name is not specified, the local realm is used.
-
-
-
-To use the slash and @ symbols as part of a component (quoted) instead of using them as a component separator or as a realm prefix), put a backslash () character in front of the symbol. Similarly, newline, tab, backspace, and NULL characters can be included in a component by using **n** , **t** , **b** or **0** , respectively.
-
-
-
-Beginning with release 1.20, the name type of the principal will be inferred as **KRB5_NT_SRV_INST** or **KRB5_NT_WELLKNOWN** based on the principal name. The type will be **KRB5_NT_PRINCIPAL** if a type cannot be inferred.
-
-
-
-Use :c:func:`krb5_free_principal()` to free *principal_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The realm in a Kerberos *name* cannot contain slash, colon, or NULL characters.
-
-
-
-
+++ /dev/null
-krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags.
-=========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_parse_name_flags(krb5_context context, const char * name, int flags, krb5_principal * principal_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **name** - String representation of a principal name
-
- **[in]** **flags** - Flag
-
- **[out]** **principal_out** - New principal
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Similar to :c:func:`krb5_parse_name()` , this function converts a single-string representation of a principal name to a krb5_principal structure.
-
-
-
-The following flags are valid:
-
- - :data:`KRB5_PRINCIPAL_PARSE_NO_REALM` - no realm must be present in *name*
-
-
- - :data:`KRB5_PRINCIPAL_PARSE_REQUIRE_REALM` - realm must be present in *name*
-
-
- - :data:`KRB5_PRINCIPAL_PARSE_ENTERPRISE` - create single-component enterprise principal
-
-
- - :data:`KRB5_PRINCIPAL_PARSE_IGNORE_REALM` - ignore realm if present in *name*
-
- If **KRB5_PRINCIPAL_PARSE_NO_REALM** or **KRB5_PRINCIPAL_PARSE_IGNORE_REALM** is specified in *flags* , the realm of the new principal will be empty. Otherwise, the default realm for *context* will be used if *name* does not specify a realm.
-
-
-
-Use :c:func:`krb5_free_principal()` to free *principal_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_prepend_error_message - Add a prefix to the message for an error code.
-=============================================================================
-
-..
-
-.. c:function:: void krb5_prepend_error_message(krb5_context ctx, krb5_error_code code, const char * fmt, ... )
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **code** - Error code
-
- **[in]** **fmt** - Format string for error message prefix
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Format a message and prepend it to the current message for *code* . The prefix will be separated from the old message with a colon and space.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_principal2salt - Convert a principal name into the default salt for that principal.
-==========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_principal2salt(krb5_context context, krb5_const_principal pr, krb5_data * ret)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **pr** - Principal name
-
- **[out]** **ret** - Default salt for *pr* to be filled in
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_principal_compare - Compare two principals.
-==================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_principal_compare(krb5_context context, krb5_const_principal princ1, krb5_const_principal princ2)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **princ1** - First principal
-
- **[in]** **princ2** - Second principal
-
-
-..
-
-
-:retval:
- - TRUE if the principals are the same; FALSE otherwise
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_principal_compare_any_realm - Compare two principals ignoring realm components.
-======================================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_principal_compare_any_realm(krb5_context context, krb5_const_principal princ1, krb5_const_principal princ2)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **princ1** - First principal
-
- **[in]** **princ2** - Second principal
-
-
-..
-
-
-:retval:
- - TRUE if the principals are the same; FALSE otherwise
-
-
-..
-
-
-
-
-
-
-
-Similar to :c:func:`krb5_principal_compare()` , but do not compare the realm components of the principals.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_principal_compare_flags - Compare two principals with additional flags.
-==============================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_principal_compare_flags(krb5_context context, krb5_const_principal princ1, krb5_const_principal princ2, int flags)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **princ1** - First principal
-
- **[in]** **princ2** - Second principal
-
- **[in]** **flags** - Flags
-
-
-..
-
-
-:retval:
- - TRUE if the principal names are the same; FALSE otherwise
-
-
-..
-
-
-
-
-
-
-
-Valid flags are:
-
- - :data:`KRB5_PRINCIPAL_COMPARE_IGNORE_REALM` - ignore realm component
-
-
- - :data:`KRB5_PRINCIPAL_COMPARE_ENTERPRISE` - UPNs as real principals
-
-
- - :data:`KRB5_PRINCIPAL_COMPARE_CASEFOLD` case-insensitive
-
-
- - :data:`KRB5_PRINCIPAL_COMPARE_UTF8` - treat principals as UTF-8
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_principal_compare()`
-
-
-
-
-
+++ /dev/null
-krb5_process_key
-================
-
-..
-
-.. c:function:: krb5_error_code krb5_process_key(krb5_context context, krb5_encrypt_block * eblock, const krb5_keyblock * key)
-
-..
-
-
-:param:
-
- **context**
-
- **eblock**
-
- **key**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_c_* API family.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_prompter_posix - Prompt user for password.
-=================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_prompter_posix(krb5_context context, void * data, const char * name, const char * banner, int num_prompts, krb5_prompt prompts)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **data** - Unused (callback argument)
-
- **[in]** **name** - Name to output during prompt
-
- **[in]** **banner** - Banner to output during prompt
-
- **[in]** **num_prompts** - Number of prompts in *prompts*
-
- **[in]** **prompts** - Array of prompts and replies
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function is intended to be used as a prompter callback for :c:func:`krb5_get_init_creds_password()` or :c:func:`krb5_init_creds_init()` .
-
-
-
-Writes *name* and *banner* to stdout, each followed by a newline, then writes each prompt field in the *prompts* array, followed by":", and sets the reply field of the entry to a line of input read from stdin. If the hidden flag is set for a prompt, then terminal echoing is turned off when input is read.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_random_key
-===============
-
-..
-
-.. c:function:: krb5_error_code krb5_random_key(krb5_context context, const krb5_encrypt_block * eblock, krb5_pointer ptr, krb5_keyblock ** keyblock)
-
-..
-
-
-:param:
-
- **context**
-
- **eblock**
-
- **ptr**
-
- **keyblock**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_c_* API family.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_rd_cred - Read and validate a KRB-CRED message.
-======================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_rd_cred(krb5_context context, krb5_auth_context auth_context, krb5_data * creddata, krb5_creds *** creds_out, krb5_replay_data * rdata_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **creddata** - **KRB-CRED** message
-
- **[out]** **creds_out** - Null-terminated array of forwarded credentials
-
- **[out]** **rdata_out** - Replay data (NULL if not needed)
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
- *creddata* will be decrypted using the receiving subkey if it is present in *auth_context* , or the session key if the receiving subkey is not present or fails to decrypt the message.
-
-
-
-Use :c:func:`krb5_free_tgt_creds()` to free *creds_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The *rdata_out* argument is required if the :data:`KRB5_AUTH_CONTEXT_RET_TIME` or :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` flag is set in *auth_context* .`
-
-
-
-
+++ /dev/null
-krb5_rd_error - Decode a KRB-ERROR message.
-=============================================
-
-..
-
-.. c:function:: krb5_error_code krb5_rd_error(krb5_context context, const krb5_data * enc_errbuf, krb5_error ** dec_error)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **enc_errbuf** - Encoded error message
-
- **[out]** **dec_error** - Decoded error message
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function processes **KRB-ERROR** message *enc_errbuf* and returns an allocated structure *dec_error* containing the error message. Use :c:func:`krb5_free_error()` to free *dec_error* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_rd_priv - Process a KRB-PRIV message.
-============================================
-
-..
-
-.. c:function:: krb5_error_code krb5_rd_priv(krb5_context context, krb5_auth_context auth_context, const krb5_data * inbuf, krb5_data * userdata_out, krb5_replay_data * rdata_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication structure
-
- **[in]** **inbuf** - **KRB-PRIV** message to be parsed
-
- **[out]** **userdata_out** - Data parsed from **KRB-PRIV** message
-
- **[out]** **rdata_out** - Replay data. Specify NULL if not needed
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function parses a **KRB-PRIV** message, verifies its integrity, and stores its unencrypted data into *userdata_out* .
-
-
-
-If *auth_context* has a remote address set, the address will be used to verify the sender address in the KRB-PRIV message. If *auth_context* has a local address set, it will be used to verify the receiver address in the KRB-PRIV message if the message contains one.
-
-
-
-If the :data:`KRB5_AUTH_CONTEXT_DO_SEQUENCE` flag is set in *auth_context* , the sequence number of the KRB-PRIV message is checked against the remote sequence number field of *auth_context* . Otherwise, the sequence number is not used.
-
-
-
-If the :data:`KRB5_AUTH_CONTEXT_DO_TIME` flag is set in *auth_context* , then the timestamp in the message is verified to be within the permitted clock skew of the current time, and the message is checked against an in-memory replay cache to detect reflections or replays.
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *userdata_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The *rdata_out* argument is required if the :data:`KRB5_AUTH_CONTEXT_RET_TIME` or :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` flag is set in *auth_context* .
-
-
-
-
+++ /dev/null
-krb5_rd_rep - Parse and decrypt a KRB_AP_REP message.
-=======================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_rd_rep(krb5_context context, krb5_auth_context auth_context, const krb5_data * inbuf, krb5_ap_rep_enc_part ** repl)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **inbuf** - AP-REP message
-
- **[out]** **repl** - Decrypted reply message
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function parses, decrypts and verifies a message from *inbuf* and fills in *repl* with a pointer to allocated memory containing the fields from the encrypted response.
-
-
-
-Use :c:func:`krb5_free_ap_rep_enc_part()` to free *repl* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC.
-=======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_rd_rep_dce(krb5_context context, krb5_auth_context auth_context, const krb5_data * inbuf, krb5_ui_4 * nonce)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **inbuf** - AP-REP message
-
- **[out]** **nonce** - Sequence number from the decrypted reply
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function parses, decrypts and verifies a message from *inbuf* and fills in *nonce* with a decrypted reply sequence number.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_rd_req - Parse and decrypt a KRB_AP_REQ message.
-=======================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_rd_req(krb5_context context, krb5_auth_context * auth_context, const krb5_data * inbuf, krb5_const_principal server, krb5_keytab keytab, krb5_flags * ap_req_options, krb5_ticket ** ticket)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[inout]** **auth_context** - Pre-existing or newly created auth context
-
- **[in]** **inbuf** - AP-REQ message to be parsed
-
- **[in]** **server** - Matching principal for server, or NULL to allow any principal in keytab
-
- **[in]** **keytab** - Key table, or NULL to use the default
-
- **[out]** **ap_req_options** - If non-null, the AP-REQ flags on output
-
- **[out]** **ticket** - If non-null, ticket from the AP-REQ message
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function parses, decrypts and verifies a AP-REQ message from *inbuf* and stores the authenticator in *auth_context* .
-
-
-
-If a keyblock was specified in *auth_context* using :c:func:`krb5_auth_con_setuseruserkey()` , that key is used to decrypt the ticket in AP-REQ message and *keytab* is ignored. In this case, *server* should be specified as a complete principal name to allow for proper transited-path checking and replay cache selection.
-
-
-
-Otherwise, the decryption key is obtained from *keytab* , or from the default keytab if it is NULL. In this case, *server* may be a complete principal name, a matching principal (see :c:func:`krb5_sname_match()` ), or NULL to match any principal name. The keys tried against the encrypted part of the ticket are determined as follows:
-
-
-
-
-
- - If *server* is a complete principal name, then its entry in *keytab* is tried.
-
-
- - Otherwise, if *keytab* is iterable, then all entries in *keytab* which match *server* are tried.
-
-
- - Otherwise, the server principal in the ticket must match *server* , and its entry in *keytab* is tried.
-
-
-
-
-
-The client specified in the decrypted authenticator must match the client specified in the decrypted ticket.
-
-
-
-If the *remote_addr* field of *auth_context* is set, the request must come from that address.
-
-
-
-If a replay cache handle is provided in the *auth_context* , the authenticator and ticket are verified against it. If no conflict is found, the new authenticator is then stored in the replay cache of *auth_context* .
-
-
-
-Various other checks are performed on the decoded data, including cross-realm policy, clockskew, and ticket validation times.
-
-
-
-On success the authenticator, subkey, and remote sequence number of the request are stored in *auth_context* . If the :data:`AP_OPTS_MUTUAL_REQUIRED` bit is set, the local sequence number is XORed with the remote sequence number in the request.
-
-
-
-Use :c:func:`krb5_free_ticket()` to free *ticket* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_rd_safe - Process KRB-SAFE message.
-==========================================
-
-..
-
-.. c:function:: krb5_error_code krb5_rd_safe(krb5_context context, krb5_auth_context auth_context, const krb5_data * inbuf, krb5_data * userdata_out, krb5_replay_data * rdata_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **auth_context** - Authentication context
-
- **[in]** **inbuf** - **KRB-SAFE** message to be parsed
-
- **[out]** **userdata_out** - Data parsed from **KRB-SAFE** message
-
- **[out]** **rdata_out** - Replay data. Specify NULL if not needed
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function parses a **KRB-SAFE** message, verifies its integrity, and stores its data into *userdata_out* .
-
-
-
-If *auth_context* has a remote address set, the address will be used to verify the sender address in the KRB-SAFE message. If *auth_context* has a local address set, it will be used to verify the receiver address in the KRB-SAFE message if the message contains one.
-
-
-
-If the :data:`KRB5_AUTH_CONTEXT_DO_SEQUENCE` flag is set in *auth_context* , the sequence number of the KRB-SAFE message is checked against the remote sequence number field of *auth_context* . Otherwise, the sequence number is not used.
-
-
-
-If the :data:`KRB5_AUTH_CONTEXT_DO_TIME` flag is set in *auth_context* , then the timestamp in the message is verified to be within the permitted clock skew of the current time, and the message is checked against an in-memory replay cache to detect reflections or replays.
-
-
-
-Use :c:func:`krb5_free_data_contents()` to free *userdata_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- The *rdata_out* argument is required if the :data:`KRB5_AUTH_CONTEXT_RET_TIME` or :data:`KRB5_AUTH_CONTEXT_RET_SEQUENCE` flag is set in *auth_context* .
-
-
-
-
+++ /dev/null
-krb5_read_password - Read a password from keyboard input.
-===========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_read_password(krb5_context context, const char * prompt, const char * prompt2, char * return_pwd, unsigned int * size_return)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **prompt** - First user prompt when reading password
-
- **[in]** **prompt2** - Second user prompt (NULL to prompt only once)
-
- **[out]** **return_pwd** - Returned password
-
- **[inout]** **size_return** - On input, maximum size of password; on output, size of password read
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Error in reading or verifying the password
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function reads a password from keyboard input and stores it in *return_pwd* . *size_return* should be set by the caller to the amount of storage space available in *return_pwd* ; on successful return, it will be set to the length of the password read.
-
-
-
- *prompt* is printed to the terminal, followed by":", and then a password is read from the keyboard.
-
-
-
-If *prompt2* is NULL, the password is read only once. Otherwise, *prompt2* is printed to the terminal and a second password is read. If the two passwords entered are not identical, KRB5_LIBOS_BADPWDMATCH is returned.
-
-
-
-Echoing is turned off when the password is read.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_realm_compare - Compare the realms of two principals.
-============================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_realm_compare(krb5_context context, krb5_const_principal princ1, krb5_const_principal princ2)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **princ1** - First principal
-
- **[in]** **princ2** - Second principal
-
-
-..
-
-
-:retval:
- - TRUE if the realm names are the same; FALSE otherwise
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_recvauth - Server function for sendauth protocol.
-========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_recvauth(krb5_context context, krb5_auth_context * auth_context, krb5_pointer fd, char * appl_version, krb5_principal server, krb5_int32 flags, krb5_keytab keytab, krb5_ticket ** ticket)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[inout]** **auth_context** - Pre-existing or newly created auth context
-
- **[in]** **fd** - File descriptor
-
- **[in]** **appl_version** - Application protocol version to be matched against the client's application version
-
- **[in]** **server** - Server principal (NULL for any in *keytab* )
-
- **[in]** **flags** - Additional specifications
-
- **[in]** **keytab** - Key table containing service keys
-
- **[out]** **ticket** - Ticket (NULL if not needed)
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function performs the server side of a sendauth/recvauth exchange by sending and receiving messages over *fd* .
-
-
-
-Use :c:func:`krb5_free_ticket()` to free *ticket* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_sendauth()`
-
-
-
-
-
+++ /dev/null
-krb5_recvauth_version - Server function for sendauth protocol with version parameter.
-=======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_recvauth_version(krb5_context context, krb5_auth_context * auth_context, krb5_pointer fd, krb5_principal server, krb5_int32 flags, krb5_keytab keytab, krb5_ticket ** ticket, krb5_data * version)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[inout]** **auth_context** - Pre-existing or newly created auth context
-
- **[in]** **fd** - File descriptor
-
- **[in]** **server** - Server principal (NULL for any in *keytab* )
-
- **[in]** **flags** - Additional specifications
-
- **[in]** **keytab** - Decryption key
-
- **[out]** **ticket** - Ticket (NULL if not needed)
-
- **[out]** **version** - sendauth protocol version (NULL if not needed)
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function is similar to :c:func:`krb5_recvauth()` with the additional output information place into *version* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context.
-===========================================================================================================
-
-..
-
-.. c:function:: const char * krb5_responder_get_challenge(krb5_context ctx, krb5_responder_context rctx, const char * question)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **rctx** - Responder context
-
- **[in]** **question** - Question name
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Return a pointer to a C string containing the challenge for *question* within *rctx* , or NULL if the question is not present in *rctx* . The structure of the question depends on the question name, but will always be printable UTF-8 text. The returned pointer is an alias, valid only as long as the lifetime of *rctx* , and should not be modified or freed by the caller.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_responder_list_questions - List the question names contained in the responder context.
-=============================================================================================
-
-..
-
-.. c:function:: const char *const * krb5_responder_list_questions(krb5_context ctx, krb5_responder_context rctx)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **rctx** - Responder context
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Return a pointer to a null-terminated list of question names which are present in *rctx* . The pointer is an alias, valid only as long as the lifetime of *rctx* , and should not be modified or freed by the caller. A question's challenge can be retrieved using :c:func:`krb5_responder_get_challenge()` and answered using :c:func:`krb5_responder_set_answer()` .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() .
-=====================================================================================================
-
-..
-
-.. c:function:: void krb5_responder_otp_challenge_free(krb5_context ctx, krb5_responder_context rctx, krb5_responder_otp_challenge * chl)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **rctx** - Responder context
-
- **[in]** **chl** - The challenge to free
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct.
-==========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_responder_otp_get_challenge(krb5_context ctx, krb5_responder_context rctx, krb5_responder_otp_challenge ** chl)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **rctx** - Responder context
-
- **[out]** **chl** - Challenge structure
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-A convenience function which parses the KRB5_RESPONDER_QUESTION_OTP question challenge data, making it available in native C. The main feature of this function is the ability to interact with OTP tokens without parsing the JSON.
-
-
-
-The returned value must be passed to :c:func:`krb5_responder_otp_challenge_free()` to be freed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question.
-==================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_responder_otp_set_answer(krb5_context ctx, krb5_responder_context rctx, size_t ti, const char * value, const char * pin)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **rctx** - Responder context
-
- **[in]** **ti** - The index of the tokeninfo selected
-
- **[in]** **value** - The value to set, or NULL for none
-
- **[in]** **pin** - The pin to set, or NULL for none
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() .
-===========================================================================================================
-
-..
-
-.. c:function:: void krb5_responder_pkinit_challenge_free(krb5_context ctx, krb5_responder_context rctx, krb5_responder_pkinit_challenge * chl)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **rctx** - Responder context
-
- **[in]** **chl** - The challenge to free
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.12
-
-
+++ /dev/null
-krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct.
-================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_responder_pkinit_get_challenge(krb5_context ctx, krb5_responder_context rctx, krb5_responder_pkinit_challenge ** chl_out)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **rctx** - Responder context
-
- **[out]** **chl_out** - Challenge structure
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-A convenience function which parses the KRB5_RESPONDER_QUESTION_PKINIT question challenge data, making it available in native C. The main feature of this function is the ability to read the challenge without parsing the JSON.
-
-
-
-The returned value must be passed to :c:func:`krb5_responder_pkinit_challenge_free()` to be freed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.12
-
-
+++ /dev/null
-krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity.
-=========================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_responder_pkinit_set_answer(krb5_context ctx, krb5_responder_context rctx, const char * identity, const char * pin)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **rctx** - Responder context
-
- **[in]** **identity** - The identity for which a PIN is being supplied
-
- **[in]** **pin** - The provided PIN, or NULL for none
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.12
-
-
+++ /dev/null
-krb5_responder_set_answer - Answer a named question in the responder context.
-===============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_responder_set_answer(krb5_context ctx, krb5_responder_context rctx, const char * question, const char * answer)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **rctx** - Responder context
-
- **[in]** **question** - Question name
-
- **[in]** **answer** - The string to set (MUST be printable UTF-8)
-
-
-..
-
-
-:retval:
- - EINVAL question is not present within rctx
-
-
-..
-
-
-
-
-
-
-
-This function supplies an answer to *question* within *rctx* . The appropriate form of the answer depends on the question name.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.11
-
-
+++ /dev/null
-krb5_salttype_to_string - Convert a salt type to a string.
-============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_salttype_to_string(krb5_int32 salttype, char * buffer, size_t buflen)
-
-..
-
-
-:param:
-
- **[in]** **salttype** - Salttype to convert
-
- **[out]** **buffer** - Buffer to receive the converted string
-
- **[in]** **buflen** - Storage available in *buffer*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_sendauth - Client function for sendauth protocol.
-========================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_sendauth(krb5_context context, krb5_auth_context * auth_context, krb5_pointer fd, char * appl_version, krb5_principal client, krb5_principal server, krb5_flags ap_req_options, krb5_data * in_data, krb5_creds * in_creds, krb5_ccache ccache, krb5_error ** error, krb5_ap_rep_enc_part ** rep_result, krb5_creds ** out_creds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[inout]** **auth_context** - Pre-existing or newly created auth context
-
- **[in]** **fd** - File descriptor that describes network socket
-
- **[in]** **appl_version** - Application protocol version to be matched with the receiver's application version
-
- **[in]** **client** - Client principal
-
- **[in]** **server** - Server principal
-
- **[in]** **ap_req_options** - :data:`AP_OPTS` options
-
- **[in]** **in_data** - Data to be sent to the server
-
- **[in]** **in_creds** - Input credentials, or NULL to use *ccache*
-
- **[in]** **ccache** - Credential cache
-
- **[out]** **error** - If non-null, contains KRB_ERROR message returned from server
-
- **[out]** **rep_result** - If non-null and *ap_req_options* is :data:`AP_OPTS_MUTUAL_REQUIRED` , contains the result of mutual authentication exchange
-
- **[out]** **out_creds** - If non-null, the retrieved credentials
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function performs the client side of a sendauth/recvauth exchange by sending and receiving messages over *fd* .
-
-
-
-Credentials may be specified in three ways:
-
-
-
-
-
- - If *in_creds* is NULL, credentials are obtained with :c:func:`krb5_get_credentials()` using the principals *client* and *server* . *server* must be non-null; *client* may NULL to use the default principal of *ccache* .
-
-
-
- - If *in_creds* is non-null, but does not contain a ticket, credentials for the exchange are obtained with :c:func:`krb5_get_credentials()` using *in_creds* . In this case, the values of *client* and *server* are unused.
-
-
-
- - If *in_creds* is a complete credentials structure, it used directly. In this case, the values of *client* , *server* , and *ccache* are unused.
-
- If the server is using a different application protocol than that specified in *appl_version* , an error will be returned.
-
-
-
-Use :c:func:`krb5_free_creds()` to free *out_creds* , :c:func:`krb5_free_ap_rep_enc_part()` to free *rep_result* , and :c:func:`krb5_free_error()` to free *error* when they are no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-.. seealso::
- :c:func:`krb5_recvauth()`
-
-
-
-
-
+++ /dev/null
-krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table.
-=====================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_server_decrypt_ticket_keytab(krb5_context context, const krb5_keytab kt, krb5_ticket * ticket)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **kt** - Key table
-
- **[in]** **ticket** - Ticket to be decrypted
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function takes a *ticket* as input and decrypts it using key data from *kt* . The result is placed into *ticket->enc_part2* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_set_default_realm - Override the default realm for the specified context.
-================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_set_default_realm(krb5_context context, const char * lrealm)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **lrealm** - Realm name for the default realm
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-If *lrealm* is NULL, clear the default realm setting.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure.
-===============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_set_default_tgs_enctypes(krb5_context context, const krb5_enctype * etypes)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **etypes** - Encryption type(s) to set
-
-
-..
-
-
-:retval:
- - 0 Success
- - KRB5_PROG_ETYPE_NOSUPP Program lacks support for encryption type
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function sets the default enctype list for TGS requests made using *context* to *etypes* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- This overrides the default list (from config file or built-in).
-
-
-
-
+++ /dev/null
-krb5_set_error_message - Set an extended error message for an error code.
-===========================================================================
-
-..
-
-.. c:function:: void krb5_set_error_message(krb5_context ctx, krb5_error_code code, const char * fmt, ... )
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **code** - Error code
-
- **[in]** **fmt** - Error string for the error code
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_set_kdc_recv_hook - Set a KDC post-receive hook function.
-================================================================
-
-..
-
-.. c:function:: void krb5_set_kdc_recv_hook(krb5_context context, krb5_post_recv_fn recv_hook, void * data)
-
-..
-
-
-:param:
-
- **[in]** **context** - The library context.
-
- **[in]** **recv_hook** - Hook function (or NULL to disable the hook)
-
- **[in]** **data** - Callback data to be passed to *recv_hook*
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
- *recv_hook* will be called after a reply is received from a KDC during a call to a library function such as :c:func:`krb5_get_credentials()` . The hook function may inspect or override the reply. This hook will not be executed if the pre-send hook returns a synthetic reply.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.15
-
-
+++ /dev/null
-krb5_set_kdc_send_hook - Set a KDC pre-send hook function.
-============================================================
-
-..
-
-.. c:function:: void krb5_set_kdc_send_hook(krb5_context context, krb5_pre_send_fn send_hook, void * data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **send_hook** - Hook function (or NULL to disable the hook)
-
- **[in]** **data** - Callback data to be passed to *send_hook*
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
- *send_hook* will be called before messages are sent to KDCs by library functions such as :c:func:`krb5_get_credentials()` . The hook function may inspect, override, or synthesize its own reply to the message.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.15
-
-
+++ /dev/null
-krb5_set_password - Set a password for a principal using specified credentials.
-=================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_set_password(krb5_context context, krb5_creds * creds, const char * newpw, krb5_principal change_password_for, int * result_code, krb5_data * result_code_string, krb5_data * result_string)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **creds** - Credentials for kadmin/changepw service
-
- **[in]** **newpw** - New password
-
- **[in]** **change_password_for** - Change the password for this principal
-
- **[out]** **result_code** - Numeric error code from server
-
- **[out]** **result_code_string** - String equivalent to *result_code*
-
- **[out]** **result_string** - Data returned from the remote system
-
-
-..
-
-
-:retval:
- - 0 Success and result_code is set to KRB5_KPASSWD_SUCCESS .
-
-
-:return:
- - Kerberos error codes.
-
-..
-
-
-
-
-
-
-
-This function uses the credentials *creds* to set the password *newpw* for the principal *change_password_for* . It implements the set password operation of RFC 3244, for interoperability with Microsoft Windows implementations.
-
-
-
-The error code and strings are returned in *result_code* , *result_code_string* and *result_string* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- If *change_password_for* is NULL, the change is performed on the current principal. If *change_password_for* is non-null, the change is performed on the principal name passed in *change_password_for* .
-
-
-
-
+++ /dev/null
-krb5_set_password_using_ccache - Set a password for a principal using cached credentials.
-===========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_set_password_using_ccache(krb5_context context, krb5_ccache ccache, const char * newpw, krb5_principal change_password_for, int * result_code, krb5_data * result_code_string, krb5_data * result_string)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ccache** - Credential cache
-
- **[in]** **newpw** - New password
-
- **[in]** **change_password_for** - Change the password for this principal
-
- **[out]** **result_code** - Numeric error code from server
-
- **[out]** **result_code_string** - String equivalent to *result_code*
-
- **[out]** **result_string** - Data returned from the remote system
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function uses the cached credentials from *ccache* to set the password *newpw* for the principal *change_password_for* . It implements RFC 3244 set password operation (interoperable with MS Windows implementations) using the credential cache.
-
-
-
-The error code and strings are returned in *result_code* , *result_code_string* and *result_string* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- If *change_password_for* is set to NULL, the change is performed on the default principal in *ccache* . If *change_password_for* is non null, the change is performed on the specified principal.
-
-
-
-
+++ /dev/null
-krb5_set_principal_realm - Set the realm field of a principal.
-================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_set_principal_realm(krb5_context context, krb5_principal principal, const char * realm)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **principal** - Principal name
-
- **[in]** **realm** - Realm name
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-Set the realm name part of *principal* to *realm* , overwriting the previous realm.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_set_real_time - Set time offset field in a krb5_context structure.
-=========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_set_real_time(krb5_context context, krb5_timestamp seconds, krb5_int32 microseconds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **seconds** - Real time, seconds portion
-
- **[in]** **microseconds** - Real time, microseconds portion
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function sets the time offset in *context* to the difference between the system time and the real time as determined by *seconds* and *microseconds* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_set_trace_callback - Specify a callback function for trace events.
-=========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_set_trace_callback(krb5_context context, krb5_trace_callback fn, void * cb_data)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **fn** - Callback function
-
- **[in]** **cb_data** - Callback data
-
-
-..
-
-
-
-:return:
- - Returns KRB5_TRACE_NOSUPP if tracing is not supported in the library (unless fn is NULL).
-
-..
-
-
-
-
-
-
-
-Specify a callback for trace events occurring in krb5 operations performed within *context* . *fn* will be invoked with *context* as the first argument, *cb_data* as the last argument, and a pointer to a krb5_trace_info as the second argument. If the trace callback is reset via this function or *context* is destroyed, *fn* will be invoked with a NULL second argument so it can clean up *cb_data* . Supply a NULL value for *fn* to disable trace callbacks within *context* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- This function overrides the information passed through the *KRB5_TRACE* environment variable.
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_set_trace_filename - Specify a file name for directing trace events.
-===========================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_set_trace_filename(krb5_context context, const char * filename)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **filename** - File name
-
-
-..
-
-
-:retval:
- - KRB5_TRACE_NOSUPP Tracing is not supported in the library.
-
-
-..
-
-
-
-
-
-
-
-Open *filename* for appending (creating it, if necessary) and set up a callback to write trace events to it.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- This function overrides the information passed through the *KRB5_TRACE* environment variable.
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_sname_match - Test whether a principal matches a matching principal.
-===========================================================================
-
-..
-
-.. c:function:: krb5_boolean krb5_sname_match(krb5_context context, krb5_const_principal matching, krb5_const_principal princ)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **matching** - Matching principal
-
- **[in]** **princ** - Principal to test
-
-
-..
-
-
-
-:return:
- - TRUE if princ matches matching , FALSE otherwise.
-
-..
-
-
-
-
-
-
-
-If *matching* is NULL, return TRUE. If *matching* is not a matching principal, return the value of krb5_principal_compare(context, matching, princ).
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
-
-.. note::
-
- A matching principal is a host-based principal with an empty realm and/or second data component (hostname). Profile configuration may cause the hostname to be ignored even if it is present. A principal matches a matching principal if the former has the same non-empty (and non-ignored) components of the latter.
-
-
-
-
+++ /dev/null
-krb5_sname_to_principal - Generate a full principal name from a service name.
-===============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_sname_to_principal(krb5_context context, const char * hostname, const char * sname, krb5_int32 type, krb5_principal * ret_princ)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **hostname** - Host name, or NULL to use local host
-
- **[in]** **sname** - Service name, or NULL to use **"host"**
-
- **[in]** **type** - Principal type
-
- **[out]** **ret_princ** - Generated principal
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function converts a *hostname* and *sname* into *krb5_principal* structure *ret_princ* . The returned principal will be of the form *sname\/hostname@REALM* where REALM is determined by :c:func:`krb5_get_host_realm()` . In some cases this may be the referral (empty) realm.
-
-
-
-The *type* can be one of the following:
-
-
-
-
-
- - :data:`KRB5_NT_SRV_HST` canonicalizes the host name before looking up the realm and generating the principal.
-
-
-
- - :data:`KRB5_NT_UNKNOWN` accepts the hostname as given, and does not canonicalize it.
-
- Use krb5_free_principal to free *ret_princ* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_string_to_cksumtype - Convert a string to a checksum type.
-=================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_string_to_cksumtype(char * string, krb5_cksumtype * cksumtypep)
-
-..
-
-
-:param:
-
- **[in]** **string** - String to be converted
-
- **[out]** **cksumtypep** - Checksum type to be filled in
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - EINVAL
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_string_to_deltat - Convert a string to a delta time value.
-=================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_string_to_deltat(char * string, krb5_deltat * deltatp)
-
-..
-
-
-:param:
-
- **[in]** **string** - String to be converted
-
- **[out]** **deltatp** - Delta time to be filled in
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - KRB5_DELTAT_BADFORMAT
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_string_to_enctype - Convert a string to an encryption type.
-==================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_string_to_enctype(char * string, krb5_enctype * enctypep)
-
-..
-
-
-:param:
-
- **[in]** **string** - String to convert to an encryption type
-
- **[out]** **enctypep** - Encryption type
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - EINVAL
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_string_to_key
-==================
-
-..
-
-.. c:function:: krb5_error_code krb5_string_to_key(krb5_context context, const krb5_encrypt_block * eblock, krb5_keyblock * keyblock, const krb5_data * data, const krb5_data * salt)
-
-..
-
-
-:param:
-
- **context**
-
- **eblock**
-
- **keyblock**
-
- **data**
-
- **salt**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED See krb5_c_string_to_key()
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_string_to_salttype - Convert a string to a salt type.
-============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_string_to_salttype(char * string, krb5_int32 * salttypep)
-
-..
-
-
-:param:
-
- **[in]** **string** - String to convert to an encryption type
-
- **[out]** **salttypep** - Salt type to be filled in
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - EINVAL
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_string_to_timestamp - Convert a string to a timestamp.
-=============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_string_to_timestamp(char * string, krb5_timestamp * timestampp)
-
-..
-
-
-:param:
-
- **[in]** **string** - String to be converted
-
- **[out]** **timestampp** - Pointer to timestamp
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - EINVAL
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_timeofday - Retrieve the current time with context specific time offset adjustment.
-==========================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_timeofday(krb5_context context, krb5_timestamp * timeret)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **timeret** - Timestamp to fill in
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function retrieves the system time of day with the context specific time offset adjustment.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding.
-=============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_timestamp_to_sfstring(krb5_timestamp timestamp, char * buffer, size_t buflen, char * pad)
-
-..
-
-
-:param:
-
- **[in]** **timestamp** - Timestamp to convert
-
- **[out]** **buffer** - Buffer to hold the converted timestamp
-
- **[in]** **buflen** - Length of buffer
-
- **[in]** **pad** - Optional value to pad *buffer* if converted timestamp does not fill it
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-If *pad* is not NULL, *buffer* is padded out to *buflen* - 1 characters with the value of * *pad* .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_timestamp_to_string - Convert a timestamp to a string.
-=============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_timestamp_to_string(krb5_timestamp timestamp, char * buffer, size_t buflen)
-
-..
-
-
-:param:
-
- **[in]** **timestamp** - Timestamp to convert
-
- **[out]** **buffer** - Buffer to hold converted timestamp
-
- **[in]** **buflen** - Storage available in *buffer*
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-The string is returned in the locale's appropriate date and time representation.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_tkt_creds_free - Free a TGS request context.
-===================================================
-
-..
-
-.. c:function:: void krb5_tkt_creds_free(krb5_context context, krb5_tkt_creds_context ctx)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - TGS request context
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context.
-====================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_tkt_creds_get(krb5_context context, krb5_tkt_creds_context ctx)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - TGS request context
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function synchronously obtains credentials using a context created by :c:func:`krb5_tkt_creds_init()` . On successful return, the credentials can be retrieved with :c:func:`krb5_tkt_creds_get_creds()` .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context.
-======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_tkt_creds_get_creds(krb5_context context, krb5_tkt_creds_context ctx, krb5_creds * creds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - TGS request context
-
- **[out]** **creds** - Acquired credentials
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function copies the acquired initial credentials from *ctx* into *creds* , after the successful completion of :c:func:`krb5_tkt_creds_get()` or :c:func:`krb5_tkt_creds_step()` . Use :c:func:`krb5_free_cred_contents()` to free *creds* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context.
-==============================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_tkt_creds_get_times(krb5_context context, krb5_tkt_creds_context ctx, krb5_ticket_times * times)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - TGS request context
-
- **[out]** **times** - Ticket times for acquired credentials
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-The TGS request context must have completed obtaining credentials via either :c:func:`krb5_tkt_creds_get()` or :c:func:`krb5_tkt_creds_step()` .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_tkt_creds_init - Create a context to get credentials from a KDC's Ticket Granting Service.
-=================================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_tkt_creds_init(krb5_context context, krb5_ccache ccache, krb5_creds * creds, krb5_flags options, krb5_tkt_creds_context * ctx)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ccache** - Credential cache handle
-
- **[in]** **creds** - Input credentials
-
- **[in]** **options** - :data:`KRB5_GC` options for this request.
-
- **[out]** **ctx** - New TGS request context
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function prepares to obtain credentials matching *creds* , either by retrieving them from *ccache* or by making requests to ticket-granting services beginning with a ticket-granting ticket for the client principal's realm.
-
-
-
-The resulting TGS acquisition context can be used asynchronously with :c:func:`krb5_tkt_creds_step()` or synchronously with :c:func:`krb5_tkt_creds_get()` . See also :c:func:`krb5_get_credentials()` for synchronous use.
-
-
-
-Use :c:func:`krb5_tkt_creds_free()` to free *ctx* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_tkt_creds_step - Get the next KDC request in a TGS exchange.
-===================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_tkt_creds_step(krb5_context context, krb5_tkt_creds_context ctx, krb5_data * in, krb5_data * out, krb5_data * realm, unsigned int * flags)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **ctx** - TGS request context
-
- **[in]** **in** - KDC response (empty on the first call)
-
- **[out]** **out** - Next KDC request
-
- **[out]** **realm** - Realm for next KDC request
-
- **[out]** **flags** - Output flags
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function constructs the next KDC request for a TGS exchange, allowing the caller to control the transport of KDC requests and replies. On the first call, *in* should be set to an empty buffer; on subsequent calls, it should be set to the KDC's reply to the previous request.
-
-
-
-If more requests are needed, *flags* will be set to :data:`KRB5_TKT_CREDS_STEP_FLAG_CONTINUE` and the next request will be placed in *out* . If no more requests are needed, *flags* will not contain :data:`KRB5_TKT_CREDS_STEP_FLAG_CONTINUE` and *out* will be empty.
-
-
-
-If this function returns **KRB5KRB_ERR_RESPONSE_TOO_BIG** , the caller should transmit the next request using TCP rather than UDP. If this function returns any other error, the TGS exchange has failed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-.. note::
-
- New in 1.9
-
-
+++ /dev/null
-krb5_unmarshal_credentials - Deserialize a krb5_creds object.
-===============================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_unmarshal_credentials(krb5_context context, const krb5_data * data, krb5_creds ** creds_out)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **data** - The serialized credentials
-
- **[out]** **creds_out** - The resulting creds object
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-Deserialize *data* to credentials in the format used by the FILE ccache format (vesion 4) and KCM ccache protocol.
-
-
-
-Use :c:func:`krb5_free_creds()` to free *creds_out* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_unparse_name - Convert a krb5_principal structure to a string representation.
-====================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_unparse_name(krb5_context context, krb5_const_principal principal, char ** name)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **principal** - Principal
-
- **[out]** **name** - String representation of principal name
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-The resulting string representation uses the format and quoting conventions described for :c:func:`krb5_parse_name()` .
-
-
-
-Use :c:func:`krb5_free_unparsed_name()` to free *name* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_unparse_name_ext - Convert krb5_principal structure to string and length.
-================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_unparse_name_ext(krb5_context context, krb5_const_principal principal, char ** name, unsigned int * size)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **principal** - Principal
-
- **[inout]** **name** - String representation of principal name
-
- **[inout]** **size** - Size of unparsed name
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes. On failure name is set to NULL
-
-..
-
-
-
-
-
-
-
-This function is similar to :c:func:`krb5_unparse_name()` , but allows the use of an existing buffer for the result. If size is not NULL, then *name* must point to either NULL or an existing buffer of at least the size pointed to by *size* . The buffer will be allocated or resized if necessary, with the new pointer stored into *name* . Whether or not the buffer is resized, the necessary space for the result, including null terminator, will be stored into *size* .
-
-
-
-If size is NULL, this function behaves exactly as :c:func:`krb5_unparse_name()` .
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags.
-====================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_unparse_name_flags(krb5_context context, krb5_const_principal principal, int flags, char ** name)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **principal** - Principal
-
- **[in]** **flags** - Flags
-
- **[out]** **name** - String representation of principal name
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes. On failure name is set to NULL
-
-..
-
-
-
-
-
-
-
-Similar to :c:func:`krb5_unparse_name()` , this function converts a krb5_principal structure to a string representation.
-
-
-
-The following flags are valid:
-
- - :data:`KRB5_PRINCIPAL_UNPARSE_SHORT` - omit realm if it is the local realm
-
-
- - :data:`KRB5_PRINCIPAL_UNPARSE_NO_REALM` - omit realm
-
-
- - :data:`KRB5_PRINCIPAL_UNPARSE_DISPLAY` - do not quote special characters
-
- Use :c:func:`krb5_free_unparsed_name()` to free *name* when it is no longer needed.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags.
-=============================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_unparse_name_flags_ext(krb5_context context, krb5_const_principal principal, int flags, char ** name, unsigned int * size)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **principal** - Principal
-
- **[in]** **flags** - Flags
-
- **[out]** **name** - Single string format of principal name
-
- **[out]** **size** - Size of unparsed name buffer
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes. On failure name is set to NULL
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch.
-======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_us_timeofday(krb5_context context, krb5_timestamp * seconds, krb5_int32 * microseconds)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[out]** **seconds** - System timeofday, seconds portion
-
- **[out]** **microseconds** - System timeofday, microseconds portion
-
-
-..
-
-
-:retval:
- - 0 Success
-
-
-:return:
- - Kerberos error codes
-
-..
-
-
-
-
-
-
-
-This function retrieves the system time of day with the context specific time offset adjustment.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_use_enctype
-================
-
-..
-
-.. c:function:: krb5_error_code krb5_use_enctype(krb5_context context, krb5_encrypt_block * eblock, krb5_enctype enctype)
-
-..
-
-
-:param:
-
- **context**
-
- **eblock**
-
- **enctype**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED Replaced by krb5_c_* API family.
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data.
-======================================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_verify_authdata_kdc_issued(krb5_context context, const krb5_keyblock * key, const krb5_authdata * ad_kdcissued, krb5_principal * issuer, krb5_authdata *** authdata)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **key** - Session key
-
- **[in]** **ad_kdcissued** - AD-KDCIssued authorization data to be unwrapped
-
- **[out]** **issuer** - Name of issuing principal (or NULL)
-
- **[out]** **authdata** - Unwrapped list of authorization data
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function unwraps an AD-KDCIssued authdatum (see RFC 4120 section 5.2.6.2) and verifies its signature against *key* . The issuer field of the authdatum element is returned in *issuer* , and the unwrapped list of authdata is returned in *authdata* .
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_verify_checksum
-====================
-
-..
-
-.. c:function:: krb5_error_code krb5_verify_checksum(krb5_context context, krb5_cksumtype ctype, const krb5_checksum * cksum, krb5_const_pointer in, size_t in_length, krb5_const_pointer seed, size_t seed_length)
-
-..
-
-
-:param:
-
- **context**
-
- **ctype**
-
- **cksum**
-
- **in**
-
- **in_length**
-
- **seed**
-
- **seed_length**
-
-
-..
-
-
-
-..
-
-
-DEPRECATED See krb5_c_verify_checksum()
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_verify_init_creds - Verify initial credentials against a keytab.
-=======================================================================
-
-..
-
-.. c:function:: krb5_error_code krb5_verify_init_creds(krb5_context context, krb5_creds * creds, krb5_principal server, krb5_keytab keytab, krb5_ccache * ccache, krb5_verify_init_creds_opt * options)
-
-..
-
-
-:param:
-
- **[in]** **context** - Library context
-
- **[in]** **creds** - Initial credentials to be verified
-
- **[in]** **server** - Server principal (or NULL)
-
- **[in]** **keytab** - Key table (NULL to use default keytab)
-
- **[in]** **ccache** - Credential cache for fetched creds (or NULL)
-
- **[in]** **options** - Verification options (NULL for default options)
-
-
-..
-
-
-:retval:
- - 0 Success; otherwise - Kerberos error codes
-
-
-..
-
-
-
-
-
-
-
-This function attempts to verify that *creds* were obtained from a KDC with knowledge of a key in *keytab* , or the default keytab if *keytab* is NULL. If *server* is provided, the highest-kvno key entry for that principal name is used to verify the credentials; otherwise, all unique"host"service principals in the keytab are tried.
-
-
-
-If the specified keytab does not exist, or is empty, or cannot be read, or does not contain an entry for *server* , then credential verification may be skipped unless configuration demands that it succeed. The caller can control this behavior by providing a verification options structure; see :c:func:`krb5_verify_init_creds_opt_init()` and :c:func:`krb5_verify_init_creds_opt_set_ap_req_nofail()` .
-
-
-
-If *ccache* is NULL, any additional credentials fetched during the verification process will be destroyed. If *ccache* points to NULL, a memory ccache will be created for the additional credentials and returned in *ccache* . If *ccache* points to a valid credential cache handle, the additional credentials will be stored in that cache.
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_verify_init_creds_opt_init - Initialize a credential verification options structure.
-===========================================================================================
-
-..
-
-.. c:function:: void krb5_verify_init_creds_opt_init(krb5_verify_init_creds_opt * k5_vic_options)
-
-..
-
-
-:param:
-
- **[in]** **k5_vic_options** - Verification options structure
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required.
-=================================================================================================
-
-..
-
-.. c:function:: void krb5_verify_init_creds_opt_set_ap_req_nofail(krb5_verify_init_creds_opt * k5_vic_options, int ap_req_nofail)
-
-..
-
-
-:param:
-
- **[in]** **k5_vic_options** - Verification options structure
-
- **[in]** **ap_req_nofail** - Whether to require successful verification
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function determines how :c:func:`krb5_verify_init_creds()` behaves if no keytab information is available. If *ap_req_nofail* is **FALSE** , verification will be skipped in this case and :c:func:`krb5_verify_init_creds()` will return successfully. If *ap_req_nofail* is **TRUE** , :c:func:`krb5_verify_init_creds()` will not return successfully unless verification can be performed.
-
-
-
-If this function is not used, the behavior of :c:func:`krb5_verify_init_creds()` is determined through configuration.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list.
-==============================================================================================
-
-..
-
-.. c:function:: void krb5_vprepend_error_message(krb5_context ctx, krb5_error_code code, const char * fmt, va_list args)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **code** - Error code
-
- **[in]** **fmt** - Format string for error message prefix
-
- **[in]** **args** - List of vprintf(3) style arguments
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function is similar to :c:func:`krb5_prepend_error_message()` , but uses a va_list instead of variadic arguments.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_vset_error_message - Set an extended error message for an error code using a va_list.
-============================================================================================
-
-..
-
-.. c:function:: void krb5_vset_error_message(krb5_context ctx, krb5_error_code code, const char * fmt, va_list args)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **code** - Error code
-
- **[in]** **fmt** - Error string for the error code
-
- **[in]** **args** - List of vprintf(3) style arguments
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_vwrap_error_message - Add a prefix to a different error code's message using a va_list.
-==============================================================================================
-
-..
-
-.. c:function:: void krb5_vwrap_error_message(krb5_context ctx, krb5_error_code old_code, krb5_error_code code, const char * fmt, va_list args)
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **old_code** - Previous error code
-
- **[in]** **code** - Error code
-
- **[in]** **fmt** - Format string for error message prefix
-
- **[in]** **args** - List of vprintf(3) style arguments
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-This function is similar to :c:func:`krb5_wrap_error_message()` , but uses a va_list instead of variadic arguments.
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-krb5_wrap_error_message - Add a prefix to a different error code's message.
-=============================================================================
-
-..
-
-.. c:function:: void krb5_wrap_error_message(krb5_context ctx, krb5_error_code old_code, krb5_error_code code, const char * fmt, ... )
-
-..
-
-
-:param:
-
- **[in]** **ctx** - Library context
-
- **[in]** **old_code** - Previous error code
-
- **[in]** **code** - Error code
-
- **[in]** **fmt** - Format string for error message prefix
-
-
-..
-
-
-
-..
-
-
-
-
-
-
-
-Format a message and prepend it to the message for *old_code* . The prefix will be separated from the old message with a colon and space. Set the resulting message as the extended error message for *code* .
-
-
-
-
-
-
-..
-
-
-
-
-
+++ /dev/null
-Complete reference - API and datatypes
-======================================
-
-.. toctree::
- :maxdepth: 1
-
- api/index.rst
- types/index.rst
- macros/index.rst
+++ /dev/null
-.. highlight:: c
-
-.. _ADDRTYPE-ADDRPORT-data:
-
-ADDRTYPE_ADDRPORT
-=================
-
-..
-.. data:: ADDRTYPE_ADDRPORT
-..
-
-
-
-
-======================== ======================
-``ADDRTYPE_ADDRPORT`` ``0x0100``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ADDRTYPE-CHAOS-data:
-
-ADDRTYPE_CHAOS
-==============
-
-..
-.. data:: ADDRTYPE_CHAOS
-..
-
-
-
-
-===================== ======================
-``ADDRTYPE_CHAOS`` ``0x0005``
-===================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ADDRTYPE-DDP-data:
-
-ADDRTYPE_DDP
-============
-
-..
-.. data:: ADDRTYPE_DDP
-..
-
-
-
-
-=================== ======================
-``ADDRTYPE_DDP`` ``0x0010``
-=================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ADDRTYPE-INET-data:
-
-ADDRTYPE_INET
-=============
-
-..
-.. data:: ADDRTYPE_INET
-..
-
-
-
-
-==================== ======================
-``ADDRTYPE_INET`` ``0x0002``
-==================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ADDRTYPE-INET6-data:
-
-ADDRTYPE_INET6
-==============
-
-..
-.. data:: ADDRTYPE_INET6
-..
-
-
-
-
-===================== ======================
-``ADDRTYPE_INET6`` ``0x0018``
-===================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ADDRTYPE-IPPORT-data:
-
-ADDRTYPE_IPPORT
-===============
-
-..
-.. data:: ADDRTYPE_IPPORT
-..
-
-
-
-
-====================== ======================
-``ADDRTYPE_IPPORT`` ``0x0101``
-====================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ADDRTYPE-ISO-data:
-
-ADDRTYPE_ISO
-============
-
-..
-.. data:: ADDRTYPE_ISO
-..
-
-
-
-
-=================== ======================
-``ADDRTYPE_ISO`` ``0x0007``
-=================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ADDRTYPE-IS-LOCAL-data:
-
-ADDRTYPE_IS_LOCAL
-=================
-
-..
-.. data:: ADDRTYPE_IS_LOCAL
-..
-
-
-
-
-================================== ======================
-``ADDRTYPE_IS_LOCAL (addrtype)`` ``(addrtype & 0x8000)``
-================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ADDRTYPE-NETBIOS-data:
-
-ADDRTYPE_NETBIOS
-================
-
-..
-.. data:: ADDRTYPE_NETBIOS
-..
-
-
-
-
-======================= ======================
-``ADDRTYPE_NETBIOS`` ``0x0014``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ADDRTYPE-XNS-data:
-
-ADDRTYPE_XNS
-============
-
-..
-.. data:: ADDRTYPE_XNS
-..
-
-
-
-
-=================== ======================
-``ADDRTYPE_XNS`` ``0x0006``
-=================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _AD-TYPE-EXTERNAL-data:
-
-AD_TYPE_EXTERNAL
-================
-
-..
-.. data:: AD_TYPE_EXTERNAL
-..
-
-
-
-
-======================= ======================
-``AD_TYPE_EXTERNAL`` ``0x4000``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _AD-TYPE-FIELD-TYPE-MASK-data:
-
-AD_TYPE_FIELD_TYPE_MASK
-=======================
-
-..
-.. data:: AD_TYPE_FIELD_TYPE_MASK
-..
-
-
-
-
-============================== ======================
-``AD_TYPE_FIELD_TYPE_MASK`` ``0x1fff``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _AD-TYPE-REGISTERED-data:
-
-AD_TYPE_REGISTERED
-==================
-
-..
-.. data:: AD_TYPE_REGISTERED
-..
-
-
-
-
-========================= ======================
-``AD_TYPE_REGISTERED`` ``0x2000``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _AD-TYPE-RESERVED-data:
-
-AD_TYPE_RESERVED
-================
-
-..
-.. data:: AD_TYPE_RESERVED
-..
-
-
-
-
-======================= ======================
-``AD_TYPE_RESERVED`` ``0x8000``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _AP-OPTS-ETYPE-NEGOTIATION-data:
-
-AP_OPTS_ETYPE_NEGOTIATION
-=========================
-
-..
-.. data:: AP_OPTS_ETYPE_NEGOTIATION
-..
-
-
-
-
-================================ ======================
-``AP_OPTS_ETYPE_NEGOTIATION`` ``0x00000002``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _AP-OPTS-MUTUAL-REQUIRED-data:
-
-AP_OPTS_MUTUAL_REQUIRED
-=======================
-
-..
-.. data:: AP_OPTS_MUTUAL_REQUIRED
-..
-
-Perform a mutual authentication exchange.
-
-
-
-============================== ======================
-``AP_OPTS_MUTUAL_REQUIRED`` ``0x20000000``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _AP-OPTS-RESERVED-data:
-
-AP_OPTS_RESERVED
-================
-
-..
-.. data:: AP_OPTS_RESERVED
-..
-
-
-
-
-======================= ======================
-``AP_OPTS_RESERVED`` ``0x80000000``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _AP-OPTS-USE-SESSION-KEY-data:
-
-AP_OPTS_USE_SESSION_KEY
-=======================
-
-..
-.. data:: AP_OPTS_USE_SESSION_KEY
-..
-
-Use session key.
-
-
-
-============================== ======================
-``AP_OPTS_USE_SESSION_KEY`` ``0x40000000``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _AP-OPTS-USE-SUBKEY-data:
-
-AP_OPTS_USE_SUBKEY
-==================
-
-..
-.. data:: AP_OPTS_USE_SUBKEY
-..
-
-Generate a subsession key from the current session key obtained from the credentials.
-
-
-
-========================= ======================
-``AP_OPTS_USE_SUBKEY`` ``0x00000001``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _AP-OPTS-WIRE-MASK-data:
-
-AP_OPTS_WIRE_MASK
-=================
-
-..
-.. data:: AP_OPTS_WIRE_MASK
-..
-
-
-
-
-======================== ======================
-``AP_OPTS_WIRE_MASK`` ``0xfffffff0``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-CMAC-CAMELLIA128-data:
-
-CKSUMTYPE_CMAC_CAMELLIA128
-==========================
-
-..
-.. data:: CKSUMTYPE_CMAC_CAMELLIA128
-..
-
-RFC 6803.
-
-
-
-================================= ======================
-``CKSUMTYPE_CMAC_CAMELLIA128`` ``0x0011``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-CMAC-CAMELLIA256-data:
-
-CKSUMTYPE_CMAC_CAMELLIA256
-==========================
-
-..
-.. data:: CKSUMTYPE_CMAC_CAMELLIA256
-..
-
-RFC 6803.
-
-
-
-================================= ======================
-``CKSUMTYPE_CMAC_CAMELLIA256`` ``0x0012``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-CRC32-data:
-
-CKSUMTYPE_CRC32
-===============
-
-..
-.. data:: CKSUMTYPE_CRC32
-..
-
-
-
-
-====================== ======================
-``CKSUMTYPE_CRC32`` ``0x0001``
-====================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-DESCBC-data:
-
-CKSUMTYPE_DESCBC
-================
-
-..
-.. data:: CKSUMTYPE_DESCBC
-..
-
-
-
-
-======================= ======================
-``CKSUMTYPE_DESCBC`` ``0x0004``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-HMAC-MD5-ARCFOUR-data:
-
-CKSUMTYPE_HMAC_MD5_ARCFOUR
-==========================
-
-..
-.. data:: CKSUMTYPE_HMAC_MD5_ARCFOUR
-..
-
-RFC 4757.
-
-
-
-================================= ======================
-``CKSUMTYPE_HMAC_MD5_ARCFOUR`` ``-138``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-HMAC-SHA1-96-AES128-data:
-
-CKSUMTYPE_HMAC_SHA1_96_AES128
-=============================
-
-..
-.. data:: CKSUMTYPE_HMAC_SHA1_96_AES128
-..
-
-RFC 3962.
-
-Used with ENCTYPE_AES128_CTS_HMAC_SHA1_96
-
-==================================== ======================
-``CKSUMTYPE_HMAC_SHA1_96_AES128`` ``0x000f``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-HMAC-SHA1-96-AES256-data:
-
-CKSUMTYPE_HMAC_SHA1_96_AES256
-=============================
-
-..
-.. data:: CKSUMTYPE_HMAC_SHA1_96_AES256
-..
-
-RFC 3962.
-
-Used with ENCTYPE_AES256_CTS_HMAC_SHA1_96
-
-==================================== ======================
-``CKSUMTYPE_HMAC_SHA1_96_AES256`` ``0x0010``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-HMAC-SHA1-DES3-data:
-
-CKSUMTYPE_HMAC_SHA1_DES3
-========================
-
-..
-.. data:: CKSUMTYPE_HMAC_SHA1_DES3
-..
-
-
-
-
-=============================== ======================
-``CKSUMTYPE_HMAC_SHA1_DES3`` ``0x000c``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-HMAC-SHA256-128-AES128-data:
-
-CKSUMTYPE_HMAC_SHA256_128_AES128
-================================
-
-..
-.. data:: CKSUMTYPE_HMAC_SHA256_128_AES128
-..
-
-RFC 8009.
-
-
-
-======================================= ======================
-``CKSUMTYPE_HMAC_SHA256_128_AES128`` ``0x0013``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-HMAC-SHA384-192-AES256-data:
-
-CKSUMTYPE_HMAC_SHA384_192_AES256
-================================
-
-..
-.. data:: CKSUMTYPE_HMAC_SHA384_192_AES256
-..
-
-RFC 8009.
-
-
-
-======================================= ======================
-``CKSUMTYPE_HMAC_SHA384_192_AES256`` ``0x0014``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-MD5-HMAC-ARCFOUR-data:
-
-CKSUMTYPE_MD5_HMAC_ARCFOUR
-==========================
-
-..
-.. data:: CKSUMTYPE_MD5_HMAC_ARCFOUR
-..
-
-
-
-
-================================= ======================
-``CKSUMTYPE_MD5_HMAC_ARCFOUR`` ``-137 /* Microsoft netlogon */``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-NIST-SHA-data:
-
-CKSUMTYPE_NIST_SHA
-==================
-
-..
-.. data:: CKSUMTYPE_NIST_SHA
-..
-
-
-
-
-========================= ======================
-``CKSUMTYPE_NIST_SHA`` ``0x0009``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-RSA-MD4-data:
-
-CKSUMTYPE_RSA_MD4
-=================
-
-..
-.. data:: CKSUMTYPE_RSA_MD4
-..
-
-
-
-
-======================== ======================
-``CKSUMTYPE_RSA_MD4`` ``0x0002``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-RSA-MD4-DES-data:
-
-CKSUMTYPE_RSA_MD4_DES
-=====================
-
-..
-.. data:: CKSUMTYPE_RSA_MD4_DES
-..
-
-
-
-
-============================ ======================
-``CKSUMTYPE_RSA_MD4_DES`` ``0x0003``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-RSA-MD5-data:
-
-CKSUMTYPE_RSA_MD5
-=================
-
-..
-.. data:: CKSUMTYPE_RSA_MD5
-..
-
-
-
-
-======================== ======================
-``CKSUMTYPE_RSA_MD5`` ``0x0007``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-RSA-MD5-DES-data:
-
-CKSUMTYPE_RSA_MD5_DES
-=====================
-
-..
-.. data:: CKSUMTYPE_RSA_MD5_DES
-..
-
-
-
-
-============================ ======================
-``CKSUMTYPE_RSA_MD5_DES`` ``0x0008``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _CKSUMTYPE-SHA1-data:
-
-CKSUMTYPE_SHA1
-==============
-
-..
-.. data:: CKSUMTYPE_SHA1
-..
-
-RFC 3961.
-
-
-
-===================== ======================
-``CKSUMTYPE_SHA1`` ``0x000e``
-===================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-AES128-CTS-HMAC-SHA1-96-data:
-
-ENCTYPE_AES128_CTS_HMAC_SHA1_96
-===============================
-
-..
-.. data:: ENCTYPE_AES128_CTS_HMAC_SHA1_96
-..
-
-RFC 3962.
-
-
-
-====================================== ======================
-``ENCTYPE_AES128_CTS_HMAC_SHA1_96`` ``0x0011``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-AES128-CTS-HMAC-SHA256-128-data:
-
-ENCTYPE_AES128_CTS_HMAC_SHA256_128
-==================================
-
-..
-.. data:: ENCTYPE_AES128_CTS_HMAC_SHA256_128
-..
-
-RFC 8009.
-
-
-
-========================================= ======================
-``ENCTYPE_AES128_CTS_HMAC_SHA256_128`` ``0x0013``
-========================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-AES256-CTS-HMAC-SHA1-96-data:
-
-ENCTYPE_AES256_CTS_HMAC_SHA1_96
-===============================
-
-..
-.. data:: ENCTYPE_AES256_CTS_HMAC_SHA1_96
-..
-
-RFC 3962.
-
-
-
-====================================== ======================
-``ENCTYPE_AES256_CTS_HMAC_SHA1_96`` ``0x0012``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-AES256-CTS-HMAC-SHA384-192-data:
-
-ENCTYPE_AES256_CTS_HMAC_SHA384_192
-==================================
-
-..
-.. data:: ENCTYPE_AES256_CTS_HMAC_SHA384_192
-..
-
-RFC 8009.
-
-
-
-========================================= ======================
-``ENCTYPE_AES256_CTS_HMAC_SHA384_192`` ``0x0014``
-========================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-ARCFOUR-HMAC-data:
-
-ENCTYPE_ARCFOUR_HMAC
-====================
-
-..
-.. data:: ENCTYPE_ARCFOUR_HMAC
-..
-
-RFC 4757.
-
-
-
-=========================== ======================
-``ENCTYPE_ARCFOUR_HMAC`` ``0x0017``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-ARCFOUR-HMAC-EXP-data:
-
-ENCTYPE_ARCFOUR_HMAC_EXP
-========================
-
-..
-.. data:: ENCTYPE_ARCFOUR_HMAC_EXP
-..
-
-RFC 4757.
-
-
-
-=============================== ======================
-``ENCTYPE_ARCFOUR_HMAC_EXP`` ``0x0018``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-CAMELLIA128-CTS-CMAC-data:
-
-ENCTYPE_CAMELLIA128_CTS_CMAC
-============================
-
-..
-.. data:: ENCTYPE_CAMELLIA128_CTS_CMAC
-..
-
-RFC 6803.
-
-
-
-=================================== ======================
-``ENCTYPE_CAMELLIA128_CTS_CMAC`` ``0x0019``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-CAMELLIA256-CTS-CMAC-data:
-
-ENCTYPE_CAMELLIA256_CTS_CMAC
-============================
-
-..
-.. data:: ENCTYPE_CAMELLIA256_CTS_CMAC
-..
-
-RFC 6803.
-
-
-
-=================================== ======================
-``ENCTYPE_CAMELLIA256_CTS_CMAC`` ``0x001a``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-DES3-CBC-ENV-data:
-
-ENCTYPE_DES3_CBC_ENV
-====================
-
-..
-.. data:: ENCTYPE_DES3_CBC_ENV
-..
-
-DES-3 cbc mode, CMS enveloped data.
-
-
-
-=========================== ======================
-``ENCTYPE_DES3_CBC_ENV`` ``0x000f``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-DES3-CBC-RAW-data:
-
-ENCTYPE_DES3_CBC_RAW
-====================
-
-..
-.. data:: ENCTYPE_DES3_CBC_RAW
-..
-
-
-
-
-=========================== ======================
-``ENCTYPE_DES3_CBC_RAW`` ``0x0006``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-DES3-CBC-SHA-data:
-
-ENCTYPE_DES3_CBC_SHA
-====================
-
-..
-.. data:: ENCTYPE_DES3_CBC_SHA
-..
-
-
-
-
-=========================== ======================
-``ENCTYPE_DES3_CBC_SHA`` ``0x0005``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-DES3-CBC-SHA1-data:
-
-ENCTYPE_DES3_CBC_SHA1
-=====================
-
-..
-.. data:: ENCTYPE_DES3_CBC_SHA1
-..
-
-
-
-
-============================ ======================
-``ENCTYPE_DES3_CBC_SHA1`` ``0x0010``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-DES-CBC-CRC-data:
-
-ENCTYPE_DES_CBC_CRC
-===================
-
-..
-.. data:: ENCTYPE_DES_CBC_CRC
-..
-
-
-
-
-========================== ======================
-``ENCTYPE_DES_CBC_CRC`` ``0x0001``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-DES-CBC-MD4-data:
-
-ENCTYPE_DES_CBC_MD4
-===================
-
-..
-.. data:: ENCTYPE_DES_CBC_MD4
-..
-
-
-
-
-========================== ======================
-``ENCTYPE_DES_CBC_MD4`` ``0x0002``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-DES-CBC-MD5-data:
-
-ENCTYPE_DES_CBC_MD5
-===================
-
-..
-.. data:: ENCTYPE_DES_CBC_MD5
-..
-
-
-
-
-========================== ======================
-``ENCTYPE_DES_CBC_MD5`` ``0x0003``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-DES-CBC-RAW-data:
-
-ENCTYPE_DES_CBC_RAW
-===================
-
-..
-.. data:: ENCTYPE_DES_CBC_RAW
-..
-
-
-
-
-========================== ======================
-``ENCTYPE_DES_CBC_RAW`` ``0x0004``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-DES-HMAC-SHA1-data:
-
-ENCTYPE_DES_HMAC_SHA1
-=====================
-
-..
-.. data:: ENCTYPE_DES_HMAC_SHA1
-..
-
-
-
-
-============================ ======================
-``ENCTYPE_DES_HMAC_SHA1`` ``0x0008``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-DSA-SHA1-CMS-data:
-
-ENCTYPE_DSA_SHA1_CMS
-====================
-
-..
-.. data:: ENCTYPE_DSA_SHA1_CMS
-..
-
-DSA with SHA1, CMS signature.
-
-
-
-=========================== ======================
-``ENCTYPE_DSA_SHA1_CMS`` ``0x0009``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-MD5-RSA-CMS-data:
-
-ENCTYPE_MD5_RSA_CMS
-===================
-
-..
-.. data:: ENCTYPE_MD5_RSA_CMS
-..
-
-MD5 with RSA, CMS signature.
-
-
-
-========================== ======================
-``ENCTYPE_MD5_RSA_CMS`` ``0x000a``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-NULL-data:
-
-ENCTYPE_NULL
-============
-
-..
-.. data:: ENCTYPE_NULL
-..
-
-
-
-
-=================== ======================
-``ENCTYPE_NULL`` ``0x0000``
-=================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-RC2-CBC-ENV-data:
-
-ENCTYPE_RC2_CBC_ENV
-===================
-
-..
-.. data:: ENCTYPE_RC2_CBC_ENV
-..
-
-RC2 cbc mode, CMS enveloped data.
-
-
-
-========================== ======================
-``ENCTYPE_RC2_CBC_ENV`` ``0x000c``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-RSA-ENV-data:
-
-ENCTYPE_RSA_ENV
-===============
-
-..
-.. data:: ENCTYPE_RSA_ENV
-..
-
-RSA encryption, CMS enveloped data.
-
-
-
-====================== ======================
-``ENCTYPE_RSA_ENV`` ``0x000d``
-====================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-RSA-ES-OAEP-ENV-data:
-
-ENCTYPE_RSA_ES_OAEP_ENV
-=======================
-
-..
-.. data:: ENCTYPE_RSA_ES_OAEP_ENV
-..
-
-RSA w/OEAP encryption, CMS enveloped data.
-
-
-
-============================== ======================
-``ENCTYPE_RSA_ES_OAEP_ENV`` ``0x000e``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-SHA1-RSA-CMS-data:
-
-ENCTYPE_SHA1_RSA_CMS
-====================
-
-..
-.. data:: ENCTYPE_SHA1_RSA_CMS
-..
-
-SHA1 with RSA, CMS signature.
-
-
-
-=========================== ======================
-``ENCTYPE_SHA1_RSA_CMS`` ``0x000b``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _ENCTYPE-UNKNOWN-data:
-
-ENCTYPE_UNKNOWN
-===============
-
-..
-.. data:: ENCTYPE_UNKNOWN
-..
-
-
-
-
-====================== ======================
-``ENCTYPE_UNKNOWN`` ``0x01ff``
-====================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-ALLOW-POSTDATE-data:
-
-KDC_OPT_ALLOW_POSTDATE
-======================
-
-..
-.. data:: KDC_OPT_ALLOW_POSTDATE
-..
-
-
-
-
-============================= ======================
-``KDC_OPT_ALLOW_POSTDATE`` ``0x04000000``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-CANONICALIZE-data:
-
-KDC_OPT_CANONICALIZE
-====================
-
-..
-.. data:: KDC_OPT_CANONICALIZE
-..
-
-
-
-
-=========================== ======================
-``KDC_OPT_CANONICALIZE`` ``0x00010000``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-CNAME-IN-ADDL-TKT-data:
-
-KDC_OPT_CNAME_IN_ADDL_TKT
-=========================
-
-..
-.. data:: KDC_OPT_CNAME_IN_ADDL_TKT
-..
-
-
-
-
-================================ ======================
-``KDC_OPT_CNAME_IN_ADDL_TKT`` ``0x00020000``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-DISABLE-TRANSITED-CHECK-data:
-
-KDC_OPT_DISABLE_TRANSITED_CHECK
-===============================
-
-..
-.. data:: KDC_OPT_DISABLE_TRANSITED_CHECK
-..
-
-
-
-
-====================================== ======================
-``KDC_OPT_DISABLE_TRANSITED_CHECK`` ``0x00000020``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-ENC-TKT-IN-SKEY-data:
-
-KDC_OPT_ENC_TKT_IN_SKEY
-=======================
-
-..
-.. data:: KDC_OPT_ENC_TKT_IN_SKEY
-..
-
-
-
-
-============================== ======================
-``KDC_OPT_ENC_TKT_IN_SKEY`` ``0x00000008``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-FORWARDABLE-data:
-
-KDC_OPT_FORWARDABLE
-===================
-
-..
-.. data:: KDC_OPT_FORWARDABLE
-..
-
-
-
-
-========================== ======================
-``KDC_OPT_FORWARDABLE`` ``0x40000000``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-FORWARDED-data:
-
-KDC_OPT_FORWARDED
-=================
-
-..
-.. data:: KDC_OPT_FORWARDED
-..
-
-
-
-
-======================== ======================
-``KDC_OPT_FORWARDED`` ``0x20000000``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-POSTDATED-data:
-
-KDC_OPT_POSTDATED
-=================
-
-..
-.. data:: KDC_OPT_POSTDATED
-..
-
-
-
-
-======================== ======================
-``KDC_OPT_POSTDATED`` ``0x02000000``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-PROXIABLE-data:
-
-KDC_OPT_PROXIABLE
-=================
-
-..
-.. data:: KDC_OPT_PROXIABLE
-..
-
-
-
-
-======================== ======================
-``KDC_OPT_PROXIABLE`` ``0x10000000``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-PROXY-data:
-
-KDC_OPT_PROXY
-=============
-
-..
-.. data:: KDC_OPT_PROXY
-..
-
-
-
-
-==================== ======================
-``KDC_OPT_PROXY`` ``0x08000000``
-==================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-RENEW-data:
-
-KDC_OPT_RENEW
-=============
-
-..
-.. data:: KDC_OPT_RENEW
-..
-
-
-
-
-==================== ======================
-``KDC_OPT_RENEW`` ``0x00000002``
-==================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-RENEWABLE-data:
-
-KDC_OPT_RENEWABLE
-=================
-
-..
-.. data:: KDC_OPT_RENEWABLE
-..
-
-
-
-
-======================== ======================
-``KDC_OPT_RENEWABLE`` ``0x00800000``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-RENEWABLE-OK-data:
-
-KDC_OPT_RENEWABLE_OK
-====================
-
-..
-.. data:: KDC_OPT_RENEWABLE_OK
-..
-
-
-
-
-=========================== ======================
-``KDC_OPT_RENEWABLE_OK`` ``0x00000010``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-REQUEST-ANONYMOUS-data:
-
-KDC_OPT_REQUEST_ANONYMOUS
-=========================
-
-..
-.. data:: KDC_OPT_REQUEST_ANONYMOUS
-..
-
-
-
-
-================================ ======================
-``KDC_OPT_REQUEST_ANONYMOUS`` ``0x00008000``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-OPT-VALIDATE-data:
-
-KDC_OPT_VALIDATE
-================
-
-..
-.. data:: KDC_OPT_VALIDATE
-..
-
-
-
-
-======================= ======================
-``KDC_OPT_VALIDATE`` ``0x00000001``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KDC-TKT-COMMON-MASK-data:
-
-KDC_TKT_COMMON_MASK
-===================
-
-..
-.. data:: KDC_TKT_COMMON_MASK
-..
-
-
-
-
-========================== ======================
-``KDC_TKT_COMMON_MASK`` ``0x54800000``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-ALTAUTH-ATT-CHALLENGE-RESPONSE-data:
-
-KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE
-===================================
-
-..
-.. data:: KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE
-..
-
-alternate authentication types
-
-
-
-========================================== ======================
-``KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE`` ``64``
-========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-ANONYMOUS-PRINCSTR-data:
-
-KRB5_ANONYMOUS_PRINCSTR
-=======================
-
-..
-.. data:: KRB5_ANONYMOUS_PRINCSTR
-..
-
-Anonymous principal name.
-
-
-
-============================== ======================
-``KRB5_ANONYMOUS_PRINCSTR`` ``"ANONYMOUS"``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-ANONYMOUS-REALMSTR-data:
-
-KRB5_ANONYMOUS_REALMSTR
-=======================
-
-..
-.. data:: KRB5_ANONYMOUS_REALMSTR
-..
-
-Anonymous realm.
-
-
-
-============================== ======================
-``KRB5_ANONYMOUS_REALMSTR`` ``"WELLKNOWN:ANONYMOUS"``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AP-REP-data:
-
-KRB5_AP_REP
-===========
-
-..
-.. data:: KRB5_AP_REP
-..
-
-Response to mutual AP request.
-
-
-
-================== ======================
-``KRB5_AP_REP`` ``((krb5_msgtype)15)``
-================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AP-REQ-data:
-
-KRB5_AP_REQ
-===========
-
-..
-.. data:: KRB5_AP_REQ
-..
-
-Auth req to application server.
-
-
-
-================== ======================
-``KRB5_AP_REQ`` ``((krb5_msgtype)14)``
-================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AS-REP-data:
-
-KRB5_AS_REP
-===========
-
-..
-.. data:: KRB5_AS_REP
-..
-
-Response to AS request.
-
-
-
-================== ======================
-``KRB5_AS_REP`` ``((krb5_msgtype)11)``
-================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AS-REQ-data:
-
-KRB5_AS_REQ
-===========
-
-..
-.. data:: KRB5_AS_REQ
-..
-
-Initial authentication request.
-
-
-
-================== ======================
-``KRB5_AS_REQ`` ``((krb5_msgtype)10)``
-================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-AND-OR-data:
-
-KRB5_AUTHDATA_AND_OR
-====================
-
-..
-.. data:: KRB5_AUTHDATA_AND_OR
-..
-
-
-
-
-=========================== ======================
-``KRB5_AUTHDATA_AND_OR`` ``5``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-AP-OPTIONS-data:
-
-KRB5_AUTHDATA_AP_OPTIONS
-========================
-
-..
-.. data:: KRB5_AUTHDATA_AP_OPTIONS
-..
-
-
-
-
-=============================== ======================
-``KRB5_AUTHDATA_AP_OPTIONS`` ``143``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-AUTH-INDICATOR-data:
-
-KRB5_AUTHDATA_AUTH_INDICATOR
-============================
-
-..
-.. data:: KRB5_AUTHDATA_AUTH_INDICATOR
-..
-
-
-
-
-=================================== ======================
-``KRB5_AUTHDATA_AUTH_INDICATOR`` ``97``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-CAMMAC-data:
-
-KRB5_AUTHDATA_CAMMAC
-====================
-
-..
-.. data:: KRB5_AUTHDATA_CAMMAC
-..
-
-
-
-
-=========================== ======================
-``KRB5_AUTHDATA_CAMMAC`` ``96``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-ETYPE-NEGOTIATION-data:
-
-KRB5_AUTHDATA_ETYPE_NEGOTIATION
-===============================
-
-..
-.. data:: KRB5_AUTHDATA_ETYPE_NEGOTIATION
-..
-
-RFC 4537.
-
-
-
-====================================== ======================
-``KRB5_AUTHDATA_ETYPE_NEGOTIATION`` ``129``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-FX-ARMOR-data:
-
-KRB5_AUTHDATA_FX_ARMOR
-======================
-
-..
-.. data:: KRB5_AUTHDATA_FX_ARMOR
-..
-
-
-
-
-============================= ======================
-``KRB5_AUTHDATA_FX_ARMOR`` ``71``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-IF-RELEVANT-data:
-
-KRB5_AUTHDATA_IF_RELEVANT
-=========================
-
-..
-.. data:: KRB5_AUTHDATA_IF_RELEVANT
-..
-
-
-
-
-================================ ======================
-``KRB5_AUTHDATA_IF_RELEVANT`` ``1``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-INITIAL-VERIFIED-CAS-data:
-
-KRB5_AUTHDATA_INITIAL_VERIFIED_CAS
-==================================
-
-..
-.. data:: KRB5_AUTHDATA_INITIAL_VERIFIED_CAS
-..
-
-
-
-
-========================================= ======================
-``KRB5_AUTHDATA_INITIAL_VERIFIED_CAS`` ``9``
-========================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-KDC-ISSUED-data:
-
-KRB5_AUTHDATA_KDC_ISSUED
-========================
-
-..
-.. data:: KRB5_AUTHDATA_KDC_ISSUED
-..
-
-
-
-
-=============================== ======================
-``KRB5_AUTHDATA_KDC_ISSUED`` ``4``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-MANDATORY-FOR-KDC-data:
-
-KRB5_AUTHDATA_MANDATORY_FOR_KDC
-===============================
-
-..
-.. data:: KRB5_AUTHDATA_MANDATORY_FOR_KDC
-..
-
-
-
-
-====================================== ======================
-``KRB5_AUTHDATA_MANDATORY_FOR_KDC`` ``8``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-OSF-DCE-data:
-
-KRB5_AUTHDATA_OSF_DCE
-=====================
-
-..
-.. data:: KRB5_AUTHDATA_OSF_DCE
-..
-
-
-
-
-============================ ======================
-``KRB5_AUTHDATA_OSF_DCE`` ``64``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-SESAME-data:
-
-KRB5_AUTHDATA_SESAME
-====================
-
-..
-.. data:: KRB5_AUTHDATA_SESAME
-..
-
-
-
-
-=========================== ======================
-``KRB5_AUTHDATA_SESAME`` ``65``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-SIGNTICKET-data:
-
-KRB5_AUTHDATA_SIGNTICKET
-========================
-
-..
-.. data:: KRB5_AUTHDATA_SIGNTICKET
-..
-
-
-
-
-=============================== ======================
-``KRB5_AUTHDATA_SIGNTICKET`` ``512``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTHDATA-WIN2K-PAC-data:
-
-KRB5_AUTHDATA_WIN2K_PAC
-=======================
-
-..
-.. data:: KRB5_AUTHDATA_WIN2K_PAC
-..
-
-
-
-
-============================== ======================
-``KRB5_AUTHDATA_WIN2K_PAC`` ``128``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTH-CONTEXT-DO-SEQUENCE-data:
-
-KRB5_AUTH_CONTEXT_DO_SEQUENCE
-=============================
-
-..
-.. data:: KRB5_AUTH_CONTEXT_DO_SEQUENCE
-..
-
-Prevent replays with sequence numbers.
-
-
-
-==================================== ======================
-``KRB5_AUTH_CONTEXT_DO_SEQUENCE`` ``0x00000004``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTH-CONTEXT-DO-TIME-data:
-
-KRB5_AUTH_CONTEXT_DO_TIME
-=========================
-
-..
-.. data:: KRB5_AUTH_CONTEXT_DO_TIME
-..
-
-Prevent replays with timestamps and replay cache.
-
-
-
-================================ ======================
-``KRB5_AUTH_CONTEXT_DO_TIME`` ``0x00000001``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTH-CONTEXT-GENERATE-LOCAL-ADDR-data:
-
-KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR
-=====================================
-
-..
-.. data:: KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR
-..
-
-Generate the local network address.
-
-
-
-============================================ ======================
-``KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR`` ``0x00000001``
-============================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTH-CONTEXT-GENERATE-LOCAL-FULL-ADDR-data:
-
-KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR
-==========================================
-
-..
-.. data:: KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR
-..
-
-Generate the local network address and the local port.
-
-
-
-================================================= ======================
-``KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR`` ``0x00000004``
-================================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTH-CONTEXT-GENERATE-REMOTE-ADDR-data:
-
-KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR
-======================================
-
-..
-.. data:: KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR
-..
-
-Generate the remote network address.
-
-
-
-============================================= ======================
-``KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR`` ``0x00000002``
-============================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTH-CONTEXT-GENERATE-REMOTE-FULL-ADDR-data:
-
-KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR
-===========================================
-
-..
-.. data:: KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR
-..
-
-Generate the remote network address and the remote port.
-
-
-
-================================================== ======================
-``KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR`` ``0x00000008``
-================================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTH-CONTEXT-PERMIT-ALL-data:
-
-KRB5_AUTH_CONTEXT_PERMIT_ALL
-============================
-
-..
-.. data:: KRB5_AUTH_CONTEXT_PERMIT_ALL
-..
-
-
-
-
-=================================== ======================
-``KRB5_AUTH_CONTEXT_PERMIT_ALL`` ``0x00000010``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTH-CONTEXT-RET-SEQUENCE-data:
-
-KRB5_AUTH_CONTEXT_RET_SEQUENCE
-==============================
-
-..
-.. data:: KRB5_AUTH_CONTEXT_RET_SEQUENCE
-..
-
-Save sequence numbers for application.
-
-
-
-===================================== ======================
-``KRB5_AUTH_CONTEXT_RET_SEQUENCE`` ``0x00000008``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTH-CONTEXT-RET-TIME-data:
-
-KRB5_AUTH_CONTEXT_RET_TIME
-==========================
-
-..
-.. data:: KRB5_AUTH_CONTEXT_RET_TIME
-..
-
-Save timestamps for application.
-
-
-
-================================= ======================
-``KRB5_AUTH_CONTEXT_RET_TIME`` ``0x00000002``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-AUTH-CONTEXT-USE-SUBKEY-data:
-
-KRB5_AUTH_CONTEXT_USE_SUBKEY
-============================
-
-..
-.. data:: KRB5_AUTH_CONTEXT_USE_SUBKEY
-..
-
-
-
-
-=================================== ======================
-``KRB5_AUTH_CONTEXT_USE_SUBKEY`` ``0x00000020``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-CRED-data:
-
-KRB5_CRED
-=========
-
-..
-.. data:: KRB5_CRED
-..
-
-Cred forwarding message.
-
-
-
-================ ======================
-``KRB5_CRED`` ``((krb5_msgtype)22)``
-================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-CRYPTO-TYPE-CHECKSUM-data:
-
-KRB5_CRYPTO_TYPE_CHECKSUM
-=========================
-
-..
-.. data:: KRB5_CRYPTO_TYPE_CHECKSUM
-..
-
-[out] checksum for MIC
-
-
-
-================================ ======================
-``KRB5_CRYPTO_TYPE_CHECKSUM`` ``6``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-CRYPTO-TYPE-DATA-data:
-
-KRB5_CRYPTO_TYPE_DATA
-=====================
-
-..
-.. data:: KRB5_CRYPTO_TYPE_DATA
-..
-
-[in, out] plaintext
-
-
-
-============================ ======================
-``KRB5_CRYPTO_TYPE_DATA`` ``2``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-CRYPTO-TYPE-EMPTY-data:
-
-KRB5_CRYPTO_TYPE_EMPTY
-======================
-
-..
-.. data:: KRB5_CRYPTO_TYPE_EMPTY
-..
-
-[in] ignored
-
-
-
-============================= ======================
-``KRB5_CRYPTO_TYPE_EMPTY`` ``0``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-CRYPTO-TYPE-HEADER-data:
-
-KRB5_CRYPTO_TYPE_HEADER
-=======================
-
-..
-.. data:: KRB5_CRYPTO_TYPE_HEADER
-..
-
-[out] header
-
-
-
-============================== ======================
-``KRB5_CRYPTO_TYPE_HEADER`` ``1``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-CRYPTO-TYPE-PADDING-data:
-
-KRB5_CRYPTO_TYPE_PADDING
-========================
-
-..
-.. data:: KRB5_CRYPTO_TYPE_PADDING
-..
-
-[out] padding
-
-
-
-=============================== ======================
-``KRB5_CRYPTO_TYPE_PADDING`` ``4``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-CRYPTO-TYPE-SIGN-ONLY-data:
-
-KRB5_CRYPTO_TYPE_SIGN_ONLY
-==========================
-
-..
-.. data:: KRB5_CRYPTO_TYPE_SIGN_ONLY
-..
-
-[in] associated data
-
-
-
-================================= ======================
-``KRB5_CRYPTO_TYPE_SIGN_ONLY`` ``3``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-CRYPTO-TYPE-STREAM-data:
-
-KRB5_CRYPTO_TYPE_STREAM
-=======================
-
-..
-.. data:: KRB5_CRYPTO_TYPE_STREAM
-..
-
-[in] entire message without decomposing the structure into header, data and trailer buffers
-
-
-
-============================== ======================
-``KRB5_CRYPTO_TYPE_STREAM`` ``7``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-CRYPTO-TYPE-TRAILER-data:
-
-KRB5_CRYPTO_TYPE_TRAILER
-========================
-
-..
-.. data:: KRB5_CRYPTO_TYPE_TRAILER
-..
-
-[out] checksum for encrypt
-
-
-
-=============================== ======================
-``KRB5_CRYPTO_TYPE_TRAILER`` ``5``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-CYBERSAFE-SECUREID-data:
-
-KRB5_CYBERSAFE_SECUREID
-=======================
-
-..
-.. data:: KRB5_CYBERSAFE_SECUREID
-..
-
-Cybersafe.
-
-RFC 4120
-
-============================== ======================
-``KRB5_CYBERSAFE_SECUREID`` ``9``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-DOMAIN-X500-COMPRESS-data:
-
-KRB5_DOMAIN_X500_COMPRESS
-=========================
-
-..
-.. data:: KRB5_DOMAIN_X500_COMPRESS
-..
-
-Transited encoding types.
-
-
-
-================================ ======================
-``KRB5_DOMAIN_X500_COMPRESS`` ``1``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-ENCPADATA-REQ-ENC-PA-REP-data:
-
-KRB5_ENCPADATA_REQ_ENC_PA_REP
-=============================
-
-..
-.. data:: KRB5_ENCPADATA_REQ_ENC_PA_REP
-..
-
-RFC 6806.
-
-
-
-==================================== ======================
-``KRB5_ENCPADATA_REQ_ENC_PA_REP`` ``149``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-ERROR-data:
-
-KRB5_ERROR
-==========
-
-..
-.. data:: KRB5_ERROR
-..
-
-Error response.
-
-
-
-================= ======================
-``KRB5_ERROR`` ``((krb5_msgtype)30)``
-================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-FAST-REQUIRED-data:
-
-KRB5_FAST_REQUIRED
-==================
-
-..
-.. data:: KRB5_FAST_REQUIRED
-..
-
-Require KDC to support FAST.
-
-
-
-========================= ======================
-``KRB5_FAST_REQUIRED`` ``0x0001``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GC-CACHED-data:
-
-KRB5_GC_CACHED
-==============
-
-..
-.. data:: KRB5_GC_CACHED
-..
-
-Want cached ticket only.
-
-
-
-===================== ======================
-``KRB5_GC_CACHED`` ``2``
-===================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GC-CANONICALIZE-data:
-
-KRB5_GC_CANONICALIZE
-====================
-
-..
-.. data:: KRB5_GC_CANONICALIZE
-..
-
-Set canonicalize KDC option.
-
-
-
-=========================== ======================
-``KRB5_GC_CANONICALIZE`` ``4``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GC-CONSTRAINED-DELEGATION-data:
-
-KRB5_GC_CONSTRAINED_DELEGATION
-==============================
-
-..
-.. data:: KRB5_GC_CONSTRAINED_DELEGATION
-..
-
-Constrained delegation.
-
-
-
-===================================== ======================
-``KRB5_GC_CONSTRAINED_DELEGATION`` ``64``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GC-FORWARDABLE-data:
-
-KRB5_GC_FORWARDABLE
-===================
-
-..
-.. data:: KRB5_GC_FORWARDABLE
-..
-
-Acquire forwardable tickets.
-
-
-
-========================== ======================
-``KRB5_GC_FORWARDABLE`` ``16``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GC-NO-STORE-data:
-
-KRB5_GC_NO_STORE
-================
-
-..
-.. data:: KRB5_GC_NO_STORE
-..
-
-Do not store in credential cache.
-
-
-
-======================= ======================
-``KRB5_GC_NO_STORE`` ``8``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GC-NO-TRANSIT-CHECK-data:
-
-KRB5_GC_NO_TRANSIT_CHECK
-========================
-
-..
-.. data:: KRB5_GC_NO_TRANSIT_CHECK
-..
-
-Disable transited check.
-
-
-
-=============================== ======================
-``KRB5_GC_NO_TRANSIT_CHECK`` ``32``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GC-USER-USER-data:
-
-KRB5_GC_USER_USER
-=================
-
-..
-.. data:: KRB5_GC_USER_USER
-..
-
-Want user-user ticket.
-
-
-
-======================== ======================
-``KRB5_GC_USER_USER`` ``1``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-ADDRESS-LIST-data:
-
-KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST
-====================================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST
-..
-
-
-
-
-=========================================== ======================
-``KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST`` ``0x0020``
-=========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-ANONYMOUS-data:
-
-KRB5_GET_INIT_CREDS_OPT_ANONYMOUS
-=================================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_ANONYMOUS
-..
-
-
-
-
-======================================== ======================
-``KRB5_GET_INIT_CREDS_OPT_ANONYMOUS`` ``0x0400``
-======================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-CANONICALIZE-data:
-
-KRB5_GET_INIT_CREDS_OPT_CANONICALIZE
-====================================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_CANONICALIZE
-..
-
-
-
-
-=========================================== ======================
-``KRB5_GET_INIT_CREDS_OPT_CANONICALIZE`` ``0x0200``
-=========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-CHG-PWD-PRMPT-data:
-
-KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT
-=====================================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT
-..
-
-
-
-
-============================================ ======================
-``KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT`` ``0x0100``
-============================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-ETYPE-LIST-data:
-
-KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST
-==================================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST
-..
-
-
-
-
-========================================= ======================
-``KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST`` ``0x0010``
-========================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-FORWARDABLE-data:
-
-KRB5_GET_INIT_CREDS_OPT_FORWARDABLE
-===================================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_FORWARDABLE
-..
-
-
-
-
-========================================== ======================
-``KRB5_GET_INIT_CREDS_OPT_FORWARDABLE`` ``0x0004``
-========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-PREAUTH-LIST-data:
-
-KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST
-====================================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST
-..
-
-
-
-
-=========================================== ======================
-``KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST`` ``0x0040``
-=========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-PROXIABLE-data:
-
-KRB5_GET_INIT_CREDS_OPT_PROXIABLE
-=================================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_PROXIABLE
-..
-
-
-
-
-======================================== ======================
-``KRB5_GET_INIT_CREDS_OPT_PROXIABLE`` ``0x0008``
-======================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-RENEW-LIFE-data:
-
-KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE
-==================================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE
-..
-
-
-
-
-========================================= ======================
-``KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE`` ``0x0002``
-========================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-SALT-data:
-
-KRB5_GET_INIT_CREDS_OPT_SALT
-============================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_SALT
-..
-
-
-
-
-=================================== ======================
-``KRB5_GET_INIT_CREDS_OPT_SALT`` ``0x0080``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-GET-INIT-CREDS-OPT-TKT-LIFE-data:
-
-KRB5_GET_INIT_CREDS_OPT_TKT_LIFE
-================================
-
-..
-.. data:: KRB5_GET_INIT_CREDS_OPT_TKT_LIFE
-..
-
-
-
-
-======================================= ======================
-``KRB5_GET_INIT_CREDS_OPT_TKT_LIFE`` ``0x0001``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-INIT-CONTEXT-KDC-data:
-
-KRB5_INIT_CONTEXT_KDC
-=====================
-
-..
-.. data:: KRB5_INIT_CONTEXT_KDC
-..
-
-Use KDC configuration if available.
-
-
-
-============================ ======================
-``KRB5_INIT_CONTEXT_KDC`` ``0x2``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-INIT-CONTEXT-SECURE-data:
-
-KRB5_INIT_CONTEXT_SECURE
-========================
-
-..
-.. data:: KRB5_INIT_CONTEXT_SECURE
-..
-
-Use secure context configuration.
-
-
-
-=============================== ======================
-``KRB5_INIT_CONTEXT_SECURE`` ``0x1``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-INIT-CREDS-STEP-FLAG-CONTINUE-data:
-
-KRB5_INIT_CREDS_STEP_FLAG_CONTINUE
-==================================
-
-..
-.. data:: KRB5_INIT_CREDS_STEP_FLAG_CONTINUE
-..
-
-More responses needed.
-
-
-
-========================================= ======================
-``KRB5_INIT_CREDS_STEP_FLAG_CONTINUE`` ``0x1``
-========================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-INT16-MAX-data:
-
-KRB5_INT16_MAX
-==============
-
-..
-.. data:: KRB5_INT16_MAX
-..
-
-
-
-
-===================== ======================
-``KRB5_INT16_MAX`` ``65535``
-===================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-INT16-MIN-data:
-
-KRB5_INT16_MIN
-==============
-
-..
-.. data:: KRB5_INT16_MIN
-..
-
-
-
-
-===================== ======================
-``KRB5_INT16_MIN`` ``(-KRB5_INT16_MAX-1)``
-===================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-INT32-MAX-data:
-
-KRB5_INT32_MAX
-==============
-
-..
-.. data:: KRB5_INT32_MAX
-..
-
-
-
-
-===================== ======================
-``KRB5_INT32_MAX`` ``2147483647``
-===================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-INT32-MIN-data:
-
-KRB5_INT32_MIN
-==============
-
-..
-.. data:: KRB5_INT32_MIN
-..
-
-
-
-
-===================== ======================
-``KRB5_INT32_MIN`` ``(-KRB5_INT32_MAX-1)``
-===================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-AD-ITE-data:
-
-KRB5_KEYUSAGE_AD_ITE
-====================
-
-..
-.. data:: KRB5_KEYUSAGE_AD_ITE
-..
-
-
-
-
-=========================== ======================
-``KRB5_KEYUSAGE_AD_ITE`` ``21``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-AD-KDCISSUED-CKSUM-data:
-
-KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM
-================================
-
-..
-.. data:: KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM
-..
-
-
-
-
-======================================= ======================
-``KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM`` ``19``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-AD-MTE-data:
-
-KRB5_KEYUSAGE_AD_MTE
-====================
-
-..
-.. data:: KRB5_KEYUSAGE_AD_MTE
-..
-
-
-
-
-=========================== ======================
-``KRB5_KEYUSAGE_AD_MTE`` ``20``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-AD-SIGNEDPATH-data:
-
-KRB5_KEYUSAGE_AD_SIGNEDPATH
-===========================
-
-..
-.. data:: KRB5_KEYUSAGE_AD_SIGNEDPATH
-..
-
-
-
-
-================================== ======================
-``KRB5_KEYUSAGE_AD_SIGNEDPATH`` ``-21``
-================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-APP-DATA-CKSUM-data:
-
-KRB5_KEYUSAGE_APP_DATA_CKSUM
-============================
-
-..
-.. data:: KRB5_KEYUSAGE_APP_DATA_CKSUM
-..
-
-
-
-
-=================================== ======================
-``KRB5_KEYUSAGE_APP_DATA_CKSUM`` ``17``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-APP-DATA-ENCRYPT-data:
-
-KRB5_KEYUSAGE_APP_DATA_ENCRYPT
-==============================
-
-..
-.. data:: KRB5_KEYUSAGE_APP_DATA_ENCRYPT
-..
-
-
-
-
-===================================== ======================
-``KRB5_KEYUSAGE_APP_DATA_ENCRYPT`` ``16``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-AP-REP-ENCPART-data:
-
-KRB5_KEYUSAGE_AP_REP_ENCPART
-============================
-
-..
-.. data:: KRB5_KEYUSAGE_AP_REP_ENCPART
-..
-
-
-
-
-=================================== ======================
-``KRB5_KEYUSAGE_AP_REP_ENCPART`` ``12``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-AP-REQ-AUTH-data:
-
-KRB5_KEYUSAGE_AP_REQ_AUTH
-=========================
-
-..
-.. data:: KRB5_KEYUSAGE_AP_REQ_AUTH
-..
-
-
-
-
-================================ ======================
-``KRB5_KEYUSAGE_AP_REQ_AUTH`` ``11``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-AP-REQ-AUTH-CKSUM-data:
-
-KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM
-===============================
-
-..
-.. data:: KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM
-..
-
-
-
-
-====================================== ======================
-``KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM`` ``10``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-AS-REP-ENCPART-data:
-
-KRB5_KEYUSAGE_AS_REP_ENCPART
-============================
-
-..
-.. data:: KRB5_KEYUSAGE_AS_REP_ENCPART
-..
-
-
-
-
-=================================== ======================
-``KRB5_KEYUSAGE_AS_REP_ENCPART`` ``3``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-AS-REQ-data:
-
-KRB5_KEYUSAGE_AS_REQ
-====================
-
-..
-.. data:: KRB5_KEYUSAGE_AS_REQ
-..
-
-
-
-
-=========================== ======================
-``KRB5_KEYUSAGE_AS_REQ`` ``56``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-AS-REQ-PA-ENC-TS-data:
-
-KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS
-==============================
-
-..
-.. data:: KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS
-..
-
-
-
-
-===================================== ======================
-``KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS`` ``1``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-CAMMAC-data:
-
-KRB5_KEYUSAGE_CAMMAC
-====================
-
-..
-.. data:: KRB5_KEYUSAGE_CAMMAC
-..
-
-
-
-
-=========================== ======================
-``KRB5_KEYUSAGE_CAMMAC`` ``64``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-ENC-CHALLENGE-CLIENT-data:
-
-KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT
-==================================
-
-..
-.. data:: KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT
-..
-
-
-
-
-========================================= ======================
-``KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT`` ``54``
-========================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-ENC-CHALLENGE-KDC-data:
-
-KRB5_KEYUSAGE_ENC_CHALLENGE_KDC
-===============================
-
-..
-.. data:: KRB5_KEYUSAGE_ENC_CHALLENGE_KDC
-..
-
-
-
-
-====================================== ======================
-``KRB5_KEYUSAGE_ENC_CHALLENGE_KDC`` ``55``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-FAST-ENC-data:
-
-KRB5_KEYUSAGE_FAST_ENC
-======================
-
-..
-.. data:: KRB5_KEYUSAGE_FAST_ENC
-..
-
-
-
-
-============================= ======================
-``KRB5_KEYUSAGE_FAST_ENC`` ``51``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-FAST-FINISHED-data:
-
-KRB5_KEYUSAGE_FAST_FINISHED
-===========================
-
-..
-.. data:: KRB5_KEYUSAGE_FAST_FINISHED
-..
-
-
-
-
-================================== ======================
-``KRB5_KEYUSAGE_FAST_FINISHED`` ``53``
-================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-FAST-REP-data:
-
-KRB5_KEYUSAGE_FAST_REP
-======================
-
-..
-.. data:: KRB5_KEYUSAGE_FAST_REP
-..
-
-
-
-
-============================= ======================
-``KRB5_KEYUSAGE_FAST_REP`` ``52``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-FAST-REQ-CHKSUM-data:
-
-KRB5_KEYUSAGE_FAST_REQ_CHKSUM
-=============================
-
-..
-.. data:: KRB5_KEYUSAGE_FAST_REQ_CHKSUM
-..
-
-
-
-
-==================================== ======================
-``KRB5_KEYUSAGE_FAST_REQ_CHKSUM`` ``50``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-GSS-TOK-MIC-data:
-
-KRB5_KEYUSAGE_GSS_TOK_MIC
-=========================
-
-..
-.. data:: KRB5_KEYUSAGE_GSS_TOK_MIC
-..
-
-
-
-
-================================ ======================
-``KRB5_KEYUSAGE_GSS_TOK_MIC`` ``22``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-GSS-TOK-WRAP-INTEG-data:
-
-KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG
-================================
-
-..
-.. data:: KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG
-..
-
-
-
-
-======================================= ======================
-``KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG`` ``23``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-GSS-TOK-WRAP-PRIV-data:
-
-KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV
-===============================
-
-..
-.. data:: KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV
-..
-
-
-
-
-====================================== ======================
-``KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV`` ``24``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-IAKERB-FINISHED-data:
-
-KRB5_KEYUSAGE_IAKERB_FINISHED
-=============================
-
-..
-.. data:: KRB5_KEYUSAGE_IAKERB_FINISHED
-..
-
-
-
-
-==================================== ======================
-``KRB5_KEYUSAGE_IAKERB_FINISHED`` ``42``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-KDC-REP-TICKET-data:
-
-KRB5_KEYUSAGE_KDC_REP_TICKET
-============================
-
-..
-.. data:: KRB5_KEYUSAGE_KDC_REP_TICKET
-..
-
-
-
-
-=================================== ======================
-``KRB5_KEYUSAGE_KDC_REP_TICKET`` ``2``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-KRB-CRED-ENCPART-data:
-
-KRB5_KEYUSAGE_KRB_CRED_ENCPART
-==============================
-
-..
-.. data:: KRB5_KEYUSAGE_KRB_CRED_ENCPART
-..
-
-
-
-
-===================================== ======================
-``KRB5_KEYUSAGE_KRB_CRED_ENCPART`` ``14``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-KRB-ERROR-CKSUM-data:
-
-KRB5_KEYUSAGE_KRB_ERROR_CKSUM
-=============================
-
-..
-.. data:: KRB5_KEYUSAGE_KRB_ERROR_CKSUM
-..
-
-
-
-
-==================================== ======================
-``KRB5_KEYUSAGE_KRB_ERROR_CKSUM`` ``18``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-KRB-PRIV-ENCPART-data:
-
-KRB5_KEYUSAGE_KRB_PRIV_ENCPART
-==============================
-
-..
-.. data:: KRB5_KEYUSAGE_KRB_PRIV_ENCPART
-..
-
-
-
-
-===================================== ======================
-``KRB5_KEYUSAGE_KRB_PRIV_ENCPART`` ``13``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-KRB-SAFE-CKSUM-data:
-
-KRB5_KEYUSAGE_KRB_SAFE_CKSUM
-============================
-
-..
-.. data:: KRB5_KEYUSAGE_KRB_SAFE_CKSUM
-..
-
-
-
-
-=================================== ======================
-``KRB5_KEYUSAGE_KRB_SAFE_CKSUM`` ``15``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-PA-AS-FRESHNESS-data:
-
-KRB5_KEYUSAGE_PA_AS_FRESHNESS
-=============================
-
-..
-.. data:: KRB5_KEYUSAGE_PA_AS_FRESHNESS
-..
-
-Used for freshness tokens.
-
-
-
-==================================== ======================
-``KRB5_KEYUSAGE_PA_AS_FRESHNESS`` ``514``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-PA-FX-COOKIE-data:
-
-KRB5_KEYUSAGE_PA_FX_COOKIE
-==========================
-
-..
-.. data:: KRB5_KEYUSAGE_PA_FX_COOKIE
-..
-
-Used for encrypted FAST cookies.
-
-
-
-================================= ======================
-``KRB5_KEYUSAGE_PA_FX_COOKIE`` ``513``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-PA-OTP-REQUEST-data:
-
-KRB5_KEYUSAGE_PA_OTP_REQUEST
-============================
-
-..
-.. data:: KRB5_KEYUSAGE_PA_OTP_REQUEST
-..
-
-See RFC 6560 section 4.2.
-
-
-
-=================================== ======================
-``KRB5_KEYUSAGE_PA_OTP_REQUEST`` ``45``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-PA-PKINIT-KX-data:
-
-KRB5_KEYUSAGE_PA_PKINIT_KX
-==========================
-
-..
-.. data:: KRB5_KEYUSAGE_PA_PKINIT_KX
-..
-
-
-
-
-================================= ======================
-``KRB5_KEYUSAGE_PA_PKINIT_KX`` ``44``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-PA-S4U-X509-USER-REPLY-data:
-
-KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY
-====================================
-
-..
-.. data:: KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY
-..
-
-Note conflict with :c:data:`KRB5_KEYUSAGE_PA_SAM_RESPONSE` .
-
-
-
-=========================================== ======================
-``KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY`` ``27``
-=========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-PA-S4U-X509-USER-REQUEST-data:
-
-KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST
-======================================
-
-..
-.. data:: KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST
-..
-
-Note conflict with :c:data:`KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID` .
-
-
-
-============================================= ======================
-``KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST`` ``26``
-============================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-PA-SAM-CHALLENGE-CKSUM-data:
-
-KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM
-====================================
-
-..
-.. data:: KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM
-..
-
-
-
-
-=========================================== ======================
-``KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM`` ``25``
-=========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-PA-SAM-CHALLENGE-TRACKID-data:
-
-KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID
-======================================
-
-..
-.. data:: KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID
-..
-
-Note conflict with :c:data:`KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST` .
-
-
-
-============================================= ======================
-``KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID`` ``26``
-============================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-PA-SAM-RESPONSE-data:
-
-KRB5_KEYUSAGE_PA_SAM_RESPONSE
-=============================
-
-..
-.. data:: KRB5_KEYUSAGE_PA_SAM_RESPONSE
-..
-
-Note conflict with :c:data:`KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY` .
-
-
-
-==================================== ======================
-``KRB5_KEYUSAGE_PA_SAM_RESPONSE`` ``27``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-SPAKE-data:
-
-KRB5_KEYUSAGE_SPAKE
-===================
-
-..
-.. data:: KRB5_KEYUSAGE_SPAKE
-..
-
-
-
-
-========================== ======================
-``KRB5_KEYUSAGE_SPAKE`` ``65``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-TGS-REP-ENCPART-SESSKEY-data:
-
-KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY
-=====================================
-
-..
-.. data:: KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY
-..
-
-
-
-
-============================================ ======================
-``KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY`` ``8``
-============================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-TGS-REP-ENCPART-SUBKEY-data:
-
-KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY
-====================================
-
-..
-.. data:: KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY
-..
-
-
-
-
-=========================================== ======================
-``KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY`` ``9``
-=========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-TGS-REQ-AD-SESSKEY-data:
-
-KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY
-================================
-
-..
-.. data:: KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY
-..
-
-
-
-
-======================================= ======================
-``KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY`` ``4``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-TGS-REQ-AD-SUBKEY-data:
-
-KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY
-===============================
-
-..
-.. data:: KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY
-..
-
-
-
-
-====================================== ======================
-``KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY`` ``5``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-TGS-REQ-AUTH-data:
-
-KRB5_KEYUSAGE_TGS_REQ_AUTH
-==========================
-
-..
-.. data:: KRB5_KEYUSAGE_TGS_REQ_AUTH
-..
-
-
-
-
-================================= ======================
-``KRB5_KEYUSAGE_TGS_REQ_AUTH`` ``7``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KEYUSAGE-TGS-REQ-AUTH-CKSUM-data:
-
-KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM
-================================
-
-..
-.. data:: KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM
-..
-
-
-
-
-======================================= ======================
-``KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM`` ``6``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KPASSWD-ACCESSDENIED-data:
-
-KRB5_KPASSWD_ACCESSDENIED
-=========================
-
-..
-.. data:: KRB5_KPASSWD_ACCESSDENIED
-..
-
-Not authorized.
-
-
-
-================================ ======================
-``KRB5_KPASSWD_ACCESSDENIED`` ``5``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KPASSWD-AUTHERROR-data:
-
-KRB5_KPASSWD_AUTHERROR
-======================
-
-..
-.. data:: KRB5_KPASSWD_AUTHERROR
-..
-
-Authentication error.
-
-
-
-============================= ======================
-``KRB5_KPASSWD_AUTHERROR`` ``3``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KPASSWD-BAD-VERSION-data:
-
-KRB5_KPASSWD_BAD_VERSION
-========================
-
-..
-.. data:: KRB5_KPASSWD_BAD_VERSION
-..
-
-Unknown RPC version.
-
-
-
-=============================== ======================
-``KRB5_KPASSWD_BAD_VERSION`` ``6``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KPASSWD-HARDERROR-data:
-
-KRB5_KPASSWD_HARDERROR
-======================
-
-..
-.. data:: KRB5_KPASSWD_HARDERROR
-..
-
-Server error.
-
-
-
-============================= ======================
-``KRB5_KPASSWD_HARDERROR`` ``2``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KPASSWD-INITIAL-FLAG-NEEDED-data:
-
-KRB5_KPASSWD_INITIAL_FLAG_NEEDED
-================================
-
-..
-.. data:: KRB5_KPASSWD_INITIAL_FLAG_NEEDED
-..
-
-The presented credentials were not obtained using a password directly.
-
-
-
-======================================= ======================
-``KRB5_KPASSWD_INITIAL_FLAG_NEEDED`` ``7``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KPASSWD-MALFORMED-data:
-
-KRB5_KPASSWD_MALFORMED
-======================
-
-..
-.. data:: KRB5_KPASSWD_MALFORMED
-..
-
-Malformed request.
-
-
-
-============================= ======================
-``KRB5_KPASSWD_MALFORMED`` ``1``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KPASSWD-SOFTERROR-data:
-
-KRB5_KPASSWD_SOFTERROR
-======================
-
-..
-.. data:: KRB5_KPASSWD_SOFTERROR
-..
-
-Password change rejected.
-
-
-
-============================= ======================
-``KRB5_KPASSWD_SOFTERROR`` ``4``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-KPASSWD-SUCCESS-data:
-
-KRB5_KPASSWD_SUCCESS
-====================
-
-..
-.. data:: KRB5_KPASSWD_SUCCESS
-..
-
-Success.
-
-
-
-=========================== ======================
-``KRB5_KPASSWD_SUCCESS`` ``0``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ALL-ACCT-EXPTIME-data:
-
-KRB5_LRQ_ALL_ACCT_EXPTIME
-=========================
-
-..
-.. data:: KRB5_LRQ_ALL_ACCT_EXPTIME
-..
-
-
-
-
-================================ ======================
-``KRB5_LRQ_ALL_ACCT_EXPTIME`` ``7``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ALL-LAST-INITIAL-data:
-
-KRB5_LRQ_ALL_LAST_INITIAL
-=========================
-
-..
-.. data:: KRB5_LRQ_ALL_LAST_INITIAL
-..
-
-
-
-
-================================ ======================
-``KRB5_LRQ_ALL_LAST_INITIAL`` ``2``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ALL-LAST-RENEWAL-data:
-
-KRB5_LRQ_ALL_LAST_RENEWAL
-=========================
-
-..
-.. data:: KRB5_LRQ_ALL_LAST_RENEWAL
-..
-
-
-
-
-================================ ======================
-``KRB5_LRQ_ALL_LAST_RENEWAL`` ``4``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ALL-LAST-REQ-data:
-
-KRB5_LRQ_ALL_LAST_REQ
-=====================
-
-..
-.. data:: KRB5_LRQ_ALL_LAST_REQ
-..
-
-
-
-
-============================ ======================
-``KRB5_LRQ_ALL_LAST_REQ`` ``5``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ALL-LAST-TGT-data:
-
-KRB5_LRQ_ALL_LAST_TGT
-=====================
-
-..
-.. data:: KRB5_LRQ_ALL_LAST_TGT
-..
-
-
-
-
-============================ ======================
-``KRB5_LRQ_ALL_LAST_TGT`` ``1``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ALL-LAST-TGT-ISSUED-data:
-
-KRB5_LRQ_ALL_LAST_TGT_ISSUED
-============================
-
-..
-.. data:: KRB5_LRQ_ALL_LAST_TGT_ISSUED
-..
-
-
-
-
-=================================== ======================
-``KRB5_LRQ_ALL_LAST_TGT_ISSUED`` ``3``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ALL-PW-EXPTIME-data:
-
-KRB5_LRQ_ALL_PW_EXPTIME
-=======================
-
-..
-.. data:: KRB5_LRQ_ALL_PW_EXPTIME
-..
-
-
-
-
-============================== ======================
-``KRB5_LRQ_ALL_PW_EXPTIME`` ``6``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-NONE-data:
-
-KRB5_LRQ_NONE
-=============
-
-..
-.. data:: KRB5_LRQ_NONE
-..
-
-
-
-
-==================== ======================
-``KRB5_LRQ_NONE`` ``0``
-==================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ONE-ACCT-EXPTIME-data:
-
-KRB5_LRQ_ONE_ACCT_EXPTIME
-=========================
-
-..
-.. data:: KRB5_LRQ_ONE_ACCT_EXPTIME
-..
-
-
-
-
-================================ ======================
-``KRB5_LRQ_ONE_ACCT_EXPTIME`` ``(-7)``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ONE-LAST-INITIAL-data:
-
-KRB5_LRQ_ONE_LAST_INITIAL
-=========================
-
-..
-.. data:: KRB5_LRQ_ONE_LAST_INITIAL
-..
-
-
-
-
-================================ ======================
-``KRB5_LRQ_ONE_LAST_INITIAL`` ``(-2)``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ONE-LAST-RENEWAL-data:
-
-KRB5_LRQ_ONE_LAST_RENEWAL
-=========================
-
-..
-.. data:: KRB5_LRQ_ONE_LAST_RENEWAL
-..
-
-
-
-
-================================ ======================
-``KRB5_LRQ_ONE_LAST_RENEWAL`` ``(-4)``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ONE-LAST-REQ-data:
-
-KRB5_LRQ_ONE_LAST_REQ
-=====================
-
-..
-.. data:: KRB5_LRQ_ONE_LAST_REQ
-..
-
-
-
-
-============================ ======================
-``KRB5_LRQ_ONE_LAST_REQ`` ``(-5)``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ONE-LAST-TGT-data:
-
-KRB5_LRQ_ONE_LAST_TGT
-=====================
-
-..
-.. data:: KRB5_LRQ_ONE_LAST_TGT
-..
-
-
-
-
-============================ ======================
-``KRB5_LRQ_ONE_LAST_TGT`` ``(-1)``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ONE-LAST-TGT-ISSUED-data:
-
-KRB5_LRQ_ONE_LAST_TGT_ISSUED
-============================
-
-..
-.. data:: KRB5_LRQ_ONE_LAST_TGT_ISSUED
-..
-
-
-
-
-=================================== ======================
-``KRB5_LRQ_ONE_LAST_TGT_ISSUED`` ``(-3)``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-LRQ-ONE-PW-EXPTIME-data:
-
-KRB5_LRQ_ONE_PW_EXPTIME
-=======================
-
-..
-.. data:: KRB5_LRQ_ONE_PW_EXPTIME
-..
-
-
-
-
-============================== ======================
-``KRB5_LRQ_ONE_PW_EXPTIME`` ``(-6)``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-ENTERPRISE-PRINCIPAL-data:
-
-KRB5_NT_ENTERPRISE_PRINCIPAL
-============================
-
-..
-.. data:: KRB5_NT_ENTERPRISE_PRINCIPAL
-..
-
-Windows 2000 UPN.
-
-
-
-=================================== ======================
-``KRB5_NT_ENTERPRISE_PRINCIPAL`` ``10``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-ENT-PRINCIPAL-AND-ID-data:
-
-KRB5_NT_ENT_PRINCIPAL_AND_ID
-============================
-
-..
-.. data:: KRB5_NT_ENT_PRINCIPAL_AND_ID
-..
-
-NT 4 style name and SID.
-
-
-
-=================================== ======================
-``KRB5_NT_ENT_PRINCIPAL_AND_ID`` ``-130``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-MS-PRINCIPAL-data:
-
-KRB5_NT_MS_PRINCIPAL
-====================
-
-..
-.. data:: KRB5_NT_MS_PRINCIPAL
-..
-
-Windows 2000 UPN and SID.
-
-
-
-=========================== ======================
-``KRB5_NT_MS_PRINCIPAL`` ``-128``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-MS-PRINCIPAL-AND-ID-data:
-
-KRB5_NT_MS_PRINCIPAL_AND_ID
-===========================
-
-..
-.. data:: KRB5_NT_MS_PRINCIPAL_AND_ID
-..
-
-NT 4 style name.
-
-
-
-================================== ======================
-``KRB5_NT_MS_PRINCIPAL_AND_ID`` ``-129``
-================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-PRINCIPAL-data:
-
-KRB5_NT_PRINCIPAL
-=================
-
-..
-.. data:: KRB5_NT_PRINCIPAL
-..
-
-Just the name of the principal as in DCE, or for users.
-
-
-
-======================== ======================
-``KRB5_NT_PRINCIPAL`` ``1``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-SMTP-NAME-data:
-
-KRB5_NT_SMTP_NAME
-=================
-
-..
-.. data:: KRB5_NT_SMTP_NAME
-..
-
-Name in form of SMTP email name.
-
-
-
-======================== ======================
-``KRB5_NT_SMTP_NAME`` ``7``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-SRV-HST-data:
-
-KRB5_NT_SRV_HST
-===============
-
-..
-.. data:: KRB5_NT_SRV_HST
-..
-
-Service with host name as instance (telnet, rcommands)
-
-
-
-====================== ======================
-``KRB5_NT_SRV_HST`` ``3``
-====================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-SRV-INST-data:
-
-KRB5_NT_SRV_INST
-================
-
-..
-.. data:: KRB5_NT_SRV_INST
-..
-
-Service and other unique instance (krbtgt)
-
-
-
-======================= ======================
-``KRB5_NT_SRV_INST`` ``2``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-SRV-XHST-data:
-
-KRB5_NT_SRV_XHST
-================
-
-..
-.. data:: KRB5_NT_SRV_XHST
-..
-
-Service with host as remaining components.
-
-
-
-======================= ======================
-``KRB5_NT_SRV_XHST`` ``4``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-UID-data:
-
-KRB5_NT_UID
-===========
-
-..
-.. data:: KRB5_NT_UID
-..
-
-Unique ID.
-
-
-
-================== ======================
-``KRB5_NT_UID`` ``5``
-================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-UNKNOWN-data:
-
-KRB5_NT_UNKNOWN
-===============
-
-..
-.. data:: KRB5_NT_UNKNOWN
-..
-
-Name type not known.
-
-
-
-====================== ======================
-``KRB5_NT_UNKNOWN`` ``0``
-====================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-WELLKNOWN-data:
-
-KRB5_NT_WELLKNOWN
-=================
-
-..
-.. data:: KRB5_NT_WELLKNOWN
-..
-
-Well-known (special) principal.
-
-
-
-======================== ======================
-``KRB5_NT_WELLKNOWN`` ``11``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-NT-X500-PRINCIPAL-data:
-
-KRB5_NT_X500_PRINCIPAL
-======================
-
-..
-.. data:: KRB5_NT_X500_PRINCIPAL
-..
-
-PKINIT.
-
-
-
-============================= ======================
-``KRB5_NT_X500_PRINCIPAL`` ``6``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-ATTRIBUTES-INFO-data:
-
-KRB5_PAC_ATTRIBUTES_INFO
-========================
-
-..
-.. data:: KRB5_PAC_ATTRIBUTES_INFO
-..
-
-PAC attributes.
-
-
-
-=============================== ======================
-``KRB5_PAC_ATTRIBUTES_INFO`` ``17``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-CLIENT-CLAIMS-data:
-
-KRB5_PAC_CLIENT_CLAIMS
-======================
-
-..
-.. data:: KRB5_PAC_CLIENT_CLAIMS
-..
-
-Client claims information.
-
-
-
-============================= ======================
-``KRB5_PAC_CLIENT_CLAIMS`` ``13``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-CLIENT-INFO-data:
-
-KRB5_PAC_CLIENT_INFO
-====================
-
-..
-.. data:: KRB5_PAC_CLIENT_INFO
-..
-
-Client name and ticket info.
-
-
-
-=========================== ======================
-``KRB5_PAC_CLIENT_INFO`` ``10``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-CREDENTIALS-INFO-data:
-
-KRB5_PAC_CREDENTIALS_INFO
-=========================
-
-..
-.. data:: KRB5_PAC_CREDENTIALS_INFO
-..
-
-Credentials information.
-
-
-
-================================ ======================
-``KRB5_PAC_CREDENTIALS_INFO`` ``2``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-DELEGATION-INFO-data:
-
-KRB5_PAC_DELEGATION_INFO
-========================
-
-..
-.. data:: KRB5_PAC_DELEGATION_INFO
-..
-
-Constrained delegation info.
-
-
-
-=============================== ======================
-``KRB5_PAC_DELEGATION_INFO`` ``11``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-DEVICE-CLAIMS-data:
-
-KRB5_PAC_DEVICE_CLAIMS
-======================
-
-..
-.. data:: KRB5_PAC_DEVICE_CLAIMS
-..
-
-Device claims information.
-
-
-
-============================= ======================
-``KRB5_PAC_DEVICE_CLAIMS`` ``15``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-DEVICE-INFO-data:
-
-KRB5_PAC_DEVICE_INFO
-====================
-
-..
-.. data:: KRB5_PAC_DEVICE_INFO
-..
-
-Device information.
-
-
-
-=========================== ======================
-``KRB5_PAC_DEVICE_INFO`` ``14``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-LOGON-INFO-data:
-
-KRB5_PAC_LOGON_INFO
-===================
-
-..
-.. data:: KRB5_PAC_LOGON_INFO
-..
-
-Logon information.
-
-
-
-========================== ======================
-``KRB5_PAC_LOGON_INFO`` ``1``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-PRIVSVR-CHECKSUM-data:
-
-KRB5_PAC_PRIVSVR_CHECKSUM
-=========================
-
-..
-.. data:: KRB5_PAC_PRIVSVR_CHECKSUM
-..
-
-KDC checksum.
-
-
-
-================================ ======================
-``KRB5_PAC_PRIVSVR_CHECKSUM`` ``7``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-REQUESTOR-data:
-
-KRB5_PAC_REQUESTOR
-==================
-
-..
-.. data:: KRB5_PAC_REQUESTOR
-..
-
-PAC requestor SID.
-
-
-
-========================= ======================
-``KRB5_PAC_REQUESTOR`` ``18``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-SERVER-CHECKSUM-data:
-
-KRB5_PAC_SERVER_CHECKSUM
-========================
-
-..
-.. data:: KRB5_PAC_SERVER_CHECKSUM
-..
-
-Server checksum.
-
-
-
-=============================== ======================
-``KRB5_PAC_SERVER_CHECKSUM`` ``6``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-TICKET-CHECKSUM-data:
-
-KRB5_PAC_TICKET_CHECKSUM
-========================
-
-..
-.. data:: KRB5_PAC_TICKET_CHECKSUM
-..
-
-Ticket checksum.
-
-
-
-=============================== ======================
-``KRB5_PAC_TICKET_CHECKSUM`` ``16``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PAC-UPN-DNS-INFO-data:
-
-KRB5_PAC_UPN_DNS_INFO
-=====================
-
-..
-.. data:: KRB5_PAC_UPN_DNS_INFO
-..
-
-User principal name and DNS info.
-
-
-
-============================ ======================
-``KRB5_PAC_UPN_DNS_INFO`` ``12``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-AFS3-SALT-data:
-
-KRB5_PADATA_AFS3_SALT
-=====================
-
-..
-.. data:: KRB5_PADATA_AFS3_SALT
-..
-
-Cygnus.
-
-RFC 4120, 3961
-
-============================ ======================
-``KRB5_PADATA_AFS3_SALT`` ``10``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-AP-REQ-data:
-
-KRB5_PADATA_AP_REQ
-==================
-
-..
-.. data:: KRB5_PADATA_AP_REQ
-..
-
-
-
-
-========================= ======================
-``KRB5_PADATA_AP_REQ`` ``1``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-AS-CHECKSUM-data:
-
-KRB5_PADATA_AS_CHECKSUM
-=======================
-
-..
-.. data:: KRB5_PADATA_AS_CHECKSUM
-..
-
-AS checksum.
-
-
-
-============================== ======================
-``KRB5_PADATA_AS_CHECKSUM`` ``132``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-AS-FRESHNESS-data:
-
-KRB5_PADATA_AS_FRESHNESS
-========================
-
-..
-.. data:: KRB5_PADATA_AS_FRESHNESS
-..
-
-RFC 8070.
-
-
-
-=============================== ======================
-``KRB5_PADATA_AS_FRESHNESS`` ``150``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-ENCRYPTED-CHALLENGE-data:
-
-KRB5_PADATA_ENCRYPTED_CHALLENGE
-===============================
-
-..
-.. data:: KRB5_PADATA_ENCRYPTED_CHALLENGE
-..
-
-RFC 6113.
-
-
-
-====================================== ======================
-``KRB5_PADATA_ENCRYPTED_CHALLENGE`` ``138``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-ENC-SANDIA-SECURID-data:
-
-KRB5_PADATA_ENC_SANDIA_SECURID
-==============================
-
-..
-.. data:: KRB5_PADATA_ENC_SANDIA_SECURID
-..
-
-SecurId passcode.
-
-RFC 4120
-
-===================================== ======================
-``KRB5_PADATA_ENC_SANDIA_SECURID`` ``6``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-ENC-TIMESTAMP-data:
-
-KRB5_PADATA_ENC_TIMESTAMP
-=========================
-
-..
-.. data:: KRB5_PADATA_ENC_TIMESTAMP
-..
-
-RFC 4120.
-
-
-
-================================ ======================
-``KRB5_PADATA_ENC_TIMESTAMP`` ``2``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-ENC-UNIX-TIME-data:
-
-KRB5_PADATA_ENC_UNIX_TIME
-=========================
-
-..
-.. data:: KRB5_PADATA_ENC_UNIX_TIME
-..
-
-timestamp encrypted in key.
-
-RFC 4120
-
-================================ ======================
-``KRB5_PADATA_ENC_UNIX_TIME`` ``5``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-ETYPE-INFO-data:
-
-KRB5_PADATA_ETYPE_INFO
-======================
-
-..
-.. data:: KRB5_PADATA_ETYPE_INFO
-..
-
-Etype info for preauth.
-
-RFC 4120
-
-============================= ======================
-``KRB5_PADATA_ETYPE_INFO`` ``11``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-ETYPE-INFO2-data:
-
-KRB5_PADATA_ETYPE_INFO2
-=======================
-
-..
-.. data:: KRB5_PADATA_ETYPE_INFO2
-..
-
-RFC 4120.
-
-
-
-============================== ======================
-``KRB5_PADATA_ETYPE_INFO2`` ``19``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-FOR-USER-data:
-
-KRB5_PADATA_FOR_USER
-====================
-
-..
-.. data:: KRB5_PADATA_FOR_USER
-..
-
-username protocol transition request
-
-
-
-=========================== ======================
-``KRB5_PADATA_FOR_USER`` ``129``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-FX-COOKIE-data:
-
-KRB5_PADATA_FX_COOKIE
-=====================
-
-..
-.. data:: KRB5_PADATA_FX_COOKIE
-..
-
-RFC 6113.
-
-
-
-============================ ======================
-``KRB5_PADATA_FX_COOKIE`` ``133``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-FX-ERROR-data:
-
-KRB5_PADATA_FX_ERROR
-====================
-
-..
-.. data:: KRB5_PADATA_FX_ERROR
-..
-
-RFC 6113.
-
-
-
-=========================== ======================
-``KRB5_PADATA_FX_ERROR`` ``137``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-FX-FAST-data:
-
-KRB5_PADATA_FX_FAST
-===================
-
-..
-.. data:: KRB5_PADATA_FX_FAST
-..
-
-RFC 6113.
-
-
-
-========================== ======================
-``KRB5_PADATA_FX_FAST`` ``136``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-GET-FROM-TYPED-DATA-data:
-
-KRB5_PADATA_GET_FROM_TYPED_DATA
-===============================
-
-..
-.. data:: KRB5_PADATA_GET_FROM_TYPED_DATA
-..
-
-Embedded in typed data.
-
-RFC 4120
-
-====================================== ======================
-``KRB5_PADATA_GET_FROM_TYPED_DATA`` ``22``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-NONE-data:
-
-KRB5_PADATA_NONE
-================
-
-..
-.. data:: KRB5_PADATA_NONE
-..
-
-
-
-
-======================= ======================
-``KRB5_PADATA_NONE`` ``0``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-OSF-DCE-data:
-
-KRB5_PADATA_OSF_DCE
-===================
-
-..
-.. data:: KRB5_PADATA_OSF_DCE
-..
-
-OSF DCE.
-
-RFC 4120
-
-========================== ======================
-``KRB5_PADATA_OSF_DCE`` ``8``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-OTP-CHALLENGE-data:
-
-KRB5_PADATA_OTP_CHALLENGE
-=========================
-
-..
-.. data:: KRB5_PADATA_OTP_CHALLENGE
-..
-
-RFC 6560 section 4.1.
-
-
-
-================================ ======================
-``KRB5_PADATA_OTP_CHALLENGE`` ``141``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-OTP-PIN-CHANGE-data:
-
-KRB5_PADATA_OTP_PIN_CHANGE
-==========================
-
-..
-.. data:: KRB5_PADATA_OTP_PIN_CHANGE
-..
-
-RFC 6560 section 4.3.
-
-
-
-================================= ======================
-``KRB5_PADATA_OTP_PIN_CHANGE`` ``144``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-OTP-REQUEST-data:
-
-KRB5_PADATA_OTP_REQUEST
-=======================
-
-..
-.. data:: KRB5_PADATA_OTP_REQUEST
-..
-
-RFC 6560 section 4.2.
-
-
-
-============================== ======================
-``KRB5_PADATA_OTP_REQUEST`` ``142``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-PAC-OPTIONS-data:
-
-KRB5_PADATA_PAC_OPTIONS
-=======================
-
-..
-.. data:: KRB5_PADATA_PAC_OPTIONS
-..
-
-MS-KILE and MS-SFU.
-
-
-
-============================== ======================
-``KRB5_PADATA_PAC_OPTIONS`` ``167``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-PAC-REQUEST-data:
-
-KRB5_PADATA_PAC_REQUEST
-=======================
-
-..
-.. data:: KRB5_PADATA_PAC_REQUEST
-..
-
-include Windows PAC
-
-
-
-============================== ======================
-``KRB5_PADATA_PAC_REQUEST`` ``128``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-PKINIT-KX-data:
-
-KRB5_PADATA_PKINIT_KX
-=====================
-
-..
-.. data:: KRB5_PADATA_PKINIT_KX
-..
-
-RFC 6112.
-
-
-
-============================ ======================
-``KRB5_PADATA_PKINIT_KX`` ``147``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-PK-AS-REP-data:
-
-KRB5_PADATA_PK_AS_REP
-=====================
-
-..
-.. data:: KRB5_PADATA_PK_AS_REP
-..
-
-PKINIT.
-
-RFC 4556
-
-============================ ======================
-``KRB5_PADATA_PK_AS_REP`` ``17``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-PK-AS-REP-OLD-data:
-
-KRB5_PADATA_PK_AS_REP_OLD
-=========================
-
-..
-.. data:: KRB5_PADATA_PK_AS_REP_OLD
-..
-
-PKINIT.
-
-
-
-================================ ======================
-``KRB5_PADATA_PK_AS_REP_OLD`` ``15``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-PK-AS-REQ-data:
-
-KRB5_PADATA_PK_AS_REQ
-=====================
-
-..
-.. data:: KRB5_PADATA_PK_AS_REQ
-..
-
-PKINIT.
-
-RFC 4556
-
-============================ ======================
-``KRB5_PADATA_PK_AS_REQ`` ``16``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-PK-AS-REQ-OLD-data:
-
-KRB5_PADATA_PK_AS_REQ_OLD
-=========================
-
-..
-.. data:: KRB5_PADATA_PK_AS_REQ_OLD
-..
-
-PKINIT.
-
-
-
-================================ ======================
-``KRB5_PADATA_PK_AS_REQ_OLD`` ``14``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-PW-SALT-data:
-
-KRB5_PADATA_PW_SALT
-===================
-
-..
-.. data:: KRB5_PADATA_PW_SALT
-..
-
-RFC 4120.
-
-
-
-========================== ======================
-``KRB5_PADATA_PW_SALT`` ``3``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-REDHAT-IDP-OAUTH2-data:
-
-KRB5_PADATA_REDHAT_IDP_OAUTH2
-=============================
-
-..
-.. data:: KRB5_PADATA_REDHAT_IDP_OAUTH2
-..
-
-Red Hat IdP mechanism.
-
-
-
-==================================== ======================
-``KRB5_PADATA_REDHAT_IDP_OAUTH2`` ``152``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-REFERRAL-data:
-
-KRB5_PADATA_REFERRAL
-====================
-
-..
-.. data:: KRB5_PADATA_REFERRAL
-..
-
-draft referral system
-
-
-
-=========================== ======================
-``KRB5_PADATA_REFERRAL`` ``25``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-S4U-X509-USER-data:
-
-KRB5_PADATA_S4U_X509_USER
-=========================
-
-..
-.. data:: KRB5_PADATA_S4U_X509_USER
-..
-
-certificate protocol transition request
-
-
-
-================================ ======================
-``KRB5_PADATA_S4U_X509_USER`` ``130``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-SAM-CHALLENGE-data:
-
-KRB5_PADATA_SAM_CHALLENGE
-=========================
-
-..
-.. data:: KRB5_PADATA_SAM_CHALLENGE
-..
-
-SAM/OTP.
-
-
-
-================================ ======================
-``KRB5_PADATA_SAM_CHALLENGE`` ``12``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-SAM-CHALLENGE-2-data:
-
-KRB5_PADATA_SAM_CHALLENGE_2
-===========================
-
-..
-.. data:: KRB5_PADATA_SAM_CHALLENGE_2
-..
-
-draft challenge system, updated
-
-
-
-================================== ======================
-``KRB5_PADATA_SAM_CHALLENGE_2`` ``30``
-================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-SAM-REDIRECT-data:
-
-KRB5_PADATA_SAM_REDIRECT
-========================
-
-..
-.. data:: KRB5_PADATA_SAM_REDIRECT
-..
-
-SAM/OTP.
-
-RFC 4120
-
-=============================== ======================
-``KRB5_PADATA_SAM_REDIRECT`` ``21``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-SAM-RESPONSE-data:
-
-KRB5_PADATA_SAM_RESPONSE
-========================
-
-..
-.. data:: KRB5_PADATA_SAM_RESPONSE
-..
-
-SAM/OTP.
-
-
-
-=============================== ======================
-``KRB5_PADATA_SAM_RESPONSE`` ``13``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-SAM-RESPONSE-2-data:
-
-KRB5_PADATA_SAM_RESPONSE_2
-==========================
-
-..
-.. data:: KRB5_PADATA_SAM_RESPONSE_2
-..
-
-draft challenge system, updated
-
-
-
-================================= ======================
-``KRB5_PADATA_SAM_RESPONSE_2`` ``31``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-SESAME-data:
-
-KRB5_PADATA_SESAME
-==================
-
-..
-.. data:: KRB5_PADATA_SESAME
-..
-
-Sesame project.
-
-RFC 4120
-
-========================= ======================
-``KRB5_PADATA_SESAME`` ``7``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-SPAKE-data:
-
-KRB5_PADATA_SPAKE
-=================
-
-..
-.. data:: KRB5_PADATA_SPAKE
-..
-
-
-
-
-======================== ======================
-``KRB5_PADATA_SPAKE`` ``151``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-SVR-REFERRAL-INFO-data:
-
-KRB5_PADATA_SVR_REFERRAL_INFO
-=============================
-
-..
-.. data:: KRB5_PADATA_SVR_REFERRAL_INFO
-..
-
-Windows 2000 referrals.
-
-RFC 6820
-
-==================================== ======================
-``KRB5_PADATA_SVR_REFERRAL_INFO`` ``20``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-TGS-REQ-data:
-
-KRB5_PADATA_TGS_REQ
-===================
-
-..
-.. data:: KRB5_PADATA_TGS_REQ
-..
-
-
-
-
-========================== ======================
-``KRB5_PADATA_TGS_REQ`` ``KRB5_PADATA_AP_REQ``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PADATA-USE-SPECIFIED-KVNO-data:
-
-KRB5_PADATA_USE_SPECIFIED_KVNO
-==============================
-
-..
-.. data:: KRB5_PADATA_USE_SPECIFIED_KVNO
-..
-
-RFC 4120.
-
-
-
-===================================== ======================
-``KRB5_PADATA_USE_SPECIFIED_KVNO`` ``20``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-COMPARE-CASEFOLD-data:
-
-KRB5_PRINCIPAL_COMPARE_CASEFOLD
-===============================
-
-..
-.. data:: KRB5_PRINCIPAL_COMPARE_CASEFOLD
-..
-
-case-insensitive
-
-
-
-====================================== ======================
-``KRB5_PRINCIPAL_COMPARE_CASEFOLD`` ``4``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-COMPARE-ENTERPRISE-data:
-
-KRB5_PRINCIPAL_COMPARE_ENTERPRISE
-=================================
-
-..
-.. data:: KRB5_PRINCIPAL_COMPARE_ENTERPRISE
-..
-
-UPNs as real principals.
-
-
-
-======================================== ======================
-``KRB5_PRINCIPAL_COMPARE_ENTERPRISE`` ``2``
-======================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-COMPARE-IGNORE-REALM-data:
-
-KRB5_PRINCIPAL_COMPARE_IGNORE_REALM
-===================================
-
-..
-.. data:: KRB5_PRINCIPAL_COMPARE_IGNORE_REALM
-..
-
-ignore realm component
-
-
-
-========================================== ======================
-``KRB5_PRINCIPAL_COMPARE_IGNORE_REALM`` ``1``
-========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-COMPARE-UTF8-data:
-
-KRB5_PRINCIPAL_COMPARE_UTF8
-===========================
-
-..
-.. data:: KRB5_PRINCIPAL_COMPARE_UTF8
-..
-
-treat principals as UTF-8
-
-
-
-================================== ======================
-``KRB5_PRINCIPAL_COMPARE_UTF8`` ``8``
-================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-PARSE-ENTERPRISE-data:
-
-KRB5_PRINCIPAL_PARSE_ENTERPRISE
-===============================
-
-..
-.. data:: KRB5_PRINCIPAL_PARSE_ENTERPRISE
-..
-
-Create single-component enterprise principle.
-
-
-
-====================================== ======================
-``KRB5_PRINCIPAL_PARSE_ENTERPRISE`` ``0x4``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-PARSE-IGNORE-REALM-data:
-
-KRB5_PRINCIPAL_PARSE_IGNORE_REALM
-=================================
-
-..
-.. data:: KRB5_PRINCIPAL_PARSE_IGNORE_REALM
-..
-
-Ignore realm if present.
-
-
-
-======================================== ======================
-``KRB5_PRINCIPAL_PARSE_IGNORE_REALM`` ``0x8``
-======================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-PARSE-NO-DEF-REALM-data:
-
-KRB5_PRINCIPAL_PARSE_NO_DEF_REALM
-=================================
-
-..
-.. data:: KRB5_PRINCIPAL_PARSE_NO_DEF_REALM
-..
-
-Don't add default realm.
-
-
-
-======================================== ======================
-``KRB5_PRINCIPAL_PARSE_NO_DEF_REALM`` ``0x10``
-======================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-PARSE-NO-REALM-data:
-
-KRB5_PRINCIPAL_PARSE_NO_REALM
-=============================
-
-..
-.. data:: KRB5_PRINCIPAL_PARSE_NO_REALM
-..
-
-Error if realm is present.
-
-
-
-==================================== ======================
-``KRB5_PRINCIPAL_PARSE_NO_REALM`` ``0x1``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-PARSE-REQUIRE-REALM-data:
-
-KRB5_PRINCIPAL_PARSE_REQUIRE_REALM
-==================================
-
-..
-.. data:: KRB5_PRINCIPAL_PARSE_REQUIRE_REALM
-..
-
-Error if realm is not present.
-
-
-
-========================================= ======================
-``KRB5_PRINCIPAL_PARSE_REQUIRE_REALM`` ``0x2``
-========================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-UNPARSE-DISPLAY-data:
-
-KRB5_PRINCIPAL_UNPARSE_DISPLAY
-==============================
-
-..
-.. data:: KRB5_PRINCIPAL_UNPARSE_DISPLAY
-..
-
-Don't escape special characters.
-
-
-
-===================================== ======================
-``KRB5_PRINCIPAL_UNPARSE_DISPLAY`` ``0x4``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-UNPARSE-NO-REALM-data:
-
-KRB5_PRINCIPAL_UNPARSE_NO_REALM
-===============================
-
-..
-.. data:: KRB5_PRINCIPAL_UNPARSE_NO_REALM
-..
-
-Omit realm always.
-
-
-
-====================================== ======================
-``KRB5_PRINCIPAL_UNPARSE_NO_REALM`` ``0x2``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRINCIPAL-UNPARSE-SHORT-data:
-
-KRB5_PRINCIPAL_UNPARSE_SHORT
-============================
-
-..
-.. data:: KRB5_PRINCIPAL_UNPARSE_SHORT
-..
-
-Omit realm if it is the local realm.
-
-
-
-=================================== ======================
-``KRB5_PRINCIPAL_UNPARSE_SHORT`` ``0x1``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PRIV-data:
-
-KRB5_PRIV
-=========
-
-..
-.. data:: KRB5_PRIV
-..
-
-Private application message.
-
-
-
-================ ======================
-``KRB5_PRIV`` ``((krb5_msgtype)21)``
-================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PROMPT-TYPE-NEW-PASSWORD-data:
-
-KRB5_PROMPT_TYPE_NEW_PASSWORD
-=============================
-
-..
-.. data:: KRB5_PROMPT_TYPE_NEW_PASSWORD
-..
-
-Prompt for new password (during password change)
-
-
-
-==================================== ======================
-``KRB5_PROMPT_TYPE_NEW_PASSWORD`` ``0x2``
-==================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PROMPT-TYPE-NEW-PASSWORD-AGAIN-data:
-
-KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN
-===================================
-
-..
-.. data:: KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN
-..
-
-Prompt for new password again.
-
-
-
-========================================== ======================
-``KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN`` ``0x3``
-========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PROMPT-TYPE-PASSWORD-data:
-
-KRB5_PROMPT_TYPE_PASSWORD
-=========================
-
-..
-.. data:: KRB5_PROMPT_TYPE_PASSWORD
-..
-
-Prompt for password.
-
-
-
-================================ ======================
-``KRB5_PROMPT_TYPE_PASSWORD`` ``0x1``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PROMPT-TYPE-PREAUTH-data:
-
-KRB5_PROMPT_TYPE_PREAUTH
-========================
-
-..
-.. data:: KRB5_PROMPT_TYPE_PREAUTH
-..
-
-Prompt for preauthentication data (such as an OTP value)
-
-
-
-=============================== ======================
-``KRB5_PROMPT_TYPE_PREAUTH`` ``0x4``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-PVNO-data:
-
-KRB5_PVNO
-=========
-
-..
-.. data:: KRB5_PVNO
-..
-
-Protocol version number.
-
-
-
-================ ======================
-``KRB5_PVNO`` ``5``
-================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-REALM-BRANCH-CHAR-data:
-
-KRB5_REALM_BRANCH_CHAR
-======================
-
-..
-.. data:: KRB5_REALM_BRANCH_CHAR
-..
-
-
-
-
-============================= ======================
-``KRB5_REALM_BRANCH_CHAR`` ``'.'``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RECVAUTH-BADAUTHVERS-data:
-
-KRB5_RECVAUTH_BADAUTHVERS
-=========================
-
-..
-.. data:: KRB5_RECVAUTH_BADAUTHVERS
-..
-
-
-
-
-================================ ======================
-``KRB5_RECVAUTH_BADAUTHVERS`` ``0x0002``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RECVAUTH-SKIP-VERSION-data:
-
-KRB5_RECVAUTH_SKIP_VERSION
-==========================
-
-..
-.. data:: KRB5_RECVAUTH_SKIP_VERSION
-..
-
-
-
-
-================================= ======================
-``KRB5_RECVAUTH_SKIP_VERSION`` ``0x0001``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-REFERRAL-REALM-data:
-
-KRB5_REFERRAL_REALM
-===================
-
-..
-.. data:: KRB5_REFERRAL_REALM
-..
-
-Constant for realm referrals.
-
-
-
-========================== ======================
-``KRB5_REFERRAL_REALM`` ``""``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-OTP-FLAGS-COLLECT-PIN-data:
-
-KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN
-====================================
-
-..
-.. data:: KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN
-..
-
-This flag indicates that the PIN value MUST be collected.
-
-
-
-=========================================== ======================
-``KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN`` ``0x0002``
-=========================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-OTP-FLAGS-COLLECT-TOKEN-data:
-
-KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN
-======================================
-
-..
-.. data:: KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN
-..
-
-This flag indicates that the token value MUST be collected.
-
-
-
-============================================= ======================
-``KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN`` ``0x0001``
-============================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-OTP-FLAGS-NEXTOTP-data:
-
-KRB5_RESPONDER_OTP_FLAGS_NEXTOTP
-================================
-
-..
-.. data:: KRB5_RESPONDER_OTP_FLAGS_NEXTOTP
-..
-
-This flag indicates that the token is now in re-synchronization mode with the server.
-
-The user is expected to reply with the next code displayed on the token.
-
-======================================= ======================
-``KRB5_RESPONDER_OTP_FLAGS_NEXTOTP`` ``0x0004``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-OTP-FLAGS-SEPARATE-PIN-data:
-
-KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN
-=====================================
-
-..
-.. data:: KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN
-..
-
-This flag indicates that the PIN MUST be returned as a separate item.
-
-This flag only takes effect if KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN is set. If this flag is not set, the responder may either concatenate PIN + token value and store it as "value" in the answer or it may return them separately. If they are returned separately, they will be concatenated internally.
-
-============================================ ======================
-``KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN`` ``0x0008``
-============================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-OTP-FORMAT-ALPHANUMERIC-data:
-
-KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC
-======================================
-
-..
-.. data:: KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC
-..
-
-
-
-
-============================================= ======================
-``KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC`` ``2``
-============================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-OTP-FORMAT-DECIMAL-data:
-
-KRB5_RESPONDER_OTP_FORMAT_DECIMAL
-=================================
-
-..
-.. data:: KRB5_RESPONDER_OTP_FORMAT_DECIMAL
-..
-
-These format constants identify the format of the token value.
-
-
-
-======================================== ======================
-``KRB5_RESPONDER_OTP_FORMAT_DECIMAL`` ``0``
-======================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-OTP-FORMAT-HEXADECIMAL-data:
-
-KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL
-=====================================
-
-..
-.. data:: KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL
-..
-
-
-
-
-============================================ ======================
-``KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL`` ``1``
-============================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-PKINIT-FLAGS-TOKEN-USER-PIN-COUNT-LOW-data:
-
-KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW
-====================================================
-
-..
-.. data:: KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW
-..
-
-This flag indicates that an incorrect PIN was supplied at least once since the last time the correct PIN was supplied.
-
-
-
-=========================================================== ======================
-``KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW`` ``(1 << 0)``
-=========================================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-PKINIT-FLAGS-TOKEN-USER-PIN-FINAL-TRY-data:
-
-KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY
-====================================================
-
-..
-.. data:: KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY
-..
-
-This flag indicates that supplying an incorrect PIN will cause the token to lock itself.
-
-
-
-=========================================================== ======================
-``KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY`` ``(1 << 1)``
-=========================================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-PKINIT-FLAGS-TOKEN-USER-PIN-LOCKED-data:
-
-KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED
-=================================================
-
-..
-.. data:: KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED
-..
-
-This flag indicates that the user PIN is locked, and you can't log in to the token with it.
-
-
-
-======================================================== ======================
-``KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED`` ``(1 << 2)``
-======================================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-QUESTION-OTP-data:
-
-KRB5_RESPONDER_QUESTION_OTP
-===========================
-
-..
-.. data:: KRB5_RESPONDER_QUESTION_OTP
-..
-
-OTP responder question.
-
-The OTP responder question is asked when the KDC indicates that an OTP value is required in order to complete the authentication. The JSON format of the challenge is:
-::
-
- {
- "service": <string (optional)>,
- "tokenInfo": [
- {
- "flags": <number>,
- "vendor": <string (optional)>,
- "challenge": <string (optional)>,
- "length": <number (optional)>,
- "format": <number (optional)>,
- "tokenID": <string (optional)>,
- "algID": <string (optional)>,
- },
- ...
- ]
- }
-
-
-The answer to the question MUST be JSON formatted:
-::
-
- {
- "tokeninfo": <number>,
- "value": <string (optional)>,
- "pin": <string (optional)>,
- }
-
-
-For more detail, please see RFC 6560.
-
-
-================================== ======================
-``KRB5_RESPONDER_QUESTION_OTP`` ``"otp"``
-================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-QUESTION-PASSWORD-data:
-
-KRB5_RESPONDER_QUESTION_PASSWORD
-================================
-
-..
-.. data:: KRB5_RESPONDER_QUESTION_PASSWORD
-..
-
-Long-term password responder question.
-
-This question is asked when the long-term password is needed. It has no challenge and the response is simply the password string.
-
-
-======================================= ======================
-``KRB5_RESPONDER_QUESTION_PASSWORD`` ``"password"``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-RESPONDER-QUESTION-PKINIT-data:
-
-KRB5_RESPONDER_QUESTION_PKINIT
-==============================
-
-..
-.. data:: KRB5_RESPONDER_QUESTION_PKINIT
-..
-
-PKINIT responder question.
-
-The PKINIT responder question is asked when the client needs a password that's being used to protect key information, and is formatted as a JSON object. A specific identity's flags value, if not zero, is the bitwise-OR of one or more of the KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_* flags defined below, and possibly other flags to be added later. Any resemblance to similarly-named CKF_* values in the PKCS#11 API should not be depended on.
-::
-
- {
- identity <string> : flags <number>,
- ...
- }
-
-
-The answer to the question MUST be JSON formatted:
-::
-
- {
- identity <string> : password <string>,
- ...
- }
-
-
-
-
-===================================== ======================
-``KRB5_RESPONDER_QUESTION_PKINIT`` ``"pkinit"``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-SAFE-data:
-
-KRB5_SAFE
-=========
-
-..
-.. data:: KRB5_SAFE
-..
-
-Safe application message.
-
-
-
-================ ======================
-``KRB5_SAFE`` ``((krb5_msgtype)20)``
-================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-SAM-MUST-PK-ENCRYPT-SAD-data:
-
-KRB5_SAM_MUST_PK_ENCRYPT_SAD
-============================
-
-..
-.. data:: KRB5_SAM_MUST_PK_ENCRYPT_SAD
-..
-
-currently must be zero
-
-
-
-=================================== ======================
-``KRB5_SAM_MUST_PK_ENCRYPT_SAD`` ``0x20000000``
-=================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-SAM-SEND-ENCRYPTED-SAD-data:
-
-KRB5_SAM_SEND_ENCRYPTED_SAD
-===========================
-
-..
-.. data:: KRB5_SAM_SEND_ENCRYPTED_SAD
-..
-
-
-
-
-================================== ======================
-``KRB5_SAM_SEND_ENCRYPTED_SAD`` ``0x40000000``
-================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-SAM-USE-SAD-AS-KEY-data:
-
-KRB5_SAM_USE_SAD_AS_KEY
-=======================
-
-..
-.. data:: KRB5_SAM_USE_SAD_AS_KEY
-..
-
-
-
-
-============================== ======================
-``KRB5_SAM_USE_SAD_AS_KEY`` ``0x80000000``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-MATCH-2ND-TKT-data:
-
-KRB5_TC_MATCH_2ND_TKT
-=====================
-
-..
-.. data:: KRB5_TC_MATCH_2ND_TKT
-..
-
-The second ticket must match.
-
-
-
-============================ ======================
-``KRB5_TC_MATCH_2ND_TKT`` ``0x00000080``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-MATCH-AUTHDATA-data:
-
-KRB5_TC_MATCH_AUTHDATA
-======================
-
-..
-.. data:: KRB5_TC_MATCH_AUTHDATA
-..
-
-The authorization data must match.
-
-
-
-============================= ======================
-``KRB5_TC_MATCH_AUTHDATA`` ``0x00000020``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-MATCH-FLAGS-data:
-
-KRB5_TC_MATCH_FLAGS
-===================
-
-..
-.. data:: KRB5_TC_MATCH_FLAGS
-..
-
-All the flags set in the match credentials must be set.
-
-
-
-========================== ======================
-``KRB5_TC_MATCH_FLAGS`` ``0x00000004``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-MATCH-FLAGS-EXACT-data:
-
-KRB5_TC_MATCH_FLAGS_EXACT
-=========================
-
-..
-.. data:: KRB5_TC_MATCH_FLAGS_EXACT
-..
-
-All the flags must match exactly.
-
-
-
-================================ ======================
-``KRB5_TC_MATCH_FLAGS_EXACT`` ``0x00000010``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-MATCH-IS-SKEY-data:
-
-KRB5_TC_MATCH_IS_SKEY
-=====================
-
-..
-.. data:: KRB5_TC_MATCH_IS_SKEY
-..
-
-The is_skey field must match exactly.
-
-
-
-============================ ======================
-``KRB5_TC_MATCH_IS_SKEY`` ``0x00000002``
-============================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-MATCH-KTYPE-data:
-
-KRB5_TC_MATCH_KTYPE
-===================
-
-..
-.. data:: KRB5_TC_MATCH_KTYPE
-..
-
-The encryption key type must match.
-
-
-
-========================== ======================
-``KRB5_TC_MATCH_KTYPE`` ``0x00000100``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-MATCH-SRV-NAMEONLY-data:
-
-KRB5_TC_MATCH_SRV_NAMEONLY
-==========================
-
-..
-.. data:: KRB5_TC_MATCH_SRV_NAMEONLY
-..
-
-Only the name portion of the principal name must match.
-
-
-
-================================= ======================
-``KRB5_TC_MATCH_SRV_NAMEONLY`` ``0x00000040``
-================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-MATCH-TIMES-data:
-
-KRB5_TC_MATCH_TIMES
-===================
-
-..
-.. data:: KRB5_TC_MATCH_TIMES
-..
-
-The requested lifetime must be at least as great as the time specified.
-
-
-
-========================== ======================
-``KRB5_TC_MATCH_TIMES`` ``0x00000001``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-MATCH-TIMES-EXACT-data:
-
-KRB5_TC_MATCH_TIMES_EXACT
-=========================
-
-..
-.. data:: KRB5_TC_MATCH_TIMES_EXACT
-..
-
-All the time fields must match exactly.
-
-
-
-================================ ======================
-``KRB5_TC_MATCH_TIMES_EXACT`` ``0x00000008``
-================================ ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-NOTICKET-data:
-
-KRB5_TC_NOTICKET
-================
-
-..
-.. data:: KRB5_TC_NOTICKET
-..
-
-
-
-
-======================= ======================
-``KRB5_TC_NOTICKET`` ``0x00000002``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-OPENCLOSE-data:
-
-KRB5_TC_OPENCLOSE
-=================
-
-..
-.. data:: KRB5_TC_OPENCLOSE
-..
-
-Open and close the file for each cache operation.
-
-
-
-======================== ======================
-``KRB5_TC_OPENCLOSE`` ``0x00000001``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TC-SUPPORTED-KTYPES-data:
-
-KRB5_TC_SUPPORTED_KTYPES
-========================
-
-..
-.. data:: KRB5_TC_SUPPORTED_KTYPES
-..
-
-The supported key types must match.
-
-
-
-=============================== ======================
-``KRB5_TC_SUPPORTED_KTYPES`` ``0x00000200``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TGS-NAME-data:
-
-KRB5_TGS_NAME
-=============
-
-..
-.. data:: KRB5_TGS_NAME
-..
-
-
-
-
-==================== ======================
-``KRB5_TGS_NAME`` ``"krbtgt"``
-==================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TGS-NAME-SIZE-data:
-
-KRB5_TGS_NAME_SIZE
-==================
-
-..
-.. data:: KRB5_TGS_NAME_SIZE
-..
-
-
-
-
-========================= ======================
-``KRB5_TGS_NAME_SIZE`` ``6``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TGS-REP-data:
-
-KRB5_TGS_REP
-============
-
-..
-.. data:: KRB5_TGS_REP
-..
-
-Response to TGS request.
-
-
-
-=================== ======================
-``KRB5_TGS_REP`` ``((krb5_msgtype)13)``
-=================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TGS-REQ-data:
-
-KRB5_TGS_REQ
-============
-
-..
-.. data:: KRB5_TGS_REQ
-..
-
-Ticket granting server request.
-
-
-
-=================== ======================
-``KRB5_TGS_REQ`` ``((krb5_msgtype)12)``
-=================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-TKT-CREDS-STEP-FLAG-CONTINUE-data:
-
-KRB5_TKT_CREDS_STEP_FLAG_CONTINUE
-=================================
-
-..
-.. data:: KRB5_TKT_CREDS_STEP_FLAG_CONTINUE
-..
-
-More responses needed.
-
-
-
-======================================== ======================
-``KRB5_TKT_CREDS_STEP_FLAG_CONTINUE`` ``0x1``
-======================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-VERIFY-INIT-CREDS-OPT-AP-REQ-NOFAIL-data:
-
-KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL
-========================================
-
-..
-.. data:: KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL
-..
-
-
-
-
-=============================================== ======================
-``KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL`` ``0x0001``
-=============================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _KRB5-WELLKNOWN-NAMESTR-data:
-
-KRB5_WELLKNOWN_NAMESTR
-======================
-
-..
-.. data:: KRB5_WELLKNOWN_NAMESTR
-..
-
-First component of NT_WELLKNOWN principals.
-
-
-
-============================= ======================
-``KRB5_WELLKNOWN_NAMESTR`` ``"WELLKNOWN"``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _LR-TYPE-INTERPRETATION-MASK-data:
-
-LR_TYPE_INTERPRETATION_MASK
-===========================
-
-..
-.. data:: LR_TYPE_INTERPRETATION_MASK
-..
-
-
-
-
-================================== ======================
-``LR_TYPE_INTERPRETATION_MASK`` ``0x7fff``
-================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _LR-TYPE-THIS-SERVER-ONLY-data:
-
-LR_TYPE_THIS_SERVER_ONLY
-========================
-
-..
-.. data:: LR_TYPE_THIS_SERVER_ONLY
-..
-
-
-
-
-=============================== ======================
-``LR_TYPE_THIS_SERVER_ONLY`` ``0x8000``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _MAX-KEYTAB-NAME-LEN-data:
-
-MAX_KEYTAB_NAME_LEN
-===================
-
-..
-.. data:: MAX_KEYTAB_NAME_LEN
-..
-
-Long enough for MAXPATHLEN + some extra.
-
-
-
-========================== ======================
-``MAX_KEYTAB_NAME_LEN`` ``1100``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _MSEC-DIRBIT-data:
-
-MSEC_DIRBIT
-===========
-
-..
-.. data:: MSEC_DIRBIT
-..
-
-
-
-
-================== ======================
-``MSEC_DIRBIT`` ``0x8000``
-================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _MSEC-VAL-MASK-data:
-
-MSEC_VAL_MASK
-=============
-
-..
-.. data:: MSEC_VAL_MASK
-..
-
-
-
-
-==================== ======================
-``MSEC_VAL_MASK`` ``0x7fff``
-==================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _SALT-TYPE-AFS-LENGTH-data:
-
-SALT_TYPE_AFS_LENGTH
-====================
-
-..
-.. data:: SALT_TYPE_AFS_LENGTH
-..
-
-
-
-
-=========================== ======================
-``SALT_TYPE_AFS_LENGTH`` ``UINT_MAX``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _SALT-TYPE-NO-LENGTH-data:
-
-SALT_TYPE_NO_LENGTH
-===================
-
-..
-.. data:: SALT_TYPE_NO_LENGTH
-..
-
-
-
-
-========================== ======================
-``SALT_TYPE_NO_LENGTH`` ``UINT_MAX``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _THREEPARAMOPEN-data:
-
-THREEPARAMOPEN
-==============
-
-..
-.. data:: THREEPARAMOPEN
-..
-
-
-
-
-============================== ======================
-``THREEPARAMOPEN (x, y, z)`` ``open(x,y,z)``
-============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-ANONYMOUS-data:
-
-TKT_FLG_ANONYMOUS
-=================
-
-..
-.. data:: TKT_FLG_ANONYMOUS
-..
-
-
-
-
-======================== ======================
-``TKT_FLG_ANONYMOUS`` ``0x00008000``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-ENC-PA-REP-data:
-
-TKT_FLG_ENC_PA_REP
-==================
-
-..
-.. data:: TKT_FLG_ENC_PA_REP
-..
-
-
-
-
-========================= ======================
-``TKT_FLG_ENC_PA_REP`` ``0x00010000``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-FORWARDABLE-data:
-
-TKT_FLG_FORWARDABLE
-===================
-
-..
-.. data:: TKT_FLG_FORWARDABLE
-..
-
-
-
-
-========================== ======================
-``TKT_FLG_FORWARDABLE`` ``0x40000000``
-========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-FORWARDED-data:
-
-TKT_FLG_FORWARDED
-=================
-
-..
-.. data:: TKT_FLG_FORWARDED
-..
-
-
-
-
-======================== ======================
-``TKT_FLG_FORWARDED`` ``0x20000000``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-HW-AUTH-data:
-
-TKT_FLG_HW_AUTH
-===============
-
-..
-.. data:: TKT_FLG_HW_AUTH
-..
-
-
-
-
-====================== ======================
-``TKT_FLG_HW_AUTH`` ``0x00100000``
-====================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-INITIAL-data:
-
-TKT_FLG_INITIAL
-===============
-
-..
-.. data:: TKT_FLG_INITIAL
-..
-
-
-
-
-====================== ======================
-``TKT_FLG_INITIAL`` ``0x00400000``
-====================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-INVALID-data:
-
-TKT_FLG_INVALID
-===============
-
-..
-.. data:: TKT_FLG_INVALID
-..
-
-
-
-
-====================== ======================
-``TKT_FLG_INVALID`` ``0x01000000``
-====================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-MAY-POSTDATE-data:
-
-TKT_FLG_MAY_POSTDATE
-====================
-
-..
-.. data:: TKT_FLG_MAY_POSTDATE
-..
-
-
-
-
-=========================== ======================
-``TKT_FLG_MAY_POSTDATE`` ``0x04000000``
-=========================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-OK-AS-DELEGATE-data:
-
-TKT_FLG_OK_AS_DELEGATE
-======================
-
-..
-.. data:: TKT_FLG_OK_AS_DELEGATE
-..
-
-
-
-
-============================= ======================
-``TKT_FLG_OK_AS_DELEGATE`` ``0x00040000``
-============================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-POSTDATED-data:
-
-TKT_FLG_POSTDATED
-=================
-
-..
-.. data:: TKT_FLG_POSTDATED
-..
-
-
-
-
-======================== ======================
-``TKT_FLG_POSTDATED`` ``0x02000000``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-PRE-AUTH-data:
-
-TKT_FLG_PRE_AUTH
-================
-
-..
-.. data:: TKT_FLG_PRE_AUTH
-..
-
-
-
-
-======================= ======================
-``TKT_FLG_PRE_AUTH`` ``0x00200000``
-======================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-PROXIABLE-data:
-
-TKT_FLG_PROXIABLE
-=================
-
-..
-.. data:: TKT_FLG_PROXIABLE
-..
-
-
-
-
-======================== ======================
-``TKT_FLG_PROXIABLE`` ``0x10000000``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-PROXY-data:
-
-TKT_FLG_PROXY
-=============
-
-..
-.. data:: TKT_FLG_PROXY
-..
-
-
-
-
-==================== ======================
-``TKT_FLG_PROXY`` ``0x08000000``
-==================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-RENEWABLE-data:
-
-TKT_FLG_RENEWABLE
-=================
-
-..
-.. data:: TKT_FLG_RENEWABLE
-..
-
-
-
-
-======================== ======================
-``TKT_FLG_RENEWABLE`` ``0x00800000``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _TKT-FLG-TRANSIT-POLICY-CHECKED-data:
-
-TKT_FLG_TRANSIT_POLICY_CHECKED
-==============================
-
-..
-.. data:: TKT_FLG_TRANSIT_POLICY_CHECKED
-..
-
-
-
-
-===================================== ======================
-``TKT_FLG_TRANSIT_POLICY_CHECKED`` ``0x00080000``
-===================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _VALID-INT-BITS-data:
-
-VALID_INT_BITS
-==============
-
-..
-.. data:: VALID_INT_BITS
-..
-
-
-
-
-===================== ======================
-``VALID_INT_BITS`` ``INT_MAX``
-===================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _VALID-UINT-BITS-data:
-
-VALID_UINT_BITS
-===============
-
-..
-.. data:: VALID_UINT_BITS
-..
-
-
-
-
-====================== ======================
-``VALID_UINT_BITS`` ``UINT_MAX``
-====================== ======================
+++ /dev/null
-krb5 simple macros
-=========================
-
-Public
--------
-
-.. toctree::
- :maxdepth: 1
-
- ADDRTYPE_ADDRPORT.rst
- ADDRTYPE_CHAOS.rst
- ADDRTYPE_DDP.rst
- ADDRTYPE_INET.rst
- ADDRTYPE_INET6.rst
- ADDRTYPE_IPPORT.rst
- ADDRTYPE_ISO.rst
- ADDRTYPE_IS_LOCAL.rst
- ADDRTYPE_NETBIOS.rst
- ADDRTYPE_XNS.rst
- AD_TYPE_EXTERNAL.rst
- AD_TYPE_FIELD_TYPE_MASK.rst
- AD_TYPE_REGISTERED.rst
- AD_TYPE_RESERVED.rst
- AP_OPTS_ETYPE_NEGOTIATION.rst
- AP_OPTS_MUTUAL_REQUIRED.rst
- AP_OPTS_RESERVED.rst
- AP_OPTS_USE_SESSION_KEY.rst
- AP_OPTS_USE_SUBKEY.rst
- AP_OPTS_WIRE_MASK.rst
- CKSUMTYPE_CMAC_CAMELLIA128.rst
- CKSUMTYPE_CMAC_CAMELLIA256.rst
- CKSUMTYPE_CRC32.rst
- CKSUMTYPE_DESCBC.rst
- CKSUMTYPE_HMAC_MD5_ARCFOUR.rst
- CKSUMTYPE_HMAC_SHA1_96_AES128.rst
- CKSUMTYPE_HMAC_SHA1_96_AES256.rst
- CKSUMTYPE_HMAC_SHA256_128_AES128.rst
- CKSUMTYPE_HMAC_SHA384_192_AES256.rst
- CKSUMTYPE_HMAC_SHA1_DES3.rst
- CKSUMTYPE_MD5_HMAC_ARCFOUR.rst
- CKSUMTYPE_NIST_SHA.rst
- CKSUMTYPE_RSA_MD4.rst
- CKSUMTYPE_RSA_MD4_DES.rst
- CKSUMTYPE_RSA_MD5.rst
- CKSUMTYPE_RSA_MD5_DES.rst
- CKSUMTYPE_SHA1.rst
- ENCTYPE_AES128_CTS_HMAC_SHA1_96.rst
- ENCTYPE_AES128_CTS_HMAC_SHA256_128.rst
- ENCTYPE_AES256_CTS_HMAC_SHA1_96.rst
- ENCTYPE_AES256_CTS_HMAC_SHA384_192.rst
- ENCTYPE_ARCFOUR_HMAC.rst
- ENCTYPE_ARCFOUR_HMAC_EXP.rst
- ENCTYPE_CAMELLIA128_CTS_CMAC.rst
- ENCTYPE_CAMELLIA256_CTS_CMAC.rst
- ENCTYPE_DES3_CBC_ENV.rst
- ENCTYPE_DES3_CBC_RAW.rst
- ENCTYPE_DES3_CBC_SHA.rst
- ENCTYPE_DES3_CBC_SHA1.rst
- ENCTYPE_DES_CBC_CRC.rst
- ENCTYPE_DES_CBC_MD4.rst
- ENCTYPE_DES_CBC_MD5.rst
- ENCTYPE_DES_CBC_RAW.rst
- ENCTYPE_DES_HMAC_SHA1.rst
- ENCTYPE_DSA_SHA1_CMS.rst
- ENCTYPE_MD5_RSA_CMS.rst
- ENCTYPE_NULL.rst
- ENCTYPE_RC2_CBC_ENV.rst
- ENCTYPE_RSA_ENV.rst
- ENCTYPE_RSA_ES_OAEP_ENV.rst
- ENCTYPE_SHA1_RSA_CMS.rst
- ENCTYPE_UNKNOWN.rst
- KDC_OPT_ALLOW_POSTDATE.rst
- KDC_OPT_CANONICALIZE.rst
- KDC_OPT_CNAME_IN_ADDL_TKT.rst
- KDC_OPT_DISABLE_TRANSITED_CHECK.rst
- KDC_OPT_ENC_TKT_IN_SKEY.rst
- KDC_OPT_FORWARDABLE.rst
- KDC_OPT_FORWARDED.rst
- KDC_OPT_POSTDATED.rst
- KDC_OPT_PROXIABLE.rst
- KDC_OPT_PROXY.rst
- KDC_OPT_RENEW.rst
- KDC_OPT_RENEWABLE.rst
- KDC_OPT_RENEWABLE_OK.rst
- KDC_OPT_REQUEST_ANONYMOUS.rst
- KDC_OPT_VALIDATE.rst
- KDC_TKT_COMMON_MASK.rst
- KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.rst
- KRB5_ANONYMOUS_PRINCSTR.rst
- KRB5_ANONYMOUS_REALMSTR.rst
- KRB5_AP_REP.rst
- KRB5_AP_REQ.rst
- KRB5_AS_REP.rst
- KRB5_AS_REQ.rst
- KRB5_AUTHDATA_AND_OR.rst
- KRB5_AUTHDATA_AP_OPTIONS.rst
- KRB5_AUTHDATA_AUTH_INDICATOR.rst
- KRB5_AUTHDATA_CAMMAC.rst
- KRB5_AUTHDATA_ETYPE_NEGOTIATION.rst
- KRB5_AUTHDATA_FX_ARMOR.rst
- KRB5_AUTHDATA_IF_RELEVANT.rst
- KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.rst
- KRB5_AUTHDATA_KDC_ISSUED.rst
- KRB5_AUTHDATA_MANDATORY_FOR_KDC.rst
- KRB5_AUTHDATA_OSF_DCE.rst
- KRB5_AUTHDATA_SESAME.rst
- KRB5_AUTHDATA_SIGNTICKET.rst
- KRB5_AUTHDATA_WIN2K_PAC.rst
- KRB5_AUTH_CONTEXT_DO_SEQUENCE.rst
- KRB5_AUTH_CONTEXT_DO_TIME.rst
- KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.rst
- KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.rst
- KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.rst
- KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.rst
- KRB5_AUTH_CONTEXT_PERMIT_ALL.rst
- KRB5_AUTH_CONTEXT_RET_SEQUENCE.rst
- KRB5_AUTH_CONTEXT_RET_TIME.rst
- KRB5_AUTH_CONTEXT_USE_SUBKEY.rst
- KRB5_CRED.rst
- KRB5_CRYPTO_TYPE_CHECKSUM.rst
- KRB5_CRYPTO_TYPE_DATA.rst
- KRB5_CRYPTO_TYPE_EMPTY.rst
- KRB5_CRYPTO_TYPE_HEADER.rst
- KRB5_CRYPTO_TYPE_PADDING.rst
- KRB5_CRYPTO_TYPE_SIGN_ONLY.rst
- KRB5_CRYPTO_TYPE_STREAM.rst
- KRB5_CRYPTO_TYPE_TRAILER.rst
- KRB5_CYBERSAFE_SECUREID.rst
- KRB5_DOMAIN_X500_COMPRESS.rst
- KRB5_ENCPADATA_REQ_ENC_PA_REP.rst
- KRB5_ERROR.rst
- KRB5_FAST_REQUIRED.rst
- KRB5_GC_CACHED.rst
- KRB5_GC_CANONICALIZE.rst
- KRB5_GC_CONSTRAINED_DELEGATION.rst
- KRB5_GC_FORWARDABLE.rst
- KRB5_GC_NO_STORE.rst
- KRB5_GC_NO_TRANSIT_CHECK.rst
- KRB5_GC_USER_USER.rst
- KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.rst
- KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.rst
- KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.rst
- KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.rst
- KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.rst
- KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.rst
- KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.rst
- KRB5_GET_INIT_CREDS_OPT_PROXIABLE.rst
- KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.rst
- KRB5_GET_INIT_CREDS_OPT_SALT.rst
- KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.rst
- KRB5_INIT_CONTEXT_SECURE.rst
- KRB5_INIT_CONTEXT_KDC.rst
- KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.rst
- KRB5_INT16_MAX.rst
- KRB5_INT16_MIN.rst
- KRB5_INT32_MAX.rst
- KRB5_INT32_MIN.rst
- KRB5_KEYUSAGE_AD_ITE.rst
- KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.rst
- KRB5_KEYUSAGE_AD_MTE.rst
- KRB5_KEYUSAGE_AD_SIGNEDPATH.rst
- KRB5_KEYUSAGE_APP_DATA_CKSUM.rst
- KRB5_KEYUSAGE_APP_DATA_ENCRYPT.rst
- KRB5_KEYUSAGE_AP_REP_ENCPART.rst
- KRB5_KEYUSAGE_AP_REQ_AUTH.rst
- KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.rst
- KRB5_KEYUSAGE_AS_REP_ENCPART.rst
- KRB5_KEYUSAGE_AS_REQ.rst
- KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.rst
- KRB5_KEYUSAGE_CAMMAC.rst
- KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.rst
- KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.rst
- KRB5_KEYUSAGE_FAST_ENC.rst
- KRB5_KEYUSAGE_FAST_FINISHED.rst
- KRB5_KEYUSAGE_FAST_REP.rst
- KRB5_KEYUSAGE_FAST_REQ_CHKSUM.rst
- KRB5_KEYUSAGE_GSS_TOK_MIC.rst
- KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.rst
- KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.rst
- KRB5_KEYUSAGE_IAKERB_FINISHED.rst
- KRB5_KEYUSAGE_KDC_REP_TICKET.rst
- KRB5_KEYUSAGE_KRB_CRED_ENCPART.rst
- KRB5_KEYUSAGE_KRB_ERROR_CKSUM.rst
- KRB5_KEYUSAGE_KRB_PRIV_ENCPART.rst
- KRB5_KEYUSAGE_KRB_SAFE_CKSUM.rst
- KRB5_KEYUSAGE_PA_AS_FRESHNESS.rst
- KRB5_KEYUSAGE_PA_FX_COOKIE.rst
- KRB5_KEYUSAGE_PA_OTP_REQUEST.rst
- KRB5_KEYUSAGE_PA_PKINIT_KX.rst
- KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.rst
- KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.rst
- KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.rst
- KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.rst
- KRB5_KEYUSAGE_PA_SAM_RESPONSE.rst
- KRB5_KEYUSAGE_SPAKE.rst
- KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.rst
- KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.rst
- KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.rst
- KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.rst
- KRB5_KEYUSAGE_TGS_REQ_AUTH.rst
- KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.rst
- KRB5_KPASSWD_ACCESSDENIED.rst
- KRB5_KPASSWD_AUTHERROR.rst
- KRB5_KPASSWD_BAD_VERSION.rst
- KRB5_KPASSWD_HARDERROR.rst
- KRB5_KPASSWD_INITIAL_FLAG_NEEDED.rst
- KRB5_KPASSWD_MALFORMED.rst
- KRB5_KPASSWD_SOFTERROR.rst
- KRB5_KPASSWD_SUCCESS.rst
- KRB5_LRQ_ALL_ACCT_EXPTIME.rst
- KRB5_LRQ_ALL_LAST_INITIAL.rst
- KRB5_LRQ_ALL_LAST_RENEWAL.rst
- KRB5_LRQ_ALL_LAST_REQ.rst
- KRB5_LRQ_ALL_LAST_TGT.rst
- KRB5_LRQ_ALL_LAST_TGT_ISSUED.rst
- KRB5_LRQ_ALL_PW_EXPTIME.rst
- KRB5_LRQ_NONE.rst
- KRB5_LRQ_ONE_ACCT_EXPTIME.rst
- KRB5_LRQ_ONE_LAST_INITIAL.rst
- KRB5_LRQ_ONE_LAST_RENEWAL.rst
- KRB5_LRQ_ONE_LAST_REQ.rst
- KRB5_LRQ_ONE_LAST_TGT.rst
- KRB5_LRQ_ONE_LAST_TGT_ISSUED.rst
- KRB5_LRQ_ONE_PW_EXPTIME.rst
- KRB5_NT_ENTERPRISE_PRINCIPAL.rst
- KRB5_NT_ENT_PRINCIPAL_AND_ID.rst
- KRB5_NT_MS_PRINCIPAL.rst
- KRB5_NT_MS_PRINCIPAL_AND_ID.rst
- KRB5_NT_PRINCIPAL.rst
- KRB5_NT_SMTP_NAME.rst
- KRB5_NT_SRV_HST.rst
- KRB5_NT_SRV_INST.rst
- KRB5_NT_SRV_XHST.rst
- KRB5_NT_UID.rst
- KRB5_NT_UNKNOWN.rst
- KRB5_NT_WELLKNOWN.rst
- KRB5_NT_X500_PRINCIPAL.rst
- KRB5_PAC_ATTRIBUTES_INFO.rst
- KRB5_PAC_CLIENT_INFO.rst
- KRB5_PAC_CLIENT_CLAIMS.rst
- KRB5_PAC_CREDENTIALS_INFO.rst
- KRB5_PAC_DELEGATION_INFO.rst
- KRB5_PAC_DEVICE_CLAIMS.rst
- KRB5_PAC_DEVICE_INFO.rst
- KRB5_PAC_LOGON_INFO.rst
- KRB5_PAC_PRIVSVR_CHECKSUM.rst
- KRB5_PAC_REQUESTOR.rst
- KRB5_PAC_SERVER_CHECKSUM.rst
- KRB5_PAC_TICKET_CHECKSUM.rst
- KRB5_PAC_UPN_DNS_INFO.rst
- KRB5_PADATA_AFS3_SALT.rst
- KRB5_PADATA_AP_REQ.rst
- KRB5_PADATA_AS_CHECKSUM.rst
- KRB5_PADATA_AS_FRESHNESS.rst
- KRB5_PADATA_ENCRYPTED_CHALLENGE.rst
- KRB5_PADATA_ENC_SANDIA_SECURID.rst
- KRB5_PADATA_ENC_TIMESTAMP.rst
- KRB5_PADATA_ENC_UNIX_TIME.rst
- KRB5_PADATA_ETYPE_INFO.rst
- KRB5_PADATA_ETYPE_INFO2.rst
- KRB5_PADATA_FOR_USER.rst
- KRB5_PADATA_FX_COOKIE.rst
- KRB5_PADATA_FX_ERROR.rst
- KRB5_PADATA_FX_FAST.rst
- KRB5_PADATA_GET_FROM_TYPED_DATA.rst
- KRB5_PADATA_NONE.rst
- KRB5_PADATA_OSF_DCE.rst
- KRB5_PADATA_OTP_CHALLENGE.rst
- KRB5_PADATA_OTP_PIN_CHANGE.rst
- KRB5_PADATA_OTP_REQUEST.rst
- KRB5_PADATA_PAC_OPTIONS.rst
- KRB5_PADATA_PAC_REQUEST.rst
- KRB5_PADATA_PKINIT_KX.rst
- KRB5_PADATA_PK_AS_REP.rst
- KRB5_PADATA_PK_AS_REP_OLD.rst
- KRB5_PADATA_PK_AS_REQ.rst
- KRB5_PADATA_PK_AS_REQ_OLD.rst
- KRB5_PADATA_PW_SALT.rst
- KRB5_PADATA_REFERRAL.rst
- KRB5_PADATA_S4U_X509_USER.rst
- KRB5_PADATA_SAM_CHALLENGE.rst
- KRB5_PADATA_SAM_CHALLENGE_2.rst
- KRB5_PADATA_SAM_REDIRECT.rst
- KRB5_PADATA_SAM_RESPONSE.rst
- KRB5_PADATA_SAM_RESPONSE_2.rst
- KRB5_PADATA_SESAME.rst
- KRB5_PADATA_SPAKE.rst
- KRB5_PADATA_REDHAT_IDP_OAUTH2.rst
- KRB5_PADATA_SVR_REFERRAL_INFO.rst
- KRB5_PADATA_TGS_REQ.rst
- KRB5_PADATA_USE_SPECIFIED_KVNO.rst
- KRB5_PRINCIPAL_COMPARE_CASEFOLD.rst
- KRB5_PRINCIPAL_COMPARE_ENTERPRISE.rst
- KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.rst
- KRB5_PRINCIPAL_COMPARE_UTF8.rst
- KRB5_PRINCIPAL_PARSE_ENTERPRISE.rst
- KRB5_PRINCIPAL_PARSE_IGNORE_REALM.rst
- KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.rst
- KRB5_PRINCIPAL_PARSE_NO_REALM.rst
- KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.rst
- KRB5_PRINCIPAL_UNPARSE_DISPLAY.rst
- KRB5_PRINCIPAL_UNPARSE_NO_REALM.rst
- KRB5_PRINCIPAL_UNPARSE_SHORT.rst
- KRB5_PRIV.rst
- KRB5_PROMPT_TYPE_NEW_PASSWORD.rst
- KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.rst
- KRB5_PROMPT_TYPE_PASSWORD.rst
- KRB5_PROMPT_TYPE_PREAUTH.rst
- KRB5_PVNO.rst
- KRB5_REALM_BRANCH_CHAR.rst
- KRB5_RECVAUTH_BADAUTHVERS.rst
- KRB5_RECVAUTH_SKIP_VERSION.rst
- KRB5_REFERRAL_REALM.rst
- KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.rst
- KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.rst
- KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.rst
- KRB5_RESPONDER_QUESTION_PKINIT.rst
- KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.rst
- KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.rst
- KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.rst
- KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.rst
- KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.rst
- KRB5_RESPONDER_OTP_FORMAT_DECIMAL.rst
- KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.rst
- KRB5_RESPONDER_QUESTION_OTP.rst
- KRB5_RESPONDER_QUESTION_PASSWORD.rst
- KRB5_SAFE.rst
- KRB5_SAM_MUST_PK_ENCRYPT_SAD.rst
- KRB5_SAM_SEND_ENCRYPTED_SAD.rst
- KRB5_SAM_USE_SAD_AS_KEY.rst
- KRB5_TC_MATCH_2ND_TKT.rst
- KRB5_TC_MATCH_AUTHDATA.rst
- KRB5_TC_MATCH_FLAGS.rst
- KRB5_TC_MATCH_FLAGS_EXACT.rst
- KRB5_TC_MATCH_IS_SKEY.rst
- KRB5_TC_MATCH_KTYPE.rst
- KRB5_TC_MATCH_SRV_NAMEONLY.rst
- KRB5_TC_MATCH_TIMES.rst
- KRB5_TC_MATCH_TIMES_EXACT.rst
- KRB5_TC_NOTICKET.rst
- KRB5_TC_OPENCLOSE.rst
- KRB5_TC_SUPPORTED_KTYPES.rst
- KRB5_TGS_NAME.rst
- KRB5_TGS_NAME_SIZE.rst
- KRB5_TGS_REP.rst
- KRB5_TGS_REQ.rst
- KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.rst
- KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.rst
- KRB5_WELLKNOWN_NAMESTR.rst
- LR_TYPE_INTERPRETATION_MASK.rst
- LR_TYPE_THIS_SERVER_ONLY.rst
- MAX_KEYTAB_NAME_LEN.rst
- MSEC_DIRBIT.rst
- MSEC_VAL_MASK.rst
- SALT_TYPE_AFS_LENGTH.rst
- SALT_TYPE_NO_LENGTH.rst
- THREEPARAMOPEN.rst
- TKT_FLG_ANONYMOUS.rst
- TKT_FLG_ENC_PA_REP.rst
- TKT_FLG_FORWARDABLE.rst
- TKT_FLG_FORWARDED.rst
- TKT_FLG_HW_AUTH.rst
- TKT_FLG_INITIAL.rst
- TKT_FLG_INVALID.rst
- TKT_FLG_MAY_POSTDATE.rst
- TKT_FLG_OK_AS_DELEGATE.rst
- TKT_FLG_POSTDATED.rst
- TKT_FLG_PRE_AUTH.rst
- TKT_FLG_PROXIABLE.rst
- TKT_FLG_PROXY.rst
- TKT_FLG_RENEWABLE.rst
- TKT_FLG_TRANSIT_POLICY_CHECKED.rst
- VALID_INT_BITS.rst
- VALID_UINT_BITS.rst
- krb5_const.rst
- krb5_princ_component.rst
- krb5_princ_name.rst
- krb5_princ_realm.rst
- krb5_princ_set_realm.rst
- krb5_princ_set_realm_data.rst
- krb5_princ_set_realm_length.rst
- krb5_princ_size.rst
- krb5_princ_type.rst
- krb5_roundup.rst
- krb5_x.rst
- krb5_xc.rst
-
-Deprecated macros
-------------------------------
-
-.. toctree::
- :maxdepth: 1
-
- krb524_convert_creds_kdc.rst
- krb524_init_ets.rst
+++ /dev/null
-.. highlight:: c
-
-.. _krb524-convert-creds-kdc-data:
-
-krb524_convert_creds_kdc
-========================
-
-..
-.. data:: krb524_convert_creds_kdc
-..
-
-
-
-
-=============================== ======================
-``krb524_convert_creds_kdc`` ``krb5_524_convert_creds``
-=============================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb524-init-ets-data:
-
-krb524_init_ets
-===============
-
-..
-.. data:: krb524_init_ets
-..
-
-
-
-
-========================= ======================
-``krb524_init_ets (x)`` ``(0)``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-const-data:
-
-krb5_const
-==========
-
-..
-.. data:: krb5_const
-..
-
-
-
-
-================= ======================
-``krb5_const`` ``const``
-================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-princ-component-data:
-
-krb5_princ_component
-====================
-
-..
-.. data:: krb5_princ_component
-..
-
-
-
-
-============================================== ======================
-``krb5_princ_component (context, princ, i)`` ``(((i) < krb5_princ_size(context, princ)) ? (princ)->data + (i) : NULL)``
-============================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-princ-name-data:
-
-krb5_princ_name
-===============
-
-..
-.. data:: krb5_princ_name
-..
-
-
-
-
-====================================== ======================
-``krb5_princ_name (context, princ)`` ``(princ)->data``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-princ-realm-data:
-
-krb5_princ_realm
-================
-
-..
-.. data:: krb5_princ_realm
-..
-
-
-
-
-======================================= ======================
-``krb5_princ_realm (context, princ)`` ``(&(princ)->realm)``
-======================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-princ-set-realm-data:
-
-krb5_princ_set_realm
-====================
-
-..
-.. data:: krb5_princ_set_realm
-..
-
-
-
-
-================================================== ======================
-``krb5_princ_set_realm (context, princ, value)`` ``((princ)->realm = *(value))``
-================================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-princ-set-realm-data-data:
-
-krb5_princ_set_realm_data
-=========================
-
-..
-.. data:: krb5_princ_set_realm_data
-..
-
-
-
-
-======================================================= ======================
-``krb5_princ_set_realm_data (context, princ, value)`` ``(princ)->realm.data = (value)``
-======================================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-princ-set-realm-length-data:
-
-krb5_princ_set_realm_length
-===========================
-
-..
-.. data:: krb5_princ_set_realm_length
-..
-
-
-
-
-========================================================= ======================
-``krb5_princ_set_realm_length (context, princ, value)`` ``(princ)->realm.length = (value)``
-========================================================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-princ-size-data:
-
-krb5_princ_size
-===============
-
-..
-.. data:: krb5_princ_size
-..
-
-
-
-
-====================================== ======================
-``krb5_princ_size (context, princ)`` ``(princ)->length``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-princ-type-data:
-
-krb5_princ_type
-===============
-
-..
-.. data:: krb5_princ_type
-..
-
-
-
-
-====================================== ======================
-``krb5_princ_type (context, princ)`` ``(princ)->type``
-====================================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-roundup-data:
-
-krb5_roundup
-============
-
-..
-.. data:: krb5_roundup
-..
-
-
-
-
-========================= ======================
-``krb5_roundup (x, y)`` ``((((x) + (y) - 1)/(y))*(y))``
-========================= ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-x-data:
-
-krb5_x
-======
-
-..
-.. data:: krb5_x
-..
-
-
-
-
-======================== ======================
-``krb5_x (ptr, args)`` ``((ptr)?((*(ptr)) args):(abort(),1))``
-======================== ======================
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-xc-data:
-
-krb5_xc
-=======
-
-..
-.. data:: krb5_xc
-..
-
-
-
-
-========================= ======================
-``krb5_xc (ptr, args)`` ``((ptr)?((*(ptr)) args):(abort(),(char*)0))``
-========================= ======================
+++ /dev/null
-krb5 types and structures
-=========================
-
-Public
--------
-
-.. toctree::
- :maxdepth: 1
-
- krb5_address.rst
- krb5_addrtype.rst
- krb5_ap_req.rst
- krb5_ap_rep.rst
- krb5_ap_rep_enc_part.rst
- krb5_authdata.rst
- krb5_authdatatype.rst
- krb5_authenticator.rst
- krb5_boolean.rst
- krb5_checksum.rst
- krb5_const_pointer.rst
- krb5_const_principal.rst
- krb5_cred.rst
- krb5_cred_enc_part.rst
- krb5_cred_info.rst
- krb5_creds.rst
- krb5_crypto_iov.rst
- krb5_cryptotype.rst
- krb5_data.rst
- krb5_deltat.rst
- krb5_enc_data.rst
- krb5_enc_kdc_rep_part.rst
- krb5_enc_tkt_part.rst
- krb5_encrypt_block.rst
- krb5_enctype.rst
- krb5_error.rst
- krb5_error_code.rst
- krb5_expire_callback_func.rst
- krb5_flags.rst
- krb5_get_init_creds_opt.rst
- krb5_gic_opt_pa_data.rst
- krb5_int16.rst
- krb5_int32.rst
- krb5_kdc_rep.rst
- krb5_kdc_req.rst
- krb5_keyblock.rst
- krb5_keytab_entry.rst
- krb5_keyusage.rst
- krb5_kt_cursor.rst
- krb5_kvno.rst
- krb5_last_req_entry.rst
- krb5_magic.rst
- krb5_mk_req_checksum_func.rst
- krb5_msgtype.rst
- krb5_octet.rst
- krb5_pa_pac_req.rst
- krb5_pa_server_referral_data.rst
- krb5_pa_svr_referral_data.rst
- krb5_pa_data.rst
- krb5_pointer.rst
- krb5_post_recv_fn.rst
- krb5_pre_send_fn.rst
- krb5_preauthtype.rst
- krb5_principal.rst
- krb5_principal_data.rst
- krb5_prompt.rst
- krb5_prompt_type.rst
- krb5_prompter_fct.rst
- krb5_pwd_data.rst
- krb5_responder_context.rst
- krb5_responder_fn.rst
- krb5_responder_otp_challenge.rst
- krb5_responder_otp_tokeninfo.rst
- krb5_responder_pkinit_challenge.rst
- krb5_responder_pkinit_identity.rst
- krb5_response.rst
- krb5_replay_data.rst
- krb5_ticket.rst
- krb5_ticket_times.rst
- krb5_timestamp.rst
- krb5_tkt_authent.rst
- krb5_trace_callback.rst
- krb5_trace_info.rst
- krb5_transited.rst
- krb5_typed_data.rst
- krb5_ui_2.rst
- krb5_ui_4.rst
- krb5_verify_init_creds_opt.rst
- passwd_phrase_element.rst
-
-
-Internal
----------
-
-.. toctree::
- :maxdepth: 1
-
- krb5_auth_context.rst
- krb5_cksumtype
- krb5_context.rst
- krb5_cc_cursor.rst
- krb5_ccache.rst
- krb5_cccol_cursor.rst
- krb5_init_creds_context.rst
- krb5_key.rst
- krb5_keytab.rst
- krb5_pac.rst
- krb5_rcache.rst
- krb5_tkt_creds_context.rst
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-address-struct:
-
-krb5_address
-============
-
-..
-.. c:type:: krb5_address
-..
-
-Structure for address.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_address krb5_address
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_address.magic
-
-
-
-
-.. c:member:: krb5_addrtype krb5_address.addrtype
-
-
-
-
-.. c:member:: unsigned int krb5_address.length
-
-
-
-
-.. c:member:: krb5_octet * krb5_address.contents
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-addrtype-struct:
-
-krb5_addrtype
-=============
-
-..
-.. c:type:: krb5_addrtype
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_addrtype
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-ap-rep-struct:
-
-krb5_ap_rep
-===========
-
-..
-.. c:type:: krb5_ap_rep
-..
-
-C representaton of AP-REP message.
-
-The server's response to a client's request for mutual authentication.
-
-Declaration
-------------
-
-typedef struct _krb5_ap_rep krb5_ap_rep
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_ap_rep.magic
-
-
-
-
-.. c:member:: krb5_enc_data krb5_ap_rep.enc_part
-
- Ciphertext of ApRepEncPart.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-ap-rep-enc-part-struct:
-
-krb5_ap_rep_enc_part
-====================
-
-..
-.. c:type:: krb5_ap_rep_enc_part
-..
-
-Cleartext that is encrypted and put into :c:type:`_krb5_ap_rep` .
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_ap_rep_enc_part krb5_ap_rep_enc_part
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_ap_rep_enc_part.magic
-
-
-
-
-.. c:member:: krb5_timestamp krb5_ap_rep_enc_part.ctime
-
- Client time, seconds portion.
-
-
-.. c:member:: krb5_int32 krb5_ap_rep_enc_part.cusec
-
- Client time, microseconds portion.
-
-
-.. c:member:: krb5_keyblock * krb5_ap_rep_enc_part.subkey
-
- Subkey (optional)
-
-
-.. c:member:: krb5_ui_4 krb5_ap_rep_enc_part.seq_number
-
- Sequence number.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-ap-req-struct:
-
-krb5_ap_req
-===========
-
-..
-.. c:type:: krb5_ap_req
-..
-
-Authentication header.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_ap_req krb5_ap_req
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_ap_req.magic
-
-
-
-
-.. c:member:: krb5_flags krb5_ap_req.ap_options
-
- Requested options.
-
-
-.. c:member:: krb5_ticket * krb5_ap_req.ticket
-
- Ticket.
-
-
-.. c:member:: krb5_enc_data krb5_ap_req.authenticator
-
- Encrypted authenticator.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-auth-context-struct:
-
-krb5_auth_context
-=================
-
-..
-.. c:type:: krb5_auth_context
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_auth_context\* krb5_auth_context
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-authdata-struct:
-
-krb5_authdata
-=============
-
-..
-.. c:type:: krb5_authdata
-..
-
-Structure for auth data.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_authdata krb5_authdata
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_authdata.magic
-
-
-
-
-.. c:member:: krb5_authdatatype krb5_authdata.ad_type
-
- ADTYPE.
-
-
-.. c:member:: unsigned int krb5_authdata.length
-
- Length of data.
-
-
-.. c:member:: krb5_octet * krb5_authdata.contents
-
- Data.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-authdatatype-struct:
-
-krb5_authdatatype
-=================
-
-..
-.. c:type:: krb5_authdatatype
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_authdatatype
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-authenticator-struct:
-
-krb5_authenticator
-==================
-
-..
-.. c:type:: krb5_authenticator
-..
-
-Ticket authenticator.
-
-The C representation of an unencrypted authenticator.
-
-Declaration
-------------
-
-typedef struct _krb5_authenticator krb5_authenticator
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_authenticator.magic
-
-
-
-
-.. c:member:: krb5_principal krb5_authenticator.client
-
- client name/realm
-
-
-.. c:member:: krb5_checksum * krb5_authenticator.checksum
-
- checksum, includes type, optional
-
-
-.. c:member:: krb5_int32 krb5_authenticator.cusec
-
- client usec portion
-
-
-.. c:member:: krb5_timestamp krb5_authenticator.ctime
-
- client sec portion
-
-
-.. c:member:: krb5_keyblock * krb5_authenticator.subkey
-
- true session key, optional
-
-
-.. c:member:: krb5_ui_4 krb5_authenticator.seq_number
-
- sequence #, optional
-
-
-.. c:member:: krb5_authdata ** krb5_authenticator.authorization_data
-
- authoriazation data
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-boolean-struct:
-
-krb5_boolean
-============
-
-..
-.. c:type:: krb5_boolean
-..
-
-
-
-
-Declaration
-------------
-
-typedef unsigned int krb5_boolean
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-cc-cursor-struct:
-
-krb5_cc_cursor
-==============
-
-..
-.. c:type:: krb5_cc_cursor
-..
-
-Cursor for sequential lookup.
-
-
-
-Declaration
-------------
-
-typedef krb5_pointer krb5_cc_cursor
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-ccache-struct:
-
-krb5_ccache
-===========
-
-..
-.. c:type:: krb5_ccache
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_ccache\* krb5_ccache
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-cccol-cursor-struct:
-
-krb5_cccol_cursor
-=================
-
-..
-.. c:type:: krb5_cccol_cursor
-..
-
-Cursor for iterating over all ccaches.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_cccol_cursor\* krb5_cccol_cursor
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-checksum-struct:
-
-krb5_checksum
-=============
-
-..
-.. c:type:: krb5_checksum
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_checksum krb5_checksum
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_checksum.magic
-
-
-
-
-.. c:member:: krb5_cksumtype krb5_checksum.checksum_type
-
-
-
-
-.. c:member:: unsigned int krb5_checksum.length
-
-
-
-
-.. c:member:: krb5_octet * krb5_checksum.contents
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-cksumtype-struct:
-
-krb5_cksumtype
-==============
-
-..
-.. c:type:: krb5_cksumtype
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_cksumtype
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-const-pointer-struct:
-
-krb5_const_pointer
-==================
-
-..
-.. c:type:: krb5_const_pointer
-..
-
-
-
-
-Declaration
-------------
-
-typedef void const\* krb5_const_pointer
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-const-principal-struct:
-
-krb5_const_principal
-====================
-
-..
-.. c:type:: krb5_const_principal
-..
-
-Constant version of :c:type:`krb5_principal_data` .
-
-
-
-Declaration
-------------
-
-typedef const krb5_principal_data\* krb5_const_principal
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_const_principal.magic
-
-
-
-
-.. c:member:: krb5_data krb5_const_principal.realm
-
-
-
-
-.. c:member:: krb5_data * krb5_const_principal.data
-
- An array of strings.
-
-
-.. c:member:: krb5_int32 krb5_const_principal.length
-
-
-
-
-.. c:member:: krb5_int32 krb5_const_principal.type
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-context-struct:
-
-krb5_context
-============
-
-..
-.. c:type:: krb5_context
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_context\* krb5_context
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-cred-struct:
-
-krb5_cred
-=========
-
-..
-.. c:type:: krb5_cred
-..
-
-Credentials data structure.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_cred krb5_cred
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_cred.magic
-
-
-
-
-.. c:member:: krb5_ticket ** krb5_cred.tickets
-
- Tickets.
-
-
-.. c:member:: krb5_enc_data krb5_cred.enc_part
-
- Encrypted part.
-
-
-.. c:member:: krb5_cred_enc_part * krb5_cred.enc_part2
-
- Unencrypted version, if available.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-cred-enc-part-struct:
-
-krb5_cred_enc_part
-==================
-
-..
-.. c:type:: krb5_cred_enc_part
-..
-
-Cleartext credentials information.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_cred_enc_part krb5_cred_enc_part
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_cred_enc_part.magic
-
-
-
-
-.. c:member:: krb5_int32 krb5_cred_enc_part.nonce
-
- Nonce (optional)
-
-
-.. c:member:: krb5_timestamp krb5_cred_enc_part.timestamp
-
- Generation time, seconds portion.
-
-
-.. c:member:: krb5_int32 krb5_cred_enc_part.usec
-
- Generation time, microseconds portion.
-
-
-.. c:member:: krb5_address * krb5_cred_enc_part.s_address
-
- Sender address (optional)
-
-
-.. c:member:: krb5_address * krb5_cred_enc_part.r_address
-
- Recipient address (optional)
-
-
-.. c:member:: krb5_cred_info ** krb5_cred_enc_part.ticket_info
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-cred-info-struct:
-
-krb5_cred_info
-==============
-
-..
-.. c:type:: krb5_cred_info
-..
-
-Credentials information inserted into *EncKrbCredPart* .
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_cred_info krb5_cred_info
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_cred_info.magic
-
-
-
-
-.. c:member:: krb5_keyblock * krb5_cred_info.session
-
- Session key used to encrypt ticket.
-
-
-.. c:member:: krb5_principal krb5_cred_info.client
-
- Client principal and realm.
-
-
-.. c:member:: krb5_principal krb5_cred_info.server
-
- Server principal and realm.
-
-
-.. c:member:: krb5_flags krb5_cred_info.flags
-
- Ticket flags.
-
-
-.. c:member:: krb5_ticket_times krb5_cred_info.times
-
- Auth, start, end, renew_till.
-
-
-.. c:member:: krb5_address ** krb5_cred_info.caddrs
-
- Array of pointers to addrs (optional)
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-creds-struct:
-
-krb5_creds
-==========
-
-..
-.. c:type:: krb5_creds
-..
-
-Credentials structure including ticket, session key, and lifetime info.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_creds krb5_creds
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_creds.magic
-
-
-
-
-.. c:member:: krb5_principal krb5_creds.client
-
- client's principal identifier
-
-
-.. c:member:: krb5_principal krb5_creds.server
-
- server's principal identifier
-
-
-.. c:member:: krb5_keyblock krb5_creds.keyblock
-
- session encryption key info
-
-
-.. c:member:: krb5_ticket_times krb5_creds.times
-
- lifetime info
-
-
-.. c:member:: krb5_boolean krb5_creds.is_skey
-
- true if ticket is encrypted in another ticket's skey
-
-
-.. c:member:: krb5_flags krb5_creds.ticket_flags
-
- flags in ticket
-
-
-.. c:member:: krb5_address ** krb5_creds.addresses
-
- addrs in ticket
-
-
-.. c:member:: krb5_data krb5_creds.ticket
-
- ticket string itself
-
-
-.. c:member:: krb5_data krb5_creds.second_ticket
-
- second ticket, if related to ticket (via DUPLICATE-SKEY or ENC-TKT-IN-SKEY)
-
-
-.. c:member:: krb5_authdata ** krb5_creds.authdata
-
- authorization data
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-crypto-iov-struct:
-
-krb5_crypto_iov
-===============
-
-..
-.. c:type:: krb5_crypto_iov
-..
-
-Structure to describe a region of text to be encrypted or decrypted.
-
-The *flags* member describes the type of the iov. The *data* member points to the memory that will be manipulated. All iov APIs take a pointer to the first element of an array of krb5_crypto_iov's along with the size of that array. Buffer contents are manipulated in-place; data is overwritten. Callers must allocate the right number of krb5_crypto_iov structures before calling into an iov API.
-
-Declaration
-------------
-
-typedef struct _krb5_crypto_iov krb5_crypto_iov
-
-
-Members
----------
-
-
-.. c:member:: krb5_cryptotype krb5_crypto_iov.flags
-
- :c:data:`KRB5_CRYPTO_TYPE` type of the iov
-
-
-.. c:member:: krb5_data krb5_crypto_iov.data
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-cryptotype-struct:
-
-krb5_cryptotype
-===============
-
-..
-.. c:type:: krb5_cryptotype
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_cryptotype
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-data-struct:
-
-krb5_data
-=========
-
-..
-.. c:type:: krb5_data
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_data krb5_data
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_data.magic
-
-
-
-
-.. c:member:: unsigned int krb5_data.length
-
-
-
-
-.. c:member:: char * krb5_data.data
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-deltat-struct:
-
-krb5_deltat
-===========
-
-..
-.. c:type:: krb5_deltat
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_deltat
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-enc-data-struct:
-
-krb5_enc_data
-=============
-
-..
-.. c:type:: krb5_enc_data
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_enc_data krb5_enc_data
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_enc_data.magic
-
-
-
-
-.. c:member:: krb5_enctype krb5_enc_data.enctype
-
-
-
-
-.. c:member:: krb5_kvno krb5_enc_data.kvno
-
-
-
-
-.. c:member:: krb5_data krb5_enc_data.ciphertext
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-enc-kdc-rep-part-struct:
-
-krb5_enc_kdc_rep_part
-=====================
-
-..
-.. c:type:: krb5_enc_kdc_rep_part
-..
-
-C representation of *EncKDCRepPart* protocol message.
-
-This is the cleartext message that is encrypted and inserted in *KDC-REP* .
-
-Declaration
-------------
-
-typedef struct _krb5_enc_kdc_rep_part krb5_enc_kdc_rep_part
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_enc_kdc_rep_part.magic
-
-
-
-
-.. c:member:: krb5_msgtype krb5_enc_kdc_rep_part.msg_type
-
- krb5 message type
-
-
-.. c:member:: krb5_keyblock * krb5_enc_kdc_rep_part.session
-
- Session key.
-
-
-.. c:member:: krb5_last_req_entry ** krb5_enc_kdc_rep_part.last_req
-
- Array of pointers to entries.
-
-
-.. c:member:: krb5_int32 krb5_enc_kdc_rep_part.nonce
-
- Nonce from request.
-
-
-.. c:member:: krb5_timestamp krb5_enc_kdc_rep_part.key_exp
-
- Expiration date.
-
-
-.. c:member:: krb5_flags krb5_enc_kdc_rep_part.flags
-
- Ticket flags.
-
-
-.. c:member:: krb5_ticket_times krb5_enc_kdc_rep_part.times
-
- Lifetime info.
-
-
-.. c:member:: krb5_principal krb5_enc_kdc_rep_part.server
-
- Server's principal identifier.
-
-
-.. c:member:: krb5_address ** krb5_enc_kdc_rep_part.caddrs
-
- Array of ptrs to addrs, optional.
-
-
-.. c:member:: krb5_pa_data ** krb5_enc_kdc_rep_part.enc_padata
-
- Encrypted preauthentication data.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-enc-tkt-part-struct:
-
-krb5_enc_tkt_part
-=================
-
-..
-.. c:type:: krb5_enc_tkt_part
-..
-
-Encrypted part of ticket.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_enc_tkt_part krb5_enc_tkt_part
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_enc_tkt_part.magic
-
-
-
-
-.. c:member:: krb5_flags krb5_enc_tkt_part.flags
-
- flags
-
-
-.. c:member:: krb5_keyblock * krb5_enc_tkt_part.session
-
- session key: includes enctype
-
-
-.. c:member:: krb5_principal krb5_enc_tkt_part.client
-
- client name/realm
-
-
-.. c:member:: krb5_transited krb5_enc_tkt_part.transited
-
- list of transited realms
-
-
-.. c:member:: krb5_ticket_times krb5_enc_tkt_part.times
-
- auth, start, end, renew_till
-
-
-.. c:member:: krb5_address ** krb5_enc_tkt_part.caddrs
-
- array of ptrs to addresses
-
-
-.. c:member:: krb5_authdata ** krb5_enc_tkt_part.authorization_data
-
- auth data
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-encrypt-block-struct:
-
-krb5_encrypt_block
-==================
-
-..
-.. c:type:: krb5_encrypt_block
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_encrypt_block krb5_encrypt_block
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_encrypt_block.magic
-
-
-
-
-.. c:member:: krb5_enctype krb5_encrypt_block.crypto_entry
-
-
-
-
-.. c:member:: krb5_keyblock * krb5_encrypt_block.key
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-enctype-struct:
-
-krb5_enctype
-============
-
-..
-.. c:type:: krb5_enctype
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_enctype
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-error-struct:
-
-krb5_error
-==========
-
-..
-.. c:type:: krb5_error
-..
-
-Error message structure.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_error krb5_error
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_error.magic
-
-
-
-
-.. c:member:: krb5_timestamp krb5_error.ctime
-
- Client sec portion; optional.
-
-
-.. c:member:: krb5_int32 krb5_error.cusec
-
- Client usec portion; optional.
-
-
-.. c:member:: krb5_int32 krb5_error.susec
-
- Server usec portion.
-
-
-.. c:member:: krb5_timestamp krb5_error.stime
-
- Server sec portion.
-
-
-.. c:member:: krb5_ui_4 krb5_error.error
-
- Error code (protocol error #'s)
-
-
-.. c:member:: krb5_principal krb5_error.client
-
- Client principal and realm.
-
-
-.. c:member:: krb5_principal krb5_error.server
-
- Server principal and realm.
-
-
-.. c:member:: krb5_data krb5_error.text
-
- Descriptive text.
-
-
-.. c:member:: krb5_data krb5_error.e_data
-
- Additional error-describing data.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-error-code-struct:
-
-krb5_error_code
-===============
-
-..
-.. c:type:: krb5_error_code
-..
-
-Used to convey an operation status.
-
-The value 0 indicates success; any other values are com_err codes. Use :c:func:`krb5_get_error_message()` to obtain a string describing the error.
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_error_code
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-expire-callback-func-struct:
-
-krb5_expire_callback_func
-=========================
-
-..
-.. c:type:: krb5_expire_callback_func
-..
-
-
-
-
-Declaration
-------------
-
-typedef void( \* krb5_expire_callback_func) (krb5_context context, void \*data, krb5_timestamp password_expiration, krb5_timestamp account_expiration, krb5_boolean is_last_req)
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-flags-struct:
-
-krb5_flags
-==========
-
-..
-.. c:type:: krb5_flags
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_flags
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-get-init-creds-opt-struct:
-
-krb5_get_init_creds_opt
-=======================
-
-..
-.. c:type:: krb5_get_init_creds_opt
-..
-
-Store options for *_krb5_get_init_creds* .
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_get_init_creds_opt krb5_get_init_creds_opt
-
-
-Members
----------
-
-
-.. c:member:: krb5_flags krb5_get_init_creds_opt.flags
-
-
-
-
-.. c:member:: krb5_deltat krb5_get_init_creds_opt.tkt_life
-
-
-
-
-.. c:member:: krb5_deltat krb5_get_init_creds_opt.renew_life
-
-
-
-
-.. c:member:: int krb5_get_init_creds_opt.forwardable
-
-
-
-
-.. c:member:: int krb5_get_init_creds_opt.proxiable
-
-
-
-
-.. c:member:: krb5_enctype * krb5_get_init_creds_opt.etype_list
-
-
-
-
-.. c:member:: int krb5_get_init_creds_opt.etype_list_length
-
-
-
-
-.. c:member:: krb5_address ** krb5_get_init_creds_opt.address_list
-
-
-
-
-.. c:member:: krb5_preauthtype * krb5_get_init_creds_opt.preauth_list
-
-
-
-
-.. c:member:: int krb5_get_init_creds_opt.preauth_list_length
-
-
-
-
-.. c:member:: krb5_data * krb5_get_init_creds_opt.salt
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-gic-opt-pa-data-struct:
-
-krb5_gic_opt_pa_data
-====================
-
-..
-.. c:type:: krb5_gic_opt_pa_data
-..
-
-Generic preauth option attribute/value pairs.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_gic_opt_pa_data krb5_gic_opt_pa_data
-
-
-Members
----------
-
-
-.. c:member:: char * krb5_gic_opt_pa_data.attr
-
-
-
-
-.. c:member:: char * krb5_gic_opt_pa_data.value
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-init-creds-context-struct:
-
-krb5_init_creds_context
-=======================
-
-..
-.. c:type:: krb5_init_creds_context
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_init_creds_context\* krb5_init_creds_context
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-int16-struct:
-
-krb5_int16
-==========
-
-..
-.. c:type:: krb5_int16
-..
-
-
-
-
-Declaration
-------------
-
-typedef int16_t krb5_int16
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-int32-struct:
-
-krb5_int32
-==========
-
-..
-.. c:type:: krb5_int32
-..
-
-
-
-
-Declaration
-------------
-
-typedef int32_t krb5_int32
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-kdc-rep-struct:
-
-krb5_kdc_rep
-============
-
-..
-.. c:type:: krb5_kdc_rep
-..
-
-Representation of the *KDC-REP* protocol message.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_kdc_rep krb5_kdc_rep
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_kdc_rep.magic
-
-
-
-
-.. c:member:: krb5_msgtype krb5_kdc_rep.msg_type
-
- KRB5_AS_REP or KRB5_KDC_REP.
-
-
-.. c:member:: krb5_pa_data ** krb5_kdc_rep.padata
-
- Preauthentication data from KDC.
-
-
-.. c:member:: krb5_principal krb5_kdc_rep.client
-
- Client principal and realm.
-
-
-.. c:member:: krb5_ticket * krb5_kdc_rep.ticket
-
- Ticket.
-
-
-.. c:member:: krb5_enc_data krb5_kdc_rep.enc_part
-
- Encrypted part of reply.
-
-
-.. c:member:: krb5_enc_kdc_rep_part * krb5_kdc_rep.enc_part2
-
- Unencrypted version, if available.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-kdc-req-struct:
-
-krb5_kdc_req
-============
-
-..
-.. c:type:: krb5_kdc_req
-..
-
-C representation of KDC-REQ protocol message, including KDC-REQ-BODY.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_kdc_req krb5_kdc_req
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_kdc_req.magic
-
-
-
-
-.. c:member:: krb5_msgtype krb5_kdc_req.msg_type
-
- KRB5_AS_REQ or KRB5_TGS_REQ.
-
-
-.. c:member:: krb5_pa_data ** krb5_kdc_req.padata
-
- Preauthentication data.
-
-
-.. c:member:: krb5_flags krb5_kdc_req.kdc_options
-
- Requested options.
-
-
-.. c:member:: krb5_principal krb5_kdc_req.client
-
- Client principal and realm.
-
-
-.. c:member:: krb5_principal krb5_kdc_req.server
-
- Server principal and realm.
-
-
-.. c:member:: krb5_timestamp krb5_kdc_req.from
-
- Requested start time.
-
-
-.. c:member:: krb5_timestamp krb5_kdc_req.till
-
- Requested end time.
-
-
-.. c:member:: krb5_timestamp krb5_kdc_req.rtime
-
- Requested renewable end time.
-
-
-.. c:member:: krb5_int32 krb5_kdc_req.nonce
-
- Nonce to match request and response.
-
-
-.. c:member:: int krb5_kdc_req.nktypes
-
- Number of enctypes.
-
-
-.. c:member:: krb5_enctype * krb5_kdc_req.ktype
-
- Requested enctypes.
-
-
-.. c:member:: krb5_address ** krb5_kdc_req.addresses
-
- Requested addresses (optional)
-
-
-.. c:member:: krb5_enc_data krb5_kdc_req.authorization_data
-
- Encrypted authz data (optional)
-
-
-.. c:member:: krb5_authdata ** krb5_kdc_req.unenc_authdata
-
- Unencrypted authz data.
-
-
-.. c:member:: krb5_ticket ** krb5_kdc_req.second_ticket
-
- Second ticket array (optional)
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-key-struct:
-
-krb5_key
-========
-
-..
-.. c:type:: krb5_key
-..
-
-Opaque identifier for a key.
-
-Use with the krb5_k APIs for better performance for repeated operations with the same key and usage. Key identifiers must not be used simultaneously within multiple threads, as they may contain mutable internal state and are not mutex-protected.
-
-Declaration
-------------
-
-typedef struct krb5_key_st\* krb5_key
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-keyblock-struct:
-
-krb5_keyblock
-=============
-
-..
-.. c:type:: krb5_keyblock
-..
-
-Exposed contents of a key.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_keyblock krb5_keyblock
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_keyblock.magic
-
-
-
-
-.. c:member:: krb5_enctype krb5_keyblock.enctype
-
-
-
-
-.. c:member:: unsigned int krb5_keyblock.length
-
-
-
-
-.. c:member:: krb5_octet * krb5_keyblock.contents
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-keytab-struct:
-
-krb5_keytab
-===========
-
-..
-.. c:type:: krb5_keytab
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_kt\* krb5_keytab
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-keytab-entry-struct:
-
-krb5_keytab_entry
-=================
-
-..
-.. c:type:: krb5_keytab_entry
-..
-
-A key table entry.
-
-
-
-Declaration
-------------
-
-typedef struct krb5_keytab_entry_st krb5_keytab_entry
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_keytab_entry.magic
-
-
-
-
-.. c:member:: krb5_principal krb5_keytab_entry.principal
-
- Principal of this key.
-
-
-.. c:member:: krb5_timestamp krb5_keytab_entry.timestamp
-
- Time entry written to keytable.
-
-
-.. c:member:: krb5_kvno krb5_keytab_entry.vno
-
- Key version number.
-
-
-.. c:member:: krb5_keyblock krb5_keytab_entry.key
-
- The secret key.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-keyusage-struct:
-
-krb5_keyusage
-=============
-
-..
-.. c:type:: krb5_keyusage
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_keyusage
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-kt-cursor-struct:
-
-krb5_kt_cursor
-==============
-
-..
-.. c:type:: krb5_kt_cursor
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_pointer krb5_kt_cursor
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-kvno-struct:
-
-krb5_kvno
-=========
-
-..
-.. c:type:: krb5_kvno
-..
-
-
-
-
-Declaration
-------------
-
-typedef unsigned int krb5_kvno
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-last-req-entry-struct:
-
-krb5_last_req_entry
-===================
-
-..
-.. c:type:: krb5_last_req_entry
-..
-
-Last request entry.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_last_req_entry krb5_last_req_entry
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_last_req_entry.magic
-
-
-
-
-.. c:member:: krb5_int32 krb5_last_req_entry.lr_type
-
- LR type.
-
-
-.. c:member:: krb5_timestamp krb5_last_req_entry.value
-
- Timestamp.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-magic-struct:
-
-krb5_magic
-==========
-
-..
-.. c:type:: krb5_magic
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_error_code krb5_magic
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-mk-req-checksum-func-struct:
-
-krb5_mk_req_checksum_func
-=========================
-
-..
-.. c:type:: krb5_mk_req_checksum_func
-..
-
-Type of function used as a callback to generate checksum data for mk_req.
-
-
-
-Declaration
-------------
-
-typedef krb5_error_code( \* krb5_mk_req_checksum_func) (krb5_context, krb5_auth_context, void \*, krb5_data \*\*)
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-msgtype-struct:
-
-krb5_msgtype
-============
-
-..
-.. c:type:: krb5_msgtype
-..
-
-
-
-
-Declaration
-------------
-
-typedef unsigned int krb5_msgtype
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-octet-struct:
-
-krb5_octet
-==========
-
-..
-.. c:type:: krb5_octet
-..
-
-
-
-
-Declaration
-------------
-
-typedef uint8_t krb5_octet
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-pa-data-struct:
-
-krb5_pa_data
-============
-
-..
-.. c:type:: krb5_pa_data
-..
-
-Pre-authentication data.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_pa_data krb5_pa_data
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_pa_data.magic
-
-
-
-
-.. c:member:: krb5_preauthtype krb5_pa_data.pa_type
-
- Preauthentication data type.
-
-
-.. c:member:: unsigned int krb5_pa_data.length
-
- Length of data.
-
-
-.. c:member:: krb5_octet * krb5_pa_data.contents
-
- Data.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-pa-pac-req-struct:
-
-krb5_pa_pac_req
-===============
-
-..
-.. c:type:: krb5_pa_pac_req
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_pa_pac_req krb5_pa_pac_req
-
-
-Members
----------
-
-
-.. c:member:: krb5_boolean krb5_pa_pac_req.include_pac
-
- TRUE if a PAC should be included in TGS-REP.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-pa-server-referral-data-struct:
-
-krb5_pa_server_referral_data
-============================
-
-..
-.. c:type:: krb5_pa_server_referral_data
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_pa_server_referral_data krb5_pa_server_referral_data
-
-
-Members
----------
-
-
-.. c:member:: krb5_data * krb5_pa_server_referral_data.referred_realm
-
-
-
-
-.. c:member:: krb5_principal krb5_pa_server_referral_data.true_principal_name
-
-
-
-
-.. c:member:: krb5_principal krb5_pa_server_referral_data.requested_principal_name
-
-
-
-
-.. c:member:: krb5_timestamp krb5_pa_server_referral_data.referral_valid_until
-
-
-
-
-.. c:member:: krb5_checksum krb5_pa_server_referral_data.rep_cksum
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-pa-svr-referral-data-struct:
-
-krb5_pa_svr_referral_data
-=========================
-
-..
-.. c:type:: krb5_pa_svr_referral_data
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_pa_svr_referral_data krb5_pa_svr_referral_data
-
-
-Members
----------
-
-
-.. c:member:: krb5_principal krb5_pa_svr_referral_data.principal
-
- Referred name, only realm is required.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-pac-struct:
-
-krb5_pac
-========
-
-..
-.. c:type:: krb5_pac
-..
-
-PAC data structure to convey authorization information.
-
-
-
-Declaration
-------------
-
-typedef struct krb5_pac_data\* krb5_pac
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-pointer-struct:
-
-krb5_pointer
-============
-
-..
-.. c:type:: krb5_pointer
-..
-
-
-
-
-Declaration
-------------
-
-typedef void\* krb5_pointer
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-post-recv-fn-struct:
-
-krb5_post_recv_fn
-=================
-
-..
-.. c:type:: krb5_post_recv_fn
-..
-
-Hook function for inspecting or overriding KDC replies.
-
-If *code* is non-zero, KDC communication failed and *reply* should be ignored. The hook function may return *code* or a different error code, or may synthesize a reply by setting *new_reply_out* and return successfully.
-The hook function should use :c:func:`krb5_copy_data()` to construct the value for *new_reply_out* , to ensure that it can be freed correctly by the library.
-
-Declaration
-------------
-
-typedef krb5_error_code( \* krb5_post_recv_fn) (krb5_context context, void \*data, krb5_error_code code, const krb5_data \*realm, const krb5_data \*message, const krb5_data \*reply, krb5_data \*\*new_reply_out)
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-pre-send-fn-struct:
-
-krb5_pre_send_fn
-================
-
-..
-.. c:type:: krb5_pre_send_fn
-..
-
-Hook function for inspecting or modifying messages sent to KDCs.
-
-If the hook function sets *new_reply_out* , *message* will not be sent to the KDC, and the given reply will used instead.
-If the hook function sets *new_message_out* , the given message will be sent to the KDC in place of *message* .
-If the hook function returns successfully without setting either output, *message* will be sent to the KDC normally.
-The hook function should use :c:func:`krb5_copy_data()` to construct the value for *new_message_out* or *reply_out* , to ensure that it can be freed correctly by the library.
-
-Declaration
-------------
-
-typedef krb5_error_code( \* krb5_pre_send_fn) (krb5_context context, void \*data, const krb5_data \*realm, const krb5_data \*message, krb5_data \*\*new_message_out, krb5_data \*\*new_reply_out)
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-preauthtype-struct:
-
-krb5_preauthtype
-================
-
-..
-.. c:type:: krb5_preauthtype
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_preauthtype
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-principal-struct:
-
-krb5_principal
-==============
-
-..
-.. c:type:: krb5_principal
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_principal_data\* krb5_principal
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_principal.magic
-
-
-
-
-.. c:member:: krb5_data krb5_principal.realm
-
-
-
-
-.. c:member:: krb5_data * krb5_principal.data
-
- An array of strings.
-
-
-.. c:member:: krb5_int32 krb5_principal.length
-
-
-
-
-.. c:member:: krb5_int32 krb5_principal.type
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-principal-data-struct:
-
-krb5_principal_data
-===================
-
-..
-.. c:type:: krb5_principal_data
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct krb5_principal_data krb5_principal_data
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_principal_data.magic
-
-
-
-
-.. c:member:: krb5_data krb5_principal_data.realm
-
-
-
-
-.. c:member:: krb5_data * krb5_principal_data.data
-
- An array of strings.
-
-
-.. c:member:: krb5_int32 krb5_principal_data.length
-
-
-
-
-.. c:member:: krb5_int32 krb5_principal_data.type
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-prompt-struct:
-
-krb5_prompt
-===========
-
-..
-.. c:type:: krb5_prompt
-..
-
-Text for prompt used in prompter callback function.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_prompt krb5_prompt
-
-
-Members
----------
-
-
-.. c:member:: char * krb5_prompt.prompt
-
- The prompt to show to the user.
-
-
-.. c:member:: int krb5_prompt.hidden
-
- Boolean; informative prompt or hidden (e.g.
- PIN)
-
-.. c:member:: krb5_data * krb5_prompt.reply
-
- Must be allocated before call to prompt routine.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-prompt-type-struct:
-
-krb5_prompt_type
-================
-
-..
-.. c:type:: krb5_prompt_type
-..
-
-
-
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_prompt_type
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-prompter-fct-struct:
-
-krb5_prompter_fct
-=================
-
-..
-.. c:type:: krb5_prompter_fct
-..
-
-Pointer to a prompter callback function.
-
-
-
-Declaration
-------------
-
-typedef krb5_error_code( \* krb5_prompter_fct) (krb5_context context, void \*data, const char \*name, const char \*banner, int num_prompts, krb5_prompt prompts[])
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-pwd-data-struct:
-
-krb5_pwd_data
-=============
-
-..
-.. c:type:: krb5_pwd_data
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_pwd_data krb5_pwd_data
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_pwd_data.magic
-
-
-
-
-.. c:member:: int krb5_pwd_data.sequence_count
-
-
-
-
-.. c:member:: passwd_phrase_element ** krb5_pwd_data.element
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-rcache-struct:
-
-krb5_rcache
-===========
-
-..
-.. c:type:: krb5_rcache
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct krb5_rc_st\* krb5_rcache
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-replay-data-struct:
-
-krb5_replay_data
-================
-
-..
-.. c:type:: krb5_replay_data
-..
-
-Replay data.
-
-Sequence number and timestamp information output by :c:func:`krb5_rd_priv()` and :c:func:`krb5_rd_safe()` .
-
-Declaration
-------------
-
-typedef struct krb5_replay_data krb5_replay_data
-
-
-Members
----------
-
-
-.. c:member:: krb5_timestamp krb5_replay_data.timestamp
-
- Timestamp, seconds portion.
-
-
-.. c:member:: krb5_int32 krb5_replay_data.usec
-
- Timestamp, microseconds portion.
-
-
-.. c:member:: krb5_ui_4 krb5_replay_data.seq
-
- Sequence number.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-responder-context-struct:
-
-krb5_responder_context
-======================
-
-..
-.. c:type:: krb5_responder_context
-..
-
-A container for a set of preauthentication questions and answers.
-
-A responder context is supplied by the krb5 authentication system to a :c:type:`krb5_responder_fn` callback. It contains a list of questions and can receive answers. Questions contained in a responder context can be listed using :c:func:`krb5_responder_list_questions()` , retrieved using :c:func:`krb5_responder_get_challenge()` , or answered using :c:func:`krb5_responder_set_answer()` . The form of a question's challenge and answer depend on the question name.
-
-
-Declaration
-------------
-
-typedef struct krb5_responder_context_st\* krb5_responder_context
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-responder-fn-struct:
-
-krb5_responder_fn
-=================
-
-..
-.. c:type:: krb5_responder_fn
-..
-
-Responder function for an initial credential exchange.
-
-If a required question is unanswered, the prompter may be called.
-
-Declaration
-------------
-
-typedef krb5_error_code( \* krb5_responder_fn) (krb5_context ctx, void \*data, krb5_responder_context rctx)
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-responder-otp-challenge-struct:
-
-krb5_responder_otp_challenge
-============================
-
-..
-.. c:type:: krb5_responder_otp_challenge
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_responder_otp_challenge krb5_responder_otp_challenge
-
-
-Members
----------
-
-
-.. c:member:: char * krb5_responder_otp_challenge.service
-
-
-
-
-.. c:member:: krb5_responder_otp_tokeninfo ** krb5_responder_otp_challenge.tokeninfo
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-responder-otp-tokeninfo-struct:
-
-krb5_responder_otp_tokeninfo
-============================
-
-..
-.. c:type:: krb5_responder_otp_tokeninfo
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_responder_otp_tokeninfo krb5_responder_otp_tokeninfo
-
-
-Members
----------
-
-
-.. c:member:: krb5_flags krb5_responder_otp_tokeninfo.flags
-
-
-
-
-.. c:member:: krb5_int32 krb5_responder_otp_tokeninfo.format
-
-
-
-
-.. c:member:: krb5_int32 krb5_responder_otp_tokeninfo.length
-
-
-
-
-.. c:member:: char * krb5_responder_otp_tokeninfo.vendor
-
-
-
-
-.. c:member:: char * krb5_responder_otp_tokeninfo.challenge
-
-
-
-
-.. c:member:: char * krb5_responder_otp_tokeninfo.token_id
-
-
-
-
-.. c:member:: char * krb5_responder_otp_tokeninfo.alg_id
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-responder-pkinit-challenge-struct:
-
-krb5_responder_pkinit_challenge
-===============================
-
-..
-.. c:type:: krb5_responder_pkinit_challenge
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_responder_pkinit_challenge krb5_responder_pkinit_challenge
-
-
-Members
----------
-
-
-.. c:member:: krb5_responder_pkinit_identity ** krb5_responder_pkinit_challenge.identities
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-responder-pkinit-identity-struct:
-
-krb5_responder_pkinit_identity
-==============================
-
-..
-.. c:type:: krb5_responder_pkinit_identity
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_responder_pkinit_identity krb5_responder_pkinit_identity
-
-
-Members
----------
-
-
-.. c:member:: char * krb5_responder_pkinit_identity.identity
-
-
-
-
-.. c:member:: krb5_int32 krb5_responder_pkinit_identity.token_flags
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-response-struct:
-
-krb5_response
-=============
-
-..
-.. c:type:: krb5_response
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_response krb5_response
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_response.magic
-
-
-
-
-.. c:member:: krb5_octet krb5_response.message_type
-
-
-
-
-.. c:member:: krb5_data krb5_response.response
-
-
-
-
-.. c:member:: krb5_int32 krb5_response.expected_nonce
-
-
-
-
-.. c:member:: krb5_timestamp krb5_response.request_time
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-ticket-struct:
-
-krb5_ticket
-===========
-
-..
-.. c:type:: krb5_ticket
-..
-
-Ticket structure.
-
-The C representation of the ticket message, with a pointer to the C representation of the encrypted part.
-
-Declaration
-------------
-
-typedef struct _krb5_ticket krb5_ticket
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_ticket.magic
-
-
-
-
-.. c:member:: krb5_principal krb5_ticket.server
-
- server name/realm
-
-
-.. c:member:: krb5_enc_data krb5_ticket.enc_part
-
- encryption type, kvno, encrypted encoding
-
-
-.. c:member:: krb5_enc_tkt_part * krb5_ticket.enc_part2
-
- ptr to decrypted version, if available
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-ticket-times-struct:
-
-krb5_ticket_times
-=================
-
-..
-.. c:type:: krb5_ticket_times
-..
-
-Ticket start time, end time, and renewal duration.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_ticket_times krb5_ticket_times
-
-
-Members
----------
-
-
-.. c:member:: krb5_timestamp krb5_ticket_times.authtime
-
- Time at which KDC issued the initial ticket that corresponds to this ticket.
-
-
-.. c:member:: krb5_timestamp krb5_ticket_times.starttime
-
- optional in ticket, if not present, use *authtime*
-
-
-.. c:member:: krb5_timestamp krb5_ticket_times.endtime
-
- Ticket expiration time.
-
-
-.. c:member:: krb5_timestamp krb5_ticket_times.renew_till
-
- Latest time at which renewal of ticket can be valid.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-timestamp-struct:
-
-krb5_timestamp
-==============
-
-..
-.. c:type:: krb5_timestamp
-..
-
-Represents a timestamp in seconds since the POSIX epoch.
-
-This legacy type is used frequently in the ABI, but cannot represent timestamps after 2038 as a positive number. Code which uses this type should cast values of it to uint32_t so that negative values are treated as timestamps between 2038 and 2106 on platforms with 64-bit time_t.
-
-Declaration
-------------
-
-typedef krb5_int32 krb5_timestamp
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-tkt-authent-struct:
-
-krb5_tkt_authent
-================
-
-..
-.. c:type:: krb5_tkt_authent
-..
-
-Ticket authentication data.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_tkt_authent krb5_tkt_authent
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_tkt_authent.magic
-
-
-
-
-.. c:member:: krb5_ticket * krb5_tkt_authent.ticket
-
-
-
-
-.. c:member:: krb5_authenticator * krb5_tkt_authent.authenticator
-
-
-
-
-.. c:member:: krb5_flags krb5_tkt_authent.ap_options
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-tkt-creds-context-struct:
-
-krb5_tkt_creds_context
-======================
-
-..
-.. c:type:: krb5_tkt_creds_context
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_tkt_creds_context\* krb5_tkt_creds_context
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-trace-callback-struct:
-
-krb5_trace_callback
-===================
-
-..
-.. c:type:: krb5_trace_callback
-..
-
-
-
-
-Declaration
-------------
-
-typedef void( \* krb5_trace_callback) (krb5_context context, const krb5_trace_info \*info, void \*cb_data)
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-trace-info-struct:
-
-krb5_trace_info
-===============
-
-..
-.. c:type:: krb5_trace_info
-..
-
-A wrapper for passing information to a *krb5_trace_callback* .
-
-Currently, it only contains the formatted message as determined the the format string and arguments of the tracing macro, but it may be extended to contain more fields in the future.
-
-Declaration
-------------
-
-typedef struct _krb5_trace_info krb5_trace_info
-
-
-Members
----------
-
-
-.. c:member:: const char * krb5_trace_info.message
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-transited-struct:
-
-krb5_transited
-==============
-
-..
-.. c:type:: krb5_transited
-..
-
-Structure for transited encoding.
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_transited krb5_transited
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_transited.magic
-
-
-
-
-.. c:member:: krb5_octet krb5_transited.tr_type
-
- Transited encoding type.
-
-
-.. c:member:: krb5_data krb5_transited.tr_contents
-
- Contents.
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-typed-data-struct:
-
-krb5_typed_data
-===============
-
-..
-.. c:type:: krb5_typed_data
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_typed_data krb5_typed_data
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic krb5_typed_data.magic
-
-
-
-
-.. c:member:: krb5_int32 krb5_typed_data.type
-
-
-
-
-.. c:member:: unsigned int krb5_typed_data.length
-
-
-
-
-.. c:member:: krb5_octet * krb5_typed_data.data
-
-
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-ui-2-struct:
-
-krb5_ui_2
-=========
-
-..
-.. c:type:: krb5_ui_2
-..
-
-
-
-
-Declaration
-------------
-
-typedef uint16_t krb5_ui_2
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-ui-4-struct:
-
-krb5_ui_4
-=========
-
-..
-.. c:type:: krb5_ui_4
-..
-
-
-
-
-Declaration
-------------
-
-typedef uint32_t krb5_ui_4
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _krb5-verify-init-creds-opt-struct:
-
-krb5_verify_init_creds_opt
-==========================
-
-..
-.. c:type:: krb5_verify_init_creds_opt
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _krb5_verify_init_creds_opt krb5_verify_init_creds_opt
-
-
-Members
----------
-
-
-.. c:member:: krb5_flags krb5_verify_init_creds_opt.flags
-
-
-
-
-.. c:member:: int krb5_verify_init_creds_opt.ap_req_nofail
-
- boolean
-
-
+++ /dev/null
-.. highlight:: c
-
-.. _passwd-phrase-element-struct:
-
-passwd_phrase_element
-=====================
-
-..
-.. c:type:: passwd_phrase_element
-..
-
-
-
-
-Declaration
-------------
-
-typedef struct _passwd_phrase_element passwd_phrase_element
-
-
-Members
----------
-
-
-.. c:member:: krb5_magic passwd_phrase_element.magic
-
-
-
-
-.. c:member:: krb5_data * passwd_phrase_element.passwd
-
-
-
-
-.. c:member:: krb5_data * passwd_phrase_element.phrase
-
-
-
-
+++ /dev/null
-Year 2038 considerations for uses of krb5_timestamp
-===================================================
-
-POSIX time values, which measure the number of seconds since January 1
-1970, will exceed the maximum value representable in a signed 32-bit
-integer in January 2038. This documentation describes considerations
-for consumers of the MIT krb5 libraries.
-
-Applications or libraries which use libkrb5 and consume the timestamps
-included in credentials or other structures make use of the
-:c:type:`krb5_timestamp` type. For historical reasons, krb5_timestamp
-is a signed 32-bit integer, even on platforms where a larger type is
-natively used to represent time values. To behave properly for time
-values after January 2038, calling code should cast krb5_timestamp
-values to uint32_t, and then to time_t::
-
- (time_t)(uint32_t)timestamp
-
-Used in this way, krb5_timestamp values can represent time values up
-until February 2106, provided that the platform uses a 64-bit or
-larger time_t type. This usage will also remain safe if a later
-version of MIT krb5 changes krb5_timestamp to an unsigned 32-bit
-integer.
-
-The GSSAPI only uses representations of time intervals, not absolute
-times. Callers of the GSSAPI should require no changes to behave
-correctly after January 2038, provided that they use MIT krb5 release
-1.16 or later.
+++ /dev/null
-.. _ccache_definition:
-
-Credential cache
-================
-
-A credential cache (or "ccache") holds Kerberos credentials while they
-remain valid and, generally, while the user's session lasts, so that
-authenticating to a service multiple times (e.g., connecting to a web
-or mail server more than once) doesn't require contacting the KDC
-every time.
-
-A credential cache usually contains one initial ticket which is
-obtained using a password or another form of identity verification.
-If this ticket is a ticket-granting ticket, it can be used to obtain
-additional credentials without the password. Because the credential
-cache does not store the password, less long-term damage can be done
-to the user's account if the machine is compromised.
-
-A credentials cache stores a default client principal name, set when
-the cache is created. This is the name shown at the top of the
-:ref:`klist(1)` *-A* output.
-
-Each normal cache entry includes a service principal name, a client
-principal name (which, in some ccache types, need not be the same as
-the default), lifetime information, and flags, along with the
-credential itself. There are also other entries, indicated by special
-names, that store additional information.
-
-
-ccache types
-------------
-
-The credential cache interface, like the :ref:`keytab_definition` and
-:ref:`rcache_definition` interfaces, uses `TYPE:value` strings to
-indicate the type of credential cache and any associated cache naming
-data to use.
-
-There are several kinds of credentials cache supported in the MIT
-Kerberos library. Not all are supported on every platform. In most
-cases, it should be correct to use the default type built into the
-library.
-
-#. **API** is only implemented on Windows. It communicates with a
- server process that holds the credentials in memory for the user,
- rather than writing them to disk.
-
-#. **DIR** points to the storage location of the collection of the
- credential caches in *FILE:* format. It is most useful when dealing
- with multiple Kerberos realms and KDCs. For release 1.10 the
- directory must already exist. In post-1.10 releases the
- requirement is for parent directory to exist and the current
- process must have permissions to create the directory if it does
- not exist. See :ref:`col_ccache` for details. New in release 1.10.
- The following residual forms are supported:
-
- * DIR:dirname
- * DIR::dirpath/filename - a single cache within the directory
-
- Switching to a ccache of the latter type causes it to become the
- primary for the directory.
-
-#. **FILE** caches are the simplest and most portable. A simple flat
- file format is used to store one credential after another. This is
- the default ccache type if no type is specified in a ccache name.
-
-#. **KCM** caches work by contacting a daemon process called ``kcm``
- to perform cache operations. If the cache name is just ``KCM:``,
- the default cache as determined by the KCM daemon will be used.
- Newly created caches must generally be named ``KCM:uid:name``,
- where *uid* is the effective user ID of the running process.
-
- KCM client support is new in release 1.13. A KCM daemon has not
- yet been implemented in MIT krb5, but the client will interoperate
- with the KCM daemon implemented by Heimdal. macOS 10.7 and higher
- provides a KCM daemon as part of the operating system, and the
- **KCM** cache type is used as the default cache on that platform in
- a default build.
-
-#. **KEYRING** is Linux-specific, and uses the kernel keyring support
- to store credential data in unswappable kernel memory where only
- the current user should be able to access it. The following
- residual forms are supported:
-
- * KEYRING:name
- * KEYRING:process:name - process keyring
- * KEYRING:thread:name - thread keyring
-
- Starting with release 1.12 the *KEYRING* type supports collections.
- The following new residual forms were added:
-
- * KEYRING:session:name - session keyring
- * KEYRING:user:name - user keyring
- * KEYRING:persistent:uidnumber - persistent per-UID collection.
- Unlike the user keyring, this collection survives after the user
- logs out, until the cache credentials expire. This type of
- ccache requires support from the kernel; otherwise, it will fall
- back to the user keyring.
-
- See :ref:`col_ccache` for details.
-
-#. **MEMORY** caches are for storage of credentials that don't need to
- be made available outside of the current process. For example, a
- memory ccache is used by :ref:`kadmin(1)` to store the
- administrative ticket used to contact the admin server. Memory
- ccaches are faster than file ccaches and are automatically
- destroyed when the process exits.
-
-#. **MSLSA** is a Windows-specific cache type that accesses the
- Windows credential store.
-
-
-.. _col_ccache:
-
-Collections of caches
----------------------
-
-Some credential cache types can support collections of multiple
-caches. One of the caches in the collection is designated as the
-*primary* and will be used when the collection is resolved as a cache.
-When a collection-enabled cache type is the default cache for a
-process, applications can search the specified collection for a
-specific client principal, and GSSAPI applications will automatically
-select between the caches in the collection based on criteria such as
-the target service realm.
-
-Credential cache collections are new in release 1.10, with support
-from the **DIR** and **API** ccache types. Starting in release 1.12,
-collections are also supported by the **KEYRING** ccache type.
-Collections are supported by the **KCM** ccache type in release 1.13.
-
-
-Tool alterations to use cache collection
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-* :ref:`kdestroy(1)` *-A* will destroy all caches in the collection.
-* If the default cache type supports switching, :ref:`kinit(1)`
- *princname* will search the collection for a matching cache and
- store credentials there, or will store credentials in a new unique
- cache of the default type if no existing cache for the principal
- exists. Either way, kinit will switch to the selected cache.
-* :ref:`klist(1)` *-l* will list the caches in the collection.
-* :ref:`klist(1)` *-A* will show the content of all caches in the
- collection.
-* :ref:`kswitch(1)` *-p princname* will search the collection for a
- matching cache and switch to it.
-* :ref:`kswitch(1)` *-c cachename* will switch to a specified cache.
-
-
-Default ccache name
--------------------
-
-The default credential cache name is determined by the following, in
-descending order of priority:
-
-#. The **KRB5CCNAME** environment variable. For example,
- ``KRB5CCNAME=DIR:/mydir/``.
-
-#. The **default_ccache_name** profile variable in :ref:`libdefaults`.
-
-#. The hardcoded default, |ccache|.
+++ /dev/null
-.. _datetime:
-
-Supported date and time formats
-===============================
-
-.. _duration:
-
-Time duration
--------------
-
-This format is used to express a time duration in the Kerberos
-configuration files and user commands. The allowed formats are:
-
- ====================== ============== ============
- Format Example Value
- ---------------------- -------------- ------------
- h:m[:s] 36:00 36 hours
- NdNhNmNs 8h30s 8 hours 30 seconds
- N (number of seconds) 3600 1 hour
- ====================== ============== ============
-
-Here *N* denotes a number, *d* - days, *h* - hours, *m* - minutes,
-*s* - seconds.
-
-.. note::
-
- The time interval should not exceed 2147483647 seconds.
-
-Examples::
-
- Request a ticket valid for one hour, five hours, 30 minutes
- and 10 days respectively:
-
- kinit -l 3600
- kinit -l 5:00
- kinit -l 30m
- kinit -l "10d 0h 0m 0s"
-
-
-.. _getdate:
-
-getdate time
-------------
-
-Some of the kadmin and kdb5_util commands take a date-time in a
-human-readable format. Some of the acceptable date-time
-strings are:
-
- +-----------+------------------+-----------------+
- | | Format | Example |
- +===========+==================+=================+
- | Date | mm/dd/yy | 07/27/12 |
- | +------------------+-----------------+
- | | month dd, yyyy | Jul 27, 2012 |
- | +------------------+-----------------+
- | | yyyy-mm-dd | 2012-07-27 |
- +-----------+------------------+-----------------+
- | Absolute | HH:mm[:ss]pp | 08:30 PM |
- | time +------------------+-----------------+
- | | hh:mm[:ss] | 20:30 |
- +-----------+------------------+-----------------+
- | Relative | N tt | 30 sec |
- | time | | |
- +-----------+------------------+-----------------+
- | Time zone | Z | EST |
- | +------------------+-----------------+
- | | z | -0400 |
- +-----------+------------------+-----------------+
-
-(See :ref:`abbreviation`.)
-
-Examples::
-
- Create a principal that expires on the date indicated:
- addprinc test1 -expire "3/27/12 10:00:07 EST"
- addprinc test2 -expire "January 23, 2015 10:05pm"
- addprinc test3 -expire "22:00 GMT"
- Add a principal that will expire in 30 minutes:
- addprinc test4 -expire "30 minutes"
-
-
-.. _abstime:
-
-Absolute time
--------------
-
-This rarely used date-time format can be noted in one of the
-following ways:
-
-
- +------------------------+----------------------+--------------+
- | Format | Example | Value |
- +========================+======================+==============+
- | yyyymmddhhmmss | 20141231235900 | One minute |
- +------------------------+----------------------+ before 2015 |
- | yyyy.mm.dd.hh.mm.ss | 2014.12.31.23.59.00 | |
- +------------------------+----------------------+ |
- | yymmddhhmmss | 141231235900 | |
- +------------------------+----------------------+ |
- | yy.mm.dd.hh.mm.ss | 14.12.31.23.59.00 | |
- +------------------------+----------------------+ |
- | dd-month-yyyy:hh:mm:ss | 31-Dec-2014:23:59:00 | |
- +------------------------+----------------------+--------------+
- | hh:mm:ss | 20:00:00 | 8 o'clock in |
- +------------------------+----------------------+ the evening |
- | hhmmss | 200000 | |
- +------------------------+----------------------+--------------+
-
-(See :ref:`abbreviation`.)
-
-Example::
-
- Set the default expiration date to July 27, 2012 at 20:30
- default_principal_expiration = 20120727203000
-
-
-.. _abbreviation:
-
-Abbreviations used in this document
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-| *month* : locale’s month name or its abbreviation;
-| *dd* : day of month (01-31);
-| *HH* : hours (00-12);
-| *hh* : hours (00-23);
-| *mm* : in time - minutes (00-59); in date - month (01-12);
-| *N* : number;
-| *pp* : AM or PM;
-| *ss* : seconds (00-60);
-| *tt* : time units (hours, minutes, min, seconds, sec);
-| *yyyy* : year;
-| *yy* : last two digits of the year;
-| *Z* : alphabetic time zone abbreviation;
-| *z* : numeric time zone;
-
-.. note::
-
- - If the date specification contains spaces, you may need to
- enclose it in double quotes;
- - All keywords are case-insensitive.
+++ /dev/null
-.. _basic_concepts:
-
-Kerberos V5 concepts
-====================
-
-
-.. toctree::
- :maxdepth: 1
-
- ccache_def
- keytab_def
- rcache_def
- stash_file_def
- date_format
+++ /dev/null
-.. _keytab_definition:
-
-keytab
-======
-
-A keytab (short for "key table") stores long-term keys for one or more
-principals. Keytabs are normally represented by files in a standard
-format, although in rare cases they can be represented in other ways.
-Keytabs are used most often to allow server applications to accept
-authentications from clients, but can also be used to obtain initial
-credentials for client applications.
-
-Keytabs are named using the format *type*\ ``:``\ *value*. Usually
-*type* is ``FILE`` and *value* is the absolute pathname of the file.
-The other possible value for *type* is ``MEMORY``, which indicates a
-temporary keytab stored in the memory of the current process.
-
-A keytab contains one or more entries, where each entry consists of a
-timestamp (indicating when the entry was written to the keytab), a
-principal name, a key version number, an encryption type, and the
-encryption key itself.
-
-A keytab can be displayed using the :ref:`klist(1)` command with the
-``-k`` option. Keytabs can be created or appended to by extracting
-keys from the KDC database using the :ref:`kadmin(1)` :ref:`ktadd`
-command. Keytabs can be manipulated using the :ref:`ktutil(1)` and
-:ref:`k5srvutil(1)` commands.
-
-
-Default keytab
---------------
-
-The default keytab is used by server applications if the application
-does not request a specific keytab. The name of the default keytab is
-determined by the following, in decreasing order of preference:
-
-#. The **KRB5_KTNAME** environment variable.
-
-#. The **default_keytab_name** profile variable in :ref:`libdefaults`.
-
-#. The hardcoded default, |keytab|.
-
-
-Default client keytab
----------------------
-
-The default client keytab is used, if it is present and readable, to
-automatically obtain initial credentials for GSSAPI client
-applications. The principal name of the first entry in the client
-keytab is used by default when obtaining initial credentials. The
-name of the default client keytab is determined by the following, in
-decreasing order of preference:
-
-#. The **KRB5_CLIENT_KTNAME** environment variable.
-
-#. The **default_client_keytab_name** profile variable in
- :ref:`libdefaults`.
-
-#. The hardcoded default, |ckeytab|.
+++ /dev/null
-.. _rcache_definition:
-
-replay cache
-============
-
-A replay cache (or "rcache") keeps track of all authenticators
-recently presented to a service. If a duplicate authentication
-request is detected in the replay cache, an error message is sent to
-the application program.
-
-The replay cache interface, like the credential cache and
-:ref:`keytab_definition` interfaces, uses `type:residual` strings to
-indicate the type of replay cache and any associated cache naming
-data to use.
-
-Background information
-----------------------
-
-Some Kerberos or GSSAPI services use a simple authentication mechanism
-where a message is sent containing an authenticator, which establishes
-the encryption key that the client will use for talking to the
-service. But nothing about that prevents an eavesdropper from
-recording the messages sent by the client, establishing a new
-connection, and re-sending or "replaying" the same messages; the
-replayed authenticator will establish the same encryption key for the
-new session, and the following messages will be decrypted and
-processed. The attacker may not know what the messages say, and can't
-generate new messages under the same encryption key, but in some
-instances it may be harmful to the user (or helpful to the attacker)
-to cause the server to see the same messages again a second time. For
-example, if the legitimate client sends "delete first message in
-mailbox", a replay from an attacker may delete another, different
-"first" message. (Protocol design to guard against such problems has
-been discussed in :rfc:`4120#section-10`.)
-
-Even if one protocol uses further protection to verify that the client
-side of the connection actually knows the encryption keys (and thus is
-presumably a legitimate user), if another service uses the same
-service principal name, it may be possible to record an authenticator
-used with the first protocol and "replay" it against the second.
-
-The replay cache mitigates these attacks somewhat, by keeping track of
-authenticators that have been seen until their five-minute window
-expires. Different authenticators generated by multiple connections
-from the same legitimate client will generally have different
-timestamps, and thus will not be considered the same.
-
-This mechanism isn't perfect. If a message is sent to one application
-server but a man-in-the-middle attacker can prevent it from actually
-arriving at that server, the attacker could then use the authenticator
-(once!) against a different service on the same host. This could be a
-problem if the message from the client included something more than
-authentication in the first message that could be useful to the
-attacker (which is uncommon; in most protocols the server has to
-indicate a successful authentication before the client sends
-additional messages), or if the simple act of presenting the
-authenticator triggers some interesting action in the service being
-attacked.
-
-Replay cache types
-------------------
-
-Unlike the credential cache and keytab interfaces, replay cache types
-are in lowercase. The following types are defined:
-
-#. **none** disables the replay cache. The residual value is ignored.
-
-#. **file2** (new in release 1.18) uses a hash-based format to store
- replay records. The file may grow to accommodate hash collisions.
- The residual value is the filename.
-
-#. **dfl** is the default type if no environment variable or
- configuration specifies a different type. It stores replay data in
- a file2 replay cache with a filename based on the effective uid.
- The residual value is ignored.
-
-For the dfl type, the location of the replay cache file is determined
-as follows:
-
-#. The directory is taken from the **KRB5RCACHEDIR** environment
- variable, or the **TMPDIR** environment variable, or a temporary
- directory determined at configuration time such as ``/var/tmp``, in
- descending order of preference.
-
-#. The filename is ``krb5_EUID.rcache2`` where EUID is the effective
- uid of the process.
-
-#. The file is opened without following symbolic links, and ownership
- of the file is verified to match the effective uid.
-
-On Windows, the directory for the dfl type is the local appdata
-directory, unless overridden by the **KRB5RCACHEDIR** environment
-variable. The filename on Windows is ``krb5.rcache2``, and the file
-is opened normally.
-
-Default replay cache name
--------------------------
-
-The default replay cache name is determined by the following, in
-descending order of priority:
-
-#. The **KRB5RCACHENAME** environment variable (new in release 1.18).
-
-#. The **KRB5RCACHETYPE** environment variable. If this variable is
- set, the residual value is empty.
-
-#. The **default_rcache_name** profile variable in :ref:`libdefaults`
- (new in release 1.18).
-
-#. If none of the above are set, the default replay cache name is
- ``dfl:``.
+++ /dev/null
-.. _stash_definition:
-
-
-stash file
-============
-
-The stash file is a local copy of the master key that resides in
-encrypted form on the KDC's local disk. The stash file is used to
-authenticate the KDC to itself automatically before starting the
-:ref:`kadmind(8)` and :ref:`krb5kdc(8)` daemons (e.g., as part of the
-machine's boot sequence). The stash file, like the keytab file (see
-:ref:`keytab_file`) is a potential point-of-entry for a break-in, and
-if compromised, would allow unrestricted access to the Kerberos
-database. If you choose to install a stash file, it should be
-readable only by root, and should exist only on the KDC's local disk.
-The file should not be part of any backup of the machine, unless
-access to the backup data is secured as tightly as access to the
-master password itself.
-
-.. note::
-
- If you choose not to install a stash file, the KDC will prompt you for the master key each time it starts up.
- This means that the KDC will not be able to start automatically, such as after a system reboot.
-
-
+++ /dev/null
-Organization of the source directory
-====================================
-
-Below is a brief overview of the organization of the complete source
-directory. More detailed descriptions follow.
-
-=============== ==============================================
-appl Kerberos application client and server programs
-ccapi Credential cache services
-clients Kerberos V5 user programs (See :ref:`user_commands`)
-config Configure scripts
-config-files Sample Kerberos configuration files
-include include files needed to build the Kerberos system
-kadmin Administrative interface to the Kerberos database: :ref:`kadmin(1)`, :ref:`kdb5_util(8)`, :ref:`ktutil(1)`.
-kdc Kerberos V5 Authentication Service and Key Distribution Center
-lib_ Libraries for use with/by Kerberos V5
-plugins Kerberos plugins directory
-po Localization infrastructure
-prototype Templates files containing the MIT copyright message and a placeholder for the title and description of the file.
-kprop Utilities for propagating the database to replica KDCs :ref:`kprop(8)` and :ref:`kpropd(8)`
-tests Test suite
-util_ Various utilities for building/configuring the code, sending bug reports, etc.
-windows Source code for building Kerberos V5 on Windows (see windows/README)
-=============== ==============================================
-
-
-.. _lib:
-
-lib
----
-
-The lib directory contain several subdirectories as well as some
-definition and glue files.
-
- - The apputils directory contains the code for the generic network
- servicing.
- - The crypto subdirectory contains the Kerberos V5 encryption
- library.
- - The gssapi library contains the Generic Security Services API,
- which is a library of commands to be used in secure client-server
- communication.
- - The kadm5 directory contains the libraries for the KADM5
- administration utilities.
- - The Kerberos 5 database libraries are contained in kdb.
- - The krb5 directory contains Kerberos 5 API.
- - The rpc directory contains the API for the Kerberos Remote
- Procedure Call protocol.
-
-
-.. _util:
-
-util
-----
-
-The util directory contains several utility programs and libraries.
- - the programs used to configure and build the code, such as
- autoconf, lndir, kbuild, reconf, and makedepend, are in this
- directory.
- - the profile directory contains most of the functions which parse
- the Kerberos configuration files (krb5.conf and kdc.conf).
- - the Kerberos error table library and utilities (et);
- - the Sub-system library and utilities (ss);
- - database utilities (db2);
- - pseudo-terminal utilities (pty);
- - bug-reporting program send-pr;
- - a generic support library support used by several of our other
- libraries;
- - the build infrastructure for building lightweight Kerberos client
- (collected-client-lib)
- - the tool for validating Kerberos configuration files
- (confvalidator);
- - the toolkit for kernel integrators for building krb5 code subsets
- (gss-kernel-lib);
- - source code for building Kerberos V5 on MacOS (mac)
- - Windows getopt operations (windows)
+++ /dev/null
-Doing the build
-===============
-
-.. _do_build:
-
-Building within a single tree
------------------------------
-
-If you only need to build Kerberos for one platform, using a single
-directory tree which contains both the source files and the object
-files is the simplest. However, if you need to maintain Kerberos for
-a large number of platforms, you will probably want to use separate
-build trees for each platform. We recommend that you look at OS
-Incompatibilities, for notes that we have on particular operating
-systems.
-
-If you don't want separate build trees for each architecture, then use
-the following abbreviated procedure::
-
- cd /u1/krb5-VERSION/src
- ./configure
- make
-
-That's it!
-
-Building with separate build directories
-----------------------------------------
-
-If you wish to keep separate build directories for each platform, you
-can do so using the following procedure. (Note, this requires that
-your make program support VPATH. GNU's make will provide this
-functionality, for example.) If your make program does not support
-this, see the next section.
-
-For example, if you wish to store the binaries in ``tmpbuild`` build
-directory you might use the following procedure::
-
- mkdir /u1/tmpbuild
- cd /u1/tmpbuild
- /u1/krb5-VERSION/src/configure
- make
-
-
-Building using lndir
---------------------
-
-If you wish to keep separate build directories for each platform, and
-you do not have access to a make program which supports VPATH, all is
-not lost. You can use the lndir program to create symbolic link trees
-in your build directory.
-
-For example, if you wish to create a build directory for solaris
-binaries you might use the following procedure::
-
- mkdir /u1/krb5-VERSION/solaris
- cd /u1/krb5-VERSION/solaris
- /u1/krb5-VERSION/src/util/lndir `pwd`/../src
- ./configure
- make
-
-You must give an absolute pathname to lndir because it has a bug that
-makes it fail for relative pathnames. Note that this version differs
-from the latest version as distributed and installed by the
-XConsortium with X11R6. Either version should be acceptable.
-
-
-Installing the binaries
------------------------
-
-Once you have built Kerberos, you should install the binaries. You can
-do this by running::
-
- make install
-
-If you want to install the binaries into a destination directory that
-is not their final destination, which may be convenient if you want to
-build a binary distribution to be deployed on multiple hosts, you may
-use::
-
- make install DESTDIR=/path/to/destdir
-
-This will install the binaries under *DESTDIR/PREFIX*, e.g., the user
-programs will install into *DESTDIR/PREFIX/bin*, the libraries into
-*DESTDIR/PREFIX/lib*, etc. *DESTDIR* must be an absolute path.
-
-Some implementations of make allow multiple commands to be run in
-parallel, for faster builds. We test our Makefiles in parallel builds
-with GNU make only; they may not be compatible with other parallel
-build implementations.
-
-
-Testing the build
------------------
-
-The Kerberos V5 distribution comes with built-in regression tests. To
-run them, simply type the following command while in the top-level
-build directory (i.e., the directory where you sent typed make to
-start building Kerberos; see :ref:`do_build`)::
-
- make check
-
-On some operating systems, you have to run ``make install`` before
-running ``make check``, or the test suite will pick up installed
-versions of Kerberos libraries rather than the newly built ones. You
-can install into a prefix that isn't in the system library search
-path, though. Alternatively, you can configure with
-**-**\ **-disable-rpath**, which renders the build tree less suitable
-for installation, but allows testing without interference from
-previously installed libraries.
-
-There are additional regression tests available, which are not run
-by ``make check``. These tests require manual setup and teardown of
-support infrastructure which is not easily automated, or require
-excessive resources for ordinary use. The procedure for running
-the manual tests is documented at
-https://k5wiki.kerberos.org/wiki/Manual_Testing.
-
-
-Cleaning up the build
----------------------
-
-* Use ``make clean`` to remove all files generated by running make
- command.
-* Use ``make distclean`` to remove all files generated by running
- ./configure script. After running ``make distclean`` your source
- tree (ideally) should look like the raw (just un-tarred) source
- tree.
-
-Using autoconf
---------------
-
-(If you are not a developer, you can ignore this section.)
-
-In the Kerberos V5 source directory, there is a configure script which
-automatically determines the compilation environment and creates the
-proper Makefiles for a particular platform. This configure script is
-generated using autoconf, which you should already have installed if
-you will be making changes to ``src/configure.in``.
-
-Normal users will not need to worry about running autoconf; the
-distribution comes with the configure script already prebuilt.
-
-The autoconf package comes with a script called ``autoreconf`` that
-will automatically run ``autoconf`` and ``autoheader`` as needed. You
-should run ``autoreconf`` from the top source directory, e.g.::
-
- cd /u1/krb5-VERSION/src
- autoreconf --verbose
+++ /dev/null
-.. _build_V5:
-
-Building Kerberos V5
-====================
-
-This section details how to build and install MIT Kerberos software
-from the source.
-
-Prerequisites
--------------
-
-In order to build Kerberos V5, you will need approximately 60-70
-megabytes of disk space. The exact amount will vary depending on the
-platform and whether the distribution is compiled with debugging
-symbol tables or not.
-
-Your C compiler must conform to ANSI C (ISO/IEC 9899:1990, "c89").
-Some operating systems do not have an ANSI C compiler, or their
-default compiler requires extra command-line options to enable ANSI C
-conformance.
-
-If you wish to keep a separate build tree, which contains the compiled
-\*.o file and executables, separate from your source tree, you will
-need a make program which supports **VPATH**, or you will need to use
-a tool such as lndir to produce a symbolic link tree for your build
-tree.
-
-Obtaining the software
-----------------------
-
-The source code can be obtained from MIT Kerberos Distribution page,
-at https://kerberos.org/dist/index.html.
-The MIT Kerberos distribution comes in an archive file, generally
-named krb5-VERSION-signed.tar, where *VERSION* is a placeholder for
-the major and minor versions of MIT Kerberos. (For example, MIT
-Kerberos 1.9 has major version "1" and minor version "9".)
-
-The krb5-VERSION-signed.tar contains a compressed tar file consisting
-of the sources for all of Kerberos (generally named
-krb5-VERSION.tar.gz) and a PGP signature file for this source tree
-(generally named krb5-VERSION.tar.gz.asc). MIT highly recommends that
-you verify the integrity of the source code using this signature,
-e.g., by running::
-
- tar xf krb5-VERSION-signed.tar
- gpg --verify krb5-VERSION.tar.gz.asc
-
-Unpack krb5-VERSION.tar.gz in some directory. In this section we will assume
-that you have chosen the top directory of the distribution the directory
-``/u1/krb5-VERSION``.
-
-Review the README file for the license, copyright and other sprecific to the
-distribution information.
-
-Contents
---------
-.. toctree::
- :maxdepth: 1
-
- directory_org.rst
- doing_build.rst
- options2configure.rst
- osconf.rst
+++ /dev/null
-.. _options2configure:
-
-Options to *configure*
-======================
-
-There are a number of options to configure which you can use to
-control how the Kerberos distribution is built.
-
-Most commonly used options
---------------------------
-
-**-**\ **-help**
- Provides help to configure. This will list the set of commonly
- used options for building Kerberos.
-
-**-**\ **-prefix=**\ *PREFIX*
- By default, Kerberos will install the package's files rooted at
- ``/usr/local``. If you desire to place the binaries into the
- directory *PREFIX*, use this option.
-
-**-**\ **-exec-prefix=**\ *EXECPREFIX*
- This option allows one to separate the architecture independent
- programs from the host-dependent files (configuration files,
- manual pages). Use this option to install architecture-dependent
- programs in *EXECPREFIX*. The default location is the value of
- specified by **-**\ **-prefix** option.
-
-**-**\ **-localstatedir=**\ *LOCALSTATEDIR*
- This option sets the directory for locally modifiable
- single-machine data. In Kerberos, this mostly is useful for
- setting a location for the KDC data files, as they will be
- installed in ``LOCALSTATEDIR/krb5kdc``, which is by default
- ``PREFIX/var/krb5kdc``.
-
-**-**\ **-with-netlib**\ [=\ *libs*]
- Allows for suppression of or replacement of network libraries. By
- default, Kerberos V5 configuration will look for ``-lnsl`` and
- ``-lsocket``. If your operating system has a broken resolver
- library or fails to pass the tests in ``src/tests/resolv``, you
- will need to use this option.
-
-**-**\ **-enable-dns-for-realm**
- Enable the use of DNS to look up a host's Kerberos realm,
- if the information is not provided in
- :ref:`krb5.conf(5)`. See :ref:`mapping_hostnames`
- for information about using DNS to determine the default realm.
- DNS lookups for realm names are disabled by default.
-
-**-**\ **-with-system-et**
- Use an installed version of the error-table (et) support software,
- the compile_et program, the com_err.h header file and the com_err
- library. If these are not in the default locations, you may wish
- to specify ``CPPFLAGS=-I/some/dir`` and
- ``LDFLAGS=-L/some/other/dir`` options at configuration time as
- well.
-
- If this option is not given, a version supplied with the Kerberos
- sources will be built and installed along with the rest of the
- Kerberos tree, for Kerberos applications to link against.
-
-**-**\ **-with-system-ss**
- Use an installed version of the subsystem command-line interface
- software, the mk_cmds program, the ``ss/ss.h`` header file and the
- ss library. If these are not in the default locations, you may
- wish to specify ``CPPFLAGS=-I/some/dir`` and
- ``LDFLAGS=-L/some/other/dir`` options at configuration time as
- well. See also the **SS_LIB** option.
-
- If this option is not given, the ss library supplied with the
- Kerberos sources will be compiled and linked into those programs
- that need it; it will not be installed separately.
-
-**-**\ **-with-system-db**
- Use an installed version of the Berkeley DB package, which must
- provide an API compatible with version 1.85. This option is
- unsupported and untested. In particular, we do not know if the
- database-rename code used in the dumpfile load operation will
- behave properly.
-
- If this option is not given, a version supplied with the Kerberos
- sources will be built and installed. (We are not updating this
- version at this time because of licensing issues with newer
- versions that we haven't investigated sufficiently yet.)
-
-
-Environment variables
----------------------
-
-**CC=**\ *COMPILER*
- Use *COMPILER* as the C compiler.
-
-**CFLAGS=**\ *FLAGS*
- Use *FLAGS* as the default set of C compiler flags.
-
-**CPP=**\ *CPP*
- C preprocessor to use. (e.g., ``CPP='gcc -E'``)
-
-**CPPFLAGS=**\ *CPPOPTS*
- Use *CPPOPTS* as the default set of C preprocessor flags. The
- most common use of this option is to select certain #define's for
- use with the operating system's include files.
-
-
-**DB_HEADER=**\ *headername*
- If db.h is not the correct header file to include to compile
- against the Berkeley DB 1.85 API, specify the correct header file
- name with this option. For example, ``DB_HEADER=db3/db_185.h``.
-
-**DB_LIB=**\ *libs*...
- If ``-ldb`` is not the correct library specification for the
- Berkeley DB library version to be used, override it with this
- option. For example, ``DB_LIB=-ldb-3.3``.
-
-**DEFCCNAME=**\ *ccachename*
- Override the built-in default credential cache name.
- For example, ``DEFCCNAME=DIR:/var/run/user/%{USERID}/ccache``
- See :ref:`parameter_expansion` for information about supported
- parameter expansions.
-
-**DEFCKTNAME=**\ *keytabname*
- Override the built-in default client keytab name.
- The format is the same as for *DEFCCNAME*.
-
-**DEFKTNAME=**\ *keytabname*
- Override the built-in default keytab name.
- The format is the same as for *DEFCCNAME*.
-
-**LD=**\ *LINKER*
- Use *LINKER* as the default loader if it should be different from
- C compiler as specified above.
-
-**LDFLAGS=**\ *LDOPTS*
- This option informs the linker where to get additional libraries
- (e.g., ``-L<lib dir>``).
-
-**LIBS=**\ *LDNAME*
- This option allows one to specify libraries to be passed to the
- linker (e.g., ``-l<library>``)
-
-**SS_LIB=**\ *libs*...
- If ``-lss`` is not the correct way to link in your installed ss
- library, for example if additional support libraries are needed,
- specify the correct link options here. Some variants of this
- library are around which allow for Emacs-like line editing, but
- different versions require different support libraries to be
- explicitly specified.
-
- This option is ignored if **-**\ **-with-system-ss** is not specified.
-
-**YACC**
- The 'Yet Another C Compiler' implementation to use. Defaults to
- the first program found out of: '`bison -y`', '`byacc`',
- '`yacc`'.
-
-**YFLAGS**
- The list of arguments that will be passed by default to $YACC.
- This script will default YFLAGS to the empty string to avoid a
- default value of ``-d`` given by some make applications.
-
-
-Fine tuning of the installation directories
--------------------------------------------
-
-**-**\ **-bindir=**\ *DIR*
- User executables. Defaults to ``EXECPREFIX/bin``, where
- *EXECPREFIX* is the path specified by **-**\ **-exec-prefix**
- configuration option.
-
-**-**\ **-sbindir=**\ *DIR*
- System admin executables. Defaults to ``EXECPREFIX/sbin``, where
- *EXECPREFIX* is the path specified by **-**\ **-exec-prefix**
- configuration option.
-
-**-**\ **-sysconfdir=**\ *DIR*
- Read-only single-machine data such as krb5.conf.
- Defaults to ``PREFIX/etc``, where
- *PREFIX* is the path specified by **-**\ **-prefix** configuration
- option.
-
-**-**\ **-libdir=**\ *DIR*
- Object code libraries. Defaults to ``EXECPREFIX/lib``, where
- *EXECPREFIX* is the path specified by **-**\ **-exec-prefix**
- configuration option.
-
-**-**\ **-includedir=**\ *DIR*
- C header files. Defaults to ``PREFIX/include``, where *PREFIX* is
- the path specified by **-**\ **-prefix** configuration option.
-
-**-**\ **-datarootdir=**\ *DATAROOTDIR*
- Read-only architecture-independent data root. Defaults to
- ``PREFIX/share``, where *PREFIX* is the path specified by
- **-**\ **-prefix** configuration option.
-
-**-**\ **-datadir=**\ *DIR*
- Read-only architecture-independent data. Defaults to path
- specified by **-**\ **-datarootdir** configuration option.
-
-**-**\ **-localedir=**\ *DIR*
- Locale-dependent data. Defaults to ``DATAROOTDIR/locale``, where
- *DATAROOTDIR* is the path specified by **-**\ **-datarootdir**
- configuration option.
-
-**-**\ **-mandir=**\ *DIR*
- Man documentation. Defaults to ``DATAROOTDIR/man``, where
- *DATAROOTDIR* is the path specified by **-**\ **-datarootdir**
- configuration option.
-
-
-Program names
--------------
-
-**-**\ **-program-prefix=**\ *PREFIX*
- Prepend *PREFIX* to the names of the programs when installing
- them. For example, specifying ``--program-prefix=mit-`` at the
- configure time will cause the program named ``abc`` to be
- installed as ``mit-abc``.
-
-**-**\ **-program-suffix=**\ *SUFFIX*
- Append *SUFFIX* to the names of the programs when installing them.
- For example, specifying ``--program-suffix=-mit`` at the configure
- time will cause the program named ``abc`` to be installed as
- ``abc-mit``.
-
-**-**\ **-program-transform-name=**\ *PROGRAM*
- Run ``sed -e PROGRAM`` on installed program names. (*PROGRAM* is a
- sed script).
-
-
-System types
-------------
-
-**-**\ **-build=**\ *BUILD*
- Configure for building on *BUILD*
- (e.g., ``--build=x86_64-linux-gnu``).
-
-**-**\ **-host=**\ *HOST*
- Cross-compile to build programs to run on *HOST*
- (e.g., ``--host=x86_64-linux-gnu``). By default, Kerberos V5
- configuration will look for "build" option.
-
-
-Optional features
------------------
-
-**-**\ **-disable-option-checking**
- Ignore unrecognized --enable/--with options.
-
-**-**\ **-disable-**\ *FEATURE*
- Do not include *FEATURE* (same as --enable-FEATURE=no).
-
-**-**\ **-enable-**\ *FEATURE*\ [=\ *ARG*]
- Include *FEATURE* [ARG=yes].
-
-**-**\ **-enable-maintainer-mode**
- Enable rebuilding of source files, Makefiles, etc.
-
-**-**\ **-disable-delayed-initialization**
- Initialize library code when loaded. Defaults to delay until
- first use.
-
-**-**\ **-disable-thread-support**
- Don't enable thread support. Defaults to enabled.
-
-**-**\ **-disable-rpath**
- Suppress run path flags in link lines.
-
-**-**\ **-enable-athena**
- Build with MIT Project Athena configuration.
-
-**-**\ **-disable-kdc-lookaside-cache**
- Disable the cache which detects client retransmits.
-
-**-**\ **-disable-pkinit**
- Disable PKINIT plugin support.
-
-**-**\ **-disable-aesni**
- Disable support for using AES instructions on x86 platforms.
-
-**-**\ **-enable-asan**\ [=\ *ARG*]
- Enable building with asan memory error checking. If *ARG* is
- given, it controls the -fsanitize compilation flag value (the
- default is "address").
-
-
-Optional packages
------------------
-
-**-**\ **-with-**\ *PACKAGE*\ [=ARG\]
- Use *PACKAGE* (e.g., ``--with-imap``). The default value of *ARG*
- is ``yes``.
-
-**-**\ **-without-**\ *PACKAGE*
- Do not use *PACKAGE* (same as ``--with-PACKAGE=no``)
- (e.g., ``--without-libedit``).
-
-**-**\ **-with-size-optimizations**
- Enable a few optimizations to reduce code size possibly at some
- run-time cost.
-
-**-**\ **-with-system-et**
- Use the com_err library and compile_et utility that are already
- installed on the system, instead of building and installing
- local versions.
-
-**-**\ **-with-system-ss**
- Use the ss library and mk_cmds utility that are already installed
- on the system, instead of building and using private versions.
-
-**-**\ **-with-system-db**
- Use the berkeley db utility already installed on the system,
- instead of using a private version. This option is not
- recommended; enabling it may result in incompatibility with key
- databases originating on other systems.
-
-**-**\ **-with-netlib=**\ *LIBS*
- Use the resolver library specified in *LIBS*. Use this variable
- if the C library resolver is insufficient or broken.
-
-**-**\ **-with-hesiod=**\ *path*
- Compile with Hesiod support. The *path* points to the Hesiod
- directory. By default Hesiod is unsupported.
-
-**-**\ **-with-ldap**
- Compile OpenLDAP database backend module.
-
-**-**\ **-with-lmdb**
- Compile LMDB database backend module.
-
-**-**\ **-with-vague-errors**
- Do not send helpful errors to client. For example, if the KDC
- should return only vague error codes to clients.
-
-**-**\ **-with-crypto-impl=**\ *IMPL*
- Use specified crypto implementation (e.g., **-**\
- **-with-crypto-impl=**\ *openssl*). The default is the native MIT
- Kerberos implementation ``builtin``. The other currently
- implemented crypto backend is ``openssl``. (See
- :ref:`mitK5features`)
-
-**-**\ **-without-libedit**
- Do not compile and link against libedit. Some utilities will no
- longer offer command history or completion in interactive mode if
- libedit is disabled.
-
-**-**\ **-with-readline**
- Compile and link against GNU readline, as an alternative to libedit.
-
-**-**\ **-with-system-verto**
- Use an installed version of libverto. If the libverto header and
- library are not in default locations, you may wish to specify
- ``CPPFLAGS=-I/some/dir`` and ``LDFLAGS=-L/some/other/dir`` options
- at configuration time as well.
-
- If this option is not given, the build system will try to detect
- an installed version of libverto and use it if it is found.
- Otherwise, a version supplied with the Kerberos sources will be
- built and installed. The built-in version does not contain the
- full set of back-end modules and is not a suitable general
- replacement for the upstream version, but will work for the
- purposes of Kerberos.
-
- Specifying **-**\ **-without-system-verto** will cause the built-in
- version of libverto to be used unconditionally.
-
-**-**\ **-with-krb5-config=**\ *PATH*
- Use the krb5-config program at *PATH* to obtain the build-time
- default credential cache, keytab, and client keytab names. The
- default is to use ``krb5-config`` from the program path. Specify
- ``--without-krb5-config`` to disable the use of krb5-config and
- use the usual built-in defaults.
-
-**-**\ **-without-keyutils**
- Build without libkeyutils support. This disables the KEYRING
- credential cache type.
-
-
-Examples
---------
-
-For example, in order to configure Kerberos on a Solaris machine using
-the suncc compiler with the optimizer turned on, run the configure
-script with the following options::
-
- % ./configure CC=suncc CFLAGS=-O
-
-For a slightly more complicated example, consider a system where
-several packages to be used by Kerberos are installed in
-``/usr/foobar``, including Berkeley DB 3.3, and an ss library that
-needs to link against the curses library. The configuration of
-Kerberos might be done thus::
-
- ./configure CPPFLAGS=-I/usr/foobar/include LDFLAGS=-L/usr/foobar/lib \
- --with-system-et --with-system-ss --with-system-db \
- SS_LIB='-lss -lcurses' DB_HEADER=db3/db_185.h DB_LIB=-ldb-3.3
+++ /dev/null
-osconf.hin
-==========
-
-There is one configuration file which you may wish to edit to control
-various compile-time parameters in the Kerberos distribution::
-
- include/osconf.hin
-
-The list that follows is by no means complete, just some of the more
-interesting variables.
-
-**DEFAULT_PROFILE_PATH**
- The pathname to the file which contains the profiles for the known
- realms, their KDCs, etc. The default value is |krb5conf|.
-**DEFAULT_KEYTAB_NAME**
- The type and pathname to the default server keytab file. The
- default is |keytab|.
-**DEFAULT_KDC_ENCTYPE**
- The default encryption type for the KDC database master key. The
- default value is |defmkey|.
-**RCTMPDIR**
- The directory which stores replay caches. The default is
- ``/var/tmp``.
-**DEFAULT_KDB_FILE**
- The location of the default database. The default value is
- |kdcdir|\ ``/principal``.
+++ /dev/null
-How to build this documentation from the source
-===============================================
-
-Pre-requisites for a simple build, or to update man pages:
-
-* Sphinx 1.0.4 or higher (See https://www.sphinx-doc.org) with the
- autodoc extension installed.
-
-Additional prerequisites to include the API reference based on Doxygen
-markup:
-
-* Python 2.5 with the Cheetah, lxml, and xml modules
-* Doxygen
-
-
-Simple build without API reference
-----------------------------------
-
-To test simple changes to the RST sources, you can build the
-documentation without the Doxygen reference by running, from the doc
-directory::
-
- sphinx-build . test_html
-
-You will see a number of warnings about missing files. This is
-expected. If there is not already a ``doc/version.py`` file, you will
-need to create one by first running ``make version.py`` in the
-``src/doc`` directory of a configured build tree.
-
-
-Updating man pages
-------------------
-
-Man pages are generated from the RST sources and checked into the
-``src/man`` directory of the repository. This allows man pages to be
-installed without requiring Sphinx when using a source checkout. To
-regenerate these files, run ``make man`` from the man subdirectory
-of a configured build tree. You can also do this from an unconfigured
-source tree with::
-
- cd src/man
- make -f Makefile.in top_srcdir=.. srcdir=. man
- make clean
-
-As with the simple build, it is normal to see warnings about missing
-files when rebuilding the man pages.
-
-
-Building for a release tarball or web site
-------------------------------------------
-
-To generate documentation in HTML format, run ``make html`` in the
-``doc`` subdirectory of a configured build tree (the build directory
-corresponding to ``src/doc``, not the top-level ``doc`` directory).
-The output will be placed in the top-level ``doc/html`` directory.
-This build will include the API reference generated from Doxygen
-markup in the source tree.
-
-Documentation generated this way will use symbolic names for paths
-(like ``BINDIR`` for the directory containing user programs), with the
-symbolic names being links to a table showing typical values for those
-paths.
-
-You can also do this from an unconfigured source tree with::
-
- cd src/doc
- make -f Makefile.in SPHINX_ARGS= htmlsrc
-
-
-Building for an OS package or site documentation
-------------------------------------------------
-
-To generate documentation specific to a build of MIT krb5 as you have
-configured it, run ``make substhtml`` in the ``doc`` subdirectory of a
-configured build tree (the build directory corresponding to
-``src/doc``, not the top-level ``doc`` directory). The output will be
-placed in the ``html_subst`` subdirectory of that build directory.
-This build will include the API reference.
-
-Documentation generated this way will use concrete paths (like
-``/usr/local/bin`` for the directory containing user programs, for a
-default custom build).
+++ /dev/null
-Copyright
-=========
-
-Copyright |copy| 1985-2022 by the Massachusetts Institute of
-Technology and its contributors. All rights reserved.
-
-See :ref:`mitK5license` for additional copyright and license
-information.
+++ /dev/null
-.. _ccache_file_format:
-
-Credential cache file format
-============================
-
-There are four versions of the file format used by the FILE credential
-cache type. The first byte of the file always has the value 5, and
-the value of the second byte contains the version number (1 through
-4). Versions 1 and 2 of the file format use native byte order for integer
-representations. Versions 3 and 4 always use big-endian byte order.
-
-After the two-byte version indicator, the file has three parts: the
-header (in version 4 only), the default principal name, and a sequence
-of credentials.
-
-
-Header format
--------------
-
-The header appears only in format version 4. It begins with a 16-bit
-integer giving the length of the entire header, followed by a sequence
-of fields. Each field consists of a 16-bit tag, a 16-bit length, and
-a value of the given length. A file format implementation should
-ignore fields with unknown tags.
-
-At this time there is only one defined header field. Its tag value is
-1, its length is always 8, and its contents are two 32-bit integers
-giving the seconds and microseconds of the time offset of the KDC
-relative to the client. Adding this offset to the current time on the
-client should give the current time on the KDC, if that offset has not
-changed since the initial authentication.
-
-
-.. _cache_principal_format:
-
-Principal format
-----------------
-
-The default principal is marshalled using the following informal
-grammar::
-
- principal ::=
- name type (32 bits) [omitted in version 1]
- count of components (32 bits) [includes realm in version 1]
- realm (data)
- component1 (data)
- component2 (data)
- ...
-
- data ::=
- length (32 bits)
- value (length bytes)
-
-There is no external framing on the default principal, so it must be
-parsed according to the above grammar in order to find the sequence of
-credentials which follows.
-
-
-.. _ccache_credential_format:
-
-Credential format
------------------
-
-The credential format uses the following informal grammar (referencing
-the ``principal`` and ``data`` types from the previous section)::
-
- credential ::=
- client (principal)
- server (principal)
- keyblock (keyblock)
- authtime (32 bits)
- starttime (32 bits)
- endtime (32 bits)
- renew_till (32 bits)
- is_skey (1 byte, 0 or 1)
- ticket_flags (32 bits)
- addresses (addresses)
- authdata (authdata)
- ticket (data)
- second_ticket (data)
-
- keyblock ::=
- enctype (16 bits) [repeated twice in version 3]
- data
-
- addresses ::=
- count (32 bits)
- address1
- address2
- ...
-
- address ::=
- addrtype (16 bits)
- data
-
- authdata ::=
- count (32 bits)
- authdata1
- authdata2
- ...
-
- authdata ::=
- ad_type (16 bits)
- data
-
-There is no external framing on a marshalled credential, so it must be
-parsed according to the above grammar in order to find the next
-credential. There is also no count of credentials or marker at the
-end of the sequence of credentials; the sequence ends when the file
-ends.
-
-
-Credential cache configuration entries
---------------------------------------
-
-Configuration entries are encoded as credential entries. The client
-principal of the entry is the default principal of the cache. The
-server principal has the realm ``X-CACHECONF:`` and two or three
-components, the first of which is ``krb5_ccache_conf_data``. The
-server principal's second component is the configuration key. The
-third component, if it exists, is a principal to which the
-configuration key is associated. The configuration value is stored in
-the ticket field of the entry. All other entry fields are zeroed.
-
-Programs using credential caches must be aware of configuration
-entries for several reasons:
-
-* A program which displays the contents of a cache should not
- generally display configuration entries.
-
-* The ticket field of a configuration entry is not (usually) a valid
- encoding of a Kerberos ticket. An implementation must not treat the
- cache file as malformed if it cannot decode the ticket field.
-
-* Configuration entries have an endtime field of 0 and might therefore
- always be considered expired, but they should not be treated as
- unimportant as a result. For instance, a program which copies
- credentials from one cache to another should not omit configuration
- entries because of the endtime.
-
-The following configuration keys are currently used in MIT krb5:
-
-fast_avail
- The presence of this key with a non-empty value indicates that the
- KDC asserted support for FAST (see :rfc:`6113`) during the initial
- authentication, using the negotiation method described in
- :rfc:`6806` section 11. This key is not associated with any
- principal.
-
-pa_config_data
- The value of this key contains a JSON object representation of
- parameters remembered by the preauthentication mechanism used
- during the initial authentication. These parameters may be used
- when refreshing credentials. This key is associated with the
- server principal of the initial authentication (usually the local
- krbtgt principal of the client realm).
-
-pa_type
- The value of this key is the ASCII decimal representation of the
- preauth type number used during the initial authentication. This
- key is associated with the server principal of the initial
- authentication.
-
-proxy_impersonator
- The presence of this key indicates that the cache is a synthetic
- delegated credential for use with S4U2Proxy. The value is the
- name of the intermediate service whose TGT can be used to make
- S4U2Proxy requests for target services. This key is not
- associated with any principal.
-
-refresh_time
- The presence of this key indicates that the cache was acquired by
- the GSS mechanism using a client keytab. The value is the ASCII
- decimal representation of a timestamp at which the GSS mechanism
- should attempt to refresh the credential cache from the client
- keytab.
-
-start_realm
- This key indicates the realm of the ticket-granting ticket to be
- used for TGS requests, when making a referrals request or
- beginning a cross-realm request. If it is not present, the client
- realm is used.
+++ /dev/null
-KDC cookie format
-=================
-
-:rfc:`6113` section 5.2 specifies a pa-data type PA-FX-COOKIE, which
-clients are required to reflect back to the KDC during
-pre-authentication. The MIT krb5 KDC uses the following formats for
-cookies.
-
-
-Trivial cookie (version 0)
---------------------------
-
-If there is no pre-authentication mechanism state information to save,
-a trivial cookie containing the value "MIT" is used. A trivial cookie
-is needed to indicate that the conversation can continue.
-
-
-Secure cookie (version 1)
--------------------------
-
-In release 1.14 and later, a secure cookie can be sent if there is any
-mechanism state to save for the next request. A secure cookie
-contains the concatenation of the following:
-
-* the four bytes "MIT1"
-* a four-byte big-endian kvno value
-* an :rfc:`3961` ciphertext
-
-The ciphertext is encrypted in the cookie key with key usage
-number 513. The cookie key is derived from a key in the local krbtgt
-principal entry for the realm (e.g. ``krbtgt/KRBTEST.COM@KRBTEST.COM``
-if the request is to the ``KRBTEST.COM`` realm). The first krbtgt key
-for the indicated kvno value is combined with the client principal as
-follows::
-
- cookie-key <- random-to-key(PRF+(tgt-key, "COOKIE" | client-princ))
-
-where **random-to-key** is the :rfc:`3961` random-to-key operation for
-the krbtgt key's encryption type, **PRF+** is defined in :rfc:`6113`,
-and ``|`` denotes concatenation. *client-princ* is the request client
-principal name with realm, marshalled according to :rfc:`1964` section
-2.1.1.
-
-The plain text of the encrypted part of a cookie is the DER encoding
-of the following ASN.1 type::
-
- SecureCookie ::= SEQUENCE {
- time INTEGER,
- data SEQUENCE OF PA-DATA,
- ...
- }
-
-The time field represents the cookie creation time; for brevity, it is
-encoded as an integer giving the POSIX timestamp rather than as an
-ASN.1 GeneralizedTime value. The data field contains one element for
-each pre-authentication type which requires saved state. For
-mechanisms which have separate request and reply types, the request
-type is used; this allows the KDC to determine whether a cookie is
-relevant to a request by comparing the request pa-data types to the
-cookie data types.
-
-SPAKE cookie format (version 1)
--------------------------------
-
-Inside the SecureCookie wrapper, a data value of type 151 contains
-state for SPAKE pre-authentication. This data is the concatenation of
-the following:
-
-* a two-byte big-endian version number with the value 1
-* a two-byte big-endian stage number
-* a four-byte big-endian group number
-* a four-byte big-endian length and data for the SPAKE value
-* a four-byte big-endian length and data for the transcript hash
-* zero or more second factor records, each consisting of:
- - a four-byte big-endian second-factor type
- - a four-byte big-endian length and data
-
-The stage value is 0 if the cookie was sent with a challenge message.
-Otherwise it is 1 for the first encdata message sent by the KDC during
-an exchange, 2 for the second, etc..
-
-The group value indicates the group number used in the SPAKE challenge.
-
-For a stage-0 cookie, the SPAKE value is the KDC private key,
-represented in the scalar marshalling form of the group. For other
-cookies, the SPAKE value is the SPAKE result K, represented in the
-group element marshalling form.
-
-For a stage-0 cookie, the transcript hash is the intermediate hash
-after updating with the client support message (if one was sent) and
-challenge. For other cookies it is the final hash.
-
-For a stage-0 cookie, there may be any number of second-factor
-records, including none; a second-factor type need not create a state
-field if it does not need one, and no record is created for SF-NONE.
-For other cookies, there must be exactly one second-factor record
-corresponding to the factor type chosen by the client.
+++ /dev/null
-PKINIT freshness tokens
-=======================
-
-:rfc:`8070` specifies a pa-data type PA_AS_FRESHNESS, which clients
-should reflect within signed PKINIT data to prove recent access to the
-client certificate private key. The contents of a freshness token are
-left to the KDC implementation. The MIT krb5 KDC uses the following
-format for freshness tokens (starting in release 1.17):
-
-* a four-byte big-endian POSIX timestamp
-* a four-byte big-endian key version number
-* an :rfc:`3961` checksum, with no ASN.1 wrapper
-
-The checksum is computed using the first key in the local krbtgt
-principal entry for the realm (e.g. ``krbtgt/KRBTEST.COM@KRBTEST.COM``
-if the request is to the ``KRBTEST.COM`` realm) of the indicated key
-version. The checksum type must be the mandatory checksum type for
-the encryption type of the krbtgt key. The key usage value for the
-checksum is 514.
+++ /dev/null
-Protocols and file formats
-==========================
-
-.. toctree::
- :maxdepth: 1
-
- ccache_file_format
- keytab_file_format
- rcache_file_format
- cookie
- freshness_token
+++ /dev/null
-.. _keytab_file_format:
-
-Keytab file format
-==================
-
-There are two versions of the file format used by the FILE keytab
-type. The first byte of the file always has the value 5, and the
-value of the second byte contains the version number (1 or 2).
-Version 1 of the file format uses native byte order for integer
-representations. Version 2 always uses big-endian byte order.
-
-After the two-byte version indicator, the file contains a sequence of
-signed 32-bit record lengths followed by key records or holes. A
-positive record length indicates a valid key entry whose size is equal
-to or less than the record length. A negative length indicates a
-zero-filled hole whose size is the inverse of the length. A length of
-0 indicates the end of the file.
-
-
-Key entry format
-----------------
-
-A key entry may be smaller in size than the record length which
-precedes it, because it may have replaced a hole which is larger than
-the key entry. Key entries use the following informal grammar::
-
- entry ::=
- principal
- timestamp (32 bits)
- key version (8 bits)
- enctype (16 bits)
- key length (16 bits)
- key contents
- key version (32 bits) [in release 1.14 and later]
-
- principal ::=
- count of components (16 bits) [includes realm in version 1]
- realm (data)
- component1 (data)
- component2 (data)
- ...
- name type (32 bits) [omitted in version 1]
-
- data ::=
- length (16 bits)
- value (length bytes)
-
-The 32-bit key version overrides the 8-bit key version. To determine
-if it is present, the implementation must check that at least 4 bytes
-remain in the record after the other fields are read, and that the
-value of the 32-bit integer contained in those bytes is non-zero.
+++ /dev/null
-Replay cache file format
-========================
-
-This section documents the second version of the replay cache file
-format, used by the "file2" replay cache type (new in release 1.18).
-The first version of the file replay cache format is not documented.
-
-All accesses to the replay cache file take place under an exclusive
-POSIX or Windows file lock, obtained when the file is opened and
-released when it is closed. Replay cache files are automatically
-created when first accessed.
-
-For each store operation, a tag is derived from the checksum part of
-the :RFC:`3961` ciphertext of the authenticator. The checksum is
-coerced to a fixed length of 12 bytes, either through truncation or
-right-padding with zero bytes. A four-byte timestamp is appended to
-the tag to produce a total record length of 16 bytes.
-
-Bytes 0 through 15 of the file contain a hash seed for the SipHash-2-4
-algorithm (siphash_); this field is populated with random bytes when
-the file is first created. All remaining bytes are divided into a
-series of expanding hash tables:
-
-* Bytes 16-16383: hash table 1 (1023 slots)
-* Bytes 16384-49151: hash table 2 (2048 slots)
-* Bytes 49152-114687: hash table 3 (4096 slots)
-* ...
-
-Only some hash tables will be present in the file at any specific
-time, and the final table may be only partially filled. Replay cache
-files may be sparse if the filesystem supports it.
-
-For each table present in the file, the tag is hashed with SipHash-2-4
-using the seed recorded in the file. The first byte of the seed is
-incremented by one (modulo 256) for each table after the first. The
-resulting hash value is taken modulo one less than the table size
-(1022 for the first hash table, 2047 for the second) to produce the
-index. The record may be found at the slot given by the index or at
-the next slot.
-
-All candidate locations for the record must be searched until a slot
-is found with a timestamp of zero (indicating a slot which has never
-been written to) or an offset is reached at or beyond the end of the
-file. Any candidate location with a timestamp value of zero, with a
-timestamp value less than the current time minus clockskew, or at or
-beyond the end of the file is available for writing. When all
-candidate locations have been searched without finding a match, the
-new entry is written to the earliest candidate available for writing.
-
-.. _siphash: https://131002.net/siphash/siphash.pdf
+++ /dev/null
-MIT Kerberos Documentation (|release|)
-======================================
-
-
-.. toctree::
- :maxdepth: 1
-
- user/index.rst
- admin/index.rst
- appdev/index.rst
- plugindev/index.rst
- build/index.rst
- basic/index.rst
- formats/index.rst
- mitK5features.rst
- build_this.rst
- about.rst
- resources
+++ /dev/null
-.. _mitK5defaults:
-
-MIT Kerberos defaults
-=====================
-
-General defaults
-----------------
-
-========================================== ============================= ====================
-Description Default Environment
-========================================== ============================= ====================
-:ref:`keytab_definition` file |keytab| **KRB5_KTNAME**
-Client :ref:`keytab_definition` file |ckeytab| **KRB5_CLIENT_KTNAME**
-Kerberos config file :ref:`krb5.conf(5)` |krb5conf|\ ``:``\ **KRB5_CONFIG**
- |sysconfdir|\ ``/krb5.conf``
-KDC config file :ref:`kdc.conf(5)` |kdcdir|\ ``/kdc.conf`` **KRB5_KDC_PROFILE**
-GSS mechanism config file |sysconfdir|\ ``/gss/mech`` **GSS_MECH_CONFIG**
-KDC database path (DB2) |kdcdir|\ ``/principal``
-Master key :ref:`stash_definition` |kdcdir|\ ``/.k5.``\ *realm*
-Admin server ACL file :ref:`kadm5.acl(5)` |kdcdir|\ ``/kadm5.acl``
-OTP socket directory |kdcrundir|
-Plugin base directory |libdir|\ ``/krb5/plugins``
-:ref:`rcache_definition` directory ``/var/tmp`` **KRB5RCACHEDIR**
-Master key default enctype |defmkey|
-Default :ref:`keysalt list<Keysalt_lists>` |defkeysalts|
-Permitted enctypes |defetypes|
-KDC default port 88
-Admin server port 749
-Password change port 464
-========================================== ============================= ====================
-
-
-Replica KDC propagation defaults
---------------------------------
-
-This table shows defaults used by the :ref:`kprop(8)` and
-:ref:`kpropd(8)` programs.
-
-========================== ================================ ===========
-Description Default Environment
-========================== ================================ ===========
-kprop database dump file |kdcdir|\ ``/replica_datatrans``
-kpropd temporary dump file |kdcdir|\ ``/from_master``
-kdb5_util location |sbindir|\ ``/kdb5_util``
-kprop location |sbindir|\ ``/kprop``
-kpropd ACL file |kdcdir|\ ``/kpropd.acl``
-kprop port 754 KPROP_PORT
-========================== ================================ ===========
-
-
-.. _paths:
-
-Default paths for Unix-like systems
------------------------------------
-
-On Unix-like systems, some paths used by MIT krb5 depend on parameters
-chosen at build time. For a custom build, these paths default to
-subdirectories of ``/usr/local``. When MIT krb5 is integrated into an
-operating system, the paths are generally chosen to match the
-operating system's filesystem layout.
-
-========================== ============= =========================== ===========================
-Description Symbolic name Custom build path Typical OS path
-========================== ============= =========================== ===========================
-User programs BINDIR ``/usr/local/bin`` ``/usr/bin``
-Libraries and plugins LIBDIR ``/usr/local/lib`` ``/usr/lib``
-Parent of KDC state dir LOCALSTATEDIR ``/usr/local/var`` ``/var``
-Parent of KDC runtime dir RUNSTATEDIR ``/usr/local/var/run`` ``/run``
-Administrative programs SBINDIR ``/usr/local/sbin`` ``/usr/sbin``
-Alternate krb5.conf dir SYSCONFDIR ``/usr/local/etc`` ``/etc``
-Default ccache name DEFCCNAME ``FILE:/tmp/krb5cc_%{uid}`` ``FILE:/tmp/krb5cc_%{uid}``
-Default keytab name DEFKTNAME ``FILE:/etc/krb5.keytab`` ``FILE:/etc/krb5.keytab``
-========================== ============= =========================== ===========================
-
-The default client keytab name (DEFCKTNAME) typically defaults to
-``FILE:/usr/local/var/krb5/user/%{euid}/client.keytab`` for a custom
-build. A native build will typically use a path which will vary
-according to the operating system's layout of ``/var``.
+++ /dev/null
-.. highlight:: rst
-
-.. toctree::
- :hidden:
-
- mitK5license.rst
-
-.. _mitK5features:
-
-MIT Kerberos features
-=====================
-
-https://web.mit.edu/kerberos
-
-
-Quick facts
------------
-
-License - :ref:`mitK5license`
-
-Releases:
- - Latest stable: https://web.mit.edu/kerberos/krb5-1.20/
- - Supported: https://web.mit.edu/kerberos/krb5-1.19/
- - Release cycle: approximately 12 months
-
-Supported platforms \/ OS distributions:
- - Windows (KfW 4.0): Windows 7, Vista, XP
- - Solaris: SPARC, x86_64/x86
- - GNU/Linux: Debian x86_64/x86, Ubuntu x86_64/x86, RedHat x86_64/x86
- - BSD: NetBSD x86_64/x86
-
-Crypto backends:
- - builtin - MIT Kerberos native crypto library
- - OpenSSL (1.0\+) - https://www.openssl.org
-
-Database backends: LDAP, DB2, LMDB
-
-krb4 support: Kerberos 5 release < 1.8
-
-DES support: Kerberos 5 release < 1.18 (See :ref:`retiring-des`)
-
-Interoperability
-----------------
-
-`Microsoft`
-
-Starting from release 1.7:
-
-* Follow client principal referrals in the client library when
- obtaining initial tickets.
-
-* KDC can issue realm referrals for service principals based on domain names.
-
-* Extensions supporting DCE RPC, including three-leg GSS context setup
- and unencapsulated GSS tokens inside SPNEGO.
-
-* Microsoft GSS_WrapEX, implemented using the gss_iov API, which is
- similar to the equivalent SSPI functionality. This is needed to
- support some instances of DCE RPC.
-
-* NTLM recognition support in GSS-API, to facilitate dropping in an
- NTLM implementation for improved compatibility with older releases
- of Microsoft Windows.
-
-* KDC support for principal aliases, if the back end supports them.
- Currently, only the LDAP back end supports aliases.
-
-* Support Microsoft set/change password (:rfc:`3244`) protocol in
- kadmind.
-
-* Implement client and KDC support for GSS_C_DELEG_POLICY_FLAG, which
- allows a GSS application to request credential delegation only if
- permitted by KDC policy.
-
-
-Starting from release 1.8:
-
-* Microsoft Services for User (S4U) compatibility
-
-
-`Heimdal`
-
-* Support for KCM credential cache starting from release 1.13
-
-Feature list
-------------
-
-For more information on the specific project see https://k5wiki.kerberos.org/wiki/Projects
-
-Release 1.7
- - Credentials delegation :rfc:`5896`
- - Cross-realm authentication and referrals :rfc:`6806`
- - Master key migration
- - PKINIT :rfc:`4556` :ref:`pkinit`
-
-Release 1.8
- - Anonymous PKINIT :rfc:`6112` :ref:`anonymous_pkinit`
- - Constrained delegation
- - IAKERB https://tools.ietf.org/html/draft-ietf-krb-wg-iakerb-02
- - Heimdal bridge plugin for KDC backend
- - GSS-API S4U extensions https://msdn.microsoft.com/en-us/library/cc246071
- - GSS-API naming extensions :rfc:`6680`
- - GSS-API extensions for storing delegated credentials :rfc:`5588`
-
-Release 1.9
- - Advance warning on password expiry
- - Camellia encryption (CTS-CMAC mode) :rfc:`6803`
- - KDC support for SecurID preauthentication
- - kadmin over IPv6
- - Trace logging :ref:`trace_logging`
- - GSSAPI/KRB5 multi-realm support
- - Plugin to test password quality :ref:`pwqual_plugin`
- - Plugin to synchronize password changes :ref:`kadm5_hook_plugin`
- - Parallel KDC
- - GSS-API extensions for SASL GS2 bridge :rfc:`5801` :rfc:`5587`
- - Purging old keys
- - Naming extensions for delegation chain
- - Password expiration API
- - Windows client support (build-only)
- - IPv6 support in iprop
-
-Release 1.10
- - Plugin interface for configuration :ref:`profile_plugin`
- - Credentials for multiple identities :ref:`ccselect_plugin`
-
-Release 1.11
- - Client support for FAST OTP :rfc:`6560`
- - GSS-API extensions for credential locations
- - Responder mechanism
-
-Release 1.12
- - Plugin to control krb5_aname_to_localname and krb5_kuserok behavior :ref:`localauth_plugin`
- - Plugin to control hostname-to-realm mappings and the default realm :ref:`hostrealm_plugin`
- - GSSAPI extensions for constructing MIC tokens using IOV lists :ref:`gssapi_mic_token`
- - Principal may refer to nonexistent policies `Policy Refcount project <https://k5wiki.kerberos.org/wiki/Projects/Policy_refcount_elimination>`_
- - Support for having no long-term keys for a principal `Principals Without Keys project <https://k5wiki.kerberos.org/wiki/Projects/Principals_without_keys>`_
- - Collection support to the KEYRING credential cache type on Linux :ref:`ccache_definition`
- - FAST OTP preauthentication module for the KDC which uses RADIUS to validate OTP token values :ref:`otp_preauth`
- - Experimental Audit plugin for KDC processing `Audit project <https://k5wiki.kerberos.org/wiki/Projects/Audit>`_
-
-Release 1.13
-
- - Add support for accessing KDCs via an HTTPS proxy server using
- the `MS-KKDCP
- <https://msdn.microsoft.com/en-us/library/hh553774.aspx>`_
- protocol.
- - Add support for `hierarchical incremental propagation
- <https://k5wiki.kerberos.org/wiki/Projects/Hierarchical_iprop>`_,
- where replicas can act as intermediates between an upstream primary
- and other downstream replicas.
- - Add support for configuring GSS mechanisms using
- ``/etc/gss/mech.d/*.conf`` files in addition to
- ``/etc/gss/mech``.
- - Add support to the LDAP KDB module for `binding to the LDAP
- server using SASL
- <https://k5wiki.kerberos.org/wiki/Projects/LDAP_SASL_support>`_.
- - The KDC listens for TCP connections by default.
- - Fix a minor key disclosure vulnerability where using the
- "keepold" option to the kadmin randkey operation could return the
- old keys. `[CVE-2014-5351]
- <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5351>`_
- - Add client support for the Kerberos Cache Manager protocol. If
- the host is running a Heimdal kcm daemon, caches served by the
- daemon can be accessed with the KCM: cache type.
- - When built on macOS 10.7 and higher, use "KCM:" as the default
- cachetype, unless overridden by command-line options or
- krb5-config values.
- - Add support for doing unlocked database dumps for the DB2 KDC
- back end, which would allow the KDC and kadmind to continue
- accessing the database during lengthy database dumps.
-
-Release 1.14
-
- * Administrator experience
-
- - Add a new kdb5_util tabdump command to provide reporting-friendly
- tabular dump formats (tab-separated or CSV) for the KDC database.
- Unlike the normal dump format, each output table has a fixed number
- of fields. Some tables include human-readable forms of data that
- are opaque in ordinary dump files. This format is also suitable for
- importing into relational databases for complex queries.
- - Add support to kadmin and kadmin.local for specifying a single
- command line following any global options, where the command
- arguments are split by the shell--for example, "kadmin getprinc
- principalname". Commands issued this way do not prompt for
- confirmation or display warning messages, and exit with non-zero
- status if the operation fails.
- - Accept the same principal flag names in kadmin as we do for the
- default_principal_flags kdc.conf variable, and vice versa. Also
- accept flag specifiers in the form that kadmin prints, as well as
- hexadecimal numbers.
- - Remove the triple-DES and RC4 encryption types from the default
- value of supported_enctypes, which determines the default key and
- salt types for new password-derived keys. By default, keys will
- only created only for AES128 and AES256. This mitigates some types
- of password guessing attacks.
- - Add support for directory names in the KRB5_CONFIG and
- KRB5_KDC_PROFILE environment variables.
- - Add support for authentication indicators, which are ticket
- annotations to indicate the strength of the initial authentication.
- Add support for the "require_auth" string attribute, which can be
- set on server principal entries to require an indicator when
- authenticating to the server.
- - Add support for key version numbers larger than 255 in keytab files,
- and for version numbers up to 65535 in KDC databases.
- - Transmit only one ETYPE-INFO and/or ETYPE-INFO2 entry from the KDC
- during pre-authentication, corresponding to the client's most
- preferred encryption type.
- - Add support for server name identification (SNI) when proxying KDC
- requests over HTTPS.
- - Add support for the err_fmt profile parameter, which can be used to
- generate custom-formatted error messages.
-
- * Developer experience:
-
- - Change gss_acquire_cred_with_password() to acquire credentials into
- a private memory credential cache. Applications can use
- gss_store_cred() to make the resulting credentials visible to other
- processes.
- - Change gss_acquire_cred() and SPNEGO not to acquire credentials for
- IAKERB or for non-standard variants of the krb5 mechanism OID unless
- explicitly requested. (SPNEGO will still accept the Microsoft
- variant of the krb5 mechanism OID during negotiation.)
- - Change gss_accept_sec_context() not to accept tokens for IAKERB or
- for non-standard variants of the krb5 mechanism OID unless an
- acceptor credential is acquired for those mechanisms.
- - Change gss_acquire_cred() to immediately resolve credentials if the
- time_rec parameter is not NULL, so that a correct expiration time
- can be returned. Normally credential resolution is delayed until
- the target name is known.
- - Add krb5_prepend_error_message() and krb5_wrap_error_message() APIs,
- which can be used by plugin modules or applications to add prefixes
- to existing detailed error messages.
- - Add krb5_c_prfplus() and krb5_c_derive_prfplus() APIs, which
- implement the RFC 6113 PRF+ operation and key derivation using PRF+.
- - Add support for pre-authentication mechanisms which use multiple
- round trips, using the the KDC_ERR_MORE_PREAUTH_DATA_REQUIRED error
- code. Add get_cookie() and set_cookie() callbacks to the kdcpreauth
- interface; these callbacks can be used to save marshalled state
- information in an encrypted cookie for the next request.
- - Add a client_key() callback to the kdcpreauth interface to retrieve
- the chosen client key, corresponding to the ETYPE-INFO2 entry sent
- by the KDC.
- - Add an add_auth_indicator() callback to the kdcpreauth interface,
- allowing pre-authentication modules to assert authentication
- indicators.
- - Add support for the GSS_KRB5_CRED_NO_CI_FLAGS_X cred option to
- suppress sending the confidentiality and integrity flags in GSS
- initiator tokens unless they are requested by the caller. These
- flags control the negotiated SASL security layer for the Microsoft
- GSS-SPNEGO SASL mechanism.
- - Make the FILE credential cache implementation less prone to
- corruption issues in multi-threaded programs, especially on
- platforms with support for open file description locks.
-
- * Performance:
-
- - On replica KDCs, poll the primary KDC immediately after
- processing a full resync, and do not require two full resyncs
- after the primary KDC's log file is reset.
-
-Release 1.15
-
-* Administrator experience:
-
- - Add support to kadmin for remote extraction of current keys
- without changing them (requires a special kadmin permission that
- is excluded from the wildcard permission), with the exception of
- highly protected keys.
-
- - Add a lockdown_keys principal attribute to prevent retrieval of
- the principal's keys (old or new) via the kadmin protocol. In
- newly created databases, this attribute is set on the krbtgt and
- kadmin principals.
-
- - Restore recursive dump capability for DB2 back end, so sites can
- more easily recover from database corruption resulting from power
- failure events.
-
- - Add DNS auto-discovery of KDC and kpasswd servers from URI
- records, in addition to SRV records. URI records can convey TCP
- and UDP servers and primary KDC status in a single DNS lookup, and
- can also point to HTTPS proxy servers.
-
- - Add support for password history to the LDAP back end.
-
- - Add support for principal renaming to the LDAP back end.
-
- - Use the getrandom system call on supported Linux kernels to avoid
- blocking problems when getting entropy from the operating system.
-
-* Code quality:
-
- - Clean up numerous compilation warnings.
-
- - Remove various infrequently built modules, including some preauth
- modules that were not built by default.
-
-* Developer experience:
-
- - Add support for building with OpenSSL 1.1.
-
- - Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
- authenticators in the replay cache. This helps sites that must
- build with FIPS 140 conformant libraries that lack MD5.
-
-* Protocol evolution:
-
- - Add support for the AES-SHA2 enctypes, which allows sites to
- conform to Suite B crypto requirements.
-
-Release 1.16
-
-* Administrator experience:
-
- - The KDC can match PKINIT client certificates against the
- "pkinit_cert_match" string attribute on the client principal
- entry, using the same syntax as the existing "pkinit_cert_match"
- profile option.
-
- - The ktutil addent command supports the "-k 0" option to ignore the
- key version, and the "-s" option to use a non-default salt string.
-
- - kpropd supports a --pid-file option to write a pid file at
- startup, when it is run in standalone mode.
-
- - The "encrypted_challenge_indicator" realm option can be used to
- attach an authentication indicator to tickets obtained using FAST
- encrypted challenge pre-authentication.
-
- - Localization support can be disabled at build time with the
- --disable-nls configure option.
-
-* Developer experience:
-
- - The kdcpolicy pluggable interface allows modules control whether
- tickets are issued by the KDC.
-
- - The kadm5_auth pluggable interface allows modules to control
- whether kadmind grants access to a kadmin request.
-
- - The certauth pluggable interface allows modules to control which
- PKINIT client certificates can authenticate to which client
- principals.
-
- - KDB modules can use the client and KDC interface IP addresses to
- determine whether to allow an AS request.
-
- - GSS applications can query the bit strength of a krb5 GSS context
- using the GSS_C_SEC_CONTEXT_SASL_SSF OID with
- gss_inquire_sec_context_by_oid().
-
- - GSS applications can query the impersonator name of a krb5 GSS
- credential using the GSS_KRB5_GET_CRED_IMPERSONATOR OID with
- gss_inquire_cred_by_oid().
-
- - kdcpreauth modules can query the KDC for the canonicalized
- requested client principal name, or match a principal name against
- the requested client principal name with canonicalization.
-
-* Protocol evolution:
-
- - The client library will continue to try pre-authentication
- mechanisms after most failure conditions.
-
- - The KDC will issue trivially renewable tickets (where the
- renewable lifetime is equal to or less than the ticket lifetime)
- if requested by the client, to be friendlier to scripts.
-
- - The client library will use a random nonce for TGS requests
- instead of the current system time.
-
- - For the RC4 string-to-key or PAC operations, UTF-16 is supported
- (previously only UCS-2 was supported).
-
- - When matching PKINIT client certificates, UPN SANs will be matched
- correctly as UPNs, with canonicalization.
-
-* User experience:
-
- - Dates after the year 2038 are accepted (provided that the platform
- time facilities support them), through the year 2106.
-
- - Automatic credential cache selection based on the client realm
- will take into account the fallback realm and the service
- hostname.
-
- - Referral and alternate cross-realm TGTs will not be cached,
- avoiding some scenarios where they can be added to the credential
- cache multiple times.
-
- - A German translation has been added.
-
-* Code quality:
-
- - The build is warning-clean under clang with the configured warning
- options.
-
- - The automated test suite runs cleanly under AddressSanitizer.
-
-Release 1.17
-
-* Administrator experience:
-
- - A new Kerberos database module using the Lightning Memory-Mapped
- Database library (LMDB) has been added. The LMDB KDB module
- should be more performant and more robust than the DB2 module, and
- may become the default module for new databases in a future
- release.
-
- - "kdb5_util dump" will no longer dump policy entries when specific
- principal names are requested.
-
-* Developer experience:
-
- - The new krb5_get_etype_info() API can be used to retrieve enctype,
- salt, and string-to-key parameters from the KDC for a client
- principal.
-
- - The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
- principal names to be used with GSS-API functions.
-
- - KDC and kadmind modules which call com_err() will now write to the
- log file in a format more consistent with other log messages.
-
- - Programs which use large numbers of memory credential caches
- should perform better.
-
-* Protocol evolution:
-
- - The SPAKE pre-authentication mechanism is now supported. This
- mechanism protects against password dictionary attacks without
- requiring any additional infrastructure such as certificates.
- SPAKE is enabled by default on clients, but must be manually
- enabled on the KDC for this release.
-
- - PKINIT freshness tokens are now supported. Freshness tokens can
- protect against scenarios where an attacker uses temporary access
- to a smart card to generate authentication requests for the
- future.
-
- - Password change operations now prefer TCP over UDP, to avoid
- spurious error messages about replays when a response packet is
- dropped.
-
- - The KDC now supports cross-realm S4U2Self requests when used with
- a third-party KDB module such as Samba's. The client code for
- cross-realm S4U2Self requests is also now more robust.
-
-* User experience:
-
- - The new ktutil addent -f flag can be used to fetch salt
- information from the KDC for password-based keys.
-
- - The new kdestroy -p option can be used to destroy a credential
- cache within a collection by client principal name.
-
- - The Kerberos man page has been restored, and documents the
- environment variables that affect programs using the Kerberos
- library.
-
-* Code quality:
-
- - Python test scripts now use Python 3.
-
- - Python test scripts now display markers in verbose output, making
- it easier to find where a failure occurred within the scripts.
-
- - The Windows build system has been simplified and updated to work
- with more recent versions of Visual Studio. A large volume of
- unused Windows-specific code has been removed. Visual Studio 2013
- or later is now required.
-
-Release 1.18
-
-* Administrator experience:
-
- - Remove support for single-DES encryption types.
-
- - Change the replay cache format to be more efficient and robust.
- Replay cache filenames using the new format end with ``.rcache2``
- by default.
-
- - setuid programs will automatically ignore environment variables
- that normally affect krb5 API functions, even if the caller does
- not use krb5_init_secure_context().
-
- - Add an ``enforce_ok_as_delegate`` krb5.conf relation to disable
- credential forwarding during GSSAPI authentication unless the KDC
- sets the ok-as-delegate bit in the service ticket.
-
-* Developer experience:
-
- - Implement krb5_cc_remove_cred() for all credential cache types.
-
- - Add the krb5_pac_get_client_info() API to get the client account
- name from a PAC.
-
-* Protocol evolution:
-
- - Add KDC support for S4U2Self requests where the user is identified
- by X.509 certificate. (Requires support for certificate lookup
- from a third-party KDB module.)
-
- - Remove support for an old ("draft 9") variant of PKINIT.
-
- - Add support for Microsoft NegoEx. (Requires one or more
- third-party GSS modules implementing NegoEx mechanisms.)
-
-* User experience:
-
- - Add support for ``dns_canonicalize_hostname=fallback``, causing
- host-based principal names to be tried first without DNS
- canonicalization, and again with DNS canonicalization if the
- un-canonicalized server is not found.
-
- - Expand single-component hostnames in hhost-based principal names
- when DNS canonicalization is not used, adding the system's first
- DNS search path as a suffix. Add a ``qualify_shortname``
- krb5.conf relation to override this suffix or disable expansion.
-
-* Code quality:
-
- - The libkrb5 serialization code (used to export and import krb5 GSS
- security contexts) has been simplified and made type-safe.
-
- - The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
- messages has been revised to conform to current coding practices.
-
- - The test suite has been modified to work with macOS System
- Integrity Protection enabled.
-
- - The test suite incorporates soft-pkcs11 so that PKINIT PKCS11
- support can always be tested.
-
-Release 1.19
-
-* Administrator experience:
-
- - When a client keytab is present, the GSSAPI krb5 mech will refresh
- credentials even if the current credentials were acquired
- manually.
-
- - It is now harder to accidentally delete the K/M entry from a KDB.
-
-* Developer experience:
-
- - gss_acquire_cred_from() now supports the "password" and "verify"
- options, allowing credentials to be acquired via password and
- verified using a keytab key.
-
- - When an application accepts a GSS security context, the new
- GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
- both provided matching channel bindings.
-
- - Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self
- requests to identify the desired client principal by certificate.
-
- - PKINIT certauth modules can now cause the hw-authent flag to be
- set in issued tickets.
-
- - The krb5_init_creds_step() API will now issue the same password
- expiration warnings as krb5_get_init_creds_password().
-
-* Protocol evolution:
-
- - Added client and KDC support for Microsoft's Resource-Based
- Constrained Delegation, which allows cross-realm S4U2Proxy
- requests. A third-party database module is required for KDC
- support.
-
- - kadmin/admin is now the preferred server principal name for kadmin
- connections, and the host-based form is no longer created by
- default. The client will still try the host-based form as a
- fallback.
-
- - Added client and server support for Microsoft's
- KERB_AP_OPTIONS_CBT extension, which causes channel bindings to be
- required for the initiator if the acceptor provided them. The
- client will send this option if the client_aware_gss_bindings
- profile option is set.
-
-User experience:
-
- - The default setting of dns_canonicalize_realm is now "fallback".
- Hostnames provided from applications will be tried in principal
- names as given (possibly with shortname qualification), falling
- back to the canonicalized name.
-
- - kinit will now issue a warning if the des3-cbc-sha1 encryption
- type is used in the reply. This encryption type will be
- deprecated and removed in future releases.
-
- - Added kvno flags --out-cache, --no-store, and --cached-only
- (inspired by Heimdal's kgetcred).
-
-Release 1.20
-
-* Administrator experience:
-
- - Added a "disable_pac" realm relation to suppress adding PAC
- authdata to tickets, for realms which do not need to support S4U
- requests.
-
- - Most credential cache types will use atomic replacement when a
- cache is reinitialized using kinit or refreshed from the client
- keytab.
-
- - kprop can now propagate databases with a dump size larger than
- 4GB, if both the client and server are upgraded.
-
- - kprop can now work over NATs that change the destination IP
- address, if the client is upgraded.
-
-* Developer experience:
-
- - Updated the KDB interface. The sign_authdata() method is replaced
- with the issue_pac() method, allowing KDB modules to add logon
- info and other buffers to the PAC issued by the KDC.
-
- - Host-based initiator names are better supported in the GSS krb5
- mechanism.
-
-* Protocol evolution:
-
- - Replaced AD-SIGNEDPATH authdata with minimal PACs.
-
- - To avoid spurious replay errors, password change requests will not
- be attempted over UDP until the attempt over TCP fails.
-
- - PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
-
-* Code quality:
-
- - Updated all code using OpenSSL to be compatible with OpenSSL 3.
-
- - Reorganized the libk5crypto build system to allow the OpenSSL
- back-end to pull in material from the builtin back-end depending
- on the OpenSSL version.
-
- - Simplified the PRNG logic to always use the platform PRNG.
-
- - Converted the remaining Tcl tests to Python.
-
-
-`Pre-authentication mechanisms`
-
-- PW-SALT :rfc:`4120#section-5.2.7.3`
-- ENC-TIMESTAMP :rfc:`4120#section-5.2.7.2`
-- SAM-2
-- FAST negotiation framework (release 1.8) :rfc:`6113`
-- PKINIT with FAST on client (release 1.10) :rfc:`6113`
-- PKINIT :rfc:`4556`
-- FX-COOKIE :rfc:`6113#section-5.2`
-- S4U-X509-USER (release 1.8) https://msdn.microsoft.com/en-us/library/cc246091
-- OTP (release 1.12) :ref:`otp_preauth`
-- SPAKE (release 1.17) :ref:`spake`
+++ /dev/null
-.. _mitK5license:
-
-MIT Kerberos License information
-================================
-
-.. toctree::
- :hidden:
-
- copyright.rst
-
-.. include:: notice.rst
+++ /dev/null
-.. _ccselect_plugin:
-
-Credential cache selection interface (ccselect)
-===============================================
-
-The ccselect interface allows modules to control how credential caches
-are chosen when a GSSAPI client contacts a service. For a detailed
-description of the ccselect interface, see the header file
-``<krb5/ccselect_plugin.h>``.
-
-The primary ccselect method is **choose**, which accepts a server
-principal as input and returns a ccache and/or principal name as
-output. A module can use the krb5_cccol APIs to iterate over the
-cache collection in order to find an appropriate ccache to use.
-
-.. TODO: add reference to the admin guide for ccaches and cache
- collections when we have appropriate sections.
-
-A module can create and destroy per-library-context state objects by
-implementing the **init** and **fini** methods. State objects have
-the type krb5_ccselect_moddata, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object.
-
-A module can have one of two priorities, "authoritative" or
-"heuristic". Results from authoritative modules, if any are
-available, will take priority over results from heuristic modules. A
-module communicates its priority as a result of the **init** method.
+++ /dev/null
-.. _certauth_plugin:
-
-PKINIT certificate authorization interface (certauth)
-=====================================================
-
-The certauth interface was first introduced in release 1.16. It
-allows customization of the X.509 certificate attribute requirements
-placed on certificates used by PKINIT enabled clients. For a detailed
-description of the certauth interface, see the header file
-``<krb5/certauth_plugin.h>``
-
-A certauth module implements the **authorize** method to determine
-whether a client's certificate is authorized to authenticate a client
-principal. **authorize** receives the DER-encoded certificate, the
-requested client principal, and a pointer to the client's
-krb5_db_entry (for modules that link against libkdb5). The method
-must decode the certificate and inspect its attributes to determine if
-it should authorize PKINIT authentication. It returns the
-authorization status and optionally outputs a list of authentication
-indicator strings to be added to the ticket.
-
-Beginning in release 1.19, the authorize method can request that the
-hardware authentication bit be set in the ticket by returning
-**KRB5_CERTAUTH_HWAUTH**. Beginning in release 1.20, the authorize
-method can return **KRB5_CERTAUTH_HWAUTH_PASS** to request that the
-hardware authentication bit be set in the ticket but otherwise defer
-authorization to another certauth module. A module must use its own
-internal or library-provided ASN.1 certificate decoder.
-
-A module can optionally create and destroy module data with the
-**init** and **fini** methods. Module data objects last for the
-lifetime of the KDC process.
-
-If a module allocates and returns a list of authentication indicators
-from **authorize**, it must also implement the **free_ind** method
-to free the list.
+++ /dev/null
-Client preauthentication interface (clpreauth)
-==============================================
-
-During an initial ticket request, a KDC may ask a client to prove its
-knowledge of the password before issuing an encrypted ticket, or to
-use credentials other than a password. This process is called
-preauthentication, and is described in :rfc:`4120` and :rfc:`6113`.
-The clpreauth interface allows the addition of client support for
-preauthentication mechanisms beyond those included in the core MIT
-krb5 code base. For a detailed description of the clpreauth
-interface, see the header file ``<krb5/clpreauth_plugin.h>`` (or
-``<krb5/preauth_plugin.h>`` before release 1.12).
-
-A clpreauth module is generally responsible for:
-
-* Supplying a list of preauth type numbers used by the module in the
- **pa_type_list** field of the vtable structure.
-
-* Indicating what kind of preauthentication mechanism it implements,
- with the **flags** method. In the most common case, this method
- just returns ``PA_REAL``, indicating that it implements a normal
- preauthentication type.
-
-* Examining the padata information included in a PREAUTH_REQUIRED or
- MORE_PREAUTH_DATA_REQUIRED error and producing padata values for the
- next AS request. This is done with the **process** method.
-
-* Examining the padata information included in a successful ticket
- reply, possibly verifying the KDC identity and computing a reply
- key. This is also done with the **process** method.
-
-* For preauthentication types which support it, recovering from errors
- by examining the error data from the KDC and producing a padata
- value for another AS request. This is done with the **tryagain**
- method.
-
-* Receiving option information (supplied by ``kinit -X`` or by an
- application), with the **gic_opts** method.
-
-A clpreauth module can create and destroy per-library-context and
-per-request state objects by implementing the **init**, **fini**,
-**request_init**, and **request_fini** methods. Per-context state
-objects have the type krb5_clpreauth_moddata, and per-request state
-objects have the type krb5_clpreauth_modreq. These are abstract
-pointer types; a module should typically cast these to internal
-types for the state objects.
-
-The **process** and **tryagain** methods have access to a callback
-function and handle (called a "rock") which can be used to get
-additional information about the current request, including the
-expected enctype of the AS reply, the FAST armor key, and the client
-long-term key (prompting for the user password if necessary). A
-callback can also be used to replace the AS reply key if the
-preauthentication mechanism computes one.
+++ /dev/null
-General plugin concepts
-=======================
-
-A krb5 dynamic plugin module is a Unix shared object or Windows DLL.
-Typically, the source code for a dynamic plugin module should live in
-its own project with a build system using automake_ and libtool_, or
-tools with similar functionality.
-
-A plugin module must define a specific symbol name, which depends on
-the pluggable interface and module name. For most pluggable
-interfaces, the exported symbol is a function named
-``INTERFACE_MODULE_initvt``, where *INTERFACE* is the name of the
-pluggable interface and *MODULE* is the name of the module. For these
-interfaces, it is possible for one shared object or DLL to implement
-multiple plugin modules, either for the same pluggable interface or
-for different ones. For example, a shared object could implement both
-KDC and client preauthentication mechanisms, by exporting functions
-named ``kdcpreauth_mymech_initvt`` and ``clpreauth_mymech_initvt``.
-
-.. note: The profile, locate, and GSSAPI mechglue pluggable interfaces
- follow different conventions. See the documentation for
- those interfaces for details. The remainder of this section
- applies to pluggable interfaces which use the standard
- conventions.
-
-A plugin module implementation should include the header file
-``<krb5/INTERFACE_plugin.h>``, where *INTERFACE* is the name of the
-pluggable interface. For instance, a ccselect plugin module
-implementation should use ``#include <krb5/ccselect_plugin.h>``.
-
-.. note: clpreauth and kdcpreauth module implementations should
- include <krb5/preauth_plugin.h>.
-
-initvt functions have the following prototype::
-
- krb5_error_code interface_modname_initvt(krb5_context context,
- int maj_ver, int min_ver,
- krb5_plugin_vtable vtable);
-
-and should do the following:
-
-1. Check that the supplied maj_ver argument is supported by the
- module. If it is not supported, the function should return
- KRB5_PLUGIN_VER_NOTSUPP.
-
-2. Cast the supplied vtable pointer to the structure type
- corresponding to the major version, as documented in the pluggable
- interface header file.
-
-3. Fill in the structure fields with pointers to method functions and
- static data, stopping at the field indicated by the supplied minor
- version. Fields for unimplemented optional methods can be left
- alone; it is not necessary to initialize them to NULL.
-
-In most cases, the context argument will not be used. The initvt
-function should not allocate memory; think of it as a glorified
-structure initializer. Each pluggable interface defines methods for
-allocating and freeing module state if doing so is necessary for the
-interface.
-
-Pluggable interfaces typically include a **name** field in the vtable
-structure, which should be filled in with a pointer to a string
-literal containing the module name.
-
-Here is an example of what an initvt function might look like for a
-fictional pluggable interface named fences, for a module named
-"wicker"::
-
- krb5_error_code
- fences_wicker_initvt(krb5_context context, int maj_ver,
- int min_ver, krb5_plugin_vtable vtable)
- {
- krb5_ccselect_vtable vt;
-
- if (maj_ver == 1) {
- krb5_fences_vtable vt = (krb5_fences_vtable)vtable;
- vt->name = "wicker";
- vt->slats = wicker_slats;
- vt->braces = wicker_braces;
- } else if (maj_ver == 2) {
- krb5_fences_vtable_v2 vt = (krb5_fences_vtable_v2)vtable;
- vt->name = "wicker";
- vt->material = wicker_material;
- vt->construction = wicker_construction;
- if (min_ver < 2)
- return 0;
- vt->footing = wicker_footing;
- if (min_ver < 3)
- return 0;
- vt->appearance = wicker_appearance;
- } else {
- return KRB5_PLUGIN_VER_NOTSUPP;
- }
- return 0;
- }
-
-Logging from KDC and kadmind plugin modules
--------------------------------------------
-
-Plugin modules for the KDC or kadmind daemons can write to the
-configured logging outputs (see :ref:`logging`) by calling the
-**com_err** function. The first argument (*whoami*) is ignored. If
-the second argument (*code*) is zero, the formatted message is logged
-at informational severity; otherwise, the formatted message is logged
-at error severity and includes the error message for the supplied
-code. Here are examples::
-
- com_err("", 0, "Client message contains %d items", nitems);
- com_err("", retval, "while decoding client message");
-
-(The behavior described above is new in release 1.17. In prior
-releases, the *whoami* argument is included for some logging output
-types, the logged message does not include the usual header for some
-output types, and the severity for syslog outputs is configured as
-part of the logging specification, defaulting to error severity.)
-
-.. _automake: https://www.gnu.org/software/automake/
-.. _libtool: https://www.gnu.org/software/libtool/
+++ /dev/null
-GSSAPI mechanism interface
-==========================
-
-The GSSAPI library in MIT krb5 can load mechanism modules to augment
-the set of built-in mechanisms.
-
-.. note: The GSSAPI loadable mechanism interface does not follow the
- normal conventions for MIT krb5 pluggable interfaces.
-
-A mechanism module is a Unix shared object or Windows DLL, built
-separately from the krb5 tree. Modules are loaded according to the
-GSS mechanism config files described in :ref:`gssapi_plugin_config`.
-
-For the most part, a GSSAPI mechanism module exports the same
-functions as would a GSSAPI implementation itself, with the same
-function signatures. The mechanism selection layer within the GSSAPI
-library (called the "mechglue") will dispatch calls from the
-application to the module if the module's mechanism is requested. If
-a module does not wish to implement a GSSAPI extension, it can simply
-refrain from exporting it, and the mechglue will fail gracefully if
-the application calls that function.
-
-The mechglue does not invoke a module's **gss_add_cred**,
-**gss_add_cred_from**, **gss_add_cred_impersonate_name**, or
-**gss_add_cred_with_password** function. A mechanism only needs to
-implement the "acquire" variants of those functions.
-
-A module does not need to coordinate its minor status codes with those
-of other mechanisms. If the mechglue detects conflicts, it will map
-the mechanism's status codes onto unique values, and then map them
-back again when **gss_display_status** is called.
-
-
-NegoEx modules
---------------
-
-Some Windows GSSAPI mechanisms can only be negotiated via a Microsoft
-extension to SPNEGO called NegoEx. Beginning with release 1.18,
-mechanism modules can support NegoEx as follows:
-
-* Implement the gssspi_query_meta_data(), gssspi_exchange_meta_data(),
- and gssspi_query_mechanism_info() SPIs declared in
- ``<gssapi/gssapi_ext.h>``.
-
-* Implement gss_inquire_sec_context_by_oid() and answer the
- **GSS_C_INQ_NEGOEX_KEY** and **GSS_C_INQ_NEGOEX_VERIFY_KEY** OIDs
- to provide the checksum keys for outgoing and incoming checksums,
- respectively. The answer must be in two buffers: the first buffer
- contains the key contents, and the second buffer contains the key
- encryption type as a four-byte little-endian integer.
-
-By default, NegoEx mechanisms will not be directly negotiated via
-SPNEGO. If direct SPNEGO negotiation is required for
-interoperability, implement gss_inquire_attrs_for_mech() and assert
-the GSS_C_MA_NEGOEX_AND_SPNEGO attribute (along with any applicable
-RFC 5587 attributes).
-
-
-Interposer modules
-------------------
-
-The mechglue also supports a kind of loadable module, called an
-interposer module, which intercepts calls to existing mechanisms
-rather than implementing a new mechanism.
-
-An interposer module must export the symbol **gss_mech_interposer**
-with the following signature::
-
- gss_OID_set gss_mech_interposer(gss_OID mech_type);
-
-This function is invoked with the OID of the interposer mechanism as
-specified in the mechanism config file, and returns a set of mechanism
-OIDs to be interposed. The returned OID set must have been created
-using the mechglue's gss_create_empty_oid_set and
-gss_add_oid_set_member functions.
-
-An interposer module must use the prefix ``gssi_`` for the GSSAPI
-functions it exports, instead of the prefix ``gss_``. In most cases,
-unexported ``gssi_`` functions will result in failure from their
-corresponding ``gss_`` calls.
-
-An interposer module can link against the GSSAPI library in order to
-make calls to the original mechanism. To do so, it must specify a
-special mechanism OID which is the concatention of the interposer's
-own OID byte string and the original mechanism's OID byte string.
-
-Functions that do not accept a mechanism argument directly require no
-special handling, with the following exceptions:
-
-Since **gss_accept_sec_context** does not accept a mechanism argument,
-an interposer mechanism must, in order to invoke the original
-mechanism's function, acquire a credential for the concatenated OID
-and pass that as the *verifier_cred_handle* parameter.
-
-Since **gss_import_name**, **gss_import_cred**, and
-**gss_import_sec_context** do not accept mechanism parameters, the SPI
-has been extended to include variants which do. This allows the
-interposer module to know which mechanism should be used to interpret
-the token. These functions have the following signatures::
-
- OM_uint32 gssi_import_sec_context_by_mech(OM_uint32 *minor_status,
- gss_OID desired_mech, gss_buffer_t interprocess_token,
- gss_ctx_id_t *context_handle);
-
- OM_uint32 gssi_import_name_by_mech(OM_uint32 *minor_status,
- gss_OID mech_type, gss_buffer_t input_name_buffer,
- gss_OID input_name_type, gss_name_t output_name);
-
- OM_uint32 gssi_import_cred_by_mech(OM_uint32 *minor_status,
- gss_OID mech_type, gss_buffer_t token,
- gss_cred_id_t *cred_handle);
-
-To re-enter the original mechanism when importing tokens for the above
-functions, the interposer module must wrap the mechanism token in the
-mechglue's format, using the concatenated OID (except in
-**gss_import_name**). The mechglue token formats are:
-
-* For **gss_import_sec_context**, a four-byte OID length in big-endian
- order, followed by the concatenated OID, followed by the mechanism
- token.
-
-* For **gss_import_name**, the bytes 04 01, followed by a two-byte OID
- length in big-endian order, followed by the mechanism OID, followed
- by a four-byte token length in big-endian order, followed by the
- mechanism token. Unlike most uses of OIDs in the API, the mechanism
- OID encoding must include the DER tag and length for an object
- identifier (06 followed by the DER length of the OID byte string),
- and this prefix must be included in the two-byte OID length.
- input_name_type must also be set to GSS_C_NT_EXPORT_NAME.
-
-* For **gss_import_cred**, a four-byte OID length in big-endian order,
- followed by the concatenated OID, followed by a four-byte token
- length in big-endian order, followed by the mechanism token. This
- sequence may be repeated multiple times.
+++ /dev/null
-.. _hostrealm_plugin:
-
-Host-to-realm interface (hostrealm)
-===================================
-
-The host-to-realm interface was first introduced in release 1.12. It
-allows modules to control the local mapping of hostnames to realm
-names as well as the default realm. For a detailed description of the
-hostrealm interface, see the header file
-``<krb5/hostrealm_plugin.h>``.
-
-Although the mapping methods in the hostrealm interface return a list
-of one or more realms, only the first realm in the list is currently
-used by callers. Callers may begin using later responses in the
-future.
-
-Any mapping method may return KRB5_PLUGIN_NO_HANDLE to defer
-processing to a later module.
-
-A module can create and destroy per-library-context state objects
-using the **init** and **fini** methods. If the module does not need
-any state, it does not need to implement these methods.
-
-The optional **host_realm** method allows a module to determine
-authoritative realm mappings for a hostname. The first authoritative
-mapping is used in preference to KDC referrals when getting service
-credentials.
-
-The optional **fallback_realm** method allows a module to determine
-fallback mappings for a hostname. The first fallback mapping is tried
-if there is no authoritative mapping for a realm, and KDC referrals
-failed to produce a successful result.
-
-The optional **default_realm** method allows a module to determine the
-local default realm.
-
-If a module implements any of the above methods, it must also
-implement **free_list** to ensure that memory is allocated and
-deallocated consistently.
+++ /dev/null
-For plugin module developers
-============================
-
-Kerberos plugin modules allow increased control over MIT krb5 library
-and server behavior. This guide describes how to create dynamic
-plugin modules and the currently available pluggable interfaces.
-
-See :ref:`plugin_config` for information on how to register dynamic
-plugin modules and how to enable and disable modules via
-:ref:`krb5.conf(5)`.
-
-.. TODO: update the above reference when we have a free-form section
- in the admin guide about plugin configuration
-
-
-Contents
---------
-
-.. toctree::
- :maxdepth: 2
-
- general.rst
- clpreauth.rst
- kdcpreauth.rst
- ccselect.rst
- pwqual.rst
- kadm5_hook.rst
- kadm5_auth.rst
- hostrealm.rst
- localauth.rst
- locate.rst
- profile.rst
- gssapi.rst
- internal.rst
- certauth.rst
- kdcpolicy.rst
-
-.. TODO: GSSAPI mechanism plugins
+++ /dev/null
-Internal pluggable interfaces
-=============================
-
-Following are brief discussions of pluggable interfaces which have not
-yet been made public. These interfaces are functional, but the
-interfaces are likely to change in incompatible ways from release to
-release. In some cases, it may be necessary to copy header files from
-the krb5 source tree to use an internal interface. Use these with
-care, and expect to need to update your modules for each new release
-of MIT krb5.
-
-
-Kerberos database interface (KDB)
----------------------------------
-
-A KDB module implements a database back end for KDC principal and
-policy information, and can also control many aspects of KDC behavior.
-For a full description of the interface, see the header file
-``<kdb.h>``.
-
-The KDB pluggable interface is often referred to as the DAL (Database
-Access Layer).
-
-
-Authorization data interface (authdata)
----------------------------------------
-
-The authdata interface allows a module to provide (from the KDC) or
-consume (in application servers) authorization data of types beyond
-those handled by the core MIT krb5 code base. The interface is
-defined in the header file ``<krb5/authdata_plugin.h>``, which is not
-installed by the build.
+++ /dev/null
-.. _kadm5_auth_plugin:
-
-kadmin authorization interface (kadm5_auth)
-===========================================
-
-The kadm5_auth interface (new in release 1.16) allows modules to
-determine whether a client principal is authorized to perform an
-operation in the kadmin protocol, and to apply restrictions to
-principal operations. For a detailed description of the kadm5_auth
-interface, see the header file ``<krb5/kadm5_auth_plugin.h>``.
-
-A module can create and destroy per-process state objects by
-implementing the **init** and **fini** methods. State objects have
-the type kadm5_auth_modinfo, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object.
-
-The kadm5_auth interface has one method for each kadmin operation,
-with parameters specific to the operation. Each method can return
-either 0 to authorize access, KRB5_PLUGIN_NO_HANDLE to defer the
-decision to other modules, or another error (canonically EPERM) to
-authoritatively deny access. Access is granted if at least one module
-grants access and no module authoritatively denies access.
-
-The **addprinc** and **modprinc** methods can also impose restrictions
-on the principal operation by returning a ``struct
-kadm5_auth_restrictions`` object. The module should also implement
-the **free_restrictions** method if it dynamically allocates
-restrictions objects for principal operations.
-
-kadm5_auth modules can optionally inspect principal or policy objects.
-To do this, the module must also include ``<kadm5/admin.h>`` to gain
-access to the structure definitions for those objects. As the kadmin
-interface is explicitly not as stable as other public interfaces,
-modules which do this may not retain compatibility across releases.
+++ /dev/null
-.. _kadm5_hook_plugin:
-
-KADM5 hook interface (kadm5_hook)
-=================================
-
-The kadm5_hook interface allows modules to perform actions when
-changes are made to the Kerberos database through :ref:`kadmin(1)`.
-For a detailed description of the kadm5_hook interface, see the header
-file ``<krb5/kadm5_hook_plugin.h>``.
-
-The kadm5_hook interface has five primary methods: **chpass**,
-**create**, **modify**, **remove**, and **rename**. (The **rename**
-method was introduced in release 1.14.) Each of these methods is
-called twice when the corresponding administrative action takes place,
-once before the action is committed and once afterwards. A module can
-prevent the action from taking place by returning an error code during
-the pre-commit stage.
-
-A module can create and destroy per-process state objects by
-implementing the **init** and **fini** methods. State objects have
-the type kadm5_hook_modinfo, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object.
-
-Because the kadm5_hook interface is tied closely to the kadmin
-interface (which is explicitly unstable), it may not remain as stable
-across versions as other public pluggable interfaces.
+++ /dev/null
-.. _kdcpolicy_plugin:
-
-KDC policy interface (kdcpolicy)
-================================
-
-The kdcpolicy interface was first introduced in release 1.16. It
-allows modules to veto otherwise valid AS and TGS requests or restrict
-the lifetime and renew time of the resulting ticket. For a detailed
-description of the kdcpolicy interface, see the header file
-``<krb5/kdcpolicy_plugin.h>``.
-
-The optional **check_as** and **check_tgs** functions allow the module
-to perform access control. Additionally, a module can create and
-destroy module data with the **init** and **fini** methods. Module
-data objects last for the lifetime of the KDC process, and are
-provided to all other methods. The data has the type
-krb5_kdcpolicy_moddata, which should be cast to the appropriate
-internal type.
-
-kdcpolicy modules can optionally inspect principal entries. To do
-this, the module must also include ``<kdb.h>`` to gain access to the
-principal entry structure definition. As the KDB interface is
-explicitly not as stable as other public interfaces, modules which do
-this may not retain compatibility across releases.
+++ /dev/null
-KDC preauthentication interface (kdcpreauth)
-============================================
-
-The kdcpreauth interface allows the addition of KDC support for
-preauthentication mechanisms beyond those included in the core MIT
-krb5 code base. For a detailed description of the kdcpreauth
-interface, see the header file ``<krb5/kdcpreauth_plugin.h>`` (or
-``<krb5/preauth_plugin.h>`` before release 1.12).
-
-A kdcpreauth module is generally responsible for:
-
-* Supplying a list of preauth type numbers used by the module in the
- **pa_type_list** field of the vtable structure.
-
-* Indicating what kind of preauthentication mechanism it implements,
- with the **flags** method. If the mechanism computes a new reply
- key, it must specify the ``PA_REPLACES_KEY`` flag. If the mechanism
- is generally only used with hardware tokens, the ``PA_HARDWARE``
- flag allows the mechanism to work with principals which have the
- **requires_hwauth** flag set.
-
-* Producing a padata value to be sent with a preauth_required error,
- with the **edata** method.
-
-* Examining a padata value sent by a client and verifying that it
- proves knowledge of the appropriate client credential information.
- This is done with the **verify** method.
-
-* Producing a padata response value for the client, and possibly
- computing a reply key. This is done with the **return_padata**
- method.
-
-A module can create and destroy per-KDC state objects by implementing
-the **init** and **fini** methods. Per-KDC state objects have the
-type krb5_kdcpreauth_moddata, which is an abstract pointer types. A
-module should typically cast this to an internal type for the state
-object.
-
-A module can create a per-request state object by returning one in the
-**verify** method, receiving it in the **return_padata** method, and
-destroying it in the **free_modreq** method. Note that these state
-objects only apply to the processing of a single AS request packet,
-not to an entire authentication exchange (since an authentication
-exchange may remain unfinished by the client or may involve multiple
-different KDC hosts). Per-request state objects have the type
-krb5_kdcpreauth_modreq, which is an abstract pointer type.
-
-The **edata**, **verify**, and **return_padata** methods have access
-to a callback function and handle (called a "rock") which can be used
-to get additional information about the current request, including the
-maximum allowable clock skew, the client's long-term keys, the
-DER-encoded request body, the FAST armor key, string attributes on the
-client's database entry, and the client's database entry itself. The
-**verify** method can assert one or more authentication indicators to
-be included in the issued ticket using the ``add_auth_indicator``
-callback (new in release 1.14).
-
-A module can generate state information to be included with the next
-client request using the ``set_cookie`` callback (new in release
-1.14). On the next request, the module can read this state
-information using the ``get_cookie`` callback. Cookie information is
-encrypted, timestamped, and transmitted to the client in a
-``PA-FX-COOKIE`` pa-data item. Older clients may not support cookies
-and therefore may not transmit the cookie in the next request; in this
-case, ``get_cookie`` will not yield the saved information.
-
-If a module implements a mechanism which requires multiple round
-trips, its **verify** method can respond with the code
-``KRB5KDC_ERR_MORE_PREAUTH_DATA_REQUIRED`` and a list of pa-data in
-the *e_data* parameter to be processed by the client.
-
-The **edata** and **verify** methods can be implemented
-asynchronously. Because of this, they do not return values directly
-to the caller, but must instead invoke responder functions with their
-results. A synchronous implementation can invoke the responder
-function immediately. An asynchronous implementation can use the
-callback to get an event context for use with the libverto_ API.
-
-.. _libverto: https://fedorahosted.org/libverto/
+++ /dev/null
-.. _localauth_plugin:
-
-Local authorization interface (localauth)
-=========================================
-
-The localauth interface was first introduced in release 1.12. It
-allows modules to control the relationship between Kerberos principals
-and local system accounts. When an application calls
-:c:func:`krb5_kuserok` or :c:func:`krb5_aname_to_localname`, localauth
-modules are consulted to determine the result. For a detailed
-description of the localauth interface, see the header file
-``<krb5/localauth_plugin.h>``.
-
-A module can create and destroy per-library-context state objects
-using the **init** and **fini** methods. If the module does not need
-any state, it does not need to implement these methods.
-
-The optional **userok** method allows a module to control the behavior
-of :c:func:`krb5_kuserok`. The module receives the authenticated name
-and the local account name as inputs, and can return either 0 to
-authorize access, KRB5_PLUGIN_NO_HANDLE to defer the decision to other
-modules, or another error (canonically EPERM) to authoritatively deny
-access. Access is granted if at least one module grants access and no
-module authoritatively denies access.
-
-The optional **an2ln** method can work in two different ways. If the
-module sets an array of uppercase type names in **an2ln_types**, then
-the module's **an2ln** method will only be invoked by
-:c:func:`krb5_aname_to_localname` if an **auth_to_local** value in
-:ref:`krb5.conf(5)` refers to one of the module's types. In this
-case, the *type* and *residual* arguments will give the type name and
-residual string of the **auth_to_local** value.
-
-If the module does not set **an2ln_types** but does implement
-**an2ln**, the module's **an2ln** method will be invoked for all
-:c:func:`krb5_aname_to_localname` operations unless an earlier module
-determines a mapping, with *type* and *residual* set to NULL. The
-module can return KRB5_LNAME_NO_TRANS to defer mapping to later
-modules.
-
-If a module implements **an2ln**, it must also implement
-**free_string** to ensure that memory is allocated and deallocated
-consistently.
+++ /dev/null
-Server location interface (locate)
-==================================
-
-The locate interface allows modules to control how KDCs and similar
-services are located by clients. For a detailed description of the
-ccselect interface, see the header file ``<krb5/locate_plugin.h>``.
-
-.. note: The locate interface does not follow the normal conventions
- for MIT krb5 pluggable interfaces, because it was made public
- before those conventions were established.
-
-A locate module exports a structure object of type
-krb5plugin_service_locate_ftable, with the name ``service_locator``.
-The structure contains a minor version and pointers to the module's
-methods.
-
-The primary locate method is **lookup**, which accepts a service type,
-realm name, desired socket type, and desired address family (which
-will be AF_UNSPEC if no specific address family is desired). The
-method should invoke the callback function once for each server
-address it wants to return, passing a socket type (SOCK_STREAM for TCP
-or SOCK_DGRAM for UDP) and socket address. The **lookup** method
-should return 0 if it has authoritatively determined the server
-addresses for the realm, KRB5_PLUGIN_NO_HANDLE if it wants to let
-other location mechanisms determine the server addresses, or another
-code if it experienced a failure which should abort the location
-process.
-
-A module can create and destroy per-library-context state objects by
-implementing the **init** and **fini** methods. State objects have
-the type void \*, and should be cast to an internal type for the state
-object.
+++ /dev/null
-.. _profile_plugin:
-
-Configuration interface (profile)
-=================================
-
-The profile interface allows a module to control how krb5
-configuration information is obtained by the Kerberos library and
-applications. For a detailed description of the profile interface,
-see the header file ``<profile.h>``.
-
-.. note::
-
- The profile interface does not follow the normal conventions
- for MIT krb5 pluggable interfaces, because it is part of a
- lower-level component of the krb5 library.
-
-As with other types of plugin modules, a profile module is a Unix
-shared object or Windows DLL, built separately from the krb5 tree.
-The krb5 library will dynamically load and use a profile plugin module
-if it reads a ``module`` directive at the beginning of krb5.conf, as
-described in :ref:`profile_plugin_config`.
-
-A profile module exports a function named ``profile_module_init``
-matching the signature of the profile_module_init_fn type. This
-function accepts a residual string, which may be used to help locate
-the configuration source. The function fills in a vtable and may also
-create a per-profile state object. If the module uses state objects,
-it should implement the **copy** and **cleanup** methods to manage
-them.
-
-A basic read-only profile module need only implement the
-**get_values** and **free_values** methods. The **get_values** method
-accepts a null-terminated list of C string names (e.g., an array
-containing "libdefaults", "clockskew", and NULL for the **clockskew**
-variable in the :ref:`libdefaults` section) and returns a
-null-terminated list of values, which will be cleaned up with the
-**free_values** method when the caller is done with them.
-
-Iterable profile modules must also define the **iterator_create**,
-**iterator**, **iterator_free**, and **free_string** methods. The
-core krb5 code does not require profiles to be iterable, but some
-applications may iterate over the krb5 profile object in order to
-present configuration interfaces.
-
-Writable profile modules must also define the **writable**,
-**modified**, **update_relation**, **rename_section**,
-**add_relation**, and **flush** methods. The core krb5 code does not
-require profiles to be writable, but some applications may write to
-the krb5 profile in order to present configuration interfaces.
-
-The following is an example of a very basic read-only profile module
-which returns a hardcoded value for the **default_realm** variable in
-:ref:`libdefaults`, and provides no other configuration information.
-(For conciseness, the example omits code for checking the return
-values of malloc and strdup.) ::
-
- #include <stdlib.h>
- #include <string.h>
- #include <profile.h>
-
- static long
- get_values(void *cbdata, const char *const *names, char ***values)
- {
- if (names[0] != NULL && strcmp(names[0], "libdefaults") == 0 &&
- names[1] != NULL && strcmp(names[1], "default_realm") == 0) {
- *values = malloc(2 * sizeof(char *));
- (*values)[0] = strdup("ATHENA.MIT.EDU");
- (*values)[1] = NULL;
- return 0;
- }
- return PROF_NO_RELATION;
- }
-
- static void
- free_values(void *cbdata, char **values)
- {
- char **v;
-
- for (v = values; *v; v++)
- free(*v);
- free(values);
- }
-
- long
- profile_module_init(const char *residual, struct profile_vtable *vtable,
- void **cb_ret);
-
- long
- profile_module_init(const char *residual, struct profile_vtable *vtable,
- void **cb_ret)
- {
- *cb_ret = NULL;
- vtable->get_values = get_values;
- vtable->free_values = free_values;
- return 0;
- }
+++ /dev/null
-.. _pwqual_plugin:
-
-Password quality interface (pwqual)
-===================================
-
-The pwqual interface allows modules to control what passwords are
-allowed when a user changes passwords. For a detailed description of
-the pwqual interface, see the header file ``<krb5/pwqual_plugin.h>``.
-
-The primary pwqual method is **check**, which receives a password as
-input and returns success (0) or a ``KADM5_PASS_Q_`` failure code
-depending on whether the password is allowed. The **check** method
-also receives the principal name and the name of the principal's
-password policy as input; although there is no stable interface for
-the module to obtain the fields of the password policy, it can define
-its own configuration or data store based on the policy name.
-
-A module can create and destroy per-process state objects by
-implementing the **open** and **close** methods. State objects have
-the type krb5_pwqual_moddata, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object. The **open** method also receives the name of the realm's
-dictionary file (as configured by the **dict_file** variable in the
-:ref:`kdc_realms` section of :ref:`kdc.conf(5)`) if it wishes to use
-it.
+++ /dev/null
-Resources
-=========
-
-Mailing lists
--------------
-
-* kerberos@mit.edu is a community resource for discussion and
- questions about MIT krb5 and other Kerberos implementations. To
- subscribe to the list, please follow the instructions at
- https://mailman.mit.edu/mailman/listinfo/kerberos.
-* krbdev@mit.edu is the primary list for developers of MIT Kerberos.
- To subscribe to the list, please follow the instructions at
- https://mailman.mit.edu/mailman/listinfo/krbdev.
-* krb5-bugs@mit.edu is notified when a ticket is created or updated.
- This list helps track bugs and feature requests.
- In addition, this list is used to track documentation criticism
- and recommendations for improvements.
-* krbcore@mit.edu is a private list for the MIT krb5 core team. Send
- mail to this list if you need to contact the core team.
-* krbcore-security@mit.edu is the point of contact for security problems
- with MIT Kerberos. Please use PGP-encrypted mail to report possible
- vulnerabilities to this list.
-
-
-IRC channels
-------------
-
-The IRC channel `#kerberos` on libera.chat is a community resource for
-general Kerberos discussion and support.
-
-The main IRC channel for MIT Kerberos development is `#krbdev` on
-Libera Chat.
-
-For more information about Libera Chat, see https://libera.chat/.
-
-
-Archives
---------
-
-* The archive https://mailman.mit.edu/pipermail/kerberos/ contains
- past postings from the `kerberos@mit.edu` list.
-
-* The https://mailman.mit.edu/pipermail/krbdev/ contains past postings
- from the `krbdev@mit.edu` list.
-
-
-Wiki
-----
-
-The wiki at https://k5wiki.kerberos.org/ contains useful information
-for developers working on the MIT Kerberos source code. Some of the
-information on the wiki may be useful for advanced users or system
-administrators.
-
-Web pages
----------
-
-* https://web.mit.edu/kerberos/ is the MIT Kerberos software web page.
-
-* https://kerberos.org/ is the MIT Kerberos Consortium web page.
+++ /dev/null
-For users
-=========
-
-.. toctree::
- :maxdepth: 2
-
- pwd_mgmt.rst
- tkt_mgmt.rst
- user_config/index.rst
- user_commands/index.rst
+++ /dev/null
-Password management
-===================
-
-Your password is the only way Kerberos has of verifying your identity.
-If someone finds out your password, that person can masquerade as
-you---send email that comes from you, read, edit, or delete your files,
-or log into other hosts as you---and no one will be able to tell the
-difference. For this reason, it is important that you choose a good
-password, and keep it secret. If you need to give access to your
-account to someone else, you can do so through Kerberos (see
-:ref:`grant_access`). You should never tell your password to anyone,
-including your system administrator, for any reason. You should
-change your password frequently, particularly any time you think
-someone may have found out what it is.
-
-
-Changing your password
-----------------------
-
-To change your Kerberos password, use the :ref:`kpasswd(1)` command.
-It will ask you for your old password (to prevent someone else from
-walking up to your computer when you're not there and changing your
-password), and then prompt you for the new one twice. (The reason you
-have to type it twice is to make sure you have typed it correctly.)
-For example, user ``david`` would do the following::
-
- shell% kpasswd
- Password for david: <- Type your old password.
- Enter new password: <- Type your new password.
- Enter it again: <- Type the new password again.
- Password changed.
- shell%
-
-If ``david`` typed the incorrect old password, he would get the
-following message::
-
- shell% kpasswd
- Password for david: <- Type the incorrect old password.
- kpasswd: Password incorrect while getting initial ticket
- shell%
-
-If you make a mistake and don't type the new password the same way
-twice, kpasswd will ask you to try again::
-
- shell% kpasswd
- Password for david: <- Type the old password.
- Enter new password: <- Type the new password.
- Enter it again: <- Type a different new password.
- kpasswd: Password mismatch while reading password
- shell%
-
-Once you change your password, it takes some time for the change to
-propagate through the system. Depending on how your system is set up,
-this might be anywhere from a few minutes to an hour or more. If you
-need to get new Kerberos tickets shortly after changing your password,
-try the new password. If the new password doesn't work, try again
-using the old one.
-
-
-.. _grant_access:
-
-Granting access to your account
--------------------------------
-
-If you need to give someone access to log into your account, you can
-do so through Kerberos, without telling the person your password.
-Simply create a file called :ref:`.k5login(5)` in your home directory.
-This file should contain the Kerberos principal of each person to whom
-you wish to give access. Each principal must be on a separate line.
-Here is a sample .k5login file::
-
- jennifer@ATHENA.MIT.EDU
- david@EXAMPLE.COM
-
-This file would allow the users ``jennifer`` and ``david`` to use your
-user ID, provided that they had Kerberos tickets in their respective
-realms. If you will be logging into other hosts across a network, you
-will want to include your own Kerberos principal in your .k5login file
-on each of these hosts.
-
-Using a .k5login file is much safer than giving out your password,
-because:
-
-* You can take access away any time simply by removing the principal
- from your .k5login file.
-
-* Although the user has full access to your account on one particular
- host (or set of hosts if your .k5login file is shared, e.g., over
- NFS), that user does not inherit your network privileges.
-
-* Kerberos keeps a log of who obtains tickets, so a system
- administrator could find out, if necessary, who was capable of using
- your user ID at a particular time.
-
-One common application is to have a .k5login file in root's home
-directory, giving root access to that machine to the Kerberos
-principals listed. This allows system administrators to allow users
-to become root locally, or to log in remotely as root, without their
-having to give out the root password, and without anyone having to
-type the root password over the network.
-
-
-Password quality verification
------------------------------
-
-TODO
+++ /dev/null
-Ticket management
-=================
-
-On many systems, Kerberos is built into the login program, and you get
-tickets automatically when you log in. Other programs, such as ssh,
-can forward copies of your tickets to a remote host. Most of these
-programs also automatically destroy your tickets when they exit.
-However, MIT recommends that you explicitly destroy your Kerberos
-tickets when you are through with them, just to be sure. One way to
-help ensure that this happens is to add the :ref:`kdestroy(1)` command
-to your .logout file. Additionally, if you are going to be away from
-your machine and are concerned about an intruder using your
-permissions, it is safest to either destroy all copies of your
-tickets, or use a screensaver that locks the screen.
-
-
-Kerberos ticket properties
---------------------------
-
-There are various properties that Kerberos tickets can have:
-
-If a ticket is **forwardable**, then the KDC can issue a new ticket
-(with a different network address, if necessary) based on the
-forwardable ticket. This allows for authentication forwarding without
-requiring a password to be typed in again. For example, if a user
-with a forwardable TGT logs into a remote system, the KDC could issue
-a new TGT for that user with the network address of the remote system,
-allowing authentication on that host to work as though the user were
-logged in locally.
-
-When the KDC creates a new ticket based on a forwardable ticket, it
-sets the **forwarded** flag on that new ticket. Any tickets that are
-created based on a ticket with the forwarded flag set will also have
-their forwarded flags set.
-
-A **proxiable** ticket is similar to a forwardable ticket in that it
-allows a service to take on the identity of the client. Unlike a
-forwardable ticket, however, a proxiable ticket is only issued for
-specific services. In other words, a ticket-granting ticket cannot be
-issued based on a ticket that is proxiable but not forwardable.
-
-A **proxy** ticket is one that was issued based on a proxiable ticket.
-
-A **postdated** ticket is issued with the invalid flag set. After the
-starting time listed on the ticket, it can be presented to the KDC to
-obtain valid tickets.
-
-Ticket-granting tickets with the **postdateable** flag set can be used
-to obtain postdated service tickets.
-
-**Renewable** tickets can be used to obtain new session keys without
-the user entering their password again. A renewable ticket has two
-expiration times. The first is the time at which this particular
-ticket expires. The second is the latest possible expiration time for
-any ticket issued based on this renewable ticket.
-
-A ticket with the **initial flag** set was issued based on the
-authentication protocol, and not on a ticket-granting ticket.
-Application servers that wish to ensure that the user's key has been
-recently presented for verification could specify that this flag must
-be set to accept the ticket.
-
-An **invalid** ticket must be rejected by application servers.
-Postdated tickets are usually issued with this flag set, and must be
-validated by the KDC before they can be used.
-
-A **preauthenticated** ticket is one that was only issued after the
-client requesting the ticket had authenticated itself to the KDC.
-
-The **hardware authentication** flag is set on a ticket which required
-the use of hardware for authentication. The hardware is expected to
-be possessed only by the client which requested the tickets.
-
-If a ticket has the **transit policy** checked flag set, then the KDC
-that issued this ticket implements the transited-realm check policy
-and checked the transited-realms list on the ticket. The
-transited-realms list contains a list of all intermediate realms
-between the realm of the KDC that issued the first ticket and that of
-the one that issued the current ticket. If this flag is not set, then
-the application server must check the transited realms itself or else
-reject the ticket.
-
-The **okay as delegate** flag indicates that the server specified in
-the ticket is suitable as a delegate as determined by the policy of
-that realm. Some client applications may use this flag to decide
-whether to forward tickets to a remote host, although many
-applications do not honor it.
-
-An **anonymous** ticket is one in which the named principal is a
-generic principal for that realm; it does not actually specify the
-individual that will be using the ticket. This ticket is meant only
-to securely distribute a session key.
-
-
-.. _obtain_tkt:
-
-Obtaining tickets with kinit
-----------------------------
-
-If your site has integrated Kerberos V5 with the login system, you
-will get Kerberos tickets automatically when you log in. Otherwise,
-you may need to explicitly obtain your Kerberos tickets, using the
-:ref:`kinit(1)` program. Similarly, if your Kerberos tickets expire,
-use the kinit program to obtain new ones.
-
-To use the kinit program, simply type ``kinit`` and then type your
-password at the prompt. For example, Jennifer (whose username is
-``jennifer``) works for Bleep, Inc. (a fictitious company with the
-domain name mit.edu and the Kerberos realm ATHENA.MIT.EDU). She would
-type::
-
- shell% kinit
- Password for jennifer@ATHENA.MIT.EDU: <-- [Type jennifer's password here.]
- shell%
-
-If you type your password incorrectly, kinit will give you the
-following error message::
-
- shell% kinit
- Password for jennifer@ATHENA.MIT.EDU: <-- [Type the wrong password here.]
- kinit: Password incorrect
- shell%
-
-and you won't get Kerberos tickets.
-
-By default, kinit assumes you want tickets for your own username in
-your default realm. Suppose Jennifer's friend David is visiting, and
-he wants to borrow a window to check his mail. David needs to get
-tickets for himself in his own realm, EXAMPLE.COM. He would type::
-
- shell% kinit david@EXAMPLE.COM
- Password for david@EXAMPLE.COM: <-- [Type david's password here.]
- shell%
-
-David would then have tickets which he could use to log onto his own
-machine. Note that he typed his password locally on Jennifer's
-machine, but it never went over the network. Kerberos on the local
-host performed the authentication to the KDC in the other realm.
-
-If you want to be able to forward your tickets to another host, you
-need to request forwardable tickets. You do this by specifying the
-**-f** option::
-
- shell% kinit -f
- Password for jennifer@ATHENA.MIT.EDU: <-- [Type your password here.]
- shell%
-
-Note that kinit does not tell you that it obtained forwardable
-tickets; you can verify this using the :ref:`klist(1)` command (see
-:ref:`view_tkt`).
-
-Normally, your tickets are good for your system's default ticket
-lifetime, which is ten hours on many systems. You can specify a
-different ticket lifetime with the **-l** option. Add the letter
-**s** to the value for seconds, **m** for minutes, **h** for hours, or
-**d** for days. For example, to obtain forwardable tickets for
-``david@EXAMPLE.COM`` that would be good for three hours, you would
-type::
-
- shell% kinit -f -l 3h david@EXAMPLE.COM
- Password for david@EXAMPLE.COM: <-- [Type david's password here.]
- shell%
-
-.. note::
-
- You cannot mix units; specifying a lifetime of 3h30m would
- result in an error. Note also that most systems specify a
- maximum ticket lifetime. If you request a longer ticket
- lifetime, it will be automatically truncated to the maximum
- lifetime.
-
-
-.. _view_tkt:
-
-Viewing tickets with klist
---------------------------
-
-The :ref:`klist(1)` command shows your tickets. When you first obtain
-tickets, you will have only the ticket-granting ticket. The listing
-would look like this::
-
- shell% klist
- Ticket cache: /tmp/krb5cc_ttypa
- Default principal: jennifer@ATHENA.MIT.EDU
-
- Valid starting Expires Service principal
- 06/07/04 19:49:21 06/08/04 05:49:19 krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
- shell%
-
-The ticket cache is the location of your ticket file. In the above
-example, this file is named ``/tmp/krb5cc_ttypa``. The default
-principal is your Kerberos principal.
-
-The "valid starting" and "expires" fields describe the period of time
-during which the ticket is valid. The "service principal" describes
-each ticket. The ticket-granting ticket has a first component
-``krbtgt``, and a second component which is the realm name.
-
-Now, if ``jennifer`` connected to the machine ``daffodil.mit.edu``,
-and then typed "klist" again, she would have gotten the following
-result::
-
- shell% klist
- Ticket cache: /tmp/krb5cc_ttypa
- Default principal: jennifer@ATHENA.MIT.EDU
-
- Valid starting Expires Service principal
- 06/07/04 19:49:21 06/08/04 05:49:19 krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
- 06/07/04 20:22:30 06/08/04 05:49:19 host/daffodil.mit.edu@ATHENA.MIT.EDU
- shell%
-
-Here's what happened: when ``jennifer`` used ssh to connect to the
-host ``daffodil.mit.edu``, the ssh program presented her
-ticket-granting ticket to the KDC and requested a host ticket for the
-host ``daffodil.mit.edu``. The KDC sent the host ticket, which ssh
-then presented to the host ``daffodil.mit.edu``, and she was allowed
-to log in without typing her password.
-
-Suppose your Kerberos tickets allow you to log into a host in another
-domain, such as ``trillium.example.com``, which is also in another
-Kerberos realm, ``EXAMPLE.COM``. If you ssh to this host, you will
-receive a ticket-granting ticket for the realm ``EXAMPLE.COM``, plus
-the new host ticket for ``trillium.example.com``. klist will now
-show::
-
- shell% klist
- Ticket cache: /tmp/krb5cc_ttypa
- Default principal: jennifer@ATHENA.MIT.EDU
-
- Valid starting Expires Service principal
- 06/07/04 19:49:21 06/08/04 05:49:19 krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
- 06/07/04 20:22:30 06/08/04 05:49:19 host/daffodil.mit.edu@ATHENA.MIT.EDU
- 06/07/04 20:24:18 06/08/04 05:49:19 krbtgt/EXAMPLE.COM@ATHENA.MIT.EDU
- 06/07/04 20:24:18 06/08/04 05:49:19 host/trillium.example.com@EXAMPLE.COM
- shell%
-
-Depending on your host's and realm's configuration, you may also see a
-ticket with the service principal ``host/trillium.example.com@``. If
-so, this means that your host did not know what realm
-trillium.example.com is in, so it asked the ``ATHENA.MIT.EDU`` KDC for
-a referral. The next time you connect to ``trillium.example.com``,
-the odd-looking entry will be used to avoid needing to ask for a
-referral again.
-
-You can use the **-f** option to view the flags that apply to your
-tickets. The flags are:
-
-===== =========================
- F Forwardable
- f forwarded
- P Proxiable
- p proxy
- D postDateable
- d postdated
- R Renewable
- I Initial
- i invalid
- H Hardware authenticated
- A preAuthenticated
- T Transit policy checked
- O Okay as delegate
- a anonymous
-===== =========================
-
-Here is a sample listing. In this example, the user *jennifer*
-obtained her initial tickets (**I**), which are forwardable (**F**)
-and postdated (**d**) but not yet validated (**i**)::
-
- shell% klist -f
- Ticket cache: /tmp/krb5cc_320
- Default principal: jennifer@ATHENA.MIT.EDU
-
- Valid starting Expires Service principal
- 31/07/05 19:06:25 31/07/05 19:16:25 krbtgt/ATHENA.MIT.EDU@ATHENA.MIT.EDU
- Flags: FdiI
- shell%
-
-In the following example, the user *david*'s tickets were forwarded
-(**f**) to this host from another host. The tickets are reforwardable
-(**F**)::
-
- shell% klist -f
- Ticket cache: /tmp/krb5cc_p11795
- Default principal: david@EXAMPLE.COM
-
- Valid starting Expires Service principal
- 07/31/05 11:52:29 07/31/05 21:11:23 krbtgt/EXAMPLE.COM@EXAMPLE.COM
- Flags: Ff
- 07/31/05 12:03:48 07/31/05 21:11:23 host/trillium.example.com@EXAMPLE.COM
- Flags: Ff
- shell%
-
-
-Destroying tickets with kdestroy
---------------------------------
-
-Your Kerberos tickets are proof that you are indeed yourself, and
-tickets could be stolen if someone gains access to a computer where
-they are stored. If this happens, the person who has them can
-masquerade as you until they expire. For this reason, you should
-destroy your Kerberos tickets when you are away from your computer.
-
-Destroying your tickets is easy. Simply type kdestroy::
-
- shell% kdestroy
- shell%
-
-If :ref:`kdestroy(1)` fails to destroy your tickets, it will beep and
-give an error message. For example, if kdestroy can't find any
-tickets to destroy, it will give the following message::
-
- shell% kdestroy
- kdestroy: No credentials cache file found while destroying cache
- shell%
+++ /dev/null
-.. _user_commands:
-
-User commands
-=============
-
-.. toctree::
- :maxdepth: 1
-
- kdestroy.rst
- kinit.rst
- klist.rst
- kpasswd.rst
- krb5-config.rst
- ksu.rst
- kswitch.rst
- kvno.rst
- sclient.rst
+++ /dev/null
-.. _kdestroy(1):
-
-kdestroy
-========
-
-SYNOPSIS
---------
-
-**kdestroy**
-[**-A**]
-[**-q**]
-[**-c** *cache_name*]
-[**-p** *princ_name*]
-
-
-DESCRIPTION
------------
-
-The kdestroy utility destroys the user's active Kerberos authorization
-tickets by overwriting and deleting the credentials cache that
-contains them. If the credentials cache is not specified, the default
-credentials cache is destroyed.
-
-
-OPTIONS
--------
-
-**-A**
- Destroys all caches in the collection, if a cache collection is
- available. May be used with the **-c** option to specify the
- collection to be destroyed.
-
-**-q**
- Run quietly. Normally kdestroy beeps if it fails to destroy the
- user's tickets. The **-q** flag suppresses this behavior.
-
-**-c** *cache_name*
- Use *cache_name* as the credentials (ticket) cache name and
- location; if this option is not used, the default cache name and
- location are used.
-
- The default credentials cache may vary between systems. If the
- **KRB5CCNAME** environment variable is set, its value is used to
- name the default ticket cache.
-
-**-p** *princ_name*
- If a cache collection is available, destroy the cache for
- *princ_name* instead of the primary cache. May be used with the
- **-c** option to specify the collection to be searched.
-
-
-NOTE
-----
-
-Most installations recommend that you place the kdestroy command in
-your .logout file, so that your tickets are destroyed automatically
-when you log out.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-FILES
------
-
-|ccache|
- Default location of Kerberos 5 credentials cache
-
-
-SEE ALSO
---------
-
-:ref:`kinit(1)`, :ref:`klist(1)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _kinit(1):
-
-kinit
-=====
-
-SYNOPSIS
---------
-
-**kinit**
-[**-V**]
-[**-l** *lifetime*]
-[**-s** *start_time*]
-[**-r** *renewable_life*]
-[**-p** | -**P**]
-[**-f** | -**F**]
-[**-a**]
-[**-A**]
-[**-C**]
-[**-E**]
-[**-v**]
-[**-R**]
-[**-k** [**-i** | -**t** *keytab_file*]]
-[**-c** *cache_name*]
-[**-n**]
-[**-S** *service_name*]
-[**-I** *input_ccache*]
-[**-T** *armor_ccache*]
-[**-X** *attribute*\ [=\ *value*]]
-[**--request-pac** | **--no-request-pac**]
-[*principal*]
-
-
-DESCRIPTION
------------
-
-kinit obtains and caches an initial ticket-granting ticket for
-*principal*. If *principal* is absent, kinit chooses an appropriate
-principal name based on existing credential cache contents or the
-local username of the user invoking kinit. Some options modify the
-choice of principal name.
-
-
-OPTIONS
--------
-
-**-V**
- display verbose output.
-
-**-l** *lifetime*
- (:ref:`duration` string.) Requests a ticket with the lifetime
- *lifetime*.
-
- For example, ``kinit -l 5:30`` or ``kinit -l 5h30m``.
-
- If the **-l** option is not specified, the default ticket lifetime
- (configured by each site) is used. Specifying a ticket lifetime
- longer than the maximum ticket lifetime (configured by each site)
- will not override the configured maximum ticket lifetime.
-
-**-s** *start_time*
- (:ref:`duration` string.) Requests a postdated ticket. Postdated
- tickets are issued with the **invalid** flag set, and need to be
- resubmitted to the KDC for validation before use.
-
- *start_time* specifies the duration of the delay before the ticket
- can become valid.
-
-**-r** *renewable_life*
- (:ref:`duration` string.) Requests renewable tickets, with a total
- lifetime of *renewable_life*.
-
-**-f**
- requests forwardable tickets.
-
-**-F**
- requests non-forwardable tickets.
-
-**-p**
- requests proxiable tickets.
-
-**-P**
- requests non-proxiable tickets.
-
-**-a**
- requests tickets restricted to the host's local address[es].
-
-**-A**
- requests tickets not restricted by address.
-
-**-C**
- requests canonicalization of the principal name, and allows the
- KDC to reply with a different client principal from the one
- requested.
-
-**-E**
- treats the principal name as an enterprise name.
-
-**-v**
- requests that the ticket-granting ticket in the cache (with the
- **invalid** flag set) be passed to the KDC for validation. If the
- ticket is within its requested time range, the cache is replaced
- with the validated ticket.
-
-**-R**
- requests renewal of the ticket-granting ticket. Note that an
- expired ticket cannot be renewed, even if the ticket is still
- within its renewable life.
-
- Note that renewable tickets that have expired as reported by
- :ref:`klist(1)` may sometimes be renewed using this option,
- because the KDC applies a grace period to account for client-KDC
- clock skew. See :ref:`krb5.conf(5)` **clockskew** setting.
-
-**-k** [**-i** | **-t** *keytab_file*]
- requests a ticket, obtained from a key in the local host's keytab.
- The location of the keytab may be specified with the **-t**
- *keytab_file* option, or with the **-i** option to specify the use
- of the default client keytab; otherwise the default keytab will be
- used. By default, a host ticket for the local host is requested,
- but any principal may be specified. On a KDC, the special keytab
- location ``KDB:`` can be used to indicate that kinit should open
- the KDC database and look up the key directly. This permits an
- administrator to obtain tickets as any principal that supports
- authentication based on the key.
-
-**-n**
- Requests anonymous processing. Two types of anonymous principals
- are supported.
-
- For fully anonymous Kerberos, configure pkinit on the KDC and
- configure **pkinit_anchors** in the client's :ref:`krb5.conf(5)`.
- Then use the **-n** option with a principal of the form ``@REALM``
- (an empty principal name followed by the at-sign and a realm
- name). If permitted by the KDC, an anonymous ticket will be
- returned.
-
- A second form of anonymous tickets is supported; these
- realm-exposed tickets hide the identity of the client but not the
- client's realm. For this mode, use ``kinit -n`` with a normal
- principal name. If supported by the KDC, the principal (but not
- realm) will be replaced by the anonymous principal.
-
- As of release 1.8, the MIT Kerberos KDC only supports fully
- anonymous operation.
-
-**-I** *input_ccache*
-
- Specifies the name of a credentials cache that already contains a
- ticket. When obtaining that ticket, if information about how that
- ticket was obtained was also stored to the cache, that information
- will be used to affect how new credentials are obtained, including
- preselecting the same methods of authenticating to the KDC.
-
-**-T** *armor_ccache*
- Specifies the name of a credentials cache that already contains a
- ticket. If supported by the KDC, this cache will be used to armor
- the request, preventing offline dictionary attacks and allowing
- the use of additional preauthentication mechanisms. Armoring also
- makes sure that the response from the KDC is not modified in
- transit.
-
-**-c** *cache_name*
- use *cache_name* as the Kerberos 5 credentials (ticket) cache
- location. If this option is not used, the default cache location
- is used.
-
- The default cache location may vary between systems. If the
- **KRB5CCNAME** environment variable is set, its value is used to
- locate the default cache. If a principal name is specified and
- the type of the default cache supports a collection (such as the
- DIR type), an existing cache containing credentials for the
- principal is selected or a new one is created and becomes the new
- primary cache. Otherwise, any existing contents of the default
- cache are destroyed by kinit.
-
-**-S** *service_name*
- specify an alternate service name to use when getting initial
- tickets.
-
-**-X** *attribute*\ [=\ *value*]
- specify a pre-authentication *attribute* and *value* to be
- interpreted by pre-authentication modules. The acceptable
- attribute and value values vary from module to module. This
- option may be specified multiple times to specify multiple
- attributes. If no value is specified, it is assumed to be "yes".
-
- The following attributes are recognized by the PKINIT
- pre-authentication mechanism:
-
- **X509_user_identity**\ =\ *value*
- specify where to find user's X509 identity information
-
- **X509_anchors**\ =\ *value*
- specify where to find trusted X509 anchor information
-
- **flag_RSA_PROTOCOL**\ [**=yes**]
- specify use of RSA, rather than the default Diffie-Hellman
- protocol
-
- **disable_freshness**\ [**=yes**]
- disable sending freshness tokens (for testing purposes only)
-
-**--request-pac** | **--no-request-pac**
- mutually exclusive. If **--request-pac** is set, ask the KDC to
- include a PAC in authdata; if **--no-request-pac** is set, ask the
- KDC not to include a PAC; if neither are set, the KDC will follow
- its default, which is typically is to include a PAC if doing so is
- supported.
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-FILES
------
-
-|ccache|
- default location of Kerberos 5 credentials cache
-
-|keytab|
- default location for the local host's keytab.
-
-
-SEE ALSO
---------
-
-:ref:`klist(1)`, :ref:`kdestroy(1)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _klist(1):
-
-klist
-=====
-
-SYNOPSIS
---------
-
-**klist**
-[**-e**]
-[[**-c**] [**-l**] [**-A**] [**-f**] [**-s**] [**-a** [**-n**]]]
-[**-C**]
-[**-k** [**-i**] [**-t**] [**-K**]]
-[**-V**]
-[**-d**]
-[*cache_name*\|\ *keytab_name*]
-
-
-DESCRIPTION
------------
-
-klist lists the Kerberos principal and Kerberos tickets held in a
-credentials cache, or the keys held in a keytab file.
-
-
-OPTIONS
--------
-
-**-e**
- Displays the encryption types of the session key and the ticket
- for each credential in the credential cache, or each key in the
- keytab file.
-
-**-l**
- If a cache collection is available, displays a table summarizing
- the caches present in the collection.
-
-**-A**
- If a cache collection is available, displays the contents of all
- of the caches in the collection.
-
-**-c**
- List tickets held in a credentials cache. This is the default if
- neither **-c** nor **-k** is specified.
-
-**-f**
- Shows the flags present in the credentials, using the following
- abbreviations::
-
- F Forwardable
- f forwarded
- P Proxiable
- p proxy
- D postDateable
- d postdated
- R Renewable
- I Initial
- i invalid
- H Hardware authenticated
- A preAuthenticated
- T Transit policy checked
- O Okay as delegate
- a anonymous
-
-**-s**
- Causes klist to run silently (produce no output). klist will exit
- with status 1 if the credentials cache cannot be read or is
- expired, and with status 0 otherwise.
-
-**-a**
- Display list of addresses in credentials.
-
-**-n**
- Show numeric addresses instead of reverse-resolving addresses.
-
-**-C**
- List configuration data that has been stored in the credentials
- cache when klist encounters it. By default, configuration data
- is not listed.
-
-**-k**
- List keys held in a keytab file.
-
-**-i**
- In combination with **-k**, defaults to using the default client
- keytab instead of the default acceptor keytab, if no name is
- given.
-
-**-t**
- Display the time entry timestamps for each keytab entry in the
- keytab file.
-
-**-K**
- Display the value of the encryption key in each keytab entry in
- the keytab file.
-
-**-d**
- Display the authdata types (if any) for each entry.
-
-**-V**
- Display the Kerberos version number and exit.
-
-If *cache_name* or *keytab_name* is not specified, klist will display
-the credentials in the default credentials cache or keytab file as
-appropriate. If the **KRB5CCNAME** environment variable is set, its
-value is used to locate the default ticket cache.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-FILES
------
-
-|ccache|
- Default location of Kerberos 5 credentials cache
-
-|keytab|
- Default location for the local host's keytab file.
-
-
-SEE ALSO
---------
-
-:ref:`kinit(1)`, :ref:`kdestroy(1)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _kpasswd(1):
-
-kpasswd
-=======
-
-SYNOPSIS
---------
-
-**kpasswd** [*principal*]
-
-
-DESCRIPTION
------------
-
-The kpasswd command is used to change a Kerberos principal's password.
-kpasswd first prompts for the current Kerberos password, then prompts
-the user twice for the new password, and the password is changed.
-
-If the principal is governed by a policy that specifies the length
-and/or number of character classes required in the new password, the
-new password must conform to the policy. (The five character classes
-are lower case, upper case, numbers, punctuation, and all other
-characters.)
-
-
-OPTIONS
--------
-
-*principal*
- Change the password for the Kerberos principal principal.
- Otherwise, kpasswd uses the principal name from an existing ccache
- if there is one; if not, the principal is derived from the
- identity of the user invoking the kpasswd command.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kadmin(1)`, :ref:`kadmind(8)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _krb5-config(1):
-
-krb5-config
-===========
-
-SYNOPSIS
---------
-
-**krb5-config**
-[**-**\ **-help** | **-**\ **-all** | **-**\ **-version** | **-**\ **-vendor** | **-**\ **-prefix** | **-**\ **-exec-prefix** | **-**\ **-defccname** | **-**\ **-defktname** | **-**\ **-defcktname** | **-**\ **-cflags** | **-**\ **-libs** [*libraries*]]
-
-
-DESCRIPTION
------------
-
-krb5-config tells the application programmer what flags to use to compile
-and link programs against the installed Kerberos libraries.
-
-
-OPTIONS
--------
-
-**-**\ **-help**
- prints a usage message. This is the default behavior when no options
- are specified.
-
-**-**\ **-all**
- prints the version, vendor, prefix, and exec-prefix.
-
-**-**\ **-version**
- prints the version number of the Kerberos installation.
-
-**-**\ **-vendor**
- prints the name of the vendor of the Kerberos installation.
-
-**-**\ **-prefix**
- prints the prefix for which the Kerberos installation was built.
-
-**-**\ **-exec-prefix**
- prints the prefix for executables for which the Kerberos installation
- was built.
-
-**-**\ **-defccname**
- prints the built-in default credentials cache location.
-
-**-**\ **-defktname**
- prints the built-in default keytab location.
-
-**-**\ **-defcktname**
- prints the built-in default client (initiator) keytab location.
-
-**-**\ **-cflags**
- prints the compilation flags used to build the Kerberos installation.
-
-**-**\ **-libs** [*library*]
- prints the compiler options needed to link against *library*.
- Allowed values for *library* are:
-
- ============ ===============================================
- krb5 Kerberos 5 applications (default)
- gssapi GSSAPI applications with Kerberos 5 bindings
- kadm-client Kadmin client
- kadm-server Kadmin server
- kdb Applications that access the Kerberos database
- ============ ===============================================
-
-EXAMPLES
---------
-
-krb5-config is particularly useful for compiling against a Kerberos
-installation that was installed in a non-standard location. For example,
-a Kerberos installation that is installed in ``/opt/krb5/`` but uses
-libraries in ``/usr/local/lib/`` for text localization would produce
-the following output::
-
- shell% krb5-config --libs krb5
- -L/opt/krb5/lib -Wl,-rpath -Wl,/opt/krb5/lib -L/usr/local/lib -lkrb5 -lk5crypto -lcom_err
-
-
-SEE ALSO
---------
-
-:ref:`kerberos(7)`, cc(1)
+++ /dev/null
-.. _ksu(1):
-
-ksu
-===
-
-SYNOPSIS
---------
-
-**ksu**
-[ *target_user* ]
-[ **-n** *target_principal_name* ]
-[ **-c** *source_cache_name* ]
-[ **-k** ]
-[ **-r** time ]
-[ **-p** | **-P**]
-[ **-f** | **-F**]
-[ **-l** *lifetime* ]
-[ **-z | Z** ]
-[ **-q** ]
-[ **-e** *command* [ args ... ] ] [ **-a** [ args ... ] ]
-
-
-REQUIREMENTS
-------------
-
-Must have Kerberos version 5 installed to compile ksu. Must have a
-Kerberos version 5 server running to use ksu.
-
-
-DESCRIPTION
------------
-
-ksu is a Kerberized version of the su program that has two missions:
-one is to securely change the real and effective user ID to that of
-the target user, and the other is to create a new security context.
-
-.. note::
-
- For the sake of clarity, all references to and attributes of
- the user invoking the program will start with "source"
- (e.g., "source user", "source cache", etc.).
-
- Likewise, all references to and attributes of the target
- account will start with "target".
-
-AUTHENTICATION
---------------
-
-To fulfill the first mission, ksu operates in two phases:
-authentication and authorization. Resolving the target principal name
-is the first step in authentication. The user can either specify his
-principal name with the **-n** option (e.g., ``-n jqpublic@USC.EDU``)
-or a default principal name will be assigned using a heuristic
-described in the OPTIONS section (see **-n** option). The target user
-name must be the first argument to ksu; if not specified root is the
-default. If ``.`` is specified then the target user will be the
-source user (e.g., ``ksu .``). If the source user is root or the
-target user is the source user, no authentication or authorization
-takes place. Otherwise, ksu looks for an appropriate Kerberos ticket
-in the source cache.
-
-The ticket can either be for the end-server or a ticket granting
-ticket (TGT) for the target principal's realm. If the ticket for the
-end-server is already in the cache, it's decrypted and verified. If
-it's not in the cache but the TGT is, the TGT is used to obtain the
-ticket for the end-server. The end-server ticket is then verified.
-If neither ticket is in the cache, but ksu is compiled with the
-**GET_TGT_VIA_PASSWD** define, the user will be prompted for a
-Kerberos password which will then be used to get a TGT. If the user
-is logged in remotely and does not have a secure channel, the password
-may be exposed. If neither ticket is in the cache and
-**GET_TGT_VIA_PASSWD** is not defined, authentication fails.
-
-
-AUTHORIZATION
--------------
-
-This section describes authorization of the source user when ksu is
-invoked without the **-e** option. For a description of the **-e**
-option, see the OPTIONS section.
-
-Upon successful authentication, ksu checks whether the target
-principal is authorized to access the target account. In the target
-user's home directory, ksu attempts to access two authorization files:
-:ref:`.k5login(5)` and .k5users. In the .k5login file each line
-contains the name of a principal that is authorized to access the
-account.
-
-For example::
-
- jqpublic@USC.EDU
- jqpublic/secure@USC.EDU
- jqpublic/admin@USC.EDU
-
-The format of .k5users is the same, except the principal name may be
-followed by a list of commands that the principal is authorized to
-execute (see the **-e** option in the OPTIONS section for details).
-
-Thus if the target principal name is found in the .k5login file the
-source user is authorized to access the target account. Otherwise ksu
-looks in the .k5users file. If the target principal name is found
-without any trailing commands or followed only by ``*`` then the
-source user is authorized. If either .k5login or .k5users exist but
-an appropriate entry for the target principal does not exist then
-access is denied. If neither file exists then the principal will be
-granted access to the account according to the aname->lname mapping
-rules. Otherwise, authorization fails.
-
-
-EXECUTION OF THE TARGET SHELL
------------------------------
-
-Upon successful authentication and authorization, ksu proceeds in a
-similar fashion to su. The environment is unmodified with the
-exception of USER, HOME and SHELL variables. If the target user is
-not root, USER gets set to the target user name. Otherwise USER
-remains unchanged. Both HOME and SHELL are set to the target login's
-default values. In addition, the environment variable **KRB5CCNAME**
-gets set to the name of the target cache. The real and effective user
-ID are changed to that of the target user. The target user's shell is
-then invoked (the shell name is specified in the password file). Upon
-termination of the shell, ksu deletes the target cache (unless ksu is
-invoked with the **-k** option). This is implemented by first doing a
-fork and then an exec, instead of just exec, as done by su.
-
-
-CREATING A NEW SECURITY CONTEXT
--------------------------------
-
-ksu can be used to create a new security context for the target
-program (either the target shell, or command specified via the **-e**
-option). The target program inherits a set of credentials from the
-source user. By default, this set includes all of the credentials in
-the source cache plus any additional credentials obtained during
-authentication. The source user is able to limit the credentials in
-this set by using **-z** or **-Z** option. **-z** restricts the copy
-of tickets from the source cache to the target cache to only the
-tickets where client == the target principal name. The **-Z** option
-provides the target user with a fresh target cache (no creds in the
-cache). Note that for security reasons, when the source user is root
-and target user is non-root, **-z** option is the default mode of
-operation.
-
-While no authentication takes place if the source user is root or is
-the same as the target user, additional tickets can still be obtained
-for the target cache. If **-n** is specified and no credentials can
-be copied to the target cache, the source user is prompted for a
-Kerberos password (unless **-Z** specified or **GET_TGT_VIA_PASSWD**
-is undefined). If successful, a TGT is obtained from the Kerberos
-server and stored in the target cache. Otherwise, if a password is
-not provided (user hit return) ksu continues in a normal mode of
-operation (the target cache will not contain the desired TGT). If the
-wrong password is typed in, ksu fails.
-
-.. note::
-
- During authentication, only the tickets that could be
- obtained without providing a password are cached in the
- source cache.
-
-
-OPTIONS
--------
-
-**-n** *target_principal_name*
- Specify a Kerberos target principal name. Used in authentication
- and authorization phases of ksu.
-
- If ksu is invoked without **-n**, a default principal name is
- assigned via the following heuristic:
-
- * Case 1: source user is non-root.
-
- If the target user is the source user the default principal name
- is set to the default principal of the source cache. If the
- cache does not exist then the default principal name is set to
- ``target_user@local_realm``. If the source and target users are
- different and neither ``~target_user/.k5users`` nor
- ``~target_user/.k5login`` exist then the default principal name
- is ``target_user_login_name@local_realm``. Otherwise, starting
- with the first principal listed below, ksu checks if the
- principal is authorized to access the target account and whether
- there is a legitimate ticket for that principal in the source
- cache. If both conditions are met that principal becomes the
- default target principal, otherwise go to the next principal.
-
- a) default principal of the source cache
- b) target_user\@local_realm
- c) source_user\@local_realm
-
- If a-c fails try any principal for which there is a ticket in
- the source cache and that is authorized to access the target
- account. If that fails select the first principal that is
- authorized to access the target account from the above list. If
- none are authorized and ksu is configured with
- **PRINC_LOOK_AHEAD** turned on, select the default principal as
- follows:
-
- For each candidate in the above list, select an authorized
- principal that has the same realm name and first part of the
- principal name equal to the prefix of the candidate. For
- example if candidate a) is ``jqpublic@ISI.EDU`` and
- ``jqpublic/secure@ISI.EDU`` is authorized to access the target
- account then the default principal is set to
- ``jqpublic/secure@ISI.EDU``.
-
- * Case 2: source user is root.
-
- If the target user is non-root then the default principal name
- is ``target_user@local_realm``. Else, if the source cache
- exists the default principal name is set to the default
- principal of the source cache. If the source cache does not
- exist, default principal name is set to ``root\@local_realm``.
-
-**-c** *source_cache_name*
-
- Specify source cache name (e.g., ``-c FILE:/tmp/my_cache``). If
- **-c** option is not used then the name is obtained from
- **KRB5CCNAME** environment variable. If **KRB5CCNAME** is not
- defined the source cache name is set to ``krb5cc_<source uid>``.
- The target cache name is automatically set to ``krb5cc_<target
- uid>.(gen_sym())``, where gen_sym generates a new number such that
- the resulting cache does not already exist. For example::
-
- krb5cc_1984.2
-
-**-k**
- Do not delete the target cache upon termination of the target
- shell or a command (**-e** command). Without **-k**, ksu deletes
- the target cache.
-
-**-z**
- Restrict the copy of tickets from the source cache to the target
- cache to only the tickets where client == the target principal
- name. Use the **-n** option if you want the tickets for other then
- the default principal. Note that the **-z** option is mutually
- exclusive with the **-Z** option.
-
-**-Z**
- Don't copy any tickets from the source cache to the target cache.
- Just create a fresh target cache, where the default principal name
- of the cache is initialized to the target principal name. Note
- that the **-Z** option is mutually exclusive with the **-z**
- option.
-
-**-q**
- Suppress the printing of status messages.
-
-Ticket granting ticket options:
-
-**-l** *lifetime* **-r** *time* **-p** **-P** **-f** **-F**
- The ticket granting ticket options only apply to the case where
- there are no appropriate tickets in the cache to authenticate the
- source user. In this case if ksu is configured to prompt users
- for a Kerberos password (**GET_TGT_VIA_PASSWD** is defined), the
- ticket granting ticket options that are specified will be used
- when getting a ticket granting ticket from the Kerberos server.
-
-**-l** *lifetime*
- (:ref:`duration` string.) Specifies the lifetime to be requested
- for the ticket; if this option is not specified, the default ticket
- lifetime (12 hours) is used instead.
-
-**-r** *time*
- (:ref:`duration` string.) Specifies that the **renewable** option
- should be requested for the ticket, and specifies the desired
- total lifetime of the ticket.
-
-**-p**
- specifies that the **proxiable** option should be requested for
- the ticket.
-
-**-P**
- specifies that the **proxiable** option should not be requested
- for the ticket, even if the default configuration is to ask for
- proxiable tickets.
-
-**-f**
- option specifies that the **forwardable** option should be
- requested for the ticket.
-
-**-F**
- option specifies that the **forwardable** option should not be
- requested for the ticket, even if the default configuration is to
- ask for forwardable tickets.
-
-**-e** *command* [*args* ...]
- ksu proceeds exactly the same as if it was invoked without the
- **-e** option, except instead of executing the target shell, ksu
- executes the specified command. Example of usage::
-
- ksu bob -e ls -lag
-
- The authorization algorithm for **-e** is as follows:
-
- If the source user is root or source user == target user, no
- authorization takes place and the command is executed. If source
- user id != 0, and ``~target_user/.k5users`` file does not exist,
- authorization fails. Otherwise, ``~target_user/.k5users`` file
- must have an appropriate entry for target principal to get
- authorized.
-
- The .k5users file format:
-
- A single principal entry on each line that may be followed by a
- list of commands that the principal is authorized to execute. A
- principal name followed by a ``*`` means that the user is
- authorized to execute any command. Thus, in the following
- example::
-
- jqpublic@USC.EDU ls mail /local/kerberos/klist
- jqpublic/secure@USC.EDU *
- jqpublic/admin@USC.EDU
-
- ``jqpublic@USC.EDU`` is only authorized to execute ``ls``,
- ``mail`` and ``klist`` commands. ``jqpublic/secure@USC.EDU`` is
- authorized to execute any command. ``jqpublic/admin@USC.EDU`` is
- not authorized to execute any command. Note, that
- ``jqpublic/admin@USC.EDU`` is authorized to execute the target
- shell (regular ksu, without the **-e** option) but
- ``jqpublic@USC.EDU`` is not.
-
- The commands listed after the principal name must be either a full
- path names or just the program name. In the second case,
- **CMD_PATH** specifying the location of authorized programs must
- be defined at the compilation time of ksu. Which command gets
- executed?
-
- If the source user is root or the target user is the source user
- or the user is authorized to execute any command (``*`` entry)
- then command can be either a full or a relative path leading to
- the target program. Otherwise, the user must specify either a
- full path or just the program name.
-
-**-a** *args*
- Specify arguments to be passed to the target shell. Note that all
- flags and parameters following -a will be passed to the shell,
- thus all options intended for ksu must precede **-a**.
-
- The **-a** option can be used to simulate the **-e** option if
- used as follows::
-
- -a -c [command [arguments]].
-
- **-c** is interpreted by the c-shell to execute the command.
-
-
-INSTALLATION INSTRUCTIONS
--------------------------
-
-ksu can be compiled with the following four flags:
-
-**GET_TGT_VIA_PASSWD**
- In case no appropriate tickets are found in the source cache, the
- user will be prompted for a Kerberos password. The password is
- then used to get a ticket granting ticket from the Kerberos
- server. The danger of configuring ksu with this macro is if the
- source user is logged in remotely and does not have a secure
- channel, the password may get exposed.
-
-**PRINC_LOOK_AHEAD**
- During the resolution of the default principal name,
- **PRINC_LOOK_AHEAD** enables ksu to find principal names in
- the .k5users file as described in the OPTIONS section
- (see **-n** option).
-
-**CMD_PATH**
- Specifies a list of directories containing programs that users are
- authorized to execute (via .k5users file).
-
-**HAVE_GETUSERSHELL**
- If the source user is non-root, ksu insists that the target user's
- shell to be invoked is a "legal shell". *getusershell(3)* is
- called to obtain the names of "legal shells". Note that the
- target user's shell is obtained from the passwd file.
-
-Sample configuration::
-
- KSU_OPTS = -DGET_TGT_VIA_PASSWD -DPRINC_LOOK_AHEAD -DCMD_PATH='"/bin /usr/ucb /local/bin"
-
-ksu should be owned by root and have the set user id bit turned on.
-
-ksu attempts to get a ticket for the end server just as Kerberized
-telnet and rlogin. Thus, there must be an entry for the server in the
-Kerberos database (e.g., ``host/nii.isi.edu@ISI.EDU``). The keytab
-file must be in an appropriate location.
-
-
-SIDE EFFECTS
-------------
-
-ksu deletes all expired tickets from the source cache.
-
-
-AUTHOR OF KSU
--------------
-
-GENNADY (ARI) MEDVINSKY
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kerberos(7)`, :ref:`kinit(1)`
+++ /dev/null
-.. _kswitch(1):
-
-kswitch
-=======
-
-SYNOPSIS
---------
-
-**kswitch**
-{**-c** *cachename*\|\ **-p** *principal*}
-
-
-DESCRIPTION
------------
-
-kswitch makes the specified credential cache the primary cache for the
-collection, if a cache collection is available.
-
-
-OPTIONS
--------
-
-**-c** *cachename*
- Directly specifies the credential cache to be made primary.
-
-**-p** *principal*
- Causes the cache collection to be searched for a cache containing
- credentials for *principal*. If one is found, that collection is
- made primary.
-
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-FILES
------
-
-|ccache|
- Default location of Kerberos 5 credentials cache
-
-
-SEE ALSO
---------
-
-:ref:`kinit(1)`, :ref:`kdestroy(1)`, :ref:`klist(1)`,
-:ref:`kerberos(7)`
+++ /dev/null
-.. _kvno(1):
-
-kvno
-====
-
-SYNOPSIS
---------
-
-**kvno**
-[**-c** *ccache*]
-[**-e** *etype*]
-[**-k** *keytab*]
-[**-q**]
-[**-u** | **-S** *sname*]
-[**-P**]
-[**--cached-only**]
-[**--no-store**]
-[**--out-cache** *cache*]
-[[{**-F** *cert_file* | {**-I** | **-U**} *for_user*} [**-P**]] | **--u2u** *ccache*]
-*service1 service2* ...
-
-
-DESCRIPTION
------------
-
-kvno acquires a service ticket for the specified Kerberos principals
-and prints out the key version numbers of each.
-
-
-OPTIONS
--------
-
-**-c** *ccache*
- Specifies the name of a credentials cache to use (if not the
- default)
-
-**-e** *etype*
- Specifies the enctype which will be requested for the session key
- of all the services named on the command line. This is useful in
- certain backward compatibility situations.
-
-**-k** *keytab*
- Decrypt the acquired tickets using *keytab* to confirm their
- validity.
-
-**-q**
- Suppress printing output when successful. If a service ticket
- cannot be obtained, an error message will still be printed and
- kvno will exit with nonzero status.
-
-**-u**
- Use the unknown name type in requested service principal names.
- This option Cannot be used with *-S*.
-
-**-P**
- Specifies that the *service1 service2* ... arguments are to be
- treated as services for which credentials should be acquired using
- constrained delegation. This option is only valid when used in
- conjunction with protocol transition.
-
-**-S** *sname*
- Specifies that the *service1 service2* ... arguments are
- interpreted as hostnames, and the service principals are to be
- constructed from those hostnames and the service name *sname*.
- The service hostnames will be canonicalized according to the usual
- rules for constructing service principals.
-
-**-I** *for_user*
- Specifies that protocol transition (S4U2Self) is to be used to
- acquire a ticket on behalf of *for_user*. If constrained
- delegation is not requested, the service name must match the
- credentials cache client principal.
-
-**-U** *for_user*
- Same as -I, but treats *for_user* as an enterprise name.
-
-**-F** *cert_file*
- Specifies that protocol transition is to be used, identifying the
- client principal with the X.509 certificate in *cert_file*. The
- certificate file must be in PEM format.
-
-**--cached-only**
- Only retrieve credentials already present in the cache, not from
- the KDC. (Added in release 1.19.)
-
-**--no-store**
- Do not store retrieved credentials in the cache. If
- **--out-cache** is also specified, credentials will still be
- stored into the output credential cache. (Added in release 1.19.)
-
-**--out-cache** *ccache*
- Initialize *ccache* and store all retrieved credentials into it.
- Do not store acquired credentials in the input cache. (Added in
- release 1.19.)
-
-**--u2u** *ccache*
- Requests a user-to-user ticket. *ccache* must contain a local
- krbtgt ticket for the server principal. The reported version
- number will typically be 0, as the resulting ticket is not
- encrypted in the server's long-term key.
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-FILES
------
-
-|ccache|
- Default location of the credentials cache
-
-
-SEE ALSO
---------
-
-:ref:`kinit(1)`, :ref:`kdestroy(1)`, :ref:`kerberos(7)`
+++ /dev/null
-.. _sclient(1):
-
-sclient
-=======
-
-SYNOPSIS
---------
-
-**sclient** *remotehost*
-
-
-DESCRIPTION
------------
-
-sclient is a sample application, primarily useful for testing
-purposes. It contacts a sample server :ref:`sserver(8)` and
-authenticates to it using Kerberos version 5 tickets, then displays
-the server's response.
-
-ENVIRONMENT
------------
-
-See :ref:`kerberos(7)` for a description of Kerberos environment
-variables.
-
-
-SEE ALSO
---------
-
-:ref:`kinit(1)`, :ref:`sserver(8)`, :ref:`kerberos(7)`
+++ /dev/null
-User config files
-=================
-
-The following files in your home directory can be used to control the
-behavior of Kerberos as it applies to your account (unless they have
-been disabled by your host's configuration):
-
-.. toctree::
- :maxdepth: 1
-
- kerberos.rst
- k5login.rst
- k5identity.rst
+++ /dev/null
-.. _.k5identity(5):
-
-.k5identity
-===========
-
-DESCRIPTION
------------
-
-The .k5identity file, which resides in a user's home directory,
-contains a list of rules for selecting a client principals based on
-the server being accessed. These rules are used to choose a
-credential cache within the cache collection when possible.
-
-Blank lines and lines beginning with ``#`` are ignored. Each line has
-the form:
-
- *principal* *field*\=\ *value* ...
-
-If the server principal meets all of the field constraints, then
-principal is chosen as the client principal. The following fields are
-recognized:
-
-**realm**
- If the realm of the server principal is known, it is matched
- against *value*, which may be a pattern using shell wildcards.
- For host-based server principals, the realm will generally only be
- known if there is a :ref:`domain_realm` section in
- :ref:`krb5.conf(5)` with a mapping for the hostname.
-
-**service**
- If the server principal is a host-based principal, its service
- component is matched against *value*, which may be a pattern using
- shell wildcards.
-
-**host**
- If the server principal is a host-based principal, its hostname
- component is converted to lower case and matched against *value*,
- which may be a pattern using shell wildcards.
-
- If the server principal matches the constraints of multiple lines
- in the .k5identity file, the principal from the first matching
- line is used. If no line matches, credentials will be selected
- some other way, such as the realm heuristic or the current primary
- cache.
-
-
-EXAMPLE
--------
-
-The following example .k5identity file selects the client principal
-``alice@KRBTEST.COM`` if the server principal is within that realm,
-the principal ``alice/root@EXAMPLE.COM`` if the server host is within
-a servers subdomain, and the principal ``alice/mail@EXAMPLE.COM`` when
-accessing the IMAP service on ``mail.example.com``::
-
- alice@KRBTEST.COM realm=KRBTEST.COM
- alice/root@EXAMPLE.COM host=*.servers.example.com
- alice/mail@EXAMPLE.COM host=mail.example.com service=imap
-
-
-SEE ALSO
---------
-
-kerberos(1), :ref:`krb5.conf(5)`
+++ /dev/null
-.. _.k5login(5):
-
-.k5login
-========
-
-DESCRIPTION
------------
-
-The .k5login file, which resides in a user's home directory, contains
-a list of the Kerberos principals. Anyone with valid tickets for a
-principal in the file is allowed host access with the UID of the user
-in whose home directory the file resides. One common use is to place
-a .k5login file in root's home directory, thereby granting system
-administrators remote root access to the host via Kerberos.
-
-
-EXAMPLES
---------
-
-Suppose the user ``alice`` had a .k5login file in her home directory
-containing just the following line::
-
- bob@FOOBAR.ORG
-
-This would allow ``bob`` to use Kerberos network applications, such as
-ssh(1), to access ``alice``'s account, using ``bob``'s Kerberos
-tickets. In a default configuration (with **k5login_authoritative** set
-to true in :ref:`krb5.conf(5)`), this .k5login file would not let
-``alice`` use those network applications to access her account, since
-she is not listed! With no .k5login file, or with **k5login_authoritative**
-set to false, a default rule would permit the principal ``alice`` in the
-machine's default realm to access the ``alice`` account.
-
-Let us further suppose that ``alice`` is a system administrator.
-Alice and the other system administrators would have their principals
-in root's .k5login file on each host::
-
- alice@BLEEP.COM
-
- joeadmin/root@BLEEP.COM
-
-This would allow either system administrator to log in to these hosts
-using their Kerberos tickets instead of having to type the root
-password. Note that because ``bob`` retains the Kerberos tickets for
-his own principal, ``bob@FOOBAR.ORG``, he would not have any of the
-privileges that require ``alice``'s tickets, such as root access to
-any of the site's hosts, or the ability to change ``alice``'s
-password.
-
-
-SEE ALSO
---------
-
-kerberos(1)
+++ /dev/null
-.. _kerberos(7):
-
-kerberos
-========
-
-DESCRIPTION
------------
-
-The Kerberos system authenticates individual users in a network
-environment. After authenticating yourself to Kerberos, you can use
-Kerberos-enabled programs without having to present passwords or
-certificates to those programs.
-
-If you receive the following response from :ref:`kinit(1)`:
-
-kinit: Client not found in Kerberos database while getting initial
-credentials
-
-you haven't been registered as a Kerberos user. See your system
-administrator.
-
-A Kerberos name usually contains three parts. The first is the
-**primary**, which is usually a user's or service's name. The second
-is the **instance**, which in the case of a user is usually null.
-Some users may have privileged instances, however, such as ``root`` or
-``admin``. In the case of a service, the instance is the fully
-qualified name of the machine on which it runs; i.e. there can be an
-ssh service running on the machine ABC (ssh/ABC@REALM), which is
-different from the ssh service running on the machine XYZ
-(ssh/XYZ@REALM). The third part of a Kerberos name is the **realm**.
-The realm corresponds to the Kerberos service providing authentication
-for the principal. Realms are conventionally all-uppercase, and often
-match the end of hostnames in the realm (for instance, host01.example.com
-might be in realm EXAMPLE.COM).
-
-When writing a Kerberos name, the principal name is separated from the
-instance (if not null) by a slash, and the realm (if not the local
-realm) follows, preceded by an "@" sign. The following are examples
-of valid Kerberos names::
-
- david
- jennifer/admin
- joeuser@BLEEP.COM
- cbrown/root@FUBAR.ORG
-
-When you authenticate yourself with Kerberos you get an initial
-Kerberos **ticket**. (A Kerberos ticket is an encrypted protocol
-message that provides authentication.) Kerberos uses this ticket for
-network utilities such as ssh. The ticket transactions are done
-transparently, so you don't have to worry about their management.
-
-Note, however, that tickets expire. Administrators may configure more
-privileged tickets, such as those with service or instance of ``root``
-or ``admin``, to expire in a few minutes, while tickets that carry
-more ordinary privileges may be good for several hours or a day. If
-your login session extends beyond the time limit, you will have to
-re-authenticate yourself to Kerberos to get new tickets using the
-:ref:`kinit(1)` command.
-
-Some tickets are **renewable** beyond their initial lifetime. This
-means that ``kinit -R`` can extend their lifetime without requiring
-you to re-authenticate.
-
-If you wish to delete your local tickets, use the :ref:`kdestroy(1)`
-command.
-
-Kerberos tickets can be forwarded. In order to forward tickets, you
-must request **forwardable** tickets when you kinit. Once you have
-forwardable tickets, most Kerberos programs have a command line option
-to forward them to the remote host. This can be useful for, e.g.,
-running kinit on your local machine and then sshing into another to do
-work. Note that this should not be done on untrusted machines since
-they will then have your tickets.
-
-ENVIRONMENT VARIABLES
----------------------
-
-Several environment variables affect the operation of Kerberos-enabled
-programs. These include:
-
-**KRB5CCNAME**
- Default name for the credentials cache file, in the form
- *TYPE*:*residual*. The type of the default cache may determine
- the availability of a cache collection. ``FILE`` is not a
- collection type; ``KEYRING``, ``DIR``, and ``KCM`` are.
-
- If not set, the value of **default_ccache_name** from
- configuration files (see **KRB5_CONFIG**) will be used. If that
- is also not set, the default *type* is ``FILE``, and the
- *residual* is the path /tmp/krb5cc_*uid*, where *uid* is the
- decimal user ID of the user.
-
-**KRB5_KTNAME**
- Specifies the location of the default keytab file, in the form
- *TYPE*:*residual*. If no *type* is present, the **FILE** type is
- assumed and *residual* is the pathname of the keytab file. If
- unset, |keytab| will be used.
-
-**KRB5_CONFIG**
- Specifies the location of the Kerberos configuration file. The
- default is |sysconfdir|\ ``/krb5.conf``. Multiple filenames can
- be specified, separated by a colon; all files which are present
- will be read.
-
-**KRB5_KDC_PROFILE**
- Specifies the location of the KDC configuration file, which
- contains additional configuration directives for the Key
- Distribution Center daemon and associated programs. The default
- is |kdcdir|\ ``/kdc.conf``.
-
-**KRB5RCACHENAME**
- (New in release 1.18) Specifies the location of the default replay
- cache, in the form *type*:*residual*. The ``file2`` type with a
- pathname residual specifies a replay cache file in the version-2
- format in the specified location. The ``none`` type (residual is
- ignored) disables the replay cache. The ``dfl`` type (residual is
- ignored) indicates the default, which uses a file2 replay cache in
- a temporary directory. The default is ``dfl:``.
-
-**KRB5RCACHETYPE**
- Specifies the type of the default replay cache, if
- **KRB5RCACHENAME** is unspecified. No residual can be specified,
- so ``none`` and ``dfl`` are the only useful types.
-
-**KRB5RCACHEDIR**
- Specifies the directory used by the ``dfl`` replay cache type.
- The default is the value of the **TMPDIR** environment variable,
- or ``/var/tmp`` if **TMPDIR** is not set.
-
-**KRB5_TRACE**
- Specifies a filename to write trace log output to. Trace logs can
- help illuminate decisions made internally by the Kerberos
- libraries. For example, ``env KRB5_TRACE=/dev/stderr kinit``
- would send tracing information for :ref:`kinit(1)` to
- ``/dev/stderr``. The default is not to write trace log output
- anywhere.
-
-**KRB5_CLIENT_KTNAME**
- Default client keytab file name. If unset, |ckeytab| will be
- used).
-
-**KPROP_PORT**
- :ref:`kprop(8)` port to use. Defaults to 754.
-
-**GSS_MECH_CONFIG**
- Specifies a filename containing GSSAPI mechanism module
- configuration. The default is to read |sysconfdir|\ ``/gss/mech``
- and files with a ``.conf`` suffix within the directory
- |sysconfdir|\ ``/gss/mech.d``.
-
-Most environment variables are disabled for certain programs, such as
-login system programs and setuid programs, which are designed to be
-secure when run within an untrusted process environment.
-
-SEE ALSO
---------
-
-:ref:`kdestroy(1)`, :ref:`kinit(1)`, :ref:`klist(1)`,
-:ref:`kswitch(1)`, :ref:`kpasswd(1)`, :ref:`ksu(1)`,
-:ref:`krb5.conf(5)`, :ref:`kdc.conf(5)`, :ref:`kadmin(1)`,
-:ref:`kadmind(8)`, :ref:`kdb5_util(8)`, :ref:`krb5kdc(8)`
-
-BUGS
-----
-
-AUTHORS
--------
-
-| Steve Miller, MIT Project Athena/Digital Equipment Corporation
-| Clifford Neuman, MIT Project Athena
-| Greg Hudson, MIT Kerberos Consortium
-| Robbie Harwood, Red Hat, Inc.
-
-HISTORY
--------
-
-The MIT Kerberos 5 implementation was developed at MIT, with
-contributions from many outside parties. It is currently maintained
-by the MIT Kerberos Consortium.
-
-RESTRICTIONS
-------------
-
-Copyright 1985, 1986, 1989-1996, 2002, 2011, 2018 Masachusetts
-Institute of Technology
+++ /dev/null
-/*
- * agogo.css_t
- * ~~~~~~~~~~~
- *
- * Sphinx stylesheet -- agogo theme.
- *
- * :copyright: Copyright 2007-2018 by the Sphinx team, see AUTHORS.
- * :license: BSD, see LICENSE for details.
- *
- */
-
-* {
- margin: 0px;
- padding: 0px;
-}
-
-body {
- font-family: "Verdana", Arial, sans-serif;
- line-height: 1.4em;
- color: black;
- background-color: #5d1509;
-}
-
-
-/* Page layout */
-
-div.header, div.content, div.footer {
- width: auto;
- margin-left: auto;
- margin-right: auto;
-}
-
-div.header-wrapper {
- background: #555573 url(bgtop.png) top left repeat-x;
- border-bottom: 3px solid #2e3436;
-}
-
-
-/* Default body styles */
-a {
- color: #881f0d;
-}
-
-div.bodywrapper a, div.footer a {
- text-decoration: underline;
-}
-
-.clearer {
- clear: both;
-}
-
-.left {
- float: left;
-}
-
-.right {
- float: right;
-}
-
-.line-block {
- display: block;
- margin-top: 1em;
- margin-bottom: 1em;
-}
-
-.line-block .line-block {
- margin-top: 0;
- margin-bottom: 0;
- margin-left: 1.5em;
-}
-
-h1, h2, h3, h4 {
- font-family: "Georgia", "Times New Roman", serif;
- font-weight: normal;
- color: #3465a4;
- margin-bottom: .8em;
-}
-
-h1 {
- color: #204a87;
-}
-
-h2 {
- padding-bottom: .5em;
- border-bottom: 1px solid #3465a4;
-}
-
-a.headerlink {
- visibility: hidden;
- color: #dddddd;
- padding-left: .3em;
-}
-
-h1:hover > a.headerlink,
-h2:hover > a.headerlink,
-h3:hover > a.headerlink,
-h4:hover > a.headerlink,
-h5:hover > a.headerlink,
-h6:hover > a.headerlink,
-dt:hover > a.headerlink,
-caption:hover > a.headerlink,
-p.caption:hover > a.headerlink,
-div.code-block-caption:hover > a.headerlink {
- visibility: visible;
-}
-
-img {
- border: 0;
-}
-
-div.admonition {
- margin-top: 10px;
- margin-bottom: 10px;
- padding: 2px 7px 1px 7px;
- border-left: 0.2em solid black;
-}
-
-p.admonition-title {
- margin: 0px 10px 5px 0px;
- font-weight: bold;
-}
-
-dt:target, .highlighted {
- background-color: #fbe54e;
-}
-
-/* Header */
-
-div.header {
- padding-top: 10px;
- padding-bottom: 10px;
-}
-
-div.header .headertitle {
- font-family: "Georgia", "Times New Roman", serif;
- font-weight: normal;
- font-size: 180%;
- letter-spacing: .08em;
- margin-bottom: .8em;
-}
-
-div.header .headertitle a {
- color: white;
-}
-
-div.header div.rel {
- margin-top: 1em;
-}
-
-div.header div.rel a {
- color: #fcaf3e;
- letter-spacing: .1em;
- text-transform: uppercase;
-}
-
-p.logo {
- float: right;
-}
-
-img.logo {
- border: 0;
-}
-
-
-/* Content */
-div.content-wrapper {
- background-color: white;
- padding-top: 20px;
- padding-bottom: 20px;
-}
-
-div.document {
- width: 80%;
- float: left;
-}
-
-div.body {
- padding-right: 2em;
- text-align: justify;
-}
-
-div.document h1 {
- line-height: 120%;
-}
-
-div.document ul {
- margin: 1.5em;
- list-style-type: square;
-}
-
-div.document dd {
- margin-left: 1.2em;
- margin-top: .4em;
- margin-bottom: 1em;
-}
-
-div.document .section {
- margin-top: 1.7em;
-}
-div.document .section:first-child {
- margin-top: 0px;
-}
-
-div.document div.highlight {
- padding: 3px;
- background-color: #eeeeec;
- border-top: 2px solid #dddddd;
- border-bottom: 2px solid #dddddd;
- margin-top: .8em;
- margin-bottom: .8em;
-}
-
-div.document div.literal-block-wrapper {
- margin-top: .8em;
- margin-bottom: .8em;
-}
-
-div.document div.literal-block-wrapper div.highlight {
- margin: 0;
-}
-
-div.document div.code-block-caption span.caption-number {
- padding: 0.1em 0.3em;
- font-style: italic;
-}
-
-div.document div.code-block-caption span.caption-text {
-}
-
-div.document h2 {
- margin-top: .7em;
-}
-
-div.document p {
- margin-bottom: .5em;
-}
-
-div.document li.toctree-l1 {
- margin-bottom: 1em;
-}
-
-div.document .descname {
- font-weight: bold;
-}
-
-div.document .sig-paren {
- font-size: larger;
-}
-
-div.document .docutils.literal {
- background-color: #eeeeec;
- padding: 1px;
-}
-
-div.document .docutils.xref.literal {
- background-color: transparent;
- padding: 0px;
-}
-
-div.document blockquote {
- margin: 1em;
-}
-
-div.document ol {
- margin: 1.5em;
-}
-
-
-/* Sidebar */
-
-div.sidebar {
- width: 20%;
- float: right;
- font-size: .9em;
-}
-
-div.sidebar a, div.header a {
- text-decoration: none;
-}
-
-div.sidebar a:hover, div.header a:hover {
- text-decoration: underline;
-}
-
-div.sidebar h3 {
- color: #2e3436;
- text-transform: uppercase;
- font-size: 130%;
- letter-spacing: .1em;
-}
-
-div.sidebar ul {
- list-style-type: none;
-}
-
-div.sidebar li.toctree-l1 a {
- display: block;
- padding: 1px;
- border: 1px solid #dddddd;
- background-color: #eeeeec;
- margin-bottom: .4em;
- padding-left: 3px;
- color: #2e3436;
-}
-
-div.sidebar li.toctree-l2 a {
- background-color: transparent;
- border: none;
- margin-left: 1em;
- border-bottom: 1px solid #dddddd;
-}
-
-div.sidebar li.toctree-l3 a {
- background-color: transparent;
- border: none;
- margin-left: 2em;
- border-bottom: 1px solid #dddddd;
-}
-
-div.sidebar li.toctree-l2:last-child a {
- border-bottom: none;
-}
-
-div.sidebar li.toctree-l1.current a {
- border-right: 5px solid #fcaf3e;
-}
-
-div.sidebar li.toctree-l1.current li.toctree-l2 a {
- border-right: none;
-}
-
-div.sidebar input[type="text"] {
- width: 170px;
-}
-
-div.sidebar input[type="submit"] {
- width: 30px;
-}
-
-
-/* Footer */
-
-div.footer-wrapper {
- background: #5d1509;
- border-top: 4px solid #babdb6;
- padding-top: 10px;
- padding-bottom: 10px;
- min-height: 80px;
-}
-
-div.footer, div.footer a {
- color: #888a85;
-}
-
-div.footer .right {
- text-align: right;
-}
-
-div.footer .left {
- text-transform: uppercase;
-}
-
-
-/* Styles copied from basic theme */
-
-img.align-left, .figure.align-left, object.align-left {
- clear: left;
- float: left;
- margin-right: 1em;
-}
-
-img.align-right, .figure.align-right, object.align-right {
- clear: right;
- float: right;
- margin-left: 1em;
-}
-
-img.align-center, .figure.align-center, object.align-center {
- display: block;
- margin-left: auto;
- margin-right: auto;
-}
-
-.align-left {
- text-align: left;
-}
-
-.align-center {
- text-align: center;
-}
-
-.align-right {
- text-align: right;
-}
-
-table caption span.caption-number {
- font-style: italic;
-}
-
-table caption span.caption-text {
-}
-
-div.figure p.caption span.caption-number {
- font-style: italic;
-}
-
-div.figure p.caption span.caption-text {
-}
-
-/* -- search page ----------------------------------------------------------- */
-
-ul.search {
- margin: 10px 0 0 20px;
- padding: 0;
-}
-
-ul.search li {
- padding: 5px 0 5px 20px;
- background-image: url(file.png);
- background-repeat: no-repeat;
- background-position: 0 7px;
-}
-
-ul.search li a {
- font-weight: bold;
-}
-
-ul.search li div.context {
- color: #888;
- margin: 2px 0 0 30px;
- text-align: left;
-}
-
-ul.keywordmatches li.goodmatch a {
- font-weight: bold;
-}
-
-/* -- index page ------------------------------------------------------------ */
-
-table.contentstable {
- width: 90%;
-}
-
-table.contentstable p.biglink {
- line-height: 150%;
-}
-
-a.biglink {
- font-size: 1.3em;
-}
-
-span.linkdescr {
- font-style: italic;
- padding-top: 5px;
- font-size: 90%;
-}
-
-/* -- general index --------------------------------------------------------- */
-
-table.indextable td {
- text-align: left;
- vertical-align: top;
-}
-
-table.indextable ul {
- margin-top: 0;
- margin-bottom: 0;
- list-style-type: none;
-}
-
-table.indextable > tbody > tr > td > ul {
- padding-left: 0em;
-}
-
-table.indextable tr.pcap {
- height: 10px;
-}
-
-table.indextable tr.cap {
- margin-top: 10px;
- background-color: #f2f2f2;
-}
-
-img.toggler {
- margin-right: 3px;
- margin-top: 3px;
- cursor: pointer;
-}
-
-/* -- domain module index --------------------------------------------------- */
-
-table.modindextable td {
- padding: 2px;
- border-collapse: collapse;
-}
-
-/* -- viewcode extension ---------------------------------------------------- */
-
-.viewcode-link {
- float: right;
-}
-
-.viewcode-back {
- float: right;
- font-family:: "Verdana", Arial, sans-serif;
-}
-
-div.viewcode-block:target {
- margin: -1px -3px;
- padding: 0 3px;
- background-color: #f4debf;
- border-top: 1px solid #ac9;
- border-bottom: 1px solid #ac9;
-}
-
-div.code-block-caption {
- background-color: #ddd;
- color: #333;
- padding: 2px 5px;
- font-size: small;
-}
-
-/* -- math display ---------------------------------------------------------- */
-
-div.body div.math p {
- text-align: center;
-}
-
-span.eqno {
- float: right;
-}
\ No newline at end of file
+++ /dev/null
-/*
- * basic.css
- * ~~~~~~~~~
- *
- * Sphinx stylesheet -- basic theme.
- *
- * :copyright: Copyright 2007-2018 by the Sphinx team, see AUTHORS.
- * :license: BSD, see LICENSE for details.
- *
- */
-
-/* -- main layout ----------------------------------------------------------- */
-
-div.clearer {
- clear: both;
-}
-
-/* -- relbar ---------------------------------------------------------------- */
-
-div.related {
- width: 100%;
- font-size: 90%;
-}
-
-div.related h3 {
- display: none;
-}
-
-div.related ul {
- margin: 0;
- padding: 0 0 0 10px;
- list-style: none;
-}
-
-div.related li {
- display: inline;
-}
-
-div.related li.right {
- float: right;
- margin-right: 5px;
-}
-
-/* -- sidebar --------------------------------------------------------------- */
-
-div.sphinxsidebarwrapper {
- padding: 10px 5px 0 10px;
-}
-
-div.sphinxsidebar {
- float: left;
- width: 0px;
- margin-left: -100%;
- font-size: 90%;
- word-wrap: break-word;
- overflow-wrap : break-word;
-}
-
-div.sphinxsidebar ul {
- list-style: none;
-}
-
-div.sphinxsidebar ul ul,
-div.sphinxsidebar ul.want-points {
- margin-left: 20px;
- list-style: square;
-}
-
-div.sphinxsidebar ul ul {
- margin-top: 0;
- margin-bottom: 0;
-}
-
-div.sphinxsidebar form {
- margin-top: 10px;
-}
-
-div.sphinxsidebar input {
- border: 1px solid #98dbcc;
- font-family: sans-serif;
- font-size: 1em;
-}
-
-div.sphinxsidebar #searchbox input[type="text"] {
- width: 170px;
-}
-
-img {
- border: 0;
- max-width: 100%;
-}
-
-/* -- search page ----------------------------------------------------------- */
-
-ul.search {
- margin: 10px 0 0 20px;
- padding: 0;
-}
-
-ul.search li {
- padding: 5px 0 5px 20px;
- background-image: url(file.png);
- background-repeat: no-repeat;
- background-position: 0 7px;
-}
-
-ul.search li a {
- font-weight: bold;
-}
-
-ul.search li div.context {
- color: #888;
- margin: 2px 0 0 30px;
- text-align: left;
-}
-
-ul.keywordmatches li.goodmatch a {
- font-weight: bold;
-}
-
-/* -- index page ------------------------------------------------------------ */
-
-table.contentstable {
- width: 90%;
- margin-left: auto;
- margin-right: auto;
-}
-
-table.contentstable p.biglink {
- line-height: 150%;
-}
-
-a.biglink {
- font-size: 1.3em;
-}
-
-span.linkdescr {
- font-style: italic;
- padding-top: 5px;
- font-size: 90%;
-}
-
-/* -- general index --------------------------------------------------------- */
-
-table.indextable {
- width: 100%;
-}
-
-table.indextable td {
- text-align: left;
- vertical-align: top;
-}
-
-table.indextable ul {
- margin-top: 0;
- margin-bottom: 0;
- list-style-type: none;
-}
-
-table.indextable > tbody > tr > td > ul {
- padding-left: 0em;
-}
-
-table.indextable tr.pcap {
- height: 10px;
-}
-
-table.indextable tr.cap {
- margin-top: 10px;
- background-color: #f2f2f2;
-}
-
-img.toggler {
- margin-right: 3px;
- margin-top: 3px;
- cursor: pointer;
-}
-
-div.modindex-jumpbox {
- border-top: 1px solid #ddd;
- border-bottom: 1px solid #ddd;
- margin: 1em 0 1em 0;
- padding: 0.4em;
-}
-
-div.genindex-jumpbox {
- border-top: 1px solid #ddd;
- border-bottom: 1px solid #ddd;
- margin: 1em 0 1em 0;
- padding: 0.4em;
-}
-
-/* -- domain module index --------------------------------------------------- */
-
-table.modindextable td {
- padding: 2px;
- border-collapse: collapse;
-}
-
-/* -- general body styles --------------------------------------------------- */
-
-div.body p, div.body dd, div.body li, div.body blockquote {
- -moz-hyphens: auto;
- -ms-hyphens: auto;
- -webkit-hyphens: auto;
- hyphens: auto;
-}
-
-a.headerlink {
- visibility: hidden;
-}
-
-h1:hover > a.headerlink,
-h2:hover > a.headerlink,
-h3:hover > a.headerlink,
-h4:hover > a.headerlink,
-h5:hover > a.headerlink,
-h6:hover > a.headerlink,
-dt:hover > a.headerlink,
-caption:hover > a.headerlink,
-p.caption:hover > a.headerlink,
-div.code-block-caption:hover > a.headerlink {
- visibility: visible;
-}
-
-div.body p.caption {
- text-align: inherit;
-}
-
-div.body td {
- text-align: left;
-}
-
-.first {
- margin-top: 0 !important;
-}
-
-p.rubric {
- margin-top: 30px;
- font-weight: bold;
-}
-
-img.align-left, .figure.align-left, object.align-left {
- clear: left;
- float: left;
- margin-right: 1em;
-}
-
-img.align-right, .figure.align-right, object.align-right {
- clear: right;
- float: right;
- margin-left: 1em;
-}
-
-img.align-center, .figure.align-center, object.align-center {
- display: block;
- margin-left: auto;
- margin-right: auto;
-}
-
-.align-left {
- text-align: left;
-}
-
-.align-center {
- text-align: center;
-}
-
-.align-right {
- text-align: right;
-}
-
-/* -- sidebars -------------------------------------------------------------- */
-
-div.sidebar {
- margin: 0 0 0.5em 1em;
- border: 1px solid #ddb;
- padding: 7px 7px 0 7px;
- background-color: #ffe;
- width: 40%;
- float: right;
-}
-
-p.sidebar-title {
- font-weight: bold;
-}
-
-/* -- topics ---------------------------------------------------------------- */
-
-div.topic {
- border: 1px solid #ccc;
- padding: 7px 7px 0 7px;
- margin: 10px 0 10px 0;
-}
-
-p.topic-title {
- font-size: 1.1em;
- font-weight: bold;
- margin-top: 10px;
-}
-
-/* -- admonitions ----------------------------------------------------------- */
-
-div.admonition {
- margin-top: 10px;
- margin-bottom: 10px;
- padding: 7px;
-}
-
-div.admonition dt {
- font-weight: bold;
-}
-
-div.admonition dl {
- margin-bottom: 0;
-}
-
-p.admonition-title {
- margin: 0px 10px 5px 0px;
- font-weight: bold;
-}
-
-div.body p.centered {
- text-align: center;
- margin-top: 25px;
-}
-
-/* -- tables ---------------------------------------------------------------- */
-
-table.docutils {
- border: 0;
- border-collapse: collapse;
-}
-
-table.align-center {
- margin-left: auto;
- margin-right: auto;
-}
-
-table caption span.caption-number {
- font-style: italic;
-}
-
-table caption span.caption-text {
-}
-
-table.docutils td, table.docutils th {
- padding: 1px 8px 1px 5px;
- border-top: 0;
- border-left: 0;
- border-right: 0;
- border-bottom: 1px solid #aaa;
-}
-
-table.footnote td, table.footnote th {
- border: 0 !important;
-}
-
-th {
- text-align: left;
- padding-right: 5px;
-}
-
-table.citation {
- border-left: solid 1px gray;
- margin-left: 1px;
-}
-
-table.citation td {
- border-bottom: none;
-}
-
-/* -- figures --------------------------------------------------------------- */
-
-div.figure {
- margin: 0.5em;
- padding: 0.5em;
-}
-
-div.figure p.caption {
- padding: 0.3em;
-}
-
-div.figure p.caption span.caption-number {
- font-style: italic;
-}
-
-div.figure p.caption span.caption-text {
-}
-
-/* -- field list styles ----------------------------------------------------- */
-
-table.field-list td, table.field-list th {
- border: 0 !important;
-}
-
-.field-list ul {
- margin: 0;
- padding-left: 1em;
-}
-
-.field-list p {
- margin: 0;
-}
-
-.field-name {
- -moz-hyphens: manual;
- -ms-hyphens: manual;
- -webkit-hyphens: manual;
- hyphens: manual;
-}
-
-/* -- other body styles ----------------------------------------------------- */
-
-ol.arabic {
- list-style: decimal;
-}
-
-ol.loweralpha {
- list-style: lower-alpha;
-}
-
-ol.upperalpha {
- list-style: upper-alpha;
-}
-
-ol.lowerroman {
- list-style: lower-roman;
-}
-
-ol.upperroman {
- list-style: upper-roman;
-}
-
-dl {
- margin-bottom: 15px;
-}
-
-dd p {
- margin-top: 0px;
-}
-
-dd ul, dd table {
- margin-bottom: 10px;
-}
-
-dd {
- margin-top: 3px;
- margin-bottom: 10px;
- margin-left: 30px;
-}
-
-dt:target, span.highlighted {
- background-color: #fbe54e;
-}
-
-rect.highlighted {
- fill: #fbe54e;
-}
-
-dl.glossary dt {
- font-weight: bold;
- font-size: 1.1em;
-}
-
-.optional {
- font-size: 1.3em;
-}
-
-.sig-paren {
- font-size: larger;
-}
-
-.versionmodified {
- font-style: italic;
-}
-
-.system-message {
- background-color: #fda;
- padding: 5px;
- border: 3px solid red;
-}
-
-.footnote:target {
- background-color: #ffa;
-}
-
-.line-block {
- display: block;
- margin-top: 1em;
- margin-bottom: 1em;
-}
-
-.line-block .line-block {
- margin-top: 0;
- margin-bottom: 0;
- margin-left: 1.5em;
-}
-
-.guilabel, .menuselection {
- font-family: sans-serif;
-}
-
-.accelerator {
- text-decoration: underline;
-}
-
-.classifier {
- font-style: oblique;
-}
-
-abbr, acronym {
- border-bottom: dotted 1px;
- cursor: help;
-}
-
-/* -- code displays --------------------------------------------------------- */
-
-pre {
- overflow: auto;
- overflow-y: hidden; /* fixes display issues on Chrome browsers */
-}
-
-span.pre {
- -moz-hyphens: none;
- -ms-hyphens: none;
- -webkit-hyphens: none;
- hyphens: none;
-}
-
-td.linenos pre {
- padding: 5px 0px;
- border: 0;
- background-color: transparent;
- color: #aaa;
-}
-
-table.highlighttable {
- margin-left: 0.5em;
-}
-
-table.highlighttable td {
- padding: 0 0.5em 0 0.5em;
-}
-
-div.code-block-caption {
- padding: 2px 5px;
- font-size: small;
-}
-
-div.code-block-caption code {
- background-color: transparent;
-}
-
-div.code-block-caption + div > div.highlight > pre {
- margin-top: 0;
-}
-
-div.code-block-caption span.caption-number {
- padding: 0.1em 0.3em;
- font-style: italic;
-}
-
-div.code-block-caption span.caption-text {
-}
-
-div.literal-block-wrapper {
- padding: 1em 1em 0;
-}
-
-div.literal-block-wrapper div.highlight {
- margin: 0;
-}
-
-code.descname {
- background-color: transparent;
- font-weight: bold;
- font-size: 1.2em;
-}
-
-code.descclassname {
- background-color: transparent;
-}
-
-code.xref, a code {
- background-color: transparent;
- font-weight: bold;
-}
-
-h1 code, h2 code, h3 code, h4 code, h5 code, h6 code {
- background-color: transparent;
-}
-
-.viewcode-link {
- float: right;
-}
-
-.viewcode-back {
- float: right;
- font-family: sans-serif;
-}
-
-div.viewcode-block:target {
- margin: -1px -10px;
- padding: 0 10px;
-}
-
-/* -- math display ---------------------------------------------------------- */
-
-img.math {
- vertical-align: middle;
-}
-
-div.body div.math p {
- text-align: center;
-}
-
-span.eqno {
- float: right;
-}
-
-span.eqno a.headerlink {
- position: relative;
- left: 0px;
- z-index: 1;
-}
-
-div.math:hover a.headerlink {
- visibility: visible;
-}
-
-/* -- printout stylesheet --------------------------------------------------- */
-
-@media print {
- div.document,
- div.documentwrapper,
- div.bodywrapper {
- margin: 0 !important;
- width: 100%;
- }
-
- div.sphinxsidebar,
- div.related,
- div.footer,
- #top-link {
- display: none;
- }
-}
\ No newline at end of file
+++ /dev/null
-/*
- * doctools.js
- * ~~~~~~~~~~~
- *
- * Sphinx JavaScript utilities for all documentation.
- *
- * :copyright: Copyright 2007-2018 by the Sphinx team, see AUTHORS.
- * :license: BSD, see LICENSE for details.
- *
- */
-
-/**
- * select a different prefix for underscore
- */
-$u = _.noConflict();
-
-/**
- * make the code below compatible with browsers without
- * an installed firebug like debugger
-if (!window.console || !console.firebug) {
- var names = ["log", "debug", "info", "warn", "error", "assert", "dir",
- "dirxml", "group", "groupEnd", "time", "timeEnd", "count", "trace",
- "profile", "profileEnd"];
- window.console = {};
- for (var i = 0; i < names.length; ++i)
- window.console[names[i]] = function() {};
-}
- */
-
-/**
- * small helper function to urldecode strings
- */
-jQuery.urldecode = function(x) {
- return decodeURIComponent(x).replace(/\+/g, ' ');
-};
-
-/**
- * small helper function to urlencode strings
- */
-jQuery.urlencode = encodeURIComponent;
-
-/**
- * This function returns the parsed url parameters of the
- * current request. Multiple values per key are supported,
- * it will always return arrays of strings for the value parts.
- */
-jQuery.getQueryParameters = function(s) {
- if (typeof s === 'undefined')
- s = document.location.search;
- var parts = s.substr(s.indexOf('?') + 1).split('&');
- var result = {};
- for (var i = 0; i < parts.length; i++) {
- var tmp = parts[i].split('=', 2);
- var key = jQuery.urldecode(tmp[0]);
- var value = jQuery.urldecode(tmp[1]);
- if (key in result)
- result[key].push(value);
- else
- result[key] = [value];
- }
- return result;
-};
-
-/**
- * highlight a given string on a jquery object by wrapping it in
- * span elements with the given class name.
- */
-jQuery.fn.highlightText = function(text, className) {
- function highlight(node, addItems) {
- if (node.nodeType === 3) {
- var val = node.nodeValue;
- var pos = val.toLowerCase().indexOf(text);
- if (pos >= 0 && !jQuery(node.parentNode).hasClass(className)) {
- var span;
- var isInSVG = jQuery(node).closest("body, svg, foreignObject").is("svg");
- if (isInSVG) {
- span = document.createElementNS("http://www.w3.org/2000/svg", "tspan");
- } else {
- span = document.createElement("span");
- span.className = className;
- }
- span.appendChild(document.createTextNode(val.substr(pos, text.length)));
- node.parentNode.insertBefore(span, node.parentNode.insertBefore(
- document.createTextNode(val.substr(pos + text.length)),
- node.nextSibling));
- node.nodeValue = val.substr(0, pos);
- if (isInSVG) {
- var bbox = span.getBBox();
- var rect = document.createElementNS("http://www.w3.org/2000/svg", "rect");
- rect.x.baseVal.value = bbox.x;
- rect.y.baseVal.value = bbox.y;
- rect.width.baseVal.value = bbox.width;
- rect.height.baseVal.value = bbox.height;
- rect.setAttribute('class', className);
- var parentOfText = node.parentNode.parentNode;
- addItems.push({
- "parent": node.parentNode,
- "target": rect});
- }
- }
- }
- else if (!jQuery(node).is("button, select, textarea")) {
- jQuery.each(node.childNodes, function() {
- highlight(this, addItems);
- });
- }
- }
- var addItems = [];
- var result = this.each(function() {
- highlight(this, addItems);
- });
- for (var i = 0; i < addItems.length; ++i) {
- jQuery(addItems[i].parent).before(addItems[i].target);
- }
- return result;
-};
-
-/*
- * backward compatibility for jQuery.browser
- * This will be supported until firefox bug is fixed.
- */
-if (!jQuery.browser) {
- jQuery.uaMatch = function(ua) {
- ua = ua.toLowerCase();
-
- var match = /(chrome)[ \/]([\w.]+)/.exec(ua) ||
- /(webkit)[ \/]([\w.]+)/.exec(ua) ||
- /(opera)(?:.*version|)[ \/]([\w.]+)/.exec(ua) ||
- /(msie) ([\w.]+)/.exec(ua) ||
- ua.indexOf("compatible") < 0 && /(mozilla)(?:.*? rv:([\w.]+)|)/.exec(ua) ||
- [];
-
- return {
- browser: match[ 1 ] || "",
- version: match[ 2 ] || "0"
- };
- };
- jQuery.browser = {};
- jQuery.browser[jQuery.uaMatch(navigator.userAgent).browser] = true;
-}
-
-/**
- * Small JavaScript module for the documentation.
- */
-var Documentation = {
-
- init : function() {
- this.fixFirefoxAnchorBug();
- this.highlightSearchWords();
- this.initIndexTable();
-
- },
-
- /**
- * i18n support
- */
- TRANSLATIONS : {},
- PLURAL_EXPR : function(n) { return n === 1 ? 0 : 1; },
- LOCALE : 'unknown',
-
- // gettext and ngettext don't access this so that the functions
- // can safely bound to a different name (_ = Documentation.gettext)
- gettext : function(string) {
- var translated = Documentation.TRANSLATIONS[string];
- if (typeof translated === 'undefined')
- return string;
- return (typeof translated === 'string') ? translated : translated[0];
- },
-
- ngettext : function(singular, plural, n) {
- var translated = Documentation.TRANSLATIONS[singular];
- if (typeof translated === 'undefined')
- return (n == 1) ? singular : plural;
- return translated[Documentation.PLURALEXPR(n)];
- },
-
- addTranslations : function(catalog) {
- for (var key in catalog.messages)
- this.TRANSLATIONS[key] = catalog.messages[key];
- this.PLURAL_EXPR = new Function('n', 'return +(' + catalog.plural_expr + ')');
- this.LOCALE = catalog.locale;
- },
-
- /**
- * add context elements like header anchor links
- */
- addContextElements : function() {
- $('div[id] > :header:first').each(function() {
- $('<a class="headerlink">\u00B6</a>').
- attr('href', '#' + this.id).
- attr('title', _('Permalink to this headline')).
- appendTo(this);
- });
- $('dt[id]').each(function() {
- $('<a class="headerlink">\u00B6</a>').
- attr('href', '#' + this.id).
- attr('title', _('Permalink to this definition')).
- appendTo(this);
- });
- },
-
- /**
- * workaround a firefox stupidity
- * see: https://bugzilla.mozilla.org/show_bug.cgi?id=645075
- */
- fixFirefoxAnchorBug : function() {
- if (document.location.hash && $.browser.mozilla)
- window.setTimeout(function() {
- document.location.href += '';
- }, 10);
- },
-
- /**
- * highlight the search words provided in the url in the text
- */
- highlightSearchWords : function() {
- var params = $.getQueryParameters();
- var terms = (params.highlight) ? params.highlight[0].split(/\s+/) : [];
- if (terms.length) {
- var body = $('div.body');
- if (!body.length) {
- body = $('body');
- }
- window.setTimeout(function() {
- $.each(terms, function() {
- body.highlightText(this.toLowerCase(), 'highlighted');
- });
- }, 10);
- $('<p class="highlight-link"><a href="javascript:Documentation.' +
- 'hideSearchWords()">' + _('Hide Search Matches') + '</a></p>')
- .appendTo($('#searchbox'));
- }
- },
-
- /**
- * init the domain index toggle buttons
- */
- initIndexTable : function() {
- var togglers = $('img.toggler').click(function() {
- var src = $(this).attr('src');
- var idnum = $(this).attr('id').substr(7);
- $('tr.cg-' + idnum).toggle();
- if (src.substr(-9) === 'minus.png')
- $(this).attr('src', src.substr(0, src.length-9) + 'plus.png');
- else
- $(this).attr('src', src.substr(0, src.length-8) + 'minus.png');
- }).css('display', '');
- if (DOCUMENTATION_OPTIONS.COLLAPSE_INDEX) {
- togglers.click();
- }
- },
-
- /**
- * helper function to hide the search marks again
- */
- hideSearchWords : function() {
- $('#searchbox .highlight-link').fadeOut(300);
- $('span.highlighted').removeClass('highlighted');
- },
-
- /**
- * make the url absolute
- */
- makeURL : function(relativeURL) {
- return DOCUMENTATION_OPTIONS.URL_ROOT + '/' + relativeURL;
- },
-
- /**
- * get the current relative url
- */
- getCurrentURL : function() {
- var path = document.location.pathname;
- var parts = path.split(/\//);
- $.each(DOCUMENTATION_OPTIONS.URL_ROOT.split(/\//), function() {
- if (this === '..')
- parts.pop();
- });
- var url = parts.join('/');
- return path.substring(url.lastIndexOf('/') + 1, path.length - 1);
- },
-
- initOnKeyListeners: function() {
- $(document).keyup(function(event) {
- var activeElementType = document.activeElement.tagName;
- // don't navigate when in search box or textarea
- if (activeElementType !== 'TEXTAREA' && activeElementType !== 'INPUT' && activeElementType !== 'SELECT') {
- switch (event.keyCode) {
- case 37: // left
- var prevHref = $('link[rel="prev"]').prop('href');
- if (prevHref) {
- window.location.href = prevHref;
- return false;
- }
- case 39: // right
- var nextHref = $('link[rel="next"]').prop('href');
- if (nextHref) {
- window.location.href = nextHref;
- return false;
- }
- }
- }
- });
- }
-};
-
-// quick alias for translations
-_ = Documentation.gettext;
-
-$(document).ready(function() {
- Documentation.init();
-});
\ No newline at end of file
+++ /dev/null
-/*!
- * jQuery JavaScript Library v3.2.1
- * https://jquery.com/
- *
- * Includes Sizzle.js
- * https://sizzlejs.com/
- *
- * Copyright JS Foundation and other contributors
- * Released under the MIT license
- * https://jquery.org/license
- *
- * Date: 2017-09-03T00:14Z
- */
-( function( global, factory ) {
-
- "use strict";
-
- if ( typeof module === "object" && typeof module.exports === "object" ) {
-
- // For CommonJS and CommonJS-like environments where a proper `window`
- // is present, execute the factory and get jQuery.
- // For environments that do not have a `window` with a `document`
- // (such as Node.js), expose a factory as module.exports.
- // This accentuates the need for the creation of a real `window`.
- // e.g. var jQuery = require("jquery")(window);
- // See ticket #14549 for more info.
- module.exports = global.document ?
- factory( global, true ) :
- function( w ) {
- if ( !w.document ) {
- throw new Error( "jQuery requires a window with a document" );
- }
- return factory( w );
- };
- } else {
- factory( global );
- }
-
-// Pass this if window is not defined yet
-} )( typeof window !== "undefined" ? window : this, function( window, noGlobal ) {
-
-// Edge <= 12 - 13+, Firefox <=18 - 45+, IE 10 - 11, Safari 5.1 - 9+, iOS 6 - 9.1
-// throw exceptions when non-strict code (e.g., ASP.NET 4.5) accesses strict mode
-// arguments.callee.caller (trac-13335). But as of jQuery 3.0 (2016), strict mode should be common
-// enough that all such attempts are guarded in a try block.
-
-
-var arr = [];
-
-var document = window.document;
-
-var getProto = Object.getPrototypeOf;
-
-var slice = arr.slice;
-
-var concat = arr.concat;
-
-var push = arr.push;
-
-var indexOf = arr.indexOf;
-
-var class2type = {};
-
-var toString = class2type.toString;
-
-var hasOwn = class2type.hasOwnProperty;
-
-var fnToString = hasOwn.toString;
-
-var ObjectFunctionString = fnToString.call( Object );
-
-var support = {};
-
-
-
- function DOMEval( code, doc ) {
- doc = doc || document;
-
- var script = doc.createElement( "script" );
-
- script.text = code;
- doc.head.appendChild( script ).parentNode.removeChild( script );
- }
-/* global Symbol */
-// Defining this global in .eslintrc.json would create a danger of using the global
-// unguarded in another place, it seems safer to define global only for this module
-
-
-
-var
- version = "3.2.1",
-
- // Define a local copy of jQuery
- jQuery = function( selector, context ) {
-
- // The jQuery object is actually just the init constructor 'enhanced'
- // Need init if jQuery is called (just allow error to be thrown if not included)
- return new jQuery.fn.init( selector, context );
- },
-
- // Support: Android <=4.0 only
- // Make sure we trim BOM and NBSP
- rtrim = /^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g,
-
- // Matches dashed string for camelizing
- rmsPrefix = /^-ms-/,
- rdashAlpha = /-([a-z])/g,
-
- // Used by jQuery.camelCase as callback to replace()
- fcamelCase = function( all, letter ) {
- return letter.toUpperCase();
- };
-
-jQuery.fn = jQuery.prototype = {
-
- // The current version of jQuery being used
- jquery: version,
-
- constructor: jQuery,
-
- // The default length of a jQuery object is 0
- length: 0,
-
- toArray: function() {
- return slice.call( this );
- },
-
- // Get the Nth element in the matched element set OR
- // Get the whole matched element set as a clean array
- get: function( num ) {
-
- // Return all the elements in a clean array
- if ( num == null ) {
- return slice.call( this );
- }
-
- // Return just the one element from the set
- return num < 0 ? this[ num + this.length ] : this[ num ];
- },
-
- // Take an array of elements and push it onto the stack
- // (returning the new matched element set)
- pushStack: function( elems ) {
-
- // Build a new jQuery matched element set
- var ret = jQuery.merge( this.constructor(), elems );
-
- // Add the old object onto the stack (as a reference)
- ret.prevObject = this;
-
- // Return the newly-formed element set
- return ret;
- },
-
- // Execute a callback for every element in the matched set.
- each: function( callback ) {
- return jQuery.each( this, callback );
- },
-
- map: function( callback ) {
- return this.pushStack( jQuery.map( this, function( elem, i ) {
- return callback.call( elem, i, elem );
- } ) );
- },
-
- slice: function() {
- return this.pushStack( slice.apply( this, arguments ) );
- },
-
- first: function() {
- return this.eq( 0 );
- },
-
- last: function() {
- return this.eq( -1 );
- },
-
- eq: function( i ) {
- var len = this.length,
- j = +i + ( i < 0 ? len : 0 );
- return this.pushStack( j >= 0 && j < len ? [ this[ j ] ] : [] );
- },
-
- end: function() {
- return this.prevObject || this.constructor();
- },
-
- // For internal use only.
- // Behaves like an Array's method, not like a jQuery method.
- push: push,
- sort: arr.sort,
- splice: arr.splice
-};
-
-jQuery.extend = jQuery.fn.extend = function() {
- var options, name, src, copy, copyIsArray, clone,
- target = arguments[ 0 ] || {},
- i = 1,
- length = arguments.length,
- deep = false;
-
- // Handle a deep copy situation
- if ( typeof target === "boolean" ) {
- deep = target;
-
- // Skip the boolean and the target
- target = arguments[ i ] || {};
- i++;
- }
-
- // Handle case when target is a string or something (possible in deep copy)
- if ( typeof target !== "object" && !jQuery.isFunction( target ) ) {
- target = {};
- }
-
- // Extend jQuery itself if only one argument is passed
- if ( i === length ) {
- target = this;
- i--;
- }
-
- for ( ; i < length; i++ ) {
-
- // Only deal with non-null/undefined values
- if ( ( options = arguments[ i ] ) != null ) {
-
- // Extend the base object
- for ( name in options ) {
- src = target[ name ];
- copy = options[ name ];
-
- // Prevent never-ending loop
- if ( target === copy ) {
- continue;
- }
-
- // Recurse if we're merging plain objects or arrays
- if ( deep && copy && ( jQuery.isPlainObject( copy ) ||
- ( copyIsArray = Array.isArray( copy ) ) ) ) {
-
- if ( copyIsArray ) {
- copyIsArray = false;
- clone = src && Array.isArray( src ) ? src : [];
-
- } else {
- clone = src && jQuery.isPlainObject( src ) ? src : {};
- }
-
- // Never move original objects, clone them
- target[ name ] = jQuery.extend( deep, clone, copy );
-
- // Don't bring in undefined values
- } else if ( copy !== undefined ) {
- target[ name ] = copy;
- }
- }
- }
- }
-
- // Return the modified object
- return target;
-};
-
-jQuery.extend( {
-
- // Unique for each copy of jQuery on the page
- expando: "jQuery" + ( version + Math.random() ).replace( /\D/g, "" ),
-
- // Assume jQuery is ready without the ready module
- isReady: true,
-
- error: function( msg ) {
- throw new Error( msg );
- },
-
- noop: function() {},
-
- isFunction: function( obj ) {
- return jQuery.type( obj ) === "function";
- },
-
- isWindow: function( obj ) {
- return obj != null && obj === obj.window;
- },
-
- isNumeric: function( obj ) {
-
- // As of jQuery 3.0, isNumeric is limited to
- // strings and numbers (primitives or objects)
- // that can be coerced to finite numbers (gh-2662)
- var type = jQuery.type( obj );
- return ( type === "number" || type === "string" ) &&
-
- // parseFloat NaNs numeric-cast false positives ("")
- // ...but misinterprets leading-number strings, particularly hex literals ("0x...")
- // subtraction forces infinities to NaN
- !isNaN( obj - parseFloat( obj ) );
- },
-
- isPlainObject: function( obj ) {
- var proto, Ctor;
-
- // Detect obvious negatives
- // Use toString instead of jQuery.type to catch host objects
- if ( !obj || toString.call( obj ) !== "[object Object]" ) {
- return false;
- }
-
- proto = getProto( obj );
-
- // Objects with no prototype (e.g., `Object.create( null )`) are plain
- if ( !proto ) {
- return true;
- }
-
- // Objects with prototype are plain iff they were constructed by a global Object function
- Ctor = hasOwn.call( proto, "constructor" ) && proto.constructor;
- return typeof Ctor === "function" && fnToString.call( Ctor ) === ObjectFunctionString;
- },
-
- isEmptyObject: function( obj ) {
-
- /* eslint-disable no-unused-vars */
- // See https://github.com/eslint/eslint/issues/6125
- var name;
-
- for ( name in obj ) {
- return false;
- }
- return true;
- },
-
- type: function( obj ) {
- if ( obj == null ) {
- return obj + "";
- }
-
- // Support: Android <=2.3 only (functionish RegExp)
- return typeof obj === "object" || typeof obj === "function" ?
- class2type[ toString.call( obj ) ] || "object" :
- typeof obj;
- },
-
- // Evaluates a script in a global context
- globalEval: function( code ) {
- DOMEval( code );
- },
-
- // Convert dashed to camelCase; used by the css and data modules
- // Support: IE <=9 - 11, Edge 12 - 13
- // Microsoft forgot to hump their vendor prefix (#9572)
- camelCase: function( string ) {
- return string.replace( rmsPrefix, "ms-" ).replace( rdashAlpha, fcamelCase );
- },
-
- each: function( obj, callback ) {
- var length, i = 0;
-
- if ( isArrayLike( obj ) ) {
- length = obj.length;
- for ( ; i < length; i++ ) {
- if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {
- break;
- }
- }
- } else {
- for ( i in obj ) {
- if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {
- break;
- }
- }
- }
-
- return obj;
- },
-
- // Support: Android <=4.0 only
- trim: function( text ) {
- return text == null ?
- "" :
- ( text + "" ).replace( rtrim, "" );
- },
-
- // results is for internal usage only
- makeArray: function( arr, results ) {
- var ret = results || [];
-
- if ( arr != null ) {
- if ( isArrayLike( Object( arr ) ) ) {
- jQuery.merge( ret,
- typeof arr === "string" ?
- [ arr ] : arr
- );
- } else {
- push.call( ret, arr );
- }
- }
-
- return ret;
- },
-
- inArray: function( elem, arr, i ) {
- return arr == null ? -1 : indexOf.call( arr, elem, i );
- },
-
- // Support: Android <=4.0 only, PhantomJS 1 only
- // push.apply(_, arraylike) throws on ancient WebKit
- merge: function( first, second ) {
- var len = +second.length,
- j = 0,
- i = first.length;
-
- for ( ; j < len; j++ ) {
- first[ i++ ] = second[ j ];
- }
-
- first.length = i;
-
- return first;
- },
-
- grep: function( elems, callback, invert ) {
- var callbackInverse,
- matches = [],
- i = 0,
- length = elems.length,
- callbackExpect = !invert;
-
- // Go through the array, only saving the items
- // that pass the validator function
- for ( ; i < length; i++ ) {
- callbackInverse = !callback( elems[ i ], i );
- if ( callbackInverse !== callbackExpect ) {
- matches.push( elems[ i ] );
- }
- }
-
- return matches;
- },
-
- // arg is for internal usage only
- map: function( elems, callback, arg ) {
- var length, value,
- i = 0,
- ret = [];
-
- // Go through the array, translating each of the items to their new values
- if ( isArrayLike( elems ) ) {
- length = elems.length;
- for ( ; i < length; i++ ) {
- value = callback( elems[ i ], i, arg );
-
- if ( value != null ) {
- ret.push( value );
- }
- }
-
- // Go through every key on the object,
- } else {
- for ( i in elems ) {
- value = callback( elems[ i ], i, arg );
-
- if ( value != null ) {
- ret.push( value );
- }
- }
- }
-
- // Flatten any nested arrays
- return concat.apply( [], ret );
- },
-
- // A global GUID counter for objects
- guid: 1,
-
- // Bind a function to a context, optionally partially applying any
- // arguments.
- proxy: function( fn, context ) {
- var tmp, args, proxy;
-
- if ( typeof context === "string" ) {
- tmp = fn[ context ];
- context = fn;
- fn = tmp;
- }
-
- // Quick check to determine if target is callable, in the spec
- // this throws a TypeError, but we will just return undefined.
- if ( !jQuery.isFunction( fn ) ) {
- return undefined;
- }
-
- // Simulated bind
- args = slice.call( arguments, 2 );
- proxy = function() {
- return fn.apply( context || this, args.concat( slice.call( arguments ) ) );
- };
-
- // Set the guid of unique handler to the same of original handler, so it can be removed
- proxy.guid = fn.guid = fn.guid || jQuery.guid++;
-
- return proxy;
- },
-
- now: Date.now,
-
- // jQuery.support is not used in Core but other projects attach their
- // properties to it so it needs to exist.
- support: support
-} );
-
-if ( typeof Symbol === "function" ) {
- jQuery.fn[ Symbol.iterator ] = arr[ Symbol.iterator ];
-}
-
-// Populate the class2type map
-jQuery.each( "Boolean Number String Function Array Date RegExp Object Error Symbol".split( " " ),
-function( i, name ) {
- class2type[ "[object " + name + "]" ] = name.toLowerCase();
-} );
-
-function isArrayLike( obj ) {
-
- // Support: real iOS 8.2 only (not reproducible in simulator)
- // `in` check used to prevent JIT error (gh-2145)
- // hasOwn isn't used here due to false negatives
- // regarding Nodelist length in IE
- var length = !!obj && "length" in obj && obj.length,
- type = jQuery.type( obj );
-
- if ( type === "function" || jQuery.isWindow( obj ) ) {
- return false;
- }
-
- return type === "array" || length === 0 ||
- typeof length === "number" && length > 0 && ( length - 1 ) in obj;
-}
-var Sizzle =
-/*!
- * Sizzle CSS Selector Engine v2.3.3
- * https://sizzlejs.com/
- *
- * Copyright jQuery Foundation and other contributors
- * Released under the MIT license
- * http://jquery.org/license
- *
- * Date: 2016-08-08
- */
-(function( window ) {
-
-var i,
- support,
- Expr,
- getText,
- isXML,
- tokenize,
- compile,
- select,
- outermostContext,
- sortInput,
- hasDuplicate,
-
- // Local document vars
- setDocument,
- document,
- docElem,
- documentIsHTML,
- rbuggyQSA,
- rbuggyMatches,
- matches,
- contains,
-
- // Instance-specific data
- expando = "sizzle" + 1 * new Date(),
- preferredDoc = window.document,
- dirruns = 0,
- done = 0,
- classCache = createCache(),
- tokenCache = createCache(),
- compilerCache = createCache(),
- sortOrder = function( a, b ) {
- if ( a === b ) {
- hasDuplicate = true;
- }
- return 0;
- },
-
- // Instance methods
- hasOwn = ({}).hasOwnProperty,
- arr = [],
- pop = arr.pop,
- push_native = arr.push,
- push = arr.push,
- slice = arr.slice,
- // Use a stripped-down indexOf as it's faster than native
- // https://jsperf.com/thor-indexof-vs-for/5
- indexOf = function( list, elem ) {
- var i = 0,
- len = list.length;
- for ( ; i < len; i++ ) {
- if ( list[i] === elem ) {
- return i;
- }
- }
- return -1;
- },
-
- booleans = "checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",
-
- // Regular expressions
-
- // http://www.w3.org/TR/css3-selectors/#whitespace
- whitespace = "[\\x20\\t\\r\\n\\f]",
-
- // http://www.w3.org/TR/CSS21/syndata.html#value-def-identifier
- identifier = "(?:\\\\.|[\\w-]|[^\0-\\xa0])+",
-
- // Attribute selectors: http://www.w3.org/TR/selectors/#attribute-selectors
- attributes = "\\[" + whitespace + "*(" + identifier + ")(?:" + whitespace +
- // Operator (capture 2)
- "*([*^$|!~]?=)" + whitespace +
- // "Attribute values must be CSS identifiers [capture 5] or strings [capture 3 or capture 4]"
- "*(?:'((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\"|(" + identifier + "))|)" + whitespace +
- "*\\]",
-
- pseudos = ":(" + identifier + ")(?:\\((" +
- // To reduce the number of selectors needing tokenize in the preFilter, prefer arguments:
- // 1. quoted (capture 3; capture 4 or capture 5)
- "('((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\")|" +
- // 2. simple (capture 6)
- "((?:\\\\.|[^\\\\()[\\]]|" + attributes + ")*)|" +
- // 3. anything else (capture 2)
- ".*" +
- ")\\)|)",
-
- // Leading and non-escaped trailing whitespace, capturing some non-whitespace characters preceding the latter
- rwhitespace = new RegExp( whitespace + "+", "g" ),
- rtrim = new RegExp( "^" + whitespace + "+|((?:^|[^\\\\])(?:\\\\.)*)" + whitespace + "+$", "g" ),
-
- rcomma = new RegExp( "^" + whitespace + "*," + whitespace + "*" ),
- rcombinators = new RegExp( "^" + whitespace + "*([>+~]|" + whitespace + ")" + whitespace + "*" ),
-
- rattributeQuotes = new RegExp( "=" + whitespace + "*([^\\]'\"]*?)" + whitespace + "*\\]", "g" ),
-
- rpseudo = new RegExp( pseudos ),
- ridentifier = new RegExp( "^" + identifier + "$" ),
-
- matchExpr = {
- "ID": new RegExp( "^#(" + identifier + ")" ),
- "CLASS": new RegExp( "^\\.(" + identifier + ")" ),
- "TAG": new RegExp( "^(" + identifier + "|[*])" ),
- "ATTR": new RegExp( "^" + attributes ),
- "PSEUDO": new RegExp( "^" + pseudos ),
- "CHILD": new RegExp( "^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\(" + whitespace +
- "*(even|odd|(([+-]|)(\\d*)n|)" + whitespace + "*(?:([+-]|)" + whitespace +
- "*(\\d+)|))" + whitespace + "*\\)|)", "i" ),
- "bool": new RegExp( "^(?:" + booleans + ")$", "i" ),
- // For use in libraries implementing .is()
- // We use this for POS matching in `select`
- "needsContext": new RegExp( "^" + whitespace + "*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\(" +
- whitespace + "*((?:-\\d)?\\d*)" + whitespace + "*\\)|)(?=[^-]|$)", "i" )
- },
-
- rinputs = /^(?:input|select|textarea|button)$/i,
- rheader = /^h\d$/i,
-
- rnative = /^[^{]+\{\s*\[native \w/,
-
- // Easily-parseable/retrievable ID or TAG or CLASS selectors
- rquickExpr = /^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,
-
- rsibling = /[+~]/,
-
- // CSS escapes
- // http://www.w3.org/TR/CSS21/syndata.html#escaped-characters
- runescape = new RegExp( "\\\\([\\da-f]{1,6}" + whitespace + "?|(" + whitespace + ")|.)", "ig" ),
- funescape = function( _, escaped, escapedWhitespace ) {
- var high = "0x" + escaped - 0x10000;
- // NaN means non-codepoint
- // Support: Firefox<24
- // Workaround erroneous numeric interpretation of +"0x"
- return high !== high || escapedWhitespace ?
- escaped :
- high < 0 ?
- // BMP codepoint
- String.fromCharCode( high + 0x10000 ) :
- // Supplemental Plane codepoint (surrogate pair)
- String.fromCharCode( high >> 10 | 0xD800, high & 0x3FF | 0xDC00 );
- },
-
- // CSS string/identifier serialization
- // https://drafts.csswg.org/cssom/#common-serializing-idioms
- rcssescape = /([\0-\x1f\x7f]|^-?\d)|^-$|[^\0-\x1f\x7f-\uFFFF\w-]/g,
- fcssescape = function( ch, asCodePoint ) {
- if ( asCodePoint ) {
-
- // U+0000 NULL becomes U+FFFD REPLACEMENT CHARACTER
- if ( ch === "\0" ) {
- return "\uFFFD";
- }
-
- // Control characters and (dependent upon position) numbers get escaped as code points
- return ch.slice( 0, -1 ) + "\\" + ch.charCodeAt( ch.length - 1 ).toString( 16 ) + " ";
- }
-
- // Other potentially-special ASCII characters get backslash-escaped
- return "\\" + ch;
- },
-
- // Used for iframes
- // See setDocument()
- // Removing the function wrapper causes a "Permission Denied"
- // error in IE
- unloadHandler = function() {
- setDocument();
- },
-
- disabledAncestor = addCombinator(
- function( elem ) {
- return elem.disabled === true && ("form" in elem || "label" in elem);
- },
- { dir: "parentNode", next: "legend" }
- );
-
-// Optimize for push.apply( _, NodeList )
-try {
- push.apply(
- (arr = slice.call( preferredDoc.childNodes )),
- preferredDoc.childNodes
- );
- // Support: Android<4.0
- // Detect silently failing push.apply
- arr[ preferredDoc.childNodes.length ].nodeType;
-} catch ( e ) {
- push = { apply: arr.length ?
-
- // Leverage slice if possible
- function( target, els ) {
- push_native.apply( target, slice.call(els) );
- } :
-
- // Support: IE<9
- // Otherwise append directly
- function( target, els ) {
- var j = target.length,
- i = 0;
- // Can't trust NodeList.length
- while ( (target[j++] = els[i++]) ) {}
- target.length = j - 1;
- }
- };
-}
-
-function Sizzle( selector, context, results, seed ) {
- var m, i, elem, nid, match, groups, newSelector,
- newContext = context && context.ownerDocument,
-
- // nodeType defaults to 9, since context defaults to document
- nodeType = context ? context.nodeType : 9;
-
- results = results || [];
-
- // Return early from calls with invalid selector or context
- if ( typeof selector !== "string" || !selector ||
- nodeType !== 1 && nodeType !== 9 && nodeType !== 11 ) {
-
- return results;
- }
-
- // Try to shortcut find operations (as opposed to filters) in HTML documents
- if ( !seed ) {
-
- if ( ( context ? context.ownerDocument || context : preferredDoc ) !== document ) {
- setDocument( context );
- }
- context = context || document;
-
- if ( documentIsHTML ) {
-
- // If the selector is sufficiently simple, try using a "get*By*" DOM method
- // (excepting DocumentFragment context, where the methods don't exist)
- if ( nodeType !== 11 && (match = rquickExpr.exec( selector )) ) {
-
- // ID selector
- if ( (m = match[1]) ) {
-
- // Document context
- if ( nodeType === 9 ) {
- if ( (elem = context.getElementById( m )) ) {
-
- // Support: IE, Opera, Webkit
- // TODO: identify versions
- // getElementById can match elements by name instead of ID
- if ( elem.id === m ) {
- results.push( elem );
- return results;
- }
- } else {
- return results;
- }
-
- // Element context
- } else {
-
- // Support: IE, Opera, Webkit
- // TODO: identify versions
- // getElementById can match elements by name instead of ID
- if ( newContext && (elem = newContext.getElementById( m )) &&
- contains( context, elem ) &&
- elem.id === m ) {
-
- results.push( elem );
- return results;
- }
- }
-
- // Type selector
- } else if ( match[2] ) {
- push.apply( results, context.getElementsByTagName( selector ) );
- return results;
-
- // Class selector
- } else if ( (m = match[3]) && support.getElementsByClassName &&
- context.getElementsByClassName ) {
-
- push.apply( results, context.getElementsByClassName( m ) );
- return results;
- }
- }
-
- // Take advantage of querySelectorAll
- if ( support.qsa &&
- !compilerCache[ selector + " " ] &&
- (!rbuggyQSA || !rbuggyQSA.test( selector )) ) {
-
- if ( nodeType !== 1 ) {
- newContext = context;
- newSelector = selector;
-
- // qSA looks outside Element context, which is not what we want
- // Thanks to Andrew Dupont for this workaround technique
- // Support: IE <=8
- // Exclude object elements
- } else if ( context.nodeName.toLowerCase() !== "object" ) {
-
- // Capture the context ID, setting it first if necessary
- if ( (nid = context.getAttribute( "id" )) ) {
- nid = nid.replace( rcssescape, fcssescape );
- } else {
- context.setAttribute( "id", (nid = expando) );
- }
-
- // Prefix every selector in the list
- groups = tokenize( selector );
- i = groups.length;
- while ( i-- ) {
- groups[i] = "#" + nid + " " + toSelector( groups[i] );
- }
- newSelector = groups.join( "," );
-
- // Expand context for sibling selectors
- newContext = rsibling.test( selector ) && testContext( context.parentNode ) ||
- context;
- }
-
- if ( newSelector ) {
- try {
- push.apply( results,
- newContext.querySelectorAll( newSelector )
- );
- return results;
- } catch ( qsaError ) {
- } finally {
- if ( nid === expando ) {
- context.removeAttribute( "id" );
- }
- }
- }
- }
- }
- }
-
- // All others
- return select( selector.replace( rtrim, "$1" ), context, results, seed );
-}
-
-/**
- * Create key-value caches of limited size
- * @returns {function(string, object)} Returns the Object data after storing it on itself with
- * property name the (space-suffixed) string and (if the cache is larger than Expr.cacheLength)
- * deleting the oldest entry
- */
-function createCache() {
- var keys = [];
-
- function cache( key, value ) {
- // Use (key + " ") to avoid collision with native prototype properties (see Issue #157)
- if ( keys.push( key + " " ) > Expr.cacheLength ) {
- // Only keep the most recent entries
- delete cache[ keys.shift() ];
- }
- return (cache[ key + " " ] = value);
- }
- return cache;
-}
-
-/**
- * Mark a function for special use by Sizzle
- * @param {Function} fn The function to mark
- */
-function markFunction( fn ) {
- fn[ expando ] = true;
- return fn;
-}
-
-/**
- * Support testing using an element
- * @param {Function} fn Passed the created element and returns a boolean result
- */
-function assert( fn ) {
- var el = document.createElement("fieldset");
-
- try {
- return !!fn( el );
- } catch (e) {
- return false;
- } finally {
- // Remove from its parent by default
- if ( el.parentNode ) {
- el.parentNode.removeChild( el );
- }
- // release memory in IE
- el = null;
- }
-}
-
-/**
- * Adds the same handler for all of the specified attrs
- * @param {String} attrs Pipe-separated list of attributes
- * @param {Function} handler The method that will be applied
- */
-function addHandle( attrs, handler ) {
- var arr = attrs.split("|"),
- i = arr.length;
-
- while ( i-- ) {
- Expr.attrHandle[ arr[i] ] = handler;
- }
-}
-
-/**
- * Checks document order of two siblings
- * @param {Element} a
- * @param {Element} b
- * @returns {Number} Returns less than 0 if a precedes b, greater than 0 if a follows b
- */
-function siblingCheck( a, b ) {
- var cur = b && a,
- diff = cur && a.nodeType === 1 && b.nodeType === 1 &&
- a.sourceIndex - b.sourceIndex;
-
- // Use IE sourceIndex if available on both nodes
- if ( diff ) {
- return diff;
- }
-
- // Check if b follows a
- if ( cur ) {
- while ( (cur = cur.nextSibling) ) {
- if ( cur === b ) {
- return -1;
- }
- }
- }
-
- return a ? 1 : -1;
-}
-
-/**
- * Returns a function to use in pseudos for input types
- * @param {String} type
- */
-function createInputPseudo( type ) {
- return function( elem ) {
- var name = elem.nodeName.toLowerCase();
- return name === "input" && elem.type === type;
- };
-}
-
-/**
- * Returns a function to use in pseudos for buttons
- * @param {String} type
- */
-function createButtonPseudo( type ) {
- return function( elem ) {
- var name = elem.nodeName.toLowerCase();
- return (name === "input" || name === "button") && elem.type === type;
- };
-}
-
-/**
- * Returns a function to use in pseudos for :enabled/:disabled
- * @param {Boolean} disabled true for :disabled; false for :enabled
- */
-function createDisabledPseudo( disabled ) {
-
- // Known :disabled false positives: fieldset[disabled] > legend:nth-of-type(n+2) :can-disable
- return function( elem ) {
-
- // Only certain elements can match :enabled or :disabled
- // https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
- // https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
- if ( "form" in elem ) {
-
- // Check for inherited disabledness on relevant non-disabled elements:
- // * listed form-associated elements in a disabled fieldset
- // https://html.spec.whatwg.org/multipage/forms.html#category-listed
- // https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
- // * option elements in a disabled optgroup
- // https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
- // All such elements have a "form" property.
- if ( elem.parentNode && elem.disabled === false ) {
-
- // Option elements defer to a parent optgroup if present
- if ( "label" in elem ) {
- if ( "label" in elem.parentNode ) {
- return elem.parentNode.disabled === disabled;
- } else {
- return elem.disabled === disabled;
- }
- }
-
- // Support: IE 6 - 11
- // Use the isDisabled shortcut property to check for disabled fieldset ancestors
- return elem.isDisabled === disabled ||
-
- // Where there is no isDisabled, check manually
- /* jshint -W018 */
- elem.isDisabled !== !disabled &&
- disabledAncestor( elem ) === disabled;
- }
-
- return elem.disabled === disabled;
-
- // Try to winnow out elements that can't be disabled before trusting the disabled property.
- // Some victims get caught in our net (label, legend, menu, track), but it shouldn't
- // even exist on them, let alone have a boolean value.
- } else if ( "label" in elem ) {
- return elem.disabled === disabled;
- }
-
- // Remaining elements are neither :enabled nor :disabled
- return false;
- };
-}
-
-/**
- * Returns a function to use in pseudos for positionals
- * @param {Function} fn
- */
-function createPositionalPseudo( fn ) {
- return markFunction(function( argument ) {
- argument = +argument;
- return markFunction(function( seed, matches ) {
- var j,
- matchIndexes = fn( [], seed.length, argument ),
- i = matchIndexes.length;
-
- // Match elements found at the specified indexes
- while ( i-- ) {
- if ( seed[ (j = matchIndexes[i]) ] ) {
- seed[j] = !(matches[j] = seed[j]);
- }
- }
- });
- });
-}
-
-/**
- * Checks a node for validity as a Sizzle context
- * @param {Element|Object=} context
- * @returns {Element|Object|Boolean} The input node if acceptable, otherwise a falsy value
- */
-function testContext( context ) {
- return context && typeof context.getElementsByTagName !== "undefined" && context;
-}
-
-// Expose support vars for convenience
-support = Sizzle.support = {};
-
-/**
- * Detects XML nodes
- * @param {Element|Object} elem An element or a document
- * @returns {Boolean} True iff elem is a non-HTML XML node
- */
-isXML = Sizzle.isXML = function( elem ) {
- // documentElement is verified for cases where it doesn't yet exist
- // (such as loading iframes in IE - #4833)
- var documentElement = elem && (elem.ownerDocument || elem).documentElement;
- return documentElement ? documentElement.nodeName !== "HTML" : false;
-};
-
-/**
- * Sets document-related variables once based on the current document
- * @param {Element|Object} [doc] An element or document object to use to set the document
- * @returns {Object} Returns the current document
- */
-setDocument = Sizzle.setDocument = function( node ) {
- var hasCompare, subWindow,
- doc = node ? node.ownerDocument || node : preferredDoc;
-
- // Return early if doc is invalid or already selected
- if ( doc === document || doc.nodeType !== 9 || !doc.documentElement ) {
- return document;
- }
-
- // Update global variables
- document = doc;
- docElem = document.documentElement;
- documentIsHTML = !isXML( document );
-
- // Support: IE 9-11, Edge
- // Accessing iframe documents after unload throws "permission denied" errors (jQuery #13936)
- if ( preferredDoc !== document &&
- (subWindow = document.defaultView) && subWindow.top !== subWindow ) {
-
- // Support: IE 11, Edge
- if ( subWindow.addEventListener ) {
- subWindow.addEventListener( "unload", unloadHandler, false );
-
- // Support: IE 9 - 10 only
- } else if ( subWindow.attachEvent ) {
- subWindow.attachEvent( "onunload", unloadHandler );
- }
- }
-
- /* Attributes
- ---------------------------------------------------------------------- */
-
- // Support: IE<8
- // Verify that getAttribute really returns attributes and not properties
- // (excepting IE8 booleans)
- support.attributes = assert(function( el ) {
- el.className = "i";
- return !el.getAttribute("className");
- });
-
- /* getElement(s)By*
- ---------------------------------------------------------------------- */
-
- // Check if getElementsByTagName("*") returns only elements
- support.getElementsByTagName = assert(function( el ) {
- el.appendChild( document.createComment("") );
- return !el.getElementsByTagName("*").length;
- });
-
- // Support: IE<9
- support.getElementsByClassName = rnative.test( document.getElementsByClassName );
-
- // Support: IE<10
- // Check if getElementById returns elements by name
- // The broken getElementById methods don't pick up programmatically-set names,
- // so use a roundabout getElementsByName test
- support.getById = assert(function( el ) {
- docElem.appendChild( el ).id = expando;
- return !document.getElementsByName || !document.getElementsByName( expando ).length;
- });
-
- // ID filter and find
- if ( support.getById ) {
- Expr.filter["ID"] = function( id ) {
- var attrId = id.replace( runescape, funescape );
- return function( elem ) {
- return elem.getAttribute("id") === attrId;
- };
- };
- Expr.find["ID"] = function( id, context ) {
- if ( typeof context.getElementById !== "undefined" && documentIsHTML ) {
- var elem = context.getElementById( id );
- return elem ? [ elem ] : [];
- }
- };
- } else {
- Expr.filter["ID"] = function( id ) {
- var attrId = id.replace( runescape, funescape );
- return function( elem ) {
- var node = typeof elem.getAttributeNode !== "undefined" &&
- elem.getAttributeNode("id");
- return node && node.value === attrId;
- };
- };
-
- // Support: IE 6 - 7 only
- // getElementById is not reliable as a find shortcut
- Expr.find["ID"] = function( id, context ) {
- if ( typeof context.getElementById !== "undefined" && documentIsHTML ) {
- var node, i, elems,
- elem = context.getElementById( id );
-
- if ( elem ) {
-
- // Verify the id attribute
- node = elem.getAttributeNode("id");
- if ( node && node.value === id ) {
- return [ elem ];
- }
-
- // Fall back on getElementsByName
- elems = context.getElementsByName( id );
- i = 0;
- while ( (elem = elems[i++]) ) {
- node = elem.getAttributeNode("id");
- if ( node && node.value === id ) {
- return [ elem ];
- }
- }
- }
-
- return [];
- }
- };
- }
-
- // Tag
- Expr.find["TAG"] = support.getElementsByTagName ?
- function( tag, context ) {
- if ( typeof context.getElementsByTagName !== "undefined" ) {
- return context.getElementsByTagName( tag );
-
- // DocumentFragment nodes don't have gEBTN
- } else if ( support.qsa ) {
- return context.querySelectorAll( tag );
- }
- } :
-
- function( tag, context ) {
- var elem,
- tmp = [],
- i = 0,
- // By happy coincidence, a (broken) gEBTN appears on DocumentFragment nodes too
- results = context.getElementsByTagName( tag );
-
- // Filter out possible comments
- if ( tag === "*" ) {
- while ( (elem = results[i++]) ) {
- if ( elem.nodeType === 1 ) {
- tmp.push( elem );
- }
- }
-
- return tmp;
- }
- return results;
- };
-
- // Class
- Expr.find["CLASS"] = support.getElementsByClassName && function( className, context ) {
- if ( typeof context.getElementsByClassName !== "undefined" && documentIsHTML ) {
- return context.getElementsByClassName( className );
- }
- };
-
- /* QSA/matchesSelector
- ---------------------------------------------------------------------- */
-
- // QSA and matchesSelector support
-
- // matchesSelector(:active) reports false when true (IE9/Opera 11.5)
- rbuggyMatches = [];
-
- // qSa(:focus) reports false when true (Chrome 21)
- // We allow this because of a bug in IE8/9 that throws an error
- // whenever `document.activeElement` is accessed on an iframe
- // So, we allow :focus to pass through QSA all the time to avoid the IE error
- // See https://bugs.jquery.com/ticket/13378
- rbuggyQSA = [];
-
- if ( (support.qsa = rnative.test( document.querySelectorAll )) ) {
- // Build QSA regex
- // Regex strategy adopted from Diego Perini
- assert(function( el ) {
- // Select is set to empty string on purpose
- // This is to test IE's treatment of not explicitly
- // setting a boolean content attribute,
- // since its presence should be enough
- // https://bugs.jquery.com/ticket/12359
- docElem.appendChild( el ).innerHTML = "<a id='" + expando + "'></a>" +
- "<select id='" + expando + "-\r\\' msallowcapture=''>" +
- "<option selected=''></option></select>";
-
- // Support: IE8, Opera 11-12.16
- // Nothing should be selected when empty strings follow ^= or $= or *=
- // The test attribute must be unknown in Opera but "safe" for WinRT
- // https://msdn.microsoft.com/en-us/library/ie/hh465388.aspx#attribute_section
- if ( el.querySelectorAll("[msallowcapture^='']").length ) {
- rbuggyQSA.push( "[*^$]=" + whitespace + "*(?:''|\"\")" );
- }
-
- // Support: IE8
- // Boolean attributes and "value" are not treated correctly
- if ( !el.querySelectorAll("[selected]").length ) {
- rbuggyQSA.push( "\\[" + whitespace + "*(?:value|" + booleans + ")" );
- }
-
- // Support: Chrome<29, Android<4.4, Safari<7.0+, iOS<7.0+, PhantomJS<1.9.8+
- if ( !el.querySelectorAll( "[id~=" + expando + "-]" ).length ) {
- rbuggyQSA.push("~=");
- }
-
- // Webkit/Opera - :checked should return selected option elements
- // http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked
- // IE8 throws error here and will not see later tests
- if ( !el.querySelectorAll(":checked").length ) {
- rbuggyQSA.push(":checked");
- }
-
- // Support: Safari 8+, iOS 8+
- // https://bugs.webkit.org/show_bug.cgi?id=136851
- // In-page `selector#id sibling-combinator selector` fails
- if ( !el.querySelectorAll( "a#" + expando + "+*" ).length ) {
- rbuggyQSA.push(".#.+[+~]");
- }
- });
-
- assert(function( el ) {
- el.innerHTML = "<a href='' disabled='disabled'></a>" +
- "<select disabled='disabled'><option/></select>";
-
- // Support: Windows 8 Native Apps
- // The type and name attributes are restricted during .innerHTML assignment
- var input = document.createElement("input");
- input.setAttribute( "type", "hidden" );
- el.appendChild( input ).setAttribute( "name", "D" );
-
- // Support: IE8
- // Enforce case-sensitivity of name attribute
- if ( el.querySelectorAll("[name=d]").length ) {
- rbuggyQSA.push( "name" + whitespace + "*[*^$|!~]?=" );
- }
-
- // FF 3.5 - :enabled/:disabled and hidden elements (hidden elements are still enabled)
- // IE8 throws error here and will not see later tests
- if ( el.querySelectorAll(":enabled").length !== 2 ) {
- rbuggyQSA.push( ":enabled", ":disabled" );
- }
-
- // Support: IE9-11+
- // IE's :disabled selector does not pick up the children of disabled fieldsets
- docElem.appendChild( el ).disabled = true;
- if ( el.querySelectorAll(":disabled").length !== 2 ) {
- rbuggyQSA.push( ":enabled", ":disabled" );
- }
-
- // Opera 10-11 does not throw on post-comma invalid pseudos
- el.querySelectorAll("*,:x");
- rbuggyQSA.push(",.*:");
- });
- }
-
- if ( (support.matchesSelector = rnative.test( (matches = docElem.matches ||
- docElem.webkitMatchesSelector ||
- docElem.mozMatchesSelector ||
- docElem.oMatchesSelector ||
- docElem.msMatchesSelector) )) ) {
-
- assert(function( el ) {
- // Check to see if it's possible to do matchesSelector
- // on a disconnected node (IE 9)
- support.disconnectedMatch = matches.call( el, "*" );
-
- // This should fail with an exception
- // Gecko does not error, returns false instead
- matches.call( el, "[s!='']:x" );
- rbuggyMatches.push( "!=", pseudos );
- });
- }
-
- rbuggyQSA = rbuggyQSA.length && new RegExp( rbuggyQSA.join("|") );
- rbuggyMatches = rbuggyMatches.length && new RegExp( rbuggyMatches.join("|") );
-
- /* Contains
- ---------------------------------------------------------------------- */
- hasCompare = rnative.test( docElem.compareDocumentPosition );
-
- // Element contains another
- // Purposefully self-exclusive
- // As in, an element does not contain itself
- contains = hasCompare || rnative.test( docElem.contains ) ?
- function( a, b ) {
- var adown = a.nodeType === 9 ? a.documentElement : a,
- bup = b && b.parentNode;
- return a === bup || !!( bup && bup.nodeType === 1 && (
- adown.contains ?
- adown.contains( bup ) :
- a.compareDocumentPosition && a.compareDocumentPosition( bup ) & 16
- ));
- } :
- function( a, b ) {
- if ( b ) {
- while ( (b = b.parentNode) ) {
- if ( b === a ) {
- return true;
- }
- }
- }
- return false;
- };
-
- /* Sorting
- ---------------------------------------------------------------------- */
-
- // Document order sorting
- sortOrder = hasCompare ?
- function( a, b ) {
-
- // Flag for duplicate removal
- if ( a === b ) {
- hasDuplicate = true;
- return 0;
- }
-
- // Sort on method existence if only one input has compareDocumentPosition
- var compare = !a.compareDocumentPosition - !b.compareDocumentPosition;
- if ( compare ) {
- return compare;
- }
-
- // Calculate position if both inputs belong to the same document
- compare = ( a.ownerDocument || a ) === ( b.ownerDocument || b ) ?
- a.compareDocumentPosition( b ) :
-
- // Otherwise we know they are disconnected
- 1;
-
- // Disconnected nodes
- if ( compare & 1 ||
- (!support.sortDetached && b.compareDocumentPosition( a ) === compare) ) {
-
- // Choose the first element that is related to our preferred document
- if ( a === document || a.ownerDocument === preferredDoc && contains(preferredDoc, a) ) {
- return -1;
- }
- if ( b === document || b.ownerDocument === preferredDoc && contains(preferredDoc, b) ) {
- return 1;
- }
-
- // Maintain original order
- return sortInput ?
- ( indexOf( sortInput, a ) - indexOf( sortInput, b ) ) :
- 0;
- }
-
- return compare & 4 ? -1 : 1;
- } :
- function( a, b ) {
- // Exit early if the nodes are identical
- if ( a === b ) {
- hasDuplicate = true;
- return 0;
- }
-
- var cur,
- i = 0,
- aup = a.parentNode,
- bup = b.parentNode,
- ap = [ a ],
- bp = [ b ];
-
- // Parentless nodes are either documents or disconnected
- if ( !aup || !bup ) {
- return a === document ? -1 :
- b === document ? 1 :
- aup ? -1 :
- bup ? 1 :
- sortInput ?
- ( indexOf( sortInput, a ) - indexOf( sortInput, b ) ) :
- 0;
-
- // If the nodes are siblings, we can do a quick check
- } else if ( aup === bup ) {
- return siblingCheck( a, b );
- }
-
- // Otherwise we need full lists of their ancestors for comparison
- cur = a;
- while ( (cur = cur.parentNode) ) {
- ap.unshift( cur );
- }
- cur = b;
- while ( (cur = cur.parentNode) ) {
- bp.unshift( cur );
- }
-
- // Walk down the tree looking for a discrepancy
- while ( ap[i] === bp[i] ) {
- i++;
- }
-
- return i ?
- // Do a sibling check if the nodes have a common ancestor
- siblingCheck( ap[i], bp[i] ) :
-
- // Otherwise nodes in our document sort first
- ap[i] === preferredDoc ? -1 :
- bp[i] === preferredDoc ? 1 :
- 0;
- };
-
- return document;
-};
-
-Sizzle.matches = function( expr, elements ) {
- return Sizzle( expr, null, null, elements );
-};
-
-Sizzle.matchesSelector = function( elem, expr ) {
- // Set document vars if needed
- if ( ( elem.ownerDocument || elem ) !== document ) {
- setDocument( elem );
- }
-
- // Make sure that attribute selectors are quoted
- expr = expr.replace( rattributeQuotes, "='$1']" );
-
- if ( support.matchesSelector && documentIsHTML &&
- !compilerCache[ expr + " " ] &&
- ( !rbuggyMatches || !rbuggyMatches.test( expr ) ) &&
- ( !rbuggyQSA || !rbuggyQSA.test( expr ) ) ) {
-
- try {
- var ret = matches.call( elem, expr );
-
- // IE 9's matchesSelector returns false on disconnected nodes
- if ( ret || support.disconnectedMatch ||
- // As well, disconnected nodes are said to be in a document
- // fragment in IE 9
- elem.document && elem.document.nodeType !== 11 ) {
- return ret;
- }
- } catch (e) {}
- }
-
- return Sizzle( expr, document, null, [ elem ] ).length > 0;
-};
-
-Sizzle.contains = function( context, elem ) {
- // Set document vars if needed
- if ( ( context.ownerDocument || context ) !== document ) {
- setDocument( context );
- }
- return contains( context, elem );
-};
-
-Sizzle.attr = function( elem, name ) {
- // Set document vars if needed
- if ( ( elem.ownerDocument || elem ) !== document ) {
- setDocument( elem );
- }
-
- var fn = Expr.attrHandle[ name.toLowerCase() ],
- // Don't get fooled by Object.prototype properties (jQuery #13807)
- val = fn && hasOwn.call( Expr.attrHandle, name.toLowerCase() ) ?
- fn( elem, name, !documentIsHTML ) :
- undefined;
-
- return val !== undefined ?
- val :
- support.attributes || !documentIsHTML ?
- elem.getAttribute( name ) :
- (val = elem.getAttributeNode(name)) && val.specified ?
- val.value :
- null;
-};
-
-Sizzle.escape = function( sel ) {
- return (sel + "").replace( rcssescape, fcssescape );
-};
-
-Sizzle.error = function( msg ) {
- throw new Error( "Syntax error, unrecognized expression: " + msg );
-};
-
-/**
- * Document sorting and removing duplicates
- * @param {ArrayLike} results
- */
-Sizzle.uniqueSort = function( results ) {
- var elem,
- duplicates = [],
- j = 0,
- i = 0;
-
- // Unless we *know* we can detect duplicates, assume their presence
- hasDuplicate = !support.detectDuplicates;
- sortInput = !support.sortStable && results.slice( 0 );
- results.sort( sortOrder );
-
- if ( hasDuplicate ) {
- while ( (elem = results[i++]) ) {
- if ( elem === results[ i ] ) {
- j = duplicates.push( i );
- }
- }
- while ( j-- ) {
- results.splice( duplicates[ j ], 1 );
- }
- }
-
- // Clear input after sorting to release objects
- // See https://github.com/jquery/sizzle/pull/225
- sortInput = null;
-
- return results;
-};
-
-/**
- * Utility function for retrieving the text value of an array of DOM nodes
- * @param {Array|Element} elem
- */
-getText = Sizzle.getText = function( elem ) {
- var node,
- ret = "",
- i = 0,
- nodeType = elem.nodeType;
-
- if ( !nodeType ) {
- // If no nodeType, this is expected to be an array
- while ( (node = elem[i++]) ) {
- // Do not traverse comment nodes
- ret += getText( node );
- }
- } else if ( nodeType === 1 || nodeType === 9 || nodeType === 11 ) {
- // Use textContent for elements
- // innerText usage removed for consistency of new lines (jQuery #11153)
- if ( typeof elem.textContent === "string" ) {
- return elem.textContent;
- } else {
- // Traverse its children
- for ( elem = elem.firstChild; elem; elem = elem.nextSibling ) {
- ret += getText( elem );
- }
- }
- } else if ( nodeType === 3 || nodeType === 4 ) {
- return elem.nodeValue;
- }
- // Do not include comment or processing instruction nodes
-
- return ret;
-};
-
-Expr = Sizzle.selectors = {
-
- // Can be adjusted by the user
- cacheLength: 50,
-
- createPseudo: markFunction,
-
- match: matchExpr,
-
- attrHandle: {},
-
- find: {},
-
- relative: {
- ">": { dir: "parentNode", first: true },
- " ": { dir: "parentNode" },
- "+": { dir: "previousSibling", first: true },
- "~": { dir: "previousSibling" }
- },
-
- preFilter: {
- "ATTR": function( match ) {
- match[1] = match[1].replace( runescape, funescape );
-
- // Move the given value to match[3] whether quoted or unquoted
- match[3] = ( match[3] || match[4] || match[5] || "" ).replace( runescape, funescape );
-
- if ( match[2] === "~=" ) {
- match[3] = " " + match[3] + " ";
- }
-
- return match.slice( 0, 4 );
- },
-
- "CHILD": function( match ) {
- /* matches from matchExpr["CHILD"]
- 1 type (only|nth|...)
- 2 what (child|of-type)
- 3 argument (even|odd|\d*|\d*n([+-]\d+)?|...)
- 4 xn-component of xn+y argument ([+-]?\d*n|)
- 5 sign of xn-component
- 6 x of xn-component
- 7 sign of y-component
- 8 y of y-component
- */
- match[1] = match[1].toLowerCase();
-
- if ( match[1].slice( 0, 3 ) === "nth" ) {
- // nth-* requires argument
- if ( !match[3] ) {
- Sizzle.error( match[0] );
- }
-
- // numeric x and y parameters for Expr.filter.CHILD
- // remember that false/true cast respectively to 0/1
- match[4] = +( match[4] ? match[5] + (match[6] || 1) : 2 * ( match[3] === "even" || match[3] === "odd" ) );
- match[5] = +( ( match[7] + match[8] ) || match[3] === "odd" );
-
- // other types prohibit arguments
- } else if ( match[3] ) {
- Sizzle.error( match[0] );
- }
-
- return match;
- },
-
- "PSEUDO": function( match ) {
- var excess,
- unquoted = !match[6] && match[2];
-
- if ( matchExpr["CHILD"].test( match[0] ) ) {
- return null;
- }
-
- // Accept quoted arguments as-is
- if ( match[3] ) {
- match[2] = match[4] || match[5] || "";
-
- // Strip excess characters from unquoted arguments
- } else if ( unquoted && rpseudo.test( unquoted ) &&
- // Get excess from tokenize (recursively)
- (excess = tokenize( unquoted, true )) &&
- // advance to the next closing parenthesis
- (excess = unquoted.indexOf( ")", unquoted.length - excess ) - unquoted.length) ) {
-
- // excess is a negative index
- match[0] = match[0].slice( 0, excess );
- match[2] = unquoted.slice( 0, excess );
- }
-
- // Return only captures needed by the pseudo filter method (type and argument)
- return match.slice( 0, 3 );
- }
- },
-
- filter: {
-
- "TAG": function( nodeNameSelector ) {
- var nodeName = nodeNameSelector.replace( runescape, funescape ).toLowerCase();
- return nodeNameSelector === "*" ?
- function() { return true; } :
- function( elem ) {
- return elem.nodeName && elem.nodeName.toLowerCase() === nodeName;
- };
- },
-
- "CLASS": function( className ) {
- var pattern = classCache[ className + " " ];
-
- return pattern ||
- (pattern = new RegExp( "(^|" + whitespace + ")" + className + "(" + whitespace + "|$)" )) &&
- classCache( className, function( elem ) {
- return pattern.test( typeof elem.className === "string" && elem.className || typeof elem.getAttribute !== "undefined" && elem.getAttribute("class") || "" );
- });
- },
-
- "ATTR": function( name, operator, check ) {
- return function( elem ) {
- var result = Sizzle.attr( elem, name );
-
- if ( result == null ) {
- return operator === "!=";
- }
- if ( !operator ) {
- return true;
- }
-
- result += "";
-
- return operator === "=" ? result === check :
- operator === "!=" ? result !== check :
- operator === "^=" ? check && result.indexOf( check ) === 0 :
- operator === "*=" ? check && result.indexOf( check ) > -1 :
- operator === "$=" ? check && result.slice( -check.length ) === check :
- operator === "~=" ? ( " " + result.replace( rwhitespace, " " ) + " " ).indexOf( check ) > -1 :
- operator === "|=" ? result === check || result.slice( 0, check.length + 1 ) === check + "-" :
- false;
- };
- },
-
- "CHILD": function( type, what, argument, first, last ) {
- var simple = type.slice( 0, 3 ) !== "nth",
- forward = type.slice( -4 ) !== "last",
- ofType = what === "of-type";
-
- return first === 1 && last === 0 ?
-
- // Shortcut for :nth-*(n)
- function( elem ) {
- return !!elem.parentNode;
- } :
-
- function( elem, context, xml ) {
- var cache, uniqueCache, outerCache, node, nodeIndex, start,
- dir = simple !== forward ? "nextSibling" : "previousSibling",
- parent = elem.parentNode,
- name = ofType && elem.nodeName.toLowerCase(),
- useCache = !xml && !ofType,
- diff = false;
-
- if ( parent ) {
-
- // :(first|last|only)-(child|of-type)
- if ( simple ) {
- while ( dir ) {
- node = elem;
- while ( (node = node[ dir ]) ) {
- if ( ofType ?
- node.nodeName.toLowerCase() === name :
- node.nodeType === 1 ) {
-
- return false;
- }
- }
- // Reverse direction for :only-* (if we haven't yet done so)
- start = dir = type === "only" && !start && "nextSibling";
- }
- return true;
- }
-
- start = [ forward ? parent.firstChild : parent.lastChild ];
-
- // non-xml :nth-child(...) stores cache data on `parent`
- if ( forward && useCache ) {
-
- // Seek `elem` from a previously-cached index
-
- // ...in a gzip-friendly way
- node = parent;
- outerCache = node[ expando ] || (node[ expando ] = {});
-
- // Support: IE <9 only
- // Defend against cloned attroperties (jQuery gh-1709)
- uniqueCache = outerCache[ node.uniqueID ] ||
- (outerCache[ node.uniqueID ] = {});
-
- cache = uniqueCache[ type ] || [];
- nodeIndex = cache[ 0 ] === dirruns && cache[ 1 ];
- diff = nodeIndex && cache[ 2 ];
- node = nodeIndex && parent.childNodes[ nodeIndex ];
-
- while ( (node = ++nodeIndex && node && node[ dir ] ||
-
- // Fallback to seeking `elem` from the start
- (diff = nodeIndex = 0) || start.pop()) ) {
-
- // When found, cache indexes on `parent` and break
- if ( node.nodeType === 1 && ++diff && node === elem ) {
- uniqueCache[ type ] = [ dirruns, nodeIndex, diff ];
- break;
- }
- }
-
- } else {
- // Use previously-cached element index if available
- if ( useCache ) {
- // ...in a gzip-friendly way
- node = elem;
- outerCache = node[ expando ] || (node[ expando ] = {});
-
- // Support: IE <9 only
- // Defend against cloned attroperties (jQuery gh-1709)
- uniqueCache = outerCache[ node.uniqueID ] ||
- (outerCache[ node.uniqueID ] = {});
-
- cache = uniqueCache[ type ] || [];
- nodeIndex = cache[ 0 ] === dirruns && cache[ 1 ];
- diff = nodeIndex;
- }
-
- // xml :nth-child(...)
- // or :nth-last-child(...) or :nth(-last)?-of-type(...)
- if ( diff === false ) {
- // Use the same loop as above to seek `elem` from the start
- while ( (node = ++nodeIndex && node && node[ dir ] ||
- (diff = nodeIndex = 0) || start.pop()) ) {
-
- if ( ( ofType ?
- node.nodeName.toLowerCase() === name :
- node.nodeType === 1 ) &&
- ++diff ) {
-
- // Cache the index of each encountered element
- if ( useCache ) {
- outerCache = node[ expando ] || (node[ expando ] = {});
-
- // Support: IE <9 only
- // Defend against cloned attroperties (jQuery gh-1709)
- uniqueCache = outerCache[ node.uniqueID ] ||
- (outerCache[ node.uniqueID ] = {});
-
- uniqueCache[ type ] = [ dirruns, diff ];
- }
-
- if ( node === elem ) {
- break;
- }
- }
- }
- }
- }
-
- // Incorporate the offset, then check against cycle size
- diff -= last;
- return diff === first || ( diff % first === 0 && diff / first >= 0 );
- }
- };
- },
-
- "PSEUDO": function( pseudo, argument ) {
- // pseudo-class names are case-insensitive
- // http://www.w3.org/TR/selectors/#pseudo-classes
- // Prioritize by case sensitivity in case custom pseudos are added with uppercase letters
- // Remember that setFilters inherits from pseudos
- var args,
- fn = Expr.pseudos[ pseudo ] || Expr.setFilters[ pseudo.toLowerCase() ] ||
- Sizzle.error( "unsupported pseudo: " + pseudo );
-
- // The user may use createPseudo to indicate that
- // arguments are needed to create the filter function
- // just as Sizzle does
- if ( fn[ expando ] ) {
- return fn( argument );
- }
-
- // But maintain support for old signatures
- if ( fn.length > 1 ) {
- args = [ pseudo, pseudo, "", argument ];
- return Expr.setFilters.hasOwnProperty( pseudo.toLowerCase() ) ?
- markFunction(function( seed, matches ) {
- var idx,
- matched = fn( seed, argument ),
- i = matched.length;
- while ( i-- ) {
- idx = indexOf( seed, matched[i] );
- seed[ idx ] = !( matches[ idx ] = matched[i] );
- }
- }) :
- function( elem ) {
- return fn( elem, 0, args );
- };
- }
-
- return fn;
- }
- },
-
- pseudos: {
- // Potentially complex pseudos
- "not": markFunction(function( selector ) {
- // Trim the selector passed to compile
- // to avoid treating leading and trailing
- // spaces as combinators
- var input = [],
- results = [],
- matcher = compile( selector.replace( rtrim, "$1" ) );
-
- return matcher[ expando ] ?
- markFunction(function( seed, matches, context, xml ) {
- var elem,
- unmatched = matcher( seed, null, xml, [] ),
- i = seed.length;
-
- // Match elements unmatched by `matcher`
- while ( i-- ) {
- if ( (elem = unmatched[i]) ) {
- seed[i] = !(matches[i] = elem);
- }
- }
- }) :
- function( elem, context, xml ) {
- input[0] = elem;
- matcher( input, null, xml, results );
- // Don't keep the element (issue #299)
- input[0] = null;
- return !results.pop();
- };
- }),
-
- "has": markFunction(function( selector ) {
- return function( elem ) {
- return Sizzle( selector, elem ).length > 0;
- };
- }),
-
- "contains": markFunction(function( text ) {
- text = text.replace( runescape, funescape );
- return function( elem ) {
- return ( elem.textContent || elem.innerText || getText( elem ) ).indexOf( text ) > -1;
- };
- }),
-
- // "Whether an element is represented by a :lang() selector
- // is based solely on the element's language value
- // being equal to the identifier C,
- // or beginning with the identifier C immediately followed by "-".
- // The matching of C against the element's language value is performed case-insensitively.
- // The identifier C does not have to be a valid language name."
- // http://www.w3.org/TR/selectors/#lang-pseudo
- "lang": markFunction( function( lang ) {
- // lang value must be a valid identifier
- if ( !ridentifier.test(lang || "") ) {
- Sizzle.error( "unsupported lang: " + lang );
- }
- lang = lang.replace( runescape, funescape ).toLowerCase();
- return function( elem ) {
- var elemLang;
- do {
- if ( (elemLang = documentIsHTML ?
- elem.lang :
- elem.getAttribute("xml:lang") || elem.getAttribute("lang")) ) {
-
- elemLang = elemLang.toLowerCase();
- return elemLang === lang || elemLang.indexOf( lang + "-" ) === 0;
- }
- } while ( (elem = elem.parentNode) && elem.nodeType === 1 );
- return false;
- };
- }),
-
- // Miscellaneous
- "target": function( elem ) {
- var hash = window.location && window.location.hash;
- return hash && hash.slice( 1 ) === elem.id;
- },
-
- "root": function( elem ) {
- return elem === docElem;
- },
-
- "focus": function( elem ) {
- return elem === document.activeElement && (!document.hasFocus || document.hasFocus()) && !!(elem.type || elem.href || ~elem.tabIndex);
- },
-
- // Boolean properties
- "enabled": createDisabledPseudo( false ),
- "disabled": createDisabledPseudo( true ),
-
- "checked": function( elem ) {
- // In CSS3, :checked should return both checked and selected elements
- // http://www.w3.org/TR/2011/REC-css3-selectors-20110929/#checked
- var nodeName = elem.nodeName.toLowerCase();
- return (nodeName === "input" && !!elem.checked) || (nodeName === "option" && !!elem.selected);
- },
-
- "selected": function( elem ) {
- // Accessing this property makes selected-by-default
- // options in Safari work properly
- if ( elem.parentNode ) {
- elem.parentNode.selectedIndex;
- }
-
- return elem.selected === true;
- },
-
- // Contents
- "empty": function( elem ) {
- // http://www.w3.org/TR/selectors/#empty-pseudo
- // :empty is negated by element (1) or content nodes (text: 3; cdata: 4; entity ref: 5),
- // but not by others (comment: 8; processing instruction: 7; etc.)
- // nodeType < 6 works because attributes (2) do not appear as children
- for ( elem = elem.firstChild; elem; elem = elem.nextSibling ) {
- if ( elem.nodeType < 6 ) {
- return false;
- }
- }
- return true;
- },
-
- "parent": function( elem ) {
- return !Expr.pseudos["empty"]( elem );
- },
-
- // Element/input types
- "header": function( elem ) {
- return rheader.test( elem.nodeName );
- },
-
- "input": function( elem ) {
- return rinputs.test( elem.nodeName );
- },
-
- "button": function( elem ) {
- var name = elem.nodeName.toLowerCase();
- return name === "input" && elem.type === "button" || name === "button";
- },
-
- "text": function( elem ) {
- var attr;
- return elem.nodeName.toLowerCase() === "input" &&
- elem.type === "text" &&
-
- // Support: IE<8
- // New HTML5 attribute values (e.g., "search") appear with elem.type === "text"
- ( (attr = elem.getAttribute("type")) == null || attr.toLowerCase() === "text" );
- },
-
- // Position-in-collection
- "first": createPositionalPseudo(function() {
- return [ 0 ];
- }),
-
- "last": createPositionalPseudo(function( matchIndexes, length ) {
- return [ length - 1 ];
- }),
-
- "eq": createPositionalPseudo(function( matchIndexes, length, argument ) {
- return [ argument < 0 ? argument + length : argument ];
- }),
-
- "even": createPositionalPseudo(function( matchIndexes, length ) {
- var i = 0;
- for ( ; i < length; i += 2 ) {
- matchIndexes.push( i );
- }
- return matchIndexes;
- }),
-
- "odd": createPositionalPseudo(function( matchIndexes, length ) {
- var i = 1;
- for ( ; i < length; i += 2 ) {
- matchIndexes.push( i );
- }
- return matchIndexes;
- }),
-
- "lt": createPositionalPseudo(function( matchIndexes, length, argument ) {
- var i = argument < 0 ? argument + length : argument;
- for ( ; --i >= 0; ) {
- matchIndexes.push( i );
- }
- return matchIndexes;
- }),
-
- "gt": createPositionalPseudo(function( matchIndexes, length, argument ) {
- var i = argument < 0 ? argument + length : argument;
- for ( ; ++i < length; ) {
- matchIndexes.push( i );
- }
- return matchIndexes;
- })
- }
-};
-
-Expr.pseudos["nth"] = Expr.pseudos["eq"];
-
-// Add button/input type pseudos
-for ( i in { radio: true, checkbox: true, file: true, password: true, image: true } ) {
- Expr.pseudos[ i ] = createInputPseudo( i );
-}
-for ( i in { submit: true, reset: true } ) {
- Expr.pseudos[ i ] = createButtonPseudo( i );
-}
-
-// Easy API for creating new setFilters
-function setFilters() {}
-setFilters.prototype = Expr.filters = Expr.pseudos;
-Expr.setFilters = new setFilters();
-
-tokenize = Sizzle.tokenize = function( selector, parseOnly ) {
- var matched, match, tokens, type,
- soFar, groups, preFilters,
- cached = tokenCache[ selector + " " ];
-
- if ( cached ) {
- return parseOnly ? 0 : cached.slice( 0 );
- }
-
- soFar = selector;
- groups = [];
- preFilters = Expr.preFilter;
-
- while ( soFar ) {
-
- // Comma and first run
- if ( !matched || (match = rcomma.exec( soFar )) ) {
- if ( match ) {
- // Don't consume trailing commas as valid
- soFar = soFar.slice( match[0].length ) || soFar;
- }
- groups.push( (tokens = []) );
- }
-
- matched = false;
-
- // Combinators
- if ( (match = rcombinators.exec( soFar )) ) {
- matched = match.shift();
- tokens.push({
- value: matched,
- // Cast descendant combinators to space
- type: match[0].replace( rtrim, " " )
- });
- soFar = soFar.slice( matched.length );
- }
-
- // Filters
- for ( type in Expr.filter ) {
- if ( (match = matchExpr[ type ].exec( soFar )) && (!preFilters[ type ] ||
- (match = preFilters[ type ]( match ))) ) {
- matched = match.shift();
- tokens.push({
- value: matched,
- type: type,
- matches: match
- });
- soFar = soFar.slice( matched.length );
- }
- }
-
- if ( !matched ) {
- break;
- }
- }
-
- // Return the length of the invalid excess
- // if we're just parsing
- // Otherwise, throw an error or return tokens
- return parseOnly ?
- soFar.length :
- soFar ?
- Sizzle.error( selector ) :
- // Cache the tokens
- tokenCache( selector, groups ).slice( 0 );
-};
-
-function toSelector( tokens ) {
- var i = 0,
- len = tokens.length,
- selector = "";
- for ( ; i < len; i++ ) {
- selector += tokens[i].value;
- }
- return selector;
-}
-
-function addCombinator( matcher, combinator, base ) {
- var dir = combinator.dir,
- skip = combinator.next,
- key = skip || dir,
- checkNonElements = base && key === "parentNode",
- doneName = done++;
-
- return combinator.first ?
- // Check against closest ancestor/preceding element
- function( elem, context, xml ) {
- while ( (elem = elem[ dir ]) ) {
- if ( elem.nodeType === 1 || checkNonElements ) {
- return matcher( elem, context, xml );
- }
- }
- return false;
- } :
-
- // Check against all ancestor/preceding elements
- function( elem, context, xml ) {
- var oldCache, uniqueCache, outerCache,
- newCache = [ dirruns, doneName ];
-
- // We can't set arbitrary data on XML nodes, so they don't benefit from combinator caching
- if ( xml ) {
- while ( (elem = elem[ dir ]) ) {
- if ( elem.nodeType === 1 || checkNonElements ) {
- if ( matcher( elem, context, xml ) ) {
- return true;
- }
- }
- }
- } else {
- while ( (elem = elem[ dir ]) ) {
- if ( elem.nodeType === 1 || checkNonElements ) {
- outerCache = elem[ expando ] || (elem[ expando ] = {});
-
- // Support: IE <9 only
- // Defend against cloned attroperties (jQuery gh-1709)
- uniqueCache = outerCache[ elem.uniqueID ] || (outerCache[ elem.uniqueID ] = {});
-
- if ( skip && skip === elem.nodeName.toLowerCase() ) {
- elem = elem[ dir ] || elem;
- } else if ( (oldCache = uniqueCache[ key ]) &&
- oldCache[ 0 ] === dirruns && oldCache[ 1 ] === doneName ) {
-
- // Assign to newCache so results back-propagate to previous elements
- return (newCache[ 2 ] = oldCache[ 2 ]);
- } else {
- // Reuse newcache so results back-propagate to previous elements
- uniqueCache[ key ] = newCache;
-
- // A match means we're done; a fail means we have to keep checking
- if ( (newCache[ 2 ] = matcher( elem, context, xml )) ) {
- return true;
- }
- }
- }
- }
- }
- return false;
- };
-}
-
-function elementMatcher( matchers ) {
- return matchers.length > 1 ?
- function( elem, context, xml ) {
- var i = matchers.length;
- while ( i-- ) {
- if ( !matchers[i]( elem, context, xml ) ) {
- return false;
- }
- }
- return true;
- } :
- matchers[0];
-}
-
-function multipleContexts( selector, contexts, results ) {
- var i = 0,
- len = contexts.length;
- for ( ; i < len; i++ ) {
- Sizzle( selector, contexts[i], results );
- }
- return results;
-}
-
-function condense( unmatched, map, filter, context, xml ) {
- var elem,
- newUnmatched = [],
- i = 0,
- len = unmatched.length,
- mapped = map != null;
-
- for ( ; i < len; i++ ) {
- if ( (elem = unmatched[i]) ) {
- if ( !filter || filter( elem, context, xml ) ) {
- newUnmatched.push( elem );
- if ( mapped ) {
- map.push( i );
- }
- }
- }
- }
-
- return newUnmatched;
-}
-
-function setMatcher( preFilter, selector, matcher, postFilter, postFinder, postSelector ) {
- if ( postFilter && !postFilter[ expando ] ) {
- postFilter = setMatcher( postFilter );
- }
- if ( postFinder && !postFinder[ expando ] ) {
- postFinder = setMatcher( postFinder, postSelector );
- }
- return markFunction(function( seed, results, context, xml ) {
- var temp, i, elem,
- preMap = [],
- postMap = [],
- preexisting = results.length,
-
- // Get initial elements from seed or context
- elems = seed || multipleContexts( selector || "*", context.nodeType ? [ context ] : context, [] ),
-
- // Prefilter to get matcher input, preserving a map for seed-results synchronization
- matcherIn = preFilter && ( seed || !selector ) ?
- condense( elems, preMap, preFilter, context, xml ) :
- elems,
-
- matcherOut = matcher ?
- // If we have a postFinder, or filtered seed, or non-seed postFilter or preexisting results,
- postFinder || ( seed ? preFilter : preexisting || postFilter ) ?
-
- // ...intermediate processing is necessary
- [] :
-
- // ...otherwise use results directly
- results :
- matcherIn;
-
- // Find primary matches
- if ( matcher ) {
- matcher( matcherIn, matcherOut, context, xml );
- }
-
- // Apply postFilter
- if ( postFilter ) {
- temp = condense( matcherOut, postMap );
- postFilter( temp, [], context, xml );
-
- // Un-match failing elements by moving them back to matcherIn
- i = temp.length;
- while ( i-- ) {
- if ( (elem = temp[i]) ) {
- matcherOut[ postMap[i] ] = !(matcherIn[ postMap[i] ] = elem);
- }
- }
- }
-
- if ( seed ) {
- if ( postFinder || preFilter ) {
- if ( postFinder ) {
- // Get the final matcherOut by condensing this intermediate into postFinder contexts
- temp = [];
- i = matcherOut.length;
- while ( i-- ) {
- if ( (elem = matcherOut[i]) ) {
- // Restore matcherIn since elem is not yet a final match
- temp.push( (matcherIn[i] = elem) );
- }
- }
- postFinder( null, (matcherOut = []), temp, xml );
- }
-
- // Move matched elements from seed to results to keep them synchronized
- i = matcherOut.length;
- while ( i-- ) {
- if ( (elem = matcherOut[i]) &&
- (temp = postFinder ? indexOf( seed, elem ) : preMap[i]) > -1 ) {
-
- seed[temp] = !(results[temp] = elem);
- }
- }
- }
-
- // Add elements to results, through postFinder if defined
- } else {
- matcherOut = condense(
- matcherOut === results ?
- matcherOut.splice( preexisting, matcherOut.length ) :
- matcherOut
- );
- if ( postFinder ) {
- postFinder( null, results, matcherOut, xml );
- } else {
- push.apply( results, matcherOut );
- }
- }
- });
-}
-
-function matcherFromTokens( tokens ) {
- var checkContext, matcher, j,
- len = tokens.length,
- leadingRelative = Expr.relative[ tokens[0].type ],
- implicitRelative = leadingRelative || Expr.relative[" "],
- i = leadingRelative ? 1 : 0,
-
- // The foundational matcher ensures that elements are reachable from top-level context(s)
- matchContext = addCombinator( function( elem ) {
- return elem === checkContext;
- }, implicitRelative, true ),
- matchAnyContext = addCombinator( function( elem ) {
- return indexOf( checkContext, elem ) > -1;
- }, implicitRelative, true ),
- matchers = [ function( elem, context, xml ) {
- var ret = ( !leadingRelative && ( xml || context !== outermostContext ) ) || (
- (checkContext = context).nodeType ?
- matchContext( elem, context, xml ) :
- matchAnyContext( elem, context, xml ) );
- // Avoid hanging onto element (issue #299)
- checkContext = null;
- return ret;
- } ];
-
- for ( ; i < len; i++ ) {
- if ( (matcher = Expr.relative[ tokens[i].type ]) ) {
- matchers = [ addCombinator(elementMatcher( matchers ), matcher) ];
- } else {
- matcher = Expr.filter[ tokens[i].type ].apply( null, tokens[i].matches );
-
- // Return special upon seeing a positional matcher
- if ( matcher[ expando ] ) {
- // Find the next relative operator (if any) for proper handling
- j = ++i;
- for ( ; j < len; j++ ) {
- if ( Expr.relative[ tokens[j].type ] ) {
- break;
- }
- }
- return setMatcher(
- i > 1 && elementMatcher( matchers ),
- i > 1 && toSelector(
- // If the preceding token was a descendant combinator, insert an implicit any-element `*`
- tokens.slice( 0, i - 1 ).concat({ value: tokens[ i - 2 ].type === " " ? "*" : "" })
- ).replace( rtrim, "$1" ),
- matcher,
- i < j && matcherFromTokens( tokens.slice( i, j ) ),
- j < len && matcherFromTokens( (tokens = tokens.slice( j )) ),
- j < len && toSelector( tokens )
- );
- }
- matchers.push( matcher );
- }
- }
-
- return elementMatcher( matchers );
-}
-
-function matcherFromGroupMatchers( elementMatchers, setMatchers ) {
- var bySet = setMatchers.length > 0,
- byElement = elementMatchers.length > 0,
- superMatcher = function( seed, context, xml, results, outermost ) {
- var elem, j, matcher,
- matchedCount = 0,
- i = "0",
- unmatched = seed && [],
- setMatched = [],
- contextBackup = outermostContext,
- // We must always have either seed elements or outermost context
- elems = seed || byElement && Expr.find["TAG"]( "*", outermost ),
- // Use integer dirruns iff this is the outermost matcher
- dirrunsUnique = (dirruns += contextBackup == null ? 1 : Math.random() || 0.1),
- len = elems.length;
-
- if ( outermost ) {
- outermostContext = context === document || context || outermost;
- }
-
- // Add elements passing elementMatchers directly to results
- // Support: IE<9, Safari
- // Tolerate NodeList properties (IE: "length"; Safari: <number>) matching elements by id
- for ( ; i !== len && (elem = elems[i]) != null; i++ ) {
- if ( byElement && elem ) {
- j = 0;
- if ( !context && elem.ownerDocument !== document ) {
- setDocument( elem );
- xml = !documentIsHTML;
- }
- while ( (matcher = elementMatchers[j++]) ) {
- if ( matcher( elem, context || document, xml) ) {
- results.push( elem );
- break;
- }
- }
- if ( outermost ) {
- dirruns = dirrunsUnique;
- }
- }
-
- // Track unmatched elements for set filters
- if ( bySet ) {
- // They will have gone through all possible matchers
- if ( (elem = !matcher && elem) ) {
- matchedCount--;
- }
-
- // Lengthen the array for every element, matched or not
- if ( seed ) {
- unmatched.push( elem );
- }
- }
- }
-
- // `i` is now the count of elements visited above, and adding it to `matchedCount`
- // makes the latter nonnegative.
- matchedCount += i;
-
- // Apply set filters to unmatched elements
- // NOTE: This can be skipped if there are no unmatched elements (i.e., `matchedCount`
- // equals `i`), unless we didn't visit _any_ elements in the above loop because we have
- // no element matchers and no seed.
- // Incrementing an initially-string "0" `i` allows `i` to remain a string only in that
- // case, which will result in a "00" `matchedCount` that differs from `i` but is also
- // numerically zero.
- if ( bySet && i !== matchedCount ) {
- j = 0;
- while ( (matcher = setMatchers[j++]) ) {
- matcher( unmatched, setMatched, context, xml );
- }
-
- if ( seed ) {
- // Reintegrate element matches to eliminate the need for sorting
- if ( matchedCount > 0 ) {
- while ( i-- ) {
- if ( !(unmatched[i] || setMatched[i]) ) {
- setMatched[i] = pop.call( results );
- }
- }
- }
-
- // Discard index placeholder values to get only actual matches
- setMatched = condense( setMatched );
- }
-
- // Add matches to results
- push.apply( results, setMatched );
-
- // Seedless set matches succeeding multiple successful matchers stipulate sorting
- if ( outermost && !seed && setMatched.length > 0 &&
- ( matchedCount + setMatchers.length ) > 1 ) {
-
- Sizzle.uniqueSort( results );
- }
- }
-
- // Override manipulation of globals by nested matchers
- if ( outermost ) {
- dirruns = dirrunsUnique;
- outermostContext = contextBackup;
- }
-
- return unmatched;
- };
-
- return bySet ?
- markFunction( superMatcher ) :
- superMatcher;
-}
-
-compile = Sizzle.compile = function( selector, match /* Internal Use Only */ ) {
- var i,
- setMatchers = [],
- elementMatchers = [],
- cached = compilerCache[ selector + " " ];
-
- if ( !cached ) {
- // Generate a function of recursive functions that can be used to check each element
- if ( !match ) {
- match = tokenize( selector );
- }
- i = match.length;
- while ( i-- ) {
- cached = matcherFromTokens( match[i] );
- if ( cached[ expando ] ) {
- setMatchers.push( cached );
- } else {
- elementMatchers.push( cached );
- }
- }
-
- // Cache the compiled function
- cached = compilerCache( selector, matcherFromGroupMatchers( elementMatchers, setMatchers ) );
-
- // Save selector and tokenization
- cached.selector = selector;
- }
- return cached;
-};
-
-/**
- * A low-level selection function that works with Sizzle's compiled
- * selector functions
- * @param {String|Function} selector A selector or a pre-compiled
- * selector function built with Sizzle.compile
- * @param {Element} context
- * @param {Array} [results]
- * @param {Array} [seed] A set of elements to match against
- */
-select = Sizzle.select = function( selector, context, results, seed ) {
- var i, tokens, token, type, find,
- compiled = typeof selector === "function" && selector,
- match = !seed && tokenize( (selector = compiled.selector || selector) );
-
- results = results || [];
-
- // Try to minimize operations if there is only one selector in the list and no seed
- // (the latter of which guarantees us context)
- if ( match.length === 1 ) {
-
- // Reduce context if the leading compound selector is an ID
- tokens = match[0] = match[0].slice( 0 );
- if ( tokens.length > 2 && (token = tokens[0]).type === "ID" &&
- context.nodeType === 9 && documentIsHTML && Expr.relative[ tokens[1].type ] ) {
-
- context = ( Expr.find["ID"]( token.matches[0].replace(runescape, funescape), context ) || [] )[0];
- if ( !context ) {
- return results;
-
- // Precompiled matchers will still verify ancestry, so step up a level
- } else if ( compiled ) {
- context = context.parentNode;
- }
-
- selector = selector.slice( tokens.shift().value.length );
- }
-
- // Fetch a seed set for right-to-left matching
- i = matchExpr["needsContext"].test( selector ) ? 0 : tokens.length;
- while ( i-- ) {
- token = tokens[i];
-
- // Abort if we hit a combinator
- if ( Expr.relative[ (type = token.type) ] ) {
- break;
- }
- if ( (find = Expr.find[ type ]) ) {
- // Search, expanding context for leading sibling combinators
- if ( (seed = find(
- token.matches[0].replace( runescape, funescape ),
- rsibling.test( tokens[0].type ) && testContext( context.parentNode ) || context
- )) ) {
-
- // If seed is empty or no tokens remain, we can return early
- tokens.splice( i, 1 );
- selector = seed.length && toSelector( tokens );
- if ( !selector ) {
- push.apply( results, seed );
- return results;
- }
-
- break;
- }
- }
- }
- }
-
- // Compile and execute a filtering function if one is not provided
- // Provide `match` to avoid retokenization if we modified the selector above
- ( compiled || compile( selector, match ) )(
- seed,
- context,
- !documentIsHTML,
- results,
- !context || rsibling.test( selector ) && testContext( context.parentNode ) || context
- );
- return results;
-};
-
-// One-time assignments
-
-// Sort stability
-support.sortStable = expando.split("").sort( sortOrder ).join("") === expando;
-
-// Support: Chrome 14-35+
-// Always assume duplicates if they aren't passed to the comparison function
-support.detectDuplicates = !!hasDuplicate;
-
-// Initialize against the default document
-setDocument();
-
-// Support: Webkit<537.32 - Safari 6.0.3/Chrome 25 (fixed in Chrome 27)
-// Detached nodes confoundingly follow *each other*
-support.sortDetached = assert(function( el ) {
- // Should return 1, but returns 4 (following)
- return el.compareDocumentPosition( document.createElement("fieldset") ) & 1;
-});
-
-// Support: IE<8
-// Prevent attribute/property "interpolation"
-// https://msdn.microsoft.com/en-us/library/ms536429%28VS.85%29.aspx
-if ( !assert(function( el ) {
- el.innerHTML = "<a href='#'></a>";
- return el.firstChild.getAttribute("href") === "#" ;
-}) ) {
- addHandle( "type|href|height|width", function( elem, name, isXML ) {
- if ( !isXML ) {
- return elem.getAttribute( name, name.toLowerCase() === "type" ? 1 : 2 );
- }
- });
-}
-
-// Support: IE<9
-// Use defaultValue in place of getAttribute("value")
-if ( !support.attributes || !assert(function( el ) {
- el.innerHTML = "<input/>";
- el.firstChild.setAttribute( "value", "" );
- return el.firstChild.getAttribute( "value" ) === "";
-}) ) {
- addHandle( "value", function( elem, name, isXML ) {
- if ( !isXML && elem.nodeName.toLowerCase() === "input" ) {
- return elem.defaultValue;
- }
- });
-}
-
-// Support: IE<9
-// Use getAttributeNode to fetch booleans when getAttribute lies
-if ( !assert(function( el ) {
- return el.getAttribute("disabled") == null;
-}) ) {
- addHandle( booleans, function( elem, name, isXML ) {
- var val;
- if ( !isXML ) {
- return elem[ name ] === true ? name.toLowerCase() :
- (val = elem.getAttributeNode( name )) && val.specified ?
- val.value :
- null;
- }
- });
-}
-
-return Sizzle;
-
-})( window );
-
-
-
-jQuery.find = Sizzle;
-jQuery.expr = Sizzle.selectors;
-
-// Deprecated
-jQuery.expr[ ":" ] = jQuery.expr.pseudos;
-jQuery.uniqueSort = jQuery.unique = Sizzle.uniqueSort;
-jQuery.text = Sizzle.getText;
-jQuery.isXMLDoc = Sizzle.isXML;
-jQuery.contains = Sizzle.contains;
-jQuery.escapeSelector = Sizzle.escape;
-
-
-
-
-var dir = function( elem, dir, until ) {
- var matched = [],
- truncate = until !== undefined;
-
- while ( ( elem = elem[ dir ] ) && elem.nodeType !== 9 ) {
- if ( elem.nodeType === 1 ) {
- if ( truncate && jQuery( elem ).is( until ) ) {
- break;
- }
- matched.push( elem );
- }
- }
- return matched;
-};
-
-
-var siblings = function( n, elem ) {
- var matched = [];
-
- for ( ; n; n = n.nextSibling ) {
- if ( n.nodeType === 1 && n !== elem ) {
- matched.push( n );
- }
- }
-
- return matched;
-};
-
-
-var rneedsContext = jQuery.expr.match.needsContext;
-
-
-
-function nodeName( elem, name ) {
-
- return elem.nodeName && elem.nodeName.toLowerCase() === name.toLowerCase();
-
-};
-var rsingleTag = ( /^<([a-z][^\/\0>:\x20\t\r\n\f]*)[\x20\t\r\n\f]*\/?>(?:<\/\1>|)$/i );
-
-
-
-var risSimple = /^.[^:#\[\.,]*$/;
-
-// Implement the identical functionality for filter and not
-function winnow( elements, qualifier, not ) {
- if ( jQuery.isFunction( qualifier ) ) {
- return jQuery.grep( elements, function( elem, i ) {
- return !!qualifier.call( elem, i, elem ) !== not;
- } );
- }
-
- // Single element
- if ( qualifier.nodeType ) {
- return jQuery.grep( elements, function( elem ) {
- return ( elem === qualifier ) !== not;
- } );
- }
-
- // Arraylike of elements (jQuery, arguments, Array)
- if ( typeof qualifier !== "string" ) {
- return jQuery.grep( elements, function( elem ) {
- return ( indexOf.call( qualifier, elem ) > -1 ) !== not;
- } );
- }
-
- // Simple selector that can be filtered directly, removing non-Elements
- if ( risSimple.test( qualifier ) ) {
- return jQuery.filter( qualifier, elements, not );
- }
-
- // Complex selector, compare the two sets, removing non-Elements
- qualifier = jQuery.filter( qualifier, elements );
- return jQuery.grep( elements, function( elem ) {
- return ( indexOf.call( qualifier, elem ) > -1 ) !== not && elem.nodeType === 1;
- } );
-}
-
-jQuery.filter = function( expr, elems, not ) {
- var elem = elems[ 0 ];
-
- if ( not ) {
- expr = ":not(" + expr + ")";
- }
-
- if ( elems.length === 1 && elem.nodeType === 1 ) {
- return jQuery.find.matchesSelector( elem, expr ) ? [ elem ] : [];
- }
-
- return jQuery.find.matches( expr, jQuery.grep( elems, function( elem ) {
- return elem.nodeType === 1;
- } ) );
-};
-
-jQuery.fn.extend( {
- find: function( selector ) {
- var i, ret,
- len = this.length,
- self = this;
-
- if ( typeof selector !== "string" ) {
- return this.pushStack( jQuery( selector ).filter( function() {
- for ( i = 0; i < len; i++ ) {
- if ( jQuery.contains( self[ i ], this ) ) {
- return true;
- }
- }
- } ) );
- }
-
- ret = this.pushStack( [] );
-
- for ( i = 0; i < len; i++ ) {
- jQuery.find( selector, self[ i ], ret );
- }
-
- return len > 1 ? jQuery.uniqueSort( ret ) : ret;
- },
- filter: function( selector ) {
- return this.pushStack( winnow( this, selector || [], false ) );
- },
- not: function( selector ) {
- return this.pushStack( winnow( this, selector || [], true ) );
- },
- is: function( selector ) {
- return !!winnow(
- this,
-
- // If this is a positional/relative selector, check membership in the returned set
- // so $("p:first").is("p:last") won't return true for a doc with two "p".
- typeof selector === "string" && rneedsContext.test( selector ) ?
- jQuery( selector ) :
- selector || [],
- false
- ).length;
- }
-} );
-
-
-// Initialize a jQuery object
-
-
-// A central reference to the root jQuery(document)
-var rootjQuery,
-
- // A simple way to check for HTML strings
- // Prioritize #id over <tag> to avoid XSS via location.hash (#9521)
- // Strict HTML recognition (#11290: must start with <)
- // Shortcut simple #id case for speed
- rquickExpr = /^(?:\s*(<[\w\W]+>)[^>]*|#([\w-]+))$/,
-
- init = jQuery.fn.init = function( selector, context, root ) {
- var match, elem;
-
- // HANDLE: $(""), $(null), $(undefined), $(false)
- if ( !selector ) {
- return this;
- }
-
- // Method init() accepts an alternate rootjQuery
- // so migrate can support jQuery.sub (gh-2101)
- root = root || rootjQuery;
-
- // Handle HTML strings
- if ( typeof selector === "string" ) {
- if ( selector[ 0 ] === "<" &&
- selector[ selector.length - 1 ] === ">" &&
- selector.length >= 3 ) {
-
- // Assume that strings that start and end with <> are HTML and skip the regex check
- match = [ null, selector, null ];
-
- } else {
- match = rquickExpr.exec( selector );
- }
-
- // Match html or make sure no context is specified for #id
- if ( match && ( match[ 1 ] || !context ) ) {
-
- // HANDLE: $(html) -> $(array)
- if ( match[ 1 ] ) {
- context = context instanceof jQuery ? context[ 0 ] : context;
-
- // Option to run scripts is true for back-compat
- // Intentionally let the error be thrown if parseHTML is not present
- jQuery.merge( this, jQuery.parseHTML(
- match[ 1 ],
- context && context.nodeType ? context.ownerDocument || context : document,
- true
- ) );
-
- // HANDLE: $(html, props)
- if ( rsingleTag.test( match[ 1 ] ) && jQuery.isPlainObject( context ) ) {
- for ( match in context ) {
-
- // Properties of context are called as methods if possible
- if ( jQuery.isFunction( this[ match ] ) ) {
- this[ match ]( context[ match ] );
-
- // ...and otherwise set as attributes
- } else {
- this.attr( match, context[ match ] );
- }
- }
- }
-
- return this;
-
- // HANDLE: $(#id)
- } else {
- elem = document.getElementById( match[ 2 ] );
-
- if ( elem ) {
-
- // Inject the element directly into the jQuery object
- this[ 0 ] = elem;
- this.length = 1;
- }
- return this;
- }
-
- // HANDLE: $(expr, $(...))
- } else if ( !context || context.jquery ) {
- return ( context || root ).find( selector );
-
- // HANDLE: $(expr, context)
- // (which is just equivalent to: $(context).find(expr)
- } else {
- return this.constructor( context ).find( selector );
- }
-
- // HANDLE: $(DOMElement)
- } else if ( selector.nodeType ) {
- this[ 0 ] = selector;
- this.length = 1;
- return this;
-
- // HANDLE: $(function)
- // Shortcut for document ready
- } else if ( jQuery.isFunction( selector ) ) {
- return root.ready !== undefined ?
- root.ready( selector ) :
-
- // Execute immediately if ready is not present
- selector( jQuery );
- }
-
- return jQuery.makeArray( selector, this );
- };
-
-// Give the init function the jQuery prototype for later instantiation
-init.prototype = jQuery.fn;
-
-// Initialize central reference
-rootjQuery = jQuery( document );
-
-
-var rparentsprev = /^(?:parents|prev(?:Until|All))/,
-
- // Methods guaranteed to produce a unique set when starting from a unique set
- guaranteedUnique = {
- children: true,
- contents: true,
- next: true,
- prev: true
- };
-
-jQuery.fn.extend( {
- has: function( target ) {
- var targets = jQuery( target, this ),
- l = targets.length;
-
- return this.filter( function() {
- var i = 0;
- for ( ; i < l; i++ ) {
- if ( jQuery.contains( this, targets[ i ] ) ) {
- return true;
- }
- }
- } );
- },
-
- closest: function( selectors, context ) {
- var cur,
- i = 0,
- l = this.length,
- matched = [],
- targets = typeof selectors !== "string" && jQuery( selectors );
-
- // Positional selectors never match, since there's no _selection_ context
- if ( !rneedsContext.test( selectors ) ) {
- for ( ; i < l; i++ ) {
- for ( cur = this[ i ]; cur && cur !== context; cur = cur.parentNode ) {
-
- // Always skip document fragments
- if ( cur.nodeType < 11 && ( targets ?
- targets.index( cur ) > -1 :
-
- // Don't pass non-elements to Sizzle
- cur.nodeType === 1 &&
- jQuery.find.matchesSelector( cur, selectors ) ) ) {
-
- matched.push( cur );
- break;
- }
- }
- }
- }
-
- return this.pushStack( matched.length > 1 ? jQuery.uniqueSort( matched ) : matched );
- },
-
- // Determine the position of an element within the set
- index: function( elem ) {
-
- // No argument, return index in parent
- if ( !elem ) {
- return ( this[ 0 ] && this[ 0 ].parentNode ) ? this.first().prevAll().length : -1;
- }
-
- // Index in selector
- if ( typeof elem === "string" ) {
- return indexOf.call( jQuery( elem ), this[ 0 ] );
- }
-
- // Locate the position of the desired element
- return indexOf.call( this,
-
- // If it receives a jQuery object, the first element is used
- elem.jquery ? elem[ 0 ] : elem
- );
- },
-
- add: function( selector, context ) {
- return this.pushStack(
- jQuery.uniqueSort(
- jQuery.merge( this.get(), jQuery( selector, context ) )
- )
- );
- },
-
- addBack: function( selector ) {
- return this.add( selector == null ?
- this.prevObject : this.prevObject.filter( selector )
- );
- }
-} );
-
-function sibling( cur, dir ) {
- while ( ( cur = cur[ dir ] ) && cur.nodeType !== 1 ) {}
- return cur;
-}
-
-jQuery.each( {
- parent: function( elem ) {
- var parent = elem.parentNode;
- return parent && parent.nodeType !== 11 ? parent : null;
- },
- parents: function( elem ) {
- return dir( elem, "parentNode" );
- },
- parentsUntil: function( elem, i, until ) {
- return dir( elem, "parentNode", until );
- },
- next: function( elem ) {
- return sibling( elem, "nextSibling" );
- },
- prev: function( elem ) {
- return sibling( elem, "previousSibling" );
- },
- nextAll: function( elem ) {
- return dir( elem, "nextSibling" );
- },
- prevAll: function( elem ) {
- return dir( elem, "previousSibling" );
- },
- nextUntil: function( elem, i, until ) {
- return dir( elem, "nextSibling", until );
- },
- prevUntil: function( elem, i, until ) {
- return dir( elem, "previousSibling", until );
- },
- siblings: function( elem ) {
- return siblings( ( elem.parentNode || {} ).firstChild, elem );
- },
- children: function( elem ) {
- return siblings( elem.firstChild );
- },
- contents: function( elem ) {
- if ( nodeName( elem, "iframe" ) ) {
- return elem.contentDocument;
- }
-
- // Support: IE 9 - 11 only, iOS 7 only, Android Browser <=4.3 only
- // Treat the template element as a regular one in browsers that
- // don't support it.
- if ( nodeName( elem, "template" ) ) {
- elem = elem.content || elem;
- }
-
- return jQuery.merge( [], elem.childNodes );
- }
-}, function( name, fn ) {
- jQuery.fn[ name ] = function( until, selector ) {
- var matched = jQuery.map( this, fn, until );
-
- if ( name.slice( -5 ) !== "Until" ) {
- selector = until;
- }
-
- if ( selector && typeof selector === "string" ) {
- matched = jQuery.filter( selector, matched );
- }
-
- if ( this.length > 1 ) {
-
- // Remove duplicates
- if ( !guaranteedUnique[ name ] ) {
- jQuery.uniqueSort( matched );
- }
-
- // Reverse order for parents* and prev-derivatives
- if ( rparentsprev.test( name ) ) {
- matched.reverse();
- }
- }
-
- return this.pushStack( matched );
- };
-} );
-var rnothtmlwhite = ( /[^\x20\t\r\n\f]+/g );
-
-
-
-// Convert String-formatted options into Object-formatted ones
-function createOptions( options ) {
- var object = {};
- jQuery.each( options.match( rnothtmlwhite ) || [], function( _, flag ) {
- object[ flag ] = true;
- } );
- return object;
-}
-
-/*
- * Create a callback list using the following parameters:
- *
- * options: an optional list of space-separated options that will change how
- * the callback list behaves or a more traditional option object
- *
- * By default a callback list will act like an event callback list and can be
- * "fired" multiple times.
- *
- * Possible options:
- *
- * once: will ensure the callback list can only be fired once (like a Deferred)
- *
- * memory: will keep track of previous values and will call any callback added
- * after the list has been fired right away with the latest "memorized"
- * values (like a Deferred)
- *
- * unique: will ensure a callback can only be added once (no duplicate in the list)
- *
- * stopOnFalse: interrupt callings when a callback returns false
- *
- */
-jQuery.Callbacks = function( options ) {
-
- // Convert options from String-formatted to Object-formatted if needed
- // (we check in cache first)
- options = typeof options === "string" ?
- createOptions( options ) :
- jQuery.extend( {}, options );
-
- var // Flag to know if list is currently firing
- firing,
-
- // Last fire value for non-forgettable lists
- memory,
-
- // Flag to know if list was already fired
- fired,
-
- // Flag to prevent firing
- locked,
-
- // Actual callback list
- list = [],
-
- // Queue of execution data for repeatable lists
- queue = [],
-
- // Index of currently firing callback (modified by add/remove as needed)
- firingIndex = -1,
-
- // Fire callbacks
- fire = function() {
-
- // Enforce single-firing
- locked = locked || options.once;
-
- // Execute callbacks for all pending executions,
- // respecting firingIndex overrides and runtime changes
- fired = firing = true;
- for ( ; queue.length; firingIndex = -1 ) {
- memory = queue.shift();
- while ( ++firingIndex < list.length ) {
-
- // Run callback and check for early termination
- if ( list[ firingIndex ].apply( memory[ 0 ], memory[ 1 ] ) === false &&
- options.stopOnFalse ) {
-
- // Jump to end and forget the data so .add doesn't re-fire
- firingIndex = list.length;
- memory = false;
- }
- }
- }
-
- // Forget the data if we're done with it
- if ( !options.memory ) {
- memory = false;
- }
-
- firing = false;
-
- // Clean up if we're done firing for good
- if ( locked ) {
-
- // Keep an empty list if we have data for future add calls
- if ( memory ) {
- list = [];
-
- // Otherwise, this object is spent
- } else {
- list = "";
- }
- }
- },
-
- // Actual Callbacks object
- self = {
-
- // Add a callback or a collection of callbacks to the list
- add: function() {
- if ( list ) {
-
- // If we have memory from a past run, we should fire after adding
- if ( memory && !firing ) {
- firingIndex = list.length - 1;
- queue.push( memory );
- }
-
- ( function add( args ) {
- jQuery.each( args, function( _, arg ) {
- if ( jQuery.isFunction( arg ) ) {
- if ( !options.unique || !self.has( arg ) ) {
- list.push( arg );
- }
- } else if ( arg && arg.length && jQuery.type( arg ) !== "string" ) {
-
- // Inspect recursively
- add( arg );
- }
- } );
- } )( arguments );
-
- if ( memory && !firing ) {
- fire();
- }
- }
- return this;
- },
-
- // Remove a callback from the list
- remove: function() {
- jQuery.each( arguments, function( _, arg ) {
- var index;
- while ( ( index = jQuery.inArray( arg, list, index ) ) > -1 ) {
- list.splice( index, 1 );
-
- // Handle firing indexes
- if ( index <= firingIndex ) {
- firingIndex--;
- }
- }
- } );
- return this;
- },
-
- // Check if a given callback is in the list.
- // If no argument is given, return whether or not list has callbacks attached.
- has: function( fn ) {
- return fn ?
- jQuery.inArray( fn, list ) > -1 :
- list.length > 0;
- },
-
- // Remove all callbacks from the list
- empty: function() {
- if ( list ) {
- list = [];
- }
- return this;
- },
-
- // Disable .fire and .add
- // Abort any current/pending executions
- // Clear all callbacks and values
- disable: function() {
- locked = queue = [];
- list = memory = "";
- return this;
- },
- disabled: function() {
- return !list;
- },
-
- // Disable .fire
- // Also disable .add unless we have memory (since it would have no effect)
- // Abort any pending executions
- lock: function() {
- locked = queue = [];
- if ( !memory && !firing ) {
- list = memory = "";
- }
- return this;
- },
- locked: function() {
- return !!locked;
- },
-
- // Call all callbacks with the given context and arguments
- fireWith: function( context, args ) {
- if ( !locked ) {
- args = args || [];
- args = [ context, args.slice ? args.slice() : args ];
- queue.push( args );
- if ( !firing ) {
- fire();
- }
- }
- return this;
- },
-
- // Call all the callbacks with the given arguments
- fire: function() {
- self.fireWith( this, arguments );
- return this;
- },
-
- // To know if the callbacks have already been called at least once
- fired: function() {
- return !!fired;
- }
- };
-
- return self;
-};
-
-
-function Identity( v ) {
- return v;
-}
-function Thrower( ex ) {
- throw ex;
-}
-
-function adoptValue( value, resolve, reject, noValue ) {
- var method;
-
- try {
-
- // Check for promise aspect first to privilege synchronous behavior
- if ( value && jQuery.isFunction( ( method = value.promise ) ) ) {
- method.call( value ).done( resolve ).fail( reject );
-
- // Other thenables
- } else if ( value && jQuery.isFunction( ( method = value.then ) ) ) {
- method.call( value, resolve, reject );
-
- // Other non-thenables
- } else {
-
- // Control `resolve` arguments by letting Array#slice cast boolean `noValue` to integer:
- // * false: [ value ].slice( 0 ) => resolve( value )
- // * true: [ value ].slice( 1 ) => resolve()
- resolve.apply( undefined, [ value ].slice( noValue ) );
- }
-
- // For Promises/A+, convert exceptions into rejections
- // Since jQuery.when doesn't unwrap thenables, we can skip the extra checks appearing in
- // Deferred#then to conditionally suppress rejection.
- } catch ( value ) {
-
- // Support: Android 4.0 only
- // Strict mode functions invoked without .call/.apply get global-object context
- reject.apply( undefined, [ value ] );
- }
-}
-
-jQuery.extend( {
-
- Deferred: function( func ) {
- var tuples = [
-
- // action, add listener, callbacks,
- // ... .then handlers, argument index, [final state]
- [ "notify", "progress", jQuery.Callbacks( "memory" ),
- jQuery.Callbacks( "memory" ), 2 ],
- [ "resolve", "done", jQuery.Callbacks( "once memory" ),
- jQuery.Callbacks( "once memory" ), 0, "resolved" ],
- [ "reject", "fail", jQuery.Callbacks( "once memory" ),
- jQuery.Callbacks( "once memory" ), 1, "rejected" ]
- ],
- state = "pending",
- promise = {
- state: function() {
- return state;
- },
- always: function() {
- deferred.done( arguments ).fail( arguments );
- return this;
- },
- "catch": function( fn ) {
- return promise.then( null, fn );
- },
-
- // Keep pipe for back-compat
- pipe: function( /* fnDone, fnFail, fnProgress */ ) {
- var fns = arguments;
-
- return jQuery.Deferred( function( newDefer ) {
- jQuery.each( tuples, function( i, tuple ) {
-
- // Map tuples (progress, done, fail) to arguments (done, fail, progress)
- var fn = jQuery.isFunction( fns[ tuple[ 4 ] ] ) && fns[ tuple[ 4 ] ];
-
- // deferred.progress(function() { bind to newDefer or newDefer.notify })
- // deferred.done(function() { bind to newDefer or newDefer.resolve })
- // deferred.fail(function() { bind to newDefer or newDefer.reject })
- deferred[ tuple[ 1 ] ]( function() {
- var returned = fn && fn.apply( this, arguments );
- if ( returned && jQuery.isFunction( returned.promise ) ) {
- returned.promise()
- .progress( newDefer.notify )
- .done( newDefer.resolve )
- .fail( newDefer.reject );
- } else {
- newDefer[ tuple[ 0 ] + "With" ](
- this,
- fn ? [ returned ] : arguments
- );
- }
- } );
- } );
- fns = null;
- } ).promise();
- },
- then: function( onFulfilled, onRejected, onProgress ) {
- var maxDepth = 0;
- function resolve( depth, deferred, handler, special ) {
- return function() {
- var that = this,
- args = arguments,
- mightThrow = function() {
- var returned, then;
-
- // Support: Promises/A+ section 2.3.3.3.3
- // https://promisesaplus.com/#point-59
- // Ignore double-resolution attempts
- if ( depth < maxDepth ) {
- return;
- }
-
- returned = handler.apply( that, args );
-
- // Support: Promises/A+ section 2.3.1
- // https://promisesaplus.com/#point-48
- if ( returned === deferred.promise() ) {
- throw new TypeError( "Thenable self-resolution" );
- }
-
- // Support: Promises/A+ sections 2.3.3.1, 3.5
- // https://promisesaplus.com/#point-54
- // https://promisesaplus.com/#point-75
- // Retrieve `then` only once
- then = returned &&
-
- // Support: Promises/A+ section 2.3.4
- // https://promisesaplus.com/#point-64
- // Only check objects and functions for thenability
- ( typeof returned === "object" ||
- typeof returned === "function" ) &&
- returned.then;
-
- // Handle a returned thenable
- if ( jQuery.isFunction( then ) ) {
-
- // Special processors (notify) just wait for resolution
- if ( special ) {
- then.call(
- returned,
- resolve( maxDepth, deferred, Identity, special ),
- resolve( maxDepth, deferred, Thrower, special )
- );
-
- // Normal processors (resolve) also hook into progress
- } else {
-
- // ...and disregard older resolution values
- maxDepth++;
-
- then.call(
- returned,
- resolve( maxDepth, deferred, Identity, special ),
- resolve( maxDepth, deferred, Thrower, special ),
- resolve( maxDepth, deferred, Identity,
- deferred.notifyWith )
- );
- }
-
- // Handle all other returned values
- } else {
-
- // Only substitute handlers pass on context
- // and multiple values (non-spec behavior)
- if ( handler !== Identity ) {
- that = undefined;
- args = [ returned ];
- }
-
- // Process the value(s)
- // Default process is resolve
- ( special || deferred.resolveWith )( that, args );
- }
- },
-
- // Only normal processors (resolve) catch and reject exceptions
- process = special ?
- mightThrow :
- function() {
- try {
- mightThrow();
- } catch ( e ) {
-
- if ( jQuery.Deferred.exceptionHook ) {
- jQuery.Deferred.exceptionHook( e,
- process.stackTrace );
- }
-
- // Support: Promises/A+ section 2.3.3.3.4.1
- // https://promisesaplus.com/#point-61
- // Ignore post-resolution exceptions
- if ( depth + 1 >= maxDepth ) {
-
- // Only substitute handlers pass on context
- // and multiple values (non-spec behavior)
- if ( handler !== Thrower ) {
- that = undefined;
- args = [ e ];
- }
-
- deferred.rejectWith( that, args );
- }
- }
- };
-
- // Support: Promises/A+ section 2.3.3.3.1
- // https://promisesaplus.com/#point-57
- // Re-resolve promises immediately to dodge false rejection from
- // subsequent errors
- if ( depth ) {
- process();
- } else {
-
- // Call an optional hook to record the stack, in case of exception
- // since it's otherwise lost when execution goes async
- if ( jQuery.Deferred.getStackHook ) {
- process.stackTrace = jQuery.Deferred.getStackHook();
- }
- window.setTimeout( process );
- }
- };
- }
-
- return jQuery.Deferred( function( newDefer ) {
-
- // progress_handlers.add( ... )
- tuples[ 0 ][ 3 ].add(
- resolve(
- 0,
- newDefer,
- jQuery.isFunction( onProgress ) ?
- onProgress :
- Identity,
- newDefer.notifyWith
- )
- );
-
- // fulfilled_handlers.add( ... )
- tuples[ 1 ][ 3 ].add(
- resolve(
- 0,
- newDefer,
- jQuery.isFunction( onFulfilled ) ?
- onFulfilled :
- Identity
- )
- );
-
- // rejected_handlers.add( ... )
- tuples[ 2 ][ 3 ].add(
- resolve(
- 0,
- newDefer,
- jQuery.isFunction( onRejected ) ?
- onRejected :
- Thrower
- )
- );
- } ).promise();
- },
-
- // Get a promise for this deferred
- // If obj is provided, the promise aspect is added to the object
- promise: function( obj ) {
- return obj != null ? jQuery.extend( obj, promise ) : promise;
- }
- },
- deferred = {};
-
- // Add list-specific methods
- jQuery.each( tuples, function( i, tuple ) {
- var list = tuple[ 2 ],
- stateString = tuple[ 5 ];
-
- // promise.progress = list.add
- // promise.done = list.add
- // promise.fail = list.add
- promise[ tuple[ 1 ] ] = list.add;
-
- // Handle state
- if ( stateString ) {
- list.add(
- function() {
-
- // state = "resolved" (i.e., fulfilled)
- // state = "rejected"
- state = stateString;
- },
-
- // rejected_callbacks.disable
- // fulfilled_callbacks.disable
- tuples[ 3 - i ][ 2 ].disable,
-
- // progress_callbacks.lock
- tuples[ 0 ][ 2 ].lock
- );
- }
-
- // progress_handlers.fire
- // fulfilled_handlers.fire
- // rejected_handlers.fire
- list.add( tuple[ 3 ].fire );
-
- // deferred.notify = function() { deferred.notifyWith(...) }
- // deferred.resolve = function() { deferred.resolveWith(...) }
- // deferred.reject = function() { deferred.rejectWith(...) }
- deferred[ tuple[ 0 ] ] = function() {
- deferred[ tuple[ 0 ] + "With" ]( this === deferred ? undefined : this, arguments );
- return this;
- };
-
- // deferred.notifyWith = list.fireWith
- // deferred.resolveWith = list.fireWith
- // deferred.rejectWith = list.fireWith
- deferred[ tuple[ 0 ] + "With" ] = list.fireWith;
- } );
-
- // Make the deferred a promise
- promise.promise( deferred );
-
- // Call given func if any
- if ( func ) {
- func.call( deferred, deferred );
- }
-
- // All done!
- return deferred;
- },
-
- // Deferred helper
- when: function( singleValue ) {
- var
-
- // count of uncompleted subordinates
- remaining = arguments.length,
-
- // count of unprocessed arguments
- i = remaining,
-
- // subordinate fulfillment data
- resolveContexts = Array( i ),
- resolveValues = slice.call( arguments ),
-
- // the master Deferred
- master = jQuery.Deferred(),
-
- // subordinate callback factory
- updateFunc = function( i ) {
- return function( value ) {
- resolveContexts[ i ] = this;
- resolveValues[ i ] = arguments.length > 1 ? slice.call( arguments ) : value;
- if ( !( --remaining ) ) {
- master.resolveWith( resolveContexts, resolveValues );
- }
- };
- };
-
- // Single- and empty arguments are adopted like Promise.resolve
- if ( remaining <= 1 ) {
- adoptValue( singleValue, master.done( updateFunc( i ) ).resolve, master.reject,
- !remaining );
-
- // Use .then() to unwrap secondary thenables (cf. gh-3000)
- if ( master.state() === "pending" ||
- jQuery.isFunction( resolveValues[ i ] && resolveValues[ i ].then ) ) {
-
- return master.then();
- }
- }
-
- // Multiple arguments are aggregated like Promise.all array elements
- while ( i-- ) {
- adoptValue( resolveValues[ i ], updateFunc( i ), master.reject );
- }
-
- return master.promise();
- }
-} );
-
-
-// These usually indicate a programmer mistake during development,
-// warn about them ASAP rather than swallowing them by default.
-var rerrorNames = /^(Eval|Internal|Range|Reference|Syntax|Type|URI)Error$/;
-
-jQuery.Deferred.exceptionHook = function( error, stack ) {
-
- // Support: IE 8 - 9 only
- // Console exists when dev tools are open, which can happen at any time
- if ( window.console && window.console.warn && error && rerrorNames.test( error.name ) ) {
- window.console.warn( "jQuery.Deferred exception: " + error.message, error.stack, stack );
- }
-};
-
-
-
-
-jQuery.readyException = function( error ) {
- window.setTimeout( function() {
- throw error;
- } );
-};
-
-
-
-
-// The deferred used on DOM ready
-var readyList = jQuery.Deferred();
-
-jQuery.fn.ready = function( fn ) {
-
- readyList
- .then( fn )
-
- // Wrap jQuery.readyException in a function so that the lookup
- // happens at the time of error handling instead of callback
- // registration.
- .catch( function( error ) {
- jQuery.readyException( error );
- } );
-
- return this;
-};
-
-jQuery.extend( {
-
- // Is the DOM ready to be used? Set to true once it occurs.
- isReady: false,
-
- // A counter to track how many items to wait for before
- // the ready event fires. See #6781
- readyWait: 1,
-
- // Handle when the DOM is ready
- ready: function( wait ) {
-
- // Abort if there are pending holds or we're already ready
- if ( wait === true ? --jQuery.readyWait : jQuery.isReady ) {
- return;
- }
-
- // Remember that the DOM is ready
- jQuery.isReady = true;
-
- // If a normal DOM Ready event fired, decrement, and wait if need be
- if ( wait !== true && --jQuery.readyWait > 0 ) {
- return;
- }
-
- // If there are functions bound, to execute
- readyList.resolveWith( document, [ jQuery ] );
- }
-} );
-
-jQuery.ready.then = readyList.then;
-
-// The ready event handler and self cleanup method
-function completed() {
- document.removeEventListener( "DOMContentLoaded", completed );
- window.removeEventListener( "load", completed );
- jQuery.ready();
-}
-
-// Catch cases where $(document).ready() is called
-// after the browser event has already occurred.
-// Support: IE <=9 - 10 only
-// Older IE sometimes signals "interactive" too soon
-if ( document.readyState === "complete" ||
- ( document.readyState !== "loading" && !document.documentElement.doScroll ) ) {
-
- // Handle it asynchronously to allow scripts the opportunity to delay ready
- window.setTimeout( jQuery.ready );
-
-} else {
-
- // Use the handy event callback
- document.addEventListener( "DOMContentLoaded", completed );
-
- // A fallback to window.onload, that will always work
- window.addEventListener( "load", completed );
-}
-
-
-
-
-// Multifunctional method to get and set values of a collection
-// The value/s can optionally be executed if it's a function
-var access = function( elems, fn, key, value, chainable, emptyGet, raw ) {
- var i = 0,
- len = elems.length,
- bulk = key == null;
-
- // Sets many values
- if ( jQuery.type( key ) === "object" ) {
- chainable = true;
- for ( i in key ) {
- access( elems, fn, i, key[ i ], true, emptyGet, raw );
- }
-
- // Sets one value
- } else if ( value !== undefined ) {
- chainable = true;
-
- if ( !jQuery.isFunction( value ) ) {
- raw = true;
- }
-
- if ( bulk ) {
-
- // Bulk operations run against the entire set
- if ( raw ) {
- fn.call( elems, value );
- fn = null;
-
- // ...except when executing function values
- } else {
- bulk = fn;
- fn = function( elem, key, value ) {
- return bulk.call( jQuery( elem ), value );
- };
- }
- }
-
- if ( fn ) {
- for ( ; i < len; i++ ) {
- fn(
- elems[ i ], key, raw ?
- value :
- value.call( elems[ i ], i, fn( elems[ i ], key ) )
- );
- }
- }
- }
-
- if ( chainable ) {
- return elems;
- }
-
- // Gets
- if ( bulk ) {
- return fn.call( elems );
- }
-
- return len ? fn( elems[ 0 ], key ) : emptyGet;
-};
-var acceptData = function( owner ) {
-
- // Accepts only:
- // - Node
- // - Node.ELEMENT_NODE
- // - Node.DOCUMENT_NODE
- // - Object
- // - Any
- return owner.nodeType === 1 || owner.nodeType === 9 || !( +owner.nodeType );
-};
-
-
-
-
-function Data() {
- this.expando = jQuery.expando + Data.uid++;
-}
-
-Data.uid = 1;
-
-Data.prototype = {
-
- cache: function( owner ) {
-
- // Check if the owner object already has a cache
- var value = owner[ this.expando ];
-
- // If not, create one
- if ( !value ) {
- value = {};
-
- // We can accept data for non-element nodes in modern browsers,
- // but we should not, see #8335.
- // Always return an empty object.
- if ( acceptData( owner ) ) {
-
- // If it is a node unlikely to be stringify-ed or looped over
- // use plain assignment
- if ( owner.nodeType ) {
- owner[ this.expando ] = value;
-
- // Otherwise secure it in a non-enumerable property
- // configurable must be true to allow the property to be
- // deleted when data is removed
- } else {
- Object.defineProperty( owner, this.expando, {
- value: value,
- configurable: true
- } );
- }
- }
- }
-
- return value;
- },
- set: function( owner, data, value ) {
- var prop,
- cache = this.cache( owner );
-
- // Handle: [ owner, key, value ] args
- // Always use camelCase key (gh-2257)
- if ( typeof data === "string" ) {
- cache[ jQuery.camelCase( data ) ] = value;
-
- // Handle: [ owner, { properties } ] args
- } else {
-
- // Copy the properties one-by-one to the cache object
- for ( prop in data ) {
- cache[ jQuery.camelCase( prop ) ] = data[ prop ];
- }
- }
- return cache;
- },
- get: function( owner, key ) {
- return key === undefined ?
- this.cache( owner ) :
-
- // Always use camelCase key (gh-2257)
- owner[ this.expando ] && owner[ this.expando ][ jQuery.camelCase( key ) ];
- },
- access: function( owner, key, value ) {
-
- // In cases where either:
- //
- // 1. No key was specified
- // 2. A string key was specified, but no value provided
- //
- // Take the "read" path and allow the get method to determine
- // which value to return, respectively either:
- //
- // 1. The entire cache object
- // 2. The data stored at the key
- //
- if ( key === undefined ||
- ( ( key && typeof key === "string" ) && value === undefined ) ) {
-
- return this.get( owner, key );
- }
-
- // When the key is not a string, or both a key and value
- // are specified, set or extend (existing objects) with either:
- //
- // 1. An object of properties
- // 2. A key and value
- //
- this.set( owner, key, value );
-
- // Since the "set" path can have two possible entry points
- // return the expected data based on which path was taken[*]
- return value !== undefined ? value : key;
- },
- remove: function( owner, key ) {
- var i,
- cache = owner[ this.expando ];
-
- if ( cache === undefined ) {
- return;
- }
-
- if ( key !== undefined ) {
-
- // Support array or space separated string of keys
- if ( Array.isArray( key ) ) {
-
- // If key is an array of keys...
- // We always set camelCase keys, so remove that.
- key = key.map( jQuery.camelCase );
- } else {
- key = jQuery.camelCase( key );
-
- // If a key with the spaces exists, use it.
- // Otherwise, create an array by matching non-whitespace
- key = key in cache ?
- [ key ] :
- ( key.match( rnothtmlwhite ) || [] );
- }
-
- i = key.length;
-
- while ( i-- ) {
- delete cache[ key[ i ] ];
- }
- }
-
- // Remove the expando if there's no more data
- if ( key === undefined || jQuery.isEmptyObject( cache ) ) {
-
- // Support: Chrome <=35 - 45
- // Webkit & Blink performance suffers when deleting properties
- // from DOM nodes, so set to undefined instead
- // https://bugs.chromium.org/p/chromium/issues/detail?id=378607 (bug restricted)
- if ( owner.nodeType ) {
- owner[ this.expando ] = undefined;
- } else {
- delete owner[ this.expando ];
- }
- }
- },
- hasData: function( owner ) {
- var cache = owner[ this.expando ];
- return cache !== undefined && !jQuery.isEmptyObject( cache );
- }
-};
-var dataPriv = new Data();
-
-var dataUser = new Data();
-
-
-
-// Implementation Summary
-//
-// 1. Enforce API surface and semantic compatibility with 1.9.x branch
-// 2. Improve the module's maintainability by reducing the storage
-// paths to a single mechanism.
-// 3. Use the same single mechanism to support "private" and "user" data.
-// 4. _Never_ expose "private" data to user code (TODO: Drop _data, _removeData)
-// 5. Avoid exposing implementation details on user objects (eg. expando properties)
-// 6. Provide a clear path for implementation upgrade to WeakMap in 2014
-
-var rbrace = /^(?:\{[\w\W]*\}|\[[\w\W]*\])$/,
- rmultiDash = /[A-Z]/g;
-
-function getData( data ) {
- if ( data === "true" ) {
- return true;
- }
-
- if ( data === "false" ) {
- return false;
- }
-
- if ( data === "null" ) {
- return null;
- }
-
- // Only convert to a number if it doesn't change the string
- if ( data === +data + "" ) {
- return +data;
- }
-
- if ( rbrace.test( data ) ) {
- return JSON.parse( data );
- }
-
- return data;
-}
-
-function dataAttr( elem, key, data ) {
- var name;
-
- // If nothing was found internally, try to fetch any
- // data from the HTML5 data-* attribute
- if ( data === undefined && elem.nodeType === 1 ) {
- name = "data-" + key.replace( rmultiDash, "-$&" ).toLowerCase();
- data = elem.getAttribute( name );
-
- if ( typeof data === "string" ) {
- try {
- data = getData( data );
- } catch ( e ) {}
-
- // Make sure we set the data so it isn't changed later
- dataUser.set( elem, key, data );
- } else {
- data = undefined;
- }
- }
- return data;
-}
-
-jQuery.extend( {
- hasData: function( elem ) {
- return dataUser.hasData( elem ) || dataPriv.hasData( elem );
- },
-
- data: function( elem, name, data ) {
- return dataUser.access( elem, name, data );
- },
-
- removeData: function( elem, name ) {
- dataUser.remove( elem, name );
- },
-
- // TODO: Now that all calls to _data and _removeData have been replaced
- // with direct calls to dataPriv methods, these can be deprecated.
- _data: function( elem, name, data ) {
- return dataPriv.access( elem, name, data );
- },
-
- _removeData: function( elem, name ) {
- dataPriv.remove( elem, name );
- }
-} );
-
-jQuery.fn.extend( {
- data: function( key, value ) {
- var i, name, data,
- elem = this[ 0 ],
- attrs = elem && elem.attributes;
-
- // Gets all values
- if ( key === undefined ) {
- if ( this.length ) {
- data = dataUser.get( elem );
-
- if ( elem.nodeType === 1 && !dataPriv.get( elem, "hasDataAttrs" ) ) {
- i = attrs.length;
- while ( i-- ) {
-
- // Support: IE 11 only
- // The attrs elements can be null (#14894)
- if ( attrs[ i ] ) {
- name = attrs[ i ].name;
- if ( name.indexOf( "data-" ) === 0 ) {
- name = jQuery.camelCase( name.slice( 5 ) );
- dataAttr( elem, name, data[ name ] );
- }
- }
- }
- dataPriv.set( elem, "hasDataAttrs", true );
- }
- }
-
- return data;
- }
-
- // Sets multiple values
- if ( typeof key === "object" ) {
- return this.each( function() {
- dataUser.set( this, key );
- } );
- }
-
- return access( this, function( value ) {
- var data;
-
- // The calling jQuery object (element matches) is not empty
- // (and therefore has an element appears at this[ 0 ]) and the
- // `value` parameter was not undefined. An empty jQuery object
- // will result in `undefined` for elem = this[ 0 ] which will
- // throw an exception if an attempt to read a data cache is made.
- if ( elem && value === undefined ) {
-
- // Attempt to get data from the cache
- // The key will always be camelCased in Data
- data = dataUser.get( elem, key );
- if ( data !== undefined ) {
- return data;
- }
-
- // Attempt to "discover" the data in
- // HTML5 custom data-* attrs
- data = dataAttr( elem, key );
- if ( data !== undefined ) {
- return data;
- }
-
- // We tried really hard, but the data doesn't exist.
- return;
- }
-
- // Set the data...
- this.each( function() {
-
- // We always store the camelCased key
- dataUser.set( this, key, value );
- } );
- }, null, value, arguments.length > 1, null, true );
- },
-
- removeData: function( key ) {
- return this.each( function() {
- dataUser.remove( this, key );
- } );
- }
-} );
-
-
-jQuery.extend( {
- queue: function( elem, type, data ) {
- var queue;
-
- if ( elem ) {
- type = ( type || "fx" ) + "queue";
- queue = dataPriv.get( elem, type );
-
- // Speed up dequeue by getting out quickly if this is just a lookup
- if ( data ) {
- if ( !queue || Array.isArray( data ) ) {
- queue = dataPriv.access( elem, type, jQuery.makeArray( data ) );
- } else {
- queue.push( data );
- }
- }
- return queue || [];
- }
- },
-
- dequeue: function( elem, type ) {
- type = type || "fx";
-
- var queue = jQuery.queue( elem, type ),
- startLength = queue.length,
- fn = queue.shift(),
- hooks = jQuery._queueHooks( elem, type ),
- next = function() {
- jQuery.dequeue( elem, type );
- };
-
- // If the fx queue is dequeued, always remove the progress sentinel
- if ( fn === "inprogress" ) {
- fn = queue.shift();
- startLength--;
- }
-
- if ( fn ) {
-
- // Add a progress sentinel to prevent the fx queue from being
- // automatically dequeued
- if ( type === "fx" ) {
- queue.unshift( "inprogress" );
- }
-
- // Clear up the last queue stop function
- delete hooks.stop;
- fn.call( elem, next, hooks );
- }
-
- if ( !startLength && hooks ) {
- hooks.empty.fire();
- }
- },
-
- // Not public - generate a queueHooks object, or return the current one
- _queueHooks: function( elem, type ) {
- var key = type + "queueHooks";
- return dataPriv.get( elem, key ) || dataPriv.access( elem, key, {
- empty: jQuery.Callbacks( "once memory" ).add( function() {
- dataPriv.remove( elem, [ type + "queue", key ] );
- } )
- } );
- }
-} );
-
-jQuery.fn.extend( {
- queue: function( type, data ) {
- var setter = 2;
-
- if ( typeof type !== "string" ) {
- data = type;
- type = "fx";
- setter--;
- }
-
- if ( arguments.length < setter ) {
- return jQuery.queue( this[ 0 ], type );
- }
-
- return data === undefined ?
- this :
- this.each( function() {
- var queue = jQuery.queue( this, type, data );
-
- // Ensure a hooks for this queue
- jQuery._queueHooks( this, type );
-
- if ( type === "fx" && queue[ 0 ] !== "inprogress" ) {
- jQuery.dequeue( this, type );
- }
- } );
- },
- dequeue: function( type ) {
- return this.each( function() {
- jQuery.dequeue( this, type );
- } );
- },
- clearQueue: function( type ) {
- return this.queue( type || "fx", [] );
- },
-
- // Get a promise resolved when queues of a certain type
- // are emptied (fx is the type by default)
- promise: function( type, obj ) {
- var tmp,
- count = 1,
- defer = jQuery.Deferred(),
- elements = this,
- i = this.length,
- resolve = function() {
- if ( !( --count ) ) {
- defer.resolveWith( elements, [ elements ] );
- }
- };
-
- if ( typeof type !== "string" ) {
- obj = type;
- type = undefined;
- }
- type = type || "fx";
-
- while ( i-- ) {
- tmp = dataPriv.get( elements[ i ], type + "queueHooks" );
- if ( tmp && tmp.empty ) {
- count++;
- tmp.empty.add( resolve );
- }
- }
- resolve();
- return defer.promise( obj );
- }
-} );
-var pnum = ( /[+-]?(?:\d*\.|)\d+(?:[eE][+-]?\d+|)/ ).source;
-
-var rcssNum = new RegExp( "^(?:([+-])=|)(" + pnum + ")([a-z%]*)$", "i" );
-
-
-var cssExpand = [ "Top", "Right", "Bottom", "Left" ];
-
-var isHiddenWithinTree = function( elem, el ) {
-
- // isHiddenWithinTree might be called from jQuery#filter function;
- // in that case, element will be second argument
- elem = el || elem;
-
- // Inline style trumps all
- return elem.style.display === "none" ||
- elem.style.display === "" &&
-
- // Otherwise, check computed style
- // Support: Firefox <=43 - 45
- // Disconnected elements can have computed display: none, so first confirm that elem is
- // in the document.
- jQuery.contains( elem.ownerDocument, elem ) &&
-
- jQuery.css( elem, "display" ) === "none";
- };
-
-var swap = function( elem, options, callback, args ) {
- var ret, name,
- old = {};
-
- // Remember the old values, and insert the new ones
- for ( name in options ) {
- old[ name ] = elem.style[ name ];
- elem.style[ name ] = options[ name ];
- }
-
- ret = callback.apply( elem, args || [] );
-
- // Revert the old values
- for ( name in options ) {
- elem.style[ name ] = old[ name ];
- }
-
- return ret;
-};
-
-
-
-
-function adjustCSS( elem, prop, valueParts, tween ) {
- var adjusted,
- scale = 1,
- maxIterations = 20,
- currentValue = tween ?
- function() {
- return tween.cur();
- } :
- function() {
- return jQuery.css( elem, prop, "" );
- },
- initial = currentValue(),
- unit = valueParts && valueParts[ 3 ] || ( jQuery.cssNumber[ prop ] ? "" : "px" ),
-
- // Starting value computation is required for potential unit mismatches
- initialInUnit = ( jQuery.cssNumber[ prop ] || unit !== "px" && +initial ) &&
- rcssNum.exec( jQuery.css( elem, prop ) );
-
- if ( initialInUnit && initialInUnit[ 3 ] !== unit ) {
-
- // Trust units reported by jQuery.css
- unit = unit || initialInUnit[ 3 ];
-
- // Make sure we update the tween properties later on
- valueParts = valueParts || [];
-
- // Iteratively approximate from a nonzero starting point
- initialInUnit = +initial || 1;
-
- do {
-
- // If previous iteration zeroed out, double until we get *something*.
- // Use string for doubling so we don't accidentally see scale as unchanged below
- scale = scale || ".5";
-
- // Adjust and apply
- initialInUnit = initialInUnit / scale;
- jQuery.style( elem, prop, initialInUnit + unit );
-
- // Update scale, tolerating zero or NaN from tween.cur()
- // Break the loop if scale is unchanged or perfect, or if we've just had enough.
- } while (
- scale !== ( scale = currentValue() / initial ) && scale !== 1 && --maxIterations
- );
- }
-
- if ( valueParts ) {
- initialInUnit = +initialInUnit || +initial || 0;
-
- // Apply relative offset (+=/-=) if specified
- adjusted = valueParts[ 1 ] ?
- initialInUnit + ( valueParts[ 1 ] + 1 ) * valueParts[ 2 ] :
- +valueParts[ 2 ];
- if ( tween ) {
- tween.unit = unit;
- tween.start = initialInUnit;
- tween.end = adjusted;
- }
- }
- return adjusted;
-}
-
-
-var defaultDisplayMap = {};
-
-function getDefaultDisplay( elem ) {
- var temp,
- doc = elem.ownerDocument,
- nodeName = elem.nodeName,
- display = defaultDisplayMap[ nodeName ];
-
- if ( display ) {
- return display;
- }
-
- temp = doc.body.appendChild( doc.createElement( nodeName ) );
- display = jQuery.css( temp, "display" );
-
- temp.parentNode.removeChild( temp );
-
- if ( display === "none" ) {
- display = "block";
- }
- defaultDisplayMap[ nodeName ] = display;
-
- return display;
-}
-
-function showHide( elements, show ) {
- var display, elem,
- values = [],
- index = 0,
- length = elements.length;
-
- // Determine new display value for elements that need to change
- for ( ; index < length; index++ ) {
- elem = elements[ index ];
- if ( !elem.style ) {
- continue;
- }
-
- display = elem.style.display;
- if ( show ) {
-
- // Since we force visibility upon cascade-hidden elements, an immediate (and slow)
- // check is required in this first loop unless we have a nonempty display value (either
- // inline or about-to-be-restored)
- if ( display === "none" ) {
- values[ index ] = dataPriv.get( elem, "display" ) || null;
- if ( !values[ index ] ) {
- elem.style.display = "";
- }
- }
- if ( elem.style.display === "" && isHiddenWithinTree( elem ) ) {
- values[ index ] = getDefaultDisplay( elem );
- }
- } else {
- if ( display !== "none" ) {
- values[ index ] = "none";
-
- // Remember what we're overwriting
- dataPriv.set( elem, "display", display );
- }
- }
- }
-
- // Set the display of the elements in a second loop to avoid constant reflow
- for ( index = 0; index < length; index++ ) {
- if ( values[ index ] != null ) {
- elements[ index ].style.display = values[ index ];
- }
- }
-
- return elements;
-}
-
-jQuery.fn.extend( {
- show: function() {
- return showHide( this, true );
- },
- hide: function() {
- return showHide( this );
- },
- toggle: function( state ) {
- if ( typeof state === "boolean" ) {
- return state ? this.show() : this.hide();
- }
-
- return this.each( function() {
- if ( isHiddenWithinTree( this ) ) {
- jQuery( this ).show();
- } else {
- jQuery( this ).hide();
- }
- } );
- }
-} );
-var rcheckableType = ( /^(?:checkbox|radio)$/i );
-
-var rtagName = ( /<([a-z][^\/\0>\x20\t\r\n\f]+)/i );
-
-var rscriptType = ( /^$|\/(?:java|ecma)script/i );
-
-
-
-// We have to close these tags to support XHTML (#13200)
-var wrapMap = {
-
- // Support: IE <=9 only
- option: [ 1, "<select multiple='multiple'>", "</select>" ],
-
- // XHTML parsers do not magically insert elements in the
- // same way that tag soup parsers do. So we cannot shorten
- // this by omitting <tbody> or other required elements.
- thead: [ 1, "<table>", "</table>" ],
- col: [ 2, "<table><colgroup>", "</colgroup></table>" ],
- tr: [ 2, "<table><tbody>", "</tbody></table>" ],
- td: [ 3, "<table><tbody><tr>", "</tr></tbody></table>" ],
-
- _default: [ 0, "", "" ]
-};
-
-// Support: IE <=9 only
-wrapMap.optgroup = wrapMap.option;
-
-wrapMap.tbody = wrapMap.tfoot = wrapMap.colgroup = wrapMap.caption = wrapMap.thead;
-wrapMap.th = wrapMap.td;
-
-
-function getAll( context, tag ) {
-
- // Support: IE <=9 - 11 only
- // Use typeof to avoid zero-argument method invocation on host objects (#15151)
- var ret;
-
- if ( typeof context.getElementsByTagName !== "undefined" ) {
- ret = context.getElementsByTagName( tag || "*" );
-
- } else if ( typeof context.querySelectorAll !== "undefined" ) {
- ret = context.querySelectorAll( tag || "*" );
-
- } else {
- ret = [];
- }
-
- if ( tag === undefined || tag && nodeName( context, tag ) ) {
- return jQuery.merge( [ context ], ret );
- }
-
- return ret;
-}
-
-
-// Mark scripts as having already been evaluated
-function setGlobalEval( elems, refElements ) {
- var i = 0,
- l = elems.length;
-
- for ( ; i < l; i++ ) {
- dataPriv.set(
- elems[ i ],
- "globalEval",
- !refElements || dataPriv.get( refElements[ i ], "globalEval" )
- );
- }
-}
-
-
-var rhtml = /<|&#?\w+;/;
-
-function buildFragment( elems, context, scripts, selection, ignored ) {
- var elem, tmp, tag, wrap, contains, j,
- fragment = context.createDocumentFragment(),
- nodes = [],
- i = 0,
- l = elems.length;
-
- for ( ; i < l; i++ ) {
- elem = elems[ i ];
-
- if ( elem || elem === 0 ) {
-
- // Add nodes directly
- if ( jQuery.type( elem ) === "object" ) {
-
- // Support: Android <=4.0 only, PhantomJS 1 only
- // push.apply(_, arraylike) throws on ancient WebKit
- jQuery.merge( nodes, elem.nodeType ? [ elem ] : elem );
-
- // Convert non-html into a text node
- } else if ( !rhtml.test( elem ) ) {
- nodes.push( context.createTextNode( elem ) );
-
- // Convert html into DOM nodes
- } else {
- tmp = tmp || fragment.appendChild( context.createElement( "div" ) );
-
- // Deserialize a standard representation
- tag = ( rtagName.exec( elem ) || [ "", "" ] )[ 1 ].toLowerCase();
- wrap = wrapMap[ tag ] || wrapMap._default;
- tmp.innerHTML = wrap[ 1 ] + jQuery.htmlPrefilter( elem ) + wrap[ 2 ];
-
- // Descend through wrappers to the right content
- j = wrap[ 0 ];
- while ( j-- ) {
- tmp = tmp.lastChild;
- }
-
- // Support: Android <=4.0 only, PhantomJS 1 only
- // push.apply(_, arraylike) throws on ancient WebKit
- jQuery.merge( nodes, tmp.childNodes );
-
- // Remember the top-level container
- tmp = fragment.firstChild;
-
- // Ensure the created nodes are orphaned (#12392)
- tmp.textContent = "";
- }
- }
- }
-
- // Remove wrapper from fragment
- fragment.textContent = "";
-
- i = 0;
- while ( ( elem = nodes[ i++ ] ) ) {
-
- // Skip elements already in the context collection (trac-4087)
- if ( selection && jQuery.inArray( elem, selection ) > -1 ) {
- if ( ignored ) {
- ignored.push( elem );
- }
- continue;
- }
-
- contains = jQuery.contains( elem.ownerDocument, elem );
-
- // Append to fragment
- tmp = getAll( fragment.appendChild( elem ), "script" );
-
- // Preserve script evaluation history
- if ( contains ) {
- setGlobalEval( tmp );
- }
-
- // Capture executables
- if ( scripts ) {
- j = 0;
- while ( ( elem = tmp[ j++ ] ) ) {
- if ( rscriptType.test( elem.type || "" ) ) {
- scripts.push( elem );
- }
- }
- }
- }
-
- return fragment;
-}
-
-
-( function() {
- var fragment = document.createDocumentFragment(),
- div = fragment.appendChild( document.createElement( "div" ) ),
- input = document.createElement( "input" );
-
- // Support: Android 4.0 - 4.3 only
- // Check state lost if the name is set (#11217)
- // Support: Windows Web Apps (WWA)
- // `name` and `type` must use .setAttribute for WWA (#14901)
- input.setAttribute( "type", "radio" );
- input.setAttribute( "checked", "checked" );
- input.setAttribute( "name", "t" );
-
- div.appendChild( input );
-
- // Support: Android <=4.1 only
- // Older WebKit doesn't clone checked state correctly in fragments
- support.checkClone = div.cloneNode( true ).cloneNode( true ).lastChild.checked;
-
- // Support: IE <=11 only
- // Make sure textarea (and checkbox) defaultValue is properly cloned
- div.innerHTML = "<textarea>x</textarea>";
- support.noCloneChecked = !!div.cloneNode( true ).lastChild.defaultValue;
-} )();
-var documentElement = document.documentElement;
-
-
-
-var
- rkeyEvent = /^key/,
- rmouseEvent = /^(?:mouse|pointer|contextmenu|drag|drop)|click/,
- rtypenamespace = /^([^.]*)(?:\.(.+)|)/;
-
-function returnTrue() {
- return true;
-}
-
-function returnFalse() {
- return false;
-}
-
-// Support: IE <=9 only
-// See #13393 for more info
-function safeActiveElement() {
- try {
- return document.activeElement;
- } catch ( err ) { }
-}
-
-function on( elem, types, selector, data, fn, one ) {
- var origFn, type;
-
- // Types can be a map of types/handlers
- if ( typeof types === "object" ) {
-
- // ( types-Object, selector, data )
- if ( typeof selector !== "string" ) {
-
- // ( types-Object, data )
- data = data || selector;
- selector = undefined;
- }
- for ( type in types ) {
- on( elem, type, selector, data, types[ type ], one );
- }
- return elem;
- }
-
- if ( data == null && fn == null ) {
-
- // ( types, fn )
- fn = selector;
- data = selector = undefined;
- } else if ( fn == null ) {
- if ( typeof selector === "string" ) {
-
- // ( types, selector, fn )
- fn = data;
- data = undefined;
- } else {
-
- // ( types, data, fn )
- fn = data;
- data = selector;
- selector = undefined;
- }
- }
- if ( fn === false ) {
- fn = returnFalse;
- } else if ( !fn ) {
- return elem;
- }
-
- if ( one === 1 ) {
- origFn = fn;
- fn = function( event ) {
-
- // Can use an empty set, since event contains the info
- jQuery().off( event );
- return origFn.apply( this, arguments );
- };
-
- // Use same guid so caller can remove using origFn
- fn.guid = origFn.guid || ( origFn.guid = jQuery.guid++ );
- }
- return elem.each( function() {
- jQuery.event.add( this, types, fn, data, selector );
- } );
-}
-
-/*
- * Helper functions for managing events -- not part of the public interface.
- * Props to Dean Edwards' addEvent library for many of the ideas.
- */
-jQuery.event = {
-
- global: {},
-
- add: function( elem, types, handler, data, selector ) {
-
- var handleObjIn, eventHandle, tmp,
- events, t, handleObj,
- special, handlers, type, namespaces, origType,
- elemData = dataPriv.get( elem );
-
- // Don't attach events to noData or text/comment nodes (but allow plain objects)
- if ( !elemData ) {
- return;
- }
-
- // Caller can pass in an object of custom data in lieu of the handler
- if ( handler.handler ) {
- handleObjIn = handler;
- handler = handleObjIn.handler;
- selector = handleObjIn.selector;
- }
-
- // Ensure that invalid selectors throw exceptions at attach time
- // Evaluate against documentElement in case elem is a non-element node (e.g., document)
- if ( selector ) {
- jQuery.find.matchesSelector( documentElement, selector );
- }
-
- // Make sure that the handler has a unique ID, used to find/remove it later
- if ( !handler.guid ) {
- handler.guid = jQuery.guid++;
- }
-
- // Init the element's event structure and main handler, if this is the first
- if ( !( events = elemData.events ) ) {
- events = elemData.events = {};
- }
- if ( !( eventHandle = elemData.handle ) ) {
- eventHandle = elemData.handle = function( e ) {
-
- // Discard the second event of a jQuery.event.trigger() and
- // when an event is called after a page has unloaded
- return typeof jQuery !== "undefined" && jQuery.event.triggered !== e.type ?
- jQuery.event.dispatch.apply( elem, arguments ) : undefined;
- };
- }
-
- // Handle multiple events separated by a space
- types = ( types || "" ).match( rnothtmlwhite ) || [ "" ];
- t = types.length;
- while ( t-- ) {
- tmp = rtypenamespace.exec( types[ t ] ) || [];
- type = origType = tmp[ 1 ];
- namespaces = ( tmp[ 2 ] || "" ).split( "." ).sort();
-
- // There *must* be a type, no attaching namespace-only handlers
- if ( !type ) {
- continue;
- }
-
- // If event changes its type, use the special event handlers for the changed type
- special = jQuery.event.special[ type ] || {};
-
- // If selector defined, determine special event api type, otherwise given type
- type = ( selector ? special.delegateType : special.bindType ) || type;
-
- // Update special based on newly reset type
- special = jQuery.event.special[ type ] || {};
-
- // handleObj is passed to all event handlers
- handleObj = jQuery.extend( {
- type: type,
- origType: origType,
- data: data,
- handler: handler,
- guid: handler.guid,
- selector: selector,
- needsContext: selector && jQuery.expr.match.needsContext.test( selector ),
- namespace: namespaces.join( "." )
- }, handleObjIn );
-
- // Init the event handler queue if we're the first
- if ( !( handlers = events[ type ] ) ) {
- handlers = events[ type ] = [];
- handlers.delegateCount = 0;
-
- // Only use addEventListener if the special events handler returns false
- if ( !special.setup ||
- special.setup.call( elem, data, namespaces, eventHandle ) === false ) {
-
- if ( elem.addEventListener ) {
- elem.addEventListener( type, eventHandle );
- }
- }
- }
-
- if ( special.add ) {
- special.add.call( elem, handleObj );
-
- if ( !handleObj.handler.guid ) {
- handleObj.handler.guid = handler.guid;
- }
- }
-
- // Add to the element's handler list, delegates in front
- if ( selector ) {
- handlers.splice( handlers.delegateCount++, 0, handleObj );
- } else {
- handlers.push( handleObj );
- }
-
- // Keep track of which events have ever been used, for event optimization
- jQuery.event.global[ type ] = true;
- }
-
- },
-
- // Detach an event or set of events from an element
- remove: function( elem, types, handler, selector, mappedTypes ) {
-
- var j, origCount, tmp,
- events, t, handleObj,
- special, handlers, type, namespaces, origType,
- elemData = dataPriv.hasData( elem ) && dataPriv.get( elem );
-
- if ( !elemData || !( events = elemData.events ) ) {
- return;
- }
-
- // Once for each type.namespace in types; type may be omitted
- types = ( types || "" ).match( rnothtmlwhite ) || [ "" ];
- t = types.length;
- while ( t-- ) {
- tmp = rtypenamespace.exec( types[ t ] ) || [];
- type = origType = tmp[ 1 ];
- namespaces = ( tmp[ 2 ] || "" ).split( "." ).sort();
-
- // Unbind all events (on this namespace, if provided) for the element
- if ( !type ) {
- for ( type in events ) {
- jQuery.event.remove( elem, type + types[ t ], handler, selector, true );
- }
- continue;
- }
-
- special = jQuery.event.special[ type ] || {};
- type = ( selector ? special.delegateType : special.bindType ) || type;
- handlers = events[ type ] || [];
- tmp = tmp[ 2 ] &&
- new RegExp( "(^|\\.)" + namespaces.join( "\\.(?:.*\\.|)" ) + "(\\.|$)" );
-
- // Remove matching events
- origCount = j = handlers.length;
- while ( j-- ) {
- handleObj = handlers[ j ];
-
- if ( ( mappedTypes || origType === handleObj.origType ) &&
- ( !handler || handler.guid === handleObj.guid ) &&
- ( !tmp || tmp.test( handleObj.namespace ) ) &&
- ( !selector || selector === handleObj.selector ||
- selector === "**" && handleObj.selector ) ) {
- handlers.splice( j, 1 );
-
- if ( handleObj.selector ) {
- handlers.delegateCount--;
- }
- if ( special.remove ) {
- special.remove.call( elem, handleObj );
- }
- }
- }
-
- // Remove generic event handler if we removed something and no more handlers exist
- // (avoids potential for endless recursion during removal of special event handlers)
- if ( origCount && !handlers.length ) {
- if ( !special.teardown ||
- special.teardown.call( elem, namespaces, elemData.handle ) === false ) {
-
- jQuery.removeEvent( elem, type, elemData.handle );
- }
-
- delete events[ type ];
- }
- }
-
- // Remove data and the expando if it's no longer used
- if ( jQuery.isEmptyObject( events ) ) {
- dataPriv.remove( elem, "handle events" );
- }
- },
-
- dispatch: function( nativeEvent ) {
-
- // Make a writable jQuery.Event from the native event object
- var event = jQuery.event.fix( nativeEvent );
-
- var i, j, ret, matched, handleObj, handlerQueue,
- args = new Array( arguments.length ),
- handlers = ( dataPriv.get( this, "events" ) || {} )[ event.type ] || [],
- special = jQuery.event.special[ event.type ] || {};
-
- // Use the fix-ed jQuery.Event rather than the (read-only) native event
- args[ 0 ] = event;
-
- for ( i = 1; i < arguments.length; i++ ) {
- args[ i ] = arguments[ i ];
- }
-
- event.delegateTarget = this;
-
- // Call the preDispatch hook for the mapped type, and let it bail if desired
- if ( special.preDispatch && special.preDispatch.call( this, event ) === false ) {
- return;
- }
-
- // Determine handlers
- handlerQueue = jQuery.event.handlers.call( this, event, handlers );
-
- // Run delegates first; they may want to stop propagation beneath us
- i = 0;
- while ( ( matched = handlerQueue[ i++ ] ) && !event.isPropagationStopped() ) {
- event.currentTarget = matched.elem;
-
- j = 0;
- while ( ( handleObj = matched.handlers[ j++ ] ) &&
- !event.isImmediatePropagationStopped() ) {
-
- // Triggered event must either 1) have no namespace, or 2) have namespace(s)
- // a subset or equal to those in the bound event (both can have no namespace).
- if ( !event.rnamespace || event.rnamespace.test( handleObj.namespace ) ) {
-
- event.handleObj = handleObj;
- event.data = handleObj.data;
-
- ret = ( ( jQuery.event.special[ handleObj.origType ] || {} ).handle ||
- handleObj.handler ).apply( matched.elem, args );
-
- if ( ret !== undefined ) {
- if ( ( event.result = ret ) === false ) {
- event.preventDefault();
- event.stopPropagation();
- }
- }
- }
- }
- }
-
- // Call the postDispatch hook for the mapped type
- if ( special.postDispatch ) {
- special.postDispatch.call( this, event );
- }
-
- return event.result;
- },
-
- handlers: function( event, handlers ) {
- var i, handleObj, sel, matchedHandlers, matchedSelectors,
- handlerQueue = [],
- delegateCount = handlers.delegateCount,
- cur = event.target;
-
- // Find delegate handlers
- if ( delegateCount &&
-
- // Support: IE <=9
- // Black-hole SVG <use> instance trees (trac-13180)
- cur.nodeType &&
-
- // Support: Firefox <=42
- // Suppress spec-violating clicks indicating a non-primary pointer button (trac-3861)
- // https://www.w3.org/TR/DOM-Level-3-Events/#event-type-click
- // Support: IE 11 only
- // ...but not arrow key "clicks" of radio inputs, which can have `button` -1 (gh-2343)
- !( event.type === "click" && event.button >= 1 ) ) {
-
- for ( ; cur !== this; cur = cur.parentNode || this ) {
-
- // Don't check non-elements (#13208)
- // Don't process clicks on disabled elements (#6911, #8165, #11382, #11764)
- if ( cur.nodeType === 1 && !( event.type === "click" && cur.disabled === true ) ) {
- matchedHandlers = [];
- matchedSelectors = {};
- for ( i = 0; i < delegateCount; i++ ) {
- handleObj = handlers[ i ];
-
- // Don't conflict with Object.prototype properties (#13203)
- sel = handleObj.selector + " ";
-
- if ( matchedSelectors[ sel ] === undefined ) {
- matchedSelectors[ sel ] = handleObj.needsContext ?
- jQuery( sel, this ).index( cur ) > -1 :
- jQuery.find( sel, this, null, [ cur ] ).length;
- }
- if ( matchedSelectors[ sel ] ) {
- matchedHandlers.push( handleObj );
- }
- }
- if ( matchedHandlers.length ) {
- handlerQueue.push( { elem: cur, handlers: matchedHandlers } );
- }
- }
- }
- }
-
- // Add the remaining (directly-bound) handlers
- cur = this;
- if ( delegateCount < handlers.length ) {
- handlerQueue.push( { elem: cur, handlers: handlers.slice( delegateCount ) } );
- }
-
- return handlerQueue;
- },
-
- addProp: function( name, hook ) {
- Object.defineProperty( jQuery.Event.prototype, name, {
- enumerable: true,
- configurable: true,
-
- get: jQuery.isFunction( hook ) ?
- function() {
- if ( this.originalEvent ) {
- return hook( this.originalEvent );
- }
- } :
- function() {
- if ( this.originalEvent ) {
- return this.originalEvent[ name ];
- }
- },
-
- set: function( value ) {
- Object.defineProperty( this, name, {
- enumerable: true,
- configurable: true,
- writable: true,
- value: value
- } );
- }
- } );
- },
-
- fix: function( originalEvent ) {
- return originalEvent[ jQuery.expando ] ?
- originalEvent :
- new jQuery.Event( originalEvent );
- },
-
- special: {
- load: {
-
- // Prevent triggered image.load events from bubbling to window.load
- noBubble: true
- },
- focus: {
-
- // Fire native event if possible so blur/focus sequence is correct
- trigger: function() {
- if ( this !== safeActiveElement() && this.focus ) {
- this.focus();
- return false;
- }
- },
- delegateType: "focusin"
- },
- blur: {
- trigger: function() {
- if ( this === safeActiveElement() && this.blur ) {
- this.blur();
- return false;
- }
- },
- delegateType: "focusout"
- },
- click: {
-
- // For checkbox, fire native event so checked state will be right
- trigger: function() {
- if ( this.type === "checkbox" && this.click && nodeName( this, "input" ) ) {
- this.click();
- return false;
- }
- },
-
- // For cross-browser consistency, don't fire native .click() on links
- _default: function( event ) {
- return nodeName( event.target, "a" );
- }
- },
-
- beforeunload: {
- postDispatch: function( event ) {
-
- // Support: Firefox 20+
- // Firefox doesn't alert if the returnValue field is not set.
- if ( event.result !== undefined && event.originalEvent ) {
- event.originalEvent.returnValue = event.result;
- }
- }
- }
- }
-};
-
-jQuery.removeEvent = function( elem, type, handle ) {
-
- // This "if" is needed for plain objects
- if ( elem.removeEventListener ) {
- elem.removeEventListener( type, handle );
- }
-};
-
-jQuery.Event = function( src, props ) {
-
- // Allow instantiation without the 'new' keyword
- if ( !( this instanceof jQuery.Event ) ) {
- return new jQuery.Event( src, props );
- }
-
- // Event object
- if ( src && src.type ) {
- this.originalEvent = src;
- this.type = src.type;
-
- // Events bubbling up the document may have been marked as prevented
- // by a handler lower down the tree; reflect the correct value.
- this.isDefaultPrevented = src.defaultPrevented ||
- src.defaultPrevented === undefined &&
-
- // Support: Android <=2.3 only
- src.returnValue === false ?
- returnTrue :
- returnFalse;
-
- // Create target properties
- // Support: Safari <=6 - 7 only
- // Target should not be a text node (#504, #13143)
- this.target = ( src.target && src.target.nodeType === 3 ) ?
- src.target.parentNode :
- src.target;
-
- this.currentTarget = src.currentTarget;
- this.relatedTarget = src.relatedTarget;
-
- // Event type
- } else {
- this.type = src;
- }
-
- // Put explicitly provided properties onto the event object
- if ( props ) {
- jQuery.extend( this, props );
- }
-
- // Create a timestamp if incoming event doesn't have one
- this.timeStamp = src && src.timeStamp || jQuery.now();
-
- // Mark it as fixed
- this[ jQuery.expando ] = true;
-};
-
-// jQuery.Event is based on DOM3 Events as specified by the ECMAScript Language Binding
-// https://www.w3.org/TR/2003/WD-DOM-Level-3-Events-20030331/ecma-script-binding.html
-jQuery.Event.prototype = {
- constructor: jQuery.Event,
- isDefaultPrevented: returnFalse,
- isPropagationStopped: returnFalse,
- isImmediatePropagationStopped: returnFalse,
- isSimulated: false,
-
- preventDefault: function() {
- var e = this.originalEvent;
-
- this.isDefaultPrevented = returnTrue;
-
- if ( e && !this.isSimulated ) {
- e.preventDefault();
- }
- },
- stopPropagation: function() {
- var e = this.originalEvent;
-
- this.isPropagationStopped = returnTrue;
-
- if ( e && !this.isSimulated ) {
- e.stopPropagation();
- }
- },
- stopImmediatePropagation: function() {
- var e = this.originalEvent;
-
- this.isImmediatePropagationStopped = returnTrue;
-
- if ( e && !this.isSimulated ) {
- e.stopImmediatePropagation();
- }
-
- this.stopPropagation();
- }
-};
-
-// Includes all common event props including KeyEvent and MouseEvent specific props
-jQuery.each( {
- altKey: true,
- bubbles: true,
- cancelable: true,
- changedTouches: true,
- ctrlKey: true,
- detail: true,
- eventPhase: true,
- metaKey: true,
- pageX: true,
- pageY: true,
- shiftKey: true,
- view: true,
- "char": true,
- charCode: true,
- key: true,
- keyCode: true,
- button: true,
- buttons: true,
- clientX: true,
- clientY: true,
- offsetX: true,
- offsetY: true,
- pointerId: true,
- pointerType: true,
- screenX: true,
- screenY: true,
- targetTouches: true,
- toElement: true,
- touches: true,
-
- which: function( event ) {
- var button = event.button;
-
- // Add which for key events
- if ( event.which == null && rkeyEvent.test( event.type ) ) {
- return event.charCode != null ? event.charCode : event.keyCode;
- }
-
- // Add which for click: 1 === left; 2 === middle; 3 === right
- if ( !event.which && button !== undefined && rmouseEvent.test( event.type ) ) {
- if ( button & 1 ) {
- return 1;
- }
-
- if ( button & 2 ) {
- return 3;
- }
-
- if ( button & 4 ) {
- return 2;
- }
-
- return 0;
- }
-
- return event.which;
- }
-}, jQuery.event.addProp );
-
-// Create mouseenter/leave events using mouseover/out and event-time checks
-// so that event delegation works in jQuery.
-// Do the same for pointerenter/pointerleave and pointerover/pointerout
-//
-// Support: Safari 7 only
-// Safari sends mouseenter too often; see:
-// https://bugs.chromium.org/p/chromium/issues/detail?id=470258
-// for the description of the bug (it existed in older Chrome versions as well).
-jQuery.each( {
- mouseenter: "mouseover",
- mouseleave: "mouseout",
- pointerenter: "pointerover",
- pointerleave: "pointerout"
-}, function( orig, fix ) {
- jQuery.event.special[ orig ] = {
- delegateType: fix,
- bindType: fix,
-
- handle: function( event ) {
- var ret,
- target = this,
- related = event.relatedTarget,
- handleObj = event.handleObj;
-
- // For mouseenter/leave call the handler if related is outside the target.
- // NB: No relatedTarget if the mouse left/entered the browser window
- if ( !related || ( related !== target && !jQuery.contains( target, related ) ) ) {
- event.type = handleObj.origType;
- ret = handleObj.handler.apply( this, arguments );
- event.type = fix;
- }
- return ret;
- }
- };
-} );
-
-jQuery.fn.extend( {
-
- on: function( types, selector, data, fn ) {
- return on( this, types, selector, data, fn );
- },
- one: function( types, selector, data, fn ) {
- return on( this, types, selector, data, fn, 1 );
- },
- off: function( types, selector, fn ) {
- var handleObj, type;
- if ( types && types.preventDefault && types.handleObj ) {
-
- // ( event ) dispatched jQuery.Event
- handleObj = types.handleObj;
- jQuery( types.delegateTarget ).off(
- handleObj.namespace ?
- handleObj.origType + "." + handleObj.namespace :
- handleObj.origType,
- handleObj.selector,
- handleObj.handler
- );
- return this;
- }
- if ( typeof types === "object" ) {
-
- // ( types-object [, selector] )
- for ( type in types ) {
- this.off( type, selector, types[ type ] );
- }
- return this;
- }
- if ( selector === false || typeof selector === "function" ) {
-
- // ( types [, fn] )
- fn = selector;
- selector = undefined;
- }
- if ( fn === false ) {
- fn = returnFalse;
- }
- return this.each( function() {
- jQuery.event.remove( this, types, fn, selector );
- } );
- }
-} );
-
-
-var
-
- /* eslint-disable max-len */
-
- // See https://github.com/eslint/eslint/issues/3229
- rxhtmlTag = /<(?!area|br|col|embed|hr|img|input|link|meta|param)(([a-z][^\/\0>\x20\t\r\n\f]*)[^>]*)\/>/gi,
-
- /* eslint-enable */
-
- // Support: IE <=10 - 11, Edge 12 - 13
- // In IE/Edge using regex groups here causes severe slowdowns.
- // See https://connect.microsoft.com/IE/feedback/details/1736512/
- rnoInnerhtml = /<script|<style|<link/i,
-
- // checked="checked" or checked
- rchecked = /checked\s*(?:[^=]|=\s*.checked.)/i,
- rscriptTypeMasked = /^true\/(.*)/,
- rcleanScript = /^\s*<!(?:\[CDATA\[|--)|(?:\]\]|--)>\s*$/g;
-
-// Prefer a tbody over its parent table for containing new rows
-function manipulationTarget( elem, content ) {
- if ( nodeName( elem, "table" ) &&
- nodeName( content.nodeType !== 11 ? content : content.firstChild, "tr" ) ) {
-
- return jQuery( ">tbody", elem )[ 0 ] || elem;
- }
-
- return elem;
-}
-
-// Replace/restore the type attribute of script elements for safe DOM manipulation
-function disableScript( elem ) {
- elem.type = ( elem.getAttribute( "type" ) !== null ) + "/" + elem.type;
- return elem;
-}
-function restoreScript( elem ) {
- var match = rscriptTypeMasked.exec( elem.type );
-
- if ( match ) {
- elem.type = match[ 1 ];
- } else {
- elem.removeAttribute( "type" );
- }
-
- return elem;
-}
-
-function cloneCopyEvent( src, dest ) {
- var i, l, type, pdataOld, pdataCur, udataOld, udataCur, events;
-
- if ( dest.nodeType !== 1 ) {
- return;
- }
-
- // 1. Copy private data: events, handlers, etc.
- if ( dataPriv.hasData( src ) ) {
- pdataOld = dataPriv.access( src );
- pdataCur = dataPriv.set( dest, pdataOld );
- events = pdataOld.events;
-
- if ( events ) {
- delete pdataCur.handle;
- pdataCur.events = {};
-
- for ( type in events ) {
- for ( i = 0, l = events[ type ].length; i < l; i++ ) {
- jQuery.event.add( dest, type, events[ type ][ i ] );
- }
- }
- }
- }
-
- // 2. Copy user data
- if ( dataUser.hasData( src ) ) {
- udataOld = dataUser.access( src );
- udataCur = jQuery.extend( {}, udataOld );
-
- dataUser.set( dest, udataCur );
- }
-}
-
-// Fix IE bugs, see support tests
-function fixInput( src, dest ) {
- var nodeName = dest.nodeName.toLowerCase();
-
- // Fails to persist the checked state of a cloned checkbox or radio button.
- if ( nodeName === "input" && rcheckableType.test( src.type ) ) {
- dest.checked = src.checked;
-
- // Fails to return the selected option to the default selected state when cloning options
- } else if ( nodeName === "input" || nodeName === "textarea" ) {
- dest.defaultValue = src.defaultValue;
- }
-}
-
-function domManip( collection, args, callback, ignored ) {
-
- // Flatten any nested arrays
- args = concat.apply( [], args );
-
- var fragment, first, scripts, hasScripts, node, doc,
- i = 0,
- l = collection.length,
- iNoClone = l - 1,
- value = args[ 0 ],
- isFunction = jQuery.isFunction( value );
-
- // We can't cloneNode fragments that contain checked, in WebKit
- if ( isFunction ||
- ( l > 1 && typeof value === "string" &&
- !support.checkClone && rchecked.test( value ) ) ) {
- return collection.each( function( index ) {
- var self = collection.eq( index );
- if ( isFunction ) {
- args[ 0 ] = value.call( this, index, self.html() );
- }
- domManip( self, args, callback, ignored );
- } );
- }
-
- if ( l ) {
- fragment = buildFragment( args, collection[ 0 ].ownerDocument, false, collection, ignored );
- first = fragment.firstChild;
-
- if ( fragment.childNodes.length === 1 ) {
- fragment = first;
- }
-
- // Require either new content or an interest in ignored elements to invoke the callback
- if ( first || ignored ) {
- scripts = jQuery.map( getAll( fragment, "script" ), disableScript );
- hasScripts = scripts.length;
-
- // Use the original fragment for the last item
- // instead of the first because it can end up
- // being emptied incorrectly in certain situations (#8070).
- for ( ; i < l; i++ ) {
- node = fragment;
-
- if ( i !== iNoClone ) {
- node = jQuery.clone( node, true, true );
-
- // Keep references to cloned scripts for later restoration
- if ( hasScripts ) {
-
- // Support: Android <=4.0 only, PhantomJS 1 only
- // push.apply(_, arraylike) throws on ancient WebKit
- jQuery.merge( scripts, getAll( node, "script" ) );
- }
- }
-
- callback.call( collection[ i ], node, i );
- }
-
- if ( hasScripts ) {
- doc = scripts[ scripts.length - 1 ].ownerDocument;
-
- // Reenable scripts
- jQuery.map( scripts, restoreScript );
-
- // Evaluate executable scripts on first document insertion
- for ( i = 0; i < hasScripts; i++ ) {
- node = scripts[ i ];
- if ( rscriptType.test( node.type || "" ) &&
- !dataPriv.access( node, "globalEval" ) &&
- jQuery.contains( doc, node ) ) {
-
- if ( node.src ) {
-
- // Optional AJAX dependency, but won't run scripts if not present
- if ( jQuery._evalUrl ) {
- jQuery._evalUrl( node.src );
- }
- } else {
- DOMEval( node.textContent.replace( rcleanScript, "" ), doc );
- }
- }
- }
- }
- }
- }
-
- return collection;
-}
-
-function remove( elem, selector, keepData ) {
- var node,
- nodes = selector ? jQuery.filter( selector, elem ) : elem,
- i = 0;
-
- for ( ; ( node = nodes[ i ] ) != null; i++ ) {
- if ( !keepData && node.nodeType === 1 ) {
- jQuery.cleanData( getAll( node ) );
- }
-
- if ( node.parentNode ) {
- if ( keepData && jQuery.contains( node.ownerDocument, node ) ) {
- setGlobalEval( getAll( node, "script" ) );
- }
- node.parentNode.removeChild( node );
- }
- }
-
- return elem;
-}
-
-jQuery.extend( {
- htmlPrefilter: function( html ) {
- return html.replace( rxhtmlTag, "<$1></$2>" );
- },
-
- clone: function( elem, dataAndEvents, deepDataAndEvents ) {
- var i, l, srcElements, destElements,
- clone = elem.cloneNode( true ),
- inPage = jQuery.contains( elem.ownerDocument, elem );
-
- // Fix IE cloning issues
- if ( !support.noCloneChecked && ( elem.nodeType === 1 || elem.nodeType === 11 ) &&
- !jQuery.isXMLDoc( elem ) ) {
-
- // We eschew Sizzle here for performance reasons: https://jsperf.com/getall-vs-sizzle/2
- destElements = getAll( clone );
- srcElements = getAll( elem );
-
- for ( i = 0, l = srcElements.length; i < l; i++ ) {
- fixInput( srcElements[ i ], destElements[ i ] );
- }
- }
-
- // Copy the events from the original to the clone
- if ( dataAndEvents ) {
- if ( deepDataAndEvents ) {
- srcElements = srcElements || getAll( elem );
- destElements = destElements || getAll( clone );
-
- for ( i = 0, l = srcElements.length; i < l; i++ ) {
- cloneCopyEvent( srcElements[ i ], destElements[ i ] );
- }
- } else {
- cloneCopyEvent( elem, clone );
- }
- }
-
- // Preserve script evaluation history
- destElements = getAll( clone, "script" );
- if ( destElements.length > 0 ) {
- setGlobalEval( destElements, !inPage && getAll( elem, "script" ) );
- }
-
- // Return the cloned set
- return clone;
- },
-
- cleanData: function( elems ) {
- var data, elem, type,
- special = jQuery.event.special,
- i = 0;
-
- for ( ; ( elem = elems[ i ] ) !== undefined; i++ ) {
- if ( acceptData( elem ) ) {
- if ( ( data = elem[ dataPriv.expando ] ) ) {
- if ( data.events ) {
- for ( type in data.events ) {
- if ( special[ type ] ) {
- jQuery.event.remove( elem, type );
-
- // This is a shortcut to avoid jQuery.event.remove's overhead
- } else {
- jQuery.removeEvent( elem, type, data.handle );
- }
- }
- }
-
- // Support: Chrome <=35 - 45+
- // Assign undefined instead of using delete, see Data#remove
- elem[ dataPriv.expando ] = undefined;
- }
- if ( elem[ dataUser.expando ] ) {
-
- // Support: Chrome <=35 - 45+
- // Assign undefined instead of using delete, see Data#remove
- elem[ dataUser.expando ] = undefined;
- }
- }
- }
- }
-} );
-
-jQuery.fn.extend( {
- detach: function( selector ) {
- return remove( this, selector, true );
- },
-
- remove: function( selector ) {
- return remove( this, selector );
- },
-
- text: function( value ) {
- return access( this, function( value ) {
- return value === undefined ?
- jQuery.text( this ) :
- this.empty().each( function() {
- if ( this.nodeType === 1 || this.nodeType === 11 || this.nodeType === 9 ) {
- this.textContent = value;
- }
- } );
- }, null, value, arguments.length );
- },
-
- append: function() {
- return domManip( this, arguments, function( elem ) {
- if ( this.nodeType === 1 || this.nodeType === 11 || this.nodeType === 9 ) {
- var target = manipulationTarget( this, elem );
- target.appendChild( elem );
- }
- } );
- },
-
- prepend: function() {
- return domManip( this, arguments, function( elem ) {
- if ( this.nodeType === 1 || this.nodeType === 11 || this.nodeType === 9 ) {
- var target = manipulationTarget( this, elem );
- target.insertBefore( elem, target.firstChild );
- }
- } );
- },
-
- before: function() {
- return domManip( this, arguments, function( elem ) {
- if ( this.parentNode ) {
- this.parentNode.insertBefore( elem, this );
- }
- } );
- },
-
- after: function() {
- return domManip( this, arguments, function( elem ) {
- if ( this.parentNode ) {
- this.parentNode.insertBefore( elem, this.nextSibling );
- }
- } );
- },
-
- empty: function() {
- var elem,
- i = 0;
-
- for ( ; ( elem = this[ i ] ) != null; i++ ) {
- if ( elem.nodeType === 1 ) {
-
- // Prevent memory leaks
- jQuery.cleanData( getAll( elem, false ) );
-
- // Remove any remaining nodes
- elem.textContent = "";
- }
- }
-
- return this;
- },
-
- clone: function( dataAndEvents, deepDataAndEvents ) {
- dataAndEvents = dataAndEvents == null ? false : dataAndEvents;
- deepDataAndEvents = deepDataAndEvents == null ? dataAndEvents : deepDataAndEvents;
-
- return this.map( function() {
- return jQuery.clone( this, dataAndEvents, deepDataAndEvents );
- } );
- },
-
- html: function( value ) {
- return access( this, function( value ) {
- var elem = this[ 0 ] || {},
- i = 0,
- l = this.length;
-
- if ( value === undefined && elem.nodeType === 1 ) {
- return elem.innerHTML;
- }
-
- // See if we can take a shortcut and just use innerHTML
- if ( typeof value === "string" && !rnoInnerhtml.test( value ) &&
- !wrapMap[ ( rtagName.exec( value ) || [ "", "" ] )[ 1 ].toLowerCase() ] ) {
-
- value = jQuery.htmlPrefilter( value );
-
- try {
- for ( ; i < l; i++ ) {
- elem = this[ i ] || {};
-
- // Remove element nodes and prevent memory leaks
- if ( elem.nodeType === 1 ) {
- jQuery.cleanData( getAll( elem, false ) );
- elem.innerHTML = value;
- }
- }
-
- elem = 0;
-
- // If using innerHTML throws an exception, use the fallback method
- } catch ( e ) {}
- }
-
- if ( elem ) {
- this.empty().append( value );
- }
- }, null, value, arguments.length );
- },
-
- replaceWith: function() {
- var ignored = [];
-
- // Make the changes, replacing each non-ignored context element with the new content
- return domManip( this, arguments, function( elem ) {
- var parent = this.parentNode;
-
- if ( jQuery.inArray( this, ignored ) < 0 ) {
- jQuery.cleanData( getAll( this ) );
- if ( parent ) {
- parent.replaceChild( elem, this );
- }
- }
-
- // Force callback invocation
- }, ignored );
- }
-} );
-
-jQuery.each( {
- appendTo: "append",
- prependTo: "prepend",
- insertBefore: "before",
- insertAfter: "after",
- replaceAll: "replaceWith"
-}, function( name, original ) {
- jQuery.fn[ name ] = function( selector ) {
- var elems,
- ret = [],
- insert = jQuery( selector ),
- last = insert.length - 1,
- i = 0;
-
- for ( ; i <= last; i++ ) {
- elems = i === last ? this : this.clone( true );
- jQuery( insert[ i ] )[ original ]( elems );
-
- // Support: Android <=4.0 only, PhantomJS 1 only
- // .get() because push.apply(_, arraylike) throws on ancient WebKit
- push.apply( ret, elems.get() );
- }
-
- return this.pushStack( ret );
- };
-} );
-var rmargin = ( /^margin/ );
-
-var rnumnonpx = new RegExp( "^(" + pnum + ")(?!px)[a-z%]+$", "i" );
-
-var getStyles = function( elem ) {
-
- // Support: IE <=11 only, Firefox <=30 (#15098, #14150)
- // IE throws on elements created in popups
- // FF meanwhile throws on frame elements through "defaultView.getComputedStyle"
- var view = elem.ownerDocument.defaultView;
-
- if ( !view || !view.opener ) {
- view = window;
- }
-
- return view.getComputedStyle( elem );
- };
-
-
-
-( function() {
-
- // Executing both pixelPosition & boxSizingReliable tests require only one layout
- // so they're executed at the same time to save the second computation.
- function computeStyleTests() {
-
- // This is a singleton, we need to execute it only once
- if ( !div ) {
- return;
- }
-
- div.style.cssText =
- "box-sizing:border-box;" +
- "position:relative;display:block;" +
- "margin:auto;border:1px;padding:1px;" +
- "top:1%;width:50%";
- div.innerHTML = "";
- documentElement.appendChild( container );
-
- var divStyle = window.getComputedStyle( div );
- pixelPositionVal = divStyle.top !== "1%";
-
- // Support: Android 4.0 - 4.3 only, Firefox <=3 - 44
- reliableMarginLeftVal = divStyle.marginLeft === "2px";
- boxSizingReliableVal = divStyle.width === "4px";
-
- // Support: Android 4.0 - 4.3 only
- // Some styles come back with percentage values, even though they shouldn't
- div.style.marginRight = "50%";
- pixelMarginRightVal = divStyle.marginRight === "4px";
-
- documentElement.removeChild( container );
-
- // Nullify the div so it wouldn't be stored in the memory and
- // it will also be a sign that checks already performed
- div = null;
- }
-
- var pixelPositionVal, boxSizingReliableVal, pixelMarginRightVal, reliableMarginLeftVal,
- container = document.createElement( "div" ),
- div = document.createElement( "div" );
-
- // Finish early in limited (non-browser) environments
- if ( !div.style ) {
- return;
- }
-
- // Support: IE <=9 - 11 only
- // Style of cloned element affects source element cloned (#8908)
- div.style.backgroundClip = "content-box";
- div.cloneNode( true ).style.backgroundClip = "";
- support.clearCloneStyle = div.style.backgroundClip === "content-box";
-
- container.style.cssText = "border:0;width:8px;height:0;top:0;left:-9999px;" +
- "padding:0;margin-top:1px;position:absolute";
- container.appendChild( div );
-
- jQuery.extend( support, {
- pixelPosition: function() {
- computeStyleTests();
- return pixelPositionVal;
- },
- boxSizingReliable: function() {
- computeStyleTests();
- return boxSizingReliableVal;
- },
- pixelMarginRight: function() {
- computeStyleTests();
- return pixelMarginRightVal;
- },
- reliableMarginLeft: function() {
- computeStyleTests();
- return reliableMarginLeftVal;
- }
- } );
-} )();
-
-
-function curCSS( elem, name, computed ) {
- var width, minWidth, maxWidth, ret,
-
- // Support: Firefox 51+
- // Retrieving style before computed somehow
- // fixes an issue with getting wrong values
- // on detached elements
- style = elem.style;
-
- computed = computed || getStyles( elem );
-
- // getPropertyValue is needed for:
- // .css('filter') (IE 9 only, #12537)
- // .css('--customProperty) (#3144)
- if ( computed ) {
- ret = computed.getPropertyValue( name ) || computed[ name ];
-
- if ( ret === "" && !jQuery.contains( elem.ownerDocument, elem ) ) {
- ret = jQuery.style( elem, name );
- }
-
- // A tribute to the "awesome hack by Dean Edwards"
- // Android Browser returns percentage for some values,
- // but width seems to be reliably pixels.
- // This is against the CSSOM draft spec:
- // https://drafts.csswg.org/cssom/#resolved-values
- if ( !support.pixelMarginRight() && rnumnonpx.test( ret ) && rmargin.test( name ) ) {
-
- // Remember the original values
- width = style.width;
- minWidth = style.minWidth;
- maxWidth = style.maxWidth;
-
- // Put in the new values to get a computed value out
- style.minWidth = style.maxWidth = style.width = ret;
- ret = computed.width;
-
- // Revert the changed values
- style.width = width;
- style.minWidth = minWidth;
- style.maxWidth = maxWidth;
- }
- }
-
- return ret !== undefined ?
-
- // Support: IE <=9 - 11 only
- // IE returns zIndex value as an integer.
- ret + "" :
- ret;
-}
-
-
-function addGetHookIf( conditionFn, hookFn ) {
-
- // Define the hook, we'll check on the first run if it's really needed.
- return {
- get: function() {
- if ( conditionFn() ) {
-
- // Hook not needed (or it's not possible to use it due
- // to missing dependency), remove it.
- delete this.get;
- return;
- }
-
- // Hook needed; redefine it so that the support test is not executed again.
- return ( this.get = hookFn ).apply( this, arguments );
- }
- };
-}
-
-
-var
-
- // Swappable if display is none or starts with table
- // except "table", "table-cell", or "table-caption"
- // See here for display values: https://developer.mozilla.org/en-US/docs/CSS/display
- rdisplayswap = /^(none|table(?!-c[ea]).+)/,
- rcustomProp = /^--/,
- cssShow = { position: "absolute", visibility: "hidden", display: "block" },
- cssNormalTransform = {
- letterSpacing: "0",
- fontWeight: "400"
- },
-
- cssPrefixes = [ "Webkit", "Moz", "ms" ],
- emptyStyle = document.createElement( "div" ).style;
-
-// Return a css property mapped to a potentially vendor prefixed property
-function vendorPropName( name ) {
-
- // Shortcut for names that are not vendor prefixed
- if ( name in emptyStyle ) {
- return name;
- }
-
- // Check for vendor prefixed names
- var capName = name[ 0 ].toUpperCase() + name.slice( 1 ),
- i = cssPrefixes.length;
-
- while ( i-- ) {
- name = cssPrefixes[ i ] + capName;
- if ( name in emptyStyle ) {
- return name;
- }
- }
-}
-
-// Return a property mapped along what jQuery.cssProps suggests or to
-// a vendor prefixed property.
-function finalPropName( name ) {
- var ret = jQuery.cssProps[ name ];
- if ( !ret ) {
- ret = jQuery.cssProps[ name ] = vendorPropName( name ) || name;
- }
- return ret;
-}
-
-function setPositiveNumber( elem, value, subtract ) {
-
- // Any relative (+/-) values have already been
- // normalized at this point
- var matches = rcssNum.exec( value );
- return matches ?
-
- // Guard against undefined "subtract", e.g., when used as in cssHooks
- Math.max( 0, matches[ 2 ] - ( subtract || 0 ) ) + ( matches[ 3 ] || "px" ) :
- value;
-}
-
-function augmentWidthOrHeight( elem, name, extra, isBorderBox, styles ) {
- var i,
- val = 0;
-
- // If we already have the right measurement, avoid augmentation
- if ( extra === ( isBorderBox ? "border" : "content" ) ) {
- i = 4;
-
- // Otherwise initialize for horizontal or vertical properties
- } else {
- i = name === "width" ? 1 : 0;
- }
-
- for ( ; i < 4; i += 2 ) {
-
- // Both box models exclude margin, so add it if we want it
- if ( extra === "margin" ) {
- val += jQuery.css( elem, extra + cssExpand[ i ], true, styles );
- }
-
- if ( isBorderBox ) {
-
- // border-box includes padding, so remove it if we want content
- if ( extra === "content" ) {
- val -= jQuery.css( elem, "padding" + cssExpand[ i ], true, styles );
- }
-
- // At this point, extra isn't border nor margin, so remove border
- if ( extra !== "margin" ) {
- val -= jQuery.css( elem, "border" + cssExpand[ i ] + "Width", true, styles );
- }
- } else {
-
- // At this point, extra isn't content, so add padding
- val += jQuery.css( elem, "padding" + cssExpand[ i ], true, styles );
-
- // At this point, extra isn't content nor padding, so add border
- if ( extra !== "padding" ) {
- val += jQuery.css( elem, "border" + cssExpand[ i ] + "Width", true, styles );
- }
- }
- }
-
- return val;
-}
-
-function getWidthOrHeight( elem, name, extra ) {
-
- // Start with computed style
- var valueIsBorderBox,
- styles = getStyles( elem ),
- val = curCSS( elem, name, styles ),
- isBorderBox = jQuery.css( elem, "boxSizing", false, styles ) === "border-box";
-
- // Computed unit is not pixels. Stop here and return.
- if ( rnumnonpx.test( val ) ) {
- return val;
- }
-
- // Check for style in case a browser which returns unreliable values
- // for getComputedStyle silently falls back to the reliable elem.style
- valueIsBorderBox = isBorderBox &&
- ( support.boxSizingReliable() || val === elem.style[ name ] );
-
- // Fall back to offsetWidth/Height when value is "auto"
- // This happens for inline elements with no explicit setting (gh-3571)
- if ( val === "auto" ) {
- val = elem[ "offset" + name[ 0 ].toUpperCase() + name.slice( 1 ) ];
- }
-
- // Normalize "", auto, and prepare for extra
- val = parseFloat( val ) || 0;
-
- // Use the active box-sizing model to add/subtract irrelevant styles
- return ( val +
- augmentWidthOrHeight(
- elem,
- name,
- extra || ( isBorderBox ? "border" : "content" ),
- valueIsBorderBox,
- styles
- )
- ) + "px";
-}
-
-jQuery.extend( {
-
- // Add in style property hooks for overriding the default
- // behavior of getting and setting a style property
- cssHooks: {
- opacity: {
- get: function( elem, computed ) {
- if ( computed ) {
-
- // We should always get a number back from opacity
- var ret = curCSS( elem, "opacity" );
- return ret === "" ? "1" : ret;
- }
- }
- }
- },
-
- // Don't automatically add "px" to these possibly-unitless properties
- cssNumber: {
- "animationIterationCount": true,
- "columnCount": true,
- "fillOpacity": true,
- "flexGrow": true,
- "flexShrink": true,
- "fontWeight": true,
- "lineHeight": true,
- "opacity": true,
- "order": true,
- "orphans": true,
- "widows": true,
- "zIndex": true,
- "zoom": true
- },
-
- // Add in properties whose names you wish to fix before
- // setting or getting the value
- cssProps: {
- "float": "cssFloat"
- },
-
- // Get and set the style property on a DOM Node
- style: function( elem, name, value, extra ) {
-
- // Don't set styles on text and comment nodes
- if ( !elem || elem.nodeType === 3 || elem.nodeType === 8 || !elem.style ) {
- return;
- }
-
- // Make sure that we're working with the right name
- var ret, type, hooks,
- origName = jQuery.camelCase( name ),
- isCustomProp = rcustomProp.test( name ),
- style = elem.style;
-
- // Make sure that we're working with the right name. We don't
- // want to query the value if it is a CSS custom property
- // since they are user-defined.
- if ( !isCustomProp ) {
- name = finalPropName( origName );
- }
-
- // Gets hook for the prefixed version, then unprefixed version
- hooks = jQuery.cssHooks[ name ] || jQuery.cssHooks[ origName ];
-
- // Check if we're setting a value
- if ( value !== undefined ) {
- type = typeof value;
-
- // Convert "+=" or "-=" to relative numbers (#7345)
- if ( type === "string" && ( ret = rcssNum.exec( value ) ) && ret[ 1 ] ) {
- value = adjustCSS( elem, name, ret );
-
- // Fixes bug #9237
- type = "number";
- }
-
- // Make sure that null and NaN values aren't set (#7116)
- if ( value == null || value !== value ) {
- return;
- }
-
- // If a number was passed in, add the unit (except for certain CSS properties)
- if ( type === "number" ) {
- value += ret && ret[ 3 ] || ( jQuery.cssNumber[ origName ] ? "" : "px" );
- }
-
- // background-* props affect original clone's values
- if ( !support.clearCloneStyle && value === "" && name.indexOf( "background" ) === 0 ) {
- style[ name ] = "inherit";
- }
-
- // If a hook was provided, use that value, otherwise just set the specified value
- if ( !hooks || !( "set" in hooks ) ||
- ( value = hooks.set( elem, value, extra ) ) !== undefined ) {
-
- if ( isCustomProp ) {
- style.setProperty( name, value );
- } else {
- style[ name ] = value;
- }
- }
-
- } else {
-
- // If a hook was provided get the non-computed value from there
- if ( hooks && "get" in hooks &&
- ( ret = hooks.get( elem, false, extra ) ) !== undefined ) {
-
- return ret;
- }
-
- // Otherwise just get the value from the style object
- return style[ name ];
- }
- },
-
- css: function( elem, name, extra, styles ) {
- var val, num, hooks,
- origName = jQuery.camelCase( name ),
- isCustomProp = rcustomProp.test( name );
-
- // Make sure that we're working with the right name. We don't
- // want to modify the value if it is a CSS custom property
- // since they are user-defined.
- if ( !isCustomProp ) {
- name = finalPropName( origName );
- }
-
- // Try prefixed name followed by the unprefixed name
- hooks = jQuery.cssHooks[ name ] || jQuery.cssHooks[ origName ];
-
- // If a hook was provided get the computed value from there
- if ( hooks && "get" in hooks ) {
- val = hooks.get( elem, true, extra );
- }
-
- // Otherwise, if a way to get the computed value exists, use that
- if ( val === undefined ) {
- val = curCSS( elem, name, styles );
- }
-
- // Convert "normal" to computed value
- if ( val === "normal" && name in cssNormalTransform ) {
- val = cssNormalTransform[ name ];
- }
-
- // Make numeric if forced or a qualifier was provided and val looks numeric
- if ( extra === "" || extra ) {
- num = parseFloat( val );
- return extra === true || isFinite( num ) ? num || 0 : val;
- }
-
- return val;
- }
-} );
-
-jQuery.each( [ "height", "width" ], function( i, name ) {
- jQuery.cssHooks[ name ] = {
- get: function( elem, computed, extra ) {
- if ( computed ) {
-
- // Certain elements can have dimension info if we invisibly show them
- // but it must have a current display style that would benefit
- return rdisplayswap.test( jQuery.css( elem, "display" ) ) &&
-
- // Support: Safari 8+
- // Table columns in Safari have non-zero offsetWidth & zero
- // getBoundingClientRect().width unless display is changed.
- // Support: IE <=11 only
- // Running getBoundingClientRect on a disconnected node
- // in IE throws an error.
- ( !elem.getClientRects().length || !elem.getBoundingClientRect().width ) ?
- swap( elem, cssShow, function() {
- return getWidthOrHeight( elem, name, extra );
- } ) :
- getWidthOrHeight( elem, name, extra );
- }
- },
-
- set: function( elem, value, extra ) {
- var matches,
- styles = extra && getStyles( elem ),
- subtract = extra && augmentWidthOrHeight(
- elem,
- name,
- extra,
- jQuery.css( elem, "boxSizing", false, styles ) === "border-box",
- styles
- );
-
- // Convert to pixels if value adjustment is needed
- if ( subtract && ( matches = rcssNum.exec( value ) ) &&
- ( matches[ 3 ] || "px" ) !== "px" ) {
-
- elem.style[ name ] = value;
- value = jQuery.css( elem, name );
- }
-
- return setPositiveNumber( elem, value, subtract );
- }
- };
-} );
-
-jQuery.cssHooks.marginLeft = addGetHookIf( support.reliableMarginLeft,
- function( elem, computed ) {
- if ( computed ) {
- return ( parseFloat( curCSS( elem, "marginLeft" ) ) ||
- elem.getBoundingClientRect().left -
- swap( elem, { marginLeft: 0 }, function() {
- return elem.getBoundingClientRect().left;
- } )
- ) + "px";
- }
- }
-);
-
-// These hooks are used by animate to expand properties
-jQuery.each( {
- margin: "",
- padding: "",
- border: "Width"
-}, function( prefix, suffix ) {
- jQuery.cssHooks[ prefix + suffix ] = {
- expand: function( value ) {
- var i = 0,
- expanded = {},
-
- // Assumes a single number if not a string
- parts = typeof value === "string" ? value.split( " " ) : [ value ];
-
- for ( ; i < 4; i++ ) {
- expanded[ prefix + cssExpand[ i ] + suffix ] =
- parts[ i ] || parts[ i - 2 ] || parts[ 0 ];
- }
-
- return expanded;
- }
- };
-
- if ( !rmargin.test( prefix ) ) {
- jQuery.cssHooks[ prefix + suffix ].set = setPositiveNumber;
- }
-} );
-
-jQuery.fn.extend( {
- css: function( name, value ) {
- return access( this, function( elem, name, value ) {
- var styles, len,
- map = {},
- i = 0;
-
- if ( Array.isArray( name ) ) {
- styles = getStyles( elem );
- len = name.length;
-
- for ( ; i < len; i++ ) {
- map[ name[ i ] ] = jQuery.css( elem, name[ i ], false, styles );
- }
-
- return map;
- }
-
- return value !== undefined ?
- jQuery.style( elem, name, value ) :
- jQuery.css( elem, name );
- }, name, value, arguments.length > 1 );
- }
-} );
-
-
-function Tween( elem, options, prop, end, easing ) {
- return new Tween.prototype.init( elem, options, prop, end, easing );
-}
-jQuery.Tween = Tween;
-
-Tween.prototype = {
- constructor: Tween,
- init: function( elem, options, prop, end, easing, unit ) {
- this.elem = elem;
- this.prop = prop;
- this.easing = easing || jQuery.easing._default;
- this.options = options;
- this.start = this.now = this.cur();
- this.end = end;
- this.unit = unit || ( jQuery.cssNumber[ prop ] ? "" : "px" );
- },
- cur: function() {
- var hooks = Tween.propHooks[ this.prop ];
-
- return hooks && hooks.get ?
- hooks.get( this ) :
- Tween.propHooks._default.get( this );
- },
- run: function( percent ) {
- var eased,
- hooks = Tween.propHooks[ this.prop ];
-
- if ( this.options.duration ) {
- this.pos = eased = jQuery.easing[ this.easing ](
- percent, this.options.duration * percent, 0, 1, this.options.duration
- );
- } else {
- this.pos = eased = percent;
- }
- this.now = ( this.end - this.start ) * eased + this.start;
-
- if ( this.options.step ) {
- this.options.step.call( this.elem, this.now, this );
- }
-
- if ( hooks && hooks.set ) {
- hooks.set( this );
- } else {
- Tween.propHooks._default.set( this );
- }
- return this;
- }
-};
-
-Tween.prototype.init.prototype = Tween.prototype;
-
-Tween.propHooks = {
- _default: {
- get: function( tween ) {
- var result;
-
- // Use a property on the element directly when it is not a DOM element,
- // or when there is no matching style property that exists.
- if ( tween.elem.nodeType !== 1 ||
- tween.elem[ tween.prop ] != null && tween.elem.style[ tween.prop ] == null ) {
- return tween.elem[ tween.prop ];
- }
-
- // Passing an empty string as a 3rd parameter to .css will automatically
- // attempt a parseFloat and fallback to a string if the parse fails.
- // Simple values such as "10px" are parsed to Float;
- // complex values such as "rotate(1rad)" are returned as-is.
- result = jQuery.css( tween.elem, tween.prop, "" );
-
- // Empty strings, null, undefined and "auto" are converted to 0.
- return !result || result === "auto" ? 0 : result;
- },
- set: function( tween ) {
-
- // Use step hook for back compat.
- // Use cssHook if its there.
- // Use .style if available and use plain properties where available.
- if ( jQuery.fx.step[ tween.prop ] ) {
- jQuery.fx.step[ tween.prop ]( tween );
- } else if ( tween.elem.nodeType === 1 &&
- ( tween.elem.style[ jQuery.cssProps[ tween.prop ] ] != null ||
- jQuery.cssHooks[ tween.prop ] ) ) {
- jQuery.style( tween.elem, tween.prop, tween.now + tween.unit );
- } else {
- tween.elem[ tween.prop ] = tween.now;
- }
- }
- }
-};
-
-// Support: IE <=9 only
-// Panic based approach to setting things on disconnected nodes
-Tween.propHooks.scrollTop = Tween.propHooks.scrollLeft = {
- set: function( tween ) {
- if ( tween.elem.nodeType && tween.elem.parentNode ) {
- tween.elem[ tween.prop ] = tween.now;
- }
- }
-};
-
-jQuery.easing = {
- linear: function( p ) {
- return p;
- },
- swing: function( p ) {
- return 0.5 - Math.cos( p * Math.PI ) / 2;
- },
- _default: "swing"
-};
-
-jQuery.fx = Tween.prototype.init;
-
-// Back compat <1.8 extension point
-jQuery.fx.step = {};
-
-
-
-
-var
- fxNow, inProgress,
- rfxtypes = /^(?:toggle|show|hide)$/,
- rrun = /queueHooks$/;
-
-function schedule() {
- if ( inProgress ) {
- if ( document.hidden === false && window.requestAnimationFrame ) {
- window.requestAnimationFrame( schedule );
- } else {
- window.setTimeout( schedule, jQuery.fx.interval );
- }
-
- jQuery.fx.tick();
- }
-}
-
-// Animations created synchronously will run synchronously
-function createFxNow() {
- window.setTimeout( function() {
- fxNow = undefined;
- } );
- return ( fxNow = jQuery.now() );
-}
-
-// Generate parameters to create a standard animation
-function genFx( type, includeWidth ) {
- var which,
- i = 0,
- attrs = { height: type };
-
- // If we include width, step value is 1 to do all cssExpand values,
- // otherwise step value is 2 to skip over Left and Right
- includeWidth = includeWidth ? 1 : 0;
- for ( ; i < 4; i += 2 - includeWidth ) {
- which = cssExpand[ i ];
- attrs[ "margin" + which ] = attrs[ "padding" + which ] = type;
- }
-
- if ( includeWidth ) {
- attrs.opacity = attrs.width = type;
- }
-
- return attrs;
-}
-
-function createTween( value, prop, animation ) {
- var tween,
- collection = ( Animation.tweeners[ prop ] || [] ).concat( Animation.tweeners[ "*" ] ),
- index = 0,
- length = collection.length;
- for ( ; index < length; index++ ) {
- if ( ( tween = collection[ index ].call( animation, prop, value ) ) ) {
-
- // We're done with this property
- return tween;
- }
- }
-}
-
-function defaultPrefilter( elem, props, opts ) {
- var prop, value, toggle, hooks, oldfire, propTween, restoreDisplay, display,
- isBox = "width" in props || "height" in props,
- anim = this,
- orig = {},
- style = elem.style,
- hidden = elem.nodeType && isHiddenWithinTree( elem ),
- dataShow = dataPriv.get( elem, "fxshow" );
-
- // Queue-skipping animations hijack the fx hooks
- if ( !opts.queue ) {
- hooks = jQuery._queueHooks( elem, "fx" );
- if ( hooks.unqueued == null ) {
- hooks.unqueued = 0;
- oldfire = hooks.empty.fire;
- hooks.empty.fire = function() {
- if ( !hooks.unqueued ) {
- oldfire();
- }
- };
- }
- hooks.unqueued++;
-
- anim.always( function() {
-
- // Ensure the complete handler is called before this completes
- anim.always( function() {
- hooks.unqueued--;
- if ( !jQuery.queue( elem, "fx" ).length ) {
- hooks.empty.fire();
- }
- } );
- } );
- }
-
- // Detect show/hide animations
- for ( prop in props ) {
- value = props[ prop ];
- if ( rfxtypes.test( value ) ) {
- delete props[ prop ];
- toggle = toggle || value === "toggle";
- if ( value === ( hidden ? "hide" : "show" ) ) {
-
- // Pretend to be hidden if this is a "show" and
- // there is still data from a stopped show/hide
- if ( value === "show" && dataShow && dataShow[ prop ] !== undefined ) {
- hidden = true;
-
- // Ignore all other no-op show/hide data
- } else {
- continue;
- }
- }
- orig[ prop ] = dataShow && dataShow[ prop ] || jQuery.style( elem, prop );
- }
- }
-
- // Bail out if this is a no-op like .hide().hide()
- propTween = !jQuery.isEmptyObject( props );
- if ( !propTween && jQuery.isEmptyObject( orig ) ) {
- return;
- }
-
- // Restrict "overflow" and "display" styles during box animations
- if ( isBox && elem.nodeType === 1 ) {
-
- // Support: IE <=9 - 11, Edge 12 - 13
- // Record all 3 overflow attributes because IE does not infer the shorthand
- // from identically-valued overflowX and overflowY
- opts.overflow = [ style.overflow, style.overflowX, style.overflowY ];
-
- // Identify a display type, preferring old show/hide data over the CSS cascade
- restoreDisplay = dataShow && dataShow.display;
- if ( restoreDisplay == null ) {
- restoreDisplay = dataPriv.get( elem, "display" );
- }
- display = jQuery.css( elem, "display" );
- if ( display === "none" ) {
- if ( restoreDisplay ) {
- display = restoreDisplay;
- } else {
-
- // Get nonempty value(s) by temporarily forcing visibility
- showHide( [ elem ], true );
- restoreDisplay = elem.style.display || restoreDisplay;
- display = jQuery.css( elem, "display" );
- showHide( [ elem ] );
- }
- }
-
- // Animate inline elements as inline-block
- if ( display === "inline" || display === "inline-block" && restoreDisplay != null ) {
- if ( jQuery.css( elem, "float" ) === "none" ) {
-
- // Restore the original display value at the end of pure show/hide animations
- if ( !propTween ) {
- anim.done( function() {
- style.display = restoreDisplay;
- } );
- if ( restoreDisplay == null ) {
- display = style.display;
- restoreDisplay = display === "none" ? "" : display;
- }
- }
- style.display = "inline-block";
- }
- }
- }
-
- if ( opts.overflow ) {
- style.overflow = "hidden";
- anim.always( function() {
- style.overflow = opts.overflow[ 0 ];
- style.overflowX = opts.overflow[ 1 ];
- style.overflowY = opts.overflow[ 2 ];
- } );
- }
-
- // Implement show/hide animations
- propTween = false;
- for ( prop in orig ) {
-
- // General show/hide setup for this element animation
- if ( !propTween ) {
- if ( dataShow ) {
- if ( "hidden" in dataShow ) {
- hidden = dataShow.hidden;
- }
- } else {
- dataShow = dataPriv.access( elem, "fxshow", { display: restoreDisplay } );
- }
-
- // Store hidden/visible for toggle so `.stop().toggle()` "reverses"
- if ( toggle ) {
- dataShow.hidden = !hidden;
- }
-
- // Show elements before animating them
- if ( hidden ) {
- showHide( [ elem ], true );
- }
-
- /* eslint-disable no-loop-func */
-
- anim.done( function() {
-
- /* eslint-enable no-loop-func */
-
- // The final step of a "hide" animation is actually hiding the element
- if ( !hidden ) {
- showHide( [ elem ] );
- }
- dataPriv.remove( elem, "fxshow" );
- for ( prop in orig ) {
- jQuery.style( elem, prop, orig[ prop ] );
- }
- } );
- }
-
- // Per-property setup
- propTween = createTween( hidden ? dataShow[ prop ] : 0, prop, anim );
- if ( !( prop in dataShow ) ) {
- dataShow[ prop ] = propTween.start;
- if ( hidden ) {
- propTween.end = propTween.start;
- propTween.start = 0;
- }
- }
- }
-}
-
-function propFilter( props, specialEasing ) {
- var index, name, easing, value, hooks;
-
- // camelCase, specialEasing and expand cssHook pass
- for ( index in props ) {
- name = jQuery.camelCase( index );
- easing = specialEasing[ name ];
- value = props[ index ];
- if ( Array.isArray( value ) ) {
- easing = value[ 1 ];
- value = props[ index ] = value[ 0 ];
- }
-
- if ( index !== name ) {
- props[ name ] = value;
- delete props[ index ];
- }
-
- hooks = jQuery.cssHooks[ name ];
- if ( hooks && "expand" in hooks ) {
- value = hooks.expand( value );
- delete props[ name ];
-
- // Not quite $.extend, this won't overwrite existing keys.
- // Reusing 'index' because we have the correct "name"
- for ( index in value ) {
- if ( !( index in props ) ) {
- props[ index ] = value[ index ];
- specialEasing[ index ] = easing;
- }
- }
- } else {
- specialEasing[ name ] = easing;
- }
- }
-}
-
-function Animation( elem, properties, options ) {
- var result,
- stopped,
- index = 0,
- length = Animation.prefilters.length,
- deferred = jQuery.Deferred().always( function() {
-
- // Don't match elem in the :animated selector
- delete tick.elem;
- } ),
- tick = function() {
- if ( stopped ) {
- return false;
- }
- var currentTime = fxNow || createFxNow(),
- remaining = Math.max( 0, animation.startTime + animation.duration - currentTime ),
-
- // Support: Android 2.3 only
- // Archaic crash bug won't allow us to use `1 - ( 0.5 || 0 )` (#12497)
- temp = remaining / animation.duration || 0,
- percent = 1 - temp,
- index = 0,
- length = animation.tweens.length;
-
- for ( ; index < length; index++ ) {
- animation.tweens[ index ].run( percent );
- }
-
- deferred.notifyWith( elem, [ animation, percent, remaining ] );
-
- // If there's more to do, yield
- if ( percent < 1 && length ) {
- return remaining;
- }
-
- // If this was an empty animation, synthesize a final progress notification
- if ( !length ) {
- deferred.notifyWith( elem, [ animation, 1, 0 ] );
- }
-
- // Resolve the animation and report its conclusion
- deferred.resolveWith( elem, [ animation ] );
- return false;
- },
- animation = deferred.promise( {
- elem: elem,
- props: jQuery.extend( {}, properties ),
- opts: jQuery.extend( true, {
- specialEasing: {},
- easing: jQuery.easing._default
- }, options ),
- originalProperties: properties,
- originalOptions: options,
- startTime: fxNow || createFxNow(),
- duration: options.duration,
- tweens: [],
- createTween: function( prop, end ) {
- var tween = jQuery.Tween( elem, animation.opts, prop, end,
- animation.opts.specialEasing[ prop ] || animation.opts.easing );
- animation.tweens.push( tween );
- return tween;
- },
- stop: function( gotoEnd ) {
- var index = 0,
-
- // If we are going to the end, we want to run all the tweens
- // otherwise we skip this part
- length = gotoEnd ? animation.tweens.length : 0;
- if ( stopped ) {
- return this;
- }
- stopped = true;
- for ( ; index < length; index++ ) {
- animation.tweens[ index ].run( 1 );
- }
-
- // Resolve when we played the last frame; otherwise, reject
- if ( gotoEnd ) {
- deferred.notifyWith( elem, [ animation, 1, 0 ] );
- deferred.resolveWith( elem, [ animation, gotoEnd ] );
- } else {
- deferred.rejectWith( elem, [ animation, gotoEnd ] );
- }
- return this;
- }
- } ),
- props = animation.props;
-
- propFilter( props, animation.opts.specialEasing );
-
- for ( ; index < length; index++ ) {
- result = Animation.prefilters[ index ].call( animation, elem, props, animation.opts );
- if ( result ) {
- if ( jQuery.isFunction( result.stop ) ) {
- jQuery._queueHooks( animation.elem, animation.opts.queue ).stop =
- jQuery.proxy( result.stop, result );
- }
- return result;
- }
- }
-
- jQuery.map( props, createTween, animation );
-
- if ( jQuery.isFunction( animation.opts.start ) ) {
- animation.opts.start.call( elem, animation );
- }
-
- // Attach callbacks from options
- animation
- .progress( animation.opts.progress )
- .done( animation.opts.done, animation.opts.complete )
- .fail( animation.opts.fail )
- .always( animation.opts.always );
-
- jQuery.fx.timer(
- jQuery.extend( tick, {
- elem: elem,
- anim: animation,
- queue: animation.opts.queue
- } )
- );
-
- return animation;
-}
-
-jQuery.Animation = jQuery.extend( Animation, {
-
- tweeners: {
- "*": [ function( prop, value ) {
- var tween = this.createTween( prop, value );
- adjustCSS( tween.elem, prop, rcssNum.exec( value ), tween );
- return tween;
- } ]
- },
-
- tweener: function( props, callback ) {
- if ( jQuery.isFunction( props ) ) {
- callback = props;
- props = [ "*" ];
- } else {
- props = props.match( rnothtmlwhite );
- }
-
- var prop,
- index = 0,
- length = props.length;
-
- for ( ; index < length; index++ ) {
- prop = props[ index ];
- Animation.tweeners[ prop ] = Animation.tweeners[ prop ] || [];
- Animation.tweeners[ prop ].unshift( callback );
- }
- },
-
- prefilters: [ defaultPrefilter ],
-
- prefilter: function( callback, prepend ) {
- if ( prepend ) {
- Animation.prefilters.unshift( callback );
- } else {
- Animation.prefilters.push( callback );
- }
- }
-} );
-
-jQuery.speed = function( speed, easing, fn ) {
- var opt = speed && typeof speed === "object" ? jQuery.extend( {}, speed ) : {
- complete: fn || !fn && easing ||
- jQuery.isFunction( speed ) && speed,
- duration: speed,
- easing: fn && easing || easing && !jQuery.isFunction( easing ) && easing
- };
-
- // Go to the end state if fx are off
- if ( jQuery.fx.off ) {
- opt.duration = 0;
-
- } else {
- if ( typeof opt.duration !== "number" ) {
- if ( opt.duration in jQuery.fx.speeds ) {
- opt.duration = jQuery.fx.speeds[ opt.duration ];
-
- } else {
- opt.duration = jQuery.fx.speeds._default;
- }
- }
- }
-
- // Normalize opt.queue - true/undefined/null -> "fx"
- if ( opt.queue == null || opt.queue === true ) {
- opt.queue = "fx";
- }
-
- // Queueing
- opt.old = opt.complete;
-
- opt.complete = function() {
- if ( jQuery.isFunction( opt.old ) ) {
- opt.old.call( this );
- }
-
- if ( opt.queue ) {
- jQuery.dequeue( this, opt.queue );
- }
- };
-
- return opt;
-};
-
-jQuery.fn.extend( {
- fadeTo: function( speed, to, easing, callback ) {
-
- // Show any hidden elements after setting opacity to 0
- return this.filter( isHiddenWithinTree ).css( "opacity", 0 ).show()
-
- // Animate to the value specified
- .end().animate( { opacity: to }, speed, easing, callback );
- },
- animate: function( prop, speed, easing, callback ) {
- var empty = jQuery.isEmptyObject( prop ),
- optall = jQuery.speed( speed, easing, callback ),
- doAnimation = function() {
-
- // Operate on a copy of prop so per-property easing won't be lost
- var anim = Animation( this, jQuery.extend( {}, prop ), optall );
-
- // Empty animations, or finishing resolves immediately
- if ( empty || dataPriv.get( this, "finish" ) ) {
- anim.stop( true );
- }
- };
- doAnimation.finish = doAnimation;
-
- return empty || optall.queue === false ?
- this.each( doAnimation ) :
- this.queue( optall.queue, doAnimation );
- },
- stop: function( type, clearQueue, gotoEnd ) {
- var stopQueue = function( hooks ) {
- var stop = hooks.stop;
- delete hooks.stop;
- stop( gotoEnd );
- };
-
- if ( typeof type !== "string" ) {
- gotoEnd = clearQueue;
- clearQueue = type;
- type = undefined;
- }
- if ( clearQueue && type !== false ) {
- this.queue( type || "fx", [] );
- }
-
- return this.each( function() {
- var dequeue = true,
- index = type != null && type + "queueHooks",
- timers = jQuery.timers,
- data = dataPriv.get( this );
-
- if ( index ) {
- if ( data[ index ] && data[ index ].stop ) {
- stopQueue( data[ index ] );
- }
- } else {
- for ( index in data ) {
- if ( data[ index ] && data[ index ].stop && rrun.test( index ) ) {
- stopQueue( data[ index ] );
- }
- }
- }
-
- for ( index = timers.length; index--; ) {
- if ( timers[ index ].elem === this &&
- ( type == null || timers[ index ].queue === type ) ) {
-
- timers[ index ].anim.stop( gotoEnd );
- dequeue = false;
- timers.splice( index, 1 );
- }
- }
-
- // Start the next in the queue if the last step wasn't forced.
- // Timers currently will call their complete callbacks, which
- // will dequeue but only if they were gotoEnd.
- if ( dequeue || !gotoEnd ) {
- jQuery.dequeue( this, type );
- }
- } );
- },
- finish: function( type ) {
- if ( type !== false ) {
- type = type || "fx";
- }
- return this.each( function() {
- var index,
- data = dataPriv.get( this ),
- queue = data[ type + "queue" ],
- hooks = data[ type + "queueHooks" ],
- timers = jQuery.timers,
- length = queue ? queue.length : 0;
-
- // Enable finishing flag on private data
- data.finish = true;
-
- // Empty the queue first
- jQuery.queue( this, type, [] );
-
- if ( hooks && hooks.stop ) {
- hooks.stop.call( this, true );
- }
-
- // Look for any active animations, and finish them
- for ( index = timers.length; index--; ) {
- if ( timers[ index ].elem === this && timers[ index ].queue === type ) {
- timers[ index ].anim.stop( true );
- timers.splice( index, 1 );
- }
- }
-
- // Look for any animations in the old queue and finish them
- for ( index = 0; index < length; index++ ) {
- if ( queue[ index ] && queue[ index ].finish ) {
- queue[ index ].finish.call( this );
- }
- }
-
- // Turn off finishing flag
- delete data.finish;
- } );
- }
-} );
-
-jQuery.each( [ "toggle", "show", "hide" ], function( i, name ) {
- var cssFn = jQuery.fn[ name ];
- jQuery.fn[ name ] = function( speed, easing, callback ) {
- return speed == null || typeof speed === "boolean" ?
- cssFn.apply( this, arguments ) :
- this.animate( genFx( name, true ), speed, easing, callback );
- };
-} );
-
-// Generate shortcuts for custom animations
-jQuery.each( {
- slideDown: genFx( "show" ),
- slideUp: genFx( "hide" ),
- slideToggle: genFx( "toggle" ),
- fadeIn: { opacity: "show" },
- fadeOut: { opacity: "hide" },
- fadeToggle: { opacity: "toggle" }
-}, function( name, props ) {
- jQuery.fn[ name ] = function( speed, easing, callback ) {
- return this.animate( props, speed, easing, callback );
- };
-} );
-
-jQuery.timers = [];
-jQuery.fx.tick = function() {
- var timer,
- i = 0,
- timers = jQuery.timers;
-
- fxNow = jQuery.now();
-
- for ( ; i < timers.length; i++ ) {
- timer = timers[ i ];
-
- // Run the timer and safely remove it when done (allowing for external removal)
- if ( !timer() && timers[ i ] === timer ) {
- timers.splice( i--, 1 );
- }
- }
-
- if ( !timers.length ) {
- jQuery.fx.stop();
- }
- fxNow = undefined;
-};
-
-jQuery.fx.timer = function( timer ) {
- jQuery.timers.push( timer );
- jQuery.fx.start();
-};
-
-jQuery.fx.interval = 13;
-jQuery.fx.start = function() {
- if ( inProgress ) {
- return;
- }
-
- inProgress = true;
- schedule();
-};
-
-jQuery.fx.stop = function() {
- inProgress = null;
-};
-
-jQuery.fx.speeds = {
- slow: 600,
- fast: 200,
-
- // Default speed
- _default: 400
-};
-
-
-// Based off of the plugin by Clint Helfers, with permission.
-// https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
-jQuery.fn.delay = function( time, type ) {
- time = jQuery.fx ? jQuery.fx.speeds[ time ] || time : time;
- type = type || "fx";
-
- return this.queue( type, function( next, hooks ) {
- var timeout = window.setTimeout( next, time );
- hooks.stop = function() {
- window.clearTimeout( timeout );
- };
- } );
-};
-
-
-( function() {
- var input = document.createElement( "input" ),
- select = document.createElement( "select" ),
- opt = select.appendChild( document.createElement( "option" ) );
-
- input.type = "checkbox";
-
- // Support: Android <=4.3 only
- // Default value for a checkbox should be "on"
- support.checkOn = input.value !== "";
-
- // Support: IE <=11 only
- // Must access selectedIndex to make default options select
- support.optSelected = opt.selected;
-
- // Support: IE <=11 only
- // An input loses its value after becoming a radio
- input = document.createElement( "input" );
- input.value = "t";
- input.type = "radio";
- support.radioValue = input.value === "t";
-} )();
-
-
-var boolHook,
- attrHandle = jQuery.expr.attrHandle;
-
-jQuery.fn.extend( {
- attr: function( name, value ) {
- return access( this, jQuery.attr, name, value, arguments.length > 1 );
- },
-
- removeAttr: function( name ) {
- return this.each( function() {
- jQuery.removeAttr( this, name );
- } );
- }
-} );
-
-jQuery.extend( {
- attr: function( elem, name, value ) {
- var ret, hooks,
- nType = elem.nodeType;
-
- // Don't get/set attributes on text, comment and attribute nodes
- if ( nType === 3 || nType === 8 || nType === 2 ) {
- return;
- }
-
- // Fallback to prop when attributes are not supported
- if ( typeof elem.getAttribute === "undefined" ) {
- return jQuery.prop( elem, name, value );
- }
-
- // Attribute hooks are determined by the lowercase version
- // Grab necessary hook if one is defined
- if ( nType !== 1 || !jQuery.isXMLDoc( elem ) ) {
- hooks = jQuery.attrHooks[ name.toLowerCase() ] ||
- ( jQuery.expr.match.bool.test( name ) ? boolHook : undefined );
- }
-
- if ( value !== undefined ) {
- if ( value === null ) {
- jQuery.removeAttr( elem, name );
- return;
- }
-
- if ( hooks && "set" in hooks &&
- ( ret = hooks.set( elem, value, name ) ) !== undefined ) {
- return ret;
- }
-
- elem.setAttribute( name, value + "" );
- return value;
- }
-
- if ( hooks && "get" in hooks && ( ret = hooks.get( elem, name ) ) !== null ) {
- return ret;
- }
-
- ret = jQuery.find.attr( elem, name );
-
- // Non-existent attributes return null, we normalize to undefined
- return ret == null ? undefined : ret;
- },
-
- attrHooks: {
- type: {
- set: function( elem, value ) {
- if ( !support.radioValue && value === "radio" &&
- nodeName( elem, "input" ) ) {
- var val = elem.value;
- elem.setAttribute( "type", value );
- if ( val ) {
- elem.value = val;
- }
- return value;
- }
- }
- }
- },
-
- removeAttr: function( elem, value ) {
- var name,
- i = 0,
-
- // Attribute names can contain non-HTML whitespace characters
- // https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
- attrNames = value && value.match( rnothtmlwhite );
-
- if ( attrNames && elem.nodeType === 1 ) {
- while ( ( name = attrNames[ i++ ] ) ) {
- elem.removeAttribute( name );
- }
- }
- }
-} );
-
-// Hooks for boolean attributes
-boolHook = {
- set: function( elem, value, name ) {
- if ( value === false ) {
-
- // Remove boolean attributes when set to false
- jQuery.removeAttr( elem, name );
- } else {
- elem.setAttribute( name, name );
- }
- return name;
- }
-};
-
-jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( i, name ) {
- var getter = attrHandle[ name ] || jQuery.find.attr;
-
- attrHandle[ name ] = function( elem, name, isXML ) {
- var ret, handle,
- lowercaseName = name.toLowerCase();
-
- if ( !isXML ) {
-
- // Avoid an infinite loop by temporarily removing this function from the getter
- handle = attrHandle[ lowercaseName ];
- attrHandle[ lowercaseName ] = ret;
- ret = getter( elem, name, isXML ) != null ?
- lowercaseName :
- null;
- attrHandle[ lowercaseName ] = handle;
- }
- return ret;
- };
-} );
-
-
-
-
-var rfocusable = /^(?:input|select|textarea|button)$/i,
- rclickable = /^(?:a|area)$/i;
-
-jQuery.fn.extend( {
- prop: function( name, value ) {
- return access( this, jQuery.prop, name, value, arguments.length > 1 );
- },
-
- removeProp: function( name ) {
- return this.each( function() {
- delete this[ jQuery.propFix[ name ] || name ];
- } );
- }
-} );
-
-jQuery.extend( {
- prop: function( elem, name, value ) {
- var ret, hooks,
- nType = elem.nodeType;
-
- // Don't get/set properties on text, comment and attribute nodes
- if ( nType === 3 || nType === 8 || nType === 2 ) {
- return;
- }
-
- if ( nType !== 1 || !jQuery.isXMLDoc( elem ) ) {
-
- // Fix name and attach hooks
- name = jQuery.propFix[ name ] || name;
- hooks = jQuery.propHooks[ name ];
- }
-
- if ( value !== undefined ) {
- if ( hooks && "set" in hooks &&
- ( ret = hooks.set( elem, value, name ) ) !== undefined ) {
- return ret;
- }
-
- return ( elem[ name ] = value );
- }
-
- if ( hooks && "get" in hooks && ( ret = hooks.get( elem, name ) ) !== null ) {
- return ret;
- }
-
- return elem[ name ];
- },
-
- propHooks: {
- tabIndex: {
- get: function( elem ) {
-
- // Support: IE <=9 - 11 only
- // elem.tabIndex doesn't always return the
- // correct value when it hasn't been explicitly set
- // https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript/
- // Use proper attribute retrieval(#12072)
- var tabindex = jQuery.find.attr( elem, "tabindex" );
-
- if ( tabindex ) {
- return parseInt( tabindex, 10 );
- }
-
- if (
- rfocusable.test( elem.nodeName ) ||
- rclickable.test( elem.nodeName ) &&
- elem.href
- ) {
- return 0;
- }
-
- return -1;
- }
- }
- },
-
- propFix: {
- "for": "htmlFor",
- "class": "className"
- }
-} );
-
-// Support: IE <=11 only
-// Accessing the selectedIndex property
-// forces the browser to respect setting selected
-// on the option
-// The getter ensures a default option is selected
-// when in an optgroup
-// eslint rule "no-unused-expressions" is disabled for this code
-// since it considers such accessions noop
-if ( !support.optSelected ) {
- jQuery.propHooks.selected = {
- get: function( elem ) {
-
- /* eslint no-unused-expressions: "off" */
-
- var parent = elem.parentNode;
- if ( parent && parent.parentNode ) {
- parent.parentNode.selectedIndex;
- }
- return null;
- },
- set: function( elem ) {
-
- /* eslint no-unused-expressions: "off" */
-
- var parent = elem.parentNode;
- if ( parent ) {
- parent.selectedIndex;
-
- if ( parent.parentNode ) {
- parent.parentNode.selectedIndex;
- }
- }
- }
- };
-}
-
-jQuery.each( [
- "tabIndex",
- "readOnly",
- "maxLength",
- "cellSpacing",
- "cellPadding",
- "rowSpan",
- "colSpan",
- "useMap",
- "frameBorder",
- "contentEditable"
-], function() {
- jQuery.propFix[ this.toLowerCase() ] = this;
-} );
-
-
-
-
- // Strip and collapse whitespace according to HTML spec
- // https://html.spec.whatwg.org/multipage/infrastructure.html#strip-and-collapse-whitespace
- function stripAndCollapse( value ) {
- var tokens = value.match( rnothtmlwhite ) || [];
- return tokens.join( " " );
- }
-
-
-function getClass( elem ) {
- return elem.getAttribute && elem.getAttribute( "class" ) || "";
-}
-
-jQuery.fn.extend( {
- addClass: function( value ) {
- var classes, elem, cur, curValue, clazz, j, finalValue,
- i = 0;
-
- if ( jQuery.isFunction( value ) ) {
- return this.each( function( j ) {
- jQuery( this ).addClass( value.call( this, j, getClass( this ) ) );
- } );
- }
-
- if ( typeof value === "string" && value ) {
- classes = value.match( rnothtmlwhite ) || [];
-
- while ( ( elem = this[ i++ ] ) ) {
- curValue = getClass( elem );
- cur = elem.nodeType === 1 && ( " " + stripAndCollapse( curValue ) + " " );
-
- if ( cur ) {
- j = 0;
- while ( ( clazz = classes[ j++ ] ) ) {
- if ( cur.indexOf( " " + clazz + " " ) < 0 ) {
- cur += clazz + " ";
- }
- }
-
- // Only assign if different to avoid unneeded rendering.
- finalValue = stripAndCollapse( cur );
- if ( curValue !== finalValue ) {
- elem.setAttribute( "class", finalValue );
- }
- }
- }
- }
-
- return this;
- },
-
- removeClass: function( value ) {
- var classes, elem, cur, curValue, clazz, j, finalValue,
- i = 0;
-
- if ( jQuery.isFunction( value ) ) {
- return this.each( function( j ) {
- jQuery( this ).removeClass( value.call( this, j, getClass( this ) ) );
- } );
- }
-
- if ( !arguments.length ) {
- return this.attr( "class", "" );
- }
-
- if ( typeof value === "string" && value ) {
- classes = value.match( rnothtmlwhite ) || [];
-
- while ( ( elem = this[ i++ ] ) ) {
- curValue = getClass( elem );
-
- // This expression is here for better compressibility (see addClass)
- cur = elem.nodeType === 1 && ( " " + stripAndCollapse( curValue ) + " " );
-
- if ( cur ) {
- j = 0;
- while ( ( clazz = classes[ j++ ] ) ) {
-
- // Remove *all* instances
- while ( cur.indexOf( " " + clazz + " " ) > -1 ) {
- cur = cur.replace( " " + clazz + " ", " " );
- }
- }
-
- // Only assign if different to avoid unneeded rendering.
- finalValue = stripAndCollapse( cur );
- if ( curValue !== finalValue ) {
- elem.setAttribute( "class", finalValue );
- }
- }
- }
- }
-
- return this;
- },
-
- toggleClass: function( value, stateVal ) {
- var type = typeof value;
-
- if ( typeof stateVal === "boolean" && type === "string" ) {
- return stateVal ? this.addClass( value ) : this.removeClass( value );
- }
-
- if ( jQuery.isFunction( value ) ) {
- return this.each( function( i ) {
- jQuery( this ).toggleClass(
- value.call( this, i, getClass( this ), stateVal ),
- stateVal
- );
- } );
- }
-
- return this.each( function() {
- var className, i, self, classNames;
-
- if ( type === "string" ) {
-
- // Toggle individual class names
- i = 0;
- self = jQuery( this );
- classNames = value.match( rnothtmlwhite ) || [];
-
- while ( ( className = classNames[ i++ ] ) ) {
-
- // Check each className given, space separated list
- if ( self.hasClass( className ) ) {
- self.removeClass( className );
- } else {
- self.addClass( className );
- }
- }
-
- // Toggle whole class name
- } else if ( value === undefined || type === "boolean" ) {
- className = getClass( this );
- if ( className ) {
-
- // Store className if set
- dataPriv.set( this, "__className__", className );
- }
-
- // If the element has a class name or if we're passed `false`,
- // then remove the whole classname (if there was one, the above saved it).
- // Otherwise bring back whatever was previously saved (if anything),
- // falling back to the empty string if nothing was stored.
- if ( this.setAttribute ) {
- this.setAttribute( "class",
- className || value === false ?
- "" :
- dataPriv.get( this, "__className__" ) || ""
- );
- }
- }
- } );
- },
-
- hasClass: function( selector ) {
- var className, elem,
- i = 0;
-
- className = " " + selector + " ";
- while ( ( elem = this[ i++ ] ) ) {
- if ( elem.nodeType === 1 &&
- ( " " + stripAndCollapse( getClass( elem ) ) + " " ).indexOf( className ) > -1 ) {
- return true;
- }
- }
-
- return false;
- }
-} );
-
-
-
-
-var rreturn = /\r/g;
-
-jQuery.fn.extend( {
- val: function( value ) {
- var hooks, ret, isFunction,
- elem = this[ 0 ];
-
- if ( !arguments.length ) {
- if ( elem ) {
- hooks = jQuery.valHooks[ elem.type ] ||
- jQuery.valHooks[ elem.nodeName.toLowerCase() ];
-
- if ( hooks &&
- "get" in hooks &&
- ( ret = hooks.get( elem, "value" ) ) !== undefined
- ) {
- return ret;
- }
-
- ret = elem.value;
-
- // Handle most common string cases
- if ( typeof ret === "string" ) {
- return ret.replace( rreturn, "" );
- }
-
- // Handle cases where value is null/undef or number
- return ret == null ? "" : ret;
- }
-
- return;
- }
-
- isFunction = jQuery.isFunction( value );
-
- return this.each( function( i ) {
- var val;
-
- if ( this.nodeType !== 1 ) {
- return;
- }
-
- if ( isFunction ) {
- val = value.call( this, i, jQuery( this ).val() );
- } else {
- val = value;
- }
-
- // Treat null/undefined as ""; convert numbers to string
- if ( val == null ) {
- val = "";
-
- } else if ( typeof val === "number" ) {
- val += "";
-
- } else if ( Array.isArray( val ) ) {
- val = jQuery.map( val, function( value ) {
- return value == null ? "" : value + "";
- } );
- }
-
- hooks = jQuery.valHooks[ this.type ] || jQuery.valHooks[ this.nodeName.toLowerCase() ];
-
- // If set returns undefined, fall back to normal setting
- if ( !hooks || !( "set" in hooks ) || hooks.set( this, val, "value" ) === undefined ) {
- this.value = val;
- }
- } );
- }
-} );
-
-jQuery.extend( {
- valHooks: {
- option: {
- get: function( elem ) {
-
- var val = jQuery.find.attr( elem, "value" );
- return val != null ?
- val :
-
- // Support: IE <=10 - 11 only
- // option.text throws exceptions (#14686, #14858)
- // Strip and collapse whitespace
- // https://html.spec.whatwg.org/#strip-and-collapse-whitespace
- stripAndCollapse( jQuery.text( elem ) );
- }
- },
- select: {
- get: function( elem ) {
- var value, option, i,
- options = elem.options,
- index = elem.selectedIndex,
- one = elem.type === "select-one",
- values = one ? null : [],
- max = one ? index + 1 : options.length;
-
- if ( index < 0 ) {
- i = max;
-
- } else {
- i = one ? index : 0;
- }
-
- // Loop through all the selected options
- for ( ; i < max; i++ ) {
- option = options[ i ];
-
- // Support: IE <=9 only
- // IE8-9 doesn't update selected after form reset (#2551)
- if ( ( option.selected || i === index ) &&
-
- // Don't return options that are disabled or in a disabled optgroup
- !option.disabled &&
- ( !option.parentNode.disabled ||
- !nodeName( option.parentNode, "optgroup" ) ) ) {
-
- // Get the specific value for the option
- value = jQuery( option ).val();
-
- // We don't need an array for one selects
- if ( one ) {
- return value;
- }
-
- // Multi-Selects return an array
- values.push( value );
- }
- }
-
- return values;
- },
-
- set: function( elem, value ) {
- var optionSet, option,
- options = elem.options,
- values = jQuery.makeArray( value ),
- i = options.length;
-
- while ( i-- ) {
- option = options[ i ];
-
- /* eslint-disable no-cond-assign */
-
- if ( option.selected =
- jQuery.inArray( jQuery.valHooks.option.get( option ), values ) > -1
- ) {
- optionSet = true;
- }
-
- /* eslint-enable no-cond-assign */
- }
-
- // Force browsers to behave consistently when non-matching value is set
- if ( !optionSet ) {
- elem.selectedIndex = -1;
- }
- return values;
- }
- }
- }
-} );
-
-// Radios and checkboxes getter/setter
-jQuery.each( [ "radio", "checkbox" ], function() {
- jQuery.valHooks[ this ] = {
- set: function( elem, value ) {
- if ( Array.isArray( value ) ) {
- return ( elem.checked = jQuery.inArray( jQuery( elem ).val(), value ) > -1 );
- }
- }
- };
- if ( !support.checkOn ) {
- jQuery.valHooks[ this ].get = function( elem ) {
- return elem.getAttribute( "value" ) === null ? "on" : elem.value;
- };
- }
-} );
-
-
-
-
-// Return jQuery for attributes-only inclusion
-
-
-var rfocusMorph = /^(?:focusinfocus|focusoutblur)$/;
-
-jQuery.extend( jQuery.event, {
-
- trigger: function( event, data, elem, onlyHandlers ) {
-
- var i, cur, tmp, bubbleType, ontype, handle, special,
- eventPath = [ elem || document ],
- type = hasOwn.call( event, "type" ) ? event.type : event,
- namespaces = hasOwn.call( event, "namespace" ) ? event.namespace.split( "." ) : [];
-
- cur = tmp = elem = elem || document;
-
- // Don't do events on text and comment nodes
- if ( elem.nodeType === 3 || elem.nodeType === 8 ) {
- return;
- }
-
- // focus/blur morphs to focusin/out; ensure we're not firing them right now
- if ( rfocusMorph.test( type + jQuery.event.triggered ) ) {
- return;
- }
-
- if ( type.indexOf( "." ) > -1 ) {
-
- // Namespaced trigger; create a regexp to match event type in handle()
- namespaces = type.split( "." );
- type = namespaces.shift();
- namespaces.sort();
- }
- ontype = type.indexOf( ":" ) < 0 && "on" + type;
-
- // Caller can pass in a jQuery.Event object, Object, or just an event type string
- event = event[ jQuery.expando ] ?
- event :
- new jQuery.Event( type, typeof event === "object" && event );
-
- // Trigger bitmask: & 1 for native handlers; & 2 for jQuery (always true)
- event.isTrigger = onlyHandlers ? 2 : 3;
- event.namespace = namespaces.join( "." );
- event.rnamespace = event.namespace ?
- new RegExp( "(^|\\.)" + namespaces.join( "\\.(?:.*\\.|)" ) + "(\\.|$)" ) :
- null;
-
- // Clean up the event in case it is being reused
- event.result = undefined;
- if ( !event.target ) {
- event.target = elem;
- }
-
- // Clone any incoming data and prepend the event, creating the handler arg list
- data = data == null ?
- [ event ] :
- jQuery.makeArray( data, [ event ] );
-
- // Allow special events to draw outside the lines
- special = jQuery.event.special[ type ] || {};
- if ( !onlyHandlers && special.trigger && special.trigger.apply( elem, data ) === false ) {
- return;
- }
-
- // Determine event propagation path in advance, per W3C events spec (#9951)
- // Bubble up to document, then to window; watch for a global ownerDocument var (#9724)
- if ( !onlyHandlers && !special.noBubble && !jQuery.isWindow( elem ) ) {
-
- bubbleType = special.delegateType || type;
- if ( !rfocusMorph.test( bubbleType + type ) ) {
- cur = cur.parentNode;
- }
- for ( ; cur; cur = cur.parentNode ) {
- eventPath.push( cur );
- tmp = cur;
- }
-
- // Only add window if we got to document (e.g., not plain obj or detached DOM)
- if ( tmp === ( elem.ownerDocument || document ) ) {
- eventPath.push( tmp.defaultView || tmp.parentWindow || window );
- }
- }
-
- // Fire handlers on the event path
- i = 0;
- while ( ( cur = eventPath[ i++ ] ) && !event.isPropagationStopped() ) {
-
- event.type = i > 1 ?
- bubbleType :
- special.bindType || type;
-
- // jQuery handler
- handle = ( dataPriv.get( cur, "events" ) || {} )[ event.type ] &&
- dataPriv.get( cur, "handle" );
- if ( handle ) {
- handle.apply( cur, data );
- }
-
- // Native handler
- handle = ontype && cur[ ontype ];
- if ( handle && handle.apply && acceptData( cur ) ) {
- event.result = handle.apply( cur, data );
- if ( event.result === false ) {
- event.preventDefault();
- }
- }
- }
- event.type = type;
-
- // If nobody prevented the default action, do it now
- if ( !onlyHandlers && !event.isDefaultPrevented() ) {
-
- if ( ( !special._default ||
- special._default.apply( eventPath.pop(), data ) === false ) &&
- acceptData( elem ) ) {
-
- // Call a native DOM method on the target with the same name as the event.
- // Don't do default actions on window, that's where global variables be (#6170)
- if ( ontype && jQuery.isFunction( elem[ type ] ) && !jQuery.isWindow( elem ) ) {
-
- // Don't re-trigger an onFOO event when we call its FOO() method
- tmp = elem[ ontype ];
-
- if ( tmp ) {
- elem[ ontype ] = null;
- }
-
- // Prevent re-triggering of the same event, since we already bubbled it above
- jQuery.event.triggered = type;
- elem[ type ]();
- jQuery.event.triggered = undefined;
-
- if ( tmp ) {
- elem[ ontype ] = tmp;
- }
- }
- }
- }
-
- return event.result;
- },
-
- // Piggyback on a donor event to simulate a different one
- // Used only for `focus(in | out)` events
- simulate: function( type, elem, event ) {
- var e = jQuery.extend(
- new jQuery.Event(),
- event,
- {
- type: type,
- isSimulated: true
- }
- );
-
- jQuery.event.trigger( e, null, elem );
- }
-
-} );
-
-jQuery.fn.extend( {
-
- trigger: function( type, data ) {
- return this.each( function() {
- jQuery.event.trigger( type, data, this );
- } );
- },
- triggerHandler: function( type, data ) {
- var elem = this[ 0 ];
- if ( elem ) {
- return jQuery.event.trigger( type, data, elem, true );
- }
- }
-} );
-
-
-jQuery.each( ( "blur focus focusin focusout resize scroll click dblclick " +
- "mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave " +
- "change select submit keydown keypress keyup contextmenu" ).split( " " ),
- function( i, name ) {
-
- // Handle event binding
- jQuery.fn[ name ] = function( data, fn ) {
- return arguments.length > 0 ?
- this.on( name, null, data, fn ) :
- this.trigger( name );
- };
-} );
-
-jQuery.fn.extend( {
- hover: function( fnOver, fnOut ) {
- return this.mouseenter( fnOver ).mouseleave( fnOut || fnOver );
- }
-} );
-
-
-
-
-support.focusin = "onfocusin" in window;
-
-
-// Support: Firefox <=44
-// Firefox doesn't have focus(in | out) events
-// Related ticket - https://bugzilla.mozilla.org/show_bug.cgi?id=687787
-//
-// Support: Chrome <=48 - 49, Safari <=9.0 - 9.1
-// focus(in | out) events fire after focus & blur events,
-// which is spec violation - http://www.w3.org/TR/DOM-Level-3-Events/#events-focusevent-event-order
-// Related ticket - https://bugs.chromium.org/p/chromium/issues/detail?id=449857
-if ( !support.focusin ) {
- jQuery.each( { focus: "focusin", blur: "focusout" }, function( orig, fix ) {
-
- // Attach a single capturing handler on the document while someone wants focusin/focusout
- var handler = function( event ) {
- jQuery.event.simulate( fix, event.target, jQuery.event.fix( event ) );
- };
-
- jQuery.event.special[ fix ] = {
- setup: function() {
- var doc = this.ownerDocument || this,
- attaches = dataPriv.access( doc, fix );
-
- if ( !attaches ) {
- doc.addEventListener( orig, handler, true );
- }
- dataPriv.access( doc, fix, ( attaches || 0 ) + 1 );
- },
- teardown: function() {
- var doc = this.ownerDocument || this,
- attaches = dataPriv.access( doc, fix ) - 1;
-
- if ( !attaches ) {
- doc.removeEventListener( orig, handler, true );
- dataPriv.remove( doc, fix );
-
- } else {
- dataPriv.access( doc, fix, attaches );
- }
- }
- };
- } );
-}
-var location = window.location;
-
-var nonce = jQuery.now();
-
-var rquery = ( /\?/ );
-
-
-
-// Cross-browser xml parsing
-jQuery.parseXML = function( data ) {
- var xml;
- if ( !data || typeof data !== "string" ) {
- return null;
- }
-
- // Support: IE 9 - 11 only
- // IE throws on parseFromString with invalid input.
- try {
- xml = ( new window.DOMParser() ).parseFromString( data, "text/xml" );
- } catch ( e ) {
- xml = undefined;
- }
-
- if ( !xml || xml.getElementsByTagName( "parsererror" ).length ) {
- jQuery.error( "Invalid XML: " + data );
- }
- return xml;
-};
-
-
-var
- rbracket = /\[\]$/,
- rCRLF = /\r?\n/g,
- rsubmitterTypes = /^(?:submit|button|image|reset|file)$/i,
- rsubmittable = /^(?:input|select|textarea|keygen)/i;
-
-function buildParams( prefix, obj, traditional, add ) {
- var name;
-
- if ( Array.isArray( obj ) ) {
-
- // Serialize array item.
- jQuery.each( obj, function( i, v ) {
- if ( traditional || rbracket.test( prefix ) ) {
-
- // Treat each array item as a scalar.
- add( prefix, v );
-
- } else {
-
- // Item is non-scalar (array or object), encode its numeric index.
- buildParams(
- prefix + "[" + ( typeof v === "object" && v != null ? i : "" ) + "]",
- v,
- traditional,
- add
- );
- }
- } );
-
- } else if ( !traditional && jQuery.type( obj ) === "object" ) {
-
- // Serialize object item.
- for ( name in obj ) {
- buildParams( prefix + "[" + name + "]", obj[ name ], traditional, add );
- }
-
- } else {
-
- // Serialize scalar item.
- add( prefix, obj );
- }
-}
-
-// Serialize an array of form elements or a set of
-// key/values into a query string
-jQuery.param = function( a, traditional ) {
- var prefix,
- s = [],
- add = function( key, valueOrFunction ) {
-
- // If value is a function, invoke it and use its return value
- var value = jQuery.isFunction( valueOrFunction ) ?
- valueOrFunction() :
- valueOrFunction;
-
- s[ s.length ] = encodeURIComponent( key ) + "=" +
- encodeURIComponent( value == null ? "" : value );
- };
-
- // If an array was passed in, assume that it is an array of form elements.
- if ( Array.isArray( a ) || ( a.jquery && !jQuery.isPlainObject( a ) ) ) {
-
- // Serialize the form elements
- jQuery.each( a, function() {
- add( this.name, this.value );
- } );
-
- } else {
-
- // If traditional, encode the "old" way (the way 1.3.2 or older
- // did it), otherwise encode params recursively.
- for ( prefix in a ) {
- buildParams( prefix, a[ prefix ], traditional, add );
- }
- }
-
- // Return the resulting serialization
- return s.join( "&" );
-};
-
-jQuery.fn.extend( {
- serialize: function() {
- return jQuery.param( this.serializeArray() );
- },
- serializeArray: function() {
- return this.map( function() {
-
- // Can add propHook for "elements" to filter or add form elements
- var elements = jQuery.prop( this, "elements" );
- return elements ? jQuery.makeArray( elements ) : this;
- } )
- .filter( function() {
- var type = this.type;
-
- // Use .is( ":disabled" ) so that fieldset[disabled] works
- return this.name && !jQuery( this ).is( ":disabled" ) &&
- rsubmittable.test( this.nodeName ) && !rsubmitterTypes.test( type ) &&
- ( this.checked || !rcheckableType.test( type ) );
- } )
- .map( function( i, elem ) {
- var val = jQuery( this ).val();
-
- if ( val == null ) {
- return null;
- }
-
- if ( Array.isArray( val ) ) {
- return jQuery.map( val, function( val ) {
- return { name: elem.name, value: val.replace( rCRLF, "\r\n" ) };
- } );
- }
-
- return { name: elem.name, value: val.replace( rCRLF, "\r\n" ) };
- } ).get();
- }
-} );
-
-
-var
- r20 = /%20/g,
- rhash = /#.*$/,
- rantiCache = /([?&])_=[^&]*/,
- rheaders = /^(.*?):[ \t]*([^\r\n]*)$/mg,
-
- // #7653, #8125, #8152: local protocol detection
- rlocalProtocol = /^(?:about|app|app-storage|.+-extension|file|res|widget):$/,
- rnoContent = /^(?:GET|HEAD)$/,
- rprotocol = /^\/\//,
-
- /* Prefilters
- * 1) They are useful to introduce custom dataTypes (see ajax/jsonp.js for an example)
- * 2) These are called:
- * - BEFORE asking for a transport
- * - AFTER param serialization (s.data is a string if s.processData is true)
- * 3) key is the dataType
- * 4) the catchall symbol "*" can be used
- * 5) execution will start with transport dataType and THEN continue down to "*" if needed
- */
- prefilters = {},
-
- /* Transports bindings
- * 1) key is the dataType
- * 2) the catchall symbol "*" can be used
- * 3) selection will start with transport dataType and THEN go to "*" if needed
- */
- transports = {},
-
- // Avoid comment-prolog char sequence (#10098); must appease lint and evade compression
- allTypes = "*/".concat( "*" ),
-
- // Anchor tag for parsing the document origin
- originAnchor = document.createElement( "a" );
- originAnchor.href = location.href;
-
-// Base "constructor" for jQuery.ajaxPrefilter and jQuery.ajaxTransport
-function addToPrefiltersOrTransports( structure ) {
-
- // dataTypeExpression is optional and defaults to "*"
- return function( dataTypeExpression, func ) {
-
- if ( typeof dataTypeExpression !== "string" ) {
- func = dataTypeExpression;
- dataTypeExpression = "*";
- }
-
- var dataType,
- i = 0,
- dataTypes = dataTypeExpression.toLowerCase().match( rnothtmlwhite ) || [];
-
- if ( jQuery.isFunction( func ) ) {
-
- // For each dataType in the dataTypeExpression
- while ( ( dataType = dataTypes[ i++ ] ) ) {
-
- // Prepend if requested
- if ( dataType[ 0 ] === "+" ) {
- dataType = dataType.slice( 1 ) || "*";
- ( structure[ dataType ] = structure[ dataType ] || [] ).unshift( func );
-
- // Otherwise append
- } else {
- ( structure[ dataType ] = structure[ dataType ] || [] ).push( func );
- }
- }
- }
- };
-}
-
-// Base inspection function for prefilters and transports
-function inspectPrefiltersOrTransports( structure, options, originalOptions, jqXHR ) {
-
- var inspected = {},
- seekingTransport = ( structure === transports );
-
- function inspect( dataType ) {
- var selected;
- inspected[ dataType ] = true;
- jQuery.each( structure[ dataType ] || [], function( _, prefilterOrFactory ) {
- var dataTypeOrTransport = prefilterOrFactory( options, originalOptions, jqXHR );
- if ( typeof dataTypeOrTransport === "string" &&
- !seekingTransport && !inspected[ dataTypeOrTransport ] ) {
-
- options.dataTypes.unshift( dataTypeOrTransport );
- inspect( dataTypeOrTransport );
- return false;
- } else if ( seekingTransport ) {
- return !( selected = dataTypeOrTransport );
- }
- } );
- return selected;
- }
-
- return inspect( options.dataTypes[ 0 ] ) || !inspected[ "*" ] && inspect( "*" );
-}
-
-// A special extend for ajax options
-// that takes "flat" options (not to be deep extended)
-// Fixes #9887
-function ajaxExtend( target, src ) {
- var key, deep,
- flatOptions = jQuery.ajaxSettings.flatOptions || {};
-
- for ( key in src ) {
- if ( src[ key ] !== undefined ) {
- ( flatOptions[ key ] ? target : ( deep || ( deep = {} ) ) )[ key ] = src[ key ];
- }
- }
- if ( deep ) {
- jQuery.extend( true, target, deep );
- }
-
- return target;
-}
-
-/* Handles responses to an ajax request:
- * - finds the right dataType (mediates between content-type and expected dataType)
- * - returns the corresponding response
- */
-function ajaxHandleResponses( s, jqXHR, responses ) {
-
- var ct, type, finalDataType, firstDataType,
- contents = s.contents,
- dataTypes = s.dataTypes;
-
- // Remove auto dataType and get content-type in the process
- while ( dataTypes[ 0 ] === "*" ) {
- dataTypes.shift();
- if ( ct === undefined ) {
- ct = s.mimeType || jqXHR.getResponseHeader( "Content-Type" );
- }
- }
-
- // Check if we're dealing with a known content-type
- if ( ct ) {
- for ( type in contents ) {
- if ( contents[ type ] && contents[ type ].test( ct ) ) {
- dataTypes.unshift( type );
- break;
- }
- }
- }
-
- // Check to see if we have a response for the expected dataType
- if ( dataTypes[ 0 ] in responses ) {
- finalDataType = dataTypes[ 0 ];
- } else {
-
- // Try convertible dataTypes
- for ( type in responses ) {
- if ( !dataTypes[ 0 ] || s.converters[ type + " " + dataTypes[ 0 ] ] ) {
- finalDataType = type;
- break;
- }
- if ( !firstDataType ) {
- firstDataType = type;
- }
- }
-
- // Or just use first one
- finalDataType = finalDataType || firstDataType;
- }
-
- // If we found a dataType
- // We add the dataType to the list if needed
- // and return the corresponding response
- if ( finalDataType ) {
- if ( finalDataType !== dataTypes[ 0 ] ) {
- dataTypes.unshift( finalDataType );
- }
- return responses[ finalDataType ];
- }
-}
-
-/* Chain conversions given the request and the original response
- * Also sets the responseXXX fields on the jqXHR instance
- */
-function ajaxConvert( s, response, jqXHR, isSuccess ) {
- var conv2, current, conv, tmp, prev,
- converters = {},
-
- // Work with a copy of dataTypes in case we need to modify it for conversion
- dataTypes = s.dataTypes.slice();
-
- // Create converters map with lowercased keys
- if ( dataTypes[ 1 ] ) {
- for ( conv in s.converters ) {
- converters[ conv.toLowerCase() ] = s.converters[ conv ];
- }
- }
-
- current = dataTypes.shift();
-
- // Convert to each sequential dataType
- while ( current ) {
-
- if ( s.responseFields[ current ] ) {
- jqXHR[ s.responseFields[ current ] ] = response;
- }
-
- // Apply the dataFilter if provided
- if ( !prev && isSuccess && s.dataFilter ) {
- response = s.dataFilter( response, s.dataType );
- }
-
- prev = current;
- current = dataTypes.shift();
-
- if ( current ) {
-
- // There's only work to do if current dataType is non-auto
- if ( current === "*" ) {
-
- current = prev;
-
- // Convert response if prev dataType is non-auto and differs from current
- } else if ( prev !== "*" && prev !== current ) {
-
- // Seek a direct converter
- conv = converters[ prev + " " + current ] || converters[ "* " + current ];
-
- // If none found, seek a pair
- if ( !conv ) {
- for ( conv2 in converters ) {
-
- // If conv2 outputs current
- tmp = conv2.split( " " );
- if ( tmp[ 1 ] === current ) {
-
- // If prev can be converted to accepted input
- conv = converters[ prev + " " + tmp[ 0 ] ] ||
- converters[ "* " + tmp[ 0 ] ];
- if ( conv ) {
-
- // Condense equivalence converters
- if ( conv === true ) {
- conv = converters[ conv2 ];
-
- // Otherwise, insert the intermediate dataType
- } else if ( converters[ conv2 ] !== true ) {
- current = tmp[ 0 ];
- dataTypes.unshift( tmp[ 1 ] );
- }
- break;
- }
- }
- }
- }
-
- // Apply converter (if not an equivalence)
- if ( conv !== true ) {
-
- // Unless errors are allowed to bubble, catch and return them
- if ( conv && s.throws ) {
- response = conv( response );
- } else {
- try {
- response = conv( response );
- } catch ( e ) {
- return {
- state: "parsererror",
- error: conv ? e : "No conversion from " + prev + " to " + current
- };
- }
- }
- }
- }
- }
- }
-
- return { state: "success", data: response };
-}
-
-jQuery.extend( {
-
- // Counter for holding the number of active queries
- active: 0,
-
- // Last-Modified header cache for next request
- lastModified: {},
- etag: {},
-
- ajaxSettings: {
- url: location.href,
- type: "GET",
- isLocal: rlocalProtocol.test( location.protocol ),
- global: true,
- processData: true,
- async: true,
- contentType: "application/x-www-form-urlencoded; charset=UTF-8",
-
- /*
- timeout: 0,
- data: null,
- dataType: null,
- username: null,
- password: null,
- cache: null,
- throws: false,
- traditional: false,
- headers: {},
- */
-
- accepts: {
- "*": allTypes,
- text: "text/plain",
- html: "text/html",
- xml: "application/xml, text/xml",
- json: "application/json, text/javascript"
- },
-
- contents: {
- xml: /\bxml\b/,
- html: /\bhtml/,
- json: /\bjson\b/
- },
-
- responseFields: {
- xml: "responseXML",
- text: "responseText",
- json: "responseJSON"
- },
-
- // Data converters
- // Keys separate source (or catchall "*") and destination types with a single space
- converters: {
-
- // Convert anything to text
- "* text": String,
-
- // Text to html (true = no transformation)
- "text html": true,
-
- // Evaluate text as a json expression
- "text json": JSON.parse,
-
- // Parse text as xml
- "text xml": jQuery.parseXML
- },
-
- // For options that shouldn't be deep extended:
- // you can add your own custom options here if
- // and when you create one that shouldn't be
- // deep extended (see ajaxExtend)
- flatOptions: {
- url: true,
- context: true
- }
- },
-
- // Creates a full fledged settings object into target
- // with both ajaxSettings and settings fields.
- // If target is omitted, writes into ajaxSettings.
- ajaxSetup: function( target, settings ) {
- return settings ?
-
- // Building a settings object
- ajaxExtend( ajaxExtend( target, jQuery.ajaxSettings ), settings ) :
-
- // Extending ajaxSettings
- ajaxExtend( jQuery.ajaxSettings, target );
- },
-
- ajaxPrefilter: addToPrefiltersOrTransports( prefilters ),
- ajaxTransport: addToPrefiltersOrTransports( transports ),
-
- // Main method
- ajax: function( url, options ) {
-
- // If url is an object, simulate pre-1.5 signature
- if ( typeof url === "object" ) {
- options = url;
- url = undefined;
- }
-
- // Force options to be an object
- options = options || {};
-
- var transport,
-
- // URL without anti-cache param
- cacheURL,
-
- // Response headers
- responseHeadersString,
- responseHeaders,
-
- // timeout handle
- timeoutTimer,
-
- // Url cleanup var
- urlAnchor,
-
- // Request state (becomes false upon send and true upon completion)
- completed,
-
- // To know if global events are to be dispatched
- fireGlobals,
-
- // Loop variable
- i,
-
- // uncached part of the url
- uncached,
-
- // Create the final options object
- s = jQuery.ajaxSetup( {}, options ),
-
- // Callbacks context
- callbackContext = s.context || s,
-
- // Context for global events is callbackContext if it is a DOM node or jQuery collection
- globalEventContext = s.context &&
- ( callbackContext.nodeType || callbackContext.jquery ) ?
- jQuery( callbackContext ) :
- jQuery.event,
-
- // Deferreds
- deferred = jQuery.Deferred(),
- completeDeferred = jQuery.Callbacks( "once memory" ),
-
- // Status-dependent callbacks
- statusCode = s.statusCode || {},
-
- // Headers (they are sent all at once)
- requestHeaders = {},
- requestHeadersNames = {},
-
- // Default abort message
- strAbort = "canceled",
-
- // Fake xhr
- jqXHR = {
- readyState: 0,
-
- // Builds headers hashtable if needed
- getResponseHeader: function( key ) {
- var match;
- if ( completed ) {
- if ( !responseHeaders ) {
- responseHeaders = {};
- while ( ( match = rheaders.exec( responseHeadersString ) ) ) {
- responseHeaders[ match[ 1 ].toLowerCase() ] = match[ 2 ];
- }
- }
- match = responseHeaders[ key.toLowerCase() ];
- }
- return match == null ? null : match;
- },
-
- // Raw string
- getAllResponseHeaders: function() {
- return completed ? responseHeadersString : null;
- },
-
- // Caches the header
- setRequestHeader: function( name, value ) {
- if ( completed == null ) {
- name = requestHeadersNames[ name.toLowerCase() ] =
- requestHeadersNames[ name.toLowerCase() ] || name;
- requestHeaders[ name ] = value;
- }
- return this;
- },
-
- // Overrides response content-type header
- overrideMimeType: function( type ) {
- if ( completed == null ) {
- s.mimeType = type;
- }
- return this;
- },
-
- // Status-dependent callbacks
- statusCode: function( map ) {
- var code;
- if ( map ) {
- if ( completed ) {
-
- // Execute the appropriate callbacks
- jqXHR.always( map[ jqXHR.status ] );
- } else {
-
- // Lazy-add the new callbacks in a way that preserves old ones
- for ( code in map ) {
- statusCode[ code ] = [ statusCode[ code ], map[ code ] ];
- }
- }
- }
- return this;
- },
-
- // Cancel the request
- abort: function( statusText ) {
- var finalText = statusText || strAbort;
- if ( transport ) {
- transport.abort( finalText );
- }
- done( 0, finalText );
- return this;
- }
- };
-
- // Attach deferreds
- deferred.promise( jqXHR );
-
- // Add protocol if not provided (prefilters might expect it)
- // Handle falsy url in the settings object (#10093: consistency with old signature)
- // We also use the url parameter if available
- s.url = ( ( url || s.url || location.href ) + "" )
- .replace( rprotocol, location.protocol + "//" );
-
- // Alias method option to type as per ticket #12004
- s.type = options.method || options.type || s.method || s.type;
-
- // Extract dataTypes list
- s.dataTypes = ( s.dataType || "*" ).toLowerCase().match( rnothtmlwhite ) || [ "" ];
-
- // A cross-domain request is in order when the origin doesn't match the current origin.
- if ( s.crossDomain == null ) {
- urlAnchor = document.createElement( "a" );
-
- // Support: IE <=8 - 11, Edge 12 - 13
- // IE throws exception on accessing the href property if url is malformed,
- // e.g. http://example.com:80x/
- try {
- urlAnchor.href = s.url;
-
- // Support: IE <=8 - 11 only
- // Anchor's host property isn't correctly set when s.url is relative
- urlAnchor.href = urlAnchor.href;
- s.crossDomain = originAnchor.protocol + "//" + originAnchor.host !==
- urlAnchor.protocol + "//" + urlAnchor.host;
- } catch ( e ) {
-
- // If there is an error parsing the URL, assume it is crossDomain,
- // it can be rejected by the transport if it is invalid
- s.crossDomain = true;
- }
- }
-
- // Convert data if not already a string
- if ( s.data && s.processData && typeof s.data !== "string" ) {
- s.data = jQuery.param( s.data, s.traditional );
- }
-
- // Apply prefilters
- inspectPrefiltersOrTransports( prefilters, s, options, jqXHR );
-
- // If request was aborted inside a prefilter, stop there
- if ( completed ) {
- return jqXHR;
- }
-
- // We can fire global events as of now if asked to
- // Don't fire events if jQuery.event is undefined in an AMD-usage scenario (#15118)
- fireGlobals = jQuery.event && s.global;
-
- // Watch for a new set of requests
- if ( fireGlobals && jQuery.active++ === 0 ) {
- jQuery.event.trigger( "ajaxStart" );
- }
-
- // Uppercase the type
- s.type = s.type.toUpperCase();
-
- // Determine if request has content
- s.hasContent = !rnoContent.test( s.type );
-
- // Save the URL in case we're toying with the If-Modified-Since
- // and/or If-None-Match header later on
- // Remove hash to simplify url manipulation
- cacheURL = s.url.replace( rhash, "" );
-
- // More options handling for requests with no content
- if ( !s.hasContent ) {
-
- // Remember the hash so we can put it back
- uncached = s.url.slice( cacheURL.length );
-
- // If data is available, append data to url
- if ( s.data ) {
- cacheURL += ( rquery.test( cacheURL ) ? "&" : "?" ) + s.data;
-
- // #9682: remove data so that it's not used in an eventual retry
- delete s.data;
- }
-
- // Add or update anti-cache param if needed
- if ( s.cache === false ) {
- cacheURL = cacheURL.replace( rantiCache, "$1" );
- uncached = ( rquery.test( cacheURL ) ? "&" : "?" ) + "_=" + ( nonce++ ) + uncached;
- }
-
- // Put hash and anti-cache on the URL that will be requested (gh-1732)
- s.url = cacheURL + uncached;
-
- // Change '%20' to '+' if this is encoded form body content (gh-2658)
- } else if ( s.data && s.processData &&
- ( s.contentType || "" ).indexOf( "application/x-www-form-urlencoded" ) === 0 ) {
- s.data = s.data.replace( r20, "+" );
- }
-
- // Set the If-Modified-Since and/or If-None-Match header, if in ifModified mode.
- if ( s.ifModified ) {
- if ( jQuery.lastModified[ cacheURL ] ) {
- jqXHR.setRequestHeader( "If-Modified-Since", jQuery.lastModified[ cacheURL ] );
- }
- if ( jQuery.etag[ cacheURL ] ) {
- jqXHR.setRequestHeader( "If-None-Match", jQuery.etag[ cacheURL ] );
- }
- }
-
- // Set the correct header, if data is being sent
- if ( s.data && s.hasContent && s.contentType !== false || options.contentType ) {
- jqXHR.setRequestHeader( "Content-Type", s.contentType );
- }
-
- // Set the Accepts header for the server, depending on the dataType
- jqXHR.setRequestHeader(
- "Accept",
- s.dataTypes[ 0 ] && s.accepts[ s.dataTypes[ 0 ] ] ?
- s.accepts[ s.dataTypes[ 0 ] ] +
- ( s.dataTypes[ 0 ] !== "*" ? ", " + allTypes + "; q=0.01" : "" ) :
- s.accepts[ "*" ]
- );
-
- // Check for headers option
- for ( i in s.headers ) {
- jqXHR.setRequestHeader( i, s.headers[ i ] );
- }
-
- // Allow custom headers/mimetypes and early abort
- if ( s.beforeSend &&
- ( s.beforeSend.call( callbackContext, jqXHR, s ) === false || completed ) ) {
-
- // Abort if not done already and return
- return jqXHR.abort();
- }
-
- // Aborting is no longer a cancellation
- strAbort = "abort";
-
- // Install callbacks on deferreds
- completeDeferred.add( s.complete );
- jqXHR.done( s.success );
- jqXHR.fail( s.error );
-
- // Get transport
- transport = inspectPrefiltersOrTransports( transports, s, options, jqXHR );
-
- // If no transport, we auto-abort
- if ( !transport ) {
- done( -1, "No Transport" );
- } else {
- jqXHR.readyState = 1;
-
- // Send global event
- if ( fireGlobals ) {
- globalEventContext.trigger( "ajaxSend", [ jqXHR, s ] );
- }
-
- // If request was aborted inside ajaxSend, stop there
- if ( completed ) {
- return jqXHR;
- }
-
- // Timeout
- if ( s.async && s.timeout > 0 ) {
- timeoutTimer = window.setTimeout( function() {
- jqXHR.abort( "timeout" );
- }, s.timeout );
- }
-
- try {
- completed = false;
- transport.send( requestHeaders, done );
- } catch ( e ) {
-
- // Rethrow post-completion exceptions
- if ( completed ) {
- throw e;
- }
-
- // Propagate others as results
- done( -1, e );
- }
- }
-
- // Callback for when everything is done
- function done( status, nativeStatusText, responses, headers ) {
- var isSuccess, success, error, response, modified,
- statusText = nativeStatusText;
-
- // Ignore repeat invocations
- if ( completed ) {
- return;
- }
-
- completed = true;
-
- // Clear timeout if it exists
- if ( timeoutTimer ) {
- window.clearTimeout( timeoutTimer );
- }
-
- // Dereference transport for early garbage collection
- // (no matter how long the jqXHR object will be used)
- transport = undefined;
-
- // Cache response headers
- responseHeadersString = headers || "";
-
- // Set readyState
- jqXHR.readyState = status > 0 ? 4 : 0;
-
- // Determine if successful
- isSuccess = status >= 200 && status < 300 || status === 304;
-
- // Get response data
- if ( responses ) {
- response = ajaxHandleResponses( s, jqXHR, responses );
- }
-
- // Convert no matter what (that way responseXXX fields are always set)
- response = ajaxConvert( s, response, jqXHR, isSuccess );
-
- // If successful, handle type chaining
- if ( isSuccess ) {
-
- // Set the If-Modified-Since and/or If-None-Match header, if in ifModified mode.
- if ( s.ifModified ) {
- modified = jqXHR.getResponseHeader( "Last-Modified" );
- if ( modified ) {
- jQuery.lastModified[ cacheURL ] = modified;
- }
- modified = jqXHR.getResponseHeader( "etag" );
- if ( modified ) {
- jQuery.etag[ cacheURL ] = modified;
- }
- }
-
- // if no content
- if ( status === 204 || s.type === "HEAD" ) {
- statusText = "nocontent";
-
- // if not modified
- } else if ( status === 304 ) {
- statusText = "notmodified";
-
- // If we have data, let's convert it
- } else {
- statusText = response.state;
- success = response.data;
- error = response.error;
- isSuccess = !error;
- }
- } else {
-
- // Extract error from statusText and normalize for non-aborts
- error = statusText;
- if ( status || !statusText ) {
- statusText = "error";
- if ( status < 0 ) {
- status = 0;
- }
- }
- }
-
- // Set data for the fake xhr object
- jqXHR.status = status;
- jqXHR.statusText = ( nativeStatusText || statusText ) + "";
-
- // Success/Error
- if ( isSuccess ) {
- deferred.resolveWith( callbackContext, [ success, statusText, jqXHR ] );
- } else {
- deferred.rejectWith( callbackContext, [ jqXHR, statusText, error ] );
- }
-
- // Status-dependent callbacks
- jqXHR.statusCode( statusCode );
- statusCode = undefined;
-
- if ( fireGlobals ) {
- globalEventContext.trigger( isSuccess ? "ajaxSuccess" : "ajaxError",
- [ jqXHR, s, isSuccess ? success : error ] );
- }
-
- // Complete
- completeDeferred.fireWith( callbackContext, [ jqXHR, statusText ] );
-
- if ( fireGlobals ) {
- globalEventContext.trigger( "ajaxComplete", [ jqXHR, s ] );
-
- // Handle the global AJAX counter
- if ( !( --jQuery.active ) ) {
- jQuery.event.trigger( "ajaxStop" );
- }
- }
- }
-
- return jqXHR;
- },
-
- getJSON: function( url, data, callback ) {
- return jQuery.get( url, data, callback, "json" );
- },
-
- getScript: function( url, callback ) {
- return jQuery.get( url, undefined, callback, "script" );
- }
-} );
-
-jQuery.each( [ "get", "post" ], function( i, method ) {
- jQuery[ method ] = function( url, data, callback, type ) {
-
- // Shift arguments if data argument was omitted
- if ( jQuery.isFunction( data ) ) {
- type = type || callback;
- callback = data;
- data = undefined;
- }
-
- // The url can be an options object (which then must have .url)
- return jQuery.ajax( jQuery.extend( {
- url: url,
- type: method,
- dataType: type,
- data: data,
- success: callback
- }, jQuery.isPlainObject( url ) && url ) );
- };
-} );
-
-
-jQuery._evalUrl = function( url ) {
- return jQuery.ajax( {
- url: url,
-
- // Make this explicit, since user can override this through ajaxSetup (#11264)
- type: "GET",
- dataType: "script",
- cache: true,
- async: false,
- global: false,
- "throws": true
- } );
-};
-
-
-jQuery.fn.extend( {
- wrapAll: function( html ) {
- var wrap;
-
- if ( this[ 0 ] ) {
- if ( jQuery.isFunction( html ) ) {
- html = html.call( this[ 0 ] );
- }
-
- // The elements to wrap the target around
- wrap = jQuery( html, this[ 0 ].ownerDocument ).eq( 0 ).clone( true );
-
- if ( this[ 0 ].parentNode ) {
- wrap.insertBefore( this[ 0 ] );
- }
-
- wrap.map( function() {
- var elem = this;
-
- while ( elem.firstElementChild ) {
- elem = elem.firstElementChild;
- }
-
- return elem;
- } ).append( this );
- }
-
- return this;
- },
-
- wrapInner: function( html ) {
- if ( jQuery.isFunction( html ) ) {
- return this.each( function( i ) {
- jQuery( this ).wrapInner( html.call( this, i ) );
- } );
- }
-
- return this.each( function() {
- var self = jQuery( this ),
- contents = self.contents();
-
- if ( contents.length ) {
- contents.wrapAll( html );
-
- } else {
- self.append( html );
- }
- } );
- },
-
- wrap: function( html ) {
- var isFunction = jQuery.isFunction( html );
-
- return this.each( function( i ) {
- jQuery( this ).wrapAll( isFunction ? html.call( this, i ) : html );
- } );
- },
-
- unwrap: function( selector ) {
- this.parent( selector ).not( "body" ).each( function() {
- jQuery( this ).replaceWith( this.childNodes );
- } );
- return this;
- }
-} );
-
-
-jQuery.expr.pseudos.hidden = function( elem ) {
- return !jQuery.expr.pseudos.visible( elem );
-};
-jQuery.expr.pseudos.visible = function( elem ) {
- return !!( elem.offsetWidth || elem.offsetHeight || elem.getClientRects().length );
-};
-
-
-
-
-jQuery.ajaxSettings.xhr = function() {
- try {
- return new window.XMLHttpRequest();
- } catch ( e ) {}
-};
-
-var xhrSuccessStatus = {
-
- // File protocol always yields status code 0, assume 200
- 0: 200,
-
- // Support: IE <=9 only
- // #1450: sometimes IE returns 1223 when it should be 204
- 1223: 204
- },
- xhrSupported = jQuery.ajaxSettings.xhr();
-
-support.cors = !!xhrSupported && ( "withCredentials" in xhrSupported );
-support.ajax = xhrSupported = !!xhrSupported;
-
-jQuery.ajaxTransport( function( options ) {
- var callback, errorCallback;
-
- // Cross domain only allowed if supported through XMLHttpRequest
- if ( support.cors || xhrSupported && !options.crossDomain ) {
- return {
- send: function( headers, complete ) {
- var i,
- xhr = options.xhr();
-
- xhr.open(
- options.type,
- options.url,
- options.async,
- options.username,
- options.password
- );
-
- // Apply custom fields if provided
- if ( options.xhrFields ) {
- for ( i in options.xhrFields ) {
- xhr[ i ] = options.xhrFields[ i ];
- }
- }
-
- // Override mime type if needed
- if ( options.mimeType && xhr.overrideMimeType ) {
- xhr.overrideMimeType( options.mimeType );
- }
-
- // X-Requested-With header
- // For cross-domain requests, seeing as conditions for a preflight are
- // akin to a jigsaw puzzle, we simply never set it to be sure.
- // (it can always be set on a per-request basis or even using ajaxSetup)
- // For same-domain requests, won't change header if already provided.
- if ( !options.crossDomain && !headers[ "X-Requested-With" ] ) {
- headers[ "X-Requested-With" ] = "XMLHttpRequest";
- }
-
- // Set headers
- for ( i in headers ) {
- xhr.setRequestHeader( i, headers[ i ] );
- }
-
- // Callback
- callback = function( type ) {
- return function() {
- if ( callback ) {
- callback = errorCallback = xhr.onload =
- xhr.onerror = xhr.onabort = xhr.onreadystatechange = null;
-
- if ( type === "abort" ) {
- xhr.abort();
- } else if ( type === "error" ) {
-
- // Support: IE <=9 only
- // On a manual native abort, IE9 throws
- // errors on any property access that is not readyState
- if ( typeof xhr.status !== "number" ) {
- complete( 0, "error" );
- } else {
- complete(
-
- // File: protocol always yields status 0; see #8605, #14207
- xhr.status,
- xhr.statusText
- );
- }
- } else {
- complete(
- xhrSuccessStatus[ xhr.status ] || xhr.status,
- xhr.statusText,
-
- // Support: IE <=9 only
- // IE9 has no XHR2 but throws on binary (trac-11426)
- // For XHR2 non-text, let the caller handle it (gh-2498)
- ( xhr.responseType || "text" ) !== "text" ||
- typeof xhr.responseText !== "string" ?
- { binary: xhr.response } :
- { text: xhr.responseText },
- xhr.getAllResponseHeaders()
- );
- }
- }
- };
- };
-
- // Listen to events
- xhr.onload = callback();
- errorCallback = xhr.onerror = callback( "error" );
-
- // Support: IE 9 only
- // Use onreadystatechange to replace onabort
- // to handle uncaught aborts
- if ( xhr.onabort !== undefined ) {
- xhr.onabort = errorCallback;
- } else {
- xhr.onreadystatechange = function() {
-
- // Check readyState before timeout as it changes
- if ( xhr.readyState === 4 ) {
-
- // Allow onerror to be called first,
- // but that will not handle a native abort
- // Also, save errorCallback to a variable
- // as xhr.onerror cannot be accessed
- window.setTimeout( function() {
- if ( callback ) {
- errorCallback();
- }
- } );
- }
- };
- }
-
- // Create the abort callback
- callback = callback( "abort" );
-
- try {
-
- // Do send the request (this may raise an exception)
- xhr.send( options.hasContent && options.data || null );
- } catch ( e ) {
-
- // #14683: Only rethrow if this hasn't been notified as an error yet
- if ( callback ) {
- throw e;
- }
- }
- },
-
- abort: function() {
- if ( callback ) {
- callback();
- }
- }
- };
- }
-} );
-
-
-
-
-// Prevent auto-execution of scripts when no explicit dataType was provided (See gh-2432)
-jQuery.ajaxPrefilter( function( s ) {
- if ( s.crossDomain ) {
- s.contents.script = false;
- }
-} );
-
-// Install script dataType
-jQuery.ajaxSetup( {
- accepts: {
- script: "text/javascript, application/javascript, " +
- "application/ecmascript, application/x-ecmascript"
- },
- contents: {
- script: /\b(?:java|ecma)script\b/
- },
- converters: {
- "text script": function( text ) {
- jQuery.globalEval( text );
- return text;
- }
- }
-} );
-
-// Handle cache's special case and crossDomain
-jQuery.ajaxPrefilter( "script", function( s ) {
- if ( s.cache === undefined ) {
- s.cache = false;
- }
- if ( s.crossDomain ) {
- s.type = "GET";
- }
-} );
-
-// Bind script tag hack transport
-jQuery.ajaxTransport( "script", function( s ) {
-
- // This transport only deals with cross domain requests
- if ( s.crossDomain ) {
- var script, callback;
- return {
- send: function( _, complete ) {
- script = jQuery( "<script>" ).prop( {
- charset: s.scriptCharset,
- src: s.url
- } ).on(
- "load error",
- callback = function( evt ) {
- script.remove();
- callback = null;
- if ( evt ) {
- complete( evt.type === "error" ? 404 : 200, evt.type );
- }
- }
- );
-
- // Use native DOM manipulation to avoid our domManip AJAX trickery
- document.head.appendChild( script[ 0 ] );
- },
- abort: function() {
- if ( callback ) {
- callback();
- }
- }
- };
- }
-} );
-
-
-
-
-var oldCallbacks = [],
- rjsonp = /(=)\?(?=&|$)|\?\?/;
-
-// Default jsonp settings
-jQuery.ajaxSetup( {
- jsonp: "callback",
- jsonpCallback: function() {
- var callback = oldCallbacks.pop() || ( jQuery.expando + "_" + ( nonce++ ) );
- this[ callback ] = true;
- return callback;
- }
-} );
-
-// Detect, normalize options and install callbacks for jsonp requests
-jQuery.ajaxPrefilter( "json jsonp", function( s, originalSettings, jqXHR ) {
-
- var callbackName, overwritten, responseContainer,
- jsonProp = s.jsonp !== false && ( rjsonp.test( s.url ) ?
- "url" :
- typeof s.data === "string" &&
- ( s.contentType || "" )
- .indexOf( "application/x-www-form-urlencoded" ) === 0 &&
- rjsonp.test( s.data ) && "data"
- );
-
- // Handle iff the expected data type is "jsonp" or we have a parameter to set
- if ( jsonProp || s.dataTypes[ 0 ] === "jsonp" ) {
-
- // Get callback name, remembering preexisting value associated with it
- callbackName = s.jsonpCallback = jQuery.isFunction( s.jsonpCallback ) ?
- s.jsonpCallback() :
- s.jsonpCallback;
-
- // Insert callback into url or form data
- if ( jsonProp ) {
- s[ jsonProp ] = s[ jsonProp ].replace( rjsonp, "$1" + callbackName );
- } else if ( s.jsonp !== false ) {
- s.url += ( rquery.test( s.url ) ? "&" : "?" ) + s.jsonp + "=" + callbackName;
- }
-
- // Use data converter to retrieve json after script execution
- s.converters[ "script json" ] = function() {
- if ( !responseContainer ) {
- jQuery.error( callbackName + " was not called" );
- }
- return responseContainer[ 0 ];
- };
-
- // Force json dataType
- s.dataTypes[ 0 ] = "json";
-
- // Install callback
- overwritten = window[ callbackName ];
- window[ callbackName ] = function() {
- responseContainer = arguments;
- };
-
- // Clean-up function (fires after converters)
- jqXHR.always( function() {
-
- // If previous value didn't exist - remove it
- if ( overwritten === undefined ) {
- jQuery( window ).removeProp( callbackName );
-
- // Otherwise restore preexisting value
- } else {
- window[ callbackName ] = overwritten;
- }
-
- // Save back as free
- if ( s[ callbackName ] ) {
-
- // Make sure that re-using the options doesn't screw things around
- s.jsonpCallback = originalSettings.jsonpCallback;
-
- // Save the callback name for future use
- oldCallbacks.push( callbackName );
- }
-
- // Call if it was a function and we have a response
- if ( responseContainer && jQuery.isFunction( overwritten ) ) {
- overwritten( responseContainer[ 0 ] );
- }
-
- responseContainer = overwritten = undefined;
- } );
-
- // Delegate to script
- return "script";
- }
-} );
-
-
-
-
-// Support: Safari 8 only
-// In Safari 8 documents created via document.implementation.createHTMLDocument
-// collapse sibling forms: the second one becomes a child of the first one.
-// Because of that, this security measure has to be disabled in Safari 8.
-// https://bugs.webkit.org/show_bug.cgi?id=137337
-support.createHTMLDocument = ( function() {
- var body = document.implementation.createHTMLDocument( "" ).body;
- body.innerHTML = "<form></form><form></form>";
- return body.childNodes.length === 2;
-} )();
-
-
-// Argument "data" should be string of html
-// context (optional): If specified, the fragment will be created in this context,
-// defaults to document
-// keepScripts (optional): If true, will include scripts passed in the html string
-jQuery.parseHTML = function( data, context, keepScripts ) {
- if ( typeof data !== "string" ) {
- return [];
- }
- if ( typeof context === "boolean" ) {
- keepScripts = context;
- context = false;
- }
-
- var base, parsed, scripts;
-
- if ( !context ) {
-
- // Stop scripts or inline event handlers from being executed immediately
- // by using document.implementation
- if ( support.createHTMLDocument ) {
- context = document.implementation.createHTMLDocument( "" );
-
- // Set the base href for the created document
- // so any parsed elements with URLs
- // are based on the document's URL (gh-2965)
- base = context.createElement( "base" );
- base.href = document.location.href;
- context.head.appendChild( base );
- } else {
- context = document;
- }
- }
-
- parsed = rsingleTag.exec( data );
- scripts = !keepScripts && [];
-
- // Single tag
- if ( parsed ) {
- return [ context.createElement( parsed[ 1 ] ) ];
- }
-
- parsed = buildFragment( [ data ], context, scripts );
-
- if ( scripts && scripts.length ) {
- jQuery( scripts ).remove();
- }
-
- return jQuery.merge( [], parsed.childNodes );
-};
-
-
-/**
- * Load a url into a page
- */
-jQuery.fn.load = function( url, params, callback ) {
- var selector, type, response,
- self = this,
- off = url.indexOf( " " );
-
- if ( off > -1 ) {
- selector = stripAndCollapse( url.slice( off ) );
- url = url.slice( 0, off );
- }
-
- // If it's a function
- if ( jQuery.isFunction( params ) ) {
-
- // We assume that it's the callback
- callback = params;
- params = undefined;
-
- // Otherwise, build a param string
- } else if ( params && typeof params === "object" ) {
- type = "POST";
- }
-
- // If we have elements to modify, make the request
- if ( self.length > 0 ) {
- jQuery.ajax( {
- url: url,
-
- // If "type" variable is undefined, then "GET" method will be used.
- // Make value of this field explicit since
- // user can override it through ajaxSetup method
- type: type || "GET",
- dataType: "html",
- data: params
- } ).done( function( responseText ) {
-
- // Save response for use in complete callback
- response = arguments;
-
- self.html( selector ?
-
- // If a selector was specified, locate the right elements in a dummy div
- // Exclude scripts to avoid IE 'Permission Denied' errors
- jQuery( "<div>" ).append( jQuery.parseHTML( responseText ) ).find( selector ) :
-
- // Otherwise use the full result
- responseText );
-
- // If the request succeeds, this function gets "data", "status", "jqXHR"
- // but they are ignored because response was set above.
- // If it fails, this function gets "jqXHR", "status", "error"
- } ).always( callback && function( jqXHR, status ) {
- self.each( function() {
- callback.apply( this, response || [ jqXHR.responseText, status, jqXHR ] );
- } );
- } );
- }
-
- return this;
-};
-
-
-
-
-// Attach a bunch of functions for handling common AJAX events
-jQuery.each( [
- "ajaxStart",
- "ajaxStop",
- "ajaxComplete",
- "ajaxError",
- "ajaxSuccess",
- "ajaxSend"
-], function( i, type ) {
- jQuery.fn[ type ] = function( fn ) {
- return this.on( type, fn );
- };
-} );
-
-
-
-
-jQuery.expr.pseudos.animated = function( elem ) {
- return jQuery.grep( jQuery.timers, function( fn ) {
- return elem === fn.elem;
- } ).length;
-};
-
-
-
-
-jQuery.offset = {
- setOffset: function( elem, options, i ) {
- var curPosition, curLeft, curCSSTop, curTop, curOffset, curCSSLeft, calculatePosition,
- position = jQuery.css( elem, "position" ),
- curElem = jQuery( elem ),
- props = {};
-
- // Set position first, in-case top/left are set even on static elem
- if ( position === "static" ) {
- elem.style.position = "relative";
- }
-
- curOffset = curElem.offset();
- curCSSTop = jQuery.css( elem, "top" );
- curCSSLeft = jQuery.css( elem, "left" );
- calculatePosition = ( position === "absolute" || position === "fixed" ) &&
- ( curCSSTop + curCSSLeft ).indexOf( "auto" ) > -1;
-
- // Need to be able to calculate position if either
- // top or left is auto and position is either absolute or fixed
- if ( calculatePosition ) {
- curPosition = curElem.position();
- curTop = curPosition.top;
- curLeft = curPosition.left;
-
- } else {
- curTop = parseFloat( curCSSTop ) || 0;
- curLeft = parseFloat( curCSSLeft ) || 0;
- }
-
- if ( jQuery.isFunction( options ) ) {
-
- // Use jQuery.extend here to allow modification of coordinates argument (gh-1848)
- options = options.call( elem, i, jQuery.extend( {}, curOffset ) );
- }
-
- if ( options.top != null ) {
- props.top = ( options.top - curOffset.top ) + curTop;
- }
- if ( options.left != null ) {
- props.left = ( options.left - curOffset.left ) + curLeft;
- }
-
- if ( "using" in options ) {
- options.using.call( elem, props );
-
- } else {
- curElem.css( props );
- }
- }
-};
-
-jQuery.fn.extend( {
- offset: function( options ) {
-
- // Preserve chaining for setter
- if ( arguments.length ) {
- return options === undefined ?
- this :
- this.each( function( i ) {
- jQuery.offset.setOffset( this, options, i );
- } );
- }
-
- var doc, docElem, rect, win,
- elem = this[ 0 ];
-
- if ( !elem ) {
- return;
- }
-
- // Return zeros for disconnected and hidden (display: none) elements (gh-2310)
- // Support: IE <=11 only
- // Running getBoundingClientRect on a
- // disconnected node in IE throws an error
- if ( !elem.getClientRects().length ) {
- return { top: 0, left: 0 };
- }
-
- rect = elem.getBoundingClientRect();
-
- doc = elem.ownerDocument;
- docElem = doc.documentElement;
- win = doc.defaultView;
-
- return {
- top: rect.top + win.pageYOffset - docElem.clientTop,
- left: rect.left + win.pageXOffset - docElem.clientLeft
- };
- },
-
- position: function() {
- if ( !this[ 0 ] ) {
- return;
- }
-
- var offsetParent, offset,
- elem = this[ 0 ],
- parentOffset = { top: 0, left: 0 };
-
- // Fixed elements are offset from window (parentOffset = {top:0, left: 0},
- // because it is its only offset parent
- if ( jQuery.css( elem, "position" ) === "fixed" ) {
-
- // Assume getBoundingClientRect is there when computed position is fixed
- offset = elem.getBoundingClientRect();
-
- } else {
-
- // Get *real* offsetParent
- offsetParent = this.offsetParent();
-
- // Get correct offsets
- offset = this.offset();
- if ( !nodeName( offsetParent[ 0 ], "html" ) ) {
- parentOffset = offsetParent.offset();
- }
-
- // Add offsetParent borders
- parentOffset = {
- top: parentOffset.top + jQuery.css( offsetParent[ 0 ], "borderTopWidth", true ),
- left: parentOffset.left + jQuery.css( offsetParent[ 0 ], "borderLeftWidth", true )
- };
- }
-
- // Subtract parent offsets and element margins
- return {
- top: offset.top - parentOffset.top - jQuery.css( elem, "marginTop", true ),
- left: offset.left - parentOffset.left - jQuery.css( elem, "marginLeft", true )
- };
- },
-
- // This method will return documentElement in the following cases:
- // 1) For the element inside the iframe without offsetParent, this method will return
- // documentElement of the parent window
- // 2) For the hidden or detached element
- // 3) For body or html element, i.e. in case of the html node - it will return itself
- //
- // but those exceptions were never presented as a real life use-cases
- // and might be considered as more preferable results.
- //
- // This logic, however, is not guaranteed and can change at any point in the future
- offsetParent: function() {
- return this.map( function() {
- var offsetParent = this.offsetParent;
-
- while ( offsetParent && jQuery.css( offsetParent, "position" ) === "static" ) {
- offsetParent = offsetParent.offsetParent;
- }
-
- return offsetParent || documentElement;
- } );
- }
-} );
-
-// Create scrollLeft and scrollTop methods
-jQuery.each( { scrollLeft: "pageXOffset", scrollTop: "pageYOffset" }, function( method, prop ) {
- var top = "pageYOffset" === prop;
-
- jQuery.fn[ method ] = function( val ) {
- return access( this, function( elem, method, val ) {
-
- // Coalesce documents and windows
- var win;
- if ( jQuery.isWindow( elem ) ) {
- win = elem;
- } else if ( elem.nodeType === 9 ) {
- win = elem.defaultView;
- }
-
- if ( val === undefined ) {
- return win ? win[ prop ] : elem[ method ];
- }
-
- if ( win ) {
- win.scrollTo(
- !top ? val : win.pageXOffset,
- top ? val : win.pageYOffset
- );
-
- } else {
- elem[ method ] = val;
- }
- }, method, val, arguments.length );
- };
-} );
-
-// Support: Safari <=7 - 9.1, Chrome <=37 - 49
-// Add the top/left cssHooks using jQuery.fn.position
-// Webkit bug: https://bugs.webkit.org/show_bug.cgi?id=29084
-// Blink bug: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
-// getComputedStyle returns percent when specified for top/left/bottom/right;
-// rather than make the css module depend on the offset module, just check for it here
-jQuery.each( [ "top", "left" ], function( i, prop ) {
- jQuery.cssHooks[ prop ] = addGetHookIf( support.pixelPosition,
- function( elem, computed ) {
- if ( computed ) {
- computed = curCSS( elem, prop );
-
- // If curCSS returns percentage, fallback to offset
- return rnumnonpx.test( computed ) ?
- jQuery( elem ).position()[ prop ] + "px" :
- computed;
- }
- }
- );
-} );
-
-
-// Create innerHeight, innerWidth, height, width, outerHeight and outerWidth methods
-jQuery.each( { Height: "height", Width: "width" }, function( name, type ) {
- jQuery.each( { padding: "inner" + name, content: type, "": "outer" + name },
- function( defaultExtra, funcName ) {
-
- // Margin is only for outerHeight, outerWidth
- jQuery.fn[ funcName ] = function( margin, value ) {
- var chainable = arguments.length && ( defaultExtra || typeof margin !== "boolean" ),
- extra = defaultExtra || ( margin === true || value === true ? "margin" : "border" );
-
- return access( this, function( elem, type, value ) {
- var doc;
-
- if ( jQuery.isWindow( elem ) ) {
-
- // $( window ).outerWidth/Height return w/h including scrollbars (gh-1729)
- return funcName.indexOf( "outer" ) === 0 ?
- elem[ "inner" + name ] :
- elem.document.documentElement[ "client" + name ];
- }
-
- // Get document width or height
- if ( elem.nodeType === 9 ) {
- doc = elem.documentElement;
-
- // Either scroll[Width/Height] or offset[Width/Height] or client[Width/Height],
- // whichever is greatest
- return Math.max(
- elem.body[ "scroll" + name ], doc[ "scroll" + name ],
- elem.body[ "offset" + name ], doc[ "offset" + name ],
- doc[ "client" + name ]
- );
- }
-
- return value === undefined ?
-
- // Get width or height on the element, requesting but not forcing parseFloat
- jQuery.css( elem, type, extra ) :
-
- // Set width or height on the element
- jQuery.style( elem, type, value, extra );
- }, type, chainable ? margin : undefined, chainable );
- };
- } );
-} );
-
-
-jQuery.fn.extend( {
-
- bind: function( types, data, fn ) {
- return this.on( types, null, data, fn );
- },
- unbind: function( types, fn ) {
- return this.off( types, null, fn );
- },
-
- delegate: function( selector, types, data, fn ) {
- return this.on( types, selector, data, fn );
- },
- undelegate: function( selector, types, fn ) {
-
- // ( namespace ) or ( selector, types [, fn] )
- return arguments.length === 1 ?
- this.off( selector, "**" ) :
- this.off( types, selector || "**", fn );
- }
-} );
-
-jQuery.holdReady = function( hold ) {
- if ( hold ) {
- jQuery.readyWait++;
- } else {
- jQuery.ready( true );
- }
-};
-jQuery.isArray = Array.isArray;
-jQuery.parseJSON = JSON.parse;
-jQuery.nodeName = nodeName;
-
-
-
-
-// Register as a named AMD module, since jQuery can be concatenated with other
-// files that may use define, but not via a proper concatenation script that
-// understands anonymous AMD modules. A named AMD is safest and most robust
-// way to register. Lowercase jquery is used because AMD module names are
-// derived from file names, and jQuery is normally delivered in a lowercase
-// file name. Do this after creating the global so that if an AMD module wants
-// to call noConflict to hide this version of jQuery, it will work.
-
-// Note that for maximum portability, libraries that are not jQuery should
-// declare themselves as anonymous modules, and avoid setting a global if an
-// AMD loader is present. jQuery is a special case. For more information, see
-// https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
-
-if ( typeof define === "function" && define.amd ) {
- define( "jquery", [], function() {
- return jQuery;
- } );
-}
-
-
-
-
-var
-
- // Map over jQuery in case of overwrite
- _jQuery = window.jQuery,
-
- // Map over the $ in case of overwrite
- _$ = window.$;
-
-jQuery.noConflict = function( deep ) {
- if ( window.$ === jQuery ) {
- window.$ = _$;
- }
-
- if ( deep && window.jQuery === jQuery ) {
- window.jQuery = _jQuery;
- }
-
- return jQuery;
-};
-
-// Expose jQuery and $ identifiers, even in AMD
-// (#7102#comment:10, https://github.com/jquery/jquery/pull/557)
-// and CommonJS for browser emulators (#13566)
-if ( !noGlobal ) {
- window.jQuery = window.$ = jQuery;
-}
-
-
-
-
-return jQuery;
-} );
+++ /dev/null
-/*
- * kerb.css
- * ~~~~~~~~~~~
- *
- * Sphinx stylesheet -- modification to agogo theme.
- *
- */
-div.body {
- padding-right: .5em;
- text-align: left;
- overflow-x: hidden;
-}
-
-/* Page layout */
-
-div.header, div.content, div.footer {
- margin-left: auto;
- margin-right: auto;
- padding-left: 1em;
- padding-right: 1em;
- max-width: 60em;
-}
-
-div.header-wrapper {
- background: white;
- border-bottom: 3px solid #2e3436;
- border-top: 13px solid #5d1509;
-}
-
-/* Header */
-
-div.header {
- padding-top: 10px;
- padding-bottom: 0px;
-}
-
-div.header h1 {
- font-family: "Georgia", "Times New Roman", serif, black;
- font-weight: normal;
-}
-
-div.header h1 a {
- color: #5d1509;
- font-size: 120%;
- padding-top: 10px;
-}
-
-div.header div.right a {
- color: #fcaf3e;
- letter-spacing: .1em;
- text-transform: lowercase;
- float: right;
-}
-
-div.header div.rel {
- font-family: "Georgia", "Times New Roman", serif, black;
- font-weight: normal;
- margin-bottom: 1.6em;
-}
-
-/* Content */
-
-div.document {
- width: 80%;
- float: left;
- margin: 0;
- background-color: white;
- padding-top: 20px;
- padding-bottom: 20px;
-}
-
-div.document div.section h1 {
- margin-bottom: 20px;
- padding: 1px;
- line-height: 130%;
-}
-
-div.document div.section dl {
- margin-top: 15px;
- margin-bottom: 5px;
- padding: 1px;
- text-align: left;
-}
-
-/* Sidebar */
-
-div.sidebar {
- float: right;
- font-size: .9em;
- width: 20%;
- margin: 0;
- padding: 0;
- background-color: #F9F9F9;
-}
-
-div.sidebar ul {
- list-style-type: none;
- margin-left: .5em;
-}
-
-div.sidebar li.toctree-l1 a {
- margin-left: .5em;
-}
-
-div.sidebar li.toctree-l2 a {
- margin-left: .5em;
-}
-
-div.sidebar li.toctree-l3 a {
- margin-left: .5em;
-}
-
-div.sidebar li.toctree-l2.current a {
- border-right: 2px solid #fcaf3e !important;
-}
-
-div.sidebar li.toctree-l3.current a {
- font-weight: bold;
-}
-
-div.sidebar li.toctree-l4 a {
- display: none;
-}
-
-div.sidebar input[type=text] {
- width: auto;
-}
-
-/* Other body styles */
-
-dt:target, .highlighted {
- background-color: #c1c1c1;
-}
-
-/* Code displays */
-
-pre {
- overflow: auto;
- overflow-y: hidden;
-}
-
-td.linenos pre {
- padding: 5px 0px;
- border: 0;
- background-color: transparent;
- color: #aaa;
-}
-
-/* ordered lists */
-
-ol.arabic {
- list-style: decimal;
-}
-
-ol.loweralpha {
- list-style: lower-alpha;
-}
-
-ol.upperalpha {
- list-style: upper-alpha;
-}
-
-ol.lowerroman {
- list-style-type: lower-roman;
-}
-
-ol.upperroman {
- list-style-type: upper-roman;
-}
\ No newline at end of file
+++ /dev/null
-.highlight .hll { background-color: #ffffcc }
-.highlight { background: #eeffcc; }
-.highlight .c { color: #408090; font-style: italic } /* Comment */
-.highlight .err { border: 1px solid #FF0000 } /* Error */
-.highlight .k { color: #007020; font-weight: bold } /* Keyword */
-.highlight .o { color: #666666 } /* Operator */
-.highlight .ch { color: #408090; font-style: italic } /* Comment.Hashbang */
-.highlight .cm { color: #408090; font-style: italic } /* Comment.Multiline */
-.highlight .cp { color: #007020 } /* Comment.Preproc */
-.highlight .cpf { color: #408090; font-style: italic } /* Comment.PreprocFile */
-.highlight .c1 { color: #408090; font-style: italic } /* Comment.Single */
-.highlight .cs { color: #408090; background-color: #fff0f0 } /* Comment.Special */
-.highlight .gd { color: #A00000 } /* Generic.Deleted */
-.highlight .ge { font-style: italic } /* Generic.Emph */
-.highlight .gr { color: #FF0000 } /* Generic.Error */
-.highlight .gh { color: #000080; font-weight: bold } /* Generic.Heading */
-.highlight .gi { color: #00A000 } /* Generic.Inserted */
-.highlight .go { color: #333333 } /* Generic.Output */
-.highlight .gp { color: #c65d09; font-weight: bold } /* Generic.Prompt */
-.highlight .gs { font-weight: bold } /* Generic.Strong */
-.highlight .gu { color: #800080; font-weight: bold } /* Generic.Subheading */
-.highlight .gt { color: #0044DD } /* Generic.Traceback */
-.highlight .kc { color: #007020; font-weight: bold } /* Keyword.Constant */
-.highlight .kd { color: #007020; font-weight: bold } /* Keyword.Declaration */
-.highlight .kn { color: #007020; font-weight: bold } /* Keyword.Namespace */
-.highlight .kp { color: #007020 } /* Keyword.Pseudo */
-.highlight .kr { color: #007020; font-weight: bold } /* Keyword.Reserved */
-.highlight .kt { color: #902000 } /* Keyword.Type */
-.highlight .m { color: #208050 } /* Literal.Number */
-.highlight .s { color: #4070a0 } /* Literal.String */
-.highlight .na { color: #4070a0 } /* Name.Attribute */
-.highlight .nb { color: #007020 } /* Name.Builtin */
-.highlight .nc { color: #0e84b5; font-weight: bold } /* Name.Class */
-.highlight .no { color: #60add5 } /* Name.Constant */
-.highlight .nd { color: #555555; font-weight: bold } /* Name.Decorator */
-.highlight .ni { color: #d55537; font-weight: bold } /* Name.Entity */
-.highlight .ne { color: #007020 } /* Name.Exception */
-.highlight .nf { color: #06287e } /* Name.Function */
-.highlight .nl { color: #002070; font-weight: bold } /* Name.Label */
-.highlight .nn { color: #0e84b5; font-weight: bold } /* Name.Namespace */
-.highlight .nt { color: #062873; font-weight: bold } /* Name.Tag */
-.highlight .nv { color: #bb60d5 } /* Name.Variable */
-.highlight .ow { color: #007020; font-weight: bold } /* Operator.Word */
-.highlight .w { color: #bbbbbb } /* Text.Whitespace */
-.highlight .mb { color: #208050 } /* Literal.Number.Bin */
-.highlight .mf { color: #208050 } /* Literal.Number.Float */
-.highlight .mh { color: #208050 } /* Literal.Number.Hex */
-.highlight .mi { color: #208050 } /* Literal.Number.Integer */
-.highlight .mo { color: #208050 } /* Literal.Number.Oct */
-.highlight .sa { color: #4070a0 } /* Literal.String.Affix */
-.highlight .sb { color: #4070a0 } /* Literal.String.Backtick */
-.highlight .sc { color: #4070a0 } /* Literal.String.Char */
-.highlight .dl { color: #4070a0 } /* Literal.String.Delimiter */
-.highlight .sd { color: #4070a0; font-style: italic } /* Literal.String.Doc */
-.highlight .s2 { color: #4070a0 } /* Literal.String.Double */
-.highlight .se { color: #4070a0; font-weight: bold } /* Literal.String.Escape */
-.highlight .sh { color: #4070a0 } /* Literal.String.Heredoc */
-.highlight .si { color: #70a0d0; font-style: italic } /* Literal.String.Interpol */
-.highlight .sx { color: #c65d09 } /* Literal.String.Other */
-.highlight .sr { color: #235388 } /* Literal.String.Regex */
-.highlight .s1 { color: #4070a0 } /* Literal.String.Single */
-.highlight .ss { color: #517918 } /* Literal.String.Symbol */
-.highlight .bp { color: #007020 } /* Name.Builtin.Pseudo */
-.highlight .fm { color: #06287e } /* Name.Function.Magic */
-.highlight .vc { color: #bb60d5 } /* Name.Variable.Class */
-.highlight .vg { color: #bb60d5 } /* Name.Variable.Global */
-.highlight .vi { color: #bb60d5 } /* Name.Variable.Instance */
-.highlight .vm { color: #bb60d5 } /* Name.Variable.Magic */
-.highlight .il { color: #208050 } /* Literal.Number.Integer.Long */
\ No newline at end of file
+++ /dev/null
-/*
- * searchtools.js_t
- * ~~~~~~~~~~~~~~~~
- *
- * Sphinx JavaScript utilities for the full-text search.
- *
- * :copyright: Copyright 2007-2018 by the Sphinx team, see AUTHORS.
- * :license: BSD, see LICENSE for details.
- *
- */
-
-
-/* Non-minified version JS is _stemmer.js if file is provided */
-/**
- * Porter Stemmer
- */
-var Stemmer = function() {
-
- var step2list = {
- ational: 'ate',
- tional: 'tion',
- enci: 'ence',
- anci: 'ance',
- izer: 'ize',
- bli: 'ble',
- alli: 'al',
- entli: 'ent',
- eli: 'e',
- ousli: 'ous',
- ization: 'ize',
- ation: 'ate',
- ator: 'ate',
- alism: 'al',
- iveness: 'ive',
- fulness: 'ful',
- ousness: 'ous',
- aliti: 'al',
- iviti: 'ive',
- biliti: 'ble',
- logi: 'log'
- };
-
- var step3list = {
- icate: 'ic',
- ative: '',
- alize: 'al',
- iciti: 'ic',
- ical: 'ic',
- ful: '',
- ness: ''
- };
-
- var c = "[^aeiou]"; // consonant
- var v = "[aeiouy]"; // vowel
- var C = c + "[^aeiouy]*"; // consonant sequence
- var V = v + "[aeiou]*"; // vowel sequence
-
- var mgr0 = "^(" + C + ")?" + V + C; // [C]VC... is m>0
- var meq1 = "^(" + C + ")?" + V + C + "(" + V + ")?$"; // [C]VC[V] is m=1
- var mgr1 = "^(" + C + ")?" + V + C + V + C; // [C]VCVC... is m>1
- var s_v = "^(" + C + ")?" + v; // vowel in stem
-
- this.stemWord = function (w) {
- var stem;
- var suffix;
- var firstch;
- var origword = w;
-
- if (w.length < 3)
- return w;
-
- var re;
- var re2;
- var re3;
- var re4;
-
- firstch = w.substr(0,1);
- if (firstch == "y")
- w = firstch.toUpperCase() + w.substr(1);
-
- // Step 1a
- re = /^(.+?)(ss|i)es$/;
- re2 = /^(.+?)([^s])s$/;
-
- if (re.test(w))
- w = w.replace(re,"$1$2");
- else if (re2.test(w))
- w = w.replace(re2,"$1$2");
-
- // Step 1b
- re = /^(.+?)eed$/;
- re2 = /^(.+?)(ed|ing)$/;
- if (re.test(w)) {
- var fp = re.exec(w);
- re = new RegExp(mgr0);
- if (re.test(fp[1])) {
- re = /.$/;
- w = w.replace(re,"");
- }
- }
- else if (re2.test(w)) {
- var fp = re2.exec(w);
- stem = fp[1];
- re2 = new RegExp(s_v);
- if (re2.test(stem)) {
- w = stem;
- re2 = /(at|bl|iz)$/;
- re3 = new RegExp("([^aeiouylsz])\\1$");
- re4 = new RegExp("^" + C + v + "[^aeiouwxy]$");
- if (re2.test(w))
- w = w + "e";
- else if (re3.test(w)) {
- re = /.$/;
- w = w.replace(re,"");
- }
- else if (re4.test(w))
- w = w + "e";
- }
- }
-
- // Step 1c
- re = /^(.+?)y$/;
- if (re.test(w)) {
- var fp = re.exec(w);
- stem = fp[1];
- re = new RegExp(s_v);
- if (re.test(stem))
- w = stem + "i";
- }
-
- // Step 2
- re = /^(.+?)(ational|tional|enci|anci|izer|bli|alli|entli|eli|ousli|ization|ation|ator|alism|iveness|fulness|ousness|aliti|iviti|biliti|logi)$/;
- if (re.test(w)) {
- var fp = re.exec(w);
- stem = fp[1];
- suffix = fp[2];
- re = new RegExp(mgr0);
- if (re.test(stem))
- w = stem + step2list[suffix];
- }
-
- // Step 3
- re = /^(.+?)(icate|ative|alize|iciti|ical|ful|ness)$/;
- if (re.test(w)) {
- var fp = re.exec(w);
- stem = fp[1];
- suffix = fp[2];
- re = new RegExp(mgr0);
- if (re.test(stem))
- w = stem + step3list[suffix];
- }
-
- // Step 4
- re = /^(.+?)(al|ance|ence|er|ic|able|ible|ant|ement|ment|ent|ou|ism|ate|iti|ous|ive|ize)$/;
- re2 = /^(.+?)(s|t)(ion)$/;
- if (re.test(w)) {
- var fp = re.exec(w);
- stem = fp[1];
- re = new RegExp(mgr1);
- if (re.test(stem))
- w = stem;
- }
- else if (re2.test(w)) {
- var fp = re2.exec(w);
- stem = fp[1] + fp[2];
- re2 = new RegExp(mgr1);
- if (re2.test(stem))
- w = stem;
- }
-
- // Step 5
- re = /^(.+?)e$/;
- if (re.test(w)) {
- var fp = re.exec(w);
- stem = fp[1];
- re = new RegExp(mgr1);
- re2 = new RegExp(meq1);
- re3 = new RegExp("^" + C + v + "[^aeiouwxy]$");
- if (re.test(stem) || (re2.test(stem) && !(re3.test(stem))))
- w = stem;
- }
- re = /ll$/;
- re2 = new RegExp(mgr1);
- if (re.test(w) && re2.test(w)) {
- re = /.$/;
- w = w.replace(re,"");
- }
-
- // and turn initial Y back to y
- if (firstch == "y")
- w = firstch.toLowerCase() + w.substr(1);
- return w;
- }
-}
-
-
-
-/**
- * Simple result scoring code.
- */
-var Scorer = {
- // Implement the following function to further tweak the score for each result
- // The function takes a result array [filename, title, anchor, descr, score]
- // and returns the new score.
- /*
- score: function(result) {
- return result[4];
- },
- */
-
- // query matches the full name of an object
- objNameMatch: 11,
- // or matches in the last dotted part of the object name
- objPartialMatch: 6,
- // Additive scores depending on the priority of the object
- objPrio: {0: 15, // used to be importantResults
- 1: 5, // used to be objectResults
- 2: -5}, // used to be unimportantResults
- // Used when the priority is not in the mapping.
- objPrioDefault: 0,
-
- // query found in title
- title: 15,
- // query found in terms
- term: 5
-};
-
-
-
-
-
-var splitChars = (function() {
- var result = {};
- var singles = [96, 180, 187, 191, 215, 247, 749, 885, 903, 907, 909, 930, 1014, 1648,
- 1748, 1809, 2416, 2473, 2481, 2526, 2601, 2609, 2612, 2615, 2653, 2702,
- 2706, 2729, 2737, 2740, 2857, 2865, 2868, 2910, 2928, 2948, 2961, 2971,
- 2973, 3085, 3089, 3113, 3124, 3213, 3217, 3241, 3252, 3295, 3341, 3345,
- 3369, 3506, 3516, 3633, 3715, 3721, 3736, 3744, 3748, 3750, 3756, 3761,
- 3781, 3912, 4239, 4347, 4681, 4695, 4697, 4745, 4785, 4799, 4801, 4823,
- 4881, 5760, 5901, 5997, 6313, 7405, 8024, 8026, 8028, 8030, 8117, 8125,
- 8133, 8181, 8468, 8485, 8487, 8489, 8494, 8527, 11311, 11359, 11687, 11695,
- 11703, 11711, 11719, 11727, 11735, 12448, 12539, 43010, 43014, 43019, 43587,
- 43696, 43713, 64286, 64297, 64311, 64317, 64319, 64322, 64325, 65141];
- var i, j, start, end;
- for (i = 0; i < singles.length; i++) {
- result[singles[i]] = true;
- }
- var ranges = [[0, 47], [58, 64], [91, 94], [123, 169], [171, 177], [182, 184], [706, 709],
- [722, 735], [741, 747], [751, 879], [888, 889], [894, 901], [1154, 1161],
- [1318, 1328], [1367, 1368], [1370, 1376], [1416, 1487], [1515, 1519], [1523, 1568],
- [1611, 1631], [1642, 1645], [1750, 1764], [1767, 1773], [1789, 1790], [1792, 1807],
- [1840, 1868], [1958, 1968], [1970, 1983], [2027, 2035], [2038, 2041], [2043, 2047],
- [2070, 2073], [2075, 2083], [2085, 2087], [2089, 2307], [2362, 2364], [2366, 2383],
- [2385, 2391], [2402, 2405], [2419, 2424], [2432, 2436], [2445, 2446], [2449, 2450],
- [2483, 2485], [2490, 2492], [2494, 2509], [2511, 2523], [2530, 2533], [2546, 2547],
- [2554, 2564], [2571, 2574], [2577, 2578], [2618, 2648], [2655, 2661], [2672, 2673],
- [2677, 2692], [2746, 2748], [2750, 2767], [2769, 2783], [2786, 2789], [2800, 2820],
- [2829, 2830], [2833, 2834], [2874, 2876], [2878, 2907], [2914, 2917], [2930, 2946],
- [2955, 2957], [2966, 2968], [2976, 2978], [2981, 2983], [2987, 2989], [3002, 3023],
- [3025, 3045], [3059, 3076], [3130, 3132], [3134, 3159], [3162, 3167], [3170, 3173],
- [3184, 3191], [3199, 3204], [3258, 3260], [3262, 3293], [3298, 3301], [3312, 3332],
- [3386, 3388], [3390, 3423], [3426, 3429], [3446, 3449], [3456, 3460], [3479, 3481],
- [3518, 3519], [3527, 3584], [3636, 3647], [3655, 3663], [3674, 3712], [3717, 3718],
- [3723, 3724], [3726, 3731], [3752, 3753], [3764, 3772], [3774, 3775], [3783, 3791],
- [3802, 3803], [3806, 3839], [3841, 3871], [3892, 3903], [3949, 3975], [3980, 4095],
- [4139, 4158], [4170, 4175], [4182, 4185], [4190, 4192], [4194, 4196], [4199, 4205],
- [4209, 4212], [4226, 4237], [4250, 4255], [4294, 4303], [4349, 4351], [4686, 4687],
- [4702, 4703], [4750, 4751], [4790, 4791], [4806, 4807], [4886, 4887], [4955, 4968],
- [4989, 4991], [5008, 5023], [5109, 5120], [5741, 5742], [5787, 5791], [5867, 5869],
- [5873, 5887], [5906, 5919], [5938, 5951], [5970, 5983], [6001, 6015], [6068, 6102],
- [6104, 6107], [6109, 6111], [6122, 6127], [6138, 6159], [6170, 6175], [6264, 6271],
- [6315, 6319], [6390, 6399], [6429, 6469], [6510, 6511], [6517, 6527], [6572, 6592],
- [6600, 6607], [6619, 6655], [6679, 6687], [6741, 6783], [6794, 6799], [6810, 6822],
- [6824, 6916], [6964, 6980], [6988, 6991], [7002, 7042], [7073, 7085], [7098, 7167],
- [7204, 7231], [7242, 7244], [7294, 7400], [7410, 7423], [7616, 7679], [7958, 7959],
- [7966, 7967], [8006, 8007], [8014, 8015], [8062, 8063], [8127, 8129], [8141, 8143],
- [8148, 8149], [8156, 8159], [8173, 8177], [8189, 8303], [8306, 8307], [8314, 8318],
- [8330, 8335], [8341, 8449], [8451, 8454], [8456, 8457], [8470, 8472], [8478, 8483],
- [8506, 8507], [8512, 8516], [8522, 8525], [8586, 9311], [9372, 9449], [9472, 10101],
- [10132, 11263], [11493, 11498], [11503, 11516], [11518, 11519], [11558, 11567],
- [11622, 11630], [11632, 11647], [11671, 11679], [11743, 11822], [11824, 12292],
- [12296, 12320], [12330, 12336], [12342, 12343], [12349, 12352], [12439, 12444],
- [12544, 12548], [12590, 12592], [12687, 12689], [12694, 12703], [12728, 12783],
- [12800, 12831], [12842, 12880], [12896, 12927], [12938, 12976], [12992, 13311],
- [19894, 19967], [40908, 40959], [42125, 42191], [42238, 42239], [42509, 42511],
- [42540, 42559], [42592, 42593], [42607, 42622], [42648, 42655], [42736, 42774],
- [42784, 42785], [42889, 42890], [42893, 43002], [43043, 43055], [43062, 43071],
- [43124, 43137], [43188, 43215], [43226, 43249], [43256, 43258], [43260, 43263],
- [43302, 43311], [43335, 43359], [43389, 43395], [43443, 43470], [43482, 43519],
- [43561, 43583], [43596, 43599], [43610, 43615], [43639, 43641], [43643, 43647],
- [43698, 43700], [43703, 43704], [43710, 43711], [43715, 43738], [43742, 43967],
- [44003, 44015], [44026, 44031], [55204, 55215], [55239, 55242], [55292, 55295],
- [57344, 63743], [64046, 64047], [64110, 64111], [64218, 64255], [64263, 64274],
- [64280, 64284], [64434, 64466], [64830, 64847], [64912, 64913], [64968, 65007],
- [65020, 65135], [65277, 65295], [65306, 65312], [65339, 65344], [65371, 65381],
- [65471, 65473], [65480, 65481], [65488, 65489], [65496, 65497]];
- for (i = 0; i < ranges.length; i++) {
- start = ranges[i][0];
- end = ranges[i][1];
- for (j = start; j <= end; j++) {
- result[j] = true;
- }
- }
- return result;
-})();
-
-function splitQuery(query) {
- var result = [];
- var start = -1;
- for (var i = 0; i < query.length; i++) {
- if (splitChars[query.charCodeAt(i)]) {
- if (start !== -1) {
- result.push(query.slice(start, i));
- start = -1;
- }
- } else if (start === -1) {
- start = i;
- }
- }
- if (start !== -1) {
- result.push(query.slice(start));
- }
- return result;
-}
-
-
-
-
-/**
- * Search Module
- */
-var Search = {
-
- _index : null,
- _queued_query : null,
- _pulse_status : -1,
-
- init : function() {
- var params = $.getQueryParameters();
- if (params.q) {
- var query = params.q[0];
- $('input[name="q"]')[0].value = query;
- this.performSearch(query);
- }
- },
-
- loadIndex : function(url) {
- $.ajax({type: "GET", url: url, data: null,
- dataType: "script", cache: true,
- complete: function(jqxhr, textstatus) {
- if (textstatus != "success") {
- document.getElementById("searchindexloader").src = url;
- }
- }});
- },
-
- setIndex : function(index) {
- var q;
- this._index = index;
- if ((q = this._queued_query) !== null) {
- this._queued_query = null;
- Search.query(q);
- }
- },
-
- hasIndex : function() {
- return this._index !== null;
- },
-
- deferQuery : function(query) {
- this._queued_query = query;
- },
-
- stopPulse : function() {
- this._pulse_status = 0;
- },
-
- startPulse : function() {
- if (this._pulse_status >= 0)
- return;
- function pulse() {
- var i;
- Search._pulse_status = (Search._pulse_status + 1) % 4;
- var dotString = '';
- for (i = 0; i < Search._pulse_status; i++)
- dotString += '.';
- Search.dots.text(dotString);
- if (Search._pulse_status > -1)
- window.setTimeout(pulse, 500);
- }
- pulse();
- },
-
- /**
- * perform a search for something (or wait until index is loaded)
- */
- performSearch : function(query) {
- // create the required interface elements
- this.out = $('#search-results');
- this.title = $('<h2>' + _('Searching') + '</h2>').appendTo(this.out);
- this.dots = $('<span></span>').appendTo(this.title);
- this.status = $('<p style="display: none"></p>').appendTo(this.out);
- this.output = $('<ul class="search"/>').appendTo(this.out);
-
- $('#search-progress').text(_('Preparing search...'));
- this.startPulse();
-
- // index already loaded, the browser was quick!
- if (this.hasIndex())
- this.query(query);
- else
- this.deferQuery(query);
- },
-
- /**
- * execute search (requires search index to be loaded)
- */
- query : function(query) {
- var i;
- var stopwords = ["a","and","are","as","at","be","but","by","for","if","in","into","is","it","near","no","not","of","on","or","such","that","the","their","then","there","these","they","this","to","was","will","with"];
-
- // stem the searchterms and add them to the correct list
- var stemmer = new Stemmer();
- var searchterms = [];
- var excluded = [];
- var hlterms = [];
- var tmp = splitQuery(query);
- var objectterms = [];
- for (i = 0; i < tmp.length; i++) {
- if (tmp[i] !== "") {
- objectterms.push(tmp[i].toLowerCase());
- }
-
- if ($u.indexOf(stopwords, tmp[i].toLowerCase()) != -1 || tmp[i].match(/^\d+$/) ||
- tmp[i] === "") {
- // skip this "word"
- continue;
- }
- // stem the word
- var word = stemmer.stemWord(tmp[i].toLowerCase());
- // prevent stemmer from cutting word smaller than two chars
- if(word.length < 3 && tmp[i].length >= 3) {
- word = tmp[i];
- }
- var toAppend;
- // select the correct list
- if (word[0] == '-') {
- toAppend = excluded;
- word = word.substr(1);
- }
- else {
- toAppend = searchterms;
- hlterms.push(tmp[i].toLowerCase());
- }
- // only add if not already in the list
- if (!$u.contains(toAppend, word))
- toAppend.push(word);
- }
- var highlightstring = '?highlight=' + $.urlencode(hlterms.join(" "));
-
- // console.debug('SEARCH: searching for:');
- // console.info('required: ', searchterms);
- // console.info('excluded: ', excluded);
-
- // prepare search
- var terms = this._index.terms;
- var titleterms = this._index.titleterms;
-
- // array of [filename, title, anchor, descr, score]
- var results = [];
- $('#search-progress').empty();
-
- // lookup as object
- for (i = 0; i < objectterms.length; i++) {
- var others = [].concat(objectterms.slice(0, i),
- objectterms.slice(i+1, objectterms.length));
- results = results.concat(this.performObjectSearch(objectterms[i], others));
- }
-
- // lookup as search terms in fulltext
- results = results.concat(this.performTermsSearch(searchterms, excluded, terms, titleterms));
-
- // let the scorer override scores with a custom scoring function
- if (Scorer.score) {
- for (i = 0; i < results.length; i++)
- results[i][4] = Scorer.score(results[i]);
- }
-
- // now sort the results by score (in opposite order of appearance, since the
- // display function below uses pop() to retrieve items) and then
- // alphabetically
- results.sort(function(a, b) {
- var left = a[4];
- var right = b[4];
- if (left > right) {
- return 1;
- } else if (left < right) {
- return -1;
- } else {
- // same score: sort alphabetically
- left = a[1].toLowerCase();
- right = b[1].toLowerCase();
- return (left > right) ? -1 : ((left < right) ? 1 : 0);
- }
- });
-
- // for debugging
- //Search.lastresults = results.slice(); // a copy
- //console.info('search results:', Search.lastresults);
-
- // print the results
- var resultCount = results.length;
- function displayNextItem() {
- // results left, load the summary and display it
- if (results.length) {
- var item = results.pop();
- var listItem = $('<li style="display:none"></li>');
- if (DOCUMENTATION_OPTIONS.FILE_SUFFIX === '') {
- // dirhtml builder
- var dirname = item[0] + '/';
- if (dirname.match(/\/index\/$/)) {
- dirname = dirname.substring(0, dirname.length-6);
- } else if (dirname == 'index/') {
- dirname = '';
- }
- listItem.append($('<a/>').attr('href',
- DOCUMENTATION_OPTIONS.URL_ROOT + dirname +
- highlightstring + item[2]).html(item[1]));
- } else {
- // normal html builders
- listItem.append($('<a/>').attr('href',
- item[0] + DOCUMENTATION_OPTIONS.FILE_SUFFIX +
- highlightstring + item[2]).html(item[1]));
- }
- if (item[3]) {
- listItem.append($('<span> (' + item[3] + ')</span>'));
- Search.output.append(listItem);
- listItem.slideDown(5, function() {
- displayNextItem();
- });
- } else if (DOCUMENTATION_OPTIONS.HAS_SOURCE) {
- var suffix = DOCUMENTATION_OPTIONS.SOURCELINK_SUFFIX;
- if (suffix === undefined) {
- suffix = '.txt';
- }
- $.ajax({url: DOCUMENTATION_OPTIONS.URL_ROOT + '_sources/' + item[5] + (item[5].slice(-suffix.length) === suffix ? '' : suffix),
- dataType: "text",
- complete: function(jqxhr, textstatus) {
- var data = jqxhr.responseText;
- if (data !== '' && data !== undefined) {
- listItem.append(Search.makeSearchSummary(data, searchterms, hlterms));
- }
- Search.output.append(listItem);
- listItem.slideDown(5, function() {
- displayNextItem();
- });
- }});
- } else {
- // no source available, just display title
- Search.output.append(listItem);
- listItem.slideDown(5, function() {
- displayNextItem();
- });
- }
- }
- // search finished, update title and status message
- else {
- Search.stopPulse();
- Search.title.text(_('Search Results'));
- if (!resultCount)
- Search.status.text(_('Your search did not match any documents. Please make sure that all words are spelled correctly and that you\'ve selected enough categories.'));
- else
- Search.status.text(_('Search finished, found %s page(s) matching the search query.').replace('%s', resultCount));
- Search.status.fadeIn(500);
- }
- }
- displayNextItem();
- },
-
- /**
- * search for object names
- */
- performObjectSearch : function(object, otherterms) {
- var filenames = this._index.filenames;
- var docnames = this._index.docnames;
- var objects = this._index.objects;
- var objnames = this._index.objnames;
- var titles = this._index.titles;
-
- var i;
- var results = [];
-
- for (var prefix in objects) {
- for (var name in objects[prefix]) {
- var fullname = (prefix ? prefix + '.' : '') + name;
- if (fullname.toLowerCase().indexOf(object) > -1) {
- var score = 0;
- var parts = fullname.split('.');
- // check for different match types: exact matches of full name or
- // "last name" (i.e. last dotted part)
- if (fullname == object || parts[parts.length - 1] == object) {
- score += Scorer.objNameMatch;
- // matches in last name
- } else if (parts[parts.length - 1].indexOf(object) > -1) {
- score += Scorer.objPartialMatch;
- }
- var match = objects[prefix][name];
- var objname = objnames[match[1]][2];
- var title = titles[match[0]];
- // If more than one term searched for, we require other words to be
- // found in the name/title/description
- if (otherterms.length > 0) {
- var haystack = (prefix + ' ' + name + ' ' +
- objname + ' ' + title).toLowerCase();
- var allfound = true;
- for (i = 0; i < otherterms.length; i++) {
- if (haystack.indexOf(otherterms[i]) == -1) {
- allfound = false;
- break;
- }
- }
- if (!allfound) {
- continue;
- }
- }
- var descr = objname + _(', in ') + title;
-
- var anchor = match[3];
- if (anchor === '')
- anchor = fullname;
- else if (anchor == '-')
- anchor = objnames[match[1]][1] + '-' + fullname;
- // add custom score for some objects according to scorer
- if (Scorer.objPrio.hasOwnProperty(match[2])) {
- score += Scorer.objPrio[match[2]];
- } else {
- score += Scorer.objPrioDefault;
- }
- results.push([docnames[match[0]], fullname, '#'+anchor, descr, score, filenames[match[0]]]);
- }
- }
- }
-
- return results;
- },
-
- /**
- * search for full-text terms in the index
- */
- performTermsSearch : function(searchterms, excluded, terms, titleterms) {
- var docnames = this._index.docnames;
- var filenames = this._index.filenames;
- var titles = this._index.titles;
-
- var i, j, file;
- var fileMap = {};
- var scoreMap = {};
- var results = [];
-
- // perform the search on the required terms
- for (i = 0; i < searchterms.length; i++) {
- var word = searchterms[i];
- var files = [];
- var _o = [
- {files: terms[word], score: Scorer.term},
- {files: titleterms[word], score: Scorer.title}
- ];
-
- // no match but word was a required one
- if ($u.every(_o, function(o){return o.files === undefined;})) {
- break;
- }
- // found search word in contents
- $u.each(_o, function(o) {
- var _files = o.files;
- if (_files === undefined)
- return
-
- if (_files.length === undefined)
- _files = [_files];
- files = files.concat(_files);
-
- // set score for the word in each file to Scorer.term
- for (j = 0; j < _files.length; j++) {
- file = _files[j];
- if (!(file in scoreMap))
- scoreMap[file] = {}
- scoreMap[file][word] = o.score;
- }
- });
-
- // create the mapping
- for (j = 0; j < files.length; j++) {
- file = files[j];
- if (file in fileMap)
- fileMap[file].push(word);
- else
- fileMap[file] = [word];
- }
- }
-
- // now check if the files don't contain excluded terms
- for (file in fileMap) {
- var valid = true;
-
- // check if all requirements are matched
- if (fileMap[file].length != searchterms.length)
- continue;
-
- // ensure that none of the excluded terms is in the search result
- for (i = 0; i < excluded.length; i++) {
- if (terms[excluded[i]] == file ||
- titleterms[excluded[i]] == file ||
- $u.contains(terms[excluded[i]] || [], file) ||
- $u.contains(titleterms[excluded[i]] || [], file)) {
- valid = false;
- break;
- }
- }
-
- // if we have still a valid result we can add it to the result list
- if (valid) {
- // select one (max) score for the file.
- // for better ranking, we should calculate ranking by using words statistics like basic tf-idf...
- var score = $u.max($u.map(fileMap[file], function(w){return scoreMap[file][w]}));
- results.push([docnames[file], titles[file], '', null, score, filenames[file]]);
- }
- }
- return results;
- },
-
- /**
- * helper function to return a node containing the
- * search summary for a given text. keywords is a list
- * of stemmed words, hlwords is the list of normal, unstemmed
- * words. the first one is used to find the occurrence, the
- * latter for highlighting it.
- */
- makeSearchSummary : function(text, keywords, hlwords) {
- var textLower = text.toLowerCase();
- var start = 0;
- $.each(keywords, function() {
- var i = textLower.indexOf(this.toLowerCase());
- if (i > -1)
- start = i;
- });
- start = Math.max(start - 120, 0);
- var excerpt = ((start > 0) ? '...' : '') +
- $.trim(text.substr(start, 240)) +
- ((start + 240 - text.length) ? '...' : '');
- var rv = $('<div class="context"></div>').text(excerpt);
- $.each(hlwords, function() {
- rv = rv.highlightText(this, 'highlighted');
- });
- return rv;
- }
-};
-
-$(document).ready(function() {
- Search.init();
-});
\ No newline at end of file
+++ /dev/null
-// Underscore.js 1.8.3
-// http://underscorejs.org
-// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
-// Underscore may be freely distributed under the MIT license.
-
-(function() {
-
- // Baseline setup
- // --------------
-
- // Establish the root object, `window` in the browser, or `exports` on the server.
- var root = this;
-
- // Save the previous value of the `_` variable.
- var previousUnderscore = root._;
-
- // Save bytes in the minified (but not gzipped) version:
- var ArrayProto = Array.prototype, ObjProto = Object.prototype, FuncProto = Function.prototype;
-
- // Create quick reference variables for speed access to core prototypes.
- var
- push = ArrayProto.push,
- slice = ArrayProto.slice,
- toString = ObjProto.toString,
- hasOwnProperty = ObjProto.hasOwnProperty;
-
- // All **ECMAScript 5** native function implementations that we hope to use
- // are declared here.
- var
- nativeIsArray = Array.isArray,
- nativeKeys = Object.keys,
- nativeBind = FuncProto.bind,
- nativeCreate = Object.create;
-
- // Naked function reference for surrogate-prototype-swapping.
- var Ctor = function(){};
-
- // Create a safe reference to the Underscore object for use below.
- var _ = function(obj) {
- if (obj instanceof _) return obj;
- if (!(this instanceof _)) return new _(obj);
- this._wrapped = obj;
- };
-
- // Export the Underscore object for **Node.js**, with
- // backwards-compatibility for the old `require()` API. If we're in
- // the browser, add `_` as a global object.
- if (typeof exports !== 'undefined') {
- if (typeof module !== 'undefined' && module.exports) {
- exports = module.exports = _;
- }
- exports._ = _;
- } else {
- root._ = _;
- }
-
- // Current version.
- _.VERSION = '1.8.3';
-
- // Internal function that returns an efficient (for current engines) version
- // of the passed-in callback, to be repeatedly applied in other Underscore
- // functions.
- var optimizeCb = function(func, context, argCount) {
- if (context === void 0) return func;
- switch (argCount == null ? 3 : argCount) {
- case 1: return function(value) {
- return func.call(context, value);
- };
- case 2: return function(value, other) {
- return func.call(context, value, other);
- };
- case 3: return function(value, index, collection) {
- return func.call(context, value, index, collection);
- };
- case 4: return function(accumulator, value, index, collection) {
- return func.call(context, accumulator, value, index, collection);
- };
- }
- return function() {
- return func.apply(context, arguments);
- };
- };
-
- // A mostly-internal function to generate callbacks that can be applied
- // to each element in a collection, returning the desired result — either
- // identity, an arbitrary callback, a property matcher, or a property accessor.
- var cb = function(value, context, argCount) {
- if (value == null) return _.identity;
- if (_.isFunction(value)) return optimizeCb(value, context, argCount);
- if (_.isObject(value)) return _.matcher(value);
- return _.property(value);
- };
- _.iteratee = function(value, context) {
- return cb(value, context, Infinity);
- };
-
- // An internal function for creating assigner functions.
- var createAssigner = function(keysFunc, undefinedOnly) {
- return function(obj) {
- var length = arguments.length;
- if (length < 2 || obj == null) return obj;
- for (var index = 1; index < length; index++) {
- var source = arguments[index],
- keys = keysFunc(source),
- l = keys.length;
- for (var i = 0; i < l; i++) {
- var key = keys[i];
- if (!undefinedOnly || obj[key] === void 0) obj[key] = source[key];
- }
- }
- return obj;
- };
- };
-
- // An internal function for creating a new object that inherits from another.
- var baseCreate = function(prototype) {
- if (!_.isObject(prototype)) return {};
- if (nativeCreate) return nativeCreate(prototype);
- Ctor.prototype = prototype;
- var result = new Ctor;
- Ctor.prototype = null;
- return result;
- };
-
- var property = function(key) {
- return function(obj) {
- return obj == null ? void 0 : obj[key];
- };
- };
-
- // Helper for collection methods to determine whether a collection
- // should be iterated as an array or as an object
- // Related: http://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength
- // Avoids a very nasty iOS 8 JIT bug on ARM-64. #2094
- var MAX_ARRAY_INDEX = Math.pow(2, 53) - 1;
- var getLength = property('length');
- var isArrayLike = function(collection) {
- var length = getLength(collection);
- return typeof length == 'number' && length >= 0 && length <= MAX_ARRAY_INDEX;
- };
-
- // Collection Functions
- // --------------------
-
- // The cornerstone, an `each` implementation, aka `forEach`.
- // Handles raw objects in addition to array-likes. Treats all
- // sparse array-likes as if they were dense.
- _.each = _.forEach = function(obj, iteratee, context) {
- iteratee = optimizeCb(iteratee, context);
- var i, length;
- if (isArrayLike(obj)) {
- for (i = 0, length = obj.length; i < length; i++) {
- iteratee(obj[i], i, obj);
- }
- } else {
- var keys = _.keys(obj);
- for (i = 0, length = keys.length; i < length; i++) {
- iteratee(obj[keys[i]], keys[i], obj);
- }
- }
- return obj;
- };
-
- // Return the results of applying the iteratee to each element.
- _.map = _.collect = function(obj, iteratee, context) {
- iteratee = cb(iteratee, context);
- var keys = !isArrayLike(obj) && _.keys(obj),
- length = (keys || obj).length,
- results = Array(length);
- for (var index = 0; index < length; index++) {
- var currentKey = keys ? keys[index] : index;
- results[index] = iteratee(obj[currentKey], currentKey, obj);
- }
- return results;
- };
-
- // Create a reducing function iterating left or right.
- function createReduce(dir) {
- // Optimized iterator function as using arguments.length
- // in the main function will deoptimize the, see #1991.
- function iterator(obj, iteratee, memo, keys, index, length) {
- for (; index >= 0 && index < length; index += dir) {
- var currentKey = keys ? keys[index] : index;
- memo = iteratee(memo, obj[currentKey], currentKey, obj);
- }
- return memo;
- }
-
- return function(obj, iteratee, memo, context) {
- iteratee = optimizeCb(iteratee, context, 4);
- var keys = !isArrayLike(obj) && _.keys(obj),
- length = (keys || obj).length,
- index = dir > 0 ? 0 : length - 1;
- // Determine the initial value if none is provided.
- if (arguments.length < 3) {
- memo = obj[keys ? keys[index] : index];
- index += dir;
- }
- return iterator(obj, iteratee, memo, keys, index, length);
- };
- }
-
- // **Reduce** builds up a single result from a list of values, aka `inject`,
- // or `foldl`.
- _.reduce = _.foldl = _.inject = createReduce(1);
-
- // The right-associative version of reduce, also known as `foldr`.
- _.reduceRight = _.foldr = createReduce(-1);
-
- // Return the first value which passes a truth test. Aliased as `detect`.
- _.find = _.detect = function(obj, predicate, context) {
- var key;
- if (isArrayLike(obj)) {
- key = _.findIndex(obj, predicate, context);
- } else {
- key = _.findKey(obj, predicate, context);
- }
- if (key !== void 0 && key !== -1) return obj[key];
- };
-
- // Return all the elements that pass a truth test.
- // Aliased as `select`.
- _.filter = _.select = function(obj, predicate, context) {
- var results = [];
- predicate = cb(predicate, context);
- _.each(obj, function(value, index, list) {
- if (predicate(value, index, list)) results.push(value);
- });
- return results;
- };
-
- // Return all the elements for which a truth test fails.
- _.reject = function(obj, predicate, context) {
- return _.filter(obj, _.negate(cb(predicate)), context);
- };
-
- // Determine whether all of the elements match a truth test.
- // Aliased as `all`.
- _.every = _.all = function(obj, predicate, context) {
- predicate = cb(predicate, context);
- var keys = !isArrayLike(obj) && _.keys(obj),
- length = (keys || obj).length;
- for (var index = 0; index < length; index++) {
- var currentKey = keys ? keys[index] : index;
- if (!predicate(obj[currentKey], currentKey, obj)) return false;
- }
- return true;
- };
-
- // Determine if at least one element in the object matches a truth test.
- // Aliased as `any`.
- _.some = _.any = function(obj, predicate, context) {
- predicate = cb(predicate, context);
- var keys = !isArrayLike(obj) && _.keys(obj),
- length = (keys || obj).length;
- for (var index = 0; index < length; index++) {
- var currentKey = keys ? keys[index] : index;
- if (predicate(obj[currentKey], currentKey, obj)) return true;
- }
- return false;
- };
-
- // Determine if the array or object contains a given item (using `===`).
- // Aliased as `includes` and `include`.
- _.contains = _.includes = _.include = function(obj, item, fromIndex, guard) {
- if (!isArrayLike(obj)) obj = _.values(obj);
- if (typeof fromIndex != 'number' || guard) fromIndex = 0;
- return _.indexOf(obj, item, fromIndex) >= 0;
- };
-
- // Invoke a method (with arguments) on every item in a collection.
- _.invoke = function(obj, method) {
- var args = slice.call(arguments, 2);
- var isFunc = _.isFunction(method);
- return _.map(obj, function(value) {
- var func = isFunc ? method : value[method];
- return func == null ? func : func.apply(value, args);
- });
- };
-
- // Convenience version of a common use case of `map`: fetching a property.
- _.pluck = function(obj, key) {
- return _.map(obj, _.property(key));
- };
-
- // Convenience version of a common use case of `filter`: selecting only objects
- // containing specific `key:value` pairs.
- _.where = function(obj, attrs) {
- return _.filter(obj, _.matcher(attrs));
- };
-
- // Convenience version of a common use case of `find`: getting the first object
- // containing specific `key:value` pairs.
- _.findWhere = function(obj, attrs) {
- return _.find(obj, _.matcher(attrs));
- };
-
- // Return the maximum element (or element-based computation).
- _.max = function(obj, iteratee, context) {
- var result = -Infinity, lastComputed = -Infinity,
- value, computed;
- if (iteratee == null && obj != null) {
- obj = isArrayLike(obj) ? obj : _.values(obj);
- for (var i = 0, length = obj.length; i < length; i++) {
- value = obj[i];
- if (value > result) {
- result = value;
- }
- }
- } else {
- iteratee = cb(iteratee, context);
- _.each(obj, function(value, index, list) {
- computed = iteratee(value, index, list);
- if (computed > lastComputed || computed === -Infinity && result === -Infinity) {
- result = value;
- lastComputed = computed;
- }
- });
- }
- return result;
- };
-
- // Return the minimum element (or element-based computation).
- _.min = function(obj, iteratee, context) {
- var result = Infinity, lastComputed = Infinity,
- value, computed;
- if (iteratee == null && obj != null) {
- obj = isArrayLike(obj) ? obj : _.values(obj);
- for (var i = 0, length = obj.length; i < length; i++) {
- value = obj[i];
- if (value < result) {
- result = value;
- }
- }
- } else {
- iteratee = cb(iteratee, context);
- _.each(obj, function(value, index, list) {
- computed = iteratee(value, index, list);
- if (computed < lastComputed || computed === Infinity && result === Infinity) {
- result = value;
- lastComputed = computed;
- }
- });
- }
- return result;
- };
-
- // Shuffle a collection, using the modern version of the
- // [Fisher-Yates shuffle](http://en.wikipedia.org/wiki/Fisher–Yates_shuffle).
- _.shuffle = function(obj) {
- var set = isArrayLike(obj) ? obj : _.values(obj);
- var length = set.length;
- var shuffled = Array(length);
- for (var index = 0, rand; index < length; index++) {
- rand = _.random(0, index);
- if (rand !== index) shuffled[index] = shuffled[rand];
- shuffled[rand] = set[index];
- }
- return shuffled;
- };
-
- // Sample **n** random values from a collection.
- // If **n** is not specified, returns a single random element.
- // The internal `guard` argument allows it to work with `map`.
- _.sample = function(obj, n, guard) {
- if (n == null || guard) {
- if (!isArrayLike(obj)) obj = _.values(obj);
- return obj[_.random(obj.length - 1)];
- }
- return _.shuffle(obj).slice(0, Math.max(0, n));
- };
-
- // Sort the object's values by a criterion produced by an iteratee.
- _.sortBy = function(obj, iteratee, context) {
- iteratee = cb(iteratee, context);
- return _.pluck(_.map(obj, function(value, index, list) {
- return {
- value: value,
- index: index,
- criteria: iteratee(value, index, list)
- };
- }).sort(function(left, right) {
- var a = left.criteria;
- var b = right.criteria;
- if (a !== b) {
- if (a > b || a === void 0) return 1;
- if (a < b || b === void 0) return -1;
- }
- return left.index - right.index;
- }), 'value');
- };
-
- // An internal function used for aggregate "group by" operations.
- var group = function(behavior) {
- return function(obj, iteratee, context) {
- var result = {};
- iteratee = cb(iteratee, context);
- _.each(obj, function(value, index) {
- var key = iteratee(value, index, obj);
- behavior(result, value, key);
- });
- return result;
- };
- };
-
- // Groups the object's values by a criterion. Pass either a string attribute
- // to group by, or a function that returns the criterion.
- _.groupBy = group(function(result, value, key) {
- if (_.has(result, key)) result[key].push(value); else result[key] = [value];
- });
-
- // Indexes the object's values by a criterion, similar to `groupBy`, but for
- // when you know that your index values will be unique.
- _.indexBy = group(function(result, value, key) {
- result[key] = value;
- });
-
- // Counts instances of an object that group by a certain criterion. Pass
- // either a string attribute to count by, or a function that returns the
- // criterion.
- _.countBy = group(function(result, value, key) {
- if (_.has(result, key)) result[key]++; else result[key] = 1;
- });
-
- // Safely create a real, live array from anything iterable.
- _.toArray = function(obj) {
- if (!obj) return [];
- if (_.isArray(obj)) return slice.call(obj);
- if (isArrayLike(obj)) return _.map(obj, _.identity);
- return _.values(obj);
- };
-
- // Return the number of elements in an object.
- _.size = function(obj) {
- if (obj == null) return 0;
- return isArrayLike(obj) ? obj.length : _.keys(obj).length;
- };
-
- // Split a collection into two arrays: one whose elements all satisfy the given
- // predicate, and one whose elements all do not satisfy the predicate.
- _.partition = function(obj, predicate, context) {
- predicate = cb(predicate, context);
- var pass = [], fail = [];
- _.each(obj, function(value, key, obj) {
- (predicate(value, key, obj) ? pass : fail).push(value);
- });
- return [pass, fail];
- };
-
- // Array Functions
- // ---------------
-
- // Get the first element of an array. Passing **n** will return the first N
- // values in the array. Aliased as `head` and `take`. The **guard** check
- // allows it to work with `_.map`.
- _.first = _.head = _.take = function(array, n, guard) {
- if (array == null) return void 0;
- if (n == null || guard) return array[0];
- return _.initial(array, array.length - n);
- };
-
- // Returns everything but the last entry of the array. Especially useful on
- // the arguments object. Passing **n** will return all the values in
- // the array, excluding the last N.
- _.initial = function(array, n, guard) {
- return slice.call(array, 0, Math.max(0, array.length - (n == null || guard ? 1 : n)));
- };
-
- // Get the last element of an array. Passing **n** will return the last N
- // values in the array.
- _.last = function(array, n, guard) {
- if (array == null) return void 0;
- if (n == null || guard) return array[array.length - 1];
- return _.rest(array, Math.max(0, array.length - n));
- };
-
- // Returns everything but the first entry of the array. Aliased as `tail` and `drop`.
- // Especially useful on the arguments object. Passing an **n** will return
- // the rest N values in the array.
- _.rest = _.tail = _.drop = function(array, n, guard) {
- return slice.call(array, n == null || guard ? 1 : n);
- };
-
- // Trim out all falsy values from an array.
- _.compact = function(array) {
- return _.filter(array, _.identity);
- };
-
- // Internal implementation of a recursive `flatten` function.
- var flatten = function(input, shallow, strict, startIndex) {
- var output = [], idx = 0;
- for (var i = startIndex || 0, length = getLength(input); i < length; i++) {
- var value = input[i];
- if (isArrayLike(value) && (_.isArray(value) || _.isArguments(value))) {
- //flatten current level of array or arguments object
- if (!shallow) value = flatten(value, shallow, strict);
- var j = 0, len = value.length;
- output.length += len;
- while (j < len) {
- output[idx++] = value[j++];
- }
- } else if (!strict) {
- output[idx++] = value;
- }
- }
- return output;
- };
-
- // Flatten out an array, either recursively (by default), or just one level.
- _.flatten = function(array, shallow) {
- return flatten(array, shallow, false);
- };
-
- // Return a version of the array that does not contain the specified value(s).
- _.without = function(array) {
- return _.difference(array, slice.call(arguments, 1));
- };
-
- // Produce a duplicate-free version of the array. If the array has already
- // been sorted, you have the option of using a faster algorithm.
- // Aliased as `unique`.
- _.uniq = _.unique = function(array, isSorted, iteratee, context) {
- if (!_.isBoolean(isSorted)) {
- context = iteratee;
- iteratee = isSorted;
- isSorted = false;
- }
- if (iteratee != null) iteratee = cb(iteratee, context);
- var result = [];
- var seen = [];
- for (var i = 0, length = getLength(array); i < length; i++) {
- var value = array[i],
- computed = iteratee ? iteratee(value, i, array) : value;
- if (isSorted) {
- if (!i || seen !== computed) result.push(value);
- seen = computed;
- } else if (iteratee) {
- if (!_.contains(seen, computed)) {
- seen.push(computed);
- result.push(value);
- }
- } else if (!_.contains(result, value)) {
- result.push(value);
- }
- }
- return result;
- };
-
- // Produce an array that contains the union: each distinct element from all of
- // the passed-in arrays.
- _.union = function() {
- return _.uniq(flatten(arguments, true, true));
- };
-
- // Produce an array that contains every item shared between all the
- // passed-in arrays.
- _.intersection = function(array) {
- var result = [];
- var argsLength = arguments.length;
- for (var i = 0, length = getLength(array); i < length; i++) {
- var item = array[i];
- if (_.contains(result, item)) continue;
- for (var j = 1; j < argsLength; j++) {
- if (!_.contains(arguments[j], item)) break;
- }
- if (j === argsLength) result.push(item);
- }
- return result;
- };
-
- // Take the difference between one array and a number of other arrays.
- // Only the elements present in just the first array will remain.
- _.difference = function(array) {
- var rest = flatten(arguments, true, true, 1);
- return _.filter(array, function(value){
- return !_.contains(rest, value);
- });
- };
-
- // Zip together multiple lists into a single array -- elements that share
- // an index go together.
- _.zip = function() {
- return _.unzip(arguments);
- };
-
- // Complement of _.zip. Unzip accepts an array of arrays and groups
- // each array's elements on shared indices
- _.unzip = function(array) {
- var length = array && _.max(array, getLength).length || 0;
- var result = Array(length);
-
- for (var index = 0; index < length; index++) {
- result[index] = _.pluck(array, index);
- }
- return result;
- };
-
- // Converts lists into objects. Pass either a single array of `[key, value]`
- // pairs, or two parallel arrays of the same length -- one of keys, and one of
- // the corresponding values.
- _.object = function(list, values) {
- var result = {};
- for (var i = 0, length = getLength(list); i < length; i++) {
- if (values) {
- result[list[i]] = values[i];
- } else {
- result[list[i][0]] = list[i][1];
- }
- }
- return result;
- };
-
- // Generator function to create the findIndex and findLastIndex functions
- function createPredicateIndexFinder(dir) {
- return function(array, predicate, context) {
- predicate = cb(predicate, context);
- var length = getLength(array);
- var index = dir > 0 ? 0 : length - 1;
- for (; index >= 0 && index < length; index += dir) {
- if (predicate(array[index], index, array)) return index;
- }
- return -1;
- };
- }
-
- // Returns the first index on an array-like that passes a predicate test
- _.findIndex = createPredicateIndexFinder(1);
- _.findLastIndex = createPredicateIndexFinder(-1);
-
- // Use a comparator function to figure out the smallest index at which
- // an object should be inserted so as to maintain order. Uses binary search.
- _.sortedIndex = function(array, obj, iteratee, context) {
- iteratee = cb(iteratee, context, 1);
- var value = iteratee(obj);
- var low = 0, high = getLength(array);
- while (low < high) {
- var mid = Math.floor((low + high) / 2);
- if (iteratee(array[mid]) < value) low = mid + 1; else high = mid;
- }
- return low;
- };
-
- // Generator function to create the indexOf and lastIndexOf functions
- function createIndexFinder(dir, predicateFind, sortedIndex) {
- return function(array, item, idx) {
- var i = 0, length = getLength(array);
- if (typeof idx == 'number') {
- if (dir > 0) {
- i = idx >= 0 ? idx : Math.max(idx + length, i);
- } else {
- length = idx >= 0 ? Math.min(idx + 1, length) : idx + length + 1;
- }
- } else if (sortedIndex && idx && length) {
- idx = sortedIndex(array, item);
- return array[idx] === item ? idx : -1;
- }
- if (item !== item) {
- idx = predicateFind(slice.call(array, i, length), _.isNaN);
- return idx >= 0 ? idx + i : -1;
- }
- for (idx = dir > 0 ? i : length - 1; idx >= 0 && idx < length; idx += dir) {
- if (array[idx] === item) return idx;
- }
- return -1;
- };
- }
-
- // Return the position of the first occurrence of an item in an array,
- // or -1 if the item is not included in the array.
- // If the array is large and already in sort order, pass `true`
- // for **isSorted** to use binary search.
- _.indexOf = createIndexFinder(1, _.findIndex, _.sortedIndex);
- _.lastIndexOf = createIndexFinder(-1, _.findLastIndex);
-
- // Generate an integer Array containing an arithmetic progression. A port of
- // the native Python `range()` function. See
- // [the Python documentation](http://docs.python.org/library/functions.html#range).
- _.range = function(start, stop, step) {
- if (stop == null) {
- stop = start || 0;
- start = 0;
- }
- step = step || 1;
-
- var length = Math.max(Math.ceil((stop - start) / step), 0);
- var range = Array(length);
-
- for (var idx = 0; idx < length; idx++, start += step) {
- range[idx] = start;
- }
-
- return range;
- };
-
- // Function (ahem) Functions
- // ------------------
-
- // Determines whether to execute a function as a constructor
- // or a normal function with the provided arguments
- var executeBound = function(sourceFunc, boundFunc, context, callingContext, args) {
- if (!(callingContext instanceof boundFunc)) return sourceFunc.apply(context, args);
- var self = baseCreate(sourceFunc.prototype);
- var result = sourceFunc.apply(self, args);
- if (_.isObject(result)) return result;
- return self;
- };
-
- // Create a function bound to a given object (assigning `this`, and arguments,
- // optionally). Delegates to **ECMAScript 5**'s native `Function.bind` if
- // available.
- _.bind = function(func, context) {
- if (nativeBind && func.bind === nativeBind) return nativeBind.apply(func, slice.call(arguments, 1));
- if (!_.isFunction(func)) throw new TypeError('Bind must be called on a function');
- var args = slice.call(arguments, 2);
- var bound = function() {
- return executeBound(func, bound, context, this, args.concat(slice.call(arguments)));
- };
- return bound;
- };
-
- // Partially apply a function by creating a version that has had some of its
- // arguments pre-filled, without changing its dynamic `this` context. _ acts
- // as a placeholder, allowing any combination of arguments to be pre-filled.
- _.partial = function(func) {
- var boundArgs = slice.call(arguments, 1);
- var bound = function() {
- var position = 0, length = boundArgs.length;
- var args = Array(length);
- for (var i = 0; i < length; i++) {
- args[i] = boundArgs[i] === _ ? arguments[position++] : boundArgs[i];
- }
- while (position < arguments.length) args.push(arguments[position++]);
- return executeBound(func, bound, this, this, args);
- };
- return bound;
- };
-
- // Bind a number of an object's methods to that object. Remaining arguments
- // are the method names to be bound. Useful for ensuring that all callbacks
- // defined on an object belong to it.
- _.bindAll = function(obj) {
- var i, length = arguments.length, key;
- if (length <= 1) throw new Error('bindAll must be passed function names');
- for (i = 1; i < length; i++) {
- key = arguments[i];
- obj[key] = _.bind(obj[key], obj);
- }
- return obj;
- };
-
- // Memoize an expensive function by storing its results.
- _.memoize = function(func, hasher) {
- var memoize = function(key) {
- var cache = memoize.cache;
- var address = '' + (hasher ? hasher.apply(this, arguments) : key);
- if (!_.has(cache, address)) cache[address] = func.apply(this, arguments);
- return cache[address];
- };
- memoize.cache = {};
- return memoize;
- };
-
- // Delays a function for the given number of milliseconds, and then calls
- // it with the arguments supplied.
- _.delay = function(func, wait) {
- var args = slice.call(arguments, 2);
- return setTimeout(function(){
- return func.apply(null, args);
- }, wait);
- };
-
- // Defers a function, scheduling it to run after the current call stack has
- // cleared.
- _.defer = _.partial(_.delay, _, 1);
-
- // Returns a function, that, when invoked, will only be triggered at most once
- // during a given window of time. Normally, the throttled function will run
- // as much as it can, without ever going more than once per `wait` duration;
- // but if you'd like to disable the execution on the leading edge, pass
- // `{leading: false}`. To disable execution on the trailing edge, ditto.
- _.throttle = function(func, wait, options) {
- var context, args, result;
- var timeout = null;
- var previous = 0;
- if (!options) options = {};
- var later = function() {
- previous = options.leading === false ? 0 : _.now();
- timeout = null;
- result = func.apply(context, args);
- if (!timeout) context = args = null;
- };
- return function() {
- var now = _.now();
- if (!previous && options.leading === false) previous = now;
- var remaining = wait - (now - previous);
- context = this;
- args = arguments;
- if (remaining <= 0 || remaining > wait) {
- if (timeout) {
- clearTimeout(timeout);
- timeout = null;
- }
- previous = now;
- result = func.apply(context, args);
- if (!timeout) context = args = null;
- } else if (!timeout && options.trailing !== false) {
- timeout = setTimeout(later, remaining);
- }
- return result;
- };
- };
-
- // Returns a function, that, as long as it continues to be invoked, will not
- // be triggered. The function will be called after it stops being called for
- // N milliseconds. If `immediate` is passed, trigger the function on the
- // leading edge, instead of the trailing.
- _.debounce = function(func, wait, immediate) {
- var timeout, args, context, timestamp, result;
-
- var later = function() {
- var last = _.now() - timestamp;
-
- if (last < wait && last >= 0) {
- timeout = setTimeout(later, wait - last);
- } else {
- timeout = null;
- if (!immediate) {
- result = func.apply(context, args);
- if (!timeout) context = args = null;
- }
- }
- };
-
- return function() {
- context = this;
- args = arguments;
- timestamp = _.now();
- var callNow = immediate && !timeout;
- if (!timeout) timeout = setTimeout(later, wait);
- if (callNow) {
- result = func.apply(context, args);
- context = args = null;
- }
-
- return result;
- };
- };
-
- // Returns the first function passed as an argument to the second,
- // allowing you to adjust arguments, run code before and after, and
- // conditionally execute the original function.
- _.wrap = function(func, wrapper) {
- return _.partial(wrapper, func);
- };
-
- // Returns a negated version of the passed-in predicate.
- _.negate = function(predicate) {
- return function() {
- return !predicate.apply(this, arguments);
- };
- };
-
- // Returns a function that is the composition of a list of functions, each
- // consuming the return value of the function that follows.
- _.compose = function() {
- var args = arguments;
- var start = args.length - 1;
- return function() {
- var i = start;
- var result = args[start].apply(this, arguments);
- while (i--) result = args[i].call(this, result);
- return result;
- };
- };
-
- // Returns a function that will only be executed on and after the Nth call.
- _.after = function(times, func) {
- return function() {
- if (--times < 1) {
- return func.apply(this, arguments);
- }
- };
- };
-
- // Returns a function that will only be executed up to (but not including) the Nth call.
- _.before = function(times, func) {
- var memo;
- return function() {
- if (--times > 0) {
- memo = func.apply(this, arguments);
- }
- if (times <= 1) func = null;
- return memo;
- };
- };
-
- // Returns a function that will be executed at most one time, no matter how
- // often you call it. Useful for lazy initialization.
- _.once = _.partial(_.before, 2);
-
- // Object Functions
- // ----------------
-
- // Keys in IE < 9 that won't be iterated by `for key in ...` and thus missed.
- var hasEnumBug = !{toString: null}.propertyIsEnumerable('toString');
- var nonEnumerableProps = ['valueOf', 'isPrototypeOf', 'toString',
- 'propertyIsEnumerable', 'hasOwnProperty', 'toLocaleString'];
-
- function collectNonEnumProps(obj, keys) {
- var nonEnumIdx = nonEnumerableProps.length;
- var constructor = obj.constructor;
- var proto = (_.isFunction(constructor) && constructor.prototype) || ObjProto;
-
- // Constructor is a special case.
- var prop = 'constructor';
- if (_.has(obj, prop) && !_.contains(keys, prop)) keys.push(prop);
-
- while (nonEnumIdx--) {
- prop = nonEnumerableProps[nonEnumIdx];
- if (prop in obj && obj[prop] !== proto[prop] && !_.contains(keys, prop)) {
- keys.push(prop);
- }
- }
- }
-
- // Retrieve the names of an object's own properties.
- // Delegates to **ECMAScript 5**'s native `Object.keys`
- _.keys = function(obj) {
- if (!_.isObject(obj)) return [];
- if (nativeKeys) return nativeKeys(obj);
- var keys = [];
- for (var key in obj) if (_.has(obj, key)) keys.push(key);
- // Ahem, IE < 9.
- if (hasEnumBug) collectNonEnumProps(obj, keys);
- return keys;
- };
-
- // Retrieve all the property names of an object.
- _.allKeys = function(obj) {
- if (!_.isObject(obj)) return [];
- var keys = [];
- for (var key in obj) keys.push(key);
- // Ahem, IE < 9.
- if (hasEnumBug) collectNonEnumProps(obj, keys);
- return keys;
- };
-
- // Retrieve the values of an object's properties.
- _.values = function(obj) {
- var keys = _.keys(obj);
- var length = keys.length;
- var values = Array(length);
- for (var i = 0; i < length; i++) {
- values[i] = obj[keys[i]];
- }
- return values;
- };
-
- // Returns the results of applying the iteratee to each element of the object
- // In contrast to _.map it returns an object
- _.mapObject = function(obj, iteratee, context) {
- iteratee = cb(iteratee, context);
- var keys = _.keys(obj),
- length = keys.length,
- results = {},
- currentKey;
- for (var index = 0; index < length; index++) {
- currentKey = keys[index];
- results[currentKey] = iteratee(obj[currentKey], currentKey, obj);
- }
- return results;
- };
-
- // Convert an object into a list of `[key, value]` pairs.
- _.pairs = function(obj) {
- var keys = _.keys(obj);
- var length = keys.length;
- var pairs = Array(length);
- for (var i = 0; i < length; i++) {
- pairs[i] = [keys[i], obj[keys[i]]];
- }
- return pairs;
- };
-
- // Invert the keys and values of an object. The values must be serializable.
- _.invert = function(obj) {
- var result = {};
- var keys = _.keys(obj);
- for (var i = 0, length = keys.length; i < length; i++) {
- result[obj[keys[i]]] = keys[i];
- }
- return result;
- };
-
- // Return a sorted list of the function names available on the object.
- // Aliased as `methods`
- _.functions = _.methods = function(obj) {
- var names = [];
- for (var key in obj) {
- if (_.isFunction(obj[key])) names.push(key);
- }
- return names.sort();
- };
-
- // Extend a given object with all the properties in passed-in object(s).
- _.extend = createAssigner(_.allKeys);
-
- // Assigns a given object with all the own properties in the passed-in object(s)
- // (https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Object/assign)
- _.extendOwn = _.assign = createAssigner(_.keys);
-
- // Returns the first key on an object that passes a predicate test
- _.findKey = function(obj, predicate, context) {
- predicate = cb(predicate, context);
- var keys = _.keys(obj), key;
- for (var i = 0, length = keys.length; i < length; i++) {
- key = keys[i];
- if (predicate(obj[key], key, obj)) return key;
- }
- };
-
- // Return a copy of the object only containing the whitelisted properties.
- _.pick = function(object, oiteratee, context) {
- var result = {}, obj = object, iteratee, keys;
- if (obj == null) return result;
- if (_.isFunction(oiteratee)) {
- keys = _.allKeys(obj);
- iteratee = optimizeCb(oiteratee, context);
- } else {
- keys = flatten(arguments, false, false, 1);
- iteratee = function(value, key, obj) { return key in obj; };
- obj = Object(obj);
- }
- for (var i = 0, length = keys.length; i < length; i++) {
- var key = keys[i];
- var value = obj[key];
- if (iteratee(value, key, obj)) result[key] = value;
- }
- return result;
- };
-
- // Return a copy of the object without the blacklisted properties.
- _.omit = function(obj, iteratee, context) {
- if (_.isFunction(iteratee)) {
- iteratee = _.negate(iteratee);
- } else {
- var keys = _.map(flatten(arguments, false, false, 1), String);
- iteratee = function(value, key) {
- return !_.contains(keys, key);
- };
- }
- return _.pick(obj, iteratee, context);
- };
-
- // Fill in a given object with default properties.
- _.defaults = createAssigner(_.allKeys, true);
-
- // Creates an object that inherits from the given prototype object.
- // If additional properties are provided then they will be added to the
- // created object.
- _.create = function(prototype, props) {
- var result = baseCreate(prototype);
- if (props) _.extendOwn(result, props);
- return result;
- };
-
- // Create a (shallow-cloned) duplicate of an object.
- _.clone = function(obj) {
- if (!_.isObject(obj)) return obj;
- return _.isArray(obj) ? obj.slice() : _.extend({}, obj);
- };
-
- // Invokes interceptor with the obj, and then returns obj.
- // The primary purpose of this method is to "tap into" a method chain, in
- // order to perform operations on intermediate results within the chain.
- _.tap = function(obj, interceptor) {
- interceptor(obj);
- return obj;
- };
-
- // Returns whether an object has a given set of `key:value` pairs.
- _.isMatch = function(object, attrs) {
- var keys = _.keys(attrs), length = keys.length;
- if (object == null) return !length;
- var obj = Object(object);
- for (var i = 0; i < length; i++) {
- var key = keys[i];
- if (attrs[key] !== obj[key] || !(key in obj)) return false;
- }
- return true;
- };
-
-
- // Internal recursive comparison function for `isEqual`.
- var eq = function(a, b, aStack, bStack) {
- // Identical objects are equal. `0 === -0`, but they aren't identical.
- // See the [Harmony `egal` proposal](http://wiki.ecmascript.org/doku.php?id=harmony:egal).
- if (a === b) return a !== 0 || 1 / a === 1 / b;
- // A strict comparison is necessary because `null == undefined`.
- if (a == null || b == null) return a === b;
- // Unwrap any wrapped objects.
- if (a instanceof _) a = a._wrapped;
- if (b instanceof _) b = b._wrapped;
- // Compare `[[Class]]` names.
- var className = toString.call(a);
- if (className !== toString.call(b)) return false;
- switch (className) {
- // Strings, numbers, regular expressions, dates, and booleans are compared by value.
- case '[object RegExp]':
- // RegExps are coerced to strings for comparison (Note: '' + /a/i === '/a/i')
- case '[object String]':
- // Primitives and their corresponding object wrappers are equivalent; thus, `"5"` is
- // equivalent to `new String("5")`.
- return '' + a === '' + b;
- case '[object Number]':
- // `NaN`s are equivalent, but non-reflexive.
- // Object(NaN) is equivalent to NaN
- if (+a !== +a) return +b !== +b;
- // An `egal` comparison is performed for other numeric values.
- return +a === 0 ? 1 / +a === 1 / b : +a === +b;
- case '[object Date]':
- case '[object Boolean]':
- // Coerce dates and booleans to numeric primitive values. Dates are compared by their
- // millisecond representations. Note that invalid dates with millisecond representations
- // of `NaN` are not equivalent.
- return +a === +b;
- }
-
- var areArrays = className === '[object Array]';
- if (!areArrays) {
- if (typeof a != 'object' || typeof b != 'object') return false;
-
- // Objects with different constructors are not equivalent, but `Object`s or `Array`s
- // from different frames are.
- var aCtor = a.constructor, bCtor = b.constructor;
- if (aCtor !== bCtor && !(_.isFunction(aCtor) && aCtor instanceof aCtor &&
- _.isFunction(bCtor) && bCtor instanceof bCtor)
- && ('constructor' in a && 'constructor' in b)) {
- return false;
- }
- }
- // Assume equality for cyclic structures. The algorithm for detecting cyclic
- // structures is adapted from ES 5.1 section 15.12.3, abstract operation `JO`.
-
- // Initializing stack of traversed objects.
- // It's done here since we only need them for objects and arrays comparison.
- aStack = aStack || [];
- bStack = bStack || [];
- var length = aStack.length;
- while (length--) {
- // Linear search. Performance is inversely proportional to the number of
- // unique nested structures.
- if (aStack[length] === a) return bStack[length] === b;
- }
-
- // Add the first object to the stack of traversed objects.
- aStack.push(a);
- bStack.push(b);
-
- // Recursively compare objects and arrays.
- if (areArrays) {
- // Compare array lengths to determine if a deep comparison is necessary.
- length = a.length;
- if (length !== b.length) return false;
- // Deep compare the contents, ignoring non-numeric properties.
- while (length--) {
- if (!eq(a[length], b[length], aStack, bStack)) return false;
- }
- } else {
- // Deep compare objects.
- var keys = _.keys(a), key;
- length = keys.length;
- // Ensure that both objects contain the same number of properties before comparing deep equality.
- if (_.keys(b).length !== length) return false;
- while (length--) {
- // Deep compare each member
- key = keys[length];
- if (!(_.has(b, key) && eq(a[key], b[key], aStack, bStack))) return false;
- }
- }
- // Remove the first object from the stack of traversed objects.
- aStack.pop();
- bStack.pop();
- return true;
- };
-
- // Perform a deep comparison to check if two objects are equal.
- _.isEqual = function(a, b) {
- return eq(a, b);
- };
-
- // Is a given array, string, or object empty?
- // An "empty" object has no enumerable own-properties.
- _.isEmpty = function(obj) {
- if (obj == null) return true;
- if (isArrayLike(obj) && (_.isArray(obj) || _.isString(obj) || _.isArguments(obj))) return obj.length === 0;
- return _.keys(obj).length === 0;
- };
-
- // Is a given value a DOM element?
- _.isElement = function(obj) {
- return !!(obj && obj.nodeType === 1);
- };
-
- // Is a given value an array?
- // Delegates to ECMA5's native Array.isArray
- _.isArray = nativeIsArray || function(obj) {
- return toString.call(obj) === '[object Array]';
- };
-
- // Is a given variable an object?
- _.isObject = function(obj) {
- var type = typeof obj;
- return type === 'function' || type === 'object' && !!obj;
- };
-
- // Add some isType methods: isArguments, isFunction, isString, isNumber, isDate, isRegExp, isError.
- _.each(['Arguments', 'Function', 'String', 'Number', 'Date', 'RegExp', 'Error'], function(name) {
- _['is' + name] = function(obj) {
- return toString.call(obj) === '[object ' + name + ']';
- };
- });
-
- // Define a fallback version of the method in browsers (ahem, IE < 9), where
- // there isn't any inspectable "Arguments" type.
- if (!_.isArguments(arguments)) {
- _.isArguments = function(obj) {
- return _.has(obj, 'callee');
- };
- }
-
- // Optimize `isFunction` if appropriate. Work around some typeof bugs in old v8,
- // IE 11 (#1621), and in Safari 8 (#1929).
- if (typeof /./ != 'function' && typeof Int8Array != 'object') {
- _.isFunction = function(obj) {
- return typeof obj == 'function' || false;
- };
- }
-
- // Is a given object a finite number?
- _.isFinite = function(obj) {
- return isFinite(obj) && !isNaN(parseFloat(obj));
- };
-
- // Is the given value `NaN`? (NaN is the only number which does not equal itself).
- _.isNaN = function(obj) {
- return _.isNumber(obj) && obj !== +obj;
- };
-
- // Is a given value a boolean?
- _.isBoolean = function(obj) {
- return obj === true || obj === false || toString.call(obj) === '[object Boolean]';
- };
-
- // Is a given value equal to null?
- _.isNull = function(obj) {
- return obj === null;
- };
-
- // Is a given variable undefined?
- _.isUndefined = function(obj) {
- return obj === void 0;
- };
-
- // Shortcut function for checking if an object has a given property directly
- // on itself (in other words, not on a prototype).
- _.has = function(obj, key) {
- return obj != null && hasOwnProperty.call(obj, key);
- };
-
- // Utility Functions
- // -----------------
-
- // Run Underscore.js in *noConflict* mode, returning the `_` variable to its
- // previous owner. Returns a reference to the Underscore object.
- _.noConflict = function() {
- root._ = previousUnderscore;
- return this;
- };
-
- // Keep the identity function around for default iteratees.
- _.identity = function(value) {
- return value;
- };
-
- // Predicate-generating functions. Often useful outside of Underscore.
- _.constant = function(value) {
- return function() {
- return value;
- };
- };
-
- _.noop = function(){};
-
- _.property = property;
-
- // Generates a function for a given object that returns a given property.
- _.propertyOf = function(obj) {
- return obj == null ? function(){} : function(key) {
- return obj[key];
- };
- };
-
- // Returns a predicate for checking whether an object has a given set of
- // `key:value` pairs.
- _.matcher = _.matches = function(attrs) {
- attrs = _.extendOwn({}, attrs);
- return function(obj) {
- return _.isMatch(obj, attrs);
- };
- };
-
- // Run a function **n** times.
- _.times = function(n, iteratee, context) {
- var accum = Array(Math.max(0, n));
- iteratee = optimizeCb(iteratee, context, 1);
- for (var i = 0; i < n; i++) accum[i] = iteratee(i);
- return accum;
- };
-
- // Return a random integer between min and max (inclusive).
- _.random = function(min, max) {
- if (max == null) {
- max = min;
- min = 0;
- }
- return min + Math.floor(Math.random() * (max - min + 1));
- };
-
- // A (possibly faster) way to get the current timestamp as an integer.
- _.now = Date.now || function() {
- return new Date().getTime();
- };
-
- // List of HTML entities for escaping.
- var escapeMap = {
- '&': '&',
- '<': '<',
- '>': '>',
- '"': '"',
- "'": ''',
- '`': '`'
- };
- var unescapeMap = _.invert(escapeMap);
-
- // Functions for escaping and unescaping strings to/from HTML interpolation.
- var createEscaper = function(map) {
- var escaper = function(match) {
- return map[match];
- };
- // Regexes for identifying a key that needs to be escaped
- var source = '(?:' + _.keys(map).join('|') + ')';
- var testRegexp = RegExp(source);
- var replaceRegexp = RegExp(source, 'g');
- return function(string) {
- string = string == null ? '' : '' + string;
- return testRegexp.test(string) ? string.replace(replaceRegexp, escaper) : string;
- };
- };
- _.escape = createEscaper(escapeMap);
- _.unescape = createEscaper(unescapeMap);
-
- // If the value of the named `property` is a function then invoke it with the
- // `object` as context; otherwise, return it.
- _.result = function(object, property, fallback) {
- var value = object == null ? void 0 : object[property];
- if (value === void 0) {
- value = fallback;
- }
- return _.isFunction(value) ? value.call(object) : value;
- };
-
- // Generate a unique integer id (unique within the entire client session).
- // Useful for temporary DOM ids.
- var idCounter = 0;
- _.uniqueId = function(prefix) {
- var id = ++idCounter + '';
- return prefix ? prefix + id : id;
- };
-
- // By default, Underscore uses ERB-style template delimiters, change the
- // following template settings to use alternative delimiters.
- _.templateSettings = {
- evaluate : /<%([\s\S]+?)%>/g,
- interpolate : /<%=([\s\S]+?)%>/g,
- escape : /<%-([\s\S]+?)%>/g
- };
-
- // When customizing `templateSettings`, if you don't want to define an
- // interpolation, evaluation or escaping regex, we need one that is
- // guaranteed not to match.
- var noMatch = /(.)^/;
-
- // Certain characters need to be escaped so that they can be put into a
- // string literal.
- var escapes = {
- "'": "'",
- '\\': '\\',
- '\r': 'r',
- '\n': 'n',
- '\u2028': 'u2028',
- '\u2029': 'u2029'
- };
-
- var escaper = /\\|'|\r|\n|\u2028|\u2029/g;
-
- var escapeChar = function(match) {
- return '\\' + escapes[match];
- };
-
- // In order to prevent third-party code injection through
- // `_.templateSettings.variable`, we test it against the following regular
- // expression. It is intentionally a bit more liberal than just matching valid
- // identifiers, but still prevents possible loopholes through defaults or
- // destructuring assignment.
- var bareIdentifier = /^\s*(\w|\$)+\s*$/;
-
- // JavaScript micro-templating, similar to John Resig's implementation.
- // Underscore templating handles arbitrary delimiters, preserves whitespace,
- // and correctly escapes quotes within interpolated code.
- // NB: `oldSettings` only exists for backwards compatibility.
- _.template = function(text, settings, oldSettings) {
- if (!settings && oldSettings) settings = oldSettings;
- settings = _.defaults({}, settings, _.templateSettings);
-
- // Combine delimiters into one regular expression via alternation.
- var matcher = RegExp([
- (settings.escape || noMatch).source,
- (settings.interpolate || noMatch).source,
- (settings.evaluate || noMatch).source
- ].join('|') + '|$', 'g');
-
- // Compile the template source, escaping string literals appropriately.
- var index = 0;
- var source = "__p+='";
- text.replace(matcher, function(match, escape, interpolate, evaluate, offset) {
- source += text.slice(index, offset).replace(escaper, escapeChar);
- index = offset + match.length;
-
- if (escape) {
- source += "'+\n((__t=(" + escape + "))==null?'':_.escape(__t))+\n'";
- } else if (interpolate) {
- source += "'+\n((__t=(" + interpolate + "))==null?'':__t)+\n'";
- } else if (evaluate) {
- source += "';\n" + evaluate + "\n__p+='";
- }
-
- // Adobe VMs need the match returned to produce the correct offest.
- return match;
- });
- source += "';\n";
-
- var argument = settings.variable;
- if (argument) {
- // Insure against third-party code injection.
- if (!bareIdentifier.test(argument)) throw new Error(
- 'variable is not a bare identifier: ' + argument
- );
- } else {
- // If a variable is not specified, place data values in local scope.
- source = 'with(obj||{}){\n' + source + '}\n';
- argument = 'obj';
- }
-
- source = "var __t,__p='',__j=Array.prototype.join," +
- "print=function(){__p+=__j.call(arguments,'');};\n" +
- source + 'return __p;\n';
-
- try {
- render = new Function(argument, '_', source);
- } catch (e) {
- e.source = source;
- throw e;
- }
-
- var template = function(data) {
- return render.call(this, data, _);
- };
-
- // Provide the compiled source as a convenience for precompilation.
- template.source = 'function(' + argument + '){\n' + source + '}';
-
- return template;
- };
-
- // Add a "chain" function. Start chaining a wrapped Underscore object.
- _.chain = function(obj) {
- var instance = _(obj);
- instance._chain = true;
- return instance;
- };
-
- // OOP
- // ---------------
- // If Underscore is called as a function, it returns a wrapped object that
- // can be used OO-style. This wrapper holds altered versions of all the
- // underscore functions. Wrapped objects may be chained.
-
- // Helper function to continue chaining intermediate results.
- var result = function(instance, obj) {
- return instance._chain ? _(obj).chain() : obj;
- };
-
- // Add your own custom functions to the Underscore object.
- _.mixin = function(obj) {
- _.each(_.functions(obj), function(name) {
- var func = _[name] = obj[name];
- _.prototype[name] = function() {
- var args = [this._wrapped];
- push.apply(args, arguments);
- return result(this, func.apply(_, args));
- };
- });
- };
-
- // Add all of the Underscore functions to the wrapper object.
- _.mixin(_);
-
- // Add all mutator Array functions to the wrapper.
- _.each(['pop', 'push', 'reverse', 'shift', 'sort', 'splice', 'unshift'], function(name) {
- var method = ArrayProto[name];
- _.prototype[name] = function() {
- var obj = this._wrapped;
- method.apply(obj, arguments);
- if ((name === 'shift' || name === 'splice') && obj.length === 0) delete obj[0];
- return result(this, obj);
- };
- });
-
- // Add all accessor Array functions to the wrapper.
- _.each(['concat', 'join', 'slice'], function(name) {
- var method = ArrayProto[name];
- _.prototype[name] = function() {
- return result(this, method.apply(this._wrapped, arguments));
- };
- });
-
- // Extracts the result from a wrapped and chained object.
- _.prototype.value = function() {
- return this._wrapped;
- };
-
- // Provide unwrapping proxy for some methods used in engine operations
- // such as arithmetic and JSON stringification.
- _.prototype.valueOf = _.prototype.toJSON = _.prototype.value;
-
- _.prototype.toString = function() {
- return '' + this._wrapped;
- };
-
- // AMD registration happens at the end for compatibility with AMD loaders
- // that may not enforce next-turn semantics on modules. Even though general
- // practice for AMD registration is to be anonymous, underscore registers
- // as a named module because, like jQuery, it is a base library that is
- // popular enough to be bundled in a third party lib, but not be part of
- // an AMD load request. Those cases could generate an error when an
- // anonymous define() is called outside of a loader request.
- if (typeof define === 'function' && define.amd) {
- define('underscore', [], function() {
- return _;
- });
- }
-}.call(this));
+++ /dev/null
-/*
- * websupport.js
- * ~~~~~~~~~~~~~
- *
- * sphinx.websupport utilities for all documentation.
- *
- * :copyright: Copyright 2007-2018 by the Sphinx team, see AUTHORS.
- * :license: BSD, see LICENSE for details.
- *
- */
-
-(function($) {
- $.fn.autogrow = function() {
- return this.each(function() {
- var textarea = this;
-
- $.fn.autogrow.resize(textarea);
-
- $(textarea)
- .focus(function() {
- textarea.interval = setInterval(function() {
- $.fn.autogrow.resize(textarea);
- }, 500);
- })
- .blur(function() {
- clearInterval(textarea.interval);
- });
- });
- };
-
- $.fn.autogrow.resize = function(textarea) {
- var lineHeight = parseInt($(textarea).css('line-height'), 10);
- var lines = textarea.value.split('\n');
- var columns = textarea.cols;
- var lineCount = 0;
- $.each(lines, function() {
- lineCount += Math.ceil(this.length / columns) || 1;
- });
- var height = lineHeight * (lineCount + 1);
- $(textarea).css('height', height);
- };
-})(jQuery);
-
-(function($) {
- var comp, by;
-
- function init() {
- initEvents();
- initComparator();
- }
-
- function initEvents() {
- $(document).on("click", 'a.comment-close', function(event) {
- event.preventDefault();
- hide($(this).attr('id').substring(2));
- });
- $(document).on("click", 'a.vote', function(event) {
- event.preventDefault();
- handleVote($(this));
- });
- $(document).on("click", 'a.reply', function(event) {
- event.preventDefault();
- openReply($(this).attr('id').substring(2));
- });
- $(document).on("click", 'a.close-reply', function(event) {
- event.preventDefault();
- closeReply($(this).attr('id').substring(2));
- });
- $(document).on("click", 'a.sort-option', function(event) {
- event.preventDefault();
- handleReSort($(this));
- });
- $(document).on("click", 'a.show-proposal', function(event) {
- event.preventDefault();
- showProposal($(this).attr('id').substring(2));
- });
- $(document).on("click", 'a.hide-proposal', function(event) {
- event.preventDefault();
- hideProposal($(this).attr('id').substring(2));
- });
- $(document).on("click", 'a.show-propose-change', function(event) {
- event.preventDefault();
- showProposeChange($(this).attr('id').substring(2));
- });
- $(document).on("click", 'a.hide-propose-change', function(event) {
- event.preventDefault();
- hideProposeChange($(this).attr('id').substring(2));
- });
- $(document).on("click", 'a.accept-comment', function(event) {
- event.preventDefault();
- acceptComment($(this).attr('id').substring(2));
- });
- $(document).on("click", 'a.delete-comment', function(event) {
- event.preventDefault();
- deleteComment($(this).attr('id').substring(2));
- });
- $(document).on("click", 'a.comment-markup', function(event) {
- event.preventDefault();
- toggleCommentMarkupBox($(this).attr('id').substring(2));
- });
- }
-
- /**
- * Set comp, which is a comparator function used for sorting and
- * inserting comments into the list.
- */
- function setComparator() {
- // If the first three letters are "asc", sort in ascending order
- // and remove the prefix.
- if (by.substring(0,3) == 'asc') {
- var i = by.substring(3);
- comp = function(a, b) { return a[i] - b[i]; };
- } else {
- // Otherwise sort in descending order.
- comp = function(a, b) { return b[by] - a[by]; };
- }
-
- // Reset link styles and format the selected sort option.
- $('a.sel').attr('href', '#').removeClass('sel');
- $('a.by' + by).removeAttr('href').addClass('sel');
- }
-
- /**
- * Create a comp function. If the user has preferences stored in
- * the sortBy cookie, use those, otherwise use the default.
- */
- function initComparator() {
- by = 'rating'; // Default to sort by rating.
- // If the sortBy cookie is set, use that instead.
- if (document.cookie.length > 0) {
- var start = document.cookie.indexOf('sortBy=');
- if (start != -1) {
- start = start + 7;
- var end = document.cookie.indexOf(";", start);
- if (end == -1) {
- end = document.cookie.length;
- by = unescape(document.cookie.substring(start, end));
- }
- }
- }
- setComparator();
- }
-
- /**
- * Show a comment div.
- */
- function show(id) {
- $('#ao' + id).hide();
- $('#ah' + id).show();
- var context = $.extend({id: id}, opts);
- var popup = $(renderTemplate(popupTemplate, context)).hide();
- popup.find('textarea[name="proposal"]').hide();
- popup.find('a.by' + by).addClass('sel');
- var form = popup.find('#cf' + id);
- form.submit(function(event) {
- event.preventDefault();
- addComment(form);
- });
- $('#s' + id).after(popup);
- popup.slideDown('fast', function() {
- getComments(id);
- });
- }
-
- /**
- * Hide a comment div.
- */
- function hide(id) {
- $('#ah' + id).hide();
- $('#ao' + id).show();
- var div = $('#sc' + id);
- div.slideUp('fast', function() {
- div.remove();
- });
- }
-
- /**
- * Perform an ajax request to get comments for a node
- * and insert the comments into the comments tree.
- */
- function getComments(id) {
- $.ajax({
- type: 'GET',
- url: opts.getCommentsURL,
- data: {node: id},
- success: function(data, textStatus, request) {
- var ul = $('#cl' + id);
- var speed = 100;
- $('#cf' + id)
- .find('textarea[name="proposal"]')
- .data('source', data.source);
-
- if (data.comments.length === 0) {
- ul.html('<li>No comments yet.</li>');
- ul.data('empty', true);
- } else {
- // If there are comments, sort them and put them in the list.
- var comments = sortComments(data.comments);
- speed = data.comments.length * 100;
- appendComments(comments, ul);
- ul.data('empty', false);
- }
- $('#cn' + id).slideUp(speed + 200);
- ul.slideDown(speed);
- },
- error: function(request, textStatus, error) {
- showError('Oops, there was a problem retrieving the comments.');
- },
- dataType: 'json'
- });
- }
-
- /**
- * Add a comment via ajax and insert the comment into the comment tree.
- */
- function addComment(form) {
- var node_id = form.find('input[name="node"]').val();
- var parent_id = form.find('input[name="parent"]').val();
- var text = form.find('textarea[name="comment"]').val();
- var proposal = form.find('textarea[name="proposal"]').val();
-
- if (text == '') {
- showError('Please enter a comment.');
- return;
- }
-
- // Disable the form that is being submitted.
- form.find('textarea,input').attr('disabled', 'disabled');
-
- // Send the comment to the server.
- $.ajax({
- type: "POST",
- url: opts.addCommentURL,
- dataType: 'json',
- data: {
- node: node_id,
- parent: parent_id,
- text: text,
- proposal: proposal
- },
- success: function(data, textStatus, error) {
- // Reset the form.
- if (node_id) {
- hideProposeChange(node_id);
- }
- form.find('textarea')
- .val('')
- .add(form.find('input'))
- .removeAttr('disabled');
- var ul = $('#cl' + (node_id || parent_id));
- if (ul.data('empty')) {
- $(ul).empty();
- ul.data('empty', false);
- }
- insertComment(data.comment);
- var ao = $('#ao' + node_id);
- ao.find('img').attr({'src': opts.commentBrightImage});
- if (node_id) {
- // if this was a "root" comment, remove the commenting box
- // (the user can get it back by reopening the comment popup)
- $('#ca' + node_id).slideUp();
- }
- },
- error: function(request, textStatus, error) {
- form.find('textarea,input').removeAttr('disabled');
- showError('Oops, there was a problem adding the comment.');
- }
- });
- }
-
- /**
- * Recursively append comments to the main comment list and children
- * lists, creating the comment tree.
- */
- function appendComments(comments, ul) {
- $.each(comments, function() {
- var div = createCommentDiv(this);
- ul.append($(document.createElement('li')).html(div));
- appendComments(this.children, div.find('ul.comment-children'));
- // To avoid stagnating data, don't store the comments children in data.
- this.children = null;
- div.data('comment', this);
- });
- }
-
- /**
- * After adding a new comment, it must be inserted in the correct
- * location in the comment tree.
- */
- function insertComment(comment) {
- var div = createCommentDiv(comment);
-
- // To avoid stagnating data, don't store the comments children in data.
- comment.children = null;
- div.data('comment', comment);
-
- var ul = $('#cl' + (comment.node || comment.parent));
- var siblings = getChildren(ul);
-
- var li = $(document.createElement('li'));
- li.hide();
-
- // Determine where in the parents children list to insert this comment.
- for(i=0; i < siblings.length; i++) {
- if (comp(comment, siblings[i]) <= 0) {
- $('#cd' + siblings[i].id)
- .parent()
- .before(li.html(div));
- li.slideDown('fast');
- return;
- }
- }
-
- // If we get here, this comment rates lower than all the others,
- // or it is the only comment in the list.
- ul.append(li.html(div));
- li.slideDown('fast');
- }
-
- function acceptComment(id) {
- $.ajax({
- type: 'POST',
- url: opts.acceptCommentURL,
- data: {id: id},
- success: function(data, textStatus, request) {
- $('#cm' + id).fadeOut('fast');
- $('#cd' + id).removeClass('moderate');
- },
- error: function(request, textStatus, error) {
- showError('Oops, there was a problem accepting the comment.');
- }
- });
- }
-
- function deleteComment(id) {
- $.ajax({
- type: 'POST',
- url: opts.deleteCommentURL,
- data: {id: id},
- success: function(data, textStatus, request) {
- var div = $('#cd' + id);
- if (data == 'delete') {
- // Moderator mode: remove the comment and all children immediately
- div.slideUp('fast', function() {
- div.remove();
- });
- return;
- }
- // User mode: only mark the comment as deleted
- div
- .find('span.user-id:first')
- .text('[deleted]').end()
- .find('div.comment-text:first')
- .text('[deleted]').end()
- .find('#cm' + id + ', #dc' + id + ', #ac' + id + ', #rc' + id +
- ', #sp' + id + ', #hp' + id + ', #cr' + id + ', #rl' + id)
- .remove();
- var comment = div.data('comment');
- comment.username = '[deleted]';
- comment.text = '[deleted]';
- div.data('comment', comment);
- },
- error: function(request, textStatus, error) {
- showError('Oops, there was a problem deleting the comment.');
- }
- });
- }
-
- function showProposal(id) {
- $('#sp' + id).hide();
- $('#hp' + id).show();
- $('#pr' + id).slideDown('fast');
- }
-
- function hideProposal(id) {
- $('#hp' + id).hide();
- $('#sp' + id).show();
- $('#pr' + id).slideUp('fast');
- }
-
- function showProposeChange(id) {
- $('#pc' + id).hide();
- $('#hc' + id).show();
- var textarea = $('#pt' + id);
- textarea.val(textarea.data('source'));
- $.fn.autogrow.resize(textarea[0]);
- textarea.slideDown('fast');
- }
-
- function hideProposeChange(id) {
- $('#hc' + id).hide();
- $('#pc' + id).show();
- var textarea = $('#pt' + id);
- textarea.val('').removeAttr('disabled');
- textarea.slideUp('fast');
- }
-
- function toggleCommentMarkupBox(id) {
- $('#mb' + id).toggle();
- }
-
- /** Handle when the user clicks on a sort by link. */
- function handleReSort(link) {
- var classes = link.attr('class').split(/\s+/);
- for (var i=0; i<classes.length; i++) {
- if (classes[i] != 'sort-option') {
- by = classes[i].substring(2);
- }
- }
- setComparator();
- // Save/update the sortBy cookie.
- var expiration = new Date();
- expiration.setDate(expiration.getDate() + 365);
- document.cookie= 'sortBy=' + escape(by) +
- ';expires=' + expiration.toUTCString();
- $('ul.comment-ul').each(function(index, ul) {
- var comments = getChildren($(ul), true);
- comments = sortComments(comments);
- appendComments(comments, $(ul).empty());
- });
- }
-
- /**
- * Function to process a vote when a user clicks an arrow.
- */
- function handleVote(link) {
- if (!opts.voting) {
- showError("You'll need to login to vote.");
- return;
- }
-
- var id = link.attr('id');
- if (!id) {
- // Didn't click on one of the voting arrows.
- return;
- }
- // If it is an unvote, the new vote value is 0,
- // Otherwise it's 1 for an upvote, or -1 for a downvote.
- var value = 0;
- if (id.charAt(1) != 'u') {
- value = id.charAt(0) == 'u' ? 1 : -1;
- }
- // The data to be sent to the server.
- var d = {
- comment_id: id.substring(2),
- value: value
- };
-
- // Swap the vote and unvote links.
- link.hide();
- $('#' + id.charAt(0) + (id.charAt(1) == 'u' ? 'v' : 'u') + d.comment_id)
- .show();
-
- // The div the comment is displayed in.
- var div = $('div#cd' + d.comment_id);
- var data = div.data('comment');
-
- // If this is not an unvote, and the other vote arrow has
- // already been pressed, unpress it.
- if ((d.value !== 0) && (data.vote === d.value * -1)) {
- $('#' + (d.value == 1 ? 'd' : 'u') + 'u' + d.comment_id).hide();
- $('#' + (d.value == 1 ? 'd' : 'u') + 'v' + d.comment_id).show();
- }
-
- // Update the comments rating in the local data.
- data.rating += (data.vote === 0) ? d.value : (d.value - data.vote);
- data.vote = d.value;
- div.data('comment', data);
-
- // Change the rating text.
- div.find('.rating:first')
- .text(data.rating + ' point' + (data.rating == 1 ? '' : 's'));
-
- // Send the vote information to the server.
- $.ajax({
- type: "POST",
- url: opts.processVoteURL,
- data: d,
- error: function(request, textStatus, error) {
- showError('Oops, there was a problem casting that vote.');
- }
- });
- }
-
- /**
- * Open a reply form used to reply to an existing comment.
- */
- function openReply(id) {
- // Swap out the reply link for the hide link
- $('#rl' + id).hide();
- $('#cr' + id).show();
-
- // Add the reply li to the children ul.
- var div = $(renderTemplate(replyTemplate, {id: id})).hide();
- $('#cl' + id)
- .prepend(div)
- // Setup the submit handler for the reply form.
- .find('#rf' + id)
- .submit(function(event) {
- event.preventDefault();
- addComment($('#rf' + id));
- closeReply(id);
- })
- .find('input[type=button]')
- .click(function() {
- closeReply(id);
- });
- div.slideDown('fast', function() {
- $('#rf' + id).find('textarea').focus();
- });
- }
-
- /**
- * Close the reply form opened with openReply.
- */
- function closeReply(id) {
- // Remove the reply div from the DOM.
- $('#rd' + id).slideUp('fast', function() {
- $(this).remove();
- });
-
- // Swap out the hide link for the reply link
- $('#cr' + id).hide();
- $('#rl' + id).show();
- }
-
- /**
- * Recursively sort a tree of comments using the comp comparator.
- */
- function sortComments(comments) {
- comments.sort(comp);
- $.each(comments, function() {
- this.children = sortComments(this.children);
- });
- return comments;
- }
-
- /**
- * Get the children comments from a ul. If recursive is true,
- * recursively include childrens' children.
- */
- function getChildren(ul, recursive) {
- var children = [];
- ul.children().children("[id^='cd']")
- .each(function() {
- var comment = $(this).data('comment');
- if (recursive)
- comment.children = getChildren($(this).find('#cl' + comment.id), true);
- children.push(comment);
- });
- return children;
- }
-
- /** Create a div to display a comment in. */
- function createCommentDiv(comment) {
- if (!comment.displayed && !opts.moderator) {
- return $('<div class="moderate">Thank you! Your comment will show up '
- + 'once it is has been approved by a moderator.</div>');
- }
- // Prettify the comment rating.
- comment.pretty_rating = comment.rating + ' point' +
- (comment.rating == 1 ? '' : 's');
- // Make a class (for displaying not yet moderated comments differently)
- comment.css_class = comment.displayed ? '' : ' moderate';
- // Create a div for this comment.
- var context = $.extend({}, opts, comment);
- var div = $(renderTemplate(commentTemplate, context));
-
- // If the user has voted on this comment, highlight the correct arrow.
- if (comment.vote) {
- var direction = (comment.vote == 1) ? 'u' : 'd';
- div.find('#' + direction + 'v' + comment.id).hide();
- div.find('#' + direction + 'u' + comment.id).show();
- }
-
- if (opts.moderator || comment.text != '[deleted]') {
- div.find('a.reply').show();
- if (comment.proposal_diff)
- div.find('#sp' + comment.id).show();
- if (opts.moderator && !comment.displayed)
- div.find('#cm' + comment.id).show();
- if (opts.moderator || (opts.username == comment.username))
- div.find('#dc' + comment.id).show();
- }
- return div;
- }
-
- /**
- * A simple template renderer. Placeholders such as <%id%> are replaced
- * by context['id'] with items being escaped. Placeholders such as <#id#>
- * are not escaped.
- */
- function renderTemplate(template, context) {
- var esc = $(document.createElement('div'));
-
- function handle(ph, escape) {
- var cur = context;
- $.each(ph.split('.'), function() {
- cur = cur[this];
- });
- return escape ? esc.text(cur || "").html() : cur;
- }
-
- return template.replace(/<([%#])([\w\.]*)\1>/g, function() {
- return handle(arguments[2], arguments[1] == '%' ? true : false);
- });
- }
-
- /** Flash an error message briefly. */
- function showError(message) {
- $(document.createElement('div')).attr({'class': 'popup-error'})
- .append($(document.createElement('div'))
- .attr({'class': 'error-message'}).text(message))
- .appendTo('body')
- .fadeIn("slow")
- .delay(2000)
- .fadeOut("slow");
- }
-
- /** Add a link the user uses to open the comments popup. */
- $.fn.comment = function() {
- return this.each(function() {
- var id = $(this).attr('id').substring(1);
- var count = COMMENT_METADATA[id];
- var title = count + ' comment' + (count == 1 ? '' : 's');
- var image = count > 0 ? opts.commentBrightImage : opts.commentImage;
- var addcls = count == 0 ? ' nocomment' : '';
- $(this)
- .append(
- $(document.createElement('a')).attr({
- href: '#',
- 'class': 'sphinx-comment-open' + addcls,
- id: 'ao' + id
- })
- .append($(document.createElement('img')).attr({
- src: image,
- alt: 'comment',
- title: title
- }))
- .click(function(event) {
- event.preventDefault();
- show($(this).attr('id').substring(2));
- })
- )
- .append(
- $(document.createElement('a')).attr({
- href: '#',
- 'class': 'sphinx-comment-close hidden',
- id: 'ah' + id
- })
- .append($(document.createElement('img')).attr({
- src: opts.closeCommentImage,
- alt: 'close',
- title: 'close'
- }))
- .click(function(event) {
- event.preventDefault();
- hide($(this).attr('id').substring(2));
- })
- );
- });
- };
-
- var opts = {
- processVoteURL: '/_process_vote',
- addCommentURL: '/_add_comment',
- getCommentsURL: '/_get_comments',
- acceptCommentURL: '/_accept_comment',
- deleteCommentURL: '/_delete_comment',
- commentImage: '/static/_static/comment.png',
- closeCommentImage: '/static/_static/comment-close.png',
- loadingImage: '/static/_static/ajax-loader.gif',
- commentBrightImage: '/static/_static/comment-bright.png',
- upArrow: '/static/_static/up.png',
- downArrow: '/static/_static/down.png',
- upArrowPressed: '/static/_static/up-pressed.png',
- downArrowPressed: '/static/_static/down-pressed.png',
- voting: false,
- moderator: false
- };
-
- if (typeof COMMENT_OPTIONS != "undefined") {
- opts = jQuery.extend(opts, COMMENT_OPTIONS);
- }
-
- var popupTemplate = '\
- <div class="sphinx-comments" id="sc<%id%>">\
- <p class="sort-options">\
- Sort by:\
- <a href="#" class="sort-option byrating">best rated</a>\
- <a href="#" class="sort-option byascage">newest</a>\
- <a href="#" class="sort-option byage">oldest</a>\
- </p>\
- <div class="comment-header">Comments</div>\
- <div class="comment-loading" id="cn<%id%>">\
- loading comments... <img src="<%loadingImage%>" alt="" /></div>\
- <ul id="cl<%id%>" class="comment-ul"></ul>\
- <div id="ca<%id%>">\
- <p class="add-a-comment">Add a comment\
- (<a href="#" class="comment-markup" id="ab<%id%>">markup</a>):</p>\
- <div class="comment-markup-box" id="mb<%id%>">\
- reStructured text markup: <i>*emph*</i>, <b>**strong**</b>, \
- <code>``code``</code>, \
- code blocks: <code>::</code> and an indented block after blank line</div>\
- <form method="post" id="cf<%id%>" class="comment-form" action="">\
- <textarea name="comment" cols="80"></textarea>\
- <p class="propose-button">\
- <a href="#" id="pc<%id%>" class="show-propose-change">\
- Propose a change ▹\
- </a>\
- <a href="#" id="hc<%id%>" class="hide-propose-change">\
- Propose a change ▿\
- </a>\
- </p>\
- <textarea name="proposal" id="pt<%id%>" cols="80"\
- spellcheck="false"></textarea>\
- <input type="submit" value="Add comment" />\
- <input type="hidden" name="node" value="<%id%>" />\
- <input type="hidden" name="parent" value="" />\
- </form>\
- </div>\
- </div>';
-
- var commentTemplate = '\
- <div id="cd<%id%>" class="sphinx-comment<%css_class%>">\
- <div class="vote">\
- <div class="arrow">\
- <a href="#" id="uv<%id%>" class="vote" title="vote up">\
- <img src="<%upArrow%>" />\
- </a>\
- <a href="#" id="uu<%id%>" class="un vote" title="vote up">\
- <img src="<%upArrowPressed%>" />\
- </a>\
- </div>\
- <div class="arrow">\
- <a href="#" id="dv<%id%>" class="vote" title="vote down">\
- <img src="<%downArrow%>" id="da<%id%>" />\
- </a>\
- <a href="#" id="du<%id%>" class="un vote" title="vote down">\
- <img src="<%downArrowPressed%>" />\
- </a>\
- </div>\
- </div>\
- <div class="comment-content">\
- <p class="tagline comment">\
- <span class="user-id"><%username%></span>\
- <span class="rating"><%pretty_rating%></span>\
- <span class="delta"><%time.delta%></span>\
- </p>\
- <div class="comment-text comment"><#text#></div>\
- <p class="comment-opts comment">\
- <a href="#" class="reply hidden" id="rl<%id%>">reply ▹</a>\
- <a href="#" class="close-reply" id="cr<%id%>">reply ▿</a>\
- <a href="#" id="sp<%id%>" class="show-proposal">proposal ▹</a>\
- <a href="#" id="hp<%id%>" class="hide-proposal">proposal ▿</a>\
- <a href="#" id="dc<%id%>" class="delete-comment hidden">delete</a>\
- <span id="cm<%id%>" class="moderation hidden">\
- <a href="#" id="ac<%id%>" class="accept-comment">accept</a>\
- </span>\
- </p>\
- <pre class="proposal" id="pr<%id%>">\
-<#proposal_diff#>\
- </pre>\
- <ul class="comment-children" id="cl<%id%>"></ul>\
- </div>\
- <div class="clearleft"></div>\
- </div>\
- </div>';
-
- var replyTemplate = '\
- <li>\
- <div class="reply-div" id="rd<%id%>">\
- <form id="rf<%id%>">\
- <textarea name="comment" cols="80"></textarea>\
- <input type="submit" value="Add reply" />\
- <input type="button" value="Cancel" />\
- <input type="hidden" name="parent" value="<%id%>" />\
- <input type="hidden" name="node" value="" />\
- </form>\
- </div>\
- </li>';
-
- $(document).ready(function() {
- init();
- });
-})(jQuery);
-
-$(document).ready(function() {
- // add comment anchors for all paragraphs that are commentable
- $('.sphinx-has-comment').comment();
-
- // highlight search words in search results
- $("div.context").each(function() {
- var params = $.getQueryParameters();
- var terms = (params.q) ? params.q[0].split(/\s+/) : [];
- var result = $(this);
- $.each(terms, function() {
- result.highlightText(this.toLowerCase(), 'highlighted');
- });
- });
-
- // directly open comment window if requested
- var anchor = document.location.hash;
- if (anchor.substring(0, 9) == '#comment-') {
- $('#ao' + anchor.substring(9)).click();
- document.location.hash = '#s' + anchor.substring(9);
- }
-});
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Contributing to the MIT Kerberos Documentation — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="#" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- <link rel="next" title="Resources" href="resources.html" />
- <link rel="prev" title="How to build this documentation from the source" href="build_this.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="build_this.html" title="How to build this documentation from the source"
- accesskey="P">previous</a> |
- <a href="resources.html" title="Resources"
- accesskey="N">next</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Contributing to the MIT Kerberos Documentation">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="contributing-to-the-mit-kerberos-documentation">
-<h1>Contributing to the MIT Kerberos Documentation<a class="headerlink" href="#contributing-to-the-mit-kerberos-documentation" title="Permalink to this headline">¶</a></h1>
-<p>We are looking for documentation writers and editors who could contribute
-towards improving the MIT KC documentation content. If you are an experienced
-Kerberos developer and/or administrator, please consider sharing your knowledge
-and experience with the Kerberos Community. You can suggest your own topic or
-write about any of the topics listed
-<a class="reference external" href="https://k5wiki.kerberos.org/wiki/Projects/Documentation_Tasks">here</a>.</p>
-<p>If you have any questions, comments, or suggestions on the existing documents,
-please send your feedback via email to <a class="reference external" href="mailto:krb5-bugs%40mit.edu">krb5-bugs<span>@</span>mit<span>.</span>edu</a>. The HTML version of
-this documentation has a “FEEDBACK” link to the <a class="reference external" href="mailto:krb5-bugs%40mit.edu">krb5-bugs<span>@</span>mit<span>.</span>edu</a> email
-address with a pre-constructed subject line.</p>
-<div class="section" id="background">
-<h2>Background<a class="headerlink" href="#background" title="Permalink to this headline">¶</a></h2>
-<p>Starting with release 1.11, the Kerberos documentation set is
-unified in a central form. Man pages, HTML documentation, and PDF
-documents are compiled from reStructuredText sources, and the application
-developer documentation incorporates Doxygen markup from the source
-tree. This project was undertaken along the outline described
-<a class="reference external" href="https://k5wiki.kerberos.org/wiki/Projects/Kerberos_Documentation">here</a>.</p>
-<p>Previous versions of Kerberos 5 attempted to maintain separate documentation
-in the texinfo format, with separate groff manual pages. Having the API
-documentation disjoint from the source code implementing that API
-resulted in the documentation becoming stale, and over time the documentation
-ceased to match reality. With a fresh start and a source format that is
-easier to use and maintain, reStructuredText-based documents should provide
-an improved experience for the user. Consolidating all the documentation
-formats into a single source document makes the documentation set easier
-to maintain.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Contributing to the MIT Kerberos Documentation</a><ul>
-<li><a class="reference internal" href="#background">Background</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1 current"><a class="current reference internal" href="#">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="build_this.html" title="How to build this documentation from the source"
- >previous</a> |
- <a href="resources.html" title="Resources"
- >next</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Contributing to the MIT Kerberos Documentation">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Administration programs — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kadmin" href="kadmin_local.html" />
- <link rel="prev" title="Authentication indicators" href="../auth_indicator.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../auth_indicator.html" title="Authentication indicators"
- accesskey="P">previous</a> |
- <a href="kadmin_local.html" title="kadmin"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Administration programs">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="administration-programs">
-<h1>Administration programs<a class="headerlink" href="#administration-programs" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l1"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l1"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Administration programs</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Administration programs</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../auth_indicator.html" title="Authentication indicators"
- >previous</a> |
- <a href="kadmin_local.html" title="kadmin"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Administration programs">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>k5srvutil — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="sserver" href="sserver.html" />
- <link rel="prev" title="ktutil" href="ktutil.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ktutil.html" title="ktutil"
- accesskey="P">previous</a> |
- <a href="sserver.html" title="sserver"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__k5srvutil">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="k5srvutil">
-<span id="k5srvutil-1"></span><h1>k5srvutil<a class="headerlink" href="#k5srvutil" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>k5srvutil</strong> <em>operation</em>
-[<strong>-i</strong>]
-[<strong>-f</strong> <em>filename</em>]
-[<strong>-e</strong> <em>keysalts</em>]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>k5srvutil allows an administrator to list keys currently in
-a keytab, to obtain new keys for a principal currently in a keytab,
-or to delete non-current keys from a keytab.</p>
-<p><em>operation</em> must be one of the following:</p>
-<dl class="docutils">
-<dt><strong>list</strong></dt>
-<dd>Lists the keys in a keytab, showing version number and principal
-name.</dd>
-<dt><strong>change</strong></dt>
-<dd>Uses the kadmin protocol to update the keys in the Kerberos
-database to new randomly-generated keys, and updates the keys in
-the keytab to match. If a key’s version number doesn’t match the
-version number stored in the Kerberos server’s database, then the
-operation will fail. If the <strong>-i</strong> flag is given, k5srvutil will
-prompt for confirmation before changing each key. If the <strong>-k</strong>
-option is given, the old and new keys will be displayed.
-Ordinarily, keys will be generated with the default encryption
-types and key salts. This can be overridden with the <strong>-e</strong>
-option. Old keys are retained in the keytab so that existing
-tickets continue to work, but <strong>delold</strong> should be used after
-such tickets expire, to prevent attacks against the old keys.</dd>
-<dt><strong>delold</strong></dt>
-<dd>Deletes keys that are not the most recent version from the keytab.
-This operation should be used some time after a change operation
-to remove old keys, after existing tickets issued for the service
-have expired. If the <strong>-i</strong> flag is given, then k5srvutil will
-prompt for confirmation for each principal.</dd>
-<dt><strong>delete</strong></dt>
-<dd>Deletes particular keys in the keytab, interactively prompting for
-each key.</dd>
-</dl>
-<p>In all cases, the default keytab is used unless this is overridden by
-the <strong>-f</strong> option.</p>
-<p>k5srvutil uses the <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> program to edit the keytab in
-place.</p>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>, <a class="reference internal" href="ktutil.html#ktutil-1"><span class="std std-ref">ktutil</span></a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">k5srvutil</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ktutil.html" title="ktutil"
- >previous</a> |
- <a href="sserver.html" title="sserver"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__k5srvutil">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kadmin — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kadmind" href="kadmind.html" />
- <link rel="prev" title="Administration programs" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="Administration programs"
- accesskey="P">previous</a> |
- <a href="kadmind.html" title="kadmind"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kadmin">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kadmin">
-<span id="kadmin-1"></span><h1>kadmin<a class="headerlink" href="#kadmin" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p id="kadmin-synopsis"><strong>kadmin</strong>
-[<strong>-O</strong>|<strong>-N</strong>]
-[<strong>-r</strong> <em>realm</em>]
-[<strong>-p</strong> <em>principal</em>]
-[<strong>-q</strong> <em>query</em>]
-[[<strong>-c</strong> <em>cache_name</em>]|[<strong>-k</strong> [<strong>-t</strong> <em>keytab</em>]]|<strong>-n</strong>]
-[<strong>-w</strong> <em>password</em>]
-[<strong>-s</strong> <em>admin_server</em>[:<em>port</em>]]
-[command args…]</p>
-<p><strong>kadmin.local</strong>
-[<strong>-r</strong> <em>realm</em>]
-[<strong>-p</strong> <em>principal</em>]
-[<strong>-q</strong> <em>query</em>]
-[<strong>-d</strong> <em>dbname</em>]
-[<strong>-e</strong> <em>enc</em>:<em>salt</em> …]
-[<strong>-m</strong>]
-[<strong>-x</strong> <em>db_args</em>]
-[command args…]</p>
-</div>
-<div class="section" id="description">
-<span id="kadmin-synopsis-end"></span><h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>kadmin and kadmin.local are command-line interfaces to the Kerberos V5
-administration system. They provide nearly identical functionalities;
-the difference is that kadmin.local directly accesses the KDC
-database, while kadmin performs operations using <a class="reference internal" href="kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a>.
-Except as explicitly noted otherwise, this man page will use “kadmin”
-to refer to both versions. kadmin provides for the maintenance of
-Kerberos principals, password policies, and service key tables
-(keytabs).</p>
-<p>The remote kadmin client uses Kerberos to authenticate to kadmind
-using the service principal <code class="docutils literal"><span class="pre">kadmin/admin</span></code> or <code class="docutils literal"><span class="pre">kadmin/ADMINHOST</span></code>
-(where <em>ADMINHOST</em> is the fully-qualified hostname of the admin
-server). If the credentials cache contains a ticket for one of these
-principals, and the <strong>-c</strong> credentials_cache option is specified, that
-ticket is used to authenticate to kadmind. Otherwise, the <strong>-p</strong> and
-<strong>-k</strong> options are used to specify the client Kerberos principal name
-used to authenticate. Once kadmin has determined the principal name,
-it requests a service ticket from the KDC, and uses that service
-ticket to authenticate to kadmind.</p>
-<p>Since kadmin.local directly accesses the KDC database, it usually must
-be run directly on the primary KDC with sufficient permissions to read
-the KDC database. If the KDC database uses the LDAP database module,
-kadmin.local can be run on any host which can access the LDAP server.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils" id="kadmin-options">
-<dt><strong>-r</strong> <em>realm</em></dt>
-<dd>Use <em>realm</em> as the default database realm.</dd>
-<dt><strong>-p</strong> <em>principal</em></dt>
-<dd>Use <em>principal</em> to authenticate. Otherwise, kadmin will append
-<code class="docutils literal"><span class="pre">/admin</span></code> to the primary principal name of the default ccache,
-the value of the <strong>USER</strong> environment variable, or the username as
-obtained with getpwuid, in order of preference.</dd>
-<dt><strong>-k</strong></dt>
-<dd>Use a keytab to decrypt the KDC response instead of prompting for
-a password. In this case, the default principal will be
-<code class="docutils literal"><span class="pre">host/hostname</span></code>. If there is no keytab specified with the
-<strong>-t</strong> option, then the default keytab will be used.</dd>
-<dt><strong>-t</strong> <em>keytab</em></dt>
-<dd>Use <em>keytab</em> to decrypt the KDC response. This can only be used
-with the <strong>-k</strong> option.</dd>
-<dt><strong>-n</strong></dt>
-<dd>Requests anonymous processing. Two types of anonymous principals
-are supported. For fully anonymous Kerberos, configure PKINIT on
-the KDC and configure <strong>pkinit_anchors</strong> in the client’s
-<a class="reference internal" href="../conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>. Then use the <strong>-n</strong> option with a principal
-of the form <code class="docutils literal"><span class="pre">@REALM</span></code> (an empty principal name followed by the
-at-sign and a realm name). If permitted by the KDC, an anonymous
-ticket will be returned. A second form of anonymous tickets is
-supported; these realm-exposed tickets hide the identity of the
-client but not the client’s realm. For this mode, use <code class="docutils literal"><span class="pre">kinit</span>
-<span class="pre">-n</span></code> with a normal principal name. If supported by the KDC, the
-principal (but not realm) will be replaced by the anonymous
-principal. As of release 1.8, the MIT Kerberos KDC only supports
-fully anonymous operation.</dd>
-<dt><strong>-c</strong> <em>credentials_cache</em></dt>
-<dd>Use <em>credentials_cache</em> as the credentials cache. The cache
-should contain a service ticket for the <code class="docutils literal"><span class="pre">kadmin/admin</span></code> or
-<code class="docutils literal"><span class="pre">kadmin/ADMINHOST</span></code> (where <em>ADMINHOST</em> is the fully-qualified
-hostname of the admin server) service; it can be acquired with the
-<a class="reference internal" href="../../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a> program. If this option is not specified, kadmin
-requests a new service ticket from the KDC, and stores it in its
-own temporary ccache.</dd>
-<dt><strong>-w</strong> <em>password</em></dt>
-<dd>Use <em>password</em> instead of prompting for one. Use this option with
-care, as it may expose the password to other users on the system
-via the process list.</dd>
-<dt><strong>-q</strong> <em>query</em></dt>
-<dd>Perform the specified query and then exit.</dd>
-<dt><strong>-d</strong> <em>dbname</em></dt>
-<dd>Specifies the name of the KDC database. This option does not
-apply to the LDAP database module.</dd>
-<dt><strong>-s</strong> <em>admin_server</em>[:<em>port</em>]</dt>
-<dd>Specifies the admin server which kadmin should contact.</dd>
-<dt><strong>-m</strong></dt>
-<dd>If using kadmin.local, prompt for the database master password
-instead of reading it from a stash file.</dd>
-<dt><strong>-e</strong> “<em>enc</em>:<em>salt</em> …”</dt>
-<dd>Sets the keysalt list to be used for any new keys created. See
-<a class="reference internal" href="../conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a> in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a list of possible
-values.</dd>
-<dt><strong>-O</strong></dt>
-<dd>Force use of old AUTH_GSSAPI authentication flavor.</dd>
-<dt><strong>-N</strong></dt>
-<dd>Prevent fallback to AUTH_GSSAPI authentication flavor.</dd>
-<dt><strong>-x</strong> <em>db_args</em></dt>
-<dd>Specifies the database specific arguments. See the next section
-for supported options.</dd>
-</dl>
-<p id="kadmin-options-end">Starting with release 1.14, if any command-line arguments remain after
-the options, they will be treated as a single query to be executed.
-This mode of operation is intended for scripts and behaves differently
-from the interactive mode in several respects:</p>
-<ul class="simple">
-<li>Query arguments are split by the shell, not by kadmin.</li>
-<li>Informational and warning messages are suppressed. Error messages
-and query output (e.g. for <strong>get_principal</strong>) will still be
-displayed.</li>
-<li>Confirmation prompts are disabled (as if <strong>-force</strong> was given).
-Password prompts will still be issued as required.</li>
-<li>The exit status will be non-zero if the query fails.</li>
-</ul>
-<p>The <strong>-q</strong> option does not carry these behavior differences; the query
-will be processed as if it was entered interactively. The <strong>-q</strong>
-option cannot be used in combination with a query in the remaining
-arguments.</p>
-</div>
-<div class="section" id="database-options">
-<span id="dboptions"></span><h2>DATABASE OPTIONS<a class="headerlink" href="#database-options" title="Permalink to this headline">¶</a></h2>
-<p>Database options can be used to override database-specific defaults.
-Supported options for the DB2 module are:</p>
-<blockquote>
-<div><dl class="docutils">
-<dt><strong>-x dbname=</strong>*filename*</dt>
-<dd>Specifies the base filename of the DB2 database.</dd>
-<dt><strong>-x lockiter</strong></dt>
-<dd>Make iteration operations hold the lock for the duration of
-the entire operation, rather than temporarily releasing the
-lock while handling each principal. This is the default
-behavior, but this option exists to allow command line
-override of a [dbmodules] setting. First introduced in
-release 1.13.</dd>
-<dt><strong>-x unlockiter</strong></dt>
-<dd>Make iteration operations unlock the database for each
-principal, instead of holding the lock for the duration of the
-entire operation. First introduced in release 1.13.</dd>
-</dl>
-</div></blockquote>
-<p>Supported options for the LDAP module are:</p>
-<blockquote>
-<div><dl class="docutils">
-<dt><strong>-x host=</strong><em>ldapuri</em></dt>
-<dd>Specifies the LDAP server to connect to by a LDAP URI.</dd>
-<dt><strong>-x binddn=</strong><em>bind_dn</em></dt>
-<dd>Specifies the DN used to bind to the LDAP server.</dd>
-<dt><strong>-x bindpwd=</strong><em>password</em></dt>
-<dd>Specifies the password or SASL secret used to bind to the LDAP
-server. Using this option may expose the password to other
-users on the system via the process list; to avoid this,
-instead stash the password using the <strong>stashsrvpw</strong> command of
-<a class="reference internal" href="kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a>.</dd>
-<dt><strong>-x sasl_mech=</strong><em>mechanism</em></dt>
-<dd>Specifies the SASL mechanism used to bind to the LDAP server.
-The bind DN is ignored if a SASL mechanism is used. New in
-release 1.13.</dd>
-<dt><strong>-x sasl_authcid=</strong><em>name</em></dt>
-<dd>Specifies the authentication name used when binding to the
-LDAP server with a SASL mechanism, if the mechanism requires
-one. New in release 1.13.</dd>
-<dt><strong>-x sasl_authzid=</strong><em>name</em></dt>
-<dd>Specifies the authorization name used when binding to the LDAP
-server with a SASL mechanism. New in release 1.13.</dd>
-<dt><strong>-x sasl_realm=</strong><em>realm</em></dt>
-<dd>Specifies the realm used when binding to the LDAP server with
-a SASL mechanism, if the mechanism uses one. New in release
-1.13.</dd>
-<dt><strong>-x debug=</strong><em>level</em></dt>
-<dd>sets the OpenLDAP client library debug level. <em>level</em> is an
-integer to be interpreted by the library. Debugging messages
-are printed to standard error. New in release 1.12.</dd>
-</dl>
-</div></blockquote>
-</div>
-<div class="section" id="commands">
-<h2>COMMANDS<a class="headerlink" href="#commands" title="Permalink to this headline">¶</a></h2>
-<p>When using the remote client, available commands may be restricted
-according to the privileges specified in the <a class="reference internal" href="../conf_files/kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a> file
-on the admin server.</p>
-<div class="section" id="add-principal">
-<span id="id1"></span><h3>add_principal<a class="headerlink" href="#add-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>add_principal</strong> [<em>options</em>] <em>newprinc</em></div></blockquote>
-<p>Creates the principal <em>newprinc</em>, prompting twice for a password. If
-no password policy is specified with the <strong>-policy</strong> option, and the
-policy named <code class="docutils literal"><span class="pre">default</span></code> is assigned to the principal if it exists.
-However, creating a policy named <code class="docutils literal"><span class="pre">default</span></code> will not automatically
-assign this policy to previously existing principals. This policy
-assignment can be suppressed with the <strong>-clearpolicy</strong> option.</p>
-<p>This command requires the <strong>add</strong> privilege.</p>
-<p>Aliases: <strong>addprinc</strong>, <strong>ank</strong></p>
-<p>Options:</p>
-<dl class="docutils">
-<dt><strong>-expire</strong> <em>expdate</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) The expiration date of the principal.</dd>
-<dt><strong>-pwexpire</strong> <em>pwexpdate</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) The password expiration date.</dd>
-<dt><strong>-maxlife</strong> <em>maxlife</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) The maximum ticket life
-for the principal.</dd>
-<dt><strong>-maxrenewlife</strong> <em>maxrenewlife</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) The maximum renewable
-life of tickets for the principal.</dd>
-<dt><strong>-kvno</strong> <em>kvno</em></dt>
-<dd>The initial key version number.</dd>
-<dt><strong>-policy</strong> <em>policy</em></dt>
-<dd>The password policy used by this principal. If not specified, the
-policy <code class="docutils literal"><span class="pre">default</span></code> is used if it exists (unless <strong>-clearpolicy</strong>
-is specified).</dd>
-<dt><strong>-clearpolicy</strong></dt>
-<dd>Prevents any policy from being assigned when <strong>-policy</strong> is not
-specified.</dd>
-<dt>{-|+}<strong>allow_postdated</strong></dt>
-<dd><strong>-allow_postdated</strong> prohibits this principal from obtaining
-postdated tickets. <strong>+allow_postdated</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_forwardable</strong></dt>
-<dd><strong>-allow_forwardable</strong> prohibits this principal from obtaining
-forwardable tickets. <strong>+allow_forwardable</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_renewable</strong></dt>
-<dd><strong>-allow_renewable</strong> prohibits this principal from obtaining
-renewable tickets. <strong>+allow_renewable</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_proxiable</strong></dt>
-<dd><strong>-allow_proxiable</strong> prohibits this principal from obtaining
-proxiable tickets. <strong>+allow_proxiable</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_dup_skey</strong></dt>
-<dd><strong>-allow_dup_skey</strong> disables user-to-user authentication for this
-principal by prohibiting others from obtaining a service ticket
-encrypted in this principal’s TGT session key.
-<strong>+allow_dup_skey</strong> clears this flag.</dd>
-<dt>{-|+}<strong>requires_preauth</strong></dt>
-<dd><strong>+requires_preauth</strong> requires this principal to preauthenticate
-before being allowed to kinit. <strong>-requires_preauth</strong> clears this
-flag. When <strong>+requires_preauth</strong> is set on a service principal,
-the KDC will only issue service tickets for that service principal
-if the client’s initial authentication was performed using
-preauthentication.</dd>
-<dt>{-|+}<strong>requires_hwauth</strong></dt>
-<dd><strong>+requires_hwauth</strong> requires this principal to preauthenticate
-using a hardware device before being allowed to kinit.
-<strong>-requires_hwauth</strong> clears this flag. When <strong>+requires_hwauth</strong> is
-set on a service principal, the KDC will only issue service tickets
-for that service principal if the client’s initial authentication was
-performed using a hardware device to preauthenticate.</dd>
-<dt>{-|+}<strong>ok_as_delegate</strong></dt>
-<dd><strong>+ok_as_delegate</strong> sets the <strong>okay as delegate</strong> flag on tickets
-issued with this principal as the service. Clients may use this
-flag as a hint that credentials should be delegated when
-authenticating to the service. <strong>-ok_as_delegate</strong> clears this
-flag.</dd>
-<dt>{-|+}<strong>allow_svr</strong></dt>
-<dd><strong>-allow_svr</strong> prohibits the issuance of service tickets for this
-principal. In release 1.17 and later, user-to-user service
-tickets are still allowed unless the <strong>-allow_dup_skey</strong> flag is
-also set. <strong>+allow_svr</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_tgs_req</strong></dt>
-<dd><strong>-allow_tgs_req</strong> specifies that a Ticket-Granting Service (TGS)
-request for a service ticket for this principal is not permitted.
-<strong>+allow_tgs_req</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_tix</strong></dt>
-<dd><strong>-allow_tix</strong> forbids the issuance of any tickets for this
-principal. <strong>+allow_tix</strong> clears this flag.</dd>
-<dt>{-|+}<strong>needchange</strong></dt>
-<dd><strong>+needchange</strong> forces a password change on the next initial
-authentication to this principal. <strong>-needchange</strong> clears this
-flag.</dd>
-<dt>{-|+}<strong>password_changing_service</strong></dt>
-<dd><strong>+password_changing_service</strong> marks this principal as a password
-change service principal.</dd>
-<dt>{-|+}<strong>ok_to_auth_as_delegate</strong></dt>
-<dd><strong>+ok_to_auth_as_delegate</strong> allows this principal to acquire
-forwardable tickets to itself from arbitrary users, for use with
-constrained delegation.</dd>
-<dt>{-|+}<strong>no_auth_data_required</strong></dt>
-<dd><strong>+no_auth_data_required</strong> prevents PAC or AD-SIGNEDPATH data from
-being added to service tickets for the principal.</dd>
-<dt>{-|+}<strong>lockdown_keys</strong></dt>
-<dd><strong>+lockdown_keys</strong> prevents keys for this principal from leaving
-the KDC via kadmind. The chpass and extract operations are denied
-for a principal with this attribute. The chrand operation is
-allowed, but will not return the new keys. The delete and rename
-operations are also denied if this attribute is set, in order to
-prevent a malicious administrator from replacing principals like
-krbtgt/* or kadmin/* with new principals without the attribute.
-This attribute can be set via the network protocol, but can only
-be removed using kadmin.local.</dd>
-<dt><strong>-randkey</strong></dt>
-<dd>Sets the key of the principal to a random value.</dd>
-<dt><strong>-nokey</strong></dt>
-<dd>Causes the principal to be created with no key. New in release
-1.12.</dd>
-<dt><strong>-pw</strong> <em>password</em></dt>
-<dd>Sets the password of the principal to the specified string and
-does not prompt for a password. Note: using this option in a
-shell script may expose the password to other users on the system
-via the process list.</dd>
-<dt><strong>-e</strong> <em>enc</em>:<em>salt</em>,…</dt>
-<dd>Uses the specified keysalt list for setting the keys of the
-principal. See <a class="reference internal" href="../conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a> in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a
-list of possible values.</dd>
-<dt><strong>-x</strong> <em>db_princ_args</em></dt>
-<dd><p class="first">Indicates database-specific options. The options for the LDAP
-database module are:</p>
-<dl class="docutils">
-<dt><strong>-x dn=</strong><em>dn</em></dt>
-<dd>Specifies the LDAP object that will contain the Kerberos
-principal being created.</dd>
-<dt><strong>-x linkdn=</strong><em>dn</em></dt>
-<dd>Specifies the LDAP object to which the newly created Kerberos
-principal object will point.</dd>
-<dt><strong>-x containerdn=</strong><em>container_dn</em></dt>
-<dd>Specifies the container object under which the Kerberos
-principal is to be created.</dd>
-<dt><strong>-x tktpolicy=</strong><em>policy</em></dt>
-<dd>Associates a ticket policy to the Kerberos principal.</dd>
-</dl>
-<div class="last admonition note">
-<p class="first admonition-title">Note</p>
-<ul class="last simple">
-<li>The <strong>containerdn</strong> and <strong>linkdn</strong> options cannot be
-specified with the <strong>dn</strong> option.</li>
-<li>If the <em>dn</em> or <em>containerdn</em> options are not specified while
-adding the principal, the principals are created under the
-principal container configured in the realm or the realm
-container.</li>
-<li><em>dn</em> and <em>containerdn</em> should be within the subtrees or
-principal container configured in the realm.</li>
-</ul>
-</div>
-</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">addprinc</span> <span class="n">jennifer</span>
-<span class="n">No</span> <span class="n">policy</span> <span class="n">specified</span> <span class="k">for</span> <span class="s2">"jennifer@ATHENA.MIT.EDU"</span><span class="p">;</span>
-<span class="n">defaulting</span> <span class="n">to</span> <span class="n">no</span> <span class="n">policy</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span>
-<span class="n">Principal</span> <span class="s2">"jennifer@ATHENA.MIT.EDU"</span> <span class="n">created</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="modify-principal">
-<span id="add-principal-end"></span><span id="id2"></span><h3>modify_principal<a class="headerlink" href="#modify-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>modify_principal</strong> [<em>options</em>] <em>principal</em></div></blockquote>
-<p>Modifies the specified principal, changing the fields as specified.
-The options to <strong>add_principal</strong> also apply to this command, except
-for the <strong>-randkey</strong>, <strong>-pw</strong>, and <strong>-e</strong> options. In addition, the
-option <strong>-clearpolicy</strong> will clear the current policy of a principal.</p>
-<p>This command requires the <em>modify</em> privilege.</p>
-<p>Alias: <strong>modprinc</strong></p>
-<p>Options (in addition to the <strong>addprinc</strong> options):</p>
-<dl class="docutils">
-<dt><strong>-unlock</strong></dt>
-<dd>Unlocks a locked principal (one which has received too many failed
-authentication attempts without enough time between them according
-to its password policy) so that it can successfully authenticate.</dd>
-</dl>
-</div>
-<div class="section" id="rename-principal">
-<span id="modify-principal-end"></span><span id="id3"></span><h3>rename_principal<a class="headerlink" href="#rename-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>rename_principal</strong> [<strong>-force</strong>] <em>old_principal</em> <em>new_principal</em></div></blockquote>
-<p>Renames the specified <em>old_principal</em> to <em>new_principal</em>. This
-command prompts for confirmation, unless the <strong>-force</strong> option is
-given.</p>
-<p>This command requires the <strong>add</strong> and <strong>delete</strong> privileges.</p>
-<p>Alias: <strong>renprinc</strong></p>
-</div>
-<div class="section" id="delete-principal">
-<span id="rename-principal-end"></span><span id="id4"></span><h3>delete_principal<a class="headerlink" href="#delete-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>delete_principal</strong> [<strong>-force</strong>] <em>principal</em></div></blockquote>
-<p>Deletes the specified <em>principal</em> from the database. This command
-prompts for deletion, unless the <strong>-force</strong> option is given.</p>
-<p>This command requires the <strong>delete</strong> privilege.</p>
-<p>Alias: <strong>delprinc</strong></p>
-</div>
-<div class="section" id="change-password">
-<span id="delete-principal-end"></span><span id="id5"></span><h3>change_password<a class="headerlink" href="#change-password" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>change_password</strong> [<em>options</em>] <em>principal</em></div></blockquote>
-<p>Changes the password of <em>principal</em>. Prompts for a new password if
-neither <strong>-randkey</strong> or <strong>-pw</strong> is specified.</p>
-<p>This command requires the <strong>changepw</strong> privilege, or that the
-principal running the program is the same as the principal being
-changed.</p>
-<p>Alias: <strong>cpw</strong></p>
-<p>The following options are available:</p>
-<dl class="docutils">
-<dt><strong>-randkey</strong></dt>
-<dd>Sets the key of the principal to a random value.</dd>
-<dt><strong>-pw</strong> <em>password</em></dt>
-<dd>Set the password to the specified string. Using this option in a
-script may expose the password to other users on the system via
-the process list.</dd>
-<dt><strong>-e</strong> <em>enc</em>:<em>salt</em>,…</dt>
-<dd>Uses the specified keysalt list for setting the keys of the
-principal. See <a class="reference internal" href="../conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a> in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a
-list of possible values.</dd>
-<dt><strong>-keepold</strong></dt>
-<dd>Keeps the existing keys in the database. This flag is usually not
-necessary except perhaps for <code class="docutils literal"><span class="pre">krbtgt</span></code> principals.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">cpw</span> <span class="n">systest</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">systest</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">systest</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">systest</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span> <span class="n">changed</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="purgekeys">
-<span id="change-password-end"></span><span id="id6"></span><h3>purgekeys<a class="headerlink" href="#purgekeys" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>purgekeys</strong> [<strong>-all</strong>|<strong>-keepkvno</strong> <em>oldest_kvno_to_keep</em>] <em>principal</em></div></blockquote>
-<p>Purges previously retained old keys (e.g., from <strong>change_password
--keepold</strong>) from <em>principal</em>. If <strong>-keepkvno</strong> is specified, then
-only purges keys with kvnos lower than <em>oldest_kvno_to_keep</em>. If
-<strong>-all</strong> is specified, then all keys are purged. The <strong>-all</strong> option
-is new in release 1.12.</p>
-<p>This command requires the <strong>modify</strong> privilege.</p>
-</div>
-<div class="section" id="get-principal">
-<span id="purgekeys-end"></span><span id="id7"></span><h3>get_principal<a class="headerlink" href="#get-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>get_principal</strong> [<strong>-terse</strong>] <em>principal</em></div></blockquote>
-<p>Gets the attributes of principal. With the <strong>-terse</strong> option, outputs
-fields as quoted tab-separated strings.</p>
-<p>This command requires the <strong>inquire</strong> privilege, or that the principal
-running the the program to be the same as the one being listed.</p>
-<p>Alias: <strong>getprinc</strong></p>
-<p>Examples:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">getprinc</span> <span class="n">tlyu</span><span class="o">/</span><span class="n">admin</span>
-<span class="n">Principal</span><span class="p">:</span> <span class="n">tlyu</span><span class="o">/</span><span class="n">admin</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">Expiration</span> <span class="n">date</span><span class="p">:</span> <span class="p">[</span><span class="n">never</span><span class="p">]</span>
-<span class="n">Last</span> <span class="n">password</span> <span class="n">change</span><span class="p">:</span> <span class="n">Mon</span> <span class="n">Aug</span> <span class="mi">12</span> <span class="mi">14</span><span class="p">:</span><span class="mi">16</span><span class="p">:</span><span class="mi">47</span> <span class="n">EDT</span> <span class="mi">1996</span>
-<span class="n">Password</span> <span class="n">expiration</span> <span class="n">date</span><span class="p">:</span> <span class="p">[</span><span class="n">never</span><span class="p">]</span>
-<span class="n">Maximum</span> <span class="n">ticket</span> <span class="n">life</span><span class="p">:</span> <span class="mi">0</span> <span class="n">days</span> <span class="mi">10</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Maximum</span> <span class="n">renewable</span> <span class="n">life</span><span class="p">:</span> <span class="mi">7</span> <span class="n">days</span> <span class="mi">00</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Last</span> <span class="n">modified</span><span class="p">:</span> <span class="n">Mon</span> <span class="n">Aug</span> <span class="mi">12</span> <span class="mi">14</span><span class="p">:</span><span class="mi">16</span><span class="p">:</span><span class="mi">47</span> <span class="n">EDT</span> <span class="mi">1996</span> <span class="p">(</span><span class="n">bjaspan</span><span class="o">/</span><span class="n">admin</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span><span class="p">)</span>
-<span class="n">Last</span> <span class="n">successful</span> <span class="n">authentication</span><span class="p">:</span> <span class="p">[</span><span class="n">never</span><span class="p">]</span>
-<span class="n">Last</span> <span class="n">failed</span> <span class="n">authentication</span><span class="p">:</span> <span class="p">[</span><span class="n">never</span><span class="p">]</span>
-<span class="n">Failed</span> <span class="n">password</span> <span class="n">attempts</span><span class="p">:</span> <span class="mi">0</span>
-<span class="n">Number</span> <span class="n">of</span> <span class="n">keys</span><span class="p">:</span> <span class="mi">1</span>
-<span class="n">Key</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">1</span><span class="p">,</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha384</span><span class="o">-</span><span class="mi">192</span>
-<span class="n">MKey</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">1</span>
-<span class="n">Attributes</span><span class="p">:</span>
-<span class="n">Policy</span><span class="p">:</span> <span class="p">[</span><span class="n">none</span><span class="p">]</span>
-
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">getprinc</span> <span class="o">-</span><span class="n">terse</span> <span class="n">systest</span>
-<span class="n">systest</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span> <span class="mi">3</span> <span class="mi">86400</span> <span class="mi">604800</span> <span class="mi">1</span>
-<span class="mi">785926535</span> <span class="mi">753241234</span> <span class="mi">785900000</span>
-<span class="n">tlyu</span><span class="o">/</span><span class="n">admin</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span> <span class="mi">786100034</span> <span class="mi">0</span> <span class="mi">0</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="list-principals">
-<span id="get-principal-end"></span><span id="id8"></span><h3>list_principals<a class="headerlink" href="#list-principals" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>list_principals</strong> [<em>expression</em>]</div></blockquote>
-<p>Retrieves all or some principal names. <em>expression</em> is a shell-style
-glob expression that can contain the wild-card characters <code class="docutils literal"><span class="pre">?</span></code>,
-<code class="docutils literal"><span class="pre">*</span></code>, and <code class="docutils literal"><span class="pre">[]</span></code>. All principal names matching the expression are
-printed. If no expression is provided, all principal names are
-printed. If the expression does not contain an <code class="docutils literal"><span class="pre">@</span></code> character, an
-<code class="docutils literal"><span class="pre">@</span></code> character followed by the local realm is appended to the
-expression.</p>
-<p>This command requires the <strong>list</strong> privilege.</p>
-<p>Alias: <strong>listprincs</strong>, <strong>get_principals</strong>, <strong>getprincs</strong></p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">listprincs</span> <span class="n">test</span><span class="o">*</span>
-<span class="n">test3</span><span class="nd">@SECURE</span><span class="o">-</span><span class="n">TEST</span><span class="o">.</span><span class="n">OV</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">test2</span><span class="nd">@SECURE</span><span class="o">-</span><span class="n">TEST</span><span class="o">.</span><span class="n">OV</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">test1</span><span class="nd">@SECURE</span><span class="o">-</span><span class="n">TEST</span><span class="o">.</span><span class="n">OV</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">testuser</span><span class="nd">@SECURE</span><span class="o">-</span><span class="n">TEST</span><span class="o">.</span><span class="n">OV</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="get-strings">
-<span id="list-principals-end"></span><span id="id9"></span><h3>get_strings<a class="headerlink" href="#get-strings" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>get_strings</strong> <em>principal</em></div></blockquote>
-<p>Displays string attributes on <em>principal</em>.</p>
-<p>This command requires the <strong>inquire</strong> privilege.</p>
-<p>Alias: <strong>getstrs</strong></p>
-</div>
-<div class="section" id="set-string">
-<span id="get-strings-end"></span><span id="id10"></span><h3>set_string<a class="headerlink" href="#set-string" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>set_string</strong> <em>principal</em> <em>name</em> <em>value</em></div></blockquote>
-<p>Sets a string attribute on <em>principal</em>. String attributes are used to
-supply per-principal configuration to the KDC and some KDC plugin
-modules. The following string attribute names are recognized by the
-KDC:</p>
-<dl class="docutils">
-<dt><strong>require_auth</strong></dt>
-<dd>Specifies an authentication indicator which is required to
-authenticate to the principal as a service. Multiple indicators
-can be specified, separated by spaces; in this case any of the
-specified indicators will be accepted. (New in release 1.14.)</dd>
-<dt><strong>session_enctypes</strong></dt>
-<dd>Specifies the encryption types supported for session keys when the
-principal is authenticated to as a server. See
-<a class="reference internal" href="../conf_files/kdc_conf.html#encryption-types"><span class="std std-ref">Encryption types</span></a> in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a list of the
-accepted values.</dd>
-<dt><strong>otp</strong></dt>
-<dd>Enables One Time Passwords (OTP) preauthentication for a client
-<em>principal</em>. The <em>value</em> is a JSON string representing an array
-of objects, each having optional <code class="docutils literal"><span class="pre">type</span></code> and <code class="docutils literal"><span class="pre">username</span></code> fields.</dd>
-<dt><strong>pkinit_cert_match</strong></dt>
-<dd>Specifies a matching expression that defines the certificate
-attributes required for the client certificate used by the
-principal during PKINIT authentication. The matching expression
-is in the same format as those used by the <strong>pkinit_cert_match</strong>
-option in <a class="reference internal" href="../conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>. (New in release 1.16.)</dd>
-</dl>
-<p>This command requires the <strong>modify</strong> privilege.</p>
-<p>Alias: <strong>setstr</strong></p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">set_string</span> <span class="n">host</span><span class="o">/</span><span class="n">foo</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="n">session_enctypes</span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span>
-<span class="n">set_string</span> <span class="n">user</span><span class="nd">@FOO</span><span class="o">.</span><span class="n">COM</span> <span class="n">otp</span> <span class="s2">"[{""type"":""hotp"",""username"":""al""}]"</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="del-string">
-<span id="set-string-end"></span><span id="id11"></span><h3>del_string<a class="headerlink" href="#del-string" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>del_string</strong> <em>principal</em> <em>key</em></div></blockquote>
-<p>Deletes a string attribute from <em>principal</em>.</p>
-<p>This command requires the <strong>delete</strong> privilege.</p>
-<p>Alias: <strong>delstr</strong></p>
-</div>
-<div class="section" id="add-policy">
-<span id="del-string-end"></span><span id="id12"></span><h3>add_policy<a class="headerlink" href="#add-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>add_policy</strong> [<em>options</em>] <em>policy</em></div></blockquote>
-<p>Adds a password policy named <em>policy</em> to the database.</p>
-<p>This command requires the <strong>add</strong> privilege.</p>
-<p>Alias: <strong>addpol</strong></p>
-<p>The following options are available:</p>
-<dl class="docutils">
-<dt><strong>-maxlife</strong> <em>time</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Sets the maximum
-lifetime of a password.</dd>
-<dt><strong>-minlife</strong> <em>time</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Sets the minimum
-lifetime of a password.</dd>
-<dt><strong>-minlength</strong> <em>length</em></dt>
-<dd>Sets the minimum length of a password.</dd>
-<dt><strong>-minclasses</strong> <em>number</em></dt>
-<dd>Sets the minimum number of character classes required in a
-password. The five character classes are lower case, upper case,
-numbers, punctuation, and whitespace/unprintable characters.</dd>
-<dt><strong>-history</strong> <em>number</em></dt>
-<dd>Sets the number of past keys kept for a principal. This option is
-not supported with the LDAP KDC database module.</dd>
-</dl>
-<dl class="docutils" id="policy-maxfailure">
-<dt><strong>-maxfailure</strong> <em>maxnumber</em></dt>
-<dd>Sets the number of authentication failures before the principal is
-locked. Authentication failures are only tracked for principals
-which require preauthentication. The counter of failed attempts
-resets to 0 after a successful attempt to authenticate. A
-<em>maxnumber</em> value of 0 (the default) disables lockout.</dd>
-</dl>
-<dl class="docutils" id="policy-failurecountinterval">
-<dt><strong>-failurecountinterval</strong> <em>failuretime</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Sets the allowable time
-between authentication failures. If an authentication failure
-happens after <em>failuretime</em> has elapsed since the previous
-failure, the number of authentication failures is reset to 1. A
-<em>failuretime</em> value of 0 (the default) means forever.</dd>
-</dl>
-<dl class="docutils" id="policy-lockoutduration">
-<dt><strong>-lockoutduration</strong> <em>lockouttime</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Sets the duration for
-which the principal is locked from authenticating if too many
-authentication failures occur without the specified failure count
-interval elapsing. A duration of 0 (the default) means the
-principal remains locked out until it is administratively unlocked
-with <code class="docutils literal"><span class="pre">modprinc</span> <span class="pre">-unlock</span></code>.</dd>
-<dt><strong>-allowedkeysalts</strong></dt>
-<dd>Specifies the key/salt tuples supported for long-term keys when
-setting or changing a principal’s password/keys. See
-<a class="reference internal" href="../conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a> in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a list of the
-accepted values, but note that key/salt tuples must be separated
-with commas (‘,’) only. To clear the allowed key/salt policy use
-a value of ‘-‘.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">add_policy</span> <span class="o">-</span><span class="n">maxlife</span> <span class="s2">"2 days"</span> <span class="o">-</span><span class="n">minlength</span> <span class="mi">5</span> <span class="n">guests</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="modify-policy">
-<span id="add-policy-end"></span><span id="id13"></span><h3>modify_policy<a class="headerlink" href="#modify-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>modify_policy</strong> [<em>options</em>] <em>policy</em></div></blockquote>
-<p>Modifies the password policy named <em>policy</em>. Options are as described
-for <strong>add_policy</strong>.</p>
-<p>This command requires the <strong>modify</strong> privilege.</p>
-<p>Alias: <strong>modpol</strong></p>
-</div>
-<div class="section" id="delete-policy">
-<span id="modify-policy-end"></span><span id="id14"></span><h3>delete_policy<a class="headerlink" href="#delete-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>delete_policy</strong> [<strong>-force</strong>] <em>policy</em></div></blockquote>
-<p>Deletes the password policy named <em>policy</em>. Prompts for confirmation
-before deletion. The command will fail if the policy is in use by any
-principals.</p>
-<p>This command requires the <strong>delete</strong> privilege.</p>
-<p>Alias: <strong>delpol</strong></p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>kadmin: del_policy guests
-Are you sure you want to delete the policy "guests"?
-(yes/no): yes
-kadmin:
-</pre></div>
-</div>
-</div>
-<div class="section" id="get-policy">
-<span id="delete-policy-end"></span><span id="id15"></span><h3>get_policy<a class="headerlink" href="#get-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>get_policy</strong> [ <strong>-terse</strong> ] <em>policy</em></div></blockquote>
-<p>Displays the values of the password policy named <em>policy</em>. With the
-<strong>-terse</strong> flag, outputs the fields as quoted strings separated by
-tabs.</p>
-<p>This command requires the <strong>inquire</strong> privilege.</p>
-<p>Alias: <strong>getpol</strong></p>
-<p>Examples:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">get_policy</span> <span class="n">admin</span>
-<span class="n">Policy</span><span class="p">:</span> <span class="n">admin</span>
-<span class="n">Maximum</span> <span class="n">password</span> <span class="n">life</span><span class="p">:</span> <span class="mi">180</span> <span class="n">days</span> <span class="mi">00</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Minimum</span> <span class="n">password</span> <span class="n">life</span><span class="p">:</span> <span class="mi">00</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Minimum</span> <span class="n">password</span> <span class="n">length</span><span class="p">:</span> <span class="mi">6</span>
-<span class="n">Minimum</span> <span class="n">number</span> <span class="n">of</span> <span class="n">password</span> <span class="n">character</span> <span class="n">classes</span><span class="p">:</span> <span class="mi">2</span>
-<span class="n">Number</span> <span class="n">of</span> <span class="n">old</span> <span class="n">keys</span> <span class="n">kept</span><span class="p">:</span> <span class="mi">5</span>
-<span class="n">Reference</span> <span class="n">count</span><span class="p">:</span> <span class="mi">17</span>
-
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">get_policy</span> <span class="o">-</span><span class="n">terse</span> <span class="n">admin</span>
-<span class="n">admin</span> <span class="mi">15552000</span> <span class="mi">0</span> <span class="mi">6</span> <span class="mi">2</span> <span class="mi">5</span> <span class="mi">17</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-<p>The “Reference count” is the number of principals using that policy.
-With the LDAP KDC database module, the reference count field is not
-meaningful.</p>
-</div>
-<div class="section" id="list-policies">
-<span id="get-policy-end"></span><span id="id16"></span><h3>list_policies<a class="headerlink" href="#list-policies" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>list_policies</strong> [<em>expression</em>]</div></blockquote>
-<p>Retrieves all or some policy names. <em>expression</em> is a shell-style
-glob expression that can contain the wild-card characters <code class="docutils literal"><span class="pre">?</span></code>,
-<code class="docutils literal"><span class="pre">*</span></code>, and <code class="docutils literal"><span class="pre">[]</span></code>. All policy names matching the expression are
-printed. If no expression is provided, all existing policy names are
-printed.</p>
-<p>This command requires the <strong>list</strong> privilege.</p>
-<p>Aliases: <strong>listpols</strong>, <strong>get_policies</strong>, <strong>getpols</strong>.</p>
-<p>Examples:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">listpols</span>
-<span class="n">test</span><span class="o">-</span><span class="n">pol</span>
-<span class="nb">dict</span><span class="o">-</span><span class="n">only</span>
-<span class="n">once</span><span class="o">-</span><span class="n">a</span><span class="o">-</span><span class="nb">min</span>
-<span class="n">test</span><span class="o">-</span><span class="n">pol</span><span class="o">-</span><span class="n">nopw</span>
-
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">listpols</span> <span class="n">t</span><span class="o">*</span>
-<span class="n">test</span><span class="o">-</span><span class="n">pol</span>
-<span class="n">test</span><span class="o">-</span><span class="n">pol</span><span class="o">-</span><span class="n">nopw</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="ktadd">
-<span id="list-policies-end"></span><span id="id17"></span><h3>ktadd<a class="headerlink" href="#ktadd" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><div class="line-block">
-<div class="line"><strong>ktadd</strong> [options] <em>principal</em></div>
-<div class="line"><strong>ktadd</strong> [options] <strong>-glob</strong> <em>princ-exp</em></div>
-</div>
-</div></blockquote>
-<p>Adds a <em>principal</em>, or all principals matching <em>princ-exp</em>, to a
-keytab file. Each principal’s keys are randomized in the process.
-The rules for <em>princ-exp</em> are described in the <strong>list_principals</strong>
-command.</p>
-<p>This command requires the <strong>inquire</strong> and <strong>changepw</strong> privileges.
-With the <strong>-glob</strong> form, it also requires the <strong>list</strong> privilege.</p>
-<p>The options are:</p>
-<dl class="docutils">
-<dt><strong>-k[eytab]</strong> <em>keytab</em></dt>
-<dd>Use <em>keytab</em> as the keytab file. Otherwise, the default keytab is
-used.</dd>
-<dt><strong>-e</strong> <em>enc</em>:<em>salt</em>,…</dt>
-<dd>Uses the specified keysalt list for setting the new keys of the
-principal. See <a class="reference internal" href="../conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a> in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a
-list of possible values.</dd>
-<dt><strong>-q</strong></dt>
-<dd>Display less verbose information.</dd>
-<dt><strong>-norandkey</strong></dt>
-<dd>Do not randomize the keys. The keys and their version numbers stay
-unchanged. This option cannot be specified in combination with the
-<strong>-e</strong> option.</dd>
-</dl>
-<p>An entry for each of the principal’s unique encryption types is added,
-ignoring multiple keys with the same encryption type but different
-salt types.</p>
-<p>Alias: <strong>xst</strong></p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">ktadd</span> <span class="o">-</span><span class="n">k</span> <span class="o">/</span><span class="n">tmp</span><span class="o">/</span><span class="n">foo</span><span class="o">-</span><span class="n">new</span><span class="o">-</span><span class="n">keytab</span> <span class="n">host</span><span class="o">/</span><span class="n">foo</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">foo</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span><span class="p">,</span>
- <span class="n">encryption</span> <span class="nb">type</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span>
- <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">tmp</span><span class="o">/</span><span class="n">foo</span><span class="o">-</span><span class="n">new</span><span class="o">-</span><span class="n">keytab</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="ktremove">
-<span id="ktadd-end"></span><span id="id18"></span><h3>ktremove<a class="headerlink" href="#ktremove" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>ktremove</strong> [options] <em>principal</em> [<em>kvno</em> | <em>all</em> | <em>old</em>]</div></blockquote>
-<p>Removes entries for the specified <em>principal</em> from a keytab. Requires
-no permissions, since this does not require database access.</p>
-<p>If the string “all” is specified, all entries for that principal are
-removed; if the string “old” is specified, all entries for that
-principal except those with the highest kvno are removed. Otherwise,
-the value specified is parsed as an integer, and all entries whose
-kvno match that integer are removed.</p>
-<p>The options are:</p>
-<dl class="docutils">
-<dt><strong>-k[eytab]</strong> <em>keytab</em></dt>
-<dd>Use <em>keytab</em> as the keytab file. Otherwise, the default keytab is
-used.</dd>
-<dt><strong>-q</strong></dt>
-<dd>Display less verbose information.</dd>
-</dl>
-<p>Alias: <strong>ktrem</strong></p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">ktremove</span> <span class="n">kadmin</span><span class="o">/</span><span class="n">admin</span> <span class="nb">all</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">kadmin</span><span class="o">/</span><span class="n">admin</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span> <span class="n">removed</span> <span class="kn">from</span> <span class="nn">keytab</span>
- <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="lock">
-<span id="ktremove-end"></span><h3>lock<a class="headerlink" href="#lock" title="Permalink to this headline">¶</a></h3>
-<p>Lock database exclusively. Use with extreme caution! This command
-only works with the DB2 KDC database module.</p>
-</div>
-<div class="section" id="unlock">
-<h3>unlock<a class="headerlink" href="#unlock" title="Permalink to this headline">¶</a></h3>
-<p>Release the exclusive database lock.</p>
-</div>
-<div class="section" id="list-requests">
-<h3>list_requests<a class="headerlink" href="#list-requests" title="Permalink to this headline">¶</a></h3>
-<p>Lists available for kadmin requests.</p>
-<p>Aliases: <strong>lr</strong>, <strong>?</strong></p>
-</div>
-<div class="section" id="quit">
-<h3>quit<a class="headerlink" href="#quit" title="Permalink to this headline">¶</a></h3>
-<p>Exit program. If the database was locked, the lock is released.</p>
-<p>Aliases: <strong>exit</strong>, <strong>q</strong></p>
-</div>
-</div>
-<div class="section" id="history">
-<h2>HISTORY<a class="headerlink" href="#history" title="Permalink to this headline">¶</a></h2>
-<p>The kadmin program was originally written by Tom Yu at MIT, as an
-interface to the OpenVision Kerberos administration program.</p>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="../../user/user_commands/kpasswd.html#kpasswd-1"><span class="std std-ref">kpasswd</span></a>, <a class="reference internal" href="kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kadmin</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#database-options">DATABASE OPTIONS</a></li>
-<li><a class="reference internal" href="#commands">COMMANDS</a><ul>
-<li><a class="reference internal" href="#add-principal">add_principal</a></li>
-<li><a class="reference internal" href="#modify-principal">modify_principal</a></li>
-<li><a class="reference internal" href="#rename-principal">rename_principal</a></li>
-<li><a class="reference internal" href="#delete-principal">delete_principal</a></li>
-<li><a class="reference internal" href="#change-password">change_password</a></li>
-<li><a class="reference internal" href="#purgekeys">purgekeys</a></li>
-<li><a class="reference internal" href="#get-principal">get_principal</a></li>
-<li><a class="reference internal" href="#list-principals">list_principals</a></li>
-<li><a class="reference internal" href="#get-strings">get_strings</a></li>
-<li><a class="reference internal" href="#set-string">set_string</a></li>
-<li><a class="reference internal" href="#del-string">del_string</a></li>
-<li><a class="reference internal" href="#add-policy">add_policy</a></li>
-<li><a class="reference internal" href="#modify-policy">modify_policy</a></li>
-<li><a class="reference internal" href="#delete-policy">delete_policy</a></li>
-<li><a class="reference internal" href="#get-policy">get_policy</a></li>
-<li><a class="reference internal" href="#list-policies">list_policies</a></li>
-<li><a class="reference internal" href="#ktadd">ktadd</a></li>
-<li><a class="reference internal" href="#ktremove">ktremove</a></li>
-<li><a class="reference internal" href="#lock">lock</a></li>
-<li><a class="reference internal" href="#unlock">unlock</a></li>
-<li><a class="reference internal" href="#list-requests">list_requests</a></li>
-<li><a class="reference internal" href="#quit">quit</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#history">HISTORY</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="Administration programs"
- >previous</a> |
- <a href="kadmind.html" title="kadmind"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kadmin">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kadmind — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kdb5_util" href="kdb5_util.html" />
- <link rel="prev" title="kadmin" href="kadmin_local.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kadmin_local.html" title="kadmin"
- accesskey="P">previous</a> |
- <a href="kdb5_util.html" title="kdb5_util"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kadmind">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kadmind">
-<span id="kadmind-8"></span><h1>kadmind<a class="headerlink" href="#kadmind" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>kadmind</strong>
-[<strong>-x</strong> <em>db_args</em>]
-[<strong>-r</strong> <em>realm</em>]
-[<strong>-m</strong>]
-[<strong>-nofork</strong>]
-[<strong>-proponly</strong>]
-[<strong>-port</strong> <em>port-number</em>]
-[<strong>-P</strong> <em>pid_file</em>]
-[<strong>-p</strong> <em>kdb5_util_path</em>]
-[<strong>-K</strong> <em>kprop_path</em>]
-[<strong>-k</strong> <em>kprop_port</em>]
-[<strong>-F</strong> <em>dump_file</em>]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>kadmind starts the Kerberos administration server. kadmind typically
-runs on the primary Kerberos server, which stores the KDC database.
-If the KDC database uses the LDAP module, the administration server
-and the KDC server need not run on the same machine. kadmind accepts
-remote requests from programs such as <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> and
-<a class="reference internal" href="../../user/user_commands/kpasswd.html#kpasswd-1"><span class="std std-ref">kpasswd</span></a> to administer the information in these database.</p>
-<p>kadmind requires a number of configuration files to be set up in order
-for it to work:</p>
-<dl class="docutils">
-<dt><a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a></dt>
-<dd>The KDC configuration file contains configuration information for
-the KDC and admin servers. kadmind uses settings in this file to
-locate the Kerberos database, and is also affected by the
-<strong>acl_file</strong>, <strong>dict_file</strong>, <strong>kadmind_port</strong>, and iprop-related
-settings.</dd>
-<dt><a class="reference internal" href="../conf_files/kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a></dt>
-<dd>kadmind’s ACL (access control list) tells it which principals are
-allowed to perform administration actions. The pathname to the
-ACL file can be specified with the <strong>acl_file</strong> <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>
-variable; by default, it is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/kadm5.acl</span></code>.</dd>
-</dl>
-<p>After the server begins running, it puts itself in the background and
-disassociates itself from its controlling terminal.</p>
-<p>kadmind can be configured for incremental database propagation.
-Incremental propagation allows replica KDC servers to receive
-principal and policy updates incrementally instead of receiving full
-dumps of the database. This facility can be enabled in the
-<a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> file with the <strong>iprop_enable</strong> option. Incremental
-propagation requires the principal <code class="docutils literal"><span class="pre">kiprop/PRIMARY\@REALM</span></code> (where
-PRIMARY is the primary KDC’s canonical host name, and REALM the realm
-name). In release 1.13, this principal is automatically created and
-registered into the datebase.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-r</strong> <em>realm</em></dt>
-<dd>specifies the realm that kadmind will serve; if it is not
-specified, the default realm of the host is used.</dd>
-<dt><strong>-m</strong></dt>
-<dd>causes the master database password to be fetched from the
-keyboard (before the server puts itself in the background, if not
-invoked with the <strong>-nofork</strong> option) rather than from a file on
-disk.</dd>
-<dt><strong>-nofork</strong></dt>
-<dd>causes the server to remain in the foreground and remain
-associated to the terminal.</dd>
-<dt><strong>-proponly</strong></dt>
-<dd>causes the server to only listen and respond to Kerberos replica
-incremental propagation polling requests. This option can be used
-to set up a hierarchical propagation topology where a replica KDC
-provides incremental updates to other Kerberos replicas.</dd>
-<dt><strong>-port</strong> <em>port-number</em></dt>
-<dd>specifies the port on which the administration server listens for
-connections. The default port is determined by the
-<strong>kadmind_port</strong> configuration variable in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-P</strong> <em>pid_file</em></dt>
-<dd>specifies the file to which the PID of kadmind process should be
-written after it starts up. This file can be used to identify
-whether kadmind is still running and to allow init scripts to stop
-the correct process.</dd>
-<dt><strong>-p</strong> <em>kdb5_util_path</em></dt>
-<dd>specifies the path to the kdb5_util command to use when dumping the
-KDB in response to full resync requests when iprop is enabled.</dd>
-<dt><strong>-K</strong> <em>kprop_path</em></dt>
-<dd>specifies the path to the kprop command to use to send full dumps
-to replicas in response to full resync requests.</dd>
-<dt><strong>-k</strong> <em>kprop_port</em></dt>
-<dd>specifies the port by which the kprop process that is spawned by
-kadmind connects to the replica kpropd, in order to transfer the
-dump file during an iprop full resync request.</dd>
-<dt><strong>-F</strong> <em>dump_file</em></dt>
-<dd>specifies the file path to be used for dumping the KDB in response
-to full resync requests when iprop is enabled.</dd>
-<dt><strong>-x</strong> <em>db_args</em></dt>
-<dd>specifies database-specific arguments. See <a class="reference internal" href="kadmin_local.html#dboptions"><span class="std std-ref">Database Options</span></a> in <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> for supported arguments.</dd>
-</dl>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="../../user/user_commands/kpasswd.html#kpasswd-1"><span class="std std-ref">kpasswd</span></a>, <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>, <a class="reference internal" href="kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>,
-<a class="reference internal" href="kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a>, <a class="reference internal" href="../conf_files/kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kadmind</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kadmin_local.html" title="kadmin"
- >previous</a> |
- <a href="kdb5_util.html" title="kdb5_util"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kadmind">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kdb5_ldap_util — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="krb5kdc" href="krb5kdc.html" />
- <link rel="prev" title="kdb5_util" href="kdb5_util.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kdb5_util.html" title="kdb5_util"
- accesskey="P">previous</a> |
- <a href="krb5kdc.html" title="krb5kdc"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kdb5_ldap_util">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdb5-ldap-util">
-<span id="kdb5-ldap-util-8"></span><h1>kdb5_ldap_util<a class="headerlink" href="#kdb5-ldap-util" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p id="kdb5-ldap-util-synopsis"><strong>kdb5_ldap_util</strong>
-[<strong>-D</strong> <em>user_dn</em> [<strong>-w</strong> <em>passwd</em>]]
-[<strong>-H</strong> <em>ldapuri</em>]
-<strong>command</strong>
-[<em>command_options</em>]</p>
-</div>
-<div class="section" id="description">
-<span id="kdb5-ldap-util-synopsis-end"></span><h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>kdb5_ldap_util allows an administrator to manage realms, Kerberos
-services and ticket policies.</p>
-</div>
-<div class="section" id="command-line-options">
-<h2>COMMAND-LINE OPTIONS<a class="headerlink" href="#command-line-options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils" id="kdb5-ldap-util-options">
-<dt><strong>-r</strong> <em>realm</em></dt>
-<dd>Specifies the realm to be operated on.</dd>
-<dt><strong>-D</strong> <em>user_dn</em></dt>
-<dd>Specifies the Distinguished Name (DN) of the user who has
-sufficient rights to perform the operation on the LDAP server.</dd>
-<dt><strong>-w</strong> <em>passwd</em></dt>
-<dd>Specifies the password of <em>user_dn</em>. This option is not
-recommended.</dd>
-<dt><strong>-H</strong> <em>ldapuri</em></dt>
-<dd>Specifies the URI of the LDAP server.</dd>
-</dl>
-<p>By default, kdb5_ldap_util operates on the default realm (as specified
-in <a class="reference internal" href="../conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>) and connects and authenticates to the LDAP
-server in the same manner as :ref:kadmind(8)` would given the
-parameters in <a class="reference internal" href="../conf_files/kdc_conf.html#dbdefaults"><span class="std std-ref">[dbdefaults]</span></a> in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</p>
-</div>
-<div class="section" id="commands">
-<span id="kdb5-ldap-util-options-end"></span><h2>COMMANDS<a class="headerlink" href="#commands" title="Permalink to this headline">¶</a></h2>
-<div class="section" id="create">
-<h3>create<a class="headerlink" href="#create" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-create">
-<div><strong>create</strong>
-[<strong>-subtrees</strong> <em>subtree_dn_list</em>]
-[<strong>-sscope</strong> <em>search_scope</em>]
-[<strong>-containerref</strong> <em>container_reference_dn</em>]
-[<strong>-k</strong> <em>mkeytype</em>]
-[<strong>-kv</strong> <em>mkeyVNO</em>]
-[<strong>-M</strong> <em>mkeyname</em>]
-[<strong>-m|-P</strong> <em>password</em>|<strong>-sf</strong> <em>stashfilename</em>]
-[<strong>-s</strong>]
-[<strong>-maxtktlife</strong> <em>max_ticket_life</em>]
-[<strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em>]
-[<em>ticket_flags</em>]</div></blockquote>
-<p>Creates realm in directory. Options:</p>
-<dl class="docutils">
-<dt><strong>-subtrees</strong> <em>subtree_dn_list</em></dt>
-<dd>Specifies the list of subtrees containing the principals of a
-realm. The list contains the DNs of the subtree objects separated
-by colon (<code class="docutils literal"><span class="pre">:</span></code>).</dd>
-<dt><strong>-sscope</strong> <em>search_scope</em></dt>
-<dd>Specifies the scope for searching the principals under the
-subtree. The possible values are 1 or one (one level), 2 or sub
-(subtrees).</dd>
-<dt><strong>-containerref</strong> <em>container_reference_dn</em></dt>
-<dd>Specifies the DN of the container object in which the principals
-of a realm will be created. If the container reference is not
-configured for a realm, the principals will be created in the
-realm container.</dd>
-<dt><strong>-k</strong> <em>mkeytype</em></dt>
-<dd>Specifies the key type of the master key in the database. The
-default is given by the <strong>master_key_type</strong> variable in
-<a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-kv</strong> <em>mkeyVNO</em></dt>
-<dd>Specifies the version number of the master key in the database;
-the default is 1. Note that 0 is not allowed.</dd>
-<dt><strong>-M</strong> <em>mkeyname</em></dt>
-<dd>Specifies the principal name for the master key in the database.
-If not specified, the name is determined by the
-<strong>master_key_name</strong> variable in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-m</strong></dt>
-<dd>Specifies that the master database password should be read from
-the TTY rather than fetched from a file on the disk.</dd>
-<dt><strong>-P</strong> <em>password</em></dt>
-<dd>Specifies the master database password. This option is not
-recommended.</dd>
-<dt><strong>-sf</strong> <em>stashfilename</em></dt>
-<dd>Specifies the stash file of the master database password.</dd>
-<dt><strong>-s</strong></dt>
-<dd>Specifies that the stash file is to be created.</dd>
-<dt><strong>-maxtktlife</strong> <em>max_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum ticket life for
-principals in this realm.</dd>
-<dt><strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum renewable life of
-tickets for principals in this realm.</dd>
-<dt><em>ticket_flags</em></dt>
-<dd>Specifies global ticket flags for the realm. Allowable flags are
-documented in the description of the <strong>add_principal</strong> command in
-<a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">create</span> <span class="o">-</span><span class="n">subtrees</span> <span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">sscope</span> <span class="n">SUB</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">Initializing</span> <span class="n">database</span> <span class="k">for</span> <span class="n">realm</span> <span class="s1">'ATHENA.MIT.EDU'</span>
-<span class="n">You</span> <span class="n">will</span> <span class="n">be</span> <span class="n">prompted</span> <span class="k">for</span> <span class="n">the</span> <span class="n">database</span> <span class="n">Master</span> <span class="n">Password</span><span class="o">.</span>
-<span class="n">It</span> <span class="ow">is</span> <span class="n">important</span> <span class="n">that</span> <span class="n">you</span> <span class="n">NOT</span> <span class="n">FORGET</span> <span class="n">this</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">KDC</span> <span class="n">database</span> <span class="n">master</span> <span class="n">key</span><span class="p">:</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">KDC</span> <span class="n">database</span> <span class="n">master</span> <span class="n">key</span> <span class="n">to</span> <span class="n">verify</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="modify">
-<span id="kdb5-ldap-util-create-end"></span><h3>modify<a class="headerlink" href="#modify" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-modify">
-<div><strong>modify</strong>
-[<strong>-subtrees</strong> <em>subtree_dn_list</em>]
-[<strong>-sscope</strong> <em>search_scope</em>]
-[<strong>-containerref</strong> <em>container_reference_dn</em>]
-[<strong>-maxtktlife</strong> <em>max_ticket_life</em>]
-[<strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em>]
-[<em>ticket_flags</em>]</div></blockquote>
-<p>Modifies the attributes of a realm. Options:</p>
-<dl class="docutils">
-<dt><strong>-subtrees</strong> <em>subtree_dn_list</em></dt>
-<dd>Specifies the list of subtrees containing the principals of a
-realm. The list contains the DNs of the subtree objects separated
-by colon (<code class="docutils literal"><span class="pre">:</span></code>). This list replaces the existing list.</dd>
-<dt><strong>-sscope</strong> <em>search_scope</em></dt>
-<dd>Specifies the scope for searching the principals under the
-subtrees. The possible values are 1 or one (one level), 2 or sub
-(subtrees).</dd>
-<dt><strong>-containerref</strong> <em>container_reference_dn</em> Specifies the DN of the</dt>
-<dd>container object in which the principals of a realm will be
-created.</dd>
-<dt><strong>-maxtktlife</strong> <em>max_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum ticket life for
-principals in this realm.</dd>
-<dt><strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum renewable life of
-tickets for principals in this realm.</dd>
-<dt><em>ticket_flags</em></dt>
-<dd>Specifies global ticket flags for the realm. Allowable flags are
-documented in the description of the <strong>add_principal</strong> command in
-<a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span>
- <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="n">modify</span> <span class="o">+</span><span class="n">requires_preauth</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="view">
-<span id="kdb5-ldap-util-modify-end"></span><h3>view<a class="headerlink" href="#view" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-view">
-<div><strong>view</strong></div></blockquote>
-<p>Displays the attributes of a realm.</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">view</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">Realm</span> <span class="n">Name</span><span class="p">:</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">Subtree</span><span class="p">:</span> <span class="n">ou</span><span class="o">=</span><span class="n">users</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span>
-<span class="n">Subtree</span><span class="p">:</span> <span class="n">ou</span><span class="o">=</span><span class="n">servers</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span>
-<span class="n">SearchScope</span><span class="p">:</span> <span class="n">ONE</span>
-<span class="n">Maximum</span> <span class="n">ticket</span> <span class="n">life</span><span class="p">:</span> <span class="mi">0</span> <span class="n">days</span> <span class="mi">01</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Maximum</span> <span class="n">renewable</span> <span class="n">life</span><span class="p">:</span> <span class="mi">0</span> <span class="n">days</span> <span class="mi">10</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Ticket</span> <span class="n">flags</span><span class="p">:</span> <span class="n">DISALLOW_FORWARDABLE</span> <span class="n">REQUIRES_PWCHANGE</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="destroy">
-<span id="kdb5-ldap-util-view-end"></span><h3>destroy<a class="headerlink" href="#destroy" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-destroy">
-<div><strong>destroy</strong> [<strong>-f</strong>]</div></blockquote>
-<p>Destroys an existing realm. Options:</p>
-<dl class="docutils">
-<dt><strong>-f</strong></dt>
-<dd>If specified, will not prompt the user for confirmation.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>shell% kdb5_ldap_util -r ATHENA.MIT.EDU -D cn=admin,o=org -H
- ldaps://ldap-server1.mit.edu destroy
-Password for "cn=admin,o=org":
-Deleting KDC database of 'ATHENA.MIT.EDU', are you sure?
-(type 'yes' to confirm)? yes
-OK, deleting database of 'ATHENA.MIT.EDU'...
-shell%
-</pre></div>
-</div>
-</div>
-<div class="section" id="list">
-<span id="kdb5-ldap-util-destroy-end"></span><h3>list<a class="headerlink" href="#list" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-list">
-<div><strong>list</strong></div></blockquote>
-<p>Lists the names of realms under the container.</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span>
- <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="nb">list</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">OPENLDAP</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">MEDIA</span><span class="o">-</span><span class="n">LAB</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="stashsrvpw">
-<span id="kdb5-ldap-util-list-end"></span><h3>stashsrvpw<a class="headerlink" href="#stashsrvpw" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-stashsrvpw">
-<div><strong>stashsrvpw</strong>
-[<strong>-f</strong> <em>filename</em>]
-<em>name</em></div></blockquote>
-<p>Allows an administrator to store the password for service object in a
-file so that KDC and Administration server can use it to authenticate
-to the LDAP server. Options:</p>
-<dl class="docutils">
-<dt><strong>-f</strong> <em>filename</em></dt>
-<dd>Specifies the complete path of the service password file. By
-default, <code class="docutils literal"><span class="pre">/usr/local/var/service_passwd</span></code> is used.</dd>
-<dt><em>name</em></dt>
-<dd>Specifies the name of the object whose password is to be stored.
-If <a class="reference internal" href="krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> or <a class="reference internal" href="kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> are configured for
-simple binding, this should be the distinguished name it will
-use as given by the <strong>ldap_kdc_dn</strong> or <strong>ldap_kadmind_dn</strong>
-variable in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>. If the KDC or kadmind is
-configured for SASL binding, this should be the authentication
-name it will use as given by the <strong>ldap_kdc_sasl_authcid</strong> or
-<strong>ldap_kadmind_sasl_authcid</strong> variable.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="n">stashsrvpw</span> <span class="o">-</span><span class="n">f</span> <span class="o">/</span><span class="n">home</span><span class="o">/</span><span class="n">andrew</span><span class="o">/</span><span class="n">conf_keyfile</span>
- <span class="n">cn</span><span class="o">=</span><span class="n">service</span><span class="o">-</span><span class="n">kdc</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=service-kdc,o=org"</span><span class="p">:</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="s2">"cn=service-kdc,o=org"</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="create-policy">
-<span id="kdb5-ldap-util-stashsrvpw-end"></span><h3>create_policy<a class="headerlink" href="#create-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-create-policy">
-<div><strong>create_policy</strong>
-[<strong>-maxtktlife</strong> <em>max_ticket_life</em>]
-[<strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em>]
-[<em>ticket_flags</em>]
-<em>policy_name</em></div></blockquote>
-<p>Creates a ticket policy in the directory. Options:</p>
-<dl class="docutils">
-<dt><strong>-maxtktlife</strong> <em>max_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum ticket life for
-principals.</dd>
-<dt><strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum renewable life of
-tickets for principals.</dd>
-<dt><em>ticket_flags</em></dt>
-<dd>Specifies the ticket flags. If this option is not specified, by
-default, no restriction will be set by the policy. Allowable
-flags are documented in the description of the <strong>add_principal</strong>
-command in <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>.</dd>
-<dt><em>policy_name</em></dt>
-<dd>Specifies the name of the ticket policy.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">create_policy</span> <span class="o">-</span><span class="n">maxtktlife</span> <span class="s2">"1 day"</span>
- <span class="o">-</span><span class="n">maxrenewlife</span> <span class="s2">"1 week"</span> <span class="o">-</span><span class="n">allow_postdated</span> <span class="o">+</span><span class="n">needchange</span>
- <span class="o">-</span><span class="n">allow_forwardable</span> <span class="n">tktpolicy</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="modify-policy">
-<span id="kdb5-ldap-util-create-policy-end"></span><h3>modify_policy<a class="headerlink" href="#modify-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-modify-policy">
-<div><strong>modify_policy</strong>
-[<strong>-maxtktlife</strong> <em>max_ticket_life</em>]
-[<strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em>]
-[<em>ticket_flags</em>]
-<em>policy_name</em></div></blockquote>
-<p>Modifies the attributes of a ticket policy. Options are same as for
-<strong>create_policy</strong>.</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span>
- <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">modify_policy</span>
- <span class="o">-</span><span class="n">maxtktlife</span> <span class="s2">"60 minutes"</span> <span class="o">-</span><span class="n">maxrenewlife</span> <span class="s2">"10 hours"</span>
- <span class="o">+</span><span class="n">allow_postdated</span> <span class="o">-</span><span class="n">requires_preauth</span> <span class="n">tktpolicy</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="view-policy">
-<span id="kdb5-ldap-util-modify-policy-end"></span><h3>view_policy<a class="headerlink" href="#view-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-view-policy">
-<div><strong>view_policy</strong>
-<em>policy_name</em></div></blockquote>
-<p>Displays the attributes of the named ticket policy.</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">view_policy</span> <span class="n">tktpolicy</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">Ticket</span> <span class="n">policy</span><span class="p">:</span> <span class="n">tktpolicy</span>
-<span class="n">Maximum</span> <span class="n">ticket</span> <span class="n">life</span><span class="p">:</span> <span class="mi">0</span> <span class="n">days</span> <span class="mi">01</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Maximum</span> <span class="n">renewable</span> <span class="n">life</span><span class="p">:</span> <span class="mi">0</span> <span class="n">days</span> <span class="mi">10</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Ticket</span> <span class="n">flags</span><span class="p">:</span> <span class="n">DISALLOW_FORWARDABLE</span> <span class="n">REQUIRES_PWCHANGE</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="destroy-policy">
-<span id="kdb5-ldap-util-view-policy-end"></span><h3>destroy_policy<a class="headerlink" href="#destroy-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-destroy-policy">
-<div><strong>destroy_policy</strong>
-[<strong>-force</strong>]
-<em>policy_name</em></div></blockquote>
-<p>Destroys an existing ticket policy. Options:</p>
-<dl class="docutils">
-<dt><strong>-force</strong></dt>
-<dd>Forces the deletion of the policy object. If not specified, the
-user will be prompted for confirmation before deleting the policy.</dd>
-<dt><em>policy_name</em></dt>
-<dd>Specifies the name of the ticket policy.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU destroy_policy tktpolicy
-Password for "cn=admin,o=org":
-This will delete the policy object 'tktpolicy', are you sure?
-(type 'yes' to confirm)? yes
-** policy object 'tktpolicy' deleted.
-</pre></div>
-</div>
-</div>
-<div class="section" id="list-policy">
-<span id="kdb5-ldap-util-destroy-policy-end"></span><h3>list_policy<a class="headerlink" href="#list-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-ldap-util-list-policy">
-<div><strong>list_policy</strong></div></blockquote>
-<p>Lists ticket policies.</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">list_policy</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">tktpolicy</span>
-<span class="n">tmppolicy</span>
-<span class="n">userpolicy</span>
-</pre></div>
-</div>
-</div>
-</div>
-<div class="section" id="environment">
-<span id="kdb5-ldap-util-list-policy-end"></span><h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kdb5_ldap_util</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#command-line-options">COMMAND-LINE OPTIONS</a></li>
-<li><a class="reference internal" href="#commands">COMMANDS</a><ul>
-<li><a class="reference internal" href="#create">create</a></li>
-<li><a class="reference internal" href="#modify">modify</a></li>
-<li><a class="reference internal" href="#view">view</a></li>
-<li><a class="reference internal" href="#destroy">destroy</a></li>
-<li><a class="reference internal" href="#list">list</a></li>
-<li><a class="reference internal" href="#stashsrvpw">stashsrvpw</a></li>
-<li><a class="reference internal" href="#create-policy">create_policy</a></li>
-<li><a class="reference internal" href="#modify-policy">modify_policy</a></li>
-<li><a class="reference internal" href="#view-policy">view_policy</a></li>
-<li><a class="reference internal" href="#destroy-policy">destroy_policy</a></li>
-<li><a class="reference internal" href="#list-policy">list_policy</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kdb5_util.html" title="kdb5_util"
- >previous</a> |
- <a href="krb5kdc.html" title="krb5kdc"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kdb5_ldap_util">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kdb5_util — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kdb5_ldap_util" href="kdb5_ldap_util.html" />
- <link rel="prev" title="kadmind" href="kadmind.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kadmind.html" title="kadmind"
- accesskey="P">previous</a> |
- <a href="kdb5_ldap_util.html" title="kdb5_ldap_util"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kdb5_util">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdb5-util">
-<span id="kdb5-util-8"></span><h1>kdb5_util<a class="headerlink" href="#kdb5-util" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p id="kdb5-util-synopsis"><strong>kdb5_util</strong>
-[<strong>-r</strong> <em>realm</em>]
-[<strong>-d</strong> <em>dbname</em>]
-[<strong>-k</strong> <em>mkeytype</em>]
-[<strong>-kv</strong> <em>mkeyVNO</em>]
-[<strong>-M</strong> <em>mkeyname</em>]
-[<strong>-m</strong>]
-[<strong>-sf</strong> <em>stashfilename</em>]
-[<strong>-P</strong> <em>password</em>]
-[<strong>-x</strong> <em>db_args</em>]
-<em>command</em> [<em>command_options</em>]</p>
-</div>
-<div class="section" id="description">
-<span id="kdb5-util-synopsis-end"></span><h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>kdb5_util allows an administrator to perform maintenance procedures on
-the KDC database. Databases can be created, destroyed, and dumped to
-or loaded from ASCII files. kdb5_util can create a Kerberos master
-key stash file or perform live rollover of the master key.</p>
-<p>When kdb5_util is run, it attempts to acquire the master key and open
-the database. However, execution continues regardless of whether or
-not kdb5_util successfully opens the database, because the database
-may not exist yet or the stash file may be corrupt.</p>
-<p>Note that some KDC database modules may not support all kdb5_util
-commands.</p>
-</div>
-<div class="section" id="command-line-options">
-<h2>COMMAND-LINE OPTIONS<a class="headerlink" href="#command-line-options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils" id="kdb5-util-options">
-<dt><strong>-r</strong> <em>realm</em></dt>
-<dd>specifies the Kerberos realm of the database.</dd>
-<dt><strong>-d</strong> <em>dbname</em></dt>
-<dd>specifies the name under which the principal database is stored;
-by default the database is that listed in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>. The
-password policy database and lock files are also derived from this
-value.</dd>
-<dt><strong>-k</strong> <em>mkeytype</em></dt>
-<dd>specifies the key type of the master key in the database. The
-default is given by the <strong>master_key_type</strong> variable in
-<a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-kv</strong> <em>mkeyVNO</em></dt>
-<dd>Specifies the version number of the master key in the database;
-the default is 1. Note that 0 is not allowed.</dd>
-<dt><strong>-M</strong> <em>mkeyname</em></dt>
-<dd>principal name for the master key in the database. If not
-specified, the name is determined by the <strong>master_key_name</strong>
-variable in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-m</strong></dt>
-<dd>specifies that the master database password should be read from
-the keyboard rather than fetched from a file on disk.</dd>
-<dt><strong>-sf</strong> <em>stash_file</em></dt>
-<dd>specifies the stash filename of the master database password. If
-not specified, the filename is determined by the
-<strong>key_stash_file</strong> variable in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-P</strong> <em>password</em></dt>
-<dd>specifies the master database password. Using this option may
-expose the password to other users on the system via the process
-list.</dd>
-<dt><strong>-x</strong> <em>db_args</em></dt>
-<dd>specifies database-specific options. See <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> for
-supported options.</dd>
-</dl>
-</div>
-<div class="section" id="commands">
-<span id="kdb5-util-options-end"></span><h2>COMMANDS<a class="headerlink" href="#commands" title="Permalink to this headline">¶</a></h2>
-<div class="section" id="create">
-<h3>create<a class="headerlink" href="#create" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-util-create">
-<div><strong>create</strong> [<strong>-s</strong>]</div></blockquote>
-<p>Creates a new database. If the <strong>-s</strong> option is specified, the stash
-file is also created. This command fails if the database already
-exists. If the command is successful, the database is opened just as
-if it had already existed when the program was first run.</p>
-</div>
-<div class="section" id="destroy">
-<span id="kdb5-util-create-end"></span><h3>destroy<a class="headerlink" href="#destroy" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-util-destroy">
-<div><strong>destroy</strong> [<strong>-f</strong>]</div></blockquote>
-<p>Destroys the database, first overwriting the disk sectors and then
-unlinking the files, after prompting the user for confirmation. With
-the <strong>-f</strong> argument, does not prompt the user.</p>
-</div>
-<div class="section" id="stash">
-<span id="kdb5-util-destroy-end"></span><h3>stash<a class="headerlink" href="#stash" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-util-stash">
-<div><strong>stash</strong> [<strong>-f</strong> <em>keyfile</em>]</div></blockquote>
-<p>Stores the master principal’s keys in a stash file. The <strong>-f</strong>
-argument can be used to override the <em>keyfile</em> specified in
-<a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</p>
-</div>
-<div class="section" id="dump">
-<span id="kdb5-util-stash-end"></span><h3>dump<a class="headerlink" href="#dump" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-util-dump">
-<div><strong>dump</strong> [<strong>-b7</strong>|<strong>-r13</strong>|<strong>-r18</strong>]
-[<strong>-verbose</strong>] [<strong>-mkey_convert</strong>] [<strong>-new_mkey_file</strong>
-<em>mkey_file</em>] [<strong>-rev</strong>] [<strong>-recurse</strong>] [<em>filename</em>
-[<em>principals</em>…]]</div></blockquote>
-<p>Dumps the current Kerberos and KADM5 database into an ASCII file. By
-default, the database is dumped in current format, “kdb5_util
-load_dump version 7”. If filename is not specified, or is the string
-“-“, the dump is sent to standard output. Options:</p>
-<dl class="docutils">
-<dt><strong>-b7</strong></dt>
-<dd>causes the dump to be in the Kerberos 5 Beta 7 format (“kdb5_util
-load_dump version 4”). This was the dump format produced on
-releases prior to 1.2.2.</dd>
-<dt><strong>-r13</strong></dt>
-<dd>causes the dump to be in the Kerberos 5 1.3 format (“kdb5_util
-load_dump version 5”). This was the dump format produced on
-releases prior to 1.8.</dd>
-<dt><strong>-r18</strong></dt>
-<dd>causes the dump to be in the Kerberos 5 1.8 format (“kdb5_util
-load_dump version 6”). This was the dump format produced on
-releases prior to 1.11.</dd>
-<dt><strong>-verbose</strong></dt>
-<dd>causes the name of each principal and policy to be printed as it
-is dumped.</dd>
-<dt><strong>-mkey_convert</strong></dt>
-<dd>prompts for a new master key. This new master key will be used to
-re-encrypt principal key data in the dumpfile. The principal keys
-themselves will not be changed.</dd>
-<dt><strong>-new_mkey_file</strong> <em>mkey_file</em></dt>
-<dd>the filename of a stash file. The master key in this stash file
-will be used to re-encrypt the key data in the dumpfile. The key
-data in the database will not be changed.</dd>
-<dt><strong>-rev</strong></dt>
-<dd>dumps in reverse order. This may recover principals that do not
-dump normally, in cases where database corruption has occurred.</dd>
-<dt><strong>-recurse</strong></dt>
-<dd><p class="first">causes the dump to walk the database recursively (btree only).
-This may recover principals that do not dump normally, in cases
-where database corruption has occurred. In cases of such
-corruption, this option will probably retrieve more principals
-than the <strong>-rev</strong> option will.</p>
-<div class="versionchanged">
-<p><span class="versionmodified">Changed in version 1.15: </span>Release 1.15 restored the functionality of the <strong>-recurse</strong>
-option.</p>
-</div>
-<div class="last versionchanged">
-<p><span class="versionmodified">Changed in version 1.5: </span>The <strong>-recurse</strong> option ceased working until release 1.15,
-doing a normal dump instead of a recursive traversal.</p>
-</div>
-</dd>
-</dl>
-</div>
-<div class="section" id="load">
-<span id="kdb5-util-dump-end"></span><h3>load<a class="headerlink" href="#load" title="Permalink to this headline">¶</a></h3>
-<blockquote id="kdb5-util-load">
-<div><strong>load</strong> [<strong>-b7</strong>|<strong>-r13</strong>|<strong>-r18</strong>] [<strong>-hash</strong>]
-[<strong>-verbose</strong>] [<strong>-update</strong>] <em>filename</em></div></blockquote>
-<p>Loads a database dump from the named file into the named database. If
-no option is given to determine the format of the dump file, the
-format is detected automatically and handled as appropriate. Unless
-the <strong>-update</strong> option is given, <strong>load</strong> creates a new database
-containing only the data in the dump file, overwriting the contents of
-any previously existing database. Note that when using the LDAP KDC
-database module, the <strong>-update</strong> flag is required.</p>
-<p>Options:</p>
-<dl class="docutils">
-<dt><strong>-b7</strong></dt>
-<dd>requires the database to be in the Kerberos 5 Beta 7 format
-(“kdb5_util load_dump version 4”). This was the dump format
-produced on releases prior to 1.2.2.</dd>
-<dt><strong>-r13</strong></dt>
-<dd>requires the database to be in Kerberos 5 1.3 format (“kdb5_util
-load_dump version 5”). This was the dump format produced on
-releases prior to 1.8.</dd>
-<dt><strong>-r18</strong></dt>
-<dd>requires the database to be in Kerberos 5 1.8 format (“kdb5_util
-load_dump version 6”). This was the dump format produced on
-releases prior to 1.11.</dd>
-<dt><strong>-hash</strong></dt>
-<dd>stores the database in hash format, if using the DB2 database
-type. If this option is not specified, the database will be
-stored in btree format. This option is not recommended, as
-databases stored in hash format are known to corrupt data and lose
-principals.</dd>
-<dt><strong>-verbose</strong></dt>
-<dd>causes the name of each principal and policy to be printed as it
-is dumped.</dd>
-<dt><strong>-update</strong></dt>
-<dd>records from the dump file are added to or updated in the existing
-database. Otherwise, a new database is created containing only
-what is in the dump file and the old one destroyed upon successful
-completion.</dd>
-</dl>
-</div>
-<div class="section" id="ark">
-<span id="kdb5-util-load-end"></span><h3>ark<a class="headerlink" href="#ark" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>ark</strong> [<strong>-e</strong> <em>enc</em>:<em>salt</em>,…] <em>principal</em></div></blockquote>
-<p>Adds new random keys to <em>principal</em> at the next available key version
-number. Keys for the current highest key version number will be
-preserved. The <strong>-e</strong> option specifies the list of encryption and
-salt types to be used for the new keys.</p>
-</div>
-<div class="section" id="add-mkey">
-<h3>add_mkey<a class="headerlink" href="#add-mkey" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>add_mkey</strong> [<strong>-e</strong> <em>etype</em>] [<strong>-s</strong>]</div></blockquote>
-<p>Adds a new master key to the master key principal, but does not mark
-it as active. Existing master keys will remain. The <strong>-e</strong> option
-specifies the encryption type of the new master key; see
-<a class="reference internal" href="../conf_files/kdc_conf.html#encryption-types"><span class="std std-ref">Encryption types</span></a> in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a list of possible
-values. The <strong>-s</strong> option stashes the new master key in the stash
-file, which will be created if it doesn’t already exist.</p>
-<p>After a new master key is added, it should be propagated to replica
-servers via a manual or periodic invocation of <a class="reference internal" href="kprop.html#kprop-8"><span class="std std-ref">kprop</span></a>. Then,
-the stash files on the replica servers should be updated with the
-kdb5_util <strong>stash</strong> command. Once those steps are complete, the key
-is ready to be marked active with the kdb5_util <strong>use_mkey</strong> command.</p>
-</div>
-<div class="section" id="use-mkey">
-<h3>use_mkey<a class="headerlink" href="#use-mkey" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>use_mkey</strong> <em>mkeyVNO</em> [<em>time</em>]</div></blockquote>
-<p>Sets the activation time of the master key specified by <em>mkeyVNO</em>.
-Once a master key becomes active, it will be used to encrypt newly
-created principal keys. If no <em>time</em> argument is given, the current
-time is used, causing the specified master key version to become
-active immediately. The format for <em>time</em> is <a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string.</p>
-<p>After a new master key becomes active, the kdb5_util
-<strong>update_princ_encryption</strong> command can be used to update all
-principal keys to be encrypted in the new master key.</p>
-</div>
-<div class="section" id="list-mkeys">
-<h3>list_mkeys<a class="headerlink" href="#list-mkeys" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>list_mkeys</strong></div></blockquote>
-<p>List all master keys, from most recent to earliest, in the master key
-principal. The output will show the kvno, enctype, and salt type for
-each mkey, similar to the output of <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> <strong>getprinc</strong>. A
-<code class="docutils literal"><span class="pre">*</span></code> following an mkey denotes the currently active master key.</p>
-</div>
-<div class="section" id="purge-mkeys">
-<h3>purge_mkeys<a class="headerlink" href="#purge-mkeys" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>purge_mkeys</strong> [<strong>-f</strong>] [<strong>-n</strong>] [<strong>-v</strong>]</div></blockquote>
-<p>Delete master keys from the master key principal that are not used to
-protect any principals. This command can be used to remove old master
-keys all principal keys are protected by a newer master key.</p>
-<dl class="docutils">
-<dt><strong>-f</strong></dt>
-<dd>does not prompt for confirmation.</dd>
-<dt><strong>-n</strong></dt>
-<dd>performs a dry run, showing master keys that would be purged, but
-not actually purging any keys.</dd>
-<dt><strong>-v</strong></dt>
-<dd>gives more verbose output.</dd>
-</dl>
-</div>
-<div class="section" id="update-princ-encryption">
-<h3>update_princ_encryption<a class="headerlink" href="#update-princ-encryption" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>update_princ_encryption</strong> [<strong>-f</strong>] [<strong>-n</strong>] [<strong>-v</strong>]
-[<em>princ-pattern</em>]</div></blockquote>
-<p>Update all principal records (or only those matching the
-<em>princ-pattern</em> glob pattern) to re-encrypt the key data using the
-active database master key, if they are encrypted using a different
-version, and give a count at the end of the number of principals
-updated. If the <strong>-f</strong> option is not given, ask for confirmation
-before starting to make changes. The <strong>-v</strong> option causes each
-principal processed to be listed, with an indication as to whether it
-needed updating or not. The <strong>-n</strong> option performs a dry run, only
-showing the actions which would have been taken.</p>
-</div>
-<div class="section" id="tabdump">
-<h3>tabdump<a class="headerlink" href="#tabdump" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>tabdump</strong> [<strong>-H</strong>] [<strong>-c</strong>] [<strong>-e</strong>] [<strong>-n</strong>] [<strong>-o</strong> <em>outfile</em>]
-<em>dumptype</em></div></blockquote>
-<p>Dump selected fields of the database in a tabular format suitable for
-reporting (e.g., using traditional Unix text processing tools) or
-importing into relational databases. The data format is tab-separated
-(default), or optionally comma-separated (CSV), with a fixed number of
-columns. The output begins with a header line containing field names,
-unless suppression is requested using the <strong>-H</strong> option.</p>
-<p>The <em>dumptype</em> parameter specifies the name of an output table (see
-below).</p>
-<p>Options:</p>
-<dl class="docutils">
-<dt><strong>-H</strong></dt>
-<dd>suppress writing the field names in a header line</dd>
-<dt><strong>-c</strong></dt>
-<dd>use comma separated values (CSV) format, with minimal quoting,
-instead of the default tab-separated (unquoted, unescaped) format</dd>
-<dt><strong>-e</strong></dt>
-<dd>write empty hexadecimal string fields as empty fields instead of
-as “-1”.</dd>
-<dt><strong>-n</strong></dt>
-<dd>produce numeric output for fields that normally have symbolic
-output, such as enctypes and flag names. Also requests output of
-time stamps as decimal POSIX time_t values.</dd>
-<dt><strong>-o</strong> <em>outfile</em></dt>
-<dd>write the dump to the specified output file instead of to standard
-output</dd>
-</dl>
-<p>Dump types:</p>
-<dl class="docutils">
-<dt><strong>keydata</strong></dt>
-<dd><p class="first">principal encryption key information, including actual key data
-(which is still encrypted in the master key)</p>
-<dl class="last docutils">
-<dt><strong>name</strong></dt>
-<dd>principal name</dd>
-<dt><strong>keyindex</strong></dt>
-<dd>index of this key in the principal’s key list</dd>
-<dt><strong>kvno</strong></dt>
-<dd>key version number</dd>
-<dt><strong>enctype</strong></dt>
-<dd>encryption type</dd>
-<dt><strong>key</strong></dt>
-<dd>key data as a hexadecimal string</dd>
-<dt><strong>salttype</strong></dt>
-<dd>salt type</dd>
-<dt><strong>salt</strong></dt>
-<dd>salt data as a hexadecimal string</dd>
-</dl>
-</dd>
-<dt><strong>keyinfo</strong></dt>
-<dd>principal encryption key information (as in <strong>keydata</strong> above),
-excluding actual key data</dd>
-<dt><strong>princ_flags</strong></dt>
-<dd><p class="first">principal boolean attributes. Flag names print as hexadecimal
-numbers if the <strong>-n</strong> option is specified, and all flag positions
-are printed regardless of whether or not they are set. If <strong>-n</strong>
-is not specified, print all known flag names for each principal,
-but only print hexadecimal flag names if the corresponding flag is
-set.</p>
-<dl class="last docutils">
-<dt><strong>name</strong></dt>
-<dd>principal name</dd>
-<dt><strong>flag</strong></dt>
-<dd>flag name</dd>
-<dt><strong>value</strong></dt>
-<dd>boolean value (0 for clear, or 1 for set)</dd>
-</dl>
-</dd>
-<dt><strong>princ_lockout</strong></dt>
-<dd><p class="first">state information used for tracking repeated password failures</p>
-<dl class="last docutils">
-<dt><strong>name</strong></dt>
-<dd>principal name</dd>
-<dt><strong>last_success</strong></dt>
-<dd>time stamp of most recent successful authentication</dd>
-<dt><strong>last_failed</strong></dt>
-<dd>time stamp of most recent failed authentication</dd>
-<dt><strong>fail_count</strong></dt>
-<dd>count of failed attempts</dd>
-</dl>
-</dd>
-<dt><strong>princ_meta</strong></dt>
-<dd><p class="first">principal metadata</p>
-<dl class="last docutils">
-<dt><strong>name</strong></dt>
-<dd>principal name</dd>
-<dt><strong>modby</strong></dt>
-<dd>name of last principal to modify this principal</dd>
-<dt><strong>modtime</strong></dt>
-<dd>timestamp of last modification</dd>
-<dt><strong>lastpwd</strong></dt>
-<dd>timestamp of last password change</dd>
-<dt><strong>policy</strong></dt>
-<dd>policy object name</dd>
-<dt><strong>mkvno</strong></dt>
-<dd>key version number of the master key that encrypts this
-principal’s key data</dd>
-<dt><strong>hist_kvno</strong></dt>
-<dd>key version number of the history key that encrypts the key
-history data for this principal</dd>
-</dl>
-</dd>
-<dt><strong>princ_stringattrs</strong></dt>
-<dd><p class="first">string attributes (key/value pairs)</p>
-<dl class="last docutils">
-<dt><strong>name</strong></dt>
-<dd>principal name</dd>
-<dt><strong>key</strong></dt>
-<dd>attribute name</dd>
-<dt><strong>value</strong></dt>
-<dd>attribute value</dd>
-</dl>
-</dd>
-<dt><strong>princ_tktpolicy</strong></dt>
-<dd><p class="first">per-principal ticket policy data, including maximum ticket
-lifetimes</p>
-<dl class="last docutils">
-<dt><strong>name</strong></dt>
-<dd>principal name</dd>
-<dt><strong>expiration</strong></dt>
-<dd>principal expiration date</dd>
-<dt><strong>pw_expiration</strong></dt>
-<dd>password expiration date</dd>
-<dt><strong>max_life</strong></dt>
-<dd>maximum ticket lifetime</dd>
-<dt><strong>max_renew_life</strong></dt>
-<dd>maximum renewable ticket lifetime</dd>
-</dl>
-</dd>
-</dl>
-<p>Examples:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>$ kdb5_util tabdump -o keyinfo.txt keyinfo
-$ cat keyinfo.txt
-name keyindex kvno enctype salttype salt
-K/M@EXAMPLE.COM 0 1 aes256-cts-hmac-sha384-192 normal -1
-foo@EXAMPLE.COM 0 1 aes128-cts-hmac-sha1-96 normal -1
-bar@EXAMPLE.COM 0 1 aes128-cts-hmac-sha1-96 normal -1
-$ sqlite3
-sqlite> .mode tabs
-sqlite> .import keyinfo.txt keyinfo
-sqlite> select * from keyinfo where enctype like 'aes256-%';
-K/M@EXAMPLE.COM 1 1 aes256-cts-hmac-sha384-192 normal -1
-sqlite> .quit
-$ awk -F'\t' '$4 ~ /aes256-/ { print }' keyinfo.txt
-K/M@EXAMPLE.COM 1 1 aes256-cts-hmac-sha384-192 normal -1
-</pre></div>
-</div>
-</div>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kdb5_util</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#command-line-options">COMMAND-LINE OPTIONS</a></li>
-<li><a class="reference internal" href="#commands">COMMANDS</a><ul>
-<li><a class="reference internal" href="#create">create</a></li>
-<li><a class="reference internal" href="#destroy">destroy</a></li>
-<li><a class="reference internal" href="#stash">stash</a></li>
-<li><a class="reference internal" href="#dump">dump</a></li>
-<li><a class="reference internal" href="#load">load</a></li>
-<li><a class="reference internal" href="#ark">ark</a></li>
-<li><a class="reference internal" href="#add-mkey">add_mkey</a></li>
-<li><a class="reference internal" href="#use-mkey">use_mkey</a></li>
-<li><a class="reference internal" href="#list-mkeys">list_mkeys</a></li>
-<li><a class="reference internal" href="#purge-mkeys">purge_mkeys</a></li>
-<li><a class="reference internal" href="#update-princ-encryption">update_princ_encryption</a></li>
-<li><a class="reference internal" href="#tabdump">tabdump</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kadmind.html" title="kadmind"
- >previous</a> |
- <a href="kdb5_ldap_util.html" title="kdb5_ldap_util"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kdb5_util">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kprop — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kpropd" href="kpropd.html" />
- <link rel="prev" title="krb5kdc" href="krb5kdc.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5kdc.html" title="krb5kdc"
- accesskey="P">previous</a> |
- <a href="kpropd.html" title="kpropd"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kprop">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kprop">
-<span id="kprop-8"></span><h1>kprop<a class="headerlink" href="#kprop" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>kprop</strong>
-[<strong>-r</strong> <em>realm</em>]
-[<strong>-f</strong> <em>file</em>]
-[<strong>-d</strong>]
-[<strong>-P</strong> <em>port</em>]
-[<strong>-s</strong> <em>keytab</em>]
-<em>replica_host</em></p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>kprop is used to securely propagate a Kerberos V5 database dump file
-from the primary Kerberos server to a replica Kerberos server, which is
-specified by <em>replica_host</em>. The dump file must be created by
-<a class="reference internal" href="kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-r</strong> <em>realm</em></dt>
-<dd>Specifies the realm of the primary server.</dd>
-<dt><strong>-f</strong> <em>file</em></dt>
-<dd>Specifies the filename where the dumped principal database file is
-to be found; by default the dumped database file is normally
-<a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/replica_datatrans</span></code>.</dd>
-<dt><strong>-P</strong> <em>port</em></dt>
-<dd>Specifies the port to use to contact the <a class="reference internal" href="kpropd.html#kpropd-8"><span class="std std-ref">kpropd</span></a> server
-on the remote host.</dd>
-<dt><strong>-d</strong></dt>
-<dd>Prints debugging information.</dd>
-<dt><strong>-s</strong> <em>keytab</em></dt>
-<dd>Specifies the location of the keytab file.</dd>
-</dl>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kpropd.html#kpropd-8"><span class="std std-ref">kpropd</span></a>, <a class="reference internal" href="kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>, <a class="reference internal" href="krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a>,
-<a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kprop</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5kdc.html" title="krb5kdc"
- >previous</a> |
- <a href="kpropd.html" title="kpropd"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kprop">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kpropd — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kproplog" href="kproplog.html" />
- <link rel="prev" title="kprop" href="kprop.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kprop.html" title="kprop"
- accesskey="P">previous</a> |
- <a href="kproplog.html" title="kproplog"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kpropd">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kpropd">
-<span id="kpropd-8"></span><h1>kpropd<a class="headerlink" href="#kpropd" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>kpropd</strong>
-[<strong>-r</strong> <em>realm</em>]
-[<strong>-A</strong> <em>admin_server</em>]
-[<strong>-a</strong> <em>acl_file</em>]
-[<strong>-f</strong> <em>replica_dumpfile</em>]
-[<strong>-F</strong> <em>principal_database</em>]
-[<strong>-p</strong> <em>kdb5_util_prog</em>]
-[<strong>-P</strong> <em>port</em>]
-[<strong>–pid-file</strong>=<em>pid_file</em>]
-[<strong>-D</strong>]
-[<strong>-d</strong>]
-[<strong>-s</strong> <em>keytab_file</em>]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>The <em>kpropd</em> command runs on the replica KDC server. It listens for
-update requests made by the <a class="reference internal" href="kprop.html#kprop-8"><span class="std std-ref">kprop</span></a> program. If incremental
-propagation is enabled, it periodically requests incremental updates
-from the primary KDC.</p>
-<p>When the replica receives a kprop request from the primary, kpropd
-accepts the dumped KDC database and places it in a file, and then runs
-<a class="reference internal" href="kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> to load the dumped database into the active
-database which is used by <a class="reference internal" href="krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a>. This allows the primary
-Kerberos server to use <a class="reference internal" href="kprop.html#kprop-8"><span class="std std-ref">kprop</span></a> to propagate its database to
-the replica servers. Upon a successful download of the KDC database
-file, the replica Kerberos server will have an up-to-date KDC
-database.</p>
-<p>Where incremental propagation is not used, kpropd is commonly invoked
-out of inetd(8) as a nowait service. This is done by adding a line to
-the <code class="docutils literal"><span class="pre">/etc/inetd.conf</span></code> file which looks like this:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kprop</span> <span class="n">stream</span> <span class="n">tcp</span> <span class="n">nowait</span> <span class="n">root</span> <span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">sbin</span><span class="o">/</span><span class="n">kpropd</span> <span class="n">kpropd</span>
-</pre></div>
-</div>
-<p>kpropd can also run as a standalone daemon, backgrounding itself and
-waiting for connections on port 754 (or the port specified with the
-<strong>-P</strong> option if given). Standalone mode is required for incremental
-propagation. Starting in release 1.11, kpropd automatically detects
-whether it was run from inetd and runs in standalone mode if it is
-not. Prior to release 1.11, the <strong>-S</strong> option is required to run
-kpropd in standalone mode; this option is now accepted for backward
-compatibility but does nothing.</p>
-<p>Incremental propagation may be enabled with the <strong>iprop_enable</strong>
-variable in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>. If incremental propagation is
-enabled, the replica periodically polls the primary KDC for updates, at
-an interval determined by the <strong>iprop_replica_poll</strong> variable. If the
-replica receives updates, kpropd updates its log file with any updates
-from the primary. <a class="reference internal" href="kproplog.html#kproplog-8"><span class="std std-ref">kproplog</span></a> can be used to view a summary of
-the update entry log on the replica KDC. If incremental propagation
-is enabled, the principal <code class="docutils literal"><span class="pre">kiprop/replicahostname@REALM</span></code> (where
-<em>replicahostname</em> is the name of the replica KDC host, and <em>REALM</em> is
-the name of the Kerberos realm) must be present in the replica’s
-keytab file.</p>
-<p><a class="reference internal" href="kproplog.html#kproplog-8"><span class="std std-ref">kproplog</span></a> can be used to force full replication when iprop is
-enabled.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-r</strong> <em>realm</em></dt>
-<dd>Specifies the realm of the primary server.</dd>
-<dt><strong>-A</strong> <em>admin_server</em></dt>
-<dd>Specifies the server to be contacted for incremental updates; by
-default, the primary admin server is contacted.</dd>
-<dt><strong>-f</strong> <em>file</em></dt>
-<dd>Specifies the filename where the dumped principal database file is
-to be stored; by default the dumped database file is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/from_master</span></code>.</dd>
-<dt><strong>-F</strong> <em>kerberos_db</em></dt>
-<dd>Path to the Kerberos database file, if not the default.</dd>
-<dt><strong>-p</strong></dt>
-<dd>Allows the user to specify the pathname to the <a class="reference internal" href="kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>
-program; by default the pathname used is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">SBINDIR</span></a><code class="docutils literal"><span class="pre">/kdb5_util</span></code>.</dd>
-<dt><strong>-D</strong></dt>
-<dd>In this mode, kpropd will not detach itself from the current job
-and run in the background. Instead, it will run in the
-foreground.</dd>
-<dt><strong>-d</strong></dt>
-<dd>Turn on debug mode. kpropd will print out debugging messages
-during the database propogation and will run in the foreground
-(implies <strong>-D</strong>).</dd>
-<dt><strong>-P</strong></dt>
-<dd>Allow for an alternate port number for kpropd to listen on. This
-is only useful in combination with the <strong>-S</strong> option.</dd>
-<dt><strong>-a</strong> <em>acl_file</em></dt>
-<dd>Allows the user to specify the path to the kpropd.acl file; by
-default the path used is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/kpropd.acl</span></code>.</dd>
-<dt><strong>–pid-file</strong>=<em>pid_file</em></dt>
-<dd>In standalone mode, write the process ID of the daemon into
-<em>pid_file</em>.</dd>
-<dt><strong>-s</strong> <em>keytab_file</em></dt>
-<dd>Path to a keytab to use for acquiring acceptor credentials.</dd>
-<dt><strong>-x</strong> <em>db_args</em></dt>
-<dd>Database-specific arguments. See <a class="reference internal" href="kadmin_local.html#dboptions"><span class="std std-ref">Database Options</span></a> in <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> for supported arguments.</dd>
-</dl>
-</div>
-<div class="section" id="files">
-<h2>FILES<a class="headerlink" href="#files" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt>kpropd.acl</dt>
-<dd>Access file for kpropd; the default location is
-<code class="docutils literal"><span class="pre">/usr/local/var/krb5kdc/kpropd.acl</span></code>. Each entry is a line
-containing the principal of a host from which the local machine
-will allow Kerberos database propagation via <a class="reference internal" href="kprop.html#kprop-8"><span class="std std-ref">kprop</span></a>.</dd>
-</dl>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kprop.html#kprop-8"><span class="std std-ref">kprop</span></a>, <a class="reference internal" href="kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>, <a class="reference internal" href="krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a>,
-<a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a>, inetd(8)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kpropd</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#files">FILES</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kprop.html" title="kprop"
- >previous</a> |
- <a href="kproplog.html" title="kproplog"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kpropd">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kproplog — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="ktutil" href="ktutil.html" />
- <link rel="prev" title="kpropd" href="kpropd.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kpropd.html" title="kpropd"
- accesskey="P">previous</a> |
- <a href="ktutil.html" title="ktutil"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kproplog">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kproplog">
-<span id="kproplog-8"></span><h1>kproplog<a class="headerlink" href="#kproplog" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>kproplog</strong> [<strong>-h</strong>] [<strong>-e</strong> <em>num</em>] [-v]
-<strong>kproplog</strong> [-R]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>The kproplog command displays the contents of the KDC database update
-log to standard output. It can be used to keep track of incremental
-updates to the principal database. The update log file contains the
-update log maintained by the <a class="reference internal" href="kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> process on the primary
-KDC server and the <a class="reference internal" href="kpropd.html#kpropd-8"><span class="std std-ref">kpropd</span></a> process on the replica KDC
-servers. When updates occur, they are logged to this file.
-Subsequently any KDC replica configured for incremental updates will
-request the current data from the primary KDC and update their log
-file with any updates returned.</p>
-<p>The kproplog command requires read access to the update log file. It
-will display update entries only for the KDC it runs on.</p>
-<p>If no options are specified, kproplog displays a summary of the update
-log. If invoked on the primary, kproplog also displays all of the
-update entries. If invoked on a replica KDC server, kproplog displays
-only a summary of the updates, which includes the serial number of the
-last update received and the associated time stamp of the last update.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-R</strong></dt>
-<dd>Reset the update log. This forces full resynchronization. If
-used on a replica then that replica will request a full resync.
-If used on the primary then all replicas will request full
-resyncs.</dd>
-<dt><strong>-h</strong></dt>
-<dd>Display a summary of the update log. This information includes
-the database version number, state of the database, the number of
-updates in the log, the time stamp of the first and last update,
-and the version number of the first and last update entry.</dd>
-<dt><strong>-e</strong> <em>num</em></dt>
-<dd>Display the last <em>num</em> update entries in the log. This is useful
-when debugging synchronization between KDC servers.</dd>
-<dt><strong>-v</strong></dt>
-<dd><p class="first">Display individual attributes per update. An example of the
-output generated for one entry:</p>
-<div class="last highlight-default"><div class="highlight"><pre><span></span><span class="n">Update</span> <span class="n">Entry</span>
- <span class="n">Update</span> <span class="n">serial</span> <span class="c1"># : 4</span>
- <span class="n">Update</span> <span class="n">operation</span> <span class="p">:</span> <span class="n">Add</span>
- <span class="n">Update</span> <span class="n">principal</span> <span class="p">:</span> <span class="n">test</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
- <span class="n">Update</span> <span class="n">size</span> <span class="p">:</span> <span class="mi">424</span>
- <span class="n">Update</span> <span class="n">committed</span> <span class="p">:</span> <span class="kc">True</span>
- <span class="n">Update</span> <span class="n">time</span> <span class="n">stamp</span> <span class="p">:</span> <span class="n">Fri</span> <span class="n">Feb</span> <span class="mi">20</span> <span class="mi">23</span><span class="p">:</span><span class="mi">37</span><span class="p">:</span><span class="mi">42</span> <span class="mi">2004</span>
- <span class="n">Attributes</span> <span class="n">changed</span> <span class="p">:</span> <span class="mi">6</span>
- <span class="n">Principal</span>
- <span class="n">Key</span> <span class="n">data</span>
- <span class="n">Password</span> <span class="n">last</span> <span class="n">changed</span>
- <span class="n">Modifying</span> <span class="n">principal</span>
- <span class="n">Modification</span> <span class="n">time</span>
- <span class="n">TL</span> <span class="n">data</span>
-</pre></div>
-</div>
-</dd>
-</dl>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kpropd.html#kpropd-8"><span class="std std-ref">kpropd</span></a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kproplog</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kpropd.html" title="kpropd"
- >previous</a> |
- <a href="ktutil.html" title="ktutil"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kproplog">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5kdc — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kprop" href="kprop.html" />
- <link rel="prev" title="kdb5_ldap_util" href="kdb5_ldap_util.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kdb5_ldap_util.html" title="kdb5_ldap_util"
- accesskey="P">previous</a> |
- <a href="kprop.html" title="kprop"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5kdc">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5kdc">
-<span id="krb5kdc-8"></span><h1>krb5kdc<a class="headerlink" href="#krb5kdc" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>krb5kdc</strong>
-[<strong>-x</strong> <em>db_args</em>]
-[<strong>-d</strong> <em>dbname</em>]
-[<strong>-k</strong> <em>keytype</em>]
-[<strong>-M</strong> <em>mkeyname</em>]
-[<strong>-p</strong> <em>portnum</em>]
-[<strong>-m</strong>]
-[<strong>-r</strong> <em>realm</em>]
-[<strong>-n</strong>]
-[<strong>-w</strong> <em>numworkers</em>]
-[<strong>-P</strong> <em>pid_file</em>]
-[<strong>-T</strong> <em>time_offset</em>]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>krb5kdc is the Kerberos version 5 Authentication Service and Key
-Distribution Center (AS/KDC).</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<p>The <strong>-r</strong> <em>realm</em> option specifies the realm for which the server
-should provide service. This option may be specified multiple times
-to serve multiple realms. If no <strong>-r</strong> option is given, the default
-realm (as specified in <a class="reference internal" href="../conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>) will be served.</p>
-<p>The <strong>-d</strong> <em>dbname</em> option specifies the name under which the
-principal database can be found. This option does not apply to the
-LDAP database.</p>
-<p>The <strong>-k</strong> <em>keytype</em> option specifies the key type of the master key
-to be entered manually as a password when <strong>-m</strong> is given; the default
-is <code class="docutils literal"><span class="pre">aes256-cts-hmac-sha1-96</span></code>.</p>
-<p>The <strong>-M</strong> <em>mkeyname</em> option specifies the principal name for the
-master key in the database (usually <code class="docutils literal"><span class="pre">K/M</span></code> in the KDC’s realm).</p>
-<p>The <strong>-m</strong> option specifies that the master database password should
-be fetched from the keyboard rather than from a stash file.</p>
-<p>The <strong>-n</strong> option specifies that the KDC does not put itself in the
-background and does not disassociate itself from the terminal.</p>
-<p>The <strong>-P</strong> <em>pid_file</em> option tells the KDC to write its PID into
-<em>pid_file</em> after it starts up. This can be used to identify whether
-the KDC is still running and to allow init scripts to stop the correct
-process.</p>
-<p>The <strong>-p</strong> <em>portnum</em> option specifies the default UDP and TCP port
-numbers which the KDC should listen on for Kerberos version 5
-requests, as a comma-separated list. This value overrides the port
-numbers specified in the <a class="reference internal" href="../conf_files/kdc_conf.html#kdcdefaults"><span class="std std-ref">[kdcdefaults]</span></a> section of
-<a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>, but may be overridden by realm-specific values.
-If no value is given from any source, the default port is 88.</p>
-<p>The <strong>-w</strong> <em>numworkers</em> option tells the KDC to fork <em>numworkers</em>
-processes to listen to the KDC ports and process requests in parallel.
-The top level KDC process (whose pid is recorded in the pid file if
-the <strong>-P</strong> option is also given) acts as a supervisor. The supervisor
-will relay SIGHUP signals to the worker subprocesses, and will
-terminate the worker subprocess if the it is itself terminated or if
-any other worker process exits.</p>
-<p>The <strong>-x</strong> <em>db_args</em> option specifies database-specific arguments.
-See <a class="reference internal" href="kadmin_local.html#dboptions"><span class="std std-ref">Database Options</span></a> in <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> for
-supported arguments.</p>
-<p>The <strong>-T</strong> <em>offset</em> option specifies a time offset, in seconds, which
-the KDC will operate under. It is intended only for testing purposes.</p>
-</div>
-<div class="section" id="example">
-<h2>EXAMPLE<a class="headerlink" href="#example" title="Permalink to this headline">¶</a></h2>
-<p>The KDC may service requests for multiple realms (maximum 32 realms).
-The realms are listed on the command line. Per-realm options that can
-be specified on the command line pertain for each realm that follows
-it and are superseded by subsequent definitions of the same option.</p>
-<p>For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">krb5kdc</span> <span class="o">-</span><span class="n">p</span> <span class="mi">2001</span> <span class="o">-</span><span class="n">r</span> <span class="n">REALM1</span> <span class="o">-</span><span class="n">p</span> <span class="mi">2002</span> <span class="o">-</span><span class="n">r</span> <span class="n">REALM2</span> <span class="o">-</span><span class="n">r</span> <span class="n">REALM3</span>
-</pre></div>
-</div>
-<p>specifies that the KDC listen on port 2001 for REALM1 and on port 2002
-for REALM2 and REALM3. Additionally, per-realm parameters may be
-specified in the <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> file. The location of this file
-may be specified by the <strong>KRB5_KDC_PROFILE</strong> environment variable.
-Per-realm parameters specified in this file take precedence over
-options specified on the command line. See the <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>
-description for further details.</p>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>, <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>, <a class="reference internal" href="../conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>,
-<a class="reference internal" href="kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5kdc</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#example">EXAMPLE</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kdb5_ldap_util.html" title="kdb5_ldap_util"
- >previous</a> |
- <a href="kprop.html" title="kprop"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5kdc">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ktutil — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="k5srvutil" href="k5srvutil.html" />
- <link rel="prev" title="kproplog" href="kproplog.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kproplog.html" title="kproplog"
- accesskey="P">previous</a> |
- <a href="k5srvutil.html" title="k5srvutil"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ktutil">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ktutil">
-<span id="ktutil-1"></span><h1>ktutil<a class="headerlink" href="#ktutil" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>ktutil</strong></p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>The ktutil command invokes a command interface from which an
-administrator can read, write, or edit entries in a keytab. (Kerberos
-V4 srvtab files are no longer supported.)</p>
-</div>
-<div class="section" id="commands">
-<h2>COMMANDS<a class="headerlink" href="#commands" title="Permalink to this headline">¶</a></h2>
-<div class="section" id="list">
-<h3>list<a class="headerlink" href="#list" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>list</strong> [<strong>-t</strong>] [<strong>-k</strong>] [<strong>-e</strong>]</div></blockquote>
-<p>Displays the current keylist. If <strong>-t</strong>, <strong>-k</strong>, and/or <strong>-e</strong> are
-specified, also display the timestamp, key contents, or enctype
-(respectively).</p>
-<p>Alias: <strong>l</strong></p>
-</div>
-<div class="section" id="read-kt">
-<h3>read_kt<a class="headerlink" href="#read-kt" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>read_kt</strong> <em>keytab</em></div></blockquote>
-<p>Read the Kerberos V5 keytab file <em>keytab</em> into the current keylist.</p>
-<p>Alias: <strong>rkt</strong></p>
-</div>
-<div class="section" id="write-kt">
-<h3>write_kt<a class="headerlink" href="#write-kt" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>write_kt</strong> <em>keytab</em></div></blockquote>
-<p>Write the current keylist into the Kerberos V5 keytab file <em>keytab</em>.</p>
-<p>Alias: <strong>wkt</strong></p>
-</div>
-<div class="section" id="clear-list">
-<h3>clear_list<a class="headerlink" href="#clear-list" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>clear_list</strong></div></blockquote>
-<p>Clear the current keylist.</p>
-<p>Alias: <strong>clear</strong></p>
-</div>
-<div class="section" id="delete-entry">
-<h3>delete_entry<a class="headerlink" href="#delete-entry" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>delete_entry</strong> <em>slot</em></div></blockquote>
-<p>Delete the entry in slot number <em>slot</em> from the current keylist.</p>
-<p>Alias: <strong>delent</strong></p>
-</div>
-<div class="section" id="add-entry">
-<h3>add_entry<a class="headerlink" href="#add-entry" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>add_entry</strong> {<strong>-key</strong>|<strong>-password</strong>} <strong>-p</strong> <em>principal</em>
-<strong>-k</strong> <em>kvno</em> [<strong>-e</strong> <em>enctype</em>] [<strong>-f</strong>|<strong>-s</strong> <em>salt</em>]</div></blockquote>
-<p>Add <em>principal</em> to keylist using key or password. If the <strong>-f</strong> flag
-is specified, salt information will be fetched from the KDC; in this
-case the <strong>-e</strong> flag may be omitted, or it may be supplied to force a
-particular enctype. If the <strong>-f</strong> flag is not specified, the <strong>-e</strong>
-flag must be specified, and the default salt will be used unless
-overridden with the <strong>-s</strong> option.</p>
-<p>Alias: <strong>addent</strong></p>
-</div>
-<div class="section" id="list-requests">
-<h3>list_requests<a class="headerlink" href="#list-requests" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>list_requests</strong></div></blockquote>
-<p>Displays a listing of available commands.</p>
-<p>Aliases: <strong>lr</strong>, <strong>?</strong></p>
-</div>
-<div class="section" id="quit">
-<h3>quit<a class="headerlink" href="#quit" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>quit</strong></div></blockquote>
-<p>Quits ktutil.</p>
-<p>Aliases: <strong>exit</strong>, <strong>q</strong></p>
-</div>
-</div>
-<div class="section" id="example">
-<h2>EXAMPLE<a class="headerlink" href="#example" title="Permalink to this headline">¶</a></h2>
-<blockquote>
-<div><div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">ktutil</span><span class="p">:</span> <span class="n">add_entry</span> <span class="o">-</span><span class="n">password</span> <span class="o">-</span><span class="n">p</span> <span class="n">alice</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span> <span class="o">-</span><span class="n">k</span> <span class="mi">1</span> <span class="o">-</span><span class="n">e</span>
- <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">alice</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span>
-<span class="n">ktutil</span><span class="p">:</span> <span class="n">add_entry</span> <span class="o">-</span><span class="n">password</span> <span class="o">-</span><span class="n">p</span> <span class="n">alice</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span> <span class="o">-</span><span class="n">k</span> <span class="mi">1</span> <span class="o">-</span><span class="n">e</span>
- <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">alice</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span>
-<span class="n">ktutil</span><span class="p">:</span> <span class="n">write_kt</span> <span class="n">alice</span><span class="o">.</span><span class="n">keytab</span>
-<span class="n">ktutil</span><span class="p">:</span>
-</pre></div>
-</div>
-</div></blockquote>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>, <a class="reference internal" href="kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ktutil</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#commands">COMMANDS</a><ul>
-<li><a class="reference internal" href="#list">list</a></li>
-<li><a class="reference internal" href="#read-kt">read_kt</a></li>
-<li><a class="reference internal" href="#write-kt">write_kt</a></li>
-<li><a class="reference internal" href="#clear-list">clear_list</a></li>
-<li><a class="reference internal" href="#delete-entry">delete_entry</a></li>
-<li><a class="reference internal" href="#add-entry">add_entry</a></li>
-<li><a class="reference internal" href="#list-requests">list_requests</a></li>
-<li><a class="reference internal" href="#quit">quit</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#example">EXAMPLE</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kproplog.html" title="kproplog"
- >previous</a> |
- <a href="k5srvutil.html" title="k5srvutil"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ktutil">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>sserver — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="MIT Kerberos defaults" href="../../mitK5defaults.html" />
- <link rel="prev" title="k5srvutil" href="k5srvutil.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="k5srvutil.html" title="k5srvutil"
- accesskey="P">previous</a> |
- <a href="../../mitK5defaults.html" title="MIT Kerberos defaults"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__sserver">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="sserver">
-<span id="sserver-8"></span><h1>sserver<a class="headerlink" href="#sserver" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>sserver</strong>
-[ <strong>-p</strong> <em>port</em> ]
-[ <strong>-S</strong> <em>keytab</em> ]
-[ <em>server_port</em> ]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>sserver and <a class="reference internal" href="../../user/user_commands/sclient.html#sclient-1"><span class="std std-ref">sclient</span></a> are a simple demonstration client/server
-application. When sclient connects to sserver, it performs a Kerberos
-authentication, and then sserver returns to sclient the Kerberos
-principal which was used for the Kerberos authentication. It makes a
-good test that Kerberos has been successfully installed on a machine.</p>
-<p>The service name used by sserver and sclient is sample. Hence,
-sserver will require that there be a keytab entry for the service
-<code class="docutils literal"><span class="pre">sample/hostname.domain.name@REALM.NAME</span></code>. This keytab is generated
-using the <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> program. The keytab file is usually
-installed as <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a>.</p>
-<p>The <strong>-S</strong> option allows for a different keytab than the default.</p>
-<p>sserver is normally invoked out of inetd(8), using a line in
-<code class="docutils literal"><span class="pre">/etc/inetd.conf</span></code> that looks like this:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">sample</span> <span class="n">stream</span> <span class="n">tcp</span> <span class="n">nowait</span> <span class="n">root</span> <span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">sbin</span><span class="o">/</span><span class="n">sserver</span> <span class="n">sserver</span>
-</pre></div>
-</div>
-<p>Since <code class="docutils literal"><span class="pre">sample</span></code> is normally not a port defined in <code class="docutils literal"><span class="pre">/etc/services</span></code>,
-you will usually have to add a line to <code class="docutils literal"><span class="pre">/etc/services</span></code> which looks
-like this:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">sample</span> <span class="mi">13135</span><span class="o">/</span><span class="n">tcp</span>
-</pre></div>
-</div>
-<p>When using sclient, you will first have to have an entry in the
-Kerberos database, by using <a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>, and then you have to get
-Kerberos tickets, by using <a class="reference internal" href="../../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>. Also, if you are running
-the sclient program on a different host than the sserver it will be
-connecting to, be sure that both hosts have an entry in /etc/services
-for the sample tcp port, and that the same port number is in both
-files.</p>
-<p>When you run sclient you should see something like this:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">sendauth</span> <span class="n">succeeded</span><span class="p">,</span> <span class="n">reply</span> <span class="ow">is</span><span class="p">:</span>
-<span class="n">reply</span> <span class="nb">len</span> <span class="mi">32</span><span class="p">,</span> <span class="n">contents</span><span class="p">:</span>
-<span class="n">You</span> <span class="n">are</span> <span class="n">nlgilman</span><span class="nd">@JIMI</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="common-error-messages">
-<h2>COMMON ERROR MESSAGES<a class="headerlink" href="#common-error-messages" title="Permalink to this headline">¶</a></h2>
-<ol class="arabic">
-<li><p class="first">kinit returns the error:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kinit</span><span class="p">:</span> <span class="n">Client</span> <span class="ow">not</span> <span class="n">found</span> <span class="ow">in</span> <span class="n">Kerberos</span> <span class="n">database</span> <span class="k">while</span> <span class="n">getting</span>
- <span class="n">initial</span> <span class="n">credentials</span>
-</pre></div>
-</div>
-<p>This means that you didn’t create an entry for your username in the
-Kerberos database.</p>
-</li>
-<li><p class="first">sclient returns the error:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">unknown</span> <span class="n">service</span> <span class="n">sample</span><span class="o">/</span><span class="n">tcp</span><span class="p">;</span> <span class="n">check</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">services</span>
-</pre></div>
-</div>
-<p>This means that you don’t have an entry in /etc/services for the
-sample tcp port.</p>
-</li>
-<li><p class="first">sclient returns the error:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">connect</span><span class="p">:</span> <span class="n">Connection</span> <span class="n">refused</span>
-</pre></div>
-</div>
-<p>This probably means you didn’t edit /etc/inetd.conf correctly, or
-you didn’t restart inetd after editing inetd.conf.</p>
-</li>
-<li><p class="first">sclient returns the error:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">sclient</span><span class="p">:</span> <span class="n">Server</span> <span class="ow">not</span> <span class="n">found</span> <span class="ow">in</span> <span class="n">Kerberos</span> <span class="n">database</span> <span class="k">while</span> <span class="n">using</span>
- <span class="n">sendauth</span>
-</pre></div>
-</div>
-<p>This means that the <code class="docutils literal"><span class="pre">sample/hostname@LOCAL.REALM</span></code> service was not
-defined in the Kerberos database; it should be created using
-<a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>, and a keytab file needs to be generated to make
-the key for that service principal available for sclient.</p>
-</li>
-<li><p class="first">sclient returns the error:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">sendauth</span> <span class="n">rejected</span><span class="p">,</span> <span class="n">error</span> <span class="n">reply</span> <span class="ow">is</span><span class="p">:</span>
- <span class="s2">"No such file or directory"</span>
-</pre></div>
-</div>
-<p>This probably means sserver couldn’t find the keytab file. It was
-probably not installed in the proper directory.</p>
-</li>
-</ol>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="../../user/user_commands/sclient.html#sclient-1"><span class="std std-ref">sclient</span></a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a>, services(5), inetd(8)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">sserver</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#common-error-messages">COMMON ERROR MESSAGES</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Administration programs</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kadmin_local.html">kadmin</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadmind.html">kadmind</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_util.html">kdb5_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdb5_ldap_util.html">kdb5_ldap_util</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5kdc.html">krb5kdc</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ktutil.html">ktutil</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">sserver</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="k5srvutil.html" title="k5srvutil"
- >previous</a> |
- <a href="../../mitK5defaults.html" title="MIT Kerberos defaults"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__sserver">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Advanced topics — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="Retiring DES" href="retiring-des.html" />
- <link rel="prev" title="Troubleshooting" href="../troubleshoot.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../troubleshoot.html" title="Troubleshooting"
- accesskey="P">previous</a> |
- <a href="retiring-des.html" title="Retiring DES"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Advanced topics">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="advanced-topics">
-<h1>Advanced topics<a class="headerlink" href="#advanced-topics" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="retiring-des.html">Retiring DES</a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Advanced topics</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Advanced topics</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="retiring-des.html">Retiring DES</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../troubleshoot.html" title="Troubleshooting"
- >previous</a> |
- <a href="retiring-des.html" title="Retiring DES"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Advanced topics">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Retiring DES — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="Various links" href="../various_envs.html" />
- <link rel="prev" title="Advanced topics" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="Advanced topics"
- accesskey="P">previous</a> |
- <a href="../various_envs.html" title="Various links"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Retiring DES">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="retiring-des">
-<span id="id1"></span><h1>Retiring DES<a class="headerlink" href="#retiring-des" title="Permalink to this headline">¶</a></h1>
-<p>Version 5 of the Kerberos protocol was originally implemented using
-the Data Encryption Standard (DES) as a block cipher for encryption.
-While it was considered secure at the time, advancements in computational
-ability have rendered DES vulnerable to brute force attacks on its 56-bit
-keyspace. As such, it is now considered insecure and should not be
-used (<span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6649.html"><strong>RFC 6649</strong></a>).</p>
-<div class="section" id="history">
-<h2>History<a class="headerlink" href="#history" title="Permalink to this headline">¶</a></h2>
-<p>DES was used in the original Kerberos implementation, and was the
-only cryptosystem in krb5 1.0. Partial support for triple-DES (3DES) was
-added in version 1.1, with full support following in version 1.2.
-The Advanced Encryption Standard (AES), which supersedes DES, gained
-partial support in version 1.3.0 of krb5 and full support in version 1.3.2.
-However, deployments of krb5 using Kerberos databases created with older
-versions of krb5 will not necessarily start using strong crypto for
-ordinary operation without administrator intervention.</p>
-<p>MIT krb5 began flagging deprecated encryption types with release 1.17,
-and removed DES (single-DES) support in release 1.18. As a
-consequence, a release prior to 1.18 is required to perform these
-migrations.</p>
-</div>
-<div class="section" id="types-of-keys">
-<h2>Types of keys<a class="headerlink" href="#types-of-keys" title="Permalink to this headline">¶</a></h2>
-<ul class="simple">
-<li>The database master key: This key is not exposed to user requests,
-but is used to encrypt other key material stored in the kerberos
-database. The database master key is currently stored as <code class="docutils literal"><span class="pre">K/M</span></code>
-by default.</li>
-<li>Password-derived keys: User principals frequently have keys
-derived from a password. When a new password is set, the KDC
-uses various string2key functions to generate keys in the database
-for that principal.</li>
-<li>Keytab keys: Application server principals generally use random
-keys which are not derived from a password. When the database
-entry is created, the KDC generates random keys of various enctypes
-to enter in the database, which are conveyed to the application server
-and stored in a keytab.</li>
-<li>Session keys: These are short-term keys generated by the KDC while
-processing client requests, with an enctype selected by the KDC.</li>
-</ul>
-<p>For details on the various enctypes and how enctypes are selected by the KDC
-for session keys and client/server long-term keys, see <a class="reference internal" href="../enctypes.html#enctypes"><span class="std std-ref">Encryption types</span></a>.
-When using the <a class="reference internal" href="../admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> interface to generate new long-term keys,
-the <strong>-e</strong> argument can be used to force a particular set of enctypes,
-overriding the KDC default values.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">When the KDC is selecting a session key, it has no knowledge about the
-kerberos installation on the server which will receive the service ticket,
-only what keys are in the database for the service principal.
-In order to allow uninterrupted operation to
-clients while migrating away from DES, care must be taken to ensure that
-kerberos installations on application server machines are configured to
-support newer encryption types before keys of those new encryption types
-are created in the Kerberos database for those server principals.</p>
-</div>
-</div>
-<div class="section" id="upgrade-procedure">
-<h2>Upgrade procedure<a class="headerlink" href="#upgrade-procedure" title="Permalink to this headline">¶</a></h2>
-<p>This procedure assumes that the KDC software has already been upgraded
-to a modern version of krb5 that supports non-DES keys, so that the
-only remaining task is to update the actual keys used to service requests.
-The realm used for demonstrating this procedure, ZONE.MIT.EDU,
-is an example of the worst-case scenario, where all keys in the realm
-are DES. The realm was initially created with a very old version of krb5,
-and <strong>supported_enctypes</strong> in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> was set to a value
-appropriate when the KDC was installed, but was not updated as the KDC
-was upgraded:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="p">[</span><span class="o">...</span><span class="p">]</span>
- <span class="n">master_key_type</span> <span class="o">=</span> <span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span>
- <span class="n">supported_enctypes</span> <span class="o">=</span> <span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span><span class="p">:</span><span class="n">normal</span> <span class="n">des</span><span class="p">:</span><span class="n">normal</span> <span class="n">des</span><span class="p">:</span><span class="n">v4</span> <span class="n">des</span><span class="p">:</span><span class="n">norealm</span> <span class="n">des</span><span class="p">:</span><span class="n">onlyrealm</span> <span class="n">des</span><span class="p">:</span><span class="n">afs3</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>This resulted in the keys for all principals in the realm being forced
-to DES-only, unless specifically requested using <a class="reference internal" href="../admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>.</p>
-<p>Before starting the upgrade, all KDCs were running krb5 1.11,
-and the database entries for some “high-value” principals were:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># kadmin.local -r ZONE.MIT.EDU -q 'getprinc krbtgt/ZONE.MIT.EDU'</span>
-<span class="p">[</span><span class="o">...</span><span class="p">]</span>
-<span class="n">Number</span> <span class="n">of</span> <span class="n">keys</span><span class="p">:</span> <span class="mi">1</span>
-<span class="n">Key</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">1</span><span class="p">,</span> <span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span><span class="p">:</span><span class="n">v4</span>
-<span class="p">[</span><span class="o">...</span><span class="p">]</span>
-<span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># kadmin.local -r ZONE.MIT.EDU -q 'getprinc kadmin/admin'</span>
-<span class="p">[</span><span class="o">...</span><span class="p">]</span>
-<span class="n">Number</span> <span class="n">of</span> <span class="n">keys</span><span class="p">:</span> <span class="mi">1</span>
-<span class="n">Key</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">15</span><span class="p">,</span> <span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span>
-<span class="p">[</span><span class="o">...</span><span class="p">]</span>
-<span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># kadmin.local -r ZONE.MIT.EDU -q 'getprinc kadmin/changepw'</span>
-<span class="p">[</span><span class="o">...</span><span class="p">]</span>
-<span class="n">Number</span> <span class="n">of</span> <span class="n">keys</span><span class="p">:</span> <span class="mi">1</span>
-<span class="n">Key</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">14</span><span class="p">,</span> <span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span>
-<span class="p">[</span><span class="o">...</span><span class="p">]</span>
-</pre></div>
-</div>
-<p>The <code class="docutils literal"><span class="pre">krbtgt/REALM</span></code> key appears to have never been changed since creation
-(its kvno is 1), and all three database entries have only a des-cbc-crc key.</p>
-<div class="section" id="the-krbtgt-key-and-kdc-keys">
-<h3>The krbtgt key and KDC keys<a class="headerlink" href="#the-krbtgt-key-and-kdc-keys" title="Permalink to this headline">¶</a></h3>
-<p>Perhaps the biggest single-step improvement in the security of the cell
-is gained by strengthening the key of the ticket-granting service principal,
-<code class="docutils literal"><span class="pre">krbtgt/REALM</span></code>—if this principal’s key is compromised, so is the
-entire realm. Since the server that will handle service tickets
-for this principal is the KDC itself, it is easy to guarantee that it
-will be configured to support any encryption types which might be
-selected. However, the default KDC behavior when creating new keys is to
-remove the old keys, which would invalidate all existing tickets issued
-against that principal, rendering the TGTs cached by clients useless.
-Instead, a new key can be created with the old key retained, so that
-existing tickets will still function until their scheduled expiry
-(see <a class="reference internal" href="../database.html#changing-krbtgt-key"><span class="std std-ref">Changing the krbtgt key</span></a>).</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># enctypes=aes256-cts-hmac-sha1-96:normal,\</span>
-<span class="o">></span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span><span class="p">:</span><span class="n">normal</span><span class="p">,</span><span class="n">des3</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="p">:</span><span class="n">normal</span><span class="p">,</span><span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span><span class="p">:</span><span class="n">normal</span>
-<span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># kadmin.local -r ZONE.MIT.EDU -q "cpw -e ${enctypes} -randkey \</span>
-<span class="o">></span> <span class="o">-</span><span class="n">keepold</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="s2">"</span>
-<span class="n">Authenticating</span> <span class="k">as</span> <span class="n">principal</span> <span class="n">root</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Key</span> <span class="k">for</span> <span class="s2">"krbtgt/ZONE.MIT.EDU@ZONE.MIT.EDU"</span> <span class="n">randomized</span><span class="o">.</span>
-</pre></div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The new <code class="docutils literal"><span class="pre">krbtgt@REALM</span></code> key should be propagated to replica KDCs
-immediately so that TGTs issued by the primary KDC can be used to
-issue service tickets on replica KDCs. Replica KDCs will refuse
-requests using the new TGT kvno until the new krbtgt entry has
-been propagated to them.</p>
-</div>
-<p>It is necessary to explicitly specify the enctypes for the new database
-entry, since <strong>supported_enctypes</strong> has not been changed. Leaving
-<strong>supported_enctypes</strong> unchanged makes a potential rollback operation
-easier, since all new keys of new enctypes are the result of explicit
-administrator action and can be easily enumerated.
-Upgrading the krbtgt key should have minimal user-visible disruption other
-than that described in the note above, since only clients which list the
-new enctypes as supported will use them, per the procedure
-in <a class="reference internal" href="../enctypes.html#session-key-selection"><span class="std std-ref">Session key selection</span></a>.
-Once the krbtgt key is updated, the session and ticket keys for user
-TGTs will be strong keys, but subsequent requests
-for service tickets will still get DES keys until the service principals
-have new keys generated. Application service
-remains uninterrupted due to the key-selection procedure on the KDC.</p>
-<p>After the change, the database entry is now:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># kadmin.local -r ZONE.MIT.EDU -q 'getprinc krbtgt/ZONE.MIT.EDU'</span>
-<span class="p">[</span><span class="o">...</span><span class="p">]</span>
-<span class="n">Number</span> <span class="n">of</span> <span class="n">keys</span><span class="p">:</span> <span class="mi">5</span>
-<span class="n">Key</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span>
-<span class="n">Key</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span>
-<span class="n">Key</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">des3</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">sha1</span>
-<span class="n">Key</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span>
-<span class="n">Key</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">1</span><span class="p">,</span> <span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span><span class="p">:</span><span class="n">v4</span>
-<span class="p">[</span><span class="o">...</span><span class="p">]</span>
-</pre></div>
-</div>
-<p>Since the expected disruptions from rekeying the krbtgt principal are
-minor, after a short testing period, it is
-appropriate to rekey the other high-value principals, <code class="docutils literal"><span class="pre">kadmin/admin@REALM</span></code>
-and <code class="docutils literal"><span class="pre">kadmin/changepw@REALM</span></code>. These are the service principals used for
-changing user passwords and updating application keytabs. The kadmin
-and password-changing services are regular kerberized services, so the
-session-key-selection algorithm described in <a class="reference internal" href="../enctypes.html#session-key-selection"><span class="std std-ref">Session key selection</span></a>
-applies. It is particularly important to have strong session keys for
-these services, since user passwords and new long-term keys are conveyed
-over the encrypted channel.</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># enctypes=aes256-cts-hmac-sha1-96:normal,\</span>
-<span class="o">></span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span><span class="p">:</span><span class="n">normal</span><span class="p">,</span><span class="n">des3</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="p">:</span><span class="n">normal</span>
-<span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># kadmin.local -r ZONE.MIT.EDU -q "cpw -e ${enctypes} -randkey \</span>
-<span class="o">></span> <span class="n">kadmin</span><span class="o">/</span><span class="n">admin</span><span class="s2">"</span>
-<span class="n">Authenticating</span> <span class="k">as</span> <span class="n">principal</span> <span class="n">root</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Key</span> <span class="k">for</span> <span class="s2">"kadmin/admin@ZONE.MIT.EDU"</span> <span class="n">randomized</span><span class="o">.</span>
-<span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># kadmin.local -r ZONE.MIT.EDU -q "cpw -e ${enctypes} -randkey \</span>
-<span class="o">></span> <span class="n">kadmin</span><span class="o">/</span><span class="n">changepw</span><span class="s2">"</span>
-<span class="n">Authenticating</span> <span class="k">as</span> <span class="n">principal</span> <span class="n">root</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Key</span> <span class="k">for</span> <span class="s2">"kadmin/changepw@ZONE.MIT.EDU"</span> <span class="n">randomized</span><span class="o">.</span>
-</pre></div>
-</div>
-<p>It is not necessary to retain a single-DES key for these services, since
-password changes are not part of normal daily workflow, and disruption
-from a client failure is likely to be minimal. Furthermore, if a kerberos
-client experiences failure changing a user password or keytab key,
-this indicates that that client will become inoperative once services
-are rekeyed to non-DES enctypes. Such problems can be detected early
-at this stage, giving more time for corrective action.</p>
-</div>
-<div class="section" id="adding-strong-keys-to-application-servers">
-<h3>Adding strong keys to application servers<a class="headerlink" href="#adding-strong-keys-to-application-servers" title="Permalink to this headline">¶</a></h3>
-<p>Before switching the default enctypes for new keys over to strong enctypes,
-it may be desired to test upgrading a handful of services with the
-new configuration before flipping the switch for the defaults. This
-still requires using the <strong>-e</strong> argument in <a class="reference internal" href="../admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> to get non-default
-enctypes:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># enctypes=aes256-cts-hmac-sha1-96:normal,\</span>
-<span class="o">></span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span><span class="p">:</span><span class="n">normal</span><span class="p">,</span><span class="n">des3</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">sha1</span><span class="p">:</span><span class="n">normal</span><span class="p">,</span><span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span><span class="p">:</span><span class="n">normal</span>
-<span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># kadmin -r ZONE.MIT.EDU -p zephyr/zephyr@ZONE.MIT.EDU -k -t \</span>
-<span class="o">></span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">zephyr</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span> <span class="o">-</span><span class="n">q</span> <span class="s2">"ktadd -e $</span><span class="si">{enctypes}</span><span class="s2"> </span><span class="se">\</span>
-<span class="s2">> -k /etc/zephyr/krb5.keytab zephyr/zephyr@ZONE.MIT.EDU"</span>
-<span class="n">Authenticating</span> <span class="k">as</span> <span class="n">principal</span> <span class="n">zephyr</span><span class="o">/</span><span class="n">zephyr</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">keytab</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">zephyr</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">zephyr</span><span class="o">/</span><span class="n">zephyr</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">4</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">zephyr</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">zephyr</span><span class="o">/</span><span class="n">zephyr</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">4</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">zephyr</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">zephyr</span><span class="o">/</span><span class="n">zephyr</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">4</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">des3</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">sha1</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">zephyr</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">zephyr</span><span class="o">/</span><span class="n">zephyr</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">4</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">zephyr</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-</pre></div>
-</div>
-<p>Be sure to remove the old keys from the application keytab, per best
-practice.</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># k5srvutil -f /etc/zephyr/krb5.keytab delold</span>
-<span class="n">Authenticating</span> <span class="k">as</span> <span class="n">principal</span> <span class="n">zephyr</span><span class="o">/</span><span class="n">zephyr</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">keytab</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">zephyr</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">zephyr</span><span class="o">/</span><span class="n">zephyr</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span> <span class="n">removed</span> <span class="kn">from</span> <span class="nn">keytab</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">zephyr</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="adding-strong-keys-by-default">
-<h3>Adding strong keys by default<a class="headerlink" href="#adding-strong-keys-by-default" title="Permalink to this headline">¶</a></h3>
-<p>Once the high-visibility services have been rekeyed, it is probably
-appropriate to change <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> to generate keys with the new
-encryption types by default. This enables server administrators to generate
-new enctypes with the <strong>change</strong> subcommand of <a class="reference internal" href="../admin_commands/k5srvutil.html#k5srvutil-1"><span class="std std-ref">k5srvutil</span></a>,
-and causes user password
-changes to add new encryption types for their entries. It will probably
-be necessary to implement administrative controls to cause all user
-principal keys to be updated in a reasonable period of time, whether
-by forcing password changes or a password synchronization service that
-has access to the current password and can add the new keys.</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">supported_enctypes</span> <span class="o">=</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span><span class="p">:</span><span class="n">normal</span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span><span class="p">:</span><span class="n">normal</span> <span class="n">des3</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">sha1</span><span class="p">:</span><span class="n">normal</span> <span class="n">des3</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="p">:</span><span class="n">normal</span> <span class="n">des</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">crc</span><span class="p">:</span><span class="n">normal</span>
-</pre></div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The krb5kdc process must be restarted for these changes to take effect.</p>
-</div>
-<p>At this point, all service administrators can update their services and the
-servers behind them to take advantage of strong cryptography.
-If necessary, the server’s krb5 installation should be configured and/or
-upgraded to a version supporting non-DES keys. See <a class="reference internal" href="../enctypes.html#enctypes"><span class="std std-ref">Encryption types</span></a> for
-krb5 version and configuration settings.
-Only when the service is configured to accept non-DES keys should
-the key version number be incremented and new keys generated
-(<code class="docutils literal"><span class="pre">k5srvutil</span> <span class="pre">change</span> <span class="pre">&&</span> <span class="pre">k5srvutil</span> <span class="pre">delold</span></code>).</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">root</span><span class="nd">@dr</span><span class="o">-</span><span class="n">willy</span><span class="p">:</span><span class="o">~</span><span class="c1"># k5srvutil change</span>
-<span class="n">Authenticating</span> <span class="k">as</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">keytab</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">AES</span><span class="o">-</span><span class="mi">256</span> <span class="n">CTS</span> <span class="n">mode</span> <span class="k">with</span> <span class="mi">96</span><span class="o">-</span><span class="n">bit</span> <span class="n">SHA</span><span class="o">-</span><span class="mi">1</span> <span class="n">HMAC</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">AES</span><span class="o">-</span><span class="mi">128</span> <span class="n">CTS</span> <span class="n">mode</span> <span class="k">with</span> <span class="mi">96</span><span class="o">-</span><span class="n">bit</span> <span class="n">SHA</span><span class="o">-</span><span class="mi">1</span> <span class="n">HMAC</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">Triple</span> <span class="n">DES</span> <span class="n">cbc</span> <span class="n">mode</span> <span class="k">with</span> <span class="n">HMAC</span><span class="o">/</span><span class="n">sha1</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">DES</span> <span class="n">cbc</span> <span class="n">mode</span> <span class="k">with</span> <span class="n">CRC</span><span class="o">-</span><span class="mi">32</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">root</span><span class="nd">@dr</span><span class="o">-</span><span class="n">willy</span><span class="p">:</span><span class="o">~</span><span class="c1"># klist -e -k -t /etc/krb5.keytab</span>
-<span class="n">Keytab</span> <span class="n">name</span><span class="p">:</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span>
-<span class="n">KVNO</span> <span class="n">Timestamp</span> <span class="n">Principal</span>
-<span class="o">----</span> <span class="o">-----------------</span> <span class="o">--------------------------------------------------------</span>
- <span class="mi">2</span> <span class="mi">10</span><span class="o">/</span><span class="mi">10</span><span class="o">/</span><span class="mi">12</span> <span class="mi">17</span><span class="p">:</span><span class="mi">03</span><span class="p">:</span><span class="mi">59</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="p">(</span><span class="n">DES</span> <span class="n">cbc</span> <span class="n">mode</span> <span class="k">with</span> <span class="n">CRC</span><span class="o">-</span><span class="mi">32</span><span class="p">)</span>
- <span class="mi">3</span> <span class="mi">12</span><span class="o">/</span><span class="mi">12</span><span class="o">/</span><span class="mi">12</span> <span class="mi">15</span><span class="p">:</span><span class="mi">31</span><span class="p">:</span><span class="mi">19</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="p">(</span><span class="n">AES</span><span class="o">-</span><span class="mi">256</span> <span class="n">CTS</span> <span class="n">mode</span> <span class="k">with</span> <span class="mi">96</span><span class="o">-</span><span class="n">bit</span> <span class="n">SHA</span><span class="o">-</span><span class="mi">1</span> <span class="n">HMAC</span><span class="p">)</span>
- <span class="mi">3</span> <span class="mi">12</span><span class="o">/</span><span class="mi">12</span><span class="o">/</span><span class="mi">12</span> <span class="mi">15</span><span class="p">:</span><span class="mi">31</span><span class="p">:</span><span class="mi">19</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="p">(</span><span class="n">AES</span><span class="o">-</span><span class="mi">128</span> <span class="n">CTS</span> <span class="n">mode</span> <span class="k">with</span> <span class="mi">96</span><span class="o">-</span><span class="n">bit</span> <span class="n">SHA</span><span class="o">-</span><span class="mi">1</span> <span class="n">HMAC</span><span class="p">)</span>
- <span class="mi">3</span> <span class="mi">12</span><span class="o">/</span><span class="mi">12</span><span class="o">/</span><span class="mi">12</span> <span class="mi">15</span><span class="p">:</span><span class="mi">31</span><span class="p">:</span><span class="mi">19</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="p">(</span><span class="n">Triple</span> <span class="n">DES</span> <span class="n">cbc</span> <span class="n">mode</span> <span class="k">with</span> <span class="n">HMAC</span><span class="o">/</span><span class="n">sha1</span><span class="p">)</span>
- <span class="mi">3</span> <span class="mi">12</span><span class="o">/</span><span class="mi">12</span><span class="o">/</span><span class="mi">12</span> <span class="mi">15</span><span class="p">:</span><span class="mi">31</span><span class="p">:</span><span class="mi">19</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="p">(</span><span class="n">DES</span> <span class="n">cbc</span> <span class="n">mode</span> <span class="k">with</span> <span class="n">CRC</span><span class="o">-</span><span class="mi">32</span><span class="p">)</span>
-<span class="n">root</span><span class="nd">@dr</span><span class="o">-</span><span class="n">willy</span><span class="p">:</span><span class="o">~</span><span class="c1"># k5srvutil delold</span>
-<span class="n">Authenticating</span> <span class="k">as</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">keytab</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">dr</span><span class="o">-</span><span class="n">willy</span><span class="o">.</span><span class="n">xvm</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">2</span> <span class="n">removed</span> <span class="kn">from</span> <span class="nn">keytab</span> <span class="n">WRFILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-</pre></div>
-</div>
-<p>When a single service principal is shared by multiple backend servers in
-a load-balanced environment, it may be necessary to schedule downtime
-or adjust the population in the load-balanced pool in order to propagate
-the updated keytab to all hosts in the pool with minimal service interruption.</p>
-</div>
-<div class="section" id="removing-des-keys-from-usage">
-<h3>Removing DES keys from usage<a class="headerlink" href="#removing-des-keys-from-usage" title="Permalink to this headline">¶</a></h3>
-<p>This situation remains something of a testing or transitory state,
-as new DES keys are still being generated, and will be used if requested
-by a client. To make more progress removing DES from the realm, the KDC
-should be configured to not generate such keys by default.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">An attacker posing as a client can implement a brute force attack against
-a DES key for any principal, if that key is in the current (highest-kvno)
-key list. This attack is only possible if <strong>allow_weak_crypto = true</strong>
-is enabled on the KDC. Setting the <strong>+requires_preauth</strong> flag on a
-principal forces this attack to be an online attack, much slower than
-the offline attack otherwise available to the attacker. However, setting
-this flag on a service principal is not always advisable; see the entry in
-<a class="reference internal" href="../admin_commands/kadmin_local.html#add-principal"><span class="std std-ref">add_principal</span></a> for details.</p>
-</div>
-<p>The following KDC configuration will not generate DES keys by default:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">supported_enctypes</span> <span class="o">=</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span><span class="p">:</span><span class="n">normal</span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span><span class="p">:</span><span class="n">normal</span> <span class="n">des3</span><span class="o">-</span><span class="n">cbc</span><span class="o">-</span><span class="n">sha1</span><span class="p">:</span><span class="n">normal</span> <span class="n">des3</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="p">:</span><span class="n">normal</span>
-</pre></div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">As before, the KDC process must be restarted for this change to take
-effect. It is best practice to update kdc.conf on all KDCs, not just the
-primary, to avoid unpleasant surprises should the primary fail and a
-replica need to be promoted.</p>
-</div>
-<p>It is now appropriate to remove the legacy single-DES key from the
-<code class="docutils literal"><span class="pre">krbtgt/REALM</span></code> entry:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># kadmin.local -r ZONE.MIT.EDU -q "cpw -randkey -keepold \</span>
-<span class="o">></span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="s2">"</span>
-<span class="n">Authenticating</span> <span class="k">as</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Key</span> <span class="k">for</span> <span class="s2">"krbtgt/ZONE.MIT.EDU@ZONE.MIT.EDU"</span> <span class="n">randomized</span><span class="o">.</span>
-</pre></div>
-</div>
-<p>After the maximum ticket lifetime has passed, the old database entry
-should be removed.</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">root</span><span class="nd">@casio</span> <span class="n">krb5kdc</span><span class="p">]</span><span class="c1"># kadmin.local -r ZONE.MIT.EDU -q 'purgekeys krbtgt/ZONE.MIT.EDU'</span>
-<span class="n">Authenticating</span> <span class="k">as</span> <span class="n">principal</span> <span class="n">root</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ZONE</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Old</span> <span class="n">keys</span> <span class="k">for</span> <span class="n">principal</span> <span class="s2">"krbtgt/ZONE.MIT.EDU@ZONE.MIT.EDU"</span> <span class="n">purged</span><span class="o">.</span>
-</pre></div>
-</div>
-<p>After the KDC is restarted with the new <strong>supported_enctypes</strong>,
-all user password changes and application keytab updates will not
-generate DES keys by default.</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>contents-vnder-pressvre:~> kpasswd zonetest@ZONE.MIT.EDU
-Password for zonetest@ZONE.MIT.EDU: [enter old password]
-Enter new password: [enter new password]
-Enter it again: [enter new password]
-Password changed.
-contents-vnder-pressvre:~> kadmin -r ZONE.MIT.EDU -q 'getprinc zonetest'
-[...]
-Number of keys: 3
-Key: vno 9, aes256-cts-hmac-sha1-96
-Key: vno 9, aes128-cts-hmac-sha1-96
-Key: vno 9, des3-cbc-sha1
-[...]
-
-[kaduk@glossolalia ~]$ kadmin -p kaduk@ZONE.MIT.EDU -r ZONE.MIT.EDU -k \
-> -t kaduk-zone.keytab -q 'ktadd -k kaduk-zone.keytab kaduk@ZONE.MIT.EDU'
-Authenticating as principal kaduk@ZONE.MIT.EDU with keytab kaduk-zone.keytab.
-Entry for principal kaduk@ZONE.MIT.EDU with kvno 3, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:kaduk-zone.keytab.
-Entry for principal kaduk@ZONE.MIT.EDU with kvno 3, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:kaduk-zone.keytab.
-Entry for principal kaduk@ZONE.MIT.EDU with kvno 3, encryption type des3-cbc-sha1 added to keytab WRFILE:kaduk-zone.keytab.
-</pre></div>
-</div>
-<p>Once all principals have been re-keyed, DES support can be disabled on the
-KDC (<strong>allow_weak_crypto = false</strong>), and client machines can remove
-<strong>allow_weak_crypto = true</strong> from their <a class="reference internal" href="../conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> configuration
-files, completing the migration. <strong>allow_weak_crypto</strong> takes precedence over
-all places where DES enctypes could be explicitly configured. DES keys will
-not be used, even if they are present, when <strong>allow_weak_crypto = false</strong>.</p>
-</div>
-<div class="section" id="support-for-legacy-services">
-<h3>Support for legacy services<a class="headerlink" href="#support-for-legacy-services" title="Permalink to this headline">¶</a></h3>
-<p>If there remain legacy services which do not support non-DES enctypes
-(such as older versions of AFS), <strong>allow_weak_crypto</strong> must remain
-enabled on the KDC. Client machines need not have this setting,
-though—applications which require DES can use API calls to allow
-weak crypto on a per-request basis, overriding the system krb5.conf.
-However, having <strong>allow_weak_crypto</strong> set on the KDC means that any
-principals which have a DES key in the database could still use those
-keys. To minimize the use of DES in the realm and restrict it to just
-legacy services which require DES, it is necessary to remove all other
-DES keys. The realm has been configured such that at password and
-keytab change, no DES keys will be generated by default. The task
-then reduces to requiring user password changes and having server
-administrators update their service keytabs. Administrative outreach
-will be necessary, and if the desire to eliminate DES is sufficiently
-strong, the KDC administrators may choose to randkey any principals
-which have not been rekeyed after some timeout period, forcing the
-user to contact the helpdesk for access.</p>
-</div>
-</div>
-<div class="section" id="the-database-master-key">
-<h2>The Database Master Key<a class="headerlink" href="#the-database-master-key" title="Permalink to this headline">¶</a></h2>
-<p>This procedure does not alter <code class="docutils literal"><span class="pre">K/M@REALM</span></code>, the key used to encrypt key
-material in the Kerberos database. (This is the key stored in the stash file
-on the KDC if stash files are used.) However, the security risk of
-a single-DES key for <code class="docutils literal"><span class="pre">K/M</span></code> is minimal, given that access to material
-encrypted in <code class="docutils literal"><span class="pre">K/M</span></code> (the Kerberos database) is generally tightly controlled.
-If an attacker can gain access to the encrypted database, they likely
-have access to the stash file as well, rendering the weak cryptography
-broken by non-cryptographic means. As such, upgrading <code class="docutils literal"><span class="pre">K/M</span></code> to a stronger
-encryption type is unlikely to be a high-priority task.</p>
-<p>Is is possible to upgrade the master key used for the database, if
-desired. Using <a class="reference internal" href="../admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>’s <strong>add_mkey</strong>, <strong>use_mkey</strong>, and
-<strong>update_princ_encryption</strong> commands, a new master key can be added
-and activated for use on new key material, and the existing entries
-converted to the new master key.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Retiring DES</a><ul>
-<li><a class="reference internal" href="#history">History</a></li>
-<li><a class="reference internal" href="#types-of-keys">Types of keys</a></li>
-<li><a class="reference internal" href="#upgrade-procedure">Upgrade procedure</a><ul>
-<li><a class="reference internal" href="#the-krbtgt-key-and-kdc-keys">The krbtgt key and KDC keys</a></li>
-<li><a class="reference internal" href="#adding-strong-keys-to-application-servers">Adding strong keys to application servers</a></li>
-<li><a class="reference internal" href="#adding-strong-keys-by-default">Adding strong keys by default</a></li>
-<li><a class="reference internal" href="#removing-des-keys-from-usage">Removing DES keys from usage</a></li>
-<li><a class="reference internal" href="#support-for-legacy-services">Support for legacy services</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#the-database-master-key">The Database Master Key</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Advanced topics</a><ul class="current">
-<li class="toctree-l3 current"><a class="current reference internal" href="#">Retiring DES</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="Advanced topics"
- >previous</a> |
- <a href="../various_envs.html" title="Various links"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Retiring DES">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Application servers — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Host configuration" href="host_config.html" />
- <link rel="prev" title="Configuring Kerberos with OpenLDAP back-end" href="conf_ldap.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="conf_ldap.html" title="Configuring Kerberos with OpenLDAP back-end"
- accesskey="P">previous</a> |
- <a href="host_config.html" title="Host configuration"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Application servers">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="application-servers">
-<h1>Application servers<a class="headerlink" href="#application-servers" title="Permalink to this headline">¶</a></h1>
-<p>If you need to install the Kerberos V5 programs on an application
-server, please refer to the Kerberos V5 Installation Guide. Once you
-have installed the software, you need to add that host to the Kerberos
-database (see <a class="reference internal" href="database.html#add-mod-del-princs"><span class="std std-ref">Adding, modifying and deleting principals</span></a>), and generate a keytab for
-that host, that contains the host’s key. You also need to make sure
-the host’s clock is within your maximum clock skew of the KDCs.</p>
-<div class="section" id="keytabs">
-<h2>Keytabs<a class="headerlink" href="#keytabs" title="Permalink to this headline">¶</a></h2>
-<p>A keytab is a host’s copy of its own keylist, which is analogous to a
-user’s password. An application server that needs to authenticate
-itself to the KDC has to have a keytab that contains its own principal
-and key. Just as it is important for users to protect their
-passwords, it is equally important for hosts to protect their keytabs.
-You should always store keytab files on local disk, and make them
-readable only by root, and you should never send a keytab file over a
-network in the clear. Ideally, you should run the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>
-command to extract a keytab on the host on which the keytab is to
-reside.</p>
-<div class="section" id="adding-principals-to-keytabs">
-<span id="add-princ-kt"></span><h3>Adding principals to keytabs<a class="headerlink" href="#adding-principals-to-keytabs" title="Permalink to this headline">¶</a></h3>
-<p>To generate a keytab, or to add a principal to an existing keytab, use
-the <strong>ktadd</strong> command from kadmin.</p>
-</div>
-<div class="section" id="ktadd">
-<h3>ktadd<a class="headerlink" href="#ktadd" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><div class="line-block">
-<div class="line"><strong>ktadd</strong> [options] <em>principal</em></div>
-<div class="line"><strong>ktadd</strong> [options] <strong>-glob</strong> <em>princ-exp</em></div>
-</div>
-</div></blockquote>
-<p>Adds a <em>principal</em>, or all principals matching <em>princ-exp</em>, to a
-keytab file. Each principal’s keys are randomized in the process.
-The rules for <em>princ-exp</em> are described in the <strong>list_principals</strong>
-command.</p>
-<p>This command requires the <strong>inquire</strong> and <strong>changepw</strong> privileges.
-With the <strong>-glob</strong> form, it also requires the <strong>list</strong> privilege.</p>
-<p>The options are:</p>
-<dl class="docutils">
-<dt><strong>-k[eytab]</strong> <em>keytab</em></dt>
-<dd>Use <em>keytab</em> as the keytab file. Otherwise, the default keytab is
-used.</dd>
-<dt><strong>-e</strong> <em>enc</em>:<em>salt</em>,…</dt>
-<dd>Uses the specified keysalt list for setting the new keys of the
-principal. See <a class="reference internal" href="conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a
-list of possible values.</dd>
-<dt><strong>-q</strong></dt>
-<dd>Display less verbose information.</dd>
-<dt><strong>-norandkey</strong></dt>
-<dd>Do not randomize the keys. The keys and their version numbers stay
-unchanged. This option cannot be specified in combination with the
-<strong>-e</strong> option.</dd>
-</dl>
-<p>An entry for each of the principal’s unique encryption types is added,
-ignoring multiple keys with the same encryption type but different
-salt types.</p>
-<p>Alias: <strong>xst</strong></p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">ktadd</span> <span class="o">-</span><span class="n">k</span> <span class="o">/</span><span class="n">tmp</span><span class="o">/</span><span class="n">foo</span><span class="o">-</span><span class="n">new</span><span class="o">-</span><span class="n">keytab</span> <span class="n">host</span><span class="o">/</span><span class="n">foo</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">foo</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span><span class="p">,</span>
- <span class="n">encryption</span> <span class="nb">type</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span>
- <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">tmp</span><span class="o">/</span><span class="n">foo</span><span class="o">-</span><span class="n">new</span><span class="o">-</span><span class="n">keytab</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-<div class="section" id="examples">
-<h4>Examples<a class="headerlink" href="#examples" title="Permalink to this headline">¶</a></h4>
-<p>Here is a sample session, using configuration files that enable only
-AES encryption:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">ktadd</span> <span class="n">host</span><span class="o">/</span><span class="n">daffodil</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">daffodil</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">daffodil</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-</div>
-<div class="section" id="removing-principals-from-keytabs">
-<h3>Removing principals from keytabs<a class="headerlink" href="#removing-principals-from-keytabs" title="Permalink to this headline">¶</a></h3>
-<p>To remove a principal from an existing keytab, use the kadmin
-<strong>ktremove</strong> command.</p>
-</div>
-<div class="section" id="ktremove">
-<h3>ktremove<a class="headerlink" href="#ktremove" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>ktremove</strong> [options] <em>principal</em> [<em>kvno</em> | <em>all</em> | <em>old</em>]</div></blockquote>
-<p>Removes entries for the specified <em>principal</em> from a keytab. Requires
-no permissions, since this does not require database access.</p>
-<p>If the string “all” is specified, all entries for that principal are
-removed; if the string “old” is specified, all entries for that
-principal except those with the highest kvno are removed. Otherwise,
-the value specified is parsed as an integer, and all entries whose
-kvno match that integer are removed.</p>
-<p>The options are:</p>
-<dl class="docutils">
-<dt><strong>-k[eytab]</strong> <em>keytab</em></dt>
-<dd>Use <em>keytab</em> as the keytab file. Otherwise, the default keytab is
-used.</dd>
-<dt><strong>-q</strong></dt>
-<dd>Display less verbose information.</dd>
-</dl>
-<p>Alias: <strong>ktrem</strong></p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">ktremove</span> <span class="n">kadmin</span><span class="o">/</span><span class="n">admin</span> <span class="nb">all</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">kadmin</span><span class="o">/</span><span class="n">admin</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span> <span class="n">removed</span> <span class="kn">from</span> <span class="nn">keytab</span>
- <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="using-a-keytab-to-acquire-client-credentials">
-<h3>Using a keytab to acquire client credentials<a class="headerlink" href="#using-a-keytab-to-acquire-client-credentials" title="Permalink to this headline">¶</a></h3>
-<p>While keytabs are ordinarily used to accept credentials from clients,
-they can also be used to acquire initial credentials, allowing one
-service to authenticate to another.</p>
-<p>To manually obtain credentials using a keytab, use the <a class="reference internal" href="../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>
-<strong>-k</strong> option, together with the <strong>-t</strong> option if the keytab is not in
-the default location.</p>
-<p>Beginning with release 1.11, GSSAPI applications can be configured to
-automatically obtain initial credentials from a keytab as needed. The
-recommended configuration is as follows:</p>
-<ol class="arabic simple">
-<li>Create a keytab containing a single entry for the desired client
-identity.</li>
-<li>Place the keytab in a location readable by the service, and set the
-<strong>KRB5_CLIENT_KTNAME</strong> environment variable to its filename.
-Alternatively, use the <strong>default_client_keytab_name</strong> profile
-variable in <a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>, or use the default location of
-<a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">DEFCKTNAME</span></a>.</li>
-<li>Set <strong>KRB5CCNAME</strong> to a filename writable by the service, which
-will not be used for any other purpose. Do not manually obtain
-credentials at this location. (Another credential cache type
-besides <strong>FILE</strong> can be used if desired, as long the cache will not
-conflict with another use. A <strong>MEMORY</strong> cache can be used if the
-service runs as a long-lived process. See <a class="reference internal" href="../basic/ccache_def.html#ccache-definition"><span class="std std-ref">Credential cache</span></a>
-for details.)</li>
-<li>Start the service. When it authenticates using GSSAPI, it will
-automatically obtain credentials from the client keytab into the
-specified credential cache, and refresh them before they expire.</li>
-</ol>
-</div>
-</div>
-<div class="section" id="clock-skew">
-<h2>Clock Skew<a class="headerlink" href="#clock-skew" title="Permalink to this headline">¶</a></h2>
-<p>A Kerberos application server host must keep its clock synchronized or
-it will reject authentication requests from clients. Modern operating
-systems typically provide a facility to maintain the correct time;
-make sure it is enabled. This is especially important on virtual
-machines, where clocks tend to drift more rapidly than normal machine
-clocks.</p>
-<p>The default allowable clock skew is controlled by the <strong>clockskew</strong>
-variable in <a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>.</p>
-</div>
-<div class="section" id="getting-dns-information-correct">
-<h2>Getting DNS information correct<a class="headerlink" href="#getting-dns-information-correct" title="Permalink to this headline">¶</a></h2>
-<p>Several aspects of Kerberos rely on name service. When a hostname is
-used to name a service, clients may canonicalize the hostname using
-forward and possibly reverse name resolution. The result of this
-canonicalization must match the principal entry in the host’s keytab,
-or authentication will fail. To work with all client canonicalization
-configurations, each host’s canonical name must be the fully-qualified
-host name (including the domain), and each host’s IP address must
-reverse-resolve to the canonical name.</p>
-<p>Configuration of hostnames varies by operating system. On the
-application server itself, canonicalization will typically use the
-<code class="docutils literal"><span class="pre">/etc/hosts</span></code> file rather than the DNS. Ensure that the line for the
-server’s hostname is in the following form:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">IP</span> <span class="n">address</span> <span class="n">fully</span><span class="o">-</span><span class="n">qualified</span> <span class="n">hostname</span> <span class="n">aliases</span>
-</pre></div>
-</div>
-<p>Here is a sample <code class="docutils literal"><span class="pre">/etc/hosts</span></code> file:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="c1"># this is a comment</span>
-<span class="mf">127.0</span><span class="o">.</span><span class="mf">0.1</span> <span class="n">localhost</span> <span class="n">localhost</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
-<span class="mf">10.0</span><span class="o">.</span><span class="mf">0.6</span> <span class="n">daffodil</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="n">daffodil</span> <span class="n">trillium</span> <span class="n">wake</span><span class="o">-</span><span class="n">robin</span>
-</pre></div>
-</div>
-<p>The output of <code class="docutils literal"><span class="pre">klist</span> <span class="pre">-k</span></code> for this example host should look like:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">viola</span><span class="c1"># klist -k</span>
-<span class="n">Keytab</span> <span class="n">name</span><span class="p">:</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span>
-<span class="n">KVNO</span> <span class="n">Principal</span>
-<span class="o">----</span> <span class="o">------------------------------------------------------------</span>
- <span class="mi">2</span> <span class="n">host</span><span class="o">/</span><span class="n">daffodil</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-</pre></div>
-</div>
-<p>If you were to ssh to this host with a fresh credentials cache (ticket
-file), and then <a class="reference internal" href="../user/user_commands/klist.html#klist-1"><span class="std std-ref">klist</span></a>, the output should list a service
-principal of <code class="docutils literal"><span class="pre">host/daffodil.mit.edu@ATHENA.MIT.EDU</span></code>.</p>
-</div>
-<div class="section" id="configuring-your-firewall-to-work-with-kerberos-v5">
-<span id="conf-firewall"></span><h2>Configuring your firewall to work with Kerberos V5<a class="headerlink" href="#configuring-your-firewall-to-work-with-kerberos-v5" title="Permalink to this headline">¶</a></h2>
-<p>If you need off-site users to be able to get Kerberos tickets in your
-realm, they must be able to get to your KDC. This requires either
-that you have a replica KDC outside your firewall, or that you
-configure your firewall to allow UDP requests into at least one of
-your KDCs, on whichever port the KDC is running. (The default is port
-88; other ports may be specified in the KDC’s <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>
-file.) Similarly, if you need off-site users to be able to change
-their passwords in your realm, they must be able to get to your
-Kerberos admin server on the kpasswd port (which defaults to 464). If
-you need off-site users to be able to administer your Kerberos realm,
-they must be able to get to your Kerberos admin server on the
-administrative port (which defaults to 749).</p>
-<p>If your on-site users inside your firewall will need to get to KDCs in
-other realms, you will also need to configure your firewall to allow
-outgoing TCP and UDP requests to port 88, and to port 464 to allow
-password changes. If your on-site users inside your firewall will
-need to get to Kerberos admin servers in other realms, you will also
-need to allow outgoing TCP and UDP requests to port 749.</p>
-<p>If any of your KDCs are outside your firewall, you will need to allow
-kprop requests to get through to the remote KDC. <a class="reference internal" href="admin_commands/kprop.html#kprop-8"><span class="std std-ref">kprop</span></a> uses
-the <code class="docutils literal"><span class="pre">krb5_prop</span></code> service on port 754 (tcp).</p>
-<p>The book <em>UNIX System Security</em>, by David Curry, is a good starting
-point for learning to configure firewalls.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Application servers</a><ul>
-<li><a class="reference internal" href="#keytabs">Keytabs</a><ul>
-<li><a class="reference internal" href="#adding-principals-to-keytabs">Adding principals to keytabs</a></li>
-<li><a class="reference internal" href="#ktadd">ktadd</a><ul>
-<li><a class="reference internal" href="#examples">Examples</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#removing-principals-from-keytabs">Removing principals from keytabs</a></li>
-<li><a class="reference internal" href="#ktremove">ktremove</a></li>
-<li><a class="reference internal" href="#using-a-keytab-to-acquire-client-credentials">Using a keytab to acquire client credentials</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#clock-skew">Clock Skew</a></li>
-<li><a class="reference internal" href="#getting-dns-information-correct">Getting DNS information correct</a></li>
-<li><a class="reference internal" href="#configuring-your-firewall-to-work-with-kerberos-v5">Configuring your firewall to work with Kerberos V5</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="conf_ldap.html" title="Configuring Kerberos with OpenLDAP back-end"
- >previous</a> |
- <a href="host_config.html" title="Host configuration"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Application servers">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Authentication indicators — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Administration programs" href="admin_commands/index.html" />
- <link rel="prev" title="HTTPS proxy configuration" href="https.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="https.html" title="HTTPS proxy configuration"
- accesskey="P">previous</a> |
- <a href="admin_commands/index.html" title="Administration programs"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Authentication indicators">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="authentication-indicators">
-<span id="auth-indicator"></span><h1>Authentication indicators<a class="headerlink" href="#authentication-indicators" title="Permalink to this headline">¶</a></h1>
-<p>As of release 1.14, the KDC can be configured to annotate tickets if
-the client authenticated using a stronger preauthentication mechanism
-such as <a class="reference internal" href="pkinit.html#pkinit"><span class="std std-ref">PKINIT</span></a> or <a class="reference internal" href="otp.html#otp-preauth"><span class="std std-ref">OTP</span></a>. These
-annotations are called “authentication indicators.” Service
-principals can be configured to require particular authentication
-indicators in order to authenticate to that service. An
-authentication indicator value can be any string chosen by the KDC
-administrator; there are no pre-set values.</p>
-<p>To use authentication indicators with PKINIT or OTP, first configure
-the KDC to include an indicator when that preauthentication mechanism
-is used. For PKINIT, use the <strong>pkinit_indicator</strong> variable in
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>. For OTP, use the <strong>indicator</strong> variable in the
-token type definition, or specify the indicators in the <strong>otp</strong> user
-string as described in <a class="reference internal" href="otp.html#otp-preauth"><span class="std std-ref">OTP Preauthentication</span></a>.</p>
-<p>To require an indicator to be present in order to authenticate to a
-service principal, set the <strong>require_auth</strong> string attribute on the
-principal to the indicator value to be required. If you wish to allow
-one of several indicators to be accepted, you can specify multiple
-indicator values separated by spaces.</p>
-<p>For example, a realm could be configured to set the authentication
-indicator value “strong” when PKINIT is used to authenticate, using a
-setting in the <a class="reference internal" href="conf_files/kdc_conf.html#kdc-realms"><span class="std std-ref">[realms]</span></a> subsection:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">pkinit_indicator</span> <span class="o">=</span> <span class="n">strong</span>
-</pre></div>
-</div>
-<p>A service principal could be configured to require the “strong”
-authentication indicator value:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>$ kadmin setstr host/high.value.server require_auth strong
-Password for user/admin@KRBTEST.COM:
-</pre></div>
-</div>
-<p>A user who authenticates with PKINIT would be able to obtain a ticket
-for the service principal:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>$ kinit -X X509_user_identity=FILE:/my/cert.pem,/my/key.pem user
-$ kvno host/high.value.server
-host/high.value.server@KRBTEST.COM: kvno = 1
-</pre></div>
-</div>
-<p>but a user who authenticates with a password would not:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>$ kinit user
-Password for user@KRBTEST.COM:
-$ kvno host/high.value.server
-kvno: KDC policy rejects request while getting credentials for
- host/high.value.server@KRBTEST.COM
-</pre></div>
-</div>
-<p>GSSAPI server applications can inspect authentication indicators
-through the <a class="reference internal" href="../appdev/gssapi.html#gssapi-authind-attr"><span class="std std-ref">auth-indicators</span></a> name
-attribute.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Authentication indicators</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="https.html" title="HTTPS proxy configuration"
- >previous</a> |
- <a href="admin_commands/index.html" title="Administration programs"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Authentication indicators">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Backups of secure hosts — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="PKINIT configuration" href="pkinit.html" />
- <link rel="prev" title="Host configuration" href="host_config.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="host_config.html" title="Host configuration"
- accesskey="P">previous</a> |
- <a href="pkinit.html" title="PKINIT configuration"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Backups of secure hosts">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="backups-of-secure-hosts">
-<h1>Backups of secure hosts<a class="headerlink" href="#backups-of-secure-hosts" title="Permalink to this headline">¶</a></h1>
-<p>When you back up a secure host, you should exclude the host’s keytab
-file from the backup. If someone obtained a copy of the keytab from a
-backup, that person could make any host masquerade as the host whose
-keytab was compromised. In many configurations, knowledge of the
-host’s keytab also allows root access to the host. This could be
-particularly dangerous if the compromised keytab was from one of your
-KDCs. If the machine has a disk crash and the keytab file is lost, it
-is easy to generate another keytab file. (See <a class="reference internal" href="appl_servers.html#add-princ-kt"><span class="std std-ref">Adding principals to keytabs</span></a>.)
-If you are unable to exclude particular files from backups, you should
-ensure that the backups are kept as secure as the host’s root
-password.</p>
-<div class="section" id="backing-up-the-kerberos-database">
-<h2>Backing up the Kerberos database<a class="headerlink" href="#backing-up-the-kerberos-database" title="Permalink to this headline">¶</a></h2>
-<p>As with any file, it is possible that your Kerberos database could
-become corrupted. If this happens on one of the replica KDCs, you
-might never notice, since the next automatic propagation of the
-database would install a fresh copy. However, if it happens to the
-primary KDC, the corrupted database would be propagated to all of the
-replicas during the next propagation. For this reason, MIT recommends
-that you back up your Kerberos database regularly. Because the primary
-KDC is continuously dumping the database to a file in order to
-propagate it to the replica KDCs, it is a simple matter to have a cron
-job periodically copy the dump file to a secure machine elsewhere on
-your network. (Of course, it is important to make the host where
-these backups are stored as secure as your KDCs, and to encrypt its
-transmission across your network.) Then if your database becomes
-corrupted, you can load the most recent dump onto the primary KDC.
-(See <a class="reference internal" href="database.html#restore-from-dump"><span class="std std-ref">Restoring a Kerberos database from a dump file</span></a>.)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Backups of secure hosts</a><ul>
-<li><a class="reference internal" href="#backing-up-the-kerberos-database">Backing up the Kerberos database</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="host_config.html" title="Host configuration"
- >previous</a> |
- <a href="pkinit.html" title="PKINIT configuration"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Backups of secure hosts">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Configuration Files — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="krb5.conf" href="krb5_conf.html" />
- <link rel="prev" title="UNIX Application Servers" href="../install_appl_srv.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../install_appl_srv.html" title="UNIX Application Servers"
- accesskey="P">previous</a> |
- <a href="krb5_conf.html" title="krb5.conf"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Configuration Files">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="configuration-files">
-<h1>Configuration Files<a class="headerlink" href="#configuration-files" title="Permalink to this headline">¶</a></h1>
-<p>Kerberos uses configuration files to allow administrators to specify
-settings on a per-machine basis. <a class="reference internal" href="krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> applies to all
-applications using the Kerboros library, on clients and servers.
-For KDC-specific applications, additional settings can be specified in
-<a class="reference internal" href="kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>; the two files are merged into a configuration profile
-used by applications accessing the KDC database directly. <a class="reference internal" href="kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a>
-is also only used on the KDC, it controls permissions for modifying the
-KDC database.</p>
-<div class="section" id="contents">
-<h2>Contents<a class="headerlink" href="#contents" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="krb5_conf.html">krb5.conf</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kdc_conf.html">kdc.conf</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kadm5_acl.html">kadm5.acl</a></li>
-</ul>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Configuration Files</a><ul>
-<li><a class="reference internal" href="#contents">Contents</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Configuration Files</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="krb5_conf.html">krb5.conf</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdc_conf.html">kdc.conf</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadm5_acl.html">kadm5.acl</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../install_appl_srv.html" title="UNIX Application Servers"
- >previous</a> |
- <a href="krb5_conf.html" title="krb5.conf"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Configuration Files">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kadm5.acl — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="Realm configuration decisions" href="../realm_config.html" />
- <link rel="prev" title="kdc.conf" href="kdc_conf.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kdc_conf.html" title="kdc.conf"
- accesskey="P">previous</a> |
- <a href="../realm_config.html" title="Realm configuration decisions"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kadm5.acl">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kadm5-acl">
-<span id="kadm5-acl-5"></span><h1>kadm5.acl<a class="headerlink" href="#kadm5-acl" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>The Kerberos <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> daemon uses an Access Control List
-(ACL) file to manage access rights to the Kerberos database.
-For operations that affect principals, the ACL file also controls
-which principals can operate on which other principals.</p>
-<p>The default location of the Kerberos ACL file is
-<a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/kadm5.acl</span></code> unless this is overridden by the <em>acl_file</em>
-variable in <a class="reference internal" href="kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</p>
-</div>
-<div class="section" id="syntax">
-<h2>SYNTAX<a class="headerlink" href="#syntax" title="Permalink to this headline">¶</a></h2>
-<p>Empty lines and lines starting with the sharp sign (<code class="docutils literal"><span class="pre">#</span></code>) are
-ignored. Lines containing ACL entries have the format:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">principal</span> <span class="n">permissions</span> <span class="p">[</span><span class="n">target_principal</span> <span class="p">[</span><span class="n">restrictions</span><span class="p">]</span> <span class="p">]</span>
-</pre></div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Line order in the ACL file is important. The first matching entry
-will control access for an actor principal on a target principal.</p>
-</div>
-<dl class="docutils">
-<dt><em>principal</em></dt>
-<dd><p class="first">(Partially or fully qualified Kerberos principal name.) Specifies
-the principal whose permissions are to be set.</p>
-<p class="last">Each component of the name may be wildcarded using the <code class="docutils literal"><span class="pre">*</span></code>
-character.</p>
-</dd>
-<dt><em>permissions</em></dt>
-<dd><p class="first">Specifies what operations may or may not be performed by a
-<em>principal</em> matching a particular entry. This is a string of one or
-more of the following list of characters or their upper-case
-counterparts. If the character is <em>upper-case</em>, then the operation
-is disallowed. If the character is <em>lower-case</em>, then the operation
-is permitted.</p>
-<table border="1" class="last docutils">
-<colgroup>
-<col width="2%" />
-<col width="98%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td>a</td>
-<td>[Dis]allows the addition of principals or policies</td>
-</tr>
-<tr class="row-even"><td>c</td>
-<td>[Dis]allows the changing of passwords for principals</td>
-</tr>
-<tr class="row-odd"><td>d</td>
-<td>[Dis]allows the deletion of principals or policies</td>
-</tr>
-<tr class="row-even"><td>e</td>
-<td>[Dis]allows the extraction of principal keys</td>
-</tr>
-<tr class="row-odd"><td>i</td>
-<td>[Dis]allows inquiries about principals or policies</td>
-</tr>
-<tr class="row-even"><td>l</td>
-<td>[Dis]allows the listing of all principals or policies</td>
-</tr>
-<tr class="row-odd"><td>m</td>
-<td>[Dis]allows the modification of principals or policies</td>
-</tr>
-<tr class="row-even"><td>p</td>
-<td>[Dis]allows the propagation of the principal database (used in <a class="reference internal" href="../database.html#incr-db-prop"><span class="std std-ref">Incremental database propagation</span></a>)</td>
-</tr>
-<tr class="row-odd"><td>s</td>
-<td>[Dis]allows the explicit setting of the key for a principal</td>
-</tr>
-<tr class="row-even"><td>x</td>
-<td>Short for admcilsp. All privileges (except <code class="docutils literal"><span class="pre">e</span></code>)</td>
-</tr>
-<tr class="row-odd"><td>*</td>
-<td>Same as x.</td>
-</tr>
-</tbody>
-</table>
-</dd>
-</dl>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The <code class="docutils literal"><span class="pre">extract</span></code> privilege is not included in the wildcard
-privilege; it must be explicitly assigned. This privilege
-allows the user to extract keys from the database, and must be
-handled with great care to avoid disclosure of important keys
-like those of the kadmin/* or krbtgt/* principals. The
-<strong>lockdown_keys</strong> principal attribute can be used to prevent
-key extraction from specific principals regardless of the
-granted privilege.</p>
-</div>
-<dl class="docutils">
-<dt><em>target_principal</em></dt>
-<dd><p class="first">(Optional. Partially or fully qualified Kerberos principal name.)
-Specifies the principal on which <em>permissions</em> may be applied.
-Each component of the name may be wildcarded using the <code class="docutils literal"><span class="pre">*</span></code>
-character.</p>
-<p class="last"><em>target_principal</em> can also include back-references to <em>principal</em>,
-in which <code class="docutils literal"><span class="pre">*number</span></code> matches the corresponding wildcard in
-<em>principal</em>.</p>
-</dd>
-<dt><em>restrictions</em></dt>
-<dd><p class="first">(Optional) A string of flags. Allowed restrictions are:</p>
-<blockquote>
-<div><dl class="docutils">
-<dt>{+|-}<em>flagname</em></dt>
-<dd>flag is forced to the indicated value. The permissible flags
-are the same as those for the <strong>default_principal_flags</strong>
-variable in <a class="reference internal" href="kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><em>-clearpolicy</em></dt>
-<dd>policy is forced to be empty.</dd>
-<dt><em>-policy pol</em></dt>
-<dd>policy is forced to be <em>pol</em>.</dd>
-<dt>-{<em>expire, pwexpire, maxlife, maxrenewlife</em>} <em>time</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) associated value will be forced to
-MIN(<em>time</em>, requested value).</dd>
-</dl>
-</div></blockquote>
-<p class="last">The above flags act as restrictions on any add or modify operation
-which is allowed due to that ACL line.</p>
-</dd>
-</dl>
-<div class="admonition warning">
-<p class="first admonition-title">Warning</p>
-<p class="last">If the kadmind ACL file is modified, the kadmind daemon needs to be
-restarted for changes to take effect.</p>
-</div>
-</div>
-<div class="section" id="example">
-<h2>EXAMPLE<a class="headerlink" href="#example" title="Permalink to this headline">¶</a></h2>
-<p>Here is an example of a kadm5.acl file:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="o">*/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">*</span> <span class="c1"># line 1</span>
-<span class="n">joeadmin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">ADMCIL</span> <span class="c1"># line 2</span>
-<span class="n">joeadmin</span><span class="o">/*</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">i</span> <span class="o">*/</span><span class="n">root</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="c1"># line 3</span>
-<span class="o">*/</span><span class="n">root</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">ci</span> <span class="o">*</span><span class="mi">1</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="c1"># line 4</span>
-<span class="o">*/</span><span class="n">root</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">l</span> <span class="o">*</span> <span class="c1"># line 5</span>
-<span class="n">sms</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">x</span> <span class="o">*</span> <span class="o">-</span><span class="n">maxlife</span> <span class="mi">9</span><span class="n">h</span> <span class="o">-</span><span class="n">postdateable</span> <span class="c1"># line 6</span>
-</pre></div>
-</div>
-<p>(line 1) Any principal in the <code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code> realm with an
-<code class="docutils literal"><span class="pre">admin</span></code> instance has all administrative privileges except extracting
-keys.</p>
-<p>(lines 1-3) The user <code class="docutils literal"><span class="pre">joeadmin</span></code> has all permissions except
-extracting keys with his <code class="docutils literal"><span class="pre">admin</span></code> instance,
-<code class="docutils literal"><span class="pre">joeadmin/admin@ATHENA.MIT.EDU</span></code> (matches line 1). He has no
-permissions at all with his null instance, <code class="docutils literal"><span class="pre">joeadmin@ATHENA.MIT.EDU</span></code>
-(matches line 2). His <code class="docutils literal"><span class="pre">root</span></code> and other non-<code class="docutils literal"><span class="pre">admin</span></code>, non-null
-instances (e.g., <code class="docutils literal"><span class="pre">extra</span></code> or <code class="docutils literal"><span class="pre">dbadmin</span></code>) have inquire permissions
-with any principal that has the instance <code class="docutils literal"><span class="pre">root</span></code> (matches line 3).</p>
-<p>(line 4) Any <code class="docutils literal"><span class="pre">root</span></code> principal in <code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code> can inquire
-or change the password of their null instance, but not any other
-null instance. (Here, <code class="docutils literal"><span class="pre">*1</span></code> denotes a back-reference to the
-component matching the first wildcard in the actor principal.)</p>
-<p>(line 5) Any <code class="docutils literal"><span class="pre">root</span></code> principal in <code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code> can generate
-the list of principals in the database, and the list of policies
-in the database. This line is separate from line 4, because list
-permission can only be granted globally, not to specific target
-principals.</p>
-<p>(line 6) Finally, the Service Management System principal
-<code class="docutils literal"><span class="pre">sms@ATHENA.MIT.EDU</span></code> has all permissions except extracting keys, but
-any principal that it creates or modifies will not be able to get
-postdateable tickets or tickets with a life of longer than 9 hours.</p>
-</div>
-<div class="section" id="module-behavior">
-<h2>MODULE BEHAVIOR<a class="headerlink" href="#module-behavior" title="Permalink to this headline">¶</a></h2>
-<p>The ACL file can coexist with other authorization modules in release
-1.16 and later, as configured in the <a class="reference internal" href="krb5_conf.html#kadm5-auth"><span class="std std-ref">kadm5_auth interface</span></a> section of
-<a class="reference internal" href="krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>. The ACL file will positively authorize
-operations according to the rules above, but will never
-authoritatively deny an operation, so other modules can authorize
-operations in addition to those authorized by the ACL file.</p>
-<p>To operate without an ACL file, set the <em>acl_file</em> variable in
-<a class="reference internal" href="kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> to the empty string with <code class="docutils literal"><span class="pre">acl_file</span> <span class="pre">=</span> <span class="pre">""</span></code>.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>, <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kadm5.acl</a><ul>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#syntax">SYNTAX</a></li>
-<li><a class="reference internal" href="#example">EXAMPLE</a></li>
-<li><a class="reference internal" href="#module-behavior">MODULE BEHAVIOR</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Configuration Files</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="krb5_conf.html">krb5.conf</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdc_conf.html">kdc.conf</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kadm5.acl</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kdc_conf.html" title="kdc.conf"
- >previous</a> |
- <a href="../realm_config.html" title="Realm configuration decisions"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kadm5.acl">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kdc.conf — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kadm5.acl" href="kadm5_acl.html" />
- <link rel="prev" title="krb5.conf" href="krb5_conf.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_conf.html" title="krb5.conf"
- accesskey="P">previous</a> |
- <a href="kadm5_acl.html" title="kadm5.acl"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kdc.conf">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-conf">
-<span id="kdc-conf-5"></span><h1>kdc.conf<a class="headerlink" href="#kdc-conf" title="Permalink to this headline">¶</a></h1>
-<p>The kdc.conf file supplements <a class="reference internal" href="krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> for programs which
-are typically only used on a KDC, such as the <a class="reference internal" href="../admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> and
-<a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> daemons and the <a class="reference internal" href="../admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> program.
-Relations documented here may also be specified in krb5.conf; for the
-KDC programs mentioned, krb5.conf and kdc.conf will be merged into a
-single configuration profile.</p>
-<p>Normally, the kdc.conf file is found in the KDC state directory,
-<a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code>. You can override the default location by setting the
-environment variable <strong>KRB5_KDC_PROFILE</strong>.</p>
-<p>Please note that you need to restart the KDC daemon for any configuration
-changes to take effect.</p>
-<div class="section" id="structure">
-<h2>Structure<a class="headerlink" href="#structure" title="Permalink to this headline">¶</a></h2>
-<p>The kdc.conf file is set up in the same format as the
-<a class="reference internal" href="krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> file.</p>
-</div>
-<div class="section" id="sections">
-<h2>Sections<a class="headerlink" href="#sections" title="Permalink to this headline">¶</a></h2>
-<p>The kdc.conf file may contain the following sections:</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="29%" />
-<col width="71%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><a class="reference internal" href="#kdcdefaults"><span class="std std-ref">[kdcdefaults]</span></a></td>
-<td>Default values for KDC behavior</td>
-</tr>
-<tr class="row-even"><td><a class="reference internal" href="#kdc-realms"><span class="std std-ref">[realms]</span></a></td>
-<td>Realm-specific database configuration and settings</td>
-</tr>
-<tr class="row-odd"><td><a class="reference internal" href="#dbdefaults"><span class="std std-ref">[dbdefaults]</span></a></td>
-<td>Default database settings</td>
-</tr>
-<tr class="row-even"><td><a class="reference internal" href="#dbmodules"><span class="std std-ref">[dbmodules]</span></a></td>
-<td>Per-database settings</td>
-</tr>
-<tr class="row-odd"><td><a class="reference internal" href="#logging"><span class="std std-ref">[logging]</span></a></td>
-<td>Controls how Kerberos daemons perform logging</td>
-</tr>
-</tbody>
-</table>
-<div class="section" id="kdcdefaults">
-<span id="id1"></span><h3>[kdcdefaults]<a class="headerlink" href="#kdcdefaults" title="Permalink to this headline">¶</a></h3>
-<p>Some relations in the [kdcdefaults] section specify default values for
-realm variables, to be used if the [realms] subsection does not
-contain a relation for the tag. See the <a class="reference internal" href="#kdc-realms"><span class="std std-ref">[realms]</span></a> section for
-the definitions of these relations.</p>
-<ul class="simple">
-<li><strong>host_based_services</strong></li>
-<li><strong>kdc_listen</strong></li>
-<li><strong>kdc_ports</strong></li>
-<li><strong>kdc_tcp_listen</strong></li>
-<li><strong>kdc_tcp_ports</strong></li>
-<li><strong>no_host_referral</strong></li>
-<li><strong>restrict_anonymous_to_tgt</strong></li>
-</ul>
-<p>The following [kdcdefaults] variables have no per-realm equivalent:</p>
-<dl class="docutils">
-<dt><strong>kdc_max_dgram_reply_size</strong></dt>
-<dd>Specifies the maximum packet size that can be sent over UDP. The
-default value is 4096 bytes.</dd>
-<dt><strong>kdc_tcp_listen_backlog</strong></dt>
-<dd>(Integer.) Set the size of the listen queue length for the KDC
-daemon. The value may be limited by OS settings. The default
-value is 5.</dd>
-<dt><strong>spake_preauth_kdc_challenge</strong></dt>
-<dd>(String.) Specifies the group for a SPAKE optimistic challenge.
-See the <strong>spake_preauth_groups</strong> variable in <a class="reference internal" href="krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>
-for possible values. The default is not to issue an optimistic
-challenge. (New in release 1.17.)</dd>
-</dl>
-</div>
-<div class="section" id="realms">
-<span id="kdc-realms"></span><h3>[realms]<a class="headerlink" href="#realms" title="Permalink to this headline">¶</a></h3>
-<p>Each tag in the [realms] section is the name of a Kerberos realm. The
-value of the tag is a subsection where the relations define KDC
-parameters for that particular realm. The following example shows how
-to define one parameter for the ATHENA.MIT.EDU realm:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">max_renewable_life</span> <span class="o">=</span> <span class="mi">7</span><span class="n">d</span> <span class="mi">0</span><span class="n">h</span> <span class="mi">0</span><span class="n">m</span> <span class="mi">0</span><span class="n">s</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>The following tags may be specified in a [realms] subsection:</p>
-<dl class="docutils">
-<dt><strong>acl_file</strong></dt>
-<dd>(String.) Location of the access control list file that
-<a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> uses to determine which principals are allowed
-which permissions on the Kerberos database. To operate without an
-ACL file, set this relation to the empty string with <code class="docutils literal"><span class="pre">acl_file</span> <span class="pre">=</span>
-<span class="pre">""</span></code>. The default value is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/kadm5.acl</span></code>. For more
-information on Kerberos ACL file see <a class="reference internal" href="kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a>.</dd>
-<dt><strong>database_module</strong></dt>
-<dd>(String.) This relation indicates the name of the configuration
-section under <a class="reference internal" href="#dbmodules"><span class="std std-ref">[dbmodules]</span></a> for database-specific parameters
-used by the loadable database library. The default value is the
-realm name. If this configuration section does not exist, default
-values will be used for all database parameters.</dd>
-<dt><strong>database_name</strong></dt>
-<dd>(String, deprecated.) This relation specifies the location of the
-Kerberos database for this realm, if the DB2 module is being used
-and the <a class="reference internal" href="#dbmodules"><span class="std std-ref">[dbmodules]</span></a> configuration section does not specify a
-database name. The default value is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/principal</span></code>.</dd>
-<dt><strong>default_principal_expiration</strong></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#abstime"><span class="std std-ref">Absolute time</span></a> string.) Specifies the default expiration date of
-principals created in this realm. The default value is 0, which
-means no expiration date.</dd>
-<dt><strong>default_principal_flags</strong></dt>
-<dd><p class="first">(Flag string.) Specifies the default attributes of principals
-created in this realm. The format for this string is a
-comma-separated list of flags, with ‘+’ before each flag that
-should be enabled and ‘-‘ before each flag that should be
-disabled. The <strong>postdateable</strong>, <strong>forwardable</strong>, <strong>tgt-based</strong>,
-<strong>renewable</strong>, <strong>proxiable</strong>, <strong>dup-skey</strong>, <strong>allow-tickets</strong>, and
-<strong>service</strong> flags default to enabled.</p>
-<p>There are a number of possible flags:</p>
-<dl class="last docutils">
-<dt><strong>allow-tickets</strong></dt>
-<dd>Enabling this flag means that the KDC will issue tickets for
-this principal. Disabling this flag essentially deactivates
-the principal within this realm.</dd>
-<dt><strong>dup-skey</strong></dt>
-<dd>Enabling this flag allows the KDC to issue user-to-user
-service tickets for this principal.</dd>
-<dt><strong>forwardable</strong></dt>
-<dd>Enabling this flag allows the principal to obtain forwardable
-tickets.</dd>
-<dt><strong>hwauth</strong></dt>
-<dd>If this flag is enabled, then the principal is required to
-preauthenticate using a hardware device before receiving any
-tickets.</dd>
-<dt><strong>no-auth-data-required</strong></dt>
-<dd>Enabling this flag prevents PAC or AD-SIGNEDPATH data from
-being added to service tickets for the principal.</dd>
-<dt><strong>ok-as-delegate</strong></dt>
-<dd>If this flag is enabled, it hints the client that credentials
-can and should be delegated when authenticating to the
-service.</dd>
-<dt><strong>ok-to-auth-as-delegate</strong></dt>
-<dd>Enabling this flag allows the principal to use S4USelf tickets.</dd>
-<dt><strong>postdateable</strong></dt>
-<dd>Enabling this flag allows the principal to obtain postdateable
-tickets.</dd>
-<dt><strong>preauth</strong></dt>
-<dd>If this flag is enabled on a client principal, then that
-principal is required to preauthenticate to the KDC before
-receiving any tickets. On a service principal, enabling this
-flag means that service tickets for this principal will only
-be issued to clients with a TGT that has the preauthenticated
-bit set.</dd>
-<dt><strong>proxiable</strong></dt>
-<dd>Enabling this flag allows the principal to obtain proxy
-tickets.</dd>
-<dt><strong>pwchange</strong></dt>
-<dd>Enabling this flag forces a password change for this
-principal.</dd>
-<dt><strong>pwservice</strong></dt>
-<dd>If this flag is enabled, it marks this principal as a password
-change service. This should only be used in special cases,
-for example, if a user’s password has expired, then the user
-has to get tickets for that principal without going through
-the normal password authentication in order to be able to
-change the password.</dd>
-<dt><strong>renewable</strong></dt>
-<dd>Enabling this flag allows the principal to obtain renewable
-tickets.</dd>
-<dt><strong>service</strong></dt>
-<dd>Enabling this flag allows the the KDC to issue service tickets
-for this principal. In release 1.17 and later, user-to-user
-service tickets are still allowed if the <strong>dup-skey</strong> flag is
-set.</dd>
-<dt><strong>tgt-based</strong></dt>
-<dd>Enabling this flag allows a principal to obtain tickets based
-on a ticket-granting-ticket, rather than repeating the
-authentication process that was used to obtain the TGT.</dd>
-</dl>
-</dd>
-<dt><strong>dict_file</strong></dt>
-<dd>(String.) Location of the dictionary file containing strings that
-are not allowed as passwords. The file should contain one string
-per line, with no additional whitespace. If none is specified or
-if there is no policy assigned to the principal, no dictionary
-checks of passwords will be performed.</dd>
-<dt><strong>disable_pac</strong></dt>
-<dd>(Boolean value.) If true, the KDC will not issue PACs for this
-realm, and S4U2Self and S4U2Proxy operations will be disabled.
-The default is false, which will permit the KDC to issue PACs.
-New in release 1.20.</dd>
-<dt><strong>encrypted_challenge_indicator</strong></dt>
-<dd>(String.) Specifies the authentication indicator value that the KDC
-asserts into tickets obtained using FAST encrypted challenge
-pre-authentication. New in 1.16.</dd>
-<dt><strong>host_based_services</strong></dt>
-<dd>(Whitespace- or comma-separated list.) Lists services which will
-get host-based referral processing even if the server principal is
-not marked as host-based by the client.</dd>
-<dt><strong>iprop_enable</strong></dt>
-<dd>(Boolean value.) Specifies whether incremental database
-propagation is enabled. The default value is false.</dd>
-<dt><strong>iprop_ulogsize</strong></dt>
-<dd>(Integer.) Specifies the maximum number of log entries to be
-retained for incremental propagation. The default value is 1000.
-Prior to release 1.11, the maximum value was 2500. New in release
-1.19.</dd>
-<dt><strong>iprop_master_ulogsize</strong></dt>
-<dd>The name for <strong>iprop_ulogsize</strong> prior to release 1.19. Its value is
-used as a fallback if <strong>iprop_ulogsize</strong> is not specified.</dd>
-<dt><strong>iprop_replica_poll</strong></dt>
-<dd>(Delta time string.) Specifies how often the replica KDC polls
-for new updates from the primary. The default value is <code class="docutils literal"><span class="pre">2m</span></code>
-(that is, two minutes). New in release 1.17.</dd>
-<dt><strong>iprop_slave_poll</strong></dt>
-<dd>(Delta time string.) The name for <strong>iprop_replica_poll</strong> prior to
-release 1.17. Its value is used as a fallback if
-<strong>iprop_replica_poll</strong> is not specified.</dd>
-<dt><strong>iprop_listen</strong></dt>
-<dd>(Whitespace- or comma-separated list.) Specifies the iprop RPC
-listening addresses and/or ports for the <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> daemon.
-Each entry may be an interface address, a port number, or an
-address and port number separated by a colon. If the address
-contains colons, enclose it in square brackets. If no address is
-specified, the wildcard address is used. If kadmind fails to bind
-to any of the specified addresses, it will fail to start. The
-default (when <strong>iprop_enable</strong> is true) is to bind to the wildcard
-address at the port specified in <strong>iprop_port</strong>. New in release
-1.15.</dd>
-<dt><strong>iprop_port</strong></dt>
-<dd>(Port number.) Specifies the port number to be used for
-incremental propagation. When <strong>iprop_enable</strong> is true, this
-relation is required in the replica KDC configuration file, and
-this relation or <strong>iprop_listen</strong> is required in the primary
-configuration file, as there is no default port number. Port
-numbers specified in <strong>iprop_listen</strong> entries will override this
-port number for the <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> daemon.</dd>
-<dt><strong>iprop_resync_timeout</strong></dt>
-<dd>(Delta time string.) Specifies the amount of time to wait for a
-full propagation to complete. This is optional in configuration
-files, and is used by replica KDCs only. The default value is 5
-minutes (<code class="docutils literal"><span class="pre">5m</span></code>). New in release 1.11.</dd>
-<dt><strong>iprop_logfile</strong></dt>
-<dd>(File name.) Specifies where the update log file for the realm
-database is to be stored. The default is to use the
-<strong>database_name</strong> entry from the realms section of the krb5 config
-file, with <code class="docutils literal"><span class="pre">.ulog</span></code> appended. (NOTE: If <strong>database_name</strong> isn’t
-specified in the realms section, perhaps because the LDAP database
-back end is being used, or the file name is specified in the
-[dbmodules] section, then the hard-coded default for
-<strong>database_name</strong> is used. Determination of the <strong>iprop_logfile</strong>
-default value will not use values from the [dbmodules] section.)</dd>
-<dt><strong>kadmind_listen</strong></dt>
-<dd>(Whitespace- or comma-separated list.) Specifies the kadmin RPC
-listening addresses and/or ports for the <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> daemon.
-Each entry may be an interface address, a port number, or an
-address and port number separated by a colon. If the address
-contains colons, enclose it in square brackets. If no address is
-specified, the wildcard address is used. If kadmind fails to bind
-to any of the specified addresses, it will fail to start. The
-default is to bind to the wildcard address at the port specified
-in <strong>kadmind_port</strong>, or the standard kadmin port (749). New in
-release 1.15.</dd>
-<dt><strong>kadmind_port</strong></dt>
-<dd>(Port number.) Specifies the port on which the <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a>
-daemon is to listen for this realm. Port numbers specified in
-<strong>kadmind_listen</strong> entries will override this port number. The
-assigned port for kadmind is 749, which is used by default.</dd>
-<dt><strong>key_stash_file</strong></dt>
-<dd>(String.) Specifies the location where the master key has been
-stored (via kdb5_util stash). The default is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/.k5.REALM</span></code>, where <em>REALM</em> is the Kerberos realm.</dd>
-<dt><strong>kdc_listen</strong></dt>
-<dd>(Whitespace- or comma-separated list.) Specifies the UDP
-listening addresses and/or ports for the <a class="reference internal" href="../admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> daemon.
-Each entry may be an interface address, a port number, or an
-address and port number separated by a colon. If the address
-contains colons, enclose it in square brackets. If no address is
-specified, the wildcard address is used. If no port is specified,
-the standard port (88) is used. If the KDC daemon fails to bind
-to any of the specified addresses, it will fail to start. The
-default is to bind to the wildcard address on the standard port.
-New in release 1.15.</dd>
-<dt><strong>kdc_ports</strong></dt>
-<dd>(Whitespace- or comma-separated list, deprecated.) Prior to
-release 1.15, this relation lists the ports for the
-<a class="reference internal" href="../admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> daemon to listen on for UDP requests. In
-release 1.15 and later, it has the same meaning as <strong>kdc_listen</strong>
-if that relation is not defined.</dd>
-<dt><strong>kdc_tcp_listen</strong></dt>
-<dd>(Whitespace- or comma-separated list.) Specifies the TCP
-listening addresses and/or ports for the <a class="reference internal" href="../admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> daemon.
-Each entry may be an interface address, a port number, or an
-address and port number separated by a colon. If the address
-contains colons, enclose it in square brackets. If no address is
-specified, the wildcard address is used. If no port is specified,
-the standard port (88) is used. To disable listening on TCP, set
-this relation to the empty string with <code class="docutils literal"><span class="pre">kdc_tcp_listen</span> <span class="pre">=</span> <span class="pre">""</span></code>.
-If the KDC daemon fails to bind to any of the specified addresses,
-it will fail to start. The default is to bind to the wildcard
-address on the standard port. New in release 1.15.</dd>
-<dt><strong>kdc_tcp_ports</strong></dt>
-<dd>(Whitespace- or comma-separated list, deprecated.) Prior to
-release 1.15, this relation lists the ports for the
-<a class="reference internal" href="../admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> daemon to listen on for UDP requests. In
-release 1.15 and later, it has the same meaning as
-<strong>kdc_tcp_listen</strong> if that relation is not defined.</dd>
-<dt><strong>kpasswd_listen</strong></dt>
-<dd>(Comma-separated list.) Specifies the kpasswd listening addresses
-and/or ports for the <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> daemon. Each entry may be
-an interface address, a port number, or an address and port number
-separated by a colon. If the address contains colons, enclose it
-in square brackets. If no address is specified, the wildcard
-address is used. If kadmind fails to bind to any of the specified
-addresses, it will fail to start. The default is to bind to the
-wildcard address at the port specified in <strong>kpasswd_port</strong>, or the
-standard kpasswd port (464). New in release 1.15.</dd>
-<dt><strong>kpasswd_port</strong></dt>
-<dd>(Port number.) Specifies the port on which the <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a>
-daemon is to listen for password change requests for this realm.
-Port numbers specified in <strong>kpasswd_listen</strong> entries will override
-this port number. The assigned port for password change requests
-is 464, which is used by default.</dd>
-<dt><strong>master_key_name</strong></dt>
-<dd>(String.) Specifies the name of the principal associated with the
-master key. The default is <code class="docutils literal"><span class="pre">K/M</span></code>.</dd>
-<dt><strong>master_key_type</strong></dt>
-<dd>(Key type string.) Specifies the master key’s key type. The
-default value for this is <code class="docutils literal"><span class="pre">aes256-cts-hmac-sha1-96</span></code>. For a list of all possible
-values, see <a class="reference internal" href="#encryption-types"><span class="std std-ref">Encryption types</span></a>.</dd>
-<dt><strong>max_life</strong></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> string.) Specifies the maximum time period for
-which a ticket may be valid in this realm. The default value is
-24 hours.</dd>
-<dt><strong>max_renewable_life</strong></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> string.) Specifies the maximum time period
-during which a valid ticket may be renewed in this realm.
-The default value is 0.</dd>
-<dt><strong>no_host_referral</strong></dt>
-<dd>(Whitespace- or comma-separated list.) Lists services to block
-from getting host-based referral processing, even if the client
-marks the server principal as host-based or the service is also
-listed in <strong>host_based_services</strong>. <code class="docutils literal"><span class="pre">no_host_referral</span> <span class="pre">=</span> <span class="pre">*</span></code> will
-disable referral processing altogether.</dd>
-<dt><strong>reject_bad_transit</strong></dt>
-<dd><p class="first">(Boolean value.) If set to true, the KDC will check the list of
-transited realms for cross-realm tickets against the transit path
-computed from the realm names and the capaths section of its
-<a class="reference internal" href="krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> file; if the path in the ticket to be issued
-contains any realms not in the computed path, the ticket will not
-be issued, and an error will be returned to the client instead.
-If this value is set to false, such tickets will be issued
-anyways, and it will be left up to the application server to
-validate the realm transit path.</p>
-<p>If the disable-transited-check flag is set in the incoming
-request, this check is not performed at all. Having the
-<strong>reject_bad_transit</strong> option will cause such ticket requests to
-be rejected always.</p>
-<p>This transit path checking and config file option currently apply
-only to TGS requests.</p>
-<p class="last">The default value is true.</p>
-</dd>
-<dt><strong>restrict_anonymous_to_tgt</strong></dt>
-<dd>(Boolean value.) If set to true, the KDC will reject ticket
-requests from anonymous principals to service principals other
-than the realm’s ticket-granting service. This option allows
-anonymous PKINIT to be enabled for use as FAST armor tickets
-without allowing anonymous authentication to services. The
-default value is false. New in release 1.9.</dd>
-<dt><strong>spake_preauth_indicator</strong></dt>
-<dd>(String.) Specifies an authentication indicator value that the
-KDC asserts into tickets obtained using SPAKE pre-authentication.
-The default is not to add any indicators. This option may be
-specified multiple times. New in release 1.17.</dd>
-<dt><strong>supported_enctypes</strong></dt>
-<dd>(List of <em>key</em>:<em>salt</em> strings.) Specifies the default key/salt
-combinations of principals for this realm. Any principals created
-through <a class="reference internal" href="../admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> will have keys of these types. The
-default value for this tag is <code class="docutils literal"><span class="pre">aes256-cts-hmac-sha1-96:normal</span> <span class="pre">aes128-cts-hmac-sha1-96:normal</span></code>. For lists of
-possible values, see <a class="reference internal" href="#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a>.</dd>
-</dl>
-</div>
-<div class="section" id="dbdefaults">
-<span id="id2"></span><h3>[dbdefaults]<a class="headerlink" href="#dbdefaults" title="Permalink to this headline">¶</a></h3>
-<p>The [dbdefaults] section specifies default values for some database
-parameters, to be used if the [dbmodules] subsection does not contain
-a relation for the tag. See the <a class="reference internal" href="#dbmodules"><span class="std std-ref">[dbmodules]</span></a> section for the
-definitions of these relations.</p>
-<ul class="simple">
-<li><strong>ldap_kerberos_container_dn</strong></li>
-<li><strong>ldap_kdc_dn</strong></li>
-<li><strong>ldap_kdc_sasl_authcid</strong></li>
-<li><strong>ldap_kdc_sasl_authzid</strong></li>
-<li><strong>ldap_kdc_sasl_mech</strong></li>
-<li><strong>ldap_kdc_sasl_realm</strong></li>
-<li><strong>ldap_kadmind_dn</strong></li>
-<li><strong>ldap_kadmind_sasl_authcid</strong></li>
-<li><strong>ldap_kadmind_sasl_authzid</strong></li>
-<li><strong>ldap_kadmind_sasl_mech</strong></li>
-<li><strong>ldap_kadmind_sasl_realm</strong></li>
-<li><strong>ldap_service_password_file</strong></li>
-<li><strong>ldap_conns_per_server</strong></li>
-</ul>
-</div>
-<div class="section" id="dbmodules">
-<span id="id3"></span><h3>[dbmodules]<a class="headerlink" href="#dbmodules" title="Permalink to this headline">¶</a></h3>
-<p>The [dbmodules] section contains parameters used by the KDC database
-library and database modules. Each tag in the [dbmodules] section is
-the name of a Kerberos realm or a section name specified by a realm’s
-<strong>database_module</strong> parameter. The following example shows how to
-define one database parameter for the ATHENA.MIT.EDU realm:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">dbmodules</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">disable_last_success</span> <span class="o">=</span> <span class="n">true</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>The following tags may be specified in a [dbmodules] subsection:</p>
-<dl class="docutils">
-<dt><strong>database_name</strong></dt>
-<dd>This DB2-specific tag indicates the location of the database in
-the filesystem. The default is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/principal</span></code>.</dd>
-<dt><strong>db_library</strong></dt>
-<dd>This tag indicates the name of the loadable database module. The
-value should be <code class="docutils literal"><span class="pre">db2</span></code> for the DB2 module, <code class="docutils literal"><span class="pre">klmdb</span></code> for the LMDB
-module, or <code class="docutils literal"><span class="pre">kldap</span></code> for the LDAP module.</dd>
-<dt><strong>disable_last_success</strong></dt>
-<dd>If set to <code class="docutils literal"><span class="pre">true</span></code>, suppresses KDC updates to the “Last successful
-authentication” field of principal entries requiring
-preauthentication. Setting this flag may improve performance.
-(Principal entries which do not require preauthentication never
-update the “Last successful authentication” field.). First
-introduced in release 1.9.</dd>
-<dt><strong>disable_lockout</strong></dt>
-<dd>If set to <code class="docutils literal"><span class="pre">true</span></code>, suppresses KDC updates to the “Last failed
-authentication” and “Failed password attempts” fields of principal
-entries requiring preauthentication. Setting this flag may
-improve performance, but also disables account lockout. First
-introduced in release 1.9.</dd>
-<dt><strong>ldap_conns_per_server</strong></dt>
-<dd>This LDAP-specific tag indicates the number of connections to be
-maintained per LDAP server.</dd>
-<dt><strong>ldap_kdc_dn</strong> and <strong>ldap_kadmind_dn</strong></dt>
-<dd>These LDAP-specific tags indicate the default DN for binding to
-the LDAP server. The <a class="reference internal" href="../admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> daemon uses
-<strong>ldap_kdc_dn</strong>, while the <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> daemon and other
-administrative programs use <strong>ldap_kadmind_dn</strong>. The kadmind DN
-must have the rights to read and write the Kerberos data in the
-LDAP database. The KDC DN must have the same rights, unless
-<strong>disable_lockout</strong> and <strong>disable_last_success</strong> are true, in
-which case it only needs to have rights to read the Kerberos data.
-These tags are ignored if a SASL mechanism is set with
-<strong>ldap_kdc_sasl_mech</strong> or <strong>ldap_kadmind_sasl_mech</strong>.</dd>
-<dt><strong>ldap_kdc_sasl_mech</strong> and <strong>ldap_kadmind_sasl_mech</strong></dt>
-<dd>These LDAP-specific tags specify the SASL mechanism (such as
-<code class="docutils literal"><span class="pre">EXTERNAL</span></code>) to use when binding to the LDAP server. New in
-release 1.13.</dd>
-<dt><strong>ldap_kdc_sasl_authcid</strong> and <strong>ldap_kadmind_sasl_authcid</strong></dt>
-<dd>These LDAP-specific tags specify the SASL authentication identity
-to use when binding to the LDAP server. Not all SASL mechanisms
-require an authentication identity. If the SASL mechanism
-requires a secret (such as the password for <code class="docutils literal"><span class="pre">DIGEST-MD5</span></code>), these
-tags also determine the name within the
-<strong>ldap_service_password_file</strong> where the secret is stashed. New
-in release 1.13.</dd>
-<dt><strong>ldap_kdc_sasl_authzid</strong> and <strong>ldap_kadmind_sasl_authzid</strong></dt>
-<dd>These LDAP-specific tags specify the SASL authorization identity
-to use when binding to the LDAP server. In most circumstances
-they do not need to be specified. New in release 1.13.</dd>
-<dt><strong>ldap_kdc_sasl_realm</strong> and <strong>ldap_kadmind_sasl_realm</strong></dt>
-<dd>These LDAP-specific tags specify the SASL realm to use when
-binding to the LDAP server. In most circumstances they do not
-need to be set. New in release 1.13.</dd>
-<dt><strong>ldap_kerberos_container_dn</strong></dt>
-<dd>This LDAP-specific tag indicates the DN of the container object
-where the realm objects will be located.</dd>
-<dt><strong>ldap_servers</strong></dt>
-<dd>This LDAP-specific tag indicates the list of LDAP servers that the
-Kerberos servers can connect to. The list of LDAP servers is
-whitespace-separated. The LDAP server is specified by a LDAP URI.
-It is recommended to use <code class="docutils literal"><span class="pre">ldapi:</span></code> or <code class="docutils literal"><span class="pre">ldaps:</span></code> URLs to connect
-to the LDAP server.</dd>
-<dt><strong>ldap_service_password_file</strong></dt>
-<dd>This LDAP-specific tag indicates the file containing the stashed
-passwords (created by <code class="docutils literal"><span class="pre">kdb5_ldap_util</span> <span class="pre">stashsrvpw</span></code>) for the
-<strong>ldap_kdc_dn</strong> and <strong>ldap_kadmind_dn</strong> objects, or for the
-<strong>ldap_kdc_sasl_authcid</strong> or <strong>ldap_kadmind_sasl_authcid</strong> names
-for SASL authentication. This file must be kept secure.</dd>
-<dt><strong>mapsize</strong></dt>
-<dd>This LMDB-specific tag indicates the maximum size of the two
-database environments in megabytes. The default value is 128.
-Increase this value to address “Environment mapsize limit reached”
-errors. New in release 1.17.</dd>
-<dt><strong>max_readers</strong></dt>
-<dd>This LMDB-specific tag indicates the maximum number of concurrent
-reading processes for the databases. The default value is 128.
-New in release 1.17.</dd>
-<dt><strong>nosync</strong></dt>
-<dd>This LMDB-specific tag can be set to improve the throughput of
-kadmind and other administrative agents, at the expense of
-durability (recent database changes may not survive a power outage
-or other sudden reboot). It does not affect the throughput of the
-KDC. The default value is false. New in release 1.17.</dd>
-<dt><strong>unlockiter</strong></dt>
-<dd>If set to <code class="docutils literal"><span class="pre">true</span></code>, this DB2-specific tag causes iteration
-operations to release the database lock while processing each
-principal. Setting this flag to <code class="docutils literal"><span class="pre">true</span></code> can prevent extended
-blocking of KDC or kadmin operations when dumps of large databases
-are in progress. First introduced in release 1.13.</dd>
-</dl>
-<p>The following tag may be specified directly in the [dbmodules]
-section to control where database modules are loaded from:</p>
-<dl class="docutils">
-<dt><strong>db_module_dir</strong></dt>
-<dd>This tag controls where the plugin system looks for database
-modules. The value should be an absolute path.</dd>
-</dl>
-</div>
-<div class="section" id="logging">
-<span id="id4"></span><h3>[logging]<a class="headerlink" href="#logging" title="Permalink to this headline">¶</a></h3>
-<p>The [logging] section indicates how <a class="reference internal" href="../admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> and
-<a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> perform logging. It may contain the following
-relations:</p>
-<dl class="docutils">
-<dt><strong>admin_server</strong></dt>
-<dd>Specifies how <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> performs logging.</dd>
-<dt><strong>kdc</strong></dt>
-<dd>Specifies how <a class="reference internal" href="../admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> performs logging.</dd>
-<dt><strong>default</strong></dt>
-<dd>Specifies how either daemon performs logging in the absence of
-relations specific to the daemon.</dd>
-<dt><strong>debug</strong></dt>
-<dd>(Boolean value.) Specifies whether debugging messages are
-included in log outputs other than SYSLOG. Debugging messages are
-always included in the system log output because syslog performs
-its own priority filtering. The default value is false. New in
-release 1.15.</dd>
-</dl>
-<p>Logging specifications may have the following forms:</p>
-<dl class="docutils">
-<dt><strong>FILE=</strong><em>filename</em> or <strong>FILE:</strong><em>filename</em></dt>
-<dd>This value causes the daemon’s logging messages to go to the
-<em>filename</em>. If the <code class="docutils literal"><span class="pre">=</span></code> form is used, the file is overwritten.
-If the <code class="docutils literal"><span class="pre">:</span></code> form is used, the file is appended to.</dd>
-<dt><strong>STDERR</strong></dt>
-<dd>This value causes the daemon’s logging messages to go to its
-standard error stream.</dd>
-<dt><strong>CONSOLE</strong></dt>
-<dd>This value causes the daemon’s logging messages to go to the
-console, if the system supports it.</dd>
-<dt><strong>DEVICE=</strong><em><devicename></em></dt>
-<dd>This causes the daemon’s logging messages to go to the specified
-device.</dd>
-<dt><strong>SYSLOG</strong>[<strong>:</strong><em>severity</em>[<strong>:</strong><em>facility</em>]]</dt>
-<dd><p class="first">This causes the daemon’s logging messages to go to the system log.</p>
-<p>For backward compatibility, a severity argument may be specified,
-and must be specified in order to specify a facility. This
-argument will be ignored.</p>
-<p class="last">The facility argument specifies the facility under which the
-messages are logged. This may be any of the following facilities
-supported by the syslog(3) call minus the LOG_ prefix: <strong>KERN</strong>,
-<strong>USER</strong>, <strong>MAIL</strong>, <strong>DAEMON</strong>, <strong>AUTH</strong>, <strong>LPR</strong>, <strong>NEWS</strong>,
-<strong>UUCP</strong>, <strong>CRON</strong>, and <strong>LOCAL0</strong> through <strong>LOCAL7</strong>. If no
-facility is specified, the default is <strong>AUTH</strong>.</p>
-</dd>
-</dl>
-<p>In the following example, the logging messages from the KDC will go to
-the console and to the system log under the facility LOG_DAEMON, and
-the logging messages from the administrative server will be appended
-to the file <code class="docutils literal"><span class="pre">/var/adm/kadmin.log</span></code> and sent to the device
-<code class="docutils literal"><span class="pre">/dev/tty04</span></code>.</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">logging</span><span class="p">]</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">CONSOLE</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">SYSLOG</span><span class="p">:</span><span class="n">INFO</span><span class="p">:</span><span class="n">DAEMON</span>
- <span class="n">admin_server</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">adm</span><span class="o">/</span><span class="n">kadmin</span><span class="o">.</span><span class="n">log</span>
- <span class="n">admin_server</span> <span class="o">=</span> <span class="n">DEVICE</span><span class="o">=/</span><span class="n">dev</span><span class="o">/</span><span class="n">tty04</span>
-</pre></div>
-</div>
-<p>If no logging specification is given, the default is to use syslog.
-To disable logging entirely, specify <code class="docutils literal"><span class="pre">default</span> <span class="pre">=</span> <span class="pre">DEVICE=/dev/null</span></code>.</p>
-</div>
-<div class="section" id="otp">
-<span id="id5"></span><h3>[otp]<a class="headerlink" href="#otp" title="Permalink to this headline">¶</a></h3>
-<p>Each subsection of [otp] is the name of an OTP token type. The tags
-within the subsection define the configuration required to forward a
-One Time Password request to a RADIUS server.</p>
-<p>For each token type, the following tags may be specified:</p>
-<dl class="docutils">
-<dt><strong>server</strong></dt>
-<dd>This is the server to send the RADIUS request to. It can be a
-hostname with optional port, an ip address with optional port, or
-a Unix domain socket address. The default is
-<a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/<name>.socket</span></code>.</dd>
-<dt><strong>secret</strong></dt>
-<dd>This tag indicates a filename (which may be relative to <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code>)
-containing the secret used to encrypt the RADIUS packets. The
-secret should appear in the first line of the file by itself;
-leading and trailing whitespace on the line will be removed. If
-the value of <strong>server</strong> is a Unix domain socket address, this tag
-is optional, and an empty secret will be used if it is not
-specified. Otherwise, this tag is required.</dd>
-<dt><strong>timeout</strong></dt>
-<dd>An integer which specifies the time in seconds during which the
-KDC should attempt to contact the RADIUS server. This tag is the
-total time across all retries and should be less than the time
-which an OTP value remains valid for. The default is 5 seconds.</dd>
-<dt><strong>retries</strong></dt>
-<dd>This tag specifies the number of retries to make to the RADIUS
-server. The default is 3 retries (4 tries).</dd>
-<dt><strong>strip_realm</strong></dt>
-<dd>If this tag is <code class="docutils literal"><span class="pre">true</span></code>, the principal without the realm will be
-passed to the RADIUS server. Otherwise, the realm will be
-included. The default value is <code class="docutils literal"><span class="pre">true</span></code>.</dd>
-<dt><strong>indicator</strong></dt>
-<dd>This tag specifies an authentication indicator to be included in
-the ticket if this token type is used to authenticate. This
-option may be specified multiple times. (New in release 1.14.)</dd>
-</dl>
-<p>In the following example, requests are sent to a remote server via UDP:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>[otp]
- MyRemoteTokenType = {
- server = radius.mydomain.com:1812
- secret = SEmfiajf42$
- timeout = 15
- retries = 5
- strip_realm = true
- }
-</pre></div>
-</div>
-<p>An implicit default token type named <code class="docutils literal"><span class="pre">DEFAULT</span></code> is defined for when
-the per-principal configuration does not specify a token type. Its
-configuration is shown below. You may override this token type to
-something applicable for your situation:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">otp</span><span class="p">]</span>
- <span class="n">DEFAULT</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">strip_realm</span> <span class="o">=</span> <span class="n">false</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-</div>
-</div>
-<div class="section" id="pkinit-options">
-<h2>PKINIT options<a class="headerlink" href="#pkinit-options" title="Permalink to this headline">¶</a></h2>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The following are pkinit-specific options. These values may
-be specified in [kdcdefaults] as global defaults, or within
-a realm-specific subsection of [realms]. Also note that a
-realm-specific value over-rides, does not add to, a generic
-[kdcdefaults] specification. The search order is:</p>
-</div>
-<ol class="arabic">
-<li><p class="first">realm-specific subsection of [realms]:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">pkinit_anchors</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">example</span><span class="o">.</span><span class="n">com</span><span class="o">.</span><span class="n">crt</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-</li>
-<li><p class="first">generic value in the [kdcdefaults] section:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">kdcdefaults</span><span class="p">]</span>
- <span class="n">pkinit_anchors</span> <span class="o">=</span> <span class="n">DIR</span><span class="p">:</span><span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">generic_trusted_cas</span><span class="o">/</span>
-</pre></div>
-</div>
-</li>
-</ol>
-<p>For information about the syntax of some of these options, see
-<a class="reference internal" href="krb5_conf.html#pkinit-identity"><span class="std std-ref">Specifying PKINIT identity information</span></a> in
-<a class="reference internal" href="krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>.</p>
-<dl class="docutils">
-<dt><strong>pkinit_anchors</strong></dt>
-<dd>Specifies the location of trusted anchor (root) certificates which
-the KDC trusts to sign client certificates. This option is
-required if pkinit is to be supported by the KDC. This option may
-be specified multiple times.</dd>
-<dt><strong>pkinit_dh_min_bits</strong></dt>
-<dd>Specifies the minimum number of bits the KDC is willing to accept
-for a client’s Diffie-Hellman key. The default is 2048.</dd>
-<dt><strong>pkinit_allow_upn</strong></dt>
-<dd><p class="first">Specifies that the KDC is willing to accept client certificates
-with the Microsoft UserPrincipalName (UPN) Subject Alternative
-Name (SAN). This means the KDC accepts the binding of the UPN in
-the certificate to the Kerberos principal name. The default value
-is false.</p>
-<p class="last">Without this option, the KDC will only accept certificates with
-the id-pkinit-san as defined in <span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4556.html"><strong>RFC 4556</strong></a>. There is currently
-no option to disable SAN checking in the KDC.</p>
-</dd>
-<dt><strong>pkinit_eku_checking</strong></dt>
-<dd><p class="first">This option specifies what Extended Key Usage (EKU) values the KDC
-is willing to accept in client certificates. The values
-recognized in the kdc.conf file are:</p>
-<dl class="last docutils">
-<dt><strong>kpClientAuth</strong></dt>
-<dd>This is the default value and specifies that client
-certificates must have the id-pkinit-KPClientAuth EKU as
-defined in <span class="target" id="index-1"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4556.html"><strong>RFC 4556</strong></a>.</dd>
-<dt><strong>scLogin</strong></dt>
-<dd>If scLogin is specified, client certificates with the
-Microsoft Smart Card Login EKU (id-ms-kp-sc-logon) will be
-accepted.</dd>
-<dt><strong>none</strong></dt>
-<dd>If none is specified, then client certificates will not be
-checked to verify they have an acceptable EKU. The use of
-this option is not recommended.</dd>
-</dl>
-</dd>
-<dt><strong>pkinit_identity</strong></dt>
-<dd>Specifies the location of the KDC’s X.509 identity information.
-This option is required if pkinit is to be supported by the KDC.</dd>
-<dt><strong>pkinit_indicator</strong></dt>
-<dd>Specifies an authentication indicator to include in the ticket if
-pkinit is used to authenticate. This option may be specified
-multiple times. (New in release 1.14.)</dd>
-<dt><strong>pkinit_pool</strong></dt>
-<dd>Specifies the location of intermediate certificates which may be
-used by the KDC to complete the trust chain between a client’s
-certificate and a trusted anchor. This option may be specified
-multiple times.</dd>
-<dt><strong>pkinit_revoke</strong></dt>
-<dd>Specifies the location of Certificate Revocation List (CRL)
-information to be used by the KDC when verifying the validity of
-client certificates. This option may be specified multiple times.</dd>
-<dt><strong>pkinit_require_crl_checking</strong></dt>
-<dd><p class="first">The default certificate verification process will always check the
-available revocation information to see if a certificate has been
-revoked. If a match is found for the certificate in a CRL,
-verification fails. If the certificate being verified is not
-listed in a CRL, or there is no CRL present for its issuing CA,
-and <strong>pkinit_require_crl_checking</strong> is false, then verification
-succeeds.</p>
-<p>However, if <strong>pkinit_require_crl_checking</strong> is true and there is
-no CRL information available for the issuing CA, then verification
-fails.</p>
-<p class="last"><strong>pkinit_require_crl_checking</strong> should be set to true if the
-policy is such that up-to-date CRLs must be present for every CA.</p>
-</dd>
-<dt><strong>pkinit_require_freshness</strong></dt>
-<dd>Specifies whether to require clients to include a freshness token
-in PKINIT requests. The default value is false. (New in release
-1.17.)</dd>
-</dl>
-</div>
-<div class="section" id="encryption-types">
-<span id="id6"></span><h2>Encryption types<a class="headerlink" href="#encryption-types" title="Permalink to this headline">¶</a></h2>
-<p>Any tag in the configuration files which requires a list of encryption
-types can be set to some combination of the following strings.
-Encryption types marked as “weak” and “deprecated” are available for
-compatibility but not recommended for use.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="30%" />
-<col width="70%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td>des3-cbc-raw</td>
-<td>Triple DES cbc mode raw (weak)</td>
-</tr>
-<tr class="row-even"><td>des3-cbc-sha1 des3-hmac-sha1 des3-cbc-sha1-kd</td>
-<td>Triple DES cbc mode with HMAC/sha1 (deprecated)</td>
-</tr>
-<tr class="row-odd"><td>aes256-cts-hmac-sha1-96 aes256-cts aes256-sha1</td>
-<td>AES-256 CTS mode with 96-bit SHA-1 HMAC</td>
-</tr>
-<tr class="row-even"><td>aes128-cts-hmac-sha1-96 aes128-cts aes128-sha1</td>
-<td>AES-128 CTS mode with 96-bit SHA-1 HMAC</td>
-</tr>
-<tr class="row-odd"><td>aes256-cts-hmac-sha384-192 aes256-sha2</td>
-<td>AES-256 CTS mode with 192-bit SHA-384 HMAC</td>
-</tr>
-<tr class="row-even"><td>aes128-cts-hmac-sha256-128 aes128-sha2</td>
-<td>AES-128 CTS mode with 128-bit SHA-256 HMAC</td>
-</tr>
-<tr class="row-odd"><td>arcfour-hmac rc4-hmac arcfour-hmac-md5</td>
-<td>RC4 with HMAC/MD5 (deprecated)</td>
-</tr>
-<tr class="row-even"><td>arcfour-hmac-exp rc4-hmac-exp arcfour-hmac-md5-exp</td>
-<td>Exportable RC4 with HMAC/MD5 (weak)</td>
-</tr>
-<tr class="row-odd"><td>camellia256-cts-cmac camellia256-cts</td>
-<td>Camellia-256 CTS mode with CMAC</td>
-</tr>
-<tr class="row-even"><td>camellia128-cts-cmac camellia128-cts</td>
-<td>Camellia-128 CTS mode with CMAC</td>
-</tr>
-<tr class="row-odd"><td>des3</td>
-<td>The triple DES family: des3-cbc-sha1</td>
-</tr>
-<tr class="row-even"><td>aes</td>
-<td>The AES family: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, aes256-cts-hmac-sha384-192, and aes128-cts-hmac-sha256-128</td>
-</tr>
-<tr class="row-odd"><td>rc4</td>
-<td>The RC4 family: arcfour-hmac</td>
-</tr>
-<tr class="row-even"><td>camellia</td>
-<td>The Camellia family: camellia256-cts-cmac and camellia128-cts-cmac</td>
-</tr>
-</tbody>
-</table>
-<p>The string <strong>DEFAULT</strong> can be used to refer to the default set of
-types for the variable in question. Types or families can be removed
-from the current list by prefixing them with a minus sign (“-“).
-Types or families can be prefixed with a plus sign (“+”) for symmetry;
-it has the same meaning as just listing the type or family. For
-example, “<code class="docutils literal"><span class="pre">DEFAULT</span> <span class="pre">-rc4</span></code>” would be the default set of encryption
-types with RC4 types removed, and “<code class="docutils literal"><span class="pre">des3</span> <span class="pre">DEFAULT</span></code>” would be the
-default set of encryption types with triple DES types moved to the
-front.</p>
-<p>While <strong>aes128-cts</strong> and <strong>aes256-cts</strong> are supported for all Kerberos
-operations, they are not supported by very old versions of our GSSAPI
-implementation (krb5-1.3.1 and earlier). Services running versions of
-krb5 without AES support must not be given keys of these encryption
-types in the KDC database.</p>
-<p>The <strong>aes128-sha2</strong> and <strong>aes256-sha2</strong> encryption types are new in
-release 1.15. Services running versions of krb5 without support for
-these newer encryption types must not be given keys of these
-encryption types in the KDC database.</p>
-</div>
-<div class="section" id="keysalt-lists">
-<span id="id7"></span><h2>Keysalt lists<a class="headerlink" href="#keysalt-lists" title="Permalink to this headline">¶</a></h2>
-<p>Kerberos keys for users are usually derived from passwords. Kerberos
-commands and configuration parameters that affect generation of keys
-take lists of enctype-salttype (“keysalt”) pairs, known as <em>keysalt
-lists</em>. Each keysalt pair is an enctype name followed by a salttype
-name, in the format <em>enc</em>:<em>salt</em>. Individual keysalt list members are
-separated by comma (“,”) characters or space characters. For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span> <span class="o">-</span><span class="n">e</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="p">:</span><span class="n">normal</span><span class="p">,</span><span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="p">:</span><span class="n">normal</span>
-</pre></div>
-</div>
-<p>would start up kadmin so that by default it would generate
-password-derived keys for the <strong>aes256-cts</strong> and <strong>aes128-cts</strong>
-encryption types, using a <strong>normal</strong> salt.</p>
-<p>To ensure that people who happen to pick the same password do not have
-the same key, Kerberos 5 incorporates more information into the key
-using something called a salt. The supported salt types are as
-follows:</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="25%" />
-<col width="75%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td>normal</td>
-<td>default for Kerberos Version 5</td>
-</tr>
-<tr class="row-even"><td>norealm</td>
-<td>same as the default, without using realm information</td>
-</tr>
-<tr class="row-odd"><td>onlyrealm</td>
-<td>uses only realm information as the salt</td>
-</tr>
-<tr class="row-even"><td>special</td>
-<td>generate a random salt</td>
-</tr>
-</tbody>
-</table>
-</div>
-<div class="section" id="sample-kdc-conf-file">
-<h2>Sample kdc.conf File<a class="headerlink" href="#sample-kdc-conf-file" title="Permalink to this headline">¶</a></h2>
-<p>Here’s an example of a kdc.conf file:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">kdcdefaults</span><span class="p">]</span>
- <span class="n">kdc_listen</span> <span class="o">=</span> <span class="mi">88</span>
- <span class="n">kdc_tcp_listen</span> <span class="o">=</span> <span class="mi">88</span>
-<span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">kadmind_port</span> <span class="o">=</span> <span class="mi">749</span>
- <span class="n">max_life</span> <span class="o">=</span> <span class="mi">12</span><span class="n">h</span> <span class="mi">0</span><span class="n">m</span> <span class="mi">0</span><span class="n">s</span>
- <span class="n">max_renewable_life</span> <span class="o">=</span> <span class="mi">7</span><span class="n">d</span> <span class="mi">0</span><span class="n">h</span> <span class="mi">0</span><span class="n">m</span> <span class="mi">0</span><span class="n">s</span>
- <span class="n">master_key_type</span> <span class="o">=</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span>
- <span class="n">supported_enctypes</span> <span class="o">=</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span><span class="p">:</span><span class="n">normal</span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span><span class="p">:</span><span class="n">normal</span>
- <span class="n">database_module</span> <span class="o">=</span> <span class="n">openldap_ldapconf</span>
- <span class="p">}</span>
-
-<span class="p">[</span><span class="n">logging</span><span class="p">]</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">krb5kdc</span><span class="o">/</span><span class="n">kdc</span><span class="o">.</span><span class="n">log</span>
- <span class="n">admin_server</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">krb5kdc</span><span class="o">/</span><span class="n">kadmin</span><span class="o">.</span><span class="n">log</span>
-
-<span class="p">[</span><span class="n">dbdefaults</span><span class="p">]</span>
- <span class="n">ldap_kerberos_container_dn</span> <span class="o">=</span> <span class="n">cn</span><span class="o">=</span><span class="n">krbcontainer</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">mit</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">edu</span>
-
-<span class="p">[</span><span class="n">dbmodules</span><span class="p">]</span>
- <span class="n">openldap_ldapconf</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">db_library</span> <span class="o">=</span> <span class="n">kldap</span>
- <span class="n">disable_last_success</span> <span class="o">=</span> <span class="n">true</span>
- <span class="n">ldap_kdc_dn</span> <span class="o">=</span> <span class="s2">"cn=krbadmin,dc=mit,dc=edu"</span>
- <span class="c1"># this object needs to have read rights on</span>
- <span class="c1"># the realm container and principal subtrees</span>
- <span class="n">ldap_kadmind_dn</span> <span class="o">=</span> <span class="s2">"cn=krbadmin,dc=mit,dc=edu"</span>
- <span class="c1"># this object needs to have read and write rights on</span>
- <span class="c1"># the realm container and principal subtrees</span>
- <span class="n">ldap_service_password_file</span> <span class="o">=</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">kerberos</span><span class="o">/</span><span class="n">service</span><span class="o">.</span><span class="n">keyfile</span>
- <span class="n">ldap_servers</span> <span class="o">=</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">kerberos</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="n">ldap_conns_per_server</span> <span class="o">=</span> <span class="mi">5</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="files">
-<h2>FILES<a class="headerlink" href="#files" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/kdc.conf</span></code></p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>, <a class="reference internal" href="../admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a>, <a class="reference internal" href="kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kdc.conf</a><ul>
-<li><a class="reference internal" href="#structure">Structure</a></li>
-<li><a class="reference internal" href="#sections">Sections</a><ul>
-<li><a class="reference internal" href="#kdcdefaults">[kdcdefaults]</a></li>
-<li><a class="reference internal" href="#realms">[realms]</a></li>
-<li><a class="reference internal" href="#dbdefaults">[dbdefaults]</a></li>
-<li><a class="reference internal" href="#dbmodules">[dbmodules]</a></li>
-<li><a class="reference internal" href="#logging">[logging]</a></li>
-<li><a class="reference internal" href="#otp">[otp]</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#pkinit-options">PKINIT options</a></li>
-<li><a class="reference internal" href="#encryption-types">Encryption types</a></li>
-<li><a class="reference internal" href="#keysalt-lists">Keysalt lists</a></li>
-<li><a class="reference internal" href="#sample-kdc-conf-file">Sample kdc.conf File</a></li>
-<li><a class="reference internal" href="#files">FILES</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Configuration Files</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="krb5_conf.html">krb5.conf</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kdc.conf</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadm5_acl.html">kadm5.acl</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_conf.html" title="krb5.conf"
- >previous</a> |
- <a href="kadm5_acl.html" title="kadm5.acl"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kdc.conf">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5.conf — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kdc.conf" href="kdc_conf.html" />
- <link rel="prev" title="Configuration Files" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="Configuration Files"
- accesskey="P">previous</a> |
- <a href="kdc_conf.html" title="kdc.conf"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5.conf">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-conf">
-<span id="krb5-conf-5"></span><h1>krb5.conf<a class="headerlink" href="#krb5-conf" title="Permalink to this headline">¶</a></h1>
-<p>The krb5.conf file contains Kerberos configuration information,
-including the locations of KDCs and admin servers for the Kerberos
-realms of interest, defaults for the current realm and for Kerberos
-applications, and mappings of hostnames onto Kerberos realms.
-Normally, you should install your krb5.conf file in the directory
-<code class="docutils literal"><span class="pre">/etc</span></code>. You can override the default location by setting the
-environment variable <strong>KRB5_CONFIG</strong>. Multiple colon-separated
-filenames may be specified in <strong>KRB5_CONFIG</strong>; all files which are
-present will be read. Starting in release 1.14, directory names can
-also be specified in <strong>KRB5_CONFIG</strong>; all files within the directory
-whose names consist solely of alphanumeric characters, dashes, or
-underscores will be read.</p>
-<div class="section" id="structure">
-<h2>Structure<a class="headerlink" href="#structure" title="Permalink to this headline">¶</a></h2>
-<p>The krb5.conf file is set up in the style of a Windows INI file.
-Lines beginning with ‘#’ or ‘;’ (possibly after initial whitespace)
-are ignored as comments. Sections are headed by the section name, in
-square brackets. Each section may contain zero or more relations, of
-the form:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">foo</span> <span class="o">=</span> <span class="n">bar</span>
-</pre></div>
-</div>
-<p>or:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">fubar</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">foo</span> <span class="o">=</span> <span class="n">bar</span>
- <span class="n">baz</span> <span class="o">=</span> <span class="n">quux</span>
-<span class="p">}</span>
-</pre></div>
-</div>
-<p>Placing a ‘*’ after the closing bracket of a section name indicates
-that the section is <em>final</em>, meaning that if the same section appears
-within a later file specified in <strong>KRB5_CONFIG</strong>, it will be ignored.
-A subsection can be marked as final by placing a ‘*’ after either the
-tag name or the closing brace.</p>
-<p>The krb5.conf file can include other files using either of the
-following directives at the beginning of a line:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">include</span> <span class="n">FILENAME</span>
-<span class="n">includedir</span> <span class="n">DIRNAME</span>
-</pre></div>
-</div>
-<p><em>FILENAME</em> or <em>DIRNAME</em> should be an absolute path. The named file or
-directory must exist and be readable. Including a directory includes
-all files within the directory whose names consist solely of
-alphanumeric characters, dashes, or underscores. Starting in release
-1.15, files with names ending in “.conf” are also included, unless the
-name begins with “.”. Included profile files are syntactically
-independent of their parents, so each included file must begin with a
-section header. Starting in release 1.17, files are read in
-alphanumeric order; in previous releases, they may be read in any
-order.</p>
-<p>The krb5.conf file can specify that configuration should be obtained
-from a loadable module, rather than the file itself, using the
-following directive at the beginning of a line before any section
-headers:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">module</span> <span class="n">MODULEPATH</span><span class="p">:</span><span class="n">RESIDUAL</span>
-</pre></div>
-</div>
-<p><em>MODULEPATH</em> may be relative to the library path of the krb5
-installation, or it may be an absolute path. <em>RESIDUAL</em> is provided
-to the module at initialization time. If krb5.conf uses a module
-directive, <a class="reference internal" href="kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> should also use one if it exists.</p>
-</div>
-<div class="section" id="sections">
-<h2>Sections<a class="headerlink" href="#sections" title="Permalink to this headline">¶</a></h2>
-<p>The krb5.conf file may contain the following sections:</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="26%" />
-<col width="74%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><a class="reference internal" href="#libdefaults"><span class="std std-ref">[libdefaults]</span></a></td>
-<td>Settings used by the Kerberos V5 library</td>
-</tr>
-<tr class="row-even"><td><a class="reference internal" href="#realms"><span class="std std-ref">[realms]</span></a></td>
-<td>Realm-specific contact information and settings</td>
-</tr>
-<tr class="row-odd"><td><a class="reference internal" href="#domain-realm"><span class="std std-ref">[domain_realm]</span></a></td>
-<td>Maps server hostnames to Kerberos realms</td>
-</tr>
-<tr class="row-even"><td><a class="reference internal" href="#capaths"><span class="std std-ref">[capaths]</span></a></td>
-<td>Authentication paths for non-hierarchical cross-realm</td>
-</tr>
-<tr class="row-odd"><td><a class="reference internal" href="#appdefaults"><span class="std std-ref">[appdefaults]</span></a></td>
-<td>Settings used by some Kerberos V5 applications</td>
-</tr>
-<tr class="row-even"><td><a class="reference internal" href="#plugins"><span class="std std-ref">[plugins]</span></a></td>
-<td>Controls plugin module registration</td>
-</tr>
-</tbody>
-</table>
-<p>Additionally, krb5.conf may include any of the relations described in
-<a class="reference internal" href="kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>, but it is not a recommended practice.</p>
-<div class="section" id="libdefaults">
-<span id="id1"></span><h3>[libdefaults]<a class="headerlink" href="#libdefaults" title="Permalink to this headline">¶</a></h3>
-<p>The libdefaults section may contain any of the following relations:</p>
-<dl class="docutils">
-<dt><strong>allow_weak_crypto</strong></dt>
-<dd>If this flag is set to false, then weak encryption types (as noted
-in <a class="reference internal" href="kdc_conf.html#encryption-types"><span class="std std-ref">Encryption types</span></a> in <a class="reference internal" href="kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>) will be filtered
-out of the lists <strong>default_tgs_enctypes</strong>,
-<strong>default_tkt_enctypes</strong>, and <strong>permitted_enctypes</strong>. The default
-value for this tag is false.</dd>
-<dt><strong>canonicalize</strong></dt>
-<dd>If this flag is set to true, initial ticket requests to the KDC
-will request canonicalization of the client principal name, and
-answers with different client principals than the requested
-principal will be accepted. The default value is false.</dd>
-<dt><strong>ccache_type</strong></dt>
-<dd>This parameter determines the format of credential cache types
-created by <a class="reference internal" href="../../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a> or other programs. The default value
-is 4, which represents the most current format. Smaller values
-can be used for compatibility with very old implementations of
-Kerberos which interact with credential caches on the same host.</dd>
-<dt><strong>clockskew</strong></dt>
-<dd><p class="first">Sets the maximum allowable amount of clockskew in seconds that the
-library will tolerate before assuming that a Kerberos message is
-invalid. The default value is 300 seconds, or five minutes.</p>
-<p class="last">The clockskew setting is also used when evaluating ticket start
-and expiration times. For example, tickets that have reached
-their expiration time can still be used (and renewed if they are
-renewable tickets) if they have been expired for a shorter
-duration than the <strong>clockskew</strong> setting.</p>
-</dd>
-<dt><strong>default_ccache_name</strong></dt>
-<dd>This relation specifies the name of the default credential cache.
-The default is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFCCNAME</span></a>. This relation is subject to parameter
-expansion (see below). New in release 1.11.</dd>
-<dt><strong>default_client_keytab_name</strong></dt>
-<dd>This relation specifies the name of the default keytab for
-obtaining client credentials. The default is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFCKTNAME</span></a>. This
-relation is subject to parameter expansion (see below).
-New in release 1.11.</dd>
-<dt><strong>default_keytab_name</strong></dt>
-<dd>This relation specifies the default keytab name to be used by
-application servers such as sshd. The default is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a>. This
-relation is subject to parameter expansion (see below).</dd>
-<dt><strong>default_rcache_name</strong></dt>
-<dd>This relation specifies the name of the default replay cache.
-The default is <code class="docutils literal"><span class="pre">dfl:</span></code>. This relation is subject to parameter
-expansion (see below). New in release 1.18.</dd>
-<dt><strong>default_realm</strong></dt>
-<dd>Identifies the default Kerberos realm for the client. Set its
-value to your Kerberos realm. If this value is not set, then a
-realm must be specified with every Kerberos principal when
-invoking programs such as <a class="reference internal" href="../../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>.</dd>
-<dt><strong>default_tgs_enctypes</strong></dt>
-<dd><p class="first">Identifies the supported list of session key encryption types that
-the client should request when making a TGS-REQ, in order of
-preference from highest to lowest. The list may be delimited with
-commas or whitespace. See <a class="reference internal" href="kdc_conf.html#encryption-types"><span class="std std-ref">Encryption types</span></a> in
-<a class="reference internal" href="kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a list of the accepted values for this tag.
-Starting in release 1.18, the default value is the value of
-<strong>permitted_enctypes</strong>. For previous releases or if
-<strong>permitted_enctypes</strong> is not set, the default value is
-<code class="docutils literal"><span class="pre">aes256-cts-hmac-sha1-96</span> <span class="pre">aes128-cts-hmac-sha1-96</span> <span class="pre">aes256-cts-hmac-sha384-192</span> <span class="pre">aes128-cts-hmac-sha256-128</span> <span class="pre">des3-cbc-sha1</span> <span class="pre">arcfour-hmac-md5</span> <span class="pre">camellia256-cts-cmac</span> <span class="pre">camellia128-cts-cmac</span></code>.</p>
-<p class="last">Do not set this unless required for specific backward
-compatibility purposes; stale values of this setting can prevent
-clients from taking advantage of new stronger enctypes when the
-libraries are upgraded.</p>
-</dd>
-<dt><strong>default_tkt_enctypes</strong></dt>
-<dd><p class="first">Identifies the supported list of session key encryption types that
-the client should request when making an AS-REQ, in order of
-preference from highest to lowest. The format is the same as for
-default_tgs_enctypes. Starting in release 1.18, the default
-value is the value of <strong>permitted_enctypes</strong>. For previous
-releases or if <strong>permitted_enctypes</strong> is not set, the default
-value is <code class="docutils literal"><span class="pre">aes256-cts-hmac-sha1-96</span> <span class="pre">aes128-cts-hmac-sha1-96</span> <span class="pre">aes256-cts-hmac-sha384-192</span> <span class="pre">aes128-cts-hmac-sha256-128</span> <span class="pre">des3-cbc-sha1</span> <span class="pre">arcfour-hmac-md5</span> <span class="pre">camellia256-cts-cmac</span> <span class="pre">camellia128-cts-cmac</span></code>.</p>
-<p class="last">Do not set this unless required for specific backward
-compatibility purposes; stale values of this setting can prevent
-clients from taking advantage of new stronger enctypes when the
-libraries are upgraded.</p>
-</dd>
-<dt><strong>dns_canonicalize_hostname</strong></dt>
-<dd>Indicate whether name lookups will be used to canonicalize
-hostnames for use in service principal names. Setting this flag
-to false can improve security by reducing reliance on DNS, but
-means that short hostnames will not be canonicalized to
-fully-qualified hostnames. If this option is set to <code class="docutils literal"><span class="pre">fallback</span></code> (new
-in release 1.18), DNS canonicalization will only be performed the
-server hostname is not found with the original name when
-requesting credentials. The default value is true.</dd>
-<dt><strong>dns_lookup_kdc</strong></dt>
-<dd><p class="first">Indicate whether DNS SRV records should be used to locate the KDCs
-and other servers for a realm, if they are not listed in the
-krb5.conf information for the realm. (Note that the admin_server
-entry must be in the krb5.conf realm information in order to
-contact kadmind, because the DNS implementation for kadmin is
-incomplete.)</p>
-<p class="last">Enabling this option does open up a type of denial-of-service
-attack, if someone spoofs the DNS records and redirects you to
-another server. However, it’s no worse than a denial of service,
-because that fake KDC will be unable to decode anything you send
-it (besides the initial ticket request, which has no encrypted
-data), and anything the fake KDC sends will not be trusted without
-verification using some secret that it won’t know.</p>
-</dd>
-<dt><strong>dns_uri_lookup</strong></dt>
-<dd>Indicate whether DNS URI records should be used to locate the KDCs
-and other servers for a realm, if they are not listed in the
-krb5.conf information for the realm. SRV records are used as a
-fallback if no URI records were found. The default value is true.
-New in release 1.15.</dd>
-<dt><strong>enforce_ok_as_delegate</strong></dt>
-<dd>If this flag to true, GSSAPI credential delegation will be
-disabled when the <code class="docutils literal"><span class="pre">ok-as-delegate</span></code> flag is not set in the
-service ticket. If this flag is false, the <code class="docutils literal"><span class="pre">ok-as-delegate</span></code>
-ticket flag is only enforced when an application specifically
-requests enforcement. The default value is false.</dd>
-<dt><strong>err_fmt</strong></dt>
-<dd>This relation allows for custom error message formatting. If a
-value is set, error messages will be formatted by substituting a
-normal error message for %M and an error code for %C in the value.</dd>
-<dt><strong>extra_addresses</strong></dt>
-<dd>This allows a computer to use multiple local addresses, in order
-to allow Kerberos to work in a network that uses NATs while still
-using address-restricted tickets. The addresses should be in a
-comma-separated list. This option has no effect if
-<strong>noaddresses</strong> is true.</dd>
-<dt><strong>forwardable</strong></dt>
-<dd>If this flag is true, initial tickets will be forwardable by
-default, if allowed by the KDC. The default value is false.</dd>
-<dt><strong>ignore_acceptor_hostname</strong></dt>
-<dd>When accepting GSSAPI or krb5 security contexts for host-based
-service principals, ignore any hostname passed by the calling
-application, and allow clients to authenticate to any service
-principal in the keytab matching the service name and realm name
-(if given). This option can improve the administrative
-flexibility of server applications on multihomed hosts, but could
-compromise the security of virtual hosting environments. The
-default value is false. New in release 1.10.</dd>
-<dt><strong>k5login_authoritative</strong></dt>
-<dd>If this flag is true, principals must be listed in a local user’s
-k5login file to be granted login access, if a <a class="reference internal" href="../../user/user_config/k5login.html#k5login-5"><span class="std std-ref">.k5login</span></a>
-file exists. If this flag is false, a principal may still be
-granted login access through other mechanisms even if a k5login
-file exists but does not list the principal. The default value is
-true.</dd>
-<dt><strong>k5login_directory</strong></dt>
-<dd>If set, the library will look for a local user’s k5login file
-within the named directory, with a filename corresponding to the
-local username. If not set, the library will look for k5login
-files in the user’s home directory, with the filename .k5login.
-For security reasons, .k5login files must be owned by
-the local user or by root.</dd>
-<dt><strong>kcm_mach_service</strong></dt>
-<dd>On macOS only, determines the name of the bootstrap service used to
-contact the KCM daemon for the KCM credential cache type. If the
-value is <code class="docutils literal"><span class="pre">-</span></code>, Mach RPC will not be used to contact the KCM
-daemon. The default value is <code class="docutils literal"><span class="pre">org.h5l.kcm</span></code>.</dd>
-<dt><strong>kcm_socket</strong></dt>
-<dd>Determines the path to the Unix domain socket used to access the
-KCM daemon for the KCM credential cache type. If the value is
-<code class="docutils literal"><span class="pre">-</span></code>, Unix domain sockets will not be used to contact the KCM
-daemon. The default value is
-<code class="docutils literal"><span class="pre">/var/run/.heim_org.h5l.kcm-socket</span></code>.</dd>
-<dt><strong>kdc_default_options</strong></dt>
-<dd>Default KDC options (Xored for multiple values) when requesting
-initial tickets. By default it is set to 0x00000010
-(KDC_OPT_RENEWABLE_OK).</dd>
-<dt><strong>kdc_timesync</strong></dt>
-<dd>Accepted values for this relation are 1 or 0. If it is nonzero,
-client machines will compute the difference between their time and
-the time returned by the KDC in the timestamps in the tickets and
-use this value to correct for an inaccurate system clock when
-requesting service tickets or authenticating to services. This
-corrective factor is only used by the Kerberos library; it is not
-used to change the system clock. The default value is 1.</dd>
-<dt><strong>noaddresses</strong></dt>
-<dd>If this flag is true, requests for initial tickets will not be
-made with address restrictions set, allowing the tickets to be
-used across NATs. The default value is true.</dd>
-<dt><strong>permitted_enctypes</strong></dt>
-<dd>Identifies the encryption types that servers will permit for
-session keys and for ticket and authenticator encryption, ordered
-by preference from highest to lowest. Starting in release 1.18,
-this tag also acts as the default value for
-<strong>default_tgs_enctypes</strong> and <strong>default_tkt_enctypes</strong>. The
-default value for this tag is <code class="docutils literal"><span class="pre">aes256-cts-hmac-sha1-96</span> <span class="pre">aes128-cts-hmac-sha1-96</span> <span class="pre">aes256-cts-hmac-sha384-192</span> <span class="pre">aes128-cts-hmac-sha256-128</span> <span class="pre">des3-cbc-sha1</span> <span class="pre">arcfour-hmac-md5</span> <span class="pre">camellia256-cts-cmac</span> <span class="pre">camellia128-cts-cmac</span></code>.</dd>
-<dt><strong>plugin_base_dir</strong></dt>
-<dd>If set, determines the base directory where krb5 plugins are
-located. The default value is the <code class="docutils literal"><span class="pre">krb5/plugins</span></code> subdirectory
-of the krb5 library directory. This relation is subject to
-parameter expansion (see below) in release 1.17 and later.</dd>
-<dt><strong>preferred_preauth_types</strong></dt>
-<dd>This allows you to set the preferred preauthentication types which
-the client will attempt before others which may be advertised by a
-KDC. The default value for this setting is “17, 16, 15, 14”,
-which forces libkrb5 to attempt to use PKINIT if it is supported.</dd>
-<dt><strong>proxiable</strong></dt>
-<dd>If this flag is true, initial tickets will be proxiable by
-default, if allowed by the KDC. The default value is false.</dd>
-<dt><strong>qualify_shortname</strong></dt>
-<dd>If this string is set, it determines the domain suffix for
-single-component hostnames when DNS canonicalization is not used
-(either because <strong>dns_canonicalize_hostname</strong> is false or because
-forward canonicalization failed). The default value is the first
-search domain of the system’s DNS configuration. To disable
-qualification of shortnames, set this relation to the empty string
-with <code class="docutils literal"><span class="pre">qualify_shortname</span> <span class="pre">=</span> <span class="pre">""</span></code>. (New in release 1.18.)</dd>
-<dt><strong>rdns</strong></dt>
-<dd>If this flag is true, reverse name lookup will be used in addition
-to forward name lookup to canonicalizing hostnames for use in
-service principal names. If <strong>dns_canonicalize_hostname</strong> is set
-to false, this flag has no effect. The default value is true.</dd>
-<dt><strong>realm_try_domains</strong></dt>
-<dd>Indicate whether a host’s domain components should be used to
-determine the Kerberos realm of the host. The value of this
-variable is an integer: -1 means not to search, 0 means to try the
-host’s domain itself, 1 means to also try the domain’s immediate
-parent, and so forth. The library’s usual mechanism for locating
-Kerberos realms is used to determine whether a domain is a valid
-realm, which may involve consulting DNS if <strong>dns_lookup_kdc</strong> is
-set. The default is not to search domain components.</dd>
-<dt><strong>renew_lifetime</strong></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> string.) Sets the default renewable lifetime
-for initial ticket requests. The default value is 0.</dd>
-<dt><strong>spake_preauth_groups</strong></dt>
-<dd><p class="first">A whitespace or comma-separated list of words which specifies the
-groups allowed for SPAKE preauthentication. The possible values
-are:</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="27%" />
-<col width="73%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td>edwards25519</td>
-<td>Edwards25519 curve (<span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc7748.html"><strong>RFC 7748</strong></a>)</td>
-</tr>
-<tr class="row-even"><td>P-256</td>
-<td>NIST P-256 curve (<span class="target" id="index-1"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc5480.html"><strong>RFC 5480</strong></a>)</td>
-</tr>
-<tr class="row-odd"><td>P-384</td>
-<td>NIST P-384 curve (<span class="target" id="index-2"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc5480.html"><strong>RFC 5480</strong></a>)</td>
-</tr>
-<tr class="row-even"><td>P-521</td>
-<td>NIST P-521 curve (<span class="target" id="index-3"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc5480.html"><strong>RFC 5480</strong></a>)</td>
-</tr>
-</tbody>
-</table>
-<p class="last">The default value for the client is <code class="docutils literal"><span class="pre">edwards25519</span></code>. The default
-value for the KDC is empty. New in release 1.17.</p>
-</dd>
-<dt><strong>ticket_lifetime</strong></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> string.) Sets the default lifetime for initial
-ticket requests. The default value is 1 day.</dd>
-<dt><strong>udp_preference_limit</strong></dt>
-<dd>When sending a message to the KDC, the library will try using TCP
-before UDP if the size of the message is above
-<strong>udp_preference_limit</strong>. If the message is smaller than
-<strong>udp_preference_limit</strong>, then UDP will be tried before TCP.
-Regardless of the size, both protocols will be tried if the first
-attempt fails.</dd>
-<dt><strong>verify_ap_req_nofail</strong></dt>
-<dd>If this flag is true, then an attempt to verify initial
-credentials will fail if the client machine does not have a
-keytab. The default value is false.</dd>
-<dt><strong>client_aware_channel_bindings</strong></dt>
-<dd>If this flag is true, then all application protocol authentication
-requests will be flagged to indicate that the application supports
-channel bindings when operating over a secure channel. The
-default value is false.</dd>
-</dl>
-</div>
-<div class="section" id="realms">
-<span id="id2"></span><h3>[realms]<a class="headerlink" href="#realms" title="Permalink to this headline">¶</a></h3>
-<p>Each tag in the [realms] section of the file is the name of a Kerberos
-realm. The value of the tag is a subsection with relations that
-define the properties of that particular realm. For each realm, the
-following tags may be specified in the realm’s subsection:</p>
-<dl class="docutils">
-<dt><strong>admin_server</strong></dt>
-<dd>Identifies the host where the administration server is running.
-Typically, this is the primary Kerberos server. This tag must be
-given a value in order to communicate with the <a class="reference internal" href="../admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a>
-server for the realm.</dd>
-<dt><strong>auth_to_local</strong></dt>
-<dd><p class="first">This tag allows you to set a general rule for mapping principal
-names to local user names. It will be used if there is not an
-explicit mapping for the principal name that is being
-translated. The possible values are:</p>
-<dl class="docutils">
-<dt><strong>RULE:</strong><em>exp</em></dt>
-<dd><p class="first">The local name will be formulated from <em>exp</em>.</p>
-<p class="last">The format for <em>exp</em> is <strong>[</strong><em>n</em><strong>:</strong><em>string</em><strong>](</strong><em>regexp</em><strong>)s/</strong><em>pattern</em><strong>/</strong><em>replacement</em><strong>/g</strong>.
-The integer <em>n</em> indicates how many components the target
-principal should have. If this matches, then a string will be
-formed from <em>string</em>, substituting the realm of the principal
-for <code class="docutils literal"><span class="pre">$0</span></code> and the <em>n</em>’th component of the principal for
-<code class="docutils literal"><span class="pre">$n</span></code> (e.g., if the principal was <code class="docutils literal"><span class="pre">johndoe/admin</span></code> then
-<code class="docutils literal"><span class="pre">[2:$2$1foo]</span></code> would result in the string
-<code class="docutils literal"><span class="pre">adminjohndoefoo</span></code>). If this string matches <em>regexp</em>, then
-the <code class="docutils literal"><span class="pre">s//[g]</span></code> substitution command will be run over the
-string. The optional <strong>g</strong> will cause the substitution to be
-global over the <em>string</em>, instead of replacing only the first
-match in the <em>string</em>.</p>
-</dd>
-<dt><strong>DEFAULT</strong></dt>
-<dd>The principal name will be used as the local user name. If
-the principal has more than one component or is not in the
-default realm, this rule is not applicable and the conversion
-will fail.</dd>
-</dl>
-<p>For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>[realms]
- ATHENA.MIT.EDU = {
- auth_to_local = RULE:[2:$1](johndoe)s/^.*$/guest/
- auth_to_local = RULE:[2:$1;$2](^.*;admin$)s/;admin$//
- auth_to_local = RULE:[2:$2](^.*;root)s/^.*$/root/
- auth_to_local = DEFAULT
- }
-</pre></div>
-</div>
-<p class="last">would result in any principal without <code class="docutils literal"><span class="pre">root</span></code> or <code class="docutils literal"><span class="pre">admin</span></code> as the
-second component to be translated with the default rule. A
-principal with a second component of <code class="docutils literal"><span class="pre">admin</span></code> will become its
-first component. <code class="docutils literal"><span class="pre">root</span></code> will be used as the local name for any
-principal with a second component of <code class="docutils literal"><span class="pre">root</span></code>. The exception to
-these two rules are any principals <code class="docutils literal"><span class="pre">johndoe/*</span></code>, which will
-always get the local name <code class="docutils literal"><span class="pre">guest</span></code>.</p>
-</dd>
-<dt><strong>auth_to_local_names</strong></dt>
-<dd>This subsection allows you to set explicit mappings from principal
-names to local user names. The tag is the mapping name, and the
-value is the corresponding local user name.</dd>
-<dt><strong>default_domain</strong></dt>
-<dd>This tag specifies the domain used to expand hostnames when
-translating Kerberos 4 service principals to Kerberos 5 principals
-(for example, when converting <code class="docutils literal"><span class="pre">rcmd.hostname</span></code> to
-<code class="docutils literal"><span class="pre">host/hostname.domain</span></code>).</dd>
-<dt><strong>disable_encrypted_timestamp</strong></dt>
-<dd>If this flag is true, the client will not perform encrypted
-timestamp preauthentication if requested by the KDC. Setting this
-flag can help to prevent dictionary attacks by active attackers,
-if the realm’s KDCs support SPAKE preauthentication or if initial
-authentication always uses another mechanism or always uses FAST.
-This flag persists across client referrals during initial
-authentication. This flag does not prevent the KDC from offering
-encrypted timestamp. New in release 1.17.</dd>
-<dt><strong>http_anchors</strong></dt>
-<dd><p class="first">When KDCs and kpasswd servers are accessed through HTTPS proxies, this tag
-can be used to specify the location of the CA certificate which should be
-trusted to issue the certificate for a proxy server. If left unspecified,
-the system-wide default set of CA certificates is used.</p>
-<p>The syntax for values is similar to that of values for the
-<strong>pkinit_anchors</strong> tag:</p>
-<p><strong>FILE:</strong> <em>filename</em></p>
-<p><em>filename</em> is assumed to be the name of an OpenSSL-style ca-bundle file.</p>
-<p><strong>DIR:</strong> <em>dirname</em></p>
-<p><em>dirname</em> is assumed to be an directory which contains CA certificates.
-All files in the directory will be examined; if they contain certificates
-(in PEM format), they will be used.</p>
-<p><strong>ENV:</strong> <em>envvar</em></p>
-<p class="last"><em>envvar</em> specifies the name of an environment variable which has been set
-to a value conforming to one of the previous values. For example,
-<code class="docutils literal"><span class="pre">ENV:X509_PROXY_CA</span></code>, where environment variable <code class="docutils literal"><span class="pre">X509_PROXY_CA</span></code> has
-been set to <code class="docutils literal"><span class="pre">FILE:/tmp/my_proxy.pem</span></code>.</p>
-</dd>
-<dt><strong>kdc</strong></dt>
-<dd>The name or address of a host running a KDC for that realm. An
-optional port number, separated from the hostname by a colon, may
-be included. If the name or address contains colons (for example,
-if it is an IPv6 address), enclose it in square brackets to
-distinguish the colon from a port separator. For your computer to
-be able to communicate with the KDC for each realm, this tag must
-be given a value in each realm subsection in the configuration
-file, or there must be DNS SRV records specifying the KDCs.</dd>
-<dt><strong>kpasswd_server</strong></dt>
-<dd>Points to the server where all the password changes are performed.
-If there is no such entry, DNS will be queried (unless forbidden
-by <strong>dns_lookup_kdc</strong>). Finally, port 464 on the <strong>admin_server</strong>
-host will be tried.</dd>
-<dt><strong>master_kdc</strong></dt>
-<dd>The name for <strong>primary_kdc</strong> prior to release 1.19. Its value is
-used as a fallback if <strong>primary_kdc</strong> is not specified.</dd>
-<dt><strong>primary_kdc</strong></dt>
-<dd>Identifies the primary KDC(s). Currently, this tag is used in only
-one case: If an attempt to get credentials fails because of an
-invalid password, the client software will attempt to contact the
-primary KDC, in case the user’s password has just been changed, and
-the updated database has not been propagated to the replica
-servers yet. New in release 1.19.</dd>
-<dt><strong>v4_instance_convert</strong></dt>
-<dd>This subsection allows the administrator to configure exceptions
-to the <strong>default_domain</strong> mapping rule. It contains V4 instances
-(the tag name) which should be translated to some specific
-hostname (the tag value) as the second component in a Kerberos V5
-principal name.</dd>
-<dt><strong>v4_realm</strong></dt>
-<dd>This relation is used by the krb524 library routines when
-converting a V5 principal name to a V4 principal name. It is used
-when the V4 realm name and the V5 realm name are not the same, but
-still share the same principal names and passwords. The tag value
-is the Kerberos V4 realm name.</dd>
-</dl>
-</div>
-<div class="section" id="domain-realm">
-<span id="id3"></span><h3>[domain_realm]<a class="headerlink" href="#domain-realm" title="Permalink to this headline">¶</a></h3>
-<p>The [domain_realm] section provides a translation from hostnames to
-Kerberos realms. Each tag is a domain name, providing the mapping for
-that domain and all subdomains. If the tag begins with a period
-(<code class="docutils literal"><span class="pre">.</span></code>) then it applies only to subdomains. The Kerberos realm may be
-identified either in the <a class="reference internal" href="#realms">realms</a> section or using DNS SRV records.
-Tag names should be in lower case. For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">domain_realm</span><span class="p">]</span>
- <span class="n">crash</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="o">=</span> <span class="n">TEST</span><span class="o">.</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
- <span class="o">.</span><span class="n">dev</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="o">=</span> <span class="n">TEST</span><span class="o">.</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
- <span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="o">=</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-</pre></div>
-</div>
-<p>maps the host with the name <code class="docutils literal"><span class="pre">crash.mit.edu</span></code> into the
-<code class="docutils literal"><span class="pre">TEST.ATHENA.MIT.EDU</span></code> realm. The second entry maps all hosts under the
-domain <code class="docutils literal"><span class="pre">dev.mit.edu</span></code> into the <code class="docutils literal"><span class="pre">TEST.ATHENA.MIT.EDU</span></code> realm, but not
-the host with the name <code class="docutils literal"><span class="pre">dev.mit.edu</span></code>. That host is matched
-by the third entry, which maps the host <code class="docutils literal"><span class="pre">mit.edu</span></code> and all hosts
-under the domain <code class="docutils literal"><span class="pre">mit.edu</span></code> that do not match a preceding rule
-into the realm <code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code>.</p>
-<p>If no translation entry applies to a hostname used for a service
-principal for a service ticket request, the library will try to get a
-referral to the appropriate realm from the client realm’s KDC. If
-that does not succeed, the host’s realm is considered to be the
-hostname’s domain portion converted to uppercase, unless the
-<strong>realm_try_domains</strong> setting in [libdefaults] causes a different
-parent domain to be used.</p>
-</div>
-<div class="section" id="capaths">
-<span id="id4"></span><h3>[capaths]<a class="headerlink" href="#capaths" title="Permalink to this headline">¶</a></h3>
-<p>In order to perform direct (non-hierarchical) cross-realm
-authentication, configuration is needed to determine the
-authentication paths between realms.</p>
-<p>A client will use this section to find the authentication path between
-its realm and the realm of the server. The server will use this
-section to verify the authentication path used by the client, by
-checking the transited field of the received ticket.</p>
-<p>There is a tag for each participating client realm, and each tag has
-subtags for each of the server realms. The value of the subtags is an
-intermediate realm which may participate in the cross-realm
-authentication. The subtags may be repeated if there is more then one
-intermediate realm. A value of “.” means that the two realms share
-keys directly, and no intermediate realms should be allowed to
-participate.</p>
-<p>Only those entries which will be needed on the client or the server
-need to be present. A client needs a tag for its local realm with
-subtags for all the realms of servers it will need to authenticate to.
-A server needs a tag for each realm of the clients it will serve, with
-a subtag of the server realm.</p>
-<p>For example, <code class="docutils literal"><span class="pre">ANL.GOV</span></code>, <code class="docutils literal"><span class="pre">PNL.GOV</span></code>, and <code class="docutils literal"><span class="pre">NERSC.GOV</span></code> all wish to
-use the <code class="docutils literal"><span class="pre">ES.NET</span></code> realm as an intermediate realm. ANL has a sub
-realm of <code class="docutils literal"><span class="pre">TEST.ANL.GOV</span></code> which will authenticate with <code class="docutils literal"><span class="pre">NERSC.GOV</span></code>
-but not <code class="docutils literal"><span class="pre">PNL.GOV</span></code>. The [capaths] section for <code class="docutils literal"><span class="pre">ANL.GOV</span></code> systems
-would look like this:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">capaths</span><span class="p">]</span>
- <span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">TEST</span><span class="o">.</span><span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="o">.</span>
- <span class="n">PNL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ES</span><span class="o">.</span><span class="n">NET</span>
- <span class="n">NERSC</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ES</span><span class="o">.</span><span class="n">NET</span>
- <span class="n">ES</span><span class="o">.</span><span class="n">NET</span> <span class="o">=</span> <span class="o">.</span>
- <span class="p">}</span>
- <span class="n">TEST</span><span class="o">.</span><span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="o">.</span>
- <span class="p">}</span>
- <span class="n">PNL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ES</span><span class="o">.</span><span class="n">NET</span>
- <span class="p">}</span>
- <span class="n">NERSC</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ES</span><span class="o">.</span><span class="n">NET</span>
- <span class="p">}</span>
- <span class="n">ES</span><span class="o">.</span><span class="n">NET</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="o">.</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>The [capaths] section of the configuration file used on <code class="docutils literal"><span class="pre">NERSC.GOV</span></code>
-systems would look like this:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">capaths</span><span class="p">]</span>
- <span class="n">NERSC</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ES</span><span class="o">.</span><span class="n">NET</span>
- <span class="n">TEST</span><span class="o">.</span><span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ES</span><span class="o">.</span><span class="n">NET</span>
- <span class="n">TEST</span><span class="o">.</span><span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span>
- <span class="n">PNL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ES</span><span class="o">.</span><span class="n">NET</span>
- <span class="n">ES</span><span class="o">.</span><span class="n">NET</span> <span class="o">=</span> <span class="o">.</span>
- <span class="p">}</span>
- <span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">NERSC</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ES</span><span class="o">.</span><span class="n">NET</span>
- <span class="p">}</span>
- <span class="n">PNL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">NERSC</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ES</span><span class="o">.</span><span class="n">NET</span>
- <span class="p">}</span>
- <span class="n">ES</span><span class="o">.</span><span class="n">NET</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">NERSC</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="o">.</span>
- <span class="p">}</span>
- <span class="n">TEST</span><span class="o">.</span><span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">NERSC</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ANL</span><span class="o">.</span><span class="n">GOV</span>
- <span class="n">NERSC</span><span class="o">.</span><span class="n">GOV</span> <span class="o">=</span> <span class="n">ES</span><span class="o">.</span><span class="n">NET</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>When a subtag is used more than once within a tag, clients will use
-the order of values to determine the path. The order of values is not
-important to servers.</p>
-</div>
-<div class="section" id="appdefaults">
-<span id="id5"></span><h3>[appdefaults]<a class="headerlink" href="#appdefaults" title="Permalink to this headline">¶</a></h3>
-<p>Each tag in the [appdefaults] section names a Kerberos V5 application
-or an option that is used by some Kerberos V5 application[s]. The
-value of the tag defines the default behaviors for that application.</p>
-<p>For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">appdefaults</span><span class="p">]</span>
- <span class="n">telnet</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">option1</span> <span class="o">=</span> <span class="n">false</span>
- <span class="p">}</span>
- <span class="p">}</span>
- <span class="n">telnet</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">option1</span> <span class="o">=</span> <span class="n">true</span>
- <span class="n">option2</span> <span class="o">=</span> <span class="n">true</span>
- <span class="p">}</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">option2</span> <span class="o">=</span> <span class="n">false</span>
- <span class="p">}</span>
- <span class="n">option2</span> <span class="o">=</span> <span class="n">true</span>
-</pre></div>
-</div>
-<p>The above four ways of specifying the value of an option are shown in
-order of decreasing precedence. In this example, if telnet is running
-in the realm EXAMPLE.COM, it should, by default, have option1 and
-option2 set to true. However, a telnet program in the realm
-<code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code> should have <code class="docutils literal"><span class="pre">option1</span></code> set to false and
-<code class="docutils literal"><span class="pre">option2</span></code> set to true. Any other programs in ATHENA.MIT.EDU should
-have <code class="docutils literal"><span class="pre">option2</span></code> set to false by default. Any programs running in
-other realms should have <code class="docutils literal"><span class="pre">option2</span></code> set to true.</p>
-<p>The list of specifiable options for each application may be found in
-that application’s man pages. The application defaults specified here
-are overridden by those specified in the <a class="reference internal" href="#realms">realms</a> section.</p>
-</div>
-<div class="section" id="plugins">
-<span id="id6"></span><h3>[plugins]<a class="headerlink" href="#plugins" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="#pwqual">pwqual</a> interface</li>
-<li><a class="reference internal" href="#kadm5-hook">kadm5_hook</a> interface</li>
-<li><a class="reference internal" href="#clpreauth">clpreauth</a> and <a class="reference internal" href="#kdcpreauth">kdcpreauth</a> interfaces</li>
-</ul>
-</div></blockquote>
-<p>Tags in the [plugins] section can be used to register dynamic plugin
-modules and to turn modules on and off. Not every krb5 pluggable
-interface uses the [plugins] section; the ones that do are documented
-here.</p>
-<p>New in release 1.9.</p>
-<p>Each pluggable interface corresponds to a subsection of [plugins].
-All subsections support the same tags:</p>
-<dl class="docutils">
-<dt><strong>disable</strong></dt>
-<dd>This tag may have multiple values. If there are values for this
-tag, then the named modules will be disabled for the pluggable
-interface.</dd>
-<dt><strong>enable_only</strong></dt>
-<dd>This tag may have multiple values. If there are values for this
-tag, then only the named modules will be enabled for the pluggable
-interface.</dd>
-<dt><strong>module</strong></dt>
-<dd>This tag may have multiple values. Each value is a string of the
-form <code class="docutils literal"><span class="pre">modulename:pathname</span></code>, which causes the shared object
-located at <em>pathname</em> to be registered as a dynamic module named
-<em>modulename</em> for the pluggable interface. If <em>pathname</em> is not an
-absolute path, it will be treated as relative to the
-<strong>plugin_base_dir</strong> value from <a class="reference internal" href="#libdefaults"><span class="std std-ref">[libdefaults]</span></a>.</dd>
-</dl>
-<p>For pluggable interfaces where module order matters, modules
-registered with a <strong>module</strong> tag normally come first, in the order
-they are registered, followed by built-in modules in the order they
-are documented below. If <strong>enable_only</strong> tags are used, then the
-order of those tags overrides the normal module order.</p>
-<p>The following subsections are currently supported within the [plugins]
-section:</p>
-<div class="section" id="ccselect-interface">
-<span id="ccselect"></span><h4>ccselect interface<a class="headerlink" href="#ccselect-interface" title="Permalink to this headline">¶</a></h4>
-<p>The ccselect subsection controls modules for credential cache
-selection within a cache collection. In addition to any registered
-dynamic modules, the following built-in modules exist (and may be
-disabled with the disable tag):</p>
-<dl class="docutils">
-<dt><strong>k5identity</strong></dt>
-<dd>Uses a .k5identity file in the user’s home directory to select a
-client principal</dd>
-<dt><strong>realm</strong></dt>
-<dd>Uses the service realm to guess an appropriate cache from the
-collection</dd>
-<dt><strong>hostname</strong></dt>
-<dd>If the service principal is host-based, uses the service hostname
-to guess an appropriate cache from the collection</dd>
-</dl>
-</div>
-<div class="section" id="pwqual-interface">
-<span id="pwqual"></span><h4>pwqual interface<a class="headerlink" href="#pwqual-interface" title="Permalink to this headline">¶</a></h4>
-<p>The pwqual subsection controls modules for the password quality
-interface, which is used to reject weak passwords when passwords are
-changed. The following built-in modules exist for this interface:</p>
-<dl class="docutils">
-<dt><strong>dict</strong></dt>
-<dd>Checks against the realm dictionary file</dd>
-<dt><strong>empty</strong></dt>
-<dd>Rejects empty passwords</dd>
-<dt><strong>hesiod</strong></dt>
-<dd>Checks against user information stored in Hesiod (only if Kerberos
-was built with Hesiod support)</dd>
-<dt><strong>princ</strong></dt>
-<dd>Checks against components of the principal name</dd>
-</dl>
-</div>
-<div class="section" id="kadm5-hook-interface">
-<span id="kadm5-hook"></span><h4>kadm5_hook interface<a class="headerlink" href="#kadm5-hook-interface" title="Permalink to this headline">¶</a></h4>
-<p>The kadm5_hook interface provides plugins with information on
-principal creation, modification, password changes and deletion. This
-interface can be used to write a plugin to synchronize MIT Kerberos
-with another database such as Active Directory. No plugins are built
-in for this interface.</p>
-</div>
-<div class="section" id="kadm5-auth-interface">
-<span id="kadm5-auth"></span><h4>kadm5_auth interface<a class="headerlink" href="#kadm5-auth-interface" title="Permalink to this headline">¶</a></h4>
-<p>The kadm5_auth section (introduced in release 1.16) controls modules
-for the kadmin authorization interface, which determines whether a
-client principal is allowed to perform a kadmin operation. The
-following built-in modules exist for this interface:</p>
-<dl class="docutils">
-<dt><strong>acl</strong></dt>
-<dd>This module reads the <a class="reference internal" href="kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a> file, and authorizes
-operations which are allowed according to the rules in the file.</dd>
-<dt><strong>self</strong></dt>
-<dd>This module authorizes self-service operations including password
-changes, creation of new random keys, fetching the client’s
-principal record or string attributes, and fetching the policy
-record associated with the client principal.</dd>
-</dl>
-</div>
-<div class="section" id="clpreauth-and-kdcpreauth-interfaces">
-<span id="kdcpreauth"></span><span id="clpreauth"></span><h4>clpreauth and kdcpreauth interfaces<a class="headerlink" href="#clpreauth-and-kdcpreauth-interfaces" title="Permalink to this headline">¶</a></h4>
-<p>The clpreauth and kdcpreauth interfaces allow plugin modules to
-provide client and KDC preauthentication mechanisms. The following
-built-in modules exist for these interfaces:</p>
-<dl class="docutils">
-<dt><strong>pkinit</strong></dt>
-<dd>This module implements the PKINIT preauthentication mechanism.</dd>
-<dt><strong>encrypted_challenge</strong></dt>
-<dd>This module implements the encrypted challenge FAST factor.</dd>
-<dt><strong>encrypted_timestamp</strong></dt>
-<dd>This module implements the encrypted timestamp mechanism.</dd>
-</dl>
-</div>
-<div class="section" id="hostrealm-interface">
-<span id="hostrealm"></span><h4>hostrealm interface<a class="headerlink" href="#hostrealm-interface" title="Permalink to this headline">¶</a></h4>
-<p>The hostrealm section (introduced in release 1.12) controls modules
-for the host-to-realm interface, which affects the local mapping of
-hostnames to realm names and the choice of default realm. The following
-built-in modules exist for this interface:</p>
-<dl class="docutils">
-<dt><strong>profile</strong></dt>
-<dd>This module consults the [domain_realm] section of the profile for
-authoritative host-to-realm mappings, and the <strong>default_realm</strong>
-variable for the default realm.</dd>
-<dt><strong>dns</strong></dt>
-<dd>This module looks for DNS records for fallback host-to-realm
-mappings and the default realm. It only operates if the
-<strong>dns_lookup_realm</strong> variable is set to true.</dd>
-<dt><strong>domain</strong></dt>
-<dd>This module applies heuristics for fallback host-to-realm
-mappings. It implements the <strong>realm_try_domains</strong> variable, and
-uses the uppercased parent domain of the hostname if that does not
-produce a result.</dd>
-</dl>
-</div>
-<div class="section" id="localauth-interface">
-<span id="localauth"></span><h4>localauth interface<a class="headerlink" href="#localauth-interface" title="Permalink to this headline">¶</a></h4>
-<p>The localauth section (introduced in release 1.12) controls modules
-for the local authorization interface, which affects the relationship
-between Kerberos principals and local system accounts. The following
-built-in modules exist for this interface:</p>
-<dl class="docutils">
-<dt><strong>default</strong></dt>
-<dd>This module implements the <strong>DEFAULT</strong> type for <strong>auth_to_local</strong>
-values.</dd>
-<dt><strong>rule</strong></dt>
-<dd>This module implements the <strong>RULE</strong> type for <strong>auth_to_local</strong>
-values.</dd>
-<dt><strong>names</strong></dt>
-<dd>This module looks for an <strong>auth_to_local_names</strong> mapping for the
-principal name.</dd>
-<dt><strong>auth_to_local</strong></dt>
-<dd>This module processes <strong>auth_to_local</strong> values in the default
-realm’s section, and applies the default method if no
-<strong>auth_to_local</strong> values exist.</dd>
-<dt><strong>k5login</strong></dt>
-<dd>This module authorizes a principal to a local account according to
-the account’s <a class="reference internal" href="../../user/user_config/k5login.html#k5login-5"><span class="std std-ref">.k5login</span></a> file.</dd>
-<dt><strong>an2ln</strong></dt>
-<dd>This module authorizes a principal to a local account if the
-principal name maps to the local account name.</dd>
-</dl>
-</div>
-<div class="section" id="certauth-interface">
-<span id="certauth"></span><h4>certauth interface<a class="headerlink" href="#certauth-interface" title="Permalink to this headline">¶</a></h4>
-<p>The certauth section (introduced in release 1.16) controls modules for
-the certificate authorization interface, which determines whether a
-certificate is allowed to preauthenticate a user via PKINIT. The
-following built-in modules exist for this interface:</p>
-<dl class="docutils">
-<dt><strong>pkinit_san</strong></dt>
-<dd>This module authorizes the certificate if it contains a PKINIT
-Subject Alternative Name for the requested client principal, or a
-Microsoft UPN SAN matching the principal if <strong>pkinit_allow_upn</strong>
-is set to true for the realm.</dd>
-<dt><strong>pkinit_eku</strong></dt>
-<dd>This module rejects the certificate if it does not contain an
-Extended Key Usage attribute consistent with the
-<strong>pkinit_eku_checking</strong> value for the realm.</dd>
-<dt><strong>dbmatch</strong></dt>
-<dd>This module authorizes or rejects the certificate according to
-whether it matches the <strong>pkinit_cert_match</strong> string attribute on
-the client principal, if that attribute is present.</dd>
-</dl>
-</div>
-</div>
-</div>
-<div class="section" id="pkinit-options">
-<h2>PKINIT options<a class="headerlink" href="#pkinit-options" title="Permalink to this headline">¶</a></h2>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The following are PKINIT-specific options. These values may
-be specified in [libdefaults] as global defaults, or within
-a realm-specific subsection of [libdefaults], or may be
-specified as realm-specific values in the [realms] section.
-A realm-specific value overrides, not adds to, a generic
-[libdefaults] specification. The search order is:</p>
-</div>
-<ol class="arabic">
-<li><p class="first">realm-specific subsection of [libdefaults]:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">libdefaults</span><span class="p">]</span>
- <span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">pkinit_anchors</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">example</span><span class="o">.</span><span class="n">com</span><span class="o">.</span><span class="n">crt</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-</li>
-<li><p class="first">realm-specific value in the [realms] section:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">OTHERREALM</span><span class="o">.</span><span class="n">ORG</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">pkinit_anchors</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">otherrealm</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">crt</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-</li>
-<li><p class="first">generic value in the [libdefaults] section:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">libdefaults</span><span class="p">]</span>
- <span class="n">pkinit_anchors</span> <span class="o">=</span> <span class="n">DIR</span><span class="p">:</span><span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">generic_trusted_cas</span><span class="o">/</span>
-</pre></div>
-</div>
-</li>
-</ol>
-<div class="section" id="specifying-pkinit-identity-information">
-<span id="pkinit-identity"></span><h3>Specifying PKINIT identity information<a class="headerlink" href="#specifying-pkinit-identity-information" title="Permalink to this headline">¶</a></h3>
-<p>The syntax for specifying Public Key identity, trust, and revocation
-information for PKINIT is as follows:</p>
-<dl class="docutils">
-<dt><strong>FILE:</strong><em>filename</em>[<strong>,</strong><em>keyfilename</em>]</dt>
-<dd><p class="first">This option has context-specific behavior.</p>
-<p>In <strong>pkinit_identity</strong> or <strong>pkinit_identities</strong>, <em>filename</em>
-specifies the name of a PEM-format file containing the user’s
-certificate. If <em>keyfilename</em> is not specified, the user’s
-private key is expected to be in <em>filename</em> as well. Otherwise,
-<em>keyfilename</em> is the name of the file containing the private key.</p>
-<p class="last">In <strong>pkinit_anchors</strong> or <strong>pkinit_pool</strong>, <em>filename</em> is assumed to
-be the name of an OpenSSL-style ca-bundle file.</p>
-</dd>
-<dt><strong>DIR:</strong><em>dirname</em></dt>
-<dd><p class="first">This option has context-specific behavior.</p>
-<p>In <strong>pkinit_identity</strong> or <strong>pkinit_identities</strong>, <em>dirname</em>
-specifies a directory with files named <code class="docutils literal"><span class="pre">*.crt</span></code> and <code class="docutils literal"><span class="pre">*.key</span></code>
-where the first part of the file name is the same for matching
-pairs of certificate and private key files. When a file with a
-name ending with <code class="docutils literal"><span class="pre">.crt</span></code> is found, a matching file ending with
-<code class="docutils literal"><span class="pre">.key</span></code> is assumed to contain the private key. If no such file
-is found, then the certificate in the <code class="docutils literal"><span class="pre">.crt</span></code> is not used.</p>
-<p>In <strong>pkinit_anchors</strong> or <strong>pkinit_pool</strong>, <em>dirname</em> is assumed to
-be an OpenSSL-style hashed CA directory where each CA cert is
-stored in a file named <code class="docutils literal"><span class="pre">hash-of-ca-cert.#</span></code>. This infrastructure
-is encouraged, but all files in the directory will be examined and
-if they contain certificates (in PEM format), they will be used.</p>
-<p class="last">In <strong>pkinit_revoke</strong>, <em>dirname</em> is assumed to be an OpenSSL-style
-hashed CA directory where each revocation list is stored in a file
-named <code class="docutils literal"><span class="pre">hash-of-ca-cert.r#</span></code>. This infrastructure is encouraged,
-but all files in the directory will be examined and if they
-contain a revocation list (in PEM format), they will be used.</p>
-</dd>
-<dt><strong>PKCS12:</strong><em>filename</em></dt>
-<dd><em>filename</em> is the name of a PKCS #12 format file, containing the
-user’s certificate and private key.</dd>
-<dt><strong>PKCS11:</strong>[<strong>module_name=</strong>]<em>modname</em>[<strong>:slotid=</strong><em>slot-id</em>][<strong>:token=</strong><em>token-label</em>][<strong>:certid=</strong><em>cert-id</em>][<strong>:certlabel=</strong><em>cert-label</em>]</dt>
-<dd>All keyword/values are optional. <em>modname</em> specifies the location
-of a library implementing PKCS #11. If a value is encountered
-with no keyword, it is assumed to be the <em>modname</em>. If no
-module-name is specified, the default is <code class="docutils literal"><span class="pre">opensc-pkcs11.so</span></code>.
-<code class="docutils literal"><span class="pre">slotid=</span></code> and/or <code class="docutils literal"><span class="pre">token=</span></code> may be specified to force the use of
-a particular smard card reader or token if there is more than one
-available. <code class="docutils literal"><span class="pre">certid=</span></code> and/or <code class="docutils literal"><span class="pre">certlabel=</span></code> may be specified to
-force the selection of a particular certificate on the device.
-See the <strong>pkinit_cert_match</strong> configuration option for more ways
-to select a particular certificate to use for PKINIT.</dd>
-<dt><strong>ENV:</strong><em>envvar</em></dt>
-<dd><em>envvar</em> specifies the name of an environment variable which has
-been set to a value conforming to one of the previous values. For
-example, <code class="docutils literal"><span class="pre">ENV:X509_PROXY</span></code>, where environment variable
-<code class="docutils literal"><span class="pre">X509_PROXY</span></code> has been set to <code class="docutils literal"><span class="pre">FILE:/tmp/my_proxy.pem</span></code>.</dd>
-</dl>
-</div>
-<div class="section" id="pkinit-krb5-conf-options">
-<h3>PKINIT krb5.conf options<a class="headerlink" href="#pkinit-krb5-conf-options" title="Permalink to this headline">¶</a></h3>
-<dl class="docutils">
-<dt><strong>pkinit_anchors</strong></dt>
-<dd>Specifies the location of trusted anchor (root) certificates which
-the client trusts to sign KDC certificates. This option may be
-specified multiple times. These values from the config file are
-not used if the user specifies X509_anchors on the command line.</dd>
-<dt><strong>pkinit_cert_match</strong></dt>
-<dd><p class="first">Specifies matching rules that the client certificate must match
-before it is used to attempt PKINIT authentication. If a user has
-multiple certificates available (on a smart card, or via other
-media), there must be exactly one certificate chosen before
-attempting PKINIT authentication. This option may be specified
-multiple times. All the available certificates are checked
-against each rule in order until there is a match of exactly one
-certificate.</p>
-<p>The Subject and Issuer comparison strings are the <span class="target" id="index-4"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc2253.html"><strong>RFC 2253</strong></a>
-string representations from the certificate Subject DN and Issuer
-DN values.</p>
-<p>The syntax of the matching rules is:</p>
-<blockquote>
-<div>[<em>relation-operator</em>]<em>component-rule</em> …</div></blockquote>
-<p>where:</p>
-<dl class="docutils">
-<dt><em>relation-operator</em></dt>
-<dd>can be either <code class="docutils literal"><span class="pre">&&</span></code>, meaning all component rules must match,
-or <code class="docutils literal"><span class="pre">||</span></code>, meaning only one component rule must match. The
-default is <code class="docutils literal"><span class="pre">&&</span></code>.</dd>
-<dt><em>component-rule</em></dt>
-<dd><p class="first">can be one of the following. Note that there is no
-punctuation or whitespace between component rules.</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line"><strong><SUBJECT></strong><em>regular-expression</em></div>
-<div class="line"><strong><ISSUER></strong><em>regular-expression</em></div>
-<div class="line"><strong><SAN></strong><em>regular-expression</em></div>
-<div class="line"><strong><EKU></strong><em>extended-key-usage-list</em></div>
-<div class="line"><strong><KU></strong><em>key-usage-list</em></div>
-</div>
-</div></blockquote>
-<p><em>extended-key-usage-list</em> is a comma-separated list of
-required Extended Key Usage values. All values in the list
-must be present in the certificate. Extended Key Usage values
-can be:</p>
-<ul class="simple">
-<li>pkinit</li>
-<li>msScLogin</li>
-<li>clientAuth</li>
-<li>emailProtection</li>
-</ul>
-<p><em>key-usage-list</em> is a comma-separated list of required Key
-Usage values. All values in the list must be present in the
-certificate. Key Usage values can be:</p>
-<ul class="last simple">
-<li>digitalSignature</li>
-<li>keyEncipherment</li>
-</ul>
-</dd>
-</dl>
-<p>Examples:</p>
-<div class="last highlight-default"><div class="highlight"><pre><span></span><span class="n">pkinit_cert_match</span> <span class="o">=</span> <span class="o">||<</span><span class="n">SUBJECT</span><span class="o">>.*</span><span class="n">DoE</span><span class="o">.*<</span><span class="n">SAN</span><span class="o">>.*</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">pkinit_cert_match</span> <span class="o">=</span> <span class="o">&&<</span><span class="n">EKU</span><span class="o">></span><span class="n">msScLogin</span><span class="p">,</span><span class="n">clientAuth</span><span class="o"><</span><span class="n">ISSUER</span><span class="o">>.*</span><span class="n">DoE</span><span class="o">.*</span>
-<span class="n">pkinit_cert_match</span> <span class="o">=</span> <span class="o"><</span><span class="n">EKU</span><span class="o">></span><span class="n">msScLogin</span><span class="p">,</span><span class="n">clientAuth</span><span class="o"><</span><span class="n">KU</span><span class="o">></span><span class="n">digitalSignature</span>
-</pre></div>
-</div>
-</dd>
-<dt><strong>pkinit_eku_checking</strong></dt>
-<dd><p class="first">This option specifies what Extended Key Usage value the KDC
-certificate presented to the client must contain. (Note that if
-the KDC certificate has the pkinit SubjectAlternativeName encoded
-as the Kerberos TGS name, EKU checking is not necessary since the
-issuing CA has certified this as a KDC certificate.) The values
-recognized in the krb5.conf file are:</p>
-<dl class="last docutils">
-<dt><strong>kpKDC</strong></dt>
-<dd>This is the default value and specifies that the KDC must have
-the id-pkinit-KPKdc EKU as defined in <span class="target" id="index-5"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4556.html"><strong>RFC 4556</strong></a>.</dd>
-<dt><strong>kpServerAuth</strong></dt>
-<dd>If <strong>kpServerAuth</strong> is specified, a KDC certificate with the
-id-kp-serverAuth EKU will be accepted. This key usage value
-is used in most commercially issued server certificates.</dd>
-<dt><strong>none</strong></dt>
-<dd>If <strong>none</strong> is specified, then the KDC certificate will not be
-checked to verify it has an acceptable EKU. The use of this
-option is not recommended.</dd>
-</dl>
-</dd>
-<dt><strong>pkinit_dh_min_bits</strong></dt>
-<dd>Specifies the size of the Diffie-Hellman key the client will
-attempt to use. The acceptable values are 1024, 2048, and 4096.
-The default is 2048.</dd>
-<dt><strong>pkinit_identities</strong></dt>
-<dd>Specifies the location(s) to be used to find the user’s X.509
-identity information. If this option is specified multiple times,
-each value is attempted in order until certificates are found.
-Note that these values are not used if the user specifies
-<strong>X509_user_identity</strong> on the command line.</dd>
-<dt><strong>pkinit_kdc_hostname</strong></dt>
-<dd>The presence of this option indicates that the client is willing
-to accept a KDC certificate with a dNSName SAN (Subject
-Alternative Name) rather than requiring the id-pkinit-san as
-defined in <span class="target" id="index-6"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4556.html"><strong>RFC 4556</strong></a>. This option may be specified multiple
-times. Its value should contain the acceptable hostname for the
-KDC (as contained in its certificate).</dd>
-<dt><strong>pkinit_pool</strong></dt>
-<dd>Specifies the location of intermediate certificates which may be
-used by the client to complete the trust chain between a KDC
-certificate and a trusted anchor. This option may be specified
-multiple times.</dd>
-<dt><strong>pkinit_require_crl_checking</strong></dt>
-<dd><p class="first">The default certificate verification process will always check the
-available revocation information to see if a certificate has been
-revoked. If a match is found for the certificate in a CRL,
-verification fails. If the certificate being verified is not
-listed in a CRL, or there is no CRL present for its issuing CA,
-and <strong>pkinit_require_crl_checking</strong> is false, then verification
-succeeds.</p>
-<p>However, if <strong>pkinit_require_crl_checking</strong> is true and there is
-no CRL information available for the issuing CA, then verification
-fails.</p>
-<p class="last"><strong>pkinit_require_crl_checking</strong> should be set to true if the
-policy is such that up-to-date CRLs must be present for every CA.</p>
-</dd>
-<dt><strong>pkinit_revoke</strong></dt>
-<dd>Specifies the location of Certificate Revocation List (CRL)
-information to be used by the client when verifying the validity
-of the KDC certificate presented. This option may be specified
-multiple times.</dd>
-</dl>
-</div>
-</div>
-<div class="section" id="parameter-expansion">
-<span id="id7"></span><h2>Parameter expansion<a class="headerlink" href="#parameter-expansion" title="Permalink to this headline">¶</a></h2>
-<p>Starting with release 1.11, several variables, such as
-<strong>default_keytab_name</strong>, allow parameters to be expanded.
-Valid parameters are:</p>
-<blockquote>
-<div><table border="1" class="docutils">
-<colgroup>
-<col width="25%" />
-<col width="75%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td>%{TEMP}</td>
-<td>Temporary directory</td>
-</tr>
-<tr class="row-even"><td>%{uid}</td>
-<td>Unix real UID or Windows SID</td>
-</tr>
-<tr class="row-odd"><td>%{euid}</td>
-<td>Unix effective user ID or Windows SID</td>
-</tr>
-<tr class="row-even"><td>%{USERID}</td>
-<td>Same as %{uid}</td>
-</tr>
-<tr class="row-odd"><td>%{null}</td>
-<td>Empty string</td>
-</tr>
-<tr class="row-even"><td>%{LIBDIR}</td>
-<td>Installation library directory</td>
-</tr>
-<tr class="row-odd"><td>%{BINDIR}</td>
-<td>Installation binary directory</td>
-</tr>
-<tr class="row-even"><td>%{SBINDIR}</td>
-<td>Installation admin binary directory</td>
-</tr>
-<tr class="row-odd"><td>%{username}</td>
-<td>(Unix) Username of effective user ID</td>
-</tr>
-<tr class="row-even"><td>%{APPDATA}</td>
-<td>(Windows) Roaming application data for current user</td>
-</tr>
-<tr class="row-odd"><td>%{COMMON_APPDATA}</td>
-<td>(Windows) Application data for all users</td>
-</tr>
-<tr class="row-even"><td>%{LOCAL_APPDATA}</td>
-<td>(Windows) Local application data for current user</td>
-</tr>
-<tr class="row-odd"><td>%{SYSTEM}</td>
-<td>(Windows) Windows system folder</td>
-</tr>
-<tr class="row-even"><td>%{WINDOWS}</td>
-<td>(Windows) Windows folder</td>
-</tr>
-<tr class="row-odd"><td>%{USERCONFIG}</td>
-<td>(Windows) Per-user MIT krb5 config file directory</td>
-</tr>
-<tr class="row-even"><td>%{COMMONCONFIG}</td>
-<td>(Windows) Common MIT krb5 config file directory</td>
-</tr>
-</tbody>
-</table>
-</div></blockquote>
-</div>
-<div class="section" id="sample-krb5-conf-file">
-<h2>Sample krb5.conf file<a class="headerlink" href="#sample-krb5-conf-file" title="Permalink to this headline">¶</a></h2>
-<p>Here is an example of a generic krb5.conf file:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">libdefaults</span><span class="p">]</span>
- <span class="n">default_realm</span> <span class="o">=</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
- <span class="n">dns_lookup_kdc</span> <span class="o">=</span> <span class="n">true</span>
- <span class="n">dns_lookup_realm</span> <span class="o">=</span> <span class="n">false</span>
-
-<span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">-</span><span class="mf">2.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="n">admin_server</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="n">primary_kdc</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="p">}</span>
- <span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span>
- <span class="n">admin_server</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span>
- <span class="p">}</span>
-
-<span class="p">[</span><span class="n">domain_realm</span><span class="p">]</span>
- <span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="o">=</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-
-<span class="p">[</span><span class="n">capaths</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span> <span class="o">=</span> <span class="o">.</span>
- <span class="p">}</span>
- <span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="o">.</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="files">
-<h2>FILES<a class="headerlink" href="#files" title="Permalink to this headline">¶</a></h2>
-<p><code class="docutils literal"><span class="pre">/etc/krb5.conf</span></code></p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p>syslog(3)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5.conf</a><ul>
-<li><a class="reference internal" href="#structure">Structure</a></li>
-<li><a class="reference internal" href="#sections">Sections</a><ul>
-<li><a class="reference internal" href="#libdefaults">[libdefaults]</a></li>
-<li><a class="reference internal" href="#realms">[realms]</a></li>
-<li><a class="reference internal" href="#domain-realm">[domain_realm]</a></li>
-<li><a class="reference internal" href="#capaths">[capaths]</a></li>
-<li><a class="reference internal" href="#appdefaults">[appdefaults]</a></li>
-<li><a class="reference internal" href="#plugins">[plugins]</a><ul>
-<li><a class="reference internal" href="#ccselect-interface">ccselect interface</a></li>
-<li><a class="reference internal" href="#pwqual-interface">pwqual interface</a></li>
-<li><a class="reference internal" href="#kadm5-hook-interface">kadm5_hook interface</a></li>
-<li><a class="reference internal" href="#kadm5-auth-interface">kadm5_auth interface</a></li>
-<li><a class="reference internal" href="#clpreauth-and-kdcpreauth-interfaces">clpreauth and kdcpreauth interfaces</a></li>
-<li><a class="reference internal" href="#hostrealm-interface">hostrealm interface</a></li>
-<li><a class="reference internal" href="#localauth-interface">localauth interface</a></li>
-<li><a class="reference internal" href="#certauth-interface">certauth interface</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li><a class="reference internal" href="#pkinit-options">PKINIT options</a><ul>
-<li><a class="reference internal" href="#specifying-pkinit-identity-information">Specifying PKINIT identity information</a></li>
-<li><a class="reference internal" href="#pkinit-krb5-conf-options">PKINIT krb5.conf options</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#parameter-expansion">Parameter expansion</a></li>
-<li><a class="reference internal" href="#sample-krb5-conf-file">Sample krb5.conf file</a></li>
-<li><a class="reference internal" href="#files">FILES</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../install.html">Installation guide</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">Configuration Files</a><ul class="current">
-<li class="toctree-l3 current"><a class="current reference internal" href="#">krb5.conf</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kdc_conf.html">kdc.conf</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kadm5_acl.html">kadm5.acl</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="Configuration Files"
- >previous</a> |
- <a href="kdc_conf.html" title="kdc.conf"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5.conf">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Configuring Kerberos with OpenLDAP back-end — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Application servers" href="appl_servers.html" />
- <link rel="prev" title="Account lockout" href="lockout.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="lockout.html" title="Account lockout"
- accesskey="P">previous</a> |
- <a href="appl_servers.html" title="Application servers"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Configuring Kerberos with OpenLDAP back-end">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="configuring-kerberos-with-openldap-back-end">
-<span id="conf-ldap"></span><h1>Configuring Kerberos with OpenLDAP back-end<a class="headerlink" href="#configuring-kerberos-with-openldap-back-end" title="Permalink to this headline">¶</a></h1>
-<blockquote>
-<div><ol class="arabic">
-<li><p class="first">Make sure the LDAP server is using local authentication
-(<code class="docutils literal"><span class="pre">ldapi://</span></code>) or TLS (<code class="docutils literal"><span class="pre">ldaps</span></code>). See
-<a class="reference external" href="https://www.openldap.org/doc/admin/tls.html">https://www.openldap.org/doc/admin/tls.html</a> for instructions on
-configuring TLS support in OpenLDAP.</p>
-</li>
-<li><p class="first">Add the Kerberos schema file to the LDAP Server using the OpenLDAP
-LDIF file from the krb5 source directory
-(<code class="docutils literal"><span class="pre">src/plugins/kdb/ldap/libkdb_ldap/kerberos.openldap.ldif</span></code>).
-The following example uses local authentication:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">ldapadd</span> <span class="o">-</span><span class="n">Y</span> <span class="n">EXTERNAL</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldapi</span><span class="p">:</span><span class="o">///</span> <span class="o">-</span><span class="n">f</span> <span class="o">/</span><span class="n">path</span><span class="o">/</span><span class="n">to</span><span class="o">/</span><span class="n">kerberos</span><span class="o">.</span><span class="n">openldap</span><span class="o">.</span><span class="n">ldif</span>
-</pre></div>
-</div>
-</li>
-<li><p class="first">Choose DNs for the <a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> and <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> servers
-to bind to the LDAP server, and create them if necessary. Specify
-these DNs with the <strong>ldap_kdc_dn</strong> and <strong>ldap_kadmind_dn</strong>
-directives in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>. The kadmind DN will also be
-used for administrative commands such as <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>.</p>
-<p>Alternatively, you may configure krb5kdc and kadmind to use SASL
-authentication to access the LDAP server; see the <a class="reference internal" href="conf_files/kdc_conf.html#dbmodules"><span class="std std-ref">[dbmodules]</span></a>
-relations <strong>ldap_kdc_sasl_mech</strong> and similar.</p>
-</li>
-<li><p class="first">Specify a location for the LDAP service password file by setting
-<strong>ldap_service_password_file</strong>. Use <code class="docutils literal"><span class="pre">kdb5_ldap_util</span> <span class="pre">stashsrvpw</span></code>
-to stash passwords for the KDC and kadmind DNs chosen above. For
-example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="n">stashsrvpw</span> <span class="o">-</span><span class="n">f</span> <span class="o">/</span><span class="n">path</span><span class="o">/</span><span class="n">to</span><span class="o">/</span><span class="n">service</span><span class="o">.</span><span class="n">keyfile</span> <span class="n">cn</span><span class="o">=</span><span class="n">krbadmin</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">example</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">com</span>
-</pre></div>
-</div>
-<p>Skip this step if you are using SASL authentication and the
-mechanism does not require a password.</p>
-</li>
-<li><p class="first">Choose a DN for the global Kerberos container entry (but do not
-create the entry at this time). Specify this DN with the
-<strong>ldap_kerberos_container_dn</strong> directive in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.
-Realm container entries will be created underneath this DN.
-Principal entries may exist either underneath the realm container
-(the default) or in separate trees referenced from the realm
-container.</p>
-</li>
-<li><p class="first">Configure the LDAP server ACLs to enable the KDC and kadmin server
-DNs to read and write the Kerberos data. If
-<strong>disable_last_success</strong> and <strong>disable_lockout</strong> are both set to
-true in the <a class="reference internal" href="conf_files/kdc_conf.html#dbmodules"><span class="std std-ref">[dbmodules]</span></a> subsection for the realm, then the
-KDC DN only requires read access to the Kerberos data.</p>
-<p>Sample access control information:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">access</span> <span class="n">to</span> <span class="n">dn</span><span class="o">.</span><span class="n">base</span><span class="o">=</span><span class="s2">""</span>
- <span class="n">by</span> <span class="o">*</span> <span class="n">read</span>
-
-<span class="n">access</span> <span class="n">to</span> <span class="n">dn</span><span class="o">.</span><span class="n">base</span><span class="o">=</span><span class="s2">"cn=Subschema"</span>
- <span class="n">by</span> <span class="o">*</span> <span class="n">read</span>
-
-<span class="c1"># Provide access to the realm container.</span>
-<span class="n">access</span> <span class="n">to</span> <span class="n">dn</span><span class="o">.</span><span class="n">subtree</span><span class="o">=</span> <span class="s2">"cn=EXAMPLE.COM,cn=krbcontainer,dc=example,dc=com"</span>
- <span class="n">by</span> <span class="n">dn</span><span class="o">.</span><span class="n">exact</span><span class="o">=</span><span class="s2">"cn=kdc-service,dc=example,dc=com"</span> <span class="n">write</span>
- <span class="n">by</span> <span class="n">dn</span><span class="o">.</span><span class="n">exact</span><span class="o">=</span><span class="s2">"cn=adm-service,dc=example,dc=com"</span> <span class="n">write</span>
- <span class="n">by</span> <span class="o">*</span> <span class="n">none</span>
-
-<span class="c1"># Provide access to principals, if not underneath the realm container.</span>
-<span class="n">access</span> <span class="n">to</span> <span class="n">dn</span><span class="o">.</span><span class="n">subtree</span><span class="o">=</span> <span class="s2">"ou=users,dc=example,dc=com"</span>
- <span class="n">by</span> <span class="n">dn</span><span class="o">.</span><span class="n">exact</span><span class="o">=</span><span class="s2">"cn=kdc-service,dc=example,dc=com"</span> <span class="n">write</span>
- <span class="n">by</span> <span class="n">dn</span><span class="o">.</span><span class="n">exact</span><span class="o">=</span><span class="s2">"cn=adm-service,dc=example,dc=com"</span> <span class="n">write</span>
- <span class="n">by</span> <span class="o">*</span> <span class="n">none</span>
-
-<span class="n">access</span> <span class="n">to</span> <span class="o">*</span>
- <span class="n">by</span> <span class="o">*</span> <span class="n">read</span>
-</pre></div>
-</div>
-<p>If the locations of the container and principals or the DNs of the
-service objects for a realm are changed then this information
-should be updated.</p>
-</li>
-<li><p class="first">In <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>, make sure the following relations are set
-in the <a class="reference internal" href="conf_files/kdc_conf.html#dbmodules"><span class="std std-ref">[dbmodules]</span></a> subsection for the realm:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>db_library (set to ``kldap``)
-ldap_kerberos_container_dn
-ldap_kdc_dn
-ldap_kadmind_dn
-ldap_service_password_file
-ldap_servers
-</pre></div>
-</div>
-</li>
-<li><p class="first">Create the realm using <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a> (see
-<a class="reference internal" href="database.html#ldap-create-realm"><span class="std std-ref">Creating a Kerberos realm</span></a>):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="n">create</span> <span class="o">-</span><span class="n">subtrees</span> <span class="n">ou</span><span class="o">=</span><span class="n">users</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">example</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">com</span> <span class="o">-</span><span class="n">s</span>
-</pre></div>
-</div>
-<p>Use the <strong>-subtrees</strong> option if the principals are to exist in a
-separate subtree from the realm container. Before executing the
-command, make sure that the subtree mentioned above
-<code class="docutils literal"><span class="pre">(ou=users,dc=example,dc=com)</span></code> exists. If the principals will
-exist underneath the realm container, omit the <strong>-subtrees</strong> option
-and do not worry about creating the principal subtree.</p>
-<p>For more information, refer to the section <a class="reference internal" href="database.html#ops-on-ldap"><span class="std std-ref">Operations on the LDAP database</span></a>.</p>
-<p>The realm object is created under the
-<strong>ldap_kerberos_container_dn</strong> specified in the configuration
-file. This operation will also create the Kerberos container, if
-not present already. This container can be used to store
-information related to multiple realms.</p>
-</li>
-<li><p class="first">Add an <code class="docutils literal"><span class="pre">eq</span></code> index for <code class="docutils literal"><span class="pre">krbPrincipalName</span></code> to speed up principal
-lookup operations. See
-<a class="reference external" href="https://www.openldap.org/doc/admin/tuning.html#Indexes">https://www.openldap.org/doc/admin/tuning.html#Indexes</a> for
-details.</p>
-</li>
-</ol>
-</div></blockquote>
-<p>With the LDAP back end it is possible to provide aliases for principal
-entries. Currently we provide no administrative utilities for
-creating aliases, so it must be done by direct manipulation of the
-LDAP entries.</p>
-<p>An entry with aliases contains multiple values of the
-<em>krbPrincipalName</em> attribute. Since LDAP attribute values are not
-ordered, it is necessary to specify which principal name is canonical,
-by using the <em>krbCanonicalName</em> attribute. Therefore, to create
-aliases for an entry, first set the <em>krbCanonicalName</em> attribute of
-the entry to the canonical principal name (which should be identical
-to the pre-existing <em>krbPrincipalName</em> value), and then add additional
-<em>krbPrincipalName</em> attributes for the aliases.</p>
-<p>Principal aliases are only returned by the KDC when the client
-requests canonicalization. Canonicalization is normally requested for
-service principals; for client principals, an explicit flag is often
-required (e.g., <code class="docutils literal"><span class="pre">kinit</span> <span class="pre">-C</span></code>) and canonicalization is only performed
-for initial ticket requests.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Configuring Kerberos with OpenLDAP back-end</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="lockout.html" title="Account lockout"
- >previous</a> |
- <a href="appl_servers.html" title="Application servers"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Configuring Kerberos with OpenLDAP back-end">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Database administration — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Database types" href="dbtypes.html" />
- <link rel="prev" title="Realm configuration decisions" href="realm_config.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="realm_config.html" title="Realm configuration decisions"
- accesskey="P">previous</a> |
- <a href="dbtypes.html" title="Database types"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Database administration">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="database-administration">
-<h1>Database administration<a class="headerlink" href="#database-administration" title="Permalink to this headline">¶</a></h1>
-<p>A Kerberos database contains all of a realm’s Kerberos principals,
-their passwords, and other administrative information about each
-principal. For the most part, you will use the <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>
-program to manipulate the Kerberos database as a whole, and the
-<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> program to make changes to the entries in the
-database. (One notable exception is that users will use the
-<a class="reference internal" href="../user/user_commands/kpasswd.html#kpasswd-1"><span class="std std-ref">kpasswd</span></a> program to change their own passwords.) The kadmin
-program has its own command-line interface, to which you type the
-database administrating commands.</p>
-<p><a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> provides a means to create, delete, load, or dump
-a Kerberos database. It also contains commands to roll over the
-database master key, and to stash a copy of the key so that the
-<a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> and <a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> daemons can use the database
-without manual input.</p>
-<p><a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> provides for the maintenance of Kerberos principals,
-password policies, and service key tables (keytabs). Normally it
-operates as a network client using Kerberos authentication to
-communicate with <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a>, but there is also a variant, named
-kadmin.local, which directly accesses the Kerberos database on the
-local filesystem (or through LDAP). kadmin.local is necessary to set
-up enough of the database to be able to use the remote version.</p>
-<p>kadmin can authenticate to the admin server using the service
-principal <code class="docutils literal"><span class="pre">kadmin/admin</span></code> or <code class="docutils literal"><span class="pre">kadmin/HOST</span></code> (where <em>HOST</em> is the
-hostname of the admin server). If the credentials cache contains a
-ticket for either service principal and the <strong>-c</strong> ccache option is
-specified, that ticket is used to authenticate to KADM5. Otherwise,
-the <strong>-p</strong> and <strong>-k</strong> options are used to specify the client Kerberos
-principal name used to authenticate. Once kadmin has determined the
-principal name, it requests a <code class="docutils literal"><span class="pre">kadmin/admin</span></code> Kerberos service ticket
-from the KDC, and uses that service ticket to authenticate to KADM5.</p>
-<p>See <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> for the available kadmin and kadmin.local
-commands and options.</p>
-<div class="section" id="kadmin-options">
-<h2>kadmin options<a class="headerlink" href="#kadmin-options" title="Permalink to this headline">¶</a></h2>
-<p>You can invoke <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> or kadmin.local with any of the
-following options:</p>
-<p><strong>kadmin</strong>
-[<strong>-O</strong>|<strong>-N</strong>]
-[<strong>-r</strong> <em>realm</em>]
-[<strong>-p</strong> <em>principal</em>]
-[<strong>-q</strong> <em>query</em>]
-[[<strong>-c</strong> <em>cache_name</em>]|[<strong>-k</strong> [<strong>-t</strong> <em>keytab</em>]]|<strong>-n</strong>]
-[<strong>-w</strong> <em>password</em>]
-[<strong>-s</strong> <em>admin_server</em>[:<em>port</em>]]
-[command args…]</p>
-<p><strong>kadmin.local</strong>
-[<strong>-r</strong> <em>realm</em>]
-[<strong>-p</strong> <em>principal</em>]
-[<strong>-q</strong> <em>query</em>]
-[<strong>-d</strong> <em>dbname</em>]
-[<strong>-e</strong> <em>enc</em>:<em>salt</em> …]
-[<strong>-m</strong>]
-[<strong>-x</strong> <em>db_args</em>]
-[command args…]</p>
-<p><strong>OPTIONS</strong></p>
-<dl class="docutils">
-<dt><strong>-r</strong> <em>realm</em></dt>
-<dd>Use <em>realm</em> as the default database realm.</dd>
-<dt><strong>-p</strong> <em>principal</em></dt>
-<dd>Use <em>principal</em> to authenticate. Otherwise, kadmin will append
-<code class="docutils literal"><span class="pre">/admin</span></code> to the primary principal name of the default ccache,
-the value of the <strong>USER</strong> environment variable, or the username as
-obtained with getpwuid, in order of preference.</dd>
-<dt><strong>-k</strong></dt>
-<dd>Use a keytab to decrypt the KDC response instead of prompting for
-a password. In this case, the default principal will be
-<code class="docutils literal"><span class="pre">host/hostname</span></code>. If there is no keytab specified with the
-<strong>-t</strong> option, then the default keytab will be used.</dd>
-<dt><strong>-t</strong> <em>keytab</em></dt>
-<dd>Use <em>keytab</em> to decrypt the KDC response. This can only be used
-with the <strong>-k</strong> option.</dd>
-<dt><strong>-n</strong></dt>
-<dd>Requests anonymous processing. Two types of anonymous principals
-are supported. For fully anonymous Kerberos, configure PKINIT on
-the KDC and configure <strong>pkinit_anchors</strong> in the client’s
-<a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>. Then use the <strong>-n</strong> option with a principal
-of the form <code class="docutils literal"><span class="pre">@REALM</span></code> (an empty principal name followed by the
-at-sign and a realm name). If permitted by the KDC, an anonymous
-ticket will be returned. A second form of anonymous tickets is
-supported; these realm-exposed tickets hide the identity of the
-client but not the client’s realm. For this mode, use <code class="docutils literal"><span class="pre">kinit</span>
-<span class="pre">-n</span></code> with a normal principal name. If supported by the KDC, the
-principal (but not realm) will be replaced by the anonymous
-principal. As of release 1.8, the MIT Kerberos KDC only supports
-fully anonymous operation.</dd>
-<dt><strong>-c</strong> <em>credentials_cache</em></dt>
-<dd>Use <em>credentials_cache</em> as the credentials cache. The cache
-should contain a service ticket for the <code class="docutils literal"><span class="pre">kadmin/admin</span></code> or
-<code class="docutils literal"><span class="pre">kadmin/ADMINHOST</span></code> (where <em>ADMINHOST</em> is the fully-qualified
-hostname of the admin server) service; it can be acquired with the
-<a class="reference internal" href="../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a> program. If this option is not specified, kadmin
-requests a new service ticket from the KDC, and stores it in its
-own temporary ccache.</dd>
-<dt><strong>-w</strong> <em>password</em></dt>
-<dd>Use <em>password</em> instead of prompting for one. Use this option with
-care, as it may expose the password to other users on the system
-via the process list.</dd>
-<dt><strong>-q</strong> <em>query</em></dt>
-<dd>Perform the specified query and then exit.</dd>
-<dt><strong>-d</strong> <em>dbname</em></dt>
-<dd>Specifies the name of the KDC database. This option does not
-apply to the LDAP database module.</dd>
-<dt><strong>-s</strong> <em>admin_server</em>[:<em>port</em>]</dt>
-<dd>Specifies the admin server which kadmin should contact.</dd>
-<dt><strong>-m</strong></dt>
-<dd>If using kadmin.local, prompt for the database master password
-instead of reading it from a stash file.</dd>
-<dt><strong>-e</strong> “<em>enc</em>:<em>salt</em> …”</dt>
-<dd>Sets the keysalt list to be used for any new keys created. See
-<a class="reference internal" href="conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a list of possible
-values.</dd>
-<dt><strong>-O</strong></dt>
-<dd>Force use of old AUTH_GSSAPI authentication flavor.</dd>
-<dt><strong>-N</strong></dt>
-<dd>Prevent fallback to AUTH_GSSAPI authentication flavor.</dd>
-<dt><strong>-x</strong> <em>db_args</em></dt>
-<dd>Specifies the database specific arguments. See the next section
-for supported options.</dd>
-</dl>
-</div>
-<div class="section" id="date-format">
-<h2>Date Format<a class="headerlink" href="#date-format" title="Permalink to this headline">¶</a></h2>
-<p>For the supported date-time formats see <a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> section
-in <a class="reference internal" href="../basic/date_format.html#datetime"><span class="std std-ref">Supported date and time formats</span></a>.</p>
-</div>
-<div class="section" id="principals">
-<h2>Principals<a class="headerlink" href="#principals" title="Permalink to this headline">¶</a></h2>
-<p>Each entry in the Kerberos database contains a Kerberos principal and
-the attributes and policies associated with that principal.</p>
-<div class="section" id="adding-modifying-and-deleting-principals">
-<span id="add-mod-del-princs"></span><h3>Adding, modifying and deleting principals<a class="headerlink" href="#adding-modifying-and-deleting-principals" title="Permalink to this headline">¶</a></h3>
-<p>To add a principal to the database, use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>
-<strong>add_principal</strong> command.</p>
-<p>To modify attributes of a principal, use the kadmin
-<strong>modify_principal</strong> command.</p>
-<p>To delete a principal, use the kadmin <strong>delete_principal</strong> command.</p>
-</div>
-<div class="section" id="add-principal">
-<h3>add_principal<a class="headerlink" href="#add-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>add_principal</strong> [<em>options</em>] <em>newprinc</em></div></blockquote>
-<p>Creates the principal <em>newprinc</em>, prompting twice for a password. If
-no password policy is specified with the <strong>-policy</strong> option, and the
-policy named <code class="docutils literal"><span class="pre">default</span></code> is assigned to the principal if it exists.
-However, creating a policy named <code class="docutils literal"><span class="pre">default</span></code> will not automatically
-assign this policy to previously existing principals. This policy
-assignment can be suppressed with the <strong>-clearpolicy</strong> option.</p>
-<p>This command requires the <strong>add</strong> privilege.</p>
-<p>Aliases: <strong>addprinc</strong>, <strong>ank</strong></p>
-<p>Options:</p>
-<dl class="docutils">
-<dt><strong>-expire</strong> <em>expdate</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) The expiration date of the principal.</dd>
-<dt><strong>-pwexpire</strong> <em>pwexpdate</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) The password expiration date.</dd>
-<dt><strong>-maxlife</strong> <em>maxlife</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) The maximum ticket life
-for the principal.</dd>
-<dt><strong>-maxrenewlife</strong> <em>maxrenewlife</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) The maximum renewable
-life of tickets for the principal.</dd>
-<dt><strong>-kvno</strong> <em>kvno</em></dt>
-<dd>The initial key version number.</dd>
-<dt><strong>-policy</strong> <em>policy</em></dt>
-<dd>The password policy used by this principal. If not specified, the
-policy <code class="docutils literal"><span class="pre">default</span></code> is used if it exists (unless <strong>-clearpolicy</strong>
-is specified).</dd>
-<dt><strong>-clearpolicy</strong></dt>
-<dd>Prevents any policy from being assigned when <strong>-policy</strong> is not
-specified.</dd>
-<dt>{-|+}<strong>allow_postdated</strong></dt>
-<dd><strong>-allow_postdated</strong> prohibits this principal from obtaining
-postdated tickets. <strong>+allow_postdated</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_forwardable</strong></dt>
-<dd><strong>-allow_forwardable</strong> prohibits this principal from obtaining
-forwardable tickets. <strong>+allow_forwardable</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_renewable</strong></dt>
-<dd><strong>-allow_renewable</strong> prohibits this principal from obtaining
-renewable tickets. <strong>+allow_renewable</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_proxiable</strong></dt>
-<dd><strong>-allow_proxiable</strong> prohibits this principal from obtaining
-proxiable tickets. <strong>+allow_proxiable</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_dup_skey</strong></dt>
-<dd><strong>-allow_dup_skey</strong> disables user-to-user authentication for this
-principal by prohibiting others from obtaining a service ticket
-encrypted in this principal’s TGT session key.
-<strong>+allow_dup_skey</strong> clears this flag.</dd>
-<dt>{-|+}<strong>requires_preauth</strong></dt>
-<dd><strong>+requires_preauth</strong> requires this principal to preauthenticate
-before being allowed to kinit. <strong>-requires_preauth</strong> clears this
-flag. When <strong>+requires_preauth</strong> is set on a service principal,
-the KDC will only issue service tickets for that service principal
-if the client’s initial authentication was performed using
-preauthentication.</dd>
-<dt>{-|+}<strong>requires_hwauth</strong></dt>
-<dd><strong>+requires_hwauth</strong> requires this principal to preauthenticate
-using a hardware device before being allowed to kinit.
-<strong>-requires_hwauth</strong> clears this flag. When <strong>+requires_hwauth</strong> is
-set on a service principal, the KDC will only issue service tickets
-for that service principal if the client’s initial authentication was
-performed using a hardware device to preauthenticate.</dd>
-<dt>{-|+}<strong>ok_as_delegate</strong></dt>
-<dd><strong>+ok_as_delegate</strong> sets the <strong>okay as delegate</strong> flag on tickets
-issued with this principal as the service. Clients may use this
-flag as a hint that credentials should be delegated when
-authenticating to the service. <strong>-ok_as_delegate</strong> clears this
-flag.</dd>
-<dt>{-|+}<strong>allow_svr</strong></dt>
-<dd><strong>-allow_svr</strong> prohibits the issuance of service tickets for this
-principal. In release 1.17 and later, user-to-user service
-tickets are still allowed unless the <strong>-allow_dup_skey</strong> flag is
-also set. <strong>+allow_svr</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_tgs_req</strong></dt>
-<dd><strong>-allow_tgs_req</strong> specifies that a Ticket-Granting Service (TGS)
-request for a service ticket for this principal is not permitted.
-<strong>+allow_tgs_req</strong> clears this flag.</dd>
-<dt>{-|+}<strong>allow_tix</strong></dt>
-<dd><strong>-allow_tix</strong> forbids the issuance of any tickets for this
-principal. <strong>+allow_tix</strong> clears this flag.</dd>
-<dt>{-|+}<strong>needchange</strong></dt>
-<dd><strong>+needchange</strong> forces a password change on the next initial
-authentication to this principal. <strong>-needchange</strong> clears this
-flag.</dd>
-<dt>{-|+}<strong>password_changing_service</strong></dt>
-<dd><strong>+password_changing_service</strong> marks this principal as a password
-change service principal.</dd>
-<dt>{-|+}<strong>ok_to_auth_as_delegate</strong></dt>
-<dd><strong>+ok_to_auth_as_delegate</strong> allows this principal to acquire
-forwardable tickets to itself from arbitrary users, for use with
-constrained delegation.</dd>
-<dt>{-|+}<strong>no_auth_data_required</strong></dt>
-<dd><strong>+no_auth_data_required</strong> prevents PAC or AD-SIGNEDPATH data from
-being added to service tickets for the principal.</dd>
-<dt>{-|+}<strong>lockdown_keys</strong></dt>
-<dd><strong>+lockdown_keys</strong> prevents keys for this principal from leaving
-the KDC via kadmind. The chpass and extract operations are denied
-for a principal with this attribute. The chrand operation is
-allowed, but will not return the new keys. The delete and rename
-operations are also denied if this attribute is set, in order to
-prevent a malicious administrator from replacing principals like
-krbtgt/* or kadmin/* with new principals without the attribute.
-This attribute can be set via the network protocol, but can only
-be removed using kadmin.local.</dd>
-<dt><strong>-randkey</strong></dt>
-<dd>Sets the key of the principal to a random value.</dd>
-<dt><strong>-nokey</strong></dt>
-<dd>Causes the principal to be created with no key. New in release
-1.12.</dd>
-<dt><strong>-pw</strong> <em>password</em></dt>
-<dd>Sets the password of the principal to the specified string and
-does not prompt for a password. Note: using this option in a
-shell script may expose the password to other users on the system
-via the process list.</dd>
-<dt><strong>-e</strong> <em>enc</em>:<em>salt</em>,…</dt>
-<dd>Uses the specified keysalt list for setting the keys of the
-principal. See <a class="reference internal" href="conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a
-list of possible values.</dd>
-<dt><strong>-x</strong> <em>db_princ_args</em></dt>
-<dd><p class="first">Indicates database-specific options. The options for the LDAP
-database module are:</p>
-<dl class="docutils">
-<dt><strong>-x dn=</strong><em>dn</em></dt>
-<dd>Specifies the LDAP object that will contain the Kerberos
-principal being created.</dd>
-<dt><strong>-x linkdn=</strong><em>dn</em></dt>
-<dd>Specifies the LDAP object to which the newly created Kerberos
-principal object will point.</dd>
-<dt><strong>-x containerdn=</strong><em>container_dn</em></dt>
-<dd>Specifies the container object under which the Kerberos
-principal is to be created.</dd>
-<dt><strong>-x tktpolicy=</strong><em>policy</em></dt>
-<dd>Associates a ticket policy to the Kerberos principal.</dd>
-</dl>
-<div class="last admonition note">
-<p class="first admonition-title">Note</p>
-<ul class="last simple">
-<li>The <strong>containerdn</strong> and <strong>linkdn</strong> options cannot be
-specified with the <strong>dn</strong> option.</li>
-<li>If the <em>dn</em> or <em>containerdn</em> options are not specified while
-adding the principal, the principals are created under the
-principal container configured in the realm or the realm
-container.</li>
-<li><em>dn</em> and <em>containerdn</em> should be within the subtrees or
-principal container configured in the realm.</li>
-</ul>
-</div>
-</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">addprinc</span> <span class="n">jennifer</span>
-<span class="n">No</span> <span class="n">policy</span> <span class="n">specified</span> <span class="k">for</span> <span class="s2">"jennifer@ATHENA.MIT.EDU"</span><span class="p">;</span>
-<span class="n">defaulting</span> <span class="n">to</span> <span class="n">no</span> <span class="n">policy</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span>
-<span class="n">Principal</span> <span class="s2">"jennifer@ATHENA.MIT.EDU"</span> <span class="n">created</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="modify-principal">
-<h3>modify_principal<a class="headerlink" href="#modify-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>modify_principal</strong> [<em>options</em>] <em>principal</em></div></blockquote>
-<p>Modifies the specified principal, changing the fields as specified.
-The options to <strong>add_principal</strong> also apply to this command, except
-for the <strong>-randkey</strong>, <strong>-pw</strong>, and <strong>-e</strong> options. In addition, the
-option <strong>-clearpolicy</strong> will clear the current policy of a principal.</p>
-<p>This command requires the <em>modify</em> privilege.</p>
-<p>Alias: <strong>modprinc</strong></p>
-<p>Options (in addition to the <strong>addprinc</strong> options):</p>
-<dl class="docutils">
-<dt><strong>-unlock</strong></dt>
-<dd>Unlocks a locked principal (one which has received too many failed
-authentication attempts without enough time between them according
-to its password policy) so that it can successfully authenticate.</dd>
-</dl>
-</div>
-<div class="section" id="delete-principal">
-<h3>delete_principal<a class="headerlink" href="#delete-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>delete_principal</strong> [<strong>-force</strong>] <em>principal</em></div></blockquote>
-<p>Deletes the specified <em>principal</em> from the database. This command
-prompts for deletion, unless the <strong>-force</strong> option is given.</p>
-<p>This command requires the <strong>delete</strong> privilege.</p>
-<p>Alias: <strong>delprinc</strong></p>
-<div class="section" id="examples">
-<h4>Examples<a class="headerlink" href="#examples" title="Permalink to this headline">¶</a></h4>
-<p>If you want to create a principal which is contained by a LDAP object,
-all you need to do is:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">addprinc</span> <span class="o">-</span><span class="n">x</span> <span class="n">dn</span><span class="o">=</span><span class="n">cn</span><span class="o">=</span><span class="n">jennifer</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">example</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">com</span> <span class="n">jennifer</span>
-<span class="n">No</span> <span class="n">policy</span> <span class="n">specified</span> <span class="k">for</span> <span class="s2">"jennifer@ATHENA.MIT.EDU"</span><span class="p">;</span>
-<span class="n">defaulting</span> <span class="n">to</span> <span class="n">no</span> <span class="n">policy</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><=</span> <span class="n">Type</span> <span class="n">the</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><=</span><span class="n">Type</span> <span class="n">it</span> <span class="n">again</span><span class="o">.</span>
-<span class="n">Principal</span> <span class="s2">"jennifer@ATHENA.MIT.EDU"</span> <span class="n">created</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-<p>If you want to create a principal under a specific LDAP container and
-link to an existing LDAP object, all you need to do is:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">addprinc</span> <span class="o">-</span><span class="n">x</span> <span class="n">containerdn</span><span class="o">=</span><span class="n">dc</span><span class="o">=</span><span class="n">example</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">com</span> <span class="o">-</span><span class="n">x</span> <span class="n">linkdn</span><span class="o">=</span><span class="n">cn</span><span class="o">=</span><span class="n">david</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">example</span><span class="p">,</span><span class="n">dc</span><span class="o">=</span><span class="n">com</span> <span class="n">david</span>
-<span class="n">No</span> <span class="n">policy</span> <span class="n">specified</span> <span class="k">for</span> <span class="s2">"david@ATHENA.MIT.EDU"</span><span class="p">;</span>
-<span class="n">defaulting</span> <span class="n">to</span> <span class="n">no</span> <span class="n">policy</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">david</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><=</span> <span class="n">Type</span> <span class="n">the</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">david</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><=</span><span class="n">Type</span> <span class="n">it</span> <span class="n">again</span><span class="o">.</span>
-<span class="n">Principal</span> <span class="s2">"david@ATHENA.MIT.EDU"</span> <span class="n">created</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-<p>If you want to associate a ticket policy to a principal, all you need
-to do is:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">modprinc</span> <span class="o">-</span><span class="n">x</span> <span class="n">tktpolicy</span><span class="o">=</span><span class="n">userpolicy</span> <span class="n">david</span>
-<span class="n">Principal</span> <span class="s2">"david@ATHENA.MIT.EDU"</span> <span class="n">modified</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-<p>If, on the other hand, you want to set up an account that expires on
-January 1, 2000, that uses a policy called “stduser”, with a temporary
-password (which you want the user to change immediately), you would
-type the following:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">addprinc</span> <span class="n">david</span> <span class="o">-</span><span class="n">expire</span> <span class="s2">"1/1/2000 12:01am EST"</span> <span class="o">-</span><span class="n">policy</span> <span class="n">stduser</span> <span class="o">+</span><span class="n">needchange</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">david</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><=</span> <span class="n">Type</span> <span class="n">the</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span>
-<span class="n">david</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><=</span> <span class="n">Type</span> <span class="n">it</span> <span class="n">again</span><span class="o">.</span>
-<span class="n">Principal</span> <span class="s2">"david@ATHENA.MIT.EDU"</span> <span class="n">created</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-<p>If you want to delete a principal:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>kadmin: delprinc jennifer
-Are you sure you want to delete the principal
-"jennifer@ATHENA.MIT.EDU"? (yes/no): yes
-Principal "jennifer@ATHENA.MIT.EDU" deleted.
-Make sure that you have removed this principal from
-all ACLs before reusing.
-kadmin:
-</pre></div>
-</div>
-</div>
-</div>
-<div class="section" id="retrieving-information-about-a-principal">
-<h3>Retrieving information about a principal<a class="headerlink" href="#retrieving-information-about-a-principal" title="Permalink to this headline">¶</a></h3>
-<p>To retrieve a listing of the attributes and/or policies associated
-with a principal, use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> <strong>get_principal</strong> command.</p>
-<p>To generate a listing of principals, use the kadmin
-<strong>list_principals</strong> command.</p>
-</div>
-<div class="section" id="get-principal">
-<h3>get_principal<a class="headerlink" href="#get-principal" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>get_principal</strong> [<strong>-terse</strong>] <em>principal</em></div></blockquote>
-<p>Gets the attributes of principal. With the <strong>-terse</strong> option, outputs
-fields as quoted tab-separated strings.</p>
-<p>This command requires the <strong>inquire</strong> privilege, or that the principal
-running the the program to be the same as the one being listed.</p>
-<p>Alias: <strong>getprinc</strong></p>
-<p>Examples:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">getprinc</span> <span class="n">tlyu</span><span class="o">/</span><span class="n">admin</span>
-<span class="n">Principal</span><span class="p">:</span> <span class="n">tlyu</span><span class="o">/</span><span class="n">admin</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">Expiration</span> <span class="n">date</span><span class="p">:</span> <span class="p">[</span><span class="n">never</span><span class="p">]</span>
-<span class="n">Last</span> <span class="n">password</span> <span class="n">change</span><span class="p">:</span> <span class="n">Mon</span> <span class="n">Aug</span> <span class="mi">12</span> <span class="mi">14</span><span class="p">:</span><span class="mi">16</span><span class="p">:</span><span class="mi">47</span> <span class="n">EDT</span> <span class="mi">1996</span>
-<span class="n">Password</span> <span class="n">expiration</span> <span class="n">date</span><span class="p">:</span> <span class="p">[</span><span class="n">never</span><span class="p">]</span>
-<span class="n">Maximum</span> <span class="n">ticket</span> <span class="n">life</span><span class="p">:</span> <span class="mi">0</span> <span class="n">days</span> <span class="mi">10</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Maximum</span> <span class="n">renewable</span> <span class="n">life</span><span class="p">:</span> <span class="mi">7</span> <span class="n">days</span> <span class="mi">00</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Last</span> <span class="n">modified</span><span class="p">:</span> <span class="n">Mon</span> <span class="n">Aug</span> <span class="mi">12</span> <span class="mi">14</span><span class="p">:</span><span class="mi">16</span><span class="p">:</span><span class="mi">47</span> <span class="n">EDT</span> <span class="mi">1996</span> <span class="p">(</span><span class="n">bjaspan</span><span class="o">/</span><span class="n">admin</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span><span class="p">)</span>
-<span class="n">Last</span> <span class="n">successful</span> <span class="n">authentication</span><span class="p">:</span> <span class="p">[</span><span class="n">never</span><span class="p">]</span>
-<span class="n">Last</span> <span class="n">failed</span> <span class="n">authentication</span><span class="p">:</span> <span class="p">[</span><span class="n">never</span><span class="p">]</span>
-<span class="n">Failed</span> <span class="n">password</span> <span class="n">attempts</span><span class="p">:</span> <span class="mi">0</span>
-<span class="n">Number</span> <span class="n">of</span> <span class="n">keys</span><span class="p">:</span> <span class="mi">1</span>
-<span class="n">Key</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">1</span><span class="p">,</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha384</span><span class="o">-</span><span class="mi">192</span>
-<span class="n">MKey</span><span class="p">:</span> <span class="n">vno</span> <span class="mi">1</span>
-<span class="n">Attributes</span><span class="p">:</span>
-<span class="n">Policy</span><span class="p">:</span> <span class="p">[</span><span class="n">none</span><span class="p">]</span>
-
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">getprinc</span> <span class="o">-</span><span class="n">terse</span> <span class="n">systest</span>
-<span class="n">systest</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span> <span class="mi">3</span> <span class="mi">86400</span> <span class="mi">604800</span> <span class="mi">1</span>
-<span class="mi">785926535</span> <span class="mi">753241234</span> <span class="mi">785900000</span>
-<span class="n">tlyu</span><span class="o">/</span><span class="n">admin</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span> <span class="mi">786100034</span> <span class="mi">0</span> <span class="mi">0</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="list-principals">
-<h3>list_principals<a class="headerlink" href="#list-principals" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>list_principals</strong> [<em>expression</em>]</div></blockquote>
-<p>Retrieves all or some principal names. <em>expression</em> is a shell-style
-glob expression that can contain the wild-card characters <code class="docutils literal"><span class="pre">?</span></code>,
-<code class="docutils literal"><span class="pre">*</span></code>, and <code class="docutils literal"><span class="pre">[]</span></code>. All principal names matching the expression are
-printed. If no expression is provided, all principal names are
-printed. If the expression does not contain an <code class="docutils literal"><span class="pre">@</span></code> character, an
-<code class="docutils literal"><span class="pre">@</span></code> character followed by the local realm is appended to the
-expression.</p>
-<p>This command requires the <strong>list</strong> privilege.</p>
-<p>Alias: <strong>listprincs</strong>, <strong>get_principals</strong>, <strong>getprincs</strong></p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">listprincs</span> <span class="n">test</span><span class="o">*</span>
-<span class="n">test3</span><span class="nd">@SECURE</span><span class="o">-</span><span class="n">TEST</span><span class="o">.</span><span class="n">OV</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">test2</span><span class="nd">@SECURE</span><span class="o">-</span><span class="n">TEST</span><span class="o">.</span><span class="n">OV</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">test1</span><span class="nd">@SECURE</span><span class="o">-</span><span class="n">TEST</span><span class="o">.</span><span class="n">OV</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">testuser</span><span class="nd">@SECURE</span><span class="o">-</span><span class="n">TEST</span><span class="o">.</span><span class="n">OV</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="changing-passwords">
-<h3>Changing passwords<a class="headerlink" href="#changing-passwords" title="Permalink to this headline">¶</a></h3>
-<p>To change a principal’s password use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>
-<strong>change_password</strong> command.</p>
-</div>
-<div class="section" id="change-password">
-<h3>change_password<a class="headerlink" href="#change-password" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>change_password</strong> [<em>options</em>] <em>principal</em></div></blockquote>
-<p>Changes the password of <em>principal</em>. Prompts for a new password if
-neither <strong>-randkey</strong> or <strong>-pw</strong> is specified.</p>
-<p>This command requires the <strong>changepw</strong> privilege, or that the
-principal running the program is the same as the principal being
-changed.</p>
-<p>Alias: <strong>cpw</strong></p>
-<p>The following options are available:</p>
-<dl class="docutils">
-<dt><strong>-randkey</strong></dt>
-<dd>Sets the key of the principal to a random value.</dd>
-<dt><strong>-pw</strong> <em>password</em></dt>
-<dd>Set the password to the specified string. Using this option in a
-script may expose the password to other users on the system via
-the process list.</dd>
-<dt><strong>-e</strong> <em>enc</em>:<em>salt</em>,…</dt>
-<dd>Uses the specified keysalt list for setting the keys of the
-principal. See <a class="reference internal" href="conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a
-list of possible values.</dd>
-<dt><strong>-keepold</strong></dt>
-<dd>Keeps the existing keys in the database. This flag is usually not
-necessary except perhaps for <code class="docutils literal"><span class="pre">krbtgt</span></code> principals.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">cpw</span> <span class="n">systest</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">systest</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">systest</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">systest</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span> <span class="n">changed</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Password changes through kadmin are subject to the same
-password policies as would apply to password changes through
-<a class="reference internal" href="../user/user_commands/kpasswd.html#kpasswd-1"><span class="std std-ref">kpasswd</span></a>.</p>
-</div>
-</div>
-</div>
-<div class="section" id="policies">
-<span id="id1"></span><h2>Policies<a class="headerlink" href="#policies" title="Permalink to this headline">¶</a></h2>
-<p>A policy is a set of rules governing passwords. Policies can dictate
-minimum and maximum password lifetimes, minimum number of characters
-and character classes a password must contain, and the number of old
-passwords kept in the database.</p>
-<div class="section" id="adding-modifying-and-deleting-policies">
-<h3>Adding, modifying and deleting policies<a class="headerlink" href="#adding-modifying-and-deleting-policies" title="Permalink to this headline">¶</a></h3>
-<p>To add a new policy, use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> <strong>add_policy</strong> command.</p>
-<p>To modify attributes of a principal, use the kadmin <strong>modify_policy</strong>
-command.</p>
-<p>To delete a policy, use the kadmin <strong>delete_policy</strong> command.</p>
-</div>
-<div class="section" id="add-policy">
-<h3>add_policy<a class="headerlink" href="#add-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>add_policy</strong> [<em>options</em>] <em>policy</em></div></blockquote>
-<p>Adds a password policy named <em>policy</em> to the database.</p>
-<p>This command requires the <strong>add</strong> privilege.</p>
-<p>Alias: <strong>addpol</strong></p>
-<p>The following options are available:</p>
-<dl class="docutils">
-<dt><strong>-maxlife</strong> <em>time</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Sets the maximum
-lifetime of a password.</dd>
-<dt><strong>-minlife</strong> <em>time</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Sets the minimum
-lifetime of a password.</dd>
-<dt><strong>-minlength</strong> <em>length</em></dt>
-<dd>Sets the minimum length of a password.</dd>
-<dt><strong>-minclasses</strong> <em>number</em></dt>
-<dd>Sets the minimum number of character classes required in a
-password. The five character classes are lower case, upper case,
-numbers, punctuation, and whitespace/unprintable characters.</dd>
-<dt><strong>-history</strong> <em>number</em></dt>
-<dd>Sets the number of past keys kept for a principal. This option is
-not supported with the LDAP KDC database module.</dd>
-</dl>
-<dl class="docutils" id="policy-maxfailure">
-<dt><strong>-maxfailure</strong> <em>maxnumber</em></dt>
-<dd>Sets the number of authentication failures before the principal is
-locked. Authentication failures are only tracked for principals
-which require preauthentication. The counter of failed attempts
-resets to 0 after a successful attempt to authenticate. A
-<em>maxnumber</em> value of 0 (the default) disables lockout.</dd>
-</dl>
-<dl class="docutils" id="policy-failurecountinterval">
-<dt><strong>-failurecountinterval</strong> <em>failuretime</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Sets the allowable time
-between authentication failures. If an authentication failure
-happens after <em>failuretime</em> has elapsed since the previous
-failure, the number of authentication failures is reset to 1. A
-<em>failuretime</em> value of 0 (the default) means forever.</dd>
-</dl>
-<dl class="docutils" id="policy-lockoutduration">
-<dt><strong>-lockoutduration</strong> <em>lockouttime</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> or <a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Sets the duration for
-which the principal is locked from authenticating if too many
-authentication failures occur without the specified failure count
-interval elapsing. A duration of 0 (the default) means the
-principal remains locked out until it is administratively unlocked
-with <code class="docutils literal"><span class="pre">modprinc</span> <span class="pre">-unlock</span></code>.</dd>
-<dt><strong>-allowedkeysalts</strong></dt>
-<dd>Specifies the key/salt tuples supported for long-term keys when
-setting or changing a principal’s password/keys. See
-<a class="reference internal" href="conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">Keysalt lists</span></a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> for a list of the
-accepted values, but note that key/salt tuples must be separated
-with commas (‘,’) only. To clear the allowed key/salt policy use
-a value of ‘-‘.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">add_policy</span> <span class="o">-</span><span class="n">maxlife</span> <span class="s2">"2 days"</span> <span class="o">-</span><span class="n">minlength</span> <span class="mi">5</span> <span class="n">guests</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="modify-policy">
-<h3>modify_policy<a class="headerlink" href="#modify-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>modify_policy</strong> [<em>options</em>] <em>policy</em></div></blockquote>
-<p>Modifies the password policy named <em>policy</em>. Options are as described
-for <strong>add_policy</strong>.</p>
-<p>This command requires the <strong>modify</strong> privilege.</p>
-<p>Alias: <strong>modpol</strong></p>
-</div>
-<div class="section" id="delete-policy">
-<h3>delete_policy<a class="headerlink" href="#delete-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>delete_policy</strong> [<strong>-force</strong>] <em>policy</em></div></blockquote>
-<p>Deletes the password policy named <em>policy</em>. Prompts for confirmation
-before deletion. The command will fail if the policy is in use by any
-principals.</p>
-<p>This command requires the <strong>delete</strong> privilege.</p>
-<p>Alias: <strong>delpol</strong></p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>kadmin: del_policy guests
-Are you sure you want to delete the policy "guests"?
-(yes/no): yes
-kadmin:
-</pre></div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">You must cancel the policy from <em>all</em> principals before
-deleting it. The <em>delete_policy</em> command will fail if the policy
-is in use by any principals.</p>
-</div>
-</div>
-<div class="section" id="retrieving-policies">
-<h3>Retrieving policies<a class="headerlink" href="#retrieving-policies" title="Permalink to this headline">¶</a></h3>
-<p>To retrieve a policy, use the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> <strong>get_policy</strong> command.</p>
-<p>You can retrieve the list of policies with the kadmin
-<strong>list_policies</strong> command.</p>
-</div>
-<div class="section" id="get-policy">
-<h3>get_policy<a class="headerlink" href="#get-policy" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>get_policy</strong> [ <strong>-terse</strong> ] <em>policy</em></div></blockquote>
-<p>Displays the values of the password policy named <em>policy</em>. With the
-<strong>-terse</strong> flag, outputs the fields as quoted strings separated by
-tabs.</p>
-<p>This command requires the <strong>inquire</strong> privilege.</p>
-<p>Alias: <strong>getpol</strong></p>
-<p>Examples:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">get_policy</span> <span class="n">admin</span>
-<span class="n">Policy</span><span class="p">:</span> <span class="n">admin</span>
-<span class="n">Maximum</span> <span class="n">password</span> <span class="n">life</span><span class="p">:</span> <span class="mi">180</span> <span class="n">days</span> <span class="mi">00</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Minimum</span> <span class="n">password</span> <span class="n">life</span><span class="p">:</span> <span class="mi">00</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Minimum</span> <span class="n">password</span> <span class="n">length</span><span class="p">:</span> <span class="mi">6</span>
-<span class="n">Minimum</span> <span class="n">number</span> <span class="n">of</span> <span class="n">password</span> <span class="n">character</span> <span class="n">classes</span><span class="p">:</span> <span class="mi">2</span>
-<span class="n">Number</span> <span class="n">of</span> <span class="n">old</span> <span class="n">keys</span> <span class="n">kept</span><span class="p">:</span> <span class="mi">5</span>
-<span class="n">Reference</span> <span class="n">count</span><span class="p">:</span> <span class="mi">17</span>
-
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">get_policy</span> <span class="o">-</span><span class="n">terse</span> <span class="n">admin</span>
-<span class="n">admin</span> <span class="mi">15552000</span> <span class="mi">0</span> <span class="mi">6</span> <span class="mi">2</span> <span class="mi">5</span> <span class="mi">17</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-<p>The “Reference count” is the number of principals using that policy.
-With the LDAP KDC database module, the reference count field is not
-meaningful.</p>
-</div>
-<div class="section" id="list-policies">
-<h3>list_policies<a class="headerlink" href="#list-policies" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>list_policies</strong> [<em>expression</em>]</div></blockquote>
-<p>Retrieves all or some policy names. <em>expression</em> is a shell-style
-glob expression that can contain the wild-card characters <code class="docutils literal"><span class="pre">?</span></code>,
-<code class="docutils literal"><span class="pre">*</span></code>, and <code class="docutils literal"><span class="pre">[]</span></code>. All policy names matching the expression are
-printed. If no expression is provided, all existing policy names are
-printed.</p>
-<p>This command requires the <strong>list</strong> privilege.</p>
-<p>Aliases: <strong>listpols</strong>, <strong>get_policies</strong>, <strong>getpols</strong>.</p>
-<p>Examples:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">listpols</span>
-<span class="n">test</span><span class="o">-</span><span class="n">pol</span>
-<span class="nb">dict</span><span class="o">-</span><span class="n">only</span>
-<span class="n">once</span><span class="o">-</span><span class="n">a</span><span class="o">-</span><span class="nb">min</span>
-<span class="n">test</span><span class="o">-</span><span class="n">pol</span><span class="o">-</span><span class="n">nopw</span>
-
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">listpols</span> <span class="n">t</span><span class="o">*</span>
-<span class="n">test</span><span class="o">-</span><span class="n">pol</span>
-<span class="n">test</span><span class="o">-</span><span class="n">pol</span><span class="o">-</span><span class="n">nopw</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="policies-and-principals">
-<h3>Policies and principals<a class="headerlink" href="#policies-and-principals" title="Permalink to this headline">¶</a></h3>
-<p>Policies can be applied to principals as they are created by using
-the <strong>-policy</strong> flag to <a class="reference internal" href="admin_commands/kadmin_local.html#add-principal"><span class="std std-ref">add_principal</span></a>. Existing principals can
-be modified by using the <strong>-policy</strong> or <strong>-clearpolicy</strong> flag to
-<a class="reference internal" href="admin_commands/kadmin_local.html#modify-principal"><span class="std std-ref">modify_principal</span></a>.</p>
-</div>
-<div class="section" id="updating-the-history-key">
-<span id="updating-history-key"></span><h3>Updating the history key<a class="headerlink" href="#updating-the-history-key" title="Permalink to this headline">¶</a></h3>
-<p>If a policy specifies a number of old keys kept of two or more, the
-stored old keys are encrypted in a history key, which is found in the
-key data of the <code class="docutils literal"><span class="pre">kadmin/history</span></code> principal.</p>
-<p>Currently there is no support for proper rollover of the history key,
-but you can change the history key (for example, to use a better
-encryption type) at the cost of invalidating currently stored old
-keys. To change the history key, run:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">change_password</span> <span class="o">-</span><span class="n">randkey</span> <span class="n">kadmin</span><span class="o">/</span><span class="n">history</span>
-</pre></div>
-</div>
-<p>This command will fail if you specify the <strong>-keepold</strong> flag. Only one
-new history key will be created, even if you specify multiple key/salt
-combinations.</p>
-<p>In the future, we plan to migrate towards encrypting old keys in the
-master key instead of the history key, and implementing proper
-rollover support for stored old keys.</p>
-</div>
-</div>
-<div class="section" id="privileges">
-<span id="id2"></span><h2>Privileges<a class="headerlink" href="#privileges" title="Permalink to this headline">¶</a></h2>
-<p>Administrative privileges for the Kerberos database are stored in the
-file <a class="reference internal" href="conf_files/kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a>.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">A common use of an admin instance is so you can grant
-separate permissions (such as administrator access to the
-Kerberos database) to a separate Kerberos principal. For
-example, the user <code class="docutils literal"><span class="pre">joeadmin</span></code> might have a principal for
-his administrative use, called <code class="docutils literal"><span class="pre">joeadmin/admin</span></code>. This
-way, <code class="docutils literal"><span class="pre">joeadmin</span></code> would obtain <code class="docutils literal"><span class="pre">joeadmin/admin</span></code> tickets
-only when he actually needs to use those permissions.</p>
-</div>
-</div>
-<div class="section" id="operations-on-the-kerberos-database">
-<span id="db-operations"></span><h2>Operations on the Kerberos database<a class="headerlink" href="#operations-on-the-kerberos-database" title="Permalink to this headline">¶</a></h2>
-<p>The <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> command is the primary tool for administrating
-the Kerberos database.</p>
-<p><strong>kdb5_util</strong>
-[<strong>-r</strong> <em>realm</em>]
-[<strong>-d</strong> <em>dbname</em>]
-[<strong>-k</strong> <em>mkeytype</em>]
-[<strong>-kv</strong> <em>mkeyVNO</em>]
-[<strong>-M</strong> <em>mkeyname</em>]
-[<strong>-m</strong>]
-[<strong>-sf</strong> <em>stashfilename</em>]
-[<strong>-P</strong> <em>password</em>]
-[<strong>-x</strong> <em>db_args</em>]
-<em>command</em> [<em>command_options</em>]</p>
-<p><strong>OPTIONS</strong></p>
-<dl class="docutils">
-<dt><strong>-r</strong> <em>realm</em></dt>
-<dd>specifies the Kerberos realm of the database.</dd>
-<dt><strong>-d</strong> <em>dbname</em></dt>
-<dd>specifies the name under which the principal database is stored;
-by default the database is that listed in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>. The
-password policy database and lock files are also derived from this
-value.</dd>
-<dt><strong>-k</strong> <em>mkeytype</em></dt>
-<dd>specifies the key type of the master key in the database. The
-default is given by the <strong>master_key_type</strong> variable in
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-kv</strong> <em>mkeyVNO</em></dt>
-<dd>Specifies the version number of the master key in the database;
-the default is 1. Note that 0 is not allowed.</dd>
-<dt><strong>-M</strong> <em>mkeyname</em></dt>
-<dd>principal name for the master key in the database. If not
-specified, the name is determined by the <strong>master_key_name</strong>
-variable in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-m</strong></dt>
-<dd>specifies that the master database password should be read from
-the keyboard rather than fetched from a file on disk.</dd>
-<dt><strong>-sf</strong> <em>stash_file</em></dt>
-<dd>specifies the stash filename of the master database password. If
-not specified, the filename is determined by the
-<strong>key_stash_file</strong> variable in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-P</strong> <em>password</em></dt>
-<dd>specifies the master database password. Using this option may
-expose the password to other users on the system via the process
-list.</dd>
-<dt><strong>-x</strong> <em>db_args</em></dt>
-<dd>specifies database-specific options. See <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> for
-supported options.</dd>
-</dl>
-<div class="toctree-wrapper compound">
-</div>
-<div class="section" id="dumping-a-kerberos-database-to-a-file">
-<h3>Dumping a Kerberos database to a file<a class="headerlink" href="#dumping-a-kerberos-database-to-a-file" title="Permalink to this headline">¶</a></h3>
-<p>To dump a Kerberos database into a file, use the <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>
-<strong>dump</strong> command on one of the KDCs.</p>
-<blockquote>
-<div><strong>dump</strong> [<strong>-b7</strong>|<strong>-r13</strong>|<strong>-r18</strong>]
-[<strong>-verbose</strong>] [<strong>-mkey_convert</strong>] [<strong>-new_mkey_file</strong>
-<em>mkey_file</em>] [<strong>-rev</strong>] [<strong>-recurse</strong>] [<em>filename</em>
-[<em>principals</em>…]]</div></blockquote>
-<p>Dumps the current Kerberos and KADM5 database into an ASCII file. By
-default, the database is dumped in current format, “kdb5_util
-load_dump version 7”. If filename is not specified, or is the string
-“-“, the dump is sent to standard output. Options:</p>
-<dl class="docutils">
-<dt><strong>-b7</strong></dt>
-<dd>causes the dump to be in the Kerberos 5 Beta 7 format (“kdb5_util
-load_dump version 4”). This was the dump format produced on
-releases prior to 1.2.2.</dd>
-<dt><strong>-r13</strong></dt>
-<dd>causes the dump to be in the Kerberos 5 1.3 format (“kdb5_util
-load_dump version 5”). This was the dump format produced on
-releases prior to 1.8.</dd>
-<dt><strong>-r18</strong></dt>
-<dd>causes the dump to be in the Kerberos 5 1.8 format (“kdb5_util
-load_dump version 6”). This was the dump format produced on
-releases prior to 1.11.</dd>
-<dt><strong>-verbose</strong></dt>
-<dd>causes the name of each principal and policy to be printed as it
-is dumped.</dd>
-<dt><strong>-mkey_convert</strong></dt>
-<dd>prompts for a new master key. This new master key will be used to
-re-encrypt principal key data in the dumpfile. The principal keys
-themselves will not be changed.</dd>
-<dt><strong>-new_mkey_file</strong> <em>mkey_file</em></dt>
-<dd>the filename of a stash file. The master key in this stash file
-will be used to re-encrypt the key data in the dumpfile. The key
-data in the database will not be changed.</dd>
-<dt><strong>-rev</strong></dt>
-<dd>dumps in reverse order. This may recover principals that do not
-dump normally, in cases where database corruption has occurred.</dd>
-<dt><strong>-recurse</strong></dt>
-<dd><p class="first">causes the dump to walk the database recursively (btree only).
-This may recover principals that do not dump normally, in cases
-where database corruption has occurred. In cases of such
-corruption, this option will probably retrieve more principals
-than the <strong>-rev</strong> option will.</p>
-<div class="versionchanged">
-<p><span class="versionmodified">Changed in version 1.15: </span>Release 1.15 restored the functionality of the <strong>-recurse</strong>
-option.</p>
-</div>
-<div class="last versionchanged">
-<p><span class="versionmodified">Changed in version 1.5: </span>The <strong>-recurse</strong> option ceased working until release 1.15,
-doing a normal dump instead of a recursive traversal.</p>
-</div>
-</dd>
-</dl>
-<div class="section" id="id3">
-<h4>Examples<a class="headerlink" href="#id3" title="Permalink to this headline">¶</a></h4>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_util</span> <span class="n">dump</span> <span class="n">dumpfile</span>
-<span class="n">shell</span><span class="o">%</span>
-
-<span class="n">shell</span><span class="o">%</span> <span class="n">kbd5_util</span> <span class="n">dump</span> <span class="o">-</span><span class="n">verbose</span> <span class="n">dumpfile</span>
-<span class="n">kadmin</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">krbtgt</span><span class="o">/</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">kadmin</span><span class="o">/</span><span class="n">history</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">K</span><span class="o">/</span><span class="n">M</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">kadmin</span><span class="o">/</span><span class="n">changepw</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>If you specify which principals to dump, you must use the full
-principal, as in the following example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_util</span> <span class="n">dump</span> <span class="o">-</span><span class="n">verbose</span> <span class="n">dumpfile</span> <span class="n">K</span><span class="o">/</span><span class="n">M</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">kadmin</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">kadmin</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">K</span><span class="o">/</span><span class="n">M</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>Otherwise, the principals will not match those in the database and
-will not be dumped:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_util</span> <span class="n">dump</span> <span class="o">-</span><span class="n">verbose</span> <span class="n">dumpfile</span> <span class="n">K</span><span class="o">/</span><span class="n">M</span> <span class="n">kadmin</span><span class="o">/</span><span class="n">admin</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>If you do not specify a dump file, kdb5_util will dump the database to
-the standard output.</p>
-</div>
-</div>
-<div class="section" id="restoring-a-kerberos-database-from-a-dump-file">
-<span id="restore-from-dump"></span><h3>Restoring a Kerberos database from a dump file<a class="headerlink" href="#restoring-a-kerberos-database-from-a-dump-file" title="Permalink to this headline">¶</a></h3>
-<p>To restore a Kerberos database dump from a file, use the
-<a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> <strong>load</strong> command on one of the KDCs.</p>
-<blockquote>
-<div><strong>load</strong> [<strong>-b7</strong>|<strong>-r13</strong>|<strong>-r18</strong>] [<strong>-hash</strong>]
-[<strong>-verbose</strong>] [<strong>-update</strong>] <em>filename</em></div></blockquote>
-<p>Loads a database dump from the named file into the named database. If
-no option is given to determine the format of the dump file, the
-format is detected automatically and handled as appropriate. Unless
-the <strong>-update</strong> option is given, <strong>load</strong> creates a new database
-containing only the data in the dump file, overwriting the contents of
-any previously existing database. Note that when using the LDAP KDC
-database module, the <strong>-update</strong> flag is required.</p>
-<p>Options:</p>
-<dl class="docutils">
-<dt><strong>-b7</strong></dt>
-<dd>requires the database to be in the Kerberos 5 Beta 7 format
-(“kdb5_util load_dump version 4”). This was the dump format
-produced on releases prior to 1.2.2.</dd>
-<dt><strong>-r13</strong></dt>
-<dd>requires the database to be in Kerberos 5 1.3 format (“kdb5_util
-load_dump version 5”). This was the dump format produced on
-releases prior to 1.8.</dd>
-<dt><strong>-r18</strong></dt>
-<dd>requires the database to be in Kerberos 5 1.8 format (“kdb5_util
-load_dump version 6”). This was the dump format produced on
-releases prior to 1.11.</dd>
-<dt><strong>-hash</strong></dt>
-<dd>stores the database in hash format, if using the DB2 database
-type. If this option is not specified, the database will be
-stored in btree format. This option is not recommended, as
-databases stored in hash format are known to corrupt data and lose
-principals.</dd>
-<dt><strong>-verbose</strong></dt>
-<dd>causes the name of each principal and policy to be printed as it
-is dumped.</dd>
-<dt><strong>-update</strong></dt>
-<dd>records from the dump file are added to or updated in the existing
-database. Otherwise, a new database is created containing only
-what is in the dump file and the old one destroyed upon successful
-completion.</dd>
-</dl>
-<div class="section" id="id4">
-<h4>Examples<a class="headerlink" href="#id4" title="Permalink to this headline">¶</a></h4>
-<p>To dump a single principal and later load it, updating the database:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_util</span> <span class="n">dump</span> <span class="n">dumpfile</span> <span class="n">principal</span><span class="nd">@REALM</span>
-<span class="n">shell</span><span class="o">%</span>
-
-<span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_util</span> <span class="n">load</span> <span class="o">-</span><span class="n">update</span> <span class="n">dumpfile</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If the database file exists, and the <em>-update</em> flag was not
-given, <em>kdb5_util</em> will overwrite the existing database.</p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Using kdb5_util to dump and reload the principal database is
-only necessary when upgrading from versions of krb5 prior
-to 1.2.0—newer versions will use the existing database as-is.</p>
-</div>
-</div>
-</div>
-<div class="section" id="creating-a-stash-file">
-<span id="create-stash"></span><h3>Creating a stash file<a class="headerlink" href="#creating-a-stash-file" title="Permalink to this headline">¶</a></h3>
-<p>A stash file allows a KDC to authenticate itself to the database
-utilities, such as <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a>, <a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a>, and
-<a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>.</p>
-<p>To create a stash file, use the <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> <strong>stash</strong> command.</p>
-<blockquote>
-<div><strong>stash</strong> [<strong>-f</strong> <em>keyfile</em>]</div></blockquote>
-<p>Stores the master principal’s keys in a stash file. The <strong>-f</strong>
-argument can be used to override the <em>keyfile</em> specified in
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</p>
-<div class="section" id="example">
-<h4>Example<a class="headerlink" href="#example" title="Permalink to this headline">¶</a></h4>
-<blockquote>
-<div>shell% kdb5_util stash
-kdb5_util: Cannot find/read stored master key while reading master key
-kdb5_util: Warning: proceeding without master key
-Enter KDC database master key: <= Type the KDC database master password.
-shell%</div></blockquote>
-<p>If you do not specify a stash file, kdb5_util will stash the key in
-the file specified in your <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> file.</p>
-</div>
-</div>
-<div class="section" id="creating-and-destroying-a-kerberos-database">
-<h3>Creating and destroying a Kerberos database<a class="headerlink" href="#creating-and-destroying-a-kerberos-database" title="Permalink to this headline">¶</a></h3>
-<p>If you need to create a new Kerberos database, use the
-<a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> <strong>create</strong> command.</p>
-<blockquote>
-<div><strong>create</strong> [<strong>-s</strong>]</div></blockquote>
-<p>Creates a new database. If the <strong>-s</strong> option is specified, the stash
-file is also created. This command fails if the database already
-exists. If the command is successful, the database is opened just as
-if it had already existed when the program was first run.</p>
-<p>If you need to destroy the current Kerberos database, use the
-<a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> <strong>destroy</strong> command.</p>
-<blockquote>
-<div><strong>destroy</strong> [<strong>-f</strong>]</div></blockquote>
-<p>Destroys the database, first overwriting the disk sectors and then
-unlinking the files, after prompting the user for confirmation. With
-the <strong>-f</strong> argument, does not prompt the user.</p>
-<div class="section" id="id5">
-<h4>Examples<a class="headerlink" href="#id5" title="Permalink to this headline">¶</a></h4>
-<div class="highlight-default"><div class="highlight"><pre><span></span>shell% kdb5_util -r ATHENA.MIT.EDU create -s
-Loading random data
-Initializing database '/usr/local/var/krb5kdc/principal' for realm 'ATHENA.MIT.EDU',
-master key name 'K/M@ATHENA.MIT.EDU'
-You will be prompted for the database Master Password.
-It is important that you NOT FORGET this password.
-Enter KDC database master key: <= Type the master password.
-Re-enter KDC database master key to verify: <= Type it again.
-shell%
-
-shell% kdb5_util -r ATHENA.MIT.EDU destroy
-Deleting KDC database stored in '/usr/local/var/krb5kdc/principal', are you sure?
-(type 'yes' to confirm)? <= yes
-OK, deleting database '/usr/local/var/krb5kdc/principal'...
-** Database '/usr/local/var/krb5kdc/principal' destroyed.
-shell%
-</pre></div>
-</div>
-</div>
-</div>
-<div class="section" id="updating-the-master-key">
-<span id="updating-master-key"></span><h3>Updating the master key<a class="headerlink" href="#updating-the-master-key" title="Permalink to this headline">¶</a></h3>
-<p>Starting with release 1.7, <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> allows the master key
-to be changed using a rollover process, with minimal loss of
-availability. To roll over the master key, follow these steps:</p>
-<ol class="arabic">
-<li><p class="first">On the primary KDC, run <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">list_mkeys</span></code> to view the
-current master key version number (KVNO). If you have never rolled
-over the master key before, this will likely be version 1:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>$ kdb5_util list_mkeys
-Master keys for Principal: K/M@KRBTEST.COM
-KVNO: 1, Enctype: aes256-cts-hmac-sha384-192, Active on: Thu Jan 01 00:00:00 UTC 1970 *
-</pre></div>
-</div>
-</li>
-<li><p class="first">On the primary KDC, run <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">use_mkey</span> <span class="pre">1</span></code> to ensure that a
-master key activation list is present in the database. This step
-is unnecessary in release 1.11.4 or later, or if the database was
-initially created with release 1.7 or later.</p>
-</li>
-<li><p class="first">On the primary KDC, run <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">add_mkey</span> <span class="pre">-s</span></code> to create a new
-master key and write it to the stash file. Enter a secure password
-when prompted. If this is the first time you are changing the
-master key, the new key will have version 2. The new master key
-will not be used until you make it active.</p>
-</li>
-<li><p class="first">Propagate the database to all replica KDCs, either manually or by
-waiting until the next scheduled propagation. If you do not have
-any replica KDCs, you can skip this and the next step.</p>
-</li>
-<li><p class="first">On each replica KDC, run <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">list_mkeys</span></code> to verify that
-the new master key is present, and then <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">stash</span></code> to
-write the new master key to the replica KDC’s stash file.</p>
-</li>
-<li><p class="first">On the primary KDC, run <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">use_mkey</span> <span class="pre">2</span></code> to begin using the
-new master key. Replace <code class="docutils literal"><span class="pre">2</span></code> with the version of the new master
-key, as appropriate. You can optionally specify a date for the new
-master key to become active; by default, it will become active
-immediately. Prior to release 1.12, <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> must be
-restarted for this change to take full effect.</p>
-</li>
-<li><p class="first">On the primary KDC, run <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">update_princ_encryption</span></code>.
-This command will iterate over the database and re-encrypt all keys
-in the new master key. If the database is large and uses DB2, the
-primary KDC will become unavailable while this command runs, but
-clients should fail over to replica KDCs (if any are present)
-during this time period. In release 1.13 and later, you can
-instead run <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">-x</span> <span class="pre">unlockiter</span> <span class="pre">update_princ_encryption</span></code> to
-use unlocked iteration; this variant will take longer, but will
-keep the database available to the KDC and kadmind while it runs.</p>
-</li>
-<li><p class="first">Wait until the above changes have propagated to all replica KDCs
-and until all running KDC and kadmind processes have serviced
-requests using updated principal entries.</p>
-</li>
-<li><p class="first">On the primary KDC, run <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">purge_mkeys</span></code> to clean up the
-old master key.</p>
-</li>
-</ol>
-</div>
-</div>
-<div class="section" id="operations-on-the-ldap-database">
-<span id="ops-on-ldap"></span><h2>Operations on the LDAP database<a class="headerlink" href="#operations-on-the-ldap-database" title="Permalink to this headline">¶</a></h2>
-<p>The <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a> is the primary tool for administrating
-the Kerberos LDAP database. It allows an administrator to manage
-realms, Kerberos services (KDC and Admin Server) and ticket policies.</p>
-<p><strong>kdb5_ldap_util</strong>
-[<strong>-D</strong> <em>user_dn</em> [<strong>-w</strong> <em>passwd</em>]]
-[<strong>-H</strong> <em>ldapuri</em>]
-<strong>command</strong>
-[<em>command_options</em>]</p>
-<p><strong>OPTIONS</strong></p>
-<dl class="docutils">
-<dt><strong>-r</strong> <em>realm</em></dt>
-<dd>Specifies the realm to be operated on.</dd>
-<dt><strong>-D</strong> <em>user_dn</em></dt>
-<dd>Specifies the Distinguished Name (DN) of the user who has
-sufficient rights to perform the operation on the LDAP server.</dd>
-<dt><strong>-w</strong> <em>passwd</em></dt>
-<dd>Specifies the password of <em>user_dn</em>. This option is not
-recommended.</dd>
-<dt><strong>-H</strong> <em>ldapuri</em></dt>
-<dd>Specifies the URI of the LDAP server.</dd>
-</dl>
-<p>By default, kdb5_ldap_util operates on the default realm (as specified
-in <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>) and connects and authenticates to the LDAP
-server in the same manner as :ref:kadmind(8)` would given the
-parameters in <a class="reference internal" href="conf_files/kdc_conf.html#dbdefaults"><span class="std std-ref">[dbdefaults]</span></a> in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</p>
-<div class="section" id="creating-a-kerberos-realm">
-<span id="ldap-create-realm"></span><h3>Creating a Kerberos realm<a class="headerlink" href="#creating-a-kerberos-realm" title="Permalink to this headline">¶</a></h3>
-<p>If you need to create a new realm, use the <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a>
-<strong>create</strong> command as follows.</p>
-<blockquote>
-<div><strong>create</strong>
-[<strong>-subtrees</strong> <em>subtree_dn_list</em>]
-[<strong>-sscope</strong> <em>search_scope</em>]
-[<strong>-containerref</strong> <em>container_reference_dn</em>]
-[<strong>-k</strong> <em>mkeytype</em>]
-[<strong>-kv</strong> <em>mkeyVNO</em>]
-[<strong>-M</strong> <em>mkeyname</em>]
-[<strong>-m|-P</strong> <em>password</em>|<strong>-sf</strong> <em>stashfilename</em>]
-[<strong>-s</strong>]
-[<strong>-maxtktlife</strong> <em>max_ticket_life</em>]
-[<strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em>]
-[<em>ticket_flags</em>]</div></blockquote>
-<p>Creates realm in directory. Options:</p>
-<dl class="docutils">
-<dt><strong>-subtrees</strong> <em>subtree_dn_list</em></dt>
-<dd>Specifies the list of subtrees containing the principals of a
-realm. The list contains the DNs of the subtree objects separated
-by colon (<code class="docutils literal"><span class="pre">:</span></code>).</dd>
-<dt><strong>-sscope</strong> <em>search_scope</em></dt>
-<dd>Specifies the scope for searching the principals under the
-subtree. The possible values are 1 or one (one level), 2 or sub
-(subtrees).</dd>
-<dt><strong>-containerref</strong> <em>container_reference_dn</em></dt>
-<dd>Specifies the DN of the container object in which the principals
-of a realm will be created. If the container reference is not
-configured for a realm, the principals will be created in the
-realm container.</dd>
-<dt><strong>-k</strong> <em>mkeytype</em></dt>
-<dd>Specifies the key type of the master key in the database. The
-default is given by the <strong>master_key_type</strong> variable in
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-kv</strong> <em>mkeyVNO</em></dt>
-<dd>Specifies the version number of the master key in the database;
-the default is 1. Note that 0 is not allowed.</dd>
-<dt><strong>-M</strong> <em>mkeyname</em></dt>
-<dd>Specifies the principal name for the master key in the database.
-If not specified, the name is determined by the
-<strong>master_key_name</strong> variable in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>.</dd>
-<dt><strong>-m</strong></dt>
-<dd>Specifies that the master database password should be read from
-the TTY rather than fetched from a file on the disk.</dd>
-<dt><strong>-P</strong> <em>password</em></dt>
-<dd>Specifies the master database password. This option is not
-recommended.</dd>
-<dt><strong>-sf</strong> <em>stashfilename</em></dt>
-<dd>Specifies the stash file of the master database password.</dd>
-<dt><strong>-s</strong></dt>
-<dd>Specifies that the stash file is to be created.</dd>
-<dt><strong>-maxtktlife</strong> <em>max_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum ticket life for
-principals in this realm.</dd>
-<dt><strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum renewable life of
-tickets for principals in this realm.</dd>
-<dt><em>ticket_flags</em></dt>
-<dd>Specifies global ticket flags for the realm. Allowable flags are
-documented in the description of the <strong>add_principal</strong> command in
-<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">create</span> <span class="o">-</span><span class="n">subtrees</span> <span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">sscope</span> <span class="n">SUB</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">Initializing</span> <span class="n">database</span> <span class="k">for</span> <span class="n">realm</span> <span class="s1">'ATHENA.MIT.EDU'</span>
-<span class="n">You</span> <span class="n">will</span> <span class="n">be</span> <span class="n">prompted</span> <span class="k">for</span> <span class="n">the</span> <span class="n">database</span> <span class="n">Master</span> <span class="n">Password</span><span class="o">.</span>
-<span class="n">It</span> <span class="ow">is</span> <span class="n">important</span> <span class="n">that</span> <span class="n">you</span> <span class="n">NOT</span> <span class="n">FORGET</span> <span class="n">this</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">KDC</span> <span class="n">database</span> <span class="n">master</span> <span class="n">key</span><span class="p">:</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">KDC</span> <span class="n">database</span> <span class="n">master</span> <span class="n">key</span> <span class="n">to</span> <span class="n">verify</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="modifying-a-kerberos-realm">
-<span id="ldap-mod-realm"></span><h3>Modifying a Kerberos realm<a class="headerlink" href="#modifying-a-kerberos-realm" title="Permalink to this headline">¶</a></h3>
-<p>If you need to modify a realm, use the <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a>
-<strong>modify</strong> command as follows.</p>
-<blockquote>
-<div><strong>modify</strong>
-[<strong>-subtrees</strong> <em>subtree_dn_list</em>]
-[<strong>-sscope</strong> <em>search_scope</em>]
-[<strong>-containerref</strong> <em>container_reference_dn</em>]
-[<strong>-maxtktlife</strong> <em>max_ticket_life</em>]
-[<strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em>]
-[<em>ticket_flags</em>]</div></blockquote>
-<p>Modifies the attributes of a realm. Options:</p>
-<dl class="docutils">
-<dt><strong>-subtrees</strong> <em>subtree_dn_list</em></dt>
-<dd>Specifies the list of subtrees containing the principals of a
-realm. The list contains the DNs of the subtree objects separated
-by colon (<code class="docutils literal"><span class="pre">:</span></code>). This list replaces the existing list.</dd>
-<dt><strong>-sscope</strong> <em>search_scope</em></dt>
-<dd>Specifies the scope for searching the principals under the
-subtrees. The possible values are 1 or one (one level), 2 or sub
-(subtrees).</dd>
-<dt><strong>-containerref</strong> <em>container_reference_dn</em> Specifies the DN of the</dt>
-<dd>container object in which the principals of a realm will be
-created.</dd>
-<dt><strong>-maxtktlife</strong> <em>max_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum ticket life for
-principals in this realm.</dd>
-<dt><strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum renewable life of
-tickets for principals in this realm.</dd>
-<dt><em>ticket_flags</em></dt>
-<dd>Specifies global ticket flags for the realm. Allowable flags are
-documented in the description of the <strong>add_principal</strong> command in
-<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span>
- <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="n">modify</span> <span class="o">+</span><span class="n">requires_preauth</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="destroying-a-kerberos-realm">
-<h3>Destroying a Kerberos realm<a class="headerlink" href="#destroying-a-kerberos-realm" title="Permalink to this headline">¶</a></h3>
-<p>If you need to destroy a Kerberos realm, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a> <strong>destroy</strong> command as follows.</p>
-<blockquote>
-<div><strong>destroy</strong> [<strong>-f</strong>]</div></blockquote>
-<p>Destroys an existing realm. Options:</p>
-<dl class="docutils">
-<dt><strong>-f</strong></dt>
-<dd>If specified, will not prompt the user for confirmation.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>shell% kdb5_ldap_util -r ATHENA.MIT.EDU -D cn=admin,o=org -H
- ldaps://ldap-server1.mit.edu destroy
-Password for "cn=admin,o=org":
-Deleting KDC database of 'ATHENA.MIT.EDU', are you sure?
-(type 'yes' to confirm)? yes
-OK, deleting database of 'ATHENA.MIT.EDU'...
-shell%
-</pre></div>
-</div>
-</div>
-<div class="section" id="retrieving-information-about-a-kerberos-realm">
-<h3>Retrieving information about a Kerberos realm<a class="headerlink" href="#retrieving-information-about-a-kerberos-realm" title="Permalink to this headline">¶</a></h3>
-<p>If you need to display the attributes of a realm, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a> <strong>view</strong> command as follows.</p>
-<blockquote>
-<div><strong>view</strong></div></blockquote>
-<p>Displays the attributes of a realm.</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">view</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">Realm</span> <span class="n">Name</span><span class="p">:</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">Subtree</span><span class="p">:</span> <span class="n">ou</span><span class="o">=</span><span class="n">users</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span>
-<span class="n">Subtree</span><span class="p">:</span> <span class="n">ou</span><span class="o">=</span><span class="n">servers</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span>
-<span class="n">SearchScope</span><span class="p">:</span> <span class="n">ONE</span>
-<span class="n">Maximum</span> <span class="n">ticket</span> <span class="n">life</span><span class="p">:</span> <span class="mi">0</span> <span class="n">days</span> <span class="mi">01</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Maximum</span> <span class="n">renewable</span> <span class="n">life</span><span class="p">:</span> <span class="mi">0</span> <span class="n">days</span> <span class="mi">10</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Ticket</span> <span class="n">flags</span><span class="p">:</span> <span class="n">DISALLOW_FORWARDABLE</span> <span class="n">REQUIRES_PWCHANGE</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="listing-available-kerberos-realms">
-<h3>Listing available Kerberos realms<a class="headerlink" href="#listing-available-kerberos-realms" title="Permalink to this headline">¶</a></h3>
-<p>If you need to display the list of the realms, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a> <strong>list</strong> command as follows.</p>
-<blockquote>
-<div><strong>list</strong></div></blockquote>
-<p>Lists the names of realms under the container.</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span>
- <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="nb">list</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">OPENLDAP</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">MEDIA</span><span class="o">-</span><span class="n">LAB</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="stashing-service-object-s-password">
-<span id="stash-ldap"></span><h3>Stashing service object’s password<a class="headerlink" href="#stashing-service-object-s-password" title="Permalink to this headline">¶</a></h3>
-<p>The <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a> <strong>stashsrvpw</strong> command allows an
-administrator to store the password of service object in a file. The
-KDC and Administration server uses this password to authenticate to
-the LDAP server.</p>
-<blockquote>
-<div><strong>stashsrvpw</strong>
-[<strong>-f</strong> <em>filename</em>]
-<em>name</em></div></blockquote>
-<p>Allows an administrator to store the password for service object in a
-file so that KDC and Administration server can use it to authenticate
-to the LDAP server. Options:</p>
-<dl class="docutils">
-<dt><strong>-f</strong> <em>filename</em></dt>
-<dd>Specifies the complete path of the service password file. By
-default, <code class="docutils literal"><span class="pre">/usr/local/var/service_passwd</span></code> is used.</dd>
-<dt><em>name</em></dt>
-<dd>Specifies the name of the object whose password is to be stored.
-If <a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> or <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> are configured for
-simple binding, this should be the distinguished name it will
-use as given by the <strong>ldap_kdc_dn</strong> or <strong>ldap_kadmind_dn</strong>
-variable in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>. If the KDC or kadmind is
-configured for SASL binding, this should be the authentication
-name it will use as given by the <strong>ldap_kdc_sasl_authcid</strong> or
-<strong>ldap_kadmind_sasl_authcid</strong> variable.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="n">stashsrvpw</span> <span class="o">-</span><span class="n">f</span> <span class="o">/</span><span class="n">home</span><span class="o">/</span><span class="n">andrew</span><span class="o">/</span><span class="n">conf_keyfile</span>
- <span class="n">cn</span><span class="o">=</span><span class="n">service</span><span class="o">-</span><span class="n">kdc</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=service-kdc,o=org"</span><span class="p">:</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="s2">"cn=service-kdc,o=org"</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="ticket-policy-operations">
-<h3>Ticket Policy operations<a class="headerlink" href="#ticket-policy-operations" title="Permalink to this headline">¶</a></h3>
-<div class="section" id="creating-a-ticket-policy">
-<h4>Creating a Ticket Policy<a class="headerlink" href="#creating-a-ticket-policy" title="Permalink to this headline">¶</a></h4>
-<p>To create a new ticket policy in directory , use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a> <strong>create_policy</strong> command. Ticket policy
-objects are created under the realm container.</p>
-<blockquote>
-<div><strong>create_policy</strong>
-[<strong>-maxtktlife</strong> <em>max_ticket_life</em>]
-[<strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em>]
-[<em>ticket_flags</em>]
-<em>policy_name</em></div></blockquote>
-<p>Creates a ticket policy in the directory. Options:</p>
-<dl class="docutils">
-<dt><strong>-maxtktlife</strong> <em>max_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum ticket life for
-principals.</dd>
-<dt><strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em></dt>
-<dd>(<a class="reference internal" href="../basic/date_format.html#getdate"><span class="std std-ref">getdate time</span></a> string) Specifies maximum renewable life of
-tickets for principals.</dd>
-<dt><em>ticket_flags</em></dt>
-<dd>Specifies the ticket flags. If this option is not specified, by
-default, no restriction will be set by the policy. Allowable
-flags are documented in the description of the <strong>add_principal</strong>
-command in <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>.</dd>
-<dt><em>policy_name</em></dt>
-<dd>Specifies the name of the ticket policy.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">create_policy</span> <span class="o">-</span><span class="n">maxtktlife</span> <span class="s2">"1 day"</span>
- <span class="o">-</span><span class="n">maxrenewlife</span> <span class="s2">"1 week"</span> <span class="o">-</span><span class="n">allow_postdated</span> <span class="o">+</span><span class="n">needchange</span>
- <span class="o">-</span><span class="n">allow_forwardable</span> <span class="n">tktpolicy</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="modifying-a-ticket-policy">
-<h4>Modifying a Ticket Policy<a class="headerlink" href="#modifying-a-ticket-policy" title="Permalink to this headline">¶</a></h4>
-<p>To modify a ticket policy in directory, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a> <strong>modify_policy</strong> command.</p>
-<blockquote>
-<div><strong>modify_policy</strong>
-[<strong>-maxtktlife</strong> <em>max_ticket_life</em>]
-[<strong>-maxrenewlife</strong> <em>max_renewable_ticket_life</em>]
-[<em>ticket_flags</em>]
-<em>policy_name</em></div></blockquote>
-<p>Modifies the attributes of a ticket policy. Options are same as for
-<strong>create_policy</strong>.</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span>
- <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">modify_policy</span>
- <span class="o">-</span><span class="n">maxtktlife</span> <span class="s2">"60 minutes"</span> <span class="o">-</span><span class="n">maxrenewlife</span> <span class="s2">"10 hours"</span>
- <span class="o">+</span><span class="n">allow_postdated</span> <span class="o">-</span><span class="n">requires_preauth</span> <span class="n">tktpolicy</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="retrieving-information-about-a-ticket-policy">
-<h4>Retrieving Information About a Ticket Policy<a class="headerlink" href="#retrieving-information-about-a-ticket-policy" title="Permalink to this headline">¶</a></h4>
-<p>To display the attributes of a ticket policy, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a> <strong>view_policy</strong> command.</p>
-<blockquote>
-<div><strong>view_policy</strong>
-<em>policy_name</em></div></blockquote>
-<p>Displays the attributes of the named ticket policy.</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">view_policy</span> <span class="n">tktpolicy</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">Ticket</span> <span class="n">policy</span><span class="p">:</span> <span class="n">tktpolicy</span>
-<span class="n">Maximum</span> <span class="n">ticket</span> <span class="n">life</span><span class="p">:</span> <span class="mi">0</span> <span class="n">days</span> <span class="mi">01</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Maximum</span> <span class="n">renewable</span> <span class="n">life</span><span class="p">:</span> <span class="mi">0</span> <span class="n">days</span> <span class="mi">10</span><span class="p">:</span><span class="mi">00</span><span class="p">:</span><span class="mi">00</span>
-<span class="n">Ticket</span> <span class="n">flags</span><span class="p">:</span> <span class="n">DISALLOW_FORWARDABLE</span> <span class="n">REQUIRES_PWCHANGE</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="destroying-a-ticket-policy">
-<h4>Destroying a Ticket Policy<a class="headerlink" href="#destroying-a-ticket-policy" title="Permalink to this headline">¶</a></h4>
-<p>To destroy an existing ticket policy, use the <a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a>
-<strong>destroy_policy</strong> command.</p>
-<blockquote>
-<div><strong>destroy_policy</strong>
-[<strong>-force</strong>]
-<em>policy_name</em></div></blockquote>
-<p>Destroys an existing ticket policy. Options:</p>
-<dl class="docutils">
-<dt><strong>-force</strong></dt>
-<dd>Forces the deletion of the policy object. If not specified, the
-user will be prompted for confirmation before deleting the policy.</dd>
-<dt><em>policy_name</em></dt>
-<dd>Specifies the name of the ticket policy.</dd>
-</dl>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu
- -r ATHENA.MIT.EDU destroy_policy tktpolicy
-Password for "cn=admin,o=org":
-This will delete the policy object 'tktpolicy', are you sure?
-(type 'yes' to confirm)? yes
-** policy object 'tktpolicy' deleted.
-</pre></div>
-</div>
-</div>
-<div class="section" id="listing-available-ticket-policies">
-<h4>Listing available Ticket Policies<a class="headerlink" href="#listing-available-ticket-policies" title="Permalink to this headline">¶</a></h4>
-<p>To list the name of ticket policies in a realm, use the
-<a class="reference internal" href="admin_commands/kdb5_ldap_util.html#kdb5-ldap-util-8"><span class="std std-ref">kdb5_ldap_util</span></a> <strong>list_policy</strong> command.</p>
-<blockquote>
-<div><strong>list_policy</strong></div></blockquote>
-<p>Lists ticket policies.</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdb5_ldap_util</span> <span class="o">-</span><span class="n">D</span> <span class="n">cn</span><span class="o">=</span><span class="n">admin</span><span class="p">,</span><span class="n">o</span><span class="o">=</span><span class="n">org</span> <span class="o">-</span><span class="n">H</span> <span class="n">ldaps</span><span class="p">:</span><span class="o">//</span><span class="n">ldap</span><span class="o">-</span><span class="n">server1</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="n">list_policy</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="s2">"cn=admin,o=org"</span><span class="p">:</span>
-<span class="n">tktpolicy</span>
-<span class="n">tmppolicy</span>
-<span class="n">userpolicy</span>
-</pre></div>
-</div>
-</div>
-</div>
-</div>
-<div class="section" id="cross-realm-authentication">
-<span id="xrealm-authn"></span><h2>Cross-realm authentication<a class="headerlink" href="#cross-realm-authentication" title="Permalink to this headline">¶</a></h2>
-<p>In order for a KDC in one realm to authenticate Kerberos users in a
-different realm, it must share a key with the KDC in the other realm.
-In both databases, there must be krbtgt service principals for both realms.
-For example, if you need to do cross-realm authentication between the realms
-<code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code> and <code class="docutils literal"><span class="pre">EXAMPLE.COM</span></code>, you would need to add the
-principals <code class="docutils literal"><span class="pre">krbtgt/EXAMPLE.COM@ATHENA.MIT.EDU</span></code> and
-<code class="docutils literal"><span class="pre">krbtgt/ATHENA.MIT.EDU@EXAMPLE.COM</span></code> to both databases.
-These principals must all have the same passwords, key version
-numbers, and encryption types; this may require explicitly setting
-the key version number with the <strong>-kvno</strong> option.</p>
-<p>In the ATHENA.MIT.EDU and EXAMPLE.COM cross-realm case, the administrators
-would run the following commands on the KDCs in both realms:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span><span class="p">:</span> <span class="n">kadmin</span><span class="o">.</span><span class="n">local</span> <span class="o">-</span><span class="n">e</span> <span class="s2">"aes256-cts:normal"</span>
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">addprinc</span> <span class="o">-</span><span class="n">requires_preauth</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span>
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">addprinc</span> <span class="o">-</span><span class="n">requires_preauth</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span>
-<span class="n">kadmin</span><span class="p">:</span>
-</pre></div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Even if most principals in a realm are generally created
-with the <strong>requires_preauth</strong> flag enabled, this flag is not
-desirable on cross-realm authentication keys because doing
-so makes it impossible to disable preauthentication on a
-service-by-service basis. Disabling it as in the example
-above is recommended.</p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">It is very important that these principals have good
-passwords. MIT recommends that TGT principal passwords be
-at least 26 characters of random ASCII text.</p>
-</div>
-</div>
-<div class="section" id="changing-the-krbtgt-key">
-<span id="changing-krbtgt-key"></span><h2>Changing the krbtgt key<a class="headerlink" href="#changing-the-krbtgt-key" title="Permalink to this headline">¶</a></h2>
-<p>A Kerberos Ticket Granting Ticket (TGT) is a service ticket for the
-principal <code class="docutils literal"><span class="pre">krbtgt/REALM</span></code>. The key for this principal is created
-when the Kerberos database is initialized and need not be changed.
-However, it will only have the encryption types supported by the KDC
-at the time of the initial database creation. To allow use of newer
-encryption types for the TGT, this key has to be changed.</p>
-<p>Changing this key using the normal <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>
-<strong>change_password</strong> command would invalidate any previously issued
-TGTs. Therefore, when changing this key, normally one should use the
-<strong>-keepold</strong> flag to change_password to retain the previous key in the
-database as well as the new key. For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">change_password</span> <span class="o">-</span><span class="n">randkey</span> <span class="o">-</span><span class="n">keepold</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-</pre></div>
-</div>
-<div class="admonition warning">
-<p class="first admonition-title">Warning</p>
-<p class="last">After issuing this command, the old key is still valid
-and is still vulnerable to (for instance) brute force
-attacks. To completely retire an old key or encryption
-type, run the kadmin <strong>purgekeys</strong> command to delete keys
-with older kvnos, ideally first making sure that all
-tickets issued with the old keys have expired.</p>
-</div>
-<p>Only the first krbtgt key of the newest key version is used to encrypt
-ticket-granting tickets. However, the set of encryption types present
-in the krbtgt keys is used by default to determine the session key
-types supported by the krbtgt service (see
-<a class="reference internal" href="enctypes.html#session-key-selection"><span class="std std-ref">Session key selection</span></a>). Because non-MIT Kerberos clients
-sometimes send a limited set of encryption types when making AS
-requests, it can be important for the krbtgt service to support
-multiple encryption types. This can be accomplished by giving the
-krbtgt principal multiple keys, which is usually as simple as not
-specifying any <strong>-e</strong> option when changing the krbtgt key, or by
-setting the <strong>session_enctypes</strong> string attribute on the krbtgt
-principal (see <a class="reference internal" href="admin_commands/kadmin_local.html#set-string"><span class="std std-ref">set_string</span></a>).</p>
-<p>Due to a bug in releases 1.8 through 1.13, renewed and forwarded
-tickets may not work if the original ticket was obtained prior to a
-krbtgt key change and the modified ticket is obtained afterwards.
-Upgrading the KDC to release 1.14 or later will correct this bug.</p>
-</div>
-<div class="section" id="incremental-database-propagation">
-<span id="incr-db-prop"></span><h2>Incremental database propagation<a class="headerlink" href="#incremental-database-propagation" title="Permalink to this headline">¶</a></h2>
-<div class="section" id="overview">
-<h3>Overview<a class="headerlink" href="#overview" title="Permalink to this headline">¶</a></h3>
-<p>At some very large sites, dumping and transmitting the database can
-take more time than is desirable for changes to propagate from the
-primary KDC to the replica KDCs. The incremental propagation support
-added in the 1.7 release is intended to address this.</p>
-<p>With incremental propagation enabled, all programs on the primary KDC
-that change the database also write information about the changes to
-an “update log” file, maintained as a circular buffer of a certain
-size. A process on each replica KDC connects to a service on the
-primary KDC (currently implemented in the <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> server) and
-periodically requests the changes that have been made since the last
-check. By default, this check is done every two minutes.</p>
-<p>Incremental propagation uses the following entries in the per-realm
-data in the KDC config file (See <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>):</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="4%" />
-<col width="3%" />
-<col width="94%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td>iprop_enable</td>
-<td><em>boolean</em></td>
-<td>If <em>true</em>, then incremental propagation is enabled, and (as noted below) normal kprop propagation is disabled. The default is <em>false</em>.</td>
-</tr>
-<tr class="row-even"><td>iprop_master_ulogsize</td>
-<td><em>integer</em></td>
-<td>Indicates the number of entries that should be retained in the update log. The default is 1000; the maximum number is 2500.</td>
-</tr>
-<tr class="row-odd"><td>iprop_replica_poll</td>
-<td><em>time interval</em></td>
-<td>Indicates how often the replica should poll the primary KDC for changes to the database. The default is two minutes.</td>
-</tr>
-<tr class="row-even"><td>iprop_port</td>
-<td><em>integer</em></td>
-<td>Specifies the port number to be used for incremental propagation. This is required in both primary and replica configuration files.</td>
-</tr>
-<tr class="row-odd"><td>iprop_resync_timeout</td>
-<td><em>integer</em></td>
-<td>Specifies the number of seconds to wait for a full propagation to complete. This is optional on replica configurations. Defaults to 300 seconds (5 minutes).</td>
-</tr>
-<tr class="row-even"><td>iprop_logfile</td>
-<td><em>file name</em></td>
-<td>Specifies where the update log file for the realm database is to be stored. The default is to use the <em>database_name</em> entry from the realms section of the config file <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>, with <em>.ulog</em> appended. (NOTE: If database_name isn’t specified in the realms section, perhaps because the LDAP database back end is being used, or the file name is specified in the <em>dbmodules</em> section, then the hard-coded default for <em>database_name</em> is used. Determination of the <em>iprop_logfile</em> default value will not use values from the <em>dbmodules</em> section.)</td>
-</tr>
-</tbody>
-</table>
-<p>Both primary and replica sides must have a principal named
-<code class="docutils literal"><span class="pre">kiprop/hostname</span></code> (where <em>hostname</em> is the lowercase,
-fully-qualified, canonical name for the host) registered in the
-Kerberos database, and have keys for that principal stored in the
-default keytab file (<a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a>). The <code class="docutils literal"><span class="pre">kiprop/hostname</span></code> principal may
-have been created automatically for the primary KDC, but it must
-always be created for replica KDCs.</p>
-<p>On the primary KDC side, the <code class="docutils literal"><span class="pre">kiprop/hostname</span></code> principal must be
-listed in the kadmind ACL file <a class="reference internal" href="conf_files/kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a>, and given the
-<strong>p</strong> privilege (see <a class="reference internal" href="#privileges"><span class="std std-ref">Privileges</span></a>).</p>
-<p>On the replica KDC side, <a class="reference internal" href="admin_commands/kpropd.html#kpropd-8"><span class="std std-ref">kpropd</span></a> should be run. When
-incremental propagation is enabled, it will connect to the kadmind on
-the primary KDC and start requesting updates.</p>
-<p>The normal kprop mechanism is disabled by the incremental propagation
-support. However, if the replica has been unable to fetch changes
-from the primary KDC for too long (network problems, perhaps), the log
-on the primary may wrap around and overwrite some of the updates that
-the replica has not yet retrieved. In this case, the replica will
-instruct the primary KDC to dump the current database out to a file
-and invoke a one-time kprop propagation, with special options to also
-convey the point in the update log at which the replica should resume
-fetching incremental updates. Thus, all the keytab and ACL setup
-previously described for kprop propagation is still needed.</p>
-<p>If an environment has a large number of replicas, it may be desirable
-to arrange them in a hierarchy instead of having the primary serve
-updates to every replica. To do this, run <code class="docutils literal"><span class="pre">kadmind</span> <span class="pre">-proponly</span></code> on
-each intermediate replica, and <code class="docutils literal"><span class="pre">kpropd</span> <span class="pre">-A</span> <span class="pre">upstreamhostname</span></code> on
-downstream replicas to direct each one to the appropriate upstream
-replica.</p>
-<p>There are several known restrictions in the current implementation:</p>
-<ul class="simple">
-<li>The incremental update protocol does not transport changes to policy
-objects. Any policy changes on the primary will result in full
-resyncs to all replicas.</li>
-<li>The replica’s KDB module must support locking; it cannot be using the
-LDAP KDB module.</li>
-<li>The primary and replica must be able to initiate TCP connections in
-both directions, without an intervening NAT.</li>
-</ul>
-</div>
-<div class="section" id="sun-mit-incremental-propagation-differences">
-<h3>Sun/MIT incremental propagation differences<a class="headerlink" href="#sun-mit-incremental-propagation-differences" title="Permalink to this headline">¶</a></h3>
-<p>Sun donated the original code for supporting incremental database
-propagation to MIT. Some changes have been made in the MIT source
-tree that will be visible to administrators. (These notes are based
-on Sun’s patches. Changes to Sun’s implementation since then may not
-be reflected here.)</p>
-<p>The Sun config file support looks for <code class="docutils literal"><span class="pre">sunw_dbprop_enable</span></code>,
-<code class="docutils literal"><span class="pre">sunw_dbprop_master_ulogsize</span></code>, and <code class="docutils literal"><span class="pre">sunw_dbprop_slave_poll</span></code>.</p>
-<p>The incremental propagation service is implemented as an ONC RPC
-service. In the Sun implementation, the service is registered with
-rpcbind (also known as portmapper) and the client looks up the port
-number to contact. In the MIT implementation, where interaction with
-some modern versions of rpcbind doesn’t always work well, the port
-number must be specified in the config file on both the primary and
-replica sides.</p>
-<p>The Sun implementation hard-codes pathnames in <code class="docutils literal"><span class="pre">/var/krb5</span></code> for the
-update log and the per-replica kprop dump files. In the MIT
-implementation, the pathname for the update log is specified in the
-config file, and the per-replica dump files are stored in
-<a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/replica_datatrans_hostname</span></code>.</p>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Database administration</a><ul>
-<li><a class="reference internal" href="#kadmin-options">kadmin options</a></li>
-<li><a class="reference internal" href="#date-format">Date Format</a></li>
-<li><a class="reference internal" href="#principals">Principals</a><ul>
-<li><a class="reference internal" href="#adding-modifying-and-deleting-principals">Adding, modifying and deleting principals</a></li>
-<li><a class="reference internal" href="#add-principal">add_principal</a></li>
-<li><a class="reference internal" href="#modify-principal">modify_principal</a></li>
-<li><a class="reference internal" href="#delete-principal">delete_principal</a><ul>
-<li><a class="reference internal" href="#examples">Examples</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#retrieving-information-about-a-principal">Retrieving information about a principal</a></li>
-<li><a class="reference internal" href="#get-principal">get_principal</a></li>
-<li><a class="reference internal" href="#list-principals">list_principals</a></li>
-<li><a class="reference internal" href="#changing-passwords">Changing passwords</a></li>
-<li><a class="reference internal" href="#change-password">change_password</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#policies">Policies</a><ul>
-<li><a class="reference internal" href="#adding-modifying-and-deleting-policies">Adding, modifying and deleting policies</a></li>
-<li><a class="reference internal" href="#add-policy">add_policy</a></li>
-<li><a class="reference internal" href="#modify-policy">modify_policy</a></li>
-<li><a class="reference internal" href="#delete-policy">delete_policy</a></li>
-<li><a class="reference internal" href="#retrieving-policies">Retrieving policies</a></li>
-<li><a class="reference internal" href="#get-policy">get_policy</a></li>
-<li><a class="reference internal" href="#list-policies">list_policies</a></li>
-<li><a class="reference internal" href="#policies-and-principals">Policies and principals</a></li>
-<li><a class="reference internal" href="#updating-the-history-key">Updating the history key</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#privileges">Privileges</a></li>
-<li><a class="reference internal" href="#operations-on-the-kerberos-database">Operations on the Kerberos database</a><ul>
-<li><a class="reference internal" href="#dumping-a-kerberos-database-to-a-file">Dumping a Kerberos database to a file</a><ul>
-<li><a class="reference internal" href="#id3">Examples</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#restoring-a-kerberos-database-from-a-dump-file">Restoring a Kerberos database from a dump file</a><ul>
-<li><a class="reference internal" href="#id4">Examples</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#creating-a-stash-file">Creating a stash file</a><ul>
-<li><a class="reference internal" href="#example">Example</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#creating-and-destroying-a-kerberos-database">Creating and destroying a Kerberos database</a><ul>
-<li><a class="reference internal" href="#id5">Examples</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#updating-the-master-key">Updating the master key</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#operations-on-the-ldap-database">Operations on the LDAP database</a><ul>
-<li><a class="reference internal" href="#creating-a-kerberos-realm">Creating a Kerberos realm</a></li>
-<li><a class="reference internal" href="#modifying-a-kerberos-realm">Modifying a Kerberos realm</a></li>
-<li><a class="reference internal" href="#destroying-a-kerberos-realm">Destroying a Kerberos realm</a></li>
-<li><a class="reference internal" href="#retrieving-information-about-a-kerberos-realm">Retrieving information about a Kerberos realm</a></li>
-<li><a class="reference internal" href="#listing-available-kerberos-realms">Listing available Kerberos realms</a></li>
-<li><a class="reference internal" href="#stashing-service-object-s-password">Stashing service object’s password</a></li>
-<li><a class="reference internal" href="#ticket-policy-operations">Ticket Policy operations</a><ul>
-<li><a class="reference internal" href="#creating-a-ticket-policy">Creating a Ticket Policy</a></li>
-<li><a class="reference internal" href="#modifying-a-ticket-policy">Modifying a Ticket Policy</a></li>
-<li><a class="reference internal" href="#retrieving-information-about-a-ticket-policy">Retrieving Information About a Ticket Policy</a></li>
-<li><a class="reference internal" href="#destroying-a-ticket-policy">Destroying a Ticket Policy</a></li>
-<li><a class="reference internal" href="#listing-available-ticket-policies">Listing available Ticket Policies</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li><a class="reference internal" href="#cross-realm-authentication">Cross-realm authentication</a></li>
-<li><a class="reference internal" href="#changing-the-krbtgt-key">Changing the krbtgt key</a></li>
-<li><a class="reference internal" href="#incremental-database-propagation">Incremental database propagation</a><ul>
-<li><a class="reference internal" href="#overview">Overview</a></li>
-<li><a class="reference internal" href="#sun-mit-incremental-propagation-differences">Sun/MIT incremental propagation differences</a></li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Database administration</a><ul class="simple">
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="realm_config.html" title="Realm configuration decisions"
- >previous</a> |
- <a href="dbtypes.html" title="Database types"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Database administration">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Database types — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Account lockout" href="lockout.html" />
- <link rel="prev" title="Database administration" href="database.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="database.html" title="Database administration"
- accesskey="P">previous</a> |
- <a href="lockout.html" title="Account lockout"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Database types">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="database-types">
-<h1>Database types<a class="headerlink" href="#database-types" title="Permalink to this headline">¶</a></h1>
-<p>A Kerberos database can be implemented with one of three built-in
-database providers, called KDB modules. Software which incorporates
-the MIT krb5 KDC may also provide its own KDB module. The following
-subsections describe the three built-in KDB modules and the
-configuration specific to them.</p>
-<p>The database type can be configured with the <strong>db_library</strong> variable
-in the <a class="reference internal" href="conf_files/kdc_conf.html#dbmodules"><span class="std std-ref">[dbmodules]</span></a> subsection for the realm. For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">dbmodules</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">db_library</span> <span class="o">=</span> <span class="n">db2</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>If the <code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code> realm subsection contains a
-<strong>database_module</strong> setting, then the subsection within
-<code class="docutils literal"><span class="pre">[dbmodules]</span></code> should use that name instead of <code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code>.</p>
-<p>To transition from one database type to another, stop the
-<a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> service, use <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">dump</span></code> to create a dump
-file, change the <strong>db_library</strong> value and set any appropriate
-configuration for the new database type, and use <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">load</span></code> to
-create and populate the new database. If the new database type is
-LDAP, create the new database using <code class="docutils literal"><span class="pre">kdb5_ldap_util</span></code> and populate it
-from the dump file using <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">load</span> <span class="pre">-update</span></code>. Then restart the
-<a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> and <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> services.</p>
-<div class="section" id="berkeley-database-module-db2">
-<h2>Berkeley database module (db2)<a class="headerlink" href="#berkeley-database-module-db2" title="Permalink to this headline">¶</a></h2>
-<p>The default KDB module is <code class="docutils literal"><span class="pre">db2</span></code>, which uses a version of the
-Berkeley DB library. It creates four files based on the database
-pathname. If the pathname ends with <code class="docutils literal"><span class="pre">principal</span></code> then the four files
-are:</p>
-<ul class="simple">
-<li><code class="docutils literal"><span class="pre">principal</span></code>, containing principal entry data</li>
-<li><code class="docutils literal"><span class="pre">principal.ok</span></code>, a lock file for the principal database</li>
-<li><code class="docutils literal"><span class="pre">principal.kadm5</span></code>, containing policy object data</li>
-<li><code class="docutils literal"><span class="pre">principal.kadm5.lock</span></code>, a lock file for the policy database</li>
-</ul>
-<p>For large databases, the <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> <strong>dump</strong> command (perhaps
-invoked by <a class="reference internal" href="admin_commands/kprop.html#kprop-8"><span class="std std-ref">kprop</span></a> or by <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> for incremental
-propagation) may cause <a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> to stop for a noticeable
-period of time while it iterates over the database. This delay can be
-avoided by disabling account lockout features so that the KDC does not
-perform database writes (see <a class="reference internal" href="lockout.html#disable-lockout"><span class="std std-ref">KDC performance and account lockout</span></a>). Alternatively,
-a slower form of iteration can be enabled by setting the
-<strong>unlockiter</strong> variable to <code class="docutils literal"><span class="pre">true</span></code>. For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">dbmodules</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">db_library</span> <span class="o">=</span> <span class="n">db2</span>
- <span class="n">unlockiter</span> <span class="o">=</span> <span class="n">true</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>In rare cases, a power failure or other unclean system shutdown may
-cause inconsistencies in the internal pointers within a database file,
-such that <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">dump</span></code> cannot retrieve all principal entries in
-the database. In this situation, it may be possible to retrieve all
-of the principal data by running <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">dump</span> <span class="pre">-recurse</span></code> to
-iterate over the database using the tree pointers instead of the
-iteration pointers. Running <code class="docutils literal"><span class="pre">kdb5_util</span> <span class="pre">dump</span> <span class="pre">-rev</span></code> to iterate over
-the database backwards may also retrieve some of the data which is not
-retrieved by a normal dump operation.</p>
-</div>
-<div class="section" id="lightning-memory-mapped-database-module-klmdb">
-<h2>Lightning Memory-Mapped Database module (klmdb)<a class="headerlink" href="#lightning-memory-mapped-database-module-klmdb" title="Permalink to this headline">¶</a></h2>
-<p>The klmdb module was added in release 1.17. It uses the LMDB library,
-and may offer better performance and reliability than the db2 module.
-It creates four files based on the database pathname. If the pathname
-ends with <code class="docutils literal"><span class="pre">principal</span></code>, then the four files are:</p>
-<ul class="simple">
-<li><code class="docutils literal"><span class="pre">principal.mdb</span></code>, containing policy object data and most principal
-entry data</li>
-<li><code class="docutils literal"><span class="pre">principal.mdb-lock</span></code>, a lock file for the primary database</li>
-<li><code class="docutils literal"><span class="pre">principal.lockout.mdb</span></code>, containing the account lockout attributes
-(last successful authentication time, last failed authentication
-time, and number of failed attempts) for each principal entry</li>
-<li><code class="docutils literal"><span class="pre">principal.lockout.mdb-lock</span></code>, a lock file for the lockout database</li>
-</ul>
-<p>Separating out the lockout attributes ensures that the KDC will never
-block on an administrative operation such as a database dump or load.
-It also allows the KDC to operate without write access to the primary
-database. If both account lockout features are disabled (see
-<a class="reference internal" href="lockout.html#disable-lockout"><span class="std std-ref">KDC performance and account lockout</span></a>), the lockout database files will be created
-but will not subsequently be opened, and the account lockout
-attributes will always have zero values.</p>
-<p>Because LMDB creates a memory map to the database files, it requires a
-configured memory map size which also determines the maximum size of
-the database. This size is applied equally to the two databases, so
-twice the configured size will be consumed in the process address
-space; this is primarily a limitation on 32-bit platforms. The
-default value of 128 megabytes should be sufficient for several
-hundred thousand principal entries. If the limit is reached, kadmin
-operations will fail and the error message “Environment mapsize limit
-reached” will appear in the kadmind log file. In this case, the
-<strong>mapsize</strong> variable can be used to increase the map size. The
-following example sets the map size to 512 megabytes:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">dbmodules</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">db_library</span> <span class="o">=</span> <span class="n">klmdb</span>
- <span class="n">mapsize</span> <span class="o">=</span> <span class="mi">512</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>LMDB has a configurable maximum number of readers. The default value
-of 128 should be sufficient for most deployments. If you are going to
-use a large number of KDC worker processes, it may be necessary to set
-the <strong>max_readers</strong> variable to a larger number.</p>
-<p>By default, LMDB synchronizes database files to disk after each write
-transaction to ensure durability in the case of an unclean system
-shutdown. The klmdb module always turns synchronization off for the
-lockout database to ensure reasonable KDC performance, but leaves it
-on for the primary database. If high throughput for administrative
-operations (including password changes) is required, the <strong>nosync</strong>
-variable can be set to “true” to disable synchronization for the
-primary database.</p>
-<p>The klmdb module does not support explicit locking with the
-<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> <strong>lock</strong> command.</p>
-</div>
-<div class="section" id="ldap-module-kldap">
-<h2>LDAP module (kldap)<a class="headerlink" href="#ldap-module-kldap" title="Permalink to this headline">¶</a></h2>
-<p>The kldap module stores principal and policy data using an LDAP
-server. To use it you must configure an LDAP server to use the
-Kerberos schema. See <a class="reference internal" href="conf_ldap.html#conf-ldap"><span class="std std-ref">Configuring Kerberos with OpenLDAP back-end</span></a> for details.</p>
-<p>Because <a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> is single-threaded, latency in LDAP database
-accesses may limit KDC operation throughput. If the LDAP server is
-located on the same server host as the KDC and accessed through an
-<code class="docutils literal"><span class="pre">ldapi://</span></code> URL, latency should be minimal. If this is not possible,
-consider starting multiple KDC worker processes with the
-<a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> <strong>-w</strong> option to enable concurrent processing of KDC
-requests.</p>
-<p>The kldap module does not support explicit locking with the
-<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> <strong>lock</strong> command.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Database types</a><ul>
-<li><a class="reference internal" href="#berkeley-database-module-db2">Berkeley database module (db2)</a></li>
-<li><a class="reference internal" href="#lightning-memory-mapped-database-module-klmdb">Lightning Memory-Mapped Database module (klmdb)</a></li>
-<li><a class="reference internal" href="#ldap-module-kldap">LDAP module (kldap)</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="database.html" title="Database administration"
- >previous</a> |
- <a href="lockout.html" title="Account lockout"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Database types">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Addressing dictionary attack risks — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Principal names and DNS" href="princ_dns.html" />
- <link rel="prev" title="SPAKE Preauthentication" href="spake.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="spake.html" title="SPAKE Preauthentication"
- accesskey="P">previous</a> |
- <a href="princ_dns.html" title="Principal names and DNS"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Addressing dictionary attack risks">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addressing-dictionary-attack-risks">
-<span id="dictionary"></span><h1>Addressing dictionary attack risks<a class="headerlink" href="#addressing-dictionary-attack-risks" title="Permalink to this headline">¶</a></h1>
-<p>Kerberos initial authentication is normally secured using the client
-principal’s long-term key, which for users is generally derived from a
-password. Using a pasword-derived long-term key carries the risk of a
-dictionary attack, where an attacker tries a sequence of possible
-passwords, possibly requiring much less effort than would be required
-to try all possible values of the key. Even if <a class="reference internal" href="database.html#policies"><span class="std std-ref">password policy
-objects</span></a> are used to force users not to pick trivial
-passwords, dictionary attacks can sometimes be successful against a
-significant fraction of the users in a realm. Dictionary attacks are
-not a concern for principals using random keys.</p>
-<p>A dictionary attack may be online or offline. An online dictionary
-attack is performed by trying each password in a separate request to
-the KDC, and is therefore visible to the KDC and also limited in speed
-by the KDC’s processing power and the network capacity between the
-client and the KDC. Online dictionary attacks can be mitigated using
-<a class="reference internal" href="lockout.html#lockout"><span class="std std-ref">account lockout</span></a>. This measure is not totally
-satisfactory, as it makes it easy for an attacker to deny access to a
-client principal.</p>
-<p>An offline dictionary attack is performed by obtaining a ciphertext
-generated using the password-derived key, and trying each password
-against the ciphertext. This category of attack is invisible to the
-KDC and can be performed much faster than an online attack. The
-attack will generally take much longer with more recent encryption
-types (particularly the ones based on AES), because those encryption
-types use a much more expensive string-to-key function. However, the
-best defense is to deny the attacker access to a useful ciphertext.
-The required defensive measures depend on the attacker’s level of
-network access.</p>
-<p>An off-path attacker has no access to packets sent between legitimate
-users and the KDC. An off-path attacker could gain access to an
-attackable ciphertext either by making an AS request for a client
-principal which does not have the <strong>+requires_preauth</strong> flag, or by
-making a TGS request (after authenticating as a different user) for a
-server principal which does not have the <strong>-allow_svr</strong> flag. To
-address off-path attackers, a KDC administrator should set those flags
-on principals with password-derived keys:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">add_principal</span> <span class="o">+</span><span class="n">requires_preauth</span> <span class="o">-</span><span class="n">allow_svr</span> <span class="n">princname</span>
-</pre></div>
-</div>
-<p>An attacker with passive network access (one who can monitor packets
-sent between legitimate users and the KDC, but cannot change them or
-insert their own packets) can gain access to an attackable ciphertext
-by observing an authentication by a user using the most common form of
-preauthentication, encrypted timestamp. Any of the following methods
-can prevent dictionary attacks by attackers with passive network
-access:</p>
-<ul class="simple">
-<li>Enabling <a class="reference internal" href="spake.html#spake"><span class="std std-ref">SPAKE preauthentication</span></a> (added in release
-1.17) on the KDC, and ensuring that all clients are able to support
-it.</li>
-<li>Using an <a class="reference internal" href="https.html#https"><span class="std std-ref">HTTPS proxy</span></a> for communication with the KDC,
-if the attacker cannot monitor communication between the proxy
-server and the KDC.</li>
-<li>Using FAST, protecting the initial authentication with either a
-random key (such as a host key) or with <a class="reference internal" href="pkinit.html#anonymous-pkinit"><span class="std std-ref">anonymous PKINIT</span></a>.</li>
-</ul>
-<p>An attacker with active network access (one who can inject or modify
-packets sent between legitimate users and the KDC) can try to fool the
-client software into sending an attackable ciphertext using an
-encryption type and salt string of the attacker’s choosing. Any of the
-following methods can prevent dictionary attacks by active attackers:</p>
-<ul class="simple">
-<li>Enabling SPAKE preauthentication and setting the
-<strong>disable_encrypted_timestamp</strong> variable to <code class="docutils literal"><span class="pre">true</span></code> in the
-<a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> subsection of the client configuration.</li>
-<li>Using an HTTPS proxy as described above, configured in the client’s
-krb5.conf realm configuration. If <a class="reference internal" href="realm_config.html#kdc-discovery"><span class="std std-ref">KDC discovery</span></a> is used to locate a proxy server, an active
-attacker may be able to use DNS spoofing to cause the client to use
-a different HTTPS server or to not use HTTPS.</li>
-<li>Using FAST as described above.</li>
-</ul>
-<p>If <a class="reference internal" href="pkinit.html#pkinit"><span class="std std-ref">PKINIT</span></a> or <a class="reference internal" href="otp.html#otp-preauth"><span class="std std-ref">OTP</span></a> are used for
-initial authentication, the principal’s long-term keys are not used
-and dictionary attacks are usually not a concern.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Addressing dictionary attack risks</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="spake.html" title="SPAKE Preauthentication"
- >previous</a> |
- <a href="princ_dns.html" title="Principal names and DNS"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Addressing dictionary attack risks">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Encryption types — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="HTTPS proxy configuration" href="https.html" />
- <link rel="prev" title="Principal names and DNS" href="princ_dns.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="princ_dns.html" title="Principal names and DNS"
- accesskey="P">previous</a> |
- <a href="https.html" title="HTTPS proxy configuration"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Encryption types">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="encryption-types">
-<span id="enctypes"></span><h1>Encryption types<a class="headerlink" href="#encryption-types" title="Permalink to this headline">¶</a></h1>
-<p>Kerberos can use a variety of cipher algorithms to protect data. A
-Kerberos <strong>encryption type</strong> (also known as an <strong>enctype</strong>) is a
-specific combination of a cipher algorithm with an integrity algorithm
-to provide both confidentiality and integrity to data.</p>
-<div class="section" id="enctypes-in-requests">
-<h2>Enctypes in requests<a class="headerlink" href="#enctypes-in-requests" title="Permalink to this headline">¶</a></h2>
-<p>Clients make two types of requests (KDC-REQ) to the KDC: AS-REQs and
-TGS-REQs. The client uses the AS-REQ to obtain initial tickets
-(typically a Ticket-Granting Ticket (TGT)), and uses the TGS-REQ to
-obtain service tickets.</p>
-<p>The KDC uses three different keys when issuing a ticket to a client:</p>
-<ul class="simple">
-<li>The long-term key of the service: the KDC uses this to encrypt the
-actual service ticket. The KDC only uses the first long-term key in
-the most recent kvno for this purpose.</li>
-<li>The session key: the KDC randomly chooses this key and places one
-copy inside the ticket and the other copy inside the encrypted part
-of the reply.</li>
-<li>The reply-encrypting key: the KDC uses this to encrypt the reply it
-sends to the client. For AS replies, this is a long-term key of the
-client principal. For TGS replies, this is either the session key of the
-authenticating ticket, or a subsession key.</li>
-</ul>
-<p>Each of these keys is of a specific enctype.</p>
-<p>Each request type allows the client to submit a list of enctypes that
-it is willing to accept. For the AS-REQ, this list affects both the
-session key selection and the reply-encrypting key selection. For the
-TGS-REQ, this list only affects the session key selection.</p>
-</div>
-<div class="section" id="session-key-selection">
-<span id="id1"></span><h2>Session key selection<a class="headerlink" href="#session-key-selection" title="Permalink to this headline">¶</a></h2>
-<p>The KDC chooses the session key enctype by taking the intersection of
-its <strong>permitted_enctypes</strong> list, the list of long-term keys for the
-most recent kvno of the service, and the client’s requested list of
-enctypes.</p>
-<p>Starting in krb5-1.11, it is possible to set a string attribute on a
-service principal to control what session key enctypes the KDC may
-issue for service tickets for that principal. See <a class="reference internal" href="admin_commands/kadmin_local.html#set-string"><span class="std std-ref">set_string</span></a>
-in <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> for details.</p>
-</div>
-<div class="section" id="choosing-enctypes-for-a-service">
-<h2>Choosing enctypes for a service<a class="headerlink" href="#choosing-enctypes-for-a-service" title="Permalink to this headline">¶</a></h2>
-<p>Generally, a service should have a key of the strongest
-enctype that both it and the KDC support. If the KDC is running a
-release earlier than krb5-1.11, it is also useful to generate an
-additional key for each enctype that the service can support. The KDC
-will only use the first key in the list of long-term keys for encrypting
-the service ticket, but the additional long-term keys indicate the
-other enctypes that the service supports.</p>
-<p>As noted above, starting with release krb5-1.11, there are additional
-configuration settings that control session key enctype selection
-independently of the set of long-term keys that the KDC has stored for
-a service principal.</p>
-</div>
-<div class="section" id="configuration-variables">
-<h2>Configuration variables<a class="headerlink" href="#configuration-variables" title="Permalink to this headline">¶</a></h2>
-<p>The following <code class="docutils literal"><span class="pre">[libdefaults]</span></code> settings in <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> will
-affect how enctypes are chosen.</p>
-<dl class="docutils">
-<dt><strong>allow_weak_crypto</strong></dt>
-<dd>defaults to <em>false</em> starting with krb5-1.8. When <em>false</em>, removes
-weak enctypes from <strong>permitted_enctypes</strong>,
-<strong>default_tkt_enctypes</strong>, and <strong>default_tgs_enctypes</strong>. Do not
-set this to <em>true</em> unless the use of weak enctypes is an
-acceptable risk for your environment and the weak enctypes are
-required for backward compatibility.</dd>
-<dt><strong>permitted_enctypes</strong></dt>
-<dd>controls the set of enctypes that a service will permit for
-session keys and for ticket and authenticator encryption. The KDC
-and other programs that access the Kerberos database will ignore
-keys of non-permitted enctypes. Starting in release 1.18, this
-setting also acts as the default for <strong>default_tkt_enctypes</strong> and
-<strong>default_tgs_enctypes</strong>.</dd>
-<dt><strong>default_tkt_enctypes</strong></dt>
-<dd>controls the default set of enctypes that the Kerberos client
-library requests when making an AS-REQ. Do not set this unless
-required for specific backward compatibility purposes; stale
-values of this setting can prevent clients from taking advantage
-of new stronger enctypes when the libraries are upgraded.</dd>
-<dt><strong>default_tgs_enctypes</strong></dt>
-<dd>controls the default set of enctypes that the Kerberos client
-library requests when making a TGS-REQ. Do not set this unless
-required for specific backward compatibility purposes; stale
-values of this setting can prevent clients from taking advantage
-of new stronger enctypes when the libraries are upgraded.</dd>
-</dl>
-<p>The following per-realm setting in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> affects the
-generation of long-term keys.</p>
-<dl class="docutils">
-<dt><strong>supported_enctypes</strong></dt>
-<dd>controls the default set of enctype-salttype pairs that <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a>
-will use for generating long-term keys, either randomly or from
-passwords</dd>
-</dl>
-</div>
-<div class="section" id="enctype-compatibility">
-<h2>Enctype compatibility<a class="headerlink" href="#enctype-compatibility" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="conf_files/kdc_conf.html#encryption-types"><span class="std std-ref">Encryption types</span></a> for additional information about enctypes.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="20%" />
-<col width="16%" />
-<col width="14%" />
-</colgroup>
-<thead valign="bottom">
-<tr class="row-odd"><th class="head">enctype</th>
-<th class="head">weak?</th>
-<th class="head">krb5</th>
-<th class="head">Windows</th>
-</tr>
-</thead>
-<tbody valign="top">
-<tr class="row-even"><td>des-cbc-crc</td>
-<td>weak</td>
-<td><1.18</td>
-<td>>=2000</td>
-</tr>
-<tr class="row-odd"><td>des-cbc-md4</td>
-<td>weak</td>
-<td><1.18</td>
-<td>?</td>
-</tr>
-<tr class="row-even"><td>des-cbc-md5</td>
-<td>weak</td>
-<td><1.18</td>
-<td>>=2000</td>
-</tr>
-<tr class="row-odd"><td>des3-cbc-sha1</td>
-<td>deprecated</td>
-<td>>=1.1</td>
-<td>none</td>
-</tr>
-<tr class="row-even"><td>arcfour-hmac</td>
-<td>deprecated</td>
-<td>>=1.3</td>
-<td>>=2000</td>
-</tr>
-<tr class="row-odd"><td>arcfour-hmac-exp</td>
-<td>weak</td>
-<td>>=1.3</td>
-<td>>=2000</td>
-</tr>
-<tr class="row-even"><td>aes128-cts-hmac-sha1-96</td>
-<td> </td>
-<td>>=1.3</td>
-<td>>=Vista</td>
-</tr>
-<tr class="row-odd"><td>aes256-cts-hmac-sha1-96</td>
-<td> </td>
-<td>>=1.3</td>
-<td>>=Vista</td>
-</tr>
-<tr class="row-even"><td>aes128-cts-hmac-sha256-128</td>
-<td> </td>
-<td>>=1.15</td>
-<td>none</td>
-</tr>
-<tr class="row-odd"><td>aes256-cts-hmac-sha384-192</td>
-<td> </td>
-<td>>=1.15</td>
-<td>none</td>
-</tr>
-<tr class="row-even"><td>camellia128-cts-cmac</td>
-<td> </td>
-<td>>=1.9</td>
-<td>none</td>
-</tr>
-<tr class="row-odd"><td>camellia256-cts-cmac</td>
-<td> </td>
-<td>>=1.9</td>
-<td>none</td>
-</tr>
-</tbody>
-</table>
-<p>krb5 releases 1.18 and later do not support single-DES. krb5 releases
-1.8 and later disable the single-DES enctypes by default. Microsoft
-Windows releases Windows 7 and later disable single-DES enctypes by
-default.</p>
-<p>krb5 releases 1.17 and later flag deprecated encryption types
-(including <code class="docutils literal"><span class="pre">des3-cbc-sha1</span></code> and <code class="docutils literal"><span class="pre">arcfour-hmac</span></code>) in KDC logs and
-kadmin output. krb5 release 1.19 issues a warning during initial
-authentication if <code class="docutils literal"><span class="pre">des3-cbc-sha1</span></code> is used. Future releases will
-disable <code class="docutils literal"><span class="pre">des3-cbc-sha1</span></code> by default and eventually remove support for
-it.</p>
-</div>
-<div class="section" id="migrating-away-from-older-encryption-types">
-<h2>Migrating away from older encryption types<a class="headerlink" href="#migrating-away-from-older-encryption-types" title="Permalink to this headline">¶</a></h2>
-<p>Administrator intervention may be required to migrate a realm away
-from legacy encryption types, especially if the realm was created
-using krb5 release 1.2 or earlier. This migration should be performed
-before upgrading to krb5 versions which disable or remove support for
-legacy encryption types.</p>
-<p>If there is a <strong>supported_enctypes</strong> setting in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> on
-the KDC, make sure that it does not include weak or deprecated
-encryption types. This will ensure that newly created keys do not use
-those encryption types by default.</p>
-<p>Check the <code class="docutils literal"><span class="pre">krbtgt/REALM</span></code> principal using the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>
-<strong>getprinc</strong> command. If it lists a weak or deprecated encryption
-type as the first key, it must be migrated using the procedure in
-<a class="reference internal" href="database.html#changing-krbtgt-key"><span class="std std-ref">Changing the krbtgt key</span></a>.</p>
-<p>Check the <code class="docutils literal"><span class="pre">kadmin/history</span></code> principal, which should have only one key
-entry. If it uses a weak or deprecated encryption type, it should be
-upgraded following the notes in <a class="reference internal" href="database.html#updating-history-key"><span class="std std-ref">Updating the history key</span></a>.</p>
-<p>Check the other kadmin principals: kadmin/changepw, kadmin/admin, and
-any kadmin/hostname principals that may exist. These principals can
-be upgraded with <strong>change_password -randkey</strong> in kadmin.</p>
-<p>Check the <code class="docutils literal"><span class="pre">K/M</span></code> entry. If it uses a weak or deprecated encryption
-type, it should be upgraded following the procedure in
-<a class="reference internal" href="database.html#updating-master-key"><span class="std std-ref">Updating the master key</span></a>.</p>
-<p>User and service principals using legacy encryption types can be
-enumerated with the <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> <strong>tabdump keyinfo</strong> command.</p>
-<p>Service principals can be migrated with a keytab rotation on the
-service host, which can be accomplished using the <a class="reference internal" href="admin_commands/k5srvutil.html#k5srvutil-1"><span class="std std-ref">k5srvutil</span></a>
-<strong>change</strong> and <strong>delold</strong> commands. Allow enough time for existing
-tickets to expire between the change and delold operations.</p>
-<p>User principals with password-based keys can be migrated with a
-password change. The realm administrator can set a password
-expiration date using the <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> <strong>modify_principal
--pwexpire</strong> command to force a password change.</p>
-<p>If a legacy encryption type has not yet been disabled by default in
-the version of krb5 running on the KDC, it can be disabled
-administratively with the <strong>permitted_enctypes</strong> variable. For
-example, setting <strong>permitted_enctypes</strong> to <code class="docutils literal"><span class="pre">DEFAULT</span> <span class="pre">-des3</span> <span class="pre">-rc4</span></code> will
-cause any database keys of the triple-DES and RC4 encryption types to
-be ignored.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Encryption types</a><ul>
-<li><a class="reference internal" href="#enctypes-in-requests">Enctypes in requests</a></li>
-<li><a class="reference internal" href="#session-key-selection">Session key selection</a></li>
-<li><a class="reference internal" href="#choosing-enctypes-for-a-service">Choosing enctypes for a service</a></li>
-<li><a class="reference internal" href="#configuration-variables">Configuration variables</a></li>
-<li><a class="reference internal" href="#enctype-compatibility">Enctype compatibility</a></li>
-<li><a class="reference internal" href="#migrating-away-from-older-encryption-types">Migrating away from older encryption types</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="princ_dns.html" title="Principal names and DNS"
- >previous</a> |
- <a href="https.html" title="HTTPS proxy configuration"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Encryption types">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Environment variables — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Troubleshooting" href="troubleshoot.html" />
- <link rel="prev" title="MIT Kerberos defaults" href="../mitK5defaults.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../mitK5defaults.html" title="MIT Kerberos defaults"
- accesskey="P">previous</a> |
- <a href="troubleshoot.html" title="Troubleshooting"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Environment variables">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="environment-variables">
-<h1>Environment variables<a class="headerlink" href="#environment-variables" title="Permalink to this headline">¶</a></h1>
-<p>This content has moved to <a class="reference internal" href="../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a>.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Environment variables</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../mitK5defaults.html" title="MIT Kerberos defaults"
- >previous</a> |
- <a href="troubleshoot.html" title="Troubleshooting"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Environment variables">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Host configuration — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Backups of secure hosts" href="backup_host.html" />
- <link rel="prev" title="Application servers" href="appl_servers.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="appl_servers.html" title="Application servers"
- accesskey="P">previous</a> |
- <a href="backup_host.html" title="Backups of secure hosts"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Host configuration">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="host-configuration">
-<h1>Host configuration<a class="headerlink" href="#host-configuration" title="Permalink to this headline">¶</a></h1>
-<p>All hosts running Kerberos software, whether they are clients,
-application servers, or KDCs, can be configured using
-<a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>. Here we describe some of the behavior changes
-you might want to make.</p>
-<div class="section" id="default-realm">
-<h2>Default realm<a class="headerlink" href="#default-realm" title="Permalink to this headline">¶</a></h2>
-<p>In the <a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a> section, the <strong>default_realm</strong> realm
-relation sets the default Kerberos realm. For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">libdefaults</span><span class="p">]</span>
- <span class="n">default_realm</span> <span class="o">=</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-</pre></div>
-</div>
-<p>The default realm affects Kerberos behavior in the following ways:</p>
-<ul class="simple">
-<li>When a principal name is parsed from text, the default realm is used
-if no <code class="docutils literal"><span class="pre">@REALM</span></code> component is specified.</li>
-<li>The default realm affects login authorization as described below.</li>
-<li>For programs which operate on a Kerberos database, the default realm
-is used to determine which database to operate on, unless the <strong>-r</strong>
-parameter is given to specify a realm.</li>
-<li>A server program may use the default realm when looking up its key
-in a <a class="reference internal" href="install_appl_srv.html#keytab-file"><span class="std std-ref">keytab file</span></a>, if its realm is not
-determined by <a class="reference internal" href="conf_files/krb5_conf.html#domain-realm"><span class="std std-ref">[domain_realm]</span></a> configuration or by the server
-program itself.</li>
-<li>If <a class="reference internal" href="../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a> is passed the <strong>-n</strong> flag, it requests anonymous
-tickets from the default realm.</li>
-</ul>
-<p>In some situations, these uses of the default realm might conflict.
-For example, it might be desirable for principal name parsing to use
-one realm by default, but for login authorization to use a second
-realm. In this situation, the first realm can be configured as the
-default realm, and <strong>auth_to_local</strong> relations can be used as
-described below to use the second realm for login authorization.</p>
-</div>
-<div class="section" id="login-authorization">
-<span id="id1"></span><h2>Login authorization<a class="headerlink" href="#login-authorization" title="Permalink to this headline">¶</a></h2>
-<p>If a host runs a Kerberos-enabled login service such as OpenSSH with
-GSSAPIAuthentication enabled, login authorization rules determine
-whether a Kerberos principal is allowed to access a local account.</p>
-<p>By default, a Kerberos principal is allowed access to an account if
-its realm matches the default realm and its name matches the account
-name. (For historical reasons, access is also granted by default if
-the name has two components and the second component matches the
-default realm; for instance, <code class="docutils literal"><span class="pre">alice/ATHENA.MIT.EDU@ATHENA.MIT.EDU</span></code>
-is granted access to the <code class="docutils literal"><span class="pre">alice</span></code> account if <code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code> is
-the default realm.)</p>
-<p>The simplest way to control local access is using <a class="reference internal" href="../user/user_config/k5login.html#k5login-5"><span class="std std-ref">.k5login</span></a>
-files. To use these, place a <code class="docutils literal"><span class="pre">.k5login</span></code> file in the home directory
-of each account listing the principal names which should have login
-access to that account. If it is not desirable to use <code class="docutils literal"><span class="pre">.k5login</span></code>
-files located in account home directories, the <strong>k5login_directory</strong>
-relation in the <a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a> section can specify a directory
-containing one file per account uname.</p>
-<p>By default, if a <code class="docutils literal"><span class="pre">.k5login</span></code> file is present, it controls
-authorization both positively and negatively–any principal name
-contained in the file is granted access and any other principal name
-is denied access, even if it would have had access if the <code class="docutils literal"><span class="pre">.k5login</span></code>
-file didn’t exist. The <strong>k5login_authoritative</strong> relation in the
-<a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a> section can be set to false to make <code class="docutils literal"><span class="pre">.k5login</span></code>
-files provide positive authorization only.</p>
-<p>The <strong>auth_to_local</strong> relation in the <a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> section for the
-default realm can specify pattern-matching rules to control login
-authorization. For example, the following configuration allows access
-to principals from a different realm than the default realm:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>[realms]
- DEFAULT.REALM = {
- # Allow access to principals from OTHER.REALM.
- #
- # [1:$1@$0] matches single-component principal names and creates
- # a selection string containing the principal name and realm.
- #
- # (.*@OTHER\.REALM) matches against the selection string, so that
- # only principals in OTHER.REALM are matched.
- #
- # s/@OTHER\.REALM$// removes the realm name, leaving behind the
- # principal name as the account name.
- auth_to_local = RULE:[1:$1@$0](.*@OTHER\.REALM)s/@OTHER\.REALM$//
-
- # Also allow principals from the default realm. Omit this line
- # to only allow access to principals in OTHER.REALM.
- auth_to_local = DEFAULT
- }
-</pre></div>
-</div>
-<p>The <strong>auth_to_local_names</strong> subsection of the <a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> section
-for the default realm can specify explicit mappings from principal
-names to local accounts. The key used in this subsection is the
-principal name without realm, so it is only safe to use in a Kerberos
-environment with a single realm or a tightly controlled set of realms.
-An example use of <strong>auth_to_local_names</strong> might be:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">auth_to_local_names</span> <span class="o">=</span> <span class="p">{</span>
- <span class="c1"># Careful, these match principals in any realm!</span>
- <span class="n">host</span><span class="o">/</span><span class="n">example</span><span class="o">.</span><span class="n">com</span> <span class="o">=</span> <span class="n">hostaccount</span>
- <span class="n">fred</span> <span class="o">=</span> <span class="n">localfred</span>
- <span class="p">}</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>Local authorization behavior can also be modified using plugin
-modules; see <a class="reference internal" href="../plugindev/hostrealm.html#hostrealm-plugin"><span class="std std-ref">Host-to-realm interface (hostrealm)</span></a> for details.</p>
-</div>
-<div class="section" id="plugin-module-configuration">
-<span id="plugin-config"></span><h2>Plugin module configuration<a class="headerlink" href="#plugin-module-configuration" title="Permalink to this headline">¶</a></h2>
-<p>Many aspects of Kerberos behavior, such as client preauthentication
-and KDC service location, can be modified through the use of plugin
-modules. For most of these behaviors, you can use the <a class="reference internal" href="conf_files/krb5_conf.html#plugins"><span class="std std-ref">[plugins]</span></a>
-section of krb5.conf to register third-party modules, and to switch
-off registered or built-in modules.</p>
-<p>A plugin module takes the form of a Unix shared object
-(<code class="docutils literal"><span class="pre">modname.so</span></code>) or Windows DLL (<code class="docutils literal"><span class="pre">modname.dll</span></code>). If you have
-installed a third-party plugin module and want to register it, you do
-so using the <strong>module</strong> relation in the appropriate subsection of the
-[plugins] section. The value for <strong>module</strong> must give the module name
-and the path to the module, separated by a colon. The module name
-will often be the same as the shared object’s name, but in unusual
-cases (such as a shared object which implements multiple modules for
-the same interface) it might not be. For example, to register a
-client preauthentication module named <code class="docutils literal"><span class="pre">mypreauth</span></code> installed at
-<code class="docutils literal"><span class="pre">/path/to/mypreauth.so</span></code>, you could write:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">plugins</span><span class="p">]</span>
- <span class="n">clpreauth</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">module</span> <span class="o">=</span> <span class="n">mypreauth</span><span class="p">:</span><span class="o">/</span><span class="n">path</span><span class="o">/</span><span class="n">to</span><span class="o">/</span><span class="n">mypreauth</span><span class="o">.</span><span class="n">so</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>Many of the pluggable behaviors in MIT krb5 contain built-in modules
-which can be switched off. You can disable a built-in module (or one
-you have registered) using the <strong>disable</strong> directive in the
-appropriate subsection of the [plugins] section. For example, to
-disable the use of .k5identity files to select credential caches, you
-could write:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">plugins</span><span class="p">]</span>
- <span class="n">ccselect</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">disable</span> <span class="o">=</span> <span class="n">k5identity</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>If you want to disable multiple modules, specify the <strong>disable</strong>
-directive multiple times, giving one module to disable each time.</p>
-<p>Alternatively, you can explicitly specify which modules you want to be
-enabled for that behavior using the <strong>enable_only</strong> directive. For
-example, to make <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> check password quality using only a
-module you have registered, and no other mechanism, you could write:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">plugins</span><span class="p">]</span>
- <span class="n">pwqual</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">module</span> <span class="o">=</span> <span class="n">mymodule</span><span class="p">:</span><span class="o">/</span><span class="n">path</span><span class="o">/</span><span class="n">to</span><span class="o">/</span><span class="n">mymodule</span><span class="o">.</span><span class="n">so</span>
- <span class="n">enable_only</span> <span class="o">=</span> <span class="n">mymodule</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>Again, if you want to specify multiple modules, specify the
-<strong>enable_only</strong> directive multiple times, giving one module to enable
-each time.</p>
-<p>Some Kerberos interfaces use different mechanisms to register plugin
-modules.</p>
-<div class="section" id="kdc-location-modules">
-<h3>KDC location modules<a class="headerlink" href="#kdc-location-modules" title="Permalink to this headline">¶</a></h3>
-<p>For historical reasons, modules to control how KDC servers are located
-are registered simply by placing the shared object or DLL into the
-“libkrb5” subdirectory of the krb5 plugin directory, which defaults to
-<a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">LIBDIR</span></a><code class="docutils literal"><span class="pre">/krb5/plugins</span></code>. For example, Samba’s winbind krb5
-locator plugin would be registered by placing its shared object in
-<a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">LIBDIR</span></a><code class="docutils literal"><span class="pre">/krb5/plugins/libkrb5/winbind_krb5_locator.so</span></code>.</p>
-</div>
-<div class="section" id="gssapi-mechanism-modules">
-<span id="gssapi-plugin-config"></span><h3>GSSAPI mechanism modules<a class="headerlink" href="#gssapi-mechanism-modules" title="Permalink to this headline">¶</a></h3>
-<p>GSSAPI mechanism modules are registered using the file
-<a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">SYSCONFDIR</span></a><code class="docutils literal"><span class="pre">/gss/mech</span></code> or configuration files in the
-<a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">SYSCONFDIR</span></a><code class="docutils literal"><span class="pre">/gss/mech.d</span></code> directory with a <code class="docutils literal"><span class="pre">.conf</span></code>
-suffix. Each line in these files has the form:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">name</span> <span class="n">oid</span> <span class="n">pathname</span> <span class="p">[</span><span class="n">options</span><span class="p">]</span> <span class="o"><</span><span class="nb">type</span><span class="o">></span>
-</pre></div>
-</div>
-<p>Only the name, oid, and pathname are required. <em>name</em> is the
-mechanism name, which may be used for debugging or logging purposes.
-<em>oid</em> is the object identifier of the GSSAPI mechanism to be
-registered. <em>pathname</em> is a path to the module shared object or DLL.
-<em>options</em> (if present) are options provided to the plugin module,
-surrounded in square brackets. <em>type</em> (if present) can be used to
-indicate a special type of module. Currently the only special module
-type is “interposer”, for a module designed to intercept calls to
-other mechanisms.</p>
-<p>If the environment variable <strong>GSS_MECH_CONFIG</strong> is set, its value is
-used as the sole mechanism configuration filename.</p>
-</div>
-<div class="section" id="configuration-profile-modules">
-<span id="profile-plugin-config"></span><h3>Configuration profile modules<a class="headerlink" href="#configuration-profile-modules" title="Permalink to this headline">¶</a></h3>
-<p>A configuration profile module replaces the information source for
-<a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> itself. To use a profile module, begin krb5.conf
-with the line:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">module</span> <span class="n">PATHNAME</span><span class="p">:</span><span class="n">STRING</span>
-</pre></div>
-</div>
-<p>where <em>PATHNAME</em> is a path to the module shared object or DLL, and
-<em>STRING</em> is a string to provide to the module. The module will then
-take over, and the rest of krb5.conf will be ignored.</p>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Host configuration</a><ul>
-<li><a class="reference internal" href="#default-realm">Default realm</a></li>
-<li><a class="reference internal" href="#login-authorization">Login authorization</a></li>
-<li><a class="reference internal" href="#plugin-module-configuration">Plugin module configuration</a><ul>
-<li><a class="reference internal" href="#kdc-location-modules">KDC location modules</a></li>
-<li><a class="reference internal" href="#gssapi-mechanism-modules">GSSAPI mechanism modules</a></li>
-<li><a class="reference internal" href="#configuration-profile-modules">Configuration profile modules</a></li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="appl_servers.html" title="Application servers"
- >previous</a> |
- <a href="backup_host.html" title="Backups of secure hosts"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Host configuration">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>HTTPS proxy configuration — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Authentication indicators" href="auth_indicator.html" />
- <link rel="prev" title="Encryption types" href="enctypes.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="enctypes.html" title="Encryption types"
- accesskey="P">previous</a> |
- <a href="auth_indicator.html" title="Authentication indicators"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__HTTPS proxy configuration">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="https-proxy-configuration">
-<span id="https"></span><h1>HTTPS proxy configuration<a class="headerlink" href="#https-proxy-configuration" title="Permalink to this headline">¶</a></h1>
-<p>In addition to being able to use UDP or TCP to communicate directly
-with a KDC as is outlined in RFC4120, and with kpasswd services in a
-similar fashion, the client libraries can attempt to use an HTTPS
-proxy server to communicate with a KDC or kpasswd service, using the
-protocol outlined in [MS-KKDCP].</p>
-<p>Communicating with a KDC through an HTTPS proxy allows clients to
-contact servers when network firewalls might otherwise prevent them
-from doing so. The use of TLS also encrypts all traffic between the
-clients and the KDC, preventing observers from conducting password
-dictionary attacks or from observing the client and server principals
-being authenticated, at additional computational cost to both clients
-and servers.</p>
-<p>An HTTPS proxy server is provided as a feature in some versions of
-Microsoft Windows Server, and a WSGI implementation named <cite>kdcproxy</cite>
-is available in the python package index.</p>
-<div class="section" id="configuring-the-clients">
-<h2>Configuring the clients<a class="headerlink" href="#configuring-the-clients" title="Permalink to this headline">¶</a></h2>
-<p>To use an HTTPS proxy, a client host must trust the CA which issued
-that proxy’s SSL certificate. If that CA’s certificate is not in the
-system-wide default set of trusted certificates, configure the
-following relation in the client host’s <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> file in
-the appropriate <a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> subsection:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">http_anchors</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">/</span><span class="n">cacert</span><span class="o">.</span><span class="n">pem</span>
-</pre></div>
-</div>
-<p>Adjust the pathname to match the path of the file which contains a
-copy of the CA’s certificate. The <cite>http_anchors</cite> option is documented
-more fully in <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>.</p>
-<p>Configure the client to access the KDC and kpasswd service by
-specifying their locations in its <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> file in the form
-of HTTPS URLs for the proxy server:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdc</span> <span class="o">=</span> <span class="n">https</span><span class="p">:</span><span class="o">//</span><span class="n">server</span><span class="o">.</span><span class="n">fqdn</span><span class="o">/</span><span class="n">KdcProxy</span>
-<span class="n">kpasswd_server</span> <span class="o">=</span> <span class="n">https</span><span class="p">:</span><span class="o">//</span><span class="n">server</span><span class="o">.</span><span class="n">fqdn</span><span class="o">/</span><span class="n">KdcProxy</span>
-</pre></div>
-</div>
-<p>If the proxy and client are properly configured, client commands such
-as <code class="docutils literal"><span class="pre">kinit</span></code>, <code class="docutils literal"><span class="pre">kvno</span></code>, and <code class="docutils literal"><span class="pre">kpasswd</span></code> should all function normally.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">HTTPS proxy configuration</a><ul>
-<li><a class="reference internal" href="#configuring-the-clients">Configuring the clients</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="enctypes.html" title="Encryption types"
- >previous</a> |
- <a href="auth_indicator.html" title="Authentication indicators"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__HTTPS proxy configuration">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>For administrators — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Installation guide" href="install.html" />
- <link rel="prev" title="sclient" href="../user/user_commands/sclient.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../user/user_commands/sclient.html" title="sclient"
- accesskey="P">previous</a> |
- <a href="install.html" title="Installation guide"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__For administrators">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="for-administrators">
-<h1>For administrators<a class="headerlink" href="#for-administrators" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l1"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l1"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l1"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l1"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l1"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l1"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l1"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l1"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l1"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l1"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l1"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l1"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l1"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-</ul>
-</div>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l1"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l1"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l1"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l1"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">For administrators</a><ul>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="current reference internal" href="#">For administrators</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../user/user_commands/sclient.html" title="sclient"
- >previous</a> |
- <a href="install.html" title="Installation guide"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__For administrators">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Installation guide — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Installing KDCs" href="install_kdc.html" />
- <link rel="prev" title="For administrators" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="For administrators"
- accesskey="P">previous</a> |
- <a href="install_kdc.html" title="Installing KDCs"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Installation guide">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="installation-guide">
-<h1>Installation guide<a class="headerlink" href="#installation-guide" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="contents">
-<h2>Contents<a class="headerlink" href="#contents" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="install_kdc.html">Installing KDCs</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#install-and-configure-the-primary-kdc">Install and configure the primary KDC</a></li>
-<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#edit-kdc-configuration-files">Edit KDC configuration files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#create-the-kdc-database">Create the KDC database</a></li>
-<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#add-administrators-to-the-acl-file">Add administrators to the ACL file</a></li>
-<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#add-administrators-to-the-kerberos-database">Add administrators to the Kerberos database</a></li>
-<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#start-the-kerberos-daemons-on-the-primary-kdc">Start the Kerberos daemons on the primary KDC</a></li>
-<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#install-the-replica-kdcs">Install the replica KDCs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#add-kerberos-principals-to-the-database">Add Kerberos principals to the database</a></li>
-<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#switching-primary-and-replica-kdcs">Switching primary and replica KDCs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#incremental-database-propagation">Incremental database propagation</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="install_clients.html">Installing and configuring UNIX client machines</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="install_clients.html#client-machine-configuration-files">Client machine configuration files</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="install_appl_srv.html">UNIX Application Servers</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="install_appl_srv.html#the-keytab-file">The keytab file</a></li>
-<li class="toctree-l2"><a class="reference internal" href="install_appl_srv.html#some-advice-about-secure-hosts">Some advice about secure hosts</a></li>
-</ul>
-</li>
-</ul>
-</div>
-</div>
-<div class="section" id="additional-references">
-<h2>Additional references<a class="headerlink" href="#additional-references" title="Permalink to this headline">¶</a></h2>
-<ol class="arabic simple">
-<li>Debian: <a class="reference external" href="http://techpubs.spinlocksolutions.com/dklar/kerberos.html">Setting up MIT Kerberos 5</a></li>
-<li>Solaris: <a class="reference external" href="https://docs.oracle.com/cd/E19253-01/816-4557/6maosrjv2/index.html">Configuring the Kerberos Service</a></li>
-</ol>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Installation guide</a><ul>
-<li><a class="reference internal" href="#contents">Contents</a></li>
-<li><a class="reference internal" href="#additional-references">Additional references</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Installation guide</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="install_kdc.html">Installing KDCs</a></li>
-<li class="toctree-l3"><a class="reference internal" href="install_clients.html">Installing and configuring UNIX client machines</a></li>
-<li class="toctree-l3"><a class="reference internal" href="install_appl_srv.html">UNIX Application Servers</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="For administrators"
- >previous</a> |
- <a href="install_kdc.html" title="Installing KDCs"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Installation guide">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>UNIX Application Servers — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Configuration Files" href="conf_files/index.html" />
- <link rel="prev" title="Installing and configuring UNIX client machines" href="install_clients.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="install_clients.html" title="Installing and configuring UNIX client machines"
- accesskey="P">previous</a> |
- <a href="conf_files/index.html" title="Configuration Files"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__UNIX Application Servers">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="unix-application-servers">
-<h1>UNIX Application Servers<a class="headerlink" href="#unix-application-servers" title="Permalink to this headline">¶</a></h1>
-<p>An application server is a host that provides one or more services
-over the network. Application servers can be “secure” or “insecure.”
-A “secure” host is set up to require authentication from every client
-connecting to it. An “insecure” host will still provide Kerberos
-authentication, but will also allow unauthenticated clients to
-connect.</p>
-<p>If you have Kerberos V5 installed on all of your client machines, MIT
-recommends that you make your hosts secure, to take advantage of the
-security that Kerberos authentication affords. However, if you have
-some clients that do not have Kerberos V5 installed, you can run an
-insecure server, and still take advantage of Kerberos V5’s single
-sign-on capability.</p>
-<div class="section" id="the-keytab-file">
-<span id="keytab-file"></span><h2>The keytab file<a class="headerlink" href="#the-keytab-file" title="Permalink to this headline">¶</a></h2>
-<p>All Kerberos server machines need a keytab file to authenticate to the
-KDC. By default on UNIX-like systems this file is named <a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a>.
-The keytab file is an local copy of the host’s key. The keytab file
-is a potential point of entry for a break-in, and if compromised,
-would allow unrestricted access to its host. The keytab file should
-be readable only by root, and should exist only on the machine’s local
-disk. The file should not be part of any backup of the machine,
-unless access to the backup data is secured as tightly as access to
-the machine’s root password.</p>
-<p>In order to generate a keytab for a host, the host must have a
-principal in the Kerberos database. The procedure for adding hosts to
-the database is described fully in <a class="reference internal" href="database.html#add-mod-del-princs"><span class="std std-ref">Adding, modifying and deleting principals</span></a>. (See
-<a class="reference internal" href="install_kdc.html#replica-host-key"><span class="std std-ref">Create host keytabs for replica KDCs</span></a> for a brief description.) The keytab is
-generated by running <a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> and issuing the <a class="reference internal" href="admin_commands/kadmin_local.html#ktadd"><span class="std std-ref">ktadd</span></a>
-command.</p>
-<p>For example, to generate a keytab file to allow the host
-<code class="docutils literal"><span class="pre">trillium.mit.edu</span></code> to authenticate for the services host, ftp, and
-pop, the administrator <code class="docutils literal"><span class="pre">joeadmin</span></code> would issue the command (on
-<code class="docutils literal"><span class="pre">trillium.mit.edu</span></code>):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">trillium</span><span class="o">%</span> <span class="n">kadmin</span>
-<span class="n">Authenticating</span> <span class="k">as</span> <span class="n">principal</span> <span class="n">root</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">root</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span>
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">ktadd</span> <span class="n">host</span><span class="o">/</span><span class="n">trillium</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="n">ftp</span><span class="o">/</span><span class="n">trillium</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="n">pop</span><span class="o">/</span><span class="n">trillium</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">trillium</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha384</span><span class="o">-</span><span class="mi">192</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">ftp</span><span class="o">/</span><span class="n">trillium</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha384</span><span class="o">-</span><span class="mi">192</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">pop</span><span class="o">/</span><span class="n">trillium</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">3</span><span class="p">,</span> <span class="n">encryption</span> <span class="nb">type</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha384</span><span class="o">-</span><span class="mi">192</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">quit</span>
-<span class="n">trillium</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>If you generate the keytab file on another host, you need to get a
-copy of the keytab file onto the destination host (<code class="docutils literal"><span class="pre">trillium</span></code>, in
-the above example) without sending it unencrypted over the network.</p>
-</div>
-<div class="section" id="some-advice-about-secure-hosts">
-<h2>Some advice about secure hosts<a class="headerlink" href="#some-advice-about-secure-hosts" title="Permalink to this headline">¶</a></h2>
-<p>Kerberos V5 can protect your host from certain types of break-ins, but
-it is possible to install Kerberos V5 and still leave your host
-vulnerable to attack. Obviously an installation guide is not the
-place to try to include an exhaustive list of countermeasures for
-every possible attack, but it is worth noting some of the larger holes
-and how to close them.</p>
-<p>We recommend that backups of secure machines exclude the keytab file
-(<a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a>). If this is not possible, the backups should at least be
-done locally, rather than over a network, and the backup tapes should
-be physically secured.</p>
-<p>The keytab file and any programs run by root, including the Kerberos
-V5 binaries, should be kept on local disk. The keytab file should be
-readable only by root.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">UNIX Application Servers</a><ul>
-<li><a class="reference internal" href="#the-keytab-file">The keytab file</a></li>
-<li><a class="reference internal" href="#some-advice-about-secure-hosts">Some advice about secure hosts</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2 current"><a class="reference internal" href="install.html">Installation guide</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="install_kdc.html">Installing KDCs</a></li>
-<li class="toctree-l3"><a class="reference internal" href="install_clients.html">Installing and configuring UNIX client machines</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">UNIX Application Servers</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="install_clients.html" title="Installing and configuring UNIX client machines"
- >previous</a> |
- <a href="conf_files/index.html" title="Configuration Files"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__UNIX Application Servers">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Installing and configuring UNIX client machines — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="UNIX Application Servers" href="install_appl_srv.html" />
- <link rel="prev" title="Installing KDCs" href="install_kdc.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="install_kdc.html" title="Installing KDCs"
- accesskey="P">previous</a> |
- <a href="install_appl_srv.html" title="UNIX Application Servers"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Installing and configuring UNIX client machines">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="installing-and-configuring-unix-client-machines">
-<h1>Installing and configuring UNIX client machines<a class="headerlink" href="#installing-and-configuring-unix-client-machines" title="Permalink to this headline">¶</a></h1>
-<p>The Kerberized client programs include <a class="reference internal" href="../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>,
-<a class="reference internal" href="../user/user_commands/klist.html#klist-1"><span class="std std-ref">klist</span></a>, <a class="reference internal" href="../user/user_commands/kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a>, and <a class="reference internal" href="../user/user_commands/kpasswd.html#kpasswd-1"><span class="std std-ref">kpasswd</span></a>. All of
-these programs are in the directory <a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">BINDIR</span></a>.</p>
-<p>You can often integrate Kerberos with the login system on client
-machines, typically through the use of PAM. The details vary by
-operating system, and should be covered in your operating system’s
-documentation. If you do this, you will need to make sure your users
-know to use their Kerberos passwords when they log in.</p>
-<p>You will also need to educate your users to use the ticket management
-programs kinit, klist, and kdestroy. If you do not have Kerberos
-password changing integrated into the native password program (again,
-typically through PAM), you will need to educate users to use kpasswd
-in place of its non-Kerberos counterparts passwd.</p>
-<div class="section" id="client-machine-configuration-files">
-<h2>Client machine configuration files<a class="headerlink" href="#client-machine-configuration-files" title="Permalink to this headline">¶</a></h2>
-<p>Each machine running Kerberos should have a <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> file.
-At a minimum, it should define a <strong>default_realm</strong> setting in
-<a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>. If you are not using DNS SRV records
-(<a class="reference internal" href="realm_config.html#kdc-hostnames"><span class="std std-ref">Hostnames for KDCs</span></a>) or URI records (<a class="reference internal" href="realm_config.html#kdc-discovery"><span class="std std-ref">KDC Discovery</span></a>), it must
-also contain a <a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> section containing information for your
-realm’s KDCs.</p>
-<p>Consider setting <strong>rdns</strong> to false in order to reduce your dependence
-on precisely correct DNS information for service hostnames. Turning
-this flag off means that service hostnames will be canonicalized
-through forward name resolution (which adds your domain name to
-unqualified hostnames, and resolves CNAME records in DNS), but not
-through reverse address lookup. The default value of this flag is
-true for historical reasons only.</p>
-<p>If you anticipate users frequently logging into remote hosts
-(e.g., using ssh) using forwardable credentials, consider setting
-<strong>forwardable</strong> to true so that users obtain forwardable tickets by
-default. Otherwise users will need to use <code class="docutils literal"><span class="pre">kinit</span> <span class="pre">-f</span></code> to get
-forwardable tickets.</p>
-<p>Consider adjusting the <strong>ticket_lifetime</strong> setting to match the likely
-length of sessions for your users. For instance, if most of your
-users will be logging in for an eight-hour workday, you could set the
-default to ten hours so that tickets obtained in the morning expire
-shortly after the end of the workday. Users can still manually
-request longer tickets when necessary, up to the maximum allowed by
-each user’s principal record on the KDC.</p>
-<p>If a client host may access services in different realms, it may be
-useful to define a <a class="reference internal" href="conf_files/krb5_conf.html#domain-realm"><span class="std std-ref">[domain_realm]</span></a> mapping so that clients know
-which hosts belong to which realms. However, if your clients and KDC
-are running release 1.7 or later, it is also reasonable to leave this
-section out on client machines and just define it in the KDC’s
-krb5.conf.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Installing and configuring UNIX client machines</a><ul>
-<li><a class="reference internal" href="#client-machine-configuration-files">Client machine configuration files</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2 current"><a class="reference internal" href="install.html">Installation guide</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="install_kdc.html">Installing KDCs</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">Installing and configuring UNIX client machines</a></li>
-<li class="toctree-l3"><a class="reference internal" href="install_appl_srv.html">UNIX Application Servers</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="install_kdc.html" title="Installing KDCs"
- >previous</a> |
- <a href="install_appl_srv.html" title="UNIX Application Servers"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Installing and configuring UNIX client machines">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Installing KDCs — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Installing and configuring UNIX client machines" href="install_clients.html" />
- <link rel="prev" title="Installation guide" href="install.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="install.html" title="Installation guide"
- accesskey="P">previous</a> |
- <a href="install_clients.html" title="Installing and configuring UNIX client machines"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Installing KDCs">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="installing-kdcs">
-<h1>Installing KDCs<a class="headerlink" href="#installing-kdcs" title="Permalink to this headline">¶</a></h1>
-<p>When setting up Kerberos in a production environment, it is best to
-have multiple replica KDCs alongside with a primary KDC to ensure the
-continued availability of the Kerberized services. Each KDC contains
-a copy of the Kerberos database. The primary KDC contains the
-writable copy of the realm database, which it replicates to the
-replica KDCs at regular intervals. All database changes (such as
-password changes) are made on the primary KDC. Replica KDCs provide
-Kerberos ticket-granting services, but not database administration,
-when the primary KDC is unavailable. MIT recommends that you install
-all of your KDCs to be able to function as either the primary or one
-of the replicas. This will enable you to easily switch your primary
-KDC with one of the replicas if necessary (see
-<a class="reference internal" href="#switch-primary-replica"><span class="std std-ref">Switching primary and replica KDCs</span></a>). This installation procedure is based
-on that recommendation.</p>
-<div class="admonition warning">
-<p class="first admonition-title">Warning</p>
-<ul class="last simple">
-<li>The Kerberos system relies on the availability of correct time
-information. Ensure that the primary and all replica KDCs have
-properly synchronized clocks.</li>
-<li>It is best to install and run KDCs on secured and dedicated
-hardware with limited access. If your KDC is also a file
-server, FTP server, Web server, or even just a client machine,
-someone who obtained root access through a security hole in any
-of those areas could potentially gain access to the Kerberos
-database.</li>
-</ul>
-</div>
-<div class="section" id="install-and-configure-the-primary-kdc">
-<h2>Install and configure the primary KDC<a class="headerlink" href="#install-and-configure-the-primary-kdc" title="Permalink to this headline">¶</a></h2>
-<p>Install Kerberos either from the OS-provided packages or from the
-source (See <a class="reference internal" href="../build/doing_build.html#do-build"><span class="std std-ref">Building within a single tree</span></a>).</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p>For the purpose of this document we will use the following
-names:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kerberos</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="o">-</span> <span class="n">primary</span> <span class="n">KDC</span>
-<span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="o">-</span> <span class="n">replica</span> <span class="n">KDC</span>
-<span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">-</span> <span class="n">realm</span> <span class="n">name</span>
-<span class="o">.</span><span class="n">k5</span><span class="o">.</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">-</span> <span class="n">stash</span> <span class="n">file</span>
-<span class="n">admin</span><span class="o">/</span><span class="n">admin</span> <span class="o">-</span> <span class="n">admin</span> <span class="n">principal</span>
-</pre></div>
-</div>
-<p class="last">See <a class="reference internal" href="../mitK5defaults.html#mitk5defaults"><span class="std std-ref">MIT Kerberos defaults</span></a> for the default names and locations
-of the relevant to this topic files. Adjust the names and
-paths to your system environment.</p>
-</div>
-</div>
-<div class="section" id="edit-kdc-configuration-files">
-<h2>Edit KDC configuration files<a class="headerlink" href="#edit-kdc-configuration-files" title="Permalink to this headline">¶</a></h2>
-<p>Modify the configuration files, <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> and
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>, to reflect the correct information (such as
-domain-realm mappings and Kerberos servers names) for your realm.
-(See <a class="reference internal" href="../mitK5defaults.html#mitk5defaults"><span class="std std-ref">MIT Kerberos defaults</span></a> for the recommended default locations for
-these files).</p>
-<p>Most of the tags in the configuration have default values that will
-work well for most sites. There are some tags in the
-<a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> file whose values must be specified, and this
-section will explain those.</p>
-<p>If the locations for these configuration files differs from the
-default ones, set <strong>KRB5_CONFIG</strong> and <strong>KRB5_KDC_PROFILE</strong> environment
-variables to point to the krb5.conf and kdc.conf respectively. For
-example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">export</span> <span class="n">KRB5_CONFIG</span><span class="o">=/</span><span class="n">yourdir</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">conf</span>
-<span class="n">export</span> <span class="n">KRB5_KDC_PROFILE</span><span class="o">=/</span><span class="n">yourdir</span><span class="o">/</span><span class="n">kdc</span><span class="o">.</span><span class="n">conf</span>
-</pre></div>
-</div>
-<div class="section" id="krb5-conf">
-<h3>krb5.conf<a class="headerlink" href="#krb5-conf" title="Permalink to this headline">¶</a></h3>
-<p>If you are not using DNS TXT records (see <a class="reference internal" href="realm_config.html#mapping-hostnames"><span class="std std-ref">Mapping hostnames onto Kerberos realms</span></a>),
-you must specify the <strong>default_realm</strong> in the <a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>
-section. If you are not using DNS URI or SRV records (see
-<a class="reference internal" href="realm_config.html#kdc-hostnames"><span class="std std-ref">Hostnames for KDCs</span></a> and <a class="reference internal" href="realm_config.html#kdc-discovery"><span class="std std-ref">KDC Discovery</span></a>), you must include the
-<strong>kdc</strong> tag for each <em>realm</em> in the <a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> section. To
-communicate with the kadmin server in each realm, the <strong>admin_server</strong>
-tag must be set in the
-<a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> section.</p>
-<p>An example krb5.conf file:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">libdefaults</span><span class="p">]</span>
- <span class="n">default_realm</span> <span class="o">=</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-
-<span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="n">admin_server</span> <span class="o">=</span> <span class="n">kerberos</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="kdc-conf">
-<h3>kdc.conf<a class="headerlink" href="#kdc-conf" title="Permalink to this headline">¶</a></h3>
-<p>The kdc.conf file can be used to control the listening ports of the
-KDC and kadmind, as well as realm-specific defaults, the database type
-and location, and logging.</p>
-<p>An example kdc.conf file:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">kdcdefaults</span><span class="p">]</span>
- <span class="n">kdc_listen</span> <span class="o">=</span> <span class="mi">88</span>
- <span class="n">kdc_tcp_listen</span> <span class="o">=</span> <span class="mi">88</span>
-
-<span class="p">[</span><span class="n">realms</span><span class="p">]</span>
- <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">kadmind_port</span> <span class="o">=</span> <span class="mi">749</span>
- <span class="n">max_life</span> <span class="o">=</span> <span class="mi">12</span><span class="n">h</span> <span class="mi">0</span><span class="n">m</span> <span class="mi">0</span><span class="n">s</span>
- <span class="n">max_renewable_life</span> <span class="o">=</span> <span class="mi">7</span><span class="n">d</span> <span class="mi">0</span><span class="n">h</span> <span class="mi">0</span><span class="n">m</span> <span class="mi">0</span><span class="n">s</span>
- <span class="n">master_key_type</span> <span class="o">=</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span>
- <span class="n">supported_enctypes</span> <span class="o">=</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="p">:</span><span class="n">normal</span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="p">:</span><span class="n">normal</span>
- <span class="c1"># If the default location does not suit your setup,</span>
- <span class="c1"># explicitly configure the following values:</span>
- <span class="c1"># database_name = /var/krb5kdc/principal</span>
- <span class="c1"># key_stash_file = /var/krb5kdc/.k5.ATHENA.MIT.EDU</span>
- <span class="c1"># acl_file = /var/krb5kdc/kadm5.acl</span>
- <span class="p">}</span>
-
-<span class="p">[</span><span class="n">logging</span><span class="p">]</span>
- <span class="c1"># By default, the KDC and kadmind will log output using</span>
- <span class="c1"># syslog. You can instead send log output to files like this:</span>
- <span class="n">kdc</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">log</span><span class="o">/</span><span class="n">krb5kdc</span><span class="o">.</span><span class="n">log</span>
- <span class="n">admin_server</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">log</span><span class="o">/</span><span class="n">kadmin</span><span class="o">.</span><span class="n">log</span>
- <span class="n">default</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">log</span><span class="o">/</span><span class="n">krb5lib</span><span class="o">.</span><span class="n">log</span>
-</pre></div>
-</div>
-<p>Replace <code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code> and <code class="docutils literal"><span class="pre">kerberos.mit.edu</span></code> with the name of
-your Kerberos realm and server respectively.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">You have to have write permission on the target directories
-(these directories must exist) used by <strong>database_name</strong>,
-<strong>key_stash_file</strong>, and <strong>acl_file</strong>.</p>
-</div>
-</div>
-</div>
-<div class="section" id="create-the-kdc-database">
-<span id="create-db"></span><h2>Create the KDC database<a class="headerlink" href="#create-the-kdc-database" title="Permalink to this headline">¶</a></h2>
-<p>You will use the <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> command on the primary KDC to
-create the Kerberos database and the optional <a class="reference internal" href="../basic/stash_file_def.html#stash-definition"><span class="std std-ref">stash file</span></a>.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If you choose not to install a stash file, the KDC will
-prompt you for the master key each time it starts up. This
-means that the KDC will not be able to start automatically,
-such as after a system reboot.</p>
-</div>
-<p><a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> will prompt you for the master password for the
-Kerberos database. This password can be any string. A good password
-is one you can remember, but that no one else can guess. Examples of
-bad passwords are words that can be found in a dictionary, any common
-or popular name, especially a famous person (or cartoon character),
-your username in any form (e.g., forward, backward, repeated twice,
-etc.), and any of the sample passwords that appear in this manual.
-One example of a password which might be good if it did not appear in
-this manual is “MITiys4K5!”, which represents the sentence “MIT is
-your source for Kerberos 5!” (It’s the first letter of each word,
-substituting the numeral “4” for the word “for”, and includes the
-punctuation mark at the end.)</p>
-<p>The following is an example of how to create a Kerberos database and
-stash file on the primary KDC, using the <a class="reference internal" href="admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a> command.
-Replace <code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code> with the name of your Kerberos realm:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_util</span> <span class="n">create</span> <span class="o">-</span><span class="n">r</span> <span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span> <span class="o">-</span><span class="n">s</span>
-
-<span class="n">Initializing</span> <span class="n">database</span> <span class="s1">'/usr/local/var/krb5kdc/principal'</span> <span class="k">for</span> <span class="n">realm</span> <span class="s1">'ATHENA.MIT.EDU'</span><span class="p">,</span>
-<span class="n">master</span> <span class="n">key</span> <span class="n">name</span> <span class="s1">'K/M@ATHENA.MIT.EDU'</span>
-<span class="n">You</span> <span class="n">will</span> <span class="n">be</span> <span class="n">prompted</span> <span class="k">for</span> <span class="n">the</span> <span class="n">database</span> <span class="n">Master</span> <span class="n">Password</span><span class="o">.</span>
-<span class="n">It</span> <span class="ow">is</span> <span class="n">important</span> <span class="n">that</span> <span class="n">you</span> <span class="n">NOT</span> <span class="n">FORGET</span> <span class="n">this</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">KDC</span> <span class="n">database</span> <span class="n">master</span> <span class="n">key</span><span class="p">:</span> <span class="o"><=</span> <span class="n">Type</span> <span class="n">the</span> <span class="n">master</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">KDC</span> <span class="n">database</span> <span class="n">master</span> <span class="n">key</span> <span class="n">to</span> <span class="n">verify</span><span class="p">:</span> <span class="o"><=</span> <span class="n">Type</span> <span class="n">it</span> <span class="n">again</span><span class="o">.</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>This will create five files in <a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code> (or at the locations specified
-in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>):</p>
-<ul class="simple">
-<li>two Kerberos database files, <code class="docutils literal"><span class="pre">principal</span></code>, and <code class="docutils literal"><span class="pre">principal.ok</span></code></li>
-<li>the Kerberos administrative database file, <code class="docutils literal"><span class="pre">principal.kadm5</span></code></li>
-<li>the administrative database lock file, <code class="docutils literal"><span class="pre">principal.kadm5.lock</span></code></li>
-<li>the stash file, in this example <code class="docutils literal"><span class="pre">.k5.ATHENA.MIT.EDU</span></code>. If you do
-not want a stash file, run the above command without the <strong>-s</strong>
-option.</li>
-</ul>
-<p>For more information on administrating Kerberos database see
-<a class="reference internal" href="database.html#db-operations"><span class="std std-ref">Operations on the Kerberos database</span></a>.</p>
-</div>
-<div class="section" id="add-administrators-to-the-acl-file">
-<span id="admin-acl"></span><h2>Add administrators to the ACL file<a class="headerlink" href="#add-administrators-to-the-acl-file" title="Permalink to this headline">¶</a></h2>
-<p>Next, you need create an Access Control List (ACL) file and put the
-Kerberos principal of at least one of the administrators into it.
-This file is used by the <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> daemon to control which
-principals may view and make privileged modifications to the Kerberos
-database files. The ACL filename is determined by the <strong>acl_file</strong>
-variable in <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>; the default is <a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/kadm5.acl</span></code>.</p>
-<p>For more information on Kerberos ACL file see <a class="reference internal" href="conf_files/kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a>.</p>
-</div>
-<div class="section" id="add-administrators-to-the-kerberos-database">
-<span id="addadmin-kdb"></span><h2>Add administrators to the Kerberos database<a class="headerlink" href="#add-administrators-to-the-kerberos-database" title="Permalink to this headline">¶</a></h2>
-<p>Next you need to add administrative principals (i.e., principals who
-are allowed to administer Kerberos database) to the Kerberos database.
-You <em>must</em> add at least one principal now to allow communication
-between the Kerberos administration daemon kadmind and the kadmin
-program over the network for further administration. To do this, use
-the kadmin.local utility on the primary KDC. kadmin.local is designed
-to be run on the primary KDC host without using Kerberos
-authentication to an admin server; instead, it must have read and
-write access to the Kerberos database on the local filesystem.</p>
-<p>The administrative principals you create should be the ones you added
-to the ACL file (see <a class="reference internal" href="#admin-acl"><span class="std std-ref">Add administrators to the ACL file</span></a>).</p>
-<p>In the following example, the administrative principal <code class="docutils literal"><span class="pre">admin/admin</span></code>
-is created:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kadmin</span><span class="o">.</span><span class="n">local</span>
-
-<span class="n">kadmin</span><span class="o">.</span><span class="n">local</span><span class="p">:</span> <span class="n">addprinc</span> <span class="n">admin</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-
-<span class="n">No</span> <span class="n">policy</span> <span class="n">specified</span> <span class="k">for</span> <span class="s2">"admin/admin@ATHENA.MIT.EDU"</span><span class="p">;</span>
-<span class="n">assigning</span> <span class="s2">"default"</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">admin</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><=</span> <span class="n">Enter</span> <span class="n">a</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Re</span><span class="o">-</span><span class="n">enter</span> <span class="n">password</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">admin</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><=</span> <span class="n">Type</span> <span class="n">it</span> <span class="n">again</span><span class="o">.</span>
-<span class="n">Principal</span> <span class="s2">"admin/admin@ATHENA.MIT.EDU"</span> <span class="n">created</span><span class="o">.</span>
-<span class="n">kadmin</span><span class="o">.</span><span class="n">local</span><span class="p">:</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="start-the-kerberos-daemons-on-the-primary-kdc">
-<span id="start-kdc-daemons"></span><h2>Start the Kerberos daemons on the primary KDC<a class="headerlink" href="#start-the-kerberos-daemons-on-the-primary-kdc" title="Permalink to this headline">¶</a></h2>
-<p>At this point, you are ready to start the Kerberos KDC
-(<a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a>) and administrative daemons on the primary KDC. To
-do so, type:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">krb5kdc</span>
-<span class="n">shell</span><span class="o">%</span> <span class="n">kadmind</span>
-</pre></div>
-</div>
-<p>Each server daemon will fork and run in the background.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Assuming you want these daemons to start up automatically at
-boot time, you can add them to the KDC’s <code class="docutils literal"><span class="pre">/etc/rc</span></code> or
-<code class="docutils literal"><span class="pre">/etc/inittab</span></code> file. You need to have a
-<a class="reference internal" href="../basic/stash_file_def.html#stash-definition"><span class="std std-ref">stash file</span></a> in order to do this.</p>
-</div>
-<p>You can verify that they started properly by checking for their
-startup messages in the logging locations you defined in
-<a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> (see <a class="reference internal" href="conf_files/kdc_conf.html#logging"><span class="std std-ref">[logging]</span></a>). For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">tail</span> <span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">log</span><span class="o">/</span><span class="n">krb5kdc</span><span class="o">.</span><span class="n">log</span>
-<span class="n">Dec</span> <span class="mi">02</span> <span class="mi">12</span><span class="p">:</span><span class="mi">35</span><span class="p">:</span><span class="mi">47</span> <span class="n">beeblebrox</span> <span class="n">krb5kdc</span><span class="p">[</span><span class="mi">3187</span><span class="p">](</span><span class="n">info</span><span class="p">):</span> <span class="n">commencing</span> <span class="n">operation</span>
-<span class="n">shell</span><span class="o">%</span> <span class="n">tail</span> <span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">log</span><span class="o">/</span><span class="n">kadmin</span><span class="o">.</span><span class="n">log</span>
-<span class="n">Dec</span> <span class="mi">02</span> <span class="mi">12</span><span class="p">:</span><span class="mi">35</span><span class="p">:</span><span class="mi">52</span> <span class="n">beeblebrox</span> <span class="n">kadmind</span><span class="p">[</span><span class="mi">3189</span><span class="p">](</span><span class="n">info</span><span class="p">):</span> <span class="n">starting</span>
-</pre></div>
-</div>
-<p>Any errors the daemons encounter while starting will also be listed in
-the logging output.</p>
-<p>As an additional verification, check if <a class="reference internal" href="../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a> succeeds
-against the principals that you have created on the previous step
-(<a class="reference internal" href="#addadmin-kdb"><span class="std std-ref">Add administrators to the Kerberos database</span></a>). Run:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kinit</span> <span class="n">admin</span><span class="o">/</span><span class="n">admin</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="install-the-replica-kdcs">
-<h2>Install the replica KDCs<a class="headerlink" href="#install-the-replica-kdcs" title="Permalink to this headline">¶</a></h2>
-<p>You are now ready to start configuring the replica KDCs.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Assuming you are setting the KDCs up so that you can easily
-switch the primary KDC with one of the replicas, you should
-perform each of these steps on the primary KDC as well as
-the replica KDCs, unless these instructions specify
-otherwise.</p>
-</div>
-<div class="section" id="create-host-keytabs-for-replica-kdcs">
-<span id="replica-host-key"></span><h3>Create host keytabs for replica KDCs<a class="headerlink" href="#create-host-keytabs-for-replica-kdcs" title="Permalink to this headline">¶</a></h3>
-<p>Each KDC needs a <code class="docutils literal"><span class="pre">host</span></code> key in the Kerberos database. These keys
-are used for mutual authentication when propagating the database dump
-file from the primary KDC to the secondary KDC servers.</p>
-<p>On the primary KDC, connect to administrative interface and create the
-host principal for each of the KDCs’ <code class="docutils literal"><span class="pre">host</span></code> services. For example,
-if the primary KDC were called <code class="docutils literal"><span class="pre">kerberos.mit.edu</span></code>, and you had a
-replica KDC named <code class="docutils literal"><span class="pre">kerberos-1.mit.edu</span></code>, you would type the
-following:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kadmin</span>
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">addprinc</span> <span class="o">-</span><span class="n">randkey</span> <span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
-<span class="n">No</span> <span class="n">policy</span> <span class="n">specified</span> <span class="k">for</span> <span class="s2">"host/kerberos.mit.edu@ATHENA.MIT.EDU"</span><span class="p">;</span> <span class="n">assigning</span> <span class="s2">"default"</span>
-<span class="n">Principal</span> <span class="s2">"host/kerberos.mit.edu@ATHENA.MIT.EDU"</span> <span class="n">created</span><span class="o">.</span>
-
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">addprinc</span> <span class="o">-</span><span class="n">randkey</span> <span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
-<span class="n">No</span> <span class="n">policy</span> <span class="n">specified</span> <span class="k">for</span> <span class="s2">"host/kerberos-1.mit.edu@ATHENA.MIT.EDU"</span><span class="p">;</span> <span class="n">assigning</span> <span class="s2">"default"</span>
-<span class="n">Principal</span> <span class="s2">"host/kerberos-1.mit.edu@ATHENA.MIT.EDU"</span> <span class="n">created</span><span class="o">.</span>
-</pre></div>
-</div>
-<p>It is not strictly necessary to have the primary KDC server in the
-Kerberos database, but it can be handy if you want to be able to swap
-the primary KDC with one of the replicas.</p>
-<p>Next, extract <code class="docutils literal"><span class="pre">host</span></code> random keys for all participating KDCs and
-store them in each host’s default keytab file. Ideally, you should
-extract each keytab locally on its own KDC. If this is not feasible,
-you should use an encrypted session to send them across the network.
-To extract a keytab directly on a replica KDC called
-<code class="docutils literal"><span class="pre">kerberos-1.mit.edu</span></code>, you would execute the following command:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">ktadd</span> <span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">encryption</span>
- <span class="nb">type</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">encryption</span>
- <span class="nb">type</span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">encryption</span>
- <span class="nb">type</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha384</span><span class="o">-</span><span class="mi">192</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">encryption</span>
- <span class="nb">type</span> <span class="n">arcfour</span><span class="o">-</span><span class="n">hmac</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-</pre></div>
-</div>
-<p>If you are instead extracting a keytab for the replica KDC called
-<code class="docutils literal"><span class="pre">kerberos-1.mit.edu</span></code> on the primary KDC, you should use a dedicated
-temporary keytab file for that machine’s keytab:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">ktadd</span> <span class="o">-</span><span class="n">k</span> <span class="o">/</span><span class="n">tmp</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">keytab</span> <span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">encryption</span>
- <span class="nb">type</span> <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-<span class="n">Entry</span> <span class="k">for</span> <span class="n">principal</span> <span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span> <span class="k">with</span> <span class="n">kvno</span> <span class="mi">2</span><span class="p">,</span> <span class="n">encryption</span>
- <span class="nb">type</span> <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span> <span class="n">added</span> <span class="n">to</span> <span class="n">keytab</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">.</span><span class="n">keytab</span><span class="o">.</span>
-</pre></div>
-</div>
-<p>The file <code class="docutils literal"><span class="pre">/tmp/kerberos-1.keytab</span></code> can then be installed as
-<code class="docutils literal"><span class="pre">/etc/krb5.keytab</span></code> on the host <code class="docutils literal"><span class="pre">kerberos-1.mit.edu</span></code>.</p>
-</div>
-<div class="section" id="configure-replica-kdcs">
-<h3>Configure replica KDCs<a class="headerlink" href="#configure-replica-kdcs" title="Permalink to this headline">¶</a></h3>
-<p>Database propagation copies the contents of the primary’s database,
-but does not propagate configuration files, stash files, or the kadm5
-ACL file. The following files must be copied by hand to each replica
-(see <a class="reference internal" href="../mitK5defaults.html#mitk5defaults"><span class="std std-ref">MIT Kerberos defaults</span></a> for the default locations for these files):</p>
-<ul class="simple">
-<li>krb5.conf</li>
-<li>kdc.conf</li>
-<li>kadm5.acl</li>
-<li>master key stash file</li>
-</ul>
-<p>Move the copied files into their appropriate directories, exactly as
-on the primary KDC. kadm5.acl is only needed to allow a replica to
-swap with the primary KDC.</p>
-<p>The database is propagated from the primary KDC to the replica KDCs
-via the <a class="reference internal" href="admin_commands/kpropd.html#kpropd-8"><span class="std std-ref">kpropd</span></a> daemon. You must explicitly specify the
-principals which are allowed to provide Kerberos dump updates on the
-replica machine with a new database. Create a file named kpropd.acl
-in the KDC state directory containing the <code class="docutils literal"><span class="pre">host</span></code> principals for each
-of the KDCs:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">host</span><span class="o">/</span><span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-</pre></div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If you expect that the primary and replica KDCs will be
-switched at some point of time, list the host principals
-from all participating KDC servers in kpropd.acl files on
-all of the KDCs. Otherwise, you only need to list the
-primary KDC’s host principal in the kpropd.acl files of the
-replica KDCs.</p>
-</div>
-<p>Then, add the following line to <code class="docutils literal"><span class="pre">/etc/inetd.conf</span></code> on each KDC
-(adjust the path to kpropd):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">krb5_prop</span> <span class="n">stream</span> <span class="n">tcp</span> <span class="n">nowait</span> <span class="n">root</span> <span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">sbin</span><span class="o">/</span><span class="n">kpropd</span> <span class="n">kpropd</span>
-</pre></div>
-</div>
-<p>You also need to add the following line to <code class="docutils literal"><span class="pre">/etc/services</span></code> on each
-KDC, if it is not already present (assuming that the default port is
-used):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">krb5_prop</span> <span class="mi">754</span><span class="o">/</span><span class="n">tcp</span> <span class="c1"># Kerberos replica propagation</span>
-</pre></div>
-</div>
-<p>Restart inetd daemon.</p>
-<p>Alternatively, start <a class="reference internal" href="admin_commands/kpropd.html#kpropd-8"><span class="std std-ref">kpropd</span></a> as a stand-alone daemon. This is
-required when incremental propagation is enabled.</p>
-<p>Now that the replica KDC is able to accept database propagation,
-you’ll need to propagate the database from the primary server.</p>
-<p>NOTE: Do not start the replica KDC yet; you still do not have a copy
-of the primary’s database.</p>
-</div>
-<div class="section" id="propagate-the-database-to-each-replica-kdc">
-<span id="kprop-to-replicas"></span><h3>Propagate the database to each replica KDC<a class="headerlink" href="#propagate-the-database-to-each-replica-kdc" title="Permalink to this headline">¶</a></h3>
-<p>First, create a dump file of the database on the primary KDC, as
-follows:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdb5_util</span> <span class="n">dump</span> <span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">krb5kdc</span><span class="o">/</span><span class="n">replica_datatrans</span>
-</pre></div>
-</div>
-<p>Then, manually propagate the database to each replica KDC, as in the
-following example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kprop</span> <span class="o">-</span><span class="n">f</span> <span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">krb5kdc</span><span class="o">/</span><span class="n">replica_datatrans</span> <span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span>
-
-<span class="n">Database</span> <span class="n">propagation</span> <span class="n">to</span> <span class="n">kerberos</span><span class="o">-</span><span class="mf">1.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="p">:</span> <span class="n">SUCCEEDED</span>
-</pre></div>
-</div>
-<p>You will need a script to dump and propagate the database. The
-following is an example of a Bourne shell script that will do this.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Remember that you need to replace <code class="docutils literal"><span class="pre">/usr/local/var/krb5kdc</span></code>
-with the name of the KDC state directory.</p>
-</div>
-<div class="highlight-default"><div class="highlight"><pre><span></span>#!/bin/sh
-
-kdclist = "kerberos-1.mit.edu kerberos-2.mit.edu"
-
-kdb5_util dump /usr/local/var/krb5kdc/replica_datatrans
-
-for kdc in $kdclist
-do
- kprop -f /usr/local/var/krb5kdc/replica_datatrans $kdc
-done
-</pre></div>
-</div>
-<p>You will need to set up a cron job to run this script at the intervals
-you decided on earlier (see <a class="reference internal" href="realm_config.html#db-prop"><span class="std std-ref">Database propagation</span></a>).</p>
-<p>Now that the replica KDC has a copy of the Kerberos database, you can
-start the krb5kdc daemon:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">krb5kdc</span>
-</pre></div>
-</div>
-<p>As with the primary KDC, you will probably want to add this command to
-the KDCs’ <code class="docutils literal"><span class="pre">/etc/rc</span></code> or <code class="docutils literal"><span class="pre">/etc/inittab</span></code> files, so they will start
-the krb5kdc daemon automatically at boot time.</p>
-<div class="section" id="propagation-failed">
-<h4>Propagation failed?<a class="headerlink" href="#propagation-failed" title="Permalink to this headline">¶</a></h4>
-<p>You may encounter the following error messages. For a more detailed
-discussion on possible causes and solutions click on the error link
-to be redirected to <a class="reference internal" href="troubleshoot.html#troubleshoot"><span class="std std-ref">Troubleshooting</span></a> section.</p>
-<ol class="arabic simple">
-<li><a class="reference internal" href="troubleshoot.html#kprop-no-route"><span class="std std-ref">kprop: No route to host while connecting to server</span></a></li>
-<li><a class="reference internal" href="troubleshoot.html#kprop-con-refused"><span class="std std-ref">kprop: Connection refused while connecting to server</span></a></li>
-<li><a class="reference internal" href="troubleshoot.html#kprop-sendauth-exchange"><span class="std std-ref">kprop: Server rejected authentication (during sendauth exchange) while authenticating to server</span></a></li>
-</ol>
-</div>
-</div>
-</div>
-<div class="section" id="add-kerberos-principals-to-the-database">
-<h2>Add Kerberos principals to the database<a class="headerlink" href="#add-kerberos-principals-to-the-database" title="Permalink to this headline">¶</a></h2>
-<p>Once your KDCs are set up and running, you are ready to use
-<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> to load principals for your users, hosts, and other
-services into the Kerberos database. This procedure is described
-fully in <a class="reference internal" href="database.html#add-mod-del-princs"><span class="std std-ref">Adding, modifying and deleting principals</span></a>.</p>
-<p>You may occasionally want to use one of your replica KDCs as the
-primary. This might happen if you are upgrading the primary KDC, or
-if your primary KDC has a disk crash. See the following section for
-the instructions.</p>
-</div>
-<div class="section" id="switching-primary-and-replica-kdcs">
-<span id="switch-primary-replica"></span><h2>Switching primary and replica KDCs<a class="headerlink" href="#switching-primary-and-replica-kdcs" title="Permalink to this headline">¶</a></h2>
-<p>You may occasionally want to use one of your replica KDCs as the
-primary. This might happen if you are upgrading the primary KDC, or
-if your primary KDC has a disk crash.</p>
-<p>Assuming you have configured all of your KDCs to be able to function
-as either the primary KDC or a replica KDC (as this document
-recommends), all you need to do to make the changeover is:</p>
-<p>If the primary KDC is still running, do the following on the <em>old</em>
-primary KDC:</p>
-<ol class="arabic simple">
-<li>Kill the kadmind process.</li>
-<li>Disable the cron job that propagates the database.</li>
-<li>Run your database propagation script manually, to ensure that the
-replicas all have the latest copy of the database (see
-<a class="reference internal" href="#kprop-to-replicas"><span class="std std-ref">Propagate the database to each replica KDC</span></a>).</li>
-</ol>
-<p>On the <em>new</em> primary KDC:</p>
-<ol class="arabic simple">
-<li>Start the <a class="reference internal" href="admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> daemon (see <a class="reference internal" href="#start-kdc-daemons"><span class="std std-ref">Start the Kerberos daemons on the primary KDC</span></a>).</li>
-<li>Set up the cron job to propagate the database (see
-<a class="reference internal" href="#kprop-to-replicas"><span class="std std-ref">Propagate the database to each replica KDC</span></a>).</li>
-<li>Switch the CNAMEs of the old and new primary KDCs. If you can’t do
-this, you’ll need to change the <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> file on every
-client machine in your Kerberos realm.</li>
-</ol>
-</div>
-<div class="section" id="incremental-database-propagation">
-<h2>Incremental database propagation<a class="headerlink" href="#incremental-database-propagation" title="Permalink to this headline">¶</a></h2>
-<p>If you expect your Kerberos database to become large, you may wish to
-set up incremental propagation to replica KDCs. See
-<a class="reference internal" href="database.html#incr-db-prop"><span class="std std-ref">Incremental database propagation</span></a> for details.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Installing KDCs</a><ul>
-<li><a class="reference internal" href="#install-and-configure-the-primary-kdc">Install and configure the primary KDC</a></li>
-<li><a class="reference internal" href="#edit-kdc-configuration-files">Edit KDC configuration files</a><ul>
-<li><a class="reference internal" href="#krb5-conf">krb5.conf</a></li>
-<li><a class="reference internal" href="#kdc-conf">kdc.conf</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#create-the-kdc-database">Create the KDC database</a></li>
-<li><a class="reference internal" href="#add-administrators-to-the-acl-file">Add administrators to the ACL file</a></li>
-<li><a class="reference internal" href="#add-administrators-to-the-kerberos-database">Add administrators to the Kerberos database</a></li>
-<li><a class="reference internal" href="#start-the-kerberos-daemons-on-the-primary-kdc">Start the Kerberos daemons on the primary KDC</a></li>
-<li><a class="reference internal" href="#install-the-replica-kdcs">Install the replica KDCs</a><ul>
-<li><a class="reference internal" href="#create-host-keytabs-for-replica-kdcs">Create host keytabs for replica KDCs</a></li>
-<li><a class="reference internal" href="#configure-replica-kdcs">Configure replica KDCs</a></li>
-<li><a class="reference internal" href="#propagate-the-database-to-each-replica-kdc">Propagate the database to each replica KDC</a><ul>
-<li><a class="reference internal" href="#propagation-failed">Propagation failed?</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li><a class="reference internal" href="#add-kerberos-principals-to-the-database">Add Kerberos principals to the database</a></li>
-<li><a class="reference internal" href="#switching-primary-and-replica-kdcs">Switching primary and replica KDCs</a></li>
-<li><a class="reference internal" href="#incremental-database-propagation">Incremental database propagation</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2 current"><a class="reference internal" href="install.html">Installation guide</a><ul class="current">
-<li class="toctree-l3 current"><a class="current reference internal" href="#">Installing KDCs</a></li>
-<li class="toctree-l3"><a class="reference internal" href="install_clients.html">Installing and configuring UNIX client machines</a></li>
-<li class="toctree-l3"><a class="reference internal" href="install_appl_srv.html">UNIX Application Servers</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="install.html" title="Installation guide"
- >previous</a> |
- <a href="install_clients.html" title="Installing and configuring UNIX client machines"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Installing KDCs">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Account lockout — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Configuring Kerberos with OpenLDAP back-end" href="conf_ldap.html" />
- <link rel="prev" title="Database types" href="dbtypes.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="dbtypes.html" title="Database types"
- accesskey="P">previous</a> |
- <a href="conf_ldap.html" title="Configuring Kerberos with OpenLDAP back-end"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Account lockout">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="account-lockout">
-<span id="lockout"></span><h1>Account lockout<a class="headerlink" href="#account-lockout" title="Permalink to this headline">¶</a></h1>
-<p>As of release 1.8, the KDC can be configured to lock out principals
-after a number of failed authentication attempts within a period of
-time. Account lockout can make it more difficult to attack a
-principal’s password by brute force, but also makes it easy for an
-attacker to deny access to a principal.</p>
-<div class="section" id="configuring-account-lockout">
-<h2>Configuring account lockout<a class="headerlink" href="#configuring-account-lockout" title="Permalink to this headline">¶</a></h2>
-<p>Account lockout only works for principals with the
-<strong>+requires_preauth</strong> flag set. Without this flag, the KDC cannot
-know whether or not a client successfully decrypted the ticket it
-issued. It is also important to set the <strong>-allow_svr</strong> flag on a
-principal to protect its password from an off-line dictionary attack
-through a TGS request. You can set these flags on a principal with
-<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> as follows:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">modprinc</span> <span class="o">+</span><span class="n">requires_preauth</span> <span class="o">-</span><span class="n">allow_svr</span> <span class="n">PRINCNAME</span>
-</pre></div>
-</div>
-<p>Account lockout parameters are configured via <a class="reference internal" href="database.html#policies"><span class="std std-ref">policy objects</span></a>. There may be an existing policy associated with user
-principals (such as the “default” policy), or you may need to create a
-new one and associate it with each user principal.</p>
-<p>The policy parameters related to account lockout are:</p>
-<ul class="simple">
-<li><a class="reference internal" href="database.html#policy-maxfailure"><span class="std std-ref">maxfailure</span></a>: the number of failed attempts
-before the principal is locked out</li>
-<li><a class="reference internal" href="database.html#policy-failurecountinterval"><span class="std std-ref">failurecountinterval</span></a>: the
-allowable interval between failed attempts</li>
-<li><a class="reference internal" href="database.html#policy-lockoutduration"><span class="std std-ref">lockoutduration</span></a>: the amount of time
-a principal is locked out for</li>
-</ul>
-<p>Here is an example of setting these parameters on a new policy and
-associating it with a principal:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">addpol</span> <span class="o">-</span><span class="n">maxfailure</span> <span class="mi">10</span> <span class="o">-</span><span class="n">failurecountinterval</span> <span class="mi">180</span>
- <span class="o">-</span><span class="n">lockoutduration</span> <span class="mi">60</span> <span class="n">lockout_policy</span>
-<span class="n">kadmin</span><span class="p">:</span> <span class="n">modprinc</span> <span class="o">-</span><span class="n">policy</span> <span class="n">lockout_policy</span> <span class="n">PRINCNAME</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="testing-account-lockout">
-<h2>Testing account lockout<a class="headerlink" href="#testing-account-lockout" title="Permalink to this headline">¶</a></h2>
-<p>To test that account lockout is working, try authenticating as the
-principal (hopefully not one that might be in use) multiple times with
-the wrong password. For instance, if <strong>maxfailure</strong> is set to 2, you
-might see:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>$ kinit user
-Password for user@KRBTEST.COM:
-kinit: Password incorrect while getting initial credentials
-$ kinit user
-Password for user@KRBTEST.COM:
-kinit: Password incorrect while getting initial credentials
-$ kinit user
-kinit: Client's credentials have been revoked while getting initial credentials
-</pre></div>
-</div>
-</div>
-<div class="section" id="account-lockout-principal-state">
-<h2>Account lockout principal state<a class="headerlink" href="#account-lockout-principal-state" title="Permalink to this headline">¶</a></h2>
-<p>A principal entry keeps three pieces of state related to account
-lockout:</p>
-<ul class="simple">
-<li>The time of last successful authentication</li>
-<li>The time of last failed authentication</li>
-<li>A counter of failed attempts</li>
-</ul>
-<p>The time of last successful authentication is not actually needed for
-the account lockout system to function, but may be of administrative
-interest. These fields can be observed with the <strong>getprinc</strong> kadmin
-command. For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">getprinc</span> <span class="n">user</span>
-<span class="n">Principal</span><span class="p">:</span> <span class="n">user</span><span class="nd">@KRBTEST</span><span class="o">.</span><span class="n">COM</span>
-<span class="o">...</span>
-<span class="n">Last</span> <span class="n">successful</span> <span class="n">authentication</span><span class="p">:</span> <span class="p">[</span><span class="n">never</span><span class="p">]</span>
-<span class="n">Last</span> <span class="n">failed</span> <span class="n">authentication</span><span class="p">:</span> <span class="n">Mon</span> <span class="n">Dec</span> <span class="mi">03</span> <span class="mi">12</span><span class="p">:</span><span class="mi">30</span><span class="p">:</span><span class="mi">33</span> <span class="n">EST</span> <span class="mi">2012</span>
-<span class="n">Failed</span> <span class="n">password</span> <span class="n">attempts</span><span class="p">:</span> <span class="mi">2</span>
-<span class="o">...</span>
-</pre></div>
-</div>
-<p>A principal which has been locked out can be administratively unlocked
-with the <strong>-unlock</strong> option to the <strong>modprinc</strong> kadmin command:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">modprinc</span> <span class="o">-</span><span class="n">unlock</span> <span class="n">PRINCNAME</span>
-</pre></div>
-</div>
-<p>This command will reset the number of failed attempts to 0.</p>
-</div>
-<div class="section" id="kdc-replication-and-account-lockout">
-<h2>KDC replication and account lockout<a class="headerlink" href="#kdc-replication-and-account-lockout" title="Permalink to this headline">¶</a></h2>
-<p>The account lockout state of a principal is not replicated by either
-traditional <a class="reference internal" href="admin_commands/kprop.html#kprop-8"><span class="std std-ref">kprop</span></a> or incremental propagation. Because of
-this, the number of attempts an attacker can make within a time period
-is multiplied by the number of KDCs. For instance, if the
-<strong>maxfailure</strong> parameter on a policy is 10 and there are four KDCs in
-the environment (a primary and three replicas), an attacker could make
-as many as 40 attempts before the principal is locked out on all four
-KDCs.</p>
-<p>An administrative unlock is propagated from the primary to the replica
-KDCs during the next propagation. Propagation of an administrative
-unlock will cause the counter of failed attempts on each replica to
-reset to 1 on the next failure.</p>
-<p>If a KDC environment uses a replication strategy other than kprop or
-incremental propagation, such as the LDAP KDB module with multi-master
-LDAP replication, then account lockout state may be replicated between
-KDCs and the concerns of this section may not apply.</p>
-</div>
-<div class="section" id="kdc-performance-and-account-lockout">
-<span id="disable-lockout"></span><h2>KDC performance and account lockout<a class="headerlink" href="#kdc-performance-and-account-lockout" title="Permalink to this headline">¶</a></h2>
-<p>In order to fully track account lockout state, the KDC must write to
-the the database on each successful and failed authentication.
-Writing to the database is generally more expensive than reading from
-it, so these writes may have a significant impact on KDC performance.
-As of release 1.9, it is possible to turn off account lockout state
-tracking in order to improve performance, by setting the
-<strong>disable_last_success</strong> and <strong>disable_lockout</strong> variables in the
-database module subsection of <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>. For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">dbmodules</span><span class="p">]</span>
- <span class="n">DB</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">disable_last_success</span> <span class="o">=</span> <span class="n">true</span>
- <span class="n">disable_lockout</span> <span class="o">=</span> <span class="n">true</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>Of the two variables, setting <strong>disable_last_success</strong> will usually
-have the largest positive impact on performance, and will still allow
-account lockout policies to operate. However, it will make it
-impossible to observe the last successful authentication time with
-kadmin.</p>
-</div>
-<div class="section" id="kdc-setup-and-account-lockout">
-<h2>KDC setup and account lockout<a class="headerlink" href="#kdc-setup-and-account-lockout" title="Permalink to this headline">¶</a></h2>
-<p>To update the account lockout state on principals, the KDC must be
-able to write to the principal database. For the DB2 module, no
-special setup is required. For the LDAP module, the KDC DN must be
-granted write access to the principal objects. If the KDC DN has only
-read access, account lockout will not function.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Account lockout</a><ul>
-<li><a class="reference internal" href="#configuring-account-lockout">Configuring account lockout</a></li>
-<li><a class="reference internal" href="#testing-account-lockout">Testing account lockout</a></li>
-<li><a class="reference internal" href="#account-lockout-principal-state">Account lockout principal state</a></li>
-<li><a class="reference internal" href="#kdc-replication-and-account-lockout">KDC replication and account lockout</a></li>
-<li><a class="reference internal" href="#kdc-performance-and-account-lockout">KDC performance and account lockout</a></li>
-<li><a class="reference internal" href="#kdc-setup-and-account-lockout">KDC setup and account lockout</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="dbtypes.html" title="Database types"
- >previous</a> |
- <a href="conf_ldap.html" title="Configuring Kerberos with OpenLDAP back-end"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Account lockout">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>OTP Preauthentication — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="SPAKE Preauthentication" href="spake.html" />
- <link rel="prev" title="PKINIT configuration" href="pkinit.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="pkinit.html" title="PKINIT configuration"
- accesskey="P">previous</a> |
- <a href="spake.html" title="SPAKE Preauthentication"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__OTP Preauthentication">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="otp-preauthentication">
-<span id="otp-preauth"></span><h1>OTP Preauthentication<a class="headerlink" href="#otp-preauthentication" title="Permalink to this headline">¶</a></h1>
-<p>OTP is a preauthentication mechanism for Kerberos 5 which uses One
-Time Passwords (OTP) to authenticate the client to the KDC. The OTP
-is passed to the KDC over an encrypted FAST channel in clear-text.
-The KDC uses the password along with per-user configuration to proxy
-the request to a third-party RADIUS system. This enables
-out-of-the-box compatibility with a large number of already widely
-deployed proprietary systems.</p>
-<p>Additionally, our implementation of the OTP system allows for the
-passing of RADIUS requests over a UNIX domain stream socket. This
-permits the use of a local companion daemon which can handle the
-details of authentication.</p>
-<div class="section" id="defining-token-types">
-<h2>Defining token types<a class="headerlink" href="#defining-token-types" title="Permalink to this headline">¶</a></h2>
-<p>Token types are defined in either <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> or
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> according to the following format:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">otp</span><span class="p">]</span>
- <span class="o"><</span><span class="n">name</span><span class="o">></span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">server</span> <span class="o">=</span> <span class="o"><</span><span class="n">host</span><span class="p">:</span><span class="n">port</span> <span class="ow">or</span> <span class="n">filename</span><span class="o">></span> <span class="p">(</span><span class="n">default</span><span class="p">:</span> <span class="n">see</span> <span class="n">below</span><span class="p">)</span>
- <span class="n">secret</span> <span class="o">=</span> <span class="o"><</span><span class="n">filename</span><span class="o">></span>
- <span class="n">timeout</span> <span class="o">=</span> <span class="o"><</span><span class="n">integer</span><span class="o">></span> <span class="p">(</span><span class="n">default</span><span class="p">:</span> <span class="mi">5</span> <span class="p">[</span><span class="n">seconds</span><span class="p">])</span>
- <span class="n">retries</span> <span class="o">=</span> <span class="o"><</span><span class="n">integer</span><span class="o">></span> <span class="p">(</span><span class="n">default</span><span class="p">:</span> <span class="mi">3</span><span class="p">)</span>
- <span class="n">strip_realm</span> <span class="o">=</span> <span class="o"><</span><span class="n">boolean</span><span class="o">></span> <span class="p">(</span><span class="n">default</span><span class="p">:</span> <span class="n">true</span><span class="p">)</span>
- <span class="n">indicator</span> <span class="o">=</span> <span class="o"><</span><span class="n">string</span><span class="o">></span> <span class="p">(</span><span class="n">default</span><span class="p">:</span> <span class="n">none</span><span class="p">)</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>If the server field begins with ‘/’, it will be interpreted as a UNIX
-socket. Otherwise, it is assumed to be in the format host:port. When
-a UNIX domain socket is specified, the secret field is optional and an
-empty secret is used by default. If the server field is not
-specified, it defaults to <a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">RUNSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/<name>.socket</span></code>.</p>
-<p>When forwarding the request over RADIUS, by default the principal is
-used in the User-Name attribute of the RADIUS packet. The strip_realm
-parameter controls whether the principal is forwarded with or without
-the realm portion.</p>
-<p>If an indicator field is present, tickets issued using this token type
-will be annotated with the specified authentication indicator (see
-<a class="reference internal" href="auth_indicator.html#auth-indicator"><span class="std std-ref">Authentication indicators</span></a>). This key may be specified multiple times to
-add multiple indicators.</p>
-</div>
-<div class="section" id="the-default-token-type">
-<h2>The default token type<a class="headerlink" href="#the-default-token-type" title="Permalink to this headline">¶</a></h2>
-<p>A default token type is used internally when no token type is specified for a
-given user. It is defined as follows:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">otp</span><span class="p">]</span>
- <span class="n">DEFAULT</span> <span class="o">=</span> <span class="p">{</span>
- <span class="n">strip_realm</span> <span class="o">=</span> <span class="n">false</span>
- <span class="p">}</span>
-</pre></div>
-</div>
-<p>The administrator may override the internal <code class="docutils literal"><span class="pre">DEFAULT</span></code> token type
-simply by defining a configuration with the same name.</p>
-</div>
-<div class="section" id="token-instance-configuration">
-<h2>Token instance configuration<a class="headerlink" href="#token-instance-configuration" title="Permalink to this headline">¶</a></h2>
-<p>To enable OTP for a client principal, the administrator must define
-the <strong>otp</strong> string attribute for that principal. (See
-<a class="reference internal" href="admin_commands/kadmin_local.html#set-string"><span class="std std-ref">set_string</span></a>.) The <strong>otp</strong> user string is a JSON string of the
-format:</p>
-<div class="highlight-xml"><div class="highlight"><pre><span></span>[{
- "type": <span class="nt"><string></span>,
- "username": <span class="nt"><string></span>,
- "indicators": [<span class="nt"><string></span>, ...]
- }, ...]
-</pre></div>
-</div>
-<p>This is an array of token objects. Both fields of token objects are
-optional. The <strong>type</strong> field names the token type of this token; if
-not specified, it defaults to <code class="docutils literal"><span class="pre">DEFAULT</span></code>. The <strong>username</strong> field
-specifies the value to be sent in the User-Name RADIUS attribute. If
-not specified, the principal name is sent, with or without realm as
-defined in the token type. The <strong>indicators</strong> field specifies a list
-of authentication indicators to annotate tickets with, overriding any
-indicators specified in the token type.</p>
-<p>For ease of configuration, an empty array (<code class="docutils literal"><span class="pre">[]</span></code>) is treated as
-equivalent to one DEFAULT token (<code class="docutils literal"><span class="pre">[{}]</span></code>).</p>
-</div>
-<div class="section" id="other-considerations">
-<h2>Other considerations<a class="headerlink" href="#other-considerations" title="Permalink to this headline">¶</a></h2>
-<ol class="arabic simple">
-<li>FAST is required for OTP to work.</li>
-</ol>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">OTP Preauthentication</a><ul>
-<li><a class="reference internal" href="#defining-token-types">Defining token types</a></li>
-<li><a class="reference internal" href="#the-default-token-type">The default token type</a></li>
-<li><a class="reference internal" href="#token-instance-configuration">Token instance configuration</a></li>
-<li><a class="reference internal" href="#other-considerations">Other considerations</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="pkinit.html" title="PKINIT configuration"
- >previous</a> |
- <a href="spake.html" title="SPAKE Preauthentication"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__OTP Preauthentication">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>PKINIT configuration — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="OTP Preauthentication" href="otp.html" />
- <link rel="prev" title="Backups of secure hosts" href="backup_host.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="backup_host.html" title="Backups of secure hosts"
- accesskey="P">previous</a> |
- <a href="otp.html" title="OTP Preauthentication"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__PKINIT configuration">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="pkinit-configuration">
-<span id="pkinit"></span><h1>PKINIT configuration<a class="headerlink" href="#pkinit-configuration" title="Permalink to this headline">¶</a></h1>
-<p>PKINIT is a preauthentication mechanism for Kerberos 5 which uses
-X.509 certificates to authenticate the KDC to clients and vice versa.
-PKINIT can also be used to enable anonymity support, allowing clients
-to communicate securely with the KDC or with application servers
-without authenticating as a particular client principal.</p>
-<div class="section" id="creating-certificates">
-<h2>Creating certificates<a class="headerlink" href="#creating-certificates" title="Permalink to this headline">¶</a></h2>
-<p>PKINIT requires an X.509 certificate for the KDC and one for each
-client principal which will authenticate using PKINIT. For anonymous
-PKINIT, a KDC certificate is required, but client certificates are
-not. A commercially issued server certificate can be used for the KDC
-certificate, but generally cannot be used for client certificates.</p>
-<p>The instruction in this section describe how to establish a
-certificate authority and create standard PKINIT certificates. Skip
-this section if you are using a commercially issued server certificate
-as the KDC certificate for anonymous PKINIT, or if you are configuring
-a client to use an Active Directory KDC.</p>
-<div class="section" id="generating-a-certificate-authority-certificate">
-<h3>Generating a certificate authority certificate<a class="headerlink" href="#generating-a-certificate-authority-certificate" title="Permalink to this headline">¶</a></h3>
-<p>You can establish a new certificate authority (CA) for use with a
-PKINIT deployment with the commands:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">openssl</span> <span class="n">genrsa</span> <span class="o">-</span><span class="n">out</span> <span class="n">cakey</span><span class="o">.</span><span class="n">pem</span> <span class="mi">2048</span>
-<span class="n">openssl</span> <span class="n">req</span> <span class="o">-</span><span class="n">key</span> <span class="n">cakey</span><span class="o">.</span><span class="n">pem</span> <span class="o">-</span><span class="n">new</span> <span class="o">-</span><span class="n">x509</span> <span class="o">-</span><span class="n">out</span> <span class="n">cacert</span><span class="o">.</span><span class="n">pem</span> <span class="o">-</span><span class="n">days</span> <span class="mi">3650</span>
-</pre></div>
-</div>
-<p>The second command will ask for the values of several certificate
-fields. These fields can be set to any values. You can adjust the
-expiration time of the CA certificate by changing the number after
-<code class="docutils literal"><span class="pre">-days</span></code>. Since the CA certificate must be deployed to client
-machines each time it changes, it should normally have an expiration
-time far in the future; however, expiration times after 2037 may cause
-interoperability issues in rare circumstances.</p>
-<p>The result of these commands will be two files, cakey.pem and
-cacert.pem. cakey.pem will contain a 2048-bit RSA private key, which
-must be carefully protected. cacert.pem will contain the CA
-certificate, which must be placed in the filesystems of the KDC and
-each client host. cakey.pem will be required to create KDC and client
-certificates.</p>
-</div>
-<div class="section" id="generating-a-kdc-certificate">
-<h3>Generating a KDC certificate<a class="headerlink" href="#generating-a-kdc-certificate" title="Permalink to this headline">¶</a></h3>
-<p>A KDC certificate for use with PKINIT is required to have some unusual
-fields, which makes generating them with OpenSSL somewhat complicated.
-First, you will need a file containing the following:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>[kdc_cert]
-basicConstraints=CA:FALSE
-keyUsage=nonRepudiation,digitalSignature,keyEncipherment,keyAgreement
-extendedKeyUsage=1.3.6.1.5.2.3.5
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer
-issuerAltName=issuer:copy
-subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:kdc_princ_name
-
-[kdc_princ_name]
-realm=EXP:0,GeneralString:${ENV::REALM}
-principal_name=EXP:1,SEQUENCE:kdc_principal_seq
-
-[kdc_principal_seq]
-name_type=EXP:0,INTEGER:2
-name_string=EXP:1,SEQUENCE:kdc_principals
-
-[kdc_principals]
-princ1=GeneralString:krbtgt
-princ2=GeneralString:${ENV::REALM}
-</pre></div>
-</div>
-<p>If the above contents are placed in extensions.kdc, you can generate
-and sign a KDC certificate with the following commands:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">openssl</span> <span class="n">genrsa</span> <span class="o">-</span><span class="n">out</span> <span class="n">kdckey</span><span class="o">.</span><span class="n">pem</span> <span class="mi">2048</span>
-<span class="n">openssl</span> <span class="n">req</span> <span class="o">-</span><span class="n">new</span> <span class="o">-</span><span class="n">out</span> <span class="n">kdc</span><span class="o">.</span><span class="n">req</span> <span class="o">-</span><span class="n">key</span> <span class="n">kdckey</span><span class="o">.</span><span class="n">pem</span>
-<span class="n">env</span> <span class="n">REALM</span><span class="o">=</span><span class="n">YOUR_REALMNAME</span> <span class="n">openssl</span> <span class="n">x509</span> <span class="o">-</span><span class="n">req</span> <span class="o">-</span><span class="ow">in</span> <span class="n">kdc</span><span class="o">.</span><span class="n">req</span> \
- <span class="o">-</span><span class="n">CAkey</span> <span class="n">cakey</span><span class="o">.</span><span class="n">pem</span> <span class="o">-</span><span class="n">CA</span> <span class="n">cacert</span><span class="o">.</span><span class="n">pem</span> <span class="o">-</span><span class="n">out</span> <span class="n">kdc</span><span class="o">.</span><span class="n">pem</span> <span class="o">-</span><span class="n">days</span> <span class="mi">365</span> \
- <span class="o">-</span><span class="n">extfile</span> <span class="n">extensions</span><span class="o">.</span><span class="n">kdc</span> <span class="o">-</span><span class="n">extensions</span> <span class="n">kdc_cert</span> <span class="o">-</span><span class="n">CAcreateserial</span>
-<span class="n">rm</span> <span class="n">kdc</span><span class="o">.</span><span class="n">req</span>
-</pre></div>
-</div>
-<p>The second command will ask for the values of certificate fields,
-which can be set to any values. In the third command, substitute your
-KDC’s realm name for YOUR_REALMNAME. You can adjust the certificate’s
-expiration date by changing the number after <code class="docutils literal"><span class="pre">-days</span></code>. Remember to
-create a new KDC certificate before the old one expires.</p>
-<p>The result of this operation will be in two files, kdckey.pem and
-kdc.pem. Both files must be placed in the KDC’s filesystem.
-kdckey.pem, which contains the KDC’s private key, must be carefully
-protected.</p>
-<p>If you examine the KDC certificate with <code class="docutils literal"><span class="pre">openssl</span> <span class="pre">x509</span> <span class="pre">-in</span> <span class="pre">kdc.pem</span>
-<span class="pre">-text</span> <span class="pre">-noout</span></code>, OpenSSL will not know how to display the KDC principal
-name in the Subject Alternative Name extension, so it will appear as
-<code class="docutils literal"><span class="pre">othername:<unsupported></span></code>. This is normal and does not mean
-anything is wrong with the KDC certificate.</p>
-</div>
-<div class="section" id="generating-client-certificates">
-<h3>Generating client certificates<a class="headerlink" href="#generating-client-certificates" title="Permalink to this headline">¶</a></h3>
-<p>PKINIT client certificates also must have some unusual certificate
-fields. To generate a client certificate with OpenSSL for a
-single-component principal name, you will need an extensions file
-(different from the KDC extensions file above) containing:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>[client_cert]
-basicConstraints=CA:FALSE
-keyUsage=digitalSignature,keyEncipherment,keyAgreement
-extendedKeyUsage=1.3.6.1.5.2.3.4
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer
-issuerAltName=issuer:copy
-subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:princ_name
-
-[princ_name]
-realm=EXP:0,GeneralString:${ENV::REALM}
-principal_name=EXP:1,SEQUENCE:principal_seq
-
-[principal_seq]
-name_type=EXP:0,INTEGER:1
-name_string=EXP:1,SEQUENCE:principals
-
-[principals]
-princ1=GeneralString:${ENV::CLIENT}
-</pre></div>
-</div>
-<p>If the above contents are placed in extensions.client, you can
-generate and sign a client certificate with the following commands:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">openssl</span> <span class="n">genrsa</span> <span class="o">-</span><span class="n">out</span> <span class="n">clientkey</span><span class="o">.</span><span class="n">pem</span> <span class="mi">2048</span>
-<span class="n">openssl</span> <span class="n">req</span> <span class="o">-</span><span class="n">new</span> <span class="o">-</span><span class="n">key</span> <span class="n">clientkey</span><span class="o">.</span><span class="n">pem</span> <span class="o">-</span><span class="n">out</span> <span class="n">client</span><span class="o">.</span><span class="n">req</span>
-<span class="n">env</span> <span class="n">REALM</span><span class="o">=</span><span class="n">YOUR_REALMNAME</span> <span class="n">CLIENT</span><span class="o">=</span><span class="n">YOUR_PRINCNAME</span> <span class="n">openssl</span> <span class="n">x509</span> \
- <span class="o">-</span><span class="n">CAkey</span> <span class="n">cakey</span><span class="o">.</span><span class="n">pem</span> <span class="o">-</span><span class="n">CA</span> <span class="n">cacert</span><span class="o">.</span><span class="n">pem</span> <span class="o">-</span><span class="n">req</span> <span class="o">-</span><span class="ow">in</span> <span class="n">client</span><span class="o">.</span><span class="n">req</span> \
- <span class="o">-</span><span class="n">extensions</span> <span class="n">client_cert</span> <span class="o">-</span><span class="n">extfile</span> <span class="n">extensions</span><span class="o">.</span><span class="n">client</span> \
- <span class="o">-</span><span class="n">days</span> <span class="mi">365</span> <span class="o">-</span><span class="n">out</span> <span class="n">client</span><span class="o">.</span><span class="n">pem</span>
-<span class="n">rm</span> <span class="n">client</span><span class="o">.</span><span class="n">req</span>
-</pre></div>
-</div>
-<p>Normally, the first two commands should be run on the client host, and
-the resulting client.req file transferred to the certificate authority
-host for the third command. As in the previous steps, the second
-command will ask for the values of certificate fields, which can be
-set to any values. In the third command, substitute your realm’s name
-for YOUR_REALMNAME and the client’s principal name (without realm) for
-YOUR_PRINCNAME. You can adjust the certificate’s expiration date by
-changing the number after <code class="docutils literal"><span class="pre">-days</span></code>.</p>
-<p>The result of this operation will be two files, clientkey.pem and
-client.pem. Both files must be present on the client’s host;
-clientkey.pem, which contains the client’s private key, must be
-protected from access by others.</p>
-<p>As in the KDC certificate, OpenSSL will display the client principal
-name as <code class="docutils literal"><span class="pre">othername:<unsupported></span></code> in the Subject Alternative Name
-extension of a PKINIT client certificate.</p>
-<p>If the client principal name contains more than one component
-(e.g. <code class="docutils literal"><span class="pre">host/example.com@REALM</span></code>), the <code class="docutils literal"><span class="pre">[principals]</span></code> section of
-<code class="docutils literal"><span class="pre">extensions.client</span></code> must be altered to contain multiple entries.
-(Simply setting <code class="docutils literal"><span class="pre">CLIENT</span></code> to <code class="docutils literal"><span class="pre">host/example.com</span></code> would generate a
-certificate for <code class="docutils literal"><span class="pre">host\/example.com@REALM</span></code> which would not match the
-multi-component principal name.) For a two-component principal, the
-section should read:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>[principals]
-princ1=GeneralString:${ENV::CLIENT1}
-princ2=GeneralString:${ENV::CLIENT2}
-</pre></div>
-</div>
-<p>The environment variables <code class="docutils literal"><span class="pre">CLIENT1</span></code> and <code class="docutils literal"><span class="pre">CLIENT2</span></code> must then be set
-to the first and second components when running <code class="docutils literal"><span class="pre">openssl</span> <span class="pre">x509</span></code>.</p>
-</div>
-</div>
-<div class="section" id="configuring-the-kdc">
-<h2>Configuring the KDC<a class="headerlink" href="#configuring-the-kdc" title="Permalink to this headline">¶</a></h2>
-<p>The KDC must have filesystem access to the KDC certificate (kdc.pem)
-and the KDC private key (kdckey.pem). Configure the following
-relation in the KDC’s <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> file, either in the
-<a class="reference internal" href="conf_files/kdc_conf.html#kdcdefaults"><span class="std std-ref">[kdcdefaults]</span></a> section or in a <a class="reference internal" href="conf_files/kdc_conf.html#kdc-realms"><span class="std std-ref">[realms]</span></a> subsection (with
-appropriate pathnames):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">pkinit_identity</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">lib</span><span class="o">/</span><span class="n">krb5kdc</span><span class="o">/</span><span class="n">kdc</span><span class="o">.</span><span class="n">pem</span><span class="p">,</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">lib</span><span class="o">/</span><span class="n">krb5kdc</span><span class="o">/</span><span class="n">kdckey</span><span class="o">.</span><span class="n">pem</span>
-</pre></div>
-</div>
-<p>If any clients will authenticate using regular (as opposed to
-anonymous) PKINIT, the KDC must also have filesystem access to the CA
-certificate (cacert.pem), and the following configuration (with the
-appropriate pathname):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">pkinit_anchors</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">var</span><span class="o">/</span><span class="n">lib</span><span class="o">/</span><span class="n">krb5kdc</span><span class="o">/</span><span class="n">cacert</span><span class="o">.</span><span class="n">pem</span>
-</pre></div>
-</div>
-<p>Because of the larger size of requests and responses using PKINIT, you
-may also need to allow TCP access to the KDC:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kdc_tcp_listen</span> <span class="o">=</span> <span class="mi">88</span>
-</pre></div>
-</div>
-<p>Restart the <a class="reference internal" href="admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> daemon to pick up the configuration
-changes.</p>
-<p>The principal entry for each PKINIT-using client must be configured to
-require preauthentication. Ensure this with the command:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span> <span class="o">-</span><span class="n">q</span> <span class="s1">'modprinc +requires_preauth YOUR_PRINCNAME'</span>
-</pre></div>
-</div>
-<p>Starting with release 1.12, it is possible to remove the long-term
-keys of a principal entry, which can save some space in the database
-and help to clarify some PKINIT-related error conditions by not asking
-for a password:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span> <span class="o">-</span><span class="n">q</span> <span class="s1">'purgekeys -all YOUR_PRINCNAME'</span>
-</pre></div>
-</div>
-<p>These principal options can also be specified at principal creation
-time as follows:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span> <span class="o">-</span><span class="n">q</span> <span class="s1">'add_principal +requires_preauth -nokey YOUR_PRINCNAME'</span>
-</pre></div>
-</div>
-<p>By default, the KDC requires PKINIT client certificates to have the
-standard Extended Key Usage and Subject Alternative Name attributes
-for PKINIT. Starting in release 1.16, it is possible to authorize
-client certificates based on the subject or other criteria instead of
-the standard PKINIT Subject Alternative Name, by setting the
-<strong>pkinit_cert_match</strong> string attribute on each client principal entry.
-For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span> <span class="n">set_string</span> <span class="n">user</span><span class="nd">@REALM</span> <span class="n">pkinit_cert_match</span> <span class="s2">"<SUBJECT>CN=user@REALM$"</span>
-</pre></div>
-</div>
-<p>The <strong>pkinit_cert_match</strong> string attribute follows the syntax used by
-the <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> <strong>pkinit_cert_match</strong> relation. To allow the
-use of non-PKINIT client certificates, it will also be necessary to
-disable key usage checking using the <strong>pkinit_eku_checking</strong> relation;
-for example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">kdcdefaults</span><span class="p">]</span>
- <span class="n">pkinit_eku_checking</span> <span class="o">=</span> <span class="n">none</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="configuring-the-clients">
-<h2>Configuring the clients<a class="headerlink" href="#configuring-the-clients" title="Permalink to this headline">¶</a></h2>
-<p>Client hosts must be configured to trust the issuing authority for the
-KDC certificate. For a newly established certificate authority, the
-client host must have filesystem access to the CA certificate
-(cacert.pem) and the following relation in <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> in the
-appropriate <a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> subsection (with appropriate pathnames):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">pkinit_anchors</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">/</span><span class="n">cacert</span><span class="o">.</span><span class="n">pem</span>
-</pre></div>
-</div>
-<p>If the KDC certificate is a commercially issued server certificate,
-the issuing certificate is most likely included in a system directory.
-You can specify it by filename as above, or specify the whole
-directory like so:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">pkinit_anchors</span> <span class="o">=</span> <span class="n">DIR</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">ssl</span><span class="o">/</span><span class="n">certs</span>
-</pre></div>
-</div>
-<p>A commercially issued server certificate will usually not have the
-standard PKINIT principal name or Extended Key Usage extensions, so
-the following additional configuration is required:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">pkinit_eku_checking</span> <span class="o">=</span> <span class="n">kpServerAuth</span>
-<span class="n">pkinit_kdc_hostname</span> <span class="o">=</span> <span class="n">hostname</span><span class="o">.</span><span class="n">of</span><span class="o">.</span><span class="n">kdc</span><span class="o">.</span><span class="n">certificate</span>
-</pre></div>
-</div>
-<p>Multiple <strong>pkinit_kdc_hostname</strong> relations can be configured to
-recognize multiple KDC certificates. If the KDC is an Active
-Directory domain controller, setting <strong>pkinit_kdc_hostname</strong> is
-necessary, but it should not be necessary to set
-<strong>pkinit_eku_checking</strong>.</p>
-<p>To perform regular (as opposed to anonymous) PKINIT authentication, a
-client host must have filesystem access to a client certificate
-(client.pem), and the corresponding private key (clientkey.pem).
-Configure the following relations in the client host’s
-<a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> file in the appropriate <a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> subsection
-(with appropriate pathnames):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">pkinit_identities</span> <span class="o">=</span> <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">/</span><span class="n">client</span><span class="o">.</span><span class="n">pem</span><span class="p">,</span><span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">krb5</span><span class="o">/</span><span class="n">clientkey</span><span class="o">.</span><span class="n">pem</span>
-</pre></div>
-</div>
-<p>If the KDC and client are properly configured, it should now be
-possible to run <code class="docutils literal"><span class="pre">kinit</span> <span class="pre">username</span></code> without entering a password.</p>
-</div>
-<div class="section" id="anonymous-pkinit">
-<span id="id1"></span><h2>Anonymous PKINIT<a class="headerlink" href="#anonymous-pkinit" title="Permalink to this headline">¶</a></h2>
-<p>Anonymity support in Kerberos allows a client to obtain a ticket
-without authenticating as any particular principal. Such a ticket can
-be used as a FAST armor ticket, or to securely communicate with an
-application server anonymously.</p>
-<p>To configure anonymity support, you must generate or otherwise procure
-a KDC certificate and configure the KDC host, but you do not need to
-generate any client certificates. On the KDC, you must set the
-<strong>pkinit_identity</strong> variable to provide the KDC certificate, but do
-not need to set the <strong>pkinit_anchors</strong> variable or store the issuing
-certificate if you won’t have any client certificates to verify. On
-client hosts, you must set the <strong>pkinit_anchors</strong> variable (and
-possibly <strong>pkinit_kdc_hostname</strong> and <strong>pkinit_eku_checking</strong>) in order
-to trust the issuing authority for the KDC certificate, but do not
-need to set the <strong>pkinit_identities</strong> variable.</p>
-<p>Anonymity support is not enabled by default. To enable it, you must
-create the principal <code class="docutils literal"><span class="pre">WELLKNOWN/ANONYMOUS</span></code> using the command:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span> <span class="o">-</span><span class="n">q</span> <span class="s1">'addprinc -randkey WELLKNOWN/ANONYMOUS'</span>
-</pre></div>
-</div>
-<p>Some Kerberos deployments include application servers which lack
-proper access control, and grant some level of access to any user who
-can authenticate. In such an environment, enabling anonymity support
-on the KDC would present a security issue. If you need to enable
-anonymity support for TGTs (for use as FAST armor tickets) without
-enabling anonymous authentication to application servers, you can set
-the variable <strong>restrict_anonymous_to_tgt</strong> to <code class="docutils literal"><span class="pre">true</span></code> in the
-appropriate <a class="reference internal" href="conf_files/kdc_conf.html#kdc-realms"><span class="std std-ref">[realms]</span></a> subsection of the KDC’s
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> file.</p>
-<p>To obtain anonymous credentials on a client, run <code class="docutils literal"><span class="pre">kinit</span> <span class="pre">-n</span></code>, or
-<code class="docutils literal"><span class="pre">kinit</span> <span class="pre">-n</span> <span class="pre">@REALMNAME</span></code> to specify a realm. The resulting tickets
-will have the client name <code class="docutils literal"><span class="pre">WELLKNOWN/ANONYMOUS@WELLKNOWN:ANONYMOUS</span></code>.</p>
-</div>
-<div class="section" id="freshness-tokens">
-<h2>Freshness tokens<a class="headerlink" href="#freshness-tokens" title="Permalink to this headline">¶</a></h2>
-<p>Freshness tokens can ensure that the client has recently had access to
-its certificate private key. If freshness tokens are not required by
-the KDC, a client program with temporary possession of the private key
-can compose requests for future timestamps and use them later.</p>
-<p>In release 1.17 and later, freshness tokens are supported by the
-client and are sent by the KDC when the client indicates support for
-them. Because not all clients support freshness tokens yet, they are
-not required by default. To check if freshness tokens are supported
-by a realm’s clients, look in the KDC logs for the lines:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">PKINIT</span><span class="p">:</span> <span class="n">freshness</span> <span class="n">token</span> <span class="n">received</span> <span class="kn">from</span> <span class="o"><</span><span class="n">client</span> <span class="n">principal</span><span class="o">></span>
-<span class="n">PKINIT</span><span class="p">:</span> <span class="n">no</span> <span class="n">freshness</span> <span class="n">token</span> <span class="n">received</span> <span class="kn">from</span> <span class="o"><</span><span class="n">client</span> <span class="n">principal</span><span class="o">></span>
-</pre></div>
-</div>
-<p>To require freshness tokens for all clients in a realm (except for
-clients authenticating anonymously), set the
-<strong>pkinit_require_freshness</strong> variable to <code class="docutils literal"><span class="pre">true</span></code> in the appropriate
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-realms"><span class="std std-ref">[realms]</span></a> subsection of the KDC’s <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> file. To
-test that this option is in effect, run <code class="docutils literal"><span class="pre">kinit</span> <span class="pre">-X</span> <span class="pre">disable_freshness</span></code>
-and verify that authentication is unsuccessful.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">PKINIT configuration</a><ul>
-<li><a class="reference internal" href="#creating-certificates">Creating certificates</a><ul>
-<li><a class="reference internal" href="#generating-a-certificate-authority-certificate">Generating a certificate authority certificate</a></li>
-<li><a class="reference internal" href="#generating-a-kdc-certificate">Generating a KDC certificate</a></li>
-<li><a class="reference internal" href="#generating-client-certificates">Generating client certificates</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#configuring-the-kdc">Configuring the KDC</a></li>
-<li><a class="reference internal" href="#configuring-the-clients">Configuring the clients</a></li>
-<li><a class="reference internal" href="#anonymous-pkinit">Anonymous PKINIT</a></li>
-<li><a class="reference internal" href="#freshness-tokens">Freshness tokens</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="backup_host.html" title="Backups of secure hosts"
- >previous</a> |
- <a href="otp.html" title="OTP Preauthentication"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__PKINIT configuration">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Principal names and DNS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Encryption types" href="enctypes.html" />
- <link rel="prev" title="Addressing dictionary attack risks" href="dictionary.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="dictionary.html" title="Addressing dictionary attack risks"
- accesskey="P">previous</a> |
- <a href="enctypes.html" title="Encryption types"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Principal names and DNS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="principal-names-and-dns">
-<h1>Principal names and DNS<a class="headerlink" href="#principal-names-and-dns" title="Permalink to this headline">¶</a></h1>
-<p>Kerberos clients can do DNS lookups to canonicalize service principal
-names. This can cause difficulties when setting up Kerberos
-application servers, especially when the client’s name for the service
-is different from what the service thinks its name is.</p>
-<div class="section" id="service-principal-names">
-<h2>Service principal names<a class="headerlink" href="#service-principal-names" title="Permalink to this headline">¶</a></h2>
-<p>A frequently used kind of principal name is the host-based service
-principal name. This kind of principal name has two components: a
-service name and a hostname. For example, <code class="docutils literal"><span class="pre">imap/imap.example.com</span></code>
-is the principal name of the “imap” service on the host
-“imap.example.com”. Other possible service names for the first
-component include “host” (remote login services such as ssh), “HTTP”,
-and “nfs” (Network File System).</p>
-<p>Service administrators often publish well-known hostname aliases that
-they would prefer users to use instead of the canonical name of the
-service host. This gives service administrators more flexibility in
-deploying services. For example, a shell login server might be named
-“long-vanity-hostname.example.com”, but users will naturally prefer to
-type something like “login.example.com”. Hostname aliases also allow
-for administrators to set up load balancing for some sorts of services
-based on rotating <code class="docutils literal"><span class="pre">CNAME</span></code> records in DNS.</p>
-</div>
-<div class="section" id="service-principal-canonicalization">
-<h2>Service principal canonicalization<a class="headerlink" href="#service-principal-canonicalization" title="Permalink to this headline">¶</a></h2>
-<p>In the MIT krb5 client library, canonicalization of host-based service
-principals is controlled by the <strong>dns_canonicalize_hostname</strong>,
-<strong>rnds</strong>, and <strong>qualify_shortname</strong> variables in <a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>.</p>
-<p>If <strong>dns_canonicalize_hostname</strong> is set to <code class="docutils literal"><span class="pre">true</span></code> (the default
-value), the client performs forward resolution by looking up the IPv4
-and/or IPv6 addresses of the hostname using <code class="docutils literal"><span class="pre">getaddrinfo()</span></code>. This
-process will typically add a domain suffix to the hostname if needed,
-and follow CNAME records in the DNS. If <strong>rdns</strong> is also set to
-<code class="docutils literal"><span class="pre">true</span></code> (the default), the client will then perform a reverse lookup
-of the first returned Internet address using <code class="docutils literal"><span class="pre">getnameinfo()</span></code>,
-finding the name associated with the PTR record.</p>
-<p>If <strong>dns_canonicalize_hostname</strong> is set to <code class="docutils literal"><span class="pre">false</span></code>, the hostname is
-not canonicalized using DNS. If the hostname has only one component
-(i.e. it contains no “.” characters), the host’s primary DNS search
-domain will be appended, if there is one. The <strong>qualify_shortname</strong>
-variable can be used to override or disable this suffix.</p>
-<p>If <strong>dns_canonicalize_hostname</strong> is set to <code class="docutils literal"><span class="pre">fallback</span></code> (added in
-release 1.18), the hostname is initially treated according to the
-rules for <code class="docutils literal"><span class="pre">dns_canonicalize_hostname=false</span></code>. If a ticket request
-fails because the service principal is unknown, the hostname will be
-canonicalized according to the rules for
-<code class="docutils literal"><span class="pre">dns_canonicalize_hostname=true</span></code> and the request will be retried.</p>
-<p>In all cases, the hostname is converted to lowercase, and any trailing
-dot is removed.</p>
-</div>
-<div class="section" id="reverse-dns-mismatches">
-<h2>Reverse DNS mismatches<a class="headerlink" href="#reverse-dns-mismatches" title="Permalink to this headline">¶</a></h2>
-<p>Sometimes, an enterprise will have control over its forward DNS but
-not its reverse DNS. The reverse DNS is sometimes under the control
-of the Internet service provider of the enterprise, and the enterprise
-may not have much influence in setting up reverse DNS records for its
-address space. If there are difficulties with getting forward and
-reverse DNS to match, it is best to set <code class="docutils literal"><span class="pre">rdns</span> <span class="pre">=</span> <span class="pre">false</span></code> on client
-machines.</p>
-</div>
-<div class="section" id="overriding-application-behavior">
-<h2>Overriding application behavior<a class="headerlink" href="#overriding-application-behavior" title="Permalink to this headline">¶</a></h2>
-<p>Applications can choose to use a default hostname component in their
-service principal name when accepting authentication, which avoids
-some sorts of hostname mismatches. Because not all relevant
-applications do this yet, using the <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> setting:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">libdefaults</span><span class="p">]</span>
- <span class="n">ignore_acceptor_hostname</span> <span class="o">=</span> <span class="n">true</span>
-</pre></div>
-</div>
-<p>will allow the Kerberos library to override the application’s choice
-of service principal hostname and will allow a server program to
-accept incoming authentications using any key in its keytab that
-matches the service name and realm name (if given). This setting
-defaults to “false” and is available in releases krb5-1.10 and later.</p>
-</div>
-<div class="section" id="provisioning-keytabs">
-<h2>Provisioning keytabs<a class="headerlink" href="#provisioning-keytabs" title="Permalink to this headline">¶</a></h2>
-<p>One service principal entry that should be in the keytab is a
-principal whose hostname component is the canonical hostname that
-<code class="docutils literal"><span class="pre">getaddrinfo()</span></code> reports for all known aliases for the host. If the
-reverse DNS information does not match this canonical hostname, an
-additional service principal entry should be in the keytab for this
-different hostname.</p>
-</div>
-<div class="section" id="specific-application-advice">
-<h2>Specific application advice<a class="headerlink" href="#specific-application-advice" title="Permalink to this headline">¶</a></h2>
-<div class="section" id="secure-shell-ssh">
-<h3>Secure shell (ssh)<a class="headerlink" href="#secure-shell-ssh" title="Permalink to this headline">¶</a></h3>
-<p>Setting <code class="docutils literal"><span class="pre">GSSAPIStrictAcceptorCheck</span> <span class="pre">=</span> <span class="pre">no</span></code> in the configuration file
-of modern versions of the openssh daemon will allow the daemon to try
-any key in its keytab when accepting a connection, rather than looking
-for the keytab entry that matches the host’s own idea of its name
-(typically the name that <code class="docutils literal"><span class="pre">gethostname()</span></code> returns). This requires
-krb5-1.10 or later.</p>
-</div>
-<div class="section" id="openldap-ldapsearch-etc">
-<h3>OpenLDAP (ldapsearch, etc.)<a class="headerlink" href="#openldap-ldapsearch-etc" title="Permalink to this headline">¶</a></h3>
-<p>OpenLDAP’s SASL implementation performs reverse DNS lookup in order to
-canonicalize service principal names, even if <strong>rdns</strong> is set to
-<code class="docutils literal"><span class="pre">false</span></code> in the Kerberos configuration. To disable this behavior,
-add <code class="docutils literal"><span class="pre">SASL_NOCANON</span> <span class="pre">on</span></code> to <code class="docutils literal"><span class="pre">ldap.conf</span></code>, or set the
-<code class="docutils literal"><span class="pre">LDAPSASL_NOCANON</span></code> environment variable.</p>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Principal names and DNS</a><ul>
-<li><a class="reference internal" href="#service-principal-names">Service principal names</a></li>
-<li><a class="reference internal" href="#service-principal-canonicalization">Service principal canonicalization</a></li>
-<li><a class="reference internal" href="#reverse-dns-mismatches">Reverse DNS mismatches</a></li>
-<li><a class="reference internal" href="#overriding-application-behavior">Overriding application behavior</a></li>
-<li><a class="reference internal" href="#provisioning-keytabs">Provisioning keytabs</a></li>
-<li><a class="reference internal" href="#specific-application-advice">Specific application advice</a><ul>
-<li><a class="reference internal" href="#secure-shell-ssh">Secure shell (ssh)</a></li>
-<li><a class="reference internal" href="#openldap-ldapsearch-etc">OpenLDAP (ldapsearch, etc.)</a></li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="dictionary.html" title="Addressing dictionary attack risks"
- >previous</a> |
- <a href="enctypes.html" title="Encryption types"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Principal names and DNS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Realm configuration decisions — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Database administration" href="database.html" />
- <link rel="prev" title="kadm5.acl" href="conf_files/kadm5_acl.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="conf_files/kadm5_acl.html" title="kadm5.acl"
- accesskey="P">previous</a> |
- <a href="database.html" title="Database administration"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Realm configuration decisions">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="realm-configuration-decisions">
-<h1>Realm configuration decisions<a class="headerlink" href="#realm-configuration-decisions" title="Permalink to this headline">¶</a></h1>
-<p>Before installing Kerberos V5, it is necessary to consider the
-following issues:</p>
-<ul class="simple">
-<li>The name of your Kerberos realm (or the name of each realm, if you
-need more than one).</li>
-<li>How you will assign your hostnames to Kerberos realms.</li>
-<li>Which ports your KDC and and kadmind services will use, if they will
-not be using the default ports.</li>
-<li>How many replica KDCs you need and where they should be located.</li>
-<li>The hostnames of your primary and replica KDCs.</li>
-<li>How frequently you will propagate the database from the primary KDC
-to the replica KDCs.</li>
-</ul>
-<div class="section" id="realm-name">
-<h2>Realm name<a class="headerlink" href="#realm-name" title="Permalink to this headline">¶</a></h2>
-<p>Although your Kerberos realm can be any ASCII string, convention is to
-make it the same as your domain name, in upper-case letters.</p>
-<p>For example, hosts in the domain <code class="docutils literal"><span class="pre">example.com</span></code> would be in the
-Kerberos realm:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
-</pre></div>
-</div>
-<p>If you need multiple Kerberos realms, MIT recommends that you use
-descriptive names which end with your domain name, such as:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">BOSTON</span><span class="o">.</span><span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">HOUSTON</span><span class="o">.</span><span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="mapping-hostnames-onto-kerberos-realms">
-<span id="mapping-hostnames"></span><h2>Mapping hostnames onto Kerberos realms<a class="headerlink" href="#mapping-hostnames-onto-kerberos-realms" title="Permalink to this headline">¶</a></h2>
-<p>Mapping hostnames onto Kerberos realms is done in one of three ways.</p>
-<p>The first mechanism works through a set of rules in the
-<a class="reference internal" href="conf_files/krb5_conf.html#domain-realm"><span class="std std-ref">[domain_realm]</span></a> section of <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>. You can specify
-mappings for an entire domain or on a per-hostname basis. Typically
-you would do this by specifying the mappings for a given domain or
-subdomain and listing the exceptions.</p>
-<p>The second mechanism is to use KDC host-based service referrals. With
-this method, the KDC’s krb5.conf has a full [domain_realm] mapping for
-hosts, but the clients do not, or have mappings for only a subset of
-the hosts they might contact. When a client needs to contact a server
-host for which it has no mapping, it will ask the client realm’s KDC
-for the service ticket, and will receive a referral to the appropriate
-service realm.</p>
-<p>To use referrals, clients must be running MIT krb5 1.6 or later, and
-the KDC must be running MIT krb5 1.7 or later. The
-<strong>host_based_services</strong> and <strong>no_host_referral</strong> variables in the
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-realms"><span class="std std-ref">[realms]</span></a> section of <a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> can be used to
-fine-tune referral behavior on the KDC.</p>
-<p>It is also possible for clients to use DNS TXT records, if
-<strong>dns_lookup_realm</strong> is enabled in <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>. Such lookups
-are disabled by default because DNS is an insecure protocol and security
-holes could result if DNS records are spoofed. If enabled, the client
-will try to look up a TXT record formed by prepending the prefix
-<code class="docutils literal"><span class="pre">_kerberos</span></code> to the hostname in question. If that record is not
-found, the client will attempt a lookup by prepending <code class="docutils literal"><span class="pre">_kerberos</span></code> to the
-host’s domain name, then its parent domain, up to the top-level domain.
-For the hostname <code class="docutils literal"><span class="pre">boston.engineering.example.com</span></code>, the names looked up
-would be:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">_kerberos</span><span class="o">.</span><span class="n">boston</span><span class="o">.</span><span class="n">engineering</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span>
-<span class="n">_kerberos</span><span class="o">.</span><span class="n">engineering</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span>
-<span class="n">_kerberos</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span>
-<span class="n">_kerberos</span><span class="o">.</span><span class="n">com</span>
-</pre></div>
-</div>
-<p>The value of the first TXT record found is taken as the realm name.</p>
-<p>Even if you do not choose to use this mechanism within your site,
-you may wish to set it up anyway, for use when interacting with other sites.</p>
-</div>
-<div class="section" id="ports-for-the-kdc-and-admin-services">
-<h2>Ports for the KDC and admin services<a class="headerlink" href="#ports-for-the-kdc-and-admin-services" title="Permalink to this headline">¶</a></h2>
-<p>The default ports used by Kerberos are port 88 for the KDC and port
-749 for the admin server. You can, however, choose to run on other
-ports, as long as they are specified in each host’s
-<a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> files or in DNS SRV records, and the
-<a class="reference internal" href="conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a> file on each KDC. For a more thorough treatment of
-port numbers used by the Kerberos V5 programs, refer to the
-<a class="reference internal" href="appl_servers.html#conf-firewall"><span class="std std-ref">Configuring your firewall to work with Kerberos V5</span></a>.</p>
-</div>
-<div class="section" id="replica-kdcs">
-<h2>Replica KDCs<a class="headerlink" href="#replica-kdcs" title="Permalink to this headline">¶</a></h2>
-<p>Replica KDCs provide an additional source of Kerberos ticket-granting
-services in the event of inaccessibility of the primary KDC. The
-number of replica KDCs you need and the decision of where to place them,
-both physically and logically, depends on the specifics of your
-network.</p>
-<p>Kerberos authentication requires that each client be able to contact a
-KDC. Therefore, you need to anticipate any likely reason a KDC might
-be unavailable and have a replica KDC to take up the slack.</p>
-<p>Some considerations include:</p>
-<ul class="simple">
-<li>Have at least one replica KDC as a backup, for when the primary KDC
-is down, is being upgraded, or is otherwise unavailable.</li>
-<li>If your network is split such that a network outage is likely to
-cause a network partition (some segment or segments of the network
-to become cut off or isolated from other segments), have a replica
-KDC accessible to each segment.</li>
-<li>If possible, have at least one replica KDC in a different building
-from the primary, in case of power outages, fires, or other
-localized disasters.</li>
-</ul>
-</div>
-<div class="section" id="hostnames-for-kdcs">
-<span id="kdc-hostnames"></span><h2>Hostnames for KDCs<a class="headerlink" href="#hostnames-for-kdcs" title="Permalink to this headline">¶</a></h2>
-<p>MIT recommends that your KDCs have a predefined set of CNAME records
-(DNS hostname aliases), such as <code class="docutils literal"><span class="pre">kerberos</span></code> for the primary KDC and
-<code class="docutils literal"><span class="pre">kerberos-1</span></code>, <code class="docutils literal"><span class="pre">kerberos-2</span></code>, … for the replica KDCs. This way,
-if you need to swap a machine, you only need to change a DNS entry,
-rather than having to change hostnames.</p>
-<p>As of MIT krb5 1.4, clients can locate a realm’s KDCs through DNS
-using SRV records (<span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc2782.html"><strong>RFC 2782</strong></a>), assuming the Kerberos realm name is
-also a DNS domain name. These records indicate the hostname and port
-number to contact for that service, optionally with weighting and
-prioritization. The domain name used in the SRV record name is the
-realm name. Several different Kerberos-related service names are
-used:</p>
-<dl class="docutils">
-<dt>_kerberos._udp</dt>
-<dd>This is for contacting any KDC by UDP. This entry will be used
-the most often. Normally you should list port 88 on each of your
-KDCs.</dd>
-<dt>_kerberos._tcp</dt>
-<dd>This is for contacting any KDC by TCP. Normally you should use
-port 88. This entry should be omitted if the KDC does not listen
-on TCP ports, as was the default prior to release 1.13.</dd>
-<dt>_kerberos-master._udp</dt>
-<dd><p class="first">This entry should refer to those KDCs, if any, that will
-immediately see password changes to the Kerberos database. If a
-user is logging in and the password appears to be incorrect, the
-client will retry with the primary KDC before failing with an
-“incorrect password” error given.</p>
-<p class="last">If you have only one KDC, or for whatever reason there is no
-accessible KDC that would get database changes faster than the
-others, you do not need to define this entry. _kerberos-adm._tcp
-This should list port 749 on your primary KDC. Support for it is
-not complete at this time, but it will eventually be used by the
-<a class="reference internal" href="admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> program and related utilities. For now, you will
-also need the <strong>admin_server</strong> variable in <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>.</p>
-</dd>
-<dt>_kerberos-master._tcp</dt>
-<dd>The corresponding TCP port for _kerberos-master._udp, assuming the
-primary KDC listens on a TCP port.</dd>
-<dt>_kpasswd._udp</dt>
-<dd>This entry should list port 464 on your primary KDC. It is used
-when a user changes her password. If this entry is not defined
-but a _kerberos-adm._tcp entry is defined, the client will use the
-_kerberos-adm._tcp entry with the port number changed to 464.</dd>
-<dt>_kpasswd._tcp</dt>
-<dd>The corresponding TCP port for _kpasswd._udp.</dd>
-</dl>
-<p>The DNS SRV specification requires that the hostnames listed be the
-canonical names, not aliases. So, for example, you might include the
-following records in your (BIND-style) zone file:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>$ORIGIN foobar.com.
-_kerberos TXT "FOOBAR.COM"
-kerberos CNAME daisy
-kerberos-1 CNAME use-the-force-luke
-kerberos-2 CNAME bunny-rabbit
-_kerberos._udp SRV 0 0 88 daisy
- SRV 0 0 88 use-the-force-luke
- SRV 0 0 88 bunny-rabbit
-_kerberos-master._udp SRV 0 0 88 daisy
-_kerberos-adm._tcp SRV 0 0 749 daisy
-_kpasswd._udp SRV 0 0 464 daisy
-</pre></div>
-</div>
-<p>Clients can also be configured with the explicit location of services
-using the <strong>kdc</strong>, <strong>master_kdc</strong>, <strong>admin_server</strong>, and
-<strong>kpasswd_server</strong> variables in the <a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> section of
-<a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>. Even if some clients will be configured with
-explicit server locations, providing SRV records will still benefit
-unconfigured clients, and be useful for other sites.</p>
-</div>
-<div class="section" id="kdc-discovery">
-<span id="id1"></span><h2>KDC Discovery<a class="headerlink" href="#kdc-discovery" title="Permalink to this headline">¶</a></h2>
-<p>As of MIT krb5 1.15, clients can also locate KDCs in DNS through URI
-records (<span class="target" id="index-1"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc7553.html"><strong>RFC 7553</strong></a>). Limitations with the SRV record format may
-result in extra DNS queries in situations where a client must failover
-to other transport types, or find a primary server. The URI record
-can convey more information about a realm’s KDCs with a single query.</p>
-<p>The client performs a query for the following URI records:</p>
-<ul class="simple">
-<li><code class="docutils literal"><span class="pre">_kerberos.REALM</span></code> for finding KDCs.</li>
-<li><code class="docutils literal"><span class="pre">_kerberos-adm.REALM</span></code> for finding kadmin services.</li>
-<li><code class="docutils literal"><span class="pre">_kpasswd.REALM</span></code> for finding password services.</li>
-</ul>
-<p>The URI record includes a priority, weight, and a URI string that
-consists of case-insensitive colon separated fields, in the form
-<code class="docutils literal"><span class="pre">scheme:[flags]:transport:residual</span></code>.</p>
-<ul class="simple">
-<li><em>scheme</em> defines the registered URI type. It should always be
-<code class="docutils literal"><span class="pre">krb5srv</span></code>.</li>
-<li><em>flags</em> contains zero or more flag characters. Currently the only
-valid flag is <code class="docutils literal"><span class="pre">m</span></code>, which indicates that the record is for a
-primary server.</li>
-<li><em>transport</em> defines the transport type of the residual URL or
-address. Accepted values are <code class="docutils literal"><span class="pre">tcp</span></code>, <code class="docutils literal"><span class="pre">udp</span></code>, or <code class="docutils literal"><span class="pre">kkdcp</span></code> for the
-MS-KKDCP type.</li>
-<li><em>residual</em> contains the hostname, IP address, or URL to be
-contacted using the specified transport, with an optional port
-extension. The MS-KKDCP transport type uses a HTTPS URL, and can
-include a port and/or path extension.</li>
-</ul>
-<p>An example of URI records in a zone file:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">_kerberos</span><span class="o">.</span><span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span> <span class="n">URI</span> <span class="mi">10</span> <span class="mi">1</span> <span class="n">krb5srv</span><span class="p">:</span><span class="n">m</span><span class="p">:</span><span class="n">tcp</span><span class="p">:</span><span class="n">kdc1</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span>
- <span class="n">URI</span> <span class="mi">20</span> <span class="mi">1</span> <span class="n">krb5srv</span><span class="p">:</span><span class="n">m</span><span class="p">:</span><span class="n">udp</span><span class="p">:</span><span class="n">kdc2</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span><span class="p">:</span><span class="mi">89</span>
- <span class="n">URI</span> <span class="mi">40</span> <span class="mi">1</span> <span class="n">krb5srv</span><span class="p">::</span><span class="n">udp</span><span class="p">:</span><span class="mf">10.10</span><span class="o">.</span><span class="mf">0.23</span>
- <span class="n">URI</span> <span class="mi">30</span> <span class="mi">1</span> <span class="n">krb5srv</span><span class="p">::</span><span class="n">kkdcp</span><span class="p">:</span><span class="n">https</span><span class="p">:</span><span class="o">//</span><span class="n">proxy</span><span class="p">:</span><span class="mi">89</span><span class="o">/</span><span class="n">auth</span>
-</pre></div>
-</div>
-<p>URI lookups are enabled by default, and can be disabled by setting
-<strong>dns_uri_lookup</strong> in the <a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a> section of
-<a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> to False. When enabled, URI lookups take
-precedence over SRV lookups, falling back to SRV lookups if no URI
-records are found.</p>
-</div>
-<div class="section" id="database-propagation">
-<span id="db-prop"></span><h2>Database propagation<a class="headerlink" href="#database-propagation" title="Permalink to this headline">¶</a></h2>
-<p>The Kerberos database resides on the primary KDC, and must be
-propagated regularly (usually by a cron job) to the replica KDCs. In
-deciding how frequently the propagation should happen, you will need
-to balance the amount of time the propagation takes against the
-maximum reasonable amount of time a user should have to wait for a
-password change to take effect.</p>
-<p>If the propagation time is longer than this maximum reasonable time
-(e.g., you have a particularly large database, you have a lot of
-replicas, or you experience frequent network delays), you may wish to
-cut down on your propagation delay by performing the propagation in
-parallel. To do this, have the primary KDC propagate the database to
-one set of replicas, and then have each of these replicas propagate
-the database to additional replicas.</p>
-<p>See also <a class="reference internal" href="database.html#incr-db-prop"><span class="std std-ref">Incremental database propagation</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Realm configuration decisions</a><ul>
-<li><a class="reference internal" href="#realm-name">Realm name</a></li>
-<li><a class="reference internal" href="#mapping-hostnames-onto-kerberos-realms">Mapping hostnames onto Kerberos realms</a></li>
-<li><a class="reference internal" href="#ports-for-the-kdc-and-admin-services">Ports for the KDC and admin services</a></li>
-<li><a class="reference internal" href="#replica-kdcs">Replica KDCs</a></li>
-<li><a class="reference internal" href="#hostnames-for-kdcs">Hostnames for KDCs</a></li>
-<li><a class="reference internal" href="#kdc-discovery">KDC Discovery</a></li>
-<li><a class="reference internal" href="#database-propagation">Database propagation</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="conf_files/kadm5_acl.html" title="kadm5.acl"
- >previous</a> |
- <a href="database.html" title="Database administration"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Realm configuration decisions">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>SPAKE Preauthentication — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Addressing dictionary attack risks" href="dictionary.html" />
- <link rel="prev" title="OTP Preauthentication" href="otp.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="otp.html" title="OTP Preauthentication"
- accesskey="P">previous</a> |
- <a href="dictionary.html" title="Addressing dictionary attack risks"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__SPAKE Preauthentication">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="spake-preauthentication">
-<span id="spake"></span><h1>SPAKE Preauthentication<a class="headerlink" href="#spake-preauthentication" title="Permalink to this headline">¶</a></h1>
-<p>SPAKE preauthentication (added in release 1.17) uses public key
-cryptography techniques to protect against <a class="reference internal" href="dictionary.html#dictionary"><span class="std std-ref">password dictionary
-attacks</span></a>. Unlike <a class="reference internal" href="pkinit.html#pkinit"><span class="std std-ref">PKINIT</span></a>, it does not
-require any additional infrastructure such as certificates; it simply
-needs to be turned on. Using SPAKE preauthentication may modestly
-increase the CPU and network load on the KDC.</p>
-<p>SPAKE preauthentication can use one of four elliptic curve groups for
-its password-authenticated key exchange. The recommended group is
-<code class="docutils literal"><span class="pre">edwards25519</span></code>; three NIST curves (<code class="docutils literal"><span class="pre">P-256</span></code>, <code class="docutils literal"><span class="pre">P-384</span></code>, and
-<code class="docutils literal"><span class="pre">P-521</span></code>) are also supported.</p>
-<p>By default, SPAKE with the <code class="docutils literal"><span class="pre">edwards25519</span></code> group is enabled on
-clients, but the KDC does not offer SPAKE by default. To turn it on,
-set the <strong>spake_preauth_groups</strong> variable in <a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a> to a
-list of allowed groups. This variable affects both the client and the
-KDC. Simply setting it to <code class="docutils literal"><span class="pre">edwards25519</span></code> is recommended:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">libdefaults</span><span class="p">]</span>
- <span class="n">spake_preauth_groups</span> <span class="o">=</span> <span class="n">edwards25519</span>
-</pre></div>
-</div>
-<p>Set the <strong>+requires_preauth</strong> and <strong>-allow_svr</strong> flags on client
-principal entries, as you would for any preauthentication mechanism:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">kadmin</span><span class="p">:</span> <span class="n">modprinc</span> <span class="o">+</span><span class="n">requires_preauth</span> <span class="o">-</span><span class="n">allow_svr</span> <span class="n">PRINCNAME</span>
-</pre></div>
-</div>
-<p>Clients which do not implement SPAKE preauthentication will fall back
-to encrypted timestamp.</p>
-<p>An active attacker can force a fallback to encrypted timestamp by
-modifying the initial KDC response, defeating the protection against
-dictionary attacks. To prevent this fallback on clients which do
-implement SPAKE preauthentication, set the
-<strong>disable_encrypted_timestamp</strong> variable to <code class="docutils literal"><span class="pre">true</span></code> in the
-<a class="reference internal" href="conf_files/krb5_conf.html#realms"><span class="std std-ref">[realms]</span></a> subsection for realms whose KDCs offer SPAKE
-preauthentication.</p>
-<p>By default, SPAKE preauthentication requires an extra network round
-trip to the KDC during initial authentication. If most of the clients
-in a realm support SPAKE, this extra round trip can be eliminated
-using an optimistic challenge, by setting the
-<strong>spake_preauth_kdc_challenge</strong> variable in <a class="reference internal" href="conf_files/kdc_conf.html#kdcdefaults"><span class="std std-ref">[kdcdefaults]</span></a> to a
-single group name:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">[</span><span class="n">kdcdefaults</span><span class="p">]</span>
- <span class="n">spake_preauth_kdc_challenge</span> <span class="o">=</span> <span class="n">edwards25519</span>
-</pre></div>
-</div>
-<p>Using optimistic challenge will cause the KDC to do extra work for
-initial authentication requests that do not result in SPAKE
-preauthentication, but will save work when SPAKE preauthentication is
-used.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">SPAKE Preauthentication</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="otp.html" title="OTP Preauthentication"
- >previous</a> |
- <a href="dictionary.html" title="Addressing dictionary attack risks"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__SPAKE Preauthentication">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Troubleshooting — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Advanced topics" href="advanced/index.html" />
- <link rel="prev" title="Environment variables" href="env_variables.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="env_variables.html" title="Environment variables"
- accesskey="P">previous</a> |
- <a href="advanced/index.html" title="Advanced topics"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Troubleshooting">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="troubleshooting">
-<span id="troubleshoot"></span><h1>Troubleshooting<a class="headerlink" href="#troubleshooting" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="trace-logging">
-<span id="id1"></span><h2>Trace logging<a class="headerlink" href="#trace-logging" title="Permalink to this headline">¶</a></h2>
-<p>Most programs using MIT krb5 1.9 or later can be made to provide
-information about internal krb5 library operations using trace
-logging. To enable this, set the <strong>KRB5_TRACE</strong> environment variable
-to a filename before running the program. On many operating systems,
-the filename <code class="docutils literal"><span class="pre">/dev/stdout</span></code> can be used to send trace logging output
-to standard output.</p>
-<p>Some programs do not honor <strong>KRB5_TRACE</strong>, either because they use
-secure library contexts (this generally applies to setuid programs and
-parts of the login system) or because they take direct control of the
-trace logging system using the API.</p>
-<p>Here is a short example showing trace logging output for an invocation
-of the <a class="reference internal" href="../user/user_commands/kvno.html#kvno-1"><span class="std std-ref">kvno</span></a> command:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">env</span> <span class="n">KRB5_TRACE</span><span class="o">=/</span><span class="n">dev</span><span class="o">/</span><span class="n">stdout</span> <span class="n">kvno</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">KRBTEST</span><span class="o">.</span><span class="n">COM</span>
-<span class="p">[</span><span class="mi">9138</span><span class="p">]</span> <span class="mf">1332348778.823276</span><span class="p">:</span> <span class="n">Getting</span> <span class="n">credentials</span> <span class="n">user</span><span class="nd">@KRBTEST</span><span class="o">.</span><span class="n">COM</span> <span class="o">-></span>
- <span class="n">krbtgt</span><span class="o">/</span><span class="n">KRBTEST</span><span class="o">.</span><span class="n">COM</span><span class="nd">@KRBTEST</span><span class="o">.</span><span class="n">COM</span> <span class="n">using</span> <span class="n">ccache</span>
- <span class="n">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">me</span><span class="o">/</span><span class="n">krb5</span><span class="o">/</span><span class="n">build</span><span class="o">/</span><span class="n">testdir</span><span class="o">/</span><span class="n">ccache</span>
-<span class="p">[</span><span class="mi">9138</span><span class="p">]</span> <span class="mf">1332348778.823381</span><span class="p">:</span> <span class="n">Retrieving</span> <span class="n">user</span><span class="nd">@KRBTEST</span><span class="o">.</span><span class="n">COM</span> <span class="o">-></span>
- <span class="n">krbtgt</span><span class="o">/</span><span class="n">KRBTEST</span><span class="o">.</span><span class="n">COM</span><span class="nd">@KRBTEST</span><span class="o">.</span><span class="n">COM</span> <span class="kn">from</span>
- <span class="nn">FILE</span><span class="p">:</span><span class="o">/</span><span class="n">me</span><span class="o">/</span><span class="n">krb5</span><span class="o">/</span><span class="n">build</span><span class="o">/</span><span class="n">testdir</span><span class="o">/</span><span class="n">ccache</span> <span class="k">with</span> <span class="n">result</span><span class="p">:</span> <span class="mi">0</span><span class="o">/</span><span class="n">Unknown</span> <span class="n">code</span> <span class="mi">0</span>
-<span class="n">krbtgt</span><span class="o">/</span><span class="n">KRBTEST</span><span class="o">.</span><span class="n">COM</span><span class="nd">@KRBTEST</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span> <span class="n">kvno</span> <span class="o">=</span> <span class="mi">1</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="list-of-errors">
-<h2>List of errors<a class="headerlink" href="#list-of-errors" title="Permalink to this headline">¶</a></h2>
-<div class="section" id="frequently-seen-errors">
-<h3>Frequently seen errors<a class="headerlink" href="#frequently-seen-errors" title="Permalink to this headline">¶</a></h3>
-<ol class="arabic simple">
-<li><a class="reference internal" href="#init-creds-etype-nosupp"><span class="std std-ref">KDC has no support for encryption type while getting initial credentials</span></a></li>
-<li><a class="reference internal" href="#cert-chain-etype-nosupp"><span class="std std-ref">credential verification failed: KDC has no support for encryption type</span></a></li>
-<li><a class="reference internal" href="#err-cert-chain-cert-expired"><span class="std std-ref">Cannot create cert chain: certificate has expired</span></a></li>
-</ol>
-</div>
-<div class="section" id="errors-seen-by-admins">
-<h3>Errors seen by admins<a class="headerlink" href="#errors-seen-by-admins" title="Permalink to this headline">¶</a></h3>
-<ol class="arabic simple" id="prop-failed-start">
-<li><a class="reference internal" href="#kprop-no-route"><span class="std std-ref">kprop: No route to host while connecting to server</span></a></li>
-<li><a class="reference internal" href="#kprop-con-refused"><span class="std std-ref">kprop: Connection refused while connecting to server</span></a></li>
-<li><a class="reference internal" href="#kprop-sendauth-exchange"><span class="std std-ref">kprop: Server rejected authentication (during sendauth exchange) while authenticating to server</span></a></li>
-</ol>
-<hr class="docutils" id="prop-failed-end" />
-<div class="section" id="kdc-has-no-support-for-encryption-type-while-getting-initial-credentials">
-<span id="init-creds-etype-nosupp"></span><h4>KDC has no support for encryption type while getting initial credentials<a class="headerlink" href="#kdc-has-no-support-for-encryption-type-while-getting-initial-credentials" title="Permalink to this headline">¶</a></h4>
-</div>
-<div class="section" id="credential-verification-failed-kdc-has-no-support-for-encryption-type">
-<span id="cert-chain-etype-nosupp"></span><h4>credential verification failed: KDC has no support for encryption type<a class="headerlink" href="#credential-verification-failed-kdc-has-no-support-for-encryption-type" title="Permalink to this headline">¶</a></h4>
-<p>This most commonly happens when trying to use a principal with only
-DES keys, in a release (MIT krb5 1.7 or later) which disables DES by
-default. DES encryption is considered weak due to its inadequate key
-size. If you cannot migrate away from its use, you can re-enable DES
-by adding <code class="docutils literal"><span class="pre">allow_weak_crypto</span> <span class="pre">=</span> <span class="pre">true</span></code> to the <a class="reference internal" href="conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>
-section of <a class="reference internal" href="conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>.</p>
-</div>
-<div class="section" id="cannot-create-cert-chain-certificate-has-expired">
-<span id="err-cert-chain-cert-expired"></span><h4>Cannot create cert chain: certificate has expired<a class="headerlink" href="#cannot-create-cert-chain-certificate-has-expired" title="Permalink to this headline">¶</a></h4>
-<p>This error message indicates that PKINIT authentication failed because
-the client certificate, KDC certificate, or one of the certificates in
-the signing chain above them has expired.</p>
-<p>If the KDC certificate has expired, this message appears in the KDC
-log file, and the client will receive a “Preauthentication failed”
-error. (Prior to release 1.11, the KDC log file message erroneously
-appears as “Out of memory”. Prior to release 1.12, the client will
-receive a “Generic error”.)</p>
-<p>If the client or a signing certificate has expired, this message may
-appear in <a class="reference internal" href="#trace-logging">trace_logging</a> output from <a class="reference internal" href="../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a> or, starting in
-release 1.12, as an error message from kinit or another program which
-gets initial tickets. The error message is more likely to appear
-properly on the client if the principal entry has no long-term keys.</p>
-</div>
-<div class="section" id="kprop-no-route-to-host-while-connecting-to-server">
-<span id="kprop-no-route"></span><h4>kprop: No route to host while connecting to server<a class="headerlink" href="#kprop-no-route-to-host-while-connecting-to-server" title="Permalink to this headline">¶</a></h4>
-<p>Make sure that the hostname of the replica KDC (as given to kprop) is
-correct, and that any firewalls between the primary and the replica
-allow a connection on port 754.</p>
-</div>
-<div class="section" id="kprop-connection-refused-while-connecting-to-server">
-<span id="kprop-con-refused"></span><h4>kprop: Connection refused while connecting to server<a class="headerlink" href="#kprop-connection-refused-while-connecting-to-server" title="Permalink to this headline">¶</a></h4>
-<p>If the replica KDC is intended to run kpropd out of inetd, make sure
-that inetd is configured to accept krb5_prop connections. inetd may
-need to be restarted or sent a SIGHUP to recognize the new
-configuration. If the replica is intended to run kpropd in standalone
-mode, make sure that it is running.</p>
-</div>
-<div class="section" id="kprop-server-rejected-authentication-during-sendauth-exchange-while-authenticating-to-server">
-<span id="kprop-sendauth-exchange"></span><h4>kprop: Server rejected authentication (during sendauth exchange) while authenticating to server<a class="headerlink" href="#kprop-server-rejected-authentication-during-sendauth-exchange-while-authenticating-to-server" title="Permalink to this headline">¶</a></h4>
-<p>Make sure that:</p>
-<ol class="arabic simple">
-<li>The time is synchronized between the primary and replica KDCs.</li>
-<li>The master stash file was copied from the primary to the expected
-location on the replica.</li>
-<li>The replica has a keytab file in the default location containing a
-<code class="docutils literal"><span class="pre">host</span></code> principal for the replica’s hostname.</li>
-</ol>
-</div>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Troubleshooting</a><ul>
-<li><a class="reference internal" href="#trace-logging">Trace logging</a></li>
-<li><a class="reference internal" href="#list-of-errors">List of errors</a><ul>
-<li><a class="reference internal" href="#frequently-seen-errors">Frequently seen errors</a></li>
-<li><a class="reference internal" href="#errors-seen-by-admins">Errors seen by admins</a><ul>
-<li><a class="reference internal" href="#kdc-has-no-support-for-encryption-type-while-getting-initial-credentials">KDC has no support for encryption type while getting initial credentials</a></li>
-<li><a class="reference internal" href="#credential-verification-failed-kdc-has-no-support-for-encryption-type">credential verification failed: KDC has no support for encryption type</a></li>
-<li><a class="reference internal" href="#cannot-create-cert-chain-certificate-has-expired">Cannot create cert chain: certificate has expired</a></li>
-<li><a class="reference internal" href="#kprop-no-route-to-host-while-connecting-to-server">kprop: No route to host while connecting to server</a></li>
-<li><a class="reference internal" href="#kprop-connection-refused-while-connecting-to-server">kprop: Connection refused while connecting to server</a></li>
-<li><a class="reference internal" href="#kprop-server-rejected-authentication-during-sendauth-exchange-while-authenticating-to-server">kprop: Server rejected authentication (during sendauth exchange) while authenticating to server</a></li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="env_variables.html" title="Environment variables"
- >previous</a> |
- <a href="advanced/index.html" title="Advanced topics"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Troubleshooting">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Various links — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="For application developers" href="../appdev/index.html" />
- <link rel="prev" title="Retiring DES" href="advanced/retiring-des.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="advanced/retiring-des.html" title="Retiring DES"
- accesskey="P">previous</a> |
- <a href="../appdev/index.html" title="For application developers"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Various links">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="various-links">
-<h1>Various links<a class="headerlink" href="#various-links" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="whitepapers">
-<h2>Whitepapers<a class="headerlink" href="#whitepapers" title="Permalink to this headline">¶</a></h2>
-<ol class="arabic simple">
-<li><a class="reference external" href="https://kerberos.org/software/whitepapers.html">https://kerberos.org/software/whitepapers.html</a></li>
-</ol>
-</div>
-<div class="section" id="tutorials">
-<h2>Tutorials<a class="headerlink" href="#tutorials" title="Permalink to this headline">¶</a></h2>
-<ol class="arabic simple">
-<li>Fulvio Ricciardi <<a class="reference external" href="https://www.kerberos.org/software/tutorial.html">https://www.kerberos.org/software/tutorial.html</a>>_</li>
-</ol>
-</div>
-<div class="section" id="troubleshooting">
-<h2>Troubleshooting<a class="headerlink" href="#troubleshooting" title="Permalink to this headline">¶</a></h2>
-<ol class="arabic simple">
-<li><a class="reference external" href="https://wiki.ncsa.illinois.edu/display/ITS/Windows+Kerberos+Troubleshooting">https://wiki.ncsa.illinois.edu/display/ITS/Windows+Kerberos+Troubleshooting</a></li>
-<li><a class="reference external" href="https://www.shrubbery.net/solaris9ab/SUNWaadm/SYSADV6/p27.html">https://www.shrubbery.net/solaris9ab/SUNWaadm/SYSADV6/p27.html</a></li>
-<li><a class="reference external" href="https://docs.oracle.com/cd/E19253-01/816-4557/trouble-1/index.html">https://docs.oracle.com/cd/E19253-01/816-4557/trouble-1/index.html</a></li>
-<li><a class="reference external" href="https://docs.microsoft.com/en-us/previous-versions/tn-archive/bb463167(v=technet.10">https://docs.microsoft.com/en-us/previous-versions/tn-archive/bb463167(v=technet.10</a>)#EBAA</li>
-<li><a class="reference external" href="https://bugs.launchpad.net/ubuntu/+source/libpam-heimdal/+bug/86528">https://bugs.launchpad.net/ubuntu/+source/libpam-heimdal/+bug/86528</a></li>
-</ol>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Various links</a><ul>
-<li><a class="reference internal" href="#whitepapers">Whitepapers</a></li>
-<li><a class="reference internal" href="#tutorials">Tutorials</a></li>
-<li><a class="reference internal" href="#troubleshooting">Troubleshooting</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="advanced/retiring-des.html" title="Retiring DES"
- >previous</a> |
- <a href="../appdev/index.html" title="For application developers"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Various links">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Developing with GSSAPI — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Year 2038 considerations for uses of krb5_timestamp" href="y2038.html" />
- <link rel="prev" title="For application developers" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="For application developers"
- accesskey="P">previous</a> |
- <a href="y2038.html" title="Year 2038 considerations for uses of krb5_timestamp"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Developing with GSSAPI">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="developing-with-gssapi">
-<h1>Developing with GSSAPI<a class="headerlink" href="#developing-with-gssapi" title="Permalink to this headline">¶</a></h1>
-<p>The GSSAPI (Generic Security Services API) allows applications to
-communicate securely using Kerberos 5 or other security mechanisms.
-We recommend using the GSSAPI (or a higher-level framework which
-encompasses GSSAPI, such as SASL) for secure network communication
-over using the libkrb5 API directly.</p>
-<p>GSSAPIv2 is specified in <span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc2743.html"><strong>RFC 2743</strong></a> and <span class="target" id="index-1"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc2744.html"><strong>RFC 2744</strong></a>. Also see
-<span class="target" id="index-2"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc7546.html"><strong>RFC 7546</strong></a> for a description of how to use the GSSAPI in a client or
-server program.</p>
-<p>This documentation will describe how various ways of using the
-GSSAPI will behave with the krb5 mechanism as implemented in MIT krb5,
-as well as krb5-specific extensions to the GSSAPI.</p>
-<div class="section" id="name-types">
-<h2>Name types<a class="headerlink" href="#name-types" title="Permalink to this headline">¶</a></h2>
-<p>A GSSAPI application can name a local or remote entity by calling
-<a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.16">gss_import_name</a>, specifying a name type and a value. The following
-name types are supported by the krb5 mechanism:</p>
-<ul class="simple">
-<li><strong>GSS_C_NT_HOSTBASED_SERVICE</strong>: The value should be a string of the
-form <code class="docutils literal"><span class="pre">service</span></code> or <code class="docutils literal"><span class="pre">service@hostname</span></code>. This is the most common
-way to name target services when initiating a security context, and
-is the most likely name type to work across multiple mechanisms.</li>
-<li><strong>GSS_KRB5_NT_PRINCIPAL_NAME</strong>: The value should be a principal name
-string. This name type only works with the krb5 mechanism, and is
-defined in the <code class="docutils literal"><span class="pre"><gssapi/gssapi_krb5.h></span></code> header.</li>
-<li><strong>GSS_C_NT_USER_NAME</strong> or <strong>GSS_C_NULL_OID</strong>: The value is treated
-as an unparsed principal name string, as above. These name types
-may work with mechanisms other than krb5, but will have different
-interpretations in those mechanisms. <strong>GSS_C_NT_USER_NAME</strong> is
-intended to be used with a local username, which will parse into a
-single-component principal in the default realm.</li>
-<li><strong>GSS_C_NT_ANONYMOUS</strong>: The value is ignored. The anonymous
-principal is used, allowing a client to authenticate to a server
-without asserting a particular identity (which may or may not be
-allowed by a particular server or Kerberos realm).</li>
-<li><strong>GSS_C_NT_MACHINE_UID_NAME</strong>: The value is uid_t object. On
-Unix-like systems, the username of the uid is looked up in the
-system user database and the resulting username is parsed as a
-principal name.</li>
-<li><strong>GSS_C_NT_STRING_UID_NAME</strong>: As above, but the value is a decimal
-string representation of the uid.</li>
-<li><strong>GSS_C_NT_EXPORT_NAME</strong>: The value must be the result of a
-<a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.13">gss_export_name</a> call.</li>
-<li><strong>GSS_KRB5_NT_ENTERPRISE_NAME</strong>: The value should be a krb5
-enterprise name string (see <span class="target" id="index-3"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6806.html"><strong>RFC 6806</strong></a> section 5), in the form
-<code class="docutils literal"><span class="pre">user@suffix</span></code>. This name type is used to convey alias names, and
-is defined in the <code class="docutils literal"><span class="pre"><gssapi/gssapi_krb5.h></span></code> header. (New in
-release 1.17.)</li>
-<li><strong>GSS_KRB5_NT_X509_CERT</strong>: The value should be an X.509 certificate
-encoded according to <span class="target" id="index-4"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc5280.html"><strong>RFC 5280</strong></a>. This name form can be used for
-the desired_name parameter of gss_acquire_cred_impersonate_name(),
-to identify the S4U2Self user by certificate. (New in release
-1.19.)</li>
-</ul>
-</div>
-<div class="section" id="initiator-credentials">
-<h2>Initiator credentials<a class="headerlink" href="#initiator-credentials" title="Permalink to this headline">¶</a></h2>
-<p>A GSSAPI client application uses <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.19">gss_init_sec_context</a> to establish a
-security context. The <em>initiator_cred_handle</em> parameter determines
-what tickets are used to establish the connection. An application can
-either pass <strong>GSS_C_NO_CREDENTIAL</strong> to use the default client
-credential, or it can use <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.2">gss_acquire_cred</a> beforehand to acquire an
-initiator credential. The call to <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.2">gss_acquire_cred</a> may include a
-<em>desired_name</em> parameter, or it may pass <strong>GSS_C_NO_NAME</strong> if it does
-not have a specific name preference.</p>
-<p>If the desired name for a krb5 initiator credential is a host-based
-name, it is converted to a principal name of the form
-<code class="docutils literal"><span class="pre">service/hostname</span></code> in the local realm, where <em>hostname</em> is the local
-hostname if not specified. The hostname will be canonicalized using
-forward name resolution, and possibly also using reverse name
-resolution depending on the value of the <strong>rdns</strong> variable in
-<a class="reference internal" href="../admin/conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>.</p>
-<p>If a desired name is specified in the call to <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.2">gss_acquire_cred</a>, the
-krb5 mechanism will attempt to find existing tickets for that client
-principal name in the default credential cache or collection. If the
-default cache type does not support a collection, and the default
-cache contains credentials for a different principal than the desired
-name, a <strong>GSS_S_CRED_UNAVAIL</strong> error will be returned with a minor
-code indicating a mismatch.</p>
-<p>If no existing tickets are available for the desired name, but the
-name has an entry in the default client <a class="reference internal" href="../basic/keytab_def.html#keytab-definition"><span class="std std-ref">keytab</span></a>, the
-krb5 mechanism will acquire initial tickets for the name using the
-default client keytab.</p>
-<p>If no desired name is specified, credential acquisition will be
-deferred until the credential is used in a call to
-<a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.19">gss_init_sec_context</a> or <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.21">gss_inquire_cred</a>. If the call is to
-<a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.19">gss_init_sec_context</a>, the target name will be used to choose a client
-principal name using the credential cache selection facility. (This
-facility might, for instance, try to choose existing tickets for a
-client principal in the same realm as the target service). If there
-are no existing tickets for the chosen principal, but it is present in
-the default client keytab, the krb5 mechanism will acquire initial
-tickets using the keytab.</p>
-<p>If the target name cannot be used to select a client principal
-(because the credentials are used in a call to <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.21">gss_inquire_cred</a>), or
-if the credential cache selection facility cannot choose a principal
-for it, the default credential cache will be selected if it exists and
-contains tickets.</p>
-<p>If the default credential cache does not exist, but the default client
-keytab does, the krb5 mechanism will try to acquire initial tickets
-for the first principal in the default client keytab.</p>
-<p>If the krb5 mechanism acquires initial tickets using the default
-client keytab, the resulting tickets will be stored in the default
-cache or collection, and will be refreshed by future calls to
-<a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.2">gss_acquire_cred</a> as they approach their expire time.</p>
-</div>
-<div class="section" id="acceptor-names">
-<h2>Acceptor names<a class="headerlink" href="#acceptor-names" title="Permalink to this headline">¶</a></h2>
-<p>A GSSAPI server application uses <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.1">gss_accept_sec_context</a> to establish
-a security context based on tokens provided by the client. The
-<em>acceptor_cred_handle</em> parameter determines what
-<a class="reference internal" href="../basic/keytab_def.html#keytab-definition"><span class="std std-ref">keytab</span></a> entries may be authenticated to by the
-client, if the krb5 mechanism is used.</p>
-<p>The simplest choice is to pass <strong>GSS_C_NO_CREDENTIAL</strong> as the acceptor
-credential. In this case, clients may authenticate to any service
-principal in the default keytab (typically <a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a>, or the value of
-the <strong>KRB5_KTNAME</strong> environment variable). This is the recommended
-approach if the server application has no specific requirements to the
-contrary.</p>
-<p>A server may acquire an acceptor credential with <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.2">gss_acquire_cred</a> and
-a <em>cred_usage</em> of <strong>GSS_C_ACCEPT</strong> or <strong>GSS_C_BOTH</strong>. If the
-<em>desired_name</em> parameter is <strong>GSS_C_NO_NAME</strong>, then clients will be
-allowed to authenticate to any service principal in the default
-keytab, just as if no acceptor credential was supplied.</p>
-<p>If a server wishes to specify a <em>desired_name</em> to <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.2">gss_acquire_cred</a>,
-the most common choice is a host-based name. If the host-based
-<em>desired_name</em> contains just a <em>service</em>, then clients will be allowed
-to authenticate to any host-based service principal (that is, a
-principal of the form <code class="docutils literal"><span class="pre">service/hostname@REALM</span></code>) for the named
-service, regardless of hostname or realm, as long as it is present in
-the default keytab. If the input name contains both a <em>service</em> and a
-<em>hostname</em>, clients will be allowed to authenticate to any host-based
-principal for the named service and hostname, regardless of realm.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If a <em>hostname</em> is specified, it will be canonicalized
-using forward name resolution, and possibly also using
-reverse name resolution depending on the value of the
-<strong>rdns</strong> variable in <a class="reference internal" href="../admin/conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>.</p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If the <strong>ignore_acceptor_hostname</strong> variable in
-<a class="reference internal" href="../admin/conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a> is enabled, then <em>hostname</em> will be
-ignored even if one is specified in the input name.</p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">In MIT krb5 versions prior to 1.10, and in Heimdal’s
-implementation of the krb5 mechanism, an input name with
-just a <em>service</em> is treated like an input name of
-<code class="docutils literal"><span class="pre">service@localhostname</span></code>, where <em>localhostname</em> is the
-string returned by gethostname().</p>
-</div>
-<p>If the <em>desired_name</em> is a krb5 principal name or a local system name
-type which is mapped to a krb5 principal name, clients will only be
-allowed to authenticate to that principal in the default keytab.</p>
-</div>
-<div class="section" id="name-attributes">
-<h2>Name Attributes<a class="headerlink" href="#name-attributes" title="Permalink to this headline">¶</a></h2>
-<p>In release 1.8 or later, the <a class="reference external" href="https://tools.ietf.org/html/rfc6680.txt#section-7.4">gss_inquire_name</a> and
-<a class="reference external" href="https://tools.ietf.org/html/6680.html#section-7.5">gss_get_name_attribute</a> functions, specified in <span class="target" id="index-5"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6680.html"><strong>RFC 6680</strong></a>, can be
-used to retrieve name attributes from the <em>src_name</em> returned by
-<a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.1">gss_accept_sec_context</a>. The following attributes are defined when
-the krb5 mechanism is used:</p>
-<ul class="simple" id="gssapi-authind-attr">
-<li>“auth-indicators” attribute:</li>
-</ul>
-<p>This attribute will be included in the <a class="reference external" href="https://tools.ietf.org/html/rfc6680.txt#section-7.4">gss_inquire_name</a> output if the
-ticket contains <a class="reference internal" href="../admin/auth_indicator.html#auth-indicator"><span class="std std-ref">authentication indicators</span></a>.
-One indicator is returned per invocation of <a class="reference external" href="https://tools.ietf.org/html/6680.html#section-7.5">gss_get_name_attribute</a>,
-so multiple invocations may be necessary to retrieve all of the
-indicators from the ticket. (New in release 1.15.)</p>
-</div>
-<div class="section" id="credential-store-extensions">
-<h2>Credential store extensions<a class="headerlink" href="#credential-store-extensions" title="Permalink to this headline">¶</a></h2>
-<p>Beginning with release 1.11, the following GSSAPI extensions declared
-in <code class="docutils literal"><span class="pre"><gssapi/gssapi_ext.h></span></code> can be used to specify how credentials
-are acquired or stored:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">struct</span> <span class="n">gss_key_value_element_struct</span> <span class="p">{</span>
- <span class="n">const</span> <span class="n">char</span> <span class="o">*</span><span class="n">key</span><span class="p">;</span>
- <span class="n">const</span> <span class="n">char</span> <span class="o">*</span><span class="n">value</span><span class="p">;</span>
-<span class="p">};</span>
-<span class="n">typedef</span> <span class="n">struct</span> <span class="n">gss_key_value_element_struct</span> <span class="n">gss_key_value_element_desc</span><span class="p">;</span>
-
-<span class="n">struct</span> <span class="n">gss_key_value_set_struct</span> <span class="p">{</span>
- <span class="n">OM_uint32</span> <span class="n">count</span><span class="p">;</span>
- <span class="n">gss_key_value_element_desc</span> <span class="o">*</span><span class="n">elements</span><span class="p">;</span>
-<span class="p">};</span>
-<span class="n">typedef</span> <span class="n">const</span> <span class="n">struct</span> <span class="n">gss_key_value_set_struct</span> <span class="n">gss_key_value_set_desc</span><span class="p">;</span>
-<span class="n">typedef</span> <span class="n">const</span> <span class="n">gss_key_value_set_desc</span> <span class="o">*</span><span class="n">gss_const_key_value_set_t</span><span class="p">;</span>
-
-<span class="n">OM_uint32</span> <span class="n">gss_acquire_cred_from</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">const</span> <span class="n">gss_name_t</span> <span class="n">desired_name</span><span class="p">,</span>
- <span class="n">OM_uint32</span> <span class="n">time_req</span><span class="p">,</span>
- <span class="n">const</span> <span class="n">gss_OID_set</span> <span class="n">desired_mechs</span><span class="p">,</span>
- <span class="n">gss_cred_usage_t</span> <span class="n">cred_usage</span><span class="p">,</span>
- <span class="n">gss_const_key_value_set_t</span> <span class="n">cred_store</span><span class="p">,</span>
- <span class="n">gss_cred_id_t</span> <span class="o">*</span><span class="n">output_cred_handle</span><span class="p">,</span>
- <span class="n">gss_OID_set</span> <span class="o">*</span><span class="n">actual_mechs</span><span class="p">,</span>
- <span class="n">OM_uint32</span> <span class="o">*</span><span class="n">time_rec</span><span class="p">);</span>
-
-<span class="n">OM_uint32</span> <span class="n">gss_store_cred_into</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_cred_id_t</span> <span class="n">input_cred_handle</span><span class="p">,</span>
- <span class="n">gss_cred_usage_t</span> <span class="n">cred_usage</span><span class="p">,</span>
- <span class="n">const</span> <span class="n">gss_OID</span> <span class="n">desired_mech</span><span class="p">,</span>
- <span class="n">OM_uint32</span> <span class="n">overwrite_cred</span><span class="p">,</span>
- <span class="n">OM_uint32</span> <span class="n">default_cred</span><span class="p">,</span>
- <span class="n">gss_const_key_value_set_t</span> <span class="n">cred_store</span><span class="p">,</span>
- <span class="n">gss_OID_set</span> <span class="o">*</span><span class="n">elements_stored</span><span class="p">,</span>
- <span class="n">gss_cred_usage_t</span> <span class="o">*</span><span class="n">cred_usage_stored</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>The additional <em>cred_store</em> parameter allows the caller to specify
-information about how the credentials should be obtained and stored.
-The following options are supported by the krb5 mechanism:</p>
-<ul class="simple">
-<li><strong>ccache</strong>: For acquiring initiator credentials, the name of the
-<a class="reference internal" href="../basic/ccache_def.html#ccache-definition"><span class="std std-ref">credential cache</span></a> to which the handle will
-refer. For storing credentials, the name of the cache or collection
-where the credentials will be stored (see below).</li>
-<li><strong>client_keytab</strong>: For acquiring initiator credentials, the name of
-the <a class="reference internal" href="../basic/keytab_def.html#keytab-definition"><span class="std std-ref">keytab</span></a> which will be used, if
-necessary, to refresh the credentials in the cache.</li>
-<li><strong>keytab</strong>: For acquiring acceptor credentials, the name of the
-<a class="reference internal" href="../basic/keytab_def.html#keytab-definition"><span class="std std-ref">keytab</span></a> to which the handle will refer.
-In release 1.19 and later, this option also determines the keytab to
-be used for verification when initiator credentials are acquired
-using a password and verified.</li>
-<li><strong>password</strong>: For acquiring initiator credentials, this option
-instructs the mechanism to acquire fresh credentials into a unique
-memory credential cache. This option may not be used with the
-<strong>ccache</strong> or <strong>client_keytab</strong> options, and a <em>desired_name</em> must
-be specified. (New in release 1.19.)</li>
-<li><strong>rcache</strong>: For acquiring acceptor credentials, the name of the
-<a class="reference internal" href="../basic/rcache_def.html#rcache-definition"><span class="std std-ref">replay cache</span></a> to be used when processing
-the initiator tokens. (New in release 1.13.)</li>
-<li><strong>verify</strong>: For acquiring initiator credentials, this option
-instructs the mechanism to verify the credentials by obtaining a
-ticket to a service with a known key. The service key is obtained
-from the keytab specified with the <strong>keytab</strong> option or the default
-keytab. The value may be the name of a principal in the keytab, or
-the empty string. If the empty string is given, any <code class="docutils literal"><span class="pre">host</span></code>
-service principal in the keytab may be used. (New in release 1.19.)</li>
-</ul>
-<p>In release 1.20 or later, if a collection name is specified for
-<strong>cache</strong> in a call to gss_store_cred_into(), an existing cache for
-the client principal within the collection will be selected, or a new
-cache will be created within the collection. If <em>overwrite_cred</em> is
-false and the selected credential cache already exists, a
-<strong>GSS_S_DUPLICATE_ELEMENT</strong> error will be returned. If <em>default_cred</em>
-is true, the primary cache of the collection will be switched to the
-selected cache.</p>
-</div>
-<div class="section" id="importing-and-exporting-credentials">
-<h2>Importing and exporting credentials<a class="headerlink" href="#importing-and-exporting-credentials" title="Permalink to this headline">¶</a></h2>
-<p>The following GSSAPI extensions can be used to import and export
-credentials (declared in <code class="docutils literal"><span class="pre"><gssapi/gssapi_ext.h></span></code>):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">gss_export_cred</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_cred_id_t</span> <span class="n">cred_handle</span><span class="p">,</span>
- <span class="n">gss_buffer_t</span> <span class="n">token</span><span class="p">);</span>
-
-<span class="n">OM_uint32</span> <span class="n">gss_import_cred</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_buffer_t</span> <span class="n">token</span><span class="p">,</span>
- <span class="n">gss_cred_id_t</span> <span class="o">*</span><span class="n">cred_handle</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>The first function serializes a GSSAPI credential handle into a
-buffer; the second unseralizes a buffer into a GSSAPI credential
-handle. Serializing a credential does not destroy it. If any of the
-mechanisms used in <em>cred_handle</em> do not support serialization,
-gss_export_cred will return <strong>GSS_S_UNAVAILABLE</strong>. As with other
-GSSAPI serialization functions, these extensions are only intended to
-work with a matching implementation on the other side; they do not
-serialize credentials in a standardized format.</p>
-<p>A serialized credential may contain secret information such as ticket
-session keys. The serialization format does not protect this
-information from eavesdropping or tampering. The calling application
-must take care to protect the serialized credential when communicating
-it over an insecure channel or to an untrusted party.</p>
-<p>A krb5 GSSAPI credential may contain references to a credential cache,
-a client keytab, an acceptor keytab, and a replay cache. These
-resources are normally serialized as references to their external
-locations (such as the filename of the credential cache). Because of
-this, a serialized krb5 credential can only be imported by a process
-with similar privileges to the exporter. A serialized credential
-should not be trusted if it originates from a source with lower
-privileges than the importer, as it may contain references to external
-credential cache, keytab, or replay cache resources not accessible to
-the originator.</p>
-<p>An exception to the above rule applies when a krb5 GSSAPI credential
-refers to a memory credential cache, as is normally the case for
-delegated credentials received by <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.1">gss_accept_sec_context</a>. In this
-case, the contents of the credential cache are serialized, so that the
-resulting token may be imported even if the original memory credential
-cache no longer exists.</p>
-</div>
-<div class="section" id="constrained-delegation-s4u">
-<h2>Constrained delegation (S4U)<a class="headerlink" href="#constrained-delegation-s4u" title="Permalink to this headline">¶</a></h2>
-<p>The Microsoft S4U2Self and S4U2Proxy Kerberos protocol extensions
-allow an intermediate service to acquire credentials from a client to
-a target service without requiring the client to delegate a
-ticket-granting ticket, if the KDC is configured to allow it.</p>
-<p>To perform a constrained delegation operation, the intermediate
-service must submit to the KDC an “evidence ticket” from the client to
-the intermediate service. An evidence ticket can be acquired when the
-client authenticates to the intermediate service with Kerberos, or
-with an S4U2Self request if the KDC allows it. The MIT krb5 GSSAPI
-library represents an evidence ticket using a “proxy credential”,
-which is a special kind of gss_cred_id_t object whose underlying
-credential cache contains the evidence ticket and a krbtgt ticket for
-the intermediate service.</p>
-<p>To acquire a proxy credential during client authentication, the
-service should first create an acceptor credential using the
-<strong>GSS_C_BOTH</strong> usage. The application should then pass this
-credential as the <em>acceptor_cred_handle</em> to <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.1">gss_accept_sec_context</a>,
-and also pass a <em>delegated_cred_handle</em> output parameter to receive a
-proxy credential containing the evidence ticket. The output value of
-<em>delegated_cred_handle</em> may be a delegated ticket-granting ticket if
-the client sent one, or a proxy credential if not. If the library can
-determine that the client’s ticket is not a valid evidence ticket, it
-will place <strong>GSS_C_NO_CREDENTIAL</strong> in <em>delegated_cred_handle</em>.</p>
-<p>To acquire a proxy credential using an S4U2Self request, the service
-can use the following GSSAPI extension:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">gss_acquire_cred_impersonate_name</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_cred_id_t</span> <span class="n">icred</span><span class="p">,</span>
- <span class="n">gss_name_t</span> <span class="n">desired_name</span><span class="p">,</span>
- <span class="n">OM_uint32</span> <span class="n">time_req</span><span class="p">,</span>
- <span class="n">gss_OID_set</span> <span class="n">desired_mechs</span><span class="p">,</span>
- <span class="n">gss_cred_usage_t</span> <span class="n">cred_usage</span><span class="p">,</span>
- <span class="n">gss_cred_id_t</span> <span class="o">*</span><span class="n">output_cred</span><span class="p">,</span>
- <span class="n">gss_OID_set</span> <span class="o">*</span><span class="n">actual_mechs</span><span class="p">,</span>
- <span class="n">OM_uint32</span> <span class="o">*</span><span class="n">time_rec</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>The parameters to this function are similar to those of
-<a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.2">gss_acquire_cred</a>, except that <em>icred</em> is used to make an S4U2Self
-request to the KDC for a ticket from <em>desired_name</em> to the
-intermediate service. Both <em>icred</em> and <em>desired_name</em> are required
-for this function; passing <strong>GSS_C_NO_CREDENTIAL</strong> or
-<strong>GSS_C_NO_NAME</strong> will cause the call to fail. <em>icred</em> must contain a
-krbtgt ticket for the intermediate service. The result of this
-operation is a proxy credential. (Prior to release 1.18, the result
-of this operation may be a regular credential for <em>desired_name</em>, if
-the KDC issues a non-forwardable ticket.)</p>
-<p>Once the intermediate service has a proxy credential, it can simply
-pass it to <a class="reference external" href="https://tools.ietf.org/html/rfc2744.html#section-5.19">gss_init_sec_context</a> as the <em>initiator_cred_handle</em>
-parameter, and the desired service as the <em>target_name</em> parameter.
-The GSSAPI library will present the krbtgt ticket and evidence ticket
-in the proxy credential to the KDC in an S4U2Proxy request; if the
-intermediate service has the appropriate permissions, the KDC will
-issue a ticket from the client to the target service. The GSSAPI
-library will then use this ticket to authenticate to the target
-service.</p>
-<p>If an application needs to find out whether a credential it holds is a
-proxy credential and the name of the intermediate service, it can
-query the credential with the <strong>GSS_KRB5_GET_CRED_IMPERSONATOR</strong> OID
-(new in release 1.16, declared in <code class="docutils literal"><span class="pre"><gssapi/gssapi_krb5.h></span></code>) using
-the gss_inquire_cred_by_oid extension (declared in
-<code class="docutils literal"><span class="pre"><gssapi/gssapi_ext.h></span></code>):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">gss_inquire_cred_by_oid</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">const</span> <span class="n">gss_cred_id_t</span> <span class="n">cred_handle</span><span class="p">,</span>
- <span class="n">gss_OID</span> <span class="n">desired_object</span><span class="p">,</span>
- <span class="n">gss_buffer_set_t</span> <span class="o">*</span><span class="n">data_set</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>If the call succeeds and <em>cred_handle</em> is a proxy credential,
-<em>data_set</em> will be set to a single-element buffer set containing the
-unparsed principal name of the intermediate service. If <em>cred_handle</em>
-is not a proxy credential, <em>data_set</em> will be set to an empty buffer
-set. If the library does not support the query,
-gss_inquire_cred_by_oid will return <strong>GSS_S_UNAVAILABLE</strong>.</p>
-</div>
-<div class="section" id="aead-message-wrapping">
-<h2>AEAD message wrapping<a class="headerlink" href="#aead-message-wrapping" title="Permalink to this headline">¶</a></h2>
-<p>The following GSSAPI extensions (declared in
-<code class="docutils literal"><span class="pre"><gssapi/gssapi_ext.h></span></code>) can be used to wrap and unwrap messages
-with additional “associated data” which is integrity-checked but is
-not included in the output buffer:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">gss_wrap_aead</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_ctx_id_t</span> <span class="n">context_handle</span><span class="p">,</span>
- <span class="nb">int</span> <span class="n">conf_req_flag</span><span class="p">,</span> <span class="n">gss_qop_t</span> <span class="n">qop_req</span><span class="p">,</span>
- <span class="n">gss_buffer_t</span> <span class="n">input_assoc_buffer</span><span class="p">,</span>
- <span class="n">gss_buffer_t</span> <span class="n">input_payload_buffer</span><span class="p">,</span>
- <span class="nb">int</span> <span class="o">*</span><span class="n">conf_state</span><span class="p">,</span>
- <span class="n">gss_buffer_t</span> <span class="n">output_message_buffer</span><span class="p">);</span>
-
-<span class="n">OM_uint32</span> <span class="n">gss_unwrap_aead</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_ctx_id_t</span> <span class="n">context_handle</span><span class="p">,</span>
- <span class="n">gss_buffer_t</span> <span class="n">input_message_buffer</span><span class="p">,</span>
- <span class="n">gss_buffer_t</span> <span class="n">input_assoc_buffer</span><span class="p">,</span>
- <span class="n">gss_buffer_t</span> <span class="n">output_payload_buffer</span><span class="p">,</span>
- <span class="nb">int</span> <span class="o">*</span><span class="n">conf_state</span><span class="p">,</span>
- <span class="n">gss_qop_t</span> <span class="o">*</span><span class="n">qop_state</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>Wrap tokens created with gss_wrap_aead will successfully unwrap only
-if the same <em>input_assoc_buffer</em> contents are presented to
-gss_unwrap_aead.</p>
-</div>
-<div class="section" id="iov-message-wrapping">
-<h2>IOV message wrapping<a class="headerlink" href="#iov-message-wrapping" title="Permalink to this headline">¶</a></h2>
-<p>The following extensions (declared in <code class="docutils literal"><span class="pre"><gssapi/gssapi_ext.h></span></code>) can
-be used for in-place encryption, fine-grained control over wrap token
-layout, and for constructing wrap tokens compatible with Microsoft DCE
-RPC:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">typedef</span> <span class="n">struct</span> <span class="n">gss_iov_buffer_desc_struct</span> <span class="p">{</span>
- <span class="n">OM_uint32</span> <span class="nb">type</span><span class="p">;</span>
- <span class="n">gss_buffer_desc</span> <span class="n">buffer</span><span class="p">;</span>
-<span class="p">}</span> <span class="n">gss_iov_buffer_desc</span><span class="p">,</span> <span class="o">*</span><span class="n">gss_iov_buffer_t</span><span class="p">;</span>
-
-<span class="n">OM_uint32</span> <span class="n">gss_wrap_iov</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_ctx_id_t</span> <span class="n">context_handle</span><span class="p">,</span>
- <span class="nb">int</span> <span class="n">conf_req_flag</span><span class="p">,</span> <span class="n">gss_qop_t</span> <span class="n">qop_req</span><span class="p">,</span>
- <span class="nb">int</span> <span class="o">*</span><span class="n">conf_state</span><span class="p">,</span>
- <span class="n">gss_iov_buffer_desc</span> <span class="o">*</span><span class="n">iov</span><span class="p">,</span> <span class="nb">int</span> <span class="n">iov_count</span><span class="p">);</span>
-
-<span class="n">OM_uint32</span> <span class="n">gss_unwrap_iov</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_ctx_id_t</span> <span class="n">context_handle</span><span class="p">,</span>
- <span class="nb">int</span> <span class="o">*</span><span class="n">conf_state</span><span class="p">,</span> <span class="n">gss_qop_t</span> <span class="o">*</span><span class="n">qop_state</span><span class="p">,</span>
- <span class="n">gss_iov_buffer_desc</span> <span class="o">*</span><span class="n">iov</span><span class="p">,</span> <span class="nb">int</span> <span class="n">iov_count</span><span class="p">);</span>
-
-<span class="n">OM_uint32</span> <span class="n">gss_wrap_iov_length</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_ctx_id_t</span> <span class="n">context_handle</span><span class="p">,</span>
- <span class="nb">int</span> <span class="n">conf_req_flag</span><span class="p">,</span>
- <span class="n">gss_qop_t</span> <span class="n">qop_req</span><span class="p">,</span> <span class="nb">int</span> <span class="o">*</span><span class="n">conf_state</span><span class="p">,</span>
- <span class="n">gss_iov_buffer_desc</span> <span class="o">*</span><span class="n">iov</span><span class="p">,</span>
- <span class="nb">int</span> <span class="n">iov_count</span><span class="p">);</span>
-
-<span class="n">OM_uint32</span> <span class="n">gss_release_iov_buffer</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_iov_buffer_desc</span> <span class="o">*</span><span class="n">iov</span><span class="p">,</span>
- <span class="nb">int</span> <span class="n">iov_count</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>The caller of gss_wrap_iov provides an array of gss_iov_buffer_desc
-structures, each containing a type and a gss_buffer_desc structure.
-Valid types include:</p>
-<ul class="simple">
-<li><strong>GSS_C_BUFFER_TYPE_DATA</strong>: A data buffer to be included in the
-token, and to be encrypted or decrypted in-place if the token is
-confidentiality-protected.</li>
-<li><strong>GSS_C_BUFFER_TYPE_HEADER</strong>: The GSSAPI wrap token header and
-underlying cryptographic header.</li>
-<li><strong>GSS_C_BUFFER_TYPE_TRAILER</strong>: The cryptographic trailer, if one is
-required.</li>
-<li><strong>GSS_C_BUFFER_TYPE_PADDING</strong>: Padding to be combined with the data
-during encryption and decryption. (The implementation may choose to
-place padding in the trailer buffer, in which case it will set the
-padding buffer length to 0.)</li>
-<li><strong>GSS_C_BUFFER_TYPE_STREAM</strong>: For unwrapping only, a buffer
-containing a complete wrap token in standard format to be unwrapped.</li>
-<li><strong>GSS_C_BUFFER_TYPE_SIGN_ONLY</strong>: A buffer to be included in the
-token’s integrity protection checksum, but not to be encrypted or
-included in the token itself.</li>
-</ul>
-<p>For gss_wrap_iov, the IOV list should contain one HEADER buffer,
-followed by zero or more SIGN_ONLY buffers, followed by one or more
-DATA buffers, followed by a TRAILER buffer. The memory pointed to by
-the buffers is not required to be contiguous or in any particular
-order. If <em>conf_req_flag</em> is true, DATA buffers will be encrypted
-in-place, while SIGN_ONLY buffers will not be modified.</p>
-<p>The type of an output buffer may be combined with
-<strong>GSS_C_BUFFER_FLAG_ALLOCATE</strong> to request that gss_wrap_iov allocate
-the buffer contents. If gss_wrap_iov allocates a buffer, it sets the
-<strong>GSS_C_BUFFER_FLAG_ALLOCATED</strong> flag on the buffer type.
-gss_release_iov_buffer can be used to release all allocated buffers
-within an iov list and unset their allocated flags. Here is an
-example of how gss_wrap_iov can be used with allocation requested
-(<em>ctx</em> is assumed to be a previously established gss_ctx_id_t):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">;</span>
-<span class="n">gss_iov_buffer_desc</span> <span class="n">iov</span><span class="p">[</span><span class="mi">4</span><span class="p">];</span>
-<span class="n">char</span> <span class="nb">str</span><span class="p">[]</span> <span class="o">=</span> <span class="s2">"message"</span><span class="p">;</span>
-
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_HEADER</span> <span class="o">|</span> <span class="n">GSS_IOV_BUFFER_FLAG_ALLOCATE</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_DATA</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">value</span> <span class="o">=</span> <span class="nb">str</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span> <span class="o">=</span> <span class="n">strlen</span><span class="p">(</span><span class="nb">str</span><span class="p">);</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">2</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_PADDING</span> <span class="o">|</span> <span class="n">GSS_IOV_BUFFER_FLAG_ALLOCATE</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">3</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_TRAILER</span> <span class="o">|</span> <span class="n">GSS_IOV_BUFFER_FLAG_ALLOCATE</span><span class="p">;</span>
-
-<span class="n">major</span> <span class="o">=</span> <span class="n">gss_wrap_iov</span><span class="p">(</span><span class="o">&</span><span class="n">minor</span><span class="p">,</span> <span class="n">ctx</span><span class="p">,</span> <span class="mi">1</span><span class="p">,</span> <span class="n">GSS_C_QOP_DEFAULT</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span>
- <span class="n">iov</span><span class="p">,</span> <span class="mi">4</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">GSS_ERROR</span><span class="p">(</span><span class="n">major</span><span class="p">))</span>
- <span class="n">handle_error</span><span class="p">(</span><span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">);</span>
-
-<span class="o">/*</span> <span class="n">Transmit</span> <span class="ow">or</span> <span class="n">otherwise</span> <span class="n">use</span> <span class="n">resulting</span> <span class="n">buffers</span><span class="o">.</span> <span class="o">*/</span>
-
-<span class="p">(</span><span class="n">void</span><span class="p">)</span><span class="n">gss_release_iov_buffer</span><span class="p">(</span><span class="o">&</span><span class="n">minor</span><span class="p">,</span> <span class="n">iov</span><span class="p">,</span> <span class="mi">4</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>If the caller does not choose to request buffer allocation by
-gss_wrap_iov, it should first call gss_wrap_iov_length to query the
-lengths of the HEADER, PADDING, and TRAILER buffers. DATA buffers
-must be provided in the iov list so that padding length can be
-computed correctly, but the output buffers need not be initialized.
-Here is an example of using gss_wrap_iov_length and gss_wrap_iov:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">;</span>
-<span class="n">gss_iov_buffer_desc</span> <span class="n">iov</span><span class="p">[</span><span class="mi">4</span><span class="p">];</span>
-<span class="n">char</span> <span class="nb">str</span><span class="p">[</span><span class="mi">1024</span><span class="p">]</span> <span class="o">=</span> <span class="s2">"message"</span><span class="p">,</span> <span class="o">*</span><span class="n">ptr</span><span class="p">;</span>
-
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_HEADER</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_DATA</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">value</span> <span class="o">=</span> <span class="nb">str</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span> <span class="o">=</span> <span class="n">strlen</span><span class="p">(</span><span class="nb">str</span><span class="p">);</span>
-
-<span class="n">iov</span><span class="p">[</span><span class="mi">2</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_PADDING</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">3</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_TRAILER</span><span class="p">;</span>
-
-<span class="n">major</span> <span class="o">=</span> <span class="n">gss_wrap_iov_length</span><span class="p">(</span><span class="o">&</span><span class="n">minor</span><span class="p">,</span> <span class="n">ctx</span><span class="p">,</span> <span class="mi">1</span><span class="p">,</span> <span class="n">GSS_C_QOP_DEFAULT</span><span class="p">,</span>
- <span class="n">NULL</span><span class="p">,</span> <span class="n">iov</span><span class="p">,</span> <span class="mi">4</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">GSS_ERROR</span><span class="p">(</span><span class="n">major</span><span class="p">))</span>
- <span class="n">handle_error</span><span class="p">(</span><span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">strlen</span><span class="p">(</span><span class="nb">str</span><span class="p">)</span> <span class="o">+</span> <span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span> <span class="o">+</span> <span class="n">iov</span><span class="p">[</span><span class="mi">2</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span> <span class="o">+</span>
- <span class="n">iov</span><span class="p">[</span><span class="mi">3</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span> <span class="o">></span> <span class="n">sizeof</span><span class="p">(</span><span class="nb">str</span><span class="p">))</span>
- <span class="n">handle_out_of_space_error</span><span class="p">();</span>
-<span class="n">ptr</span> <span class="o">=</span> <span class="nb">str</span> <span class="o">+</span> <span class="n">strlen</span><span class="p">(</span><span class="nb">str</span><span class="p">);</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">value</span> <span class="o">=</span> <span class="n">ptr</span><span class="p">;</span>
-<span class="n">ptr</span> <span class="o">+=</span> <span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">2</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">value</span> <span class="o">=</span> <span class="n">ptr</span><span class="p">;</span>
-<span class="n">ptr</span> <span class="o">+=</span> <span class="n">iov</span><span class="p">[</span><span class="mi">2</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">3</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">value</span> <span class="o">=</span> <span class="n">ptr</span><span class="p">;</span>
-
-<span class="n">major</span> <span class="o">=</span> <span class="n">gss_wrap_iov</span><span class="p">(</span><span class="o">&</span><span class="n">minor</span><span class="p">,</span> <span class="n">ctx</span><span class="p">,</span> <span class="mi">1</span><span class="p">,</span> <span class="n">GSS_C_QOP_DEFAULT</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span>
- <span class="n">iov</span><span class="p">,</span> <span class="mi">4</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">GSS_ERROR</span><span class="p">(</span><span class="n">major</span><span class="p">))</span>
- <span class="n">handle_error</span><span class="p">(</span><span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>If the context was established using the <strong>GSS_C_DCE_STYLE</strong> flag
-(described in <span class="target" id="index-6"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4757.html"><strong>RFC 4757</strong></a>), wrap tokens compatible with Microsoft DCE
-RPC can be constructed. In this case, the IOV list must include a
-SIGN_ONLY buffer, a DATA buffer, a second SIGN_ONLY buffer, and a
-HEADER buffer in that order (the order of the buffer contents remains
-arbitrary). The application must pad the DATA buffer to a multiple of
-16 bytes as no padding or trailer buffer is used.</p>
-<p>gss_unwrap_iov may be called with an IOV list just like one which
-would be provided to gss_wrap_iov. DATA buffers will be decrypted
-in-place if they were encrypted, and SIGN_ONLY buffers will not be
-modified.</p>
-<p>Alternatively, gss_unwrap_iov may be called with a single STREAM
-buffer, zero or more SIGN_ONLY buffers, and a single DATA buffer. The
-STREAM buffer is interpreted as a complete wrap token. The STREAM
-buffer will be modified in-place to decrypt its contents. The DATA
-buffer will be initialized to point to the decrypted data within the
-STREAM buffer, unless it has the <strong>GSS_C_BUFFER_FLAG_ALLOCATE</strong> flag
-set, in which case it will be initialized with a copy of the decrypted
-data. Here is an example (<em>token</em> and <em>token_len</em> are assumed to be a
-pre-existing pointer and length for a modifiable region of data):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">;</span>
-<span class="n">gss_iov_buffer_desc</span> <span class="n">iov</span><span class="p">[</span><span class="mi">2</span><span class="p">];</span>
-
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_STREAM</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">value</span> <span class="o">=</span> <span class="n">token</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span> <span class="o">=</span> <span class="n">token_len</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_DATA</span><span class="p">;</span>
-<span class="n">major</span> <span class="o">=</span> <span class="n">gss_unwrap_iov</span><span class="p">(</span><span class="o">&</span><span class="n">minor</span><span class="p">,</span> <span class="n">ctx</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">iov</span><span class="p">,</span> <span class="mi">2</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">GSS_ERROR</span><span class="p">(</span><span class="n">major</span><span class="p">))</span>
- <span class="n">handle_error</span><span class="p">(</span><span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">);</span>
-
-<span class="o">/*</span> <span class="n">Decrypted</span> <span class="n">data</span> <span class="ow">is</span> <span class="ow">in</span> <span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="p">,</span> <span class="n">pointing</span> <span class="n">to</span> <span class="n">a</span> <span class="n">subregion</span> <span class="n">of</span>
- <span class="o">*</span> <span class="n">token</span><span class="o">.</span> <span class="o">*/</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="iov-mic-tokens">
-<span id="gssapi-mic-token"></span><h2>IOV MIC tokens<a class="headerlink" href="#iov-mic-tokens" title="Permalink to this headline">¶</a></h2>
-<p>The following extensions (declared in <code class="docutils literal"><span class="pre"><gssapi/gssapi_ext.h></span></code>) can
-be used in release 1.12 or later to construct and verify MIC tokens
-using an IOV list:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">gss_get_mic_iov</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_ctx_id_t</span> <span class="n">context_handle</span><span class="p">,</span>
- <span class="n">gss_qop_t</span> <span class="n">qop_req</span><span class="p">,</span>
- <span class="n">gss_iov_buffer_desc</span> <span class="o">*</span><span class="n">iov</span><span class="p">,</span>
- <span class="nb">int</span> <span class="n">iov_count</span><span class="p">);</span>
-
-<span class="n">OM_uint32</span> <span class="n">gss_get_mic_iov_length</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_ctx_id_t</span> <span class="n">context_handle</span><span class="p">,</span>
- <span class="n">gss_qop_t</span> <span class="n">qop_req</span><span class="p">,</span>
- <span class="n">gss_iov_buffer_desc</span> <span class="o">*</span><span class="n">iov</span><span class="p">,</span>
- <span class="n">iov_count</span><span class="p">);</span>
-
-<span class="n">OM_uint32</span> <span class="n">gss_verify_mic_iov</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_ctx_id_t</span> <span class="n">context_handle</span><span class="p">,</span>
- <span class="n">gss_qop_t</span> <span class="o">*</span><span class="n">qop_state</span><span class="p">,</span>
- <span class="n">gss_iov_buffer_desc</span> <span class="o">*</span><span class="n">iov</span><span class="p">,</span>
- <span class="nb">int</span> <span class="n">iov_count</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>The caller of gss_get_mic_iov provides an array of gss_iov_buffer_desc
-structures, each containing a type and a gss_buffer_desc structure.
-Valid types include:</p>
-<ul class="simple">
-<li><strong>GSS_C_BUFFER_TYPE_DATA</strong> and <strong>GSS_C_BUFFER_TYPE_SIGN_ONLY</strong>: The
-corresponding buffer for each of these types will be signed for the
-MIC token, in the order provided.</li>
-<li><strong>GSS_C_BUFFER_TYPE_MIC_TOKEN</strong>: The GSSAPI MIC token.</li>
-</ul>
-<p>The type of the MIC_TOKEN buffer may be combined with
-<strong>GSS_C_BUFFER_FLAG_ALLOCATE</strong> to request that gss_get_mic_iov
-allocate the buffer contents. If gss_get_mic_iov allocates the
-buffer, it sets the <strong>GSS_C_BUFFER_FLAG_ALLOCATED</strong> flag on the buffer
-type. gss_release_iov_buffer can be used to release all allocated
-buffers within an iov list and unset their allocated flags. Here is
-an example of how gss_get_mic_iov can be used with allocation
-requested (<em>ctx</em> is assumed to be a previously established
-gss_ctx_id_t):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">;</span>
-<span class="n">gss_iov_buffer_desc</span> <span class="n">iov</span><span class="p">[</span><span class="mi">3</span><span class="p">];</span>
-
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_DATA</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">value</span> <span class="o">=</span> <span class="s2">"sign1"</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span> <span class="o">=</span> <span class="mi">5</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_SIGN_ONLY</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">value</span> <span class="o">=</span> <span class="s2">"sign2"</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span> <span class="o">=</span> <span class="mi">5</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">2</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_MIC_TOKEN</span> <span class="o">|</span> <span class="n">GSS_IOV_BUFFER_FLAG_ALLOCATE</span><span class="p">;</span>
-
-<span class="n">major</span> <span class="o">=</span> <span class="n">gss_get_mic_iov</span><span class="p">(</span><span class="o">&</span><span class="n">minor</span><span class="p">,</span> <span class="n">ctx</span><span class="p">,</span> <span class="n">GSS_C_QOP_DEFAULT</span><span class="p">,</span> <span class="n">iov</span><span class="p">,</span> <span class="mi">3</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">GSS_ERROR</span><span class="p">(</span><span class="n">major</span><span class="p">))</span>
- <span class="n">handle_error</span><span class="p">(</span><span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">);</span>
-
-<span class="o">/*</span> <span class="n">Transmit</span> <span class="ow">or</span> <span class="n">otherwise</span> <span class="n">use</span> <span class="n">iov</span><span class="p">[</span><span class="mi">2</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span> <span class="o">*/</span>
-
-<span class="p">(</span><span class="n">void</span><span class="p">)</span><span class="n">gss_release_iov_buffer</span><span class="p">(</span><span class="o">&</span><span class="n">minor</span><span class="p">,</span> <span class="n">iov</span><span class="p">,</span> <span class="mi">3</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>If the caller does not choose to request buffer allocation by
-gss_get_mic_iov, it should first call gss_get_mic_iov_length to query
-the length of the MIC_TOKEN buffer. Here is an example of using
-gss_get_mic_iov_length and gss_get_mic_iov:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">;</span>
-<span class="n">gss_iov_buffer_desc</span> <span class="n">iov</span><span class="p">[</span><span class="mi">2</span><span class="p">];</span>
-<span class="n">char</span> <span class="n">data</span><span class="p">[</span><span class="mi">1024</span><span class="p">];</span>
-
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_MIC_TOKEN</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">type</span> <span class="o">=</span> <span class="n">GSS_IOV_BUFFER_TYPE_DATA</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">value</span> <span class="o">=</span> <span class="s2">"message"</span><span class="p">;</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span> <span class="o">=</span> <span class="mi">7</span><span class="p">;</span>
-
-<span class="n">major</span> <span class="o">=</span> <span class="n">gss_get_mic_iov_length</span><span class="p">(</span><span class="o">&</span><span class="n">minor</span><span class="p">,</span> <span class="n">ctx</span><span class="p">,</span> <span class="n">GSS_C_QOP_DEFAULT</span><span class="p">,</span> <span class="n">iov</span><span class="p">,</span> <span class="mi">2</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">GSS_ERROR</span><span class="p">(</span><span class="n">major</span><span class="p">))</span>
- <span class="n">handle_error</span><span class="p">(</span><span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">length</span> <span class="o">></span> <span class="n">sizeof</span><span class="p">(</span><span class="n">data</span><span class="p">))</span>
- <span class="n">handle_out_of_space_error</span><span class="p">();</span>
-<span class="n">iov</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span><span class="o">.</span><span class="n">buffer</span><span class="o">.</span><span class="n">value</span> <span class="o">=</span> <span class="n">data</span><span class="p">;</span>
-
-<span class="n">major</span> <span class="o">=</span> <span class="n">gss_get_mic_iov</span><span class="p">(</span><span class="o">&</span><span class="n">minor</span><span class="p">,</span> <span class="n">ctx</span><span class="p">,</span> <span class="n">GSS_C_QOP_DEFAULT</span><span class="p">,</span> <span class="n">iov</span><span class="p">,</span> <span class="mi">2</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">GSS_ERROR</span><span class="p">(</span><span class="n">major</span><span class="p">))</span>
- <span class="n">handle_error</span><span class="p">(</span><span class="n">major</span><span class="p">,</span> <span class="n">minor</span><span class="p">);</span>
-</pre></div>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Developing with GSSAPI</a><ul>
-<li><a class="reference internal" href="#name-types">Name types</a></li>
-<li><a class="reference internal" href="#initiator-credentials">Initiator credentials</a></li>
-<li><a class="reference internal" href="#acceptor-names">Acceptor names</a></li>
-<li><a class="reference internal" href="#name-attributes">Name Attributes</a></li>
-<li><a class="reference internal" href="#credential-store-extensions">Credential store extensions</a></li>
-<li><a class="reference internal" href="#importing-and-exporting-credentials">Importing and exporting credentials</a></li>
-<li><a class="reference internal" href="#constrained-delegation-s4u">Constrained delegation (S4U)</a></li>
-<li><a class="reference internal" href="#aead-message-wrapping">AEAD message wrapping</a></li>
-<li><a class="reference internal" href="#iov-message-wrapping">IOV message wrapping</a></li>
-<li><a class="reference internal" href="#iov-mic-tokens">IOV MIC tokens</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For application developers</a><ul class="current">
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2"><a class="reference internal" href="refs/index.html">Complete reference - API and datatypes</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="For application developers"
- >previous</a> |
- <a href="y2038.html" title="Year 2038 considerations for uses of krb5_timestamp"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Developing with GSSAPI">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Differences between Heimdal and MIT Kerberos API — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Initial credentials" href="init_creds.html" />
- <link rel="prev" title="Year 2038 considerations for uses of krb5_timestamp" href="y2038.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="y2038.html" title="Year 2038 considerations for uses of krb5_timestamp"
- accesskey="P">previous</a> |
- <a href="init_creds.html" title="Initial credentials"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Differences between Heimdal and MIT Kerberos API">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="differences-between-heimdal-and-mit-kerberos-api">
-<h1>Differences between Heimdal and MIT Kerberos API<a class="headerlink" href="#differences-between-heimdal-and-mit-kerberos-api" title="Permalink to this headline">¶</a></h1>
-<table border="1" class="docutils">
-<colgroup>
-<col width="45%" />
-<col width="55%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><a class="reference internal" href="refs/api/krb5_auth_con_getaddrs.html#c.krb5_auth_con_getaddrs" title="krb5_auth_con_getaddrs"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_getaddrs()</span></code></a></td>
-<td>H5l: If either of the pointers to local_addr
-and remote_addr is not NULL, it is freed
-first and then reallocated before being
-populated with the content of corresponding
-address from authentication context.</td>
-</tr>
-<tr class="row-even"><td><a class="reference internal" href="refs/api/krb5_auth_con_setaddrs.html#c.krb5_auth_con_setaddrs" title="krb5_auth_con_setaddrs"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_setaddrs()</span></code></a></td>
-<td>H5l: If either address is NULL, the previous
-address remains in place</td>
-</tr>
-<tr class="row-odd"><td><a class="reference internal" href="refs/api/krb5_auth_con_setports.html#c.krb5_auth_con_setports" title="krb5_auth_con_setports"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_setports()</span></code></a></td>
-<td>H5l: Not implemented as of version 1.3.3</td>
-</tr>
-<tr class="row-even"><td><a class="reference internal" href="refs/api/krb5_auth_con_setrecvsubkey.html#c.krb5_auth_con_setrecvsubkey" title="krb5_auth_con_setrecvsubkey"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_setrecvsubkey()</span></code></a></td>
-<td>H5l: If either port is NULL, the previous
-port remains in place</td>
-</tr>
-<tr class="row-odd"><td><a class="reference internal" href="refs/api/krb5_auth_con_setsendsubkey.html#c.krb5_auth_con_setsendsubkey" title="krb5_auth_con_setsendsubkey"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_setsendsubkey()</span></code></a></td>
-<td>H5l: Not implemented as of version 1.3.3</td>
-</tr>
-<tr class="row-even"><td><a class="reference internal" href="refs/api/krb5_cc_set_config.html#c.krb5_cc_set_config" title="krb5_cc_set_config"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_set_config()</span></code></a></td>
-<td>MIT: Before version 1.10 it was assumed that
-the last argument <em>data</em> is ALWAYS non-zero.</td>
-</tr>
-<tr class="row-odd"><td><code class="xref c c-func docutils literal"><span class="pre">krb5_cccol_last_change_time()</span></code></td>
-<td>MIT: not implemented</td>
-</tr>
-<tr class="row-even"><td><a class="reference internal" href="refs/api/krb5_set_default_realm.html#c.krb5_set_default_realm" title="krb5_set_default_realm"><code class="xref c c-func docutils literal"><span class="pre">krb5_set_default_realm()</span></code></a></td>
-<td>H5l: Caches the computed default realm context
-field. If the second argument is NULL,
-it tries to retrieve it from libdefaults or DNS.
-MIT: Computes the default realm each time
-if it wasn’t explicitly set in the context</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Differences between Heimdal and MIT Kerberos API</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2"><a class="reference internal" href="refs/index.html">Complete reference - API and datatypes</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="y2038.html" title="Year 2038 considerations for uses of krb5_timestamp"
- >previous</a> |
- <a href="init_creds.html" title="Initial credentials"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Differences between Heimdal and MIT Kerberos API">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>For application developers — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Developing with GSSAPI" href="gssapi.html" />
- <link rel="prev" title="Various links" href="../admin/various_envs.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../admin/various_envs.html" title="Various links"
- accesskey="P">previous</a> |
- <a href="gssapi.html" title="Developing with GSSAPI"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__For application developers">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="for-application-developers">
-<h1>For application developers<a class="headerlink" href="#for-application-developers" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l1"><a class="reference internal" href="y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l1"><a class="reference internal" href="h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l1"><a class="reference internal" href="init_creds.html">Initial credentials</a></li>
-<li class="toctree-l1"><a class="reference internal" href="princ_handle.html">Principal manipulation and parsing</a></li>
-</ul>
-</div>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="refs/index.html">Complete reference - API and datatypes</a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">For application developers</a><ul>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="current reference internal" href="#">For application developers</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2"><a class="reference internal" href="refs/index.html">Complete reference - API and datatypes</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../admin/various_envs.html" title="Various links"
- >previous</a> |
- <a href="gssapi.html" title="Developing with GSSAPI"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__For application developers">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Initial credentials — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Principal manipulation and parsing" href="princ_handle.html" />
- <link rel="prev" title="Differences between Heimdal and MIT Kerberos API" href="h5l_mit_apidiff.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="h5l_mit_apidiff.html" title="Differences between Heimdal and MIT Kerberos API"
- accesskey="P">previous</a> |
- <a href="princ_handle.html" title="Principal manipulation and parsing"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Initial credentials">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="initial-credentials">
-<h1>Initial credentials<a class="headerlink" href="#initial-credentials" title="Permalink to this headline">¶</a></h1>
-<p>Software that performs tasks such as logging users into a computer
-when they type their Kerberos password needs to get initial
-credentials (usually ticket granting tickets) from Kerberos. Such
-software shares some behavior with the <a class="reference internal" href="../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a> program.</p>
-<p>Whenever a program grants access to a resource (such as a local login
-session on a desktop computer) based on a user successfully getting
-initial Kerberos credentials, it must verify those credentials against
-a secure shared secret (e.g., a host keytab) to ensure that the user
-credentials actually originate from a legitimate KDC. Failure to
-perform this verification is a critical vulnerability, because a
-malicious user can execute the “Zanarotti attack”: the user constructs
-a fake response that appears to come from the legitimate KDC, but
-whose contents come from an attacker-controlled KDC.</p>
-<p>Some applications read a Kerberos password over the network (ideally
-over a secure channel), which they then verify against the KDC. While
-this technique may be the only practical way to integrate Kerberos
-into some existing legacy systems, its use is contrary to the original
-design goals of Kerberos.</p>
-<p>The function <a class="reference internal" href="refs/api/krb5_get_init_creds_password.html#c.krb5_get_init_creds_password" title="krb5_get_init_creds_password"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_password()</span></code></a> will get initial
-credentials for a client using a password. An application that needs
-to verify the credentials can call <a class="reference internal" href="refs/api/krb5_verify_init_creds.html#c.krb5_verify_init_creds" title="krb5_verify_init_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds()</span></code></a>.
-Here is an example of code to obtain and verify TGT credentials, given
-strings <em>princname</em> and <em>password</em> for the client principal name and
-password:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">krb5_error_code</span> <span class="n">ret</span><span class="p">;</span>
-<span class="n">krb5_creds</span> <span class="n">creds</span><span class="p">;</span>
-<span class="n">krb5_principal</span> <span class="n">client_princ</span> <span class="o">=</span> <span class="n">NULL</span><span class="p">;</span>
-
-<span class="n">memset</span><span class="p">(</span><span class="o">&</span><span class="n">creds</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="n">sizeof</span><span class="p">(</span><span class="n">creds</span><span class="p">));</span>
-<span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_parse_name</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="n">princname</span><span class="p">,</span> <span class="o">&</span><span class="n">client_princ</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">ret</span><span class="p">)</span>
- <span class="n">goto</span> <span class="n">cleanup</span><span class="p">;</span>
-<span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_get_init_creds_password</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">creds</span><span class="p">,</span> <span class="n">client_princ</span><span class="p">,</span>
- <span class="n">password</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">ret</span><span class="p">)</span>
- <span class="n">goto</span> <span class="n">cleanup</span><span class="p">;</span>
-<span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_verify_init_creds</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">creds</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">);</span>
-
-<span class="n">cleanup</span><span class="p">:</span>
-<span class="n">krb5_free_principal</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="n">client_princ</span><span class="p">);</span>
-<span class="n">krb5_free_cred_contents</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">creds</span><span class="p">);</span>
-<span class="k">return</span> <span class="n">ret</span><span class="p">;</span>
-</pre></div>
-</div>
-<div class="section" id="options-for-get-init-creds">
-<h2>Options for get_init_creds<a class="headerlink" href="#options-for-get-init-creds" title="Permalink to this headline">¶</a></h2>
-<p>The function <a class="reference internal" href="refs/api/krb5_get_init_creds_password.html#c.krb5_get_init_creds_password" title="krb5_get_init_creds_password"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_password()</span></code></a> takes an options
-parameter (which can be a null pointer). Use the function
-<a class="reference internal" href="refs/api/krb5_get_init_creds_opt_alloc.html#c.krb5_get_init_creds_opt_alloc" title="krb5_get_init_creds_opt_alloc"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_alloc()</span></code></a> to allocate an options
-structure, and <a class="reference internal" href="refs/api/krb5_get_init_creds_opt_free.html#c.krb5_get_init_creds_opt_free" title="krb5_get_init_creds_opt_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_free()</span></code></a> to free it. For
-example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">krb5_error_code</span> <span class="n">ret</span><span class="p">;</span>
-<span class="n">krb5_get_init_creds_opt</span> <span class="o">*</span><span class="n">opt</span> <span class="o">=</span> <span class="n">NULL</span><span class="p">;</span>
-<span class="n">krb5_creds</span> <span class="n">creds</span><span class="p">;</span>
-
-<span class="n">memset</span><span class="p">(</span><span class="o">&</span><span class="n">creds</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="n">sizeof</span><span class="p">(</span><span class="n">creds</span><span class="p">));</span>
-<span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_get_init_creds_opt_alloc</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">opt</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">ret</span><span class="p">)</span>
- <span class="n">goto</span> <span class="n">cleanup</span><span class="p">;</span>
-<span class="n">krb5_get_init_creds_opt_set_tkt_life</span><span class="p">(</span><span class="n">opt</span><span class="p">,</span> <span class="mi">24</span> <span class="o">*</span> <span class="mi">60</span> <span class="o">*</span> <span class="mi">60</span><span class="p">);</span>
-<span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_get_init_creds_password</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">creds</span><span class="p">,</span> <span class="n">client_princ</span><span class="p">,</span>
- <span class="n">password</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">opt</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">ret</span><span class="p">)</span>
- <span class="n">goto</span> <span class="n">cleanup</span><span class="p">;</span>
-
-<span class="n">cleanup</span><span class="p">:</span>
-<span class="n">krb5_get_init_creds_opt_free</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="n">opt</span><span class="p">);</span>
-<span class="n">krb5_free_cred_contents</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">creds</span><span class="p">);</span>
-<span class="k">return</span> <span class="n">ret</span><span class="p">;</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="getting-anonymous-credentials">
-<h2>Getting anonymous credentials<a class="headerlink" href="#getting-anonymous-credentials" title="Permalink to this headline">¶</a></h2>
-<p>As of release 1.8, it is possible to obtain fully anonymous or
-partially anonymous (realm-exposed) credentials, if the KDC supports
-it. The MIT KDC supports issuing fully anonymous credentials as of
-release 1.8 if configured appropriately (see <a class="reference internal" href="../admin/pkinit.html#anonymous-pkinit"><span class="std std-ref">Anonymous PKINIT</span></a>),
-but does not support issuing realm-exposed anonymous credentials at
-this time.</p>
-<p>To obtain fully anonymous credentials, call
-<a class="reference internal" href="refs/api/krb5_get_init_creds_opt_set_anonymous.html#c.krb5_get_init_creds_opt_set_anonymous" title="krb5_get_init_creds_opt_set_anonymous"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_set_anonymous()</span></code></a> on the options
-structure to set the anonymous flag, and specify a client principal
-with the KDC’s realm and a single empty data component (the principal
-obtained by parsing <code class="docutils literal"><span class="pre">@</span></code><em>realmname</em>). Authentication will take
-place using anonymous PKINIT; if successful, the client principal of
-the resulting tickets will be
-<code class="docutils literal"><span class="pre">WELLKNOWN/ANONYMOUS@WELLKNOWN:ANONYMOUS</span></code>. Here is an example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">krb5_get_init_creds_opt_set_anonymous</span><span class="p">(</span><span class="n">opt</span><span class="p">,</span> <span class="mi">1</span><span class="p">);</span>
-<span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_build_principal</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">client_princ</span><span class="p">,</span> <span class="n">strlen</span><span class="p">(</span><span class="n">myrealm</span><span class="p">),</span>
- <span class="n">myrealm</span><span class="p">,</span> <span class="s2">""</span><span class="p">,</span> <span class="p">(</span><span class="n">char</span> <span class="o">*</span><span class="p">)</span><span class="n">NULL</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">ret</span><span class="p">)</span>
- <span class="n">goto</span> <span class="n">cleanup</span><span class="p">;</span>
-<span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_get_init_creds_password</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">creds</span><span class="p">,</span> <span class="n">client_princ</span><span class="p">,</span>
- <span class="n">password</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">opt</span><span class="p">);</span>
-<span class="k">if</span> <span class="p">(</span><span class="n">ret</span><span class="p">)</span>
- <span class="n">goto</span> <span class="n">cleanup</span><span class="p">;</span>
-</pre></div>
-</div>
-<p>To obtain realm-exposed anonymous credentials, set the anonymous flag
-on the options structure as above, but specify a normal client
-principal in order to prove membership in the realm. Authentication
-will take place as it normally does; if successful, the client
-principal of the resulting tickets will be <code class="docutils literal"><span class="pre">WELLKNOWN/ANONYMOUS@</span></code><em>realmname</em>.</p>
-</div>
-<div class="section" id="user-interaction">
-<h2>User interaction<a class="headerlink" href="#user-interaction" title="Permalink to this headline">¶</a></h2>
-<p>Authenticating a user usually requires the entry of secret
-information, such as a password. A password can be supplied directly
-to <a class="reference internal" href="refs/api/krb5_get_init_creds_password.html#c.krb5_get_init_creds_password" title="krb5_get_init_creds_password"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_password()</span></code></a> via the <em>password</em>
-parameter, or the application can supply prompter and/or responder
-callbacks instead. If callbacks are used, the user can also be
-queried for other secret information such as a PIN, informed of
-impending password expiration, or prompted to change a password which
-has expired.</p>
-<div class="section" id="prompter-callback">
-<h3>Prompter callback<a class="headerlink" href="#prompter-callback" title="Permalink to this headline">¶</a></h3>
-<p>A prompter callback can be specified via the <em>prompter</em> and <em>data</em>
-parameters to <a class="reference internal" href="refs/api/krb5_get_init_creds_password.html#c.krb5_get_init_creds_password" title="krb5_get_init_creds_password"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_password()</span></code></a>. The prompter
-will be invoked each time the krb5 library has a question to ask or
-information to present. When the prompter callback is invoked, the
-<em>banner</em> argument (if not null) is intended to be displayed to the
-user, and the questions to be answered are specified in the <em>prompts</em>
-array. Each prompt contains a text question in the <em>prompt</em> field, a
-<em>hidden</em> bit to indicate whether the answer should be hidden from
-display, and a storage area for the answer in the <em>reply</em> field. The
-callback should fill in each question’s <code class="docutils literal"><span class="pre">reply->data</span></code> with the
-answer, up to a maximum number of <code class="docutils literal"><span class="pre">reply->length</span></code> bytes, and then
-reset <code class="docutils literal"><span class="pre">reply->length</span></code> to the length of the answer.</p>
-<p>A prompter callback can call <a class="reference internal" href="refs/api/krb5_get_prompt_types.html#c.krb5_get_prompt_types" title="krb5_get_prompt_types"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_prompt_types()</span></code></a> to get an
-array of type constants corresponding to the prompts, to get
-programmatic information about the semantic meaning of the questions.
-<a class="reference internal" href="refs/api/krb5_get_prompt_types.html#c.krb5_get_prompt_types" title="krb5_get_prompt_types"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_prompt_types()</span></code></a> may return a null pointer if no prompt
-type information is available.</p>
-<p>Text-based applications can use a built-in text prompter
-implementation by supplying <a class="reference internal" href="refs/api/krb5_prompter_posix.html#c.krb5_prompter_posix" title="krb5_prompter_posix"><code class="xref c c-func docutils literal"><span class="pre">krb5_prompter_posix()</span></code></a> as the
-<em>prompter</em> parameter and a null pointer as the <em>data</em> parameter. For
-example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_get_init_creds_password</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">creds</span><span class="p">,</span> <span class="n">client_princ</span><span class="p">,</span>
- <span class="n">NULL</span><span class="p">,</span> <span class="n">krb5_prompter_posix</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span>
- <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">);</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="responder-callback">
-<h3>Responder callback<a class="headerlink" href="#responder-callback" title="Permalink to this headline">¶</a></h3>
-<p>A responder callback can be specified through the init_creds options
-using the <a class="reference internal" href="refs/api/krb5_get_init_creds_opt_set_responder.html#c.krb5_get_init_creds_opt_set_responder" title="krb5_get_init_creds_opt_set_responder"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_set_responder()</span></code></a> function.
-Responder callbacks can present a more sophisticated user interface
-for authentication secrets. The responder callback is usually invoked
-only once per authentication, with a list of questions produced by all
-of the allowed preauthentication mechanisms.</p>
-<p>When the responder callback is invoked, the <em>rctx</em> argument can be
-accessed to obtain the list of questions and to answer them. The
-<a class="reference internal" href="refs/api/krb5_responder_list_questions.html#c.krb5_responder_list_questions" title="krb5_responder_list_questions"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_list_questions()</span></code></a> function retrieves an array of
-question types. For each question type, the
-<a class="reference internal" href="refs/api/krb5_responder_get_challenge.html#c.krb5_responder_get_challenge" title="krb5_responder_get_challenge"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_get_challenge()</span></code></a> function retrieves additional
-information about the question, if applicable, and the
-<a class="reference internal" href="refs/api/krb5_responder_set_answer.html#c.krb5_responder_set_answer" title="krb5_responder_set_answer"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_set_answer()</span></code></a> function sets the answer.</p>
-<p>Responder question types, challenges, and answers are UTF-8 strings.
-The question type is a well-known string; the meaning of the challenge
-and answer depend on the question type. If an application does not
-understand a question type, it cannot interpret the challenge or
-provide an answer. Failing to answer a question typically results in
-the prompter callback being used as a fallback.</p>
-<div class="section" id="password-question">
-<h4>Password question<a class="headerlink" href="#password-question" title="Permalink to this headline">¶</a></h4>
-<p>The <code class="xref c c-macro docutils literal"><span class="pre">KRB5_RESPONDER_QUESTION_PASSWORD</span></code> (or <code class="docutils literal"><span class="pre">"password"</span></code>)
-question type requests the user’s password. This question does not
-have a challenge, and the response is simply the password string.</p>
-</div>
-<div class="section" id="one-time-password-question">
-<h4>One-time password question<a class="headerlink" href="#one-time-password-question" title="Permalink to this headline">¶</a></h4>
-<p>The <code class="xref c c-macro docutils literal"><span class="pre">KRB5_RESPONDER_QUESTION_OTP</span></code> (or <code class="docutils literal"><span class="pre">"otp"</span></code>) question
-type requests a choice among one-time password tokens and the PIN and
-value for the chosen token. The challenge and answer are JSON-encoded
-strings, but an application can use convenience functions to avoid
-doing any JSON processing itself.</p>
-<p>The <a class="reference internal" href="refs/api/krb5_responder_otp_get_challenge.html#c.krb5_responder_otp_get_challenge" title="krb5_responder_otp_get_challenge"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_otp_get_challenge()</span></code></a> function decodes the
-challenge into a krb5_responder_otp_challenge structure. The
-<a class="reference internal" href="refs/api/krb5_responder_otp_set_answer.html#c.krb5_responder_otp_set_answer" title="krb5_responder_otp_set_answer"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_otp_set_answer()</span></code></a> function selects one of the
-token information elements from the challenge and supplies the value
-and pin for that token.</p>
-</div>
-<div class="section" id="pkinit-password-or-pin-question">
-<h4>PKINIT password or PIN question<a class="headerlink" href="#pkinit-password-or-pin-question" title="Permalink to this headline">¶</a></h4>
-<p>The <code class="xref c c-macro docutils literal"><span class="pre">KRB5_RESPONDER_QUESTION_PKINIT</span></code> (or <code class="docutils literal"><span class="pre">"pkinit"</span></code>) question
-type requests PINs for hardware devices and/or passwords for encrypted
-credentials which are stored on disk, potentially also supplying
-information about the state of the hardware devices. The challenge and
-answer are JSON-encoded strings, but an application can use convenience
-functions to avoid doing any JSON processing itself.</p>
-<p>The <a class="reference internal" href="refs/api/krb5_responder_pkinit_get_challenge.html#c.krb5_responder_pkinit_get_challenge" title="krb5_responder_pkinit_get_challenge"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_pkinit_get_challenge()</span></code></a> function decodes the
-challenges into a krb5_responder_pkinit_challenge structure. The
-<a class="reference internal" href="refs/api/krb5_responder_pkinit_set_answer.html#c.krb5_responder_pkinit_set_answer" title="krb5_responder_pkinit_set_answer"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_pkinit_set_answer()</span></code></a> function can be used to
-supply the PIN or password for a particular client credential, and can
-be called multiple times.</p>
-</div>
-<div class="section" id="example">
-<h4>Example<a class="headerlink" href="#example" title="Permalink to this headline">¶</a></h4>
-<p>Here is an example of using a responder callback:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">static</span> <span class="n">krb5_error_code</span>
-<span class="n">my_responder</span><span class="p">(</span><span class="n">krb5_context</span> <span class="n">context</span><span class="p">,</span> <span class="n">void</span> <span class="o">*</span><span class="n">data</span><span class="p">,</span>
- <span class="n">krb5_responder_context</span> <span class="n">rctx</span><span class="p">)</span>
-<span class="p">{</span>
- <span class="n">krb5_error_code</span> <span class="n">ret</span><span class="p">;</span>
- <span class="n">krb5_responder_otp_challenge</span> <span class="o">*</span><span class="n">chl</span><span class="p">;</span>
-
- <span class="k">if</span> <span class="p">(</span><span class="n">krb5_responder_get_challenge</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="n">rctx</span><span class="p">,</span>
- <span class="n">KRB5_RESPONDER_QUESTION_PASSWORD</span><span class="p">))</span> <span class="p">{</span>
- <span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_responder_set_answer</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="n">rctx</span><span class="p">,</span>
- <span class="n">KRB5_RESPONDER_QUESTION_PASSWORD</span><span class="p">,</span>
- <span class="s2">"open sesame"</span><span class="p">);</span>
- <span class="k">if</span> <span class="p">(</span><span class="n">ret</span><span class="p">)</span>
- <span class="k">return</span> <span class="n">ret</span><span class="p">;</span>
- <span class="p">}</span>
- <span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_responder_otp_get_challenge</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="n">rctx</span><span class="p">,</span> <span class="o">&</span><span class="n">chl</span><span class="p">);</span>
- <span class="k">if</span> <span class="p">(</span><span class="n">ret</span> <span class="o">==</span> <span class="mi">0</span> <span class="o">&&</span> <span class="n">chl</span> <span class="o">!=</span> <span class="n">NULL</span><span class="p">)</span> <span class="p">{</span>
- <span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_responder_otp_set_answer</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="n">rctx</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="s2">"1234"</span><span class="p">,</span>
- <span class="n">NULL</span><span class="p">);</span>
- <span class="n">krb5_responder_otp_challenge_free</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="n">rctx</span><span class="p">,</span> <span class="n">chl</span><span class="p">);</span>
- <span class="k">if</span> <span class="p">(</span><span class="n">ret</span><span class="p">)</span>
- <span class="k">return</span> <span class="n">ret</span><span class="p">;</span>
- <span class="p">}</span>
- <span class="k">return</span> <span class="mi">0</span><span class="p">;</span>
-<span class="p">}</span>
-
-<span class="n">static</span> <span class="n">krb5_error_code</span>
-<span class="n">get_creds</span><span class="p">(</span><span class="n">krb5_context</span> <span class="n">context</span><span class="p">,</span> <span class="n">krb5_principal</span> <span class="n">client_princ</span><span class="p">)</span>
-<span class="p">{</span>
- <span class="n">krb5_error_code</span> <span class="n">ret</span><span class="p">;</span>
- <span class="n">krb5_get_init_creds_opt</span> <span class="o">*</span><span class="n">opt</span> <span class="o">=</span> <span class="n">NULL</span><span class="p">;</span>
- <span class="n">krb5_creds</span> <span class="n">creds</span><span class="p">;</span>
-
- <span class="n">memset</span><span class="p">(</span><span class="o">&</span><span class="n">creds</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="n">sizeof</span><span class="p">(</span><span class="n">creds</span><span class="p">));</span>
- <span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_get_init_creds_opt_alloc</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">opt</span><span class="p">);</span>
- <span class="k">if</span> <span class="p">(</span><span class="n">ret</span><span class="p">)</span>
- <span class="n">goto</span> <span class="n">cleanup</span><span class="p">;</span>
- <span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_get_init_creds_opt_set_responder</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="n">opt</span><span class="p">,</span> <span class="n">my_responder</span><span class="p">,</span>
- <span class="n">NULL</span><span class="p">);</span>
- <span class="k">if</span> <span class="p">(</span><span class="n">ret</span><span class="p">)</span>
- <span class="n">goto</span> <span class="n">cleanup</span><span class="p">;</span>
- <span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_get_init_creds_password</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">creds</span><span class="p">,</span> <span class="n">client_princ</span><span class="p">,</span>
- <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">opt</span><span class="p">);</span>
-
-<span class="n">cleanup</span><span class="p">:</span>
- <span class="n">krb5_get_init_creds_opt_free</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="n">opt</span><span class="p">);</span>
- <span class="n">krb5_free_cred_contents</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">creds</span><span class="p">);</span>
- <span class="k">return</span> <span class="n">ret</span><span class="p">;</span>
-<span class="p">}</span>
-</pre></div>
-</div>
-</div>
-</div>
-</div>
-<div class="section" id="verifying-initial-credentials">
-<h2>Verifying initial credentials<a class="headerlink" href="#verifying-initial-credentials" title="Permalink to this headline">¶</a></h2>
-<p>Use the function <a class="reference internal" href="refs/api/krb5_verify_init_creds.html#c.krb5_verify_init_creds" title="krb5_verify_init_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds()</span></code></a> to verify initial
-credentials. It takes an options structure (which can be a null
-pointer). Use <a class="reference internal" href="refs/api/krb5_verify_init_creds_opt_init.html#c.krb5_verify_init_creds_opt_init" title="krb5_verify_init_creds_opt_init"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds_opt_init()</span></code></a> to initialize
-the caller-allocated options structure, and
-<a class="reference internal" href="refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail.html#c.krb5_verify_init_creds_opt_set_ap_req_nofail" title="krb5_verify_init_creds_opt_set_ap_req_nofail"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds_opt_set_ap_req_nofail()</span></code></a> to set the
-“nofail” option. For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">krb5_verify_init_creds_opt</span> <span class="n">vopt</span><span class="p">;</span>
-
-<span class="n">krb5_verify_init_creds_opt_init</span><span class="p">(</span><span class="o">&</span><span class="n">vopt</span><span class="p">);</span>
-<span class="n">krb5_verify_init_creds_opt_set_ap_req_nofail</span><span class="p">(</span><span class="o">&</span><span class="n">vopt</span><span class="p">,</span> <span class="mi">1</span><span class="p">);</span>
-<span class="n">ret</span> <span class="o">=</span> <span class="n">krb5_verify_init_creds</span><span class="p">(</span><span class="n">context</span><span class="p">,</span> <span class="o">&</span><span class="n">creds</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="n">NULL</span><span class="p">,</span> <span class="o">&</span><span class="n">vopt</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>The confusingly named “nofail” option, when set, means that the
-verification must actually succeed in order for
-<a class="reference internal" href="refs/api/krb5_verify_init_creds.html#c.krb5_verify_init_creds" title="krb5_verify_init_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds()</span></code></a> to indicate success. The default
-state of this option (cleared) means that if there is no key material
-available to verify the user credentials, the verification will
-succeed anyway. (The default can be changed by a configuration file
-setting.)</p>
-<p>This accommodates a use case where a large number of unkeyed shared
-desktop workstations need to allow users to log in using Kerberos.
-The security risks from this practice are mitigated by the absence of
-valuable state on the shared workstations—any valuable resources
-that the users would access reside on networked servers.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Initial credentials</a><ul>
-<li><a class="reference internal" href="#options-for-get-init-creds">Options for get_init_creds</a></li>
-<li><a class="reference internal" href="#getting-anonymous-credentials">Getting anonymous credentials</a></li>
-<li><a class="reference internal" href="#user-interaction">User interaction</a><ul>
-<li><a class="reference internal" href="#prompter-callback">Prompter callback</a></li>
-<li><a class="reference internal" href="#responder-callback">Responder callback</a><ul>
-<li><a class="reference internal" href="#password-question">Password question</a></li>
-<li><a class="reference internal" href="#one-time-password-question">One-time password question</a></li>
-<li><a class="reference internal" href="#pkinit-password-or-pin-question">PKINIT password or PIN question</a></li>
-<li><a class="reference internal" href="#example">Example</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li><a class="reference internal" href="#verifying-initial-credentials">Verifying initial credentials</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2"><a class="reference internal" href="refs/index.html">Complete reference - API and datatypes</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="h5l_mit_apidiff.html" title="Differences between Heimdal and MIT Kerberos API"
- >previous</a> |
- <a href="princ_handle.html" title="Principal manipulation and parsing"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Initial credentials">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Principal manipulation and parsing — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Complete reference - API and datatypes" href="refs/index.html" />
- <link rel="prev" title="Initial credentials" href="init_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="init_creds.html" title="Initial credentials"
- accesskey="P">previous</a> |
- <a href="refs/index.html" title="Complete reference - API and datatypes"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Principal manipulation and parsing">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="principal-manipulation-and-parsing">
-<h1>Principal manipulation and parsing<a class="headerlink" href="#principal-manipulation-and-parsing" title="Permalink to this headline">¶</a></h1>
-<p>Kerberos principal structure</p>
-<p><a class="reference internal" href="refs/types/krb5_principal_data.html#c.krb5_principal_data" title="krb5_principal_data"><code class="xref c c-type docutils literal"><span class="pre">krb5_principal_data</span></code></a></p>
-<p><a class="reference internal" href="refs/types/krb5_principal.html#c.krb5_principal" title="krb5_principal"><code class="xref c c-type docutils literal"><span class="pre">krb5_principal</span></code></a></p>
-<p>Create and free principal</p>
-<p><a class="reference internal" href="refs/api/krb5_build_principal.html#c.krb5_build_principal" title="krb5_build_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_build_principal()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_build_principal_alloc_va.html#c.krb5_build_principal_alloc_va" title="krb5_build_principal_alloc_va"><code class="xref c c-func docutils literal"><span class="pre">krb5_build_principal_alloc_va()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_build_principal_ext.html#c.krb5_build_principal_ext" title="krb5_build_principal_ext"><code class="xref c c-func docutils literal"><span class="pre">krb5_build_principal_ext()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_copy_principal.html#c.krb5_copy_principal" title="krb5_copy_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_copy_principal()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_free_principal.html#c.krb5_free_principal" title="krb5_free_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_principal()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_cc_get_principal.html#c.krb5_cc_get_principal" title="krb5_cc_get_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_get_principal()</span></code></a></p>
-<p>Comparing</p>
-<p><a class="reference internal" href="refs/api/krb5_principal_compare.html#c.krb5_principal_compare" title="krb5_principal_compare"><code class="xref c c-func docutils literal"><span class="pre">krb5_principal_compare()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_principal_compare_flags.html#c.krb5_principal_compare_flags" title="krb5_principal_compare_flags"><code class="xref c c-func docutils literal"><span class="pre">krb5_principal_compare_flags()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_principal_compare_any_realm.html#c.krb5_principal_compare_any_realm" title="krb5_principal_compare_any_realm"><code class="xref c c-func docutils literal"><span class="pre">krb5_principal_compare_any_realm()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_sname_match.html#c.krb5_sname_match" title="krb5_sname_match"><code class="xref c c-func docutils literal"><span class="pre">krb5_sname_match()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_sname_to_principal.html#c.krb5_sname_to_principal" title="krb5_sname_to_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_sname_to_principal()</span></code></a></p>
-<p>Parsing:</p>
-<p><a class="reference internal" href="refs/api/krb5_parse_name.html#c.krb5_parse_name" title="krb5_parse_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_parse_name()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_parse_name_flags.html#c.krb5_parse_name_flags" title="krb5_parse_name_flags"><code class="xref c c-func docutils literal"><span class="pre">krb5_parse_name_flags()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_unparse_name.html#c.krb5_unparse_name" title="krb5_unparse_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_unparse_name()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_unparse_name_flags.html#c.krb5_unparse_name_flags" title="krb5_unparse_name_flags"><code class="xref c c-func docutils literal"><span class="pre">krb5_unparse_name_flags()</span></code></a></p>
-<p>Utilities:</p>
-<p><a class="reference internal" href="refs/api/krb5_is_config_principal.html#c.krb5_is_config_principal" title="krb5_is_config_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_is_config_principal()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_kuserok.html#c.krb5_kuserok" title="krb5_kuserok"><code class="xref c c-func docutils literal"><span class="pre">krb5_kuserok()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_set_password.html#c.krb5_set_password" title="krb5_set_password"><code class="xref c c-func docutils literal"><span class="pre">krb5_set_password()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_set_password_using_ccache.html#c.krb5_set_password_using_ccache" title="krb5_set_password_using_ccache"><code class="xref c c-func docutils literal"><span class="pre">krb5_set_password_using_ccache()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_set_principal_realm.html#c.krb5_set_principal_realm" title="krb5_set_principal_realm"><code class="xref c c-func docutils literal"><span class="pre">krb5_set_principal_realm()</span></code></a></p>
-<p><a class="reference internal" href="refs/api/krb5_realm_compare.html#c.krb5_realm_compare" title="krb5_realm_compare"><code class="xref c c-func docutils literal"><span class="pre">krb5_realm_compare()</span></code></a></p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Principal manipulation and parsing</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Principal manipulation and parsing</a></li>
-<li class="toctree-l2"><a class="reference internal" href="refs/index.html">Complete reference - API and datatypes</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="init_creds.html" title="Initial credentials"
- >previous</a> |
- <a href="refs/index.html" title="Complete reference - API and datatypes"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Principal manipulation and parsing">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5 API — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_build_principal - Build a principal name using null-terminated strings." href="krb5_build_principal.html" />
- <link rel="prev" title="Complete reference - API and datatypes" href="../index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../index.html" title="Complete reference - API and datatypes"
- accesskey="P">previous</a> |
- <a href="krb5_build_principal.html" title="krb5_build_principal - Build a principal name using null-terminated strings."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5 API">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-api">
-<h1>krb5 API<a class="headerlink" href="#krb5-api" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="frequently-used-public-interfaces">
-<h2>Frequently used public interfaces<a class="headerlink" href="#frequently-used-public-interfaces" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="krb5_build_principal.html">krb5_build_principal - Build a principal name using null-terminated strings.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_build_principal_alloc_va.html">krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_build_principal_ext.html">krb5_build_principal_ext - Build a principal name using length-counted strings.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_close.html">krb5_cc_close - Close a credential cache handle.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_default.html">krb5_cc_default - Resolve the default credential cache name.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_default_name.html">krb5_cc_default_name - Return the name of the default credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_destroy.html">krb5_cc_destroy - Destroy a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_dup.html">krb5_cc_dup - Duplicate ccache handle.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_get_name.html">krb5_cc_get_name - Retrieve the name, but not type of a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_get_principal.html">krb5_cc_get_principal - Get the default principal of a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_get_type.html">krb5_cc_get_type - Retrieve the type of a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_initialize.html">krb5_cc_initialize - Initialize a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_new_unique.html">krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_resolve.html">krb5_cc_resolve - Resolve a credential cache name.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_change_password.html">krb5_change_password - Change a password for an existing Kerberos account.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_chpw_message.html">krb5_chpw_message - Get a result message for changing or setting a password.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_expand_hostname.html">krb5_expand_hostname - Canonicalize a hostname, possibly using name service.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_context.html">krb5_free_context - Free a krb5 library context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_error_message.html">krb5_free_error_message - Free an error message generated by krb5_get_error_message() .</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_principal.html">krb5_free_principal - Free the storage assigned to a principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_fwd_tgt_creds.html">krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_default_realm.html">krb5_get_default_realm - Retrieve the default realm.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_error_message.html">krb5_get_error_message - Get the (possibly extended) error message for a code.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_host_realm.html">krb5_get_host_realm - Get the Kerberos realm names for a host.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_credentials.html">krb5_get_credentials - Get an additional ticket.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_fallback_host_realm.html">krb5_get_fallback_host_realm</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_keytab.html">krb5_get_init_creds_keytab - Get initial credentials using a key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_alloc.html">krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_free.html">krb5_get_init_creds_opt_free - Free initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_get_fast_flags.html">krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_address_list.html">krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_anonymous.html">krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_canonicalize.html">krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_change_password_prompt.html">krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_etype_list.html">krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_expire_callback.html">krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_fast_ccache.html">krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_fast_ccache_name.html">krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_fast_flags.html">krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_forwardable.html">krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_in_ccache.html">krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_out_ccache.html">krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_pa.html">krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_pac_request.html">krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_preauth_list.html">krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_proxiable.html">krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_renew_life.html">krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_responder.html">krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_salt.html">krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_set_tkt_life.html">krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_password.html">krb5_get_init_creds_password - Get initial credentials using a password.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_profile.html">krb5_get_profile - Retrieve configuration profile from the context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_prompt_types.html">krb5_get_prompt_types - Get prompt types array from a context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_renewed_creds.html">krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_validated_creds.html">krb5_get_validated_creds - Get validated credentials from the KDC.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_context.html">krb5_init_context - Create a krb5 library context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_secure_context.html">krb5_init_secure_context - Create a krb5 library context using only configuration files.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_is_config_principal.html">krb5_is_config_principal - Test whether a principal is a configuration principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_is_thread_safe.html">krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_close.html">krb5_kt_close - Close a key table handle.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_client_default.html">krb5_kt_client_default - Resolve the default client key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_default.html">krb5_kt_default - Resolve the default key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_default_name.html">krb5_kt_default_name - Get the default key table name.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_dup.html">krb5_kt_dup - Duplicate keytab handle.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_get_name.html">krb5_kt_get_name - Get a key table name.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_get_type.html">krb5_kt_get_type - Return the type of a key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_resolve.html">krb5_kt_resolve - Get a handle for a key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kuserok.html">krb5_kuserok - Determine if a principal is authorized to log in as a local user.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_parse_name.html">krb5_parse_name - Convert a string principal name to a krb5_principal structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_parse_name_flags.html">krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_principal_compare.html">krb5_principal_compare - Compare two principals.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_principal_compare_any_realm.html">krb5_principal_compare_any_realm - Compare two principals ignoring realm components.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_principal_compare_flags.html">krb5_principal_compare_flags - Compare two principals with additional flags.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_prompter_posix.html">krb5_prompter_posix - Prompt user for password.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_realm_compare.html">krb5_realm_compare - Compare the realms of two principals.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_get_challenge.html">krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_list_questions.html">krb5_responder_list_questions - List the question names contained in the responder context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_set_answer.html">krb5_responder_set_answer - Answer a named question in the responder context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_otp_get_challenge.html">krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_otp_set_answer.html">krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_otp_challenge_free.html">krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() .</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_pkinit_get_challenge.html">krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_pkinit_set_answer.html">krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_pkinit_challenge_free.html">krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() .</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_default_realm.html">krb5_set_default_realm - Override the default realm for the specified context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_password.html">krb5_set_password - Set a password for a principal using specified credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_password_using_ccache.html">krb5_set_password_using_ccache - Set a password for a principal using cached credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_principal_realm.html">krb5_set_principal_realm - Set the realm field of a principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_trace_callback.html">krb5_set_trace_callback - Specify a callback function for trace events.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_trace_filename.html">krb5_set_trace_filename - Specify a file name for directing trace events.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_sname_match.html">krb5_sname_match - Test whether a principal matches a matching principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_sname_to_principal.html">krb5_sname_to_principal - Generate a full principal name from a service name.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_unparse_name.html">krb5_unparse_name - Convert a krb5_principal structure to a string representation.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_unparse_name_ext.html">krb5_unparse_name_ext - Convert krb5_principal structure to string and length.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_unparse_name_flags.html">krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_unparse_name_flags_ext.html">krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_us_timeofday.html">krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_verify_authdata_kdc_issued.html">krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data.</a></li>
-</ul>
-</div>
-</div>
-<div class="section" id="rarely-used-public-interfaces">
-<h2>Rarely used public interfaces<a class="headerlink" href="#rarely-used-public-interfaces" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="krb5_425_conv_principal.html">krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_524_conv_principal.html">krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_address_compare.html">krb5_address_compare - Compare two Kerberos addresses.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_address_order.html">krb5_address_order - Return an ordering of the specified addresses.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_address_search.html">krb5_address_search - Search a list of addresses for a specified address.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_allow_weak_crypto.html">krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_aname_to_localname.html">krb5_aname_to_localname - Convert a principal name to a local name.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_anonymous_principal.html">krb5_anonymous_principal - Build an anonymous principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_anonymous_realm.html">krb5_anonymous_realm - Return an anonymous realm data.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_appdefault_boolean.html">krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_appdefault_string.html">krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_free.html">krb5_auth_con_free - Free a krb5_auth_context structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_genaddrs.html">krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_get_checksum_func.html">krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getaddrs.html">krb5_auth_con_getaddrs - Retrieve address fields from an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getauthenticator.html">krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getflags.html">krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getkey.html">krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getkey_k.html">krb5_auth_con_getkey_k - Retrieve the session key from an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getlocalseqnumber.html">krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getrcache.html">krb5_auth_con_getrcache - Retrieve the replay cache from an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getrecvsubkey.html">krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getrecvsubkey_k.html">krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getremoteseqnumber.html">krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getsendsubkey.html">krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getsendsubkey_k.html">krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_init.html">krb5_auth_con_init - Create and initialize an authentication context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_set_checksum_func.html">krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_set_req_cksumtype.html">krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_setaddrs.html">krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_setflags.html">krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_setports.html">krb5_auth_con_setports - Set local and remote port fields in an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_setrcache.html">krb5_auth_con_setrcache - Set the replay cache in an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_setrecvsubkey.html">krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_setrecvsubkey_k.html">krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_setsendsubkey.html">krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_setsendsubkey_k.html">krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_setuseruserkey.html">krb5_auth_con_setuseruserkey - Set the session key in an auth context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_cache_match.html">krb5_cc_cache_match - Find a credential cache with a specified client principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_copy_creds.html">krb5_cc_copy_creds - Copy a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_end_seq_get.html">krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_get_config.html">krb5_cc_get_config - Get a configuration value from a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_get_flags.html">krb5_cc_get_flags - Retrieve flags from a credential cache structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_get_full_name.html">krb5_cc_get_full_name - Retrieve the full name of a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_move.html">krb5_cc_move - Move a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_next_cred.html">krb5_cc_next_cred - Retrieve the next entry from the credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_remove_cred.html">krb5_cc_remove_cred - Remove credentials from a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_retrieve_cred.html">krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_select.html">krb5_cc_select - Select a credential cache to use with a server principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_set_config.html">krb5_cc_set_config - Store a configuration value in a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_set_default_name.html">krb5_cc_set_default_name - Set the default credential cache name.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_set_flags.html">krb5_cc_set_flags - Set options flags on a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_start_seq_get.html">krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_store_cred.html">krb5_cc_store_cred - Store credentials in a credential cache.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_support_switch.html">krb5_cc_support_switch - Determine whether a credential cache type supports switching.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_switch.html">krb5_cc_switch - Make a credential cache the primary cache for its collection.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cccol_cursor_free.html">krb5_cccol_cursor_free - Free a credential cache collection cursor.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cccol_cursor_new.html">krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cccol_cursor_next.html">krb5_cccol_cursor_next - Get the next credential cache in the collection.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cccol_have_content.html">krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_clear_error_message.html">krb5_clear_error_message - Clear the extended error message in a context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_check_clockskew.html">krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_addresses.html">krb5_copy_addresses - Copy an array of addresses.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_authdata.html">krb5_copy_authdata - Copy an authorization data list.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_authenticator.html">krb5_copy_authenticator - Copy a krb5_authenticator structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_checksum.html">krb5_copy_checksum - Copy a krb5_checksum structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_context.html">krb5_copy_context - Copy a krb5_context structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_creds.html">krb5_copy_creds - Copy a krb5_creds structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_data.html">krb5_copy_data - Copy a krb5_data object.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_error_message.html">krb5_copy_error_message - Copy the most recent extended error message from one context to another.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_keyblock.html">krb5_copy_keyblock - Copy a keyblock.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_keyblock_contents.html">krb5_copy_keyblock_contents - Copy the contents of a keyblock.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_principal.html">krb5_copy_principal - Copy a principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_copy_ticket.html">krb5_copy_ticket - Copy a krb5_ticket structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_find_authdata.html">krb5_find_authdata - Find authorization data elements.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_addresses.html">krb5_free_addresses - Free the data stored in array of addresses.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_ap_rep_enc_part.html">krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_authdata.html">krb5_free_authdata - Free the storage assigned to array of authentication data.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_authenticator.html">krb5_free_authenticator - Free a krb5_authenticator structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_cred_contents.html">krb5_free_cred_contents - Free the contents of a krb5_creds structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_creds.html">krb5_free_creds - Free a krb5_creds structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_data.html">krb5_free_data - Free a krb5_data structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_data_contents.html">krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_default_realm.html">krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() .</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_enctypes.html">krb5_free_enctypes - Free an array of encryption types.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_error.html">krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() .</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_host_realm.html">krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() .</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_keyblock.html">krb5_free_keyblock - Free a krb5_keyblock structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_keyblock_contents.html">krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_keytab_entry_contents.html">krb5_free_keytab_entry_contents - Free the contents of a key table entry.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_string.html">krb5_free_string - Free a string allocated by a krb5 function.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_ticket.html">krb5_free_ticket - Free a ticket.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_unparsed_name.html">krb5_free_unparsed_name - Free a string representation of a principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_etype_info.html">krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_permitted_enctypes.html">krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_server_rcache.html">krb5_get_server_rcache - Generate a replay cache object for server use and open it.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_time_offsets.html">krb5_get_time_offsets - Return the time offsets from the os context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_context_profile.html">krb5_init_context_profile - Create a krb5 library context using a specified profile.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_free.html">krb5_init_creds_free - Free an initial credentials context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_get.html">krb5_init_creds_get - Acquire credentials using an initial credentials context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_get_creds.html">krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_get_error.html">krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_get_times.html">krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_init.html">krb5_init_creds_init - Create a context for acquiring initial credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_set_keytab.html">krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_set_password.html">krb5_init_creds_set_password - Set a password for acquiring initial credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_set_service.html">krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_step.html">krb5_init_creds_step - Get the next KDC request for acquiring initial credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_keyblock.html">krb5_init_keyblock - Initialize an empty krb5_keyblock .</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_is_referral_realm.html">krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kdc_sign_ticket.html">krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kdc_verify_ticket.html">krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_add_entry.html">krb5_kt_add_entry - Add a new entry to a key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_end_seq_get.html">krb5_kt_end_seq_get - Release a keytab cursor.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_get_entry.html">krb5_kt_get_entry - Get an entry from a key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_have_content.html">krb5_kt_have_content - Check if a keytab exists and contains entries.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_next_entry.html">krb5_kt_next_entry - Retrieve the next entry from the key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_read_service_key.html">krb5_kt_read_service_key - Retrieve a service key from a key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_remove_entry.html">krb5_kt_remove_entry - Remove an entry from a key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_start_seq_get.html">krb5_kt_start_seq_get - Start a sequential retrieval of key table entries.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_make_authdata_kdc_issued.html">krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_marshal_credentials.html">krb5_marshal_credentials - Serialize a krb5_creds object.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_merge_authdata.html">krb5_merge_authdata - Merge two authorization data lists into a new list.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_mk_1cred.html">krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_mk_error.html">krb5_mk_error - Format and encode a KRB_ERROR message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_mk_ncred.html">krb5_mk_ncred - Format a KRB-CRED message for an array of credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_mk_priv.html">krb5_mk_priv - Format a KRB-PRIV message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_mk_rep.html">krb5_mk_rep - Format and encrypt a KRB_AP_REP message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_mk_rep_dce.html">krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_mk_req.html">krb5_mk_req - Create a KRB_AP_REQ message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_mk_req_extended.html">krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_mk_safe.html">krb5_mk_safe - Format a KRB-SAFE message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_os_localaddr.html">krb5_os_localaddr - Return all interface addresses for this host.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_add_buffer.html">krb5_pac_add_buffer - Add a buffer to a PAC handle.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_free.html">krb5_pac_free - Free a PAC handle.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_get_buffer.html">krb5_pac_get_buffer - Retrieve a buffer value from a PAC.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_get_types.html">krb5_pac_get_types - Return an array of buffer types in a PAC handle.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_init.html">krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_parse.html">krb5_pac_parse - Unparse an encoded PAC into a new handle.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_sign.html">krb5_pac_sign</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_sign_ext.html">krb5_pac_sign_ext</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_verify.html">krb5_pac_verify - Verify a PAC.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_verify_ext.html">krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac_get_client_info.html">krb5_pac_get_client_info - Read client information from a PAC.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_prepend_error_message.html">krb5_prepend_error_message - Add a prefix to the message for an error code.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_principal2salt.html">krb5_principal2salt - Convert a principal name into the default salt for that principal.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_rd_cred.html">krb5_rd_cred - Read and validate a KRB-CRED message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_rd_error.html">krb5_rd_error - Decode a KRB-ERROR message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_rd_priv.html">krb5_rd_priv - Process a KRB-PRIV message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_rd_rep.html">krb5_rd_rep - Parse and decrypt a KRB_AP_REP message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_rd_rep_dce.html">krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_rd_req.html">krb5_rd_req - Parse and decrypt a KRB_AP_REQ message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_rd_safe.html">krb5_rd_safe - Process KRB-SAFE message.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_read_password.html">krb5_read_password - Read a password from keyboard input.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_salttype_to_string.html">krb5_salttype_to_string - Convert a salt type to a string.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_server_decrypt_ticket_keytab.html">krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_default_tgs_enctypes.html">krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_error_message.html">krb5_set_error_message - Set an extended error message for an error code.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_kdc_recv_hook.html">krb5_set_kdc_recv_hook - Set a KDC post-receive hook function.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_kdc_send_hook.html">krb5_set_kdc_send_hook - Set a KDC pre-send hook function.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_set_real_time.html">krb5_set_real_time - Set time offset field in a krb5_context structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_string_to_cksumtype.html">krb5_string_to_cksumtype - Convert a string to a checksum type.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_string_to_deltat.html">krb5_string_to_deltat - Convert a string to a delta time value.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_string_to_enctype.html">krb5_string_to_enctype - Convert a string to an encryption type.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_string_to_salttype.html">krb5_string_to_salttype - Convert a string to a salt type.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_string_to_timestamp.html">krb5_string_to_timestamp - Convert a string to a timestamp.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_timeofday.html">krb5_timeofday - Retrieve the current time with context specific time offset adjustment.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_timestamp_to_sfstring.html">krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_timestamp_to_string.html">krb5_timestamp_to_string - Convert a timestamp to a string.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_tkt_creds_free.html">krb5_tkt_creds_free - Free a TGS request context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_tkt_creds_get.html">krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_tkt_creds_get_creds.html">krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_tkt_creds_get_times.html">krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_tkt_creds_init.html">krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_tkt_creds_step.html">krb5_tkt_creds_step - Get the next KDC request in a TGS exchange.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_unmarshal_credentials.html">krb5_unmarshal_credentials - Deserialize a krb5_creds object.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_verify_init_creds.html">krb5_verify_init_creds - Verify initial credentials against a keytab.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_verify_init_creds_opt_init.html">krb5_verify_init_creds_opt_init - Initialize a credential verification options structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_verify_init_creds_opt_set_ap_req_nofail.html">krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_vprepend_error_message.html">krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_vset_error_message.html">krb5_vset_error_message - Set an extended error message for an error code using a va_list.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_vwrap_error_message.html">krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_wrap_error_message.html">krb5_wrap_error_message - Add a prefix to a different error code’s message.</a></li>
-</ul>
-</div>
-</div>
-<div class="section" id="public-interfaces-that-should-not-be-called-directly">
-<h2>Public interfaces that should not be called directly<a class="headerlink" href="#public-interfaces-that-should-not-be-called-directly" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_block_size.html">krb5_c_block_size - Return cipher block size.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_checksum_length.html">krb5_c_checksum_length - Return the length of checksums for a checksum type.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_crypto_length.html">krb5_c_crypto_length - Return a length of a message field specific to the encryption type.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_crypto_length_iov.html">krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_decrypt.html">krb5_c_decrypt - Decrypt data using a key (operates on keyblock).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_decrypt_iov.html">krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_derive_prfplus.html">krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_encrypt.html">krb5_c_encrypt - Encrypt data using a key (operates on keyblock).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_encrypt_iov.html">krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_encrypt_length.html">krb5_c_encrypt_length - Compute encrypted data length.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_enctype_compare.html">krb5_c_enctype_compare - Compare two encryption types.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_free_state.html">krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() .</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_fx_cf2_simple.html">krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_init_state.html">krb5_c_init_state - Initialize a new cipher state.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_is_coll_proof_cksum.html">krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_is_keyed_cksum.html">krb5_c_is_keyed_cksum - Test whether a checksum type is keyed.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_keyed_checksum_types.html">krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_keylengths.html">krb5_c_keylengths - Return length of the specified key in bytes.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_make_checksum.html">krb5_c_make_checksum - Compute a checksum (operates on keyblock).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_make_checksum_iov.html">krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_make_random_key.html">krb5_c_make_random_key - Generate an enctype-specific random encryption key.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_padding_length.html">krb5_c_padding_length - Return a number of padding octets.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_prf.html">krb5_c_prf - Generate enctype-specific pseudo-random bytes.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_prfplus.html">krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_prf_length.html">krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_random_add_entropy.html">krb5_c_random_add_entropy</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_random_make_octets.html">krb5_c_random_make_octets - Generate pseudo-random bytes.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_random_os_entropy.html">krb5_c_random_os_entropy</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_random_to_key.html">krb5_c_random_to_key - Generate an enctype-specific key from random data.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_string_to_key.html">krb5_c_string_to_key - Convert a string (such a password) to a key.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_string_to_key_with_params.html">krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_valid_cksumtype.html">krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_valid_enctype.html">krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_verify_checksum.html">krb5_c_verify_checksum - Verify a checksum (operates on keyblock).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_verify_checksum_iov.html">krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cksumtype_to_string.html">krb5_cksumtype_to_string - Convert a checksum type to a string.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_decode_authdata_container.html">krb5_decode_authdata_container - Unwrap authorization data.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_decode_ticket.html">krb5_decode_ticket - Decode an ASN.1-formatted ticket.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_deltat_to_string.html">krb5_deltat_to_string - Convert a relative time value to a string.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_encode_authdata_container.html">krb5_encode_authdata_container - Wrap authorization data in a container.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_enctype_to_name.html">krb5_enctype_to_name - Convert an encryption type to a name or alias.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_enctype_to_string.html">krb5_enctype_to_string - Convert an encryption type to a string.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_checksum.html">krb5_free_checksum - Free a krb5_checksum structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_checksum_contents.html">krb5_free_checksum_contents - Free the contents of a krb5_checksum structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_cksumtypes.html">krb5_free_cksumtypes - Free an array of checksum types.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_free_tgt_creds.html">krb5_free_tgt_creds - Free an array of credential structures.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_create_key.html">krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_decrypt.html">krb5_k_decrypt - Decrypt data using a key (operates on opaque key).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_decrypt_iov.html">krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_encrypt.html">krb5_k_encrypt - Encrypt data using a key (operates on opaque key).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_encrypt_iov.html">krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_free_key.html">krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_key_enctype.html">krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_key_keyblock.html">krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_make_checksum.html">krb5_k_make_checksum - Compute a checksum (operates on opaque key).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_make_checksum_iov.html">krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_prf.html">krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_reference_key.html">krb5_k_reference_key - Increment the reference count on a key.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_verify_checksum.html">krb5_k_verify_checksum - Verify a checksum (operates on opaque key).</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_k_verify_checksum_iov.html">krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key).</a></li>
-</ul>
-</div>
-</div>
-<div class="section" id="legacy-convenience-interfaces">
-<h2>Legacy convenience interfaces<a class="headerlink" href="#legacy-convenience-interfaces" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="krb5_recvauth.html">krb5_recvauth - Server function for sendauth protocol.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_recvauth_version.html">krb5_recvauth_version - Server function for sendauth protocol with version parameter.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_sendauth.html">krb5_sendauth - Client function for sendauth protocol.</a></li>
-</ul>
-</div>
-</div>
-<div class="section" id="deprecated-public-interfaces">
-<h2>Deprecated public interfaces<a class="headerlink" href="#deprecated-public-interfaces" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="krb5_524_convert_creds.html">krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getlocalsubkey.html">krb5_auth_con_getlocalsubkey</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_getremotesubkey.html">krb5_auth_con_getremotesubkey</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_con_initivector.html">krb5_auth_con_initivector - Cause an auth context to use cipher state.</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_build_principal_va.html">krb5_build_principal_va</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_c_random_seed.html">krb5_c_random_seed</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_calculate_checksum.html">krb5_calculate_checksum</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_checksum_size.html">krb5_checksum_size</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_encrypt.html">krb5_encrypt</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_decrypt.html">krb5_decrypt</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_eblock_enctype.html">krb5_eblock_enctype</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_encrypt_size.html">krb5_encrypt_size</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_finish_key.html">krb5_finish_key</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_finish_random_key.html">krb5_finish_random_key</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_gen_new.html">krb5_cc_gen_new</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_credentials_renew.html">krb5_get_credentials_renew</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_credentials_validate.html">krb5_get_credentials_validate</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_in_tkt_with_password.html">krb5_get_in_tkt_with_password</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_in_tkt_with_skey.html">krb5_get_in_tkt_with_skey</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_in_tkt_with_keytab.html">krb5_get_in_tkt_with_keytab</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt_init.html">krb5_get_init_creds_opt_init</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_random_key.html">krb5_init_random_key</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_free_entry.html">krb5_kt_free_entry</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_random_key.html">krb5_random_key</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_process_key.html">krb5_process_key</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_string_to_key.html">krb5_string_to_key</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_use_enctype.html">krb5_use_enctype</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_verify_checksum.html">krb5_verify_checksum</a></li>
-</ul>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5 API</a><ul>
-<li><a class="reference internal" href="#frequently-used-public-interfaces">Frequently used public interfaces</a></li>
-<li><a class="reference internal" href="#rarely-used-public-interfaces">Rarely used public interfaces</a></li>
-<li><a class="reference internal" href="#public-interfaces-that-should-not-be-called-directly">Public interfaces that should not be called directly</a></li>
-<li><a class="reference internal" href="#legacy-convenience-interfaces">Legacy convenience interfaces</a></li>
-<li><a class="reference internal" href="#deprecated-public-interfaces">Deprecated public interfaces</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="current reference internal" href="#">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../index.html" title="Complete reference - API and datatypes"
- >previous</a> |
- <a href="krb5_build_principal.html" title="krb5_build_principal - Build a principal name using null-terminated strings."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5 API">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal." href="krb5_524_conv_principal.html" />
- <link rel="prev" title="krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data." href="krb5_verify_authdata_kdc_issued.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_verify_authdata_kdc_issued.html" title="krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data."
- accesskey="P">previous</a> |
- <a href="krb5_524_conv_principal.html" title="krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-425-conv-principal-convert-a-kerberos-v4-principal-to-a-kerberos-v5-principal">
-<h1>krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal.<a class="headerlink" href="#krb5-425-conv-principal-convert-a-kerberos-v4-principal-to-a-kerberos-v5-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_425_conv_principal">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_425_conv_principal</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> name</em>, const char *<em> instance</em>, const char *<em> realm</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> princ</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_425_conv_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>name</strong> - V4 name</p>
-<p><strong>[in]</strong> <strong>instance</strong> - V4 instance</p>
-<p><strong>[in]</strong> <strong>realm</strong> - Realm</p>
-<p class="last"><strong>[out]</strong> <strong>princ</strong> - V5 principal</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function builds a <em>princ</em> from V4 specification based on given input <em>name.instance@realm</em> .</p>
-<p>Use <a class="reference internal" href="krb5_free_principal.html#c.krb5_free_principal" title="krb5_free_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_principal()</span></code></a> to free <em>princ</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_verify_authdata_kdc_issued.html" title="krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data."
- >previous</a> |
- <a href="krb5_524_conv_principal.html" title="krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_address_compare - Compare two Kerberos addresses." href="krb5_address_compare.html" />
- <link rel="prev" title="krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal." href="krb5_425_conv_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_425_conv_principal.html" title="krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal."
- accesskey="P">previous</a> |
- <a href="krb5_address_compare.html" title="krb5_address_compare - Compare two Kerberos addresses."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-524-conv-principal-convert-a-kerberos-v5-principal-to-a-kerberos-v4-principal">
-<h1>krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal.<a class="headerlink" href="#krb5-524-conv-principal-convert-a-kerberos-v5-principal-to-a-kerberos-v4-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_524_conv_principal">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_524_conv_principal</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> princ</em>, char *<em> name</em>, char *<em> inst</em>, char *<em> realm</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_524_conv_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>princ</strong> - V5 Principal</p>
-<p><strong>[out]</strong> <strong>name</strong> - V4 principal’s name to be filled in</p>
-<p><strong>[out]</strong> <strong>inst</strong> - V4 principal’s instance name to be filled in</p>
-<p class="last"><strong>[out]</strong> <strong>realm</strong> - Principal’s realm name to be filled in</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>KRB5_INVALID_PRINCIPAL Invalid principal name</li>
-<li>KRB5_CONFIG_CANTOPEN Can’t open or find Kerberos configuration file</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function separates a V5 principal <em>princ</em> into <em>name</em> , <em>instance</em> , and <em>realm</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_425_conv_principal.html" title="krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal."
- >previous</a> |
- <a href="krb5_address_compare.html" title="krb5_address_compare - Compare two Kerberos addresses."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getlocalsubkey" href="krb5_auth_con_getlocalsubkey.html" />
- <link rel="prev" title="krb5_sendauth - Client function for sendauth protocol." href="krb5_sendauth.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_sendauth.html" title="krb5_sendauth - Client function for sendauth protocol."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getlocalsubkey.html" title="krb5_auth_con_getlocalsubkey"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-524-convert-creds-convert-a-kerberos-v5-credentials-to-a-kerberos-v4-credentials">
-<h1>krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials.<a class="headerlink" href="#krb5-524-convert-creds-convert-a-kerberos-v5-credentials-to-a-kerberos-v4-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_524_convert_creds">
-int <code class="descname">krb5_524_convert_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> v5creds</em>, struct credentials *<em> v4creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_524_convert_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>v5creds</strong></p>
-<p class="last"><strong>v4creds</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>KRB524_KRB4_DISABLED (always)</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Not implemented</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_sendauth.html" title="krb5_sendauth - Client function for sendauth protocol."
- >previous</a> |
- <a href="krb5_auth_con_getlocalsubkey.html" title="krb5_auth_con_getlocalsubkey"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_address_compare - Compare two Kerberos addresses. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_address_order - Return an ordering of the specified addresses." href="krb5_address_order.html" />
- <link rel="prev" title="krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal." href="krb5_524_conv_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_524_conv_principal.html" title="krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal."
- accesskey="P">previous</a> |
- <a href="krb5_address_order.html" title="krb5_address_order - Return an ordering of the specified addresses."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_address_compare - Compare two Kerberos addresses.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-address-compare-compare-two-kerberos-addresses">
-<h1>krb5_address_compare - Compare two Kerberos addresses.<a class="headerlink" href="#krb5-address-compare-compare-two-kerberos-addresses" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_address_compare">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_address_compare</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *<em> addr1</em>, const <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *<em> addr2</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_address_compare" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>addr1</strong> - First address to be compared</p>
-<p class="last"><strong>[in]</strong> <strong>addr2</strong> - Second address to be compared</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if the addresses are the same, FALSE otherwise</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_address_compare - Compare two Kerberos addresses.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_524_conv_principal.html" title="krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal."
- >previous</a> |
- <a href="krb5_address_order.html" title="krb5_address_order - Return an ordering of the specified addresses."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_address_compare - Compare two Kerberos addresses.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_address_order - Return an ordering of the specified addresses. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_address_search - Search a list of addresses for a specified address." href="krb5_address_search.html" />
- <link rel="prev" title="krb5_address_compare - Compare two Kerberos addresses." href="krb5_address_compare.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_address_compare.html" title="krb5_address_compare - Compare two Kerberos addresses."
- accesskey="P">previous</a> |
- <a href="krb5_address_search.html" title="krb5_address_search - Search a list of addresses for a specified address."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_address_order - Return an ordering of the specified addresses.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-address-order-return-an-ordering-of-the-specified-addresses">
-<h1>krb5_address_order - Return an ordering of the specified addresses.<a class="headerlink" href="#krb5-address-order-return-an-ordering-of-the-specified-addresses" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_address_order">
-int <code class="descname">krb5_address_order</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *<em> addr1</em>, const <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *<em> addr2</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_address_order" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>addr1</strong> - First address</p>
-<p class="last"><strong>[in]</strong> <strong>addr2</strong> - Second address</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 if The two addresses are the same</li>
-<li>< 0 First address is less than second</li>
-<li>> 0 First address is greater than second</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_address_order - Return an ordering of the specified addresses.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_address_compare.html" title="krb5_address_compare - Compare two Kerberos addresses."
- >previous</a> |
- <a href="krb5_address_search.html" title="krb5_address_search - Search a list of addresses for a specified address."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_address_order - Return an ordering of the specified addresses.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_address_search - Search a list of addresses for a specified address. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting." href="krb5_allow_weak_crypto.html" />
- <link rel="prev" title="krb5_address_order - Return an ordering of the specified addresses." href="krb5_address_order.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_address_order.html" title="krb5_address_order - Return an ordering of the specified addresses."
- accesskey="P">previous</a> |
- <a href="krb5_allow_weak_crypto.html" title="krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_address_search - Search a list of addresses for a specified address.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-address-search-search-a-list-of-addresses-for-a-specified-address">
-<h1>krb5_address_search - Search a list of addresses for a specified address.<a class="headerlink" href="#krb5-address-search-search-a-list-of-addresses-for-a-specified-address" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_address_search">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_address_search</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *<em> addr</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *const *<em> addrlist</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_address_search" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>addr</strong> - Address to search for</p>
-<p class="last"><strong>[in]</strong> <strong>addrlist</strong> - Address list to be searched (or NULL)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if addr is listed in addrlist , or addrlist is NULL; FALSE otherwise</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If <em>addrlist</em> contains only a NetBIOS addresses, it will be treated as a null list.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_address_search - Search a list of addresses for a specified address.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_address_order.html" title="krb5_address_order - Return an ordering of the specified addresses."
- >previous</a> |
- <a href="krb5_allow_weak_crypto.html" title="krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_address_search - Search a list of addresses for a specified address.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_aname_to_localname - Convert a principal name to a local name." href="krb5_aname_to_localname.html" />
- <link rel="prev" title="krb5_address_search - Search a list of addresses for a specified address." href="krb5_address_search.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_address_search.html" title="krb5_address_search - Search a list of addresses for a specified address."
- accesskey="P">previous</a> |
- <a href="krb5_aname_to_localname.html" title="krb5_aname_to_localname - Convert a principal name to a local name."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-allow-weak-crypto-allow-the-application-to-override-the-profile-s-allow-weak-crypto-setting">
-<h1>krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting.<a class="headerlink" href="#krb5-allow-weak-crypto-allow-the-application-to-override-the-profile-s-allow-weak-crypto-setting" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_allow_weak_crypto">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_allow_weak_crypto</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a><em> enable</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_allow_weak_crypto" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>enable</strong> - Boolean flag</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 (always)</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function allows an application to override the allow_weak_crypto setting. It is primarily for use by aklog.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_address_search.html" title="krb5_address_search - Search a list of addresses for a specified address."
- >previous</a> |
- <a href="krb5_aname_to_localname.html" title="krb5_aname_to_localname - Convert a principal name to a local name."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_aname_to_localname - Convert a principal name to a local name. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_anonymous_principal - Build an anonymous principal." href="krb5_anonymous_principal.html" />
- <link rel="prev" title="krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting." href="krb5_allow_weak_crypto.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_allow_weak_crypto.html" title="krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting."
- accesskey="P">previous</a> |
- <a href="krb5_anonymous_principal.html" title="krb5_anonymous_principal - Build an anonymous principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_aname_to_localname - Convert a principal name to a local name.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-aname-to-localname-convert-a-principal-name-to-a-local-name">
-<h1>krb5_aname_to_localname - Convert a principal name to a local name.<a class="headerlink" href="#krb5-aname-to-localname-convert-a-principal-name-to-a-local-name" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_aname_to_localname">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_aname_to_localname</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> aname</em>, int<em> lnsize_in</em>, char *<em> lname</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_aname_to_localname" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>aname</strong> - Principal name</p>
-<p><strong>[in]</strong> <strong>lnsize_in</strong> - Space available in <em>lname</em></p>
-<p class="last"><strong>[out]</strong> <strong>lname</strong> - Local name buffer to be filled in</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>System errors</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>If <em>aname</em> does not correspond to any local account, KRB5_LNAME_NOTRANS is returned. If <em>lnsize_in</em> is too small for the local name, KRB5_CONFIG_NOTENUFSPACE is returned.</p>
-<p>Local names, rather than principal names, can be used by programs that translate to an environment-specific name (for example, a user account name).</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_aname_to_localname - Convert a principal name to a local name.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_allow_weak_crypto.html" title="krb5_allow_weak_crypto - Allow the application to override the profile’s allow_weak_crypto setting."
- >previous</a> |
- <a href="krb5_anonymous_principal.html" title="krb5_anonymous_principal - Build an anonymous principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_aname_to_localname - Convert a principal name to a local name.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_anonymous_principal - Build an anonymous principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_anonymous_realm - Return an anonymous realm data." href="krb5_anonymous_realm.html" />
- <link rel="prev" title="krb5_aname_to_localname - Convert a principal name to a local name." href="krb5_aname_to_localname.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_aname_to_localname.html" title="krb5_aname_to_localname - Convert a principal name to a local name."
- accesskey="P">previous</a> |
- <a href="krb5_anonymous_realm.html" title="krb5_anonymous_realm - Return an anonymous realm data."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_anonymous_principal - Build an anonymous principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-anonymous-principal-build-an-anonymous-principal">
-<h1>krb5_anonymous_principal - Build an anonymous principal.<a class="headerlink" href="#krb5-anonymous-principal-build-an-anonymous-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_anonymous_principal">
-<a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a> <code class="descname">krb5_anonymous_principal</code><span class="sig-paren">(</span>void<em> None</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_anonymous_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>None</strong></td>
-</tr>
-</tbody>
-</table>
-<p>This function returns constant storage that must not be freed.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="../macros/KRB5_ANONYMOUS_PRINCSTR.html#KRB5_ANONYMOUS_PRINCSTR" title="KRB5_ANONYMOUS_PRINCSTR"><code class="xref py py-data docutils literal"><span class="pre">KRB5_ANONYMOUS_PRINCSTR</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_anonymous_principal - Build an anonymous principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_aname_to_localname.html" title="krb5_aname_to_localname - Convert a principal name to a local name."
- >previous</a> |
- <a href="krb5_anonymous_realm.html" title="krb5_anonymous_realm - Return an anonymous realm data."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_anonymous_principal - Build an anonymous principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_anonymous_realm - Return an anonymous realm data. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf." href="krb5_appdefault_boolean.html" />
- <link rel="prev" title="krb5_anonymous_principal - Build an anonymous principal." href="krb5_anonymous_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_anonymous_principal.html" title="krb5_anonymous_principal - Build an anonymous principal."
- accesskey="P">previous</a> |
- <a href="krb5_appdefault_boolean.html" title="krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_anonymous_realm - Return an anonymous realm data.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-anonymous-realm-return-an-anonymous-realm-data">
-<h1>krb5_anonymous_realm - Return an anonymous realm data.<a class="headerlink" href="#krb5-anonymous-realm-return-an-anonymous-realm-data" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_anonymous_realm">
-const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> * <code class="descname">krb5_anonymous_realm</code><span class="sig-paren">(</span>void<em> None</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_anonymous_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>None</strong></td>
-</tr>
-</tbody>
-</table>
-<p>This function returns constant storage that must not be freed.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="../macros/KRB5_ANONYMOUS_REALMSTR.html#KRB5_ANONYMOUS_REALMSTR" title="KRB5_ANONYMOUS_REALMSTR"><code class="xref py py-data docutils literal"><span class="pre">KRB5_ANONYMOUS_REALMSTR</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_anonymous_realm - Return an anonymous realm data.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_anonymous_principal.html" title="krb5_anonymous_principal - Build an anonymous principal."
- >previous</a> |
- <a href="krb5_appdefault_boolean.html" title="krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_anonymous_realm - Return an anonymous realm data.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf." href="krb5_appdefault_string.html" />
- <link rel="prev" title="krb5_anonymous_realm - Return an anonymous realm data." href="krb5_anonymous_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_anonymous_realm.html" title="krb5_anonymous_realm - Return an anonymous realm data."
- accesskey="P">previous</a> |
- <a href="krb5_appdefault_string.html" title="krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-appdefault-boolean-retrieve-a-boolean-value-from-the-appdefaults-section-of-krb5-conf">
-<h1>krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf.<a class="headerlink" href="#krb5-appdefault-boolean-retrieve-a-boolean-value-from-the-appdefaults-section-of-krb5-conf" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_appdefault_boolean">
-void <code class="descname">krb5_appdefault_boolean</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> appname</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> realm</em>, const char *<em> option</em>, int<em> default_value</em>, int *<em> ret_value</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_appdefault_boolean" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>appname</strong> - Application name</p>
-<p><strong>[in]</strong> <strong>realm</strong> - Realm name</p>
-<p><strong>[in]</strong> <strong>option</strong> - Option to be checked</p>
-<p><strong>[in]</strong> <strong>default_value</strong> - Default value to return if no match is found</p>
-<p class="last"><strong>[out]</strong> <strong>ret_value</strong> - Boolean value of <em>option</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function gets the application defaults for <em>option</em> based on the given <em>appname</em> and/or <em>realm</em> .</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_appdefault_string.html#c.krb5_appdefault_string" title="krb5_appdefault_string"><code class="xref c c-func docutils literal"><span class="pre">krb5_appdefault_string()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_anonymous_realm.html" title="krb5_anonymous_realm - Return an anonymous realm data."
- >previous</a> |
- <a href="krb5_appdefault_string.html" title="krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_free - Free a krb5_auth_context structure." href="krb5_auth_con_free.html" />
- <link rel="prev" title="krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf." href="krb5_appdefault_boolean.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_appdefault_boolean.html" title="krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_free.html" title="krb5_auth_con_free - Free a krb5_auth_context structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-appdefault-string-retrieve-a-string-value-from-the-appdefaults-section-of-krb5-conf">
-<h1>krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf.<a class="headerlink" href="#krb5-appdefault-string-retrieve-a-string-value-from-the-appdefaults-section-of-krb5-conf" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_appdefault_string">
-void <code class="descname">krb5_appdefault_string</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> appname</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> realm</em>, const char *<em> option</em>, const char *<em> default_value</em>, char **<em> ret_value</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_appdefault_string" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>appname</strong> - Application name</p>
-<p><strong>[in]</strong> <strong>realm</strong> - Realm name</p>
-<p><strong>[in]</strong> <strong>option</strong> - Option to be checked</p>
-<p><strong>[in]</strong> <strong>default_value</strong> - Default value to return if no match is found</p>
-<p class="last"><strong>[out]</strong> <strong>ret_value</strong> - String value of <em>option</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function gets the application defaults for <em>option</em> based on the given <em>appname</em> and/or <em>realm</em> .</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_appdefault_boolean.html#c.krb5_appdefault_boolean" title="krb5_appdefault_boolean"><code class="xref c c-func docutils literal"><span class="pre">krb5_appdefault_boolean()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_appdefault_boolean.html" title="krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf."
- >previous</a> |
- <a href="krb5_auth_con_free.html" title="krb5_auth_con_free - Free a krb5_auth_context structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_free - Free a krb5_auth_context structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket." href="krb5_auth_con_genaddrs.html" />
- <link rel="prev" title="krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf." href="krb5_appdefault_string.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_appdefault_string.html" title="krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_genaddrs.html" title="krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_free - Free a krb5_auth_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-free-free-a-krb5-auth-context-structure">
-<h1>krb5_auth_con_free - Free a krb5_auth_context structure.<a class="headerlink" href="#krb5-auth-con-free-free-a-krb5-auth-context-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_free">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_free</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_free" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>auth_context</strong> - Authentication context to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 (always)</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees an auth context allocated by <a class="reference internal" href="krb5_auth_con_init.html#c.krb5_auth_con_init" title="krb5_auth_con_init"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_init()</span></code></a> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_free - Free a krb5_auth_context structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_appdefault_string.html" title="krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf."
- >previous</a> |
- <a href="krb5_auth_con_genaddrs.html" title="krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_free - Free a krb5_auth_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context." href="krb5_auth_con_get_checksum_func.html" />
- <link rel="prev" title="krb5_auth_con_free - Free a krb5_auth_context structure." href="krb5_auth_con_free.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_free.html" title="krb5_auth_con_free - Free a krb5_auth_context structure."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_get_checksum_func.html" title="krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-genaddrs-generate-auth-context-addresses-from-a-connected-socket">
-<h1>krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket.<a class="headerlink" href="#krb5-auth-con-genaddrs-generate-auth-context-addresses-from-a-connected-socket" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_genaddrs">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_genaddrs</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, int<em> infd</em>, int<em> flags</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_genaddrs" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>infd</strong> - Connected socket descriptor</p>
-<p class="last"><strong>[in]</strong> <strong>flags</strong> - Flags</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets the local and/or remote addresses in <em>auth_context</em> based on the local and remote endpoints of the socket <em>infd</em> . The following flags determine the operations performed:</p>
-<blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR</span></code></a> Generate local address.</li>
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR</span></code></a> Generate remote address.</li>
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR</span></code></a> Generate local address and port.</li>
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR</span></code></a> Generate remote address and port.</li>
-</ul>
-</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_free.html" title="krb5_auth_con_free - Free a krb5_auth_context structure."
- >previous</a> |
- <a href="krb5_auth_con_get_checksum_func.html" title="krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getaddrs - Retrieve address fields from an auth context." href="krb5_auth_con_getaddrs.html" />
- <link rel="prev" title="krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket." href="krb5_auth_con_genaddrs.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_genaddrs.html" title="krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getaddrs.html" title="krb5_auth_con_getaddrs - Retrieve address fields from an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-get-checksum-func-get-the-checksum-callback-from-an-auth-context">
-<h1>krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context.<a class="headerlink" href="#krb5-auth-con-get-checksum-func-get-the-checksum-callback-from-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_get_checksum_func">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_get_checksum_func</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_mk_req_checksum_func.html#c.krb5_mk_req_checksum_func" title="krb5_mk_req_checksum_func">krb5_mk_req_checksum_func</a> *<em> func</em>, void **<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_get_checksum_func" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[out]</strong> <strong>func</strong> - Checksum callback</p>
-<p class="last"><strong>[out]</strong> <strong>data</strong> - Callback argument</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 (always)</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_genaddrs.html" title="krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket."
- >previous</a> |
- <a href="krb5_auth_con_getaddrs.html" title="krb5_auth_con_getaddrs - Retrieve address fields from an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getaddrs - Retrieve address fields from an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context." href="krb5_auth_con_getauthenticator.html" />
- <link rel="prev" title="krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context." href="krb5_auth_con_get_checksum_func.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_get_checksum_func.html" title="krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getauthenticator.html" title="krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getaddrs - Retrieve address fields from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getaddrs-retrieve-address-fields-from-an-auth-context">
-<h1>krb5_auth_con_getaddrs - Retrieve address fields from an auth context.<a class="headerlink" href="#krb5-auth-con-getaddrs-retrieve-address-fields-from-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getaddrs">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getaddrs</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> **<em> local_addr</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> **<em> remote_addr</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getaddrs" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[out]</strong> <strong>local_addr</strong> - Local address (NULL if not needed)</p>
-<p class="last"><strong>[out]</strong> <strong>remote_addr</strong> - Remote address (NULL if not needed)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getaddrs - Retrieve address fields from an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_get_checksum_func.html" title="krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context."
- >previous</a> |
- <a href="krb5_auth_con_getauthenticator.html" title="krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getaddrs - Retrieve address fields from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure." href="krb5_auth_con_getflags.html" />
- <link rel="prev" title="krb5_auth_con_getaddrs - Retrieve address fields from an auth context." href="krb5_auth_con_getaddrs.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getaddrs.html" title="krb5_auth_con_getaddrs - Retrieve address fields from an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getflags.html" title="krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getauthenticator-retrieve-the-authenticator-from-an-auth-context">
-<h1>krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context.<a class="headerlink" href="#krb5-auth-con-getauthenticator-retrieve-the-authenticator-from-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getauthenticator">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getauthenticator</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_authenticator.html#c.krb5_authenticator" title="krb5_authenticator">krb5_authenticator</a> **<em> authenticator</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getauthenticator" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>authenticator</strong> - Authenticator</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success. Otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_free_authenticator.html#c.krb5_free_authenticator" title="krb5_free_authenticator"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_authenticator()</span></code></a> to free <em>authenticator</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getaddrs.html" title="krb5_auth_con_getaddrs - Retrieve address fields from an auth context."
- >previous</a> |
- <a href="krb5_auth_con_getflags.html" title="krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock." href="krb5_auth_con_getkey.html" />
- <link rel="prev" title="krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context." href="krb5_auth_con_getauthenticator.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getauthenticator.html" title="krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getkey.html" title="krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getflags-retrieve-flags-from-a-krb5-auth-context-structure">
-<h1>krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure.<a class="headerlink" href="#krb5-auth-con-getflags-retrieve-flags-from-a-krb5-auth-context-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getflags">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getflags</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> *<em> flags</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getflags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>flags</strong> - Flags bit mask</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 (always)</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Valid values for <em>flags</em> are:</p>
-<blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> Use timestamps</li>
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> Save timestamps</li>
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></a> Use sequence numbers</li>
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> Save sequence numbers</li>
-</ul>
-</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getauthenticator.html" title="krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context."
- >previous</a> |
- <a href="krb5_auth_con_getkey.html" title="krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getkey_k - Retrieve the session key from an auth context." href="krb5_auth_con_getkey_k.html" />
- <link rel="prev" title="krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure." href="krb5_auth_con_getflags.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getflags.html" title="krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getkey_k.html" title="krb5_auth_con_getkey_k - Retrieve the session key from an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getkey-retrieve-the-session-key-from-an-auth-context-as-a-keyblock">
-<h1>krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock.<a class="headerlink" href="#krb5-auth-con-getkey-retrieve-the-session-key-from-an-auth-context-as-a-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getkey">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getkey</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> keyblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getkey" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>keyblock</strong> - Session key</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success. Otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a keyblock containing the session key from <em>auth_context</em> . Use <a class="reference internal" href="krb5_free_keyblock.html#c.krb5_free_keyblock" title="krb5_free_keyblock"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keyblock()</span></code></a> to free <em>keyblock</em> when it is no longer needed</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getflags.html" title="krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure."
- >previous</a> |
- <a href="krb5_auth_con_getkey_k.html" title="krb5_auth_con_getkey_k - Retrieve the session key from an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getkey_k - Retrieve the session key from an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context." href="krb5_auth_con_getlocalseqnumber.html" />
- <link rel="prev" title="krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock." href="krb5_auth_con_getkey.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getkey.html" title="krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getlocalseqnumber.html" title="krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getkey_k - Retrieve the session key from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getkey-k-retrieve-the-session-key-from-an-auth-context">
-<h1>krb5_auth_con_getkey_k - Retrieve the session key from an auth context.<a class="headerlink" href="#krb5-auth-con-getkey-k-retrieve-the-session-key-from-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getkey_k">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getkey_k</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a> *<em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getkey_k" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>key</strong> - Session key</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 (always)</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets <em>key</em> to the session key from <em>auth_context</em> . Use <a class="reference internal" href="krb5_k_free_key.html#c.krb5_k_free_key" title="krb5_k_free_key"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_free_key()</span></code></a> to release <em>key</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getkey_k - Retrieve the session key from an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getkey.html" title="krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock."
- >previous</a> |
- <a href="krb5_auth_con_getlocalseqnumber.html" title="krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getkey_k - Retrieve the session key from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getrcache - Retrieve the replay cache from an auth context." href="krb5_auth_con_getrcache.html" />
- <link rel="prev" title="krb5_auth_con_getkey_k - Retrieve the session key from an auth context." href="krb5_auth_con_getkey_k.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getkey_k.html" title="krb5_auth_con_getkey_k - Retrieve the session key from an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getrcache.html" title="krb5_auth_con_getrcache - Retrieve the replay cache from an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getlocalseqnumber-retrieve-the-local-sequence-number-from-an-auth-context">
-<h1>krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context.<a class="headerlink" href="#krb5-auth-con-getlocalseqnumber-retrieve-the-local-sequence-number-from-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getlocalseqnumber">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getlocalseqnumber</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> *<em> seqnumber</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getlocalseqnumber" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>seqnumber</strong> - Local sequence number</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Retrieve the local sequence number from <em>auth_context</em> and return it in <em>seqnumber</em> . The <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></a> flag must be set in <em>auth_context</em> for this function to be useful.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getkey_k.html" title="krb5_auth_con_getkey_k - Retrieve the session key from an auth context."
- >previous</a> |
- <a href="krb5_auth_con_getrcache.html" title="krb5_auth_con_getrcache - Retrieve the replay cache from an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getlocalsubkey — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getremotesubkey" href="krb5_auth_con_getremotesubkey.html" />
- <link rel="prev" title="krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials." href="krb5_524_convert_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_524_convert_creds.html" title="krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getremotesubkey.html" title="krb5_auth_con_getremotesubkey"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getlocalsubkey">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getlocalsubkey">
-<h1>krb5_auth_con_getlocalsubkey<a class="headerlink" href="#krb5-auth-con-getlocalsubkey" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getlocalsubkey">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getlocalsubkey</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> keyblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getlocalsubkey" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>auth_context</strong></p>
-<p class="last"><strong>keyblock</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_auth_con_getsendsubkey() .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getlocalsubkey</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_524_convert_creds.html" title="krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials."
- >previous</a> |
- <a href="krb5_auth_con_getremotesubkey.html" title="krb5_auth_con_getremotesubkey"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getlocalsubkey">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getrcache - Retrieve the replay cache from an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock." href="krb5_auth_con_getrecvsubkey.html" />
- <link rel="prev" title="krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context." href="krb5_auth_con_getlocalseqnumber.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getlocalseqnumber.html" title="krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getrecvsubkey.html" title="krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getrcache - Retrieve the replay cache from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getrcache-retrieve-the-replay-cache-from-an-auth-context">
-<h1>krb5_auth_con_getrcache - Retrieve the replay cache from an auth context.<a class="headerlink" href="#krb5-auth-con-getrcache-retrieve-the-replay-cache-from-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getrcache">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getrcache</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_rcache.html#c.krb5_rcache" title="krb5_rcache">krb5_rcache</a> *<em> rcache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getrcache" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>rcache</strong> - Replay cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 (always)</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function fetches the replay cache from <em>auth_context</em> . The caller should not close <em>rcache</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getrcache - Retrieve the replay cache from an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getlocalseqnumber.html" title="krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context."
- >previous</a> |
- <a href="krb5_auth_con_getrecvsubkey.html" title="krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getrcache - Retrieve the replay cache from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock." href="krb5_auth_con_getrecvsubkey_k.html" />
- <link rel="prev" title="krb5_auth_con_getrcache - Retrieve the replay cache from an auth context." href="krb5_auth_con_getrcache.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getrcache.html" title="krb5_auth_con_getrcache - Retrieve the replay cache from an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getrecvsubkey_k.html" title="krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getrecvsubkey-retrieve-the-receiving-subkey-from-an-auth-context-as-a-keyblock">
-<h1>krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock.<a class="headerlink" href="#krb5-auth-con-getrecvsubkey-retrieve-the-receiving-subkey-from-an-auth-context-as-a-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getrecvsubkey">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getrecvsubkey</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> ac</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> keyblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getrecvsubkey" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ac</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>keyblock</strong> - Receiving subkey</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a keyblock containing the receiving subkey from <em>auth_context</em> . Use <a class="reference internal" href="krb5_free_keyblock.html#c.krb5_free_keyblock" title="krb5_free_keyblock"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keyblock()</span></code></a> to free <em>keyblock</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getrcache.html" title="krb5_auth_con_getrcache - Retrieve the replay cache from an auth context."
- >previous</a> |
- <a href="krb5_auth_con_getrecvsubkey_k.html" title="krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context." href="krb5_auth_con_getremoteseqnumber.html" />
- <link rel="prev" title="krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock." href="krb5_auth_con_getrecvsubkey.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getrecvsubkey.html" title="krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getremoteseqnumber.html" title="krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getrecvsubkey-k-retrieve-the-receiving-subkey-from-an-auth-context-as-a-keyblock">
-<h1>krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock.<a class="headerlink" href="#krb5-auth-con-getrecvsubkey-k-retrieve-the-receiving-subkey-from-an-auth-context-as-a-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getrecvsubkey_k">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getrecvsubkey_k</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> ac</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a> *<em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getrecvsubkey_k" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ac</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>key</strong> - Receiving subkey</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets <em>key</em> to the receiving subkey from <em>auth_context</em> . Use <a class="reference internal" href="krb5_k_free_key.html#c.krb5_k_free_key" title="krb5_k_free_key"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_free_key()</span></code></a> to release <em>key</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getrecvsubkey.html" title="krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock."
- >previous</a> |
- <a href="krb5_auth_con_getremoteseqnumber.html" title="krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock." href="krb5_auth_con_getsendsubkey.html" />
- <link rel="prev" title="krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock." href="krb5_auth_con_getrecvsubkey_k.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getrecvsubkey_k.html" title="krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getsendsubkey.html" title="krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getremoteseqnumber-retrieve-the-remote-sequence-number-from-an-auth-context">
-<h1>krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context.<a class="headerlink" href="#krb5-auth-con-getremoteseqnumber-retrieve-the-remote-sequence-number-from-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getremoteseqnumber">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getremoteseqnumber</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> *<em> seqnumber</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getremoteseqnumber" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>seqnumber</strong> - Remote sequence number</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Retrieve the remote sequence number from <em>auth_context</em> and return it in <em>seqnumber</em> . The <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></a> flag must be set in <em>auth_context</em> for this function to be useful.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getrecvsubkey_k.html" title="krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock."
- >previous</a> |
- <a href="krb5_auth_con_getsendsubkey.html" title="krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getremotesubkey — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_initivector - Cause an auth context to use cipher state." href="krb5_auth_con_initivector.html" />
- <link rel="prev" title="krb5_auth_con_getlocalsubkey" href="krb5_auth_con_getlocalsubkey.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getlocalsubkey.html" title="krb5_auth_con_getlocalsubkey"
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_initivector.html" title="krb5_auth_con_initivector - Cause an auth context to use cipher state."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getremotesubkey">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getremotesubkey">
-<h1>krb5_auth_con_getremotesubkey<a class="headerlink" href="#krb5-auth-con-getremotesubkey" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getremotesubkey">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getremotesubkey</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> keyblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getremotesubkey" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>auth_context</strong></p>
-<p class="last"><strong>keyblock</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_auth_con_getrecvsubkey() .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getremotesubkey</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getlocalsubkey.html" title="krb5_auth_con_getlocalsubkey"
- >previous</a> |
- <a href="krb5_auth_con_initivector.html" title="krb5_auth_con_initivector - Cause an auth context to use cipher state."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getremotesubkey">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context." href="krb5_auth_con_getsendsubkey_k.html" />
- <link rel="prev" title="krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context." href="krb5_auth_con_getremoteseqnumber.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getremoteseqnumber.html" title="krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_getsendsubkey_k.html" title="krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getsendsubkey-retrieve-the-send-subkey-from-an-auth-context-as-a-keyblock">
-<h1>krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock.<a class="headerlink" href="#krb5-auth-con-getsendsubkey-retrieve-the-send-subkey-from-an-auth-context-as-a-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getsendsubkey">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getsendsubkey</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> ac</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> keyblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getsendsubkey" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ac</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>keyblock</strong> - Send subkey</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a keyblock containing the send subkey from <em>auth_context</em> . Use <a class="reference internal" href="krb5_free_keyblock.html#c.krb5_free_keyblock" title="krb5_free_keyblock"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keyblock()</span></code></a> to free <em>keyblock</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getremoteseqnumber.html" title="krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context."
- >previous</a> |
- <a href="krb5_auth_con_getsendsubkey_k.html" title="krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_init - Create and initialize an authentication context." href="krb5_auth_con_init.html" />
- <link rel="prev" title="krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock." href="krb5_auth_con_getsendsubkey.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getsendsubkey.html" title="krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_init.html" title="krb5_auth_con_init - Create and initialize an authentication context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-getsendsubkey-k-retrieve-the-send-subkey-from-an-auth-context">
-<h1>krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context.<a class="headerlink" href="#krb5-auth-con-getsendsubkey-k-retrieve-the-send-subkey-from-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_getsendsubkey_k">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_getsendsubkey_k</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> ac</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a> *<em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_getsendsubkey_k" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ac</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>key</strong> - Send subkey</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets <em>key</em> to the send subkey from <em>auth_context</em> . Use <a class="reference internal" href="krb5_k_free_key.html#c.krb5_k_free_key" title="krb5_k_free_key"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_free_key()</span></code></a> to release <em>key</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getsendsubkey.html" title="krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock."
- >previous</a> |
- <a href="krb5_auth_con_init.html" title="krb5_auth_con_init - Create and initialize an authentication context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_init - Create and initialize an authentication context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context." href="krb5_auth_con_set_checksum_func.html" />
- <link rel="prev" title="krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context." href="krb5_auth_con_getsendsubkey_k.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getsendsubkey_k.html" title="krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_set_checksum_func.html" title="krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_init - Create and initialize an authentication context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-init-create-and-initialize-an-authentication-context">
-<h1>krb5_auth_con_init - Create and initialize an authentication context.<a class="headerlink" href="#krb5-auth-con-init-create-and-initialize-an-authentication-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_init">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_init</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a> *<em> auth_context</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_init" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>auth_context</strong> - Authentication context</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates an authentication context to hold configuration and state relevant to krb5 functions for authenticating principals and protecting messages once authentication has occurred.</p>
-<p>By default, flags for the context are set to enable the use of the replay cache ( <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> ), but not sequence numbers. Use <a class="reference internal" href="krb5_auth_con_setflags.html#c.krb5_auth_con_setflags" title="krb5_auth_con_setflags"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_setflags()</span></code></a> to change the flags.</p>
-<p>The allocated <em>auth_context</em> must be freed with <a class="reference internal" href="krb5_auth_con_free.html#c.krb5_auth_con_free" title="krb5_auth_con_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_free()</span></code></a> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_init - Create and initialize an authentication context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getsendsubkey_k.html" title="krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context."
- >previous</a> |
- <a href="krb5_auth_con_set_checksum_func.html" title="krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_init - Create and initialize an authentication context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_initivector - Cause an auth context to use cipher state. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_build_principal_va" href="krb5_build_principal_va.html" />
- <link rel="prev" title="krb5_auth_con_getremotesubkey" href="krb5_auth_con_getremotesubkey.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_getremotesubkey.html" title="krb5_auth_con_getremotesubkey"
- accesskey="P">previous</a> |
- <a href="krb5_build_principal_va.html" title="krb5_build_principal_va"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_initivector - Cause an auth context to use cipher state.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-initivector-cause-an-auth-context-to-use-cipher-state">
-<h1>krb5_auth_con_initivector - Cause an auth context to use cipher state.<a class="headerlink" href="#krb5-auth-con-initivector-cause-an-auth-context-to-use-cipher-state" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_initivector">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_initivector</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_initivector" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Prepare <em>auth_context</em> to use cipher state when <a class="reference internal" href="krb5_mk_priv.html#c.krb5_mk_priv" title="krb5_mk_priv"><code class="xref c c-func docutils literal"><span class="pre">krb5_mk_priv()</span></code></a> or <a class="reference internal" href="krb5_rd_priv.html#c.krb5_rd_priv" title="krb5_rd_priv"><code class="xref c c-func docutils literal"><span class="pre">krb5_rd_priv()</span></code></a> encrypt or decrypt data.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_initivector - Cause an auth context to use cipher state.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_getremotesubkey.html" title="krb5_auth_con_getremotesubkey"
- >previous</a> |
- <a href="krb5_build_principal_va.html" title="krb5_build_principal_va"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_initivector - Cause an auth context to use cipher state.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context." href="krb5_auth_con_set_req_cksumtype.html" />
- <link rel="prev" title="krb5_auth_con_init - Create and initialize an authentication context." href="krb5_auth_con_init.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_init.html" title="krb5_auth_con_init - Create and initialize an authentication context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_set_req_cksumtype.html" title="krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-set-checksum-func-set-a-checksum-callback-in-an-auth-context">
-<h1>krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context.<a class="headerlink" href="#krb5-auth-con-set-checksum-func-set-a-checksum-callback-in-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_set_checksum_func">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_set_checksum_func</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_mk_req_checksum_func.html#c.krb5_mk_req_checksum_func" title="krb5_mk_req_checksum_func">krb5_mk_req_checksum_func</a><em> func</em>, void *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_set_checksum_func" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>func</strong> - Checksum callback</p>
-<p class="last"><strong>[in]</strong> <strong>data</strong> - Callback argument</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 (always)</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Set a callback to obtain checksum data in <a class="reference internal" href="krb5_mk_req.html#c.krb5_mk_req" title="krb5_mk_req"><code class="xref c c-func docutils literal"><span class="pre">krb5_mk_req()</span></code></a> . The callback will be invoked after the subkey and local sequence number are stored in <em>auth_context</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_init.html" title="krb5_auth_con_init - Create and initialize an authentication context."
- >previous</a> |
- <a href="krb5_auth_con_set_req_cksumtype.html" title="krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context." href="krb5_auth_con_setaddrs.html" />
- <link rel="prev" title="krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context." href="krb5_auth_con_set_checksum_func.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_set_checksum_func.html" title="krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_setaddrs.html" title="krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-set-req-cksumtype-set-checksum-type-in-an-an-auth-context">
-<h1>krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context.<a class="headerlink" href="#krb5-auth-con-set-req-cksumtype-set-checksum-type-in-an-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_set_req_cksumtype">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_set_req_cksumtype</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> cksumtype</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_set_req_cksumtype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[in]</strong> <strong>cksumtype</strong> - Checksum type</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success. Otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets the checksum type in <em>auth_context</em> to be used by <a class="reference internal" href="krb5_mk_req.html#c.krb5_mk_req" title="krb5_mk_req"><code class="xref c c-func docutils literal"><span class="pre">krb5_mk_req()</span></code></a> for the authenticator checksum.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_set_checksum_func.html" title="krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context."
- >previous</a> |
- <a href="krb5_auth_con_setaddrs.html" title="krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure." href="krb5_auth_con_setflags.html" />
- <link rel="prev" title="krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context." href="krb5_auth_con_set_req_cksumtype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_set_req_cksumtype.html" title="krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_setflags.html" title="krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-setaddrs-set-the-local-and-remote-addresses-in-an-auth-context">
-<h1>krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context.<a class="headerlink" href="#krb5-auth-con-setaddrs-set-the-local-and-remote-addresses-in-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_setaddrs">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_setaddrs</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *<em> local_addr</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *<em> remote_addr</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_setaddrs" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>local_addr</strong> - Local address</p>
-<p class="last"><strong>[in]</strong> <strong>remote_addr</strong> - Remote address</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function releases the storage assigned to the contents of the local and remote addresses of <em>auth_context</em> and then sets them to <em>local_addr</em> and <em>remote_addr</em> respectively.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_auth_con_genaddrs.html#c.krb5_auth_con_genaddrs" title="krb5_auth_con_genaddrs"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_genaddrs()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_set_req_cksumtype.html" title="krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context."
- >previous</a> |
- <a href="krb5_auth_con_setflags.html" title="krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_setports - Set local and remote port fields in an auth context." href="krb5_auth_con_setports.html" />
- <link rel="prev" title="krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context." href="krb5_auth_con_setaddrs.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_setaddrs.html" title="krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_setports.html" title="krb5_auth_con_setports - Set local and remote port fields in an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-setflags-set-a-flags-field-in-a-krb5-auth-context-structure">
-<h1>krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure.<a class="headerlink" href="#krb5-auth-con-setflags-set-a-flags-field-in-a-krb5-auth-context-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_setflags">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_setflags</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a><em> flags</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_setflags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[in]</strong> <strong>flags</strong> - Flags bit mask</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 (always)</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Valid values for <em>flags</em> are:</p>
-<blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> Use timestamps</li>
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> Save timestamps</li>
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></a> Use sequence numbers</li>
-<li><a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> Save sequence numbers</li>
-</ul>
-</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_setaddrs.html" title="krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context."
- >previous</a> |
- <a href="krb5_auth_con_setports.html" title="krb5_auth_con_setports - Set local and remote port fields in an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_setports - Set local and remote port fields in an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_setrcache - Set the replay cache in an auth context." href="krb5_auth_con_setrcache.html" />
- <link rel="prev" title="krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure." href="krb5_auth_con_setflags.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_setflags.html" title="krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_setrcache.html" title="krb5_auth_con_setrcache - Set the replay cache in an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setports - Set local and remote port fields in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-setports-set-local-and-remote-port-fields-in-an-auth-context">
-<h1>krb5_auth_con_setports - Set local and remote port fields in an auth context.<a class="headerlink" href="#krb5-auth-con-setports-set-local-and-remote-port-fields-in-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_setports">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_setports</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *<em> local_port</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *<em> remote_port</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_setports" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>local_port</strong> - Local port</p>
-<p class="last"><strong>[in]</strong> <strong>remote_port</strong> - Remote port</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function releases the storage assigned to the contents of the local and remote ports of <em>auth_context</em> and then sets them to <em>local_port</em> and <em>remote_port</em> respectively.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_auth_con_genaddrs.html#c.krb5_auth_con_genaddrs" title="krb5_auth_con_genaddrs"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_genaddrs()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_setports - Set local and remote port fields in an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_setflags.html" title="krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure."
- >previous</a> |
- <a href="krb5_auth_con_setrcache.html" title="krb5_auth_con_setrcache - Set the replay cache in an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setports - Set local and remote port fields in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_setrcache - Set the replay cache in an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock." href="krb5_auth_con_setrecvsubkey.html" />
- <link rel="prev" title="krb5_auth_con_setports - Set local and remote port fields in an auth context." href="krb5_auth_con_setports.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_setports.html" title="krb5_auth_con_setports - Set local and remote port fields in an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_setrecvsubkey.html" title="krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setrcache - Set the replay cache in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-setrcache-set-the-replay-cache-in-an-auth-context">
-<h1>krb5_auth_con_setrcache - Set the replay cache in an auth context.<a class="headerlink" href="#krb5-auth-con-setrcache-set-the-replay-cache-in-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_setrcache">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_setrcache</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_rcache.html#c.krb5_rcache" title="krb5_rcache">krb5_rcache</a><em> rcache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_setrcache" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[in]</strong> <strong>rcache</strong> - Replay cache haddle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets the replay cache in <em>auth_context</em> to <em>rcache</em> . <em>rcache</em> will be closed when <em>auth_context</em> is freed, so the caller should relinquish that responsibility.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_setrcache - Set the replay cache in an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_setports.html" title="krb5_auth_con_setports - Set local and remote port fields in an auth context."
- >previous</a> |
- <a href="krb5_auth_con_setrecvsubkey.html" title="krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setrcache - Set the replay cache in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context." href="krb5_auth_con_setrecvsubkey_k.html" />
- <link rel="prev" title="krb5_auth_con_setrcache - Set the replay cache in an auth context." href="krb5_auth_con_setrcache.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_setrcache.html" title="krb5_auth_con_setrcache - Set the replay cache in an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_setrecvsubkey_k.html" title="krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-setrecvsubkey-set-the-receiving-subkey-in-an-auth-context-with-a-keyblock">
-<h1>krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock.<a class="headerlink" href="#krb5-auth-con-setrecvsubkey-set-the-receiving-subkey-in-an-auth-context-with-a-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_setrecvsubkey">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_setrecvsubkey</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> ac</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> keyblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_setrecvsubkey" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ac</strong> - Authentication context</p>
-<p class="last"><strong>[in]</strong> <strong>keyblock</strong> - Receiving subkey</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets the receiving subkey in <em>ac</em> to a copy of <em>keyblock</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_setrcache.html" title="krb5_auth_con_setrcache - Set the replay cache in an auth context."
- >previous</a> |
- <a href="krb5_auth_con_setrecvsubkey_k.html" title="krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock." href="krb5_auth_con_setsendsubkey.html" />
- <link rel="prev" title="krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock." href="krb5_auth_con_setrecvsubkey.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_setrecvsubkey.html" title="krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_setsendsubkey.html" title="krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-setrecvsubkey-k-set-the-receiving-subkey-in-an-auth-context">
-<h1>krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context.<a class="headerlink" href="#krb5-auth-con-setrecvsubkey-k-set-the-receiving-subkey-in-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_setrecvsubkey_k">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_setrecvsubkey_k</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> ac</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_setrecvsubkey_k" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ac</strong> - Authentication context</p>
-<p class="last"><strong>[in]</strong> <strong>key</strong> - Receiving subkey</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets the receiving subkey in <em>ac</em> to <em>key</em> , incrementing its reference count.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_setrecvsubkey.html" title="krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock."
- >previous</a> |
- <a href="krb5_auth_con_setsendsubkey.html" title="krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context." href="krb5_auth_con_setsendsubkey_k.html" />
- <link rel="prev" title="krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context." href="krb5_auth_con_setrecvsubkey_k.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_setrecvsubkey_k.html" title="krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_setsendsubkey_k.html" title="krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-setsendsubkey-set-the-send-subkey-in-an-auth-context-with-a-keyblock">
-<h1>krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock.<a class="headerlink" href="#krb5-auth-con-setsendsubkey-set-the-send-subkey-in-an-auth-context-with-a-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_setsendsubkey">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_setsendsubkey</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> ac</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> keyblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_setsendsubkey" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ac</strong> - Authentication context</p>
-<p class="last"><strong>[in]</strong> <strong>keyblock</strong> - Send subkey</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success. Otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets the send subkey in <em>ac</em> to a copy of <em>keyblock</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_setrecvsubkey_k.html" title="krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context."
- >previous</a> |
- <a href="krb5_auth_con_setsendsubkey_k.html" title="krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_con_setuseruserkey - Set the session key in an auth context." href="krb5_auth_con_setuseruserkey.html" />
- <link rel="prev" title="krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock." href="krb5_auth_con_setsendsubkey.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_setsendsubkey.html" title="krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock."
- accesskey="P">previous</a> |
- <a href="krb5_auth_con_setuseruserkey.html" title="krb5_auth_con_setuseruserkey - Set the session key in an auth context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-setsendsubkey-k-set-the-send-subkey-in-an-auth-context">
-<h1>krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context.<a class="headerlink" href="#krb5-auth-con-setsendsubkey-k-set-the-send-subkey-in-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_setsendsubkey_k">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_setsendsubkey_k</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> ac</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_setsendsubkey_k" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ac</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>key</strong> - Send subkey</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets the send subkey in <em>ac</em> to <em>key</em> , incrementing its reference count.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_setsendsubkey.html" title="krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock."
- >previous</a> |
- <a href="krb5_auth_con_setuseruserkey.html" title="krb5_auth_con_setuseruserkey - Set the session key in an auth context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_con_setuseruserkey - Set the session key in an auth context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_cache_match - Find a credential cache with a specified client principal." href="krb5_cc_cache_match.html" />
- <link rel="prev" title="krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context." href="krb5_auth_con_setsendsubkey_k.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_setsendsubkey_k.html" title="krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_cc_cache_match.html" title="krb5_cc_cache_match - Find a credential cache with a specified client principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setuseruserkey - Set the session key in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-con-setuseruserkey-set-the-session-key-in-an-auth-context">
-<h1>krb5_auth_con_setuseruserkey - Set the session key in an auth context.<a class="headerlink" href="#krb5-auth-con-setuseruserkey-set-the-session-key-in-an-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_auth_con_setuseruserkey">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_auth_con_setuseruserkey</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> keyblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_auth_con_setuseruserkey" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[in]</strong> <strong>keyblock</strong> - User key</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_con_setuseruserkey - Set the session key in an auth context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_setsendsubkey_k.html" title="krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context."
- >previous</a> |
- <a href="krb5_cc_cache_match.html" title="krb5_cc_cache_match - Find a credential cache with a specified client principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_con_setuseruserkey - Set the session key in an auth context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_build_principal - Build a principal name using null-terminated strings. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list." href="krb5_build_principal_alloc_va.html" />
- <link rel="prev" title="krb5 API" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="krb5 API"
- accesskey="P">previous</a> |
- <a href="krb5_build_principal_alloc_va.html" title="krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_build_principal - Build a principal name using null-terminated strings.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-build-principal-build-a-principal-name-using-null-terminated-strings">
-<h1>krb5_build_principal - Build a principal name using null-terminated strings.<a class="headerlink" href="#krb5-build-principal-build-a-principal-name-using-null-terminated-strings" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_build_principal">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_build_principal</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> princ</em>, unsigned int<em> rlen</em>, const char *<em> realm</em>, ...<span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_build_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[out]</strong> <strong>princ</strong> - Principal name</p>
-<p><strong>[in]</strong> <strong>rlen</strong> - Realm name length</p>
-<p class="last"><strong>[in]</strong> <strong>realm</strong> - Realm name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Call <a class="reference internal" href="krb5_free_principal.html#c.krb5_free_principal" title="krb5_free_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_principal()</span></code></a> to free <em>princ</em> when it is no longer needed.</p>
-<p>Beginning with release 1.20, the name type of the principal will be inferred as <strong>KRB5_NT_SRV_INST</strong> or <strong>KRB5_NT_WELLKNOWN</strong> based on the principal name. The type will be <strong>KRB5_NT_PRINCIPAL</strong> if a type cannot be inferred.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last"><a class="reference internal" href="#c.krb5_build_principal" title="krb5_build_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_build_principal()</span></code></a> and <a class="reference internal" href="krb5_build_principal_alloc_va.html#c.krb5_build_principal_alloc_va" title="krb5_build_principal_alloc_va"><code class="xref c c-func docutils literal"><span class="pre">krb5_build_principal_alloc_va()</span></code></a> perform the same task. <a class="reference internal" href="#c.krb5_build_principal" title="krb5_build_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_build_principal()</span></code></a> takes variadic arguments. <a class="reference internal" href="krb5_build_principal_alloc_va.html#c.krb5_build_principal_alloc_va" title="krb5_build_principal_alloc_va"><code class="xref c c-func docutils literal"><span class="pre">krb5_build_principal_alloc_va()</span></code></a> takes a pre-computed <em>varargs</em> pointer.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_build_principal - Build a principal name using null-terminated strings.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="krb5 API"
- >previous</a> |
- <a href="krb5_build_principal_alloc_va.html" title="krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_build_principal - Build a principal name using null-terminated strings.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_build_principal_ext - Build a principal name using length-counted strings." href="krb5_build_principal_ext.html" />
- <link rel="prev" title="krb5_build_principal - Build a principal name using null-terminated strings." href="krb5_build_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_build_principal.html" title="krb5_build_principal - Build a principal name using null-terminated strings."
- accesskey="P">previous</a> |
- <a href="krb5_build_principal_ext.html" title="krb5_build_principal_ext - Build a principal name using length-counted strings."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-build-principal-alloc-va-build-a-principal-name-using-a-precomputed-variable-argument-list">
-<h1>krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list.<a class="headerlink" href="#krb5-build-principal-alloc-va-build-a-principal-name-using-a-precomputed-variable-argument-list" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_build_principal_alloc_va">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_build_principal_alloc_va</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> princ</em>, unsigned int<em> rlen</em>, const char *<em> realm</em>, va_list<em> ap</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_build_principal_alloc_va" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[out]</strong> <strong>princ</strong> - Principal structure</p>
-<p><strong>[in]</strong> <strong>rlen</strong> - Realm name length</p>
-<p><strong>[in]</strong> <strong>realm</strong> - Realm name</p>
-<p class="last"><strong>[in]</strong> <strong>ap</strong> - List of char * components, ending with NULL</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Similar to <a class="reference internal" href="krb5_build_principal.html#c.krb5_build_principal" title="krb5_build_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_build_principal()</span></code></a> , this function builds a principal name, but its name components are specified as a va_list.</p>
-<p>Use <a class="reference internal" href="krb5_free_principal.html#c.krb5_free_principal" title="krb5_free_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_principal()</span></code></a> to deallocate <em>princ</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_build_principal.html" title="krb5_build_principal - Build a principal name using null-terminated strings."
- >previous</a> |
- <a href="krb5_build_principal_ext.html" title="krb5_build_principal_ext - Build a principal name using length-counted strings."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_build_principal_ext - Build a principal name using length-counted strings. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_close - Close a credential cache handle." href="krb5_cc_close.html" />
- <link rel="prev" title="krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list." href="krb5_build_principal_alloc_va.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_build_principal_alloc_va.html" title="krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list."
- accesskey="P">previous</a> |
- <a href="krb5_cc_close.html" title="krb5_cc_close - Close a credential cache handle."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_build_principal_ext - Build a principal name using length-counted strings.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-build-principal-ext-build-a-principal-name-using-length-counted-strings">
-<h1>krb5_build_principal_ext - Build a principal name using length-counted strings.<a class="headerlink" href="#krb5-build-principal-ext-build-a-principal-name-using-length-counted-strings" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_build_principal_ext">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_build_principal_ext</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> princ</em>, unsigned int<em> rlen</em>, const char *<em> realm</em>, ...<span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_build_principal_ext" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[out]</strong> <strong>princ</strong> - Principal name</p>
-<p><strong>[in]</strong> <strong>rlen</strong> - Realm name length</p>
-<p class="last"><strong>[in]</strong> <strong>realm</strong> - Realm name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a principal from a length-counted string and a variable-length list of length-counted components. The list of components ends with the first 0 length argument (so it is not possible to specify an empty component with this function). Call <a class="reference internal" href="krb5_free_principal.html#c.krb5_free_principal" title="krb5_free_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_principal()</span></code></a> to free allocated memory for principal when it is no longer needed.</p>
-<p>Beginning with release 1.20, the name type of the principal will be inferred as <strong>KRB5_NT_SRV_INST</strong> or <strong>KRB5_NT_WELLKNOWN</strong> based on the principal name. The type will be <strong>KRB5_NT_PRINCIPAL</strong> if a type cannot be inferred.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_build_principal_ext - Build a principal name using length-counted strings.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_build_principal_alloc_va.html" title="krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list."
- >previous</a> |
- <a href="krb5_cc_close.html" title="krb5_cc_close - Close a credential cache handle."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_build_principal_ext - Build a principal name using length-counted strings.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_build_principal_va — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_random_seed" href="krb5_c_random_seed.html" />
- <link rel="prev" title="krb5_auth_con_initivector - Cause an auth context to use cipher state." href="krb5_auth_con_initivector.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_initivector.html" title="krb5_auth_con_initivector - Cause an auth context to use cipher state."
- accesskey="P">previous</a> |
- <a href="krb5_c_random_seed.html" title="krb5_c_random_seed"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_build_principal_va">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-build-principal-va">
-<h1>krb5_build_principal_va<a class="headerlink" href="#krb5-build-principal-va" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_build_principal_va">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_build_principal_va</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> princ</em>, unsigned int<em> rlen</em>, const char *<em> realm</em>, va_list<em> ap</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_build_principal_va" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>princ</strong></p>
-<p><strong>rlen</strong></p>
-<p><strong>realm</strong></p>
-<p class="last"><strong>ap</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_build_principal_alloc_va() .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_build_principal_va</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_initivector.html" title="krb5_auth_con_initivector - Cause an auth context to use cipher state."
- >previous</a> |
- <a href="krb5_c_random_seed.html" title="krb5_c_random_seed"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_build_principal_va">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_block_size - Return cipher block size. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_checksum_length - Return the length of checksums for a checksum type." href="krb5_c_checksum_length.html" />
- <link rel="prev" title="krb5_wrap_error_message - Add a prefix to a different error code’s message." href="krb5_wrap_error_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_wrap_error_message.html" title="krb5_wrap_error_message - Add a prefix to a different error code’s message."
- accesskey="P">previous</a> |
- <a href="krb5_c_checksum_length.html" title="krb5_c_checksum_length - Return the length of checksums for a checksum type."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_block_size - Return cipher block size.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-block-size-return-cipher-block-size">
-<h1>krb5_c_block_size - Return cipher block size.<a class="headerlink" href="#krb5-c-block-size-return-cipher-block-size" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_block_size">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_block_size</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, size_t *<em> blocksize</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_block_size" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p class="last"><strong>[out]</strong> <strong>blocksize</strong> - Block size for <em>enctype</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_block_size - Return cipher block size.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_wrap_error_message.html" title="krb5_wrap_error_message - Add a prefix to a different error code’s message."
- >previous</a> |
- <a href="krb5_c_checksum_length.html" title="krb5_c_checksum_length - Return the length of checksums for a checksum type."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_block_size - Return cipher block size.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_checksum_length - Return the length of checksums for a checksum type. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_crypto_length - Return a length of a message field specific to the encryption type." href="krb5_c_crypto_length.html" />
- <link rel="prev" title="krb5_c_block_size - Return cipher block size." href="krb5_c_block_size.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_block_size.html" title="krb5_c_block_size - Return cipher block size."
- accesskey="P">previous</a> |
- <a href="krb5_c_crypto_length.html" title="krb5_c_crypto_length - Return a length of a message field specific to the encryption type."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_checksum_length - Return the length of checksums for a checksum type.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-checksum-length-return-the-length-of-checksums-for-a-checksum-type">
-<h1>krb5_c_checksum_length - Return the length of checksums for a checksum type.<a class="headerlink" href="#krb5-c-checksum-length-return-the-length-of-checksums-for-a-checksum-type" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_checksum_length">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_checksum_length</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> cksumtype</em>, size_t *<em> length</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_checksum_length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cksumtype</strong> - Checksum type</p>
-<p class="last"><strong>[out]</strong> <strong>length</strong> - Checksum length</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_checksum_length - Return the length of checksums for a checksum type.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_block_size.html" title="krb5_c_block_size - Return cipher block size."
- >previous</a> |
- <a href="krb5_c_crypto_length.html" title="krb5_c_crypto_length - Return a length of a message field specific to the encryption type."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_checksum_length - Return the length of checksums for a checksum type.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_crypto_length - Return a length of a message field specific to the encryption type. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array." href="krb5_c_crypto_length_iov.html" />
- <link rel="prev" title="krb5_c_checksum_length - Return the length of checksums for a checksum type." href="krb5_c_checksum_length.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_checksum_length.html" title="krb5_c_checksum_length - Return the length of checksums for a checksum type."
- accesskey="P">previous</a> |
- <a href="krb5_c_crypto_length_iov.html" title="krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_crypto_length - Return a length of a message field specific to the encryption type.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-crypto-length-return-a-length-of-a-message-field-specific-to-the-encryption-type">
-<h1>krb5_c_crypto_length - Return a length of a message field specific to the encryption type.<a class="headerlink" href="#krb5-c-crypto-length-return-a-length-of-a-message-field-specific-to-the-encryption-type" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_crypto_length">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_crypto_length</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, <a class="reference internal" href="../types/krb5_cryptotype.html#c.krb5_cryptotype" title="krb5_cryptotype">krb5_cryptotype</a><em> type</em>, unsigned int *<em> size</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_crypto_length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[in]</strong> <strong>type</strong> - Type field (See <code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE</span></code> types)</p>
-<p class="last"><strong>[out]</strong> <strong>size</strong> - Length of the <em>type</em> specific to <em>enctype</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_crypto_length - Return a length of a message field specific to the encryption type.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_checksum_length.html" title="krb5_c_checksum_length - Return the length of checksums for a checksum type."
- >previous</a> |
- <a href="krb5_c_crypto_length_iov.html" title="krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_crypto_length - Return a length of a message field specific to the encryption type.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_decrypt - Decrypt data using a key (operates on keyblock)." href="krb5_c_decrypt.html" />
- <link rel="prev" title="krb5_c_crypto_length - Return a length of a message field specific to the encryption type." href="krb5_c_crypto_length.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_crypto_length.html" title="krb5_c_crypto_length - Return a length of a message field specific to the encryption type."
- accesskey="P">previous</a> |
- <a href="krb5_c_decrypt.html" title="krb5_c_decrypt - Decrypt data using a key (operates on keyblock)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-crypto-length-iov-fill-in-lengths-for-header-trailer-and-padding-in-a-iov-array">
-<h1>krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array.<a class="headerlink" href="#krb5-c-crypto-length-iov-fill-in-lengths-for-header-trailer-and-padding-in-a-iov-array" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_crypto_length_iov">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_crypto_length_iov</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, <a class="reference internal" href="../types/krb5_crypto_iov.html#c.krb5_crypto_iov" title="krb5_crypto_iov">krb5_crypto_iov</a> *<em> data</em>, size_t<em> num_data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_crypto_length_iov" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[inout]</strong> <strong>data</strong> - IOV array</p>
-<p class="last"><strong>[in]</strong> <strong>num_data</strong> - Size of <em>data</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Padding is set to the actual padding required based on the provided <em>data</em> buffers. Typically this API is used after setting up the data buffers and <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.html#KRB5_CRYPTO_TYPE_SIGN_ONLY" title="KRB5_CRYPTO_TYPE_SIGN_ONLY"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_SIGN_ONLY</span></code></a> buffers, but before actually allocating header, trailer and padding.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_crypto_length.html" title="krb5_c_crypto_length - Return a length of a message field specific to the encryption type."
- >previous</a> |
- <a href="krb5_c_decrypt.html" title="krb5_c_decrypt - Decrypt data using a key (operates on keyblock)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_decrypt - Decrypt data using a key (operates on keyblock). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock)." href="krb5_c_decrypt_iov.html" />
- <link rel="prev" title="krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array." href="krb5_c_crypto_length_iov.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_crypto_length_iov.html" title="krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array."
- accesskey="P">previous</a> |
- <a href="krb5_c_decrypt_iov.html" title="krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_decrypt - Decrypt data using a key (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-decrypt-decrypt-data-using-a-key-operates-on-keyblock">
-<h1>krb5_c_decrypt - Decrypt data using a key (operates on keyblock).<a class="headerlink" href="#krb5-c-decrypt-decrypt-data-using-a-key-operates-on-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_decrypt">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_decrypt</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> cipher_state</em>, const <a class="reference internal" href="../types/krb5_enc_data.html#c.krb5_enc_data" title="krb5_enc_data">krb5_enc_data</a> *<em> input</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> output</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_decrypt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[inout]</strong> <strong>cipher_state</strong> - Cipher state; specify NULL if not needed</p>
-<p><strong>[in]</strong> <strong>input</strong> - Encrypted data</p>
-<p class="last"><strong>[out]</strong> <strong>output</strong> - Decrypted data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function decrypts the data block <em>input</em> and stores the output into <em>output</em> . The actual decryption key will be derived from <em>key</em> and <em>usage</em> if key derivation is specified for the encryption type. If non-null, <em>cipher_state</em> specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The caller must initialize <em>output</em> and allocate at least enough space for the result. The usual practice is to allocate an output buffer as long as the ciphertext, and let <a class="reference internal" href="#c.krb5_c_decrypt" title="krb5_c_decrypt"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_decrypt()</span></code></a> trim <em>output->length</em> . For some enctypes, the resulting <em>output->length</em> may include padding bytes.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_decrypt - Decrypt data using a key (operates on keyblock).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_crypto_length_iov.html" title="krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array."
- >previous</a> |
- <a href="krb5_c_decrypt_iov.html" title="krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_decrypt - Decrypt data using a key (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+)." href="krb5_c_derive_prfplus.html" />
- <link rel="prev" title="krb5_c_decrypt - Decrypt data using a key (operates on keyblock)." href="krb5_c_decrypt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_decrypt.html" title="krb5_c_decrypt - Decrypt data using a key (operates on keyblock)."
- accesskey="P">previous</a> |
- <a href="krb5_c_derive_prfplus.html" title="krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-decrypt-iov-decrypt-data-in-place-supporting-aead-operates-on-keyblock">
-<h1>krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock).<a class="headerlink" href="#krb5-c-decrypt-iov-decrypt-data-in-place-supporting-aead-operates-on-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_decrypt_iov">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_decrypt_iov</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> keyblock</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> cipher_state</em>, <a class="reference internal" href="../types/krb5_crypto_iov.html#c.krb5_crypto_iov" title="krb5_crypto_iov">krb5_crypto_iov</a> *<em> data</em>, size_t<em> num_data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_decrypt_iov" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>keyblock</strong> - Encryption key</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[in]</strong> <strong>cipher_state</strong> - Cipher state; specify NULL if not needed</p>
-<p><strong>[inout]</strong> <strong>data</strong> - IOV array. Modified in-place.</p>
-<p class="last"><strong>[in]</strong> <strong>num_data</strong> - Size of <em>data</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function decrypts the data block <em>data</em> and stores the output in-place. The actual decryption key will be derived from <em>keyblock</em> and <em>usage</em> if key derivation is specified for the encryption type. If non-null, <em>cipher_state</em> specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5_crypto_iov structures before calling into this API.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="#c.krb5_c_decrypt_iov" title="krb5_c_decrypt_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_decrypt_iov()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">On return from a <a class="reference internal" href="#c.krb5_c_decrypt_iov" title="krb5_c_decrypt_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_decrypt_iov()</span></code></a> call, the <em>data->length</em> in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_decrypt.html" title="krb5_c_decrypt - Decrypt data using a key (operates on keyblock)."
- >previous</a> |
- <a href="krb5_c_derive_prfplus.html" title="krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_encrypt - Encrypt data using a key (operates on keyblock)." href="krb5_c_encrypt.html" />
- <link rel="prev" title="krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock)." href="krb5_c_decrypt_iov.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_decrypt_iov.html" title="krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock)."
- accesskey="P">previous</a> |
- <a href="krb5_c_encrypt.html" title="krb5_c_encrypt - Encrypt data using a key (operates on keyblock)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-derive-prfplus-derive-a-key-using-some-input-data-via-rfc-6113-prf">
-<h1>krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+).<a class="headerlink" href="#krb5-c-derive-prfplus-derive-a-key-using-some-input-data-via-rfc-6113-prf" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_derive_prfplus">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_derive_prfplus</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> k</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> input</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_derive_prfplus" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>k</strong> - KDC contribution key</p>
-<p><strong>[in]</strong> <strong>input</strong> - Input string</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Output key enctype (or <strong>ENCTYPE_NULL</strong> )</p>
-<p class="last"><strong>[out]</strong> <strong>out</strong> - Derived keyblock</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function uses PRF+ as defined in RFC 6113 to derive a key from another key and an input string. If <em>enctype</em> is <strong>ENCTYPE_NULL</strong> , the output key will have the same enctype as the input key.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_decrypt_iov.html" title="krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock)."
- >previous</a> |
- <a href="krb5_c_encrypt.html" title="krb5_c_encrypt - Encrypt data using a key (operates on keyblock)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_encrypt - Encrypt data using a key (operates on keyblock). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock)." href="krb5_c_encrypt_iov.html" />
- <link rel="prev" title="krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+)." href="krb5_c_derive_prfplus.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_derive_prfplus.html" title="krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+)."
- accesskey="P">previous</a> |
- <a href="krb5_c_encrypt_iov.html" title="krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_encrypt - Encrypt data using a key (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-encrypt-encrypt-data-using-a-key-operates-on-keyblock">
-<h1>krb5_c_encrypt - Encrypt data using a key (operates on keyblock).<a class="headerlink" href="#krb5-c-encrypt-encrypt-data-using-a-key-operates-on-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_encrypt">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_encrypt</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> cipher_state</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> input</em>, <a class="reference internal" href="../types/krb5_enc_data.html#c.krb5_enc_data" title="krb5_enc_data">krb5_enc_data</a> *<em> output</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_encrypt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[inout]</strong> <strong>cipher_state</strong> - Cipher state; specify NULL if not needed</p>
-<p><strong>[in]</strong> <strong>input</strong> - Data to be encrypted</p>
-<p class="last"><strong>[out]</strong> <strong>output</strong> - Encrypted data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function encrypts the data block <em>input</em> and stores the output into <em>output</em> . The actual encryption key will be derived from <em>key</em> and <em>usage</em> if key derivation is specified for the encryption type. If non-null, <em>cipher_state</em> specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The caller must initialize <em>output</em> and allocate at least enough space for the result (using <a class="reference internal" href="krb5_c_encrypt_length.html#c.krb5_c_encrypt_length" title="krb5_c_encrypt_length"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_encrypt_length()</span></code></a> to determine the amount of space needed). <em>output->length</em> will be set to the actual length of the ciphertext.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_encrypt - Encrypt data using a key (operates on keyblock).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_derive_prfplus.html" title="krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+)."
- >previous</a> |
- <a href="krb5_c_encrypt_iov.html" title="krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_encrypt - Encrypt data using a key (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_encrypt_length - Compute encrypted data length." href="krb5_c_encrypt_length.html" />
- <link rel="prev" title="krb5_c_encrypt - Encrypt data using a key (operates on keyblock)." href="krb5_c_encrypt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_encrypt.html" title="krb5_c_encrypt - Encrypt data using a key (operates on keyblock)."
- accesskey="P">previous</a> |
- <a href="krb5_c_encrypt_length.html" title="krb5_c_encrypt_length - Compute encrypted data length."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-encrypt-iov-encrypt-data-in-place-supporting-aead-operates-on-keyblock">
-<h1>krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock).<a class="headerlink" href="#krb5-c-encrypt-iov-encrypt-data-in-place-supporting-aead-operates-on-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_encrypt_iov">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_encrypt_iov</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> keyblock</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> cipher_state</em>, <a class="reference internal" href="../types/krb5_crypto_iov.html#c.krb5_crypto_iov" title="krb5_crypto_iov">krb5_crypto_iov</a> *<em> data</em>, size_t<em> num_data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_encrypt_iov" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>keyblock</strong> - Encryption key</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[in]</strong> <strong>cipher_state</strong> - Cipher state; specify NULL if not needed</p>
-<p><strong>[inout]</strong> <strong>data</strong> - IOV array. Modified in-place.</p>
-<p class="last"><strong>[in]</strong> <strong>num_data</strong> - Size of <em>data</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function encrypts the data block <em>data</em> and stores the output in-place. The actual encryption key will be derived from <em>keyblock</em> and <em>usage</em> if key derivation is specified for the encryption type. If non-null, <em>cipher_state</em> specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5_crypto_iov structures before calling into this API.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_c_decrypt_iov.html#c.krb5_c_decrypt_iov" title="krb5_c_decrypt_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_decrypt_iov()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">On return from a <a class="reference internal" href="#c.krb5_c_encrypt_iov" title="krb5_c_encrypt_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_encrypt_iov()</span></code></a> call, the <em>data->length</em> in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_encrypt.html" title="krb5_c_encrypt - Encrypt data using a key (operates on keyblock)."
- >previous</a> |
- <a href="krb5_c_encrypt_length.html" title="krb5_c_encrypt_length - Compute encrypted data length."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_encrypt_length - Compute encrypted data length. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_enctype_compare - Compare two encryption types." href="krb5_c_enctype_compare.html" />
- <link rel="prev" title="krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock)." href="krb5_c_encrypt_iov.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_encrypt_iov.html" title="krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock)."
- accesskey="P">previous</a> |
- <a href="krb5_c_enctype_compare.html" title="krb5_c_enctype_compare - Compare two encryption types."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_encrypt_length - Compute encrypted data length.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-encrypt-length-compute-encrypted-data-length">
-<h1>krb5_c_encrypt_length - Compute encrypted data length.<a class="headerlink" href="#krb5-c-encrypt-length-compute-encrypted-data-length" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_encrypt_length">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_encrypt_length</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, size_t<em> inputlen</em>, size_t *<em> length</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_encrypt_length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[in]</strong> <strong>inputlen</strong> - Length of the data to be encrypted</p>
-<p class="last"><strong>[out]</strong> <strong>length</strong> - Length of the encrypted data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function computes the length of the ciphertext produced by encrypting <em>inputlen</em> bytes including padding, confounder, and checksum.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_encrypt_length - Compute encrypted data length.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_encrypt_iov.html" title="krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock)."
- >previous</a> |
- <a href="krb5_c_enctype_compare.html" title="krb5_c_enctype_compare - Compare two encryption types."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_encrypt_length - Compute encrypted data length.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_enctype_compare - Compare two encryption types. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() ." href="krb5_c_free_state.html" />
- <link rel="prev" title="krb5_c_encrypt_length - Compute encrypted data length." href="krb5_c_encrypt_length.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_encrypt_length.html" title="krb5_c_encrypt_length - Compute encrypted data length."
- accesskey="P">previous</a> |
- <a href="krb5_c_free_state.html" title="krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() ."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_enctype_compare - Compare two encryption types.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-enctype-compare-compare-two-encryption-types">
-<h1>krb5_c_enctype_compare - Compare two encryption types.<a class="headerlink" href="#krb5-c-enctype-compare-compare-two-encryption-types" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_enctype_compare">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_enctype_compare</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> e1</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> e2</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> *<em> similar</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_enctype_compare" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>e1</strong> - First encryption type</p>
-<p><strong>[in]</strong> <strong>e2</strong> - Second encryption type</p>
-<p class="last"><strong>[out]</strong> <strong>similar</strong> - <strong>TRUE</strong> if types are similar, <strong>FALSE</strong> if not</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function determines whether two encryption types use the same kind of keys.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_enctype_compare - Compare two encryption types.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_encrypt_length.html" title="krb5_c_encrypt_length - Compute encrypted data length."
- >previous</a> |
- <a href="krb5_c_free_state.html" title="krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() ."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_enctype_compare - Compare two encryption types.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() . — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings." href="krb5_c_fx_cf2_simple.html" />
- <link rel="prev" title="krb5_c_enctype_compare - Compare two encryption types." href="krb5_c_enctype_compare.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_enctype_compare.html" title="krb5_c_enctype_compare - Compare two encryption types."
- accesskey="P">previous</a> |
- <a href="krb5_c_fx_cf2_simple.html" title="krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() .">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-free-state-free-a-cipher-state-previously-allocated-by-krb5-c-init-state">
-<h1>krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() .<a class="headerlink" href="#krb5-c-free-state-free-a-cipher-state-previously-allocated-by-krb5-c-init-state" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_free_state">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_free_state</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> state</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_free_state" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Key</p>
-<p class="last"><strong>[in]</strong> <strong>state</strong> - Cipher state to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() .</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_enctype_compare.html" title="krb5_c_enctype_compare - Compare two encryption types."
- >previous</a> |
- <a href="krb5_c_fx_cf2_simple.html" title="krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() .">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_init_state - Initialize a new cipher state." href="krb5_c_init_state.html" />
- <link rel="prev" title="krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() ." href="krb5_c_free_state.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_free_state.html" title="krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() ."
- accesskey="P">previous</a> |
- <a href="krb5_c_init_state.html" title="krb5_c_init_state - Initialize a new cipher state."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-fx-cf2-simple-compute-the-krb-fx-cf2-combination-of-two-keys-and-pepper-strings">
-<h1>krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings.<a class="headerlink" href="#krb5-c-fx-cf2-simple-compute-the-krb-fx-cf2-combination-of-two-keys-and-pepper-strings" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_fx_cf2_simple">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_fx_cf2_simple</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> k1</em>, const char *<em> pepper1</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> k2</em>, const char *<em> pepper2</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_fx_cf2_simple" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>k1</strong> - KDC contribution key</p>
-<p><strong>[in]</strong> <strong>pepper1</strong> - String”PKINIT”</p>
-<p><strong>[in]</strong> <strong>k2</strong> - Reply key</p>
-<p><strong>[in]</strong> <strong>pepper2</strong> - String”KeyExchange”</p>
-<p class="last"><strong>[out]</strong> <strong>out</strong> - Output key</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function computes the KRB-FX-CF2 function over its inputs and places the results in a newly allocated keyblock. This function is simple in that it assumes that <em>pepper1</em> and <em>pepper2</em> are C strings with no internal nulls and that the enctype of the result will be the same as that of <em>k1</em> . <em>k1</em> and <em>k2</em> may be of different enctypes.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_free_state.html" title="krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() ."
- >previous</a> |
- <a href="krb5_c_init_state.html" title="krb5_c_init_state - Initialize a new cipher state."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_init_state - Initialize a new cipher state. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof." href="krb5_c_is_coll_proof_cksum.html" />
- <link rel="prev" title="krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings." href="krb5_c_fx_cf2_simple.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_fx_cf2_simple.html" title="krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings."
- accesskey="P">previous</a> |
- <a href="krb5_c_is_coll_proof_cksum.html" title="krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_init_state - Initialize a new cipher state.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-init-state-initialize-a-new-cipher-state">
-<h1>krb5_c_init_state - Initialize a new cipher state.<a class="headerlink" href="#krb5-c-init-state-initialize-a-new-cipher-state" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_init_state">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_init_state</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> new_state</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_init_state" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Key</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p class="last"><strong>[out]</strong> <strong>new_state</strong> - New cipher state</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_init_state - Initialize a new cipher state.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_fx_cf2_simple.html" title="krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings."
- >previous</a> |
- <a href="krb5_c_is_coll_proof_cksum.html" title="krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_init_state - Initialize a new cipher state.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_is_keyed_cksum - Test whether a checksum type is keyed." href="krb5_c_is_keyed_cksum.html" />
- <link rel="prev" title="krb5_c_init_state - Initialize a new cipher state." href="krb5_c_init_state.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_init_state.html" title="krb5_c_init_state - Initialize a new cipher state."
- accesskey="P">previous</a> |
- <a href="krb5_c_is_keyed_cksum.html" title="krb5_c_is_keyed_cksum - Test whether a checksum type is keyed."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-is-coll-proof-cksum-test-whether-a-checksum-type-is-collision-proof">
-<h1>krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof.<a class="headerlink" href="#krb5-c-is-coll-proof-cksum-test-whether-a-checksum-type-is-collision-proof" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_is_coll_proof_cksum">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_c_is_coll_proof_cksum</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> ctype</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_is_coll_proof_cksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>ctype</strong> - Checksum type</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if ctype is collision-proof, FALSE if it is not collision-proof or not a valid checksum type.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_init_state.html" title="krb5_c_init_state - Initialize a new cipher state."
- >previous</a> |
- <a href="krb5_c_is_keyed_cksum.html" title="krb5_c_is_keyed_cksum - Test whether a checksum type is keyed."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_is_keyed_cksum - Test whether a checksum type is keyed. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type." href="krb5_c_keyed_checksum_types.html" />
- <link rel="prev" title="krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof." href="krb5_c_is_coll_proof_cksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_is_coll_proof_cksum.html" title="krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof."
- accesskey="P">previous</a> |
- <a href="krb5_c_keyed_checksum_types.html" title="krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_is_keyed_cksum - Test whether a checksum type is keyed.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-is-keyed-cksum-test-whether-a-checksum-type-is-keyed">
-<h1>krb5_c_is_keyed_cksum - Test whether a checksum type is keyed.<a class="headerlink" href="#krb5-c-is-keyed-cksum-test-whether-a-checksum-type-is-keyed" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_is_keyed_cksum">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_c_is_keyed_cksum</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> ctype</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_is_keyed_cksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>ctype</strong> - Checksum type</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if ctype is a keyed checksum type, FALSE otherwise.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_is_keyed_cksum - Test whether a checksum type is keyed.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_is_coll_proof_cksum.html" title="krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof."
- >previous</a> |
- <a href="krb5_c_keyed_checksum_types.html" title="krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_is_keyed_cksum - Test whether a checksum type is keyed.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_keylengths - Return length of the specified key in bytes." href="krb5_c_keylengths.html" />
- <link rel="prev" title="krb5_c_is_keyed_cksum - Test whether a checksum type is keyed." href="krb5_c_is_keyed_cksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_is_keyed_cksum.html" title="krb5_c_is_keyed_cksum - Test whether a checksum type is keyed."
- accesskey="P">previous</a> |
- <a href="krb5_c_keylengths.html" title="krb5_c_keylengths - Return length of the specified key in bytes."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-keyed-checksum-types-return-a-list-of-keyed-checksum-types-usable-with-an-encryption-type">
-<h1>krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type.<a class="headerlink" href="#krb5-c-keyed-checksum-types-return-a-list-of-keyed-checksum-types-usable-with-an-encryption-type" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_keyed_checksum_types">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_keyed_checksum_types</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, unsigned int *<em> count</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a> **<em> cksumtypes</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_keyed_checksum_types" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[out]</strong> <strong>count</strong> - Count of allowable checksum types</p>
-<p class="last"><strong>[out]</strong> <strong>cksumtypes</strong> - Array of allowable checksum types</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_free_cksumtypes.html#c.krb5_free_cksumtypes" title="krb5_free_cksumtypes"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_cksumtypes()</span></code></a> to free <em>cksumtypes</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_is_keyed_cksum.html" title="krb5_c_is_keyed_cksum - Test whether a checksum type is keyed."
- >previous</a> |
- <a href="krb5_c_keylengths.html" title="krb5_c_keylengths - Return length of the specified key in bytes."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_keylengths - Return length of the specified key in bytes. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_make_checksum - Compute a checksum (operates on keyblock)." href="krb5_c_make_checksum.html" />
- <link rel="prev" title="krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type." href="krb5_c_keyed_checksum_types.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_keyed_checksum_types.html" title="krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type."
- accesskey="P">previous</a> |
- <a href="krb5_c_make_checksum.html" title="krb5_c_make_checksum - Compute a checksum (operates on keyblock)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_keylengths - Return length of the specified key in bytes.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-keylengths-return-length-of-the-specified-key-in-bytes">
-<h1>krb5_c_keylengths - Return length of the specified key in bytes.<a class="headerlink" href="#krb5-c-keylengths-return-length-of-the-specified-key-in-bytes" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_keylengths">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_keylengths</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, size_t *<em> keybytes</em>, size_t *<em> keylength</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_keylengths" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[out]</strong> <strong>keybytes</strong> - Number of bytes required to make a key</p>
-<p class="last"><strong>[out]</strong> <strong>keylength</strong> - Length of final key</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_keylengths - Return length of the specified key in bytes.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_keyed_checksum_types.html" title="krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type."
- >previous</a> |
- <a href="krb5_c_make_checksum.html" title="krb5_c_make_checksum - Compute a checksum (operates on keyblock)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_keylengths - Return length of the specified key in bytes.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_make_checksum - Compute a checksum (operates on keyblock). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)" href="krb5_c_make_checksum_iov.html" />
- <link rel="prev" title="krb5_c_keylengths - Return length of the specified key in bytes." href="krb5_c_keylengths.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_keylengths.html" title="krb5_c_keylengths - Return length of the specified key in bytes."
- accesskey="P">previous</a> |
- <a href="krb5_c_make_checksum_iov.html" title="krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_make_checksum - Compute a checksum (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-make-checksum-compute-a-checksum-operates-on-keyblock">
-<h1>krb5_c_make_checksum - Compute a checksum (operates on keyblock).<a class="headerlink" href="#krb5-c-make-checksum-compute-a-checksum-operates-on-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_make_checksum">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_make_checksum</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> cksumtype</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> input</em>, <a class="reference internal" href="../types/krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> *<em> cksum</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_make_checksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cksumtype</strong> - Checksum type (0 for mandatory type)</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key for a keyed checksum</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[in]</strong> <strong>input</strong> - Input data</p>
-<p class="last"><strong>[out]</strong> <strong>cksum</strong> - Generated checksum</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function computes a checksum of type <em>cksumtype</em> over <em>input</em> , using <em>key</em> if the checksum type is a keyed checksum. If <em>cksumtype</em> is 0 and <em>key</em> is non-null, the checksum type will be the mandatory-to-implement checksum type for the key’s encryption type. The actual checksum key will be derived from <em>key</em> and <em>usage</em> if key derivation is specified for the checksum type. The newly created <em>cksum</em> must be released by calling <a class="reference internal" href="krb5_free_checksum_contents.html#c.krb5_free_checksum_contents" title="krb5_free_checksum_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_checksum_contents()</span></code></a> when it is no longer needed.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_c_verify_checksum.html#c.krb5_c_verify_checksum" title="krb5_c_verify_checksum"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_verify_checksum()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function is similar to <a class="reference internal" href="krb5_k_make_checksum.html#c.krb5_k_make_checksum" title="krb5_k_make_checksum"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_make_checksum()</span></code></a> , but operates on keyblock <em>key</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_make_checksum - Compute a checksum (operates on keyblock).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_keylengths.html" title="krb5_c_keylengths - Return length of the specified key in bytes."
- >previous</a> |
- <a href="krb5_c_make_checksum_iov.html" title="krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_make_checksum - Compute a checksum (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_make_random_key - Generate an enctype-specific random encryption key." href="krb5_c_make_random_key.html" />
- <link rel="prev" title="krb5_c_make_checksum - Compute a checksum (operates on keyblock)." href="krb5_c_make_checksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_make_checksum.html" title="krb5_c_make_checksum - Compute a checksum (operates on keyblock)."
- accesskey="P">previous</a> |
- <a href="krb5_c_make_random_key.html" title="krb5_c_make_random_key - Generate an enctype-specific random encryption key."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-make-checksum-iov-fill-in-a-checksum-element-in-iov-array-operates-on-keyblock">
-<h1>krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)<a class="headerlink" href="#krb5-c-make-checksum-iov-fill-in-a-checksum-element-in-iov-array-operates-on-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_make_checksum_iov">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_make_checksum_iov</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> cksumtype</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, <a class="reference internal" href="../types/krb5_crypto_iov.html#c.krb5_crypto_iov" title="krb5_crypto_iov">krb5_crypto_iov</a> *<em> data</em>, size_t<em> num_data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_make_checksum_iov" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cksumtype</strong> - Checksum type (0 for mandatory type)</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key for a keyed checksum</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[inout]</strong> <strong>data</strong> - IOV array</p>
-<p class="last"><strong>[in]</strong> <strong>num_data</strong> - Size of <em>data</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Create a checksum in the <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_CHECKSUM.html#KRB5_CRYPTO_TYPE_CHECKSUM" title="KRB5_CRYPTO_TYPE_CHECKSUM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_CHECKSUM</span></code></a> element over <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_DATA.html#KRB5_CRYPTO_TYPE_DATA" title="KRB5_CRYPTO_TYPE_DATA"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_DATA</span></code></a> and <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.html#KRB5_CRYPTO_TYPE_SIGN_ONLY" title="KRB5_CRYPTO_TYPE_SIGN_ONLY"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_SIGN_ONLY</span></code></a> chunks in <em>data</em> . Only the <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_CHECKSUM.html#KRB5_CRYPTO_TYPE_CHECKSUM" title="KRB5_CRYPTO_TYPE_CHECKSUM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_CHECKSUM</span></code></a> region is modified.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_c_verify_checksum_iov.html#c.krb5_c_verify_checksum_iov" title="krb5_c_verify_checksum_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_verify_checksum_iov()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function is similar to <a class="reference internal" href="krb5_k_make_checksum_iov.html#c.krb5_k_make_checksum_iov" title="krb5_k_make_checksum_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_make_checksum_iov()</span></code></a> , but operates on keyblock <em>key</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_make_checksum.html" title="krb5_c_make_checksum - Compute a checksum (operates on keyblock)."
- >previous</a> |
- <a href="krb5_c_make_random_key.html" title="krb5_c_make_random_key - Generate an enctype-specific random encryption key."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_make_random_key - Generate an enctype-specific random encryption key. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_padding_length - Return a number of padding octets." href="krb5_c_padding_length.html" />
- <link rel="prev" title="krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)" href="krb5_c_make_checksum_iov.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_make_checksum_iov.html" title="krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)"
- accesskey="P">previous</a> |
- <a href="krb5_c_padding_length.html" title="krb5_c_padding_length - Return a number of padding octets."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_make_random_key - Generate an enctype-specific random encryption key.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-make-random-key-generate-an-enctype-specific-random-encryption-key">
-<h1>krb5_c_make_random_key - Generate an enctype-specific random encryption key.<a class="headerlink" href="#krb5-c-make-random-key-generate-an-enctype-specific-random-encryption-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_make_random_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_make_random_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> k5_random_key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_make_random_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type of the generated key</p>
-<p class="last"><strong>[out]</strong> <strong>k5_random_key</strong> - An allocated and initialized keyblock</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_free_keyblock_contents.html#c.krb5_free_keyblock_contents" title="krb5_free_keyblock_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keyblock_contents()</span></code></a> to free <em>k5_random_key</em> when no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_make_random_key - Generate an enctype-specific random encryption key.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_make_checksum_iov.html" title="krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)"
- >previous</a> |
- <a href="krb5_c_padding_length.html" title="krb5_c_padding_length - Return a number of padding octets."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_make_random_key - Generate an enctype-specific random encryption key.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_padding_length - Return a number of padding octets. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_prf - Generate enctype-specific pseudo-random bytes." href="krb5_c_prf.html" />
- <link rel="prev" title="krb5_c_make_random_key - Generate an enctype-specific random encryption key." href="krb5_c_make_random_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_make_random_key.html" title="krb5_c_make_random_key - Generate an enctype-specific random encryption key."
- accesskey="P">previous</a> |
- <a href="krb5_c_prf.html" title="krb5_c_prf - Generate enctype-specific pseudo-random bytes."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_padding_length - Return a number of padding octets.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-padding-length-return-a-number-of-padding-octets">
-<h1>krb5_c_padding_length - Return a number of padding octets.<a class="headerlink" href="#krb5-c-padding-length-return-a-number-of-padding-octets" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_padding_length">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_padding_length</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, size_t<em> data_length</em>, unsigned int *<em> size</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_padding_length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[in]</strong> <strong>data_length</strong> - Length of the plaintext to pad</p>
-<p class="last"><strong>[out]</strong> <strong>size</strong> - Number of padding octets</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - KRB5_BAD_ENCTYPE</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function returns the number of the padding octets required to pad <em>data_length</em> octets of plaintext.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_padding_length - Return a number of padding octets.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_make_random_key.html" title="krb5_c_make_random_key - Generate an enctype-specific random encryption key."
- >previous</a> |
- <a href="krb5_c_prf.html" title="krb5_c_prf - Generate enctype-specific pseudo-random bytes."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_padding_length - Return a number of padding octets.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_prf - Generate enctype-specific pseudo-random bytes. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+." href="krb5_c_prfplus.html" />
- <link rel="prev" title="krb5_c_padding_length - Return a number of padding octets." href="krb5_c_padding_length.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_padding_length.html" title="krb5_c_padding_length - Return a number of padding octets."
- accesskey="P">previous</a> |
- <a href="krb5_c_prfplus.html" title="krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_prf - Generate enctype-specific pseudo-random bytes.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-prf-generate-enctype-specific-pseudo-random-bytes">
-<h1>krb5_c_prf - Generate enctype-specific pseudo-random bytes.<a class="headerlink" href="#krb5-c-prf-generate-enctype-specific-pseudo-random-bytes" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_prf">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_prf</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> keyblock</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> input</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> output</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_prf" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>keyblock</strong> - Key</p>
-<p><strong>[in]</strong> <strong>input</strong> - Input data</p>
-<p class="last"><strong>[out]</strong> <strong>output</strong> - Output data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function selects a pseudo-random function based on <em>keyblock</em> and computes its value over <em>input</em> , placing the result into <em>output</em> . The caller must preinitialize <em>output</em> and allocate space for the result, using <a class="reference internal" href="krb5_c_prf_length.html#c.krb5_c_prf_length" title="krb5_c_prf_length"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_prf_length()</span></code></a> to determine the required length.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_prf - Generate enctype-specific pseudo-random bytes.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_padding_length.html" title="krb5_c_padding_length - Return a number of padding octets."
- >previous</a> |
- <a href="krb5_c_prfplus.html" title="krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_prf - Generate enctype-specific pseudo-random bytes.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_random_add_entropy" href="krb5_c_random_add_entropy.html" />
- <link rel="prev" title="krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+." href="krb5_c_prfplus.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_prfplus.html" title="krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+."
- accesskey="P">previous</a> |
- <a href="krb5_c_random_add_entropy.html" title="krb5_c_random_add_entropy"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-prf-length-get-the-output-length-of-pseudo-random-functions-for-an-encryption-type">
-<h1>krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type.<a class="headerlink" href="#krb5-c-prf-length-get-the-output-length-of-pseudo-random-functions-for-an-encryption-type" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_prf_length">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_prf_length</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, size_t *<em> len</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_prf_length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p class="last"><strong>[out]</strong> <strong>len</strong> - Length of PRF output</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_prfplus.html" title="krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+."
- >previous</a> |
- <a href="krb5_c_random_add_entropy.html" title="krb5_c_random_add_entropy"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type." href="krb5_c_prf_length.html" />
- <link rel="prev" title="krb5_c_prf - Generate enctype-specific pseudo-random bytes." href="krb5_c_prf.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_prf.html" title="krb5_c_prf - Generate enctype-specific pseudo-random bytes."
- accesskey="P">previous</a> |
- <a href="krb5_c_prf_length.html" title="krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-prfplus-generate-pseudo-random-bytes-using-rfc-6113-prf">
-<h1>krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+.<a class="headerlink" href="#krb5-c-prfplus-generate-pseudo-random-bytes-using-rfc-6113-prf" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_prfplus">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_prfplus</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> k</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> input</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> output</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_prfplus" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>k</strong> - KDC contribution key</p>
-<p><strong>[in]</strong> <strong>input</strong> - Input data</p>
-<p class="last"><strong>[out]</strong> <strong>output</strong> - Pseudo-random output buffer</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>0 on success, E2BIG if output->length is too large for PRF+ to generate, ENOMEM on allocation failure, or an error code from krb5_c_prf()</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function fills <em>output</em> with PRF+(k, input) as defined in RFC 6113 section 5.1. The caller must preinitialize <em>output</em> and allocate the desired amount of space. The length of the pseudo-random output will match the length of <em>output</em> .</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">RFC 4402 defines a different PRF+ operation. This function does not implement that operation.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_prf.html" title="krb5_c_prf - Generate enctype-specific pseudo-random bytes."
- >previous</a> |
- <a href="krb5_c_prf_length.html" title="krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_random_add_entropy — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_random_make_octets - Generate pseudo-random bytes." href="krb5_c_random_make_octets.html" />
- <link rel="prev" title="krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type." href="krb5_c_prf_length.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_prf_length.html" title="krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type."
- accesskey="P">previous</a> |
- <a href="krb5_c_random_make_octets.html" title="krb5_c_random_make_octets - Generate pseudo-random bytes."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_random_add_entropy">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-random-add-entropy">
-<h1>krb5_c_random_add_entropy<a class="headerlink" href="#krb5-c-random-add-entropy" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_random_add_entropy">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_random_add_entropy</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, unsigned int<em> randsource</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_random_add_entropy" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>randsource</strong></p>
-<p class="last"><strong>data</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED This call is no longer necessary.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_random_add_entropy</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_prf_length.html" title="krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type."
- >previous</a> |
- <a href="krb5_c_random_make_octets.html" title="krb5_c_random_make_octets - Generate pseudo-random bytes."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_random_add_entropy">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_random_make_octets - Generate pseudo-random bytes. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_random_os_entropy" href="krb5_c_random_os_entropy.html" />
- <link rel="prev" title="krb5_c_random_add_entropy" href="krb5_c_random_add_entropy.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_random_add_entropy.html" title="krb5_c_random_add_entropy"
- accesskey="P">previous</a> |
- <a href="krb5_c_random_os_entropy.html" title="krb5_c_random_os_entropy"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_random_make_octets - Generate pseudo-random bytes.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-random-make-octets-generate-pseudo-random-bytes">
-<h1>krb5_c_random_make_octets - Generate pseudo-random bytes.<a class="headerlink" href="#krb5-c-random-make-octets-generate-pseudo-random-bytes" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_random_make_octets">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_random_make_octets</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_random_make_octets" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>data</strong> - Random data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Fills in <em>data</em> with bytes from the PRNG used by krb5 crypto operations. The caller must preinitialize <em>data</em> and allocate the desired amount of space.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_random_make_octets - Generate pseudo-random bytes.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_random_add_entropy.html" title="krb5_c_random_add_entropy"
- >previous</a> |
- <a href="krb5_c_random_os_entropy.html" title="krb5_c_random_os_entropy"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_random_make_octets - Generate pseudo-random bytes.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_random_os_entropy — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_random_to_key - Generate an enctype-specific key from random data." href="krb5_c_random_to_key.html" />
- <link rel="prev" title="krb5_c_random_make_octets - Generate pseudo-random bytes." href="krb5_c_random_make_octets.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_random_make_octets.html" title="krb5_c_random_make_octets - Generate pseudo-random bytes."
- accesskey="P">previous</a> |
- <a href="krb5_c_random_to_key.html" title="krb5_c_random_to_key - Generate an enctype-specific key from random data."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_random_os_entropy">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-random-os-entropy">
-<h1>krb5_c_random_os_entropy<a class="headerlink" href="#krb5-c-random-os-entropy" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_random_os_entropy">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_random_os_entropy</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, int<em> strong</em>, int *<em> success</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_random_os_entropy" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>strong</strong></p>
-<p class="last"><strong>success</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED This call is no longer necessary.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_random_os_entropy</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_random_make_octets.html" title="krb5_c_random_make_octets - Generate pseudo-random bytes."
- >previous</a> |
- <a href="krb5_c_random_to_key.html" title="krb5_c_random_to_key - Generate an enctype-specific key from random data."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_random_os_entropy">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_random_seed — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_calculate_checksum" href="krb5_calculate_checksum.html" />
- <link rel="prev" title="krb5_build_principal_va" href="krb5_build_principal_va.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_build_principal_va.html" title="krb5_build_principal_va"
- accesskey="P">previous</a> |
- <a href="krb5_calculate_checksum.html" title="krb5_calculate_checksum"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_random_seed">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-random-seed">
-<h1>krb5_c_random_seed<a class="headerlink" href="#krb5-c-random-seed" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_random_seed">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_random_seed</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_random_seed" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p class="last"><strong>data</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED This call is no longer necessary.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_random_seed</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_build_principal_va.html" title="krb5_build_principal_va"
- >previous</a> |
- <a href="krb5_calculate_checksum.html" title="krb5_calculate_checksum"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_random_seed">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_random_to_key - Generate an enctype-specific key from random data. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_string_to_key - Convert a string (such a password) to a key." href="krb5_c_string_to_key.html" />
- <link rel="prev" title="krb5_c_random_os_entropy" href="krb5_c_random_os_entropy.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_random_os_entropy.html" title="krb5_c_random_os_entropy"
- accesskey="P">previous</a> |
- <a href="krb5_c_string_to_key.html" title="krb5_c_string_to_key - Convert a string (such a password) to a key."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_random_to_key - Generate an enctype-specific key from random data.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-random-to-key-generate-an-enctype-specific-key-from-random-data">
-<h1>krb5_c_random_to_key - Generate an enctype-specific key from random data.<a class="headerlink" href="#krb5-c-random-to-key-generate-an-enctype-specific-key-from-random-data" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_random_to_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_random_to_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> random_data</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> k5_random_key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_random_to_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[in]</strong> <strong>random_data</strong> - Random input data</p>
-<p class="last"><strong>[out]</strong> <strong>k5_random_key</strong> - Resulting key</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function takes random input data <em>random_data</em> and produces a valid key <em>k5_random_key</em> for a given <em>enctype</em> .</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_c_keylengths.html#c.krb5_c_keylengths" title="krb5_c_keylengths"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_keylengths()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">It is assumed that <em>k5_random_key</em> has already been initialized and <em>k5_random_key->contents</em> has been allocated with the correct length.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_random_to_key - Generate an enctype-specific key from random data.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_random_os_entropy.html" title="krb5_c_random_os_entropy"
- >previous</a> |
- <a href="krb5_c_string_to_key.html" title="krb5_c_string_to_key - Convert a string (such a password) to a key."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_random_to_key - Generate an enctype-specific key from random data.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_string_to_key - Convert a string (such a password) to a key. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters." href="krb5_c_string_to_key_with_params.html" />
- <link rel="prev" title="krb5_c_random_to_key - Generate an enctype-specific key from random data." href="krb5_c_random_to_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_random_to_key.html" title="krb5_c_random_to_key - Generate an enctype-specific key from random data."
- accesskey="P">previous</a> |
- <a href="krb5_c_string_to_key_with_params.html" title="krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_string_to_key - Convert a string (such a password) to a key.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-string-to-key-convert-a-string-such-a-password-to-a-key">
-<h1>krb5_c_string_to_key - Convert a string (such a password) to a key.<a class="headerlink" href="#krb5-c-string-to-key-convert-a-string-such-a-password-to-a-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_string_to_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_string_to_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> string</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> salt</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_string_to_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[in]</strong> <strong>string</strong> - String to be converted</p>
-<p><strong>[in]</strong> <strong>salt</strong> - Salt value</p>
-<p class="last"><strong>[out]</strong> <strong>key</strong> - Generated key</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function converts <em>string</em> to a <em>key</em> of encryption type <em>enctype</em> , using the specified <em>salt</em> . The newly created <em>key</em> must be released by calling <a class="reference internal" href="krb5_free_keyblock_contents.html#c.krb5_free_keyblock_contents" title="krb5_free_keyblock_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keyblock_contents()</span></code></a> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_string_to_key - Convert a string (such a password) to a key.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_random_to_key.html" title="krb5_c_random_to_key - Generate an enctype-specific key from random data."
- >previous</a> |
- <a href="krb5_c_string_to_key_with_params.html" title="krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_string_to_key - Convert a string (such a password) to a key.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type." href="krb5_c_valid_cksumtype.html" />
- <link rel="prev" title="krb5_c_string_to_key - Convert a string (such a password) to a key." href="krb5_c_string_to_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_string_to_key.html" title="krb5_c_string_to_key - Convert a string (such a password) to a key."
- accesskey="P">previous</a> |
- <a href="krb5_c_valid_cksumtype.html" title="krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-string-to-key-with-params-convert-a-string-such-as-a-password-to-a-key-with-additional-parameters">
-<h1>krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters.<a class="headerlink" href="#krb5-c-string-to-key-with-params-convert-a-string-such-as-a-password-to-a-key-with-additional-parameters" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_string_to_key_with_params">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_string_to_key_with_params</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> string</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> salt</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> params</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_string_to_key_with_params" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[in]</strong> <strong>string</strong> - String to be converted</p>
-<p><strong>[in]</strong> <strong>salt</strong> - Salt value</p>
-<p><strong>[in]</strong> <strong>params</strong> - Parameters</p>
-<p class="last"><strong>[out]</strong> <strong>key</strong> - Generated key</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is similar to <a class="reference internal" href="krb5_c_string_to_key.html#c.krb5_c_string_to_key" title="krb5_c_string_to_key"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_string_to_key()</span></code></a> , but also takes parameters which may affect the algorithm in an enctype-dependent way. The newly created <em>key</em> must be released by calling <a class="reference internal" href="krb5_free_keyblock_contents.html#c.krb5_free_keyblock_contents" title="krb5_free_keyblock_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keyblock_contents()</span></code></a> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_string_to_key.html" title="krb5_c_string_to_key - Convert a string (such a password) to a key."
- >previous</a> |
- <a href="krb5_c_valid_cksumtype.html" title="krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type." href="krb5_c_valid_enctype.html" />
- <link rel="prev" title="krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters." href="krb5_c_string_to_key_with_params.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_string_to_key_with_params.html" title="krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters."
- accesskey="P">previous</a> |
- <a href="krb5_c_valid_enctype.html" title="krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-valid-cksumtype-verify-that-specified-checksum-type-is-a-valid-kerberos-checksum-type">
-<h1>krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type.<a class="headerlink" href="#krb5-c-valid-cksumtype-verify-that-specified-checksum-type-is-a-valid-kerberos-checksum-type" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_valid_cksumtype">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_c_valid_cksumtype</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> ctype</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_valid_cksumtype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>ctype</strong> - Checksum type</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if ctype is valid, FALSE if not</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_string_to_key_with_params.html" title="krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters."
- >previous</a> |
- <a href="krb5_c_valid_enctype.html" title="krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_verify_checksum - Verify a checksum (operates on keyblock)." href="krb5_c_verify_checksum.html" />
- <link rel="prev" title="krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type." href="krb5_c_valid_cksumtype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_valid_cksumtype.html" title="krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type."
- accesskey="P">previous</a> |
- <a href="krb5_c_verify_checksum.html" title="krb5_c_verify_checksum - Verify a checksum (operates on keyblock)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-valid-enctype-verify-that-a-specified-encryption-type-is-a-valid-kerberos-encryption-type">
-<h1>krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type.<a class="headerlink" href="#krb5-c-valid-enctype-verify-that-a-specified-encryption-type-is-a-valid-kerberos-encryption-type" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_valid_enctype">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_c_valid_enctype</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> ktype</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_valid_enctype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>ktype</strong> - Encryption type</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if ktype is valid, FALSE if not</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_valid_cksumtype.html" title="krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type."
- >previous</a> |
- <a href="krb5_c_verify_checksum.html" title="krb5_c_verify_checksum - Verify a checksum (operates on keyblock)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_verify_checksum - Verify a checksum (operates on keyblock). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock)." href="krb5_c_verify_checksum_iov.html" />
- <link rel="prev" title="krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type." href="krb5_c_valid_enctype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_valid_enctype.html" title="krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type."
- accesskey="P">previous</a> |
- <a href="krb5_c_verify_checksum_iov.html" title="krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_verify_checksum - Verify a checksum (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-verify-checksum-verify-a-checksum-operates-on-keyblock">
-<h1>krb5_c_verify_checksum - Verify a checksum (operates on keyblock).<a class="headerlink" href="#krb5-c-verify-checksum-verify-a-checksum-operates-on-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_verify_checksum">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_verify_checksum</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em>, const <a class="reference internal" href="../types/krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> *<em> cksum</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> *<em> valid</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_verify_checksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key for a keyed checksum</p>
-<p><strong>[in]</strong> <strong>usage</strong> - <em>key</em> usage</p>
-<p><strong>[in]</strong> <strong>data</strong> - Data to be used to compute a new checksum using <em>key</em> to compare <em>cksum</em> against</p>
-<p><strong>[in]</strong> <strong>cksum</strong> - Checksum to be verified</p>
-<p class="last"><strong>[out]</strong> <strong>valid</strong> - Non-zero for success, zero for failure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function verifies that <em>cksum</em> is a valid checksum for <em>data</em> . If the checksum type of <em>cksum</em> is a keyed checksum, <em>key</em> is used to verify the checksum. If the checksum type in <em>cksum</em> is 0 and <em>key</em> is not NULL, the mandatory checksum type for <em>key</em> will be used. The actual checksum key will be derived from <em>key</em> and <em>usage</em> if key derivation is specified for the checksum type.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function is similar to <a class="reference internal" href="krb5_k_verify_checksum.html#c.krb5_k_verify_checksum" title="krb5_k_verify_checksum"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_verify_checksum()</span></code></a> , but operates on keyblock <em>key</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_verify_checksum - Verify a checksum (operates on keyblock).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_valid_enctype.html" title="krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type."
- >previous</a> |
- <a href="krb5_c_verify_checksum_iov.html" title="krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_verify_checksum - Verify a checksum (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cksumtype_to_string - Convert a checksum type to a string." href="krb5_cksumtype_to_string.html" />
- <link rel="prev" title="krb5_c_verify_checksum - Verify a checksum (operates on keyblock)." href="krb5_c_verify_checksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_verify_checksum.html" title="krb5_c_verify_checksum - Verify a checksum (operates on keyblock)."
- accesskey="P">previous</a> |
- <a href="krb5_cksumtype_to_string.html" title="krb5_cksumtype_to_string - Convert a checksum type to a string."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-c-verify-checksum-iov-validate-a-checksum-element-in-iov-array-operates-on-keyblock">
-<h1>krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock).<a class="headerlink" href="#krb5-c-verify-checksum-iov-validate-a-checksum-element-in-iov-array-operates-on-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_c_verify_checksum_iov">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_c_verify_checksum_iov</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> cksumtype</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_crypto_iov.html#c.krb5_crypto_iov" title="krb5_crypto_iov">krb5_crypto_iov</a> *<em> data</em>, size_t<em> num_data</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> *<em> valid</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_c_verify_checksum_iov" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cksumtype</strong> - Checksum type (0 for mandatory type)</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key for a keyed checksum</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[in]</strong> <strong>data</strong> - IOV array</p>
-<p><strong>[in]</strong> <strong>num_data</strong> - Size of <em>data</em></p>
-<p class="last"><strong>[out]</strong> <strong>valid</strong> - Non-zero for success, zero for failure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Confirm that the checksum in the <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_CHECKSUM.html#KRB5_CRYPTO_TYPE_CHECKSUM" title="KRB5_CRYPTO_TYPE_CHECKSUM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_CHECKSUM</span></code></a> element is a valid checksum of the <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_DATA.html#KRB5_CRYPTO_TYPE_DATA" title="KRB5_CRYPTO_TYPE_DATA"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_DATA</span></code></a> and <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.html#KRB5_CRYPTO_TYPE_SIGN_ONLY" title="KRB5_CRYPTO_TYPE_SIGN_ONLY"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_SIGN_ONLY</span></code></a> regions in the iov.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_c_make_checksum_iov.html#c.krb5_c_make_checksum_iov" title="krb5_c_make_checksum_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_make_checksum_iov()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function is similar to <a class="reference internal" href="krb5_k_verify_checksum_iov.html#c.krb5_k_verify_checksum_iov" title="krb5_k_verify_checksum_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_verify_checksum_iov()</span></code></a> , but operates on keyblock <em>key</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_verify_checksum.html" title="krb5_c_verify_checksum - Verify a checksum (operates on keyblock)."
- >previous</a> |
- <a href="krb5_cksumtype_to_string.html" title="krb5_cksumtype_to_string - Convert a checksum type to a string."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_calculate_checksum — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_checksum_size" href="krb5_checksum_size.html" />
- <link rel="prev" title="krb5_c_random_seed" href="krb5_c_random_seed.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_random_seed.html" title="krb5_c_random_seed"
- accesskey="P">previous</a> |
- <a href="krb5_checksum_size.html" title="krb5_checksum_size"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_calculate_checksum">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-calculate-checksum">
-<h1>krb5_calculate_checksum<a class="headerlink" href="#krb5-calculate-checksum" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_calculate_checksum">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_calculate_checksum</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> ctype</em>, <a class="reference internal" href="../types/krb5_const_pointer.html#c.krb5_const_pointer" title="krb5_const_pointer">krb5_const_pointer</a><em> in</em>, size_t<em> in_length</em>, <a class="reference internal" href="../types/krb5_const_pointer.html#c.krb5_const_pointer" title="krb5_const_pointer">krb5_const_pointer</a><em> seed</em>, size_t<em> seed_length</em>, <a class="reference internal" href="../types/krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> *<em> outcksum</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_calculate_checksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>ctype</strong></p>
-<p><strong>in</strong></p>
-<p><strong>in_length</strong></p>
-<p><strong>seed</strong></p>
-<p><strong>seed_length</strong></p>
-<p class="last"><strong>outcksum</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED See krb5_c_make_checksum()</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_calculate_checksum</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_random_seed.html" title="krb5_c_random_seed"
- >previous</a> |
- <a href="krb5_checksum_size.html" title="krb5_checksum_size"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_calculate_checksum">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_cache_match - Find a credential cache with a specified client principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_copy_creds - Copy a credential cache." href="krb5_cc_copy_creds.html" />
- <link rel="prev" title="krb5_auth_con_setuseruserkey - Set the session key in an auth context." href="krb5_auth_con_setuseruserkey.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_con_setuseruserkey.html" title="krb5_auth_con_setuseruserkey - Set the session key in an auth context."
- accesskey="P">previous</a> |
- <a href="krb5_cc_copy_creds.html" title="krb5_cc_copy_creds - Copy a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_cache_match - Find a credential cache with a specified client principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-cache-match-find-a-credential-cache-with-a-specified-client-principal">
-<h1>krb5_cc_cache_match - Find a credential cache with a specified client principal.<a class="headerlink" href="#krb5-cc-cache-match-find-a-credential-cache-with-a-specified-client-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_cache_match">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_cache_match</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> client</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a> *<em> cache_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_cache_match" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>client</strong> - Client principal</p>
-<p class="last"><strong>[out]</strong> <strong>cache_out</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success</li>
-<li>KRB5_CC_NOTFOUND None</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Find a cache within the collection whose default principal is <em>client</em> . Use <em>krb5_cc_close</em> to close <em>ccache</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.10</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_cache_match - Find a credential cache with a specified client principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_con_setuseruserkey.html" title="krb5_auth_con_setuseruserkey - Set the session key in an auth context."
- >previous</a> |
- <a href="krb5_cc_copy_creds.html" title="krb5_cc_copy_creds - Copy a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_cache_match - Find a credential cache with a specified client principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_close - Close a credential cache handle. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_default - Resolve the default credential cache name." href="krb5_cc_default.html" />
- <link rel="prev" title="krb5_build_principal_ext - Build a principal name using length-counted strings." href="krb5_build_principal_ext.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_build_principal_ext.html" title="krb5_build_principal_ext - Build a principal name using length-counted strings."
- accesskey="P">previous</a> |
- <a href="krb5_cc_default.html" title="krb5_cc_default - Resolve the default credential cache name."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_close - Close a credential cache handle.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-close-close-a-credential-cache-handle">
-<h1>krb5_cc_close - Close a credential cache handle.<a class="headerlink" href="#krb5-cc-close-close-a-credential-cache-handle" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_close">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_close</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_close" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function closes a credential cache handle <em>cache</em> without affecting the contents of the cache.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_close - Close a credential cache handle.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_build_principal_ext.html" title="krb5_build_principal_ext - Build a principal name using length-counted strings."
- >previous</a> |
- <a href="krb5_cc_default.html" title="krb5_cc_default - Resolve the default credential cache name."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_close - Close a credential cache handle.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_copy_creds - Copy a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries." href="krb5_cc_end_seq_get.html" />
- <link rel="prev" title="krb5_cc_cache_match - Find a credential cache with a specified client principal." href="krb5_cc_cache_match.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_cache_match.html" title="krb5_cc_cache_match - Find a credential cache with a specified client principal."
- accesskey="P">previous</a> |
- <a href="krb5_cc_end_seq_get.html" title="krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_copy_creds - Copy a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-copy-creds-copy-a-credential-cache">
-<h1>krb5_cc_copy_creds - Copy a credential cache.<a class="headerlink" href="#krb5-cc-copy-creds-copy-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_copy_creds">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_copy_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> incc</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> outcc</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_copy_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>incc</strong> - Credential cache to be copied</p>
-<p class="last"><strong>[out]</strong> <strong>outcc</strong> - Copy of credential cache to be filled in</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_copy_creds - Copy a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_cache_match.html" title="krb5_cc_cache_match - Find a credential cache with a specified client principal."
- >previous</a> |
- <a href="krb5_cc_end_seq_get.html" title="krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_copy_creds - Copy a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_default - Resolve the default credential cache name. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_default_name - Return the name of the default credential cache." href="krb5_cc_default_name.html" />
- <link rel="prev" title="krb5_cc_close - Close a credential cache handle." href="krb5_cc_close.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_close.html" title="krb5_cc_close - Close a credential cache handle."
- accesskey="P">previous</a> |
- <a href="krb5_cc_default_name.html" title="krb5_cc_default_name - Return the name of the default credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_default - Resolve the default credential cache name.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-default-resolve-the-default-credential-cache-name">
-<h1>krb5_cc_default - Resolve the default credential cache name.<a class="headerlink" href="#krb5-cc-default-resolve-the-default-credential-cache-name" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_default">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_default</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a> *<em> ccache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_default" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>ccache</strong> - Pointer to credential cache name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>KV5M_CONTEXT Bad magic number for _krb5_context structure</li>
-<li>KRB5_FCC_INTERNAL The name of the default credential cache cannot be obtained</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Create a handle to the default credential cache as given by <a class="reference internal" href="krb5_cc_default_name.html#c.krb5_cc_default_name" title="krb5_cc_default_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_default_name()</span></code></a> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_default - Resolve the default credential cache name.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_close.html" title="krb5_cc_close - Close a credential cache handle."
- >previous</a> |
- <a href="krb5_cc_default_name.html" title="krb5_cc_default_name - Return the name of the default credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_default - Resolve the default credential cache name.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_default_name - Return the name of the default credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_destroy - Destroy a credential cache." href="krb5_cc_destroy.html" />
- <link rel="prev" title="krb5_cc_default - Resolve the default credential cache name." href="krb5_cc_default.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_default.html" title="krb5_cc_default - Resolve the default credential cache name."
- accesskey="P">previous</a> |
- <a href="krb5_cc_destroy.html" title="krb5_cc_destroy - Destroy a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_default_name - Return the name of the default credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-default-name-return-the-name-of-the-default-credential-cache">
-<h1>krb5_cc_default_name - Return the name of the default credential cache.<a class="headerlink" href="#krb5-cc-default-name-return-the-name-of-the-default-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_default_name">
-const char * <code class="descname">krb5_cc_default_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_default_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>context</strong> - Library context</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Name of default credential cache for the current user.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Return a pointer to the default credential cache name for <em>context</em> , as determined by a prior call to <a class="reference internal" href="krb5_cc_set_default_name.html#c.krb5_cc_set_default_name" title="krb5_cc_set_default_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_set_default_name()</span></code></a> , by the KRB5CCNAME environment variable, by the default_ccache_name profile variable, or by the operating system or build-time default value. The returned value must not be modified or freed by the caller. The returned value becomes invalid when <em>context</em> is destroyed <a class="reference internal" href="krb5_free_context.html#c.krb5_free_context" title="krb5_free_context"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_context()</span></code></a> or if a subsequent call to <a class="reference internal" href="krb5_cc_set_default_name.html#c.krb5_cc_set_default_name" title="krb5_cc_set_default_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_set_default_name()</span></code></a> is made on <em>context</em> .</p>
-<p>The default credential cache name is cached in <em>context</em> between calls to this function, so if the value of KRB5CCNAME changes in the process environment after the first call to this function on, that change will not be reflected in later calls with the same context. The caller can invoke <a class="reference internal" href="krb5_cc_set_default_name.html#c.krb5_cc_set_default_name" title="krb5_cc_set_default_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_set_default_name()</span></code></a> with a NULL value of <em>name</em> to clear the cached value and force the default name to be recomputed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_default_name - Return the name of the default credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_default.html" title="krb5_cc_default - Resolve the default credential cache name."
- >previous</a> |
- <a href="krb5_cc_destroy.html" title="krb5_cc_destroy - Destroy a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_default_name - Return the name of the default credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_destroy - Destroy a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_dup - Duplicate ccache handle." href="krb5_cc_dup.html" />
- <link rel="prev" title="krb5_cc_default_name - Return the name of the default credential cache." href="krb5_cc_default_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_default_name.html" title="krb5_cc_default_name - Return the name of the default credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_dup.html" title="krb5_cc_dup - Duplicate ccache handle."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_destroy - Destroy a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-destroy-destroy-a-credential-cache">
-<h1>krb5_cc_destroy - Destroy a credential cache.<a class="headerlink" href="#krb5-cc-destroy-destroy-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_destroy">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_destroy</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_destroy" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Permission errors</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function destroys any existing contents of <em>cache</em> and closes the handle to it.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_destroy - Destroy a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_default_name.html" title="krb5_cc_default_name - Return the name of the default credential cache."
- >previous</a> |
- <a href="krb5_cc_dup.html" title="krb5_cc_dup - Duplicate ccache handle."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_destroy - Destroy a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_dup - Duplicate ccache handle. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_get_name - Retrieve the name, but not type of a credential cache." href="krb5_cc_get_name.html" />
- <link rel="prev" title="krb5_cc_destroy - Destroy a credential cache." href="krb5_cc_destroy.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_destroy.html" title="krb5_cc_destroy - Destroy a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_get_name.html" title="krb5_cc_get_name - Retrieve the name, but not type of a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_dup - Duplicate ccache handle.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-dup-duplicate-ccache-handle">
-<h1>krb5_cc_dup - Duplicate ccache handle.<a class="headerlink" href="#krb5-cc-dup-duplicate-ccache-handle" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_dup">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_dup</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> in</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a> *<em> out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_dup" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>in</strong> - Credential cache handle to be duplicated</p>
-<p class="last"><strong>[out]</strong> <strong>out</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Create a new handle referring to the same cache as <em>in</em> . The new handle and <em>in</em> can be closed independently.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_dup - Duplicate ccache handle.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_destroy.html" title="krb5_cc_destroy - Destroy a credential cache."
- >previous</a> |
- <a href="krb5_cc_get_name.html" title="krb5_cc_get_name - Retrieve the name, but not type of a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_dup - Duplicate ccache handle.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_get_config - Get a configuration value from a credential cache." href="krb5_cc_get_config.html" />
- <link rel="prev" title="krb5_cc_copy_creds - Copy a credential cache." href="krb5_cc_copy_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_copy_creds.html" title="krb5_cc_copy_creds - Copy a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_get_config.html" title="krb5_cc_get_config - Get a configuration value from a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-end-seq-get-finish-a-series-of-sequential-processing-credential-cache-entries">
-<h1>krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries.<a class="headerlink" href="#krb5-cc-end-seq-get-finish-a-series-of-sequential-processing-credential-cache-entries" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_end_seq_get">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_end_seq_get</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, <a class="reference internal" href="../types/krb5_cc_cursor.html#c.krb5_cc_cursor" title="krb5_cc_cursor">krb5_cc_cursor</a> *<em> cursor</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_end_seq_get" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p class="last"><strong>[in]</strong> <strong>cursor</strong> - Cursor</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 (always)</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function finishes processing credential cache entries and invalidates <em>cursor</em> .</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_cc_start_seq_get.html#c.krb5_cc_start_seq_get" title="krb5_cc_start_seq_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_start_seq_get()</span></code></a> , <a class="reference internal" href="krb5_cc_next_cred.html#c.krb5_cc_next_cred" title="krb5_cc_next_cred"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_next_cred()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_copy_creds.html" title="krb5_cc_copy_creds - Copy a credential cache."
- >previous</a> |
- <a href="krb5_cc_get_config.html" title="krb5_cc_get_config - Get a configuration value from a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_gen_new — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_credentials_renew" href="krb5_get_credentials_renew.html" />
- <link rel="prev" title="krb5_finish_random_key" href="krb5_finish_random_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_finish_random_key.html" title="krb5_finish_random_key"
- accesskey="P">previous</a> |
- <a href="krb5_get_credentials_renew.html" title="krb5_get_credentials_renew"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_gen_new">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-gen-new">
-<h1>krb5_cc_gen_new<a class="headerlink" href="#krb5-cc-gen-new" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_gen_new">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_gen_new</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a> *<em> cache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_gen_new" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p class="last"><strong>cache</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_gen_new</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_finish_random_key.html" title="krb5_finish_random_key"
- >previous</a> |
- <a href="krb5_get_credentials_renew.html" title="krb5_get_credentials_renew"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_gen_new">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_get_config - Get a configuration value from a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_get_flags - Retrieve flags from a credential cache structure." href="krb5_cc_get_flags.html" />
- <link rel="prev" title="krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries." href="krb5_cc_end_seq_get.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_end_seq_get.html" title="krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries."
- accesskey="P">previous</a> |
- <a href="krb5_cc_get_flags.html" title="krb5_cc_get_flags - Retrieve flags from a credential cache structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_config - Get a configuration value from a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-get-config-get-a-configuration-value-from-a-credential-cache">
-<h1>krb5_cc_get_config - Get a configuration value from a credential cache.<a class="headerlink" href="#krb5-cc-get-config-get-a-configuration-value-from-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_get_config">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_get_config</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> id</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, const char *<em> key</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_get_config" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>id</strong> - Credential cache handle</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Configuration for this principal; if NULL, global for the whole cache</p>
-<p><strong>[in]</strong> <strong>key</strong> - Name of config variable</p>
-<p class="last"><strong>[out]</strong> <strong>data</strong> - Data to be fetched</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>data</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_get_config - Get a configuration value from a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_end_seq_get.html" title="krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries."
- >previous</a> |
- <a href="krb5_cc_get_flags.html" title="krb5_cc_get_flags - Retrieve flags from a credential cache structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_config - Get a configuration value from a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_get_flags - Retrieve flags from a credential cache structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_get_full_name - Retrieve the full name of a credential cache." href="krb5_cc_get_full_name.html" />
- <link rel="prev" title="krb5_cc_get_config - Get a configuration value from a credential cache." href="krb5_cc_get_config.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_get_config.html" title="krb5_cc_get_config - Get a configuration value from a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_get_full_name.html" title="krb5_cc_get_full_name - Retrieve the full name of a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_flags - Retrieve flags from a credential cache structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-get-flags-retrieve-flags-from-a-credential-cache-structure">
-<h1>krb5_cc_get_flags - Retrieve flags from a credential cache structure.<a class="headerlink" href="#krb5-cc-get-flags-retrieve-flags-from-a-credential-cache-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_get_flags">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_get_flags</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> *<em> flags</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_get_flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p class="last"><strong>[out]</strong> <strong>flags</strong> - Flag bit mask</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition warning">
-<p class="first admonition-title">Warning</p>
-<p class="last">For memory credential cache always returns a flag mask of 0.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_get_flags - Retrieve flags from a credential cache structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_get_config.html" title="krb5_cc_get_config - Get a configuration value from a credential cache."
- >previous</a> |
- <a href="krb5_cc_get_full_name.html" title="krb5_cc_get_full_name - Retrieve the full name of a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_flags - Retrieve flags from a credential cache structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_get_full_name - Retrieve the full name of a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_move - Move a credential cache." href="krb5_cc_move.html" />
- <link rel="prev" title="krb5_cc_get_flags - Retrieve flags from a credential cache structure." href="krb5_cc_get_flags.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_get_flags.html" title="krb5_cc_get_flags - Retrieve flags from a credential cache structure."
- accesskey="P">previous</a> |
- <a href="krb5_cc_move.html" title="krb5_cc_move - Move a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_full_name - Retrieve the full name of a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-get-full-name-retrieve-the-full-name-of-a-credential-cache">
-<h1>krb5_cc_get_full_name - Retrieve the full name of a credential cache.<a class="headerlink" href="#krb5-cc-get-full-name-retrieve-the-full-name-of-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_get_full_name">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_get_full_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, char **<em> fullname_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_get_full_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p class="last"><strong>[out]</strong> <strong>fullname_out</strong> - Full name of cache</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_free_string.html#c.krb5_free_string" title="krb5_free_string"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_string()</span></code></a> to free <em>fullname_out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.10</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_get_full_name - Retrieve the full name of a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_get_flags.html" title="krb5_cc_get_flags - Retrieve flags from a credential cache structure."
- >previous</a> |
- <a href="krb5_cc_move.html" title="krb5_cc_move - Move a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_full_name - Retrieve the full name of a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_get_name - Retrieve the name, but not type of a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_get_principal - Get the default principal of a credential cache." href="krb5_cc_get_principal.html" />
- <link rel="prev" title="krb5_cc_dup - Duplicate ccache handle." href="krb5_cc_dup.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_dup.html" title="krb5_cc_dup - Duplicate ccache handle."
- accesskey="P">previous</a> |
- <a href="krb5_cc_get_principal.html" title="krb5_cc_get_principal - Get the default principal of a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_name - Retrieve the name, but not type of a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-get-name-retrieve-the-name-but-not-type-of-a-credential-cache">
-<h1>krb5_cc_get_name - Retrieve the name, but not type of a credential cache.<a class="headerlink" href="#krb5-cc-get-name-retrieve-the-name-but-not-type-of-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_get_name">
-const char * <code class="descname">krb5_cc_get_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_get_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>On success - the name of the credential cache.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition warning">
-<p class="first admonition-title">Warning</p>
-<p class="last">Returns the name of the credential cache. The result is an alias into <em>cache</em> and should not be freed or modified by the caller. This name does not include the cache type, so should not be used as input to <a class="reference internal" href="krb5_cc_resolve.html#c.krb5_cc_resolve" title="krb5_cc_resolve"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_resolve()</span></code></a> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_get_name - Retrieve the name, but not type of a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_dup.html" title="krb5_cc_dup - Duplicate ccache handle."
- >previous</a> |
- <a href="krb5_cc_get_principal.html" title="krb5_cc_get_principal - Get the default principal of a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_name - Retrieve the name, but not type of a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_get_principal - Get the default principal of a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_get_type - Retrieve the type of a credential cache." href="krb5_cc_get_type.html" />
- <link rel="prev" title="krb5_cc_get_name - Retrieve the name, but not type of a credential cache." href="krb5_cc_get_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_get_name.html" title="krb5_cc_get_name - Retrieve the name, but not type of a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_get_type.html" title="krb5_cc_get_type - Retrieve the type of a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_principal - Get the default principal of a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-get-principal-get-the-default-principal-of-a-credential-cache">
-<h1>krb5_cc_get_principal - Get the default principal of a credential cache.<a class="headerlink" href="#krb5-cc-get-principal-get-the-default-principal-of-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_get_principal">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_get_principal</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> principal</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_get_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p class="last"><strong>[out]</strong> <strong>principal</strong> - Primary principal</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Returns the default client principal of a credential cache as set by <a class="reference internal" href="krb5_cc_initialize.html#c.krb5_cc_initialize" title="krb5_cc_initialize"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_initialize()</span></code></a> .</p>
-<p>Use <a class="reference internal" href="krb5_free_principal.html#c.krb5_free_principal" title="krb5_free_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_principal()</span></code></a> to free <em>principal</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_get_principal - Get the default principal of a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_get_name.html" title="krb5_cc_get_name - Retrieve the name, but not type of a credential cache."
- >previous</a> |
- <a href="krb5_cc_get_type.html" title="krb5_cc_get_type - Retrieve the type of a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_principal - Get the default principal of a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_get_type - Retrieve the type of a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_initialize - Initialize a credential cache." href="krb5_cc_initialize.html" />
- <link rel="prev" title="krb5_cc_get_principal - Get the default principal of a credential cache." href="krb5_cc_get_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_get_principal.html" title="krb5_cc_get_principal - Get the default principal of a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_initialize.html" title="krb5_cc_initialize - Initialize a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_type - Retrieve the type of a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-get-type-retrieve-the-type-of-a-credential-cache">
-<h1>krb5_cc_get_type - Retrieve the type of a credential cache.<a class="headerlink" href="#krb5-cc-get-type-retrieve-the-type-of-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_get_type">
-const char * <code class="descname">krb5_cc_get_type</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_get_type" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>The type of a credential cache as an alias that must not be modified or freed by the caller.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_get_type - Retrieve the type of a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_get_principal.html" title="krb5_cc_get_principal - Get the default principal of a credential cache."
- >previous</a> |
- <a href="krb5_cc_initialize.html" title="krb5_cc_initialize - Initialize a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_get_type - Retrieve the type of a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_initialize - Initialize a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name." href="krb5_cc_new_unique.html" />
- <link rel="prev" title="krb5_cc_get_type - Retrieve the type of a credential cache." href="krb5_cc_get_type.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_get_type.html" title="krb5_cc_get_type - Retrieve the type of a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_new_unique.html" title="krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_initialize - Initialize a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-initialize-initialize-a-credential-cache">
-<h1>krb5_cc_initialize - Initialize a credential cache.<a class="headerlink" href="#krb5-cc-initialize-initialize-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_initialize">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_initialize</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> principal</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_initialize" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p class="last"><strong>[in]</strong> <strong>principal</strong> - Default principal name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>System errors; Permission errors; Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Destroy any existing contents of <em>cache</em> and initialize it for the default principal <em>principal</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_initialize - Initialize a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_get_type.html" title="krb5_cc_get_type - Retrieve the type of a credential cache."
- >previous</a> |
- <a href="krb5_cc_new_unique.html" title="krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_initialize - Initialize a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_move - Move a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_next_cred - Retrieve the next entry from the credential cache." href="krb5_cc_next_cred.html" />
- <link rel="prev" title="krb5_cc_get_full_name - Retrieve the full name of a credential cache." href="krb5_cc_get_full_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_get_full_name.html" title="krb5_cc_get_full_name - Retrieve the full name of a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_next_cred.html" title="krb5_cc_next_cred - Retrieve the next entry from the credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_move - Move a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-move-move-a-credential-cache">
-<h1>krb5_cc_move - Move a credential cache.<a class="headerlink" href="#krb5-cc-move-move-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_move">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_move</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> src</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> dst</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_move" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>src</strong> - The credential cache to move the content from</p>
-<p class="last"><strong>[in]</strong> <strong>dst</strong> - The credential cache to move the content to</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success; src is closed.</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes; src is still allocated.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function reinitializes <em>dst</em> and populates it with the credentials and default principal of <em>src</em> ; then, if successful, destroys <em>src</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_move - Move a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_get_full_name.html" title="krb5_cc_get_full_name - Retrieve the full name of a credential cache."
- >previous</a> |
- <a href="krb5_cc_next_cred.html" title="krb5_cc_next_cred - Retrieve the next entry from the credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_move - Move a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_resolve - Resolve a credential cache name." href="krb5_cc_resolve.html" />
- <link rel="prev" title="krb5_cc_initialize - Initialize a credential cache." href="krb5_cc_initialize.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_initialize.html" title="krb5_cc_initialize - Initialize a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_resolve.html" title="krb5_cc_resolve - Resolve a credential cache name."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-new-unique-create-a-new-credential-cache-of-the-specified-type-with-a-unique-name">
-<h1>krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name.<a class="headerlink" href="#krb5-cc-new-unique-create-a-new-credential-cache-of-the-specified-type-with-a-unique-name" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_new_unique">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_new_unique</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> type</em>, const char *<em> hint</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a> *<em> id</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_new_unique" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>type</strong> - Credential cache type name</p>
-<p><strong>[in]</strong> <strong>hint</strong> - Unused</p>
-<p class="last"><strong>[out]</strong> <strong>id</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_initialize.html" title="krb5_cc_initialize - Initialize a credential cache."
- >previous</a> |
- <a href="krb5_cc_resolve.html" title="krb5_cc_resolve - Resolve a credential cache name."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_next_cred - Retrieve the next entry from the credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_remove_cred - Remove credentials from a credential cache." href="krb5_cc_remove_cred.html" />
- <link rel="prev" title="krb5_cc_move - Move a credential cache." href="krb5_cc_move.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_move.html" title="krb5_cc_move - Move a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_remove_cred.html" title="krb5_cc_remove_cred - Remove credentials from a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_next_cred - Retrieve the next entry from the credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-next-cred-retrieve-the-next-entry-from-the-credential-cache">
-<h1>krb5_cc_next_cred - Retrieve the next entry from the credential cache.<a class="headerlink" href="#krb5-cc-next-cred-retrieve-the-next-entry-from-the-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_next_cred">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_next_cred</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, <a class="reference internal" href="../types/krb5_cc_cursor.html#c.krb5_cc_cursor" title="krb5_cc_cursor">krb5_cc_cursor</a> *<em> cursor</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_next_cred" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p><strong>[in]</strong> <strong>cursor</strong> - Cursor</p>
-<p class="last"><strong>[out]</strong> <strong>creds</strong> - Next credential cache entry</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function fills in <em>creds</em> with the next entry in <em>cache</em> and advances <em>cursor</em> .</p>
-<p>Use <a class="reference internal" href="krb5_free_cred_contents.html#c.krb5_free_cred_contents" title="krb5_free_cred_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_cred_contents()</span></code></a> to free <em>creds</em> when it is no longer needed.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_cc_start_seq_get.html#c.krb5_cc_start_seq_get" title="krb5_cc_start_seq_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_start_seq_get()</span></code></a> , krb5_end_seq_get()</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_next_cred - Retrieve the next entry from the credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_move.html" title="krb5_cc_move - Move a credential cache."
- >previous</a> |
- <a href="krb5_cc_remove_cred.html" title="krb5_cc_remove_cred - Remove credentials from a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_next_cred - Retrieve the next entry from the credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_remove_cred - Remove credentials from a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache." href="krb5_cc_retrieve_cred.html" />
- <link rel="prev" title="krb5_cc_next_cred - Retrieve the next entry from the credential cache." href="krb5_cc_next_cred.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_next_cred.html" title="krb5_cc_next_cred - Retrieve the next entry from the credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_retrieve_cred.html" title="krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_remove_cred - Remove credentials from a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-remove-cred-remove-credentials-from-a-credential-cache">
-<h1>krb5_cc_remove_cred - Remove credentials from a credential cache.<a class="headerlink" href="#krb5-cc-remove-cred-remove-credentials-from-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_remove_cred">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_remove_cred</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> flags</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_remove_cred" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p><strong>[in]</strong> <strong>flags</strong> - Bitwise-ORed search flags</p>
-<p class="last"><strong>[in]</strong> <strong>creds</strong> - Credentials to be matched</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>KRB5_CC_NOSUPP Not implemented for this cache type</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>No matches found; Data cannot be deleted; Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function accepts the same flag values as <a class="reference internal" href="krb5_cc_retrieve_cred.html#c.krb5_cc_retrieve_cred" title="krb5_cc_retrieve_cred"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_retrieve_cred()</span></code></a> .</p>
-<div class="admonition warning">
-<p class="first admonition-title">Warning</p>
-<p class="last">This function is not implemented for some cache types.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_remove_cred - Remove credentials from a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_next_cred.html" title="krb5_cc_next_cred - Retrieve the next entry from the credential cache."
- >previous</a> |
- <a href="krb5_cc_retrieve_cred.html" title="krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_remove_cred - Remove credentials from a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_resolve - Resolve a credential cache name. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_change_password - Change a password for an existing Kerberos account." href="krb5_change_password.html" />
- <link rel="prev" title="krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name." href="krb5_cc_new_unique.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_new_unique.html" title="krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name."
- accesskey="P">previous</a> |
- <a href="krb5_change_password.html" title="krb5_change_password - Change a password for an existing Kerberos account."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_resolve - Resolve a credential cache name.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-resolve-resolve-a-credential-cache-name">
-<h1>krb5_cc_resolve - Resolve a credential cache name.<a class="headerlink" href="#krb5-cc-resolve-resolve-a-credential-cache-name" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_resolve">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_resolve</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> name</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a> *<em> cache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_resolve" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>name</strong> - Credential cache name to be resolved</p>
-<p class="last"><strong>[out]</strong> <strong>cache</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Fills in <em>cache</em> with a <em>cache</em> handle that corresponds to the name in <em>name</em> . <em>name</em> should be of the form <strong>type:residual</strong> , and <em>type</em> must be a type known to the library. If the <em>name</em> does not contain a colon, interpret it as a file name.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_resolve - Resolve a credential cache name.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_new_unique.html" title="krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name."
- >previous</a> |
- <a href="krb5_change_password.html" title="krb5_change_password - Change a password for an existing Kerberos account."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_resolve - Resolve a credential cache name.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_select - Select a credential cache to use with a server principal." href="krb5_cc_select.html" />
- <link rel="prev" title="krb5_cc_remove_cred - Remove credentials from a credential cache." href="krb5_cc_remove_cred.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_remove_cred.html" title="krb5_cc_remove_cred - Remove credentials from a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_select.html" title="krb5_cc_select - Select a credential cache to use with a server principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-retrieve-cred-retrieve-a-specified-credentials-from-a-credential-cache">
-<h1>krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache.<a class="headerlink" href="#krb5-cc-retrieve-cred-retrieve-a-specified-credentials-from-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_retrieve_cred">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_retrieve_cred</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> flags</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> mcreds</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_retrieve_cred" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p><strong>[in]</strong> <strong>flags</strong> - Flags bit mask</p>
-<p><strong>[in]</strong> <strong>mcreds</strong> - Credentials to match</p>
-<p class="last"><strong>[out]</strong> <strong>creds</strong> - Credentials matching the requested value</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function searches a credential cache for credentials matching <em>mcreds</em> and returns it if found.</p>
-<p>Valid values for <em>flags</em> are:</p>
-<blockquote>
-<div><blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_TC_MATCH_TIMES.html#KRB5_TC_MATCH_TIMES" title="KRB5_TC_MATCH_TIMES"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TC_MATCH_TIMES</span></code></a> The requested lifetime must be at least as great as in <em>mcreds</em> .</li>
-<li><a class="reference internal" href="../macros/KRB5_TC_MATCH_IS_SKEY.html#KRB5_TC_MATCH_IS_SKEY" title="KRB5_TC_MATCH_IS_SKEY"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TC_MATCH_IS_SKEY</span></code></a> The <em>is_skey</em> field much match exactly.</li>
-<li><a class="reference internal" href="../macros/KRB5_TC_MATCH_FLAGS.html#KRB5_TC_MATCH_FLAGS" title="KRB5_TC_MATCH_FLAGS"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TC_MATCH_FLAGS</span></code></a> Flags set in <em>mcreds</em> must be set.</li>
-<li><a class="reference internal" href="../macros/KRB5_TC_MATCH_TIMES_EXACT.html#KRB5_TC_MATCH_TIMES_EXACT" title="KRB5_TC_MATCH_TIMES_EXACT"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TC_MATCH_TIMES_EXACT</span></code></a> The requested lifetime must match exactly.</li>
-<li><a class="reference internal" href="../macros/KRB5_TC_MATCH_FLAGS_EXACT.html#KRB5_TC_MATCH_FLAGS_EXACT" title="KRB5_TC_MATCH_FLAGS_EXACT"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TC_MATCH_FLAGS_EXACT</span></code></a> Flags must match exactly.</li>
-<li><a class="reference internal" href="../macros/KRB5_TC_MATCH_AUTHDATA.html#KRB5_TC_MATCH_AUTHDATA" title="KRB5_TC_MATCH_AUTHDATA"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TC_MATCH_AUTHDATA</span></code></a> The authorization data must match.</li>
-<li><a class="reference internal" href="../macros/KRB5_TC_MATCH_SRV_NAMEONLY.html#KRB5_TC_MATCH_SRV_NAMEONLY" title="KRB5_TC_MATCH_SRV_NAMEONLY"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TC_MATCH_SRV_NAMEONLY</span></code></a> Only the name portion of the principal name must match, not the realm.</li>
-<li><a class="reference internal" href="../macros/KRB5_TC_MATCH_2ND_TKT.html#KRB5_TC_MATCH_2ND_TKT" title="KRB5_TC_MATCH_2ND_TKT"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TC_MATCH_2ND_TKT</span></code></a> The second tickets must match.</li>
-<li><a class="reference internal" href="../macros/KRB5_TC_MATCH_KTYPE.html#KRB5_TC_MATCH_KTYPE" title="KRB5_TC_MATCH_KTYPE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TC_MATCH_KTYPE</span></code></a> The encryption key types must match.</li>
-<li><a class="reference internal" href="../macros/KRB5_TC_SUPPORTED_KTYPES.html#KRB5_TC_SUPPORTED_KTYPES" title="KRB5_TC_SUPPORTED_KTYPES"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TC_SUPPORTED_KTYPES</span></code></a> Check all matching entries that have any supported encryption type and return the one with the encryption type listed earliest.</li>
-</ul>
-</div></blockquote>
-<p>Use <a class="reference internal" href="krb5_free_cred_contents.html#c.krb5_free_cred_contents" title="krb5_free_cred_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_cred_contents()</span></code></a> to free <em>creds</em> when it is no longer needed.</p>
-</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_remove_cred.html" title="krb5_cc_remove_cred - Remove credentials from a credential cache."
- >previous</a> |
- <a href="krb5_cc_select.html" title="krb5_cc_select - Select a credential cache to use with a server principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_select - Select a credential cache to use with a server principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_set_config - Store a configuration value in a credential cache." href="krb5_cc_set_config.html" />
- <link rel="prev" title="krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache." href="krb5_cc_retrieve_cred.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_retrieve_cred.html" title="krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_set_config.html" title="krb5_cc_set_config - Store a configuration value in a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_select - Select a credential cache to use with a server principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-select-select-a-credential-cache-to-use-with-a-server-principal">
-<h1>krb5_cc_select - Select a credential cache to use with a server principal.<a class="headerlink" href="#krb5-cc-select-select-a-credential-cache-to-use-with-a-server-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_select">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_select</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> server</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a> *<em> cache_out</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> princ_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_select" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>server</strong> - Server principal</p>
-<p><strong>[out]</strong> <strong>cache_out</strong> - Credential cache handle</p>
-<p class="last"><strong>[out]</strong> <strong>princ_out</strong> - Client principal</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>If an appropriate cache is found, 0 is returned, cache_out is set to the selected cache, and princ_out is set to the default principal of that cache.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Select a cache within the collection containing credentials most appropriate for use with <em>server</em> , according to configured rules and heuristics.</p>
-<p>Use <a class="reference internal" href="krb5_cc_close.html#c.krb5_cc_close" title="krb5_cc_close"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_close()</span></code></a> to release <em>cache_out</em> when it is no longer needed. Use <a class="reference internal" href="krb5_free_principal.html#c.krb5_free_principal" title="krb5_free_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_principal()</span></code></a> to release <em>princ_out</em> when it is no longer needed. Note that <em>princ_out</em> is set in some error conditions.</p>
-<p>If the appropriate client principal can be authoritatively determined but the cache collection contains no credentials for that principal, then KRB5_CC_NOTFOUND is returned, <em>cache_out</em> is set to NULL, and <em>princ_out</em> is set to the appropriate client principal.</p>
-<p>If no configured mechanism can determine the appropriate cache or principal, KRB5_CC_NOTFOUND is returned and <em>cache_out</em> and <em>princ_out</em> are set to NULL.</p>
-<p>Any other error code indicates a fatal error in the processing of a cache selection mechanism.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.10</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_select - Select a credential cache to use with a server principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_retrieve_cred.html" title="krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache."
- >previous</a> |
- <a href="krb5_cc_set_config.html" title="krb5_cc_set_config - Store a configuration value in a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_select - Select a credential cache to use with a server principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_set_config - Store a configuration value in a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_set_default_name - Set the default credential cache name." href="krb5_cc_set_default_name.html" />
- <link rel="prev" title="krb5_cc_select - Select a credential cache to use with a server principal." href="krb5_cc_select.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_select.html" title="krb5_cc_select - Select a credential cache to use with a server principal."
- accesskey="P">previous</a> |
- <a href="krb5_cc_set_default_name.html" title="krb5_cc_set_default_name - Set the default credential cache name."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_set_config - Store a configuration value in a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-set-config-store-a-configuration-value-in-a-credential-cache">
-<h1>krb5_cc_set_config - Store a configuration value in a credential cache.<a class="headerlink" href="#krb5-cc-set-config-store-a-configuration-value-in-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_set_config">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_set_config</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> id</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, const char *<em> key</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_set_config" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>id</strong> - Credential cache handle</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Configuration for a specific principal; if NULL, global for the whole cache</p>
-<p><strong>[in]</strong> <strong>key</strong> - Name of config variable</p>
-<p class="last"><strong>[in]</strong> <strong>data</strong> - Data to store, or NULL to remove</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition warning">
-<p class="first admonition-title">Warning</p>
-<p class="last">Before version 1.10 <em>data</em> was assumed to be always non-null.</p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Existing configuration under the same key is over-written.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_set_config - Store a configuration value in a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_select.html" title="krb5_cc_select - Select a credential cache to use with a server principal."
- >previous</a> |
- <a href="krb5_cc_set_default_name.html" title="krb5_cc_set_default_name - Set the default credential cache name."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_set_config - Store a configuration value in a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_set_default_name - Set the default credential cache name. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_set_flags - Set options flags on a credential cache." href="krb5_cc_set_flags.html" />
- <link rel="prev" title="krb5_cc_set_config - Store a configuration value in a credential cache." href="krb5_cc_set_config.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_set_config.html" title="krb5_cc_set_config - Store a configuration value in a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_set_flags.html" title="krb5_cc_set_flags - Set options flags on a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_set_default_name - Set the default credential cache name.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-set-default-name-set-the-default-credential-cache-name">
-<h1>krb5_cc_set_default_name - Set the default credential cache name.<a class="headerlink" href="#krb5-cc-set-default-name-set-the-default-credential-cache-name" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_set_default_name">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_set_default_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> name</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_set_default_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>name</strong> - Default credential cache name or NULL</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>KV5M_CONTEXT Bad magic number for _krb5_context structure</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Set the default credential cache name to <em>name</em> for future operations using <em>context</em> . If <em>name</em> is NULL, clear any previous application-set default name and forget any cached value of the default name for <em>context</em> .</p>
-<p>Calls to this function invalidate the result of any previous calls to <a class="reference internal" href="krb5_cc_default_name.html#c.krb5_cc_default_name" title="krb5_cc_default_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_default_name()</span></code></a> using <em>context</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_set_default_name - Set the default credential cache name.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_set_config.html" title="krb5_cc_set_config - Store a configuration value in a credential cache."
- >previous</a> |
- <a href="krb5_cc_set_flags.html" title="krb5_cc_set_flags - Set options flags on a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_set_default_name - Set the default credential cache name.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_set_flags - Set options flags on a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache." href="krb5_cc_start_seq_get.html" />
- <link rel="prev" title="krb5_cc_set_default_name - Set the default credential cache name." href="krb5_cc_set_default_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_set_default_name.html" title="krb5_cc_set_default_name - Set the default credential cache name."
- accesskey="P">previous</a> |
- <a href="krb5_cc_start_seq_get.html" title="krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_set_flags - Set options flags on a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-set-flags-set-options-flags-on-a-credential-cache">
-<h1>krb5_cc_set_flags - Set options flags on a credential cache.<a class="headerlink" href="#krb5-cc-set-flags-set-options-flags-on-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_set_flags">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_set_flags</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> flags</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_set_flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p class="last"><strong>[in]</strong> <strong>flags</strong> - Flag bit mask</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function resets <em>cache</em> flags to <em>flags</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_set_flags - Set options flags on a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_set_default_name.html" title="krb5_cc_set_default_name - Set the default credential cache name."
- >previous</a> |
- <a href="krb5_cc_start_seq_get.html" title="krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_set_flags - Set options flags on a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_store_cred - Store credentials in a credential cache." href="krb5_cc_store_cred.html" />
- <link rel="prev" title="krb5_cc_set_flags - Set options flags on a credential cache." href="krb5_cc_set_flags.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_set_flags.html" title="krb5_cc_set_flags - Set options flags on a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_store_cred.html" title="krb5_cc_store_cred - Store credentials in a credential cache."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-start-seq-get-prepare-to-sequentially-read-every-credential-in-a-credential-cache">
-<h1>krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache.<a class="headerlink" href="#krb5-cc-start-seq-get-prepare-to-sequentially-read-every-credential-in-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_start_seq_get">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_start_seq_get</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, <a class="reference internal" href="../types/krb5_cc_cursor.html#c.krb5_cc_cursor" title="krb5_cc_cursor">krb5_cc_cursor</a> *<em> cursor</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_start_seq_get" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p class="last"><strong>[out]</strong> <strong>cursor</strong> - Cursor</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<blockquote>
-<div><a class="reference internal" href="krb5_cc_end_seq_get.html#c.krb5_cc_end_seq_get" title="krb5_cc_end_seq_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_end_seq_get()</span></code></a> must be called to complete the retrieve operation.</div></blockquote>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If the cache represented by <em>cache</em> is modified between the time of the call to this function and the time of the final <a class="reference internal" href="krb5_cc_end_seq_get.html#c.krb5_cc_end_seq_get" title="krb5_cc_end_seq_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_end_seq_get()</span></code></a> , these changes may not be reflected in the results of <a class="reference internal" href="krb5_cc_next_cred.html#c.krb5_cc_next_cred" title="krb5_cc_next_cred"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_next_cred()</span></code></a> calls.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_set_flags.html" title="krb5_cc_set_flags - Set options flags on a credential cache."
- >previous</a> |
- <a href="krb5_cc_store_cred.html" title="krb5_cc_store_cred - Store credentials in a credential cache."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_store_cred - Store credentials in a credential cache. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_support_switch - Determine whether a credential cache type supports switching." href="krb5_cc_support_switch.html" />
- <link rel="prev" title="krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache." href="krb5_cc_start_seq_get.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_start_seq_get.html" title="krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_support_switch.html" title="krb5_cc_support_switch - Determine whether a credential cache type supports switching."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_store_cred - Store credentials in a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-store-cred-store-credentials-in-a-credential-cache">
-<h1>krb5_cc_store_cred - Store credentials in a credential cache.<a class="headerlink" href="#krb5-cc-store-cred-store-credentials-in-a-credential-cache" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_store_cred">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_store_cred</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_store_cred" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-<p class="last"><strong>[in]</strong> <strong>creds</strong> - Credentials to be stored in cache</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Permission errors; storage failure errors; Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function stores <em>creds</em> into <em>cache</em> . If <em>creds->server</em> and the server in the decoded ticket <em>creds->ticket</em> differ, the credentials will be stored under both server principal names.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_store_cred - Store credentials in a credential cache.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_start_seq_get.html" title="krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache."
- >previous</a> |
- <a href="krb5_cc_support_switch.html" title="krb5_cc_support_switch - Determine whether a credential cache type supports switching."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_store_cred - Store credentials in a credential cache.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_support_switch - Determine whether a credential cache type supports switching. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_switch - Make a credential cache the primary cache for its collection." href="krb5_cc_switch.html" />
- <link rel="prev" title="krb5_cc_store_cred - Store credentials in a credential cache." href="krb5_cc_store_cred.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_store_cred.html" title="krb5_cc_store_cred - Store credentials in a credential cache."
- accesskey="P">previous</a> |
- <a href="krb5_cc_switch.html" title="krb5_cc_switch - Make a credential cache the primary cache for its collection."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_support_switch - Determine whether a credential cache type supports switching.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-support-switch-determine-whether-a-credential-cache-type-supports-switching">
-<h1>krb5_cc_support_switch - Determine whether a credential cache type supports switching.<a class="headerlink" href="#krb5-cc-support-switch-determine-whether-a-credential-cache-type-supports-switching" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_support_switch">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_cc_support_switch</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> type</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_support_switch" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>type</strong> - Credential cache type</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if type supports switching</li>
-<li>FALSE if it does not or is not a valid credential cache type.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.10</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_support_switch - Determine whether a credential cache type supports switching.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_store_cred.html" title="krb5_cc_store_cred - Store credentials in a credential cache."
- >previous</a> |
- <a href="krb5_cc_switch.html" title="krb5_cc_switch - Make a credential cache the primary cache for its collection."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_support_switch - Determine whether a credential cache type supports switching.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_switch - Make a credential cache the primary cache for its collection. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cccol_cursor_free - Free a credential cache collection cursor." href="krb5_cccol_cursor_free.html" />
- <link rel="prev" title="krb5_cc_support_switch - Determine whether a credential cache type supports switching." href="krb5_cc_support_switch.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_support_switch.html" title="krb5_cc_support_switch - Determine whether a credential cache type supports switching."
- accesskey="P">previous</a> |
- <a href="krb5_cccol_cursor_free.html" title="krb5_cccol_cursor_free - Free a credential cache collection cursor."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_switch - Make a credential cache the primary cache for its collection.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-switch-make-a-credential-cache-the-primary-cache-for-its-collection">
-<h1>krb5_cc_switch - Make a credential cache the primary cache for its collection.<a class="headerlink" href="#krb5-cc-switch-make-a-credential-cache-the-primary-cache-for-its-collection" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cc_switch">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cc_switch</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cc_switch" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>cache</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success, or the type of cache doesn’t support switching</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>If the type of <em>cache</em> supports it, set <em>cache</em> to be the primary credential cache for the collection it belongs to.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_switch - Make a credential cache the primary cache for its collection.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_support_switch.html" title="krb5_cc_support_switch - Determine whether a credential cache type supports switching."
- >previous</a> |
- <a href="krb5_cccol_cursor_free.html" title="krb5_cccol_cursor_free - Free a credential cache collection cursor."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_switch - Make a credential cache the primary cache for its collection.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cccol_cursor_free - Free a credential cache collection cursor. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches." href="krb5_cccol_cursor_new.html" />
- <link rel="prev" title="krb5_cc_switch - Make a credential cache the primary cache for its collection." href="krb5_cc_switch.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_switch.html" title="krb5_cc_switch - Make a credential cache the primary cache for its collection."
- accesskey="P">previous</a> |
- <a href="krb5_cccol_cursor_new.html" title="krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cccol_cursor_free - Free a credential cache collection cursor.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cccol-cursor-free-free-a-credential-cache-collection-cursor">
-<h1>krb5_cccol_cursor_free - Free a credential cache collection cursor.<a class="headerlink" href="#krb5-cccol-cursor-free-free-a-credential-cache-collection-cursor" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cccol_cursor_free">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cccol_cursor_free</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cccol_cursor.html#c.krb5_cccol_cursor" title="krb5_cccol_cursor">krb5_cccol_cursor</a> *<em> cursor</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cccol_cursor_free" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>cursor</strong> - Cursor</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_cccol_cursor_new.html#c.krb5_cccol_cursor_new" title="krb5_cccol_cursor_new"><code class="xref c c-func docutils literal"><span class="pre">krb5_cccol_cursor_new()</span></code></a> , <a class="reference internal" href="krb5_cccol_cursor_next.html#c.krb5_cccol_cursor_next" title="krb5_cccol_cursor_next"><code class="xref c c-func docutils literal"><span class="pre">krb5_cccol_cursor_next()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cccol_cursor_free - Free a credential cache collection cursor.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_switch.html" title="krb5_cc_switch - Make a credential cache the primary cache for its collection."
- >previous</a> |
- <a href="krb5_cccol_cursor_new.html" title="krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cccol_cursor_free - Free a credential cache collection cursor.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cccol_cursor_next - Get the next credential cache in the collection." href="krb5_cccol_cursor_next.html" />
- <link rel="prev" title="krb5_cccol_cursor_free - Free a credential cache collection cursor." href="krb5_cccol_cursor_free.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cccol_cursor_free.html" title="krb5_cccol_cursor_free - Free a credential cache collection cursor."
- accesskey="P">previous</a> |
- <a href="krb5_cccol_cursor_next.html" title="krb5_cccol_cursor_next - Get the next credential cache in the collection."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cccol-cursor-new-prepare-to-iterate-over-the-collection-of-known-credential-caches">
-<h1>krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches.<a class="headerlink" href="#krb5-cccol-cursor-new-prepare-to-iterate-over-the-collection-of-known-credential-caches" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cccol_cursor_new">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cccol_cursor_new</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cccol_cursor.html#c.krb5_cccol_cursor" title="krb5_cccol_cursor">krb5_cccol_cursor</a> *<em> cursor</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cccol_cursor_new" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>cursor</strong> - Cursor</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Get a new cache iteration <em>cursor</em> that will iterate over all known credential caches independent of type.</p>
-<p>Use <a class="reference internal" href="krb5_cccol_cursor_free.html#c.krb5_cccol_cursor_free" title="krb5_cccol_cursor_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_cccol_cursor_free()</span></code></a> to release <em>cursor</em> when it is no longer needed.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_cccol_cursor_next.html#c.krb5_cccol_cursor_next" title="krb5_cccol_cursor_next"><code class="xref c c-func docutils literal"><span class="pre">krb5_cccol_cursor_next()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cccol_cursor_free.html" title="krb5_cccol_cursor_free - Free a credential cache collection cursor."
- >previous</a> |
- <a href="krb5_cccol_cursor_next.html" title="krb5_cccol_cursor_next - Get the next credential cache in the collection."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cccol_cursor_next - Get the next credential cache in the collection. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches." href="krb5_cccol_have_content.html" />
- <link rel="prev" title="krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches." href="krb5_cccol_cursor_new.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cccol_cursor_new.html" title="krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches."
- accesskey="P">previous</a> |
- <a href="krb5_cccol_have_content.html" title="krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cccol_cursor_next - Get the next credential cache in the collection.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cccol-cursor-next-get-the-next-credential-cache-in-the-collection">
-<h1>krb5_cccol_cursor_next - Get the next credential cache in the collection.<a class="headerlink" href="#krb5-cccol-cursor-next-get-the-next-credential-cache-in-the-collection" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cccol_cursor_next">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cccol_cursor_next</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cccol_cursor.html#c.krb5_cccol_cursor" title="krb5_cccol_cursor">krb5_cccol_cursor</a><em> cursor</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a> *<em> ccache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cccol_cursor_next" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cursor</strong> - Cursor</p>
-<p class="last"><strong>[out]</strong> <strong>ccache</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_cc_close.html#c.krb5_cc_close" title="krb5_cc_close"><code class="xref c c-func docutils literal"><span class="pre">krb5_cc_close()</span></code></a> to close <em>ccache</em> when it is no longer needed.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_cccol_cursor_new.html#c.krb5_cccol_cursor_new" title="krb5_cccol_cursor_new"><code class="xref c c-func docutils literal"><span class="pre">krb5_cccol_cursor_new()</span></code></a> , <a class="reference internal" href="krb5_cccol_cursor_free.html#c.krb5_cccol_cursor_free" title="krb5_cccol_cursor_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_cccol_cursor_free()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">When all caches are iterated over and the end of the list is reached, <em>ccache</em> is set to NULL.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cccol_cursor_next - Get the next credential cache in the collection.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cccol_cursor_new.html" title="krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches."
- >previous</a> |
- <a href="krb5_cccol_have_content.html" title="krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cccol_cursor_next - Get the next credential cache in the collection.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_clear_error_message - Clear the extended error message in a context." href="krb5_clear_error_message.html" />
- <link rel="prev" title="krb5_cccol_cursor_next - Get the next credential cache in the collection." href="krb5_cccol_cursor_next.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cccol_cursor_next.html" title="krb5_cccol_cursor_next - Get the next credential cache in the collection."
- accesskey="P">previous</a> |
- <a href="krb5_clear_error_message.html" title="krb5_clear_error_message - Clear the extended error message in a context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cccol-have-content-check-if-the-credential-cache-collection-contains-any-initialized-caches">
-<h1>krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches.<a class="headerlink" href="#krb5-cccol-have-content-check-if-the-credential-cache-collection-contains-any-initialized-caches" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cccol_have_content">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cccol_have_content</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cccol_have_content" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>context</strong> - Library context</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 At least one initialized cache is present in the collection</li>
-<li>KRB5_CC_NOTFOUND The collection contains no caches</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cccol_cursor_next.html" title="krb5_cccol_cursor_next - Get the next credential cache in the collection."
- >previous</a> |
- <a href="krb5_clear_error_message.html" title="krb5_clear_error_message - Clear the extended error message in a context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_change_password - Change a password for an existing Kerberos account. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_chpw_message - Get a result message for changing or setting a password." href="krb5_chpw_message.html" />
- <link rel="prev" title="krb5_cc_resolve - Resolve a credential cache name." href="krb5_cc_resolve.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_resolve.html" title="krb5_cc_resolve - Resolve a credential cache name."
- accesskey="P">previous</a> |
- <a href="krb5_chpw_message.html" title="krb5_chpw_message - Get a result message for changing or setting a password."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_change_password - Change a password for an existing Kerberos account.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-change-password-change-a-password-for-an-existing-kerberos-account">
-<h1>krb5_change_password - Change a password for an existing Kerberos account.<a class="headerlink" href="#krb5-change-password-change-a-password-for-an-existing-kerberos-account" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_change_password">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_change_password</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, const char *<em> newpw</em>, int *<em> result_code</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> result_code_string</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> result_string</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_change_password" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>creds</strong> - Credentials for kadmin/changepw service</p>
-<p><strong>[in]</strong> <strong>newpw</strong> - New password</p>
-<p><strong>[out]</strong> <strong>result_code</strong> - Numeric error code from server</p>
-<p><strong>[out]</strong> <strong>result_code_string</strong> - String equivalent to <em>result_code</em></p>
-<p class="last"><strong>[out]</strong> <strong>result_string</strong> - Change password response from the KDC</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Change the password for the existing principal identified by <em>creds</em> .</p>
-<p>The possible values of the output <em>result_code</em> are:</p>
-<blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_KPASSWD_SUCCESS.html#KRB5_KPASSWD_SUCCESS" title="KRB5_KPASSWD_SUCCESS"><code class="xref py py-data docutils literal"><span class="pre">KRB5_KPASSWD_SUCCESS</span></code></a> (0) - success</li>
-<li><a class="reference internal" href="../macros/KRB5_KPASSWD_MALFORMED.html#KRB5_KPASSWD_MALFORMED" title="KRB5_KPASSWD_MALFORMED"><code class="xref py py-data docutils literal"><span class="pre">KRB5_KPASSWD_MALFORMED</span></code></a> (1) - Malformed request error</li>
-<li><a class="reference internal" href="../macros/KRB5_KPASSWD_HARDERROR.html#KRB5_KPASSWD_HARDERROR" title="KRB5_KPASSWD_HARDERROR"><code class="xref py py-data docutils literal"><span class="pre">KRB5_KPASSWD_HARDERROR</span></code></a> (2) - Server error</li>
-<li><a class="reference internal" href="../macros/KRB5_KPASSWD_AUTHERROR.html#KRB5_KPASSWD_AUTHERROR" title="KRB5_KPASSWD_AUTHERROR"><code class="xref py py-data docutils literal"><span class="pre">KRB5_KPASSWD_AUTHERROR</span></code></a> (3) - Authentication error</li>
-<li><a class="reference internal" href="../macros/KRB5_KPASSWD_SOFTERROR.html#KRB5_KPASSWD_SOFTERROR" title="KRB5_KPASSWD_SOFTERROR"><code class="xref py py-data docutils literal"><span class="pre">KRB5_KPASSWD_SOFTERROR</span></code></a> (4) - Password change rejected</li>
-</ul>
-</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_change_password - Change a password for an existing Kerberos account.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_resolve.html" title="krb5_cc_resolve - Resolve a credential cache name."
- >previous</a> |
- <a href="krb5_chpw_message.html" title="krb5_chpw_message - Get a result message for changing or setting a password."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_change_password - Change a password for an existing Kerberos account.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_addresses - Copy an array of addresses." href="krb5_copy_addresses.html" />
- <link rel="prev" title="krb5_clear_error_message - Clear the extended error message in a context." href="krb5_clear_error_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_clear_error_message.html" title="krb5_clear_error_message - Clear the extended error message in a context."
- accesskey="P">previous</a> |
- <a href="krb5_copy_addresses.html" title="krb5_copy_addresses - Copy an array of addresses."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-check-clockskew-check-if-a-timestamp-is-within-the-allowed-clock-skew-of-the-current-time">
-<h1>krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time.<a class="headerlink" href="#krb5-check-clockskew-check-if-a-timestamp-is-within-the-allowed-clock-skew-of-the-current-time" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_check_clockskew">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_check_clockskew</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a><em> date</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_check_clockskew" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>date</strong> - Timestamp to check</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success</li>
-<li>KRB5KRB_AP_ERR_SKEW date is not within allowable clock skew</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function checks if <em>date</em> is close enough to the current time according to the configured allowable clock skew.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.10</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_clear_error_message.html" title="krb5_clear_error_message - Clear the extended error message in a context."
- >previous</a> |
- <a href="krb5_copy_addresses.html" title="krb5_copy_addresses - Copy an array of addresses."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_checksum_size — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_encrypt" href="krb5_encrypt.html" />
- <link rel="prev" title="krb5_calculate_checksum" href="krb5_calculate_checksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_calculate_checksum.html" title="krb5_calculate_checksum"
- accesskey="P">previous</a> |
- <a href="krb5_encrypt.html" title="krb5_encrypt"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_checksum_size">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-checksum-size">
-<h1>krb5_checksum_size<a class="headerlink" href="#krb5-checksum-size" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_checksum_size">
-size_t <code class="descname">krb5_checksum_size</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> ctype</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_checksum_size" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p class="last"><strong>ctype</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED See krb5_c_checksum_length()</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_checksum_size</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_calculate_checksum.html" title="krb5_calculate_checksum"
- >previous</a> |
- <a href="krb5_encrypt.html" title="krb5_encrypt"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_checksum_size">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_chpw_message - Get a result message for changing or setting a password. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_expand_hostname - Canonicalize a hostname, possibly using name service." href="krb5_expand_hostname.html" />
- <link rel="prev" title="krb5_change_password - Change a password for an existing Kerberos account." href="krb5_change_password.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_change_password.html" title="krb5_change_password - Change a password for an existing Kerberos account."
- accesskey="P">previous</a> |
- <a href="krb5_expand_hostname.html" title="krb5_expand_hostname - Canonicalize a hostname, possibly using name service."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_chpw_message - Get a result message for changing or setting a password.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-chpw-message-get-a-result-message-for-changing-or-setting-a-password">
-<h1>krb5_chpw_message - Get a result message for changing or setting a password.<a class="headerlink" href="#krb5-chpw-message-get-a-result-message-for-changing-or-setting-a-password" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_chpw_message">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_chpw_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> server_string</em>, char **<em> message_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_chpw_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>server_string</strong> - Data returned from the remote system</p>
-<p class="last"><strong>[out]</strong> <strong>message_out</strong> - A message displayable to the user</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function processes the <em>server_string</em> returned in the <em>result_string</em> parameter of <a class="reference internal" href="krb5_change_password.html#c.krb5_change_password" title="krb5_change_password"><code class="xref c c-func docutils literal"><span class="pre">krb5_change_password()</span></code></a> , <a class="reference internal" href="krb5_set_password.html#c.krb5_set_password" title="krb5_set_password"><code class="xref c c-func docutils literal"><span class="pre">krb5_set_password()</span></code></a> , and related functions, and returns a displayable string. If <em>server_string</em> contains Active Directory structured policy information, it will be converted into human-readable text.</p>
-<p>Use <a class="reference internal" href="krb5_free_string.html#c.krb5_free_string" title="krb5_free_string"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_string()</span></code></a> to free <em>message_out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_chpw_message - Get a result message for changing or setting a password.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_change_password.html" title="krb5_change_password - Change a password for an existing Kerberos account."
- >previous</a> |
- <a href="krb5_expand_hostname.html" title="krb5_expand_hostname - Canonicalize a hostname, possibly using name service."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_chpw_message - Get a result message for changing or setting a password.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cksumtype_to_string - Convert a checksum type to a string. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_decode_authdata_container - Unwrap authorization data." href="krb5_decode_authdata_container.html" />
- <link rel="prev" title="krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock)." href="krb5_c_verify_checksum_iov.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_c_verify_checksum_iov.html" title="krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock)."
- accesskey="P">previous</a> |
- <a href="krb5_decode_authdata_container.html" title="krb5_decode_authdata_container - Unwrap authorization data."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cksumtype_to_string - Convert a checksum type to a string.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cksumtype-to-string-convert-a-checksum-type-to-a-string">
-<h1>krb5_cksumtype_to_string - Convert a checksum type to a string.<a class="headerlink" href="#krb5-cksumtype-to-string-convert-a-checksum-type-to-a-string" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_cksumtype_to_string">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_cksumtype_to_string</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> cksumtype</em>, char *<em> buffer</em>, size_t<em> buflen</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_cksumtype_to_string" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>cksumtype</strong> - Checksum type</p>
-<p><strong>[out]</strong> <strong>buffer</strong> - Buffer to hold converted checksum type</p>
-<p class="last"><strong>[in]</strong> <strong>buflen</strong> - Storage available in <em>buffer</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cksumtype_to_string - Convert a checksum type to a string.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_c_verify_checksum_iov.html" title="krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock)."
- >previous</a> |
- <a href="krb5_decode_authdata_container.html" title="krb5_decode_authdata_container - Unwrap authorization data."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cksumtype_to_string - Convert a checksum type to a string.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_clear_error_message - Clear the extended error message in a context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time." href="krb5_check_clockskew.html" />
- <link rel="prev" title="krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches." href="krb5_cccol_have_content.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cccol_have_content.html" title="krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches."
- accesskey="P">previous</a> |
- <a href="krb5_check_clockskew.html" title="krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_clear_error_message - Clear the extended error message in a context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-clear-error-message-clear-the-extended-error-message-in-a-context">
-<h1>krb5_clear_error_message - Clear the extended error message in a context.<a class="headerlink" href="#krb5-clear-error-message-clear-the-extended-error-message-in-a-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_clear_error_message">
-void <code class="descname">krb5_clear_error_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_clear_error_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>ctx</strong> - Library context</td>
-</tr>
-</tbody>
-</table>
-<p>This function unsets the extended error message in a context, to ensure that it is not mistakenly applied to another occurrence of the same error code.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_clear_error_message - Clear the extended error message in a context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cccol_have_content.html" title="krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches."
- >previous</a> |
- <a href="krb5_check_clockskew.html" title="krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_clear_error_message - Clear the extended error message in a context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_addresses - Copy an array of addresses. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_authdata - Copy an authorization data list." href="krb5_copy_authdata.html" />
- <link rel="prev" title="krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time." href="krb5_check_clockskew.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_check_clockskew.html" title="krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time."
- accesskey="P">previous</a> |
- <a href="krb5_copy_authdata.html" title="krb5_copy_authdata - Copy an authorization data list."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_addresses - Copy an array of addresses.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-addresses-copy-an-array-of-addresses">
-<h1>krb5_copy_addresses - Copy an array of addresses.<a class="headerlink" href="#krb5-copy-addresses-copy-an-array-of-addresses" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_addresses">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_addresses</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *const *<em> inaddr</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> ***<em> outaddr</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_addresses" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>inaddr</strong> - Array of addresses to be copied</p>
-<p class="last"><strong>[out]</strong> <strong>outaddr</strong> - Copy of array of addresses</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new address array containing a copy of <em>inaddr</em> . Use <a class="reference internal" href="krb5_free_addresses.html#c.krb5_free_addresses" title="krb5_free_addresses"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_addresses()</span></code></a> to free <em>outaddr</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_addresses - Copy an array of addresses.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_check_clockskew.html" title="krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time."
- >previous</a> |
- <a href="krb5_copy_authdata.html" title="krb5_copy_authdata - Copy an authorization data list."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_addresses - Copy an array of addresses.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_authdata - Copy an authorization data list. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_authenticator - Copy a krb5_authenticator structure." href="krb5_copy_authenticator.html" />
- <link rel="prev" title="krb5_copy_addresses - Copy an array of addresses." href="krb5_copy_addresses.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_addresses.html" title="krb5_copy_addresses - Copy an array of addresses."
- accesskey="P">previous</a> |
- <a href="krb5_copy_authenticator.html" title="krb5_copy_authenticator - Copy a krb5_authenticator structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_authdata - Copy an authorization data list.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-authdata-copy-an-authorization-data-list">
-<h1>krb5_copy_authdata - Copy an authorization data list.<a class="headerlink" href="#krb5-copy-authdata-copy-an-authorization-data-list" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_authdata">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_authdata</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> *const *<em> in_authdat</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ***<em> out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_authdata" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>in_authdat</strong> - List of <em>krb5_authdata</em> structures</p>
-<p class="last"><strong>[out]</strong> <strong>out</strong> - New array of <em>krb5_authdata</em> structures</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new authorization data list containing a copy of <em>in_authdat</em> , which must be null-terminated. Use <a class="reference internal" href="krb5_free_authdata.html#c.krb5_free_authdata" title="krb5_free_authdata"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_authdata()</span></code></a> to free <em>out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The last array entry in <em>in_authdat</em> must be a NULL pointer.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_authdata - Copy an authorization data list.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_addresses.html" title="krb5_copy_addresses - Copy an array of addresses."
- >previous</a> |
- <a href="krb5_copy_authenticator.html" title="krb5_copy_authenticator - Copy a krb5_authenticator structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_authdata - Copy an authorization data list.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_authenticator - Copy a krb5_authenticator structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_checksum - Copy a krb5_checksum structure." href="krb5_copy_checksum.html" />
- <link rel="prev" title="krb5_copy_authdata - Copy an authorization data list." href="krb5_copy_authdata.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_authdata.html" title="krb5_copy_authdata - Copy an authorization data list."
- accesskey="P">previous</a> |
- <a href="krb5_copy_checksum.html" title="krb5_copy_checksum - Copy a krb5_checksum structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_authenticator - Copy a krb5_authenticator structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-authenticator-copy-a-krb5-authenticator-structure">
-<h1>krb5_copy_authenticator - Copy a krb5_authenticator structure.<a class="headerlink" href="#krb5-copy-authenticator-copy-a-krb5-authenticator-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_authenticator">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_authenticator</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_authenticator.html#c.krb5_authenticator" title="krb5_authenticator">krb5_authenticator</a> *<em> authfrom</em>, <a class="reference internal" href="../types/krb5_authenticator.html#c.krb5_authenticator" title="krb5_authenticator">krb5_authenticator</a> **<em> authto</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_authenticator" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>authfrom</strong> - krb5_authenticator structure to be copied</p>
-<p class="last"><strong>[out]</strong> <strong>authto</strong> - Copy of krb5_authenticator structure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new krb5_authenticator structure with the content of <em>authfrom</em> . Use <a class="reference internal" href="krb5_free_authenticator.html#c.krb5_free_authenticator" title="krb5_free_authenticator"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_authenticator()</span></code></a> to free <em>authto</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_authenticator - Copy a krb5_authenticator structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_authdata.html" title="krb5_copy_authdata - Copy an authorization data list."
- >previous</a> |
- <a href="krb5_copy_checksum.html" title="krb5_copy_checksum - Copy a krb5_checksum structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_authenticator - Copy a krb5_authenticator structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_checksum - Copy a krb5_checksum structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_context - Copy a krb5_context structure." href="krb5_copy_context.html" />
- <link rel="prev" title="krb5_copy_authenticator - Copy a krb5_authenticator structure." href="krb5_copy_authenticator.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_authenticator.html" title="krb5_copy_authenticator - Copy a krb5_authenticator structure."
- accesskey="P">previous</a> |
- <a href="krb5_copy_context.html" title="krb5_copy_context - Copy a krb5_context structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_checksum - Copy a krb5_checksum structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-checksum-copy-a-krb5-checksum-structure">
-<h1>krb5_copy_checksum - Copy a krb5_checksum structure.<a class="headerlink" href="#krb5-copy-checksum-copy-a-krb5-checksum-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_checksum">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_checksum</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> *<em> ckfrom</em>, <a class="reference internal" href="../types/krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> **<em> ckto</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_checksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ckfrom</strong> - Checksum to be copied</p>
-<p class="last"><strong>[out]</strong> <strong>ckto</strong> - Copy of krb5_checksum structure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new krb5_checksum structure with the contents of <em>ckfrom</em> . Use <a class="reference internal" href="krb5_free_checksum.html#c.krb5_free_checksum" title="krb5_free_checksum"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_checksum()</span></code></a> to free <em>ckto</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_checksum - Copy a krb5_checksum structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_authenticator.html" title="krb5_copy_authenticator - Copy a krb5_authenticator structure."
- >previous</a> |
- <a href="krb5_copy_context.html" title="krb5_copy_context - Copy a krb5_context structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_checksum - Copy a krb5_checksum structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_context - Copy a krb5_context structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_creds - Copy a krb5_creds structure." href="krb5_copy_creds.html" />
- <link rel="prev" title="krb5_copy_checksum - Copy a krb5_checksum structure." href="krb5_copy_checksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_checksum.html" title="krb5_copy_checksum - Copy a krb5_checksum structure."
- accesskey="P">previous</a> |
- <a href="krb5_copy_creds.html" title="krb5_copy_creds - Copy a krb5_creds structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_context - Copy a krb5_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-context-copy-a-krb5-context-structure">
-<h1>krb5_copy_context - Copy a krb5_context structure.<a class="headerlink" href="#krb5-copy-context-copy-a-krb5-context-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_context">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_context</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a> *<em> nctx_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_context" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>nctx_out</strong> - New context structure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>The newly created context must be released by calling <a class="reference internal" href="krb5_free_context.html#c.krb5_free_context" title="krb5_free_context"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_context()</span></code></a> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_context - Copy a krb5_context structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_checksum.html" title="krb5_copy_checksum - Copy a krb5_checksum structure."
- >previous</a> |
- <a href="krb5_copy_creds.html" title="krb5_copy_creds - Copy a krb5_creds structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_context - Copy a krb5_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_creds - Copy a krb5_creds structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_data - Copy a krb5_data object." href="krb5_copy_data.html" />
- <link rel="prev" title="krb5_copy_context - Copy a krb5_context structure." href="krb5_copy_context.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_context.html" title="krb5_copy_context - Copy a krb5_context structure."
- accesskey="P">previous</a> |
- <a href="krb5_copy_data.html" title="krb5_copy_data - Copy a krb5_data object."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_creds - Copy a krb5_creds structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-creds-copy-a-krb5-creds-structure">
-<h1>krb5_copy_creds - Copy a krb5_creds structure.<a class="headerlink" href="#krb5-copy-creds-copy-a-krb5-creds-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_creds">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> incred</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> **<em> outcred</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>incred</strong> - Credentials structure to be copied</p>
-<p class="last"><strong>[out]</strong> <strong>outcred</strong> - Copy of <em>incred</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new credential with the contents of <em>incred</em> . Use <a class="reference internal" href="krb5_free_creds.html#c.krb5_free_creds" title="krb5_free_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_creds()</span></code></a> to free <em>outcred</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_creds - Copy a krb5_creds structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_context.html" title="krb5_copy_context - Copy a krb5_context structure."
- >previous</a> |
- <a href="krb5_copy_data.html" title="krb5_copy_data - Copy a krb5_data object."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_creds - Copy a krb5_creds structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_data - Copy a krb5_data object. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_error_message - Copy the most recent extended error message from one context to another." href="krb5_copy_error_message.html" />
- <link rel="prev" title="krb5_copy_creds - Copy a krb5_creds structure." href="krb5_copy_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_creds.html" title="krb5_copy_creds - Copy a krb5_creds structure."
- accesskey="P">previous</a> |
- <a href="krb5_copy_error_message.html" title="krb5_copy_error_message - Copy the most recent extended error message from one context to another."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_data - Copy a krb5_data object.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-data-copy-a-krb5-data-object">
-<h1>krb5_copy_data - Copy a krb5_data object.<a class="headerlink" href="#krb5-copy-data-copy-a-krb5-data-object" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_data">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_data</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> indata</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> **<em> outdata</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>indata</strong> - Data object to be copied</p>
-<p class="last"><strong>[out]</strong> <strong>outdata</strong> - Copy of <em>indata</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new krb5_data object with the contents of <em>indata</em> . Use <a class="reference internal" href="krb5_free_data.html#c.krb5_free_data" title="krb5_free_data"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data()</span></code></a> to free <em>outdata</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_data - Copy a krb5_data object.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_creds.html" title="krb5_copy_creds - Copy a krb5_creds structure."
- >previous</a> |
- <a href="krb5_copy_error_message.html" title="krb5_copy_error_message - Copy the most recent extended error message from one context to another."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_data - Copy a krb5_data object.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_error_message - Copy the most recent extended error message from one context to another. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_keyblock - Copy a keyblock." href="krb5_copy_keyblock.html" />
- <link rel="prev" title="krb5_copy_data - Copy a krb5_data object." href="krb5_copy_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_data.html" title="krb5_copy_data - Copy a krb5_data object."
- accesskey="P">previous</a> |
- <a href="krb5_copy_keyblock.html" title="krb5_copy_keyblock - Copy a keyblock."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_error_message - Copy the most recent extended error message from one context to another.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-error-message-copy-the-most-recent-extended-error-message-from-one-context-to-another">
-<h1>krb5_copy_error_message - Copy the most recent extended error message from one context to another.<a class="headerlink" href="#krb5-copy-error-message-copy-the-most-recent-extended-error-message-from-one-context-to-another" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_error_message">
-void <code class="descname">krb5_copy_error_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> dest_ctx</em>, <a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> src_ctx</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_error_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>dest_ctx</strong> - Library context to copy message to</p>
-<p class="last"><strong>[in]</strong> <strong>src_ctx</strong> - Library context with current message</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_error_message - Copy the most recent extended error message from one context to another.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_data.html" title="krb5_copy_data - Copy a krb5_data object."
- >previous</a> |
- <a href="krb5_copy_keyblock.html" title="krb5_copy_keyblock - Copy a keyblock."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_error_message - Copy the most recent extended error message from one context to another.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_keyblock - Copy a keyblock. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_keyblock_contents - Copy the contents of a keyblock." href="krb5_copy_keyblock_contents.html" />
- <link rel="prev" title="krb5_copy_error_message - Copy the most recent extended error message from one context to another." href="krb5_copy_error_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_error_message.html" title="krb5_copy_error_message - Copy the most recent extended error message from one context to another."
- accesskey="P">previous</a> |
- <a href="krb5_copy_keyblock_contents.html" title="krb5_copy_keyblock_contents - Copy the contents of a keyblock."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_keyblock - Copy a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-keyblock-copy-a-keyblock">
-<h1>krb5_copy_keyblock - Copy a keyblock.<a class="headerlink" href="#krb5-copy-keyblock-copy-a-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_keyblock">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_keyblock</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> from</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> to</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_keyblock" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>from</strong> - Keyblock to be copied</p>
-<p class="last"><strong>[out]</strong> <strong>to</strong> - Copy of keyblock <em>from</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new keyblock with the same contents as <em>from</em> . Use <a class="reference internal" href="krb5_free_keyblock.html#c.krb5_free_keyblock" title="krb5_free_keyblock"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keyblock()</span></code></a> to free <em>to</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_keyblock - Copy a keyblock.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_error_message.html" title="krb5_copy_error_message - Copy the most recent extended error message from one context to another."
- >previous</a> |
- <a href="krb5_copy_keyblock_contents.html" title="krb5_copy_keyblock_contents - Copy the contents of a keyblock."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_keyblock - Copy a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_keyblock_contents - Copy the contents of a keyblock. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_principal - Copy a principal." href="krb5_copy_principal.html" />
- <link rel="prev" title="krb5_copy_keyblock - Copy a keyblock." href="krb5_copy_keyblock.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_keyblock.html" title="krb5_copy_keyblock - Copy a keyblock."
- accesskey="P">previous</a> |
- <a href="krb5_copy_principal.html" title="krb5_copy_principal - Copy a principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_keyblock_contents - Copy the contents of a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-keyblock-contents-copy-the-contents-of-a-keyblock">
-<h1>krb5_copy_keyblock_contents - Copy the contents of a keyblock.<a class="headerlink" href="#krb5-copy-keyblock-contents-copy-the-contents-of-a-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_keyblock_contents">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_keyblock_contents</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> from</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> to</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_keyblock_contents" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>from</strong> - Key to be copied</p>
-<p class="last"><strong>[out]</strong> <strong>to</strong> - Output key</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function copies the contents of <em>from</em> to <em>to</em> . Use <a class="reference internal" href="krb5_free_keyblock_contents.html#c.krb5_free_keyblock_contents" title="krb5_free_keyblock_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keyblock_contents()</span></code></a> to free <em>to</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_keyblock_contents - Copy the contents of a keyblock.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_keyblock.html" title="krb5_copy_keyblock - Copy a keyblock."
- >previous</a> |
- <a href="krb5_copy_principal.html" title="krb5_copy_principal - Copy a principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_keyblock_contents - Copy the contents of a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_principal - Copy a principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_copy_ticket - Copy a krb5_ticket structure." href="krb5_copy_ticket.html" />
- <link rel="prev" title="krb5_copy_keyblock_contents - Copy the contents of a keyblock." href="krb5_copy_keyblock_contents.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_keyblock_contents.html" title="krb5_copy_keyblock_contents - Copy the contents of a keyblock."
- accesskey="P">previous</a> |
- <a href="krb5_copy_ticket.html" title="krb5_copy_ticket - Copy a krb5_ticket structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_principal - Copy a principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-principal-copy-a-principal">
-<h1>krb5_copy_principal - Copy a principal.<a class="headerlink" href="#krb5-copy-principal-copy-a-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_principal">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_principal</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> inprinc</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> outprinc</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>inprinc</strong> - Principal to be copied</p>
-<p class="last"><strong>[out]</strong> <strong>outprinc</strong> - Copy of <em>inprinc</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new principal structure with the contents of <em>inprinc</em> . Use <a class="reference internal" href="krb5_free_principal.html#c.krb5_free_principal" title="krb5_free_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_principal()</span></code></a> to free <em>outprinc</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_principal - Copy a principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_keyblock_contents.html" title="krb5_copy_keyblock_contents - Copy the contents of a keyblock."
- >previous</a> |
- <a href="krb5_copy_ticket.html" title="krb5_copy_ticket - Copy a krb5_ticket structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_principal - Copy a principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_copy_ticket - Copy a krb5_ticket structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_find_authdata - Find authorization data elements." href="krb5_find_authdata.html" />
- <link rel="prev" title="krb5_copy_principal - Copy a principal." href="krb5_copy_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_principal.html" title="krb5_copy_principal - Copy a principal."
- accesskey="P">previous</a> |
- <a href="krb5_find_authdata.html" title="krb5_find_authdata - Find authorization data elements."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_ticket - Copy a krb5_ticket structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-copy-ticket-copy-a-krb5-ticket-structure">
-<h1>krb5_copy_ticket - Copy a krb5_ticket structure.<a class="headerlink" href="#krb5-copy-ticket-copy-a-krb5-ticket-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_copy_ticket">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_copy_ticket</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> *<em> from</em>, <a class="reference internal" href="../types/krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> **<em> pto</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_copy_ticket" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>from</strong> - Ticket to be copied</p>
-<p class="last"><strong>[out]</strong> <strong>pto</strong> - Copy of ticket</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new krb5_ticket structure containing the contents of <em>from</em> . Use <a class="reference internal" href="krb5_free_ticket.html#c.krb5_free_ticket" title="krb5_free_ticket"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_ticket()</span></code></a> to free <em>pto</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_copy_ticket - Copy a krb5_ticket structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_principal.html" title="krb5_copy_principal - Copy a principal."
- >previous</a> |
- <a href="krb5_find_authdata.html" title="krb5_find_authdata - Find authorization data elements."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_copy_ticket - Copy a krb5_ticket structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_decode_authdata_container - Unwrap authorization data. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_decode_ticket - Decode an ASN.1-formatted ticket." href="krb5_decode_ticket.html" />
- <link rel="prev" title="krb5_cksumtype_to_string - Convert a checksum type to a string." href="krb5_cksumtype_to_string.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cksumtype_to_string.html" title="krb5_cksumtype_to_string - Convert a checksum type to a string."
- accesskey="P">previous</a> |
- <a href="krb5_decode_ticket.html" title="krb5_decode_ticket - Decode an ASN.1-formatted ticket."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_decode_authdata_container - Unwrap authorization data.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-decode-authdata-container-unwrap-authorization-data">
-<h1>krb5_decode_authdata_container - Unwrap authorization data.<a class="headerlink" href="#krb5-decode-authdata-container-unwrap-authorization-data" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_decode_authdata_container">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_decode_authdata_container</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_authdatatype.html#c.krb5_authdatatype" title="krb5_authdatatype">krb5_authdatatype</a><em> type</em>, const <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> *<em> container</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ***<em> authdata</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_decode_authdata_container" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>type</strong> - <code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTHDATA</span></code> type of <em>container</em></p>
-<p><strong>[in]</strong> <strong>container</strong> - Authorization data to be decoded</p>
-<p class="last"><strong>[out]</strong> <strong>authdata</strong> - List of decoded authorization data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_encode_authdata_container.html#c.krb5_encode_authdata_container" title="krb5_encode_authdata_container"><code class="xref c c-func docutils literal"><span class="pre">krb5_encode_authdata_container()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_decode_authdata_container - Unwrap authorization data.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cksumtype_to_string.html" title="krb5_cksumtype_to_string - Convert a checksum type to a string."
- >previous</a> |
- <a href="krb5_decode_ticket.html" title="krb5_decode_ticket - Decode an ASN.1-formatted ticket."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_decode_authdata_container - Unwrap authorization data.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_decode_ticket - Decode an ASN.1-formatted ticket. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_deltat_to_string - Convert a relative time value to a string." href="krb5_deltat_to_string.html" />
- <link rel="prev" title="krb5_decode_authdata_container - Unwrap authorization data." href="krb5_decode_authdata_container.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_decode_authdata_container.html" title="krb5_decode_authdata_container - Unwrap authorization data."
- accesskey="P">previous</a> |
- <a href="krb5_deltat_to_string.html" title="krb5_deltat_to_string - Convert a relative time value to a string."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_decode_ticket - Decode an ASN.1-formatted ticket.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-decode-ticket-decode-an-asn-1-formatted-ticket">
-<h1>krb5_decode_ticket - Decode an ASN.1-formatted ticket.<a class="headerlink" href="#krb5-decode-ticket-decode-an-asn-1-formatted-ticket" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_decode_ticket">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_decode_ticket</code><span class="sig-paren">(</span>const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> code</em>, <a class="reference internal" href="../types/krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> **<em> rep</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_decode_ticket" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>code</strong> - ASN.1-formatted ticket</p>
-<p class="last"><strong>[out]</strong> <strong>rep</strong> - Decoded ticket information</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_decode_ticket - Decode an ASN.1-formatted ticket.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_decode_authdata_container.html" title="krb5_decode_authdata_container - Unwrap authorization data."
- >previous</a> |
- <a href="krb5_deltat_to_string.html" title="krb5_deltat_to_string - Convert a relative time value to a string."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_decode_ticket - Decode an ASN.1-formatted ticket.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_decrypt — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_eblock_enctype" href="krb5_eblock_enctype.html" />
- <link rel="prev" title="krb5_encrypt" href="krb5_encrypt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_encrypt.html" title="krb5_encrypt"
- accesskey="P">previous</a> |
- <a href="krb5_eblock_enctype.html" title="krb5_eblock_enctype"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_decrypt">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-decrypt">
-<h1>krb5_decrypt<a class="headerlink" href="#krb5-decrypt" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_decrypt">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_decrypt</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_pointer.html#c.krb5_const_pointer" title="krb5_const_pointer">krb5_const_pointer</a><em> inptr</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a><em> outptr</em>, size_t<em> size</em>, <a class="reference internal" href="../types/krb5_encrypt_block.html#c.krb5_encrypt_block" title="krb5_encrypt_block">krb5_encrypt_block</a> *<em> eblock</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a><em> ivec</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_decrypt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>inptr</strong></p>
-<p><strong>outptr</strong></p>
-<p><strong>size</strong></p>
-<p><strong>eblock</strong></p>
-<p class="last"><strong>ivec</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_c_* API family.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_decrypt</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_encrypt.html" title="krb5_encrypt"
- >previous</a> |
- <a href="krb5_eblock_enctype.html" title="krb5_eblock_enctype"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_decrypt">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_deltat_to_string - Convert a relative time value to a string. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_encode_authdata_container - Wrap authorization data in a container." href="krb5_encode_authdata_container.html" />
- <link rel="prev" title="krb5_decode_ticket - Decode an ASN.1-formatted ticket." href="krb5_decode_ticket.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_decode_ticket.html" title="krb5_decode_ticket - Decode an ASN.1-formatted ticket."
- accesskey="P">previous</a> |
- <a href="krb5_encode_authdata_container.html" title="krb5_encode_authdata_container - Wrap authorization data in a container."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_deltat_to_string - Convert a relative time value to a string.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-deltat-to-string-convert-a-relative-time-value-to-a-string">
-<h1>krb5_deltat_to_string - Convert a relative time value to a string.<a class="headerlink" href="#krb5-deltat-to-string-convert-a-relative-time-value-to-a-string" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_deltat_to_string">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_deltat_to_string</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_deltat.html#c.krb5_deltat" title="krb5_deltat">krb5_deltat</a><em> deltat</em>, char *<em> buffer</em>, size_t<em> buflen</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_deltat_to_string" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>deltat</strong> - Relative time value to convert</p>
-<p><strong>[out]</strong> <strong>buffer</strong> - Buffer to hold time string</p>
-<p class="last"><strong>[in]</strong> <strong>buflen</strong> - Storage available in <em>buffer</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_deltat_to_string - Convert a relative time value to a string.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_decode_ticket.html" title="krb5_decode_ticket - Decode an ASN.1-formatted ticket."
- >previous</a> |
- <a href="krb5_encode_authdata_container.html" title="krb5_encode_authdata_container - Wrap authorization data in a container."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_deltat_to_string - Convert a relative time value to a string.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_eblock_enctype — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_encrypt_size" href="krb5_encrypt_size.html" />
- <link rel="prev" title="krb5_decrypt" href="krb5_decrypt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_decrypt.html" title="krb5_decrypt"
- accesskey="P">previous</a> |
- <a href="krb5_encrypt_size.html" title="krb5_encrypt_size"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_eblock_enctype">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-eblock-enctype">
-<h1>krb5_eblock_enctype<a class="headerlink" href="#krb5-eblock-enctype" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_eblock_enctype">
-<a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> <code class="descname">krb5_eblock_enctype</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_encrypt_block.html#c.krb5_encrypt_block" title="krb5_encrypt_block">krb5_encrypt_block</a> *<em> eblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_eblock_enctype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p class="last"><strong>eblock</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_c_* API family.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_eblock_enctype</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_decrypt.html" title="krb5_decrypt"
- >previous</a> |
- <a href="krb5_encrypt_size.html" title="krb5_encrypt_size"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_eblock_enctype">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_encode_authdata_container - Wrap authorization data in a container. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_enctype_to_name - Convert an encryption type to a name or alias." href="krb5_enctype_to_name.html" />
- <link rel="prev" title="krb5_deltat_to_string - Convert a relative time value to a string." href="krb5_deltat_to_string.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_deltat_to_string.html" title="krb5_deltat_to_string - Convert a relative time value to a string."
- accesskey="P">previous</a> |
- <a href="krb5_enctype_to_name.html" title="krb5_enctype_to_name - Convert an encryption type to a name or alias."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_encode_authdata_container - Wrap authorization data in a container.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-encode-authdata-container-wrap-authorization-data-in-a-container">
-<h1>krb5_encode_authdata_container - Wrap authorization data in a container.<a class="headerlink" href="#krb5-encode-authdata-container-wrap-authorization-data-in-a-container" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_encode_authdata_container">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_encode_authdata_container</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_authdatatype.html#c.krb5_authdatatype" title="krb5_authdatatype">krb5_authdatatype</a><em> type</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> *const *<em> authdata</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ***<em> container</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_encode_authdata_container" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>type</strong> - <code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTHDATA</span></code> type of <em>container</em></p>
-<p><strong>[in]</strong> <strong>authdata</strong> - List of authorization data to be encoded</p>
-<p class="last"><strong>[out]</strong> <strong>container</strong> - List of encoded authorization data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>The result is returned in <em>container</em> as a single-element list.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_decode_authdata_container.html#c.krb5_decode_authdata_container" title="krb5_decode_authdata_container"><code class="xref c c-func docutils literal"><span class="pre">krb5_decode_authdata_container()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_encode_authdata_container - Wrap authorization data in a container.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_deltat_to_string.html" title="krb5_deltat_to_string - Convert a relative time value to a string."
- >previous</a> |
- <a href="krb5_enctype_to_name.html" title="krb5_enctype_to_name - Convert an encryption type to a name or alias."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_encode_authdata_container - Wrap authorization data in a container.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_encrypt — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_decrypt" href="krb5_decrypt.html" />
- <link rel="prev" title="krb5_checksum_size" href="krb5_checksum_size.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_checksum_size.html" title="krb5_checksum_size"
- accesskey="P">previous</a> |
- <a href="krb5_decrypt.html" title="krb5_decrypt"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_encrypt">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-encrypt">
-<h1>krb5_encrypt<a class="headerlink" href="#krb5-encrypt" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_encrypt">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_encrypt</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_pointer.html#c.krb5_const_pointer" title="krb5_const_pointer">krb5_const_pointer</a><em> inptr</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a><em> outptr</em>, size_t<em> size</em>, <a class="reference internal" href="../types/krb5_encrypt_block.html#c.krb5_encrypt_block" title="krb5_encrypt_block">krb5_encrypt_block</a> *<em> eblock</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a><em> ivec</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_encrypt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>inptr</strong></p>
-<p><strong>outptr</strong></p>
-<p><strong>size</strong></p>
-<p><strong>eblock</strong></p>
-<p class="last"><strong>ivec</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_c_* API family.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_encrypt</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_checksum_size.html" title="krb5_checksum_size"
- >previous</a> |
- <a href="krb5_decrypt.html" title="krb5_decrypt"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_encrypt">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_encrypt_size — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_finish_key" href="krb5_finish_key.html" />
- <link rel="prev" title="krb5_eblock_enctype" href="krb5_eblock_enctype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_eblock_enctype.html" title="krb5_eblock_enctype"
- accesskey="P">previous</a> |
- <a href="krb5_finish_key.html" title="krb5_finish_key"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_encrypt_size">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-encrypt-size">
-<h1>krb5_encrypt_size<a class="headerlink" href="#krb5-encrypt-size" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_encrypt_size">
-size_t <code class="descname">krb5_encrypt_size</code><span class="sig-paren">(</span>size_t<em> length</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> crypto</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_encrypt_size" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>length</strong></p>
-<p class="last"><strong>crypto</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_c_* API family.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_encrypt_size</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_eblock_enctype.html" title="krb5_eblock_enctype"
- >previous</a> |
- <a href="krb5_finish_key.html" title="krb5_finish_key"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_encrypt_size">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_enctype_to_name - Convert an encryption type to a name or alias. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_enctype_to_string - Convert an encryption type to a string." href="krb5_enctype_to_string.html" />
- <link rel="prev" title="krb5_encode_authdata_container - Wrap authorization data in a container." href="krb5_encode_authdata_container.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_encode_authdata_container.html" title="krb5_encode_authdata_container - Wrap authorization data in a container."
- accesskey="P">previous</a> |
- <a href="krb5_enctype_to_string.html" title="krb5_enctype_to_string - Convert an encryption type to a string."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enctype_to_name - Convert an encryption type to a name or alias.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-enctype-to-name-convert-an-encryption-type-to-a-name-or-alias">
-<h1>krb5_enctype_to_name - Convert an encryption type to a name or alias.<a class="headerlink" href="#krb5-enctype-to-name-convert-an-encryption-type-to-a-name-or-alias" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_enctype_to_name">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_enctype_to_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a><em> shortest</em>, char *<em> buffer</em>, size_t<em> buflen</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_enctype_to_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[in]</strong> <strong>shortest</strong> - Flag</p>
-<p><strong>[out]</strong> <strong>buffer</strong> - Buffer to hold encryption type string</p>
-<p class="last"><strong>[in]</strong> <strong>buflen</strong> - Storage available in <em>buffer</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>If <em>shortest</em> is FALSE, this function returns the enctype’s canonical name (like”aes128-cts-hmac-sha1-96”). If <em>shortest</em> is TRUE, it return the enctype’s shortest alias (like”aes128-cts”).</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_enctype_to_name - Convert an encryption type to a name or alias.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_encode_authdata_container.html" title="krb5_encode_authdata_container - Wrap authorization data in a container."
- >previous</a> |
- <a href="krb5_enctype_to_string.html" title="krb5_enctype_to_string - Convert an encryption type to a string."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enctype_to_name - Convert an encryption type to a name or alias.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_enctype_to_string - Convert an encryption type to a string. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_checksum - Free a krb5_checksum structure." href="krb5_free_checksum.html" />
- <link rel="prev" title="krb5_enctype_to_name - Convert an encryption type to a name or alias." href="krb5_enctype_to_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_enctype_to_name.html" title="krb5_enctype_to_name - Convert an encryption type to a name or alias."
- accesskey="P">previous</a> |
- <a href="krb5_free_checksum.html" title="krb5_free_checksum - Free a krb5_checksum structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enctype_to_string - Convert an encryption type to a string.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-enctype-to-string-convert-an-encryption-type-to-a-string">
-<h1>krb5_enctype_to_string - Convert an encryption type to a string.<a class="headerlink" href="#krb5-enctype-to-string-convert-an-encryption-type-to-a-string" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_enctype_to_string">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_enctype_to_string</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, char *<em> buffer</em>, size_t<em> buflen</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_enctype_to_string" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[out]</strong> <strong>buffer</strong> - Buffer to hold encryption type string</p>
-<p class="last"><strong>[in]</strong> <strong>buflen</strong> - Storage available in <em>buffer</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_enctype_to_string - Convert an encryption type to a string.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_enctype_to_name.html" title="krb5_enctype_to_name - Convert an encryption type to a name or alias."
- >previous</a> |
- <a href="krb5_free_checksum.html" title="krb5_free_checksum - Free a krb5_checksum structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enctype_to_string - Convert an encryption type to a string.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_expand_hostname - Canonicalize a hostname, possibly using name service. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_context - Free a krb5 library context." href="krb5_free_context.html" />
- <link rel="prev" title="krb5_chpw_message - Get a result message for changing or setting a password." href="krb5_chpw_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_chpw_message.html" title="krb5_chpw_message - Get a result message for changing or setting a password."
- accesskey="P">previous</a> |
- <a href="krb5_free_context.html" title="krb5_free_context - Free a krb5 library context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_expand_hostname - Canonicalize a hostname, possibly using name service.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-expand-hostname-canonicalize-a-hostname-possibly-using-name-service">
-<h1>krb5_expand_hostname - Canonicalize a hostname, possibly using name service.<a class="headerlink" href="#krb5-expand-hostname-canonicalize-a-hostname-possibly-using-name-service" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_expand_hostname">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_expand_hostname</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> host</em>, char **<em> canonhost_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_expand_hostname" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>host</strong> - Input hostname</p>
-<p class="last"><strong>[out]</strong> <strong>canonhost_out</strong> - Canonicalized hostname</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function canonicalizes orig_hostname, possibly using name service lookups if configuration permits. Use <a class="reference internal" href="krb5_free_string.html#c.krb5_free_string" title="krb5_free_string"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_string()</span></code></a> to free <em>canonhost_out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.15</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_expand_hostname - Canonicalize a hostname, possibly using name service.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_chpw_message.html" title="krb5_chpw_message - Get a result message for changing or setting a password."
- >previous</a> |
- <a href="krb5_free_context.html" title="krb5_free_context - Free a krb5 library context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_expand_hostname - Canonicalize a hostname, possibly using name service.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_find_authdata - Find authorization data elements. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_addresses - Free the data stored in array of addresses." href="krb5_free_addresses.html" />
- <link rel="prev" title="krb5_copy_ticket - Copy a krb5_ticket structure." href="krb5_copy_ticket.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_copy_ticket.html" title="krb5_copy_ticket - Copy a krb5_ticket structure."
- accesskey="P">previous</a> |
- <a href="krb5_free_addresses.html" title="krb5_free_addresses - Free the data stored in array of addresses."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_find_authdata - Find authorization data elements.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-find-authdata-find-authorization-data-elements">
-<h1>krb5_find_authdata - Find authorization data elements.<a class="headerlink" href="#krb5-find-authdata-find-authorization-data-elements" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_find_authdata">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_find_authdata</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> *const *<em> ticket_authdata</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> *const *<em> ap_req_authdata</em>, <a class="reference internal" href="../types/krb5_authdatatype.html#c.krb5_authdatatype" title="krb5_authdatatype">krb5_authdatatype</a><em> ad_type</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ***<em> results</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_find_authdata" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ticket_authdata</strong> - Authorization data list from ticket</p>
-<p><strong>[in]</strong> <strong>ap_req_authdata</strong> - Authorization data list from AP request</p>
-<p><strong>[in]</strong> <strong>ad_type</strong> - Authorization data type to find</p>
-<p class="last"><strong>[out]</strong> <strong>results</strong> - List of matching entries</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function searches <em>ticket_authdata</em> and <em>ap_req_authdata</em> for elements of type <em>ad_type</em> . Either input list may be NULL, in which case it will not be searched; otherwise, the input lists must be terminated by NULL entries. This function will search inside AD-IF-RELEVANT containers if found in either list. Use <a class="reference internal" href="krb5_free_authdata.html#c.krb5_free_authdata" title="krb5_free_authdata"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_authdata()</span></code></a> to free <em>results</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.10</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_find_authdata - Find authorization data elements.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_copy_ticket.html" title="krb5_copy_ticket - Copy a krb5_ticket structure."
- >previous</a> |
- <a href="krb5_free_addresses.html" title="krb5_free_addresses - Free the data stored in array of addresses."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_find_authdata - Find authorization data elements.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_finish_key — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_finish_random_key" href="krb5_finish_random_key.html" />
- <link rel="prev" title="krb5_encrypt_size" href="krb5_encrypt_size.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_encrypt_size.html" title="krb5_encrypt_size"
- accesskey="P">previous</a> |
- <a href="krb5_finish_random_key.html" title="krb5_finish_random_key"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_finish_key">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-finish-key">
-<h1>krb5_finish_key<a class="headerlink" href="#krb5-finish-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_finish_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_finish_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_encrypt_block.html#c.krb5_encrypt_block" title="krb5_encrypt_block">krb5_encrypt_block</a> *<em> eblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_finish_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p class="last"><strong>eblock</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_c_* API family.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_finish_key</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_encrypt_size.html" title="krb5_encrypt_size"
- >previous</a> |
- <a href="krb5_finish_random_key.html" title="krb5_finish_random_key"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_finish_key">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_finish_random_key — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_gen_new" href="krb5_cc_gen_new.html" />
- <link rel="prev" title="krb5_finish_key" href="krb5_finish_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_finish_key.html" title="krb5_finish_key"
- accesskey="P">previous</a> |
- <a href="krb5_cc_gen_new.html" title="krb5_cc_gen_new"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_finish_random_key">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-finish-random-key">
-<h1>krb5_finish_random_key<a class="headerlink" href="#krb5-finish-random-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_finish_random_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_finish_random_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_encrypt_block.html#c.krb5_encrypt_block" title="krb5_encrypt_block">krb5_encrypt_block</a> *<em> eblock</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a> *<em> ptr</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_finish_random_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>eblock</strong></p>
-<p class="last"><strong>ptr</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_c_* API family.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_finish_random_key</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_finish_key.html" title="krb5_finish_key"
- >previous</a> |
- <a href="krb5_cc_gen_new.html" title="krb5_cc_gen_new"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_finish_random_key">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_addresses - Free the data stored in array of addresses. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure." href="krb5_free_ap_rep_enc_part.html" />
- <link rel="prev" title="krb5_find_authdata - Find authorization data elements." href="krb5_find_authdata.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_find_authdata.html" title="krb5_find_authdata - Find authorization data elements."
- accesskey="P">previous</a> |
- <a href="krb5_free_ap_rep_enc_part.html" title="krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_addresses - Free the data stored in array of addresses.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-addresses-free-the-data-stored-in-array-of-addresses">
-<h1>krb5_free_addresses - Free the data stored in array of addresses.<a class="headerlink" href="#krb5-free-addresses-free-the-data-stored-in-array-of-addresses" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_addresses">
-void <code class="descname">krb5_free_addresses</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> **<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_addresses" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Array of addresses to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> and the array itself.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The last entry in the array must be a NULL pointer.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_addresses - Free the data stored in array of addresses.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_find_authdata.html" title="krb5_find_authdata - Find authorization data elements."
- >previous</a> |
- <a href="krb5_free_ap_rep_enc_part.html" title="krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_addresses - Free the data stored in array of addresses.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_authdata - Free the storage assigned to array of authentication data." href="krb5_free_authdata.html" />
- <link rel="prev" title="krb5_free_addresses - Free the data stored in array of addresses." href="krb5_free_addresses.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_addresses.html" title="krb5_free_addresses - Free the data stored in array of addresses."
- accesskey="P">previous</a> |
- <a href="krb5_free_authdata.html" title="krb5_free_authdata - Free the storage assigned to array of authentication data."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-ap-rep-enc-part-free-a-krb5-ap-rep-enc-part-structure">
-<h1>krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure.<a class="headerlink" href="#krb5-free-ap-rep-enc-part-free-a-krb5-ap-rep-enc-part-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_ap_rep_enc_part">
-void <code class="descname">krb5_free_ap_rep_enc_part</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part" title="krb5_ap_rep_enc_part">krb5_ap_rep_enc_part</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_ap_rep_enc_part" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - AP-REP enc part to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> and the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_addresses.html" title="krb5_free_addresses - Free the data stored in array of addresses."
- >previous</a> |
- <a href="krb5_free_authdata.html" title="krb5_free_authdata - Free the storage assigned to array of authentication data."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_authdata - Free the storage assigned to array of authentication data. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_authenticator - Free a krb5_authenticator structure." href="krb5_free_authenticator.html" />
- <link rel="prev" title="krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure." href="krb5_free_ap_rep_enc_part.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_ap_rep_enc_part.html" title="krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure."
- accesskey="P">previous</a> |
- <a href="krb5_free_authenticator.html" title="krb5_free_authenticator - Free a krb5_authenticator structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_authdata - Free the storage assigned to array of authentication data.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-authdata-free-the-storage-assigned-to-array-of-authentication-data">
-<h1>krb5_free_authdata - Free the storage assigned to array of authentication data.<a class="headerlink" href="#krb5-free-authdata-free-the-storage-assigned-to-array-of-authentication-data" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_authdata">
-void <code class="descname">krb5_free_authdata</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> **<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_authdata" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Array of authentication data to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> and the array itself.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The last entry in the array must be a NULL pointer.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_authdata - Free the storage assigned to array of authentication data.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_ap_rep_enc_part.html" title="krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure."
- >previous</a> |
- <a href="krb5_free_authenticator.html" title="krb5_free_authenticator - Free a krb5_authenticator structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_authdata - Free the storage assigned to array of authentication data.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_authenticator - Free a krb5_authenticator structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_cred_contents - Free the contents of a krb5_creds structure." href="krb5_free_cred_contents.html" />
- <link rel="prev" title="krb5_free_authdata - Free the storage assigned to array of authentication data." href="krb5_free_authdata.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_authdata.html" title="krb5_free_authdata - Free the storage assigned to array of authentication data."
- accesskey="P">previous</a> |
- <a href="krb5_free_cred_contents.html" title="krb5_free_cred_contents - Free the contents of a krb5_creds structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_authenticator - Free a krb5_authenticator structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-authenticator-free-a-krb5-authenticator-structure">
-<h1>krb5_free_authenticator - Free a krb5_authenticator structure.<a class="headerlink" href="#krb5-free-authenticator-free-a-krb5-authenticator-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_authenticator">
-void <code class="descname">krb5_free_authenticator</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_authenticator.html#c.krb5_authenticator" title="krb5_authenticator">krb5_authenticator</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_authenticator" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Authenticator structure to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> and the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_authenticator - Free a krb5_authenticator structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_authdata.html" title="krb5_free_authdata - Free the storage assigned to array of authentication data."
- >previous</a> |
- <a href="krb5_free_cred_contents.html" title="krb5_free_cred_contents - Free the contents of a krb5_creds structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_authenticator - Free a krb5_authenticator structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_checksum - Free a krb5_checksum structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_checksum_contents - Free the contents of a krb5_checksum structure." href="krb5_free_checksum_contents.html" />
- <link rel="prev" title="krb5_enctype_to_string - Convert an encryption type to a string." href="krb5_enctype_to_string.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_enctype_to_string.html" title="krb5_enctype_to_string - Convert an encryption type to a string."
- accesskey="P">previous</a> |
- <a href="krb5_free_checksum_contents.html" title="krb5_free_checksum_contents - Free the contents of a krb5_checksum structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_checksum - Free a krb5_checksum structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-checksum-free-a-krb5-checksum-structure">
-<h1>krb5_free_checksum - Free a krb5_checksum structure.<a class="headerlink" href="#krb5-free-checksum-free-a-krb5-checksum-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_checksum">
-void <code class="descname">krb5_free_checksum</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_checksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Checksum structure to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> and the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_checksum - Free a krb5_checksum structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_enctype_to_string.html" title="krb5_enctype_to_string - Convert an encryption type to a string."
- >previous</a> |
- <a href="krb5_free_checksum_contents.html" title="krb5_free_checksum_contents - Free the contents of a krb5_checksum structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_checksum - Free a krb5_checksum structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_checksum_contents - Free the contents of a krb5_checksum structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_cksumtypes - Free an array of checksum types." href="krb5_free_cksumtypes.html" />
- <link rel="prev" title="krb5_free_checksum - Free a krb5_checksum structure." href="krb5_free_checksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_checksum.html" title="krb5_free_checksum - Free a krb5_checksum structure."
- accesskey="P">previous</a> |
- <a href="krb5_free_cksumtypes.html" title="krb5_free_cksumtypes - Free an array of checksum types."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_checksum_contents - Free the contents of a krb5_checksum structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-checksum-contents-free-the-contents-of-a-krb5-checksum-structure">
-<h1>krb5_free_checksum_contents - Free the contents of a krb5_checksum structure.<a class="headerlink" href="#krb5-free-checksum-contents-free-the-contents-of-a-krb5-checksum-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_checksum_contents">
-void <code class="descname">krb5_free_checksum_contents</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_checksum_contents" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Checksum structure to free contents of</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> , but not the structure itself. It sets the checksum’s data pointer to null and (beginning in release 1.19) sets its length to zero.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_checksum_contents - Free the contents of a krb5_checksum structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_checksum.html" title="krb5_free_checksum - Free a krb5_checksum structure."
- >previous</a> |
- <a href="krb5_free_cksumtypes.html" title="krb5_free_cksumtypes - Free an array of checksum types."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_checksum_contents - Free the contents of a krb5_checksum structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_cksumtypes - Free an array of checksum types. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_tgt_creds - Free an array of credential structures." href="krb5_free_tgt_creds.html" />
- <link rel="prev" title="krb5_free_checksum_contents - Free the contents of a krb5_checksum structure." href="krb5_free_checksum_contents.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_checksum_contents.html" title="krb5_free_checksum_contents - Free the contents of a krb5_checksum structure."
- accesskey="P">previous</a> |
- <a href="krb5_free_tgt_creds.html" title="krb5_free_tgt_creds - Free an array of credential structures."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_cksumtypes - Free an array of checksum types.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-cksumtypes-free-an-array-of-checksum-types">
-<h1>krb5_free_cksumtypes - Free an array of checksum types.<a class="headerlink" href="#krb5-free-cksumtypes-free-an-array-of-checksum-types" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_cksumtypes">
-void <code class="descname">krb5_free_cksumtypes</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_cksumtypes" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Array of checksum types to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_cksumtypes - Free an array of checksum types.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_checksum_contents.html" title="krb5_free_checksum_contents - Free the contents of a krb5_checksum structure."
- >previous</a> |
- <a href="krb5_free_tgt_creds.html" title="krb5_free_tgt_creds - Free an array of credential structures."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_cksumtypes - Free an array of checksum types.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_context - Free a krb5 library context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_error_message - Free an error message generated by krb5_get_error_message() ." href="krb5_free_error_message.html" />
- <link rel="prev" title="krb5_expand_hostname - Canonicalize a hostname, possibly using name service." href="krb5_expand_hostname.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_expand_hostname.html" title="krb5_expand_hostname - Canonicalize a hostname, possibly using name service."
- accesskey="P">previous</a> |
- <a href="krb5_free_error_message.html" title="krb5_free_error_message - Free an error message generated by krb5_get_error_message() ."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_context - Free a krb5 library context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-context-free-a-krb5-library-context">
-<h1>krb5_free_context - Free a krb5 library context.<a class="headerlink" href="#krb5-free-context-free-a-krb5-library-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_context">
-void <code class="descname">krb5_free_context</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_context" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>context</strong> - Library context</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees a <em>context</em> that was created by <a class="reference internal" href="krb5_init_context.html#c.krb5_init_context" title="krb5_init_context"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_context()</span></code></a> or <a class="reference internal" href="krb5_init_secure_context.html#c.krb5_init_secure_context" title="krb5_init_secure_context"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_secure_context()</span></code></a> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_context - Free a krb5 library context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_expand_hostname.html" title="krb5_expand_hostname - Canonicalize a hostname, possibly using name service."
- >previous</a> |
- <a href="krb5_free_error_message.html" title="krb5_free_error_message - Free an error message generated by krb5_get_error_message() ."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_context - Free a krb5 library context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_cred_contents - Free the contents of a krb5_creds structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_creds - Free a krb5_creds structure." href="krb5_free_creds.html" />
- <link rel="prev" title="krb5_free_authenticator - Free a krb5_authenticator structure." href="krb5_free_authenticator.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_authenticator.html" title="krb5_free_authenticator - Free a krb5_authenticator structure."
- accesskey="P">previous</a> |
- <a href="krb5_free_creds.html" title="krb5_free_creds - Free a krb5_creds structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_cred_contents - Free the contents of a krb5_creds structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-cred-contents-free-the-contents-of-a-krb5-creds-structure">
-<h1>krb5_free_cred_contents - Free the contents of a krb5_creds structure.<a class="headerlink" href="#krb5-free-cred-contents-free-the-contents-of-a-krb5-creds-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_cred_contents">
-void <code class="descname">krb5_free_cred_contents</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_cred_contents" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Credential structure to free contents of</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> , but not the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_cred_contents - Free the contents of a krb5_creds structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_authenticator.html" title="krb5_free_authenticator - Free a krb5_authenticator structure."
- >previous</a> |
- <a href="krb5_free_creds.html" title="krb5_free_creds - Free a krb5_creds structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_cred_contents - Free the contents of a krb5_creds structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_creds - Free a krb5_creds structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_data - Free a krb5_data structure." href="krb5_free_data.html" />
- <link rel="prev" title="krb5_free_cred_contents - Free the contents of a krb5_creds structure." href="krb5_free_cred_contents.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_cred_contents.html" title="krb5_free_cred_contents - Free the contents of a krb5_creds structure."
- accesskey="P">previous</a> |
- <a href="krb5_free_data.html" title="krb5_free_data - Free a krb5_data structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_creds - Free a krb5_creds structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-creds-free-a-krb5-creds-structure">
-<h1>krb5_free_creds - Free a krb5_creds structure.<a class="headerlink" href="#krb5-free-creds-free-a-krb5-creds-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_creds">
-void <code class="descname">krb5_free_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Credential structure to be freed.</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> and the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_creds - Free a krb5_creds structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_cred_contents.html" title="krb5_free_cred_contents - Free the contents of a krb5_creds structure."
- >previous</a> |
- <a href="krb5_free_data.html" title="krb5_free_data - Free a krb5_data structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_creds - Free a krb5_creds structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_data - Free a krb5_data structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field." href="krb5_free_data_contents.html" />
- <link rel="prev" title="krb5_free_creds - Free a krb5_creds structure." href="krb5_free_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_creds.html" title="krb5_free_creds - Free a krb5_creds structure."
- accesskey="P">previous</a> |
- <a href="krb5_free_data_contents.html" title="krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_data - Free a krb5_data structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-data-free-a-krb5-data-structure">
-<h1>krb5_free_data - Free a krb5_data structure.<a class="headerlink" href="#krb5-free-data-free-a-krb5-data-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_data">
-void <code class="descname">krb5_free_data</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Data structure to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> and the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_data - Free a krb5_data structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_creds.html" title="krb5_free_creds - Free a krb5_creds structure."
- >previous</a> |
- <a href="krb5_free_data_contents.html" title="krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_data - Free a krb5_data structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() ." href="krb5_free_default_realm.html" />
- <link rel="prev" title="krb5_free_data - Free a krb5_data structure." href="krb5_free_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_data.html" title="krb5_free_data - Free a krb5_data structure."
- accesskey="P">previous</a> |
- <a href="krb5_free_default_realm.html" title="krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() ."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-data-contents-free-the-contents-of-a-krb5-data-structure-and-zero-the-data-field">
-<h1>krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field.<a class="headerlink" href="#krb5-free-data-contents-free-the-contents-of-a-krb5-data-structure-and-zero-the-data-field" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_data_contents">
-void <code class="descname">krb5_free_data_contents</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_data_contents" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Data structure to free contents of</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> , but not the structure itself. It sets the structure’s data pointer to null and (beginning in release 1.19) sets its length to zero.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_data.html" title="krb5_free_data - Free a krb5_data structure."
- >previous</a> |
- <a href="krb5_free_default_realm.html" title="krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() ."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() . — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_enctypes - Free an array of encryption types." href="krb5_free_enctypes.html" />
- <link rel="prev" title="krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field." href="krb5_free_data_contents.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_data_contents.html" title="krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field."
- accesskey="P">previous</a> |
- <a href="krb5_free_enctypes.html" title="krb5_free_enctypes - Free an array of encryption types."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() .">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-default-realm-free-a-default-realm-string-returned-by-krb5-get-default-realm">
-<h1>krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() .<a class="headerlink" href="#krb5-free-default-realm-free-a-default-realm-string-returned-by-krb5-get-default-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_default_realm">
-void <code class="descname">krb5_free_default_realm</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, char *<em> lrealm</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_default_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>lrealm</strong> - Realm to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() .</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_data_contents.html" title="krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field."
- >previous</a> |
- <a href="krb5_free_enctypes.html" title="krb5_free_enctypes - Free an array of encryption types."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() .">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_enctypes - Free an array of encryption types. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() ." href="krb5_free_error.html" />
- <link rel="prev" title="krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() ." href="krb5_free_default_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_default_realm.html" title="krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() ."
- accesskey="P">previous</a> |
- <a href="krb5_free_error.html" title="krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() ."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_enctypes - Free an array of encryption types.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-enctypes-free-an-array-of-encryption-types">
-<h1>krb5_free_enctypes - Free an array of encryption types.<a class="headerlink" href="#krb5-free-enctypes-free-an-array-of-encryption-types" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_enctypes">
-void <code class="descname">krb5_free_enctypes</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_enctypes" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Array of enctypes to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.12</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_enctypes - Free an array of encryption types.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_default_realm.html" title="krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() ."
- >previous</a> |
- <a href="krb5_free_error.html" title="krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() ."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_enctypes - Free an array of encryption types.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() . — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() ." href="krb5_free_host_realm.html" />
- <link rel="prev" title="krb5_free_enctypes - Free an array of encryption types." href="krb5_free_enctypes.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_enctypes.html" title="krb5_free_enctypes - Free an array of encryption types."
- accesskey="P">previous</a> |
- <a href="krb5_free_host_realm.html" title="krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() ."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() .">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-error-free-an-error-allocated-by-krb5-read-error-or-krb5-sendauth">
-<h1>krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() .<a class="headerlink" href="#krb5-free-error-free-an-error-allocated-by-krb5-read-error-or-krb5-sendauth" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_error">
-void <code class="descname">krb5_free_error</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_error.html#c.krb5_error" title="krb5_error">krb5_error</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_error" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Error data structure to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> and the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() .</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_enctypes.html" title="krb5_free_enctypes - Free an array of encryption types."
- >previous</a> |
- <a href="krb5_free_host_realm.html" title="krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() ."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() .">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_error_message - Free an error message generated by krb5_get_error_message() . — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_principal - Free the storage assigned to a principal." href="krb5_free_principal.html" />
- <link rel="prev" title="krb5_free_context - Free a krb5 library context." href="krb5_free_context.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_context.html" title="krb5_free_context - Free a krb5 library context."
- accesskey="P">previous</a> |
- <a href="krb5_free_principal.html" title="krb5_free_principal - Free the storage assigned to a principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_error_message - Free an error message generated by krb5_get_error_message() .">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-error-message-free-an-error-message-generated-by-krb5-get-error-message">
-<h1>krb5_free_error_message - Free an error message generated by krb5_get_error_message() .<a class="headerlink" href="#krb5-free-error-message-free-an-error-message-generated-by-krb5-get-error-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_error_message">
-void <code class="descname">krb5_free_error_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, const char *<em> msg</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_error_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>msg</strong> - Pointer to error message</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_error_message - Free an error message generated by krb5_get_error_message() .</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_context.html" title="krb5_free_context - Free a krb5 library context."
- >previous</a> |
- <a href="krb5_free_principal.html" title="krb5_free_principal - Free the storage assigned to a principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_error_message - Free an error message generated by krb5_get_error_message() .">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() . — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_keyblock - Free a krb5_keyblock structure." href="krb5_free_keyblock.html" />
- <link rel="prev" title="krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() ." href="krb5_free_error.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_error.html" title="krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() ."
- accesskey="P">previous</a> |
- <a href="krb5_free_keyblock.html" title="krb5_free_keyblock - Free a krb5_keyblock structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() .">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-host-realm-free-the-memory-allocated-by-krb5-get-host-realm">
-<h1>krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() .<a class="headerlink" href="#krb5-free-host-realm-free-the-memory-allocated-by-krb5-get-host-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_host_realm">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_free_host_realm</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, char *const *<em> realmlist</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_host_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>realmlist</strong> - List of realm names to be released</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() .</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_error.html" title="krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() ."
- >previous</a> |
- <a href="krb5_free_keyblock.html" title="krb5_free_keyblock - Free a krb5_keyblock structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() .">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_keyblock - Free a krb5_keyblock structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure." href="krb5_free_keyblock_contents.html" />
- <link rel="prev" title="krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() ." href="krb5_free_host_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_host_realm.html" title="krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() ."
- accesskey="P">previous</a> |
- <a href="krb5_free_keyblock_contents.html" title="krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_keyblock - Free a krb5_keyblock structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-keyblock-free-a-krb5-keyblock-structure">
-<h1>krb5_free_keyblock - Free a krb5_keyblock structure.<a class="headerlink" href="#krb5-free-keyblock-free-a-krb5-keyblock-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_keyblock">
-void <code class="descname">krb5_free_keyblock</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_keyblock" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Keyblock to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> and the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_keyblock - Free a krb5_keyblock structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_host_realm.html" title="krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() ."
- >previous</a> |
- <a href="krb5_free_keyblock_contents.html" title="krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_keyblock - Free a krb5_keyblock structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_keytab_entry_contents - Free the contents of a key table entry." href="krb5_free_keytab_entry_contents.html" />
- <link rel="prev" title="krb5_free_keyblock - Free a krb5_keyblock structure." href="krb5_free_keyblock.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_keyblock.html" title="krb5_free_keyblock - Free a krb5_keyblock structure."
- accesskey="P">previous</a> |
- <a href="krb5_free_keytab_entry_contents.html" title="krb5_free_keytab_entry_contents - Free the contents of a key table entry."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-keyblock-contents-free-the-contents-of-a-krb5-keyblock-structure">
-<h1>krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure.<a class="headerlink" href="#krb5-free-keyblock-contents-free-the-contents-of-a-krb5-keyblock-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_keyblock_contents">
-void <code class="descname">krb5_free_keyblock_contents</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_keyblock_contents" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>key</strong> - Keyblock to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>key</em> , but not the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_keyblock.html" title="krb5_free_keyblock - Free a krb5_keyblock structure."
- >previous</a> |
- <a href="krb5_free_keytab_entry_contents.html" title="krb5_free_keytab_entry_contents - Free the contents of a key table entry."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_keytab_entry_contents - Free the contents of a key table entry. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_string - Free a string allocated by a krb5 function." href="krb5_free_string.html" />
- <link rel="prev" title="krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure." href="krb5_free_keyblock_contents.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_keyblock_contents.html" title="krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure."
- accesskey="P">previous</a> |
- <a href="krb5_free_string.html" title="krb5_free_string - Free a string allocated by a krb5 function."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_keytab_entry_contents - Free the contents of a key table entry.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-keytab-entry-contents-free-the-contents-of-a-key-table-entry">
-<h1>krb5_free_keytab_entry_contents - Free the contents of a key table entry.<a class="headerlink" href="#krb5-free-keytab-entry-contents-free-the-contents-of-a-key-table-entry" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_keytab_entry_contents">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_free_keytab_entry_contents</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab_entry.html#c.krb5_keytab_entry" title="krb5_keytab_entry">krb5_keytab_entry</a> *<em> entry</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_keytab_entry_contents" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>entry</strong> - Key table entry whose contents are to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The pointer is not freed.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_keytab_entry_contents - Free the contents of a key table entry.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_keyblock_contents.html" title="krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure."
- >previous</a> |
- <a href="krb5_free_string.html" title="krb5_free_string - Free a string allocated by a krb5 function."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_keytab_entry_contents - Free the contents of a key table entry.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_principal - Free the storage assigned to a principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message." href="krb5_fwd_tgt_creds.html" />
- <link rel="prev" title="krb5_free_error_message - Free an error message generated by krb5_get_error_message() ." href="krb5_free_error_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_error_message.html" title="krb5_free_error_message - Free an error message generated by krb5_get_error_message() ."
- accesskey="P">previous</a> |
- <a href="krb5_fwd_tgt_creds.html" title="krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_principal - Free the storage assigned to a principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-principal-free-the-storage-assigned-to-a-principal">
-<h1>krb5_free_principal - Free the storage assigned to a principal.<a class="headerlink" href="#krb5-free-principal-free-the-storage-assigned-to-a-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_principal">
-void <code class="descname">krb5_free_principal</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Principal to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_principal - Free the storage assigned to a principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_error_message.html" title="krb5_free_error_message - Free an error message generated by krb5_get_error_message() ."
- >previous</a> |
- <a href="krb5_fwd_tgt_creds.html" title="krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_principal - Free the storage assigned to a principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_string - Free a string allocated by a krb5 function. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_ticket - Free a ticket." href="krb5_free_ticket.html" />
- <link rel="prev" title="krb5_free_keytab_entry_contents - Free the contents of a key table entry." href="krb5_free_keytab_entry_contents.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_keytab_entry_contents.html" title="krb5_free_keytab_entry_contents - Free the contents of a key table entry."
- accesskey="P">previous</a> |
- <a href="krb5_free_ticket.html" title="krb5_free_ticket - Free a ticket."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_string - Free a string allocated by a krb5 function.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-string-free-a-string-allocated-by-a-krb5-function">
-<h1>krb5_free_string - Free a string allocated by a krb5 function.<a class="headerlink" href="#krb5-free-string-free-a-string-allocated-by-a-krb5-function" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_string">
-void <code class="descname">krb5_free_string</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, char *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_string" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - String to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.10</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_string - Free a string allocated by a krb5 function.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_keytab_entry_contents.html" title="krb5_free_keytab_entry_contents - Free the contents of a key table entry."
- >previous</a> |
- <a href="krb5_free_ticket.html" title="krb5_free_ticket - Free a ticket."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_string - Free a string allocated by a krb5 function.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_tgt_creds - Free an array of credential structures. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock." href="krb5_k_create_key.html" />
- <link rel="prev" title="krb5_free_cksumtypes - Free an array of checksum types." href="krb5_free_cksumtypes.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_cksumtypes.html" title="krb5_free_cksumtypes - Free an array of checksum types."
- accesskey="P">previous</a> |
- <a href="krb5_k_create_key.html" title="krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_tgt_creds - Free an array of credential structures.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-tgt-creds-free-an-array-of-credential-structures">
-<h1>krb5_free_tgt_creds - Free an array of credential structures.<a class="headerlink" href="#krb5-free-tgt-creds-free-an-array-of-credential-structures" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_tgt_creds">
-void <code class="descname">krb5_free_tgt_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> **<em> tgts</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_tgt_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>tgts</strong> - Null-terminated array of credentials to free</p>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The last entry in the array <em>tgts</em> must be a NULL pointer.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_tgt_creds - Free an array of credential structures.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_cksumtypes.html" title="krb5_free_cksumtypes - Free an array of checksum types."
- >previous</a> |
- <a href="krb5_k_create_key.html" title="krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_tgt_creds - Free an array of credential structures.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_ticket - Free a ticket. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_free_unparsed_name - Free a string representation of a principal." href="krb5_free_unparsed_name.html" />
- <link rel="prev" title="krb5_free_string - Free a string allocated by a krb5 function." href="krb5_free_string.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_string.html" title="krb5_free_string - Free a string allocated by a krb5 function."
- accesskey="P">previous</a> |
- <a href="krb5_free_unparsed_name.html" title="krb5_free_unparsed_name - Free a string representation of a principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_ticket - Free a ticket.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-ticket-free-a-ticket">
-<h1>krb5_free_ticket - Free a ticket.<a class="headerlink" href="#krb5-free-ticket-free-a-ticket" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_ticket">
-void <code class="descname">krb5_free_ticket</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_ticket" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Ticket to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>val</em> and the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_ticket - Free a ticket.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_string.html" title="krb5_free_string - Free a string allocated by a krb5 function."
- >previous</a> |
- <a href="krb5_free_unparsed_name.html" title="krb5_free_unparsed_name - Free a string representation of a principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_ticket - Free a ticket.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_free_unparsed_name - Free a string representation of a principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC." href="krb5_get_etype_info.html" />
- <link rel="prev" title="krb5_free_ticket - Free a ticket." href="krb5_free_ticket.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_ticket.html" title="krb5_free_ticket - Free a ticket."
- accesskey="P">previous</a> |
- <a href="krb5_get_etype_info.html" title="krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_unparsed_name - Free a string representation of a principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-free-unparsed-name-free-a-string-representation-of-a-principal">
-<h1>krb5_free_unparsed_name - Free a string representation of a principal.<a class="headerlink" href="#krb5-free-unparsed-name-free-a-string-representation-of-a-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_free_unparsed_name">
-void <code class="descname">krb5_free_unparsed_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, char *<em> val</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_free_unparsed_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>val</strong> - Name string to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_free_unparsed_name - Free a string representation of a principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_ticket.html" title="krb5_free_ticket - Free a ticket."
- >previous</a> |
- <a href="krb5_get_etype_info.html" title="krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_free_unparsed_name - Free a string representation of a principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_default_realm - Retrieve the default realm." href="krb5_get_default_realm.html" />
- <link rel="prev" title="krb5_free_principal - Free the storage assigned to a principal." href="krb5_free_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_principal.html" title="krb5_free_principal - Free the storage assigned to a principal."
- accesskey="P">previous</a> |
- <a href="krb5_get_default_realm.html" title="krb5_get_default_realm - Retrieve the default realm."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-fwd-tgt-creds-get-a-forwarded-tgt-and-format-a-krb-cred-message">
-<h1>krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message.<a class="headerlink" href="#krb5-fwd-tgt-creds-get-a-forwarded-tgt-and-format-a-krb-cred-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_fwd_tgt_creds">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_fwd_tgt_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, const char *<em> rhost</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> client</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> server</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> cc</em>, int<em> forwardable</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> outbuf</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_fwd_tgt_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>rhost</strong> - Remote host</p>
-<p><strong>[in]</strong> <strong>client</strong> - Client principal of TGT</p>
-<p><strong>[in]</strong> <strong>server</strong> - Principal of server to receive TGT</p>
-<p><strong>[in]</strong> <strong>cc</strong> - Credential cache handle (NULL to use default)</p>
-<p><strong>[in]</strong> <strong>forwardable</strong> - Whether TGT should be forwardable</p>
-<p class="last"><strong>[out]</strong> <strong>outbuf</strong> - KRB-CRED message</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>ENOMEM Insufficient memory</li>
-<li>KRB5_PRINC_NOMATCH Requested principal and ticket do not match</li>
-<li>KRB5_NO_TKT_SUPPLIED Request did not supply a ticket</li>
-<li>KRB5_CC_BADNAME Credential cache name or principal name malformed</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Get a TGT for use at the remote host <em>rhost</em> and format it into a KRB-CRED message. If <em>rhost</em> is NULL and <em>server</em> is of type <a class="reference internal" href="../macros/KRB5_NT_SRV_HST.html#KRB5_NT_SRV_HST" title="KRB5_NT_SRV_HST"><code class="xref py py-data docutils literal"><span class="pre">KRB5_NT_SRV_HST</span></code></a> , the second component of <em>server</em> will be used.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_principal.html" title="krb5_free_principal - Free the storage assigned to a principal."
- >previous</a> |
- <a href="krb5_get_default_realm.html" title="krb5_get_default_realm - Retrieve the default realm."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_credentials - Get an additional ticket. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_fallback_host_realm" href="krb5_get_fallback_host_realm.html" />
- <link rel="prev" title="krb5_get_host_realm - Get the Kerberos realm names for a host." href="krb5_get_host_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_host_realm.html" title="krb5_get_host_realm - Get the Kerberos realm names for a host."
- accesskey="P">previous</a> |
- <a href="krb5_get_fallback_host_realm.html" title="krb5_get_fallback_host_realm"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_credentials - Get an additional ticket.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-credentials-get-an-additional-ticket">
-<h1>krb5_get_credentials - Get an additional ticket.<a class="headerlink" href="#krb5-get-credentials-get-an-additional-ticket" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_credentials">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_credentials</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> options</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> in_creds</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> **<em> out_creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_credentials" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>options</strong> - Options</p>
-<p><strong>[in]</strong> <strong>ccache</strong> - Credential cache handle</p>
-<p><strong>[in]</strong> <strong>in_creds</strong> - Input credentials</p>
-<p class="last"><strong>[out]</strong> <strong>out_creds</strong> - Output updated credentials</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <em>ccache</em> or a TGS exchange to get a service ticket matching <em>in_creds</em> .</p>
-<p>Valid values for <em>options</em> are:</p>
-<blockquote>
-<div><blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_GC_CACHED.html#KRB5_GC_CACHED" title="KRB5_GC_CACHED"><code class="xref py py-data docutils literal"><span class="pre">KRB5_GC_CACHED</span></code></a> Search only credential cache for the ticket</li>
-<li><a class="reference internal" href="../macros/KRB5_GC_USER_USER.html#KRB5_GC_USER_USER" title="KRB5_GC_USER_USER"><code class="xref py py-data docutils literal"><span class="pre">KRB5_GC_USER_USER</span></code></a> Return a user to user authentication ticket</li>
-</ul>
-</div></blockquote>
-<p><em>in_creds</em> must be non-null. <em>in_creds->client</em> and <em>in_creds->server</em> must be filled in to specify the client and the server respectively. If any authorization data needs to be requested for the service ticket (such as restrictions on how the ticket can be used), specify it in <em>in_creds->authdata</em> ; otherwise set <em>in_creds->authdata</em> to NULL. The session key type is specified in <em>in_creds->keyblock.enctype</em> , if it is nonzero.</p>
-</div></blockquote>
-<p>The expiration date is specified in <em>in_creds->times.endtime</em> . The KDC may return tickets with an earlier expiration date. If <em>in_creds->times.endtime</em> is set to 0, the latest possible expiration date will be requested.</p>
-<p>Any returned ticket and intermediate ticket-granting tickets are stored in <em>ccache</em> .</p>
-<p>Use <a class="reference internal" href="krb5_free_creds.html#c.krb5_free_creds" title="krb5_free_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_creds()</span></code></a> to free <em>out_creds</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_credentials - Get an additional ticket.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_host_realm.html" title="krb5_get_host_realm - Get the Kerberos realm names for a host."
- >previous</a> |
- <a href="krb5_get_fallback_host_realm.html" title="krb5_get_fallback_host_realm"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_credentials - Get an additional ticket.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_credentials_renew — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_credentials_validate" href="krb5_get_credentials_validate.html" />
- <link rel="prev" title="krb5_cc_gen_new" href="krb5_cc_gen_new.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_gen_new.html" title="krb5_cc_gen_new"
- accesskey="P">previous</a> |
- <a href="krb5_get_credentials_validate.html" title="krb5_get_credentials_validate"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_credentials_renew">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-credentials-renew">
-<h1>krb5_get_credentials_renew<a class="headerlink" href="#krb5-get-credentials-renew" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_credentials_renew">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_credentials_renew</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> options</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> in_creds</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> **<em> out_creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_credentials_renew" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>options</strong></p>
-<p><strong>ccache</strong></p>
-<p><strong>in_creds</strong></p>
-<p class="last"><strong>out_creds</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_get_renewed_creds.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_credentials_renew</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_gen_new.html" title="krb5_cc_gen_new"
- >previous</a> |
- <a href="krb5_get_credentials_validate.html" title="krb5_get_credentials_validate"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_credentials_renew">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_credentials_validate — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_in_tkt_with_password" href="krb5_get_in_tkt_with_password.html" />
- <link rel="prev" title="krb5_get_credentials_renew" href="krb5_get_credentials_renew.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_credentials_renew.html" title="krb5_get_credentials_renew"
- accesskey="P">previous</a> |
- <a href="krb5_get_in_tkt_with_password.html" title="krb5_get_in_tkt_with_password"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_credentials_validate">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-credentials-validate">
-<h1>krb5_get_credentials_validate<a class="headerlink" href="#krb5-get-credentials-validate" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_credentials_validate">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_credentials_validate</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> options</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> in_creds</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> **<em> out_creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_credentials_validate" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>options</strong></p>
-<p><strong>ccache</strong></p>
-<p><strong>in_creds</strong></p>
-<p class="last"><strong>out_creds</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_get_validated_creds.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_credentials_validate</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_credentials_renew.html" title="krb5_get_credentials_renew"
- >previous</a> |
- <a href="krb5_get_in_tkt_with_password.html" title="krb5_get_in_tkt_with_password"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_credentials_validate">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_default_realm - Retrieve the default realm. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_error_message - Get the (possibly extended) error message for a code." href="krb5_get_error_message.html" />
- <link rel="prev" title="krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message." href="krb5_fwd_tgt_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_fwd_tgt_creds.html" title="krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message."
- accesskey="P">previous</a> |
- <a href="krb5_get_error_message.html" title="krb5_get_error_message - Get the (possibly extended) error message for a code."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_default_realm - Retrieve the default realm.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-default-realm-retrieve-the-default-realm">
-<h1>krb5_get_default_realm - Retrieve the default realm.<a class="headerlink" href="#krb5-get-default-realm-retrieve-the-default-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_default_realm">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_default_realm</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, char **<em> lrealm</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_default_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>lrealm</strong> - Default realm name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Retrieves the default realm to be used if no user-specified realm is available.</p>
-<p>Use <a class="reference internal" href="krb5_free_default_realm.html#c.krb5_free_default_realm" title="krb5_free_default_realm"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_default_realm()</span></code></a> to free <em>lrealm</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_default_realm - Retrieve the default realm.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_fwd_tgt_creds.html" title="krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message."
- >previous</a> |
- <a href="krb5_get_error_message.html" title="krb5_get_error_message - Get the (possibly extended) error message for a code."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_default_realm - Retrieve the default realm.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_error_message - Get the (possibly extended) error message for a code. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_host_realm - Get the Kerberos realm names for a host." href="krb5_get_host_realm.html" />
- <link rel="prev" title="krb5_get_default_realm - Retrieve the default realm." href="krb5_get_default_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_default_realm.html" title="krb5_get_default_realm - Retrieve the default realm."
- accesskey="P">previous</a> |
- <a href="krb5_get_host_realm.html" title="krb5_get_host_realm - Get the Kerberos realm names for a host."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_error_message - Get the (possibly extended) error message for a code.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-error-message-get-the-possibly-extended-error-message-for-a-code">
-<h1>krb5_get_error_message - Get the (possibly extended) error message for a code.<a class="headerlink" href="#krb5-get-error-message-get-the-possibly-extended-error-message-for-a-code" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_error_message">
-const char * <code class="descname">krb5_get_error_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a><em> code</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_error_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>code</strong> - Error code</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>The behavior of <a class="reference internal" href="#c.krb5_get_error_message" title="krb5_get_error_message"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_error_message()</span></code></a> is only defined the first time it is called after a failed call to a krb5 function using the same context, and only when the error code passed in is the same as that returned by the krb5 function.</p>
-<p>This function never returns NULL, so its result may be used unconditionally as a C string.</p>
-<p>The string returned by this function must be freed using <a class="reference internal" href="krb5_free_error_message.html#c.krb5_free_error_message" title="krb5_free_error_message"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_error_message()</span></code></a></p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Future versions may return the same string for the second and following calls.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_error_message - Get the (possibly extended) error message for a code.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_default_realm.html" title="krb5_get_default_realm - Retrieve the default realm."
- >previous</a> |
- <a href="krb5_get_host_realm.html" title="krb5_get_host_realm - Get the Kerberos realm names for a host."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_error_message - Get the (possibly extended) error message for a code.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys." href="krb5_get_permitted_enctypes.html" />
- <link rel="prev" title="krb5_free_unparsed_name - Free a string representation of a principal." href="krb5_free_unparsed_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_unparsed_name.html" title="krb5_free_unparsed_name - Free a string representation of a principal."
- accesskey="P">previous</a> |
- <a href="krb5_get_permitted_enctypes.html" title="krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-etype-info-retrieve-enctype-salt-and-s2kparams-from-kdc">
-<h1>krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC.<a class="headerlink" href="#krb5-get-etype-info-retrieve-enctype-salt-and-s2kparams-from-kdc" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_etype_info">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_etype_info</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> principal</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> *<em> enctype_out</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> salt_out</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> s2kparams_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_etype_info" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Principal whose information is requested</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Initial credential options</p>
-<p><strong>[out]</strong> <strong>enctype_out</strong> - The enctype chosen by KDC</p>
-<p><strong>[out]</strong> <strong>salt_out</strong> - Salt returned from KDC</p>
-<p class="last"><strong>[out]</strong> <strong>s2kparams_out</strong> - String-to-key parameters returned from KDC</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>A Kerberos error code</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Send an initial ticket request for <em>principal</em> and extract the encryption type, salt type, and string-to-key parameters from the KDC response. If the KDC provides no etype-info, set <em>enctype_out</em> to <strong>ENCTYPE_NULL</strong> and set <em>salt_out</em> and <em>s2kparams_out</em> to empty. If the KDC etype-info provides no salt, compute the default salt and place it in <em>salt_out</em> . If the KDC etype-info provides no string-to-key parameters, set <em>s2kparams_out</em> to empty.</p>
-<blockquote>
-<div><em>opt</em> may be used to specify options which affect the initial request, such as request encryption types or a FAST armor cache (see <a class="reference internal" href="krb5_get_init_creds_opt_set_etype_list.html#c.krb5_get_init_creds_opt_set_etype_list" title="krb5_get_init_creds_opt_set_etype_list"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_set_etype_list()</span></code></a> and <a class="reference internal" href="krb5_get_init_creds_opt_set_fast_ccache_name.html#c.krb5_get_init_creds_opt_set_fast_ccache_name" title="krb5_get_init_creds_opt_set_fast_ccache_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_set_fast_ccache_name()</span></code></a> ).</div></blockquote>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>salt_out</em> and <em>s2kparams_out</em> when they are no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.17</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_unparsed_name.html" title="krb5_free_unparsed_name - Free a string representation of a principal."
- >previous</a> |
- <a href="krb5_get_permitted_enctypes.html" title="krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_fallback_host_realm — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_keytab - Get initial credentials using a key table." href="krb5_get_init_creds_keytab.html" />
- <link rel="prev" title="krb5_get_credentials - Get an additional ticket." href="krb5_get_credentials.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_credentials.html" title="krb5_get_credentials - Get an additional ticket."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_keytab.html" title="krb5_get_init_creds_keytab - Get initial credentials using a key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_fallback_host_realm">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-fallback-host-realm">
-<h1>krb5_get_fallback_host_realm<a class="headerlink" href="#krb5-get-fallback-host-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_fallback_host_realm">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_fallback_host_realm</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> hdata</em>, char ***<em> realmsp</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_fallback_host_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>hdata</strong> - Host name (or NULL)</p>
-<p class="last"><strong>[out]</strong> <strong>realmsp</strong> - Null-terminated list of realm names</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Fill in <em>realmsp</em> with a pointer to a null-terminated list of realm names obtained through heuristics or insecure resolution methods which have lower priority than KDC referrals.</p>
-<p>If <em>host</em> is NULL, the local host’s realms are determined.</p>
-<p>Use <a class="reference internal" href="krb5_free_host_realm.html#c.krb5_free_host_realm" title="krb5_free_host_realm"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_host_realm()</span></code></a> to release <em>realmsp</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_fallback_host_realm</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_credentials.html" title="krb5_get_credentials - Get an additional ticket."
- >previous</a> |
- <a href="krb5_get_init_creds_keytab.html" title="krb5_get_init_creds_keytab - Get initial credentials using a key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_fallback_host_realm">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_host_realm - Get the Kerberos realm names for a host. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_credentials - Get an additional ticket." href="krb5_get_credentials.html" />
- <link rel="prev" title="krb5_get_error_message - Get the (possibly extended) error message for a code." href="krb5_get_error_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_error_message.html" title="krb5_get_error_message - Get the (possibly extended) error message for a code."
- accesskey="P">previous</a> |
- <a href="krb5_get_credentials.html" title="krb5_get_credentials - Get an additional ticket."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_host_realm - Get the Kerberos realm names for a host.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-host-realm-get-the-kerberos-realm-names-for-a-host">
-<h1>krb5_get_host_realm - Get the Kerberos realm names for a host.<a class="headerlink" href="#krb5-get-host-realm-get-the-kerberos-realm-names-for-a-host" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_host_realm">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_host_realm</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> host</em>, char ***<em> realmsp</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_host_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>host</strong> - Host name (or NULL)</p>
-<p class="last"><strong>[out]</strong> <strong>realmsp</strong> - Null-terminated list of realm names</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>ENOMEM Insufficient memory</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Fill in <em>realmsp</em> with a pointer to a null-terminated list of realm names. If there are no known realms for the host, a list containing the referral (empty) realm is returned.</p>
-<p>If <em>host</em> is NULL, the local host’s realms are determined.</p>
-<p>Use <a class="reference internal" href="krb5_free_host_realm.html#c.krb5_free_host_realm" title="krb5_free_host_realm"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_host_realm()</span></code></a> to release <em>realmsp</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_host_realm - Get the Kerberos realm names for a host.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_error_message.html" title="krb5_get_error_message - Get the (possibly extended) error message for a code."
- >previous</a> |
- <a href="krb5_get_credentials.html" title="krb5_get_credentials - Get an additional ticket."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_host_realm - Get the Kerberos realm names for a host.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_in_tkt_with_keytab — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_init" href="krb5_get_init_creds_opt_init.html" />
- <link rel="prev" title="krb5_get_in_tkt_with_skey" href="krb5_get_in_tkt_with_skey.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_in_tkt_with_skey.html" title="krb5_get_in_tkt_with_skey"
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_init.html" title="krb5_get_init_creds_opt_init"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_in_tkt_with_keytab">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-in-tkt-with-keytab">
-<h1>krb5_get_in_tkt_with_keytab<a class="headerlink" href="#krb5-get-in-tkt-with-keytab" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_in_tkt_with_keytab">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_in_tkt_with_keytab</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> options</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *const *<em> addrs</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> *<em> ktypes</em>, <a class="reference internal" href="../types/krb5_preauthtype.html#c.krb5_preauthtype" title="krb5_preauthtype">krb5_preauthtype</a> *<em> pre_auth_types</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> arg_keytab</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, <a class="reference internal" href="../types/krb5_kdc_rep.html#c.krb5_kdc_rep" title="krb5_kdc_rep">krb5_kdc_rep</a> **<em> ret_as_reply</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_in_tkt_with_keytab" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>options</strong></p>
-<p><strong>addrs</strong></p>
-<p><strong>ktypes</strong></p>
-<p><strong>pre_auth_types</strong></p>
-<p><strong>arg_keytab</strong></p>
-<p><strong>ccache</strong></p>
-<p><strong>creds</strong></p>
-<p class="last"><strong>ret_as_reply</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_get_init_creds_keytab() .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_in_tkt_with_keytab</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_in_tkt_with_skey.html" title="krb5_get_in_tkt_with_skey"
- >previous</a> |
- <a href="krb5_get_init_creds_opt_init.html" title="krb5_get_init_creds_opt_init"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_in_tkt_with_keytab">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_in_tkt_with_password — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_in_tkt_with_skey" href="krb5_get_in_tkt_with_skey.html" />
- <link rel="prev" title="krb5_get_credentials_validate" href="krb5_get_credentials_validate.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_credentials_validate.html" title="krb5_get_credentials_validate"
- accesskey="P">previous</a> |
- <a href="krb5_get_in_tkt_with_skey.html" title="krb5_get_in_tkt_with_skey"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_in_tkt_with_password">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-in-tkt-with-password">
-<h1>krb5_get_in_tkt_with_password<a class="headerlink" href="#krb5-get-in-tkt-with-password" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_in_tkt_with_password">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_in_tkt_with_password</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> options</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *const *<em> addrs</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> *<em> ktypes</em>, <a class="reference internal" href="../types/krb5_preauthtype.html#c.krb5_preauthtype" title="krb5_preauthtype">krb5_preauthtype</a> *<em> pre_auth_types</em>, const char *<em> password</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, <a class="reference internal" href="../types/krb5_kdc_rep.html#c.krb5_kdc_rep" title="krb5_kdc_rep">krb5_kdc_rep</a> **<em> ret_as_reply</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_in_tkt_with_password" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>options</strong></p>
-<p><strong>addrs</strong></p>
-<p><strong>ktypes</strong></p>
-<p><strong>pre_auth_types</strong></p>
-<p><strong>password</strong></p>
-<p><strong>ccache</strong></p>
-<p><strong>creds</strong></p>
-<p class="last"><strong>ret_as_reply</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_get_init_creds_password() .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_in_tkt_with_password</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_credentials_validate.html" title="krb5_get_credentials_validate"
- >previous</a> |
- <a href="krb5_get_in_tkt_with_skey.html" title="krb5_get_in_tkt_with_skey"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_in_tkt_with_password">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_in_tkt_with_skey — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_in_tkt_with_keytab" href="krb5_get_in_tkt_with_keytab.html" />
- <link rel="prev" title="krb5_get_in_tkt_with_password" href="krb5_get_in_tkt_with_password.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_in_tkt_with_password.html" title="krb5_get_in_tkt_with_password"
- accesskey="P">previous</a> |
- <a href="krb5_get_in_tkt_with_keytab.html" title="krb5_get_in_tkt_with_keytab"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_in_tkt_with_skey">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-in-tkt-with-skey">
-<h1>krb5_get_in_tkt_with_skey<a class="headerlink" href="#krb5-get-in-tkt-with-skey" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_in_tkt_with_skey">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_in_tkt_with_skey</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> options</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> *const *<em> addrs</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> *<em> ktypes</em>, <a class="reference internal" href="../types/krb5_preauthtype.html#c.krb5_preauthtype" title="krb5_preauthtype">krb5_preauthtype</a> *<em> pre_auth_types</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, <a class="reference internal" href="../types/krb5_kdc_rep.html#c.krb5_kdc_rep" title="krb5_kdc_rep">krb5_kdc_rep</a> **<em> ret_as_reply</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_in_tkt_with_skey" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>options</strong></p>
-<p><strong>addrs</strong></p>
-<p><strong>ktypes</strong></p>
-<p><strong>pre_auth_types</strong></p>
-<p><strong>key</strong></p>
-<p><strong>ccache</strong></p>
-<p><strong>creds</strong></p>
-<p class="last"><strong>ret_as_reply</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_get_init_creds().</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_in_tkt_with_skey</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_in_tkt_with_password.html" title="krb5_get_in_tkt_with_password"
- >previous</a> |
- <a href="krb5_get_in_tkt_with_keytab.html" title="krb5_get_in_tkt_with_keytab"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_in_tkt_with_skey">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_keytab - Get initial credentials using a key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure." href="krb5_get_init_creds_opt_alloc.html" />
- <link rel="prev" title="krb5_get_fallback_host_realm" href="krb5_get_fallback_host_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_fallback_host_realm.html" title="krb5_get_fallback_host_realm"
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_alloc.html" title="krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_keytab - Get initial credentials using a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-keytab-get-initial-credentials-using-a-key-table">
-<h1>krb5_get_init_creds_keytab - Get initial credentials using a key table.<a class="headerlink" href="#krb5-get-init-creds-keytab-get-initial-credentials-using-a-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_keytab">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_keytab</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> client</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> arg_keytab</em>, <a class="reference internal" href="../types/krb5_deltat.html#c.krb5_deltat" title="krb5_deltat">krb5_deltat</a><em> start_time</em>, const char *<em> in_tkt_service</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> k5_gic_options</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_keytab" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[out]</strong> <strong>creds</strong> - New credentials</p>
-<p><strong>[in]</strong> <strong>client</strong> - Client principal</p>
-<p><strong>[in]</strong> <strong>arg_keytab</strong> - Key table handle</p>
-<p><strong>[in]</strong> <strong>start_time</strong> - Time when ticket becomes valid (0 for now)</p>
-<p><strong>[in]</strong> <strong>in_tkt_service</strong> - Service name of initial credentials (or NULL)</p>
-<p class="last"><strong>[in]</strong> <strong>k5_gic_options</strong> - Initial credential options</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function requests KDC for an initial credentials for <em>client</em> using a client key stored in <em>arg_keytab</em> . If <em>in_tkt_service</em> is specified, it is parsed as a principal name (with the realm ignored) and used as the service principal for the request; otherwise the ticket-granting service is used.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_keytab - Get initial credentials using a key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_fallback_host_realm.html" title="krb5_get_fallback_host_realm"
- >previous</a> |
- <a href="krb5_get_init_creds_opt_alloc.html" title="krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_keytab - Get initial credentials using a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_free - Free initial credential options." href="krb5_get_init_creds_opt_free.html" />
- <link rel="prev" title="krb5_get_init_creds_keytab - Get initial credentials using a key table." href="krb5_get_init_creds_keytab.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_keytab.html" title="krb5_get_init_creds_keytab - Get initial credentials using a key table."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_free.html" title="krb5_get_init_creds_opt_free - Free initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-alloc-allocate-a-new-initial-credential-options-structure">
-<h1>krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure.<a class="headerlink" href="#krb5-get-init-creds-opt-alloc-allocate-a-new-initial-credential-options-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_alloc">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_alloc</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> **<em> opt</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_alloc" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>opt</strong> - New options structure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 - Success; Kerberos errors otherwise.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is the preferred way to create an options structure for getting initial credentials, and is required to make use of certain options. Use <a class="reference internal" href="krb5_get_init_creds_opt_free.html#c.krb5_get_init_creds_opt_free" title="krb5_get_init_creds_opt_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_free()</span></code></a> to free <em>opt</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_keytab.html" title="krb5_get_init_creds_keytab - Get initial credentials using a key table."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_free.html" title="krb5_get_init_creds_opt_free - Free initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_free - Free initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options." href="krb5_get_init_creds_opt_get_fast_flags.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure." href="krb5_get_init_creds_opt_alloc.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_alloc.html" title="krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_get_fast_flags.html" title="krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_free - Free initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-free-free-initial-credential-options">
-<h1>krb5_get_init_creds_opt_free - Free initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-free-free-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_free">
-void <code class="descname">krb5_get_init_creds_opt_free</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_free" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>opt</strong> - Options structure to free</p>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_get_init_creds_opt_alloc.html#c.krb5_get_init_creds_opt_alloc" title="krb5_get_init_creds_opt_alloc"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_alloc()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_free - Free initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_alloc.html" title="krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_get_fast_flags.html" title="krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_free - Free initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options." href="krb5_get_init_creds_opt_set_address_list.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_free - Free initial credential options." href="krb5_get_init_creds_opt_free.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_free.html" title="krb5_get_init_creds_opt_free - Free initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_address_list.html" title="krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-get-fast-flags-retrieve-fast-flags-from-initial-credential-options">
-<h1>krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-get-fast-flags-retrieve-fast-flags-from-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_get_fast_flags">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_get_fast_flags</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> *<em> out_flags</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_get_fast_flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Options</p>
-<p class="last"><strong>[out]</strong> <strong>out_flags</strong> - FAST flags</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 - Success; Kerberos errors otherwise.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_free.html" title="krb5_get_init_creds_opt_free - Free initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_address_list.html" title="krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_init — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_random_key" href="krb5_init_random_key.html" />
- <link rel="prev" title="krb5_get_in_tkt_with_keytab" href="krb5_get_in_tkt_with_keytab.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_in_tkt_with_keytab.html" title="krb5_get_in_tkt_with_keytab"
- accesskey="P">previous</a> |
- <a href="krb5_init_random_key.html" title="krb5_init_random_key"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_init">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-init">
-<h1>krb5_get_init_creds_opt_init<a class="headerlink" href="#krb5-get-init-creds-opt-init" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_init">
-void <code class="descname">krb5_get_init_creds_opt_init</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_init" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>opt</strong></td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Use krb5_get_init_creds_opt_alloc() instead.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_init</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_in_tkt_with_keytab.html" title="krb5_get_in_tkt_with_keytab"
- >previous</a> |
- <a href="krb5_init_random_key.html" title="krb5_init_random_key"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_init">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options." href="krb5_get_init_creds_opt_set_anonymous.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options." href="krb5_get_init_creds_opt_get_fast_flags.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_get_fast_flags.html" title="krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_anonymous.html" title="krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-address-list-set-address-restrictions-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-address-list-set-address-restrictions-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_address_list">
-void <code class="descname">krb5_get_init_creds_opt_set_address_list</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> **<em> addresses</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_address_list" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p class="last"><strong>[in]</strong> <strong>addresses</strong> - Null-terminated array of addresses</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_get_fast_flags.html" title="krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_anonymous.html" title="krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options." href="krb5_get_init_creds_opt_set_canonicalize.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options." href="krb5_get_init_creds_opt_set_address_list.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_address_list.html" title="krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-anonymous-set-or-unset-the-anonymous-flag-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-anonymous-set-or-unset-the-anonymous-flag-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_anonymous">
-void <code class="descname">krb5_get_init_creds_opt_set_anonymous</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, int<em> anonymous</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_anonymous" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p class="last"><strong>[in]</strong> <strong>anonymous</strong> - Whether to make an anonymous request</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function may be used to request anonymous credentials from the KDC by setting <em>anonymous</em> to non-zero. Note that anonymous credentials are only a request; clients must verify that credentials are anonymous if that is a requirement.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_address_list.html" title="krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options." href="krb5_get_init_creds_opt_set_change_password_prompt.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options." href="krb5_get_init_creds_opt_set_anonymous.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_anonymous.html" title="krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_change_password_prompt.html" title="krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-canonicalize-set-or-unset-the-canonicalize-flag-in-initialcredential-options">
-<h1>krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-canonicalize-set-or-unset-the-canonicalize-flag-in-initialcredential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_canonicalize">
-void <code class="descname">krb5_get_init_creds_opt_set_canonicalize</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, int<em> canonicalize</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_canonicalize" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p class="last"><strong>[in]</strong> <strong>canonicalize</strong> - Whether to canonicalize client principal</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_anonymous.html" title="krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_change_password_prompt.html" title="krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options." href="krb5_get_init_creds_opt_set_etype_list.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options." href="krb5_get_init_creds_opt_set_canonicalize.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_etype_list.html" title="krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-change-password-prompt-set-or-unset-change-password-prompt-flag-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-change-password-prompt-set-or-unset-change-password-prompt-flag-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_change_password_prompt">
-void <code class="descname">krb5_get_init_creds_opt_set_change_password_prompt</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, int<em> prompt</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_change_password_prompt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p class="last"><strong>[in]</strong> <strong>prompt</strong> - Whether to prompt to change password</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This flag is on by default. It controls whether <a class="reference internal" href="krb5_get_init_creds_password.html#c.krb5_get_init_creds_password" title="krb5_get_init_creds_password"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_password()</span></code></a> will react to an expired-password error by prompting for a new password and attempting to change the old one.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_canonicalize.html" title="krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_etype_list.html" title="krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options." href="krb5_get_init_creds_opt_set_expire_callback.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options." href="krb5_get_init_creds_opt_set_change_password_prompt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_change_password_prompt.html" title="krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_expire_callback.html" title="krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-etype-list-set-allowable-encryption-types-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-etype-list-set-allowable-encryption-types-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_etype_list">
-void <code class="descname">krb5_get_init_creds_opt_set_etype_list</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> *<em> etype_list</em>, int<em> etype_list_length</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_etype_list" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p><strong>[in]</strong> <strong>etype_list</strong> - Array of encryption types</p>
-<p class="last"><strong>[in]</strong> <strong>etype_list_length</strong> - Length of <em>etype_list</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_change_password_prompt.html" title="krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_expire_callback.html" title="krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options." href="krb5_get_init_creds_opt_set_fast_ccache.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options." href="krb5_get_init_creds_opt_set_etype_list.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_etype_list.html" title="krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_fast_ccache.html" title="krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-expire-callback-set-an-expiration-callback-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-expire-callback-set-an-expiration-callback-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_expire_callback">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_set_expire_callback</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_expire_callback_func.html#c.krb5_expire_callback_func" title="krb5_expire_callback_func">krb5_expire_callback_func</a><em> cb</em>, void *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_expire_callback" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p><strong>[in]</strong> <strong>cb</strong> - Callback function</p>
-<p class="last"><strong>[in]</strong> <strong>data</strong> - Callback argument</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Set a callback to receive password and account expiration times.</p>
-<blockquote>
-<div><em>cb</em> will be invoked if and only if credentials are successfully acquired. The callback will receive the <em>context</em> from the calling function and the <em>data</em> argument supplied with this API. The remaining arguments should be interpreted as follows:</div></blockquote>
-<p>If <em>is_last_req</em> is true, then the KDC reply contained last-req entries which unambiguously indicated the password expiration, account expiration, or both. (If either value was not present, the corresponding argument will be 0.) Furthermore, a non-zero <em>password_expiration</em> should be taken as a suggestion from the KDC that a warning be displayed.</p>
-<p>If <em>is_last_req</em> is false, then <em>account_expiration</em> will be 0 and <em>password_expiration</em> will contain the expiration time of either the password or account, or 0 if no expiration time was indicated in the KDC reply. The callback should independently decide whether to display a password expiration warning.</p>
-<p>Note that <em>cb</em> may be invoked even if credentials are being acquired for the kadmin/changepw service in order to change the password. It is the caller’s responsibility to avoid displaying a password expiry warning in this case.</p>
-<div class="admonition warning">
-<p class="first admonition-title">Warning</p>
-<p class="last">Setting an expire callback with this API will cause <a class="reference internal" href="krb5_get_init_creds_password.html#c.krb5_get_init_creds_password" title="krb5_get_init_creds_password"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_password()</span></code></a> not to send password expiry warnings to the prompter, as it ordinarily may.</p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_etype_list.html" title="krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_fast_ccache.html" title="krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options." href="krb5_get_init_creds_opt_set_fast_ccache_name.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options." href="krb5_get_init_creds_opt_set_expire_callback.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_expire_callback.html" title="krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_fast_ccache_name.html" title="krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-fast-ccache-set-fast-armor-cache-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-fast-ccache-set-fast-armor-cache-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_fast_ccache">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_set_fast_ccache</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_fast_ccache" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Options</p>
-<p class="last"><strong>[in]</strong> <strong>ccache</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is similar to <a class="reference internal" href="krb5_get_init_creds_opt_set_fast_ccache_name.html#c.krb5_get_init_creds_opt_set_fast_ccache_name" title="krb5_get_init_creds_opt_set_fast_ccache_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_set_fast_ccache_name()</span></code></a> , but uses a credential cache handle instead of a name.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_expire_callback.html" title="krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_fast_ccache_name.html" title="krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options." href="krb5_get_init_creds_opt_set_fast_flags.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options." href="krb5_get_init_creds_opt_set_fast_ccache.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_fast_ccache.html" title="krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_fast_flags.html" title="krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-fast-ccache-name-set-location-of-fast-armor-ccache-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-fast-ccache-name-set-location-of-fast-armor-ccache-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_fast_ccache_name">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_set_fast_ccache_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, const char *<em> fast_ccache_name</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_fast_ccache_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Options</p>
-<p class="last"><strong>[in]</strong> <strong>fast_ccache_name</strong> - Credential cache name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Sets the location of a credential cache containing an armor ticket to protect an initial credential exchange using the FAST protocol extension.</p>
-<p>In version 1.7, setting an armor ccache requires that FAST be used for the exchange. In version 1.8 or later, setting the armor ccache causes FAST to be used if the KDC supports it; <a class="reference internal" href="krb5_get_init_creds_opt_set_fast_flags.html#c.krb5_get_init_creds_opt_set_fast_flags" title="krb5_get_init_creds_opt_set_fast_flags"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_set_fast_flags()</span></code></a> must be used to require that FAST be used.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_fast_ccache.html" title="krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_fast_flags.html" title="krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options." href="krb5_get_init_creds_opt_set_forwardable.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options." href="krb5_get_init_creds_opt_set_fast_ccache_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_fast_ccache_name.html" title="krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_forwardable.html" title="krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-fast-flags-set-fast-flags-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-fast-flags-set-fast-flags-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_fast_flags">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_set_fast_flags</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> flags</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_fast_flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Options</p>
-<p class="last"><strong>[in]</strong> <strong>flags</strong> - FAST flags</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 - Success; Kerberos errors otherwise.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>The following flag values are valid:</p>
-<blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_FAST_REQUIRED.html#KRB5_FAST_REQUIRED" title="KRB5_FAST_REQUIRED"><code class="xref py py-data docutils literal"><span class="pre">KRB5_FAST_REQUIRED</span></code></a> - Require FAST to be used</li>
-</ul>
-</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_fast_ccache_name.html" title="krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_forwardable.html" title="krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options." href="krb5_get_init_creds_opt_set_in_ccache.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options." href="krb5_get_init_creds_opt_set_fast_flags.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_fast_flags.html" title="krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_in_ccache.html" title="krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-forwardable-set-or-unset-the-forwardable-flag-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-forwardable-set-or-unset-the-forwardable-flag-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_forwardable">
-void <code class="descname">krb5_get_init_creds_opt_set_forwardable</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, int<em> forwardable</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_forwardable" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p class="last"><strong>[in]</strong> <strong>forwardable</strong> - Whether credentials should be forwardable</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_fast_flags.html" title="krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_in_ccache.html" title="krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options." href="krb5_get_init_creds_opt_set_out_ccache.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options." href="krb5_get_init_creds_opt_set_forwardable.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_forwardable.html" title="krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_out_ccache.html" title="krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-in-ccache-set-an-input-credential-cache-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-in-ccache-set-an-input-credential-cache-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_in_ccache">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_set_in_ccache</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_in_ccache" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Options</p>
-<p class="last"><strong>[in]</strong> <strong>ccache</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>If an input credential cache is set, then the krb5_get_init_creds family of APIs will read settings from it. Setting an input ccache is desirable when the application wishes to perform authentication in the same way (using the same preauthentication mechanisms, and making the same non-security- sensitive choices) as the previous authentication attempt, which stored information in the passed-in ccache.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_forwardable.html" title="krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_out_ccache.html" title="krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options." href="krb5_get_init_creds_opt_set_pa.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options." href="krb5_get_init_creds_opt_set_in_ccache.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_in_ccache.html" title="krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_pa.html" title="krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-out-ccache-set-an-output-credential-cache-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-out-ccache-set-an-output-credential-cache-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_out_ccache">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_set_out_ccache</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_out_ccache" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Options</p>
-<p class="last"><strong>[in]</strong> <strong>ccache</strong> - Credential cache handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>If an output credential cache is set, then the krb5_get_init_creds family of APIs will write credentials to it. Setting an output ccache is desirable both because it simplifies calling code and because it permits the krb5_get_init_creds APIs to write out configuration information about the realm to the ccache.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_in_ccache.html" title="krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_pa.html" title="krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket." href="krb5_get_init_creds_opt_set_pac_request.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options." href="krb5_get_init_creds_opt_set_out_ccache.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_out_ccache.html" title="krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_pac_request.html" title="krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-pa-supply-options-for-preauthentication-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-pa-supply-options-for-preauthentication-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_pa">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_set_pa</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, const char *<em> attr</em>, const char *<em> value</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_pa" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p><strong>[in]</strong> <strong>attr</strong> - Preauthentication option name</p>
-<p class="last"><strong>[in]</strong> <strong>value</strong> - Preauthentication option value</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function allows the caller to supply options for preauthentication. The values of <em>attr</em> and <em>value</em> are supplied to each preauthentication module available within <em>context</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_out_ccache.html" title="krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_pac_request.html" title="krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options." href="krb5_get_init_creds_opt_set_preauth_list.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options." href="krb5_get_init_creds_opt_set_pa.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_pa.html" title="krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_preauth_list.html" title="krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-pac-request-ask-the-kdc-to-include-or-not-include-a-pac-in-the-ticket">
-<h1>krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket.<a class="headerlink" href="#krb5-get-init-creds-opt-set-pac-request-ask-the-kdc-to-include-or-not-include-a-pac-in-the-ticket" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_pac_request">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_set_pac_request</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a><em> req_pac</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_pac_request" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p class="last"><strong>[in]</strong> <strong>req_pac</strong> - Whether to request a PAC or not</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>If this option is set, the AS request will include a PAC-REQUEST pa-data item explicitly asking the KDC to either include or not include a privilege attribute certificate in the ticket authorization data. By default, no request is made; typically the KDC will default to including a PAC if it supports them.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.15</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_pa.html" title="krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_preauth_list.html" title="krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options." href="krb5_get_init_creds_opt_set_proxiable.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket." href="krb5_get_init_creds_opt_set_pac_request.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_pac_request.html" title="krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_proxiable.html" title="krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-preauth-list-set-preauthentication-types-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-preauth-list-set-preauthentication-types-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_preauth_list">
-void <code class="descname">krb5_get_init_creds_opt_set_preauth_list</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_preauthtype.html#c.krb5_preauthtype" title="krb5_preauthtype">krb5_preauthtype</a> *<em> preauth_list</em>, int<em> preauth_list_length</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_preauth_list" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p><strong>[in]</strong> <strong>preauth_list</strong> - Array of preauthentication types</p>
-<p class="last"><strong>[in]</strong> <strong>preauth_list_length</strong> - Length of <em>preauth_list</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function can be used to perform optimistic preauthentication when getting initial credentials, in combination with <a class="reference internal" href="krb5_get_init_creds_opt_set_salt.html#c.krb5_get_init_creds_opt_set_salt" title="krb5_get_init_creds_opt_set_salt"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_set_salt()</span></code></a> and <a class="reference internal" href="krb5_get_init_creds_opt_set_pa.html#c.krb5_get_init_creds_opt_set_pa" title="krb5_get_init_creds_opt_set_pa"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_opt_set_pa()</span></code></a> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_pac_request.html" title="krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_proxiable.html" title="krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options." href="krb5_get_init_creds_opt_set_renew_life.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options." href="krb5_get_init_creds_opt_set_preauth_list.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_preauth_list.html" title="krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_renew_life.html" title="krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-proxiable-set-or-unset-the-proxiable-flag-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-proxiable-set-or-unset-the-proxiable-flag-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_proxiable">
-void <code class="descname">krb5_get_init_creds_opt_set_proxiable</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, int<em> proxiable</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_proxiable" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p class="last"><strong>[in]</strong> <strong>proxiable</strong> - Whether credentials should be proxiable</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_preauth_list.html" title="krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_renew_life.html" title="krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options." href="krb5_get_init_creds_opt_set_responder.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options." href="krb5_get_init_creds_opt_set_proxiable.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_proxiable.html" title="krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_responder.html" title="krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-renew-life-set-the-ticket-renewal-lifetime-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-renew-life-set-the-ticket-renewal-lifetime-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_renew_life">
-void <code class="descname">krb5_get_init_creds_opt_set_renew_life</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_deltat.html#c.krb5_deltat" title="krb5_deltat">krb5_deltat</a><em> renew_life</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_renew_life" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Pointer to <em>options</em> field</p>
-<p class="last"><strong>[in]</strong> <strong>renew_life</strong> - Ticket renewal lifetime</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_proxiable.html" title="krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_responder.html" title="krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options." href="krb5_get_init_creds_opt_set_salt.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options." href="krb5_get_init_creds_opt_set_renew_life.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_renew_life.html" title="krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_salt.html" title="krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-responder-set-the-responder-function-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-responder-set-the-responder-function-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_responder">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_opt_set_responder</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_responder_fn.html#c.krb5_responder_fn" title="krb5_responder_fn">krb5_responder_fn</a><em> responder</em>, void *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_responder" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p><strong>[in]</strong> <strong>responder</strong> - Responder function</p>
-<p class="last"><strong>[in]</strong> <strong>data</strong> - Responder data argument</p>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_renew_life.html" title="krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_salt.html" title="krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options." href="krb5_get_init_creds_opt_set_tkt_life.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options." href="krb5_get_init_creds_opt_set_responder.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_responder.html" title="krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt_set_tkt_life.html" title="krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-salt-set-salt-for-optimistic-preauthentication-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-salt-set-salt-for-optimistic-preauthentication-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_salt">
-void <code class="descname">krb5_get_init_creds_opt_set_salt</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> salt</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_salt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p class="last"><strong>[in]</strong> <strong>salt</strong> - Salt data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>When getting initial credentials with a password, a salt string it used to convert the password to a key. Normally this salt is obtained from the first KDC reply, but when performing optimistic preauthentication, the client may need to supply the salt string with this function.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_responder.html" title="krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_opt_set_tkt_life.html" title="krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_password - Get initial credentials using a password." href="krb5_get_init_creds_password.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options." href="krb5_get_init_creds_opt_set_salt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_salt.html" title="krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_password.html" title="krb5_get_init_creds_password - Get initial credentials using a password."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-set-tkt-life-set-the-ticket-lifetime-in-initial-credential-options">
-<h1>krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options.<a class="headerlink" href="#krb5-get-init-creds-opt-set-tkt-life-set-the-ticket-lifetime-in-initial-credential-options" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_opt_set_tkt_life">
-void <code class="descname">krb5_get_init_creds_opt_set_tkt_life</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> opt</em>, <a class="reference internal" href="../types/krb5_deltat.html#c.krb5_deltat" title="krb5_deltat">krb5_deltat</a><em> tkt_life</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_opt_set_tkt_life" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>opt</strong> - Options structure</p>
-<p class="last"><strong>[in]</strong> <strong>tkt_life</strong> - Ticket lifetime</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_salt.html" title="krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options."
- >previous</a> |
- <a href="krb5_get_init_creds_password.html" title="krb5_get_init_creds_password - Get initial credentials using a password."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_password - Get initial credentials using a password. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_profile - Retrieve configuration profile from the context." href="krb5_get_profile.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options." href="krb5_get_init_creds_opt_set_tkt_life.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_set_tkt_life.html" title="krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options."
- accesskey="P">previous</a> |
- <a href="krb5_get_profile.html" title="krb5_get_profile - Retrieve configuration profile from the context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_password - Get initial credentials using a password.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-password-get-initial-credentials-using-a-password">
-<h1>krb5_get_init_creds_password - Get initial credentials using a password.<a class="headerlink" href="#krb5-get-init-creds-password-get-initial-credentials-using-a-password" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_init_creds_password">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_init_creds_password</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> client</em>, const char *<em> password</em>, <a class="reference internal" href="../types/krb5_prompter_fct.html#c.krb5_prompter_fct" title="krb5_prompter_fct">krb5_prompter_fct</a><em> prompter</em>, void *<em> data</em>, <a class="reference internal" href="../types/krb5_deltat.html#c.krb5_deltat" title="krb5_deltat">krb5_deltat</a><em> start_time</em>, const char *<em> in_tkt_service</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> k5_gic_options</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_init_creds_password" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[out]</strong> <strong>creds</strong> - New credentials</p>
-<p><strong>[in]</strong> <strong>client</strong> - Client principal</p>
-<p><strong>[in]</strong> <strong>password</strong> - Password (or NULL)</p>
-<p><strong>[in]</strong> <strong>prompter</strong> - Prompter function</p>
-<p><strong>[in]</strong> <strong>data</strong> - Prompter callback data</p>
-<p><strong>[in]</strong> <strong>start_time</strong> - Time when ticket becomes valid (0 for now)</p>
-<p><strong>[in]</strong> <strong>in_tkt_service</strong> - Service name of initial credentials (or NULL)</p>
-<p class="last"><strong>[in]</strong> <strong>k5_gic_options</strong> - Initial credential options</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>EINVAL Invalid argument</li>
-<li>KRB5_KDC_UNREACH Cannot contact any KDC for requested realm</li>
-<li>KRB5_PREAUTH_FAILED Generic Pre-athentication failure</li>
-<li>KRB5_LIBOS_PWDINTR Password read interrupted</li>
-<li>KRB5_REALM_CANT_RESOLVE Cannot resolve network address for KDC in requested realm</li>
-<li>KRB5KDC_ERR_KEY_EXP Password has expired</li>
-<li>KRB5_LIBOS_BADPWDMATCH Password mismatch</li>
-<li>KRB5_CHPW_PWDNULL New password cannot be zero length</li>
-<li>KRB5_CHPW_FAIL Password change failed</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function requests KDC for an initial credentials for <em>client</em> using <em>password</em> . If <em>password</em> is NULL, a password will be prompted for using <em>prompter</em> if necessary. If <em>in_tkt_service</em> is specified, it is parsed as a principal name (with the realm ignored) and used as the service principal for the request; otherwise the ticket-granting service is used.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_password - Get initial credentials using a password.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_set_tkt_life.html" title="krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options."
- >previous</a> |
- <a href="krb5_get_profile.html" title="krb5_get_profile - Retrieve configuration profile from the context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_password - Get initial credentials using a password.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_server_rcache - Generate a replay cache object for server use and open it." href="krb5_get_server_rcache.html" />
- <link rel="prev" title="krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC." href="krb5_get_etype_info.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_etype_info.html" title="krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC."
- accesskey="P">previous</a> |
- <a href="krb5_get_server_rcache.html" title="krb5_get_server_rcache - Generate a replay cache object for server use and open it."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-permitted-enctypes-return-a-list-of-encryption-types-permitted-for-session-keys">
-<h1>krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys.<a class="headerlink" href="#krb5-get-permitted-enctypes-return-a-list-of-encryption-types-permitted-for-session-keys" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_permitted_enctypes">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_permitted_enctypes</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> **<em> ktypes</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_permitted_enctypes" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>ktypes</strong> - Zero-terminated list of encryption types</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function returns the list of encryption types permitted for session keys within <em>context</em> , as determined by configuration or by a previous call to <a class="reference internal" href="krb5_set_default_tgs_enctypes.html#c.krb5_set_default_tgs_enctypes" title="krb5_set_default_tgs_enctypes"><code class="xref c c-func docutils literal"><span class="pre">krb5_set_default_tgs_enctypes()</span></code></a> .</p>
-<p>Use <a class="reference internal" href="krb5_free_enctypes.html#c.krb5_free_enctypes" title="krb5_free_enctypes"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_enctypes()</span></code></a> to free <em>ktypes</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_etype_info.html" title="krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC."
- >previous</a> |
- <a href="krb5_get_server_rcache.html" title="krb5_get_server_rcache - Generate a replay cache object for server use and open it."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_profile - Retrieve configuration profile from the context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_prompt_types - Get prompt types array from a context." href="krb5_get_prompt_types.html" />
- <link rel="prev" title="krb5_get_init_creds_password - Get initial credentials using a password." href="krb5_get_init_creds_password.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_password.html" title="krb5_get_init_creds_password - Get initial credentials using a password."
- accesskey="P">previous</a> |
- <a href="krb5_get_prompt_types.html" title="krb5_get_prompt_types - Get prompt types array from a context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_profile - Retrieve configuration profile from the context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-profile-retrieve-configuration-profile-from-the-context">
-<h1>krb5_get_profile - Retrieve configuration profile from the context.<a class="headerlink" href="#krb5-get-profile-retrieve-configuration-profile-from-the-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_profile">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_profile</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, struct _profile_t **<em> profile</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_profile" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>profile</strong> - Pointer to data read from a configuration file</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new <em>profile</em> object that reflects profile in the supplied <em>context</em> .</p>
-<p>The <em>profile</em> object may be freed with profile_release() function. See profile.h and profile API for more details.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_profile - Retrieve configuration profile from the context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_password.html" title="krb5_get_init_creds_password - Get initial credentials using a password."
- >previous</a> |
- <a href="krb5_get_prompt_types.html" title="krb5_get_prompt_types - Get prompt types array from a context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_profile - Retrieve configuration profile from the context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_prompt_types - Get prompt types array from a context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential." href="krb5_get_renewed_creds.html" />
- <link rel="prev" title="krb5_get_profile - Retrieve configuration profile from the context." href="krb5_get_profile.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_profile.html" title="krb5_get_profile - Retrieve configuration profile from the context."
- accesskey="P">previous</a> |
- <a href="krb5_get_renewed_creds.html" title="krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_prompt_types - Get prompt types array from a context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-prompt-types-get-prompt-types-array-from-a-context">
-<h1>krb5_get_prompt_types - Get prompt types array from a context.<a class="headerlink" href="#krb5-get-prompt-types-get-prompt-types-array-from-a-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_prompt_types">
-<a class="reference internal" href="../types/krb5_prompt_type.html#c.krb5_prompt_type" title="krb5_prompt_type">krb5_prompt_type</a> * <code class="descname">krb5_get_prompt_types</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_prompt_types" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>context</strong> - Library context</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Pointer to an array of prompt types corresponding to the prompter’s prompts arguments. Each type has one of the following values: KRB5_PROMPT_TYPE_PASSWORD KRB5_PROMPT_TYPE_NEW_PASSWORD KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN KRB5_PROMPT_TYPE_PREAUTH</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_prompt_types - Get prompt types array from a context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_profile.html" title="krb5_get_profile - Retrieve configuration profile from the context."
- >previous</a> |
- <a href="krb5_get_renewed_creds.html" title="krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_prompt_types - Get prompt types array from a context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_validated_creds - Get validated credentials from the KDC." href="krb5_get_validated_creds.html" />
- <link rel="prev" title="krb5_get_prompt_types - Get prompt types array from a context." href="krb5_get_prompt_types.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_prompt_types.html" title="krb5_get_prompt_types - Get prompt types array from a context."
- accesskey="P">previous</a> |
- <a href="krb5_get_validated_creds.html" title="krb5_get_validated_creds - Get validated credentials from the KDC."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-renewed-creds-get-renewed-credential-from-kdc-using-an-existing-credential">
-<h1>krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential.<a class="headerlink" href="#krb5-get-renewed-creds-get-renewed-credential-from-kdc-using-an-existing-credential" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_renewed_creds">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_renewed_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> client</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, const char *<em> in_tkt_service</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_renewed_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[out]</strong> <strong>creds</strong> - Renewed credentials</p>
-<p><strong>[in]</strong> <strong>client</strong> - Client principal name</p>
-<p><strong>[in]</strong> <strong>ccache</strong> - Credential cache</p>
-<p class="last"><strong>[in]</strong> <strong>in_tkt_service</strong> - Server principal string (or NULL)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function gets a renewed credential using an existing one from <em>ccache</em> . If <em>in_tkt_service</em> is specified, it is parsed (with the realm part ignored) and used as the server principal of the credential; otherwise, the ticket-granting service is used.</p>
-<p>If successful, the renewed credential is placed in <em>creds</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_prompt_types.html" title="krb5_get_prompt_types - Get prompt types array from a context."
- >previous</a> |
- <a href="krb5_get_validated_creds.html" title="krb5_get_validated_creds - Get validated credentials from the KDC."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_server_rcache - Generate a replay cache object for server use and open it. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_time_offsets - Return the time offsets from the os context." href="krb5_get_time_offsets.html" />
- <link rel="prev" title="krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys." href="krb5_get_permitted_enctypes.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_permitted_enctypes.html" title="krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys."
- accesskey="P">previous</a> |
- <a href="krb5_get_time_offsets.html" title="krb5_get_time_offsets - Return the time offsets from the os context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_server_rcache - Generate a replay cache object for server use and open it.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-server-rcache-generate-a-replay-cache-object-for-server-use-and-open-it">
-<h1>krb5_get_server_rcache - Generate a replay cache object for server use and open it.<a class="headerlink" href="#krb5-get-server-rcache-generate-a-replay-cache-object-for-server-use-and-open-it" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_server_rcache">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_server_rcache</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> piece</em>, <a class="reference internal" href="../types/krb5_rcache.html#c.krb5_rcache" title="krb5_rcache">krb5_rcache</a> *<em> rcptr</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_server_rcache" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>piece</strong> - Unused (replay cache identifier)</p>
-<p class="last"><strong>[out]</strong> <strong>rcptr</strong> - Handle to an open rcache</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a handle to the default replay cache. Use krb5_rc_close() to close <em>rcptr</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">Prior to release 1.18, this function creates a handle to a different replay cache for each unique value of <em>piece</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_server_rcache - Generate a replay cache object for server use and open it.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_permitted_enctypes.html" title="krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys."
- >previous</a> |
- <a href="krb5_get_time_offsets.html" title="krb5_get_time_offsets - Return the time offsets from the os context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_server_rcache - Generate a replay cache object for server use and open it.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_time_offsets - Return the time offsets from the os context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_context_profile - Create a krb5 library context using a specified profile." href="krb5_init_context_profile.html" />
- <link rel="prev" title="krb5_get_server_rcache - Generate a replay cache object for server use and open it." href="krb5_get_server_rcache.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_server_rcache.html" title="krb5_get_server_rcache - Generate a replay cache object for server use and open it."
- accesskey="P">previous</a> |
- <a href="krb5_init_context_profile.html" title="krb5_init_context_profile - Create a krb5 library context using a specified profile."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_time_offsets - Return the time offsets from the os context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-time-offsets-return-the-time-offsets-from-the-os-context">
-<h1>krb5_get_time_offsets - Return the time offsets from the os context.<a class="headerlink" href="#krb5-get-time-offsets-return-the-time-offsets-from-the-os-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_time_offsets">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_time_offsets</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> *<em> seconds</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> *<em> microseconds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_time_offsets" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[out]</strong> <strong>seconds</strong> - Time offset, seconds portion</p>
-<p class="last"><strong>[out]</strong> <strong>microseconds</strong> - Time offset, microseconds portion</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function returns the time offsets in <em>context</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_time_offsets - Return the time offsets from the os context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_server_rcache.html" title="krb5_get_server_rcache - Generate a replay cache object for server use and open it."
- >previous</a> |
- <a href="krb5_init_context_profile.html" title="krb5_init_context_profile - Create a krb5 library context using a specified profile."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_time_offsets - Return the time offsets from the os context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_validated_creds - Get validated credentials from the KDC. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_context - Create a krb5 library context." href="krb5_init_context.html" />
- <link rel="prev" title="krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential." href="krb5_get_renewed_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_renewed_creds.html" title="krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential."
- accesskey="P">previous</a> |
- <a href="krb5_init_context.html" title="krb5_init_context - Create a krb5 library context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_validated_creds - Get validated credentials from the KDC.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-validated-creds-get-validated-credentials-from-the-kdc">
-<h1>krb5_get_validated_creds - Get validated credentials from the KDC.<a class="headerlink" href="#krb5-get-validated-creds-get-validated-credentials-from-the-kdc" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_get_validated_creds">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_get_validated_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> client</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, const char *<em> in_tkt_service</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_get_validated_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[out]</strong> <strong>creds</strong> - Validated credentials</p>
-<p><strong>[in]</strong> <strong>client</strong> - Client principal name</p>
-<p><strong>[in]</strong> <strong>ccache</strong> - Credential cache</p>
-<p class="last"><strong>[in]</strong> <strong>in_tkt_service</strong> - Server principal string (or NULL)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>KRB5_NO_2ND_TKT Request missing second ticket</li>
-<li>KRB5_NO_TKT_SUPPLIED Request did not supply a ticket</li>
-<li>KRB5_PRINC_NOMATCH Requested principal and ticket do not match</li>
-<li>KRB5_KDCREP_MODIFIED KDC reply did not match expectations</li>
-<li>KRB5_KDCREP_SKEW Clock skew too great in KDC reply</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function gets a validated credential using a postdated credential from <em>ccache</em> . If <em>in_tkt_service</em> is specified, it is parsed (with the realm part ignored) and used as the server principal of the credential; otherwise, the ticket-granting service is used.</p>
-<p>If successful, the validated credential is placed in <em>creds</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_validated_creds - Get validated credentials from the KDC.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_renewed_creds.html" title="krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential."
- >previous</a> |
- <a href="krb5_init_context.html" title="krb5_init_context - Create a krb5 library context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_validated_creds - Get validated credentials from the KDC.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_context - Create a krb5 library context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_secure_context - Create a krb5 library context using only configuration files." href="krb5_init_secure_context.html" />
- <link rel="prev" title="krb5_get_validated_creds - Get validated credentials from the KDC." href="krb5_get_validated_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_validated_creds.html" title="krb5_get_validated_creds - Get validated credentials from the KDC."
- accesskey="P">previous</a> |
- <a href="krb5_init_secure_context.html" title="krb5_init_secure_context - Create a krb5 library context using only configuration files."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_context - Create a krb5 library context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-context-create-a-krb5-library-context">
-<h1>krb5_init_context - Create a krb5 library context.<a class="headerlink" href="#krb5-init-context-create-a-krb5-library-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_context">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_context</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a> *<em> context</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_context" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[out]</strong> <strong>context</strong> - Library context</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>The <em>context</em> must be released by calling <a class="reference internal" href="krb5_free_context.html#c.krb5_free_context" title="krb5_free_context"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_context()</span></code></a> when it is no longer needed.</p>
-<div class="admonition warning">
-<p class="first admonition-title">Warning</p>
-<p class="last">Any program or module that needs the Kerberos code to not trust the environment must use <a class="reference internal" href="krb5_init_secure_context.html#c.krb5_init_secure_context" title="krb5_init_secure_context"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_secure_context()</span></code></a> , or clean out the environment.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_context - Create a krb5 library context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_validated_creds.html" title="krb5_get_validated_creds - Get validated credentials from the KDC."
- >previous</a> |
- <a href="krb5_init_secure_context.html" title="krb5_init_secure_context - Create a krb5 library context using only configuration files."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_context - Create a krb5 library context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_context_profile - Create a krb5 library context using a specified profile. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_free - Free an initial credentials context." href="krb5_init_creds_free.html" />
- <link rel="prev" title="krb5_get_time_offsets - Return the time offsets from the os context." href="krb5_get_time_offsets.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_time_offsets.html" title="krb5_get_time_offsets - Return the time offsets from the os context."
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_free.html" title="krb5_init_creds_free - Free an initial credentials context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_context_profile - Create a krb5 library context using a specified profile.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-context-profile-create-a-krb5-library-context-using-a-specified-profile">
-<h1>krb5_init_context_profile - Create a krb5 library context using a specified profile.<a class="headerlink" href="#krb5-init-context-profile-create-a-krb5-library-context-using-a-specified-profile" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_context_profile">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_context_profile</code><span class="sig-paren">(</span>struct _profile_t *<em> profile</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> flags</em>, <a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a> *<em> context</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_context_profile" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>profile</strong> - Profile object (NULL to create default profile)</p>
-<p><strong>[in]</strong> <strong>flags</strong> - Context initialization flags</p>
-<p class="last"><strong>[out]</strong> <strong>context</strong> - Library context</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Create a context structure, optionally using a specified profile and initialization flags. If <em>profile</em> is NULL, the default profile will be created from config files. If <em>profile</em> is non-null, a copy of it will be made for the new context; the caller should still clean up its copy. Valid flag values are:</p>
-<blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_INIT_CONTEXT_SECURE.html#KRB5_INIT_CONTEXT_SECURE" title="KRB5_INIT_CONTEXT_SECURE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_INIT_CONTEXT_SECURE</span></code></a> Ignore environment variables</li>
-<li><a class="reference internal" href="../macros/KRB5_INIT_CONTEXT_KDC.html#KRB5_INIT_CONTEXT_KDC" title="KRB5_INIT_CONTEXT_KDC"><code class="xref py py-data docutils literal"><span class="pre">KRB5_INIT_CONTEXT_KDC</span></code></a> Use KDC configuration if creating profile</li>
-</ul>
-</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_context_profile - Create a krb5 library context using a specified profile.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_time_offsets.html" title="krb5_get_time_offsets - Return the time offsets from the os context."
- >previous</a> |
- <a href="krb5_init_creds_free.html" title="krb5_init_creds_free - Free an initial credentials context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_context_profile - Create a krb5 library context using a specified profile.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_free - Free an initial credentials context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_get - Acquire credentials using an initial credentials context." href="krb5_init_creds_get.html" />
- <link rel="prev" title="krb5_init_context_profile - Create a krb5 library context using a specified profile." href="krb5_init_context_profile.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_context_profile.html" title="krb5_init_context_profile - Create a krb5 library context using a specified profile."
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_get.html" title="krb5_init_creds_get - Acquire credentials using an initial credentials context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_free - Free an initial credentials context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-free-free-an-initial-credentials-context">
-<h1>krb5_init_creds_free - Free an initial credentials context.<a class="headerlink" href="#krb5-init-creds-free-free-an-initial-credentials-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_creds_free">
-void <code class="descname">krb5_init_creds_free</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_init_creds_context.html#c.krb5_init_creds_context" title="krb5_init_creds_context">krb5_init_creds_context</a><em> ctx</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_creds_free" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>ctx</strong> - Initial credentials context</p>
-</td>
-</tr>
-</tbody>
-</table>
-<blockquote>
-<div><em>context</em> must be the same as the one passed to <a class="reference internal" href="krb5_init_creds_init.html#c.krb5_init_creds_init" title="krb5_init_creds_init"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_init()</span></code></a> for this initial credentials context.</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_free - Free an initial credentials context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_context_profile.html" title="krb5_init_context_profile - Create a krb5 library context using a specified profile."
- >previous</a> |
- <a href="krb5_init_creds_get.html" title="krb5_init_creds_get - Acquire credentials using an initial credentials context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_free - Free an initial credentials context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_get - Acquire credentials using an initial credentials context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context." href="krb5_init_creds_get_creds.html" />
- <link rel="prev" title="krb5_init_creds_free - Free an initial credentials context." href="krb5_init_creds_free.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_free.html" title="krb5_init_creds_free - Free an initial credentials context."
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_get_creds.html" title="krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_get - Acquire credentials using an initial credentials context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-get-acquire-credentials-using-an-initial-credentials-context">
-<h1>krb5_init_creds_get - Acquire credentials using an initial credentials context.<a class="headerlink" href="#krb5-init-creds-get-acquire-credentials-using-an-initial-credentials-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_creds_get">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_creds_get</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_init_creds_context.html#c.krb5_init_creds_context" title="krb5_init_creds_context">krb5_init_creds_context</a><em> ctx</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_creds_get" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>ctx</strong> - Initial credentials context</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function synchronously obtains credentials using a context created by <a class="reference internal" href="krb5_init_creds_init.html#c.krb5_init_creds_init" title="krb5_init_creds_init"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_init()</span></code></a> . On successful return, the credentials can be retrieved with <a class="reference internal" href="krb5_init_creds_get_creds.html#c.krb5_init_creds_get_creds" title="krb5_init_creds_get_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_get_creds()</span></code></a> .</p>
-<blockquote>
-<div><em>context</em> must be the same as the one passed to <a class="reference internal" href="krb5_init_creds_init.html#c.krb5_init_creds_init" title="krb5_init_creds_init"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_init()</span></code></a> for this initial credentials context.</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_get - Acquire credentials using an initial credentials context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_free.html" title="krb5_init_creds_free - Free an initial credentials context."
- >previous</a> |
- <a href="krb5_init_creds_get_creds.html" title="krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_get - Acquire credentials using an initial credentials context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context." href="krb5_init_creds_get_error.html" />
- <link rel="prev" title="krb5_init_creds_get - Acquire credentials using an initial credentials context." href="krb5_init_creds_get.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_get.html" title="krb5_init_creds_get - Acquire credentials using an initial credentials context."
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_get_error.html" title="krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-get-creds-retrieve-acquired-credentials-from-an-initial-credentials-context">
-<h1>krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context.<a class="headerlink" href="#krb5-init-creds-get-creds-retrieve-acquired-credentials-from-an-initial-credentials-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_creds_get_creds">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_creds_get_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_init_creds_context.html#c.krb5_init_creds_context" title="krb5_init_creds_context">krb5_init_creds_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_creds_get_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ctx</strong> - Initial credentials context</p>
-<p class="last"><strong>[out]</strong> <strong>creds</strong> - Acquired credentials</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function copies the acquired initial credentials from <em>ctx</em> into <em>creds</em> , after the successful completion of <a class="reference internal" href="krb5_init_creds_get.html#c.krb5_init_creds_get" title="krb5_init_creds_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_get()</span></code></a> or <a class="reference internal" href="krb5_init_creds_step.html#c.krb5_init_creds_step" title="krb5_init_creds_step"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_step()</span></code></a> . Use <a class="reference internal" href="krb5_free_cred_contents.html#c.krb5_free_cred_contents" title="krb5_free_cred_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_cred_contents()</span></code></a> to free <em>creds</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_get.html" title="krb5_init_creds_get - Acquire credentials using an initial credentials context."
- >previous</a> |
- <a href="krb5_init_creds_get_error.html" title="krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context." href="krb5_init_creds_get_times.html" />
- <link rel="prev" title="krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context." href="krb5_init_creds_get_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_get_creds.html" title="krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context."
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_get_times.html" title="krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-get-error-get-the-last-error-from-kdc-from-an-initial-credentials-context">
-<h1>krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context.<a class="headerlink" href="#krb5-init-creds-get-error-get-the-last-error-from-kdc-from-an-initial-credentials-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_creds_get_error">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_creds_get_error</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_init_creds_context.html#c.krb5_init_creds_context" title="krb5_init_creds_context">krb5_init_creds_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_error.html#c.krb5_error" title="krb5_error">krb5_error</a> **<em> error</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_creds_get_error" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ctx</strong> - Initial credentials context</p>
-<p class="last"><strong>[out]</strong> <strong>error</strong> - Error from KDC, or NULL if none was received</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_get_creds.html" title="krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context."
- >previous</a> |
- <a href="krb5_init_creds_get_times.html" title="krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_init - Create a context for acquiring initial credentials." href="krb5_init_creds_init.html" />
- <link rel="prev" title="krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context." href="krb5_init_creds_get_error.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_get_error.html" title="krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context."
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_init.html" title="krb5_init_creds_init - Create a context for acquiring initial credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-get-times-retrieve-ticket-times-from-an-initial-credentials-context">
-<h1>krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context.<a class="headerlink" href="#krb5-init-creds-get-times-retrieve-ticket-times-from-an-initial-credentials-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_creds_get_times">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_creds_get_times</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_init_creds_context.html#c.krb5_init_creds_context" title="krb5_init_creds_context">krb5_init_creds_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_ticket_times.html#c.krb5_ticket_times" title="krb5_ticket_times">krb5_ticket_times</a> *<em> times</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_creds_get_times" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ctx</strong> - Initial credentials context</p>
-<p class="last"><strong>[out]</strong> <strong>times</strong> - Ticket times for acquired credentials</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>The initial credentials context must have completed obtaining credentials via either <a class="reference internal" href="krb5_init_creds_get.html#c.krb5_init_creds_get" title="krb5_init_creds_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_get()</span></code></a> or <a class="reference internal" href="krb5_init_creds_step.html#c.krb5_init_creds_step" title="krb5_init_creds_step"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_step()</span></code></a> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_get_error.html" title="krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context."
- >previous</a> |
- <a href="krb5_init_creds_init.html" title="krb5_init_creds_init - Create a context for acquiring initial credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_init - Create a context for acquiring initial credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials." href="krb5_init_creds_set_keytab.html" />
- <link rel="prev" title="krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context." href="krb5_init_creds_get_times.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_get_times.html" title="krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context."
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_set_keytab.html" title="krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_init - Create a context for acquiring initial credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-init-create-a-context-for-acquiring-initial-credentials">
-<h1>krb5_init_creds_init - Create a context for acquiring initial credentials.<a class="headerlink" href="#krb5-init-creds-init-create-a-context-for-acquiring-initial-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_creds_init">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_creds_init</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> client</em>, <a class="reference internal" href="../types/krb5_prompter_fct.html#c.krb5_prompter_fct" title="krb5_prompter_fct">krb5_prompter_fct</a><em> prompter</em>, void *<em> data</em>, <a class="reference internal" href="../types/krb5_deltat.html#c.krb5_deltat" title="krb5_deltat">krb5_deltat</a><em> start_time</em>, <a class="reference internal" href="../types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt" title="krb5_get_init_creds_opt">krb5_get_init_creds_opt</a> *<em> options</em>, <a class="reference internal" href="../types/krb5_init_creds_context.html#c.krb5_init_creds_context" title="krb5_init_creds_context">krb5_init_creds_context</a> *<em> ctx</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_creds_init" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>client</strong> - Client principal to get initial creds for</p>
-<p><strong>[in]</strong> <strong>prompter</strong> - Prompter callback</p>
-<p><strong>[in]</strong> <strong>data</strong> - Prompter callback argument</p>
-<p><strong>[in]</strong> <strong>start_time</strong> - Time when credentials become valid (0 for now)</p>
-<p><strong>[in]</strong> <strong>options</strong> - Options structure (NULL for default)</p>
-<p class="last"><strong>[out]</strong> <strong>ctx</strong> - New initial credentials context</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a new context for acquiring initial credentials. Use <a class="reference internal" href="krb5_init_creds_free.html#c.krb5_init_creds_free" title="krb5_init_creds_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_free()</span></code></a> to free <em>ctx</em> when it is no longer needed.</p>
-<p>Any subsequent calls to <a class="reference internal" href="krb5_init_creds_step.html#c.krb5_init_creds_step" title="krb5_init_creds_step"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_step()</span></code></a> , <a class="reference internal" href="krb5_init_creds_get.html#c.krb5_init_creds_get" title="krb5_init_creds_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_get()</span></code></a> , or <a class="reference internal" href="krb5_init_creds_free.html#c.krb5_init_creds_free" title="krb5_init_creds_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_free()</span></code></a> for this initial credentials context must use the same <em>context</em> argument as the one passed to this function.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_init - Create a context for acquiring initial credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_get_times.html" title="krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context."
- >previous</a> |
- <a href="krb5_init_creds_set_keytab.html" title="krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_init - Create a context for acquiring initial credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_set_password - Set a password for acquiring initial credentials." href="krb5_init_creds_set_password.html" />
- <link rel="prev" title="krb5_init_creds_init - Create a context for acquiring initial credentials." href="krb5_init_creds_init.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_init.html" title="krb5_init_creds_init - Create a context for acquiring initial credentials."
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_set_password.html" title="krb5_init_creds_set_password - Set a password for acquiring initial credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-set-keytab-specify-a-keytab-to-use-for-acquiring-initial-credentials">
-<h1>krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials.<a class="headerlink" href="#krb5-init-creds-set-keytab-specify-a-keytab-to-use-for-acquiring-initial-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_creds_set_keytab">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_creds_set_keytab</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_init_creds_context.html#c.krb5_init_creds_context" title="krb5_init_creds_context">krb5_init_creds_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_creds_set_keytab" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ctx</strong> - Initial credentials context</p>
-<p class="last"><strong>[in]</strong> <strong>keytab</strong> - Key table handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function supplies a keytab containing the client key for an initial credentials request.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_init.html" title="krb5_init_creds_init - Create a context for acquiring initial credentials."
- >previous</a> |
- <a href="krb5_init_creds_set_password.html" title="krb5_init_creds_set_password - Set a password for acquiring initial credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_set_password - Set a password for acquiring initial credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials." href="krb5_init_creds_set_service.html" />
- <link rel="prev" title="krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials." href="krb5_init_creds_set_keytab.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_set_keytab.html" title="krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials."
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_set_service.html" title="krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_set_password - Set a password for acquiring initial credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-set-password-set-a-password-for-acquiring-initial-credentials">
-<h1>krb5_init_creds_set_password - Set a password for acquiring initial credentials.<a class="headerlink" href="#krb5-init-creds-set-password-set-a-password-for-acquiring-initial-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_creds_set_password">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_creds_set_password</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_init_creds_context.html#c.krb5_init_creds_context" title="krb5_init_creds_context">krb5_init_creds_context</a><em> ctx</em>, const char *<em> password</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_creds_set_password" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ctx</strong> - Initial credentials context</p>
-<p class="last"><strong>[in]</strong> <strong>password</strong> - Password</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function supplies a password to be used to construct the client key for an initial credentials request.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_set_password - Set a password for acquiring initial credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_set_keytab.html" title="krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials."
- >previous</a> |
- <a href="krb5_init_creds_set_service.html" title="krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_set_password - Set a password for acquiring initial credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_step - Get the next KDC request for acquiring initial credentials." href="krb5_init_creds_step.html" />
- <link rel="prev" title="krb5_init_creds_set_password - Set a password for acquiring initial credentials." href="krb5_init_creds_set_password.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_set_password.html" title="krb5_init_creds_set_password - Set a password for acquiring initial credentials."
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_step.html" title="krb5_init_creds_step - Get the next KDC request for acquiring initial credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-set-service-specify-a-service-principal-for-acquiring-initial-credentials">
-<h1>krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials.<a class="headerlink" href="#krb5-init-creds-set-service-specify-a-service-principal-for-acquiring-initial-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_creds_set_service">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_creds_set_service</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_init_creds_context.html#c.krb5_init_creds_context" title="krb5_init_creds_context">krb5_init_creds_context</a><em> ctx</em>, const char *<em> service</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_creds_set_service" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ctx</strong> - Initial credentials context</p>
-<p class="last"><strong>[in]</strong> <strong>service</strong> - Service principal string</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function supplies a service principal string to acquire initial credentials for instead of the default krbtgt service. <em>service</em> is parsed as a principal name; any realm part is ignored.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_set_password.html" title="krb5_init_creds_set_password - Set a password for acquiring initial credentials."
- >previous</a> |
- <a href="krb5_init_creds_step.html" title="krb5_init_creds_step - Get the next KDC request for acquiring initial credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_step - Get the next KDC request for acquiring initial credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_keyblock - Initialize an empty krb5_keyblock ." href="krb5_init_keyblock.html" />
- <link rel="prev" title="krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials." href="krb5_init_creds_set_service.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_set_service.html" title="krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials."
- accesskey="P">previous</a> |
- <a href="krb5_init_keyblock.html" title="krb5_init_keyblock - Initialize an empty krb5_keyblock ."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_step - Get the next KDC request for acquiring initial credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-step-get-the-next-kdc-request-for-acquiring-initial-credentials">
-<h1>krb5_init_creds_step - Get the next KDC request for acquiring initial credentials.<a class="headerlink" href="#krb5-init-creds-step-get-the-next-kdc-request-for-acquiring-initial-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_creds_step">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_creds_step</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_init_creds_context.html#c.krb5_init_creds_context" title="krb5_init_creds_context">krb5_init_creds_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> in</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> out</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> realm</em>, unsigned int *<em> flags</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_creds_step" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ctx</strong> - Initial credentials context</p>
-<p><strong>[in]</strong> <strong>in</strong> - KDC response (empty on the first call)</p>
-<p><strong>[out]</strong> <strong>out</strong> - Next KDC request</p>
-<p><strong>[out]</strong> <strong>realm</strong> - Realm for next KDC request</p>
-<p class="last"><strong>[out]</strong> <strong>flags</strong> - Output flags</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function constructs the next KDC request in an initial credential exchange, allowing the caller to control the transport of KDC requests and replies. On the first call, <em>in</em> should be set to an empty buffer; on subsequent calls, it should be set to the KDC’s reply to the previous request.</p>
-<p>If more requests are needed, <em>flags</em> will be set to <a class="reference internal" href="../macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html#KRB5_INIT_CREDS_STEP_FLAG_CONTINUE" title="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_INIT_CREDS_STEP_FLAG_CONTINUE</span></code></a> and the next request will be placed in <em>out</em> . If no more requests are needed, <em>flags</em> will not contain <a class="reference internal" href="../macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html#KRB5_INIT_CREDS_STEP_FLAG_CONTINUE" title="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_INIT_CREDS_STEP_FLAG_CONTINUE</span></code></a> and <em>out</em> will be empty.</p>
-<p>If this function returns <strong>KRB5KRB_ERR_RESPONSE_TOO_BIG</strong> , the caller should transmit the next request using TCP rather than UDP. If this function returns any other error, the initial credential exchange has failed.</p>
-<blockquote>
-<div><em>context</em> must be the same as the one passed to <a class="reference internal" href="krb5_init_creds_init.html#c.krb5_init_creds_init" title="krb5_init_creds_init"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_init()</span></code></a> for this initial credentials context.</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_step - Get the next KDC request for acquiring initial credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_set_service.html" title="krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials."
- >previous</a> |
- <a href="krb5_init_keyblock.html" title="krb5_init_keyblock - Initialize an empty krb5_keyblock ."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_step - Get the next KDC request for acquiring initial credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_keyblock - Initialize an empty krb5_keyblock . — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM." href="krb5_is_referral_realm.html" />
- <link rel="prev" title="krb5_init_creds_step - Get the next KDC request for acquiring initial credentials." href="krb5_init_creds_step.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_step.html" title="krb5_init_creds_step - Get the next KDC request for acquiring initial credentials."
- accesskey="P">previous</a> |
- <a href="krb5_is_referral_realm.html" title="krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_keyblock - Initialize an empty krb5_keyblock .">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-keyblock-initialize-an-empty-krb5-keyblock">
-<h1>krb5_init_keyblock - Initialize an empty krb5_keyblock .<a class="headerlink" href="#krb5-init-keyblock-initialize-an-empty-krb5-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_keyblock">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_keyblock</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, size_t<em> length</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_keyblock" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type</p>
-<p><strong>[in]</strong> <strong>length</strong> - Length of keyblock (or 0)</p>
-<p class="last"><strong>[out]</strong> <strong>out</strong> - New keyblock structure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Initialize a new keyblock and allocate storage for the contents of the key. It is legal to pass in a length of 0, in which case contents are left unallocated. Use <a class="reference internal" href="krb5_free_keyblock.html#c.krb5_free_keyblock" title="krb5_free_keyblock"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keyblock()</span></code></a> to free <em>out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If <em>length</em> is set to 0, contents are left unallocated.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_keyblock - Initialize an empty krb5_keyblock .</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_step.html" title="krb5_init_creds_step - Get the next KDC request for acquiring initial credentials."
- >previous</a> |
- <a href="krb5_is_referral_realm.html" title="krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_keyblock - Initialize an empty krb5_keyblock .">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_random_key — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_free_entry" href="krb5_kt_free_entry.html" />
- <link rel="prev" title="krb5_get_init_creds_opt_init" href="krb5_get_init_creds_opt_init.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt_init.html" title="krb5_get_init_creds_opt_init"
- accesskey="P">previous</a> |
- <a href="krb5_kt_free_entry.html" title="krb5_kt_free_entry"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_random_key">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-random-key">
-<h1>krb5_init_random_key<a class="headerlink" href="#krb5-init-random-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_random_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_random_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_encrypt_block.html#c.krb5_encrypt_block" title="krb5_encrypt_block">krb5_encrypt_block</a> *<em> eblock</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> keyblock</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a> *<em> ptr</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_random_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>eblock</strong></p>
-<p><strong>keyblock</strong></p>
-<p class="last"><strong>ptr</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_c_* API family.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_random_key</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt_init.html" title="krb5_get_init_creds_opt_init"
- >previous</a> |
- <a href="krb5_kt_free_entry.html" title="krb5_kt_free_entry"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_random_key">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_secure_context - Create a krb5 library context using only configuration files. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_is_config_principal - Test whether a principal is a configuration principal." href="krb5_is_config_principal.html" />
- <link rel="prev" title="krb5_init_context - Create a krb5 library context." href="krb5_init_context.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_context.html" title="krb5_init_context - Create a krb5 library context."
- accesskey="P">previous</a> |
- <a href="krb5_is_config_principal.html" title="krb5_is_config_principal - Test whether a principal is a configuration principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_secure_context - Create a krb5 library context using only configuration files.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-secure-context-create-a-krb5-library-context-using-only-configuration-files">
-<h1>krb5_init_secure_context - Create a krb5 library context using only configuration files.<a class="headerlink" href="#krb5-init-secure-context-create-a-krb5-library-context-using-only-configuration-files" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_init_secure_context">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_init_secure_context</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a> *<em> context</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_init_secure_context" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[out]</strong> <strong>context</strong> - Library context</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Create a context structure, using only system configuration files. All information passed through the environment variables is ignored.</p>
-<p>The <em>context</em> must be released by calling <a class="reference internal" href="krb5_free_context.html#c.krb5_free_context" title="krb5_free_context"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_context()</span></code></a> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_secure_context - Create a krb5 library context using only configuration files.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_context.html" title="krb5_init_context - Create a krb5 library context."
- >previous</a> |
- <a href="krb5_is_config_principal.html" title="krb5_is_config_principal - Test whether a principal is a configuration principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_secure_context - Create a krb5 library context using only configuration files.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_is_config_principal - Test whether a principal is a configuration principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support." href="krb5_is_thread_safe.html" />
- <link rel="prev" title="krb5_init_secure_context - Create a krb5 library context using only configuration files." href="krb5_init_secure_context.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_secure_context.html" title="krb5_init_secure_context - Create a krb5 library context using only configuration files."
- accesskey="P">previous</a> |
- <a href="krb5_is_thread_safe.html" title="krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_is_config_principal - Test whether a principal is a configuration principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-is-config-principal-test-whether-a-principal-is-a-configuration-principal">
-<h1>krb5_is_config_principal - Test whether a principal is a configuration principal.<a class="headerlink" href="#krb5-is-config-principal-test-whether-a-principal-is-a-configuration-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_is_config_principal">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_is_config_principal</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_is_config_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>principal</strong> - Principal to check</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if the principal is a configuration principal (generated part of krb5_cc_set_config() ); FALSE otherwise.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_is_config_principal - Test whether a principal is a configuration principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_secure_context.html" title="krb5_init_secure_context - Create a krb5 library context using only configuration files."
- >previous</a> |
- <a href="krb5_is_thread_safe.html" title="krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_is_config_principal - Test whether a principal is a configuration principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature." href="krb5_kdc_sign_ticket.html" />
- <link rel="prev" title="krb5_init_keyblock - Initialize an empty krb5_keyblock ." href="krb5_init_keyblock.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_keyblock.html" title="krb5_init_keyblock - Initialize an empty krb5_keyblock ."
- accesskey="P">previous</a> |
- <a href="krb5_kdc_sign_ticket.html" title="krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-is-referral-realm-check-for-a-match-with-krb5-referral-realm">
-<h1>krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM.<a class="headerlink" href="#krb5-is-referral-realm-check-for-a-match-with-krb5-referral-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_is_referral_realm">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_is_referral_realm</code><span class="sig-paren">(</span>const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> r</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_is_referral_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>r</strong> - Realm to check</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if r is zero-length, FALSE otherwise</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_keyblock.html" title="krb5_init_keyblock - Initialize an empty krb5_keyblock ."
- >previous</a> |
- <a href="krb5_kdc_sign_ticket.html" title="krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_close - Close a key table handle." href="krb5_kt_close.html" />
- <link rel="prev" title="krb5_is_config_principal - Test whether a principal is a configuration principal." href="krb5_is_config_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_is_config_principal.html" title="krb5_is_config_principal - Test whether a principal is a configuration principal."
- accesskey="P">previous</a> |
- <a href="krb5_kt_close.html" title="krb5_kt_close - Close a key table handle."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-is-thread-safe-test-whether-the-kerberos-library-was-built-with-multithread-support">
-<h1>krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support.<a class="headerlink" href="#krb5-is-thread-safe-test-whether-the-kerberos-library-was-built-with-multithread-support" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_is_thread_safe">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_is_thread_safe</code><span class="sig-paren">(</span>void<em> None</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_is_thread_safe" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>None</strong></td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if the library is threadsafe; FALSE otherwise</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_is_config_principal.html" title="krb5_is_config_principal - Test whether a principal is a configuration principal."
- >previous</a> |
- <a href="krb5_kt_close.html" title="krb5_kt_close - Close a key table handle."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_decrypt - Decrypt data using a key (operates on opaque key)." href="krb5_k_decrypt.html" />
- <link rel="prev" title="krb5_free_tgt_creds - Free an array of credential structures." href="krb5_free_tgt_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_free_tgt_creds.html" title="krb5_free_tgt_creds - Free an array of credential structures."
- accesskey="P">previous</a> |
- <a href="krb5_k_decrypt.html" title="krb5_k_decrypt - Decrypt data using a key (operates on opaque key)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-create-key-create-a-krb5-key-from-the-enctype-and-key-data-in-a-keyblock">
-<h1>krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock.<a class="headerlink" href="#krb5-k-create-key-create-a-krb5-key-from-the-enctype-and-key-data-in-a-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_create_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_create_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key_data</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a> *<em> out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_create_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key_data</strong> - Keyblock</p>
-<p class="last"><strong>[out]</strong> <strong>out</strong> - Opaque key</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - KRB5_BAD_ENCTYPE</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>The reference count on a key <em>out</em> is set to 1. Use <a class="reference internal" href="krb5_k_free_key.html#c.krb5_k_free_key" title="krb5_k_free_key"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_free_key()</span></code></a> to free <em>out</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_free_tgt_creds.html" title="krb5_free_tgt_creds - Free an array of credential structures."
- >previous</a> |
- <a href="krb5_k_decrypt.html" title="krb5_k_decrypt - Decrypt data using a key (operates on opaque key)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_decrypt - Decrypt data using a key (operates on opaque key). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key)." href="krb5_k_decrypt_iov.html" />
- <link rel="prev" title="krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock." href="krb5_k_create_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_create_key.html" title="krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock."
- accesskey="P">previous</a> |
- <a href="krb5_k_decrypt_iov.html" title="krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_decrypt - Decrypt data using a key (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-decrypt-decrypt-data-using-a-key-operates-on-opaque-key">
-<h1>krb5_k_decrypt - Decrypt data using a key (operates on opaque key).<a class="headerlink" href="#krb5-k-decrypt-decrypt-data-using-a-key-operates-on-opaque-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_decrypt">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_decrypt</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> cipher_state</em>, const <a class="reference internal" href="../types/krb5_enc_data.html#c.krb5_enc_data" title="krb5_enc_data">krb5_enc_data</a> *<em> input</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> output</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_decrypt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[inout]</strong> <strong>cipher_state</strong> - Cipher state; specify NULL if not needed</p>
-<p><strong>[in]</strong> <strong>input</strong> - Encrypted data</p>
-<p class="last"><strong>[out]</strong> <strong>output</strong> - Decrypted data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function decrypts the data block <em>input</em> and stores the output into <em>output</em> . The actual decryption key will be derived from <em>key</em> and <em>usage</em> if key derivation is specified for the encryption type. If non-null, <em>cipher_state</em> specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The caller must initialize <em>output</em> and allocate at least enough space for the result. The usual practice is to allocate an output buffer as long as the ciphertext, and let <a class="reference internal" href="krb5_c_decrypt.html#c.krb5_c_decrypt" title="krb5_c_decrypt"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_decrypt()</span></code></a> trim <em>output->length</em> . For some enctypes, the resulting <em>output->length</em> may include padding bytes.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_decrypt - Decrypt data using a key (operates on opaque key).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_create_key.html" title="krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock."
- >previous</a> |
- <a href="krb5_k_decrypt_iov.html" title="krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_decrypt - Decrypt data using a key (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_encrypt - Encrypt data using a key (operates on opaque key)." href="krb5_k_encrypt.html" />
- <link rel="prev" title="krb5_k_decrypt - Decrypt data using a key (operates on opaque key)." href="krb5_k_decrypt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_decrypt.html" title="krb5_k_decrypt - Decrypt data using a key (operates on opaque key)."
- accesskey="P">previous</a> |
- <a href="krb5_k_encrypt.html" title="krb5_k_encrypt - Encrypt data using a key (operates on opaque key)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-decrypt-iov-decrypt-data-in-place-supporting-aead-operates-on-opaque-key">
-<h1>krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key).<a class="headerlink" href="#krb5-k-decrypt-iov-decrypt-data-in-place-supporting-aead-operates-on-opaque-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_decrypt_iov">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_decrypt_iov</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> cipher_state</em>, <a class="reference internal" href="../types/krb5_crypto_iov.html#c.krb5_crypto_iov" title="krb5_crypto_iov">krb5_crypto_iov</a> *<em> data</em>, size_t<em> num_data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_decrypt_iov" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[in]</strong> <strong>cipher_state</strong> - Cipher state; specify NULL if not needed</p>
-<p><strong>[inout]</strong> <strong>data</strong> - IOV array. Modified in-place.</p>
-<p class="last"><strong>[in]</strong> <strong>num_data</strong> - Size of <em>data</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function decrypts the data block <em>data</em> and stores the output in-place. The actual decryption key will be derived from <em>key</em> and <em>usage</em> if key derivation is specified for the encryption type. If non-null, <em>cipher_state</em> specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5_crypto_iov structures before calling into this API.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_k_encrypt_iov.html#c.krb5_k_encrypt_iov" title="krb5_k_encrypt_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_encrypt_iov()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">On return from a <a class="reference internal" href="krb5_c_decrypt_iov.html#c.krb5_c_decrypt_iov" title="krb5_c_decrypt_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_decrypt_iov()</span></code></a> call, the <em>data->length</em> in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_decrypt.html" title="krb5_k_decrypt - Decrypt data using a key (operates on opaque key)."
- >previous</a> |
- <a href="krb5_k_encrypt.html" title="krb5_k_encrypt - Encrypt data using a key (operates on opaque key)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_encrypt - Encrypt data using a key (operates on opaque key). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key)." href="krb5_k_encrypt_iov.html" />
- <link rel="prev" title="krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key)." href="krb5_k_decrypt_iov.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_decrypt_iov.html" title="krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key)."
- accesskey="P">previous</a> |
- <a href="krb5_k_encrypt_iov.html" title="krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_encrypt - Encrypt data using a key (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-encrypt-encrypt-data-using-a-key-operates-on-opaque-key">
-<h1>krb5_k_encrypt - Encrypt data using a key (operates on opaque key).<a class="headerlink" href="#krb5-k-encrypt-encrypt-data-using-a-key-operates-on-opaque-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_encrypt">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_encrypt</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> cipher_state</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> input</em>, <a class="reference internal" href="../types/krb5_enc_data.html#c.krb5_enc_data" title="krb5_enc_data">krb5_enc_data</a> *<em> output</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_encrypt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[inout]</strong> <strong>cipher_state</strong> - Cipher state; specify NULL if not needed</p>
-<p><strong>[in]</strong> <strong>input</strong> - Data to be encrypted</p>
-<p class="last"><strong>[out]</strong> <strong>output</strong> - Encrypted data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function encrypts the data block <em>input</em> and stores the output into <em>output</em> . The actual encryption key will be derived from <em>key</em> and <em>usage</em> if key derivation is specified for the encryption type. If non-null, <em>cipher_state</em> specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The caller must initialize <em>output</em> and allocate at least enough space for the result (using <a class="reference internal" href="krb5_c_encrypt_length.html#c.krb5_c_encrypt_length" title="krb5_c_encrypt_length"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_encrypt_length()</span></code></a> to determine the amount of space needed). <em>output->length</em> will be set to the actual length of the ciphertext.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_encrypt - Encrypt data using a key (operates on opaque key).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_decrypt_iov.html" title="krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key)."
- >previous</a> |
- <a href="krb5_k_encrypt_iov.html" title="krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_encrypt - Encrypt data using a key (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero." href="krb5_k_free_key.html" />
- <link rel="prev" title="krb5_k_encrypt - Encrypt data using a key (operates on opaque key)." href="krb5_k_encrypt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_encrypt.html" title="krb5_k_encrypt - Encrypt data using a key (operates on opaque key)."
- accesskey="P">previous</a> |
- <a href="krb5_k_free_key.html" title="krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-encrypt-iov-encrypt-data-in-place-supporting-aead-operates-on-opaque-key">
-<h1>krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key).<a class="headerlink" href="#krb5-k-encrypt-iov-encrypt-data-in-place-supporting-aead-operates-on-opaque-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_encrypt_iov">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_encrypt_iov</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> cipher_state</em>, <a class="reference internal" href="../types/krb5_crypto_iov.html#c.krb5_crypto_iov" title="krb5_crypto_iov">krb5_crypto_iov</a> *<em> data</em>, size_t<em> num_data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_encrypt_iov" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[in]</strong> <strong>cipher_state</strong> - Cipher state; specify NULL if not needed</p>
-<p><strong>[inout]</strong> <strong>data</strong> - IOV array. Modified in-place.</p>
-<p class="last"><strong>[in]</strong> <strong>num_data</strong> - Size of <em>data</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function encrypts the data block <em>data</em> and stores the output in-place. The actual encryption key will be derived from <em>key</em> and <em>usage</em> if key derivation is specified for the encryption type. If non-null, <em>cipher_state</em> specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5_crypto_iov structures before calling into this API.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_k_decrypt_iov.html#c.krb5_k_decrypt_iov" title="krb5_k_decrypt_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_decrypt_iov()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">On return from a <a class="reference internal" href="krb5_c_encrypt_iov.html#c.krb5_c_encrypt_iov" title="krb5_c_encrypt_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_encrypt_iov()</span></code></a> call, the <em>data->length</em> in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_encrypt.html" title="krb5_k_encrypt - Encrypt data using a key (operates on opaque key)."
- >previous</a> |
- <a href="krb5_k_free_key.html" title="krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure." href="krb5_k_key_enctype.html" />
- <link rel="prev" title="krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key)." href="krb5_k_encrypt_iov.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_encrypt_iov.html" title="krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key)."
- accesskey="P">previous</a> |
- <a href="krb5_k_key_enctype.html" title="krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-free-key-decrement-the-reference-count-on-a-key-and-free-it-if-it-hits-zero">
-<h1>krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero.<a class="headerlink" href="#krb5-k-free-key-decrement-the-reference-count-on-a-key-and-free-it-if-it-hits-zero" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_free_key">
-void <code class="descname">krb5_k_free_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_free_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p class="last"><strong>key</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_encrypt_iov.html" title="krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key)."
- >previous</a> |
- <a href="krb5_k_key_enctype.html" title="krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure." href="krb5_k_key_keyblock.html" />
- <link rel="prev" title="krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero." href="krb5_k_free_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_free_key.html" title="krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero."
- accesskey="P">previous</a> |
- <a href="krb5_k_key_keyblock.html" title="krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-key-enctype-retrieve-the-enctype-of-a-krb5-key-structure">
-<h1>krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure.<a class="headerlink" href="#krb5-k-key-enctype-retrieve-the-enctype-of-a-krb5-key-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_key_enctype">
-<a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> <code class="descname">krb5_k_key_enctype</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_key_enctype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p class="last"><strong>key</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_free_key.html" title="krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero."
- >previous</a> |
- <a href="krb5_k_key_keyblock.html" title="krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_make_checksum - Compute a checksum (operates on opaque key)." href="krb5_k_make_checksum.html" />
- <link rel="prev" title="krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure." href="krb5_k_key_enctype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_key_enctype.html" title="krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure."
- accesskey="P">previous</a> |
- <a href="krb5_k_make_checksum.html" title="krb5_k_make_checksum - Compute a checksum (operates on opaque key)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-key-keyblock-retrieve-a-copy-of-the-keyblock-from-a-krb5-key-structure">
-<h1>krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure.<a class="headerlink" href="#krb5-k-key-keyblock-retrieve-a-copy-of-the-keyblock-from-a-krb5-key-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_key_keyblock">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_key_keyblock</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> key_data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_key_keyblock" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>key</strong></p>
-<p class="last"><strong>key_data</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_key_enctype.html" title="krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure."
- >previous</a> |
- <a href="krb5_k_make_checksum.html" title="krb5_k_make_checksum - Compute a checksum (operates on opaque key)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_make_checksum - Compute a checksum (operates on opaque key). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)" href="krb5_k_make_checksum_iov.html" />
- <link rel="prev" title="krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure." href="krb5_k_key_keyblock.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_key_keyblock.html" title="krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure."
- accesskey="P">previous</a> |
- <a href="krb5_k_make_checksum_iov.html" title="krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_make_checksum - Compute a checksum (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-make-checksum-compute-a-checksum-operates-on-opaque-key">
-<h1>krb5_k_make_checksum - Compute a checksum (operates on opaque key).<a class="headerlink" href="#krb5-k-make-checksum-compute-a-checksum-operates-on-opaque-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_make_checksum">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_make_checksum</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> cksumtype</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> input</em>, <a class="reference internal" href="../types/krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> *<em> cksum</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_make_checksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cksumtype</strong> - Checksum type (0 for mandatory type)</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key for a keyed checksum</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[in]</strong> <strong>input</strong> - Input data</p>
-<p class="last"><strong>[out]</strong> <strong>cksum</strong> - Generated checksum</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function computes a checksum of type <em>cksumtype</em> over <em>input</em> , using <em>key</em> if the checksum type is a keyed checksum. If <em>cksumtype</em> is 0 and <em>key</em> is non-null, the checksum type will be the mandatory-to-implement checksum type for the key’s encryption type. The actual checksum key will be derived from <em>key</em> and <em>usage</em> if key derivation is specified for the checksum type. The newly created <em>cksum</em> must be released by calling <a class="reference internal" href="krb5_free_checksum_contents.html#c.krb5_free_checksum_contents" title="krb5_free_checksum_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_checksum_contents()</span></code></a> when it is no longer needed.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_c_verify_checksum.html#c.krb5_c_verify_checksum" title="krb5_c_verify_checksum"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_verify_checksum()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function is similar to <a class="reference internal" href="krb5_c_make_checksum.html#c.krb5_c_make_checksum" title="krb5_c_make_checksum"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_make_checksum()</span></code></a> , but operates on opaque <em>key</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_make_checksum - Compute a checksum (operates on opaque key).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_key_keyblock.html" title="krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure."
- >previous</a> |
- <a href="krb5_k_make_checksum_iov.html" title="krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_make_checksum - Compute a checksum (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key)." href="krb5_k_prf.html" />
- <link rel="prev" title="krb5_k_make_checksum - Compute a checksum (operates on opaque key)." href="krb5_k_make_checksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_make_checksum.html" title="krb5_k_make_checksum - Compute a checksum (operates on opaque key)."
- accesskey="P">previous</a> |
- <a href="krb5_k_prf.html" title="krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-make-checksum-iov-fill-in-a-checksum-element-in-iov-array-operates-on-opaque-key">
-<h1>krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)<a class="headerlink" href="#krb5-k-make-checksum-iov-fill-in-a-checksum-element-in-iov-array-operates-on-opaque-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_make_checksum_iov">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_make_checksum_iov</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> cksumtype</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, <a class="reference internal" href="../types/krb5_crypto_iov.html#c.krb5_crypto_iov" title="krb5_crypto_iov">krb5_crypto_iov</a> *<em> data</em>, size_t<em> num_data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_make_checksum_iov" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cksumtype</strong> - Checksum type (0 for mandatory type)</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key for a keyed checksum</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[inout]</strong> <strong>data</strong> - IOV array</p>
-<p class="last"><strong>[in]</strong> <strong>num_data</strong> - Size of <em>data</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Create a checksum in the <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_CHECKSUM.html#KRB5_CRYPTO_TYPE_CHECKSUM" title="KRB5_CRYPTO_TYPE_CHECKSUM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_CHECKSUM</span></code></a> element over <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_DATA.html#KRB5_CRYPTO_TYPE_DATA" title="KRB5_CRYPTO_TYPE_DATA"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_DATA</span></code></a> and <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.html#KRB5_CRYPTO_TYPE_SIGN_ONLY" title="KRB5_CRYPTO_TYPE_SIGN_ONLY"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_SIGN_ONLY</span></code></a> chunks in <em>data</em> . Only the <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_CHECKSUM.html#KRB5_CRYPTO_TYPE_CHECKSUM" title="KRB5_CRYPTO_TYPE_CHECKSUM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_CHECKSUM</span></code></a> region is modified.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_k_verify_checksum_iov.html#c.krb5_k_verify_checksum_iov" title="krb5_k_verify_checksum_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_verify_checksum_iov()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function is similar to <a class="reference internal" href="krb5_c_make_checksum_iov.html#c.krb5_c_make_checksum_iov" title="krb5_c_make_checksum_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_make_checksum_iov()</span></code></a> , but operates on opaque <em>key</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_make_checksum.html" title="krb5_k_make_checksum - Compute a checksum (operates on opaque key)."
- >previous</a> |
- <a href="krb5_k_prf.html" title="krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_reference_key - Increment the reference count on a key." href="krb5_k_reference_key.html" />
- <link rel="prev" title="krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)" href="krb5_k_make_checksum_iov.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_make_checksum_iov.html" title="krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)"
- accesskey="P">previous</a> |
- <a href="krb5_k_reference_key.html" title="krb5_k_reference_key - Increment the reference count on a key."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-prf-generate-enctype-specific-pseudo-random-bytes-operates-on-opaque-key">
-<h1>krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key).<a class="headerlink" href="#krb5-k-prf-generate-enctype-specific-pseudo-random-bytes-operates-on-opaque-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_prf">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_prf</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> input</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> output</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_prf" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Key</p>
-<p><strong>[in]</strong> <strong>input</strong> - Input data</p>
-<p class="last"><strong>[out]</strong> <strong>output</strong> - Output data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function selects a pseudo-random function based on <em>key</em> and computes its value over <em>input</em> , placing the result into <em>output</em> . The caller must preinitialize <em>output</em> and allocate space for the result.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function is similar to <a class="reference internal" href="krb5_c_prf.html#c.krb5_c_prf" title="krb5_c_prf"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_prf()</span></code></a> , but operates on opaque <em>key</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_make_checksum_iov.html" title="krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)"
- >previous</a> |
- <a href="krb5_k_reference_key.html" title="krb5_k_reference_key - Increment the reference count on a key."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_reference_key - Increment the reference count on a key. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_verify_checksum - Verify a checksum (operates on opaque key)." href="krb5_k_verify_checksum.html" />
- <link rel="prev" title="krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key)." href="krb5_k_prf.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_prf.html" title="krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key)."
- accesskey="P">previous</a> |
- <a href="krb5_k_verify_checksum.html" title="krb5_k_verify_checksum - Verify a checksum (operates on opaque key)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_reference_key - Increment the reference count on a key.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-reference-key-increment-the-reference-count-on-a-key">
-<h1>krb5_k_reference_key - Increment the reference count on a key.<a class="headerlink" href="#krb5-k-reference-key-increment-the-reference-count-on-a-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_reference_key">
-void <code class="descname">krb5_k_reference_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_reference_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p class="last"><strong>key</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_reference_key - Increment the reference count on a key.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_prf.html" title="krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key)."
- >previous</a> |
- <a href="krb5_k_verify_checksum.html" title="krb5_k_verify_checksum - Verify a checksum (operates on opaque key)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_reference_key - Increment the reference count on a key.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_verify_checksum - Verify a checksum (operates on opaque key). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key)." href="krb5_k_verify_checksum_iov.html" />
- <link rel="prev" title="krb5_k_reference_key - Increment the reference count on a key." href="krb5_k_reference_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_reference_key.html" title="krb5_k_reference_key - Increment the reference count on a key."
- accesskey="P">previous</a> |
- <a href="krb5_k_verify_checksum_iov.html" title="krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key)."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_verify_checksum - Verify a checksum (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-verify-checksum-verify-a-checksum-operates-on-opaque-key">
-<h1>krb5_k_verify_checksum - Verify a checksum (operates on opaque key).<a class="headerlink" href="#krb5-k-verify-checksum-verify-a-checksum-operates-on-opaque-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_verify_checksum">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_verify_checksum</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em>, const <a class="reference internal" href="../types/krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> *<em> cksum</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> *<em> valid</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_verify_checksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key for a keyed checksum</p>
-<p><strong>[in]</strong> <strong>usage</strong> - <em>key</em> usage</p>
-<p><strong>[in]</strong> <strong>data</strong> - Data to be used to compute a new checksum using <em>key</em> to compare <em>cksum</em> against</p>
-<p><strong>[in]</strong> <strong>cksum</strong> - Checksum to be verified</p>
-<p class="last"><strong>[out]</strong> <strong>valid</strong> - Non-zero for success, zero for failure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function verifies that <em>cksum</em> is a valid checksum for <em>data</em> . If the checksum type of <em>cksum</em> is a keyed checksum, <em>key</em> is used to verify the checksum. If the checksum type in <em>cksum</em> is 0 and <em>key</em> is not NULL, the mandatory checksum type for <em>key</em> will be used. The actual checksum key will be derived from <em>key</em> and <em>usage</em> if key derivation is specified for the checksum type.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function is similar to <a class="reference internal" href="krb5_c_verify_checksum.html#c.krb5_c_verify_checksum" title="krb5_c_verify_checksum"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_verify_checksum()</span></code></a> , but operates on opaque <em>key</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_verify_checksum - Verify a checksum (operates on opaque key).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_reference_key.html" title="krb5_k_reference_key - Increment the reference count on a key."
- >previous</a> |
- <a href="krb5_k_verify_checksum_iov.html" title="krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key)."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_verify_checksum - Verify a checksum (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key). — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_recvauth - Server function for sendauth protocol." href="krb5_recvauth.html" />
- <link rel="prev" title="krb5_k_verify_checksum - Verify a checksum (operates on opaque key)." href="krb5_k_verify_checksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_verify_checksum.html" title="krb5_k_verify_checksum - Verify a checksum (operates on opaque key)."
- accesskey="P">previous</a> |
- <a href="krb5_recvauth.html" title="krb5_recvauth - Server function for sendauth protocol."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-k-verify-checksum-iov-validate-a-checksum-element-in-iov-array-operates-on-opaque-key">
-<h1>krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key).<a class="headerlink" href="#krb5-k-verify-checksum-iov-validate-a-checksum-element-in-iov-array-operates-on-opaque-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_k_verify_checksum_iov">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_k_verify_checksum_iov</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> cksumtype</em>, <a class="reference internal" href="../types/krb5_key.html#c.krb5_key" title="krb5_key">krb5_key</a><em> key</em>, <a class="reference internal" href="../types/krb5_keyusage.html#c.krb5_keyusage" title="krb5_keyusage">krb5_keyusage</a><em> usage</em>, const <a class="reference internal" href="../types/krb5_crypto_iov.html#c.krb5_crypto_iov" title="krb5_crypto_iov">krb5_crypto_iov</a> *<em> data</em>, size_t<em> num_data</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> *<em> valid</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_k_verify_checksum_iov" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>cksumtype</strong> - Checksum type (0 for mandatory type)</p>
-<p><strong>[in]</strong> <strong>key</strong> - Encryption key for a keyed checksum</p>
-<p><strong>[in]</strong> <strong>usage</strong> - Key usage (see <code class="xref py py-data docutils literal"><span class="pre">KRB5_KEYUSAGE</span></code> types)</p>
-<p><strong>[in]</strong> <strong>data</strong> - IOV array</p>
-<p><strong>[in]</strong> <strong>num_data</strong> - Size of <em>data</em></p>
-<p class="last"><strong>[out]</strong> <strong>valid</strong> - Non-zero for success, zero for failure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Confirm that the checksum in the <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_CHECKSUM.html#KRB5_CRYPTO_TYPE_CHECKSUM" title="KRB5_CRYPTO_TYPE_CHECKSUM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_CHECKSUM</span></code></a> element is a valid checksum of the <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_DATA.html#KRB5_CRYPTO_TYPE_DATA" title="KRB5_CRYPTO_TYPE_DATA"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_DATA</span></code></a> and <a class="reference internal" href="../macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.html#KRB5_CRYPTO_TYPE_SIGN_ONLY" title="KRB5_CRYPTO_TYPE_SIGN_ONLY"><code class="xref py py-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_SIGN_ONLY</span></code></a> regions in the iov.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_k_make_checksum_iov.html#c.krb5_k_make_checksum_iov" title="krb5_k_make_checksum_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_k_make_checksum_iov()</span></code></a></p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function is similar to <a class="reference internal" href="krb5_c_verify_checksum_iov.html#c.krb5_c_verify_checksum_iov" title="krb5_c_verify_checksum_iov"><code class="xref c c-func docutils literal"><span class="pre">krb5_c_verify_checksum_iov()</span></code></a> , but operates on opaque <em>key</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key).</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_verify_checksum.html" title="krb5_k_verify_checksum - Verify a checksum (operates on opaque key)."
- >previous</a> |
- <a href="krb5_recvauth.html" title="krb5_recvauth - Server function for sendauth protocol."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key).">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature." href="krb5_kdc_verify_ticket.html" />
- <link rel="prev" title="krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM." href="krb5_is_referral_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_is_referral_realm.html" title="krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM."
- accesskey="P">previous</a> |
- <a href="krb5_kdc_verify_ticket.html" title="krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kdc-sign-ticket-sign-a-pac-possibly-including-a-ticket-signature">
-<h1>krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature.<a class="headerlink" href="#krb5-kdc-sign-ticket-sign-a-pac-possibly-including-a-ticket-signature" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kdc_sign_ticket">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kdc_sign_ticket</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part" title="krb5_enc_tkt_part">krb5_enc_tkt_part</a> *<em> enc_tkt</em>, const <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a><em> pac</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> server_princ</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> client_princ</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> server</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> privsvr</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a><em> with_realm</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kdc_sign_ticket" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enc_tkt</strong> - The ticket for the signature</p>
-<p><strong>[in]</strong> <strong>pac</strong> - PAC handle</p>
-<p><strong>[in]</strong> <strong>server_princ</strong> - Canonical ticket server name</p>
-<p><strong>[in]</strong> <strong>client_princ</strong> - PAC_CLIENT_INFO principal (or NULL)</p>
-<p><strong>[in]</strong> <strong>server</strong> - Key for server checksum</p>
-<p><strong>[in]</strong> <strong>privsvr</strong> - Key for KDC and ticket checksum</p>
-<p class="last"><strong>[in]</strong> <strong>with_realm</strong> - If true, include the realm of <em>principal</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 on success, otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Sign <em>pac</em> using the keys <em>server</em> and <em>privsvr</em> . Include a ticket signature over <em>enc_tkt</em> if <em>server_princ</em> is not a TGS or kadmin/changepw principal name. Add the signed PAC’s encoding to the authorization data of <em>enc_tkt</em> in the first slot, wrapped in an AD-IF-RELEVANT container. If <em>client_princ</em> is non-null, add a PAC_CLIENT_INFO buffer, including the realm if <em>with_realm</em> is true.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.20</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_is_referral_realm.html" title="krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM."
- >previous</a> |
- <a href="krb5_kdc_verify_ticket.html" title="krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_add_entry - Add a new entry to a key table." href="krb5_kt_add_entry.html" />
- <link rel="prev" title="krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature." href="krb5_kdc_sign_ticket.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kdc_sign_ticket.html" title="krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature."
- accesskey="P">previous</a> |
- <a href="krb5_kt_add_entry.html" title="krb5_kt_add_entry - Add a new entry to a key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kdc-verify-ticket-verify-a-pac-possibly-including-ticket-signature">
-<h1>krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.<a class="headerlink" href="#krb5-kdc-verify-ticket-verify-a-pac-possibly-including-ticket-signature" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kdc_verify_ticket">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kdc_verify_ticket</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part" title="krb5_enc_tkt_part">krb5_enc_tkt_part</a> *<em> enc_tkt</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> server_princ</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> server</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> privsvr</em>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a> *<em> pac_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kdc_verify_ticket" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enc_tkt</strong> - Ticket enc-part, possibly containing a PAC</p>
-<p><strong>[in]</strong> <strong>server_princ</strong> - Canonicalized name of ticket server</p>
-<p><strong>[in]</strong> <strong>server</strong> - Key to validate server checksum (or NULL)</p>
-<p><strong>[in]</strong> <strong>privsvr</strong> - Key to validate KDC checksum (or NULL)</p>
-<p class="last"><strong>[out]</strong> <strong>pac_out</strong> - Verified PAC (NULL if no PAC included)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>If a PAC is present in <em>enc_tkt</em> , verify its signatures. If <em>privsvr</em> is not NULL and <em>server_princ</em> is not a krbtgt or kadmin/changepw service, require a ticket signature over <em>enc_tkt</em> in addition to the KDC signature. Place the verified PAC in <em>pac_out</em> . If an invalid PAC signature is found, return an error matching the Windows KDC protocol code for that condition as closely as possible.</p>
-<p>If no PAC is present in <em>enc_tkt</em> , set <em>pac_out</em> to NULL and return successfully.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function does not validate the PAC_CLIENT_INFO buffer. If a specific value is expected, the caller can make a separate call to <a class="reference internal" href="krb5_pac_verify_ext.html#c.krb5_pac_verify_ext" title="krb5_pac_verify_ext"><code class="xref c c-func docutils literal"><span class="pre">krb5_pac_verify_ext()</span></code></a> with a principal but no keys.</p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.20</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kdc_sign_ticket.html" title="krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature."
- >previous</a> |
- <a href="krb5_kt_add_entry.html" title="krb5_kt_add_entry - Add a new entry to a key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_add_entry - Add a new entry to a key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_end_seq_get - Release a keytab cursor." href="krb5_kt_end_seq_get.html" />
- <link rel="prev" title="krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature." href="krb5_kdc_verify_ticket.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kdc_verify_ticket.html" title="krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature."
- accesskey="P">previous</a> |
- <a href="krb5_kt_end_seq_get.html" title="krb5_kt_end_seq_get - Release a keytab cursor."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_add_entry - Add a new entry to a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-add-entry-add-a-new-entry-to-a-key-table">
-<h1>krb5_kt_add_entry - Add a new entry to a key table.<a class="headerlink" href="#krb5-kt-add-entry-add-a-new-entry-to-a-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_add_entry">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_add_entry</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> id</em>, <a class="reference internal" href="../types/krb5_keytab_entry.html#c.krb5_keytab_entry" title="krb5_keytab_entry">krb5_keytab_entry</a> *<em> entry</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_add_entry" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>id</strong> - Key table handle</p>
-<p class="last"><strong>[in]</strong> <strong>entry</strong> - Entry to be added</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>ENOMEM Insufficient memory</li>
-<li>KRB5_KT_NOWRITE Key table is not writeable</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_add_entry - Add a new entry to a key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kdc_verify_ticket.html" title="krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature."
- >previous</a> |
- <a href="krb5_kt_end_seq_get.html" title="krb5_kt_end_seq_get - Release a keytab cursor."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_add_entry - Add a new entry to a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_client_default - Resolve the default client key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_default - Resolve the default key table." href="krb5_kt_default.html" />
- <link rel="prev" title="krb5_kt_close - Close a key table handle." href="krb5_kt_close.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_close.html" title="krb5_kt_close - Close a key table handle."
- accesskey="P">previous</a> |
- <a href="krb5_kt_default.html" title="krb5_kt_default - Resolve the default key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_client_default - Resolve the default client key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-client-default-resolve-the-default-client-key-table">
-<h1>krb5_kt_client_default - Resolve the default client key table.<a class="headerlink" href="#krb5-kt-client-default-resolve-the-default-client-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_client_default">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_client_default</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a> *<em> keytab_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_client_default" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>keytab_out</strong> - Key table handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Fill <em>keytab_out</em> with a handle to the default client key table.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_client_default - Resolve the default client key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_close.html" title="krb5_kt_close - Close a key table handle."
- >previous</a> |
- <a href="krb5_kt_default.html" title="krb5_kt_default - Resolve the default key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_client_default - Resolve the default client key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_close - Close a key table handle. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_client_default - Resolve the default client key table." href="krb5_kt_client_default.html" />
- <link rel="prev" title="krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support." href="krb5_is_thread_safe.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_is_thread_safe.html" title="krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support."
- accesskey="P">previous</a> |
- <a href="krb5_kt_client_default.html" title="krb5_kt_client_default - Resolve the default client key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_close - Close a key table handle.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-close-close-a-key-table-handle">
-<h1>krb5_kt_close - Close a key table handle.<a class="headerlink" href="#krb5-kt-close-close-a-key-table-handle" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_close">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_close</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_close" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>keytab</strong> - Key table handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 None</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_close - Close a key table handle.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_is_thread_safe.html" title="krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support."
- >previous</a> |
- <a href="krb5_kt_client_default.html" title="krb5_kt_client_default - Resolve the default client key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_close - Close a key table handle.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_default - Resolve the default key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_default_name - Get the default key table name." href="krb5_kt_default_name.html" />
- <link rel="prev" title="krb5_kt_client_default - Resolve the default client key table." href="krb5_kt_client_default.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_client_default.html" title="krb5_kt_client_default - Resolve the default client key table."
- accesskey="P">previous</a> |
- <a href="krb5_kt_default_name.html" title="krb5_kt_default_name - Get the default key table name."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_default - Resolve the default key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-default-resolve-the-default-key-table">
-<h1>krb5_kt_default - Resolve the default key table.<a class="headerlink" href="#krb5-kt-default-resolve-the-default-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_default">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_default</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a> *<em> id</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_default" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>id</strong> - Key table handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Set <em>id</em> to a handle to the default key table. The key table is not opened.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_default - Resolve the default key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_client_default.html" title="krb5_kt_client_default - Resolve the default client key table."
- >previous</a> |
- <a href="krb5_kt_default_name.html" title="krb5_kt_default_name - Get the default key table name."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_default - Resolve the default key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_default_name - Get the default key table name. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_dup - Duplicate keytab handle." href="krb5_kt_dup.html" />
- <link rel="prev" title="krb5_kt_default - Resolve the default key table." href="krb5_kt_default.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_default.html" title="krb5_kt_default - Resolve the default key table."
- accesskey="P">previous</a> |
- <a href="krb5_kt_dup.html" title="krb5_kt_dup - Duplicate keytab handle."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_default_name - Get the default key table name.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-default-name-get-the-default-key-table-name">
-<h1>krb5_kt_default_name - Get the default key table name.<a class="headerlink" href="#krb5-kt-default-name-get-the-default-key-table-name" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_default_name">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_default_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, char *<em> name</em>, int<em> name_size</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_default_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[out]</strong> <strong>name</strong> - Default key table name</p>
-<p class="last"><strong>[in]</strong> <strong>name_size</strong> - Space available in <em>name</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>KRB5_CONFIG_NOTENUFSPACE Buffer is too short</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Fill <em>name</em> with the name of the default key table for <em>context</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_default_name - Get the default key table name.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_default.html" title="krb5_kt_default - Resolve the default key table."
- >previous</a> |
- <a href="krb5_kt_dup.html" title="krb5_kt_dup - Duplicate keytab handle."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_default_name - Get the default key table name.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_dup - Duplicate keytab handle. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_get_name - Get a key table name." href="krb5_kt_get_name.html" />
- <link rel="prev" title="krb5_kt_default_name - Get the default key table name." href="krb5_kt_default_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_default_name.html" title="krb5_kt_default_name - Get the default key table name."
- accesskey="P">previous</a> |
- <a href="krb5_kt_get_name.html" title="krb5_kt_get_name - Get a key table name."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_dup - Duplicate keytab handle.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-dup-duplicate-keytab-handle">
-<h1>krb5_kt_dup - Duplicate keytab handle.<a class="headerlink" href="#krb5-kt-dup-duplicate-keytab-handle" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_dup">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_dup</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> in</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a> *<em> out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_dup" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>in</strong> - Key table handle to be duplicated</p>
-<p class="last"><strong>[out]</strong> <strong>out</strong> - Key table handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Create a new handle referring to the same key table as <em>in</em> . The new handle and <em>in</em> can be closed independently.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.12</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_dup - Duplicate keytab handle.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_default_name.html" title="krb5_kt_default_name - Get the default key table name."
- >previous</a> |
- <a href="krb5_kt_get_name.html" title="krb5_kt_get_name - Get a key table name."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_dup - Duplicate keytab handle.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_end_seq_get - Release a keytab cursor. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_get_entry - Get an entry from a key table." href="krb5_kt_get_entry.html" />
- <link rel="prev" title="krb5_kt_add_entry - Add a new entry to a key table." href="krb5_kt_add_entry.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_add_entry.html" title="krb5_kt_add_entry - Add a new entry to a key table."
- accesskey="P">previous</a> |
- <a href="krb5_kt_get_entry.html" title="krb5_kt_get_entry - Get an entry from a key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_end_seq_get - Release a keytab cursor.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-end-seq-get-release-a-keytab-cursor">
-<h1>krb5_kt_end_seq_get - Release a keytab cursor.<a class="headerlink" href="#krb5-kt-end-seq-get-release-a-keytab-cursor" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_end_seq_get">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_end_seq_get</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em>, <a class="reference internal" href="../types/krb5_kt_cursor.html#c.krb5_kt_cursor" title="krb5_kt_cursor">krb5_kt_cursor</a> *<em> cursor</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_end_seq_get" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>keytab</strong> - Key table handle</p>
-<p class="last"><strong>[out]</strong> <strong>cursor</strong> - Cursor</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function should be called to release the cursor created by <a class="reference internal" href="krb5_kt_start_seq_get.html#c.krb5_kt_start_seq_get" title="krb5_kt_start_seq_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_kt_start_seq_get()</span></code></a> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_end_seq_get - Release a keytab cursor.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_add_entry.html" title="krb5_kt_add_entry - Add a new entry to a key table."
- >previous</a> |
- <a href="krb5_kt_get_entry.html" title="krb5_kt_get_entry - Get an entry from a key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_end_seq_get - Release a keytab cursor.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_free_entry — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_random_key" href="krb5_random_key.html" />
- <link rel="prev" title="krb5_init_random_key" href="krb5_init_random_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_random_key.html" title="krb5_init_random_key"
- accesskey="P">previous</a> |
- <a href="krb5_random_key.html" title="krb5_random_key"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_free_entry">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-free-entry">
-<h1>krb5_kt_free_entry<a class="headerlink" href="#krb5-kt-free-entry" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_free_entry">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_free_entry</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab_entry.html#c.krb5_keytab_entry" title="krb5_keytab_entry">krb5_keytab_entry</a> *<em> entry</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_free_entry" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p class="last"><strong>entry</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Use krb5_free_keytab_entry_contents instead.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_free_entry</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_random_key.html" title="krb5_init_random_key"
- >previous</a> |
- <a href="krb5_random_key.html" title="krb5_random_key"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_free_entry">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_get_entry - Get an entry from a key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_have_content - Check if a keytab exists and contains entries." href="krb5_kt_have_content.html" />
- <link rel="prev" title="krb5_kt_end_seq_get - Release a keytab cursor." href="krb5_kt_end_seq_get.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_end_seq_get.html" title="krb5_kt_end_seq_get - Release a keytab cursor."
- accesskey="P">previous</a> |
- <a href="krb5_kt_have_content.html" title="krb5_kt_have_content - Check if a keytab exists and contains entries."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_get_entry - Get an entry from a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-get-entry-get-an-entry-from-a-key-table">
-<h1>krb5_kt_get_entry - Get an entry from a key table.<a class="headerlink" href="#krb5-kt-get-entry-get-an-entry-from-a-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_get_entry">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_get_entry</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, <a class="reference internal" href="../types/krb5_kvno.html#c.krb5_kvno" title="krb5_kvno">krb5_kvno</a><em> vno</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, <a class="reference internal" href="../types/krb5_keytab_entry.html#c.krb5_keytab_entry" title="krb5_keytab_entry">krb5_keytab_entry</a> *<em> entry</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_get_entry" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>keytab</strong> - Key table handle</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Principal name</p>
-<p><strong>[in]</strong> <strong>vno</strong> - Key version number (0 for highest available)</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type (0 zero for any enctype)</p>
-<p class="last"><strong>[out]</strong> <strong>entry</strong> - Returned entry from key table</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success</li>
-<li>Kerberos error codes on failure</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Retrieve an entry from a key table which matches the <em>keytab</em> , <em>principal</em> , <em>vno</em> , and <em>enctype</em> . If <em>vno</em> is zero, retrieve the highest-numbered kvno matching the other fields. If <em>enctype</em> is 0, match any enctype.</p>
-<p>Use <a class="reference internal" href="krb5_free_keytab_entry_contents.html#c.krb5_free_keytab_entry_contents" title="krb5_free_keytab_entry_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keytab_entry_contents()</span></code></a> to free <em>entry</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If <em>vno</em> is zero, the function retrieves the highest-numbered-kvno entry that matches the specified principal.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_get_entry - Get an entry from a key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_end_seq_get.html" title="krb5_kt_end_seq_get - Release a keytab cursor."
- >previous</a> |
- <a href="krb5_kt_have_content.html" title="krb5_kt_have_content - Check if a keytab exists and contains entries."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_get_entry - Get an entry from a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_get_name - Get a key table name. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_get_type - Return the type of a key table." href="krb5_kt_get_type.html" />
- <link rel="prev" title="krb5_kt_dup - Duplicate keytab handle." href="krb5_kt_dup.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_dup.html" title="krb5_kt_dup - Duplicate keytab handle."
- accesskey="P">previous</a> |
- <a href="krb5_kt_get_type.html" title="krb5_kt_get_type - Return the type of a key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_get_name - Get a key table name.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-get-name-get-a-key-table-name">
-<h1>krb5_kt_get_name - Get a key table name.<a class="headerlink" href="#krb5-kt-get-name-get-a-key-table-name" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_get_name">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_get_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em>, char *<em> name</em>, unsigned int<em> namelen</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_get_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>keytab</strong> - Key table handle</p>
-<p><strong>[out]</strong> <strong>name</strong> - Key table name</p>
-<p class="last"><strong>[in]</strong> <strong>namelen</strong> - Maximum length to fill in name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>KRB5_KT_NAME_TOOLONG Key table name does not fit in namelen bytes</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Fill <em>name</em> with the name of <em>keytab</em> including the type and delimiter.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_get_name - Get a key table name.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_dup.html" title="krb5_kt_dup - Duplicate keytab handle."
- >previous</a> |
- <a href="krb5_kt_get_type.html" title="krb5_kt_get_type - Return the type of a key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_get_name - Get a key table name.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_get_type - Return the type of a key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_resolve - Get a handle for a key table." href="krb5_kt_resolve.html" />
- <link rel="prev" title="krb5_kt_get_name - Get a key table name." href="krb5_kt_get_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_get_name.html" title="krb5_kt_get_name - Get a key table name."
- accesskey="P">previous</a> |
- <a href="krb5_kt_resolve.html" title="krb5_kt_resolve - Get a handle for a key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_get_type - Return the type of a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-get-type-return-the-type-of-a-key-table">
-<h1>krb5_kt_get_type - Return the type of a key table.<a class="headerlink" href="#krb5-kt-get-type-return-the-type-of-a-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_get_type">
-const char * <code class="descname">krb5_kt_get_type</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_get_type" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>keytab</strong> - Key table handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>The type of a key table as an alias that must not be modified or freed by the caller.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_get_type - Return the type of a key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_get_name.html" title="krb5_kt_get_name - Get a key table name."
- >previous</a> |
- <a href="krb5_kt_resolve.html" title="krb5_kt_resolve - Get a handle for a key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_get_type - Return the type of a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_have_content - Check if a keytab exists and contains entries. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_next_entry - Retrieve the next entry from the key table." href="krb5_kt_next_entry.html" />
- <link rel="prev" title="krb5_kt_get_entry - Get an entry from a key table." href="krb5_kt_get_entry.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_get_entry.html" title="krb5_kt_get_entry - Get an entry from a key table."
- accesskey="P">previous</a> |
- <a href="krb5_kt_next_entry.html" title="krb5_kt_next_entry - Retrieve the next entry from the key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_have_content - Check if a keytab exists and contains entries.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-have-content-check-if-a-keytab-exists-and-contains-entries">
-<h1>krb5_kt_have_content - Check if a keytab exists and contains entries.<a class="headerlink" href="#krb5-kt-have-content-check-if-a-keytab-exists-and-contains-entries" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_have_content">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_have_content</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_have_content" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>keytab</strong> - Key table handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Keytab exists and contains entries</li>
-<li>KRB5_KT_NOTFOUND Keytab does not contain entries</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_have_content - Check if a keytab exists and contains entries.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_get_entry.html" title="krb5_kt_get_entry - Get an entry from a key table."
- >previous</a> |
- <a href="krb5_kt_next_entry.html" title="krb5_kt_next_entry - Retrieve the next entry from the key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_have_content - Check if a keytab exists and contains entries.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_next_entry - Retrieve the next entry from the key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_read_service_key - Retrieve a service key from a key table." href="krb5_kt_read_service_key.html" />
- <link rel="prev" title="krb5_kt_have_content - Check if a keytab exists and contains entries." href="krb5_kt_have_content.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_have_content.html" title="krb5_kt_have_content - Check if a keytab exists and contains entries."
- accesskey="P">previous</a> |
- <a href="krb5_kt_read_service_key.html" title="krb5_kt_read_service_key - Retrieve a service key from a key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_next_entry - Retrieve the next entry from the key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-next-entry-retrieve-the-next-entry-from-the-key-table">
-<h1>krb5_kt_next_entry - Retrieve the next entry from the key table.<a class="headerlink" href="#krb5-kt-next-entry-retrieve-the-next-entry-from-the-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_next_entry">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_next_entry</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em>, <a class="reference internal" href="../types/krb5_keytab_entry.html#c.krb5_keytab_entry" title="krb5_keytab_entry">krb5_keytab_entry</a> *<em> entry</em>, <a class="reference internal" href="../types/krb5_kt_cursor.html#c.krb5_kt_cursor" title="krb5_kt_cursor">krb5_kt_cursor</a> *<em> cursor</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_next_entry" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>keytab</strong> - Key table handle</p>
-<p><strong>[out]</strong> <strong>entry</strong> - Returned key table entry</p>
-<p class="last"><strong>[in]</strong> <strong>cursor</strong> - Key table cursor</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>KRB5_KT_END - if the last entry was reached</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Return the next sequential entry in <em>keytab</em> and advance <em>cursor</em> . Callers must release the returned entry with <a class="reference internal" href="krb5_kt_free_entry.html#c.krb5_kt_free_entry" title="krb5_kt_free_entry"><code class="xref c c-func docutils literal"><span class="pre">krb5_kt_free_entry()</span></code></a> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_next_entry - Retrieve the next entry from the key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_have_content.html" title="krb5_kt_have_content - Check if a keytab exists and contains entries."
- >previous</a> |
- <a href="krb5_kt_read_service_key.html" title="krb5_kt_read_service_key - Retrieve a service key from a key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_next_entry - Retrieve the next entry from the key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_read_service_key - Retrieve a service key from a key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_remove_entry - Remove an entry from a key table." href="krb5_kt_remove_entry.html" />
- <link rel="prev" title="krb5_kt_next_entry - Retrieve the next entry from the key table." href="krb5_kt_next_entry.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_next_entry.html" title="krb5_kt_next_entry - Retrieve the next entry from the key table."
- accesskey="P">previous</a> |
- <a href="krb5_kt_remove_entry.html" title="krb5_kt_remove_entry - Remove an entry from a key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_read_service_key - Retrieve a service key from a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-read-service-key-retrieve-a-service-key-from-a-key-table">
-<h1>krb5_kt_read_service_key - Retrieve a service key from a key table.<a class="headerlink" href="#krb5-kt-read-service-key-retrieve-a-service-key-from-a-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_read_service_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_read_service_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a><em> keyprocarg</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> principal</em>, <a class="reference internal" href="../types/krb5_kvno.html#c.krb5_kvno" title="krb5_kvno">krb5_kvno</a><em> vno</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_read_service_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>keyprocarg</strong> - Name of a key table (NULL to use default name)</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Service principal</p>
-<p><strong>[in]</strong> <strong>vno</strong> - Key version number (0 for highest available)</p>
-<p><strong>[in]</strong> <strong>enctype</strong> - Encryption type (0 for any type)</p>
-<p class="last"><strong>[out]</strong> <strong>key</strong> - Service key from key table</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error code if not found or keyprocarg is invalid.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Open and search the specified key table for the entry identified by <em>principal</em> , <em>enctype</em> , and <em>vno</em> . If no key is found, return an error code.</p>
-<p>The default key table is used, unless <em>keyprocarg</em> is non-null. <em>keyprocarg</em> designates a specific key table.</p>
-<p>Use <a class="reference internal" href="krb5_free_keyblock.html#c.krb5_free_keyblock" title="krb5_free_keyblock"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_keyblock()</span></code></a> to free <em>key</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_read_service_key - Retrieve a service key from a key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_next_entry.html" title="krb5_kt_next_entry - Retrieve the next entry from the key table."
- >previous</a> |
- <a href="krb5_kt_remove_entry.html" title="krb5_kt_remove_entry - Remove an entry from a key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_read_service_key - Retrieve a service key from a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_remove_entry - Remove an entry from a key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_start_seq_get - Start a sequential retrieval of key table entries." href="krb5_kt_start_seq_get.html" />
- <link rel="prev" title="krb5_kt_read_service_key - Retrieve a service key from a key table." href="krb5_kt_read_service_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_read_service_key.html" title="krb5_kt_read_service_key - Retrieve a service key from a key table."
- accesskey="P">previous</a> |
- <a href="krb5_kt_start_seq_get.html" title="krb5_kt_start_seq_get - Start a sequential retrieval of key table entries."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_remove_entry - Remove an entry from a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-remove-entry-remove-an-entry-from-a-key-table">
-<h1>krb5_kt_remove_entry - Remove an entry from a key table.<a class="headerlink" href="#krb5-kt-remove-entry-remove-an-entry-from-a-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_remove_entry">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_remove_entry</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> id</em>, <a class="reference internal" href="../types/krb5_keytab_entry.html#c.krb5_keytab_entry" title="krb5_keytab_entry">krb5_keytab_entry</a> *<em> entry</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_remove_entry" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>id</strong> - Key table handle</p>
-<p class="last"><strong>[in]</strong> <strong>entry</strong> - Entry to remove from key table</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>KRB5_KT_NOWRITE Key table is not writable</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_remove_entry - Remove an entry from a key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_read_service_key.html" title="krb5_kt_read_service_key - Retrieve a service key from a key table."
- >previous</a> |
- <a href="krb5_kt_start_seq_get.html" title="krb5_kt_start_seq_get - Start a sequential retrieval of key table entries."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_remove_entry - Remove an entry from a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_resolve - Get a handle for a key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kuserok - Determine if a principal is authorized to log in as a local user." href="krb5_kuserok.html" />
- <link rel="prev" title="krb5_kt_get_type - Return the type of a key table." href="krb5_kt_get_type.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_get_type.html" title="krb5_kt_get_type - Return the type of a key table."
- accesskey="P">previous</a> |
- <a href="krb5_kuserok.html" title="krb5_kuserok - Determine if a principal is authorized to log in as a local user."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_resolve - Get a handle for a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-resolve-get-a-handle-for-a-key-table">
-<h1>krb5_kt_resolve - Get a handle for a key table.<a class="headerlink" href="#krb5-kt-resolve-get-a-handle-for-a-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_resolve">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_resolve</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> name</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a> *<em> ktid</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_resolve" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>name</strong> - Name of the key table</p>
-<p class="last"><strong>[out]</strong> <strong>ktid</strong> - Key table handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Resolve the key table name <em>name</em> and set <em>ktid</em> to a handle identifying the key table. Use <a class="reference internal" href="krb5_kt_close.html#c.krb5_kt_close" title="krb5_kt_close"><code class="xref c c-func docutils literal"><span class="pre">krb5_kt_close()</span></code></a> to free <em>ktid</em> when it is no longer needed.</p>
-<blockquote>
-<div><em>name</em> must be of the form <strong>type:residual</strong> , where <em>type</em> must be a type known to the library and <em>residual</em> portion should be specific to the particular keytab type. If no <em>type</em> is given, the default is <strong>FILE</strong> .</div></blockquote>
-<p>If <em>name</em> is of type <strong>FILE</strong> , the keytab file is not opened by this call.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_resolve - Get a handle for a key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_get_type.html" title="krb5_kt_get_type - Return the type of a key table."
- >previous</a> |
- <a href="krb5_kuserok.html" title="krb5_kuserok - Determine if a principal is authorized to log in as a local user."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_resolve - Get a handle for a key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_start_seq_get - Start a sequential retrieval of key table entries. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data." href="krb5_make_authdata_kdc_issued.html" />
- <link rel="prev" title="krb5_kt_remove_entry - Remove an entry from a key table." href="krb5_kt_remove_entry.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_remove_entry.html" title="krb5_kt_remove_entry - Remove an entry from a key table."
- accesskey="P">previous</a> |
- <a href="krb5_make_authdata_kdc_issued.html" title="krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_start_seq_get - Start a sequential retrieval of key table entries.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-start-seq-get-start-a-sequential-retrieval-of-key-table-entries">
-<h1>krb5_kt_start_seq_get - Start a sequential retrieval of key table entries.<a class="headerlink" href="#krb5-kt-start-seq-get-start-a-sequential-retrieval-of-key-table-entries" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kt_start_seq_get">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kt_start_seq_get</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em>, <a class="reference internal" href="../types/krb5_kt_cursor.html#c.krb5_kt_cursor" title="krb5_kt_cursor">krb5_kt_cursor</a> *<em> cursor</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kt_start_seq_get" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>keytab</strong> - Key table handle</p>
-<p class="last"><strong>[out]</strong> <strong>cursor</strong> - Cursor</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Prepare to read sequentially every key in the specified key table. Use <a class="reference internal" href="krb5_kt_end_seq_get.html#c.krb5_kt_end_seq_get" title="krb5_kt_end_seq_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_kt_end_seq_get()</span></code></a> to release the cursor when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_start_seq_get - Start a sequential retrieval of key table entries.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_remove_entry.html" title="krb5_kt_remove_entry - Remove an entry from a key table."
- >previous</a> |
- <a href="krb5_make_authdata_kdc_issued.html" title="krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_start_seq_get - Start a sequential retrieval of key table entries.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kuserok - Determine if a principal is authorized to log in as a local user. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_parse_name - Convert a string principal name to a krb5_principal structure." href="krb5_parse_name.html" />
- <link rel="prev" title="krb5_kt_resolve - Get a handle for a key table." href="krb5_kt_resolve.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_resolve.html" title="krb5_kt_resolve - Get a handle for a key table."
- accesskey="P">previous</a> |
- <a href="krb5_parse_name.html" title="krb5_parse_name - Convert a string principal name to a krb5_principal structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kuserok - Determine if a principal is authorized to log in as a local user.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kuserok-determine-if-a-principal-is-authorized-to-log-in-as-a-local-user">
-<h1>krb5_kuserok - Determine if a principal is authorized to log in as a local user.<a class="headerlink" href="#krb5-kuserok-determine-if-a-principal-is-authorized-to-log-in-as-a-local-user" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_kuserok">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_kuserok</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> principal</em>, const char *<em> luser</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kuserok" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Principal name</p>
-<p class="last"><strong>[in]</strong> <strong>luser</strong> - Local username</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE Principal is authorized to log in as user; FALSE otherwise.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Determine whether <em>principal</em> is authorized to log in as a local user <em>luser</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kuserok - Determine if a principal is authorized to log in as a local user.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_resolve.html" title="krb5_kt_resolve - Get a handle for a key table."
- >previous</a> |
- <a href="krb5_parse_name.html" title="krb5_parse_name - Convert a string principal name to a krb5_principal structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kuserok - Determine if a principal is authorized to log in as a local user.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_marshal_credentials - Serialize a krb5_creds object." href="krb5_marshal_credentials.html" />
- <link rel="prev" title="krb5_kt_start_seq_get - Start a sequential retrieval of key table entries." href="krb5_kt_start_seq_get.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_start_seq_get.html" title="krb5_kt_start_seq_get - Start a sequential retrieval of key table entries."
- accesskey="P">previous</a> |
- <a href="krb5_marshal_credentials.html" title="krb5_marshal_credentials - Serialize a krb5_creds object."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-make-authdata-kdc-issued-encode-and-sign-ad-kdcissued-authorization-data">
-<h1>krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data.<a class="headerlink" href="#krb5-make-authdata-kdc-issued-encode-and-sign-ad-kdcissued-authorization-data" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_make_authdata_kdc_issued">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_make_authdata_kdc_issued</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> issuer</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> *const *<em> authdata</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ***<em> ad_kdcissued</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_make_authdata_kdc_issued" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Session key</p>
-<p><strong>[in]</strong> <strong>issuer</strong> - The name of the issuing principal</p>
-<p><strong>[in]</strong> <strong>authdata</strong> - List of authorization data to be signed</p>
-<p class="last"><strong>[out]</strong> <strong>ad_kdcissued</strong> - List containing AD-KDCIssued authdata</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function wraps a list of authorization data entries <em>authdata</em> in an AD-KDCIssued container (see RFC 4120 section 5.2.6.2) signed with <em>key</em> . The result is returned in <em>ad_kdcissued</em> as a single-element list.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_start_seq_get.html" title="krb5_kt_start_seq_get - Start a sequential retrieval of key table entries."
- >previous</a> |
- <a href="krb5_marshal_credentials.html" title="krb5_marshal_credentials - Serialize a krb5_creds object."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_marshal_credentials - Serialize a krb5_creds object. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_merge_authdata - Merge two authorization data lists into a new list." href="krb5_merge_authdata.html" />
- <link rel="prev" title="krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data." href="krb5_make_authdata_kdc_issued.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_make_authdata_kdc_issued.html" title="krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data."
- accesskey="P">previous</a> |
- <a href="krb5_merge_authdata.html" title="krb5_merge_authdata - Merge two authorization data lists into a new list."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_marshal_credentials - Serialize a krb5_creds object.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-marshal-credentials-serialize-a-krb5-creds-object">
-<h1>krb5_marshal_credentials - Serialize a krb5_creds object.<a class="headerlink" href="#krb5-marshal-credentials-serialize-a-krb5-creds-object" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_marshal_credentials">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_marshal_credentials</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> in_creds</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> **<em> data_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_marshal_credentials" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>in_creds</strong> - The credentials object to serialize</p>
-<p class="last"><strong>[out]</strong> <strong>data_out</strong> - The serialized credentials</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Serialize <em>creds</em> in the format used by the FILE ccache format (vesion 4) and KCM ccache protocol.</p>
-<p>Use <a class="reference internal" href="krb5_free_data.html#c.krb5_free_data" title="krb5_free_data"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data()</span></code></a> to free <em>data_out</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_marshal_credentials - Serialize a krb5_creds object.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_make_authdata_kdc_issued.html" title="krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data."
- >previous</a> |
- <a href="krb5_merge_authdata.html" title="krb5_merge_authdata - Merge two authorization data lists into a new list."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_marshal_credentials - Serialize a krb5_creds object.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_merge_authdata - Merge two authorization data lists into a new list. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials." href="krb5_mk_1cred.html" />
- <link rel="prev" title="krb5_marshal_credentials - Serialize a krb5_creds object." href="krb5_marshal_credentials.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_marshal_credentials.html" title="krb5_marshal_credentials - Serialize a krb5_creds object."
- accesskey="P">previous</a> |
- <a href="krb5_mk_1cred.html" title="krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_merge_authdata - Merge two authorization data lists into a new list.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-merge-authdata-merge-two-authorization-data-lists-into-a-new-list">
-<h1>krb5_merge_authdata - Merge two authorization data lists into a new list.<a class="headerlink" href="#krb5-merge-authdata-merge-two-authorization-data-lists-into-a-new-list" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_merge_authdata">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_merge_authdata</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> *const *<em> inauthdat1</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> *const *<em> inauthdat2</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ***<em> outauthdat</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_merge_authdata" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>inauthdat1</strong> - First list of <em>krb5_authdata</em> structures</p>
-<p><strong>[in]</strong> <strong>inauthdat2</strong> - Second list of <em>krb5_authdata</em> structures</p>
-<p class="last"><strong>[out]</strong> <strong>outauthdat</strong> - Merged list of <em>krb5_authdata</em> structures</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Merge two authdata arrays, such as the array from a ticket and authenticator. Use <a class="reference internal" href="krb5_free_authdata.html#c.krb5_free_authdata" title="krb5_free_authdata"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_authdata()</span></code></a> to free <em>outauthdat</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The last array entry in <em>inauthdat1</em> and <em>inauthdat2</em> must be a NULL pointer.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_merge_authdata - Merge two authorization data lists into a new list.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_marshal_credentials.html" title="krb5_marshal_credentials - Serialize a krb5_creds object."
- >previous</a> |
- <a href="krb5_mk_1cred.html" title="krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_merge_authdata - Merge two authorization data lists into a new list.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_mk_error - Format and encode a KRB_ERROR message." href="krb5_mk_error.html" />
- <link rel="prev" title="krb5_merge_authdata - Merge two authorization data lists into a new list." href="krb5_merge_authdata.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_merge_authdata.html" title="krb5_merge_authdata - Merge two authorization data lists into a new list."
- accesskey="P">previous</a> |
- <a href="krb5_mk_error.html" title="krb5_mk_error - Format and encode a KRB_ERROR message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-mk-1cred-format-a-krb-cred-message-for-a-single-set-of-credentials">
-<h1>krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials.<a class="headerlink" href="#krb5-mk-1cred-format-a-krb-cred-message-for-a-single-set-of-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_mk_1cred">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_mk_1cred</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> **<em> der_out</em>, <a class="reference internal" href="../types/krb5_replay_data.html#c.krb5_replay_data" title="krb5_replay_data">krb5_replay_data</a> *<em> rdata_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_mk_1cred" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>creds</strong> - Pointer to credentials</p>
-<p><strong>[out]</strong> <strong>der_out</strong> - Encoded credentials</p>
-<p class="last"><strong>[out]</strong> <strong>rdata_out</strong> - Replay cache data (NULL if not needed)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>ENOMEM Insufficient memory</li>
-<li>KRB5_RC_REQUIRED Message replay detection requires rcache parameter</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This is a convenience function that calls <a class="reference internal" href="krb5_mk_ncred.html#c.krb5_mk_ncred" title="krb5_mk_ncred"><code class="xref c c-func docutils literal"><span class="pre">krb5_mk_ncred()</span></code></a> with a single set of credentials.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_merge_authdata.html" title="krb5_merge_authdata - Merge two authorization data lists into a new list."
- >previous</a> |
- <a href="krb5_mk_error.html" title="krb5_mk_error - Format and encode a KRB_ERROR message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_mk_error - Format and encode a KRB_ERROR message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_mk_ncred - Format a KRB-CRED message for an array of credentials." href="krb5_mk_ncred.html" />
- <link rel="prev" title="krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials." href="krb5_mk_1cred.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_mk_1cred.html" title="krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials."
- accesskey="P">previous</a> |
- <a href="krb5_mk_ncred.html" title="krb5_mk_ncred - Format a KRB-CRED message for an array of credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_error - Format and encode a KRB_ERROR message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-mk-error-format-and-encode-a-krb-error-message">
-<h1>krb5_mk_error - Format and encode a KRB_ERROR message.<a class="headerlink" href="#krb5-mk-error-format-and-encode-a-krb-error-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_mk_error">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_mk_error</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_error.html#c.krb5_error" title="krb5_error">krb5_error</a> *<em> dec_err</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> enc_err</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_mk_error" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>dec_err</strong> - Error structure to be encoded</p>
-<p class="last"><strong>[out]</strong> <strong>enc_err</strong> - Encoded error structure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates a <strong>KRB_ERROR</strong> message in <em>enc_err</em> . Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>enc_err</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_mk_error - Format and encode a KRB_ERROR message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_mk_1cred.html" title="krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials."
- >previous</a> |
- <a href="krb5_mk_ncred.html" title="krb5_mk_ncred - Format a KRB-CRED message for an array of credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_error - Format and encode a KRB_ERROR message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_mk_ncred - Format a KRB-CRED message for an array of credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_mk_priv - Format a KRB-PRIV message." href="krb5_mk_priv.html" />
- <link rel="prev" title="krb5_mk_error - Format and encode a KRB_ERROR message." href="krb5_mk_error.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_mk_error.html" title="krb5_mk_error - Format and encode a KRB_ERROR message."
- accesskey="P">previous</a> |
- <a href="krb5_mk_priv.html" title="krb5_mk_priv - Format a KRB-PRIV message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_ncred - Format a KRB-CRED message for an array of credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-mk-ncred-format-a-krb-cred-message-for-an-array-of-credentials">
-<h1>krb5_mk_ncred - Format a KRB-CRED message for an array of credentials.<a class="headerlink" href="#krb5-mk-ncred-format-a-krb-cred-message-for-an-array-of-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_mk_ncred">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_mk_ncred</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> **<em> creds</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> **<em> der_out</em>, <a class="reference internal" href="../types/krb5_replay_data.html#c.krb5_replay_data" title="krb5_replay_data">krb5_replay_data</a> *<em> rdata_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_mk_ncred" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>creds</strong> - Null-terminated array of credentials</p>
-<p><strong>[out]</strong> <strong>der_out</strong> - Encoded credentials</p>
-<p class="last"><strong>[out]</strong> <strong>rdata_out</strong> - Replay cache information (NULL if not needed)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>ENOMEM Insufficient memory</li>
-<li>KRB5_RC_REQUIRED Message replay detection requires rcache parameter</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function takes an array of credentials <em>creds</em> and formats a <strong>KRB-CRED</strong> message <em>der_out</em> to pass to <a class="reference internal" href="krb5_rd_cred.html#c.krb5_rd_cred" title="krb5_rd_cred"><code class="xref c c-func docutils literal"><span class="pre">krb5_rd_cred()</span></code></a> .</p>
-<p>The local and remote addresses in <em>auth_context</em> are optional; if either is specified, they are used to form the sender and receiver addresses in the KRB-CRED message.</p>
-<p>If the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> flag is set in <em>auth_context</em> , an entry for the message is entered in an in-memory replay cache to detect if the message is reflected by an attacker. If <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> is not set, no replay cache is used. If <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> is set in <em>auth_context</em> , the timestamp used for the KRB-CRED message is stored in <em>rdata_out</em> .</p>
-<p>If either <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></a> or <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> is set, the <em>auth_context</em> local sequence number is included in the KRB-CRED message and then incremented. If <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> is set, the sequence number used is stored in <em>rdata_out</em> .</p>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>der_out</em> when it is no longer needed.</p>
-<p>The message will be encrypted using the send subkey of <em>auth_context</em> if it is present, or the session key otherwise. If neither key is present, the credentials will not be encrypted, and the message should only be sent over a secure channel. No replay cache entry is used in this case.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The <em>rdata_out</em> argument is required if the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> or <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> flag is set in <em>auth_context</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_mk_ncred - Format a KRB-CRED message for an array of credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_mk_error.html" title="krb5_mk_error - Format and encode a KRB_ERROR message."
- >previous</a> |
- <a href="krb5_mk_priv.html" title="krb5_mk_priv - Format a KRB-PRIV message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_ncred - Format a KRB-CRED message for an array of credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_mk_priv - Format a KRB-PRIV message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_mk_rep - Format and encrypt a KRB_AP_REP message." href="krb5_mk_rep.html" />
- <link rel="prev" title="krb5_mk_ncred - Format a KRB-CRED message for an array of credentials." href="krb5_mk_ncred.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_mk_ncred.html" title="krb5_mk_ncred - Format a KRB-CRED message for an array of credentials."
- accesskey="P">previous</a> |
- <a href="krb5_mk_rep.html" title="krb5_mk_rep - Format and encrypt a KRB_AP_REP message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_priv - Format a KRB-PRIV message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-mk-priv-format-a-krb-priv-message">
-<h1>krb5_mk_priv - Format a KRB-PRIV message.<a class="headerlink" href="#krb5-mk-priv-format-a-krb-priv-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_mk_priv">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_mk_priv</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> userdata</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> der_out</em>, <a class="reference internal" href="../types/krb5_replay_data.html#c.krb5_replay_data" title="krb5_replay_data">krb5_replay_data</a> *<em> rdata_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_mk_priv" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>userdata</strong> - User data for <strong>KRB-PRIV</strong> message</p>
-<p><strong>[out]</strong> <strong>der_out</strong> - Formatted <strong>KRB-PRIV</strong> message</p>
-<p class="last"><strong>[out]</strong> <strong>rdata_out</strong> - Replay data (NULL if not needed)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is similar to <a class="reference internal" href="krb5_mk_safe.html#c.krb5_mk_safe" title="krb5_mk_safe"><code class="xref c c-func docutils literal"><span class="pre">krb5_mk_safe()</span></code></a> , but the message is encrypted and integrity-protected, not just integrity-protected.</p>
-<p>The local address in <em>auth_context</em> must be set, and is used to form the sender address used in the KRB-PRIV message. The remote address is optional; if specified, it will be used to form the receiver address used in the message.</p>
-<p>If the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> flag is set in <em>auth_context</em> , a timestamp is included in the KRB-PRIV message, and an entry for the message is entered in an in-memory replay cache to detect if the message is reflected by an attacker. If <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> is not set, no replay cache is used. If <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> is set in <em>auth_context</em> , a timestamp is included in the KRB-PRIV message and is stored in <em>rdata_out</em> .</p>
-<p>If either <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></a> or <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> is set, the <em>auth_context</em> local sequence number is included in the KRB-PRIV message and then incremented. If <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> is set, the sequence number used is stored in <em>rdata_out</em> .</p>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>der_out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The <em>rdata_out</em> argument is required if the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> or <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> flag is set in <em>auth_context</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_mk_priv - Format a KRB-PRIV message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_mk_ncred.html" title="krb5_mk_ncred - Format a KRB-CRED message for an array of credentials."
- >previous</a> |
- <a href="krb5_mk_rep.html" title="krb5_mk_rep - Format and encrypt a KRB_AP_REP message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_priv - Format a KRB-PRIV message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_mk_rep - Format and encrypt a KRB_AP_REP message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC." href="krb5_mk_rep_dce.html" />
- <link rel="prev" title="krb5_mk_priv - Format a KRB-PRIV message." href="krb5_mk_priv.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_mk_priv.html" title="krb5_mk_priv - Format a KRB-PRIV message."
- accesskey="P">previous</a> |
- <a href="krb5_mk_rep_dce.html" title="krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_rep - Format and encrypt a KRB_AP_REP message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-mk-rep-format-and-encrypt-a-krb-ap-rep-message">
-<h1>krb5_mk_rep - Format and encrypt a KRB_AP_REP message.<a class="headerlink" href="#krb5-mk-rep-format-and-encrypt-a-krb-ap-rep-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_mk_rep">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_mk_rep</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> outbuf</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_mk_rep" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>outbuf</strong> - <strong>AP-REP</strong> message</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function fills in <em>outbuf</em> with an AP-REP message using information from <em>auth_context</em> .</p>
-<p>If the flags in <em>auth_context</em> indicate that a sequence number should be used (either <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></a> or <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> ) and the local sequence number in <em>auth_context</em> is 0, a new number will be generated with krb5_generate_seq_number().</p>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>outbuf</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_mk_rep - Format and encrypt a KRB_AP_REP message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_mk_priv.html" title="krb5_mk_priv - Format a KRB-PRIV message."
- >previous</a> |
- <a href="krb5_mk_rep_dce.html" title="krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_rep - Format and encrypt a KRB_AP_REP message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_mk_req - Create a KRB_AP_REQ message." href="krb5_mk_req.html" />
- <link rel="prev" title="krb5_mk_rep - Format and encrypt a KRB_AP_REP message." href="krb5_mk_rep.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_mk_rep.html" title="krb5_mk_rep - Format and encrypt a KRB_AP_REP message."
- accesskey="P">previous</a> |
- <a href="krb5_mk_req.html" title="krb5_mk_req - Create a KRB_AP_REQ message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-mk-rep-dce-format-and-encrypt-a-krb-ap-rep-message-for-dce-rpc">
-<h1>krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC.<a class="headerlink" href="#krb5-mk-rep-dce-format-and-encrypt-a-krb-ap-rep-message-for-dce-rpc" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_mk_rep_dce">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_mk_rep_dce</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> outbuf</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_mk_rep_dce" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p class="last"><strong>[out]</strong> <strong>outbuf</strong> - <strong>AP-REP</strong> message</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>outbuf</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_mk_rep.html" title="krb5_mk_rep - Format and encrypt a KRB_AP_REP message."
- >previous</a> |
- <a href="krb5_mk_req.html" title="krb5_mk_req - Create a KRB_AP_REQ message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_mk_req - Create a KRB_AP_REQ message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials." href="krb5_mk_req_extended.html" />
- <link rel="prev" title="krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC." href="krb5_mk_rep_dce.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_mk_rep_dce.html" title="krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC."
- accesskey="P">previous</a> |
- <a href="krb5_mk_req_extended.html" title="krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_req - Create a KRB_AP_REQ message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-mk-req-create-a-krb-ap-req-message">
-<h1>krb5_mk_req - Create a KRB_AP_REQ message.<a class="headerlink" href="#krb5-mk-req-create-a-krb-ap-req-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_mk_req">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_mk_req</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a> *<em> auth_context</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> ap_req_options</em>, const char *<em> service</em>, const char *<em> hostname</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> in_data</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> outbuf</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_mk_req" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[inout]</strong> <strong>auth_context</strong> - Pre-existing or newly created auth context</p>
-<p><strong>[in]</strong> <strong>ap_req_options</strong> - <code class="xref py py-data docutils literal"><span class="pre">AP_OPTS</span></code> options</p>
-<p><strong>[in]</strong> <strong>service</strong> - Service name, or NULL to use <strong>“host”</strong></p>
-<p><strong>[in]</strong> <strong>hostname</strong> - Host name, or NULL to use local hostname</p>
-<p><strong>[in]</strong> <strong>in_data</strong> - Application data to be checksummed in the authenticator, or NULL</p>
-<p><strong>[in]</strong> <strong>ccache</strong> - Credential cache used to obtain credentials for the desired service.</p>
-<p class="last"><strong>[out]</strong> <strong>outbuf</strong> - <strong>AP-REQ</strong> message</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is similar to <a class="reference internal" href="krb5_mk_req_extended.html#c.krb5_mk_req_extended" title="krb5_mk_req_extended"><code class="xref c c-func docutils literal"><span class="pre">krb5_mk_req_extended()</span></code></a> except that it uses a given <em>hostname</em> , <em>service</em> , and <em>ccache</em> to construct a service principal name and obtain credentials.</p>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>outbuf</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_mk_req - Create a KRB_AP_REQ message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_mk_rep_dce.html" title="krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC."
- >previous</a> |
- <a href="krb5_mk_req_extended.html" title="krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_req - Create a KRB_AP_REQ message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_mk_safe - Format a KRB-SAFE message." href="krb5_mk_safe.html" />
- <link rel="prev" title="krb5_mk_req - Create a KRB_AP_REQ message." href="krb5_mk_req.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_mk_req.html" title="krb5_mk_req - Create a KRB_AP_REQ message."
- accesskey="P">previous</a> |
- <a href="krb5_mk_safe.html" title="krb5_mk_safe - Format a KRB-SAFE message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-mk-req-extended-create-a-krb-ap-req-message-using-supplied-credentials">
-<h1>krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials.<a class="headerlink" href="#krb5-mk-req-extended-create-a-krb-ap-req-message-using-supplied-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_mk_req_extended">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_mk_req_extended</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a> *<em> auth_context</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> ap_req_options</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> in_data</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> in_creds</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> outbuf</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_mk_req_extended" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[inout]</strong> <strong>auth_context</strong> - Pre-existing or newly created auth context</p>
-<p><strong>[in]</strong> <strong>ap_req_options</strong> - <code class="xref py py-data docutils literal"><span class="pre">AP_OPTS</span></code> options</p>
-<p><strong>[in]</strong> <strong>in_data</strong> - Application data to be checksummed in the authenticator, or NULL</p>
-<p><strong>[in]</strong> <strong>in_creds</strong> - Credentials for the service with valid ticket and key</p>
-<p class="last"><strong>[out]</strong> <strong>outbuf</strong> - <strong>AP-REQ</strong> message</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Valid <em>ap_req_options</em> are:</p>
-<blockquote>
-<div><blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/AP_OPTS_USE_SESSION_KEY.html#AP_OPTS_USE_SESSION_KEY" title="AP_OPTS_USE_SESSION_KEY"><code class="xref py py-data docutils literal"><span class="pre">AP_OPTS_USE_SESSION_KEY</span></code></a> - Use the session key when creating the request used for user to user authentication.</li>
-<li><a class="reference internal" href="../macros/AP_OPTS_MUTUAL_REQUIRED.html#AP_OPTS_MUTUAL_REQUIRED" title="AP_OPTS_MUTUAL_REQUIRED"><code class="xref py py-data docutils literal"><span class="pre">AP_OPTS_MUTUAL_REQUIRED</span></code></a> - Request a mutual authentication packet from the receiver.</li>
-<li><a class="reference internal" href="../macros/AP_OPTS_USE_SUBKEY.html#AP_OPTS_USE_SUBKEY" title="AP_OPTS_USE_SUBKEY"><code class="xref py py-data docutils literal"><span class="pre">AP_OPTS_USE_SUBKEY</span></code></a> - Generate a subsession key from the current session key obtained from the credentials.</li>
-</ul>
-</div></blockquote>
-<p>This function creates a KRB_AP_REQ message using supplied credentials <em>in_creds</em> . <em>auth_context</em> may point to an existing auth context or to NULL, in which case a new one will be created. If <em>in_data</em> is non-null, a checksum of it will be included in the authenticator contained in the KRB_AP_REQ message. Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>outbuf</em> when it is no longer needed.</p>
-</div></blockquote>
-<p>On successful return, the authenticator is stored in <em>auth_context</em> with the <em>client</em> and <em>checksum</em> fields nulled out. (This is to prevent pointer-sharing problems; the caller should not need these fields anyway, since the caller supplied them.)</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_mk_req.html#c.krb5_mk_req" title="krb5_mk_req"><code class="xref c c-func docutils literal"><span class="pre">krb5_mk_req()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_mk_req.html" title="krb5_mk_req - Create a KRB_AP_REQ message."
- >previous</a> |
- <a href="krb5_mk_safe.html" title="krb5_mk_safe - Format a KRB-SAFE message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_mk_safe - Format a KRB-SAFE message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_os_localaddr - Return all interface addresses for this host." href="krb5_os_localaddr.html" />
- <link rel="prev" title="krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials." href="krb5_mk_req_extended.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_mk_req_extended.html" title="krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials."
- accesskey="P">previous</a> |
- <a href="krb5_os_localaddr.html" title="krb5_os_localaddr - Return all interface addresses for this host."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_safe - Format a KRB-SAFE message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-mk-safe-format-a-krb-safe-message">
-<h1>krb5_mk_safe - Format a KRB-SAFE message.<a class="headerlink" href="#krb5-mk-safe-format-a-krb-safe-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_mk_safe">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_mk_safe</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> userdata</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> der_out</em>, <a class="reference internal" href="../types/krb5_replay_data.html#c.krb5_replay_data" title="krb5_replay_data">krb5_replay_data</a> *<em> rdata_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_mk_safe" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>userdata</strong> - User data in the message</p>
-<p><strong>[out]</strong> <strong>der_out</strong> - Formatted <strong>KRB-SAFE</strong> buffer</p>
-<p class="last"><strong>[out]</strong> <strong>rdata_out</strong> - Replay data. Specify NULL if not needed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function creates an integrity protected <strong>KRB-SAFE</strong> message using data supplied by the application.</p>
-<p>Fields in <em>auth_context</em> specify the checksum type, the keyblock that can be used to seed the checksum, full addresses (host and port) for the sender and receiver, and <code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT</span></code> flags.</p>
-<p>The local address in <em>auth_context</em> must be set, and is used to form the sender address used in the KRB-SAFE message. The remote address is optional; if specified, it will be used to form the receiver address used in the message.</p>
-<p>If the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> flag is set in <em>auth_context</em> , a timestamp is included in the KRB-SAFE message, and an entry for the message is entered in an in-memory replay cache to detect if the message is reflected by an attacker. If <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> is not set, no replay cache is used. If <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> is set in <em>auth_context</em> , a timestamp is included in the KRB-SAFE message and is stored in <em>rdata_out</em> .</p>
-<p>If either <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></a> or <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> is set, the <em>auth_context</em> local sequence number is included in the KRB-SAFE message and then incremented. If <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> is set, the sequence number used is stored in <em>rdata_out</em> .</p>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>der_out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The <em>rdata_out</em> argument is required if the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> or <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> flag is set in <em>auth_context</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_mk_safe - Format a KRB-SAFE message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_mk_req_extended.html" title="krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials."
- >previous</a> |
- <a href="krb5_os_localaddr.html" title="krb5_os_localaddr - Return all interface addresses for this host."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_safe - Format a KRB-SAFE message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_os_localaddr - Return all interface addresses for this host. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_add_buffer - Add a buffer to a PAC handle." href="krb5_pac_add_buffer.html" />
- <link rel="prev" title="krb5_mk_safe - Format a KRB-SAFE message." href="krb5_mk_safe.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_mk_safe.html" title="krb5_mk_safe - Format a KRB-SAFE message."
- accesskey="P">previous</a> |
- <a href="krb5_pac_add_buffer.html" title="krb5_pac_add_buffer - Add a buffer to a PAC handle."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_os_localaddr - Return all interface addresses for this host.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-os-localaddr-return-all-interface-addresses-for-this-host">
-<h1>krb5_os_localaddr - Return all interface addresses for this host.<a class="headerlink" href="#krb5-os-localaddr-return-all-interface-addresses-for-this-host" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_os_localaddr">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_os_localaddr</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> ***<em> addr</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_os_localaddr" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>addr</strong> - Array of krb5_address pointers, ending with NULL</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_free_addresses.html#c.krb5_free_addresses" title="krb5_free_addresses"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_addresses()</span></code></a> to free <em>addr</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_os_localaddr - Return all interface addresses for this host.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_mk_safe.html" title="krb5_mk_safe - Format a KRB-SAFE message."
- >previous</a> |
- <a href="krb5_pac_add_buffer.html" title="krb5_pac_add_buffer - Add a buffer to a PAC handle."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_os_localaddr - Return all interface addresses for this host.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_add_buffer - Add a buffer to a PAC handle. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_free - Free a PAC handle." href="krb5_pac_free.html" />
- <link rel="prev" title="krb5_os_localaddr - Return all interface addresses for this host." href="krb5_os_localaddr.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_os_localaddr.html" title="krb5_os_localaddr - Return all interface addresses for this host."
- accesskey="P">previous</a> |
- <a href="krb5_pac_free.html" title="krb5_pac_free - Free a PAC handle."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_add_buffer - Add a buffer to a PAC handle.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-add-buffer-add-a-buffer-to-a-pac-handle">
-<h1>krb5_pac_add_buffer - Add a buffer to a PAC handle.<a class="headerlink" href="#krb5-pac-add-buffer-add-a-buffer-to-a-pac-handle" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_add_buffer">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_pac_add_buffer</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a><em> pac</em>, <a class="reference internal" href="../types/krb5_ui_4.html#c.krb5_ui_4" title="krb5_ui_4">krb5_ui_4</a><em> type</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_add_buffer" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>pac</strong> - PAC handle</p>
-<p><strong>[in]</strong> <strong>type</strong> - Buffer type</p>
-<p class="last"><strong>[in]</strong> <strong>data</strong> - contents</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function adds a buffer of type <em>type</em> and contents <em>data</em> to <em>pac</em> if there isn’t already a buffer of this type present.</p>
-<p>The valid values of <em>type</em> is one of the following:</p>
-<blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_PAC_LOGON_INFO.html#KRB5_PAC_LOGON_INFO" title="KRB5_PAC_LOGON_INFO"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PAC_LOGON_INFO</span></code></a> - Logon information</li>
-<li><a class="reference internal" href="../macros/KRB5_PAC_CREDENTIALS_INFO.html#KRB5_PAC_CREDENTIALS_INFO" title="KRB5_PAC_CREDENTIALS_INFO"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PAC_CREDENTIALS_INFO</span></code></a> - Credentials information</li>
-<li><a class="reference internal" href="../macros/KRB5_PAC_SERVER_CHECKSUM.html#KRB5_PAC_SERVER_CHECKSUM" title="KRB5_PAC_SERVER_CHECKSUM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PAC_SERVER_CHECKSUM</span></code></a> - Server checksum</li>
-<li><a class="reference internal" href="../macros/KRB5_PAC_PRIVSVR_CHECKSUM.html#KRB5_PAC_PRIVSVR_CHECKSUM" title="KRB5_PAC_PRIVSVR_CHECKSUM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PAC_PRIVSVR_CHECKSUM</span></code></a> - KDC checksum</li>
-<li><a class="reference internal" href="../macros/KRB5_PAC_CLIENT_INFO.html#KRB5_PAC_CLIENT_INFO" title="KRB5_PAC_CLIENT_INFO"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PAC_CLIENT_INFO</span></code></a> - Client name and ticket information</li>
-<li><a class="reference internal" href="../macros/KRB5_PAC_DELEGATION_INFO.html#KRB5_PAC_DELEGATION_INFO" title="KRB5_PAC_DELEGATION_INFO"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PAC_DELEGATION_INFO</span></code></a> - Constrained delegation information</li>
-<li><a class="reference internal" href="../macros/KRB5_PAC_UPN_DNS_INFO.html#KRB5_PAC_UPN_DNS_INFO" title="KRB5_PAC_UPN_DNS_INFO"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PAC_UPN_DNS_INFO</span></code></a> - User principal name and DNS information</li>
-</ul>
-</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_add_buffer - Add a buffer to a PAC handle.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_os_localaddr.html" title="krb5_os_localaddr - Return all interface addresses for this host."
- >previous</a> |
- <a href="krb5_pac_free.html" title="krb5_pac_free - Free a PAC handle."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_add_buffer - Add a buffer to a PAC handle.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_free - Free a PAC handle. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_get_buffer - Retrieve a buffer value from a PAC." href="krb5_pac_get_buffer.html" />
- <link rel="prev" title="krb5_pac_add_buffer - Add a buffer to a PAC handle." href="krb5_pac_add_buffer.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_add_buffer.html" title="krb5_pac_add_buffer - Add a buffer to a PAC handle."
- accesskey="P">previous</a> |
- <a href="krb5_pac_get_buffer.html" title="krb5_pac_get_buffer - Retrieve a buffer value from a PAC."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_free - Free a PAC handle.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-free-free-a-pac-handle">
-<h1>krb5_pac_free - Free a PAC handle.<a class="headerlink" href="#krb5-pac-free-free-a-pac-handle" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_free">
-void <code class="descname">krb5_pac_free</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a><em> pac</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_free" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>pac</strong> - PAC to be freed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function frees the contents of <em>pac</em> and the structure itself.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_free - Free a PAC handle.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_add_buffer.html" title="krb5_pac_add_buffer - Add a buffer to a PAC handle."
- >previous</a> |
- <a href="krb5_pac_get_buffer.html" title="krb5_pac_get_buffer - Retrieve a buffer value from a PAC."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_free - Free a PAC handle.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_get_buffer - Retrieve a buffer value from a PAC. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_get_types - Return an array of buffer types in a PAC handle." href="krb5_pac_get_types.html" />
- <link rel="prev" title="krb5_pac_free - Free a PAC handle." href="krb5_pac_free.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_free.html" title="krb5_pac_free - Free a PAC handle."
- accesskey="P">previous</a> |
- <a href="krb5_pac_get_types.html" title="krb5_pac_get_types - Return an array of buffer types in a PAC handle."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_get_buffer - Retrieve a buffer value from a PAC.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-get-buffer-retrieve-a-buffer-value-from-a-pac">
-<h1>krb5_pac_get_buffer - Retrieve a buffer value from a PAC.<a class="headerlink" href="#krb5-pac-get-buffer-retrieve-a-buffer-value-from-a-pac" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_get_buffer">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_pac_get_buffer</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a><em> pac</em>, <a class="reference internal" href="../types/krb5_ui_4.html#c.krb5_ui_4" title="krb5_ui_4">krb5_ui_4</a><em> type</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_get_buffer" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>pac</strong> - PAC handle</p>
-<p><strong>[in]</strong> <strong>type</strong> - Type of buffer to retrieve</p>
-<p class="last"><strong>[out]</strong> <strong>data</strong> - Buffer value</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>data</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_get_buffer - Retrieve a buffer value from a PAC.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_free.html" title="krb5_pac_free - Free a PAC handle."
- >previous</a> |
- <a href="krb5_pac_get_types.html" title="krb5_pac_get_types - Return an array of buffer types in a PAC handle."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_get_buffer - Retrieve a buffer value from a PAC.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_get_client_info - Read client information from a PAC. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_prepend_error_message - Add a prefix to the message for an error code." href="krb5_prepend_error_message.html" />
- <link rel="prev" title="krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm." href="krb5_pac_verify_ext.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_verify_ext.html" title="krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm."
- accesskey="P">previous</a> |
- <a href="krb5_prepend_error_message.html" title="krb5_prepend_error_message - Add a prefix to the message for an error code."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_get_client_info - Read client information from a PAC.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-get-client-info-read-client-information-from-a-pac">
-<h1>krb5_pac_get_client_info - Read client information from a PAC.<a class="headerlink" href="#krb5-pac-get-client-info-read-client-information-from-a-pac" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_get_client_info">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_pac_get_client_info</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a><em> pac</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> *<em> authtime_out</em>, char **<em> princname_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_get_client_info" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>pac</strong> - PAC handle</p>
-<p><strong>[out]</strong> <strong>authtime_out</strong> - Authentication timestamp (NULL if not needed)</p>
-<p class="last"><strong>[out]</strong> <strong>princname_out</strong> - Client account name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 on success, ENOENT if no PAC_CLIENT_INFO buffer is present in pac , ERANGE if the buffer contains invalid lengths.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Read the PAC_CLIENT_INFO buffer in <em>pac</em> . Place the client account name as a string in <em>princname_out</em> . If <em>authtime_out</em> is not NULL, place the initial authentication timestamp in <em>authtime_out</em> .</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.18</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_get_client_info - Read client information from a PAC.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_verify_ext.html" title="krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm."
- >previous</a> |
- <a href="krb5_prepend_error_message.html" title="krb5_prepend_error_message - Add a prefix to the message for an error code."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_get_client_info - Read client information from a PAC.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_get_types - Return an array of buffer types in a PAC handle. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle." href="krb5_pac_init.html" />
- <link rel="prev" title="krb5_pac_get_buffer - Retrieve a buffer value from a PAC." href="krb5_pac_get_buffer.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_get_buffer.html" title="krb5_pac_get_buffer - Retrieve a buffer value from a PAC."
- accesskey="P">previous</a> |
- <a href="krb5_pac_init.html" title="krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_get_types - Return an array of buffer types in a PAC handle.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-get-types-return-an-array-of-buffer-types-in-a-pac-handle">
-<h1>krb5_pac_get_types - Return an array of buffer types in a PAC handle.<a class="headerlink" href="#krb5-pac-get-types-return-an-array-of-buffer-types-in-a-pac-handle" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_get_types">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_pac_get_types</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a><em> pac</em>, size_t *<em> len</em>, <a class="reference internal" href="../types/krb5_ui_4.html#c.krb5_ui_4" title="krb5_ui_4">krb5_ui_4</a> **<em> types</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_get_types" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>pac</strong> - PAC handle</p>
-<p><strong>[out]</strong> <strong>len</strong> - Number of entries in <em>types</em></p>
-<p class="last"><strong>[out]</strong> <strong>types</strong> - Array of buffer types</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_get_types - Return an array of buffer types in a PAC handle.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_get_buffer.html" title="krb5_pac_get_buffer - Retrieve a buffer value from a PAC."
- >previous</a> |
- <a href="krb5_pac_init.html" title="krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_get_types - Return an array of buffer types in a PAC handle.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_parse - Unparse an encoded PAC into a new handle." href="krb5_pac_parse.html" />
- <link rel="prev" title="krb5_pac_get_types - Return an array of buffer types in a PAC handle." href="krb5_pac_get_types.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_get_types.html" title="krb5_pac_get_types - Return an array of buffer types in a PAC handle."
- accesskey="P">previous</a> |
- <a href="krb5_pac_parse.html" title="krb5_pac_parse - Unparse an encoded PAC into a new handle."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-init-create-an-empty-privilege-attribute-certificate-pac-handle">
-<h1>krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle.<a class="headerlink" href="#krb5-pac-init-create-an-empty-privilege-attribute-certificate-pac-handle" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_init">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_pac_init</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a> *<em> pac</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_init" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>pac</strong> - New PAC handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_pac_free.html#c.krb5_pac_free" title="krb5_pac_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_pac_free()</span></code></a> to free <em>pac</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_get_types.html" title="krb5_pac_get_types - Return an array of buffer types in a PAC handle."
- >previous</a> |
- <a href="krb5_pac_parse.html" title="krb5_pac_parse - Unparse an encoded PAC into a new handle."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_parse - Unparse an encoded PAC into a new handle. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_sign" href="krb5_pac_sign.html" />
- <link rel="prev" title="krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle." href="krb5_pac_init.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_init.html" title="krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle."
- accesskey="P">previous</a> |
- <a href="krb5_pac_sign.html" title="krb5_pac_sign"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_parse - Unparse an encoded PAC into a new handle.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-parse-unparse-an-encoded-pac-into-a-new-handle">
-<h1>krb5_pac_parse - Unparse an encoded PAC into a new handle.<a class="headerlink" href="#krb5-pac-parse-unparse-an-encoded-pac-into-a-new-handle" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_parse">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_pac_parse</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const void *<em> ptr</em>, size_t<em> len</em>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a> *<em> pac</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_parse" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ptr</strong> - PAC buffer</p>
-<p><strong>[in]</strong> <strong>len</strong> - Length of <em>ptr</em></p>
-<p class="last"><strong>[out]</strong> <strong>pac</strong> - PAC handle</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Use <a class="reference internal" href="krb5_pac_free.html#c.krb5_pac_free" title="krb5_pac_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_pac_free()</span></code></a> to free <em>pac</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_parse - Unparse an encoded PAC into a new handle.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_init.html" title="krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle."
- >previous</a> |
- <a href="krb5_pac_sign.html" title="krb5_pac_sign"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_parse - Unparse an encoded PAC into a new handle.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_sign — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_sign_ext" href="krb5_pac_sign_ext.html" />
- <link rel="prev" title="krb5_pac_parse - Unparse an encoded PAC into a new handle." href="krb5_pac_parse.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_parse.html" title="krb5_pac_parse - Unparse an encoded PAC into a new handle."
- accesskey="P">previous</a> |
- <a href="krb5_pac_sign_ext.html" title="krb5_pac_sign_ext"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_sign">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-sign">
-<h1>krb5_pac_sign<a class="headerlink" href="#krb5-pac-sign" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_sign">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_pac_sign</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a><em> pac</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a><em> authtime</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> server_key</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> privsvr_key</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_sign" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>pac</strong></p>
-<p><strong>authtime</strong></p>
-<p><strong>principal</strong></p>
-<p><strong>server_key</strong></p>
-<p><strong>privsvr_key</strong></p>
-<p class="last"><strong>data</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Use krb5_kdc_sign_ticket() instead.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_sign</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_parse.html" title="krb5_pac_parse - Unparse an encoded PAC into a new handle."
- >previous</a> |
- <a href="krb5_pac_sign_ext.html" title="krb5_pac_sign_ext"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_sign">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_sign_ext — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_verify - Verify a PAC." href="krb5_pac_verify.html" />
- <link rel="prev" title="krb5_pac_sign" href="krb5_pac_sign.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_sign.html" title="krb5_pac_sign"
- accesskey="P">previous</a> |
- <a href="krb5_pac_verify.html" title="krb5_pac_verify - Verify a PAC."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_sign_ext">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-sign-ext">
-<h1>krb5_pac_sign_ext<a class="headerlink" href="#krb5-pac-sign-ext" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_sign_ext">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_pac_sign_ext</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a><em> pac</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a><em> authtime</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> server_key</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> privsvr_key</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a><em> with_realm</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_sign_ext" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>pac</strong></p>
-<p><strong>authtime</strong></p>
-<p><strong>principal</strong></p>
-<p><strong>server_key</strong></p>
-<p><strong>privsvr_key</strong></p>
-<p><strong>with_realm</strong></p>
-<p class="last"><strong>data</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Use krb5_kdc_sign_ticket() instead.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_sign_ext</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_sign.html" title="krb5_pac_sign"
- >previous</a> |
- <a href="krb5_pac_verify.html" title="krb5_pac_verify - Verify a PAC."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_sign_ext">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_verify - Verify a PAC. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm." href="krb5_pac_verify_ext.html" />
- <link rel="prev" title="krb5_pac_sign_ext" href="krb5_pac_sign_ext.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_sign_ext.html" title="krb5_pac_sign_ext"
- accesskey="P">previous</a> |
- <a href="krb5_pac_verify_ext.html" title="krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_verify - Verify a PAC.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-verify-verify-a-pac">
-<h1>krb5_pac_verify - Verify a PAC.<a class="headerlink" href="#krb5-pac-verify-verify-a-pac" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_verify">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_pac_verify</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a><em> pac</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a><em> authtime</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> server</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> privsvr</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_verify" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>pac</strong> - PAC handle</p>
-<p><strong>[in]</strong> <strong>authtime</strong> - Expected timestamp</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Expected principal name (or NULL)</p>
-<p><strong>[in]</strong> <strong>server</strong> - Key to validate server checksum (or NULL)</p>
-<p class="last"><strong>[in]</strong> <strong>privsvr</strong> - Key to validate KDC checksum (or NULL)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function validates <em>pac</em> against the supplied <em>server</em> , <em>privsvr</em> , <em>principal</em> and <em>authtime</em> . If <em>principal</em> is NULL, the principal and authtime are not verified. If <em>server</em> or <em>privsvr</em> is NULL, the corresponding checksum is not verified.</p>
-<p>If successful, <em>pac</em> is marked as verified.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">A checksum mismatch can occur if the PAC was copied from a cross-realm TGT by an ignorant KDC; also macOS Server Open Directory (as of 10.6) generates PACs with no server checksum at all. One should consider not failing the whole authentication because of this reason, but, instead, treating the ticket as if it did not contain a PAC or marking the PAC information as non-verified.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_verify - Verify a PAC.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_sign_ext.html" title="krb5_pac_sign_ext"
- >previous</a> |
- <a href="krb5_pac_verify_ext.html" title="krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_verify - Verify a PAC.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac_get_client_info - Read client information from a PAC." href="krb5_pac_get_client_info.html" />
- <link rel="prev" title="krb5_pac_verify - Verify a PAC." href="krb5_pac_verify.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_verify.html" title="krb5_pac_verify - Verify a PAC."
- accesskey="P">previous</a> |
- <a href="krb5_pac_get_client_info.html" title="krb5_pac_get_client_info - Read client information from a PAC."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-verify-ext-verify-a-pac-possibly-from-a-specified-realm">
-<h1>krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm.<a class="headerlink" href="#krb5-pac-verify-ext-verify-a-pac-possibly-from-a-specified-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_pac_verify_ext">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_pac_verify_ext</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a><em> pac</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a><em> authtime</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> server</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> privsvr</em>, <a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a><em> with_realm</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_pac_verify_ext" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>pac</strong> - PAC handle</p>
-<p><strong>[in]</strong> <strong>authtime</strong> - Expected timestamp</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Expected principal name (or NULL)</p>
-<p><strong>[in]</strong> <strong>server</strong> - Key to validate server checksum (or NULL)</p>
-<p><strong>[in]</strong> <strong>privsvr</strong> - Key to validate KDC checksum (or NULL)</p>
-<p class="last"><strong>[in]</strong> <strong>with_realm</strong> - If true, expect the realm of <em>principal</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is similar to <a class="reference internal" href="krb5_pac_verify.html#c.krb5_pac_verify" title="krb5_pac_verify"><code class="xref c c-func docutils literal"><span class="pre">krb5_pac_verify()</span></code></a> , but adds a parameter <em>with_realm</em> . If <em>with_realm</em> is true, the PAC_CLIENT_INFO field is expected to include the realm of <em>principal</em> as well as the name. This flag is necessary to verify PACs in cross-realm S4U2Self referral TGTs.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.17</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_verify.html" title="krb5_pac_verify - Verify a PAC."
- >previous</a> |
- <a href="krb5_pac_get_client_info.html" title="krb5_pac_get_client_info - Read client information from a PAC."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_parse_name - Convert a string principal name to a krb5_principal structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags." href="krb5_parse_name_flags.html" />
- <link rel="prev" title="krb5_kuserok - Determine if a principal is authorized to log in as a local user." href="krb5_kuserok.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kuserok.html" title="krb5_kuserok - Determine if a principal is authorized to log in as a local user."
- accesskey="P">previous</a> |
- <a href="krb5_parse_name_flags.html" title="krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_parse_name - Convert a string principal name to a krb5_principal structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-parse-name-convert-a-string-principal-name-to-a-krb5-principal-structure">
-<h1>krb5_parse_name - Convert a string principal name to a krb5_principal structure.<a class="headerlink" href="#krb5-parse-name-convert-a-string-principal-name-to-a-krb5-principal-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_parse_name">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_parse_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> name</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> principal_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_parse_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>name</strong> - String representation of a principal name</p>
-<p class="last"><strong>[out]</strong> <strong>principal_out</strong> - New principal</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Convert a string representation of a principal name to a krb5_principal structure.</p>
-<p>A string representation of a Kerberos name consists of one or more principal name components, separated by slashes, optionally followed by the @ character and a realm name. If the realm name is not specified, the local realm is used.</p>
-<p>To use the slash and @ symbols as part of a component (quoted) instead of using them as a component separator or as a realm prefix), put a backslash () character in front of the symbol. Similarly, newline, tab, backspace, and NULL characters can be included in a component by using <strong>n</strong> , <strong>t</strong> , <strong>b</strong> or <strong>0</strong> , respectively.</p>
-<p>Beginning with release 1.20, the name type of the principal will be inferred as <strong>KRB5_NT_SRV_INST</strong> or <strong>KRB5_NT_WELLKNOWN</strong> based on the principal name. The type will be <strong>KRB5_NT_PRINCIPAL</strong> if a type cannot be inferred.</p>
-<p>Use <a class="reference internal" href="krb5_free_principal.html#c.krb5_free_principal" title="krb5_free_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_principal()</span></code></a> to free <em>principal_out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The realm in a Kerberos <em>name</em> cannot contain slash, colon, or NULL characters.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_parse_name - Convert a string principal name to a krb5_principal structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kuserok.html" title="krb5_kuserok - Determine if a principal is authorized to log in as a local user."
- >previous</a> |
- <a href="krb5_parse_name_flags.html" title="krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_parse_name - Convert a string principal name to a krb5_principal structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_principal_compare - Compare two principals." href="krb5_principal_compare.html" />
- <link rel="prev" title="krb5_parse_name - Convert a string principal name to a krb5_principal structure." href="krb5_parse_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_parse_name.html" title="krb5_parse_name - Convert a string principal name to a krb5_principal structure."
- accesskey="P">previous</a> |
- <a href="krb5_principal_compare.html" title="krb5_principal_compare - Compare two principals."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-parse-name-flags-convert-a-string-principal-name-to-a-krb5-principal-with-flags">
-<h1>krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags.<a class="headerlink" href="#krb5-parse-name-flags-convert-a-string-principal-name-to-a-krb5-principal-with-flags" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_parse_name_flags">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_parse_name_flags</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> name</em>, int<em> flags</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> principal_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_parse_name_flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>name</strong> - String representation of a principal name</p>
-<p><strong>[in]</strong> <strong>flags</strong> - Flag</p>
-<p class="last"><strong>[out]</strong> <strong>principal_out</strong> - New principal</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Similar to <a class="reference internal" href="krb5_parse_name.html#c.krb5_parse_name" title="krb5_parse_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_parse_name()</span></code></a> , this function converts a single-string representation of a principal name to a krb5_principal structure.</p>
-<p>The following flags are valid:</p>
-<blockquote>
-<div><blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_PARSE_NO_REALM.html#KRB5_PRINCIPAL_PARSE_NO_REALM" title="KRB5_PRINCIPAL_PARSE_NO_REALM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_PARSE_NO_REALM</span></code></a> - no realm must be present in <em>name</em></li>
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html#KRB5_PRINCIPAL_PARSE_REQUIRE_REALM" title="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_PARSE_REQUIRE_REALM</span></code></a> - realm must be present in <em>name</em></li>
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE.html#KRB5_PRINCIPAL_PARSE_ENTERPRISE" title="KRB5_PRINCIPAL_PARSE_ENTERPRISE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_PARSE_ENTERPRISE</span></code></a> - create single-component enterprise principal</li>
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html#KRB5_PRINCIPAL_PARSE_IGNORE_REALM" title="KRB5_PRINCIPAL_PARSE_IGNORE_REALM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_PARSE_IGNORE_REALM</span></code></a> - ignore realm if present in <em>name</em></li>
-</ul>
-</div></blockquote>
-<p>If <strong>KRB5_PRINCIPAL_PARSE_NO_REALM</strong> or <strong>KRB5_PRINCIPAL_PARSE_IGNORE_REALM</strong> is specified in <em>flags</em> , the realm of the new principal will be empty. Otherwise, the default realm for <em>context</em> will be used if <em>name</em> does not specify a realm.</p>
-</div></blockquote>
-<p>Use <a class="reference internal" href="krb5_free_principal.html#c.krb5_free_principal" title="krb5_free_principal"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_principal()</span></code></a> to free <em>principal_out</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_parse_name.html" title="krb5_parse_name - Convert a string principal name to a krb5_principal structure."
- >previous</a> |
- <a href="krb5_principal_compare.html" title="krb5_principal_compare - Compare two principals."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_prepend_error_message - Add a prefix to the message for an error code. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_principal2salt - Convert a principal name into the default salt for that principal." href="krb5_principal2salt.html" />
- <link rel="prev" title="krb5_pac_get_client_info - Read client information from a PAC." href="krb5_pac_get_client_info.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac_get_client_info.html" title="krb5_pac_get_client_info - Read client information from a PAC."
- accesskey="P">previous</a> |
- <a href="krb5_principal2salt.html" title="krb5_principal2salt - Convert a principal name into the default salt for that principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_prepend_error_message - Add a prefix to the message for an error code.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-prepend-error-message-add-a-prefix-to-the-message-for-an-error-code">
-<h1>krb5_prepend_error_message - Add a prefix to the message for an error code.<a class="headerlink" href="#krb5-prepend-error-message-add-a-prefix-to-the-message-for-an-error-code" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_prepend_error_message">
-void <code class="descname">krb5_prepend_error_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a><em> code</em>, const char *<em> fmt</em>, ...<span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_prepend_error_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>code</strong> - Error code</p>
-<p class="last"><strong>[in]</strong> <strong>fmt</strong> - Format string for error message prefix</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Format a message and prepend it to the current message for <em>code</em> . The prefix will be separated from the old message with a colon and space.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_prepend_error_message - Add a prefix to the message for an error code.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac_get_client_info.html" title="krb5_pac_get_client_info - Read client information from a PAC."
- >previous</a> |
- <a href="krb5_principal2salt.html" title="krb5_principal2salt - Convert a principal name into the default salt for that principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_prepend_error_message - Add a prefix to the message for an error code.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_principal2salt - Convert a principal name into the default salt for that principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_rd_cred - Read and validate a KRB-CRED message." href="krb5_rd_cred.html" />
- <link rel="prev" title="krb5_prepend_error_message - Add a prefix to the message for an error code." href="krb5_prepend_error_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_prepend_error_message.html" title="krb5_prepend_error_message - Add a prefix to the message for an error code."
- accesskey="P">previous</a> |
- <a href="krb5_rd_cred.html" title="krb5_rd_cred - Read and validate a KRB-CRED message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal2salt - Convert a principal name into the default salt for that principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal2salt-convert-a-principal-name-into-the-default-salt-for-that-principal">
-<h1>krb5_principal2salt - Convert a principal name into the default salt for that principal.<a class="headerlink" href="#krb5-principal2salt-convert-a-principal-name-into-the-default-salt-for-that-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_principal2salt">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_principal2salt</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> pr</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> ret</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_principal2salt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>pr</strong> - Principal name</p>
-<p class="last"><strong>[out]</strong> <strong>ret</strong> - Default salt for <em>pr</em> to be filled in</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_principal2salt - Convert a principal name into the default salt for that principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_prepend_error_message.html" title="krb5_prepend_error_message - Add a prefix to the message for an error code."
- >previous</a> |
- <a href="krb5_rd_cred.html" title="krb5_rd_cred - Read and validate a KRB-CRED message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal2salt - Convert a principal name into the default salt for that principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_principal_compare - Compare two principals. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_principal_compare_any_realm - Compare two principals ignoring realm components." href="krb5_principal_compare_any_realm.html" />
- <link rel="prev" title="krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags." href="krb5_parse_name_flags.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_parse_name_flags.html" title="krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags."
- accesskey="P">previous</a> |
- <a href="krb5_principal_compare_any_realm.html" title="krb5_principal_compare_any_realm - Compare two principals ignoring realm components."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal_compare - Compare two principals.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-compare-compare-two-principals">
-<h1>krb5_principal_compare - Compare two principals.<a class="headerlink" href="#krb5-principal-compare-compare-two-principals" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_principal_compare">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_principal_compare</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> princ1</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> princ2</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_principal_compare" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>princ1</strong> - First principal</p>
-<p class="last"><strong>[in]</strong> <strong>princ2</strong> - Second principal</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if the principals are the same; FALSE otherwise</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_principal_compare - Compare two principals.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_parse_name_flags.html" title="krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags."
- >previous</a> |
- <a href="krb5_principal_compare_any_realm.html" title="krb5_principal_compare_any_realm - Compare two principals ignoring realm components."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal_compare - Compare two principals.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_principal_compare_any_realm - Compare two principals ignoring realm components. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_principal_compare_flags - Compare two principals with additional flags." href="krb5_principal_compare_flags.html" />
- <link rel="prev" title="krb5_principal_compare - Compare two principals." href="krb5_principal_compare.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_principal_compare.html" title="krb5_principal_compare - Compare two principals."
- accesskey="P">previous</a> |
- <a href="krb5_principal_compare_flags.html" title="krb5_principal_compare_flags - Compare two principals with additional flags."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal_compare_any_realm - Compare two principals ignoring realm components.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-compare-any-realm-compare-two-principals-ignoring-realm-components">
-<h1>krb5_principal_compare_any_realm - Compare two principals ignoring realm components.<a class="headerlink" href="#krb5-principal-compare-any-realm-compare-two-principals-ignoring-realm-components" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_principal_compare_any_realm">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_principal_compare_any_realm</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> princ1</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> princ2</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_principal_compare_any_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>princ1</strong> - First principal</p>
-<p class="last"><strong>[in]</strong> <strong>princ2</strong> - Second principal</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if the principals are the same; FALSE otherwise</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Similar to <a class="reference internal" href="krb5_principal_compare.html#c.krb5_principal_compare" title="krb5_principal_compare"><code class="xref c c-func docutils literal"><span class="pre">krb5_principal_compare()</span></code></a> , but do not compare the realm components of the principals.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_principal_compare_any_realm - Compare two principals ignoring realm components.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_principal_compare.html" title="krb5_principal_compare - Compare two principals."
- >previous</a> |
- <a href="krb5_principal_compare_flags.html" title="krb5_principal_compare_flags - Compare two principals with additional flags."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal_compare_any_realm - Compare two principals ignoring realm components.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_principal_compare_flags - Compare two principals with additional flags. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_prompter_posix - Prompt user for password." href="krb5_prompter_posix.html" />
- <link rel="prev" title="krb5_principal_compare_any_realm - Compare two principals ignoring realm components." href="krb5_principal_compare_any_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_principal_compare_any_realm.html" title="krb5_principal_compare_any_realm - Compare two principals ignoring realm components."
- accesskey="P">previous</a> |
- <a href="krb5_prompter_posix.html" title="krb5_prompter_posix - Prompt user for password."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal_compare_flags - Compare two principals with additional flags.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-compare-flags-compare-two-principals-with-additional-flags">
-<h1>krb5_principal_compare_flags - Compare two principals with additional flags.<a class="headerlink" href="#krb5-principal-compare-flags-compare-two-principals-with-additional-flags" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_principal_compare_flags">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_principal_compare_flags</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> princ1</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> princ2</em>, int<em> flags</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_principal_compare_flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>princ1</strong> - First principal</p>
-<p><strong>[in]</strong> <strong>princ2</strong> - Second principal</p>
-<p class="last"><strong>[in]</strong> <strong>flags</strong> - Flags</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if the principal names are the same; FALSE otherwise</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Valid flags are:</p>
-<blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html#KRB5_PRINCIPAL_COMPARE_IGNORE_REALM" title="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_COMPARE_IGNORE_REALM</span></code></a> - ignore realm component</li>
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html#KRB5_PRINCIPAL_COMPARE_ENTERPRISE" title="KRB5_PRINCIPAL_COMPARE_ENTERPRISE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_COMPARE_ENTERPRISE</span></code></a> - UPNs as real principals</li>
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD.html#KRB5_PRINCIPAL_COMPARE_CASEFOLD" title="KRB5_PRINCIPAL_COMPARE_CASEFOLD"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_COMPARE_CASEFOLD</span></code></a> case-insensitive</li>
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_COMPARE_UTF8.html#KRB5_PRINCIPAL_COMPARE_UTF8" title="KRB5_PRINCIPAL_COMPARE_UTF8"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_COMPARE_UTF8</span></code></a> - treat principals as UTF-8</li>
-</ul>
-</div></blockquote>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_principal_compare.html#c.krb5_principal_compare" title="krb5_principal_compare"><code class="xref c c-func docutils literal"><span class="pre">krb5_principal_compare()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_principal_compare_flags - Compare two principals with additional flags.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_principal_compare_any_realm.html" title="krb5_principal_compare_any_realm - Compare two principals ignoring realm components."
- >previous</a> |
- <a href="krb5_prompter_posix.html" title="krb5_prompter_posix - Prompt user for password."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal_compare_flags - Compare two principals with additional flags.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_process_key — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_string_to_key" href="krb5_string_to_key.html" />
- <link rel="prev" title="krb5_random_key" href="krb5_random_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_random_key.html" title="krb5_random_key"
- accesskey="P">previous</a> |
- <a href="krb5_string_to_key.html" title="krb5_string_to_key"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_process_key">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-process-key">
-<h1>krb5_process_key<a class="headerlink" href="#krb5-process-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_process_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_process_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_encrypt_block.html#c.krb5_encrypt_block" title="krb5_encrypt_block">krb5_encrypt_block</a> *<em> eblock</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_process_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>eblock</strong></p>
-<p class="last"><strong>key</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_c_* API family.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_process_key</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_random_key.html" title="krb5_random_key"
- >previous</a> |
- <a href="krb5_string_to_key.html" title="krb5_string_to_key"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_process_key">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_prompter_posix - Prompt user for password. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_realm_compare - Compare the realms of two principals." href="krb5_realm_compare.html" />
- <link rel="prev" title="krb5_principal_compare_flags - Compare two principals with additional flags." href="krb5_principal_compare_flags.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_principal_compare_flags.html" title="krb5_principal_compare_flags - Compare two principals with additional flags."
- accesskey="P">previous</a> |
- <a href="krb5_realm_compare.html" title="krb5_realm_compare - Compare the realms of two principals."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_prompter_posix - Prompt user for password.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-prompter-posix-prompt-user-for-password">
-<h1>krb5_prompter_posix - Prompt user for password.<a class="headerlink" href="#krb5-prompter-posix-prompt-user-for-password" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_prompter_posix">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_prompter_posix</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, void *<em> data</em>, const char *<em> name</em>, const char *<em> banner</em>, int<em> num_prompts</em>, <a class="reference internal" href="../types/krb5_prompt.html#c.krb5_prompt" title="krb5_prompt">krb5_prompt</a><em> prompts</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_prompter_posix" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>data</strong> - Unused (callback argument)</p>
-<p><strong>[in]</strong> <strong>name</strong> - Name to output during prompt</p>
-<p><strong>[in]</strong> <strong>banner</strong> - Banner to output during prompt</p>
-<p><strong>[in]</strong> <strong>num_prompts</strong> - Number of prompts in <em>prompts</em></p>
-<p class="last"><strong>[in]</strong> <strong>prompts</strong> - Array of prompts and replies</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is intended to be used as a prompter callback for <a class="reference internal" href="krb5_get_init_creds_password.html#c.krb5_get_init_creds_password" title="krb5_get_init_creds_password"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_init_creds_password()</span></code></a> or <a class="reference internal" href="krb5_init_creds_init.html#c.krb5_init_creds_init" title="krb5_init_creds_init"><code class="xref c c-func docutils literal"><span class="pre">krb5_init_creds_init()</span></code></a> .</p>
-<p>Writes <em>name</em> and <em>banner</em> to stdout, each followed by a newline, then writes each prompt field in the <em>prompts</em> array, followed by”:”, and sets the reply field of the entry to a line of input read from stdin. If the hidden flag is set for a prompt, then terminal echoing is turned off when input is read.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_prompter_posix - Prompt user for password.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_principal_compare_flags.html" title="krb5_principal_compare_flags - Compare two principals with additional flags."
- >previous</a> |
- <a href="krb5_realm_compare.html" title="krb5_realm_compare - Compare the realms of two principals."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_prompter_posix - Prompt user for password.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_random_key — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_process_key" href="krb5_process_key.html" />
- <link rel="prev" title="krb5_kt_free_entry" href="krb5_kt_free_entry.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_free_entry.html" title="krb5_kt_free_entry"
- accesskey="P">previous</a> |
- <a href="krb5_process_key.html" title="krb5_process_key"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_random_key">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-random-key">
-<h1>krb5_random_key<a class="headerlink" href="#krb5-random-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_random_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_random_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_encrypt_block.html#c.krb5_encrypt_block" title="krb5_encrypt_block">krb5_encrypt_block</a> *<em> eblock</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a><em> ptr</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> **<em> keyblock</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_random_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>eblock</strong></p>
-<p><strong>ptr</strong></p>
-<p class="last"><strong>keyblock</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_c_* API family.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_random_key</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_free_entry.html" title="krb5_kt_free_entry"
- >previous</a> |
- <a href="krb5_process_key.html" title="krb5_process_key"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_random_key">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_rd_cred - Read and validate a KRB-CRED message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_rd_error - Decode a KRB-ERROR message." href="krb5_rd_error.html" />
- <link rel="prev" title="krb5_principal2salt - Convert a principal name into the default salt for that principal." href="krb5_principal2salt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_principal2salt.html" title="krb5_principal2salt - Convert a principal name into the default salt for that principal."
- accesskey="P">previous</a> |
- <a href="krb5_rd_error.html" title="krb5_rd_error - Decode a KRB-ERROR message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_cred - Read and validate a KRB-CRED message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-rd-cred-read-and-validate-a-krb-cred-message">
-<h1>krb5_rd_cred - Read and validate a KRB-CRED message.<a class="headerlink" href="#krb5-rd-cred-read-and-validate-a-krb-cred-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_rd_cred">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_rd_cred</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> creddata</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> ***<em> creds_out</em>, <a class="reference internal" href="../types/krb5_replay_data.html#c.krb5_replay_data" title="krb5_replay_data">krb5_replay_data</a> *<em> rdata_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_rd_cred" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>creddata</strong> - <strong>KRB-CRED</strong> message</p>
-<p><strong>[out]</strong> <strong>creds_out</strong> - Null-terminated array of forwarded credentials</p>
-<p class="last"><strong>[out]</strong> <strong>rdata_out</strong> - Replay data (NULL if not needed)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<blockquote>
-<div><em>creddata</em> will be decrypted using the receiving subkey if it is present in <em>auth_context</em> , or the session key if the receiving subkey is not present or fails to decrypt the message.</div></blockquote>
-<p>Use <a class="reference internal" href="krb5_free_tgt_creds.html#c.krb5_free_tgt_creds" title="krb5_free_tgt_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_tgt_creds()</span></code></a> to free <em>creds_out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The <em>rdata_out</em> argument is required if the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> or <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> flag is set in <em>auth_context</em> .`</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_rd_cred - Read and validate a KRB-CRED message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_principal2salt.html" title="krb5_principal2salt - Convert a principal name into the default salt for that principal."
- >previous</a> |
- <a href="krb5_rd_error.html" title="krb5_rd_error - Decode a KRB-ERROR message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_cred - Read and validate a KRB-CRED message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_rd_error - Decode a KRB-ERROR message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_rd_priv - Process a KRB-PRIV message." href="krb5_rd_priv.html" />
- <link rel="prev" title="krb5_rd_cred - Read and validate a KRB-CRED message." href="krb5_rd_cred.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_rd_cred.html" title="krb5_rd_cred - Read and validate a KRB-CRED message."
- accesskey="P">previous</a> |
- <a href="krb5_rd_priv.html" title="krb5_rd_priv - Process a KRB-PRIV message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_error - Decode a KRB-ERROR message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-rd-error-decode-a-krb-error-message">
-<h1>krb5_rd_error - Decode a KRB-ERROR message.<a class="headerlink" href="#krb5-rd-error-decode-a-krb-error-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_rd_error">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_rd_error</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> enc_errbuf</em>, <a class="reference internal" href="../types/krb5_error.html#c.krb5_error" title="krb5_error">krb5_error</a> **<em> dec_error</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_rd_error" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>enc_errbuf</strong> - Encoded error message</p>
-<p class="last"><strong>[out]</strong> <strong>dec_error</strong> - Decoded error message</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function processes <strong>KRB-ERROR</strong> message <em>enc_errbuf</em> and returns an allocated structure <em>dec_error</em> containing the error message. Use <a class="reference internal" href="krb5_free_error.html#c.krb5_free_error" title="krb5_free_error"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_error()</span></code></a> to free <em>dec_error</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_rd_error - Decode a KRB-ERROR message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_rd_cred.html" title="krb5_rd_cred - Read and validate a KRB-CRED message."
- >previous</a> |
- <a href="krb5_rd_priv.html" title="krb5_rd_priv - Process a KRB-PRIV message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_error - Decode a KRB-ERROR message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_rd_priv - Process a KRB-PRIV message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_rd_rep - Parse and decrypt a KRB_AP_REP message." href="krb5_rd_rep.html" />
- <link rel="prev" title="krb5_rd_error - Decode a KRB-ERROR message." href="krb5_rd_error.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_rd_error.html" title="krb5_rd_error - Decode a KRB-ERROR message."
- accesskey="P">previous</a> |
- <a href="krb5_rd_rep.html" title="krb5_rd_rep - Parse and decrypt a KRB_AP_REP message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_priv - Process a KRB-PRIV message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-rd-priv-process-a-krb-priv-message">
-<h1>krb5_rd_priv - Process a KRB-PRIV message.<a class="headerlink" href="#krb5-rd-priv-process-a-krb-priv-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_rd_priv">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_rd_priv</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> inbuf</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> userdata_out</em>, <a class="reference internal" href="../types/krb5_replay_data.html#c.krb5_replay_data" title="krb5_replay_data">krb5_replay_data</a> *<em> rdata_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_rd_priv" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication structure</p>
-<p><strong>[in]</strong> <strong>inbuf</strong> - <strong>KRB-PRIV</strong> message to be parsed</p>
-<p><strong>[out]</strong> <strong>userdata_out</strong> - Data parsed from <strong>KRB-PRIV</strong> message</p>
-<p class="last"><strong>[out]</strong> <strong>rdata_out</strong> - Replay data. Specify NULL if not needed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function parses a <strong>KRB-PRIV</strong> message, verifies its integrity, and stores its unencrypted data into <em>userdata_out</em> .</p>
-<p>If <em>auth_context</em> has a remote address set, the address will be used to verify the sender address in the KRB-PRIV message. If <em>auth_context</em> has a local address set, it will be used to verify the receiver address in the KRB-PRIV message if the message contains one.</p>
-<p>If the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></a> flag is set in <em>auth_context</em> , the sequence number of the KRB-PRIV message is checked against the remote sequence number field of <em>auth_context</em> . Otherwise, the sequence number is not used.</p>
-<p>If the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> flag is set in <em>auth_context</em> , then the timestamp in the message is verified to be within the permitted clock skew of the current time, and the message is checked against an in-memory replay cache to detect reflections or replays.</p>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>userdata_out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The <em>rdata_out</em> argument is required if the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> or <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> flag is set in <em>auth_context</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_rd_priv - Process a KRB-PRIV message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_rd_error.html" title="krb5_rd_error - Decode a KRB-ERROR message."
- >previous</a> |
- <a href="krb5_rd_rep.html" title="krb5_rd_rep - Parse and decrypt a KRB_AP_REP message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_priv - Process a KRB-PRIV message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_rd_rep - Parse and decrypt a KRB_AP_REP message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC." href="krb5_rd_rep_dce.html" />
- <link rel="prev" title="krb5_rd_priv - Process a KRB-PRIV message." href="krb5_rd_priv.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_rd_priv.html" title="krb5_rd_priv - Process a KRB-PRIV message."
- accesskey="P">previous</a> |
- <a href="krb5_rd_rep_dce.html" title="krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_rep - Parse and decrypt a KRB_AP_REP message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-rd-rep-parse-and-decrypt-a-krb-ap-rep-message">
-<h1>krb5_rd_rep - Parse and decrypt a KRB_AP_REP message.<a class="headerlink" href="#krb5-rd-rep-parse-and-decrypt-a-krb-ap-rep-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_rd_rep">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_rd_rep</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> inbuf</em>, <a class="reference internal" href="../types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part" title="krb5_ap_rep_enc_part">krb5_ap_rep_enc_part</a> **<em> repl</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_rd_rep" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>inbuf</strong> - AP-REP message</p>
-<p class="last"><strong>[out]</strong> <strong>repl</strong> - Decrypted reply message</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function parses, decrypts and verifies a message from <em>inbuf</em> and fills in <em>repl</em> with a pointer to allocated memory containing the fields from the encrypted response.</p>
-<p>Use <a class="reference internal" href="krb5_free_ap_rep_enc_part.html#c.krb5_free_ap_rep_enc_part" title="krb5_free_ap_rep_enc_part"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_ap_rep_enc_part()</span></code></a> to free <em>repl</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_rd_rep - Parse and decrypt a KRB_AP_REP message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_rd_priv.html" title="krb5_rd_priv - Process a KRB-PRIV message."
- >previous</a> |
- <a href="krb5_rd_rep_dce.html" title="krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_rep - Parse and decrypt a KRB_AP_REP message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_rd_req - Parse and decrypt a KRB_AP_REQ message." href="krb5_rd_req.html" />
- <link rel="prev" title="krb5_rd_rep - Parse and decrypt a KRB_AP_REP message." href="krb5_rd_rep.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_rd_rep.html" title="krb5_rd_rep - Parse and decrypt a KRB_AP_REP message."
- accesskey="P">previous</a> |
- <a href="krb5_rd_req.html" title="krb5_rd_req - Parse and decrypt a KRB_AP_REQ message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-rd-rep-dce-parse-and-decrypt-a-krb-ap-rep-message-for-dce-rpc">
-<h1>krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC.<a class="headerlink" href="#krb5-rd-rep-dce-parse-and-decrypt-a-krb-ap-rep-message-for-dce-rpc" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_rd_rep_dce">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_rd_rep_dce</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> inbuf</em>, <a class="reference internal" href="../types/krb5_ui_4.html#c.krb5_ui_4" title="krb5_ui_4">krb5_ui_4</a> *<em> nonce</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_rd_rep_dce" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>inbuf</strong> - AP-REP message</p>
-<p class="last"><strong>[out]</strong> <strong>nonce</strong> - Sequence number from the decrypted reply</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function parses, decrypts and verifies a message from <em>inbuf</em> and fills in <em>nonce</em> with a decrypted reply sequence number.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_rd_rep.html" title="krb5_rd_rep - Parse and decrypt a KRB_AP_REP message."
- >previous</a> |
- <a href="krb5_rd_req.html" title="krb5_rd_req - Parse and decrypt a KRB_AP_REQ message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_rd_req - Parse and decrypt a KRB_AP_REQ message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_rd_safe - Process KRB-SAFE message." href="krb5_rd_safe.html" />
- <link rel="prev" title="krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC." href="krb5_rd_rep_dce.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_rd_rep_dce.html" title="krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC."
- accesskey="P">previous</a> |
- <a href="krb5_rd_safe.html" title="krb5_rd_safe - Process KRB-SAFE message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_req - Parse and decrypt a KRB_AP_REQ message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-rd-req-parse-and-decrypt-a-krb-ap-req-message">
-<h1>krb5_rd_req - Parse and decrypt a KRB_AP_REQ message.<a class="headerlink" href="#krb5-rd-req-parse-and-decrypt-a-krb-ap-req-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_rd_req">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_rd_req</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a> *<em> auth_context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> inbuf</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> server</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> *<em> ap_req_options</em>, <a class="reference internal" href="../types/krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> **<em> ticket</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_rd_req" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[inout]</strong> <strong>auth_context</strong> - Pre-existing or newly created auth context</p>
-<p><strong>[in]</strong> <strong>inbuf</strong> - AP-REQ message to be parsed</p>
-<p><strong>[in]</strong> <strong>server</strong> - Matching principal for server, or NULL to allow any principal in keytab</p>
-<p><strong>[in]</strong> <strong>keytab</strong> - Key table, or NULL to use the default</p>
-<p><strong>[out]</strong> <strong>ap_req_options</strong> - If non-null, the AP-REQ flags on output</p>
-<p class="last"><strong>[out]</strong> <strong>ticket</strong> - If non-null, ticket from the AP-REQ message</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function parses, decrypts and verifies a AP-REQ message from <em>inbuf</em> and stores the authenticator in <em>auth_context</em> .</p>
-<p>If a keyblock was specified in <em>auth_context</em> using <a class="reference internal" href="krb5_auth_con_setuseruserkey.html#c.krb5_auth_con_setuseruserkey" title="krb5_auth_con_setuseruserkey"><code class="xref c c-func docutils literal"><span class="pre">krb5_auth_con_setuseruserkey()</span></code></a> , that key is used to decrypt the ticket in AP-REQ message and <em>keytab</em> is ignored. In this case, <em>server</em> should be specified as a complete principal name to allow for proper transited-path checking and replay cache selection.</p>
-<p>Otherwise, the decryption key is obtained from <em>keytab</em> , or from the default keytab if it is NULL. In this case, <em>server</em> may be a complete principal name, a matching principal (see <a class="reference internal" href="krb5_sname_match.html#c.krb5_sname_match" title="krb5_sname_match"><code class="xref c c-func docutils literal"><span class="pre">krb5_sname_match()</span></code></a> ), or NULL to match any principal name. The keys tried against the encrypted part of the ticket are determined as follows:</p>
-<blockquote>
-<div><ul class="simple">
-<li>If <em>server</em> is a complete principal name, then its entry in <em>keytab</em> is tried.</li>
-<li>Otherwise, if <em>keytab</em> is iterable, then all entries in <em>keytab</em> which match <em>server</em> are tried.</li>
-<li>Otherwise, the server principal in the ticket must match <em>server</em> , and its entry in <em>keytab</em> is tried.</li>
-</ul>
-</div></blockquote>
-<p>The client specified in the decrypted authenticator must match the client specified in the decrypted ticket.</p>
-<p>If the <em>remote_addr</em> field of <em>auth_context</em> is set, the request must come from that address.</p>
-<p>If a replay cache handle is provided in the <em>auth_context</em> , the authenticator and ticket are verified against it. If no conflict is found, the new authenticator is then stored in the replay cache of <em>auth_context</em> .</p>
-<p>Various other checks are performed on the decoded data, including cross-realm policy, clockskew, and ticket validation times.</p>
-<p>On success the authenticator, subkey, and remote sequence number of the request are stored in <em>auth_context</em> . If the <a class="reference internal" href="../macros/AP_OPTS_MUTUAL_REQUIRED.html#AP_OPTS_MUTUAL_REQUIRED" title="AP_OPTS_MUTUAL_REQUIRED"><code class="xref py py-data docutils literal"><span class="pre">AP_OPTS_MUTUAL_REQUIRED</span></code></a> bit is set, the local sequence number is XORed with the remote sequence number in the request.</p>
-<p>Use <a class="reference internal" href="krb5_free_ticket.html#c.krb5_free_ticket" title="krb5_free_ticket"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_ticket()</span></code></a> to free <em>ticket</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_rd_req - Parse and decrypt a KRB_AP_REQ message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_rd_rep_dce.html" title="krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC."
- >previous</a> |
- <a href="krb5_rd_safe.html" title="krb5_rd_safe - Process KRB-SAFE message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_req - Parse and decrypt a KRB_AP_REQ message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_rd_safe - Process KRB-SAFE message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_read_password - Read a password from keyboard input." href="krb5_read_password.html" />
- <link rel="prev" title="krb5_rd_req - Parse and decrypt a KRB_AP_REQ message." href="krb5_rd_req.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_rd_req.html" title="krb5_rd_req - Parse and decrypt a KRB_AP_REQ message."
- accesskey="P">previous</a> |
- <a href="krb5_read_password.html" title="krb5_read_password - Read a password from keyboard input."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_safe - Process KRB-SAFE message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-rd-safe-process-krb-safe-message">
-<h1>krb5_rd_safe - Process KRB-SAFE message.<a class="headerlink" href="#krb5-rd-safe-process-krb-safe-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_rd_safe">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_rd_safe</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a><em> auth_context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> inbuf</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> userdata_out</em>, <a class="reference internal" href="../types/krb5_replay_data.html#c.krb5_replay_data" title="krb5_replay_data">krb5_replay_data</a> *<em> rdata_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_rd_safe" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>auth_context</strong> - Authentication context</p>
-<p><strong>[in]</strong> <strong>inbuf</strong> - <strong>KRB-SAFE</strong> message to be parsed</p>
-<p><strong>[out]</strong> <strong>userdata_out</strong> - Data parsed from <strong>KRB-SAFE</strong> message</p>
-<p class="last"><strong>[out]</strong> <strong>rdata_out</strong> - Replay data. Specify NULL if not needed</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function parses a <strong>KRB-SAFE</strong> message, verifies its integrity, and stores its data into <em>userdata_out</em> .</p>
-<p>If <em>auth_context</em> has a remote address set, the address will be used to verify the sender address in the KRB-SAFE message. If <em>auth_context</em> has a local address set, it will be used to verify the receiver address in the KRB-SAFE message if the message contains one.</p>
-<p>If the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></a> flag is set in <em>auth_context</em> , the sequence number of the KRB-SAFE message is checked against the remote sequence number field of <em>auth_context</em> . Otherwise, the sequence number is not used.</p>
-<p>If the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME" title="KRB5_AUTH_CONTEXT_DO_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></a> flag is set in <em>auth_context</em> , then the timestamp in the message is verified to be within the permitted clock skew of the current time, and the message is checked against an in-memory replay cache to detect reflections or replays.</p>
-<p>Use <a class="reference internal" href="krb5_free_data_contents.html#c.krb5_free_data_contents" title="krb5_free_data_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_data_contents()</span></code></a> to free <em>userdata_out</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The <em>rdata_out</em> argument is required if the <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME" title="KRB5_AUTH_CONTEXT_RET_TIME"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></a> or <a class="reference internal" href="../macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></a> flag is set in <em>auth_context</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_rd_safe - Process KRB-SAFE message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_rd_req.html" title="krb5_rd_req - Parse and decrypt a KRB_AP_REQ message."
- >previous</a> |
- <a href="krb5_read_password.html" title="krb5_read_password - Read a password from keyboard input."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rd_safe - Process KRB-SAFE message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_read_password - Read a password from keyboard input. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_salttype_to_string - Convert a salt type to a string." href="krb5_salttype_to_string.html" />
- <link rel="prev" title="krb5_rd_safe - Process KRB-SAFE message." href="krb5_rd_safe.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_rd_safe.html" title="krb5_rd_safe - Process KRB-SAFE message."
- accesskey="P">previous</a> |
- <a href="krb5_salttype_to_string.html" title="krb5_salttype_to_string - Convert a salt type to a string."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_read_password - Read a password from keyboard input.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-read-password-read-a-password-from-keyboard-input">
-<h1>krb5_read_password - Read a password from keyboard input.<a class="headerlink" href="#krb5-read-password-read-a-password-from-keyboard-input" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_read_password">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_read_password</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> prompt</em>, const char *<em> prompt2</em>, char *<em> return_pwd</em>, unsigned int *<em> size_return</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_read_password" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>prompt</strong> - First user prompt when reading password</p>
-<p><strong>[in]</strong> <strong>prompt2</strong> - Second user prompt (NULL to prompt only once)</p>
-<p><strong>[out]</strong> <strong>return_pwd</strong> - Returned password</p>
-<p class="last"><strong>[inout]</strong> <strong>size_return</strong> - On input, maximum size of password; on output, size of password read</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Error in reading or verifying the password</li>
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function reads a password from keyboard input and stores it in <em>return_pwd</em> . <em>size_return</em> should be set by the caller to the amount of storage space available in <em>return_pwd</em> ; on successful return, it will be set to the length of the password read.</p>
-<blockquote>
-<div><em>prompt</em> is printed to the terminal, followed by”:”, and then a password is read from the keyboard.</div></blockquote>
-<p>If <em>prompt2</em> is NULL, the password is read only once. Otherwise, <em>prompt2</em> is printed to the terminal and a second password is read. If the two passwords entered are not identical, KRB5_LIBOS_BADPWDMATCH is returned.</p>
-<p>Echoing is turned off when the password is read.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_read_password - Read a password from keyboard input.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_rd_safe.html" title="krb5_rd_safe - Process KRB-SAFE message."
- >previous</a> |
- <a href="krb5_salttype_to_string.html" title="krb5_salttype_to_string - Convert a salt type to a string."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_read_password - Read a password from keyboard input.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_realm_compare - Compare the realms of two principals. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context." href="krb5_responder_get_challenge.html" />
- <link rel="prev" title="krb5_prompter_posix - Prompt user for password." href="krb5_prompter_posix.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_prompter_posix.html" title="krb5_prompter_posix - Prompt user for password."
- accesskey="P">previous</a> |
- <a href="krb5_responder_get_challenge.html" title="krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_realm_compare - Compare the realms of two principals.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-realm-compare-compare-the-realms-of-two-principals">
-<h1>krb5_realm_compare - Compare the realms of two principals.<a class="headerlink" href="#krb5-realm-compare-compare-the-realms-of-two-principals" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_realm_compare">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_realm_compare</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> princ1</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> princ2</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_realm_compare" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>princ1</strong> - First principal</p>
-<p class="last"><strong>[in]</strong> <strong>princ2</strong> - Second principal</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if the realm names are the same; FALSE otherwise</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_realm_compare - Compare the realms of two principals.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_prompter_posix.html" title="krb5_prompter_posix - Prompt user for password."
- >previous</a> |
- <a href="krb5_responder_get_challenge.html" title="krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_realm_compare - Compare the realms of two principals.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_recvauth - Server function for sendauth protocol. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_recvauth_version - Server function for sendauth protocol with version parameter." href="krb5_recvauth_version.html" />
- <link rel="prev" title="krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key)." href="krb5_k_verify_checksum_iov.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_k_verify_checksum_iov.html" title="krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key)."
- accesskey="P">previous</a> |
- <a href="krb5_recvauth_version.html" title="krb5_recvauth_version - Server function for sendauth protocol with version parameter."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_recvauth - Server function for sendauth protocol.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-recvauth-server-function-for-sendauth-protocol">
-<h1>krb5_recvauth - Server function for sendauth protocol.<a class="headerlink" href="#krb5-recvauth-server-function-for-sendauth-protocol" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_recvauth">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_recvauth</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a> *<em> auth_context</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a><em> fd</em>, char *<em> appl_version</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> server</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a><em> flags</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em>, <a class="reference internal" href="../types/krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> **<em> ticket</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_recvauth" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[inout]</strong> <strong>auth_context</strong> - Pre-existing or newly created auth context</p>
-<p><strong>[in]</strong> <strong>fd</strong> - File descriptor</p>
-<p><strong>[in]</strong> <strong>appl_version</strong> - Application protocol version to be matched against the client’s application version</p>
-<p><strong>[in]</strong> <strong>server</strong> - Server principal (NULL for any in <em>keytab</em> )</p>
-<p><strong>[in]</strong> <strong>flags</strong> - Additional specifications</p>
-<p><strong>[in]</strong> <strong>keytab</strong> - Key table containing service keys</p>
-<p class="last"><strong>[out]</strong> <strong>ticket</strong> - Ticket (NULL if not needed)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function performs the server side of a sendauth/recvauth exchange by sending and receiving messages over <em>fd</em> .</p>
-<p>Use <a class="reference internal" href="krb5_free_ticket.html#c.krb5_free_ticket" title="krb5_free_ticket"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_ticket()</span></code></a> to free <em>ticket</em> when it is no longer needed.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_sendauth.html#c.krb5_sendauth" title="krb5_sendauth"><code class="xref c c-func docutils literal"><span class="pre">krb5_sendauth()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_recvauth - Server function for sendauth protocol.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_k_verify_checksum_iov.html" title="krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key)."
- >previous</a> |
- <a href="krb5_recvauth_version.html" title="krb5_recvauth_version - Server function for sendauth protocol with version parameter."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_recvauth - Server function for sendauth protocol.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_recvauth_version - Server function for sendauth protocol with version parameter. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_sendauth - Client function for sendauth protocol." href="krb5_sendauth.html" />
- <link rel="prev" title="krb5_recvauth - Server function for sendauth protocol." href="krb5_recvauth.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_recvauth.html" title="krb5_recvauth - Server function for sendauth protocol."
- accesskey="P">previous</a> |
- <a href="krb5_sendauth.html" title="krb5_sendauth - Client function for sendauth protocol."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_recvauth_version - Server function for sendauth protocol with version parameter.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-recvauth-version-server-function-for-sendauth-protocol-with-version-parameter">
-<h1>krb5_recvauth_version - Server function for sendauth protocol with version parameter.<a class="headerlink" href="#krb5-recvauth-version-server-function-for-sendauth-protocol-with-version-parameter" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_recvauth_version">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_recvauth_version</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a> *<em> auth_context</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a><em> fd</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> server</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a><em> flags</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em>, <a class="reference internal" href="../types/krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> **<em> ticket</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> version</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_recvauth_version" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[inout]</strong> <strong>auth_context</strong> - Pre-existing or newly created auth context</p>
-<p><strong>[in]</strong> <strong>fd</strong> - File descriptor</p>
-<p><strong>[in]</strong> <strong>server</strong> - Server principal (NULL for any in <em>keytab</em> )</p>
-<p><strong>[in]</strong> <strong>flags</strong> - Additional specifications</p>
-<p><strong>[in]</strong> <strong>keytab</strong> - Decryption key</p>
-<p><strong>[out]</strong> <strong>ticket</strong> - Ticket (NULL if not needed)</p>
-<p class="last"><strong>[out]</strong> <strong>version</strong> - sendauth protocol version (NULL if not needed)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is similar to <a class="reference internal" href="krb5_recvauth.html#c.krb5_recvauth" title="krb5_recvauth"><code class="xref c c-func docutils literal"><span class="pre">krb5_recvauth()</span></code></a> with the additional output information place into <em>version</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_recvauth_version - Server function for sendauth protocol with version parameter.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_recvauth.html" title="krb5_recvauth - Server function for sendauth protocol."
- >previous</a> |
- <a href="krb5_sendauth.html" title="krb5_sendauth - Client function for sendauth protocol."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_recvauth_version - Server function for sendauth protocol with version parameter.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_list_questions - List the question names contained in the responder context." href="krb5_responder_list_questions.html" />
- <link rel="prev" title="krb5_realm_compare - Compare the realms of two principals." href="krb5_realm_compare.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_realm_compare.html" title="krb5_realm_compare - Compare the realms of two principals."
- accesskey="P">previous</a> |
- <a href="krb5_responder_list_questions.html" title="krb5_responder_list_questions - List the question names contained in the responder context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-get-challenge-retrieve-the-challenge-data-for-a-given-question-in-the-responder-context">
-<h1>krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context.<a class="headerlink" href="#krb5-responder-get-challenge-retrieve-the-challenge-data-for-a-given-question-in-the-responder-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_responder_get_challenge">
-const char * <code class="descname">krb5_responder_get_challenge</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_responder_context.html#c.krb5_responder_context" title="krb5_responder_context">krb5_responder_context</a><em> rctx</em>, const char *<em> question</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_responder_get_challenge" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>rctx</strong> - Responder context</p>
-<p class="last"><strong>[in]</strong> <strong>question</strong> - Question name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Return a pointer to a C string containing the challenge for <em>question</em> within <em>rctx</em> , or NULL if the question is not present in <em>rctx</em> . The structure of the question depends on the question name, but will always be printable UTF-8 text. The returned pointer is an alias, valid only as long as the lifetime of <em>rctx</em> , and should not be modified or freed by the caller.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_realm_compare.html" title="krb5_realm_compare - Compare the realms of two principals."
- >previous</a> |
- <a href="krb5_responder_list_questions.html" title="krb5_responder_list_questions - List the question names contained in the responder context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_list_questions - List the question names contained in the responder context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_set_answer - Answer a named question in the responder context." href="krb5_responder_set_answer.html" />
- <link rel="prev" title="krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context." href="krb5_responder_get_challenge.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_get_challenge.html" title="krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context."
- accesskey="P">previous</a> |
- <a href="krb5_responder_set_answer.html" title="krb5_responder_set_answer - Answer a named question in the responder context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_list_questions - List the question names contained in the responder context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-list-questions-list-the-question-names-contained-in-the-responder-context">
-<h1>krb5_responder_list_questions - List the question names contained in the responder context.<a class="headerlink" href="#krb5-responder-list-questions-list-the-question-names-contained-in-the-responder-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_responder_list_questions">
-const char *const * <code class="descname">krb5_responder_list_questions</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_responder_context.html#c.krb5_responder_context" title="krb5_responder_context">krb5_responder_context</a><em> rctx</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_responder_list_questions" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>rctx</strong> - Responder context</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Return a pointer to a null-terminated list of question names which are present in <em>rctx</em> . The pointer is an alias, valid only as long as the lifetime of <em>rctx</em> , and should not be modified or freed by the caller. A question’s challenge can be retrieved using <a class="reference internal" href="krb5_responder_get_challenge.html#c.krb5_responder_get_challenge" title="krb5_responder_get_challenge"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_get_challenge()</span></code></a> and answered using <a class="reference internal" href="krb5_responder_set_answer.html#c.krb5_responder_set_answer" title="krb5_responder_set_answer"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_set_answer()</span></code></a> .</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_list_questions - List the question names contained in the responder context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_get_challenge.html" title="krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context."
- >previous</a> |
- <a href="krb5_responder_set_answer.html" title="krb5_responder_set_answer - Answer a named question in the responder context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_list_questions - List the question names contained in the responder context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() . — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct." href="krb5_responder_pkinit_get_challenge.html" />
- <link rel="prev" title="krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question." href="krb5_responder_otp_set_answer.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_otp_set_answer.html" title="krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question."
- accesskey="P">previous</a> |
- <a href="krb5_responder_pkinit_get_challenge.html" title="krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() .">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-challenge-free-free-the-value-returned-by-krb5-responder-otp-get-challenge">
-<h1>krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() .<a class="headerlink" href="#krb5-responder-otp-challenge-free-free-the-value-returned-by-krb5-responder-otp-get-challenge" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_responder_otp_challenge_free">
-void <code class="descname">krb5_responder_otp_challenge_free</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_responder_context.html#c.krb5_responder_context" title="krb5_responder_context">krb5_responder_context</a><em> rctx</em>, <a class="reference internal" href="../types/krb5_responder_otp_challenge.html#c.krb5_responder_otp_challenge" title="krb5_responder_otp_challenge">krb5_responder_otp_challenge</a> *<em> chl</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_responder_otp_challenge_free" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>rctx</strong> - Responder context</p>
-<p class="last"><strong>[in]</strong> <strong>chl</strong> - The challenge to free</p>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() .</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_otp_set_answer.html" title="krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question."
- >previous</a> |
- <a href="krb5_responder_pkinit_get_challenge.html" title="krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() .">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question." href="krb5_responder_otp_set_answer.html" />
- <link rel="prev" title="krb5_responder_set_answer - Answer a named question in the responder context." href="krb5_responder_set_answer.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_set_answer.html" title="krb5_responder_set_answer - Answer a named question in the responder context."
- accesskey="P">previous</a> |
- <a href="krb5_responder_otp_set_answer.html" title="krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-get-challenge-decode-the-krb5-responder-question-otp-to-a-c-struct">
-<h1>krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct.<a class="headerlink" href="#krb5-responder-otp-get-challenge-decode-the-krb5-responder-question-otp-to-a-c-struct" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_responder_otp_get_challenge">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_responder_otp_get_challenge</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_responder_context.html#c.krb5_responder_context" title="krb5_responder_context">krb5_responder_context</a><em> rctx</em>, <a class="reference internal" href="../types/krb5_responder_otp_challenge.html#c.krb5_responder_otp_challenge" title="krb5_responder_otp_challenge">krb5_responder_otp_challenge</a> **<em> chl</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_responder_otp_get_challenge" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>rctx</strong> - Responder context</p>
-<p class="last"><strong>[out]</strong> <strong>chl</strong> - Challenge structure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>A convenience function which parses the KRB5_RESPONDER_QUESTION_OTP question challenge data, making it available in native C. The main feature of this function is the ability to interact with OTP tokens without parsing the JSON.</p>
-<p>The returned value must be passed to <a class="reference internal" href="krb5_responder_otp_challenge_free.html#c.krb5_responder_otp_challenge_free" title="krb5_responder_otp_challenge_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_otp_challenge_free()</span></code></a> to be freed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_set_answer.html" title="krb5_responder_set_answer - Answer a named question in the responder context."
- >previous</a> |
- <a href="krb5_responder_otp_set_answer.html" title="krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() ." href="krb5_responder_otp_challenge_free.html" />
- <link rel="prev" title="krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct." href="krb5_responder_otp_get_challenge.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_otp_get_challenge.html" title="krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct."
- accesskey="P">previous</a> |
- <a href="krb5_responder_otp_challenge_free.html" title="krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() ."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-set-answer-answer-the-krb5-responder-question-otp-question">
-<h1>krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question.<a class="headerlink" href="#krb5-responder-otp-set-answer-answer-the-krb5-responder-question-otp-question" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_responder_otp_set_answer">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_responder_otp_set_answer</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_responder_context.html#c.krb5_responder_context" title="krb5_responder_context">krb5_responder_context</a><em> rctx</em>, size_t<em> ti</em>, const char *<em> value</em>, const char *<em> pin</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_responder_otp_set_answer" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>rctx</strong> - Responder context</p>
-<p><strong>[in]</strong> <strong>ti</strong> - The index of the tokeninfo selected</p>
-<p><strong>[in]</strong> <strong>value</strong> - The value to set, or NULL for none</p>
-<p class="last"><strong>[in]</strong> <strong>pin</strong> - The pin to set, or NULL for none</p>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_otp_get_challenge.html" title="krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct."
- >previous</a> |
- <a href="krb5_responder_otp_challenge_free.html" title="krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() ."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() . — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_default_realm - Override the default realm for the specified context." href="krb5_set_default_realm.html" />
- <link rel="prev" title="krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity." href="krb5_responder_pkinit_set_answer.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_pkinit_set_answer.html" title="krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity."
- accesskey="P">previous</a> |
- <a href="krb5_set_default_realm.html" title="krb5_set_default_realm - Override the default realm for the specified context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() .">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-pkinit-challenge-free-free-the-value-returned-by-krb5-responder-pkinit-get-challenge">
-<h1>krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() .<a class="headerlink" href="#krb5-responder-pkinit-challenge-free-free-the-value-returned-by-krb5-responder-pkinit-get-challenge" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_responder_pkinit_challenge_free">
-void <code class="descname">krb5_responder_pkinit_challenge_free</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_responder_context.html#c.krb5_responder_context" title="krb5_responder_context">krb5_responder_context</a><em> rctx</em>, <a class="reference internal" href="../types/krb5_responder_pkinit_challenge.html#c.krb5_responder_pkinit_challenge" title="krb5_responder_pkinit_challenge">krb5_responder_pkinit_challenge</a> *<em> chl</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_responder_pkinit_challenge_free" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>rctx</strong> - Responder context</p>
-<p class="last"><strong>[in]</strong> <strong>chl</strong> - The challenge to free</p>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.12</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() .</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_pkinit_set_answer.html" title="krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity."
- >previous</a> |
- <a href="krb5_set_default_realm.html" title="krb5_set_default_realm - Override the default realm for the specified context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() .">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity." href="krb5_responder_pkinit_set_answer.html" />
- <link rel="prev" title="krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() ." href="krb5_responder_otp_challenge_free.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_otp_challenge_free.html" title="krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() ."
- accesskey="P">previous</a> |
- <a href="krb5_responder_pkinit_set_answer.html" title="krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-pkinit-get-challenge-decode-the-krb5-responder-question-pkinit-to-a-c-struct">
-<h1>krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct.<a class="headerlink" href="#krb5-responder-pkinit-get-challenge-decode-the-krb5-responder-question-pkinit-to-a-c-struct" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_responder_pkinit_get_challenge">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_responder_pkinit_get_challenge</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_responder_context.html#c.krb5_responder_context" title="krb5_responder_context">krb5_responder_context</a><em> rctx</em>, <a class="reference internal" href="../types/krb5_responder_pkinit_challenge.html#c.krb5_responder_pkinit_challenge" title="krb5_responder_pkinit_challenge">krb5_responder_pkinit_challenge</a> **<em> chl_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_responder_pkinit_get_challenge" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>rctx</strong> - Responder context</p>
-<p class="last"><strong>[out]</strong> <strong>chl_out</strong> - Challenge structure</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>A convenience function which parses the KRB5_RESPONDER_QUESTION_PKINIT question challenge data, making it available in native C. The main feature of this function is the ability to read the challenge without parsing the JSON.</p>
-<p>The returned value must be passed to <a class="reference internal" href="krb5_responder_pkinit_challenge_free.html#c.krb5_responder_pkinit_challenge_free" title="krb5_responder_pkinit_challenge_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_pkinit_challenge_free()</span></code></a> to be freed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.12</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_otp_challenge_free.html" title="krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() ."
- >previous</a> |
- <a href="krb5_responder_pkinit_set_answer.html" title="krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() ." href="krb5_responder_pkinit_challenge_free.html" />
- <link rel="prev" title="krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct." href="krb5_responder_pkinit_get_challenge.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_pkinit_get_challenge.html" title="krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct."
- accesskey="P">previous</a> |
- <a href="krb5_responder_pkinit_challenge_free.html" title="krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() ."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-pkinit-set-answer-answer-the-krb5-responder-question-pkinit-question-for-one-identity">
-<h1>krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity.<a class="headerlink" href="#krb5-responder-pkinit-set-answer-answer-the-krb5-responder-question-pkinit-question-for-one-identity" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_responder_pkinit_set_answer">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_responder_pkinit_set_answer</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_responder_context.html#c.krb5_responder_context" title="krb5_responder_context">krb5_responder_context</a><em> rctx</em>, const char *<em> identity</em>, const char *<em> pin</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_responder_pkinit_set_answer" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>rctx</strong> - Responder context</p>
-<p><strong>[in]</strong> <strong>identity</strong> - The identity for which a PIN is being supplied</p>
-<p class="last"><strong>[in]</strong> <strong>pin</strong> - The provided PIN, or NULL for none</p>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.12</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_pkinit_get_challenge.html" title="krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct."
- >previous</a> |
- <a href="krb5_responder_pkinit_challenge_free.html" title="krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() ."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_set_answer - Answer a named question in the responder context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct." href="krb5_responder_otp_get_challenge.html" />
- <link rel="prev" title="krb5_responder_list_questions - List the question names contained in the responder context." href="krb5_responder_list_questions.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_list_questions.html" title="krb5_responder_list_questions - List the question names contained in the responder context."
- accesskey="P">previous</a> |
- <a href="krb5_responder_otp_get_challenge.html" title="krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_set_answer - Answer a named question in the responder context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-set-answer-answer-a-named-question-in-the-responder-context">
-<h1>krb5_responder_set_answer - Answer a named question in the responder context.<a class="headerlink" href="#krb5-responder-set-answer-answer-a-named-question-in-the-responder-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_responder_set_answer">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_responder_set_answer</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_responder_context.html#c.krb5_responder_context" title="krb5_responder_context">krb5_responder_context</a><em> rctx</em>, const char *<em> question</em>, const char *<em> answer</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_responder_set_answer" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>rctx</strong> - Responder context</p>
-<p><strong>[in]</strong> <strong>question</strong> - Question name</p>
-<p class="last"><strong>[in]</strong> <strong>answer</strong> - The string to set (MUST be printable UTF-8)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>EINVAL question is not present within rctx</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function supplies an answer to <em>question</em> within <em>rctx</em> . The appropriate form of the answer depends on the question name.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.11</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_set_answer - Answer a named question in the responder context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_list_questions.html" title="krb5_responder_list_questions - List the question names contained in the responder context."
- >previous</a> |
- <a href="krb5_responder_otp_get_challenge.html" title="krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_set_answer - Answer a named question in the responder context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_salttype_to_string - Convert a salt type to a string. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table." href="krb5_server_decrypt_ticket_keytab.html" />
- <link rel="prev" title="krb5_read_password - Read a password from keyboard input." href="krb5_read_password.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_read_password.html" title="krb5_read_password - Read a password from keyboard input."
- accesskey="P">previous</a> |
- <a href="krb5_server_decrypt_ticket_keytab.html" title="krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_salttype_to_string - Convert a salt type to a string.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-salttype-to-string-convert-a-salt-type-to-a-string">
-<h1>krb5_salttype_to_string - Convert a salt type to a string.<a class="headerlink" href="#krb5-salttype-to-string-convert-a-salt-type-to-a-string" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_salttype_to_string">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_salttype_to_string</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a><em> salttype</em>, char *<em> buffer</em>, size_t<em> buflen</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_salttype_to_string" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>salttype</strong> - Salttype to convert</p>
-<p><strong>[out]</strong> <strong>buffer</strong> - Buffer to receive the converted string</p>
-<p class="last"><strong>[in]</strong> <strong>buflen</strong> - Storage available in <em>buffer</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_salttype_to_string - Convert a salt type to a string.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_read_password.html" title="krb5_read_password - Read a password from keyboard input."
- >previous</a> |
- <a href="krb5_server_decrypt_ticket_keytab.html" title="krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_salttype_to_string - Convert a salt type to a string.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_sendauth - Client function for sendauth protocol. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials." href="krb5_524_convert_creds.html" />
- <link rel="prev" title="krb5_recvauth_version - Server function for sendauth protocol with version parameter." href="krb5_recvauth_version.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_recvauth_version.html" title="krb5_recvauth_version - Server function for sendauth protocol with version parameter."
- accesskey="P">previous</a> |
- <a href="krb5_524_convert_creds.html" title="krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_sendauth - Client function for sendauth protocol.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-sendauth-client-function-for-sendauth-protocol">
-<h1>krb5_sendauth - Client function for sendauth protocol.<a class="headerlink" href="#krb5-sendauth-client-function-for-sendauth-protocol" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_sendauth">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_sendauth</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_auth_context.html#c.krb5_auth_context" title="krb5_auth_context">krb5_auth_context</a> *<em> auth_context</em>, <a class="reference internal" href="../types/krb5_pointer.html#c.krb5_pointer" title="krb5_pointer">krb5_pointer</a><em> fd</em>, char *<em> appl_version</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> client</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> server</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> ap_req_options</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> in_data</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> in_creds</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, <a class="reference internal" href="../types/krb5_error.html#c.krb5_error" title="krb5_error">krb5_error</a> **<em> error</em>, <a class="reference internal" href="../types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part" title="krb5_ap_rep_enc_part">krb5_ap_rep_enc_part</a> **<em> rep_result</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> **<em> out_creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_sendauth" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[inout]</strong> <strong>auth_context</strong> - Pre-existing or newly created auth context</p>
-<p><strong>[in]</strong> <strong>fd</strong> - File descriptor that describes network socket</p>
-<p><strong>[in]</strong> <strong>appl_version</strong> - Application protocol version to be matched with the receiver’s application version</p>
-<p><strong>[in]</strong> <strong>client</strong> - Client principal</p>
-<p><strong>[in]</strong> <strong>server</strong> - Server principal</p>
-<p><strong>[in]</strong> <strong>ap_req_options</strong> - <code class="xref py py-data docutils literal"><span class="pre">AP_OPTS</span></code> options</p>
-<p><strong>[in]</strong> <strong>in_data</strong> - Data to be sent to the server</p>
-<p><strong>[in]</strong> <strong>in_creds</strong> - Input credentials, or NULL to use <em>ccache</em></p>
-<p><strong>[in]</strong> <strong>ccache</strong> - Credential cache</p>
-<p><strong>[out]</strong> <strong>error</strong> - If non-null, contains KRB_ERROR message returned from server</p>
-<p><strong>[out]</strong> <strong>rep_result</strong> - If non-null and <em>ap_req_options</em> is <a class="reference internal" href="../macros/AP_OPTS_MUTUAL_REQUIRED.html#AP_OPTS_MUTUAL_REQUIRED" title="AP_OPTS_MUTUAL_REQUIRED"><code class="xref py py-data docutils literal"><span class="pre">AP_OPTS_MUTUAL_REQUIRED</span></code></a> , contains the result of mutual authentication exchange</p>
-<p class="last"><strong>[out]</strong> <strong>out_creds</strong> - If non-null, the retrieved credentials</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function performs the client side of a sendauth/recvauth exchange by sending and receiving messages over <em>fd</em> .</p>
-<p>Credentials may be specified in three ways:</p>
-<blockquote>
-<div><blockquote>
-<div><ul class="simple">
-<li>If <em>in_creds</em> is NULL, credentials are obtained with <a class="reference internal" href="krb5_get_credentials.html#c.krb5_get_credentials" title="krb5_get_credentials"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_credentials()</span></code></a> using the principals <em>client</em> and <em>server</em> . <em>server</em> must be non-null; <em>client</em> may NULL to use the default principal of <em>ccache</em> .</li>
-<li>If <em>in_creds</em> is non-null, but does not contain a ticket, credentials for the exchange are obtained with <a class="reference internal" href="krb5_get_credentials.html#c.krb5_get_credentials" title="krb5_get_credentials"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_credentials()</span></code></a> using <em>in_creds</em> . In this case, the values of <em>client</em> and <em>server</em> are unused.</li>
-<li>If <em>in_creds</em> is a complete credentials structure, it used directly. In this case, the values of <em>client</em> , <em>server</em> , and <em>ccache</em> are unused.</li>
-</ul>
-</div></blockquote>
-<p>If the server is using a different application protocol than that specified in <em>appl_version</em> , an error will be returned.</p>
-</div></blockquote>
-<p>Use <a class="reference internal" href="krb5_free_creds.html#c.krb5_free_creds" title="krb5_free_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_creds()</span></code></a> to free <em>out_creds</em> , <a class="reference internal" href="krb5_free_ap_rep_enc_part.html#c.krb5_free_ap_rep_enc_part" title="krb5_free_ap_rep_enc_part"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_ap_rep_enc_part()</span></code></a> to free <em>rep_result</em> , and <a class="reference internal" href="krb5_free_error.html#c.krb5_free_error" title="krb5_free_error"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_error()</span></code></a> to free <em>error</em> when they are no longer needed.</p>
-<div class="admonition seealso">
-<p class="first admonition-title">See also</p>
-<p class="last"><a class="reference internal" href="krb5_recvauth.html#c.krb5_recvauth" title="krb5_recvauth"><code class="xref c c-func docutils literal"><span class="pre">krb5_recvauth()</span></code></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_sendauth - Client function for sendauth protocol.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_recvauth_version.html" title="krb5_recvauth_version - Server function for sendauth protocol with version parameter."
- >previous</a> |
- <a href="krb5_524_convert_creds.html" title="krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_sendauth - Client function for sendauth protocol.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure." href="krb5_set_default_tgs_enctypes.html" />
- <link rel="prev" title="krb5_salttype_to_string - Convert a salt type to a string." href="krb5_salttype_to_string.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_salttype_to_string.html" title="krb5_salttype_to_string - Convert a salt type to a string."
- accesskey="P">previous</a> |
- <a href="krb5_set_default_tgs_enctypes.html" title="krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-server-decrypt-ticket-keytab-decrypt-a-ticket-using-the-specified-key-table">
-<h1>krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table.<a class="headerlink" href="#krb5-server-decrypt-ticket-keytab-decrypt-a-ticket-using-the-specified-key-table" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_server_decrypt_ticket_keytab">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_server_decrypt_ticket_keytab</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> kt</em>, <a class="reference internal" href="../types/krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> *<em> ticket</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_server_decrypt_ticket_keytab" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>kt</strong> - Key table</p>
-<p class="last"><strong>[in]</strong> <strong>ticket</strong> - Ticket to be decrypted</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function takes a <em>ticket</em> as input and decrypts it using key data from <em>kt</em> . The result is placed into <em>ticket->enc_part2</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_salttype_to_string.html" title="krb5_salttype_to_string - Convert a salt type to a string."
- >previous</a> |
- <a href="krb5_set_default_tgs_enctypes.html" title="krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_default_realm - Override the default realm for the specified context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_password - Set a password for a principal using specified credentials." href="krb5_set_password.html" />
- <link rel="prev" title="krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() ." href="krb5_responder_pkinit_challenge_free.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_pkinit_challenge_free.html" title="krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() ."
- accesskey="P">previous</a> |
- <a href="krb5_set_password.html" title="krb5_set_password - Set a password for a principal using specified credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_default_realm - Override the default realm for the specified context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-default-realm-override-the-default-realm-for-the-specified-context">
-<h1>krb5_set_default_realm - Override the default realm for the specified context.<a class="headerlink" href="#krb5-set-default-realm-override-the-default-realm-for-the-specified-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_default_realm">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_set_default_realm</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> lrealm</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_default_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>lrealm</strong> - Realm name for the default realm</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>If <em>lrealm</em> is NULL, clear the default realm setting.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_default_realm - Override the default realm for the specified context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_pkinit_challenge_free.html" title="krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() ."
- >previous</a> |
- <a href="krb5_set_password.html" title="krb5_set_password - Set a password for a principal using specified credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_default_realm - Override the default realm for the specified context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_error_message - Set an extended error message for an error code." href="krb5_set_error_message.html" />
- <link rel="prev" title="krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table." href="krb5_server_decrypt_ticket_keytab.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_server_decrypt_ticket_keytab.html" title="krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table."
- accesskey="P">previous</a> |
- <a href="krb5_set_error_message.html" title="krb5_set_error_message - Set an extended error message for an error code."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-default-tgs-enctypes-set-default-tgs-encryption-types-in-a-krb5-context-structure">
-<h1>krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure.<a class="headerlink" href="#krb5-set-default-tgs-enctypes-set-default-tgs-encryption-types-in-a-krb5-context-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_default_tgs_enctypes">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_set_default_tgs_enctypes</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> *<em> etypes</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_default_tgs_enctypes" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>etypes</strong> - Encryption type(s) to set</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-<li>KRB5_PROG_ETYPE_NOSUPP Program lacks support for encryption type</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets the default enctype list for TGS requests made using <em>context</em> to <em>etypes</em> .</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This overrides the default list (from config file or built-in).</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_server_decrypt_ticket_keytab.html" title="krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table."
- >previous</a> |
- <a href="krb5_set_error_message.html" title="krb5_set_error_message - Set an extended error message for an error code."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_error_message - Set an extended error message for an error code. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_kdc_recv_hook - Set a KDC post-receive hook function." href="krb5_set_kdc_recv_hook.html" />
- <link rel="prev" title="krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure." href="krb5_set_default_tgs_enctypes.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_default_tgs_enctypes.html" title="krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure."
- accesskey="P">previous</a> |
- <a href="krb5_set_kdc_recv_hook.html" title="krb5_set_kdc_recv_hook - Set a KDC post-receive hook function."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_error_message - Set an extended error message for an error code.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-error-message-set-an-extended-error-message-for-an-error-code">
-<h1>krb5_set_error_message - Set an extended error message for an error code.<a class="headerlink" href="#krb5-set-error-message-set-an-extended-error-message-for-an-error-code" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_error_message">
-void <code class="descname">krb5_set_error_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a><em> code</em>, const char *<em> fmt</em>, ...<span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_error_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>code</strong> - Error code</p>
-<p class="last"><strong>[in]</strong> <strong>fmt</strong> - Error string for the error code</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_error_message - Set an extended error message for an error code.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_default_tgs_enctypes.html" title="krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure."
- >previous</a> |
- <a href="krb5_set_kdc_recv_hook.html" title="krb5_set_kdc_recv_hook - Set a KDC post-receive hook function."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_error_message - Set an extended error message for an error code.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_kdc_recv_hook - Set a KDC post-receive hook function. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_kdc_send_hook - Set a KDC pre-send hook function." href="krb5_set_kdc_send_hook.html" />
- <link rel="prev" title="krb5_set_error_message - Set an extended error message for an error code." href="krb5_set_error_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_error_message.html" title="krb5_set_error_message - Set an extended error message for an error code."
- accesskey="P">previous</a> |
- <a href="krb5_set_kdc_send_hook.html" title="krb5_set_kdc_send_hook - Set a KDC pre-send hook function."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_kdc_recv_hook - Set a KDC post-receive hook function.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-kdc-recv-hook-set-a-kdc-post-receive-hook-function">
-<h1>krb5_set_kdc_recv_hook - Set a KDC post-receive hook function.<a class="headerlink" href="#krb5-set-kdc-recv-hook-set-a-kdc-post-receive-hook-function" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_kdc_recv_hook">
-void <code class="descname">krb5_set_kdc_recv_hook</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_post_recv_fn.html#c.krb5_post_recv_fn" title="krb5_post_recv_fn">krb5_post_recv_fn</a><em> recv_hook</em>, void *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_kdc_recv_hook" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - The library context.</p>
-<p><strong>[in]</strong> <strong>recv_hook</strong> - Hook function (or NULL to disable the hook)</p>
-<p class="last"><strong>[in]</strong> <strong>data</strong> - Callback data to be passed to <em>recv_hook</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<blockquote>
-<div><em>recv_hook</em> will be called after a reply is received from a KDC during a call to a library function such as <a class="reference internal" href="krb5_get_credentials.html#c.krb5_get_credentials" title="krb5_get_credentials"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_credentials()</span></code></a> . The hook function may inspect or override the reply. This hook will not be executed if the pre-send hook returns a synthetic reply.</div></blockquote>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.15</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_kdc_recv_hook - Set a KDC post-receive hook function.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_error_message.html" title="krb5_set_error_message - Set an extended error message for an error code."
- >previous</a> |
- <a href="krb5_set_kdc_send_hook.html" title="krb5_set_kdc_send_hook - Set a KDC pre-send hook function."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_kdc_recv_hook - Set a KDC post-receive hook function.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_kdc_send_hook - Set a KDC pre-send hook function. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_real_time - Set time offset field in a krb5_context structure." href="krb5_set_real_time.html" />
- <link rel="prev" title="krb5_set_kdc_recv_hook - Set a KDC post-receive hook function." href="krb5_set_kdc_recv_hook.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_kdc_recv_hook.html" title="krb5_set_kdc_recv_hook - Set a KDC post-receive hook function."
- accesskey="P">previous</a> |
- <a href="krb5_set_real_time.html" title="krb5_set_real_time - Set time offset field in a krb5_context structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_kdc_send_hook - Set a KDC pre-send hook function.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-kdc-send-hook-set-a-kdc-pre-send-hook-function">
-<h1>krb5_set_kdc_send_hook - Set a KDC pre-send hook function.<a class="headerlink" href="#krb5-set-kdc-send-hook-set-a-kdc-pre-send-hook-function" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_kdc_send_hook">
-void <code class="descname">krb5_set_kdc_send_hook</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_pre_send_fn.html#c.krb5_pre_send_fn" title="krb5_pre_send_fn">krb5_pre_send_fn</a><em> send_hook</em>, void *<em> data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_kdc_send_hook" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>send_hook</strong> - Hook function (or NULL to disable the hook)</p>
-<p class="last"><strong>[in]</strong> <strong>data</strong> - Callback data to be passed to <em>send_hook</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<blockquote>
-<div><em>send_hook</em> will be called before messages are sent to KDCs by library functions such as <a class="reference internal" href="krb5_get_credentials.html#c.krb5_get_credentials" title="krb5_get_credentials"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_credentials()</span></code></a> . The hook function may inspect, override, or synthesize its own reply to the message.</div></blockquote>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.15</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_kdc_send_hook - Set a KDC pre-send hook function.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_kdc_recv_hook.html" title="krb5_set_kdc_recv_hook - Set a KDC post-receive hook function."
- >previous</a> |
- <a href="krb5_set_real_time.html" title="krb5_set_real_time - Set time offset field in a krb5_context structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_kdc_send_hook - Set a KDC pre-send hook function.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_password - Set a password for a principal using specified credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_password_using_ccache - Set a password for a principal using cached credentials." href="krb5_set_password_using_ccache.html" />
- <link rel="prev" title="krb5_set_default_realm - Override the default realm for the specified context." href="krb5_set_default_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_default_realm.html" title="krb5_set_default_realm - Override the default realm for the specified context."
- accesskey="P">previous</a> |
- <a href="krb5_set_password_using_ccache.html" title="krb5_set_password_using_ccache - Set a password for a principal using cached credentials."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_password - Set a password for a principal using specified credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-password-set-a-password-for-a-principal-using-specified-credentials">
-<h1>krb5_set_password - Set a password for a principal using specified credentials.<a class="headerlink" href="#krb5-set-password-set-a-password-for-a-principal-using-specified-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_password">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_set_password</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, const char *<em> newpw</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> change_password_for</em>, int *<em> result_code</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> result_code_string</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> result_string</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_password" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>creds</strong> - Credentials for kadmin/changepw service</p>
-<p><strong>[in]</strong> <strong>newpw</strong> - New password</p>
-<p><strong>[in]</strong> <strong>change_password_for</strong> - Change the password for this principal</p>
-<p><strong>[out]</strong> <strong>result_code</strong> - Numeric error code from server</p>
-<p><strong>[out]</strong> <strong>result_code_string</strong> - String equivalent to <em>result_code</em></p>
-<p class="last"><strong>[out]</strong> <strong>result_string</strong> - Data returned from the remote system</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success and result_code is set to KRB5_KPASSWD_SUCCESS .</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function uses the credentials <em>creds</em> to set the password <em>newpw</em> for the principal <em>change_password_for</em> . It implements the set password operation of RFC 3244, for interoperability with Microsoft Windows implementations.</p>
-<p>The error code and strings are returned in <em>result_code</em> , <em>result_code_string</em> and <em>result_string</em> .</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If <em>change_password_for</em> is NULL, the change is performed on the current principal. If <em>change_password_for</em> is non-null, the change is performed on the principal name passed in <em>change_password_for</em> .</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_password - Set a password for a principal using specified credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_default_realm.html" title="krb5_set_default_realm - Override the default realm for the specified context."
- >previous</a> |
- <a href="krb5_set_password_using_ccache.html" title="krb5_set_password_using_ccache - Set a password for a principal using cached credentials."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_password - Set a password for a principal using specified credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_password_using_ccache - Set a password for a principal using cached credentials. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_principal_realm - Set the realm field of a principal." href="krb5_set_principal_realm.html" />
- <link rel="prev" title="krb5_set_password - Set a password for a principal using specified credentials." href="krb5_set_password.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_password.html" title="krb5_set_password - Set a password for a principal using specified credentials."
- accesskey="P">previous</a> |
- <a href="krb5_set_principal_realm.html" title="krb5_set_principal_realm - Set the realm field of a principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_password_using_ccache - Set a password for a principal using cached credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-password-using-ccache-set-a-password-for-a-principal-using-cached-credentials">
-<h1>krb5_set_password_using_ccache - Set a password for a principal using cached credentials.<a class="headerlink" href="#krb5-set-password-using-ccache-set-a-password-for-a-principal-using-cached-credentials" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_password_using_ccache">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_set_password_using_ccache</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, const char *<em> newpw</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> change_password_for</em>, int *<em> result_code</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> result_code_string</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> result_string</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_password_using_ccache" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ccache</strong> - Credential cache</p>
-<p><strong>[in]</strong> <strong>newpw</strong> - New password</p>
-<p><strong>[in]</strong> <strong>change_password_for</strong> - Change the password for this principal</p>
-<p><strong>[out]</strong> <strong>result_code</strong> - Numeric error code from server</p>
-<p><strong>[out]</strong> <strong>result_code_string</strong> - String equivalent to <em>result_code</em></p>
-<p class="last"><strong>[out]</strong> <strong>result_string</strong> - Data returned from the remote system</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function uses the cached credentials from <em>ccache</em> to set the password <em>newpw</em> for the principal <em>change_password_for</em> . It implements RFC 3244 set password operation (interoperable with MS Windows implementations) using the credential cache.</p>
-<p>The error code and strings are returned in <em>result_code</em> , <em>result_code_string</em> and <em>result_string</em> .</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If <em>change_password_for</em> is set to NULL, the change is performed on the default principal in <em>ccache</em> . If <em>change_password_for</em> is non null, the change is performed on the specified principal.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_password_using_ccache - Set a password for a principal using cached credentials.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_password.html" title="krb5_set_password - Set a password for a principal using specified credentials."
- >previous</a> |
- <a href="krb5_set_principal_realm.html" title="krb5_set_principal_realm - Set the realm field of a principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_password_using_ccache - Set a password for a principal using cached credentials.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_principal_realm - Set the realm field of a principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_trace_callback - Specify a callback function for trace events." href="krb5_set_trace_callback.html" />
- <link rel="prev" title="krb5_set_password_using_ccache - Set a password for a principal using cached credentials." href="krb5_set_password_using_ccache.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_password_using_ccache.html" title="krb5_set_password_using_ccache - Set a password for a principal using cached credentials."
- accesskey="P">previous</a> |
- <a href="krb5_set_trace_callback.html" title="krb5_set_trace_callback - Specify a callback function for trace events."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_principal_realm - Set the realm field of a principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-principal-realm-set-the-realm-field-of-a-principal">
-<h1>krb5_set_principal_realm - Set the realm field of a principal.<a class="headerlink" href="#krb5-set-principal-realm-set-the-realm-field-of-a-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_principal_realm">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_set_principal_realm</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> principal</em>, const char *<em> realm</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_principal_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Principal name</p>
-<p class="last"><strong>[in]</strong> <strong>realm</strong> - Realm name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Set the realm name part of <em>principal</em> to <em>realm</em> , overwriting the previous realm.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_principal_realm - Set the realm field of a principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_password_using_ccache.html" title="krb5_set_password_using_ccache - Set a password for a principal using cached credentials."
- >previous</a> |
- <a href="krb5_set_trace_callback.html" title="krb5_set_trace_callback - Specify a callback function for trace events."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_principal_realm - Set the realm field of a principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_real_time - Set time offset field in a krb5_context structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_string_to_cksumtype - Convert a string to a checksum type." href="krb5_string_to_cksumtype.html" />
- <link rel="prev" title="krb5_set_kdc_send_hook - Set a KDC pre-send hook function." href="krb5_set_kdc_send_hook.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_kdc_send_hook.html" title="krb5_set_kdc_send_hook - Set a KDC pre-send hook function."
- accesskey="P">previous</a> |
- <a href="krb5_string_to_cksumtype.html" title="krb5_string_to_cksumtype - Convert a string to a checksum type."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_real_time - Set time offset field in a krb5_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-real-time-set-time-offset-field-in-a-krb5-context-structure">
-<h1>krb5_set_real_time - Set time offset field in a krb5_context structure.<a class="headerlink" href="#krb5-set-real-time-set-time-offset-field-in-a-krb5-context-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_real_time">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_set_real_time</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a><em> seconds</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a><em> microseconds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_real_time" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>seconds</strong> - Real time, seconds portion</p>
-<p class="last"><strong>[in]</strong> <strong>microseconds</strong> - Real time, microseconds portion</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function sets the time offset in <em>context</em> to the difference between the system time and the real time as determined by <em>seconds</em> and <em>microseconds</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_real_time - Set time offset field in a krb5_context structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_kdc_send_hook.html" title="krb5_set_kdc_send_hook - Set a KDC pre-send hook function."
- >previous</a> |
- <a href="krb5_string_to_cksumtype.html" title="krb5_string_to_cksumtype - Convert a string to a checksum type."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_real_time - Set time offset field in a krb5_context structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_trace_callback - Specify a callback function for trace events. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_set_trace_filename - Specify a file name for directing trace events." href="krb5_set_trace_filename.html" />
- <link rel="prev" title="krb5_set_principal_realm - Set the realm field of a principal." href="krb5_set_principal_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_principal_realm.html" title="krb5_set_principal_realm - Set the realm field of a principal."
- accesskey="P">previous</a> |
- <a href="krb5_set_trace_filename.html" title="krb5_set_trace_filename - Specify a file name for directing trace events."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_trace_callback - Specify a callback function for trace events.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-trace-callback-specify-a-callback-function-for-trace-events">
-<h1>krb5_set_trace_callback - Specify a callback function for trace events.<a class="headerlink" href="#krb5-set-trace-callback-specify-a-callback-function-for-trace-events" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_trace_callback">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_set_trace_callback</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_trace_callback.html#c.krb5_trace_callback" title="krb5_trace_callback">krb5_trace_callback</a><em> fn</em>, void *<em> cb_data</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_trace_callback" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>fn</strong> - Callback function</p>
-<p class="last"><strong>[in]</strong> <strong>cb_data</strong> - Callback data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Returns KRB5_TRACE_NOSUPP if tracing is not supported in the library (unless fn is NULL).</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Specify a callback for trace events occurring in krb5 operations performed within <em>context</em> . <em>fn</em> will be invoked with <em>context</em> as the first argument, <em>cb_data</em> as the last argument, and a pointer to a krb5_trace_info as the second argument. If the trace callback is reset via this function or <em>context</em> is destroyed, <em>fn</em> will be invoked with a NULL second argument so it can clean up <em>cb_data</em> . Supply a NULL value for <em>fn</em> to disable trace callbacks within <em>context</em> .</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function overrides the information passed through the <em>KRB5_TRACE</em> environment variable.</p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_trace_callback - Specify a callback function for trace events.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_principal_realm.html" title="krb5_set_principal_realm - Set the realm field of a principal."
- >previous</a> |
- <a href="krb5_set_trace_filename.html" title="krb5_set_trace_filename - Specify a file name for directing trace events."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_trace_callback - Specify a callback function for trace events.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_set_trace_filename - Specify a file name for directing trace events. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_sname_match - Test whether a principal matches a matching principal." href="krb5_sname_match.html" />
- <link rel="prev" title="krb5_set_trace_callback - Specify a callback function for trace events." href="krb5_set_trace_callback.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_trace_callback.html" title="krb5_set_trace_callback - Specify a callback function for trace events."
- accesskey="P">previous</a> |
- <a href="krb5_sname_match.html" title="krb5_sname_match - Test whether a principal matches a matching principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_trace_filename - Specify a file name for directing trace events.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-set-trace-filename-specify-a-file-name-for-directing-trace-events">
-<h1>krb5_set_trace_filename - Specify a file name for directing trace events.<a class="headerlink" href="#krb5-set-trace-filename-specify-a-file-name-for-directing-trace-events" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_set_trace_filename">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_set_trace_filename</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> filename</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_set_trace_filename" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>filename</strong> - File name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>KRB5_TRACE_NOSUPP Tracing is not supported in the library.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Open <em>filename</em> for appending (creating it, if necessary) and set up a callback to write trace events to it.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">This function overrides the information passed through the <em>KRB5_TRACE</em> environment variable.</p>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_set_trace_filename - Specify a file name for directing trace events.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_trace_callback.html" title="krb5_set_trace_callback - Specify a callback function for trace events."
- >previous</a> |
- <a href="krb5_sname_match.html" title="krb5_sname_match - Test whether a principal matches a matching principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_set_trace_filename - Specify a file name for directing trace events.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_sname_match - Test whether a principal matches a matching principal. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_sname_to_principal - Generate a full principal name from a service name." href="krb5_sname_to_principal.html" />
- <link rel="prev" title="krb5_set_trace_filename - Specify a file name for directing trace events." href="krb5_set_trace_filename.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_trace_filename.html" title="krb5_set_trace_filename - Specify a file name for directing trace events."
- accesskey="P">previous</a> |
- <a href="krb5_sname_to_principal.html" title="krb5_sname_to_principal - Generate a full principal name from a service name."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_sname_match - Test whether a principal matches a matching principal.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-sname-match-test-whether-a-principal-matches-a-matching-principal">
-<h1>krb5_sname_match - Test whether a principal matches a matching principal.<a class="headerlink" href="#krb5-sname-match-test-whether-a-principal-matches-a-matching-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_sname_match">
-<a class="reference internal" href="../types/krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_sname_match</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> matching</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> princ</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_sname_match" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>matching</strong> - Matching principal</p>
-<p class="last"><strong>[in]</strong> <strong>princ</strong> - Principal to test</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>TRUE if princ matches matching , FALSE otherwise.</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>If <em>matching</em> is NULL, return TRUE. If <em>matching</em> is not a matching principal, return the value of krb5_principal_compare(context, matching, princ).</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">A matching principal is a host-based principal with an empty realm and/or second data component (hostname). Profile configuration may cause the hostname to be ignored even if it is present. A principal matches a matching principal if the former has the same non-empty (and non-ignored) components of the latter.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_sname_match - Test whether a principal matches a matching principal.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_trace_filename.html" title="krb5_set_trace_filename - Specify a file name for directing trace events."
- >previous</a> |
- <a href="krb5_sname_to_principal.html" title="krb5_sname_to_principal - Generate a full principal name from a service name."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_sname_match - Test whether a principal matches a matching principal.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_sname_to_principal - Generate a full principal name from a service name. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_unparse_name - Convert a krb5_principal structure to a string representation." href="krb5_unparse_name.html" />
- <link rel="prev" title="krb5_sname_match - Test whether a principal matches a matching principal." href="krb5_sname_match.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_sname_match.html" title="krb5_sname_match - Test whether a principal matches a matching principal."
- accesskey="P">previous</a> |
- <a href="krb5_unparse_name.html" title="krb5_unparse_name - Convert a krb5_principal structure to a string representation."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_sname_to_principal - Generate a full principal name from a service name.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-sname-to-principal-generate-a-full-principal-name-from-a-service-name">
-<h1>krb5_sname_to_principal - Generate a full principal name from a service name.<a class="headerlink" href="#krb5-sname-to-principal-generate-a-full-principal-name-from-a-service-name" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_sname_to_principal">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_sname_to_principal</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const char *<em> hostname</em>, const char *<em> sname</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a><em> type</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> ret_princ</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_sname_to_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>hostname</strong> - Host name, or NULL to use local host</p>
-<p><strong>[in]</strong> <strong>sname</strong> - Service name, or NULL to use <strong>“host”</strong></p>
-<p><strong>[in]</strong> <strong>type</strong> - Principal type</p>
-<p class="last"><strong>[out]</strong> <strong>ret_princ</strong> - Generated principal</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function converts a <em>hostname</em> and <em>sname</em> into <em>krb5_principal</em> structure <em>ret_princ</em> . The returned principal will be of the form <em>sname/hostname@REALM</em> where REALM is determined by <a class="reference internal" href="krb5_get_host_realm.html#c.krb5_get_host_realm" title="krb5_get_host_realm"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_host_realm()</span></code></a> . In some cases this may be the referral (empty) realm.</p>
-<p>The <em>type</em> can be one of the following:</p>
-<blockquote>
-<div><blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_NT_SRV_HST.html#KRB5_NT_SRV_HST" title="KRB5_NT_SRV_HST"><code class="xref py py-data docutils literal"><span class="pre">KRB5_NT_SRV_HST</span></code></a> canonicalizes the host name before looking up the realm and generating the principal.</li>
-<li><a class="reference internal" href="../macros/KRB5_NT_UNKNOWN.html#KRB5_NT_UNKNOWN" title="KRB5_NT_UNKNOWN"><code class="xref py py-data docutils literal"><span class="pre">KRB5_NT_UNKNOWN</span></code></a> accepts the hostname as given, and does not canonicalize it.</li>
-</ul>
-</div></blockquote>
-<p>Use krb5_free_principal to free <em>ret_princ</em> when it is no longer needed.</p>
-</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_sname_to_principal - Generate a full principal name from a service name.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_sname_match.html" title="krb5_sname_match - Test whether a principal matches a matching principal."
- >previous</a> |
- <a href="krb5_unparse_name.html" title="krb5_unparse_name - Convert a krb5_principal structure to a string representation."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_sname_to_principal - Generate a full principal name from a service name.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_string_to_cksumtype - Convert a string to a checksum type. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_string_to_deltat - Convert a string to a delta time value." href="krb5_string_to_deltat.html" />
- <link rel="prev" title="krb5_set_real_time - Set time offset field in a krb5_context structure." href="krb5_set_real_time.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_set_real_time.html" title="krb5_set_real_time - Set time offset field in a krb5_context structure."
- accesskey="P">previous</a> |
- <a href="krb5_string_to_deltat.html" title="krb5_string_to_deltat - Convert a string to a delta time value."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_cksumtype - Convert a string to a checksum type.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-string-to-cksumtype-convert-a-string-to-a-checksum-type">
-<h1>krb5_string_to_cksumtype - Convert a string to a checksum type.<a class="headerlink" href="#krb5-string-to-cksumtype-convert-a-string-to-a-checksum-type" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_string_to_cksumtype">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_string_to_cksumtype</code><span class="sig-paren">(</span>char *<em> string</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a> *<em> cksumtypep</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_string_to_cksumtype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>string</strong> - String to be converted</p>
-<p class="last"><strong>[out]</strong> <strong>cksumtypep</strong> - Checksum type to be filled in</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - EINVAL</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_string_to_cksumtype - Convert a string to a checksum type.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_set_real_time.html" title="krb5_set_real_time - Set time offset field in a krb5_context structure."
- >previous</a> |
- <a href="krb5_string_to_deltat.html" title="krb5_string_to_deltat - Convert a string to a delta time value."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_cksumtype - Convert a string to a checksum type.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_string_to_deltat - Convert a string to a delta time value. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_string_to_enctype - Convert a string to an encryption type." href="krb5_string_to_enctype.html" />
- <link rel="prev" title="krb5_string_to_cksumtype - Convert a string to a checksum type." href="krb5_string_to_cksumtype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_string_to_cksumtype.html" title="krb5_string_to_cksumtype - Convert a string to a checksum type."
- accesskey="P">previous</a> |
- <a href="krb5_string_to_enctype.html" title="krb5_string_to_enctype - Convert a string to an encryption type."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_deltat - Convert a string to a delta time value.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-string-to-deltat-convert-a-string-to-a-delta-time-value">
-<h1>krb5_string_to_deltat - Convert a string to a delta time value.<a class="headerlink" href="#krb5-string-to-deltat-convert-a-string-to-a-delta-time-value" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_string_to_deltat">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_string_to_deltat</code><span class="sig-paren">(</span>char *<em> string</em>, <a class="reference internal" href="../types/krb5_deltat.html#c.krb5_deltat" title="krb5_deltat">krb5_deltat</a> *<em> deltatp</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_string_to_deltat" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>string</strong> - String to be converted</p>
-<p class="last"><strong>[out]</strong> <strong>deltatp</strong> - Delta time to be filled in</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - KRB5_DELTAT_BADFORMAT</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_string_to_deltat - Convert a string to a delta time value.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_string_to_cksumtype.html" title="krb5_string_to_cksumtype - Convert a string to a checksum type."
- >previous</a> |
- <a href="krb5_string_to_enctype.html" title="krb5_string_to_enctype - Convert a string to an encryption type."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_deltat - Convert a string to a delta time value.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_string_to_enctype - Convert a string to an encryption type. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_string_to_salttype - Convert a string to a salt type." href="krb5_string_to_salttype.html" />
- <link rel="prev" title="krb5_string_to_deltat - Convert a string to a delta time value." href="krb5_string_to_deltat.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_string_to_deltat.html" title="krb5_string_to_deltat - Convert a string to a delta time value."
- accesskey="P">previous</a> |
- <a href="krb5_string_to_salttype.html" title="krb5_string_to_salttype - Convert a string to a salt type."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_enctype - Convert a string to an encryption type.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-string-to-enctype-convert-a-string-to-an-encryption-type">
-<h1>krb5_string_to_enctype - Convert a string to an encryption type.<a class="headerlink" href="#krb5-string-to-enctype-convert-a-string-to-an-encryption-type" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_string_to_enctype">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_string_to_enctype</code><span class="sig-paren">(</span>char *<em> string</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> *<em> enctypep</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_string_to_enctype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>string</strong> - String to convert to an encryption type</p>
-<p class="last"><strong>[out]</strong> <strong>enctypep</strong> - Encryption type</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - EINVAL</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_string_to_enctype - Convert a string to an encryption type.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_string_to_deltat.html" title="krb5_string_to_deltat - Convert a string to a delta time value."
- >previous</a> |
- <a href="krb5_string_to_salttype.html" title="krb5_string_to_salttype - Convert a string to a salt type."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_enctype - Convert a string to an encryption type.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_string_to_key — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_use_enctype" href="krb5_use_enctype.html" />
- <link rel="prev" title="krb5_process_key" href="krb5_process_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_process_key.html" title="krb5_process_key"
- accesskey="P">previous</a> |
- <a href="krb5_use_enctype.html" title="krb5_use_enctype"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_key">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-string-to-key">
-<h1>krb5_string_to_key<a class="headerlink" href="#krb5-string-to-key" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_string_to_key">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_string_to_key</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_encrypt_block.html#c.krb5_encrypt_block" title="krb5_encrypt_block">krb5_encrypt_block</a> *<em> eblock</em>, <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> keyblock</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> salt</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_string_to_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>eblock</strong></p>
-<p><strong>keyblock</strong></p>
-<p><strong>data</strong></p>
-<p class="last"><strong>salt</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED See krb5_c_string_to_key()</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_string_to_key</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_process_key.html" title="krb5_process_key"
- >previous</a> |
- <a href="krb5_use_enctype.html" title="krb5_use_enctype"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_key">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_string_to_salttype - Convert a string to a salt type. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_string_to_timestamp - Convert a string to a timestamp." href="krb5_string_to_timestamp.html" />
- <link rel="prev" title="krb5_string_to_enctype - Convert a string to an encryption type." href="krb5_string_to_enctype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_string_to_enctype.html" title="krb5_string_to_enctype - Convert a string to an encryption type."
- accesskey="P">previous</a> |
- <a href="krb5_string_to_timestamp.html" title="krb5_string_to_timestamp - Convert a string to a timestamp."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_salttype - Convert a string to a salt type.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-string-to-salttype-convert-a-string-to-a-salt-type">
-<h1>krb5_string_to_salttype - Convert a string to a salt type.<a class="headerlink" href="#krb5-string-to-salttype-convert-a-string-to-a-salt-type" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_string_to_salttype">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_string_to_salttype</code><span class="sig-paren">(</span>char *<em> string</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> *<em> salttypep</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_string_to_salttype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>string</strong> - String to convert to an encryption type</p>
-<p class="last"><strong>[out]</strong> <strong>salttypep</strong> - Salt type to be filled in</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - EINVAL</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_string_to_salttype - Convert a string to a salt type.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_string_to_enctype.html" title="krb5_string_to_enctype - Convert a string to an encryption type."
- >previous</a> |
- <a href="krb5_string_to_timestamp.html" title="krb5_string_to_timestamp - Convert a string to a timestamp."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_salttype - Convert a string to a salt type.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_string_to_timestamp - Convert a string to a timestamp. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_timeofday - Retrieve the current time with context specific time offset adjustment." href="krb5_timeofday.html" />
- <link rel="prev" title="krb5_string_to_salttype - Convert a string to a salt type." href="krb5_string_to_salttype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_string_to_salttype.html" title="krb5_string_to_salttype - Convert a string to a salt type."
- accesskey="P">previous</a> |
- <a href="krb5_timeofday.html" title="krb5_timeofday - Retrieve the current time with context specific time offset adjustment."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_timestamp - Convert a string to a timestamp.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-string-to-timestamp-convert-a-string-to-a-timestamp">
-<h1>krb5_string_to_timestamp - Convert a string to a timestamp.<a class="headerlink" href="#krb5-string-to-timestamp-convert-a-string-to-a-timestamp" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_string_to_timestamp">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_string_to_timestamp</code><span class="sig-paren">(</span>char *<em> string</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> *<em> timestampp</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_string_to_timestamp" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>string</strong> - String to be converted</p>
-<p class="last"><strong>[out]</strong> <strong>timestampp</strong> - Pointer to timestamp</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - EINVAL</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_string_to_timestamp - Convert a string to a timestamp.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_string_to_salttype.html" title="krb5_string_to_salttype - Convert a string to a salt type."
- >previous</a> |
- <a href="krb5_timeofday.html" title="krb5_timeofday - Retrieve the current time with context specific time offset adjustment."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_string_to_timestamp - Convert a string to a timestamp.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_timeofday - Retrieve the current time with context specific time offset adjustment. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding." href="krb5_timestamp_to_sfstring.html" />
- <link rel="prev" title="krb5_string_to_timestamp - Convert a string to a timestamp." href="krb5_string_to_timestamp.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_string_to_timestamp.html" title="krb5_string_to_timestamp - Convert a string to a timestamp."
- accesskey="P">previous</a> |
- <a href="krb5_timestamp_to_sfstring.html" title="krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_timeofday - Retrieve the current time with context specific time offset adjustment.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-timeofday-retrieve-the-current-time-with-context-specific-time-offset-adjustment">
-<h1>krb5_timeofday - Retrieve the current time with context specific time offset adjustment.<a class="headerlink" href="#krb5-timeofday-retrieve-the-current-time-with-context-specific-time-offset-adjustment" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_timeofday">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_timeofday</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> *<em> timeret</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_timeofday" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[out]</strong> <strong>timeret</strong> - Timestamp to fill in</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function retrieves the system time of day with the context specific time offset adjustment.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_timeofday - Retrieve the current time with context specific time offset adjustment.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_string_to_timestamp.html" title="krb5_string_to_timestamp - Convert a string to a timestamp."
- >previous</a> |
- <a href="krb5_timestamp_to_sfstring.html" title="krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_timeofday - Retrieve the current time with context specific time offset adjustment.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_timestamp_to_string - Convert a timestamp to a string." href="krb5_timestamp_to_string.html" />
- <link rel="prev" title="krb5_timeofday - Retrieve the current time with context specific time offset adjustment." href="krb5_timeofday.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_timeofday.html" title="krb5_timeofday - Retrieve the current time with context specific time offset adjustment."
- accesskey="P">previous</a> |
- <a href="krb5_timestamp_to_string.html" title="krb5_timestamp_to_string - Convert a timestamp to a string."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-timestamp-to-sfstring-convert-a-timestamp-to-a-string-with-optional-output-padding">
-<h1>krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding.<a class="headerlink" href="#krb5-timestamp-to-sfstring-convert-a-timestamp-to-a-string-with-optional-output-padding" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_timestamp_to_sfstring">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_timestamp_to_sfstring</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a><em> timestamp</em>, char *<em> buffer</em>, size_t<em> buflen</em>, char *<em> pad</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_timestamp_to_sfstring" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>timestamp</strong> - Timestamp to convert</p>
-<p><strong>[out]</strong> <strong>buffer</strong> - Buffer to hold the converted timestamp</p>
-<p><strong>[in]</strong> <strong>buflen</strong> - Length of buffer</p>
-<p class="last"><strong>[in]</strong> <strong>pad</strong> - Optional value to pad <em>buffer</em> if converted timestamp does not fill it</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>If <em>pad</em> is not NULL, <em>buffer</em> is padded out to <em>buflen</em> - 1 characters with the value of * <em>pad</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_timeofday.html" title="krb5_timeofday - Retrieve the current time with context specific time offset adjustment."
- >previous</a> |
- <a href="krb5_timestamp_to_string.html" title="krb5_timestamp_to_string - Convert a timestamp to a string."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_timestamp_to_string - Convert a timestamp to a string. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_tkt_creds_free - Free a TGS request context." href="krb5_tkt_creds_free.html" />
- <link rel="prev" title="krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding." href="krb5_timestamp_to_sfstring.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_timestamp_to_sfstring.html" title="krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding."
- accesskey="P">previous</a> |
- <a href="krb5_tkt_creds_free.html" title="krb5_tkt_creds_free - Free a TGS request context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_timestamp_to_string - Convert a timestamp to a string.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-timestamp-to-string-convert-a-timestamp-to-a-string">
-<h1>krb5_timestamp_to_string - Convert a timestamp to a string.<a class="headerlink" href="#krb5-timestamp-to-string-convert-a-timestamp-to-a-string" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_timestamp_to_string">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_timestamp_to_string</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a><em> timestamp</em>, char *<em> buffer</em>, size_t<em> buflen</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_timestamp_to_string" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>timestamp</strong> - Timestamp to convert</p>
-<p><strong>[out]</strong> <strong>buffer</strong> - Buffer to hold converted timestamp</p>
-<p class="last"><strong>[in]</strong> <strong>buflen</strong> - Storage available in <em>buffer</em></p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>The string is returned in the locale’s appropriate date and time representation.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_timestamp_to_string - Convert a timestamp to a string.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_timestamp_to_sfstring.html" title="krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding."
- >previous</a> |
- <a href="krb5_tkt_creds_free.html" title="krb5_tkt_creds_free - Free a TGS request context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_timestamp_to_string - Convert a timestamp to a string.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_tkt_creds_free - Free a TGS request context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context." href="krb5_tkt_creds_get.html" />
- <link rel="prev" title="krb5_timestamp_to_string - Convert a timestamp to a string." href="krb5_timestamp_to_string.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_timestamp_to_string.html" title="krb5_timestamp_to_string - Convert a timestamp to a string."
- accesskey="P">previous</a> |
- <a href="krb5_tkt_creds_get.html" title="krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_free - Free a TGS request context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tkt-creds-free-free-a-tgs-request-context">
-<h1>krb5_tkt_creds_free - Free a TGS request context.<a class="headerlink" href="#krb5-tkt-creds-free-free-a-tgs-request-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_tkt_creds_free">
-void <code class="descname">krb5_tkt_creds_free</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_tkt_creds_context.html#c.krb5_tkt_creds_context" title="krb5_tkt_creds_context">krb5_tkt_creds_context</a><em> ctx</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_tkt_creds_free" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>ctx</strong> - TGS request context</p>
-</td>
-</tr>
-</tbody>
-</table>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_tkt_creds_free - Free a TGS request context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_timestamp_to_string.html" title="krb5_timestamp_to_string - Convert a timestamp to a string."
- >previous</a> |
- <a href="krb5_tkt_creds_get.html" title="krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_free - Free a TGS request context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context." href="krb5_tkt_creds_get_creds.html" />
- <link rel="prev" title="krb5_tkt_creds_free - Free a TGS request context." href="krb5_tkt_creds_free.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_tkt_creds_free.html" title="krb5_tkt_creds_free - Free a TGS request context."
- accesskey="P">previous</a> |
- <a href="krb5_tkt_creds_get_creds.html" title="krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tkt-creds-get-synchronously-obtain-credentials-using-a-tgs-request-context">
-<h1>krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context.<a class="headerlink" href="#krb5-tkt-creds-get-synchronously-obtain-credentials-using-a-tgs-request-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_tkt_creds_get">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_tkt_creds_get</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_tkt_creds_context.html#c.krb5_tkt_creds_context" title="krb5_tkt_creds_context">krb5_tkt_creds_context</a><em> ctx</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_tkt_creds_get" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p class="last"><strong>[in]</strong> <strong>ctx</strong> - TGS request context</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function synchronously obtains credentials using a context created by <a class="reference internal" href="krb5_tkt_creds_init.html#c.krb5_tkt_creds_init" title="krb5_tkt_creds_init"><code class="xref c c-func docutils literal"><span class="pre">krb5_tkt_creds_init()</span></code></a> . On successful return, the credentials can be retrieved with <a class="reference internal" href="krb5_tkt_creds_get_creds.html#c.krb5_tkt_creds_get_creds" title="krb5_tkt_creds_get_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_tkt_creds_get_creds()</span></code></a> .</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_tkt_creds_free.html" title="krb5_tkt_creds_free - Free a TGS request context."
- >previous</a> |
- <a href="krb5_tkt_creds_get_creds.html" title="krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context." href="krb5_tkt_creds_get_times.html" />
- <link rel="prev" title="krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context." href="krb5_tkt_creds_get.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_tkt_creds_get.html" title="krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context."
- accesskey="P">previous</a> |
- <a href="krb5_tkt_creds_get_times.html" title="krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tkt-creds-get-creds-retrieve-acquired-credentials-from-a-tgs-request-context">
-<h1>krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context.<a class="headerlink" href="#krb5-tkt-creds-get-creds-retrieve-acquired-credentials-from-a-tgs-request-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_tkt_creds_get_creds">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_tkt_creds_get_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_tkt_creds_context.html#c.krb5_tkt_creds_context" title="krb5_tkt_creds_context">krb5_tkt_creds_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_tkt_creds_get_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ctx</strong> - TGS request context</p>
-<p class="last"><strong>[out]</strong> <strong>creds</strong> - Acquired credentials</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function copies the acquired initial credentials from <em>ctx</em> into <em>creds</em> , after the successful completion of <a class="reference internal" href="krb5_tkt_creds_get.html#c.krb5_tkt_creds_get" title="krb5_tkt_creds_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_tkt_creds_get()</span></code></a> or <a class="reference internal" href="krb5_tkt_creds_step.html#c.krb5_tkt_creds_step" title="krb5_tkt_creds_step"><code class="xref c c-func docutils literal"><span class="pre">krb5_tkt_creds_step()</span></code></a> . Use <a class="reference internal" href="krb5_free_cred_contents.html#c.krb5_free_cred_contents" title="krb5_free_cred_contents"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_cred_contents()</span></code></a> to free <em>creds</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_tkt_creds_get.html" title="krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context."
- >previous</a> |
- <a href="krb5_tkt_creds_get_times.html" title="krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service." href="krb5_tkt_creds_init.html" />
- <link rel="prev" title="krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context." href="krb5_tkt_creds_get_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_tkt_creds_get_creds.html" title="krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context."
- accesskey="P">previous</a> |
- <a href="krb5_tkt_creds_init.html" title="krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tkt-creds-get-times-retrieve-ticket-times-from-a-tgs-request-context">
-<h1>krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context.<a class="headerlink" href="#krb5-tkt-creds-get-times-retrieve-ticket-times-from-a-tgs-request-context" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_tkt_creds_get_times">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_tkt_creds_get_times</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_tkt_creds_context.html#c.krb5_tkt_creds_context" title="krb5_tkt_creds_context">krb5_tkt_creds_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_ticket_times.html#c.krb5_ticket_times" title="krb5_ticket_times">krb5_ticket_times</a> *<em> times</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_tkt_creds_get_times" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ctx</strong> - TGS request context</p>
-<p class="last"><strong>[out]</strong> <strong>times</strong> - Ticket times for acquired credentials</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>The TGS request context must have completed obtaining credentials via either <a class="reference internal" href="krb5_tkt_creds_get.html#c.krb5_tkt_creds_get" title="krb5_tkt_creds_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_tkt_creds_get()</span></code></a> or <a class="reference internal" href="krb5_tkt_creds_step.html#c.krb5_tkt_creds_step" title="krb5_tkt_creds_step"><code class="xref c c-func docutils literal"><span class="pre">krb5_tkt_creds_step()</span></code></a> .</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_tkt_creds_get_creds.html" title="krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context."
- >previous</a> |
- <a href="krb5_tkt_creds_init.html" title="krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_tkt_creds_step - Get the next KDC request in a TGS exchange." href="krb5_tkt_creds_step.html" />
- <link rel="prev" title="krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context." href="krb5_tkt_creds_get_times.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_tkt_creds_get_times.html" title="krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context."
- accesskey="P">previous</a> |
- <a href="krb5_tkt_creds_step.html" title="krb5_tkt_creds_step - Get the next KDC request in a TGS exchange."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tkt-creds-init-create-a-context-to-get-credentials-from-a-kdc-s-ticket-granting-service">
-<h1>krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service.<a class="headerlink" href="#krb5-tkt-creds-init-create-a-context-to-get-credentials-from-a-kdc-s-ticket-granting-service" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_tkt_creds_init">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_tkt_creds_init</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a><em> ccache</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, <a class="reference internal" href="../types/krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a><em> options</em>, <a class="reference internal" href="../types/krb5_tkt_creds_context.html#c.krb5_tkt_creds_context" title="krb5_tkt_creds_context">krb5_tkt_creds_context</a> *<em> ctx</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_tkt_creds_init" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ccache</strong> - Credential cache handle</p>
-<p><strong>[in]</strong> <strong>creds</strong> - Input credentials</p>
-<p><strong>[in]</strong> <strong>options</strong> - <code class="xref py py-data docutils literal"><span class="pre">KRB5_GC</span></code> options for this request.</p>
-<p class="last"><strong>[out]</strong> <strong>ctx</strong> - New TGS request context</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function prepares to obtain credentials matching <em>creds</em> , either by retrieving them from <em>ccache</em> or by making requests to ticket-granting services beginning with a ticket-granting ticket for the client principal’s realm.</p>
-<p>The resulting TGS acquisition context can be used asynchronously with <a class="reference internal" href="krb5_tkt_creds_step.html#c.krb5_tkt_creds_step" title="krb5_tkt_creds_step"><code class="xref c c-func docutils literal"><span class="pre">krb5_tkt_creds_step()</span></code></a> or synchronously with <a class="reference internal" href="krb5_tkt_creds_get.html#c.krb5_tkt_creds_get" title="krb5_tkt_creds_get"><code class="xref c c-func docutils literal"><span class="pre">krb5_tkt_creds_get()</span></code></a> . See also <a class="reference internal" href="krb5_get_credentials.html#c.krb5_get_credentials" title="krb5_get_credentials"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_credentials()</span></code></a> for synchronous use.</p>
-<p>Use <a class="reference internal" href="krb5_tkt_creds_free.html#c.krb5_tkt_creds_free" title="krb5_tkt_creds_free"><code class="xref c c-func docutils literal"><span class="pre">krb5_tkt_creds_free()</span></code></a> to free <em>ctx</em> when it is no longer needed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_tkt_creds_get_times.html" title="krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context."
- >previous</a> |
- <a href="krb5_tkt_creds_step.html" title="krb5_tkt_creds_step - Get the next KDC request in a TGS exchange."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_tkt_creds_step - Get the next KDC request in a TGS exchange. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_unmarshal_credentials - Deserialize a krb5_creds object." href="krb5_unmarshal_credentials.html" />
- <link rel="prev" title="krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service." href="krb5_tkt_creds_init.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_tkt_creds_init.html" title="krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service."
- accesskey="P">previous</a> |
- <a href="krb5_unmarshal_credentials.html" title="krb5_unmarshal_credentials - Deserialize a krb5_creds object."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_step - Get the next KDC request in a TGS exchange.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tkt-creds-step-get-the-next-kdc-request-in-a-tgs-exchange">
-<h1>krb5_tkt_creds_step - Get the next KDC request in a TGS exchange.<a class="headerlink" href="#krb5-tkt-creds-step-get-the-next-kdc-request-in-a-tgs-exchange" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_tkt_creds_step">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_tkt_creds_step</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_tkt_creds_context.html#c.krb5_tkt_creds_context" title="krb5_tkt_creds_context">krb5_tkt_creds_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> in</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> out</em>, <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> realm</em>, unsigned int *<em> flags</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_tkt_creds_step" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>ctx</strong> - TGS request context</p>
-<p><strong>[in]</strong> <strong>in</strong> - KDC response (empty on the first call)</p>
-<p><strong>[out]</strong> <strong>out</strong> - Next KDC request</p>
-<p><strong>[out]</strong> <strong>realm</strong> - Realm for next KDC request</p>
-<p class="last"><strong>[out]</strong> <strong>flags</strong> - Output flags</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function constructs the next KDC request for a TGS exchange, allowing the caller to control the transport of KDC requests and replies. On the first call, <em>in</em> should be set to an empty buffer; on subsequent calls, it should be set to the KDC’s reply to the previous request.</p>
-<p>If more requests are needed, <em>flags</em> will be set to <a class="reference internal" href="../macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html#KRB5_TKT_CREDS_STEP_FLAG_CONTINUE" title="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TKT_CREDS_STEP_FLAG_CONTINUE</span></code></a> and the next request will be placed in <em>out</em> . If no more requests are needed, <em>flags</em> will not contain <a class="reference internal" href="../macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html#KRB5_TKT_CREDS_STEP_FLAG_CONTINUE" title="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE"><code class="xref py py-data docutils literal"><span class="pre">KRB5_TKT_CREDS_STEP_FLAG_CONTINUE</span></code></a> and <em>out</em> will be empty.</p>
-<p>If this function returns <strong>KRB5KRB_ERR_RESPONSE_TOO_BIG</strong> , the caller should transmit the next request using TCP rather than UDP. If this function returns any other error, the TGS exchange has failed.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">New in 1.9</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_tkt_creds_step - Get the next KDC request in a TGS exchange.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_tkt_creds_init.html" title="krb5_tkt_creds_init - Create a context to get credentials from a KDC’s Ticket Granting Service."
- >previous</a> |
- <a href="krb5_unmarshal_credentials.html" title="krb5_unmarshal_credentials - Deserialize a krb5_creds object."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_step - Get the next KDC request in a TGS exchange.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_unmarshal_credentials - Deserialize a krb5_creds object. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_verify_init_creds - Verify initial credentials against a keytab." href="krb5_verify_init_creds.html" />
- <link rel="prev" title="krb5_tkt_creds_step - Get the next KDC request in a TGS exchange." href="krb5_tkt_creds_step.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_tkt_creds_step.html" title="krb5_tkt_creds_step - Get the next KDC request in a TGS exchange."
- accesskey="P">previous</a> |
- <a href="krb5_verify_init_creds.html" title="krb5_verify_init_creds - Verify initial credentials against a keytab."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_unmarshal_credentials - Deserialize a krb5_creds object.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-unmarshal-credentials-deserialize-a-krb5-creds-object">
-<h1>krb5_unmarshal_credentials - Deserialize a krb5_creds object.<a class="headerlink" href="#krb5-unmarshal-credentials-deserialize-a-krb5-creds-object" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_unmarshal_credentials">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_unmarshal_credentials</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> *<em> data</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> **<em> creds_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_unmarshal_credentials" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>data</strong> - The serialized credentials</p>
-<p class="last"><strong>[out]</strong> <strong>creds_out</strong> - The resulting creds object</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Deserialize <em>data</em> to credentials in the format used by the FILE ccache format (vesion 4) and KCM ccache protocol.</p>
-<p>Use <a class="reference internal" href="krb5_free_creds.html#c.krb5_free_creds" title="krb5_free_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_creds()</span></code></a> to free <em>creds_out</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_unmarshal_credentials - Deserialize a krb5_creds object.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_tkt_creds_step.html" title="krb5_tkt_creds_step - Get the next KDC request in a TGS exchange."
- >previous</a> |
- <a href="krb5_verify_init_creds.html" title="krb5_verify_init_creds - Verify initial credentials against a keytab."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_unmarshal_credentials - Deserialize a krb5_creds object.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_unparse_name - Convert a krb5_principal structure to a string representation. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_unparse_name_ext - Convert krb5_principal structure to string and length." href="krb5_unparse_name_ext.html" />
- <link rel="prev" title="krb5_sname_to_principal - Generate a full principal name from a service name." href="krb5_sname_to_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_sname_to_principal.html" title="krb5_sname_to_principal - Generate a full principal name from a service name."
- accesskey="P">previous</a> |
- <a href="krb5_unparse_name_ext.html" title="krb5_unparse_name_ext - Convert krb5_principal structure to string and length."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_unparse_name - Convert a krb5_principal structure to a string representation.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-unparse-name-convert-a-krb5-principal-structure-to-a-string-representation">
-<h1>krb5_unparse_name - Convert a krb5_principal structure to a string representation.<a class="headerlink" href="#krb5-unparse-name-convert-a-krb5-principal-structure-to-a-string-representation" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_unparse_name">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_unparse_name</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, char **<em> name</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_unparse_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Principal</p>
-<p class="last"><strong>[out]</strong> <strong>name</strong> - String representation of principal name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>The resulting string representation uses the format and quoting conventions described for <a class="reference internal" href="krb5_parse_name.html#c.krb5_parse_name" title="krb5_parse_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_parse_name()</span></code></a> .</p>
-<p>Use <a class="reference internal" href="krb5_free_unparsed_name.html#c.krb5_free_unparsed_name" title="krb5_free_unparsed_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_unparsed_name()</span></code></a> to free <em>name</em> when it is no longer needed.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_unparse_name - Convert a krb5_principal structure to a string representation.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_sname_to_principal.html" title="krb5_sname_to_principal - Generate a full principal name from a service name."
- >previous</a> |
- <a href="krb5_unparse_name_ext.html" title="krb5_unparse_name_ext - Convert krb5_principal structure to string and length."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_unparse_name - Convert a krb5_principal structure to a string representation.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_unparse_name_ext - Convert krb5_principal structure to string and length. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags." href="krb5_unparse_name_flags.html" />
- <link rel="prev" title="krb5_unparse_name - Convert a krb5_principal structure to a string representation." href="krb5_unparse_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_unparse_name.html" title="krb5_unparse_name - Convert a krb5_principal structure to a string representation."
- accesskey="P">previous</a> |
- <a href="krb5_unparse_name_flags.html" title="krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_unparse_name_ext - Convert krb5_principal structure to string and length.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-unparse-name-ext-convert-krb5-principal-structure-to-string-and-length">
-<h1>krb5_unparse_name_ext - Convert krb5_principal structure to string and length.<a class="headerlink" href="#krb5-unparse-name-ext-convert-krb5-principal-structure-to-string-and-length" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_unparse_name_ext">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_unparse_name_ext</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, char **<em> name</em>, unsigned int *<em> size</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_unparse_name_ext" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Principal</p>
-<p><strong>[inout]</strong> <strong>name</strong> - String representation of principal name</p>
-<p class="last"><strong>[inout]</strong> <strong>size</strong> - Size of unparsed name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes. On failure name is set to NULL</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is similar to <a class="reference internal" href="krb5_unparse_name.html#c.krb5_unparse_name" title="krb5_unparse_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_unparse_name()</span></code></a> , but allows the use of an existing buffer for the result. If size is not NULL, then <em>name</em> must point to either NULL or an existing buffer of at least the size pointed to by <em>size</em> . The buffer will be allocated or resized if necessary, with the new pointer stored into <em>name</em> . Whether or not the buffer is resized, the necessary space for the result, including null terminator, will be stored into <em>size</em> .</p>
-<p>If size is NULL, this function behaves exactly as <a class="reference internal" href="krb5_unparse_name.html#c.krb5_unparse_name" title="krb5_unparse_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_unparse_name()</span></code></a> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_unparse_name_ext - Convert krb5_principal structure to string and length.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_unparse_name.html" title="krb5_unparse_name - Convert a krb5_principal structure to a string representation."
- >previous</a> |
- <a href="krb5_unparse_name_flags.html" title="krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_unparse_name_ext - Convert krb5_principal structure to string and length.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags." href="krb5_unparse_name_flags_ext.html" />
- <link rel="prev" title="krb5_unparse_name_ext - Convert krb5_principal structure to string and length." href="krb5_unparse_name_ext.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_unparse_name_ext.html" title="krb5_unparse_name_ext - Convert krb5_principal structure to string and length."
- accesskey="P">previous</a> |
- <a href="krb5_unparse_name_flags_ext.html" title="krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-unparse-name-flags-convert-krb5-principal-structure-to-a-string-with-flags">
-<h1>krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags.<a class="headerlink" href="#krb5-unparse-name-flags-convert-krb5-principal-structure-to-a-string-with-flags" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_unparse_name_flags">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_unparse_name_flags</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, int<em> flags</em>, char **<em> name</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_unparse_name_flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Principal</p>
-<p><strong>[in]</strong> <strong>flags</strong> - Flags</p>
-<p class="last"><strong>[out]</strong> <strong>name</strong> - String representation of principal name</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes. On failure name is set to NULL</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Similar to <a class="reference internal" href="krb5_unparse_name.html#c.krb5_unparse_name" title="krb5_unparse_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_unparse_name()</span></code></a> , this function converts a krb5_principal structure to a string representation.</p>
-<p>The following flags are valid:</p>
-<blockquote>
-<div><blockquote>
-<div><ul class="simple">
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_UNPARSE_SHORT.html#KRB5_PRINCIPAL_UNPARSE_SHORT" title="KRB5_PRINCIPAL_UNPARSE_SHORT"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_UNPARSE_SHORT</span></code></a> - omit realm if it is the local realm</li>
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM.html#KRB5_PRINCIPAL_UNPARSE_NO_REALM" title="KRB5_PRINCIPAL_UNPARSE_NO_REALM"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_UNPARSE_NO_REALM</span></code></a> - omit realm</li>
-<li><a class="reference internal" href="../macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY.html#KRB5_PRINCIPAL_UNPARSE_DISPLAY" title="KRB5_PRINCIPAL_UNPARSE_DISPLAY"><code class="xref py py-data docutils literal"><span class="pre">KRB5_PRINCIPAL_UNPARSE_DISPLAY</span></code></a> - do not quote special characters</li>
-</ul>
-</div></blockquote>
-<p>Use <a class="reference internal" href="krb5_free_unparsed_name.html#c.krb5_free_unparsed_name" title="krb5_free_unparsed_name"><code class="xref c c-func docutils literal"><span class="pre">krb5_free_unparsed_name()</span></code></a> to free <em>name</em> when it is no longer needed.</p>
-</div></blockquote>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_unparse_name_ext.html" title="krb5_unparse_name_ext - Convert krb5_principal structure to string and length."
- >previous</a> |
- <a href="krb5_unparse_name_flags_ext.html" title="krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch." href="krb5_us_timeofday.html" />
- <link rel="prev" title="krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags." href="krb5_unparse_name_flags.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_unparse_name_flags.html" title="krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags."
- accesskey="P">previous</a> |
- <a href="krb5_us_timeofday.html" title="krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-unparse-name-flags-ext-convert-krb5-principal-structure-to-string-format-with-flags">
-<h1>krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags.<a class="headerlink" href="#krb5-unparse-name-flags-ext-convert-krb5-principal-structure-to-string-format-with-flags" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_unparse_name_flags_ext">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_unparse_name_flags_ext</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> principal</em>, int<em> flags</em>, char **<em> name</em>, unsigned int *<em> size</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_unparse_name_flags_ext" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>principal</strong> - Principal</p>
-<p><strong>[in]</strong> <strong>flags</strong> - Flags</p>
-<p><strong>[out]</strong> <strong>name</strong> - Single string format of principal name</p>
-<p class="last"><strong>[out]</strong> <strong>size</strong> - Size of unparsed name buffer</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes. On failure name is set to NULL</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_unparse_name_flags.html" title="krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags."
- >previous</a> |
- <a href="krb5_us_timeofday.html" title="krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data." href="krb5_verify_authdata_kdc_issued.html" />
- <link rel="prev" title="krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags." href="krb5_unparse_name_flags_ext.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_unparse_name_flags_ext.html" title="krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags."
- accesskey="P">previous</a> |
- <a href="krb5_verify_authdata_kdc_issued.html" title="krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-us-timeofday-retrieve-the-system-time-of-day-in-sec-and-ms-since-the-epoch">
-<h1>krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch.<a class="headerlink" href="#krb5-us-timeofday-retrieve-the-system-time-of-day-in-sec-and-ms-since-the-epoch" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_us_timeofday">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_us_timeofday</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> *<em> seconds</em>, <a class="reference internal" href="../types/krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> *<em> microseconds</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_us_timeofday" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[out]</strong> <strong>seconds</strong> - System timeofday, seconds portion</p>
-<p class="last"><strong>[out]</strong> <strong>microseconds</strong> - System timeofday, microseconds portion</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first simple">
-<li>0 Success</li>
-</ul>
-</td>
-</tr>
-<tr class="field-even field"><th class="field-name">return:</th><td class="field-body"><ul class="first last simple">
-<li>Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function retrieves the system time of day with the context specific time offset adjustment.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_unparse_name_flags_ext.html" title="krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags."
- >previous</a> |
- <a href="krb5_verify_authdata_kdc_issued.html" title="krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_use_enctype — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_verify_checksum" href="krb5_verify_checksum.html" />
- <link rel="prev" title="krb5_string_to_key" href="krb5_string_to_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_string_to_key.html" title="krb5_string_to_key"
- accesskey="P">previous</a> |
- <a href="krb5_verify_checksum.html" title="krb5_verify_checksum"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_use_enctype">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-use-enctype">
-<h1>krb5_use_enctype<a class="headerlink" href="#krb5-use-enctype" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_use_enctype">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_use_enctype</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_encrypt_block.html#c.krb5_encrypt_block" title="krb5_encrypt_block">krb5_encrypt_block</a> *<em> eblock</em>, <a class="reference internal" href="../types/krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a><em> enctype</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_use_enctype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>eblock</strong></p>
-<p class="last"><strong>enctype</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED Replaced by krb5_c_* API family.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_use_enctype</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_string_to_key.html" title="krb5_string_to_key"
- >previous</a> |
- <a href="krb5_verify_checksum.html" title="krb5_verify_checksum"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_use_enctype">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal." href="krb5_425_conv_principal.html" />
- <link rel="prev" title="krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch." href="krb5_us_timeofday.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_us_timeofday.html" title="krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch."
- accesskey="P">previous</a> |
- <a href="krb5_425_conv_principal.html" title="krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-verify-authdata-kdc-issued-unwrap-and-verify-ad-kdcissued-authorization-data">
-<h1>krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data.<a class="headerlink" href="#krb5-verify-authdata-kdc-issued-unwrap-and-verify-ad-kdcissued-authorization-data" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_verify_authdata_kdc_issued">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_verify_authdata_kdc_issued</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> key</em>, const <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> *<em> ad_kdcissued</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> *<em> issuer</em>, <a class="reference internal" href="../types/krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ***<em> authdata</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_verify_authdata_kdc_issued" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>key</strong> - Session key</p>
-<p><strong>[in]</strong> <strong>ad_kdcissued</strong> - AD-KDCIssued authorization data to be unwrapped</p>
-<p><strong>[out]</strong> <strong>issuer</strong> - Name of issuing principal (or NULL)</p>
-<p class="last"><strong>[out]</strong> <strong>authdata</strong> - Unwrapped list of authorization data</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function unwraps an AD-KDCIssued authdatum (see RFC 4120 section 5.2.6.2) and verifies its signature against <em>key</em> . The issuer field of the authdatum element is returned in <em>issuer</em> , and the unwrapped list of authdata is returned in <em>authdata</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_us_timeofday.html" title="krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch."
- >previous</a> |
- <a href="krb5_425_conv_principal.html" title="krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_verify_checksum — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5 types and structures" href="../types/index.html" />
- <link rel="prev" title="krb5_use_enctype" href="krb5_use_enctype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_use_enctype.html" title="krb5_use_enctype"
- accesskey="P">previous</a> |
- <a href="../types/index.html" title="krb5 types and structures"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_checksum">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-verify-checksum">
-<h1>krb5_verify_checksum<a class="headerlink" href="#krb5-verify-checksum" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_verify_checksum">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_verify_checksum</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a><em> ctype</em>, const <a class="reference internal" href="../types/krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> *<em> cksum</em>, <a class="reference internal" href="../types/krb5_const_pointer.html#c.krb5_const_pointer" title="krb5_const_pointer">krb5_const_pointer</a><em> in</em>, size_t<em> in_length</em>, <a class="reference internal" href="../types/krb5_const_pointer.html#c.krb5_const_pointer" title="krb5_const_pointer">krb5_const_pointer</a><em> seed</em>, size_t<em> seed_length</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_verify_checksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>context</strong></p>
-<p><strong>ctype</strong></p>
-<p><strong>cksum</strong></p>
-<p><strong>in</strong></p>
-<p><strong>in_length</strong></p>
-<p><strong>seed</strong></p>
-<p class="last"><strong>seed_length</strong></p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>DEPRECATED See krb5_c_verify_checksum()</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_verify_checksum</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_use_enctype.html" title="krb5_use_enctype"
- >previous</a> |
- <a href="../types/index.html" title="krb5 types and structures"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_checksum">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_verify_init_creds - Verify initial credentials against a keytab. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_verify_init_creds_opt_init - Initialize a credential verification options structure." href="krb5_verify_init_creds_opt_init.html" />
- <link rel="prev" title="krb5_unmarshal_credentials - Deserialize a krb5_creds object." href="krb5_unmarshal_credentials.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_unmarshal_credentials.html" title="krb5_unmarshal_credentials - Deserialize a krb5_creds object."
- accesskey="P">previous</a> |
- <a href="krb5_verify_init_creds_opt_init.html" title="krb5_verify_init_creds_opt_init - Initialize a credential verification options structure."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_init_creds - Verify initial credentials against a keytab.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-verify-init-creds-verify-initial-credentials-against-a-keytab">
-<h1>krb5_verify_init_creds - Verify initial credentials against a keytab.<a class="headerlink" href="#krb5-verify-init-creds-verify-initial-credentials-against-a-keytab" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_verify_init_creds">
-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_verify_init_creds</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, <a class="reference internal" href="../types/krb5_creds.html#c.krb5_creds" title="krb5_creds">krb5_creds</a> *<em> creds</em>, <a class="reference internal" href="../types/krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a><em> server</em>, <a class="reference internal" href="../types/krb5_keytab.html#c.krb5_keytab" title="krb5_keytab">krb5_keytab</a><em> keytab</em>, <a class="reference internal" href="../types/krb5_ccache.html#c.krb5_ccache" title="krb5_ccache">krb5_ccache</a> *<em> ccache</em>, <a class="reference internal" href="../types/krb5_verify_init_creds_opt.html#c.krb5_verify_init_creds_opt" title="krb5_verify_init_creds_opt">krb5_verify_init_creds_opt</a> *<em> options</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_verify_init_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>creds</strong> - Initial credentials to be verified</p>
-<p><strong>[in]</strong> <strong>server</strong> - Server principal (or NULL)</p>
-<p><strong>[in]</strong> <strong>keytab</strong> - Key table (NULL to use default keytab)</p>
-<p><strong>[in]</strong> <strong>ccache</strong> - Credential cache for fetched creds (or NULL)</p>
-<p class="last"><strong>[in]</strong> <strong>options</strong> - Verification options (NULL for default options)</p>
-</td>
-</tr>
-</tbody>
-</table>
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">
-<li>0 Success; otherwise - Kerberos error codes</li>
-</ul>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function attempts to verify that <em>creds</em> were obtained from a KDC with knowledge of a key in <em>keytab</em> , or the default keytab if <em>keytab</em> is NULL. If <em>server</em> is provided, the highest-kvno key entry for that principal name is used to verify the credentials; otherwise, all unique”host”service principals in the keytab are tried.</p>
-<p>If the specified keytab does not exist, or is empty, or cannot be read, or does not contain an entry for <em>server</em> , then credential verification may be skipped unless configuration demands that it succeed. The caller can control this behavior by providing a verification options structure; see <a class="reference internal" href="krb5_verify_init_creds_opt_init.html#c.krb5_verify_init_creds_opt_init" title="krb5_verify_init_creds_opt_init"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds_opt_init()</span></code></a> and <a class="reference internal" href="krb5_verify_init_creds_opt_set_ap_req_nofail.html#c.krb5_verify_init_creds_opt_set_ap_req_nofail" title="krb5_verify_init_creds_opt_set_ap_req_nofail"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds_opt_set_ap_req_nofail()</span></code></a> .</p>
-<p>If <em>ccache</em> is NULL, any additional credentials fetched during the verification process will be destroyed. If <em>ccache</em> points to NULL, a memory ccache will be created for the additional credentials and returned in <em>ccache</em> . If <em>ccache</em> points to a valid credential cache handle, the additional credentials will be stored in that cache.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_verify_init_creds - Verify initial credentials against a keytab.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_unmarshal_credentials.html" title="krb5_unmarshal_credentials - Deserialize a krb5_creds object."
- >previous</a> |
- <a href="krb5_verify_init_creds_opt_init.html" title="krb5_verify_init_creds_opt_init - Initialize a credential verification options structure."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_init_creds - Verify initial credentials against a keytab.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_verify_init_creds_opt_init - Initialize a credential verification options structure. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required." href="krb5_verify_init_creds_opt_set_ap_req_nofail.html" />
- <link rel="prev" title="krb5_verify_init_creds - Verify initial credentials against a keytab." href="krb5_verify_init_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_verify_init_creds.html" title="krb5_verify_init_creds - Verify initial credentials against a keytab."
- accesskey="P">previous</a> |
- <a href="krb5_verify_init_creds_opt_set_ap_req_nofail.html" title="krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_init_creds_opt_init - Initialize a credential verification options structure.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-verify-init-creds-opt-init-initialize-a-credential-verification-options-structure">
-<h1>krb5_verify_init_creds_opt_init - Initialize a credential verification options structure.<a class="headerlink" href="#krb5-verify-init-creds-opt-init-initialize-a-credential-verification-options-structure" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_verify_init_creds_opt_init">
-void <code class="descname">krb5_verify_init_creds_opt_init</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_verify_init_creds_opt.html#c.krb5_verify_init_creds_opt" title="krb5_verify_init_creds_opt">krb5_verify_init_creds_opt</a> *<em> k5_vic_options</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_verify_init_creds_opt_init" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><strong>[in]</strong> <strong>k5_vic_options</strong> - Verification options structure</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_verify_init_creds_opt_init - Initialize a credential verification options structure.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_verify_init_creds.html" title="krb5_verify_init_creds - Verify initial credentials against a keytab."
- >previous</a> |
- <a href="krb5_verify_init_creds_opt_set_ap_req_nofail.html" title="krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_init_creds_opt_init - Initialize a credential verification options structure.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list." href="krb5_vprepend_error_message.html" />
- <link rel="prev" title="krb5_verify_init_creds_opt_init - Initialize a credential verification options structure." href="krb5_verify_init_creds_opt_init.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_verify_init_creds_opt_init.html" title="krb5_verify_init_creds_opt_init - Initialize a credential verification options structure."
- accesskey="P">previous</a> |
- <a href="krb5_vprepend_error_message.html" title="krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-verify-init-creds-opt-set-ap-req-nofail-set-whether-credential-verification-is-required">
-<h1>krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required.<a class="headerlink" href="#krb5-verify-init-creds-opt-set-ap-req-nofail-set-whether-credential-verification-is-required" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_verify_init_creds_opt_set_ap_req_nofail">
-void <code class="descname">krb5_verify_init_creds_opt_set_ap_req_nofail</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_verify_init_creds_opt.html#c.krb5_verify_init_creds_opt" title="krb5_verify_init_creds_opt">krb5_verify_init_creds_opt</a> *<em> k5_vic_options</em>, int<em> ap_req_nofail</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_verify_init_creds_opt_set_ap_req_nofail" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>k5_vic_options</strong> - Verification options structure</p>
-<p class="last"><strong>[in]</strong> <strong>ap_req_nofail</strong> - Whether to require successful verification</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function determines how <a class="reference internal" href="krb5_verify_init_creds.html#c.krb5_verify_init_creds" title="krb5_verify_init_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds()</span></code></a> behaves if no keytab information is available. If <em>ap_req_nofail</em> is <strong>FALSE</strong> , verification will be skipped in this case and <a class="reference internal" href="krb5_verify_init_creds.html#c.krb5_verify_init_creds" title="krb5_verify_init_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds()</span></code></a> will return successfully. If <em>ap_req_nofail</em> is <strong>TRUE</strong> , <a class="reference internal" href="krb5_verify_init_creds.html#c.krb5_verify_init_creds" title="krb5_verify_init_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds()</span></code></a> will not return successfully unless verification can be performed.</p>
-<p>If this function is not used, the behavior of <a class="reference internal" href="krb5_verify_init_creds.html#c.krb5_verify_init_creds" title="krb5_verify_init_creds"><code class="xref c c-func docutils literal"><span class="pre">krb5_verify_init_creds()</span></code></a> is determined through configuration.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_verify_init_creds_opt_init.html" title="krb5_verify_init_creds_opt_init - Initialize a credential verification options structure."
- >previous</a> |
- <a href="krb5_vprepend_error_message.html" title="krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_vset_error_message - Set an extended error message for an error code using a va_list." href="krb5_vset_error_message.html" />
- <link rel="prev" title="krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required." href="krb5_verify_init_creds_opt_set_ap_req_nofail.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_verify_init_creds_opt_set_ap_req_nofail.html" title="krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required."
- accesskey="P">previous</a> |
- <a href="krb5_vset_error_message.html" title="krb5_vset_error_message - Set an extended error message for an error code using a va_list."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-vprepend-error-message-add-a-prefix-to-the-message-for-an-error-code-using-a-va-list">
-<h1>krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list.<a class="headerlink" href="#krb5-vprepend-error-message-add-a-prefix-to-the-message-for-an-error-code-using-a-va-list" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_vprepend_error_message">
-void <code class="descname">krb5_vprepend_error_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a><em> code</em>, const char *<em> fmt</em>, va_list<em> args</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_vprepend_error_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>code</strong> - Error code</p>
-<p><strong>[in]</strong> <strong>fmt</strong> - Format string for error message prefix</p>
-<p class="last"><strong>[in]</strong> <strong>args</strong> - List of vprintf(3) style arguments</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is similar to <a class="reference internal" href="krb5_prepend_error_message.html#c.krb5_prepend_error_message" title="krb5_prepend_error_message"><code class="xref c c-func docutils literal"><span class="pre">krb5_prepend_error_message()</span></code></a> , but uses a va_list instead of variadic arguments.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_verify_init_creds_opt_set_ap_req_nofail.html" title="krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required."
- >previous</a> |
- <a href="krb5_vset_error_message.html" title="krb5_vset_error_message - Set an extended error message for an error code using a va_list."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_vset_error_message - Set an extended error message for an error code using a va_list. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list." href="krb5_vwrap_error_message.html" />
- <link rel="prev" title="krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list." href="krb5_vprepend_error_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_vprepend_error_message.html" title="krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list."
- accesskey="P">previous</a> |
- <a href="krb5_vwrap_error_message.html" title="krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_vset_error_message - Set an extended error message for an error code using a va_list.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-vset-error-message-set-an-extended-error-message-for-an-error-code-using-a-va-list">
-<h1>krb5_vset_error_message - Set an extended error message for an error code using a va_list.<a class="headerlink" href="#krb5-vset-error-message-set-an-extended-error-message-for-an-error-code-using-a-va-list" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_vset_error_message">
-void <code class="descname">krb5_vset_error_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a><em> code</em>, const char *<em> fmt</em>, va_list<em> args</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_vset_error_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>code</strong> - Error code</p>
-<p><strong>[in]</strong> <strong>fmt</strong> - Error string for the error code</p>
-<p class="last"><strong>[in]</strong> <strong>args</strong> - List of vprintf(3) style arguments</p>
-</td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_vset_error_message - Set an extended error message for an error code using a va_list.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_vprepend_error_message.html" title="krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list."
- >previous</a> |
- <a href="krb5_vwrap_error_message.html" title="krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_vset_error_message - Set an extended error message for an error code using a va_list.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_wrap_error_message - Add a prefix to a different error code’s message." href="krb5_wrap_error_message.html" />
- <link rel="prev" title="krb5_vset_error_message - Set an extended error message for an error code using a va_list." href="krb5_vset_error_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_vset_error_message.html" title="krb5_vset_error_message - Set an extended error message for an error code using a va_list."
- accesskey="P">previous</a> |
- <a href="krb5_wrap_error_message.html" title="krb5_wrap_error_message - Add a prefix to a different error code’s message."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-vwrap-error-message-add-a-prefix-to-a-different-error-code-s-message-using-a-va-list">
-<h1>krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list.<a class="headerlink" href="#krb5-vwrap-error-message-add-a-prefix-to-a-different-error-code-s-message-using-a-va-list" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_vwrap_error_message">
-void <code class="descname">krb5_vwrap_error_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a><em> old_code</em>, <a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a><em> code</em>, const char *<em> fmt</em>, va_list<em> args</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_vwrap_error_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>old_code</strong> - Previous error code</p>
-<p><strong>[in]</strong> <strong>code</strong> - Error code</p>
-<p><strong>[in]</strong> <strong>fmt</strong> - Format string for error message prefix</p>
-<p class="last"><strong>[in]</strong> <strong>args</strong> - List of vprintf(3) style arguments</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>This function is similar to <a class="reference internal" href="krb5_wrap_error_message.html#c.krb5_wrap_error_message" title="krb5_wrap_error_message"><code class="xref c c-func docutils literal"><span class="pre">krb5_wrap_error_message()</span></code></a> , but uses a va_list instead of variadic arguments.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_vset_error_message.html" title="krb5_vset_error_message - Set an extended error message for an error code using a va_list."
- >previous</a> |
- <a href="krb5_wrap_error_message.html" title="krb5_wrap_error_message - Add a prefix to a different error code’s message."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_wrap_error_message - Add a prefix to a different error code’s message. — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_c_block_size - Return cipher block size." href="krb5_c_block_size.html" />
- <link rel="prev" title="krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list." href="krb5_vwrap_error_message.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_vwrap_error_message.html" title="krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list."
- accesskey="P">previous</a> |
- <a href="krb5_c_block_size.html" title="krb5_c_block_size - Return cipher block size."
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_wrap_error_message - Add a prefix to a different error code’s message.">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-wrap-error-message-add-a-prefix-to-a-different-error-code-s-message">
-<h1>krb5_wrap_error_message - Add a prefix to a different error code’s message.<a class="headerlink" href="#krb5-wrap-error-message-add-a-prefix-to-a-different-error-code-s-message" title="Permalink to this headline">¶</a></h1>
-<dl class="function">
-<dt id="c.krb5_wrap_error_message">
-void <code class="descname">krb5_wrap_error_message</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> ctx</em>, <a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a><em> old_code</em>, <a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a><em> code</em>, const char *<em> fmt</em>, ...<span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_wrap_error_message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table class="docutils field-list" frame="void" rules="none">
-<col class="field-name" />
-<col class="field-body" />
-<tbody valign="top">
-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>ctx</strong> - Library context</p>
-<p><strong>[in]</strong> <strong>old_code</strong> - Previous error code</p>
-<p><strong>[in]</strong> <strong>code</strong> - Error code</p>
-<p class="last"><strong>[in]</strong> <strong>fmt</strong> - Format string for error message prefix</p>
-</td>
-</tr>
-</tbody>
-</table>
-<p>Format a message and prepend it to the message for <em>old_code</em> . The prefix will be separated from the old message with a colon and space. Set the resulting message as the extended error message for <em>code</em> .</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_wrap_error_message - Add a prefix to a different error code’s message.</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_vwrap_error_message.html" title="krb5_vwrap_error_message - Add a prefix to a different error code’s message using a va_list."
- >previous</a> |
- <a href="krb5_c_block_size.html" title="krb5_c_block_size - Return cipher block size."
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_wrap_error_message - Add a prefix to a different error code’s message.">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Complete reference - API and datatypes — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="krb5 API" href="api/index.html" />
- <link rel="prev" title="Principal manipulation and parsing" href="../princ_handle.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../princ_handle.html" title="Principal manipulation and parsing"
- accesskey="P">previous</a> |
- <a href="api/index.html" title="krb5 API"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Complete reference - API and datatypes">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="complete-reference-api-and-datatypes">
-<h1>Complete reference - API and datatypes<a class="headerlink" href="#complete-reference-api-and-datatypes" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="api/index.html">krb5 API</a></li>
-<li class="toctree-l1"><a class="reference internal" href="types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l1"><a class="reference internal" href="macros/index.html">krb5 simple macros</a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Complete reference - API and datatypes</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Complete reference - API and datatypes</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../princ_handle.html" title="Principal manipulation and parsing"
- >previous</a> |
- <a href="api/index.html" title="krb5 API"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Complete reference - API and datatypes">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ADDRTYPE_ADDRPORT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ADDRTYPE_CHAOS" href="ADDRTYPE_CHAOS.html" />
- <link rel="prev" title="krb5 simple macros" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="krb5 simple macros"
- accesskey="P">previous</a> |
- <a href="ADDRTYPE_CHAOS.html" title="ADDRTYPE_CHAOS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_ADDRPORT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addrtype-addrport">
-<span id="addrtype-addrport-data"></span><h1>ADDRTYPE_ADDRPORT<a class="headerlink" href="#addrtype-addrport" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ADDRTYPE_ADDRPORT">
-<code class="descname">ADDRTYPE_ADDRPORT</code><a class="headerlink" href="#ADDRTYPE_ADDRPORT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ADDRTYPE_ADDRPORT</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0100</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ADDRTYPE_ADDRPORT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="krb5 simple macros"
- >previous</a> |
- <a href="ADDRTYPE_CHAOS.html" title="ADDRTYPE_CHAOS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_ADDRPORT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ADDRTYPE_CHAOS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ADDRTYPE_DDP" href="ADDRTYPE_DDP.html" />
- <link rel="prev" title="ADDRTYPE_ADDRPORT" href="ADDRTYPE_ADDRPORT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ADDRTYPE_ADDRPORT.html" title="ADDRTYPE_ADDRPORT"
- accesskey="P">previous</a> |
- <a href="ADDRTYPE_DDP.html" title="ADDRTYPE_DDP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_CHAOS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addrtype-chaos">
-<span id="addrtype-chaos-data"></span><h1>ADDRTYPE_CHAOS<a class="headerlink" href="#addrtype-chaos" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ADDRTYPE_CHAOS">
-<code class="descname">ADDRTYPE_CHAOS</code><a class="headerlink" href="#ADDRTYPE_CHAOS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="49%" />
-<col width="51%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ADDRTYPE_CHAOS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0005</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ADDRTYPE_CHAOS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ADDRTYPE_ADDRPORT.html" title="ADDRTYPE_ADDRPORT"
- >previous</a> |
- <a href="ADDRTYPE_DDP.html" title="ADDRTYPE_DDP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_CHAOS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ADDRTYPE_DDP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ADDRTYPE_INET" href="ADDRTYPE_INET.html" />
- <link rel="prev" title="ADDRTYPE_CHAOS" href="ADDRTYPE_CHAOS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ADDRTYPE_CHAOS.html" title="ADDRTYPE_CHAOS"
- accesskey="P">previous</a> |
- <a href="ADDRTYPE_INET.html" title="ADDRTYPE_INET"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_DDP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addrtype-ddp">
-<span id="addrtype-ddp-data"></span><h1>ADDRTYPE_DDP<a class="headerlink" href="#addrtype-ddp" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ADDRTYPE_DDP">
-<code class="descname">ADDRTYPE_DDP</code><a class="headerlink" href="#ADDRTYPE_DDP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="46%" />
-<col width="54%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ADDRTYPE_DDP</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0010</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ADDRTYPE_DDP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ADDRTYPE_CHAOS.html" title="ADDRTYPE_CHAOS"
- >previous</a> |
- <a href="ADDRTYPE_INET.html" title="ADDRTYPE_INET"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_DDP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ADDRTYPE_INET — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ADDRTYPE_INET6" href="ADDRTYPE_INET6.html" />
- <link rel="prev" title="ADDRTYPE_DDP" href="ADDRTYPE_DDP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ADDRTYPE_DDP.html" title="ADDRTYPE_DDP"
- accesskey="P">previous</a> |
- <a href="ADDRTYPE_INET6.html" title="ADDRTYPE_INET6"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_INET">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addrtype-inet">
-<span id="addrtype-inet-data"></span><h1>ADDRTYPE_INET<a class="headerlink" href="#addrtype-inet" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ADDRTYPE_INET">
-<code class="descname">ADDRTYPE_INET</code><a class="headerlink" href="#ADDRTYPE_INET" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="48%" />
-<col width="52%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ADDRTYPE_INET</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ADDRTYPE_INET</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ADDRTYPE_DDP.html" title="ADDRTYPE_DDP"
- >previous</a> |
- <a href="ADDRTYPE_INET6.html" title="ADDRTYPE_INET6"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_INET">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ADDRTYPE_INET6 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ADDRTYPE_IPPORT" href="ADDRTYPE_IPPORT.html" />
- <link rel="prev" title="ADDRTYPE_INET" href="ADDRTYPE_INET.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ADDRTYPE_INET.html" title="ADDRTYPE_INET"
- accesskey="P">previous</a> |
- <a href="ADDRTYPE_IPPORT.html" title="ADDRTYPE_IPPORT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_INET6">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addrtype-inet6">
-<span id="addrtype-inet6-data"></span><h1>ADDRTYPE_INET6<a class="headerlink" href="#addrtype-inet6" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ADDRTYPE_INET6">
-<code class="descname">ADDRTYPE_INET6</code><a class="headerlink" href="#ADDRTYPE_INET6" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="49%" />
-<col width="51%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ADDRTYPE_INET6</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0018</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ADDRTYPE_INET6</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ADDRTYPE_INET.html" title="ADDRTYPE_INET"
- >previous</a> |
- <a href="ADDRTYPE_IPPORT.html" title="ADDRTYPE_IPPORT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_INET6">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ADDRTYPE_IPPORT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ADDRTYPE_ISO" href="ADDRTYPE_ISO.html" />
- <link rel="prev" title="ADDRTYPE_INET6" href="ADDRTYPE_INET6.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ADDRTYPE_INET6.html" title="ADDRTYPE_INET6"
- accesskey="P">previous</a> |
- <a href="ADDRTYPE_ISO.html" title="ADDRTYPE_ISO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_IPPORT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addrtype-ipport">
-<span id="addrtype-ipport-data"></span><h1>ADDRTYPE_IPPORT<a class="headerlink" href="#addrtype-ipport" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ADDRTYPE_IPPORT">
-<code class="descname">ADDRTYPE_IPPORT</code><a class="headerlink" href="#ADDRTYPE_IPPORT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="50%" />
-<col width="50%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ADDRTYPE_IPPORT</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0101</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ADDRTYPE_IPPORT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ADDRTYPE_INET6.html" title="ADDRTYPE_INET6"
- >previous</a> |
- <a href="ADDRTYPE_ISO.html" title="ADDRTYPE_ISO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_IPPORT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ADDRTYPE_ISO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ADDRTYPE_IS_LOCAL" href="ADDRTYPE_IS_LOCAL.html" />
- <link rel="prev" title="ADDRTYPE_IPPORT" href="ADDRTYPE_IPPORT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ADDRTYPE_IPPORT.html" title="ADDRTYPE_IPPORT"
- accesskey="P">previous</a> |
- <a href="ADDRTYPE_IS_LOCAL.html" title="ADDRTYPE_IS_LOCAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_ISO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addrtype-iso">
-<span id="addrtype-iso-data"></span><h1>ADDRTYPE_ISO<a class="headerlink" href="#addrtype-iso" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ADDRTYPE_ISO">
-<code class="descname">ADDRTYPE_ISO</code><a class="headerlink" href="#ADDRTYPE_ISO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="46%" />
-<col width="54%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ADDRTYPE_ISO</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0007</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ADDRTYPE_ISO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ADDRTYPE_IPPORT.html" title="ADDRTYPE_IPPORT"
- >previous</a> |
- <a href="ADDRTYPE_IS_LOCAL.html" title="ADDRTYPE_IS_LOCAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_ISO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ADDRTYPE_IS_LOCAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ADDRTYPE_NETBIOS" href="ADDRTYPE_NETBIOS.html" />
- <link rel="prev" title="ADDRTYPE_ISO" href="ADDRTYPE_ISO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ADDRTYPE_ISO.html" title="ADDRTYPE_ISO"
- accesskey="P">previous</a> |
- <a href="ADDRTYPE_NETBIOS.html" title="ADDRTYPE_NETBIOS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_IS_LOCAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addrtype-is-local">
-<span id="addrtype-is-local-data"></span><h1>ADDRTYPE_IS_LOCAL<a class="headerlink" href="#addrtype-is-local" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ADDRTYPE_IS_LOCAL">
-<code class="descname">ADDRTYPE_IS_LOCAL</code><a class="headerlink" href="#ADDRTYPE_IS_LOCAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ADDRTYPE_IS_LOCAL</span> <span class="pre">(addrtype)</span></code></td>
-<td><code class="docutils literal"><span class="pre">(addrtype</span> <span class="pre">&</span> <span class="pre">0x8000)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ADDRTYPE_IS_LOCAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ADDRTYPE_ISO.html" title="ADDRTYPE_ISO"
- >previous</a> |
- <a href="ADDRTYPE_NETBIOS.html" title="ADDRTYPE_NETBIOS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_IS_LOCAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ADDRTYPE_NETBIOS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ADDRTYPE_XNS" href="ADDRTYPE_XNS.html" />
- <link rel="prev" title="ADDRTYPE_IS_LOCAL" href="ADDRTYPE_IS_LOCAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ADDRTYPE_IS_LOCAL.html" title="ADDRTYPE_IS_LOCAL"
- accesskey="P">previous</a> |
- <a href="ADDRTYPE_XNS.html" title="ADDRTYPE_XNS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_NETBIOS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addrtype-netbios">
-<span id="addrtype-netbios-data"></span><h1>ADDRTYPE_NETBIOS<a class="headerlink" href="#addrtype-netbios" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ADDRTYPE_NETBIOS">
-<code class="descname">ADDRTYPE_NETBIOS</code><a class="headerlink" href="#ADDRTYPE_NETBIOS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ADDRTYPE_NETBIOS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0014</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ADDRTYPE_NETBIOS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ADDRTYPE_IS_LOCAL.html" title="ADDRTYPE_IS_LOCAL"
- >previous</a> |
- <a href="ADDRTYPE_XNS.html" title="ADDRTYPE_XNS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_NETBIOS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ADDRTYPE_XNS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="AD_TYPE_EXTERNAL" href="AD_TYPE_EXTERNAL.html" />
- <link rel="prev" title="ADDRTYPE_NETBIOS" href="ADDRTYPE_NETBIOS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ADDRTYPE_NETBIOS.html" title="ADDRTYPE_NETBIOS"
- accesskey="P">previous</a> |
- <a href="AD_TYPE_EXTERNAL.html" title="AD_TYPE_EXTERNAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_XNS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="addrtype-xns">
-<span id="addrtype-xns-data"></span><h1>ADDRTYPE_XNS<a class="headerlink" href="#addrtype-xns" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ADDRTYPE_XNS">
-<code class="descname">ADDRTYPE_XNS</code><a class="headerlink" href="#ADDRTYPE_XNS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="46%" />
-<col width="54%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ADDRTYPE_XNS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0006</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ADDRTYPE_XNS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ADDRTYPE_NETBIOS.html" title="ADDRTYPE_NETBIOS"
- >previous</a> |
- <a href="AD_TYPE_EXTERNAL.html" title="AD_TYPE_EXTERNAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ADDRTYPE_XNS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>AD_TYPE_EXTERNAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="AD_TYPE_FIELD_TYPE_MASK" href="AD_TYPE_FIELD_TYPE_MASK.html" />
- <link rel="prev" title="ADDRTYPE_XNS" href="ADDRTYPE_XNS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ADDRTYPE_XNS.html" title="ADDRTYPE_XNS"
- accesskey="P">previous</a> |
- <a href="AD_TYPE_FIELD_TYPE_MASK.html" title="AD_TYPE_FIELD_TYPE_MASK"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AD_TYPE_EXTERNAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ad-type-external">
-<span id="ad-type-external-data"></span><h1>AD_TYPE_EXTERNAL<a class="headerlink" href="#ad-type-external" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="AD_TYPE_EXTERNAL">
-<code class="descname">AD_TYPE_EXTERNAL</code><a class="headerlink" href="#AD_TYPE_EXTERNAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">AD_TYPE_EXTERNAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x4000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">AD_TYPE_EXTERNAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ADDRTYPE_XNS.html" title="ADDRTYPE_XNS"
- >previous</a> |
- <a href="AD_TYPE_FIELD_TYPE_MASK.html" title="AD_TYPE_FIELD_TYPE_MASK"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AD_TYPE_EXTERNAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>AD_TYPE_FIELD_TYPE_MASK — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="AD_TYPE_REGISTERED" href="AD_TYPE_REGISTERED.html" />
- <link rel="prev" title="AD_TYPE_EXTERNAL" href="AD_TYPE_EXTERNAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="AD_TYPE_EXTERNAL.html" title="AD_TYPE_EXTERNAL"
- accesskey="P">previous</a> |
- <a href="AD_TYPE_REGISTERED.html" title="AD_TYPE_REGISTERED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AD_TYPE_FIELD_TYPE_MASK">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ad-type-field-type-mask">
-<span id="ad-type-field-type-mask-data"></span><h1>AD_TYPE_FIELD_TYPE_MASK<a class="headerlink" href="#ad-type-field-type-mask" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="AD_TYPE_FIELD_TYPE_MASK">
-<code class="descname">AD_TYPE_FIELD_TYPE_MASK</code><a class="headerlink" href="#AD_TYPE_FIELD_TYPE_MASK" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">AD_TYPE_FIELD_TYPE_MASK</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x1fff</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">AD_TYPE_FIELD_TYPE_MASK</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="AD_TYPE_EXTERNAL.html" title="AD_TYPE_EXTERNAL"
- >previous</a> |
- <a href="AD_TYPE_REGISTERED.html" title="AD_TYPE_REGISTERED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AD_TYPE_FIELD_TYPE_MASK">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>AD_TYPE_REGISTERED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="AD_TYPE_RESERVED" href="AD_TYPE_RESERVED.html" />
- <link rel="prev" title="AD_TYPE_FIELD_TYPE_MASK" href="AD_TYPE_FIELD_TYPE_MASK.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="AD_TYPE_FIELD_TYPE_MASK.html" title="AD_TYPE_FIELD_TYPE_MASK"
- accesskey="P">previous</a> |
- <a href="AD_TYPE_RESERVED.html" title="AD_TYPE_RESERVED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AD_TYPE_REGISTERED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ad-type-registered">
-<span id="ad-type-registered-data"></span><h1>AD_TYPE_REGISTERED<a class="headerlink" href="#ad-type-registered" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="AD_TYPE_REGISTERED">
-<code class="descname">AD_TYPE_REGISTERED</code><a class="headerlink" href="#AD_TYPE_REGISTERED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="53%" />
-<col width="47%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">AD_TYPE_REGISTERED</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x2000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">AD_TYPE_REGISTERED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="AD_TYPE_FIELD_TYPE_MASK.html" title="AD_TYPE_FIELD_TYPE_MASK"
- >previous</a> |
- <a href="AD_TYPE_RESERVED.html" title="AD_TYPE_RESERVED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AD_TYPE_REGISTERED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>AD_TYPE_RESERVED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="AP_OPTS_ETYPE_NEGOTIATION" href="AP_OPTS_ETYPE_NEGOTIATION.html" />
- <link rel="prev" title="AD_TYPE_REGISTERED" href="AD_TYPE_REGISTERED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="AD_TYPE_REGISTERED.html" title="AD_TYPE_REGISTERED"
- accesskey="P">previous</a> |
- <a href="AP_OPTS_ETYPE_NEGOTIATION.html" title="AP_OPTS_ETYPE_NEGOTIATION"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AD_TYPE_RESERVED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ad-type-reserved">
-<span id="ad-type-reserved-data"></span><h1>AD_TYPE_RESERVED<a class="headerlink" href="#ad-type-reserved" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="AD_TYPE_RESERVED">
-<code class="descname">AD_TYPE_RESERVED</code><a class="headerlink" href="#AD_TYPE_RESERVED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">AD_TYPE_RESERVED</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x8000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">AD_TYPE_RESERVED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="AD_TYPE_REGISTERED.html" title="AD_TYPE_REGISTERED"
- >previous</a> |
- <a href="AP_OPTS_ETYPE_NEGOTIATION.html" title="AP_OPTS_ETYPE_NEGOTIATION"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AD_TYPE_RESERVED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>AP_OPTS_ETYPE_NEGOTIATION — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="AP_OPTS_MUTUAL_REQUIRED" href="AP_OPTS_MUTUAL_REQUIRED.html" />
- <link rel="prev" title="AD_TYPE_RESERVED" href="AD_TYPE_RESERVED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="AD_TYPE_RESERVED.html" title="AD_TYPE_RESERVED"
- accesskey="P">previous</a> |
- <a href="AP_OPTS_MUTUAL_REQUIRED.html" title="AP_OPTS_MUTUAL_REQUIRED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_ETYPE_NEGOTIATION">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ap-opts-etype-negotiation">
-<span id="ap-opts-etype-negotiation-data"></span><h1>AP_OPTS_ETYPE_NEGOTIATION<a class="headerlink" href="#ap-opts-etype-negotiation" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="AP_OPTS_ETYPE_NEGOTIATION">
-<code class="descname">AP_OPTS_ETYPE_NEGOTIATION</code><a class="headerlink" href="#AP_OPTS_ETYPE_NEGOTIATION" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">AP_OPTS_ETYPE_NEGOTIATION</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">AP_OPTS_ETYPE_NEGOTIATION</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="AD_TYPE_RESERVED.html" title="AD_TYPE_RESERVED"
- >previous</a> |
- <a href="AP_OPTS_MUTUAL_REQUIRED.html" title="AP_OPTS_MUTUAL_REQUIRED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_ETYPE_NEGOTIATION">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>AP_OPTS_MUTUAL_REQUIRED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="AP_OPTS_RESERVED" href="AP_OPTS_RESERVED.html" />
- <link rel="prev" title="AP_OPTS_ETYPE_NEGOTIATION" href="AP_OPTS_ETYPE_NEGOTIATION.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="AP_OPTS_ETYPE_NEGOTIATION.html" title="AP_OPTS_ETYPE_NEGOTIATION"
- accesskey="P">previous</a> |
- <a href="AP_OPTS_RESERVED.html" title="AP_OPTS_RESERVED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_MUTUAL_REQUIRED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ap-opts-mutual-required">
-<span id="ap-opts-mutual-required-data"></span><h1>AP_OPTS_MUTUAL_REQUIRED<a class="headerlink" href="#ap-opts-mutual-required" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="AP_OPTS_MUTUAL_REQUIRED">
-<code class="descname">AP_OPTS_MUTUAL_REQUIRED</code><a class="headerlink" href="#AP_OPTS_MUTUAL_REQUIRED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Perform a mutual authentication exchange.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">AP_OPTS_MUTUAL_REQUIRED</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x20000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">AP_OPTS_MUTUAL_REQUIRED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="AP_OPTS_ETYPE_NEGOTIATION.html" title="AP_OPTS_ETYPE_NEGOTIATION"
- >previous</a> |
- <a href="AP_OPTS_RESERVED.html" title="AP_OPTS_RESERVED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_MUTUAL_REQUIRED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>AP_OPTS_RESERVED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="AP_OPTS_USE_SESSION_KEY" href="AP_OPTS_USE_SESSION_KEY.html" />
- <link rel="prev" title="AP_OPTS_MUTUAL_REQUIRED" href="AP_OPTS_MUTUAL_REQUIRED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="AP_OPTS_MUTUAL_REQUIRED.html" title="AP_OPTS_MUTUAL_REQUIRED"
- accesskey="P">previous</a> |
- <a href="AP_OPTS_USE_SESSION_KEY.html" title="AP_OPTS_USE_SESSION_KEY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_RESERVED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ap-opts-reserved">
-<span id="ap-opts-reserved-data"></span><h1>AP_OPTS_RESERVED<a class="headerlink" href="#ap-opts-reserved" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="AP_OPTS_RESERVED">
-<code class="descname">AP_OPTS_RESERVED</code><a class="headerlink" href="#AP_OPTS_RESERVED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">AP_OPTS_RESERVED</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x80000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">AP_OPTS_RESERVED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="AP_OPTS_MUTUAL_REQUIRED.html" title="AP_OPTS_MUTUAL_REQUIRED"
- >previous</a> |
- <a href="AP_OPTS_USE_SESSION_KEY.html" title="AP_OPTS_USE_SESSION_KEY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_RESERVED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>AP_OPTS_USE_SESSION_KEY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="AP_OPTS_USE_SUBKEY" href="AP_OPTS_USE_SUBKEY.html" />
- <link rel="prev" title="AP_OPTS_RESERVED" href="AP_OPTS_RESERVED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="AP_OPTS_RESERVED.html" title="AP_OPTS_RESERVED"
- accesskey="P">previous</a> |
- <a href="AP_OPTS_USE_SUBKEY.html" title="AP_OPTS_USE_SUBKEY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_USE_SESSION_KEY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ap-opts-use-session-key">
-<span id="ap-opts-use-session-key-data"></span><h1>AP_OPTS_USE_SESSION_KEY<a class="headerlink" href="#ap-opts-use-session-key" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="AP_OPTS_USE_SESSION_KEY">
-<code class="descname">AP_OPTS_USE_SESSION_KEY</code><a class="headerlink" href="#AP_OPTS_USE_SESSION_KEY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Use session key.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">AP_OPTS_USE_SESSION_KEY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x40000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">AP_OPTS_USE_SESSION_KEY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="AP_OPTS_RESERVED.html" title="AP_OPTS_RESERVED"
- >previous</a> |
- <a href="AP_OPTS_USE_SUBKEY.html" title="AP_OPTS_USE_SUBKEY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_USE_SESSION_KEY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>AP_OPTS_USE_SUBKEY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="AP_OPTS_WIRE_MASK" href="AP_OPTS_WIRE_MASK.html" />
- <link rel="prev" title="AP_OPTS_USE_SESSION_KEY" href="AP_OPTS_USE_SESSION_KEY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="AP_OPTS_USE_SESSION_KEY.html" title="AP_OPTS_USE_SESSION_KEY"
- accesskey="P">previous</a> |
- <a href="AP_OPTS_WIRE_MASK.html" title="AP_OPTS_WIRE_MASK"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_USE_SUBKEY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ap-opts-use-subkey">
-<span id="ap-opts-use-subkey-data"></span><h1>AP_OPTS_USE_SUBKEY<a class="headerlink" href="#ap-opts-use-subkey" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="AP_OPTS_USE_SUBKEY">
-<code class="descname">AP_OPTS_USE_SUBKEY</code><a class="headerlink" href="#AP_OPTS_USE_SUBKEY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Generate a subsession key from the current session key obtained from the credentials.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="53%" />
-<col width="47%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">AP_OPTS_USE_SUBKEY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">AP_OPTS_USE_SUBKEY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="AP_OPTS_USE_SESSION_KEY.html" title="AP_OPTS_USE_SESSION_KEY"
- >previous</a> |
- <a href="AP_OPTS_WIRE_MASK.html" title="AP_OPTS_WIRE_MASK"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_USE_SUBKEY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>AP_OPTS_WIRE_MASK — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_CMAC_CAMELLIA128" href="CKSUMTYPE_CMAC_CAMELLIA128.html" />
- <link rel="prev" title="AP_OPTS_USE_SUBKEY" href="AP_OPTS_USE_SUBKEY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="AP_OPTS_USE_SUBKEY.html" title="AP_OPTS_USE_SUBKEY"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_CMAC_CAMELLIA128.html" title="CKSUMTYPE_CMAC_CAMELLIA128"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_WIRE_MASK">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ap-opts-wire-mask">
-<span id="ap-opts-wire-mask-data"></span><h1>AP_OPTS_WIRE_MASK<a class="headerlink" href="#ap-opts-wire-mask" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="AP_OPTS_WIRE_MASK">
-<code class="descname">AP_OPTS_WIRE_MASK</code><a class="headerlink" href="#AP_OPTS_WIRE_MASK" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">AP_OPTS_WIRE_MASK</span></code></td>
-<td><code class="docutils literal"><span class="pre">0xfffffff0</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">AP_OPTS_WIRE_MASK</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="AP_OPTS_USE_SUBKEY.html" title="AP_OPTS_USE_SUBKEY"
- >previous</a> |
- <a href="CKSUMTYPE_CMAC_CAMELLIA128.html" title="CKSUMTYPE_CMAC_CAMELLIA128"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__AP_OPTS_WIRE_MASK">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_CMAC_CAMELLIA128 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_CMAC_CAMELLIA256" href="CKSUMTYPE_CMAC_CAMELLIA256.html" />
- <link rel="prev" title="AP_OPTS_WIRE_MASK" href="AP_OPTS_WIRE_MASK.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="AP_OPTS_WIRE_MASK.html" title="AP_OPTS_WIRE_MASK"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_CMAC_CAMELLIA256.html" title="CKSUMTYPE_CMAC_CAMELLIA256"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_CMAC_CAMELLIA128">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-cmac-camellia128">
-<span id="cksumtype-cmac-camellia128-data"></span><h1>CKSUMTYPE_CMAC_CAMELLIA128<a class="headerlink" href="#cksumtype-cmac-camellia128" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_CMAC_CAMELLIA128">
-<code class="descname">CKSUMTYPE_CMAC_CAMELLIA128</code><a class="headerlink" href="#CKSUMTYPE_CMAC_CAMELLIA128" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6803.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_CMAC_CAMELLIA128</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0011</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_CMAC_CAMELLIA128</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="AP_OPTS_WIRE_MASK.html" title="AP_OPTS_WIRE_MASK"
- >previous</a> |
- <a href="CKSUMTYPE_CMAC_CAMELLIA256.html" title="CKSUMTYPE_CMAC_CAMELLIA256"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_CMAC_CAMELLIA128">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_CMAC_CAMELLIA256 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_CRC32" href="CKSUMTYPE_CRC32.html" />
- <link rel="prev" title="CKSUMTYPE_CMAC_CAMELLIA128" href="CKSUMTYPE_CMAC_CAMELLIA128.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_CMAC_CAMELLIA128.html" title="CKSUMTYPE_CMAC_CAMELLIA128"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_CRC32.html" title="CKSUMTYPE_CRC32"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_CMAC_CAMELLIA256">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-cmac-camellia256">
-<span id="cksumtype-cmac-camellia256-data"></span><h1>CKSUMTYPE_CMAC_CAMELLIA256<a class="headerlink" href="#cksumtype-cmac-camellia256" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_CMAC_CAMELLIA256">
-<code class="descname">CKSUMTYPE_CMAC_CAMELLIA256</code><a class="headerlink" href="#CKSUMTYPE_CMAC_CAMELLIA256" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6803.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_CMAC_CAMELLIA256</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0012</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_CMAC_CAMELLIA256</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_CMAC_CAMELLIA128.html" title="CKSUMTYPE_CMAC_CAMELLIA128"
- >previous</a> |
- <a href="CKSUMTYPE_CRC32.html" title="CKSUMTYPE_CRC32"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_CMAC_CAMELLIA256">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_CRC32 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_DESCBC" href="CKSUMTYPE_DESCBC.html" />
- <link rel="prev" title="CKSUMTYPE_CMAC_CAMELLIA256" href="CKSUMTYPE_CMAC_CAMELLIA256.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_CMAC_CAMELLIA256.html" title="CKSUMTYPE_CMAC_CAMELLIA256"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_DESCBC.html" title="CKSUMTYPE_DESCBC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_CRC32">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-crc32">
-<span id="cksumtype-crc32-data"></span><h1>CKSUMTYPE_CRC32<a class="headerlink" href="#cksumtype-crc32" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_CRC32">
-<code class="descname">CKSUMTYPE_CRC32</code><a class="headerlink" href="#CKSUMTYPE_CRC32" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="50%" />
-<col width="50%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_CRC32</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_CRC32</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_CMAC_CAMELLIA256.html" title="CKSUMTYPE_CMAC_CAMELLIA256"
- >previous</a> |
- <a href="CKSUMTYPE_DESCBC.html" title="CKSUMTYPE_DESCBC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_CRC32">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_DESCBC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_HMAC_MD5_ARCFOUR" href="CKSUMTYPE_HMAC_MD5_ARCFOUR.html" />
- <link rel="prev" title="CKSUMTYPE_CRC32" href="CKSUMTYPE_CRC32.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_CRC32.html" title="CKSUMTYPE_CRC32"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_HMAC_MD5_ARCFOUR.html" title="CKSUMTYPE_HMAC_MD5_ARCFOUR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_DESCBC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-descbc">
-<span id="cksumtype-descbc-data"></span><h1>CKSUMTYPE_DESCBC<a class="headerlink" href="#cksumtype-descbc" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_DESCBC">
-<code class="descname">CKSUMTYPE_DESCBC</code><a class="headerlink" href="#CKSUMTYPE_DESCBC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_DESCBC</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0004</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_DESCBC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_CRC32.html" title="CKSUMTYPE_CRC32"
- >previous</a> |
- <a href="CKSUMTYPE_HMAC_MD5_ARCFOUR.html" title="CKSUMTYPE_HMAC_MD5_ARCFOUR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_DESCBC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_HMAC_MD5_ARCFOUR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_HMAC_SHA1_96_AES128" href="CKSUMTYPE_HMAC_SHA1_96_AES128.html" />
- <link rel="prev" title="CKSUMTYPE_DESCBC" href="CKSUMTYPE_DESCBC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_DESCBC.html" title="CKSUMTYPE_DESCBC"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_96_AES128.html" title="CKSUMTYPE_HMAC_SHA1_96_AES128"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_MD5_ARCFOUR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-hmac-md5-arcfour">
-<span id="cksumtype-hmac-md5-arcfour-data"></span><h1>CKSUMTYPE_HMAC_MD5_ARCFOUR<a class="headerlink" href="#cksumtype-hmac-md5-arcfour" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_HMAC_MD5_ARCFOUR">
-<code class="descname">CKSUMTYPE_HMAC_MD5_ARCFOUR</code><a class="headerlink" href="#CKSUMTYPE_HMAC_MD5_ARCFOUR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 4757.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_HMAC_MD5_ARCFOUR</span></code></td>
-<td><code class="docutils literal"><span class="pre">-138</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_HMAC_MD5_ARCFOUR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_DESCBC.html" title="CKSUMTYPE_DESCBC"
- >previous</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_96_AES128.html" title="CKSUMTYPE_HMAC_SHA1_96_AES128"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_MD5_ARCFOUR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_HMAC_SHA1_96_AES128 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_HMAC_SHA1_96_AES256" href="CKSUMTYPE_HMAC_SHA1_96_AES256.html" />
- <link rel="prev" title="CKSUMTYPE_HMAC_MD5_ARCFOUR" href="CKSUMTYPE_HMAC_MD5_ARCFOUR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_HMAC_MD5_ARCFOUR.html" title="CKSUMTYPE_HMAC_MD5_ARCFOUR"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_96_AES256.html" title="CKSUMTYPE_HMAC_SHA1_96_AES256"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_SHA1_96_AES128">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-hmac-sha1-96-aes128">
-<span id="cksumtype-hmac-sha1-96-aes128-data"></span><h1>CKSUMTYPE_HMAC_SHA1_96_AES128<a class="headerlink" href="#cksumtype-hmac-sha1-96-aes128" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_HMAC_SHA1_96_AES128">
-<code class="descname">CKSUMTYPE_HMAC_SHA1_96_AES128</code><a class="headerlink" href="#CKSUMTYPE_HMAC_SHA1_96_AES128" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 3962.</p>
-<p>Used with ENCTYPE_AES128_CTS_HMAC_SHA1_96</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_HMAC_SHA1_96_AES128</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x000f</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_HMAC_SHA1_96_AES128</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_HMAC_MD5_ARCFOUR.html" title="CKSUMTYPE_HMAC_MD5_ARCFOUR"
- >previous</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_96_AES256.html" title="CKSUMTYPE_HMAC_SHA1_96_AES256"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_SHA1_96_AES128">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_HMAC_SHA1_96_AES256 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_HMAC_SHA256_128_AES128" href="CKSUMTYPE_HMAC_SHA256_128_AES128.html" />
- <link rel="prev" title="CKSUMTYPE_HMAC_SHA1_96_AES128" href="CKSUMTYPE_HMAC_SHA1_96_AES128.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_96_AES128.html" title="CKSUMTYPE_HMAC_SHA1_96_AES128"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_HMAC_SHA256_128_AES128.html" title="CKSUMTYPE_HMAC_SHA256_128_AES128"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_SHA1_96_AES256">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-hmac-sha1-96-aes256">
-<span id="cksumtype-hmac-sha1-96-aes256-data"></span><h1>CKSUMTYPE_HMAC_SHA1_96_AES256<a class="headerlink" href="#cksumtype-hmac-sha1-96-aes256" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_HMAC_SHA1_96_AES256">
-<code class="descname">CKSUMTYPE_HMAC_SHA1_96_AES256</code><a class="headerlink" href="#CKSUMTYPE_HMAC_SHA1_96_AES256" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 3962.</p>
-<p>Used with ENCTYPE_AES256_CTS_HMAC_SHA1_96</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_HMAC_SHA1_96_AES256</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0010</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_HMAC_SHA1_96_AES256</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_96_AES128.html" title="CKSUMTYPE_HMAC_SHA1_96_AES128"
- >previous</a> |
- <a href="CKSUMTYPE_HMAC_SHA256_128_AES128.html" title="CKSUMTYPE_HMAC_SHA256_128_AES128"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_SHA1_96_AES256">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_HMAC_SHA1_DES3 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_MD5_HMAC_ARCFOUR" href="CKSUMTYPE_MD5_HMAC_ARCFOUR.html" />
- <link rel="prev" title="CKSUMTYPE_HMAC_SHA384_192_AES256" href="CKSUMTYPE_HMAC_SHA384_192_AES256.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_HMAC_SHA384_192_AES256.html" title="CKSUMTYPE_HMAC_SHA384_192_AES256"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_MD5_HMAC_ARCFOUR.html" title="CKSUMTYPE_MD5_HMAC_ARCFOUR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_SHA1_DES3">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-hmac-sha1-des3">
-<span id="cksumtype-hmac-sha1-des3-data"></span><h1>CKSUMTYPE_HMAC_SHA1_DES3<a class="headerlink" href="#cksumtype-hmac-sha1-des3" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_HMAC_SHA1_DES3">
-<code class="descname">CKSUMTYPE_HMAC_SHA1_DES3</code><a class="headerlink" href="#CKSUMTYPE_HMAC_SHA1_DES3" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_HMAC_SHA1_DES3</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x000c</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_HMAC_SHA1_DES3</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_HMAC_SHA384_192_AES256.html" title="CKSUMTYPE_HMAC_SHA384_192_AES256"
- >previous</a> |
- <a href="CKSUMTYPE_MD5_HMAC_ARCFOUR.html" title="CKSUMTYPE_MD5_HMAC_ARCFOUR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_SHA1_DES3">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_HMAC_SHA256_128_AES128 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_HMAC_SHA384_192_AES256" href="CKSUMTYPE_HMAC_SHA384_192_AES256.html" />
- <link rel="prev" title="CKSUMTYPE_HMAC_SHA1_96_AES256" href="CKSUMTYPE_HMAC_SHA1_96_AES256.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_96_AES256.html" title="CKSUMTYPE_HMAC_SHA1_96_AES256"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_HMAC_SHA384_192_AES256.html" title="CKSUMTYPE_HMAC_SHA384_192_AES256"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_SHA256_128_AES128">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-hmac-sha256-128-aes128">
-<span id="cksumtype-hmac-sha256-128-aes128-data"></span><h1>CKSUMTYPE_HMAC_SHA256_128_AES128<a class="headerlink" href="#cksumtype-hmac-sha256-128-aes128" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_HMAC_SHA256_128_AES128">
-<code class="descname">CKSUMTYPE_HMAC_SHA256_128_AES128</code><a class="headerlink" href="#CKSUMTYPE_HMAC_SHA256_128_AES128" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 8009.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="64%" />
-<col width="36%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_HMAC_SHA256_128_AES128</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0013</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_HMAC_SHA256_128_AES128</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_96_AES256.html" title="CKSUMTYPE_HMAC_SHA1_96_AES256"
- >previous</a> |
- <a href="CKSUMTYPE_HMAC_SHA384_192_AES256.html" title="CKSUMTYPE_HMAC_SHA384_192_AES256"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_SHA256_128_AES128">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_HMAC_SHA384_192_AES256 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_HMAC_SHA1_DES3" href="CKSUMTYPE_HMAC_SHA1_DES3.html" />
- <link rel="prev" title="CKSUMTYPE_HMAC_SHA256_128_AES128" href="CKSUMTYPE_HMAC_SHA256_128_AES128.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_HMAC_SHA256_128_AES128.html" title="CKSUMTYPE_HMAC_SHA256_128_AES128"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_DES3.html" title="CKSUMTYPE_HMAC_SHA1_DES3"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_SHA384_192_AES256">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-hmac-sha384-192-aes256">
-<span id="cksumtype-hmac-sha384-192-aes256-data"></span><h1>CKSUMTYPE_HMAC_SHA384_192_AES256<a class="headerlink" href="#cksumtype-hmac-sha384-192-aes256" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_HMAC_SHA384_192_AES256">
-<code class="descname">CKSUMTYPE_HMAC_SHA384_192_AES256</code><a class="headerlink" href="#CKSUMTYPE_HMAC_SHA384_192_AES256" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 8009.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="64%" />
-<col width="36%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_HMAC_SHA384_192_AES256</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0014</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_HMAC_SHA384_192_AES256</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_HMAC_SHA256_128_AES128.html" title="CKSUMTYPE_HMAC_SHA256_128_AES128"
- >previous</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_DES3.html" title="CKSUMTYPE_HMAC_SHA1_DES3"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_HMAC_SHA384_192_AES256">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_MD5_HMAC_ARCFOUR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_NIST_SHA" href="CKSUMTYPE_NIST_SHA.html" />
- <link rel="prev" title="CKSUMTYPE_HMAC_SHA1_DES3" href="CKSUMTYPE_HMAC_SHA1_DES3.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_DES3.html" title="CKSUMTYPE_HMAC_SHA1_DES3"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_NIST_SHA.html" title="CKSUMTYPE_NIST_SHA"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_MD5_HMAC_ARCFOUR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-md5-hmac-arcfour">
-<span id="cksumtype-md5-hmac-arcfour-data"></span><h1>CKSUMTYPE_MD5_HMAC_ARCFOUR<a class="headerlink" href="#cksumtype-md5-hmac-arcfour" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_MD5_HMAC_ARCFOUR">
-<code class="descname">CKSUMTYPE_MD5_HMAC_ARCFOUR</code><a class="headerlink" href="#CKSUMTYPE_MD5_HMAC_ARCFOUR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="48%" />
-<col width="52%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_MD5_HMAC_ARCFOUR</span></code></td>
-<td><code class="docutils literal"><span class="pre">-137</span> <span class="pre">/*</span> <span class="pre">Microsoft</span> <span class="pre">netlogon</span> <span class="pre">*/</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_MD5_HMAC_ARCFOUR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_HMAC_SHA1_DES3.html" title="CKSUMTYPE_HMAC_SHA1_DES3"
- >previous</a> |
- <a href="CKSUMTYPE_NIST_SHA.html" title="CKSUMTYPE_NIST_SHA"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_MD5_HMAC_ARCFOUR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_NIST_SHA — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_RSA_MD4" href="CKSUMTYPE_RSA_MD4.html" />
- <link rel="prev" title="CKSUMTYPE_MD5_HMAC_ARCFOUR" href="CKSUMTYPE_MD5_HMAC_ARCFOUR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_MD5_HMAC_ARCFOUR.html" title="CKSUMTYPE_MD5_HMAC_ARCFOUR"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_RSA_MD4.html" title="CKSUMTYPE_RSA_MD4"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_NIST_SHA">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-nist-sha">
-<span id="cksumtype-nist-sha-data"></span><h1>CKSUMTYPE_NIST_SHA<a class="headerlink" href="#cksumtype-nist-sha" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_NIST_SHA">
-<code class="descname">CKSUMTYPE_NIST_SHA</code><a class="headerlink" href="#CKSUMTYPE_NIST_SHA" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="53%" />
-<col width="47%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_NIST_SHA</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0009</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_NIST_SHA</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_MD5_HMAC_ARCFOUR.html" title="CKSUMTYPE_MD5_HMAC_ARCFOUR"
- >previous</a> |
- <a href="CKSUMTYPE_RSA_MD4.html" title="CKSUMTYPE_RSA_MD4"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_NIST_SHA">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_RSA_MD4 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_RSA_MD4_DES" href="CKSUMTYPE_RSA_MD4_DES.html" />
- <link rel="prev" title="CKSUMTYPE_NIST_SHA" href="CKSUMTYPE_NIST_SHA.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_NIST_SHA.html" title="CKSUMTYPE_NIST_SHA"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_RSA_MD4_DES.html" title="CKSUMTYPE_RSA_MD4_DES"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_RSA_MD4">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-rsa-md4">
-<span id="cksumtype-rsa-md4-data"></span><h1>CKSUMTYPE_RSA_MD4<a class="headerlink" href="#cksumtype-rsa-md4" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_RSA_MD4">
-<code class="descname">CKSUMTYPE_RSA_MD4</code><a class="headerlink" href="#CKSUMTYPE_RSA_MD4" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_RSA_MD4</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_RSA_MD4</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_NIST_SHA.html" title="CKSUMTYPE_NIST_SHA"
- >previous</a> |
- <a href="CKSUMTYPE_RSA_MD4_DES.html" title="CKSUMTYPE_RSA_MD4_DES"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_RSA_MD4">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_RSA_MD4_DES — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_RSA_MD5" href="CKSUMTYPE_RSA_MD5.html" />
- <link rel="prev" title="CKSUMTYPE_RSA_MD4" href="CKSUMTYPE_RSA_MD4.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_RSA_MD4.html" title="CKSUMTYPE_RSA_MD4"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_RSA_MD5.html" title="CKSUMTYPE_RSA_MD5"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_RSA_MD4_DES">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-rsa-md4-des">
-<span id="cksumtype-rsa-md4-des-data"></span><h1>CKSUMTYPE_RSA_MD4_DES<a class="headerlink" href="#cksumtype-rsa-md4-des" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_RSA_MD4_DES">
-<code class="descname">CKSUMTYPE_RSA_MD4_DES</code><a class="headerlink" href="#CKSUMTYPE_RSA_MD4_DES" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_RSA_MD4_DES</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0003</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_RSA_MD4_DES</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_RSA_MD4.html" title="CKSUMTYPE_RSA_MD4"
- >previous</a> |
- <a href="CKSUMTYPE_RSA_MD5.html" title="CKSUMTYPE_RSA_MD5"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_RSA_MD4_DES">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_RSA_MD5 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_RSA_MD5_DES" href="CKSUMTYPE_RSA_MD5_DES.html" />
- <link rel="prev" title="CKSUMTYPE_RSA_MD4_DES" href="CKSUMTYPE_RSA_MD4_DES.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_RSA_MD4_DES.html" title="CKSUMTYPE_RSA_MD4_DES"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_RSA_MD5_DES.html" title="CKSUMTYPE_RSA_MD5_DES"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_RSA_MD5">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-rsa-md5">
-<span id="cksumtype-rsa-md5-data"></span><h1>CKSUMTYPE_RSA_MD5<a class="headerlink" href="#cksumtype-rsa-md5" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_RSA_MD5">
-<code class="descname">CKSUMTYPE_RSA_MD5</code><a class="headerlink" href="#CKSUMTYPE_RSA_MD5" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_RSA_MD5</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0007</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_RSA_MD5</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_RSA_MD4_DES.html" title="CKSUMTYPE_RSA_MD4_DES"
- >previous</a> |
- <a href="CKSUMTYPE_RSA_MD5_DES.html" title="CKSUMTYPE_RSA_MD5_DES"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_RSA_MD5">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_RSA_MD5_DES — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="CKSUMTYPE_SHA1" href="CKSUMTYPE_SHA1.html" />
- <link rel="prev" title="CKSUMTYPE_RSA_MD5" href="CKSUMTYPE_RSA_MD5.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_RSA_MD5.html" title="CKSUMTYPE_RSA_MD5"
- accesskey="P">previous</a> |
- <a href="CKSUMTYPE_SHA1.html" title="CKSUMTYPE_SHA1"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_RSA_MD5_DES">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-rsa-md5-des">
-<span id="cksumtype-rsa-md5-des-data"></span><h1>CKSUMTYPE_RSA_MD5_DES<a class="headerlink" href="#cksumtype-rsa-md5-des" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_RSA_MD5_DES">
-<code class="descname">CKSUMTYPE_RSA_MD5_DES</code><a class="headerlink" href="#CKSUMTYPE_RSA_MD5_DES" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_RSA_MD5_DES</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0008</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_RSA_MD5_DES</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_RSA_MD5.html" title="CKSUMTYPE_RSA_MD5"
- >previous</a> |
- <a href="CKSUMTYPE_SHA1.html" title="CKSUMTYPE_SHA1"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_RSA_MD5_DES">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>CKSUMTYPE_SHA1 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_AES128_CTS_HMAC_SHA1_96" href="ENCTYPE_AES128_CTS_HMAC_SHA1_96.html" />
- <link rel="prev" title="CKSUMTYPE_RSA_MD5_DES" href="CKSUMTYPE_RSA_MD5_DES.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_RSA_MD5_DES.html" title="CKSUMTYPE_RSA_MD5_DES"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_AES128_CTS_HMAC_SHA1_96.html" title="ENCTYPE_AES128_CTS_HMAC_SHA1_96"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_SHA1">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="cksumtype-sha1">
-<span id="cksumtype-sha1-data"></span><h1>CKSUMTYPE_SHA1<a class="headerlink" href="#cksumtype-sha1" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="CKSUMTYPE_SHA1">
-<code class="descname">CKSUMTYPE_SHA1</code><a class="headerlink" href="#CKSUMTYPE_SHA1" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 3961.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="49%" />
-<col width="51%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">CKSUMTYPE_SHA1</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x000e</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">CKSUMTYPE_SHA1</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_RSA_MD5_DES.html" title="CKSUMTYPE_RSA_MD5_DES"
- >previous</a> |
- <a href="ENCTYPE_AES128_CTS_HMAC_SHA1_96.html" title="ENCTYPE_AES128_CTS_HMAC_SHA1_96"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__CKSUMTYPE_SHA1">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_AES128_CTS_HMAC_SHA1_96 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_AES128_CTS_HMAC_SHA256_128" href="ENCTYPE_AES128_CTS_HMAC_SHA256_128.html" />
- <link rel="prev" title="CKSUMTYPE_SHA1" href="CKSUMTYPE_SHA1.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="CKSUMTYPE_SHA1.html" title="CKSUMTYPE_SHA1"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_AES128_CTS_HMAC_SHA256_128.html" title="ENCTYPE_AES128_CTS_HMAC_SHA256_128"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_AES128_CTS_HMAC_SHA1_96">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-aes128-cts-hmac-sha1-96">
-<span id="enctype-aes128-cts-hmac-sha1-96-data"></span><h1>ENCTYPE_AES128_CTS_HMAC_SHA1_96<a class="headerlink" href="#enctype-aes128-cts-hmac-sha1-96" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_AES128_CTS_HMAC_SHA1_96">
-<code class="descname">ENCTYPE_AES128_CTS_HMAC_SHA1_96</code><a class="headerlink" href="#ENCTYPE_AES128_CTS_HMAC_SHA1_96" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 3962.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_AES128_CTS_HMAC_SHA1_96</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0011</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_AES128_CTS_HMAC_SHA1_96</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="CKSUMTYPE_SHA1.html" title="CKSUMTYPE_SHA1"
- >previous</a> |
- <a href="ENCTYPE_AES128_CTS_HMAC_SHA256_128.html" title="ENCTYPE_AES128_CTS_HMAC_SHA256_128"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_AES128_CTS_HMAC_SHA1_96">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_AES128_CTS_HMAC_SHA256_128 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_AES256_CTS_HMAC_SHA1_96" href="ENCTYPE_AES256_CTS_HMAC_SHA1_96.html" />
- <link rel="prev" title="ENCTYPE_AES128_CTS_HMAC_SHA1_96" href="ENCTYPE_AES128_CTS_HMAC_SHA1_96.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_AES128_CTS_HMAC_SHA1_96.html" title="ENCTYPE_AES128_CTS_HMAC_SHA1_96"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_AES256_CTS_HMAC_SHA1_96.html" title="ENCTYPE_AES256_CTS_HMAC_SHA1_96"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_AES128_CTS_HMAC_SHA256_128">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-aes128-cts-hmac-sha256-128">
-<span id="enctype-aes128-cts-hmac-sha256-128-data"></span><h1>ENCTYPE_AES128_CTS_HMAC_SHA256_128<a class="headerlink" href="#enctype-aes128-cts-hmac-sha256-128" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_AES128_CTS_HMAC_SHA256_128">
-<code class="descname">ENCTYPE_AES128_CTS_HMAC_SHA256_128</code><a class="headerlink" href="#ENCTYPE_AES128_CTS_HMAC_SHA256_128" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 8009.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_AES128_CTS_HMAC_SHA256_128</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0013</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_AES128_CTS_HMAC_SHA256_128</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_AES128_CTS_HMAC_SHA1_96.html" title="ENCTYPE_AES128_CTS_HMAC_SHA1_96"
- >previous</a> |
- <a href="ENCTYPE_AES256_CTS_HMAC_SHA1_96.html" title="ENCTYPE_AES256_CTS_HMAC_SHA1_96"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_AES128_CTS_HMAC_SHA256_128">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_AES256_CTS_HMAC_SHA1_96 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_AES256_CTS_HMAC_SHA384_192" href="ENCTYPE_AES256_CTS_HMAC_SHA384_192.html" />
- <link rel="prev" title="ENCTYPE_AES128_CTS_HMAC_SHA256_128" href="ENCTYPE_AES128_CTS_HMAC_SHA256_128.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_AES128_CTS_HMAC_SHA256_128.html" title="ENCTYPE_AES128_CTS_HMAC_SHA256_128"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_AES256_CTS_HMAC_SHA384_192.html" title="ENCTYPE_AES256_CTS_HMAC_SHA384_192"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_AES256_CTS_HMAC_SHA1_96">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-aes256-cts-hmac-sha1-96">
-<span id="enctype-aes256-cts-hmac-sha1-96-data"></span><h1>ENCTYPE_AES256_CTS_HMAC_SHA1_96<a class="headerlink" href="#enctype-aes256-cts-hmac-sha1-96" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_AES256_CTS_HMAC_SHA1_96">
-<code class="descname">ENCTYPE_AES256_CTS_HMAC_SHA1_96</code><a class="headerlink" href="#ENCTYPE_AES256_CTS_HMAC_SHA1_96" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 3962.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_AES256_CTS_HMAC_SHA1_96</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0012</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_AES256_CTS_HMAC_SHA1_96</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_AES128_CTS_HMAC_SHA256_128.html" title="ENCTYPE_AES128_CTS_HMAC_SHA256_128"
- >previous</a> |
- <a href="ENCTYPE_AES256_CTS_HMAC_SHA384_192.html" title="ENCTYPE_AES256_CTS_HMAC_SHA384_192"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_AES256_CTS_HMAC_SHA1_96">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_AES256_CTS_HMAC_SHA384_192 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_ARCFOUR_HMAC" href="ENCTYPE_ARCFOUR_HMAC.html" />
- <link rel="prev" title="ENCTYPE_AES256_CTS_HMAC_SHA1_96" href="ENCTYPE_AES256_CTS_HMAC_SHA1_96.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_AES256_CTS_HMAC_SHA1_96.html" title="ENCTYPE_AES256_CTS_HMAC_SHA1_96"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_ARCFOUR_HMAC.html" title="ENCTYPE_ARCFOUR_HMAC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_AES256_CTS_HMAC_SHA384_192">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-aes256-cts-hmac-sha384-192">
-<span id="enctype-aes256-cts-hmac-sha384-192-data"></span><h1>ENCTYPE_AES256_CTS_HMAC_SHA384_192<a class="headerlink" href="#enctype-aes256-cts-hmac-sha384-192" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_AES256_CTS_HMAC_SHA384_192">
-<code class="descname">ENCTYPE_AES256_CTS_HMAC_SHA384_192</code><a class="headerlink" href="#ENCTYPE_AES256_CTS_HMAC_SHA384_192" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 8009.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_AES256_CTS_HMAC_SHA384_192</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0014</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_AES256_CTS_HMAC_SHA384_192</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_AES256_CTS_HMAC_SHA1_96.html" title="ENCTYPE_AES256_CTS_HMAC_SHA1_96"
- >previous</a> |
- <a href="ENCTYPE_ARCFOUR_HMAC.html" title="ENCTYPE_ARCFOUR_HMAC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_AES256_CTS_HMAC_SHA384_192">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_ARCFOUR_HMAC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_ARCFOUR_HMAC_EXP" href="ENCTYPE_ARCFOUR_HMAC_EXP.html" />
- <link rel="prev" title="ENCTYPE_AES256_CTS_HMAC_SHA384_192" href="ENCTYPE_AES256_CTS_HMAC_SHA384_192.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_AES256_CTS_HMAC_SHA384_192.html" title="ENCTYPE_AES256_CTS_HMAC_SHA384_192"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_ARCFOUR_HMAC_EXP.html" title="ENCTYPE_ARCFOUR_HMAC_EXP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_ARCFOUR_HMAC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-arcfour-hmac">
-<span id="enctype-arcfour-hmac-data"></span><h1>ENCTYPE_ARCFOUR_HMAC<a class="headerlink" href="#enctype-arcfour-hmac" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_ARCFOUR_HMAC">
-<code class="descname">ENCTYPE_ARCFOUR_HMAC</code><a class="headerlink" href="#ENCTYPE_ARCFOUR_HMAC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 4757.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_ARCFOUR_HMAC</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0017</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_ARCFOUR_HMAC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_AES256_CTS_HMAC_SHA384_192.html" title="ENCTYPE_AES256_CTS_HMAC_SHA384_192"
- >previous</a> |
- <a href="ENCTYPE_ARCFOUR_HMAC_EXP.html" title="ENCTYPE_ARCFOUR_HMAC_EXP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_ARCFOUR_HMAC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_ARCFOUR_HMAC_EXP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_CAMELLIA128_CTS_CMAC" href="ENCTYPE_CAMELLIA128_CTS_CMAC.html" />
- <link rel="prev" title="ENCTYPE_ARCFOUR_HMAC" href="ENCTYPE_ARCFOUR_HMAC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_ARCFOUR_HMAC.html" title="ENCTYPE_ARCFOUR_HMAC"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_CAMELLIA128_CTS_CMAC.html" title="ENCTYPE_CAMELLIA128_CTS_CMAC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_ARCFOUR_HMAC_EXP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-arcfour-hmac-exp">
-<span id="enctype-arcfour-hmac-exp-data"></span><h1>ENCTYPE_ARCFOUR_HMAC_EXP<a class="headerlink" href="#enctype-arcfour-hmac-exp" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_ARCFOUR_HMAC_EXP">
-<code class="descname">ENCTYPE_ARCFOUR_HMAC_EXP</code><a class="headerlink" href="#ENCTYPE_ARCFOUR_HMAC_EXP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 4757.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_ARCFOUR_HMAC_EXP</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0018</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_ARCFOUR_HMAC_EXP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_ARCFOUR_HMAC.html" title="ENCTYPE_ARCFOUR_HMAC"
- >previous</a> |
- <a href="ENCTYPE_CAMELLIA128_CTS_CMAC.html" title="ENCTYPE_CAMELLIA128_CTS_CMAC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_ARCFOUR_HMAC_EXP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_CAMELLIA128_CTS_CMAC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_CAMELLIA256_CTS_CMAC" href="ENCTYPE_CAMELLIA256_CTS_CMAC.html" />
- <link rel="prev" title="ENCTYPE_ARCFOUR_HMAC_EXP" href="ENCTYPE_ARCFOUR_HMAC_EXP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_ARCFOUR_HMAC_EXP.html" title="ENCTYPE_ARCFOUR_HMAC_EXP"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_CAMELLIA256_CTS_CMAC.html" title="ENCTYPE_CAMELLIA256_CTS_CMAC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_CAMELLIA128_CTS_CMAC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-camellia128-cts-cmac">
-<span id="enctype-camellia128-cts-cmac-data"></span><h1>ENCTYPE_CAMELLIA128_CTS_CMAC<a class="headerlink" href="#enctype-camellia128-cts-cmac" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_CAMELLIA128_CTS_CMAC">
-<code class="descname">ENCTYPE_CAMELLIA128_CTS_CMAC</code><a class="headerlink" href="#ENCTYPE_CAMELLIA128_CTS_CMAC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6803.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_CAMELLIA128_CTS_CMAC</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0019</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_CAMELLIA128_CTS_CMAC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_ARCFOUR_HMAC_EXP.html" title="ENCTYPE_ARCFOUR_HMAC_EXP"
- >previous</a> |
- <a href="ENCTYPE_CAMELLIA256_CTS_CMAC.html" title="ENCTYPE_CAMELLIA256_CTS_CMAC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_CAMELLIA128_CTS_CMAC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_CAMELLIA256_CTS_CMAC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_DES3_CBC_ENV" href="ENCTYPE_DES3_CBC_ENV.html" />
- <link rel="prev" title="ENCTYPE_CAMELLIA128_CTS_CMAC" href="ENCTYPE_CAMELLIA128_CTS_CMAC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_CAMELLIA128_CTS_CMAC.html" title="ENCTYPE_CAMELLIA128_CTS_CMAC"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_DES3_CBC_ENV.html" title="ENCTYPE_DES3_CBC_ENV"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_CAMELLIA256_CTS_CMAC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-camellia256-cts-cmac">
-<span id="enctype-camellia256-cts-cmac-data"></span><h1>ENCTYPE_CAMELLIA256_CTS_CMAC<a class="headerlink" href="#enctype-camellia256-cts-cmac" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_CAMELLIA256_CTS_CMAC">
-<code class="descname">ENCTYPE_CAMELLIA256_CTS_CMAC</code><a class="headerlink" href="#ENCTYPE_CAMELLIA256_CTS_CMAC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6803.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_CAMELLIA256_CTS_CMAC</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x001a</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_CAMELLIA256_CTS_CMAC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_CAMELLIA128_CTS_CMAC.html" title="ENCTYPE_CAMELLIA128_CTS_CMAC"
- >previous</a> |
- <a href="ENCTYPE_DES3_CBC_ENV.html" title="ENCTYPE_DES3_CBC_ENV"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_CAMELLIA256_CTS_CMAC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_DES3_CBC_ENV — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_DES3_CBC_RAW" href="ENCTYPE_DES3_CBC_RAW.html" />
- <link rel="prev" title="ENCTYPE_CAMELLIA256_CTS_CMAC" href="ENCTYPE_CAMELLIA256_CTS_CMAC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_CAMELLIA256_CTS_CMAC.html" title="ENCTYPE_CAMELLIA256_CTS_CMAC"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_DES3_CBC_RAW.html" title="ENCTYPE_DES3_CBC_RAW"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES3_CBC_ENV">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-des3-cbc-env">
-<span id="enctype-des3-cbc-env-data"></span><h1>ENCTYPE_DES3_CBC_ENV<a class="headerlink" href="#enctype-des3-cbc-env" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_DES3_CBC_ENV">
-<code class="descname">ENCTYPE_DES3_CBC_ENV</code><a class="headerlink" href="#ENCTYPE_DES3_CBC_ENV" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>DES-3 cbc mode, CMS enveloped data.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_DES3_CBC_ENV</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x000f</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_DES3_CBC_ENV</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_CAMELLIA256_CTS_CMAC.html" title="ENCTYPE_CAMELLIA256_CTS_CMAC"
- >previous</a> |
- <a href="ENCTYPE_DES3_CBC_RAW.html" title="ENCTYPE_DES3_CBC_RAW"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES3_CBC_ENV">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_DES3_CBC_RAW — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_DES3_CBC_SHA" href="ENCTYPE_DES3_CBC_SHA.html" />
- <link rel="prev" title="ENCTYPE_DES3_CBC_ENV" href="ENCTYPE_DES3_CBC_ENV.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_DES3_CBC_ENV.html" title="ENCTYPE_DES3_CBC_ENV"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_DES3_CBC_SHA.html" title="ENCTYPE_DES3_CBC_SHA"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES3_CBC_RAW">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-des3-cbc-raw">
-<span id="enctype-des3-cbc-raw-data"></span><h1>ENCTYPE_DES3_CBC_RAW<a class="headerlink" href="#enctype-des3-cbc-raw" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_DES3_CBC_RAW">
-<code class="descname">ENCTYPE_DES3_CBC_RAW</code><a class="headerlink" href="#ENCTYPE_DES3_CBC_RAW" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_DES3_CBC_RAW</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0006</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_DES3_CBC_RAW</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_DES3_CBC_ENV.html" title="ENCTYPE_DES3_CBC_ENV"
- >previous</a> |
- <a href="ENCTYPE_DES3_CBC_SHA.html" title="ENCTYPE_DES3_CBC_SHA"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES3_CBC_RAW">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_DES3_CBC_SHA — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_DES3_CBC_SHA1" href="ENCTYPE_DES3_CBC_SHA1.html" />
- <link rel="prev" title="ENCTYPE_DES3_CBC_RAW" href="ENCTYPE_DES3_CBC_RAW.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_DES3_CBC_RAW.html" title="ENCTYPE_DES3_CBC_RAW"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_DES3_CBC_SHA1.html" title="ENCTYPE_DES3_CBC_SHA1"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES3_CBC_SHA">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-des3-cbc-sha">
-<span id="enctype-des3-cbc-sha-data"></span><h1>ENCTYPE_DES3_CBC_SHA<a class="headerlink" href="#enctype-des3-cbc-sha" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_DES3_CBC_SHA">
-<code class="descname">ENCTYPE_DES3_CBC_SHA</code><a class="headerlink" href="#ENCTYPE_DES3_CBC_SHA" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_DES3_CBC_SHA</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0005</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_DES3_CBC_SHA</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_DES3_CBC_RAW.html" title="ENCTYPE_DES3_CBC_RAW"
- >previous</a> |
- <a href="ENCTYPE_DES3_CBC_SHA1.html" title="ENCTYPE_DES3_CBC_SHA1"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES3_CBC_SHA">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_DES3_CBC_SHA1 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_DES_CBC_CRC" href="ENCTYPE_DES_CBC_CRC.html" />
- <link rel="prev" title="ENCTYPE_DES3_CBC_SHA" href="ENCTYPE_DES3_CBC_SHA.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_DES3_CBC_SHA.html" title="ENCTYPE_DES3_CBC_SHA"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_DES_CBC_CRC.html" title="ENCTYPE_DES_CBC_CRC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES3_CBC_SHA1">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-des3-cbc-sha1">
-<span id="enctype-des3-cbc-sha1-data"></span><h1>ENCTYPE_DES3_CBC_SHA1<a class="headerlink" href="#enctype-des3-cbc-sha1" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_DES3_CBC_SHA1">
-<code class="descname">ENCTYPE_DES3_CBC_SHA1</code><a class="headerlink" href="#ENCTYPE_DES3_CBC_SHA1" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_DES3_CBC_SHA1</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0010</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_DES3_CBC_SHA1</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_DES3_CBC_SHA.html" title="ENCTYPE_DES3_CBC_SHA"
- >previous</a> |
- <a href="ENCTYPE_DES_CBC_CRC.html" title="ENCTYPE_DES_CBC_CRC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES3_CBC_SHA1">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_DES_CBC_CRC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_DES_CBC_MD4" href="ENCTYPE_DES_CBC_MD4.html" />
- <link rel="prev" title="ENCTYPE_DES3_CBC_SHA1" href="ENCTYPE_DES3_CBC_SHA1.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_DES3_CBC_SHA1.html" title="ENCTYPE_DES3_CBC_SHA1"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_DES_CBC_MD4.html" title="ENCTYPE_DES_CBC_MD4"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES_CBC_CRC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-des-cbc-crc">
-<span id="enctype-des-cbc-crc-data"></span><h1>ENCTYPE_DES_CBC_CRC<a class="headerlink" href="#enctype-des-cbc-crc" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_DES_CBC_CRC">
-<code class="descname">ENCTYPE_DES_CBC_CRC</code><a class="headerlink" href="#ENCTYPE_DES_CBC_CRC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_DES_CBC_CRC</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_DES_CBC_CRC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_DES3_CBC_SHA1.html" title="ENCTYPE_DES3_CBC_SHA1"
- >previous</a> |
- <a href="ENCTYPE_DES_CBC_MD4.html" title="ENCTYPE_DES_CBC_MD4"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES_CBC_CRC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_DES_CBC_MD4 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_DES_CBC_MD5" href="ENCTYPE_DES_CBC_MD5.html" />
- <link rel="prev" title="ENCTYPE_DES_CBC_CRC" href="ENCTYPE_DES_CBC_CRC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_DES_CBC_CRC.html" title="ENCTYPE_DES_CBC_CRC"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_DES_CBC_MD5.html" title="ENCTYPE_DES_CBC_MD5"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES_CBC_MD4">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-des-cbc-md4">
-<span id="enctype-des-cbc-md4-data"></span><h1>ENCTYPE_DES_CBC_MD4<a class="headerlink" href="#enctype-des-cbc-md4" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_DES_CBC_MD4">
-<code class="descname">ENCTYPE_DES_CBC_MD4</code><a class="headerlink" href="#ENCTYPE_DES_CBC_MD4" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_DES_CBC_MD4</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_DES_CBC_MD4</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_DES_CBC_CRC.html" title="ENCTYPE_DES_CBC_CRC"
- >previous</a> |
- <a href="ENCTYPE_DES_CBC_MD5.html" title="ENCTYPE_DES_CBC_MD5"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES_CBC_MD4">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_DES_CBC_MD5 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_DES_CBC_RAW" href="ENCTYPE_DES_CBC_RAW.html" />
- <link rel="prev" title="ENCTYPE_DES_CBC_MD4" href="ENCTYPE_DES_CBC_MD4.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_DES_CBC_MD4.html" title="ENCTYPE_DES_CBC_MD4"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_DES_CBC_RAW.html" title="ENCTYPE_DES_CBC_RAW"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES_CBC_MD5">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-des-cbc-md5">
-<span id="enctype-des-cbc-md5-data"></span><h1>ENCTYPE_DES_CBC_MD5<a class="headerlink" href="#enctype-des-cbc-md5" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_DES_CBC_MD5">
-<code class="descname">ENCTYPE_DES_CBC_MD5</code><a class="headerlink" href="#ENCTYPE_DES_CBC_MD5" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_DES_CBC_MD5</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0003</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_DES_CBC_MD5</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_DES_CBC_MD4.html" title="ENCTYPE_DES_CBC_MD4"
- >previous</a> |
- <a href="ENCTYPE_DES_CBC_RAW.html" title="ENCTYPE_DES_CBC_RAW"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES_CBC_MD5">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_DES_CBC_RAW — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_DES_HMAC_SHA1" href="ENCTYPE_DES_HMAC_SHA1.html" />
- <link rel="prev" title="ENCTYPE_DES_CBC_MD5" href="ENCTYPE_DES_CBC_MD5.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_DES_CBC_MD5.html" title="ENCTYPE_DES_CBC_MD5"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_DES_HMAC_SHA1.html" title="ENCTYPE_DES_HMAC_SHA1"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES_CBC_RAW">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-des-cbc-raw">
-<span id="enctype-des-cbc-raw-data"></span><h1>ENCTYPE_DES_CBC_RAW<a class="headerlink" href="#enctype-des-cbc-raw" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_DES_CBC_RAW">
-<code class="descname">ENCTYPE_DES_CBC_RAW</code><a class="headerlink" href="#ENCTYPE_DES_CBC_RAW" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_DES_CBC_RAW</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0004</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_DES_CBC_RAW</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_DES_CBC_MD5.html" title="ENCTYPE_DES_CBC_MD5"
- >previous</a> |
- <a href="ENCTYPE_DES_HMAC_SHA1.html" title="ENCTYPE_DES_HMAC_SHA1"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES_CBC_RAW">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_DES_HMAC_SHA1 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_DSA_SHA1_CMS" href="ENCTYPE_DSA_SHA1_CMS.html" />
- <link rel="prev" title="ENCTYPE_DES_CBC_RAW" href="ENCTYPE_DES_CBC_RAW.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_DES_CBC_RAW.html" title="ENCTYPE_DES_CBC_RAW"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_DSA_SHA1_CMS.html" title="ENCTYPE_DSA_SHA1_CMS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES_HMAC_SHA1">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-des-hmac-sha1">
-<span id="enctype-des-hmac-sha1-data"></span><h1>ENCTYPE_DES_HMAC_SHA1<a class="headerlink" href="#enctype-des-hmac-sha1" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_DES_HMAC_SHA1">
-<code class="descname">ENCTYPE_DES_HMAC_SHA1</code><a class="headerlink" href="#ENCTYPE_DES_HMAC_SHA1" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_DES_HMAC_SHA1</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0008</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_DES_HMAC_SHA1</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_DES_CBC_RAW.html" title="ENCTYPE_DES_CBC_RAW"
- >previous</a> |
- <a href="ENCTYPE_DSA_SHA1_CMS.html" title="ENCTYPE_DSA_SHA1_CMS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DES_HMAC_SHA1">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_DSA_SHA1_CMS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_MD5_RSA_CMS" href="ENCTYPE_MD5_RSA_CMS.html" />
- <link rel="prev" title="ENCTYPE_DES_HMAC_SHA1" href="ENCTYPE_DES_HMAC_SHA1.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_DES_HMAC_SHA1.html" title="ENCTYPE_DES_HMAC_SHA1"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_MD5_RSA_CMS.html" title="ENCTYPE_MD5_RSA_CMS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DSA_SHA1_CMS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-dsa-sha1-cms">
-<span id="enctype-dsa-sha1-cms-data"></span><h1>ENCTYPE_DSA_SHA1_CMS<a class="headerlink" href="#enctype-dsa-sha1-cms" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_DSA_SHA1_CMS">
-<code class="descname">ENCTYPE_DSA_SHA1_CMS</code><a class="headerlink" href="#ENCTYPE_DSA_SHA1_CMS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>DSA with SHA1, CMS signature.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_DSA_SHA1_CMS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0009</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_DSA_SHA1_CMS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_DES_HMAC_SHA1.html" title="ENCTYPE_DES_HMAC_SHA1"
- >previous</a> |
- <a href="ENCTYPE_MD5_RSA_CMS.html" title="ENCTYPE_MD5_RSA_CMS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_DSA_SHA1_CMS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_MD5_RSA_CMS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_NULL" href="ENCTYPE_NULL.html" />
- <link rel="prev" title="ENCTYPE_DSA_SHA1_CMS" href="ENCTYPE_DSA_SHA1_CMS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_DSA_SHA1_CMS.html" title="ENCTYPE_DSA_SHA1_CMS"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_NULL.html" title="ENCTYPE_NULL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_MD5_RSA_CMS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-md5-rsa-cms">
-<span id="enctype-md5-rsa-cms-data"></span><h1>ENCTYPE_MD5_RSA_CMS<a class="headerlink" href="#enctype-md5-rsa-cms" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_MD5_RSA_CMS">
-<code class="descname">ENCTYPE_MD5_RSA_CMS</code><a class="headerlink" href="#ENCTYPE_MD5_RSA_CMS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>MD5 with RSA, CMS signature.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_MD5_RSA_CMS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x000a</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_MD5_RSA_CMS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_DSA_SHA1_CMS.html" title="ENCTYPE_DSA_SHA1_CMS"
- >previous</a> |
- <a href="ENCTYPE_NULL.html" title="ENCTYPE_NULL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_MD5_RSA_CMS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_NULL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_RC2_CBC_ENV" href="ENCTYPE_RC2_CBC_ENV.html" />
- <link rel="prev" title="ENCTYPE_MD5_RSA_CMS" href="ENCTYPE_MD5_RSA_CMS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_MD5_RSA_CMS.html" title="ENCTYPE_MD5_RSA_CMS"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_RC2_CBC_ENV.html" title="ENCTYPE_RC2_CBC_ENV"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_NULL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-null">
-<span id="enctype-null-data"></span><h1>ENCTYPE_NULL<a class="headerlink" href="#enctype-null" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_NULL">
-<code class="descname">ENCTYPE_NULL</code><a class="headerlink" href="#ENCTYPE_NULL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="46%" />
-<col width="54%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_NULL</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_NULL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_MD5_RSA_CMS.html" title="ENCTYPE_MD5_RSA_CMS"
- >previous</a> |
- <a href="ENCTYPE_RC2_CBC_ENV.html" title="ENCTYPE_RC2_CBC_ENV"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_NULL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_RC2_CBC_ENV — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_RSA_ENV" href="ENCTYPE_RSA_ENV.html" />
- <link rel="prev" title="ENCTYPE_NULL" href="ENCTYPE_NULL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_NULL.html" title="ENCTYPE_NULL"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_RSA_ENV.html" title="ENCTYPE_RSA_ENV"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_RC2_CBC_ENV">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-rc2-cbc-env">
-<span id="enctype-rc2-cbc-env-data"></span><h1>ENCTYPE_RC2_CBC_ENV<a class="headerlink" href="#enctype-rc2-cbc-env" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_RC2_CBC_ENV">
-<code class="descname">ENCTYPE_RC2_CBC_ENV</code><a class="headerlink" href="#ENCTYPE_RC2_CBC_ENV" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RC2 cbc mode, CMS enveloped data.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_RC2_CBC_ENV</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x000c</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_RC2_CBC_ENV</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_NULL.html" title="ENCTYPE_NULL"
- >previous</a> |
- <a href="ENCTYPE_RSA_ENV.html" title="ENCTYPE_RSA_ENV"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_RC2_CBC_ENV">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_RSA_ENV — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_RSA_ES_OAEP_ENV" href="ENCTYPE_RSA_ES_OAEP_ENV.html" />
- <link rel="prev" title="ENCTYPE_RC2_CBC_ENV" href="ENCTYPE_RC2_CBC_ENV.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_RC2_CBC_ENV.html" title="ENCTYPE_RC2_CBC_ENV"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_RSA_ES_OAEP_ENV.html" title="ENCTYPE_RSA_ES_OAEP_ENV"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_RSA_ENV">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-rsa-env">
-<span id="enctype-rsa-env-data"></span><h1>ENCTYPE_RSA_ENV<a class="headerlink" href="#enctype-rsa-env" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_RSA_ENV">
-<code class="descname">ENCTYPE_RSA_ENV</code><a class="headerlink" href="#ENCTYPE_RSA_ENV" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RSA encryption, CMS enveloped data.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="50%" />
-<col width="50%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_RSA_ENV</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x000d</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_RSA_ENV</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_RC2_CBC_ENV.html" title="ENCTYPE_RC2_CBC_ENV"
- >previous</a> |
- <a href="ENCTYPE_RSA_ES_OAEP_ENV.html" title="ENCTYPE_RSA_ES_OAEP_ENV"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_RSA_ENV">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_RSA_ES_OAEP_ENV — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_SHA1_RSA_CMS" href="ENCTYPE_SHA1_RSA_CMS.html" />
- <link rel="prev" title="ENCTYPE_RSA_ENV" href="ENCTYPE_RSA_ENV.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_RSA_ENV.html" title="ENCTYPE_RSA_ENV"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_SHA1_RSA_CMS.html" title="ENCTYPE_SHA1_RSA_CMS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_RSA_ES_OAEP_ENV">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-rsa-es-oaep-env">
-<span id="enctype-rsa-es-oaep-env-data"></span><h1>ENCTYPE_RSA_ES_OAEP_ENV<a class="headerlink" href="#enctype-rsa-es-oaep-env" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_RSA_ES_OAEP_ENV">
-<code class="descname">ENCTYPE_RSA_ES_OAEP_ENV</code><a class="headerlink" href="#ENCTYPE_RSA_ES_OAEP_ENV" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RSA w/OEAP encryption, CMS enveloped data.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_RSA_ES_OAEP_ENV</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x000e</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_RSA_ES_OAEP_ENV</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_RSA_ENV.html" title="ENCTYPE_RSA_ENV"
- >previous</a> |
- <a href="ENCTYPE_SHA1_RSA_CMS.html" title="ENCTYPE_SHA1_RSA_CMS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_RSA_ES_OAEP_ENV">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_SHA1_RSA_CMS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ENCTYPE_UNKNOWN" href="ENCTYPE_UNKNOWN.html" />
- <link rel="prev" title="ENCTYPE_RSA_ES_OAEP_ENV" href="ENCTYPE_RSA_ES_OAEP_ENV.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_RSA_ES_OAEP_ENV.html" title="ENCTYPE_RSA_ES_OAEP_ENV"
- accesskey="P">previous</a> |
- <a href="ENCTYPE_UNKNOWN.html" title="ENCTYPE_UNKNOWN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_SHA1_RSA_CMS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-sha1-rsa-cms">
-<span id="enctype-sha1-rsa-cms-data"></span><h1>ENCTYPE_SHA1_RSA_CMS<a class="headerlink" href="#enctype-sha1-rsa-cms" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_SHA1_RSA_CMS">
-<code class="descname">ENCTYPE_SHA1_RSA_CMS</code><a class="headerlink" href="#ENCTYPE_SHA1_RSA_CMS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>SHA1 with RSA, CMS signature.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_SHA1_RSA_CMS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x000b</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_SHA1_RSA_CMS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_RSA_ES_OAEP_ENV.html" title="ENCTYPE_RSA_ES_OAEP_ENV"
- >previous</a> |
- <a href="ENCTYPE_UNKNOWN.html" title="ENCTYPE_UNKNOWN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_SHA1_RSA_CMS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ENCTYPE_UNKNOWN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_ALLOW_POSTDATE" href="KDC_OPT_ALLOW_POSTDATE.html" />
- <link rel="prev" title="ENCTYPE_SHA1_RSA_CMS" href="ENCTYPE_SHA1_RSA_CMS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_SHA1_RSA_CMS.html" title="ENCTYPE_SHA1_RSA_CMS"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_ALLOW_POSTDATE.html" title="KDC_OPT_ALLOW_POSTDATE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_UNKNOWN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="enctype-unknown">
-<span id="enctype-unknown-data"></span><h1>ENCTYPE_UNKNOWN<a class="headerlink" href="#enctype-unknown" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="ENCTYPE_UNKNOWN">
-<code class="descname">ENCTYPE_UNKNOWN</code><a class="headerlink" href="#ENCTYPE_UNKNOWN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="50%" />
-<col width="50%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">ENCTYPE_UNKNOWN</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x01ff</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ENCTYPE_UNKNOWN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_SHA1_RSA_CMS.html" title="ENCTYPE_SHA1_RSA_CMS"
- >previous</a> |
- <a href="KDC_OPT_ALLOW_POSTDATE.html" title="KDC_OPT_ALLOW_POSTDATE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ENCTYPE_UNKNOWN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_ALLOW_POSTDATE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_CANONICALIZE" href="KDC_OPT_CANONICALIZE.html" />
- <link rel="prev" title="ENCTYPE_UNKNOWN" href="ENCTYPE_UNKNOWN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ENCTYPE_UNKNOWN.html" title="ENCTYPE_UNKNOWN"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_CANONICALIZE.html" title="KDC_OPT_CANONICALIZE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_ALLOW_POSTDATE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-allow-postdate">
-<span id="kdc-opt-allow-postdate-data"></span><h1>KDC_OPT_ALLOW_POSTDATE<a class="headerlink" href="#kdc-opt-allow-postdate" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_ALLOW_POSTDATE">
-<code class="descname">KDC_OPT_ALLOW_POSTDATE</code><a class="headerlink" href="#KDC_OPT_ALLOW_POSTDATE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_ALLOW_POSTDATE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x04000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_ALLOW_POSTDATE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ENCTYPE_UNKNOWN.html" title="ENCTYPE_UNKNOWN"
- >previous</a> |
- <a href="KDC_OPT_CANONICALIZE.html" title="KDC_OPT_CANONICALIZE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_ALLOW_POSTDATE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_CANONICALIZE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_CNAME_IN_ADDL_TKT" href="KDC_OPT_CNAME_IN_ADDL_TKT.html" />
- <link rel="prev" title="KDC_OPT_ALLOW_POSTDATE" href="KDC_OPT_ALLOW_POSTDATE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_ALLOW_POSTDATE.html" title="KDC_OPT_ALLOW_POSTDATE"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_CNAME_IN_ADDL_TKT.html" title="KDC_OPT_CNAME_IN_ADDL_TKT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_CANONICALIZE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-canonicalize">
-<span id="kdc-opt-canonicalize-data"></span><h1>KDC_OPT_CANONICALIZE<a class="headerlink" href="#kdc-opt-canonicalize" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_CANONICALIZE">
-<code class="descname">KDC_OPT_CANONICALIZE</code><a class="headerlink" href="#KDC_OPT_CANONICALIZE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_CANONICALIZE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00010000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_CANONICALIZE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_ALLOW_POSTDATE.html" title="KDC_OPT_ALLOW_POSTDATE"
- >previous</a> |
- <a href="KDC_OPT_CNAME_IN_ADDL_TKT.html" title="KDC_OPT_CNAME_IN_ADDL_TKT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_CANONICALIZE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_CNAME_IN_ADDL_TKT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_DISABLE_TRANSITED_CHECK" href="KDC_OPT_DISABLE_TRANSITED_CHECK.html" />
- <link rel="prev" title="KDC_OPT_CANONICALIZE" href="KDC_OPT_CANONICALIZE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_CANONICALIZE.html" title="KDC_OPT_CANONICALIZE"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_DISABLE_TRANSITED_CHECK.html" title="KDC_OPT_DISABLE_TRANSITED_CHECK"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_CNAME_IN_ADDL_TKT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-cname-in-addl-tkt">
-<span id="kdc-opt-cname-in-addl-tkt-data"></span><h1>KDC_OPT_CNAME_IN_ADDL_TKT<a class="headerlink" href="#kdc-opt-cname-in-addl-tkt" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_CNAME_IN_ADDL_TKT">
-<code class="descname">KDC_OPT_CNAME_IN_ADDL_TKT</code><a class="headerlink" href="#KDC_OPT_CNAME_IN_ADDL_TKT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_CNAME_IN_ADDL_TKT</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00020000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_CNAME_IN_ADDL_TKT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_CANONICALIZE.html" title="KDC_OPT_CANONICALIZE"
- >previous</a> |
- <a href="KDC_OPT_DISABLE_TRANSITED_CHECK.html" title="KDC_OPT_DISABLE_TRANSITED_CHECK"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_CNAME_IN_ADDL_TKT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_DISABLE_TRANSITED_CHECK — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_ENC_TKT_IN_SKEY" href="KDC_OPT_ENC_TKT_IN_SKEY.html" />
- <link rel="prev" title="KDC_OPT_CNAME_IN_ADDL_TKT" href="KDC_OPT_CNAME_IN_ADDL_TKT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_CNAME_IN_ADDL_TKT.html" title="KDC_OPT_CNAME_IN_ADDL_TKT"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_ENC_TKT_IN_SKEY.html" title="KDC_OPT_ENC_TKT_IN_SKEY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_DISABLE_TRANSITED_CHECK">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-disable-transited-check">
-<span id="kdc-opt-disable-transited-check-data"></span><h1>KDC_OPT_DISABLE_TRANSITED_CHECK<a class="headerlink" href="#kdc-opt-disable-transited-check" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_DISABLE_TRANSITED_CHECK">
-<code class="descname">KDC_OPT_DISABLE_TRANSITED_CHECK</code><a class="headerlink" href="#KDC_OPT_DISABLE_TRANSITED_CHECK" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_DISABLE_TRANSITED_CHECK</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000020</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_DISABLE_TRANSITED_CHECK</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_CNAME_IN_ADDL_TKT.html" title="KDC_OPT_CNAME_IN_ADDL_TKT"
- >previous</a> |
- <a href="KDC_OPT_ENC_TKT_IN_SKEY.html" title="KDC_OPT_ENC_TKT_IN_SKEY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_DISABLE_TRANSITED_CHECK">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_ENC_TKT_IN_SKEY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_FORWARDABLE" href="KDC_OPT_FORWARDABLE.html" />
- <link rel="prev" title="KDC_OPT_DISABLE_TRANSITED_CHECK" href="KDC_OPT_DISABLE_TRANSITED_CHECK.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_DISABLE_TRANSITED_CHECK.html" title="KDC_OPT_DISABLE_TRANSITED_CHECK"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_FORWARDABLE.html" title="KDC_OPT_FORWARDABLE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_ENC_TKT_IN_SKEY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-enc-tkt-in-skey">
-<span id="kdc-opt-enc-tkt-in-skey-data"></span><h1>KDC_OPT_ENC_TKT_IN_SKEY<a class="headerlink" href="#kdc-opt-enc-tkt-in-skey" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_ENC_TKT_IN_SKEY">
-<code class="descname">KDC_OPT_ENC_TKT_IN_SKEY</code><a class="headerlink" href="#KDC_OPT_ENC_TKT_IN_SKEY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_ENC_TKT_IN_SKEY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000008</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_ENC_TKT_IN_SKEY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_DISABLE_TRANSITED_CHECK.html" title="KDC_OPT_DISABLE_TRANSITED_CHECK"
- >previous</a> |
- <a href="KDC_OPT_FORWARDABLE.html" title="KDC_OPT_FORWARDABLE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_ENC_TKT_IN_SKEY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_FORWARDABLE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_FORWARDED" href="KDC_OPT_FORWARDED.html" />
- <link rel="prev" title="KDC_OPT_ENC_TKT_IN_SKEY" href="KDC_OPT_ENC_TKT_IN_SKEY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_ENC_TKT_IN_SKEY.html" title="KDC_OPT_ENC_TKT_IN_SKEY"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_FORWARDED.html" title="KDC_OPT_FORWARDED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_FORWARDABLE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-forwardable">
-<span id="kdc-opt-forwardable-data"></span><h1>KDC_OPT_FORWARDABLE<a class="headerlink" href="#kdc-opt-forwardable" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_FORWARDABLE">
-<code class="descname">KDC_OPT_FORWARDABLE</code><a class="headerlink" href="#KDC_OPT_FORWARDABLE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_FORWARDABLE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x40000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_FORWARDABLE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_ENC_TKT_IN_SKEY.html" title="KDC_OPT_ENC_TKT_IN_SKEY"
- >previous</a> |
- <a href="KDC_OPT_FORWARDED.html" title="KDC_OPT_FORWARDED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_FORWARDABLE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_FORWARDED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_POSTDATED" href="KDC_OPT_POSTDATED.html" />
- <link rel="prev" title="KDC_OPT_FORWARDABLE" href="KDC_OPT_FORWARDABLE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_FORWARDABLE.html" title="KDC_OPT_FORWARDABLE"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_POSTDATED.html" title="KDC_OPT_POSTDATED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_FORWARDED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-forwarded">
-<span id="kdc-opt-forwarded-data"></span><h1>KDC_OPT_FORWARDED<a class="headerlink" href="#kdc-opt-forwarded" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_FORWARDED">
-<code class="descname">KDC_OPT_FORWARDED</code><a class="headerlink" href="#KDC_OPT_FORWARDED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_FORWARDED</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x20000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_FORWARDED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_FORWARDABLE.html" title="KDC_OPT_FORWARDABLE"
- >previous</a> |
- <a href="KDC_OPT_POSTDATED.html" title="KDC_OPT_POSTDATED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_FORWARDED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_POSTDATED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_PROXIABLE" href="KDC_OPT_PROXIABLE.html" />
- <link rel="prev" title="KDC_OPT_FORWARDED" href="KDC_OPT_FORWARDED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_FORWARDED.html" title="KDC_OPT_FORWARDED"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_PROXIABLE.html" title="KDC_OPT_PROXIABLE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_POSTDATED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-postdated">
-<span id="kdc-opt-postdated-data"></span><h1>KDC_OPT_POSTDATED<a class="headerlink" href="#kdc-opt-postdated" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_POSTDATED">
-<code class="descname">KDC_OPT_POSTDATED</code><a class="headerlink" href="#KDC_OPT_POSTDATED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_POSTDATED</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x02000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_POSTDATED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_FORWARDED.html" title="KDC_OPT_FORWARDED"
- >previous</a> |
- <a href="KDC_OPT_PROXIABLE.html" title="KDC_OPT_PROXIABLE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_POSTDATED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_PROXIABLE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_PROXY" href="KDC_OPT_PROXY.html" />
- <link rel="prev" title="KDC_OPT_POSTDATED" href="KDC_OPT_POSTDATED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_POSTDATED.html" title="KDC_OPT_POSTDATED"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_PROXY.html" title="KDC_OPT_PROXY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_PROXIABLE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-proxiable">
-<span id="kdc-opt-proxiable-data"></span><h1>KDC_OPT_PROXIABLE<a class="headerlink" href="#kdc-opt-proxiable" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_PROXIABLE">
-<code class="descname">KDC_OPT_PROXIABLE</code><a class="headerlink" href="#KDC_OPT_PROXIABLE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_PROXIABLE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x10000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_PROXIABLE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_POSTDATED.html" title="KDC_OPT_POSTDATED"
- >previous</a> |
- <a href="KDC_OPT_PROXY.html" title="KDC_OPT_PROXY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_PROXIABLE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_PROXY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_RENEW" href="KDC_OPT_RENEW.html" />
- <link rel="prev" title="KDC_OPT_PROXIABLE" href="KDC_OPT_PROXIABLE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_PROXIABLE.html" title="KDC_OPT_PROXIABLE"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_RENEW.html" title="KDC_OPT_RENEW"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_PROXY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-proxy">
-<span id="kdc-opt-proxy-data"></span><h1>KDC_OPT_PROXY<a class="headerlink" href="#kdc-opt-proxy" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_PROXY">
-<code class="descname">KDC_OPT_PROXY</code><a class="headerlink" href="#KDC_OPT_PROXY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="48%" />
-<col width="52%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_PROXY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x08000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_PROXY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_PROXIABLE.html" title="KDC_OPT_PROXIABLE"
- >previous</a> |
- <a href="KDC_OPT_RENEW.html" title="KDC_OPT_RENEW"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_PROXY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_RENEW — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_RENEWABLE" href="KDC_OPT_RENEWABLE.html" />
- <link rel="prev" title="KDC_OPT_PROXY" href="KDC_OPT_PROXY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_PROXY.html" title="KDC_OPT_PROXY"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_RENEWABLE.html" title="KDC_OPT_RENEWABLE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_RENEW">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-renew">
-<span id="kdc-opt-renew-data"></span><h1>KDC_OPT_RENEW<a class="headerlink" href="#kdc-opt-renew" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_RENEW">
-<code class="descname">KDC_OPT_RENEW</code><a class="headerlink" href="#KDC_OPT_RENEW" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="48%" />
-<col width="52%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_RENEW</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_RENEW</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_PROXY.html" title="KDC_OPT_PROXY"
- >previous</a> |
- <a href="KDC_OPT_RENEWABLE.html" title="KDC_OPT_RENEWABLE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_RENEW">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_RENEWABLE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_RENEWABLE_OK" href="KDC_OPT_RENEWABLE_OK.html" />
- <link rel="prev" title="KDC_OPT_RENEW" href="KDC_OPT_RENEW.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_RENEW.html" title="KDC_OPT_RENEW"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_RENEWABLE_OK.html" title="KDC_OPT_RENEWABLE_OK"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_RENEWABLE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-renewable">
-<span id="kdc-opt-renewable-data"></span><h1>KDC_OPT_RENEWABLE<a class="headerlink" href="#kdc-opt-renewable" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_RENEWABLE">
-<code class="descname">KDC_OPT_RENEWABLE</code><a class="headerlink" href="#KDC_OPT_RENEWABLE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_RENEWABLE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00800000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_RENEWABLE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_RENEW.html" title="KDC_OPT_RENEW"
- >previous</a> |
- <a href="KDC_OPT_RENEWABLE_OK.html" title="KDC_OPT_RENEWABLE_OK"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_RENEWABLE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_RENEWABLE_OK — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_REQUEST_ANONYMOUS" href="KDC_OPT_REQUEST_ANONYMOUS.html" />
- <link rel="prev" title="KDC_OPT_RENEWABLE" href="KDC_OPT_RENEWABLE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_RENEWABLE.html" title="KDC_OPT_RENEWABLE"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_REQUEST_ANONYMOUS.html" title="KDC_OPT_REQUEST_ANONYMOUS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_RENEWABLE_OK">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-renewable-ok">
-<span id="kdc-opt-renewable-ok-data"></span><h1>KDC_OPT_RENEWABLE_OK<a class="headerlink" href="#kdc-opt-renewable-ok" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_RENEWABLE_OK">
-<code class="descname">KDC_OPT_RENEWABLE_OK</code><a class="headerlink" href="#KDC_OPT_RENEWABLE_OK" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_RENEWABLE_OK</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000010</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_RENEWABLE_OK</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_RENEWABLE.html" title="KDC_OPT_RENEWABLE"
- >previous</a> |
- <a href="KDC_OPT_REQUEST_ANONYMOUS.html" title="KDC_OPT_REQUEST_ANONYMOUS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_RENEWABLE_OK">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_REQUEST_ANONYMOUS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_OPT_VALIDATE" href="KDC_OPT_VALIDATE.html" />
- <link rel="prev" title="KDC_OPT_RENEWABLE_OK" href="KDC_OPT_RENEWABLE_OK.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_RENEWABLE_OK.html" title="KDC_OPT_RENEWABLE_OK"
- accesskey="P">previous</a> |
- <a href="KDC_OPT_VALIDATE.html" title="KDC_OPT_VALIDATE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_REQUEST_ANONYMOUS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-request-anonymous">
-<span id="kdc-opt-request-anonymous-data"></span><h1>KDC_OPT_REQUEST_ANONYMOUS<a class="headerlink" href="#kdc-opt-request-anonymous" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_REQUEST_ANONYMOUS">
-<code class="descname">KDC_OPT_REQUEST_ANONYMOUS</code><a class="headerlink" href="#KDC_OPT_REQUEST_ANONYMOUS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_REQUEST_ANONYMOUS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00008000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_REQUEST_ANONYMOUS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_RENEWABLE_OK.html" title="KDC_OPT_RENEWABLE_OK"
- >previous</a> |
- <a href="KDC_OPT_VALIDATE.html" title="KDC_OPT_VALIDATE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_REQUEST_ANONYMOUS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_OPT_VALIDATE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KDC_TKT_COMMON_MASK" href="KDC_TKT_COMMON_MASK.html" />
- <link rel="prev" title="KDC_OPT_REQUEST_ANONYMOUS" href="KDC_OPT_REQUEST_ANONYMOUS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_REQUEST_ANONYMOUS.html" title="KDC_OPT_REQUEST_ANONYMOUS"
- accesskey="P">previous</a> |
- <a href="KDC_TKT_COMMON_MASK.html" title="KDC_TKT_COMMON_MASK"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_VALIDATE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-opt-validate">
-<span id="kdc-opt-validate-data"></span><h1>KDC_OPT_VALIDATE<a class="headerlink" href="#kdc-opt-validate" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_OPT_VALIDATE">
-<code class="descname">KDC_OPT_VALIDATE</code><a class="headerlink" href="#KDC_OPT_VALIDATE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_OPT_VALIDATE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_OPT_VALIDATE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_REQUEST_ANONYMOUS.html" title="KDC_OPT_REQUEST_ANONYMOUS"
- >previous</a> |
- <a href="KDC_TKT_COMMON_MASK.html" title="KDC_TKT_COMMON_MASK"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_OPT_VALIDATE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC_TKT_COMMON_MASK — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE" href="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html" />
- <link rel="prev" title="KDC_OPT_VALIDATE" href="KDC_OPT_VALIDATE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_OPT_VALIDATE.html" title="KDC_OPT_VALIDATE"
- accesskey="P">previous</a> |
- <a href="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html" title="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_TKT_COMMON_MASK">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-tkt-common-mask">
-<span id="kdc-tkt-common-mask-data"></span><h1>KDC_TKT_COMMON_MASK<a class="headerlink" href="#kdc-tkt-common-mask" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KDC_TKT_COMMON_MASK">
-<code class="descname">KDC_TKT_COMMON_MASK</code><a class="headerlink" href="#KDC_TKT_COMMON_MASK" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KDC_TKT_COMMON_MASK</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x54800000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC_TKT_COMMON_MASK</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_OPT_VALIDATE.html" title="KDC_OPT_VALIDATE"
- >previous</a> |
- <a href="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html" title="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC_TKT_COMMON_MASK">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_ANONYMOUS_PRINCSTR" href="KRB5_ANONYMOUS_PRINCSTR.html" />
- <link rel="prev" title="KDC_TKT_COMMON_MASK" href="KDC_TKT_COMMON_MASK.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KDC_TKT_COMMON_MASK.html" title="KDC_TKT_COMMON_MASK"
- accesskey="P">previous</a> |
- <a href="KRB5_ANONYMOUS_PRINCSTR.html" title="KRB5_ANONYMOUS_PRINCSTR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-altauth-att-challenge-response">
-<span id="krb5-altauth-att-challenge-response-data"></span><h1>KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE<a class="headerlink" href="#krb5-altauth-att-challenge-response" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE">
-<code class="descname">KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE</code><a class="headerlink" href="#KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>alternate authentication types</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE</span></code></td>
-<td><code class="docutils literal"><span class="pre">64</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KDC_TKT_COMMON_MASK.html" title="KDC_TKT_COMMON_MASK"
- >previous</a> |
- <a href="KRB5_ANONYMOUS_PRINCSTR.html" title="KRB5_ANONYMOUS_PRINCSTR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_ANONYMOUS_PRINCSTR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_ANONYMOUS_REALMSTR" href="KRB5_ANONYMOUS_REALMSTR.html" />
- <link rel="prev" title="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE" href="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html" title="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE"
- accesskey="P">previous</a> |
- <a href="KRB5_ANONYMOUS_REALMSTR.html" title="KRB5_ANONYMOUS_REALMSTR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_ANONYMOUS_PRINCSTR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-anonymous-princstr">
-<span id="krb5-anonymous-princstr-data"></span><h1>KRB5_ANONYMOUS_PRINCSTR<a class="headerlink" href="#krb5-anonymous-princstr" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_ANONYMOUS_PRINCSTR">
-<code class="descname">KRB5_ANONYMOUS_PRINCSTR</code><a class="headerlink" href="#KRB5_ANONYMOUS_PRINCSTR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Anonymous principal name.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_ANONYMOUS_PRINCSTR</span></code></td>
-<td><code class="docutils literal"><span class="pre">"ANONYMOUS"</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_ANONYMOUS_PRINCSTR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html" title="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE"
- >previous</a> |
- <a href="KRB5_ANONYMOUS_REALMSTR.html" title="KRB5_ANONYMOUS_REALMSTR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_ANONYMOUS_PRINCSTR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_ANONYMOUS_REALMSTR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AP_REP" href="KRB5_AP_REP.html" />
- <link rel="prev" title="KRB5_ANONYMOUS_PRINCSTR" href="KRB5_ANONYMOUS_PRINCSTR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_ANONYMOUS_PRINCSTR.html" title="KRB5_ANONYMOUS_PRINCSTR"
- accesskey="P">previous</a> |
- <a href="KRB5_AP_REP.html" title="KRB5_AP_REP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_ANONYMOUS_REALMSTR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-anonymous-realmstr">
-<span id="krb5-anonymous-realmstr-data"></span><h1>KRB5_ANONYMOUS_REALMSTR<a class="headerlink" href="#krb5-anonymous-realmstr" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_ANONYMOUS_REALMSTR">
-<code class="descname">KRB5_ANONYMOUS_REALMSTR</code><a class="headerlink" href="#KRB5_ANONYMOUS_REALMSTR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Anonymous realm.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_ANONYMOUS_REALMSTR</span></code></td>
-<td><code class="docutils literal"><span class="pre">"WELLKNOWN:ANONYMOUS"</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_ANONYMOUS_REALMSTR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_ANONYMOUS_PRINCSTR.html" title="KRB5_ANONYMOUS_PRINCSTR"
- >previous</a> |
- <a href="KRB5_AP_REP.html" title="KRB5_AP_REP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_ANONYMOUS_REALMSTR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AP_REP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AP_REQ" href="KRB5_AP_REQ.html" />
- <link rel="prev" title="KRB5_ANONYMOUS_REALMSTR" href="KRB5_ANONYMOUS_REALMSTR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_ANONYMOUS_REALMSTR.html" title="KRB5_ANONYMOUS_REALMSTR"
- accesskey="P">previous</a> |
- <a href="KRB5_AP_REQ.html" title="KRB5_AP_REQ"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AP_REP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-ap-rep">
-<span id="krb5-ap-rep-data"></span><h1>KRB5_AP_REP<a class="headerlink" href="#krb5-ap-rep" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AP_REP">
-<code class="descname">KRB5_AP_REP</code><a class="headerlink" href="#KRB5_AP_REP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Response to mutual AP request.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="42%" />
-<col width="58%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AP_REP</span></code></td>
-<td><code class="docutils literal"><span class="pre">((krb5_msgtype)15)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AP_REP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_ANONYMOUS_REALMSTR.html" title="KRB5_ANONYMOUS_REALMSTR"
- >previous</a> |
- <a href="KRB5_AP_REQ.html" title="KRB5_AP_REQ"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AP_REP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AP_REQ — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AS_REP" href="KRB5_AS_REP.html" />
- <link rel="prev" title="KRB5_AP_REP" href="KRB5_AP_REP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AP_REP.html" title="KRB5_AP_REP"
- accesskey="P">previous</a> |
- <a href="KRB5_AS_REP.html" title="KRB5_AS_REP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AP_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-ap-req">
-<span id="krb5-ap-req-data"></span><h1>KRB5_AP_REQ<a class="headerlink" href="#krb5-ap-req" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AP_REQ">
-<code class="descname">KRB5_AP_REQ</code><a class="headerlink" href="#KRB5_AP_REQ" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Auth req to application server.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="42%" />
-<col width="58%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AP_REQ</span></code></td>
-<td><code class="docutils literal"><span class="pre">((krb5_msgtype)14)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AP_REQ</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AP_REP.html" title="KRB5_AP_REP"
- >previous</a> |
- <a href="KRB5_AS_REP.html" title="KRB5_AS_REP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AP_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AS_REP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AS_REQ" href="KRB5_AS_REQ.html" />
- <link rel="prev" title="KRB5_AP_REQ" href="KRB5_AP_REQ.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AP_REQ.html" title="KRB5_AP_REQ"
- accesskey="P">previous</a> |
- <a href="KRB5_AS_REQ.html" title="KRB5_AS_REQ"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AS_REP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-as-rep">
-<span id="krb5-as-rep-data"></span><h1>KRB5_AS_REP<a class="headerlink" href="#krb5-as-rep" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AS_REP">
-<code class="descname">KRB5_AS_REP</code><a class="headerlink" href="#KRB5_AS_REP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Response to AS request.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="42%" />
-<col width="58%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AS_REP</span></code></td>
-<td><code class="docutils literal"><span class="pre">((krb5_msgtype)11)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AS_REP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AP_REQ.html" title="KRB5_AP_REQ"
- >previous</a> |
- <a href="KRB5_AS_REQ.html" title="KRB5_AS_REQ"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AS_REP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AS_REQ — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_AND_OR" href="KRB5_AUTHDATA_AND_OR.html" />
- <link rel="prev" title="KRB5_AS_REP" href="KRB5_AS_REP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AS_REP.html" title="KRB5_AS_REP"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_AND_OR.html" title="KRB5_AUTHDATA_AND_OR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AS_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-as-req">
-<span id="krb5-as-req-data"></span><h1>KRB5_AS_REQ<a class="headerlink" href="#krb5-as-req" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AS_REQ">
-<code class="descname">KRB5_AS_REQ</code><a class="headerlink" href="#KRB5_AS_REQ" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Initial authentication request.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="42%" />
-<col width="58%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AS_REQ</span></code></td>
-<td><code class="docutils literal"><span class="pre">((krb5_msgtype)10)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AS_REQ</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AS_REP.html" title="KRB5_AS_REP"
- >previous</a> |
- <a href="KRB5_AUTHDATA_AND_OR.html" title="KRB5_AUTHDATA_AND_OR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AS_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_AND_OR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_AP_OPTIONS" href="KRB5_AUTHDATA_AP_OPTIONS.html" />
- <link rel="prev" title="KRB5_AS_REQ" href="KRB5_AS_REQ.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AS_REQ.html" title="KRB5_AS_REQ"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_AP_OPTIONS.html" title="KRB5_AUTHDATA_AP_OPTIONS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_AND_OR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-and-or">
-<span id="krb5-authdata-and-or-data"></span><h1>KRB5_AUTHDATA_AND_OR<a class="headerlink" href="#krb5-authdata-and-or" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_AND_OR">
-<code class="descname">KRB5_AUTHDATA_AND_OR</code><a class="headerlink" href="#KRB5_AUTHDATA_AND_OR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_AND_OR</span></code></td>
-<td><code class="docutils literal"><span class="pre">5</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_AND_OR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AS_REQ.html" title="KRB5_AS_REQ"
- >previous</a> |
- <a href="KRB5_AUTHDATA_AP_OPTIONS.html" title="KRB5_AUTHDATA_AP_OPTIONS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_AND_OR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_AP_OPTIONS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_AUTH_INDICATOR" href="KRB5_AUTHDATA_AUTH_INDICATOR.html" />
- <link rel="prev" title="KRB5_AUTHDATA_AND_OR" href="KRB5_AUTHDATA_AND_OR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_AND_OR.html" title="KRB5_AUTHDATA_AND_OR"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_AUTH_INDICATOR.html" title="KRB5_AUTHDATA_AUTH_INDICATOR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_AP_OPTIONS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-ap-options">
-<span id="krb5-authdata-ap-options-data"></span><h1>KRB5_AUTHDATA_AP_OPTIONS<a class="headerlink" href="#krb5-authdata-ap-options" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_AP_OPTIONS">
-<code class="descname">KRB5_AUTHDATA_AP_OPTIONS</code><a class="headerlink" href="#KRB5_AUTHDATA_AP_OPTIONS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_AP_OPTIONS</span></code></td>
-<td><code class="docutils literal"><span class="pre">143</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_AP_OPTIONS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_AND_OR.html" title="KRB5_AUTHDATA_AND_OR"
- >previous</a> |
- <a href="KRB5_AUTHDATA_AUTH_INDICATOR.html" title="KRB5_AUTHDATA_AUTH_INDICATOR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_AP_OPTIONS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_AUTH_INDICATOR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_CAMMAC" href="KRB5_AUTHDATA_CAMMAC.html" />
- <link rel="prev" title="KRB5_AUTHDATA_AP_OPTIONS" href="KRB5_AUTHDATA_AP_OPTIONS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_AP_OPTIONS.html" title="KRB5_AUTHDATA_AP_OPTIONS"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_CAMMAC.html" title="KRB5_AUTHDATA_CAMMAC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_AUTH_INDICATOR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-auth-indicator">
-<span id="krb5-authdata-auth-indicator-data"></span><h1>KRB5_AUTHDATA_AUTH_INDICATOR<a class="headerlink" href="#krb5-authdata-auth-indicator" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_AUTH_INDICATOR">
-<code class="descname">KRB5_AUTHDATA_AUTH_INDICATOR</code><a class="headerlink" href="#KRB5_AUTHDATA_AUTH_INDICATOR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_AUTH_INDICATOR</span></code></td>
-<td><code class="docutils literal"><span class="pre">97</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_AUTH_INDICATOR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_AP_OPTIONS.html" title="KRB5_AUTHDATA_AP_OPTIONS"
- >previous</a> |
- <a href="KRB5_AUTHDATA_CAMMAC.html" title="KRB5_AUTHDATA_CAMMAC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_AUTH_INDICATOR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_CAMMAC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_ETYPE_NEGOTIATION" href="KRB5_AUTHDATA_ETYPE_NEGOTIATION.html" />
- <link rel="prev" title="KRB5_AUTHDATA_AUTH_INDICATOR" href="KRB5_AUTHDATA_AUTH_INDICATOR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_AUTH_INDICATOR.html" title="KRB5_AUTHDATA_AUTH_INDICATOR"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_ETYPE_NEGOTIATION.html" title="KRB5_AUTHDATA_ETYPE_NEGOTIATION"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_CAMMAC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-cammac">
-<span id="krb5-authdata-cammac-data"></span><h1>KRB5_AUTHDATA_CAMMAC<a class="headerlink" href="#krb5-authdata-cammac" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_CAMMAC">
-<code class="descname">KRB5_AUTHDATA_CAMMAC</code><a class="headerlink" href="#KRB5_AUTHDATA_CAMMAC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_CAMMAC</span></code></td>
-<td><code class="docutils literal"><span class="pre">96</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_CAMMAC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_AUTH_INDICATOR.html" title="KRB5_AUTHDATA_AUTH_INDICATOR"
- >previous</a> |
- <a href="KRB5_AUTHDATA_ETYPE_NEGOTIATION.html" title="KRB5_AUTHDATA_ETYPE_NEGOTIATION"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_CAMMAC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_ETYPE_NEGOTIATION — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_FX_ARMOR" href="KRB5_AUTHDATA_FX_ARMOR.html" />
- <link rel="prev" title="KRB5_AUTHDATA_CAMMAC" href="KRB5_AUTHDATA_CAMMAC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_CAMMAC.html" title="KRB5_AUTHDATA_CAMMAC"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_FX_ARMOR.html" title="KRB5_AUTHDATA_FX_ARMOR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_ETYPE_NEGOTIATION">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-etype-negotiation">
-<span id="krb5-authdata-etype-negotiation-data"></span><h1>KRB5_AUTHDATA_ETYPE_NEGOTIATION<a class="headerlink" href="#krb5-authdata-etype-negotiation" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_ETYPE_NEGOTIATION">
-<code class="descname">KRB5_AUTHDATA_ETYPE_NEGOTIATION</code><a class="headerlink" href="#KRB5_AUTHDATA_ETYPE_NEGOTIATION" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 4537.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_ETYPE_NEGOTIATION</span></code></td>
-<td><code class="docutils literal"><span class="pre">129</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_ETYPE_NEGOTIATION</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_CAMMAC.html" title="KRB5_AUTHDATA_CAMMAC"
- >previous</a> |
- <a href="KRB5_AUTHDATA_FX_ARMOR.html" title="KRB5_AUTHDATA_FX_ARMOR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_ETYPE_NEGOTIATION">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_FX_ARMOR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_IF_RELEVANT" href="KRB5_AUTHDATA_IF_RELEVANT.html" />
- <link rel="prev" title="KRB5_AUTHDATA_ETYPE_NEGOTIATION" href="KRB5_AUTHDATA_ETYPE_NEGOTIATION.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_ETYPE_NEGOTIATION.html" title="KRB5_AUTHDATA_ETYPE_NEGOTIATION"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_IF_RELEVANT.html" title="KRB5_AUTHDATA_IF_RELEVANT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_FX_ARMOR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-fx-armor">
-<span id="krb5-authdata-fx-armor-data"></span><h1>KRB5_AUTHDATA_FX_ARMOR<a class="headerlink" href="#krb5-authdata-fx-armor" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_FX_ARMOR">
-<code class="descname">KRB5_AUTHDATA_FX_ARMOR</code><a class="headerlink" href="#KRB5_AUTHDATA_FX_ARMOR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_FX_ARMOR</span></code></td>
-<td><code class="docutils literal"><span class="pre">71</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_FX_ARMOR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_ETYPE_NEGOTIATION.html" title="KRB5_AUTHDATA_ETYPE_NEGOTIATION"
- >previous</a> |
- <a href="KRB5_AUTHDATA_IF_RELEVANT.html" title="KRB5_AUTHDATA_IF_RELEVANT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_FX_ARMOR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_IF_RELEVANT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS" href="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html" />
- <link rel="prev" title="KRB5_AUTHDATA_FX_ARMOR" href="KRB5_AUTHDATA_FX_ARMOR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_FX_ARMOR.html" title="KRB5_AUTHDATA_FX_ARMOR"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html" title="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_IF_RELEVANT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-if-relevant">
-<span id="krb5-authdata-if-relevant-data"></span><h1>KRB5_AUTHDATA_IF_RELEVANT<a class="headerlink" href="#krb5-authdata-if-relevant" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_IF_RELEVANT">
-<code class="descname">KRB5_AUTHDATA_IF_RELEVANT</code><a class="headerlink" href="#KRB5_AUTHDATA_IF_RELEVANT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_IF_RELEVANT</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_IF_RELEVANT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_FX_ARMOR.html" title="KRB5_AUTHDATA_FX_ARMOR"
- >previous</a> |
- <a href="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html" title="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_IF_RELEVANT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_INITIAL_VERIFIED_CAS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_KDC_ISSUED" href="KRB5_AUTHDATA_KDC_ISSUED.html" />
- <link rel="prev" title="KRB5_AUTHDATA_IF_RELEVANT" href="KRB5_AUTHDATA_IF_RELEVANT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_IF_RELEVANT.html" title="KRB5_AUTHDATA_IF_RELEVANT"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_KDC_ISSUED.html" title="KRB5_AUTHDATA_KDC_ISSUED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_INITIAL_VERIFIED_CAS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-initial-verified-cas">
-<span id="krb5-authdata-initial-verified-cas-data"></span><h1>KRB5_AUTHDATA_INITIAL_VERIFIED_CAS<a class="headerlink" href="#krb5-authdata-initial-verified-cas" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS">
-<code class="descname">KRB5_AUTHDATA_INITIAL_VERIFIED_CAS</code><a class="headerlink" href="#KRB5_AUTHDATA_INITIAL_VERIFIED_CAS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_INITIAL_VERIFIED_CAS</span></code></td>
-<td><code class="docutils literal"><span class="pre">9</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_INITIAL_VERIFIED_CAS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_IF_RELEVANT.html" title="KRB5_AUTHDATA_IF_RELEVANT"
- >previous</a> |
- <a href="KRB5_AUTHDATA_KDC_ISSUED.html" title="KRB5_AUTHDATA_KDC_ISSUED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_INITIAL_VERIFIED_CAS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_KDC_ISSUED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_MANDATORY_FOR_KDC" href="KRB5_AUTHDATA_MANDATORY_FOR_KDC.html" />
- <link rel="prev" title="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS" href="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html" title="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_MANDATORY_FOR_KDC.html" title="KRB5_AUTHDATA_MANDATORY_FOR_KDC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_KDC_ISSUED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-kdc-issued">
-<span id="krb5-authdata-kdc-issued-data"></span><h1>KRB5_AUTHDATA_KDC_ISSUED<a class="headerlink" href="#krb5-authdata-kdc-issued" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_KDC_ISSUED">
-<code class="descname">KRB5_AUTHDATA_KDC_ISSUED</code><a class="headerlink" href="#KRB5_AUTHDATA_KDC_ISSUED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_KDC_ISSUED</span></code></td>
-<td><code class="docutils literal"><span class="pre">4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_KDC_ISSUED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html" title="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS"
- >previous</a> |
- <a href="KRB5_AUTHDATA_MANDATORY_FOR_KDC.html" title="KRB5_AUTHDATA_MANDATORY_FOR_KDC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_KDC_ISSUED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_MANDATORY_FOR_KDC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_OSF_DCE" href="KRB5_AUTHDATA_OSF_DCE.html" />
- <link rel="prev" title="KRB5_AUTHDATA_KDC_ISSUED" href="KRB5_AUTHDATA_KDC_ISSUED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_KDC_ISSUED.html" title="KRB5_AUTHDATA_KDC_ISSUED"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_OSF_DCE.html" title="KRB5_AUTHDATA_OSF_DCE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_MANDATORY_FOR_KDC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-mandatory-for-kdc">
-<span id="krb5-authdata-mandatory-for-kdc-data"></span><h1>KRB5_AUTHDATA_MANDATORY_FOR_KDC<a class="headerlink" href="#krb5-authdata-mandatory-for-kdc" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_MANDATORY_FOR_KDC">
-<code class="descname">KRB5_AUTHDATA_MANDATORY_FOR_KDC</code><a class="headerlink" href="#KRB5_AUTHDATA_MANDATORY_FOR_KDC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_MANDATORY_FOR_KDC</span></code></td>
-<td><code class="docutils literal"><span class="pre">8</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_MANDATORY_FOR_KDC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_KDC_ISSUED.html" title="KRB5_AUTHDATA_KDC_ISSUED"
- >previous</a> |
- <a href="KRB5_AUTHDATA_OSF_DCE.html" title="KRB5_AUTHDATA_OSF_DCE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_MANDATORY_FOR_KDC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_OSF_DCE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_SESAME" href="KRB5_AUTHDATA_SESAME.html" />
- <link rel="prev" title="KRB5_AUTHDATA_MANDATORY_FOR_KDC" href="KRB5_AUTHDATA_MANDATORY_FOR_KDC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_MANDATORY_FOR_KDC.html" title="KRB5_AUTHDATA_MANDATORY_FOR_KDC"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_SESAME.html" title="KRB5_AUTHDATA_SESAME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_OSF_DCE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-osf-dce">
-<span id="krb5-authdata-osf-dce-data"></span><h1>KRB5_AUTHDATA_OSF_DCE<a class="headerlink" href="#krb5-authdata-osf-dce" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_OSF_DCE">
-<code class="descname">KRB5_AUTHDATA_OSF_DCE</code><a class="headerlink" href="#KRB5_AUTHDATA_OSF_DCE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_OSF_DCE</span></code></td>
-<td><code class="docutils literal"><span class="pre">64</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_OSF_DCE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_MANDATORY_FOR_KDC.html" title="KRB5_AUTHDATA_MANDATORY_FOR_KDC"
- >previous</a> |
- <a href="KRB5_AUTHDATA_SESAME.html" title="KRB5_AUTHDATA_SESAME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_OSF_DCE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_SESAME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_SIGNTICKET" href="KRB5_AUTHDATA_SIGNTICKET.html" />
- <link rel="prev" title="KRB5_AUTHDATA_OSF_DCE" href="KRB5_AUTHDATA_OSF_DCE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_OSF_DCE.html" title="KRB5_AUTHDATA_OSF_DCE"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_SIGNTICKET.html" title="KRB5_AUTHDATA_SIGNTICKET"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_SESAME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-sesame">
-<span id="krb5-authdata-sesame-data"></span><h1>KRB5_AUTHDATA_SESAME<a class="headerlink" href="#krb5-authdata-sesame" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_SESAME">
-<code class="descname">KRB5_AUTHDATA_SESAME</code><a class="headerlink" href="#KRB5_AUTHDATA_SESAME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_SESAME</span></code></td>
-<td><code class="docutils literal"><span class="pre">65</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_SESAME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_OSF_DCE.html" title="KRB5_AUTHDATA_OSF_DCE"
- >previous</a> |
- <a href="KRB5_AUTHDATA_SIGNTICKET.html" title="KRB5_AUTHDATA_SIGNTICKET"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_SESAME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_SIGNTICKET — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTHDATA_WIN2K_PAC" href="KRB5_AUTHDATA_WIN2K_PAC.html" />
- <link rel="prev" title="KRB5_AUTHDATA_SESAME" href="KRB5_AUTHDATA_SESAME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_SESAME.html" title="KRB5_AUTHDATA_SESAME"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTHDATA_WIN2K_PAC.html" title="KRB5_AUTHDATA_WIN2K_PAC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_SIGNTICKET">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-signticket">
-<span id="krb5-authdata-signticket-data"></span><h1>KRB5_AUTHDATA_SIGNTICKET<a class="headerlink" href="#krb5-authdata-signticket" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_SIGNTICKET">
-<code class="descname">KRB5_AUTHDATA_SIGNTICKET</code><a class="headerlink" href="#KRB5_AUTHDATA_SIGNTICKET" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_SIGNTICKET</span></code></td>
-<td><code class="docutils literal"><span class="pre">512</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_SIGNTICKET</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_SESAME.html" title="KRB5_AUTHDATA_SESAME"
- >previous</a> |
- <a href="KRB5_AUTHDATA_WIN2K_PAC.html" title="KRB5_AUTHDATA_WIN2K_PAC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_SIGNTICKET">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTHDATA_WIN2K_PAC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE" href="KRB5_AUTH_CONTEXT_DO_SEQUENCE.html" />
- <link rel="prev" title="KRB5_AUTHDATA_SIGNTICKET" href="KRB5_AUTHDATA_SIGNTICKET.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_SIGNTICKET.html" title="KRB5_AUTHDATA_SIGNTICKET"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTH_CONTEXT_DO_SEQUENCE.html" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_WIN2K_PAC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata-win2k-pac">
-<span id="krb5-authdata-win2k-pac-data"></span><h1>KRB5_AUTHDATA_WIN2K_PAC<a class="headerlink" href="#krb5-authdata-win2k-pac" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTHDATA_WIN2K_PAC">
-<code class="descname">KRB5_AUTHDATA_WIN2K_PAC</code><a class="headerlink" href="#KRB5_AUTHDATA_WIN2K_PAC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTHDATA_WIN2K_PAC</span></code></td>
-<td><code class="docutils literal"><span class="pre">128</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTHDATA_WIN2K_PAC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_SIGNTICKET.html" title="KRB5_AUTHDATA_SIGNTICKET"
- >previous</a> |
- <a href="KRB5_AUTH_CONTEXT_DO_SEQUENCE.html" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTHDATA_WIN2K_PAC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTH_CONTEXT_DO_SEQUENCE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTH_CONTEXT_DO_TIME" href="KRB5_AUTH_CONTEXT_DO_TIME.html" />
- <link rel="prev" title="KRB5_AUTHDATA_WIN2K_PAC" href="KRB5_AUTHDATA_WIN2K_PAC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTHDATA_WIN2K_PAC.html" title="KRB5_AUTHDATA_WIN2K_PAC"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTH_CONTEXT_DO_TIME.html" title="KRB5_AUTH_CONTEXT_DO_TIME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_DO_SEQUENCE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context-do-sequence">
-<span id="krb5-auth-context-do-sequence-data"></span><h1>KRB5_AUTH_CONTEXT_DO_SEQUENCE<a class="headerlink" href="#krb5-auth-context-do-sequence" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTH_CONTEXT_DO_SEQUENCE">
-<code class="descname">KRB5_AUTH_CONTEXT_DO_SEQUENCE</code><a class="headerlink" href="#KRB5_AUTH_CONTEXT_DO_SEQUENCE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Prevent replays with sequence numbers.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_SEQUENCE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000004</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTH_CONTEXT_DO_SEQUENCE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTHDATA_WIN2K_PAC.html" title="KRB5_AUTHDATA_WIN2K_PAC"
- >previous</a> |
- <a href="KRB5_AUTH_CONTEXT_DO_TIME.html" title="KRB5_AUTH_CONTEXT_DO_TIME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_DO_SEQUENCE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTH_CONTEXT_DO_TIME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR" href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html" />
- <link rel="prev" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE" href="KRB5_AUTH_CONTEXT_DO_SEQUENCE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_DO_SEQUENCE.html" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_DO_TIME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context-do-time">
-<span id="krb5-auth-context-do-time-data"></span><h1>KRB5_AUTH_CONTEXT_DO_TIME<a class="headerlink" href="#krb5-auth-context-do-time" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTH_CONTEXT_DO_TIME">
-<code class="descname">KRB5_AUTH_CONTEXT_DO_TIME</code><a class="headerlink" href="#KRB5_AUTH_CONTEXT_DO_TIME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Prevent replays with timestamps and replay cache.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_DO_TIME</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTH_CONTEXT_DO_TIME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_DO_SEQUENCE.html" title="KRB5_AUTH_CONTEXT_DO_SEQUENCE"
- >previous</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_DO_TIME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR" href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html" />
- <link rel="prev" title="KRB5_AUTH_CONTEXT_DO_TIME" href="KRB5_AUTH_CONTEXT_DO_TIME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_DO_TIME.html" title="KRB5_AUTH_CONTEXT_DO_TIME"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context-generate-local-addr">
-<span id="krb5-auth-context-generate-local-addr-data"></span><h1>KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR<a class="headerlink" href="#krb5-auth-context-generate-local-addr" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR">
-<code class="descname">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR</code><a class="headerlink" href="#KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Generate the local network address.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="67%" />
-<col width="33%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_DO_TIME.html" title="KRB5_AUTH_CONTEXT_DO_TIME"
- >previous</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR" href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html" />
- <link rel="prev" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR" href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context-generate-local-full-addr">
-<span id="krb5-auth-context-generate-local-full-addr-data"></span><h1>KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR<a class="headerlink" href="#krb5-auth-context-generate-local-full-addr" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR">
-<code class="descname">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR</code><a class="headerlink" href="#KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Generate the local network address and the local port.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="69%" />
-<col width="31%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000004</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR"
- >previous</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR" href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html" />
- <link rel="prev" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR" href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context-generate-remote-addr">
-<span id="krb5-auth-context-generate-remote-addr-data"></span><h1>KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR<a class="headerlink" href="#krb5-auth-context-generate-remote-addr" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR">
-<code class="descname">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR</code><a class="headerlink" href="#KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Generate the remote network address.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="67%" />
-<col width="33%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR"
- >previous</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTH_CONTEXT_PERMIT_ALL" href="KRB5_AUTH_CONTEXT_PERMIT_ALL.html" />
- <link rel="prev" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR" href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTH_CONTEXT_PERMIT_ALL.html" title="KRB5_AUTH_CONTEXT_PERMIT_ALL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context-generate-remote-full-addr">
-<span id="krb5-auth-context-generate-remote-full-addr-data"></span><h1>KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR<a class="headerlink" href="#krb5-auth-context-generate-remote-full-addr" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR">
-<code class="descname">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR</code><a class="headerlink" href="#KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Generate the remote network address and the remote port.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="69%" />
-<col width="31%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000008</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR"
- >previous</a> |
- <a href="KRB5_AUTH_CONTEXT_PERMIT_ALL.html" title="KRB5_AUTH_CONTEXT_PERMIT_ALL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTH_CONTEXT_PERMIT_ALL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE" href="KRB5_AUTH_CONTEXT_RET_SEQUENCE.html" />
- <link rel="prev" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR" href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTH_CONTEXT_RET_SEQUENCE.html" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_PERMIT_ALL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context-permit-all">
-<span id="krb5-auth-context-permit-all-data"></span><h1>KRB5_AUTH_CONTEXT_PERMIT_ALL<a class="headerlink" href="#krb5-auth-context-permit-all" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTH_CONTEXT_PERMIT_ALL">
-<code class="descname">KRB5_AUTH_CONTEXT_PERMIT_ALL</code><a class="headerlink" href="#KRB5_AUTH_CONTEXT_PERMIT_ALL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_PERMIT_ALL</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000010</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTH_CONTEXT_PERMIT_ALL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html" title="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR"
- >previous</a> |
- <a href="KRB5_AUTH_CONTEXT_RET_SEQUENCE.html" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_PERMIT_ALL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTH_CONTEXT_RET_SEQUENCE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTH_CONTEXT_RET_TIME" href="KRB5_AUTH_CONTEXT_RET_TIME.html" />
- <link rel="prev" title="KRB5_AUTH_CONTEXT_PERMIT_ALL" href="KRB5_AUTH_CONTEXT_PERMIT_ALL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_PERMIT_ALL.html" title="KRB5_AUTH_CONTEXT_PERMIT_ALL"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTH_CONTEXT_RET_TIME.html" title="KRB5_AUTH_CONTEXT_RET_TIME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_RET_SEQUENCE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context-ret-sequence">
-<span id="krb5-auth-context-ret-sequence-data"></span><h1>KRB5_AUTH_CONTEXT_RET_SEQUENCE<a class="headerlink" href="#krb5-auth-context-ret-sequence" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTH_CONTEXT_RET_SEQUENCE">
-<code class="descname">KRB5_AUTH_CONTEXT_RET_SEQUENCE</code><a class="headerlink" href="#KRB5_AUTH_CONTEXT_RET_SEQUENCE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Save sequence numbers for application.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_SEQUENCE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000008</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTH_CONTEXT_RET_SEQUENCE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_PERMIT_ALL.html" title="KRB5_AUTH_CONTEXT_PERMIT_ALL"
- >previous</a> |
- <a href="KRB5_AUTH_CONTEXT_RET_TIME.html" title="KRB5_AUTH_CONTEXT_RET_TIME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_RET_SEQUENCE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTH_CONTEXT_RET_TIME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_AUTH_CONTEXT_USE_SUBKEY" href="KRB5_AUTH_CONTEXT_USE_SUBKEY.html" />
- <link rel="prev" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE" href="KRB5_AUTH_CONTEXT_RET_SEQUENCE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_RET_SEQUENCE.html" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"
- accesskey="P">previous</a> |
- <a href="KRB5_AUTH_CONTEXT_USE_SUBKEY.html" title="KRB5_AUTH_CONTEXT_USE_SUBKEY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_RET_TIME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context-ret-time">
-<span id="krb5-auth-context-ret-time-data"></span><h1>KRB5_AUTH_CONTEXT_RET_TIME<a class="headerlink" href="#krb5-auth-context-ret-time" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTH_CONTEXT_RET_TIME">
-<code class="descname">KRB5_AUTH_CONTEXT_RET_TIME</code><a class="headerlink" href="#KRB5_AUTH_CONTEXT_RET_TIME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Save timestamps for application.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_RET_TIME</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTH_CONTEXT_RET_TIME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_RET_SEQUENCE.html" title="KRB5_AUTH_CONTEXT_RET_SEQUENCE"
- >previous</a> |
- <a href="KRB5_AUTH_CONTEXT_USE_SUBKEY.html" title="KRB5_AUTH_CONTEXT_USE_SUBKEY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_RET_TIME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_AUTH_CONTEXT_USE_SUBKEY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_CRED" href="KRB5_CRED.html" />
- <link rel="prev" title="KRB5_AUTH_CONTEXT_RET_TIME" href="KRB5_AUTH_CONTEXT_RET_TIME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_RET_TIME.html" title="KRB5_AUTH_CONTEXT_RET_TIME"
- accesskey="P">previous</a> |
- <a href="KRB5_CRED.html" title="KRB5_CRED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_USE_SUBKEY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context-use-subkey">
-<span id="krb5-auth-context-use-subkey-data"></span><h1>KRB5_AUTH_CONTEXT_USE_SUBKEY<a class="headerlink" href="#krb5-auth-context-use-subkey" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_AUTH_CONTEXT_USE_SUBKEY">
-<code class="descname">KRB5_AUTH_CONTEXT_USE_SUBKEY</code><a class="headerlink" href="#KRB5_AUTH_CONTEXT_USE_SUBKEY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_AUTH_CONTEXT_USE_SUBKEY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000020</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_AUTH_CONTEXT_USE_SUBKEY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_RET_TIME.html" title="KRB5_AUTH_CONTEXT_RET_TIME"
- >previous</a> |
- <a href="KRB5_CRED.html" title="KRB5_CRED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_AUTH_CONTEXT_USE_SUBKEY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_CRED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_CRYPTO_TYPE_CHECKSUM" href="KRB5_CRYPTO_TYPE_CHECKSUM.html" />
- <link rel="prev" title="KRB5_AUTH_CONTEXT_USE_SUBKEY" href="KRB5_AUTH_CONTEXT_USE_SUBKEY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_USE_SUBKEY.html" title="KRB5_AUTH_CONTEXT_USE_SUBKEY"
- accesskey="P">previous</a> |
- <a href="KRB5_CRYPTO_TYPE_CHECKSUM.html" title="KRB5_CRYPTO_TYPE_CHECKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cred">
-<span id="krb5-cred-data"></span><h1>KRB5_CRED<a class="headerlink" href="#krb5-cred" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_CRED">
-<code class="descname">KRB5_CRED</code><a class="headerlink" href="#KRB5_CRED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Cred forwarding message.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="39%" />
-<col width="61%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_CRED</span></code></td>
-<td><code class="docutils literal"><span class="pre">((krb5_msgtype)22)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_CRED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_AUTH_CONTEXT_USE_SUBKEY.html" title="KRB5_AUTH_CONTEXT_USE_SUBKEY"
- >previous</a> |
- <a href="KRB5_CRYPTO_TYPE_CHECKSUM.html" title="KRB5_CRYPTO_TYPE_CHECKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_CRYPTO_TYPE_CHECKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_CRYPTO_TYPE_DATA" href="KRB5_CRYPTO_TYPE_DATA.html" />
- <link rel="prev" title="KRB5_CRED" href="KRB5_CRED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_CRED.html" title="KRB5_CRED"
- accesskey="P">previous</a> |
- <a href="KRB5_CRYPTO_TYPE_DATA.html" title="KRB5_CRYPTO_TYPE_DATA"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_CHECKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-crypto-type-checksum">
-<span id="krb5-crypto-type-checksum-data"></span><h1>KRB5_CRYPTO_TYPE_CHECKSUM<a class="headerlink" href="#krb5-crypto-type-checksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_CRYPTO_TYPE_CHECKSUM">
-<code class="descname">KRB5_CRYPTO_TYPE_CHECKSUM</code><a class="headerlink" href="#KRB5_CRYPTO_TYPE_CHECKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>[out] checksum for MIC</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_CHECKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">6</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_CRYPTO_TYPE_CHECKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_CRED.html" title="KRB5_CRED"
- >previous</a> |
- <a href="KRB5_CRYPTO_TYPE_DATA.html" title="KRB5_CRYPTO_TYPE_DATA"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_CHECKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_CRYPTO_TYPE_DATA — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_CRYPTO_TYPE_EMPTY" href="KRB5_CRYPTO_TYPE_EMPTY.html" />
- <link rel="prev" title="KRB5_CRYPTO_TYPE_CHECKSUM" href="KRB5_CRYPTO_TYPE_CHECKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_CHECKSUM.html" title="KRB5_CRYPTO_TYPE_CHECKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_CRYPTO_TYPE_EMPTY.html" title="KRB5_CRYPTO_TYPE_EMPTY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_DATA">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-crypto-type-data">
-<span id="krb5-crypto-type-data-data"></span><h1>KRB5_CRYPTO_TYPE_DATA<a class="headerlink" href="#krb5-crypto-type-data" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_CRYPTO_TYPE_DATA">
-<code class="descname">KRB5_CRYPTO_TYPE_DATA</code><a class="headerlink" href="#KRB5_CRYPTO_TYPE_DATA" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>[in, out] plaintext</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_DATA</span></code></td>
-<td><code class="docutils literal"><span class="pre">2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_CRYPTO_TYPE_DATA</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_CHECKSUM.html" title="KRB5_CRYPTO_TYPE_CHECKSUM"
- >previous</a> |
- <a href="KRB5_CRYPTO_TYPE_EMPTY.html" title="KRB5_CRYPTO_TYPE_EMPTY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_DATA">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_CRYPTO_TYPE_EMPTY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_CRYPTO_TYPE_HEADER" href="KRB5_CRYPTO_TYPE_HEADER.html" />
- <link rel="prev" title="KRB5_CRYPTO_TYPE_DATA" href="KRB5_CRYPTO_TYPE_DATA.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_DATA.html" title="KRB5_CRYPTO_TYPE_DATA"
- accesskey="P">previous</a> |
- <a href="KRB5_CRYPTO_TYPE_HEADER.html" title="KRB5_CRYPTO_TYPE_HEADER"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_EMPTY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-crypto-type-empty">
-<span id="krb5-crypto-type-empty-data"></span><h1>KRB5_CRYPTO_TYPE_EMPTY<a class="headerlink" href="#krb5-crypto-type-empty" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_CRYPTO_TYPE_EMPTY">
-<code class="descname">KRB5_CRYPTO_TYPE_EMPTY</code><a class="headerlink" href="#KRB5_CRYPTO_TYPE_EMPTY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>[in] ignored</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_EMPTY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_CRYPTO_TYPE_EMPTY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_DATA.html" title="KRB5_CRYPTO_TYPE_DATA"
- >previous</a> |
- <a href="KRB5_CRYPTO_TYPE_HEADER.html" title="KRB5_CRYPTO_TYPE_HEADER"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_EMPTY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_CRYPTO_TYPE_HEADER — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_CRYPTO_TYPE_PADDING" href="KRB5_CRYPTO_TYPE_PADDING.html" />
- <link rel="prev" title="KRB5_CRYPTO_TYPE_EMPTY" href="KRB5_CRYPTO_TYPE_EMPTY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_EMPTY.html" title="KRB5_CRYPTO_TYPE_EMPTY"
- accesskey="P">previous</a> |
- <a href="KRB5_CRYPTO_TYPE_PADDING.html" title="KRB5_CRYPTO_TYPE_PADDING"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_HEADER">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-crypto-type-header">
-<span id="krb5-crypto-type-header-data"></span><h1>KRB5_CRYPTO_TYPE_HEADER<a class="headerlink" href="#krb5-crypto-type-header" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_CRYPTO_TYPE_HEADER">
-<code class="descname">KRB5_CRYPTO_TYPE_HEADER</code><a class="headerlink" href="#KRB5_CRYPTO_TYPE_HEADER" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>[out] header</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_HEADER</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_CRYPTO_TYPE_HEADER</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_EMPTY.html" title="KRB5_CRYPTO_TYPE_EMPTY"
- >previous</a> |
- <a href="KRB5_CRYPTO_TYPE_PADDING.html" title="KRB5_CRYPTO_TYPE_PADDING"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_HEADER">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_CRYPTO_TYPE_PADDING — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_CRYPTO_TYPE_SIGN_ONLY" href="KRB5_CRYPTO_TYPE_SIGN_ONLY.html" />
- <link rel="prev" title="KRB5_CRYPTO_TYPE_HEADER" href="KRB5_CRYPTO_TYPE_HEADER.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_HEADER.html" title="KRB5_CRYPTO_TYPE_HEADER"
- accesskey="P">previous</a> |
- <a href="KRB5_CRYPTO_TYPE_SIGN_ONLY.html" title="KRB5_CRYPTO_TYPE_SIGN_ONLY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_PADDING">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-crypto-type-padding">
-<span id="krb5-crypto-type-padding-data"></span><h1>KRB5_CRYPTO_TYPE_PADDING<a class="headerlink" href="#krb5-crypto-type-padding" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_CRYPTO_TYPE_PADDING">
-<code class="descname">KRB5_CRYPTO_TYPE_PADDING</code><a class="headerlink" href="#KRB5_CRYPTO_TYPE_PADDING" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>[out] padding</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_PADDING</span></code></td>
-<td><code class="docutils literal"><span class="pre">4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_CRYPTO_TYPE_PADDING</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_HEADER.html" title="KRB5_CRYPTO_TYPE_HEADER"
- >previous</a> |
- <a href="KRB5_CRYPTO_TYPE_SIGN_ONLY.html" title="KRB5_CRYPTO_TYPE_SIGN_ONLY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_PADDING">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_CRYPTO_TYPE_SIGN_ONLY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_CRYPTO_TYPE_STREAM" href="KRB5_CRYPTO_TYPE_STREAM.html" />
- <link rel="prev" title="KRB5_CRYPTO_TYPE_PADDING" href="KRB5_CRYPTO_TYPE_PADDING.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_PADDING.html" title="KRB5_CRYPTO_TYPE_PADDING"
- accesskey="P">previous</a> |
- <a href="KRB5_CRYPTO_TYPE_STREAM.html" title="KRB5_CRYPTO_TYPE_STREAM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_SIGN_ONLY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-crypto-type-sign-only">
-<span id="krb5-crypto-type-sign-only-data"></span><h1>KRB5_CRYPTO_TYPE_SIGN_ONLY<a class="headerlink" href="#krb5-crypto-type-sign-only" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_CRYPTO_TYPE_SIGN_ONLY">
-<code class="descname">KRB5_CRYPTO_TYPE_SIGN_ONLY</code><a class="headerlink" href="#KRB5_CRYPTO_TYPE_SIGN_ONLY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>[in] associated data</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_SIGN_ONLY</span></code></td>
-<td><code class="docutils literal"><span class="pre">3</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_CRYPTO_TYPE_SIGN_ONLY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_PADDING.html" title="KRB5_CRYPTO_TYPE_PADDING"
- >previous</a> |
- <a href="KRB5_CRYPTO_TYPE_STREAM.html" title="KRB5_CRYPTO_TYPE_STREAM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_SIGN_ONLY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_CRYPTO_TYPE_STREAM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_CRYPTO_TYPE_TRAILER" href="KRB5_CRYPTO_TYPE_TRAILER.html" />
- <link rel="prev" title="KRB5_CRYPTO_TYPE_SIGN_ONLY" href="KRB5_CRYPTO_TYPE_SIGN_ONLY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_SIGN_ONLY.html" title="KRB5_CRYPTO_TYPE_SIGN_ONLY"
- accesskey="P">previous</a> |
- <a href="KRB5_CRYPTO_TYPE_TRAILER.html" title="KRB5_CRYPTO_TYPE_TRAILER"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_STREAM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-crypto-type-stream">
-<span id="krb5-crypto-type-stream-data"></span><h1>KRB5_CRYPTO_TYPE_STREAM<a class="headerlink" href="#krb5-crypto-type-stream" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_CRYPTO_TYPE_STREAM">
-<code class="descname">KRB5_CRYPTO_TYPE_STREAM</code><a class="headerlink" href="#KRB5_CRYPTO_TYPE_STREAM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>[in] entire message without decomposing the structure into header, data and trailer buffers</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_STREAM</span></code></td>
-<td><code class="docutils literal"><span class="pre">7</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_CRYPTO_TYPE_STREAM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_SIGN_ONLY.html" title="KRB5_CRYPTO_TYPE_SIGN_ONLY"
- >previous</a> |
- <a href="KRB5_CRYPTO_TYPE_TRAILER.html" title="KRB5_CRYPTO_TYPE_TRAILER"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_STREAM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_CRYPTO_TYPE_TRAILER — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_CYBERSAFE_SECUREID" href="KRB5_CYBERSAFE_SECUREID.html" />
- <link rel="prev" title="KRB5_CRYPTO_TYPE_STREAM" href="KRB5_CRYPTO_TYPE_STREAM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_STREAM.html" title="KRB5_CRYPTO_TYPE_STREAM"
- accesskey="P">previous</a> |
- <a href="KRB5_CYBERSAFE_SECUREID.html" title="KRB5_CYBERSAFE_SECUREID"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_TRAILER">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-crypto-type-trailer">
-<span id="krb5-crypto-type-trailer-data"></span><h1>KRB5_CRYPTO_TYPE_TRAILER<a class="headerlink" href="#krb5-crypto-type-trailer" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_CRYPTO_TYPE_TRAILER">
-<code class="descname">KRB5_CRYPTO_TYPE_TRAILER</code><a class="headerlink" href="#KRB5_CRYPTO_TYPE_TRAILER" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>[out] checksum for encrypt</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_CRYPTO_TYPE_TRAILER</span></code></td>
-<td><code class="docutils literal"><span class="pre">5</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_CRYPTO_TYPE_TRAILER</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_STREAM.html" title="KRB5_CRYPTO_TYPE_STREAM"
- >previous</a> |
- <a href="KRB5_CYBERSAFE_SECUREID.html" title="KRB5_CYBERSAFE_SECUREID"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CRYPTO_TYPE_TRAILER">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_CYBERSAFE_SECUREID — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_DOMAIN_X500_COMPRESS" href="KRB5_DOMAIN_X500_COMPRESS.html" />
- <link rel="prev" title="KRB5_CRYPTO_TYPE_TRAILER" href="KRB5_CRYPTO_TYPE_TRAILER.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_TRAILER.html" title="KRB5_CRYPTO_TYPE_TRAILER"
- accesskey="P">previous</a> |
- <a href="KRB5_DOMAIN_X500_COMPRESS.html" title="KRB5_DOMAIN_X500_COMPRESS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CYBERSAFE_SECUREID">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cybersafe-secureid">
-<span id="krb5-cybersafe-secureid-data"></span><h1>KRB5_CYBERSAFE_SECUREID<a class="headerlink" href="#krb5-cybersafe-secureid" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_CYBERSAFE_SECUREID">
-<code class="descname">KRB5_CYBERSAFE_SECUREID</code><a class="headerlink" href="#KRB5_CYBERSAFE_SECUREID" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Cybersafe.</p>
-<p>RFC 4120</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_CYBERSAFE_SECUREID</span></code></td>
-<td><code class="docutils literal"><span class="pre">9</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_CYBERSAFE_SECUREID</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_CRYPTO_TYPE_TRAILER.html" title="KRB5_CRYPTO_TYPE_TRAILER"
- >previous</a> |
- <a href="KRB5_DOMAIN_X500_COMPRESS.html" title="KRB5_DOMAIN_X500_COMPRESS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_CYBERSAFE_SECUREID">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_DOMAIN_X500_COMPRESS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_ENCPADATA_REQ_ENC_PA_REP" href="KRB5_ENCPADATA_REQ_ENC_PA_REP.html" />
- <link rel="prev" title="KRB5_CYBERSAFE_SECUREID" href="KRB5_CYBERSAFE_SECUREID.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_CYBERSAFE_SECUREID.html" title="KRB5_CYBERSAFE_SECUREID"
- accesskey="P">previous</a> |
- <a href="KRB5_ENCPADATA_REQ_ENC_PA_REP.html" title="KRB5_ENCPADATA_REQ_ENC_PA_REP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_DOMAIN_X500_COMPRESS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-domain-x500-compress">
-<span id="krb5-domain-x500-compress-data"></span><h1>KRB5_DOMAIN_X500_COMPRESS<a class="headerlink" href="#krb5-domain-x500-compress" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_DOMAIN_X500_COMPRESS">
-<code class="descname">KRB5_DOMAIN_X500_COMPRESS</code><a class="headerlink" href="#KRB5_DOMAIN_X500_COMPRESS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Transited encoding types.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_DOMAIN_X500_COMPRESS</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_DOMAIN_X500_COMPRESS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_CYBERSAFE_SECUREID.html" title="KRB5_CYBERSAFE_SECUREID"
- >previous</a> |
- <a href="KRB5_ENCPADATA_REQ_ENC_PA_REP.html" title="KRB5_ENCPADATA_REQ_ENC_PA_REP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_DOMAIN_X500_COMPRESS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_ENCPADATA_REQ_ENC_PA_REP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_ERROR" href="KRB5_ERROR.html" />
- <link rel="prev" title="KRB5_DOMAIN_X500_COMPRESS" href="KRB5_DOMAIN_X500_COMPRESS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_DOMAIN_X500_COMPRESS.html" title="KRB5_DOMAIN_X500_COMPRESS"
- accesskey="P">previous</a> |
- <a href="KRB5_ERROR.html" title="KRB5_ERROR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_ENCPADATA_REQ_ENC_PA_REP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-encpadata-req-enc-pa-rep">
-<span id="krb5-encpadata-req-enc-pa-rep-data"></span><h1>KRB5_ENCPADATA_REQ_ENC_PA_REP<a class="headerlink" href="#krb5-encpadata-req-enc-pa-rep" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_ENCPADATA_REQ_ENC_PA_REP">
-<code class="descname">KRB5_ENCPADATA_REQ_ENC_PA_REP</code><a class="headerlink" href="#KRB5_ENCPADATA_REQ_ENC_PA_REP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6806.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_ENCPADATA_REQ_ENC_PA_REP</span></code></td>
-<td><code class="docutils literal"><span class="pre">149</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_ENCPADATA_REQ_ENC_PA_REP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_DOMAIN_X500_COMPRESS.html" title="KRB5_DOMAIN_X500_COMPRESS"
- >previous</a> |
- <a href="KRB5_ERROR.html" title="KRB5_ERROR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_ENCPADATA_REQ_ENC_PA_REP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_ERROR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_FAST_REQUIRED" href="KRB5_FAST_REQUIRED.html" />
- <link rel="prev" title="KRB5_ENCPADATA_REQ_ENC_PA_REP" href="KRB5_ENCPADATA_REQ_ENC_PA_REP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_ENCPADATA_REQ_ENC_PA_REP.html" title="KRB5_ENCPADATA_REQ_ENC_PA_REP"
- accesskey="P">previous</a> |
- <a href="KRB5_FAST_REQUIRED.html" title="KRB5_FAST_REQUIRED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_ERROR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-error">
-<span id="krb5-error-data"></span><h1>KRB5_ERROR<a class="headerlink" href="#krb5-error" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_ERROR">
-<code class="descname">KRB5_ERROR</code><a class="headerlink" href="#KRB5_ERROR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Error response.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="40%" />
-<col width="60%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_ERROR</span></code></td>
-<td><code class="docutils literal"><span class="pre">((krb5_msgtype)30)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_ERROR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_ENCPADATA_REQ_ENC_PA_REP.html" title="KRB5_ENCPADATA_REQ_ENC_PA_REP"
- >previous</a> |
- <a href="KRB5_FAST_REQUIRED.html" title="KRB5_FAST_REQUIRED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_ERROR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_FAST_REQUIRED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GC_CACHED" href="KRB5_GC_CACHED.html" />
- <link rel="prev" title="KRB5_ERROR" href="KRB5_ERROR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_ERROR.html" title="KRB5_ERROR"
- accesskey="P">previous</a> |
- <a href="KRB5_GC_CACHED.html" title="KRB5_GC_CACHED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_FAST_REQUIRED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-fast-required">
-<span id="krb5-fast-required-data"></span><h1>KRB5_FAST_REQUIRED<a class="headerlink" href="#krb5-fast-required" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_FAST_REQUIRED">
-<code class="descname">KRB5_FAST_REQUIRED</code><a class="headerlink" href="#KRB5_FAST_REQUIRED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Require KDC to support FAST.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="53%" />
-<col width="47%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_FAST_REQUIRED</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_FAST_REQUIRED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_ERROR.html" title="KRB5_ERROR"
- >previous</a> |
- <a href="KRB5_GC_CACHED.html" title="KRB5_GC_CACHED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_FAST_REQUIRED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GC_CACHED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GC_CANONICALIZE" href="KRB5_GC_CANONICALIZE.html" />
- <link rel="prev" title="KRB5_FAST_REQUIRED" href="KRB5_FAST_REQUIRED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_FAST_REQUIRED.html" title="KRB5_FAST_REQUIRED"
- accesskey="P">previous</a> |
- <a href="KRB5_GC_CANONICALIZE.html" title="KRB5_GC_CANONICALIZE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_CACHED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-gc-cached">
-<span id="krb5-gc-cached-data"></span><h1>KRB5_GC_CACHED<a class="headerlink" href="#krb5-gc-cached" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GC_CACHED">
-<code class="descname">KRB5_GC_CACHED</code><a class="headerlink" href="#KRB5_GC_CACHED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Want cached ticket only.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="49%" />
-<col width="51%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GC_CACHED</span></code></td>
-<td><code class="docutils literal"><span class="pre">2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GC_CACHED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_FAST_REQUIRED.html" title="KRB5_FAST_REQUIRED"
- >previous</a> |
- <a href="KRB5_GC_CANONICALIZE.html" title="KRB5_GC_CANONICALIZE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_CACHED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GC_CANONICALIZE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GC_CONSTRAINED_DELEGATION" href="KRB5_GC_CONSTRAINED_DELEGATION.html" />
- <link rel="prev" title="KRB5_GC_CACHED" href="KRB5_GC_CACHED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GC_CACHED.html" title="KRB5_GC_CACHED"
- accesskey="P">previous</a> |
- <a href="KRB5_GC_CONSTRAINED_DELEGATION.html" title="KRB5_GC_CONSTRAINED_DELEGATION"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_CANONICALIZE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-gc-canonicalize">
-<span id="krb5-gc-canonicalize-data"></span><h1>KRB5_GC_CANONICALIZE<a class="headerlink" href="#krb5-gc-canonicalize" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GC_CANONICALIZE">
-<code class="descname">KRB5_GC_CANONICALIZE</code><a class="headerlink" href="#KRB5_GC_CANONICALIZE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Set canonicalize KDC option.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GC_CANONICALIZE</span></code></td>
-<td><code class="docutils literal"><span class="pre">4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GC_CANONICALIZE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GC_CACHED.html" title="KRB5_GC_CACHED"
- >previous</a> |
- <a href="KRB5_GC_CONSTRAINED_DELEGATION.html" title="KRB5_GC_CONSTRAINED_DELEGATION"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_CANONICALIZE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GC_CONSTRAINED_DELEGATION — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GC_FORWARDABLE" href="KRB5_GC_FORWARDABLE.html" />
- <link rel="prev" title="KRB5_GC_CANONICALIZE" href="KRB5_GC_CANONICALIZE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GC_CANONICALIZE.html" title="KRB5_GC_CANONICALIZE"
- accesskey="P">previous</a> |
- <a href="KRB5_GC_FORWARDABLE.html" title="KRB5_GC_FORWARDABLE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_CONSTRAINED_DELEGATION">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-gc-constrained-delegation">
-<span id="krb5-gc-constrained-delegation-data"></span><h1>KRB5_GC_CONSTRAINED_DELEGATION<a class="headerlink" href="#krb5-gc-constrained-delegation" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GC_CONSTRAINED_DELEGATION">
-<code class="descname">KRB5_GC_CONSTRAINED_DELEGATION</code><a class="headerlink" href="#KRB5_GC_CONSTRAINED_DELEGATION" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Constrained delegation.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GC_CONSTRAINED_DELEGATION</span></code></td>
-<td><code class="docutils literal"><span class="pre">64</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GC_CONSTRAINED_DELEGATION</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GC_CANONICALIZE.html" title="KRB5_GC_CANONICALIZE"
- >previous</a> |
- <a href="KRB5_GC_FORWARDABLE.html" title="KRB5_GC_FORWARDABLE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_CONSTRAINED_DELEGATION">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GC_FORWARDABLE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GC_NO_STORE" href="KRB5_GC_NO_STORE.html" />
- <link rel="prev" title="KRB5_GC_CONSTRAINED_DELEGATION" href="KRB5_GC_CONSTRAINED_DELEGATION.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GC_CONSTRAINED_DELEGATION.html" title="KRB5_GC_CONSTRAINED_DELEGATION"
- accesskey="P">previous</a> |
- <a href="KRB5_GC_NO_STORE.html" title="KRB5_GC_NO_STORE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_FORWARDABLE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-gc-forwardable">
-<span id="krb5-gc-forwardable-data"></span><h1>KRB5_GC_FORWARDABLE<a class="headerlink" href="#krb5-gc-forwardable" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GC_FORWARDABLE">
-<code class="descname">KRB5_GC_FORWARDABLE</code><a class="headerlink" href="#KRB5_GC_FORWARDABLE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Acquire forwardable tickets.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GC_FORWARDABLE</span></code></td>
-<td><code class="docutils literal"><span class="pre">16</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GC_FORWARDABLE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GC_CONSTRAINED_DELEGATION.html" title="KRB5_GC_CONSTRAINED_DELEGATION"
- >previous</a> |
- <a href="KRB5_GC_NO_STORE.html" title="KRB5_GC_NO_STORE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_FORWARDABLE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GC_NO_STORE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GC_NO_TRANSIT_CHECK" href="KRB5_GC_NO_TRANSIT_CHECK.html" />
- <link rel="prev" title="KRB5_GC_FORWARDABLE" href="KRB5_GC_FORWARDABLE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GC_FORWARDABLE.html" title="KRB5_GC_FORWARDABLE"
- accesskey="P">previous</a> |
- <a href="KRB5_GC_NO_TRANSIT_CHECK.html" title="KRB5_GC_NO_TRANSIT_CHECK"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_NO_STORE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-gc-no-store">
-<span id="krb5-gc-no-store-data"></span><h1>KRB5_GC_NO_STORE<a class="headerlink" href="#krb5-gc-no-store" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GC_NO_STORE">
-<code class="descname">KRB5_GC_NO_STORE</code><a class="headerlink" href="#KRB5_GC_NO_STORE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Do not store in credential cache.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GC_NO_STORE</span></code></td>
-<td><code class="docutils literal"><span class="pre">8</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GC_NO_STORE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GC_FORWARDABLE.html" title="KRB5_GC_FORWARDABLE"
- >previous</a> |
- <a href="KRB5_GC_NO_TRANSIT_CHECK.html" title="KRB5_GC_NO_TRANSIT_CHECK"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_NO_STORE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GC_NO_TRANSIT_CHECK — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GC_USER_USER" href="KRB5_GC_USER_USER.html" />
- <link rel="prev" title="KRB5_GC_NO_STORE" href="KRB5_GC_NO_STORE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GC_NO_STORE.html" title="KRB5_GC_NO_STORE"
- accesskey="P">previous</a> |
- <a href="KRB5_GC_USER_USER.html" title="KRB5_GC_USER_USER"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_NO_TRANSIT_CHECK">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-gc-no-transit-check">
-<span id="krb5-gc-no-transit-check-data"></span><h1>KRB5_GC_NO_TRANSIT_CHECK<a class="headerlink" href="#krb5-gc-no-transit-check" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GC_NO_TRANSIT_CHECK">
-<code class="descname">KRB5_GC_NO_TRANSIT_CHECK</code><a class="headerlink" href="#KRB5_GC_NO_TRANSIT_CHECK" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Disable transited check.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GC_NO_TRANSIT_CHECK</span></code></td>
-<td><code class="docutils literal"><span class="pre">32</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GC_NO_TRANSIT_CHECK</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GC_NO_STORE.html" title="KRB5_GC_NO_STORE"
- >previous</a> |
- <a href="KRB5_GC_USER_USER.html" title="KRB5_GC_USER_USER"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_NO_TRANSIT_CHECK">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GC_USER_USER — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST" href="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html" />
- <link rel="prev" title="KRB5_GC_NO_TRANSIT_CHECK" href="KRB5_GC_NO_TRANSIT_CHECK.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GC_NO_TRANSIT_CHECK.html" title="KRB5_GC_NO_TRANSIT_CHECK"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_USER_USER">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-gc-user-user">
-<span id="krb5-gc-user-user-data"></span><h1>KRB5_GC_USER_USER<a class="headerlink" href="#krb5-gc-user-user" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GC_USER_USER">
-<code class="descname">KRB5_GC_USER_USER</code><a class="headerlink" href="#KRB5_GC_USER_USER" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Want user-user ticket.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GC_USER_USER</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GC_USER_USER</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GC_NO_TRANSIT_CHECK.html" title="KRB5_GC_NO_TRANSIT_CHECK"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GC_USER_USER">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS" href="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html" />
- <link rel="prev" title="KRB5_GC_USER_USER" href="KRB5_GC_USER_USER.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GC_USER_USER.html" title="KRB5_GC_USER_USER"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html" title="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-address-list">
-<span id="krb5-get-init-creds-opt-address-list-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST<a class="headerlink" href="#krb5-get-init-creds-opt-address-list" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0020</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GC_USER_USER.html" title="KRB5_GC_USER_USER"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html" title="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_ANONYMOUS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE" href="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST" href="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html" title="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_ANONYMOUS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-anonymous">
-<span id="krb5-get-init-creds-opt-anonymous-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_ANONYMOUS<a class="headerlink" href="#krb5-get-init-creds-opt-anonymous" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_ANONYMOUS</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_ANONYMOUS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_ANONYMOUS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0400</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_ANONYMOUS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html" title="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_ANONYMOUS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_CANONICALIZE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT" href="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS" href="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html" title="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html" title="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_CANONICALIZE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-canonicalize">
-<span id="krb5-get-init-creds-opt-canonicalize-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_CANONICALIZE<a class="headerlink" href="#krb5-get-init-creds-opt-canonicalize" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_CANONICALIZE</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_CANONICALIZE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_CANONICALIZE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0200</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_CANONICALIZE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html" title="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html" title="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_CANONICALIZE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST" href="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE" href="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html" title="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-chg-pwd-prmpt">
-<span id="krb5-get-init-creds-opt-chg-pwd-prmpt-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT<a class="headerlink" href="#krb5-get-init-creds-opt-chg-pwd-prmpt" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="67%" />
-<col width="33%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0100</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html" title="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE" href="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT" href="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html" title="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html" title="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-etype-list">
-<span id="krb5-get-init-creds-opt-etype-list-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST<a class="headerlink" href="#krb5-get-init-creds-opt-etype-list" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0010</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html" title="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html" title="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_FORWARDABLE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST" href="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST" href="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_FORWARDABLE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-forwardable">
-<span id="krb5-get-init-creds-opt-forwardable-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_FORWARDABLE<a class="headerlink" href="#krb5-get-init-creds-opt-forwardable" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_FORWARDABLE</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_FORWARDABLE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_FORWARDABLE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0004</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_FORWARDABLE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_FORWARDABLE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_PROXIABLE" href="KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE" href="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html" title="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html" title="KRB5_GET_INIT_CREDS_OPT_PROXIABLE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-preauth-list">
-<span id="krb5-get-init-creds-opt-preauth-list-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST<a class="headerlink" href="#krb5-get-init-creds-opt-preauth-list" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0040</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html" title="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html" title="KRB5_GET_INIT_CREDS_OPT_PROXIABLE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_PROXIABLE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE" href="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST" href="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html" title="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_PROXIABLE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-proxiable">
-<span id="krb5-get-init-creds-opt-proxiable-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_PROXIABLE<a class="headerlink" href="#krb5-get-init-creds-opt-proxiable" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_PROXIABLE">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_PROXIABLE</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_PROXIABLE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_PROXIABLE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0008</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_PROXIABLE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html" title="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html" title="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_PROXIABLE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_SALT" href="KRB5_GET_INIT_CREDS_OPT_SALT.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_PROXIABLE" href="KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html" title="KRB5_GET_INIT_CREDS_OPT_PROXIABLE"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_SALT.html" title="KRB5_GET_INIT_CREDS_OPT_SALT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-renew-life">
-<span id="krb5-get-init-creds-opt-renew-life-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE<a class="headerlink" href="#krb5-get-init-creds-opt-renew-life" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html" title="KRB5_GET_INIT_CREDS_OPT_PROXIABLE"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_SALT.html" title="KRB5_GET_INIT_CREDS_OPT_SALT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_SALT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE" href="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE" href="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html" title="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE"
- accesskey="P">previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html" title="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_SALT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-salt">
-<span id="krb5-get-init-creds-opt-salt-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_SALT<a class="headerlink" href="#krb5-get-init-creds-opt-salt" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_SALT">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_SALT</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_SALT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_SALT</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0080</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_SALT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html" title="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE"
- >previous</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html" title="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_SALT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_GET_INIT_CREDS_OPT_TKT_LIFE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_INIT_CONTEXT_SECURE" href="KRB5_INIT_CONTEXT_SECURE.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_SALT" href="KRB5_GET_INIT_CREDS_OPT_SALT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_SALT.html" title="KRB5_GET_INIT_CREDS_OPT_SALT"
- accesskey="P">previous</a> |
- <a href="KRB5_INIT_CONTEXT_SECURE.html" title="KRB5_INIT_CONTEXT_SECURE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_TKT_LIFE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt-tkt-life">
-<span id="krb5-get-init-creds-opt-tkt-life-data"></span><h1>KRB5_GET_INIT_CREDS_OPT_TKT_LIFE<a class="headerlink" href="#krb5-get-init-creds-opt-tkt-life" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE">
-<code class="descname">KRB5_GET_INIT_CREDS_OPT_TKT_LIFE</code><a class="headerlink" href="#KRB5_GET_INIT_CREDS_OPT_TKT_LIFE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="64%" />
-<col width="36%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_GET_INIT_CREDS_OPT_TKT_LIFE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_GET_INIT_CREDS_OPT_TKT_LIFE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_SALT.html" title="KRB5_GET_INIT_CREDS_OPT_SALT"
- >previous</a> |
- <a href="KRB5_INIT_CONTEXT_SECURE.html" title="KRB5_INIT_CONTEXT_SECURE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_GET_INIT_CREDS_OPT_TKT_LIFE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_INIT_CONTEXT_KDC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE" href="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html" />
- <link rel="prev" title="KRB5_INIT_CONTEXT_SECURE" href="KRB5_INIT_CONTEXT_SECURE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_INIT_CONTEXT_SECURE.html" title="KRB5_INIT_CONTEXT_SECURE"
- accesskey="P">previous</a> |
- <a href="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html" title="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INIT_CONTEXT_KDC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-context-kdc">
-<span id="krb5-init-context-kdc-data"></span><h1>KRB5_INIT_CONTEXT_KDC<a class="headerlink" href="#krb5-init-context-kdc" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_INIT_CONTEXT_KDC">
-<code class="descname">KRB5_INIT_CONTEXT_KDC</code><a class="headerlink" href="#KRB5_INIT_CONTEXT_KDC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Use KDC configuration if available.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_INIT_CONTEXT_KDC</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_INIT_CONTEXT_KDC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_INIT_CONTEXT_SECURE.html" title="KRB5_INIT_CONTEXT_SECURE"
- >previous</a> |
- <a href="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html" title="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INIT_CONTEXT_KDC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_INIT_CONTEXT_SECURE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_INIT_CONTEXT_KDC" href="KRB5_INIT_CONTEXT_KDC.html" />
- <link rel="prev" title="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE" href="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html" title="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE"
- accesskey="P">previous</a> |
- <a href="KRB5_INIT_CONTEXT_KDC.html" title="KRB5_INIT_CONTEXT_KDC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INIT_CONTEXT_SECURE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-context-secure">
-<span id="krb5-init-context-secure-data"></span><h1>KRB5_INIT_CONTEXT_SECURE<a class="headerlink" href="#krb5-init-context-secure" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_INIT_CONTEXT_SECURE">
-<code class="descname">KRB5_INIT_CONTEXT_SECURE</code><a class="headerlink" href="#KRB5_INIT_CONTEXT_SECURE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Use secure context configuration.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_INIT_CONTEXT_SECURE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_INIT_CONTEXT_SECURE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html" title="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE"
- >previous</a> |
- <a href="KRB5_INIT_CONTEXT_KDC.html" title="KRB5_INIT_CONTEXT_KDC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INIT_CONTEXT_SECURE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_INIT_CREDS_STEP_FLAG_CONTINUE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_INT16_MAX" href="KRB5_INT16_MAX.html" />
- <link rel="prev" title="KRB5_INIT_CONTEXT_KDC" href="KRB5_INIT_CONTEXT_KDC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_INIT_CONTEXT_KDC.html" title="KRB5_INIT_CONTEXT_KDC"
- accesskey="P">previous</a> |
- <a href="KRB5_INT16_MAX.html" title="KRB5_INT16_MAX"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INIT_CREDS_STEP_FLAG_CONTINUE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-step-flag-continue">
-<span id="krb5-init-creds-step-flag-continue-data"></span><h1>KRB5_INIT_CREDS_STEP_FLAG_CONTINUE<a class="headerlink" href="#krb5-init-creds-step-flag-continue" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE">
-<code class="descname">KRB5_INIT_CREDS_STEP_FLAG_CONTINUE</code><a class="headerlink" href="#KRB5_INIT_CREDS_STEP_FLAG_CONTINUE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>More responses needed.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_INIT_CREDS_STEP_FLAG_CONTINUE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_INIT_CREDS_STEP_FLAG_CONTINUE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_INIT_CONTEXT_KDC.html" title="KRB5_INIT_CONTEXT_KDC"
- >previous</a> |
- <a href="KRB5_INT16_MAX.html" title="KRB5_INT16_MAX"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INIT_CREDS_STEP_FLAG_CONTINUE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_INT16_MAX — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_INT16_MIN" href="KRB5_INT16_MIN.html" />
- <link rel="prev" title="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE" href="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html" title="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE"
- accesskey="P">previous</a> |
- <a href="KRB5_INT16_MIN.html" title="KRB5_INT16_MIN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INT16_MAX">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-int16-max">
-<span id="krb5-int16-max-data"></span><h1>KRB5_INT16_MAX<a class="headerlink" href="#krb5-int16-max" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_INT16_MAX">
-<code class="descname">KRB5_INT16_MAX</code><a class="headerlink" href="#KRB5_INT16_MAX" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="49%" />
-<col width="51%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_INT16_MAX</span></code></td>
-<td><code class="docutils literal"><span class="pre">65535</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_INT16_MAX</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html" title="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE"
- >previous</a> |
- <a href="KRB5_INT16_MIN.html" title="KRB5_INT16_MIN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INT16_MAX">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_INT16_MIN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_INT32_MAX" href="KRB5_INT32_MAX.html" />
- <link rel="prev" title="KRB5_INT16_MAX" href="KRB5_INT16_MAX.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_INT16_MAX.html" title="KRB5_INT16_MAX"
- accesskey="P">previous</a> |
- <a href="KRB5_INT32_MAX.html" title="KRB5_INT32_MAX"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INT16_MIN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-int16-min">
-<span id="krb5-int16-min-data"></span><h1>KRB5_INT16_MIN<a class="headerlink" href="#krb5-int16-min" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_INT16_MIN">
-<code class="descname">KRB5_INT16_MIN</code><a class="headerlink" href="#KRB5_INT16_MIN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="45%" />
-<col width="55%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_INT16_MIN</span></code></td>
-<td><code class="docutils literal"><span class="pre">(-KRB5_INT16_MAX-1)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_INT16_MIN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_INT16_MAX.html" title="KRB5_INT16_MAX"
- >previous</a> |
- <a href="KRB5_INT32_MAX.html" title="KRB5_INT32_MAX"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INT16_MIN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_INT32_MAX — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_INT32_MIN" href="KRB5_INT32_MIN.html" />
- <link rel="prev" title="KRB5_INT16_MIN" href="KRB5_INT16_MIN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_INT16_MIN.html" title="KRB5_INT16_MIN"
- accesskey="P">previous</a> |
- <a href="KRB5_INT32_MIN.html" title="KRB5_INT32_MIN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INT32_MAX">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-int32-max">
-<span id="krb5-int32-max-data"></span><h1>KRB5_INT32_MAX<a class="headerlink" href="#krb5-int32-max" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_INT32_MAX">
-<code class="descname">KRB5_INT32_MAX</code><a class="headerlink" href="#KRB5_INT32_MAX" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="49%" />
-<col width="51%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_INT32_MAX</span></code></td>
-<td><code class="docutils literal"><span class="pre">2147483647</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_INT32_MAX</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_INT16_MIN.html" title="KRB5_INT16_MIN"
- >previous</a> |
- <a href="KRB5_INT32_MIN.html" title="KRB5_INT32_MIN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INT32_MAX">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_INT32_MIN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_AD_ITE" href="KRB5_KEYUSAGE_AD_ITE.html" />
- <link rel="prev" title="KRB5_INT32_MAX" href="KRB5_INT32_MAX.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_INT32_MAX.html" title="KRB5_INT32_MAX"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_AD_ITE.html" title="KRB5_KEYUSAGE_AD_ITE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INT32_MIN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-int32-min">
-<span id="krb5-int32-min-data"></span><h1>KRB5_INT32_MIN<a class="headerlink" href="#krb5-int32-min" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_INT32_MIN">
-<code class="descname">KRB5_INT32_MIN</code><a class="headerlink" href="#KRB5_INT32_MIN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="45%" />
-<col width="55%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_INT32_MIN</span></code></td>
-<td><code class="docutils literal"><span class="pre">(-KRB5_INT32_MAX-1)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_INT32_MIN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_INT32_MAX.html" title="KRB5_INT32_MAX"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_AD_ITE.html" title="KRB5_KEYUSAGE_AD_ITE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_INT32_MIN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_AD_ITE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM" href="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html" />
- <link rel="prev" title="KRB5_INT32_MIN" href="KRB5_INT32_MIN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_INT32_MIN.html" title="KRB5_INT32_MIN"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html" title="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AD_ITE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-ad-ite">
-<span id="krb5-keyusage-ad-ite-data"></span><h1>KRB5_KEYUSAGE_AD_ITE<a class="headerlink" href="#krb5-keyusage-ad-ite" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_AD_ITE">
-<code class="descname">KRB5_KEYUSAGE_AD_ITE</code><a class="headerlink" href="#KRB5_KEYUSAGE_AD_ITE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_AD_ITE</span></code></td>
-<td><code class="docutils literal"><span class="pre">21</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_AD_ITE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_INT32_MIN.html" title="KRB5_INT32_MIN"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html" title="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AD_ITE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_AD_MTE" href="KRB5_KEYUSAGE_AD_MTE.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_AD_ITE" href="KRB5_KEYUSAGE_AD_ITE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_AD_ITE.html" title="KRB5_KEYUSAGE_AD_ITE"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_AD_MTE.html" title="KRB5_KEYUSAGE_AD_MTE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-ad-kdcissued-cksum">
-<span id="krb5-keyusage-ad-kdcissued-cksum-data"></span><h1>KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM<a class="headerlink" href="#krb5-keyusage-ad-kdcissued-cksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM">
-<code class="descname">KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM</code><a class="headerlink" href="#KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="64%" />
-<col width="36%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">19</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_AD_ITE.html" title="KRB5_KEYUSAGE_AD_ITE"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_AD_MTE.html" title="KRB5_KEYUSAGE_AD_MTE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_AD_MTE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_AD_SIGNEDPATH" href="KRB5_KEYUSAGE_AD_SIGNEDPATH.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM" href="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html" title="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_AD_SIGNEDPATH.html" title="KRB5_KEYUSAGE_AD_SIGNEDPATH"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AD_MTE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-ad-mte">
-<span id="krb5-keyusage-ad-mte-data"></span><h1>KRB5_KEYUSAGE_AD_MTE<a class="headerlink" href="#krb5-keyusage-ad-mte" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_AD_MTE">
-<code class="descname">KRB5_KEYUSAGE_AD_MTE</code><a class="headerlink" href="#KRB5_KEYUSAGE_AD_MTE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_AD_MTE</span></code></td>
-<td><code class="docutils literal"><span class="pre">20</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_AD_MTE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html" title="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_AD_SIGNEDPATH.html" title="KRB5_KEYUSAGE_AD_SIGNEDPATH"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AD_MTE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_AD_SIGNEDPATH — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_APP_DATA_CKSUM" href="KRB5_KEYUSAGE_APP_DATA_CKSUM.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_AD_MTE" href="KRB5_KEYUSAGE_AD_MTE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_AD_MTE.html" title="KRB5_KEYUSAGE_AD_MTE"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_APP_DATA_CKSUM.html" title="KRB5_KEYUSAGE_APP_DATA_CKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AD_SIGNEDPATH">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-ad-signedpath">
-<span id="krb5-keyusage-ad-signedpath-data"></span><h1>KRB5_KEYUSAGE_AD_SIGNEDPATH<a class="headerlink" href="#krb5-keyusage-ad-signedpath" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_AD_SIGNEDPATH">
-<code class="descname">KRB5_KEYUSAGE_AD_SIGNEDPATH</code><a class="headerlink" href="#KRB5_KEYUSAGE_AD_SIGNEDPATH" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_AD_SIGNEDPATH</span></code></td>
-<td><code class="docutils literal"><span class="pre">-21</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_AD_SIGNEDPATH</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_AD_MTE.html" title="KRB5_KEYUSAGE_AD_MTE"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_APP_DATA_CKSUM.html" title="KRB5_KEYUSAGE_APP_DATA_CKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AD_SIGNEDPATH">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_APP_DATA_CKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_APP_DATA_ENCRYPT" href="KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_AD_SIGNEDPATH" href="KRB5_KEYUSAGE_AD_SIGNEDPATH.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_AD_SIGNEDPATH.html" title="KRB5_KEYUSAGE_AD_SIGNEDPATH"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html" title="KRB5_KEYUSAGE_APP_DATA_ENCRYPT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_APP_DATA_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-app-data-cksum">
-<span id="krb5-keyusage-app-data-cksum-data"></span><h1>KRB5_KEYUSAGE_APP_DATA_CKSUM<a class="headerlink" href="#krb5-keyusage-app-data-cksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_APP_DATA_CKSUM">
-<code class="descname">KRB5_KEYUSAGE_APP_DATA_CKSUM</code><a class="headerlink" href="#KRB5_KEYUSAGE_APP_DATA_CKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_APP_DATA_CKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">17</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_APP_DATA_CKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_AD_SIGNEDPATH.html" title="KRB5_KEYUSAGE_AD_SIGNEDPATH"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html" title="KRB5_KEYUSAGE_APP_DATA_ENCRYPT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_APP_DATA_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_APP_DATA_ENCRYPT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_AP_REP_ENCPART" href="KRB5_KEYUSAGE_AP_REP_ENCPART.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_APP_DATA_CKSUM" href="KRB5_KEYUSAGE_APP_DATA_CKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_APP_DATA_CKSUM.html" title="KRB5_KEYUSAGE_APP_DATA_CKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_AP_REP_ENCPART.html" title="KRB5_KEYUSAGE_AP_REP_ENCPART"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_APP_DATA_ENCRYPT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-app-data-encrypt">
-<span id="krb5-keyusage-app-data-encrypt-data"></span><h1>KRB5_KEYUSAGE_APP_DATA_ENCRYPT<a class="headerlink" href="#krb5-keyusage-app-data-encrypt" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_APP_DATA_ENCRYPT">
-<code class="descname">KRB5_KEYUSAGE_APP_DATA_ENCRYPT</code><a class="headerlink" href="#KRB5_KEYUSAGE_APP_DATA_ENCRYPT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_APP_DATA_ENCRYPT</span></code></td>
-<td><code class="docutils literal"><span class="pre">16</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_APP_DATA_ENCRYPT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_APP_DATA_CKSUM.html" title="KRB5_KEYUSAGE_APP_DATA_CKSUM"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_AP_REP_ENCPART.html" title="KRB5_KEYUSAGE_AP_REP_ENCPART"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_APP_DATA_ENCRYPT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_AP_REP_ENCPART — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_AP_REQ_AUTH" href="KRB5_KEYUSAGE_AP_REQ_AUTH.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_APP_DATA_ENCRYPT" href="KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html" title="KRB5_KEYUSAGE_APP_DATA_ENCRYPT"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_AP_REQ_AUTH.html" title="KRB5_KEYUSAGE_AP_REQ_AUTH"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AP_REP_ENCPART">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-ap-rep-encpart">
-<span id="krb5-keyusage-ap-rep-encpart-data"></span><h1>KRB5_KEYUSAGE_AP_REP_ENCPART<a class="headerlink" href="#krb5-keyusage-ap-rep-encpart" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_AP_REP_ENCPART">
-<code class="descname">KRB5_KEYUSAGE_AP_REP_ENCPART</code><a class="headerlink" href="#KRB5_KEYUSAGE_AP_REP_ENCPART" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_AP_REP_ENCPART</span></code></td>
-<td><code class="docutils literal"><span class="pre">12</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_AP_REP_ENCPART</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html" title="KRB5_KEYUSAGE_APP_DATA_ENCRYPT"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_AP_REQ_AUTH.html" title="KRB5_KEYUSAGE_AP_REQ_AUTH"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AP_REP_ENCPART">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_AP_REQ_AUTH — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM" href="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_AP_REP_ENCPART" href="KRB5_KEYUSAGE_AP_REP_ENCPART.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_AP_REP_ENCPART.html" title="KRB5_KEYUSAGE_AP_REP_ENCPART"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html" title="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AP_REQ_AUTH">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-ap-req-auth">
-<span id="krb5-keyusage-ap-req-auth-data"></span><h1>KRB5_KEYUSAGE_AP_REQ_AUTH<a class="headerlink" href="#krb5-keyusage-ap-req-auth" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_AP_REQ_AUTH">
-<code class="descname">KRB5_KEYUSAGE_AP_REQ_AUTH</code><a class="headerlink" href="#KRB5_KEYUSAGE_AP_REQ_AUTH" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_AP_REQ_AUTH</span></code></td>
-<td><code class="docutils literal"><span class="pre">11</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_AP_REQ_AUTH</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_AP_REP_ENCPART.html" title="KRB5_KEYUSAGE_AP_REP_ENCPART"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html" title="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AP_REQ_AUTH">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_AS_REP_ENCPART" href="KRB5_KEYUSAGE_AS_REP_ENCPART.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_AP_REQ_AUTH" href="KRB5_KEYUSAGE_AP_REQ_AUTH.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_AP_REQ_AUTH.html" title="KRB5_KEYUSAGE_AP_REQ_AUTH"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_AS_REP_ENCPART.html" title="KRB5_KEYUSAGE_AS_REP_ENCPART"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-ap-req-auth-cksum">
-<span id="krb5-keyusage-ap-req-auth-cksum-data"></span><h1>KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM<a class="headerlink" href="#krb5-keyusage-ap-req-auth-cksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM">
-<code class="descname">KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM</code><a class="headerlink" href="#KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">10</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_AP_REQ_AUTH.html" title="KRB5_KEYUSAGE_AP_REQ_AUTH"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_AS_REP_ENCPART.html" title="KRB5_KEYUSAGE_AS_REP_ENCPART"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_AS_REP_ENCPART — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_AS_REQ" href="KRB5_KEYUSAGE_AS_REQ.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM" href="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html" title="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_AS_REQ.html" title="KRB5_KEYUSAGE_AS_REQ"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AS_REP_ENCPART">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-as-rep-encpart">
-<span id="krb5-keyusage-as-rep-encpart-data"></span><h1>KRB5_KEYUSAGE_AS_REP_ENCPART<a class="headerlink" href="#krb5-keyusage-as-rep-encpart" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_AS_REP_ENCPART">
-<code class="descname">KRB5_KEYUSAGE_AS_REP_ENCPART</code><a class="headerlink" href="#KRB5_KEYUSAGE_AS_REP_ENCPART" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_AS_REP_ENCPART</span></code></td>
-<td><code class="docutils literal"><span class="pre">3</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_AS_REP_ENCPART</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html" title="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_AS_REQ.html" title="KRB5_KEYUSAGE_AS_REQ"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AS_REP_ENCPART">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_AS_REQ — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS" href="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_AS_REP_ENCPART" href="KRB5_KEYUSAGE_AS_REP_ENCPART.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_AS_REP_ENCPART.html" title="KRB5_KEYUSAGE_AS_REP_ENCPART"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html" title="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AS_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-as-req">
-<span id="krb5-keyusage-as-req-data"></span><h1>KRB5_KEYUSAGE_AS_REQ<a class="headerlink" href="#krb5-keyusage-as-req" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_AS_REQ">
-<code class="descname">KRB5_KEYUSAGE_AS_REQ</code><a class="headerlink" href="#KRB5_KEYUSAGE_AS_REQ" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_AS_REQ</span></code></td>
-<td><code class="docutils literal"><span class="pre">56</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_AS_REQ</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_AS_REP_ENCPART.html" title="KRB5_KEYUSAGE_AS_REP_ENCPART"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html" title="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AS_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_CAMMAC" href="KRB5_KEYUSAGE_CAMMAC.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_AS_REQ" href="KRB5_KEYUSAGE_AS_REQ.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_AS_REQ.html" title="KRB5_KEYUSAGE_AS_REQ"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_CAMMAC.html" title="KRB5_KEYUSAGE_CAMMAC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-as-req-pa-enc-ts">
-<span id="krb5-keyusage-as-req-pa-enc-ts-data"></span><h1>KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS<a class="headerlink" href="#krb5-keyusage-as-req-pa-enc-ts" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS">
-<code class="descname">KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS</code><a class="headerlink" href="#KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_AS_REQ.html" title="KRB5_KEYUSAGE_AS_REQ"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_CAMMAC.html" title="KRB5_KEYUSAGE_CAMMAC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_CAMMAC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT" href="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS" href="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html" title="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html" title="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_CAMMAC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-cammac">
-<span id="krb5-keyusage-cammac-data"></span><h1>KRB5_KEYUSAGE_CAMMAC<a class="headerlink" href="#krb5-keyusage-cammac" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_CAMMAC">
-<code class="descname">KRB5_KEYUSAGE_CAMMAC</code><a class="headerlink" href="#KRB5_KEYUSAGE_CAMMAC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_CAMMAC</span></code></td>
-<td><code class="docutils literal"><span class="pre">64</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_CAMMAC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html" title="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html" title="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_CAMMAC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC" href="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_CAMMAC" href="KRB5_KEYUSAGE_CAMMAC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_CAMMAC.html" title="KRB5_KEYUSAGE_CAMMAC"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html" title="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-enc-challenge-client">
-<span id="krb5-keyusage-enc-challenge-client-data"></span><h1>KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT<a class="headerlink" href="#krb5-keyusage-enc-challenge-client" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT">
-<code class="descname">KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT</code><a class="headerlink" href="#KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT</span></code></td>
-<td><code class="docutils literal"><span class="pre">54</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_CAMMAC.html" title="KRB5_KEYUSAGE_CAMMAC"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html" title="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_ENC_CHALLENGE_KDC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_FAST_ENC" href="KRB5_KEYUSAGE_FAST_ENC.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT" href="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html" title="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_FAST_ENC.html" title="KRB5_KEYUSAGE_FAST_ENC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_ENC_CHALLENGE_KDC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-enc-challenge-kdc">
-<span id="krb5-keyusage-enc-challenge-kdc-data"></span><h1>KRB5_KEYUSAGE_ENC_CHALLENGE_KDC<a class="headerlink" href="#krb5-keyusage-enc-challenge-kdc" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC">
-<code class="descname">KRB5_KEYUSAGE_ENC_CHALLENGE_KDC</code><a class="headerlink" href="#KRB5_KEYUSAGE_ENC_CHALLENGE_KDC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_ENC_CHALLENGE_KDC</span></code></td>
-<td><code class="docutils literal"><span class="pre">55</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_ENC_CHALLENGE_KDC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html" title="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_FAST_ENC.html" title="KRB5_KEYUSAGE_FAST_ENC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_ENC_CHALLENGE_KDC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_FAST_ENC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_FAST_FINISHED" href="KRB5_KEYUSAGE_FAST_FINISHED.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC" href="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html" title="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_FAST_FINISHED.html" title="KRB5_KEYUSAGE_FAST_FINISHED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_FAST_ENC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-fast-enc">
-<span id="krb5-keyusage-fast-enc-data"></span><h1>KRB5_KEYUSAGE_FAST_ENC<a class="headerlink" href="#krb5-keyusage-fast-enc" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_FAST_ENC">
-<code class="descname">KRB5_KEYUSAGE_FAST_ENC</code><a class="headerlink" href="#KRB5_KEYUSAGE_FAST_ENC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_FAST_ENC</span></code></td>
-<td><code class="docutils literal"><span class="pre">51</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_FAST_ENC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html" title="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_FAST_FINISHED.html" title="KRB5_KEYUSAGE_FAST_FINISHED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_FAST_ENC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_FAST_FINISHED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_FAST_REP" href="KRB5_KEYUSAGE_FAST_REP.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_FAST_ENC" href="KRB5_KEYUSAGE_FAST_ENC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_FAST_ENC.html" title="KRB5_KEYUSAGE_FAST_ENC"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_FAST_REP.html" title="KRB5_KEYUSAGE_FAST_REP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_FAST_FINISHED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-fast-finished">
-<span id="krb5-keyusage-fast-finished-data"></span><h1>KRB5_KEYUSAGE_FAST_FINISHED<a class="headerlink" href="#krb5-keyusage-fast-finished" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_FAST_FINISHED">
-<code class="descname">KRB5_KEYUSAGE_FAST_FINISHED</code><a class="headerlink" href="#KRB5_KEYUSAGE_FAST_FINISHED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_FAST_FINISHED</span></code></td>
-<td><code class="docutils literal"><span class="pre">53</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_FAST_FINISHED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_FAST_ENC.html" title="KRB5_KEYUSAGE_FAST_ENC"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_FAST_REP.html" title="KRB5_KEYUSAGE_FAST_REP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_FAST_FINISHED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_FAST_REP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_FAST_REQ_CHKSUM" href="KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_FAST_FINISHED" href="KRB5_KEYUSAGE_FAST_FINISHED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_FAST_FINISHED.html" title="KRB5_KEYUSAGE_FAST_FINISHED"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html" title="KRB5_KEYUSAGE_FAST_REQ_CHKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_FAST_REP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-fast-rep">
-<span id="krb5-keyusage-fast-rep-data"></span><h1>KRB5_KEYUSAGE_FAST_REP<a class="headerlink" href="#krb5-keyusage-fast-rep" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_FAST_REP">
-<code class="descname">KRB5_KEYUSAGE_FAST_REP</code><a class="headerlink" href="#KRB5_KEYUSAGE_FAST_REP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_FAST_REP</span></code></td>
-<td><code class="docutils literal"><span class="pre">52</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_FAST_REP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_FAST_FINISHED.html" title="KRB5_KEYUSAGE_FAST_FINISHED"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html" title="KRB5_KEYUSAGE_FAST_REQ_CHKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_FAST_REP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_FAST_REQ_CHKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_GSS_TOK_MIC" href="KRB5_KEYUSAGE_GSS_TOK_MIC.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_FAST_REP" href="KRB5_KEYUSAGE_FAST_REP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_FAST_REP.html" title="KRB5_KEYUSAGE_FAST_REP"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_MIC.html" title="KRB5_KEYUSAGE_GSS_TOK_MIC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_FAST_REQ_CHKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-fast-req-chksum">
-<span id="krb5-keyusage-fast-req-chksum-data"></span><h1>KRB5_KEYUSAGE_FAST_REQ_CHKSUM<a class="headerlink" href="#krb5-keyusage-fast-req-chksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_FAST_REQ_CHKSUM">
-<code class="descname">KRB5_KEYUSAGE_FAST_REQ_CHKSUM</code><a class="headerlink" href="#KRB5_KEYUSAGE_FAST_REQ_CHKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_FAST_REQ_CHKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">50</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_FAST_REQ_CHKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_FAST_REP.html" title="KRB5_KEYUSAGE_FAST_REP"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_MIC.html" title="KRB5_KEYUSAGE_GSS_TOK_MIC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_FAST_REQ_CHKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_GSS_TOK_MIC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG" href="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_FAST_REQ_CHKSUM" href="KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html" title="KRB5_KEYUSAGE_FAST_REQ_CHKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_GSS_TOK_MIC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-gss-tok-mic">
-<span id="krb5-keyusage-gss-tok-mic-data"></span><h1>KRB5_KEYUSAGE_GSS_TOK_MIC<a class="headerlink" href="#krb5-keyusage-gss-tok-mic" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_GSS_TOK_MIC">
-<code class="descname">KRB5_KEYUSAGE_GSS_TOK_MIC</code><a class="headerlink" href="#KRB5_KEYUSAGE_GSS_TOK_MIC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_GSS_TOK_MIC</span></code></td>
-<td><code class="docutils literal"><span class="pre">22</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_GSS_TOK_MIC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html" title="KRB5_KEYUSAGE_FAST_REQ_CHKSUM"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_GSS_TOK_MIC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV" href="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_GSS_TOK_MIC" href="KRB5_KEYUSAGE_GSS_TOK_MIC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_MIC.html" title="KRB5_KEYUSAGE_GSS_TOK_MIC"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-gss-tok-wrap-integ">
-<span id="krb5-keyusage-gss-tok-wrap-integ-data"></span><h1>KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG<a class="headerlink" href="#krb5-keyusage-gss-tok-wrap-integ" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG">
-<code class="descname">KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG</code><a class="headerlink" href="#KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="64%" />
-<col width="36%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG</span></code></td>
-<td><code class="docutils literal"><span class="pre">23</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_MIC.html" title="KRB5_KEYUSAGE_GSS_TOK_MIC"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_IAKERB_FINISHED" href="KRB5_KEYUSAGE_IAKERB_FINISHED.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG" href="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_IAKERB_FINISHED.html" title="KRB5_KEYUSAGE_IAKERB_FINISHED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-gss-tok-wrap-priv">
-<span id="krb5-keyusage-gss-tok-wrap-priv-data"></span><h1>KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV<a class="headerlink" href="#krb5-keyusage-gss-tok-wrap-priv" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV">
-<code class="descname">KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV</code><a class="headerlink" href="#KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV</span></code></td>
-<td><code class="docutils literal"><span class="pre">24</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_IAKERB_FINISHED.html" title="KRB5_KEYUSAGE_IAKERB_FINISHED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_IAKERB_FINISHED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_KDC_REP_TICKET" href="KRB5_KEYUSAGE_KDC_REP_TICKET.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV" href="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_KDC_REP_TICKET.html" title="KRB5_KEYUSAGE_KDC_REP_TICKET"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_IAKERB_FINISHED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-iakerb-finished">
-<span id="krb5-keyusage-iakerb-finished-data"></span><h1>KRB5_KEYUSAGE_IAKERB_FINISHED<a class="headerlink" href="#krb5-keyusage-iakerb-finished" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_IAKERB_FINISHED">
-<code class="descname">KRB5_KEYUSAGE_IAKERB_FINISHED</code><a class="headerlink" href="#KRB5_KEYUSAGE_IAKERB_FINISHED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_IAKERB_FINISHED</span></code></td>
-<td><code class="docutils literal"><span class="pre">42</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_IAKERB_FINISHED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html" title="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_KDC_REP_TICKET.html" title="KRB5_KEYUSAGE_KDC_REP_TICKET"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_IAKERB_FINISHED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_KDC_REP_TICKET — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_KRB_CRED_ENCPART" href="KRB5_KEYUSAGE_KRB_CRED_ENCPART.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_IAKERB_FINISHED" href="KRB5_KEYUSAGE_IAKERB_FINISHED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_IAKERB_FINISHED.html" title="KRB5_KEYUSAGE_IAKERB_FINISHED"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_KRB_CRED_ENCPART.html" title="KRB5_KEYUSAGE_KRB_CRED_ENCPART"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_KDC_REP_TICKET">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-kdc-rep-ticket">
-<span id="krb5-keyusage-kdc-rep-ticket-data"></span><h1>KRB5_KEYUSAGE_KDC_REP_TICKET<a class="headerlink" href="#krb5-keyusage-kdc-rep-ticket" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_KDC_REP_TICKET">
-<code class="descname">KRB5_KEYUSAGE_KDC_REP_TICKET</code><a class="headerlink" href="#KRB5_KEYUSAGE_KDC_REP_TICKET" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_KDC_REP_TICKET</span></code></td>
-<td><code class="docutils literal"><span class="pre">2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_KDC_REP_TICKET</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_IAKERB_FINISHED.html" title="KRB5_KEYUSAGE_IAKERB_FINISHED"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_KRB_CRED_ENCPART.html" title="KRB5_KEYUSAGE_KRB_CRED_ENCPART"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_KDC_REP_TICKET">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_KRB_CRED_ENCPART — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_KRB_ERROR_CKSUM" href="KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_KDC_REP_TICKET" href="KRB5_KEYUSAGE_KDC_REP_TICKET.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_KDC_REP_TICKET.html" title="KRB5_KEYUSAGE_KDC_REP_TICKET"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html" title="KRB5_KEYUSAGE_KRB_ERROR_CKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_KRB_CRED_ENCPART">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-krb-cred-encpart">
-<span id="krb5-keyusage-krb-cred-encpart-data"></span><h1>KRB5_KEYUSAGE_KRB_CRED_ENCPART<a class="headerlink" href="#krb5-keyusage-krb-cred-encpart" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_KRB_CRED_ENCPART">
-<code class="descname">KRB5_KEYUSAGE_KRB_CRED_ENCPART</code><a class="headerlink" href="#KRB5_KEYUSAGE_KRB_CRED_ENCPART" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_KRB_CRED_ENCPART</span></code></td>
-<td><code class="docutils literal"><span class="pre">14</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_KRB_CRED_ENCPART</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_KDC_REP_TICKET.html" title="KRB5_KEYUSAGE_KDC_REP_TICKET"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html" title="KRB5_KEYUSAGE_KRB_ERROR_CKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_KRB_CRED_ENCPART">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_KRB_ERROR_CKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_KRB_PRIV_ENCPART" href="KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_KRB_CRED_ENCPART" href="KRB5_KEYUSAGE_KRB_CRED_ENCPART.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_KRB_CRED_ENCPART.html" title="KRB5_KEYUSAGE_KRB_CRED_ENCPART"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html" title="KRB5_KEYUSAGE_KRB_PRIV_ENCPART"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_KRB_ERROR_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-krb-error-cksum">
-<span id="krb5-keyusage-krb-error-cksum-data"></span><h1>KRB5_KEYUSAGE_KRB_ERROR_CKSUM<a class="headerlink" href="#krb5-keyusage-krb-error-cksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_KRB_ERROR_CKSUM">
-<code class="descname">KRB5_KEYUSAGE_KRB_ERROR_CKSUM</code><a class="headerlink" href="#KRB5_KEYUSAGE_KRB_ERROR_CKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_KRB_ERROR_CKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">18</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_KRB_ERROR_CKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_KRB_CRED_ENCPART.html" title="KRB5_KEYUSAGE_KRB_CRED_ENCPART"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html" title="KRB5_KEYUSAGE_KRB_PRIV_ENCPART"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_KRB_ERROR_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_KRB_PRIV_ENCPART — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_KRB_SAFE_CKSUM" href="KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_KRB_ERROR_CKSUM" href="KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html" title="KRB5_KEYUSAGE_KRB_ERROR_CKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html" title="KRB5_KEYUSAGE_KRB_SAFE_CKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_KRB_PRIV_ENCPART">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-krb-priv-encpart">
-<span id="krb5-keyusage-krb-priv-encpart-data"></span><h1>KRB5_KEYUSAGE_KRB_PRIV_ENCPART<a class="headerlink" href="#krb5-keyusage-krb-priv-encpart" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_KRB_PRIV_ENCPART">
-<code class="descname">KRB5_KEYUSAGE_KRB_PRIV_ENCPART</code><a class="headerlink" href="#KRB5_KEYUSAGE_KRB_PRIV_ENCPART" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_KRB_PRIV_ENCPART</span></code></td>
-<td><code class="docutils literal"><span class="pre">13</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_KRB_PRIV_ENCPART</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html" title="KRB5_KEYUSAGE_KRB_ERROR_CKSUM"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html" title="KRB5_KEYUSAGE_KRB_SAFE_CKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_KRB_PRIV_ENCPART">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_KRB_SAFE_CKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_PA_AS_FRESHNESS" href="KRB5_KEYUSAGE_PA_AS_FRESHNESS.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_KRB_PRIV_ENCPART" href="KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html" title="KRB5_KEYUSAGE_KRB_PRIV_ENCPART"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_PA_AS_FRESHNESS.html" title="KRB5_KEYUSAGE_PA_AS_FRESHNESS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_KRB_SAFE_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-krb-safe-cksum">
-<span id="krb5-keyusage-krb-safe-cksum-data"></span><h1>KRB5_KEYUSAGE_KRB_SAFE_CKSUM<a class="headerlink" href="#krb5-keyusage-krb-safe-cksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_KRB_SAFE_CKSUM">
-<code class="descname">KRB5_KEYUSAGE_KRB_SAFE_CKSUM</code><a class="headerlink" href="#KRB5_KEYUSAGE_KRB_SAFE_CKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_KRB_SAFE_CKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">15</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_KRB_SAFE_CKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html" title="KRB5_KEYUSAGE_KRB_PRIV_ENCPART"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_PA_AS_FRESHNESS.html" title="KRB5_KEYUSAGE_PA_AS_FRESHNESS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_KRB_SAFE_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_PA_AS_FRESHNESS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_PA_FX_COOKIE" href="KRB5_KEYUSAGE_PA_FX_COOKIE.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_KRB_SAFE_CKSUM" href="KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html" title="KRB5_KEYUSAGE_KRB_SAFE_CKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_PA_FX_COOKIE.html" title="KRB5_KEYUSAGE_PA_FX_COOKIE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_AS_FRESHNESS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-pa-as-freshness">
-<span id="krb5-keyusage-pa-as-freshness-data"></span><h1>KRB5_KEYUSAGE_PA_AS_FRESHNESS<a class="headerlink" href="#krb5-keyusage-pa-as-freshness" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_PA_AS_FRESHNESS">
-<code class="descname">KRB5_KEYUSAGE_PA_AS_FRESHNESS</code><a class="headerlink" href="#KRB5_KEYUSAGE_PA_AS_FRESHNESS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Used for freshness tokens.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_AS_FRESHNESS</span></code></td>
-<td><code class="docutils literal"><span class="pre">514</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_PA_AS_FRESHNESS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html" title="KRB5_KEYUSAGE_KRB_SAFE_CKSUM"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_PA_FX_COOKIE.html" title="KRB5_KEYUSAGE_PA_FX_COOKIE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_AS_FRESHNESS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_PA_FX_COOKIE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_PA_OTP_REQUEST" href="KRB5_KEYUSAGE_PA_OTP_REQUEST.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_PA_AS_FRESHNESS" href="KRB5_KEYUSAGE_PA_AS_FRESHNESS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_AS_FRESHNESS.html" title="KRB5_KEYUSAGE_PA_AS_FRESHNESS"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_PA_OTP_REQUEST.html" title="KRB5_KEYUSAGE_PA_OTP_REQUEST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_FX_COOKIE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-pa-fx-cookie">
-<span id="krb5-keyusage-pa-fx-cookie-data"></span><h1>KRB5_KEYUSAGE_PA_FX_COOKIE<a class="headerlink" href="#krb5-keyusage-pa-fx-cookie" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_PA_FX_COOKIE">
-<code class="descname">KRB5_KEYUSAGE_PA_FX_COOKIE</code><a class="headerlink" href="#KRB5_KEYUSAGE_PA_FX_COOKIE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Used for encrypted FAST cookies.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_FX_COOKIE</span></code></td>
-<td><code class="docutils literal"><span class="pre">513</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_PA_FX_COOKIE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_AS_FRESHNESS.html" title="KRB5_KEYUSAGE_PA_AS_FRESHNESS"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_PA_OTP_REQUEST.html" title="KRB5_KEYUSAGE_PA_OTP_REQUEST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_FX_COOKIE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_PA_OTP_REQUEST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_PA_PKINIT_KX" href="KRB5_KEYUSAGE_PA_PKINIT_KX.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_PA_FX_COOKIE" href="KRB5_KEYUSAGE_PA_FX_COOKIE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_FX_COOKIE.html" title="KRB5_KEYUSAGE_PA_FX_COOKIE"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_PA_PKINIT_KX.html" title="KRB5_KEYUSAGE_PA_PKINIT_KX"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_OTP_REQUEST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-pa-otp-request">
-<span id="krb5-keyusage-pa-otp-request-data"></span><h1>KRB5_KEYUSAGE_PA_OTP_REQUEST<a class="headerlink" href="#krb5-keyusage-pa-otp-request" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_PA_OTP_REQUEST">
-<code class="descname">KRB5_KEYUSAGE_PA_OTP_REQUEST</code><a class="headerlink" href="#KRB5_KEYUSAGE_PA_OTP_REQUEST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>See RFC 6560 section 4.2.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_OTP_REQUEST</span></code></td>
-<td><code class="docutils literal"><span class="pre">45</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_PA_OTP_REQUEST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_FX_COOKIE.html" title="KRB5_KEYUSAGE_PA_FX_COOKIE"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_PA_PKINIT_KX.html" title="KRB5_KEYUSAGE_PA_PKINIT_KX"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_OTP_REQUEST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_PA_PKINIT_KX — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY" href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_PA_OTP_REQUEST" href="KRB5_KEYUSAGE_PA_OTP_REQUEST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_OTP_REQUEST.html" title="KRB5_KEYUSAGE_PA_OTP_REQUEST"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_PKINIT_KX">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-pa-pkinit-kx">
-<span id="krb5-keyusage-pa-pkinit-kx-data"></span><h1>KRB5_KEYUSAGE_PA_PKINIT_KX<a class="headerlink" href="#krb5-keyusage-pa-pkinit-kx" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_PA_PKINIT_KX">
-<code class="descname">KRB5_KEYUSAGE_PA_PKINIT_KX</code><a class="headerlink" href="#KRB5_KEYUSAGE_PA_PKINIT_KX" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_PKINIT_KX</span></code></td>
-<td><code class="docutils literal"><span class="pre">44</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_PA_PKINIT_KX</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_OTP_REQUEST.html" title="KRB5_KEYUSAGE_PA_OTP_REQUEST"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_PKINIT_KX">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST" href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_PA_PKINIT_KX" href="KRB5_KEYUSAGE_PA_PKINIT_KX.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_PKINIT_KX.html" title="KRB5_KEYUSAGE_PA_PKINIT_KX"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-pa-s4u-x509-user-reply">
-<span id="krb5-keyusage-pa-s4u-x509-user-reply-data"></span><h1>KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY<a class="headerlink" href="#krb5-keyusage-pa-s4u-x509-user-reply" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY">
-<code class="descname">KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY</code><a class="headerlink" href="#KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Note conflict with <code class="xref c c-data docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_SAM_RESPONSE</span></code> .</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY</span></code></td>
-<td><code class="docutils literal"><span class="pre">27</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_PKINIT_KX.html" title="KRB5_KEYUSAGE_PA_PKINIT_KX"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM" href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY" href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-pa-s4u-x509-user-request">
-<span id="krb5-keyusage-pa-s4u-x509-user-request-data"></span><h1>KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST<a class="headerlink" href="#krb5-keyusage-pa-s4u-x509-user-request" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST">
-<code class="descname">KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST</code><a class="headerlink" href="#KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Note conflict with <code class="xref c c-data docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID</span></code> .</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="67%" />
-<col width="33%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST</span></code></td>
-<td><code class="docutils literal"><span class="pre">26</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID" href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST" href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-pa-sam-challenge-cksum">
-<span id="krb5-keyusage-pa-sam-challenge-cksum-data"></span><h1>KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM<a class="headerlink" href="#krb5-keyusage-pa-sam-challenge-cksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM">
-<code class="descname">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM</code><a class="headerlink" href="#KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">25</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html" title="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_PA_SAM_RESPONSE" href="KRB5_KEYUSAGE_PA_SAM_RESPONSE.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM" href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_RESPONSE.html" title="KRB5_KEYUSAGE_PA_SAM_RESPONSE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-pa-sam-challenge-trackid">
-<span id="krb5-keyusage-pa-sam-challenge-trackid-data"></span><h1>KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID<a class="headerlink" href="#krb5-keyusage-pa-sam-challenge-trackid" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID">
-<code class="descname">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID</code><a class="headerlink" href="#KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Note conflict with <code class="xref c c-data docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST</span></code> .</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="67%" />
-<col width="33%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID</span></code></td>
-<td><code class="docutils literal"><span class="pre">26</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_RESPONSE.html" title="KRB5_KEYUSAGE_PA_SAM_RESPONSE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_PA_SAM_RESPONSE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_SPAKE" href="KRB5_KEYUSAGE_SPAKE.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID" href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_SPAKE.html" title="KRB5_KEYUSAGE_SPAKE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_SAM_RESPONSE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-pa-sam-response">
-<span id="krb5-keyusage-pa-sam-response-data"></span><h1>KRB5_KEYUSAGE_PA_SAM_RESPONSE<a class="headerlink" href="#krb5-keyusage-pa-sam-response" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_PA_SAM_RESPONSE">
-<code class="descname">KRB5_KEYUSAGE_PA_SAM_RESPONSE</code><a class="headerlink" href="#KRB5_KEYUSAGE_PA_SAM_RESPONSE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Note conflict with <code class="xref c c-data docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY</span></code> .</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_PA_SAM_RESPONSE</span></code></td>
-<td><code class="docutils literal"><span class="pre">27</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_PA_SAM_RESPONSE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html" title="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_SPAKE.html" title="KRB5_KEYUSAGE_SPAKE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_PA_SAM_RESPONSE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_SPAKE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY" href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_PA_SAM_RESPONSE" href="KRB5_KEYUSAGE_PA_SAM_RESPONSE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_RESPONSE.html" title="KRB5_KEYUSAGE_PA_SAM_RESPONSE"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_SPAKE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-spake">
-<span id="krb5-keyusage-spake-data"></span><h1>KRB5_KEYUSAGE_SPAKE<a class="headerlink" href="#krb5-keyusage-spake" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_SPAKE">
-<code class="descname">KRB5_KEYUSAGE_SPAKE</code><a class="headerlink" href="#KRB5_KEYUSAGE_SPAKE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_SPAKE</span></code></td>
-<td><code class="docutils literal"><span class="pre">65</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_SPAKE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_PA_SAM_RESPONSE.html" title="KRB5_KEYUSAGE_PA_SAM_RESPONSE"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_SPAKE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY" href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_SPAKE" href="KRB5_KEYUSAGE_SPAKE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_SPAKE.html" title="KRB5_KEYUSAGE_SPAKE"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-tgs-rep-encpart-sesskey">
-<span id="krb5-keyusage-tgs-rep-encpart-sesskey-data"></span><h1>KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY<a class="headerlink" href="#krb5-keyusage-tgs-rep-encpart-sesskey" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY">
-<code class="descname">KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY</code><a class="headerlink" href="#KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="67%" />
-<col width="33%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY</span></code></td>
-<td><code class="docutils literal"><span class="pre">8</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_SPAKE.html" title="KRB5_KEYUSAGE_SPAKE"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY" href="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY" href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html" title="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-tgs-rep-encpart-subkey">
-<span id="krb5-keyusage-tgs-rep-encpart-subkey-data"></span><h1>KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY<a class="headerlink" href="#krb5-keyusage-tgs-rep-encpart-subkey" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY">
-<code class="descname">KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY</code><a class="headerlink" href="#KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY</span></code></td>
-<td><code class="docutils literal"><span class="pre">9</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html" title="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY" href="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY" href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html" title="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-tgs-req-ad-sesskey">
-<span id="krb5-keyusage-tgs-req-ad-sesskey-data"></span><h1>KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY<a class="headerlink" href="#krb5-keyusage-tgs-req-ad-sesskey" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY">
-<code class="descname">KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY</code><a class="headerlink" href="#KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="64%" />
-<col width="36%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY</span></code></td>
-<td><code class="docutils literal"><span class="pre">4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html" title="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html" title="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_TGS_REQ_AUTH" href="KRB5_KEYUSAGE_TGS_REQ_AUTH.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY" href="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html" title="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AUTH.html" title="KRB5_KEYUSAGE_TGS_REQ_AUTH"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-tgs-req-ad-subkey">
-<span id="krb5-keyusage-tgs-req-ad-subkey-data"></span><h1>KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY<a class="headerlink" href="#krb5-keyusage-tgs-req-ad-subkey" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY">
-<code class="descname">KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY</code><a class="headerlink" href="#KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY</span></code></td>
-<td><code class="docutils literal"><span class="pre">5</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html" title="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AUTH.html" title="KRB5_KEYUSAGE_TGS_REQ_AUTH"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_TGS_REQ_AUTH — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM" href="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY" href="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html" title="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY"
- accesskey="P">previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html" title="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REQ_AUTH">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-tgs-req-auth">
-<span id="krb5-keyusage-tgs-req-auth-data"></span><h1>KRB5_KEYUSAGE_TGS_REQ_AUTH<a class="headerlink" href="#krb5-keyusage-tgs-req-auth" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_TGS_REQ_AUTH">
-<code class="descname">KRB5_KEYUSAGE_TGS_REQ_AUTH</code><a class="headerlink" href="#KRB5_KEYUSAGE_TGS_REQ_AUTH" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_TGS_REQ_AUTH</span></code></td>
-<td><code class="docutils literal"><span class="pre">7</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_TGS_REQ_AUTH</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html" title="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY"
- >previous</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html" title="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REQ_AUTH">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KPASSWD_ACCESSDENIED" href="KRB5_KPASSWD_ACCESSDENIED.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_TGS_REQ_AUTH" href="KRB5_KEYUSAGE_TGS_REQ_AUTH.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AUTH.html" title="KRB5_KEYUSAGE_TGS_REQ_AUTH"
- accesskey="P">previous</a> |
- <a href="KRB5_KPASSWD_ACCESSDENIED.html" title="KRB5_KPASSWD_ACCESSDENIED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage-tgs-req-auth-cksum">
-<span id="krb5-keyusage-tgs-req-auth-cksum-data"></span><h1>KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM<a class="headerlink" href="#krb5-keyusage-tgs-req-auth-cksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM">
-<code class="descname">KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM</code><a class="headerlink" href="#KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="64%" />
-<col width="36%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">6</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AUTH.html" title="KRB5_KEYUSAGE_TGS_REQ_AUTH"
- >previous</a> |
- <a href="KRB5_KPASSWD_ACCESSDENIED.html" title="KRB5_KPASSWD_ACCESSDENIED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KPASSWD_ACCESSDENIED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KPASSWD_AUTHERROR" href="KRB5_KPASSWD_AUTHERROR.html" />
- <link rel="prev" title="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM" href="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html" title="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_KPASSWD_AUTHERROR.html" title="KRB5_KPASSWD_AUTHERROR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_ACCESSDENIED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kpasswd-accessdenied">
-<span id="krb5-kpasswd-accessdenied-data"></span><h1>KRB5_KPASSWD_ACCESSDENIED<a class="headerlink" href="#krb5-kpasswd-accessdenied" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KPASSWD_ACCESSDENIED">
-<code class="descname">KRB5_KPASSWD_ACCESSDENIED</code><a class="headerlink" href="#KRB5_KPASSWD_ACCESSDENIED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Not authorized.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KPASSWD_ACCESSDENIED</span></code></td>
-<td><code class="docutils literal"><span class="pre">5</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KPASSWD_ACCESSDENIED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html" title="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM"
- >previous</a> |
- <a href="KRB5_KPASSWD_AUTHERROR.html" title="KRB5_KPASSWD_AUTHERROR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_ACCESSDENIED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KPASSWD_AUTHERROR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KPASSWD_BAD_VERSION" href="KRB5_KPASSWD_BAD_VERSION.html" />
- <link rel="prev" title="KRB5_KPASSWD_ACCESSDENIED" href="KRB5_KPASSWD_ACCESSDENIED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KPASSWD_ACCESSDENIED.html" title="KRB5_KPASSWD_ACCESSDENIED"
- accesskey="P">previous</a> |
- <a href="KRB5_KPASSWD_BAD_VERSION.html" title="KRB5_KPASSWD_BAD_VERSION"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_AUTHERROR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kpasswd-autherror">
-<span id="krb5-kpasswd-autherror-data"></span><h1>KRB5_KPASSWD_AUTHERROR<a class="headerlink" href="#krb5-kpasswd-autherror" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KPASSWD_AUTHERROR">
-<code class="descname">KRB5_KPASSWD_AUTHERROR</code><a class="headerlink" href="#KRB5_KPASSWD_AUTHERROR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Authentication error.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KPASSWD_AUTHERROR</span></code></td>
-<td><code class="docutils literal"><span class="pre">3</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KPASSWD_AUTHERROR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KPASSWD_ACCESSDENIED.html" title="KRB5_KPASSWD_ACCESSDENIED"
- >previous</a> |
- <a href="KRB5_KPASSWD_BAD_VERSION.html" title="KRB5_KPASSWD_BAD_VERSION"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_AUTHERROR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KPASSWD_BAD_VERSION — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KPASSWD_HARDERROR" href="KRB5_KPASSWD_HARDERROR.html" />
- <link rel="prev" title="KRB5_KPASSWD_AUTHERROR" href="KRB5_KPASSWD_AUTHERROR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KPASSWD_AUTHERROR.html" title="KRB5_KPASSWD_AUTHERROR"
- accesskey="P">previous</a> |
- <a href="KRB5_KPASSWD_HARDERROR.html" title="KRB5_KPASSWD_HARDERROR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_BAD_VERSION">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kpasswd-bad-version">
-<span id="krb5-kpasswd-bad-version-data"></span><h1>KRB5_KPASSWD_BAD_VERSION<a class="headerlink" href="#krb5-kpasswd-bad-version" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KPASSWD_BAD_VERSION">
-<code class="descname">KRB5_KPASSWD_BAD_VERSION</code><a class="headerlink" href="#KRB5_KPASSWD_BAD_VERSION" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Unknown RPC version.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KPASSWD_BAD_VERSION</span></code></td>
-<td><code class="docutils literal"><span class="pre">6</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KPASSWD_BAD_VERSION</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KPASSWD_AUTHERROR.html" title="KRB5_KPASSWD_AUTHERROR"
- >previous</a> |
- <a href="KRB5_KPASSWD_HARDERROR.html" title="KRB5_KPASSWD_HARDERROR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_BAD_VERSION">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KPASSWD_HARDERROR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KPASSWD_INITIAL_FLAG_NEEDED" href="KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html" />
- <link rel="prev" title="KRB5_KPASSWD_BAD_VERSION" href="KRB5_KPASSWD_BAD_VERSION.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KPASSWD_BAD_VERSION.html" title="KRB5_KPASSWD_BAD_VERSION"
- accesskey="P">previous</a> |
- <a href="KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html" title="KRB5_KPASSWD_INITIAL_FLAG_NEEDED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_HARDERROR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kpasswd-harderror">
-<span id="krb5-kpasswd-harderror-data"></span><h1>KRB5_KPASSWD_HARDERROR<a class="headerlink" href="#krb5-kpasswd-harderror" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KPASSWD_HARDERROR">
-<code class="descname">KRB5_KPASSWD_HARDERROR</code><a class="headerlink" href="#KRB5_KPASSWD_HARDERROR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Server error.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KPASSWD_HARDERROR</span></code></td>
-<td><code class="docutils literal"><span class="pre">2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KPASSWD_HARDERROR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KPASSWD_BAD_VERSION.html" title="KRB5_KPASSWD_BAD_VERSION"
- >previous</a> |
- <a href="KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html" title="KRB5_KPASSWD_INITIAL_FLAG_NEEDED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_HARDERROR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KPASSWD_INITIAL_FLAG_NEEDED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KPASSWD_MALFORMED" href="KRB5_KPASSWD_MALFORMED.html" />
- <link rel="prev" title="KRB5_KPASSWD_HARDERROR" href="KRB5_KPASSWD_HARDERROR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KPASSWD_HARDERROR.html" title="KRB5_KPASSWD_HARDERROR"
- accesskey="P">previous</a> |
- <a href="KRB5_KPASSWD_MALFORMED.html" title="KRB5_KPASSWD_MALFORMED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_INITIAL_FLAG_NEEDED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kpasswd-initial-flag-needed">
-<span id="krb5-kpasswd-initial-flag-needed-data"></span><h1>KRB5_KPASSWD_INITIAL_FLAG_NEEDED<a class="headerlink" href="#krb5-kpasswd-initial-flag-needed" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KPASSWD_INITIAL_FLAG_NEEDED">
-<code class="descname">KRB5_KPASSWD_INITIAL_FLAG_NEEDED</code><a class="headerlink" href="#KRB5_KPASSWD_INITIAL_FLAG_NEEDED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>The presented credentials were not obtained using a password directly.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="64%" />
-<col width="36%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KPASSWD_INITIAL_FLAG_NEEDED</span></code></td>
-<td><code class="docutils literal"><span class="pre">7</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KPASSWD_INITIAL_FLAG_NEEDED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KPASSWD_HARDERROR.html" title="KRB5_KPASSWD_HARDERROR"
- >previous</a> |
- <a href="KRB5_KPASSWD_MALFORMED.html" title="KRB5_KPASSWD_MALFORMED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_INITIAL_FLAG_NEEDED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KPASSWD_MALFORMED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KPASSWD_SOFTERROR" href="KRB5_KPASSWD_SOFTERROR.html" />
- <link rel="prev" title="KRB5_KPASSWD_INITIAL_FLAG_NEEDED" href="KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html" title="KRB5_KPASSWD_INITIAL_FLAG_NEEDED"
- accesskey="P">previous</a> |
- <a href="KRB5_KPASSWD_SOFTERROR.html" title="KRB5_KPASSWD_SOFTERROR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_MALFORMED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kpasswd-malformed">
-<span id="krb5-kpasswd-malformed-data"></span><h1>KRB5_KPASSWD_MALFORMED<a class="headerlink" href="#krb5-kpasswd-malformed" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KPASSWD_MALFORMED">
-<code class="descname">KRB5_KPASSWD_MALFORMED</code><a class="headerlink" href="#KRB5_KPASSWD_MALFORMED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Malformed request.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KPASSWD_MALFORMED</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KPASSWD_MALFORMED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html" title="KRB5_KPASSWD_INITIAL_FLAG_NEEDED"
- >previous</a> |
- <a href="KRB5_KPASSWD_SOFTERROR.html" title="KRB5_KPASSWD_SOFTERROR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_MALFORMED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KPASSWD_SOFTERROR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_KPASSWD_SUCCESS" href="KRB5_KPASSWD_SUCCESS.html" />
- <link rel="prev" title="KRB5_KPASSWD_MALFORMED" href="KRB5_KPASSWD_MALFORMED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KPASSWD_MALFORMED.html" title="KRB5_KPASSWD_MALFORMED"
- accesskey="P">previous</a> |
- <a href="KRB5_KPASSWD_SUCCESS.html" title="KRB5_KPASSWD_SUCCESS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_SOFTERROR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kpasswd-softerror">
-<span id="krb5-kpasswd-softerror-data"></span><h1>KRB5_KPASSWD_SOFTERROR<a class="headerlink" href="#krb5-kpasswd-softerror" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KPASSWD_SOFTERROR">
-<code class="descname">KRB5_KPASSWD_SOFTERROR</code><a class="headerlink" href="#KRB5_KPASSWD_SOFTERROR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Password change rejected.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KPASSWD_SOFTERROR</span></code></td>
-<td><code class="docutils literal"><span class="pre">4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KPASSWD_SOFTERROR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KPASSWD_MALFORMED.html" title="KRB5_KPASSWD_MALFORMED"
- >previous</a> |
- <a href="KRB5_KPASSWD_SUCCESS.html" title="KRB5_KPASSWD_SUCCESS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_SOFTERROR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_KPASSWD_SUCCESS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ALL_ACCT_EXPTIME" href="KRB5_LRQ_ALL_ACCT_EXPTIME.html" />
- <link rel="prev" title="KRB5_KPASSWD_SOFTERROR" href="KRB5_KPASSWD_SOFTERROR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KPASSWD_SOFTERROR.html" title="KRB5_KPASSWD_SOFTERROR"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ALL_ACCT_EXPTIME.html" title="KRB5_LRQ_ALL_ACCT_EXPTIME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_SUCCESS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kpasswd-success">
-<span id="krb5-kpasswd-success-data"></span><h1>KRB5_KPASSWD_SUCCESS<a class="headerlink" href="#krb5-kpasswd-success" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_KPASSWD_SUCCESS">
-<code class="descname">KRB5_KPASSWD_SUCCESS</code><a class="headerlink" href="#KRB5_KPASSWD_SUCCESS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Success.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_KPASSWD_SUCCESS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_KPASSWD_SUCCESS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KPASSWD_SOFTERROR.html" title="KRB5_KPASSWD_SOFTERROR"
- >previous</a> |
- <a href="KRB5_LRQ_ALL_ACCT_EXPTIME.html" title="KRB5_LRQ_ALL_ACCT_EXPTIME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_KPASSWD_SUCCESS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ALL_ACCT_EXPTIME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ALL_LAST_INITIAL" href="KRB5_LRQ_ALL_LAST_INITIAL.html" />
- <link rel="prev" title="KRB5_KPASSWD_SUCCESS" href="KRB5_KPASSWD_SUCCESS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_KPASSWD_SUCCESS.html" title="KRB5_KPASSWD_SUCCESS"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ALL_LAST_INITIAL.html" title="KRB5_LRQ_ALL_LAST_INITIAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_ACCT_EXPTIME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-all-acct-exptime">
-<span id="krb5-lrq-all-acct-exptime-data"></span><h1>KRB5_LRQ_ALL_ACCT_EXPTIME<a class="headerlink" href="#krb5-lrq-all-acct-exptime" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ALL_ACCT_EXPTIME">
-<code class="descname">KRB5_LRQ_ALL_ACCT_EXPTIME</code><a class="headerlink" href="#KRB5_LRQ_ALL_ACCT_EXPTIME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ALL_ACCT_EXPTIME</span></code></td>
-<td><code class="docutils literal"><span class="pre">7</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ALL_ACCT_EXPTIME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_KPASSWD_SUCCESS.html" title="KRB5_KPASSWD_SUCCESS"
- >previous</a> |
- <a href="KRB5_LRQ_ALL_LAST_INITIAL.html" title="KRB5_LRQ_ALL_LAST_INITIAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_ACCT_EXPTIME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ALL_LAST_INITIAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ALL_LAST_RENEWAL" href="KRB5_LRQ_ALL_LAST_RENEWAL.html" />
- <link rel="prev" title="KRB5_LRQ_ALL_ACCT_EXPTIME" href="KRB5_LRQ_ALL_ACCT_EXPTIME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ALL_ACCT_EXPTIME.html" title="KRB5_LRQ_ALL_ACCT_EXPTIME"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ALL_LAST_RENEWAL.html" title="KRB5_LRQ_ALL_LAST_RENEWAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_LAST_INITIAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-all-last-initial">
-<span id="krb5-lrq-all-last-initial-data"></span><h1>KRB5_LRQ_ALL_LAST_INITIAL<a class="headerlink" href="#krb5-lrq-all-last-initial" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ALL_LAST_INITIAL">
-<code class="descname">KRB5_LRQ_ALL_LAST_INITIAL</code><a class="headerlink" href="#KRB5_LRQ_ALL_LAST_INITIAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ALL_LAST_INITIAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ALL_LAST_INITIAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ALL_ACCT_EXPTIME.html" title="KRB5_LRQ_ALL_ACCT_EXPTIME"
- >previous</a> |
- <a href="KRB5_LRQ_ALL_LAST_RENEWAL.html" title="KRB5_LRQ_ALL_LAST_RENEWAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_LAST_INITIAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ALL_LAST_RENEWAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ALL_LAST_REQ" href="KRB5_LRQ_ALL_LAST_REQ.html" />
- <link rel="prev" title="KRB5_LRQ_ALL_LAST_INITIAL" href="KRB5_LRQ_ALL_LAST_INITIAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ALL_LAST_INITIAL.html" title="KRB5_LRQ_ALL_LAST_INITIAL"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ALL_LAST_REQ.html" title="KRB5_LRQ_ALL_LAST_REQ"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_LAST_RENEWAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-all-last-renewal">
-<span id="krb5-lrq-all-last-renewal-data"></span><h1>KRB5_LRQ_ALL_LAST_RENEWAL<a class="headerlink" href="#krb5-lrq-all-last-renewal" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ALL_LAST_RENEWAL">
-<code class="descname">KRB5_LRQ_ALL_LAST_RENEWAL</code><a class="headerlink" href="#KRB5_LRQ_ALL_LAST_RENEWAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ALL_LAST_RENEWAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ALL_LAST_RENEWAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ALL_LAST_INITIAL.html" title="KRB5_LRQ_ALL_LAST_INITIAL"
- >previous</a> |
- <a href="KRB5_LRQ_ALL_LAST_REQ.html" title="KRB5_LRQ_ALL_LAST_REQ"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_LAST_RENEWAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ALL_LAST_REQ — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ALL_LAST_TGT" href="KRB5_LRQ_ALL_LAST_TGT.html" />
- <link rel="prev" title="KRB5_LRQ_ALL_LAST_RENEWAL" href="KRB5_LRQ_ALL_LAST_RENEWAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ALL_LAST_RENEWAL.html" title="KRB5_LRQ_ALL_LAST_RENEWAL"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ALL_LAST_TGT.html" title="KRB5_LRQ_ALL_LAST_TGT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_LAST_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-all-last-req">
-<span id="krb5-lrq-all-last-req-data"></span><h1>KRB5_LRQ_ALL_LAST_REQ<a class="headerlink" href="#krb5-lrq-all-last-req" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ALL_LAST_REQ">
-<code class="descname">KRB5_LRQ_ALL_LAST_REQ</code><a class="headerlink" href="#KRB5_LRQ_ALL_LAST_REQ" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ALL_LAST_REQ</span></code></td>
-<td><code class="docutils literal"><span class="pre">5</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ALL_LAST_REQ</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ALL_LAST_RENEWAL.html" title="KRB5_LRQ_ALL_LAST_RENEWAL"
- >previous</a> |
- <a href="KRB5_LRQ_ALL_LAST_TGT.html" title="KRB5_LRQ_ALL_LAST_TGT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_LAST_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ALL_LAST_TGT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ALL_LAST_TGT_ISSUED" href="KRB5_LRQ_ALL_LAST_TGT_ISSUED.html" />
- <link rel="prev" title="KRB5_LRQ_ALL_LAST_REQ" href="KRB5_LRQ_ALL_LAST_REQ.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ALL_LAST_REQ.html" title="KRB5_LRQ_ALL_LAST_REQ"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ALL_LAST_TGT_ISSUED.html" title="KRB5_LRQ_ALL_LAST_TGT_ISSUED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_LAST_TGT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-all-last-tgt">
-<span id="krb5-lrq-all-last-tgt-data"></span><h1>KRB5_LRQ_ALL_LAST_TGT<a class="headerlink" href="#krb5-lrq-all-last-tgt" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ALL_LAST_TGT">
-<code class="descname">KRB5_LRQ_ALL_LAST_TGT</code><a class="headerlink" href="#KRB5_LRQ_ALL_LAST_TGT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ALL_LAST_TGT</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ALL_LAST_TGT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ALL_LAST_REQ.html" title="KRB5_LRQ_ALL_LAST_REQ"
- >previous</a> |
- <a href="KRB5_LRQ_ALL_LAST_TGT_ISSUED.html" title="KRB5_LRQ_ALL_LAST_TGT_ISSUED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_LAST_TGT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ALL_LAST_TGT_ISSUED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ALL_PW_EXPTIME" href="KRB5_LRQ_ALL_PW_EXPTIME.html" />
- <link rel="prev" title="KRB5_LRQ_ALL_LAST_TGT" href="KRB5_LRQ_ALL_LAST_TGT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ALL_LAST_TGT.html" title="KRB5_LRQ_ALL_LAST_TGT"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ALL_PW_EXPTIME.html" title="KRB5_LRQ_ALL_PW_EXPTIME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_LAST_TGT_ISSUED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-all-last-tgt-issued">
-<span id="krb5-lrq-all-last-tgt-issued-data"></span><h1>KRB5_LRQ_ALL_LAST_TGT_ISSUED<a class="headerlink" href="#krb5-lrq-all-last-tgt-issued" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ALL_LAST_TGT_ISSUED">
-<code class="descname">KRB5_LRQ_ALL_LAST_TGT_ISSUED</code><a class="headerlink" href="#KRB5_LRQ_ALL_LAST_TGT_ISSUED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ALL_LAST_TGT_ISSUED</span></code></td>
-<td><code class="docutils literal"><span class="pre">3</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ALL_LAST_TGT_ISSUED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ALL_LAST_TGT.html" title="KRB5_LRQ_ALL_LAST_TGT"
- >previous</a> |
- <a href="KRB5_LRQ_ALL_PW_EXPTIME.html" title="KRB5_LRQ_ALL_PW_EXPTIME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_LAST_TGT_ISSUED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ALL_PW_EXPTIME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_NONE" href="KRB5_LRQ_NONE.html" />
- <link rel="prev" title="KRB5_LRQ_ALL_LAST_TGT_ISSUED" href="KRB5_LRQ_ALL_LAST_TGT_ISSUED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ALL_LAST_TGT_ISSUED.html" title="KRB5_LRQ_ALL_LAST_TGT_ISSUED"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_NONE.html" title="KRB5_LRQ_NONE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_PW_EXPTIME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-all-pw-exptime">
-<span id="krb5-lrq-all-pw-exptime-data"></span><h1>KRB5_LRQ_ALL_PW_EXPTIME<a class="headerlink" href="#krb5-lrq-all-pw-exptime" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ALL_PW_EXPTIME">
-<code class="descname">KRB5_LRQ_ALL_PW_EXPTIME</code><a class="headerlink" href="#KRB5_LRQ_ALL_PW_EXPTIME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ALL_PW_EXPTIME</span></code></td>
-<td><code class="docutils literal"><span class="pre">6</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ALL_PW_EXPTIME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ALL_LAST_TGT_ISSUED.html" title="KRB5_LRQ_ALL_LAST_TGT_ISSUED"
- >previous</a> |
- <a href="KRB5_LRQ_NONE.html" title="KRB5_LRQ_NONE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ALL_PW_EXPTIME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_NONE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ONE_ACCT_EXPTIME" href="KRB5_LRQ_ONE_ACCT_EXPTIME.html" />
- <link rel="prev" title="KRB5_LRQ_ALL_PW_EXPTIME" href="KRB5_LRQ_ALL_PW_EXPTIME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ALL_PW_EXPTIME.html" title="KRB5_LRQ_ALL_PW_EXPTIME"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ONE_ACCT_EXPTIME.html" title="KRB5_LRQ_ONE_ACCT_EXPTIME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_NONE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-none">
-<span id="krb5-lrq-none-data"></span><h1>KRB5_LRQ_NONE<a class="headerlink" href="#krb5-lrq-none" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_NONE">
-<code class="descname">KRB5_LRQ_NONE</code><a class="headerlink" href="#KRB5_LRQ_NONE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="48%" />
-<col width="52%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_NONE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_NONE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ALL_PW_EXPTIME.html" title="KRB5_LRQ_ALL_PW_EXPTIME"
- >previous</a> |
- <a href="KRB5_LRQ_ONE_ACCT_EXPTIME.html" title="KRB5_LRQ_ONE_ACCT_EXPTIME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_NONE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ONE_ACCT_EXPTIME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ONE_LAST_INITIAL" href="KRB5_LRQ_ONE_LAST_INITIAL.html" />
- <link rel="prev" title="KRB5_LRQ_NONE" href="KRB5_LRQ_NONE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_NONE.html" title="KRB5_LRQ_NONE"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ONE_LAST_INITIAL.html" title="KRB5_LRQ_ONE_LAST_INITIAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_ACCT_EXPTIME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-one-acct-exptime">
-<span id="krb5-lrq-one-acct-exptime-data"></span><h1>KRB5_LRQ_ONE_ACCT_EXPTIME<a class="headerlink" href="#krb5-lrq-one-acct-exptime" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ONE_ACCT_EXPTIME">
-<code class="descname">KRB5_LRQ_ONE_ACCT_EXPTIME</code><a class="headerlink" href="#KRB5_LRQ_ONE_ACCT_EXPTIME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ONE_ACCT_EXPTIME</span></code></td>
-<td><code class="docutils literal"><span class="pre">(-7)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ONE_ACCT_EXPTIME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_NONE.html" title="KRB5_LRQ_NONE"
- >previous</a> |
- <a href="KRB5_LRQ_ONE_LAST_INITIAL.html" title="KRB5_LRQ_ONE_LAST_INITIAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_ACCT_EXPTIME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ONE_LAST_INITIAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ONE_LAST_RENEWAL" href="KRB5_LRQ_ONE_LAST_RENEWAL.html" />
- <link rel="prev" title="KRB5_LRQ_ONE_ACCT_EXPTIME" href="KRB5_LRQ_ONE_ACCT_EXPTIME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ONE_ACCT_EXPTIME.html" title="KRB5_LRQ_ONE_ACCT_EXPTIME"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ONE_LAST_RENEWAL.html" title="KRB5_LRQ_ONE_LAST_RENEWAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_LAST_INITIAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-one-last-initial">
-<span id="krb5-lrq-one-last-initial-data"></span><h1>KRB5_LRQ_ONE_LAST_INITIAL<a class="headerlink" href="#krb5-lrq-one-last-initial" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ONE_LAST_INITIAL">
-<code class="descname">KRB5_LRQ_ONE_LAST_INITIAL</code><a class="headerlink" href="#KRB5_LRQ_ONE_LAST_INITIAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ONE_LAST_INITIAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">(-2)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ONE_LAST_INITIAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ONE_ACCT_EXPTIME.html" title="KRB5_LRQ_ONE_ACCT_EXPTIME"
- >previous</a> |
- <a href="KRB5_LRQ_ONE_LAST_RENEWAL.html" title="KRB5_LRQ_ONE_LAST_RENEWAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_LAST_INITIAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ONE_LAST_RENEWAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ONE_LAST_REQ" href="KRB5_LRQ_ONE_LAST_REQ.html" />
- <link rel="prev" title="KRB5_LRQ_ONE_LAST_INITIAL" href="KRB5_LRQ_ONE_LAST_INITIAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ONE_LAST_INITIAL.html" title="KRB5_LRQ_ONE_LAST_INITIAL"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ONE_LAST_REQ.html" title="KRB5_LRQ_ONE_LAST_REQ"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_LAST_RENEWAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-one-last-renewal">
-<span id="krb5-lrq-one-last-renewal-data"></span><h1>KRB5_LRQ_ONE_LAST_RENEWAL<a class="headerlink" href="#krb5-lrq-one-last-renewal" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ONE_LAST_RENEWAL">
-<code class="descname">KRB5_LRQ_ONE_LAST_RENEWAL</code><a class="headerlink" href="#KRB5_LRQ_ONE_LAST_RENEWAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ONE_LAST_RENEWAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">(-4)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ONE_LAST_RENEWAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ONE_LAST_INITIAL.html" title="KRB5_LRQ_ONE_LAST_INITIAL"
- >previous</a> |
- <a href="KRB5_LRQ_ONE_LAST_REQ.html" title="KRB5_LRQ_ONE_LAST_REQ"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_LAST_RENEWAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ONE_LAST_REQ — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ONE_LAST_TGT" href="KRB5_LRQ_ONE_LAST_TGT.html" />
- <link rel="prev" title="KRB5_LRQ_ONE_LAST_RENEWAL" href="KRB5_LRQ_ONE_LAST_RENEWAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ONE_LAST_RENEWAL.html" title="KRB5_LRQ_ONE_LAST_RENEWAL"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ONE_LAST_TGT.html" title="KRB5_LRQ_ONE_LAST_TGT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_LAST_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-one-last-req">
-<span id="krb5-lrq-one-last-req-data"></span><h1>KRB5_LRQ_ONE_LAST_REQ<a class="headerlink" href="#krb5-lrq-one-last-req" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ONE_LAST_REQ">
-<code class="descname">KRB5_LRQ_ONE_LAST_REQ</code><a class="headerlink" href="#KRB5_LRQ_ONE_LAST_REQ" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ONE_LAST_REQ</span></code></td>
-<td><code class="docutils literal"><span class="pre">(-5)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ONE_LAST_REQ</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ONE_LAST_RENEWAL.html" title="KRB5_LRQ_ONE_LAST_RENEWAL"
- >previous</a> |
- <a href="KRB5_LRQ_ONE_LAST_TGT.html" title="KRB5_LRQ_ONE_LAST_TGT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_LAST_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ONE_LAST_TGT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ONE_LAST_TGT_ISSUED" href="KRB5_LRQ_ONE_LAST_TGT_ISSUED.html" />
- <link rel="prev" title="KRB5_LRQ_ONE_LAST_REQ" href="KRB5_LRQ_ONE_LAST_REQ.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ONE_LAST_REQ.html" title="KRB5_LRQ_ONE_LAST_REQ"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ONE_LAST_TGT_ISSUED.html" title="KRB5_LRQ_ONE_LAST_TGT_ISSUED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_LAST_TGT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-one-last-tgt">
-<span id="krb5-lrq-one-last-tgt-data"></span><h1>KRB5_LRQ_ONE_LAST_TGT<a class="headerlink" href="#krb5-lrq-one-last-tgt" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ONE_LAST_TGT">
-<code class="descname">KRB5_LRQ_ONE_LAST_TGT</code><a class="headerlink" href="#KRB5_LRQ_ONE_LAST_TGT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ONE_LAST_TGT</span></code></td>
-<td><code class="docutils literal"><span class="pre">(-1)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ONE_LAST_TGT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ONE_LAST_REQ.html" title="KRB5_LRQ_ONE_LAST_REQ"
- >previous</a> |
- <a href="KRB5_LRQ_ONE_LAST_TGT_ISSUED.html" title="KRB5_LRQ_ONE_LAST_TGT_ISSUED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_LAST_TGT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ONE_LAST_TGT_ISSUED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_LRQ_ONE_PW_EXPTIME" href="KRB5_LRQ_ONE_PW_EXPTIME.html" />
- <link rel="prev" title="KRB5_LRQ_ONE_LAST_TGT" href="KRB5_LRQ_ONE_LAST_TGT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ONE_LAST_TGT.html" title="KRB5_LRQ_ONE_LAST_TGT"
- accesskey="P">previous</a> |
- <a href="KRB5_LRQ_ONE_PW_EXPTIME.html" title="KRB5_LRQ_ONE_PW_EXPTIME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_LAST_TGT_ISSUED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-one-last-tgt-issued">
-<span id="krb5-lrq-one-last-tgt-issued-data"></span><h1>KRB5_LRQ_ONE_LAST_TGT_ISSUED<a class="headerlink" href="#krb5-lrq-one-last-tgt-issued" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ONE_LAST_TGT_ISSUED">
-<code class="descname">KRB5_LRQ_ONE_LAST_TGT_ISSUED</code><a class="headerlink" href="#KRB5_LRQ_ONE_LAST_TGT_ISSUED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ONE_LAST_TGT_ISSUED</span></code></td>
-<td><code class="docutils literal"><span class="pre">(-3)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ONE_LAST_TGT_ISSUED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ONE_LAST_TGT.html" title="KRB5_LRQ_ONE_LAST_TGT"
- >previous</a> |
- <a href="KRB5_LRQ_ONE_PW_EXPTIME.html" title="KRB5_LRQ_ONE_PW_EXPTIME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_LAST_TGT_ISSUED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_LRQ_ONE_PW_EXPTIME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_ENTERPRISE_PRINCIPAL" href="KRB5_NT_ENTERPRISE_PRINCIPAL.html" />
- <link rel="prev" title="KRB5_LRQ_ONE_LAST_TGT_ISSUED" href="KRB5_LRQ_ONE_LAST_TGT_ISSUED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ONE_LAST_TGT_ISSUED.html" title="KRB5_LRQ_ONE_LAST_TGT_ISSUED"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_ENTERPRISE_PRINCIPAL.html" title="KRB5_NT_ENTERPRISE_PRINCIPAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_PW_EXPTIME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-lrq-one-pw-exptime">
-<span id="krb5-lrq-one-pw-exptime-data"></span><h1>KRB5_LRQ_ONE_PW_EXPTIME<a class="headerlink" href="#krb5-lrq-one-pw-exptime" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_LRQ_ONE_PW_EXPTIME">
-<code class="descname">KRB5_LRQ_ONE_PW_EXPTIME</code><a class="headerlink" href="#KRB5_LRQ_ONE_PW_EXPTIME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_LRQ_ONE_PW_EXPTIME</span></code></td>
-<td><code class="docutils literal"><span class="pre">(-6)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_LRQ_ONE_PW_EXPTIME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ONE_LAST_TGT_ISSUED.html" title="KRB5_LRQ_ONE_LAST_TGT_ISSUED"
- >previous</a> |
- <a href="KRB5_NT_ENTERPRISE_PRINCIPAL.html" title="KRB5_NT_ENTERPRISE_PRINCIPAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_LRQ_ONE_PW_EXPTIME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_ENTERPRISE_PRINCIPAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_ENT_PRINCIPAL_AND_ID" href="KRB5_NT_ENT_PRINCIPAL_AND_ID.html" />
- <link rel="prev" title="KRB5_LRQ_ONE_PW_EXPTIME" href="KRB5_LRQ_ONE_PW_EXPTIME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_LRQ_ONE_PW_EXPTIME.html" title="KRB5_LRQ_ONE_PW_EXPTIME"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_ENT_PRINCIPAL_AND_ID.html" title="KRB5_NT_ENT_PRINCIPAL_AND_ID"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_ENTERPRISE_PRINCIPAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-enterprise-principal">
-<span id="krb5-nt-enterprise-principal-data"></span><h1>KRB5_NT_ENTERPRISE_PRINCIPAL<a class="headerlink" href="#krb5-nt-enterprise-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_ENTERPRISE_PRINCIPAL">
-<code class="descname">KRB5_NT_ENTERPRISE_PRINCIPAL</code><a class="headerlink" href="#KRB5_NT_ENTERPRISE_PRINCIPAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Windows 2000 UPN.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_ENTERPRISE_PRINCIPAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">10</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_ENTERPRISE_PRINCIPAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_LRQ_ONE_PW_EXPTIME.html" title="KRB5_LRQ_ONE_PW_EXPTIME"
- >previous</a> |
- <a href="KRB5_NT_ENT_PRINCIPAL_AND_ID.html" title="KRB5_NT_ENT_PRINCIPAL_AND_ID"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_ENTERPRISE_PRINCIPAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_ENT_PRINCIPAL_AND_ID — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_MS_PRINCIPAL" href="KRB5_NT_MS_PRINCIPAL.html" />
- <link rel="prev" title="KRB5_NT_ENTERPRISE_PRINCIPAL" href="KRB5_NT_ENTERPRISE_PRINCIPAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_ENTERPRISE_PRINCIPAL.html" title="KRB5_NT_ENTERPRISE_PRINCIPAL"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_MS_PRINCIPAL.html" title="KRB5_NT_MS_PRINCIPAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_ENT_PRINCIPAL_AND_ID">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-ent-principal-and-id">
-<span id="krb5-nt-ent-principal-and-id-data"></span><h1>KRB5_NT_ENT_PRINCIPAL_AND_ID<a class="headerlink" href="#krb5-nt-ent-principal-and-id" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_ENT_PRINCIPAL_AND_ID">
-<code class="descname">KRB5_NT_ENT_PRINCIPAL_AND_ID</code><a class="headerlink" href="#KRB5_NT_ENT_PRINCIPAL_AND_ID" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>NT 4 style name and SID.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_ENT_PRINCIPAL_AND_ID</span></code></td>
-<td><code class="docutils literal"><span class="pre">-130</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_ENT_PRINCIPAL_AND_ID</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_ENTERPRISE_PRINCIPAL.html" title="KRB5_NT_ENTERPRISE_PRINCIPAL"
- >previous</a> |
- <a href="KRB5_NT_MS_PRINCIPAL.html" title="KRB5_NT_MS_PRINCIPAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_ENT_PRINCIPAL_AND_ID">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_MS_PRINCIPAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_MS_PRINCIPAL_AND_ID" href="KRB5_NT_MS_PRINCIPAL_AND_ID.html" />
- <link rel="prev" title="KRB5_NT_ENT_PRINCIPAL_AND_ID" href="KRB5_NT_ENT_PRINCIPAL_AND_ID.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_ENT_PRINCIPAL_AND_ID.html" title="KRB5_NT_ENT_PRINCIPAL_AND_ID"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_MS_PRINCIPAL_AND_ID.html" title="KRB5_NT_MS_PRINCIPAL_AND_ID"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_MS_PRINCIPAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-ms-principal">
-<span id="krb5-nt-ms-principal-data"></span><h1>KRB5_NT_MS_PRINCIPAL<a class="headerlink" href="#krb5-nt-ms-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_MS_PRINCIPAL">
-<code class="descname">KRB5_NT_MS_PRINCIPAL</code><a class="headerlink" href="#KRB5_NT_MS_PRINCIPAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Windows 2000 UPN and SID.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_MS_PRINCIPAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">-128</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_MS_PRINCIPAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_ENT_PRINCIPAL_AND_ID.html" title="KRB5_NT_ENT_PRINCIPAL_AND_ID"
- >previous</a> |
- <a href="KRB5_NT_MS_PRINCIPAL_AND_ID.html" title="KRB5_NT_MS_PRINCIPAL_AND_ID"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_MS_PRINCIPAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_MS_PRINCIPAL_AND_ID — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_PRINCIPAL" href="KRB5_NT_PRINCIPAL.html" />
- <link rel="prev" title="KRB5_NT_MS_PRINCIPAL" href="KRB5_NT_MS_PRINCIPAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_MS_PRINCIPAL.html" title="KRB5_NT_MS_PRINCIPAL"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_PRINCIPAL.html" title="KRB5_NT_PRINCIPAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_MS_PRINCIPAL_AND_ID">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-ms-principal-and-id">
-<span id="krb5-nt-ms-principal-and-id-data"></span><h1>KRB5_NT_MS_PRINCIPAL_AND_ID<a class="headerlink" href="#krb5-nt-ms-principal-and-id" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_MS_PRINCIPAL_AND_ID">
-<code class="descname">KRB5_NT_MS_PRINCIPAL_AND_ID</code><a class="headerlink" href="#KRB5_NT_MS_PRINCIPAL_AND_ID" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>NT 4 style name.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_MS_PRINCIPAL_AND_ID</span></code></td>
-<td><code class="docutils literal"><span class="pre">-129</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_MS_PRINCIPAL_AND_ID</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_MS_PRINCIPAL.html" title="KRB5_NT_MS_PRINCIPAL"
- >previous</a> |
- <a href="KRB5_NT_PRINCIPAL.html" title="KRB5_NT_PRINCIPAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_MS_PRINCIPAL_AND_ID">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_PRINCIPAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_SMTP_NAME" href="KRB5_NT_SMTP_NAME.html" />
- <link rel="prev" title="KRB5_NT_MS_PRINCIPAL_AND_ID" href="KRB5_NT_MS_PRINCIPAL_AND_ID.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_MS_PRINCIPAL_AND_ID.html" title="KRB5_NT_MS_PRINCIPAL_AND_ID"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_SMTP_NAME.html" title="KRB5_NT_SMTP_NAME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_PRINCIPAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-principal">
-<span id="krb5-nt-principal-data"></span><h1>KRB5_NT_PRINCIPAL<a class="headerlink" href="#krb5-nt-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_PRINCIPAL">
-<code class="descname">KRB5_NT_PRINCIPAL</code><a class="headerlink" href="#KRB5_NT_PRINCIPAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Just the name of the principal as in DCE, or for users.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_PRINCIPAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_PRINCIPAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_MS_PRINCIPAL_AND_ID.html" title="KRB5_NT_MS_PRINCIPAL_AND_ID"
- >previous</a> |
- <a href="KRB5_NT_SMTP_NAME.html" title="KRB5_NT_SMTP_NAME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_PRINCIPAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_SMTP_NAME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_SRV_HST" href="KRB5_NT_SRV_HST.html" />
- <link rel="prev" title="KRB5_NT_PRINCIPAL" href="KRB5_NT_PRINCIPAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_PRINCIPAL.html" title="KRB5_NT_PRINCIPAL"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_SRV_HST.html" title="KRB5_NT_SRV_HST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_SMTP_NAME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-smtp-name">
-<span id="krb5-nt-smtp-name-data"></span><h1>KRB5_NT_SMTP_NAME<a class="headerlink" href="#krb5-nt-smtp-name" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_SMTP_NAME">
-<code class="descname">KRB5_NT_SMTP_NAME</code><a class="headerlink" href="#KRB5_NT_SMTP_NAME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Name in form of SMTP email name.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_SMTP_NAME</span></code></td>
-<td><code class="docutils literal"><span class="pre">7</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_SMTP_NAME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_PRINCIPAL.html" title="KRB5_NT_PRINCIPAL"
- >previous</a> |
- <a href="KRB5_NT_SRV_HST.html" title="KRB5_NT_SRV_HST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_SMTP_NAME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_SRV_HST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_SRV_INST" href="KRB5_NT_SRV_INST.html" />
- <link rel="prev" title="KRB5_NT_SMTP_NAME" href="KRB5_NT_SMTP_NAME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_SMTP_NAME.html" title="KRB5_NT_SMTP_NAME"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_SRV_INST.html" title="KRB5_NT_SRV_INST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_SRV_HST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-srv-hst">
-<span id="krb5-nt-srv-hst-data"></span><h1>KRB5_NT_SRV_HST<a class="headerlink" href="#krb5-nt-srv-hst" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_SRV_HST">
-<code class="descname">KRB5_NT_SRV_HST</code><a class="headerlink" href="#KRB5_NT_SRV_HST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Service with host name as instance (telnet, rcommands)</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="50%" />
-<col width="50%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_SRV_HST</span></code></td>
-<td><code class="docutils literal"><span class="pre">3</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_SRV_HST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_SMTP_NAME.html" title="KRB5_NT_SMTP_NAME"
- >previous</a> |
- <a href="KRB5_NT_SRV_INST.html" title="KRB5_NT_SRV_INST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_SRV_HST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_SRV_INST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_SRV_XHST" href="KRB5_NT_SRV_XHST.html" />
- <link rel="prev" title="KRB5_NT_SRV_HST" href="KRB5_NT_SRV_HST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_SRV_HST.html" title="KRB5_NT_SRV_HST"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_SRV_XHST.html" title="KRB5_NT_SRV_XHST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_SRV_INST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-srv-inst">
-<span id="krb5-nt-srv-inst-data"></span><h1>KRB5_NT_SRV_INST<a class="headerlink" href="#krb5-nt-srv-inst" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_SRV_INST">
-<code class="descname">KRB5_NT_SRV_INST</code><a class="headerlink" href="#KRB5_NT_SRV_INST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Service and other unique instance (krbtgt)</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_SRV_INST</span></code></td>
-<td><code class="docutils literal"><span class="pre">2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_SRV_INST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_SRV_HST.html" title="KRB5_NT_SRV_HST"
- >previous</a> |
- <a href="KRB5_NT_SRV_XHST.html" title="KRB5_NT_SRV_XHST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_SRV_INST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_SRV_XHST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_UID" href="KRB5_NT_UID.html" />
- <link rel="prev" title="KRB5_NT_SRV_INST" href="KRB5_NT_SRV_INST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_SRV_INST.html" title="KRB5_NT_SRV_INST"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_UID.html" title="KRB5_NT_UID"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_SRV_XHST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-srv-xhst">
-<span id="krb5-nt-srv-xhst-data"></span><h1>KRB5_NT_SRV_XHST<a class="headerlink" href="#krb5-nt-srv-xhst" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_SRV_XHST">
-<code class="descname">KRB5_NT_SRV_XHST</code><a class="headerlink" href="#KRB5_NT_SRV_XHST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Service with host as remaining components.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_SRV_XHST</span></code></td>
-<td><code class="docutils literal"><span class="pre">4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_SRV_XHST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_SRV_INST.html" title="KRB5_NT_SRV_INST"
- >previous</a> |
- <a href="KRB5_NT_UID.html" title="KRB5_NT_UID"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_SRV_XHST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_UID — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_UNKNOWN" href="KRB5_NT_UNKNOWN.html" />
- <link rel="prev" title="KRB5_NT_SRV_XHST" href="KRB5_NT_SRV_XHST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_SRV_XHST.html" title="KRB5_NT_SRV_XHST"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_UNKNOWN.html" title="KRB5_NT_UNKNOWN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_UID">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-uid">
-<span id="krb5-nt-uid-data"></span><h1>KRB5_NT_UID<a class="headerlink" href="#krb5-nt-uid" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_UID">
-<code class="descname">KRB5_NT_UID</code><a class="headerlink" href="#KRB5_NT_UID" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Unique ID.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="45%" />
-<col width="55%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_UID</span></code></td>
-<td><code class="docutils literal"><span class="pre">5</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_UID</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_SRV_XHST.html" title="KRB5_NT_SRV_XHST"
- >previous</a> |
- <a href="KRB5_NT_UNKNOWN.html" title="KRB5_NT_UNKNOWN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_UID">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_UNKNOWN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_WELLKNOWN" href="KRB5_NT_WELLKNOWN.html" />
- <link rel="prev" title="KRB5_NT_UID" href="KRB5_NT_UID.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_UID.html" title="KRB5_NT_UID"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_WELLKNOWN.html" title="KRB5_NT_WELLKNOWN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_UNKNOWN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-unknown">
-<span id="krb5-nt-unknown-data"></span><h1>KRB5_NT_UNKNOWN<a class="headerlink" href="#krb5-nt-unknown" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_UNKNOWN">
-<code class="descname">KRB5_NT_UNKNOWN</code><a class="headerlink" href="#KRB5_NT_UNKNOWN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Name type not known.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="50%" />
-<col width="50%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_UNKNOWN</span></code></td>
-<td><code class="docutils literal"><span class="pre">0</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_UNKNOWN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_UID.html" title="KRB5_NT_UID"
- >previous</a> |
- <a href="KRB5_NT_WELLKNOWN.html" title="KRB5_NT_WELLKNOWN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_UNKNOWN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_WELLKNOWN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_NT_X500_PRINCIPAL" href="KRB5_NT_X500_PRINCIPAL.html" />
- <link rel="prev" title="KRB5_NT_UNKNOWN" href="KRB5_NT_UNKNOWN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_UNKNOWN.html" title="KRB5_NT_UNKNOWN"
- accesskey="P">previous</a> |
- <a href="KRB5_NT_X500_PRINCIPAL.html" title="KRB5_NT_X500_PRINCIPAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_WELLKNOWN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-wellknown">
-<span id="krb5-nt-wellknown-data"></span><h1>KRB5_NT_WELLKNOWN<a class="headerlink" href="#krb5-nt-wellknown" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_WELLKNOWN">
-<code class="descname">KRB5_NT_WELLKNOWN</code><a class="headerlink" href="#KRB5_NT_WELLKNOWN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Well-known (special) principal.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_WELLKNOWN</span></code></td>
-<td><code class="docutils literal"><span class="pre">11</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_WELLKNOWN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_UNKNOWN.html" title="KRB5_NT_UNKNOWN"
- >previous</a> |
- <a href="KRB5_NT_X500_PRINCIPAL.html" title="KRB5_NT_X500_PRINCIPAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_WELLKNOWN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_NT_X500_PRINCIPAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_ATTRIBUTES_INFO" href="KRB5_PAC_ATTRIBUTES_INFO.html" />
- <link rel="prev" title="KRB5_NT_WELLKNOWN" href="KRB5_NT_WELLKNOWN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_WELLKNOWN.html" title="KRB5_NT_WELLKNOWN"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_ATTRIBUTES_INFO.html" title="KRB5_PAC_ATTRIBUTES_INFO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_X500_PRINCIPAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-nt-x500-principal">
-<span id="krb5-nt-x500-principal-data"></span><h1>KRB5_NT_X500_PRINCIPAL<a class="headerlink" href="#krb5-nt-x500-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_NT_X500_PRINCIPAL">
-<code class="descname">KRB5_NT_X500_PRINCIPAL</code><a class="headerlink" href="#KRB5_NT_X500_PRINCIPAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>PKINIT.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_NT_X500_PRINCIPAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">6</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_NT_X500_PRINCIPAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_WELLKNOWN.html" title="KRB5_NT_WELLKNOWN"
- >previous</a> |
- <a href="KRB5_PAC_ATTRIBUTES_INFO.html" title="KRB5_PAC_ATTRIBUTES_INFO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_NT_X500_PRINCIPAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_ATTRIBUTES_INFO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_CLIENT_INFO" href="KRB5_PAC_CLIENT_INFO.html" />
- <link rel="prev" title="KRB5_NT_X500_PRINCIPAL" href="KRB5_NT_X500_PRINCIPAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_NT_X500_PRINCIPAL.html" title="KRB5_NT_X500_PRINCIPAL"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_CLIENT_INFO.html" title="KRB5_PAC_CLIENT_INFO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_ATTRIBUTES_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-attributes-info">
-<span id="krb5-pac-attributes-info-data"></span><h1>KRB5_PAC_ATTRIBUTES_INFO<a class="headerlink" href="#krb5-pac-attributes-info" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_ATTRIBUTES_INFO">
-<code class="descname">KRB5_PAC_ATTRIBUTES_INFO</code><a class="headerlink" href="#KRB5_PAC_ATTRIBUTES_INFO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>PAC attributes.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_ATTRIBUTES_INFO</span></code></td>
-<td><code class="docutils literal"><span class="pre">17</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_ATTRIBUTES_INFO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_NT_X500_PRINCIPAL.html" title="KRB5_NT_X500_PRINCIPAL"
- >previous</a> |
- <a href="KRB5_PAC_CLIENT_INFO.html" title="KRB5_PAC_CLIENT_INFO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_ATTRIBUTES_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_CLIENT_CLAIMS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_CREDENTIALS_INFO" href="KRB5_PAC_CREDENTIALS_INFO.html" />
- <link rel="prev" title="KRB5_PAC_CLIENT_INFO" href="KRB5_PAC_CLIENT_INFO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_CLIENT_INFO.html" title="KRB5_PAC_CLIENT_INFO"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_CREDENTIALS_INFO.html" title="KRB5_PAC_CREDENTIALS_INFO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_CLIENT_CLAIMS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-client-claims">
-<span id="krb5-pac-client-claims-data"></span><h1>KRB5_PAC_CLIENT_CLAIMS<a class="headerlink" href="#krb5-pac-client-claims" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_CLIENT_CLAIMS">
-<code class="descname">KRB5_PAC_CLIENT_CLAIMS</code><a class="headerlink" href="#KRB5_PAC_CLIENT_CLAIMS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Client claims information.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_CLIENT_CLAIMS</span></code></td>
-<td><code class="docutils literal"><span class="pre">13</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_CLIENT_CLAIMS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_CLIENT_INFO.html" title="KRB5_PAC_CLIENT_INFO"
- >previous</a> |
- <a href="KRB5_PAC_CREDENTIALS_INFO.html" title="KRB5_PAC_CREDENTIALS_INFO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_CLIENT_CLAIMS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_CLIENT_INFO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_CLIENT_CLAIMS" href="KRB5_PAC_CLIENT_CLAIMS.html" />
- <link rel="prev" title="KRB5_PAC_ATTRIBUTES_INFO" href="KRB5_PAC_ATTRIBUTES_INFO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_ATTRIBUTES_INFO.html" title="KRB5_PAC_ATTRIBUTES_INFO"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_CLIENT_CLAIMS.html" title="KRB5_PAC_CLIENT_CLAIMS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_CLIENT_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-client-info">
-<span id="krb5-pac-client-info-data"></span><h1>KRB5_PAC_CLIENT_INFO<a class="headerlink" href="#krb5-pac-client-info" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_CLIENT_INFO">
-<code class="descname">KRB5_PAC_CLIENT_INFO</code><a class="headerlink" href="#KRB5_PAC_CLIENT_INFO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Client name and ticket info.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_CLIENT_INFO</span></code></td>
-<td><code class="docutils literal"><span class="pre">10</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_CLIENT_INFO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_ATTRIBUTES_INFO.html" title="KRB5_PAC_ATTRIBUTES_INFO"
- >previous</a> |
- <a href="KRB5_PAC_CLIENT_CLAIMS.html" title="KRB5_PAC_CLIENT_CLAIMS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_CLIENT_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_CREDENTIALS_INFO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_DELEGATION_INFO" href="KRB5_PAC_DELEGATION_INFO.html" />
- <link rel="prev" title="KRB5_PAC_CLIENT_CLAIMS" href="KRB5_PAC_CLIENT_CLAIMS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_CLIENT_CLAIMS.html" title="KRB5_PAC_CLIENT_CLAIMS"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_DELEGATION_INFO.html" title="KRB5_PAC_DELEGATION_INFO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_CREDENTIALS_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-credentials-info">
-<span id="krb5-pac-credentials-info-data"></span><h1>KRB5_PAC_CREDENTIALS_INFO<a class="headerlink" href="#krb5-pac-credentials-info" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_CREDENTIALS_INFO">
-<code class="descname">KRB5_PAC_CREDENTIALS_INFO</code><a class="headerlink" href="#KRB5_PAC_CREDENTIALS_INFO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Credentials information.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_CREDENTIALS_INFO</span></code></td>
-<td><code class="docutils literal"><span class="pre">2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_CREDENTIALS_INFO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_CLIENT_CLAIMS.html" title="KRB5_PAC_CLIENT_CLAIMS"
- >previous</a> |
- <a href="KRB5_PAC_DELEGATION_INFO.html" title="KRB5_PAC_DELEGATION_INFO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_CREDENTIALS_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_DELEGATION_INFO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_DEVICE_CLAIMS" href="KRB5_PAC_DEVICE_CLAIMS.html" />
- <link rel="prev" title="KRB5_PAC_CREDENTIALS_INFO" href="KRB5_PAC_CREDENTIALS_INFO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_CREDENTIALS_INFO.html" title="KRB5_PAC_CREDENTIALS_INFO"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_DEVICE_CLAIMS.html" title="KRB5_PAC_DEVICE_CLAIMS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_DELEGATION_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-delegation-info">
-<span id="krb5-pac-delegation-info-data"></span><h1>KRB5_PAC_DELEGATION_INFO<a class="headerlink" href="#krb5-pac-delegation-info" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_DELEGATION_INFO">
-<code class="descname">KRB5_PAC_DELEGATION_INFO</code><a class="headerlink" href="#KRB5_PAC_DELEGATION_INFO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Constrained delegation info.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_DELEGATION_INFO</span></code></td>
-<td><code class="docutils literal"><span class="pre">11</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_DELEGATION_INFO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_CREDENTIALS_INFO.html" title="KRB5_PAC_CREDENTIALS_INFO"
- >previous</a> |
- <a href="KRB5_PAC_DEVICE_CLAIMS.html" title="KRB5_PAC_DEVICE_CLAIMS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_DELEGATION_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_DEVICE_CLAIMS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_DEVICE_INFO" href="KRB5_PAC_DEVICE_INFO.html" />
- <link rel="prev" title="KRB5_PAC_DELEGATION_INFO" href="KRB5_PAC_DELEGATION_INFO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_DELEGATION_INFO.html" title="KRB5_PAC_DELEGATION_INFO"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_DEVICE_INFO.html" title="KRB5_PAC_DEVICE_INFO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_DEVICE_CLAIMS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-device-claims">
-<span id="krb5-pac-device-claims-data"></span><h1>KRB5_PAC_DEVICE_CLAIMS<a class="headerlink" href="#krb5-pac-device-claims" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_DEVICE_CLAIMS">
-<code class="descname">KRB5_PAC_DEVICE_CLAIMS</code><a class="headerlink" href="#KRB5_PAC_DEVICE_CLAIMS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Device claims information.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_DEVICE_CLAIMS</span></code></td>
-<td><code class="docutils literal"><span class="pre">15</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_DEVICE_CLAIMS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_DELEGATION_INFO.html" title="KRB5_PAC_DELEGATION_INFO"
- >previous</a> |
- <a href="KRB5_PAC_DEVICE_INFO.html" title="KRB5_PAC_DEVICE_INFO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_DEVICE_CLAIMS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_DEVICE_INFO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_LOGON_INFO" href="KRB5_PAC_LOGON_INFO.html" />
- <link rel="prev" title="KRB5_PAC_DEVICE_CLAIMS" href="KRB5_PAC_DEVICE_CLAIMS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_DEVICE_CLAIMS.html" title="KRB5_PAC_DEVICE_CLAIMS"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_LOGON_INFO.html" title="KRB5_PAC_LOGON_INFO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_DEVICE_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-device-info">
-<span id="krb5-pac-device-info-data"></span><h1>KRB5_PAC_DEVICE_INFO<a class="headerlink" href="#krb5-pac-device-info" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_DEVICE_INFO">
-<code class="descname">KRB5_PAC_DEVICE_INFO</code><a class="headerlink" href="#KRB5_PAC_DEVICE_INFO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Device information.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_DEVICE_INFO</span></code></td>
-<td><code class="docutils literal"><span class="pre">14</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_DEVICE_INFO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_DEVICE_CLAIMS.html" title="KRB5_PAC_DEVICE_CLAIMS"
- >previous</a> |
- <a href="KRB5_PAC_LOGON_INFO.html" title="KRB5_PAC_LOGON_INFO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_DEVICE_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_LOGON_INFO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_PRIVSVR_CHECKSUM" href="KRB5_PAC_PRIVSVR_CHECKSUM.html" />
- <link rel="prev" title="KRB5_PAC_DEVICE_INFO" href="KRB5_PAC_DEVICE_INFO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_DEVICE_INFO.html" title="KRB5_PAC_DEVICE_INFO"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_PRIVSVR_CHECKSUM.html" title="KRB5_PAC_PRIVSVR_CHECKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_LOGON_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-logon-info">
-<span id="krb5-pac-logon-info-data"></span><h1>KRB5_PAC_LOGON_INFO<a class="headerlink" href="#krb5-pac-logon-info" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_LOGON_INFO">
-<code class="descname">KRB5_PAC_LOGON_INFO</code><a class="headerlink" href="#KRB5_PAC_LOGON_INFO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Logon information.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_LOGON_INFO</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_LOGON_INFO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_DEVICE_INFO.html" title="KRB5_PAC_DEVICE_INFO"
- >previous</a> |
- <a href="KRB5_PAC_PRIVSVR_CHECKSUM.html" title="KRB5_PAC_PRIVSVR_CHECKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_LOGON_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_PRIVSVR_CHECKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_REQUESTOR" href="KRB5_PAC_REQUESTOR.html" />
- <link rel="prev" title="KRB5_PAC_LOGON_INFO" href="KRB5_PAC_LOGON_INFO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_LOGON_INFO.html" title="KRB5_PAC_LOGON_INFO"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_REQUESTOR.html" title="KRB5_PAC_REQUESTOR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_PRIVSVR_CHECKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-privsvr-checksum">
-<span id="krb5-pac-privsvr-checksum-data"></span><h1>KRB5_PAC_PRIVSVR_CHECKSUM<a class="headerlink" href="#krb5-pac-privsvr-checksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_PRIVSVR_CHECKSUM">
-<code class="descname">KRB5_PAC_PRIVSVR_CHECKSUM</code><a class="headerlink" href="#KRB5_PAC_PRIVSVR_CHECKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>KDC checksum.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_PRIVSVR_CHECKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">7</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_PRIVSVR_CHECKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_LOGON_INFO.html" title="KRB5_PAC_LOGON_INFO"
- >previous</a> |
- <a href="KRB5_PAC_REQUESTOR.html" title="KRB5_PAC_REQUESTOR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_PRIVSVR_CHECKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_REQUESTOR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_SERVER_CHECKSUM" href="KRB5_PAC_SERVER_CHECKSUM.html" />
- <link rel="prev" title="KRB5_PAC_PRIVSVR_CHECKSUM" href="KRB5_PAC_PRIVSVR_CHECKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_PRIVSVR_CHECKSUM.html" title="KRB5_PAC_PRIVSVR_CHECKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_SERVER_CHECKSUM.html" title="KRB5_PAC_SERVER_CHECKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_REQUESTOR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-requestor">
-<span id="krb5-pac-requestor-data"></span><h1>KRB5_PAC_REQUESTOR<a class="headerlink" href="#krb5-pac-requestor" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_REQUESTOR">
-<code class="descname">KRB5_PAC_REQUESTOR</code><a class="headerlink" href="#KRB5_PAC_REQUESTOR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>PAC requestor SID.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="53%" />
-<col width="47%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_REQUESTOR</span></code></td>
-<td><code class="docutils literal"><span class="pre">18</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_REQUESTOR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_PRIVSVR_CHECKSUM.html" title="KRB5_PAC_PRIVSVR_CHECKSUM"
- >previous</a> |
- <a href="KRB5_PAC_SERVER_CHECKSUM.html" title="KRB5_PAC_SERVER_CHECKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_REQUESTOR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_SERVER_CHECKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_TICKET_CHECKSUM" href="KRB5_PAC_TICKET_CHECKSUM.html" />
- <link rel="prev" title="KRB5_PAC_REQUESTOR" href="KRB5_PAC_REQUESTOR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_REQUESTOR.html" title="KRB5_PAC_REQUESTOR"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_TICKET_CHECKSUM.html" title="KRB5_PAC_TICKET_CHECKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_SERVER_CHECKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-server-checksum">
-<span id="krb5-pac-server-checksum-data"></span><h1>KRB5_PAC_SERVER_CHECKSUM<a class="headerlink" href="#krb5-pac-server-checksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_SERVER_CHECKSUM">
-<code class="descname">KRB5_PAC_SERVER_CHECKSUM</code><a class="headerlink" href="#KRB5_PAC_SERVER_CHECKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Server checksum.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_SERVER_CHECKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">6</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_SERVER_CHECKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_REQUESTOR.html" title="KRB5_PAC_REQUESTOR"
- >previous</a> |
- <a href="KRB5_PAC_TICKET_CHECKSUM.html" title="KRB5_PAC_TICKET_CHECKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_SERVER_CHECKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_TICKET_CHECKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PAC_UPN_DNS_INFO" href="KRB5_PAC_UPN_DNS_INFO.html" />
- <link rel="prev" title="KRB5_PAC_SERVER_CHECKSUM" href="KRB5_PAC_SERVER_CHECKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_SERVER_CHECKSUM.html" title="KRB5_PAC_SERVER_CHECKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_PAC_UPN_DNS_INFO.html" title="KRB5_PAC_UPN_DNS_INFO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_TICKET_CHECKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-ticket-checksum">
-<span id="krb5-pac-ticket-checksum-data"></span><h1>KRB5_PAC_TICKET_CHECKSUM<a class="headerlink" href="#krb5-pac-ticket-checksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_TICKET_CHECKSUM">
-<code class="descname">KRB5_PAC_TICKET_CHECKSUM</code><a class="headerlink" href="#KRB5_PAC_TICKET_CHECKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Ticket checksum.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_TICKET_CHECKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">16</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_TICKET_CHECKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_SERVER_CHECKSUM.html" title="KRB5_PAC_SERVER_CHECKSUM"
- >previous</a> |
- <a href="KRB5_PAC_UPN_DNS_INFO.html" title="KRB5_PAC_UPN_DNS_INFO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_TICKET_CHECKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PAC_UPN_DNS_INFO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_AFS3_SALT" href="KRB5_PADATA_AFS3_SALT.html" />
- <link rel="prev" title="KRB5_PAC_TICKET_CHECKSUM" href="KRB5_PAC_TICKET_CHECKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_TICKET_CHECKSUM.html" title="KRB5_PAC_TICKET_CHECKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_AFS3_SALT.html" title="KRB5_PADATA_AFS3_SALT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_UPN_DNS_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac-upn-dns-info">
-<span id="krb5-pac-upn-dns-info-data"></span><h1>KRB5_PAC_UPN_DNS_INFO<a class="headerlink" href="#krb5-pac-upn-dns-info" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PAC_UPN_DNS_INFO">
-<code class="descname">KRB5_PAC_UPN_DNS_INFO</code><a class="headerlink" href="#KRB5_PAC_UPN_DNS_INFO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>User principal name and DNS info.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PAC_UPN_DNS_INFO</span></code></td>
-<td><code class="docutils literal"><span class="pre">12</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PAC_UPN_DNS_INFO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_TICKET_CHECKSUM.html" title="KRB5_PAC_TICKET_CHECKSUM"
- >previous</a> |
- <a href="KRB5_PADATA_AFS3_SALT.html" title="KRB5_PADATA_AFS3_SALT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PAC_UPN_DNS_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_AFS3_SALT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_AP_REQ" href="KRB5_PADATA_AP_REQ.html" />
- <link rel="prev" title="KRB5_PAC_UPN_DNS_INFO" href="KRB5_PAC_UPN_DNS_INFO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PAC_UPN_DNS_INFO.html" title="KRB5_PAC_UPN_DNS_INFO"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_AP_REQ.html" title="KRB5_PADATA_AP_REQ"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_AFS3_SALT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-afs3-salt">
-<span id="krb5-padata-afs3-salt-data"></span><h1>KRB5_PADATA_AFS3_SALT<a class="headerlink" href="#krb5-padata-afs3-salt" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_AFS3_SALT">
-<code class="descname">KRB5_PADATA_AFS3_SALT</code><a class="headerlink" href="#KRB5_PADATA_AFS3_SALT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Cygnus.</p>
-<p>RFC 4120, 3961</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_AFS3_SALT</span></code></td>
-<td><code class="docutils literal"><span class="pre">10</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_AFS3_SALT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PAC_UPN_DNS_INFO.html" title="KRB5_PAC_UPN_DNS_INFO"
- >previous</a> |
- <a href="KRB5_PADATA_AP_REQ.html" title="KRB5_PADATA_AP_REQ"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_AFS3_SALT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_AP_REQ — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_AS_CHECKSUM" href="KRB5_PADATA_AS_CHECKSUM.html" />
- <link rel="prev" title="KRB5_PADATA_AFS3_SALT" href="KRB5_PADATA_AFS3_SALT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_AFS3_SALT.html" title="KRB5_PADATA_AFS3_SALT"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_AS_CHECKSUM.html" title="KRB5_PADATA_AS_CHECKSUM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_AP_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-ap-req">
-<span id="krb5-padata-ap-req-data"></span><h1>KRB5_PADATA_AP_REQ<a class="headerlink" href="#krb5-padata-ap-req" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_AP_REQ">
-<code class="descname">KRB5_PADATA_AP_REQ</code><a class="headerlink" href="#KRB5_PADATA_AP_REQ" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="53%" />
-<col width="47%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_AP_REQ</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_AP_REQ</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_AFS3_SALT.html" title="KRB5_PADATA_AFS3_SALT"
- >previous</a> |
- <a href="KRB5_PADATA_AS_CHECKSUM.html" title="KRB5_PADATA_AS_CHECKSUM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_AP_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_AS_CHECKSUM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_AS_FRESHNESS" href="KRB5_PADATA_AS_FRESHNESS.html" />
- <link rel="prev" title="KRB5_PADATA_AP_REQ" href="KRB5_PADATA_AP_REQ.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_AP_REQ.html" title="KRB5_PADATA_AP_REQ"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_AS_FRESHNESS.html" title="KRB5_PADATA_AS_FRESHNESS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_AS_CHECKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-as-checksum">
-<span id="krb5-padata-as-checksum-data"></span><h1>KRB5_PADATA_AS_CHECKSUM<a class="headerlink" href="#krb5-padata-as-checksum" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_AS_CHECKSUM">
-<code class="descname">KRB5_PADATA_AS_CHECKSUM</code><a class="headerlink" href="#KRB5_PADATA_AS_CHECKSUM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>AS checksum.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_AS_CHECKSUM</span></code></td>
-<td><code class="docutils literal"><span class="pre">132</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_AS_CHECKSUM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_AP_REQ.html" title="KRB5_PADATA_AP_REQ"
- >previous</a> |
- <a href="KRB5_PADATA_AS_FRESHNESS.html" title="KRB5_PADATA_AS_FRESHNESS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_AS_CHECKSUM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_AS_FRESHNESS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_ENCRYPTED_CHALLENGE" href="KRB5_PADATA_ENCRYPTED_CHALLENGE.html" />
- <link rel="prev" title="KRB5_PADATA_AS_CHECKSUM" href="KRB5_PADATA_AS_CHECKSUM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_AS_CHECKSUM.html" title="KRB5_PADATA_AS_CHECKSUM"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_ENCRYPTED_CHALLENGE.html" title="KRB5_PADATA_ENCRYPTED_CHALLENGE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_AS_FRESHNESS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-as-freshness">
-<span id="krb5-padata-as-freshness-data"></span><h1>KRB5_PADATA_AS_FRESHNESS<a class="headerlink" href="#krb5-padata-as-freshness" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_AS_FRESHNESS">
-<code class="descname">KRB5_PADATA_AS_FRESHNESS</code><a class="headerlink" href="#KRB5_PADATA_AS_FRESHNESS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 8070.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_AS_FRESHNESS</span></code></td>
-<td><code class="docutils literal"><span class="pre">150</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_AS_FRESHNESS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_AS_CHECKSUM.html" title="KRB5_PADATA_AS_CHECKSUM"
- >previous</a> |
- <a href="KRB5_PADATA_ENCRYPTED_CHALLENGE.html" title="KRB5_PADATA_ENCRYPTED_CHALLENGE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_AS_FRESHNESS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_ENCRYPTED_CHALLENGE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_ENC_SANDIA_SECURID" href="KRB5_PADATA_ENC_SANDIA_SECURID.html" />
- <link rel="prev" title="KRB5_PADATA_AS_FRESHNESS" href="KRB5_PADATA_AS_FRESHNESS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_AS_FRESHNESS.html" title="KRB5_PADATA_AS_FRESHNESS"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_ENC_SANDIA_SECURID.html" title="KRB5_PADATA_ENC_SANDIA_SECURID"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ENCRYPTED_CHALLENGE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-encrypted-challenge">
-<span id="krb5-padata-encrypted-challenge-data"></span><h1>KRB5_PADATA_ENCRYPTED_CHALLENGE<a class="headerlink" href="#krb5-padata-encrypted-challenge" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_ENCRYPTED_CHALLENGE">
-<code class="descname">KRB5_PADATA_ENCRYPTED_CHALLENGE</code><a class="headerlink" href="#KRB5_PADATA_ENCRYPTED_CHALLENGE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6113.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_ENCRYPTED_CHALLENGE</span></code></td>
-<td><code class="docutils literal"><span class="pre">138</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_ENCRYPTED_CHALLENGE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_AS_FRESHNESS.html" title="KRB5_PADATA_AS_FRESHNESS"
- >previous</a> |
- <a href="KRB5_PADATA_ENC_SANDIA_SECURID.html" title="KRB5_PADATA_ENC_SANDIA_SECURID"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ENCRYPTED_CHALLENGE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_ENC_SANDIA_SECURID — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_ENC_TIMESTAMP" href="KRB5_PADATA_ENC_TIMESTAMP.html" />
- <link rel="prev" title="KRB5_PADATA_ENCRYPTED_CHALLENGE" href="KRB5_PADATA_ENCRYPTED_CHALLENGE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_ENCRYPTED_CHALLENGE.html" title="KRB5_PADATA_ENCRYPTED_CHALLENGE"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_ENC_TIMESTAMP.html" title="KRB5_PADATA_ENC_TIMESTAMP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ENC_SANDIA_SECURID">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-enc-sandia-securid">
-<span id="krb5-padata-enc-sandia-securid-data"></span><h1>KRB5_PADATA_ENC_SANDIA_SECURID<a class="headerlink" href="#krb5-padata-enc-sandia-securid" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_ENC_SANDIA_SECURID">
-<code class="descname">KRB5_PADATA_ENC_SANDIA_SECURID</code><a class="headerlink" href="#KRB5_PADATA_ENC_SANDIA_SECURID" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>SecurId passcode.</p>
-<p>RFC 4120</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_ENC_SANDIA_SECURID</span></code></td>
-<td><code class="docutils literal"><span class="pre">6</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_ENC_SANDIA_SECURID</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_ENCRYPTED_CHALLENGE.html" title="KRB5_PADATA_ENCRYPTED_CHALLENGE"
- >previous</a> |
- <a href="KRB5_PADATA_ENC_TIMESTAMP.html" title="KRB5_PADATA_ENC_TIMESTAMP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ENC_SANDIA_SECURID">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_ENC_TIMESTAMP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_ENC_UNIX_TIME" href="KRB5_PADATA_ENC_UNIX_TIME.html" />
- <link rel="prev" title="KRB5_PADATA_ENC_SANDIA_SECURID" href="KRB5_PADATA_ENC_SANDIA_SECURID.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_ENC_SANDIA_SECURID.html" title="KRB5_PADATA_ENC_SANDIA_SECURID"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_ENC_UNIX_TIME.html" title="KRB5_PADATA_ENC_UNIX_TIME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ENC_TIMESTAMP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-enc-timestamp">
-<span id="krb5-padata-enc-timestamp-data"></span><h1>KRB5_PADATA_ENC_TIMESTAMP<a class="headerlink" href="#krb5-padata-enc-timestamp" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_ENC_TIMESTAMP">
-<code class="descname">KRB5_PADATA_ENC_TIMESTAMP</code><a class="headerlink" href="#KRB5_PADATA_ENC_TIMESTAMP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 4120.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_ENC_TIMESTAMP</span></code></td>
-<td><code class="docutils literal"><span class="pre">2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_ENC_TIMESTAMP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_ENC_SANDIA_SECURID.html" title="KRB5_PADATA_ENC_SANDIA_SECURID"
- >previous</a> |
- <a href="KRB5_PADATA_ENC_UNIX_TIME.html" title="KRB5_PADATA_ENC_UNIX_TIME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ENC_TIMESTAMP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_ENC_UNIX_TIME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_ETYPE_INFO" href="KRB5_PADATA_ETYPE_INFO.html" />
- <link rel="prev" title="KRB5_PADATA_ENC_TIMESTAMP" href="KRB5_PADATA_ENC_TIMESTAMP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_ENC_TIMESTAMP.html" title="KRB5_PADATA_ENC_TIMESTAMP"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_ETYPE_INFO.html" title="KRB5_PADATA_ETYPE_INFO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ENC_UNIX_TIME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-enc-unix-time">
-<span id="krb5-padata-enc-unix-time-data"></span><h1>KRB5_PADATA_ENC_UNIX_TIME<a class="headerlink" href="#krb5-padata-enc-unix-time" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_ENC_UNIX_TIME">
-<code class="descname">KRB5_PADATA_ENC_UNIX_TIME</code><a class="headerlink" href="#KRB5_PADATA_ENC_UNIX_TIME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>timestamp encrypted in key.</p>
-<p>RFC 4120</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_ENC_UNIX_TIME</span></code></td>
-<td><code class="docutils literal"><span class="pre">5</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_ENC_UNIX_TIME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_ENC_TIMESTAMP.html" title="KRB5_PADATA_ENC_TIMESTAMP"
- >previous</a> |
- <a href="KRB5_PADATA_ETYPE_INFO.html" title="KRB5_PADATA_ETYPE_INFO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ENC_UNIX_TIME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_ETYPE_INFO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_ETYPE_INFO2" href="KRB5_PADATA_ETYPE_INFO2.html" />
- <link rel="prev" title="KRB5_PADATA_ENC_UNIX_TIME" href="KRB5_PADATA_ENC_UNIX_TIME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_ENC_UNIX_TIME.html" title="KRB5_PADATA_ENC_UNIX_TIME"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_ETYPE_INFO2.html" title="KRB5_PADATA_ETYPE_INFO2"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ETYPE_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-etype-info">
-<span id="krb5-padata-etype-info-data"></span><h1>KRB5_PADATA_ETYPE_INFO<a class="headerlink" href="#krb5-padata-etype-info" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_ETYPE_INFO">
-<code class="descname">KRB5_PADATA_ETYPE_INFO</code><a class="headerlink" href="#KRB5_PADATA_ETYPE_INFO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Etype info for preauth.</p>
-<p>RFC 4120</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_ETYPE_INFO</span></code></td>
-<td><code class="docutils literal"><span class="pre">11</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_ETYPE_INFO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_ENC_UNIX_TIME.html" title="KRB5_PADATA_ENC_UNIX_TIME"
- >previous</a> |
- <a href="KRB5_PADATA_ETYPE_INFO2.html" title="KRB5_PADATA_ETYPE_INFO2"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ETYPE_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_ETYPE_INFO2 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_FOR_USER" href="KRB5_PADATA_FOR_USER.html" />
- <link rel="prev" title="KRB5_PADATA_ETYPE_INFO" href="KRB5_PADATA_ETYPE_INFO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_ETYPE_INFO.html" title="KRB5_PADATA_ETYPE_INFO"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_FOR_USER.html" title="KRB5_PADATA_FOR_USER"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ETYPE_INFO2">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-etype-info2">
-<span id="krb5-padata-etype-info2-data"></span><h1>KRB5_PADATA_ETYPE_INFO2<a class="headerlink" href="#krb5-padata-etype-info2" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_ETYPE_INFO2">
-<code class="descname">KRB5_PADATA_ETYPE_INFO2</code><a class="headerlink" href="#KRB5_PADATA_ETYPE_INFO2" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 4120.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_ETYPE_INFO2</span></code></td>
-<td><code class="docutils literal"><span class="pre">19</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_ETYPE_INFO2</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_ETYPE_INFO.html" title="KRB5_PADATA_ETYPE_INFO"
- >previous</a> |
- <a href="KRB5_PADATA_FOR_USER.html" title="KRB5_PADATA_FOR_USER"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_ETYPE_INFO2">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_FOR_USER — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_FX_COOKIE" href="KRB5_PADATA_FX_COOKIE.html" />
- <link rel="prev" title="KRB5_PADATA_ETYPE_INFO2" href="KRB5_PADATA_ETYPE_INFO2.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_ETYPE_INFO2.html" title="KRB5_PADATA_ETYPE_INFO2"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_FX_COOKIE.html" title="KRB5_PADATA_FX_COOKIE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_FOR_USER">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-for-user">
-<span id="krb5-padata-for-user-data"></span><h1>KRB5_PADATA_FOR_USER<a class="headerlink" href="#krb5-padata-for-user" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_FOR_USER">
-<code class="descname">KRB5_PADATA_FOR_USER</code><a class="headerlink" href="#KRB5_PADATA_FOR_USER" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>username protocol transition request</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_FOR_USER</span></code></td>
-<td><code class="docutils literal"><span class="pre">129</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_FOR_USER</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_ETYPE_INFO2.html" title="KRB5_PADATA_ETYPE_INFO2"
- >previous</a> |
- <a href="KRB5_PADATA_FX_COOKIE.html" title="KRB5_PADATA_FX_COOKIE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_FOR_USER">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_FX_COOKIE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_FX_ERROR" href="KRB5_PADATA_FX_ERROR.html" />
- <link rel="prev" title="KRB5_PADATA_FOR_USER" href="KRB5_PADATA_FOR_USER.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_FOR_USER.html" title="KRB5_PADATA_FOR_USER"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_FX_ERROR.html" title="KRB5_PADATA_FX_ERROR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_FX_COOKIE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-fx-cookie">
-<span id="krb5-padata-fx-cookie-data"></span><h1>KRB5_PADATA_FX_COOKIE<a class="headerlink" href="#krb5-padata-fx-cookie" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_FX_COOKIE">
-<code class="descname">KRB5_PADATA_FX_COOKIE</code><a class="headerlink" href="#KRB5_PADATA_FX_COOKIE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6113.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_FX_COOKIE</span></code></td>
-<td><code class="docutils literal"><span class="pre">133</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_FX_COOKIE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_FOR_USER.html" title="KRB5_PADATA_FOR_USER"
- >previous</a> |
- <a href="KRB5_PADATA_FX_ERROR.html" title="KRB5_PADATA_FX_ERROR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_FX_COOKIE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_FX_ERROR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_FX_FAST" href="KRB5_PADATA_FX_FAST.html" />
- <link rel="prev" title="KRB5_PADATA_FX_COOKIE" href="KRB5_PADATA_FX_COOKIE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_FX_COOKIE.html" title="KRB5_PADATA_FX_COOKIE"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_FX_FAST.html" title="KRB5_PADATA_FX_FAST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_FX_ERROR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-fx-error">
-<span id="krb5-padata-fx-error-data"></span><h1>KRB5_PADATA_FX_ERROR<a class="headerlink" href="#krb5-padata-fx-error" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_FX_ERROR">
-<code class="descname">KRB5_PADATA_FX_ERROR</code><a class="headerlink" href="#KRB5_PADATA_FX_ERROR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6113.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_FX_ERROR</span></code></td>
-<td><code class="docutils literal"><span class="pre">137</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_FX_ERROR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_FX_COOKIE.html" title="KRB5_PADATA_FX_COOKIE"
- >previous</a> |
- <a href="KRB5_PADATA_FX_FAST.html" title="KRB5_PADATA_FX_FAST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_FX_ERROR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_FX_FAST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_GET_FROM_TYPED_DATA" href="KRB5_PADATA_GET_FROM_TYPED_DATA.html" />
- <link rel="prev" title="KRB5_PADATA_FX_ERROR" href="KRB5_PADATA_FX_ERROR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_FX_ERROR.html" title="KRB5_PADATA_FX_ERROR"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_GET_FROM_TYPED_DATA.html" title="KRB5_PADATA_GET_FROM_TYPED_DATA"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_FX_FAST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-fx-fast">
-<span id="krb5-padata-fx-fast-data"></span><h1>KRB5_PADATA_FX_FAST<a class="headerlink" href="#krb5-padata-fx-fast" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_FX_FAST">
-<code class="descname">KRB5_PADATA_FX_FAST</code><a class="headerlink" href="#KRB5_PADATA_FX_FAST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6113.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_FX_FAST</span></code></td>
-<td><code class="docutils literal"><span class="pre">136</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_FX_FAST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_FX_ERROR.html" title="KRB5_PADATA_FX_ERROR"
- >previous</a> |
- <a href="KRB5_PADATA_GET_FROM_TYPED_DATA.html" title="KRB5_PADATA_GET_FROM_TYPED_DATA"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_FX_FAST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_GET_FROM_TYPED_DATA — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_NONE" href="KRB5_PADATA_NONE.html" />
- <link rel="prev" title="KRB5_PADATA_FX_FAST" href="KRB5_PADATA_FX_FAST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_FX_FAST.html" title="KRB5_PADATA_FX_FAST"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_NONE.html" title="KRB5_PADATA_NONE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_GET_FROM_TYPED_DATA">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-get-from-typed-data">
-<span id="krb5-padata-get-from-typed-data-data"></span><h1>KRB5_PADATA_GET_FROM_TYPED_DATA<a class="headerlink" href="#krb5-padata-get-from-typed-data" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_GET_FROM_TYPED_DATA">
-<code class="descname">KRB5_PADATA_GET_FROM_TYPED_DATA</code><a class="headerlink" href="#KRB5_PADATA_GET_FROM_TYPED_DATA" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Embedded in typed data.</p>
-<p>RFC 4120</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_GET_FROM_TYPED_DATA</span></code></td>
-<td><code class="docutils literal"><span class="pre">22</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_GET_FROM_TYPED_DATA</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_FX_FAST.html" title="KRB5_PADATA_FX_FAST"
- >previous</a> |
- <a href="KRB5_PADATA_NONE.html" title="KRB5_PADATA_NONE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_GET_FROM_TYPED_DATA">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_NONE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_OSF_DCE" href="KRB5_PADATA_OSF_DCE.html" />
- <link rel="prev" title="KRB5_PADATA_GET_FROM_TYPED_DATA" href="KRB5_PADATA_GET_FROM_TYPED_DATA.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_GET_FROM_TYPED_DATA.html" title="KRB5_PADATA_GET_FROM_TYPED_DATA"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_OSF_DCE.html" title="KRB5_PADATA_OSF_DCE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_NONE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-none">
-<span id="krb5-padata-none-data"></span><h1>KRB5_PADATA_NONE<a class="headerlink" href="#krb5-padata-none" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_NONE">
-<code class="descname">KRB5_PADATA_NONE</code><a class="headerlink" href="#KRB5_PADATA_NONE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_NONE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_NONE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_GET_FROM_TYPED_DATA.html" title="KRB5_PADATA_GET_FROM_TYPED_DATA"
- >previous</a> |
- <a href="KRB5_PADATA_OSF_DCE.html" title="KRB5_PADATA_OSF_DCE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_NONE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_OSF_DCE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_OTP_CHALLENGE" href="KRB5_PADATA_OTP_CHALLENGE.html" />
- <link rel="prev" title="KRB5_PADATA_NONE" href="KRB5_PADATA_NONE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_NONE.html" title="KRB5_PADATA_NONE"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_OTP_CHALLENGE.html" title="KRB5_PADATA_OTP_CHALLENGE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_OSF_DCE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-osf-dce">
-<span id="krb5-padata-osf-dce-data"></span><h1>KRB5_PADATA_OSF_DCE<a class="headerlink" href="#krb5-padata-osf-dce" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_OSF_DCE">
-<code class="descname">KRB5_PADATA_OSF_DCE</code><a class="headerlink" href="#KRB5_PADATA_OSF_DCE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>OSF DCE.</p>
-<p>RFC 4120</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_OSF_DCE</span></code></td>
-<td><code class="docutils literal"><span class="pre">8</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_OSF_DCE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_NONE.html" title="KRB5_PADATA_NONE"
- >previous</a> |
- <a href="KRB5_PADATA_OTP_CHALLENGE.html" title="KRB5_PADATA_OTP_CHALLENGE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_OSF_DCE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_OTP_CHALLENGE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_OTP_PIN_CHANGE" href="KRB5_PADATA_OTP_PIN_CHANGE.html" />
- <link rel="prev" title="KRB5_PADATA_OSF_DCE" href="KRB5_PADATA_OSF_DCE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_OSF_DCE.html" title="KRB5_PADATA_OSF_DCE"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_OTP_PIN_CHANGE.html" title="KRB5_PADATA_OTP_PIN_CHANGE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_OTP_CHALLENGE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-otp-challenge">
-<span id="krb5-padata-otp-challenge-data"></span><h1>KRB5_PADATA_OTP_CHALLENGE<a class="headerlink" href="#krb5-padata-otp-challenge" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_OTP_CHALLENGE">
-<code class="descname">KRB5_PADATA_OTP_CHALLENGE</code><a class="headerlink" href="#KRB5_PADATA_OTP_CHALLENGE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6560 section 4.1.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_OTP_CHALLENGE</span></code></td>
-<td><code class="docutils literal"><span class="pre">141</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_OTP_CHALLENGE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_OSF_DCE.html" title="KRB5_PADATA_OSF_DCE"
- >previous</a> |
- <a href="KRB5_PADATA_OTP_PIN_CHANGE.html" title="KRB5_PADATA_OTP_PIN_CHANGE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_OTP_CHALLENGE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_OTP_PIN_CHANGE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_OTP_REQUEST" href="KRB5_PADATA_OTP_REQUEST.html" />
- <link rel="prev" title="KRB5_PADATA_OTP_CHALLENGE" href="KRB5_PADATA_OTP_CHALLENGE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_OTP_CHALLENGE.html" title="KRB5_PADATA_OTP_CHALLENGE"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_OTP_REQUEST.html" title="KRB5_PADATA_OTP_REQUEST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_OTP_PIN_CHANGE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-otp-pin-change">
-<span id="krb5-padata-otp-pin-change-data"></span><h1>KRB5_PADATA_OTP_PIN_CHANGE<a class="headerlink" href="#krb5-padata-otp-pin-change" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_OTP_PIN_CHANGE">
-<code class="descname">KRB5_PADATA_OTP_PIN_CHANGE</code><a class="headerlink" href="#KRB5_PADATA_OTP_PIN_CHANGE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6560 section 4.3.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_OTP_PIN_CHANGE</span></code></td>
-<td><code class="docutils literal"><span class="pre">144</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_OTP_PIN_CHANGE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_OTP_CHALLENGE.html" title="KRB5_PADATA_OTP_CHALLENGE"
- >previous</a> |
- <a href="KRB5_PADATA_OTP_REQUEST.html" title="KRB5_PADATA_OTP_REQUEST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_OTP_PIN_CHANGE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_OTP_REQUEST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_PAC_OPTIONS" href="KRB5_PADATA_PAC_OPTIONS.html" />
- <link rel="prev" title="KRB5_PADATA_OTP_PIN_CHANGE" href="KRB5_PADATA_OTP_PIN_CHANGE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_OTP_PIN_CHANGE.html" title="KRB5_PADATA_OTP_PIN_CHANGE"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_PAC_OPTIONS.html" title="KRB5_PADATA_PAC_OPTIONS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_OTP_REQUEST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-otp-request">
-<span id="krb5-padata-otp-request-data"></span><h1>KRB5_PADATA_OTP_REQUEST<a class="headerlink" href="#krb5-padata-otp-request" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_OTP_REQUEST">
-<code class="descname">KRB5_PADATA_OTP_REQUEST</code><a class="headerlink" href="#KRB5_PADATA_OTP_REQUEST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6560 section 4.2.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_OTP_REQUEST</span></code></td>
-<td><code class="docutils literal"><span class="pre">142</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_OTP_REQUEST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_OTP_PIN_CHANGE.html" title="KRB5_PADATA_OTP_PIN_CHANGE"
- >previous</a> |
- <a href="KRB5_PADATA_PAC_OPTIONS.html" title="KRB5_PADATA_PAC_OPTIONS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_OTP_REQUEST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_PAC_OPTIONS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_PAC_REQUEST" href="KRB5_PADATA_PAC_REQUEST.html" />
- <link rel="prev" title="KRB5_PADATA_OTP_REQUEST" href="KRB5_PADATA_OTP_REQUEST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_OTP_REQUEST.html" title="KRB5_PADATA_OTP_REQUEST"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_PAC_REQUEST.html" title="KRB5_PADATA_PAC_REQUEST"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PAC_OPTIONS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-pac-options">
-<span id="krb5-padata-pac-options-data"></span><h1>KRB5_PADATA_PAC_OPTIONS<a class="headerlink" href="#krb5-padata-pac-options" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_PAC_OPTIONS">
-<code class="descname">KRB5_PADATA_PAC_OPTIONS</code><a class="headerlink" href="#KRB5_PADATA_PAC_OPTIONS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>MS-KILE and MS-SFU.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_PAC_OPTIONS</span></code></td>
-<td><code class="docutils literal"><span class="pre">167</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_PAC_OPTIONS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_OTP_REQUEST.html" title="KRB5_PADATA_OTP_REQUEST"
- >previous</a> |
- <a href="KRB5_PADATA_PAC_REQUEST.html" title="KRB5_PADATA_PAC_REQUEST"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PAC_OPTIONS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_PAC_REQUEST — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_PKINIT_KX" href="KRB5_PADATA_PKINIT_KX.html" />
- <link rel="prev" title="KRB5_PADATA_PAC_OPTIONS" href="KRB5_PADATA_PAC_OPTIONS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_PAC_OPTIONS.html" title="KRB5_PADATA_PAC_OPTIONS"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_PKINIT_KX.html" title="KRB5_PADATA_PKINIT_KX"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PAC_REQUEST">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-pac-request">
-<span id="krb5-padata-pac-request-data"></span><h1>KRB5_PADATA_PAC_REQUEST<a class="headerlink" href="#krb5-padata-pac-request" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_PAC_REQUEST">
-<code class="descname">KRB5_PADATA_PAC_REQUEST</code><a class="headerlink" href="#KRB5_PADATA_PAC_REQUEST" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>include Windows PAC</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_PAC_REQUEST</span></code></td>
-<td><code class="docutils literal"><span class="pre">128</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_PAC_REQUEST</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_PAC_OPTIONS.html" title="KRB5_PADATA_PAC_OPTIONS"
- >previous</a> |
- <a href="KRB5_PADATA_PKINIT_KX.html" title="KRB5_PADATA_PKINIT_KX"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PAC_REQUEST">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_PKINIT_KX — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_PK_AS_REP" href="KRB5_PADATA_PK_AS_REP.html" />
- <link rel="prev" title="KRB5_PADATA_PAC_REQUEST" href="KRB5_PADATA_PAC_REQUEST.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_PAC_REQUEST.html" title="KRB5_PADATA_PAC_REQUEST"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_PK_AS_REP.html" title="KRB5_PADATA_PK_AS_REP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PKINIT_KX">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-pkinit-kx">
-<span id="krb5-padata-pkinit-kx-data"></span><h1>KRB5_PADATA_PKINIT_KX<a class="headerlink" href="#krb5-padata-pkinit-kx" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_PKINIT_KX">
-<code class="descname">KRB5_PADATA_PKINIT_KX</code><a class="headerlink" href="#KRB5_PADATA_PKINIT_KX" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 6112.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_PKINIT_KX</span></code></td>
-<td><code class="docutils literal"><span class="pre">147</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_PKINIT_KX</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_PAC_REQUEST.html" title="KRB5_PADATA_PAC_REQUEST"
- >previous</a> |
- <a href="KRB5_PADATA_PK_AS_REP.html" title="KRB5_PADATA_PK_AS_REP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PKINIT_KX">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_PK_AS_REP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_PK_AS_REP_OLD" href="KRB5_PADATA_PK_AS_REP_OLD.html" />
- <link rel="prev" title="KRB5_PADATA_PKINIT_KX" href="KRB5_PADATA_PKINIT_KX.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_PKINIT_KX.html" title="KRB5_PADATA_PKINIT_KX"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_PK_AS_REP_OLD.html" title="KRB5_PADATA_PK_AS_REP_OLD"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PK_AS_REP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-pk-as-rep">
-<span id="krb5-padata-pk-as-rep-data"></span><h1>KRB5_PADATA_PK_AS_REP<a class="headerlink" href="#krb5-padata-pk-as-rep" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_PK_AS_REP">
-<code class="descname">KRB5_PADATA_PK_AS_REP</code><a class="headerlink" href="#KRB5_PADATA_PK_AS_REP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>PKINIT.</p>
-<p>RFC 4556</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_PK_AS_REP</span></code></td>
-<td><code class="docutils literal"><span class="pre">17</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_PK_AS_REP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_PKINIT_KX.html" title="KRB5_PADATA_PKINIT_KX"
- >previous</a> |
- <a href="KRB5_PADATA_PK_AS_REP_OLD.html" title="KRB5_PADATA_PK_AS_REP_OLD"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PK_AS_REP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_PK_AS_REP_OLD — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_PK_AS_REQ" href="KRB5_PADATA_PK_AS_REQ.html" />
- <link rel="prev" title="KRB5_PADATA_PK_AS_REP" href="KRB5_PADATA_PK_AS_REP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_PK_AS_REP.html" title="KRB5_PADATA_PK_AS_REP"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_PK_AS_REQ.html" title="KRB5_PADATA_PK_AS_REQ"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PK_AS_REP_OLD">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-pk-as-rep-old">
-<span id="krb5-padata-pk-as-rep-old-data"></span><h1>KRB5_PADATA_PK_AS_REP_OLD<a class="headerlink" href="#krb5-padata-pk-as-rep-old" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_PK_AS_REP_OLD">
-<code class="descname">KRB5_PADATA_PK_AS_REP_OLD</code><a class="headerlink" href="#KRB5_PADATA_PK_AS_REP_OLD" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>PKINIT.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_PK_AS_REP_OLD</span></code></td>
-<td><code class="docutils literal"><span class="pre">15</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_PK_AS_REP_OLD</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_PK_AS_REP.html" title="KRB5_PADATA_PK_AS_REP"
- >previous</a> |
- <a href="KRB5_PADATA_PK_AS_REQ.html" title="KRB5_PADATA_PK_AS_REQ"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PK_AS_REP_OLD">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_PK_AS_REQ — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_PK_AS_REQ_OLD" href="KRB5_PADATA_PK_AS_REQ_OLD.html" />
- <link rel="prev" title="KRB5_PADATA_PK_AS_REP_OLD" href="KRB5_PADATA_PK_AS_REP_OLD.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_PK_AS_REP_OLD.html" title="KRB5_PADATA_PK_AS_REP_OLD"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_PK_AS_REQ_OLD.html" title="KRB5_PADATA_PK_AS_REQ_OLD"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PK_AS_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-pk-as-req">
-<span id="krb5-padata-pk-as-req-data"></span><h1>KRB5_PADATA_PK_AS_REQ<a class="headerlink" href="#krb5-padata-pk-as-req" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_PK_AS_REQ">
-<code class="descname">KRB5_PADATA_PK_AS_REQ</code><a class="headerlink" href="#KRB5_PADATA_PK_AS_REQ" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>PKINIT.</p>
-<p>RFC 4556</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_PK_AS_REQ</span></code></td>
-<td><code class="docutils literal"><span class="pre">16</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_PK_AS_REQ</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_PK_AS_REP_OLD.html" title="KRB5_PADATA_PK_AS_REP_OLD"
- >previous</a> |
- <a href="KRB5_PADATA_PK_AS_REQ_OLD.html" title="KRB5_PADATA_PK_AS_REQ_OLD"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PK_AS_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_PK_AS_REQ_OLD — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_PW_SALT" href="KRB5_PADATA_PW_SALT.html" />
- <link rel="prev" title="KRB5_PADATA_PK_AS_REQ" href="KRB5_PADATA_PK_AS_REQ.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_PK_AS_REQ.html" title="KRB5_PADATA_PK_AS_REQ"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_PW_SALT.html" title="KRB5_PADATA_PW_SALT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PK_AS_REQ_OLD">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-pk-as-req-old">
-<span id="krb5-padata-pk-as-req-old-data"></span><h1>KRB5_PADATA_PK_AS_REQ_OLD<a class="headerlink" href="#krb5-padata-pk-as-req-old" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_PK_AS_REQ_OLD">
-<code class="descname">KRB5_PADATA_PK_AS_REQ_OLD</code><a class="headerlink" href="#KRB5_PADATA_PK_AS_REQ_OLD" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>PKINIT.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_PK_AS_REQ_OLD</span></code></td>
-<td><code class="docutils literal"><span class="pre">14</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_PK_AS_REQ_OLD</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_PK_AS_REQ.html" title="KRB5_PADATA_PK_AS_REQ"
- >previous</a> |
- <a href="KRB5_PADATA_PW_SALT.html" title="KRB5_PADATA_PW_SALT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PK_AS_REQ_OLD">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_PW_SALT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_REFERRAL" href="KRB5_PADATA_REFERRAL.html" />
- <link rel="prev" title="KRB5_PADATA_PK_AS_REQ_OLD" href="KRB5_PADATA_PK_AS_REQ_OLD.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_PK_AS_REQ_OLD.html" title="KRB5_PADATA_PK_AS_REQ_OLD"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_REFERRAL.html" title="KRB5_PADATA_REFERRAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PW_SALT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-pw-salt">
-<span id="krb5-padata-pw-salt-data"></span><h1>KRB5_PADATA_PW_SALT<a class="headerlink" href="#krb5-padata-pw-salt" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_PW_SALT">
-<code class="descname">KRB5_PADATA_PW_SALT</code><a class="headerlink" href="#KRB5_PADATA_PW_SALT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 4120.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_PW_SALT</span></code></td>
-<td><code class="docutils literal"><span class="pre">3</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_PW_SALT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_PK_AS_REQ_OLD.html" title="KRB5_PADATA_PK_AS_REQ_OLD"
- >previous</a> |
- <a href="KRB5_PADATA_REFERRAL.html" title="KRB5_PADATA_REFERRAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_PW_SALT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_REDHAT_IDP_OAUTH2 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_SVR_REFERRAL_INFO" href="KRB5_PADATA_SVR_REFERRAL_INFO.html" />
- <link rel="prev" title="KRB5_PADATA_SPAKE" href="KRB5_PADATA_SPAKE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_SPAKE.html" title="KRB5_PADATA_SPAKE"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_SVR_REFERRAL_INFO.html" title="KRB5_PADATA_SVR_REFERRAL_INFO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_REDHAT_IDP_OAUTH2">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-redhat-idp-oauth2">
-<span id="krb5-padata-redhat-idp-oauth2-data"></span><h1>KRB5_PADATA_REDHAT_IDP_OAUTH2<a class="headerlink" href="#krb5-padata-redhat-idp-oauth2" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_REDHAT_IDP_OAUTH2">
-<code class="descname">KRB5_PADATA_REDHAT_IDP_OAUTH2</code><a class="headerlink" href="#KRB5_PADATA_REDHAT_IDP_OAUTH2" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Red Hat IdP mechanism.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_REDHAT_IDP_OAUTH2</span></code></td>
-<td><code class="docutils literal"><span class="pre">152</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_REDHAT_IDP_OAUTH2</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_SPAKE.html" title="KRB5_PADATA_SPAKE"
- >previous</a> |
- <a href="KRB5_PADATA_SVR_REFERRAL_INFO.html" title="KRB5_PADATA_SVR_REFERRAL_INFO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_REDHAT_IDP_OAUTH2">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_REFERRAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_S4U_X509_USER" href="KRB5_PADATA_S4U_X509_USER.html" />
- <link rel="prev" title="KRB5_PADATA_PW_SALT" href="KRB5_PADATA_PW_SALT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_PW_SALT.html" title="KRB5_PADATA_PW_SALT"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_S4U_X509_USER.html" title="KRB5_PADATA_S4U_X509_USER"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_REFERRAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-referral">
-<span id="krb5-padata-referral-data"></span><h1>KRB5_PADATA_REFERRAL<a class="headerlink" href="#krb5-padata-referral" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_REFERRAL">
-<code class="descname">KRB5_PADATA_REFERRAL</code><a class="headerlink" href="#KRB5_PADATA_REFERRAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>draft referral system</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_REFERRAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">25</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_REFERRAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_PW_SALT.html" title="KRB5_PADATA_PW_SALT"
- >previous</a> |
- <a href="KRB5_PADATA_S4U_X509_USER.html" title="KRB5_PADATA_S4U_X509_USER"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_REFERRAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_S4U_X509_USER — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_SAM_CHALLENGE" href="KRB5_PADATA_SAM_CHALLENGE.html" />
- <link rel="prev" title="KRB5_PADATA_REFERRAL" href="KRB5_PADATA_REFERRAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_REFERRAL.html" title="KRB5_PADATA_REFERRAL"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_SAM_CHALLENGE.html" title="KRB5_PADATA_SAM_CHALLENGE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_S4U_X509_USER">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-s4u-x509-user">
-<span id="krb5-padata-s4u-x509-user-data"></span><h1>KRB5_PADATA_S4U_X509_USER<a class="headerlink" href="#krb5-padata-s4u-x509-user" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_S4U_X509_USER">
-<code class="descname">KRB5_PADATA_S4U_X509_USER</code><a class="headerlink" href="#KRB5_PADATA_S4U_X509_USER" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>certificate protocol transition request</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_S4U_X509_USER</span></code></td>
-<td><code class="docutils literal"><span class="pre">130</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_S4U_X509_USER</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_REFERRAL.html" title="KRB5_PADATA_REFERRAL"
- >previous</a> |
- <a href="KRB5_PADATA_SAM_CHALLENGE.html" title="KRB5_PADATA_SAM_CHALLENGE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_S4U_X509_USER">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_SAM_CHALLENGE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_SAM_CHALLENGE_2" href="KRB5_PADATA_SAM_CHALLENGE_2.html" />
- <link rel="prev" title="KRB5_PADATA_S4U_X509_USER" href="KRB5_PADATA_S4U_X509_USER.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_S4U_X509_USER.html" title="KRB5_PADATA_S4U_X509_USER"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_SAM_CHALLENGE_2.html" title="KRB5_PADATA_SAM_CHALLENGE_2"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SAM_CHALLENGE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-sam-challenge">
-<span id="krb5-padata-sam-challenge-data"></span><h1>KRB5_PADATA_SAM_CHALLENGE<a class="headerlink" href="#krb5-padata-sam-challenge" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_SAM_CHALLENGE">
-<code class="descname">KRB5_PADATA_SAM_CHALLENGE</code><a class="headerlink" href="#KRB5_PADATA_SAM_CHALLENGE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>SAM/OTP.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_SAM_CHALLENGE</span></code></td>
-<td><code class="docutils literal"><span class="pre">12</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_SAM_CHALLENGE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_S4U_X509_USER.html" title="KRB5_PADATA_S4U_X509_USER"
- >previous</a> |
- <a href="KRB5_PADATA_SAM_CHALLENGE_2.html" title="KRB5_PADATA_SAM_CHALLENGE_2"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SAM_CHALLENGE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_SAM_CHALLENGE_2 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_SAM_REDIRECT" href="KRB5_PADATA_SAM_REDIRECT.html" />
- <link rel="prev" title="KRB5_PADATA_SAM_CHALLENGE" href="KRB5_PADATA_SAM_CHALLENGE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_SAM_CHALLENGE.html" title="KRB5_PADATA_SAM_CHALLENGE"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_SAM_REDIRECT.html" title="KRB5_PADATA_SAM_REDIRECT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SAM_CHALLENGE_2">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-sam-challenge-2">
-<span id="krb5-padata-sam-challenge-2-data"></span><h1>KRB5_PADATA_SAM_CHALLENGE_2<a class="headerlink" href="#krb5-padata-sam-challenge-2" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_SAM_CHALLENGE_2">
-<code class="descname">KRB5_PADATA_SAM_CHALLENGE_2</code><a class="headerlink" href="#KRB5_PADATA_SAM_CHALLENGE_2" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>draft challenge system, updated</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_SAM_CHALLENGE_2</span></code></td>
-<td><code class="docutils literal"><span class="pre">30</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_SAM_CHALLENGE_2</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_SAM_CHALLENGE.html" title="KRB5_PADATA_SAM_CHALLENGE"
- >previous</a> |
- <a href="KRB5_PADATA_SAM_REDIRECT.html" title="KRB5_PADATA_SAM_REDIRECT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SAM_CHALLENGE_2">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_SAM_REDIRECT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_SAM_RESPONSE" href="KRB5_PADATA_SAM_RESPONSE.html" />
- <link rel="prev" title="KRB5_PADATA_SAM_CHALLENGE_2" href="KRB5_PADATA_SAM_CHALLENGE_2.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_SAM_CHALLENGE_2.html" title="KRB5_PADATA_SAM_CHALLENGE_2"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_SAM_RESPONSE.html" title="KRB5_PADATA_SAM_RESPONSE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SAM_REDIRECT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-sam-redirect">
-<span id="krb5-padata-sam-redirect-data"></span><h1>KRB5_PADATA_SAM_REDIRECT<a class="headerlink" href="#krb5-padata-sam-redirect" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_SAM_REDIRECT">
-<code class="descname">KRB5_PADATA_SAM_REDIRECT</code><a class="headerlink" href="#KRB5_PADATA_SAM_REDIRECT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>SAM/OTP.</p>
-<p>RFC 4120</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_SAM_REDIRECT</span></code></td>
-<td><code class="docutils literal"><span class="pre">21</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_SAM_REDIRECT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_SAM_CHALLENGE_2.html" title="KRB5_PADATA_SAM_CHALLENGE_2"
- >previous</a> |
- <a href="KRB5_PADATA_SAM_RESPONSE.html" title="KRB5_PADATA_SAM_RESPONSE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SAM_REDIRECT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_SAM_RESPONSE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_SAM_RESPONSE_2" href="KRB5_PADATA_SAM_RESPONSE_2.html" />
- <link rel="prev" title="KRB5_PADATA_SAM_REDIRECT" href="KRB5_PADATA_SAM_REDIRECT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_SAM_REDIRECT.html" title="KRB5_PADATA_SAM_REDIRECT"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_SAM_RESPONSE_2.html" title="KRB5_PADATA_SAM_RESPONSE_2"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SAM_RESPONSE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-sam-response">
-<span id="krb5-padata-sam-response-data"></span><h1>KRB5_PADATA_SAM_RESPONSE<a class="headerlink" href="#krb5-padata-sam-response" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_SAM_RESPONSE">
-<code class="descname">KRB5_PADATA_SAM_RESPONSE</code><a class="headerlink" href="#KRB5_PADATA_SAM_RESPONSE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>SAM/OTP.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_SAM_RESPONSE</span></code></td>
-<td><code class="docutils literal"><span class="pre">13</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_SAM_RESPONSE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_SAM_REDIRECT.html" title="KRB5_PADATA_SAM_REDIRECT"
- >previous</a> |
- <a href="KRB5_PADATA_SAM_RESPONSE_2.html" title="KRB5_PADATA_SAM_RESPONSE_2"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SAM_RESPONSE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_SAM_RESPONSE_2 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_SESAME" href="KRB5_PADATA_SESAME.html" />
- <link rel="prev" title="KRB5_PADATA_SAM_RESPONSE" href="KRB5_PADATA_SAM_RESPONSE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_SAM_RESPONSE.html" title="KRB5_PADATA_SAM_RESPONSE"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_SESAME.html" title="KRB5_PADATA_SESAME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SAM_RESPONSE_2">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-sam-response-2">
-<span id="krb5-padata-sam-response-2-data"></span><h1>KRB5_PADATA_SAM_RESPONSE_2<a class="headerlink" href="#krb5-padata-sam-response-2" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_SAM_RESPONSE_2">
-<code class="descname">KRB5_PADATA_SAM_RESPONSE_2</code><a class="headerlink" href="#KRB5_PADATA_SAM_RESPONSE_2" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>draft challenge system, updated</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_SAM_RESPONSE_2</span></code></td>
-<td><code class="docutils literal"><span class="pre">31</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_SAM_RESPONSE_2</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_SAM_RESPONSE.html" title="KRB5_PADATA_SAM_RESPONSE"
- >previous</a> |
- <a href="KRB5_PADATA_SESAME.html" title="KRB5_PADATA_SESAME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SAM_RESPONSE_2">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_SESAME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_SPAKE" href="KRB5_PADATA_SPAKE.html" />
- <link rel="prev" title="KRB5_PADATA_SAM_RESPONSE_2" href="KRB5_PADATA_SAM_RESPONSE_2.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_SAM_RESPONSE_2.html" title="KRB5_PADATA_SAM_RESPONSE_2"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_SPAKE.html" title="KRB5_PADATA_SPAKE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SESAME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-sesame">
-<span id="krb5-padata-sesame-data"></span><h1>KRB5_PADATA_SESAME<a class="headerlink" href="#krb5-padata-sesame" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_SESAME">
-<code class="descname">KRB5_PADATA_SESAME</code><a class="headerlink" href="#KRB5_PADATA_SESAME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Sesame project.</p>
-<p>RFC 4120</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="53%" />
-<col width="47%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_SESAME</span></code></td>
-<td><code class="docutils literal"><span class="pre">7</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_SESAME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_SAM_RESPONSE_2.html" title="KRB5_PADATA_SAM_RESPONSE_2"
- >previous</a> |
- <a href="KRB5_PADATA_SPAKE.html" title="KRB5_PADATA_SPAKE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SESAME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_SPAKE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_REDHAT_IDP_OAUTH2" href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" />
- <link rel="prev" title="KRB5_PADATA_SESAME" href="KRB5_PADATA_SESAME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_SESAME.html" title="KRB5_PADATA_SESAME"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" title="KRB5_PADATA_REDHAT_IDP_OAUTH2"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SPAKE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-spake">
-<span id="krb5-padata-spake-data"></span><h1>KRB5_PADATA_SPAKE<a class="headerlink" href="#krb5-padata-spake" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_SPAKE">
-<code class="descname">KRB5_PADATA_SPAKE</code><a class="headerlink" href="#KRB5_PADATA_SPAKE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_SPAKE</span></code></td>
-<td><code class="docutils literal"><span class="pre">151</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_SPAKE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_SESAME.html" title="KRB5_PADATA_SESAME"
- >previous</a> |
- <a href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" title="KRB5_PADATA_REDHAT_IDP_OAUTH2"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SPAKE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_SVR_REFERRAL_INFO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_TGS_REQ" href="KRB5_PADATA_TGS_REQ.html" />
- <link rel="prev" title="KRB5_PADATA_REDHAT_IDP_OAUTH2" href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" title="KRB5_PADATA_REDHAT_IDP_OAUTH2"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_TGS_REQ.html" title="KRB5_PADATA_TGS_REQ"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SVR_REFERRAL_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-svr-referral-info">
-<span id="krb5-padata-svr-referral-info-data"></span><h1>KRB5_PADATA_SVR_REFERRAL_INFO<a class="headerlink" href="#krb5-padata-svr-referral-info" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_SVR_REFERRAL_INFO">
-<code class="descname">KRB5_PADATA_SVR_REFERRAL_INFO</code><a class="headerlink" href="#KRB5_PADATA_SVR_REFERRAL_INFO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Windows 2000 referrals.</p>
-<p>RFC 6820</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_SVR_REFERRAL_INFO</span></code></td>
-<td><code class="docutils literal"><span class="pre">20</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_SVR_REFERRAL_INFO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html" title="KRB5_PADATA_REDHAT_IDP_OAUTH2"
- >previous</a> |
- <a href="KRB5_PADATA_TGS_REQ.html" title="KRB5_PADATA_TGS_REQ"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_SVR_REFERRAL_INFO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_TGS_REQ — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PADATA_USE_SPECIFIED_KVNO" href="KRB5_PADATA_USE_SPECIFIED_KVNO.html" />
- <link rel="prev" title="KRB5_PADATA_SVR_REFERRAL_INFO" href="KRB5_PADATA_SVR_REFERRAL_INFO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_SVR_REFERRAL_INFO.html" title="KRB5_PADATA_SVR_REFERRAL_INFO"
- accesskey="P">previous</a> |
- <a href="KRB5_PADATA_USE_SPECIFIED_KVNO.html" title="KRB5_PADATA_USE_SPECIFIED_KVNO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_TGS_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-tgs-req">
-<span id="krb5-padata-tgs-req-data"></span><h1>KRB5_PADATA_TGS_REQ<a class="headerlink" href="#krb5-padata-tgs-req" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_TGS_REQ">
-<code class="descname">KRB5_PADATA_TGS_REQ</code><a class="headerlink" href="#KRB5_PADATA_TGS_REQ" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_TGS_REQ</span></code></td>
-<td><code class="docutils literal"><span class="pre">KRB5_PADATA_AP_REQ</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_TGS_REQ</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_SVR_REFERRAL_INFO.html" title="KRB5_PADATA_SVR_REFERRAL_INFO"
- >previous</a> |
- <a href="KRB5_PADATA_USE_SPECIFIED_KVNO.html" title="KRB5_PADATA_USE_SPECIFIED_KVNO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_TGS_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PADATA_USE_SPECIFIED_KVNO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_COMPARE_CASEFOLD" href="KRB5_PRINCIPAL_COMPARE_CASEFOLD.html" />
- <link rel="prev" title="KRB5_PADATA_TGS_REQ" href="KRB5_PADATA_TGS_REQ.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_TGS_REQ.html" title="KRB5_PADATA_TGS_REQ"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_CASEFOLD.html" title="KRB5_PRINCIPAL_COMPARE_CASEFOLD"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_USE_SPECIFIED_KVNO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-padata-use-specified-kvno">
-<span id="krb5-padata-use-specified-kvno-data"></span><h1>KRB5_PADATA_USE_SPECIFIED_KVNO<a class="headerlink" href="#krb5-padata-use-specified-kvno" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PADATA_USE_SPECIFIED_KVNO">
-<code class="descname">KRB5_PADATA_USE_SPECIFIED_KVNO</code><a class="headerlink" href="#KRB5_PADATA_USE_SPECIFIED_KVNO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>RFC 4120.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PADATA_USE_SPECIFIED_KVNO</span></code></td>
-<td><code class="docutils literal"><span class="pre">20</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PADATA_USE_SPECIFIED_KVNO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_TGS_REQ.html" title="KRB5_PADATA_TGS_REQ"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_CASEFOLD.html" title="KRB5_PRINCIPAL_COMPARE_CASEFOLD"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PADATA_USE_SPECIFIED_KVNO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_COMPARE_CASEFOLD — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_COMPARE_ENTERPRISE" href="KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html" />
- <link rel="prev" title="KRB5_PADATA_USE_SPECIFIED_KVNO" href="KRB5_PADATA_USE_SPECIFIED_KVNO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PADATA_USE_SPECIFIED_KVNO.html" title="KRB5_PADATA_USE_SPECIFIED_KVNO"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html" title="KRB5_PRINCIPAL_COMPARE_ENTERPRISE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_COMPARE_CASEFOLD">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-compare-casefold">
-<span id="krb5-principal-compare-casefold-data"></span><h1>KRB5_PRINCIPAL_COMPARE_CASEFOLD<a class="headerlink" href="#krb5-principal-compare-casefold" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_COMPARE_CASEFOLD">
-<code class="descname">KRB5_PRINCIPAL_COMPARE_CASEFOLD</code><a class="headerlink" href="#KRB5_PRINCIPAL_COMPARE_CASEFOLD" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>case-insensitive</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_COMPARE_CASEFOLD</span></code></td>
-<td><code class="docutils literal"><span class="pre">4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_COMPARE_CASEFOLD</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PADATA_USE_SPECIFIED_KVNO.html" title="KRB5_PADATA_USE_SPECIFIED_KVNO"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html" title="KRB5_PRINCIPAL_COMPARE_ENTERPRISE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_COMPARE_CASEFOLD">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_COMPARE_ENTERPRISE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM" href="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_COMPARE_CASEFOLD" href="KRB5_PRINCIPAL_COMPARE_CASEFOLD.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_CASEFOLD.html" title="KRB5_PRINCIPAL_COMPARE_CASEFOLD"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html" title="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_COMPARE_ENTERPRISE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-compare-enterprise">
-<span id="krb5-principal-compare-enterprise-data"></span><h1>KRB5_PRINCIPAL_COMPARE_ENTERPRISE<a class="headerlink" href="#krb5-principal-compare-enterprise" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_COMPARE_ENTERPRISE">
-<code class="descname">KRB5_PRINCIPAL_COMPARE_ENTERPRISE</code><a class="headerlink" href="#KRB5_PRINCIPAL_COMPARE_ENTERPRISE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>UPNs as real principals.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_COMPARE_ENTERPRISE</span></code></td>
-<td><code class="docutils literal"><span class="pre">2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_COMPARE_ENTERPRISE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_CASEFOLD.html" title="KRB5_PRINCIPAL_COMPARE_CASEFOLD"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html" title="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_COMPARE_ENTERPRISE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_COMPARE_IGNORE_REALM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_COMPARE_UTF8" href="KRB5_PRINCIPAL_COMPARE_UTF8.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_COMPARE_ENTERPRISE" href="KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html" title="KRB5_PRINCIPAL_COMPARE_ENTERPRISE"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_UTF8.html" title="KRB5_PRINCIPAL_COMPARE_UTF8"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_COMPARE_IGNORE_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-compare-ignore-realm">
-<span id="krb5-principal-compare-ignore-realm-data"></span><h1>KRB5_PRINCIPAL_COMPARE_IGNORE_REALM<a class="headerlink" href="#krb5-principal-compare-ignore-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM">
-<code class="descname">KRB5_PRINCIPAL_COMPARE_IGNORE_REALM</code><a class="headerlink" href="#KRB5_PRINCIPAL_COMPARE_IGNORE_REALM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>ignore realm component</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_COMPARE_IGNORE_REALM</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_COMPARE_IGNORE_REALM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html" title="KRB5_PRINCIPAL_COMPARE_ENTERPRISE"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_UTF8.html" title="KRB5_PRINCIPAL_COMPARE_UTF8"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_COMPARE_IGNORE_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_COMPARE_UTF8 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_PARSE_ENTERPRISE" href="KRB5_PRINCIPAL_PARSE_ENTERPRISE.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM" href="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html" title="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_PARSE_ENTERPRISE.html" title="KRB5_PRINCIPAL_PARSE_ENTERPRISE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_COMPARE_UTF8">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-compare-utf8">
-<span id="krb5-principal-compare-utf8-data"></span><h1>KRB5_PRINCIPAL_COMPARE_UTF8<a class="headerlink" href="#krb5-principal-compare-utf8" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_COMPARE_UTF8">
-<code class="descname">KRB5_PRINCIPAL_COMPARE_UTF8</code><a class="headerlink" href="#KRB5_PRINCIPAL_COMPARE_UTF8" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>treat principals as UTF-8</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_COMPARE_UTF8</span></code></td>
-<td><code class="docutils literal"><span class="pre">8</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_COMPARE_UTF8</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html" title="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_PARSE_ENTERPRISE.html" title="KRB5_PRINCIPAL_PARSE_ENTERPRISE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_COMPARE_UTF8">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_PARSE_ENTERPRISE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_PARSE_IGNORE_REALM" href="KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_COMPARE_UTF8" href="KRB5_PRINCIPAL_COMPARE_UTF8.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_UTF8.html" title="KRB5_PRINCIPAL_COMPARE_UTF8"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html" title="KRB5_PRINCIPAL_PARSE_IGNORE_REALM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_PARSE_ENTERPRISE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-parse-enterprise">
-<span id="krb5-principal-parse-enterprise-data"></span><h1>KRB5_PRINCIPAL_PARSE_ENTERPRISE<a class="headerlink" href="#krb5-principal-parse-enterprise" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_PARSE_ENTERPRISE">
-<code class="descname">KRB5_PRINCIPAL_PARSE_ENTERPRISE</code><a class="headerlink" href="#KRB5_PRINCIPAL_PARSE_ENTERPRISE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Create single-component enterprise principle.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_PARSE_ENTERPRISE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_PARSE_ENTERPRISE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_COMPARE_UTF8.html" title="KRB5_PRINCIPAL_COMPARE_UTF8"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html" title="KRB5_PRINCIPAL_PARSE_IGNORE_REALM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_PARSE_ENTERPRISE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_PARSE_IGNORE_REALM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM" href="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_PARSE_ENTERPRISE" href="KRB5_PRINCIPAL_PARSE_ENTERPRISE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_PARSE_ENTERPRISE.html" title="KRB5_PRINCIPAL_PARSE_ENTERPRISE"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html" title="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_PARSE_IGNORE_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-parse-ignore-realm">
-<span id="krb5-principal-parse-ignore-realm-data"></span><h1>KRB5_PRINCIPAL_PARSE_IGNORE_REALM<a class="headerlink" href="#krb5-principal-parse-ignore-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_PARSE_IGNORE_REALM">
-<code class="descname">KRB5_PRINCIPAL_PARSE_IGNORE_REALM</code><a class="headerlink" href="#KRB5_PRINCIPAL_PARSE_IGNORE_REALM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Ignore realm if present.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_PARSE_IGNORE_REALM</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x8</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_PARSE_IGNORE_REALM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_PARSE_ENTERPRISE.html" title="KRB5_PRINCIPAL_PARSE_ENTERPRISE"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html" title="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_PARSE_IGNORE_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_PARSE_NO_DEF_REALM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_PARSE_NO_REALM" href="KRB5_PRINCIPAL_PARSE_NO_REALM.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_PARSE_IGNORE_REALM" href="KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html" title="KRB5_PRINCIPAL_PARSE_IGNORE_REALM"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_PARSE_NO_REALM.html" title="KRB5_PRINCIPAL_PARSE_NO_REALM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_PARSE_NO_DEF_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-parse-no-def-realm">
-<span id="krb5-principal-parse-no-def-realm-data"></span><h1>KRB5_PRINCIPAL_PARSE_NO_DEF_REALM<a class="headerlink" href="#krb5-principal-parse-no-def-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM">
-<code class="descname">KRB5_PRINCIPAL_PARSE_NO_DEF_REALM</code><a class="headerlink" href="#KRB5_PRINCIPAL_PARSE_NO_DEF_REALM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Don’t add default realm.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_PARSE_NO_DEF_REALM</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x10</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_PARSE_NO_DEF_REALM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html" title="KRB5_PRINCIPAL_PARSE_IGNORE_REALM"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_PARSE_NO_REALM.html" title="KRB5_PRINCIPAL_PARSE_NO_REALM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_PARSE_NO_DEF_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_PARSE_NO_REALM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM" href="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM" href="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html" title="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html" title="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_PARSE_NO_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-parse-no-realm">
-<span id="krb5-principal-parse-no-realm-data"></span><h1>KRB5_PRINCIPAL_PARSE_NO_REALM<a class="headerlink" href="#krb5-principal-parse-no-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_PARSE_NO_REALM">
-<code class="descname">KRB5_PRINCIPAL_PARSE_NO_REALM</code><a class="headerlink" href="#KRB5_PRINCIPAL_PARSE_NO_REALM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Error if realm is present.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_PARSE_NO_REALM</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_PARSE_NO_REALM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html" title="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html" title="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_PARSE_NO_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_PARSE_REQUIRE_REALM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_UNPARSE_DISPLAY" href="KRB5_PRINCIPAL_UNPARSE_DISPLAY.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_PARSE_NO_REALM" href="KRB5_PRINCIPAL_PARSE_NO_REALM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_PARSE_NO_REALM.html" title="KRB5_PRINCIPAL_PARSE_NO_REALM"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_DISPLAY.html" title="KRB5_PRINCIPAL_UNPARSE_DISPLAY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_PARSE_REQUIRE_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-parse-require-realm">
-<span id="krb5-principal-parse-require-realm-data"></span><h1>KRB5_PRINCIPAL_PARSE_REQUIRE_REALM<a class="headerlink" href="#krb5-principal-parse-require-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM">
-<code class="descname">KRB5_PRINCIPAL_PARSE_REQUIRE_REALM</code><a class="headerlink" href="#KRB5_PRINCIPAL_PARSE_REQUIRE_REALM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Error if realm is not present.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_PARSE_REQUIRE_REALM</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_PARSE_REQUIRE_REALM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_PARSE_NO_REALM.html" title="KRB5_PRINCIPAL_PARSE_NO_REALM"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_DISPLAY.html" title="KRB5_PRINCIPAL_UNPARSE_DISPLAY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_PARSE_REQUIRE_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_UNPARSE_DISPLAY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_UNPARSE_NO_REALM" href="KRB5_PRINCIPAL_UNPARSE_NO_REALM.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM" href="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html" title="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_NO_REALM.html" title="KRB5_PRINCIPAL_UNPARSE_NO_REALM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_UNPARSE_DISPLAY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-unparse-display">
-<span id="krb5-principal-unparse-display-data"></span><h1>KRB5_PRINCIPAL_UNPARSE_DISPLAY<a class="headerlink" href="#krb5-principal-unparse-display" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_UNPARSE_DISPLAY">
-<code class="descname">KRB5_PRINCIPAL_UNPARSE_DISPLAY</code><a class="headerlink" href="#KRB5_PRINCIPAL_UNPARSE_DISPLAY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Don’t escape special characters.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_UNPARSE_DISPLAY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_UNPARSE_DISPLAY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html" title="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_NO_REALM.html" title="KRB5_PRINCIPAL_UNPARSE_NO_REALM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_UNPARSE_DISPLAY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_UNPARSE_NO_REALM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRINCIPAL_UNPARSE_SHORT" href="KRB5_PRINCIPAL_UNPARSE_SHORT.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_UNPARSE_DISPLAY" href="KRB5_PRINCIPAL_UNPARSE_DISPLAY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_DISPLAY.html" title="KRB5_PRINCIPAL_UNPARSE_DISPLAY"
- accesskey="P">previous</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_SHORT.html" title="KRB5_PRINCIPAL_UNPARSE_SHORT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_UNPARSE_NO_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-unparse-no-realm">
-<span id="krb5-principal-unparse-no-realm-data"></span><h1>KRB5_PRINCIPAL_UNPARSE_NO_REALM<a class="headerlink" href="#krb5-principal-unparse-no-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_UNPARSE_NO_REALM">
-<code class="descname">KRB5_PRINCIPAL_UNPARSE_NO_REALM</code><a class="headerlink" href="#KRB5_PRINCIPAL_UNPARSE_NO_REALM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Omit realm always.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_UNPARSE_NO_REALM</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_UNPARSE_NO_REALM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_DISPLAY.html" title="KRB5_PRINCIPAL_UNPARSE_DISPLAY"
- >previous</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_SHORT.html" title="KRB5_PRINCIPAL_UNPARSE_SHORT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_UNPARSE_NO_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRINCIPAL_UNPARSE_SHORT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PRIV" href="KRB5_PRIV.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_UNPARSE_NO_REALM" href="KRB5_PRINCIPAL_UNPARSE_NO_REALM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_NO_REALM.html" title="KRB5_PRINCIPAL_UNPARSE_NO_REALM"
- accesskey="P">previous</a> |
- <a href="KRB5_PRIV.html" title="KRB5_PRIV"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_UNPARSE_SHORT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-unparse-short">
-<span id="krb5-principal-unparse-short-data"></span><h1>KRB5_PRINCIPAL_UNPARSE_SHORT<a class="headerlink" href="#krb5-principal-unparse-short" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRINCIPAL_UNPARSE_SHORT">
-<code class="descname">KRB5_PRINCIPAL_UNPARSE_SHORT</code><a class="headerlink" href="#KRB5_PRINCIPAL_UNPARSE_SHORT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Omit realm if it is the local realm.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRINCIPAL_UNPARSE_SHORT</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRINCIPAL_UNPARSE_SHORT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_NO_REALM.html" title="KRB5_PRINCIPAL_UNPARSE_NO_REALM"
- >previous</a> |
- <a href="KRB5_PRIV.html" title="KRB5_PRIV"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRINCIPAL_UNPARSE_SHORT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PRIV — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PROMPT_TYPE_NEW_PASSWORD" href="KRB5_PROMPT_TYPE_NEW_PASSWORD.html" />
- <link rel="prev" title="KRB5_PRINCIPAL_UNPARSE_SHORT" href="KRB5_PRINCIPAL_UNPARSE_SHORT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_SHORT.html" title="KRB5_PRINCIPAL_UNPARSE_SHORT"
- accesskey="P">previous</a> |
- <a href="KRB5_PROMPT_TYPE_NEW_PASSWORD.html" title="KRB5_PROMPT_TYPE_NEW_PASSWORD"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRIV">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-priv">
-<span id="krb5-priv-data"></span><h1>KRB5_PRIV<a class="headerlink" href="#krb5-priv" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PRIV">
-<code class="descname">KRB5_PRIV</code><a class="headerlink" href="#KRB5_PRIV" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Private application message.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="39%" />
-<col width="61%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PRIV</span></code></td>
-<td><code class="docutils literal"><span class="pre">((krb5_msgtype)21)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PRIV</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRINCIPAL_UNPARSE_SHORT.html" title="KRB5_PRINCIPAL_UNPARSE_SHORT"
- >previous</a> |
- <a href="KRB5_PROMPT_TYPE_NEW_PASSWORD.html" title="KRB5_PROMPT_TYPE_NEW_PASSWORD"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PRIV">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PROMPT_TYPE_NEW_PASSWORD — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN" href="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html" />
- <link rel="prev" title="KRB5_PRIV" href="KRB5_PRIV.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PRIV.html" title="KRB5_PRIV"
- accesskey="P">previous</a> |
- <a href="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html" title="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PROMPT_TYPE_NEW_PASSWORD">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-prompt-type-new-password">
-<span id="krb5-prompt-type-new-password-data"></span><h1>KRB5_PROMPT_TYPE_NEW_PASSWORD<a class="headerlink" href="#krb5-prompt-type-new-password" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PROMPT_TYPE_NEW_PASSWORD">
-<code class="descname">KRB5_PROMPT_TYPE_NEW_PASSWORD</code><a class="headerlink" href="#KRB5_PROMPT_TYPE_NEW_PASSWORD" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Prompt for new password (during password change)</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PROMPT_TYPE_NEW_PASSWORD</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PROMPT_TYPE_NEW_PASSWORD</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PRIV.html" title="KRB5_PRIV"
- >previous</a> |
- <a href="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html" title="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PROMPT_TYPE_NEW_PASSWORD">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PROMPT_TYPE_PASSWORD" href="KRB5_PROMPT_TYPE_PASSWORD.html" />
- <link rel="prev" title="KRB5_PROMPT_TYPE_NEW_PASSWORD" href="KRB5_PROMPT_TYPE_NEW_PASSWORD.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PROMPT_TYPE_NEW_PASSWORD.html" title="KRB5_PROMPT_TYPE_NEW_PASSWORD"
- accesskey="P">previous</a> |
- <a href="KRB5_PROMPT_TYPE_PASSWORD.html" title="KRB5_PROMPT_TYPE_PASSWORD"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-prompt-type-new-password-again">
-<span id="krb5-prompt-type-new-password-again-data"></span><h1>KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN<a class="headerlink" href="#krb5-prompt-type-new-password-again" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN">
-<code class="descname">KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN</code><a class="headerlink" href="#KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Prompt for new password again.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x3</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PROMPT_TYPE_NEW_PASSWORD.html" title="KRB5_PROMPT_TYPE_NEW_PASSWORD"
- >previous</a> |
- <a href="KRB5_PROMPT_TYPE_PASSWORD.html" title="KRB5_PROMPT_TYPE_PASSWORD"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PROMPT_TYPE_PASSWORD — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PROMPT_TYPE_PREAUTH" href="KRB5_PROMPT_TYPE_PREAUTH.html" />
- <link rel="prev" title="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN" href="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html" title="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN"
- accesskey="P">previous</a> |
- <a href="KRB5_PROMPT_TYPE_PREAUTH.html" title="KRB5_PROMPT_TYPE_PREAUTH"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PROMPT_TYPE_PASSWORD">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-prompt-type-password">
-<span id="krb5-prompt-type-password-data"></span><h1>KRB5_PROMPT_TYPE_PASSWORD<a class="headerlink" href="#krb5-prompt-type-password" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PROMPT_TYPE_PASSWORD">
-<code class="descname">KRB5_PROMPT_TYPE_PASSWORD</code><a class="headerlink" href="#KRB5_PROMPT_TYPE_PASSWORD" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Prompt for password.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PROMPT_TYPE_PASSWORD</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PROMPT_TYPE_PASSWORD</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html" title="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN"
- >previous</a> |
- <a href="KRB5_PROMPT_TYPE_PREAUTH.html" title="KRB5_PROMPT_TYPE_PREAUTH"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PROMPT_TYPE_PASSWORD">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PROMPT_TYPE_PREAUTH — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_PVNO" href="KRB5_PVNO.html" />
- <link rel="prev" title="KRB5_PROMPT_TYPE_PASSWORD" href="KRB5_PROMPT_TYPE_PASSWORD.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PROMPT_TYPE_PASSWORD.html" title="KRB5_PROMPT_TYPE_PASSWORD"
- accesskey="P">previous</a> |
- <a href="KRB5_PVNO.html" title="KRB5_PVNO"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PROMPT_TYPE_PREAUTH">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-prompt-type-preauth">
-<span id="krb5-prompt-type-preauth-data"></span><h1>KRB5_PROMPT_TYPE_PREAUTH<a class="headerlink" href="#krb5-prompt-type-preauth" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PROMPT_TYPE_PREAUTH">
-<code class="descname">KRB5_PROMPT_TYPE_PREAUTH</code><a class="headerlink" href="#KRB5_PROMPT_TYPE_PREAUTH" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Prompt for preauthentication data (such as an OTP value)</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PROMPT_TYPE_PREAUTH</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x4</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PROMPT_TYPE_PREAUTH</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PROMPT_TYPE_PASSWORD.html" title="KRB5_PROMPT_TYPE_PASSWORD"
- >previous</a> |
- <a href="KRB5_PVNO.html" title="KRB5_PVNO"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PROMPT_TYPE_PREAUTH">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_PVNO — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_REALM_BRANCH_CHAR" href="KRB5_REALM_BRANCH_CHAR.html" />
- <link rel="prev" title="KRB5_PROMPT_TYPE_PREAUTH" href="KRB5_PROMPT_TYPE_PREAUTH.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PROMPT_TYPE_PREAUTH.html" title="KRB5_PROMPT_TYPE_PREAUTH"
- accesskey="P">previous</a> |
- <a href="KRB5_REALM_BRANCH_CHAR.html" title="KRB5_REALM_BRANCH_CHAR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PVNO">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pvno">
-<span id="krb5-pvno-data"></span><h1>KRB5_PVNO<a class="headerlink" href="#krb5-pvno" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_PVNO">
-<code class="descname">KRB5_PVNO</code><a class="headerlink" href="#KRB5_PVNO" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Protocol version number.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="42%" />
-<col width="58%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_PVNO</span></code></td>
-<td><code class="docutils literal"><span class="pre">5</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_PVNO</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PROMPT_TYPE_PREAUTH.html" title="KRB5_PROMPT_TYPE_PREAUTH"
- >previous</a> |
- <a href="KRB5_REALM_BRANCH_CHAR.html" title="KRB5_REALM_BRANCH_CHAR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_PVNO">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_REALM_BRANCH_CHAR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RECVAUTH_BADAUTHVERS" href="KRB5_RECVAUTH_BADAUTHVERS.html" />
- <link rel="prev" title="KRB5_PVNO" href="KRB5_PVNO.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_PVNO.html" title="KRB5_PVNO"
- accesskey="P">previous</a> |
- <a href="KRB5_RECVAUTH_BADAUTHVERS.html" title="KRB5_RECVAUTH_BADAUTHVERS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_REALM_BRANCH_CHAR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-realm-branch-char">
-<span id="krb5-realm-branch-char-data"></span><h1>KRB5_REALM_BRANCH_CHAR<a class="headerlink" href="#krb5-realm-branch-char" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_REALM_BRANCH_CHAR">
-<code class="descname">KRB5_REALM_BRANCH_CHAR</code><a class="headerlink" href="#KRB5_REALM_BRANCH_CHAR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_REALM_BRANCH_CHAR</span></code></td>
-<td><code class="docutils literal"><span class="pre">'.'</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_REALM_BRANCH_CHAR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_PVNO.html" title="KRB5_PVNO"
- >previous</a> |
- <a href="KRB5_RECVAUTH_BADAUTHVERS.html" title="KRB5_RECVAUTH_BADAUTHVERS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_REALM_BRANCH_CHAR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RECVAUTH_BADAUTHVERS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RECVAUTH_SKIP_VERSION" href="KRB5_RECVAUTH_SKIP_VERSION.html" />
- <link rel="prev" title="KRB5_REALM_BRANCH_CHAR" href="KRB5_REALM_BRANCH_CHAR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_REALM_BRANCH_CHAR.html" title="KRB5_REALM_BRANCH_CHAR"
- accesskey="P">previous</a> |
- <a href="KRB5_RECVAUTH_SKIP_VERSION.html" title="KRB5_RECVAUTH_SKIP_VERSION"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RECVAUTH_BADAUTHVERS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-recvauth-badauthvers">
-<span id="krb5-recvauth-badauthvers-data"></span><h1>KRB5_RECVAUTH_BADAUTHVERS<a class="headerlink" href="#krb5-recvauth-badauthvers" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RECVAUTH_BADAUTHVERS">
-<code class="descname">KRB5_RECVAUTH_BADAUTHVERS</code><a class="headerlink" href="#KRB5_RECVAUTH_BADAUTHVERS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RECVAUTH_BADAUTHVERS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RECVAUTH_BADAUTHVERS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_REALM_BRANCH_CHAR.html" title="KRB5_REALM_BRANCH_CHAR"
- >previous</a> |
- <a href="KRB5_RECVAUTH_SKIP_VERSION.html" title="KRB5_RECVAUTH_SKIP_VERSION"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RECVAUTH_BADAUTHVERS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RECVAUTH_SKIP_VERSION — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_REFERRAL_REALM" href="KRB5_REFERRAL_REALM.html" />
- <link rel="prev" title="KRB5_RECVAUTH_BADAUTHVERS" href="KRB5_RECVAUTH_BADAUTHVERS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RECVAUTH_BADAUTHVERS.html" title="KRB5_RECVAUTH_BADAUTHVERS"
- accesskey="P">previous</a> |
- <a href="KRB5_REFERRAL_REALM.html" title="KRB5_REFERRAL_REALM"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RECVAUTH_SKIP_VERSION">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-recvauth-skip-version">
-<span id="krb5-recvauth-skip-version-data"></span><h1>KRB5_RECVAUTH_SKIP_VERSION<a class="headerlink" href="#krb5-recvauth-skip-version" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RECVAUTH_SKIP_VERSION">
-<code class="descname">KRB5_RECVAUTH_SKIP_VERSION</code><a class="headerlink" href="#KRB5_RECVAUTH_SKIP_VERSION" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RECVAUTH_SKIP_VERSION</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RECVAUTH_SKIP_VERSION</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RECVAUTH_BADAUTHVERS.html" title="KRB5_RECVAUTH_BADAUTHVERS"
- >previous</a> |
- <a href="KRB5_REFERRAL_REALM.html" title="KRB5_REFERRAL_REALM"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RECVAUTH_SKIP_VERSION">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_REFERRAL_REALM — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW" href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html" />
- <link rel="prev" title="KRB5_RECVAUTH_SKIP_VERSION" href="KRB5_RECVAUTH_SKIP_VERSION.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RECVAUTH_SKIP_VERSION.html" title="KRB5_RECVAUTH_SKIP_VERSION"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_REFERRAL_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-referral-realm">
-<span id="krb5-referral-realm-data"></span><h1>KRB5_REFERRAL_REALM<a class="headerlink" href="#krb5-referral-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_REFERRAL_REALM">
-<code class="descname">KRB5_REFERRAL_REALM</code><a class="headerlink" href="#KRB5_REFERRAL_REALM" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Constant for realm referrals.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_REFERRAL_REALM</span></code></td>
-<td><code class="docutils literal"><span class="pre">""</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_REFERRAL_REALM</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RECVAUTH_SKIP_VERSION.html" title="KRB5_RECVAUTH_SKIP_VERSION"
- >previous</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_REFERRAL_REALM">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN" href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html" />
- <link rel="prev" title="KRB5_RESPONDER_QUESTION_PKINIT" href="KRB5_RESPONDER_QUESTION_PKINIT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_QUESTION_PKINIT.html" title="KRB5_RESPONDER_QUESTION_PKINIT"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-flags-collect-pin">
-<span id="krb5-responder-otp-flags-collect-pin-data"></span><h1>KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN<a class="headerlink" href="#krb5-responder-otp-flags-collect-pin" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN">
-<code class="descname">KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN</code><a class="headerlink" href="#KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>This flag indicates that the PIN value MUST be collected.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="66%" />
-<col width="34%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_QUESTION_PKINIT.html" title="KRB5_RESPONDER_QUESTION_PKINIT"
- >previous</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP" href="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html" />
- <link rel="prev" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN" href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html" title="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-flags-collect-token">
-<span id="krb5-responder-otp-flags-collect-token-data"></span><h1>KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN<a class="headerlink" href="#krb5-responder-otp-flags-collect-token" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN">
-<code class="descname">KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN</code><a class="headerlink" href="#KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>This flag indicates that the token value MUST be collected.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="67%" />
-<col width="33%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN"
- >previous</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html" title="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_OTP_FLAGS_NEXTOTP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN" href="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html" />
- <link rel="prev" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN" href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html" title="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FLAGS_NEXTOTP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-flags-nextotp">
-<span id="krb5-responder-otp-flags-nextotp-data"></span><h1>KRB5_RESPONDER_OTP_FLAGS_NEXTOTP<a class="headerlink" href="#krb5-responder-otp-flags-nextotp" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP">
-<code class="descname">KRB5_RESPONDER_OTP_FLAGS_NEXTOTP</code><a class="headerlink" href="#KRB5_RESPONDER_OTP_FLAGS_NEXTOTP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>This flag indicates that the token is now in re-synchronization mode with the server.</p>
-<p>The user is expected to reply with the next code displayed on the token.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="64%" />
-<col width="36%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_OTP_FLAGS_NEXTOTP</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0004</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_OTP_FLAGS_NEXTOTP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN"
- >previous</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html" title="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FLAGS_NEXTOTP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC" href="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html" />
- <link rel="prev" title="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP" href="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html" title="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html" title="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-flags-separate-pin">
-<span id="krb5-responder-otp-flags-separate-pin-data"></span><h1>KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN<a class="headerlink" href="#krb5-responder-otp-flags-separate-pin" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN">
-<code class="descname">KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN</code><a class="headerlink" href="#KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>This flag indicates that the PIN MUST be returned as a separate item.</p>
-<p>This flag only takes effect if KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN is set. If this flag is not set, the responder may either concatenate PIN + token value and store it as “value” in the answer or it may return them separately. If they are returned separately, they will be concatenated internally.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="67%" />
-<col width="33%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0008</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html" title="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP"
- >previous</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html" title="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_OTP_FORMAT_DECIMAL" href="KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html" />
- <link rel="prev" title="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN" href="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html" title="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html" title="KRB5_RESPONDER_OTP_FORMAT_DECIMAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-format-alphanumeric">
-<span id="krb5-responder-otp-format-alphanumeric-data"></span><h1>KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC<a class="headerlink" href="#krb5-responder-otp-format-alphanumeric" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC">
-<code class="descname">KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC</code><a class="headerlink" href="#KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="67%" />
-<col width="33%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC</span></code></td>
-<td><code class="docutils literal"><span class="pre">2</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html" title="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN"
- >previous</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html" title="KRB5_RESPONDER_OTP_FORMAT_DECIMAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_OTP_FORMAT_DECIMAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL" href="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html" />
- <link rel="prev" title="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC" href="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html" title="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html" title="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FORMAT_DECIMAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-format-decimal">
-<span id="krb5-responder-otp-format-decimal-data"></span><h1>KRB5_RESPONDER_OTP_FORMAT_DECIMAL<a class="headerlink" href="#krb5-responder-otp-format-decimal" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_OTP_FORMAT_DECIMAL">
-<code class="descname">KRB5_RESPONDER_OTP_FORMAT_DECIMAL</code><a class="headerlink" href="#KRB5_RESPONDER_OTP_FORMAT_DECIMAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>These format constants identify the format of the token value.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_OTP_FORMAT_DECIMAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">0</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_OTP_FORMAT_DECIMAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html" title="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC"
- >previous</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html" title="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FORMAT_DECIMAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_QUESTION_OTP" href="KRB5_RESPONDER_QUESTION_OTP.html" />
- <link rel="prev" title="KRB5_RESPONDER_OTP_FORMAT_DECIMAL" href="KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html" title="KRB5_RESPONDER_OTP_FORMAT_DECIMAL"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_QUESTION_OTP.html" title="KRB5_RESPONDER_QUESTION_OTP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-format-hexadecimal">
-<span id="krb5-responder-otp-format-hexadecimal-data"></span><h1>KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL<a class="headerlink" href="#krb5-responder-otp-format-hexadecimal" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL">
-<code class="descname">KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL</code><a class="headerlink" href="#KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="67%" />
-<col width="33%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html" title="KRB5_RESPONDER_OTP_FORMAT_DECIMAL"
- >previous</a> |
- <a href="KRB5_RESPONDER_QUESTION_OTP.html" title="KRB5_RESPONDER_QUESTION_OTP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY" href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html" />
- <link rel="prev" title="KRB5_REFERRAL_REALM" href="KRB5_REFERRAL_REALM.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_REFERRAL_REALM.html" title="KRB5_REFERRAL_REALM"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-pkinit-flags-token-user-pin-count-low">
-<span id="krb5-responder-pkinit-flags-token-user-pin-count-low-data"></span><h1>KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW<a class="headerlink" href="#krb5-responder-pkinit-flags-token-user-pin-count-low" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW">
-<code class="descname">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW</code><a class="headerlink" href="#KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>This flag indicates that an incorrect PIN was supplied at least once since the last time the correct PIN was supplied.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="73%" />
-<col width="27%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW</span></code></td>
-<td><code class="docutils literal"><span class="pre">(1</span> <span class="pre"><<</span> <span class="pre">0)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_REFERRAL_REALM.html" title="KRB5_REFERRAL_REALM"
- >previous</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED" href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html" />
- <link rel="prev" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW" href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-pkinit-flags-token-user-pin-final-try">
-<span id="krb5-responder-pkinit-flags-token-user-pin-final-try-data"></span><h1>KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY<a class="headerlink" href="#krb5-responder-pkinit-flags-token-user-pin-final-try" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY">
-<code class="descname">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY</code><a class="headerlink" href="#KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>This flag indicates that supplying an incorrect PIN will cause the token to lock itself.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="73%" />
-<col width="27%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY</span></code></td>
-<td><code class="docutils literal"><span class="pre">(1</span> <span class="pre"><<</span> <span class="pre">1)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW"
- >previous</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_QUESTION_PKINIT" href="KRB5_RESPONDER_QUESTION_PKINIT.html" />
- <link rel="prev" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY" href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_QUESTION_PKINIT.html" title="KRB5_RESPONDER_QUESTION_PKINIT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-pkinit-flags-token-user-pin-locked">
-<span id="krb5-responder-pkinit-flags-token-user-pin-locked-data"></span><h1>KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED<a class="headerlink" href="#krb5-responder-pkinit-flags-token-user-pin-locked" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED">
-<code class="descname">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED</code><a class="headerlink" href="#KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>This flag indicates that the user PIN is locked, and you can’t log in to the token with it.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="72%" />
-<col width="28%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED</span></code></td>
-<td><code class="docutils literal"><span class="pre">(1</span> <span class="pre"><<</span> <span class="pre">2)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY"
- >previous</a> |
- <a href="KRB5_RESPONDER_QUESTION_PKINIT.html" title="KRB5_RESPONDER_QUESTION_PKINIT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_QUESTION_OTP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_QUESTION_PASSWORD" href="KRB5_RESPONDER_QUESTION_PASSWORD.html" />
- <link rel="prev" title="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL" href="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html" title="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_QUESTION_PASSWORD.html" title="KRB5_RESPONDER_QUESTION_PASSWORD"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_QUESTION_OTP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-question-otp">
-<span id="krb5-responder-question-otp-data"></span><h1>KRB5_RESPONDER_QUESTION_OTP<a class="headerlink" href="#krb5-responder-question-otp" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_QUESTION_OTP">
-<code class="descname">KRB5_RESPONDER_QUESTION_OTP</code><a class="headerlink" href="#KRB5_RESPONDER_QUESTION_OTP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>OTP responder question.</p>
-<p>The OTP responder question is asked when the KDC indicates that an OTP value is required in order to complete the authentication. The JSON format of the challenge is:</p>
-<div class="highlight-c"><div class="highlight"><pre><span></span><span class="p">{</span>
- <span class="s">"service"</span><span class="o">:</span> <span class="o"><</span><span class="n">string</span> <span class="p">(</span><span class="n">optional</span><span class="p">)</span><span class="o">></span><span class="p">,</span>
- <span class="s">"tokenInfo"</span><span class="o">:</span> <span class="p">[</span>
- <span class="p">{</span>
- <span class="s">"flags"</span><span class="o">:</span> <span class="o"><</span><span class="n">number</span><span class="o">></span><span class="p">,</span>
- <span class="s">"vendor"</span><span class="o">:</span> <span class="o"><</span><span class="n">string</span> <span class="p">(</span><span class="n">optional</span><span class="p">)</span><span class="o">></span><span class="p">,</span>
- <span class="s">"challenge"</span><span class="o">:</span> <span class="o"><</span><span class="n">string</span> <span class="p">(</span><span class="n">optional</span><span class="p">)</span><span class="o">></span><span class="p">,</span>
- <span class="s">"length"</span><span class="o">:</span> <span class="o"><</span><span class="n">number</span> <span class="p">(</span><span class="n">optional</span><span class="p">)</span><span class="o">></span><span class="p">,</span>
- <span class="s">"format"</span><span class="o">:</span> <span class="o"><</span><span class="n">number</span> <span class="p">(</span><span class="n">optional</span><span class="p">)</span><span class="o">></span><span class="p">,</span>
- <span class="s">"tokenID"</span><span class="o">:</span> <span class="o"><</span><span class="n">string</span> <span class="p">(</span><span class="n">optional</span><span class="p">)</span><span class="o">></span><span class="p">,</span>
- <span class="s">"algID"</span><span class="o">:</span> <span class="o"><</span><span class="n">string</span> <span class="p">(</span><span class="n">optional</span><span class="p">)</span><span class="o">></span><span class="p">,</span>
- <span class="p">},</span>
- <span class="p">...</span>
- <span class="p">]</span>
-<span class="p">}</span>
-</pre></div>
-</div>
-<p>The answer to the question MUST be JSON formatted:</p>
-<div class="highlight-c"><div class="highlight"><pre><span></span><span class="p">{</span>
- <span class="s">"tokeninfo"</span><span class="o">:</span> <span class="o"><</span><span class="n">number</span><span class="o">></span><span class="p">,</span>
- <span class="s">"value"</span><span class="o">:</span> <span class="o"><</span><span class="n">string</span> <span class="p">(</span><span class="n">optional</span><span class="p">)</span><span class="o">></span><span class="p">,</span>
- <span class="s">"pin"</span><span class="o">:</span> <span class="o"><</span><span class="n">string</span> <span class="p">(</span><span class="n">optional</span><span class="p">)</span><span class="o">></span><span class="p">,</span>
-<span class="p">}</span>
-</pre></div>
-</div>
-<p>For more detail, please see RFC 6560.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_QUESTION_OTP</span></code></td>
-<td><code class="docutils literal"><span class="pre">"otp"</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_QUESTION_OTP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html" title="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL"
- >previous</a> |
- <a href="KRB5_RESPONDER_QUESTION_PASSWORD.html" title="KRB5_RESPONDER_QUESTION_PASSWORD"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_QUESTION_OTP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_QUESTION_PASSWORD — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_SAFE" href="KRB5_SAFE.html" />
- <link rel="prev" title="KRB5_RESPONDER_QUESTION_OTP" href="KRB5_RESPONDER_QUESTION_OTP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_QUESTION_OTP.html" title="KRB5_RESPONDER_QUESTION_OTP"
- accesskey="P">previous</a> |
- <a href="KRB5_SAFE.html" title="KRB5_SAFE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_QUESTION_PASSWORD">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-question-password">
-<span id="krb5-responder-question-password-data"></span><h1>KRB5_RESPONDER_QUESTION_PASSWORD<a class="headerlink" href="#krb5-responder-question-password" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_QUESTION_PASSWORD">
-<code class="descname">KRB5_RESPONDER_QUESTION_PASSWORD</code><a class="headerlink" href="#KRB5_RESPONDER_QUESTION_PASSWORD" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Long-term password responder question.</p>
-<p>This question is asked when the long-term password is needed. It has no challenge and the response is simply the password string.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="64%" />
-<col width="36%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_QUESTION_PASSWORD</span></code></td>
-<td><code class="docutils literal"><span class="pre">"password"</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_QUESTION_PASSWORD</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_QUESTION_OTP.html" title="KRB5_RESPONDER_QUESTION_OTP"
- >previous</a> |
- <a href="KRB5_SAFE.html" title="KRB5_SAFE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_QUESTION_PASSWORD">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_RESPONDER_QUESTION_PKINIT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN" href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html" />
- <link rel="prev" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED" href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED"
- accesskey="P">previous</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_QUESTION_PKINIT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-question-pkinit">
-<span id="krb5-responder-question-pkinit-data"></span><h1>KRB5_RESPONDER_QUESTION_PKINIT<a class="headerlink" href="#krb5-responder-question-pkinit" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_RESPONDER_QUESTION_PKINIT">
-<code class="descname">KRB5_RESPONDER_QUESTION_PKINIT</code><a class="headerlink" href="#KRB5_RESPONDER_QUESTION_PKINIT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>PKINIT responder question.</p>
-<p>The PKINIT responder question is asked when the client needs a password that’s being used to protect key information, and is formatted as a JSON object. A specific identity’s flags value, if not zero, is the bitwise-OR of one or more of the KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_* flags defined below, and possibly other flags to be added later. Any resemblance to similarly-named CKF_* values in the PKCS#11 API should not be depended on.</p>
-<div class="highlight-c"><div class="highlight"><pre><span></span><span class="p">{</span>
- <span class="n">identity</span> <span class="o"><</span><span class="n">string</span><span class="o">></span> <span class="o">:</span> <span class="n">flags</span> <span class="o"><</span><span class="n">number</span><span class="o">></span><span class="p">,</span>
- <span class="p">...</span>
-<span class="p">}</span>
-</pre></div>
-</div>
-<p>The answer to the question MUST be JSON formatted:</p>
-<div class="highlight-c"><div class="highlight"><pre><span></span><span class="p">{</span>
- <span class="n">identity</span> <span class="o"><</span><span class="n">string</span><span class="o">></span> <span class="o">:</span> <span class="n">password</span> <span class="o"><</span><span class="n">string</span><span class="o">></span><span class="p">,</span>
- <span class="p">...</span>
-<span class="p">}</span>
-</pre></div>
-</div>
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_RESPONDER_QUESTION_PKINIT</span></code></td>
-<td><code class="docutils literal"><span class="pre">"pkinit"</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_RESPONDER_QUESTION_PKINIT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html" title="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED"
- >previous</a> |
- <a href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html" title="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_RESPONDER_QUESTION_PKINIT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_SAFE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_SAM_MUST_PK_ENCRYPT_SAD" href="KRB5_SAM_MUST_PK_ENCRYPT_SAD.html" />
- <link rel="prev" title="KRB5_RESPONDER_QUESTION_PASSWORD" href="KRB5_RESPONDER_QUESTION_PASSWORD.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_RESPONDER_QUESTION_PASSWORD.html" title="KRB5_RESPONDER_QUESTION_PASSWORD"
- accesskey="P">previous</a> |
- <a href="KRB5_SAM_MUST_PK_ENCRYPT_SAD.html" title="KRB5_SAM_MUST_PK_ENCRYPT_SAD"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_SAFE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-safe">
-<span id="krb5-safe-data"></span><h1>KRB5_SAFE<a class="headerlink" href="#krb5-safe" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_SAFE">
-<code class="descname">KRB5_SAFE</code><a class="headerlink" href="#KRB5_SAFE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Safe application message.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="39%" />
-<col width="61%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_SAFE</span></code></td>
-<td><code class="docutils literal"><span class="pre">((krb5_msgtype)20)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_SAFE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_RESPONDER_QUESTION_PASSWORD.html" title="KRB5_RESPONDER_QUESTION_PASSWORD"
- >previous</a> |
- <a href="KRB5_SAM_MUST_PK_ENCRYPT_SAD.html" title="KRB5_SAM_MUST_PK_ENCRYPT_SAD"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_SAFE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_SAM_MUST_PK_ENCRYPT_SAD — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_SAM_SEND_ENCRYPTED_SAD" href="KRB5_SAM_SEND_ENCRYPTED_SAD.html" />
- <link rel="prev" title="KRB5_SAFE" href="KRB5_SAFE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_SAFE.html" title="KRB5_SAFE"
- accesskey="P">previous</a> |
- <a href="KRB5_SAM_SEND_ENCRYPTED_SAD.html" title="KRB5_SAM_SEND_ENCRYPTED_SAD"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_SAM_MUST_PK_ENCRYPT_SAD">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-sam-must-pk-encrypt-sad">
-<span id="krb5-sam-must-pk-encrypt-sad-data"></span><h1>KRB5_SAM_MUST_PK_ENCRYPT_SAD<a class="headerlink" href="#krb5-sam-must-pk-encrypt-sad" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_SAM_MUST_PK_ENCRYPT_SAD">
-<code class="descname">KRB5_SAM_MUST_PK_ENCRYPT_SAD</code><a class="headerlink" href="#KRB5_SAM_MUST_PK_ENCRYPT_SAD" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>currently must be zero</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_SAM_MUST_PK_ENCRYPT_SAD</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x20000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_SAM_MUST_PK_ENCRYPT_SAD</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_SAFE.html" title="KRB5_SAFE"
- >previous</a> |
- <a href="KRB5_SAM_SEND_ENCRYPTED_SAD.html" title="KRB5_SAM_SEND_ENCRYPTED_SAD"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_SAM_MUST_PK_ENCRYPT_SAD">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_SAM_SEND_ENCRYPTED_SAD — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_SAM_USE_SAD_AS_KEY" href="KRB5_SAM_USE_SAD_AS_KEY.html" />
- <link rel="prev" title="KRB5_SAM_MUST_PK_ENCRYPT_SAD" href="KRB5_SAM_MUST_PK_ENCRYPT_SAD.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_SAM_MUST_PK_ENCRYPT_SAD.html" title="KRB5_SAM_MUST_PK_ENCRYPT_SAD"
- accesskey="P">previous</a> |
- <a href="KRB5_SAM_USE_SAD_AS_KEY.html" title="KRB5_SAM_USE_SAD_AS_KEY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_SAM_SEND_ENCRYPTED_SAD">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-sam-send-encrypted-sad">
-<span id="krb5-sam-send-encrypted-sad-data"></span><h1>KRB5_SAM_SEND_ENCRYPTED_SAD<a class="headerlink" href="#krb5-sam-send-encrypted-sad" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_SAM_SEND_ENCRYPTED_SAD">
-<code class="descname">KRB5_SAM_SEND_ENCRYPTED_SAD</code><a class="headerlink" href="#KRB5_SAM_SEND_ENCRYPTED_SAD" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_SAM_SEND_ENCRYPTED_SAD</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x40000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_SAM_SEND_ENCRYPTED_SAD</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_SAM_MUST_PK_ENCRYPT_SAD.html" title="KRB5_SAM_MUST_PK_ENCRYPT_SAD"
- >previous</a> |
- <a href="KRB5_SAM_USE_SAD_AS_KEY.html" title="KRB5_SAM_USE_SAD_AS_KEY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_SAM_SEND_ENCRYPTED_SAD">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_SAM_USE_SAD_AS_KEY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_MATCH_2ND_TKT" href="KRB5_TC_MATCH_2ND_TKT.html" />
- <link rel="prev" title="KRB5_SAM_SEND_ENCRYPTED_SAD" href="KRB5_SAM_SEND_ENCRYPTED_SAD.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_SAM_SEND_ENCRYPTED_SAD.html" title="KRB5_SAM_SEND_ENCRYPTED_SAD"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_MATCH_2ND_TKT.html" title="KRB5_TC_MATCH_2ND_TKT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_SAM_USE_SAD_AS_KEY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-sam-use-sad-as-key">
-<span id="krb5-sam-use-sad-as-key-data"></span><h1>KRB5_SAM_USE_SAD_AS_KEY<a class="headerlink" href="#krb5-sam-use-sad-as-key" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_SAM_USE_SAD_AS_KEY">
-<code class="descname">KRB5_SAM_USE_SAD_AS_KEY</code><a class="headerlink" href="#KRB5_SAM_USE_SAD_AS_KEY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_SAM_USE_SAD_AS_KEY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x80000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_SAM_USE_SAD_AS_KEY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_SAM_SEND_ENCRYPTED_SAD.html" title="KRB5_SAM_SEND_ENCRYPTED_SAD"
- >previous</a> |
- <a href="KRB5_TC_MATCH_2ND_TKT.html" title="KRB5_TC_MATCH_2ND_TKT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_SAM_USE_SAD_AS_KEY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_MATCH_2ND_TKT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_MATCH_AUTHDATA" href="KRB5_TC_MATCH_AUTHDATA.html" />
- <link rel="prev" title="KRB5_SAM_USE_SAD_AS_KEY" href="KRB5_SAM_USE_SAD_AS_KEY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_SAM_USE_SAD_AS_KEY.html" title="KRB5_SAM_USE_SAD_AS_KEY"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_MATCH_AUTHDATA.html" title="KRB5_TC_MATCH_AUTHDATA"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_2ND_TKT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-match-2nd-tkt">
-<span id="krb5-tc-match-2nd-tkt-data"></span><h1>KRB5_TC_MATCH_2ND_TKT<a class="headerlink" href="#krb5-tc-match-2nd-tkt" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_MATCH_2ND_TKT">
-<code class="descname">KRB5_TC_MATCH_2ND_TKT</code><a class="headerlink" href="#KRB5_TC_MATCH_2ND_TKT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>The second ticket must match.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_MATCH_2ND_TKT</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000080</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_MATCH_2ND_TKT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_SAM_USE_SAD_AS_KEY.html" title="KRB5_SAM_USE_SAD_AS_KEY"
- >previous</a> |
- <a href="KRB5_TC_MATCH_AUTHDATA.html" title="KRB5_TC_MATCH_AUTHDATA"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_2ND_TKT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_MATCH_AUTHDATA — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_MATCH_FLAGS" href="KRB5_TC_MATCH_FLAGS.html" />
- <link rel="prev" title="KRB5_TC_MATCH_2ND_TKT" href="KRB5_TC_MATCH_2ND_TKT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_MATCH_2ND_TKT.html" title="KRB5_TC_MATCH_2ND_TKT"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_MATCH_FLAGS.html" title="KRB5_TC_MATCH_FLAGS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_AUTHDATA">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-match-authdata">
-<span id="krb5-tc-match-authdata-data"></span><h1>KRB5_TC_MATCH_AUTHDATA<a class="headerlink" href="#krb5-tc-match-authdata" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_MATCH_AUTHDATA">
-<code class="descname">KRB5_TC_MATCH_AUTHDATA</code><a class="headerlink" href="#KRB5_TC_MATCH_AUTHDATA" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>The authorization data must match.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_MATCH_AUTHDATA</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000020</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_MATCH_AUTHDATA</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_MATCH_2ND_TKT.html" title="KRB5_TC_MATCH_2ND_TKT"
- >previous</a> |
- <a href="KRB5_TC_MATCH_FLAGS.html" title="KRB5_TC_MATCH_FLAGS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_AUTHDATA">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_MATCH_FLAGS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_MATCH_FLAGS_EXACT" href="KRB5_TC_MATCH_FLAGS_EXACT.html" />
- <link rel="prev" title="KRB5_TC_MATCH_AUTHDATA" href="KRB5_TC_MATCH_AUTHDATA.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_MATCH_AUTHDATA.html" title="KRB5_TC_MATCH_AUTHDATA"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_MATCH_FLAGS_EXACT.html" title="KRB5_TC_MATCH_FLAGS_EXACT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_FLAGS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-match-flags">
-<span id="krb5-tc-match-flags-data"></span><h1>KRB5_TC_MATCH_FLAGS<a class="headerlink" href="#krb5-tc-match-flags" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_MATCH_FLAGS">
-<code class="descname">KRB5_TC_MATCH_FLAGS</code><a class="headerlink" href="#KRB5_TC_MATCH_FLAGS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>All the flags set in the match credentials must be set.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_MATCH_FLAGS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000004</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_MATCH_FLAGS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_MATCH_AUTHDATA.html" title="KRB5_TC_MATCH_AUTHDATA"
- >previous</a> |
- <a href="KRB5_TC_MATCH_FLAGS_EXACT.html" title="KRB5_TC_MATCH_FLAGS_EXACT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_FLAGS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_MATCH_FLAGS_EXACT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_MATCH_IS_SKEY" href="KRB5_TC_MATCH_IS_SKEY.html" />
- <link rel="prev" title="KRB5_TC_MATCH_FLAGS" href="KRB5_TC_MATCH_FLAGS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_MATCH_FLAGS.html" title="KRB5_TC_MATCH_FLAGS"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_MATCH_IS_SKEY.html" title="KRB5_TC_MATCH_IS_SKEY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_FLAGS_EXACT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-match-flags-exact">
-<span id="krb5-tc-match-flags-exact-data"></span><h1>KRB5_TC_MATCH_FLAGS_EXACT<a class="headerlink" href="#krb5-tc-match-flags-exact" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_MATCH_FLAGS_EXACT">
-<code class="descname">KRB5_TC_MATCH_FLAGS_EXACT</code><a class="headerlink" href="#KRB5_TC_MATCH_FLAGS_EXACT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>All the flags must match exactly.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_MATCH_FLAGS_EXACT</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000010</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_MATCH_FLAGS_EXACT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_MATCH_FLAGS.html" title="KRB5_TC_MATCH_FLAGS"
- >previous</a> |
- <a href="KRB5_TC_MATCH_IS_SKEY.html" title="KRB5_TC_MATCH_IS_SKEY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_FLAGS_EXACT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_MATCH_IS_SKEY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_MATCH_KTYPE" href="KRB5_TC_MATCH_KTYPE.html" />
- <link rel="prev" title="KRB5_TC_MATCH_FLAGS_EXACT" href="KRB5_TC_MATCH_FLAGS_EXACT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_MATCH_FLAGS_EXACT.html" title="KRB5_TC_MATCH_FLAGS_EXACT"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_MATCH_KTYPE.html" title="KRB5_TC_MATCH_KTYPE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_IS_SKEY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-match-is-skey">
-<span id="krb5-tc-match-is-skey-data"></span><h1>KRB5_TC_MATCH_IS_SKEY<a class="headerlink" href="#krb5-tc-match-is-skey" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_MATCH_IS_SKEY">
-<code class="descname">KRB5_TC_MATCH_IS_SKEY</code><a class="headerlink" href="#KRB5_TC_MATCH_IS_SKEY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>The is_skey field must match exactly.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="56%" />
-<col width="44%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_MATCH_IS_SKEY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_MATCH_IS_SKEY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_MATCH_FLAGS_EXACT.html" title="KRB5_TC_MATCH_FLAGS_EXACT"
- >previous</a> |
- <a href="KRB5_TC_MATCH_KTYPE.html" title="KRB5_TC_MATCH_KTYPE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_IS_SKEY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_MATCH_KTYPE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_MATCH_SRV_NAMEONLY" href="KRB5_TC_MATCH_SRV_NAMEONLY.html" />
- <link rel="prev" title="KRB5_TC_MATCH_IS_SKEY" href="KRB5_TC_MATCH_IS_SKEY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_MATCH_IS_SKEY.html" title="KRB5_TC_MATCH_IS_SKEY"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_MATCH_SRV_NAMEONLY.html" title="KRB5_TC_MATCH_SRV_NAMEONLY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_KTYPE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-match-ktype">
-<span id="krb5-tc-match-ktype-data"></span><h1>KRB5_TC_MATCH_KTYPE<a class="headerlink" href="#krb5-tc-match-ktype" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_MATCH_KTYPE">
-<code class="descname">KRB5_TC_MATCH_KTYPE</code><a class="headerlink" href="#KRB5_TC_MATCH_KTYPE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>The encryption key type must match.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_MATCH_KTYPE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000100</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_MATCH_KTYPE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_MATCH_IS_SKEY.html" title="KRB5_TC_MATCH_IS_SKEY"
- >previous</a> |
- <a href="KRB5_TC_MATCH_SRV_NAMEONLY.html" title="KRB5_TC_MATCH_SRV_NAMEONLY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_KTYPE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_MATCH_SRV_NAMEONLY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_MATCH_TIMES" href="KRB5_TC_MATCH_TIMES.html" />
- <link rel="prev" title="KRB5_TC_MATCH_KTYPE" href="KRB5_TC_MATCH_KTYPE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_MATCH_KTYPE.html" title="KRB5_TC_MATCH_KTYPE"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_MATCH_TIMES.html" title="KRB5_TC_MATCH_TIMES"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_SRV_NAMEONLY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-match-srv-nameonly">
-<span id="krb5-tc-match-srv-nameonly-data"></span><h1>KRB5_TC_MATCH_SRV_NAMEONLY<a class="headerlink" href="#krb5-tc-match-srv-nameonly" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_MATCH_SRV_NAMEONLY">
-<code class="descname">KRB5_TC_MATCH_SRV_NAMEONLY</code><a class="headerlink" href="#KRB5_TC_MATCH_SRV_NAMEONLY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Only the name portion of the principal name must match.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_MATCH_SRV_NAMEONLY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000040</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_MATCH_SRV_NAMEONLY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_MATCH_KTYPE.html" title="KRB5_TC_MATCH_KTYPE"
- >previous</a> |
- <a href="KRB5_TC_MATCH_TIMES.html" title="KRB5_TC_MATCH_TIMES"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_SRV_NAMEONLY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_MATCH_TIMES — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_MATCH_TIMES_EXACT" href="KRB5_TC_MATCH_TIMES_EXACT.html" />
- <link rel="prev" title="KRB5_TC_MATCH_SRV_NAMEONLY" href="KRB5_TC_MATCH_SRV_NAMEONLY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_MATCH_SRV_NAMEONLY.html" title="KRB5_TC_MATCH_SRV_NAMEONLY"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_MATCH_TIMES_EXACT.html" title="KRB5_TC_MATCH_TIMES_EXACT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_TIMES">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-match-times">
-<span id="krb5-tc-match-times-data"></span><h1>KRB5_TC_MATCH_TIMES<a class="headerlink" href="#krb5-tc-match-times" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_MATCH_TIMES">
-<code class="descname">KRB5_TC_MATCH_TIMES</code><a class="headerlink" href="#KRB5_TC_MATCH_TIMES" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>The requested lifetime must be at least as great as the time specified.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_MATCH_TIMES</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_MATCH_TIMES</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_MATCH_SRV_NAMEONLY.html" title="KRB5_TC_MATCH_SRV_NAMEONLY"
- >previous</a> |
- <a href="KRB5_TC_MATCH_TIMES_EXACT.html" title="KRB5_TC_MATCH_TIMES_EXACT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_TIMES">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_MATCH_TIMES_EXACT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_NOTICKET" href="KRB5_TC_NOTICKET.html" />
- <link rel="prev" title="KRB5_TC_MATCH_TIMES" href="KRB5_TC_MATCH_TIMES.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_MATCH_TIMES.html" title="KRB5_TC_MATCH_TIMES"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_NOTICKET.html" title="KRB5_TC_NOTICKET"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_TIMES_EXACT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-match-times-exact">
-<span id="krb5-tc-match-times-exact-data"></span><h1>KRB5_TC_MATCH_TIMES_EXACT<a class="headerlink" href="#krb5-tc-match-times-exact" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_MATCH_TIMES_EXACT">
-<code class="descname">KRB5_TC_MATCH_TIMES_EXACT</code><a class="headerlink" href="#KRB5_TC_MATCH_TIMES_EXACT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>All the time fields must match exactly.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_MATCH_TIMES_EXACT</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000008</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_MATCH_TIMES_EXACT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_MATCH_TIMES.html" title="KRB5_TC_MATCH_TIMES"
- >previous</a> |
- <a href="KRB5_TC_NOTICKET.html" title="KRB5_TC_NOTICKET"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_MATCH_TIMES_EXACT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_NOTICKET — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_OPENCLOSE" href="KRB5_TC_OPENCLOSE.html" />
- <link rel="prev" title="KRB5_TC_MATCH_TIMES_EXACT" href="KRB5_TC_MATCH_TIMES_EXACT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_MATCH_TIMES_EXACT.html" title="KRB5_TC_MATCH_TIMES_EXACT"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_OPENCLOSE.html" title="KRB5_TC_OPENCLOSE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_NOTICKET">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-noticket">
-<span id="krb5-tc-noticket-data"></span><h1>KRB5_TC_NOTICKET<a class="headerlink" href="#krb5-tc-noticket" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_NOTICKET">
-<code class="descname">KRB5_TC_NOTICKET</code><a class="headerlink" href="#KRB5_TC_NOTICKET" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_NOTICKET</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000002</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_NOTICKET</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_MATCH_TIMES_EXACT.html" title="KRB5_TC_MATCH_TIMES_EXACT"
- >previous</a> |
- <a href="KRB5_TC_OPENCLOSE.html" title="KRB5_TC_OPENCLOSE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_NOTICKET">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_OPENCLOSE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TC_SUPPORTED_KTYPES" href="KRB5_TC_SUPPORTED_KTYPES.html" />
- <link rel="prev" title="KRB5_TC_NOTICKET" href="KRB5_TC_NOTICKET.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_NOTICKET.html" title="KRB5_TC_NOTICKET"
- accesskey="P">previous</a> |
- <a href="KRB5_TC_SUPPORTED_KTYPES.html" title="KRB5_TC_SUPPORTED_KTYPES"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_OPENCLOSE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-openclose">
-<span id="krb5-tc-openclose-data"></span><h1>KRB5_TC_OPENCLOSE<a class="headerlink" href="#krb5-tc-openclose" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_OPENCLOSE">
-<code class="descname">KRB5_TC_OPENCLOSE</code><a class="headerlink" href="#KRB5_TC_OPENCLOSE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Open and close the file for each cache operation.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_OPENCLOSE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_OPENCLOSE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_NOTICKET.html" title="KRB5_TC_NOTICKET"
- >previous</a> |
- <a href="KRB5_TC_SUPPORTED_KTYPES.html" title="KRB5_TC_SUPPORTED_KTYPES"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_OPENCLOSE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TC_SUPPORTED_KTYPES — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TGS_NAME" href="KRB5_TGS_NAME.html" />
- <link rel="prev" title="KRB5_TC_OPENCLOSE" href="KRB5_TC_OPENCLOSE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_OPENCLOSE.html" title="KRB5_TC_OPENCLOSE"
- accesskey="P">previous</a> |
- <a href="KRB5_TGS_NAME.html" title="KRB5_TGS_NAME"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_SUPPORTED_KTYPES">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tc-supported-ktypes">
-<span id="krb5-tc-supported-ktypes-data"></span><h1>KRB5_TC_SUPPORTED_KTYPES<a class="headerlink" href="#krb5-tc-supported-ktypes" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TC_SUPPORTED_KTYPES">
-<code class="descname">KRB5_TC_SUPPORTED_KTYPES</code><a class="headerlink" href="#KRB5_TC_SUPPORTED_KTYPES" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>The supported key types must match.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TC_SUPPORTED_KTYPES</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00000200</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TC_SUPPORTED_KTYPES</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_OPENCLOSE.html" title="KRB5_TC_OPENCLOSE"
- >previous</a> |
- <a href="KRB5_TGS_NAME.html" title="KRB5_TGS_NAME"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TC_SUPPORTED_KTYPES">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TGS_NAME — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TGS_NAME_SIZE" href="KRB5_TGS_NAME_SIZE.html" />
- <link rel="prev" title="KRB5_TC_SUPPORTED_KTYPES" href="KRB5_TC_SUPPORTED_KTYPES.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TC_SUPPORTED_KTYPES.html" title="KRB5_TC_SUPPORTED_KTYPES"
- accesskey="P">previous</a> |
- <a href="KRB5_TGS_NAME_SIZE.html" title="KRB5_TGS_NAME_SIZE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TGS_NAME">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tgs-name">
-<span id="krb5-tgs-name-data"></span><h1>KRB5_TGS_NAME<a class="headerlink" href="#krb5-tgs-name" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TGS_NAME">
-<code class="descname">KRB5_TGS_NAME</code><a class="headerlink" href="#KRB5_TGS_NAME" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="48%" />
-<col width="52%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TGS_NAME</span></code></td>
-<td><code class="docutils literal"><span class="pre">"krbtgt"</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TGS_NAME</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TC_SUPPORTED_KTYPES.html" title="KRB5_TC_SUPPORTED_KTYPES"
- >previous</a> |
- <a href="KRB5_TGS_NAME_SIZE.html" title="KRB5_TGS_NAME_SIZE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TGS_NAME">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TGS_NAME_SIZE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TGS_REP" href="KRB5_TGS_REP.html" />
- <link rel="prev" title="KRB5_TGS_NAME" href="KRB5_TGS_NAME.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TGS_NAME.html" title="KRB5_TGS_NAME"
- accesskey="P">previous</a> |
- <a href="KRB5_TGS_REP.html" title="KRB5_TGS_REP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TGS_NAME_SIZE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tgs-name-size">
-<span id="krb5-tgs-name-size-data"></span><h1>KRB5_TGS_NAME_SIZE<a class="headerlink" href="#krb5-tgs-name-size" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TGS_NAME_SIZE">
-<code class="descname">KRB5_TGS_NAME_SIZE</code><a class="headerlink" href="#KRB5_TGS_NAME_SIZE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="53%" />
-<col width="47%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TGS_NAME_SIZE</span></code></td>
-<td><code class="docutils literal"><span class="pre">6</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TGS_NAME_SIZE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TGS_NAME.html" title="KRB5_TGS_NAME"
- >previous</a> |
- <a href="KRB5_TGS_REP.html" title="KRB5_TGS_REP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TGS_NAME_SIZE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TGS_REP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TGS_REQ" href="KRB5_TGS_REQ.html" />
- <link rel="prev" title="KRB5_TGS_NAME_SIZE" href="KRB5_TGS_NAME_SIZE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TGS_NAME_SIZE.html" title="KRB5_TGS_NAME_SIZE"
- accesskey="P">previous</a> |
- <a href="KRB5_TGS_REQ.html" title="KRB5_TGS_REQ"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TGS_REP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tgs-rep">
-<span id="krb5-tgs-rep-data"></span><h1>KRB5_TGS_REP<a class="headerlink" href="#krb5-tgs-rep" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TGS_REP">
-<code class="descname">KRB5_TGS_REP</code><a class="headerlink" href="#KRB5_TGS_REP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Response to TGS request.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="43%" />
-<col width="57%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TGS_REP</span></code></td>
-<td><code class="docutils literal"><span class="pre">((krb5_msgtype)13)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TGS_REP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TGS_NAME_SIZE.html" title="KRB5_TGS_NAME_SIZE"
- >previous</a> |
- <a href="KRB5_TGS_REQ.html" title="KRB5_TGS_REQ"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TGS_REP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TGS_REQ — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE" href="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html" />
- <link rel="prev" title="KRB5_TGS_REP" href="KRB5_TGS_REP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TGS_REP.html" title="KRB5_TGS_REP"
- accesskey="P">previous</a> |
- <a href="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html" title="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TGS_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tgs-req">
-<span id="krb5-tgs-req-data"></span><h1>KRB5_TGS_REQ<a class="headerlink" href="#krb5-tgs-req" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TGS_REQ">
-<code class="descname">KRB5_TGS_REQ</code><a class="headerlink" href="#KRB5_TGS_REQ" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Ticket granting server request.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="43%" />
-<col width="57%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TGS_REQ</span></code></td>
-<td><code class="docutils literal"><span class="pre">((krb5_msgtype)12)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TGS_REQ</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TGS_REP.html" title="KRB5_TGS_REP"
- >previous</a> |
- <a href="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html" title="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TGS_REQ">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_TKT_CREDS_STEP_FLAG_CONTINUE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL" href="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html" />
- <link rel="prev" title="KRB5_TGS_REQ" href="KRB5_TGS_REQ.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TGS_REQ.html" title="KRB5_TGS_REQ"
- accesskey="P">previous</a> |
- <a href="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html" title="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TKT_CREDS_STEP_FLAG_CONTINUE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tkt-creds-step-flag-continue">
-<span id="krb5-tkt-creds-step-flag-continue-data"></span><h1>KRB5_TKT_CREDS_STEP_FLAG_CONTINUE<a class="headerlink" href="#krb5-tkt-creds-step-flag-continue" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE">
-<code class="descname">KRB5_TKT_CREDS_STEP_FLAG_CONTINUE</code><a class="headerlink" href="#KRB5_TKT_CREDS_STEP_FLAG_CONTINUE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>More responses needed.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="65%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_TKT_CREDS_STEP_FLAG_CONTINUE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x1</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_TKT_CREDS_STEP_FLAG_CONTINUE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TGS_REQ.html" title="KRB5_TGS_REQ"
- >previous</a> |
- <a href="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html" title="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_TKT_CREDS_STEP_FLAG_CONTINUE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="KRB5_WELLKNOWN_NAMESTR" href="KRB5_WELLKNOWN_NAMESTR.html" />
- <link rel="prev" title="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE" href="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html" title="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE"
- accesskey="P">previous</a> |
- <a href="KRB5_WELLKNOWN_NAMESTR.html" title="KRB5_WELLKNOWN_NAMESTR"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-verify-init-creds-opt-ap-req-nofail">
-<span id="krb5-verify-init-creds-opt-ap-req-nofail-data"></span><h1>KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL<a class="headerlink" href="#krb5-verify-init-creds-opt-ap-req-nofail" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL">
-<code class="descname">KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL</code><a class="headerlink" href="#KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="68%" />
-<col width="32%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x0001</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html" title="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE"
- >previous</a> |
- <a href="KRB5_WELLKNOWN_NAMESTR.html" title="KRB5_WELLKNOWN_NAMESTR"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KRB5_WELLKNOWN_NAMESTR — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="LR_TYPE_INTERPRETATION_MASK" href="LR_TYPE_INTERPRETATION_MASK.html" />
- <link rel="prev" title="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL" href="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html" title="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL"
- accesskey="P">previous</a> |
- <a href="LR_TYPE_INTERPRETATION_MASK.html" title="LR_TYPE_INTERPRETATION_MASK"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_WELLKNOWN_NAMESTR">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-wellknown-namestr">
-<span id="krb5-wellknown-namestr-data"></span><h1>KRB5_WELLKNOWN_NAMESTR<a class="headerlink" href="#krb5-wellknown-namestr" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="KRB5_WELLKNOWN_NAMESTR">
-<code class="descname">KRB5_WELLKNOWN_NAMESTR</code><a class="headerlink" href="#KRB5_WELLKNOWN_NAMESTR" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>First component of NT_WELLKNOWN principals.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">KRB5_WELLKNOWN_NAMESTR</span></code></td>
-<td><code class="docutils literal"><span class="pre">"WELLKNOWN"</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KRB5_WELLKNOWN_NAMESTR</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html" title="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL"
- >previous</a> |
- <a href="LR_TYPE_INTERPRETATION_MASK.html" title="LR_TYPE_INTERPRETATION_MASK"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KRB5_WELLKNOWN_NAMESTR">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>LR_TYPE_INTERPRETATION_MASK — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="LR_TYPE_THIS_SERVER_ONLY" href="LR_TYPE_THIS_SERVER_ONLY.html" />
- <link rel="prev" title="KRB5_WELLKNOWN_NAMESTR" href="KRB5_WELLKNOWN_NAMESTR.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="KRB5_WELLKNOWN_NAMESTR.html" title="KRB5_WELLKNOWN_NAMESTR"
- accesskey="P">previous</a> |
- <a href="LR_TYPE_THIS_SERVER_ONLY.html" title="LR_TYPE_THIS_SERVER_ONLY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__LR_TYPE_INTERPRETATION_MASK">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="lr-type-interpretation-mask">
-<span id="lr-type-interpretation-mask-data"></span><h1>LR_TYPE_INTERPRETATION_MASK<a class="headerlink" href="#lr-type-interpretation-mask" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="LR_TYPE_INTERPRETATION_MASK">
-<code class="descname">LR_TYPE_INTERPRETATION_MASK</code><a class="headerlink" href="#LR_TYPE_INTERPRETATION_MASK" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">LR_TYPE_INTERPRETATION_MASK</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x7fff</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">LR_TYPE_INTERPRETATION_MASK</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="KRB5_WELLKNOWN_NAMESTR.html" title="KRB5_WELLKNOWN_NAMESTR"
- >previous</a> |
- <a href="LR_TYPE_THIS_SERVER_ONLY.html" title="LR_TYPE_THIS_SERVER_ONLY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__LR_TYPE_INTERPRETATION_MASK">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>LR_TYPE_THIS_SERVER_ONLY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="MAX_KEYTAB_NAME_LEN" href="MAX_KEYTAB_NAME_LEN.html" />
- <link rel="prev" title="LR_TYPE_INTERPRETATION_MASK" href="LR_TYPE_INTERPRETATION_MASK.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="LR_TYPE_INTERPRETATION_MASK.html" title="LR_TYPE_INTERPRETATION_MASK"
- accesskey="P">previous</a> |
- <a href="MAX_KEYTAB_NAME_LEN.html" title="MAX_KEYTAB_NAME_LEN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__LR_TYPE_THIS_SERVER_ONLY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="lr-type-this-server-only">
-<span id="lr-type-this-server-only-data"></span><h1>LR_TYPE_THIS_SERVER_ONLY<a class="headerlink" href="#lr-type-this-server-only" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="LR_TYPE_THIS_SERVER_ONLY">
-<code class="descname">LR_TYPE_THIS_SERVER_ONLY</code><a class="headerlink" href="#LR_TYPE_THIS_SERVER_ONLY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">LR_TYPE_THIS_SERVER_ONLY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x8000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">LR_TYPE_THIS_SERVER_ONLY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="LR_TYPE_INTERPRETATION_MASK.html" title="LR_TYPE_INTERPRETATION_MASK"
- >previous</a> |
- <a href="MAX_KEYTAB_NAME_LEN.html" title="MAX_KEYTAB_NAME_LEN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__LR_TYPE_THIS_SERVER_ONLY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>MAX_KEYTAB_NAME_LEN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="MSEC_DIRBIT" href="MSEC_DIRBIT.html" />
- <link rel="prev" title="LR_TYPE_THIS_SERVER_ONLY" href="LR_TYPE_THIS_SERVER_ONLY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="LR_TYPE_THIS_SERVER_ONLY.html" title="LR_TYPE_THIS_SERVER_ONLY"
- accesskey="P">previous</a> |
- <a href="MSEC_DIRBIT.html" title="MSEC_DIRBIT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MAX_KEYTAB_NAME_LEN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="max-keytab-name-len">
-<span id="max-keytab-name-len-data"></span><h1>MAX_KEYTAB_NAME_LEN<a class="headerlink" href="#max-keytab-name-len" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="MAX_KEYTAB_NAME_LEN">
-<code class="descname">MAX_KEYTAB_NAME_LEN</code><a class="headerlink" href="#MAX_KEYTAB_NAME_LEN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Long enough for MAXPATHLEN + some extra.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">MAX_KEYTAB_NAME_LEN</span></code></td>
-<td><code class="docutils literal"><span class="pre">1100</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">MAX_KEYTAB_NAME_LEN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="LR_TYPE_THIS_SERVER_ONLY.html" title="LR_TYPE_THIS_SERVER_ONLY"
- >previous</a> |
- <a href="MSEC_DIRBIT.html" title="MSEC_DIRBIT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MAX_KEYTAB_NAME_LEN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>MSEC_DIRBIT — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="MSEC_VAL_MASK" href="MSEC_VAL_MASK.html" />
- <link rel="prev" title="MAX_KEYTAB_NAME_LEN" href="MAX_KEYTAB_NAME_LEN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="MAX_KEYTAB_NAME_LEN.html" title="MAX_KEYTAB_NAME_LEN"
- accesskey="P">previous</a> |
- <a href="MSEC_VAL_MASK.html" title="MSEC_VAL_MASK"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MSEC_DIRBIT">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="msec-dirbit">
-<span id="msec-dirbit-data"></span><h1>MSEC_DIRBIT<a class="headerlink" href="#msec-dirbit" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="MSEC_DIRBIT">
-<code class="descname">MSEC_DIRBIT</code><a class="headerlink" href="#MSEC_DIRBIT" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="45%" />
-<col width="55%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">MSEC_DIRBIT</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x8000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">MSEC_DIRBIT</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="MAX_KEYTAB_NAME_LEN.html" title="MAX_KEYTAB_NAME_LEN"
- >previous</a> |
- <a href="MSEC_VAL_MASK.html" title="MSEC_VAL_MASK"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MSEC_DIRBIT">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>MSEC_VAL_MASK — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="SALT_TYPE_AFS_LENGTH" href="SALT_TYPE_AFS_LENGTH.html" />
- <link rel="prev" title="MSEC_DIRBIT" href="MSEC_DIRBIT.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="MSEC_DIRBIT.html" title="MSEC_DIRBIT"
- accesskey="P">previous</a> |
- <a href="SALT_TYPE_AFS_LENGTH.html" title="SALT_TYPE_AFS_LENGTH"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MSEC_VAL_MASK">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="msec-val-mask">
-<span id="msec-val-mask-data"></span><h1>MSEC_VAL_MASK<a class="headerlink" href="#msec-val-mask" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="MSEC_VAL_MASK">
-<code class="descname">MSEC_VAL_MASK</code><a class="headerlink" href="#MSEC_VAL_MASK" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="48%" />
-<col width="52%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">MSEC_VAL_MASK</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x7fff</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">MSEC_VAL_MASK</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="MSEC_DIRBIT.html" title="MSEC_DIRBIT"
- >previous</a> |
- <a href="SALT_TYPE_AFS_LENGTH.html" title="SALT_TYPE_AFS_LENGTH"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MSEC_VAL_MASK">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>SALT_TYPE_AFS_LENGTH — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="SALT_TYPE_NO_LENGTH" href="SALT_TYPE_NO_LENGTH.html" />
- <link rel="prev" title="MSEC_VAL_MASK" href="MSEC_VAL_MASK.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="MSEC_VAL_MASK.html" title="MSEC_VAL_MASK"
- accesskey="P">previous</a> |
- <a href="SALT_TYPE_NO_LENGTH.html" title="SALT_TYPE_NO_LENGTH"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__SALT_TYPE_AFS_LENGTH">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="salt-type-afs-length">
-<span id="salt-type-afs-length-data"></span><h1>SALT_TYPE_AFS_LENGTH<a class="headerlink" href="#salt-type-afs-length" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="SALT_TYPE_AFS_LENGTH">
-<code class="descname">SALT_TYPE_AFS_LENGTH</code><a class="headerlink" href="#SALT_TYPE_AFS_LENGTH" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">SALT_TYPE_AFS_LENGTH</span></code></td>
-<td><code class="docutils literal"><span class="pre">UINT_MAX</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">SALT_TYPE_AFS_LENGTH</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="MSEC_VAL_MASK.html" title="MSEC_VAL_MASK"
- >previous</a> |
- <a href="SALT_TYPE_NO_LENGTH.html" title="SALT_TYPE_NO_LENGTH"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__SALT_TYPE_AFS_LENGTH">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>SALT_TYPE_NO_LENGTH — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="THREEPARAMOPEN" href="THREEPARAMOPEN.html" />
- <link rel="prev" title="SALT_TYPE_AFS_LENGTH" href="SALT_TYPE_AFS_LENGTH.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="SALT_TYPE_AFS_LENGTH.html" title="SALT_TYPE_AFS_LENGTH"
- accesskey="P">previous</a> |
- <a href="THREEPARAMOPEN.html" title="THREEPARAMOPEN"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__SALT_TYPE_NO_LENGTH">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="salt-type-no-length">
-<span id="salt-type-no-length-data"></span><h1>SALT_TYPE_NO_LENGTH<a class="headerlink" href="#salt-type-no-length" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="SALT_TYPE_NO_LENGTH">
-<code class="descname">SALT_TYPE_NO_LENGTH</code><a class="headerlink" href="#SALT_TYPE_NO_LENGTH" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">SALT_TYPE_NO_LENGTH</span></code></td>
-<td><code class="docutils literal"><span class="pre">UINT_MAX</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">SALT_TYPE_NO_LENGTH</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="SALT_TYPE_AFS_LENGTH.html" title="SALT_TYPE_AFS_LENGTH"
- >previous</a> |
- <a href="THREEPARAMOPEN.html" title="THREEPARAMOPEN"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__SALT_TYPE_NO_LENGTH">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>THREEPARAMOPEN — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_ANONYMOUS" href="TKT_FLG_ANONYMOUS.html" />
- <link rel="prev" title="SALT_TYPE_NO_LENGTH" href="SALT_TYPE_NO_LENGTH.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="SALT_TYPE_NO_LENGTH.html" title="SALT_TYPE_NO_LENGTH"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_ANONYMOUS.html" title="TKT_FLG_ANONYMOUS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__THREEPARAMOPEN">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="threeparamopen">
-<span id="threeparamopen-data"></span><h1>THREEPARAMOPEN<a class="headerlink" href="#threeparamopen" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="THREEPARAMOPEN">
-<code class="descname">THREEPARAMOPEN</code><a class="headerlink" href="#THREEPARAMOPEN" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="58%" />
-<col width="42%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">THREEPARAMOPEN</span> <span class="pre">(x,</span> <span class="pre">y,</span> <span class="pre">z)</span></code></td>
-<td><code class="docutils literal"><span class="pre">open(x,y,z)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">THREEPARAMOPEN</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="SALT_TYPE_NO_LENGTH.html" title="SALT_TYPE_NO_LENGTH"
- >previous</a> |
- <a href="TKT_FLG_ANONYMOUS.html" title="TKT_FLG_ANONYMOUS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__THREEPARAMOPEN">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_ANONYMOUS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_ENC_PA_REP" href="TKT_FLG_ENC_PA_REP.html" />
- <link rel="prev" title="THREEPARAMOPEN" href="THREEPARAMOPEN.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="THREEPARAMOPEN.html" title="THREEPARAMOPEN"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_ENC_PA_REP.html" title="TKT_FLG_ENC_PA_REP"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_ANONYMOUS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-anonymous">
-<span id="tkt-flg-anonymous-data"></span><h1>TKT_FLG_ANONYMOUS<a class="headerlink" href="#tkt-flg-anonymous" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_ANONYMOUS">
-<code class="descname">TKT_FLG_ANONYMOUS</code><a class="headerlink" href="#TKT_FLG_ANONYMOUS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_ANONYMOUS</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00008000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_ANONYMOUS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="THREEPARAMOPEN.html" title="THREEPARAMOPEN"
- >previous</a> |
- <a href="TKT_FLG_ENC_PA_REP.html" title="TKT_FLG_ENC_PA_REP"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_ANONYMOUS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_ENC_PA_REP — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_FORWARDABLE" href="TKT_FLG_FORWARDABLE.html" />
- <link rel="prev" title="TKT_FLG_ANONYMOUS" href="TKT_FLG_ANONYMOUS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_ANONYMOUS.html" title="TKT_FLG_ANONYMOUS"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_FORWARDABLE.html" title="TKT_FLG_FORWARDABLE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_ENC_PA_REP">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-enc-pa-rep">
-<span id="tkt-flg-enc-pa-rep-data"></span><h1>TKT_FLG_ENC_PA_REP<a class="headerlink" href="#tkt-flg-enc-pa-rep" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_ENC_PA_REP">
-<code class="descname">TKT_FLG_ENC_PA_REP</code><a class="headerlink" href="#TKT_FLG_ENC_PA_REP" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="53%" />
-<col width="47%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_ENC_PA_REP</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00010000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_ENC_PA_REP</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_ANONYMOUS.html" title="TKT_FLG_ANONYMOUS"
- >previous</a> |
- <a href="TKT_FLG_FORWARDABLE.html" title="TKT_FLG_FORWARDABLE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_ENC_PA_REP">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_FORWARDABLE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_FORWARDED" href="TKT_FLG_FORWARDED.html" />
- <link rel="prev" title="TKT_FLG_ENC_PA_REP" href="TKT_FLG_ENC_PA_REP.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_ENC_PA_REP.html" title="TKT_FLG_ENC_PA_REP"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_FORWARDED.html" title="TKT_FLG_FORWARDED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_FORWARDABLE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-forwardable">
-<span id="tkt-flg-forwardable-data"></span><h1>TKT_FLG_FORWARDABLE<a class="headerlink" href="#tkt-flg-forwardable" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_FORWARDABLE">
-<code class="descname">TKT_FLG_FORWARDABLE</code><a class="headerlink" href="#TKT_FLG_FORWARDABLE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="54%" />
-<col width="46%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_FORWARDABLE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x40000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_FORWARDABLE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_ENC_PA_REP.html" title="TKT_FLG_ENC_PA_REP"
- >previous</a> |
- <a href="TKT_FLG_FORWARDED.html" title="TKT_FLG_FORWARDED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_FORWARDABLE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_FORWARDED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_HW_AUTH" href="TKT_FLG_HW_AUTH.html" />
- <link rel="prev" title="TKT_FLG_FORWARDABLE" href="TKT_FLG_FORWARDABLE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_FORWARDABLE.html" title="TKT_FLG_FORWARDABLE"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_HW_AUTH.html" title="TKT_FLG_HW_AUTH"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_FORWARDED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-forwarded">
-<span id="tkt-flg-forwarded-data"></span><h1>TKT_FLG_FORWARDED<a class="headerlink" href="#tkt-flg-forwarded" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_FORWARDED">
-<code class="descname">TKT_FLG_FORWARDED</code><a class="headerlink" href="#TKT_FLG_FORWARDED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_FORWARDED</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x20000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_FORWARDED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_FORWARDABLE.html" title="TKT_FLG_FORWARDABLE"
- >previous</a> |
- <a href="TKT_FLG_HW_AUTH.html" title="TKT_FLG_HW_AUTH"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_FORWARDED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_HW_AUTH — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_INITIAL" href="TKT_FLG_INITIAL.html" />
- <link rel="prev" title="TKT_FLG_FORWARDED" href="TKT_FLG_FORWARDED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_FORWARDED.html" title="TKT_FLG_FORWARDED"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_INITIAL.html" title="TKT_FLG_INITIAL"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_HW_AUTH">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-hw-auth">
-<span id="tkt-flg-hw-auth-data"></span><h1>TKT_FLG_HW_AUTH<a class="headerlink" href="#tkt-flg-hw-auth" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_HW_AUTH">
-<code class="descname">TKT_FLG_HW_AUTH</code><a class="headerlink" href="#TKT_FLG_HW_AUTH" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="50%" />
-<col width="50%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_HW_AUTH</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00100000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_HW_AUTH</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_FORWARDED.html" title="TKT_FLG_FORWARDED"
- >previous</a> |
- <a href="TKT_FLG_INITIAL.html" title="TKT_FLG_INITIAL"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_HW_AUTH">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_INITIAL — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_INVALID" href="TKT_FLG_INVALID.html" />
- <link rel="prev" title="TKT_FLG_HW_AUTH" href="TKT_FLG_HW_AUTH.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_HW_AUTH.html" title="TKT_FLG_HW_AUTH"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_INVALID.html" title="TKT_FLG_INVALID"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_INITIAL">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-initial">
-<span id="tkt-flg-initial-data"></span><h1>TKT_FLG_INITIAL<a class="headerlink" href="#tkt-flg-initial" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_INITIAL">
-<code class="descname">TKT_FLG_INITIAL</code><a class="headerlink" href="#TKT_FLG_INITIAL" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="50%" />
-<col width="50%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_INITIAL</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00400000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_INITIAL</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_HW_AUTH.html" title="TKT_FLG_HW_AUTH"
- >previous</a> |
- <a href="TKT_FLG_INVALID.html" title="TKT_FLG_INVALID"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_INITIAL">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_INVALID — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_MAY_POSTDATE" href="TKT_FLG_MAY_POSTDATE.html" />
- <link rel="prev" title="TKT_FLG_INITIAL" href="TKT_FLG_INITIAL.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_INITIAL.html" title="TKT_FLG_INITIAL"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_MAY_POSTDATE.html" title="TKT_FLG_MAY_POSTDATE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_INVALID">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-invalid">
-<span id="tkt-flg-invalid-data"></span><h1>TKT_FLG_INVALID<a class="headerlink" href="#tkt-flg-invalid" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_INVALID">
-<code class="descname">TKT_FLG_INVALID</code><a class="headerlink" href="#TKT_FLG_INVALID" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="50%" />
-<col width="50%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_INVALID</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x01000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_INVALID</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_INITIAL.html" title="TKT_FLG_INITIAL"
- >previous</a> |
- <a href="TKT_FLG_MAY_POSTDATE.html" title="TKT_FLG_MAY_POSTDATE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_INVALID">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_MAY_POSTDATE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_OK_AS_DELEGATE" href="TKT_FLG_OK_AS_DELEGATE.html" />
- <link rel="prev" title="TKT_FLG_INVALID" href="TKT_FLG_INVALID.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_INVALID.html" title="TKT_FLG_INVALID"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_OK_AS_DELEGATE.html" title="TKT_FLG_OK_AS_DELEGATE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_MAY_POSTDATE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-may-postdate">
-<span id="tkt-flg-may-postdate-data"></span><h1>TKT_FLG_MAY_POSTDATE<a class="headerlink" href="#tkt-flg-may-postdate" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_MAY_POSTDATE">
-<code class="descname">TKT_FLG_MAY_POSTDATE</code><a class="headerlink" href="#TKT_FLG_MAY_POSTDATE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="55%" />
-<col width="45%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_MAY_POSTDATE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x04000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_MAY_POSTDATE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_INVALID.html" title="TKT_FLG_INVALID"
- >previous</a> |
- <a href="TKT_FLG_OK_AS_DELEGATE.html" title="TKT_FLG_OK_AS_DELEGATE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_MAY_POSTDATE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_OK_AS_DELEGATE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_POSTDATED" href="TKT_FLG_POSTDATED.html" />
- <link rel="prev" title="TKT_FLG_MAY_POSTDATE" href="TKT_FLG_MAY_POSTDATE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_MAY_POSTDATE.html" title="TKT_FLG_MAY_POSTDATE"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_POSTDATED.html" title="TKT_FLG_POSTDATED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_OK_AS_DELEGATE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-ok-as-delegate">
-<span id="tkt-flg-ok-as-delegate-data"></span><h1>TKT_FLG_OK_AS_DELEGATE<a class="headerlink" href="#tkt-flg-ok-as-delegate" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_OK_AS_DELEGATE">
-<code class="descname">TKT_FLG_OK_AS_DELEGATE</code><a class="headerlink" href="#TKT_FLG_OK_AS_DELEGATE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="57%" />
-<col width="43%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_OK_AS_DELEGATE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00040000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_OK_AS_DELEGATE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_MAY_POSTDATE.html" title="TKT_FLG_MAY_POSTDATE"
- >previous</a> |
- <a href="TKT_FLG_POSTDATED.html" title="TKT_FLG_POSTDATED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_OK_AS_DELEGATE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_POSTDATED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_PRE_AUTH" href="TKT_FLG_PRE_AUTH.html" />
- <link rel="prev" title="TKT_FLG_OK_AS_DELEGATE" href="TKT_FLG_OK_AS_DELEGATE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_OK_AS_DELEGATE.html" title="TKT_FLG_OK_AS_DELEGATE"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_PRE_AUTH.html" title="TKT_FLG_PRE_AUTH"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_POSTDATED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-postdated">
-<span id="tkt-flg-postdated-data"></span><h1>TKT_FLG_POSTDATED<a class="headerlink" href="#tkt-flg-postdated" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_POSTDATED">
-<code class="descname">TKT_FLG_POSTDATED</code><a class="headerlink" href="#TKT_FLG_POSTDATED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_POSTDATED</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x02000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_POSTDATED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_OK_AS_DELEGATE.html" title="TKT_FLG_OK_AS_DELEGATE"
- >previous</a> |
- <a href="TKT_FLG_PRE_AUTH.html" title="TKT_FLG_PRE_AUTH"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_POSTDATED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_PRE_AUTH — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_PROXIABLE" href="TKT_FLG_PROXIABLE.html" />
- <link rel="prev" title="TKT_FLG_POSTDATED" href="TKT_FLG_POSTDATED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_POSTDATED.html" title="TKT_FLG_POSTDATED"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_PROXIABLE.html" title="TKT_FLG_PROXIABLE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_PRE_AUTH">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-pre-auth">
-<span id="tkt-flg-pre-auth-data"></span><h1>TKT_FLG_PRE_AUTH<a class="headerlink" href="#tkt-flg-pre-auth" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_PRE_AUTH">
-<code class="descname">TKT_FLG_PRE_AUTH</code><a class="headerlink" href="#TKT_FLG_PRE_AUTH" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="51%" />
-<col width="49%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_PRE_AUTH</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00200000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_PRE_AUTH</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_POSTDATED.html" title="TKT_FLG_POSTDATED"
- >previous</a> |
- <a href="TKT_FLG_PROXIABLE.html" title="TKT_FLG_PROXIABLE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_PRE_AUTH">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_PROXIABLE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_PROXY" href="TKT_FLG_PROXY.html" />
- <link rel="prev" title="TKT_FLG_PRE_AUTH" href="TKT_FLG_PRE_AUTH.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_PRE_AUTH.html" title="TKT_FLG_PRE_AUTH"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_PROXY.html" title="TKT_FLG_PROXY"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_PROXIABLE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-proxiable">
-<span id="tkt-flg-proxiable-data"></span><h1>TKT_FLG_PROXIABLE<a class="headerlink" href="#tkt-flg-proxiable" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_PROXIABLE">
-<code class="descname">TKT_FLG_PROXIABLE</code><a class="headerlink" href="#TKT_FLG_PROXIABLE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_PROXIABLE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x10000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_PROXIABLE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_PRE_AUTH.html" title="TKT_FLG_PRE_AUTH"
- >previous</a> |
- <a href="TKT_FLG_PROXY.html" title="TKT_FLG_PROXY"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_PROXIABLE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_PROXY — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_RENEWABLE" href="TKT_FLG_RENEWABLE.html" />
- <link rel="prev" title="TKT_FLG_PROXIABLE" href="TKT_FLG_PROXIABLE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_PROXIABLE.html" title="TKT_FLG_PROXIABLE"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_RENEWABLE.html" title="TKT_FLG_RENEWABLE"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_PROXY">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-proxy">
-<span id="tkt-flg-proxy-data"></span><h1>TKT_FLG_PROXY<a class="headerlink" href="#tkt-flg-proxy" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_PROXY">
-<code class="descname">TKT_FLG_PROXY</code><a class="headerlink" href="#TKT_FLG_PROXY" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="48%" />
-<col width="52%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_PROXY</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x08000000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_PROXY</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_PROXIABLE.html" title="TKT_FLG_PROXIABLE"
- >previous</a> |
- <a href="TKT_FLG_RENEWABLE.html" title="TKT_FLG_RENEWABLE"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_PROXY">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_RENEWABLE — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="TKT_FLG_TRANSIT_POLICY_CHECKED" href="TKT_FLG_TRANSIT_POLICY_CHECKED.html" />
- <link rel="prev" title="TKT_FLG_PROXY" href="TKT_FLG_PROXY.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_PROXY.html" title="TKT_FLG_PROXY"
- accesskey="P">previous</a> |
- <a href="TKT_FLG_TRANSIT_POLICY_CHECKED.html" title="TKT_FLG_TRANSIT_POLICY_CHECKED"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_RENEWABLE">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-renewable">
-<span id="tkt-flg-renewable-data"></span><h1>TKT_FLG_RENEWABLE<a class="headerlink" href="#tkt-flg-renewable" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_RENEWABLE">
-<code class="descname">TKT_FLG_RENEWABLE</code><a class="headerlink" href="#TKT_FLG_RENEWABLE" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_RENEWABLE</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00800000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_RENEWABLE</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_PROXY.html" title="TKT_FLG_PROXY"
- >previous</a> |
- <a href="TKT_FLG_TRANSIT_POLICY_CHECKED.html" title="TKT_FLG_TRANSIT_POLICY_CHECKED"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_RENEWABLE">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>TKT_FLG_TRANSIT_POLICY_CHECKED — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="VALID_INT_BITS" href="VALID_INT_BITS.html" />
- <link rel="prev" title="TKT_FLG_RENEWABLE" href="TKT_FLG_RENEWABLE.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_RENEWABLE.html" title="TKT_FLG_RENEWABLE"
- accesskey="P">previous</a> |
- <a href="VALID_INT_BITS.html" title="VALID_INT_BITS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_TRANSIT_POLICY_CHECKED">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="tkt-flg-transit-policy-checked">
-<span id="tkt-flg-transit-policy-checked-data"></span><h1>TKT_FLG_TRANSIT_POLICY_CHECKED<a class="headerlink" href="#tkt-flg-transit-policy-checked" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="TKT_FLG_TRANSIT_POLICY_CHECKED">
-<code class="descname">TKT_FLG_TRANSIT_POLICY_CHECKED</code><a class="headerlink" href="#TKT_FLG_TRANSIT_POLICY_CHECKED" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">TKT_FLG_TRANSIT_POLICY_CHECKED</span></code></td>
-<td><code class="docutils literal"><span class="pre">0x00080000</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">TKT_FLG_TRANSIT_POLICY_CHECKED</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_RENEWABLE.html" title="TKT_FLG_RENEWABLE"
- >previous</a> |
- <a href="VALID_INT_BITS.html" title="VALID_INT_BITS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__TKT_FLG_TRANSIT_POLICY_CHECKED">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>VALID_INT_BITS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="VALID_UINT_BITS" href="VALID_UINT_BITS.html" />
- <link rel="prev" title="TKT_FLG_TRANSIT_POLICY_CHECKED" href="TKT_FLG_TRANSIT_POLICY_CHECKED.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="TKT_FLG_TRANSIT_POLICY_CHECKED.html" title="TKT_FLG_TRANSIT_POLICY_CHECKED"
- accesskey="P">previous</a> |
- <a href="VALID_UINT_BITS.html" title="VALID_UINT_BITS"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__VALID_INT_BITS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="valid-int-bits">
-<span id="valid-int-bits-data"></span><h1>VALID_INT_BITS<a class="headerlink" href="#valid-int-bits" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="VALID_INT_BITS">
-<code class="descname">VALID_INT_BITS</code><a class="headerlink" href="#VALID_INT_BITS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="49%" />
-<col width="51%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">VALID_INT_BITS</span></code></td>
-<td><code class="docutils literal"><span class="pre">INT_MAX</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">VALID_INT_BITS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="TKT_FLG_TRANSIT_POLICY_CHECKED.html" title="TKT_FLG_TRANSIT_POLICY_CHECKED"
- >previous</a> |
- <a href="VALID_UINT_BITS.html" title="VALID_UINT_BITS"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__VALID_INT_BITS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>VALID_UINT_BITS — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_const" href="krb5_const.html" />
- <link rel="prev" title="VALID_INT_BITS" href="VALID_INT_BITS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="VALID_INT_BITS.html" title="VALID_INT_BITS"
- accesskey="P">previous</a> |
- <a href="krb5_const.html" title="krb5_const"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__VALID_UINT_BITS">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="valid-uint-bits">
-<span id="valid-uint-bits-data"></span><h1>VALID_UINT_BITS<a class="headerlink" href="#valid-uint-bits" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="VALID_UINT_BITS">
-<code class="descname">VALID_UINT_BITS</code><a class="headerlink" href="#VALID_UINT_BITS" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="50%" />
-<col width="50%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">VALID_UINT_BITS</span></code></td>
-<td><code class="docutils literal"><span class="pre">UINT_MAX</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">VALID_UINT_BITS</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="VALID_INT_BITS.html" title="VALID_INT_BITS"
- >previous</a> |
- <a href="krb5_const.html" title="krb5_const"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__VALID_UINT_BITS">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5 simple macros — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="ADDRTYPE_ADDRPORT" href="ADDRTYPE_ADDRPORT.html" />
- <link rel="prev" title="krb5_tkt_creds_context" href="../types/krb5_tkt_creds_context.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../types/krb5_tkt_creds_context.html" title="krb5_tkt_creds_context"
- accesskey="P">previous</a> |
- <a href="ADDRTYPE_ADDRPORT.html" title="ADDRTYPE_ADDRPORT"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5 simple macros">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-simple-macros">
-<h1>krb5 simple macros<a class="headerlink" href="#krb5-simple-macros" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="public">
-<h2>Public<a class="headerlink" href="#public" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="ADDRTYPE_ADDRPORT.html">ADDRTYPE_ADDRPORT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ADDRTYPE_CHAOS.html">ADDRTYPE_CHAOS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ADDRTYPE_DDP.html">ADDRTYPE_DDP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ADDRTYPE_INET.html">ADDRTYPE_INET</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ADDRTYPE_INET6.html">ADDRTYPE_INET6</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ADDRTYPE_IPPORT.html">ADDRTYPE_IPPORT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ADDRTYPE_ISO.html">ADDRTYPE_ISO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ADDRTYPE_IS_LOCAL.html">ADDRTYPE_IS_LOCAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ADDRTYPE_NETBIOS.html">ADDRTYPE_NETBIOS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ADDRTYPE_XNS.html">ADDRTYPE_XNS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="AD_TYPE_EXTERNAL.html">AD_TYPE_EXTERNAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="AD_TYPE_FIELD_TYPE_MASK.html">AD_TYPE_FIELD_TYPE_MASK</a></li>
-<li class="toctree-l1"><a class="reference internal" href="AD_TYPE_REGISTERED.html">AD_TYPE_REGISTERED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="AD_TYPE_RESERVED.html">AD_TYPE_RESERVED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="AP_OPTS_ETYPE_NEGOTIATION.html">AP_OPTS_ETYPE_NEGOTIATION</a></li>
-<li class="toctree-l1"><a class="reference internal" href="AP_OPTS_MUTUAL_REQUIRED.html">AP_OPTS_MUTUAL_REQUIRED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="AP_OPTS_RESERVED.html">AP_OPTS_RESERVED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="AP_OPTS_USE_SESSION_KEY.html">AP_OPTS_USE_SESSION_KEY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="AP_OPTS_USE_SUBKEY.html">AP_OPTS_USE_SUBKEY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="AP_OPTS_WIRE_MASK.html">AP_OPTS_WIRE_MASK</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_CMAC_CAMELLIA128.html">CKSUMTYPE_CMAC_CAMELLIA128</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_CMAC_CAMELLIA256.html">CKSUMTYPE_CMAC_CAMELLIA256</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_CRC32.html">CKSUMTYPE_CRC32</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_DESCBC.html">CKSUMTYPE_DESCBC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_HMAC_MD5_ARCFOUR.html">CKSUMTYPE_HMAC_MD5_ARCFOUR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_HMAC_SHA1_96_AES128.html">CKSUMTYPE_HMAC_SHA1_96_AES128</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_HMAC_SHA1_96_AES256.html">CKSUMTYPE_HMAC_SHA1_96_AES256</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_HMAC_SHA256_128_AES128.html">CKSUMTYPE_HMAC_SHA256_128_AES128</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_HMAC_SHA384_192_AES256.html">CKSUMTYPE_HMAC_SHA384_192_AES256</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_HMAC_SHA1_DES3.html">CKSUMTYPE_HMAC_SHA1_DES3</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_MD5_HMAC_ARCFOUR.html">CKSUMTYPE_MD5_HMAC_ARCFOUR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_NIST_SHA.html">CKSUMTYPE_NIST_SHA</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_RSA_MD4.html">CKSUMTYPE_RSA_MD4</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_RSA_MD4_DES.html">CKSUMTYPE_RSA_MD4_DES</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_RSA_MD5.html">CKSUMTYPE_RSA_MD5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_RSA_MD5_DES.html">CKSUMTYPE_RSA_MD5_DES</a></li>
-<li class="toctree-l1"><a class="reference internal" href="CKSUMTYPE_SHA1.html">CKSUMTYPE_SHA1</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_AES128_CTS_HMAC_SHA1_96.html">ENCTYPE_AES128_CTS_HMAC_SHA1_96</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_AES128_CTS_HMAC_SHA256_128.html">ENCTYPE_AES128_CTS_HMAC_SHA256_128</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_AES256_CTS_HMAC_SHA1_96.html">ENCTYPE_AES256_CTS_HMAC_SHA1_96</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_AES256_CTS_HMAC_SHA384_192.html">ENCTYPE_AES256_CTS_HMAC_SHA384_192</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_ARCFOUR_HMAC.html">ENCTYPE_ARCFOUR_HMAC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_ARCFOUR_HMAC_EXP.html">ENCTYPE_ARCFOUR_HMAC_EXP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_CAMELLIA128_CTS_CMAC.html">ENCTYPE_CAMELLIA128_CTS_CMAC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_CAMELLIA256_CTS_CMAC.html">ENCTYPE_CAMELLIA256_CTS_CMAC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_DES3_CBC_ENV.html">ENCTYPE_DES3_CBC_ENV</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_DES3_CBC_RAW.html">ENCTYPE_DES3_CBC_RAW</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_DES3_CBC_SHA.html">ENCTYPE_DES3_CBC_SHA</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_DES3_CBC_SHA1.html">ENCTYPE_DES3_CBC_SHA1</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_DES_CBC_CRC.html">ENCTYPE_DES_CBC_CRC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_DES_CBC_MD4.html">ENCTYPE_DES_CBC_MD4</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_DES_CBC_MD5.html">ENCTYPE_DES_CBC_MD5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_DES_CBC_RAW.html">ENCTYPE_DES_CBC_RAW</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_DES_HMAC_SHA1.html">ENCTYPE_DES_HMAC_SHA1</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_DSA_SHA1_CMS.html">ENCTYPE_DSA_SHA1_CMS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_MD5_RSA_CMS.html">ENCTYPE_MD5_RSA_CMS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_NULL.html">ENCTYPE_NULL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_RC2_CBC_ENV.html">ENCTYPE_RC2_CBC_ENV</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_RSA_ENV.html">ENCTYPE_RSA_ENV</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_RSA_ES_OAEP_ENV.html">ENCTYPE_RSA_ES_OAEP_ENV</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_SHA1_RSA_CMS.html">ENCTYPE_SHA1_RSA_CMS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ENCTYPE_UNKNOWN.html">ENCTYPE_UNKNOWN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_ALLOW_POSTDATE.html">KDC_OPT_ALLOW_POSTDATE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_CANONICALIZE.html">KDC_OPT_CANONICALIZE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_CNAME_IN_ADDL_TKT.html">KDC_OPT_CNAME_IN_ADDL_TKT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_DISABLE_TRANSITED_CHECK.html">KDC_OPT_DISABLE_TRANSITED_CHECK</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_ENC_TKT_IN_SKEY.html">KDC_OPT_ENC_TKT_IN_SKEY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_FORWARDABLE.html">KDC_OPT_FORWARDABLE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_FORWARDED.html">KDC_OPT_FORWARDED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_POSTDATED.html">KDC_OPT_POSTDATED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_PROXIABLE.html">KDC_OPT_PROXIABLE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_PROXY.html">KDC_OPT_PROXY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_RENEW.html">KDC_OPT_RENEW</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_RENEWABLE.html">KDC_OPT_RENEWABLE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_RENEWABLE_OK.html">KDC_OPT_RENEWABLE_OK</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_REQUEST_ANONYMOUS.html">KDC_OPT_REQUEST_ANONYMOUS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_OPT_VALIDATE.html">KDC_OPT_VALIDATE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KDC_TKT_COMMON_MASK.html">KDC_TKT_COMMON_MASK</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html">KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_ANONYMOUS_PRINCSTR.html">KRB5_ANONYMOUS_PRINCSTR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_ANONYMOUS_REALMSTR.html">KRB5_ANONYMOUS_REALMSTR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AP_REP.html">KRB5_AP_REP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AP_REQ.html">KRB5_AP_REQ</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AS_REP.html">KRB5_AS_REP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AS_REQ.html">KRB5_AS_REQ</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_AND_OR.html">KRB5_AUTHDATA_AND_OR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_AP_OPTIONS.html">KRB5_AUTHDATA_AP_OPTIONS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_AUTH_INDICATOR.html">KRB5_AUTHDATA_AUTH_INDICATOR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_CAMMAC.html">KRB5_AUTHDATA_CAMMAC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_ETYPE_NEGOTIATION.html">KRB5_AUTHDATA_ETYPE_NEGOTIATION</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_FX_ARMOR.html">KRB5_AUTHDATA_FX_ARMOR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_IF_RELEVANT.html">KRB5_AUTHDATA_IF_RELEVANT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html">KRB5_AUTHDATA_INITIAL_VERIFIED_CAS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_KDC_ISSUED.html">KRB5_AUTHDATA_KDC_ISSUED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_MANDATORY_FOR_KDC.html">KRB5_AUTHDATA_MANDATORY_FOR_KDC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_OSF_DCE.html">KRB5_AUTHDATA_OSF_DCE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_SESAME.html">KRB5_AUTHDATA_SESAME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_SIGNTICKET.html">KRB5_AUTHDATA_SIGNTICKET</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTHDATA_WIN2K_PAC.html">KRB5_AUTHDATA_WIN2K_PAC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTH_CONTEXT_DO_SEQUENCE.html">KRB5_AUTH_CONTEXT_DO_SEQUENCE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTH_CONTEXT_DO_TIME.html">KRB5_AUTH_CONTEXT_DO_TIME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTH_CONTEXT_PERMIT_ALL.html">KRB5_AUTH_CONTEXT_PERMIT_ALL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTH_CONTEXT_RET_SEQUENCE.html">KRB5_AUTH_CONTEXT_RET_SEQUENCE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTH_CONTEXT_RET_TIME.html">KRB5_AUTH_CONTEXT_RET_TIME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_AUTH_CONTEXT_USE_SUBKEY.html">KRB5_AUTH_CONTEXT_USE_SUBKEY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_CRED.html">KRB5_CRED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_CRYPTO_TYPE_CHECKSUM.html">KRB5_CRYPTO_TYPE_CHECKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_CRYPTO_TYPE_DATA.html">KRB5_CRYPTO_TYPE_DATA</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_CRYPTO_TYPE_EMPTY.html">KRB5_CRYPTO_TYPE_EMPTY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_CRYPTO_TYPE_HEADER.html">KRB5_CRYPTO_TYPE_HEADER</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_CRYPTO_TYPE_PADDING.html">KRB5_CRYPTO_TYPE_PADDING</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_CRYPTO_TYPE_SIGN_ONLY.html">KRB5_CRYPTO_TYPE_SIGN_ONLY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_CRYPTO_TYPE_STREAM.html">KRB5_CRYPTO_TYPE_STREAM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_CRYPTO_TYPE_TRAILER.html">KRB5_CRYPTO_TYPE_TRAILER</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_CYBERSAFE_SECUREID.html">KRB5_CYBERSAFE_SECUREID</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_DOMAIN_X500_COMPRESS.html">KRB5_DOMAIN_X500_COMPRESS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_ENCPADATA_REQ_ENC_PA_REP.html">KRB5_ENCPADATA_REQ_ENC_PA_REP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_ERROR.html">KRB5_ERROR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_FAST_REQUIRED.html">KRB5_FAST_REQUIRED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GC_CACHED.html">KRB5_GC_CACHED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GC_CANONICALIZE.html">KRB5_GC_CANONICALIZE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GC_CONSTRAINED_DELEGATION.html">KRB5_GC_CONSTRAINED_DELEGATION</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GC_FORWARDABLE.html">KRB5_GC_FORWARDABLE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GC_NO_STORE.html">KRB5_GC_NO_STORE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GC_NO_TRANSIT_CHECK.html">KRB5_GC_NO_TRANSIT_CHECK</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GC_USER_USER.html">KRB5_GC_USER_USER</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html">KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html">KRB5_GET_INIT_CREDS_OPT_ANONYMOUS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html">KRB5_GET_INIT_CREDS_OPT_CANONICALIZE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html">KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html">KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html">KRB5_GET_INIT_CREDS_OPT_FORWARDABLE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html">KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html">KRB5_GET_INIT_CREDS_OPT_PROXIABLE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html">KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_SALT.html">KRB5_GET_INIT_CREDS_OPT_SALT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html">KRB5_GET_INIT_CREDS_OPT_TKT_LIFE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_INIT_CONTEXT_SECURE.html">KRB5_INIT_CONTEXT_SECURE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_INIT_CONTEXT_KDC.html">KRB5_INIT_CONTEXT_KDC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html">KRB5_INIT_CREDS_STEP_FLAG_CONTINUE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_INT16_MAX.html">KRB5_INT16_MAX</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_INT16_MIN.html">KRB5_INT16_MIN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_INT32_MAX.html">KRB5_INT32_MAX</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_INT32_MIN.html">KRB5_INT32_MIN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_AD_ITE.html">KRB5_KEYUSAGE_AD_ITE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html">KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_AD_MTE.html">KRB5_KEYUSAGE_AD_MTE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_AD_SIGNEDPATH.html">KRB5_KEYUSAGE_AD_SIGNEDPATH</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_APP_DATA_CKSUM.html">KRB5_KEYUSAGE_APP_DATA_CKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html">KRB5_KEYUSAGE_APP_DATA_ENCRYPT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_AP_REP_ENCPART.html">KRB5_KEYUSAGE_AP_REP_ENCPART</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_AP_REQ_AUTH.html">KRB5_KEYUSAGE_AP_REQ_AUTH</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html">KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_AS_REP_ENCPART.html">KRB5_KEYUSAGE_AS_REP_ENCPART</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_AS_REQ.html">KRB5_KEYUSAGE_AS_REQ</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html">KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_CAMMAC.html">KRB5_KEYUSAGE_CAMMAC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html">KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html">KRB5_KEYUSAGE_ENC_CHALLENGE_KDC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_FAST_ENC.html">KRB5_KEYUSAGE_FAST_ENC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_FAST_FINISHED.html">KRB5_KEYUSAGE_FAST_FINISHED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_FAST_REP.html">KRB5_KEYUSAGE_FAST_REP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html">KRB5_KEYUSAGE_FAST_REQ_CHKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_GSS_TOK_MIC.html">KRB5_KEYUSAGE_GSS_TOK_MIC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html">KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html">KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_IAKERB_FINISHED.html">KRB5_KEYUSAGE_IAKERB_FINISHED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_KDC_REP_TICKET.html">KRB5_KEYUSAGE_KDC_REP_TICKET</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_KRB_CRED_ENCPART.html">KRB5_KEYUSAGE_KRB_CRED_ENCPART</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html">KRB5_KEYUSAGE_KRB_ERROR_CKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html">KRB5_KEYUSAGE_KRB_PRIV_ENCPART</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html">KRB5_KEYUSAGE_KRB_SAFE_CKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_PA_AS_FRESHNESS.html">KRB5_KEYUSAGE_PA_AS_FRESHNESS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_PA_FX_COOKIE.html">KRB5_KEYUSAGE_PA_FX_COOKIE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_PA_OTP_REQUEST.html">KRB5_KEYUSAGE_PA_OTP_REQUEST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_PA_PKINIT_KX.html">KRB5_KEYUSAGE_PA_PKINIT_KX</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html">KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html">KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_PA_SAM_RESPONSE.html">KRB5_KEYUSAGE_PA_SAM_RESPONSE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_SPAKE.html">KRB5_KEYUSAGE_SPAKE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html">KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html">KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html">KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html">KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_TGS_REQ_AUTH.html">KRB5_KEYUSAGE_TGS_REQ_AUTH</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html">KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KPASSWD_ACCESSDENIED.html">KRB5_KPASSWD_ACCESSDENIED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KPASSWD_AUTHERROR.html">KRB5_KPASSWD_AUTHERROR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KPASSWD_BAD_VERSION.html">KRB5_KPASSWD_BAD_VERSION</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KPASSWD_HARDERROR.html">KRB5_KPASSWD_HARDERROR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html">KRB5_KPASSWD_INITIAL_FLAG_NEEDED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KPASSWD_MALFORMED.html">KRB5_KPASSWD_MALFORMED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KPASSWD_SOFTERROR.html">KRB5_KPASSWD_SOFTERROR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_KPASSWD_SUCCESS.html">KRB5_KPASSWD_SUCCESS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ALL_ACCT_EXPTIME.html">KRB5_LRQ_ALL_ACCT_EXPTIME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ALL_LAST_INITIAL.html">KRB5_LRQ_ALL_LAST_INITIAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ALL_LAST_RENEWAL.html">KRB5_LRQ_ALL_LAST_RENEWAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ALL_LAST_REQ.html">KRB5_LRQ_ALL_LAST_REQ</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ALL_LAST_TGT.html">KRB5_LRQ_ALL_LAST_TGT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ALL_LAST_TGT_ISSUED.html">KRB5_LRQ_ALL_LAST_TGT_ISSUED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ALL_PW_EXPTIME.html">KRB5_LRQ_ALL_PW_EXPTIME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_NONE.html">KRB5_LRQ_NONE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ONE_ACCT_EXPTIME.html">KRB5_LRQ_ONE_ACCT_EXPTIME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ONE_LAST_INITIAL.html">KRB5_LRQ_ONE_LAST_INITIAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ONE_LAST_RENEWAL.html">KRB5_LRQ_ONE_LAST_RENEWAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ONE_LAST_REQ.html">KRB5_LRQ_ONE_LAST_REQ</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ONE_LAST_TGT.html">KRB5_LRQ_ONE_LAST_TGT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ONE_LAST_TGT_ISSUED.html">KRB5_LRQ_ONE_LAST_TGT_ISSUED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_LRQ_ONE_PW_EXPTIME.html">KRB5_LRQ_ONE_PW_EXPTIME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_ENTERPRISE_PRINCIPAL.html">KRB5_NT_ENTERPRISE_PRINCIPAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_ENT_PRINCIPAL_AND_ID.html">KRB5_NT_ENT_PRINCIPAL_AND_ID</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_MS_PRINCIPAL.html">KRB5_NT_MS_PRINCIPAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_MS_PRINCIPAL_AND_ID.html">KRB5_NT_MS_PRINCIPAL_AND_ID</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_PRINCIPAL.html">KRB5_NT_PRINCIPAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_SMTP_NAME.html">KRB5_NT_SMTP_NAME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_SRV_HST.html">KRB5_NT_SRV_HST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_SRV_INST.html">KRB5_NT_SRV_INST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_SRV_XHST.html">KRB5_NT_SRV_XHST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_UID.html">KRB5_NT_UID</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_UNKNOWN.html">KRB5_NT_UNKNOWN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_WELLKNOWN.html">KRB5_NT_WELLKNOWN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_NT_X500_PRINCIPAL.html">KRB5_NT_X500_PRINCIPAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_ATTRIBUTES_INFO.html">KRB5_PAC_ATTRIBUTES_INFO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_CLIENT_INFO.html">KRB5_PAC_CLIENT_INFO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_CLIENT_CLAIMS.html">KRB5_PAC_CLIENT_CLAIMS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_CREDENTIALS_INFO.html">KRB5_PAC_CREDENTIALS_INFO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_DELEGATION_INFO.html">KRB5_PAC_DELEGATION_INFO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_DEVICE_CLAIMS.html">KRB5_PAC_DEVICE_CLAIMS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_DEVICE_INFO.html">KRB5_PAC_DEVICE_INFO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_LOGON_INFO.html">KRB5_PAC_LOGON_INFO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_PRIVSVR_CHECKSUM.html">KRB5_PAC_PRIVSVR_CHECKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_REQUESTOR.html">KRB5_PAC_REQUESTOR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_SERVER_CHECKSUM.html">KRB5_PAC_SERVER_CHECKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_TICKET_CHECKSUM.html">KRB5_PAC_TICKET_CHECKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PAC_UPN_DNS_INFO.html">KRB5_PAC_UPN_DNS_INFO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_AFS3_SALT.html">KRB5_PADATA_AFS3_SALT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_AP_REQ.html">KRB5_PADATA_AP_REQ</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_AS_CHECKSUM.html">KRB5_PADATA_AS_CHECKSUM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_AS_FRESHNESS.html">KRB5_PADATA_AS_FRESHNESS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_ENCRYPTED_CHALLENGE.html">KRB5_PADATA_ENCRYPTED_CHALLENGE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_ENC_SANDIA_SECURID.html">KRB5_PADATA_ENC_SANDIA_SECURID</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_ENC_TIMESTAMP.html">KRB5_PADATA_ENC_TIMESTAMP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_ENC_UNIX_TIME.html">KRB5_PADATA_ENC_UNIX_TIME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_ETYPE_INFO.html">KRB5_PADATA_ETYPE_INFO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_ETYPE_INFO2.html">KRB5_PADATA_ETYPE_INFO2</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_FOR_USER.html">KRB5_PADATA_FOR_USER</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_FX_COOKIE.html">KRB5_PADATA_FX_COOKIE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_FX_ERROR.html">KRB5_PADATA_FX_ERROR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_FX_FAST.html">KRB5_PADATA_FX_FAST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_GET_FROM_TYPED_DATA.html">KRB5_PADATA_GET_FROM_TYPED_DATA</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_NONE.html">KRB5_PADATA_NONE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_OSF_DCE.html">KRB5_PADATA_OSF_DCE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_OTP_CHALLENGE.html">KRB5_PADATA_OTP_CHALLENGE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_OTP_PIN_CHANGE.html">KRB5_PADATA_OTP_PIN_CHANGE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_OTP_REQUEST.html">KRB5_PADATA_OTP_REQUEST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_PAC_OPTIONS.html">KRB5_PADATA_PAC_OPTIONS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_PAC_REQUEST.html">KRB5_PADATA_PAC_REQUEST</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_PKINIT_KX.html">KRB5_PADATA_PKINIT_KX</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_PK_AS_REP.html">KRB5_PADATA_PK_AS_REP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_PK_AS_REP_OLD.html">KRB5_PADATA_PK_AS_REP_OLD</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_PK_AS_REQ.html">KRB5_PADATA_PK_AS_REQ</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_PK_AS_REQ_OLD.html">KRB5_PADATA_PK_AS_REQ_OLD</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_PW_SALT.html">KRB5_PADATA_PW_SALT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_REFERRAL.html">KRB5_PADATA_REFERRAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_S4U_X509_USER.html">KRB5_PADATA_S4U_X509_USER</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SAM_CHALLENGE.html">KRB5_PADATA_SAM_CHALLENGE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SAM_CHALLENGE_2.html">KRB5_PADATA_SAM_CHALLENGE_2</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SAM_REDIRECT.html">KRB5_PADATA_SAM_REDIRECT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SAM_RESPONSE.html">KRB5_PADATA_SAM_RESPONSE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SAM_RESPONSE_2.html">KRB5_PADATA_SAM_RESPONSE_2</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SESAME.html">KRB5_PADATA_SESAME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SPAKE.html">KRB5_PADATA_SPAKE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_REDHAT_IDP_OAUTH2.html">KRB5_PADATA_REDHAT_IDP_OAUTH2</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_SVR_REFERRAL_INFO.html">KRB5_PADATA_SVR_REFERRAL_INFO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_TGS_REQ.html">KRB5_PADATA_TGS_REQ</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PADATA_USE_SPECIFIED_KVNO.html">KRB5_PADATA_USE_SPECIFIED_KVNO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_COMPARE_CASEFOLD.html">KRB5_PRINCIPAL_COMPARE_CASEFOLD</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html">KRB5_PRINCIPAL_COMPARE_ENTERPRISE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html">KRB5_PRINCIPAL_COMPARE_IGNORE_REALM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_COMPARE_UTF8.html">KRB5_PRINCIPAL_COMPARE_UTF8</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_PARSE_ENTERPRISE.html">KRB5_PRINCIPAL_PARSE_ENTERPRISE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html">KRB5_PRINCIPAL_PARSE_IGNORE_REALM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html">KRB5_PRINCIPAL_PARSE_NO_DEF_REALM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_PARSE_NO_REALM.html">KRB5_PRINCIPAL_PARSE_NO_REALM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html">KRB5_PRINCIPAL_PARSE_REQUIRE_REALM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_UNPARSE_DISPLAY.html">KRB5_PRINCIPAL_UNPARSE_DISPLAY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_UNPARSE_NO_REALM.html">KRB5_PRINCIPAL_UNPARSE_NO_REALM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRINCIPAL_UNPARSE_SHORT.html">KRB5_PRINCIPAL_UNPARSE_SHORT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PRIV.html">KRB5_PRIV</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PROMPT_TYPE_NEW_PASSWORD.html">KRB5_PROMPT_TYPE_NEW_PASSWORD</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html">KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PROMPT_TYPE_PASSWORD.html">KRB5_PROMPT_TYPE_PASSWORD</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PROMPT_TYPE_PREAUTH.html">KRB5_PROMPT_TYPE_PREAUTH</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_PVNO.html">KRB5_PVNO</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_REALM_BRANCH_CHAR.html">KRB5_REALM_BRANCH_CHAR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RECVAUTH_BADAUTHVERS.html">KRB5_RECVAUTH_BADAUTHVERS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RECVAUTH_SKIP_VERSION.html">KRB5_RECVAUTH_SKIP_VERSION</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_REFERRAL_REALM.html">KRB5_REFERRAL_REALM</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_QUESTION_PKINIT.html">KRB5_RESPONDER_QUESTION_PKINIT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html">KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html">KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html">KRB5_RESPONDER_OTP_FLAGS_NEXTOTP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html">KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html">KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html">KRB5_RESPONDER_OTP_FORMAT_DECIMAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html">KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_QUESTION_OTP.html">KRB5_RESPONDER_QUESTION_OTP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_RESPONDER_QUESTION_PASSWORD.html">KRB5_RESPONDER_QUESTION_PASSWORD</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_SAFE.html">KRB5_SAFE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_SAM_MUST_PK_ENCRYPT_SAD.html">KRB5_SAM_MUST_PK_ENCRYPT_SAD</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_SAM_SEND_ENCRYPTED_SAD.html">KRB5_SAM_SEND_ENCRYPTED_SAD</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_SAM_USE_SAD_AS_KEY.html">KRB5_SAM_USE_SAD_AS_KEY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_MATCH_2ND_TKT.html">KRB5_TC_MATCH_2ND_TKT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_MATCH_AUTHDATA.html">KRB5_TC_MATCH_AUTHDATA</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_MATCH_FLAGS.html">KRB5_TC_MATCH_FLAGS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_MATCH_FLAGS_EXACT.html">KRB5_TC_MATCH_FLAGS_EXACT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_MATCH_IS_SKEY.html">KRB5_TC_MATCH_IS_SKEY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_MATCH_KTYPE.html">KRB5_TC_MATCH_KTYPE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_MATCH_SRV_NAMEONLY.html">KRB5_TC_MATCH_SRV_NAMEONLY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_MATCH_TIMES.html">KRB5_TC_MATCH_TIMES</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_MATCH_TIMES_EXACT.html">KRB5_TC_MATCH_TIMES_EXACT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_NOTICKET.html">KRB5_TC_NOTICKET</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_OPENCLOSE.html">KRB5_TC_OPENCLOSE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TC_SUPPORTED_KTYPES.html">KRB5_TC_SUPPORTED_KTYPES</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TGS_NAME.html">KRB5_TGS_NAME</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TGS_NAME_SIZE.html">KRB5_TGS_NAME_SIZE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TGS_REP.html">KRB5_TGS_REP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TGS_REQ.html">KRB5_TGS_REQ</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html">KRB5_TKT_CREDS_STEP_FLAG_CONTINUE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html">KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="KRB5_WELLKNOWN_NAMESTR.html">KRB5_WELLKNOWN_NAMESTR</a></li>
-<li class="toctree-l1"><a class="reference internal" href="LR_TYPE_INTERPRETATION_MASK.html">LR_TYPE_INTERPRETATION_MASK</a></li>
-<li class="toctree-l1"><a class="reference internal" href="LR_TYPE_THIS_SERVER_ONLY.html">LR_TYPE_THIS_SERVER_ONLY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="MAX_KEYTAB_NAME_LEN.html">MAX_KEYTAB_NAME_LEN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="MSEC_DIRBIT.html">MSEC_DIRBIT</a></li>
-<li class="toctree-l1"><a class="reference internal" href="MSEC_VAL_MASK.html">MSEC_VAL_MASK</a></li>
-<li class="toctree-l1"><a class="reference internal" href="SALT_TYPE_AFS_LENGTH.html">SALT_TYPE_AFS_LENGTH</a></li>
-<li class="toctree-l1"><a class="reference internal" href="SALT_TYPE_NO_LENGTH.html">SALT_TYPE_NO_LENGTH</a></li>
-<li class="toctree-l1"><a class="reference internal" href="THREEPARAMOPEN.html">THREEPARAMOPEN</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_ANONYMOUS.html">TKT_FLG_ANONYMOUS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_ENC_PA_REP.html">TKT_FLG_ENC_PA_REP</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_FORWARDABLE.html">TKT_FLG_FORWARDABLE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_FORWARDED.html">TKT_FLG_FORWARDED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_HW_AUTH.html">TKT_FLG_HW_AUTH</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_INITIAL.html">TKT_FLG_INITIAL</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_INVALID.html">TKT_FLG_INVALID</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_MAY_POSTDATE.html">TKT_FLG_MAY_POSTDATE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_OK_AS_DELEGATE.html">TKT_FLG_OK_AS_DELEGATE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_POSTDATED.html">TKT_FLG_POSTDATED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_PRE_AUTH.html">TKT_FLG_PRE_AUTH</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_PROXIABLE.html">TKT_FLG_PROXIABLE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_PROXY.html">TKT_FLG_PROXY</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_RENEWABLE.html">TKT_FLG_RENEWABLE</a></li>
-<li class="toctree-l1"><a class="reference internal" href="TKT_FLG_TRANSIT_POLICY_CHECKED.html">TKT_FLG_TRANSIT_POLICY_CHECKED</a></li>
-<li class="toctree-l1"><a class="reference internal" href="VALID_INT_BITS.html">VALID_INT_BITS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="VALID_UINT_BITS.html">VALID_UINT_BITS</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_const.html">krb5_const</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_princ_component.html">krb5_princ_component</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_princ_name.html">krb5_princ_name</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_princ_realm.html">krb5_princ_realm</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_princ_set_realm.html">krb5_princ_set_realm</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_princ_set_realm_data.html">krb5_princ_set_realm_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_princ_set_realm_length.html">krb5_princ_set_realm_length</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_princ_size.html">krb5_princ_size</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_princ_type.html">krb5_princ_type</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_roundup.html">krb5_roundup</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_x.html">krb5_x</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_xc.html">krb5_xc</a></li>
-</ul>
-</div>
-</div>
-<div class="section" id="deprecated-macros">
-<h2>Deprecated macros<a class="headerlink" href="#deprecated-macros" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="krb524_convert_creds_kdc.html">krb524_convert_creds_kdc</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb524_init_ets.html">krb524_init_ets</a></li>
-</ul>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5 simple macros</a><ul>
-<li><a class="reference internal" href="#public">Public</a></li>
-<li><a class="reference internal" href="#deprecated-macros">Deprecated macros</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../types/krb5_tkt_creds_context.html" title="krb5_tkt_creds_context"
- >previous</a> |
- <a href="ADDRTYPE_ADDRPORT.html" title="ADDRTYPE_ADDRPORT"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5 simple macros">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb524_convert_creds_kdc — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb524_init_ets" href="krb524_init_ets.html" />
- <link rel="prev" title="krb5_xc" href="krb5_xc.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_xc.html" title="krb5_xc"
- accesskey="P">previous</a> |
- <a href="krb524_init_ets.html" title="krb524_init_ets"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb524_convert_creds_kdc">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb524-convert-creds-kdc">
-<span id="krb524-convert-creds-kdc-data"></span><h1>krb524_convert_creds_kdc<a class="headerlink" href="#krb524-convert-creds-kdc" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb524_convert_creds_kdc">
-<code class="descname">krb524_convert_creds_kdc</code><a class="headerlink" href="#krb524_convert_creds_kdc" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="52%" />
-<col width="48%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb524_convert_creds_kdc</span></code></td>
-<td><code class="docutils literal"><span class="pre">krb5_524_convert_creds</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb524_convert_creds_kdc</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_xc.html" title="krb5_xc"
- >previous</a> |
- <a href="krb524_init_ets.html" title="krb524_init_ets"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb524_convert_creds_kdc">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb524_init_ets — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="For plugin module developers" href="../../../plugindev/index.html" />
- <link rel="prev" title="krb524_convert_creds_kdc" href="krb524_convert_creds_kdc.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb524_convert_creds_kdc.html" title="krb524_convert_creds_kdc"
- accesskey="P">previous</a> |
- <a href="../../../plugindev/index.html" title="For plugin module developers"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb524_init_ets">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb524-init-ets">
-<span id="krb524-init-ets-data"></span><h1>krb524_init_ets<a class="headerlink" href="#krb524-init-ets" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb524_init_ets">
-<code class="descname">krb524_init_ets</code><a class="headerlink" href="#krb524_init_ets" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="53%" />
-<col width="47%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb524_init_ets</span> <span class="pre">(x)</span></code></td>
-<td><code class="docutils literal"><span class="pre">(0)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb524_init_ets</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb524_convert_creds_kdc.html" title="krb524_convert_creds_kdc"
- >previous</a> |
- <a href="../../../plugindev/index.html" title="For plugin module developers"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb524_init_ets">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_const — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_princ_component" href="krb5_princ_component.html" />
- <link rel="prev" title="VALID_UINT_BITS" href="VALID_UINT_BITS.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="VALID_UINT_BITS.html" title="VALID_UINT_BITS"
- accesskey="P">previous</a> |
- <a href="krb5_princ_component.html" title="krb5_princ_component"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_const">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-const">
-<span id="krb5-const-data"></span><h1>krb5_const<a class="headerlink" href="#krb5-const" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_const">
-<code class="descname">krb5_const</code><a class="headerlink" href="#krb5_const" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="44%" />
-<col width="56%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_const</span></code></td>
-<td><code class="docutils literal"><span class="pre">const</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_const</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="VALID_UINT_BITS.html" title="VALID_UINT_BITS"
- >previous</a> |
- <a href="krb5_princ_component.html" title="krb5_princ_component"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_const">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_princ_component — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_princ_name" href="krb5_princ_name.html" />
- <link rel="prev" title="krb5_const" href="krb5_const.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_const.html" title="krb5_const"
- accesskey="P">previous</a> |
- <a href="krb5_princ_name.html" title="krb5_princ_name"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_component">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-princ-component">
-<span id="krb5-princ-component-data"></span><h1>krb5_princ_component<a class="headerlink" href="#krb5-princ-component" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_princ_component">
-<code class="descname">krb5_princ_component</code><a class="headerlink" href="#krb5_princ_component" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="37%" />
-<col width="63%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_princ_component</span> <span class="pre">(context,</span> <span class="pre">princ,</span> <span class="pre">i)</span></code></td>
-<td><code class="docutils literal"><span class="pre">(((i)</span> <span class="pre"><</span> <span class="pre">krb5_princ_size(context,</span> <span class="pre">princ))</span> <span class="pre">?</span> <span class="pre">(princ)->data</span> <span class="pre">+</span> <span class="pre">(i)</span> <span class="pre">:</span> <span class="pre">NULL)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_princ_component</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_const.html" title="krb5_const"
- >previous</a> |
- <a href="krb5_princ_name.html" title="krb5_princ_name"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_component">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_princ_name — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_princ_realm" href="krb5_princ_realm.html" />
- <link rel="prev" title="krb5_princ_component" href="krb5_princ_component.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_princ_component.html" title="krb5_princ_component"
- accesskey="P">previous</a> |
- <a href="krb5_princ_realm.html" title="krb5_princ_realm"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_name">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-princ-name">
-<span id="krb5-princ-name-data"></span><h1>krb5_princ_name<a class="headerlink" href="#krb5-princ-name" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_princ_name">
-<code class="descname">krb5_princ_name</code><a class="headerlink" href="#krb5_princ_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_princ_name</span> <span class="pre">(context,</span> <span class="pre">princ)</span></code></td>
-<td><code class="docutils literal"><span class="pre">(princ)->data</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_princ_name</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_princ_component.html" title="krb5_princ_component"
- >previous</a> |
- <a href="krb5_princ_realm.html" title="krb5_princ_realm"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_name">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_princ_realm — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_princ_set_realm" href="krb5_princ_set_realm.html" />
- <link rel="prev" title="krb5_princ_name" href="krb5_princ_name.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_princ_name.html" title="krb5_princ_name"
- accesskey="P">previous</a> |
- <a href="krb5_princ_set_realm.html" title="krb5_princ_set_realm"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_realm">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-princ-realm">
-<span id="krb5-princ-realm-data"></span><h1>krb5_princ_realm<a class="headerlink" href="#krb5-princ-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_princ_realm">
-<code class="descname">krb5_princ_realm</code><a class="headerlink" href="#krb5_princ_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="61%" />
-<col width="39%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_princ_realm</span> <span class="pre">(context,</span> <span class="pre">princ)</span></code></td>
-<td><code class="docutils literal"><span class="pre">(&(princ)->realm)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_princ_realm</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_princ_name.html" title="krb5_princ_name"
- >previous</a> |
- <a href="krb5_princ_set_realm.html" title="krb5_princ_set_realm"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_realm">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_princ_set_realm — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_princ_set_realm_data" href="krb5_princ_set_realm_data.html" />
- <link rel="prev" title="krb5_princ_realm" href="krb5_princ_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_princ_realm.html" title="krb5_princ_realm"
- accesskey="P">previous</a> |
- <a href="krb5_princ_set_realm_data.html" title="krb5_princ_set_realm_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_set_realm">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-princ-set-realm">
-<span id="krb5-princ-set-realm-data"></span><h1>krb5_princ_set_realm<a class="headerlink" href="#krb5-princ-set-realm" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_princ_set_realm">
-<code class="descname">krb5_princ_set_realm</code><a class="headerlink" href="#krb5_princ_set_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_princ_set_realm</span> <span class="pre">(context,</span> <span class="pre">princ,</span> <span class="pre">value)</span></code></td>
-<td><code class="docutils literal"><span class="pre">((princ)->realm</span> <span class="pre">=</span> <span class="pre">*(value))</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_princ_set_realm</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_princ_realm.html" title="krb5_princ_realm"
- >previous</a> |
- <a href="krb5_princ_set_realm_data.html" title="krb5_princ_set_realm_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_set_realm">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_princ_set_realm_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_princ_set_realm_length" href="krb5_princ_set_realm_length.html" />
- <link rel="prev" title="krb5_princ_set_realm" href="krb5_princ_set_realm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_princ_set_realm.html" title="krb5_princ_set_realm"
- accesskey="P">previous</a> |
- <a href="krb5_princ_set_realm_length.html" title="krb5_princ_set_realm_length"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_set_realm_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-princ-set-realm-data">
-<span id="krb5-princ-set-realm-data-data"></span><h1>krb5_princ_set_realm_data<a class="headerlink" href="#krb5-princ-set-realm-data" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_princ_set_realm_data">
-<code class="descname">krb5_princ_set_realm_data</code><a class="headerlink" href="#krb5_princ_set_realm_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="60%" />
-<col width="40%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_princ_set_realm_data</span> <span class="pre">(context,</span> <span class="pre">princ,</span> <span class="pre">value)</span></code></td>
-<td><code class="docutils literal"><span class="pre">(princ)->realm.data</span> <span class="pre">=</span> <span class="pre">(value)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_princ_set_realm_data</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_princ_set_realm.html" title="krb5_princ_set_realm"
- >previous</a> |
- <a href="krb5_princ_set_realm_length.html" title="krb5_princ_set_realm_length"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_set_realm_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_princ_set_realm_length — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_princ_size" href="krb5_princ_size.html" />
- <link rel="prev" title="krb5_princ_set_realm_data" href="krb5_princ_set_realm_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_princ_set_realm_data.html" title="krb5_princ_set_realm_data"
- accesskey="P">previous</a> |
- <a href="krb5_princ_size.html" title="krb5_princ_size"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_set_realm_length">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-princ-set-realm-length">
-<span id="krb5-princ-set-realm-length-data"></span><h1>krb5_princ_set_realm_length<a class="headerlink" href="#krb5-princ-set-realm-length" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_princ_set_realm_length">
-<code class="descname">krb5_princ_set_realm_length</code><a class="headerlink" href="#krb5_princ_set_realm_length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="59%" />
-<col width="41%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_princ_set_realm_length</span> <span class="pre">(context,</span> <span class="pre">princ,</span> <span class="pre">value)</span></code></td>
-<td><code class="docutils literal"><span class="pre">(princ)->realm.length</span> <span class="pre">=</span> <span class="pre">(value)</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_princ_set_realm_length</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_princ_set_realm_data.html" title="krb5_princ_set_realm_data"
- >previous</a> |
- <a href="krb5_princ_size.html" title="krb5_princ_size"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_set_realm_length">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_princ_size — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_princ_type" href="krb5_princ_type.html" />
- <link rel="prev" title="krb5_princ_set_realm_length" href="krb5_princ_set_realm_length.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_princ_set_realm_length.html" title="krb5_princ_set_realm_length"
- accesskey="P">previous</a> |
- <a href="krb5_princ_type.html" title="krb5_princ_type"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_size">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-princ-size">
-<span id="krb5-princ-size-data"></span><h1>krb5_princ_size<a class="headerlink" href="#krb5-princ-size" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_princ_size">
-<code class="descname">krb5_princ_size</code><a class="headerlink" href="#krb5_princ_size" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="62%" />
-<col width="38%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_princ_size</span> <span class="pre">(context,</span> <span class="pre">princ)</span></code></td>
-<td><code class="docutils literal"><span class="pre">(princ)->length</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_princ_size</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_princ_set_realm_length.html" title="krb5_princ_set_realm_length"
- >previous</a> |
- <a href="krb5_princ_type.html" title="krb5_princ_type"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_size">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_princ_type — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_roundup" href="krb5_roundup.html" />
- <link rel="prev" title="krb5_princ_size" href="krb5_princ_size.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_princ_size.html" title="krb5_princ_size"
- accesskey="P">previous</a> |
- <a href="krb5_roundup.html" title="krb5_roundup"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_type">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-princ-type">
-<span id="krb5-princ-type-data"></span><h1>krb5_princ_type<a class="headerlink" href="#krb5-princ-type" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_princ_type">
-<code class="descname">krb5_princ_type</code><a class="headerlink" href="#krb5_princ_type" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="63%" />
-<col width="37%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_princ_type</span> <span class="pre">(context,</span> <span class="pre">princ)</span></code></td>
-<td><code class="docutils literal"><span class="pre">(princ)->type</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_princ_type</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_princ_size.html" title="krb5_princ_size"
- >previous</a> |
- <a href="krb5_roundup.html" title="krb5_roundup"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_princ_type">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_roundup — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_x" href="krb5_x.html" />
- <link rel="prev" title="krb5_princ_type" href="krb5_princ_type.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_princ_type.html" title="krb5_princ_type"
- accesskey="P">previous</a> |
- <a href="krb5_x.html" title="krb5_x"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_roundup">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-roundup">
-<span id="krb5-roundup-data"></span><h1>krb5_roundup<a class="headerlink" href="#krb5-roundup" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_roundup">
-<code class="descname">krb5_roundup</code><a class="headerlink" href="#krb5_roundup" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="42%" />
-<col width="58%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_roundup</span> <span class="pre">(x,</span> <span class="pre">y)</span></code></td>
-<td><code class="docutils literal"><span class="pre">((((x)</span> <span class="pre">+</span> <span class="pre">(y)</span> <span class="pre">-</span> <span class="pre">1)/(y))*(y))</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_roundup</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_princ_type.html" title="krb5_princ_type"
- >previous</a> |
- <a href="krb5_x.html" title="krb5_x"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_roundup">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_x — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_xc" href="krb5_xc.html" />
- <link rel="prev" title="krb5_roundup" href="krb5_roundup.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_roundup.html" title="krb5_roundup"
- accesskey="P">previous</a> |
- <a href="krb5_xc.html" title="krb5_xc"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_x">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-x">
-<span id="krb5-x-data"></span><h1>krb5_x<a class="headerlink" href="#krb5-x" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_x">
-<code class="descname">krb5_x</code><a class="headerlink" href="#krb5_x" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="36%" />
-<col width="64%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_x</span> <span class="pre">(ptr,</span> <span class="pre">args)</span></code></td>
-<td><code class="docutils literal"><span class="pre">((ptr)?((*(ptr))</span> <span class="pre">args):(abort(),1))</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_x</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_roundup.html" title="krb5_roundup"
- >previous</a> |
- <a href="krb5_xc.html" title="krb5_xc"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_x">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_xc — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb524_convert_creds_kdc" href="krb524_convert_creds_kdc.html" />
- <link rel="prev" title="krb5_x" href="krb5_x.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_x.html" title="krb5_x"
- accesskey="P">previous</a> |
- <a href="krb524_convert_creds_kdc.html" title="krb524_convert_creds_kdc"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_xc">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-xc">
-<span id="krb5-xc-data"></span><h1>krb5_xc<a class="headerlink" href="#krb5-xc" title="Permalink to this headline">¶</a></h1>
-<dl class="data">
-<dt id="krb5_xc">
-<code class="descname">krb5_xc</code><a class="headerlink" href="#krb5_xc" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<table border="1" class="docutils">
-<colgroup>
-<col width="33%" />
-<col width="67%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td><code class="docutils literal"><span class="pre">krb5_xc</span> <span class="pre">(ptr,</span> <span class="pre">args)</span></code></td>
-<td><code class="docutils literal"><span class="pre">((ptr)?((*(ptr))</span> <span class="pre">args):(abort(),(char*)0))</span></code></td>
-</tr>
-</tbody>
-</table>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_xc</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../types/index.html">krb5 types and structures</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_x.html" title="krb5_x"
- >previous</a> |
- <a href="krb524_convert_creds_kdc.html" title="krb524_convert_creds_kdc"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_xc">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5 types and structures — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_address" href="krb5_address.html" />
- <link rel="prev" title="krb5_verify_checksum" href="../api/krb5_verify_checksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../api/krb5_verify_checksum.html" title="krb5_verify_checksum"
- accesskey="P">previous</a> |
- <a href="krb5_address.html" title="krb5_address"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5 types and structures">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-types-and-structures">
-<h1>krb5 types and structures<a class="headerlink" href="#krb5-types-and-structures" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="public">
-<h2>Public<a class="headerlink" href="#public" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="krb5_address.html">krb5_address</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_addrtype.html">krb5_addrtype</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_ap_req.html">krb5_ap_req</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_ap_rep.html">krb5_ap_rep</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_ap_rep_enc_part.html">krb5_ap_rep_enc_part</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_authdata.html">krb5_authdata</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_authdatatype.html">krb5_authdatatype</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_authenticator.html">krb5_authenticator</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_boolean.html">krb5_boolean</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_checksum.html">krb5_checksum</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_const_pointer.html">krb5_const_pointer</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_const_principal.html">krb5_const_principal</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cred.html">krb5_cred</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cred_enc_part.html">krb5_cred_enc_part</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cred_info.html">krb5_cred_info</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_creds.html">krb5_creds</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_crypto_iov.html">krb5_crypto_iov</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cryptotype.html">krb5_cryptotype</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_data.html">krb5_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_deltat.html">krb5_deltat</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_enc_data.html">krb5_enc_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_enc_kdc_rep_part.html">krb5_enc_kdc_rep_part</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_enc_tkt_part.html">krb5_enc_tkt_part</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_encrypt_block.html">krb5_encrypt_block</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_enctype.html">krb5_enctype</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_error.html">krb5_error</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_error_code.html">krb5_error_code</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_expire_callback_func.html">krb5_expire_callback_func</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_flags.html">krb5_flags</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_get_init_creds_opt.html">krb5_get_init_creds_opt</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_gic_opt_pa_data.html">krb5_gic_opt_pa_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_int16.html">krb5_int16</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_int32.html">krb5_int32</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kdc_rep.html">krb5_kdc_rep</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kdc_req.html">krb5_kdc_req</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_keyblock.html">krb5_keyblock</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_keytab_entry.html">krb5_keytab_entry</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_keyusage.html">krb5_keyusage</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kt_cursor.html">krb5_kt_cursor</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_kvno.html">krb5_kvno</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_last_req_entry.html">krb5_last_req_entry</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_magic.html">krb5_magic</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_mk_req_checksum_func.html">krb5_mk_req_checksum_func</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_msgtype.html">krb5_msgtype</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_octet.html">krb5_octet</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pa_pac_req.html">krb5_pa_pac_req</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pa_server_referral_data.html">krb5_pa_server_referral_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pa_svr_referral_data.html">krb5_pa_svr_referral_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pa_data.html">krb5_pa_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pointer.html">krb5_pointer</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_post_recv_fn.html">krb5_post_recv_fn</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pre_send_fn.html">krb5_pre_send_fn</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_preauthtype.html">krb5_preauthtype</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_principal.html">krb5_principal</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_principal_data.html">krb5_principal_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_prompt.html">krb5_prompt</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_prompt_type.html">krb5_prompt_type</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_prompter_fct.html">krb5_prompter_fct</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pwd_data.html">krb5_pwd_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_context.html">krb5_responder_context</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_fn.html">krb5_responder_fn</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_otp_challenge.html">krb5_responder_otp_challenge</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_otp_tokeninfo.html">krb5_responder_otp_tokeninfo</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_pkinit_challenge.html">krb5_responder_pkinit_challenge</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_responder_pkinit_identity.html">krb5_responder_pkinit_identity</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_response.html">krb5_response</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_replay_data.html">krb5_replay_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_ticket.html">krb5_ticket</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_ticket_times.html">krb5_ticket_times</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_timestamp.html">krb5_timestamp</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_tkt_authent.html">krb5_tkt_authent</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_trace_callback.html">krb5_trace_callback</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_trace_info.html">krb5_trace_info</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_transited.html">krb5_transited</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_typed_data.html">krb5_typed_data</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_ui_2.html">krb5_ui_2</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_ui_4.html">krb5_ui_4</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_verify_init_creds_opt.html">krb5_verify_init_creds_opt</a></li>
-<li class="toctree-l1"><a class="reference internal" href="passwd_phrase_element.html">passwd_phrase_element</a></li>
-</ul>
-</div>
-</div>
-<div class="section" id="internal">
-<h2>Internal<a class="headerlink" href="#internal" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="krb5_auth_context.html">krb5_auth_context</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cksumtype.html">krb5_cksumtype</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_context.html">krb5_context</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cc_cursor.html">krb5_cc_cursor</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_ccache.html">krb5_ccache</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_cccol_cursor.html">krb5_cccol_cursor</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_init_creds_context.html">krb5_init_creds_context</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_key.html">krb5_key</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_keytab.html">krb5_keytab</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_pac.html">krb5_pac</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_rcache.html">krb5_rcache</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5_tkt_creds_context.html">krb5_tkt_creds_context</a></li>
-</ul>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5 types and structures</a><ul>
-<li><a class="reference internal" href="#public">Public</a></li>
-<li><a class="reference internal" href="#internal">Internal</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../api/krb5_verify_checksum.html" title="krb5_verify_checksum"
- >previous</a> |
- <a href="krb5_address.html" title="krb5_address"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5 types and structures">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_address — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_addrtype" href="krb5_addrtype.html" />
- <link rel="prev" title="krb5 types and structures" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="krb5 types and structures"
- accesskey="P">previous</a> |
- <a href="krb5_addrtype.html" title="krb5_addrtype"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_address">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-address">
-<span id="krb5-address-struct"></span><h1>krb5_address<a class="headerlink" href="#krb5-address" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_address">
-<code class="descname">krb5_address</code><a class="headerlink" href="#c.krb5_address" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Structure for address.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_address krb5_address</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_address.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_address.magic</code><a class="headerlink" href="#c.krb5_address.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_address.addrtype">
-<a class="reference internal" href="krb5_addrtype.html#c.krb5_addrtype" title="krb5_addrtype">krb5_addrtype</a> <code class="descname">krb5_address.addrtype</code><a class="headerlink" href="#c.krb5_address.addrtype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_address.length">
-unsigned int <code class="descname">krb5_address.length</code><a class="headerlink" href="#c.krb5_address.length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_address.contents">
-<a class="reference internal" href="krb5_octet.html#c.krb5_octet" title="krb5_octet">krb5_octet</a> * <code class="descname">krb5_address.contents</code><a class="headerlink" href="#c.krb5_address.contents" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_address</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="krb5 types and structures"
- >previous</a> |
- <a href="krb5_addrtype.html" title="krb5_addrtype"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_address">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_addrtype — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_ap_req" href="krb5_ap_req.html" />
- <link rel="prev" title="krb5_address" href="krb5_address.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_address.html" title="krb5_address"
- accesskey="P">previous</a> |
- <a href="krb5_ap_req.html" title="krb5_ap_req"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_addrtype">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-addrtype">
-<span id="krb5-addrtype-struct"></span><h1>krb5_addrtype<a class="headerlink" href="#krb5-addrtype" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_addrtype">
-<code class="descname">krb5_addrtype</code><a class="headerlink" href="#c.krb5_addrtype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_addrtype</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_addrtype</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_address.html" title="krb5_address"
- >previous</a> |
- <a href="krb5_ap_req.html" title="krb5_ap_req"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_addrtype">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_ap_rep — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_ap_rep_enc_part" href="krb5_ap_rep_enc_part.html" />
- <link rel="prev" title="krb5_ap_req" href="krb5_ap_req.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_ap_req.html" title="krb5_ap_req"
- accesskey="P">previous</a> |
- <a href="krb5_ap_rep_enc_part.html" title="krb5_ap_rep_enc_part"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ap_rep">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-ap-rep">
-<span id="krb5-ap-rep-struct"></span><h1>krb5_ap_rep<a class="headerlink" href="#krb5-ap-rep" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_ap_rep">
-<code class="descname">krb5_ap_rep</code><a class="headerlink" href="#c.krb5_ap_rep" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>C representaton of AP-REP message.</p>
-<p>The server’s response to a client’s request for mutual authentication.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_ap_rep krb5_ap_rep</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_ap_rep.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_ap_rep.magic</code><a class="headerlink" href="#c.krb5_ap_rep.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ap_rep.enc_part">
-<a class="reference internal" href="krb5_enc_data.html#c.krb5_enc_data" title="krb5_enc_data">krb5_enc_data</a> <code class="descname">krb5_ap_rep.enc_part</code><a class="headerlink" href="#c.krb5_ap_rep.enc_part" title="Permalink to this definition">¶</a></dt>
-<dd><p>Ciphertext of ApRepEncPart.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_ap_rep</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_ap_req.html" title="krb5_ap_req"
- >previous</a> |
- <a href="krb5_ap_rep_enc_part.html" title="krb5_ap_rep_enc_part"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ap_rep">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_ap_rep_enc_part — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_authdata" href="krb5_authdata.html" />
- <link rel="prev" title="krb5_ap_rep" href="krb5_ap_rep.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_ap_rep.html" title="krb5_ap_rep"
- accesskey="P">previous</a> |
- <a href="krb5_authdata.html" title="krb5_authdata"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ap_rep_enc_part">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-ap-rep-enc-part">
-<span id="krb5-ap-rep-enc-part-struct"></span><h1>krb5_ap_rep_enc_part<a class="headerlink" href="#krb5-ap-rep-enc-part" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_ap_rep_enc_part">
-<code class="descname">krb5_ap_rep_enc_part</code><a class="headerlink" href="#c.krb5_ap_rep_enc_part" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Cleartext that is encrypted and put into <code class="xref c c-type docutils literal"><span class="pre">_krb5_ap_rep</span></code> .</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_ap_rep_enc_part krb5_ap_rep_enc_part</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_ap_rep_enc_part.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_ap_rep_enc_part.magic</code><a class="headerlink" href="#c.krb5_ap_rep_enc_part.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ap_rep_enc_part.ctime">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_ap_rep_enc_part.ctime</code><a class="headerlink" href="#c.krb5_ap_rep_enc_part.ctime" title="Permalink to this definition">¶</a></dt>
-<dd><p>Client time, seconds portion.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ap_rep_enc_part.cusec">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_ap_rep_enc_part.cusec</code><a class="headerlink" href="#c.krb5_ap_rep_enc_part.cusec" title="Permalink to this definition">¶</a></dt>
-<dd><p>Client time, microseconds portion.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ap_rep_enc_part.subkey">
-<a class="reference internal" href="krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> * <code class="descname">krb5_ap_rep_enc_part.subkey</code><a class="headerlink" href="#c.krb5_ap_rep_enc_part.subkey" title="Permalink to this definition">¶</a></dt>
-<dd><p>Subkey (optional)</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ap_rep_enc_part.seq_number">
-<a class="reference internal" href="krb5_ui_4.html#c.krb5_ui_4" title="krb5_ui_4">krb5_ui_4</a> <code class="descname">krb5_ap_rep_enc_part.seq_number</code><a class="headerlink" href="#c.krb5_ap_rep_enc_part.seq_number" title="Permalink to this definition">¶</a></dt>
-<dd><p>Sequence number.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_ap_rep_enc_part</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_ap_rep.html" title="krb5_ap_rep"
- >previous</a> |
- <a href="krb5_authdata.html" title="krb5_authdata"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ap_rep_enc_part">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_ap_req — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_ap_rep" href="krb5_ap_rep.html" />
- <link rel="prev" title="krb5_addrtype" href="krb5_addrtype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_addrtype.html" title="krb5_addrtype"
- accesskey="P">previous</a> |
- <a href="krb5_ap_rep.html" title="krb5_ap_rep"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ap_req">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-ap-req">
-<span id="krb5-ap-req-struct"></span><h1>krb5_ap_req<a class="headerlink" href="#krb5-ap-req" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_ap_req">
-<code class="descname">krb5_ap_req</code><a class="headerlink" href="#c.krb5_ap_req" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Authentication header.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_ap_req krb5_ap_req</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_ap_req.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_ap_req.magic</code><a class="headerlink" href="#c.krb5_ap_req.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ap_req.ap_options">
-<a class="reference internal" href="krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> <code class="descname">krb5_ap_req.ap_options</code><a class="headerlink" href="#c.krb5_ap_req.ap_options" title="Permalink to this definition">¶</a></dt>
-<dd><p>Requested options.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ap_req.ticket">
-<a class="reference internal" href="krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> * <code class="descname">krb5_ap_req.ticket</code><a class="headerlink" href="#c.krb5_ap_req.ticket" title="Permalink to this definition">¶</a></dt>
-<dd><p>Ticket.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ap_req.authenticator">
-<a class="reference internal" href="krb5_enc_data.html#c.krb5_enc_data" title="krb5_enc_data">krb5_enc_data</a> <code class="descname">krb5_ap_req.authenticator</code><a class="headerlink" href="#c.krb5_ap_req.authenticator" title="Permalink to this definition">¶</a></dt>
-<dd><p>Encrypted authenticator.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_ap_req</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_addrtype.html" title="krb5_addrtype"
- >previous</a> |
- <a href="krb5_ap_rep.html" title="krb5_ap_rep"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ap_req">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_auth_context — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cksumtype" href="krb5_cksumtype.html" />
- <link rel="prev" title="passwd_phrase_element" href="passwd_phrase_element.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="passwd_phrase_element.html" title="passwd_phrase_element"
- accesskey="P">previous</a> |
- <a href="krb5_cksumtype.html" title="krb5_cksumtype"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_context">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-auth-context">
-<span id="krb5-auth-context-struct"></span><h1>krb5_auth_context<a class="headerlink" href="#krb5-auth-context" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_auth_context">
-<code class="descname">krb5_auth_context</code><a class="headerlink" href="#c.krb5_auth_context" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_auth_context* krb5_auth_context</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_auth_context</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="passwd_phrase_element.html" title="passwd_phrase_element"
- >previous</a> |
- <a href="krb5_cksumtype.html" title="krb5_cksumtype"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_auth_context">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_authdata — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_authdatatype" href="krb5_authdatatype.html" />
- <link rel="prev" title="krb5_ap_rep_enc_part" href="krb5_ap_rep_enc_part.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_ap_rep_enc_part.html" title="krb5_ap_rep_enc_part"
- accesskey="P">previous</a> |
- <a href="krb5_authdatatype.html" title="krb5_authdatatype"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_authdata">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdata">
-<span id="krb5-authdata-struct"></span><h1>krb5_authdata<a class="headerlink" href="#krb5-authdata" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_authdata">
-<code class="descname">krb5_authdata</code><a class="headerlink" href="#c.krb5_authdata" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Structure for auth data.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_authdata krb5_authdata</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_authdata.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_authdata.magic</code><a class="headerlink" href="#c.krb5_authdata.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_authdata.ad_type">
-<a class="reference internal" href="krb5_authdatatype.html#c.krb5_authdatatype" title="krb5_authdatatype">krb5_authdatatype</a> <code class="descname">krb5_authdata.ad_type</code><a class="headerlink" href="#c.krb5_authdata.ad_type" title="Permalink to this definition">¶</a></dt>
-<dd><p>ADTYPE.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_authdata.length">
-unsigned int <code class="descname">krb5_authdata.length</code><a class="headerlink" href="#c.krb5_authdata.length" title="Permalink to this definition">¶</a></dt>
-<dd><p>Length of data.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_authdata.contents">
-<a class="reference internal" href="krb5_octet.html#c.krb5_octet" title="krb5_octet">krb5_octet</a> * <code class="descname">krb5_authdata.contents</code><a class="headerlink" href="#c.krb5_authdata.contents" title="Permalink to this definition">¶</a></dt>
-<dd><p>Data.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_authdata</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_ap_rep_enc_part.html" title="krb5_ap_rep_enc_part"
- >previous</a> |
- <a href="krb5_authdatatype.html" title="krb5_authdatatype"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_authdata">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_authdatatype — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_authenticator" href="krb5_authenticator.html" />
- <link rel="prev" title="krb5_authdata" href="krb5_authdata.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_authdata.html" title="krb5_authdata"
- accesskey="P">previous</a> |
- <a href="krb5_authenticator.html" title="krb5_authenticator"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_authdatatype">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authdatatype">
-<span id="krb5-authdatatype-struct"></span><h1>krb5_authdatatype<a class="headerlink" href="#krb5-authdatatype" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_authdatatype">
-<code class="descname">krb5_authdatatype</code><a class="headerlink" href="#c.krb5_authdatatype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_authdatatype</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_authdatatype</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_authdata.html" title="krb5_authdata"
- >previous</a> |
- <a href="krb5_authenticator.html" title="krb5_authenticator"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_authdatatype">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_authenticator — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_boolean" href="krb5_boolean.html" />
- <link rel="prev" title="krb5_authdatatype" href="krb5_authdatatype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_authdatatype.html" title="krb5_authdatatype"
- accesskey="P">previous</a> |
- <a href="krb5_boolean.html" title="krb5_boolean"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_authenticator">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-authenticator">
-<span id="krb5-authenticator-struct"></span><h1>krb5_authenticator<a class="headerlink" href="#krb5-authenticator" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_authenticator">
-<code class="descname">krb5_authenticator</code><a class="headerlink" href="#c.krb5_authenticator" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Ticket authenticator.</p>
-<p>The C representation of an unencrypted authenticator.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_authenticator krb5_authenticator</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_authenticator.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_authenticator.magic</code><a class="headerlink" href="#c.krb5_authenticator.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_authenticator.client">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_authenticator.client</code><a class="headerlink" href="#c.krb5_authenticator.client" title="Permalink to this definition">¶</a></dt>
-<dd><p>client name/realm</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_authenticator.checksum">
-<a class="reference internal" href="krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> * <code class="descname">krb5_authenticator.checksum</code><a class="headerlink" href="#c.krb5_authenticator.checksum" title="Permalink to this definition">¶</a></dt>
-<dd><p>checksum, includes type, optional</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_authenticator.cusec">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_authenticator.cusec</code><a class="headerlink" href="#c.krb5_authenticator.cusec" title="Permalink to this definition">¶</a></dt>
-<dd><p>client usec portion</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_authenticator.ctime">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_authenticator.ctime</code><a class="headerlink" href="#c.krb5_authenticator.ctime" title="Permalink to this definition">¶</a></dt>
-<dd><p>client sec portion</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_authenticator.subkey">
-<a class="reference internal" href="krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> * <code class="descname">krb5_authenticator.subkey</code><a class="headerlink" href="#c.krb5_authenticator.subkey" title="Permalink to this definition">¶</a></dt>
-<dd><p>true session key, optional</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_authenticator.seq_number">
-<a class="reference internal" href="krb5_ui_4.html#c.krb5_ui_4" title="krb5_ui_4">krb5_ui_4</a> <code class="descname">krb5_authenticator.seq_number</code><a class="headerlink" href="#c.krb5_authenticator.seq_number" title="Permalink to this definition">¶</a></dt>
-<dd><p>sequence #, optional</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_authenticator.authorization_data">
-<a class="reference internal" href="krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ** <code class="descname">krb5_authenticator.authorization_data</code><a class="headerlink" href="#c.krb5_authenticator.authorization_data" title="Permalink to this definition">¶</a></dt>
-<dd><p>authoriazation data</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_authenticator</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_authdatatype.html" title="krb5_authdatatype"
- >previous</a> |
- <a href="krb5_boolean.html" title="krb5_boolean"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_authenticator">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_boolean — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_checksum" href="krb5_checksum.html" />
- <link rel="prev" title="krb5_authenticator" href="krb5_authenticator.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_authenticator.html" title="krb5_authenticator"
- accesskey="P">previous</a> |
- <a href="krb5_checksum.html" title="krb5_checksum"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_boolean">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-boolean">
-<span id="krb5-boolean-struct"></span><h1>krb5_boolean<a class="headerlink" href="#krb5-boolean" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_boolean">
-<code class="descname">krb5_boolean</code><a class="headerlink" href="#c.krb5_boolean" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef unsigned int krb5_boolean</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_boolean</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_authenticator.html" title="krb5_authenticator"
- >previous</a> |
- <a href="krb5_checksum.html" title="krb5_checksum"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_boolean">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cc_cursor — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_ccache" href="krb5_ccache.html" />
- <link rel="prev" title="krb5_context" href="krb5_context.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_context.html" title="krb5_context"
- accesskey="P">previous</a> |
- <a href="krb5_ccache.html" title="krb5_ccache"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_cursor">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cc-cursor">
-<span id="krb5-cc-cursor-struct"></span><h1>krb5_cc_cursor<a class="headerlink" href="#krb5-cc-cursor" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_cc_cursor">
-<code class="descname">krb5_cc_cursor</code><a class="headerlink" href="#c.krb5_cc_cursor" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Cursor for sequential lookup.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_pointer krb5_cc_cursor</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cc_cursor</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_context.html" title="krb5_context"
- >previous</a> |
- <a href="krb5_ccache.html" title="krb5_ccache"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cc_cursor">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_ccache — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cccol_cursor" href="krb5_cccol_cursor.html" />
- <link rel="prev" title="krb5_cc_cursor" href="krb5_cc_cursor.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cc_cursor.html" title="krb5_cc_cursor"
- accesskey="P">previous</a> |
- <a href="krb5_cccol_cursor.html" title="krb5_cccol_cursor"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ccache">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-ccache">
-<span id="krb5-ccache-struct"></span><h1>krb5_ccache<a class="headerlink" href="#krb5-ccache" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_ccache">
-<code class="descname">krb5_ccache</code><a class="headerlink" href="#c.krb5_ccache" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_ccache* krb5_ccache</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_ccache</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cc_cursor.html" title="krb5_cc_cursor"
- >previous</a> |
- <a href="krb5_cccol_cursor.html" title="krb5_cccol_cursor"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ccache">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cccol_cursor — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_init_creds_context" href="krb5_init_creds_context.html" />
- <link rel="prev" title="krb5_ccache" href="krb5_ccache.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_ccache.html" title="krb5_ccache"
- accesskey="P">previous</a> |
- <a href="krb5_init_creds_context.html" title="krb5_init_creds_context"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cccol_cursor">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cccol-cursor">
-<span id="krb5-cccol-cursor-struct"></span><h1>krb5_cccol_cursor<a class="headerlink" href="#krb5-cccol-cursor" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_cccol_cursor">
-<code class="descname">krb5_cccol_cursor</code><a class="headerlink" href="#c.krb5_cccol_cursor" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Cursor for iterating over all ccaches.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_cccol_cursor* krb5_cccol_cursor</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cccol_cursor</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_ccache.html" title="krb5_ccache"
- >previous</a> |
- <a href="krb5_init_creds_context.html" title="krb5_init_creds_context"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cccol_cursor">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_checksum — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_const_pointer" href="krb5_const_pointer.html" />
- <link rel="prev" title="krb5_boolean" href="krb5_boolean.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_boolean.html" title="krb5_boolean"
- accesskey="P">previous</a> |
- <a href="krb5_const_pointer.html" title="krb5_const_pointer"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_checksum">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-checksum">
-<span id="krb5-checksum-struct"></span><h1>krb5_checksum<a class="headerlink" href="#krb5-checksum" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_checksum">
-<code class="descname">krb5_checksum</code><a class="headerlink" href="#c.krb5_checksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_checksum krb5_checksum</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_checksum.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_checksum.magic</code><a class="headerlink" href="#c.krb5_checksum.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_checksum.checksum_type">
-<a class="reference internal" href="krb5_cksumtype.html#c.krb5_cksumtype" title="krb5_cksumtype">krb5_cksumtype</a> <code class="descname">krb5_checksum.checksum_type</code><a class="headerlink" href="#c.krb5_checksum.checksum_type" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_checksum.length">
-unsigned int <code class="descname">krb5_checksum.length</code><a class="headerlink" href="#c.krb5_checksum.length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_checksum.contents">
-<a class="reference internal" href="krb5_octet.html#c.krb5_octet" title="krb5_octet">krb5_octet</a> * <code class="descname">krb5_checksum.contents</code><a class="headerlink" href="#c.krb5_checksum.contents" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_checksum</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_boolean.html" title="krb5_boolean"
- >previous</a> |
- <a href="krb5_const_pointer.html" title="krb5_const_pointer"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_checksum">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cksumtype — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_context" href="krb5_context.html" />
- <link rel="prev" title="krb5_auth_context" href="krb5_auth_context.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_auth_context.html" title="krb5_auth_context"
- accesskey="P">previous</a> |
- <a href="krb5_context.html" title="krb5_context"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cksumtype">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cksumtype">
-<span id="krb5-cksumtype-struct"></span><h1>krb5_cksumtype<a class="headerlink" href="#krb5-cksumtype" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_cksumtype">
-<code class="descname">krb5_cksumtype</code><a class="headerlink" href="#c.krb5_cksumtype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_cksumtype</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cksumtype</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_auth_context.html" title="krb5_auth_context"
- >previous</a> |
- <a href="krb5_context.html" title="krb5_context"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cksumtype">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_const_pointer — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_const_principal" href="krb5_const_principal.html" />
- <link rel="prev" title="krb5_checksum" href="krb5_checksum.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_checksum.html" title="krb5_checksum"
- accesskey="P">previous</a> |
- <a href="krb5_const_principal.html" title="krb5_const_principal"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_const_pointer">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-const-pointer">
-<span id="krb5-const-pointer-struct"></span><h1>krb5_const_pointer<a class="headerlink" href="#krb5-const-pointer" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_const_pointer">
-<code class="descname">krb5_const_pointer</code><a class="headerlink" href="#c.krb5_const_pointer" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef void const* krb5_const_pointer</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_const_pointer</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_checksum.html" title="krb5_checksum"
- >previous</a> |
- <a href="krb5_const_principal.html" title="krb5_const_principal"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_const_pointer">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_const_principal — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cred" href="krb5_cred.html" />
- <link rel="prev" title="krb5_const_pointer" href="krb5_const_pointer.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_const_pointer.html" title="krb5_const_pointer"
- accesskey="P">previous</a> |
- <a href="krb5_cred.html" title="krb5_cred"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_const_principal">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-const-principal">
-<span id="krb5-const-principal-struct"></span><h1>krb5_const_principal<a class="headerlink" href="#krb5-const-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_const_principal">
-<code class="descname">krb5_const_principal</code><a class="headerlink" href="#c.krb5_const_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Constant version of <a class="reference internal" href="krb5_principal_data.html#c.krb5_principal_data" title="krb5_principal_data"><code class="xref c c-type docutils literal"><span class="pre">krb5_principal_data</span></code></a> .</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef const krb5_principal_data* krb5_const_principal</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_const_principal.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_const_principal.magic</code><a class="headerlink" href="#c.krb5_const_principal.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_const_principal.realm">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_const_principal.realm</code><a class="headerlink" href="#c.krb5_const_principal.realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_const_principal.data">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> * <code class="descname">krb5_const_principal.data</code><a class="headerlink" href="#c.krb5_const_principal.data" title="Permalink to this definition">¶</a></dt>
-<dd><p>An array of strings.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_const_principal.length">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_const_principal.length</code><a class="headerlink" href="#c.krb5_const_principal.length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_const_principal.type">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_const_principal.type</code><a class="headerlink" href="#c.krb5_const_principal.type" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_const_principal</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_const_pointer.html" title="krb5_const_pointer"
- >previous</a> |
- <a href="krb5_cred.html" title="krb5_cred"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_const_principal">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_context — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cc_cursor" href="krb5_cc_cursor.html" />
- <link rel="prev" title="krb5_cksumtype" href="krb5_cksumtype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cksumtype.html" title="krb5_cksumtype"
- accesskey="P">previous</a> |
- <a href="krb5_cc_cursor.html" title="krb5_cc_cursor"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_context">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-context">
-<span id="krb5-context-struct"></span><h1>krb5_context<a class="headerlink" href="#krb5-context" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_context">
-<code class="descname">krb5_context</code><a class="headerlink" href="#c.krb5_context" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_context* krb5_context</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_context</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cksumtype.html" title="krb5_cksumtype"
- >previous</a> |
- <a href="krb5_cc_cursor.html" title="krb5_cc_cursor"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_context">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cred — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cred_enc_part" href="krb5_cred_enc_part.html" />
- <link rel="prev" title="krb5_const_principal" href="krb5_const_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_const_principal.html" title="krb5_const_principal"
- accesskey="P">previous</a> |
- <a href="krb5_cred_enc_part.html" title="krb5_cred_enc_part"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cred">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cred">
-<span id="krb5-cred-struct"></span><h1>krb5_cred<a class="headerlink" href="#krb5-cred" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_cred">
-<code class="descname">krb5_cred</code><a class="headerlink" href="#c.krb5_cred" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Credentials data structure.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_cred krb5_cred</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_cred.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_cred.magic</code><a class="headerlink" href="#c.krb5_cred.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred.tickets">
-<a class="reference internal" href="krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> ** <code class="descname">krb5_cred.tickets</code><a class="headerlink" href="#c.krb5_cred.tickets" title="Permalink to this definition">¶</a></dt>
-<dd><p>Tickets.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred.enc_part">
-<a class="reference internal" href="krb5_enc_data.html#c.krb5_enc_data" title="krb5_enc_data">krb5_enc_data</a> <code class="descname">krb5_cred.enc_part</code><a class="headerlink" href="#c.krb5_cred.enc_part" title="Permalink to this definition">¶</a></dt>
-<dd><p>Encrypted part.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred.enc_part2">
-<a class="reference internal" href="krb5_cred_enc_part.html#c.krb5_cred_enc_part" title="krb5_cred_enc_part">krb5_cred_enc_part</a> * <code class="descname">krb5_cred.enc_part2</code><a class="headerlink" href="#c.krb5_cred.enc_part2" title="Permalink to this definition">¶</a></dt>
-<dd><p>Unencrypted version, if available.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cred</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_const_principal.html" title="krb5_const_principal"
- >previous</a> |
- <a href="krb5_cred_enc_part.html" title="krb5_cred_enc_part"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cred">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cred_enc_part — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cred_info" href="krb5_cred_info.html" />
- <link rel="prev" title="krb5_cred" href="krb5_cred.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cred.html" title="krb5_cred"
- accesskey="P">previous</a> |
- <a href="krb5_cred_info.html" title="krb5_cred_info"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cred_enc_part">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cred-enc-part">
-<span id="krb5-cred-enc-part-struct"></span><h1>krb5_cred_enc_part<a class="headerlink" href="#krb5-cred-enc-part" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_cred_enc_part">
-<code class="descname">krb5_cred_enc_part</code><a class="headerlink" href="#c.krb5_cred_enc_part" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Cleartext credentials information.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_cred_enc_part krb5_cred_enc_part</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_cred_enc_part.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_cred_enc_part.magic</code><a class="headerlink" href="#c.krb5_cred_enc_part.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_enc_part.nonce">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_cred_enc_part.nonce</code><a class="headerlink" href="#c.krb5_cred_enc_part.nonce" title="Permalink to this definition">¶</a></dt>
-<dd><p>Nonce (optional)</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_enc_part.timestamp">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_cred_enc_part.timestamp</code><a class="headerlink" href="#c.krb5_cred_enc_part.timestamp" title="Permalink to this definition">¶</a></dt>
-<dd><p>Generation time, seconds portion.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_enc_part.usec">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_cred_enc_part.usec</code><a class="headerlink" href="#c.krb5_cred_enc_part.usec" title="Permalink to this definition">¶</a></dt>
-<dd><p>Generation time, microseconds portion.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_enc_part.s_address">
-<a class="reference internal" href="krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> * <code class="descname">krb5_cred_enc_part.s_address</code><a class="headerlink" href="#c.krb5_cred_enc_part.s_address" title="Permalink to this definition">¶</a></dt>
-<dd><p>Sender address (optional)</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_enc_part.r_address">
-<a class="reference internal" href="krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> * <code class="descname">krb5_cred_enc_part.r_address</code><a class="headerlink" href="#c.krb5_cred_enc_part.r_address" title="Permalink to this definition">¶</a></dt>
-<dd><p>Recipient address (optional)</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_enc_part.ticket_info">
-<a class="reference internal" href="krb5_cred_info.html#c.krb5_cred_info" title="krb5_cred_info">krb5_cred_info</a> ** <code class="descname">krb5_cred_enc_part.ticket_info</code><a class="headerlink" href="#c.krb5_cred_enc_part.ticket_info" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cred_enc_part</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cred.html" title="krb5_cred"
- >previous</a> |
- <a href="krb5_cred_info.html" title="krb5_cred_info"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cred_enc_part">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cred_info — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_creds" href="krb5_creds.html" />
- <link rel="prev" title="krb5_cred_enc_part" href="krb5_cred_enc_part.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cred_enc_part.html" title="krb5_cred_enc_part"
- accesskey="P">previous</a> |
- <a href="krb5_creds.html" title="krb5_creds"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cred_info">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cred-info">
-<span id="krb5-cred-info-struct"></span><h1>krb5_cred_info<a class="headerlink" href="#krb5-cred-info" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_cred_info">
-<code class="descname">krb5_cred_info</code><a class="headerlink" href="#c.krb5_cred_info" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Credentials information inserted into <em>EncKrbCredPart</em> .</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_cred_info krb5_cred_info</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_cred_info.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_cred_info.magic</code><a class="headerlink" href="#c.krb5_cred_info.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_info.session">
-<a class="reference internal" href="krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> * <code class="descname">krb5_cred_info.session</code><a class="headerlink" href="#c.krb5_cred_info.session" title="Permalink to this definition">¶</a></dt>
-<dd><p>Session key used to encrypt ticket.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_info.client">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_cred_info.client</code><a class="headerlink" href="#c.krb5_cred_info.client" title="Permalink to this definition">¶</a></dt>
-<dd><p>Client principal and realm.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_info.server">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_cred_info.server</code><a class="headerlink" href="#c.krb5_cred_info.server" title="Permalink to this definition">¶</a></dt>
-<dd><p>Server principal and realm.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_info.flags">
-<a class="reference internal" href="krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> <code class="descname">krb5_cred_info.flags</code><a class="headerlink" href="#c.krb5_cred_info.flags" title="Permalink to this definition">¶</a></dt>
-<dd><p>Ticket flags.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_info.times">
-<a class="reference internal" href="krb5_ticket_times.html#c.krb5_ticket_times" title="krb5_ticket_times">krb5_ticket_times</a> <code class="descname">krb5_cred_info.times</code><a class="headerlink" href="#c.krb5_cred_info.times" title="Permalink to this definition">¶</a></dt>
-<dd><p>Auth, start, end, renew_till.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_cred_info.caddrs">
-<a class="reference internal" href="krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> ** <code class="descname">krb5_cred_info.caddrs</code><a class="headerlink" href="#c.krb5_cred_info.caddrs" title="Permalink to this definition">¶</a></dt>
-<dd><p>Array of pointers to addrs (optional)</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cred_info</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cred_enc_part.html" title="krb5_cred_enc_part"
- >previous</a> |
- <a href="krb5_creds.html" title="krb5_creds"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cred_info">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_creds — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_crypto_iov" href="krb5_crypto_iov.html" />
- <link rel="prev" title="krb5_cred_info" href="krb5_cred_info.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cred_info.html" title="krb5_cred_info"
- accesskey="P">previous</a> |
- <a href="krb5_crypto_iov.html" title="krb5_crypto_iov"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_creds">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-creds">
-<span id="krb5-creds-struct"></span><h1>krb5_creds<a class="headerlink" href="#krb5-creds" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_creds">
-<code class="descname">krb5_creds</code><a class="headerlink" href="#c.krb5_creds" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Credentials structure including ticket, session key, and lifetime info.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_creds krb5_creds</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_creds.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_creds.magic</code><a class="headerlink" href="#c.krb5_creds.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_creds.client">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_creds.client</code><a class="headerlink" href="#c.krb5_creds.client" title="Permalink to this definition">¶</a></dt>
-<dd><p>client’s principal identifier</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_creds.server">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_creds.server</code><a class="headerlink" href="#c.krb5_creds.server" title="Permalink to this definition">¶</a></dt>
-<dd><p>server’s principal identifier</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_creds.keyblock">
-<a class="reference internal" href="krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> <code class="descname">krb5_creds.keyblock</code><a class="headerlink" href="#c.krb5_creds.keyblock" title="Permalink to this definition">¶</a></dt>
-<dd><p>session encryption key info</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_creds.times">
-<a class="reference internal" href="krb5_ticket_times.html#c.krb5_ticket_times" title="krb5_ticket_times">krb5_ticket_times</a> <code class="descname">krb5_creds.times</code><a class="headerlink" href="#c.krb5_creds.times" title="Permalink to this definition">¶</a></dt>
-<dd><p>lifetime info</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_creds.is_skey">
-<a class="reference internal" href="krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_creds.is_skey</code><a class="headerlink" href="#c.krb5_creds.is_skey" title="Permalink to this definition">¶</a></dt>
-<dd><p>true if ticket is encrypted in another ticket’s skey</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_creds.ticket_flags">
-<a class="reference internal" href="krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> <code class="descname">krb5_creds.ticket_flags</code><a class="headerlink" href="#c.krb5_creds.ticket_flags" title="Permalink to this definition">¶</a></dt>
-<dd><p>flags in ticket</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_creds.addresses">
-<a class="reference internal" href="krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> ** <code class="descname">krb5_creds.addresses</code><a class="headerlink" href="#c.krb5_creds.addresses" title="Permalink to this definition">¶</a></dt>
-<dd><p>addrs in ticket</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_creds.ticket">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_creds.ticket</code><a class="headerlink" href="#c.krb5_creds.ticket" title="Permalink to this definition">¶</a></dt>
-<dd><p>ticket string itself</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_creds.second_ticket">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_creds.second_ticket</code><a class="headerlink" href="#c.krb5_creds.second_ticket" title="Permalink to this definition">¶</a></dt>
-<dd><p>second ticket, if related to ticket (via DUPLICATE-SKEY or ENC-TKT-IN-SKEY)</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_creds.authdata">
-<a class="reference internal" href="krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ** <code class="descname">krb5_creds.authdata</code><a class="headerlink" href="#c.krb5_creds.authdata" title="Permalink to this definition">¶</a></dt>
-<dd><p>authorization data</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_creds</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cred_info.html" title="krb5_cred_info"
- >previous</a> |
- <a href="krb5_crypto_iov.html" title="krb5_crypto_iov"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_creds">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_crypto_iov — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_cryptotype" href="krb5_cryptotype.html" />
- <link rel="prev" title="krb5_creds" href="krb5_creds.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_creds.html" title="krb5_creds"
- accesskey="P">previous</a> |
- <a href="krb5_cryptotype.html" title="krb5_cryptotype"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_crypto_iov">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-crypto-iov">
-<span id="krb5-crypto-iov-struct"></span><h1>krb5_crypto_iov<a class="headerlink" href="#krb5-crypto-iov" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_crypto_iov">
-<code class="descname">krb5_crypto_iov</code><a class="headerlink" href="#c.krb5_crypto_iov" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Structure to describe a region of text to be encrypted or decrypted.</p>
-<p>The <em>flags</em> member describes the type of the iov. The <em>data</em> member points to the memory that will be manipulated. All iov APIs take a pointer to the first element of an array of krb5_crypto_iov’s along with the size of that array. Buffer contents are manipulated in-place; data is overwritten. Callers must allocate the right number of krb5_crypto_iov structures before calling into an iov API.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_crypto_iov krb5_crypto_iov</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_crypto_iov.flags">
-<a class="reference internal" href="krb5_cryptotype.html#c.krb5_cryptotype" title="krb5_cryptotype">krb5_cryptotype</a> <code class="descname">krb5_crypto_iov.flags</code><a class="headerlink" href="#c.krb5_crypto_iov.flags" title="Permalink to this definition">¶</a></dt>
-<dd><p><code class="xref c c-data docutils literal"><span class="pre">KRB5_CRYPTO_TYPE</span></code> type of the iov</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_crypto_iov.data">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_crypto_iov.data</code><a class="headerlink" href="#c.krb5_crypto_iov.data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_crypto_iov</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_creds.html" title="krb5_creds"
- >previous</a> |
- <a href="krb5_cryptotype.html" title="krb5_cryptotype"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_crypto_iov">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_cryptotype — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_data" href="krb5_data.html" />
- <link rel="prev" title="krb5_crypto_iov" href="krb5_crypto_iov.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_crypto_iov.html" title="krb5_crypto_iov"
- accesskey="P">previous</a> |
- <a href="krb5_data.html" title="krb5_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cryptotype">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-cryptotype">
-<span id="krb5-cryptotype-struct"></span><h1>krb5_cryptotype<a class="headerlink" href="#krb5-cryptotype" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_cryptotype">
-<code class="descname">krb5_cryptotype</code><a class="headerlink" href="#c.krb5_cryptotype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_cryptotype</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_cryptotype</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_crypto_iov.html" title="krb5_crypto_iov"
- >previous</a> |
- <a href="krb5_data.html" title="krb5_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_cryptotype">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_deltat" href="krb5_deltat.html" />
- <link rel="prev" title="krb5_cryptotype" href="krb5_cryptotype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cryptotype.html" title="krb5_cryptotype"
- accesskey="P">previous</a> |
- <a href="krb5_deltat.html" title="krb5_deltat"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-data">
-<span id="krb5-data-struct"></span><h1>krb5_data<a class="headerlink" href="#krb5-data" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_data">
-<code class="descname">krb5_data</code><a class="headerlink" href="#c.krb5_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_data krb5_data</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_data.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_data.magic</code><a class="headerlink" href="#c.krb5_data.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_data.length">
-unsigned int <code class="descname">krb5_data.length</code><a class="headerlink" href="#c.krb5_data.length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_data.data">
-char * <code class="descname">krb5_data.data</code><a class="headerlink" href="#c.krb5_data.data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_data</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cryptotype.html" title="krb5_cryptotype"
- >previous</a> |
- <a href="krb5_deltat.html" title="krb5_deltat"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_deltat — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_enc_data" href="krb5_enc_data.html" />
- <link rel="prev" title="krb5_data" href="krb5_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_data.html" title="krb5_data"
- accesskey="P">previous</a> |
- <a href="krb5_enc_data.html" title="krb5_enc_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_deltat">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-deltat">
-<span id="krb5-deltat-struct"></span><h1>krb5_deltat<a class="headerlink" href="#krb5-deltat" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_deltat">
-<code class="descname">krb5_deltat</code><a class="headerlink" href="#c.krb5_deltat" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_deltat</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_deltat</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_data.html" title="krb5_data"
- >previous</a> |
- <a href="krb5_enc_data.html" title="krb5_enc_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_deltat">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_enc_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_enc_kdc_rep_part" href="krb5_enc_kdc_rep_part.html" />
- <link rel="prev" title="krb5_deltat" href="krb5_deltat.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_deltat.html" title="krb5_deltat"
- accesskey="P">previous</a> |
- <a href="krb5_enc_kdc_rep_part.html" title="krb5_enc_kdc_rep_part"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enc_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-enc-data">
-<span id="krb5-enc-data-struct"></span><h1>krb5_enc_data<a class="headerlink" href="#krb5-enc-data" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_enc_data">
-<code class="descname">krb5_enc_data</code><a class="headerlink" href="#c.krb5_enc_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_enc_data krb5_enc_data</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_enc_data.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_enc_data.magic</code><a class="headerlink" href="#c.krb5_enc_data.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_data.enctype">
-<a class="reference internal" href="krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> <code class="descname">krb5_enc_data.enctype</code><a class="headerlink" href="#c.krb5_enc_data.enctype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_data.kvno">
-<a class="reference internal" href="krb5_kvno.html#c.krb5_kvno" title="krb5_kvno">krb5_kvno</a> <code class="descname">krb5_enc_data.kvno</code><a class="headerlink" href="#c.krb5_enc_data.kvno" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_data.ciphertext">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_enc_data.ciphertext</code><a class="headerlink" href="#c.krb5_enc_data.ciphertext" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_enc_data</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_deltat.html" title="krb5_deltat"
- >previous</a> |
- <a href="krb5_enc_kdc_rep_part.html" title="krb5_enc_kdc_rep_part"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enc_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_enc_kdc_rep_part — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_enc_tkt_part" href="krb5_enc_tkt_part.html" />
- <link rel="prev" title="krb5_enc_data" href="krb5_enc_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_enc_data.html" title="krb5_enc_data"
- accesskey="P">previous</a> |
- <a href="krb5_enc_tkt_part.html" title="krb5_enc_tkt_part"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enc_kdc_rep_part">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-enc-kdc-rep-part">
-<span id="krb5-enc-kdc-rep-part-struct"></span><h1>krb5_enc_kdc_rep_part<a class="headerlink" href="#krb5-enc-kdc-rep-part" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_enc_kdc_rep_part">
-<code class="descname">krb5_enc_kdc_rep_part</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>C representation of <em>EncKDCRepPart</em> protocol message.</p>
-<p>This is the cleartext message that is encrypted and inserted in <em>KDC-REP</em> .</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_enc_kdc_rep_part krb5_enc_kdc_rep_part</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_enc_kdc_rep_part.magic</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.msg_type">
-<a class="reference internal" href="krb5_msgtype.html#c.krb5_msgtype" title="krb5_msgtype">krb5_msgtype</a> <code class="descname">krb5_enc_kdc_rep_part.msg_type</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.msg_type" title="Permalink to this definition">¶</a></dt>
-<dd><p>krb5 message type</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.session">
-<a class="reference internal" href="krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> * <code class="descname">krb5_enc_kdc_rep_part.session</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.session" title="Permalink to this definition">¶</a></dt>
-<dd><p>Session key.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.last_req">
-<a class="reference internal" href="krb5_last_req_entry.html#c.krb5_last_req_entry" title="krb5_last_req_entry">krb5_last_req_entry</a> ** <code class="descname">krb5_enc_kdc_rep_part.last_req</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.last_req" title="Permalink to this definition">¶</a></dt>
-<dd><p>Array of pointers to entries.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.nonce">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_enc_kdc_rep_part.nonce</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.nonce" title="Permalink to this definition">¶</a></dt>
-<dd><p>Nonce from request.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.key_exp">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_enc_kdc_rep_part.key_exp</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.key_exp" title="Permalink to this definition">¶</a></dt>
-<dd><p>Expiration date.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.flags">
-<a class="reference internal" href="krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> <code class="descname">krb5_enc_kdc_rep_part.flags</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.flags" title="Permalink to this definition">¶</a></dt>
-<dd><p>Ticket flags.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.times">
-<a class="reference internal" href="krb5_ticket_times.html#c.krb5_ticket_times" title="krb5_ticket_times">krb5_ticket_times</a> <code class="descname">krb5_enc_kdc_rep_part.times</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.times" title="Permalink to this definition">¶</a></dt>
-<dd><p>Lifetime info.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.server">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_enc_kdc_rep_part.server</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.server" title="Permalink to this definition">¶</a></dt>
-<dd><p>Server’s principal identifier.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.caddrs">
-<a class="reference internal" href="krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> ** <code class="descname">krb5_enc_kdc_rep_part.caddrs</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.caddrs" title="Permalink to this definition">¶</a></dt>
-<dd><p>Array of ptrs to addrs, optional.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_kdc_rep_part.enc_padata">
-<a class="reference internal" href="krb5_pa_data.html#c.krb5_pa_data" title="krb5_pa_data">krb5_pa_data</a> ** <code class="descname">krb5_enc_kdc_rep_part.enc_padata</code><a class="headerlink" href="#c.krb5_enc_kdc_rep_part.enc_padata" title="Permalink to this definition">¶</a></dt>
-<dd><p>Encrypted preauthentication data.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_enc_kdc_rep_part</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_enc_data.html" title="krb5_enc_data"
- >previous</a> |
- <a href="krb5_enc_tkt_part.html" title="krb5_enc_tkt_part"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enc_kdc_rep_part">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_enc_tkt_part — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_encrypt_block" href="krb5_encrypt_block.html" />
- <link rel="prev" title="krb5_enc_kdc_rep_part" href="krb5_enc_kdc_rep_part.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_enc_kdc_rep_part.html" title="krb5_enc_kdc_rep_part"
- accesskey="P">previous</a> |
- <a href="krb5_encrypt_block.html" title="krb5_encrypt_block"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enc_tkt_part">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-enc-tkt-part">
-<span id="krb5-enc-tkt-part-struct"></span><h1>krb5_enc_tkt_part<a class="headerlink" href="#krb5-enc-tkt-part" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_enc_tkt_part">
-<code class="descname">krb5_enc_tkt_part</code><a class="headerlink" href="#c.krb5_enc_tkt_part" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Encrypted part of ticket.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_enc_tkt_part krb5_enc_tkt_part</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_enc_tkt_part.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_enc_tkt_part.magic</code><a class="headerlink" href="#c.krb5_enc_tkt_part.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_tkt_part.flags">
-<a class="reference internal" href="krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> <code class="descname">krb5_enc_tkt_part.flags</code><a class="headerlink" href="#c.krb5_enc_tkt_part.flags" title="Permalink to this definition">¶</a></dt>
-<dd><p>flags</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_tkt_part.session">
-<a class="reference internal" href="krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> * <code class="descname">krb5_enc_tkt_part.session</code><a class="headerlink" href="#c.krb5_enc_tkt_part.session" title="Permalink to this definition">¶</a></dt>
-<dd><p>session key: includes enctype</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_tkt_part.client">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_enc_tkt_part.client</code><a class="headerlink" href="#c.krb5_enc_tkt_part.client" title="Permalink to this definition">¶</a></dt>
-<dd><p>client name/realm</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_tkt_part.transited">
-<a class="reference internal" href="krb5_transited.html#c.krb5_transited" title="krb5_transited">krb5_transited</a> <code class="descname">krb5_enc_tkt_part.transited</code><a class="headerlink" href="#c.krb5_enc_tkt_part.transited" title="Permalink to this definition">¶</a></dt>
-<dd><p>list of transited realms</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_tkt_part.times">
-<a class="reference internal" href="krb5_ticket_times.html#c.krb5_ticket_times" title="krb5_ticket_times">krb5_ticket_times</a> <code class="descname">krb5_enc_tkt_part.times</code><a class="headerlink" href="#c.krb5_enc_tkt_part.times" title="Permalink to this definition">¶</a></dt>
-<dd><p>auth, start, end, renew_till</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_tkt_part.caddrs">
-<a class="reference internal" href="krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> ** <code class="descname">krb5_enc_tkt_part.caddrs</code><a class="headerlink" href="#c.krb5_enc_tkt_part.caddrs" title="Permalink to this definition">¶</a></dt>
-<dd><p>array of ptrs to addresses</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_enc_tkt_part.authorization_data">
-<a class="reference internal" href="krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ** <code class="descname">krb5_enc_tkt_part.authorization_data</code><a class="headerlink" href="#c.krb5_enc_tkt_part.authorization_data" title="Permalink to this definition">¶</a></dt>
-<dd><p>auth data</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_enc_tkt_part</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_enc_kdc_rep_part.html" title="krb5_enc_kdc_rep_part"
- >previous</a> |
- <a href="krb5_encrypt_block.html" title="krb5_encrypt_block"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enc_tkt_part">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_encrypt_block — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_enctype" href="krb5_enctype.html" />
- <link rel="prev" title="krb5_enc_tkt_part" href="krb5_enc_tkt_part.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_enc_tkt_part.html" title="krb5_enc_tkt_part"
- accesskey="P">previous</a> |
- <a href="krb5_enctype.html" title="krb5_enctype"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_encrypt_block">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-encrypt-block">
-<span id="krb5-encrypt-block-struct"></span><h1>krb5_encrypt_block<a class="headerlink" href="#krb5-encrypt-block" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_encrypt_block">
-<code class="descname">krb5_encrypt_block</code><a class="headerlink" href="#c.krb5_encrypt_block" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_encrypt_block krb5_encrypt_block</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_encrypt_block.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_encrypt_block.magic</code><a class="headerlink" href="#c.krb5_encrypt_block.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_encrypt_block.crypto_entry">
-<a class="reference internal" href="krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> <code class="descname">krb5_encrypt_block.crypto_entry</code><a class="headerlink" href="#c.krb5_encrypt_block.crypto_entry" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_encrypt_block.key">
-<a class="reference internal" href="krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> * <code class="descname">krb5_encrypt_block.key</code><a class="headerlink" href="#c.krb5_encrypt_block.key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_encrypt_block</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_enc_tkt_part.html" title="krb5_enc_tkt_part"
- >previous</a> |
- <a href="krb5_enctype.html" title="krb5_enctype"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_encrypt_block">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_enctype — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_error" href="krb5_error.html" />
- <link rel="prev" title="krb5_encrypt_block" href="krb5_encrypt_block.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_encrypt_block.html" title="krb5_encrypt_block"
- accesskey="P">previous</a> |
- <a href="krb5_error.html" title="krb5_error"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enctype">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-enctype">
-<span id="krb5-enctype-struct"></span><h1>krb5_enctype<a class="headerlink" href="#krb5-enctype" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_enctype">
-<code class="descname">krb5_enctype</code><a class="headerlink" href="#c.krb5_enctype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_enctype</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_enctype</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_encrypt_block.html" title="krb5_encrypt_block"
- >previous</a> |
- <a href="krb5_error.html" title="krb5_error"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_enctype">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_error — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_error_code" href="krb5_error_code.html" />
- <link rel="prev" title="krb5_enctype" href="krb5_enctype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_enctype.html" title="krb5_enctype"
- accesskey="P">previous</a> |
- <a href="krb5_error_code.html" title="krb5_error_code"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_error">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-error">
-<span id="krb5-error-struct"></span><h1>krb5_error<a class="headerlink" href="#krb5-error" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_error">
-<code class="descname">krb5_error</code><a class="headerlink" href="#c.krb5_error" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Error message structure.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_error krb5_error</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_error.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_error.magic</code><a class="headerlink" href="#c.krb5_error.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_error.ctime">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_error.ctime</code><a class="headerlink" href="#c.krb5_error.ctime" title="Permalink to this definition">¶</a></dt>
-<dd><p>Client sec portion; optional.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_error.cusec">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_error.cusec</code><a class="headerlink" href="#c.krb5_error.cusec" title="Permalink to this definition">¶</a></dt>
-<dd><p>Client usec portion; optional.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_error.susec">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_error.susec</code><a class="headerlink" href="#c.krb5_error.susec" title="Permalink to this definition">¶</a></dt>
-<dd><p>Server usec portion.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_error.stime">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_error.stime</code><a class="headerlink" href="#c.krb5_error.stime" title="Permalink to this definition">¶</a></dt>
-<dd><p>Server sec portion.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_error.error">
-<a class="reference internal" href="krb5_ui_4.html#c.krb5_ui_4" title="krb5_ui_4">krb5_ui_4</a> <code class="descname">krb5_error.error</code><a class="headerlink" href="#c.krb5_error.error" title="Permalink to this definition">¶</a></dt>
-<dd><p>Error code (protocol error #’s)</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_error.client">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_error.client</code><a class="headerlink" href="#c.krb5_error.client" title="Permalink to this definition">¶</a></dt>
-<dd><p>Client principal and realm.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_error.server">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_error.server</code><a class="headerlink" href="#c.krb5_error.server" title="Permalink to this definition">¶</a></dt>
-<dd><p>Server principal and realm.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_error.text">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_error.text</code><a class="headerlink" href="#c.krb5_error.text" title="Permalink to this definition">¶</a></dt>
-<dd><p>Descriptive text.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_error.e_data">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_error.e_data</code><a class="headerlink" href="#c.krb5_error.e_data" title="Permalink to this definition">¶</a></dt>
-<dd><p>Additional error-describing data.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_error</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_enctype.html" title="krb5_enctype"
- >previous</a> |
- <a href="krb5_error_code.html" title="krb5_error_code"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_error">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_error_code — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_expire_callback_func" href="krb5_expire_callback_func.html" />
- <link rel="prev" title="krb5_error" href="krb5_error.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_error.html" title="krb5_error"
- accesskey="P">previous</a> |
- <a href="krb5_expire_callback_func.html" title="krb5_expire_callback_func"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_error_code">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-error-code">
-<span id="krb5-error-code-struct"></span><h1>krb5_error_code<a class="headerlink" href="#krb5-error-code" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_error_code">
-<code class="descname">krb5_error_code</code><a class="headerlink" href="#c.krb5_error_code" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Used to convey an operation status.</p>
-<p>The value 0 indicates success; any other values are com_err codes. Use <a class="reference internal" href="../api/krb5_get_error_message.html#c.krb5_get_error_message" title="krb5_get_error_message"><code class="xref c c-func docutils literal"><span class="pre">krb5_get_error_message()</span></code></a> to obtain a string describing the error.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_error_code</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_error_code</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_error.html" title="krb5_error"
- >previous</a> |
- <a href="krb5_expire_callback_func.html" title="krb5_expire_callback_func"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_error_code">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_expire_callback_func — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_flags" href="krb5_flags.html" />
- <link rel="prev" title="krb5_error_code" href="krb5_error_code.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_error_code.html" title="krb5_error_code"
- accesskey="P">previous</a> |
- <a href="krb5_flags.html" title="krb5_flags"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_expire_callback_func">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-expire-callback-func">
-<span id="krb5-expire-callback-func-struct"></span><h1>krb5_expire_callback_func<a class="headerlink" href="#krb5-expire-callback-func" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_expire_callback_func">
-<code class="descname">krb5_expire_callback_func</code><a class="headerlink" href="#c.krb5_expire_callback_func" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef void( * krb5_expire_callback_func) (krb5_context context, void *data, krb5_timestamp password_expiration, krb5_timestamp account_expiration, krb5_boolean is_last_req)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_expire_callback_func</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_error_code.html" title="krb5_error_code"
- >previous</a> |
- <a href="krb5_flags.html" title="krb5_flags"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_expire_callback_func">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_flags — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_get_init_creds_opt" href="krb5_get_init_creds_opt.html" />
- <link rel="prev" title="krb5_expire_callback_func" href="krb5_expire_callback_func.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_expire_callback_func.html" title="krb5_expire_callback_func"
- accesskey="P">previous</a> |
- <a href="krb5_get_init_creds_opt.html" title="krb5_get_init_creds_opt"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_flags">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-flags">
-<span id="krb5-flags-struct"></span><h1>krb5_flags<a class="headerlink" href="#krb5-flags" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_flags">
-<code class="descname">krb5_flags</code><a class="headerlink" href="#c.krb5_flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_flags</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_flags</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_expire_callback_func.html" title="krb5_expire_callback_func"
- >previous</a> |
- <a href="krb5_get_init_creds_opt.html" title="krb5_get_init_creds_opt"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_flags">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_get_init_creds_opt — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_gic_opt_pa_data" href="krb5_gic_opt_pa_data.html" />
- <link rel="prev" title="krb5_flags" href="krb5_flags.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_flags.html" title="krb5_flags"
- accesskey="P">previous</a> |
- <a href="krb5_gic_opt_pa_data.html" title="krb5_gic_opt_pa_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-get-init-creds-opt">
-<span id="krb5-get-init-creds-opt-struct"></span><h1>krb5_get_init_creds_opt<a class="headerlink" href="#krb5-get-init-creds-opt" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_get_init_creds_opt">
-<code class="descname">krb5_get_init_creds_opt</code><a class="headerlink" href="#c.krb5_get_init_creds_opt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Store options for <em>_krb5_get_init_creds</em> .</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_get_init_creds_opt krb5_get_init_creds_opt</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.flags">
-<a class="reference internal" href="krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> <code class="descname">krb5_get_init_creds_opt.flags</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.tkt_life">
-<a class="reference internal" href="krb5_deltat.html#c.krb5_deltat" title="krb5_deltat">krb5_deltat</a> <code class="descname">krb5_get_init_creds_opt.tkt_life</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.tkt_life" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.renew_life">
-<a class="reference internal" href="krb5_deltat.html#c.krb5_deltat" title="krb5_deltat">krb5_deltat</a> <code class="descname">krb5_get_init_creds_opt.renew_life</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.renew_life" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.forwardable">
-int <code class="descname">krb5_get_init_creds_opt.forwardable</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.forwardable" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.proxiable">
-int <code class="descname">krb5_get_init_creds_opt.proxiable</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.proxiable" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.etype_list">
-<a class="reference internal" href="krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> * <code class="descname">krb5_get_init_creds_opt.etype_list</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.etype_list" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.etype_list_length">
-int <code class="descname">krb5_get_init_creds_opt.etype_list_length</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.etype_list_length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.address_list">
-<a class="reference internal" href="krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> ** <code class="descname">krb5_get_init_creds_opt.address_list</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.address_list" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.preauth_list">
-<a class="reference internal" href="krb5_preauthtype.html#c.krb5_preauthtype" title="krb5_preauthtype">krb5_preauthtype</a> * <code class="descname">krb5_get_init_creds_opt.preauth_list</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.preauth_list" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.preauth_list_length">
-int <code class="descname">krb5_get_init_creds_opt.preauth_list_length</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.preauth_list_length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_get_init_creds_opt.salt">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> * <code class="descname">krb5_get_init_creds_opt.salt</code><a class="headerlink" href="#c.krb5_get_init_creds_opt.salt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_get_init_creds_opt</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_flags.html" title="krb5_flags"
- >previous</a> |
- <a href="krb5_gic_opt_pa_data.html" title="krb5_gic_opt_pa_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_get_init_creds_opt">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_gic_opt_pa_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_int16" href="krb5_int16.html" />
- <link rel="prev" title="krb5_get_init_creds_opt" href="krb5_get_init_creds_opt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_get_init_creds_opt.html" title="krb5_get_init_creds_opt"
- accesskey="P">previous</a> |
- <a href="krb5_int16.html" title="krb5_int16"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_gic_opt_pa_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-gic-opt-pa-data">
-<span id="krb5-gic-opt-pa-data-struct"></span><h1>krb5_gic_opt_pa_data<a class="headerlink" href="#krb5-gic-opt-pa-data" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_gic_opt_pa_data">
-<code class="descname">krb5_gic_opt_pa_data</code><a class="headerlink" href="#c.krb5_gic_opt_pa_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Generic preauth option attribute/value pairs.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_gic_opt_pa_data krb5_gic_opt_pa_data</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_gic_opt_pa_data.attr">
-char * <code class="descname">krb5_gic_opt_pa_data.attr</code><a class="headerlink" href="#c.krb5_gic_opt_pa_data.attr" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_gic_opt_pa_data.value">
-char * <code class="descname">krb5_gic_opt_pa_data.value</code><a class="headerlink" href="#c.krb5_gic_opt_pa_data.value" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_gic_opt_pa_data</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_get_init_creds_opt.html" title="krb5_get_init_creds_opt"
- >previous</a> |
- <a href="krb5_int16.html" title="krb5_int16"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_gic_opt_pa_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_init_creds_context — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_key" href="krb5_key.html" />
- <link rel="prev" title="krb5_cccol_cursor" href="krb5_cccol_cursor.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_cccol_cursor.html" title="krb5_cccol_cursor"
- accesskey="P">previous</a> |
- <a href="krb5_key.html" title="krb5_key"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_context">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-init-creds-context">
-<span id="krb5-init-creds-context-struct"></span><h1>krb5_init_creds_context<a class="headerlink" href="#krb5-init-creds-context" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_init_creds_context">
-<code class="descname">krb5_init_creds_context</code><a class="headerlink" href="#c.krb5_init_creds_context" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_init_creds_context* krb5_init_creds_context</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_init_creds_context</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_cccol_cursor.html" title="krb5_cccol_cursor"
- >previous</a> |
- <a href="krb5_key.html" title="krb5_key"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_init_creds_context">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_int16 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_int32" href="krb5_int32.html" />
- <link rel="prev" title="krb5_gic_opt_pa_data" href="krb5_gic_opt_pa_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_gic_opt_pa_data.html" title="krb5_gic_opt_pa_data"
- accesskey="P">previous</a> |
- <a href="krb5_int32.html" title="krb5_int32"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_int16">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-int16">
-<span id="krb5-int16-struct"></span><h1>krb5_int16<a class="headerlink" href="#krb5-int16" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_int16">
-<code class="descname">krb5_int16</code><a class="headerlink" href="#c.krb5_int16" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef int16_t krb5_int16</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_int16</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_gic_opt_pa_data.html" title="krb5_gic_opt_pa_data"
- >previous</a> |
- <a href="krb5_int32.html" title="krb5_int32"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_int16">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_int32 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kdc_rep" href="krb5_kdc_rep.html" />
- <link rel="prev" title="krb5_int16" href="krb5_int16.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_int16.html" title="krb5_int16"
- accesskey="P">previous</a> |
- <a href="krb5_kdc_rep.html" title="krb5_kdc_rep"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_int32">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-int32">
-<span id="krb5-int32-struct"></span><h1>krb5_int32<a class="headerlink" href="#krb5-int32" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_int32">
-<code class="descname">krb5_int32</code><a class="headerlink" href="#c.krb5_int32" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef int32_t krb5_int32</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_int32</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_int16.html" title="krb5_int16"
- >previous</a> |
- <a href="krb5_kdc_rep.html" title="krb5_kdc_rep"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_int32">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kdc_rep — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kdc_req" href="krb5_kdc_req.html" />
- <link rel="prev" title="krb5_int32" href="krb5_int32.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_int32.html" title="krb5_int32"
- accesskey="P">previous</a> |
- <a href="krb5_kdc_req.html" title="krb5_kdc_req"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kdc_rep">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kdc-rep">
-<span id="krb5-kdc-rep-struct"></span><h1>krb5_kdc_rep<a class="headerlink" href="#krb5-kdc-rep" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_kdc_rep">
-<code class="descname">krb5_kdc_rep</code><a class="headerlink" href="#c.krb5_kdc_rep" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Representation of the <em>KDC-REP</em> protocol message.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_kdc_rep krb5_kdc_rep</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_kdc_rep.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_kdc_rep.magic</code><a class="headerlink" href="#c.krb5_kdc_rep.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_rep.msg_type">
-<a class="reference internal" href="krb5_msgtype.html#c.krb5_msgtype" title="krb5_msgtype">krb5_msgtype</a> <code class="descname">krb5_kdc_rep.msg_type</code><a class="headerlink" href="#c.krb5_kdc_rep.msg_type" title="Permalink to this definition">¶</a></dt>
-<dd><p>KRB5_AS_REP or KRB5_KDC_REP.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_rep.padata">
-<a class="reference internal" href="krb5_pa_data.html#c.krb5_pa_data" title="krb5_pa_data">krb5_pa_data</a> ** <code class="descname">krb5_kdc_rep.padata</code><a class="headerlink" href="#c.krb5_kdc_rep.padata" title="Permalink to this definition">¶</a></dt>
-<dd><p>Preauthentication data from KDC.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_rep.client">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_kdc_rep.client</code><a class="headerlink" href="#c.krb5_kdc_rep.client" title="Permalink to this definition">¶</a></dt>
-<dd><p>Client principal and realm.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_rep.ticket">
-<a class="reference internal" href="krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> * <code class="descname">krb5_kdc_rep.ticket</code><a class="headerlink" href="#c.krb5_kdc_rep.ticket" title="Permalink to this definition">¶</a></dt>
-<dd><p>Ticket.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_rep.enc_part">
-<a class="reference internal" href="krb5_enc_data.html#c.krb5_enc_data" title="krb5_enc_data">krb5_enc_data</a> <code class="descname">krb5_kdc_rep.enc_part</code><a class="headerlink" href="#c.krb5_kdc_rep.enc_part" title="Permalink to this definition">¶</a></dt>
-<dd><p>Encrypted part of reply.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_rep.enc_part2">
-<a class="reference internal" href="krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part" title="krb5_enc_kdc_rep_part">krb5_enc_kdc_rep_part</a> * <code class="descname">krb5_kdc_rep.enc_part2</code><a class="headerlink" href="#c.krb5_kdc_rep.enc_part2" title="Permalink to this definition">¶</a></dt>
-<dd><p>Unencrypted version, if available.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kdc_rep</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_int32.html" title="krb5_int32"
- >previous</a> |
- <a href="krb5_kdc_req.html" title="krb5_kdc_req"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kdc_rep">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kdc_req — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_keyblock" href="krb5_keyblock.html" />
- <link rel="prev" title="krb5_kdc_rep" href="krb5_kdc_rep.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kdc_rep.html" title="krb5_kdc_rep"
- accesskey="P">previous</a> |
- <a href="krb5_keyblock.html" title="krb5_keyblock"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kdc_req">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kdc-req">
-<span id="krb5-kdc-req-struct"></span><h1>krb5_kdc_req<a class="headerlink" href="#krb5-kdc-req" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_kdc_req">
-<code class="descname">krb5_kdc_req</code><a class="headerlink" href="#c.krb5_kdc_req" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>C representation of KDC-REQ protocol message, including KDC-REQ-BODY.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_kdc_req krb5_kdc_req</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_kdc_req.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_kdc_req.magic</code><a class="headerlink" href="#c.krb5_kdc_req.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.msg_type">
-<a class="reference internal" href="krb5_msgtype.html#c.krb5_msgtype" title="krb5_msgtype">krb5_msgtype</a> <code class="descname">krb5_kdc_req.msg_type</code><a class="headerlink" href="#c.krb5_kdc_req.msg_type" title="Permalink to this definition">¶</a></dt>
-<dd><p>KRB5_AS_REQ or KRB5_TGS_REQ.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.padata">
-<a class="reference internal" href="krb5_pa_data.html#c.krb5_pa_data" title="krb5_pa_data">krb5_pa_data</a> ** <code class="descname">krb5_kdc_req.padata</code><a class="headerlink" href="#c.krb5_kdc_req.padata" title="Permalink to this definition">¶</a></dt>
-<dd><p>Preauthentication data.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.kdc_options">
-<a class="reference internal" href="krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> <code class="descname">krb5_kdc_req.kdc_options</code><a class="headerlink" href="#c.krb5_kdc_req.kdc_options" title="Permalink to this definition">¶</a></dt>
-<dd><p>Requested options.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.client">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_kdc_req.client</code><a class="headerlink" href="#c.krb5_kdc_req.client" title="Permalink to this definition">¶</a></dt>
-<dd><p>Client principal and realm.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.server">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_kdc_req.server</code><a class="headerlink" href="#c.krb5_kdc_req.server" title="Permalink to this definition">¶</a></dt>
-<dd><p>Server principal and realm.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.from">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_kdc_req.from</code><a class="headerlink" href="#c.krb5_kdc_req.from" title="Permalink to this definition">¶</a></dt>
-<dd><p>Requested start time.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.till">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_kdc_req.till</code><a class="headerlink" href="#c.krb5_kdc_req.till" title="Permalink to this definition">¶</a></dt>
-<dd><p>Requested end time.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.rtime">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_kdc_req.rtime</code><a class="headerlink" href="#c.krb5_kdc_req.rtime" title="Permalink to this definition">¶</a></dt>
-<dd><p>Requested renewable end time.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.nonce">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_kdc_req.nonce</code><a class="headerlink" href="#c.krb5_kdc_req.nonce" title="Permalink to this definition">¶</a></dt>
-<dd><p>Nonce to match request and response.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.nktypes">
-int <code class="descname">krb5_kdc_req.nktypes</code><a class="headerlink" href="#c.krb5_kdc_req.nktypes" title="Permalink to this definition">¶</a></dt>
-<dd><p>Number of enctypes.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.ktype">
-<a class="reference internal" href="krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> * <code class="descname">krb5_kdc_req.ktype</code><a class="headerlink" href="#c.krb5_kdc_req.ktype" title="Permalink to this definition">¶</a></dt>
-<dd><p>Requested enctypes.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.addresses">
-<a class="reference internal" href="krb5_address.html#c.krb5_address" title="krb5_address">krb5_address</a> ** <code class="descname">krb5_kdc_req.addresses</code><a class="headerlink" href="#c.krb5_kdc_req.addresses" title="Permalink to this definition">¶</a></dt>
-<dd><p>Requested addresses (optional)</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.authorization_data">
-<a class="reference internal" href="krb5_enc_data.html#c.krb5_enc_data" title="krb5_enc_data">krb5_enc_data</a> <code class="descname">krb5_kdc_req.authorization_data</code><a class="headerlink" href="#c.krb5_kdc_req.authorization_data" title="Permalink to this definition">¶</a></dt>
-<dd><p>Encrypted authz data (optional)</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.unenc_authdata">
-<a class="reference internal" href="krb5_authdata.html#c.krb5_authdata" title="krb5_authdata">krb5_authdata</a> ** <code class="descname">krb5_kdc_req.unenc_authdata</code><a class="headerlink" href="#c.krb5_kdc_req.unenc_authdata" title="Permalink to this definition">¶</a></dt>
-<dd><p>Unencrypted authz data.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_kdc_req.second_ticket">
-<a class="reference internal" href="krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> ** <code class="descname">krb5_kdc_req.second_ticket</code><a class="headerlink" href="#c.krb5_kdc_req.second_ticket" title="Permalink to this definition">¶</a></dt>
-<dd><p>Second ticket array (optional)</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kdc_req</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kdc_rep.html" title="krb5_kdc_rep"
- >previous</a> |
- <a href="krb5_keyblock.html" title="krb5_keyblock"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kdc_req">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_key — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_keytab" href="krb5_keytab.html" />
- <link rel="prev" title="krb5_init_creds_context" href="krb5_init_creds_context.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_init_creds_context.html" title="krb5_init_creds_context"
- accesskey="P">previous</a> |
- <a href="krb5_keytab.html" title="krb5_keytab"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_key">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-key">
-<span id="krb5-key-struct"></span><h1>krb5_key<a class="headerlink" href="#krb5-key" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_key">
-<code class="descname">krb5_key</code><a class="headerlink" href="#c.krb5_key" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Opaque identifier for a key.</p>
-<p>Use with the krb5_k APIs for better performance for repeated operations with the same key and usage. Key identifiers must not be used simultaneously within multiple threads, as they may contain mutable internal state and are not mutex-protected.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct krb5_key_st* krb5_key</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_key</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_init_creds_context.html" title="krb5_init_creds_context"
- >previous</a> |
- <a href="krb5_keytab.html" title="krb5_keytab"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_key">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_keyblock — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_keytab_entry" href="krb5_keytab_entry.html" />
- <link rel="prev" title="krb5_kdc_req" href="krb5_kdc_req.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kdc_req.html" title="krb5_kdc_req"
- accesskey="P">previous</a> |
- <a href="krb5_keytab_entry.html" title="krb5_keytab_entry"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_keyblock">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyblock">
-<span id="krb5-keyblock-struct"></span><h1>krb5_keyblock<a class="headerlink" href="#krb5-keyblock" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_keyblock">
-<code class="descname">krb5_keyblock</code><a class="headerlink" href="#c.krb5_keyblock" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Exposed contents of a key.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_keyblock krb5_keyblock</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_keyblock.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_keyblock.magic</code><a class="headerlink" href="#c.krb5_keyblock.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_keyblock.enctype">
-<a class="reference internal" href="krb5_enctype.html#c.krb5_enctype" title="krb5_enctype">krb5_enctype</a> <code class="descname">krb5_keyblock.enctype</code><a class="headerlink" href="#c.krb5_keyblock.enctype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_keyblock.length">
-unsigned int <code class="descname">krb5_keyblock.length</code><a class="headerlink" href="#c.krb5_keyblock.length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_keyblock.contents">
-<a class="reference internal" href="krb5_octet.html#c.krb5_octet" title="krb5_octet">krb5_octet</a> * <code class="descname">krb5_keyblock.contents</code><a class="headerlink" href="#c.krb5_keyblock.contents" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_keyblock</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kdc_req.html" title="krb5_kdc_req"
- >previous</a> |
- <a href="krb5_keytab_entry.html" title="krb5_keytab_entry"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_keyblock">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_keytab — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pac" href="krb5_pac.html" />
- <link rel="prev" title="krb5_key" href="krb5_key.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_key.html" title="krb5_key"
- accesskey="P">previous</a> |
- <a href="krb5_pac.html" title="krb5_pac"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_keytab">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keytab">
-<span id="krb5-keytab-struct"></span><h1>krb5_keytab<a class="headerlink" href="#krb5-keytab" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_keytab">
-<code class="descname">krb5_keytab</code><a class="headerlink" href="#c.krb5_keytab" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_kt* krb5_keytab</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_keytab</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_key.html" title="krb5_key"
- >previous</a> |
- <a href="krb5_pac.html" title="krb5_pac"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_keytab">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_keytab_entry — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_keyusage" href="krb5_keyusage.html" />
- <link rel="prev" title="krb5_keyblock" href="krb5_keyblock.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_keyblock.html" title="krb5_keyblock"
- accesskey="P">previous</a> |
- <a href="krb5_keyusage.html" title="krb5_keyusage"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_keytab_entry">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keytab-entry">
-<span id="krb5-keytab-entry-struct"></span><h1>krb5_keytab_entry<a class="headerlink" href="#krb5-keytab-entry" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_keytab_entry">
-<code class="descname">krb5_keytab_entry</code><a class="headerlink" href="#c.krb5_keytab_entry" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>A key table entry.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct krb5_keytab_entry_st krb5_keytab_entry</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_keytab_entry.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_keytab_entry.magic</code><a class="headerlink" href="#c.krb5_keytab_entry.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_keytab_entry.principal">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_keytab_entry.principal</code><a class="headerlink" href="#c.krb5_keytab_entry.principal" title="Permalink to this definition">¶</a></dt>
-<dd><p>Principal of this key.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_keytab_entry.timestamp">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_keytab_entry.timestamp</code><a class="headerlink" href="#c.krb5_keytab_entry.timestamp" title="Permalink to this definition">¶</a></dt>
-<dd><p>Time entry written to keytable.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_keytab_entry.vno">
-<a class="reference internal" href="krb5_kvno.html#c.krb5_kvno" title="krb5_kvno">krb5_kvno</a> <code class="descname">krb5_keytab_entry.vno</code><a class="headerlink" href="#c.krb5_keytab_entry.vno" title="Permalink to this definition">¶</a></dt>
-<dd><p>Key version number.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_keytab_entry.key">
-<a class="reference internal" href="krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> <code class="descname">krb5_keytab_entry.key</code><a class="headerlink" href="#c.krb5_keytab_entry.key" title="Permalink to this definition">¶</a></dt>
-<dd><p>The secret key.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_keytab_entry</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_keyblock.html" title="krb5_keyblock"
- >previous</a> |
- <a href="krb5_keyusage.html" title="krb5_keyusage"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_keytab_entry">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_keyusage — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kt_cursor" href="krb5_kt_cursor.html" />
- <link rel="prev" title="krb5_keytab_entry" href="krb5_keytab_entry.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_keytab_entry.html" title="krb5_keytab_entry"
- accesskey="P">previous</a> |
- <a href="krb5_kt_cursor.html" title="krb5_kt_cursor"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_keyusage">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-keyusage">
-<span id="krb5-keyusage-struct"></span><h1>krb5_keyusage<a class="headerlink" href="#krb5-keyusage" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_keyusage">
-<code class="descname">krb5_keyusage</code><a class="headerlink" href="#c.krb5_keyusage" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_keyusage</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_keyusage</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_keytab_entry.html" title="krb5_keytab_entry"
- >previous</a> |
- <a href="krb5_kt_cursor.html" title="krb5_kt_cursor"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_keyusage">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kt_cursor — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_kvno" href="krb5_kvno.html" />
- <link rel="prev" title="krb5_keyusage" href="krb5_keyusage.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_keyusage.html" title="krb5_keyusage"
- accesskey="P">previous</a> |
- <a href="krb5_kvno.html" title="krb5_kvno"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_cursor">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kt-cursor">
-<span id="krb5-kt-cursor-struct"></span><h1>krb5_kt_cursor<a class="headerlink" href="#krb5-kt-cursor" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_kt_cursor">
-<code class="descname">krb5_kt_cursor</code><a class="headerlink" href="#c.krb5_kt_cursor" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_pointer krb5_kt_cursor</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kt_cursor</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_keyusage.html" title="krb5_keyusage"
- >previous</a> |
- <a href="krb5_kvno.html" title="krb5_kvno"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kt_cursor">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_kvno — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_last_req_entry" href="krb5_last_req_entry.html" />
- <link rel="prev" title="krb5_kt_cursor" href="krb5_kt_cursor.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kt_cursor.html" title="krb5_kt_cursor"
- accesskey="P">previous</a> |
- <a href="krb5_last_req_entry.html" title="krb5_last_req_entry"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kvno">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-kvno">
-<span id="krb5-kvno-struct"></span><h1>krb5_kvno<a class="headerlink" href="#krb5-kvno" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_kvno">
-<code class="descname">krb5_kvno</code><a class="headerlink" href="#c.krb5_kvno" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef unsigned int krb5_kvno</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_kvno</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kt_cursor.html" title="krb5_kt_cursor"
- >previous</a> |
- <a href="krb5_last_req_entry.html" title="krb5_last_req_entry"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_kvno">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_last_req_entry — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_magic" href="krb5_magic.html" />
- <link rel="prev" title="krb5_kvno" href="krb5_kvno.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_kvno.html" title="krb5_kvno"
- accesskey="P">previous</a> |
- <a href="krb5_magic.html" title="krb5_magic"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_last_req_entry">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-last-req-entry">
-<span id="krb5-last-req-entry-struct"></span><h1>krb5_last_req_entry<a class="headerlink" href="#krb5-last-req-entry" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_last_req_entry">
-<code class="descname">krb5_last_req_entry</code><a class="headerlink" href="#c.krb5_last_req_entry" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Last request entry.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_last_req_entry krb5_last_req_entry</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_last_req_entry.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_last_req_entry.magic</code><a class="headerlink" href="#c.krb5_last_req_entry.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_last_req_entry.lr_type">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_last_req_entry.lr_type</code><a class="headerlink" href="#c.krb5_last_req_entry.lr_type" title="Permalink to this definition">¶</a></dt>
-<dd><p>LR type.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_last_req_entry.value">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_last_req_entry.value</code><a class="headerlink" href="#c.krb5_last_req_entry.value" title="Permalink to this definition">¶</a></dt>
-<dd><p>Timestamp.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_last_req_entry</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_kvno.html" title="krb5_kvno"
- >previous</a> |
- <a href="krb5_magic.html" title="krb5_magic"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_last_req_entry">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_magic — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_mk_req_checksum_func" href="krb5_mk_req_checksum_func.html" />
- <link rel="prev" title="krb5_last_req_entry" href="krb5_last_req_entry.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_last_req_entry.html" title="krb5_last_req_entry"
- accesskey="P">previous</a> |
- <a href="krb5_mk_req_checksum_func.html" title="krb5_mk_req_checksum_func"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_magic">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-magic">
-<span id="krb5-magic-struct"></span><h1>krb5_magic<a class="headerlink" href="#krb5-magic" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_magic">
-<code class="descname">krb5_magic</code><a class="headerlink" href="#c.krb5_magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_error_code krb5_magic</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_magic</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_last_req_entry.html" title="krb5_last_req_entry"
- >previous</a> |
- <a href="krb5_mk_req_checksum_func.html" title="krb5_mk_req_checksum_func"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_magic">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_mk_req_checksum_func — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_msgtype" href="krb5_msgtype.html" />
- <link rel="prev" title="krb5_magic" href="krb5_magic.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_magic.html" title="krb5_magic"
- accesskey="P">previous</a> |
- <a href="krb5_msgtype.html" title="krb5_msgtype"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_req_checksum_func">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-mk-req-checksum-func">
-<span id="krb5-mk-req-checksum-func-struct"></span><h1>krb5_mk_req_checksum_func<a class="headerlink" href="#krb5-mk-req-checksum-func" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_mk_req_checksum_func">
-<code class="descname">krb5_mk_req_checksum_func</code><a class="headerlink" href="#c.krb5_mk_req_checksum_func" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Type of function used as a callback to generate checksum data for mk_req.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_error_code( * krb5_mk_req_checksum_func) (krb5_context, krb5_auth_context, void *, krb5_data **)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_mk_req_checksum_func</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_magic.html" title="krb5_magic"
- >previous</a> |
- <a href="krb5_msgtype.html" title="krb5_msgtype"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_mk_req_checksum_func">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_msgtype — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_octet" href="krb5_octet.html" />
- <link rel="prev" title="krb5_mk_req_checksum_func" href="krb5_mk_req_checksum_func.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_mk_req_checksum_func.html" title="krb5_mk_req_checksum_func"
- accesskey="P">previous</a> |
- <a href="krb5_octet.html" title="krb5_octet"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_msgtype">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-msgtype">
-<span id="krb5-msgtype-struct"></span><h1>krb5_msgtype<a class="headerlink" href="#krb5-msgtype" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_msgtype">
-<code class="descname">krb5_msgtype</code><a class="headerlink" href="#c.krb5_msgtype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef unsigned int krb5_msgtype</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_msgtype</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_mk_req_checksum_func.html" title="krb5_mk_req_checksum_func"
- >previous</a> |
- <a href="krb5_octet.html" title="krb5_octet"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_msgtype">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_octet — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pa_pac_req" href="krb5_pa_pac_req.html" />
- <link rel="prev" title="krb5_msgtype" href="krb5_msgtype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_msgtype.html" title="krb5_msgtype"
- accesskey="P">previous</a> |
- <a href="krb5_pa_pac_req.html" title="krb5_pa_pac_req"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_octet">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-octet">
-<span id="krb5-octet-struct"></span><h1>krb5_octet<a class="headerlink" href="#krb5-octet" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_octet">
-<code class="descname">krb5_octet</code><a class="headerlink" href="#c.krb5_octet" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef uint8_t krb5_octet</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_octet</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_msgtype.html" title="krb5_msgtype"
- >previous</a> |
- <a href="krb5_pa_pac_req.html" title="krb5_pa_pac_req"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_octet">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pa_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pointer" href="krb5_pointer.html" />
- <link rel="prev" title="krb5_pa_svr_referral_data" href="krb5_pa_svr_referral_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pa_svr_referral_data.html" title="krb5_pa_svr_referral_data"
- accesskey="P">previous</a> |
- <a href="krb5_pointer.html" title="krb5_pointer"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pa_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pa-data">
-<span id="krb5-pa-data-struct"></span><h1>krb5_pa_data<a class="headerlink" href="#krb5-pa-data" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_pa_data">
-<code class="descname">krb5_pa_data</code><a class="headerlink" href="#c.krb5_pa_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Pre-authentication data.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_pa_data krb5_pa_data</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_pa_data.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_pa_data.magic</code><a class="headerlink" href="#c.krb5_pa_data.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_pa_data.pa_type">
-<a class="reference internal" href="krb5_preauthtype.html#c.krb5_preauthtype" title="krb5_preauthtype">krb5_preauthtype</a> <code class="descname">krb5_pa_data.pa_type</code><a class="headerlink" href="#c.krb5_pa_data.pa_type" title="Permalink to this definition">¶</a></dt>
-<dd><p>Preauthentication data type.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_pa_data.length">
-unsigned int <code class="descname">krb5_pa_data.length</code><a class="headerlink" href="#c.krb5_pa_data.length" title="Permalink to this definition">¶</a></dt>
-<dd><p>Length of data.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_pa_data.contents">
-<a class="reference internal" href="krb5_octet.html#c.krb5_octet" title="krb5_octet">krb5_octet</a> * <code class="descname">krb5_pa_data.contents</code><a class="headerlink" href="#c.krb5_pa_data.contents" title="Permalink to this definition">¶</a></dt>
-<dd><p>Data.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pa_data</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pa_svr_referral_data.html" title="krb5_pa_svr_referral_data"
- >previous</a> |
- <a href="krb5_pointer.html" title="krb5_pointer"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pa_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pa_pac_req — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pa_server_referral_data" href="krb5_pa_server_referral_data.html" />
- <link rel="prev" title="krb5_octet" href="krb5_octet.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_octet.html" title="krb5_octet"
- accesskey="P">previous</a> |
- <a href="krb5_pa_server_referral_data.html" title="krb5_pa_server_referral_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pa_pac_req">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pa-pac-req">
-<span id="krb5-pa-pac-req-struct"></span><h1>krb5_pa_pac_req<a class="headerlink" href="#krb5-pa-pac-req" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_pa_pac_req">
-<code class="descname">krb5_pa_pac_req</code><a class="headerlink" href="#c.krb5_pa_pac_req" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_pa_pac_req krb5_pa_pac_req</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_pa_pac_req.include_pac">
-<a class="reference internal" href="krb5_boolean.html#c.krb5_boolean" title="krb5_boolean">krb5_boolean</a> <code class="descname">krb5_pa_pac_req.include_pac</code><a class="headerlink" href="#c.krb5_pa_pac_req.include_pac" title="Permalink to this definition">¶</a></dt>
-<dd><p>TRUE if a PAC should be included in TGS-REP.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pa_pac_req</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_octet.html" title="krb5_octet"
- >previous</a> |
- <a href="krb5_pa_server_referral_data.html" title="krb5_pa_server_referral_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pa_pac_req">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pa_server_referral_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pa_svr_referral_data" href="krb5_pa_svr_referral_data.html" />
- <link rel="prev" title="krb5_pa_pac_req" href="krb5_pa_pac_req.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pa_pac_req.html" title="krb5_pa_pac_req"
- accesskey="P">previous</a> |
- <a href="krb5_pa_svr_referral_data.html" title="krb5_pa_svr_referral_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pa_server_referral_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pa-server-referral-data">
-<span id="krb5-pa-server-referral-data-struct"></span><h1>krb5_pa_server_referral_data<a class="headerlink" href="#krb5-pa-server-referral-data" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_pa_server_referral_data">
-<code class="descname">krb5_pa_server_referral_data</code><a class="headerlink" href="#c.krb5_pa_server_referral_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_pa_server_referral_data krb5_pa_server_referral_data</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_pa_server_referral_data.referred_realm">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> * <code class="descname">krb5_pa_server_referral_data.referred_realm</code><a class="headerlink" href="#c.krb5_pa_server_referral_data.referred_realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_pa_server_referral_data.true_principal_name">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_pa_server_referral_data.true_principal_name</code><a class="headerlink" href="#c.krb5_pa_server_referral_data.true_principal_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_pa_server_referral_data.requested_principal_name">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_pa_server_referral_data.requested_principal_name</code><a class="headerlink" href="#c.krb5_pa_server_referral_data.requested_principal_name" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_pa_server_referral_data.referral_valid_until">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_pa_server_referral_data.referral_valid_until</code><a class="headerlink" href="#c.krb5_pa_server_referral_data.referral_valid_until" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_pa_server_referral_data.rep_cksum">
-<a class="reference internal" href="krb5_checksum.html#c.krb5_checksum" title="krb5_checksum">krb5_checksum</a> <code class="descname">krb5_pa_server_referral_data.rep_cksum</code><a class="headerlink" href="#c.krb5_pa_server_referral_data.rep_cksum" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pa_server_referral_data</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pa_pac_req.html" title="krb5_pa_pac_req"
- >previous</a> |
- <a href="krb5_pa_svr_referral_data.html" title="krb5_pa_svr_referral_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pa_server_referral_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pa_svr_referral_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pa_data" href="krb5_pa_data.html" />
- <link rel="prev" title="krb5_pa_server_referral_data" href="krb5_pa_server_referral_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pa_server_referral_data.html" title="krb5_pa_server_referral_data"
- accesskey="P">previous</a> |
- <a href="krb5_pa_data.html" title="krb5_pa_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pa_svr_referral_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pa-svr-referral-data">
-<span id="krb5-pa-svr-referral-data-struct"></span><h1>krb5_pa_svr_referral_data<a class="headerlink" href="#krb5-pa-svr-referral-data" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_pa_svr_referral_data">
-<code class="descname">krb5_pa_svr_referral_data</code><a class="headerlink" href="#c.krb5_pa_svr_referral_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_pa_svr_referral_data krb5_pa_svr_referral_data</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_pa_svr_referral_data.principal">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_pa_svr_referral_data.principal</code><a class="headerlink" href="#c.krb5_pa_svr_referral_data.principal" title="Permalink to this definition">¶</a></dt>
-<dd><p>Referred name, only realm is required.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pa_svr_referral_data</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pa_server_referral_data.html" title="krb5_pa_server_referral_data"
- >previous</a> |
- <a href="krb5_pa_data.html" title="krb5_pa_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pa_svr_referral_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pac — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_rcache" href="krb5_rcache.html" />
- <link rel="prev" title="krb5_keytab" href="krb5_keytab.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_keytab.html" title="krb5_keytab"
- accesskey="P">previous</a> |
- <a href="krb5_rcache.html" title="krb5_rcache"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pac">
-<span id="krb5-pac-struct"></span><h1>krb5_pac<a class="headerlink" href="#krb5-pac" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_pac">
-<code class="descname">krb5_pac</code><a class="headerlink" href="#c.krb5_pac" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>PAC data structure to convey authorization information.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct krb5_pac_data* krb5_pac</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pac</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_keytab.html" title="krb5_keytab"
- >previous</a> |
- <a href="krb5_rcache.html" title="krb5_rcache"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pac">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pointer — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_post_recv_fn" href="krb5_post_recv_fn.html" />
- <link rel="prev" title="krb5_pa_data" href="krb5_pa_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pa_data.html" title="krb5_pa_data"
- accesskey="P">previous</a> |
- <a href="krb5_post_recv_fn.html" title="krb5_post_recv_fn"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pointer">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pointer">
-<span id="krb5-pointer-struct"></span><h1>krb5_pointer<a class="headerlink" href="#krb5-pointer" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_pointer">
-<code class="descname">krb5_pointer</code><a class="headerlink" href="#c.krb5_pointer" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef void* krb5_pointer</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pointer</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pa_data.html" title="krb5_pa_data"
- >previous</a> |
- <a href="krb5_post_recv_fn.html" title="krb5_post_recv_fn"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pointer">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_post_recv_fn — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pre_send_fn" href="krb5_pre_send_fn.html" />
- <link rel="prev" title="krb5_pointer" href="krb5_pointer.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pointer.html" title="krb5_pointer"
- accesskey="P">previous</a> |
- <a href="krb5_pre_send_fn.html" title="krb5_pre_send_fn"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_post_recv_fn">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-post-recv-fn">
-<span id="krb5-post-recv-fn-struct"></span><h1>krb5_post_recv_fn<a class="headerlink" href="#krb5-post-recv-fn" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_post_recv_fn">
-<code class="descname">krb5_post_recv_fn</code><a class="headerlink" href="#c.krb5_post_recv_fn" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Hook function for inspecting or overriding KDC replies.</p>
-<p>If <em>code</em> is non-zero, KDC communication failed and <em>reply</em> should be ignored. The hook function may return <em>code</em> or a different error code, or may synthesize a reply by setting <em>new_reply_out</em> and return successfully.
-The hook function should use <a class="reference internal" href="../api/krb5_copy_data.html#c.krb5_copy_data" title="krb5_copy_data"><code class="xref c c-func docutils literal"><span class="pre">krb5_copy_data()</span></code></a> to construct the value for <em>new_reply_out</em> , to ensure that it can be freed correctly by the library.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_error_code( * krb5_post_recv_fn) (krb5_context context, void *data, krb5_error_code code, const krb5_data *realm, const krb5_data *message, const krb5_data *reply, krb5_data **new_reply_out)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_post_recv_fn</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pointer.html" title="krb5_pointer"
- >previous</a> |
- <a href="krb5_pre_send_fn.html" title="krb5_pre_send_fn"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_post_recv_fn">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pre_send_fn — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_preauthtype" href="krb5_preauthtype.html" />
- <link rel="prev" title="krb5_post_recv_fn" href="krb5_post_recv_fn.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_post_recv_fn.html" title="krb5_post_recv_fn"
- accesskey="P">previous</a> |
- <a href="krb5_preauthtype.html" title="krb5_preauthtype"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pre_send_fn">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pre-send-fn">
-<span id="krb5-pre-send-fn-struct"></span><h1>krb5_pre_send_fn<a class="headerlink" href="#krb5-pre-send-fn" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_pre_send_fn">
-<code class="descname">krb5_pre_send_fn</code><a class="headerlink" href="#c.krb5_pre_send_fn" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Hook function for inspecting or modifying messages sent to KDCs.</p>
-<p>If the hook function sets <em>new_reply_out</em> , <em>message</em> will not be sent to the KDC, and the given reply will used instead.
-If the hook function sets <em>new_message_out</em> , the given message will be sent to the KDC in place of <em>message</em> .
-If the hook function returns successfully without setting either output, <em>message</em> will be sent to the KDC normally.
-The hook function should use <a class="reference internal" href="../api/krb5_copy_data.html#c.krb5_copy_data" title="krb5_copy_data"><code class="xref c c-func docutils literal"><span class="pre">krb5_copy_data()</span></code></a> to construct the value for <em>new_message_out</em> or <em>reply_out</em> , to ensure that it can be freed correctly by the library.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_error_code( * krb5_pre_send_fn) (krb5_context context, void *data, const krb5_data *realm, const krb5_data *message, krb5_data **new_message_out, krb5_data **new_reply_out)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pre_send_fn</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_post_recv_fn.html" title="krb5_post_recv_fn"
- >previous</a> |
- <a href="krb5_preauthtype.html" title="krb5_preauthtype"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pre_send_fn">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_preauthtype — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_principal" href="krb5_principal.html" />
- <link rel="prev" title="krb5_pre_send_fn" href="krb5_pre_send_fn.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pre_send_fn.html" title="krb5_pre_send_fn"
- accesskey="P">previous</a> |
- <a href="krb5_principal.html" title="krb5_principal"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_preauthtype">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-preauthtype">
-<span id="krb5-preauthtype-struct"></span><h1>krb5_preauthtype<a class="headerlink" href="#krb5-preauthtype" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_preauthtype">
-<code class="descname">krb5_preauthtype</code><a class="headerlink" href="#c.krb5_preauthtype" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_preauthtype</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_preauthtype</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pre_send_fn.html" title="krb5_pre_send_fn"
- >previous</a> |
- <a href="krb5_principal.html" title="krb5_principal"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_preauthtype">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_principal — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_principal_data" href="krb5_principal_data.html" />
- <link rel="prev" title="krb5_preauthtype" href="krb5_preauthtype.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_preauthtype.html" title="krb5_preauthtype"
- accesskey="P">previous</a> |
- <a href="krb5_principal_data.html" title="krb5_principal_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal">
-<span id="krb5-principal-struct"></span><h1>krb5_principal<a class="headerlink" href="#krb5-principal" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_principal">
-<code class="descname">krb5_principal</code><a class="headerlink" href="#c.krb5_principal" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_principal_data* krb5_principal</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_principal.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_principal.magic</code><a class="headerlink" href="#c.krb5_principal.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_principal.realm">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_principal.realm</code><a class="headerlink" href="#c.krb5_principal.realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_principal.data">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> * <code class="descname">krb5_principal.data</code><a class="headerlink" href="#c.krb5_principal.data" title="Permalink to this definition">¶</a></dt>
-<dd><p>An array of strings.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_principal.length">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_principal.length</code><a class="headerlink" href="#c.krb5_principal.length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_principal.type">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_principal.type</code><a class="headerlink" href="#c.krb5_principal.type" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_principal</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_preauthtype.html" title="krb5_preauthtype"
- >previous</a> |
- <a href="krb5_principal_data.html" title="krb5_principal_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_principal_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_prompt" href="krb5_prompt.html" />
- <link rel="prev" title="krb5_principal" href="krb5_principal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_principal.html" title="krb5_principal"
- accesskey="P">previous</a> |
- <a href="krb5_prompt.html" title="krb5_prompt"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-principal-data">
-<span id="krb5-principal-data-struct"></span><h1>krb5_principal_data<a class="headerlink" href="#krb5-principal-data" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_principal_data">
-<code class="descname">krb5_principal_data</code><a class="headerlink" href="#c.krb5_principal_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct krb5_principal_data krb5_principal_data</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_principal_data.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_principal_data.magic</code><a class="headerlink" href="#c.krb5_principal_data.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_principal_data.realm">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_principal_data.realm</code><a class="headerlink" href="#c.krb5_principal_data.realm" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_principal_data.data">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> * <code class="descname">krb5_principal_data.data</code><a class="headerlink" href="#c.krb5_principal_data.data" title="Permalink to this definition">¶</a></dt>
-<dd><p>An array of strings.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_principal_data.length">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_principal_data.length</code><a class="headerlink" href="#c.krb5_principal_data.length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_principal_data.type">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_principal_data.type</code><a class="headerlink" href="#c.krb5_principal_data.type" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_principal_data</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_principal.html" title="krb5_principal"
- >previous</a> |
- <a href="krb5_prompt.html" title="krb5_prompt"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_principal_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_prompt — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_prompt_type" href="krb5_prompt_type.html" />
- <link rel="prev" title="krb5_principal_data" href="krb5_principal_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_principal_data.html" title="krb5_principal_data"
- accesskey="P">previous</a> |
- <a href="krb5_prompt_type.html" title="krb5_prompt_type"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_prompt">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-prompt">
-<span id="krb5-prompt-struct"></span><h1>krb5_prompt<a class="headerlink" href="#krb5-prompt" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_prompt">
-<code class="descname">krb5_prompt</code><a class="headerlink" href="#c.krb5_prompt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Text for prompt used in prompter callback function.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_prompt krb5_prompt</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_prompt.prompt">
-char * <code class="descname">krb5_prompt.prompt</code><a class="headerlink" href="#c.krb5_prompt.prompt" title="Permalink to this definition">¶</a></dt>
-<dd><p>The prompt to show to the user.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_prompt.hidden">
-int <code class="descname">krb5_prompt.hidden</code><a class="headerlink" href="#c.krb5_prompt.hidden" title="Permalink to this definition">¶</a></dt>
-<dd><p>Boolean; informative prompt or hidden (e.g.
-PIN)</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_prompt.reply">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> * <code class="descname">krb5_prompt.reply</code><a class="headerlink" href="#c.krb5_prompt.reply" title="Permalink to this definition">¶</a></dt>
-<dd><p>Must be allocated before call to prompt routine.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_prompt</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_principal_data.html" title="krb5_principal_data"
- >previous</a> |
- <a href="krb5_prompt_type.html" title="krb5_prompt_type"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_prompt">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_prompt_type — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_prompter_fct" href="krb5_prompter_fct.html" />
- <link rel="prev" title="krb5_prompt" href="krb5_prompt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_prompt.html" title="krb5_prompt"
- accesskey="P">previous</a> |
- <a href="krb5_prompter_fct.html" title="krb5_prompter_fct"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_prompt_type">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-prompt-type">
-<span id="krb5-prompt-type-struct"></span><h1>krb5_prompt_type<a class="headerlink" href="#krb5-prompt-type" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_prompt_type">
-<code class="descname">krb5_prompt_type</code><a class="headerlink" href="#c.krb5_prompt_type" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_prompt_type</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_prompt_type</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_prompt.html" title="krb5_prompt"
- >previous</a> |
- <a href="krb5_prompter_fct.html" title="krb5_prompter_fct"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_prompt_type">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_prompter_fct — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_pwd_data" href="krb5_pwd_data.html" />
- <link rel="prev" title="krb5_prompt_type" href="krb5_prompt_type.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_prompt_type.html" title="krb5_prompt_type"
- accesskey="P">previous</a> |
- <a href="krb5_pwd_data.html" title="krb5_pwd_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_prompter_fct">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-prompter-fct">
-<span id="krb5-prompter-fct-struct"></span><h1>krb5_prompter_fct<a class="headerlink" href="#krb5-prompter-fct" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_prompter_fct">
-<code class="descname">krb5_prompter_fct</code><a class="headerlink" href="#c.krb5_prompter_fct" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Pointer to a prompter callback function.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_error_code( * krb5_prompter_fct) (krb5_context context, void *data, const char *name, const char *banner, int num_prompts, krb5_prompt prompts[])</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_prompter_fct</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_prompt_type.html" title="krb5_prompt_type"
- >previous</a> |
- <a href="krb5_pwd_data.html" title="krb5_pwd_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_prompter_fct">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_pwd_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_context" href="krb5_responder_context.html" />
- <link rel="prev" title="krb5_prompter_fct" href="krb5_prompter_fct.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_prompter_fct.html" title="krb5_prompter_fct"
- accesskey="P">previous</a> |
- <a href="krb5_responder_context.html" title="krb5_responder_context"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pwd_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-pwd-data">
-<span id="krb5-pwd-data-struct"></span><h1>krb5_pwd_data<a class="headerlink" href="#krb5-pwd-data" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_pwd_data">
-<code class="descname">krb5_pwd_data</code><a class="headerlink" href="#c.krb5_pwd_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_pwd_data krb5_pwd_data</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_pwd_data.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_pwd_data.magic</code><a class="headerlink" href="#c.krb5_pwd_data.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_pwd_data.sequence_count">
-int <code class="descname">krb5_pwd_data.sequence_count</code><a class="headerlink" href="#c.krb5_pwd_data.sequence_count" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_pwd_data.element">
-<a class="reference internal" href="passwd_phrase_element.html#c.passwd_phrase_element" title="passwd_phrase_element">passwd_phrase_element</a> ** <code class="descname">krb5_pwd_data.element</code><a class="headerlink" href="#c.krb5_pwd_data.element" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_pwd_data</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_prompter_fct.html" title="krb5_prompter_fct"
- >previous</a> |
- <a href="krb5_responder_context.html" title="krb5_responder_context"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_pwd_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_rcache — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_tkt_creds_context" href="krb5_tkt_creds_context.html" />
- <link rel="prev" title="krb5_pac" href="krb5_pac.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pac.html" title="krb5_pac"
- accesskey="P">previous</a> |
- <a href="krb5_tkt_creds_context.html" title="krb5_tkt_creds_context"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rcache">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-rcache">
-<span id="krb5-rcache-struct"></span><h1>krb5_rcache<a class="headerlink" href="#krb5-rcache" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_rcache">
-<code class="descname">krb5_rcache</code><a class="headerlink" href="#c.krb5_rcache" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct krb5_rc_st* krb5_rcache</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_rcache</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pac.html" title="krb5_pac"
- >previous</a> |
- <a href="krb5_tkt_creds_context.html" title="krb5_tkt_creds_context"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_rcache">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_replay_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_ticket" href="krb5_ticket.html" />
- <link rel="prev" title="krb5_response" href="krb5_response.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_response.html" title="krb5_response"
- accesskey="P">previous</a> |
- <a href="krb5_ticket.html" title="krb5_ticket"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_replay_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-replay-data">
-<span id="krb5-replay-data-struct"></span><h1>krb5_replay_data<a class="headerlink" href="#krb5-replay-data" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_replay_data">
-<code class="descname">krb5_replay_data</code><a class="headerlink" href="#c.krb5_replay_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Replay data.</p>
-<p>Sequence number and timestamp information output by <a class="reference internal" href="../api/krb5_rd_priv.html#c.krb5_rd_priv" title="krb5_rd_priv"><code class="xref c c-func docutils literal"><span class="pre">krb5_rd_priv()</span></code></a> and <a class="reference internal" href="../api/krb5_rd_safe.html#c.krb5_rd_safe" title="krb5_rd_safe"><code class="xref c c-func docutils literal"><span class="pre">krb5_rd_safe()</span></code></a> .</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct krb5_replay_data krb5_replay_data</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_replay_data.timestamp">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_replay_data.timestamp</code><a class="headerlink" href="#c.krb5_replay_data.timestamp" title="Permalink to this definition">¶</a></dt>
-<dd><p>Timestamp, seconds portion.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_replay_data.usec">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_replay_data.usec</code><a class="headerlink" href="#c.krb5_replay_data.usec" title="Permalink to this definition">¶</a></dt>
-<dd><p>Timestamp, microseconds portion.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_replay_data.seq">
-<a class="reference internal" href="krb5_ui_4.html#c.krb5_ui_4" title="krb5_ui_4">krb5_ui_4</a> <code class="descname">krb5_replay_data.seq</code><a class="headerlink" href="#c.krb5_replay_data.seq" title="Permalink to this definition">¶</a></dt>
-<dd><p>Sequence number.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_replay_data</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_response.html" title="krb5_response"
- >previous</a> |
- <a href="krb5_ticket.html" title="krb5_ticket"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_replay_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_context — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_fn" href="krb5_responder_fn.html" />
- <link rel="prev" title="krb5_pwd_data" href="krb5_pwd_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_pwd_data.html" title="krb5_pwd_data"
- accesskey="P">previous</a> |
- <a href="krb5_responder_fn.html" title="krb5_responder_fn"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_context">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-context">
-<span id="krb5-responder-context-struct"></span><h1>krb5_responder_context<a class="headerlink" href="#krb5-responder-context" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_responder_context">
-<code class="descname">krb5_responder_context</code><a class="headerlink" href="#c.krb5_responder_context" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>A container for a set of preauthentication questions and answers.</p>
-<p>A responder context is supplied by the krb5 authentication system to a <a class="reference internal" href="krb5_responder_fn.html#c.krb5_responder_fn" title="krb5_responder_fn"><code class="xref c c-type docutils literal"><span class="pre">krb5_responder_fn</span></code></a> callback. It contains a list of questions and can receive answers. Questions contained in a responder context can be listed using <a class="reference internal" href="../api/krb5_responder_list_questions.html#c.krb5_responder_list_questions" title="krb5_responder_list_questions"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_list_questions()</span></code></a> , retrieved using <a class="reference internal" href="../api/krb5_responder_get_challenge.html#c.krb5_responder_get_challenge" title="krb5_responder_get_challenge"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_get_challenge()</span></code></a> , or answered using <a class="reference internal" href="../api/krb5_responder_set_answer.html#c.krb5_responder_set_answer" title="krb5_responder_set_answer"><code class="xref c c-func docutils literal"><span class="pre">krb5_responder_set_answer()</span></code></a> . The form of a question’s challenge and answer depend on the question name.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct krb5_responder_context_st* krb5_responder_context</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_context</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_pwd_data.html" title="krb5_pwd_data"
- >previous</a> |
- <a href="krb5_responder_fn.html" title="krb5_responder_fn"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_context">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_fn — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_otp_challenge" href="krb5_responder_otp_challenge.html" />
- <link rel="prev" title="krb5_responder_context" href="krb5_responder_context.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_context.html" title="krb5_responder_context"
- accesskey="P">previous</a> |
- <a href="krb5_responder_otp_challenge.html" title="krb5_responder_otp_challenge"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_fn">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-fn">
-<span id="krb5-responder-fn-struct"></span><h1>krb5_responder_fn<a class="headerlink" href="#krb5-responder-fn" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_responder_fn">
-<code class="descname">krb5_responder_fn</code><a class="headerlink" href="#c.krb5_responder_fn" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Responder function for an initial credential exchange.</p>
-<p>If a required question is unanswered, the prompter may be called.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_error_code( * krb5_responder_fn) (krb5_context ctx, void *data, krb5_responder_context rctx)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_fn</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_context.html" title="krb5_responder_context"
- >previous</a> |
- <a href="krb5_responder_otp_challenge.html" title="krb5_responder_otp_challenge"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_fn">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_otp_challenge — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_otp_tokeninfo" href="krb5_responder_otp_tokeninfo.html" />
- <link rel="prev" title="krb5_responder_fn" href="krb5_responder_fn.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_fn.html" title="krb5_responder_fn"
- accesskey="P">previous</a> |
- <a href="krb5_responder_otp_tokeninfo.html" title="krb5_responder_otp_tokeninfo"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_otp_challenge">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-challenge">
-<span id="krb5-responder-otp-challenge-struct"></span><h1>krb5_responder_otp_challenge<a class="headerlink" href="#krb5-responder-otp-challenge" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_responder_otp_challenge">
-<code class="descname">krb5_responder_otp_challenge</code><a class="headerlink" href="#c.krb5_responder_otp_challenge" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_responder_otp_challenge krb5_responder_otp_challenge</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_responder_otp_challenge.service">
-char * <code class="descname">krb5_responder_otp_challenge.service</code><a class="headerlink" href="#c.krb5_responder_otp_challenge.service" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_responder_otp_challenge.tokeninfo">
-<a class="reference internal" href="krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo" title="krb5_responder_otp_tokeninfo">krb5_responder_otp_tokeninfo</a> ** <code class="descname">krb5_responder_otp_challenge.tokeninfo</code><a class="headerlink" href="#c.krb5_responder_otp_challenge.tokeninfo" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_otp_challenge</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_fn.html" title="krb5_responder_fn"
- >previous</a> |
- <a href="krb5_responder_otp_tokeninfo.html" title="krb5_responder_otp_tokeninfo"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_otp_challenge">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_otp_tokeninfo — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_pkinit_challenge" href="krb5_responder_pkinit_challenge.html" />
- <link rel="prev" title="krb5_responder_otp_challenge" href="krb5_responder_otp_challenge.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_otp_challenge.html" title="krb5_responder_otp_challenge"
- accesskey="P">previous</a> |
- <a href="krb5_responder_pkinit_challenge.html" title="krb5_responder_pkinit_challenge"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_otp_tokeninfo">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-otp-tokeninfo">
-<span id="krb5-responder-otp-tokeninfo-struct"></span><h1>krb5_responder_otp_tokeninfo<a class="headerlink" href="#krb5-responder-otp-tokeninfo" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_responder_otp_tokeninfo">
-<code class="descname">krb5_responder_otp_tokeninfo</code><a class="headerlink" href="#c.krb5_responder_otp_tokeninfo" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_responder_otp_tokeninfo krb5_responder_otp_tokeninfo</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_responder_otp_tokeninfo.flags">
-<a class="reference internal" href="krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> <code class="descname">krb5_responder_otp_tokeninfo.flags</code><a class="headerlink" href="#c.krb5_responder_otp_tokeninfo.flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_responder_otp_tokeninfo.format">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_responder_otp_tokeninfo.format</code><a class="headerlink" href="#c.krb5_responder_otp_tokeninfo.format" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_responder_otp_tokeninfo.length">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_responder_otp_tokeninfo.length</code><a class="headerlink" href="#c.krb5_responder_otp_tokeninfo.length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_responder_otp_tokeninfo.vendor">
-char * <code class="descname">krb5_responder_otp_tokeninfo.vendor</code><a class="headerlink" href="#c.krb5_responder_otp_tokeninfo.vendor" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_responder_otp_tokeninfo.challenge">
-char * <code class="descname">krb5_responder_otp_tokeninfo.challenge</code><a class="headerlink" href="#c.krb5_responder_otp_tokeninfo.challenge" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_responder_otp_tokeninfo.token_id">
-char * <code class="descname">krb5_responder_otp_tokeninfo.token_id</code><a class="headerlink" href="#c.krb5_responder_otp_tokeninfo.token_id" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_responder_otp_tokeninfo.alg_id">
-char * <code class="descname">krb5_responder_otp_tokeninfo.alg_id</code><a class="headerlink" href="#c.krb5_responder_otp_tokeninfo.alg_id" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_otp_tokeninfo</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_otp_challenge.html" title="krb5_responder_otp_challenge"
- >previous</a> |
- <a href="krb5_responder_pkinit_challenge.html" title="krb5_responder_pkinit_challenge"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_otp_tokeninfo">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_pkinit_challenge — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_responder_pkinit_identity" href="krb5_responder_pkinit_identity.html" />
- <link rel="prev" title="krb5_responder_otp_tokeninfo" href="krb5_responder_otp_tokeninfo.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_otp_tokeninfo.html" title="krb5_responder_otp_tokeninfo"
- accesskey="P">previous</a> |
- <a href="krb5_responder_pkinit_identity.html" title="krb5_responder_pkinit_identity"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_pkinit_challenge">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-pkinit-challenge">
-<span id="krb5-responder-pkinit-challenge-struct"></span><h1>krb5_responder_pkinit_challenge<a class="headerlink" href="#krb5-responder-pkinit-challenge" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_responder_pkinit_challenge">
-<code class="descname">krb5_responder_pkinit_challenge</code><a class="headerlink" href="#c.krb5_responder_pkinit_challenge" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_responder_pkinit_challenge krb5_responder_pkinit_challenge</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_responder_pkinit_challenge.identities">
-<a class="reference internal" href="krb5_responder_pkinit_identity.html#c.krb5_responder_pkinit_identity" title="krb5_responder_pkinit_identity">krb5_responder_pkinit_identity</a> ** <code class="descname">krb5_responder_pkinit_challenge.identities</code><a class="headerlink" href="#c.krb5_responder_pkinit_challenge.identities" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_pkinit_challenge</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_otp_tokeninfo.html" title="krb5_responder_otp_tokeninfo"
- >previous</a> |
- <a href="krb5_responder_pkinit_identity.html" title="krb5_responder_pkinit_identity"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_pkinit_challenge">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_responder_pkinit_identity — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_response" href="krb5_response.html" />
- <link rel="prev" title="krb5_responder_pkinit_challenge" href="krb5_responder_pkinit_challenge.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_pkinit_challenge.html" title="krb5_responder_pkinit_challenge"
- accesskey="P">previous</a> |
- <a href="krb5_response.html" title="krb5_response"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_pkinit_identity">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-responder-pkinit-identity">
-<span id="krb5-responder-pkinit-identity-struct"></span><h1>krb5_responder_pkinit_identity<a class="headerlink" href="#krb5-responder-pkinit-identity" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_responder_pkinit_identity">
-<code class="descname">krb5_responder_pkinit_identity</code><a class="headerlink" href="#c.krb5_responder_pkinit_identity" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_responder_pkinit_identity krb5_responder_pkinit_identity</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_responder_pkinit_identity.identity">
-char * <code class="descname">krb5_responder_pkinit_identity.identity</code><a class="headerlink" href="#c.krb5_responder_pkinit_identity.identity" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_responder_pkinit_identity.token_flags">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_responder_pkinit_identity.token_flags</code><a class="headerlink" href="#c.krb5_responder_pkinit_identity.token_flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_responder_pkinit_identity</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_pkinit_challenge.html" title="krb5_responder_pkinit_challenge"
- >previous</a> |
- <a href="krb5_response.html" title="krb5_response"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_responder_pkinit_identity">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_response — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_replay_data" href="krb5_replay_data.html" />
- <link rel="prev" title="krb5_responder_pkinit_identity" href="krb5_responder_pkinit_identity.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_responder_pkinit_identity.html" title="krb5_responder_pkinit_identity"
- accesskey="P">previous</a> |
- <a href="krb5_replay_data.html" title="krb5_replay_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_response">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-response">
-<span id="krb5-response-struct"></span><h1>krb5_response<a class="headerlink" href="#krb5-response" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_response">
-<code class="descname">krb5_response</code><a class="headerlink" href="#c.krb5_response" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_response krb5_response</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_response.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_response.magic</code><a class="headerlink" href="#c.krb5_response.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_response.message_type">
-<a class="reference internal" href="krb5_octet.html#c.krb5_octet" title="krb5_octet">krb5_octet</a> <code class="descname">krb5_response.message_type</code><a class="headerlink" href="#c.krb5_response.message_type" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_response.response">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_response.response</code><a class="headerlink" href="#c.krb5_response.response" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_response.expected_nonce">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_response.expected_nonce</code><a class="headerlink" href="#c.krb5_response.expected_nonce" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_response.request_time">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_response.request_time</code><a class="headerlink" href="#c.krb5_response.request_time" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_response</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_responder_pkinit_identity.html" title="krb5_responder_pkinit_identity"
- >previous</a> |
- <a href="krb5_replay_data.html" title="krb5_replay_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_response">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_ticket — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_ticket_times" href="krb5_ticket_times.html" />
- <link rel="prev" title="krb5_replay_data" href="krb5_replay_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_replay_data.html" title="krb5_replay_data"
- accesskey="P">previous</a> |
- <a href="krb5_ticket_times.html" title="krb5_ticket_times"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ticket">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-ticket">
-<span id="krb5-ticket-struct"></span><h1>krb5_ticket<a class="headerlink" href="#krb5-ticket" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_ticket">
-<code class="descname">krb5_ticket</code><a class="headerlink" href="#c.krb5_ticket" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Ticket structure.</p>
-<p>The C representation of the ticket message, with a pointer to the C representation of the encrypted part.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_ticket krb5_ticket</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_ticket.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_ticket.magic</code><a class="headerlink" href="#c.krb5_ticket.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ticket.server">
-<a class="reference internal" href="krb5_principal.html#c.krb5_principal" title="krb5_principal">krb5_principal</a> <code class="descname">krb5_ticket.server</code><a class="headerlink" href="#c.krb5_ticket.server" title="Permalink to this definition">¶</a></dt>
-<dd><p>server name/realm</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ticket.enc_part">
-<a class="reference internal" href="krb5_enc_data.html#c.krb5_enc_data" title="krb5_enc_data">krb5_enc_data</a> <code class="descname">krb5_ticket.enc_part</code><a class="headerlink" href="#c.krb5_ticket.enc_part" title="Permalink to this definition">¶</a></dt>
-<dd><p>encryption type, kvno, encrypted encoding</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ticket.enc_part2">
-<a class="reference internal" href="krb5_enc_tkt_part.html#c.krb5_enc_tkt_part" title="krb5_enc_tkt_part">krb5_enc_tkt_part</a> * <code class="descname">krb5_ticket.enc_part2</code><a class="headerlink" href="#c.krb5_ticket.enc_part2" title="Permalink to this definition">¶</a></dt>
-<dd><p>ptr to decrypted version, if available</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_ticket</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_replay_data.html" title="krb5_replay_data"
- >previous</a> |
- <a href="krb5_ticket_times.html" title="krb5_ticket_times"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ticket">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_ticket_times — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_timestamp" href="krb5_timestamp.html" />
- <link rel="prev" title="krb5_ticket" href="krb5_ticket.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_ticket.html" title="krb5_ticket"
- accesskey="P">previous</a> |
- <a href="krb5_timestamp.html" title="krb5_timestamp"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ticket_times">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-ticket-times">
-<span id="krb5-ticket-times-struct"></span><h1>krb5_ticket_times<a class="headerlink" href="#krb5-ticket-times" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_ticket_times">
-<code class="descname">krb5_ticket_times</code><a class="headerlink" href="#c.krb5_ticket_times" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Ticket start time, end time, and renewal duration.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_ticket_times krb5_ticket_times</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_ticket_times.authtime">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_ticket_times.authtime</code><a class="headerlink" href="#c.krb5_ticket_times.authtime" title="Permalink to this definition">¶</a></dt>
-<dd><p>Time at which KDC issued the initial ticket that corresponds to this ticket.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ticket_times.starttime">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_ticket_times.starttime</code><a class="headerlink" href="#c.krb5_ticket_times.starttime" title="Permalink to this definition">¶</a></dt>
-<dd><p>optional in ticket, if not present, use <em>authtime</em></p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ticket_times.endtime">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_ticket_times.endtime</code><a class="headerlink" href="#c.krb5_ticket_times.endtime" title="Permalink to this definition">¶</a></dt>
-<dd><p>Ticket expiration time.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_ticket_times.renew_till">
-<a class="reference internal" href="krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp">krb5_timestamp</a> <code class="descname">krb5_ticket_times.renew_till</code><a class="headerlink" href="#c.krb5_ticket_times.renew_till" title="Permalink to this definition">¶</a></dt>
-<dd><p>Latest time at which renewal of ticket can be valid.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_ticket_times</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_ticket.html" title="krb5_ticket"
- >previous</a> |
- <a href="krb5_timestamp.html" title="krb5_timestamp"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ticket_times">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_timestamp — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_tkt_authent" href="krb5_tkt_authent.html" />
- <link rel="prev" title="krb5_ticket_times" href="krb5_ticket_times.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_ticket_times.html" title="krb5_ticket_times"
- accesskey="P">previous</a> |
- <a href="krb5_tkt_authent.html" title="krb5_tkt_authent"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_timestamp">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-timestamp">
-<span id="krb5-timestamp-struct"></span><h1>krb5_timestamp<a class="headerlink" href="#krb5-timestamp" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_timestamp">
-<code class="descname">krb5_timestamp</code><a class="headerlink" href="#c.krb5_timestamp" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Represents a timestamp in seconds since the POSIX epoch.</p>
-<p>This legacy type is used frequently in the ABI, but cannot represent timestamps after 2038 as a positive number. Code which uses this type should cast values of it to uint32_t so that negative values are treated as timestamps between 2038 and 2106 on platforms with 64-bit time_t.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef krb5_int32 krb5_timestamp</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_timestamp</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_ticket_times.html" title="krb5_ticket_times"
- >previous</a> |
- <a href="krb5_tkt_authent.html" title="krb5_tkt_authent"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_timestamp">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_tkt_authent — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_trace_callback" href="krb5_trace_callback.html" />
- <link rel="prev" title="krb5_timestamp" href="krb5_timestamp.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_timestamp.html" title="krb5_timestamp"
- accesskey="P">previous</a> |
- <a href="krb5_trace_callback.html" title="krb5_trace_callback"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_authent">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tkt-authent">
-<span id="krb5-tkt-authent-struct"></span><h1>krb5_tkt_authent<a class="headerlink" href="#krb5-tkt-authent" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_tkt_authent">
-<code class="descname">krb5_tkt_authent</code><a class="headerlink" href="#c.krb5_tkt_authent" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Ticket authentication data.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_tkt_authent krb5_tkt_authent</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_tkt_authent.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_tkt_authent.magic</code><a class="headerlink" href="#c.krb5_tkt_authent.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_tkt_authent.ticket">
-<a class="reference internal" href="krb5_ticket.html#c.krb5_ticket" title="krb5_ticket">krb5_ticket</a> * <code class="descname">krb5_tkt_authent.ticket</code><a class="headerlink" href="#c.krb5_tkt_authent.ticket" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_tkt_authent.authenticator">
-<a class="reference internal" href="krb5_authenticator.html#c.krb5_authenticator" title="krb5_authenticator">krb5_authenticator</a> * <code class="descname">krb5_tkt_authent.authenticator</code><a class="headerlink" href="#c.krb5_tkt_authent.authenticator" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_tkt_authent.ap_options">
-<a class="reference internal" href="krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> <code class="descname">krb5_tkt_authent.ap_options</code><a class="headerlink" href="#c.krb5_tkt_authent.ap_options" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_tkt_authent</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_timestamp.html" title="krb5_timestamp"
- >previous</a> |
- <a href="krb5_trace_callback.html" title="krb5_trace_callback"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_authent">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_tkt_creds_context — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5 simple macros" href="../macros/index.html" />
- <link rel="prev" title="krb5_rcache" href="krb5_rcache.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_rcache.html" title="krb5_rcache"
- accesskey="P">previous</a> |
- <a href="../macros/index.html" title="krb5 simple macros"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_context">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-tkt-creds-context">
-<span id="krb5-tkt-creds-context-struct"></span><h1>krb5_tkt_creds_context<a class="headerlink" href="#krb5-tkt-creds-context" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_tkt_creds_context">
-<code class="descname">krb5_tkt_creds_context</code><a class="headerlink" href="#c.krb5_tkt_creds_context" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_tkt_creds_context* krb5_tkt_creds_context</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_tkt_creds_context</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_rcache.html" title="krb5_rcache"
- >previous</a> |
- <a href="../macros/index.html" title="krb5 simple macros"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_tkt_creds_context">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_trace_callback — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_trace_info" href="krb5_trace_info.html" />
- <link rel="prev" title="krb5_tkt_authent" href="krb5_tkt_authent.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_tkt_authent.html" title="krb5_tkt_authent"
- accesskey="P">previous</a> |
- <a href="krb5_trace_info.html" title="krb5_trace_info"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_trace_callback">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-trace-callback">
-<span id="krb5-trace-callback-struct"></span><h1>krb5_trace_callback<a class="headerlink" href="#krb5-trace-callback" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_trace_callback">
-<code class="descname">krb5_trace_callback</code><a class="headerlink" href="#c.krb5_trace_callback" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef void( * krb5_trace_callback) (krb5_context context, const krb5_trace_info *info, void *cb_data)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_trace_callback</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_tkt_authent.html" title="krb5_tkt_authent"
- >previous</a> |
- <a href="krb5_trace_info.html" title="krb5_trace_info"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_trace_callback">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_trace_info — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_transited" href="krb5_transited.html" />
- <link rel="prev" title="krb5_trace_callback" href="krb5_trace_callback.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_trace_callback.html" title="krb5_trace_callback"
- accesskey="P">previous</a> |
- <a href="krb5_transited.html" title="krb5_transited"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_trace_info">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-trace-info">
-<span id="krb5-trace-info-struct"></span><h1>krb5_trace_info<a class="headerlink" href="#krb5-trace-info" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_trace_info">
-<code class="descname">krb5_trace_info</code><a class="headerlink" href="#c.krb5_trace_info" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>A wrapper for passing information to a <em>krb5_trace_callback</em> .</p>
-<p>Currently, it only contains the formatted message as determined the the format string and arguments of the tracing macro, but it may be extended to contain more fields in the future.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_trace_info krb5_trace_info</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_trace_info.message">
-const char * <code class="descname">krb5_trace_info.message</code><a class="headerlink" href="#c.krb5_trace_info.message" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_trace_info</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_trace_callback.html" title="krb5_trace_callback"
- >previous</a> |
- <a href="krb5_transited.html" title="krb5_transited"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_trace_info">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_transited — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_typed_data" href="krb5_typed_data.html" />
- <link rel="prev" title="krb5_trace_info" href="krb5_trace_info.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_trace_info.html" title="krb5_trace_info"
- accesskey="P">previous</a> |
- <a href="krb5_typed_data.html" title="krb5_typed_data"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_transited">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-transited">
-<span id="krb5-transited-struct"></span><h1>krb5_transited<a class="headerlink" href="#krb5-transited" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_transited">
-<code class="descname">krb5_transited</code><a class="headerlink" href="#c.krb5_transited" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<p>Structure for transited encoding.</p>
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_transited krb5_transited</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_transited.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_transited.magic</code><a class="headerlink" href="#c.krb5_transited.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_transited.tr_type">
-<a class="reference internal" href="krb5_octet.html#c.krb5_octet" title="krb5_octet">krb5_octet</a> <code class="descname">krb5_transited.tr_type</code><a class="headerlink" href="#c.krb5_transited.tr_type" title="Permalink to this definition">¶</a></dt>
-<dd><p>Transited encoding type.</p>
-</dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_transited.tr_contents">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> <code class="descname">krb5_transited.tr_contents</code><a class="headerlink" href="#c.krb5_transited.tr_contents" title="Permalink to this definition">¶</a></dt>
-<dd><p>Contents.</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_transited</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_trace_info.html" title="krb5_trace_info"
- >previous</a> |
- <a href="krb5_typed_data.html" title="krb5_typed_data"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_transited">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_typed_data — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_ui_2" href="krb5_ui_2.html" />
- <link rel="prev" title="krb5_transited" href="krb5_transited.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_transited.html" title="krb5_transited"
- accesskey="P">previous</a> |
- <a href="krb5_ui_2.html" title="krb5_ui_2"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_typed_data">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-typed-data">
-<span id="krb5-typed-data-struct"></span><h1>krb5_typed_data<a class="headerlink" href="#krb5-typed-data" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_typed_data">
-<code class="descname">krb5_typed_data</code><a class="headerlink" href="#c.krb5_typed_data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_typed_data krb5_typed_data</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_typed_data.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">krb5_typed_data.magic</code><a class="headerlink" href="#c.krb5_typed_data.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_typed_data.type">
-<a class="reference internal" href="krb5_int32.html#c.krb5_int32" title="krb5_int32">krb5_int32</a> <code class="descname">krb5_typed_data.type</code><a class="headerlink" href="#c.krb5_typed_data.type" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_typed_data.length">
-unsigned int <code class="descname">krb5_typed_data.length</code><a class="headerlink" href="#c.krb5_typed_data.length" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_typed_data.data">
-<a class="reference internal" href="krb5_octet.html#c.krb5_octet" title="krb5_octet">krb5_octet</a> * <code class="descname">krb5_typed_data.data</code><a class="headerlink" href="#c.krb5_typed_data.data" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_typed_data</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_transited.html" title="krb5_transited"
- >previous</a> |
- <a href="krb5_ui_2.html" title="krb5_ui_2"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_typed_data">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_ui_2 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_ui_4" href="krb5_ui_4.html" />
- <link rel="prev" title="krb5_typed_data" href="krb5_typed_data.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_typed_data.html" title="krb5_typed_data"
- accesskey="P">previous</a> |
- <a href="krb5_ui_4.html" title="krb5_ui_4"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ui_2">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-ui-2">
-<span id="krb5-ui-2-struct"></span><h1>krb5_ui_2<a class="headerlink" href="#krb5-ui-2" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_ui_2">
-<code class="descname">krb5_ui_2</code><a class="headerlink" href="#c.krb5_ui_2" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef uint16_t krb5_ui_2</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_ui_2</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_typed_data.html" title="krb5_typed_data"
- >previous</a> |
- <a href="krb5_ui_4.html" title="krb5_ui_4"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ui_2">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_ui_4 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_verify_init_creds_opt" href="krb5_verify_init_creds_opt.html" />
- <link rel="prev" title="krb5_ui_2" href="krb5_ui_2.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_ui_2.html" title="krb5_ui_2"
- accesskey="P">previous</a> |
- <a href="krb5_verify_init_creds_opt.html" title="krb5_verify_init_creds_opt"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ui_4">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-ui-4">
-<span id="krb5-ui-4-struct"></span><h1>krb5_ui_4<a class="headerlink" href="#krb5-ui-4" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_ui_4">
-<code class="descname">krb5_ui_4</code><a class="headerlink" href="#c.krb5_ui_4" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef uint32_t krb5_ui_4</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_ui_4</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_ui_2.html" title="krb5_ui_2"
- >previous</a> |
- <a href="krb5_verify_init_creds_opt.html" title="krb5_verify_init_creds_opt"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_ui_4">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5_verify_init_creds_opt — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="passwd_phrase_element" href="passwd_phrase_element.html" />
- <link rel="prev" title="krb5_ui_4" href="krb5_ui_4.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_ui_4.html" title="krb5_ui_4"
- accesskey="P">previous</a> |
- <a href="passwd_phrase_element.html" title="passwd_phrase_element"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_init_creds_opt">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-verify-init-creds-opt">
-<span id="krb5-verify-init-creds-opt-struct"></span><h1>krb5_verify_init_creds_opt<a class="headerlink" href="#krb5-verify-init-creds-opt" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.krb5_verify_init_creds_opt">
-<code class="descname">krb5_verify_init_creds_opt</code><a class="headerlink" href="#c.krb5_verify_init_creds_opt" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _krb5_verify_init_creds_opt krb5_verify_init_creds_opt</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.krb5_verify_init_creds_opt.flags">
-<a class="reference internal" href="krb5_flags.html#c.krb5_flags" title="krb5_flags">krb5_flags</a> <code class="descname">krb5_verify_init_creds_opt.flags</code><a class="headerlink" href="#c.krb5_verify_init_creds_opt.flags" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.krb5_verify_init_creds_opt.ap_req_nofail">
-int <code class="descname">krb5_verify_init_creds_opt.ap_req_nofail</code><a class="headerlink" href="#c.krb5_verify_init_creds_opt.ap_req_nofail" title="Permalink to this definition">¶</a></dt>
-<dd><p>boolean</p>
-</dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5_verify_init_creds_opt</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_ui_4.html" title="krb5_ui_4"
- >previous</a> |
- <a href="passwd_phrase_element.html" title="passwd_phrase_element"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5_verify_init_creds_opt">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>passwd_phrase_element — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../../about.html" />
- <link rel="index" title="Index" href="../../../genindex.html" />
- <link rel="search" title="Search" href="../../../search.html" />
- <link rel="copyright" title="Copyright" href="../../../copyright.html" />
- <link rel="next" title="krb5_auth_context" href="krb5_auth_context.html" />
- <link rel="prev" title="krb5_verify_init_creds_opt" href="krb5_verify_init_creds_opt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5_verify_init_creds_opt.html" title="krb5_verify_init_creds_opt"
- accesskey="P">previous</a> |
- <a href="krb5_auth_context.html" title="krb5_auth_context"
- accesskey="N">next</a> |
- <a href="../../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__passwd_phrase_element">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="passwd-phrase-element">
-<span id="passwd-phrase-element-struct"></span><h1>passwd_phrase_element<a class="headerlink" href="#passwd-phrase-element" title="Permalink to this headline">¶</a></h1>
-<dl class="type">
-<dt id="c.passwd_phrase_element">
-<code class="descname">passwd_phrase_element</code><a class="headerlink" href="#c.passwd_phrase_element" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<div class="section" id="declaration">
-<h2>Declaration<a class="headerlink" href="#declaration" title="Permalink to this headline">¶</a></h2>
-<p>typedef struct _passwd_phrase_element passwd_phrase_element</p>
-</div>
-<div class="section" id="members">
-<h2>Members<a class="headerlink" href="#members" title="Permalink to this headline">¶</a></h2>
-<dl class="member">
-<dt id="c.passwd_phrase_element.magic">
-<a class="reference internal" href="krb5_magic.html#c.krb5_magic" title="krb5_magic">krb5_magic</a> <code class="descname">passwd_phrase_element.magic</code><a class="headerlink" href="#c.passwd_phrase_element.magic" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.passwd_phrase_element.passwd">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> * <code class="descname">passwd_phrase_element.passwd</code><a class="headerlink" href="#c.passwd_phrase_element.passwd" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-<dl class="member">
-<dt id="c.passwd_phrase_element.phrase">
-<a class="reference internal" href="krb5_data.html#c.krb5_data" title="krb5_data">krb5_data</a> * <code class="descname">passwd_phrase_element.phrase</code><a class="headerlink" href="#c.passwd_phrase_element.phrase" title="Permalink to this definition">¶</a></dt>
-<dd></dd></dl>
-
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">passwd_phrase_element</a><ul>
-<li><a class="reference internal" href="#declaration">Declaration</a></li>
-<li><a class="reference internal" href="#members">Members</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../../../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="../../index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../../gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../y2038.html">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../../princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="../index.html">Complete reference - API and datatypes</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="../api/index.html">krb5 API</a></li>
-<li class="toctree-l3 current"><a class="reference internal" href="index.html">krb5 types and structures</a></li>
-<li class="toctree-l3"><a class="reference internal" href="../macros/index.html">krb5 simple macros</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5_verify_init_creds_opt.html" title="krb5_verify_init_creds_opt"
- >previous</a> |
- <a href="krb5_auth_context.html" title="krb5_auth_context"
- >next</a> |
- <a href="../../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__passwd_phrase_element">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Year 2038 considerations for uses of krb5_timestamp — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Differences between Heimdal and MIT Kerberos API" href="h5l_mit_apidiff.html" />
- <link rel="prev" title="Developing with GSSAPI" href="gssapi.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="gssapi.html" title="Developing with GSSAPI"
- accesskey="P">previous</a> |
- <a href="h5l_mit_apidiff.html" title="Differences between Heimdal and MIT Kerberos API"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Year 2038 considerations for uses of krb5_timestamp">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="year-2038-considerations-for-uses-of-krb5-timestamp">
-<h1>Year 2038 considerations for uses of krb5_timestamp<a class="headerlink" href="#year-2038-considerations-for-uses-of-krb5-timestamp" title="Permalink to this headline">¶</a></h1>
-<p>POSIX time values, which measure the number of seconds since January 1
-1970, will exceed the maximum value representable in a signed 32-bit
-integer in January 2038. This documentation describes considerations
-for consumers of the MIT krb5 libraries.</p>
-<p>Applications or libraries which use libkrb5 and consume the timestamps
-included in credentials or other structures make use of the
-<a class="reference internal" href="refs/types/krb5_timestamp.html#c.krb5_timestamp" title="krb5_timestamp"><code class="xref c c-type docutils literal"><span class="pre">krb5_timestamp</span></code></a> type. For historical reasons, krb5_timestamp
-is a signed 32-bit integer, even on platforms where a larger type is
-natively used to represent time values. To behave properly for time
-values after January 2038, calling code should cast krb5_timestamp
-values to uint32_t, and then to time_t:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="p">(</span><span class="n">time_t</span><span class="p">)(</span><span class="n">uint32_t</span><span class="p">)</span><span class="n">timestamp</span>
-</pre></div>
-</div>
-<p>Used in this way, krb5_timestamp values can represent time values up
-until February 2106, provided that the platform uses a 64-bit or
-larger time_t type. This usage will also remain safe if a later
-version of MIT krb5 changes krb5_timestamp to an unsigned 32-bit
-integer.</p>
-<p>The GSSAPI only uses representations of time intervals, not absolute
-times. Callers of the GSSAPI should require no changes to behave
-correctly after January 2038, provided that they use MIT krb5 release
-1.16 or later.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Year 2038 considerations for uses of krb5_timestamp</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For application developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">Developing with GSSAPI</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Year 2038 considerations for uses of krb5_timestamp</a></li>
-<li class="toctree-l2"><a class="reference internal" href="h5l_mit_apidiff.html">Differences between Heimdal and MIT Kerberos API</a></li>
-<li class="toctree-l2"><a class="reference internal" href="init_creds.html">Initial credentials</a></li>
-<li class="toctree-l2"><a class="reference internal" href="princ_handle.html">Principal manipulation and parsing</a></li>
-<li class="toctree-l2"><a class="reference internal" href="refs/index.html">Complete reference - API and datatypes</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="gssapi.html" title="Developing with GSSAPI"
- >previous</a> |
- <a href="h5l_mit_apidiff.html" title="Differences between Heimdal and MIT Kerberos API"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Year 2038 considerations for uses of krb5_timestamp">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Credential cache — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="keytab" href="keytab_def.html" />
- <link rel="prev" title="Kerberos V5 concepts" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="Kerberos V5 concepts"
- accesskey="P">previous</a> |
- <a href="keytab_def.html" title="keytab"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Credential cache">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="credential-cache">
-<span id="ccache-definition"></span><h1>Credential cache<a class="headerlink" href="#credential-cache" title="Permalink to this headline">¶</a></h1>
-<p>A credential cache (or “ccache”) holds Kerberos credentials while they
-remain valid and, generally, while the user’s session lasts, so that
-authenticating to a service multiple times (e.g., connecting to a web
-or mail server more than once) doesn’t require contacting the KDC
-every time.</p>
-<p>A credential cache usually contains one initial ticket which is
-obtained using a password or another form of identity verification.
-If this ticket is a ticket-granting ticket, it can be used to obtain
-additional credentials without the password. Because the credential
-cache does not store the password, less long-term damage can be done
-to the user’s account if the machine is compromised.</p>
-<p>A credentials cache stores a default client principal name, set when
-the cache is created. This is the name shown at the top of the
-<a class="reference internal" href="../user/user_commands/klist.html#klist-1"><span class="std std-ref">klist</span></a> <em>-A</em> output.</p>
-<p>Each normal cache entry includes a service principal name, a client
-principal name (which, in some ccache types, need not be the same as
-the default), lifetime information, and flags, along with the
-credential itself. There are also other entries, indicated by special
-names, that store additional information.</p>
-<div class="section" id="ccache-types">
-<h2>ccache types<a class="headerlink" href="#ccache-types" title="Permalink to this headline">¶</a></h2>
-<p>The credential cache interface, like the <a class="reference internal" href="keytab_def.html#keytab-definition"><span class="std std-ref">keytab</span></a> and
-<a class="reference internal" href="rcache_def.html#rcache-definition"><span class="std std-ref">replay cache</span></a> interfaces, uses <cite>TYPE:value</cite> strings to
-indicate the type of credential cache and any associated cache naming
-data to use.</p>
-<p>There are several kinds of credentials cache supported in the MIT
-Kerberos library. Not all are supported on every platform. In most
-cases, it should be correct to use the default type built into the
-library.</p>
-<ol class="arabic">
-<li><p class="first"><strong>API</strong> is only implemented on Windows. It communicates with a
-server process that holds the credentials in memory for the user,
-rather than writing them to disk.</p>
-</li>
-<li><p class="first"><strong>DIR</strong> points to the storage location of the collection of the
-credential caches in <em>FILE:</em> format. It is most useful when dealing
-with multiple Kerberos realms and KDCs. For release 1.10 the
-directory must already exist. In post-1.10 releases the
-requirement is for parent directory to exist and the current
-process must have permissions to create the directory if it does
-not exist. See <a class="reference internal" href="#col-ccache"><span class="std std-ref">Collections of caches</span></a> for details. New in release 1.10.
-The following residual forms are supported:</p>
-<ul class="simple">
-<li>DIR:dirname</li>
-<li>DIR::dirpath/filename - a single cache within the directory</li>
-</ul>
-<p>Switching to a ccache of the latter type causes it to become the
-primary for the directory.</p>
-</li>
-<li><p class="first"><strong>FILE</strong> caches are the simplest and most portable. A simple flat
-file format is used to store one credential after another. This is
-the default ccache type if no type is specified in a ccache name.</p>
-</li>
-<li><p class="first"><strong>KCM</strong> caches work by contacting a daemon process called <code class="docutils literal"><span class="pre">kcm</span></code>
-to perform cache operations. If the cache name is just <code class="docutils literal"><span class="pre">KCM:</span></code>,
-the default cache as determined by the KCM daemon will be used.
-Newly created caches must generally be named <code class="docutils literal"><span class="pre">KCM:uid:name</span></code>,
-where <em>uid</em> is the effective user ID of the running process.</p>
-<p>KCM client support is new in release 1.13. A KCM daemon has not
-yet been implemented in MIT krb5, but the client will interoperate
-with the KCM daemon implemented by Heimdal. macOS 10.7 and higher
-provides a KCM daemon as part of the operating system, and the
-<strong>KCM</strong> cache type is used as the default cache on that platform in
-a default build.</p>
-</li>
-<li><p class="first"><strong>KEYRING</strong> is Linux-specific, and uses the kernel keyring support
-to store credential data in unswappable kernel memory where only
-the current user should be able to access it. The following
-residual forms are supported:</p>
-<ul class="simple">
-<li>KEYRING:name</li>
-<li>KEYRING:process:name - process keyring</li>
-<li>KEYRING:thread:name - thread keyring</li>
-</ul>
-<p>Starting with release 1.12 the <em>KEYRING</em> type supports collections.
-The following new residual forms were added:</p>
-<ul class="simple">
-<li>KEYRING:session:name - session keyring</li>
-<li>KEYRING:user:name - user keyring</li>
-<li>KEYRING:persistent:uidnumber - persistent per-UID collection.
-Unlike the user keyring, this collection survives after the user
-logs out, until the cache credentials expire. This type of
-ccache requires support from the kernel; otherwise, it will fall
-back to the user keyring.</li>
-</ul>
-<p>See <a class="reference internal" href="#col-ccache"><span class="std std-ref">Collections of caches</span></a> for details.</p>
-</li>
-<li><p class="first"><strong>MEMORY</strong> caches are for storage of credentials that don’t need to
-be made available outside of the current process. For example, a
-memory ccache is used by <a class="reference internal" href="../admin/admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> to store the
-administrative ticket used to contact the admin server. Memory
-ccaches are faster than file ccaches and are automatically
-destroyed when the process exits.</p>
-</li>
-<li><p class="first"><strong>MSLSA</strong> is a Windows-specific cache type that accesses the
-Windows credential store.</p>
-</li>
-</ol>
-</div>
-<div class="section" id="collections-of-caches">
-<span id="col-ccache"></span><h2>Collections of caches<a class="headerlink" href="#collections-of-caches" title="Permalink to this headline">¶</a></h2>
-<p>Some credential cache types can support collections of multiple
-caches. One of the caches in the collection is designated as the
-<em>primary</em> and will be used when the collection is resolved as a cache.
-When a collection-enabled cache type is the default cache for a
-process, applications can search the specified collection for a
-specific client principal, and GSSAPI applications will automatically
-select between the caches in the collection based on criteria such as
-the target service realm.</p>
-<p>Credential cache collections are new in release 1.10, with support
-from the <strong>DIR</strong> and <strong>API</strong> ccache types. Starting in release 1.12,
-collections are also supported by the <strong>KEYRING</strong> ccache type.
-Collections are supported by the <strong>KCM</strong> ccache type in release 1.13.</p>
-<div class="section" id="tool-alterations-to-use-cache-collection">
-<h3>Tool alterations to use cache collection<a class="headerlink" href="#tool-alterations-to-use-cache-collection" title="Permalink to this headline">¶</a></h3>
-<ul class="simple">
-<li><a class="reference internal" href="../user/user_commands/kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a> <em>-A</em> will destroy all caches in the collection.</li>
-<li>If the default cache type supports switching, <a class="reference internal" href="../user/user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>
-<em>princname</em> will search the collection for a matching cache and
-store credentials there, or will store credentials in a new unique
-cache of the default type if no existing cache for the principal
-exists. Either way, kinit will switch to the selected cache.</li>
-<li><a class="reference internal" href="../user/user_commands/klist.html#klist-1"><span class="std std-ref">klist</span></a> <em>-l</em> will list the caches in the collection.</li>
-<li><a class="reference internal" href="../user/user_commands/klist.html#klist-1"><span class="std std-ref">klist</span></a> <em>-A</em> will show the content of all caches in the
-collection.</li>
-<li><a class="reference internal" href="../user/user_commands/kswitch.html#kswitch-1"><span class="std std-ref">kswitch</span></a> <em>-p princname</em> will search the collection for a
-matching cache and switch to it.</li>
-<li><a class="reference internal" href="../user/user_commands/kswitch.html#kswitch-1"><span class="std std-ref">kswitch</span></a> <em>-c cachename</em> will switch to a specified cache.</li>
-</ul>
-</div>
-</div>
-<div class="section" id="default-ccache-name">
-<h2>Default ccache name<a class="headerlink" href="#default-ccache-name" title="Permalink to this headline">¶</a></h2>
-<p>The default credential cache name is determined by the following, in
-descending order of priority:</p>
-<ol class="arabic simple">
-<li>The <strong>KRB5CCNAME</strong> environment variable. For example,
-<code class="docutils literal"><span class="pre">KRB5CCNAME=DIR:/mydir/</span></code>.</li>
-<li>The <strong>default_ccache_name</strong> profile variable in <a class="reference internal" href="../admin/conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>.</li>
-<li>The hardcoded default, <a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">DEFCCNAME</span></a>.</li>
-</ol>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Credential cache</a><ul>
-<li><a class="reference internal" href="#ccache-types">ccache types</a></li>
-<li><a class="reference internal" href="#collections-of-caches">Collections of caches</a><ul>
-<li><a class="reference internal" href="#tool-alterations-to-use-cache-collection">Tool alterations to use cache collection</a></li>
-</ul>
-</li>
-<li><a class="reference internal" href="#default-ccache-name">Default ccache name</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Kerberos V5 concepts</a><ul class="current">
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Credential cache</a></li>
-<li class="toctree-l2"><a class="reference internal" href="keytab_def.html">keytab</a></li>
-<li class="toctree-l2"><a class="reference internal" href="rcache_def.html">replay cache</a></li>
-<li class="toctree-l2"><a class="reference internal" href="stash_file_def.html">stash file</a></li>
-<li class="toctree-l2"><a class="reference internal" href="date_format.html">Supported date and time formats</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="Kerberos V5 concepts"
- >previous</a> |
- <a href="keytab_def.html" title="keytab"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Credential cache">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Supported date and time formats — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Protocols and file formats" href="../formats/index.html" />
- <link rel="prev" title="stash file" href="stash_file_def.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="stash_file_def.html" title="stash file"
- accesskey="P">previous</a> |
- <a href="../formats/index.html" title="Protocols and file formats"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Supported date and time formats">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="supported-date-and-time-formats">
-<span id="datetime"></span><h1>Supported date and time formats<a class="headerlink" href="#supported-date-and-time-formats" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="time-duration">
-<span id="duration"></span><h2>Time duration<a class="headerlink" href="#time-duration" title="Permalink to this headline">¶</a></h2>
-<p>This format is used to express a time duration in the Kerberos
-configuration files and user commands. The allowed formats are:</p>
-<blockquote>
-<div><table border="1" class="docutils">
-<colgroup>
-<col width="40%" />
-<col width="25%" />
-<col width="35%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td>Format</td>
-<td>Example</td>
-<td>Value</td>
-</tr>
-<tr class="row-even"><td>h:m[:s]</td>
-<td>36:00</td>
-<td>36 hours</td>
-</tr>
-<tr class="row-odd"><td>NdNhNmNs</td>
-<td>8h30s</td>
-<td>8 hours 30 seconds</td>
-</tr>
-<tr class="row-even"><td>N (number of seconds)</td>
-<td>3600</td>
-<td>1 hour</td>
-</tr>
-</tbody>
-</table>
-</div></blockquote>
-<p>Here <em>N</em> denotes a number, <em>d</em> - days, <em>h</em> - hours, <em>m</em> - minutes,
-<em>s</em> - seconds.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The time interval should not exceed 2147483647 seconds.</p>
-</div>
-<p>Examples:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">Request</span> <span class="n">a</span> <span class="n">ticket</span> <span class="n">valid</span> <span class="k">for</span> <span class="n">one</span> <span class="n">hour</span><span class="p">,</span> <span class="n">five</span> <span class="n">hours</span><span class="p">,</span> <span class="mi">30</span> <span class="n">minutes</span>
-<span class="ow">and</span> <span class="mi">10</span> <span class="n">days</span> <span class="n">respectively</span><span class="p">:</span>
-
- <span class="n">kinit</span> <span class="o">-</span><span class="n">l</span> <span class="mi">3600</span>
- <span class="n">kinit</span> <span class="o">-</span><span class="n">l</span> <span class="mi">5</span><span class="p">:</span><span class="mi">00</span>
- <span class="n">kinit</span> <span class="o">-</span><span class="n">l</span> <span class="mi">30</span><span class="n">m</span>
- <span class="n">kinit</span> <span class="o">-</span><span class="n">l</span> <span class="s2">"10d 0h 0m 0s"</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="getdate-time">
-<span id="getdate"></span><h2>getdate time<a class="headerlink" href="#getdate-time" title="Permalink to this headline">¶</a></h2>
-<p>Some of the kadmin and kdb5_util commands take a date-time in a
-human-readable format. Some of the acceptable date-time
-strings are:</p>
-<blockquote>
-<div><table border="1" class="docutils">
-<colgroup>
-<col width="24%" />
-<col width="39%" />
-<col width="37%" />
-</colgroup>
-<thead valign="bottom">
-<tr class="row-odd"><th class="head"> </th>
-<th class="head">Format</th>
-<th class="head">Example</th>
-</tr>
-</thead>
-<tbody valign="top">
-<tr class="row-even"><td rowspan="3">Date</td>
-<td>mm/dd/yy</td>
-<td>07/27/12</td>
-</tr>
-<tr class="row-odd"><td>month dd, yyyy</td>
-<td>Jul 27, 2012</td>
-</tr>
-<tr class="row-even"><td>yyyy-mm-dd</td>
-<td>2012-07-27</td>
-</tr>
-<tr class="row-odd"><td rowspan="2">Absolute
-time</td>
-<td>HH:mm[:ss]pp</td>
-<td>08:30 PM</td>
-</tr>
-<tr class="row-even"><td>hh:mm[:ss]</td>
-<td>20:30</td>
-</tr>
-<tr class="row-odd"><td>Relative
-time</td>
-<td>N tt</td>
-<td>30 sec</td>
-</tr>
-<tr class="row-even"><td rowspan="2">Time zone</td>
-<td>Z</td>
-<td>EST</td>
-</tr>
-<tr class="row-odd"><td>z</td>
-<td>-0400</td>
-</tr>
-</tbody>
-</table>
-</div></blockquote>
-<p>(See <a class="reference internal" href="#abbreviation"><span class="std std-ref">Abbreviations used in this document</span></a>.)</p>
-<p>Examples:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">Create</span> <span class="n">a</span> <span class="n">principal</span> <span class="n">that</span> <span class="n">expires</span> <span class="n">on</span> <span class="n">the</span> <span class="n">date</span> <span class="n">indicated</span><span class="p">:</span>
- <span class="n">addprinc</span> <span class="n">test1</span> <span class="o">-</span><span class="n">expire</span> <span class="s2">"3/27/12 10:00:07 EST"</span>
- <span class="n">addprinc</span> <span class="n">test2</span> <span class="o">-</span><span class="n">expire</span> <span class="s2">"January 23, 2015 10:05pm"</span>
- <span class="n">addprinc</span> <span class="n">test3</span> <span class="o">-</span><span class="n">expire</span> <span class="s2">"22:00 GMT"</span>
-<span class="n">Add</span> <span class="n">a</span> <span class="n">principal</span> <span class="n">that</span> <span class="n">will</span> <span class="n">expire</span> <span class="ow">in</span> <span class="mi">30</span> <span class="n">minutes</span><span class="p">:</span>
- <span class="n">addprinc</span> <span class="n">test4</span> <span class="o">-</span><span class="n">expire</span> <span class="s2">"30 minutes"</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="absolute-time">
-<span id="abstime"></span><h2>Absolute time<a class="headerlink" href="#absolute-time" title="Permalink to this headline">¶</a></h2>
-<p>This rarely used date-time format can be noted in one of the
-following ways:</p>
-<blockquote>
-<div><table border="1" class="docutils">
-<colgroup>
-<col width="40%" />
-<col width="37%" />
-<col width="23%" />
-</colgroup>
-<thead valign="bottom">
-<tr class="row-odd"><th class="head">Format</th>
-<th class="head">Example</th>
-<th class="head">Value</th>
-</tr>
-</thead>
-<tbody valign="top">
-<tr class="row-even"><td>yyyymmddhhmmss</td>
-<td>20141231235900</td>
-<td rowspan="5">One minute
-before 2015</td>
-</tr>
-<tr class="row-odd"><td>yyyy.mm.dd.hh.mm.ss</td>
-<td>2014.12.31.23.59.00</td>
-</tr>
-<tr class="row-even"><td>yymmddhhmmss</td>
-<td>141231235900</td>
-</tr>
-<tr class="row-odd"><td>yy.mm.dd.hh.mm.ss</td>
-<td>14.12.31.23.59.00</td>
-</tr>
-<tr class="row-even"><td>dd-month-yyyy:hh:mm:ss</td>
-<td>31-Dec-2014:23:59:00</td>
-</tr>
-<tr class="row-odd"><td>hh:mm:ss</td>
-<td>20:00:00</td>
-<td rowspan="2">8 o’clock in
-the evening</td>
-</tr>
-<tr class="row-even"><td>hhmmss</td>
-<td>200000</td>
-</tr>
-</tbody>
-</table>
-</div></blockquote>
-<p>(See <a class="reference internal" href="#abbreviation"><span class="std std-ref">Abbreviations used in this document</span></a>.)</p>
-<p>Example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">Set</span> <span class="n">the</span> <span class="n">default</span> <span class="n">expiration</span> <span class="n">date</span> <span class="n">to</span> <span class="n">July</span> <span class="mi">27</span><span class="p">,</span> <span class="mi">2012</span> <span class="n">at</span> <span class="mi">20</span><span class="p">:</span><span class="mi">30</span>
-<span class="n">default_principal_expiration</span> <span class="o">=</span> <span class="mi">20120727203000</span>
-</pre></div>
-</div>
-<div class="section" id="abbreviations-used-in-this-document">
-<span id="abbreviation"></span><h3>Abbreviations used in this document<a class="headerlink" href="#abbreviations-used-in-this-document" title="Permalink to this headline">¶</a></h3>
-<div class="line-block">
-<div class="line"><em>month</em> : locale’s month name or its abbreviation;</div>
-<div class="line"><em>dd</em> : day of month (01-31);</div>
-<div class="line"><em>HH</em> : hours (00-12);</div>
-<div class="line"><em>hh</em> : hours (00-23);</div>
-<div class="line"><em>mm</em> : in time - minutes (00-59); in date - month (01-12);</div>
-<div class="line"><em>N</em> : number;</div>
-<div class="line"><em>pp</em> : AM or PM;</div>
-<div class="line"><em>ss</em> : seconds (00-60);</div>
-<div class="line"><em>tt</em> : time units (hours, minutes, min, seconds, sec);</div>
-<div class="line"><em>yyyy</em> : year;</div>
-<div class="line"><em>yy</em> : last two digits of the year;</div>
-<div class="line"><em>Z</em> : alphabetic time zone abbreviation;</div>
-<div class="line"><em>z</em> : numeric time zone;</div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<ul class="last simple">
-<li>If the date specification contains spaces, you may need to
-enclose it in double quotes;</li>
-<li>All keywords are case-insensitive.</li>
-</ul>
-</div>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Supported date and time formats</a><ul>
-<li><a class="reference internal" href="#time-duration">Time duration</a></li>
-<li><a class="reference internal" href="#getdate-time">getdate time</a></li>
-<li><a class="reference internal" href="#absolute-time">Absolute time</a><ul>
-<li><a class="reference internal" href="#abbreviations-used-in-this-document">Abbreviations used in this document</a></li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Kerberos V5 concepts</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="ccache_def.html">Credential cache</a></li>
-<li class="toctree-l2"><a class="reference internal" href="keytab_def.html">keytab</a></li>
-<li class="toctree-l2"><a class="reference internal" href="rcache_def.html">replay cache</a></li>
-<li class="toctree-l2"><a class="reference internal" href="stash_file_def.html">stash file</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Supported date and time formats</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="stash_file_def.html" title="stash file"
- >previous</a> |
- <a href="../formats/index.html" title="Protocols and file formats"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Supported date and time formats">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Kerberos V5 concepts — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Credential cache" href="ccache_def.html" />
- <link rel="prev" title="osconf.hin" href="../build/osconf.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../build/osconf.html" title="osconf.hin"
- accesskey="P">previous</a> |
- <a href="ccache_def.html" title="Credential cache"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Kerberos V5 concepts">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kerberos-v5-concepts">
-<span id="basic-concepts"></span><h1>Kerberos V5 concepts<a class="headerlink" href="#kerberos-v5-concepts" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="ccache_def.html">Credential cache</a></li>
-<li class="toctree-l1"><a class="reference internal" href="keytab_def.html">keytab</a></li>
-<li class="toctree-l1"><a class="reference internal" href="rcache_def.html">replay cache</a></li>
-<li class="toctree-l1"><a class="reference internal" href="stash_file_def.html">stash file</a></li>
-<li class="toctree-l1"><a class="reference internal" href="date_format.html">Supported date and time formats</a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Kerberos V5 concepts</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1 current"><a class="current reference internal" href="#">Kerberos V5 concepts</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="ccache_def.html">Credential cache</a></li>
-<li class="toctree-l2"><a class="reference internal" href="keytab_def.html">keytab</a></li>
-<li class="toctree-l2"><a class="reference internal" href="rcache_def.html">replay cache</a></li>
-<li class="toctree-l2"><a class="reference internal" href="stash_file_def.html">stash file</a></li>
-<li class="toctree-l2"><a class="reference internal" href="date_format.html">Supported date and time formats</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../build/osconf.html" title="osconf.hin"
- >previous</a> |
- <a href="ccache_def.html" title="Credential cache"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Kerberos V5 concepts">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>keytab — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="replay cache" href="rcache_def.html" />
- <link rel="prev" title="Credential cache" href="ccache_def.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ccache_def.html" title="Credential cache"
- accesskey="P">previous</a> |
- <a href="rcache_def.html" title="replay cache"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__keytab">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="keytab">
-<span id="keytab-definition"></span><h1>keytab<a class="headerlink" href="#keytab" title="Permalink to this headline">¶</a></h1>
-<p>A keytab (short for “key table”) stores long-term keys for one or more
-principals. Keytabs are normally represented by files in a standard
-format, although in rare cases they can be represented in other ways.
-Keytabs are used most often to allow server applications to accept
-authentications from clients, but can also be used to obtain initial
-credentials for client applications.</p>
-<p>Keytabs are named using the format <em>type</em><code class="docutils literal"><span class="pre">:</span></code><em>value</em>. Usually
-<em>type</em> is <code class="docutils literal"><span class="pre">FILE</span></code> and <em>value</em> is the absolute pathname of the file.
-The other possible value for <em>type</em> is <code class="docutils literal"><span class="pre">MEMORY</span></code>, which indicates a
-temporary keytab stored in the memory of the current process.</p>
-<p>A keytab contains one or more entries, where each entry consists of a
-timestamp (indicating when the entry was written to the keytab), a
-principal name, a key version number, an encryption type, and the
-encryption key itself.</p>
-<p>A keytab can be displayed using the <a class="reference internal" href="../user/user_commands/klist.html#klist-1"><span class="std std-ref">klist</span></a> command with the
-<code class="docutils literal"><span class="pre">-k</span></code> option. Keytabs can be created or appended to by extracting
-keys from the KDC database using the <a class="reference internal" href="../admin/admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a> <a class="reference internal" href="../admin/admin_commands/kadmin_local.html#ktadd"><span class="std std-ref">ktadd</span></a>
-command. Keytabs can be manipulated using the <a class="reference internal" href="../admin/admin_commands/ktutil.html#ktutil-1"><span class="std std-ref">ktutil</span></a> and
-<a class="reference internal" href="../admin/admin_commands/k5srvutil.html#k5srvutil-1"><span class="std std-ref">k5srvutil</span></a> commands.</p>
-<div class="section" id="default-keytab">
-<h2>Default keytab<a class="headerlink" href="#default-keytab" title="Permalink to this headline">¶</a></h2>
-<p>The default keytab is used by server applications if the application
-does not request a specific keytab. The name of the default keytab is
-determined by the following, in decreasing order of preference:</p>
-<ol class="arabic simple">
-<li>The <strong>KRB5_KTNAME</strong> environment variable.</li>
-<li>The <strong>default_keytab_name</strong> profile variable in <a class="reference internal" href="../admin/conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>.</li>
-<li>The hardcoded default, <a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a>.</li>
-</ol>
-</div>
-<div class="section" id="default-client-keytab">
-<h2>Default client keytab<a class="headerlink" href="#default-client-keytab" title="Permalink to this headline">¶</a></h2>
-<p>The default client keytab is used, if it is present and readable, to
-automatically obtain initial credentials for GSSAPI client
-applications. The principal name of the first entry in the client
-keytab is used by default when obtaining initial credentials. The
-name of the default client keytab is determined by the following, in
-decreasing order of preference:</p>
-<ol class="arabic simple">
-<li>The <strong>KRB5_CLIENT_KTNAME</strong> environment variable.</li>
-<li>The <strong>default_client_keytab_name</strong> profile variable in
-<a class="reference internal" href="../admin/conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>.</li>
-<li>The hardcoded default, <a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">DEFCKTNAME</span></a>.</li>
-</ol>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">keytab</a><ul>
-<li><a class="reference internal" href="#default-keytab">Default keytab</a></li>
-<li><a class="reference internal" href="#default-client-keytab">Default client keytab</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Kerberos V5 concepts</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="ccache_def.html">Credential cache</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">keytab</a></li>
-<li class="toctree-l2"><a class="reference internal" href="rcache_def.html">replay cache</a></li>
-<li class="toctree-l2"><a class="reference internal" href="stash_file_def.html">stash file</a></li>
-<li class="toctree-l2"><a class="reference internal" href="date_format.html">Supported date and time formats</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ccache_def.html" title="Credential cache"
- >previous</a> |
- <a href="rcache_def.html" title="replay cache"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__keytab">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>replay cache — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="stash file" href="stash_file_def.html" />
- <link rel="prev" title="keytab" href="keytab_def.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="keytab_def.html" title="keytab"
- accesskey="P">previous</a> |
- <a href="stash_file_def.html" title="stash file"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__replay cache">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="replay-cache">
-<span id="rcache-definition"></span><h1>replay cache<a class="headerlink" href="#replay-cache" title="Permalink to this headline">¶</a></h1>
-<p>A replay cache (or “rcache”) keeps track of all authenticators
-recently presented to a service. If a duplicate authentication
-request is detected in the replay cache, an error message is sent to
-the application program.</p>
-<p>The replay cache interface, like the credential cache and
-<a class="reference internal" href="keytab_def.html#keytab-definition"><span class="std std-ref">keytab</span></a> interfaces, uses <cite>type:residual</cite> strings to
-indicate the type of replay cache and any associated cache naming
-data to use.</p>
-<div class="section" id="background-information">
-<h2>Background information<a class="headerlink" href="#background-information" title="Permalink to this headline">¶</a></h2>
-<p>Some Kerberos or GSSAPI services use a simple authentication mechanism
-where a message is sent containing an authenticator, which establishes
-the encryption key that the client will use for talking to the
-service. But nothing about that prevents an eavesdropper from
-recording the messages sent by the client, establishing a new
-connection, and re-sending or “replaying” the same messages; the
-replayed authenticator will establish the same encryption key for the
-new session, and the following messages will be decrypted and
-processed. The attacker may not know what the messages say, and can’t
-generate new messages under the same encryption key, but in some
-instances it may be harmful to the user (or helpful to the attacker)
-to cause the server to see the same messages again a second time. For
-example, if the legitimate client sends “delete first message in
-mailbox”, a replay from an attacker may delete another, different
-“first” message. (Protocol design to guard against such problems has
-been discussed in <span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4120.html#section-10"><strong>RFC 4120#section-10</strong></a>.)</p>
-<p>Even if one protocol uses further protection to verify that the client
-side of the connection actually knows the encryption keys (and thus is
-presumably a legitimate user), if another service uses the same
-service principal name, it may be possible to record an authenticator
-used with the first protocol and “replay” it against the second.</p>
-<p>The replay cache mitigates these attacks somewhat, by keeping track of
-authenticators that have been seen until their five-minute window
-expires. Different authenticators generated by multiple connections
-from the same legitimate client will generally have different
-timestamps, and thus will not be considered the same.</p>
-<p>This mechanism isn’t perfect. If a message is sent to one application
-server but a man-in-the-middle attacker can prevent it from actually
-arriving at that server, the attacker could then use the authenticator
-(once!) against a different service on the same host. This could be a
-problem if the message from the client included something more than
-authentication in the first message that could be useful to the
-attacker (which is uncommon; in most protocols the server has to
-indicate a successful authentication before the client sends
-additional messages), or if the simple act of presenting the
-authenticator triggers some interesting action in the service being
-attacked.</p>
-</div>
-<div class="section" id="replay-cache-types">
-<h2>Replay cache types<a class="headerlink" href="#replay-cache-types" title="Permalink to this headline">¶</a></h2>
-<p>Unlike the credential cache and keytab interfaces, replay cache types
-are in lowercase. The following types are defined:</p>
-<ol class="arabic simple">
-<li><strong>none</strong> disables the replay cache. The residual value is ignored.</li>
-<li><strong>file2</strong> (new in release 1.18) uses a hash-based format to store
-replay records. The file may grow to accommodate hash collisions.
-The residual value is the filename.</li>
-<li><strong>dfl</strong> is the default type if no environment variable or
-configuration specifies a different type. It stores replay data in
-a file2 replay cache with a filename based on the effective uid.
-The residual value is ignored.</li>
-</ol>
-<p>For the dfl type, the location of the replay cache file is determined
-as follows:</p>
-<ol class="arabic simple">
-<li>The directory is taken from the <strong>KRB5RCACHEDIR</strong> environment
-variable, or the <strong>TMPDIR</strong> environment variable, or a temporary
-directory determined at configuration time such as <code class="docutils literal"><span class="pre">/var/tmp</span></code>, in
-descending order of preference.</li>
-<li>The filename is <code class="docutils literal"><span class="pre">krb5_EUID.rcache2</span></code> where EUID is the effective
-uid of the process.</li>
-<li>The file is opened without following symbolic links, and ownership
-of the file is verified to match the effective uid.</li>
-</ol>
-<p>On Windows, the directory for the dfl type is the local appdata
-directory, unless overridden by the <strong>KRB5RCACHEDIR</strong> environment
-variable. The filename on Windows is <code class="docutils literal"><span class="pre">krb5.rcache2</span></code>, and the file
-is opened normally.</p>
-</div>
-<div class="section" id="default-replay-cache-name">
-<h2>Default replay cache name<a class="headerlink" href="#default-replay-cache-name" title="Permalink to this headline">¶</a></h2>
-<p>The default replay cache name is determined by the following, in
-descending order of priority:</p>
-<ol class="arabic simple">
-<li>The <strong>KRB5RCACHENAME</strong> environment variable (new in release 1.18).</li>
-<li>The <strong>KRB5RCACHETYPE</strong> environment variable. If this variable is
-set, the residual value is empty.</li>
-<li>The <strong>default_rcache_name</strong> profile variable in <a class="reference internal" href="../admin/conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>
-(new in release 1.18).</li>
-<li>If none of the above are set, the default replay cache name is
-<code class="docutils literal"><span class="pre">dfl:</span></code>.</li>
-</ol>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">replay cache</a><ul>
-<li><a class="reference internal" href="#background-information">Background information</a></li>
-<li><a class="reference internal" href="#replay-cache-types">Replay cache types</a></li>
-<li><a class="reference internal" href="#default-replay-cache-name">Default replay cache name</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Kerberos V5 concepts</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="ccache_def.html">Credential cache</a></li>
-<li class="toctree-l2"><a class="reference internal" href="keytab_def.html">keytab</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">replay cache</a></li>
-<li class="toctree-l2"><a class="reference internal" href="stash_file_def.html">stash file</a></li>
-<li class="toctree-l2"><a class="reference internal" href="date_format.html">Supported date and time formats</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="keytab_def.html" title="keytab"
- >previous</a> |
- <a href="stash_file_def.html" title="stash file"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__replay cache">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>stash file — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Supported date and time formats" href="date_format.html" />
- <link rel="prev" title="replay cache" href="rcache_def.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="rcache_def.html" title="replay cache"
- accesskey="P">previous</a> |
- <a href="date_format.html" title="Supported date and time formats"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__stash file">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="stash-file">
-<span id="stash-definition"></span><h1>stash file<a class="headerlink" href="#stash-file" title="Permalink to this headline">¶</a></h1>
-<p>The stash file is a local copy of the master key that resides in
-encrypted form on the KDC’s local disk. The stash file is used to
-authenticate the KDC to itself automatically before starting the
-<a class="reference internal" href="../admin/admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a> and <a class="reference internal" href="../admin/admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a> daemons (e.g., as part of the
-machine’s boot sequence). The stash file, like the keytab file (see
-<a class="reference internal" href="../admin/install_appl_srv.html#keytab-file"><span class="std std-ref">The keytab file</span></a>) is a potential point-of-entry for a break-in, and
-if compromised, would allow unrestricted access to the Kerberos
-database. If you choose to install a stash file, it should be
-readable only by root, and should exist only on the KDC’s local disk.
-The file should not be part of any backup of the machine, unless
-access to the backup data is secured as tightly as access to the
-master password itself.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">If you choose not to install a stash file, the KDC will prompt you for the master key each time it starts up.
-This means that the KDC will not be able to start automatically, such as after a system reboot.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">stash file</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Kerberos V5 concepts</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="ccache_def.html">Credential cache</a></li>
-<li class="toctree-l2"><a class="reference internal" href="keytab_def.html">keytab</a></li>
-<li class="toctree-l2"><a class="reference internal" href="rcache_def.html">replay cache</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">stash file</a></li>
-<li class="toctree-l2"><a class="reference internal" href="date_format.html">Supported date and time formats</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="rcache_def.html" title="replay cache"
- >previous</a> |
- <a href="date_format.html" title="Supported date and time formats"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__stash file">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Organization of the source directory — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Doing the build" href="doing_build.html" />
- <link rel="prev" title="Building Kerberos V5" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="Building Kerberos V5"
- accesskey="P">previous</a> |
- <a href="doing_build.html" title="Doing the build"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Organization of the source directory">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="organization-of-the-source-directory">
-<h1>Organization of the source directory<a class="headerlink" href="#organization-of-the-source-directory" title="Permalink to this headline">¶</a></h1>
-<p>Below is a brief overview of the organization of the complete source
-directory. More detailed descriptions follow.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="12%" />
-<col width="88%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td>appl</td>
-<td>Kerberos application client and server programs</td>
-</tr>
-<tr class="row-even"><td>ccapi</td>
-<td>Credential cache services</td>
-</tr>
-<tr class="row-odd"><td>clients</td>
-<td>Kerberos V5 user programs (See <a class="reference internal" href="../user/user_commands/index.html#user-commands"><span class="std std-ref">User commands</span></a>)</td>
-</tr>
-<tr class="row-even"><td>config</td>
-<td>Configure scripts</td>
-</tr>
-<tr class="row-odd"><td>config-files</td>
-<td>Sample Kerberos configuration files</td>
-</tr>
-<tr class="row-even"><td>include</td>
-<td>include files needed to build the Kerberos system</td>
-</tr>
-<tr class="row-odd"><td>kadmin</td>
-<td>Administrative interface to the Kerberos database: <a class="reference internal" href="../admin/admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>, <a class="reference internal" href="../admin/admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>, <a class="reference internal" href="../admin/admin_commands/ktutil.html#ktutil-1"><span class="std std-ref">ktutil</span></a>.</td>
-</tr>
-<tr class="row-even"><td>kdc</td>
-<td>Kerberos V5 Authentication Service and Key Distribution Center</td>
-</tr>
-<tr class="row-odd"><td><a class="reference internal" href="#lib">lib</a></td>
-<td>Libraries for use with/by Kerberos V5</td>
-</tr>
-<tr class="row-even"><td>plugins</td>
-<td>Kerberos plugins directory</td>
-</tr>
-<tr class="row-odd"><td>po</td>
-<td>Localization infrastructure</td>
-</tr>
-<tr class="row-even"><td>prototype</td>
-<td>Templates files containing the MIT copyright message and a placeholder for the title and description of the file.</td>
-</tr>
-<tr class="row-odd"><td>kprop</td>
-<td>Utilities for propagating the database to replica KDCs <a class="reference internal" href="../admin/admin_commands/kprop.html#kprop-8"><span class="std std-ref">kprop</span></a> and <a class="reference internal" href="../admin/admin_commands/kpropd.html#kpropd-8"><span class="std std-ref">kpropd</span></a></td>
-</tr>
-<tr class="row-even"><td>tests</td>
-<td>Test suite</td>
-</tr>
-<tr class="row-odd"><td><a class="reference internal" href="#util">util</a></td>
-<td>Various utilities for building/configuring the code, sending bug reports, etc.</td>
-</tr>
-<tr class="row-even"><td>windows</td>
-<td>Source code for building Kerberos V5 on Windows (see windows/README)</td>
-</tr>
-</tbody>
-</table>
-<div class="section" id="lib">
-<span id="id1"></span><h2>lib<a class="headerlink" href="#lib" title="Permalink to this headline">¶</a></h2>
-<p>The lib directory contain several subdirectories as well as some
-definition and glue files.</p>
-<blockquote>
-<div><ul class="simple">
-<li>The apputils directory contains the code for the generic network
-servicing.</li>
-<li>The crypto subdirectory contains the Kerberos V5 encryption
-library.</li>
-<li>The gssapi library contains the Generic Security Services API,
-which is a library of commands to be used in secure client-server
-communication.</li>
-<li>The kadm5 directory contains the libraries for the KADM5
-administration utilities.</li>
-<li>The Kerberos 5 database libraries are contained in kdb.</li>
-<li>The krb5 directory contains Kerberos 5 API.</li>
-<li>The rpc directory contains the API for the Kerberos Remote
-Procedure Call protocol.</li>
-</ul>
-</div></blockquote>
-</div>
-<div class="section" id="util">
-<span id="id2"></span><h2>util<a class="headerlink" href="#util" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt>The util directory contains several utility programs and libraries.</dt>
-<dd><ul class="first last simple">
-<li>the programs used to configure and build the code, such as
-autoconf, lndir, kbuild, reconf, and makedepend, are in this
-directory.</li>
-<li>the profile directory contains most of the functions which parse
-the Kerberos configuration files (krb5.conf and kdc.conf).</li>
-<li>the Kerberos error table library and utilities (et);</li>
-<li>the Sub-system library and utilities (ss);</li>
-<li>database utilities (db2);</li>
-<li>pseudo-terminal utilities (pty);</li>
-<li>bug-reporting program send-pr;</li>
-<li>a generic support library support used by several of our other
-libraries;</li>
-<li>the build infrastructure for building lightweight Kerberos client
-(collected-client-lib)</li>
-<li>the tool for validating Kerberos configuration files
-(confvalidator);</li>
-<li>the toolkit for kernel integrators for building krb5 code subsets
-(gss-kernel-lib);</li>
-<li>source code for building Kerberos V5 on MacOS (mac)</li>
-<li>Windows getopt operations (windows)</li>
-</ul>
-</dd>
-</dl>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Organization of the source directory</a><ul>
-<li><a class="reference internal" href="#lib">lib</a></li>
-<li><a class="reference internal" href="#util">util</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Building Kerberos V5</a><ul class="current">
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Organization of the source directory</a></li>
-<li class="toctree-l2"><a class="reference internal" href="doing_build.html">Doing the build</a></li>
-<li class="toctree-l2"><a class="reference internal" href="options2configure.html">Options to <em>configure</em></a></li>
-<li class="toctree-l2"><a class="reference internal" href="osconf.html">osconf.hin</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="Building Kerberos V5"
- >previous</a> |
- <a href="doing_build.html" title="Doing the build"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Organization of the source directory">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Doing the build — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Options to configure" href="options2configure.html" />
- <link rel="prev" title="Organization of the source directory" href="directory_org.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="directory_org.html" title="Organization of the source directory"
- accesskey="P">previous</a> |
- <a href="options2configure.html" title="Options to configure"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Doing the build">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="doing-the-build">
-<h1>Doing the build<a class="headerlink" href="#doing-the-build" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="building-within-a-single-tree">
-<span id="do-build"></span><h2>Building within a single tree<a class="headerlink" href="#building-within-a-single-tree" title="Permalink to this headline">¶</a></h2>
-<p>If you only need to build Kerberos for one platform, using a single
-directory tree which contains both the source files and the object
-files is the simplest. However, if you need to maintain Kerberos for
-a large number of platforms, you will probably want to use separate
-build trees for each platform. We recommend that you look at OS
-Incompatibilities, for notes that we have on particular operating
-systems.</p>
-<p>If you don’t want separate build trees for each architecture, then use
-the following abbreviated procedure:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">cd</span> <span class="o">/</span><span class="n">u1</span><span class="o">/</span><span class="n">krb5</span><span class="o">-</span><span class="n">VERSION</span><span class="o">/</span><span class="n">src</span>
-<span class="o">./</span><span class="n">configure</span>
-<span class="n">make</span>
-</pre></div>
-</div>
-<p>That’s it!</p>
-</div>
-<div class="section" id="building-with-separate-build-directories">
-<h2>Building with separate build directories<a class="headerlink" href="#building-with-separate-build-directories" title="Permalink to this headline">¶</a></h2>
-<p>If you wish to keep separate build directories for each platform, you
-can do so using the following procedure. (Note, this requires that
-your make program support VPATH. GNU’s make will provide this
-functionality, for example.) If your make program does not support
-this, see the next section.</p>
-<p>For example, if you wish to store the binaries in <code class="docutils literal"><span class="pre">tmpbuild</span></code> build
-directory you might use the following procedure:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">mkdir</span> <span class="o">/</span><span class="n">u1</span><span class="o">/</span><span class="n">tmpbuild</span>
-<span class="n">cd</span> <span class="o">/</span><span class="n">u1</span><span class="o">/</span><span class="n">tmpbuild</span>
-<span class="o">/</span><span class="n">u1</span><span class="o">/</span><span class="n">krb5</span><span class="o">-</span><span class="n">VERSION</span><span class="o">/</span><span class="n">src</span><span class="o">/</span><span class="n">configure</span>
-<span class="n">make</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="building-using-lndir">
-<h2>Building using lndir<a class="headerlink" href="#building-using-lndir" title="Permalink to this headline">¶</a></h2>
-<p>If you wish to keep separate build directories for each platform, and
-you do not have access to a make program which supports VPATH, all is
-not lost. You can use the lndir program to create symbolic link trees
-in your build directory.</p>
-<p>For example, if you wish to create a build directory for solaris
-binaries you might use the following procedure:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span>mkdir /u1/krb5-VERSION/solaris
-cd /u1/krb5-VERSION/solaris
-/u1/krb5-VERSION/src/util/lndir `pwd`/../src
-./configure
-make
-</pre></div>
-</div>
-<p>You must give an absolute pathname to lndir because it has a bug that
-makes it fail for relative pathnames. Note that this version differs
-from the latest version as distributed and installed by the
-XConsortium with X11R6. Either version should be acceptable.</p>
-</div>
-<div class="section" id="installing-the-binaries">
-<h2>Installing the binaries<a class="headerlink" href="#installing-the-binaries" title="Permalink to this headline">¶</a></h2>
-<p>Once you have built Kerberos, you should install the binaries. You can
-do this by running:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">make</span> <span class="n">install</span>
-</pre></div>
-</div>
-<p>If you want to install the binaries into a destination directory that
-is not their final destination, which may be convenient if you want to
-build a binary distribution to be deployed on multiple hosts, you may
-use:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">make</span> <span class="n">install</span> <span class="n">DESTDIR</span><span class="o">=/</span><span class="n">path</span><span class="o">/</span><span class="n">to</span><span class="o">/</span><span class="n">destdir</span>
-</pre></div>
-</div>
-<p>This will install the binaries under <em>DESTDIR/PREFIX</em>, e.g., the user
-programs will install into <em>DESTDIR/PREFIX/bin</em>, the libraries into
-<em>DESTDIR/PREFIX/lib</em>, etc. <em>DESTDIR</em> must be an absolute path.</p>
-<p>Some implementations of make allow multiple commands to be run in
-parallel, for faster builds. We test our Makefiles in parallel builds
-with GNU make only; they may not be compatible with other parallel
-build implementations.</p>
-</div>
-<div class="section" id="testing-the-build">
-<h2>Testing the build<a class="headerlink" href="#testing-the-build" title="Permalink to this headline">¶</a></h2>
-<p>The Kerberos V5 distribution comes with built-in regression tests. To
-run them, simply type the following command while in the top-level
-build directory (i.e., the directory where you sent typed make to
-start building Kerberos; see <a class="reference internal" href="#do-build"><span class="std std-ref">Building within a single tree</span></a>):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">make</span> <span class="n">check</span>
-</pre></div>
-</div>
-<p>On some operating systems, you have to run <code class="docutils literal"><span class="pre">make</span> <span class="pre">install</span></code> before
-running <code class="docutils literal"><span class="pre">make</span> <span class="pre">check</span></code>, or the test suite will pick up installed
-versions of Kerberos libraries rather than the newly built ones. You
-can install into a prefix that isn’t in the system library search
-path, though. Alternatively, you can configure with
-<strong>-</strong><strong>-disable-rpath</strong>, which renders the build tree less suitable
-for installation, but allows testing without interference from
-previously installed libraries.</p>
-<p>There are additional regression tests available, which are not run
-by <code class="docutils literal"><span class="pre">make</span> <span class="pre">check</span></code>. These tests require manual setup and teardown of
-support infrastructure which is not easily automated, or require
-excessive resources for ordinary use. The procedure for running
-the manual tests is documented at
-<a class="reference external" href="https://k5wiki.kerberos.org/wiki/Manual_Testing">https://k5wiki.kerberos.org/wiki/Manual_Testing</a>.</p>
-</div>
-<div class="section" id="cleaning-up-the-build">
-<h2>Cleaning up the build<a class="headerlink" href="#cleaning-up-the-build" title="Permalink to this headline">¶</a></h2>
-<ul class="simple">
-<li>Use <code class="docutils literal"><span class="pre">make</span> <span class="pre">clean</span></code> to remove all files generated by running make
-command.</li>
-<li>Use <code class="docutils literal"><span class="pre">make</span> <span class="pre">distclean</span></code> to remove all files generated by running
-./configure script. After running <code class="docutils literal"><span class="pre">make</span> <span class="pre">distclean</span></code> your source
-tree (ideally) should look like the raw (just un-tarred) source
-tree.</li>
-</ul>
-</div>
-<div class="section" id="using-autoconf">
-<h2>Using autoconf<a class="headerlink" href="#using-autoconf" title="Permalink to this headline">¶</a></h2>
-<p>(If you are not a developer, you can ignore this section.)</p>
-<p>In the Kerberos V5 source directory, there is a configure script which
-automatically determines the compilation environment and creates the
-proper Makefiles for a particular platform. This configure script is
-generated using autoconf, which you should already have installed if
-you will be making changes to <code class="docutils literal"><span class="pre">src/configure.in</span></code>.</p>
-<p>Normal users will not need to worry about running autoconf; the
-distribution comes with the configure script already prebuilt.</p>
-<p>The autoconf package comes with a script called <code class="docutils literal"><span class="pre">autoreconf</span></code> that
-will automatically run <code class="docutils literal"><span class="pre">autoconf</span></code> and <code class="docutils literal"><span class="pre">autoheader</span></code> as needed. You
-should run <code class="docutils literal"><span class="pre">autoreconf</span></code> from the top source directory, e.g.:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">cd</span> <span class="o">/</span><span class="n">u1</span><span class="o">/</span><span class="n">krb5</span><span class="o">-</span><span class="n">VERSION</span><span class="o">/</span><span class="n">src</span>
-<span class="n">autoreconf</span> <span class="o">--</span><span class="n">verbose</span>
-</pre></div>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Doing the build</a><ul>
-<li><a class="reference internal" href="#building-within-a-single-tree">Building within a single tree</a></li>
-<li><a class="reference internal" href="#building-with-separate-build-directories">Building with separate build directories</a></li>
-<li><a class="reference internal" href="#building-using-lndir">Building using lndir</a></li>
-<li><a class="reference internal" href="#installing-the-binaries">Installing the binaries</a></li>
-<li><a class="reference internal" href="#testing-the-build">Testing the build</a></li>
-<li><a class="reference internal" href="#cleaning-up-the-build">Cleaning up the build</a></li>
-<li><a class="reference internal" href="#using-autoconf">Using autoconf</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Building Kerberos V5</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="directory_org.html">Organization of the source directory</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Doing the build</a></li>
-<li class="toctree-l2"><a class="reference internal" href="options2configure.html">Options to <em>configure</em></a></li>
-<li class="toctree-l2"><a class="reference internal" href="osconf.html">osconf.hin</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="directory_org.html" title="Organization of the source directory"
- >previous</a> |
- <a href="options2configure.html" title="Options to configure"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Doing the build">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Building Kerberos V5 — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Organization of the source directory" href="directory_org.html" />
- <link rel="prev" title="KDC policy interface (kdcpolicy)" href="../plugindev/kdcpolicy.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../plugindev/kdcpolicy.html" title="KDC policy interface (kdcpolicy)"
- accesskey="P">previous</a> |
- <a href="directory_org.html" title="Organization of the source directory"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Building Kerberos V5">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="building-kerberos-v5">
-<span id="build-v5"></span><h1>Building Kerberos V5<a class="headerlink" href="#building-kerberos-v5" title="Permalink to this headline">¶</a></h1>
-<p>This section details how to build and install MIT Kerberos software
-from the source.</p>
-<div class="section" id="prerequisites">
-<h2>Prerequisites<a class="headerlink" href="#prerequisites" title="Permalink to this headline">¶</a></h2>
-<p>In order to build Kerberos V5, you will need approximately 60-70
-megabytes of disk space. The exact amount will vary depending on the
-platform and whether the distribution is compiled with debugging
-symbol tables or not.</p>
-<p>Your C compiler must conform to ANSI C (ISO/IEC 9899:1990, “c89”).
-Some operating systems do not have an ANSI C compiler, or their
-default compiler requires extra command-line options to enable ANSI C
-conformance.</p>
-<p>If you wish to keep a separate build tree, which contains the compiled
-*.o file and executables, separate from your source tree, you will
-need a make program which supports <strong>VPATH</strong>, or you will need to use
-a tool such as lndir to produce a symbolic link tree for your build
-tree.</p>
-</div>
-<div class="section" id="obtaining-the-software">
-<h2>Obtaining the software<a class="headerlink" href="#obtaining-the-software" title="Permalink to this headline">¶</a></h2>
-<p>The source code can be obtained from MIT Kerberos Distribution page,
-at <a class="reference external" href="https://kerberos.org/dist/index.html">https://kerberos.org/dist/index.html</a>.
-The MIT Kerberos distribution comes in an archive file, generally
-named krb5-VERSION-signed.tar, where <em>VERSION</em> is a placeholder for
-the major and minor versions of MIT Kerberos. (For example, MIT
-Kerberos 1.9 has major version “1” and minor version “9”.)</p>
-<p>The krb5-VERSION-signed.tar contains a compressed tar file consisting
-of the sources for all of Kerberos (generally named
-krb5-VERSION.tar.gz) and a PGP signature file for this source tree
-(generally named krb5-VERSION.tar.gz.asc). MIT highly recommends that
-you verify the integrity of the source code using this signature,
-e.g., by running:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">tar</span> <span class="n">xf</span> <span class="n">krb5</span><span class="o">-</span><span class="n">VERSION</span><span class="o">-</span><span class="n">signed</span><span class="o">.</span><span class="n">tar</span>
-<span class="n">gpg</span> <span class="o">--</span><span class="n">verify</span> <span class="n">krb5</span><span class="o">-</span><span class="n">VERSION</span><span class="o">.</span><span class="n">tar</span><span class="o">.</span><span class="n">gz</span><span class="o">.</span><span class="n">asc</span>
-</pre></div>
-</div>
-<p>Unpack krb5-VERSION.tar.gz in some directory. In this section we will assume
-that you have chosen the top directory of the distribution the directory
-<code class="docutils literal"><span class="pre">/u1/krb5-VERSION</span></code>.</p>
-<p>Review the README file for the license, copyright and other sprecific to the
-distribution information.</p>
-</div>
-<div class="section" id="contents">
-<h2>Contents<a class="headerlink" href="#contents" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="directory_org.html">Organization of the source directory</a></li>
-<li class="toctree-l1"><a class="reference internal" href="doing_build.html">Doing the build</a></li>
-<li class="toctree-l1"><a class="reference internal" href="options2configure.html">Options to <em>configure</em></a></li>
-<li class="toctree-l1"><a class="reference internal" href="osconf.html">osconf.hin</a></li>
-</ul>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Building Kerberos V5</a><ul>
-<li><a class="reference internal" href="#prerequisites">Prerequisites</a></li>
-<li><a class="reference internal" href="#obtaining-the-software">Obtaining the software</a></li>
-<li><a class="reference internal" href="#contents">Contents</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1 current"><a class="current reference internal" href="#">Building Kerberos V5</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="directory_org.html">Organization of the source directory</a></li>
-<li class="toctree-l2"><a class="reference internal" href="doing_build.html">Doing the build</a></li>
-<li class="toctree-l2"><a class="reference internal" href="options2configure.html">Options to <em>configure</em></a></li>
-<li class="toctree-l2"><a class="reference internal" href="osconf.html">osconf.hin</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../plugindev/kdcpolicy.html" title="KDC policy interface (kdcpolicy)"
- >previous</a> |
- <a href="directory_org.html" title="Organization of the source directory"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Building Kerberos V5">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Options to configure — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="osconf.hin" href="osconf.html" />
- <link rel="prev" title="Doing the build" href="doing_build.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="doing_build.html" title="Doing the build"
- accesskey="P">previous</a> |
- <a href="osconf.html" title="osconf.hin"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Options to <em>configure</em>">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="options-to-configure">
-<span id="options2configure"></span><h1>Options to <em>configure</em><a class="headerlink" href="#options-to-configure" title="Permalink to this headline">¶</a></h1>
-<p>There are a number of options to configure which you can use to
-control how the Kerberos distribution is built.</p>
-<div class="section" id="most-commonly-used-options">
-<h2>Most commonly used options<a class="headerlink" href="#most-commonly-used-options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-</strong><strong>-help</strong></dt>
-<dd>Provides help to configure. This will list the set of commonly
-used options for building Kerberos.</dd>
-<dt><strong>-</strong><strong>-prefix=</strong><em>PREFIX</em></dt>
-<dd>By default, Kerberos will install the package’s files rooted at
-<code class="docutils literal"><span class="pre">/usr/local</span></code>. If you desire to place the binaries into the
-directory <em>PREFIX</em>, use this option.</dd>
-<dt><strong>-</strong><strong>-exec-prefix=</strong><em>EXECPREFIX</em></dt>
-<dd>This option allows one to separate the architecture independent
-programs from the host-dependent files (configuration files,
-manual pages). Use this option to install architecture-dependent
-programs in <em>EXECPREFIX</em>. The default location is the value of
-specified by <strong>-</strong><strong>-prefix</strong> option.</dd>
-<dt><strong>-</strong><strong>-localstatedir=</strong><em>LOCALSTATEDIR</em></dt>
-<dd>This option sets the directory for locally modifiable
-single-machine data. In Kerberos, this mostly is useful for
-setting a location for the KDC data files, as they will be
-installed in <code class="docutils literal"><span class="pre">LOCALSTATEDIR/krb5kdc</span></code>, which is by default
-<code class="docutils literal"><span class="pre">PREFIX/var/krb5kdc</span></code>.</dd>
-<dt><strong>-</strong><strong>-with-netlib</strong>[=<em>libs</em>]</dt>
-<dd>Allows for suppression of or replacement of network libraries. By
-default, Kerberos V5 configuration will look for <code class="docutils literal"><span class="pre">-lnsl</span></code> and
-<code class="docutils literal"><span class="pre">-lsocket</span></code>. If your operating system has a broken resolver
-library or fails to pass the tests in <code class="docutils literal"><span class="pre">src/tests/resolv</span></code>, you
-will need to use this option.</dd>
-<dt><strong>-</strong><strong>-enable-dns-for-realm</strong></dt>
-<dd>Enable the use of DNS to look up a host’s Kerberos realm,
-if the information is not provided in
-<a class="reference internal" href="../admin/conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>. See <a class="reference internal" href="../admin/realm_config.html#mapping-hostnames"><span class="std std-ref">Mapping hostnames onto Kerberos realms</span></a>
-for information about using DNS to determine the default realm.
-DNS lookups for realm names are disabled by default.</dd>
-<dt><strong>-</strong><strong>-with-system-et</strong></dt>
-<dd><p class="first">Use an installed version of the error-table (et) support software,
-the compile_et program, the com_err.h header file and the com_err
-library. If these are not in the default locations, you may wish
-to specify <code class="docutils literal"><span class="pre">CPPFLAGS=-I/some/dir</span></code> and
-<code class="docutils literal"><span class="pre">LDFLAGS=-L/some/other/dir</span></code> options at configuration time as
-well.</p>
-<p class="last">If this option is not given, a version supplied with the Kerberos
-sources will be built and installed along with the rest of the
-Kerberos tree, for Kerberos applications to link against.</p>
-</dd>
-<dt><strong>-</strong><strong>-with-system-ss</strong></dt>
-<dd><p class="first">Use an installed version of the subsystem command-line interface
-software, the mk_cmds program, the <code class="docutils literal"><span class="pre">ss/ss.h</span></code> header file and the
-ss library. If these are not in the default locations, you may
-wish to specify <code class="docutils literal"><span class="pre">CPPFLAGS=-I/some/dir</span></code> and
-<code class="docutils literal"><span class="pre">LDFLAGS=-L/some/other/dir</span></code> options at configuration time as
-well. See also the <strong>SS_LIB</strong> option.</p>
-<p class="last">If this option is not given, the ss library supplied with the
-Kerberos sources will be compiled and linked into those programs
-that need it; it will not be installed separately.</p>
-</dd>
-<dt><strong>-</strong><strong>-with-system-db</strong></dt>
-<dd><p class="first">Use an installed version of the Berkeley DB package, which must
-provide an API compatible with version 1.85. This option is
-unsupported and untested. In particular, we do not know if the
-database-rename code used in the dumpfile load operation will
-behave properly.</p>
-<p class="last">If this option is not given, a version supplied with the Kerberos
-sources will be built and installed. (We are not updating this
-version at this time because of licensing issues with newer
-versions that we haven’t investigated sufficiently yet.)</p>
-</dd>
-</dl>
-</div>
-<div class="section" id="environment-variables">
-<h2>Environment variables<a class="headerlink" href="#environment-variables" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>CC=</strong><em>COMPILER</em></dt>
-<dd>Use <em>COMPILER</em> as the C compiler.</dd>
-<dt><strong>CFLAGS=</strong><em>FLAGS</em></dt>
-<dd>Use <em>FLAGS</em> as the default set of C compiler flags.</dd>
-<dt><strong>CPP=</strong><em>CPP</em></dt>
-<dd>C preprocessor to use. (e.g., <code class="docutils literal"><span class="pre">CPP='gcc</span> <span class="pre">-E'</span></code>)</dd>
-<dt><strong>CPPFLAGS=</strong><em>CPPOPTS</em></dt>
-<dd>Use <em>CPPOPTS</em> as the default set of C preprocessor flags. The
-most common use of this option is to select certain #define’s for
-use with the operating system’s include files.</dd>
-<dt><strong>DB_HEADER=</strong><em>headername</em></dt>
-<dd>If db.h is not the correct header file to include to compile
-against the Berkeley DB 1.85 API, specify the correct header file
-name with this option. For example, <code class="docutils literal"><span class="pre">DB_HEADER=db3/db_185.h</span></code>.</dd>
-<dt><strong>DB_LIB=</strong><em>libs</em>…</dt>
-<dd>If <code class="docutils literal"><span class="pre">-ldb</span></code> is not the correct library specification for the
-Berkeley DB library version to be used, override it with this
-option. For example, <code class="docutils literal"><span class="pre">DB_LIB=-ldb-3.3</span></code>.</dd>
-<dt><strong>DEFCCNAME=</strong><em>ccachename</em></dt>
-<dd>Override the built-in default credential cache name.
-For example, <code class="docutils literal"><span class="pre">DEFCCNAME=DIR:/var/run/user/%{USERID}/ccache</span></code>
-See <a class="reference internal" href="../admin/conf_files/krb5_conf.html#parameter-expansion"><span class="std std-ref">Parameter expansion</span></a> for information about supported
-parameter expansions.</dd>
-<dt><strong>DEFCKTNAME=</strong><em>keytabname</em></dt>
-<dd>Override the built-in default client keytab name.
-The format is the same as for <em>DEFCCNAME</em>.</dd>
-<dt><strong>DEFKTNAME=</strong><em>keytabname</em></dt>
-<dd>Override the built-in default keytab name.
-The format is the same as for <em>DEFCCNAME</em>.</dd>
-<dt><strong>LD=</strong><em>LINKER</em></dt>
-<dd>Use <em>LINKER</em> as the default loader if it should be different from
-C compiler as specified above.</dd>
-<dt><strong>LDFLAGS=</strong><em>LDOPTS</em></dt>
-<dd>This option informs the linker where to get additional libraries
-(e.g., <code class="docutils literal"><span class="pre">-L<lib</span> <span class="pre">dir></span></code>).</dd>
-<dt><strong>LIBS=</strong><em>LDNAME</em></dt>
-<dd>This option allows one to specify libraries to be passed to the
-linker (e.g., <code class="docutils literal"><span class="pre">-l<library></span></code>)</dd>
-<dt><strong>SS_LIB=</strong><em>libs</em>…</dt>
-<dd><p class="first">If <code class="docutils literal"><span class="pre">-lss</span></code> is not the correct way to link in your installed ss
-library, for example if additional support libraries are needed,
-specify the correct link options here. Some variants of this
-library are around which allow for Emacs-like line editing, but
-different versions require different support libraries to be
-explicitly specified.</p>
-<p class="last">This option is ignored if <strong>-</strong><strong>-with-system-ss</strong> is not specified.</p>
-</dd>
-<dt><strong>YACC</strong></dt>
-<dd>The ‘Yet Another C Compiler’ implementation to use. Defaults to
-the first program found out of: ‘<cite>bison -y</cite>’, ‘<cite>byacc</cite>’,
-‘<cite>yacc</cite>’.</dd>
-<dt><strong>YFLAGS</strong></dt>
-<dd>The list of arguments that will be passed by default to $YACC.
-This script will default YFLAGS to the empty string to avoid a
-default value of <code class="docutils literal"><span class="pre">-d</span></code> given by some make applications.</dd>
-</dl>
-</div>
-<div class="section" id="fine-tuning-of-the-installation-directories">
-<h2>Fine tuning of the installation directories<a class="headerlink" href="#fine-tuning-of-the-installation-directories" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-</strong><strong>-bindir=</strong><em>DIR</em></dt>
-<dd>User executables. Defaults to <code class="docutils literal"><span class="pre">EXECPREFIX/bin</span></code>, where
-<em>EXECPREFIX</em> is the path specified by <strong>-</strong><strong>-exec-prefix</strong>
-configuration option.</dd>
-<dt><strong>-</strong><strong>-sbindir=</strong><em>DIR</em></dt>
-<dd>System admin executables. Defaults to <code class="docutils literal"><span class="pre">EXECPREFIX/sbin</span></code>, where
-<em>EXECPREFIX</em> is the path specified by <strong>-</strong><strong>-exec-prefix</strong>
-configuration option.</dd>
-<dt><strong>-</strong><strong>-sysconfdir=</strong><em>DIR</em></dt>
-<dd>Read-only single-machine data such as krb5.conf.
-Defaults to <code class="docutils literal"><span class="pre">PREFIX/etc</span></code>, where
-<em>PREFIX</em> is the path specified by <strong>-</strong><strong>-prefix</strong> configuration
-option.</dd>
-<dt><strong>-</strong><strong>-libdir=</strong><em>DIR</em></dt>
-<dd>Object code libraries. Defaults to <code class="docutils literal"><span class="pre">EXECPREFIX/lib</span></code>, where
-<em>EXECPREFIX</em> is the path specified by <strong>-</strong><strong>-exec-prefix</strong>
-configuration option.</dd>
-<dt><strong>-</strong><strong>-includedir=</strong><em>DIR</em></dt>
-<dd>C header files. Defaults to <code class="docutils literal"><span class="pre">PREFIX/include</span></code>, where <em>PREFIX</em> is
-the path specified by <strong>-</strong><strong>-prefix</strong> configuration option.</dd>
-<dt><strong>-</strong><strong>-datarootdir=</strong><em>DATAROOTDIR</em></dt>
-<dd>Read-only architecture-independent data root. Defaults to
-<code class="docutils literal"><span class="pre">PREFIX/share</span></code>, where <em>PREFIX</em> is the path specified by
-<strong>-</strong><strong>-prefix</strong> configuration option.</dd>
-<dt><strong>-</strong><strong>-datadir=</strong><em>DIR</em></dt>
-<dd>Read-only architecture-independent data. Defaults to path
-specified by <strong>-</strong><strong>-datarootdir</strong> configuration option.</dd>
-<dt><strong>-</strong><strong>-localedir=</strong><em>DIR</em></dt>
-<dd>Locale-dependent data. Defaults to <code class="docutils literal"><span class="pre">DATAROOTDIR/locale</span></code>, where
-<em>DATAROOTDIR</em> is the path specified by <strong>-</strong><strong>-datarootdir</strong>
-configuration option.</dd>
-<dt><strong>-</strong><strong>-mandir=</strong><em>DIR</em></dt>
-<dd>Man documentation. Defaults to <code class="docutils literal"><span class="pre">DATAROOTDIR/man</span></code>, where
-<em>DATAROOTDIR</em> is the path specified by <strong>-</strong><strong>-datarootdir</strong>
-configuration option.</dd>
-</dl>
-</div>
-<div class="section" id="program-names">
-<h2>Program names<a class="headerlink" href="#program-names" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-</strong><strong>-program-prefix=</strong><em>PREFIX</em></dt>
-<dd>Prepend <em>PREFIX</em> to the names of the programs when installing
-them. For example, specifying <code class="docutils literal"><span class="pre">--program-prefix=mit-</span></code> at the
-configure time will cause the program named <code class="docutils literal"><span class="pre">abc</span></code> to be
-installed as <code class="docutils literal"><span class="pre">mit-abc</span></code>.</dd>
-<dt><strong>-</strong><strong>-program-suffix=</strong><em>SUFFIX</em></dt>
-<dd>Append <em>SUFFIX</em> to the names of the programs when installing them.
-For example, specifying <code class="docutils literal"><span class="pre">--program-suffix=-mit</span></code> at the configure
-time will cause the program named <code class="docutils literal"><span class="pre">abc</span></code> to be installed as
-<code class="docutils literal"><span class="pre">abc-mit</span></code>.</dd>
-<dt><strong>-</strong><strong>-program-transform-name=</strong><em>PROGRAM</em></dt>
-<dd>Run <code class="docutils literal"><span class="pre">sed</span> <span class="pre">-e</span> <span class="pre">PROGRAM</span></code> on installed program names. (<em>PROGRAM</em> is a
-sed script).</dd>
-</dl>
-</div>
-<div class="section" id="system-types">
-<h2>System types<a class="headerlink" href="#system-types" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-</strong><strong>-build=</strong><em>BUILD</em></dt>
-<dd>Configure for building on <em>BUILD</em>
-(e.g., <code class="docutils literal"><span class="pre">--build=x86_64-linux-gnu</span></code>).</dd>
-<dt><strong>-</strong><strong>-host=</strong><em>HOST</em></dt>
-<dd>Cross-compile to build programs to run on <em>HOST</em>
-(e.g., <code class="docutils literal"><span class="pre">--host=x86_64-linux-gnu</span></code>). By default, Kerberos V5
-configuration will look for “build” option.</dd>
-</dl>
-</div>
-<div class="section" id="optional-features">
-<h2>Optional features<a class="headerlink" href="#optional-features" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-</strong><strong>-disable-option-checking</strong></dt>
-<dd>Ignore unrecognized –enable/–with options.</dd>
-<dt><strong>-</strong><strong>-disable-</strong><em>FEATURE</em></dt>
-<dd>Do not include <em>FEATURE</em> (same as –enable-FEATURE=no).</dd>
-<dt><strong>-</strong><strong>-enable-</strong><em>FEATURE</em>[=<em>ARG</em>]</dt>
-<dd>Include <em>FEATURE</em> [ARG=yes].</dd>
-<dt><strong>-</strong><strong>-enable-maintainer-mode</strong></dt>
-<dd>Enable rebuilding of source files, Makefiles, etc.</dd>
-<dt><strong>-</strong><strong>-disable-delayed-initialization</strong></dt>
-<dd>Initialize library code when loaded. Defaults to delay until
-first use.</dd>
-<dt><strong>-</strong><strong>-disable-thread-support</strong></dt>
-<dd>Don’t enable thread support. Defaults to enabled.</dd>
-<dt><strong>-</strong><strong>-disable-rpath</strong></dt>
-<dd>Suppress run path flags in link lines.</dd>
-<dt><strong>-</strong><strong>-enable-athena</strong></dt>
-<dd>Build with MIT Project Athena configuration.</dd>
-<dt><strong>-</strong><strong>-disable-kdc-lookaside-cache</strong></dt>
-<dd>Disable the cache which detects client retransmits.</dd>
-<dt><strong>-</strong><strong>-disable-pkinit</strong></dt>
-<dd>Disable PKINIT plugin support.</dd>
-<dt><strong>-</strong><strong>-disable-aesni</strong></dt>
-<dd>Disable support for using AES instructions on x86 platforms.</dd>
-<dt><strong>-</strong><strong>-enable-asan</strong>[=<em>ARG</em>]</dt>
-<dd>Enable building with asan memory error checking. If <em>ARG</em> is
-given, it controls the -fsanitize compilation flag value (the
-default is “address”).</dd>
-</dl>
-</div>
-<div class="section" id="optional-packages">
-<h2>Optional packages<a class="headerlink" href="#optional-packages" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-</strong><strong>-with-</strong><em>PACKAGE</em>[=ARG]</dt>
-<dd>Use <em>PACKAGE</em> (e.g., <code class="docutils literal"><span class="pre">--with-imap</span></code>). The default value of <em>ARG</em>
-is <code class="docutils literal"><span class="pre">yes</span></code>.</dd>
-<dt><strong>-</strong><strong>-without-</strong><em>PACKAGE</em></dt>
-<dd>Do not use <em>PACKAGE</em> (same as <code class="docutils literal"><span class="pre">--with-PACKAGE=no</span></code>)
-(e.g., <code class="docutils literal"><span class="pre">--without-libedit</span></code>).</dd>
-<dt><strong>-</strong><strong>-with-size-optimizations</strong></dt>
-<dd>Enable a few optimizations to reduce code size possibly at some
-run-time cost.</dd>
-<dt><strong>-</strong><strong>-with-system-et</strong></dt>
-<dd>Use the com_err library and compile_et utility that are already
-installed on the system, instead of building and installing
-local versions.</dd>
-<dt><strong>-</strong><strong>-with-system-ss</strong></dt>
-<dd>Use the ss library and mk_cmds utility that are already installed
-on the system, instead of building and using private versions.</dd>
-<dt><strong>-</strong><strong>-with-system-db</strong></dt>
-<dd>Use the berkeley db utility already installed on the system,
-instead of using a private version. This option is not
-recommended; enabling it may result in incompatibility with key
-databases originating on other systems.</dd>
-<dt><strong>-</strong><strong>-with-netlib=</strong><em>LIBS</em></dt>
-<dd>Use the resolver library specified in <em>LIBS</em>. Use this variable
-if the C library resolver is insufficient or broken.</dd>
-<dt><strong>-</strong><strong>-with-hesiod=</strong><em>path</em></dt>
-<dd>Compile with Hesiod support. The <em>path</em> points to the Hesiod
-directory. By default Hesiod is unsupported.</dd>
-<dt><strong>-</strong><strong>-with-ldap</strong></dt>
-<dd>Compile OpenLDAP database backend module.</dd>
-<dt><strong>-</strong><strong>-with-lmdb</strong></dt>
-<dd>Compile LMDB database backend module.</dd>
-<dt><strong>-</strong><strong>-with-vague-errors</strong></dt>
-<dd>Do not send helpful errors to client. For example, if the KDC
-should return only vague error codes to clients.</dd>
-<dt><strong>-</strong><strong>-with-crypto-impl=</strong><em>IMPL</em></dt>
-<dd>Use specified crypto implementation (e.g., <strong>-</strong><strong>-with-crypto-impl=</strong><em>openssl</em>). The default is the native MIT
-Kerberos implementation <code class="docutils literal"><span class="pre">builtin</span></code>. The other currently
-implemented crypto backend is <code class="docutils literal"><span class="pre">openssl</span></code>. (See
-<a class="reference internal" href="../mitK5features.html#mitk5features"><span class="std std-ref">MIT Kerberos features</span></a>)</dd>
-<dt><strong>-</strong><strong>-without-libedit</strong></dt>
-<dd>Do not compile and link against libedit. Some utilities will no
-longer offer command history or completion in interactive mode if
-libedit is disabled.</dd>
-<dt><strong>-</strong><strong>-with-readline</strong></dt>
-<dd>Compile and link against GNU readline, as an alternative to libedit.</dd>
-<dt><strong>-</strong><strong>-with-system-verto</strong></dt>
-<dd><p class="first">Use an installed version of libverto. If the libverto header and
-library are not in default locations, you may wish to specify
-<code class="docutils literal"><span class="pre">CPPFLAGS=-I/some/dir</span></code> and <code class="docutils literal"><span class="pre">LDFLAGS=-L/some/other/dir</span></code> options
-at configuration time as well.</p>
-<p>If this option is not given, the build system will try to detect
-an installed version of libverto and use it if it is found.
-Otherwise, a version supplied with the Kerberos sources will be
-built and installed. The built-in version does not contain the
-full set of back-end modules and is not a suitable general
-replacement for the upstream version, but will work for the
-purposes of Kerberos.</p>
-<p class="last">Specifying <strong>-</strong><strong>-without-system-verto</strong> will cause the built-in
-version of libverto to be used unconditionally.</p>
-</dd>
-<dt><strong>-</strong><strong>-with-krb5-config=</strong><em>PATH</em></dt>
-<dd>Use the krb5-config program at <em>PATH</em> to obtain the build-time
-default credential cache, keytab, and client keytab names. The
-default is to use <code class="docutils literal"><span class="pre">krb5-config</span></code> from the program path. Specify
-<code class="docutils literal"><span class="pre">--without-krb5-config</span></code> to disable the use of krb5-config and
-use the usual built-in defaults.</dd>
-<dt><strong>-</strong><strong>-without-keyutils</strong></dt>
-<dd>Build without libkeyutils support. This disables the KEYRING
-credential cache type.</dd>
-</dl>
-</div>
-<div class="section" id="examples">
-<h2>Examples<a class="headerlink" href="#examples" title="Permalink to this headline">¶</a></h2>
-<p>For example, in order to configure Kerberos on a Solaris machine using
-the suncc compiler with the optimizer turned on, run the configure
-script with the following options:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="o">%</span> <span class="o">./</span><span class="n">configure</span> <span class="n">CC</span><span class="o">=</span><span class="n">suncc</span> <span class="n">CFLAGS</span><span class="o">=-</span><span class="n">O</span>
-</pre></div>
-</div>
-<p>For a slightly more complicated example, consider a system where
-several packages to be used by Kerberos are installed in
-<code class="docutils literal"><span class="pre">/usr/foobar</span></code>, including Berkeley DB 3.3, and an ss library that
-needs to link against the curses library. The configuration of
-Kerberos might be done thus:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="o">./</span><span class="n">configure</span> <span class="n">CPPFLAGS</span><span class="o">=-</span><span class="n">I</span><span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">foobar</span><span class="o">/</span><span class="n">include</span> <span class="n">LDFLAGS</span><span class="o">=-</span><span class="n">L</span><span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">foobar</span><span class="o">/</span><span class="n">lib</span> \
-<span class="o">--</span><span class="k">with</span><span class="o">-</span><span class="n">system</span><span class="o">-</span><span class="n">et</span> <span class="o">--</span><span class="k">with</span><span class="o">-</span><span class="n">system</span><span class="o">-</span><span class="n">ss</span> <span class="o">--</span><span class="k">with</span><span class="o">-</span><span class="n">system</span><span class="o">-</span><span class="n">db</span> \
-<span class="n">SS_LIB</span><span class="o">=</span><span class="s1">'-lss -lcurses'</span> <span class="n">DB_HEADER</span><span class="o">=</span><span class="n">db3</span><span class="o">/</span><span class="n">db_185</span><span class="o">.</span><span class="n">h</span> <span class="n">DB_LIB</span><span class="o">=-</span><span class="n">ldb</span><span class="o">-</span><span class="mf">3.3</span>
-</pre></div>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Options to <em>configure</em></a><ul>
-<li><a class="reference internal" href="#most-commonly-used-options">Most commonly used options</a></li>
-<li><a class="reference internal" href="#environment-variables">Environment variables</a></li>
-<li><a class="reference internal" href="#fine-tuning-of-the-installation-directories">Fine tuning of the installation directories</a></li>
-<li><a class="reference internal" href="#program-names">Program names</a></li>
-<li><a class="reference internal" href="#system-types">System types</a></li>
-<li><a class="reference internal" href="#optional-features">Optional features</a></li>
-<li><a class="reference internal" href="#optional-packages">Optional packages</a></li>
-<li><a class="reference internal" href="#examples">Examples</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Building Kerberos V5</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="directory_org.html">Organization of the source directory</a></li>
-<li class="toctree-l2"><a class="reference internal" href="doing_build.html">Doing the build</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Options to <em>configure</em></a></li>
-<li class="toctree-l2"><a class="reference internal" href="osconf.html">osconf.hin</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="doing_build.html" title="Doing the build"
- >previous</a> |
- <a href="osconf.html" title="osconf.hin"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Options to <em>configure</em>">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>osconf.hin — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Kerberos V5 concepts" href="../basic/index.html" />
- <link rel="prev" title="Options to configure" href="options2configure.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="options2configure.html" title="Options to configure"
- accesskey="P">previous</a> |
- <a href="../basic/index.html" title="Kerberos V5 concepts"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__osconf.hin">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="osconf-hin">
-<h1>osconf.hin<a class="headerlink" href="#osconf-hin" title="Permalink to this headline">¶</a></h1>
-<p>There is one configuration file which you may wish to edit to control
-various compile-time parameters in the Kerberos distribution:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">include</span><span class="o">/</span><span class="n">osconf</span><span class="o">.</span><span class="n">hin</span>
-</pre></div>
-</div>
-<p>The list that follows is by no means complete, just some of the more
-interesting variables.</p>
-<dl class="docutils">
-<dt><strong>DEFAULT_PROFILE_PATH</strong></dt>
-<dd>The pathname to the file which contains the profiles for the known
-realms, their KDCs, etc. The default value is <code class="docutils literal"><span class="pre">/etc/krb5.conf</span></code>.</dd>
-<dt><strong>DEFAULT_KEYTAB_NAME</strong></dt>
-<dd>The type and pathname to the default server keytab file. The
-default is <a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a>.</dd>
-<dt><strong>DEFAULT_KDC_ENCTYPE</strong></dt>
-<dd>The default encryption type for the KDC database master key. The
-default value is <code class="docutils literal"><span class="pre">aes256-cts-hmac-sha1-96</span></code>.</dd>
-<dt><strong>RCTMPDIR</strong></dt>
-<dd>The directory which stores replay caches. The default is
-<code class="docutils literal"><span class="pre">/var/tmp</span></code>.</dd>
-<dt><strong>DEFAULT_KDB_FILE</strong></dt>
-<dd>The location of the default database. The default value is
-<a class="reference internal" href="../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/principal</span></code>.</dd>
-</dl>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">osconf.hin</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Building Kerberos V5</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="directory_org.html">Organization of the source directory</a></li>
-<li class="toctree-l2"><a class="reference internal" href="doing_build.html">Doing the build</a></li>
-<li class="toctree-l2"><a class="reference internal" href="options2configure.html">Options to <em>configure</em></a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">osconf.hin</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="options2configure.html" title="Options to configure"
- >previous</a> |
- <a href="../basic/index.html" title="Kerberos V5 concepts"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__osconf.hin">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>How to build this documentation from the source — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- <link rel="next" title="Contributing to the MIT Kerberos Documentation" href="about.html" />
- <link rel="prev" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="copyright.html" title="Copyright"
- accesskey="P">previous</a> |
- <a href="about.html" title="Contributing to the MIT Kerberos Documentation"
- accesskey="N">next</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__How to build this documentation from the source">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="how-to-build-this-documentation-from-the-source">
-<h1>How to build this documentation from the source<a class="headerlink" href="#how-to-build-this-documentation-from-the-source" title="Permalink to this headline">¶</a></h1>
-<p>Pre-requisites for a simple build, or to update man pages:</p>
-<ul class="simple">
-<li>Sphinx 1.0.4 or higher (See <a class="reference external" href="https://www.sphinx-doc.org">https://www.sphinx-doc.org</a>) with the
-autodoc extension installed.</li>
-</ul>
-<p>Additional prerequisites to include the API reference based on Doxygen
-markup:</p>
-<ul class="simple">
-<li>Python 2.5 with the Cheetah, lxml, and xml modules</li>
-<li>Doxygen</li>
-</ul>
-<div class="section" id="simple-build-without-api-reference">
-<h2>Simple build without API reference<a class="headerlink" href="#simple-build-without-api-reference" title="Permalink to this headline">¶</a></h2>
-<p>To test simple changes to the RST sources, you can build the
-documentation without the Doxygen reference by running, from the doc
-directory:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">sphinx</span><span class="o">-</span><span class="n">build</span> <span class="o">.</span> <span class="n">test_html</span>
-</pre></div>
-</div>
-<p>You will see a number of warnings about missing files. This is
-expected. If there is not already a <code class="docutils literal"><span class="pre">doc/version.py</span></code> file, you will
-need to create one by first running <code class="docutils literal"><span class="pre">make</span> <span class="pre">version.py</span></code> in the
-<code class="docutils literal"><span class="pre">src/doc</span></code> directory of a configured build tree.</p>
-</div>
-<div class="section" id="updating-man-pages">
-<h2>Updating man pages<a class="headerlink" href="#updating-man-pages" title="Permalink to this headline">¶</a></h2>
-<p>Man pages are generated from the RST sources and checked into the
-<code class="docutils literal"><span class="pre">src/man</span></code> directory of the repository. This allows man pages to be
-installed without requiring Sphinx when using a source checkout. To
-regenerate these files, run <code class="docutils literal"><span class="pre">make</span> <span class="pre">man</span></code> from the man subdirectory
-of a configured build tree. You can also do this from an unconfigured
-source tree with:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">cd</span> <span class="n">src</span><span class="o">/</span><span class="n">man</span>
-<span class="n">make</span> <span class="o">-</span><span class="n">f</span> <span class="n">Makefile</span><span class="o">.</span><span class="ow">in</span> <span class="n">top_srcdir</span><span class="o">=..</span> <span class="n">srcdir</span><span class="o">=.</span> <span class="n">man</span>
-<span class="n">make</span> <span class="n">clean</span>
-</pre></div>
-</div>
-<p>As with the simple build, it is normal to see warnings about missing
-files when rebuilding the man pages.</p>
-</div>
-<div class="section" id="building-for-a-release-tarball-or-web-site">
-<h2>Building for a release tarball or web site<a class="headerlink" href="#building-for-a-release-tarball-or-web-site" title="Permalink to this headline">¶</a></h2>
-<p>To generate documentation in HTML format, run <code class="docutils literal"><span class="pre">make</span> <span class="pre">html</span></code> in the
-<code class="docutils literal"><span class="pre">doc</span></code> subdirectory of a configured build tree (the build directory
-corresponding to <code class="docutils literal"><span class="pre">src/doc</span></code>, not the top-level <code class="docutils literal"><span class="pre">doc</span></code> directory).
-The output will be placed in the top-level <code class="docutils literal"><span class="pre">doc/html</span></code> directory.
-This build will include the API reference generated from Doxygen
-markup in the source tree.</p>
-<p>Documentation generated this way will use symbolic names for paths
-(like <code class="docutils literal"><span class="pre">BINDIR</span></code> for the directory containing user programs), with the
-symbolic names being links to a table showing typical values for those
-paths.</p>
-<p>You can also do this from an unconfigured source tree with:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">cd</span> <span class="n">src</span><span class="o">/</span><span class="n">doc</span>
-<span class="n">make</span> <span class="o">-</span><span class="n">f</span> <span class="n">Makefile</span><span class="o">.</span><span class="ow">in</span> <span class="n">SPHINX_ARGS</span><span class="o">=</span> <span class="n">htmlsrc</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="building-for-an-os-package-or-site-documentation">
-<h2>Building for an OS package or site documentation<a class="headerlink" href="#building-for-an-os-package-or-site-documentation" title="Permalink to this headline">¶</a></h2>
-<p>To generate documentation specific to a build of MIT krb5 as you have
-configured it, run <code class="docutils literal"><span class="pre">make</span> <span class="pre">substhtml</span></code> in the <code class="docutils literal"><span class="pre">doc</span></code> subdirectory of a
-configured build tree (the build directory corresponding to
-<code class="docutils literal"><span class="pre">src/doc</span></code>, not the top-level <code class="docutils literal"><span class="pre">doc</span></code> directory). The output will be
-placed in the <code class="docutils literal"><span class="pre">html_subst</span></code> subdirectory of that build directory.
-This build will include the API reference.</p>
-<p>Documentation generated this way will use concrete paths (like
-<code class="docutils literal"><span class="pre">/usr/local/bin</span></code> for the directory containing user programs, for a
-default custom build).</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">How to build this documentation from the source</a><ul>
-<li><a class="reference internal" href="#simple-build-without-api-reference">Simple build without API reference</a></li>
-<li><a class="reference internal" href="#updating-man-pages">Updating man pages</a></li>
-<li><a class="reference internal" href="#building-for-a-release-tarball-or-web-site">Building for a release tarball or web site</a></li>
-<li><a class="reference internal" href="#building-for-an-os-package-or-site-documentation">Building for an OS package or site documentation</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1 current"><a class="current reference internal" href="#">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="copyright.html" title="Copyright"
- >previous</a> |
- <a href="about.html" title="Contributing to the MIT Kerberos Documentation"
- >next</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__How to build this documentation from the source">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Copyright — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="#" />
- <link rel="next" title="How to build this documentation from the source" href="build_this.html" />
- <link rel="prev" title="MIT Kerberos License information" href="mitK5license.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="mitK5license.html" title="MIT Kerberos License information"
- accesskey="P">previous</a> |
- <a href="build_this.html" title="How to build this documentation from the source"
- accesskey="N">next</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Copyright">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="copyright">
-<h1>Copyright<a class="headerlink" href="#copyright" title="Permalink to this headline">¶</a></h1>
-<p>Copyright © 1985-2022 by the Massachusetts Institute of
-Technology and its contributors. All rights reserved.</p>
-<p>See <a class="reference internal" href="mitK5license.html#mitk5license"><span class="std std-ref">MIT Kerberos License information</span></a> for additional copyright and license
-information.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Copyright</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="#">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="mitK5license.html" title="MIT Kerberos License information"
- >previous</a> |
- <a href="build_this.html" title="How to build this documentation from the source"
- >next</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Copyright">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Credential cache file format — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Keytab file format" href="keytab_file_format.html" />
- <link rel="prev" title="Protocols and file formats" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="Protocols and file formats"
- accesskey="P">previous</a> |
- <a href="keytab_file_format.html" title="Keytab file format"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Credential cache file format">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="credential-cache-file-format">
-<span id="ccache-file-format"></span><h1>Credential cache file format<a class="headerlink" href="#credential-cache-file-format" title="Permalink to this headline">¶</a></h1>
-<p>There are four versions of the file format used by the FILE credential
-cache type. The first byte of the file always has the value 5, and
-the value of the second byte contains the version number (1 through
-4). Versions 1 and 2 of the file format use native byte order for integer
-representations. Versions 3 and 4 always use big-endian byte order.</p>
-<p>After the two-byte version indicator, the file has three parts: the
-header (in version 4 only), the default principal name, and a sequence
-of credentials.</p>
-<div class="section" id="header-format">
-<h2>Header format<a class="headerlink" href="#header-format" title="Permalink to this headline">¶</a></h2>
-<p>The header appears only in format version 4. It begins with a 16-bit
-integer giving the length of the entire header, followed by a sequence
-of fields. Each field consists of a 16-bit tag, a 16-bit length, and
-a value of the given length. A file format implementation should
-ignore fields with unknown tags.</p>
-<p>At this time there is only one defined header field. Its tag value is
-1, its length is always 8, and its contents are two 32-bit integers
-giving the seconds and microseconds of the time offset of the KDC
-relative to the client. Adding this offset to the current time on the
-client should give the current time on the KDC, if that offset has not
-changed since the initial authentication.</p>
-</div>
-<div class="section" id="principal-format">
-<span id="cache-principal-format"></span><h2>Principal format<a class="headerlink" href="#principal-format" title="Permalink to this headline">¶</a></h2>
-<p>The default principal is marshalled using the following informal
-grammar:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">principal</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">name</span> <span class="nb">type</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span> <span class="p">[</span><span class="n">omitted</span> <span class="ow">in</span> <span class="n">version</span> <span class="mi">1</span><span class="p">]</span>
- <span class="n">count</span> <span class="n">of</span> <span class="n">components</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span> <span class="p">[</span><span class="n">includes</span> <span class="n">realm</span> <span class="ow">in</span> <span class="n">version</span> <span class="mi">1</span><span class="p">]</span>
- <span class="n">realm</span> <span class="p">(</span><span class="n">data</span><span class="p">)</span>
- <span class="n">component1</span> <span class="p">(</span><span class="n">data</span><span class="p">)</span>
- <span class="n">component2</span> <span class="p">(</span><span class="n">data</span><span class="p">)</span>
- <span class="o">...</span>
-
-<span class="n">data</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">length</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">value</span> <span class="p">(</span><span class="n">length</span> <span class="nb">bytes</span><span class="p">)</span>
-</pre></div>
-</div>
-<p>There is no external framing on the default principal, so it must be
-parsed according to the above grammar in order to find the sequence of
-credentials which follows.</p>
-</div>
-<div class="section" id="credential-format">
-<span id="ccache-credential-format"></span><h2>Credential format<a class="headerlink" href="#credential-format" title="Permalink to this headline">¶</a></h2>
-<p>The credential format uses the following informal grammar (referencing
-the <code class="docutils literal"><span class="pre">principal</span></code> and <code class="docutils literal"><span class="pre">data</span></code> types from the previous section):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">credential</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">client</span> <span class="p">(</span><span class="n">principal</span><span class="p">)</span>
- <span class="n">server</span> <span class="p">(</span><span class="n">principal</span><span class="p">)</span>
- <span class="n">keyblock</span> <span class="p">(</span><span class="n">keyblock</span><span class="p">)</span>
- <span class="n">authtime</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">starttime</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">endtime</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">renew_till</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">is_skey</span> <span class="p">(</span><span class="mi">1</span> <span class="n">byte</span><span class="p">,</span> <span class="mi">0</span> <span class="ow">or</span> <span class="mi">1</span><span class="p">)</span>
- <span class="n">ticket_flags</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">addresses</span> <span class="p">(</span><span class="n">addresses</span><span class="p">)</span>
- <span class="n">authdata</span> <span class="p">(</span><span class="n">authdata</span><span class="p">)</span>
- <span class="n">ticket</span> <span class="p">(</span><span class="n">data</span><span class="p">)</span>
- <span class="n">second_ticket</span> <span class="p">(</span><span class="n">data</span><span class="p">)</span>
-
-<span class="n">keyblock</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">enctype</span> <span class="p">(</span><span class="mi">16</span> <span class="n">bits</span><span class="p">)</span> <span class="p">[</span><span class="n">repeated</span> <span class="n">twice</span> <span class="ow">in</span> <span class="n">version</span> <span class="mi">3</span><span class="p">]</span>
- <span class="n">data</span>
-
-<span class="n">addresses</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">count</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">address1</span>
- <span class="n">address2</span>
- <span class="o">...</span>
-
-<span class="n">address</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">addrtype</span> <span class="p">(</span><span class="mi">16</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">data</span>
-
-<span class="n">authdata</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">count</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">authdata1</span>
- <span class="n">authdata2</span>
- <span class="o">...</span>
-
-<span class="n">authdata</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">ad_type</span> <span class="p">(</span><span class="mi">16</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">data</span>
-</pre></div>
-</div>
-<p>There is no external framing on a marshalled credential, so it must be
-parsed according to the above grammar in order to find the next
-credential. There is also no count of credentials or marker at the
-end of the sequence of credentials; the sequence ends when the file
-ends.</p>
-</div>
-<div class="section" id="credential-cache-configuration-entries">
-<h2>Credential cache configuration entries<a class="headerlink" href="#credential-cache-configuration-entries" title="Permalink to this headline">¶</a></h2>
-<p>Configuration entries are encoded as credential entries. The client
-principal of the entry is the default principal of the cache. The
-server principal has the realm <code class="docutils literal"><span class="pre">X-CACHECONF:</span></code> and two or three
-components, the first of which is <code class="docutils literal"><span class="pre">krb5_ccache_conf_data</span></code>. The
-server principal’s second component is the configuration key. The
-third component, if it exists, is a principal to which the
-configuration key is associated. The configuration value is stored in
-the ticket field of the entry. All other entry fields are zeroed.</p>
-<p>Programs using credential caches must be aware of configuration
-entries for several reasons:</p>
-<ul class="simple">
-<li>A program which displays the contents of a cache should not
-generally display configuration entries.</li>
-<li>The ticket field of a configuration entry is not (usually) a valid
-encoding of a Kerberos ticket. An implementation must not treat the
-cache file as malformed if it cannot decode the ticket field.</li>
-<li>Configuration entries have an endtime field of 0 and might therefore
-always be considered expired, but they should not be treated as
-unimportant as a result. For instance, a program which copies
-credentials from one cache to another should not omit configuration
-entries because of the endtime.</li>
-</ul>
-<p>The following configuration keys are currently used in MIT krb5:</p>
-<dl class="docutils">
-<dt>fast_avail</dt>
-<dd>The presence of this key with a non-empty value indicates that the
-KDC asserted support for FAST (see <span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6113.html"><strong>RFC 6113</strong></a>) during the initial
-authentication, using the negotiation method described in
-<span class="target" id="index-1"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6806.html"><strong>RFC 6806</strong></a> section 11. This key is not associated with any
-principal.</dd>
-<dt>pa_config_data</dt>
-<dd>The value of this key contains a JSON object representation of
-parameters remembered by the preauthentication mechanism used
-during the initial authentication. These parameters may be used
-when refreshing credentials. This key is associated with the
-server principal of the initial authentication (usually the local
-krbtgt principal of the client realm).</dd>
-<dt>pa_type</dt>
-<dd>The value of this key is the ASCII decimal representation of the
-preauth type number used during the initial authentication. This
-key is associated with the server principal of the initial
-authentication.</dd>
-<dt>proxy_impersonator</dt>
-<dd>The presence of this key indicates that the cache is a synthetic
-delegated credential for use with S4U2Proxy. The value is the
-name of the intermediate service whose TGT can be used to make
-S4U2Proxy requests for target services. This key is not
-associated with any principal.</dd>
-<dt>refresh_time</dt>
-<dd>The presence of this key indicates that the cache was acquired by
-the GSS mechanism using a client keytab. The value is the ASCII
-decimal representation of a timestamp at which the GSS mechanism
-should attempt to refresh the credential cache from the client
-keytab.</dd>
-<dt>start_realm</dt>
-<dd>This key indicates the realm of the ticket-granting ticket to be
-used for TGS requests, when making a referrals request or
-beginning a cross-realm request. If it is not present, the client
-realm is used.</dd>
-</dl>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Credential cache file format</a><ul>
-<li><a class="reference internal" href="#header-format">Header format</a></li>
-<li><a class="reference internal" href="#principal-format">Principal format</a></li>
-<li><a class="reference internal" href="#credential-format">Credential format</a></li>
-<li><a class="reference internal" href="#credential-cache-configuration-entries">Credential cache configuration entries</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Protocols and file formats</a><ul class="current">
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Credential cache file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="keytab_file_format.html">Keytab file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="rcache_file_format.html">Replay cache file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="cookie.html">KDC cookie format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="freshness_token.html">PKINIT freshness tokens</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="Protocols and file formats"
- >previous</a> |
- <a href="keytab_file_format.html" title="Keytab file format"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Credential cache file format">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC cookie format — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="PKINIT freshness tokens" href="freshness_token.html" />
- <link rel="prev" title="Replay cache file format" href="rcache_file_format.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="rcache_file_format.html" title="Replay cache file format"
- accesskey="P">previous</a> |
- <a href="freshness_token.html" title="PKINIT freshness tokens"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC cookie format">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-cookie-format">
-<h1>KDC cookie format<a class="headerlink" href="#kdc-cookie-format" title="Permalink to this headline">¶</a></h1>
-<p><span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6113.html"><strong>RFC 6113</strong></a> section 5.2 specifies a pa-data type PA-FX-COOKIE, which
-clients are required to reflect back to the KDC during
-pre-authentication. The MIT krb5 KDC uses the following formats for
-cookies.</p>
-<div class="section" id="trivial-cookie-version-0">
-<h2>Trivial cookie (version 0)<a class="headerlink" href="#trivial-cookie-version-0" title="Permalink to this headline">¶</a></h2>
-<p>If there is no pre-authentication mechanism state information to save,
-a trivial cookie containing the value “MIT” is used. A trivial cookie
-is needed to indicate that the conversation can continue.</p>
-</div>
-<div class="section" id="secure-cookie-version-1">
-<h2>Secure cookie (version 1)<a class="headerlink" href="#secure-cookie-version-1" title="Permalink to this headline">¶</a></h2>
-<p>In release 1.14 and later, a secure cookie can be sent if there is any
-mechanism state to save for the next request. A secure cookie
-contains the concatenation of the following:</p>
-<ul class="simple">
-<li>the four bytes “MIT1”</li>
-<li>a four-byte big-endian kvno value</li>
-<li>an <span class="target" id="index-1"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc3961.html"><strong>RFC 3961</strong></a> ciphertext</li>
-</ul>
-<p>The ciphertext is encrypted in the cookie key with key usage
-number 513. The cookie key is derived from a key in the local krbtgt
-principal entry for the realm (e.g. <code class="docutils literal"><span class="pre">krbtgt/KRBTEST.COM@KRBTEST.COM</span></code>
-if the request is to the <code class="docutils literal"><span class="pre">KRBTEST.COM</span></code> realm). The first krbtgt key
-for the indicated kvno value is combined with the client principal as
-follows:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">cookie</span><span class="o">-</span><span class="n">key</span> <span class="o"><-</span> <span class="n">random</span><span class="o">-</span><span class="n">to</span><span class="o">-</span><span class="n">key</span><span class="p">(</span><span class="n">PRF</span><span class="o">+</span><span class="p">(</span><span class="n">tgt</span><span class="o">-</span><span class="n">key</span><span class="p">,</span> <span class="s2">"COOKIE"</span> <span class="o">|</span> <span class="n">client</span><span class="o">-</span><span class="n">princ</span><span class="p">))</span>
-</pre></div>
-</div>
-<p>where <strong>random-to-key</strong> is the <span class="target" id="index-2"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc3961.html"><strong>RFC 3961</strong></a> random-to-key operation for
-the krbtgt key’s encryption type, <strong>PRF+</strong> is defined in <span class="target" id="index-3"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6113.html"><strong>RFC 6113</strong></a>,
-and <code class="docutils literal"><span class="pre">|</span></code> denotes concatenation. <em>client-princ</em> is the request client
-principal name with realm, marshalled according to <span class="target" id="index-4"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc1964.html"><strong>RFC 1964</strong></a> section
-2.1.1.</p>
-<p>The plain text of the encrypted part of a cookie is the DER encoding
-of the following ASN.1 type:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">SecureCookie</span> <span class="p">::</span><span class="o">=</span> <span class="n">SEQUENCE</span> <span class="p">{</span>
- <span class="n">time</span> <span class="n">INTEGER</span><span class="p">,</span>
- <span class="n">data</span> <span class="n">SEQUENCE</span> <span class="n">OF</span> <span class="n">PA</span><span class="o">-</span><span class="n">DATA</span><span class="p">,</span>
- <span class="o">...</span>
-<span class="p">}</span>
-</pre></div>
-</div>
-<p>The time field represents the cookie creation time; for brevity, it is
-encoded as an integer giving the POSIX timestamp rather than as an
-ASN.1 GeneralizedTime value. The data field contains one element for
-each pre-authentication type which requires saved state. For
-mechanisms which have separate request and reply types, the request
-type is used; this allows the KDC to determine whether a cookie is
-relevant to a request by comparing the request pa-data types to the
-cookie data types.</p>
-</div>
-<div class="section" id="spake-cookie-format-version-1">
-<h2>SPAKE cookie format (version 1)<a class="headerlink" href="#spake-cookie-format-version-1" title="Permalink to this headline">¶</a></h2>
-<p>Inside the SecureCookie wrapper, a data value of type 151 contains
-state for SPAKE pre-authentication. This data is the concatenation of
-the following:</p>
-<ul class="simple">
-<li>a two-byte big-endian version number with the value 1</li>
-<li>a two-byte big-endian stage number</li>
-<li>a four-byte big-endian group number</li>
-<li>a four-byte big-endian length and data for the SPAKE value</li>
-<li>a four-byte big-endian length and data for the transcript hash</li>
-<li>zero or more second factor records, each consisting of:
-- a four-byte big-endian second-factor type
-- a four-byte big-endian length and data</li>
-</ul>
-<p>The stage value is 0 if the cookie was sent with a challenge message.
-Otherwise it is 1 for the first encdata message sent by the KDC during
-an exchange, 2 for the second, etc..</p>
-<p>The group value indicates the group number used in the SPAKE challenge.</p>
-<p>For a stage-0 cookie, the SPAKE value is the KDC private key,
-represented in the scalar marshalling form of the group. For other
-cookies, the SPAKE value is the SPAKE result K, represented in the
-group element marshalling form.</p>
-<p>For a stage-0 cookie, the transcript hash is the intermediate hash
-after updating with the client support message (if one was sent) and
-challenge. For other cookies it is the final hash.</p>
-<p>For a stage-0 cookie, there may be any number of second-factor
-records, including none; a second-factor type need not create a state
-field if it does not need one, and no record is created for SF-NONE.
-For other cookies, there must be exactly one second-factor record
-corresponding to the factor type chosen by the client.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC cookie format</a><ul>
-<li><a class="reference internal" href="#trivial-cookie-version-0">Trivial cookie (version 0)</a></li>
-<li><a class="reference internal" href="#secure-cookie-version-1">Secure cookie (version 1)</a></li>
-<li><a class="reference internal" href="#spake-cookie-format-version-1">SPAKE cookie format (version 1)</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Protocols and file formats</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="ccache_file_format.html">Credential cache file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="keytab_file_format.html">Keytab file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="rcache_file_format.html">Replay cache file format</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">KDC cookie format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="freshness_token.html">PKINIT freshness tokens</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="rcache_file_format.html" title="Replay cache file format"
- >previous</a> |
- <a href="freshness_token.html" title="PKINIT freshness tokens"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC cookie format">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>PKINIT freshness tokens — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="MIT Kerberos features" href="../mitK5features.html" />
- <link rel="prev" title="KDC cookie format" href="cookie.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="cookie.html" title="KDC cookie format"
- accesskey="P">previous</a> |
- <a href="../mitK5features.html" title="MIT Kerberos features"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__PKINIT freshness tokens">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="pkinit-freshness-tokens">
-<h1>PKINIT freshness tokens<a class="headerlink" href="#pkinit-freshness-tokens" title="Permalink to this headline">¶</a></h1>
-<p><span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc8070.html"><strong>RFC 8070</strong></a> specifies a pa-data type PA_AS_FRESHNESS, which clients
-should reflect within signed PKINIT data to prove recent access to the
-client certificate private key. The contents of a freshness token are
-left to the KDC implementation. The MIT krb5 KDC uses the following
-format for freshness tokens (starting in release 1.17):</p>
-<ul class="simple">
-<li>a four-byte big-endian POSIX timestamp</li>
-<li>a four-byte big-endian key version number</li>
-<li>an <span class="target" id="index-1"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc3961.html"><strong>RFC 3961</strong></a> checksum, with no ASN.1 wrapper</li>
-</ul>
-<p>The checksum is computed using the first key in the local krbtgt
-principal entry for the realm (e.g. <code class="docutils literal"><span class="pre">krbtgt/KRBTEST.COM@KRBTEST.COM</span></code>
-if the request is to the <code class="docutils literal"><span class="pre">KRBTEST.COM</span></code> realm) of the indicated key
-version. The checksum type must be the mandatory checksum type for
-the encryption type of the krbtgt key. The key usage value for the
-checksum is 514.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">PKINIT freshness tokens</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Protocols and file formats</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="ccache_file_format.html">Credential cache file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="keytab_file_format.html">Keytab file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="rcache_file_format.html">Replay cache file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="cookie.html">KDC cookie format</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">PKINIT freshness tokens</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="cookie.html" title="KDC cookie format"
- >previous</a> |
- <a href="../mitK5features.html" title="MIT Kerberos features"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__PKINIT freshness tokens">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Protocols and file formats — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Credential cache file format" href="ccache_file_format.html" />
- <link rel="prev" title="Supported date and time formats" href="../basic/date_format.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../basic/date_format.html" title="Supported date and time formats"
- accesskey="P">previous</a> |
- <a href="ccache_file_format.html" title="Credential cache file format"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Protocols and file formats">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="protocols-and-file-formats">
-<h1>Protocols and file formats<a class="headerlink" href="#protocols-and-file-formats" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="ccache_file_format.html">Credential cache file format</a></li>
-<li class="toctree-l1"><a class="reference internal" href="keytab_file_format.html">Keytab file format</a></li>
-<li class="toctree-l1"><a class="reference internal" href="rcache_file_format.html">Replay cache file format</a></li>
-<li class="toctree-l1"><a class="reference internal" href="cookie.html">KDC cookie format</a></li>
-<li class="toctree-l1"><a class="reference internal" href="freshness_token.html">PKINIT freshness tokens</a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Protocols and file formats</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1 current"><a class="current reference internal" href="#">Protocols and file formats</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="ccache_file_format.html">Credential cache file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="keytab_file_format.html">Keytab file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="rcache_file_format.html">Replay cache file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="cookie.html">KDC cookie format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="freshness_token.html">PKINIT freshness tokens</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../basic/date_format.html" title="Supported date and time formats"
- >previous</a> |
- <a href="ccache_file_format.html" title="Credential cache file format"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Protocols and file formats">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Keytab file format — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Replay cache file format" href="rcache_file_format.html" />
- <link rel="prev" title="Credential cache file format" href="ccache_file_format.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ccache_file_format.html" title="Credential cache file format"
- accesskey="P">previous</a> |
- <a href="rcache_file_format.html" title="Replay cache file format"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Keytab file format">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="keytab-file-format">
-<span id="id1"></span><h1>Keytab file format<a class="headerlink" href="#keytab-file-format" title="Permalink to this headline">¶</a></h1>
-<p>There are two versions of the file format used by the FILE keytab
-type. The first byte of the file always has the value 5, and the
-value of the second byte contains the version number (1 or 2).
-Version 1 of the file format uses native byte order for integer
-representations. Version 2 always uses big-endian byte order.</p>
-<p>After the two-byte version indicator, the file contains a sequence of
-signed 32-bit record lengths followed by key records or holes. A
-positive record length indicates a valid key entry whose size is equal
-to or less than the record length. A negative length indicates a
-zero-filled hole whose size is the inverse of the length. A length of
-0 indicates the end of the file.</p>
-<div class="section" id="key-entry-format">
-<h2>Key entry format<a class="headerlink" href="#key-entry-format" title="Permalink to this headline">¶</a></h2>
-<p>A key entry may be smaller in size than the record length which
-precedes it, because it may have replaced a hole which is larger than
-the key entry. Key entries use the following informal grammar:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">entry</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">principal</span>
- <span class="n">timestamp</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">key</span> <span class="n">version</span> <span class="p">(</span><span class="mi">8</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">enctype</span> <span class="p">(</span><span class="mi">16</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">key</span> <span class="n">length</span> <span class="p">(</span><span class="mi">16</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">key</span> <span class="n">contents</span>
- <span class="n">key</span> <span class="n">version</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span> <span class="p">[</span><span class="ow">in</span> <span class="n">release</span> <span class="mf">1.14</span> <span class="ow">and</span> <span class="n">later</span><span class="p">]</span>
-
-<span class="n">principal</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">count</span> <span class="n">of</span> <span class="n">components</span> <span class="p">(</span><span class="mi">16</span> <span class="n">bits</span><span class="p">)</span> <span class="p">[</span><span class="n">includes</span> <span class="n">realm</span> <span class="ow">in</span> <span class="n">version</span> <span class="mi">1</span><span class="p">]</span>
- <span class="n">realm</span> <span class="p">(</span><span class="n">data</span><span class="p">)</span>
- <span class="n">component1</span> <span class="p">(</span><span class="n">data</span><span class="p">)</span>
- <span class="n">component2</span> <span class="p">(</span><span class="n">data</span><span class="p">)</span>
- <span class="o">...</span>
- <span class="n">name</span> <span class="nb">type</span> <span class="p">(</span><span class="mi">32</span> <span class="n">bits</span><span class="p">)</span> <span class="p">[</span><span class="n">omitted</span> <span class="ow">in</span> <span class="n">version</span> <span class="mi">1</span><span class="p">]</span>
-
-<span class="n">data</span> <span class="p">::</span><span class="o">=</span>
- <span class="n">length</span> <span class="p">(</span><span class="mi">16</span> <span class="n">bits</span><span class="p">)</span>
- <span class="n">value</span> <span class="p">(</span><span class="n">length</span> <span class="nb">bytes</span><span class="p">)</span>
-</pre></div>
-</div>
-<p>The 32-bit key version overrides the 8-bit key version. To determine
-if it is present, the implementation must check that at least 4 bytes
-remain in the record after the other fields are read, and that the
-value of the 32-bit integer contained in those bytes is non-zero.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Keytab file format</a><ul>
-<li><a class="reference internal" href="#key-entry-format">Key entry format</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Protocols and file formats</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="ccache_file_format.html">Credential cache file format</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Keytab file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="rcache_file_format.html">Replay cache file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="cookie.html">KDC cookie format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="freshness_token.html">PKINIT freshness tokens</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ccache_file_format.html" title="Credential cache file format"
- >previous</a> |
- <a href="rcache_file_format.html" title="Replay cache file format"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Keytab file format">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Replay cache file format — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="KDC cookie format" href="cookie.html" />
- <link rel="prev" title="Keytab file format" href="keytab_file_format.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="keytab_file_format.html" title="Keytab file format"
- accesskey="P">previous</a> |
- <a href="cookie.html" title="KDC cookie format"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Replay cache file format">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="replay-cache-file-format">
-<h1>Replay cache file format<a class="headerlink" href="#replay-cache-file-format" title="Permalink to this headline">¶</a></h1>
-<p>This section documents the second version of the replay cache file
-format, used by the “file2” replay cache type (new in release 1.18).
-The first version of the file replay cache format is not documented.</p>
-<p>All accesses to the replay cache file take place under an exclusive
-POSIX or Windows file lock, obtained when the file is opened and
-released when it is closed. Replay cache files are automatically
-created when first accessed.</p>
-<p>For each store operation, a tag is derived from the checksum part of
-the <span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc3961.html"><strong>RFC 3961</strong></a> ciphertext of the authenticator. The checksum is
-coerced to a fixed length of 12 bytes, either through truncation or
-right-padding with zero bytes. A four-byte timestamp is appended to
-the tag to produce a total record length of 16 bytes.</p>
-<p>Bytes 0 through 15 of the file contain a hash seed for the SipHash-2-4
-algorithm (<a class="reference external" href="https://131002.net/siphash/siphash.pdf">siphash</a>); this field is populated with random bytes when
-the file is first created. All remaining bytes are divided into a
-series of expanding hash tables:</p>
-<ul class="simple">
-<li>Bytes 16-16383: hash table 1 (1023 slots)</li>
-<li>Bytes 16384-49151: hash table 2 (2048 slots)</li>
-<li>Bytes 49152-114687: hash table 3 (4096 slots)</li>
-<li>…</li>
-</ul>
-<p>Only some hash tables will be present in the file at any specific
-time, and the final table may be only partially filled. Replay cache
-files may be sparse if the filesystem supports it.</p>
-<p>For each table present in the file, the tag is hashed with SipHash-2-4
-using the seed recorded in the file. The first byte of the seed is
-incremented by one (modulo 256) for each table after the first. The
-resulting hash value is taken modulo one less than the table size
-(1022 for the first hash table, 2047 for the second) to produce the
-index. The record may be found at the slot given by the index or at
-the next slot.</p>
-<p>All candidate locations for the record must be searched until a slot
-is found with a timestamp of zero (indicating a slot which has never
-been written to) or an offset is reached at or beyond the end of the
-file. Any candidate location with a timestamp value of zero, with a
-timestamp value less than the current time minus clockskew, or at or
-beyond the end of the file is available for writing. When all
-candidate locations have been searched without finding a match, the
-new entry is written to the earliest candidate available for writing.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Replay cache file format</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">Protocols and file formats</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="ccache_file_format.html">Credential cache file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="keytab_file_format.html">Keytab file format</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Replay cache file format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="cookie.html">KDC cookie format</a></li>
-<li class="toctree-l2"><a class="reference internal" href="freshness_token.html">PKINIT freshness tokens</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="keytab_file_format.html" title="Keytab file format"
- >previous</a> |
- <a href="cookie.html" title="KDC cookie format"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Replay cache file format">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – A</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/AD_TYPE_EXTERNAL.html#AD_TYPE_EXTERNAL">AD_TYPE_EXTERNAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK.html#AD_TYPE_FIELD_TYPE_MASK">AD_TYPE_FIELD_TYPE_MASK (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AD_TYPE_REGISTERED.html#AD_TYPE_REGISTERED">AD_TYPE_REGISTERED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AD_TYPE_RESERVED.html#AD_TYPE_RESERVED">AD_TYPE_RESERVED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_ADDRPORT.html#ADDRTYPE_ADDRPORT">ADDRTYPE_ADDRPORT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_CHAOS.html#ADDRTYPE_CHAOS">ADDRTYPE_CHAOS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_DDP.html#ADDRTYPE_DDP">ADDRTYPE_DDP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_INET.html#ADDRTYPE_INET">ADDRTYPE_INET (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_INET6.html#ADDRTYPE_INET6">ADDRTYPE_INET6 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_IPPORT.html#ADDRTYPE_IPPORT">ADDRTYPE_IPPORT (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/ADDRTYPE_IS_LOCAL.html#ADDRTYPE_IS_LOCAL">ADDRTYPE_IS_LOCAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_ISO.html#ADDRTYPE_ISO">ADDRTYPE_ISO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_NETBIOS.html#ADDRTYPE_NETBIOS">ADDRTYPE_NETBIOS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_XNS.html#ADDRTYPE_XNS">ADDRTYPE_XNS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION.html#AP_OPTS_ETYPE_NEGOTIATION">AP_OPTS_ETYPE_NEGOTIATION (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED.html#AP_OPTS_MUTUAL_REQUIRED">AP_OPTS_MUTUAL_REQUIRED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_RESERVED.html#AP_OPTS_RESERVED">AP_OPTS_RESERVED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_USE_SESSION_KEY.html#AP_OPTS_USE_SESSION_KEY">AP_OPTS_USE_SESSION_KEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_USE_SUBKEY.html#AP_OPTS_USE_SUBKEY">AP_OPTS_USE_SUBKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_WIRE_MASK.html#AP_OPTS_WIRE_MASK">AP_OPTS_WIRE_MASK (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – C</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128.html#CKSUMTYPE_CMAC_CAMELLIA128">CKSUMTYPE_CMAC_CAMELLIA128 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256.html#CKSUMTYPE_CMAC_CAMELLIA256">CKSUMTYPE_CMAC_CAMELLIA256 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_CRC32.html#CKSUMTYPE_CRC32">CKSUMTYPE_CRC32 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_DESCBC.html#CKSUMTYPE_DESCBC">CKSUMTYPE_DESCBC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR.html#CKSUMTYPE_HMAC_MD5_ARCFOUR">CKSUMTYPE_HMAC_MD5_ARCFOUR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128.html#CKSUMTYPE_HMAC_SHA1_96_AES128">CKSUMTYPE_HMAC_SHA1_96_AES128 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256.html#CKSUMTYPE_HMAC_SHA1_96_AES256">CKSUMTYPE_HMAC_SHA1_96_AES256 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3.html#CKSUMTYPE_HMAC_SHA1_DES3">CKSUMTYPE_HMAC_SHA1_DES3 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128.html#CKSUMTYPE_HMAC_SHA256_128_AES128">CKSUMTYPE_HMAC_SHA256_128_AES128 (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256.html#CKSUMTYPE_HMAC_SHA384_192_AES256">CKSUMTYPE_HMAC_SHA384_192_AES256 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR.html#CKSUMTYPE_MD5_HMAC_ARCFOUR">CKSUMTYPE_MD5_HMAC_ARCFOUR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_NIST_SHA.html#CKSUMTYPE_NIST_SHA">CKSUMTYPE_NIST_SHA (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_RSA_MD4.html#CKSUMTYPE_RSA_MD4">CKSUMTYPE_RSA_MD4 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES.html#CKSUMTYPE_RSA_MD4_DES">CKSUMTYPE_RSA_MD4_DES (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_RSA_MD5.html#CKSUMTYPE_RSA_MD5">CKSUMTYPE_RSA_MD5 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES.html#CKSUMTYPE_RSA_MD5_DES">CKSUMTYPE_RSA_MD5_DES (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_SHA1.html#CKSUMTYPE_SHA1">CKSUMTYPE_SHA1 (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – E</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96.html#ENCTYPE_AES128_CTS_HMAC_SHA1_96">ENCTYPE_AES128_CTS_HMAC_SHA1_96 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128.html#ENCTYPE_AES128_CTS_HMAC_SHA256_128">ENCTYPE_AES128_CTS_HMAC_SHA256_128 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96.html#ENCTYPE_AES256_CTS_HMAC_SHA1_96">ENCTYPE_AES256_CTS_HMAC_SHA1_96 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192.html#ENCTYPE_AES256_CTS_HMAC_SHA384_192">ENCTYPE_AES256_CTS_HMAC_SHA384_192 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC.html#ENCTYPE_ARCFOUR_HMAC">ENCTYPE_ARCFOUR_HMAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP.html#ENCTYPE_ARCFOUR_HMAC_EXP">ENCTYPE_ARCFOUR_HMAC_EXP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC.html#ENCTYPE_CAMELLIA128_CTS_CMAC">ENCTYPE_CAMELLIA128_CTS_CMAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC.html#ENCTYPE_CAMELLIA256_CTS_CMAC">ENCTYPE_CAMELLIA256_CTS_CMAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES3_CBC_ENV.html#ENCTYPE_DES3_CBC_ENV">ENCTYPE_DES3_CBC_ENV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES3_CBC_RAW.html#ENCTYPE_DES3_CBC_RAW">ENCTYPE_DES3_CBC_RAW (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES3_CBC_SHA.html#ENCTYPE_DES3_CBC_SHA">ENCTYPE_DES3_CBC_SHA (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1.html#ENCTYPE_DES3_CBC_SHA1">ENCTYPE_DES3_CBC_SHA1 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES_CBC_CRC.html#ENCTYPE_DES_CBC_CRC">ENCTYPE_DES_CBC_CRC (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/ENCTYPE_DES_CBC_MD4.html#ENCTYPE_DES_CBC_MD4">ENCTYPE_DES_CBC_MD4 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES_CBC_MD5.html#ENCTYPE_DES_CBC_MD5">ENCTYPE_DES_CBC_MD5 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES_CBC_RAW.html#ENCTYPE_DES_CBC_RAW">ENCTYPE_DES_CBC_RAW (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1.html#ENCTYPE_DES_HMAC_SHA1">ENCTYPE_DES_HMAC_SHA1 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS.html#ENCTYPE_DSA_SHA1_CMS">ENCTYPE_DSA_SHA1_CMS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_MD5_RSA_CMS.html#ENCTYPE_MD5_RSA_CMS">ENCTYPE_MD5_RSA_CMS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_NULL.html#ENCTYPE_NULL">ENCTYPE_NULL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_RC2_CBC_ENV.html#ENCTYPE_RC2_CBC_ENV">ENCTYPE_RC2_CBC_ENV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_RSA_ENV.html#ENCTYPE_RSA_ENV">ENCTYPE_RSA_ENV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV.html#ENCTYPE_RSA_ES_OAEP_ENV">ENCTYPE_RSA_ES_OAEP_ENV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS.html#ENCTYPE_SHA1_RSA_CMS">ENCTYPE_SHA1_RSA_CMS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_UNKNOWN.html#ENCTYPE_UNKNOWN">ENCTYPE_UNKNOWN (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – K</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE.html#KDC_OPT_ALLOW_POSTDATE">KDC_OPT_ALLOW_POSTDATE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_CANONICALIZE.html#KDC_OPT_CANONICALIZE">KDC_OPT_CANONICALIZE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT.html#KDC_OPT_CNAME_IN_ADDL_TKT">KDC_OPT_CNAME_IN_ADDL_TKT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK.html#KDC_OPT_DISABLE_TRANSITED_CHECK">KDC_OPT_DISABLE_TRANSITED_CHECK (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY.html#KDC_OPT_ENC_TKT_IN_SKEY">KDC_OPT_ENC_TKT_IN_SKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_FORWARDABLE.html#KDC_OPT_FORWARDABLE">KDC_OPT_FORWARDABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_FORWARDED.html#KDC_OPT_FORWARDED">KDC_OPT_FORWARDED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_POSTDATED.html#KDC_OPT_POSTDATED">KDC_OPT_POSTDATED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_PROXIABLE.html#KDC_OPT_PROXIABLE">KDC_OPT_PROXIABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_PROXY.html#KDC_OPT_PROXY">KDC_OPT_PROXY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_RENEW.html#KDC_OPT_RENEW">KDC_OPT_RENEW (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_RENEWABLE.html#KDC_OPT_RENEWABLE">KDC_OPT_RENEWABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_RENEWABLE_OK.html#KDC_OPT_RENEWABLE_OK">KDC_OPT_RENEWABLE_OK (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS.html#KDC_OPT_REQUEST_ANONYMOUS">KDC_OPT_REQUEST_ANONYMOUS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_VALIDATE.html#KDC_OPT_VALIDATE">KDC_OPT_VALIDATE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_TKT_COMMON_MASK.html#KDC_TKT_COMMON_MASK">KDC_TKT_COMMON_MASK (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb524_convert_creds_kdc.html#krb524_convert_creds_kdc">krb524_convert_creds_kdc (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb524_init_ets.html#krb524_init_ets">krb524_init_ets (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_425_conv_principal.html#c.krb5_425_conv_principal">krb5_425_conv_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_524_conv_principal.html#c.krb5_524_conv_principal">krb5_524_conv_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_524_convert_creds.html#c.krb5_524_convert_creds">krb5_524_convert_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_address.html#c.krb5_address">krb5_address (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_address.html#c.krb5_address.addrtype">krb5_address.addrtype (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_address.html#c.krb5_address.contents">krb5_address.contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_address.html#c.krb5_address.length">krb5_address.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_address.html#c.krb5_address.magic">krb5_address.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_address_compare.html#c.krb5_address_compare">krb5_address_compare (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_address_order.html#c.krb5_address_order">krb5_address_order (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_address_search.html#c.krb5_address_search">krb5_address_search (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_addrtype.html#c.krb5_addrtype">krb5_addrtype (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_allow_weak_crypto.html#c.krb5_allow_weak_crypto">krb5_allow_weak_crypto (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html#KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE">KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_aname_to_localname.html#c.krb5_aname_to_localname">krb5_aname_to_localname (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_anonymous_principal.html#c.krb5_anonymous_principal">krb5_anonymous_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR.html#KRB5_ANONYMOUS_PRINCSTR">KRB5_ANONYMOUS_PRINCSTR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_anonymous_realm.html#c.krb5_anonymous_realm">krb5_anonymous_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR.html#KRB5_ANONYMOUS_REALMSTR">KRB5_ANONYMOUS_REALMSTR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AP_REP.html#KRB5_AP_REP">KRB5_AP_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep.html#c.krb5_ap_rep">krb5_ap_rep (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep.html#c.krb5_ap_rep.enc_part">krb5_ap_rep.enc_part (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep.html#c.krb5_ap_rep.magic">krb5_ap_rep.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part">krb5_ap_rep_enc_part (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part.ctime">krb5_ap_rep_enc_part.ctime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part.cusec">krb5_ap_rep_enc_part.cusec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part.magic">krb5_ap_rep_enc_part.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part.seq_number">krb5_ap_rep_enc_part.seq_number (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part.subkey">krb5_ap_rep_enc_part.subkey (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AP_REQ.html#KRB5_AP_REQ">KRB5_AP_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_req.html#c.krb5_ap_req">krb5_ap_req (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_req.html#c.krb5_ap_req.ap_options">krb5_ap_req.ap_options (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_req.html#c.krb5_ap_req.authenticator">krb5_ap_req.authenticator (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_req.html#c.krb5_ap_req.magic">krb5_ap_req.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_req.html#c.krb5_ap_req.ticket">krb5_ap_req.ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_appdefault_boolean.html#c.krb5_appdefault_boolean">krb5_appdefault_boolean (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_appdefault_string.html#c.krb5_appdefault_string">krb5_appdefault_string (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AS_REP.html#KRB5_AS_REP">KRB5_AS_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AS_REQ.html#KRB5_AS_REQ">KRB5_AS_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_free.html#c.krb5_auth_con_free">krb5_auth_con_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_genaddrs.html#c.krb5_auth_con_genaddrs">krb5_auth_con_genaddrs (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_get_checksum_func.html#c.krb5_auth_con_get_checksum_func">krb5_auth_con_get_checksum_func (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getaddrs.html#c.krb5_auth_con_getaddrs">krb5_auth_con_getaddrs (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getauthenticator.html#c.krb5_auth_con_getauthenticator">krb5_auth_con_getauthenticator (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getflags.html#c.krb5_auth_con_getflags">krb5_auth_con_getflags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getkey.html#c.krb5_auth_con_getkey">krb5_auth_con_getkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getkey_k.html#c.krb5_auth_con_getkey_k">krb5_auth_con_getkey_k (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getlocalseqnumber.html#c.krb5_auth_con_getlocalseqnumber">krb5_auth_con_getlocalseqnumber (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getlocalsubkey.html#c.krb5_auth_con_getlocalsubkey">krb5_auth_con_getlocalsubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getrcache.html#c.krb5_auth_con_getrcache">krb5_auth_con_getrcache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getrecvsubkey.html#c.krb5_auth_con_getrecvsubkey">krb5_auth_con_getrecvsubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getrecvsubkey_k.html#c.krb5_auth_con_getrecvsubkey_k">krb5_auth_con_getrecvsubkey_k (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getremoteseqnumber.html#c.krb5_auth_con_getremoteseqnumber">krb5_auth_con_getremoteseqnumber (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getremotesubkey.html#c.krb5_auth_con_getremotesubkey">krb5_auth_con_getremotesubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getsendsubkey.html#c.krb5_auth_con_getsendsubkey">krb5_auth_con_getsendsubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getsendsubkey_k.html#c.krb5_auth_con_getsendsubkey_k">krb5_auth_con_getsendsubkey_k (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_init.html#c.krb5_auth_con_init">krb5_auth_con_init (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_initivector.html#c.krb5_auth_con_initivector">krb5_auth_con_initivector (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_set_checksum_func.html#c.krb5_auth_con_set_checksum_func">krb5_auth_con_set_checksum_func (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_set_req_cksumtype.html#c.krb5_auth_con_set_req_cksumtype">krb5_auth_con_set_req_cksumtype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setaddrs.html#c.krb5_auth_con_setaddrs">krb5_auth_con_setaddrs (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setflags.html#c.krb5_auth_con_setflags">krb5_auth_con_setflags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setports.html#c.krb5_auth_con_setports">krb5_auth_con_setports (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setrcache.html#c.krb5_auth_con_setrcache">krb5_auth_con_setrcache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setrecvsubkey.html#c.krb5_auth_con_setrecvsubkey">krb5_auth_con_setrecvsubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setrecvsubkey_k.html#c.krb5_auth_con_setrecvsubkey_k">krb5_auth_con_setrecvsubkey_k (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setsendsubkey.html#c.krb5_auth_con_setsendsubkey">krb5_auth_con_setsendsubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setsendsubkey_k.html#c.krb5_auth_con_setsendsubkey_k">krb5_auth_con_setsendsubkey_k (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setuseruserkey.html#c.krb5_auth_con_setuseruserkey">krb5_auth_con_setuseruserkey (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_auth_context.html#c.krb5_auth_context">krb5_auth_context (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE">KRB5_AUTH_CONTEXT_DO_SEQUENCE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME">KRB5_AUTH_CONTEXT_DO_TIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL.html#KRB5_AUTH_CONTEXT_PERMIT_ALL">KRB5_AUTH_CONTEXT_PERMIT_ALL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE">KRB5_AUTH_CONTEXT_RET_SEQUENCE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME">KRB5_AUTH_CONTEXT_RET_TIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY.html#KRB5_AUTH_CONTEXT_USE_SUBKEY">KRB5_AUTH_CONTEXT_USE_SUBKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdata.html#c.krb5_authdata">krb5_authdata (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdata.html#c.krb5_authdata.ad_type">krb5_authdata.ad_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdata.html#c.krb5_authdata.contents">krb5_authdata.contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdata.html#c.krb5_authdata.length">krb5_authdata.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdata.html#c.krb5_authdata.magic">krb5_authdata.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_AND_OR.html#KRB5_AUTHDATA_AND_OR">KRB5_AUTHDATA_AND_OR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS.html#KRB5_AUTHDATA_AP_OPTIONS">KRB5_AUTHDATA_AP_OPTIONS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR.html#KRB5_AUTHDATA_AUTH_INDICATOR">KRB5_AUTHDATA_AUTH_INDICATOR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_CAMMAC.html#KRB5_AUTHDATA_CAMMAC">KRB5_AUTHDATA_CAMMAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION.html#KRB5_AUTHDATA_ETYPE_NEGOTIATION">KRB5_AUTHDATA_ETYPE_NEGOTIATION (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR.html#KRB5_AUTHDATA_FX_ARMOR">KRB5_AUTHDATA_FX_ARMOR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT.html#KRB5_AUTHDATA_IF_RELEVANT">KRB5_AUTHDATA_IF_RELEVANT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html#KRB5_AUTHDATA_INITIAL_VERIFIED_CAS">KRB5_AUTHDATA_INITIAL_VERIFIED_CAS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED.html#KRB5_AUTHDATA_KDC_ISSUED">KRB5_AUTHDATA_KDC_ISSUED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC.html#KRB5_AUTHDATA_MANDATORY_FOR_KDC">KRB5_AUTHDATA_MANDATORY_FOR_KDC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE.html#KRB5_AUTHDATA_OSF_DCE">KRB5_AUTHDATA_OSF_DCE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_SESAME.html#KRB5_AUTHDATA_SESAME">KRB5_AUTHDATA_SESAME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET.html#KRB5_AUTHDATA_SIGNTICKET">KRB5_AUTHDATA_SIGNTICKET (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC.html#KRB5_AUTHDATA_WIN2K_PAC">KRB5_AUTHDATA_WIN2K_PAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdatatype.html#c.krb5_authdatatype">krb5_authdatatype (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator">krb5_authenticator (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.authorization_data">krb5_authenticator.authorization_data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.checksum">krb5_authenticator.checksum (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.client">krb5_authenticator.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.ctime">krb5_authenticator.ctime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.cusec">krb5_authenticator.cusec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.magic">krb5_authenticator.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.seq_number">krb5_authenticator.seq_number (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.subkey">krb5_authenticator.subkey (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_boolean.html#c.krb5_boolean">krb5_boolean (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_build_principal.html#c.krb5_build_principal">krb5_build_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_build_principal_alloc_va.html#c.krb5_build_principal_alloc_va">krb5_build_principal_alloc_va (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_build_principal_ext.html#c.krb5_build_principal_ext">krb5_build_principal_ext (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_build_principal_va.html#c.krb5_build_principal_va">krb5_build_principal_va (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_block_size.html#c.krb5_c_block_size">krb5_c_block_size (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_checksum_length.html#c.krb5_c_checksum_length">krb5_c_checksum_length (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_crypto_length.html#c.krb5_c_crypto_length">krb5_c_crypto_length (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_crypto_length_iov.html#c.krb5_c_crypto_length_iov">krb5_c_crypto_length_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_decrypt.html#c.krb5_c_decrypt">krb5_c_decrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_decrypt_iov.html#c.krb5_c_decrypt_iov">krb5_c_decrypt_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_derive_prfplus.html#c.krb5_c_derive_prfplus">krb5_c_derive_prfplus (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_encrypt.html#c.krb5_c_encrypt">krb5_c_encrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_encrypt_iov.html#c.krb5_c_encrypt_iov">krb5_c_encrypt_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_encrypt_length.html#c.krb5_c_encrypt_length">krb5_c_encrypt_length (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_enctype_compare.html#c.krb5_c_enctype_compare">krb5_c_enctype_compare (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_free_state.html#c.krb5_c_free_state">krb5_c_free_state (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_fx_cf2_simple.html#c.krb5_c_fx_cf2_simple">krb5_c_fx_cf2_simple (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_init_state.html#c.krb5_c_init_state">krb5_c_init_state (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_is_coll_proof_cksum.html#c.krb5_c_is_coll_proof_cksum">krb5_c_is_coll_proof_cksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_is_keyed_cksum.html#c.krb5_c_is_keyed_cksum">krb5_c_is_keyed_cksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_keyed_checksum_types.html#c.krb5_c_keyed_checksum_types">krb5_c_keyed_checksum_types (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_keylengths.html#c.krb5_c_keylengths">krb5_c_keylengths (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_make_checksum.html#c.krb5_c_make_checksum">krb5_c_make_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_make_checksum_iov.html#c.krb5_c_make_checksum_iov">krb5_c_make_checksum_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_make_random_key.html#c.krb5_c_make_random_key">krb5_c_make_random_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_padding_length.html#c.krb5_c_padding_length">krb5_c_padding_length (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_prf.html#c.krb5_c_prf">krb5_c_prf (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_prf_length.html#c.krb5_c_prf_length">krb5_c_prf_length (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_prfplus.html#c.krb5_c_prfplus">krb5_c_prfplus (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_random_add_entropy.html#c.krb5_c_random_add_entropy">krb5_c_random_add_entropy (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_random_make_octets.html#c.krb5_c_random_make_octets">krb5_c_random_make_octets (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_random_os_entropy.html#c.krb5_c_random_os_entropy">krb5_c_random_os_entropy (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_random_seed.html#c.krb5_c_random_seed">krb5_c_random_seed (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_random_to_key.html#c.krb5_c_random_to_key">krb5_c_random_to_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_string_to_key.html#c.krb5_c_string_to_key">krb5_c_string_to_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_string_to_key_with_params.html#c.krb5_c_string_to_key_with_params">krb5_c_string_to_key_with_params (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_valid_cksumtype.html#c.krb5_c_valid_cksumtype">krb5_c_valid_cksumtype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_valid_enctype.html#c.krb5_c_valid_enctype">krb5_c_valid_enctype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_verify_checksum.html#c.krb5_c_verify_checksum">krb5_c_verify_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_verify_checksum_iov.html#c.krb5_c_verify_checksum_iov">krb5_c_verify_checksum_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_calculate_checksum.html#c.krb5_calculate_checksum">krb5_calculate_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_cache_match.html#c.krb5_cc_cache_match">krb5_cc_cache_match (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_close.html#c.krb5_cc_close">krb5_cc_close (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_copy_creds.html#c.krb5_cc_copy_creds">krb5_cc_copy_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cc_cursor.html#c.krb5_cc_cursor">krb5_cc_cursor (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_default.html#c.krb5_cc_default">krb5_cc_default (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_default_name.html#c.krb5_cc_default_name">krb5_cc_default_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_destroy.html#c.krb5_cc_destroy">krb5_cc_destroy (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_dup.html#c.krb5_cc_dup">krb5_cc_dup (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_end_seq_get.html#c.krb5_cc_end_seq_get">krb5_cc_end_seq_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_gen_new.html#c.krb5_cc_gen_new">krb5_cc_gen_new (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_config.html#c.krb5_cc_get_config">krb5_cc_get_config (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_flags.html#c.krb5_cc_get_flags">krb5_cc_get_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_full_name.html#c.krb5_cc_get_full_name">krb5_cc_get_full_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_name.html#c.krb5_cc_get_name">krb5_cc_get_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_principal.html#c.krb5_cc_get_principal">krb5_cc_get_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_type.html#c.krb5_cc_get_type">krb5_cc_get_type (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_initialize.html#c.krb5_cc_initialize">krb5_cc_initialize (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_move.html#c.krb5_cc_move">krb5_cc_move (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_new_unique.html#c.krb5_cc_new_unique">krb5_cc_new_unique (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_next_cred.html#c.krb5_cc_next_cred">krb5_cc_next_cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_remove_cred.html#c.krb5_cc_remove_cred">krb5_cc_remove_cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_resolve.html#c.krb5_cc_resolve">krb5_cc_resolve (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_retrieve_cred.html#c.krb5_cc_retrieve_cred">krb5_cc_retrieve_cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_select.html#c.krb5_cc_select">krb5_cc_select (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_set_config.html#c.krb5_cc_set_config">krb5_cc_set_config (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_set_default_name.html#c.krb5_cc_set_default_name">krb5_cc_set_default_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_set_flags.html#c.krb5_cc_set_flags">krb5_cc_set_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_start_seq_get.html#c.krb5_cc_start_seq_get">krb5_cc_start_seq_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_store_cred.html#c.krb5_cc_store_cred">krb5_cc_store_cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_support_switch.html#c.krb5_cc_support_switch">krb5_cc_support_switch (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_switch.html#c.krb5_cc_switch">krb5_cc_switch (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ccache.html#c.krb5_ccache">krb5_ccache (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cccol_cursor.html#c.krb5_cccol_cursor">krb5_cccol_cursor (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cccol_cursor_free.html#c.krb5_cccol_cursor_free">krb5_cccol_cursor_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cccol_cursor_new.html#c.krb5_cccol_cursor_new">krb5_cccol_cursor_new (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cccol_cursor_next.html#c.krb5_cccol_cursor_next">krb5_cccol_cursor_next (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cccol_have_content.html#c.krb5_cccol_have_content">krb5_cccol_have_content (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_change_password.html#c.krb5_change_password">krb5_change_password (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_check_clockskew.html#c.krb5_check_clockskew">krb5_check_clockskew (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_checksum.html#c.krb5_checksum">krb5_checksum (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_checksum.html#c.krb5_checksum.checksum_type">krb5_checksum.checksum_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_checksum.html#c.krb5_checksum.contents">krb5_checksum.contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_checksum.html#c.krb5_checksum.length">krb5_checksum.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_checksum.html#c.krb5_checksum.magic">krb5_checksum.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_checksum_size.html#c.krb5_checksum_size">krb5_checksum_size (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_chpw_message.html#c.krb5_chpw_message">krb5_chpw_message (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cksumtype.html#c.krb5_cksumtype">krb5_cksumtype (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cksumtype_to_string.html#c.krb5_cksumtype_to_string">krb5_cksumtype_to_string (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_clear_error_message.html#c.krb5_clear_error_message">krb5_clear_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_const.html#krb5_const">krb5_const (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_pointer.html#c.krb5_const_pointer">krb5_const_pointer (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal">krb5_const_principal (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal.data">krb5_const_principal.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal.length">krb5_const_principal.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal.magic">krb5_const_principal.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal.realm">krb5_const_principal.realm (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal.type">krb5_const_principal.type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_context.html#c.krb5_context">krb5_context (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_addresses.html#c.krb5_copy_addresses">krb5_copy_addresses (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_authdata.html#c.krb5_copy_authdata">krb5_copy_authdata (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_authenticator.html#c.krb5_copy_authenticator">krb5_copy_authenticator (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_checksum.html#c.krb5_copy_checksum">krb5_copy_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_context.html#c.krb5_copy_context">krb5_copy_context (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_creds.html#c.krb5_copy_creds">krb5_copy_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_data.html#c.krb5_copy_data">krb5_copy_data (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_error_message.html#c.krb5_copy_error_message">krb5_copy_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_keyblock.html#c.krb5_copy_keyblock">krb5_copy_keyblock (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_keyblock_contents.html#c.krb5_copy_keyblock_contents">krb5_copy_keyblock_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_principal.html#c.krb5_copy_principal">krb5_copy_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_ticket.html#c.krb5_copy_ticket">krb5_copy_ticket (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRED.html#KRB5_CRED">KRB5_CRED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred.html#c.krb5_cred">krb5_cred (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred.html#c.krb5_cred.enc_part">krb5_cred.enc_part (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred.html#c.krb5_cred.enc_part2">krb5_cred.enc_part2 (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred.html#c.krb5_cred.magic">krb5_cred.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred.html#c.krb5_cred.tickets">krb5_cred.tickets (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part">krb5_cred_enc_part (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.magic">krb5_cred_enc_part.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.nonce">krb5_cred_enc_part.nonce (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.r_address">krb5_cred_enc_part.r_address (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.s_address">krb5_cred_enc_part.s_address (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.ticket_info">krb5_cred_enc_part.ticket_info (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.timestamp">krb5_cred_enc_part.timestamp (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.usec">krb5_cred_enc_part.usec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info">krb5_cred_info (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.caddrs">krb5_cred_info.caddrs (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.client">krb5_cred_info.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.flags">krb5_cred_info.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.magic">krb5_cred_info.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.server">krb5_cred_info.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.session">krb5_cred_info.session (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.times">krb5_cred_info.times (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds">krb5_creds (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.addresses">krb5_creds.addresses (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.authdata">krb5_creds.authdata (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.client">krb5_creds.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.is_skey">krb5_creds.is_skey (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.keyblock">krb5_creds.keyblock (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.magic">krb5_creds.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.second_ticket">krb5_creds.second_ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.server">krb5_creds.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.ticket">krb5_creds.ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.ticket_flags">krb5_creds.ticket_flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.times">krb5_creds.times (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_crypto_iov.html#c.krb5_crypto_iov">krb5_crypto_iov (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_crypto_iov.html#c.krb5_crypto_iov.data">krb5_crypto_iov.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_crypto_iov.html#c.krb5_crypto_iov.flags">krb5_crypto_iov.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM.html#KRB5_CRYPTO_TYPE_CHECKSUM">KRB5_CRYPTO_TYPE_CHECKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA.html#KRB5_CRYPTO_TYPE_DATA">KRB5_CRYPTO_TYPE_DATA (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY.html#KRB5_CRYPTO_TYPE_EMPTY">KRB5_CRYPTO_TYPE_EMPTY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER.html#KRB5_CRYPTO_TYPE_HEADER">KRB5_CRYPTO_TYPE_HEADER (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING.html#KRB5_CRYPTO_TYPE_PADDING">KRB5_CRYPTO_TYPE_PADDING (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.html#KRB5_CRYPTO_TYPE_SIGN_ONLY">KRB5_CRYPTO_TYPE_SIGN_ONLY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM.html#KRB5_CRYPTO_TYPE_STREAM">KRB5_CRYPTO_TYPE_STREAM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER.html#KRB5_CRYPTO_TYPE_TRAILER">KRB5_CRYPTO_TYPE_TRAILER (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cryptotype.html#c.krb5_cryptotype">krb5_cryptotype (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CYBERSAFE_SECUREID.html#KRB5_CYBERSAFE_SECUREID">KRB5_CYBERSAFE_SECUREID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_data.html#c.krb5_data">krb5_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_data.html#c.krb5_data.data">krb5_data.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_data.html#c.krb5_data.length">krb5_data.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_data.html#c.krb5_data.magic">krb5_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_decode_authdata_container.html#c.krb5_decode_authdata_container">krb5_decode_authdata_container (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_decode_ticket.html#c.krb5_decode_ticket">krb5_decode_ticket (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_decrypt.html#c.krb5_decrypt">krb5_decrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_deltat.html#c.krb5_deltat">krb5_deltat (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_deltat_to_string.html#c.krb5_deltat_to_string">krb5_deltat_to_string (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS.html#KRB5_DOMAIN_X500_COMPRESS">KRB5_DOMAIN_X500_COMPRESS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_eblock_enctype.html#c.krb5_eblock_enctype">krb5_eblock_enctype (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_data.html#c.krb5_enc_data">krb5_enc_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_data.html#c.krb5_enc_data.ciphertext">krb5_enc_data.ciphertext (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_data.html#c.krb5_enc_data.enctype">krb5_enc_data.enctype (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_data.html#c.krb5_enc_data.kvno">krb5_enc_data.kvno (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_data.html#c.krb5_enc_data.magic">krb5_enc_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part">krb5_enc_kdc_rep_part (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.caddrs">krb5_enc_kdc_rep_part.caddrs (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.enc_padata">krb5_enc_kdc_rep_part.enc_padata (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.flags">krb5_enc_kdc_rep_part.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.key_exp">krb5_enc_kdc_rep_part.key_exp (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.last_req">krb5_enc_kdc_rep_part.last_req (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.magic">krb5_enc_kdc_rep_part.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.msg_type">krb5_enc_kdc_rep_part.msg_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.nonce">krb5_enc_kdc_rep_part.nonce (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.server">krb5_enc_kdc_rep_part.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.session">krb5_enc_kdc_rep_part.session (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.times">krb5_enc_kdc_rep_part.times (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part">krb5_enc_tkt_part (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.authorization_data">krb5_enc_tkt_part.authorization_data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.caddrs">krb5_enc_tkt_part.caddrs (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.client">krb5_enc_tkt_part.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.flags">krb5_enc_tkt_part.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.magic">krb5_enc_tkt_part.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.session">krb5_enc_tkt_part.session (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.times">krb5_enc_tkt_part.times (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.transited">krb5_enc_tkt_part.transited (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_encode_authdata_container.html#c.krb5_encode_authdata_container">krb5_encode_authdata_container (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP.html#KRB5_ENCPADATA_REQ_ENC_PA_REP">KRB5_ENCPADATA_REQ_ENC_PA_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_encrypt.html#c.krb5_encrypt">krb5_encrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_encrypt_block.html#c.krb5_encrypt_block">krb5_encrypt_block (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_encrypt_block.html#c.krb5_encrypt_block.crypto_entry">krb5_encrypt_block.crypto_entry (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_encrypt_block.html#c.krb5_encrypt_block.key">krb5_encrypt_block.key (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_encrypt_block.html#c.krb5_encrypt_block.magic">krb5_encrypt_block.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_encrypt_size.html#c.krb5_encrypt_size">krb5_encrypt_size (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enctype.html#c.krb5_enctype">krb5_enctype (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_enctype_to_name.html#c.krb5_enctype_to_name">krb5_enctype_to_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_enctype_to_string.html#c.krb5_enctype_to_string">krb5_enctype_to_string (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_ERROR.html#KRB5_ERROR">KRB5_ERROR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error">krb5_error (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.client">krb5_error.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.ctime">krb5_error.ctime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.cusec">krb5_error.cusec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.e_data">krb5_error.e_data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.error">krb5_error.error (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.magic">krb5_error.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.server">krb5_error.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.stime">krb5_error.stime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.susec">krb5_error.susec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.text">krb5_error.text (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error_code.html#c.krb5_error_code">krb5_error_code (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_expand_hostname.html#c.krb5_expand_hostname">krb5_expand_hostname (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_expire_callback_func.html#c.krb5_expire_callback_func">krb5_expire_callback_func (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_FAST_REQUIRED.html#KRB5_FAST_REQUIRED">KRB5_FAST_REQUIRED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_find_authdata.html#c.krb5_find_authdata">krb5_find_authdata (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_finish_key.html#c.krb5_finish_key">krb5_finish_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_finish_random_key.html#c.krb5_finish_random_key">krb5_finish_random_key (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_flags.html#c.krb5_flags">krb5_flags (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_addresses.html#c.krb5_free_addresses">krb5_free_addresses (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_ap_rep_enc_part.html#c.krb5_free_ap_rep_enc_part">krb5_free_ap_rep_enc_part (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_authdata.html#c.krb5_free_authdata">krb5_free_authdata (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_authenticator.html#c.krb5_free_authenticator">krb5_free_authenticator (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_checksum.html#c.krb5_free_checksum">krb5_free_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_checksum_contents.html#c.krb5_free_checksum_contents">krb5_free_checksum_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_cksumtypes.html#c.krb5_free_cksumtypes">krb5_free_cksumtypes (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_context.html#c.krb5_free_context">krb5_free_context (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_cred_contents.html#c.krb5_free_cred_contents">krb5_free_cred_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_creds.html#c.krb5_free_creds">krb5_free_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_data.html#c.krb5_free_data">krb5_free_data (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_data_contents.html#c.krb5_free_data_contents">krb5_free_data_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_default_realm.html#c.krb5_free_default_realm">krb5_free_default_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_enctypes.html#c.krb5_free_enctypes">krb5_free_enctypes (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_error.html#c.krb5_free_error">krb5_free_error (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_error_message.html#c.krb5_free_error_message">krb5_free_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_host_realm.html#c.krb5_free_host_realm">krb5_free_host_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_keyblock.html#c.krb5_free_keyblock">krb5_free_keyblock (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_keyblock_contents.html#c.krb5_free_keyblock_contents">krb5_free_keyblock_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_keytab_entry_contents.html#c.krb5_free_keytab_entry_contents">krb5_free_keytab_entry_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_principal.html#c.krb5_free_principal">krb5_free_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_string.html#c.krb5_free_string">krb5_free_string (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_tgt_creds.html#c.krb5_free_tgt_creds">krb5_free_tgt_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_ticket.html#c.krb5_free_ticket">krb5_free_ticket (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_unparsed_name.html#c.krb5_free_unparsed_name">krb5_free_unparsed_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_fwd_tgt_creds.html#c.krb5_fwd_tgt_creds">krb5_fwd_tgt_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_CACHED.html#KRB5_GC_CACHED">KRB5_GC_CACHED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_CANONICALIZE.html#KRB5_GC_CANONICALIZE">KRB5_GC_CANONICALIZE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION.html#KRB5_GC_CONSTRAINED_DELEGATION">KRB5_GC_CONSTRAINED_DELEGATION (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_FORWARDABLE.html#KRB5_GC_FORWARDABLE">KRB5_GC_FORWARDABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_NO_STORE.html#KRB5_GC_NO_STORE">KRB5_GC_NO_STORE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK.html#KRB5_GC_NO_TRANSIT_CHECK">KRB5_GC_NO_TRANSIT_CHECK (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_USER_USER.html#KRB5_GC_USER_USER">KRB5_GC_USER_USER (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_credentials.html#c.krb5_get_credentials">krb5_get_credentials (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_credentials_renew.html#c.krb5_get_credentials_renew">krb5_get_credentials_renew (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_credentials_validate.html#c.krb5_get_credentials_validate">krb5_get_credentials_validate (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_default_realm.html#c.krb5_get_default_realm">krb5_get_default_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_error_message.html#c.krb5_get_error_message">krb5_get_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_etype_info.html#c.krb5_get_etype_info">krb5_get_etype_info (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_fallback_host_realm.html#c.krb5_get_fallback_host_realm">krb5_get_fallback_host_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_host_realm.html#c.krb5_get_host_realm">krb5_get_host_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_in_tkt_with_keytab.html#c.krb5_get_in_tkt_with_keytab">krb5_get_in_tkt_with_keytab (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_in_tkt_with_password.html#c.krb5_get_in_tkt_with_password">krb5_get_in_tkt_with_password (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_in_tkt_with_skey.html#c.krb5_get_in_tkt_with_skey">krb5_get_in_tkt_with_skey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_keytab.html#c.krb5_get_init_creds_keytab">krb5_get_init_creds_keytab (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt">krb5_get_init_creds_opt (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.address_list">krb5_get_init_creds_opt.address_list (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.etype_list">krb5_get_init_creds_opt.etype_list (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.etype_list_length">krb5_get_init_creds_opt.etype_list_length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.flags">krb5_get_init_creds_opt.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.forwardable">krb5_get_init_creds_opt.forwardable (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.preauth_list">krb5_get_init_creds_opt.preauth_list (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.preauth_list_length">krb5_get_init_creds_opt.preauth_list_length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.proxiable">krb5_get_init_creds_opt.proxiable (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.renew_life">krb5_get_init_creds_opt.renew_life (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.salt">krb5_get_init_creds_opt.salt (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.tkt_life">krb5_get_init_creds_opt.tkt_life (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html#KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST">KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_alloc.html#c.krb5_get_init_creds_opt_alloc">krb5_get_init_creds_opt_alloc (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html#KRB5_GET_INIT_CREDS_OPT_ANONYMOUS">KRB5_GET_INIT_CREDS_OPT_ANONYMOUS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html#KRB5_GET_INIT_CREDS_OPT_CANONICALIZE">KRB5_GET_INIT_CREDS_OPT_CANONICALIZE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html#KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT">KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html#KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST">KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html#KRB5_GET_INIT_CREDS_OPT_FORWARDABLE">KRB5_GET_INIT_CREDS_OPT_FORWARDABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_free.html#c.krb5_get_init_creds_opt_free">krb5_get_init_creds_opt_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags.html#c.krb5_get_init_creds_opt_get_fast_flags">krb5_get_init_creds_opt_get_fast_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_init.html#c.krb5_get_init_creds_opt_init">krb5_get_init_creds_opt_init (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html#KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST">KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html#KRB5_GET_INIT_CREDS_OPT_PROXIABLE">KRB5_GET_INIT_CREDS_OPT_PROXIABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html#KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE">KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT.html#KRB5_GET_INIT_CREDS_OPT_SALT">KRB5_GET_INIT_CREDS_OPT_SALT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_address_list.html#c.krb5_get_init_creds_opt_set_address_list">krb5_get_init_creds_opt_set_address_list (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_anonymous.html#c.krb5_get_init_creds_opt_set_anonymous">krb5_get_init_creds_opt_set_anonymous (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.html#c.krb5_get_init_creds_opt_set_canonicalize">krb5_get_init_creds_opt_set_canonicalize (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt.html#c.krb5_get_init_creds_opt_set_change_password_prompt">krb5_get_init_creds_opt_set_change_password_prompt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_etype_list.html#c.krb5_get_init_creds_opt_set_etype_list">krb5_get_init_creds_opt_set_etype_list (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback.html#c.krb5_get_init_creds_opt_set_expire_callback">krb5_get_init_creds_opt_set_expire_callback (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache.html#c.krb5_get_init_creds_opt_set_fast_ccache">krb5_get_init_creds_opt_set_fast_ccache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name.html#c.krb5_get_init_creds_opt_set_fast_ccache_name">krb5_get_init_creds_opt_set_fast_ccache_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags.html#c.krb5_get_init_creds_opt_set_fast_flags">krb5_get_init_creds_opt_set_fast_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_forwardable.html#c.krb5_get_init_creds_opt_set_forwardable">krb5_get_init_creds_opt_set_forwardable (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache.html#c.krb5_get_init_creds_opt_set_in_ccache">krb5_get_init_creds_opt_set_in_ccache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache.html#c.krb5_get_init_creds_opt_set_out_ccache">krb5_get_init_creds_opt_set_out_ccache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_pa.html#c.krb5_get_init_creds_opt_set_pa">krb5_get_init_creds_opt_set_pa (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_pac_request.html#c.krb5_get_init_creds_opt_set_pac_request">krb5_get_init_creds_opt_set_pac_request (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list.html#c.krb5_get_init_creds_opt_set_preauth_list">krb5_get_init_creds_opt_set_preauth_list (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_proxiable.html#c.krb5_get_init_creds_opt_set_proxiable">krb5_get_init_creds_opt_set_proxiable (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_renew_life.html#c.krb5_get_init_creds_opt_set_renew_life">krb5_get_init_creds_opt_set_renew_life (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_responder.html#c.krb5_get_init_creds_opt_set_responder">krb5_get_init_creds_opt_set_responder (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_salt.html#c.krb5_get_init_creds_opt_set_salt">krb5_get_init_creds_opt_set_salt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life.html#c.krb5_get_init_creds_opt_set_tkt_life">krb5_get_init_creds_opt_set_tkt_life (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html#KRB5_GET_INIT_CREDS_OPT_TKT_LIFE">KRB5_GET_INIT_CREDS_OPT_TKT_LIFE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_password.html#c.krb5_get_init_creds_password">krb5_get_init_creds_password (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_permitted_enctypes.html#c.krb5_get_permitted_enctypes">krb5_get_permitted_enctypes (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_profile.html#c.krb5_get_profile">krb5_get_profile (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_prompt_types.html#c.krb5_get_prompt_types">krb5_get_prompt_types (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_renewed_creds.html#c.krb5_get_renewed_creds">krb5_get_renewed_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_server_rcache.html#c.krb5_get_server_rcache">krb5_get_server_rcache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_time_offsets.html#c.krb5_get_time_offsets">krb5_get_time_offsets (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_validated_creds.html#c.krb5_get_validated_creds">krb5_get_validated_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_gic_opt_pa_data.html#c.krb5_gic_opt_pa_data">krb5_gic_opt_pa_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_gic_opt_pa_data.html#c.krb5_gic_opt_pa_data.attr">krb5_gic_opt_pa_data.attr (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_gic_opt_pa_data.html#c.krb5_gic_opt_pa_data.value">krb5_gic_opt_pa_data.value (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_context.html#c.krb5_init_context">krb5_init_context (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INIT_CONTEXT_KDC.html#KRB5_INIT_CONTEXT_KDC">KRB5_INIT_CONTEXT_KDC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_context_profile.html#c.krb5_init_context_profile">krb5_init_context_profile (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE.html#KRB5_INIT_CONTEXT_SECURE">KRB5_INIT_CONTEXT_SECURE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_init_creds_context.html#c.krb5_init_creds_context">krb5_init_creds_context (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_free.html#c.krb5_init_creds_free">krb5_init_creds_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_get.html#c.krb5_init_creds_get">krb5_init_creds_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_get_creds.html#c.krb5_init_creds_get_creds">krb5_init_creds_get_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_get_error.html#c.krb5_init_creds_get_error">krb5_init_creds_get_error (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_get_times.html#c.krb5_init_creds_get_times">krb5_init_creds_get_times (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_init.html#c.krb5_init_creds_init">krb5_init_creds_init (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_set_keytab.html#c.krb5_init_creds_set_keytab">krb5_init_creds_set_keytab (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_set_password.html#c.krb5_init_creds_set_password">krb5_init_creds_set_password (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_set_service.html#c.krb5_init_creds_set_service">krb5_init_creds_set_service (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_step.html#c.krb5_init_creds_step">krb5_init_creds_step (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html#KRB5_INIT_CREDS_STEP_FLAG_CONTINUE">KRB5_INIT_CREDS_STEP_FLAG_CONTINUE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_keyblock.html#c.krb5_init_keyblock">krb5_init_keyblock (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_random_key.html#c.krb5_init_random_key">krb5_init_random_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_secure_context.html#c.krb5_init_secure_context">krb5_init_secure_context (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_int16.html#c.krb5_int16">krb5_int16 (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INT16_MAX.html#KRB5_INT16_MAX">KRB5_INT16_MAX (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INT16_MIN.html#KRB5_INT16_MIN">KRB5_INT16_MIN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_int32.html#c.krb5_int32">krb5_int32 (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INT32_MAX.html#KRB5_INT32_MAX">KRB5_INT32_MAX (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INT32_MIN.html#KRB5_INT32_MIN">KRB5_INT32_MIN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_is_config_principal.html#c.krb5_is_config_principal">krb5_is_config_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_is_referral_realm.html#c.krb5_is_referral_realm">krb5_is_referral_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_is_thread_safe.html#c.krb5_is_thread_safe">krb5_is_thread_safe (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_create_key.html#c.krb5_k_create_key">krb5_k_create_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_decrypt.html#c.krb5_k_decrypt">krb5_k_decrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_decrypt_iov.html#c.krb5_k_decrypt_iov">krb5_k_decrypt_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_encrypt.html#c.krb5_k_encrypt">krb5_k_encrypt (C function)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/api/krb5_k_encrypt_iov.html#c.krb5_k_encrypt_iov">krb5_k_encrypt_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_free_key.html#c.krb5_k_free_key">krb5_k_free_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_key_enctype.html#c.krb5_k_key_enctype">krb5_k_key_enctype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_key_keyblock.html#c.krb5_k_key_keyblock">krb5_k_key_keyblock (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_make_checksum.html#c.krb5_k_make_checksum">krb5_k_make_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_make_checksum_iov.html#c.krb5_k_make_checksum_iov">krb5_k_make_checksum_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_prf.html#c.krb5_k_prf">krb5_k_prf (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_reference_key.html#c.krb5_k_reference_key">krb5_k_reference_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_verify_checksum.html#c.krb5_k_verify_checksum">krb5_k_verify_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_verify_checksum_iov.html#c.krb5_k_verify_checksum_iov">krb5_k_verify_checksum_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep">krb5_kdc_rep (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.client">krb5_kdc_rep.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.enc_part">krb5_kdc_rep.enc_part (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.enc_part2">krb5_kdc_rep.enc_part2 (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.magic">krb5_kdc_rep.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.msg_type">krb5_kdc_rep.msg_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.padata">krb5_kdc_rep.padata (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.ticket">krb5_kdc_rep.ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req">krb5_kdc_req (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.addresses">krb5_kdc_req.addresses (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.authorization_data">krb5_kdc_req.authorization_data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.client">krb5_kdc_req.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.from">krb5_kdc_req.from (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.kdc_options">krb5_kdc_req.kdc_options (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.ktype">krb5_kdc_req.ktype (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.magic">krb5_kdc_req.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.msg_type">krb5_kdc_req.msg_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.nktypes">krb5_kdc_req.nktypes (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.nonce">krb5_kdc_req.nonce (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.padata">krb5_kdc_req.padata (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.rtime">krb5_kdc_req.rtime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.second_ticket">krb5_kdc_req.second_ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.server">krb5_kdc_req.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.till">krb5_kdc_req.till (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.unenc_authdata">krb5_kdc_req.unenc_authdata (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kdc_sign_ticket.html#c.krb5_kdc_sign_ticket">krb5_kdc_sign_ticket (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kdc_verify_ticket.html#c.krb5_kdc_verify_ticket">krb5_kdc_verify_ticket (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_key.html#c.krb5_key">krb5_key (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyblock.html#c.krb5_keyblock">krb5_keyblock (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyblock.html#c.krb5_keyblock.contents">krb5_keyblock.contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyblock.html#c.krb5_keyblock.enctype">krb5_keyblock.enctype (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyblock.html#c.krb5_keyblock.length">krb5_keyblock.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyblock.html#c.krb5_keyblock.magic">krb5_keyblock.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab.html#c.krb5_keytab">krb5_keytab (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry">krb5_keytab_entry (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry.key">krb5_keytab_entry.key (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry.magic">krb5_keytab_entry.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry.principal">krb5_keytab_entry.principal (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry.timestamp">krb5_keytab_entry.timestamp (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry.vno">krb5_keytab_entry.vno (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyusage.html#c.krb5_keyusage">krb5_keyusage (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE.html#KRB5_KEYUSAGE_AD_ITE">KRB5_KEYUSAGE_AD_ITE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html#KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM">KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE.html#KRB5_KEYUSAGE_AD_MTE">KRB5_KEYUSAGE_AD_MTE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH.html#KRB5_KEYUSAGE_AD_SIGNEDPATH">KRB5_KEYUSAGE_AD_SIGNEDPATH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART.html#KRB5_KEYUSAGE_AP_REP_ENCPART">KRB5_KEYUSAGE_AP_REP_ENCPART (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH.html#KRB5_KEYUSAGE_AP_REQ_AUTH">KRB5_KEYUSAGE_AP_REQ_AUTH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html#KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM">KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM.html#KRB5_KEYUSAGE_APP_DATA_CKSUM">KRB5_KEYUSAGE_APP_DATA_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html#KRB5_KEYUSAGE_APP_DATA_ENCRYPT">KRB5_KEYUSAGE_APP_DATA_ENCRYPT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART.html#KRB5_KEYUSAGE_AS_REP_ENCPART">KRB5_KEYUSAGE_AS_REP_ENCPART (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ.html#KRB5_KEYUSAGE_AS_REQ">KRB5_KEYUSAGE_AS_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html#KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS">KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC.html#KRB5_KEYUSAGE_CAMMAC">KRB5_KEYUSAGE_CAMMAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html#KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT">KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html#KRB5_KEYUSAGE_ENC_CHALLENGE_KDC">KRB5_KEYUSAGE_ENC_CHALLENGE_KDC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC.html#KRB5_KEYUSAGE_FAST_ENC">KRB5_KEYUSAGE_FAST_ENC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED.html#KRB5_KEYUSAGE_FAST_FINISHED">KRB5_KEYUSAGE_FAST_FINISHED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP.html#KRB5_KEYUSAGE_FAST_REP">KRB5_KEYUSAGE_FAST_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html#KRB5_KEYUSAGE_FAST_REQ_CHKSUM">KRB5_KEYUSAGE_FAST_REQ_CHKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC.html#KRB5_KEYUSAGE_GSS_TOK_MIC">KRB5_KEYUSAGE_GSS_TOK_MIC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html#KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG">KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html#KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV">KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED.html#KRB5_KEYUSAGE_IAKERB_FINISHED">KRB5_KEYUSAGE_IAKERB_FINISHED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET.html#KRB5_KEYUSAGE_KDC_REP_TICKET">KRB5_KEYUSAGE_KDC_REP_TICKET (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART.html#KRB5_KEYUSAGE_KRB_CRED_ENCPART">KRB5_KEYUSAGE_KRB_CRED_ENCPART (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html#KRB5_KEYUSAGE_KRB_ERROR_CKSUM">KRB5_KEYUSAGE_KRB_ERROR_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html#KRB5_KEYUSAGE_KRB_PRIV_ENCPART">KRB5_KEYUSAGE_KRB_PRIV_ENCPART (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html#KRB5_KEYUSAGE_KRB_SAFE_CKSUM">KRB5_KEYUSAGE_KRB_SAFE_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS.html#KRB5_KEYUSAGE_PA_AS_FRESHNESS">KRB5_KEYUSAGE_PA_AS_FRESHNESS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE.html#KRB5_KEYUSAGE_PA_FX_COOKIE">KRB5_KEYUSAGE_PA_FX_COOKIE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST.html#KRB5_KEYUSAGE_PA_OTP_REQUEST">KRB5_KEYUSAGE_PA_OTP_REQUEST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX.html#KRB5_KEYUSAGE_PA_PKINIT_KX">KRB5_KEYUSAGE_PA_PKINIT_KX (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html#KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY">KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html#KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST">KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html#KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html#KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE.html#KRB5_KEYUSAGE_PA_SAM_RESPONSE">KRB5_KEYUSAGE_PA_SAM_RESPONSE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_SPAKE.html#KRB5_KEYUSAGE_SPAKE">KRB5_KEYUSAGE_SPAKE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html#KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY">KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html#KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY">KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html#KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY">KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html#KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY">KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH.html#KRB5_KEYUSAGE_TGS_REQ_AUTH">KRB5_KEYUSAGE_TGS_REQ_AUTH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html#KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM">KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED.html#KRB5_KPASSWD_ACCESSDENIED">KRB5_KPASSWD_ACCESSDENIED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_AUTHERROR.html#KRB5_KPASSWD_AUTHERROR">KRB5_KPASSWD_AUTHERROR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION.html#KRB5_KPASSWD_BAD_VERSION">KRB5_KPASSWD_BAD_VERSION (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_HARDERROR.html#KRB5_KPASSWD_HARDERROR">KRB5_KPASSWD_HARDERROR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html#KRB5_KPASSWD_INITIAL_FLAG_NEEDED">KRB5_KPASSWD_INITIAL_FLAG_NEEDED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_MALFORMED.html#KRB5_KPASSWD_MALFORMED">KRB5_KPASSWD_MALFORMED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_SOFTERROR.html#KRB5_KPASSWD_SOFTERROR">KRB5_KPASSWD_SOFTERROR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_SUCCESS.html#KRB5_KPASSWD_SUCCESS">KRB5_KPASSWD_SUCCESS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_add_entry.html#c.krb5_kt_add_entry">krb5_kt_add_entry (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_client_default.html#c.krb5_kt_client_default">krb5_kt_client_default (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_close.html#c.krb5_kt_close">krb5_kt_close (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kt_cursor.html#c.krb5_kt_cursor">krb5_kt_cursor (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_default.html#c.krb5_kt_default">krb5_kt_default (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_default_name.html#c.krb5_kt_default_name">krb5_kt_default_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_dup.html#c.krb5_kt_dup">krb5_kt_dup (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_end_seq_get.html#c.krb5_kt_end_seq_get">krb5_kt_end_seq_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_free_entry.html#c.krb5_kt_free_entry">krb5_kt_free_entry (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_get_entry.html#c.krb5_kt_get_entry">krb5_kt_get_entry (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_get_name.html#c.krb5_kt_get_name">krb5_kt_get_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_get_type.html#c.krb5_kt_get_type">krb5_kt_get_type (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_have_content.html#c.krb5_kt_have_content">krb5_kt_have_content (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_next_entry.html#c.krb5_kt_next_entry">krb5_kt_next_entry (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_read_service_key.html#c.krb5_kt_read_service_key">krb5_kt_read_service_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_remove_entry.html#c.krb5_kt_remove_entry">krb5_kt_remove_entry (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_resolve.html#c.krb5_kt_resolve">krb5_kt_resolve (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_start_seq_get.html#c.krb5_kt_start_seq_get">krb5_kt_start_seq_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kuserok.html#c.krb5_kuserok">krb5_kuserok (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kvno.html#c.krb5_kvno">krb5_kvno (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_last_req_entry.html#c.krb5_last_req_entry">krb5_last_req_entry (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_last_req_entry.html#c.krb5_last_req_entry.lr_type">krb5_last_req_entry.lr_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_last_req_entry.html#c.krb5_last_req_entry.magic">krb5_last_req_entry.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_last_req_entry.html#c.krb5_last_req_entry.value">krb5_last_req_entry.value (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME.html#KRB5_LRQ_ALL_ACCT_EXPTIME">KRB5_LRQ_ALL_ACCT_EXPTIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL.html#KRB5_LRQ_ALL_LAST_INITIAL">KRB5_LRQ_ALL_LAST_INITIAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL.html#KRB5_LRQ_ALL_LAST_RENEWAL">KRB5_LRQ_ALL_LAST_RENEWAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ.html#KRB5_LRQ_ALL_LAST_REQ">KRB5_LRQ_ALL_LAST_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT.html#KRB5_LRQ_ALL_LAST_TGT">KRB5_LRQ_ALL_LAST_TGT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED.html#KRB5_LRQ_ALL_LAST_TGT_ISSUED">KRB5_LRQ_ALL_LAST_TGT_ISSUED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME.html#KRB5_LRQ_ALL_PW_EXPTIME">KRB5_LRQ_ALL_PW_EXPTIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_NONE.html#KRB5_LRQ_NONE">KRB5_LRQ_NONE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME.html#KRB5_LRQ_ONE_ACCT_EXPTIME">KRB5_LRQ_ONE_ACCT_EXPTIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL.html#KRB5_LRQ_ONE_LAST_INITIAL">KRB5_LRQ_ONE_LAST_INITIAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL.html#KRB5_LRQ_ONE_LAST_RENEWAL">KRB5_LRQ_ONE_LAST_RENEWAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ.html#KRB5_LRQ_ONE_LAST_REQ">KRB5_LRQ_ONE_LAST_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT.html#KRB5_LRQ_ONE_LAST_TGT">KRB5_LRQ_ONE_LAST_TGT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED.html#KRB5_LRQ_ONE_LAST_TGT_ISSUED">KRB5_LRQ_ONE_LAST_TGT_ISSUED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME.html#KRB5_LRQ_ONE_PW_EXPTIME">KRB5_LRQ_ONE_PW_EXPTIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_magic.html#c.krb5_magic">krb5_magic (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_make_authdata_kdc_issued.html#c.krb5_make_authdata_kdc_issued">krb5_make_authdata_kdc_issued (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_marshal_credentials.html#c.krb5_marshal_credentials">krb5_marshal_credentials (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_merge_authdata.html#c.krb5_merge_authdata">krb5_merge_authdata (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_1cred.html#c.krb5_mk_1cred">krb5_mk_1cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_error.html#c.krb5_mk_error">krb5_mk_error (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_ncred.html#c.krb5_mk_ncred">krb5_mk_ncred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_priv.html#c.krb5_mk_priv">krb5_mk_priv (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_rep.html#c.krb5_mk_rep">krb5_mk_rep (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_rep_dce.html#c.krb5_mk_rep_dce">krb5_mk_rep_dce (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_req.html#c.krb5_mk_req">krb5_mk_req (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_mk_req_checksum_func.html#c.krb5_mk_req_checksum_func">krb5_mk_req_checksum_func (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_req_extended.html#c.krb5_mk_req_extended">krb5_mk_req_extended (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_safe.html#c.krb5_mk_safe">krb5_mk_safe (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_msgtype.html#c.krb5_msgtype">krb5_msgtype (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID.html#KRB5_NT_ENT_PRINCIPAL_AND_ID">KRB5_NT_ENT_PRINCIPAL_AND_ID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL.html#KRB5_NT_ENTERPRISE_PRINCIPAL">KRB5_NT_ENTERPRISE_PRINCIPAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_MS_PRINCIPAL.html#KRB5_NT_MS_PRINCIPAL">KRB5_NT_MS_PRINCIPAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID.html#KRB5_NT_MS_PRINCIPAL_AND_ID">KRB5_NT_MS_PRINCIPAL_AND_ID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_PRINCIPAL.html#KRB5_NT_PRINCIPAL">KRB5_NT_PRINCIPAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_SMTP_NAME.html#KRB5_NT_SMTP_NAME">KRB5_NT_SMTP_NAME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_SRV_HST.html#KRB5_NT_SRV_HST">KRB5_NT_SRV_HST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_SRV_INST.html#KRB5_NT_SRV_INST">KRB5_NT_SRV_INST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_SRV_XHST.html#KRB5_NT_SRV_XHST">KRB5_NT_SRV_XHST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_UID.html#KRB5_NT_UID">KRB5_NT_UID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_UNKNOWN.html#KRB5_NT_UNKNOWN">KRB5_NT_UNKNOWN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_WELLKNOWN.html#KRB5_NT_WELLKNOWN">KRB5_NT_WELLKNOWN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_X500_PRINCIPAL.html#KRB5_NT_X500_PRINCIPAL">KRB5_NT_X500_PRINCIPAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_octet.html#c.krb5_octet">krb5_octet (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_os_localaddr.html#c.krb5_os_localaddr">krb5_os_localaddr (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_data.html#c.krb5_pa_data">krb5_pa_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_data.html#c.krb5_pa_data.contents">krb5_pa_data.contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_data.html#c.krb5_pa_data.length">krb5_pa_data.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_data.html#c.krb5_pa_data.magic">krb5_pa_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_data.html#c.krb5_pa_data.pa_type">krb5_pa_data.pa_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_pac_req.html#c.krb5_pa_pac_req">krb5_pa_pac_req (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_pac_req.html#c.krb5_pa_pac_req.include_pac">krb5_pa_pac_req.include_pac (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data">krb5_pa_server_referral_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data.referral_valid_until">krb5_pa_server_referral_data.referral_valid_until (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data.referred_realm">krb5_pa_server_referral_data.referred_realm (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data.rep_cksum">krb5_pa_server_referral_data.rep_cksum (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data.requested_principal_name">krb5_pa_server_referral_data.requested_principal_name (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data.true_principal_name">krb5_pa_server_referral_data.true_principal_name (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_svr_referral_data.html#c.krb5_pa_svr_referral_data">krb5_pa_svr_referral_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_svr_referral_data.html#c.krb5_pa_svr_referral_data.principal">krb5_pa_svr_referral_data.principal (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pac.html#c.krb5_pac">krb5_pac (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_add_buffer.html#c.krb5_pac_add_buffer">krb5_pac_add_buffer (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO.html#KRB5_PAC_ATTRIBUTES_INFO">KRB5_PAC_ATTRIBUTES_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS.html#KRB5_PAC_CLIENT_CLAIMS">KRB5_PAC_CLIENT_CLAIMS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_CLIENT_INFO.html#KRB5_PAC_CLIENT_INFO">KRB5_PAC_CLIENT_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO.html#KRB5_PAC_CREDENTIALS_INFO">KRB5_PAC_CREDENTIALS_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_DELEGATION_INFO.html#KRB5_PAC_DELEGATION_INFO">KRB5_PAC_DELEGATION_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS.html#KRB5_PAC_DEVICE_CLAIMS">KRB5_PAC_DEVICE_CLAIMS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_DEVICE_INFO.html#KRB5_PAC_DEVICE_INFO">KRB5_PAC_DEVICE_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_free.html#c.krb5_pac_free">krb5_pac_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_get_buffer.html#c.krb5_pac_get_buffer">krb5_pac_get_buffer (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_get_client_info.html#c.krb5_pac_get_client_info">krb5_pac_get_client_info (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_get_types.html#c.krb5_pac_get_types">krb5_pac_get_types (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_init.html#c.krb5_pac_init">krb5_pac_init (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_LOGON_INFO.html#KRB5_PAC_LOGON_INFO">KRB5_PAC_LOGON_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_parse.html#c.krb5_pac_parse">krb5_pac_parse (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM.html#KRB5_PAC_PRIVSVR_CHECKSUM">KRB5_PAC_PRIVSVR_CHECKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_REQUESTOR.html#KRB5_PAC_REQUESTOR">KRB5_PAC_REQUESTOR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM.html#KRB5_PAC_SERVER_CHECKSUM">KRB5_PAC_SERVER_CHECKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_sign.html#c.krb5_pac_sign">krb5_pac_sign (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_sign_ext.html#c.krb5_pac_sign_ext">krb5_pac_sign_ext (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM.html#KRB5_PAC_TICKET_CHECKSUM">KRB5_PAC_TICKET_CHECKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO.html#KRB5_PAC_UPN_DNS_INFO">KRB5_PAC_UPN_DNS_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_verify.html#c.krb5_pac_verify">krb5_pac_verify (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_verify_ext.html#c.krb5_pac_verify_ext">krb5_pac_verify_ext (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_AFS3_SALT.html#KRB5_PADATA_AFS3_SALT">KRB5_PADATA_AFS3_SALT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_AP_REQ.html#KRB5_PADATA_AP_REQ">KRB5_PADATA_AP_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM.html#KRB5_PADATA_AS_CHECKSUM">KRB5_PADATA_AS_CHECKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS.html#KRB5_PADATA_AS_FRESHNESS">KRB5_PADATA_AS_FRESHNESS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID.html#KRB5_PADATA_ENC_SANDIA_SECURID">KRB5_PADATA_ENC_SANDIA_SECURID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP.html#KRB5_PADATA_ENC_TIMESTAMP">KRB5_PADATA_ENC_TIMESTAMP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME.html#KRB5_PADATA_ENC_UNIX_TIME">KRB5_PADATA_ENC_UNIX_TIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE.html#KRB5_PADATA_ENCRYPTED_CHALLENGE">KRB5_PADATA_ENCRYPTED_CHALLENGE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ETYPE_INFO.html#KRB5_PADATA_ETYPE_INFO">KRB5_PADATA_ETYPE_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2.html#KRB5_PADATA_ETYPE_INFO2">KRB5_PADATA_ETYPE_INFO2 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_FOR_USER.html#KRB5_PADATA_FOR_USER">KRB5_PADATA_FOR_USER (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_FX_COOKIE.html#KRB5_PADATA_FX_COOKIE">KRB5_PADATA_FX_COOKIE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_FX_ERROR.html#KRB5_PADATA_FX_ERROR">KRB5_PADATA_FX_ERROR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_FX_FAST.html#KRB5_PADATA_FX_FAST">KRB5_PADATA_FX_FAST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA.html#KRB5_PADATA_GET_FROM_TYPED_DATA">KRB5_PADATA_GET_FROM_TYPED_DATA (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_NONE.html#KRB5_PADATA_NONE">KRB5_PADATA_NONE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_OSF_DCE.html#KRB5_PADATA_OSF_DCE">KRB5_PADATA_OSF_DCE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE.html#KRB5_PADATA_OTP_CHALLENGE">KRB5_PADATA_OTP_CHALLENGE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE.html#KRB5_PADATA_OTP_PIN_CHANGE">KRB5_PADATA_OTP_PIN_CHANGE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_OTP_REQUEST.html#KRB5_PADATA_OTP_REQUEST">KRB5_PADATA_OTP_REQUEST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS.html#KRB5_PADATA_PAC_OPTIONS">KRB5_PADATA_PAC_OPTIONS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PAC_REQUEST.html#KRB5_PADATA_PAC_REQUEST">KRB5_PADATA_PAC_REQUEST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PK_AS_REP.html#KRB5_PADATA_PK_AS_REP">KRB5_PADATA_PK_AS_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD.html#KRB5_PADATA_PK_AS_REP_OLD">KRB5_PADATA_PK_AS_REP_OLD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PK_AS_REQ.html#KRB5_PADATA_PK_AS_REQ">KRB5_PADATA_PK_AS_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD.html#KRB5_PADATA_PK_AS_REQ_OLD">KRB5_PADATA_PK_AS_REQ_OLD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PKINIT_KX.html#KRB5_PADATA_PKINIT_KX">KRB5_PADATA_PKINIT_KX (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PW_SALT.html#KRB5_PADATA_PW_SALT">KRB5_PADATA_PW_SALT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2.html#KRB5_PADATA_REDHAT_IDP_OAUTH2">KRB5_PADATA_REDHAT_IDP_OAUTH2 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_REFERRAL.html#KRB5_PADATA_REFERRAL">KRB5_PADATA_REFERRAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_S4U_X509_USER.html#KRB5_PADATA_S4U_X509_USER">KRB5_PADATA_S4U_X509_USER (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE.html#KRB5_PADATA_SAM_CHALLENGE">KRB5_PADATA_SAM_CHALLENGE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2.html#KRB5_PADATA_SAM_CHALLENGE_2">KRB5_PADATA_SAM_CHALLENGE_2 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT.html#KRB5_PADATA_SAM_REDIRECT">KRB5_PADATA_SAM_REDIRECT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE.html#KRB5_PADATA_SAM_RESPONSE">KRB5_PADATA_SAM_RESPONSE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2.html#KRB5_PADATA_SAM_RESPONSE_2">KRB5_PADATA_SAM_RESPONSE_2 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SESAME.html#KRB5_PADATA_SESAME">KRB5_PADATA_SESAME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SPAKE.html#KRB5_PADATA_SPAKE">KRB5_PADATA_SPAKE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO.html#KRB5_PADATA_SVR_REFERRAL_INFO">KRB5_PADATA_SVR_REFERRAL_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_TGS_REQ.html#KRB5_PADATA_TGS_REQ">KRB5_PADATA_TGS_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO.html#KRB5_PADATA_USE_SPECIFIED_KVNO">KRB5_PADATA_USE_SPECIFIED_KVNO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_parse_name.html#c.krb5_parse_name">krb5_parse_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_parse_name_flags.html#c.krb5_parse_name_flags">krb5_parse_name_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pointer.html#c.krb5_pointer">krb5_pointer (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_post_recv_fn.html#c.krb5_post_recv_fn">krb5_post_recv_fn (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pre_send_fn.html#c.krb5_pre_send_fn">krb5_pre_send_fn (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_preauthtype.html#c.krb5_preauthtype">krb5_preauthtype (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_prepend_error_message.html#c.krb5_prepend_error_message">krb5_prepend_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_component.html#krb5_princ_component">krb5_princ_component (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_name.html#krb5_princ_name">krb5_princ_name (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_realm.html#krb5_princ_realm">krb5_princ_realm (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_set_realm.html#krb5_princ_set_realm">krb5_princ_set_realm (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_set_realm_data.html#krb5_princ_set_realm_data">krb5_princ_set_realm_data (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_set_realm_length.html#krb5_princ_set_realm_length">krb5_princ_set_realm_length (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_size.html#krb5_princ_size">krb5_princ_size (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_type.html#krb5_princ_type">krb5_princ_type (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal">krb5_principal (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal.data">krb5_principal.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal.length">krb5_principal.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal.magic">krb5_principal.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal.realm">krb5_principal.realm (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal.type">krb5_principal.type (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_principal2salt.html#c.krb5_principal2salt">krb5_principal2salt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_principal_compare.html#c.krb5_principal_compare">krb5_principal_compare (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_principal_compare_any_realm.html#c.krb5_principal_compare_any_realm">krb5_principal_compare_any_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD.html#KRB5_PRINCIPAL_COMPARE_CASEFOLD">KRB5_PRINCIPAL_COMPARE_CASEFOLD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html#KRB5_PRINCIPAL_COMPARE_ENTERPRISE">KRB5_PRINCIPAL_COMPARE_ENTERPRISE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_principal_compare_flags.html#c.krb5_principal_compare_flags">krb5_principal_compare_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html#KRB5_PRINCIPAL_COMPARE_IGNORE_REALM">KRB5_PRINCIPAL_COMPARE_IGNORE_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8.html#KRB5_PRINCIPAL_COMPARE_UTF8">KRB5_PRINCIPAL_COMPARE_UTF8 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data">krb5_principal_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data.data">krb5_principal_data.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data.length">krb5_principal_data.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data.magic">krb5_principal_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data.realm">krb5_principal_data.realm (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data.type">krb5_principal_data.type (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE.html#KRB5_PRINCIPAL_PARSE_ENTERPRISE">KRB5_PRINCIPAL_PARSE_ENTERPRISE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html#KRB5_PRINCIPAL_PARSE_IGNORE_REALM">KRB5_PRINCIPAL_PARSE_IGNORE_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html#KRB5_PRINCIPAL_PARSE_NO_DEF_REALM">KRB5_PRINCIPAL_PARSE_NO_DEF_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM.html#KRB5_PRINCIPAL_PARSE_NO_REALM">KRB5_PRINCIPAL_PARSE_NO_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html#KRB5_PRINCIPAL_PARSE_REQUIRE_REALM">KRB5_PRINCIPAL_PARSE_REQUIRE_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY.html#KRB5_PRINCIPAL_UNPARSE_DISPLAY">KRB5_PRINCIPAL_UNPARSE_DISPLAY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM.html#KRB5_PRINCIPAL_UNPARSE_NO_REALM">KRB5_PRINCIPAL_UNPARSE_NO_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT.html#KRB5_PRINCIPAL_UNPARSE_SHORT">KRB5_PRINCIPAL_UNPARSE_SHORT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRIV.html#KRB5_PRIV">KRB5_PRIV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_process_key.html#c.krb5_process_key">krb5_process_key (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompt.html#c.krb5_prompt">krb5_prompt (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompt.html#c.krb5_prompt.hidden">krb5_prompt.hidden (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompt.html#c.krb5_prompt.prompt">krb5_prompt.prompt (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompt.html#c.krb5_prompt.reply">krb5_prompt.reply (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompt_type.html#c.krb5_prompt_type">krb5_prompt_type (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD.html#KRB5_PROMPT_TYPE_NEW_PASSWORD">KRB5_PROMPT_TYPE_NEW_PASSWORD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html#KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN">KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD.html#KRB5_PROMPT_TYPE_PASSWORD">KRB5_PROMPT_TYPE_PASSWORD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH.html#KRB5_PROMPT_TYPE_PREAUTH">KRB5_PROMPT_TYPE_PREAUTH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompter_fct.html#c.krb5_prompter_fct">krb5_prompter_fct (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_prompter_posix.html#c.krb5_prompter_posix">krb5_prompter_posix (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PVNO.html#KRB5_PVNO">KRB5_PVNO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pwd_data.html#c.krb5_pwd_data">krb5_pwd_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pwd_data.html#c.krb5_pwd_data.element">krb5_pwd_data.element (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pwd_data.html#c.krb5_pwd_data.magic">krb5_pwd_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pwd_data.html#c.krb5_pwd_data.sequence_count">krb5_pwd_data.sequence_count (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_random_key.html#c.krb5_random_key">krb5_random_key (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_rcache.html#c.krb5_rcache">krb5_rcache (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_cred.html#c.krb5_rd_cred">krb5_rd_cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_error.html#c.krb5_rd_error">krb5_rd_error (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_priv.html#c.krb5_rd_priv">krb5_rd_priv (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_rep.html#c.krb5_rd_rep">krb5_rd_rep (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_rep_dce.html#c.krb5_rd_rep_dce">krb5_rd_rep_dce (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_req.html#c.krb5_rd_req">krb5_rd_req (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_safe.html#c.krb5_rd_safe">krb5_rd_safe (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_read_password.html#c.krb5_read_password">krb5_read_password (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_REALM_BRANCH_CHAR.html#KRB5_REALM_BRANCH_CHAR">KRB5_REALM_BRANCH_CHAR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_realm_compare.html#c.krb5_realm_compare">krb5_realm_compare (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_recvauth.html#c.krb5_recvauth">krb5_recvauth (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS.html#KRB5_RECVAUTH_BADAUTHVERS">KRB5_RECVAUTH_BADAUTHVERS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION.html#KRB5_RECVAUTH_SKIP_VERSION">KRB5_RECVAUTH_SKIP_VERSION (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_recvauth_version.html#c.krb5_recvauth_version">krb5_recvauth_version (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_REFERRAL_REALM.html#KRB5_REFERRAL_REALM">KRB5_REFERRAL_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_replay_data.html#c.krb5_replay_data">krb5_replay_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_replay_data.html#c.krb5_replay_data.seq">krb5_replay_data.seq (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_replay_data.html#c.krb5_replay_data.timestamp">krb5_replay_data.timestamp (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_replay_data.html#c.krb5_replay_data.usec">krb5_replay_data.usec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_context.html#c.krb5_responder_context">krb5_responder_context (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_fn.html#c.krb5_responder_fn">krb5_responder_fn (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_get_challenge.html#c.krb5_responder_get_challenge">krb5_responder_get_challenge (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_list_questions.html#c.krb5_responder_list_questions">krb5_responder_list_questions (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_challenge.html#c.krb5_responder_otp_challenge">krb5_responder_otp_challenge (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_challenge.html#c.krb5_responder_otp_challenge.service">krb5_responder_otp_challenge.service (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_challenge.html#c.krb5_responder_otp_challenge.tokeninfo">krb5_responder_otp_challenge.tokeninfo (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_otp_challenge_free.html#c.krb5_responder_otp_challenge_free">krb5_responder_otp_challenge_free (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html#KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN">KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html#KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN">KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html#KRB5_RESPONDER_OTP_FLAGS_NEXTOTP">KRB5_RESPONDER_OTP_FLAGS_NEXTOTP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html#KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN">KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html#KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC">KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html#KRB5_RESPONDER_OTP_FORMAT_DECIMAL">KRB5_RESPONDER_OTP_FORMAT_DECIMAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html#KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL">KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_otp_get_challenge.html#c.krb5_responder_otp_get_challenge">krb5_responder_otp_get_challenge (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_otp_set_answer.html#c.krb5_responder_otp_set_answer">krb5_responder_otp_set_answer (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo">krb5_responder_otp_tokeninfo (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.alg_id">krb5_responder_otp_tokeninfo.alg_id (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.challenge">krb5_responder_otp_tokeninfo.challenge (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.flags">krb5_responder_otp_tokeninfo.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.format">krb5_responder_otp_tokeninfo.format (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.length">krb5_responder_otp_tokeninfo.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.token_id">krb5_responder_otp_tokeninfo.token_id (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.vendor">krb5_responder_otp_tokeninfo.vendor (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_pkinit_challenge.html#c.krb5_responder_pkinit_challenge">krb5_responder_pkinit_challenge (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_pkinit_challenge.html#c.krb5_responder_pkinit_challenge.identities">krb5_responder_pkinit_challenge.identities (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_pkinit_challenge_free.html#c.krb5_responder_pkinit_challenge_free">krb5_responder_pkinit_challenge_free (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html#KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html#KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html#KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_pkinit_get_challenge.html#c.krb5_responder_pkinit_get_challenge">krb5_responder_pkinit_get_challenge (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_pkinit_identity.html#c.krb5_responder_pkinit_identity">krb5_responder_pkinit_identity (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_pkinit_identity.html#c.krb5_responder_pkinit_identity.identity">krb5_responder_pkinit_identity.identity (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_pkinit_identity.html#c.krb5_responder_pkinit_identity.token_flags">krb5_responder_pkinit_identity.token_flags (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_pkinit_set_answer.html#c.krb5_responder_pkinit_set_answer">krb5_responder_pkinit_set_answer (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP.html#KRB5_RESPONDER_QUESTION_OTP">KRB5_RESPONDER_QUESTION_OTP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD.html#KRB5_RESPONDER_QUESTION_PASSWORD">KRB5_RESPONDER_QUESTION_PASSWORD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT.html#KRB5_RESPONDER_QUESTION_PKINIT">KRB5_RESPONDER_QUESTION_PKINIT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_set_answer.html#c.krb5_responder_set_answer">krb5_responder_set_answer (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response">krb5_response (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response.expected_nonce">krb5_response.expected_nonce (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response.magic">krb5_response.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response.message_type">krb5_response.message_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response.request_time">krb5_response.request_time (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response.response">krb5_response.response (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_roundup.html#krb5_roundup">krb5_roundup (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_SAFE.html#KRB5_SAFE">KRB5_SAFE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_salttype_to_string.html#c.krb5_salttype_to_string">krb5_salttype_to_string (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD.html#KRB5_SAM_MUST_PK_ENCRYPT_SAD">KRB5_SAM_MUST_PK_ENCRYPT_SAD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD.html#KRB5_SAM_SEND_ENCRYPTED_SAD">KRB5_SAM_SEND_ENCRYPTED_SAD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY.html#KRB5_SAM_USE_SAD_AS_KEY">KRB5_SAM_USE_SAD_AS_KEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_sendauth.html#c.krb5_sendauth">krb5_sendauth (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_server_decrypt_ticket_keytab.html#c.krb5_server_decrypt_ticket_keytab">krb5_server_decrypt_ticket_keytab (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_default_realm.html#c.krb5_set_default_realm">krb5_set_default_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_default_tgs_enctypes.html#c.krb5_set_default_tgs_enctypes">krb5_set_default_tgs_enctypes (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_error_message.html#c.krb5_set_error_message">krb5_set_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_kdc_recv_hook.html#c.krb5_set_kdc_recv_hook">krb5_set_kdc_recv_hook (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_kdc_send_hook.html#c.krb5_set_kdc_send_hook">krb5_set_kdc_send_hook (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_password.html#c.krb5_set_password">krb5_set_password (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_password_using_ccache.html#c.krb5_set_password_using_ccache">krb5_set_password_using_ccache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_principal_realm.html#c.krb5_set_principal_realm">krb5_set_principal_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_real_time.html#c.krb5_set_real_time">krb5_set_real_time (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_trace_callback.html#c.krb5_set_trace_callback">krb5_set_trace_callback (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_trace_filename.html#c.krb5_set_trace_filename">krb5_set_trace_filename (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_sname_match.html#c.krb5_sname_match">krb5_sname_match (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_sname_to_principal.html#c.krb5_sname_to_principal">krb5_sname_to_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_cksumtype.html#c.krb5_string_to_cksumtype">krb5_string_to_cksumtype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_deltat.html#c.krb5_string_to_deltat">krb5_string_to_deltat (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_enctype.html#c.krb5_string_to_enctype">krb5_string_to_enctype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_key.html#c.krb5_string_to_key">krb5_string_to_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_salttype.html#c.krb5_string_to_salttype">krb5_string_to_salttype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_timestamp.html#c.krb5_string_to_timestamp">krb5_string_to_timestamp (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT.html#KRB5_TC_MATCH_2ND_TKT">KRB5_TC_MATCH_2ND_TKT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA.html#KRB5_TC_MATCH_AUTHDATA">KRB5_TC_MATCH_AUTHDATA (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_FLAGS.html#KRB5_TC_MATCH_FLAGS">KRB5_TC_MATCH_FLAGS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT.html#KRB5_TC_MATCH_FLAGS_EXACT">KRB5_TC_MATCH_FLAGS_EXACT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY.html#KRB5_TC_MATCH_IS_SKEY">KRB5_TC_MATCH_IS_SKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_KTYPE.html#KRB5_TC_MATCH_KTYPE">KRB5_TC_MATCH_KTYPE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY.html#KRB5_TC_MATCH_SRV_NAMEONLY">KRB5_TC_MATCH_SRV_NAMEONLY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_TIMES.html#KRB5_TC_MATCH_TIMES">KRB5_TC_MATCH_TIMES (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT.html#KRB5_TC_MATCH_TIMES_EXACT">KRB5_TC_MATCH_TIMES_EXACT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_NOTICKET.html#KRB5_TC_NOTICKET">KRB5_TC_NOTICKET (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_OPENCLOSE.html#KRB5_TC_OPENCLOSE">KRB5_TC_OPENCLOSE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES.html#KRB5_TC_SUPPORTED_KTYPES">KRB5_TC_SUPPORTED_KTYPES (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TGS_NAME.html#KRB5_TGS_NAME">KRB5_TGS_NAME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TGS_NAME_SIZE.html#KRB5_TGS_NAME_SIZE">KRB5_TGS_NAME_SIZE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TGS_REP.html#KRB5_TGS_REP">KRB5_TGS_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TGS_REQ.html#KRB5_TGS_REQ">KRB5_TGS_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket.html#c.krb5_ticket">krb5_ticket (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket.html#c.krb5_ticket.enc_part">krb5_ticket.enc_part (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket.html#c.krb5_ticket.enc_part2">krb5_ticket.enc_part2 (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket.html#c.krb5_ticket.magic">krb5_ticket.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket.html#c.krb5_ticket.server">krb5_ticket.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket_times.html#c.krb5_ticket_times">krb5_ticket_times (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket_times.html#c.krb5_ticket_times.authtime">krb5_ticket_times.authtime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket_times.html#c.krb5_ticket_times.endtime">krb5_ticket_times.endtime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket_times.html#c.krb5_ticket_times.renew_till">krb5_ticket_times.renew_till (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket_times.html#c.krb5_ticket_times.starttime">krb5_ticket_times.starttime (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_timeofday.html#c.krb5_timeofday">krb5_timeofday (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_timestamp.html#c.krb5_timestamp">krb5_timestamp (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_timestamp_to_sfstring.html#c.krb5_timestamp_to_sfstring">krb5_timestamp_to_sfstring (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_timestamp_to_string.html#c.krb5_timestamp_to_string">krb5_timestamp_to_string (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_authent.html#c.krb5_tkt_authent">krb5_tkt_authent (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_authent.html#c.krb5_tkt_authent.ap_options">krb5_tkt_authent.ap_options (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_authent.html#c.krb5_tkt_authent.authenticator">krb5_tkt_authent.authenticator (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_authent.html#c.krb5_tkt_authent.magic">krb5_tkt_authent.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_authent.html#c.krb5_tkt_authent.ticket">krb5_tkt_authent.ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_creds_context.html#c.krb5_tkt_creds_context">krb5_tkt_creds_context (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_free.html#c.krb5_tkt_creds_free">krb5_tkt_creds_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_get.html#c.krb5_tkt_creds_get">krb5_tkt_creds_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_get_creds.html#c.krb5_tkt_creds_get_creds">krb5_tkt_creds_get_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_get_times.html#c.krb5_tkt_creds_get_times">krb5_tkt_creds_get_times (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_init.html#c.krb5_tkt_creds_init">krb5_tkt_creds_init (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_step.html#c.krb5_tkt_creds_step">krb5_tkt_creds_step (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html#KRB5_TKT_CREDS_STEP_FLAG_CONTINUE">KRB5_TKT_CREDS_STEP_FLAG_CONTINUE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_trace_callback.html#c.krb5_trace_callback">krb5_trace_callback (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_trace_info.html#c.krb5_trace_info">krb5_trace_info (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_trace_info.html#c.krb5_trace_info.message">krb5_trace_info.message (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_transited.html#c.krb5_transited">krb5_transited (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_transited.html#c.krb5_transited.magic">krb5_transited.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_transited.html#c.krb5_transited.tr_contents">krb5_transited.tr_contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_transited.html#c.krb5_transited.tr_type">krb5_transited.tr_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_typed_data.html#c.krb5_typed_data">krb5_typed_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_typed_data.html#c.krb5_typed_data.data">krb5_typed_data.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_typed_data.html#c.krb5_typed_data.length">krb5_typed_data.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_typed_data.html#c.krb5_typed_data.magic">krb5_typed_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_typed_data.html#c.krb5_typed_data.type">krb5_typed_data.type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ui_2.html#c.krb5_ui_2">krb5_ui_2 (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ui_4.html#c.krb5_ui_4">krb5_ui_4 (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_unmarshal_credentials.html#c.krb5_unmarshal_credentials">krb5_unmarshal_credentials (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_unparse_name.html#c.krb5_unparse_name">krb5_unparse_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_unparse_name_ext.html#c.krb5_unparse_name_ext">krb5_unparse_name_ext (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_unparse_name_flags.html#c.krb5_unparse_name_flags">krb5_unparse_name_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_unparse_name_flags_ext.html#c.krb5_unparse_name_flags_ext">krb5_unparse_name_flags_ext (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_us_timeofday.html#c.krb5_us_timeofday">krb5_us_timeofday (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_use_enctype.html#c.krb5_use_enctype">krb5_use_enctype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_verify_authdata_kdc_issued.html#c.krb5_verify_authdata_kdc_issued">krb5_verify_authdata_kdc_issued (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_verify_checksum.html#c.krb5_verify_checksum">krb5_verify_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_verify_init_creds.html#c.krb5_verify_init_creds">krb5_verify_init_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_verify_init_creds_opt.html#c.krb5_verify_init_creds_opt">krb5_verify_init_creds_opt (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_verify_init_creds_opt.html#c.krb5_verify_init_creds_opt.ap_req_nofail">krb5_verify_init_creds_opt.ap_req_nofail (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_verify_init_creds_opt.html#c.krb5_verify_init_creds_opt.flags">krb5_verify_init_creds_opt.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html#KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL">KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_verify_init_creds_opt_init.html#c.krb5_verify_init_creds_opt_init">krb5_verify_init_creds_opt_init (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail.html#c.krb5_verify_init_creds_opt_set_ap_req_nofail">krb5_verify_init_creds_opt_set_ap_req_nofail (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_vprepend_error_message.html#c.krb5_vprepend_error_message">krb5_vprepend_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_vset_error_message.html#c.krb5_vset_error_message">krb5_vset_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_vwrap_error_message.html#c.krb5_vwrap_error_message">krb5_vwrap_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR.html#KRB5_WELLKNOWN_NAMESTR">KRB5_WELLKNOWN_NAMESTR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_wrap_error_message.html#c.krb5_wrap_error_message">krb5_wrap_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_x.html#krb5_x">krb5_x (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_xc.html#krb5_xc">krb5_xc (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – L</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK.html#LR_TYPE_INTERPRETATION_MASK">LR_TYPE_INTERPRETATION_MASK (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY.html#LR_TYPE_THIS_SERVER_ONLY">LR_TYPE_THIS_SERVER_ONLY (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – M</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/MAX_KEYTAB_NAME_LEN.html#MAX_KEYTAB_NAME_LEN">MAX_KEYTAB_NAME_LEN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/MSEC_DIRBIT.html#MSEC_DIRBIT">MSEC_DIRBIT (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/MSEC_VAL_MASK.html#MSEC_VAL_MASK">MSEC_VAL_MASK (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – P</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/types/passwd_phrase_element.html#c.passwd_phrase_element">passwd_phrase_element (C type)</a>
-</li>
- <li><a href="appdev/refs/types/passwd_phrase_element.html#c.passwd_phrase_element.magic">passwd_phrase_element.magic (C member)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/types/passwd_phrase_element.html#c.passwd_phrase_element.passwd">passwd_phrase_element.passwd (C member)</a>
-</li>
- <li><a href="appdev/refs/types/passwd_phrase_element.html#c.passwd_phrase_element.phrase">passwd_phrase_element.phrase (C member)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – R</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li>
- RFC
-
- <ul>
- <li><a href="formats/cookie.html#index-4">RFC 1964</a>
-</li>
- <li><a href="admin/conf_files/krb5_conf.html#index-4">RFC 2253</a>
-</li>
- <li><a href="appdev/gssapi.html#index-0">RFC 2743</a>
-</li>
- <li><a href="appdev/gssapi.html#index-1">RFC 2744</a>
-</li>
- <li><a href="admin/realm_config.html#index-0">RFC 2782</a>
-</li>
- <li><a href="mitK5features.html#index-0">RFC 3244</a>
-</li>
- <li><a href="formats/cookie.html#index-1">RFC 3961</a>, <a href="formats/cookie.html#index-2">[1]</a>, <a href="formats/freshness_token.html#index-1">[2]</a>, <a href="formats/rcache_file_format.html#index-0">[3]</a>
-</li>
- <li><a href="plugindev/clpreauth.html#index-0">RFC 4120</a>
-</li>
- <li><a href="basic/rcache_def.html#index-0">RFC 4120#section-10</a>
-</li>
- <li><a href="mitK5features.html#index-12">RFC 4120#section-5.2.7.2</a>
-</li>
- <li><a href="mitK5features.html#index-11">RFC 4120#section-5.2.7.3</a>
-</li>
- <li><a href="admin/conf_files/kdc_conf.html#index-0">RFC 4556</a>, <a href="admin/conf_files/kdc_conf.html#index-1">[1]</a>, <a href="admin/conf_files/krb5_conf.html#index-5">[2]</a>, <a href="admin/conf_files/krb5_conf.html#index-6">[3]</a>, <a href="mitK5features.html#index-15">[4]</a>, <a href="mitK5features.html#index-3">[5]</a>
-</li>
- <li><a href="appdev/gssapi.html#index-6">RFC 4757</a>
-</li>
- <li><a href="appdev/gssapi.html#index-4">RFC 5280</a>
-</li>
- <li><a href="admin/conf_files/krb5_conf.html#index-1">RFC 5480</a>, <a href="admin/conf_files/krb5_conf.html#index-2">[1]</a>, <a href="admin/conf_files/krb5_conf.html#index-3">[2]</a>
-</li>
- <li><a href="mitK5features.html#index-9">RFC 5587</a>
-</li>
- <li><a href="mitK5features.html#index-6">RFC 5588</a>
-</li>
- <li><a href="mitK5features.html#index-8">RFC 5801</a>
-</li>
- <li><a href="mitK5features.html#index-1">RFC 5896</a>
-</li>
- <li><a href="mitK5features.html#index-4">RFC 6112</a>
-</li>
- <li><a href="formats/ccache_file_format.html#index-0">RFC 6113</a>, <a href="formats/cookie.html#index-0">[1]</a>, <a href="formats/cookie.html#index-3">[2]</a>, <a href="mitK5features.html#index-13">[3]</a>, <a href="mitK5features.html#index-14">[4]</a>, <a href="plugindev/clpreauth.html#index-1">[5]</a>
-</li>
- <li><a href="mitK5features.html#index-16">RFC 6113#section-5.2</a>
-</li>
- <li><a href="mitK5features.html#index-10">RFC 6560</a>
-</li>
- <li><a href="admin/advanced/retiring-des.html#index-0">RFC 6649</a>
-</li>
- <li><a href="appdev/gssapi.html#index-5">RFC 6680</a>, <a href="mitK5features.html#index-5">[1]</a>
-</li>
- <li><a href="mitK5features.html#index-7">RFC 6803</a>
-</li>
- <li><a href="appdev/gssapi.html#index-3">RFC 6806</a>, <a href="formats/ccache_file_format.html#index-1">[1]</a>, <a href="mitK5features.html#index-2">[2]</a>
-</li>
- <li><a href="appdev/gssapi.html#index-2">RFC 7546</a>
-</li>
- <li><a href="admin/realm_config.html#index-1">RFC 7553</a>
-</li>
- <li><a href="admin/conf_files/krb5_conf.html#index-0">RFC 7748</a>
-</li>
- <li><a href="formats/freshness_token.html#index-0">RFC 8070</a>
-</li>
- </ul></li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – S</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/SALT_TYPE_AFS_LENGTH.html#SALT_TYPE_AFS_LENGTH">SALT_TYPE_AFS_LENGTH (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/SALT_TYPE_NO_LENGTH.html#SALT_TYPE_NO_LENGTH">SALT_TYPE_NO_LENGTH (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – T</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/THREEPARAMOPEN.html#THREEPARAMOPEN">THREEPARAMOPEN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_ANONYMOUS.html#TKT_FLG_ANONYMOUS">TKT_FLG_ANONYMOUS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_ENC_PA_REP.html#TKT_FLG_ENC_PA_REP">TKT_FLG_ENC_PA_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_FORWARDABLE.html#TKT_FLG_FORWARDABLE">TKT_FLG_FORWARDABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_FORWARDED.html#TKT_FLG_FORWARDED">TKT_FLG_FORWARDED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_HW_AUTH.html#TKT_FLG_HW_AUTH">TKT_FLG_HW_AUTH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_INITIAL.html#TKT_FLG_INITIAL">TKT_FLG_INITIAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_INVALID.html#TKT_FLG_INVALID">TKT_FLG_INVALID (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/TKT_FLG_MAY_POSTDATE.html#TKT_FLG_MAY_POSTDATE">TKT_FLG_MAY_POSTDATE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE.html#TKT_FLG_OK_AS_DELEGATE">TKT_FLG_OK_AS_DELEGATE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_POSTDATED.html#TKT_FLG_POSTDATED">TKT_FLG_POSTDATED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_PRE_AUTH.html#TKT_FLG_PRE_AUTH">TKT_FLG_PRE_AUTH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_PROXIABLE.html#TKT_FLG_PROXIABLE">TKT_FLG_PROXIABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_PROXY.html#TKT_FLG_PROXY">TKT_FLG_PROXY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_RENEWABLE.html#TKT_FLG_RENEWABLE">TKT_FLG_RENEWABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED.html#TKT_FLG_TRANSIT_POLICY_CHECKED">TKT_FLG_TRANSIT_POLICY_CHECKED (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index – V</h1>
-
-<table style="width: 100%" class="indextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/VALID_INT_BITS.html#VALID_INT_BITS">VALID_INT_BITS (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/VALID_UINT_BITS.html#VALID_UINT_BITS">VALID_UINT_BITS (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
-<h1 id="index">Index</h1>
-
-<div class="genindex-jumpbox">
- <a href="#A"><strong>A</strong></a>
- | <a href="#C"><strong>C</strong></a>
- | <a href="#E"><strong>E</strong></a>
- | <a href="#K"><strong>K</strong></a>
- | <a href="#L"><strong>L</strong></a>
- | <a href="#M"><strong>M</strong></a>
- | <a href="#P"><strong>P</strong></a>
- | <a href="#R"><strong>R</strong></a>
- | <a href="#S"><strong>S</strong></a>
- | <a href="#T"><strong>T</strong></a>
- | <a href="#V"><strong>V</strong></a>
-
-</div>
-<h2 id="A">A</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/AD_TYPE_EXTERNAL.html#AD_TYPE_EXTERNAL">AD_TYPE_EXTERNAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK.html#AD_TYPE_FIELD_TYPE_MASK">AD_TYPE_FIELD_TYPE_MASK (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AD_TYPE_REGISTERED.html#AD_TYPE_REGISTERED">AD_TYPE_REGISTERED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AD_TYPE_RESERVED.html#AD_TYPE_RESERVED">AD_TYPE_RESERVED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_ADDRPORT.html#ADDRTYPE_ADDRPORT">ADDRTYPE_ADDRPORT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_CHAOS.html#ADDRTYPE_CHAOS">ADDRTYPE_CHAOS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_DDP.html#ADDRTYPE_DDP">ADDRTYPE_DDP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_INET.html#ADDRTYPE_INET">ADDRTYPE_INET (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_INET6.html#ADDRTYPE_INET6">ADDRTYPE_INET6 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_IPPORT.html#ADDRTYPE_IPPORT">ADDRTYPE_IPPORT (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/ADDRTYPE_IS_LOCAL.html#ADDRTYPE_IS_LOCAL">ADDRTYPE_IS_LOCAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_ISO.html#ADDRTYPE_ISO">ADDRTYPE_ISO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_NETBIOS.html#ADDRTYPE_NETBIOS">ADDRTYPE_NETBIOS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ADDRTYPE_XNS.html#ADDRTYPE_XNS">ADDRTYPE_XNS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION.html#AP_OPTS_ETYPE_NEGOTIATION">AP_OPTS_ETYPE_NEGOTIATION (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED.html#AP_OPTS_MUTUAL_REQUIRED">AP_OPTS_MUTUAL_REQUIRED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_RESERVED.html#AP_OPTS_RESERVED">AP_OPTS_RESERVED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_USE_SESSION_KEY.html#AP_OPTS_USE_SESSION_KEY">AP_OPTS_USE_SESSION_KEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_USE_SUBKEY.html#AP_OPTS_USE_SUBKEY">AP_OPTS_USE_SUBKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/AP_OPTS_WIRE_MASK.html#AP_OPTS_WIRE_MASK">AP_OPTS_WIRE_MASK (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-<h2 id="C">C</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128.html#CKSUMTYPE_CMAC_CAMELLIA128">CKSUMTYPE_CMAC_CAMELLIA128 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256.html#CKSUMTYPE_CMAC_CAMELLIA256">CKSUMTYPE_CMAC_CAMELLIA256 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_CRC32.html#CKSUMTYPE_CRC32">CKSUMTYPE_CRC32 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_DESCBC.html#CKSUMTYPE_DESCBC">CKSUMTYPE_DESCBC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR.html#CKSUMTYPE_HMAC_MD5_ARCFOUR">CKSUMTYPE_HMAC_MD5_ARCFOUR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128.html#CKSUMTYPE_HMAC_SHA1_96_AES128">CKSUMTYPE_HMAC_SHA1_96_AES128 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256.html#CKSUMTYPE_HMAC_SHA1_96_AES256">CKSUMTYPE_HMAC_SHA1_96_AES256 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3.html#CKSUMTYPE_HMAC_SHA1_DES3">CKSUMTYPE_HMAC_SHA1_DES3 (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128.html#CKSUMTYPE_HMAC_SHA256_128_AES128">CKSUMTYPE_HMAC_SHA256_128_AES128 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256.html#CKSUMTYPE_HMAC_SHA384_192_AES256">CKSUMTYPE_HMAC_SHA384_192_AES256 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR.html#CKSUMTYPE_MD5_HMAC_ARCFOUR">CKSUMTYPE_MD5_HMAC_ARCFOUR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_NIST_SHA.html#CKSUMTYPE_NIST_SHA">CKSUMTYPE_NIST_SHA (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_RSA_MD4.html#CKSUMTYPE_RSA_MD4">CKSUMTYPE_RSA_MD4 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES.html#CKSUMTYPE_RSA_MD4_DES">CKSUMTYPE_RSA_MD4_DES (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_RSA_MD5.html#CKSUMTYPE_RSA_MD5">CKSUMTYPE_RSA_MD5 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES.html#CKSUMTYPE_RSA_MD5_DES">CKSUMTYPE_RSA_MD5_DES (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/CKSUMTYPE_SHA1.html#CKSUMTYPE_SHA1">CKSUMTYPE_SHA1 (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-<h2 id="E">E</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96.html#ENCTYPE_AES128_CTS_HMAC_SHA1_96">ENCTYPE_AES128_CTS_HMAC_SHA1_96 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128.html#ENCTYPE_AES128_CTS_HMAC_SHA256_128">ENCTYPE_AES128_CTS_HMAC_SHA256_128 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96.html#ENCTYPE_AES256_CTS_HMAC_SHA1_96">ENCTYPE_AES256_CTS_HMAC_SHA1_96 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192.html#ENCTYPE_AES256_CTS_HMAC_SHA384_192">ENCTYPE_AES256_CTS_HMAC_SHA384_192 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC.html#ENCTYPE_ARCFOUR_HMAC">ENCTYPE_ARCFOUR_HMAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP.html#ENCTYPE_ARCFOUR_HMAC_EXP">ENCTYPE_ARCFOUR_HMAC_EXP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC.html#ENCTYPE_CAMELLIA128_CTS_CMAC">ENCTYPE_CAMELLIA128_CTS_CMAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC.html#ENCTYPE_CAMELLIA256_CTS_CMAC">ENCTYPE_CAMELLIA256_CTS_CMAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES3_CBC_ENV.html#ENCTYPE_DES3_CBC_ENV">ENCTYPE_DES3_CBC_ENV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES3_CBC_RAW.html#ENCTYPE_DES3_CBC_RAW">ENCTYPE_DES3_CBC_RAW (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES3_CBC_SHA.html#ENCTYPE_DES3_CBC_SHA">ENCTYPE_DES3_CBC_SHA (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1.html#ENCTYPE_DES3_CBC_SHA1">ENCTYPE_DES3_CBC_SHA1 (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/ENCTYPE_DES_CBC_CRC.html#ENCTYPE_DES_CBC_CRC">ENCTYPE_DES_CBC_CRC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES_CBC_MD4.html#ENCTYPE_DES_CBC_MD4">ENCTYPE_DES_CBC_MD4 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES_CBC_MD5.html#ENCTYPE_DES_CBC_MD5">ENCTYPE_DES_CBC_MD5 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES_CBC_RAW.html#ENCTYPE_DES_CBC_RAW">ENCTYPE_DES_CBC_RAW (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1.html#ENCTYPE_DES_HMAC_SHA1">ENCTYPE_DES_HMAC_SHA1 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS.html#ENCTYPE_DSA_SHA1_CMS">ENCTYPE_DSA_SHA1_CMS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_MD5_RSA_CMS.html#ENCTYPE_MD5_RSA_CMS">ENCTYPE_MD5_RSA_CMS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_NULL.html#ENCTYPE_NULL">ENCTYPE_NULL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_RC2_CBC_ENV.html#ENCTYPE_RC2_CBC_ENV">ENCTYPE_RC2_CBC_ENV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_RSA_ENV.html#ENCTYPE_RSA_ENV">ENCTYPE_RSA_ENV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV.html#ENCTYPE_RSA_ES_OAEP_ENV">ENCTYPE_RSA_ES_OAEP_ENV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS.html#ENCTYPE_SHA1_RSA_CMS">ENCTYPE_SHA1_RSA_CMS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/ENCTYPE_UNKNOWN.html#ENCTYPE_UNKNOWN">ENCTYPE_UNKNOWN (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-<h2 id="K">K</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE.html#KDC_OPT_ALLOW_POSTDATE">KDC_OPT_ALLOW_POSTDATE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_CANONICALIZE.html#KDC_OPT_CANONICALIZE">KDC_OPT_CANONICALIZE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT.html#KDC_OPT_CNAME_IN_ADDL_TKT">KDC_OPT_CNAME_IN_ADDL_TKT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK.html#KDC_OPT_DISABLE_TRANSITED_CHECK">KDC_OPT_DISABLE_TRANSITED_CHECK (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY.html#KDC_OPT_ENC_TKT_IN_SKEY">KDC_OPT_ENC_TKT_IN_SKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_FORWARDABLE.html#KDC_OPT_FORWARDABLE">KDC_OPT_FORWARDABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_FORWARDED.html#KDC_OPT_FORWARDED">KDC_OPT_FORWARDED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_POSTDATED.html#KDC_OPT_POSTDATED">KDC_OPT_POSTDATED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_PROXIABLE.html#KDC_OPT_PROXIABLE">KDC_OPT_PROXIABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_PROXY.html#KDC_OPT_PROXY">KDC_OPT_PROXY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_RENEW.html#KDC_OPT_RENEW">KDC_OPT_RENEW (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_RENEWABLE.html#KDC_OPT_RENEWABLE">KDC_OPT_RENEWABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_RENEWABLE_OK.html#KDC_OPT_RENEWABLE_OK">KDC_OPT_RENEWABLE_OK (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS.html#KDC_OPT_REQUEST_ANONYMOUS">KDC_OPT_REQUEST_ANONYMOUS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_OPT_VALIDATE.html#KDC_OPT_VALIDATE">KDC_OPT_VALIDATE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KDC_TKT_COMMON_MASK.html#KDC_TKT_COMMON_MASK">KDC_TKT_COMMON_MASK (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb524_convert_creds_kdc.html#krb524_convert_creds_kdc">krb524_convert_creds_kdc (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb524_init_ets.html#krb524_init_ets">krb524_init_ets (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_425_conv_principal.html#c.krb5_425_conv_principal">krb5_425_conv_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_524_conv_principal.html#c.krb5_524_conv_principal">krb5_524_conv_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_524_convert_creds.html#c.krb5_524_convert_creds">krb5_524_convert_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_address.html#c.krb5_address">krb5_address (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_address.html#c.krb5_address.addrtype">krb5_address.addrtype (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_address.html#c.krb5_address.contents">krb5_address.contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_address.html#c.krb5_address.length">krb5_address.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_address.html#c.krb5_address.magic">krb5_address.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_address_compare.html#c.krb5_address_compare">krb5_address_compare (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_address_order.html#c.krb5_address_order">krb5_address_order (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_address_search.html#c.krb5_address_search">krb5_address_search (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_addrtype.html#c.krb5_addrtype">krb5_addrtype (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_allow_weak_crypto.html#c.krb5_allow_weak_crypto">krb5_allow_weak_crypto (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.html#KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE">KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_aname_to_localname.html#c.krb5_aname_to_localname">krb5_aname_to_localname (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_anonymous_principal.html#c.krb5_anonymous_principal">krb5_anonymous_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR.html#KRB5_ANONYMOUS_PRINCSTR">KRB5_ANONYMOUS_PRINCSTR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_anonymous_realm.html#c.krb5_anonymous_realm">krb5_anonymous_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR.html#KRB5_ANONYMOUS_REALMSTR">KRB5_ANONYMOUS_REALMSTR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AP_REP.html#KRB5_AP_REP">KRB5_AP_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep.html#c.krb5_ap_rep">krb5_ap_rep (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep.html#c.krb5_ap_rep.enc_part">krb5_ap_rep.enc_part (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep.html#c.krb5_ap_rep.magic">krb5_ap_rep.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part">krb5_ap_rep_enc_part (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part.ctime">krb5_ap_rep_enc_part.ctime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part.cusec">krb5_ap_rep_enc_part.cusec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part.magic">krb5_ap_rep_enc_part.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part.seq_number">krb5_ap_rep_enc_part.seq_number (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_rep_enc_part.html#c.krb5_ap_rep_enc_part.subkey">krb5_ap_rep_enc_part.subkey (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AP_REQ.html#KRB5_AP_REQ">KRB5_AP_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_req.html#c.krb5_ap_req">krb5_ap_req (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_req.html#c.krb5_ap_req.ap_options">krb5_ap_req.ap_options (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_req.html#c.krb5_ap_req.authenticator">krb5_ap_req.authenticator (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_req.html#c.krb5_ap_req.magic">krb5_ap_req.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ap_req.html#c.krb5_ap_req.ticket">krb5_ap_req.ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_appdefault_boolean.html#c.krb5_appdefault_boolean">krb5_appdefault_boolean (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_appdefault_string.html#c.krb5_appdefault_string">krb5_appdefault_string (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AS_REP.html#KRB5_AS_REP">KRB5_AS_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AS_REQ.html#KRB5_AS_REQ">KRB5_AS_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_free.html#c.krb5_auth_con_free">krb5_auth_con_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_genaddrs.html#c.krb5_auth_con_genaddrs">krb5_auth_con_genaddrs (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_get_checksum_func.html#c.krb5_auth_con_get_checksum_func">krb5_auth_con_get_checksum_func (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getaddrs.html#c.krb5_auth_con_getaddrs">krb5_auth_con_getaddrs (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getauthenticator.html#c.krb5_auth_con_getauthenticator">krb5_auth_con_getauthenticator (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getflags.html#c.krb5_auth_con_getflags">krb5_auth_con_getflags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getkey.html#c.krb5_auth_con_getkey">krb5_auth_con_getkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getkey_k.html#c.krb5_auth_con_getkey_k">krb5_auth_con_getkey_k (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getlocalseqnumber.html#c.krb5_auth_con_getlocalseqnumber">krb5_auth_con_getlocalseqnumber (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getlocalsubkey.html#c.krb5_auth_con_getlocalsubkey">krb5_auth_con_getlocalsubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getrcache.html#c.krb5_auth_con_getrcache">krb5_auth_con_getrcache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getrecvsubkey.html#c.krb5_auth_con_getrecvsubkey">krb5_auth_con_getrecvsubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getrecvsubkey_k.html#c.krb5_auth_con_getrecvsubkey_k">krb5_auth_con_getrecvsubkey_k (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getremoteseqnumber.html#c.krb5_auth_con_getremoteseqnumber">krb5_auth_con_getremoteseqnumber (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getremotesubkey.html#c.krb5_auth_con_getremotesubkey">krb5_auth_con_getremotesubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getsendsubkey.html#c.krb5_auth_con_getsendsubkey">krb5_auth_con_getsendsubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_getsendsubkey_k.html#c.krb5_auth_con_getsendsubkey_k">krb5_auth_con_getsendsubkey_k (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_init.html#c.krb5_auth_con_init">krb5_auth_con_init (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_initivector.html#c.krb5_auth_con_initivector">krb5_auth_con_initivector (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_set_checksum_func.html#c.krb5_auth_con_set_checksum_func">krb5_auth_con_set_checksum_func (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_set_req_cksumtype.html#c.krb5_auth_con_set_req_cksumtype">krb5_auth_con_set_req_cksumtype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setaddrs.html#c.krb5_auth_con_setaddrs">krb5_auth_con_setaddrs (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setflags.html#c.krb5_auth_con_setflags">krb5_auth_con_setflags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setports.html#c.krb5_auth_con_setports">krb5_auth_con_setports (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setrcache.html#c.krb5_auth_con_setrcache">krb5_auth_con_setrcache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setrecvsubkey.html#c.krb5_auth_con_setrecvsubkey">krb5_auth_con_setrecvsubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setrecvsubkey_k.html#c.krb5_auth_con_setrecvsubkey_k">krb5_auth_con_setrecvsubkey_k (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setsendsubkey.html#c.krb5_auth_con_setsendsubkey">krb5_auth_con_setsendsubkey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setsendsubkey_k.html#c.krb5_auth_con_setsendsubkey_k">krb5_auth_con_setsendsubkey_k (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_auth_con_setuseruserkey.html#c.krb5_auth_con_setuseruserkey">krb5_auth_con_setuseruserkey (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_auth_context.html#c.krb5_auth_context">krb5_auth_context (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.html#KRB5_AUTH_CONTEXT_DO_SEQUENCE">KRB5_AUTH_CONTEXT_DO_SEQUENCE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME.html#KRB5_AUTH_CONTEXT_DO_TIME">KRB5_AUTH_CONTEXT_DO_TIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR">KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.html#KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR">KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL.html#KRB5_AUTH_CONTEXT_PERMIT_ALL">KRB5_AUTH_CONTEXT_PERMIT_ALL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.html#KRB5_AUTH_CONTEXT_RET_SEQUENCE">KRB5_AUTH_CONTEXT_RET_SEQUENCE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME.html#KRB5_AUTH_CONTEXT_RET_TIME">KRB5_AUTH_CONTEXT_RET_TIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY.html#KRB5_AUTH_CONTEXT_USE_SUBKEY">KRB5_AUTH_CONTEXT_USE_SUBKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdata.html#c.krb5_authdata">krb5_authdata (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdata.html#c.krb5_authdata.ad_type">krb5_authdata.ad_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdata.html#c.krb5_authdata.contents">krb5_authdata.contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdata.html#c.krb5_authdata.length">krb5_authdata.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdata.html#c.krb5_authdata.magic">krb5_authdata.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_AND_OR.html#KRB5_AUTHDATA_AND_OR">KRB5_AUTHDATA_AND_OR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS.html#KRB5_AUTHDATA_AP_OPTIONS">KRB5_AUTHDATA_AP_OPTIONS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR.html#KRB5_AUTHDATA_AUTH_INDICATOR">KRB5_AUTHDATA_AUTH_INDICATOR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_CAMMAC.html#KRB5_AUTHDATA_CAMMAC">KRB5_AUTHDATA_CAMMAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION.html#KRB5_AUTHDATA_ETYPE_NEGOTIATION">KRB5_AUTHDATA_ETYPE_NEGOTIATION (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR.html#KRB5_AUTHDATA_FX_ARMOR">KRB5_AUTHDATA_FX_ARMOR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT.html#KRB5_AUTHDATA_IF_RELEVANT">KRB5_AUTHDATA_IF_RELEVANT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.html#KRB5_AUTHDATA_INITIAL_VERIFIED_CAS">KRB5_AUTHDATA_INITIAL_VERIFIED_CAS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED.html#KRB5_AUTHDATA_KDC_ISSUED">KRB5_AUTHDATA_KDC_ISSUED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC.html#KRB5_AUTHDATA_MANDATORY_FOR_KDC">KRB5_AUTHDATA_MANDATORY_FOR_KDC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE.html#KRB5_AUTHDATA_OSF_DCE">KRB5_AUTHDATA_OSF_DCE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_SESAME.html#KRB5_AUTHDATA_SESAME">KRB5_AUTHDATA_SESAME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET.html#KRB5_AUTHDATA_SIGNTICKET">KRB5_AUTHDATA_SIGNTICKET (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC.html#KRB5_AUTHDATA_WIN2K_PAC">KRB5_AUTHDATA_WIN2K_PAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authdatatype.html#c.krb5_authdatatype">krb5_authdatatype (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator">krb5_authenticator (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.authorization_data">krb5_authenticator.authorization_data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.checksum">krb5_authenticator.checksum (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.client">krb5_authenticator.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.ctime">krb5_authenticator.ctime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.cusec">krb5_authenticator.cusec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.magic">krb5_authenticator.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.seq_number">krb5_authenticator.seq_number (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_authenticator.html#c.krb5_authenticator.subkey">krb5_authenticator.subkey (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_boolean.html#c.krb5_boolean">krb5_boolean (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_build_principal.html#c.krb5_build_principal">krb5_build_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_build_principal_alloc_va.html#c.krb5_build_principal_alloc_va">krb5_build_principal_alloc_va (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_build_principal_ext.html#c.krb5_build_principal_ext">krb5_build_principal_ext (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_build_principal_va.html#c.krb5_build_principal_va">krb5_build_principal_va (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_block_size.html#c.krb5_c_block_size">krb5_c_block_size (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_checksum_length.html#c.krb5_c_checksum_length">krb5_c_checksum_length (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_crypto_length.html#c.krb5_c_crypto_length">krb5_c_crypto_length (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_crypto_length_iov.html#c.krb5_c_crypto_length_iov">krb5_c_crypto_length_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_decrypt.html#c.krb5_c_decrypt">krb5_c_decrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_decrypt_iov.html#c.krb5_c_decrypt_iov">krb5_c_decrypt_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_derive_prfplus.html#c.krb5_c_derive_prfplus">krb5_c_derive_prfplus (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_encrypt.html#c.krb5_c_encrypt">krb5_c_encrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_encrypt_iov.html#c.krb5_c_encrypt_iov">krb5_c_encrypt_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_encrypt_length.html#c.krb5_c_encrypt_length">krb5_c_encrypt_length (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_enctype_compare.html#c.krb5_c_enctype_compare">krb5_c_enctype_compare (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_free_state.html#c.krb5_c_free_state">krb5_c_free_state (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_fx_cf2_simple.html#c.krb5_c_fx_cf2_simple">krb5_c_fx_cf2_simple (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_init_state.html#c.krb5_c_init_state">krb5_c_init_state (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_is_coll_proof_cksum.html#c.krb5_c_is_coll_proof_cksum">krb5_c_is_coll_proof_cksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_is_keyed_cksum.html#c.krb5_c_is_keyed_cksum">krb5_c_is_keyed_cksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_keyed_checksum_types.html#c.krb5_c_keyed_checksum_types">krb5_c_keyed_checksum_types (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_keylengths.html#c.krb5_c_keylengths">krb5_c_keylengths (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_make_checksum.html#c.krb5_c_make_checksum">krb5_c_make_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_make_checksum_iov.html#c.krb5_c_make_checksum_iov">krb5_c_make_checksum_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_make_random_key.html#c.krb5_c_make_random_key">krb5_c_make_random_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_padding_length.html#c.krb5_c_padding_length">krb5_c_padding_length (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_prf.html#c.krb5_c_prf">krb5_c_prf (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_prf_length.html#c.krb5_c_prf_length">krb5_c_prf_length (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_prfplus.html#c.krb5_c_prfplus">krb5_c_prfplus (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_random_add_entropy.html#c.krb5_c_random_add_entropy">krb5_c_random_add_entropy (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_random_make_octets.html#c.krb5_c_random_make_octets">krb5_c_random_make_octets (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_random_os_entropy.html#c.krb5_c_random_os_entropy">krb5_c_random_os_entropy (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_random_seed.html#c.krb5_c_random_seed">krb5_c_random_seed (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_random_to_key.html#c.krb5_c_random_to_key">krb5_c_random_to_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_string_to_key.html#c.krb5_c_string_to_key">krb5_c_string_to_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_string_to_key_with_params.html#c.krb5_c_string_to_key_with_params">krb5_c_string_to_key_with_params (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_valid_cksumtype.html#c.krb5_c_valid_cksumtype">krb5_c_valid_cksumtype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_valid_enctype.html#c.krb5_c_valid_enctype">krb5_c_valid_enctype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_verify_checksum.html#c.krb5_c_verify_checksum">krb5_c_verify_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_c_verify_checksum_iov.html#c.krb5_c_verify_checksum_iov">krb5_c_verify_checksum_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_calculate_checksum.html#c.krb5_calculate_checksum">krb5_calculate_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_cache_match.html#c.krb5_cc_cache_match">krb5_cc_cache_match (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_close.html#c.krb5_cc_close">krb5_cc_close (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_copy_creds.html#c.krb5_cc_copy_creds">krb5_cc_copy_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cc_cursor.html#c.krb5_cc_cursor">krb5_cc_cursor (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_default.html#c.krb5_cc_default">krb5_cc_default (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_default_name.html#c.krb5_cc_default_name">krb5_cc_default_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_destroy.html#c.krb5_cc_destroy">krb5_cc_destroy (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_dup.html#c.krb5_cc_dup">krb5_cc_dup (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_end_seq_get.html#c.krb5_cc_end_seq_get">krb5_cc_end_seq_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_gen_new.html#c.krb5_cc_gen_new">krb5_cc_gen_new (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_config.html#c.krb5_cc_get_config">krb5_cc_get_config (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_flags.html#c.krb5_cc_get_flags">krb5_cc_get_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_full_name.html#c.krb5_cc_get_full_name">krb5_cc_get_full_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_name.html#c.krb5_cc_get_name">krb5_cc_get_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_principal.html#c.krb5_cc_get_principal">krb5_cc_get_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_get_type.html#c.krb5_cc_get_type">krb5_cc_get_type (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_initialize.html#c.krb5_cc_initialize">krb5_cc_initialize (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_move.html#c.krb5_cc_move">krb5_cc_move (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_new_unique.html#c.krb5_cc_new_unique">krb5_cc_new_unique (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_next_cred.html#c.krb5_cc_next_cred">krb5_cc_next_cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_remove_cred.html#c.krb5_cc_remove_cred">krb5_cc_remove_cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_resolve.html#c.krb5_cc_resolve">krb5_cc_resolve (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_retrieve_cred.html#c.krb5_cc_retrieve_cred">krb5_cc_retrieve_cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_select.html#c.krb5_cc_select">krb5_cc_select (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_set_config.html#c.krb5_cc_set_config">krb5_cc_set_config (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_set_default_name.html#c.krb5_cc_set_default_name">krb5_cc_set_default_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_set_flags.html#c.krb5_cc_set_flags">krb5_cc_set_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_start_seq_get.html#c.krb5_cc_start_seq_get">krb5_cc_start_seq_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_store_cred.html#c.krb5_cc_store_cred">krb5_cc_store_cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_support_switch.html#c.krb5_cc_support_switch">krb5_cc_support_switch (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cc_switch.html#c.krb5_cc_switch">krb5_cc_switch (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ccache.html#c.krb5_ccache">krb5_ccache (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cccol_cursor.html#c.krb5_cccol_cursor">krb5_cccol_cursor (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cccol_cursor_free.html#c.krb5_cccol_cursor_free">krb5_cccol_cursor_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cccol_cursor_new.html#c.krb5_cccol_cursor_new">krb5_cccol_cursor_new (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cccol_cursor_next.html#c.krb5_cccol_cursor_next">krb5_cccol_cursor_next (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cccol_have_content.html#c.krb5_cccol_have_content">krb5_cccol_have_content (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_change_password.html#c.krb5_change_password">krb5_change_password (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_check_clockskew.html#c.krb5_check_clockskew">krb5_check_clockskew (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_checksum.html#c.krb5_checksum">krb5_checksum (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_checksum.html#c.krb5_checksum.checksum_type">krb5_checksum.checksum_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_checksum.html#c.krb5_checksum.contents">krb5_checksum.contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_checksum.html#c.krb5_checksum.length">krb5_checksum.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_checksum.html#c.krb5_checksum.magic">krb5_checksum.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_checksum_size.html#c.krb5_checksum_size">krb5_checksum_size (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_chpw_message.html#c.krb5_chpw_message">krb5_chpw_message (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cksumtype.html#c.krb5_cksumtype">krb5_cksumtype (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_cksumtype_to_string.html#c.krb5_cksumtype_to_string">krb5_cksumtype_to_string (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_clear_error_message.html#c.krb5_clear_error_message">krb5_clear_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_const.html#krb5_const">krb5_const (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_pointer.html#c.krb5_const_pointer">krb5_const_pointer (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal">krb5_const_principal (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal.data">krb5_const_principal.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal.length">krb5_const_principal.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal.magic">krb5_const_principal.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal.realm">krb5_const_principal.realm (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_const_principal.html#c.krb5_const_principal.type">krb5_const_principal.type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_context.html#c.krb5_context">krb5_context (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_addresses.html#c.krb5_copy_addresses">krb5_copy_addresses (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_authdata.html#c.krb5_copy_authdata">krb5_copy_authdata (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_authenticator.html#c.krb5_copy_authenticator">krb5_copy_authenticator (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_checksum.html#c.krb5_copy_checksum">krb5_copy_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_context.html#c.krb5_copy_context">krb5_copy_context (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_creds.html#c.krb5_copy_creds">krb5_copy_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_data.html#c.krb5_copy_data">krb5_copy_data (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_error_message.html#c.krb5_copy_error_message">krb5_copy_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_keyblock.html#c.krb5_copy_keyblock">krb5_copy_keyblock (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_keyblock_contents.html#c.krb5_copy_keyblock_contents">krb5_copy_keyblock_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_principal.html#c.krb5_copy_principal">krb5_copy_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_copy_ticket.html#c.krb5_copy_ticket">krb5_copy_ticket (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRED.html#KRB5_CRED">KRB5_CRED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred.html#c.krb5_cred">krb5_cred (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred.html#c.krb5_cred.enc_part">krb5_cred.enc_part (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred.html#c.krb5_cred.enc_part2">krb5_cred.enc_part2 (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred.html#c.krb5_cred.magic">krb5_cred.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred.html#c.krb5_cred.tickets">krb5_cred.tickets (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part">krb5_cred_enc_part (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.magic">krb5_cred_enc_part.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.nonce">krb5_cred_enc_part.nonce (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.r_address">krb5_cred_enc_part.r_address (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.s_address">krb5_cred_enc_part.s_address (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.ticket_info">krb5_cred_enc_part.ticket_info (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.timestamp">krb5_cred_enc_part.timestamp (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_enc_part.html#c.krb5_cred_enc_part.usec">krb5_cred_enc_part.usec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info">krb5_cred_info (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.caddrs">krb5_cred_info.caddrs (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.client">krb5_cred_info.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.flags">krb5_cred_info.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.magic">krb5_cred_info.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.server">krb5_cred_info.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.session">krb5_cred_info.session (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cred_info.html#c.krb5_cred_info.times">krb5_cred_info.times (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds">krb5_creds (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.addresses">krb5_creds.addresses (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.authdata">krb5_creds.authdata (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.client">krb5_creds.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.is_skey">krb5_creds.is_skey (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.keyblock">krb5_creds.keyblock (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.magic">krb5_creds.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.second_ticket">krb5_creds.second_ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.server">krb5_creds.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.ticket">krb5_creds.ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.ticket_flags">krb5_creds.ticket_flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_creds.html#c.krb5_creds.times">krb5_creds.times (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_crypto_iov.html#c.krb5_crypto_iov">krb5_crypto_iov (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_crypto_iov.html#c.krb5_crypto_iov.data">krb5_crypto_iov.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_crypto_iov.html#c.krb5_crypto_iov.flags">krb5_crypto_iov.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM.html#KRB5_CRYPTO_TYPE_CHECKSUM">KRB5_CRYPTO_TYPE_CHECKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA.html#KRB5_CRYPTO_TYPE_DATA">KRB5_CRYPTO_TYPE_DATA (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY.html#KRB5_CRYPTO_TYPE_EMPTY">KRB5_CRYPTO_TYPE_EMPTY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER.html#KRB5_CRYPTO_TYPE_HEADER">KRB5_CRYPTO_TYPE_HEADER (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING.html#KRB5_CRYPTO_TYPE_PADDING">KRB5_CRYPTO_TYPE_PADDING (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.html#KRB5_CRYPTO_TYPE_SIGN_ONLY">KRB5_CRYPTO_TYPE_SIGN_ONLY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM.html#KRB5_CRYPTO_TYPE_STREAM">KRB5_CRYPTO_TYPE_STREAM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER.html#KRB5_CRYPTO_TYPE_TRAILER">KRB5_CRYPTO_TYPE_TRAILER (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_cryptotype.html#c.krb5_cryptotype">krb5_cryptotype (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_CYBERSAFE_SECUREID.html#KRB5_CYBERSAFE_SECUREID">KRB5_CYBERSAFE_SECUREID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_data.html#c.krb5_data">krb5_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_data.html#c.krb5_data.data">krb5_data.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_data.html#c.krb5_data.length">krb5_data.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_data.html#c.krb5_data.magic">krb5_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_decode_authdata_container.html#c.krb5_decode_authdata_container">krb5_decode_authdata_container (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_decode_ticket.html#c.krb5_decode_ticket">krb5_decode_ticket (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_decrypt.html#c.krb5_decrypt">krb5_decrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_deltat.html#c.krb5_deltat">krb5_deltat (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_deltat_to_string.html#c.krb5_deltat_to_string">krb5_deltat_to_string (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS.html#KRB5_DOMAIN_X500_COMPRESS">KRB5_DOMAIN_X500_COMPRESS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_eblock_enctype.html#c.krb5_eblock_enctype">krb5_eblock_enctype (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_data.html#c.krb5_enc_data">krb5_enc_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_data.html#c.krb5_enc_data.ciphertext">krb5_enc_data.ciphertext (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_data.html#c.krb5_enc_data.enctype">krb5_enc_data.enctype (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_data.html#c.krb5_enc_data.kvno">krb5_enc_data.kvno (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_data.html#c.krb5_enc_data.magic">krb5_enc_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part">krb5_enc_kdc_rep_part (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.caddrs">krb5_enc_kdc_rep_part.caddrs (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.enc_padata">krb5_enc_kdc_rep_part.enc_padata (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.flags">krb5_enc_kdc_rep_part.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.key_exp">krb5_enc_kdc_rep_part.key_exp (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.last_req">krb5_enc_kdc_rep_part.last_req (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.magic">krb5_enc_kdc_rep_part.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.msg_type">krb5_enc_kdc_rep_part.msg_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.nonce">krb5_enc_kdc_rep_part.nonce (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.server">krb5_enc_kdc_rep_part.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.session">krb5_enc_kdc_rep_part.session (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_kdc_rep_part.html#c.krb5_enc_kdc_rep_part.times">krb5_enc_kdc_rep_part.times (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part">krb5_enc_tkt_part (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.authorization_data">krb5_enc_tkt_part.authorization_data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.caddrs">krb5_enc_tkt_part.caddrs (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.client">krb5_enc_tkt_part.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.flags">krb5_enc_tkt_part.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.magic">krb5_enc_tkt_part.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.session">krb5_enc_tkt_part.session (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.times">krb5_enc_tkt_part.times (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part.transited">krb5_enc_tkt_part.transited (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_encode_authdata_container.html#c.krb5_encode_authdata_container">krb5_encode_authdata_container (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP.html#KRB5_ENCPADATA_REQ_ENC_PA_REP">KRB5_ENCPADATA_REQ_ENC_PA_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_encrypt.html#c.krb5_encrypt">krb5_encrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_encrypt_block.html#c.krb5_encrypt_block">krb5_encrypt_block (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_encrypt_block.html#c.krb5_encrypt_block.crypto_entry">krb5_encrypt_block.crypto_entry (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_encrypt_block.html#c.krb5_encrypt_block.key">krb5_encrypt_block.key (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_encrypt_block.html#c.krb5_encrypt_block.magic">krb5_encrypt_block.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_encrypt_size.html#c.krb5_encrypt_size">krb5_encrypt_size (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_enctype.html#c.krb5_enctype">krb5_enctype (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_enctype_to_name.html#c.krb5_enctype_to_name">krb5_enctype_to_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_enctype_to_string.html#c.krb5_enctype_to_string">krb5_enctype_to_string (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_ERROR.html#KRB5_ERROR">KRB5_ERROR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error">krb5_error (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.client">krb5_error.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.ctime">krb5_error.ctime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.cusec">krb5_error.cusec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.e_data">krb5_error.e_data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.error">krb5_error.error (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.magic">krb5_error.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.server">krb5_error.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.stime">krb5_error.stime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.susec">krb5_error.susec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error.html#c.krb5_error.text">krb5_error.text (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_error_code.html#c.krb5_error_code">krb5_error_code (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_expand_hostname.html#c.krb5_expand_hostname">krb5_expand_hostname (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_expire_callback_func.html#c.krb5_expire_callback_func">krb5_expire_callback_func (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_FAST_REQUIRED.html#KRB5_FAST_REQUIRED">KRB5_FAST_REQUIRED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_find_authdata.html#c.krb5_find_authdata">krb5_find_authdata (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_finish_key.html#c.krb5_finish_key">krb5_finish_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_finish_random_key.html#c.krb5_finish_random_key">krb5_finish_random_key (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_flags.html#c.krb5_flags">krb5_flags (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_addresses.html#c.krb5_free_addresses">krb5_free_addresses (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_ap_rep_enc_part.html#c.krb5_free_ap_rep_enc_part">krb5_free_ap_rep_enc_part (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_authdata.html#c.krb5_free_authdata">krb5_free_authdata (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_authenticator.html#c.krb5_free_authenticator">krb5_free_authenticator (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_checksum.html#c.krb5_free_checksum">krb5_free_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_checksum_contents.html#c.krb5_free_checksum_contents">krb5_free_checksum_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_cksumtypes.html#c.krb5_free_cksumtypes">krb5_free_cksumtypes (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_context.html#c.krb5_free_context">krb5_free_context (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_cred_contents.html#c.krb5_free_cred_contents">krb5_free_cred_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_creds.html#c.krb5_free_creds">krb5_free_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_data.html#c.krb5_free_data">krb5_free_data (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_data_contents.html#c.krb5_free_data_contents">krb5_free_data_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_default_realm.html#c.krb5_free_default_realm">krb5_free_default_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_enctypes.html#c.krb5_free_enctypes">krb5_free_enctypes (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_error.html#c.krb5_free_error">krb5_free_error (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_error_message.html#c.krb5_free_error_message">krb5_free_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_host_realm.html#c.krb5_free_host_realm">krb5_free_host_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_keyblock.html#c.krb5_free_keyblock">krb5_free_keyblock (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_keyblock_contents.html#c.krb5_free_keyblock_contents">krb5_free_keyblock_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_keytab_entry_contents.html#c.krb5_free_keytab_entry_contents">krb5_free_keytab_entry_contents (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_principal.html#c.krb5_free_principal">krb5_free_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_string.html#c.krb5_free_string">krb5_free_string (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_tgt_creds.html#c.krb5_free_tgt_creds">krb5_free_tgt_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_ticket.html#c.krb5_free_ticket">krb5_free_ticket (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_free_unparsed_name.html#c.krb5_free_unparsed_name">krb5_free_unparsed_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_fwd_tgt_creds.html#c.krb5_fwd_tgt_creds">krb5_fwd_tgt_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_CACHED.html#KRB5_GC_CACHED">KRB5_GC_CACHED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_CANONICALIZE.html#KRB5_GC_CANONICALIZE">KRB5_GC_CANONICALIZE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION.html#KRB5_GC_CONSTRAINED_DELEGATION">KRB5_GC_CONSTRAINED_DELEGATION (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_FORWARDABLE.html#KRB5_GC_FORWARDABLE">KRB5_GC_FORWARDABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_NO_STORE.html#KRB5_GC_NO_STORE">KRB5_GC_NO_STORE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK.html#KRB5_GC_NO_TRANSIT_CHECK">KRB5_GC_NO_TRANSIT_CHECK (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GC_USER_USER.html#KRB5_GC_USER_USER">KRB5_GC_USER_USER (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_credentials.html#c.krb5_get_credentials">krb5_get_credentials (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_credentials_renew.html#c.krb5_get_credentials_renew">krb5_get_credentials_renew (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_credentials_validate.html#c.krb5_get_credentials_validate">krb5_get_credentials_validate (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_default_realm.html#c.krb5_get_default_realm">krb5_get_default_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_error_message.html#c.krb5_get_error_message">krb5_get_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_etype_info.html#c.krb5_get_etype_info">krb5_get_etype_info (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_fallback_host_realm.html#c.krb5_get_fallback_host_realm">krb5_get_fallback_host_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_host_realm.html#c.krb5_get_host_realm">krb5_get_host_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_in_tkt_with_keytab.html#c.krb5_get_in_tkt_with_keytab">krb5_get_in_tkt_with_keytab (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_in_tkt_with_password.html#c.krb5_get_in_tkt_with_password">krb5_get_in_tkt_with_password (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_in_tkt_with_skey.html#c.krb5_get_in_tkt_with_skey">krb5_get_in_tkt_with_skey (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_keytab.html#c.krb5_get_init_creds_keytab">krb5_get_init_creds_keytab (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt">krb5_get_init_creds_opt (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.address_list">krb5_get_init_creds_opt.address_list (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.etype_list">krb5_get_init_creds_opt.etype_list (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.etype_list_length">krb5_get_init_creds_opt.etype_list_length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.flags">krb5_get_init_creds_opt.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.forwardable">krb5_get_init_creds_opt.forwardable (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.preauth_list">krb5_get_init_creds_opt.preauth_list (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.preauth_list_length">krb5_get_init_creds_opt.preauth_list_length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.proxiable">krb5_get_init_creds_opt.proxiable (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.renew_life">krb5_get_init_creds_opt.renew_life (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.salt">krb5_get_init_creds_opt.salt (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_get_init_creds_opt.html#c.krb5_get_init_creds_opt.tkt_life">krb5_get_init_creds_opt.tkt_life (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.html#KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST">KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_alloc.html#c.krb5_get_init_creds_opt_alloc">krb5_get_init_creds_opt_alloc (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.html#KRB5_GET_INIT_CREDS_OPT_ANONYMOUS">KRB5_GET_INIT_CREDS_OPT_ANONYMOUS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.html#KRB5_GET_INIT_CREDS_OPT_CANONICALIZE">KRB5_GET_INIT_CREDS_OPT_CANONICALIZE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.html#KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT">KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.html#KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST">KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.html#KRB5_GET_INIT_CREDS_OPT_FORWARDABLE">KRB5_GET_INIT_CREDS_OPT_FORWARDABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_free.html#c.krb5_get_init_creds_opt_free">krb5_get_init_creds_opt_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags.html#c.krb5_get_init_creds_opt_get_fast_flags">krb5_get_init_creds_opt_get_fast_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_init.html#c.krb5_get_init_creds_opt_init">krb5_get_init_creds_opt_init (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.html#KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST">KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE.html#KRB5_GET_INIT_CREDS_OPT_PROXIABLE">KRB5_GET_INIT_CREDS_OPT_PROXIABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.html#KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE">KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT.html#KRB5_GET_INIT_CREDS_OPT_SALT">KRB5_GET_INIT_CREDS_OPT_SALT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_address_list.html#c.krb5_get_init_creds_opt_set_address_list">krb5_get_init_creds_opt_set_address_list (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_anonymous.html#c.krb5_get_init_creds_opt_set_anonymous">krb5_get_init_creds_opt_set_anonymous (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.html#c.krb5_get_init_creds_opt_set_canonicalize">krb5_get_init_creds_opt_set_canonicalize (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt.html#c.krb5_get_init_creds_opt_set_change_password_prompt">krb5_get_init_creds_opt_set_change_password_prompt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_etype_list.html#c.krb5_get_init_creds_opt_set_etype_list">krb5_get_init_creds_opt_set_etype_list (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback.html#c.krb5_get_init_creds_opt_set_expire_callback">krb5_get_init_creds_opt_set_expire_callback (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache.html#c.krb5_get_init_creds_opt_set_fast_ccache">krb5_get_init_creds_opt_set_fast_ccache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name.html#c.krb5_get_init_creds_opt_set_fast_ccache_name">krb5_get_init_creds_opt_set_fast_ccache_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags.html#c.krb5_get_init_creds_opt_set_fast_flags">krb5_get_init_creds_opt_set_fast_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_forwardable.html#c.krb5_get_init_creds_opt_set_forwardable">krb5_get_init_creds_opt_set_forwardable (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache.html#c.krb5_get_init_creds_opt_set_in_ccache">krb5_get_init_creds_opt_set_in_ccache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache.html#c.krb5_get_init_creds_opt_set_out_ccache">krb5_get_init_creds_opt_set_out_ccache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_pa.html#c.krb5_get_init_creds_opt_set_pa">krb5_get_init_creds_opt_set_pa (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_pac_request.html#c.krb5_get_init_creds_opt_set_pac_request">krb5_get_init_creds_opt_set_pac_request (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list.html#c.krb5_get_init_creds_opt_set_preauth_list">krb5_get_init_creds_opt_set_preauth_list (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_proxiable.html#c.krb5_get_init_creds_opt_set_proxiable">krb5_get_init_creds_opt_set_proxiable (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_renew_life.html#c.krb5_get_init_creds_opt_set_renew_life">krb5_get_init_creds_opt_set_renew_life (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_responder.html#c.krb5_get_init_creds_opt_set_responder">krb5_get_init_creds_opt_set_responder (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_salt.html#c.krb5_get_init_creds_opt_set_salt">krb5_get_init_creds_opt_set_salt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life.html#c.krb5_get_init_creds_opt_set_tkt_life">krb5_get_init_creds_opt_set_tkt_life (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.html#KRB5_GET_INIT_CREDS_OPT_TKT_LIFE">KRB5_GET_INIT_CREDS_OPT_TKT_LIFE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_init_creds_password.html#c.krb5_get_init_creds_password">krb5_get_init_creds_password (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_permitted_enctypes.html#c.krb5_get_permitted_enctypes">krb5_get_permitted_enctypes (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_profile.html#c.krb5_get_profile">krb5_get_profile (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_prompt_types.html#c.krb5_get_prompt_types">krb5_get_prompt_types (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_renewed_creds.html#c.krb5_get_renewed_creds">krb5_get_renewed_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_server_rcache.html#c.krb5_get_server_rcache">krb5_get_server_rcache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_time_offsets.html#c.krb5_get_time_offsets">krb5_get_time_offsets (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_get_validated_creds.html#c.krb5_get_validated_creds">krb5_get_validated_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_gic_opt_pa_data.html#c.krb5_gic_opt_pa_data">krb5_gic_opt_pa_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_gic_opt_pa_data.html#c.krb5_gic_opt_pa_data.attr">krb5_gic_opt_pa_data.attr (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_gic_opt_pa_data.html#c.krb5_gic_opt_pa_data.value">krb5_gic_opt_pa_data.value (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_context.html#c.krb5_init_context">krb5_init_context (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INIT_CONTEXT_KDC.html#KRB5_INIT_CONTEXT_KDC">KRB5_INIT_CONTEXT_KDC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_context_profile.html#c.krb5_init_context_profile">krb5_init_context_profile (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE.html#KRB5_INIT_CONTEXT_SECURE">KRB5_INIT_CONTEXT_SECURE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_init_creds_context.html#c.krb5_init_creds_context">krb5_init_creds_context (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_free.html#c.krb5_init_creds_free">krb5_init_creds_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_get.html#c.krb5_init_creds_get">krb5_init_creds_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_get_creds.html#c.krb5_init_creds_get_creds">krb5_init_creds_get_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_get_error.html#c.krb5_init_creds_get_error">krb5_init_creds_get_error (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_get_times.html#c.krb5_init_creds_get_times">krb5_init_creds_get_times (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_init.html#c.krb5_init_creds_init">krb5_init_creds_init (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_set_keytab.html#c.krb5_init_creds_set_keytab">krb5_init_creds_set_keytab (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_set_password.html#c.krb5_init_creds_set_password">krb5_init_creds_set_password (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_set_service.html#c.krb5_init_creds_set_service">krb5_init_creds_set_service (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_creds_step.html#c.krb5_init_creds_step">krb5_init_creds_step (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.html#KRB5_INIT_CREDS_STEP_FLAG_CONTINUE">KRB5_INIT_CREDS_STEP_FLAG_CONTINUE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_keyblock.html#c.krb5_init_keyblock">krb5_init_keyblock (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_random_key.html#c.krb5_init_random_key">krb5_init_random_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_init_secure_context.html#c.krb5_init_secure_context">krb5_init_secure_context (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_int16.html#c.krb5_int16">krb5_int16 (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INT16_MAX.html#KRB5_INT16_MAX">KRB5_INT16_MAX (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INT16_MIN.html#KRB5_INT16_MIN">KRB5_INT16_MIN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_int32.html#c.krb5_int32">krb5_int32 (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INT32_MAX.html#KRB5_INT32_MAX">KRB5_INT32_MAX (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_INT32_MIN.html#KRB5_INT32_MIN">KRB5_INT32_MIN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_is_config_principal.html#c.krb5_is_config_principal">krb5_is_config_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_is_referral_realm.html#c.krb5_is_referral_realm">krb5_is_referral_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_is_thread_safe.html#c.krb5_is_thread_safe">krb5_is_thread_safe (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_create_key.html#c.krb5_k_create_key">krb5_k_create_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_decrypt.html#c.krb5_k_decrypt">krb5_k_decrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_decrypt_iov.html#c.krb5_k_decrypt_iov">krb5_k_decrypt_iov (C function)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/api/krb5_k_encrypt.html#c.krb5_k_encrypt">krb5_k_encrypt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_encrypt_iov.html#c.krb5_k_encrypt_iov">krb5_k_encrypt_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_free_key.html#c.krb5_k_free_key">krb5_k_free_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_key_enctype.html#c.krb5_k_key_enctype">krb5_k_key_enctype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_key_keyblock.html#c.krb5_k_key_keyblock">krb5_k_key_keyblock (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_make_checksum.html#c.krb5_k_make_checksum">krb5_k_make_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_make_checksum_iov.html#c.krb5_k_make_checksum_iov">krb5_k_make_checksum_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_prf.html#c.krb5_k_prf">krb5_k_prf (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_reference_key.html#c.krb5_k_reference_key">krb5_k_reference_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_verify_checksum.html#c.krb5_k_verify_checksum">krb5_k_verify_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_k_verify_checksum_iov.html#c.krb5_k_verify_checksum_iov">krb5_k_verify_checksum_iov (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep">krb5_kdc_rep (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.client">krb5_kdc_rep.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.enc_part">krb5_kdc_rep.enc_part (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.enc_part2">krb5_kdc_rep.enc_part2 (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.magic">krb5_kdc_rep.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.msg_type">krb5_kdc_rep.msg_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.padata">krb5_kdc_rep.padata (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_rep.html#c.krb5_kdc_rep.ticket">krb5_kdc_rep.ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req">krb5_kdc_req (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.addresses">krb5_kdc_req.addresses (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.authorization_data">krb5_kdc_req.authorization_data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.client">krb5_kdc_req.client (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.from">krb5_kdc_req.from (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.kdc_options">krb5_kdc_req.kdc_options (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.ktype">krb5_kdc_req.ktype (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.magic">krb5_kdc_req.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.msg_type">krb5_kdc_req.msg_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.nktypes">krb5_kdc_req.nktypes (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.nonce">krb5_kdc_req.nonce (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.padata">krb5_kdc_req.padata (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.rtime">krb5_kdc_req.rtime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.second_ticket">krb5_kdc_req.second_ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.server">krb5_kdc_req.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.till">krb5_kdc_req.till (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kdc_req.html#c.krb5_kdc_req.unenc_authdata">krb5_kdc_req.unenc_authdata (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kdc_sign_ticket.html#c.krb5_kdc_sign_ticket">krb5_kdc_sign_ticket (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kdc_verify_ticket.html#c.krb5_kdc_verify_ticket">krb5_kdc_verify_ticket (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_key.html#c.krb5_key">krb5_key (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyblock.html#c.krb5_keyblock">krb5_keyblock (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyblock.html#c.krb5_keyblock.contents">krb5_keyblock.contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyblock.html#c.krb5_keyblock.enctype">krb5_keyblock.enctype (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyblock.html#c.krb5_keyblock.length">krb5_keyblock.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyblock.html#c.krb5_keyblock.magic">krb5_keyblock.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab.html#c.krb5_keytab">krb5_keytab (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry">krb5_keytab_entry (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry.key">krb5_keytab_entry.key (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry.magic">krb5_keytab_entry.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry.principal">krb5_keytab_entry.principal (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry.timestamp">krb5_keytab_entry.timestamp (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keytab_entry.html#c.krb5_keytab_entry.vno">krb5_keytab_entry.vno (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_keyusage.html#c.krb5_keyusage">krb5_keyusage (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE.html#KRB5_KEYUSAGE_AD_ITE">KRB5_KEYUSAGE_AD_ITE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.html#KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM">KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE.html#KRB5_KEYUSAGE_AD_MTE">KRB5_KEYUSAGE_AD_MTE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH.html#KRB5_KEYUSAGE_AD_SIGNEDPATH">KRB5_KEYUSAGE_AD_SIGNEDPATH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART.html#KRB5_KEYUSAGE_AP_REP_ENCPART">KRB5_KEYUSAGE_AP_REP_ENCPART (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH.html#KRB5_KEYUSAGE_AP_REQ_AUTH">KRB5_KEYUSAGE_AP_REQ_AUTH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.html#KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM">KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM.html#KRB5_KEYUSAGE_APP_DATA_CKSUM">KRB5_KEYUSAGE_APP_DATA_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT.html#KRB5_KEYUSAGE_APP_DATA_ENCRYPT">KRB5_KEYUSAGE_APP_DATA_ENCRYPT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART.html#KRB5_KEYUSAGE_AS_REP_ENCPART">KRB5_KEYUSAGE_AS_REP_ENCPART (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ.html#KRB5_KEYUSAGE_AS_REQ">KRB5_KEYUSAGE_AS_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.html#KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS">KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC.html#KRB5_KEYUSAGE_CAMMAC">KRB5_KEYUSAGE_CAMMAC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.html#KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT">KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.html#KRB5_KEYUSAGE_ENC_CHALLENGE_KDC">KRB5_KEYUSAGE_ENC_CHALLENGE_KDC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC.html#KRB5_KEYUSAGE_FAST_ENC">KRB5_KEYUSAGE_FAST_ENC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED.html#KRB5_KEYUSAGE_FAST_FINISHED">KRB5_KEYUSAGE_FAST_FINISHED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP.html#KRB5_KEYUSAGE_FAST_REP">KRB5_KEYUSAGE_FAST_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM.html#KRB5_KEYUSAGE_FAST_REQ_CHKSUM">KRB5_KEYUSAGE_FAST_REQ_CHKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC.html#KRB5_KEYUSAGE_GSS_TOK_MIC">KRB5_KEYUSAGE_GSS_TOK_MIC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.html#KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG">KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.html#KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV">KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED.html#KRB5_KEYUSAGE_IAKERB_FINISHED">KRB5_KEYUSAGE_IAKERB_FINISHED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET.html#KRB5_KEYUSAGE_KDC_REP_TICKET">KRB5_KEYUSAGE_KDC_REP_TICKET (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART.html#KRB5_KEYUSAGE_KRB_CRED_ENCPART">KRB5_KEYUSAGE_KRB_CRED_ENCPART (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM.html#KRB5_KEYUSAGE_KRB_ERROR_CKSUM">KRB5_KEYUSAGE_KRB_ERROR_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART.html#KRB5_KEYUSAGE_KRB_PRIV_ENCPART">KRB5_KEYUSAGE_KRB_PRIV_ENCPART (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM.html#KRB5_KEYUSAGE_KRB_SAFE_CKSUM">KRB5_KEYUSAGE_KRB_SAFE_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS.html#KRB5_KEYUSAGE_PA_AS_FRESHNESS">KRB5_KEYUSAGE_PA_AS_FRESHNESS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE.html#KRB5_KEYUSAGE_PA_FX_COOKIE">KRB5_KEYUSAGE_PA_FX_COOKIE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST.html#KRB5_KEYUSAGE_PA_OTP_REQUEST">KRB5_KEYUSAGE_PA_OTP_REQUEST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX.html#KRB5_KEYUSAGE_PA_PKINIT_KX">KRB5_KEYUSAGE_PA_PKINIT_KX (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.html#KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY">KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.html#KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST">KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.html#KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.html#KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID">KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE.html#KRB5_KEYUSAGE_PA_SAM_RESPONSE">KRB5_KEYUSAGE_PA_SAM_RESPONSE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_SPAKE.html#KRB5_KEYUSAGE_SPAKE">KRB5_KEYUSAGE_SPAKE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.html#KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY">KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.html#KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY">KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.html#KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY">KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.html#KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY">KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH.html#KRB5_KEYUSAGE_TGS_REQ_AUTH">KRB5_KEYUSAGE_TGS_REQ_AUTH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.html#KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM">KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED.html#KRB5_KPASSWD_ACCESSDENIED">KRB5_KPASSWD_ACCESSDENIED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_AUTHERROR.html#KRB5_KPASSWD_AUTHERROR">KRB5_KPASSWD_AUTHERROR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION.html#KRB5_KPASSWD_BAD_VERSION">KRB5_KPASSWD_BAD_VERSION (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_HARDERROR.html#KRB5_KPASSWD_HARDERROR">KRB5_KPASSWD_HARDERROR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED.html#KRB5_KPASSWD_INITIAL_FLAG_NEEDED">KRB5_KPASSWD_INITIAL_FLAG_NEEDED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_MALFORMED.html#KRB5_KPASSWD_MALFORMED">KRB5_KPASSWD_MALFORMED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_SOFTERROR.html#KRB5_KPASSWD_SOFTERROR">KRB5_KPASSWD_SOFTERROR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_KPASSWD_SUCCESS.html#KRB5_KPASSWD_SUCCESS">KRB5_KPASSWD_SUCCESS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_add_entry.html#c.krb5_kt_add_entry">krb5_kt_add_entry (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_client_default.html#c.krb5_kt_client_default">krb5_kt_client_default (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_close.html#c.krb5_kt_close">krb5_kt_close (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kt_cursor.html#c.krb5_kt_cursor">krb5_kt_cursor (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_default.html#c.krb5_kt_default">krb5_kt_default (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_default_name.html#c.krb5_kt_default_name">krb5_kt_default_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_dup.html#c.krb5_kt_dup">krb5_kt_dup (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_end_seq_get.html#c.krb5_kt_end_seq_get">krb5_kt_end_seq_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_free_entry.html#c.krb5_kt_free_entry">krb5_kt_free_entry (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_get_entry.html#c.krb5_kt_get_entry">krb5_kt_get_entry (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_get_name.html#c.krb5_kt_get_name">krb5_kt_get_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_get_type.html#c.krb5_kt_get_type">krb5_kt_get_type (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_have_content.html#c.krb5_kt_have_content">krb5_kt_have_content (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_next_entry.html#c.krb5_kt_next_entry">krb5_kt_next_entry (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_read_service_key.html#c.krb5_kt_read_service_key">krb5_kt_read_service_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_remove_entry.html#c.krb5_kt_remove_entry">krb5_kt_remove_entry (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_resolve.html#c.krb5_kt_resolve">krb5_kt_resolve (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kt_start_seq_get.html#c.krb5_kt_start_seq_get">krb5_kt_start_seq_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_kuserok.html#c.krb5_kuserok">krb5_kuserok (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_kvno.html#c.krb5_kvno">krb5_kvno (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_last_req_entry.html#c.krb5_last_req_entry">krb5_last_req_entry (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_last_req_entry.html#c.krb5_last_req_entry.lr_type">krb5_last_req_entry.lr_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_last_req_entry.html#c.krb5_last_req_entry.magic">krb5_last_req_entry.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_last_req_entry.html#c.krb5_last_req_entry.value">krb5_last_req_entry.value (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME.html#KRB5_LRQ_ALL_ACCT_EXPTIME">KRB5_LRQ_ALL_ACCT_EXPTIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL.html#KRB5_LRQ_ALL_LAST_INITIAL">KRB5_LRQ_ALL_LAST_INITIAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL.html#KRB5_LRQ_ALL_LAST_RENEWAL">KRB5_LRQ_ALL_LAST_RENEWAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ.html#KRB5_LRQ_ALL_LAST_REQ">KRB5_LRQ_ALL_LAST_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT.html#KRB5_LRQ_ALL_LAST_TGT">KRB5_LRQ_ALL_LAST_TGT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED.html#KRB5_LRQ_ALL_LAST_TGT_ISSUED">KRB5_LRQ_ALL_LAST_TGT_ISSUED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME.html#KRB5_LRQ_ALL_PW_EXPTIME">KRB5_LRQ_ALL_PW_EXPTIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_NONE.html#KRB5_LRQ_NONE">KRB5_LRQ_NONE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME.html#KRB5_LRQ_ONE_ACCT_EXPTIME">KRB5_LRQ_ONE_ACCT_EXPTIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL.html#KRB5_LRQ_ONE_LAST_INITIAL">KRB5_LRQ_ONE_LAST_INITIAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL.html#KRB5_LRQ_ONE_LAST_RENEWAL">KRB5_LRQ_ONE_LAST_RENEWAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ.html#KRB5_LRQ_ONE_LAST_REQ">KRB5_LRQ_ONE_LAST_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT.html#KRB5_LRQ_ONE_LAST_TGT">KRB5_LRQ_ONE_LAST_TGT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED.html#KRB5_LRQ_ONE_LAST_TGT_ISSUED">KRB5_LRQ_ONE_LAST_TGT_ISSUED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME.html#KRB5_LRQ_ONE_PW_EXPTIME">KRB5_LRQ_ONE_PW_EXPTIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_magic.html#c.krb5_magic">krb5_magic (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_make_authdata_kdc_issued.html#c.krb5_make_authdata_kdc_issued">krb5_make_authdata_kdc_issued (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_marshal_credentials.html#c.krb5_marshal_credentials">krb5_marshal_credentials (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_merge_authdata.html#c.krb5_merge_authdata">krb5_merge_authdata (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_1cred.html#c.krb5_mk_1cred">krb5_mk_1cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_error.html#c.krb5_mk_error">krb5_mk_error (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_ncred.html#c.krb5_mk_ncred">krb5_mk_ncred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_priv.html#c.krb5_mk_priv">krb5_mk_priv (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_rep.html#c.krb5_mk_rep">krb5_mk_rep (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_rep_dce.html#c.krb5_mk_rep_dce">krb5_mk_rep_dce (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_req.html#c.krb5_mk_req">krb5_mk_req (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_mk_req_checksum_func.html#c.krb5_mk_req_checksum_func">krb5_mk_req_checksum_func (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_req_extended.html#c.krb5_mk_req_extended">krb5_mk_req_extended (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_mk_safe.html#c.krb5_mk_safe">krb5_mk_safe (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_msgtype.html#c.krb5_msgtype">krb5_msgtype (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID.html#KRB5_NT_ENT_PRINCIPAL_AND_ID">KRB5_NT_ENT_PRINCIPAL_AND_ID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL.html#KRB5_NT_ENTERPRISE_PRINCIPAL">KRB5_NT_ENTERPRISE_PRINCIPAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_MS_PRINCIPAL.html#KRB5_NT_MS_PRINCIPAL">KRB5_NT_MS_PRINCIPAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID.html#KRB5_NT_MS_PRINCIPAL_AND_ID">KRB5_NT_MS_PRINCIPAL_AND_ID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_PRINCIPAL.html#KRB5_NT_PRINCIPAL">KRB5_NT_PRINCIPAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_SMTP_NAME.html#KRB5_NT_SMTP_NAME">KRB5_NT_SMTP_NAME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_SRV_HST.html#KRB5_NT_SRV_HST">KRB5_NT_SRV_HST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_SRV_INST.html#KRB5_NT_SRV_INST">KRB5_NT_SRV_INST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_SRV_XHST.html#KRB5_NT_SRV_XHST">KRB5_NT_SRV_XHST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_UID.html#KRB5_NT_UID">KRB5_NT_UID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_UNKNOWN.html#KRB5_NT_UNKNOWN">KRB5_NT_UNKNOWN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_WELLKNOWN.html#KRB5_NT_WELLKNOWN">KRB5_NT_WELLKNOWN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_NT_X500_PRINCIPAL.html#KRB5_NT_X500_PRINCIPAL">KRB5_NT_X500_PRINCIPAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_octet.html#c.krb5_octet">krb5_octet (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_os_localaddr.html#c.krb5_os_localaddr">krb5_os_localaddr (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_data.html#c.krb5_pa_data">krb5_pa_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_data.html#c.krb5_pa_data.contents">krb5_pa_data.contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_data.html#c.krb5_pa_data.length">krb5_pa_data.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_data.html#c.krb5_pa_data.magic">krb5_pa_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_data.html#c.krb5_pa_data.pa_type">krb5_pa_data.pa_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_pac_req.html#c.krb5_pa_pac_req">krb5_pa_pac_req (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_pac_req.html#c.krb5_pa_pac_req.include_pac">krb5_pa_pac_req.include_pac (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data">krb5_pa_server_referral_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data.referral_valid_until">krb5_pa_server_referral_data.referral_valid_until (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data.referred_realm">krb5_pa_server_referral_data.referred_realm (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data.rep_cksum">krb5_pa_server_referral_data.rep_cksum (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data.requested_principal_name">krb5_pa_server_referral_data.requested_principal_name (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_server_referral_data.html#c.krb5_pa_server_referral_data.true_principal_name">krb5_pa_server_referral_data.true_principal_name (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_svr_referral_data.html#c.krb5_pa_svr_referral_data">krb5_pa_svr_referral_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pa_svr_referral_data.html#c.krb5_pa_svr_referral_data.principal">krb5_pa_svr_referral_data.principal (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pac.html#c.krb5_pac">krb5_pac (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_add_buffer.html#c.krb5_pac_add_buffer">krb5_pac_add_buffer (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO.html#KRB5_PAC_ATTRIBUTES_INFO">KRB5_PAC_ATTRIBUTES_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS.html#KRB5_PAC_CLIENT_CLAIMS">KRB5_PAC_CLIENT_CLAIMS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_CLIENT_INFO.html#KRB5_PAC_CLIENT_INFO">KRB5_PAC_CLIENT_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO.html#KRB5_PAC_CREDENTIALS_INFO">KRB5_PAC_CREDENTIALS_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_DELEGATION_INFO.html#KRB5_PAC_DELEGATION_INFO">KRB5_PAC_DELEGATION_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS.html#KRB5_PAC_DEVICE_CLAIMS">KRB5_PAC_DEVICE_CLAIMS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_DEVICE_INFO.html#KRB5_PAC_DEVICE_INFO">KRB5_PAC_DEVICE_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_free.html#c.krb5_pac_free">krb5_pac_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_get_buffer.html#c.krb5_pac_get_buffer">krb5_pac_get_buffer (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_get_client_info.html#c.krb5_pac_get_client_info">krb5_pac_get_client_info (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_get_types.html#c.krb5_pac_get_types">krb5_pac_get_types (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_init.html#c.krb5_pac_init">krb5_pac_init (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_LOGON_INFO.html#KRB5_PAC_LOGON_INFO">KRB5_PAC_LOGON_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_parse.html#c.krb5_pac_parse">krb5_pac_parse (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM.html#KRB5_PAC_PRIVSVR_CHECKSUM">KRB5_PAC_PRIVSVR_CHECKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_REQUESTOR.html#KRB5_PAC_REQUESTOR">KRB5_PAC_REQUESTOR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM.html#KRB5_PAC_SERVER_CHECKSUM">KRB5_PAC_SERVER_CHECKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_sign.html#c.krb5_pac_sign">krb5_pac_sign (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_sign_ext.html#c.krb5_pac_sign_ext">krb5_pac_sign_ext (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM.html#KRB5_PAC_TICKET_CHECKSUM">KRB5_PAC_TICKET_CHECKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO.html#KRB5_PAC_UPN_DNS_INFO">KRB5_PAC_UPN_DNS_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_verify.html#c.krb5_pac_verify">krb5_pac_verify (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_pac_verify_ext.html#c.krb5_pac_verify_ext">krb5_pac_verify_ext (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_AFS3_SALT.html#KRB5_PADATA_AFS3_SALT">KRB5_PADATA_AFS3_SALT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_AP_REQ.html#KRB5_PADATA_AP_REQ">KRB5_PADATA_AP_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM.html#KRB5_PADATA_AS_CHECKSUM">KRB5_PADATA_AS_CHECKSUM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS.html#KRB5_PADATA_AS_FRESHNESS">KRB5_PADATA_AS_FRESHNESS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID.html#KRB5_PADATA_ENC_SANDIA_SECURID">KRB5_PADATA_ENC_SANDIA_SECURID (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP.html#KRB5_PADATA_ENC_TIMESTAMP">KRB5_PADATA_ENC_TIMESTAMP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME.html#KRB5_PADATA_ENC_UNIX_TIME">KRB5_PADATA_ENC_UNIX_TIME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE.html#KRB5_PADATA_ENCRYPTED_CHALLENGE">KRB5_PADATA_ENCRYPTED_CHALLENGE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ETYPE_INFO.html#KRB5_PADATA_ETYPE_INFO">KRB5_PADATA_ETYPE_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2.html#KRB5_PADATA_ETYPE_INFO2">KRB5_PADATA_ETYPE_INFO2 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_FOR_USER.html#KRB5_PADATA_FOR_USER">KRB5_PADATA_FOR_USER (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_FX_COOKIE.html#KRB5_PADATA_FX_COOKIE">KRB5_PADATA_FX_COOKIE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_FX_ERROR.html#KRB5_PADATA_FX_ERROR">KRB5_PADATA_FX_ERROR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_FX_FAST.html#KRB5_PADATA_FX_FAST">KRB5_PADATA_FX_FAST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA.html#KRB5_PADATA_GET_FROM_TYPED_DATA">KRB5_PADATA_GET_FROM_TYPED_DATA (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_NONE.html#KRB5_PADATA_NONE">KRB5_PADATA_NONE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_OSF_DCE.html#KRB5_PADATA_OSF_DCE">KRB5_PADATA_OSF_DCE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE.html#KRB5_PADATA_OTP_CHALLENGE">KRB5_PADATA_OTP_CHALLENGE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE.html#KRB5_PADATA_OTP_PIN_CHANGE">KRB5_PADATA_OTP_PIN_CHANGE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_OTP_REQUEST.html#KRB5_PADATA_OTP_REQUEST">KRB5_PADATA_OTP_REQUEST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS.html#KRB5_PADATA_PAC_OPTIONS">KRB5_PADATA_PAC_OPTIONS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PAC_REQUEST.html#KRB5_PADATA_PAC_REQUEST">KRB5_PADATA_PAC_REQUEST (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PK_AS_REP.html#KRB5_PADATA_PK_AS_REP">KRB5_PADATA_PK_AS_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD.html#KRB5_PADATA_PK_AS_REP_OLD">KRB5_PADATA_PK_AS_REP_OLD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PK_AS_REQ.html#KRB5_PADATA_PK_AS_REQ">KRB5_PADATA_PK_AS_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD.html#KRB5_PADATA_PK_AS_REQ_OLD">KRB5_PADATA_PK_AS_REQ_OLD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PKINIT_KX.html#KRB5_PADATA_PKINIT_KX">KRB5_PADATA_PKINIT_KX (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_PW_SALT.html#KRB5_PADATA_PW_SALT">KRB5_PADATA_PW_SALT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2.html#KRB5_PADATA_REDHAT_IDP_OAUTH2">KRB5_PADATA_REDHAT_IDP_OAUTH2 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_REFERRAL.html#KRB5_PADATA_REFERRAL">KRB5_PADATA_REFERRAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_S4U_X509_USER.html#KRB5_PADATA_S4U_X509_USER">KRB5_PADATA_S4U_X509_USER (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE.html#KRB5_PADATA_SAM_CHALLENGE">KRB5_PADATA_SAM_CHALLENGE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2.html#KRB5_PADATA_SAM_CHALLENGE_2">KRB5_PADATA_SAM_CHALLENGE_2 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT.html#KRB5_PADATA_SAM_REDIRECT">KRB5_PADATA_SAM_REDIRECT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE.html#KRB5_PADATA_SAM_RESPONSE">KRB5_PADATA_SAM_RESPONSE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2.html#KRB5_PADATA_SAM_RESPONSE_2">KRB5_PADATA_SAM_RESPONSE_2 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SESAME.html#KRB5_PADATA_SESAME">KRB5_PADATA_SESAME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SPAKE.html#KRB5_PADATA_SPAKE">KRB5_PADATA_SPAKE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO.html#KRB5_PADATA_SVR_REFERRAL_INFO">KRB5_PADATA_SVR_REFERRAL_INFO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_TGS_REQ.html#KRB5_PADATA_TGS_REQ">KRB5_PADATA_TGS_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO.html#KRB5_PADATA_USE_SPECIFIED_KVNO">KRB5_PADATA_USE_SPECIFIED_KVNO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_parse_name.html#c.krb5_parse_name">krb5_parse_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_parse_name_flags.html#c.krb5_parse_name_flags">krb5_parse_name_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pointer.html#c.krb5_pointer">krb5_pointer (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_post_recv_fn.html#c.krb5_post_recv_fn">krb5_post_recv_fn (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pre_send_fn.html#c.krb5_pre_send_fn">krb5_pre_send_fn (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_preauthtype.html#c.krb5_preauthtype">krb5_preauthtype (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_prepend_error_message.html#c.krb5_prepend_error_message">krb5_prepend_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_component.html#krb5_princ_component">krb5_princ_component (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_name.html#krb5_princ_name">krb5_princ_name (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_realm.html#krb5_princ_realm">krb5_princ_realm (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_set_realm.html#krb5_princ_set_realm">krb5_princ_set_realm (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_set_realm_data.html#krb5_princ_set_realm_data">krb5_princ_set_realm_data (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_set_realm_length.html#krb5_princ_set_realm_length">krb5_princ_set_realm_length (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_size.html#krb5_princ_size">krb5_princ_size (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_princ_type.html#krb5_princ_type">krb5_princ_type (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal">krb5_principal (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal.data">krb5_principal.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal.length">krb5_principal.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal.magic">krb5_principal.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal.realm">krb5_principal.realm (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal.html#c.krb5_principal.type">krb5_principal.type (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_principal2salt.html#c.krb5_principal2salt">krb5_principal2salt (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_principal_compare.html#c.krb5_principal_compare">krb5_principal_compare (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_principal_compare_any_realm.html#c.krb5_principal_compare_any_realm">krb5_principal_compare_any_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD.html#KRB5_PRINCIPAL_COMPARE_CASEFOLD">KRB5_PRINCIPAL_COMPARE_CASEFOLD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE.html#KRB5_PRINCIPAL_COMPARE_ENTERPRISE">KRB5_PRINCIPAL_COMPARE_ENTERPRISE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_principal_compare_flags.html#c.krb5_principal_compare_flags">krb5_principal_compare_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.html#KRB5_PRINCIPAL_COMPARE_IGNORE_REALM">KRB5_PRINCIPAL_COMPARE_IGNORE_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8.html#KRB5_PRINCIPAL_COMPARE_UTF8">KRB5_PRINCIPAL_COMPARE_UTF8 (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data">krb5_principal_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data.data">krb5_principal_data.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data.length">krb5_principal_data.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data.magic">krb5_principal_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data.realm">krb5_principal_data.realm (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_principal_data.html#c.krb5_principal_data.type">krb5_principal_data.type (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE.html#KRB5_PRINCIPAL_PARSE_ENTERPRISE">KRB5_PRINCIPAL_PARSE_ENTERPRISE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM.html#KRB5_PRINCIPAL_PARSE_IGNORE_REALM">KRB5_PRINCIPAL_PARSE_IGNORE_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.html#KRB5_PRINCIPAL_PARSE_NO_DEF_REALM">KRB5_PRINCIPAL_PARSE_NO_DEF_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM.html#KRB5_PRINCIPAL_PARSE_NO_REALM">KRB5_PRINCIPAL_PARSE_NO_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.html#KRB5_PRINCIPAL_PARSE_REQUIRE_REALM">KRB5_PRINCIPAL_PARSE_REQUIRE_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY.html#KRB5_PRINCIPAL_UNPARSE_DISPLAY">KRB5_PRINCIPAL_UNPARSE_DISPLAY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM.html#KRB5_PRINCIPAL_UNPARSE_NO_REALM">KRB5_PRINCIPAL_UNPARSE_NO_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT.html#KRB5_PRINCIPAL_UNPARSE_SHORT">KRB5_PRINCIPAL_UNPARSE_SHORT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PRIV.html#KRB5_PRIV">KRB5_PRIV (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_process_key.html#c.krb5_process_key">krb5_process_key (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompt.html#c.krb5_prompt">krb5_prompt (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompt.html#c.krb5_prompt.hidden">krb5_prompt.hidden (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompt.html#c.krb5_prompt.prompt">krb5_prompt.prompt (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompt.html#c.krb5_prompt.reply">krb5_prompt.reply (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompt_type.html#c.krb5_prompt_type">krb5_prompt_type (C type)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD.html#KRB5_PROMPT_TYPE_NEW_PASSWORD">KRB5_PROMPT_TYPE_NEW_PASSWORD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.html#KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN">KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD.html#KRB5_PROMPT_TYPE_PASSWORD">KRB5_PROMPT_TYPE_PASSWORD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH.html#KRB5_PROMPT_TYPE_PREAUTH">KRB5_PROMPT_TYPE_PREAUTH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_prompter_fct.html#c.krb5_prompter_fct">krb5_prompter_fct (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_prompter_posix.html#c.krb5_prompter_posix">krb5_prompter_posix (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_PVNO.html#KRB5_PVNO">KRB5_PVNO (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pwd_data.html#c.krb5_pwd_data">krb5_pwd_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pwd_data.html#c.krb5_pwd_data.element">krb5_pwd_data.element (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pwd_data.html#c.krb5_pwd_data.magic">krb5_pwd_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_pwd_data.html#c.krb5_pwd_data.sequence_count">krb5_pwd_data.sequence_count (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_random_key.html#c.krb5_random_key">krb5_random_key (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_rcache.html#c.krb5_rcache">krb5_rcache (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_cred.html#c.krb5_rd_cred">krb5_rd_cred (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_error.html#c.krb5_rd_error">krb5_rd_error (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_priv.html#c.krb5_rd_priv">krb5_rd_priv (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_rep.html#c.krb5_rd_rep">krb5_rd_rep (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_rep_dce.html#c.krb5_rd_rep_dce">krb5_rd_rep_dce (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_req.html#c.krb5_rd_req">krb5_rd_req (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_rd_safe.html#c.krb5_rd_safe">krb5_rd_safe (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_read_password.html#c.krb5_read_password">krb5_read_password (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_REALM_BRANCH_CHAR.html#KRB5_REALM_BRANCH_CHAR">KRB5_REALM_BRANCH_CHAR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_realm_compare.html#c.krb5_realm_compare">krb5_realm_compare (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_recvauth.html#c.krb5_recvauth">krb5_recvauth (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS.html#KRB5_RECVAUTH_BADAUTHVERS">KRB5_RECVAUTH_BADAUTHVERS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION.html#KRB5_RECVAUTH_SKIP_VERSION">KRB5_RECVAUTH_SKIP_VERSION (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_recvauth_version.html#c.krb5_recvauth_version">krb5_recvauth_version (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_REFERRAL_REALM.html#KRB5_REFERRAL_REALM">KRB5_REFERRAL_REALM (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_replay_data.html#c.krb5_replay_data">krb5_replay_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_replay_data.html#c.krb5_replay_data.seq">krb5_replay_data.seq (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_replay_data.html#c.krb5_replay_data.timestamp">krb5_replay_data.timestamp (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_replay_data.html#c.krb5_replay_data.usec">krb5_replay_data.usec (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_context.html#c.krb5_responder_context">krb5_responder_context (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_fn.html#c.krb5_responder_fn">krb5_responder_fn (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_get_challenge.html#c.krb5_responder_get_challenge">krb5_responder_get_challenge (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_list_questions.html#c.krb5_responder_list_questions">krb5_responder_list_questions (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_challenge.html#c.krb5_responder_otp_challenge">krb5_responder_otp_challenge (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_challenge.html#c.krb5_responder_otp_challenge.service">krb5_responder_otp_challenge.service (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_challenge.html#c.krb5_responder_otp_challenge.tokeninfo">krb5_responder_otp_challenge.tokeninfo (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_otp_challenge_free.html#c.krb5_responder_otp_challenge_free">krb5_responder_otp_challenge_free (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.html#KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN">KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.html#KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN">KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.html#KRB5_RESPONDER_OTP_FLAGS_NEXTOTP">KRB5_RESPONDER_OTP_FLAGS_NEXTOTP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.html#KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN">KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.html#KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC">KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL.html#KRB5_RESPONDER_OTP_FORMAT_DECIMAL">KRB5_RESPONDER_OTP_FORMAT_DECIMAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.html#KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL">KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_otp_get_challenge.html#c.krb5_responder_otp_get_challenge">krb5_responder_otp_get_challenge (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_otp_set_answer.html#c.krb5_responder_otp_set_answer">krb5_responder_otp_set_answer (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo">krb5_responder_otp_tokeninfo (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.alg_id">krb5_responder_otp_tokeninfo.alg_id (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.challenge">krb5_responder_otp_tokeninfo.challenge (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.flags">krb5_responder_otp_tokeninfo.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.format">krb5_responder_otp_tokeninfo.format (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.length">krb5_responder_otp_tokeninfo.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.token_id">krb5_responder_otp_tokeninfo.token_id (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_otp_tokeninfo.html#c.krb5_responder_otp_tokeninfo.vendor">krb5_responder_otp_tokeninfo.vendor (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_pkinit_challenge.html#c.krb5_responder_pkinit_challenge">krb5_responder_pkinit_challenge (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_pkinit_challenge.html#c.krb5_responder_pkinit_challenge.identities">krb5_responder_pkinit_challenge.identities (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_pkinit_challenge_free.html#c.krb5_responder_pkinit_challenge_free">krb5_responder_pkinit_challenge_free (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.html#KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.html#KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.html#KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED">KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_pkinit_get_challenge.html#c.krb5_responder_pkinit_get_challenge">krb5_responder_pkinit_get_challenge (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_pkinit_identity.html#c.krb5_responder_pkinit_identity">krb5_responder_pkinit_identity (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_pkinit_identity.html#c.krb5_responder_pkinit_identity.identity">krb5_responder_pkinit_identity.identity (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_responder_pkinit_identity.html#c.krb5_responder_pkinit_identity.token_flags">krb5_responder_pkinit_identity.token_flags (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_pkinit_set_answer.html#c.krb5_responder_pkinit_set_answer">krb5_responder_pkinit_set_answer (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP.html#KRB5_RESPONDER_QUESTION_OTP">KRB5_RESPONDER_QUESTION_OTP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD.html#KRB5_RESPONDER_QUESTION_PASSWORD">KRB5_RESPONDER_QUESTION_PASSWORD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT.html#KRB5_RESPONDER_QUESTION_PKINIT">KRB5_RESPONDER_QUESTION_PKINIT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_responder_set_answer.html#c.krb5_responder_set_answer">krb5_responder_set_answer (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response">krb5_response (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response.expected_nonce">krb5_response.expected_nonce (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response.magic">krb5_response.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response.message_type">krb5_response.message_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response.request_time">krb5_response.request_time (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_response.html#c.krb5_response.response">krb5_response.response (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_roundup.html#krb5_roundup">krb5_roundup (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_SAFE.html#KRB5_SAFE">KRB5_SAFE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_salttype_to_string.html#c.krb5_salttype_to_string">krb5_salttype_to_string (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD.html#KRB5_SAM_MUST_PK_ENCRYPT_SAD">KRB5_SAM_MUST_PK_ENCRYPT_SAD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD.html#KRB5_SAM_SEND_ENCRYPTED_SAD">KRB5_SAM_SEND_ENCRYPTED_SAD (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY.html#KRB5_SAM_USE_SAD_AS_KEY">KRB5_SAM_USE_SAD_AS_KEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_sendauth.html#c.krb5_sendauth">krb5_sendauth (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_server_decrypt_ticket_keytab.html#c.krb5_server_decrypt_ticket_keytab">krb5_server_decrypt_ticket_keytab (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_default_realm.html#c.krb5_set_default_realm">krb5_set_default_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_default_tgs_enctypes.html#c.krb5_set_default_tgs_enctypes">krb5_set_default_tgs_enctypes (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_error_message.html#c.krb5_set_error_message">krb5_set_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_kdc_recv_hook.html#c.krb5_set_kdc_recv_hook">krb5_set_kdc_recv_hook (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_kdc_send_hook.html#c.krb5_set_kdc_send_hook">krb5_set_kdc_send_hook (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_password.html#c.krb5_set_password">krb5_set_password (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_password_using_ccache.html#c.krb5_set_password_using_ccache">krb5_set_password_using_ccache (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_principal_realm.html#c.krb5_set_principal_realm">krb5_set_principal_realm (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_real_time.html#c.krb5_set_real_time">krb5_set_real_time (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_trace_callback.html#c.krb5_set_trace_callback">krb5_set_trace_callback (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_set_trace_filename.html#c.krb5_set_trace_filename">krb5_set_trace_filename (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_sname_match.html#c.krb5_sname_match">krb5_sname_match (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_sname_to_principal.html#c.krb5_sname_to_principal">krb5_sname_to_principal (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_cksumtype.html#c.krb5_string_to_cksumtype">krb5_string_to_cksumtype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_deltat.html#c.krb5_string_to_deltat">krb5_string_to_deltat (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_enctype.html#c.krb5_string_to_enctype">krb5_string_to_enctype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_key.html#c.krb5_string_to_key">krb5_string_to_key (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_salttype.html#c.krb5_string_to_salttype">krb5_string_to_salttype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_string_to_timestamp.html#c.krb5_string_to_timestamp">krb5_string_to_timestamp (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT.html#KRB5_TC_MATCH_2ND_TKT">KRB5_TC_MATCH_2ND_TKT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA.html#KRB5_TC_MATCH_AUTHDATA">KRB5_TC_MATCH_AUTHDATA (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_FLAGS.html#KRB5_TC_MATCH_FLAGS">KRB5_TC_MATCH_FLAGS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT.html#KRB5_TC_MATCH_FLAGS_EXACT">KRB5_TC_MATCH_FLAGS_EXACT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY.html#KRB5_TC_MATCH_IS_SKEY">KRB5_TC_MATCH_IS_SKEY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_KTYPE.html#KRB5_TC_MATCH_KTYPE">KRB5_TC_MATCH_KTYPE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY.html#KRB5_TC_MATCH_SRV_NAMEONLY">KRB5_TC_MATCH_SRV_NAMEONLY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_TIMES.html#KRB5_TC_MATCH_TIMES">KRB5_TC_MATCH_TIMES (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT.html#KRB5_TC_MATCH_TIMES_EXACT">KRB5_TC_MATCH_TIMES_EXACT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_NOTICKET.html#KRB5_TC_NOTICKET">KRB5_TC_NOTICKET (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_OPENCLOSE.html#KRB5_TC_OPENCLOSE">KRB5_TC_OPENCLOSE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES.html#KRB5_TC_SUPPORTED_KTYPES">KRB5_TC_SUPPORTED_KTYPES (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TGS_NAME.html#KRB5_TGS_NAME">KRB5_TGS_NAME (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TGS_NAME_SIZE.html#KRB5_TGS_NAME_SIZE">KRB5_TGS_NAME_SIZE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TGS_REP.html#KRB5_TGS_REP">KRB5_TGS_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TGS_REQ.html#KRB5_TGS_REQ">KRB5_TGS_REQ (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket.html#c.krb5_ticket">krb5_ticket (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket.html#c.krb5_ticket.enc_part">krb5_ticket.enc_part (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket.html#c.krb5_ticket.enc_part2">krb5_ticket.enc_part2 (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket.html#c.krb5_ticket.magic">krb5_ticket.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket.html#c.krb5_ticket.server">krb5_ticket.server (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket_times.html#c.krb5_ticket_times">krb5_ticket_times (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket_times.html#c.krb5_ticket_times.authtime">krb5_ticket_times.authtime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket_times.html#c.krb5_ticket_times.endtime">krb5_ticket_times.endtime (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket_times.html#c.krb5_ticket_times.renew_till">krb5_ticket_times.renew_till (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ticket_times.html#c.krb5_ticket_times.starttime">krb5_ticket_times.starttime (C member)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_timeofday.html#c.krb5_timeofday">krb5_timeofday (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_timestamp.html#c.krb5_timestamp">krb5_timestamp (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_timestamp_to_sfstring.html#c.krb5_timestamp_to_sfstring">krb5_timestamp_to_sfstring (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_timestamp_to_string.html#c.krb5_timestamp_to_string">krb5_timestamp_to_string (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_authent.html#c.krb5_tkt_authent">krb5_tkt_authent (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_authent.html#c.krb5_tkt_authent.ap_options">krb5_tkt_authent.ap_options (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_authent.html#c.krb5_tkt_authent.authenticator">krb5_tkt_authent.authenticator (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_authent.html#c.krb5_tkt_authent.magic">krb5_tkt_authent.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_authent.html#c.krb5_tkt_authent.ticket">krb5_tkt_authent.ticket (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_tkt_creds_context.html#c.krb5_tkt_creds_context">krb5_tkt_creds_context (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_free.html#c.krb5_tkt_creds_free">krb5_tkt_creds_free (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_get.html#c.krb5_tkt_creds_get">krb5_tkt_creds_get (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_get_creds.html#c.krb5_tkt_creds_get_creds">krb5_tkt_creds_get_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_get_times.html#c.krb5_tkt_creds_get_times">krb5_tkt_creds_get_times (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_init.html#c.krb5_tkt_creds_init">krb5_tkt_creds_init (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_tkt_creds_step.html#c.krb5_tkt_creds_step">krb5_tkt_creds_step (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.html#KRB5_TKT_CREDS_STEP_FLAG_CONTINUE">KRB5_TKT_CREDS_STEP_FLAG_CONTINUE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_trace_callback.html#c.krb5_trace_callback">krb5_trace_callback (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_trace_info.html#c.krb5_trace_info">krb5_trace_info (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_trace_info.html#c.krb5_trace_info.message">krb5_trace_info.message (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_transited.html#c.krb5_transited">krb5_transited (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_transited.html#c.krb5_transited.magic">krb5_transited.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_transited.html#c.krb5_transited.tr_contents">krb5_transited.tr_contents (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_transited.html#c.krb5_transited.tr_type">krb5_transited.tr_type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_typed_data.html#c.krb5_typed_data">krb5_typed_data (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_typed_data.html#c.krb5_typed_data.data">krb5_typed_data.data (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_typed_data.html#c.krb5_typed_data.length">krb5_typed_data.length (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_typed_data.html#c.krb5_typed_data.magic">krb5_typed_data.magic (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_typed_data.html#c.krb5_typed_data.type">krb5_typed_data.type (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ui_2.html#c.krb5_ui_2">krb5_ui_2 (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_ui_4.html#c.krb5_ui_4">krb5_ui_4 (C type)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_unmarshal_credentials.html#c.krb5_unmarshal_credentials">krb5_unmarshal_credentials (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_unparse_name.html#c.krb5_unparse_name">krb5_unparse_name (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_unparse_name_ext.html#c.krb5_unparse_name_ext">krb5_unparse_name_ext (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_unparse_name_flags.html#c.krb5_unparse_name_flags">krb5_unparse_name_flags (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_unparse_name_flags_ext.html#c.krb5_unparse_name_flags_ext">krb5_unparse_name_flags_ext (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_us_timeofday.html#c.krb5_us_timeofday">krb5_us_timeofday (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_use_enctype.html#c.krb5_use_enctype">krb5_use_enctype (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_verify_authdata_kdc_issued.html#c.krb5_verify_authdata_kdc_issued">krb5_verify_authdata_kdc_issued (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_verify_checksum.html#c.krb5_verify_checksum">krb5_verify_checksum (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_verify_init_creds.html#c.krb5_verify_init_creds">krb5_verify_init_creds (C function)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_verify_init_creds_opt.html#c.krb5_verify_init_creds_opt">krb5_verify_init_creds_opt (C type)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_verify_init_creds_opt.html#c.krb5_verify_init_creds_opt.ap_req_nofail">krb5_verify_init_creds_opt.ap_req_nofail (C member)</a>
-</li>
- <li><a href="appdev/refs/types/krb5_verify_init_creds_opt.html#c.krb5_verify_init_creds_opt.flags">krb5_verify_init_creds_opt.flags (C member)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.html#KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL">KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_verify_init_creds_opt_init.html#c.krb5_verify_init_creds_opt_init">krb5_verify_init_creds_opt_init (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail.html#c.krb5_verify_init_creds_opt_set_ap_req_nofail">krb5_verify_init_creds_opt_set_ap_req_nofail (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_vprepend_error_message.html#c.krb5_vprepend_error_message">krb5_vprepend_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_vset_error_message.html#c.krb5_vset_error_message">krb5_vset_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_vwrap_error_message.html#c.krb5_vwrap_error_message">krb5_vwrap_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR.html#KRB5_WELLKNOWN_NAMESTR">KRB5_WELLKNOWN_NAMESTR (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/api/krb5_wrap_error_message.html#c.krb5_wrap_error_message">krb5_wrap_error_message (C function)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_x.html#krb5_x">krb5_x (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/krb5_xc.html#krb5_xc">krb5_xc (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-<h2 id="L">L</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK.html#LR_TYPE_INTERPRETATION_MASK">LR_TYPE_INTERPRETATION_MASK (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY.html#LR_TYPE_THIS_SERVER_ONLY">LR_TYPE_THIS_SERVER_ONLY (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-<h2 id="M">M</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/MAX_KEYTAB_NAME_LEN.html#MAX_KEYTAB_NAME_LEN">MAX_KEYTAB_NAME_LEN (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/MSEC_DIRBIT.html#MSEC_DIRBIT">MSEC_DIRBIT (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/MSEC_VAL_MASK.html#MSEC_VAL_MASK">MSEC_VAL_MASK (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-<h2 id="P">P</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/types/passwd_phrase_element.html#c.passwd_phrase_element">passwd_phrase_element (C type)</a>
-</li>
- <li><a href="appdev/refs/types/passwd_phrase_element.html#c.passwd_phrase_element.magic">passwd_phrase_element.magic (C member)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/types/passwd_phrase_element.html#c.passwd_phrase_element.passwd">passwd_phrase_element.passwd (C member)</a>
-</li>
- <li><a href="appdev/refs/types/passwd_phrase_element.html#c.passwd_phrase_element.phrase">passwd_phrase_element.phrase (C member)</a>
-</li>
- </ul></td>
-</tr></table>
-
-<h2 id="R">R</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li>
- RFC
-
- <ul>
- <li><a href="formats/cookie.html#index-4">RFC 1964</a>
-</li>
- <li><a href="admin/conf_files/krb5_conf.html#index-4">RFC 2253</a>
-</li>
- <li><a href="appdev/gssapi.html#index-0">RFC 2743</a>
-</li>
- <li><a href="appdev/gssapi.html#index-1">RFC 2744</a>
-</li>
- <li><a href="admin/realm_config.html#index-0">RFC 2782</a>
-</li>
- <li><a href="mitK5features.html#index-0">RFC 3244</a>
-</li>
- <li><a href="formats/cookie.html#index-1">RFC 3961</a>, <a href="formats/cookie.html#index-2">[1]</a>, <a href="formats/freshness_token.html#index-1">[2]</a>, <a href="formats/rcache_file_format.html#index-0">[3]</a>
-</li>
- <li><a href="plugindev/clpreauth.html#index-0">RFC 4120</a>
-</li>
- <li><a href="basic/rcache_def.html#index-0">RFC 4120#section-10</a>
-</li>
- <li><a href="mitK5features.html#index-12">RFC 4120#section-5.2.7.2</a>
-</li>
- <li><a href="mitK5features.html#index-11">RFC 4120#section-5.2.7.3</a>
-</li>
- <li><a href="admin/conf_files/kdc_conf.html#index-0">RFC 4556</a>, <a href="admin/conf_files/kdc_conf.html#index-1">[1]</a>, <a href="admin/conf_files/krb5_conf.html#index-5">[2]</a>, <a href="admin/conf_files/krb5_conf.html#index-6">[3]</a>, <a href="mitK5features.html#index-15">[4]</a>, <a href="mitK5features.html#index-3">[5]</a>
-</li>
- <li><a href="appdev/gssapi.html#index-6">RFC 4757</a>
-</li>
- <li><a href="appdev/gssapi.html#index-4">RFC 5280</a>
-</li>
- <li><a href="admin/conf_files/krb5_conf.html#index-1">RFC 5480</a>, <a href="admin/conf_files/krb5_conf.html#index-2">[1]</a>, <a href="admin/conf_files/krb5_conf.html#index-3">[2]</a>
-</li>
- <li><a href="mitK5features.html#index-9">RFC 5587</a>
-</li>
- <li><a href="mitK5features.html#index-6">RFC 5588</a>
-</li>
- <li><a href="mitK5features.html#index-8">RFC 5801</a>
-</li>
- <li><a href="mitK5features.html#index-1">RFC 5896</a>
-</li>
- <li><a href="mitK5features.html#index-4">RFC 6112</a>
-</li>
- <li><a href="formats/ccache_file_format.html#index-0">RFC 6113</a>, <a href="formats/cookie.html#index-0">[1]</a>, <a href="formats/cookie.html#index-3">[2]</a>, <a href="mitK5features.html#index-13">[3]</a>, <a href="mitK5features.html#index-14">[4]</a>, <a href="plugindev/clpreauth.html#index-1">[5]</a>
-</li>
- <li><a href="mitK5features.html#index-16">RFC 6113#section-5.2</a>
-</li>
- <li><a href="mitK5features.html#index-10">RFC 6560</a>
-</li>
- <li><a href="admin/advanced/retiring-des.html#index-0">RFC 6649</a>
-</li>
- <li><a href="appdev/gssapi.html#index-5">RFC 6680</a>, <a href="mitK5features.html#index-5">[1]</a>
-</li>
- <li><a href="mitK5features.html#index-7">RFC 6803</a>
-</li>
- <li><a href="appdev/gssapi.html#index-3">RFC 6806</a>, <a href="formats/ccache_file_format.html#index-1">[1]</a>, <a href="mitK5features.html#index-2">[2]</a>
-</li>
- <li><a href="appdev/gssapi.html#index-2">RFC 7546</a>
-</li>
- <li><a href="admin/realm_config.html#index-1">RFC 7553</a>
-</li>
- <li><a href="admin/conf_files/krb5_conf.html#index-0">RFC 7748</a>
-</li>
- <li><a href="formats/freshness_token.html#index-0">RFC 8070</a>
-</li>
- </ul></li>
- </ul></td>
-</tr></table>
-
-<h2 id="S">S</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/SALT_TYPE_AFS_LENGTH.html#SALT_TYPE_AFS_LENGTH">SALT_TYPE_AFS_LENGTH (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/SALT_TYPE_NO_LENGTH.html#SALT_TYPE_NO_LENGTH">SALT_TYPE_NO_LENGTH (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-<h2 id="T">T</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/THREEPARAMOPEN.html#THREEPARAMOPEN">THREEPARAMOPEN (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_ANONYMOUS.html#TKT_FLG_ANONYMOUS">TKT_FLG_ANONYMOUS (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_ENC_PA_REP.html#TKT_FLG_ENC_PA_REP">TKT_FLG_ENC_PA_REP (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_FORWARDABLE.html#TKT_FLG_FORWARDABLE">TKT_FLG_FORWARDABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_FORWARDED.html#TKT_FLG_FORWARDED">TKT_FLG_FORWARDED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_HW_AUTH.html#TKT_FLG_HW_AUTH">TKT_FLG_HW_AUTH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_INITIAL.html#TKT_FLG_INITIAL">TKT_FLG_INITIAL (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_INVALID.html#TKT_FLG_INVALID">TKT_FLG_INVALID (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/TKT_FLG_MAY_POSTDATE.html#TKT_FLG_MAY_POSTDATE">TKT_FLG_MAY_POSTDATE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE.html#TKT_FLG_OK_AS_DELEGATE">TKT_FLG_OK_AS_DELEGATE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_POSTDATED.html#TKT_FLG_POSTDATED">TKT_FLG_POSTDATED (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_PRE_AUTH.html#TKT_FLG_PRE_AUTH">TKT_FLG_PRE_AUTH (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_PROXIABLE.html#TKT_FLG_PROXIABLE">TKT_FLG_PROXIABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_PROXY.html#TKT_FLG_PROXY">TKT_FLG_PROXY (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_RENEWABLE.html#TKT_FLG_RENEWABLE">TKT_FLG_RENEWABLE (built-in variable)</a>
-</li>
- <li><a href="appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED.html#TKT_FLG_TRANSIT_POLICY_CHECKED">TKT_FLG_TRANSIT_POLICY_CHECKED (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-<h2 id="V">V</h2>
-<table style="width: 100%" class="indextable genindextable"><tr>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/VALID_INT_BITS.html#VALID_INT_BITS">VALID_INT_BITS (built-in variable)</a>
-</li>
- </ul></td>
- <td style="width: 33%; vertical-align: top;"><ul>
- <li><a href="appdev/refs/macros/VALID_UINT_BITS.html#VALID_UINT_BITS">VALID_UINT_BITS (built-in variable)</a>
-</li>
- </ul></td>
-</tr></table>
-
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Index — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="#" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="#" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
-
- <h1 id="index">Index</h1>
-
- <p>Index pages by letter:</p>
-
- <div class="genindex-jumpbox">
- <p><a href="genindex-A.html"><strong>A</strong></a>
- | <a href="genindex-C.html"><strong>C</strong></a>
- | <a href="genindex-E.html"><strong>E</strong></a>
- | <a href="genindex-K.html"><strong>K</strong></a>
- | <a href="genindex-L.html"><strong>L</strong></a>
- | <a href="genindex-M.html"><strong>M</strong></a>
- | <a href="genindex-P.html"><strong>P</strong></a>
- | <a href="genindex-R.html"><strong>R</strong></a>
- | <a href="genindex-S.html"><strong>S</strong></a>
- | <a href="genindex-T.html"><strong>T</strong></a>
- | <a href="genindex-V.html"><strong>V</strong></a>
- </p>
-
- <p><a href="genindex-all.html"><strong>Full index on one page</strong>
- (can be huge)</a></p>
- </div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="#" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Index">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>MIT Kerberos Documentation (1.20.1) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- <link rel="next" title="For users" href="user/index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="#">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="#" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="user/index.html" title="For users"
- accesskey="N">next</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos Documentation (1.20.1)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="mit-kerberos-documentation-release">
-<h1>MIT Kerberos Documentation (1.20.1)<a class="headerlink" href="#mit-kerberos-documentation-release" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">MIT Kerberos Documentation (1.20.1)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="#">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="#" title="Full Table of Contents"
- >Contents</a> |
- <a href="user/index.html" title="For users"
- >next</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos Documentation (1.20.1)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>MIT Kerberos defaults — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- <link rel="next" title="Environment variables" href="admin/env_variables.html" />
- <link rel="prev" title="sserver" href="admin/admin_commands/sserver.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="admin/admin_commands/sserver.html" title="sserver"
- accesskey="P">previous</a> |
- <a href="admin/env_variables.html" title="Environment variables"
- accesskey="N">next</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos defaults">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="mit-kerberos-defaults">
-<span id="mitk5defaults"></span><h1>MIT Kerberos defaults<a class="headerlink" href="#mit-kerberos-defaults" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="general-defaults">
-<h2>General defaults<a class="headerlink" href="#general-defaults" title="Permalink to this headline">¶</a></h2>
-<table border="1" class="docutils">
-<colgroup>
-<col width="45%" />
-<col width="31%" />
-<col width="24%" />
-</colgroup>
-<thead valign="bottom">
-<tr class="row-odd"><th class="head">Description</th>
-<th class="head">Default</th>
-<th class="head">Environment</th>
-</tr>
-</thead>
-<tbody valign="top">
-<tr class="row-even"><td><a class="reference internal" href="basic/keytab_def.html#keytab-definition"><span class="std std-ref">keytab</span></a> file</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">DEFKTNAME</span></a></td>
-<td><strong>KRB5_KTNAME</strong></td>
-</tr>
-<tr class="row-odd"><td>Client <a class="reference internal" href="basic/keytab_def.html#keytab-definition"><span class="std std-ref">keytab</span></a> file</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">DEFCKTNAME</span></a></td>
-<td><strong>KRB5_CLIENT_KTNAME</strong></td>
-</tr>
-<tr class="row-even"><td>Kerberos config file <a class="reference internal" href="admin/conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a></td>
-<td><code class="docutils literal"><span class="pre">/etc/krb5.conf</span></code><code class="docutils literal"><span class="pre">:</span></code><a class="reference internal" href="#paths"><span class="std std-ref">SYSCONFDIR</span></a><code class="docutils literal"><span class="pre">/krb5.conf</span></code></td>
-<td><strong>KRB5_CONFIG</strong></td>
-</tr>
-<tr class="row-odd"><td>KDC config file <a class="reference internal" href="admin/conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a></td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/kdc.conf</span></code></td>
-<td><strong>KRB5_KDC_PROFILE</strong></td>
-</tr>
-<tr class="row-even"><td>GSS mechanism config file</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">SYSCONFDIR</span></a><code class="docutils literal"><span class="pre">/gss/mech</span></code></td>
-<td><strong>GSS_MECH_CONFIG</strong></td>
-</tr>
-<tr class="row-odd"><td>KDC database path (DB2)</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/principal</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-even"><td>Master key <a class="reference internal" href="basic/stash_file_def.html#stash-definition"><span class="std std-ref">stash file</span></a></td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/.k5.</span></code><em>realm</em></td>
-<td> </td>
-</tr>
-<tr class="row-odd"><td>Admin server ACL file <a class="reference internal" href="admin/conf_files/kadm5_acl.html#kadm5-acl-5"><span class="std std-ref">kadm5.acl</span></a></td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/kadm5.acl</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-even"><td>OTP socket directory</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">RUNSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-odd"><td>Plugin base directory</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">LIBDIR</span></a><code class="docutils literal"><span class="pre">/krb5/plugins</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-even"><td><a class="reference internal" href="basic/rcache_def.html#rcache-definition"><span class="std std-ref">replay cache</span></a> directory</td>
-<td><code class="docutils literal"><span class="pre">/var/tmp</span></code></td>
-<td><strong>KRB5RCACHEDIR</strong></td>
-</tr>
-<tr class="row-odd"><td>Master key default enctype</td>
-<td><code class="docutils literal"><span class="pre">aes256-cts-hmac-sha1-96</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-even"><td>Default <a class="reference internal" href="admin/conf_files/kdc_conf.html#keysalt-lists"><span class="std std-ref">keysalt list</span></a></td>
-<td><code class="docutils literal"><span class="pre">aes256-cts-hmac-sha1-96:normal</span> <span class="pre">aes128-cts-hmac-sha1-96:normal</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-odd"><td>Permitted enctypes</td>
-<td><code class="docutils literal"><span class="pre">aes256-cts-hmac-sha1-96</span> <span class="pre">aes128-cts-hmac-sha1-96</span> <span class="pre">aes256-cts-hmac-sha384-192</span> <span class="pre">aes128-cts-hmac-sha256-128</span> <span class="pre">des3-cbc-sha1</span> <span class="pre">arcfour-hmac-md5</span> <span class="pre">camellia256-cts-cmac</span> <span class="pre">camellia128-cts-cmac</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-even"><td>KDC default port</td>
-<td>88</td>
-<td> </td>
-</tr>
-<tr class="row-odd"><td>Admin server port</td>
-<td>749</td>
-<td> </td>
-</tr>
-<tr class="row-even"><td>Password change port</td>
-<td>464</td>
-<td> </td>
-</tr>
-</tbody>
-</table>
-</div>
-<div class="section" id="replica-kdc-propagation-defaults">
-<h2>Replica KDC propagation defaults<a class="headerlink" href="#replica-kdc-propagation-defaults" title="Permalink to this headline">¶</a></h2>
-<p>This table shows defaults used by the <a class="reference internal" href="admin/admin_commands/kprop.html#kprop-8"><span class="std std-ref">kprop</span></a> and
-<a class="reference internal" href="admin/admin_commands/kpropd.html#kpropd-8"><span class="std std-ref">kpropd</span></a> programs.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="38%" />
-<col width="46%" />
-<col width="16%" />
-</colgroup>
-<thead valign="bottom">
-<tr class="row-odd"><th class="head">Description</th>
-<th class="head">Default</th>
-<th class="head">Environment</th>
-</tr>
-</thead>
-<tbody valign="top">
-<tr class="row-even"><td>kprop database dump file</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/replica_datatrans</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-odd"><td>kpropd temporary dump file</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/from_master</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-even"><td>kdb5_util location</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">SBINDIR</span></a><code class="docutils literal"><span class="pre">/kdb5_util</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-odd"><td>kprop location</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">SBINDIR</span></a><code class="docutils literal"><span class="pre">/kprop</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-even"><td>kpropd ACL file</td>
-<td><a class="reference internal" href="#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/kpropd.acl</span></code></td>
-<td> </td>
-</tr>
-<tr class="row-odd"><td>kprop port</td>
-<td>754</td>
-<td>KPROP_PORT</td>
-</tr>
-</tbody>
-</table>
-</div>
-<div class="section" id="default-paths-for-unix-like-systems">
-<span id="paths"></span><h2>Default paths for Unix-like systems<a class="headerlink" href="#default-paths-for-unix-like-systems" title="Permalink to this headline">¶</a></h2>
-<p>On Unix-like systems, some paths used by MIT krb5 depend on parameters
-chosen at build time. For a custom build, these paths default to
-subdirectories of <code class="docutils literal"><span class="pre">/usr/local</span></code>. When MIT krb5 is integrated into an
-operating system, the paths are generally chosen to match the
-operating system’s filesystem layout.</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="28%" />
-<col width="14%" />
-<col width="29%" />
-<col width="29%" />
-</colgroup>
-<thead valign="bottom">
-<tr class="row-odd"><th class="head">Description</th>
-<th class="head">Symbolic name</th>
-<th class="head">Custom build path</th>
-<th class="head">Typical OS path</th>
-</tr>
-</thead>
-<tbody valign="top">
-<tr class="row-even"><td>User programs</td>
-<td>BINDIR</td>
-<td><code class="docutils literal"><span class="pre">/usr/local/bin</span></code></td>
-<td><code class="docutils literal"><span class="pre">/usr/bin</span></code></td>
-</tr>
-<tr class="row-odd"><td>Libraries and plugins</td>
-<td>LIBDIR</td>
-<td><code class="docutils literal"><span class="pre">/usr/local/lib</span></code></td>
-<td><code class="docutils literal"><span class="pre">/usr/lib</span></code></td>
-</tr>
-<tr class="row-even"><td>Parent of KDC state dir</td>
-<td>LOCALSTATEDIR</td>
-<td><code class="docutils literal"><span class="pre">/usr/local/var</span></code></td>
-<td><code class="docutils literal"><span class="pre">/var</span></code></td>
-</tr>
-<tr class="row-odd"><td>Parent of KDC runtime dir</td>
-<td>RUNSTATEDIR</td>
-<td><code class="docutils literal"><span class="pre">/usr/local/var/run</span></code></td>
-<td><code class="docutils literal"><span class="pre">/run</span></code></td>
-</tr>
-<tr class="row-even"><td>Administrative programs</td>
-<td>SBINDIR</td>
-<td><code class="docutils literal"><span class="pre">/usr/local/sbin</span></code></td>
-<td><code class="docutils literal"><span class="pre">/usr/sbin</span></code></td>
-</tr>
-<tr class="row-odd"><td>Alternate krb5.conf dir</td>
-<td>SYSCONFDIR</td>
-<td><code class="docutils literal"><span class="pre">/usr/local/etc</span></code></td>
-<td><code class="docutils literal"><span class="pre">/etc</span></code></td>
-</tr>
-<tr class="row-even"><td>Default ccache name</td>
-<td>DEFCCNAME</td>
-<td><code class="docutils literal"><span class="pre">FILE:/tmp/krb5cc_%{uid}</span></code></td>
-<td><code class="docutils literal"><span class="pre">FILE:/tmp/krb5cc_%{uid}</span></code></td>
-</tr>
-<tr class="row-odd"><td>Default keytab name</td>
-<td>DEFKTNAME</td>
-<td><code class="docutils literal"><span class="pre">FILE:/etc/krb5.keytab</span></code></td>
-<td><code class="docutils literal"><span class="pre">FILE:/etc/krb5.keytab</span></code></td>
-</tr>
-</tbody>
-</table>
-<p>The default client keytab name (DEFCKTNAME) typically defaults to
-<code class="docutils literal"><span class="pre">FILE:/usr/local/var/krb5/user/%{euid}/client.keytab</span></code> for a custom
-build. A native build will typically use a path which will vary
-according to the operating system’s layout of <code class="docutils literal"><span class="pre">/var</span></code>.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">MIT Kerberos defaults</a><ul>
-<li><a class="reference internal" href="#general-defaults">General defaults</a></li>
-<li><a class="reference internal" href="#replica-kdc-propagation-defaults">Replica KDC propagation defaults</a></li>
-<li><a class="reference internal" href="#default-paths-for-unix-like-systems">Default paths for Unix-like systems</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="admin/index.html">For administrators</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="admin/install.html">Installation guide</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/conf_files/index.html">Configuration Files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/realm_config.html">Realm configuration decisions</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/database.html">Database administration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/dbtypes.html">Database types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/lockout.html">Account lockout</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/appl_servers.html">Application servers</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/host_config.html">Host configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/backup_host.html">Backups of secure hosts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/pkinit.html">PKINIT configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/otp.html">OTP Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/spake.html">SPAKE Preauthentication</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/dictionary.html">Addressing dictionary attack risks</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/princ_dns.html">Principal names and DNS</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/enctypes.html">Encryption types</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/https.html">HTTPS proxy configuration</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/auth_indicator.html">Authentication indicators</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/admin_commands/index.html">Administration programs</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">MIT Kerberos defaults</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/env_variables.html">Environment variables</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/troubleshoot.html">Troubleshooting</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/advanced/index.html">Advanced topics</a></li>
-<li class="toctree-l2"><a class="reference internal" href="admin/various_envs.html">Various links</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="admin/admin_commands/sserver.html" title="sserver"
- >previous</a> |
- <a href="admin/env_variables.html" title="Environment variables"
- >next</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos defaults">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>MIT Kerberos features — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- <link rel="next" title="MIT Kerberos License information" href="mitK5license.html" />
- <link rel="prev" title="PKINIT freshness tokens" href="formats/freshness_token.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="formats/freshness_token.html" title="PKINIT freshness tokens"
- accesskey="P">previous</a> |
- <a href="mitK5license.html" title="MIT Kerberos License information"
- accesskey="N">next</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos features">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="toctree-wrapper compound">
-</div>
-<div class="section" id="mit-kerberos-features">
-<span id="mitk5features"></span><h1>MIT Kerberos features<a class="headerlink" href="#mit-kerberos-features" title="Permalink to this headline">¶</a></h1>
-<p><a class="reference external" href="https://web.mit.edu/kerberos">https://web.mit.edu/kerberos</a></p>
-<div class="section" id="quick-facts">
-<h2>Quick facts<a class="headerlink" href="#quick-facts" title="Permalink to this headline">¶</a></h2>
-<p>License - <a class="reference internal" href="mitK5license.html#mitk5license"><span class="std std-ref">MIT Kerberos License information</span></a></p>
-<dl class="docutils">
-<dt>Releases:</dt>
-<dd><ul class="first last simple">
-<li>Latest stable: <a class="reference external" href="https://web.mit.edu/kerberos/krb5-1.20/">https://web.mit.edu/kerberos/krb5-1.20/</a></li>
-<li>Supported: <a class="reference external" href="https://web.mit.edu/kerberos/krb5-1.19/">https://web.mit.edu/kerberos/krb5-1.19/</a></li>
-<li>Release cycle: approximately 12 months</li>
-</ul>
-</dd>
-<dt>Supported platforms / OS distributions:</dt>
-<dd><ul class="first last simple">
-<li>Windows (KfW 4.0): Windows 7, Vista, XP</li>
-<li>Solaris: SPARC, x86_64/x86</li>
-<li>GNU/Linux: Debian x86_64/x86, Ubuntu x86_64/x86, RedHat x86_64/x86</li>
-<li>BSD: NetBSD x86_64/x86</li>
-</ul>
-</dd>
-<dt>Crypto backends:</dt>
-<dd><ul class="first last simple">
-<li>builtin - MIT Kerberos native crypto library</li>
-<li>OpenSSL (1.0+) - <a class="reference external" href="https://www.openssl.org">https://www.openssl.org</a></li>
-</ul>
-</dd>
-</dl>
-<p>Database backends: LDAP, DB2, LMDB</p>
-<p>krb4 support: Kerberos 5 release < 1.8</p>
-<p>DES support: Kerberos 5 release < 1.18 (See <a class="reference internal" href="admin/advanced/retiring-des.html#retiring-des"><span class="std std-ref">Retiring DES</span></a>)</p>
-</div>
-<div class="section" id="interoperability">
-<h2>Interoperability<a class="headerlink" href="#interoperability" title="Permalink to this headline">¶</a></h2>
-<p><cite>Microsoft</cite></p>
-<p>Starting from release 1.7:</p>
-<ul class="simple">
-<li>Follow client principal referrals in the client library when
-obtaining initial tickets.</li>
-<li>KDC can issue realm referrals for service principals based on domain names.</li>
-<li>Extensions supporting DCE RPC, including three-leg GSS context setup
-and unencapsulated GSS tokens inside SPNEGO.</li>
-<li>Microsoft GSS_WrapEX, implemented using the gss_iov API, which is
-similar to the equivalent SSPI functionality. This is needed to
-support some instances of DCE RPC.</li>
-<li>NTLM recognition support in GSS-API, to facilitate dropping in an
-NTLM implementation for improved compatibility with older releases
-of Microsoft Windows.</li>
-<li>KDC support for principal aliases, if the back end supports them.
-Currently, only the LDAP back end supports aliases.</li>
-<li>Support Microsoft set/change password (<span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc3244.html"><strong>RFC 3244</strong></a>) protocol in
-kadmind.</li>
-<li>Implement client and KDC support for GSS_C_DELEG_POLICY_FLAG, which
-allows a GSS application to request credential delegation only if
-permitted by KDC policy.</li>
-</ul>
-<p>Starting from release 1.8:</p>
-<ul class="simple">
-<li>Microsoft Services for User (S4U) compatibility</li>
-</ul>
-<p><cite>Heimdal</cite></p>
-<ul class="simple">
-<li>Support for KCM credential cache starting from release 1.13</li>
-</ul>
-</div>
-<div class="section" id="feature-list">
-<h2>Feature list<a class="headerlink" href="#feature-list" title="Permalink to this headline">¶</a></h2>
-<p>For more information on the specific project see <a class="reference external" href="https://k5wiki.kerberos.org/wiki/Projects">https://k5wiki.kerberos.org/wiki/Projects</a></p>
-<dl class="docutils">
-<dt>Release 1.7</dt>
-<dd><ul class="first last simple">
-<li>Credentials delegation <span class="target" id="index-1"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc5896.html"><strong>RFC 5896</strong></a></li>
-<li>Cross-realm authentication and referrals <span class="target" id="index-2"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6806.html"><strong>RFC 6806</strong></a></li>
-<li>Master key migration</li>
-<li>PKINIT <span class="target" id="index-3"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4556.html"><strong>RFC 4556</strong></a> <a class="reference internal" href="admin/pkinit.html#pkinit"><span class="std std-ref">PKINIT configuration</span></a></li>
-</ul>
-</dd>
-<dt>Release 1.8</dt>
-<dd><ul class="first last simple">
-<li>Anonymous PKINIT <span class="target" id="index-4"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6112.html"><strong>RFC 6112</strong></a> <a class="reference internal" href="admin/pkinit.html#anonymous-pkinit"><span class="std std-ref">Anonymous PKINIT</span></a></li>
-<li>Constrained delegation</li>
-<li>IAKERB <a class="reference external" href="https://tools.ietf.org/html/draft-ietf-krb-wg-iakerb-02">https://tools.ietf.org/html/draft-ietf-krb-wg-iakerb-02</a></li>
-<li>Heimdal bridge plugin for KDC backend</li>
-<li>GSS-API S4U extensions <a class="reference external" href="https://msdn.microsoft.com/en-us/library/cc246071">https://msdn.microsoft.com/en-us/library/cc246071</a></li>
-<li>GSS-API naming extensions <span class="target" id="index-5"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6680.html"><strong>RFC 6680</strong></a></li>
-<li>GSS-API extensions for storing delegated credentials <span class="target" id="index-6"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc5588.html"><strong>RFC 5588</strong></a></li>
-</ul>
-</dd>
-<dt>Release 1.9</dt>
-<dd><ul class="first last simple">
-<li>Advance warning on password expiry</li>
-<li>Camellia encryption (CTS-CMAC mode) <span class="target" id="index-7"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6803.html"><strong>RFC 6803</strong></a></li>
-<li>KDC support for SecurID preauthentication</li>
-<li>kadmin over IPv6</li>
-<li>Trace logging <a class="reference internal" href="admin/troubleshoot.html#trace-logging"><span class="std std-ref">Trace logging</span></a></li>
-<li>GSSAPI/KRB5 multi-realm support</li>
-<li>Plugin to test password quality <a class="reference internal" href="plugindev/pwqual.html#pwqual-plugin"><span class="std std-ref">Password quality interface (pwqual)</span></a></li>
-<li>Plugin to synchronize password changes <a class="reference internal" href="plugindev/kadm5_hook.html#kadm5-hook-plugin"><span class="std std-ref">KADM5 hook interface (kadm5_hook)</span></a></li>
-<li>Parallel KDC</li>
-<li>GSS-API extensions for SASL GS2 bridge <span class="target" id="index-8"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc5801.html"><strong>RFC 5801</strong></a> <span class="target" id="index-9"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc5587.html"><strong>RFC 5587</strong></a></li>
-<li>Purging old keys</li>
-<li>Naming extensions for delegation chain</li>
-<li>Password expiration API</li>
-<li>Windows client support (build-only)</li>
-<li>IPv6 support in iprop</li>
-</ul>
-</dd>
-<dt>Release 1.10</dt>
-<dd><ul class="first last simple">
-<li>Plugin interface for configuration <a class="reference internal" href="plugindev/profile.html#profile-plugin"><span class="std std-ref">Configuration interface (profile)</span></a></li>
-<li>Credentials for multiple identities <a class="reference internal" href="plugindev/ccselect.html#ccselect-plugin"><span class="std std-ref">Credential cache selection interface (ccselect)</span></a></li>
-</ul>
-</dd>
-<dt>Release 1.11</dt>
-<dd><ul class="first last simple">
-<li>Client support for FAST OTP <span class="target" id="index-10"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6560.html"><strong>RFC 6560</strong></a></li>
-<li>GSS-API extensions for credential locations</li>
-<li>Responder mechanism</li>
-</ul>
-</dd>
-<dt>Release 1.12</dt>
-<dd><ul class="first last simple">
-<li>Plugin to control krb5_aname_to_localname and krb5_kuserok behavior <a class="reference internal" href="plugindev/localauth.html#localauth-plugin"><span class="std std-ref">Local authorization interface (localauth)</span></a></li>
-<li>Plugin to control hostname-to-realm mappings and the default realm <a class="reference internal" href="plugindev/hostrealm.html#hostrealm-plugin"><span class="std std-ref">Host-to-realm interface (hostrealm)</span></a></li>
-<li>GSSAPI extensions for constructing MIC tokens using IOV lists <a class="reference internal" href="appdev/gssapi.html#gssapi-mic-token"><span class="std std-ref">IOV MIC tokens</span></a></li>
-<li>Principal may refer to nonexistent policies <a class="reference external" href="https://k5wiki.kerberos.org/wiki/Projects/Policy_refcount_elimination">Policy Refcount project</a></li>
-<li>Support for having no long-term keys for a principal <a class="reference external" href="https://k5wiki.kerberos.org/wiki/Projects/Principals_without_keys">Principals Without Keys project</a></li>
-<li>Collection support to the KEYRING credential cache type on Linux <a class="reference internal" href="basic/ccache_def.html#ccache-definition"><span class="std std-ref">Credential cache</span></a></li>
-<li>FAST OTP preauthentication module for the KDC which uses RADIUS to validate OTP token values <a class="reference internal" href="admin/otp.html#otp-preauth"><span class="std std-ref">OTP Preauthentication</span></a></li>
-<li>Experimental Audit plugin for KDC processing <a class="reference external" href="https://k5wiki.kerberos.org/wiki/Projects/Audit">Audit project</a></li>
-</ul>
-</dd>
-</dl>
-<p>Release 1.13</p>
-<blockquote>
-<div><ul class="simple">
-<li>Add support for accessing KDCs via an HTTPS proxy server using
-the <a class="reference external" href="https://msdn.microsoft.com/en-us/library/hh553774.aspx">MS-KKDCP</a>
-protocol.</li>
-<li>Add support for <a class="reference external" href="https://k5wiki.kerberos.org/wiki/Projects/Hierarchical_iprop">hierarchical incremental propagation</a>,
-where replicas can act as intermediates between an upstream primary
-and other downstream replicas.</li>
-<li>Add support for configuring GSS mechanisms using
-<code class="docutils literal"><span class="pre">/etc/gss/mech.d/*.conf</span></code> files in addition to
-<code class="docutils literal"><span class="pre">/etc/gss/mech</span></code>.</li>
-<li>Add support to the LDAP KDB module for <a class="reference external" href="https://k5wiki.kerberos.org/wiki/Projects/LDAP_SASL_support">binding to the LDAP
-server using SASL</a>.</li>
-<li>The KDC listens for TCP connections by default.</li>
-<li>Fix a minor key disclosure vulnerability where using the
-“keepold” option to the kadmin randkey operation could return the
-old keys. <a class="reference external" href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5351">[CVE-2014-5351]</a></li>
-<li>Add client support for the Kerberos Cache Manager protocol. If
-the host is running a Heimdal kcm daemon, caches served by the
-daemon can be accessed with the KCM: cache type.</li>
-<li>When built on macOS 10.7 and higher, use “KCM:” as the default
-cachetype, unless overridden by command-line options or
-krb5-config values.</li>
-<li>Add support for doing unlocked database dumps for the DB2 KDC
-back end, which would allow the KDC and kadmind to continue
-accessing the database during lengthy database dumps.</li>
-</ul>
-</div></blockquote>
-<p>Release 1.14</p>
-<blockquote>
-<div><ul class="simple">
-<li>Administrator experience<ul>
-<li>Add a new kdb5_util tabdump command to provide reporting-friendly
-tabular dump formats (tab-separated or CSV) for the KDC database.
-Unlike the normal dump format, each output table has a fixed number
-of fields. Some tables include human-readable forms of data that
-are opaque in ordinary dump files. This format is also suitable for
-importing into relational databases for complex queries.</li>
-<li>Add support to kadmin and kadmin.local for specifying a single
-command line following any global options, where the command
-arguments are split by the shell–for example, “kadmin getprinc
-principalname”. Commands issued this way do not prompt for
-confirmation or display warning messages, and exit with non-zero
-status if the operation fails.</li>
-<li>Accept the same principal flag names in kadmin as we do for the
-default_principal_flags kdc.conf variable, and vice versa. Also
-accept flag specifiers in the form that kadmin prints, as well as
-hexadecimal numbers.</li>
-<li>Remove the triple-DES and RC4 encryption types from the default
-value of supported_enctypes, which determines the default key and
-salt types for new password-derived keys. By default, keys will
-only created only for AES128 and AES256. This mitigates some types
-of password guessing attacks.</li>
-<li>Add support for directory names in the KRB5_CONFIG and
-KRB5_KDC_PROFILE environment variables.</li>
-<li>Add support for authentication indicators, which are ticket
-annotations to indicate the strength of the initial authentication.
-Add support for the “require_auth” string attribute, which can be
-set on server principal entries to require an indicator when
-authenticating to the server.</li>
-<li>Add support for key version numbers larger than 255 in keytab files,
-and for version numbers up to 65535 in KDC databases.</li>
-<li>Transmit only one ETYPE-INFO and/or ETYPE-INFO2 entry from the KDC
-during pre-authentication, corresponding to the client’s most
-preferred encryption type.</li>
-<li>Add support for server name identification (SNI) when proxying KDC
-requests over HTTPS.</li>
-<li>Add support for the err_fmt profile parameter, which can be used to
-generate custom-formatted error messages.</li>
-</ul>
-</li>
-<li>Developer experience:<ul>
-<li>Change gss_acquire_cred_with_password() to acquire credentials into
-a private memory credential cache. Applications can use
-gss_store_cred() to make the resulting credentials visible to other
-processes.</li>
-<li>Change gss_acquire_cred() and SPNEGO not to acquire credentials for
-IAKERB or for non-standard variants of the krb5 mechanism OID unless
-explicitly requested. (SPNEGO will still accept the Microsoft
-variant of the krb5 mechanism OID during negotiation.)</li>
-<li>Change gss_accept_sec_context() not to accept tokens for IAKERB or
-for non-standard variants of the krb5 mechanism OID unless an
-acceptor credential is acquired for those mechanisms.</li>
-<li>Change gss_acquire_cred() to immediately resolve credentials if the
-time_rec parameter is not NULL, so that a correct expiration time
-can be returned. Normally credential resolution is delayed until
-the target name is known.</li>
-<li>Add krb5_prepend_error_message() and krb5_wrap_error_message() APIs,
-which can be used by plugin modules or applications to add prefixes
-to existing detailed error messages.</li>
-<li>Add krb5_c_prfplus() and krb5_c_derive_prfplus() APIs, which
-implement the RFC 6113 PRF+ operation and key derivation using PRF+.</li>
-<li>Add support for pre-authentication mechanisms which use multiple
-round trips, using the the KDC_ERR_MORE_PREAUTH_DATA_REQUIRED error
-code. Add get_cookie() and set_cookie() callbacks to the kdcpreauth
-interface; these callbacks can be used to save marshalled state
-information in an encrypted cookie for the next request.</li>
-<li>Add a client_key() callback to the kdcpreauth interface to retrieve
-the chosen client key, corresponding to the ETYPE-INFO2 entry sent
-by the KDC.</li>
-<li>Add an add_auth_indicator() callback to the kdcpreauth interface,
-allowing pre-authentication modules to assert authentication
-indicators.</li>
-<li>Add support for the GSS_KRB5_CRED_NO_CI_FLAGS_X cred option to
-suppress sending the confidentiality and integrity flags in GSS
-initiator tokens unless they are requested by the caller. These
-flags control the negotiated SASL security layer for the Microsoft
-GSS-SPNEGO SASL mechanism.</li>
-<li>Make the FILE credential cache implementation less prone to
-corruption issues in multi-threaded programs, especially on
-platforms with support for open file description locks.</li>
-</ul>
-</li>
-<li>Performance:<ul>
-<li>On replica KDCs, poll the primary KDC immediately after
-processing a full resync, and do not require two full resyncs
-after the primary KDC’s log file is reset.</li>
-</ul>
-</li>
-</ul>
-</div></blockquote>
-<p>Release 1.15</p>
-<ul class="simple">
-<li>Administrator experience:<ul>
-<li>Add support to kadmin for remote extraction of current keys
-without changing them (requires a special kadmin permission that
-is excluded from the wildcard permission), with the exception of
-highly protected keys.</li>
-<li>Add a lockdown_keys principal attribute to prevent retrieval of
-the principal’s keys (old or new) via the kadmin protocol. In
-newly created databases, this attribute is set on the krbtgt and
-kadmin principals.</li>
-<li>Restore recursive dump capability for DB2 back end, so sites can
-more easily recover from database corruption resulting from power
-failure events.</li>
-<li>Add DNS auto-discovery of KDC and kpasswd servers from URI
-records, in addition to SRV records. URI records can convey TCP
-and UDP servers and primary KDC status in a single DNS lookup, and
-can also point to HTTPS proxy servers.</li>
-<li>Add support for password history to the LDAP back end.</li>
-<li>Add support for principal renaming to the LDAP back end.</li>
-<li>Use the getrandom system call on supported Linux kernels to avoid
-blocking problems when getting entropy from the operating system.</li>
-</ul>
-</li>
-<li>Code quality:<ul>
-<li>Clean up numerous compilation warnings.</li>
-<li>Remove various infrequently built modules, including some preauth
-modules that were not built by default.</li>
-</ul>
-</li>
-<li>Developer experience:<ul>
-<li>Add support for building with OpenSSL 1.1.</li>
-<li>Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
-authenticators in the replay cache. This helps sites that must
-build with FIPS 140 conformant libraries that lack MD5.</li>
-</ul>
-</li>
-<li>Protocol evolution:<ul>
-<li>Add support for the AES-SHA2 enctypes, which allows sites to
-conform to Suite B crypto requirements.</li>
-</ul>
-</li>
-</ul>
-<p>Release 1.16</p>
-<ul class="simple">
-<li>Administrator experience:<ul>
-<li>The KDC can match PKINIT client certificates against the
-“pkinit_cert_match” string attribute on the client principal
-entry, using the same syntax as the existing “pkinit_cert_match”
-profile option.</li>
-<li>The ktutil addent command supports the “-k 0” option to ignore the
-key version, and the “-s” option to use a non-default salt string.</li>
-<li>kpropd supports a –pid-file option to write a pid file at
-startup, when it is run in standalone mode.</li>
-<li>The “encrypted_challenge_indicator” realm option can be used to
-attach an authentication indicator to tickets obtained using FAST
-encrypted challenge pre-authentication.</li>
-<li>Localization support can be disabled at build time with the
-–disable-nls configure option.</li>
-</ul>
-</li>
-<li>Developer experience:<ul>
-<li>The kdcpolicy pluggable interface allows modules control whether
-tickets are issued by the KDC.</li>
-<li>The kadm5_auth pluggable interface allows modules to control
-whether kadmind grants access to a kadmin request.</li>
-<li>The certauth pluggable interface allows modules to control which
-PKINIT client certificates can authenticate to which client
-principals.</li>
-<li>KDB modules can use the client and KDC interface IP addresses to
-determine whether to allow an AS request.</li>
-<li>GSS applications can query the bit strength of a krb5 GSS context
-using the GSS_C_SEC_CONTEXT_SASL_SSF OID with
-gss_inquire_sec_context_by_oid().</li>
-<li>GSS applications can query the impersonator name of a krb5 GSS
-credential using the GSS_KRB5_GET_CRED_IMPERSONATOR OID with
-gss_inquire_cred_by_oid().</li>
-<li>kdcpreauth modules can query the KDC for the canonicalized
-requested client principal name, or match a principal name against
-the requested client principal name with canonicalization.</li>
-</ul>
-</li>
-<li>Protocol evolution:<ul>
-<li>The client library will continue to try pre-authentication
-mechanisms after most failure conditions.</li>
-<li>The KDC will issue trivially renewable tickets (where the
-renewable lifetime is equal to or less than the ticket lifetime)
-if requested by the client, to be friendlier to scripts.</li>
-<li>The client library will use a random nonce for TGS requests
-instead of the current system time.</li>
-<li>For the RC4 string-to-key or PAC operations, UTF-16 is supported
-(previously only UCS-2 was supported).</li>
-<li>When matching PKINIT client certificates, UPN SANs will be matched
-correctly as UPNs, with canonicalization.</li>
-</ul>
-</li>
-<li>User experience:<ul>
-<li>Dates after the year 2038 are accepted (provided that the platform
-time facilities support them), through the year 2106.</li>
-<li>Automatic credential cache selection based on the client realm
-will take into account the fallback realm and the service
-hostname.</li>
-<li>Referral and alternate cross-realm TGTs will not be cached,
-avoiding some scenarios where they can be added to the credential
-cache multiple times.</li>
-<li>A German translation has been added.</li>
-</ul>
-</li>
-<li>Code quality:<ul>
-<li>The build is warning-clean under clang with the configured warning
-options.</li>
-<li>The automated test suite runs cleanly under AddressSanitizer.</li>
-</ul>
-</li>
-</ul>
-<p>Release 1.17</p>
-<ul class="simple">
-<li>Administrator experience:<ul>
-<li>A new Kerberos database module using the Lightning Memory-Mapped
-Database library (LMDB) has been added. The LMDB KDB module
-should be more performant and more robust than the DB2 module, and
-may become the default module for new databases in a future
-release.</li>
-<li>“kdb5_util dump” will no longer dump policy entries when specific
-principal names are requested.</li>
-</ul>
-</li>
-<li>Developer experience:<ul>
-<li>The new krb5_get_etype_info() API can be used to retrieve enctype,
-salt, and string-to-key parameters from the KDC for a client
-principal.</li>
-<li>The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
-principal names to be used with GSS-API functions.</li>
-<li>KDC and kadmind modules which call com_err() will now write to the
-log file in a format more consistent with other log messages.</li>
-<li>Programs which use large numbers of memory credential caches
-should perform better.</li>
-</ul>
-</li>
-<li>Protocol evolution:<ul>
-<li>The SPAKE pre-authentication mechanism is now supported. This
-mechanism protects against password dictionary attacks without
-requiring any additional infrastructure such as certificates.
-SPAKE is enabled by default on clients, but must be manually
-enabled on the KDC for this release.</li>
-<li>PKINIT freshness tokens are now supported. Freshness tokens can
-protect against scenarios where an attacker uses temporary access
-to a smart card to generate authentication requests for the
-future.</li>
-<li>Password change operations now prefer TCP over UDP, to avoid
-spurious error messages about replays when a response packet is
-dropped.</li>
-<li>The KDC now supports cross-realm S4U2Self requests when used with
-a third-party KDB module such as Samba’s. The client code for
-cross-realm S4U2Self requests is also now more robust.</li>
-</ul>
-</li>
-<li>User experience:<ul>
-<li>The new ktutil addent -f flag can be used to fetch salt
-information from the KDC for password-based keys.</li>
-<li>The new kdestroy -p option can be used to destroy a credential
-cache within a collection by client principal name.</li>
-<li>The Kerberos man page has been restored, and documents the
-environment variables that affect programs using the Kerberos
-library.</li>
-</ul>
-</li>
-<li>Code quality:<ul>
-<li>Python test scripts now use Python 3.</li>
-<li>Python test scripts now display markers in verbose output, making
-it easier to find where a failure occurred within the scripts.</li>
-<li>The Windows build system has been simplified and updated to work
-with more recent versions of Visual Studio. A large volume of
-unused Windows-specific code has been removed. Visual Studio 2013
-or later is now required.</li>
-</ul>
-</li>
-</ul>
-<p>Release 1.18</p>
-<ul class="simple">
-<li>Administrator experience:<ul>
-<li>Remove support for single-DES encryption types.</li>
-<li>Change the replay cache format to be more efficient and robust.
-Replay cache filenames using the new format end with <code class="docutils literal"><span class="pre">.rcache2</span></code>
-by default.</li>
-<li>setuid programs will automatically ignore environment variables
-that normally affect krb5 API functions, even if the caller does
-not use krb5_init_secure_context().</li>
-<li>Add an <code class="docutils literal"><span class="pre">enforce_ok_as_delegate</span></code> krb5.conf relation to disable
-credential forwarding during GSSAPI authentication unless the KDC
-sets the ok-as-delegate bit in the service ticket.</li>
-</ul>
-</li>
-<li>Developer experience:<ul>
-<li>Implement krb5_cc_remove_cred() for all credential cache types.</li>
-<li>Add the krb5_pac_get_client_info() API to get the client account
-name from a PAC.</li>
-</ul>
-</li>
-<li>Protocol evolution:<ul>
-<li>Add KDC support for S4U2Self requests where the user is identified
-by X.509 certificate. (Requires support for certificate lookup
-from a third-party KDB module.)</li>
-<li>Remove support for an old (“draft 9”) variant of PKINIT.</li>
-<li>Add support for Microsoft NegoEx. (Requires one or more
-third-party GSS modules implementing NegoEx mechanisms.)</li>
-</ul>
-</li>
-<li>User experience:<ul>
-<li>Add support for <code class="docutils literal"><span class="pre">dns_canonicalize_hostname=fallback</span></code>, causing
-host-based principal names to be tried first without DNS
-canonicalization, and again with DNS canonicalization if the
-un-canonicalized server is not found.</li>
-<li>Expand single-component hostnames in hhost-based principal names
-when DNS canonicalization is not used, adding the system’s first
-DNS search path as a suffix. Add a <code class="docutils literal"><span class="pre">qualify_shortname</span></code>
-krb5.conf relation to override this suffix or disable expansion.</li>
-</ul>
-</li>
-<li>Code quality:<ul>
-<li>The libkrb5 serialization code (used to export and import krb5 GSS
-security contexts) has been simplified and made type-safe.</li>
-<li>The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
-messages has been revised to conform to current coding practices.</li>
-<li>The test suite has been modified to work with macOS System
-Integrity Protection enabled.</li>
-<li>The test suite incorporates soft-pkcs11 so that PKINIT PKCS11
-support can always be tested.</li>
-</ul>
-</li>
-</ul>
-<p>Release 1.19</p>
-<ul class="simple">
-<li>Administrator experience:<ul>
-<li>When a client keytab is present, the GSSAPI krb5 mech will refresh
-credentials even if the current credentials were acquired
-manually.</li>
-<li>It is now harder to accidentally delete the K/M entry from a KDB.</li>
-</ul>
-</li>
-<li>Developer experience:<ul>
-<li>gss_acquire_cred_from() now supports the “password” and “verify”
-options, allowing credentials to be acquired via password and
-verified using a keytab key.</li>
-<li>When an application accepts a GSS security context, the new
-GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
-both provided matching channel bindings.</li>
-<li>Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self
-requests to identify the desired client principal by certificate.</li>
-<li>PKINIT certauth modules can now cause the hw-authent flag to be
-set in issued tickets.</li>
-<li>The krb5_init_creds_step() API will now issue the same password
-expiration warnings as krb5_get_init_creds_password().</li>
-</ul>
-</li>
-<li>Protocol evolution:<ul>
-<li>Added client and KDC support for Microsoft’s Resource-Based
-Constrained Delegation, which allows cross-realm S4U2Proxy
-requests. A third-party database module is required for KDC
-support.</li>
-<li>kadmin/admin is now the preferred server principal name for kadmin
-connections, and the host-based form is no longer created by
-default. The client will still try the host-based form as a
-fallback.</li>
-<li>Added client and server support for Microsoft’s
-KERB_AP_OPTIONS_CBT extension, which causes channel bindings to be
-required for the initiator if the acceptor provided them. The
-client will send this option if the client_aware_gss_bindings
-profile option is set.</li>
-</ul>
-</li>
-</ul>
-<p>User experience:</p>
-<blockquote>
-<div><ul class="simple">
-<li>The default setting of dns_canonicalize_realm is now “fallback”.
-Hostnames provided from applications will be tried in principal
-names as given (possibly with shortname qualification), falling
-back to the canonicalized name.</li>
-<li>kinit will now issue a warning if the des3-cbc-sha1 encryption
-type is used in the reply. This encryption type will be
-deprecated and removed in future releases.</li>
-<li>Added kvno flags –out-cache, –no-store, and –cached-only
-(inspired by Heimdal’s kgetcred).</li>
-</ul>
-</div></blockquote>
-<p>Release 1.20</p>
-<ul class="simple">
-<li>Administrator experience:<ul>
-<li>Added a “disable_pac” realm relation to suppress adding PAC
-authdata to tickets, for realms which do not need to support S4U
-requests.</li>
-<li>Most credential cache types will use atomic replacement when a
-cache is reinitialized using kinit or refreshed from the client
-keytab.</li>
-<li>kprop can now propagate databases with a dump size larger than
-4GB, if both the client and server are upgraded.</li>
-<li>kprop can now work over NATs that change the destination IP
-address, if the client is upgraded.</li>
-</ul>
-</li>
-<li>Developer experience:<ul>
-<li>Updated the KDB interface. The sign_authdata() method is replaced
-with the issue_pac() method, allowing KDB modules to add logon
-info and other buffers to the PAC issued by the KDC.</li>
-<li>Host-based initiator names are better supported in the GSS krb5
-mechanism.</li>
-</ul>
-</li>
-<li>Protocol evolution:<ul>
-<li>Replaced AD-SIGNEDPATH authdata with minimal PACs.</li>
-<li>To avoid spurious replay errors, password change requests will not
-be attempted over UDP until the attempt over TCP fails.</li>
-<li>PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.</li>
-</ul>
-</li>
-<li>Code quality:<ul>
-<li>Updated all code using OpenSSL to be compatible with OpenSSL 3.</li>
-<li>Reorganized the libk5crypto build system to allow the OpenSSL
-back-end to pull in material from the builtin back-end depending
-on the OpenSSL version.</li>
-<li>Simplified the PRNG logic to always use the platform PRNG.</li>
-<li>Converted the remaining Tcl tests to Python.</li>
-</ul>
-</li>
-</ul>
-<p><cite>Pre-authentication mechanisms</cite></p>
-<ul class="simple">
-<li>PW-SALT <span class="target" id="index-11"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4120.html#section-5.2.7.3"><strong>RFC 4120#section-5.2.7.3</strong></a></li>
-<li>ENC-TIMESTAMP <span class="target" id="index-12"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4120.html#section-5.2.7.2"><strong>RFC 4120#section-5.2.7.2</strong></a></li>
-<li>SAM-2</li>
-<li>FAST negotiation framework (release 1.8) <span class="target" id="index-13"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6113.html"><strong>RFC 6113</strong></a></li>
-<li>PKINIT with FAST on client (release 1.10) <span class="target" id="index-14"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6113.html"><strong>RFC 6113</strong></a></li>
-<li>PKINIT <span class="target" id="index-15"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4556.html"><strong>RFC 4556</strong></a></li>
-<li>FX-COOKIE <span class="target" id="index-16"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6113.html#section-5.2"><strong>RFC 6113#section-5.2</strong></a></li>
-<li>S4U-X509-USER (release 1.8) <a class="reference external" href="https://msdn.microsoft.com/en-us/library/cc246091">https://msdn.microsoft.com/en-us/library/cc246091</a></li>
-<li>OTP (release 1.12) <a class="reference internal" href="admin/otp.html#otp-preauth"><span class="std std-ref">OTP Preauthentication</span></a></li>
-<li>SPAKE (release 1.17) <a class="reference internal" href="admin/spake.html#spake"><span class="std std-ref">SPAKE Preauthentication</span></a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">MIT Kerberos features</a><ul>
-<li><a class="reference internal" href="#quick-facts">Quick facts</a></li>
-<li><a class="reference internal" href="#interoperability">Interoperability</a></li>
-<li><a class="reference internal" href="#feature-list">Feature list</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1 current"><a class="current reference internal" href="#">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="formats/freshness_token.html" title="PKINIT freshness tokens"
- >previous</a> |
- <a href="mitK5license.html" title="MIT Kerberos License information"
- >next</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos features">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>MIT Kerberos License information — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- <link rel="next" title="Copyright" href="copyright.html" />
- <link rel="prev" title="MIT Kerberos features" href="mitK5features.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="mitK5features.html" title="MIT Kerberos features"
- accesskey="P">previous</a> |
- <a href="copyright.html" title="Copyright"
- accesskey="N">next</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos License information">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="mit-kerberos-license-information">
-<span id="mitk5license"></span><h1>MIT Kerberos License information<a class="headerlink" href="#mit-kerberos-license-information" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-</div>
-<p>Copyright © 1985-2022 by the Massachusetts Institute of Technology.</p>
-<p>All rights reserved.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are
-met:</p>
-<ul class="simple">
-<li>Redistributions of source code must retain the above copyright notice,
-this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</li>
-</ul>
-<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-“AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
-A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
-HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
-LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
-<p>Downloading of this software may constitute an export of cryptographic
-software from the United States of America that is subject to the
-United States Export Administration Regulations (EAR), 15 CFR 730-774.
-Additional laws or regulations may apply. It is the responsibility of
-the person or entity contemplating export to comply with all
-applicable export laws and regulations, including obtaining any
-required license from the U.S. government.</p>
-<p>The U.S. government prohibits export of encryption source code to
-certain countries and individuals, including, but not limited to, the
-countries of Cuba, Iran, North Korea, Sudan, Syria, and residents and
-nationals of those countries.</p>
-<p>Documentation components of this software distribution are licensed
-under a Creative Commons Attribution-ShareAlike 3.0 Unported License.
-(<a class="reference external" href="https://creativecommons.org/licenses/by-sa/3.0/">https://creativecommons.org/licenses/by-sa/3.0/</a>)</p>
-<p>Individual source code files are copyright MIT, Cygnus Support,
-Novell, OpenVision Technologies, Oracle, Red Hat, Sun Microsystems,
-FundsXpress, and others.</p>
-<p>Project Athena, Athena, Athena MUSE, Discuss, Hesiod, Kerberos, Moira,
-and Zephyr are trademarks of the Massachusetts Institute of Technology
-(MIT). No commercial use of these trademarks may be made without
-prior written permission of MIT.</p>
-<p>“Commercial use” means use of a name in a product or other for-profit
-manner. It does NOT prevent a commercial firm from referring to the
-MIT trademarks in order to convey information (although in doing so,
-recognition of their trademark status should be given).</p>
-<hr class="docutils" />
-<p>The following copyright and permission notice applies to the
-OpenVision Kerberos Administration system located in
-<code class="docutils literal"><span class="pre">kadmin/create</span></code>, <code class="docutils literal"><span class="pre">kadmin/dbutil</span></code>, <code class="docutils literal"><span class="pre">kadmin/passwd</span></code>,
-<code class="docutils literal"><span class="pre">kadmin/server</span></code>, <code class="docutils literal"><span class="pre">lib/kadm5</span></code>, and portions of
-<code class="docutils literal"><span class="pre">lib/rpc</span></code>:</p>
-<blockquote>
-<div><p>Copyright, OpenVision Technologies, Inc., 1993-1996, All Rights Reserved</p>
-<p>WARNING: Retrieving the OpenVision Kerberos Administration system source
-code, as described below, indicates your acceptance of the following
-terms. If you do not agree to the following terms, do not retrieve the
-OpenVision Kerberos administration system.</p>
-<p>You may freely use and distribute the Source Code and Object Code
-compiled from it, with or without modification, but this Source Code is
-provided to you “AS IS” EXCLUSIVE OF ANY WARRANTY, INCLUDING, WITHOUT
-LIMITATION, ANY WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A
-PARTICULAR PURPOSE, OR ANY OTHER WARRANTY, WHETHER EXPRESS OR IMPLIED.
-IN NO EVENT WILL OPENVISION HAVE ANY LIABILITY FOR ANY LOST PROFITS,
-LOSS OF DATA OR COSTS OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, OR
-FOR ANY SPECIAL, INDIRECT, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THIS
-AGREEMENT, INCLUDING, WITHOUT LIMITATION, THOSE RESULTING FROM THE USE
-OF THE SOURCE CODE, OR THE FAILURE OF THE SOURCE CODE TO PERFORM, OR FOR
-ANY OTHER REASON.</p>
-<p>OpenVision retains all copyrights in the donated Source Code. OpenVision
-also retains copyright to derivative works of the Source Code, whether
-created by OpenVision or by a third party. The OpenVision copyright
-notice must be preserved if derivative works are made based on the
-donated Source Code.</p>
-<p>OpenVision Technologies, Inc. has donated this Kerberos Administration
-system to MIT for inclusion in the standard Kerberos 5 distribution.
-This donation underscores our commitment to continuing Kerberos
-technology development and our gratitude for the valuable work which has
-been performed by MIT and the Kerberos community.</p>
-</div></blockquote>
-<hr class="docutils" />
-<blockquote>
-<div>Portions contributed by Matt Crawford <code class="docutils literal"><span class="pre">crawdad@fnal.gov</span></code> were work
-performed at Fermi National Accelerator Laboratory, which is operated
-by Universities Research Association, Inc., under contract
-DE-AC02-76CHO3000 with the U.S. Department of Energy.</div></blockquote>
-<hr class="docutils" />
-<p>Portions of <code class="docutils literal"><span class="pre">src/lib/crypto</span></code> have the following copyright:</p>
-<blockquote>
-<div><p>Copyright © 1998 by the FundsXpress, INC.</p>
-<p>All rights reserved.</p>
-<blockquote>
-<div>Export of this software from the United States of America may require
-a specific license from the United States Government. It is the
-responsibility of any person or organization contemplating export to
-obtain such a license before exporting.</div></blockquote>
-<p>WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
-distribute this software and its documentation for any purpose and
-without fee is hereby granted, provided that the above copyright
-notice appear in all copies and that both that copyright notice and
-this permission notice appear in supporting documentation, and that
-the name of FundsXpress. not be used in advertising or publicity pertaining
-to distribution of the software without specific, written prior
-permission. FundsXpress makes no representations about the suitability of
-this software for any purpose. It is provided “as is” without express
-or implied warranty.</p>
-<p>THIS SOFTWARE IS PROVIDED “AS IS” AND WITHOUT ANY EXPRESS OR
-IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
-WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The implementation of the AES encryption algorithm in
-<code class="docutils literal"><span class="pre">src/lib/crypto/builtin/aes</span></code> has the following copyright:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright © 1998-2013, Brian Gladman, Worcester, UK. All</div>
-<div class="line">rights reserved.</div>
-</div>
-<p>The redistribution and use of this software (with or without
-changes) is allowed without the payment of fees or royalties
-provided that:</p>
-<blockquote>
-<div><p>source code distributions include the above copyright notice,
-this list of conditions and the following disclaimer;</p>
-<p>binary distributions include the above copyright notice, this
-list of conditions and the following disclaimer in their
-documentation.</p>
-</div></blockquote>
-<p>This software is provided ‘as is’ with no explicit or implied warranties
-in respect of its operation, including, but not limited to, correctness
-and fitness for purpose.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Portions contributed by Red Hat, including the pre-authentication
-plug-in framework and the NSS crypto implementation, contain the
-following copyright:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright © 2006 Red Hat, Inc.</div>
-<div class="line">Portions copyright © 2006 Massachusetts Institute of Technology</div>
-<div class="line">All Rights Reserved.</div>
-</div>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are
-met:</p>
-<ul class="simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</li>
-<li>Neither the name of Red Hat, Inc., nor the names of its contributors
-may be used to endorse or promote products derived from this software
-without specific prior written permission.</li>
-</ul>
-<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS
-IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
-TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
-PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER
-OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
-EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
-PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
-PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
-LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
-NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
-SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The bundled verto source code is subject to the following license:</p>
-<blockquote>
-<div><p>Copyright 2011 Red Hat, Inc.</p>
-<p>Permission is hereby granted, free of charge, to any person
-obtaining a copy of this software and associated documentation files
-(the “Software”), to deal in the Software without restriction,
-including without limitation the rights to use, copy, modify, merge,
-publish, distribute, sublicense, and/or sell copies of the Software,
-and to permit persons to whom the Software is furnished to do so,
-subject to the following conditions:</p>
-<p>The above copyright notice and this permission notice shall be
-included in all copies or substantial portions of the Software.</p>
-<p>THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
-NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
-BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
-ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The MS-KKDCP client implementation has the following copyright:</p>
-<blockquote>
-<div><p>Copyright 2013,2014 Red Hat, Inc.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:</p>
-<blockquote>
-<div><ol class="arabic simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in
-the documentation and/or other materials provided with the
-distribution.</li>
-</ol>
-</div></blockquote>
-<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS
-IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
-TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
-PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER
-OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
-EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
-PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
-PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
-LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
-NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
-SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The implementations of GSSAPI mechglue in GSSAPI-SPNEGO in
-<code class="docutils literal"><span class="pre">src/lib/gssapi</span></code>, including the following files:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">generic</span><span class="o">/</span><span class="n">gssapi_err_generic</span><span class="o">.</span><span class="n">et</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_accept_sec_context</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_acquire_cred</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_canon_name</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_compare_name</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_context_time</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_delete_sec_context</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_dsp_name</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_dsp_status</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_dup_name</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_exp_sec_context</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_export_name</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_glue</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_imp_name</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_imp_sec_context</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_init_sec_context</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_initialize</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_inquire_context</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_inquire_cred</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_inquire_names</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_process_context</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_rel_buffer</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_rel_cred</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_rel_name</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_rel_oid_set</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_seal</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_sign</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_store_cred</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_unseal</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_userok</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_utils</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">g_verify</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">gssd_pname_to_uid</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">mglueP</span><span class="o">.</span><span class="n">h</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">mechglue</span><span class="o">/</span><span class="n">oid_ops</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">spnego</span><span class="o">/</span><span class="n">gssapiP_spnego</span><span class="o">.</span><span class="n">h</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">gssapi</span><span class="o">/</span><span class="n">spnego</span><span class="o">/</span><span class="n">spnego_mech</span><span class="o">.</span><span class="n">c</span>
-</pre></div>
-</div>
-<p>and the initial implementation of incremental propagation, including
-the following new or changed files:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">include</span><span class="o">/</span><span class="n">iprop_hdr</span><span class="o">.</span><span class="n">h</span>
-<span class="n">kadmin</span><span class="o">/</span><span class="n">server</span><span class="o">/</span><span class="n">ipropd_svc</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">kdb</span><span class="o">/</span><span class="n">iprop</span><span class="o">.</span><span class="n">x</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">kdb</span><span class="o">/</span><span class="n">kdb_convert</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">kdb</span><span class="o">/</span><span class="n">kdb_log</span><span class="o">.</span><span class="n">c</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">kdb</span><span class="o">/</span><span class="n">kdb_log</span><span class="o">.</span><span class="n">h</span>
-<span class="n">lib</span><span class="o">/</span><span class="n">krb5</span><span class="o">/</span><span class="n">error_tables</span><span class="o">/</span><span class="n">kdb5_err</span><span class="o">.</span><span class="n">et</span>
-<span class="n">kprop</span><span class="o">/</span><span class="n">kpropd_rpc</span><span class="o">.</span><span class="n">c</span>
-<span class="n">kprop</span><span class="o">/</span><span class="n">kproplog</span><span class="o">.</span><span class="n">c</span>
-</pre></div>
-</div>
-<p>are subject to the following license:</p>
-<blockquote>
-<div><p>Copyright © 2004 Sun Microsystems, Inc.</p>
-<p>Permission is hereby granted, free of charge, to any person obtaining a
-copy of this software and associated documentation files (the
-“Software”), to deal in the Software without restriction, including
-without limitation the rights to use, copy, modify, merge, publish,
-distribute, sublicense, and/or sell copies of the Software, and to
-permit persons to whom the Software is furnished to do so, subject to
-the following conditions:</p>
-<p>The above copyright notice and this permission notice shall be included
-in all copies or substantial portions of the Software.</p>
-<p>THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS
-OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
-IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
-CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
-TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
-SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Kerberos V5 includes documentation and software developed at the
-University of California at Berkeley, which includes this copyright
-notice:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright © 1983 Regents of the University of California.</div>
-<div class="line">All rights reserved.</div>
-</div>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are
-met:</p>
-<ol class="arabic simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</li>
-<li>Neither the name of the University nor the names of its contributors
-may be used to endorse or promote products derived from this software
-without specific prior written permission.</li>
-</ol>
-<p>THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS “AS IS” AND
-ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
-ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
-FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
-OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
-HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
-LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
-OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Portions contributed by Novell, Inc., including the LDAP database
-backend, are subject to the following license:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright © 2004-2005, Novell, Inc.</div>
-<div class="line">All rights reserved.</div>
-</div>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:</p>
-<ul class="simple">
-<li>Redistributions of source code must retain the above copyright notice,
-this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</li>
-<li>The copyright holder’s name is not used to endorse or promote products
-derived from this software without specific prior written permission.</li>
-</ul>
-<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS”
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
-ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
-LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
-CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
-SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
-INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
-CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
-ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
-POSSIBILITY OF SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Portions funded by Sandia National Laboratory
-and developed by the University of Michigan’s
-Center for Information Technology Integration,
-including the PKINIT implementation, are subject
-to the following license:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">COPYRIGHT © 2006-2007</div>
-<div class="line">THE REGENTS OF THE UNIVERSITY OF MICHIGAN</div>
-<div class="line">ALL RIGHTS RESERVED</div>
-</div>
-<p>Permission is granted to use, copy, create derivative works
-and redistribute this software and such derivative works
-for any purpose, so long as the name of The University of
-Michigan is not used in any advertising or publicity
-pertaining to the use of distribution of this software
-without specific, written prior authorization. If the
-above copyright notice or any other identification of the
-University of Michigan is included in any copy of any
-portion of this software, then the disclaimer below must
-also be included.</p>
-<p>THIS SOFTWARE IS PROVIDED AS IS, WITHOUT REPRESENTATION
-FROM THE UNIVERSITY OF MICHIGAN AS TO ITS FITNESS FOR ANY
-PURPOSE, AND WITHOUT WARRANTY BY THE UNIVERSITY OF
-MICHIGAN OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING
-WITHOUT LIMITATION THE IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE
-REGENTS OF THE UNIVERSITY OF MICHIGAN SHALL NOT BE LIABLE
-FOR ANY DAMAGES, INCLUDING SPECIAL, INDIRECT, INCIDENTAL, OR
-CONSEQUENTIAL DAMAGES, WITH RESPECT TO ANY CLAIM ARISING
-OUT OF OR IN CONNECTION WITH THE USE OF THE SOFTWARE, EVEN
-IF IT HAS BEEN OR IS HEREAFTER ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGES.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The pkcs11.h file included in the PKINIT code has the
-following license:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright 2006 g10 Code GmbH</div>
-<div class="line">Copyright 2006 Andreas Jellinghaus</div>
-</div>
-<p>This file is free software; as a special exception the author gives
-unlimited permission to copy and/or distribute it, with or without
-modifications, as long as this notice is preserved.</p>
-<p>This file is distributed in the hope that it will be useful, but
-WITHOUT ANY WARRANTY, to the extent permitted by law; without even
-the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-PURPOSE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Portions contributed by Apple Inc. are subject to the following license:</p>
-<blockquote>
-<div><p>Copyright 2004-2008 Apple Inc. All Rights Reserved.</p>
-<blockquote>
-<div>Export of this software from the United States of America may require
-a specific license from the United States Government. It is the
-responsibility of any person or organization contemplating export to
-obtain such a license before exporting.</div></blockquote>
-<p>WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
-distribute this software and its documentation for any purpose and
-without fee is hereby granted, provided that the above copyright
-notice appear in all copies and that both that copyright notice and
-this permission notice appear in supporting documentation, and that
-the name of Apple Inc. not be used in advertising or publicity pertaining
-to distribution of the software without specific, written prior
-permission. Apple Inc. makes no representations about the suitability of
-this software for any purpose. It is provided “as is” without express
-or implied warranty.</p>
-<p>THIS SOFTWARE IS PROVIDED “AS IS” AND WITHOUT ANY EXPRESS OR
-IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
-WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The implementations of UTF-8 string handling in src/util/support and
-src/lib/krb5/unicode are subject to the following copyright and
-permission notice:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">The OpenLDAP Public License</div>
-<div class="line">Version 2.8, 17 August 2003</div>
-</div>
-<p>Redistribution and use of this software and associated documentation
-(“Software”), with or without modification, are permitted provided
-that the following conditions are met:</p>
-<ol class="arabic simple">
-<li>Redistributions in source form must retain copyright statements
-and notices,</li>
-<li>Redistributions in binary form must reproduce applicable copyright
-statements and notices, this list of conditions, and the following
-disclaimer in the documentation and/or other materials provided
-with the distribution, and</li>
-<li>Redistributions must contain a verbatim copy of this document.</li>
-</ol>
-<p>The OpenLDAP Foundation may revise this license from time to time.
-Each revision is distinguished by a version number. You may use
-this Software under terms of this license revision or under the
-terms of any subsequent revision of the license.</p>
-<p>THIS SOFTWARE IS PROVIDED BY THE OPENLDAP FOUNDATION AND ITS
-CONTRIBUTORS “AS IS” AND ANY EXPRESSED OR IMPLIED WARRANTIES,
-INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
-AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT
-SHALL THE OPENLDAP FOUNDATION, ITS CONTRIBUTORS, OR THE AUTHOR(S)
-OR OWNER(S) OF THE SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT,
-INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
-BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
-LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
-CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
-LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
-ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
-POSSIBILITY OF SUCH DAMAGE.</p>
-<p>The names of the authors and copyright holders must not be used in
-advertising or otherwise to promote the sale, use or other dealing
-in this Software without specific, written prior permission. Title
-to copyright in this Software shall at all times remain with copyright
-holders.</p>
-<p>OpenLDAP is a registered trademark of the OpenLDAP Foundation.</p>
-<p>Copyright 1999-2003 The OpenLDAP Foundation, Redwood City,
-California, USA. All Rights Reserved. Permission to copy and
-distribute verbatim copies of this document is granted.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Marked test programs in src/lib/krb5/krb have the following copyright:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright © 2006 Kungliga Tekniska Högskola</div>
-<div class="line">(Royal Institute of Technology, Stockholm, Sweden).</div>
-<div class="line">All rights reserved.</div>
-</div>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions
-are met:</p>
-<ol class="arabic simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</li>
-<li>Neither the name of KTH nor the names of its contributors may be
-used to endorse or promote products derived from this software without
-specific prior written permission.</li>
-</ol>
-<p>THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS “AS IS” AND ANY
-EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE
-LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
-CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
-SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
-OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
-ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The KCM Mach RPC definition file used on macOS has the following copyright:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright © 2009 Kungliga Tekniska Högskola</div>
-<div class="line">(Royal Institute of Technology, Stockholm, Sweden).</div>
-<div class="line">All rights reserved.</div>
-</div>
-<p>Portions Copyright © 2009 Apple Inc. All rights reserved.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions
-are met:</p>
-<ol class="arabic simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</li>
-<li>Neither the name of the Institute nor the names of its contributors
-may be used to endorse or promote products derived from this software
-without specific prior written permission.</li>
-</ol>
-<p>THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS “AS IS” AND
-ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
-ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
-FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
-OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
-HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
-LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
-OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Portions of the RPC implementation in src/lib/rpc and src/include/gssrpc
-have the following copyright and permission notice:</p>
-<blockquote>
-<div><p>Copyright © 2010, Oracle America, Inc.</p>
-<p>All rights reserved.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:</p>
-<ol class="arabic simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in
-the documentation and/or other materials provided with the
-distribution.</li>
-<li>Neither the name of the “Oracle America, Inc.” nor the names of
-its contributors may be used to endorse or promote products
-derived from this software without specific prior written permission.</li>
-</ol>
-<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS
-IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
-TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
-PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
-HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
-TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
-PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
-LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
-NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
-SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<blockquote>
-<div><p>Copyright © 2006,2007,2009
-NTT (Nippon Telegraph and Telephone Corporation). All rights reserved.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions
-are met:</p>
-<ol class="arabic simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer as
-the first lines of this file unmodified.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</li>
-</ol>
-<p>THIS SOFTWARE IS PROVIDED BY NTT “AS IS” AND ANY EXPRESS OR
-IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
-OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
-IN NO EVENT SHALL NTT BE LIABLE FOR ANY DIRECT, INDIRECT,
-INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
-NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
-THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<blockquote>
-<div><p>Copyright 2000 by Carnegie Mellon University</p>
-<p>All Rights Reserved</p>
-<p>Permission to use, copy, modify, and distribute this software and its
-documentation for any purpose and without fee is hereby granted,
-provided that the above copyright notice appear in all copies and that
-both that copyright notice and this permission notice appear in
-supporting documentation, and that the name of Carnegie Mellon
-University not be used in advertising or publicity pertaining to
-distribution of the software without specific, written prior
-permission.</p>
-<p>CARNEGIE MELLON UNIVERSITY DISCLAIMS ALL WARRANTIES WITH REGARD TO
-THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
-FITNESS, IN NO EVENT SHALL CARNEGIE MELLON UNIVERSITY BE LIABLE FOR
-ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
-OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<blockquote>
-<div><p>Copyright © 2002 Naval Research Laboratory (NRL/CCS)</p>
-<p>Permission to use, copy, modify and distribute this software and its
-documentation is hereby granted, provided that both the copyright
-notice and this permission notice appear in all copies of the software,
-derivative works or modified versions, and any portions thereof.</p>
-<p>NRL ALLOWS FREE USE OF THIS SOFTWARE IN ITS “AS IS” CONDITION AND
-DISCLAIMS ANY LIABILITY OF ANY KIND FOR ANY DAMAGES WHATSOEVER
-RESULTING FROM THE USE OF THIS SOFTWARE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<blockquote>
-<div><p>Copyright © 1991, 1992, 1994 by Cygnus Support.</p>
-<p>Permission to use, copy, modify, and
-distribute this software and its documentation for any purpose and
-without fee is hereby granted, provided that the above copyright
-notice appear in all copies and that both that copyright notice and
-this permission notice appear in supporting documentation.
-Cygnus Support makes no representations about the suitability of
-this software for any purpose. It is provided “as is” without express
-or implied warranty.</p>
-</div></blockquote>
-<hr class="docutils" />
-<blockquote>
-<div><p>Copyright © 2006 Secure Endpoints Inc.</p>
-<p>Permission is hereby granted, free of charge, to any person
-obtaining a copy of this software and associated documentation
-files (the “Software”), to deal in the Software without
-restriction, including without limitation the rights to use, copy,
-modify, merge, publish, distribute, sublicense, and/or sell copies
-of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:</p>
-<p>The above copyright notice and this permission notice shall be
-included in all copies or substantial portions of the Software.</p>
-<p>THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
-NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
-BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
-ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<blockquote>
-<div><p>Copyright © 1994 by the University of Southern California</p>
-<blockquote>
-<div>EXPORT OF THIS SOFTWARE from the United States of America may
-require a specific license from the United States Government.
-It is the responsibility of any person or organization contemplating
-export to obtain such a license before exporting.</div></blockquote>
-<p>WITHIN THAT CONSTRAINT, permission to copy, modify, and distribute
-this software and its documentation in source and binary forms is
-hereby granted, provided that any documentation or other materials
-related to such distribution or use acknowledge that the software
-was developed by the University of Southern California.</p>
-<p>DISCLAIMER OF WARRANTY. THIS SOFTWARE IS PROVIDED “AS IS”. The
-University of Southern California MAKES NO REPRESENTATIONS OR
-WARRANTIES, EXPRESS OR IMPLIED. By way of example, but not
-limitation, the University of Southern California MAKES NO
-REPRESENTATIONS OR WARRANTIES OF MERCHANTABILITY OR FITNESS FOR ANY
-PARTICULAR PURPOSE. The University of Southern
-California shall not be held liable for any liability nor for any
-direct, indirect, or consequential damages with respect to any
-claim by the user or distributor of the ksu software.</p>
-</div></blockquote>
-<hr class="docutils" />
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright © 1995</div>
-<div class="line">The President and Fellows of Harvard University</div>
-</div>
-<p>This code is derived from software contributed to Harvard by
-Jeremy Rassen.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions
-are met:</p>
-<ol class="arabic">
-<li><p class="first">Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</p>
-</li>
-<li><p class="first">Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</p>
-</li>
-<li><p class="first">All advertising materials mentioning features or use of this software
-must display the following acknowledgement:</p>
-<blockquote>
-<div><p>This product includes software developed by the University of
-California, Berkeley and its contributors.</p>
-</div></blockquote>
-</li>
-<li><p class="first">Neither the name of the University nor the names of its contributors
-may be used to endorse or promote products derived from this software
-without specific prior written permission.</p>
-</li>
-</ol>
-<p>THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS “AS IS” AND
-ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
-ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
-FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
-OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
-HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
-LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
-OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright © 2008 by the Massachusetts Institute of Technology.</div>
-<div class="line">Copyright 1995 by Richard P. Basch. All Rights Reserved.</div>
-<div class="line">Copyright 1995 by Lehman Brothers, Inc. All Rights Reserved.</div>
-</div>
-<blockquote>
-<div>Export of this software from the United States of America may
-require a specific license from the United States Government.
-It is the responsibility of any person or organization contemplating
-export to obtain such a license before exporting.</div></blockquote>
-<p>WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
-distribute this software and its documentation for any purpose and
-without fee is hereby granted, provided that the above copyright
-notice appear in all copies and that both that copyright notice and
-this permission notice appear in supporting documentation, and that
-the name of Richard P. Basch, Lehman Brothers and M.I.T. not be used
-in advertising or publicity pertaining to distribution of the software
-without specific, written prior permission. Richard P. Basch,
-Lehman Brothers and M.I.T. make no representations about the suitability
-of this software for any purpose. It is provided “as is” without
-express or implied warranty.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The following notice applies to <code class="docutils literal"><span class="pre">src/lib/krb5/krb/strptime.c</span></code> and
-<code class="docutils literal"><span class="pre">src/include/k5-queue.h</span></code>.</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright © 1997, 1998 The NetBSD Foundation, Inc.</div>
-<div class="line">All rights reserved.</div>
-</div>
-<p>This code was contributed to The NetBSD Foundation by Klaus Klein.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions
-are met:</p>
-<ol class="arabic">
-<li><p class="first">Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</p>
-</li>
-<li><p class="first">Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</p>
-</li>
-<li><p class="first">All advertising materials mentioning features or use of this software
-must display the following acknowledgement:</p>
-<blockquote>
-<div><p>This product includes software developed by the NetBSD
-Foundation, Inc. and its contributors.</p>
-</div></blockquote>
-</li>
-<li><p class="first">Neither the name of The NetBSD Foundation nor the names of its
-contributors may be used to endorse or promote products derived
-from this software without specific prior written permission.</p>
-</li>
-</ol>
-<p>THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
-“AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
-TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
-CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
-SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
-INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
-CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
-ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
-POSSIBILITY OF SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The following notice applies to Unicode library files in
-<code class="docutils literal"><span class="pre">src/lib/krb5/unicode</span></code>:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright 1997, 1998, 1999 Computing Research Labs,</div>
-<div class="line">New Mexico State University</div>
-</div>
-<p>Permission is hereby granted, free of charge, to any person obtaining a
-copy of this software and associated documentation files (the “Software”),
-to deal in the Software without restriction, including without limitation
-the rights to use, copy, modify, merge, publish, distribute, sublicense,
-and/or sell copies of the Software, and to permit persons to whom the
-Software is furnished to do so, subject to the following conditions:</p>
-<p>The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.</p>
-<p>THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
-THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
-CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
-OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
-THE USE OR OTHER DEALINGS IN THE SOFTWARE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The following notice applies to <code class="docutils literal"><span class="pre">src/util/support/strlcpy.c</span></code>:</p>
-<blockquote>
-<div><p>Copyright © 1998 Todd C. Miller <code class="docutils literal"><span class="pre">Todd.Miller@courtesan.com</span></code></p>
-<p>Permission to use, copy, modify, and distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.</p>
-<p>THE SOFTWARE IS PROVIDED “AS IS” AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
-OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The following notice applies to <code class="docutils literal"><span class="pre">src/util/profile/argv_parse.c</span></code> and
-<code class="docutils literal"><span class="pre">src/util/profile/argv_parse.h</span></code>:</p>
-<blockquote>
-<div><p>Copyright 1999 by Theodore Ts’o.</p>
-<p>Permission to use, copy, modify, and distribute this software for
-any purpose with or without fee is hereby granted, provided that
-the above copyright notice and this permission notice appear in all
-copies. THE SOFTWARE IS PROVIDED “AS IS” AND THEODORE TS’O (THE
-AUTHOR) DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
-INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS.
-IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
-INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER
-RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
-OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
-IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. (Isn’t
-it sick that the U.S. culture of lawsuit-happy lawyers requires
-this kind of disclaimer?)</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The following notice applies to portiions of <code class="docutils literal"><span class="pre">src/lib/rpc</span></code> and
-<code class="docutils literal"><span class="pre">src/include/gssrpc</span></code>:</p>
-<blockquote>
-<div><p>Copyright © 2000 The Regents of the University of Michigan.
-All rights reserved.</p>
-<p>Copyright © 2000 Dug Song <code class="docutils literal"><span class="pre">dugsong@UMICH.EDU</span></code>.
-All rights reserved, all wrongs reversed.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions
-are met:</p>
-<ol class="arabic simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</li>
-<li>Neither the name of the University nor the names of its
-contributors may be used to endorse or promote products derived
-from this software without specific prior written permission.</li>
-</ol>
-<p>THIS SOFTWARE IS PROVIDED “AS IS” AND ANY EXPRESS OR IMPLIED
-WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
-FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
-CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
-SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
-BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
-LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
-NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
-SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Implementations of the MD4 algorithm are subject to the following
-notice:</p>
-<blockquote>
-<div><p>Copyright © 1990, RSA Data Security, Inc. All rights reserved.</p>
-<p>License to copy and use this software is granted provided that
-it is identified as the “RSA Data Security, Inc. MD4 Message
-Digest Algorithm” in all material mentioning or referencing this
-software or this function.</p>
-<p>License is also granted to make and use derivative works
-provided that such works are identified as “derived from the RSA
-Data Security, Inc. MD4 Message Digest Algorithm” in all
-material mentioning or referencing the derived work.</p>
-<p>RSA Data Security, Inc. makes no representations concerning
-either the merchantability of this software or the suitability
-of this software for any particular purpose. It is provided “as
-is” without express or implied warranty of any kind.</p>
-<p>These notices must be retained in any copies of any part of this
-documentation and/or software.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Implementations of the MD5 algorithm are subject to the following
-notice:</p>
-<blockquote>
-<div><p>Copyright © 1990, RSA Data Security, Inc. All rights reserved.</p>
-<p>License to copy and use this software is granted provided that
-it is identified as the “RSA Data Security, Inc. MD5 Message-
-Digest Algorithm” in all material mentioning or referencing this
-software or this function.</p>
-<p>License is also granted to make and use derivative works
-provided that such works are identified as “derived from the RSA
-Data Security, Inc. MD5 Message-Digest Algorithm” in all
-material mentioning or referencing the derived work.</p>
-<p>RSA Data Security, Inc. makes no representations concerning
-either the merchantability of this software or the suitability
-of this software for any particular purpose. It is provided “as
-is” without express or implied warranty of any kind.</p>
-<p>These notices must be retained in any copies of any part of this
-documentation and/or software.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The following notice applies to <code class="docutils literal"><span class="pre">src/lib/crypto/crypto_tests/t_mddriver.c</span></code>:</p>
-<blockquote>
-<div><p>Copyright © 1990-2, RSA Data Security, Inc. Created 1990. All
-rights reserved.</p>
-<p>RSA Data Security, Inc. makes no representations concerning either
-the merchantability of this software or the suitability of this
-software for any particular purpose. It is provided “as is”
-without express or implied warranty of any kind.</p>
-<p>These notices must be retained in any copies of any part of this
-documentation and/or software.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Portions of <code class="docutils literal"><span class="pre">src/lib/krb5</span></code> are subject to the following notice:</p>
-<blockquote>
-<div><div class="line-block">
-<div class="line">Copyright © 1994 CyberSAFE Corporation.</div>
-<div class="line">Copyright 1990,1991,2007,2008 by the Massachusetts
-Institute of Technology.</div>
-<div class="line">All Rights Reserved.</div>
-</div>
-<blockquote>
-<div>Export of this software from the United States of America may
-require a specific license from the United States Government.
-It is the responsibility of any person or organization contemplating
-export to obtain such a license before exporting.</div></blockquote>
-<p>WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
-distribute this software and its documentation for any purpose and
-without fee is hereby granted, provided that the above copyright
-notice appear in all copies and that both that copyright notice and
-this permission notice appear in supporting documentation, and that
-the name of M.I.T. not be used in advertising or publicity pertaining
-to distribution of the software without specific, written prior
-permission. Furthermore if you modify this software you must label
-your software as modified software and not distribute it in such a
-fashion that it might be confused with the original M.I.T. software.
-Neither M.I.T., the Open Computing Security Group, nor
-CyberSAFE Corporation make any representations about the suitability of
-this software for any purpose. It is provided “as is” without express
-or implied warranty.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Portions contributed by PADL Software are subject to the following
-license:</p>
-<blockquote>
-<div><p>Copyright (c) 2011, PADL Software Pty Ltd.
-All rights reserved.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions
-are met:</p>
-<ol class="arabic simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in the
-documentation and/or other materials provided with the distribution.</li>
-<li>Neither the name of PADL Software nor the names of its contributors
-may be used to endorse or promote products derived from this software
-without specific prior written permission.</li>
-</ol>
-<p>THIS SOFTWARE IS PROVIDED BY PADL SOFTWARE AND CONTRIBUTORS “AS IS” AND
-ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
-ARE DISCLAIMED. IN NO EVENT SHALL PADL SOFTWARE OR CONTRIBUTORS BE LIABLE
-FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
-OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
-HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
-LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
-OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The bundled libev source code is subject to the following license:</p>
-<blockquote>
-<div><p>All files in libev are Copyright (C)2007,2008,2009 Marc Alexander Lehmann.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are
-met:</p>
-<ul class="simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above
-copyright notice, this list of conditions and the following
-disclaimer in the documentation and/or other materials provided
-with the distribution.</li>
-</ul>
-<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-“AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
-A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
-OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
-LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
-<p>Alternatively, the contents of this package may be used under the terms
-of the GNU General Public License (“GPL”) version 2 or any later version,
-in which case the provisions of the GPL are applicable instead of the
-above. If you wish to allow the use of your version of this package only
-under the terms of the GPL and not to allow others to use your version of
-this file under the BSD license, indicate your decision by deleting the
-provisions above and replace them with the notice and other provisions
-required by the GPL in this and the other files of this package. If you do
-not delete the provisions above, a recipient may use your version of this
-file under either the BSD or the GPL.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>Files copied from the Intel AESNI Sample Library are subject to the
-following license:</p>
-<blockquote>
-<div><p>Copyright © 2010, Intel Corporation
-All rights reserved.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions
-are met:</p>
-<blockquote>
-<div><ul class="simple">
-<li>Redistributions of source code must retain the above
-copyright notice, this list of conditions and the following
-disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above
-copyright notice, this list of conditions and the following
-disclaimer in the documentation and/or other materials
-provided with the distribution.</li>
-<li>Neither the name of Intel Corporation nor the names of its
-contributors may be used to endorse or promote products
-derived from this software without specific prior written
-permission.</li>
-</ul>
-</div></blockquote>
-<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
-CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES,
-INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
-BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
-EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
-TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
-ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
-TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF
-THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The following notice applies to
-<code class="docutils literal"><span class="pre">src/ccapi/common/win/OldCC/autolock.hxx</span></code>:</p>
-<blockquote>
-<div><p>Copyright (C) 1998 by Danilo Almeida. All rights reserved.</p>
-<p>Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions
-are met:</p>
-<ul class="simple">
-<li>Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.</li>
-<li>Redistributions in binary form must reproduce the above copyright
-notice, this list of conditions and the following disclaimer in
-the documentation and/or other materials provided with the
-distribution.</li>
-</ul>
-<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-“AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
-FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
-COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
-INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
-(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
-SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
-HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
-STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
-ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
-OF THE POSSIBILITY OF SUCH DAMAGE.</p>
-</div></blockquote>
-<hr class="docutils" />
-<p>The following notice applies to portions of
-<code class="docutils literal"><span class="pre">src/plugins/preauth/spake/edwards25519.c</span></code> and
-<code class="docutils literal"><span class="pre">src/plugins/preauth/spake/edwards25519_tables.h</span></code>:</p>
-<p>The MIT License (MIT)</p>
-<p>Copyright (c) 2015-2016 the fiat-crypto authors (see the AUTHORS file).</p>
-<p>Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the “Software”), to
-deal in the Software without restriction, including without limitation the
-rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
-sell copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:</p>
-<p>The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.</p>
-<p>THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
-IN THE SOFTWARE.</p>
-<hr class="docutils" />
-<p>The following notice applies to portions of
-<code class="docutils literal"><span class="pre">src/plugins/preauth/spake/edwards25519.c</span></code>:</p>
-<p>Copyright (c) 2015-2016, Google Inc.</p>
-<p>Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.</p>
-<p>THE SOFTWARE IS PROVIDED “AS IS” AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
-SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
-OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
-CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">MIT Kerberos License information</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="mitK5features.html" title="MIT Kerberos features"
- >previous</a> |
- <a href="copyright.html" title="Copyright"
- >next</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__MIT Kerberos License information">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Credential cache selection interface (ccselect) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Password quality interface (pwqual)" href="pwqual.html" />
- <link rel="prev" title="KDC preauthentication interface (kdcpreauth)" href="kdcpreauth.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kdcpreauth.html" title="KDC preauthentication interface (kdcpreauth)"
- accesskey="P">previous</a> |
- <a href="pwqual.html" title="Password quality interface (pwqual)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Credential cache selection interface (ccselect)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="credential-cache-selection-interface-ccselect">
-<span id="ccselect-plugin"></span><h1>Credential cache selection interface (ccselect)<a class="headerlink" href="#credential-cache-selection-interface-ccselect" title="Permalink to this headline">¶</a></h1>
-<p>The ccselect interface allows modules to control how credential caches
-are chosen when a GSSAPI client contacts a service. For a detailed
-description of the ccselect interface, see the header file
-<code class="docutils literal"><span class="pre"><krb5/ccselect_plugin.h></span></code>.</p>
-<p>The primary ccselect method is <strong>choose</strong>, which accepts a server
-principal as input and returns a ccache and/or principal name as
-output. A module can use the krb5_cccol APIs to iterate over the
-cache collection in order to find an appropriate ccache to use.</p>
-<p>A module can create and destroy per-library-context state objects by
-implementing the <strong>init</strong> and <strong>fini</strong> methods. State objects have
-the type krb5_ccselect_moddata, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object.</p>
-<p>A module can have one of two priorities, “authoritative” or
-“heuristic”. Results from authoritative modules, if any are
-available, will take priority over results from heuristic modules. A
-module communicates its priority as a result of the <strong>init</strong> method.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Credential cache selection interface (ccselect)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kdcpreauth.html" title="KDC preauthentication interface (kdcpreauth)"
- >previous</a> |
- <a href="pwqual.html" title="Password quality interface (pwqual)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Credential cache selection interface (ccselect)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>PKINIT certificate authorization interface (certauth) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="KDC policy interface (kdcpolicy)" href="kdcpolicy.html" />
- <link rel="prev" title="Internal pluggable interfaces" href="internal.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="internal.html" title="Internal pluggable interfaces"
- accesskey="P">previous</a> |
- <a href="kdcpolicy.html" title="KDC policy interface (kdcpolicy)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__PKINIT certificate authorization interface (certauth)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="pkinit-certificate-authorization-interface-certauth">
-<span id="certauth-plugin"></span><h1>PKINIT certificate authorization interface (certauth)<a class="headerlink" href="#pkinit-certificate-authorization-interface-certauth" title="Permalink to this headline">¶</a></h1>
-<p>The certauth interface was first introduced in release 1.16. It
-allows customization of the X.509 certificate attribute requirements
-placed on certificates used by PKINIT enabled clients. For a detailed
-description of the certauth interface, see the header file
-<code class="docutils literal"><span class="pre"><krb5/certauth_plugin.h></span></code></p>
-<p>A certauth module implements the <strong>authorize</strong> method to determine
-whether a client’s certificate is authorized to authenticate a client
-principal. <strong>authorize</strong> receives the DER-encoded certificate, the
-requested client principal, and a pointer to the client’s
-krb5_db_entry (for modules that link against libkdb5). The method
-must decode the certificate and inspect its attributes to determine if
-it should authorize PKINIT authentication. It returns the
-authorization status and optionally outputs a list of authentication
-indicator strings to be added to the ticket.</p>
-<p>Beginning in release 1.19, the authorize method can request that the
-hardware authentication bit be set in the ticket by returning
-<strong>KRB5_CERTAUTH_HWAUTH</strong>. Beginning in release 1.20, the authorize
-method can return <strong>KRB5_CERTAUTH_HWAUTH_PASS</strong> to request that the
-hardware authentication bit be set in the ticket but otherwise defer
-authorization to another certauth module. A module must use its own
-internal or library-provided ASN.1 certificate decoder.</p>
-<p>A module can optionally create and destroy module data with the
-<strong>init</strong> and <strong>fini</strong> methods. Module data objects last for the
-lifetime of the KDC process.</p>
-<p>If a module allocates and returns a list of authentication indicators
-from <strong>authorize</strong>, it must also implement the <strong>free_ind</strong> method
-to free the list.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">PKINIT certificate authorization interface (certauth)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="internal.html" title="Internal pluggable interfaces"
- >previous</a> |
- <a href="kdcpolicy.html" title="KDC policy interface (kdcpolicy)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__PKINIT certificate authorization interface (certauth)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Client preauthentication interface (clpreauth) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="KDC preauthentication interface (kdcpreauth)" href="kdcpreauth.html" />
- <link rel="prev" title="General plugin concepts" href="general.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="general.html" title="General plugin concepts"
- accesskey="P">previous</a> |
- <a href="kdcpreauth.html" title="KDC preauthentication interface (kdcpreauth)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Client preauthentication interface (clpreauth)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="client-preauthentication-interface-clpreauth">
-<h1>Client preauthentication interface (clpreauth)<a class="headerlink" href="#client-preauthentication-interface-clpreauth" title="Permalink to this headline">¶</a></h1>
-<p>During an initial ticket request, a KDC may ask a client to prove its
-knowledge of the password before issuing an encrypted ticket, or to
-use credentials other than a password. This process is called
-preauthentication, and is described in <span class="target" id="index-0"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc4120.html"><strong>RFC 4120</strong></a> and <span class="target" id="index-1"></span><a class="rfc reference external" href="https://tools.ietf.org/html/rfc6113.html"><strong>RFC 6113</strong></a>.
-The clpreauth interface allows the addition of client support for
-preauthentication mechanisms beyond those included in the core MIT
-krb5 code base. For a detailed description of the clpreauth
-interface, see the header file <code class="docutils literal"><span class="pre"><krb5/clpreauth_plugin.h></span></code> (or
-<code class="docutils literal"><span class="pre"><krb5/preauth_plugin.h></span></code> before release 1.12).</p>
-<p>A clpreauth module is generally responsible for:</p>
-<ul class="simple">
-<li>Supplying a list of preauth type numbers used by the module in the
-<strong>pa_type_list</strong> field of the vtable structure.</li>
-<li>Indicating what kind of preauthentication mechanism it implements,
-with the <strong>flags</strong> method. In the most common case, this method
-just returns <code class="docutils literal"><span class="pre">PA_REAL</span></code>, indicating that it implements a normal
-preauthentication type.</li>
-<li>Examining the padata information included in a PREAUTH_REQUIRED or
-MORE_PREAUTH_DATA_REQUIRED error and producing padata values for the
-next AS request. This is done with the <strong>process</strong> method.</li>
-<li>Examining the padata information included in a successful ticket
-reply, possibly verifying the KDC identity and computing a reply
-key. This is also done with the <strong>process</strong> method.</li>
-<li>For preauthentication types which support it, recovering from errors
-by examining the error data from the KDC and producing a padata
-value for another AS request. This is done with the <strong>tryagain</strong>
-method.</li>
-<li>Receiving option information (supplied by <code class="docutils literal"><span class="pre">kinit</span> <span class="pre">-X</span></code> or by an
-application), with the <strong>gic_opts</strong> method.</li>
-</ul>
-<p>A clpreauth module can create and destroy per-library-context and
-per-request state objects by implementing the <strong>init</strong>, <strong>fini</strong>,
-<strong>request_init</strong>, and <strong>request_fini</strong> methods. Per-context state
-objects have the type krb5_clpreauth_moddata, and per-request state
-objects have the type krb5_clpreauth_modreq. These are abstract
-pointer types; a module should typically cast these to internal
-types for the state objects.</p>
-<p>The <strong>process</strong> and <strong>tryagain</strong> methods have access to a callback
-function and handle (called a “rock”) which can be used to get
-additional information about the current request, including the
-expected enctype of the AS reply, the FAST armor key, and the client
-long-term key (prompting for the user password if necessary). A
-callback can also be used to replace the AS reply key if the
-preauthentication mechanism computes one.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Client preauthentication interface (clpreauth)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="general.html" title="General plugin concepts"
- >previous</a> |
- <a href="kdcpreauth.html" title="KDC preauthentication interface (kdcpreauth)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Client preauthentication interface (clpreauth)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>General plugin concepts — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Client preauthentication interface (clpreauth)" href="clpreauth.html" />
- <link rel="prev" title="For plugin module developers" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="For plugin module developers"
- accesskey="P">previous</a> |
- <a href="clpreauth.html" title="Client preauthentication interface (clpreauth)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__General plugin concepts">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="general-plugin-concepts">
-<h1>General plugin concepts<a class="headerlink" href="#general-plugin-concepts" title="Permalink to this headline">¶</a></h1>
-<p>A krb5 dynamic plugin module is a Unix shared object or Windows DLL.
-Typically, the source code for a dynamic plugin module should live in
-its own project with a build system using <a class="reference external" href="https://www.gnu.org/software/automake/">automake</a> and <a class="reference external" href="https://www.gnu.org/software/libtool/">libtool</a>, or
-tools with similar functionality.</p>
-<p>A plugin module must define a specific symbol name, which depends on
-the pluggable interface and module name. For most pluggable
-interfaces, the exported symbol is a function named
-<code class="docutils literal"><span class="pre">INTERFACE_MODULE_initvt</span></code>, where <em>INTERFACE</em> is the name of the
-pluggable interface and <em>MODULE</em> is the name of the module. For these
-interfaces, it is possible for one shared object or DLL to implement
-multiple plugin modules, either for the same pluggable interface or
-for different ones. For example, a shared object could implement both
-KDC and client preauthentication mechanisms, by exporting functions
-named <code class="docutils literal"><span class="pre">kdcpreauth_mymech_initvt</span></code> and <code class="docutils literal"><span class="pre">clpreauth_mymech_initvt</span></code>.</p>
-<p>A plugin module implementation should include the header file
-<code class="docutils literal"><span class="pre"><krb5/INTERFACE_plugin.h></span></code>, where <em>INTERFACE</em> is the name of the
-pluggable interface. For instance, a ccselect plugin module
-implementation should use <code class="docutils literal"><span class="pre">#include</span> <span class="pre"><krb5/ccselect_plugin.h></span></code>.</p>
-<p>initvt functions have the following prototype:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">krb5_error_code</span> <span class="n">interface_modname_initvt</span><span class="p">(</span><span class="n">krb5_context</span> <span class="n">context</span><span class="p">,</span>
- <span class="nb">int</span> <span class="n">maj_ver</span><span class="p">,</span> <span class="nb">int</span> <span class="n">min_ver</span><span class="p">,</span>
- <span class="n">krb5_plugin_vtable</span> <span class="n">vtable</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>and should do the following:</p>
-<ol class="arabic simple">
-<li>Check that the supplied maj_ver argument is supported by the
-module. If it is not supported, the function should return
-KRB5_PLUGIN_VER_NOTSUPP.</li>
-<li>Cast the supplied vtable pointer to the structure type
-corresponding to the major version, as documented in the pluggable
-interface header file.</li>
-<li>Fill in the structure fields with pointers to method functions and
-static data, stopping at the field indicated by the supplied minor
-version. Fields for unimplemented optional methods can be left
-alone; it is not necessary to initialize them to NULL.</li>
-</ol>
-<p>In most cases, the context argument will not be used. The initvt
-function should not allocate memory; think of it as a glorified
-structure initializer. Each pluggable interface defines methods for
-allocating and freeing module state if doing so is necessary for the
-interface.</p>
-<p>Pluggable interfaces typically include a <strong>name</strong> field in the vtable
-structure, which should be filled in with a pointer to a string
-literal containing the module name.</p>
-<p>Here is an example of what an initvt function might look like for a
-fictional pluggable interface named fences, for a module named
-“wicker”:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">krb5_error_code</span>
-<span class="n">fences_wicker_initvt</span><span class="p">(</span><span class="n">krb5_context</span> <span class="n">context</span><span class="p">,</span> <span class="nb">int</span> <span class="n">maj_ver</span><span class="p">,</span>
- <span class="nb">int</span> <span class="n">min_ver</span><span class="p">,</span> <span class="n">krb5_plugin_vtable</span> <span class="n">vtable</span><span class="p">)</span>
-<span class="p">{</span>
- <span class="n">krb5_ccselect_vtable</span> <span class="n">vt</span><span class="p">;</span>
-
- <span class="k">if</span> <span class="p">(</span><span class="n">maj_ver</span> <span class="o">==</span> <span class="mi">1</span><span class="p">)</span> <span class="p">{</span>
- <span class="n">krb5_fences_vtable</span> <span class="n">vt</span> <span class="o">=</span> <span class="p">(</span><span class="n">krb5_fences_vtable</span><span class="p">)</span><span class="n">vtable</span><span class="p">;</span>
- <span class="n">vt</span><span class="o">-></span><span class="n">name</span> <span class="o">=</span> <span class="s2">"wicker"</span><span class="p">;</span>
- <span class="n">vt</span><span class="o">-></span><span class="n">slats</span> <span class="o">=</span> <span class="n">wicker_slats</span><span class="p">;</span>
- <span class="n">vt</span><span class="o">-></span><span class="n">braces</span> <span class="o">=</span> <span class="n">wicker_braces</span><span class="p">;</span>
- <span class="p">}</span> <span class="k">else</span> <span class="k">if</span> <span class="p">(</span><span class="n">maj_ver</span> <span class="o">==</span> <span class="mi">2</span><span class="p">)</span> <span class="p">{</span>
- <span class="n">krb5_fences_vtable_v2</span> <span class="n">vt</span> <span class="o">=</span> <span class="p">(</span><span class="n">krb5_fences_vtable_v2</span><span class="p">)</span><span class="n">vtable</span><span class="p">;</span>
- <span class="n">vt</span><span class="o">-></span><span class="n">name</span> <span class="o">=</span> <span class="s2">"wicker"</span><span class="p">;</span>
- <span class="n">vt</span><span class="o">-></span><span class="n">material</span> <span class="o">=</span> <span class="n">wicker_material</span><span class="p">;</span>
- <span class="n">vt</span><span class="o">-></span><span class="n">construction</span> <span class="o">=</span> <span class="n">wicker_construction</span><span class="p">;</span>
- <span class="k">if</span> <span class="p">(</span><span class="n">min_ver</span> <span class="o"><</span> <span class="mi">2</span><span class="p">)</span>
- <span class="k">return</span> <span class="mi">0</span><span class="p">;</span>
- <span class="n">vt</span><span class="o">-></span><span class="n">footing</span> <span class="o">=</span> <span class="n">wicker_footing</span><span class="p">;</span>
- <span class="k">if</span> <span class="p">(</span><span class="n">min_ver</span> <span class="o"><</span> <span class="mi">3</span><span class="p">)</span>
- <span class="k">return</span> <span class="mi">0</span><span class="p">;</span>
- <span class="n">vt</span><span class="o">-></span><span class="n">appearance</span> <span class="o">=</span> <span class="n">wicker_appearance</span><span class="p">;</span>
- <span class="p">}</span> <span class="k">else</span> <span class="p">{</span>
- <span class="k">return</span> <span class="n">KRB5_PLUGIN_VER_NOTSUPP</span><span class="p">;</span>
- <span class="p">}</span>
- <span class="k">return</span> <span class="mi">0</span><span class="p">;</span>
-<span class="p">}</span>
-</pre></div>
-</div>
-<div class="section" id="logging-from-kdc-and-kadmind-plugin-modules">
-<h2>Logging from KDC and kadmind plugin modules<a class="headerlink" href="#logging-from-kdc-and-kadmind-plugin-modules" title="Permalink to this headline">¶</a></h2>
-<p>Plugin modules for the KDC or kadmind daemons can write to the
-configured logging outputs (see <a class="reference internal" href="../admin/conf_files/kdc_conf.html#logging"><span class="std std-ref">[logging]</span></a>) by calling the
-<strong>com_err</strong> function. The first argument (<em>whoami</em>) is ignored. If
-the second argument (<em>code</em>) is zero, the formatted message is logged
-at informational severity; otherwise, the formatted message is logged
-at error severity and includes the error message for the supplied
-code. Here are examples:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">com_err</span><span class="p">(</span><span class="s2">""</span><span class="p">,</span> <span class="mi">0</span><span class="p">,</span> <span class="s2">"Client message contains </span><span class="si">%d</span><span class="s2"> items"</span><span class="p">,</span> <span class="n">nitems</span><span class="p">);</span>
-<span class="n">com_err</span><span class="p">(</span><span class="s2">""</span><span class="p">,</span> <span class="n">retval</span><span class="p">,</span> <span class="s2">"while decoding client message"</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>(The behavior described above is new in release 1.17. In prior
-releases, the <em>whoami</em> argument is included for some logging output
-types, the logged message does not include the usual header for some
-output types, and the severity for syslog outputs is configured as
-part of the logging specification, defaulting to error severity.)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">General plugin concepts</a><ul>
-<li><a class="reference internal" href="#logging-from-kdc-and-kadmind-plugin-modules">Logging from KDC and kadmind plugin modules</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2 current"><a class="current reference internal" href="#">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="For plugin module developers"
- >previous</a> |
- <a href="clpreauth.html" title="Client preauthentication interface (clpreauth)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__General plugin concepts">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>GSSAPI mechanism interface — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Internal pluggable interfaces" href="internal.html" />
- <link rel="prev" title="Configuration interface (profile)" href="profile.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="profile.html" title="Configuration interface (profile)"
- accesskey="P">previous</a> |
- <a href="internal.html" title="Internal pluggable interfaces"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__GSSAPI mechanism interface">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="gssapi-mechanism-interface">
-<h1>GSSAPI mechanism interface<a class="headerlink" href="#gssapi-mechanism-interface" title="Permalink to this headline">¶</a></h1>
-<p>The GSSAPI library in MIT krb5 can load mechanism modules to augment
-the set of built-in mechanisms.</p>
-<p>A mechanism module is a Unix shared object or Windows DLL, built
-separately from the krb5 tree. Modules are loaded according to the
-GSS mechanism config files described in <a class="reference internal" href="../admin/host_config.html#gssapi-plugin-config"><span class="std std-ref">GSSAPI mechanism modules</span></a>.</p>
-<p>For the most part, a GSSAPI mechanism module exports the same
-functions as would a GSSAPI implementation itself, with the same
-function signatures. The mechanism selection layer within the GSSAPI
-library (called the “mechglue”) will dispatch calls from the
-application to the module if the module’s mechanism is requested. If
-a module does not wish to implement a GSSAPI extension, it can simply
-refrain from exporting it, and the mechglue will fail gracefully if
-the application calls that function.</p>
-<p>The mechglue does not invoke a module’s <strong>gss_add_cred</strong>,
-<strong>gss_add_cred_from</strong>, <strong>gss_add_cred_impersonate_name</strong>, or
-<strong>gss_add_cred_with_password</strong> function. A mechanism only needs to
-implement the “acquire” variants of those functions.</p>
-<p>A module does not need to coordinate its minor status codes with those
-of other mechanisms. If the mechglue detects conflicts, it will map
-the mechanism’s status codes onto unique values, and then map them
-back again when <strong>gss_display_status</strong> is called.</p>
-<div class="section" id="negoex-modules">
-<h2>NegoEx modules<a class="headerlink" href="#negoex-modules" title="Permalink to this headline">¶</a></h2>
-<p>Some Windows GSSAPI mechanisms can only be negotiated via a Microsoft
-extension to SPNEGO called NegoEx. Beginning with release 1.18,
-mechanism modules can support NegoEx as follows:</p>
-<ul class="simple">
-<li>Implement the gssspi_query_meta_data(), gssspi_exchange_meta_data(),
-and gssspi_query_mechanism_info() SPIs declared in
-<code class="docutils literal"><span class="pre"><gssapi/gssapi_ext.h></span></code>.</li>
-<li>Implement gss_inquire_sec_context_by_oid() and answer the
-<strong>GSS_C_INQ_NEGOEX_KEY</strong> and <strong>GSS_C_INQ_NEGOEX_VERIFY_KEY</strong> OIDs
-to provide the checksum keys for outgoing and incoming checksums,
-respectively. The answer must be in two buffers: the first buffer
-contains the key contents, and the second buffer contains the key
-encryption type as a four-byte little-endian integer.</li>
-</ul>
-<p>By default, NegoEx mechanisms will not be directly negotiated via
-SPNEGO. If direct SPNEGO negotiation is required for
-interoperability, implement gss_inquire_attrs_for_mech() and assert
-the GSS_C_MA_NEGOEX_AND_SPNEGO attribute (along with any applicable
-RFC 5587 attributes).</p>
-</div>
-<div class="section" id="interposer-modules">
-<h2>Interposer modules<a class="headerlink" href="#interposer-modules" title="Permalink to this headline">¶</a></h2>
-<p>The mechglue also supports a kind of loadable module, called an
-interposer module, which intercepts calls to existing mechanisms
-rather than implementing a new mechanism.</p>
-<p>An interposer module must export the symbol <strong>gss_mech_interposer</strong>
-with the following signature:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">gss_OID_set</span> <span class="n">gss_mech_interposer</span><span class="p">(</span><span class="n">gss_OID</span> <span class="n">mech_type</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>This function is invoked with the OID of the interposer mechanism as
-specified in the mechanism config file, and returns a set of mechanism
-OIDs to be interposed. The returned OID set must have been created
-using the mechglue’s gss_create_empty_oid_set and
-gss_add_oid_set_member functions.</p>
-<p>An interposer module must use the prefix <code class="docutils literal"><span class="pre">gssi_</span></code> for the GSSAPI
-functions it exports, instead of the prefix <code class="docutils literal"><span class="pre">gss_</span></code>. In most cases,
-unexported <code class="docutils literal"><span class="pre">gssi_</span></code> functions will result in failure from their
-corresponding <code class="docutils literal"><span class="pre">gss_</span></code> calls.</p>
-<p>An interposer module can link against the GSSAPI library in order to
-make calls to the original mechanism. To do so, it must specify a
-special mechanism OID which is the concatention of the interposer’s
-own OID byte string and the original mechanism’s OID byte string.</p>
-<p>Functions that do not accept a mechanism argument directly require no
-special handling, with the following exceptions:</p>
-<p>Since <strong>gss_accept_sec_context</strong> does not accept a mechanism argument,
-an interposer mechanism must, in order to invoke the original
-mechanism’s function, acquire a credential for the concatenated OID
-and pass that as the <em>verifier_cred_handle</em> parameter.</p>
-<p>Since <strong>gss_import_name</strong>, <strong>gss_import_cred</strong>, and
-<strong>gss_import_sec_context</strong> do not accept mechanism parameters, the SPI
-has been extended to include variants which do. This allows the
-interposer module to know which mechanism should be used to interpret
-the token. These functions have the following signatures:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">OM_uint32</span> <span class="n">gssi_import_sec_context_by_mech</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_OID</span> <span class="n">desired_mech</span><span class="p">,</span> <span class="n">gss_buffer_t</span> <span class="n">interprocess_token</span><span class="p">,</span>
- <span class="n">gss_ctx_id_t</span> <span class="o">*</span><span class="n">context_handle</span><span class="p">);</span>
-
-<span class="n">OM_uint32</span> <span class="n">gssi_import_name_by_mech</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_OID</span> <span class="n">mech_type</span><span class="p">,</span> <span class="n">gss_buffer_t</span> <span class="n">input_name_buffer</span><span class="p">,</span>
- <span class="n">gss_OID</span> <span class="n">input_name_type</span><span class="p">,</span> <span class="n">gss_name_t</span> <span class="n">output_name</span><span class="p">);</span>
-
-<span class="n">OM_uint32</span> <span class="n">gssi_import_cred_by_mech</span><span class="p">(</span><span class="n">OM_uint32</span> <span class="o">*</span><span class="n">minor_status</span><span class="p">,</span>
- <span class="n">gss_OID</span> <span class="n">mech_type</span><span class="p">,</span> <span class="n">gss_buffer_t</span> <span class="n">token</span><span class="p">,</span>
- <span class="n">gss_cred_id_t</span> <span class="o">*</span><span class="n">cred_handle</span><span class="p">);</span>
-</pre></div>
-</div>
-<p>To re-enter the original mechanism when importing tokens for the above
-functions, the interposer module must wrap the mechanism token in the
-mechglue’s format, using the concatenated OID (except in
-<strong>gss_import_name</strong>). The mechglue token formats are:</p>
-<ul class="simple">
-<li>For <strong>gss_import_sec_context</strong>, a four-byte OID length in big-endian
-order, followed by the concatenated OID, followed by the mechanism
-token.</li>
-<li>For <strong>gss_import_name</strong>, the bytes 04 01, followed by a two-byte OID
-length in big-endian order, followed by the mechanism OID, followed
-by a four-byte token length in big-endian order, followed by the
-mechanism token. Unlike most uses of OIDs in the API, the mechanism
-OID encoding must include the DER tag and length for an object
-identifier (06 followed by the DER length of the OID byte string),
-and this prefix must be included in the two-byte OID length.
-input_name_type must also be set to GSS_C_NT_EXPORT_NAME.</li>
-<li>For <strong>gss_import_cred</strong>, a four-byte OID length in big-endian order,
-followed by the concatenated OID, followed by a four-byte token
-length in big-endian order, followed by the mechanism token. This
-sequence may be repeated multiple times.</li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">GSSAPI mechanism interface</a><ul>
-<li><a class="reference internal" href="#negoex-modules">NegoEx modules</a></li>
-<li><a class="reference internal" href="#interposer-modules">Interposer modules</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="profile.html" title="Configuration interface (profile)"
- >previous</a> |
- <a href="internal.html" title="Internal pluggable interfaces"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__GSSAPI mechanism interface">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Host-to-realm interface (hostrealm) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Local authorization interface (localauth)" href="localauth.html" />
- <link rel="prev" title="kadmin authorization interface (kadm5_auth)" href="kadm5_auth.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kadm5_auth.html" title="kadmin authorization interface (kadm5_auth)"
- accesskey="P">previous</a> |
- <a href="localauth.html" title="Local authorization interface (localauth)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Host-to-realm interface (hostrealm)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="host-to-realm-interface-hostrealm">
-<span id="hostrealm-plugin"></span><h1>Host-to-realm interface (hostrealm)<a class="headerlink" href="#host-to-realm-interface-hostrealm" title="Permalink to this headline">¶</a></h1>
-<p>The host-to-realm interface was first introduced in release 1.12. It
-allows modules to control the local mapping of hostnames to realm
-names as well as the default realm. For a detailed description of the
-hostrealm interface, see the header file
-<code class="docutils literal"><span class="pre"><krb5/hostrealm_plugin.h></span></code>.</p>
-<p>Although the mapping methods in the hostrealm interface return a list
-of one or more realms, only the first realm in the list is currently
-used by callers. Callers may begin using later responses in the
-future.</p>
-<p>Any mapping method may return KRB5_PLUGIN_NO_HANDLE to defer
-processing to a later module.</p>
-<p>A module can create and destroy per-library-context state objects
-using the <strong>init</strong> and <strong>fini</strong> methods. If the module does not need
-any state, it does not need to implement these methods.</p>
-<p>The optional <strong>host_realm</strong> method allows a module to determine
-authoritative realm mappings for a hostname. The first authoritative
-mapping is used in preference to KDC referrals when getting service
-credentials.</p>
-<p>The optional <strong>fallback_realm</strong> method allows a module to determine
-fallback mappings for a hostname. The first fallback mapping is tried
-if there is no authoritative mapping for a realm, and KDC referrals
-failed to produce a successful result.</p>
-<p>The optional <strong>default_realm</strong> method allows a module to determine the
-local default realm.</p>
-<p>If a module implements any of the above methods, it must also
-implement <strong>free_list</strong> to ensure that memory is allocated and
-deallocated consistently.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Host-to-realm interface (hostrealm)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kadm5_auth.html" title="kadmin authorization interface (kadm5_auth)"
- >previous</a> |
- <a href="localauth.html" title="Local authorization interface (localauth)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Host-to-realm interface (hostrealm)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>For plugin module developers — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="General plugin concepts" href="general.html" />
- <link rel="prev" title="krb524_init_ets" href="../appdev/refs/macros/krb524_init_ets.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../appdev/refs/macros/krb524_init_ets.html" title="krb524_init_ets"
- accesskey="P">previous</a> |
- <a href="general.html" title="General plugin concepts"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__For plugin module developers">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="for-plugin-module-developers">
-<h1>For plugin module developers<a class="headerlink" href="#for-plugin-module-developers" title="Permalink to this headline">¶</a></h1>
-<p>Kerberos plugin modules allow increased control over MIT krb5 library
-and server behavior. This guide describes how to create dynamic
-plugin modules and the currently available pluggable interfaces.</p>
-<p>See <a class="reference internal" href="../admin/host_config.html#plugin-config"><span class="std std-ref">Plugin module configuration</span></a> for information on how to register dynamic
-plugin modules and how to enable and disable modules via
-<a class="reference internal" href="../admin/conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>.</p>
-<div class="section" id="contents">
-<h2>Contents<a class="headerlink" href="#contents" title="Permalink to this headline">¶</a></h2>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="general.html">General plugin concepts</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="general.html#logging-from-kdc-and-kadmind-plugin-modules">Logging from KDC and kadmind plugin modules</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html#negoex-modules">NegoEx modules</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html#interposer-modules">Interposer modules</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="internal.html#kerberos-database-interface-kdb">Kerberos database interface (KDB)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html#authorization-data-interface-authdata">Authorization data interface (authdata)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">For plugin module developers</a><ul>
-<li><a class="reference internal" href="#contents">Contents</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="current reference internal" href="#">For plugin module developers</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../appdev/refs/macros/krb524_init_ets.html" title="krb524_init_ets"
- >previous</a> |
- <a href="general.html" title="General plugin concepts"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__For plugin module developers">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Internal pluggable interfaces — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="PKINIT certificate authorization interface (certauth)" href="certauth.html" />
- <link rel="prev" title="GSSAPI mechanism interface" href="gssapi.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="gssapi.html" title="GSSAPI mechanism interface"
- accesskey="P">previous</a> |
- <a href="certauth.html" title="PKINIT certificate authorization interface (certauth)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Internal pluggable interfaces">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="internal-pluggable-interfaces">
-<h1>Internal pluggable interfaces<a class="headerlink" href="#internal-pluggable-interfaces" title="Permalink to this headline">¶</a></h1>
-<p>Following are brief discussions of pluggable interfaces which have not
-yet been made public. These interfaces are functional, but the
-interfaces are likely to change in incompatible ways from release to
-release. In some cases, it may be necessary to copy header files from
-the krb5 source tree to use an internal interface. Use these with
-care, and expect to need to update your modules for each new release
-of MIT krb5.</p>
-<div class="section" id="kerberos-database-interface-kdb">
-<h2>Kerberos database interface (KDB)<a class="headerlink" href="#kerberos-database-interface-kdb" title="Permalink to this headline">¶</a></h2>
-<p>A KDB module implements a database back end for KDC principal and
-policy information, and can also control many aspects of KDC behavior.
-For a full description of the interface, see the header file
-<code class="docutils literal"><span class="pre"><kdb.h></span></code>.</p>
-<p>The KDB pluggable interface is often referred to as the DAL (Database
-Access Layer).</p>
-</div>
-<div class="section" id="authorization-data-interface-authdata">
-<h2>Authorization data interface (authdata)<a class="headerlink" href="#authorization-data-interface-authdata" title="Permalink to this headline">¶</a></h2>
-<p>The authdata interface allows a module to provide (from the KDC) or
-consume (in application servers) authorization data of types beyond
-those handled by the core MIT krb5 code base. The interface is
-defined in the header file <code class="docutils literal"><span class="pre"><krb5/authdata_plugin.h></span></code>, which is not
-installed by the build.</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Internal pluggable interfaces</a><ul>
-<li><a class="reference internal" href="#kerberos-database-interface-kdb">Kerberos database interface (KDB)</a></li>
-<li><a class="reference internal" href="#authorization-data-interface-authdata">Authorization data interface (authdata)</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="gssapi.html" title="GSSAPI mechanism interface"
- >previous</a> |
- <a href="certauth.html" title="PKINIT certificate authorization interface (certauth)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Internal pluggable interfaces">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kadmin authorization interface (kadm5_auth) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Host-to-realm interface (hostrealm)" href="hostrealm.html" />
- <link rel="prev" title="KADM5 hook interface (kadm5_hook)" href="kadm5_hook.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kadm5_hook.html" title="KADM5 hook interface (kadm5_hook)"
- accesskey="P">previous</a> |
- <a href="hostrealm.html" title="Host-to-realm interface (hostrealm)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kadmin authorization interface (kadm5_auth)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kadmin-authorization-interface-kadm5-auth">
-<span id="kadm5-auth-plugin"></span><h1>kadmin authorization interface (kadm5_auth)<a class="headerlink" href="#kadmin-authorization-interface-kadm5-auth" title="Permalink to this headline">¶</a></h1>
-<p>The kadm5_auth interface (new in release 1.16) allows modules to
-determine whether a client principal is authorized to perform an
-operation in the kadmin protocol, and to apply restrictions to
-principal operations. For a detailed description of the kadm5_auth
-interface, see the header file <code class="docutils literal"><span class="pre"><krb5/kadm5_auth_plugin.h></span></code>.</p>
-<p>A module can create and destroy per-process state objects by
-implementing the <strong>init</strong> and <strong>fini</strong> methods. State objects have
-the type kadm5_auth_modinfo, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object.</p>
-<p>The kadm5_auth interface has one method for each kadmin operation,
-with parameters specific to the operation. Each method can return
-either 0 to authorize access, KRB5_PLUGIN_NO_HANDLE to defer the
-decision to other modules, or another error (canonically EPERM) to
-authoritatively deny access. Access is granted if at least one module
-grants access and no module authoritatively denies access.</p>
-<p>The <strong>addprinc</strong> and <strong>modprinc</strong> methods can also impose restrictions
-on the principal operation by returning a <code class="docutils literal"><span class="pre">struct</span>
-<span class="pre">kadm5_auth_restrictions</span></code> object. The module should also implement
-the <strong>free_restrictions</strong> method if it dynamically allocates
-restrictions objects for principal operations.</p>
-<p>kadm5_auth modules can optionally inspect principal or policy objects.
-To do this, the module must also include <code class="docutils literal"><span class="pre"><kadm5/admin.h></span></code> to gain
-access to the structure definitions for those objects. As the kadmin
-interface is explicitly not as stable as other public interfaces,
-modules which do this may not retain compatibility across releases.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kadmin authorization interface (kadm5_auth)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kadm5_hook.html" title="KADM5 hook interface (kadm5_hook)"
- >previous</a> |
- <a href="hostrealm.html" title="Host-to-realm interface (hostrealm)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kadmin authorization interface (kadm5_auth)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KADM5 hook interface (kadm5_hook) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="kadmin authorization interface (kadm5_auth)" href="kadm5_auth.html" />
- <link rel="prev" title="Password quality interface (pwqual)" href="pwqual.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="pwqual.html" title="Password quality interface (pwqual)"
- accesskey="P">previous</a> |
- <a href="kadm5_auth.html" title="kadmin authorization interface (kadm5_auth)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KADM5 hook interface (kadm5_hook)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kadm5-hook-interface-kadm5-hook">
-<span id="kadm5-hook-plugin"></span><h1>KADM5 hook interface (kadm5_hook)<a class="headerlink" href="#kadm5-hook-interface-kadm5-hook" title="Permalink to this headline">¶</a></h1>
-<p>The kadm5_hook interface allows modules to perform actions when
-changes are made to the Kerberos database through <a class="reference internal" href="../admin/admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>.
-For a detailed description of the kadm5_hook interface, see the header
-file <code class="docutils literal"><span class="pre"><krb5/kadm5_hook_plugin.h></span></code>.</p>
-<p>The kadm5_hook interface has five primary methods: <strong>chpass</strong>,
-<strong>create</strong>, <strong>modify</strong>, <strong>remove</strong>, and <strong>rename</strong>. (The <strong>rename</strong>
-method was introduced in release 1.14.) Each of these methods is
-called twice when the corresponding administrative action takes place,
-once before the action is committed and once afterwards. A module can
-prevent the action from taking place by returning an error code during
-the pre-commit stage.</p>
-<p>A module can create and destroy per-process state objects by
-implementing the <strong>init</strong> and <strong>fini</strong> methods. State objects have
-the type kadm5_hook_modinfo, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object.</p>
-<p>Because the kadm5_hook interface is tied closely to the kadmin
-interface (which is explicitly unstable), it may not remain as stable
-across versions as other public pluggable interfaces.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KADM5 hook interface (kadm5_hook)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="pwqual.html" title="Password quality interface (pwqual)"
- >previous</a> |
- <a href="kadm5_auth.html" title="kadmin authorization interface (kadm5_auth)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KADM5 hook interface (kadm5_hook)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC policy interface (kdcpolicy) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Building Kerberos V5" href="../build/index.html" />
- <link rel="prev" title="PKINIT certificate authorization interface (certauth)" href="certauth.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="certauth.html" title="PKINIT certificate authorization interface (certauth)"
- accesskey="P">previous</a> |
- <a href="../build/index.html" title="Building Kerberos V5"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC policy interface (kdcpolicy)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-policy-interface-kdcpolicy">
-<span id="kdcpolicy-plugin"></span><h1>KDC policy interface (kdcpolicy)<a class="headerlink" href="#kdc-policy-interface-kdcpolicy" title="Permalink to this headline">¶</a></h1>
-<p>The kdcpolicy interface was first introduced in release 1.16. It
-allows modules to veto otherwise valid AS and TGS requests or restrict
-the lifetime and renew time of the resulting ticket. For a detailed
-description of the kdcpolicy interface, see the header file
-<code class="docutils literal"><span class="pre"><krb5/kdcpolicy_plugin.h></span></code>.</p>
-<p>The optional <strong>check_as</strong> and <strong>check_tgs</strong> functions allow the module
-to perform access control. Additionally, a module can create and
-destroy module data with the <strong>init</strong> and <strong>fini</strong> methods. Module
-data objects last for the lifetime of the KDC process, and are
-provided to all other methods. The data has the type
-krb5_kdcpolicy_moddata, which should be cast to the appropriate
-internal type.</p>
-<p>kdcpolicy modules can optionally inspect principal entries. To do
-this, the module must also include <code class="docutils literal"><span class="pre"><kdb.h></span></code> to gain access to the
-principal entry structure definition. As the KDB interface is
-explicitly not as stable as other public interfaces, modules which do
-this may not retain compatibility across releases.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="certauth.html" title="PKINIT certificate authorization interface (certauth)"
- >previous</a> |
- <a href="../build/index.html" title="Building Kerberos V5"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC policy interface (kdcpolicy)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>KDC preauthentication interface (kdcpreauth) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Credential cache selection interface (ccselect)" href="ccselect.html" />
- <link rel="prev" title="Client preauthentication interface (clpreauth)" href="clpreauth.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="clpreauth.html" title="Client preauthentication interface (clpreauth)"
- accesskey="P">previous</a> |
- <a href="ccselect.html" title="Credential cache selection interface (ccselect)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC preauthentication interface (kdcpreauth)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdc-preauthentication-interface-kdcpreauth">
-<h1>KDC preauthentication interface (kdcpreauth)<a class="headerlink" href="#kdc-preauthentication-interface-kdcpreauth" title="Permalink to this headline">¶</a></h1>
-<p>The kdcpreauth interface allows the addition of KDC support for
-preauthentication mechanisms beyond those included in the core MIT
-krb5 code base. For a detailed description of the kdcpreauth
-interface, see the header file <code class="docutils literal"><span class="pre"><krb5/kdcpreauth_plugin.h></span></code> (or
-<code class="docutils literal"><span class="pre"><krb5/preauth_plugin.h></span></code> before release 1.12).</p>
-<p>A kdcpreauth module is generally responsible for:</p>
-<ul class="simple">
-<li>Supplying a list of preauth type numbers used by the module in the
-<strong>pa_type_list</strong> field of the vtable structure.</li>
-<li>Indicating what kind of preauthentication mechanism it implements,
-with the <strong>flags</strong> method. If the mechanism computes a new reply
-key, it must specify the <code class="docutils literal"><span class="pre">PA_REPLACES_KEY</span></code> flag. If the mechanism
-is generally only used with hardware tokens, the <code class="docutils literal"><span class="pre">PA_HARDWARE</span></code>
-flag allows the mechanism to work with principals which have the
-<strong>requires_hwauth</strong> flag set.</li>
-<li>Producing a padata value to be sent with a preauth_required error,
-with the <strong>edata</strong> method.</li>
-<li>Examining a padata value sent by a client and verifying that it
-proves knowledge of the appropriate client credential information.
-This is done with the <strong>verify</strong> method.</li>
-<li>Producing a padata response value for the client, and possibly
-computing a reply key. This is done with the <strong>return_padata</strong>
-method.</li>
-</ul>
-<p>A module can create and destroy per-KDC state objects by implementing
-the <strong>init</strong> and <strong>fini</strong> methods. Per-KDC state objects have the
-type krb5_kdcpreauth_moddata, which is an abstract pointer types. A
-module should typically cast this to an internal type for the state
-object.</p>
-<p>A module can create a per-request state object by returning one in the
-<strong>verify</strong> method, receiving it in the <strong>return_padata</strong> method, and
-destroying it in the <strong>free_modreq</strong> method. Note that these state
-objects only apply to the processing of a single AS request packet,
-not to an entire authentication exchange (since an authentication
-exchange may remain unfinished by the client or may involve multiple
-different KDC hosts). Per-request state objects have the type
-krb5_kdcpreauth_modreq, which is an abstract pointer type.</p>
-<p>The <strong>edata</strong>, <strong>verify</strong>, and <strong>return_padata</strong> methods have access
-to a callback function and handle (called a “rock”) which can be used
-to get additional information about the current request, including the
-maximum allowable clock skew, the client’s long-term keys, the
-DER-encoded request body, the FAST armor key, string attributes on the
-client’s database entry, and the client’s database entry itself. The
-<strong>verify</strong> method can assert one or more authentication indicators to
-be included in the issued ticket using the <code class="docutils literal"><span class="pre">add_auth_indicator</span></code>
-callback (new in release 1.14).</p>
-<p>A module can generate state information to be included with the next
-client request using the <code class="docutils literal"><span class="pre">set_cookie</span></code> callback (new in release
-1.14). On the next request, the module can read this state
-information using the <code class="docutils literal"><span class="pre">get_cookie</span></code> callback. Cookie information is
-encrypted, timestamped, and transmitted to the client in a
-<code class="docutils literal"><span class="pre">PA-FX-COOKIE</span></code> pa-data item. Older clients may not support cookies
-and therefore may not transmit the cookie in the next request; in this
-case, <code class="docutils literal"><span class="pre">get_cookie</span></code> will not yield the saved information.</p>
-<p>If a module implements a mechanism which requires multiple round
-trips, its <strong>verify</strong> method can respond with the code
-<code class="docutils literal"><span class="pre">KRB5KDC_ERR_MORE_PREAUTH_DATA_REQUIRED</span></code> and a list of pa-data in
-the <em>e_data</em> parameter to be processed by the client.</p>
-<p>The <strong>edata</strong> and <strong>verify</strong> methods can be implemented
-asynchronously. Because of this, they do not return values directly
-to the caller, but must instead invoke responder functions with their
-results. A synchronous implementation can invoke the responder
-function immediately. An asynchronous implementation can use the
-callback to get an event context for use with the <a class="reference external" href="https://fedorahosted.org/libverto/">libverto</a> API.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">KDC preauthentication interface (kdcpreauth)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="clpreauth.html" title="Client preauthentication interface (clpreauth)"
- >previous</a> |
- <a href="ccselect.html" title="Credential cache selection interface (ccselect)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__KDC preauthentication interface (kdcpreauth)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Local authorization interface (localauth) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Server location interface (locate)" href="locate.html" />
- <link rel="prev" title="Host-to-realm interface (hostrealm)" href="hostrealm.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="hostrealm.html" title="Host-to-realm interface (hostrealm)"
- accesskey="P">previous</a> |
- <a href="locate.html" title="Server location interface (locate)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Local authorization interface (localauth)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="local-authorization-interface-localauth">
-<span id="localauth-plugin"></span><h1>Local authorization interface (localauth)<a class="headerlink" href="#local-authorization-interface-localauth" title="Permalink to this headline">¶</a></h1>
-<p>The localauth interface was first introduced in release 1.12. It
-allows modules to control the relationship between Kerberos principals
-and local system accounts. When an application calls
-<a class="reference internal" href="../appdev/refs/api/krb5_kuserok.html#c.krb5_kuserok" title="krb5_kuserok"><code class="xref c c-func docutils literal"><span class="pre">krb5_kuserok()</span></code></a> or <a class="reference internal" href="../appdev/refs/api/krb5_aname_to_localname.html#c.krb5_aname_to_localname" title="krb5_aname_to_localname"><code class="xref c c-func docutils literal"><span class="pre">krb5_aname_to_localname()</span></code></a>, localauth
-modules are consulted to determine the result. For a detailed
-description of the localauth interface, see the header file
-<code class="docutils literal"><span class="pre"><krb5/localauth_plugin.h></span></code>.</p>
-<p>A module can create and destroy per-library-context state objects
-using the <strong>init</strong> and <strong>fini</strong> methods. If the module does not need
-any state, it does not need to implement these methods.</p>
-<p>The optional <strong>userok</strong> method allows a module to control the behavior
-of <a class="reference internal" href="../appdev/refs/api/krb5_kuserok.html#c.krb5_kuserok" title="krb5_kuserok"><code class="xref c c-func docutils literal"><span class="pre">krb5_kuserok()</span></code></a>. The module receives the authenticated name
-and the local account name as inputs, and can return either 0 to
-authorize access, KRB5_PLUGIN_NO_HANDLE to defer the decision to other
-modules, or another error (canonically EPERM) to authoritatively deny
-access. Access is granted if at least one module grants access and no
-module authoritatively denies access.</p>
-<p>The optional <strong>an2ln</strong> method can work in two different ways. If the
-module sets an array of uppercase type names in <strong>an2ln_types</strong>, then
-the module’s <strong>an2ln</strong> method will only be invoked by
-<a class="reference internal" href="../appdev/refs/api/krb5_aname_to_localname.html#c.krb5_aname_to_localname" title="krb5_aname_to_localname"><code class="xref c c-func docutils literal"><span class="pre">krb5_aname_to_localname()</span></code></a> if an <strong>auth_to_local</strong> value in
-<a class="reference internal" href="../admin/conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> refers to one of the module’s types. In this
-case, the <em>type</em> and <em>residual</em> arguments will give the type name and
-residual string of the <strong>auth_to_local</strong> value.</p>
-<p>If the module does not set <strong>an2ln_types</strong> but does implement
-<strong>an2ln</strong>, the module’s <strong>an2ln</strong> method will be invoked for all
-<a class="reference internal" href="../appdev/refs/api/krb5_aname_to_localname.html#c.krb5_aname_to_localname" title="krb5_aname_to_localname"><code class="xref c c-func docutils literal"><span class="pre">krb5_aname_to_localname()</span></code></a> operations unless an earlier module
-determines a mapping, with <em>type</em> and <em>residual</em> set to NULL. The
-module can return KRB5_LNAME_NO_TRANS to defer mapping to later
-modules.</p>
-<p>If a module implements <strong>an2ln</strong>, it must also implement
-<strong>free_string</strong> to ensure that memory is allocated and deallocated
-consistently.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Local authorization interface (localauth)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="hostrealm.html" title="Host-to-realm interface (hostrealm)"
- >previous</a> |
- <a href="locate.html" title="Server location interface (locate)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Local authorization interface (localauth)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Server location interface (locate) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Configuration interface (profile)" href="profile.html" />
- <link rel="prev" title="Local authorization interface (localauth)" href="localauth.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="localauth.html" title="Local authorization interface (localauth)"
- accesskey="P">previous</a> |
- <a href="profile.html" title="Configuration interface (profile)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Server location interface (locate)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="server-location-interface-locate">
-<h1>Server location interface (locate)<a class="headerlink" href="#server-location-interface-locate" title="Permalink to this headline">¶</a></h1>
-<p>The locate interface allows modules to control how KDCs and similar
-services are located by clients. For a detailed description of the
-ccselect interface, see the header file <code class="docutils literal"><span class="pre"><krb5/locate_plugin.h></span></code>.</p>
-<p>A locate module exports a structure object of type
-krb5plugin_service_locate_ftable, with the name <code class="docutils literal"><span class="pre">service_locator</span></code>.
-The structure contains a minor version and pointers to the module’s
-methods.</p>
-<p>The primary locate method is <strong>lookup</strong>, which accepts a service type,
-realm name, desired socket type, and desired address family (which
-will be AF_UNSPEC if no specific address family is desired). The
-method should invoke the callback function once for each server
-address it wants to return, passing a socket type (SOCK_STREAM for TCP
-or SOCK_DGRAM for UDP) and socket address. The <strong>lookup</strong> method
-should return 0 if it has authoritatively determined the server
-addresses for the realm, KRB5_PLUGIN_NO_HANDLE if it wants to let
-other location mechanisms determine the server addresses, or another
-code if it experienced a failure which should abort the location
-process.</p>
-<p>A module can create and destroy per-library-context state objects by
-implementing the <strong>init</strong> and <strong>fini</strong> methods. State objects have
-the type void *, and should be cast to an internal type for the state
-object.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Server location interface (locate)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="localauth.html" title="Local authorization interface (localauth)"
- >previous</a> |
- <a href="profile.html" title="Configuration interface (profile)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Server location interface (locate)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Configuration interface (profile) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="GSSAPI mechanism interface" href="gssapi.html" />
- <link rel="prev" title="Server location interface (locate)" href="locate.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="locate.html" title="Server location interface (locate)"
- accesskey="P">previous</a> |
- <a href="gssapi.html" title="GSSAPI mechanism interface"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Configuration interface (profile)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="configuration-interface-profile">
-<span id="profile-plugin"></span><h1>Configuration interface (profile)<a class="headerlink" href="#configuration-interface-profile" title="Permalink to this headline">¶</a></h1>
-<p>The profile interface allows a module to control how krb5
-configuration information is obtained by the Kerberos library and
-applications. For a detailed description of the profile interface,
-see the header file <code class="docutils literal"><span class="pre"><profile.h></span></code>.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">The profile interface does not follow the normal conventions
-for MIT krb5 pluggable interfaces, because it is part of a
-lower-level component of the krb5 library.</p>
-</div>
-<p>As with other types of plugin modules, a profile module is a Unix
-shared object or Windows DLL, built separately from the krb5 tree.
-The krb5 library will dynamically load and use a profile plugin module
-if it reads a <code class="docutils literal"><span class="pre">module</span></code> directive at the beginning of krb5.conf, as
-described in <a class="reference internal" href="../admin/host_config.html#profile-plugin-config"><span class="std std-ref">Configuration profile modules</span></a>.</p>
-<p>A profile module exports a function named <code class="docutils literal"><span class="pre">profile_module_init</span></code>
-matching the signature of the profile_module_init_fn type. This
-function accepts a residual string, which may be used to help locate
-the configuration source. The function fills in a vtable and may also
-create a per-profile state object. If the module uses state objects,
-it should implement the <strong>copy</strong> and <strong>cleanup</strong> methods to manage
-them.</p>
-<p>A basic read-only profile module need only implement the
-<strong>get_values</strong> and <strong>free_values</strong> methods. The <strong>get_values</strong> method
-accepts a null-terminated list of C string names (e.g., an array
-containing “libdefaults”, “clockskew”, and NULL for the <strong>clockskew</strong>
-variable in the <a class="reference internal" href="../admin/conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a> section) and returns a
-null-terminated list of values, which will be cleaned up with the
-<strong>free_values</strong> method when the caller is done with them.</p>
-<p>Iterable profile modules must also define the <strong>iterator_create</strong>,
-<strong>iterator</strong>, <strong>iterator_free</strong>, and <strong>free_string</strong> methods. The
-core krb5 code does not require profiles to be iterable, but some
-applications may iterate over the krb5 profile object in order to
-present configuration interfaces.</p>
-<p>Writable profile modules must also define the <strong>writable</strong>,
-<strong>modified</strong>, <strong>update_relation</strong>, <strong>rename_section</strong>,
-<strong>add_relation</strong>, and <strong>flush</strong> methods. The core krb5 code does not
-require profiles to be writable, but some applications may write to
-the krb5 profile in order to present configuration interfaces.</p>
-<p>The following is an example of a very basic read-only profile module
-which returns a hardcoded value for the <strong>default_realm</strong> variable in
-<a class="reference internal" href="../admin/conf_files/krb5_conf.html#libdefaults"><span class="std std-ref">[libdefaults]</span></a>, and provides no other configuration information.
-(For conciseness, the example omits code for checking the return
-values of malloc and strdup.)</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="c1">#include <stdlib.h></span>
-<span class="c1">#include <string.h></span>
-<span class="c1">#include <profile.h></span>
-
-<span class="n">static</span> <span class="n">long</span>
-<span class="n">get_values</span><span class="p">(</span><span class="n">void</span> <span class="o">*</span><span class="n">cbdata</span><span class="p">,</span> <span class="n">const</span> <span class="n">char</span> <span class="o">*</span><span class="n">const</span> <span class="o">*</span><span class="n">names</span><span class="p">,</span> <span class="n">char</span> <span class="o">***</span><span class="n">values</span><span class="p">)</span>
-<span class="p">{</span>
- <span class="k">if</span> <span class="p">(</span><span class="n">names</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span> <span class="o">!=</span> <span class="n">NULL</span> <span class="o">&&</span> <span class="n">strcmp</span><span class="p">(</span><span class="n">names</span><span class="p">[</span><span class="mi">0</span><span class="p">],</span> <span class="s2">"libdefaults"</span><span class="p">)</span> <span class="o">==</span> <span class="mi">0</span> <span class="o">&&</span>
- <span class="n">names</span><span class="p">[</span><span class="mi">1</span><span class="p">]</span> <span class="o">!=</span> <span class="n">NULL</span> <span class="o">&&</span> <span class="n">strcmp</span><span class="p">(</span><span class="n">names</span><span class="p">[</span><span class="mi">1</span><span class="p">],</span> <span class="s2">"default_realm"</span><span class="p">)</span> <span class="o">==</span> <span class="mi">0</span><span class="p">)</span> <span class="p">{</span>
- <span class="o">*</span><span class="n">values</span> <span class="o">=</span> <span class="n">malloc</span><span class="p">(</span><span class="mi">2</span> <span class="o">*</span> <span class="n">sizeof</span><span class="p">(</span><span class="n">char</span> <span class="o">*</span><span class="p">));</span>
- <span class="p">(</span><span class="o">*</span><span class="n">values</span><span class="p">)[</span><span class="mi">0</span><span class="p">]</span> <span class="o">=</span> <span class="n">strdup</span><span class="p">(</span><span class="s2">"ATHENA.MIT.EDU"</span><span class="p">);</span>
- <span class="p">(</span><span class="o">*</span><span class="n">values</span><span class="p">)[</span><span class="mi">1</span><span class="p">]</span> <span class="o">=</span> <span class="n">NULL</span><span class="p">;</span>
- <span class="k">return</span> <span class="mi">0</span><span class="p">;</span>
- <span class="p">}</span>
- <span class="k">return</span> <span class="n">PROF_NO_RELATION</span><span class="p">;</span>
-<span class="p">}</span>
-
-<span class="n">static</span> <span class="n">void</span>
-<span class="n">free_values</span><span class="p">(</span><span class="n">void</span> <span class="o">*</span><span class="n">cbdata</span><span class="p">,</span> <span class="n">char</span> <span class="o">**</span><span class="n">values</span><span class="p">)</span>
-<span class="p">{</span>
- <span class="n">char</span> <span class="o">**</span><span class="n">v</span><span class="p">;</span>
-
- <span class="k">for</span> <span class="p">(</span><span class="n">v</span> <span class="o">=</span> <span class="n">values</span><span class="p">;</span> <span class="o">*</span><span class="n">v</span><span class="p">;</span> <span class="n">v</span><span class="o">++</span><span class="p">)</span>
- <span class="n">free</span><span class="p">(</span><span class="o">*</span><span class="n">v</span><span class="p">);</span>
- <span class="n">free</span><span class="p">(</span><span class="n">values</span><span class="p">);</span>
-<span class="p">}</span>
-
-<span class="n">long</span>
-<span class="n">profile_module_init</span><span class="p">(</span><span class="n">const</span> <span class="n">char</span> <span class="o">*</span><span class="n">residual</span><span class="p">,</span> <span class="n">struct</span> <span class="n">profile_vtable</span> <span class="o">*</span><span class="n">vtable</span><span class="p">,</span>
- <span class="n">void</span> <span class="o">**</span><span class="n">cb_ret</span><span class="p">);</span>
-
-<span class="n">long</span>
-<span class="n">profile_module_init</span><span class="p">(</span><span class="n">const</span> <span class="n">char</span> <span class="o">*</span><span class="n">residual</span><span class="p">,</span> <span class="n">struct</span> <span class="n">profile_vtable</span> <span class="o">*</span><span class="n">vtable</span><span class="p">,</span>
- <span class="n">void</span> <span class="o">**</span><span class="n">cb_ret</span><span class="p">)</span>
-<span class="p">{</span>
- <span class="o">*</span><span class="n">cb_ret</span> <span class="o">=</span> <span class="n">NULL</span><span class="p">;</span>
- <span class="n">vtable</span><span class="o">-></span><span class="n">get_values</span> <span class="o">=</span> <span class="n">get_values</span><span class="p">;</span>
- <span class="n">vtable</span><span class="o">-></span><span class="n">free_values</span> <span class="o">=</span> <span class="n">free_values</span><span class="p">;</span>
- <span class="k">return</span> <span class="mi">0</span><span class="p">;</span>
-<span class="p">}</span>
-</pre></div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Configuration interface (profile)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwqual.html">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="locate.html" title="Server location interface (locate)"
- >previous</a> |
- <a href="gssapi.html" title="GSSAPI mechanism interface"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Configuration interface (profile)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Password quality interface (pwqual) — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="KADM5 hook interface (kadm5_hook)" href="kadm5_hook.html" />
- <link rel="prev" title="Credential cache selection interface (ccselect)" href="ccselect.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ccselect.html" title="Credential cache selection interface (ccselect)"
- accesskey="P">previous</a> |
- <a href="kadm5_hook.html" title="KADM5 hook interface (kadm5_hook)"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Password quality interface (pwqual)">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="password-quality-interface-pwqual">
-<span id="pwqual-plugin"></span><h1>Password quality interface (pwqual)<a class="headerlink" href="#password-quality-interface-pwqual" title="Permalink to this headline">¶</a></h1>
-<p>The pwqual interface allows modules to control what passwords are
-allowed when a user changes passwords. For a detailed description of
-the pwqual interface, see the header file <code class="docutils literal"><span class="pre"><krb5/pwqual_plugin.h></span></code>.</p>
-<p>The primary pwqual method is <strong>check</strong>, which receives a password as
-input and returns success (0) or a <code class="docutils literal"><span class="pre">KADM5_PASS_Q_</span></code> failure code
-depending on whether the password is allowed. The <strong>check</strong> method
-also receives the principal name and the name of the principal’s
-password policy as input; although there is no stable interface for
-the module to obtain the fields of the password policy, it can define
-its own configuration or data store based on the policy name.</p>
-<p>A module can create and destroy per-process state objects by
-implementing the <strong>open</strong> and <strong>close</strong> methods. State objects have
-the type krb5_pwqual_moddata, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object. The <strong>open</strong> method also receives the name of the realm’s
-dictionary file (as configured by the <strong>dict_file</strong> variable in the
-<a class="reference internal" href="../admin/conf_files/kdc_conf.html#kdc-realms"><span class="std std-ref">[realms]</span></a> section of <a class="reference internal" href="../admin/conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>) if it wishes to use
-it.</p>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Password quality interface (pwqual)</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For plugin module developers</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="general.html">General plugin concepts</a></li>
-<li class="toctree-l2"><a class="reference internal" href="clpreauth.html">Client preauthentication interface (clpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpreauth.html">KDC preauthentication interface (kdcpreauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="ccselect.html">Credential cache selection interface (ccselect)</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Password quality interface (pwqual)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_hook.html">KADM5 hook interface (kadm5_hook)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kadm5_auth.html">kadmin authorization interface (kadm5_auth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="hostrealm.html">Host-to-realm interface (hostrealm)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="localauth.html">Local authorization interface (localauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="locate.html">Server location interface (locate)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="profile.html">Configuration interface (profile)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="gssapi.html">GSSAPI mechanism interface</a></li>
-<li class="toctree-l2"><a class="reference internal" href="internal.html">Internal pluggable interfaces</a></li>
-<li class="toctree-l2"><a class="reference internal" href="certauth.html">PKINIT certificate authorization interface (certauth)</a></li>
-<li class="toctree-l2"><a class="reference internal" href="kdcpolicy.html">KDC policy interface (kdcpolicy)</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ccselect.html" title="Credential cache selection interface (ccselect)"
- >previous</a> |
- <a href="kadm5_hook.html" title="KADM5 hook interface (kadm5_hook)"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Password quality interface (pwqual)">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Resources — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="search.html" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- <link rel="prev" title="Contributing to the MIT Kerberos Documentation" href="about.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="about.html" title="Contributing to the MIT Kerberos Documentation"
- accesskey="P">previous</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Resources">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="resources">
-<h1>Resources<a class="headerlink" href="#resources" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="mailing-lists">
-<h2>Mailing lists<a class="headerlink" href="#mailing-lists" title="Permalink to this headline">¶</a></h2>
-<ul class="simple">
-<li><a class="reference external" href="mailto:kerberos%40mit.edu">kerberos<span>@</span>mit<span>.</span>edu</a> is a community resource for discussion and
-questions about MIT krb5 and other Kerberos implementations. To
-subscribe to the list, please follow the instructions at
-<a class="reference external" href="https://mailman.mit.edu/mailman/listinfo/kerberos">https://mailman.mit.edu/mailman/listinfo/kerberos</a>.</li>
-<li><a class="reference external" href="mailto:krbdev%40mit.edu">krbdev<span>@</span>mit<span>.</span>edu</a> is the primary list for developers of MIT Kerberos.
-To subscribe to the list, please follow the instructions at
-<a class="reference external" href="https://mailman.mit.edu/mailman/listinfo/krbdev">https://mailman.mit.edu/mailman/listinfo/krbdev</a>.</li>
-<li><a class="reference external" href="mailto:krb5-bugs%40mit.edu">krb5-bugs<span>@</span>mit<span>.</span>edu</a> is notified when a ticket is created or updated.
-This list helps track bugs and feature requests.
-In addition, this list is used to track documentation criticism
-and recommendations for improvements.</li>
-<li><a class="reference external" href="mailto:krbcore%40mit.edu">krbcore<span>@</span>mit<span>.</span>edu</a> is a private list for the MIT krb5 core team. Send
-mail to this list if you need to contact the core team.</li>
-<li><a class="reference external" href="mailto:krbcore-security%40mit.edu">krbcore-security<span>@</span>mit<span>.</span>edu</a> is the point of contact for security problems
-with MIT Kerberos. Please use PGP-encrypted mail to report possible
-vulnerabilities to this list.</li>
-</ul>
-</div>
-<div class="section" id="irc-channels">
-<h2>IRC channels<a class="headerlink" href="#irc-channels" title="Permalink to this headline">¶</a></h2>
-<p>The IRC channel <cite>#kerberos</cite> on libera.chat is a community resource for
-general Kerberos discussion and support.</p>
-<p>The main IRC channel for MIT Kerberos development is <cite>#krbdev</cite> on
-Libera Chat.</p>
-<p>For more information about Libera Chat, see <a class="reference external" href="https://libera.chat/">https://libera.chat/</a>.</p>
-</div>
-<div class="section" id="archives">
-<h2>Archives<a class="headerlink" href="#archives" title="Permalink to this headline">¶</a></h2>
-<ul class="simple">
-<li>The archive <a class="reference external" href="https://mailman.mit.edu/pipermail/kerberos/">https://mailman.mit.edu/pipermail/kerberos/</a> contains
-past postings from the <cite>kerberos@mit.edu</cite> list.</li>
-<li>The <a class="reference external" href="https://mailman.mit.edu/pipermail/krbdev/">https://mailman.mit.edu/pipermail/krbdev/</a> contains past postings
-from the <cite>krbdev@mit.edu</cite> list.</li>
-</ul>
-</div>
-<div class="section" id="wiki">
-<h2>Wiki<a class="headerlink" href="#wiki" title="Permalink to this headline">¶</a></h2>
-<p>The wiki at <a class="reference external" href="https://k5wiki.kerberos.org/">https://k5wiki.kerberos.org/</a> contains useful information
-for developers working on the MIT Kerberos source code. Some of the
-information on the wiki may be useful for advanced users or system
-administrators.</p>
-</div>
-<div class="section" id="web-pages">
-<h2>Web pages<a class="headerlink" href="#web-pages" title="Permalink to this headline">¶</a></h2>
-<ul class="simple">
-<li><a class="reference external" href="https://web.mit.edu/kerberos/">https://web.mit.edu/kerberos/</a> is the MIT Kerberos software web page.</li>
-<li><a class="reference external" href="https://kerberos.org/">https://kerberos.org/</a> is the MIT Kerberos Consortium web page.</li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Resources</a><ul>
-<li><a class="reference internal" href="#mailing-lists">Mailing lists</a></li>
-<li><a class="reference internal" href="#irc-channels">IRC channels</a></li>
-<li><a class="reference internal" href="#archives">Archives</a></li>
-<li><a class="reference internal" href="#wiki">Wiki</a></li>
-<li><a class="reference internal" href="#web-pages">Web pages</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1 current"><a class="current reference internal" href="#">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="about.html" title="Contributing to the MIT Kerberos Documentation"
- >previous</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Resources">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Search — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: './',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="_static/jquery.js"></script>
- <script type="text/javascript" src="_static/underscore.js"></script>
- <script type="text/javascript" src="_static/doctools.js"></script>
- <script type="text/javascript" src="_static/searchtools.js"></script>
- <link rel="author" title="About these documents" href="about.html" />
- <link rel="index" title="Index" href="genindex.html" />
- <link rel="search" title="Search" href="#" />
- <link rel="copyright" title="Copyright" href="copyright.html" />
- <script type="text/javascript">
- jQuery(function() { Search.loadIndex("searchindex.js"); });
- </script>
-
- <script type="text/javascript" id="searchindexloader"></script>
-
-
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="#" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Search">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <h1 id="search-documentation">Search</h1>
- <div id="fallback" class="admonition warning">
- <script type="text/javascript">$('#fallback').hide();</script>
- <p>
- Please activate JavaScript to enable the search
- functionality.
- </p>
- </div>
- <p>
- From here you can search these documents. Enter your search
- words into the box below and click "search". Note that the search
- function will automatically search for all of the words. Pages
- containing fewer words won't appear in the result list.
- </p>
- <form action="" method="get">
- <input type="text" name="q" value="" />
- <input type="submit" value="search" />
- <span id="search-progress" style="padding-left: 10px"></span>
- </form>
-
- <div id="search-results">
-
- </div>
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
-
- <br/>
- <h2>Table of contents</h2>
- <ul>
-<li class="toctree-l1"><a class="reference internal" href="user/index.html">For users</a></li>
-<li class="toctree-l1"><a class="reference internal" href="admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="#" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="genindex.html" title="General Index"
- >index</a> |
- <a href="#" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Search">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-Search.setIndex({docnames:["about","admin/admin_commands/index","admin/admin_commands/k5srvutil","admin/admin_commands/kadmin_local","admin/admin_commands/kadmind","admin/admin_commands/kdb5_ldap_util","admin/admin_commands/kdb5_util","admin/admin_commands/kprop","admin/admin_commands/kpropd","admin/admin_commands/kproplog","admin/admin_commands/krb5kdc","admin/admin_commands/ktutil","admin/admin_commands/sserver","admin/advanced/index","admin/advanced/retiring-des","admin/appl_servers","admin/auth_indicator","admin/backup_host","admin/conf_files/index","admin/conf_files/kadm5_acl","admin/conf_files/kdc_conf","admin/conf_files/krb5_conf","admin/conf_ldap","admin/database","admin/dbtypes","admin/dictionary","admin/enctypes","admin/env_variables","admin/host_config","admin/https","admin/index","admin/install","admin/install_appl_srv","admin/install_clients","admin/install_kdc","admin/lockout","admin/otp","admin/pkinit","admin/princ_dns","admin/realm_config","admin/spake","admin/troubleshoot","admin/various_envs","appdev/gssapi","appdev/h5l_mit_apidiff","appdev/index","appdev/init_creds","appdev/princ_handle","appdev/refs/api/index","appdev/refs/api/krb5_425_conv_principal","appdev/refs/api/krb5_524_conv_principal","appdev/refs/api/krb5_524_convert_creds","appdev/refs/api/krb5_address_compare","appdev/refs/api/krb5_address_order","appdev/refs/api/krb5_address_search","appdev/refs/api/krb5_allow_weak_crypto","appdev/refs/api/krb5_aname_to_localname","appdev/refs/api/krb5_anonymous_principal","appdev/refs/api/krb5_anonymous_realm","appdev/refs/api/krb5_appdefault_boolean","appdev/refs/api/krb5_appdefault_string","appdev/refs/api/krb5_auth_con_free","appdev/refs/api/krb5_auth_con_genaddrs","appdev/refs/api/krb5_auth_con_get_checksum_func","appdev/refs/api/krb5_auth_con_getaddrs","appdev/refs/api/krb5_auth_con_getauthenticator","appdev/refs/api/krb5_auth_con_getflags","appdev/refs/api/krb5_auth_con_getkey","appdev/refs/api/krb5_auth_con_getkey_k","appdev/refs/api/krb5_auth_con_getlocalseqnumber","appdev/refs/api/krb5_auth_con_getlocalsubkey","appdev/refs/api/krb5_auth_con_getrcache","appdev/refs/api/krb5_auth_con_getrecvsubkey","appdev/refs/api/krb5_auth_con_getrecvsubkey_k","appdev/refs/api/krb5_auth_con_getremoteseqnumber","appdev/refs/api/krb5_auth_con_getremotesubkey","appdev/refs/api/krb5_auth_con_getsendsubkey","appdev/refs/api/krb5_auth_con_getsendsubkey_k","appdev/refs/api/krb5_auth_con_init","appdev/refs/api/krb5_auth_con_initivector","appdev/refs/api/krb5_auth_con_set_checksum_func","appdev/refs/api/krb5_auth_con_set_req_cksumtype","appdev/refs/api/krb5_auth_con_setaddrs","appdev/refs/api/krb5_auth_con_setflags","appdev/refs/api/krb5_auth_con_setports","appdev/refs/api/krb5_auth_con_setrcache","appdev/refs/api/krb5_auth_con_setrecvsubkey","appdev/refs/api/krb5_auth_con_setrecvsubkey_k","appdev/refs/api/krb5_auth_con_setsendsubkey","appdev/refs/api/krb5_auth_con_setsendsubkey_k","appdev/refs/api/krb5_auth_con_setuseruserkey","appdev/refs/api/krb5_build_principal","appdev/refs/api/krb5_build_principal_alloc_va","appdev/refs/api/krb5_build_principal_ext","appdev/refs/api/krb5_build_principal_va","appdev/refs/api/krb5_c_block_size","appdev/refs/api/krb5_c_checksum_length","appdev/refs/api/krb5_c_crypto_length","appdev/refs/api/krb5_c_crypto_length_iov","appdev/refs/api/krb5_c_decrypt","appdev/refs/api/krb5_c_decrypt_iov","appdev/refs/api/krb5_c_derive_prfplus","appdev/refs/api/krb5_c_encrypt","appdev/refs/api/krb5_c_encrypt_iov","appdev/refs/api/krb5_c_encrypt_length","appdev/refs/api/krb5_c_enctype_compare","appdev/refs/api/krb5_c_free_state","appdev/refs/api/krb5_c_fx_cf2_simple","appdev/refs/api/krb5_c_init_state","appdev/refs/api/krb5_c_is_coll_proof_cksum","appdev/refs/api/krb5_c_is_keyed_cksum","appdev/refs/api/krb5_c_keyed_checksum_types","appdev/refs/api/krb5_c_keylengths","appdev/refs/api/krb5_c_make_checksum","appdev/refs/api/krb5_c_make_checksum_iov","appdev/refs/api/krb5_c_make_random_key","appdev/refs/api/krb5_c_padding_length","appdev/refs/api/krb5_c_prf","appdev/refs/api/krb5_c_prf_length","appdev/refs/api/krb5_c_prfplus","appdev/refs/api/krb5_c_random_add_entropy","appdev/refs/api/krb5_c_random_make_octets","appdev/refs/api/krb5_c_random_os_entropy","appdev/refs/api/krb5_c_random_seed","appdev/refs/api/krb5_c_random_to_key","appdev/refs/api/krb5_c_string_to_key","appdev/refs/api/krb5_c_string_to_key_with_params","appdev/refs/api/krb5_c_valid_cksumtype","appdev/refs/api/krb5_c_valid_enctype","appdev/refs/api/krb5_c_verify_checksum","appdev/refs/api/krb5_c_verify_checksum_iov","appdev/refs/api/krb5_calculate_checksum","appdev/refs/api/krb5_cc_cache_match","appdev/refs/api/krb5_cc_close","appdev/refs/api/krb5_cc_copy_creds","appdev/refs/api/krb5_cc_default","appdev/refs/api/krb5_cc_default_name","appdev/refs/api/krb5_cc_destroy","appdev/refs/api/krb5_cc_dup","appdev/refs/api/krb5_cc_end_seq_get","appdev/refs/api/krb5_cc_gen_new","appdev/refs/api/krb5_cc_get_config","appdev/refs/api/krb5_cc_get_flags","appdev/refs/api/krb5_cc_get_full_name","appdev/refs/api/krb5_cc_get_name","appdev/refs/api/krb5_cc_get_principal","appdev/refs/api/krb5_cc_get_type","appdev/refs/api/krb5_cc_initialize","appdev/refs/api/krb5_cc_move","appdev/refs/api/krb5_cc_new_unique","appdev/refs/api/krb5_cc_next_cred","appdev/refs/api/krb5_cc_remove_cred","appdev/refs/api/krb5_cc_resolve","appdev/refs/api/krb5_cc_retrieve_cred","appdev/refs/api/krb5_cc_select","appdev/refs/api/krb5_cc_set_config","appdev/refs/api/krb5_cc_set_default_name","appdev/refs/api/krb5_cc_set_flags","appdev/refs/api/krb5_cc_start_seq_get","appdev/refs/api/krb5_cc_store_cred","appdev/refs/api/krb5_cc_support_switch","appdev/refs/api/krb5_cc_switch","appdev/refs/api/krb5_cccol_cursor_free","appdev/refs/api/krb5_cccol_cursor_new","appdev/refs/api/krb5_cccol_cursor_next","appdev/refs/api/krb5_cccol_have_content","appdev/refs/api/krb5_change_password","appdev/refs/api/krb5_check_clockskew","appdev/refs/api/krb5_checksum_size","appdev/refs/api/krb5_chpw_message","appdev/refs/api/krb5_cksumtype_to_string","appdev/refs/api/krb5_clear_error_message","appdev/refs/api/krb5_copy_addresses","appdev/refs/api/krb5_copy_authdata","appdev/refs/api/krb5_copy_authenticator","appdev/refs/api/krb5_copy_checksum","appdev/refs/api/krb5_copy_context","appdev/refs/api/krb5_copy_creds","appdev/refs/api/krb5_copy_data","appdev/refs/api/krb5_copy_error_message","appdev/refs/api/krb5_copy_keyblock","appdev/refs/api/krb5_copy_keyblock_contents","appdev/refs/api/krb5_copy_principal","appdev/refs/api/krb5_copy_ticket","appdev/refs/api/krb5_decode_authdata_container","appdev/refs/api/krb5_decode_ticket","appdev/refs/api/krb5_decrypt","appdev/refs/api/krb5_deltat_to_string","appdev/refs/api/krb5_eblock_enctype","appdev/refs/api/krb5_encode_authdata_container","appdev/refs/api/krb5_encrypt","appdev/refs/api/krb5_encrypt_size","appdev/refs/api/krb5_enctype_to_name","appdev/refs/api/krb5_enctype_to_string","appdev/refs/api/krb5_expand_hostname","appdev/refs/api/krb5_find_authdata","appdev/refs/api/krb5_finish_key","appdev/refs/api/krb5_finish_random_key","appdev/refs/api/krb5_free_addresses","appdev/refs/api/krb5_free_ap_rep_enc_part","appdev/refs/api/krb5_free_authdata","appdev/refs/api/krb5_free_authenticator","appdev/refs/api/krb5_free_checksum","appdev/refs/api/krb5_free_checksum_contents","appdev/refs/api/krb5_free_cksumtypes","appdev/refs/api/krb5_free_context","appdev/refs/api/krb5_free_cred_contents","appdev/refs/api/krb5_free_creds","appdev/refs/api/krb5_free_data","appdev/refs/api/krb5_free_data_contents","appdev/refs/api/krb5_free_default_realm","appdev/refs/api/krb5_free_enctypes","appdev/refs/api/krb5_free_error","appdev/refs/api/krb5_free_error_message","appdev/refs/api/krb5_free_host_realm","appdev/refs/api/krb5_free_keyblock","appdev/refs/api/krb5_free_keyblock_contents","appdev/refs/api/krb5_free_keytab_entry_contents","appdev/refs/api/krb5_free_principal","appdev/refs/api/krb5_free_string","appdev/refs/api/krb5_free_tgt_creds","appdev/refs/api/krb5_free_ticket","appdev/refs/api/krb5_free_unparsed_name","appdev/refs/api/krb5_fwd_tgt_creds","appdev/refs/api/krb5_get_credentials","appdev/refs/api/krb5_get_credentials_renew","appdev/refs/api/krb5_get_credentials_validate","appdev/refs/api/krb5_get_default_realm","appdev/refs/api/krb5_get_error_message","appdev/refs/api/krb5_get_etype_info","appdev/refs/api/krb5_get_fallback_host_realm","appdev/refs/api/krb5_get_host_realm","appdev/refs/api/krb5_get_in_tkt_with_keytab","appdev/refs/api/krb5_get_in_tkt_with_password","appdev/refs/api/krb5_get_in_tkt_with_skey","appdev/refs/api/krb5_get_init_creds_keytab","appdev/refs/api/krb5_get_init_creds_opt_alloc","appdev/refs/api/krb5_get_init_creds_opt_free","appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags","appdev/refs/api/krb5_get_init_creds_opt_init","appdev/refs/api/krb5_get_init_creds_opt_set_address_list","appdev/refs/api/krb5_get_init_creds_opt_set_anonymous","appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize","appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt","appdev/refs/api/krb5_get_init_creds_opt_set_etype_list","appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name","appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags","appdev/refs/api/krb5_get_init_creds_opt_set_forwardable","appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache","appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache","appdev/refs/api/krb5_get_init_creds_opt_set_pa","appdev/refs/api/krb5_get_init_creds_opt_set_pac_request","appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list","appdev/refs/api/krb5_get_init_creds_opt_set_proxiable","appdev/refs/api/krb5_get_init_creds_opt_set_renew_life","appdev/refs/api/krb5_get_init_creds_opt_set_responder","appdev/refs/api/krb5_get_init_creds_opt_set_salt","appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life","appdev/refs/api/krb5_get_init_creds_password","appdev/refs/api/krb5_get_permitted_enctypes","appdev/refs/api/krb5_get_profile","appdev/refs/api/krb5_get_prompt_types","appdev/refs/api/krb5_get_renewed_creds","appdev/refs/api/krb5_get_server_rcache","appdev/refs/api/krb5_get_time_offsets","appdev/refs/api/krb5_get_validated_creds","appdev/refs/api/krb5_init_context","appdev/refs/api/krb5_init_context_profile","appdev/refs/api/krb5_init_creds_free","appdev/refs/api/krb5_init_creds_get","appdev/refs/api/krb5_init_creds_get_creds","appdev/refs/api/krb5_init_creds_get_error","appdev/refs/api/krb5_init_creds_get_times","appdev/refs/api/krb5_init_creds_init","appdev/refs/api/krb5_init_creds_set_keytab","appdev/refs/api/krb5_init_creds_set_password","appdev/refs/api/krb5_init_creds_set_service","appdev/refs/api/krb5_init_creds_step","appdev/refs/api/krb5_init_keyblock","appdev/refs/api/krb5_init_random_key","appdev/refs/api/krb5_init_secure_context","appdev/refs/api/krb5_is_config_principal","appdev/refs/api/krb5_is_referral_realm","appdev/refs/api/krb5_is_thread_safe","appdev/refs/api/krb5_k_create_key","appdev/refs/api/krb5_k_decrypt","appdev/refs/api/krb5_k_decrypt_iov","appdev/refs/api/krb5_k_encrypt","appdev/refs/api/krb5_k_encrypt_iov","appdev/refs/api/krb5_k_free_key","appdev/refs/api/krb5_k_key_enctype","appdev/refs/api/krb5_k_key_keyblock","appdev/refs/api/krb5_k_make_checksum","appdev/refs/api/krb5_k_make_checksum_iov","appdev/refs/api/krb5_k_prf","appdev/refs/api/krb5_k_reference_key","appdev/refs/api/krb5_k_verify_checksum","appdev/refs/api/krb5_k_verify_checksum_iov","appdev/refs/api/krb5_kdc_sign_ticket","appdev/refs/api/krb5_kdc_verify_ticket","appdev/refs/api/krb5_kt_add_entry","appdev/refs/api/krb5_kt_client_default","appdev/refs/api/krb5_kt_close","appdev/refs/api/krb5_kt_default","appdev/refs/api/krb5_kt_default_name","appdev/refs/api/krb5_kt_dup","appdev/refs/api/krb5_kt_end_seq_get","appdev/refs/api/krb5_kt_free_entry","appdev/refs/api/krb5_kt_get_entry","appdev/refs/api/krb5_kt_get_name","appdev/refs/api/krb5_kt_get_type","appdev/refs/api/krb5_kt_have_content","appdev/refs/api/krb5_kt_next_entry","appdev/refs/api/krb5_kt_read_service_key","appdev/refs/api/krb5_kt_remove_entry","appdev/refs/api/krb5_kt_resolve","appdev/refs/api/krb5_kt_start_seq_get","appdev/refs/api/krb5_kuserok","appdev/refs/api/krb5_make_authdata_kdc_issued","appdev/refs/api/krb5_marshal_credentials","appdev/refs/api/krb5_merge_authdata","appdev/refs/api/krb5_mk_1cred","appdev/refs/api/krb5_mk_error","appdev/refs/api/krb5_mk_ncred","appdev/refs/api/krb5_mk_priv","appdev/refs/api/krb5_mk_rep","appdev/refs/api/krb5_mk_rep_dce","appdev/refs/api/krb5_mk_req","appdev/refs/api/krb5_mk_req_extended","appdev/refs/api/krb5_mk_safe","appdev/refs/api/krb5_os_localaddr","appdev/refs/api/krb5_pac_add_buffer","appdev/refs/api/krb5_pac_free","appdev/refs/api/krb5_pac_get_buffer","appdev/refs/api/krb5_pac_get_client_info","appdev/refs/api/krb5_pac_get_types","appdev/refs/api/krb5_pac_init","appdev/refs/api/krb5_pac_parse","appdev/refs/api/krb5_pac_sign","appdev/refs/api/krb5_pac_sign_ext","appdev/refs/api/krb5_pac_verify","appdev/refs/api/krb5_pac_verify_ext","appdev/refs/api/krb5_parse_name","appdev/refs/api/krb5_parse_name_flags","appdev/refs/api/krb5_prepend_error_message","appdev/refs/api/krb5_principal2salt","appdev/refs/api/krb5_principal_compare","appdev/refs/api/krb5_principal_compare_any_realm","appdev/refs/api/krb5_principal_compare_flags","appdev/refs/api/krb5_process_key","appdev/refs/api/krb5_prompter_posix","appdev/refs/api/krb5_random_key","appdev/refs/api/krb5_rd_cred","appdev/refs/api/krb5_rd_error","appdev/refs/api/krb5_rd_priv","appdev/refs/api/krb5_rd_rep","appdev/refs/api/krb5_rd_rep_dce","appdev/refs/api/krb5_rd_req","appdev/refs/api/krb5_rd_safe","appdev/refs/api/krb5_read_password","appdev/refs/api/krb5_realm_compare","appdev/refs/api/krb5_recvauth","appdev/refs/api/krb5_recvauth_version","appdev/refs/api/krb5_responder_get_challenge","appdev/refs/api/krb5_responder_list_questions","appdev/refs/api/krb5_responder_otp_challenge_free","appdev/refs/api/krb5_responder_otp_get_challenge","appdev/refs/api/krb5_responder_otp_set_answer","appdev/refs/api/krb5_responder_pkinit_challenge_free","appdev/refs/api/krb5_responder_pkinit_get_challenge","appdev/refs/api/krb5_responder_pkinit_set_answer","appdev/refs/api/krb5_responder_set_answer","appdev/refs/api/krb5_salttype_to_string","appdev/refs/api/krb5_sendauth","appdev/refs/api/krb5_server_decrypt_ticket_keytab","appdev/refs/api/krb5_set_default_realm","appdev/refs/api/krb5_set_default_tgs_enctypes","appdev/refs/api/krb5_set_error_message","appdev/refs/api/krb5_set_kdc_recv_hook","appdev/refs/api/krb5_set_kdc_send_hook","appdev/refs/api/krb5_set_password","appdev/refs/api/krb5_set_password_using_ccache","appdev/refs/api/krb5_set_principal_realm","appdev/refs/api/krb5_set_real_time","appdev/refs/api/krb5_set_trace_callback","appdev/refs/api/krb5_set_trace_filename","appdev/refs/api/krb5_sname_match","appdev/refs/api/krb5_sname_to_principal","appdev/refs/api/krb5_string_to_cksumtype","appdev/refs/api/krb5_string_to_deltat","appdev/refs/api/krb5_string_to_enctype","appdev/refs/api/krb5_string_to_key","appdev/refs/api/krb5_string_to_salttype","appdev/refs/api/krb5_string_to_timestamp","appdev/refs/api/krb5_timeofday","appdev/refs/api/krb5_timestamp_to_sfstring","appdev/refs/api/krb5_timestamp_to_string","appdev/refs/api/krb5_tkt_creds_free","appdev/refs/api/krb5_tkt_creds_get","appdev/refs/api/krb5_tkt_creds_get_creds","appdev/refs/api/krb5_tkt_creds_get_times","appdev/refs/api/krb5_tkt_creds_init","appdev/refs/api/krb5_tkt_creds_step","appdev/refs/api/krb5_unmarshal_credentials","appdev/refs/api/krb5_unparse_name","appdev/refs/api/krb5_unparse_name_ext","appdev/refs/api/krb5_unparse_name_flags","appdev/refs/api/krb5_unparse_name_flags_ext","appdev/refs/api/krb5_us_timeofday","appdev/refs/api/krb5_use_enctype","appdev/refs/api/krb5_verify_authdata_kdc_issued","appdev/refs/api/krb5_verify_checksum","appdev/refs/api/krb5_verify_init_creds","appdev/refs/api/krb5_verify_init_creds_opt_init","appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail","appdev/refs/api/krb5_vprepend_error_message","appdev/refs/api/krb5_vset_error_message","appdev/refs/api/krb5_vwrap_error_message","appdev/refs/api/krb5_wrap_error_message","appdev/refs/index","appdev/refs/macros/ADDRTYPE_ADDRPORT","appdev/refs/macros/ADDRTYPE_CHAOS","appdev/refs/macros/ADDRTYPE_DDP","appdev/refs/macros/ADDRTYPE_INET","appdev/refs/macros/ADDRTYPE_INET6","appdev/refs/macros/ADDRTYPE_IPPORT","appdev/refs/macros/ADDRTYPE_ISO","appdev/refs/macros/ADDRTYPE_IS_LOCAL","appdev/refs/macros/ADDRTYPE_NETBIOS","appdev/refs/macros/ADDRTYPE_XNS","appdev/refs/macros/AD_TYPE_EXTERNAL","appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK","appdev/refs/macros/AD_TYPE_REGISTERED","appdev/refs/macros/AD_TYPE_RESERVED","appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION","appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED","appdev/refs/macros/AP_OPTS_RESERVED","appdev/refs/macros/AP_OPTS_USE_SESSION_KEY","appdev/refs/macros/AP_OPTS_USE_SUBKEY","appdev/refs/macros/AP_OPTS_WIRE_MASK","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256","appdev/refs/macros/CKSUMTYPE_CRC32","appdev/refs/macros/CKSUMTYPE_DESCBC","appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3","appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128","appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256","appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR","appdev/refs/macros/CKSUMTYPE_NIST_SHA","appdev/refs/macros/CKSUMTYPE_RSA_MD4","appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES","appdev/refs/macros/CKSUMTYPE_RSA_MD5","appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES","appdev/refs/macros/CKSUMTYPE_SHA1","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP","appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC","appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC","appdev/refs/macros/ENCTYPE_DES3_CBC_ENV","appdev/refs/macros/ENCTYPE_DES3_CBC_RAW","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1","appdev/refs/macros/ENCTYPE_DES_CBC_CRC","appdev/refs/macros/ENCTYPE_DES_CBC_MD4","appdev/refs/macros/ENCTYPE_DES_CBC_MD5","appdev/refs/macros/ENCTYPE_DES_CBC_RAW","appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1","appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS","appdev/refs/macros/ENCTYPE_MD5_RSA_CMS","appdev/refs/macros/ENCTYPE_NULL","appdev/refs/macros/ENCTYPE_RC2_CBC_ENV","appdev/refs/macros/ENCTYPE_RSA_ENV","appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV","appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS","appdev/refs/macros/ENCTYPE_UNKNOWN","appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE","appdev/refs/macros/KDC_OPT_CANONICALIZE","appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT","appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK","appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY","appdev/refs/macros/KDC_OPT_FORWARDABLE","appdev/refs/macros/KDC_OPT_FORWARDED","appdev/refs/macros/KDC_OPT_POSTDATED","appdev/refs/macros/KDC_OPT_PROXIABLE","appdev/refs/macros/KDC_OPT_PROXY","appdev/refs/macros/KDC_OPT_RENEW","appdev/refs/macros/KDC_OPT_RENEWABLE","appdev/refs/macros/KDC_OPT_RENEWABLE_OK","appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS","appdev/refs/macros/KDC_OPT_VALIDATE","appdev/refs/macros/KDC_TKT_COMMON_MASK","appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE","appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR","appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR","appdev/refs/macros/KRB5_AP_REP","appdev/refs/macros/KRB5_AP_REQ","appdev/refs/macros/KRB5_AS_REP","appdev/refs/macros/KRB5_AS_REQ","appdev/refs/macros/KRB5_AUTHDATA_AND_OR","appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS","appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR","appdev/refs/macros/KRB5_AUTHDATA_CAMMAC","appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION","appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR","appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT","appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS","appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED","appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC","appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE","appdev/refs/macros/KRB5_AUTHDATA_SESAME","appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET","appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR","appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME","appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY","appdev/refs/macros/KRB5_CRED","appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM","appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA","appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY","appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER","appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING","appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY","appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM","appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER","appdev/refs/macros/KRB5_CYBERSAFE_SECUREID","appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS","appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP","appdev/refs/macros/KRB5_ERROR","appdev/refs/macros/KRB5_FAST_REQUIRED","appdev/refs/macros/KRB5_GC_CACHED","appdev/refs/macros/KRB5_GC_CANONICALIZE","appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION","appdev/refs/macros/KRB5_GC_FORWARDABLE","appdev/refs/macros/KRB5_GC_NO_STORE","appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK","appdev/refs/macros/KRB5_GC_USER_USER","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE","appdev/refs/macros/KRB5_INIT_CONTEXT_KDC","appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE","appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE","appdev/refs/macros/KRB5_INT16_MAX","appdev/refs/macros/KRB5_INT16_MIN","appdev/refs/macros/KRB5_INT32_MAX","appdev/refs/macros/KRB5_INT32_MIN","appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE","appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE","appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT","appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS","appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC","appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC","appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV","appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED","appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET","appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART","appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS","appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE","appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST","appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE","appdev/refs/macros/KRB5_KEYUSAGE_SPAKE","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM","appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED","appdev/refs/macros/KRB5_KPASSWD_AUTHERROR","appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION","appdev/refs/macros/KRB5_KPASSWD_HARDERROR","appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED","appdev/refs/macros/KRB5_KPASSWD_MALFORMED","appdev/refs/macros/KRB5_KPASSWD_SOFTERROR","appdev/refs/macros/KRB5_KPASSWD_SUCCESS","appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME","appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL","appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL","appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED","appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME","appdev/refs/macros/KRB5_LRQ_NONE","appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME","appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL","appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL","appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED","appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME","appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL","appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID","appdev/refs/macros/KRB5_NT_PRINCIPAL","appdev/refs/macros/KRB5_NT_SMTP_NAME","appdev/refs/macros/KRB5_NT_SRV_HST","appdev/refs/macros/KRB5_NT_SRV_INST","appdev/refs/macros/KRB5_NT_SRV_XHST","appdev/refs/macros/KRB5_NT_UID","appdev/refs/macros/KRB5_NT_UNKNOWN","appdev/refs/macros/KRB5_NT_WELLKNOWN","appdev/refs/macros/KRB5_NT_X500_PRINCIPAL","appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO","appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS","appdev/refs/macros/KRB5_PAC_CLIENT_INFO","appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO","appdev/refs/macros/KRB5_PAC_DELEGATION_INFO","appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS","appdev/refs/macros/KRB5_PAC_DEVICE_INFO","appdev/refs/macros/KRB5_PAC_LOGON_INFO","appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM","appdev/refs/macros/KRB5_PAC_REQUESTOR","appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM","appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM","appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO","appdev/refs/macros/KRB5_PADATA_AFS3_SALT","appdev/refs/macros/KRB5_PADATA_AP_REQ","appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM","appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS","appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE","appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID","appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP","appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2","appdev/refs/macros/KRB5_PADATA_FOR_USER","appdev/refs/macros/KRB5_PADATA_FX_COOKIE","appdev/refs/macros/KRB5_PADATA_FX_ERROR","appdev/refs/macros/KRB5_PADATA_FX_FAST","appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA","appdev/refs/macros/KRB5_PADATA_NONE","appdev/refs/macros/KRB5_PADATA_OSF_DCE","appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE","appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE","appdev/refs/macros/KRB5_PADATA_OTP_REQUEST","appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS","appdev/refs/macros/KRB5_PADATA_PAC_REQUEST","appdev/refs/macros/KRB5_PADATA_PKINIT_KX","appdev/refs/macros/KRB5_PADATA_PK_AS_REP","appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD","appdev/refs/macros/KRB5_PADATA_PW_SALT","appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2","appdev/refs/macros/KRB5_PADATA_REFERRAL","appdev/refs/macros/KRB5_PADATA_S4U_X509_USER","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2","appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2","appdev/refs/macros/KRB5_PADATA_SESAME","appdev/refs/macros/KRB5_PADATA_SPAKE","appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO","appdev/refs/macros/KRB5_PADATA_TGS_REQ","appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT","appdev/refs/macros/KRB5_PRIV","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN","appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD","appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH","appdev/refs/macros/KRB5_PVNO","appdev/refs/macros/KRB5_REALM_BRANCH_CHAR","appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS","appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION","appdev/refs/macros/KRB5_REFERRAL_REALM","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED","appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT","appdev/refs/macros/KRB5_SAFE","appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD","appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD","appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY","appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT","appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA","appdev/refs/macros/KRB5_TC_MATCH_FLAGS","appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT","appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY","appdev/refs/macros/KRB5_TC_MATCH_KTYPE","appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY","appdev/refs/macros/KRB5_TC_MATCH_TIMES","appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT","appdev/refs/macros/KRB5_TC_NOTICKET","appdev/refs/macros/KRB5_TC_OPENCLOSE","appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES","appdev/refs/macros/KRB5_TGS_NAME","appdev/refs/macros/KRB5_TGS_NAME_SIZE","appdev/refs/macros/KRB5_TGS_REP","appdev/refs/macros/KRB5_TGS_REQ","appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE","appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL","appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR","appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK","appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY","appdev/refs/macros/MAX_KEYTAB_NAME_LEN","appdev/refs/macros/MSEC_DIRBIT","appdev/refs/macros/MSEC_VAL_MASK","appdev/refs/macros/SALT_TYPE_AFS_LENGTH","appdev/refs/macros/SALT_TYPE_NO_LENGTH","appdev/refs/macros/THREEPARAMOPEN","appdev/refs/macros/TKT_FLG_ANONYMOUS","appdev/refs/macros/TKT_FLG_ENC_PA_REP","appdev/refs/macros/TKT_FLG_FORWARDABLE","appdev/refs/macros/TKT_FLG_FORWARDED","appdev/refs/macros/TKT_FLG_HW_AUTH","appdev/refs/macros/TKT_FLG_INITIAL","appdev/refs/macros/TKT_FLG_INVALID","appdev/refs/macros/TKT_FLG_MAY_POSTDATE","appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE","appdev/refs/macros/TKT_FLG_POSTDATED","appdev/refs/macros/TKT_FLG_PRE_AUTH","appdev/refs/macros/TKT_FLG_PROXIABLE","appdev/refs/macros/TKT_FLG_PROXY","appdev/refs/macros/TKT_FLG_RENEWABLE","appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED","appdev/refs/macros/VALID_INT_BITS","appdev/refs/macros/VALID_UINT_BITS","appdev/refs/macros/index","appdev/refs/macros/krb524_convert_creds_kdc","appdev/refs/macros/krb524_init_ets","appdev/refs/macros/krb5_const","appdev/refs/macros/krb5_princ_component","appdev/refs/macros/krb5_princ_name","appdev/refs/macros/krb5_princ_realm","appdev/refs/macros/krb5_princ_set_realm","appdev/refs/macros/krb5_princ_set_realm_data","appdev/refs/macros/krb5_princ_set_realm_length","appdev/refs/macros/krb5_princ_size","appdev/refs/macros/krb5_princ_type","appdev/refs/macros/krb5_roundup","appdev/refs/macros/krb5_x","appdev/refs/macros/krb5_xc","appdev/refs/types/index","appdev/refs/types/krb5_address","appdev/refs/types/krb5_addrtype","appdev/refs/types/krb5_ap_rep","appdev/refs/types/krb5_ap_rep_enc_part","appdev/refs/types/krb5_ap_req","appdev/refs/types/krb5_auth_context","appdev/refs/types/krb5_authdata","appdev/refs/types/krb5_authdatatype","appdev/refs/types/krb5_authenticator","appdev/refs/types/krb5_boolean","appdev/refs/types/krb5_cc_cursor","appdev/refs/types/krb5_ccache","appdev/refs/types/krb5_cccol_cursor","appdev/refs/types/krb5_checksum","appdev/refs/types/krb5_cksumtype","appdev/refs/types/krb5_const_pointer","appdev/refs/types/krb5_const_principal","appdev/refs/types/krb5_context","appdev/refs/types/krb5_cred","appdev/refs/types/krb5_cred_enc_part","appdev/refs/types/krb5_cred_info","appdev/refs/types/krb5_creds","appdev/refs/types/krb5_crypto_iov","appdev/refs/types/krb5_cryptotype","appdev/refs/types/krb5_data","appdev/refs/types/krb5_deltat","appdev/refs/types/krb5_enc_data","appdev/refs/types/krb5_enc_kdc_rep_part","appdev/refs/types/krb5_enc_tkt_part","appdev/refs/types/krb5_encrypt_block","appdev/refs/types/krb5_enctype","appdev/refs/types/krb5_error","appdev/refs/types/krb5_error_code","appdev/refs/types/krb5_expire_callback_func","appdev/refs/types/krb5_flags","appdev/refs/types/krb5_get_init_creds_opt","appdev/refs/types/krb5_gic_opt_pa_data","appdev/refs/types/krb5_init_creds_context","appdev/refs/types/krb5_int16","appdev/refs/types/krb5_int32","appdev/refs/types/krb5_kdc_rep","appdev/refs/types/krb5_kdc_req","appdev/refs/types/krb5_key","appdev/refs/types/krb5_keyblock","appdev/refs/types/krb5_keytab","appdev/refs/types/krb5_keytab_entry","appdev/refs/types/krb5_keyusage","appdev/refs/types/krb5_kt_cursor","appdev/refs/types/krb5_kvno","appdev/refs/types/krb5_last_req_entry","appdev/refs/types/krb5_magic","appdev/refs/types/krb5_mk_req_checksum_func","appdev/refs/types/krb5_msgtype","appdev/refs/types/krb5_octet","appdev/refs/types/krb5_pa_data","appdev/refs/types/krb5_pa_pac_req","appdev/refs/types/krb5_pa_server_referral_data","appdev/refs/types/krb5_pa_svr_referral_data","appdev/refs/types/krb5_pac","appdev/refs/types/krb5_pointer","appdev/refs/types/krb5_post_recv_fn","appdev/refs/types/krb5_pre_send_fn","appdev/refs/types/krb5_preauthtype","appdev/refs/types/krb5_principal","appdev/refs/types/krb5_principal_data","appdev/refs/types/krb5_prompt","appdev/refs/types/krb5_prompt_type","appdev/refs/types/krb5_prompter_fct","appdev/refs/types/krb5_pwd_data","appdev/refs/types/krb5_rcache","appdev/refs/types/krb5_replay_data","appdev/refs/types/krb5_responder_context","appdev/refs/types/krb5_responder_fn","appdev/refs/types/krb5_responder_otp_challenge","appdev/refs/types/krb5_responder_otp_tokeninfo","appdev/refs/types/krb5_responder_pkinit_challenge","appdev/refs/types/krb5_responder_pkinit_identity","appdev/refs/types/krb5_response","appdev/refs/types/krb5_ticket","appdev/refs/types/krb5_ticket_times","appdev/refs/types/krb5_timestamp","appdev/refs/types/krb5_tkt_authent","appdev/refs/types/krb5_tkt_creds_context","appdev/refs/types/krb5_trace_callback","appdev/refs/types/krb5_trace_info","appdev/refs/types/krb5_transited","appdev/refs/types/krb5_typed_data","appdev/refs/types/krb5_ui_2","appdev/refs/types/krb5_ui_4","appdev/refs/types/krb5_verify_init_creds_opt","appdev/refs/types/passwd_phrase_element","appdev/y2038","basic/ccache_def","basic/date_format","basic/index","basic/keytab_def","basic/rcache_def","basic/stash_file_def","build/directory_org","build/doing_build","build/index","build/options2configure","build/osconf","build_this","copyright","formats/ccache_file_format","formats/cookie","formats/freshness_token","formats/index","formats/keytab_file_format","formats/rcache_file_format","index","mitK5defaults","mitK5features","mitK5license","plugindev/ccselect","plugindev/certauth","plugindev/clpreauth","plugindev/general","plugindev/gssapi","plugindev/hostrealm","plugindev/index","plugindev/internal","plugindev/kadm5_auth","plugindev/kadm5_hook","plugindev/kdcpolicy","plugindev/kdcpreauth","plugindev/localauth","plugindev/locate","plugindev/profile","plugindev/pwqual","resources","user/index","user/pwd_mgmt","user/tkt_mgmt","user/user_commands/index","user/user_commands/kdestroy","user/user_commands/kinit","user/user_commands/klist","user/user_commands/kpasswd","user/user_commands/krb5-config","user/user_commands/ksu","user/user_commands/kswitch","user/user_commands/kvno","user/user_commands/sclient","user/user_config/index","user/user_config/k5identity","user/user_config/k5login","user/user_config/kerberos"],envversion:52,filenames:["about.rst","admin/admin_commands/index.rst","admin/admin_commands/k5srvutil.rst","admin/admin_commands/kadmin_local.rst","admin/admin_commands/kadmind.rst","admin/admin_commands/kdb5_ldap_util.rst","admin/admin_commands/kdb5_util.rst","admin/admin_commands/kprop.rst","admin/admin_commands/kpropd.rst","admin/admin_commands/kproplog.rst","admin/admin_commands/krb5kdc.rst","admin/admin_commands/ktutil.rst","admin/admin_commands/sserver.rst","admin/advanced/index.rst","admin/advanced/retiring-des.rst","admin/appl_servers.rst","admin/auth_indicator.rst","admin/backup_host.rst","admin/conf_files/index.rst","admin/conf_files/kadm5_acl.rst","admin/conf_files/kdc_conf.rst","admin/conf_files/krb5_conf.rst","admin/conf_ldap.rst","admin/database.rst","admin/dbtypes.rst","admin/dictionary.rst","admin/enctypes.rst","admin/env_variables.rst","admin/host_config.rst","admin/https.rst","admin/index.rst","admin/install.rst","admin/install_appl_srv.rst","admin/install_clients.rst","admin/install_kdc.rst","admin/lockout.rst","admin/otp.rst","admin/pkinit.rst","admin/princ_dns.rst","admin/realm_config.rst","admin/spake.rst","admin/troubleshoot.rst","admin/various_envs.rst","appdev/gssapi.rst","appdev/h5l_mit_apidiff.rst","appdev/index.rst","appdev/init_creds.rst","appdev/princ_handle.rst","appdev/refs/api/index.rst","appdev/refs/api/krb5_425_conv_principal.rst","appdev/refs/api/krb5_524_conv_principal.rst","appdev/refs/api/krb5_524_convert_creds.rst","appdev/refs/api/krb5_address_compare.rst","appdev/refs/api/krb5_address_order.rst","appdev/refs/api/krb5_address_search.rst","appdev/refs/api/krb5_allow_weak_crypto.rst","appdev/refs/api/krb5_aname_to_localname.rst","appdev/refs/api/krb5_anonymous_principal.rst","appdev/refs/api/krb5_anonymous_realm.rst","appdev/refs/api/krb5_appdefault_boolean.rst","appdev/refs/api/krb5_appdefault_string.rst","appdev/refs/api/krb5_auth_con_free.rst","appdev/refs/api/krb5_auth_con_genaddrs.rst","appdev/refs/api/krb5_auth_con_get_checksum_func.rst","appdev/refs/api/krb5_auth_con_getaddrs.rst","appdev/refs/api/krb5_auth_con_getauthenticator.rst","appdev/refs/api/krb5_auth_con_getflags.rst","appdev/refs/api/krb5_auth_con_getkey.rst","appdev/refs/api/krb5_auth_con_getkey_k.rst","appdev/refs/api/krb5_auth_con_getlocalseqnumber.rst","appdev/refs/api/krb5_auth_con_getlocalsubkey.rst","appdev/refs/api/krb5_auth_con_getrcache.rst","appdev/refs/api/krb5_auth_con_getrecvsubkey.rst","appdev/refs/api/krb5_auth_con_getrecvsubkey_k.rst","appdev/refs/api/krb5_auth_con_getremoteseqnumber.rst","appdev/refs/api/krb5_auth_con_getremotesubkey.rst","appdev/refs/api/krb5_auth_con_getsendsubkey.rst","appdev/refs/api/krb5_auth_con_getsendsubkey_k.rst","appdev/refs/api/krb5_auth_con_init.rst","appdev/refs/api/krb5_auth_con_initivector.rst","appdev/refs/api/krb5_auth_con_set_checksum_func.rst","appdev/refs/api/krb5_auth_con_set_req_cksumtype.rst","appdev/refs/api/krb5_auth_con_setaddrs.rst","appdev/refs/api/krb5_auth_con_setflags.rst","appdev/refs/api/krb5_auth_con_setports.rst","appdev/refs/api/krb5_auth_con_setrcache.rst","appdev/refs/api/krb5_auth_con_setrecvsubkey.rst","appdev/refs/api/krb5_auth_con_setrecvsubkey_k.rst","appdev/refs/api/krb5_auth_con_setsendsubkey.rst","appdev/refs/api/krb5_auth_con_setsendsubkey_k.rst","appdev/refs/api/krb5_auth_con_setuseruserkey.rst","appdev/refs/api/krb5_build_principal.rst","appdev/refs/api/krb5_build_principal_alloc_va.rst","appdev/refs/api/krb5_build_principal_ext.rst","appdev/refs/api/krb5_build_principal_va.rst","appdev/refs/api/krb5_c_block_size.rst","appdev/refs/api/krb5_c_checksum_length.rst","appdev/refs/api/krb5_c_crypto_length.rst","appdev/refs/api/krb5_c_crypto_length_iov.rst","appdev/refs/api/krb5_c_decrypt.rst","appdev/refs/api/krb5_c_decrypt_iov.rst","appdev/refs/api/krb5_c_derive_prfplus.rst","appdev/refs/api/krb5_c_encrypt.rst","appdev/refs/api/krb5_c_encrypt_iov.rst","appdev/refs/api/krb5_c_encrypt_length.rst","appdev/refs/api/krb5_c_enctype_compare.rst","appdev/refs/api/krb5_c_free_state.rst","appdev/refs/api/krb5_c_fx_cf2_simple.rst","appdev/refs/api/krb5_c_init_state.rst","appdev/refs/api/krb5_c_is_coll_proof_cksum.rst","appdev/refs/api/krb5_c_is_keyed_cksum.rst","appdev/refs/api/krb5_c_keyed_checksum_types.rst","appdev/refs/api/krb5_c_keylengths.rst","appdev/refs/api/krb5_c_make_checksum.rst","appdev/refs/api/krb5_c_make_checksum_iov.rst","appdev/refs/api/krb5_c_make_random_key.rst","appdev/refs/api/krb5_c_padding_length.rst","appdev/refs/api/krb5_c_prf.rst","appdev/refs/api/krb5_c_prf_length.rst","appdev/refs/api/krb5_c_prfplus.rst","appdev/refs/api/krb5_c_random_add_entropy.rst","appdev/refs/api/krb5_c_random_make_octets.rst","appdev/refs/api/krb5_c_random_os_entropy.rst","appdev/refs/api/krb5_c_random_seed.rst","appdev/refs/api/krb5_c_random_to_key.rst","appdev/refs/api/krb5_c_string_to_key.rst","appdev/refs/api/krb5_c_string_to_key_with_params.rst","appdev/refs/api/krb5_c_valid_cksumtype.rst","appdev/refs/api/krb5_c_valid_enctype.rst","appdev/refs/api/krb5_c_verify_checksum.rst","appdev/refs/api/krb5_c_verify_checksum_iov.rst","appdev/refs/api/krb5_calculate_checksum.rst","appdev/refs/api/krb5_cc_cache_match.rst","appdev/refs/api/krb5_cc_close.rst","appdev/refs/api/krb5_cc_copy_creds.rst","appdev/refs/api/krb5_cc_default.rst","appdev/refs/api/krb5_cc_default_name.rst","appdev/refs/api/krb5_cc_destroy.rst","appdev/refs/api/krb5_cc_dup.rst","appdev/refs/api/krb5_cc_end_seq_get.rst","appdev/refs/api/krb5_cc_gen_new.rst","appdev/refs/api/krb5_cc_get_config.rst","appdev/refs/api/krb5_cc_get_flags.rst","appdev/refs/api/krb5_cc_get_full_name.rst","appdev/refs/api/krb5_cc_get_name.rst","appdev/refs/api/krb5_cc_get_principal.rst","appdev/refs/api/krb5_cc_get_type.rst","appdev/refs/api/krb5_cc_initialize.rst","appdev/refs/api/krb5_cc_move.rst","appdev/refs/api/krb5_cc_new_unique.rst","appdev/refs/api/krb5_cc_next_cred.rst","appdev/refs/api/krb5_cc_remove_cred.rst","appdev/refs/api/krb5_cc_resolve.rst","appdev/refs/api/krb5_cc_retrieve_cred.rst","appdev/refs/api/krb5_cc_select.rst","appdev/refs/api/krb5_cc_set_config.rst","appdev/refs/api/krb5_cc_set_default_name.rst","appdev/refs/api/krb5_cc_set_flags.rst","appdev/refs/api/krb5_cc_start_seq_get.rst","appdev/refs/api/krb5_cc_store_cred.rst","appdev/refs/api/krb5_cc_support_switch.rst","appdev/refs/api/krb5_cc_switch.rst","appdev/refs/api/krb5_cccol_cursor_free.rst","appdev/refs/api/krb5_cccol_cursor_new.rst","appdev/refs/api/krb5_cccol_cursor_next.rst","appdev/refs/api/krb5_cccol_have_content.rst","appdev/refs/api/krb5_change_password.rst","appdev/refs/api/krb5_check_clockskew.rst","appdev/refs/api/krb5_checksum_size.rst","appdev/refs/api/krb5_chpw_message.rst","appdev/refs/api/krb5_cksumtype_to_string.rst","appdev/refs/api/krb5_clear_error_message.rst","appdev/refs/api/krb5_copy_addresses.rst","appdev/refs/api/krb5_copy_authdata.rst","appdev/refs/api/krb5_copy_authenticator.rst","appdev/refs/api/krb5_copy_checksum.rst","appdev/refs/api/krb5_copy_context.rst","appdev/refs/api/krb5_copy_creds.rst","appdev/refs/api/krb5_copy_data.rst","appdev/refs/api/krb5_copy_error_message.rst","appdev/refs/api/krb5_copy_keyblock.rst","appdev/refs/api/krb5_copy_keyblock_contents.rst","appdev/refs/api/krb5_copy_principal.rst","appdev/refs/api/krb5_copy_ticket.rst","appdev/refs/api/krb5_decode_authdata_container.rst","appdev/refs/api/krb5_decode_ticket.rst","appdev/refs/api/krb5_decrypt.rst","appdev/refs/api/krb5_deltat_to_string.rst","appdev/refs/api/krb5_eblock_enctype.rst","appdev/refs/api/krb5_encode_authdata_container.rst","appdev/refs/api/krb5_encrypt.rst","appdev/refs/api/krb5_encrypt_size.rst","appdev/refs/api/krb5_enctype_to_name.rst","appdev/refs/api/krb5_enctype_to_string.rst","appdev/refs/api/krb5_expand_hostname.rst","appdev/refs/api/krb5_find_authdata.rst","appdev/refs/api/krb5_finish_key.rst","appdev/refs/api/krb5_finish_random_key.rst","appdev/refs/api/krb5_free_addresses.rst","appdev/refs/api/krb5_free_ap_rep_enc_part.rst","appdev/refs/api/krb5_free_authdata.rst","appdev/refs/api/krb5_free_authenticator.rst","appdev/refs/api/krb5_free_checksum.rst","appdev/refs/api/krb5_free_checksum_contents.rst","appdev/refs/api/krb5_free_cksumtypes.rst","appdev/refs/api/krb5_free_context.rst","appdev/refs/api/krb5_free_cred_contents.rst","appdev/refs/api/krb5_free_creds.rst","appdev/refs/api/krb5_free_data.rst","appdev/refs/api/krb5_free_data_contents.rst","appdev/refs/api/krb5_free_default_realm.rst","appdev/refs/api/krb5_free_enctypes.rst","appdev/refs/api/krb5_free_error.rst","appdev/refs/api/krb5_free_error_message.rst","appdev/refs/api/krb5_free_host_realm.rst","appdev/refs/api/krb5_free_keyblock.rst","appdev/refs/api/krb5_free_keyblock_contents.rst","appdev/refs/api/krb5_free_keytab_entry_contents.rst","appdev/refs/api/krb5_free_principal.rst","appdev/refs/api/krb5_free_string.rst","appdev/refs/api/krb5_free_tgt_creds.rst","appdev/refs/api/krb5_free_ticket.rst","appdev/refs/api/krb5_free_unparsed_name.rst","appdev/refs/api/krb5_fwd_tgt_creds.rst","appdev/refs/api/krb5_get_credentials.rst","appdev/refs/api/krb5_get_credentials_renew.rst","appdev/refs/api/krb5_get_credentials_validate.rst","appdev/refs/api/krb5_get_default_realm.rst","appdev/refs/api/krb5_get_error_message.rst","appdev/refs/api/krb5_get_etype_info.rst","appdev/refs/api/krb5_get_fallback_host_realm.rst","appdev/refs/api/krb5_get_host_realm.rst","appdev/refs/api/krb5_get_in_tkt_with_keytab.rst","appdev/refs/api/krb5_get_in_tkt_with_password.rst","appdev/refs/api/krb5_get_in_tkt_with_skey.rst","appdev/refs/api/krb5_get_init_creds_keytab.rst","appdev/refs/api/krb5_get_init_creds_opt_alloc.rst","appdev/refs/api/krb5_get_init_creds_opt_free.rst","appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags.rst","appdev/refs/api/krb5_get_init_creds_opt_init.rst","appdev/refs/api/krb5_get_init_creds_opt_set_address_list.rst","appdev/refs/api/krb5_get_init_creds_opt_set_anonymous.rst","appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize.rst","appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt.rst","appdev/refs/api/krb5_get_init_creds_opt_set_etype_list.rst","appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback.rst","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache.rst","appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name.rst","appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags.rst","appdev/refs/api/krb5_get_init_creds_opt_set_forwardable.rst","appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache.rst","appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache.rst","appdev/refs/api/krb5_get_init_creds_opt_set_pa.rst","appdev/refs/api/krb5_get_init_creds_opt_set_pac_request.rst","appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list.rst","appdev/refs/api/krb5_get_init_creds_opt_set_proxiable.rst","appdev/refs/api/krb5_get_init_creds_opt_set_renew_life.rst","appdev/refs/api/krb5_get_init_creds_opt_set_responder.rst","appdev/refs/api/krb5_get_init_creds_opt_set_salt.rst","appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life.rst","appdev/refs/api/krb5_get_init_creds_password.rst","appdev/refs/api/krb5_get_permitted_enctypes.rst","appdev/refs/api/krb5_get_profile.rst","appdev/refs/api/krb5_get_prompt_types.rst","appdev/refs/api/krb5_get_renewed_creds.rst","appdev/refs/api/krb5_get_server_rcache.rst","appdev/refs/api/krb5_get_time_offsets.rst","appdev/refs/api/krb5_get_validated_creds.rst","appdev/refs/api/krb5_init_context.rst","appdev/refs/api/krb5_init_context_profile.rst","appdev/refs/api/krb5_init_creds_free.rst","appdev/refs/api/krb5_init_creds_get.rst","appdev/refs/api/krb5_init_creds_get_creds.rst","appdev/refs/api/krb5_init_creds_get_error.rst","appdev/refs/api/krb5_init_creds_get_times.rst","appdev/refs/api/krb5_init_creds_init.rst","appdev/refs/api/krb5_init_creds_set_keytab.rst","appdev/refs/api/krb5_init_creds_set_password.rst","appdev/refs/api/krb5_init_creds_set_service.rst","appdev/refs/api/krb5_init_creds_step.rst","appdev/refs/api/krb5_init_keyblock.rst","appdev/refs/api/krb5_init_random_key.rst","appdev/refs/api/krb5_init_secure_context.rst","appdev/refs/api/krb5_is_config_principal.rst","appdev/refs/api/krb5_is_referral_realm.rst","appdev/refs/api/krb5_is_thread_safe.rst","appdev/refs/api/krb5_k_create_key.rst","appdev/refs/api/krb5_k_decrypt.rst","appdev/refs/api/krb5_k_decrypt_iov.rst","appdev/refs/api/krb5_k_encrypt.rst","appdev/refs/api/krb5_k_encrypt_iov.rst","appdev/refs/api/krb5_k_free_key.rst","appdev/refs/api/krb5_k_key_enctype.rst","appdev/refs/api/krb5_k_key_keyblock.rst","appdev/refs/api/krb5_k_make_checksum.rst","appdev/refs/api/krb5_k_make_checksum_iov.rst","appdev/refs/api/krb5_k_prf.rst","appdev/refs/api/krb5_k_reference_key.rst","appdev/refs/api/krb5_k_verify_checksum.rst","appdev/refs/api/krb5_k_verify_checksum_iov.rst","appdev/refs/api/krb5_kdc_sign_ticket.rst","appdev/refs/api/krb5_kdc_verify_ticket.rst","appdev/refs/api/krb5_kt_add_entry.rst","appdev/refs/api/krb5_kt_client_default.rst","appdev/refs/api/krb5_kt_close.rst","appdev/refs/api/krb5_kt_default.rst","appdev/refs/api/krb5_kt_default_name.rst","appdev/refs/api/krb5_kt_dup.rst","appdev/refs/api/krb5_kt_end_seq_get.rst","appdev/refs/api/krb5_kt_free_entry.rst","appdev/refs/api/krb5_kt_get_entry.rst","appdev/refs/api/krb5_kt_get_name.rst","appdev/refs/api/krb5_kt_get_type.rst","appdev/refs/api/krb5_kt_have_content.rst","appdev/refs/api/krb5_kt_next_entry.rst","appdev/refs/api/krb5_kt_read_service_key.rst","appdev/refs/api/krb5_kt_remove_entry.rst","appdev/refs/api/krb5_kt_resolve.rst","appdev/refs/api/krb5_kt_start_seq_get.rst","appdev/refs/api/krb5_kuserok.rst","appdev/refs/api/krb5_make_authdata_kdc_issued.rst","appdev/refs/api/krb5_marshal_credentials.rst","appdev/refs/api/krb5_merge_authdata.rst","appdev/refs/api/krb5_mk_1cred.rst","appdev/refs/api/krb5_mk_error.rst","appdev/refs/api/krb5_mk_ncred.rst","appdev/refs/api/krb5_mk_priv.rst","appdev/refs/api/krb5_mk_rep.rst","appdev/refs/api/krb5_mk_rep_dce.rst","appdev/refs/api/krb5_mk_req.rst","appdev/refs/api/krb5_mk_req_extended.rst","appdev/refs/api/krb5_mk_safe.rst","appdev/refs/api/krb5_os_localaddr.rst","appdev/refs/api/krb5_pac_add_buffer.rst","appdev/refs/api/krb5_pac_free.rst","appdev/refs/api/krb5_pac_get_buffer.rst","appdev/refs/api/krb5_pac_get_client_info.rst","appdev/refs/api/krb5_pac_get_types.rst","appdev/refs/api/krb5_pac_init.rst","appdev/refs/api/krb5_pac_parse.rst","appdev/refs/api/krb5_pac_sign.rst","appdev/refs/api/krb5_pac_sign_ext.rst","appdev/refs/api/krb5_pac_verify.rst","appdev/refs/api/krb5_pac_verify_ext.rst","appdev/refs/api/krb5_parse_name.rst","appdev/refs/api/krb5_parse_name_flags.rst","appdev/refs/api/krb5_prepend_error_message.rst","appdev/refs/api/krb5_principal2salt.rst","appdev/refs/api/krb5_principal_compare.rst","appdev/refs/api/krb5_principal_compare_any_realm.rst","appdev/refs/api/krb5_principal_compare_flags.rst","appdev/refs/api/krb5_process_key.rst","appdev/refs/api/krb5_prompter_posix.rst","appdev/refs/api/krb5_random_key.rst","appdev/refs/api/krb5_rd_cred.rst","appdev/refs/api/krb5_rd_error.rst","appdev/refs/api/krb5_rd_priv.rst","appdev/refs/api/krb5_rd_rep.rst","appdev/refs/api/krb5_rd_rep_dce.rst","appdev/refs/api/krb5_rd_req.rst","appdev/refs/api/krb5_rd_safe.rst","appdev/refs/api/krb5_read_password.rst","appdev/refs/api/krb5_realm_compare.rst","appdev/refs/api/krb5_recvauth.rst","appdev/refs/api/krb5_recvauth_version.rst","appdev/refs/api/krb5_responder_get_challenge.rst","appdev/refs/api/krb5_responder_list_questions.rst","appdev/refs/api/krb5_responder_otp_challenge_free.rst","appdev/refs/api/krb5_responder_otp_get_challenge.rst","appdev/refs/api/krb5_responder_otp_set_answer.rst","appdev/refs/api/krb5_responder_pkinit_challenge_free.rst","appdev/refs/api/krb5_responder_pkinit_get_challenge.rst","appdev/refs/api/krb5_responder_pkinit_set_answer.rst","appdev/refs/api/krb5_responder_set_answer.rst","appdev/refs/api/krb5_salttype_to_string.rst","appdev/refs/api/krb5_sendauth.rst","appdev/refs/api/krb5_server_decrypt_ticket_keytab.rst","appdev/refs/api/krb5_set_default_realm.rst","appdev/refs/api/krb5_set_default_tgs_enctypes.rst","appdev/refs/api/krb5_set_error_message.rst","appdev/refs/api/krb5_set_kdc_recv_hook.rst","appdev/refs/api/krb5_set_kdc_send_hook.rst","appdev/refs/api/krb5_set_password.rst","appdev/refs/api/krb5_set_password_using_ccache.rst","appdev/refs/api/krb5_set_principal_realm.rst","appdev/refs/api/krb5_set_real_time.rst","appdev/refs/api/krb5_set_trace_callback.rst","appdev/refs/api/krb5_set_trace_filename.rst","appdev/refs/api/krb5_sname_match.rst","appdev/refs/api/krb5_sname_to_principal.rst","appdev/refs/api/krb5_string_to_cksumtype.rst","appdev/refs/api/krb5_string_to_deltat.rst","appdev/refs/api/krb5_string_to_enctype.rst","appdev/refs/api/krb5_string_to_key.rst","appdev/refs/api/krb5_string_to_salttype.rst","appdev/refs/api/krb5_string_to_timestamp.rst","appdev/refs/api/krb5_timeofday.rst","appdev/refs/api/krb5_timestamp_to_sfstring.rst","appdev/refs/api/krb5_timestamp_to_string.rst","appdev/refs/api/krb5_tkt_creds_free.rst","appdev/refs/api/krb5_tkt_creds_get.rst","appdev/refs/api/krb5_tkt_creds_get_creds.rst","appdev/refs/api/krb5_tkt_creds_get_times.rst","appdev/refs/api/krb5_tkt_creds_init.rst","appdev/refs/api/krb5_tkt_creds_step.rst","appdev/refs/api/krb5_unmarshal_credentials.rst","appdev/refs/api/krb5_unparse_name.rst","appdev/refs/api/krb5_unparse_name_ext.rst","appdev/refs/api/krb5_unparse_name_flags.rst","appdev/refs/api/krb5_unparse_name_flags_ext.rst","appdev/refs/api/krb5_us_timeofday.rst","appdev/refs/api/krb5_use_enctype.rst","appdev/refs/api/krb5_verify_authdata_kdc_issued.rst","appdev/refs/api/krb5_verify_checksum.rst","appdev/refs/api/krb5_verify_init_creds.rst","appdev/refs/api/krb5_verify_init_creds_opt_init.rst","appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail.rst","appdev/refs/api/krb5_vprepend_error_message.rst","appdev/refs/api/krb5_vset_error_message.rst","appdev/refs/api/krb5_vwrap_error_message.rst","appdev/refs/api/krb5_wrap_error_message.rst","appdev/refs/index.rst","appdev/refs/macros/ADDRTYPE_ADDRPORT.rst","appdev/refs/macros/ADDRTYPE_CHAOS.rst","appdev/refs/macros/ADDRTYPE_DDP.rst","appdev/refs/macros/ADDRTYPE_INET.rst","appdev/refs/macros/ADDRTYPE_INET6.rst","appdev/refs/macros/ADDRTYPE_IPPORT.rst","appdev/refs/macros/ADDRTYPE_ISO.rst","appdev/refs/macros/ADDRTYPE_IS_LOCAL.rst","appdev/refs/macros/ADDRTYPE_NETBIOS.rst","appdev/refs/macros/ADDRTYPE_XNS.rst","appdev/refs/macros/AD_TYPE_EXTERNAL.rst","appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK.rst","appdev/refs/macros/AD_TYPE_REGISTERED.rst","appdev/refs/macros/AD_TYPE_RESERVED.rst","appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION.rst","appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED.rst","appdev/refs/macros/AP_OPTS_RESERVED.rst","appdev/refs/macros/AP_OPTS_USE_SESSION_KEY.rst","appdev/refs/macros/AP_OPTS_USE_SUBKEY.rst","appdev/refs/macros/AP_OPTS_WIRE_MASK.rst","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128.rst","appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256.rst","appdev/refs/macros/CKSUMTYPE_CRC32.rst","appdev/refs/macros/CKSUMTYPE_DESCBC.rst","appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128.rst","appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256.rst","appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR.rst","appdev/refs/macros/CKSUMTYPE_NIST_SHA.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD4.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD5.rst","appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES.rst","appdev/refs/macros/CKSUMTYPE_SHA1.rst","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96.rst","appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128.rst","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96.rst","appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192.rst","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC.rst","appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP.rst","appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC.rst","appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_ENV.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_RAW.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA.rst","appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1.rst","appdev/refs/macros/ENCTYPE_DES_CBC_CRC.rst","appdev/refs/macros/ENCTYPE_DES_CBC_MD4.rst","appdev/refs/macros/ENCTYPE_DES_CBC_MD5.rst","appdev/refs/macros/ENCTYPE_DES_CBC_RAW.rst","appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1.rst","appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS.rst","appdev/refs/macros/ENCTYPE_MD5_RSA_CMS.rst","appdev/refs/macros/ENCTYPE_NULL.rst","appdev/refs/macros/ENCTYPE_RC2_CBC_ENV.rst","appdev/refs/macros/ENCTYPE_RSA_ENV.rst","appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV.rst","appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS.rst","appdev/refs/macros/ENCTYPE_UNKNOWN.rst","appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE.rst","appdev/refs/macros/KDC_OPT_CANONICALIZE.rst","appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT.rst","appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK.rst","appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY.rst","appdev/refs/macros/KDC_OPT_FORWARDABLE.rst","appdev/refs/macros/KDC_OPT_FORWARDED.rst","appdev/refs/macros/KDC_OPT_POSTDATED.rst","appdev/refs/macros/KDC_OPT_PROXIABLE.rst","appdev/refs/macros/KDC_OPT_PROXY.rst","appdev/refs/macros/KDC_OPT_RENEW.rst","appdev/refs/macros/KDC_OPT_RENEWABLE.rst","appdev/refs/macros/KDC_OPT_RENEWABLE_OK.rst","appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS.rst","appdev/refs/macros/KDC_OPT_VALIDATE.rst","appdev/refs/macros/KDC_TKT_COMMON_MASK.rst","appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE.rst","appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR.rst","appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR.rst","appdev/refs/macros/KRB5_AP_REP.rst","appdev/refs/macros/KRB5_AP_REQ.rst","appdev/refs/macros/KRB5_AS_REP.rst","appdev/refs/macros/KRB5_AS_REQ.rst","appdev/refs/macros/KRB5_AUTHDATA_AND_OR.rst","appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS.rst","appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR.rst","appdev/refs/macros/KRB5_AUTHDATA_CAMMAC.rst","appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION.rst","appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR.rst","appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT.rst","appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS.rst","appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED.rst","appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC.rst","appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE.rst","appdev/refs/macros/KRB5_AUTHDATA_SESAME.rst","appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET.rst","appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME.rst","appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY.rst","appdev/refs/macros/KRB5_CRED.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM.rst","appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER.rst","appdev/refs/macros/KRB5_CYBERSAFE_SECUREID.rst","appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS.rst","appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP.rst","appdev/refs/macros/KRB5_ERROR.rst","appdev/refs/macros/KRB5_FAST_REQUIRED.rst","appdev/refs/macros/KRB5_GC_CACHED.rst","appdev/refs/macros/KRB5_GC_CANONICALIZE.rst","appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION.rst","appdev/refs/macros/KRB5_GC_FORWARDABLE.rst","appdev/refs/macros/KRB5_GC_NO_STORE.rst","appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK.rst","appdev/refs/macros/KRB5_GC_USER_USER.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT.rst","appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE.rst","appdev/refs/macros/KRB5_INIT_CONTEXT_KDC.rst","appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE.rst","appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE.rst","appdev/refs/macros/KRB5_INT16_MAX.rst","appdev/refs/macros/KRB5_INT16_MIN.rst","appdev/refs/macros/KRB5_INT32_MAX.rst","appdev/refs/macros/KRB5_INT32_MIN.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE.rst","appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH.rst","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT.rst","appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH.rst","appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ.rst","appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS.rst","appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC.rst","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT.rst","appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP.rst","appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC.rst","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG.rst","appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV.rst","appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED.rst","appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART.rst","appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID.rst","appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE.rst","appdev/refs/macros/KRB5_KEYUSAGE_SPAKE.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH.rst","appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM.rst","appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED.rst","appdev/refs/macros/KRB5_KPASSWD_AUTHERROR.rst","appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION.rst","appdev/refs/macros/KRB5_KPASSWD_HARDERROR.rst","appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED.rst","appdev/refs/macros/KRB5_KPASSWD_MALFORMED.rst","appdev/refs/macros/KRB5_KPASSWD_SOFTERROR.rst","appdev/refs/macros/KRB5_KPASSWD_SUCCESS.rst","appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT.rst","appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED.rst","appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME.rst","appdev/refs/macros/KRB5_LRQ_NONE.rst","appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT.rst","appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED.rst","appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME.rst","appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL.rst","appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID.rst","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL.rst","appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID.rst","appdev/refs/macros/KRB5_NT_PRINCIPAL.rst","appdev/refs/macros/KRB5_NT_SMTP_NAME.rst","appdev/refs/macros/KRB5_NT_SRV_HST.rst","appdev/refs/macros/KRB5_NT_SRV_INST.rst","appdev/refs/macros/KRB5_NT_SRV_XHST.rst","appdev/refs/macros/KRB5_NT_UID.rst","appdev/refs/macros/KRB5_NT_UNKNOWN.rst","appdev/refs/macros/KRB5_NT_WELLKNOWN.rst","appdev/refs/macros/KRB5_NT_X500_PRINCIPAL.rst","appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO.rst","appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS.rst","appdev/refs/macros/KRB5_PAC_CLIENT_INFO.rst","appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO.rst","appdev/refs/macros/KRB5_PAC_DELEGATION_INFO.rst","appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS.rst","appdev/refs/macros/KRB5_PAC_DEVICE_INFO.rst","appdev/refs/macros/KRB5_PAC_LOGON_INFO.rst","appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM.rst","appdev/refs/macros/KRB5_PAC_REQUESTOR.rst","appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM.rst","appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM.rst","appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO.rst","appdev/refs/macros/KRB5_PADATA_AFS3_SALT.rst","appdev/refs/macros/KRB5_PADATA_AP_REQ.rst","appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM.rst","appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS.rst","appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE.rst","appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID.rst","appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP.rst","appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME.rst","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO.rst","appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2.rst","appdev/refs/macros/KRB5_PADATA_FOR_USER.rst","appdev/refs/macros/KRB5_PADATA_FX_COOKIE.rst","appdev/refs/macros/KRB5_PADATA_FX_ERROR.rst","appdev/refs/macros/KRB5_PADATA_FX_FAST.rst","appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA.rst","appdev/refs/macros/KRB5_PADATA_NONE.rst","appdev/refs/macros/KRB5_PADATA_OSF_DCE.rst","appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE.rst","appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE.rst","appdev/refs/macros/KRB5_PADATA_OTP_REQUEST.rst","appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS.rst","appdev/refs/macros/KRB5_PADATA_PAC_REQUEST.rst","appdev/refs/macros/KRB5_PADATA_PKINIT_KX.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REP.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ.rst","appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD.rst","appdev/refs/macros/KRB5_PADATA_PW_SALT.rst","appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2.rst","appdev/refs/macros/KRB5_PADATA_REFERRAL.rst","appdev/refs/macros/KRB5_PADATA_S4U_X509_USER.rst","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE.rst","appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2.rst","appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT.rst","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE.rst","appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2.rst","appdev/refs/macros/KRB5_PADATA_SESAME.rst","appdev/refs/macros/KRB5_PADATA_SPAKE.rst","appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO.rst","appdev/refs/macros/KRB5_PADATA_TGS_REQ.rst","appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY.rst","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM.rst","appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT.rst","appdev/refs/macros/KRB5_PRIV.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD.rst","appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH.rst","appdev/refs/macros/KRB5_PVNO.rst","appdev/refs/macros/KRB5_REALM_BRANCH_CHAR.rst","appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS.rst","appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION.rst","appdev/refs/macros/KRB5_REFERRAL_REALM.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL.rst","appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL.rst","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW.rst","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY.rst","appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED.rst","appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP.rst","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD.rst","appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT.rst","appdev/refs/macros/KRB5_SAFE.rst","appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD.rst","appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD.rst","appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY.rst","appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT.rst","appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA.rst","appdev/refs/macros/KRB5_TC_MATCH_FLAGS.rst","appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT.rst","appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY.rst","appdev/refs/macros/KRB5_TC_MATCH_KTYPE.rst","appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY.rst","appdev/refs/macros/KRB5_TC_MATCH_TIMES.rst","appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT.rst","appdev/refs/macros/KRB5_TC_NOTICKET.rst","appdev/refs/macros/KRB5_TC_OPENCLOSE.rst","appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES.rst","appdev/refs/macros/KRB5_TGS_NAME.rst","appdev/refs/macros/KRB5_TGS_NAME_SIZE.rst","appdev/refs/macros/KRB5_TGS_REP.rst","appdev/refs/macros/KRB5_TGS_REQ.rst","appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE.rst","appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL.rst","appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR.rst","appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK.rst","appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY.rst","appdev/refs/macros/MAX_KEYTAB_NAME_LEN.rst","appdev/refs/macros/MSEC_DIRBIT.rst","appdev/refs/macros/MSEC_VAL_MASK.rst","appdev/refs/macros/SALT_TYPE_AFS_LENGTH.rst","appdev/refs/macros/SALT_TYPE_NO_LENGTH.rst","appdev/refs/macros/THREEPARAMOPEN.rst","appdev/refs/macros/TKT_FLG_ANONYMOUS.rst","appdev/refs/macros/TKT_FLG_ENC_PA_REP.rst","appdev/refs/macros/TKT_FLG_FORWARDABLE.rst","appdev/refs/macros/TKT_FLG_FORWARDED.rst","appdev/refs/macros/TKT_FLG_HW_AUTH.rst","appdev/refs/macros/TKT_FLG_INITIAL.rst","appdev/refs/macros/TKT_FLG_INVALID.rst","appdev/refs/macros/TKT_FLG_MAY_POSTDATE.rst","appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE.rst","appdev/refs/macros/TKT_FLG_POSTDATED.rst","appdev/refs/macros/TKT_FLG_PRE_AUTH.rst","appdev/refs/macros/TKT_FLG_PROXIABLE.rst","appdev/refs/macros/TKT_FLG_PROXY.rst","appdev/refs/macros/TKT_FLG_RENEWABLE.rst","appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED.rst","appdev/refs/macros/VALID_INT_BITS.rst","appdev/refs/macros/VALID_UINT_BITS.rst","appdev/refs/macros/index.rst","appdev/refs/macros/krb524_convert_creds_kdc.rst","appdev/refs/macros/krb524_init_ets.rst","appdev/refs/macros/krb5_const.rst","appdev/refs/macros/krb5_princ_component.rst","appdev/refs/macros/krb5_princ_name.rst","appdev/refs/macros/krb5_princ_realm.rst","appdev/refs/macros/krb5_princ_set_realm.rst","appdev/refs/macros/krb5_princ_set_realm_data.rst","appdev/refs/macros/krb5_princ_set_realm_length.rst","appdev/refs/macros/krb5_princ_size.rst","appdev/refs/macros/krb5_princ_type.rst","appdev/refs/macros/krb5_roundup.rst","appdev/refs/macros/krb5_x.rst","appdev/refs/macros/krb5_xc.rst","appdev/refs/types/index.rst","appdev/refs/types/krb5_address.rst","appdev/refs/types/krb5_addrtype.rst","appdev/refs/types/krb5_ap_rep.rst","appdev/refs/types/krb5_ap_rep_enc_part.rst","appdev/refs/types/krb5_ap_req.rst","appdev/refs/types/krb5_auth_context.rst","appdev/refs/types/krb5_authdata.rst","appdev/refs/types/krb5_authdatatype.rst","appdev/refs/types/krb5_authenticator.rst","appdev/refs/types/krb5_boolean.rst","appdev/refs/types/krb5_cc_cursor.rst","appdev/refs/types/krb5_ccache.rst","appdev/refs/types/krb5_cccol_cursor.rst","appdev/refs/types/krb5_checksum.rst","appdev/refs/types/krb5_cksumtype.rst","appdev/refs/types/krb5_const_pointer.rst","appdev/refs/types/krb5_const_principal.rst","appdev/refs/types/krb5_context.rst","appdev/refs/types/krb5_cred.rst","appdev/refs/types/krb5_cred_enc_part.rst","appdev/refs/types/krb5_cred_info.rst","appdev/refs/types/krb5_creds.rst","appdev/refs/types/krb5_crypto_iov.rst","appdev/refs/types/krb5_cryptotype.rst","appdev/refs/types/krb5_data.rst","appdev/refs/types/krb5_deltat.rst","appdev/refs/types/krb5_enc_data.rst","appdev/refs/types/krb5_enc_kdc_rep_part.rst","appdev/refs/types/krb5_enc_tkt_part.rst","appdev/refs/types/krb5_encrypt_block.rst","appdev/refs/types/krb5_enctype.rst","appdev/refs/types/krb5_error.rst","appdev/refs/types/krb5_error_code.rst","appdev/refs/types/krb5_expire_callback_func.rst","appdev/refs/types/krb5_flags.rst","appdev/refs/types/krb5_get_init_creds_opt.rst","appdev/refs/types/krb5_gic_opt_pa_data.rst","appdev/refs/types/krb5_init_creds_context.rst","appdev/refs/types/krb5_int16.rst","appdev/refs/types/krb5_int32.rst","appdev/refs/types/krb5_kdc_rep.rst","appdev/refs/types/krb5_kdc_req.rst","appdev/refs/types/krb5_key.rst","appdev/refs/types/krb5_keyblock.rst","appdev/refs/types/krb5_keytab.rst","appdev/refs/types/krb5_keytab_entry.rst","appdev/refs/types/krb5_keyusage.rst","appdev/refs/types/krb5_kt_cursor.rst","appdev/refs/types/krb5_kvno.rst","appdev/refs/types/krb5_last_req_entry.rst","appdev/refs/types/krb5_magic.rst","appdev/refs/types/krb5_mk_req_checksum_func.rst","appdev/refs/types/krb5_msgtype.rst","appdev/refs/types/krb5_octet.rst","appdev/refs/types/krb5_pa_data.rst","appdev/refs/types/krb5_pa_pac_req.rst","appdev/refs/types/krb5_pa_server_referral_data.rst","appdev/refs/types/krb5_pa_svr_referral_data.rst","appdev/refs/types/krb5_pac.rst","appdev/refs/types/krb5_pointer.rst","appdev/refs/types/krb5_post_recv_fn.rst","appdev/refs/types/krb5_pre_send_fn.rst","appdev/refs/types/krb5_preauthtype.rst","appdev/refs/types/krb5_principal.rst","appdev/refs/types/krb5_principal_data.rst","appdev/refs/types/krb5_prompt.rst","appdev/refs/types/krb5_prompt_type.rst","appdev/refs/types/krb5_prompter_fct.rst","appdev/refs/types/krb5_pwd_data.rst","appdev/refs/types/krb5_rcache.rst","appdev/refs/types/krb5_replay_data.rst","appdev/refs/types/krb5_responder_context.rst","appdev/refs/types/krb5_responder_fn.rst","appdev/refs/types/krb5_responder_otp_challenge.rst","appdev/refs/types/krb5_responder_otp_tokeninfo.rst","appdev/refs/types/krb5_responder_pkinit_challenge.rst","appdev/refs/types/krb5_responder_pkinit_identity.rst","appdev/refs/types/krb5_response.rst","appdev/refs/types/krb5_ticket.rst","appdev/refs/types/krb5_ticket_times.rst","appdev/refs/types/krb5_timestamp.rst","appdev/refs/types/krb5_tkt_authent.rst","appdev/refs/types/krb5_tkt_creds_context.rst","appdev/refs/types/krb5_trace_callback.rst","appdev/refs/types/krb5_trace_info.rst","appdev/refs/types/krb5_transited.rst","appdev/refs/types/krb5_typed_data.rst","appdev/refs/types/krb5_ui_2.rst","appdev/refs/types/krb5_ui_4.rst","appdev/refs/types/krb5_verify_init_creds_opt.rst","appdev/refs/types/passwd_phrase_element.rst","appdev/y2038.rst","basic/ccache_def.rst","basic/date_format.rst","basic/index.rst","basic/keytab_def.rst","basic/rcache_def.rst","basic/stash_file_def.rst","build/directory_org.rst","build/doing_build.rst","build/index.rst","build/options2configure.rst","build/osconf.rst","build_this.rst","copyright.rst","formats/ccache_file_format.rst","formats/cookie.rst","formats/freshness_token.rst","formats/index.rst","formats/keytab_file_format.rst","formats/rcache_file_format.rst","index.rst","mitK5defaults.rst","mitK5features.rst","mitK5license.rst","plugindev/ccselect.rst","plugindev/certauth.rst","plugindev/clpreauth.rst","plugindev/general.rst","plugindev/gssapi.rst","plugindev/hostrealm.rst","plugindev/index.rst","plugindev/internal.rst","plugindev/kadm5_auth.rst","plugindev/kadm5_hook.rst","plugindev/kdcpolicy.rst","plugindev/kdcpreauth.rst","plugindev/localauth.rst","plugindev/locate.rst","plugindev/profile.rst","plugindev/pwqual.rst","resources.rst","user/index.rst","user/pwd_mgmt.rst","user/tkt_mgmt.rst","user/user_commands/index.rst","user/user_commands/kdestroy.rst","user/user_commands/kinit.rst","user/user_commands/klist.rst","user/user_commands/kpasswd.rst","user/user_commands/krb5-config.rst","user/user_commands/ksu.rst","user/user_commands/kswitch.rst","user/user_commands/kvno.rst","user/user_commands/sclient.rst","user/user_config/index.rst","user/user_config/k5identity.rst","user/user_config/k5login.rst","user/user_config/kerberos.rst"],objects:{"":{ADDRTYPE_ADDRPORT:[422,3,1,""],ADDRTYPE_CHAOS:[423,3,1,""],ADDRTYPE_DDP:[424,3,1,""],ADDRTYPE_INET6:[426,3,1,""],ADDRTYPE_INET:[425,3,1,""],ADDRTYPE_IPPORT:[427,3,1,""],ADDRTYPE_ISO:[428,3,1,""],ADDRTYPE_IS_LOCAL:[429,3,1,""],ADDRTYPE_NETBIOS:[430,3,1,""],ADDRTYPE_XNS:[431,3,1,""],AD_TYPE_EXTERNAL:[432,3,1,""],AD_TYPE_FIELD_TYPE_MASK:[433,3,1,""],AD_TYPE_REGISTERED:[434,3,1,""],AD_TYPE_RESERVED:[435,3,1,""],AP_OPTS_ETYPE_NEGOTIATION:[436,3,1,""],AP_OPTS_MUTUAL_REQUIRED:[437,3,1,""],AP_OPTS_RESERVED:[438,3,1,""],AP_OPTS_USE_SESSION_KEY:[439,3,1,""],AP_OPTS_USE_SUBKEY:[440,3,1,""],AP_OPTS_WIRE_MASK:[441,3,1,""],CKSUMTYPE_CMAC_CAMELLIA128:[442,3,1,""],CKSUMTYPE_CMAC_CAMELLIA256:[443,3,1,""],CKSUMTYPE_CRC32:[444,3,1,""],CKSUMTYPE_DESCBC:[445,3,1,""],CKSUMTYPE_HMAC_MD5_ARCFOUR:[446,3,1,""],CKSUMTYPE_HMAC_SHA1_96_AES128:[447,3,1,""],CKSUMTYPE_HMAC_SHA1_96_AES256:[448,3,1,""],CKSUMTYPE_HMAC_SHA1_DES3:[449,3,1,""],CKSUMTYPE_HMAC_SHA256_128_AES128:[450,3,1,""],CKSUMTYPE_HMAC_SHA384_192_AES256:[451,3,1,""],CKSUMTYPE_MD5_HMAC_ARCFOUR:[452,3,1,""],CKSUMTYPE_NIST_SHA:[453,3,1,""],CKSUMTYPE_RSA_MD4:[454,3,1,""],CKSUMTYPE_RSA_MD4_DES:[455,3,1,""],CKSUMTYPE_RSA_MD5:[456,3,1,""],CKSUMTYPE_RSA_MD5_DES:[457,3,1,""],CKSUMTYPE_SHA1:[458,3,1,""],ENCTYPE_AES128_CTS_HMAC_SHA1_96:[459,3,1,""],ENCTYPE_AES128_CTS_HMAC_SHA256_128:[460,3,1,""],ENCTYPE_AES256_CTS_HMAC_SHA1_96:[461,3,1,""],ENCTYPE_AES256_CTS_HMAC_SHA384_192:[462,3,1,""],ENCTYPE_ARCFOUR_HMAC:[463,3,1,""],ENCTYPE_ARCFOUR_HMAC_EXP:[464,3,1,""],ENCTYPE_CAMELLIA128_CTS_CMAC:[465,3,1,""],ENCTYPE_CAMELLIA256_CTS_CMAC:[466,3,1,""],ENCTYPE_DES3_CBC_ENV:[467,3,1,""],ENCTYPE_DES3_CBC_RAW:[468,3,1,""],ENCTYPE_DES3_CBC_SHA1:[470,3,1,""],ENCTYPE_DES3_CBC_SHA:[469,3,1,""],ENCTYPE_DES_CBC_CRC:[471,3,1,""],ENCTYPE_DES_CBC_MD4:[472,3,1,""],ENCTYPE_DES_CBC_MD5:[473,3,1,""],ENCTYPE_DES_CBC_RAW:[474,3,1,""],ENCTYPE_DES_HMAC_SHA1:[475,3,1,""],ENCTYPE_DSA_SHA1_CMS:[476,3,1,""],ENCTYPE_MD5_RSA_CMS:[477,3,1,""],ENCTYPE_NULL:[478,3,1,""],ENCTYPE_RC2_CBC_ENV:[479,3,1,""],ENCTYPE_RSA_ENV:[480,3,1,""],ENCTYPE_RSA_ES_OAEP_ENV:[481,3,1,""],ENCTYPE_SHA1_RSA_CMS:[482,3,1,""],ENCTYPE_UNKNOWN:[483,3,1,""],KDC_OPT_ALLOW_POSTDATE:[484,3,1,""],KDC_OPT_CANONICALIZE:[485,3,1,""],KDC_OPT_CNAME_IN_ADDL_TKT:[486,3,1,""],KDC_OPT_DISABLE_TRANSITED_CHECK:[487,3,1,""],KDC_OPT_ENC_TKT_IN_SKEY:[488,3,1,""],KDC_OPT_FORWARDABLE:[489,3,1,""],KDC_OPT_FORWARDED:[490,3,1,""],KDC_OPT_POSTDATED:[491,3,1,""],KDC_OPT_PROXIABLE:[492,3,1,""],KDC_OPT_PROXY:[493,3,1,""],KDC_OPT_RENEW:[494,3,1,""],KDC_OPT_RENEWABLE:[495,3,1,""],KDC_OPT_RENEWABLE_OK:[496,3,1,""],KDC_OPT_REQUEST_ANONYMOUS:[497,3,1,""],KDC_OPT_VALIDATE:[498,3,1,""],KDC_TKT_COMMON_MASK:[499,3,1,""],KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE:[500,3,1,""],KRB5_ANONYMOUS_PRINCSTR:[501,3,1,""],KRB5_ANONYMOUS_REALMSTR:[502,3,1,""],KRB5_AP_REP:[503,3,1,""],KRB5_AP_REQ:[504,3,1,""],KRB5_AS_REP:[505,3,1,""],KRB5_AS_REQ:[506,3,1,""],KRB5_AUTHDATA_AND_OR:[507,3,1,""],KRB5_AUTHDATA_AP_OPTIONS:[508,3,1,""],KRB5_AUTHDATA_AUTH_INDICATOR:[509,3,1,""],KRB5_AUTHDATA_CAMMAC:[510,3,1,""],KRB5_AUTHDATA_ETYPE_NEGOTIATION:[511,3,1,""],KRB5_AUTHDATA_FX_ARMOR:[512,3,1,""],KRB5_AUTHDATA_IF_RELEVANT:[513,3,1,""],KRB5_AUTHDATA_INITIAL_VERIFIED_CAS:[514,3,1,""],KRB5_AUTHDATA_KDC_ISSUED:[515,3,1,""],KRB5_AUTHDATA_MANDATORY_FOR_KDC:[516,3,1,""],KRB5_AUTHDATA_OSF_DCE:[517,3,1,""],KRB5_AUTHDATA_SESAME:[518,3,1,""],KRB5_AUTHDATA_SIGNTICKET:[519,3,1,""],KRB5_AUTHDATA_WIN2K_PAC:[520,3,1,""],KRB5_AUTH_CONTEXT_DO_SEQUENCE:[521,3,1,""],KRB5_AUTH_CONTEXT_DO_TIME:[522,3,1,""],KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR:[523,3,1,""],KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR:[524,3,1,""],KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR:[525,3,1,""],KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR:[526,3,1,""],KRB5_AUTH_CONTEXT_PERMIT_ALL:[527,3,1,""],KRB5_AUTH_CONTEXT_RET_SEQUENCE:[528,3,1,""],KRB5_AUTH_CONTEXT_RET_TIME:[529,3,1,""],KRB5_AUTH_CONTEXT_USE_SUBKEY:[530,3,1,""],KRB5_CRED:[531,3,1,""],KRB5_CRYPTO_TYPE_CHECKSUM:[532,3,1,""],KRB5_CRYPTO_TYPE_DATA:[533,3,1,""],KRB5_CRYPTO_TYPE_EMPTY:[534,3,1,""],KRB5_CRYPTO_TYPE_HEADER:[535,3,1,""],KRB5_CRYPTO_TYPE_PADDING:[536,3,1,""],KRB5_CRYPTO_TYPE_SIGN_ONLY:[537,3,1,""],KRB5_CRYPTO_TYPE_STREAM:[538,3,1,""],KRB5_CRYPTO_TYPE_TRAILER:[539,3,1,""],KRB5_CYBERSAFE_SECUREID:[540,3,1,""],KRB5_DOMAIN_X500_COMPRESS:[541,3,1,""],KRB5_ENCPADATA_REQ_ENC_PA_REP:[542,3,1,""],KRB5_ERROR:[543,3,1,""],KRB5_FAST_REQUIRED:[544,3,1,""],KRB5_GC_CACHED:[545,3,1,""],KRB5_GC_CANONICALIZE:[546,3,1,""],KRB5_GC_CONSTRAINED_DELEGATION:[547,3,1,""],KRB5_GC_FORWARDABLE:[548,3,1,""],KRB5_GC_NO_STORE:[549,3,1,""],KRB5_GC_NO_TRANSIT_CHECK:[550,3,1,""],KRB5_GC_USER_USER:[551,3,1,""],KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST:[552,3,1,""],KRB5_GET_INIT_CREDS_OPT_ANONYMOUS:[553,3,1,""],KRB5_GET_INIT_CREDS_OPT_CANONICALIZE:[554,3,1,""],KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT:[555,3,1,""],KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST:[556,3,1,""],KRB5_GET_INIT_CREDS_OPT_FORWARDABLE:[557,3,1,""],KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST:[558,3,1,""],KRB5_GET_INIT_CREDS_OPT_PROXIABLE:[559,3,1,""],KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE:[560,3,1,""],KRB5_GET_INIT_CREDS_OPT_SALT:[561,3,1,""],KRB5_GET_INIT_CREDS_OPT_TKT_LIFE:[562,3,1,""],KRB5_INIT_CONTEXT_KDC:[563,3,1,""],KRB5_INIT_CONTEXT_SECURE:[564,3,1,""],KRB5_INIT_CREDS_STEP_FLAG_CONTINUE:[565,3,1,""],KRB5_INT16_MAX:[566,3,1,""],KRB5_INT16_MIN:[567,3,1,""],KRB5_INT32_MAX:[568,3,1,""],KRB5_INT32_MIN:[569,3,1,""],KRB5_KEYUSAGE_AD_ITE:[570,3,1,""],KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM:[571,3,1,""],KRB5_KEYUSAGE_AD_MTE:[572,3,1,""],KRB5_KEYUSAGE_AD_SIGNEDPATH:[573,3,1,""],KRB5_KEYUSAGE_APP_DATA_CKSUM:[574,3,1,""],KRB5_KEYUSAGE_APP_DATA_ENCRYPT:[575,3,1,""],KRB5_KEYUSAGE_AP_REP_ENCPART:[576,3,1,""],KRB5_KEYUSAGE_AP_REQ_AUTH:[577,3,1,""],KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM:[578,3,1,""],KRB5_KEYUSAGE_AS_REP_ENCPART:[579,3,1,""],KRB5_KEYUSAGE_AS_REQ:[580,3,1,""],KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS:[581,3,1,""],KRB5_KEYUSAGE_CAMMAC:[582,3,1,""],KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT:[583,3,1,""],KRB5_KEYUSAGE_ENC_CHALLENGE_KDC:[584,3,1,""],KRB5_KEYUSAGE_FAST_ENC:[585,3,1,""],KRB5_KEYUSAGE_FAST_FINISHED:[586,3,1,""],KRB5_KEYUSAGE_FAST_REP:[587,3,1,""],KRB5_KEYUSAGE_FAST_REQ_CHKSUM:[588,3,1,""],KRB5_KEYUSAGE_GSS_TOK_MIC:[589,3,1,""],KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG:[590,3,1,""],KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV:[591,3,1,""],KRB5_KEYUSAGE_IAKERB_FINISHED:[592,3,1,""],KRB5_KEYUSAGE_KDC_REP_TICKET:[593,3,1,""],KRB5_KEYUSAGE_KRB_CRED_ENCPART:[594,3,1,""],KRB5_KEYUSAGE_KRB_ERROR_CKSUM:[595,3,1,""],KRB5_KEYUSAGE_KRB_PRIV_ENCPART:[596,3,1,""],KRB5_KEYUSAGE_KRB_SAFE_CKSUM:[597,3,1,""],KRB5_KEYUSAGE_PA_AS_FRESHNESS:[598,3,1,""],KRB5_KEYUSAGE_PA_FX_COOKIE:[599,3,1,""],KRB5_KEYUSAGE_PA_OTP_REQUEST:[600,3,1,""],KRB5_KEYUSAGE_PA_PKINIT_KX:[601,3,1,""],KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY:[602,3,1,""],KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST:[603,3,1,""],KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM:[604,3,1,""],KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID:[605,3,1,""],KRB5_KEYUSAGE_PA_SAM_RESPONSE:[606,3,1,""],KRB5_KEYUSAGE_SPAKE:[607,3,1,""],KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY:[608,3,1,""],KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY:[609,3,1,""],KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY:[610,3,1,""],KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY:[611,3,1,""],KRB5_KEYUSAGE_TGS_REQ_AUTH:[612,3,1,""],KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM:[613,3,1,""],KRB5_KPASSWD_ACCESSDENIED:[614,3,1,""],KRB5_KPASSWD_AUTHERROR:[615,3,1,""],KRB5_KPASSWD_BAD_VERSION:[616,3,1,""],KRB5_KPASSWD_HARDERROR:[617,3,1,""],KRB5_KPASSWD_INITIAL_FLAG_NEEDED:[618,3,1,""],KRB5_KPASSWD_MALFORMED:[619,3,1,""],KRB5_KPASSWD_SOFTERROR:[620,3,1,""],KRB5_KPASSWD_SUCCESS:[621,3,1,""],KRB5_LRQ_ALL_ACCT_EXPTIME:[622,3,1,""],KRB5_LRQ_ALL_LAST_INITIAL:[623,3,1,""],KRB5_LRQ_ALL_LAST_RENEWAL:[624,3,1,""],KRB5_LRQ_ALL_LAST_REQ:[625,3,1,""],KRB5_LRQ_ALL_LAST_TGT:[626,3,1,""],KRB5_LRQ_ALL_LAST_TGT_ISSUED:[627,3,1,""],KRB5_LRQ_ALL_PW_EXPTIME:[628,3,1,""],KRB5_LRQ_NONE:[629,3,1,""],KRB5_LRQ_ONE_ACCT_EXPTIME:[630,3,1,""],KRB5_LRQ_ONE_LAST_INITIAL:[631,3,1,""],KRB5_LRQ_ONE_LAST_RENEWAL:[632,3,1,""],KRB5_LRQ_ONE_LAST_REQ:[633,3,1,""],KRB5_LRQ_ONE_LAST_TGT:[634,3,1,""],KRB5_LRQ_ONE_LAST_TGT_ISSUED:[635,3,1,""],KRB5_LRQ_ONE_PW_EXPTIME:[636,3,1,""],KRB5_NT_ENTERPRISE_PRINCIPAL:[637,3,1,""],KRB5_NT_ENT_PRINCIPAL_AND_ID:[638,3,1,""],KRB5_NT_MS_PRINCIPAL:[639,3,1,""],KRB5_NT_MS_PRINCIPAL_AND_ID:[640,3,1,""],KRB5_NT_PRINCIPAL:[641,3,1,""],KRB5_NT_SMTP_NAME:[642,3,1,""],KRB5_NT_SRV_HST:[643,3,1,""],KRB5_NT_SRV_INST:[644,3,1,""],KRB5_NT_SRV_XHST:[645,3,1,""],KRB5_NT_UID:[646,3,1,""],KRB5_NT_UNKNOWN:[647,3,1,""],KRB5_NT_WELLKNOWN:[648,3,1,""],KRB5_NT_X500_PRINCIPAL:[649,3,1,""],KRB5_PAC_ATTRIBUTES_INFO:[650,3,1,""],KRB5_PAC_CLIENT_CLAIMS:[651,3,1,""],KRB5_PAC_CLIENT_INFO:[652,3,1,""],KRB5_PAC_CREDENTIALS_INFO:[653,3,1,""],KRB5_PAC_DELEGATION_INFO:[654,3,1,""],KRB5_PAC_DEVICE_CLAIMS:[655,3,1,""],KRB5_PAC_DEVICE_INFO:[656,3,1,""],KRB5_PAC_LOGON_INFO:[657,3,1,""],KRB5_PAC_PRIVSVR_CHECKSUM:[658,3,1,""],KRB5_PAC_REQUESTOR:[659,3,1,""],KRB5_PAC_SERVER_CHECKSUM:[660,3,1,""],KRB5_PAC_TICKET_CHECKSUM:[661,3,1,""],KRB5_PAC_UPN_DNS_INFO:[662,3,1,""],KRB5_PADATA_AFS3_SALT:[663,3,1,""],KRB5_PADATA_AP_REQ:[664,3,1,""],KRB5_PADATA_AS_CHECKSUM:[665,3,1,""],KRB5_PADATA_AS_FRESHNESS:[666,3,1,""],KRB5_PADATA_ENCRYPTED_CHALLENGE:[667,3,1,""],KRB5_PADATA_ENC_SANDIA_SECURID:[668,3,1,""],KRB5_PADATA_ENC_TIMESTAMP:[669,3,1,""],KRB5_PADATA_ENC_UNIX_TIME:[670,3,1,""],KRB5_PADATA_ETYPE_INFO2:[672,3,1,""],KRB5_PADATA_ETYPE_INFO:[671,3,1,""],KRB5_PADATA_FOR_USER:[673,3,1,""],KRB5_PADATA_FX_COOKIE:[674,3,1,""],KRB5_PADATA_FX_ERROR:[675,3,1,""],KRB5_PADATA_FX_FAST:[676,3,1,""],KRB5_PADATA_GET_FROM_TYPED_DATA:[677,3,1,""],KRB5_PADATA_NONE:[678,3,1,""],KRB5_PADATA_OSF_DCE:[679,3,1,""],KRB5_PADATA_OTP_CHALLENGE:[680,3,1,""],KRB5_PADATA_OTP_PIN_CHANGE:[681,3,1,""],KRB5_PADATA_OTP_REQUEST:[682,3,1,""],KRB5_PADATA_PAC_OPTIONS:[683,3,1,""],KRB5_PADATA_PAC_REQUEST:[684,3,1,""],KRB5_PADATA_PKINIT_KX:[685,3,1,""],KRB5_PADATA_PK_AS_REP:[686,3,1,""],KRB5_PADATA_PK_AS_REP_OLD:[687,3,1,""],KRB5_PADATA_PK_AS_REQ:[688,3,1,""],KRB5_PADATA_PK_AS_REQ_OLD:[689,3,1,""],KRB5_PADATA_PW_SALT:[690,3,1,""],KRB5_PADATA_REDHAT_IDP_OAUTH2:[691,3,1,""],KRB5_PADATA_REFERRAL:[692,3,1,""],KRB5_PADATA_S4U_X509_USER:[693,3,1,""],KRB5_PADATA_SAM_CHALLENGE:[694,3,1,""],KRB5_PADATA_SAM_CHALLENGE_2:[695,3,1,""],KRB5_PADATA_SAM_REDIRECT:[696,3,1,""],KRB5_PADATA_SAM_RESPONSE:[697,3,1,""],KRB5_PADATA_SAM_RESPONSE_2:[698,3,1,""],KRB5_PADATA_SESAME:[699,3,1,""],KRB5_PADATA_SPAKE:[700,3,1,""],KRB5_PADATA_SVR_REFERRAL_INFO:[701,3,1,""],KRB5_PADATA_TGS_REQ:[702,3,1,""],KRB5_PADATA_USE_SPECIFIED_KVNO:[703,3,1,""],KRB5_PRINCIPAL_COMPARE_CASEFOLD:[704,3,1,""],KRB5_PRINCIPAL_COMPARE_ENTERPRISE:[705,3,1,""],KRB5_PRINCIPAL_COMPARE_IGNORE_REALM:[706,3,1,""],KRB5_PRINCIPAL_COMPARE_UTF8:[707,3,1,""],KRB5_PRINCIPAL_PARSE_ENTERPRISE:[708,3,1,""],KRB5_PRINCIPAL_PARSE_IGNORE_REALM:[709,3,1,""],KRB5_PRINCIPAL_PARSE_NO_DEF_REALM:[710,3,1,""],KRB5_PRINCIPAL_PARSE_NO_REALM:[711,3,1,""],KRB5_PRINCIPAL_PARSE_REQUIRE_REALM:[712,3,1,""],KRB5_PRINCIPAL_UNPARSE_DISPLAY:[713,3,1,""],KRB5_PRINCIPAL_UNPARSE_NO_REALM:[714,3,1,""],KRB5_PRINCIPAL_UNPARSE_SHORT:[715,3,1,""],KRB5_PRIV:[716,3,1,""],KRB5_PROMPT_TYPE_NEW_PASSWORD:[717,3,1,""],KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN:[718,3,1,""],KRB5_PROMPT_TYPE_PASSWORD:[719,3,1,""],KRB5_PROMPT_TYPE_PREAUTH:[720,3,1,""],KRB5_PVNO:[721,3,1,""],KRB5_REALM_BRANCH_CHAR:[722,3,1,""],KRB5_RECVAUTH_BADAUTHVERS:[723,3,1,""],KRB5_RECVAUTH_SKIP_VERSION:[724,3,1,""],KRB5_REFERRAL_REALM:[725,3,1,""],KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN:[726,3,1,""],KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN:[727,3,1,""],KRB5_RESPONDER_OTP_FLAGS_NEXTOTP:[728,3,1,""],KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN:[729,3,1,""],KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC:[730,3,1,""],KRB5_RESPONDER_OTP_FORMAT_DECIMAL:[731,3,1,""],KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL:[732,3,1,""],KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW:[733,3,1,""],KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY:[734,3,1,""],KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED:[735,3,1,""],KRB5_RESPONDER_QUESTION_OTP:[736,3,1,""],KRB5_RESPONDER_QUESTION_PASSWORD:[737,3,1,""],KRB5_RESPONDER_QUESTION_PKINIT:[738,3,1,""],KRB5_SAFE:[739,3,1,""],KRB5_SAM_MUST_PK_ENCRYPT_SAD:[740,3,1,""],KRB5_SAM_SEND_ENCRYPTED_SAD:[741,3,1,""],KRB5_SAM_USE_SAD_AS_KEY:[742,3,1,""],KRB5_TC_MATCH_2ND_TKT:[743,3,1,""],KRB5_TC_MATCH_AUTHDATA:[744,3,1,""],KRB5_TC_MATCH_FLAGS:[745,3,1,""],KRB5_TC_MATCH_FLAGS_EXACT:[746,3,1,""],KRB5_TC_MATCH_IS_SKEY:[747,3,1,""],KRB5_TC_MATCH_KTYPE:[748,3,1,""],KRB5_TC_MATCH_SRV_NAMEONLY:[749,3,1,""],KRB5_TC_MATCH_TIMES:[750,3,1,""],KRB5_TC_MATCH_TIMES_EXACT:[751,3,1,""],KRB5_TC_NOTICKET:[752,3,1,""],KRB5_TC_OPENCLOSE:[753,3,1,""],KRB5_TC_SUPPORTED_KTYPES:[754,3,1,""],KRB5_TGS_NAME:[755,3,1,""],KRB5_TGS_NAME_SIZE:[756,3,1,""],KRB5_TGS_REP:[757,3,1,""],KRB5_TGS_REQ:[758,3,1,""],KRB5_TKT_CREDS_STEP_FLAG_CONTINUE:[759,3,1,""],KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL:[760,3,1,""],KRB5_WELLKNOWN_NAMESTR:[761,3,1,""],LR_TYPE_INTERPRETATION_MASK:[762,3,1,""],LR_TYPE_THIS_SERVER_ONLY:[763,3,1,""],MAX_KEYTAB_NAME_LEN:[764,3,1,""],MSEC_DIRBIT:[765,3,1,""],MSEC_VAL_MASK:[766,3,1,""],SALT_TYPE_AFS_LENGTH:[767,3,1,""],SALT_TYPE_NO_LENGTH:[768,3,1,""],THREEPARAMOPEN:[769,3,1,""],TKT_FLG_ANONYMOUS:[770,3,1,""],TKT_FLG_ENC_PA_REP:[771,3,1,""],TKT_FLG_FORWARDABLE:[772,3,1,""],TKT_FLG_FORWARDED:[773,3,1,""],TKT_FLG_HW_AUTH:[774,3,1,""],TKT_FLG_INITIAL:[775,3,1,""],TKT_FLG_INVALID:[776,3,1,""],TKT_FLG_MAY_POSTDATE:[777,3,1,""],TKT_FLG_OK_AS_DELEGATE:[778,3,1,""],TKT_FLG_POSTDATED:[779,3,1,""],TKT_FLG_PRE_AUTH:[780,3,1,""],TKT_FLG_PROXIABLE:[781,3,1,""],TKT_FLG_PROXY:[782,3,1,""],TKT_FLG_RENEWABLE:[783,3,1,""],TKT_FLG_TRANSIT_POLICY_CHECKED:[784,3,1,""],VALID_INT_BITS:[785,3,1,""],VALID_UINT_BITS:[786,3,1,""],krb524_convert_creds_kdc:[788,3,1,""],krb524_init_ets:[789,3,1,""],krb5_425_conv_principal:[49,0,1,"c.krb5_425_conv_principal"],krb5_524_conv_principal:[50,0,1,"c.krb5_524_conv_principal"],krb5_524_convert_creds:[51,0,1,"c.krb5_524_convert_creds"],krb5_address:[803,1,1,"c.krb5_address"],krb5_address_compare:[52,0,1,"c.krb5_address_compare"],krb5_address_order:[53,0,1,"c.krb5_address_order"],krb5_address_search:[54,0,1,"c.krb5_address_search"],krb5_addrtype:[804,1,1,"c.krb5_addrtype"],krb5_allow_weak_crypto:[55,0,1,"c.krb5_allow_weak_crypto"],krb5_aname_to_localname:[56,0,1,"c.krb5_aname_to_localname"],krb5_anonymous_principal:[57,0,1,"c.krb5_anonymous_principal"],krb5_anonymous_realm:[58,0,1,"c.krb5_anonymous_realm"],krb5_ap_rep:[805,1,1,"c.krb5_ap_rep"],krb5_ap_rep_enc_part:[806,1,1,"c.krb5_ap_rep_enc_part"],krb5_ap_req:[807,1,1,"c.krb5_ap_req"],krb5_appdefault_boolean:[59,0,1,"c.krb5_appdefault_boolean"],krb5_appdefault_string:[60,0,1,"c.krb5_appdefault_string"],krb5_auth_con_free:[61,0,1,"c.krb5_auth_con_free"],krb5_auth_con_genaddrs:[62,0,1,"c.krb5_auth_con_genaddrs"],krb5_auth_con_get_checksum_func:[63,0,1,"c.krb5_auth_con_get_checksum_func"],krb5_auth_con_getaddrs:[64,0,1,"c.krb5_auth_con_getaddrs"],krb5_auth_con_getauthenticator:[65,0,1,"c.krb5_auth_con_getauthenticator"],krb5_auth_con_getflags:[66,0,1,"c.krb5_auth_con_getflags"],krb5_auth_con_getkey:[67,0,1,"c.krb5_auth_con_getkey"],krb5_auth_con_getkey_k:[68,0,1,"c.krb5_auth_con_getkey_k"],krb5_auth_con_getlocalseqnumber:[69,0,1,"c.krb5_auth_con_getlocalseqnumber"],krb5_auth_con_getlocalsubkey:[70,0,1,"c.krb5_auth_con_getlocalsubkey"],krb5_auth_con_getrcache:[71,0,1,"c.krb5_auth_con_getrcache"],krb5_auth_con_getrecvsubkey:[72,0,1,"c.krb5_auth_con_getrecvsubkey"],krb5_auth_con_getrecvsubkey_k:[73,0,1,"c.krb5_auth_con_getrecvsubkey_k"],krb5_auth_con_getremoteseqnumber:[74,0,1,"c.krb5_auth_con_getremoteseqnumber"],krb5_auth_con_getremotesubkey:[75,0,1,"c.krb5_auth_con_getremotesubkey"],krb5_auth_con_getsendsubkey:[76,0,1,"c.krb5_auth_con_getsendsubkey"],krb5_auth_con_getsendsubkey_k:[77,0,1,"c.krb5_auth_con_getsendsubkey_k"],krb5_auth_con_init:[78,0,1,"c.krb5_auth_con_init"],krb5_auth_con_initivector:[79,0,1,"c.krb5_auth_con_initivector"],krb5_auth_con_set_checksum_func:[80,0,1,"c.krb5_auth_con_set_checksum_func"],krb5_auth_con_set_req_cksumtype:[81,0,1,"c.krb5_auth_con_set_req_cksumtype"],krb5_auth_con_setaddrs:[82,0,1,"c.krb5_auth_con_setaddrs"],krb5_auth_con_setflags:[83,0,1,"c.krb5_auth_con_setflags"],krb5_auth_con_setports:[84,0,1,"c.krb5_auth_con_setports"],krb5_auth_con_setrcache:[85,0,1,"c.krb5_auth_con_setrcache"],krb5_auth_con_setrecvsubkey:[86,0,1,"c.krb5_auth_con_setrecvsubkey"],krb5_auth_con_setrecvsubkey_k:[87,0,1,"c.krb5_auth_con_setrecvsubkey_k"],krb5_auth_con_setsendsubkey:[88,0,1,"c.krb5_auth_con_setsendsubkey"],krb5_auth_con_setsendsubkey_k:[89,0,1,"c.krb5_auth_con_setsendsubkey_k"],krb5_auth_con_setuseruserkey:[90,0,1,"c.krb5_auth_con_setuseruserkey"],krb5_auth_context:[808,1,1,"c.krb5_auth_context"],krb5_authdata:[809,1,1,"c.krb5_authdata"],krb5_authdatatype:[810,1,1,"c.krb5_authdatatype"],krb5_authenticator:[811,1,1,"c.krb5_authenticator"],krb5_boolean:[812,1,1,"c.krb5_boolean"],krb5_build_principal:[91,0,1,"c.krb5_build_principal"],krb5_build_principal_alloc_va:[92,0,1,"c.krb5_build_principal_alloc_va"],krb5_build_principal_ext:[93,0,1,"c.krb5_build_principal_ext"],krb5_build_principal_va:[94,0,1,"c.krb5_build_principal_va"],krb5_c_block_size:[95,0,1,"c.krb5_c_block_size"],krb5_c_checksum_length:[96,0,1,"c.krb5_c_checksum_length"],krb5_c_crypto_length:[97,0,1,"c.krb5_c_crypto_length"],krb5_c_crypto_length_iov:[98,0,1,"c.krb5_c_crypto_length_iov"],krb5_c_decrypt:[99,0,1,"c.krb5_c_decrypt"],krb5_c_decrypt_iov:[100,0,1,"c.krb5_c_decrypt_iov"],krb5_c_derive_prfplus:[101,0,1,"c.krb5_c_derive_prfplus"],krb5_c_encrypt:[102,0,1,"c.krb5_c_encrypt"],krb5_c_encrypt_iov:[103,0,1,"c.krb5_c_encrypt_iov"],krb5_c_encrypt_length:[104,0,1,"c.krb5_c_encrypt_length"],krb5_c_enctype_compare:[105,0,1,"c.krb5_c_enctype_compare"],krb5_c_free_state:[106,0,1,"c.krb5_c_free_state"],krb5_c_fx_cf2_simple:[107,0,1,"c.krb5_c_fx_cf2_simple"],krb5_c_init_state:[108,0,1,"c.krb5_c_init_state"],krb5_c_is_coll_proof_cksum:[109,0,1,"c.krb5_c_is_coll_proof_cksum"],krb5_c_is_keyed_cksum:[110,0,1,"c.krb5_c_is_keyed_cksum"],krb5_c_keyed_checksum_types:[111,0,1,"c.krb5_c_keyed_checksum_types"],krb5_c_keylengths:[112,0,1,"c.krb5_c_keylengths"],krb5_c_make_checksum:[113,0,1,"c.krb5_c_make_checksum"],krb5_c_make_checksum_iov:[114,0,1,"c.krb5_c_make_checksum_iov"],krb5_c_make_random_key:[115,0,1,"c.krb5_c_make_random_key"],krb5_c_padding_length:[116,0,1,"c.krb5_c_padding_length"],krb5_c_prf:[117,0,1,"c.krb5_c_prf"],krb5_c_prf_length:[118,0,1,"c.krb5_c_prf_length"],krb5_c_prfplus:[119,0,1,"c.krb5_c_prfplus"],krb5_c_random_add_entropy:[120,0,1,"c.krb5_c_random_add_entropy"],krb5_c_random_make_octets:[121,0,1,"c.krb5_c_random_make_octets"],krb5_c_random_os_entropy:[122,0,1,"c.krb5_c_random_os_entropy"],krb5_c_random_seed:[123,0,1,"c.krb5_c_random_seed"],krb5_c_random_to_key:[124,0,1,"c.krb5_c_random_to_key"],krb5_c_string_to_key:[125,0,1,"c.krb5_c_string_to_key"],krb5_c_string_to_key_with_params:[126,0,1,"c.krb5_c_string_to_key_with_params"],krb5_c_valid_cksumtype:[127,0,1,"c.krb5_c_valid_cksumtype"],krb5_c_valid_enctype:[128,0,1,"c.krb5_c_valid_enctype"],krb5_c_verify_checksum:[129,0,1,"c.krb5_c_verify_checksum"],krb5_c_verify_checksum_iov:[130,0,1,"c.krb5_c_verify_checksum_iov"],krb5_calculate_checksum:[131,0,1,"c.krb5_calculate_checksum"],krb5_cc_cache_match:[132,0,1,"c.krb5_cc_cache_match"],krb5_cc_close:[133,0,1,"c.krb5_cc_close"],krb5_cc_copy_creds:[134,0,1,"c.krb5_cc_copy_creds"],krb5_cc_cursor:[813,1,1,"c.krb5_cc_cursor"],krb5_cc_default:[135,0,1,"c.krb5_cc_default"],krb5_cc_default_name:[136,0,1,"c.krb5_cc_default_name"],krb5_cc_destroy:[137,0,1,"c.krb5_cc_destroy"],krb5_cc_dup:[138,0,1,"c.krb5_cc_dup"],krb5_cc_end_seq_get:[139,0,1,"c.krb5_cc_end_seq_get"],krb5_cc_gen_new:[140,0,1,"c.krb5_cc_gen_new"],krb5_cc_get_config:[141,0,1,"c.krb5_cc_get_config"],krb5_cc_get_flags:[142,0,1,"c.krb5_cc_get_flags"],krb5_cc_get_full_name:[143,0,1,"c.krb5_cc_get_full_name"],krb5_cc_get_name:[144,0,1,"c.krb5_cc_get_name"],krb5_cc_get_principal:[145,0,1,"c.krb5_cc_get_principal"],krb5_cc_get_type:[146,0,1,"c.krb5_cc_get_type"],krb5_cc_initialize:[147,0,1,"c.krb5_cc_initialize"],krb5_cc_move:[148,0,1,"c.krb5_cc_move"],krb5_cc_new_unique:[149,0,1,"c.krb5_cc_new_unique"],krb5_cc_next_cred:[150,0,1,"c.krb5_cc_next_cred"],krb5_cc_remove_cred:[151,0,1,"c.krb5_cc_remove_cred"],krb5_cc_resolve:[152,0,1,"c.krb5_cc_resolve"],krb5_cc_retrieve_cred:[153,0,1,"c.krb5_cc_retrieve_cred"],krb5_cc_select:[154,0,1,"c.krb5_cc_select"],krb5_cc_set_config:[155,0,1,"c.krb5_cc_set_config"],krb5_cc_set_default_name:[156,0,1,"c.krb5_cc_set_default_name"],krb5_cc_set_flags:[157,0,1,"c.krb5_cc_set_flags"],krb5_cc_start_seq_get:[158,0,1,"c.krb5_cc_start_seq_get"],krb5_cc_store_cred:[159,0,1,"c.krb5_cc_store_cred"],krb5_cc_support_switch:[160,0,1,"c.krb5_cc_support_switch"],krb5_cc_switch:[161,0,1,"c.krb5_cc_switch"],krb5_ccache:[814,1,1,"c.krb5_ccache"],krb5_cccol_cursor:[815,1,1,"c.krb5_cccol_cursor"],krb5_cccol_cursor_free:[162,0,1,"c.krb5_cccol_cursor_free"],krb5_cccol_cursor_new:[163,0,1,"c.krb5_cccol_cursor_new"],krb5_cccol_cursor_next:[164,0,1,"c.krb5_cccol_cursor_next"],krb5_cccol_have_content:[165,0,1,"c.krb5_cccol_have_content"],krb5_change_password:[166,0,1,"c.krb5_change_password"],krb5_check_clockskew:[167,0,1,"c.krb5_check_clockskew"],krb5_checksum:[816,1,1,"c.krb5_checksum"],krb5_checksum_size:[168,0,1,"c.krb5_checksum_size"],krb5_chpw_message:[169,0,1,"c.krb5_chpw_message"],krb5_cksumtype:[817,1,1,"c.krb5_cksumtype"],krb5_cksumtype_to_string:[170,0,1,"c.krb5_cksumtype_to_string"],krb5_clear_error_message:[171,0,1,"c.krb5_clear_error_message"],krb5_const:[790,3,1,""],krb5_const_pointer:[818,1,1,"c.krb5_const_pointer"],krb5_const_principal:[819,1,1,"c.krb5_const_principal"],krb5_context:[820,1,1,"c.krb5_context"],krb5_copy_addresses:[172,0,1,"c.krb5_copy_addresses"],krb5_copy_authdata:[173,0,1,"c.krb5_copy_authdata"],krb5_copy_authenticator:[174,0,1,"c.krb5_copy_authenticator"],krb5_copy_checksum:[175,0,1,"c.krb5_copy_checksum"],krb5_copy_context:[176,0,1,"c.krb5_copy_context"],krb5_copy_creds:[177,0,1,"c.krb5_copy_creds"],krb5_copy_data:[178,0,1,"c.krb5_copy_data"],krb5_copy_error_message:[179,0,1,"c.krb5_copy_error_message"],krb5_copy_keyblock:[180,0,1,"c.krb5_copy_keyblock"],krb5_copy_keyblock_contents:[181,0,1,"c.krb5_copy_keyblock_contents"],krb5_copy_principal:[182,0,1,"c.krb5_copy_principal"],krb5_copy_ticket:[183,0,1,"c.krb5_copy_ticket"],krb5_cred:[821,1,1,"c.krb5_cred"],krb5_cred_enc_part:[822,1,1,"c.krb5_cred_enc_part"],krb5_cred_info:[823,1,1,"c.krb5_cred_info"],krb5_creds:[824,1,1,"c.krb5_creds"],krb5_crypto_iov:[825,1,1,"c.krb5_crypto_iov"],krb5_cryptotype:[826,1,1,"c.krb5_cryptotype"],krb5_data:[827,1,1,"c.krb5_data"],krb5_decode_authdata_container:[184,0,1,"c.krb5_decode_authdata_container"],krb5_decode_ticket:[185,0,1,"c.krb5_decode_ticket"],krb5_decrypt:[186,0,1,"c.krb5_decrypt"],krb5_deltat:[828,1,1,"c.krb5_deltat"],krb5_deltat_to_string:[187,0,1,"c.krb5_deltat_to_string"],krb5_eblock_enctype:[188,0,1,"c.krb5_eblock_enctype"],krb5_enc_data:[829,1,1,"c.krb5_enc_data"],krb5_enc_kdc_rep_part:[830,1,1,"c.krb5_enc_kdc_rep_part"],krb5_enc_tkt_part:[831,1,1,"c.krb5_enc_tkt_part"],krb5_encode_authdata_container:[189,0,1,"c.krb5_encode_authdata_container"],krb5_encrypt:[190,0,1,"c.krb5_encrypt"],krb5_encrypt_block:[832,1,1,"c.krb5_encrypt_block"],krb5_encrypt_size:[191,0,1,"c.krb5_encrypt_size"],krb5_enctype:[833,1,1,"c.krb5_enctype"],krb5_enctype_to_name:[192,0,1,"c.krb5_enctype_to_name"],krb5_enctype_to_string:[193,0,1,"c.krb5_enctype_to_string"],krb5_error:[834,1,1,"c.krb5_error"],krb5_error_code:[835,1,1,"c.krb5_error_code"],krb5_expand_hostname:[194,0,1,"c.krb5_expand_hostname"],krb5_expire_callback_func:[836,1,1,"c.krb5_expire_callback_func"],krb5_find_authdata:[195,0,1,"c.krb5_find_authdata"],krb5_finish_key:[196,0,1,"c.krb5_finish_key"],krb5_finish_random_key:[197,0,1,"c.krb5_finish_random_key"],krb5_flags:[837,1,1,"c.krb5_flags"],krb5_free_addresses:[198,0,1,"c.krb5_free_addresses"],krb5_free_ap_rep_enc_part:[199,0,1,"c.krb5_free_ap_rep_enc_part"],krb5_free_authdata:[200,0,1,"c.krb5_free_authdata"],krb5_free_authenticator:[201,0,1,"c.krb5_free_authenticator"],krb5_free_checksum:[202,0,1,"c.krb5_free_checksum"],krb5_free_checksum_contents:[203,0,1,"c.krb5_free_checksum_contents"],krb5_free_cksumtypes:[204,0,1,"c.krb5_free_cksumtypes"],krb5_free_context:[205,0,1,"c.krb5_free_context"],krb5_free_cred_contents:[206,0,1,"c.krb5_free_cred_contents"],krb5_free_creds:[207,0,1,"c.krb5_free_creds"],krb5_free_data:[208,0,1,"c.krb5_free_data"],krb5_free_data_contents:[209,0,1,"c.krb5_free_data_contents"],krb5_free_default_realm:[210,0,1,"c.krb5_free_default_realm"],krb5_free_enctypes:[211,0,1,"c.krb5_free_enctypes"],krb5_free_error:[212,0,1,"c.krb5_free_error"],krb5_free_error_message:[213,0,1,"c.krb5_free_error_message"],krb5_free_host_realm:[214,0,1,"c.krb5_free_host_realm"],krb5_free_keyblock:[215,0,1,"c.krb5_free_keyblock"],krb5_free_keyblock_contents:[216,0,1,"c.krb5_free_keyblock_contents"],krb5_free_keytab_entry_contents:[217,0,1,"c.krb5_free_keytab_entry_contents"],krb5_free_principal:[218,0,1,"c.krb5_free_principal"],krb5_free_string:[219,0,1,"c.krb5_free_string"],krb5_free_tgt_creds:[220,0,1,"c.krb5_free_tgt_creds"],krb5_free_ticket:[221,0,1,"c.krb5_free_ticket"],krb5_free_unparsed_name:[222,0,1,"c.krb5_free_unparsed_name"],krb5_fwd_tgt_creds:[223,0,1,"c.krb5_fwd_tgt_creds"],krb5_get_credentials:[224,0,1,"c.krb5_get_credentials"],krb5_get_credentials_renew:[225,0,1,"c.krb5_get_credentials_renew"],krb5_get_credentials_validate:[226,0,1,"c.krb5_get_credentials_validate"],krb5_get_default_realm:[227,0,1,"c.krb5_get_default_realm"],krb5_get_error_message:[228,0,1,"c.krb5_get_error_message"],krb5_get_etype_info:[229,0,1,"c.krb5_get_etype_info"],krb5_get_fallback_host_realm:[230,0,1,"c.krb5_get_fallback_host_realm"],krb5_get_host_realm:[231,0,1,"c.krb5_get_host_realm"],krb5_get_in_tkt_with_keytab:[232,0,1,"c.krb5_get_in_tkt_with_keytab"],krb5_get_in_tkt_with_password:[233,0,1,"c.krb5_get_in_tkt_with_password"],krb5_get_in_tkt_with_skey:[234,0,1,"c.krb5_get_in_tkt_with_skey"],krb5_get_init_creds_keytab:[235,0,1,"c.krb5_get_init_creds_keytab"],krb5_get_init_creds_opt:[838,1,1,"c.krb5_get_init_creds_opt"],krb5_get_init_creds_opt_alloc:[236,0,1,"c.krb5_get_init_creds_opt_alloc"],krb5_get_init_creds_opt_free:[237,0,1,"c.krb5_get_init_creds_opt_free"],krb5_get_init_creds_opt_get_fast_flags:[238,0,1,"c.krb5_get_init_creds_opt_get_fast_flags"],krb5_get_init_creds_opt_init:[239,0,1,"c.krb5_get_init_creds_opt_init"],krb5_get_init_creds_opt_set_address_list:[240,0,1,"c.krb5_get_init_creds_opt_set_address_list"],krb5_get_init_creds_opt_set_anonymous:[241,0,1,"c.krb5_get_init_creds_opt_set_anonymous"],krb5_get_init_creds_opt_set_canonicalize:[242,0,1,"c.krb5_get_init_creds_opt_set_canonicalize"],krb5_get_init_creds_opt_set_change_password_prompt:[243,0,1,"c.krb5_get_init_creds_opt_set_change_password_prompt"],krb5_get_init_creds_opt_set_etype_list:[244,0,1,"c.krb5_get_init_creds_opt_set_etype_list"],krb5_get_init_creds_opt_set_expire_callback:[245,0,1,"c.krb5_get_init_creds_opt_set_expire_callback"],krb5_get_init_creds_opt_set_fast_ccache:[246,0,1,"c.krb5_get_init_creds_opt_set_fast_ccache"],krb5_get_init_creds_opt_set_fast_ccache_name:[247,0,1,"c.krb5_get_init_creds_opt_set_fast_ccache_name"],krb5_get_init_creds_opt_set_fast_flags:[248,0,1,"c.krb5_get_init_creds_opt_set_fast_flags"],krb5_get_init_creds_opt_set_forwardable:[249,0,1,"c.krb5_get_init_creds_opt_set_forwardable"],krb5_get_init_creds_opt_set_in_ccache:[250,0,1,"c.krb5_get_init_creds_opt_set_in_ccache"],krb5_get_init_creds_opt_set_out_ccache:[251,0,1,"c.krb5_get_init_creds_opt_set_out_ccache"],krb5_get_init_creds_opt_set_pa:[252,0,1,"c.krb5_get_init_creds_opt_set_pa"],krb5_get_init_creds_opt_set_pac_request:[253,0,1,"c.krb5_get_init_creds_opt_set_pac_request"],krb5_get_init_creds_opt_set_preauth_list:[254,0,1,"c.krb5_get_init_creds_opt_set_preauth_list"],krb5_get_init_creds_opt_set_proxiable:[255,0,1,"c.krb5_get_init_creds_opt_set_proxiable"],krb5_get_init_creds_opt_set_renew_life:[256,0,1,"c.krb5_get_init_creds_opt_set_renew_life"],krb5_get_init_creds_opt_set_responder:[257,0,1,"c.krb5_get_init_creds_opt_set_responder"],krb5_get_init_creds_opt_set_salt:[258,0,1,"c.krb5_get_init_creds_opt_set_salt"],krb5_get_init_creds_opt_set_tkt_life:[259,0,1,"c.krb5_get_init_creds_opt_set_tkt_life"],krb5_get_init_creds_password:[260,0,1,"c.krb5_get_init_creds_password"],krb5_get_permitted_enctypes:[261,0,1,"c.krb5_get_permitted_enctypes"],krb5_get_profile:[262,0,1,"c.krb5_get_profile"],krb5_get_prompt_types:[263,0,1,"c.krb5_get_prompt_types"],krb5_get_renewed_creds:[264,0,1,"c.krb5_get_renewed_creds"],krb5_get_server_rcache:[265,0,1,"c.krb5_get_server_rcache"],krb5_get_time_offsets:[266,0,1,"c.krb5_get_time_offsets"],krb5_get_validated_creds:[267,0,1,"c.krb5_get_validated_creds"],krb5_gic_opt_pa_data:[839,1,1,"c.krb5_gic_opt_pa_data"],krb5_init_context:[268,0,1,"c.krb5_init_context"],krb5_init_context_profile:[269,0,1,"c.krb5_init_context_profile"],krb5_init_creds_context:[840,1,1,"c.krb5_init_creds_context"],krb5_init_creds_free:[270,0,1,"c.krb5_init_creds_free"],krb5_init_creds_get:[271,0,1,"c.krb5_init_creds_get"],krb5_init_creds_get_creds:[272,0,1,"c.krb5_init_creds_get_creds"],krb5_init_creds_get_error:[273,0,1,"c.krb5_init_creds_get_error"],krb5_init_creds_get_times:[274,0,1,"c.krb5_init_creds_get_times"],krb5_init_creds_init:[275,0,1,"c.krb5_init_creds_init"],krb5_init_creds_set_keytab:[276,0,1,"c.krb5_init_creds_set_keytab"],krb5_init_creds_set_password:[277,0,1,"c.krb5_init_creds_set_password"],krb5_init_creds_set_service:[278,0,1,"c.krb5_init_creds_set_service"],krb5_init_creds_step:[279,0,1,"c.krb5_init_creds_step"],krb5_init_keyblock:[280,0,1,"c.krb5_init_keyblock"],krb5_init_random_key:[281,0,1,"c.krb5_init_random_key"],krb5_init_secure_context:[282,0,1,"c.krb5_init_secure_context"],krb5_int16:[841,1,1,"c.krb5_int16"],krb5_int32:[842,1,1,"c.krb5_int32"],krb5_is_config_principal:[283,0,1,"c.krb5_is_config_principal"],krb5_is_referral_realm:[284,0,1,"c.krb5_is_referral_realm"],krb5_is_thread_safe:[285,0,1,"c.krb5_is_thread_safe"],krb5_k_create_key:[286,0,1,"c.krb5_k_create_key"],krb5_k_decrypt:[287,0,1,"c.krb5_k_decrypt"],krb5_k_decrypt_iov:[288,0,1,"c.krb5_k_decrypt_iov"],krb5_k_encrypt:[289,0,1,"c.krb5_k_encrypt"],krb5_k_encrypt_iov:[290,0,1,"c.krb5_k_encrypt_iov"],krb5_k_free_key:[291,0,1,"c.krb5_k_free_key"],krb5_k_key_enctype:[292,0,1,"c.krb5_k_key_enctype"],krb5_k_key_keyblock:[293,0,1,"c.krb5_k_key_keyblock"],krb5_k_make_checksum:[294,0,1,"c.krb5_k_make_checksum"],krb5_k_make_checksum_iov:[295,0,1,"c.krb5_k_make_checksum_iov"],krb5_k_prf:[296,0,1,"c.krb5_k_prf"],krb5_k_reference_key:[297,0,1,"c.krb5_k_reference_key"],krb5_k_verify_checksum:[298,0,1,"c.krb5_k_verify_checksum"],krb5_k_verify_checksum_iov:[299,0,1,"c.krb5_k_verify_checksum_iov"],krb5_kdc_rep:[843,1,1,"c.krb5_kdc_rep"],krb5_kdc_req:[844,1,1,"c.krb5_kdc_req"],krb5_kdc_sign_ticket:[300,0,1,"c.krb5_kdc_sign_ticket"],krb5_kdc_verify_ticket:[301,0,1,"c.krb5_kdc_verify_ticket"],krb5_key:[845,1,1,"c.krb5_key"],krb5_keyblock:[846,1,1,"c.krb5_keyblock"],krb5_keytab:[847,1,1,"c.krb5_keytab"],krb5_keytab_entry:[848,1,1,"c.krb5_keytab_entry"],krb5_keyusage:[849,1,1,"c.krb5_keyusage"],krb5_kt_add_entry:[302,0,1,"c.krb5_kt_add_entry"],krb5_kt_client_default:[303,0,1,"c.krb5_kt_client_default"],krb5_kt_close:[304,0,1,"c.krb5_kt_close"],krb5_kt_cursor:[850,1,1,"c.krb5_kt_cursor"],krb5_kt_default:[305,0,1,"c.krb5_kt_default"],krb5_kt_default_name:[306,0,1,"c.krb5_kt_default_name"],krb5_kt_dup:[307,0,1,"c.krb5_kt_dup"],krb5_kt_end_seq_get:[308,0,1,"c.krb5_kt_end_seq_get"],krb5_kt_free_entry:[309,0,1,"c.krb5_kt_free_entry"],krb5_kt_get_entry:[310,0,1,"c.krb5_kt_get_entry"],krb5_kt_get_name:[311,0,1,"c.krb5_kt_get_name"],krb5_kt_get_type:[312,0,1,"c.krb5_kt_get_type"],krb5_kt_have_content:[313,0,1,"c.krb5_kt_have_content"],krb5_kt_next_entry:[314,0,1,"c.krb5_kt_next_entry"],krb5_kt_read_service_key:[315,0,1,"c.krb5_kt_read_service_key"],krb5_kt_remove_entry:[316,0,1,"c.krb5_kt_remove_entry"],krb5_kt_resolve:[317,0,1,"c.krb5_kt_resolve"],krb5_kt_start_seq_get:[318,0,1,"c.krb5_kt_start_seq_get"],krb5_kuserok:[319,0,1,"c.krb5_kuserok"],krb5_kvno:[851,1,1,"c.krb5_kvno"],krb5_last_req_entry:[852,1,1,"c.krb5_last_req_entry"],krb5_magic:[853,1,1,"c.krb5_magic"],krb5_make_authdata_kdc_issued:[320,0,1,"c.krb5_make_authdata_kdc_issued"],krb5_marshal_credentials:[321,0,1,"c.krb5_marshal_credentials"],krb5_merge_authdata:[322,0,1,"c.krb5_merge_authdata"],krb5_mk_1cred:[323,0,1,"c.krb5_mk_1cred"],krb5_mk_error:[324,0,1,"c.krb5_mk_error"],krb5_mk_ncred:[325,0,1,"c.krb5_mk_ncred"],krb5_mk_priv:[326,0,1,"c.krb5_mk_priv"],krb5_mk_rep:[327,0,1,"c.krb5_mk_rep"],krb5_mk_rep_dce:[328,0,1,"c.krb5_mk_rep_dce"],krb5_mk_req:[329,0,1,"c.krb5_mk_req"],krb5_mk_req_checksum_func:[854,1,1,"c.krb5_mk_req_checksum_func"],krb5_mk_req_extended:[330,0,1,"c.krb5_mk_req_extended"],krb5_mk_safe:[331,0,1,"c.krb5_mk_safe"],krb5_msgtype:[855,1,1,"c.krb5_msgtype"],krb5_octet:[856,1,1,"c.krb5_octet"],krb5_os_localaddr:[332,0,1,"c.krb5_os_localaddr"],krb5_pa_data:[857,1,1,"c.krb5_pa_data"],krb5_pa_pac_req:[858,1,1,"c.krb5_pa_pac_req"],krb5_pa_server_referral_data:[859,1,1,"c.krb5_pa_server_referral_data"],krb5_pa_svr_referral_data:[860,1,1,"c.krb5_pa_svr_referral_data"],krb5_pac:[861,1,1,"c.krb5_pac"],krb5_pac_add_buffer:[333,0,1,"c.krb5_pac_add_buffer"],krb5_pac_free:[334,0,1,"c.krb5_pac_free"],krb5_pac_get_buffer:[335,0,1,"c.krb5_pac_get_buffer"],krb5_pac_get_client_info:[336,0,1,"c.krb5_pac_get_client_info"],krb5_pac_get_types:[337,0,1,"c.krb5_pac_get_types"],krb5_pac_init:[338,0,1,"c.krb5_pac_init"],krb5_pac_parse:[339,0,1,"c.krb5_pac_parse"],krb5_pac_sign:[340,0,1,"c.krb5_pac_sign"],krb5_pac_sign_ext:[341,0,1,"c.krb5_pac_sign_ext"],krb5_pac_verify:[342,0,1,"c.krb5_pac_verify"],krb5_pac_verify_ext:[343,0,1,"c.krb5_pac_verify_ext"],krb5_parse_name:[344,0,1,"c.krb5_parse_name"],krb5_parse_name_flags:[345,0,1,"c.krb5_parse_name_flags"],krb5_pointer:[862,1,1,"c.krb5_pointer"],krb5_post_recv_fn:[863,1,1,"c.krb5_post_recv_fn"],krb5_pre_send_fn:[864,1,1,"c.krb5_pre_send_fn"],krb5_preauthtype:[865,1,1,"c.krb5_preauthtype"],krb5_prepend_error_message:[346,0,1,"c.krb5_prepend_error_message"],krb5_princ_component:[791,3,1,""],krb5_princ_name:[792,3,1,""],krb5_princ_realm:[793,3,1,""],krb5_princ_set_realm:[794,3,1,""],krb5_princ_set_realm_data:[795,3,1,""],krb5_princ_set_realm_length:[796,3,1,""],krb5_princ_size:[797,3,1,""],krb5_princ_type:[798,3,1,""],krb5_principal2salt:[347,0,1,"c.krb5_principal2salt"],krb5_principal:[866,1,1,"c.krb5_principal"],krb5_principal_compare:[348,0,1,"c.krb5_principal_compare"],krb5_principal_compare_any_realm:[349,0,1,"c.krb5_principal_compare_any_realm"],krb5_principal_compare_flags:[350,0,1,"c.krb5_principal_compare_flags"],krb5_principal_data:[867,1,1,"c.krb5_principal_data"],krb5_process_key:[351,0,1,"c.krb5_process_key"],krb5_prompt:[868,1,1,"c.krb5_prompt"],krb5_prompt_type:[869,1,1,"c.krb5_prompt_type"],krb5_prompter_fct:[870,1,1,"c.krb5_prompter_fct"],krb5_prompter_posix:[352,0,1,"c.krb5_prompter_posix"],krb5_pwd_data:[871,1,1,"c.krb5_pwd_data"],krb5_random_key:[353,0,1,"c.krb5_random_key"],krb5_rcache:[872,1,1,"c.krb5_rcache"],krb5_rd_cred:[354,0,1,"c.krb5_rd_cred"],krb5_rd_error:[355,0,1,"c.krb5_rd_error"],krb5_rd_priv:[356,0,1,"c.krb5_rd_priv"],krb5_rd_rep:[357,0,1,"c.krb5_rd_rep"],krb5_rd_rep_dce:[358,0,1,"c.krb5_rd_rep_dce"],krb5_rd_req:[359,0,1,"c.krb5_rd_req"],krb5_rd_safe:[360,0,1,"c.krb5_rd_safe"],krb5_read_password:[361,0,1,"c.krb5_read_password"],krb5_realm_compare:[362,0,1,"c.krb5_realm_compare"],krb5_recvauth:[363,0,1,"c.krb5_recvauth"],krb5_recvauth_version:[364,0,1,"c.krb5_recvauth_version"],krb5_replay_data:[873,1,1,"c.krb5_replay_data"],krb5_responder_context:[874,1,1,"c.krb5_responder_context"],krb5_responder_fn:[875,1,1,"c.krb5_responder_fn"],krb5_responder_get_challenge:[365,0,1,"c.krb5_responder_get_challenge"],krb5_responder_list_questions:[366,0,1,"c.krb5_responder_list_questions"],krb5_responder_otp_challenge:[876,1,1,"c.krb5_responder_otp_challenge"],krb5_responder_otp_challenge_free:[367,0,1,"c.krb5_responder_otp_challenge_free"],krb5_responder_otp_get_challenge:[368,0,1,"c.krb5_responder_otp_get_challenge"],krb5_responder_otp_set_answer:[369,0,1,"c.krb5_responder_otp_set_answer"],krb5_responder_otp_tokeninfo:[877,1,1,"c.krb5_responder_otp_tokeninfo"],krb5_responder_pkinit_challenge:[878,1,1,"c.krb5_responder_pkinit_challenge"],krb5_responder_pkinit_challenge_free:[370,0,1,"c.krb5_responder_pkinit_challenge_free"],krb5_responder_pkinit_get_challenge:[371,0,1,"c.krb5_responder_pkinit_get_challenge"],krb5_responder_pkinit_identity:[879,1,1,"c.krb5_responder_pkinit_identity"],krb5_responder_pkinit_set_answer:[372,0,1,"c.krb5_responder_pkinit_set_answer"],krb5_responder_set_answer:[373,0,1,"c.krb5_responder_set_answer"],krb5_response:[880,1,1,"c.krb5_response"],krb5_roundup:[799,3,1,""],krb5_salttype_to_string:[374,0,1,"c.krb5_salttype_to_string"],krb5_sendauth:[375,0,1,"c.krb5_sendauth"],krb5_server_decrypt_ticket_keytab:[376,0,1,"c.krb5_server_decrypt_ticket_keytab"],krb5_set_default_realm:[377,0,1,"c.krb5_set_default_realm"],krb5_set_default_tgs_enctypes:[378,0,1,"c.krb5_set_default_tgs_enctypes"],krb5_set_error_message:[379,0,1,"c.krb5_set_error_message"],krb5_set_kdc_recv_hook:[380,0,1,"c.krb5_set_kdc_recv_hook"],krb5_set_kdc_send_hook:[381,0,1,"c.krb5_set_kdc_send_hook"],krb5_set_password:[382,0,1,"c.krb5_set_password"],krb5_set_password_using_ccache:[383,0,1,"c.krb5_set_password_using_ccache"],krb5_set_principal_realm:[384,0,1,"c.krb5_set_principal_realm"],krb5_set_real_time:[385,0,1,"c.krb5_set_real_time"],krb5_set_trace_callback:[386,0,1,"c.krb5_set_trace_callback"],krb5_set_trace_filename:[387,0,1,"c.krb5_set_trace_filename"],krb5_sname_match:[388,0,1,"c.krb5_sname_match"],krb5_sname_to_principal:[389,0,1,"c.krb5_sname_to_principal"],krb5_string_to_cksumtype:[390,0,1,"c.krb5_string_to_cksumtype"],krb5_string_to_deltat:[391,0,1,"c.krb5_string_to_deltat"],krb5_string_to_enctype:[392,0,1,"c.krb5_string_to_enctype"],krb5_string_to_key:[393,0,1,"c.krb5_string_to_key"],krb5_string_to_salttype:[394,0,1,"c.krb5_string_to_salttype"],krb5_string_to_timestamp:[395,0,1,"c.krb5_string_to_timestamp"],krb5_ticket:[881,1,1,"c.krb5_ticket"],krb5_ticket_times:[882,1,1,"c.krb5_ticket_times"],krb5_timeofday:[396,0,1,"c.krb5_timeofday"],krb5_timestamp:[883,1,1,"c.krb5_timestamp"],krb5_timestamp_to_sfstring:[397,0,1,"c.krb5_timestamp_to_sfstring"],krb5_timestamp_to_string:[398,0,1,"c.krb5_timestamp_to_string"],krb5_tkt_authent:[884,1,1,"c.krb5_tkt_authent"],krb5_tkt_creds_context:[885,1,1,"c.krb5_tkt_creds_context"],krb5_tkt_creds_free:[399,0,1,"c.krb5_tkt_creds_free"],krb5_tkt_creds_get:[400,0,1,"c.krb5_tkt_creds_get"],krb5_tkt_creds_get_creds:[401,0,1,"c.krb5_tkt_creds_get_creds"],krb5_tkt_creds_get_times:[402,0,1,"c.krb5_tkt_creds_get_times"],krb5_tkt_creds_init:[403,0,1,"c.krb5_tkt_creds_init"],krb5_tkt_creds_step:[404,0,1,"c.krb5_tkt_creds_step"],krb5_trace_callback:[886,1,1,"c.krb5_trace_callback"],krb5_trace_info:[887,1,1,"c.krb5_trace_info"],krb5_transited:[888,1,1,"c.krb5_transited"],krb5_typed_data:[889,1,1,"c.krb5_typed_data"],krb5_ui_2:[890,1,1,"c.krb5_ui_2"],krb5_ui_4:[891,1,1,"c.krb5_ui_4"],krb5_unmarshal_credentials:[405,0,1,"c.krb5_unmarshal_credentials"],krb5_unparse_name:[406,0,1,"c.krb5_unparse_name"],krb5_unparse_name_ext:[407,0,1,"c.krb5_unparse_name_ext"],krb5_unparse_name_flags:[408,0,1,"c.krb5_unparse_name_flags"],krb5_unparse_name_flags_ext:[409,0,1,"c.krb5_unparse_name_flags_ext"],krb5_us_timeofday:[410,0,1,"c.krb5_us_timeofday"],krb5_use_enctype:[411,0,1,"c.krb5_use_enctype"],krb5_verify_authdata_kdc_issued:[412,0,1,"c.krb5_verify_authdata_kdc_issued"],krb5_verify_checksum:[413,0,1,"c.krb5_verify_checksum"],krb5_verify_init_creds:[414,0,1,"c.krb5_verify_init_creds"],krb5_verify_init_creds_opt:[892,1,1,"c.krb5_verify_init_creds_opt"],krb5_verify_init_creds_opt_init:[415,0,1,"c.krb5_verify_init_creds_opt_init"],krb5_verify_init_creds_opt_set_ap_req_nofail:[416,0,1,"c.krb5_verify_init_creds_opt_set_ap_req_nofail"],krb5_vprepend_error_message:[417,0,1,"c.krb5_vprepend_error_message"],krb5_vset_error_message:[418,0,1,"c.krb5_vset_error_message"],krb5_vwrap_error_message:[419,0,1,"c.krb5_vwrap_error_message"],krb5_wrap_error_message:[420,0,1,"c.krb5_wrap_error_message"],krb5_x:[800,3,1,""],krb5_xc:[801,3,1,""],passwd_phrase_element:[893,1,1,"c.passwd_phrase_element"]},krb5_address:{addrtype:[803,2,1,"c.krb5_address.addrtype"],contents:[803,2,1,"c.krb5_address.contents"],length:[803,2,1,"c.krb5_address.length"],magic:[803,2,1,"c.krb5_address.magic"]},krb5_ap_rep:{enc_part:[805,2,1,"c.krb5_ap_rep.enc_part"],magic:[805,2,1,"c.krb5_ap_rep.magic"]},krb5_ap_rep_enc_part:{ctime:[806,2,1,"c.krb5_ap_rep_enc_part.ctime"],cusec:[806,2,1,"c.krb5_ap_rep_enc_part.cusec"],magic:[806,2,1,"c.krb5_ap_rep_enc_part.magic"],seq_number:[806,2,1,"c.krb5_ap_rep_enc_part.seq_number"],subkey:[806,2,1,"c.krb5_ap_rep_enc_part.subkey"]},krb5_ap_req:{ap_options:[807,2,1,"c.krb5_ap_req.ap_options"],authenticator:[807,2,1,"c.krb5_ap_req.authenticator"],magic:[807,2,1,"c.krb5_ap_req.magic"],ticket:[807,2,1,"c.krb5_ap_req.ticket"]},krb5_authdata:{ad_type:[809,2,1,"c.krb5_authdata.ad_type"],contents:[809,2,1,"c.krb5_authdata.contents"],length:[809,2,1,"c.krb5_authdata.length"],magic:[809,2,1,"c.krb5_authdata.magic"]},krb5_authenticator:{authorization_data:[811,2,1,"c.krb5_authenticator.authorization_data"],checksum:[811,2,1,"c.krb5_authenticator.checksum"],client:[811,2,1,"c.krb5_authenticator.client"],ctime:[811,2,1,"c.krb5_authenticator.ctime"],cusec:[811,2,1,"c.krb5_authenticator.cusec"],magic:[811,2,1,"c.krb5_authenticator.magic"],seq_number:[811,2,1,"c.krb5_authenticator.seq_number"],subkey:[811,2,1,"c.krb5_authenticator.subkey"]},krb5_checksum:{checksum_type:[816,2,1,"c.krb5_checksum.checksum_type"],contents:[816,2,1,"c.krb5_checksum.contents"],length:[816,2,1,"c.krb5_checksum.length"],magic:[816,2,1,"c.krb5_checksum.magic"]},krb5_const_principal:{data:[819,2,1,"c.krb5_const_principal.data"],length:[819,2,1,"c.krb5_const_principal.length"],magic:[819,2,1,"c.krb5_const_principal.magic"],realm:[819,2,1,"c.krb5_const_principal.realm"],type:[819,2,1,"c.krb5_const_principal.type"]},krb5_cred:{enc_part2:[821,2,1,"c.krb5_cred.enc_part2"],enc_part:[821,2,1,"c.krb5_cred.enc_part"],magic:[821,2,1,"c.krb5_cred.magic"],tickets:[821,2,1,"c.krb5_cred.tickets"]},krb5_cred_enc_part:{magic:[822,2,1,"c.krb5_cred_enc_part.magic"],nonce:[822,2,1,"c.krb5_cred_enc_part.nonce"],r_address:[822,2,1,"c.krb5_cred_enc_part.r_address"],s_address:[822,2,1,"c.krb5_cred_enc_part.s_address"],ticket_info:[822,2,1,"c.krb5_cred_enc_part.ticket_info"],timestamp:[822,2,1,"c.krb5_cred_enc_part.timestamp"],usec:[822,2,1,"c.krb5_cred_enc_part.usec"]},krb5_cred_info:{caddrs:[823,2,1,"c.krb5_cred_info.caddrs"],client:[823,2,1,"c.krb5_cred_info.client"],flags:[823,2,1,"c.krb5_cred_info.flags"],magic:[823,2,1,"c.krb5_cred_info.magic"],server:[823,2,1,"c.krb5_cred_info.server"],session:[823,2,1,"c.krb5_cred_info.session"],times:[823,2,1,"c.krb5_cred_info.times"]},krb5_creds:{addresses:[824,2,1,"c.krb5_creds.addresses"],authdata:[824,2,1,"c.krb5_creds.authdata"],client:[824,2,1,"c.krb5_creds.client"],is_skey:[824,2,1,"c.krb5_creds.is_skey"],keyblock:[824,2,1,"c.krb5_creds.keyblock"],magic:[824,2,1,"c.krb5_creds.magic"],second_ticket:[824,2,1,"c.krb5_creds.second_ticket"],server:[824,2,1,"c.krb5_creds.server"],ticket:[824,2,1,"c.krb5_creds.ticket"],ticket_flags:[824,2,1,"c.krb5_creds.ticket_flags"],times:[824,2,1,"c.krb5_creds.times"]},krb5_crypto_iov:{data:[825,2,1,"c.krb5_crypto_iov.data"],flags:[825,2,1,"c.krb5_crypto_iov.flags"]},krb5_data:{data:[827,2,1,"c.krb5_data.data"],length:[827,2,1,"c.krb5_data.length"],magic:[827,2,1,"c.krb5_data.magic"]},krb5_enc_data:{ciphertext:[829,2,1,"c.krb5_enc_data.ciphertext"],enctype:[829,2,1,"c.krb5_enc_data.enctype"],kvno:[829,2,1,"c.krb5_enc_data.kvno"],magic:[829,2,1,"c.krb5_enc_data.magic"]},krb5_enc_kdc_rep_part:{caddrs:[830,2,1,"c.krb5_enc_kdc_rep_part.caddrs"],enc_padata:[830,2,1,"c.krb5_enc_kdc_rep_part.enc_padata"],flags:[830,2,1,"c.krb5_enc_kdc_rep_part.flags"],key_exp:[830,2,1,"c.krb5_enc_kdc_rep_part.key_exp"],last_req:[830,2,1,"c.krb5_enc_kdc_rep_part.last_req"],magic:[830,2,1,"c.krb5_enc_kdc_rep_part.magic"],msg_type:[830,2,1,"c.krb5_enc_kdc_rep_part.msg_type"],nonce:[830,2,1,"c.krb5_enc_kdc_rep_part.nonce"],server:[830,2,1,"c.krb5_enc_kdc_rep_part.server"],session:[830,2,1,"c.krb5_enc_kdc_rep_part.session"],times:[830,2,1,"c.krb5_enc_kdc_rep_part.times"]},krb5_enc_tkt_part:{authorization_data:[831,2,1,"c.krb5_enc_tkt_part.authorization_data"],caddrs:[831,2,1,"c.krb5_enc_tkt_part.caddrs"],client:[831,2,1,"c.krb5_enc_tkt_part.client"],flags:[831,2,1,"c.krb5_enc_tkt_part.flags"],magic:[831,2,1,"c.krb5_enc_tkt_part.magic"],session:[831,2,1,"c.krb5_enc_tkt_part.session"],times:[831,2,1,"c.krb5_enc_tkt_part.times"],transited:[831,2,1,"c.krb5_enc_tkt_part.transited"]},krb5_encrypt_block:{crypto_entry:[832,2,1,"c.krb5_encrypt_block.crypto_entry"],key:[832,2,1,"c.krb5_encrypt_block.key"],magic:[832,2,1,"c.krb5_encrypt_block.magic"]},krb5_error:{client:[834,2,1,"c.krb5_error.client"],ctime:[834,2,1,"c.krb5_error.ctime"],cusec:[834,2,1,"c.krb5_error.cusec"],e_data:[834,2,1,"c.krb5_error.e_data"],error:[834,2,1,"c.krb5_error.error"],magic:[834,2,1,"c.krb5_error.magic"],server:[834,2,1,"c.krb5_error.server"],stime:[834,2,1,"c.krb5_error.stime"],susec:[834,2,1,"c.krb5_error.susec"],text:[834,2,1,"c.krb5_error.text"]},krb5_get_init_creds_opt:{address_list:[838,2,1,"c.krb5_get_init_creds_opt.address_list"],etype_list:[838,2,1,"c.krb5_get_init_creds_opt.etype_list"],etype_list_length:[838,2,1,"c.krb5_get_init_creds_opt.etype_list_length"],flags:[838,2,1,"c.krb5_get_init_creds_opt.flags"],forwardable:[838,2,1,"c.krb5_get_init_creds_opt.forwardable"],preauth_list:[838,2,1,"c.krb5_get_init_creds_opt.preauth_list"],preauth_list_length:[838,2,1,"c.krb5_get_init_creds_opt.preauth_list_length"],proxiable:[838,2,1,"c.krb5_get_init_creds_opt.proxiable"],renew_life:[838,2,1,"c.krb5_get_init_creds_opt.renew_life"],salt:[838,2,1,"c.krb5_get_init_creds_opt.salt"],tkt_life:[838,2,1,"c.krb5_get_init_creds_opt.tkt_life"]},krb5_gic_opt_pa_data:{attr:[839,2,1,"c.krb5_gic_opt_pa_data.attr"],value:[839,2,1,"c.krb5_gic_opt_pa_data.value"]},krb5_kdc_rep:{client:[843,2,1,"c.krb5_kdc_rep.client"],enc_part2:[843,2,1,"c.krb5_kdc_rep.enc_part2"],enc_part:[843,2,1,"c.krb5_kdc_rep.enc_part"],magic:[843,2,1,"c.krb5_kdc_rep.magic"],msg_type:[843,2,1,"c.krb5_kdc_rep.msg_type"],padata:[843,2,1,"c.krb5_kdc_rep.padata"],ticket:[843,2,1,"c.krb5_kdc_rep.ticket"]},krb5_kdc_req:{addresses:[844,2,1,"c.krb5_kdc_req.addresses"],authorization_data:[844,2,1,"c.krb5_kdc_req.authorization_data"],client:[844,2,1,"c.krb5_kdc_req.client"],from:[844,2,1,"c.krb5_kdc_req.from"],kdc_options:[844,2,1,"c.krb5_kdc_req.kdc_options"],ktype:[844,2,1,"c.krb5_kdc_req.ktype"],magic:[844,2,1,"c.krb5_kdc_req.magic"],msg_type:[844,2,1,"c.krb5_kdc_req.msg_type"],nktypes:[844,2,1,"c.krb5_kdc_req.nktypes"],nonce:[844,2,1,"c.krb5_kdc_req.nonce"],padata:[844,2,1,"c.krb5_kdc_req.padata"],rtime:[844,2,1,"c.krb5_kdc_req.rtime"],second_ticket:[844,2,1,"c.krb5_kdc_req.second_ticket"],server:[844,2,1,"c.krb5_kdc_req.server"],till:[844,2,1,"c.krb5_kdc_req.till"],unenc_authdata:[844,2,1,"c.krb5_kdc_req.unenc_authdata"]},krb5_keyblock:{contents:[846,2,1,"c.krb5_keyblock.contents"],enctype:[846,2,1,"c.krb5_keyblock.enctype"],length:[846,2,1,"c.krb5_keyblock.length"],magic:[846,2,1,"c.krb5_keyblock.magic"]},krb5_keytab_entry:{key:[848,2,1,"c.krb5_keytab_entry.key"],magic:[848,2,1,"c.krb5_keytab_entry.magic"],principal:[848,2,1,"c.krb5_keytab_entry.principal"],timestamp:[848,2,1,"c.krb5_keytab_entry.timestamp"],vno:[848,2,1,"c.krb5_keytab_entry.vno"]},krb5_last_req_entry:{lr_type:[852,2,1,"c.krb5_last_req_entry.lr_type"],magic:[852,2,1,"c.krb5_last_req_entry.magic"],value:[852,2,1,"c.krb5_last_req_entry.value"]},krb5_pa_data:{contents:[857,2,1,"c.krb5_pa_data.contents"],length:[857,2,1,"c.krb5_pa_data.length"],magic:[857,2,1,"c.krb5_pa_data.magic"],pa_type:[857,2,1,"c.krb5_pa_data.pa_type"]},krb5_pa_pac_req:{include_pac:[858,2,1,"c.krb5_pa_pac_req.include_pac"]},krb5_pa_server_referral_data:{referral_valid_until:[859,2,1,"c.krb5_pa_server_referral_data.referral_valid_until"],referred_realm:[859,2,1,"c.krb5_pa_server_referral_data.referred_realm"],rep_cksum:[859,2,1,"c.krb5_pa_server_referral_data.rep_cksum"],requested_principal_name:[859,2,1,"c.krb5_pa_server_referral_data.requested_principal_name"],true_principal_name:[859,2,1,"c.krb5_pa_server_referral_data.true_principal_name"]},krb5_pa_svr_referral_data:{principal:[860,2,1,"c.krb5_pa_svr_referral_data.principal"]},krb5_principal:{data:[866,2,1,"c.krb5_principal.data"],length:[866,2,1,"c.krb5_principal.length"],magic:[866,2,1,"c.krb5_principal.magic"],realm:[866,2,1,"c.krb5_principal.realm"],type:[866,2,1,"c.krb5_principal.type"]},krb5_principal_data:{data:[867,2,1,"c.krb5_principal_data.data"],length:[867,2,1,"c.krb5_principal_data.length"],magic:[867,2,1,"c.krb5_principal_data.magic"],realm:[867,2,1,"c.krb5_principal_data.realm"],type:[867,2,1,"c.krb5_principal_data.type"]},krb5_prompt:{hidden:[868,2,1,"c.krb5_prompt.hidden"],prompt:[868,2,1,"c.krb5_prompt.prompt"],reply:[868,2,1,"c.krb5_prompt.reply"]},krb5_pwd_data:{element:[871,2,1,"c.krb5_pwd_data.element"],magic:[871,2,1,"c.krb5_pwd_data.magic"],sequence_count:[871,2,1,"c.krb5_pwd_data.sequence_count"]},krb5_replay_data:{seq:[873,2,1,"c.krb5_replay_data.seq"],timestamp:[873,2,1,"c.krb5_replay_data.timestamp"],usec:[873,2,1,"c.krb5_replay_data.usec"]},krb5_responder_otp_challenge:{service:[876,2,1,"c.krb5_responder_otp_challenge.service"],tokeninfo:[876,2,1,"c.krb5_responder_otp_challenge.tokeninfo"]},krb5_responder_otp_tokeninfo:{alg_id:[877,2,1,"c.krb5_responder_otp_tokeninfo.alg_id"],challenge:[877,2,1,"c.krb5_responder_otp_tokeninfo.challenge"],flags:[877,2,1,"c.krb5_responder_otp_tokeninfo.flags"],format:[877,2,1,"c.krb5_responder_otp_tokeninfo.format"],length:[877,2,1,"c.krb5_responder_otp_tokeninfo.length"],token_id:[877,2,1,"c.krb5_responder_otp_tokeninfo.token_id"],vendor:[877,2,1,"c.krb5_responder_otp_tokeninfo.vendor"]},krb5_responder_pkinit_challenge:{identities:[878,2,1,"c.krb5_responder_pkinit_challenge.identities"]},krb5_responder_pkinit_identity:{identity:[879,2,1,"c.krb5_responder_pkinit_identity.identity"],token_flags:[879,2,1,"c.krb5_responder_pkinit_identity.token_flags"]},krb5_response:{expected_nonce:[880,2,1,"c.krb5_response.expected_nonce"],magic:[880,2,1,"c.krb5_response.magic"],message_type:[880,2,1,"c.krb5_response.message_type"],request_time:[880,2,1,"c.krb5_response.request_time"],response:[880,2,1,"c.krb5_response.response"]},krb5_ticket:{enc_part2:[881,2,1,"c.krb5_ticket.enc_part2"],enc_part:[881,2,1,"c.krb5_ticket.enc_part"],magic:[881,2,1,"c.krb5_ticket.magic"],server:[881,2,1,"c.krb5_ticket.server"]},krb5_ticket_times:{authtime:[882,2,1,"c.krb5_ticket_times.authtime"],endtime:[882,2,1,"c.krb5_ticket_times.endtime"],renew_till:[882,2,1,"c.krb5_ticket_times.renew_till"],starttime:[882,2,1,"c.krb5_ticket_times.starttime"]},krb5_tkt_authent:{ap_options:[884,2,1,"c.krb5_tkt_authent.ap_options"],authenticator:[884,2,1,"c.krb5_tkt_authent.authenticator"],magic:[884,2,1,"c.krb5_tkt_authent.magic"],ticket:[884,2,1,"c.krb5_tkt_authent.ticket"]},krb5_trace_info:{message:[887,2,1,"c.krb5_trace_info.message"]},krb5_transited:{magic:[888,2,1,"c.krb5_transited.magic"],tr_contents:[888,2,1,"c.krb5_transited.tr_contents"],tr_type:[888,2,1,"c.krb5_transited.tr_type"]},krb5_typed_data:{data:[889,2,1,"c.krb5_typed_data.data"],length:[889,2,1,"c.krb5_typed_data.length"],magic:[889,2,1,"c.krb5_typed_data.magic"],type:[889,2,1,"c.krb5_typed_data.type"]},krb5_verify_init_creds_opt:{ap_req_nofail:[892,2,1,"c.krb5_verify_init_creds_opt.ap_req_nofail"],flags:[892,2,1,"c.krb5_verify_init_creds_opt.flags"]},passwd_phrase_element:{magic:[893,2,1,"c.passwd_phrase_element.magic"],passwd:[893,2,1,"c.passwd_phrase_element.passwd"],phrase:[893,2,1,"c.passwd_phrase_element.phrase"]}},objnames:{"0":["c","function","C function"],"1":["c","type","C type"],"2":["c","member","C member"],"3":["py","data","Python data"]},objtypes:{"0":"c:function","1":"c:type","2":"c:member","3":"py:data"},terms:{"01am":23,"05pm":896,"0x0000":478,"0x00000001":[440,498,522,523,750,753],"0x00000002":[436,494,525,529,747,752],"0x00000004":[521,524,745],"0x00000008":[488,526,528,751],"0x00000010":[21,496,527,746],"0x00000020":[487,530,744],"0x00000040":749,"0x00000080":743,"0x00000100":748,"0x00000200":754,"0x00008000":[497,770],"0x0001":[444,471,544,562,724,727,760],"0x00010000":[485,771],"0x0002":[425,454,472,560,723,726],"0x00020000":486,"0x0003":[455,473],"0x0004":[445,474,557,728],"0x00040000":778,"0x0005":[423,469],"0x0006":[431,468],"0x0007":[428,456],"0x0008":[457,475,559,729],"0x00080000":784,"0x0009":[453,476],"0x000a":477,"0x000b":482,"0x000c":[449,479],"0x000d":480,"0x000e":[458,481],"0x000f":[447,467],"0x0010":[424,448,470,556],"0x00100000":774,"0x0011":[442,459],"0x0012":[443,461],"0x0013":[450,460],"0x0014":[430,451,462],"0x0017":463,"0x0018":[426,464],"0x0019":465,"0x001a":466,"0x0020":552,"0x00200000":780,"0x0040":558,"0x00400000":775,"0x0080":561,"0x00800000":[495,783],"0x0100":[422,555],"0x01000000":776,"0x0101":427,"0x01ff":483,"0x0200":554,"0x02000000":[491,779],"0x0400":553,"0x04000000":[484,777],"0x08000000":[493,782],"0x1":[564,565,711,715,719,759],"0x10":710,"0x10000000":[492,781],"0x1fff":433,"0x2":[563,712,714,717],"0x2000":434,"0x20000000":[437,490,740,773],"0x3":718,"0x4":[708,713,720],"0x4000":432,"0x40000000":[439,489,741,772],"0x54800000":499,"0x7fff":[762,766],"0x8":709,"0x8000":[429,435,763,765],"0x80000000":[438,742],"0xfffffff0":441,"10d":896,"12h":[20,34],"1foo":21,"30m":896,"3de":14,"3h30m":937,"4gb":916,"5h30m":940,"76cho3000":917,"8h30":896,"abstract":[918,920,926,927,929,933],"boolean":[6,20,23,36,48,55,868,892],"break":[32,900],"byte":[20,43,46,48,99,104,287,311,908,909,910,912,913,922],"case":[2,3,6,11,14,19,20,21,23,24,28,38,39,43,46,195,245,280,325,330,350,359,375,389,416,704,895,896,898,917,920,921,922,925,929,930,942,944,949,951],"char":[43,46,49,50,56,59,60,91,92,93,94,107,136,141,143,144,146,149,152,155,156,160,166,169,170,187,192,193,194,210,213,214,219,222,223,227,228,230,231,233,235,247,252,260,264,267,277,278,306,311,312,317,319,329,336,344,345,346,352,361,363,365,366,369,372,373,374,375,377,379,382,383,384,387,389,390,391,392,394,395,397,398,406,407,408,409,417,418,419,420,801,827,839,868,870,876,877,879,887,932],"class":[3,23,942],"const":[43,49,52,53,54,58,59,60,91,92,93,94,99,100,101,102,103,106,107,108,113,114,117,119,120,125,126,129,130,136,141,144,146,149,152,155,156,160,166,169,172,173,174,175,177,178,180,181,183,184,185,188,189,194,195,197,213,214,223,228,231,232,233,234,235,247,252,260,264,265,267,277,278,281,284,286,287,288,289,290,294,298,299,300,301,312,317,319,320,322,324,326,329,331,333,336,339,340,341,342,343,344,345,346,351,352,353,355,356,357,358,359,360,361,365,366,369,372,373,376,377,378,379,382,383,384,387,389,393,405,412,413,417,418,419,420,790,818,819,863,864,870,886,887,932],"default":[2,3,4,5,6,7,8,10,11,12,15,19,20,21,22,23,24,26,29,30,32,33,34,35,37,38,39,40,41,43,44,46,48,59,60,78,132,147,148,154,223,229,243,253,265,269,275,278,315,317,345,359,375,383,414,710,896,903,904,905,906,908,916,921,922,923,937,939,940,941,943,944,945,946,950,951],"export":[20,34,916,917,921,922,931,932],"final":[19,21,112,158,902,909,913],"function":[3,6,14,23,25,29,34,35,43,46,48,49,50,55,57,58,59,60,61,62,67,68,69,71,72,73,74,76,77,78,81,82,84,85,86,87,88,89,92,93,99,100,101,102,103,104,105,107,113,114,116,117,119,124,125,126,129,130,133,136,137,139,148,150,151,153,156,157,158,159,167,169,171,172,173,174,175,177,178,180,181,182,183,192,194,195,198,199,200,201,202,203,205,206,207,208,209,212,215,216,221,228,235,236,241,245,246,252,254,258,260,261,262,264,265,266,267,271,272,275,276,277,278,279,287,288,289,290,294,295,296,298,299,301,308,310,320,323,324,325,326,327,329,330,331,333,334,342,343,345,352,355,356,357,358,359,360,361,368,371,373,376,378,382,383,385,387,389,396,400,401,403,404,407,408,410,412,414,416,417,419,854,863,864,868,870,875,901,902,916,917,920,921,922,925,928,929,931,932],"goto":46,"h\u00f6gskola":917,"import":[5,6,14,15,17,19,21,23,34,35,916,922,936],"int":[43,51,53,56,59,62,91,92,93,94,97,111,116,120,122,166,223,241,242,243,244,249,254,255,279,306,311,345,350,352,361,382,383,404,407,408,409,416,803,809,812,816,827,838,844,846,851,855,857,868,870,871,889,892,921],"long":[3,14,15,23,25,26,37,38,39,41,43,99,287,365,366,737,764,895,898,916,917,920,929,932,946],"new":[2,3,6,14,15,20,21,23,24,26,34,35,37,41,43,48,87,89,129,132,138,143,154,160,163,165,166,167,169,172,173,174,175,176,177,178,180,182,183,192,194,195,211,219,229,235,243,245,246,250,253,257,260,262,269,275,280,298,300,301,303,307,313,327,330,336,338,343,344,345,359,365,366,367,368,369,370,371,372,373,380,381,382,383,386,387,399,400,401,402,403,404,407,717,718,895,899,913,916,917,921,922,925,926,929,936,937,940,942,951],"null":[19,20,21,43,44,46,48,54,64,92,99,100,102,103,107,113,129,136,141,154,155,156,164,173,195,198,200,203,209,220,223,224,228,230,231,235,240,260,264,267,269,273,275,287,288,289,290,294,298,300,301,315,322,323,325,326,329,330,331,332,336,342,343,344,354,356,359,360,361,363,364,365,366,369,372,375,377,380,381,382,383,386,388,389,397,407,408,409,412,414,791,916,921,930,932,951],"public":[21,40,917,925,926,927,928],"return":[3,9,12,20,21,22,23,38,43,46,48,50,52,54,56,57,59,60,69,74,91,92,93,100,103,109,110,119,127,128,133,135,137,141,142,144,145,146,147,148,149,151,152,153,154,155,156,159,161,169,176,189,192,214,223,224,227,228,229,231,235,260,262,263,264,267,268,271,279,282,283,284,288,290,301,302,303,305,306,308,310,311,314,315,316,317,318,320,323,325,330,344,345,352,355,361,365,366,368,371,375,377,378,380,382,383,384,386,388,389,396,398,400,404,406,407,408,409,410,412,414,416,729,863,864,904,916,918,919,920,921,922,923,926,927,929,930,931,932,933,940,944],"short":[14,19,21,41,306,898],"static":[46,921,932],"switch":[14,28,31,43,48,161,895],"true":[9,14,20,21,22,23,24,25,26,33,35,36,37,38,40,41,43,52,54,105,109,110,127,128,160,192,245,283,284,285,300,319,343,348,349,350,362,388,416,811,824,858,950],"try":[21,25,32,35,38,39,41,43,904,916,936,944],"var":[5,8,20,21,23,34,37,899,904,905,915,951],"void":[43,46,57,58,59,60,63,80,171,179,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,215,216,218,219,220,221,222,237,239,240,241,242,243,244,245,249,254,255,256,257,258,259,260,270,275,285,291,297,334,339,346,352,367,370,379,380,381,386,399,415,416,417,418,419,420,818,836,854,862,863,864,870,875,886,931,932],"while":[3,12,14,15,16,20,21,23,24,34,35,43,46,895,902,921,936,937,944,951],AES:[14,15,20,25,904,916,917],AFS:14,AND:917,ARE:917,Added:[916,946],Adding:[17,32,34,908],Are:[3,23],BUT:917,But:899,CCS:917,CMS:[467,476,477,479,480,481,482,916],CTS:[14,20,916],DES:[13,20,26,41,467,916],DNS:[21,25,30,33,34,39,44,333,662,904,916],DNs:[5,22,23],Dis:19,Doing:903,FOR:917,For:[3,10,14,16,17,18,19,20,21,22,23,24,26,28,32,33,34,35,36,37,38,39,43,46,99,100,103,142,287,288,290,736,894,895,899,902,903,904,908,909,913,914,915,916,918,919,920,921,922,923,925,926,927,928,929,930,931,932,933,934,936,937,940,943,944,949,951],HAS:917,His:19,ITS:[42,917],Its:[20,21,908],NFS:936,NOT:[5,23,34,917],Not:[20,21,44,51,151,614,895],ONE:[5,23],ORed:151,One:[3,20,23,34,36,38,43,342,895,896,936,937,950],SUCH:917,Such:[14,37,39,46],TGS:[3,20,21,23,25,26,35,48,224,300,403,757,858,908,916,928],THAT:917,THE:917,TLS:[22,29],That:[21,902],The:[0,3,4,5,6,7,8,9,10,11,12,15,19,20,21,22,23,24,25,26,28,29,31,33,34,35,37,38,39,40,41,43,46,53,62,69,71,74,78,80,91,93,99,100,102,103,113,117,119,121,125,126,129,135,136,138,144,146,148,153,165,166,173,176,189,198,200,217,220,224,228,229,245,248,252,262,268,274,282,286,287,288,289,290,294,296,298,300,305,307,312,315,320,321,322,325,326,331,333,344,345,346,354,356,359,360,365,366,367,368,369,370,371,372,373,376,380,381,382,383,389,398,402,403,405,406,407,408,412,414,420,618,728,736,738,743,744,747,748,750,754,805,811,825,835,848,863,864,868,874,881,894,895,896,898,899,900,901,902,903,904,905,906,908,909,910,912,913,915,916,917,918,919,920,921,922,923,925,926,927,928,929,930,931,932,933,934,936,937,939,940,942,944,946,948,949,950,951],Then:[3,6,17,23,24,34,940],There:[20,21,23,34,35,895,902,904,905,908,912,937],These:[14,16,20,21,23,26,34,35,37,39,43,731,902,908,916,917,920,922,925,949,951],UCS:916,USE:917,Use:[3,15,22,23,46,49,65,66,67,68,72,73,76,77,78,83,92,111,115,132,141,143,145,150,153,154,163,164,169,172,173,174,175,177,178,180,181,182,183,194,195,224,227,229,230,231,236,239,261,265,269,272,275,280,286,309,310,315,317,318,321,322,324,325,326,327,328,329,330,331,332,335,338,339,340,341,344,345,354,355,356,357,359,360,363,375,389,401,403,405,406,408,439,563,564,835,845,902,904,916,925,939,944,946],Used:[447,448,598,599,835,894,944],Uses:[2,3,15,21,23],Using:[3,6,14,23,25,40,936],WILL:917,WITH:917,With:[0,3,6,15,22,23,39,950],_kerbero:39,_kpasswd:39,_krb5_address:803,_krb5_ap_rep:[805,806],_krb5_ap_rep_enc_part:806,_krb5_ap_req:807,_krb5_auth_context:808,_krb5_authdata:809,_krb5_authent:811,_krb5_ccach:814,_krb5_cccol_cursor:815,_krb5_checksum:816,_krb5_context:[135,156,820],_krb5_cred:[821,824],_krb5_cred_enc_part:822,_krb5_cred_info:823,_krb5_crypto_iov:825,_krb5_data:827,_krb5_enc_data:829,_krb5_enc_kdc_rep_part:830,_krb5_enc_tkt_part:831,_krb5_encrypt_block:832,_krb5_error:834,_krb5_get_init_cr:838,_krb5_get_init_creds_opt:838,_krb5_gic_opt_pa_data:839,_krb5_init_creds_context:840,_krb5_kdc_rep:843,_krb5_kdc_req:844,_krb5_keyblock:846,_krb5_kt:847,_krb5_last_req_entri:852,_krb5_pa_data:857,_krb5_pa_pac_req:858,_krb5_pa_server_referral_data:859,_krb5_pa_svr_referral_data:860,_krb5_prompt:868,_krb5_pwd_data:871,_krb5_responder_otp_challeng:876,_krb5_responder_otp_tokeninfo:877,_krb5_responder_pkinit_challeng:878,_krb5_responder_pkinit_ident:879,_krb5_respons:880,_krb5_ticket:881,_krb5_ticket_tim:882,_krb5_tkt_authent:884,_krb5_tkt_creds_context:885,_krb5_trace_info:887,_krb5_transit:888,_krb5_typed_data:889,_krb5_verify_init_creds_opt:892,_passwd_phrase_el:893,_profile_t:[262,269],_tcp:39,_udp:39,abbrevi:[902,941],abc:[904,951],abi:883,abil:[14,368,371,950],abl:[15,16,19,20,21,23,25,29,34,35,39,895,900,936,937,944],abort:[800,801,931],about:[0,14,19,20,22,26,31,39,41,43,46,251,899,902,904,906,916,917,920,929,934,937,940,951],abov:[6,14,19,21,22,23,25,26,32,34,37,41,43,46,899,904,908,917,921,922,923,937,944],absenc:[20,46],absent:940,absolut:[20,21,894,898,902],ac02:917,acceler:917,accept:[3,4,8,14,15,16,20,21,23,26,34,38,39,41,151,389,896,898,902,916,917,918,922,931,932,937,940],acceptor:[8,916,941],acceptor_cred_handl:43,access:[3,4,8,9,14,15,17,18,19,20,21,22,23,24,25,26,28,29,32,33,34,35,37,39,43,46,895,900,902,910,913,916,920,925,926,928,929,930,935,937,943,944,949,950],accident:916,accommod:[46,899],accomplish:[23,26],accord:[3,19,21,23,36,38,43,154,167,908,909,915,922,944,946],account:[20,21,23,24,25,28,30,48,56,245,336,895,916,930,935,940,944,948,950],account_expir:[245,836],acknowledg:917,acl:[3,4,8,18,20,21,22,23,31,915],acl_fil:[4,8,19,20,34],acquir:[3,6,8,23,43,48,245,274,402,548,908,916,922,946],acquisit:[43,403],across:[17,20,21,34,43,926,927,928,936],act:[10,19,21,26,899,916],action:[4,6,14,899,917,927],activ:[6,8,14,21,23,25,37,40,169,939],actor:19,actual:[6,14,23,26,35,46,98,99,100,102,103,113,129,287,288,289,290,294,298,899,937],actual_mech:43,ad_kdcissu:[320,412],ad_typ:[195,809,908],ad_type_extern:787,ad_type_field_type_mask:787,ad_type_regist:787,ad_type_reserv:787,add:[3,6,9,11,12,14,15,19,20,21,22,23,31,33,36,38,48,300,343,710,896,916,937],add_auth_ind:[916,929],add_mkei:[14,23],add_princip:[5,14,25,37],add_rel:932,added:[3,6,14,15,20,23,24,25,32,34,38,40,302,738,895,916,919],addent:[11,916],adding:[3,8,23,32,41,916],addit:[3,18,19,20,21,22,23,26,29,34,37,38,39,40,43,46,48,301,363,364,414,834,895,899,902,904,906,907,916,917,920,929,934,940,944,951],addition:[10,21,36,928,937],addpol:[3,23,35],addprinc:[3,23,34,37,896,926],addr1:[52,53],addr2:[52,53],addr:[54,232,233,234,332,823,824,830],address1:908,address2:908,address:[0,15,20,21,23,24,30,33,38,39,44,48,260,325,326,331,356,359,360,523,524,525,526,803,822,824,831,844,904,908,916,931,937,940,941],address_list:838,addresssanit:916,addrlist:54,addrtyp:[429,803,908],addrtype_addrport:787,addrtype_chao:787,addrtype_ddp:787,addrtype_inet6:787,addrtype_inet:787,addrtype_ipport:787,addrtype_is_loc:787,addrtype_iso:787,addrtype_netbio:787,addrtype_xn:787,adjust:[14,29,33,34,37,48,100,103,288,290,410],adm:[20,22,39],admcil:19,admcilsp:19,admin:[3,4,5,8,14,15,16,19,21,22,23,26,32,34,895,904,915,916,926,944,951],admin_serv:[3,8,20,21,23,34,39],adminhost:[3,23],administ:[4,15,34],administr:[0,2,3,4,5,6,11,14,15,16,18,19,20,21,22,24,25,26,31,32,35,36,38,895,901,914,915,916,917,927,934,936,940,950,951],adminjohndoefoo:21,adtyp:809,advanc:[14,30,150,314,916,934],advantag:[14,21,26,32],advertis:[21,917],advic:31,advis:[14,917],aead:48,aes128:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],aes256:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],aes:[20,917],aesni:[904,917],af_unspec:931,affect:[4,19,20,21,26,28,40,126,133,229,916,940,951],afford:32,afs3:14,after:[2,3,4,6,10,12,14,21,23,24,25,33,34,35,37,80,98,136,228,272,380,401,883,894,895,900,902,908,909,912,913,916,936,937,944,951],afterward:[23,927],again:[14,23,28,33,34,718,899,916,922,936,937],against:[2,14,20,21,25,28,34,39,40,46,48,129,298,342,356,359,360,363,412,899,904,916,919,922,943,949],agent:20,agre:917,agreement:917,aklog:55,alexand:917,alg_id:877,algid:736,algorithm:[14,26,126,913,917,944],alia:[3,11,15,23,43,48,144,146,312,365,366],alias:[3,11,15,22,23,38,39,916],alic:[11,28,949,950],all:[0,2,3,6,9,14,15,17,18,19,20,21,23,24,25,28,29,32,33,34,35,37,38,43,46,48,153,163,164,282,342,359,414,745,746,751,815,825,895,896,899,902,903,907,908,913,916,917,928,930,937,939,941,942,943,944,946,949,951],alloc:[43,46,48,61,78,93,98,99,100,102,103,107,115,117,119,121,124,148,280,287,288,289,290,296,355,357,407,825,868,919,921,923,926,930],allow:[2,3,4,5,6,8,10,12,14,15,16,17,18,19,20,21,23,24,26,28,29,32,33,34,35,36,37,38,40,41,43,46,48,111,252,279,359,404,407,896,898,900,902,904,906,909,916,917,918,919,920,922,923,924,925,926,927,928,929,930,931,932,933,936,937,940,943,950],allow_dup_skei:[3,23],allow_forward:[3,5,23],allow_postd:[3,5,23],allow_proxi:[3,23],allow_renew:[3,23],allow_svr:[3,23,25,35,40],allow_tgs_req:[3,23],allow_tix:[3,23],allow_weak_crypto:[14,21,26,41,48],allowedkeysalt:[3,23],almeida:917,alon:[34,921],along:[0,36,825,895,904,922],alongsid:34,alphabet:896,alphanumer:21,alreadi:[6,14,22,23,34,36,43,124,333,895,902,904,906,940,944,946],also:[15,17,18,22,23,24,25,26,28,29,32,33,34,35,37,38,39,40,43,46,126,342,403,894,895,898,904,906,908,916,917,919,920,922,923,925,926,928,930,932,933,937],alter:[14,37],altern:[8,15,20,21,22,24,28,34,37,43,500,902,904,915,916,917,940],although:[39,898,917,923,933,936,937],altogeth:20,alwai:[14,15,20,21,23,24,39,44,51,55,61,63,66,68,71,80,83,139,142,155,365,714,908,912,916],america:917,among:46,amount:[20,21,35,39,102,119,121,289,361,903],an2ln:[21,930],an2ln_typ:930,analog:15,anam:[56,944],anchor:[20,21,940],andrea:917,andrew:[5,23],ani:[0,3,6,8,9,10,14,15,16,17,19,20,21,23,24,25,26,28,32,34,36,37,38,39,40,41,43,46,48,56,137,147,153,154,156,224,260,268,275,278,279,310,315,359,363,364,404,414,738,835,895,899,900,908,909,913,916,917,918,922,923,930,936,937,940,941,944,950],ank:[3,23],anl:21,annot:[16,36,916],anonym:[3,20,23,25,28,43,48,501,502,916,937,940,941],anoth:[15,17,21,24,32,41,48,101,171,824,895,899,904,908,919,920,926,930,931,937,951],ansi:903,answer:[21,46,48,366,729,736,738,874,922],anticip:[33,39],anyon:[936,950],anyth:[21,37],anywai:[20,39,46,330],anywher:[936,951],ap_opt:[329,330,375,807,884],ap_opts_etype_negoti:787,ap_opts_mutual_requir:[330,359,375,787],ap_opts_reserv:787,ap_opts_use_session_kei:[330,787],ap_opts_use_subkei:[330,787],ap_opts_wire_mask:787,ap_req_authdata:195,ap_req_nofail:[416,892],ap_req_opt:[329,330,359,375],api:[0,14,41,43,45,98,100,103,186,188,190,191,196,197,245,250,251,262,281,288,290,351,353,411,738,825,845,895,901,904,916,918,922,929],appdata:[21,899],appdefault:48,appear:[14,20,21,24,34,37,39,41,46,908,917,921],append:[3,20,23,38,387,898,904,913],appl:[901,917],appl_vers:[363,375],appli:[3,10,14,18,19,20,21,23,24,35,41,43,171,917,926,929,937,940,944,948],applic:[0,12,16,18,20,21,28,30,31,37,43,46,48,59,60,156,250,329,330,331,363,375,504,528,529,716,739,894,895,898,899,901,904,914,916,917,920,922,925,930,932,936,937,943,947,950],appnam:[59,60],approach:43,appropri:[6,14,21,23,24,28,29,34,37,39,43,46,154,373,398,918,928,929,940,941,944],approxim:[903,916],apputil:901,aprepencpart:805,arbitrari:[3,23,43],arcfour:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],architectur:[902,904],archiv:[42,903],area:[34,46],arg:[3,23,417,418,419,800,801,904,944],arg_keytab:[232,235],argument:[3,4,6,8,10,14,20,23,44,46,48,63,80,91,93,245,257,260,263,275,325,326,331,352,354,356,360,386,417,418,419,887,904,916,921,922,930,944,946],argv_pars:917,ari:944,aris:917,armor:[20,37,48,229,920,929,940],armor_ccach:940,around:[23,904],arrai:[3,36,43,46,48,100,103,111,173,240,244,254,288,290,322,332,352,354,819,823,825,830,831,844,866,867,930,932],arrang:23,arriv:899,asan:904,asc:903,ascii:[6,23,39,908],ask:[6,37,39,46,48,736,737,738,920,936,937,940,944],asn:[48,909,910,919],aspect:[15,28,925],assert:[20,43,908,916,922,929],assign:[3,19,20,23,34,39,48,82,84,944],associ:[3,4,9,19,20,21,23,35,38,43,537,895,899,908,917,951],assum:[14,21,34,36,39,43,44,107,124,155,903,937,940,951],asynchron:[403,929],athena:[3,5,14,15,19,20,21,23,24,28,32,34,904,917,932,936,937,951],athent:260,atom:916,attach:916,attack:[2,14,21,23,29,30,32,35,40,46,325,326,331,899,916,940],attempt:[0,3,6,20,21,23,24,29,35,39,43,243,250,414,908,916,944],attr:[252,839],attribut:[3,5,6,9,16,19,20,21,22,23,24,26,36,37,48,253,650,839,916,917,919,922,929,940,944],audit:916,aug:[3,23],augment:922,august:917,auth:[16,20,39,43,48,61,329,330,359,363,364,375,504,809,823,831],auth_context:[61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,90,223,323,325,326,327,328,329,330,331,354,356,357,358,359,360,363,364,375],auth_gssapi:[3,23],auth_to_loc:[21,28,930],auth_to_local_nam:[21,28],authdata1:908,authdata2:908,authdata:[184,189,224,320,322,412,824,908,916,924,940,941],authdata_plugin:925,authdatum:412,authent:[3,5,6,10,12,14,15,20,21,22,24,25,26,29,30,32,34,35,36,37,38,39,40,43,44,46,48,61,62,63,64,66,67,68,69,71,72,73,74,76,77,79,80,81,82,83,84,85,86,87,88,89,90,166,201,223,224,250,322,323,325,326,327,328,329,330,331,336,342,354,356,357,358,359,360,375,437,500,506,615,736,805,807,811,857,874,884,895,898,899,900,901,908,909,913,916,917,919,929,930,937,940,941,947,951],authfrom:174,author:[3,19,20,21,48,153,224,253,300,614,744,824,861,916,917,924,939],authoriaz:811,authorit:[19,21,154,918,923,926,930,931],authoritykeyidentifi:37,authorization_data:[811,831,844],authtim:[340,341,342,343,882,908],authtime_out:336,authto:174,authz:844,auto:916,autoconf:901,autodoc:906,autohead:902,autolock:917,autom:[902,916],automak:921,automat:[3,4,6,8,15,17,23,34,895,898,900,902,913,916,937,939,944],autoreconf:902,avail:[3,6,11,12,14,20,21,29,34,38,43,46,56,170,187,192,193,227,252,306,310,315,361,368,371,374,398,416,563,821,843,881,895,902,913,918,924,939,941,945,951],avoid:[3,14,19,24,38,46,245,904,916,937],awai:[14,41,936,937],awar:908,awk:6,back:[19,20,23,24,30,39,40,895,904,909,916,922,925],backend:[14,904,916,917],background:[4,8,10,34],backslash:344,backspac:344,backup:[30,32,39,900],backward:[8,20,21,24,26,34,946],bad:[34,135,156],balanc:[14,38,39],banner:[46,352,870],bar:[6,21],basch:917,base:[0,3,20,21,22,23,24,25,26,34,37,38,39,43,46,49,59,60,62,91,93,98,117,296,344,388,895,899,906,915,916,917,920,925,929,933,937,940,949],basi:[14,18,23,39],basic:932,basicconstraint:37,baz:21,bb463167:42,becaus:[6,17,19,20,21,23,24,25,35,37,38,39,41,43,46,251,342,895,902,904,908,912,927,929,932,936,940,950],becom:[0,6,14,17,21,23,34,39,136,235,260,275,895,916,936,940,944],beeblebrox:34,been:[6,12,14,20,21,23,26,35,124,895,899,913,916,917,922,925,937,941,948,951],beep:[937,939],befor:[2,3,4,5,6,14,15,20,21,22,23,26,35,37,39,41,44,98,100,103,155,288,290,381,389,825,868,896,899,900,902,917,920,927,929,937,940],beforehand:43,began:14,begin:[4,6,15,21,23,28,36,43,91,93,99,100,102,103,203,209,287,288,289,290,344,403,908,919,922,923,932,949],behalf:946,behav:[3,43,407,416,894,904],behavior:[3,14,20,21,28,39,46,228,414,416,916,921,924,925,930,939,943,948],behind:[14,28],being:[3,14,20,21,23,29,39,44,46,245,372,738,899,906,949],belong:[33,161],below:[6,20,21,23,28,36,43,738,901,917,944],benefit:39,berkelei:[904,917],besid:[15,21],best:[14,25,34,38],beta:[6,23],better:[23,24,845,916],between:[3,9,20,21,23,25,26,29,34,35,41,45,136,158,385,883,895,916,930,937,939,940],beyond:[913,920,925,929,951],big:[908,909,910,912,922],biggest:14,bin:[34,902,904,906,915,944],binari:[21,32,904,917],bind:[3,5,20,21,22,23,39,916,943],bind_dn:3,binddn:3,bindir:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],bindpwd:3,bison:904,bit:[14,20,24,37,46,66,83,142,153,157,359,883,894,908,912,916,919,944],bitwis:[151,738],bjaspan:[3,23],blank:949,bleep:[3,11,23,937,950,951],block:[14,20,24,48,99,100,102,103,287,288,289,290,916],blocksiz:95,bob:[944,950],bodi:[844,929],book:15,boot:[34,900],bootstrap:21,borrow:937,boston:39,both:[3,12,21,22,23,24,26,28,29,36,37,39,40,43,159,245,251,902,916,917,921,944],bourn:34,box:36,brace:[21,921],bracket:[20,21,28],breviti:909,brian:917,bridg:916,brief:[32,901,925],broken:[14,904],brother:917,brute:[14,23,35],bsd:[916,917],btree:[6,23],buffer:[23,43,48,56,98,99,119,170,187,192,193,279,287,300,301,306,331,336,339,374,397,398,404,407,409,538,825,916,922],buflen:[170,187,192,193,374,397,398],bug:[0,23,42,901,902,934],build:[34,39,41,48,49,136,895,901,904,914,915,916,921,925,943],built:[21,24,28,46,48,378,895,902,904,916,922,932,937,943],builtin:[904,916,917],bundl:[21,917],bunni:39,busi:917,byacc:904,c89:903,cacert:[29,37],cach:[3,14,15,21,23,28,43,44,48,78,138,140,223,224,229,247,264,267,323,325,326,329,331,356,359,360,375,403,414,522,545,549,753,897,901,904,905,911,915,916,924,937,939,940,941,943,944,945,946,949,951],cache_nam:[3,23,939,940,941],cache_out:[132,154],cacheconf:908,cachenam:[895,945],cachetyp:916,cacreateseri:37,caddr:[823,830,831],cakei:37,california:917,call:[14,16,20,21,23,24,28,34,43,46,91,93,100,103,113,120,122,123,125,126,136,156,158,176,228,245,251,261,268,275,279,282,288,290,294,301,308,317,323,380,381,404,825,868,875,894,895,901,902,916,920,921,922,927,929,930,936,944],callback:[48,260,275,352,380,381,387,854,868,870,874,916,920,929,931],caller:[43,46,71,85,99,100,102,103,117,119,121,136,144,146,245,252,269,279,287,288,289,290,296,301,312,314,330,361,365,366,404,414,825,894,916,923,929,932],camellia128:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],camellia256:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],camellia:[20,916],can:[0,2,3,4,5,6,8,9,10,11,14,15,16,17,18,19,20,21,22,23,24,25,26,28,29,32,33,34,35,36,37,38,39,40,41,43,46,50,56,136,138,154,224,254,271,301,307,331,342,344,366,386,389,400,403,414,416,735,863,864,874,882,894,895,896,898,899,902,903,904,906,908,909,916,918,919,920,921,922,923,925,926,927,928,929,930,931,933,936,937,940,944,948,951],cancel:23,candid:[913,944],cannot:[3,15,23,24,25,35,37,43,46,91,93,135,151,260,344,414,883,908,937,940,941,946],canon:[4,15,22,23,38,39,192,300,926,930],canonhost_out:194,canonic:[15,21,22,33,43,48,301,389,546,916,940,946],capabl:[32,916,936],capac:25,capath:20,card:[3,20,21,23,916],care:[3,14,19,23,28,43,925],carefulli:37,carnegi:917,carri:[3,25,951],cartoon:34,casio:14,cast:[883,894,918,920,921,926,927,928,929,931,933],cat:6,categori:25,caus:[3,4,6,14,20,21,23,24,25,26,34,35,37,38,39,40,43,48,245,247,388,734,895,899,904,916,917,941,945],caution:3,cb_data:[386,886],cb_ret:932,cbc:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],cbdata:932,cbrown:951,cc246071:916,cc246091:916,ccach:[3,23,41,43,48,132,135,164,224,225,226,232,233,234,246,250,251,264,267,321,329,375,383,403,405,414,815,904,915,918,942,946],ccache_typ:21,ccachenam:904,ccapi:[901,917],ccselect:[28,916,921,924,931],ccselect_plugin:[918,921],ceas:[0,6,23],cell:14,center:[10,901,917,951],central:0,cert:[16,21,37],cert_fil:946,certain:[23,32,236,904,917,946,951],certauth:[916,924],certauth_plugin:919,certid:21,certif:[3,20,21,29,40,43,48,253,693,910,916,924,946,951],certifi:21,certlabel:21,cf2:48,cflag:[904,943],cfr:917,chain:[20,21,916],challeng:[20,21,40,46,48,366,367,368,370,371,695,698,736,737,874,877,909,916],chang:[2,3,6,9,14,15,19,20,21,22,24,25,26,28,33,34,37,39,46,48,78,136,158,245,260,382,383,620,717,894,902,906,908,915,916,917,925,927,933,935,942,944,950],change_password:26,change_password_for:[382,383],changeov:34,changepw:[3,14,15,23,26,166,245,300,301,382],channel:[14,21,36,43,46,325,916,944],charact:[3,19,20,21,23,34,38,39,344,397,408,713,942],charg:917,chat:934,check:[12,20,21,23,26,28,34,37,43,48,59,60,153,283,356,359,360,550,902,904,906,912,921,932,933,937,941,944],check_a:928,check_tg:928,checkout:906,checksum:[43,48,104,175,202,203,300,301,329,330,331,333,342,343,532,539,658,660,661,665,811,854,910,913,922],checksum_typ:816,cheetah:906,chl:[46,367,368,370],chl_out:371,choic:[21,38,43,46,250,940],choos:[14,22,25,34,38,39,43,900,918,936,940,949],chosen:[16,21,22,26,43,46,229,903,909,915,916,918,949],chpass:[3,23,927],chrand:[3,23],chunk:[114,295],cipher:[14,26,48,99,100,102,103,287,288,289,290],cipher_st:[99,100,102,103,287,288,289,290],ciphertext:[25,99,100,102,103,104,287,288,289,290,805,829,909,913],circular:23,circumst:[20,37],citi:917,ckf_:738,ckfrom:175,cksum:[113,129,294,298,413],cksumtyp:[81,96,111,113,114,130,170,294,295,299],cksumtype_cmac_camellia128:787,cksumtype_cmac_camellia256:787,cksumtype_crc32:787,cksumtype_descbc:787,cksumtype_hmac_md5_arcfour:787,cksumtype_hmac_sha1_96_aes128:787,cksumtype_hmac_sha1_96_aes256:787,cksumtype_hmac_sha1_des3:787,cksumtype_hmac_sha256_128_aes128:787,cksumtype_hmac_sha384_192_aes256:787,cksumtype_md5_hmac_arcfour:787,cksumtype_nist_sha:787,cksumtype_rsa_md4:787,cksumtype_rsa_md4_d:787,cksumtype_rsa_md5:787,cksumtype_rsa_md5_d:787,cksumtype_sha1:787,cksumtypep:390,ckto:175,claim:[651,655,917],clang:916,clarifi:37,clariti:944,clean:[23,268,269,386,906,916,932],cleanli:916,cleanup:[46,932],clear:[3,6,11,15,23,36,46,48,136,156,377],clearpolici:[3,19,23],cleartext:[806,822,830],click:34,client1:37,client2:37,client:[3,12,14,16,18,20,21,22,23,25,26,28,31,32,34,35,36,38,39,40,41,43,46,48,145,154,223,224,235,241,242,258,260,264,267,275,276,277,330,333,359,363,403,651,652,738,805,806,811,823,824,831,834,843,844,895,899,901,904,908,909,910,915,916,917,918,919,921,924,926,929,931,937,940,941,943,944,946,949,951],client_aware_channel_bind:21,client_aware_gss_bind:916,client_cert:37,client_kei:916,client_keytab:43,client_princ:[46,300],clientauth:21,clientkei:37,clifford:951,clock:[21,34,48,267,356,360,896,929,940],clockskew:[15,21,359,913,932,940],close:[21,32,48,71,85,132,137,138,148,164,167,265,301,307,753,913,927,933],clpreauth:[28,924],clpreauth_mymech_initvt:921,clpreauth_plugin:920,cmac:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],cmd_path:944,cname:[33,34,38,39],code:[0,20,21,23,41,43,46,48,49,50,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,117,118,119,121,124,125,126,129,130,133,134,135,141,142,145,147,148,149,150,151,152,153,154,155,156,157,158,159,161,162,163,164,166,169,170,171,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,251,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,344,345,347,352,354,355,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,728,834,835,863,883,894,901,903,904,916,917,920,921,922,925,927,929,931,932,933,934],coerc:913,coexist:19,collect:[21,43,48,132,154,726,727,901,916,918,939,940,941,945,949,951],collis:[48,899],colon:[5,20,21,23,28,39,152,344,346,420,951],column:6,com:[3,6,9,11,16,20,21,22,23,28,35,37,38,39,41,42,909,910,916,917,936,937,949,950,951],com_err:[835,904,916,921],combin:[3,8,15,20,23,26,43,48,254,909,941],come:[21,46,359,902,903,936],comma:[3,6,10,20,21,23],command:[4,8,9,10,14,15,20,21,22,23,24,26,29,32,34,35,37,41,896,898,901,902,903,904,916,935,936,937,939,942,944,946,951],command_opt:[5,6,23],commenc:34,comment:[0,15,21],commerci:[21,37,917],commit:[9,917,927],common:[21,23,25,34,43,904,917,920,936,950],common_appdata:21,commonconfig:21,commonli:[8,41],commun:[0,21,23,25,29,34,37,43,863,895,901,917,918,934],compani:937,companion:36,compar:[47,48,129,298,909],comparison:21,compat:[8,20,21,36,43,902,904,916,926,928,946],compil:[0,902,903,904,905,916,917,943,944],compile_et:904,complet:[5,6,14,20,21,23,39,43,45,158,272,274,359,375,401,402,736,901,904,905],complex:916,compli:917,complic:[37,904],compon:[19,21,28,37,38,43,46,48,92,93,223,344,345,350,388,645,706,708,761,908,912,916,917,932,937,949],component1:[908,912],component2:[908,912],compos:37,compress:903,compromis:[14,17,21,32,895,900],comput:[14,20,21,29,43,44,46,48,91,117,129,229,296,298,910,917,920,929,936,937],concaten:[729,909,922],concatent:922,concept:[914,924],concern:[25,35,917,937],concis:932,concret:906,concurr:[20,24],condit:[37,154,301,916,917,944],conduct:29,conf:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,22,23,24,25,26,27,28,29,30,31,32,33,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],conf_keyfil:[5,23],conf_req_flag:43,conf_stat:43,confidenti:[26,43,916],config:[20,21,23,141,155,269,378,901,904,915,916,922,935,938],configur:[3,4,5,9,14,16,17,19,20,21,23,24,25,30,31,38,41,43,46,48,50,78,154,167,194,251,261,269,388,414,416,563,564,896,899,901,902,903,905,906,916,921,924,933,937,940,941,944,948,950,951],confirm:[2,3,5,6,23,130,299,916,946],conflict:[15,28,359,602,603,605,606,922],conform:[21,903,916,942],confound:104,confus:917,confusingli:46,confvalid:901,conjunct:946,connect:[3,4,5,8,12,20,23,32,34,38,43,48,895,899,916,917,937],consequ:14,consequenti:917,consid:[0,14,21,24,33,39,41,342,899,904,908],consider:[39,45],consist:[21,39,344,898,903,908,909,916,923,930],consol:20,consolid:0,consortium:[934,951],constant:[46,57,58,725,731,819],constitut:917,constrain:[3,23,333,547,654,916,946],constraint:[917,949],construct:[0,43,46,277,279,329,404,863,864,916,921,946],consult:[21,930],consum:[24,894,925],contact:[3,7,8,14,20,21,23,29,39,260,895,918,934,947],contain:[3,4,5,6,8,9,15,19,20,21,22,23,24,28,29,33,34,37,38,39,41,43,46,48,54,67,72,76,152,154,169,172,173,183,184,195,231,245,247,276,279,300,301,320,330,336,342,344,355,356,357,360,363,365,375,404,414,845,874,887,895,896,898,899,901,902,903,904,905,906,908,909,912,913,917,921,922,931,932,934,936,937,939,940,944,945,946,949,950,951],container_dn:[3,23],container_reference_dn:[5,23],containerdn:[3,23],containerref:[5,23],contempl:917,content:[0,6,9,11,12,14,23,27,34,37,43,44,46,48,82,84,124,133,137,147,148,174,175,177,178,180,182,183,198,199,200,201,202,207,208,212,215,221,280,333,334,803,809,816,825,846,857,888,895,908,910,912,917,922,940,941],context:[21,41,43,44,46,48,49,50,51,52,53,54,55,56,59,60,61,66,70,75,83,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,172,173,174,175,176,177,178,180,181,182,183,184,186,188,189,190,194,195,196,197,198,199,200,201,202,203,204,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,245,246,247,248,250,251,252,253,257,260,261,264,265,267,276,277,278,279,280,281,283,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,367,368,369,370,371,372,375,376,378,379,380,381,382,383,384,385,386,387,388,389,393,404,405,406,407,408,409,410,411,412,413,414,417,418,419,420,564,791,792,793,794,795,796,797,798,836,863,864,870,874,886,916,918,920,921,923,929,930,931],context_handl:[43,922],contigu:43,continu:[2,6,17,34,909,916,917,944],contract:917,contrari:[43,46],contribut:[101,107,119,914,917,951],contributor:[907,917],control:[4,14,15,18,19,20,21,22,26,28,34,36,37,38,41,43,46,243,279,404,414,904,905,916,918,923,924,925,928,930,931,932,933,948],convei:[14,23,39,43,835,861,916,917],conveni:[46,323,368,371,902],convent:[39,406,932],convention:951,convers:[21,909],convert:[14,21,38,43,48,169,258,389,916,949],cooki:[599,911,916,929],coordin:922,copi:[15,17,23,26,29,32,34,37,41,43,48,86,88,269,272,342,401,900,908,917,925,932,937,944],copyright:[901,903,917,951],core:[920,925,929,932,934],corpor:[917,951],correct:[4,10,14,21,23,33,34,41,124,733,895,904,916,917],correctli:[12,43,863,864,894,916,936],correspond:[6,19,21,37,39,43,44,46,56,152,245,263,342,882,906,909,916,921,922,927,951],corrupt:[6,17,23,916],cost:[23,29,904,917],could:[0,14,16,17,21,25,28,33,34,35,39,899,916,921,936,937,944],couldn:12,count:[3,6,23,43,48,87,89,111,286,908,912],counter:[3,23,35],countermeasur:32,counterpart:[19,33],countri:917,cours:17,courtesan:917,cover:33,cpp:904,cppflag:904,cppopt:904,cpu:40,cpw:[3,14,23],crash:[17,21,34],crawdad:917,crawford:917,crc:[14,26],creat:[3,4,7,12,14,15,19,20,21,22,24,26,28,31,32,35,43,47,48,67,72,76,93,113,114,125,126,135,138,172,173,174,175,176,177,178,180,182,183,205,236,262,265,271,294,295,307,308,324,331,345,359,363,364,375,387,400,414,708,895,896,898,902,906,909,913,916,917,918,919,920,922,923,924,926,927,928,929,930,931,932,933,934,936,937,940],create_polici:23,creation:[14,21,23,37,909],creativ:917,creativecommon:917,cred:[46,48,150,151,153,159,166,232,233,234,235,260,264,267,272,275,321,382,401,403,405,414,531,916,944],cred_handl:[43,922],cred_stor:43,cred_usag:43,cred_usage_stor:43,creddata:354,credenti:[3,8,12,16,20,21,23,28,33,35,37,45,48,138,166,177,206,207,223,224,229,321,329,333,354,375,402,405,440,549,618,653,745,821,822,823,824,875,894,897,898,899,901,904,911,916,920,922,923,924,929,937,939,940,941,943,944,945,946,949,951],credentials_cach:[3,23],creds_out:[354,405],criteria:[37,895],critic:[46,934],crl:[20,21],cron:[17,20,34,39],cross:[20,21,342,343,359,904,908,916],crt:[20,21],crypto:[14,121,191,901,904,916,917],crypto_entri:832,crypto_test:917,cryptograph:[14,43,916,917],cryptographi:[14,40],cryptosystem:14,csv:[6,916],ctime:[806,811,834],cts:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],ctx:[43,72,73,76,77,86,87,88,89,171,176,213,228,270,271,272,273,274,275,276,277,278,279,346,365,366,367,368,369,370,371,372,373,379,399,400,401,402,403,404,417,418,419,420,875],ctype:[109,110,127,131,168,413],cuba:917,cultur:917,current:[2,3,6,8,9,11,14,20,21,22,23,28,39,48,136,179,330,346,356,360,382,440,740,887,895,898,904,908,913,916,920,923,924,929,937,942,949,951],curri:15,curs:904,cursor:[48,139,150,158,163,164,314,318,813,815],curv:[21,40],cusec:[806,811,834],custom:[21,906,915,916,919],cut:39,cve:916,cybersaf:[540,917],cycl:916,cygnu:[663,917],daemon:[8,19,20,21,23,31,36,37,38,895,900,916,921,951],daffodil:[15,937],dai:[3,5,21,23,37,48,396,896,937,951],daili:14,daisi:39,dal:925,damag:[895,917],danger:[17,944],danilo:917,dash:21,data:[3,6,9,14,20,21,22,23,24,26,32,43,44,46,48,63,79,80,98,113,114,117,119,120,121,123,129,130,141,151,153,155,169,178,203,208,212,224,245,253,257,258,260,262,275,294,295,296,298,299,300,323,326,329,330,331,333,335,340,341,352,354,356,359,360,368,371,375,376,380,381,382,383,386,388,393,405,467,479,480,481,537,538,677,720,744,791,792,795,809,811,819,821,824,825,827,830,831,834,836,843,844,854,857,861,863,864,866,867,870,873,875,884,889,895,899,900,904,908,909,910,912,916,917,919,920,921,924,928,929,933,941],data_length:116,data_out:321,data_set:43,databas:[2,4,5,6,7,8,9,10,12,15,18,19,20,21,22,26,28,30,31,32,35,37,43,898,900,901,904,905,915,916,917,924,927,929,940,943,944,951],database_modul:[20,24],database_nam:[20,23,34],datadir:904,datarootdir:904,datatyp:45,date:[3,6,8,20,21,26,37,167,224,398,830,897,916],datebas:4,david:[15,23,936,937,951],db2:[3,6,20,23,35,901,915,916],db3:904,db_185:904,db_arg:[3,4,6,8,10,23],db_header:904,db_lib:904,db_librari:[20,22,24],db_module_dir:20,db_princ_arg:[3,23],dbadmin:19,dbdefault:[5,23],dbmatch:21,dbmodul:[3,22,23,24,35],dbname:[3,6,10,23],dbutil:917,dce:[43,48,641,679,916],dcmd_path:944,deactiv:20,deal:[895,917],dealloc:[92,923,930],debian:[31,916],debug:[3,7,8,9,20,28,903],dec:[34,35,896],dec_err:324,dec_error:355,decid:[34,39,245,937],decim:[6,43,908,951],decis:[30,917,926,930,951],declar:[43,922],decod:[21,46,48,159,184,359,908,919,921],decompos:538,decreas:[21,898],decrement:48,decrypt:[3,23,35,43,48,79,354,364,825,881,899,944,946],dedic:34,default_ccache_nam:[21,136,895,951],default_client_keytab_nam:[15,21,898],default_cr:43,default_domain:21,default_kdb_fil:905,default_kdc_enctyp:905,default_keytab_nam:[21,898,905],default_principal_expir:[20,896],default_principal_flag:[19,20,916],default_profile_path:905,default_rcache_nam:[21,899],default_realm:[21,28,33,34,923,932],default_tgs_enctyp:[21,26],default_tkt_enctyp:[21,26],default_valu:[59,60],defccnam:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],defcktnam:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],defeat:40,defens:25,defer:[43,919,923,926,930],defin:[3,12,20,21,33,34,39,43,101,119,228,738,899,904,908,909,921,925,932,933,944],definit:[10,16,20,901,917,926,928],defktnam:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],del_polici:[3,23],delai:[24,39,904,916,940],deleg:[3,20,21,23,333,547,654,908,916,937,941,946],delegated_cred_handl:43,delent:11,delet:[2,3,5,6,11,15,19,21,32,34,151,899,916,917,936,939,944,951],delimit:[21,311],delold:[2,14,26],delpol:[3,23],delprinc:[3,23],delstr:3,delta:[20,48],deltat:187,deltatp:391,demand:414,demonstr:[12,14],deni:[3,19,23,25,28,35,926,930,944],denial:21,denot:[6,19,896,909],depart:917,depend:[25,33,39,43,46,126,365,373,738,874,903,904,915,916,921,933,936,937],deploi:[36,37,38,902],deploy:[14,24,37],deprec:[14,20,26,70,75,94,120,122,123,131,168,186,188,190,191,196,197,225,226,232,233,234,239,281,309,340,341,351,353,393,411,413,916],der:[909,919,922,929],der_out:[323,325,326,331],deriv:[6,14,20,23,25,48,99,100,102,103,113,129,287,288,289,290,294,298,909,913,916,917,942],des3:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],des:[14,26],descend:[895,899],describ:[0,3,14,15,16,21,23,24,25,28,32,34,37,43,375,406,825,834,835,894,908,917,920,921,922,924,932,937,944],descript:[23,32,39,43,834,901,915,916,918,919,920,923,925,926,927,928,929,930,931,932,933],descriptor:[62,363,364,375],deseri:48,design:[28,34,46,315,895,899,951],desir:[14,15,23,28,43,119,121,250,251,329,904,916,931,944],desired_mech:[43,922],desired_nam:43,desired_object:43,desktop:46,dest_ctx:179,destdir:902,destin:[32,902,916],destroi:[43,48,136,147,148,386,414,895,916,918,919,920,923,926,927,928,929,930,931,933,935,939,940],destroy_polici:23,detach:8,detail:[10,14,15,22,24,26,28,33,34,36,262,736,895,901,903,916,918,919,920,923,926,927,928,929,930,931,932,933,944],detect:[6,8,14,23,323,325,326,331,356,360,899,904,922],determin:[3,4,5,6,8,20,21,23,24,28,34,43,48,62,102,105,117,136,154,230,231,261,289,359,385,389,416,887,895,898,899,902,904,909,912,916,919,923,926,930,931,937,951],dev:[20,21,41,951],develop:[0,902,914,916,917,934,951],devic:[3,20,21,23,46,655,656],devicenam:20,dfl:[21,899,951],dget_tgt_via_passwd:944,dict:[3,21,23],dict_fil:[4,20,933],dictat:23,dictionari:[20,21,29,30,34,35,40,916,933,940],did:[34,223,267,342,937],didn:[12,28],differ:[3,6,12,15,21,25,26,28,33,34,37,38,39,43,45,48,107,119,159,265,375,385,863,899,902,904,921,929,930,936,937,940,944,951],diffi:[20,21,940],difficult:35,difficulti:38,digest:[20,917],digit:[896,951],digitalsignatur:[21,37],dir:[20,21,37,895,904,915,940,951],direct:[21,22,23,28,41,48,917,922,932,951],directli:[3,18,20,21,23,29,34,43,46,375,618,922,929,940,945],directori:[5,12,20,21,22,23,28,33,34,37,169,342,895,899,903,905,906,915,916,936,944,948,949,950,951],dirnam:[21,895],dirpath:895,disabl:[3,14,20,21,23,24,26,28,34,37,38,39,41,380,381,386,550,899,902,904,916,924,940,948,951],disable_encrypted_timestamp:[21,25,40],disable_fresh:[37,940],disable_last_success:[20,22,35],disable_lockout:[20,22,35],disable_pac:[20,916],disallow:19,disallow_forward:[5,23],disassoci:[4,10],disast:39,disclaim:917,disclosur:[19,916],discoveri:[25,33,34,916],discuss:[34,899,917,925,934],disjoint:0,disk:[4,5,6,15,17,23,24,32,34,46,895,900,903],dispatch:922,displai:[2,3,5,9,11,15,23,37,42,46,245,728,898,908,916,917,940,941,947],display:169,disrupt:14,dist:903,distclean:902,distinguish:[5,21,23,917],distribut:[10,901,902,903,904,905,916,917,937,951],distributor:917,divid:913,dll:[28,921,922,932],dns:[21,904],dns_canonicalize_hostnam:[21,38,916],dns_canonicalize_realm:916,dns_lookup_kdc:21,dns_lookup_realm:[21,39],dns_uri_lookup:[21,39],dnsname:21,doc:[22,42,906],document:[5,20,21,23,29,33,34,43,894,902,904,913,916,917,921,934],doe:[3,6,8,10,14,15,20,21,22,23,24,25,26,34,37,38,39,40,43,46,56,119,144,152,160,301,311,313,345,375,389,397,414,895,898,902,904,909,916,917,921,922,923,930,932,936,937,944],doesn:[2,6,23,161,895,936],doing:[6,23,29,46,916,917,921,940,944],domain:[12,15,20,21,33,34,36,37,38,39,916,937],domain_realm:[28,33,39,949],don:[12,710,713,895,902,904,936,944,951],donat:[23,917],done:[8,22,23,32,34,39,895,904,920,929,932,944,951],dot:38,doubl:896,down:39,download:[8,917],downstream:[23,916],downtim:14,doxygen:[0,906],dprinc_look_ahead:944,draft:[692,695,698,916],drift:15,drop:916,dry:6,dsa:476,dst:148,due:[14,19,23,41],dug:917,dugsong:917,dump:[4,7,8,17,20,24,34,915,916],dump_fil:4,dumpfil:[6,23,904],dumptyp:6,dup:20,duplic:[48,824,899],durabl:[20,24],durat:[3,20,21,23,882,940,944],dure:[3,4,8,17,20,21,23,26,34,35,40,43,352,380,414,717,908,909,916,920,927,937,944],dynam:[21,921,924,926,932],e19253:42,e2big:119,e_data:[834,929],each:[2,3,6,8,10,15,19,20,21,23,24,25,26,28,33,35,37,39,43,44,46,252,263,265,352,753,895,898,900,902,908,909,913,916,917,921,925,926,927,931,936,937,940,941,944,946,949,950],ear:917,earli:14,earlier:[20,26,34,224,930],earliest:[6,153,913],eas:36,easi:[14,17,25,35,937],easier:[0,14,916],easili:[14,34,902,916],eavesdrop:43,eavesdropp:899,ebaa:42,eblock:[186,188,190,196,197,281,351,353,393,411],echo:[352,361],edata:929,edit:[2,11,12,31,904,905,936],editor:0,edt:[3,23],edu:[0,3,5,12,14,15,19,20,21,23,24,28,32,34,42,916,917,932,934,936,937,944],educ:33,edwards25519:[21,40,917],edwards25519_t:917,effect:[14,19,20,21,23,37,39,729,895,899],effici:916,effort:25,eight:33,einval:[260,373,390,392,394,395],either:[15,20,21,22,23,25,26,34,35,36,37,41,43,44,195,245,253,274,325,326,327,331,402,403,407,729,864,895,902,913,917,921,926,930,937,944,950],eku:[20,21],elaps:[3,23],element:[43,46,48,189,320,412,825,871,909],elements_stor:43,elimin:[14,40],ellipt:40,els:[34,921,936,937,944],elsewher:17,emac:904,email:[0,642,936],emailprotect:21,embed:677,empti:[3,6,19,20,21,23,36,43,46,48,93,229,231,279,345,388,389,404,414,899,904,908,940],enabl:[3,4,8,14,15,20,21,22,23,24,25,28,34,36,37,39,40,41,43,55,78,895,903,904,916,919,924,944,951],enable_onli:[21,28],enc:[3,6,15,20,23,199,301,824,916],enc_err:324,enc_errbuf:355,enc_padata:830,enc_part2:[376,821,843,881],enc_part:[805,821,843,881],enc_tkt:[300,301],encdata:909,enckdcreppart:830,enckrbcredpart:823,enclos:[20,21,896],encod:[21,43,46,48,189,300,323,325,355,541,881,888,908,909,919,922,929],encompass:43,encount:[21,34,941],encourag:21,encrypt:[2,3,6,14,15,17,21,23,25,29,30,32,34,36,40,43,46,48,79,95,98,99,100,112,113,114,116,124,125,126,129,130,153,229,280,287,288,294,295,298,299,310,315,325,326,357,359,394,480,481,539,599,670,748,806,807,821,823,824,825,830,831,843,844,881,898,899,900,901,905,909,910,916,917,920,922,929,934,941,946,951],encrypted_challeng:21,encrypted_challenge_ind:[20,916],encrypted_timestamp:21,enctyp:[6,11,14,20,21,23,48,95,97,98,99,101,104,107,111,112,116,118,125,126,192,193,211,224,280,287,310,315,378,411,829,831,844,846,908,912,915,916,920,946],enctype_aes128_cts_hmac_sha1_96:[447,787],enctype_aes128_cts_hmac_sha256_128:787,enctype_aes256_cts_hmac_sha1_96:[448,787],enctype_aes256_cts_hmac_sha384_192:787,enctype_arcfour_hmac:787,enctype_arcfour_hmac_exp:787,enctype_camellia128_cts_cmac:787,enctype_camellia256_cts_cmac:787,enctype_des3_cbc_env:787,enctype_des3_cbc_raw:787,enctype_des3_cbc_sha1:787,enctype_des3_cbc_sha:787,enctype_des_cbc_crc:787,enctype_des_cbc_md4:787,enctype_des_cbc_md5:787,enctype_des_cbc_raw:787,enctype_des_hmac_sha1:787,enctype_dsa_sha1_cm:787,enctype_md5_rsa_cm:787,enctype_nul:[101,229,787],enctype_out:229,enctype_rc2_cbc_env:787,enctype_rsa_env:787,enctype_rsa_es_oaep_env:787,enctype_sha1_rsa_cm:787,enctype_unknown:787,enctypep:392,end:[6,20,21,23,24,30,33,34,39,92,93,164,332,823,831,844,882,904,908,912,913,916,925,944,951],endian:[908,909,910,912,922],endors:917,endpoint:[62,917],endtim:[224,882,908],energi:917,enforc:21,enforce_ok_as_deleg:[21,916],engin:39,enoent:336,enomem:[119,223,231,302,323,325],enough:[3,23,26,99,102,167,287,289,764],ensur:[14,15,17,20,23,24,25,26,34,37,46,171,863,864,923,930,937],enter:[3,5,10,14,23,34,37,325,326,331,361,922,936,937],enterpris:[38,43,345,708,916,940,946],entir:[3,14,20,39,538,908,929],entiti:[43,917],entri:[3,8,9,11,12,14,15,19,20,21,22,23,24,26,32,34,35,37,38,39,40,41,43,46,48,153,173,195,198,200,220,245,309,315,320,322,325,326,331,337,352,359,414,830,848,852,895,898,900,909,910,913,916,928,929,937,941,944],entropi:916,enumer:[14,26],env:[21,37,41,951],envelop:[467,479,480,481],environ:[14,15,20,21,23,24,26,28,30,34,35,37,38,41,43,56,136,268,269,282,386,387,895,898,899,902,915,916],envvar:21,eperm:[926,930],epoch:[48,883],equal:[15,24,912,916,944],equip:951,equival:[20,36,166,382,383,916],erang:336,err_fmt:[21,916],erron:41,error:[3,20,21,24,34,37,39,43,48,49,50,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,117,118,119,121,124,125,126,129,130,133,134,135,137,141,142,145,147,148,149,150,151,152,153,154,155,156,157,158,159,161,162,163,164,166,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,236,238,243,248,260,261,262,264,265,266,267,268,271,272,274,275,276,277,278,279,280,282,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,344,345,347,352,354,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,543,615,617,711,712,834,835,863,899,901,904,916,920,921,926,927,929,930,937,946],error_t:917,escap:713,especi:[15,26,34,38,916],essenti:20,est:[23,35,896],establish:[37,43,899],etc:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],etyp:[6,229,378,671,916,946],etype_list:[244,838],etype_list_length:[244,838],euid:[21,899,915],evalu:21,even:[14,20,21,23,25,28,34,38,39,43,245,388,894,896,899,916,917,940,944],event:[39,48,916,917,929],eventu:[26,39],everi:[20,21,23,32,34,48,318,895],evid:43,evolut:916,exact:[22,903],exactli:[21,34,153,407,746,747,751,909,944],examin:[21,37,920,929],exampl:[3,5,6,9,14,16,20,21,22,24,26,28,32,34,35,37,38,39,41,43,56,100,103,288,290,895,896,899,902,903,916,917,921,932,936,937,940,944,951],exce:[894,896],except:[3,15,19,21,23,37,39,43,329,916,917,922,944],excess:902,exchang:[34,40,48,224,247,279,363,375,437,875,909,929],exclud:[6,17,32,916],exclus:[3,913,917,940,944],exec:[904,943,944],execprefix:904,execut:[3,6,22,34,46,380,903,904,943],exemplari:917,exhaust:32,exist:[0,2,3,5,6,14,15,20,21,22,23,26,28,32,34,35,43,46,48,137,147,155,329,330,359,363,364,375,407,414,895,900,908,916,922,940,942,944],exit:[3,10,11,23,895,916,937,941,946],exp:[3,15,20,21,26,37],expand:[21,913,916],expans:[904,916],expdat:[3,23],expect:[14,21,34,41,267,301,342,343,728,906,920,925,937],expected_nonc:880,expens:[20,25,35],experi:[0,14,39,916],experienc:[0,931],experiment:916,expir:[2,3,6,15,19,20,21,23,26,33,37,43,46,48,224,243,260,830,882,895,896,899,908,916,937,940,941,944,951],expiri:[14,245,916],explain:34,explicit:[14,19,21,22,24,28,39,917],explicitli:[3,14,19,23,28,34,44,253,904,916,926,927,928,937],expos:[3,6,14,23,46,846,940,944],express:[3,21,23,896,917],extend:[20,21,37,48,420,887,922,951],extendedkeyusag:37,extens:[37,39,247,906,916,922],extent:917,extern:[20,22,43,908],extfil:37,extra:[19,39,40,764,903],extra_address:21,extract:[3,15,19,23,34,229,898,916],extrem:3,eytab:[3,15],facil:[4,15,20,43,916],facilit:916,factor:[21,909],fail:[2,3,6,14,15,20,21,23,24,35,38,39,43,46,228,260,279,342,354,404,863,902,904,916,922,923,937,939,944],fail_count:6,failov:39,failur:[3,6,14,23,24,35,46,119,129,130,159,260,298,299,310,407,408,409,916,917,922,931,933],failurecountinterv:[3,23,35],failuretim:[3,23],fake:[21,46],fall:[39,40,895,916],fallback:[3,20,21,23,38,40,46,916,923],fallback_realm:923,fals:[14,20,21,23,26,28,33,36,37,38,39,43,52,54,105,109,110,127,128,160,192,245,283,284,285,319,348,349,350,362,388,416,950],famili:[20,186,188,190,191,196,197,250,251,281,351,353,411,931],famou:34,far:37,fashion:[29,917,944],fast:[20,21,25,36,37,48,229,544,599,908,916,920,929],fast_avail:908,fast_ccache_nam:247,faster:[25,39,895,902],fatal:154,fdii:937,feasibl:34,featur:[24,29,368,371,914,917,934],feb:9,februari:894,fee:917,feedback:0,fellow:917,fenc:921,fences_wicker_initvt:921,fermi:917,fetch:[4,5,6,10,11,21,23,71,141,414,916],few:[904,936,951],fiat:917,fiction:921,fictiti:937,field:[3,6,20,21,23,35,36,37,39,44,46,48,153,256,310,330,331,343,352,356,357,359,360,412,747,751,887,908,909,912,913,916,920,921,929,933,937,949],file2:[899,913,951],file:[3,4,5,6,7,9,10,11,12,14,15,16,17,19,22,24,28,29,30,31,37,38,39,41,46,48,50,152,262,269,317,321,363,364,375,378,405,753,895,896,897,898,899,901,902,903,904,905,906,914,915,916,917,918,919,920,921,922,923,925,926,927,928,929,930,931,932,933,935,936,937,944,949,950,951],filenam:[2,3,5,6,7,8,15,20,21,23,28,34,36,37,41,43,387,895,899,916,951],filesystem:[20,23,34,37,913,915],fill:[46,48,50,56,119,121,134,150,152,224,230,231,303,306,311,327,347,357,358,390,391,394,396,397,912,913,921,932],filter:[20,21],find:[12,21,23,38,39,43,48,50,908,913,916,918,936,937,940,944],fine:[39,43],fini:[918,919,920,923,926,927,928,929,930,931],finish:48,fip:916,fire:39,firewal:[29,39,41],firm:917,first:[3,6,9,12,16,19,20,21,22,23,26,28,34,37,38,39,43,44,52,53,93,105,136,228,258,279,300,322,348,349,350,361,362,386,404,761,825,898,899,904,906,908,909,910,912,913,916,917,919,921,922,923,928,930,937,942,944,949,951],fit:[311,917],five:[3,21,23,34,896,899,927,942],fix:[6,913,916],flag:[2,3,5,6,11,14,19,20,21,22,23,25,26,28,33,35,39,40,43,46,48,55,62,69,74,78,151,153,192,269,279,325,326,327,331,343,352,354,356,359,360,363,364,404,726,727,728,729,733,734,735,736,738,745,746,823,824,825,830,831,838,877,892,895,904,916,920,929,937,939,940,941,943,944],flag_rsa_protocol:940,flagnam:19,flat:895,flavor:[3,23],flexibl:[21,38],flip:14,flush:932,fmt:[346,379,417,418,419,420],fnal:917,folder:21,follow:[2,3,6,10,14,15,19,20,21,22,23,24,25,26,28,29,34,35,36,37,38,39,43,62,228,245,248,263,333,344,345,352,359,361,389,408,895,896,898,899,901,902,904,905,908,909,910,912,916,917,921,922,925,932,934,936,937,940,941,943,944,948,949,950,951],foo:[3,6,15,21],foobar:[39,904,950],fool:25,foot:921,for_us:946,forbid:[3,23],forbidden:21,forc:[3,5,8,9,11,14,19,20,21,23,25,26,35,39,40,136],foreground:[4,8],forev:[3,23],forget:[5,23,34,156],fork:[10,34,944],form:[0,3,15,20,21,23,24,25,28,29,34,39,43,152,317,325,326,331,373,389,642,874,895,900,909,916,917,940,949,951],format:[0,3,6,19,20,21,36,39,43,48,321,346,405,406,417,419,420,731,736,738,877,887,895,897,898,899,904,906,910,914,916,921,922,944,946,951],former:388,formul:21,forth:21,forward:[3,15,20,21,23,33,34,36,38,43,48,354,531,548,838,916,937,940,941,944,951],found:[7,10,12,20,21,23,34,39,59,60,151,153,154,195,301,315,359,904,913,916,936,937,944,945,951],foundat:917,four:[21,24,35,40,908,909,910,913,922,944],fqdn:29,fraction:25,frame:908,framework:[43,916,917],fred:28,free:[46,47,48,49,65,67,72,76,91,93,111,115,141,143,145,150,153,169,172,173,174,175,177,178,180,181,182,183,194,195,224,227,229,236,261,272,275,280,286,310,315,317,321,322,324,325,326,327,328,329,330,331,332,335,338,339,344,345,354,355,356,357,359,360,363,375,389,401,403,405,406,408,917,919,921,932],free_ind:919,free_list:923,free_modreq:929,free_restrict:926,free_str:[930,932],free_valu:932,freed:[44,57,58,61,78,85,106,136,144,146,198,199,200,201,202,204,207,208,210,211,212,215,216,217,218,219,221,222,228,262,312,334,365,366,368,371,863,864],freeli:917,frequent:[14,33,38,39,883,936],fresh:[0,15,17,20,43,598,911,916,940,944],fri:9,friend:937,friendli:916,friendlier:916,from:[0,2,3,4,5,6,7,8,9,10,11,17,19,20,21,22,24,25,28,29,32,34,35,37,38,39,41,43,44,46,48,49,93,99,100,101,102,103,113,119,121,129,148,166,169,180,181,183,195,241,245,250,258,269,287,288,289,290,294,298,322,327,330,342,346,352,356,357,358,359,360,375,376,378,380,382,383,414,420,440,830,843,844,895,898,899,902,903,904,908,909,913,914,916,917,918,919,920,922,924,925,927,932,934,936,937,940,942,944,946,949,951],from_mast:[8,915],front:[20,344],fsanit:904,ftp:[32,34],fubar:[21,951],fulfil:944,full:[4,8,9,14,20,23,39,48,331,904,916,925,936,944],fulli:[3,15,19,21,23,29,32,34,35,46,940,951],fullname_out:143,fulvio:42,func:[63,80],fund:917,fundsxpress:917,furnish:917,further:[10,34,899,950],furthermor:[14,245,917],futur:[23,26,37,43,156,228,887,916,923],g10:917,g_accept_sec_context:917,g_acquire_cr:917,g_canon_nam:917,g_compare_nam:917,g_context_tim:917,g_delete_sec_context:917,g_dsp_name:917,g_dsp_statu:917,g_dup_nam:917,g_exp_sec_context:917,g_export_nam:917,g_glue:917,g_imp_nam:917,g_imp_sec_context:917,g_init_sec_context:917,g_initi:917,g_inquire_context:917,g_inquire_cr:917,g_inquire_nam:917,g_process_context:917,g_rel_buff:917,g_rel_cr:917,g_rel_nam:917,g_rel_oid_set:917,g_seal:917,g_sign:917,g_store_cr:917,g_unseal:917,g_userok:917,g_util:917,g_verifi:917,gain:[14,25,34,926,928,937],gcc:904,gen_sym:944,gener:[2,9,12,14,15,17,19,20,21,23,25,26,32,35,41,43,48,113,125,126,260,283,294,327,330,342,440,523,524,525,526,822,839,854,895,899,901,902,903,904,906,908,916,917,920,924,929,934,937,944,949],generalizedtim:909,generalstr:37,generic_trusted_ca:[20,21],gennadi:944,genrsa:37,german:916,get:[3,12,14,16,19,20,21,23,32,33,35,38,39,48,59,60,163,236,254,258,275,904,916,920,923,929,936,937,940,944,951],get_cooki:[916,929],get_cr:46,get_tgt_via_passwd:944,get_valu:932,getaddrinfo:38,getdat:[3,5,6,19,23],gethostnam:[38,43],getnameinfo:38,getopt:901,getpol:[3,23],getprinc:[3,6,14,23,26,35,916],getpwuid:[3,23],getrandom:916,getstr:3,getusershel:944,gic_opt:920,give:[6,14,23,28,38,902,908,909,917,930,936,937],given:[2,3,5,6,8,10,14,20,21,23,28,36,38,39,41,43,46,48,49,59,60,124,135,317,329,389,864,904,908,913,916,917,941],gladman:917,glob:[3,6,15,23],global:[5,19,20,21,22,23,141,155,916],glorifi:921,glossolalia:14,glue:901,gmbh:917,gmt:896,gnu:[902,904,916,917],goal:46,going:[20,24,937],good:[12,15,23,34,917,936,937,951],googl:917,gotten:937,gov:[21,917],govern:[23,917,942],gpg:903,gpl:917,grace:940,gracefulli:922,grain:43,grammar:[908,912],grant:[3,14,19,20,21,23,26,28,34,35,37,39,43,46,48,224,235,260,264,267,758,895,908,916,917,926,930,935,937,940,944,950],gratitud:917,great:[19,153,267,750],greater:53,greg:951,groff:0,group:[20,21,40,909,917],grow:899,gs2:916,gss:[28,901,908,915,916,922,951],gss_:922,gss_accept_sec_context:[43,916,922],gss_acquire_cr:[43,916],gss_acquire_cred_from:[43,916],gss_acquire_cred_impersonate_nam:43,gss_acquire_cred_with_password:916,gss_add_cr:922,gss_add_cred_from:922,gss_add_cred_impersonate_nam:922,gss_add_cred_with_password:922,gss_add_oid_set_memb:922,gss_buffer_desc:43,gss_buffer_set_t:43,gss_buffer_t:[43,922],gss_c_accept:43,gss_c_both:43,gss_c_buffer_flag_alloc:43,gss_c_buffer_type_data:43,gss_c_buffer_type_head:43,gss_c_buffer_type_mic_token:43,gss_c_buffer_type_pad:43,gss_c_buffer_type_sign_onli:43,gss_c_buffer_type_stream:43,gss_c_buffer_type_trail:43,gss_c_channel_bound_flag:916,gss_c_dce_styl:43,gss_c_deleg_policy_flag:916,gss_c_inq_negoex_kei:922,gss_c_inq_negoex_verify_kei:922,gss_c_ma_negoex_and_spnego:922,gss_c_no_credenti:43,gss_c_no_nam:43,gss_c_nt_anonym:43,gss_c_nt_export_nam:[43,922],gss_c_nt_hostbased_servic:43,gss_c_nt_machine_uid_nam:43,gss_c_nt_string_uid_nam:43,gss_c_nt_user_nam:43,gss_c_null_oid:43,gss_c_qop_default:43,gss_c_sec_context_sasl_ssf:916,gss_const_key_value_set_t:43,gss_create_empty_oid_set:922,gss_cred_id_t:[43,922],gss_cred_usage_t:43,gss_ctx_id_t:[43,922],gss_display_statu:922,gss_error:43,gss_export_cr:43,gss_export_nam:43,gss_get_mic_iov:43,gss_get_mic_iov_length:43,gss_get_name_attribut:43,gss_import_cr:[43,922],gss_import_nam:[43,922],gss_import_sec_context:922,gss_init_sec_context:43,gss_inquire_attrs_for_mech:922,gss_inquire_cr:43,gss_inquire_cred_by_oid:[43,916],gss_inquire_nam:43,gss_inquire_sec_context_by_oid:[916,922],gss_iov:916,gss_iov_buffer_desc:43,gss_iov_buffer_desc_struct:43,gss_iov_buffer_flag_alloc:43,gss_iov_buffer_t:43,gss_iov_buffer_type_data:43,gss_iov_buffer_type_head:43,gss_iov_buffer_type_mic_token:43,gss_iov_buffer_type_pad:43,gss_iov_buffer_type_sign_onli:43,gss_iov_buffer_type_stream:43,gss_iov_buffer_type_trail:43,gss_key_value_element_desc:43,gss_key_value_element_struct:43,gss_key_value_set_desc:43,gss_key_value_set_struct:43,gss_krb5_cred_no_ci_flags_x:916,gss_krb5_get_cred_imperson:[43,916],gss_krb5_nt_enterprise_nam:[43,916],gss_krb5_nt_principal_nam:43,gss_krb5_nt_x509_cert:[43,916],gss_mech_config:[28,915,951],gss_mech_interpos:922,gss_name_t:[43,922],gss_oid:[43,922],gss_oid_set:[43,922],gss_qop_t:43,gss_release_iov_buff:43,gss_s_cred_unavail:43,gss_s_duplicate_el:43,gss_s_unavail:43,gss_store_cr:916,gss_store_cred_into:43,gss_unwrap_aead:43,gss_unwrap_iov:43,gss_verify_mic_iov:43,gss_wrap_aead:43,gss_wrap_iov:43,gss_wrap_iov_length:43,gss_wrapex:916,gssapi:[15,16,20,21,45,894,895,898,899,901,916,917,918,924,943,951],gssapi_err_gener:917,gssapi_ext:[43,922],gssapi_krb5:43,gssapiauthent:28,gssapip_spnego:917,gssapistrictacceptorcheck:38,gssapiv2:43,gssd_pname_to_uid:917,gssi_:922,gssi_import_cred_by_mech:922,gssi_import_name_by_mech:922,gssi_import_sec_context_by_mech:922,gssrpc:917,gssspi_exchange_meta_data:922,gssspi_query_mechanism_info:922,gssspi_query_meta_data:922,guarante:14,guard:899,guess:[21,34,916],guest:[3,21,23],guid:[15,30,32,924],h5l:[21,44],had:[6,23,28,34,37,936,937,950],haddl:85,hand:[14,23,34],handi:34,handl:[3,6,14,19,23,36,43,48,71,132,135,137,139,141,142,143,144,145,146,147,149,150,151,152,153,154,155,157,158,159,161,164,223,224,235,246,250,251,265,276,300,302,303,305,308,310,311,312,313,314,316,318,335,336,342,343,359,403,414,917,920,922,925,929],handle_error:43,handle_out_of_space_error:43,happen:[3,17,20,23,34,39,41,937],happi:917,hard:[20,23],hardcod:[895,898,932],harder:916,hardwar:[3,20,23,34,46,919,929,937,941],harm:899,harvard:917,harwood:951,has:[0,3,5,6,12,14,15,17,19,20,21,23,24,25,26,27,28,34,35,37,38,39,43,46,78,124,260,263,279,356,360,388,404,737,895,899,902,903,904,908,912,913,916,917,922,926,927,928,931,936,937,941,944,949],hash:[6,21,23,37,899,909,913,916],hat:[691,917,951],have:[0,2,3,6,8,12,14,15,17,19,20,21,23,24,25,26,28,32,33,34,35,37,38,39,43,46,101,153,230,274,402,895,899,902,903,906,908,909,912,913,916,917,918,920,921,922,925,926,927,929,931,933,936,937,940,944,948,950,951],have_getusershel:944,haven:[904,951],hdata:230,head:21,header:[6,21,43,48,535,538,807,904,918,919,920,921,923,925,926,927,928,929,930,931,932,933],headernam:904,heim_org:21,heimdal:[42,43,45,895,916],held:[917,941],hellman:[20,21,940],help:[21,37,899,904,916,932,934,937,943,951],helpdesk:14,henc:12,her:[39,937,950],here:[0,15,19,20,21,23,28,35,41,43,46,896,904,921,936,937],hereaft:917,herebi:917,hesiod:[21,904,917],heurist:[21,154,230,918,944,949],hexadecim:[6,916],hhmmss:896,hhost:916,hidden:[46,352,868],hide:[3,23,940],hierarch:[4,21,916],hierarchi:23,high:[14,16,24],higher:[43,895,906,916],highest:[3,6,14,15,21,310,315,414],highli:[903,916],himself:937,hin:903,hint:[3,20,23,149],his:[19,23,937,944,950],hist_kvno:6,histor:[28,33,894],histori:[6,26,904,916],hit:[48,944],hmac:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],hold:[3,43,78,170,187,192,193,397,398,895],holder:917,hole:[32,34,39,912],home:[5,21,23,28,936,944,948,949,950],honor:[41,937],hook:[48,863,864,916,924],hope:917,hopefulli:35,host01:951,host:[3,4,7,8,12,14,15,16,20,21,23,24,25,26,29,30,31,33,36,37,38,39,43,46,48,194,223,230,329,331,388,389,414,643,645,899,902,904,916,924,929,936,937,940,941,944,948,949,950,951],host_based_servic:[20,39],host_realm:923,hostaccount:28,hostnam:[3,12,15,20,21,23,26,33,34,37,38,41,43,48,329,388,389,904,916,923,946,949,951],hostrealm:[28,916,924],hostrealm_plugin:923,hotp:3,hour:[5,19,20,23,33,896,936,937,944,951],houston:39,how:[14,20,21,23,26,28,32,34,37,39,43,224,416,903,904,914,918,924,931,932,936,940],howev:[3,6,14,17,20,21,23,25,32,33,35,37,39,902,917,937,951],html:[0,22,42,903,906,916],html_subst:906,htmlsrc:906,http:[21,22,25,30,38,39,42,902,903,906,916,917,934],http_anchor:[21,29],hudson:951,human:[169,896,916],hundr:24,hwauth:20,hxx:917,iakerb:916,icr:43,idea:38,ideal:[15,23,34,46,902],ident:[3,15,20,22,23,43,48,361,738,878,879,895,916,920,936,937,940,942],identif:[916,917],identifi:[4,10,21,28,43,166,265,315,317,731,824,830,845,916,917,922,946],idp:691,iec:903,ietf:916,ignor:[3,15,19,20,21,26,28,43,48,235,260,264,267,269,278,282,342,345,350,359,388,534,706,709,863,899,902,904,908,916,921,949,951],ignore_acceptor_hostnam:[21,38,43],illinoi:42,illumin:951,imap:[38,904,949],immedi:[6,14,21,23,39,916,929],impact:35,impend:46,imperson:916,impl:904,implement:[0,14,20,21,23,24,28,29,36,38,40,43,44,46,51,113,119,151,294,382,383,895,902,904,908,910,912,916,917,918,919,920,921,922,923,925,926,927,929,930,931,932,933,934,937,944,951],impli:[8,917],implicit:20,impos:926,imposs:[23,35],improv:[0,14,20,21,35,916,934],in_authdat:173,in_cr:[224,225,226,321,330,375],in_data:[329,330,375],in_length:[131,413],in_tkt_servic:[235,260,264,267],inaccess:39,inaccur:21,inaddr:172,inadequ:41,inauthdat1:322,inauthdat2:322,inbuf:[356,357,358,359,360],inc:[917,937,951],incc:134,incident:917,includ:[6,9,15,16,19,20,21,24,26,32,33,34,37,38,39,43,48,99,104,144,287,311,325,326,330,331,343,344,359,407,684,811,824,831,844,858,894,895,899,901,904,905,906,908,909,912,916,917,920,921,922,926,928,929,932,936,940,944,951],include_pac:858,includedir:[21,904],inclus:917,incom:[20,38,922],incompat:[902,904,925],incomplet:21,inconsist:24,incorpor:[0,20,24,916],incorrect:[35,39,733,734,936,937],incorrectli:937,incr:177,increas:[20,24,40,100,103,288,290,924],increment:[4,8,9,14,19,20,24,31,35,39,48,87,89,325,326,331,913,916,917],indata:178,inde:937,independ:[21,26,138,163,245,307,904],index:[6,22,29,42,369,903,913],indic:[3,6,14,19,20,21,23,26,28,30,36,37,39,41,43,46,154,245,327,726,727,728,729,733,734,735,736,835,895,896,898,899,908,909,910,912,913,916,917,919,920,921,929,937,940,951],indirect:917,individu:[9,20,917,937,951],inetd:[8,12,34,41],infd:62,infer:[91,93,344],influenc:38,info2:916,info:[20,34,229,652,654,662,671,824,830,886,916],inform:[3,4,6,7,9,11,20,22,26,28,33,34,38,39,41,43,46,48,169,185,229,250,251,282,325,327,333,342,364,386,387,416,651,653,655,656,657,738,822,823,861,868,873,887,895,903,904,907,908,909,912,916,920,921,924,925,929,932,934,940,951],infrastructur:[21,40,901,902,916],infrequ:916,inherit:[936,944],ini:21,init:[4,10,918,919,920,923,926,927,928,929,930,931],init_cr:46,initi:[3,5,12,14,15,21,22,23,25,26,34,35,38,40,45,48,99,102,115,124,229,269,287,289,336,401,506,875,882,895,898,904,908,916,917,920,921,936,937,940,941,943,944,946,951],initialcredenti:48,initiator_cred_handl:43,inittab:34,initvt:921,inject:25,inop:14,inout:[98,99,100,102,103,114,287,288,289,290,295,329,330,359,361,363,364,375,407],inprinc:182,inptr:[186,190],input:[23,43,48,49,99,100,102,103,107,113,117,119,124,144,194,195,224,287,288,289,290,294,296,352,375,376,403,918,930,933,946],input_assoc_buff:43,input_ccach:940,input_cred_handl:43,input_message_buff:43,input_name_buff:922,input_name_typ:922,input_payload_buff:43,inputlen:104,inquir:[3,15,19,23],inquiri:19,ins:32,insecur:[14,32,39,43,230],insensit:[39,350,704,896],insert:[25,823,830],insid:[15,26,195,909,916],insist:944,inspect:[16,380,381,863,864,919,926,928],inspir:916,inst:50,instal:[12,14,15,17,21,28,30,32,39,900,903,906,925,939,943],instanc:[19,21,23,28,33,35,43,49,50,643,644,899,908,916,921,951],instead:[3,4,6,8,14,20,21,23,24,34,37,38,46,239,246,278,309,340,341,342,344,417,419,864,904,916,917,922,929,939,941,944,950],institut:[907,917,951],instruct:[22,23,34,37,43,904,934],insuffici:[223,231,302,323,325,904],int16_t:841,int32_t:842,int_max:785,integ:[3,15,20,21,23,36,37,894,908,909,912,922],integr:[26,33,43,46,326,331,356,360,901,903,915,916,917,937],intel:917,intend:[3,10,23,41,43,46,352,944],interact:[2,3,21,23,39,368,904],intercept:[28,922],interest:[21,35,899,905],interfac:[3,11,14,19,20,23,28,34,46,895,899,901,904,916,921,924],interface_modname_initvt:921,interface_module_initvt:921,interface_plugin:921,interfer:902,intermedi:[20,21,23,43,224,908,909,916,937],intern:[24,36,41,107,729,845,918,919,920,924,926,927,928,929,931,933,951],internet:38,interoper:[37,382,383,895,922],interpos:[28,924],interpret:[3,36,43,46,152,245,922,940,944,946],interprocess_token:922,interrupt:[14,260,917],intersect:26,interv:[3,8,23,34,35,894,896],interven:23,intervent:[14,26],introduc:[3,20,21,919,923,927,928,930],intrud:937,invalid:[14,21,23,50,136,139,156,260,301,315,336,937,940,941],invers:912,investig:904,invis:25,invoc:[6,41,43],invok:[4,8,9,11,12,21,23,24,46,80,136,245,386,922,929,930,931,940,942,944],involv:[21,929],iov:[48,100,103,288,290,825,916],iov_count:43,iprop:[4,8,20,916,917],iprop_en:[4,8,20,23],iprop_hdr:917,iprop_listen:20,iprop_logfil:[20,23],iprop_master_ulogs:[20,23],iprop_port:[20,23],iprop_replica_pol:[8,20,23],iprop_resync_timeout:[20,23],iprop_slave_pol:20,iprop_ulogs:20,ipropd_svc:917,ipv4:38,ipv6:[21,38,916],iran:917,is_last_req:[245,836],is_skei:[153,747,824,908],isi:944,isn:[20,23,333,899,902,917],iso:903,isol:39,issu:[2,3,14,20,21,23,26,29,32,35,36,37,39,43,46,320,412,882,904,916,920,929,937,940],issuanc:[3,23],issue_pac:916,issuer:[21,37,320,412],issueraltnam:37,item:[253,729,921,929],iter:[3,20,23,24,48,164,359,815,918,932],iterator_cr:932,iterator_fre:932,its:[3,4,8,10,14,15,17,20,21,23,24,26,28,29,32,33,34,35,37,38,39,40,41,43,46,48,87,89,92,107,117,203,209,228,269,296,301,356,359,360,381,412,896,907,908,916,917,918,919,920,921,922,929,933,939,940,941,949],itself:[3,4,8,10,14,15,20,21,23,28,43,46,198,199,200,201,202,203,206,207,208,209,212,215,216,221,334,734,824,895,898,900,922,929,937],ivec:[186,190],jan:23,januari:[23,894,896],jellinghau:917,jennif:[3,23,936,937,951],jeremi:917,jimi:12,job:[8,17,34,39],joeadmin:[19,23,32,950],joeuser:951,johndo:21,jqpublic:944,json:[3,36,46,368,371,736,738,908],jul:896,juli:896,just:[6,14,15,20,21,23,33,34,43,326,641,895,902,905,920,937,944,950],k5_gic_opt:[235,260],k5_random_kei:[115,124],k5_vic_opt:[415,416],k5ident:[21,28,935,948],k5login:[21,28,935,936,944,948],k5login_authorit:[21,28,950],k5login_directori:[21,28],k5srvutil:[1,14,26,898],k5user:944,k5wiki:[902,916,934],kadm5:[3,4,6,18,20,21,23,24,34,901,915,916,917,924,926],kadm5_auth:[19,916,924],kadm5_auth_modinfo:926,kadm5_auth_plugin:926,kadm5_auth_restrict:926,kadm5_hook:[916,924],kadm5_hook_modinfo:927,kadm5_hook_plugin:927,kadm5_pass_q_:933,kadm:943,kadmin:[1,2,4,5,6,8,10,11,12,14,15,16,19,20,21,22,24,25,26,32,34,35,37,39,40,166,245,300,301,382,895,896,898,901,916,917,924,927,942,943,951],kadmind:[1,3,5,9,19,20,21,22,23,24,26,28,34,39,900,916,924,942,951],kadmind_listen:20,kadmind_port:[4,20,34],kaduk:14,kbd5_util:23,kbuild:901,kcm:[21,321,405,895,916,917,951],kcm_mach_servic:21,kcm_socket:21,kdb5_err:917,kdb5_ldap_util:[1,3,4,10,20,22,23,24],kdb5_util:[1,4,7,8,10,11,14,20,22,23,24,26,34,896,901,915,916,951],kdb5_util_path:4,kdb5_util_prog:8,kdb:[4,22,23,24,35,901,916,917,924,928,940,943],kdb_convert:917,kdb_log:917,kdc1:39,kdc2:39,kdc:[3,4,5,6,8,9,10,11,15,16,17,18,19,21,22,23,24,25,26,29,31,32,33,36,40,43,46,48,101,107,119,166,224,230,235,241,245,247,258,260,269,300,301,333,342,343,414,544,546,563,658,736,830,843,844,863,864,882,895,898,900,901,904,905,908,910,911,916,919,920,923,924,925,931,933,937,940,946,951],kdc_cert:37,kdc_default_opt:21,kdc_err_more_preauth_data_requir:916,kdc_listen:[20,34],kdc_max_dgram_reply_s:20,kdc_opt_allow_postd:787,kdc_opt_canonic:787,kdc_opt_cname_in_addl_tkt:787,kdc_opt_disable_transited_check:787,kdc_opt_enc_tkt_in_skei:787,kdc_opt_forward:787,kdc_opt_postd:787,kdc_opt_proxi:787,kdc_opt_renew:787,kdc_opt_renewable_ok:[21,787],kdc_opt_request_anonym:787,kdc_opt_valid:787,kdc_option:844,kdc_port:20,kdc_princ_nam:37,kdc_princip:37,kdc_principal_seq:37,kdc_tcp_listen:[20,34,37],kdc_tcp_listen_backlog:20,kdc_tcp_port:20,kdc_timesync:21,kdc_tkt_common_mask:787,kdcdefault:[10,34,37,40],kdcissu:48,kdckei:37,kdclist:34,kdcpolici:[916,924],kdcpolicy_plugin:928,kdcpreauth:[916,924],kdcpreauth_mymech_initvt:921,kdcpreauth_plugin:929,kdcproxi:29,kdestroi:[33,895,916,935,938,940,941,945,946,951],keep:[3,9,15,23,35,899,902,903,936],keepkvno:3,keepold:[3,14,23,916],kei:[2,3,5,6,9,10,11,12,15,16,19,20,21,25,28,32,34,36,37,38,40,41,43,46,48,73,77,87,89,100,103,105,106,108,113,114,117,119,129,130,141,153,155,181,216,224,229,234,258,276,277,280,292,293,300,301,307,308,313,320,325,330,342,343,351,354,359,363,364,412,414,439,440,670,738,748,754,811,823,824,830,831,832,845,846,848,898,899,900,901,904,905,908,909,910,915,916,920,922,929,937,940,941,946,951],kept:[3,17,20,23,32],kerb_ap_options_cbt:916,kerber:[14,33,34,944],kerbero:[2,3,4,5,6,7,8,9,10,11,12,14,18,19,20,21,24,25,26,27,28,30,31,32,33,36,37,38,42,43,45,46,47,48,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,117,118,121,124,125,126,129,130,133,134,135,141,142,145,147,148,149,150,151,152,153,155,156,157,158,159,161,162,163,164,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,235,236,238,248,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,344,345,347,352,354,355,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,895,896,899,900,901,902,904,905,907,908,924,927,930,932,934,935,936,939,940,941,942,943,944,945,946,947,948,949,950],kerberos_db:8,kerboro:18,kern:20,kernel:[895,901,916],key_data:[286,293],key_exp:830,key_stash_fil:[6,20,23,34],keyagr:37,keyblock:[48,70,75,90,101,107,115,117,215,216,224,280,281,331,353,359,393,824,908],keyboard:[4,6,10,23,48],keybyt:112,keydata:6,keyencipher:[21,37],keyexchang:107,keyfil:[6,20,22,23],keyfilenam:21,keyid:37,keyindex:6,keyinfo:[6,26],keylength:112,keylist:[11,15],keyprocarg:315,keyr:[895,904,916,951],keysalt:[2,3,15,23,915],keyspac:14,keytab:[2,3,7,8,11,12,14,17,21,23,26,28,31,41,43,46,48,304,310,311,312,314,317,318,359,363,364,416,895,897,899,900,904,905,908,911,915,916,940,941,943,944,946,951],keytab_fil:[8,940],keytab_nam:941,keytab_out:303,keytabl:848,keytabnam:904,keytyp:10,keyusag:37,keyutil:904,keyword:[21,896],kfw:916,kgetcr:916,kile:683,kill:34,kind:[38,43,105,895,917,920,922,929],kinit:[3,12,15,16,21,22,23,28,29,33,34,35,37,41,46,895,896,916,920,935,938,939,941,944,945,946,947,951],kiprop:[4,8,23],kkdcp:[29,39,916,917],klau:917,kldap:[20,22],klein:917,klist:[14,15,33,895,898,935,938,939,940,944,945,951],klmdb:20,know:[21,33,35,37,899,904,922,937],knowledg:[0,14,17,414,920,929],known:[6,20,23,26,38,43,46,48,152,231,317,647,648,905,916,949],korea:917,kpasswd:[3,4,14,15,20,21,23,29,33,916,935,936,938,951],kpasswd_listen:20,kpasswd_port:20,kpasswd_serv:[21,29,39],kpclientauth:20,kpkdc:21,kprop:[1,4,6,8,15,23,24,34,35,901,915,916,917,951],kprop_path:4,kprop_port:[4,915,951],kpropd:[1,4,7,9,23,34,41,901,915,916],kpropd_rpc:917,kproplog:[1,8,917],kpserverauth:[21,37],krb4:916,krb524:21,krb524_convert_creds_kdc:787,krb524_init_et:787,krb524_krb4_disabl:51,krb5:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,35,36,37,38,39,40,41,42,43,44,45,46,47,49,50,51,52,53,54,55,56,57,58,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,206,207,208,209,210,211,212,213,214,215,216,217,218,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,270,271,272,273,274,275,276,277,278,279,280,281,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,788,789,790,791,792,793,794,795,796,797,798,799,800,801,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,944,945,946,947,948,949,950,951],krb5_425_conv_princip:48,krb5_524_conv_princip:48,krb5_524_convert_cr:[48,788],krb5_address:[52,53,54,64,82,84,172,198,232,233,234,240,332,802,822,823,824,830,831,838,844],krb5_address_compar:48,krb5_address_ord:48,krb5_address_search:48,krb5_addrtyp:[802,803],krb5_allow_weak_crypto:48,krb5_altauth_att_challenge_respons:787,krb5_aname_to_localnam:[48,916,930],krb5_anonymous_princip:48,krb5_anonymous_princstr:[57,787],krb5_anonymous_realm:48,krb5_anonymous_realmstr:[58,787],krb5_ap_rep:[787,802],krb5_ap_rep_enc_part:[48,357,375,802],krb5_ap_req:[787,802],krb5_appdefault_boolean:[48,60],krb5_appdefault_str:[48,59],krb5_as_rep:[787,843],krb5_as_req:[787,844],krb5_auth_con_fre:[48,78],krb5_auth_con_genaddr:[48,82,84],krb5_auth_con_get_checksum_func:48,krb5_auth_con_getaddr:[44,48],krb5_auth_con_getauthent:48,krb5_auth_con_getflag:48,krb5_auth_con_getkei:48,krb5_auth_con_getkey_k:48,krb5_auth_con_getlocalseqnumb:48,krb5_auth_con_getlocalsubkei:48,krb5_auth_con_getrcach:48,krb5_auth_con_getrecvsubkei:[48,75],krb5_auth_con_getrecvsubkey_k:48,krb5_auth_con_getremoteseqnumb:48,krb5_auth_con_getremotesubkei:48,krb5_auth_con_getsendsubkei:[48,70],krb5_auth_con_getsendsubkey_k:48,krb5_auth_con_init:[48,61],krb5_auth_con_initivector:48,krb5_auth_con_set_checksum_func:48,krb5_auth_con_set_req_cksumtyp:48,krb5_auth_con_setaddr:[44,48],krb5_auth_con_setflag:[48,78],krb5_auth_con_setport:[44,48],krb5_auth_con_setrcach:48,krb5_auth_con_setrecvsubkei:[44,48],krb5_auth_con_setrecvsubkey_k:48,krb5_auth_con_setsendsubkei:[44,48],krb5_auth_con_setsendsubkey_k:48,krb5_auth_con_setuseruserkei:[48,359],krb5_auth_context:[48,62,63,64,65,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,84,85,86,87,88,89,90,223,323,325,326,327,328,329,330,331,354,356,357,358,359,360,363,364,375,802,854],krb5_auth_context_do_sequ:[66,69,74,83,325,326,327,331,356,360,787],krb5_auth_context_do_tim:[66,78,83,325,326,331,356,360,787],krb5_auth_context_generate_local_addr:[62,787],krb5_auth_context_generate_local_full_addr:[62,787],krb5_auth_context_generate_remote_addr:[62,787],krb5_auth_context_generate_remote_full_addr:[62,787],krb5_auth_context_permit_al:787,krb5_auth_context_ret_sequ:[66,83,325,326,327,331,354,356,360,787],krb5_auth_context_ret_tim:[66,83,325,326,331,354,356,360,787],krb5_auth_context_use_subkei:787,krb5_authdata:[173,184,189,195,200,320,322,412,802,811,824,831,844],krb5_authdata_and_or:787,krb5_authdata_ap_opt:787,krb5_authdata_auth_ind:787,krb5_authdata_cammac:787,krb5_authdata_etype_negoti:787,krb5_authdata_fx_armor:787,krb5_authdata_if_relev:787,krb5_authdata_initial_verified_ca:787,krb5_authdata_kdc_issu:787,krb5_authdata_mandatory_for_kdc:787,krb5_authdata_osf_dc:787,krb5_authdata_sesam:787,krb5_authdata_signticket:787,krb5_authdata_win2k_pac:787,krb5_authdatatyp:[184,189,195,802,809],krb5_authent:[48,65,802,884],krb5_bad_enctyp:[116,286],krb5_boolean:[52,54,55,105,109,110,127,128,129,130,160,192,253,283,284,285,298,299,300,319,341,343,348,349,350,362,388,802,824,836,858],krb5_build_princip:[46,47,48,92],krb5_build_principal_alloc_va:[47,48,91,94],krb5_build_principal_ext:[47,48],krb5_build_principal_va:48,krb5_c_:[186,188,190,191,196,197,281,351,353,411],krb5_c_block_siz:48,krb5_c_checksum_length:[48,168],krb5_c_crypto_length:48,krb5_c_crypto_length_iov:48,krb5_c_decrypt:[48,287],krb5_c_decrypt_iov:[48,103,288],krb5_c_derive_prfplu:[48,916],krb5_c_encrypt:48,krb5_c_encrypt_iov:[48,290],krb5_c_encrypt_length:[48,102,289],krb5_c_enctype_compar:48,krb5_c_free_stat:48,krb5_c_fx_cf2_simpl:48,krb5_c_init_st:48,krb5_c_is_coll_proof_cksum:48,krb5_c_is_keyed_cksum:48,krb5_c_keyed_checksum_typ:48,krb5_c_keylength:[48,124],krb5_c_make_checksum:[48,131,294],krb5_c_make_checksum_iov:[48,130,295],krb5_c_make_random_kei:48,krb5_c_padding_length:48,krb5_c_prf:[48,119,296],krb5_c_prf_length:[48,117],krb5_c_prfplu:[48,916],krb5_c_random_add_entropi:48,krb5_c_random_make_octet:48,krb5_c_random_os_entropi:48,krb5_c_random_se:48,krb5_c_random_to_kei:48,krb5_c_string_to_kei:[48,126,393],krb5_c_string_to_key_with_param:48,krb5_c_valid_cksumtyp:48,krb5_c_valid_enctyp:48,krb5_c_verify_checksum:[48,113,294,298,413],krb5_c_verify_checksum_iov:[48,114,299],krb5_calculate_checksum:48,krb5_cc_badnam:223,krb5_cc_cache_match:48,krb5_cc_close:[48,132,154,164],krb5_cc_copy_cr:48,krb5_cc_cursor:[139,150,158,802],krb5_cc_default:48,krb5_cc_default_nam:[48,135,156],krb5_cc_destroi:48,krb5_cc_dup:48,krb5_cc_end_seq_get:[48,158],krb5_cc_gen_new:48,krb5_cc_get_config:48,krb5_cc_get_flag:48,krb5_cc_get_full_nam:48,krb5_cc_get_nam:48,krb5_cc_get_princip:[47,48],krb5_cc_get_typ:48,krb5_cc_initi:[48,145],krb5_cc_move:48,krb5_cc_new_uniqu:48,krb5_cc_next_cr:[48,139,158],krb5_cc_nosupp:151,krb5_cc_notfound:[132,154,165],krb5_cc_remove_cr:[48,916],krb5_cc_resolv:[48,144],krb5_cc_retrieve_cr:[48,151],krb5_cc_select:48,krb5_cc_set_config:[44,48,283],krb5_cc_set_default_nam:[48,136],krb5_cc_set_flag:48,krb5_cc_start_seq_get:[48,139,150],krb5_cc_store_cr:48,krb5_cc_support_switch:48,krb5_cc_switch:48,krb5_ccach:[132,133,134,135,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,157,158,159,161,164,223,224,225,226,232,233,234,246,250,251,264,267,329,375,383,403,414,802],krb5_ccache_conf_data:908,krb5_cccol:918,krb5_cccol_cursor:[162,163,164,802],krb5_cccol_cursor_fre:[48,163,164],krb5_cccol_cursor_new:[48,162,164],krb5_cccol_cursor_next:[48,162,163],krb5_cccol_have_cont:48,krb5_cccol_last_change_tim:44,krb5_ccselect_moddata:918,krb5_ccselect_vt:921,krb5_certauth_hwauth:919,krb5_certauth_hwauth_pass:919,krb5_change_password:[48,169],krb5_check_clockskew:48,krb5_checksum:[48,113,129,131,294,298,413,802,811,859],krb5_checksum_s:48,krb5_chpw_fail:260,krb5_chpw_messag:48,krb5_chpw_pwdnull:260,krb5_cksumtyp:[81,96,109,110,111,113,114,127,130,131,168,170,204,294,295,299,390,413,802,816],krb5_cksumtype_to_str:48,krb5_clear_error_messag:48,krb5_client_ktnam:[15,898,915,951],krb5_clpreauth_moddata:920,krb5_clpreauth_modreq:920,krb5_config:[21,34,915,916,951],krb5_config_cantopen:50,krb5_config_notenufspac:[56,306],krb5_const:787,krb5_const_point:[131,186,190,413,802],krb5_const_princip:[50,56,57,141,155,182,283,300,301,310,320,340,341,342,343,347,348,349,350,359,362,388,406,407,408,409,802],krb5_context:[46,48,49,50,51,52,53,54,55,56,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,171,172,173,174,175,177,178,179,180,181,182,183,184,186,188,189,190,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,245,246,247,248,250,251,252,253,257,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,375,376,377,379,380,381,382,383,384,386,387,388,389,393,396,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,417,418,419,420,802,836,854,863,864,870,875,886,921],krb5_copy_address:48,krb5_copy_authdata:48,krb5_copy_authent:48,krb5_copy_checksum:48,krb5_copy_context:48,krb5_copy_cr:48,krb5_copy_data:[48,863,864],krb5_copy_error_messag:48,krb5_copy_keyblock:48,krb5_copy_keyblock_cont:48,krb5_copy_princip:[47,48],krb5_copy_ticket:48,krb5_cred:[46,48,51,150,151,153,159,166,220,224,225,226,232,233,234,235,260,264,267,272,323,325,330,354,375,382,401,403,414,787,802],krb5_cred_enc_part:[802,821],krb5_cred_info:[802,822],krb5_crypto_iov:[98,100,103,114,130,288,290,295,299,802],krb5_crypto_typ:[97,825],krb5_crypto_type_checksum:[114,130,295,299,787],krb5_crypto_type_data:[114,130,295,299,787],krb5_crypto_type_empti:787,krb5_crypto_type_head:787,krb5_crypto_type_pad:787,krb5_crypto_type_sign_onli:[98,114,130,295,299,787],krb5_crypto_type_stream:787,krb5_crypto_type_trail:787,krb5_cryptotyp:[97,802,825],krb5_cybersafe_secureid:787,krb5_data:[48,58,59,60,99,100,101,102,103,106,108,113,117,119,120,121,123,124,125,126,129,141,155,166,169,185,223,229,230,258,265,279,284,287,288,289,290,294,296,298,321,323,324,325,326,327,328,329,330,331,333,335,340,341,347,354,355,356,357,358,359,360,364,375,382,383,393,404,405,802,819,824,825,829,834,838,854,859,863,864,866,867,868,880,888,893],krb5_db_entri:919,krb5_decode_authdata_contain:[48,189],krb5_decode_ticket:48,krb5_decrypt:48,krb5_deltat:[187,235,256,259,260,275,391,802,838],krb5_deltat_badformat:391,krb5_deltat_to_str:48,krb5_domain_x500_compress:787,krb5_eblock_enctyp:48,krb5_enc_data:[99,102,287,289,802,805,807,821,843,844,881],krb5_enc_kdc_rep_part:[802,843],krb5_enc_tkt_part:[300,301,802,881],krb5_encode_authdata_contain:[48,184],krb5_encpadata_req_enc_pa_rep:787,krb5_encrypt:48,krb5_encrypt_block:[186,188,190,196,197,281,351,353,393,411,802],krb5_encrypt_s:48,krb5_enctyp:[95,97,98,101,104,105,111,112,115,116,118,124,125,126,128,188,191,192,193,211,229,232,233,234,244,261,280,292,310,315,378,392,411,802,829,832,838,844,846],krb5_enctype_to_nam:48,krb5_enctype_to_str:48,krb5_end_seq_get:150,krb5_error:[212,273,324,355,375,787,802],krb5_error_cod:[46,49,50,55,56,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,129,130,131,132,133,134,135,137,138,139,140,141,142,143,145,147,148,149,150,151,152,153,154,155,156,157,158,159,161,162,163,164,165,166,167,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,186,187,189,190,192,193,194,195,196,197,214,217,223,224,225,226,227,228,229,230,231,232,233,234,235,236,238,245,246,247,248,250,251,252,253,257,260,261,262,264,265,266,267,268,269,271,272,273,274,275,276,277,278,279,280,281,282,286,287,288,289,290,293,294,295,296,298,299,300,301,302,303,304,305,306,307,308,309,310,311,313,314,315,316,317,318,320,321,322,323,324,325,326,327,328,329,330,331,332,333,335,336,337,338,339,340,341,342,343,344,345,346,347,351,352,353,354,355,356,357,358,359,360,361,363,364,368,369,371,372,373,374,375,376,377,378,379,382,383,384,385,386,387,389,390,391,392,393,394,395,396,397,398,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,417,418,419,420,802,853,854,863,864,870,875,921],krb5_euid:899,krb5_expand_hostnam:48,krb5_expire_callback_func:[245,802],krb5_fast_requir:[248,787],krb5_fcc_intern:135,krb5_fences_vt:921,krb5_fences_vtable_v2:921,krb5_find_authdata:48,krb5_finish_kei:48,krb5_finish_random_kei:48,krb5_flag:[142,151,153,157,224,225,226,232,233,234,238,248,269,329,330,359,375,403,802,807,823,824,830,831,838,844,877,884,892],krb5_free_address:[48,172,332],krb5_free_ap_rep_enc_part:[48,357,375],krb5_free_authdata:[48,173,195,322],krb5_free_authent:[48,65,174],krb5_free_checksum:[48,175],krb5_free_checksum_cont:[48,113,294],krb5_free_cksumtyp:[48,111],krb5_free_context:[48,136,176,268,282],krb5_free_cr:[48,177,224,375,405],krb5_free_cred_cont:[46,48,150,153,272,401],krb5_free_data:[48,178,321],krb5_free_data_cont:[48,141,229,324,325,326,327,328,329,330,331,335,356,360],krb5_free_default_realm:[48,227],krb5_free_enctyp:[48,261],krb5_free_error:[48,355,375],krb5_free_error_messag:[48,228],krb5_free_host_realm:[48,230,231],krb5_free_keyblock:[48,67,72,76,180,280,315],krb5_free_keyblock_cont:[48,115,125,126,181],krb5_free_keytab_entry_cont:[48,309,310],krb5_free_princip:[46,47,48,49,91,92,93,145,154,182,344,345,389],krb5_free_str:[48,143,169,194],krb5_free_tgt_cr:[48,354],krb5_free_ticket:[48,183,359,363],krb5_free_unparsed_nam:[48,406,408],krb5_fwd_tgt_cred:48,krb5_gc:403,krb5_gc_cach:[224,787],krb5_gc_canonic:787,krb5_gc_constrained_deleg:787,krb5_gc_forward:787,krb5_gc_no_stor:787,krb5_gc_no_transit_check:787,krb5_gc_user_us:[224,787],krb5_generate_seq_numb:327,krb5_get_credenti:[48,375,380,381,403],krb5_get_credentials_renew:48,krb5_get_credentials_valid:48,krb5_get_default_realm:48,krb5_get_error_messag:[48,835],krb5_get_etype_info:[48,916],krb5_get_fallback_host_realm:48,krb5_get_host_realm:[48,389],krb5_get_in_tkt_with_keytab:48,krb5_get_in_tkt_with_password:48,krb5_get_in_tkt_with_skei:48,krb5_get_init_cr:[234,250,251],krb5_get_init_creds_keytab:[48,232],krb5_get_init_creds_opt:[46,229,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,275,802],krb5_get_init_creds_opt_address_list:787,krb5_get_init_creds_opt_alloc:[46,48,237,239],krb5_get_init_creds_opt_anonym:787,krb5_get_init_creds_opt_canonic:787,krb5_get_init_creds_opt_chg_pwd_prmpt:787,krb5_get_init_creds_opt_etype_list:787,krb5_get_init_creds_opt_forward:787,krb5_get_init_creds_opt_fre:[46,48,236],krb5_get_init_creds_opt_get_fast_flag:48,krb5_get_init_creds_opt_init:48,krb5_get_init_creds_opt_preauth_list:787,krb5_get_init_creds_opt_proxi:787,krb5_get_init_creds_opt_renew_lif:787,krb5_get_init_creds_opt_salt:787,krb5_get_init_creds_opt_set_address_list:48,krb5_get_init_creds_opt_set_anonym:[46,48],krb5_get_init_creds_opt_set_canonic:48,krb5_get_init_creds_opt_set_change_password_prompt:48,krb5_get_init_creds_opt_set_etype_list:[48,229],krb5_get_init_creds_opt_set_expire_callback:48,krb5_get_init_creds_opt_set_fast_ccach:48,krb5_get_init_creds_opt_set_fast_ccache_nam:[48,229,246],krb5_get_init_creds_opt_set_fast_flag:[48,247],krb5_get_init_creds_opt_set_forward:48,krb5_get_init_creds_opt_set_in_ccach:48,krb5_get_init_creds_opt_set_out_ccach:48,krb5_get_init_creds_opt_set_pa:[48,254],krb5_get_init_creds_opt_set_pac_request:48,krb5_get_init_creds_opt_set_preauth_list:48,krb5_get_init_creds_opt_set_proxi:48,krb5_get_init_creds_opt_set_renew_lif:48,krb5_get_init_creds_opt_set_respond:[46,48],krb5_get_init_creds_opt_set_salt:[48,254],krb5_get_init_creds_opt_set_tkt_lif:[46,48],krb5_get_init_creds_opt_tkt_lif:787,krb5_get_init_creds_password:[46,48,233,243,245,352,916],krb5_get_permitted_enctyp:48,krb5_get_profil:48,krb5_get_prompt_typ:[46,48],krb5_get_renewed_cr:[48,225],krb5_get_server_rcach:48,krb5_get_time_offset:48,krb5_get_validated_cr:[48,226],krb5_gic_opt_pa_data:802,krb5_init_context:[48,205],krb5_init_context_kdc:[269,787],krb5_init_context_profil:48,krb5_init_context_secur:[269,787],krb5_init_creds_context:[270,271,272,273,274,275,276,277,278,279,802],krb5_init_creds_fre:[48,275],krb5_init_creds_get:[48,272,274,275],krb5_init_creds_get_cr:[48,271],krb5_init_creds_get_error:48,krb5_init_creds_get_tim:48,krb5_init_creds_init:[48,270,271,279,352],krb5_init_creds_set_keytab:48,krb5_init_creds_set_password:48,krb5_init_creds_set_servic:48,krb5_init_creds_step:[48,272,274,275,916],krb5_init_creds_step_flag_continu:[279,787],krb5_init_keyblock:48,krb5_init_random_kei:48,krb5_init_secure_context:[48,205,268,916],krb5_int16:802,krb5_int16_max:[567,787],krb5_int16_min:787,krb5_int32:[66,69,74,83,266,363,364,374,385,389,394,410,802,804,806,810,811,817,819,822,826,828,830,833,834,835,837,844,849,852,865,866,867,869,873,877,879,880,883,889],krb5_int32_max:[569,787],krb5_int32_min:787,krb5_invalid_princip:50,krb5_is_config_princip:[47,48],krb5_is_referral_realm:48,krb5_is_thread_saf:48,krb5_k:845,krb5_k_create_kei:48,krb5_k_decrypt:48,krb5_k_decrypt_iov:[48,290],krb5_k_encrypt:48,krb5_k_encrypt_iov:[48,288],krb5_k_free_kei:[48,68,73,77,286],krb5_k_key_enctyp:48,krb5_k_key_keyblock:48,krb5_k_make_checksum:[48,113],krb5_k_make_checksum_iov:[48,114,299],krb5_k_prf:48,krb5_k_reference_kei:48,krb5_k_verify_checksum:[48,129],krb5_k_verify_checksum_iov:[48,130,295],krb5_kdc_profil:[10,20,34,915,916,951],krb5_kdc_rep:[232,233,234,802],krb5_kdc_req:802,krb5_kdc_sign_ticket:[48,340,341],krb5_kdc_unreach:260,krb5_kdc_verify_ticket:48,krb5_kdcpolicy_moddata:928,krb5_kdcpreauth_moddata:929,krb5_kdcpreauth_modreq:929,krb5_kdcrep_modifi:267,krb5_kdcrep_skew:267,krb5_kei:[48,68,73,77,87,89,287,288,289,290,291,294,295,296,297,298,299,802],krb5_key_st:845,krb5_keyblock:[48,67,70,72,75,76,86,88,90,99,100,101,102,103,106,107,108,113,114,115,117,119,124,125,126,129,130,180,181,234,281,286,293,300,301,315,320,340,341,342,343,351,353,393,412,802,806,811,823,824,830,831,832,848],krb5_keytab:[232,235,276,302,303,304,305,307,308,310,311,312,313,314,316,317,318,359,363,364,376,414,802],krb5_keytab_entri:[217,302,309,310,314,316,802],krb5_keytab_entry_st:848,krb5_keyusag:[99,100,102,103,108,113,114,129,130,287,288,289,290,294,295,298,299,802],krb5_keyusage_ad_it:787,krb5_keyusage_ad_kdcissued_cksum:787,krb5_keyusage_ad_mt:787,krb5_keyusage_ad_signedpath:787,krb5_keyusage_ap_rep_encpart:787,krb5_keyusage_ap_req_auth:787,krb5_keyusage_ap_req_auth_cksum:787,krb5_keyusage_app_data_cksum:787,krb5_keyusage_app_data_encrypt:787,krb5_keyusage_as_rep_encpart:787,krb5_keyusage_as_req:787,krb5_keyusage_as_req_pa_enc_t:787,krb5_keyusage_cammac:787,krb5_keyusage_enc_challenge_cli:787,krb5_keyusage_enc_challenge_kdc:787,krb5_keyusage_fast_enc:787,krb5_keyusage_fast_finish:787,krb5_keyusage_fast_rep:787,krb5_keyusage_fast_req_chksum:787,krb5_keyusage_gss_tok_m:787,krb5_keyusage_gss_tok_wrap_integ:787,krb5_keyusage_gss_tok_wrap_priv:787,krb5_keyusage_iakerb_finish:787,krb5_keyusage_kdc_rep_ticket:787,krb5_keyusage_krb_cred_encpart:787,krb5_keyusage_krb_error_cksum:787,krb5_keyusage_krb_priv_encpart:787,krb5_keyusage_krb_safe_cksum:787,krb5_keyusage_pa_as_fresh:787,krb5_keyusage_pa_fx_cooki:787,krb5_keyusage_pa_otp_request:787,krb5_keyusage_pa_pkinit_kx:787,krb5_keyusage_pa_s4u_x509_user_repli:[606,787],krb5_keyusage_pa_s4u_x509_user_request:[605,787],krb5_keyusage_pa_sam_challenge_cksum:787,krb5_keyusage_pa_sam_challenge_trackid:[603,787],krb5_keyusage_pa_sam_respons:[602,787],krb5_keyusage_spak:787,krb5_keyusage_tgs_rep_encpart_sesskei:787,krb5_keyusage_tgs_rep_encpart_subkei:787,krb5_keyusage_tgs_req_ad_sesskei:787,krb5_keyusage_tgs_req_ad_subkei:787,krb5_keyusage_tgs_req_auth:787,krb5_keyusage_tgs_req_auth_cksum:787,krb5_kpasswd_accessdeni:787,krb5_kpasswd_autherror:[166,787],krb5_kpasswd_bad_vers:787,krb5_kpasswd_harderror:[166,787],krb5_kpasswd_initial_flag_need:787,krb5_kpasswd_malform:[166,787],krb5_kpasswd_softerror:[166,787],krb5_kpasswd_success:[166,382,787],krb5_kt_add_entri:48,krb5_kt_client_default:48,krb5_kt_close:[48,317],krb5_kt_cursor:[308,314,318,802],krb5_kt_default:48,krb5_kt_default_nam:48,krb5_kt_dup:48,krb5_kt_end:314,krb5_kt_end_seq_get:[48,318],krb5_kt_free_entri:[48,314],krb5_kt_get_entri:48,krb5_kt_get_nam:48,krb5_kt_get_typ:48,krb5_kt_have_cont:48,krb5_kt_name_toolong:311,krb5_kt_next_entri:48,krb5_kt_notfound:313,krb5_kt_nowrit:[302,316],krb5_kt_read_service_kei:48,krb5_kt_remove_entri:48,krb5_kt_resolv:48,krb5_kt_start_seq_get:[48,308],krb5_ktname:[43,898,915,951],krb5_kuserok:[47,48,916,930],krb5_kvno:[310,315,802,829,848],krb5_last_req_entri:[802,830],krb5_libos_badpwdmatch:[260,361],krb5_libos_pwdintr:260,krb5_lname_no_tran:930,krb5_lname_notran:56,krb5_lrq_all_acct_exptim:787,krb5_lrq_all_last_initi:787,krb5_lrq_all_last_renew:787,krb5_lrq_all_last_req:787,krb5_lrq_all_last_tgt:787,krb5_lrq_all_last_tgt_issu:787,krb5_lrq_all_pw_exptim:787,krb5_lrq_none:787,krb5_lrq_one_acct_exptim:787,krb5_lrq_one_last_initi:787,krb5_lrq_one_last_renew:787,krb5_lrq_one_last_req:787,krb5_lrq_one_last_tgt:787,krb5_lrq_one_last_tgt_issu:787,krb5_lrq_one_pw_exptim:787,krb5_magic:[802,803,805,806,807,809,811,816,819,821,822,823,824,827,829,830,831,832,834,843,844,846,848,852,857,866,867,871,880,881,884,888,889,893],krb5_make_authdata_kdc_issu:48,krb5_marshal_credenti:48,krb5_merge_authdata:48,krb5_mk_1cred:48,krb5_mk_error:48,krb5_mk_ncred:[48,323],krb5_mk_priv:[48,79],krb5_mk_rep:48,krb5_mk_rep_dc:48,krb5_mk_req:[48,80,81,330],krb5_mk_req_checksum_func:[63,80,802],krb5_mk_req_extend:[48,329],krb5_mk_safe:[48,326],krb5_msgtype:[503,504,505,506,531,543,716,739,757,758,802,830,843,844],krb5_no_2nd_tkt:267,krb5_no_tkt_suppli:[223,267],krb5_nt_ent_principal_and_id:787,krb5_nt_enterprise_princip:787,krb5_nt_ms_princip:787,krb5_nt_ms_principal_and_id:787,krb5_nt_princip:[91,93,344,787],krb5_nt_smtp_name:787,krb5_nt_srv_hst:[223,389,787],krb5_nt_srv_inst:[91,93,344,787],krb5_nt_srv_xhst:787,krb5_nt_uid:787,krb5_nt_unknown:[389,787],krb5_nt_wellknown:[91,93,344,787],krb5_nt_x500_princip:787,krb5_octet:[802,803,809,816,846,857,880,888,889],krb5_os_localaddr:48,krb5_pa_data:[802,830,843,844],krb5_pa_pac_req:802,krb5_pa_server_referral_data:802,krb5_pa_svr_referral_data:802,krb5_pac:[300,301,333,334,335,336,337,338,339,340,341,342,343,802],krb5_pac_add_buff:48,krb5_pac_attributes_info:787,krb5_pac_client_claim:787,krb5_pac_client_info:[333,787],krb5_pac_credentials_info:[333,787],krb5_pac_data:861,krb5_pac_delegation_info:[333,787],krb5_pac_device_claim:787,krb5_pac_device_info:787,krb5_pac_fre:[48,338,339],krb5_pac_get_buff:48,krb5_pac_get_client_info:[48,916],krb5_pac_get_typ:48,krb5_pac_init:48,krb5_pac_logon_info:[333,787],krb5_pac_pars:48,krb5_pac_privsvr_checksum:[333,787],krb5_pac_requestor:787,krb5_pac_server_checksum:[333,787],krb5_pac_sign:48,krb5_pac_sign_ext:48,krb5_pac_ticket_checksum:787,krb5_pac_upn_dns_info:[333,787],krb5_pac_verifi:[48,343],krb5_pac_verify_ext:[48,301],krb5_padata_afs3_salt:787,krb5_padata_ap_req:[702,787],krb5_padata_as_checksum:787,krb5_padata_as_fresh:787,krb5_padata_enc_sandia_securid:787,krb5_padata_enc_timestamp:787,krb5_padata_enc_unix_tim:787,krb5_padata_encrypted_challeng:787,krb5_padata_etype_info2:787,krb5_padata_etype_info:787,krb5_padata_for_us:787,krb5_padata_fx_cooki:787,krb5_padata_fx_error:787,krb5_padata_fx_fast:787,krb5_padata_get_from_typed_data:787,krb5_padata_non:787,krb5_padata_osf_dc:787,krb5_padata_otp_challeng:787,krb5_padata_otp_pin_chang:787,krb5_padata_otp_request:787,krb5_padata_pac_opt:787,krb5_padata_pac_request:787,krb5_padata_pk_as_rep:787,krb5_padata_pk_as_rep_old:787,krb5_padata_pk_as_req:787,krb5_padata_pk_as_req_old:787,krb5_padata_pkinit_kx:787,krb5_padata_pw_salt:787,krb5_padata_redhat_idp_oauth2:787,krb5_padata_referr:787,krb5_padata_s4u_x509_us:787,krb5_padata_sam_challeng:787,krb5_padata_sam_challenge_2:787,krb5_padata_sam_redirect:787,krb5_padata_sam_respons:787,krb5_padata_sam_response_2:787,krb5_padata_sesam:787,krb5_padata_spak:787,krb5_padata_svr_referral_info:787,krb5_padata_tgs_req:787,krb5_padata_use_specified_kvno:787,krb5_parse_nam:[46,47,48,345,406],krb5_parse_name_flag:[47,48],krb5_plugin_no_handl:[923,926,930,931],krb5_plugin_ver_notsupp:921,krb5_plugin_vt:921,krb5_pointer:[186,190,197,281,315,353,363,364,375,802,813,850],krb5_post_recv_fn:[380,802],krb5_pre_send_fn:[381,802],krb5_preauth_fail:260,krb5_preauthtyp:[232,233,234,254,802,838,857],krb5_prepend_error_messag:[48,417,916],krb5_princ_compon:787,krb5_princ_nam:787,krb5_princ_nomatch:[223,267],krb5_princ_realm:787,krb5_princ_set_realm:787,krb5_princ_set_realm_data:787,krb5_princ_set_realm_length:787,krb5_princ_siz:[787,791],krb5_princ_typ:787,krb5_princip:[46,47,48,49,91,92,93,94,132,145,147,154,182,218,223,229,235,260,264,267,275,315,319,363,364,375,382,383,384,389,412,414,802,811,823,824,830,831,834,843,844,848,859,860,881],krb5_principal2salt:48,krb5_principal_compar:[47,48,349,350,388],krb5_principal_compare_any_realm:[47,48],krb5_principal_compare_casefold:[350,787],krb5_principal_compare_enterpris:[350,787],krb5_principal_compare_flag:[47,48],krb5_principal_compare_ignore_realm:[350,787],krb5_principal_compare_utf8:[350,787],krb5_principal_data:[47,802,819,866],krb5_principal_parse_enterpris:[345,787],krb5_principal_parse_ignore_realm:[345,787],krb5_principal_parse_no_def_realm:787,krb5_principal_parse_no_realm:[345,787],krb5_principal_parse_require_realm:[345,787],krb5_principal_unparse_displai:[408,787],krb5_principal_unparse_no_realm:[408,787],krb5_principal_unparse_short:[408,787],krb5_priv:787,krb5_process_kei:48,krb5_prog_etype_nosupp:378,krb5_prompt:[352,802,870],krb5_prompt_typ:[263,802],krb5_prompt_type_new_password:[263,787],krb5_prompt_type_new_password_again:[263,787],krb5_prompt_type_password:[263,787],krb5_prompt_type_preauth:[263,787],krb5_prompter_fct:[260,275,802],krb5_prompter_posix:[46,48],krb5_prop:[15,34,41],krb5_pvno:787,krb5_pwd_data:802,krb5_pwqual_moddata:933,krb5_random_kei:48,krb5_rc_close:265,krb5_rc_requir:[323,325],krb5_rc_st:872,krb5_rcach:[71,85,265,802],krb5_rd_cred:[48,325],krb5_rd_error:48,krb5_rd_priv:[48,79,873],krb5_rd_rep:48,krb5_rd_rep_dc:48,krb5_rd_req:48,krb5_rd_safe:[48,873],krb5_read_error:48,krb5_read_password:48,krb5_realm_branch_char:787,krb5_realm_cant_resolv:260,krb5_realm_compar:[47,48],krb5_recvauth:[48,364,375],krb5_recvauth_badauthv:787,krb5_recvauth_skip_vers:787,krb5_recvauth_vers:48,krb5_referral_realm:[48,787],krb5_replay_data:[323,325,326,331,354,356,360,802],krb5_responder_context:[46,365,366,367,368,369,370,371,372,373,802,875],krb5_responder_context_st:874,krb5_responder_fn:[257,802,874],krb5_responder_get_challeng:[46,48,366,874],krb5_responder_list_quest:[46,48,874],krb5_responder_otp_challeng:[46,367,368,802],krb5_responder_otp_challenge_fre:[46,48,368],krb5_responder_otp_flags_collect_pin:[729,787],krb5_responder_otp_flags_collect_token:787,krb5_responder_otp_flags_nextotp:787,krb5_responder_otp_flags_separate_pin:787,krb5_responder_otp_format_alphanumer:787,krb5_responder_otp_format_decim:787,krb5_responder_otp_format_hexadecim:787,krb5_responder_otp_get_challeng:[46,48],krb5_responder_otp_set_answ:[46,48],krb5_responder_otp_tokeninfo:[802,876],krb5_responder_pkinit_challeng:[46,370,371,802],krb5_responder_pkinit_challenge_fre:[48,371],krb5_responder_pkinit_flags_token_:738,krb5_responder_pkinit_flags_token_user_pin_count_low:787,krb5_responder_pkinit_flags_token_user_pin_final_tri:787,krb5_responder_pkinit_flags_token_user_pin_lock:787,krb5_responder_pkinit_get_challeng:[46,48],krb5_responder_pkinit_ident:[802,878],krb5_responder_pkinit_set_answ:[46,48],krb5_responder_question_otp:[46,48,787],krb5_responder_question_password:[46,787],krb5_responder_question_pkinit:[46,48,787],krb5_responder_set_answ:[46,48,366,874],krb5_respons:802,krb5_roundup:787,krb5_safe:787,krb5_salttype_to_str:48,krb5_sam_must_pk_encrypt_sad:787,krb5_sam_send_encrypted_sad:787,krb5_sam_use_sad_as_kei:787,krb5_sendauth:[48,363],krb5_server_decrypt_ticket_keytab:48,krb5_set_default_realm:[44,48],krb5_set_default_tgs_enctyp:[48,261],krb5_set_error_messag:48,krb5_set_kdc_recv_hook:48,krb5_set_kdc_send_hook:48,krb5_set_password:[47,48,169],krb5_set_password_using_ccach:[47,48],krb5_set_principal_realm:[47,48],krb5_set_real_tim:48,krb5_set_trace_callback:48,krb5_set_trace_filenam:48,krb5_sname_match:[47,48,359],krb5_sname_to_princip:[47,48],krb5_string_to_cksumtyp:48,krb5_string_to_deltat:48,krb5_string_to_enctyp:48,krb5_string_to_kei:48,krb5_string_to_salttyp:48,krb5_string_to_timestamp:48,krb5_tc_match_2nd_tkt:[153,787],krb5_tc_match_authdata:[153,787],krb5_tc_match_flag:[153,787],krb5_tc_match_flags_exact:[153,787],krb5_tc_match_is_skei:[153,787],krb5_tc_match_ktyp:[153,787],krb5_tc_match_srv_nameonli:[153,787],krb5_tc_match_tim:[153,787],krb5_tc_match_times_exact:[153,787],krb5_tc_noticket:787,krb5_tc_openclos:787,krb5_tc_supported_ktyp:[153,787],krb5_tgs_name:787,krb5_tgs_name_s:787,krb5_tgs_rep:787,krb5_tgs_req:[787,844],krb5_ticket:[48,185,221,359,363,364,376,802,807,821,843,844,884],krb5_ticket_tim:[274,402,802,823,824,830,831],krb5_timeofdai:48,krb5_timestamp:[45,167,266,336,340,341,342,343,385,395,396,397,398,410,802,806,811,822,830,834,836,844,848,852,859,873,880,882],krb5_timestamp_to_sfstr:48,krb5_timestamp_to_str:48,krb5_tkt_authent:802,krb5_tkt_creds_context:[399,400,401,402,403,404,802],krb5_tkt_creds_fre:[48,403],krb5_tkt_creds_get:[48,401,402,403],krb5_tkt_creds_get_cr:[48,400],krb5_tkt_creds_get_tim:48,krb5_tkt_creds_init:[48,400],krb5_tkt_creds_step:[48,401,402,403],krb5_tkt_creds_step_flag_continu:[404,787],krb5_trace:[41,386,387,951],krb5_trace_callback:[386,802,887],krb5_trace_info:[386,802,886],krb5_trace_nosupp:[386,387],krb5_transit:[802,831],krb5_typed_data:802,krb5_ui_2:802,krb5_ui_4:[333,335,337,358,802,806,811,834,873],krb5_unmarshal_credenti:48,krb5_unparse_nam:[47,48,407,408],krb5_unparse_name_ext:48,krb5_unparse_name_flag:[47,48],krb5_unparse_name_flags_ext:48,krb5_us_timeofdai:48,krb5_use_enctyp:48,krb5_verify_authdata_kdc_issu:48,krb5_verify_checksum:48,krb5_verify_init_cr:[46,48,416],krb5_verify_init_creds_opt:[46,414,415,416,802],krb5_verify_init_creds_opt_ap_req_nofail:787,krb5_verify_init_creds_opt_init:[46,48,414],krb5_verify_init_creds_opt_set_ap_req_nofail:[46,48,414],krb5_vprepend_error_messag:48,krb5_vset_error_messag:48,krb5_vwrap_error_messag:48,krb5_wellknown_namestr:787,krb5_wrap_error_messag:[48,419,916],krb5_x:787,krb5_xc:787,krb5cc_1984:944,krb5cc_320:937,krb5cc_:[915,944,951],krb5cc_p11795:937,krb5cc_ttypa:937,krb5ccname:[15,136,895,939,940,941,944,951],krb5kdc:[0,1,2,3,4,5,6,7,8,9,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],krb5kdc_err_key_exp:260,krb5kdc_err_more_preauth_data_requir:929,krb5krb_ap_err_skew:167,krb5krb_err_response_too_big:[279,404],krb5lib:34,krb5plugin_service_locate_ft:931,krb5rcachedir:[899,915,951],krb5rcachenam:[899,951],krb5rcachetyp:[899,951],krb5srv:39,krb:[48,916,917],krb_ap_rep:48,krb_ap_req:48,krb_error:[48,375],krbadmin:[20,22],krbcanonicalnam:22,krbcontain:[20,22],krbcore:934,krbdev:934,krbprincipalnam:22,krbtest:[16,23,35,41,909,910,949],krbtgt:[3,19,26,37,41,43,278,301,644,755,908,909,910,916,937,946],ksu:[917,935,938,951],ksu_opt:944,kswitch:[895,935,938,951],ktadd:[14,32,34,898],kth:917,ktid:317,ktrem:[3,15],ktutil:[1,2,898,901,916],ktype:[128,232,233,234,261,844],kungliga:917,kv5m_context:[135,156],kvno:[3,6,11,14,15,16,23,26,29,32,34,41,310,414,829,881,909,916,935,938],lab:[5,23,917],label:[21,917],laboratori:917,lack:[37,378,916],lag:944,larg:[20,23,24,34,36,39,46,100,103,119,288,290,902,916],larger:[24,32,37,894,912,916],largest:35,last:[3,6,9,20,23,24,35,44,48,173,198,200,220,245,314,322,386,733,852,895,896,919,928],last_fail:6,last_req:830,last_success:6,lastpwd:6,latenc:24,later:[3,19,20,21,23,26,33,37,38,39,41,43,136,247,738,894,909,912,916,917,923,930],latest:[34,224,882,902,916,937],latter:[388,895],launchpad:42,law:917,lawsuit:917,lawyer:917,layer:[916,922,925],layout:[43,915],lcom_err:943,lcurs:904,ldap:[3,4,5,6,10,20,22,35,38,904,916,917],ldap_conns_per_serv:20,ldap_kadmind_dn:[5,20,22,23],ldap_kadmind_sasl_authcid:[5,20,23],ldap_kadmind_sasl_authzid:20,ldap_kadmind_sasl_mech:20,ldap_kadmind_sasl_realm:20,ldap_kdc_dn:[5,20,22,23],ldap_kdc_sasl_authcid:[5,20,23],ldap_kdc_sasl_authzid:20,ldap_kdc_sasl_mech:[20,22],ldap_kdc_sasl_realm:20,ldap_kerberos_container_dn:[20,22],ldap_serv:[20,22],ldap_service_password_fil:[20,22],ldapadd:22,ldapi:[20,22,24],ldapsasl_nocanon:38,ldapuri:[3,5,23],ldb:904,ldflag:904,ldif:22,ldname:904,ldopt:904,lead:[20,944],learn:15,least:[15,23,32,34,39,99,102,153,165,287,289,407,733,750,912,926,930],leav:[3,14,23,24,28,32,33],left:[20,21,280,910,921],leg:916,legaci:[26,46,883],legal:[280,944],legitim:[25,46,899,944],lehman:917,lehmann:917,len:[12,118,337,339],length:[3,20,23,33,43,46,48,91,92,99,100,102,103,116,117,119,124,191,203,209,244,254,260,280,284,287,288,289,290,311,336,339,361,397,736,796,797,803,809,816,819,827,846,857,866,867,877,889,908,909,912,913,922,942],lengthi:916,less:[3,15,20,25,53,895,902,912,913,916],let:[99,287,931,950],letter:[34,39,937],level:[3,5,10,23,25,37,39,43,902,906,932],liabil:917,liabl:917,lib:[37,902,904,915,917,943],libdefault:[15,20,26,28,33,34,38,39,40,41,43,44,895,898,899,932],libdir:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],libedit:904,libera:934,libev:917,libk5crypto:916,libkdb5:919,libkdb_ldap:22,libkeyutil:904,libkrb5:[21,28,43,894,916],libpam:42,librari:[3,18,20,21,24,26,29,38,41,43,46,48,49,50,52,53,54,55,56,59,60,61,62,63,64,65,66,67,68,69,71,72,73,74,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,121,124,125,126,129,130,132,133,134,135,136,137,138,139,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,169,171,172,173,174,175,176,177,178,179,180,181,182,183,184,189,194,195,198,199,200,201,202,203,204,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,227,228,229,230,231,235,236,237,238,245,246,247,248,250,251,252,253,257,260,261,262,263,264,265,266,267,270,271,272,273,274,275,276,277,278,279,280,283,286,287,288,289,290,294,295,296,298,299,300,301,302,303,304,305,306,307,308,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,342,343,344,345,346,347,348,349,350,352,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,396,399,400,401,402,403,404,405,406,407,408,409,410,412,414,417,418,419,420,863,864,894,895,901,902,904,915,916,917,918,919,920,922,923,924,930,931,932,943,951],libtool:921,libverto:[904,929],licens:[903,904,907,916],life:[3,5,19,23,940],lifetim:[3,6,14,21,23,48,153,365,366,750,824,830,895,916,919,928,937,940,944,951],lightn:916,lightweight:901,like:[3,6,8,12,14,15,19,21,23,32,33,34,37,38,39,41,43,192,895,899,900,902,904,906,921,925,937],likewis:944,limit:[20,23,24,25,34,39,917,944,951],line:[0,3,8,10,12,15,19,20,21,23,28,34,35,37,352,903,904,916,917,936,944,946,949,950,951],link:[0,23,30,34,899,902,903,904,906,919,922,943],linkdn:[3,23],linker:904,linux:[895,904,916],list:[0,2,3,4,6,10,14,15,19,21,26,28,32,34,36,39,40,43,46,48,93,153,164,184,189,195,214,230,231,320,378,412,417,418,419,831,874,895,904,905,915,917,919,920,923,929,932,936,937,941,944,949,950],list_mkei:23,list_princip:15,listen:[4,8,10,20,34,39,916],listinfo:934,listpol:[3,23],listprinc:[3,23],liter:921,littl:922,live:[6,15,921],lk5crypto:943,lkrb5:943,lmdb:[20,24,904,916],lname:[56,944],lndir:[901,903],lnsize_in:56,lnsl:904,load:[8,14,17,20,23,24,34,38,40,904,922,932],load_dump:[6,23],loadabl:[20,21,922],loader:904,local0:20,local7:20,local:[3,5,8,12,14,15,20,21,22,23,28,32,34,36,39,43,46,48,62,64,80,230,231,325,326,327,329,331,344,356,359,360,389,398,408,523,524,715,896,899,900,901,904,906,908,909,910,915,916,923,924,936,937,940,941,943,944,946,951],local_addr:[44,64,82],local_appdata:21,local_port:84,local_realm:944,localauth:[916,924],localauth_plugin:930,localedir:904,localfr:28,localhost:15,localhostnam:43,localstatedir:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],locat:[4,7,8,10,15,19,20,21,22,24,25,29,34,39,41,43,48,895,899,904,905,913,915,916,917,924,932,937,939,940,941,943,944,945,946,951],locate_plugin:931,lock:[6,20,23,24,34,35,734,735,913,916,937],lockdown_kei:[3,19,23,916],lockit:3,lockout:[3,20,23,24,25,30],lockout_polici:35,lockoutdur:[3,23,35],lockouttim:[3,23],log:[8,9,23,24,26,28,33,34,37,39,46,48,735,895,916,924,936,937,939,944,950,951],log_:20,log_daemon:20,logic:[39,916],login:[20,21,33,38,41,46,937,944,951],logon:[20,333,657,916],logout:[937,939],longer:[11,19,23,25,33,39,43,49,65,67,68,72,73,76,77,78,91,92,93,111,113,115,120,122,123,125,126,132,141,143,145,150,153,154,163,164,169,172,173,174,175,176,177,178,180,181,182,183,194,195,224,227,229,230,231,236,261,265,268,272,275,280,282,286,294,310,315,317,318,321,322,324,325,326,327,328,329,330,331,332,335,338,339,344,345,354,355,356,357,359,360,363,375,389,401,403,405,406,408,904,916,937,940],look:[0,8,12,15,20,21,23,28,37,38,39,43,389,902,904,921,937,940,944],lookasid:904,lookup:[21,22,33,38,39,194,813,904,916,931],lose:[6,23],loss:[23,917],lost:[17,902,917],lot:39,lower:[3,19,21,23,43,230,932,942,949],lowercas:[23,38,899],lowest:21,lpr:20,lr_type:852,lr_type_interpretation_mask:787,lr_type_this_server_onli:787,lrealm:[210,227,377],lsocket:904,lss:904,ltd:917,luke:39,luser:319,lxml:906,mac:901,mach:[21,917],machin:[4,8,12,14,15,17,18,21,31,32,34,37,38,39,895,900,904,936,937,950,951],maco:[21,342,895,901,916,917],macro:[421,887,944],made:[8,21,23,34,41,136,253,269,378,895,916,917,925,927,945,951],magic:[135,156,803,805,806,807,809,811,816,819,821,822,823,824,827,829,830,831,832,834,843,844,846,848,852,857,866,867,871,880,881,884,888,889,893],mai:[3,6,8,10,11,14,15,19,20,21,22,23,24,25,26,28,33,34,35,36,37,38,39,40,41,43,46,99,107,126,158,195,224,228,229,241,245,258,262,287,330,359,375,380,381,388,389,414,729,845,863,875,887,896,899,902,904,905,908,909,912,913,916,917,920,922,923,925,926,927,928,929,932,934,936,937,939,940,944,949,951],mail:[20,895,937,944,949],mailbox:899,mailman:934,main:[368,371,934],maintain:[0,9,15,20,23,902,904,951],mainten:[3,6,23],maj_ver:921,major:[43,903,921],make:[0,3,6,12,14,15,17,20,21,22,23,25,26,28,32,33,34,35,37,39,41,43,48,112,236,241,250,301,368,371,403,894,902,903,904,906,908,916,917,922,936,940,945],makedepend:901,makefil:[902,904,906],malform:[166,223,619,908],malici:[3,23,46],malloc:932,man:[0,3,21,899,904,916],manag:[5,19,23,33,916,932,935,951],mandatori:[113,114,129,130,294,295,298,299,910],mandir:904,mani:[3,17,21,23,28,35,39,41,925,937,951],manipul:[22,23,45,825,898],manner:[5,23,917],manual:[0,6,10,15,23,33,34,902,904,916],manual_test:902,map:[21,28,33,34,43,904,916,922,923,930,944,949],mapsiz:[20,24],marc:917,mark:[3,6,20,21,23,34,342,917],marker:[908,916],markup:[0,906],marshal:[908,909,916],masachusett:951,mask:[66,83,142,153,157],masquerad:[17,936,937],massachusett:[907,917],master:[3,4,5,6,10,20,26,34,35,39,41,900,905,915,916],master_kdc:[21,39],master_key_nam:[5,6,20,23],master_key_typ:[5,6,14,20,23,34],match:[0,2,3,6,15,19,20,21,23,28,29,33,37,38,43,48,59,60,119,151,153,195,223,224,267,301,310,359,363,375,403,743,744,745,746,747,748,749,751,754,844,895,899,913,915,916,932,946,949,951],materi:[14,46,916,917,921],matt:917,matter:[17,21],max_keytab_name_len:787,max_lif:[6,20,34],max_read:[20,24],max_renew_lif:6,max_renewable_lif:[20,34],max_renewable_ticket_lif:[5,23],max_ticket_lif:[5,23],maxfailur:[3,23,35],maximum:[3,5,6,10,14,15,20,21,23,24,33,39,46,311,361,894,929,937,940],maxlif:[3,19,23],maxnumb:[3,23],maxpathlen:764,maxrenewlif:[3,5,19,23],maxtktlif:[5,23],mcred:153,md4:[26,917],md5:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],mdb:24,mean:[3,12,14,20,21,23,33,34,37,46,900,905,917,937,944,951],meaning:[3,23],meant:937,measur:[25,894],mech:[28,915,916,951],mech_typ:922,mechan:[3,16,20,21,22,23,36,37,39,40,43,46,154,250,691,899,908,909,915,916,920,921,924,929,931,940,951],mechglu:[917,922],media:[5,21,23],medvinski:944,meet:949,megabyt:[20,24,903],mellon:917,member:20,membership:46,memori:[15,41,43,48,93,142,223,231,302,323,325,326,331,356,357,360,414,825,895,898,904,916,921,923,930],memset:46,mention:[20,22,917],merchant:917,merg:[18,20,48,917],messag:[3,8,20,21,24,34,41,48,78,363,375,381,531,538,716,739,805,830,834,843,844,863,864,881,887,899,901,909,916,917,921,936,937,943,944,946,951],message_out:169,message_typ:880,met:[917,944],metadata:6,method:[21,25,39,230,908,916,918,919,920,921,923,926,927,928,929,930,931,932,933,940],mexico:917,mgluep:917,mic:[532,916],mic_token:43,michigan:917,microsecond:[266,385,410,806,822,873,908],microsoft:[20,21,26,29,42,43,382,452,916,922],microsystem:917,middl:899,might:[14,17,23,28,29,34,35,38,39,43,902,904,908,917,921,936,951],migrat:[14,23,41,916],miller:[917,951],min:[3,19,23,896],min_ver:921,minclass:[3,23],minim:[6,14,23,24,916],minimum:[3,20,23,33],minlength:[3,23],minlif:[3,23],minor:[14,43,903,916,921,922,931],minor_statu:[43,922],minu:[20,913],minut:[5,20,21,23,896,899,936,937,951],mismatch:[43,260,342,936],miss:[267,906],mission:944,mistak:936,mistakenli:171,mit1:909,mit:[3,5,12,14,15,17,19,20,21,24,28,30,31,32,34,38,39,41,43,45,46,894,895,901,903,904,906,907,908,909,910,920,922,924,925,929,932,934,936,937,940,951],mitig:[25,46,899,916],mitiys4k5:34,mix:937,mk_cmd:904,mk_req:854,mkdir:902,mkei:[3,6,23],mkey_convert:[6,23],mkey_fil:[6,23],mkeynam:[5,6,10,23],mkeytyp:[5,6,23],mkeyvno:[5,6,23],mkvno:6,modbi:6,mode:[3,6,8,14,20,23,41,467,479,728,904,916,940,944],modern:[14,15,23,38],modestli:40,modif:[6,9,19,21,34,917],modifi:[3,6,9,15,18,19,25,28,32,34,40,43,100,103,114,136,144,146,158,288,290,295,312,365,366,864,904,916,917,927,932,940],modify_princip:26,modnam:[21,28],modpol:[3,23],modprinc:[3,23,35,37,40,926],modtim:6,modul:[3,4,6,20,21,23,35,252,268,904,906,914,916,918,919,920,923,925,926,927,928,929,930,931,932,933,940,951],module_nam:21,modulenam:21,modulepath:21,modulo:913,moira:917,mon:[3,23,35],monitor:25,month:[896,916],more:[6,14,15,19,20,21,22,23,25,29,32,34,35,37,38,39,41,43,46,262,279,344,404,565,736,738,759,887,895,898,899,901,904,905,909,916,923,929,934,936,951],more_preauth_data_requir:920,morn:33,most:[2,6,17,20,21,23,24,25,26,28,33,34,37,39,40,41,43,48,154,895,898,899,901,916,920,921,922,937,939,951],mostli:904,move:[20,27,34,48],msdn:916,msec_dirbit:787,msec_val_mask:787,msg:213,msg_type:[830,843,844],mslsa:895,mssclogin:21,much:[14,25,38,153,936],multi:[35,37,916],multihom:21,multipl:[3,10,14,15,16,20,21,22,23,24,28,34,35,36,37,39,43,46,845,895,899,902,916,921,922,929,940,949,951],multipli:35,multithread:48,muse:917,must:[2,3,7,8,11,14,15,19,20,21,22,23,24,26,28,29,32,33,34,35,36,37,39,43,46,57,58,69,74,78,99,100,102,103,113,117,119,121,125,126,136,146,152,153,158,173,176,195,198,200,220,224,228,241,247,268,270,271,274,275,279,282,287,288,289,290,294,296,312,314,317,322,326,331,345,359,368,371,373,375,402,407,726,727,729,736,738,740,743,744,745,746,747,748,749,750,751,754,825,845,868,895,902,903,904,908,909,910,912,913,916,917,919,921,922,923,926,928,929,930,932,936,937,942,944,946,951],mutabl:845,mutex:845,mutual:[34,330,375,437,503,805,940,944],my_cach:944,my_proxi:21,my_respond:46,mydir:895,mydomain:20,mymodul:28,mypreauth:28,myrealm:46,myremotetokentyp:20,name:[2,3,4,5,6,8,10,12,14,15,16,19,20,21,22,23,24,28,29,30,32,33,34,36,37,40,46,48,49,50,59,60,141,147,153,155,159,214,222,223,227,230,235,246,247,252,260,264,267,278,300,301,310,315,317,319,320,329,333,336,342,343,350,352,359,362,365,377,382,384,406,407,408,409,412,414,501,638,640,641,642,643,647,652,662,738,749,811,831,860,870,874,881,896,898,903,906,908,909,912,915,916,917,918,921,923,930,931,932,933,937,939,940,941,942,943,944,946,951],name_s:306,name_str:37,name_typ:37,namelen:311,nat:[21,23,916],nation:917,nativ:[33,368,371,894,904,908,912,915,916],natur:38,naval:917,ncsa:42,nctx_out:176,ndnhnmn:896,nearli:3,necessari:[3,14,21,22,23,24,33,34,37,39,43,120,122,123,260,343,387,407,920,921,925,936,937],necessarili:14,need:[4,6,12,14,15,19,20,21,23,32,33,34,35,37,38,39,40,41,43,46,49,64,65,67,68,72,73,76,77,78,91,92,93,99,100,102,103,111,113,115,125,126,132,141,143,145,150,153,154,163,164,169,172,173,174,175,176,177,178,180,181,182,183,194,195,224,227,229,230,231,236,258,261,265,268,272,275,279,280,282,286,287,288,289,290,294,310,315,317,318,321,322,323,324,325,326,327,328,329,330,331,332,335,336,338,339,344,345,354,355,356,357,359,360,363,364,375,389,401,403,404,405,406,408,565,737,738,759,895,896,901,902,903,904,906,909,916,922,923,925,930,932,934,936,937,940,943],needchang:[3,5,23],neg:[28,883,912],neglig:917,negoex:[916,924],negoti:[908,916,922],neither:[3,23,325,917,940,941,944],nersc:21,net:[21,42],netbio:54,netbsd:[916,917],netlib:904,netlogon:452,network:[3,15,17,21,23,25,29,32,34,38,39,40,43,46,260,375,523,524,525,526,901,904,936,937,950,951],neuman:951,never:[3,14,15,17,19,20,23,24,35,100,103,228,288,290,913,936,937],new_message_out:864,new_mkey_fil:[6,23],new_princip:3,new_reply_out:[863,864],new_stat:108,newer:[6,14,20,23,904],newest:23,newli:[3,6,23,26,37,107,113,125,126,176,294,329,330,359,363,364,375,895,902,916],newlin:[344,352],newprinc:[3,23],newpw:[166,382,383],next:[3,6,17,23,34,35,48,99,100,102,103,287,288,289,290,728,902,908,909,913,916,920,929,937,944],nfs:38,nii:944,nippon:917,nist:[21,40],nitem:921,nktype:844,nlgilman:12,nls:916,no_auth_data_requir:[3,23],no_host_referr:[20,39],noaddress:21,nofail:46,nofork:4,nokei:[3,23,37],non:[2,3,14,19,21,23,26,33,37,43,44,99,100,102,103,113,129,130,155,224,241,245,250,269,287,288,289,290,294,298,299,300,315,330,342,359,375,382,383,388,863,908,912,916,940,943,944],nonc:[358,822,830,844,916],none:[3,20,21,22,23,26,36,37,57,58,132,273,285,304,369,372,899,909,944,951],nonexist:916,noninfring:917,nonrepudi:37,nonzero:[21,224,946],noout:37,nopw:[3,23],nor:[917,941,944],norandkei:[3,15],norealm:[14,20],normal:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],north:917,nosync:[20,24],notabl:23,note:[3,5,6,14,20,21,23,26,32,34,154,241,245,602,603,605,606,896,902,929,937,940,944,950,951],noth:[8,899],notic:[17,24,917],notifi:934,novel:917,now:[8,14,34,37,39,235,260,275,728,916,937],nowait:[8,12,34],nrl:917,nss:917,nt_wellknown:761,ntlm:916,ntt:917,num:9,num_data:[98,100,103,114,130,288,290,295,299],num_prompt:[352,870],number:[2,3,4,5,6,8,9,10,11,12,14,15,19,20,21,23,24,35,36,37,39,46,48,66,78,80,83,100,103,112,135,156,288,290,310,315,325,326,327,331,337,352,356,358,359,360,521,528,721,736,738,806,825,844,848,873,883,894,896,898,902,904,906,908,909,910,912,916,917,920,929,941,942,943,944,946],numer:[6,34,166,382,383,896,916,941],numwork:10,object:[3,5,6,20,21,22,24,25,28,35,36,43,48,262,269,738,902,904,908,917,918,919,920,921,922,923,926,927,928,929,930,931,932,933],observ:[25,29,35],obtain:[2,3,15,16,17,20,21,23,25,26,33,34,37,43,46,48,80,135,230,258,271,274,329,330,359,375,402,403,414,440,618,835,895,898,904,913,916,917,932,933,935,936,940,944,946],obvious:32,occasion:34,occur:[3,6,9,23,78,342,386,916],occurr:171,octet:48,odd:937,oeap:481,off:[15,21,24,25,28,33,35,39,352,361],offer:[21,24,40,904],offlin:[14,25,940],offset:[10,48,410,908,913],often:[20,22,23,28,33,38,39,898,925,951],oid:[28,43,916,922],oid_op:917,ok_as_deleg:[3,23],ok_to_auth_as_deleg:[3,23],okai:[3,23,937,941],old:[2,3,6,14,15,20,21,23,34,37,243,346,420,916,936],old_cod:[419,420],old_princip:3,oldcc:917,older:[14,23,916,929],oldest_kvno_to_keep:3,om_uint32:[43,922],omit:[11,22,28,39,408,714,715,908,912,932],onc:[3,6,14,15,21,23,34,43,46,78,361,733,895,899,902,927,931,936,951],one:[2,3,5,6,9,15,16,17,19,20,21,23,24,25,26,28,32,34,35,36,37,38,39,40,41,43,46,48,153,165,243,263,264,270,271,275,279,330,333,344,356,360,389,738,895,896,898,899,902,904,905,906,908,909,913,916,918,920,921,923,926,929,930,936,937,940,942,944,945],ones:[21,25,34,902,921,937],onli:[3,4,6,8,9,10,14,15,18,19,20,21,22,23,26,28,32,33,34,35,38,39,41,43,46,48,54,114,153,224,228,241,245,295,325,361,365,366,545,729,749,860,887,894,895,900,902,904,908,913,916,917,922,923,929,930,932,936,937,940,944,946,949,951],onlin:[14,25],onlyrealm:[14,20],onto:[17,21,32,34,904,922,937],opaqu:[48,286,845,916],open:[6,21,23,24,46,48,50,305,315,317,342,387,753,769,899,913,916,917,933,940],openldap:[3,5,23,24,30,904,917],openldap_ldapconf:20,opensc:21,openssh:[28,38],openssl:[21,37,904,916],openvis:[3,917],oper:[2,3,5,9,10,14,15,19,20,21,22,24,26,28,33,34,35,37,41,43,48,62,119,121,136,156,158,382,383,386,753,835,845,895,901,902,903,904,909,913,915,916,917,926,930,940,944,951],oppos:37,opt:[46,229,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,943],optim:904,optimist:[20,40,48,254],option1:21,option2:21,option:[2,11,12,15,19,22,24,28,29,34,35,36,37,39,43,48,59,60,224,225,226,229,232,233,234,235,253,260,269,275,325,326,329,330,331,344,375,403,414,416,546,736,806,807,811,822,823,830,834,838,839,844,882,898,903,916,919,920,921,923,926,928,930,937,951],oracl:[42,917],order:[3,4,6,14,16,17,19,20,21,22,23,32,33,34,35,37,38,43,46,48,245,736,895,898,899,903,904,908,912,917,918,922,932,951],ordinari:[14,902,916,951],ordinarili:[2,15,245],org:[5,21,22,23,42,902,903,906,916,917,934,950,951],organ:[903,917],orig_hostnam:194,origin:[3,14,21,23,39,43,46,904,917,922],osconf:903,osf:679,other:[3,4,6,10,14,15,19,20,21,23,24,26,28,34,35,37,38,39,43,46,154,279,310,359,404,644,738,835,894,895,898,901,902,903,904,908,909,912,916,917,920,922,926,927,928,930,931,932,934,936,937,942,944,949,950],othernam:37,otherrealm:21,otherwis:[3,6,14,15,20,21,23,29,33,34,36,37,39,43,49,52,54,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,95,96,97,98,99,100,102,103,104,105,106,107,108,110,111,112,113,114,115,116,117,118,121,124,125,126,129,130,134,142,150,153,157,158,162,163,164,166,170,172,173,174,175,177,178,180,181,182,183,184,185,187,189,192,193,195,217,224,235,236,238,248,260,261,264,265,266,267,271,272,273,274,275,276,277,278,279,280,283,284,285,286,287,288,289,290,294,295,296,298,299,300,301,319,321,322,324,325,326,327,328,329,330,331,332,333,335,337,338,339,342,345,347,348,349,350,354,355,356,357,358,359,360,361,362,363,364,374,375,376,385,388,390,391,392,394,395,397,398,400,401,402,403,404,405,414,895,904,909,917,919,921,928,937,940,941,942,944],otp:[3,16,25,30,46,368,694,696,697,720,736,915,916],our:[20,36,901,902,917],out:[3,8,12,21,23,24,33,35,36,37,41,43,49,50,56,59,60,63,64,65,66,67,68,69,71,72,73,74,76,77,78,89,91,92,93,95,96,97,99,101,102,104,105,107,108,111,112,113,115,116,117,118,119,121,124,125,126,129,130,132,134,135,138,141,142,143,145,149,150,152,153,154,158,163,164,166,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,194,195,223,224,227,229,230,231,235,236,238,251,260,261,262,264,265,266,267,268,269,272,273,274,275,279,280,282,286,287,289,294,296,298,299,301,303,305,306,307,308,310,311,314,315,317,318,320,321,322,323,324,325,326,327,328,329,330,331,332,335,336,337,338,339,344,345,347,354,355,356,357,358,359,360,361,363,364,368,371,374,375,382,383,389,390,391,392,394,395,396,397,398,401,402,403,404,405,406,408,409,410,412,532,533,535,536,539,895,904,916,917,936,939,946],out_cr:[224,225,226,375],out_flag:238,outaddr:172,outag:[20,39],outauthdat:322,outbuf:[223,327,328,329,330],outcc:134,outcksum:131,outcr:177,outdata:178,outfil:6,outgo:[15,922],outlin:[0,29],outprinc:182,outptr:[186,190],output:[3,6,9,15,20,23,26,34,41,43,48,99,100,101,102,103,107,117,119,166,181,224,279,287,288,289,290,296,352,359,361,364,404,864,873,895,906,916,918,919,921,940,941,943,946,951],output_cr:43,output_cred_handl:43,output_message_buff:43,output_nam:922,output_payload_buff:43,outreach:14,outsid:[15,895,951],over:[0,10,14,15,20,21,23,24,28,32,34,36,38,39,43,46,48,107,113,114,117,155,164,294,295,296,300,301,325,363,375,815,916,918,924,932,936,937],overrid:[3,6,10,14,20,21,23,36,48,378,380,381,386,387,863,904,912,916,940],overridden:[2,10,11,19,21,899,916],overview:901,overwrit:[6,23,384,939],overwrite_cr:43,overwritten:[20,825],own:[0,3,15,20,21,23,24,25,34,38,381,919,921,922,933,936,937,944,950],owner:917,ownership:899,p27:42,pa_as_fresh:910,pa_config_data:908,pa_hardwar:929,pa_real:920,pa_replaces_kei:929,pa_typ:[857,908],pa_type_list:[920,929],pac:[3,20,23,48,340,341,650,659,684,858,861,916,940],pac_client_info:[300,301,336,343],pac_out:301,packag:[29,34,902,917],packet:[20,25,36,330,916,929],pad:[43,48,99,100,103,104,287,288,290,536,913],padata:[843,844,920,929],padl:917,page:[0,3,21,903,904,916],pair:[6,20,21,26,839],pam:33,parallel:[10,39,902,916],param:[49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420],paramet:[5,6,10,20,23,28,35,36,43,46,48,169,229,323,325,343,904,905,908,915,916,922,926,929,944],parent:[21,39,895,915],pars:[3,15,28,43,45,46,48,235,260,264,267,278,356,360,368,371,901,908],part:[14,21,23,26,32,41,199,264,267,278,283,301,344,359,384,821,831,843,881,895,900,908,909,913,917,921,922,932,944,951],parti:[28,36,43,916,917,951],partial:[14,19,46,913],particip:[21,34],particular:[2,11,14,16,17,19,20,21,37,43,46,317,902,904,917,936,937],particularli:[14,17,25,39,936,943],partit:39,pass:[14,20,21,28,36,43,99,100,102,103,228,250,270,271,275,279,280,282,287,288,289,290,325,368,371,380,381,382,386,387,887,904,922,931,940,944],passcod:668,passiv:25,passwd:[5,23,33,893,917,944],passwd_phrase_el:[802,871],password:[3,4,5,6,9,10,11,14,15,16,17,19,20,21,22,24,25,26,28,29,32,33,34,35,36,37,39,40,43,48,233,245,258,618,620,717,718,719,737,738,895,900,915,916,920,924,935,937,942,944,950,951],password_changing_servic:[3,23],password_expir:[245,836],past:[3,23,934],pasword:25,patch:23,path:[4,5,8,20,21,22,23,25,28,29,34,39,359,902,904,906,916,944,951],pathnam:[4,8,21,23,24,28,29,37,898,902,905,951],pattern:[6,21,28,949],payment:917,pdf:0,pem:[16,21,29,37,946],peopl:20,pepper1:107,pepper2:107,pepper:48,per:[3,6,9,10,14,18,20,21,23,26,28,36,39,43,46,895,918,920,923,926,927,929,930,931,932,933],perfect:899,perform:[3,4,5,6,12,14,19,20,21,22,23,24,25,26,34,37,38,39,43,46,62,91,250,254,258,359,363,375,382,383,386,416,437,845,895,916,917,926,927,928,937],perhap:[3,14,20,23,24],period:[6,8,14,17,20,21,23,24,35,937,940],permiss:[3,15,18,19,20,23,34,43,137,147,159,895,916,917,937],permit:[3,19,20,21,23,26,36,48,194,251,356,360,915,916,917,940,950],permitted_enctyp:[21,26],persist:[21,895],person:[17,34,917,936,937],pertain:[10,917],pgp:[903,934],phase:944,phrase:893,physic:[32,39],pick:[20,25,37,902],pid:[4,8,10,916],pid_fil:[4,8,10],piec:[35,265],pin:[369,372,726,729,733,734,735,736,868],pipermail:934,pkc:[21,738],pkcs11:[21,916,917],pkcs12:21,pkinit:[3,16,23,25,30,40,41,107,649,686,687,688,689,738,904,911,916,917,924,940],pkinit_allow_upn:[20,21],pkinit_anchor:[3,20,21,23,37,940],pkinit_cert_match:[3,21,37,916],pkinit_dh_min_bit:[20,21],pkinit_eku:21,pkinit_eku_check:[20,21,37],pkinit_ident:[20,21,37],pkinit_ind:[16,20],pkinit_kdc_hostnam:[21,37],pkinit_pool:[20,21],pkinit_require_crl_check:[20,21],pkinit_require_fresh:[20,37],pkinit_revok:[20,21],pkinit_san:21,place:[2,8,14,15,21,26,28,32,33,37,39,43,44,46,48,107,117,229,264,267,279,296,301,336,364,376,404,825,864,904,906,913,919,927,939,944,950],placehold:[901,903],plain:909,plaintext:[116,533],plan:23,platform:[24,883,894,895,902,903,904,916],pleas:[0,15,20,736,934],plu:[20,937,944],plug:917,pluggabl:[21,28,916,921,924,927,932],plugin:[3,20,22,901,904,914,915,916,917,932],plugin_base_dir:21,pnl:21,point:[3,14,15,21,23,32,34,43,330,407,414,825,895,900,904,916,934],pointer:[24,43,44,46,91,135,136,173,198,200,203,209,213,217,220,230,231,256,262,263,322,323,330,332,357,365,366,386,395,407,823,825,830,870,881,918,919,920,921,926,927,929,931,933],pol:[3,19,23],polici:[3,4,5,6,16,19,20,21,24,25,34,35,169,359,916,924,925,926,933,937,941,942],policy_nam:[5,23],poll:[4,8,20,23,916],pool:14,pop:32,popul:[14,24,44,148,913],popular:34,port:[3,4,7,8,10,12,15,20,21,23,34,36,41,44,48,62,331,524,526,915,951],portabl:895,portiion:917,portion:[21,36,153,266,317,385,410,749,806,811,822,834,873,917],portmapp:23,portnum:10,pose:14,posit:[6,19,28,35,883,912],posix:[6,883,894,909,910,913],possess:[37,937],possibl:[3,5,6,14,15,17,20,21,22,23,24,25,26,32,34,35,37,38,39,43,46,48,93,166,224,738,898,899,904,916,917,920,921,929,934,937,949],post:[48,895,934],postdat:[3,19,20,23,267,937,940,941],potenti:[14,32,34,46,900],power:[20,24,25,39,916],practic:[14,21,46,99,287,916],pre:[0,16,20,22,43,48,91,260,329,330,359,363,364,375,380,857,906,909,916,917,927,940],pre_auth_typ:[232,233,234],preauth:[20,671,839,908,916,917,920,929],preauth_list:[254,838],preauth_list_length:[254,838],preauth_plugin:[920,929],preauth_requir:[920,929],preauthent:[3,16,20,21,23,25,28,30,37,41,46,48,250,720,830,843,844,857,874,908,916,921,924,937,940,941],prebuilt:902,preced:[10,14,21,39,912,944,951],precis:33,precomput:48,predefin:39,prefer:[3,21,23,38,43,236,898,899,916,923],preferred_preauth_typ:21,prefix:[20,39,48,344,902,904,916,922,943,944],preiniti:[117,119,121,296],prepar:[48,79,318,403],prepend:[39,346,420,904],preprocessor:904,prerequisit:906,preselect:940,presenc:[21,908],present:[8,14,16,20,21,22,23,28,34,36,37,43,46,165,245,301,325,333,336,345,354,365,366,373,388,618,709,711,712,882,898,899,908,912,913,916,932,937,941,946,951],preserv:[6,917],presid:917,pressvr:14,presum:899,prevent:[2,3,19,20,21,23,25,26,29,40,330,521,522,899,916,917,927,936,940],previou:[0,3,21,23,34,37,42,44,156,250,261,279,384,404,419,420,908],previous:[3,6,23,43,48,902,916],prf:[48,118,909,916],primari:[3,4,7,8,9,14,17,20,21,23,24,31,35,38,39,41,43,48,145,895,916,918,927,931,933,934,939,940,945,949,951],primarili:[24,55,947],primary_kdc:21,princ1:[37,348,349,350,362],princ2:[37,348,349,350,362],princ:[3,6,15,21,49,50,91,92,93,94,388,791,792,793,794,795,796,797,798,909],princ_flag:6,princ_lockout:6,princ_look_ahead:944,princ_meta:6,princ_nam:[37,939],princ_out:154,princ_stringattr:6,princ_tktpolici:6,princip:[2,3,4,5,6,7,8,9,10,11,12,14,16,17,19,20,21,22,24,25,26,28,29,30,31,32,33,36,37,40,41,43,45,46,48,78,141,147,148,153,155,159,166,223,229,235,242,260,264,267,275,300,301,310,315,320,329,333,340,341,342,343,359,363,364,375,403,406,407,408,409,412,414,501,641,648,662,705,707,749,761,823,824,830,834,843,844,848,860,895,896,898,899,905,909,910,912,915,916,918,919,925,926,928,929,930,933,936,937,940,941,942,944,945,946,949,950,951],principal_databas:8,principal_nam:37,principal_out:[344,345],principal_seq:37,principalnam:916,principl:708,princnam:[25,35,40,46,895],princname_out:336,print:[3,6,7,8,23,361,916,943,944,946],printabl:[365,373],prior:[6,8,14,20,21,23,39,41,43,136,265,917,921],priorit:39,prioriti:[14,20,39,230,895,899,918],priv:[48,916],privat:[21,37,716,904,909,910,916,934],privileg:[3,15,19,34,43,48,253,936,950,951],privsvr:[300,301,342,343],privsvr_kei:[340,341],prng:[121,916],probabl:[6,12,14,23,34,902],problem:[14,23,330,899,916,934],proce:944,procedur:[6,26,32,34,901,902],proceed:23,process:[3,4,6,8,9,10,14,15,20,21,23,24,25,34,38,43,46,48,136,154,169,355,414,895,898,899,916,919,920,923,926,927,928,929,931,933,940,951],procur:[37,917],produc:[6,21,23,46,104,124,903,913,920,923,929,941,943],product:[34,917],prof_no_rel:932,profil:[15,18,20,21,48,136,388,895,898,899,901,905,916,917,924],profile_module_init:932,profile_module_init_fn:932,profile_releas:262,profile_vt:932,profit:917,program:[2,3,4,6,8,12,15,20,21,23,26,28,30,32,33,34,37,38,39,41,43,46,56,268,378,899,901,902,903,906,908,915,916,917,937,943,944,951],programm:943,programmat:46,progress:[14,20],prohibit:[3,23,917],project:[0,699,904,916,917,921,951],promot:[14,917],prompt2:361,prompt:[2,3,5,6,23,34,46,48,260,361,717,718,719,720,868,870,900,916,920,936,937,942,944],prompter:[245,260,263,275,352,868,870,875],prone:916,proof:[48,937],propag:[4,6,7,8,14,17,19,20,21,24,31,35,901,916,917,936],proper:[12,23,37,359,902],properli:[29,34,37,41,894,904],properti:[21,935],propog:8,proponli:[4,23],proprietari:36,protect:[6,15,25,26,32,35,37,40,43,78,247,326,331,738,845,899,916],protocol:[2,3,14,21,23,29,39,43,48,247,301,321,405,673,693,721,830,834,843,844,899,901,914,916,926,937,940,946,951],prototyp:[901,921],prove:[46,910,920,929],provid:[0,3,4,10,15,21,22,23,24,26,28,29,32,34,37,38,39,41,43,46,98,229,359,372,414,894,895,902,904,916,917,919,922,925,928,932,936,944,951],provis:917,proxi:[20,21,25,30,36,39,43,916,937,941],proxiabl:[3,20,21,23,48,838,937,940,941,944],proxy_imperson:908,pseudo:[48,901],pto:183,ptr:[38,43,197,281,339,353,800,801,830,831,881],pty:[901,917],publish:[38,917],pull:916,punctuat:[3,21,23,34,942],purg:[3,6,14,916],purge_mkei:23,purgekei:[14,23,37],purpos:[10,15,21,26,28,34,904,917,940,947],put:[4,10,34,344,806],pw_expir:6,pwchang:20,pwd:902,pwexpdat:[3,23],pwexpir:[3,19,23,26],pwqual:[28,916,924],pwqual_plugin:933,pwservic:20,python:[29,906,916],qop_req:43,qop_stat:43,qualif:[21,916],qualifi:[3,15,19,21,23,951],qualify_shortnam:[21,38,916],qualiti:[21,28,916,924,935],queri:[3,21,23,39,43,46,916],question:[0,20,39,48,368,371,736,737,738,874,875,934],queue:[20,917],quietli:939,quit:[6,32],quot:[3,6,23,344,406,408,896],quux:21,r13:[6,23],r18:[6,23],r_address:822,rabbit:39,radiu:[20,36,916],randkei:[3,14,23,26,34,37,916],random:[3,6,14,15,20,21,23,25,34,48,909,913,916],random_data:124,randomli:[2,26],randsourc:120,rang:940,rapidli:15,rare:[24,37,896,898],rassen:917,rather:[3,4,5,6,10,15,20,21,23,32,38,39,56,279,404,895,902,909,922,940],raw:[20,902],rc2:479,rc4:[20,26,916],rcach:[43,71,85,265,323,325,899],rcache2:[899,916],rcmd:21,rcommand:643,rcptr:265,rctmpdir:905,rctx:[46,365,366,367,368,369,370,371,372,373,875],rdata_out:[323,325,326,331,354,356,360],rdn:[21,33,38,43],reach:[20,21,24,164,314,913],react:243,read:[3,5,6,9,11,20,21,22,23,34,35,37,46,48,250,260,262,318,352,371,414,904,912,929,932,936,941,951],readabl:[15,21,32,169,896,898,900,916],reader:[21,24],readi:[6,34],readlin:904,readm:[901,903],real:[21,350,385,705,944],realiti:0,realloc:44,realm1:10,realm2:10,realm3:10,realm:[3,4,5,6,7,8,10,12,14,15,16,19,22,24,25,26,29,30,33,34,36,37,38,40,43,44,46,48,49,50,59,60,91,92,93,94,153,214,230,235,251,260,264,267,278,279,284,300,342,344,345,350,359,388,389,403,404,408,502,706,709,710,711,712,714,715,725,793,794,795,796,811,819,823,831,834,843,844,860,863,864,866,867,881,895,904,905,908,909,910,912,915,916,924,931,933,936,937,940,944,949,950,951],realm_try_domain:21,realmlist:214,realmnam:[37,46],realmsp:[230,231],reason:[14,17,21,24,28,33,39,342,894,908,917,936,937,944],reboot:[20,34,900],rebuild:[904,906],receiv:[3,4,8,9,14,20,21,23,37,39,41,43,48,223,245,273,325,326,330,331,354,356,360,363,374,375,874,919,920,929,930,933,937,951],recent:[2,6,17,20,25,26,37,48,899,910,916,937],recipi:[822,917],recogn:[3,20,21,37,41,940,949],recognit:[916,917],recommend:[5,6,15,17,20,21,23,32,34,39,40,43,902,903,904,934,937,939],recomput:136,reconf:901,record:[6,10,21,23,33,34,38,39,899,909,912,913,916],recov:[6,23,916,920],recurs:[6,23,24,916],recv_hook:380,recvauth:[363,375],red:[691,917,951],redhat:916,redirect:[21,34],redistribut:917,reduc:[14,21,33,100,103,288,290,904],redwood:917,ref:[5,23],refcount:916,refer:[3,5,15,19,20,22,23,39,43,45,48,87,89,138,286,307,860,916,917,925,930,944],referenc:[22,908,917],referr:[20,21,39,230,231,343,389,692,701,725,908,916,923,937],referral_valid_until:859,referred_realm:859,reflect:[23,34,100,103,136,158,262,288,290,325,326,331,356,360,909,910],reforward:937,refrain:922,refresh:[15,43,908,916],refresh_tim:908,refus:[12,14,34],regard:917,regardless:[6,19,21,43],regener:906,regent:917,regexp:21,region:[43,114,130,295,299,825],regist:[4,21,23,28,39,917,924,951],registr:21,regress:902,regul:917,regular:[14,21,34,37,43,944],regularli:[17,39],reiniti:[148,916],reject:[12,15,16,20,21,34,166,620,937],reject_bad_transit:20,rekei:14,rel:[20,21,48,896,902,908,944],relai:10,relat:[4,6,20,21,22,28,29,35,37,39,169,824,916,917],relationship:[21,930],releas:[0,3,4,6,8,14,15,16,19,20,21,23,24,25,26,33,35,37,38,39,40,41,43,46,48,68,73,77,82,84,91,93,113,125,126,154,163,176,203,209,214,230,231,265,268,282,294,314,318,344,894,895,899,909,910,912,913,916,919,920,921,922,923,925,926,927,928,929,930,940,946,951],relev:[34,38,78,195,300,909],reli:[15,34],reliabl:24,relianc:21,relinquish:85,reload:23,remain:[3,4,6,14,20,23,43,44,245,645,894,895,912,913,916,917,927,929,944],rememb:[34,37,908],remot:[3,4,7,15,20,23,33,38,43,48,62,64,169,223,325,326,331,356,359,360,382,383,525,526,901,916,936,937,944,950,951],remote_addr:[44,64,82,359],remote_port:84,remotehost:947,remov:[2,3,6,20,23,26,28,37,38,48,155,902,916,927,936],renam:[3,23,904,916,927],rename_sect:932,render:[14,902],renew:[3,5,6,20,21,23,48,844,882,916,928,937,940,941,944,951],renew_lif:[256,838],renew_lifetim:21,renew_til:[823,831,882,908],renewable_lif:940,renprinc:3,reorgan:916,rep:[185,199,327,328,357,358,805,830,843,858],rep_cksum:859,rep_result:375,repeat:[6,20,21,34,845,908,922],repl:357,replac:[3,5,21,23,28,34,70,75,94,186,188,190,191,196,197,225,226,232,233,234,281,351,353,411,904,912,916,917,920,940],replai:[21,43,48,78,323,325,326,331,354,356,359,360,521,522,873,895,897,905,911,915,916,951],repli:[12,26,46,107,245,258,267,279,352,357,358,380,381,404,728,843,863,864,868,909,916,920,929,940],replic:[8,34],replica:[4,6,7,8,9,14,15,17,20,21,23,31,32,35,41,901,916],replica_datatran:[7,34,915],replica_datatrans_hostnam:23,replica_dumpfil:8,replica_host:7,replicahostnam:8,reply_out:864,report:[6,38,901,916,934,940,946],repositori:906,repres:[3,21,34,43,158,883,894,898,909],represent:[21,43,48,344,345,398,407,408,811,830,843,844,881,894,908,912,917],representaton:805,reproduc:917,req:[21,26,37,245,329,330,359,504,844],req_pac:253,request:[3,4,6,8,9,10,14,15,16,19,20,21,22,23,24,25,28,33,35,36,37,38,40,43,46,48,153,166,195,223,224,229,235,241,253,260,267,276,277,330,359,378,403,503,505,506,619,673,693,750,757,758,805,807,830,844,852,896,898,899,908,909,910,916,919,920,922,928,929,934,937,940,944,946,951],request_fini:920,request_init:920,request_tim:880,requested_principal_nam:859,requestor:659,requir:[3,4,6,8,9,12,14,15,16,20,21,22,23,24,25,26,28,32,34,35,36,37,38,39,40,43,46,48,98,112,116,117,236,241,247,248,301,323,325,326,331,354,356,360,544,736,860,875,894,895,902,903,904,906,909,916,917,919,922,929,932,937,942,950,951],require_auth:[3,16,916],requires_hwauth:[3,23,929],requires_preauth:[3,5,14,23,25,35,37,40],requires_pwchang:[5,23],requisit:906,research:917,resembl:738,reserv:[907,917],reset:[3,9,23,35,46,157,386,916],resid:[15,39,46,900,917,949,950],residu:[21,39,152,317,895,899,930,932,951],resiz:407,resolut:[15,33,38,43,230,916,944],resolv:[15,33,48,260,317,895,904,916,941,944],resourc:[43,46,902,914,916],respect:[3,11,34,82,84,224,344,896,917,922,936],respond:[4,48,367,368,369,370,371,372,729,736,737,738,874,875,916,929],respons:[3,4,23,37,40,46,85,166,229,245,279,357,404,503,505,543,565,737,757,759,805,844,880,916,917,920,923,929,940,947,951],rest:[28,904],restart:[12,14,19,20,23,24,34,37,41],restor:[6,17,916],restrict:[3,5,14,19,21,23,48,224,917,926,928,940,944],restrict_anonymous_to_tgt:[20,37],restructuredtext:0,resubmit:940,result:[0,14,15,21,23,37,39,40,41,43,46,48,99,102,107,117,124,144,156,158,189,195,228,287,289,296,320,375,376,403,405,406,407,420,904,908,909,913,916,917,918,922,923,928,929,930,937,944,946],result_cod:[166,382,383],result_code_str:[166,382,383],result_str:[166,169,382,383],resum:23,resync:[4,9,23,916],resynchron:9,ret:[46,347],ret_as_repli:[232,233,234],ret_princ:389,ret_valu:[59,60],retain:[2,3,14,20,23,917,926,928,950],retir:[13,23,916],retransmit:904,retri:[20,36,38,39],retriev:[3,6,24,41,43,44,46,48,158,271,310,366,375,400,403,874,916,917,946],return_padata:929,return_pwd:361,retval:[49,50,51,53,55,56,61,62,63,64,65,66,67,68,69,71,72,73,74,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,121,124,125,126,129,130,132,133,134,135,137,139,141,142,145,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,236,238,248,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,285,286,287,288,289,290,294,295,296,298,299,300,301,302,303,304,305,306,308,310,311,313,314,315,316,317,318,319,321,322,323,324,325,326,327,328,329,330,331,332,333,335,336,337,338,339,342,344,345,347,348,349,350,352,354,355,356,357,358,359,360,361,362,363,364,373,374,375,376,377,378,382,383,384,385,387,389,390,391,392,394,395,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,921],reus:23,rev:[6,23,24],revers:[6,15,21,23,33,43,917,941],review:903,revis:[916,917],revoc:[20,21],revok:[20,21,35],rfc4120:29,rfc:[14,20,21,39,43,48,320,382,383,412,442,443,446,447,448,450,451,458,459,460,461,462,463,464,465,466,511,540,542,600,663,666,667,668,669,670,671,672,674,675,676,677,679,680,681,682,685,686,688,690,696,699,701,703,736,899,908,909,910,913,916,920,922],rhost:223,ricciardi:42,richard:917,ride:20,right:[5,19,20,23,100,103,288,290,825,907,913,917],risk:[14,26,30,46],rkt:11,rlen:[91,92,93,94],rlogin:944,rnd:38,roam:21,robbi:951,robin:15,robust:916,rock:[920,929],roll:23,rollback:14,rollov:[6,23],root:[8,12,14,15,17,19,20,21,32,34,900,904,936,944,949,950,951],rotat:[26,38],round:[40,916,929],rout:34,routin:[21,868],royal:917,royalti:917,rpath:[902,904,943],rpc:[20,21,23,43,48,616,901,916,917],rpcbind:23,rsa:[37,477,480,481,482,917,940],rst:906,rtime:844,rule:[3,15,19,21,23,28,38,39,43,154,944,946,949,950],run:[3,4,6,8,9,10,12,14,15,20,21,23,24,26,28,32,33,34,37,39,41,895,902,903,904,906,915,916,939,941,944,951],runstatedir:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],runtim:915,s2kparam:48,s2kparams_out:229,s4u2proxi:[20,43,908,916],s4u2self:[20,43,343,916,946],s4u:916,s4uself:20,s_address:822,safe:[28,48,739,894,916],safer:936,safest:937,sai:899,sake:944,sale:917,salt:[2,3,6,11,15,20,23,25,48,125,126,393,838,916],salt_out:229,salt_type_afs_length:787,salt_type_no_length:787,salttyp:[6,20,26,374],salttypep:394,sam:[694,696,697,916],samba:[28,916],same:[3,4,5,10,12,15,19,20,21,23,24,28,36,39,43,52,53,91,101,105,107,136,138,151,155,171,180,228,250,270,271,275,279,307,348,349,350,362,388,845,895,899,904,916,921,922,936,940,944,946],sampl:[12,15,22,34,901,917,936,937,944,947],san:[20,21,916],sandia:917,sasl:[3,5,20,22,23,38,43,916],sasl_authcid:3,sasl_authzid:3,sasl_mech:3,sasl_nocanon:38,sasl_realm:3,satisfactori:25,save:[37,40,66,83,528,529,909,916,929],sbin:[8,12,34,904,915],sbindir:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],scalar:909,scenario:[14,916],schedul:[14,23],schema:[22,24],scheme:39,sclient:[12,935,938],sclogin:20,scope:[5,23],screen:937,screensav:937,script:[3,4,10,23,34,901,902,904,916],search:[5,20,21,23,38,48,151,153,195,224,315,895,902,913,916,939,945],search_scop:[5,23],searchscop:[5,23],sec:[48,811,834,896],second:[3,10,20,21,23,28,36,37,39,43,44,52,53,105,153,223,228,266,267,322,348,349,350,361,362,385,386,388,410,743,806,822,824,844,873,883,894,896,899,908,909,912,913,921,922,937,940,944,951],second_ticket:[824,844,908],secondari:34,secret:[3,20,21,36,43,46,848,936],section:[3,10,19,22,23,28,33,34,35,37,39,41,43,48,119,320,412,600,680,681,682,899,902,903,908,909,913,916,932,933,944,949],sector:[6,23],secur:[3,7,14,15,20,21,23,25,30,31,34,37,39,41,43,46,250,325,564,900,901,916,917,934,937,951],securecooki:909,securid:[668,916],sed:904,see:[14,15,17,22,23,24,26,28,32,34,35,36,39,43,46,97,99,100,102,103,108,113,114,130,131,168,229,262,287,288,289,290,294,295,299,320,359,393,403,412,413,414,600,736,895,896,899,900,901,902,904,906,907,908,916,917,918,919,920,921,923,924,925,926,927,928,929,930,931,932,933,934,936,937],seed:[131,331,413,913],seed_length:[131,413],seen:899,segment:39,select:[6,14,21,23,28,43,46,48,117,296,359,369,895,904,916,922,924,940,944,949],self:21,sell:917,semant:46,semfiajf42:20,send:[0,4,15,20,21,23,25,26,32,34,41,48,229,245,325,363,375,380,899,901,904,916,934,936,940,951],send_hook:381,sendauth:[12,34,48],sender:[325,326,331,356,360,822],sensit:250,sent:[6,20,23,25,36,37,41,43,325,375,381,864,899,902,909,916,929,937],sentenc:34,separ:[0,3,5,6,10,16,19,20,21,22,23,24,25,28,39,50,301,344,346,420,729,903,904,909,916,922,932,936,951],seq:873,seq_numb:[806,811],seqnumb:[69,74],sequenc:[25,37,48,66,78,80,83,325,326,327,331,356,358,359,360,521,528,806,811,873,900,908,909,912,922],sequence_count:871,sequenti:[48,314,813],seri:[48,913],serial:[9,43,48,405,916],serv:[4,10,21,23,916],server1:[5,23],server:[2,3,4,5,6,7,8,9,10,12,16,18,20,21,22,23,24,25,28,29,30,31,34,36,37,38,39,43,46,48,159,166,223,224,264,267,300,301,333,342,343,359,375,382,383,414,504,617,660,728,758,805,823,824,830,834,844,881,895,898,899,901,905,908,915,916,917,918,924,925,937,943,944,946,947,949],server_kei:[340,341],server_port:12,server_princ:[300,301],server_str:169,serverauth:21,servic:[2,3,5,8,10,12,15,16,19,20,21,22,24,28,29,31,32,33,34,43,48,166,224,235,245,260,264,267,301,329,330,363,382,414,643,644,645,736,876,895,899,901,908,916,917,918,923,931,937,940,946,949,951],service1:946,service2:946,service_loc:931,service_nam:940,service_passwd:[5,23],sesam:[46,699],session:[3,14,15,21,23,33,34,43,46,48,224,320,325,330,354,412,439,440,811,823,824,830,831,895,899,937,941,946,951],session_enctyp:[3,23],set:[0,3,4,5,6,14,15,16,18,19,20,21,22,23,24,25,26,28,29,31,32,33,34,35,37,38,39,40,41,43,44,46,48,62,68,69,73,74,77,78,98,102,145,153,154,161,164,203,209,224,229,253,279,280,286,289,301,305,317,325,326,331,352,354,356,359,360,361,369,373,377,387,404,407,408,409,420,546,729,745,863,864,874,895,896,899,904,916,919,922,929,930,936,937,939,940,941,944,950,951],set_cooki:[916,929],set_str:[23,26,36,37],setstr:[3,16],setuid:[41,916,951],setup:[23,34,902,916],sever:[3,15,16,20,21,23,24,37,39,895,901,904,908,921,951],sfu:683,sha1:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],sha256:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],sha2:[20,916],sha384:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],sha:[14,20,916],shall:917,share:[0,14,21,23,28,46,330,904,921,922,932,936],sharealik:917,sharp:19,she:[937,950],shell:[3,5,23,34,41,916,936,937,943,949],shorter:21,shortest:192,shortli:[33,936],shortnam:[21,916],should:[0,2,3,4,5,6,10,12,14,15,17,20,21,22,23,24,25,26,28,29,32,33,34,37,38,39,43,46,71,85,144,152,223,245,249,255,269,279,308,317,325,327,330,342,359,361,365,366,404,738,858,863,864,883,894,895,896,900,902,904,908,910,916,917,918,919,920,921,922,926,927,928,929,931,932,933,936,937,940,944,946,951],show:[2,6,20,41,868,895,906,915,937,941],shown:[20,21,895],shrubberi:42,shutdown:24,sick:917,sid:[21,638,639,659],side:[23,43,363,375,899],sighup:[10,41],sign1:43,sign2:43,sign:[3,19,20,21,23,32,37,41,43,48,894,903,910,912,916,940,951],sign_authdata:916,sign_onli:43,signal:10,signatur:[48,412,476,477,482,903,922,932],signedpath:[3,20,23,916],signific:[25,35],silent:941,similar:[6,21,22,29,43,92,105,113,114,126,129,130,246,294,295,296,298,299,326,329,343,345,349,364,407,408,417,419,916,921,931,937,944],similarli:[15,344,738,937],simpl:[5,12,17,23,107,421,895,899],simplest:[28,43,895,902],simpli:[28,36,37,40,43,46,737,902,922,936,937],simplifi:[251,916],simul:944,simultan:845,sinc:[3,12,14,15,17,21,22,23,37,48,330,733,883,894,908,922,929,950,951],singl:[0,3,14,15,20,21,23,24,26,28,32,34,37,39,40,43,46,48,189,320,345,409,708,895,904,916,929,944],siphash:913,site:[15,23,34,39,916,937,940,950],situat:[14,20,24,28,39,946],size:[9,20,21,23,24,37,41,48,97,98,100,103,114,116,130,186,190,288,290,295,299,361,407,409,825,904,912,913,916],size_return:361,size_t:[95,96,98,100,103,104,112,114,116,118,130,131,168,170,186,187,190,191,192,193,280,288,290,295,299,337,339,369,374,397,398,413],sizeof:[43,46,932],skei:[20,824],skew:[48,267,356,360,929,940],skip:[22,23,37,414,416],slack:39,slash:[344,951],slat:921,slightli:904,slot:[11,21,300,913],slotid:21,slower:[14,24],small:56,smaller:[21,912],smard:21,smart:[20,21,916],sms:19,smtp:642,sname:[389,946],sni:916,sock_dgram:931,sock_stream:931,socket:[20,21,36,48,375,915,931],soft:916,softwar:[14,15,21,24,25,28,42,46,904,917,934],solari:[31,902,904,916],solaris9ab:42,sole:[21,28],solut:34,some:[2,3,6,14,20,21,23,24,28,29,31,34,37,38,39,41,46,48,99,151,154,287,389,764,895,896,899,901,902,903,904,905,913,915,916,921,922,925,932,934,936,937,940,949,951],someon:[17,21,34,936,937],someth:[12,14,20,38,899],sometim:[23,25,38,940],somewhat:[37,899],song:917,sophist:46,sort:38,sourc:[0,10,22,23,28,34,39,42,43,902,903,904,914,917,921,925,932,934,944],source_cache_nam:944,source_us:944,southern:917,space:[3,16,20,24,37,38,56,99,102,117,119,121,287,289,296,306,346,361,407,420,896,903],spake:[20,21,25,30,916,917],spake_preauth_group:[20,21,40],spake_preauth_ind:20,spake_preauth_kdc_challeng:[20,40],sparc:916,spars:913,spawn:4,special:[20,23,28,35,43,408,648,713,895,916,917,922,940],specif:[3,4,6,8,10,14,18,19,20,21,23,24,26,34,39,43,48,49,56,155,301,315,317,363,364,410,738,895,896,898,904,906,913,916,917,921,926,931,937],specifi:[3,4,5,6,7,8,9,10,11,14,15,16,18,19,20,22,23,28,29,34,36,37,39,43,46,48,92,93,99,100,102,103,113,125,129,224,227,229,235,260,264,267,287,288,289,290,294,298,310,315,318,325,326,331,344,345,356,359,360,375,383,414,750,895,899,904,909,910,916,922,929,937,939,940,941,942,943,944,945,946,951],speed:[22,25],sphinx:906,sphinx_arg:906,spi:922,split:[3,39,916],spnego:[916,917,922],spnego_mech:917,spoof:[21,25,39],sprecif:903,spuriou:916,sqlite3:6,sqlite:6,squar:[20,21,28],src:[22,148,902,904,906,917],src_ctx:179,src_name:43,srcdir:906,srv:[21,33,34,39,916],srvtab:11,ss_lib:904,sscope:[5,23],sserver:[1,947],ssh:[15,33,937,950,951],sshd:21,sshing:951,ssl:[29,37],sspi:916,stabl:[916,926,927,928,933],stage:[14,909,927],stai:[3,15],stale:[0,21,26],stamp:[6,9],stand:34,standalon:[8,41,916],standard:[3,6,9,14,20,23,37,41,43,898,916,917,943],start:[0,3,4,6,8,10,14,15,19,20,21,23,24,26,31,37,41,48,823,831,844,882,895,900,902,910,916,937,944],start_realm:908,start_tim:[235,260,275,940],starttim:[882,908],startup:[34,916],stash:[3,5,10,14,20,22,34,41,897,915],stash_fil:[6,23],stashfilenam:[5,6,23],stashsrvpw:[3,20,22,23],state:[6,9,14,20,34,46,48,78,99,100,102,103,287,288,289,290,845,909,915,916,917,918,920,921,923,926,927,929,930,931,932,933],statement:917,statu:[3,835,916,917,919,922,941,944,946],stderr:[20,951],stdin:352,stdlib:932,stdout:[41,352],stduser:23,step:[6,14,22,23,34,37,944],steve:951,still:[3,4,6,10,14,20,21,23,32,33,34,35,39,148,269,916,940,944,946],stime:834,stockholm:917,stolen:937,stop:[4,10,24,921],storag:[46,48,57,58,82,84,159,170,187,192,193,280,361,374,398,895],store:[2,3,4,5,6,8,14,15,17,20,21,22,23,24,26,34,37,46,48,80,99,100,102,103,224,235,250,287,288,289,290,325,326,330,331,356,359,360,361,407,414,549,729,838,895,898,899,902,905,908,913,916,933,937,940,941,944,946],str:43,strategi:35,strcmp:932,strdup:932,stream:[8,12,20,34,36,43],strength:916,strengthen:14,strict:917,strictli:34,string2kei:14,string:[3,5,6,15,16,19,20,21,23,25,26,28,34,36,37,39,43,46,48,101,166,169,192,228,229,258,264,267,278,336,346,365,373,379,382,383,417,418,419,420,736,737,738,819,824,835,866,867,887,895,896,899,904,916,917,919,921,922,929,930,932,940,944],strip_realm:[20,36],strlcpy:917,strlen:[43,46],strong:[16,122],stronger:[14,16,21,26],strongest:26,strptime:917,struct:[43,48,51,262,269,803,805,806,807,808,809,811,814,815,816,820,821,822,823,824,825,827,829,830,831,832,834,838,839,840,843,844,845,846,847,848,852,857,858,859,860,861,867,868,871,872,873,874,876,877,878,879,880,881,882,884,885,887,888,889,892,893,926,932],structur:[43,46,47,48,92,100,103,135,156,169,173,182,212,221,237,240,241,242,243,244,245,249,252,253,254,255,257,258,259,269,275,280,282,288,290,322,324,334,345,355,356,365,368,371,375,389,414,416,421,538,803,809,821,824,825,834,861,881,888,894,920,921,926,928,929,931],studio:916,style:[3,21,23,39,417,418,419,638,640],sub:[5,21,23,901],subcommand:14,subdirectori:[21,28,901,906,915],subdomain:[21,39,949],subject:[0,20,21,23,37,917],subjectalternativenam:21,subjectaltnam:37,subjectkeyidentifi:37,subkei:[48,80,325,354,359,806,811],sublicens:917,submit:[26,43],subprocess:10,subregion:43,subschema:22,subscrib:934,subsect:[16,20,21,22,24,25,28,29,35,37,40],subsequ:[9,10,14,24,136,275,279,404,917],subsess:[26,330,440],subset:[39,901],substanti:917,substhtml:906,substitut:[21,34,37,917],subsystem:904,subtag:21,subtre:[3,5,20,22,23],subtree_dn_list:[5,23],succe:[20,21,34,43,46,414],succeed:[12,34],success:[3,6,8,20,23,24,25,35,46,49,50,56,62,64,65,67,69,72,73,74,76,77,78,79,81,82,84,85,86,87,88,89,90,91,92,93,95,96,97,98,99,100,102,103,104,105,106,107,108,111,112,113,114,115,116,117,118,119,121,122,124,125,126,129,130,132,133,134,135,137,141,142,144,145,147,148,149,150,152,153,155,156,157,158,159,161,162,163,164,166,167,169,170,172,173,174,175,176,177,178,180,181,182,183,184,185,187,189,192,193,214,217,223,224,227,229,231,235,236,238,248,260,261,262,264,265,266,267,268,271,272,273,274,275,276,277,278,279,280,282,286,287,288,289,290,294,295,296,298,299,300,301,302,303,305,306,308,310,311,314,315,316,317,318,321,322,323,324,325,326,327,328,329,330,331,332,333,335,336,337,338,339,342,344,345,347,352,354,355,356,357,358,359,360,361,363,364,374,375,376,377,378,382,383,384,385,389,390,391,392,394,395,396,397,398,400,401,402,403,404,405,406,407,408,409,410,414,416,621,835,899,920,923,933,944,946],successfulli:[3,6,12,23,35,43,46,245,301,416,863,864],sudan:917,sudden:20,suffici:[3,5,14,23,24,904],suffix:[21,28,38,43,904,916,951],suggest:[0,245],suit:[34,901,902,916],suitabl:[6,902,904,916,917,937],summar:941,summari:[8,9],sun:917,suncc:904,sunw_dbprop_en:23,sunw_dbprop_master_ulogs:23,sunw_dbprop_slave_pol:23,sunwaadm:42,supersed:[10,14],supervisor:10,supplement:20,suppli:[3,11,43,46,48,223,245,258,262,267,276,277,278,331,342,372,373,386,733,734,874,904,920,921,929],support:[3,4,6,8,10,11,20,21,22,23,24,25,26,37,39,40,43,46,48,153,161,247,253,378,386,387,544,754,895,897,901,902,903,904,908,909,913,916,917,920,921,922,929,934,940],supported_enctyp:[14,20,26,34,916],suppos:[937,950],suppress:[3,6,20,23,904,916,939,944,946],sure:[3,5,12,14,15,22,23,26,33,41,936,937,940],surpris:14,surround:28,surviv:[20,895],susec:834,swap:[34,39],sweden:917,symbol:[6,344,899,902,903,906,915,921,922],symmetri:20,synchron:[9,14,15,21,24,34,41,48,271,403,728,916,929],syntact:21,syntax:[20,21,37,916],synthes:[381,863],synthet:[380,908],syria:917,sysadv6:42,sysconfdir:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951],syslog:[20,21,34,921],system:[3,6,14,15,19,20,21,23,24,29,32,33,34,35,36,37,38,41,43,46,48,56,136,147,169,282,382,383,385,396,692,695,698,874,895,900,901,902,903,916,917,921,930,934,936,937,939,940,950,951],systest:[3,23],t_mddriver:917,tab:[3,6,23,344,916],tabdump:[26,916],tabl:[3,6,23,48,276,307,308,313,359,363,414,848,898,901,903,904,906,913,915,916,941],tabular:[6,916],tag:[20,21,34,908,913,922],tail:34,take:[10,14,19,20,21,23,25,26,28,32,39,41,43,46,91,124,126,325,376,729,825,896,913,916,918,927,936,937,944],taken:[6,14,39,245,899,913],talk:899,tamper:43,tape:32,tar:[902,903],target:[19,21,34,43,895,908,916],target_nam:43,target_princip:19,target_principal_nam:944,target_us:944,target_user_login_nam:944,task:[14,46,91],tcl:916,tcp:[8,10,12,15,20,21,23,29,34,37,39,279,404,916,931],team:934,teardown:902,technet:42,techniqu:[40,46],technolog:[907,917,951],tekniska:917,telegraph:917,telephon:917,tell:[4,10,936,937,943],telnet:[21,643,944],temp:21,templat:901,temporari:[3,21,23,34,37,898,899,915,916,951],temporarili:3,ten:[33,937],tend:15,term:[3,14,23,25,26,37,41,737,895,898,916,917,920,929,946],termin:[4,10,48,173,195,220,230,231,240,261,325,352,354,361,366,407,901,932,944],ters:[3,23],test1:[3,23,896],test2:[3,23,896],test3:[3,23,896],test4:896,test:[3,9,10,12,14,21,23,37,48,901,904,906,916,917,940,947],test_html:906,testdir:41,testus:[3,23],texinfo:0,text:[6,23,28,36,37,46,169,365,825,834,868,909,943],tgt:[3,14,20,23,26,37,46,48,220,342,343,908,909,916,937,944],than:[3,4,5,6,10,12,14,15,19,20,21,23,24,25,26,28,32,35,37,38,39,43,53,56,230,279,375,404,895,899,902,909,912,913,916,920,922,936,940],thei:[3,6,9,14,15,20,21,23,28,33,34,37,38,39,41,43,46,229,325,375,729,845,894,895,898,902,904,908,916,929,936,937,948,951],them:[3,14,15,20,22,23,24,25,29,32,34,37,39,41,46,82,84,253,330,344,403,729,895,902,904,916,917,921,922,932,937,939,951],themselv:[6,23],theodor:917,theori:917,therebi:950,therefor:[22,23,25,39,908,929],thereof:917,thi:[0,2,3,4,5,6,8,9,10,11,12,14,15,17,19,20,21,22,23,24,25,26,27,28,32,33,34,35,36,37,38,39,40,41,43,46,48,49,50,55,57,58,59,60,61,62,67,68,69,71,72,73,74,76,77,78,81,82,84,85,86,87,88,89,92,93,98,99,100,101,102,103,104,105,107,113,114,116,117,119,120,122,123,124,125,126,129,130,133,136,137,139,141,144,148,150,151,153,156,157,158,159,167,169,171,172,173,174,175,177,178,180,181,182,183,192,194,195,198,199,200,201,202,203,205,206,207,208,209,212,215,216,221,228,235,236,241,243,245,246,252,253,254,258,260,261,262,264,265,266,267,270,271,272,275,276,277,278,279,287,288,289,290,294,295,296,298,299,301,308,317,320,323,324,325,326,327,329,330,331,333,334,342,343,345,352,355,356,357,358,359,360,361,363,364,368,371,373,375,376,378,380,382,383,385,386,387,389,396,400,401,403,404,407,408,410,412,414,416,417,419,726,727,728,729,733,734,735,737,830,848,882,883,894,895,899,900,901,902,903,904,908,909,913,914,915,916,917,918,920,922,924,926,927,928,929,930,932,933,934,936,937,939,940,941,943,944,946,950,951],think:[38,921,936],third:[21,28,36,37,908,916,917,951],thorough:39,those:[3,6,14,15,19,21,23,25,26,34,39,43,46,904,906,912,916,917,920,922,925,926,929,946,950,951],though:[14,902,937],thousand:24,thread:[24,845,895,904,916],threadsaf:285,three:[14,24,26,35,39,40,375,908,916,937,951],threeparamopen:787,through:[15,16,20,21,23,24,28,29,33,34,35,39,46,230,282,386,387,416,908,913,916,927,936,937],throughput:[20,24],thu:[23,899,904,944],ticket:[2,3,5,6,12,14,15,16,19,20,21,22,26,28,33,34,35,36,37,38,39,41,43,46,48,153,159,183,195,223,229,235,247,260,264,267,322,330,333,342,359,363,364,375,545,548,551,652,661,743,758,807,811,821,823,824,830,831,843,844,881,882,884,895,896,908,916,919,920,928,929,934,935,936,939,940,941,944,946,947,950,951],ticket_authdata:195,ticket_flag:[5,23,824,908],ticket_info:822,ticket_lifetim:[21,33],tied:927,tightli:[14,28,32,900],till:844,time:[0,2,3,5,6,9,10,14,15,19,20,21,22,23,24,26,28,34,35,36,37,39,41,43,44,48,136,158,224,228,235,245,260,275,356,359,360,398,733,750,751,806,822,823,824,830,831,844,848,882,894,895,897,899,900,904,905,908,909,913,915,916,917,922,928,936,937,940,941,944,951],time_offset:10,time_rec:[43,916],time_req:43,time_t:[6,883,894],timeofdai:410,timeout:[14,20,36],timeret:396,timestamp:[6,11,14,21,25,37,40,48,66,83,325,326,331,336,342,343,356,360,396,522,529,670,822,848,852,873,883,894,898,899,908,909,910,912,913,916,929,941],timestampp:395,titl:[901,917],tkt:824,tkt_flg_anonym:787,tkt_flg_enc_pa_rep:787,tkt_flg_forward:787,tkt_flg_hw_auth:787,tkt_flg_initi:787,tkt_flg_invalid:787,tkt_flg_may_postd:787,tkt_flg_ok_as_deleg:787,tkt_flg_postdat:787,tkt_flg_pre_auth:787,tkt_flg_proxi:787,tkt_flg_proxiabl:787,tkt_flg_renew:787,tkt_flg_transit_policy_check:787,tkt_life:[259,838],tktpolici:[3,5,23],tls:22,tlyu:[3,23],tmp:[3,15,21,34,899,905,915,937,944,951],tmpbuild:902,tmpdir:[899,951],tmppolici:[5,23],todd:917,todo:936,togeth:15,token:[16,20,21,46,368,598,727,728,729,731,734,735,911,916,922,929,940],token_flag:879,token_id:877,token_len:43,tokenid:736,tokeninfo:[369,736,876],toler:21,tom:3,too:[3,23,56,100,103,119,267,288,290,306],tool:[6,23,901,903,916,921],toolkit:901,top:[10,39,895,902,903,906],top_srcdir:906,topic:[0,30,34],topolog:4,tort:917,tortiou:917,total:[20,25,913,940,944],toward:[0,23],tr_content:888,tr_type:888,trace:[48,887,916,951],trace_log:41,track:[3,6,9,23,35,899,934],trademark:917,tradit:[6,35],traffic:29,trail:[20,38,944],trailer:[43,48,538],transact:[24,951],transcript:909,transfer:[4,37],transform:904,transit:[20,21,24,359,541,550,673,693,831,888,937,940,941,946],transitori:14,translat:[21,56,916],transmiss:17,transmit:[23,43,279,404,916,929],transpar:951,transport:[23,39,279,404],travers:[6,23],treat:[3,21,36,38,43,54,342,350,707,883,908,940,946],treatment:39,tree:[0,22,23,24,34,903,904,906,922,925,932],tri:[20,21,25,44,359,414,916,923],trigger:899,trillium:[15,32,937],trim:[99,287],trip:[40,916,929],tripl:[14,20,26,916],trivial:[25,916],troubl:42,troubleshoot:[30,34],true_principal_nam:859,truncat:[913,937],trust:[20,21,29,37,43,268,940],tryagain:920,tty04:20,tty:[5,23],tune:[22,39],tupl:[3,23],turn:[8,21,24,33,35,40,352,361,904,944],twice:[3,23,24,34,908,927,936,942],two:[3,18,20,21,23,24,26,28,34,35,37,38,48,53,361,896,908,909,912,916,918,922,930,937,940,944],txt:[6,34,39],type:[2,3,5,6,10,15,16,21,23,25,28,30,32,34,38,39,46,48,91,93,95,98,99,100,102,103,104,108,112,113,114,115,116,124,125,126,129,130,151,152,153,161,163,184,189,195,223,224,229,280,287,288,289,290,294,295,298,299,310,311,315,317,331,333,335,344,389,421,500,541,647,677,748,754,798,811,819,825,830,852,854,857,866,867,881,883,888,889,894,898,902,905,908,909,910,912,913,916,918,920,921,922,925,926,927,928,929,930,931,932,933,936,937,940,941,944,946,950,951],typedef:[43,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893],typic:[4,15,20,21,26,33,38,39,43,46,98,253,906,915,918,920,921,926,927,929,933,940,946],u2u:946,ubuntu:[42,916],ucb:944,udp:[10,15,20,21,29,39,279,404,916,931],udp_preference_limit:21,uid:[21,43,895,899,915,944,950,951],uid_t:43,uidnumb:895,uint16_t:890,uint32_t:[883,891,894],uint8_t:856,uint_max:[767,768,786],ulog:[20,23],umich:917,unabl:[17,21,23],unalloc:280,unam:28,unambigu:245,unansw:875,unauthent:32,unavail:[23,34,39],unchang:[3,14,15,944],unclean:24,uncommon:899,uncondition:[228,904],unconfigur:[39,906],undefin:944,under:[3,5,6,10,20,21,22,23,38,155,159,899,902,913,916,917],underli:43,underneath:22,underscor:[21,917],understand:46,undertaken:0,unenc_authdata:844,unencapsul:916,unencrypt:[32,356,811,821,843,844],unescap:6,unexport:922,unfinish:929,unicod:917,unifi:0,unimpl:921,unimport:908,uninterrupt:14,uniqu:[3,15,43,48,265,414,644,646,895,922],unit:[896,917,937],univers:917,unix:[6,15,20,21,28,31,36,43,921,922,932],unkei:46,unknown:[12,38,41,616,908,946],unless:[2,3,6,11,14,19,20,21,23,26,28,32,34,43,315,386,414,416,899,900,916,930,944,948],unlik:[14,40,895,899,916,922,937],unlimit:917,unlink:[6,23],unlock:[23,35,916],unlockit:[3,20,23,24],unmodifi:[917,944],unnecessari:23,unpack:903,unpars:[43,48,407,409],unpleas:14,unport:917,unprint:[3,23],unqualifi:33,unquot:6,unrecogn:904,unrestrict:[32,900],unser:43,unset:[43,48,171,951],unsign:[91,92,93,94,97,111,116,120,279,311,361,404,407,409,803,809,812,816,827,846,851,855,857,889,894],unspecifi:[21,951],unstabl:927,unsuccess:37,unsupport:[37,904],unswapp:895,untest:904,until:[3,6,14,21,23,43,894,895,899,904,913,916,937],untrust:[43,951],unus:[149,265,352,375,916],unusu:[28,37],unwrap:[43,48],updat:[2,4,6,8,9,14,20,21,22,24,26,34,35,99,100,102,103,224,287,288,289,290,695,698,904,909,916,925,934],update_princ_encrypt:[14,23],update_rel:932,upgrad:[21,23,26,34,39,916],upn:[20,21,350,637,639,705,916],upon:[6,8,23,944],upper:[3,19,23,39,942],uppercas:[21,930,951],upstream:[23,904,916],upstreamhostnam:23,uri:[3,5,20,21,23,33,34,39,916],url:[20,24,29,39],usa:917,usabl:48,usag:[20,21,37,43,99,100,102,103,108,113,114,129,130,287,288,289,290,294,295,298,299,845,894,909,910,943,944],usc:944,use:[0,3,4,5,6,7,8,14,15,16,20,21,22,23,24,25,26,28,29,33,34,35,36,37,38,39,40,41,43,46,48,55,78,105,223,236,268,275,315,329,344,359,375,389,403,407,414,863,864,882,894,899,901,902,903,904,906,908,912,915,916,917,918,919,920,921,922,925,929,932,933,934,936,937,940,943,944,946,950,951],use_mkei:[14,23],usec:[811,822,834,873],used:[2,3,4,5,6,7,8,9,10,11,12,14,15,16,18,19,20,21,22,23,24,25,26,28,34,36,37,38,39,40,41,43,46,56,81,98,100,103,121,129,144,223,224,227,228,229,235,241,247,248,254,258,260,264,267,277,288,290,298,315,321,325,326,327,329,330,331,344,345,352,356,359,360,375,403,405,414,416,738,823,845,854,864,868,883,894,895,898,899,900,901,908,909,912,913,915,916,917,919,920,921,922,923,929,932,934,937,939,940,941,942,943,944,946,948,949,951],useful:[8,9,25,26,33,39,69,74,895,899,904,917,934,943,946,947,951],useless:14,user:[0,3,5,6,8,14,15,16,19,20,21,22,23,25,26,33,34,35,36,37,38,39,41,43,48,56,90,136,169,224,227,326,330,331,333,361,551,641,662,728,735,868,895,896,899,901,902,904,906,914,915,916,917,920,933,934,936,937,939,940,942,944,946,949,950,951],user_dn:[5,23],userconfig:21,userdata:[326,331],userdata_out:[356,360],userid:[21,904],usernam:[3,12,21,23,34,36,37,43,319,673,937,940],userok:930,userpolici:[5,23],userprincipalnam:20,uses:[2,3,4,14,15,18,19,20,21,22,23,24,26,28,35,36,37,39,40,43,45,101,246,329,382,383,406,417,419,883,895,899,908,909,910,912,916,922,932,942,943,951],using:[3,6,11,12,14,15,16,18,19,20,21,22,23,24,25,26,28,29,33,34,36,37,38,39,40,41,43,46,48,113,117,125,129,156,228,247,250,267,279,294,298,300,325,327,331,344,354,359,366,375,378,404,618,874,895,898,903,904,906,908,910,913,916,921,922,923,929,930,936,937,940,941,944,946,947,949,950,951],usr:[5,8,12,20,21,23,34,904,906,915,943,944],usual:[3,10,12,20,21,23,25,35,37,39,46,99,287,895,898,904,908,921,937,946,951],utc:23,utf:[46,350,365,373,707,916,917],util:[22,23,34,39,47,902,904,917,939,951],uucp:20,v4_instance_convert:21,v4_realm:21,v4cred:51,v5cred:51,va_list:[48,92,94],vagu:904,val:[198,199,200,201,202,203,204,206,207,208,209,211,212,215,218,219,221,222],valid:[20,21,23,39,43,48,66,83,109,124,129,153,160,224,235,248,260,269,275,298,301,330,333,342,343,345,350,359,365,366,408,414,882,895,896,901,908,912,916,928,937,940,946,950,951],valid_int_bit:787,valid_uint_bit:787,valu:[3,5,6,10,14,15,16,19,20,21,22,23,24,25,26,28,33,34,36,37,38,39,43,46,48,66,83,117,125,126,136,151,153,156,166,224,245,248,252,263,265,269,296,301,333,368,369,371,375,386,388,397,720,726,727,729,731,736,738,794,795,796,835,839,852,863,864,883,894,895,896,898,899,904,905,906,908,909,910,912,913,916,920,922,929,930,932,937,939,940,941,943,944,949,951],valuabl:[46,917],vaniti:38,vararg:91,vari:[15,33,903,915,939,940],variabl:[2,3,4,5,6,7,8,9,10,11,12,15,16,19,20,21,23,24,25,28,30,34,35,37,38,39,40,41,43,48,93,136,141,155,269,282,386,387,895,898,899,905,916,932,933,939,940,941,942,944,945,946,947],variad:[91,417,419],variant:[23,904,916,922],varieti:26,variou:[14,30,43,359,901,905,916,937],vendor:[736,877,943],verbatim:917,verbos:[3,6,15,23,902,916,940],veri:[14,20,21,23,932],verif:[20,21,34,43,46,48,414,895,935,937],verifi:[5,20,21,23,34,37,43,48,241,356,357,358,359,360,361,899,903,916,920,929,936,937,944],verifier_cred_handl:922,verify_ap_req_nofail:21,versa:[37,916],version:[0,2,3,5,6,9,10,14,15,20,23,24,26,29,38,42,43,44,48,155,228,247,310,315,363,375,616,721,819,821,843,848,881,894,898,902,903,904,906,908,910,912,913,916,917,921,927,931,941,943,944,946,947,951],verto:[904,917],vesion:[321,405],veto:928,via:[0,3,6,8,20,21,23,34,35,46,48,274,386,402,824,916,922,924,944,950],vice:[37,916],view:[8,23,34,935],view_polici:23,viola:15,virtual:[15,21],visibl:[14,23,25,916],visit:937,vista:[26,916],visual:916,vnder:14,vno:[3,14,23,310,315,848],volum:916,vopt:46,vpath:[902,903],vprintf:[417,418,419],vtabl:[920,921,929,932],vulner:[14,23,32,46,916,934],wai:[21,23,28,39,43,46,126,236,250,375,894,895,896,898,904,906,916,917,925,930,936,937,949],wait:[8,20,23,39],wake:15,walk:[6,23,936],want:[3,23,28,34,545,551,902,931,936,937,944],warn:[3,23,26,245,906,916,917],warranti:917,wasn:44,weak:[14,20,21,26,41],web:[34,895,916],week:[5,23],weight:39,well:[14,21,23,34,38,43,46,343,648,901,904,916,923],wellknown:[37,46,502,761],went:937,were:[14,15,21,34,43,414,618,895,916,917,937],what:[6,14,19,20,21,23,26,38,43,899,920,921,929,933,936,937,943],whatev:39,whatsoev:917,when:[3,4,6,8,9,10,12,14,15,16,17,20,21,22,23,26,28,29,33,34,36,37,38,39,40,41,43,46,49,65,67,68,72,73,76,77,78,79,85,91,92,93,111,113,115,125,126,132,136,141,143,145,150,153,154,163,164,169,172,173,174,175,176,177,178,180,181,182,183,194,195,224,227,228,229,230,231,235,236,250,254,258,260,261,265,268,272,275,280,282,286,294,310,315,317,318,321,322,324,325,326,327,328,329,330,331,332,335,338,339,344,345,352,354,355,356,357,359,360,361,363,375,389,401,403,405,406,408,736,737,738,895,898,904,906,908,913,915,916,918,922,923,927,930,932,933,934,936,937,939,940,941,943,944,946,949,951],whenev:46,where:[3,4,6,7,8,14,15,17,20,21,23,25,28,39,43,46,317,389,894,895,898,899,902,903,904,909,916,921,937,940,944,951],whether:[4,6,8,10,14,20,21,28,35,36,43,46,48,105,223,241,242,243,245,249,253,255,319,407,903,909,916,917,919,926,933,937,944],which:[3,4,5,6,7,8,9,10,11,12,14,15,19,20,21,22,23,24,25,26,28,29,33,34,35,36,37,38,39,40,41,43,46,126,173,195,229,230,245,250,280,310,330,359,366,368,371,372,882,883,894,895,898,899,901,902,903,904,905,908,909,910,912,913,915,916,917,918,920,921,922,925,926,927,928,929,931,932,933,937,940,943,944,946,949,950,951],whichev:15,whitespac:[3,20,21,23],who:[0,5,16,20,23,25,34,37,936,937],whoami:921,whole:[23,37,141,155,342],whom:[917,936],whose:[3,5,10,15,17,19,21,23,34,38,40,43,46,132,217,229,908,912,937,950],wicker:921,wicker_appear:921,wicker_brac:921,wicker_construct:921,wicker_foot:921,wicker_materi:921,wicker_slat:921,wide:[21,29,36],wiki:[42,902,916],wild:[3,23],wildcard:[19,20,916,949],willi:14,willing:[20,21,26],win:917,winbind:28,winbind_krb5_loc:28,window:[21,26,28,29,42,301,382,383,637,639,684,701,895,899,901,913,916,921,922,932,937],wish:[16,21,34,39,43,250,902,903,904,905,917,922,933,936,937,951],with_realm:[300,341,343],within:[3,15,20,21,23,24,34,35,39,43,48,132,154,252,261,356,360,365,373,386,845,895,910,916,917,922,940,949,951],without:[3,14,19,20,21,23,24,28,32,34,35,36,37,43,133,368,371,538,864,895,899,902,904,913,916,917,936,937,944,951],wkt:11,won:[21,37,937],worcest:917,word:[21,34,937],work:[2,3,4,6,21,23,34,35,36,39,40,43,895,904,916,917,929,930,934,936,937,951],workdai:33,worker:[10,24],workflow:14,workstat:46,worri:[22,902,951],wors:21,worst:14,worth:32,would:[5,6,14,16,17,20,21,23,25,28,32,34,37,38,39,40,43,46,900,916,922,936,937,943,950,951],wrap:[23,48,300,320,922],wrapper:[887,909,910],wrfile:14,writabl:[15,34,316,932],write:[0,6,8,10,11,20,21,22,23,24,28,34,35,251,352,387,895,913,916,921,932,951],writeabl:302,writer:0,written:[3,4,155,848,898,913,917],wrong:[35,37,917,937,944],wsgi:29,www:[22,42,906,916],x11r6:902,x509:[37,916,940],x509_anchor:[21,940],x509_proxi:21,x509_proxy_ca:21,x509_user_ident:[16,21,940],x86:[904,916],x86_64:[904,916],xconsortium:902,xml:906,xore:[21,359],xst:[3,15],xvm:14,xyz:951,yacc:904,year:[45,896,916],yes:[3,5,23,904,940],yet:[6,21,23,26,34,37,38,895,904,925,937],yflag:904,yield:929,you:[0,3,5,12,15,16,17,20,21,22,23,24,28,32,33,34,35,37,39,40,41,735,896,900,902,903,904,905,906,917,934,936,937,939,944,951],your:[0,12,17,20,21,23,26,32,33,34,37,39,902,903,904,917,925,935,937,939,948,951],your_princnam:37,your_realmnam:37,yourdir:34,yourself:[937,951],yymmddhhmmss:896,yyyi:896,yyyymmddhhmmss:896,zanarotti:46,zephyr:[14,917],zero:[3,21,24,39,43,44,48,129,130,203,241,245,260,261,284,298,299,310,738,740,863,908,909,912,913,916,921],zone:[14,39,896],zonetest:14},titles:["Contributing to the MIT Kerberos Documentation","Administration programs","k5srvutil","kadmin","kadmind","kdb5_ldap_util","kdb5_util","kprop","kpropd","kproplog","krb5kdc","ktutil","sserver","Advanced topics","Retiring DES","Application servers","Authentication indicators","Backups of secure hosts","Configuration Files","kadm5.acl","kdc.conf","krb5.conf","Configuring Kerberos with OpenLDAP back-end","Database administration","Database types","Addressing dictionary attack risks","Encryption types","Environment variables","Host configuration","HTTPS proxy configuration","For administrators","Installation guide","UNIX Application Servers","Installing and configuring UNIX client machines","Installing KDCs","Account lockout","OTP Preauthentication","PKINIT configuration","Principal names and DNS","Realm configuration decisions","SPAKE Preauthentication","Troubleshooting","Various links","Developing with GSSAPI","Differences between Heimdal and MIT Kerberos API","For application developers","Initial credentials","Principal manipulation and parsing","krb5 API","krb5_425_conv_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal.","krb5_524_conv_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal.","krb5_524_convert_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials.","krb5_address_compare - Compare two Kerberos addresses.","krb5_address_order - Return an ordering of the specified addresses.","krb5_address_search - Search a list of addresses for a specified address.","krb5_allow_weak_crypto - Allow the application to override the profile\u2019s allow_weak_crypto setting.","krb5_aname_to_localname - Convert a principal name to a local name.","krb5_anonymous_principal - Build an anonymous principal.","krb5_anonymous_realm - Return an anonymous realm data.","krb5_appdefault_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf.","krb5_appdefault_string - Retrieve a string value from the appdefaults section of krb5.conf.","krb5_auth_con_free - Free a krb5_auth_context structure.","krb5_auth_con_genaddrs - Generate auth context addresses from a connected socket.","krb5_auth_con_get_checksum_func - Get the checksum callback from an auth context.","krb5_auth_con_getaddrs - Retrieve address fields from an auth context.","krb5_auth_con_getauthenticator - Retrieve the authenticator from an auth context.","krb5_auth_con_getflags - Retrieve flags from a krb5_auth_context structure.","krb5_auth_con_getkey - Retrieve the session key from an auth context as a keyblock.","krb5_auth_con_getkey_k - Retrieve the session key from an auth context.","krb5_auth_con_getlocalseqnumber - Retrieve the local sequence number from an auth context.","krb5_auth_con_getlocalsubkey","krb5_auth_con_getrcache - Retrieve the replay cache from an auth context.","krb5_auth_con_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock.","krb5_auth_con_getrecvsubkey_k - Retrieve the receiving subkey from an auth context as a keyblock.","krb5_auth_con_getremoteseqnumber - Retrieve the remote sequence number from an auth context.","krb5_auth_con_getremotesubkey","krb5_auth_con_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock.","krb5_auth_con_getsendsubkey_k - Retrieve the send subkey from an auth context.","krb5_auth_con_init - Create and initialize an authentication context.","krb5_auth_con_initivector - Cause an auth context to use cipher state.","krb5_auth_con_set_checksum_func - Set a checksum callback in an auth context.","krb5_auth_con_set_req_cksumtype - Set checksum type in an an auth context.","krb5_auth_con_setaddrs - Set the local and remote addresses in an auth context.","krb5_auth_con_setflags - Set a flags field in a krb5_auth_context structure.","krb5_auth_con_setports - Set local and remote port fields in an auth context.","krb5_auth_con_setrcache - Set the replay cache in an auth context.","krb5_auth_con_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock.","krb5_auth_con_setrecvsubkey_k - Set the receiving subkey in an auth context.","krb5_auth_con_setsendsubkey - Set the send subkey in an auth context with a keyblock.","krb5_auth_con_setsendsubkey_k - Set the send subkey in an auth context.","krb5_auth_con_setuseruserkey - Set the session key in an auth context.","krb5_build_principal - Build a principal name using null-terminated strings.","krb5_build_principal_alloc_va - Build a principal name, using a precomputed variable argument list.","krb5_build_principal_ext - Build a principal name using length-counted strings.","krb5_build_principal_va","krb5_c_block_size - Return cipher block size.","krb5_c_checksum_length - Return the length of checksums for a checksum type.","krb5_c_crypto_length - Return a length of a message field specific to the encryption type.","krb5_c_crypto_length_iov - Fill in lengths for header, trailer and padding in a IOV array.","krb5_c_decrypt - Decrypt data using a key (operates on keyblock).","krb5_c_decrypt_iov - Decrypt data in place supporting AEAD (operates on keyblock).","krb5_c_derive_prfplus - Derive a key using some input data (via RFC 6113 PRF+).","krb5_c_encrypt - Encrypt data using a key (operates on keyblock).","krb5_c_encrypt_iov - Encrypt data in place supporting AEAD (operates on keyblock).","krb5_c_encrypt_length - Compute encrypted data length.","krb5_c_enctype_compare - Compare two encryption types.","krb5_c_free_state - Free a cipher state previously allocated by krb5_c_init_state() .","krb5_c_fx_cf2_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings.","krb5_c_init_state - Initialize a new cipher state.","krb5_c_is_coll_proof_cksum - Test whether a checksum type is collision-proof.","krb5_c_is_keyed_cksum - Test whether a checksum type is keyed.","krb5_c_keyed_checksum_types - Return a list of keyed checksum types usable with an encryption type.","krb5_c_keylengths - Return length of the specified key in bytes.","krb5_c_make_checksum - Compute a checksum (operates on keyblock).","krb5_c_make_checksum_iov - Fill in a checksum element in IOV array (operates on keyblock)","krb5_c_make_random_key - Generate an enctype-specific random encryption key.","krb5_c_padding_length - Return a number of padding octets.","krb5_c_prf - Generate enctype-specific pseudo-random bytes.","krb5_c_prf_length - Get the output length of pseudo-random functions for an encryption type.","krb5_c_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+.","krb5_c_random_add_entropy","krb5_c_random_make_octets - Generate pseudo-random bytes.","krb5_c_random_os_entropy","krb5_c_random_seed","krb5_c_random_to_key - Generate an enctype-specific key from random data.","krb5_c_string_to_key - Convert a string (such a password) to a key.","krb5_c_string_to_key_with_params - Convert a string (such as a password) to a key with additional parameters.","krb5_c_valid_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type.","krb5_c_valid_enctype - Verify that a specified encryption type is a valid Kerberos encryption type.","krb5_c_verify_checksum - Verify a checksum (operates on keyblock).","krb5_c_verify_checksum_iov - Validate a checksum element in IOV array (operates on keyblock).","krb5_calculate_checksum","krb5_cc_cache_match - Find a credential cache with a specified client principal.","krb5_cc_close - Close a credential cache handle.","krb5_cc_copy_creds - Copy a credential cache.","krb5_cc_default - Resolve the default credential cache name.","krb5_cc_default_name - Return the name of the default credential cache.","krb5_cc_destroy - Destroy a credential cache.","krb5_cc_dup - Duplicate ccache handle.","krb5_cc_end_seq_get - Finish a series of sequential processing credential cache entries.","krb5_cc_gen_new","krb5_cc_get_config - Get a configuration value from a credential cache.","krb5_cc_get_flags - Retrieve flags from a credential cache structure.","krb5_cc_get_full_name - Retrieve the full name of a credential cache.","krb5_cc_get_name - Retrieve the name, but not type of a credential cache.","krb5_cc_get_principal - Get the default principal of a credential cache.","krb5_cc_get_type - Retrieve the type of a credential cache.","krb5_cc_initialize - Initialize a credential cache.","krb5_cc_move - Move a credential cache.","krb5_cc_new_unique - Create a new credential cache of the specified type with a unique name.","krb5_cc_next_cred - Retrieve the next entry from the credential cache.","krb5_cc_remove_cred - Remove credentials from a credential cache.","krb5_cc_resolve - Resolve a credential cache name.","krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache.","krb5_cc_select - Select a credential cache to use with a server principal.","krb5_cc_set_config - Store a configuration value in a credential cache.","krb5_cc_set_default_name - Set the default credential cache name.","krb5_cc_set_flags - Set options flags on a credential cache.","krb5_cc_start_seq_get - Prepare to sequentially read every credential in a credential cache.","krb5_cc_store_cred - Store credentials in a credential cache.","krb5_cc_support_switch - Determine whether a credential cache type supports switching.","krb5_cc_switch - Make a credential cache the primary cache for its collection.","krb5_cccol_cursor_free - Free a credential cache collection cursor.","krb5_cccol_cursor_new - Prepare to iterate over the collection of known credential caches.","krb5_cccol_cursor_next - Get the next credential cache in the collection.","krb5_cccol_have_content - Check if the credential cache collection contains any initialized caches.","krb5_change_password - Change a password for an existing Kerberos account.","krb5_check_clockskew - Check if a timestamp is within the allowed clock skew of the current time.","krb5_checksum_size","krb5_chpw_message - Get a result message for changing or setting a password.","krb5_cksumtype_to_string - Convert a checksum type to a string.","krb5_clear_error_message - Clear the extended error message in a context.","krb5_copy_addresses - Copy an array of addresses.","krb5_copy_authdata - Copy an authorization data list.","krb5_copy_authenticator - Copy a krb5_authenticator structure.","krb5_copy_checksum - Copy a krb5_checksum structure.","krb5_copy_context - Copy a krb5_context structure.","krb5_copy_creds - Copy a krb5_creds structure.","krb5_copy_data - Copy a krb5_data object.","krb5_copy_error_message - Copy the most recent extended error message from one context to another.","krb5_copy_keyblock - Copy a keyblock.","krb5_copy_keyblock_contents - Copy the contents of a keyblock.","krb5_copy_principal - Copy a principal.","krb5_copy_ticket - Copy a krb5_ticket structure.","krb5_decode_authdata_container - Unwrap authorization data.","krb5_decode_ticket - Decode an ASN.1-formatted ticket.","krb5_decrypt","krb5_deltat_to_string - Convert a relative time value to a string.","krb5_eblock_enctype","krb5_encode_authdata_container - Wrap authorization data in a container.","krb5_encrypt","krb5_encrypt_size","krb5_enctype_to_name - Convert an encryption type to a name or alias.","krb5_enctype_to_string - Convert an encryption type to a string.","krb5_expand_hostname - Canonicalize a hostname, possibly using name service.","krb5_find_authdata - Find authorization data elements.","krb5_finish_key","krb5_finish_random_key","krb5_free_addresses - Free the data stored in array of addresses.","krb5_free_ap_rep_enc_part - Free a krb5_ap_rep_enc_part structure.","krb5_free_authdata - Free the storage assigned to array of authentication data.","krb5_free_authenticator - Free a krb5_authenticator structure.","krb5_free_checksum - Free a krb5_checksum structure.","krb5_free_checksum_contents - Free the contents of a krb5_checksum structure.","krb5_free_cksumtypes - Free an array of checksum types.","krb5_free_context - Free a krb5 library context.","krb5_free_cred_contents - Free the contents of a krb5_creds structure.","krb5_free_creds - Free a krb5_creds structure.","krb5_free_data - Free a krb5_data structure.","krb5_free_data_contents - Free the contents of a krb5_data structure and zero the data field.","krb5_free_default_realm - Free a default realm string returned by krb5_get_default_realm() .","krb5_free_enctypes - Free an array of encryption types.","krb5_free_error - Free an error allocated by krb5_read_error() or krb5_sendauth() .","krb5_free_error_message - Free an error message generated by krb5_get_error_message() .","krb5_free_host_realm - Free the memory allocated by krb5_get_host_realm() .","krb5_free_keyblock - Free a krb5_keyblock structure.","krb5_free_keyblock_contents - Free the contents of a krb5_keyblock structure.","krb5_free_keytab_entry_contents - Free the contents of a key table entry.","krb5_free_principal - Free the storage assigned to a principal.","krb5_free_string - Free a string allocated by a krb5 function.","krb5_free_tgt_creds - Free an array of credential structures.","krb5_free_ticket - Free a ticket.","krb5_free_unparsed_name - Free a string representation of a principal.","krb5_fwd_tgt_creds - Get a forwarded TGT and format a KRB-CRED message.","krb5_get_credentials - Get an additional ticket.","krb5_get_credentials_renew","krb5_get_credentials_validate","krb5_get_default_realm - Retrieve the default realm.","krb5_get_error_message - Get the (possibly extended) error message for a code.","krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC.","krb5_get_fallback_host_realm","krb5_get_host_realm - Get the Kerberos realm names for a host.","krb5_get_in_tkt_with_keytab","krb5_get_in_tkt_with_password","krb5_get_in_tkt_with_skey","krb5_get_init_creds_keytab - Get initial credentials using a key table.","krb5_get_init_creds_opt_alloc - Allocate a new initial credential options structure.","krb5_get_init_creds_opt_free - Free initial credential options.","krb5_get_init_creds_opt_get_fast_flags - Retrieve FAST flags from initial credential options.","krb5_get_init_creds_opt_init","krb5_get_init_creds_opt_set_address_list - Set address restrictions in initial credential options.","krb5_get_init_creds_opt_set_anonymous - Set or unset the anonymous flag in initial credential options.","krb5_get_init_creds_opt_set_canonicalize - Set or unset the canonicalize flag in initialcredential options.","krb5_get_init_creds_opt_set_change_password_prompt - Set or unset change-password-prompt flag in initial credential options.","krb5_get_init_creds_opt_set_etype_list - Set allowable encryption types in initial credential options.","krb5_get_init_creds_opt_set_expire_callback - Set an expiration callback in initial credential options.","krb5_get_init_creds_opt_set_fast_ccache - Set FAST armor cache in initial credential options.","krb5_get_init_creds_opt_set_fast_ccache_name - Set location of FAST armor ccache in initial credential options.","krb5_get_init_creds_opt_set_fast_flags - Set FAST flags in initial credential options.","krb5_get_init_creds_opt_set_forwardable - Set or unset the forwardable flag in initial credential options.","krb5_get_init_creds_opt_set_in_ccache - Set an input credential cache in initial credential options.","krb5_get_init_creds_opt_set_out_ccache - Set an output credential cache in initial credential options.","krb5_get_init_creds_opt_set_pa - Supply options for preauthentication in initial credential options.","krb5_get_init_creds_opt_set_pac_request - Ask the KDC to include or not include a PAC in the ticket.","krb5_get_init_creds_opt_set_preauth_list - Set preauthentication types in initial credential options.","krb5_get_init_creds_opt_set_proxiable - Set or unset the proxiable flag in initial credential options.","krb5_get_init_creds_opt_set_renew_life - Set the ticket renewal lifetime in initial credential options.","krb5_get_init_creds_opt_set_responder - Set the responder function in initial credential options.","krb5_get_init_creds_opt_set_salt - Set salt for optimistic preauthentication in initial credential options.","krb5_get_init_creds_opt_set_tkt_life - Set the ticket lifetime in initial credential options.","krb5_get_init_creds_password - Get initial credentials using a password.","krb5_get_permitted_enctypes - Return a list of encryption types permitted for session keys.","krb5_get_profile - Retrieve configuration profile from the context.","krb5_get_prompt_types - Get prompt types array from a context.","krb5_get_renewed_creds - Get renewed credential from KDC using an existing credential.","krb5_get_server_rcache - Generate a replay cache object for server use and open it.","krb5_get_time_offsets - Return the time offsets from the os context.","krb5_get_validated_creds - Get validated credentials from the KDC.","krb5_init_context - Create a krb5 library context.","krb5_init_context_profile - Create a krb5 library context using a specified profile.","krb5_init_creds_free - Free an initial credentials context.","krb5_init_creds_get - Acquire credentials using an initial credentials context.","krb5_init_creds_get_creds - Retrieve acquired credentials from an initial credentials context.","krb5_init_creds_get_error - Get the last error from KDC from an initial credentials context.","krb5_init_creds_get_times - Retrieve ticket times from an initial credentials context.","krb5_init_creds_init - Create a context for acquiring initial credentials.","krb5_init_creds_set_keytab - Specify a keytab to use for acquiring initial credentials.","krb5_init_creds_set_password - Set a password for acquiring initial credentials.","krb5_init_creds_set_service - Specify a service principal for acquiring initial credentials.","krb5_init_creds_step - Get the next KDC request for acquiring initial credentials.","krb5_init_keyblock - Initialize an empty krb5_keyblock .","krb5_init_random_key","krb5_init_secure_context - Create a krb5 library context using only configuration files.","krb5_is_config_principal - Test whether a principal is a configuration principal.","krb5_is_referral_realm - Check for a match with KRB5_REFERRAL_REALM.","krb5_is_thread_safe - Test whether the Kerberos library was built with multithread support.","krb5_k_create_key - Create a krb5_key from the enctype and key data in a keyblock.","krb5_k_decrypt - Decrypt data using a key (operates on opaque key).","krb5_k_decrypt_iov - Decrypt data in place supporting AEAD (operates on opaque key).","krb5_k_encrypt - Encrypt data using a key (operates on opaque key).","krb5_k_encrypt_iov - Encrypt data in place supporting AEAD (operates on opaque key).","krb5_k_free_key - Decrement the reference count on a key and free it if it hits zero.","krb5_k_key_enctype - Retrieve the enctype of a krb5_key structure.","krb5_k_key_keyblock - Retrieve a copy of the keyblock from a krb5_key structure.","krb5_k_make_checksum - Compute a checksum (operates on opaque key).","krb5_k_make_checksum_iov - Fill in a checksum element in IOV array (operates on opaque key)","krb5_k_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key).","krb5_k_reference_key - Increment the reference count on a key.","krb5_k_verify_checksum - Verify a checksum (operates on opaque key).","krb5_k_verify_checksum_iov - Validate a checksum element in IOV array (operates on opaque key).","krb5_kdc_sign_ticket - Sign a PAC, possibly including a ticket signature.","krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.","krb5_kt_add_entry - Add a new entry to a key table.","krb5_kt_client_default - Resolve the default client key table.","krb5_kt_close - Close a key table handle.","krb5_kt_default - Resolve the default key table.","krb5_kt_default_name - Get the default key table name.","krb5_kt_dup - Duplicate keytab handle.","krb5_kt_end_seq_get - Release a keytab cursor.","krb5_kt_free_entry","krb5_kt_get_entry - Get an entry from a key table.","krb5_kt_get_name - Get a key table name.","krb5_kt_get_type - Return the type of a key table.","krb5_kt_have_content - Check if a keytab exists and contains entries.","krb5_kt_next_entry - Retrieve the next entry from the key table.","krb5_kt_read_service_key - Retrieve a service key from a key table.","krb5_kt_remove_entry - Remove an entry from a key table.","krb5_kt_resolve - Get a handle for a key table.","krb5_kt_start_seq_get - Start a sequential retrieval of key table entries.","krb5_kuserok - Determine if a principal is authorized to log in as a local user.","krb5_make_authdata_kdc_issued - Encode and sign AD-KDCIssued authorization data.","krb5_marshal_credentials - Serialize a krb5_creds object.","krb5_merge_authdata - Merge two authorization data lists into a new list.","krb5_mk_1cred - Format a KRB-CRED message for a single set of credentials.","krb5_mk_error - Format and encode a KRB_ERROR message.","krb5_mk_ncred - Format a KRB-CRED message for an array of credentials.","krb5_mk_priv - Format a KRB-PRIV message.","krb5_mk_rep - Format and encrypt a KRB_AP_REP message.","krb5_mk_rep_dce - Format and encrypt a KRB_AP_REP message for DCE RPC.","krb5_mk_req - Create a KRB_AP_REQ message.","krb5_mk_req_extended - Create a KRB_AP_REQ message using supplied credentials.","krb5_mk_safe - Format a KRB-SAFE message.","krb5_os_localaddr - Return all interface addresses for this host.","krb5_pac_add_buffer - Add a buffer to a PAC handle.","krb5_pac_free - Free a PAC handle.","krb5_pac_get_buffer - Retrieve a buffer value from a PAC.","krb5_pac_get_client_info - Read client information from a PAC.","krb5_pac_get_types - Return an array of buffer types in a PAC handle.","krb5_pac_init - Create an empty Privilege Attribute Certificate (PAC) handle.","krb5_pac_parse - Unparse an encoded PAC into a new handle.","krb5_pac_sign","krb5_pac_sign_ext","krb5_pac_verify - Verify a PAC.","krb5_pac_verify_ext - Verify a PAC, possibly from a specified realm.","krb5_parse_name - Convert a string principal name to a krb5_principal structure.","krb5_parse_name_flags - Convert a string principal name to a krb5_principal with flags.","krb5_prepend_error_message - Add a prefix to the message for an error code.","krb5_principal2salt - Convert a principal name into the default salt for that principal.","krb5_principal_compare - Compare two principals.","krb5_principal_compare_any_realm - Compare two principals ignoring realm components.","krb5_principal_compare_flags - Compare two principals with additional flags.","krb5_process_key","krb5_prompter_posix - Prompt user for password.","krb5_random_key","krb5_rd_cred - Read and validate a KRB-CRED message.","krb5_rd_error - Decode a KRB-ERROR message.","krb5_rd_priv - Process a KRB-PRIV message.","krb5_rd_rep - Parse and decrypt a KRB_AP_REP message.","krb5_rd_rep_dce - Parse and decrypt a KRB_AP_REP message for DCE RPC.","krb5_rd_req - Parse and decrypt a KRB_AP_REQ message.","krb5_rd_safe - Process KRB-SAFE message.","krb5_read_password - Read a password from keyboard input.","krb5_realm_compare - Compare the realms of two principals.","krb5_recvauth - Server function for sendauth protocol.","krb5_recvauth_version - Server function for sendauth protocol with version parameter.","krb5_responder_get_challenge - Retrieve the challenge data for a given question in the responder context.","krb5_responder_list_questions - List the question names contained in the responder context.","krb5_responder_otp_challenge_free - Free the value returned by krb5_responder_otp_get_challenge() .","krb5_responder_otp_get_challenge - Decode the KRB5_RESPONDER_QUESTION_OTP to a C struct.","krb5_responder_otp_set_answer - Answer the KRB5_RESPONDER_QUESTION_OTP question.","krb5_responder_pkinit_challenge_free - Free the value returned by krb5_responder_pkinit_get_challenge() .","krb5_responder_pkinit_get_challenge - Decode the KRB5_RESPONDER_QUESTION_PKINIT to a C struct.","krb5_responder_pkinit_set_answer - Answer the KRB5_RESPONDER_QUESTION_PKINIT question for one identity.","krb5_responder_set_answer - Answer a named question in the responder context.","krb5_salttype_to_string - Convert a salt type to a string.","krb5_sendauth - Client function for sendauth protocol.","krb5_server_decrypt_ticket_keytab - Decrypt a ticket using the specified key table.","krb5_set_default_realm - Override the default realm for the specified context.","krb5_set_default_tgs_enctypes - Set default TGS encryption types in a krb5_context structure.","krb5_set_error_message - Set an extended error message for an error code.","krb5_set_kdc_recv_hook - Set a KDC post-receive hook function.","krb5_set_kdc_send_hook - Set a KDC pre-send hook function.","krb5_set_password - Set a password for a principal using specified credentials.","krb5_set_password_using_ccache - Set a password for a principal using cached credentials.","krb5_set_principal_realm - Set the realm field of a principal.","krb5_set_real_time - Set time offset field in a krb5_context structure.","krb5_set_trace_callback - Specify a callback function for trace events.","krb5_set_trace_filename - Specify a file name for directing trace events.","krb5_sname_match - Test whether a principal matches a matching principal.","krb5_sname_to_principal - Generate a full principal name from a service name.","krb5_string_to_cksumtype - Convert a string to a checksum type.","krb5_string_to_deltat - Convert a string to a delta time value.","krb5_string_to_enctype - Convert a string to an encryption type.","krb5_string_to_key","krb5_string_to_salttype - Convert a string to a salt type.","krb5_string_to_timestamp - Convert a string to a timestamp.","krb5_timeofday - Retrieve the current time with context specific time offset adjustment.","krb5_timestamp_to_sfstring - Convert a timestamp to a string, with optional output padding.","krb5_timestamp_to_string - Convert a timestamp to a string.","krb5_tkt_creds_free - Free a TGS request context.","krb5_tkt_creds_get - Synchronously obtain credentials using a TGS request context.","krb5_tkt_creds_get_creds - Retrieve acquired credentials from a TGS request context.","krb5_tkt_creds_get_times - Retrieve ticket times from a TGS request context.","krb5_tkt_creds_init - Create a context to get credentials from a KDC\u2019s Ticket Granting Service.","krb5_tkt_creds_step - Get the next KDC request in a TGS exchange.","krb5_unmarshal_credentials - Deserialize a krb5_creds object.","krb5_unparse_name - Convert a krb5_principal structure to a string representation.","krb5_unparse_name_ext - Convert krb5_principal structure to string and length.","krb5_unparse_name_flags - Convert krb5_principal structure to a string with flags.","krb5_unparse_name_flags_ext - Convert krb5_principal structure to string format with flags.","krb5_us_timeofday - Retrieve the system time of day, in sec and ms, since the epoch.","krb5_use_enctype","krb5_verify_authdata_kdc_issued - Unwrap and verify AD-KDCIssued authorization data.","krb5_verify_checksum","krb5_verify_init_creds - Verify initial credentials against a keytab.","krb5_verify_init_creds_opt_init - Initialize a credential verification options structure.","krb5_verify_init_creds_opt_set_ap_req_nofail - Set whether credential verification is required.","krb5_vprepend_error_message - Add a prefix to the message for an error code using a va_list.","krb5_vset_error_message - Set an extended error message for an error code using a va_list.","krb5_vwrap_error_message - Add a prefix to a different error code\u2019s message using a va_list.","krb5_wrap_error_message - Add a prefix to a different error code\u2019s message.","Complete reference - API and datatypes","ADDRTYPE_ADDRPORT","ADDRTYPE_CHAOS","ADDRTYPE_DDP","ADDRTYPE_INET","ADDRTYPE_INET6","ADDRTYPE_IPPORT","ADDRTYPE_ISO","ADDRTYPE_IS_LOCAL","ADDRTYPE_NETBIOS","ADDRTYPE_XNS","AD_TYPE_EXTERNAL","AD_TYPE_FIELD_TYPE_MASK","AD_TYPE_REGISTERED","AD_TYPE_RESERVED","AP_OPTS_ETYPE_NEGOTIATION","AP_OPTS_MUTUAL_REQUIRED","AP_OPTS_RESERVED","AP_OPTS_USE_SESSION_KEY","AP_OPTS_USE_SUBKEY","AP_OPTS_WIRE_MASK","CKSUMTYPE_CMAC_CAMELLIA128","CKSUMTYPE_CMAC_CAMELLIA256","CKSUMTYPE_CRC32","CKSUMTYPE_DESCBC","CKSUMTYPE_HMAC_MD5_ARCFOUR","CKSUMTYPE_HMAC_SHA1_96_AES128","CKSUMTYPE_HMAC_SHA1_96_AES256","CKSUMTYPE_HMAC_SHA1_DES3","CKSUMTYPE_HMAC_SHA256_128_AES128","CKSUMTYPE_HMAC_SHA384_192_AES256","CKSUMTYPE_MD5_HMAC_ARCFOUR","CKSUMTYPE_NIST_SHA","CKSUMTYPE_RSA_MD4","CKSUMTYPE_RSA_MD4_DES","CKSUMTYPE_RSA_MD5","CKSUMTYPE_RSA_MD5_DES","CKSUMTYPE_SHA1","ENCTYPE_AES128_CTS_HMAC_SHA1_96","ENCTYPE_AES128_CTS_HMAC_SHA256_128","ENCTYPE_AES256_CTS_HMAC_SHA1_96","ENCTYPE_AES256_CTS_HMAC_SHA384_192","ENCTYPE_ARCFOUR_HMAC","ENCTYPE_ARCFOUR_HMAC_EXP","ENCTYPE_CAMELLIA128_CTS_CMAC","ENCTYPE_CAMELLIA256_CTS_CMAC","ENCTYPE_DES3_CBC_ENV","ENCTYPE_DES3_CBC_RAW","ENCTYPE_DES3_CBC_SHA","ENCTYPE_DES3_CBC_SHA1","ENCTYPE_DES_CBC_CRC","ENCTYPE_DES_CBC_MD4","ENCTYPE_DES_CBC_MD5","ENCTYPE_DES_CBC_RAW","ENCTYPE_DES_HMAC_SHA1","ENCTYPE_DSA_SHA1_CMS","ENCTYPE_MD5_RSA_CMS","ENCTYPE_NULL","ENCTYPE_RC2_CBC_ENV","ENCTYPE_RSA_ENV","ENCTYPE_RSA_ES_OAEP_ENV","ENCTYPE_SHA1_RSA_CMS","ENCTYPE_UNKNOWN","KDC_OPT_ALLOW_POSTDATE","KDC_OPT_CANONICALIZE","KDC_OPT_CNAME_IN_ADDL_TKT","KDC_OPT_DISABLE_TRANSITED_CHECK","KDC_OPT_ENC_TKT_IN_SKEY","KDC_OPT_FORWARDABLE","KDC_OPT_FORWARDED","KDC_OPT_POSTDATED","KDC_OPT_PROXIABLE","KDC_OPT_PROXY","KDC_OPT_RENEW","KDC_OPT_RENEWABLE","KDC_OPT_RENEWABLE_OK","KDC_OPT_REQUEST_ANONYMOUS","KDC_OPT_VALIDATE","KDC_TKT_COMMON_MASK","KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE","KRB5_ANONYMOUS_PRINCSTR","KRB5_ANONYMOUS_REALMSTR","KRB5_AP_REP","KRB5_AP_REQ","KRB5_AS_REP","KRB5_AS_REQ","KRB5_AUTHDATA_AND_OR","KRB5_AUTHDATA_AP_OPTIONS","KRB5_AUTHDATA_AUTH_INDICATOR","KRB5_AUTHDATA_CAMMAC","KRB5_AUTHDATA_ETYPE_NEGOTIATION","KRB5_AUTHDATA_FX_ARMOR","KRB5_AUTHDATA_IF_RELEVANT","KRB5_AUTHDATA_INITIAL_VERIFIED_CAS","KRB5_AUTHDATA_KDC_ISSUED","KRB5_AUTHDATA_MANDATORY_FOR_KDC","KRB5_AUTHDATA_OSF_DCE","KRB5_AUTHDATA_SESAME","KRB5_AUTHDATA_SIGNTICKET","KRB5_AUTHDATA_WIN2K_PAC","KRB5_AUTH_CONTEXT_DO_SEQUENCE","KRB5_AUTH_CONTEXT_DO_TIME","KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR","KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR","KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR","KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR","KRB5_AUTH_CONTEXT_PERMIT_ALL","KRB5_AUTH_CONTEXT_RET_SEQUENCE","KRB5_AUTH_CONTEXT_RET_TIME","KRB5_AUTH_CONTEXT_USE_SUBKEY","KRB5_CRED","KRB5_CRYPTO_TYPE_CHECKSUM","KRB5_CRYPTO_TYPE_DATA","KRB5_CRYPTO_TYPE_EMPTY","KRB5_CRYPTO_TYPE_HEADER","KRB5_CRYPTO_TYPE_PADDING","KRB5_CRYPTO_TYPE_SIGN_ONLY","KRB5_CRYPTO_TYPE_STREAM","KRB5_CRYPTO_TYPE_TRAILER","KRB5_CYBERSAFE_SECUREID","KRB5_DOMAIN_X500_COMPRESS","KRB5_ENCPADATA_REQ_ENC_PA_REP","KRB5_ERROR","KRB5_FAST_REQUIRED","KRB5_GC_CACHED","KRB5_GC_CANONICALIZE","KRB5_GC_CONSTRAINED_DELEGATION","KRB5_GC_FORWARDABLE","KRB5_GC_NO_STORE","KRB5_GC_NO_TRANSIT_CHECK","KRB5_GC_USER_USER","KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST","KRB5_GET_INIT_CREDS_OPT_ANONYMOUS","KRB5_GET_INIT_CREDS_OPT_CANONICALIZE","KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT","KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST","KRB5_GET_INIT_CREDS_OPT_FORWARDABLE","KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST","KRB5_GET_INIT_CREDS_OPT_PROXIABLE","KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE","KRB5_GET_INIT_CREDS_OPT_SALT","KRB5_GET_INIT_CREDS_OPT_TKT_LIFE","KRB5_INIT_CONTEXT_KDC","KRB5_INIT_CONTEXT_SECURE","KRB5_INIT_CREDS_STEP_FLAG_CONTINUE","KRB5_INT16_MAX","KRB5_INT16_MIN","KRB5_INT32_MAX","KRB5_INT32_MIN","KRB5_KEYUSAGE_AD_ITE","KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM","KRB5_KEYUSAGE_AD_MTE","KRB5_KEYUSAGE_AD_SIGNEDPATH","KRB5_KEYUSAGE_APP_DATA_CKSUM","KRB5_KEYUSAGE_APP_DATA_ENCRYPT","KRB5_KEYUSAGE_AP_REP_ENCPART","KRB5_KEYUSAGE_AP_REQ_AUTH","KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM","KRB5_KEYUSAGE_AS_REP_ENCPART","KRB5_KEYUSAGE_AS_REQ","KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS","KRB5_KEYUSAGE_CAMMAC","KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT","KRB5_KEYUSAGE_ENC_CHALLENGE_KDC","KRB5_KEYUSAGE_FAST_ENC","KRB5_KEYUSAGE_FAST_FINISHED","KRB5_KEYUSAGE_FAST_REP","KRB5_KEYUSAGE_FAST_REQ_CHKSUM","KRB5_KEYUSAGE_GSS_TOK_MIC","KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG","KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV","KRB5_KEYUSAGE_IAKERB_FINISHED","KRB5_KEYUSAGE_KDC_REP_TICKET","KRB5_KEYUSAGE_KRB_CRED_ENCPART","KRB5_KEYUSAGE_KRB_ERROR_CKSUM","KRB5_KEYUSAGE_KRB_PRIV_ENCPART","KRB5_KEYUSAGE_KRB_SAFE_CKSUM","KRB5_KEYUSAGE_PA_AS_FRESHNESS","KRB5_KEYUSAGE_PA_FX_COOKIE","KRB5_KEYUSAGE_PA_OTP_REQUEST","KRB5_KEYUSAGE_PA_PKINIT_KX","KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY","KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST","KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM","KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID","KRB5_KEYUSAGE_PA_SAM_RESPONSE","KRB5_KEYUSAGE_SPAKE","KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY","KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY","KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY","KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY","KRB5_KEYUSAGE_TGS_REQ_AUTH","KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM","KRB5_KPASSWD_ACCESSDENIED","KRB5_KPASSWD_AUTHERROR","KRB5_KPASSWD_BAD_VERSION","KRB5_KPASSWD_HARDERROR","KRB5_KPASSWD_INITIAL_FLAG_NEEDED","KRB5_KPASSWD_MALFORMED","KRB5_KPASSWD_SOFTERROR","KRB5_KPASSWD_SUCCESS","KRB5_LRQ_ALL_ACCT_EXPTIME","KRB5_LRQ_ALL_LAST_INITIAL","KRB5_LRQ_ALL_LAST_RENEWAL","KRB5_LRQ_ALL_LAST_REQ","KRB5_LRQ_ALL_LAST_TGT","KRB5_LRQ_ALL_LAST_TGT_ISSUED","KRB5_LRQ_ALL_PW_EXPTIME","KRB5_LRQ_NONE","KRB5_LRQ_ONE_ACCT_EXPTIME","KRB5_LRQ_ONE_LAST_INITIAL","KRB5_LRQ_ONE_LAST_RENEWAL","KRB5_LRQ_ONE_LAST_REQ","KRB5_LRQ_ONE_LAST_TGT","KRB5_LRQ_ONE_LAST_TGT_ISSUED","KRB5_LRQ_ONE_PW_EXPTIME","KRB5_NT_ENTERPRISE_PRINCIPAL","KRB5_NT_ENT_PRINCIPAL_AND_ID","KRB5_NT_MS_PRINCIPAL","KRB5_NT_MS_PRINCIPAL_AND_ID","KRB5_NT_PRINCIPAL","KRB5_NT_SMTP_NAME","KRB5_NT_SRV_HST","KRB5_NT_SRV_INST","KRB5_NT_SRV_XHST","KRB5_NT_UID","KRB5_NT_UNKNOWN","KRB5_NT_WELLKNOWN","KRB5_NT_X500_PRINCIPAL","KRB5_PAC_ATTRIBUTES_INFO","KRB5_PAC_CLIENT_CLAIMS","KRB5_PAC_CLIENT_INFO","KRB5_PAC_CREDENTIALS_INFO","KRB5_PAC_DELEGATION_INFO","KRB5_PAC_DEVICE_CLAIMS","KRB5_PAC_DEVICE_INFO","KRB5_PAC_LOGON_INFO","KRB5_PAC_PRIVSVR_CHECKSUM","KRB5_PAC_REQUESTOR","KRB5_PAC_SERVER_CHECKSUM","KRB5_PAC_TICKET_CHECKSUM","KRB5_PAC_UPN_DNS_INFO","KRB5_PADATA_AFS3_SALT","KRB5_PADATA_AP_REQ","KRB5_PADATA_AS_CHECKSUM","KRB5_PADATA_AS_FRESHNESS","KRB5_PADATA_ENCRYPTED_CHALLENGE","KRB5_PADATA_ENC_SANDIA_SECURID","KRB5_PADATA_ENC_TIMESTAMP","KRB5_PADATA_ENC_UNIX_TIME","KRB5_PADATA_ETYPE_INFO","KRB5_PADATA_ETYPE_INFO2","KRB5_PADATA_FOR_USER","KRB5_PADATA_FX_COOKIE","KRB5_PADATA_FX_ERROR","KRB5_PADATA_FX_FAST","KRB5_PADATA_GET_FROM_TYPED_DATA","KRB5_PADATA_NONE","KRB5_PADATA_OSF_DCE","KRB5_PADATA_OTP_CHALLENGE","KRB5_PADATA_OTP_PIN_CHANGE","KRB5_PADATA_OTP_REQUEST","KRB5_PADATA_PAC_OPTIONS","KRB5_PADATA_PAC_REQUEST","KRB5_PADATA_PKINIT_KX","KRB5_PADATA_PK_AS_REP","KRB5_PADATA_PK_AS_REP_OLD","KRB5_PADATA_PK_AS_REQ","KRB5_PADATA_PK_AS_REQ_OLD","KRB5_PADATA_PW_SALT","KRB5_PADATA_REDHAT_IDP_OAUTH2","KRB5_PADATA_REFERRAL","KRB5_PADATA_S4U_X509_USER","KRB5_PADATA_SAM_CHALLENGE","KRB5_PADATA_SAM_CHALLENGE_2","KRB5_PADATA_SAM_REDIRECT","KRB5_PADATA_SAM_RESPONSE","KRB5_PADATA_SAM_RESPONSE_2","KRB5_PADATA_SESAME","KRB5_PADATA_SPAKE","KRB5_PADATA_SVR_REFERRAL_INFO","KRB5_PADATA_TGS_REQ","KRB5_PADATA_USE_SPECIFIED_KVNO","KRB5_PRINCIPAL_COMPARE_CASEFOLD","KRB5_PRINCIPAL_COMPARE_ENTERPRISE","KRB5_PRINCIPAL_COMPARE_IGNORE_REALM","KRB5_PRINCIPAL_COMPARE_UTF8","KRB5_PRINCIPAL_PARSE_ENTERPRISE","KRB5_PRINCIPAL_PARSE_IGNORE_REALM","KRB5_PRINCIPAL_PARSE_NO_DEF_REALM","KRB5_PRINCIPAL_PARSE_NO_REALM","KRB5_PRINCIPAL_PARSE_REQUIRE_REALM","KRB5_PRINCIPAL_UNPARSE_DISPLAY","KRB5_PRINCIPAL_UNPARSE_NO_REALM","KRB5_PRINCIPAL_UNPARSE_SHORT","KRB5_PRIV","KRB5_PROMPT_TYPE_NEW_PASSWORD","KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN","KRB5_PROMPT_TYPE_PASSWORD","KRB5_PROMPT_TYPE_PREAUTH","KRB5_PVNO","KRB5_REALM_BRANCH_CHAR","KRB5_RECVAUTH_BADAUTHVERS","KRB5_RECVAUTH_SKIP_VERSION","KRB5_REFERRAL_REALM","KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN","KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN","KRB5_RESPONDER_OTP_FLAGS_NEXTOTP","KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN","KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC","KRB5_RESPONDER_OTP_FORMAT_DECIMAL","KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL","KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW","KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY","KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED","KRB5_RESPONDER_QUESTION_OTP","KRB5_RESPONDER_QUESTION_PASSWORD","KRB5_RESPONDER_QUESTION_PKINIT","KRB5_SAFE","KRB5_SAM_MUST_PK_ENCRYPT_SAD","KRB5_SAM_SEND_ENCRYPTED_SAD","KRB5_SAM_USE_SAD_AS_KEY","KRB5_TC_MATCH_2ND_TKT","KRB5_TC_MATCH_AUTHDATA","KRB5_TC_MATCH_FLAGS","KRB5_TC_MATCH_FLAGS_EXACT","KRB5_TC_MATCH_IS_SKEY","KRB5_TC_MATCH_KTYPE","KRB5_TC_MATCH_SRV_NAMEONLY","KRB5_TC_MATCH_TIMES","KRB5_TC_MATCH_TIMES_EXACT","KRB5_TC_NOTICKET","KRB5_TC_OPENCLOSE","KRB5_TC_SUPPORTED_KTYPES","KRB5_TGS_NAME","KRB5_TGS_NAME_SIZE","KRB5_TGS_REP","KRB5_TGS_REQ","KRB5_TKT_CREDS_STEP_FLAG_CONTINUE","KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL","KRB5_WELLKNOWN_NAMESTR","LR_TYPE_INTERPRETATION_MASK","LR_TYPE_THIS_SERVER_ONLY","MAX_KEYTAB_NAME_LEN","MSEC_DIRBIT","MSEC_VAL_MASK","SALT_TYPE_AFS_LENGTH","SALT_TYPE_NO_LENGTH","THREEPARAMOPEN","TKT_FLG_ANONYMOUS","TKT_FLG_ENC_PA_REP","TKT_FLG_FORWARDABLE","TKT_FLG_FORWARDED","TKT_FLG_HW_AUTH","TKT_FLG_INITIAL","TKT_FLG_INVALID","TKT_FLG_MAY_POSTDATE","TKT_FLG_OK_AS_DELEGATE","TKT_FLG_POSTDATED","TKT_FLG_PRE_AUTH","TKT_FLG_PROXIABLE","TKT_FLG_PROXY","TKT_FLG_RENEWABLE","TKT_FLG_TRANSIT_POLICY_CHECKED","VALID_INT_BITS","VALID_UINT_BITS","krb5 simple macros","krb524_convert_creds_kdc","krb524_init_ets","krb5_const","krb5_princ_component","krb5_princ_name","krb5_princ_realm","krb5_princ_set_realm","krb5_princ_set_realm_data","krb5_princ_set_realm_length","krb5_princ_size","krb5_princ_type","krb5_roundup","krb5_x","krb5_xc","krb5 types and structures","krb5_address","krb5_addrtype","krb5_ap_rep","krb5_ap_rep_enc_part","krb5_ap_req","krb5_auth_context","krb5_authdata","krb5_authdatatype","krb5_authenticator","krb5_boolean","krb5_cc_cursor","krb5_ccache","krb5_cccol_cursor","krb5_checksum","krb5_cksumtype","krb5_const_pointer","krb5_const_principal","krb5_context","krb5_cred","krb5_cred_enc_part","krb5_cred_info","krb5_creds","krb5_crypto_iov","krb5_cryptotype","krb5_data","krb5_deltat","krb5_enc_data","krb5_enc_kdc_rep_part","krb5_enc_tkt_part","krb5_encrypt_block","krb5_enctype","krb5_error","krb5_error_code","krb5_expire_callback_func","krb5_flags","krb5_get_init_creds_opt","krb5_gic_opt_pa_data","krb5_init_creds_context","krb5_int16","krb5_int32","krb5_kdc_rep","krb5_kdc_req","krb5_key","krb5_keyblock","krb5_keytab","krb5_keytab_entry","krb5_keyusage","krb5_kt_cursor","krb5_kvno","krb5_last_req_entry","krb5_magic","krb5_mk_req_checksum_func","krb5_msgtype","krb5_octet","krb5_pa_data","krb5_pa_pac_req","krb5_pa_server_referral_data","krb5_pa_svr_referral_data","krb5_pac","krb5_pointer","krb5_post_recv_fn","krb5_pre_send_fn","krb5_preauthtype","krb5_principal","krb5_principal_data","krb5_prompt","krb5_prompt_type","krb5_prompter_fct","krb5_pwd_data","krb5_rcache","krb5_replay_data","krb5_responder_context","krb5_responder_fn","krb5_responder_otp_challenge","krb5_responder_otp_tokeninfo","krb5_responder_pkinit_challenge","krb5_responder_pkinit_identity","krb5_response","krb5_ticket","krb5_ticket_times","krb5_timestamp","krb5_tkt_authent","krb5_tkt_creds_context","krb5_trace_callback","krb5_trace_info","krb5_transited","krb5_typed_data","krb5_ui_2","krb5_ui_4","krb5_verify_init_creds_opt","passwd_phrase_element","Year 2038 considerations for uses of krb5_timestamp","Credential cache","Supported date and time formats","Kerberos V5 concepts","keytab","replay cache","stash file","Organization of the source directory","Doing the build","Building Kerberos V5","Options to <em>configure</em>","osconf.hin","How to build this documentation from the source","Copyright","Credential cache file format","KDC cookie format","PKINIT freshness tokens","Protocols and file formats","Keytab file format","Replay cache file format","MIT Kerberos Documentation (1.20.1)","MIT Kerberos defaults","MIT Kerberos features","MIT Kerberos License information","Credential cache selection interface (ccselect)","PKINIT certificate authorization interface (certauth)","Client preauthentication interface (clpreauth)","General plugin concepts","GSSAPI mechanism interface","Host-to-realm interface (hostrealm)","For plugin module developers","Internal pluggable interfaces","kadmin authorization interface (kadm5_auth)","KADM5 hook interface (kadm5_hook)","KDC policy interface (kdcpolicy)","KDC preauthentication interface (kdcpreauth)","Local authorization interface (localauth)","Server location interface (locate)","Configuration interface (profile)","Password quality interface (pwqual)","Resources","For users","Password management","Ticket management","User commands","kdestroy","kinit","klist","kpasswd","krb5-config","ksu","kswitch","kvno","sclient","User config files",".k5identity",".k5login","kerberos"],titleterms:{"boolean":59,"byte":[112,117,119,121,296],"default":[14,28,36,135,136,145,156,210,227,303,305,306,347,377,378,895,898,899,915],"export":43,"function":[118,219,257,363,364,375,380,381,386],"import":43,"new":[108,149,236,302,322,339,944],"null":91,"public":[48,787,802],"return":[53,58,95,96,97,111,112,116,136,210,261,266,312,332,337,367,370],"switch":[34,160],"while":41,Adding:[14,15,23],DES:14,DNS:[15,38],Doing:902,For:[30,45,924,935],One:46,TGS:[378,399,400,401,402,404],THE:944,The:[14,32,36],Using:[15,902],abbrevi:896,about:[23,32],absolut:896,acceptor:43,access:936,account:[35,166,936],acl:[19,34],acquir:[15,271,272,275,276,277,278,279,401],ad_type_extern:432,ad_type_field_type_mask:433,ad_type_regist:434,ad_type_reserv:435,add:[34,302,333,346,417,419,420],add_entri:11,add_mkei:6,add_polici:[3,23],add_princip:[3,23],addit:[31,126,224,350],address:[25,52,53,54,62,64,82,172,198,240,332],addrtype_addrport:422,addrtype_chao:423,addrtype_ddp:424,addrtype_inet6:426,addrtype_inet:425,addrtype_ipport:427,addrtype_is_loc:429,addrtype_iso:428,addrtype_netbio:430,addrtype_xn:431,adjust:396,admin:[39,41],administr:[1,23,30,34],advanc:13,advic:[32,38],aead:[43,100,103,288,290],against:414,alia:192,all:332,alloc:[106,212,214,219,236],allow:[55,167,244],allow_weak_crypto:55,also:[2,3,4,5,6,7,8,9,10,11,12,19,20,21,939,940,941,942,943,944,945,946,947,949,950,951],alter:895,ani:165,anonym:[37,46,57,58,241],anoth:179,answer:[369,372,373],ap_opts_etype_negoti:436,ap_opts_mutual_requir:437,ap_opts_reserv:438,ap_opts_use_session_kei:439,ap_opts_use_subkei:440,ap_opts_wire_mask:441,api:[44,48,421,906],appdefault:[21,59,60],applic:[14,15,32,38,45,55],archiv:934,argument:92,ark:6,armor:[246,247],arrai:[98,114,130,172,198,200,204,211,220,263,295,299,325,337],ask:253,asn:185,assign:[200,218],attack:25,attribut:[43,338],auth:[62,63,64,65,67,68,69,71,72,73,74,76,77,79,80,81,82,84,85,86,87,88,89,90],authdata:925,authent:[16,23,41,65,78,200,944],author:[28,37,173,184,189,195,319,320,322,412,919,925,926,930,944,951],autoconf:902,avail:23,awai:26,back:[17,22],background:[0,899],backup:17,behavior:[19,38],berkelei:24,between:44,binari:902,block:95,buffer:[333,335,337],bug:951,build:[57,91,92,93,902,903,906],built:285,cach:[71,85,132,133,134,135,136,137,139,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,246,250,251,265,383,895,899,908,913,918],call:48,callback:[46,63,80,245,386],cannot:41,canonic:[38,194,242],capath:21,caus:79,ccach:[138,247,895],ccselect:[21,918],cert:41,certauth:[21,919],certif:[37,41,338,919],cf2:107,chain:41,challeng:365,chang:[23,166,169,243,936],change_password:[3,23],channel:934,check:[165,167,284,313],checksum:[63,80,81,96,109,110,111,113,114,127,129,130,170,204,294,295,298,299,390],choos:26,cipher:[79,95,106,108],cksumtype_cmac_camellia128:442,cksumtype_cmac_camellia256:443,cksumtype_crc32:444,cksumtype_descbc:445,cksumtype_hmac_md5_arcfour:446,cksumtype_hmac_sha1_96_aes128:447,cksumtype_hmac_sha1_96_aes256:448,cksumtype_hmac_sha1_des3:449,cksumtype_hmac_sha256_128_aes128:450,cksumtype_hmac_sha384_192_aes256:451,cksumtype_md5_hmac_arcfour:452,cksumtype_nist_sha:453,cksumtype_rsa_md4:454,cksumtype_rsa_md4_d:455,cksumtype_rsa_md5:456,cksumtype_rsa_md5_d:457,cksumtype_sha1:458,clean:902,clear:171,clear_list:11,client:[15,29,33,37,132,303,336,375,898,920],clock:[15,167],close:[133,304],clpreauth:[21,920],code:[228,346,379,417,418,419,420],collect:[161,162,163,164,165,895],collis:109,combin:107,command:[3,5,6,11,938],common:12,commonli:904,compar:[52,105,348,349,350,362],compat:26,complet:421,compon:349,comput:[104,107,113,294],concept:[897,921],conf:[20,21,34,59,60],config:[943,948],configur:[15,18,22,26,28,29,33,34,35,36,37,39,141,155,262,282,283,904,908,932],connect:[41,62],consider:[36,894],constrain:43,contain:[165,189,313,366],content:[18,31,181,203,206,209,216,217,903,924],context:[62,63,64,65,67,68,69,71,72,73,74,76,77,78,79,80,81,82,84,85,86,87,88,89,90,171,179,205,262,263,266,268,269,270,271,272,273,274,275,282,365,366,373,377,396,399,400,401,402,403,944],contribut:0,conveni:48,convert:[49,50,51,56,125,126,170,187,192,193,344,345,347,374,390,391,392,394,395,397,398,406,407,408,409],cooki:909,copi:[134,172,173,174,175,176,177,178,179,180,181,182,183,293],copyright:907,correct:15,count:[93,291,297],creat:[5,6,23,34,37,41,78,149,268,269,275,282,286,329,330,338,403,944],create_polici:5,cred:[223,323,325,354],credenti:[15,41,43,46,51,132,133,134,135,136,137,139,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,220,235,236,237,238,240,241,243,244,245,246,247,248,249,250,251,252,254,255,256,257,258,259,260,264,267,270,271,272,273,274,275,276,277,278,279,323,325,330,382,383,400,401,403,414,415,416,895,908,918],cross:23,current:[167,396],cursor:[162,308],daemon:34,dai:410,data:[58,99,100,101,102,103,104,124,173,184,189,195,198,200,209,286,287,288,289,290,320,322,365,412,925],databas:[3,14,17,23,24,34,39,925],datatyp:421,date:[23,896],db2:24,dbdefault:20,dbmodul:20,dce:[328,358],decis:39,declar:[803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,855,856,857,858,859,860,861,862,863,864,865,866,867,868,869,870,871,872,873,874,875,876,877,878,879,880,881,882,883,884,885,886,887,888,889,890,891,892,893],decod:[185,355,368,371],decrement:291,decrypt:[99,100,287,288,357,358,359,376],defin:36,del_str:3,deleg:43,delet:23,delete_entri:11,delete_polici:[3,23],delete_princip:[3,23],delta:391,deprec:[48,787],deriv:101,descript:[2,3,4,5,6,7,8,9,10,11,12,19,939,940,941,942,943,944,945,946,947,949,950,951],deseri:405,destroi:[5,6,23,137,937],destroy_polici:5,determin:[160,319],develop:[43,45,924],dictionari:25,differ:[23,44,419,420],direct:387,directli:48,directori:[901,902,904],discoveri:39,document:[0,896,906,914],domain_realm:21,dump:[6,23],duplic:[138,307],durat:896,dure:41,each:34,edit:34,effect:944,element:[114,130,195,295,299],empti:[280,338],encod:[320,324,339],encrypt:[20,26,41,97,102,103,104,105,111,115,118,128,192,193,211,244,261,289,290,327,328,378,392],enctyp:[26,115,117,124,229,286,292,296],enctype_aes128_cts_hmac_sha1_96:459,enctype_aes128_cts_hmac_sha256_128:460,enctype_aes256_cts_hmac_sha1_96:461,enctype_aes256_cts_hmac_sha384_192:462,enctype_arcfour_hmac:463,enctype_arcfour_hmac_exp:464,enctype_camellia128_cts_cmac:465,enctype_camellia256_cts_cmac:466,enctype_des3_cbc_env:467,enctype_des3_cbc_raw:468,enctype_des3_cbc_sha1:470,enctype_des3_cbc_sha:469,enctype_des_cbc_crc:471,enctype_des_cbc_md4:472,enctype_des_cbc_md5:473,enctype_des_cbc_raw:474,enctype_des_hmac_sha1:475,enctype_dsa_sha1_cm:476,enctype_md5_rsa_cm:477,enctype_nul:478,enctype_rc2_cbc_env:479,enctype_rsa_env:480,enctype_rsa_es_oaep_env:481,enctype_sha1_rsa_cm:482,enctype_unknown:483,end:22,entri:[139,150,217,302,310,313,314,316,318,908,912],environ:[2,3,4,5,6,7,8,9,10,11,12,27,904,939,940,941,942,944,945,946,947,951],epoch:410,error:[12,41,171,179,212,213,228,273,346,355,379,417,418,419,420],etc:38,event:[386,387],everi:158,exampl:[10,11,15,19,23,46,904,943,949,950],exchang:[41,404],execut:944,exist:[166,264,313],expans:21,expir:[41,245],extend:[171,179,228,379,418],extens:43,fact:916,fail:[34,41],fast:[238,246,247,248],featur:[904,916],field:[64,83,84,97,209,384,385],file:[8,18,20,21,23,32,33,34,282,387,900,908,911,912,913,939,940,941,945,946,948],fill:[98,114,295],find:[132,195],fine:904,finish:139,firewal:15,flag:[66,83,142,157,238,241,242,243,248,249,255,345,350,408,409],format:[23,185,223,323,324,325,326,327,328,331,409,896,908,909,911,912,913],forward:[223,249],free:[61,106,162,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,237,270,291,334,367,370,399],frequent:[41,48],fresh:[37,910],from:[14,15,23,26,59,60,62,63,64,65,66,67,68,69,71,72,73,74,76,77,124,141,142,150,151,153,179,229,238,262,263,264,266,267,272,273,274,286,293,310,314,315,316,335,336,343,361,389,401,402,403,906,921],full:[143,389],gener:[37,62,115,117,119,121,124,213,265,296,389,915,921],get:[15,41,46,63,118,141,145,164,169,223,224,228,231,235,260,263,264,267,273,279,306,310,311,317,403,404],get_init_cr:46,get_polici:[3,23],get_princip:[3,23],get_str:3,getdat:896,given:365,grant:[403,936],gssapi:[28,43,922],guid:31,handl:[133,138,304,307,317,333,334,337,338,339],has:41,header:[98,908],heimdal:44,hin:905,histori:[3,14,23,951],hit:291,hook:[380,381,927],host:[17,28,32,34,41,231,332,923],hostnam:[39,194],hostrealm:[21,923],how:906,http:29,ident:[21,372],ignor:349,includ:[253,300,301],increment:[23,34,297],indic:16,inform:[15,21,23,336,899,917],initi:[41,43,46,78,108,147,165,235,236,237,238,240,241,243,244,245,246,247,248,249,250,251,252,254,255,256,257,258,259,260,270,271,272,273,274,275,276,277,278,279,280,414,415],initialcredenti:242,input:[101,250,361],instal:[31,33,34,902,904,944],instanc:36,instruct:944,interact:46,interfac:[21,48,332,918,919,920,922,923,925,926,927,928,929,930,931,932,933],intern:[802,925],interoper:916,interpos:922,iov:[43,98,114,130,295,299],irc:934,iter:163,its:161,k5ident:949,k5login:950,k5srvutil:2,kadm5:[19,927],kadm5_auth:[21,926],kadm5_hook:[21,927],kadmin:[3,23,926],kadmind:[4,921],kdb5_ldap_util:5,kdb5_util:6,kdb:925,kdc:[14,20,28,34,35,37,39,41,229,253,264,267,273,279,380,381,403,404,909,915,921,928,929],kdc_opt_allow_postd:484,kdc_opt_canonic:485,kdc_opt_cname_in_addl_tkt:486,kdc_opt_disable_transited_check:487,kdc_opt_enc_tkt_in_skei:488,kdc_opt_forward:[489,490],kdc_opt_postd:491,kdc_opt_proxi:[492,493],kdc_opt_renew:[494,495],kdc_opt_renewable_ok:496,kdc_opt_request_anonym:497,kdc_opt_valid:498,kdc_tkt_common_mask:499,kdcdefault:20,kdcissu:[320,412],kdcpolici:928,kdcpreauth:[21,929],kdestroi:[937,939],kei:[14,23,26,67,68,90,99,101,102,107,110,111,112,115,124,125,126,217,235,261,286,287,288,289,290,291,294,295,296,297,298,299,302,303,304,305,306,310,311,312,314,315,316,317,318,376,912],kerbero:[0,15,17,22,23,34,39,44,49,50,51,52,127,128,166,231,285,897,903,914,915,916,917,925,937,951],keyblock:[67,72,73,76,86,88,99,100,102,103,113,114,129,130,180,181,286,293],keyboard:361,keysalt:20,keytab:[15,32,34,38,276,307,308,313,414,898,912],kinit:[937,940],kldap:24,klist:[937,941],klmdb:24,known:163,kpasswd:942,kprop:[7,41],kpropd:8,kproplog:9,krb524_convert_creds_kdc:788,krb524_init_et:789,krb5:[21,34,48,59,60,205,219,268,269,282,787,802,943],krb5_425_conv_princip:49,krb5_524_conv_princip:50,krb5_524_convert_cr:51,krb5_address:803,krb5_address_compar:52,krb5_address_ord:53,krb5_address_search:54,krb5_addrtyp:804,krb5_allow_weak_crypto:55,krb5_altauth_att_challenge_respons:500,krb5_aname_to_localnam:56,krb5_anonymous_princip:57,krb5_anonymous_princstr:501,krb5_anonymous_realm:58,krb5_anonymous_realmstr:502,krb5_ap_rep:[503,805],krb5_ap_rep_enc_part:[199,806],krb5_ap_req:[504,807],krb5_appdefault_boolean:59,krb5_appdefault_str:60,krb5_as_rep:505,krb5_as_req:506,krb5_auth_con_fre:61,krb5_auth_con_genaddr:62,krb5_auth_con_get_checksum_func:63,krb5_auth_con_getaddr:64,krb5_auth_con_getauthent:65,krb5_auth_con_getflag:66,krb5_auth_con_getkei:67,krb5_auth_con_getkey_k:68,krb5_auth_con_getlocalseqnumb:69,krb5_auth_con_getlocalsubkei:70,krb5_auth_con_getrcach:71,krb5_auth_con_getrecvsubkei:72,krb5_auth_con_getrecvsubkey_k:73,krb5_auth_con_getremoteseqnumb:74,krb5_auth_con_getremotesubkei:75,krb5_auth_con_getsendsubkei:76,krb5_auth_con_getsendsubkey_k:77,krb5_auth_con_init:78,krb5_auth_con_initivector:79,krb5_auth_con_set_checksum_func:80,krb5_auth_con_set_req_cksumtyp:81,krb5_auth_con_setaddr:82,krb5_auth_con_setflag:83,krb5_auth_con_setport:84,krb5_auth_con_setrcach:85,krb5_auth_con_setrecvsubkei:86,krb5_auth_con_setrecvsubkey_k:87,krb5_auth_con_setsendsubkei:88,krb5_auth_con_setsendsubkey_k:89,krb5_auth_con_setuseruserkei:90,krb5_auth_context:[61,66,83,808],krb5_auth_context_do_sequ:521,krb5_auth_context_do_tim:522,krb5_auth_context_generate_local_addr:523,krb5_auth_context_generate_local_full_addr:524,krb5_auth_context_generate_remote_addr:525,krb5_auth_context_generate_remote_full_addr:526,krb5_auth_context_permit_al:527,krb5_auth_context_ret_sequ:528,krb5_auth_context_ret_tim:529,krb5_auth_context_use_subkei:530,krb5_authdata:809,krb5_authdata_and_or:507,krb5_authdata_ap_opt:508,krb5_authdata_auth_ind:509,krb5_authdata_cammac:510,krb5_authdata_etype_negoti:511,krb5_authdata_fx_armor:512,krb5_authdata_if_relev:513,krb5_authdata_initial_verified_ca:514,krb5_authdata_kdc_issu:515,krb5_authdata_mandatory_for_kdc:516,krb5_authdata_osf_dc:517,krb5_authdata_sesam:518,krb5_authdata_signticket:519,krb5_authdata_win2k_pac:520,krb5_authdatatyp:810,krb5_authent:[174,201,811],krb5_boolean:812,krb5_build_princip:91,krb5_build_principal_alloc_va:92,krb5_build_principal_ext:93,krb5_build_principal_va:94,krb5_c_block_siz:95,krb5_c_checksum_length:96,krb5_c_crypto_length:97,krb5_c_crypto_length_iov:98,krb5_c_decrypt:99,krb5_c_decrypt_iov:100,krb5_c_derive_prfplu:101,krb5_c_encrypt:102,krb5_c_encrypt_iov:103,krb5_c_encrypt_length:104,krb5_c_enctype_compar:105,krb5_c_free_stat:106,krb5_c_fx_cf2_simpl:107,krb5_c_init_st:[106,108],krb5_c_is_coll_proof_cksum:109,krb5_c_is_keyed_cksum:110,krb5_c_keyed_checksum_typ:111,krb5_c_keylength:112,krb5_c_make_checksum:113,krb5_c_make_checksum_iov:114,krb5_c_make_random_kei:115,krb5_c_padding_length:116,krb5_c_prf:117,krb5_c_prf_length:118,krb5_c_prfplu:119,krb5_c_random_add_entropi:120,krb5_c_random_make_octet:121,krb5_c_random_os_entropi:122,krb5_c_random_se:123,krb5_c_random_to_kei:124,krb5_c_string_to_kei:125,krb5_c_string_to_key_with_param:126,krb5_c_valid_cksumtyp:127,krb5_c_valid_enctyp:128,krb5_c_verify_checksum:129,krb5_c_verify_checksum_iov:130,krb5_calculate_checksum:131,krb5_cc_cache_match:132,krb5_cc_close:133,krb5_cc_copy_cr:134,krb5_cc_cursor:813,krb5_cc_default:135,krb5_cc_default_nam:136,krb5_cc_destroi:137,krb5_cc_dup:138,krb5_cc_end_seq_get:139,krb5_cc_gen_new:140,krb5_cc_get_config:141,krb5_cc_get_flag:142,krb5_cc_get_full_nam:143,krb5_cc_get_nam:144,krb5_cc_get_princip:145,krb5_cc_get_typ:146,krb5_cc_initi:147,krb5_cc_move:148,krb5_cc_new_uniqu:149,krb5_cc_next_cr:150,krb5_cc_remove_cr:151,krb5_cc_resolv:152,krb5_cc_retrieve_cr:153,krb5_cc_select:154,krb5_cc_set_config:155,krb5_cc_set_default_nam:156,krb5_cc_set_flag:157,krb5_cc_start_seq_get:158,krb5_cc_store_cr:159,krb5_cc_support_switch:160,krb5_cc_switch:161,krb5_ccach:814,krb5_cccol_cursor:815,krb5_cccol_cursor_fre:162,krb5_cccol_cursor_new:163,krb5_cccol_cursor_next:164,krb5_cccol_have_cont:165,krb5_change_password:166,krb5_check_clockskew:167,krb5_checksum:[175,202,203,816],krb5_checksum_s:168,krb5_chpw_messag:169,krb5_cksumtyp:817,krb5_cksumtype_to_str:170,krb5_clear_error_messag:171,krb5_const:790,krb5_const_point:818,krb5_const_princip:819,krb5_context:[176,378,385,820],krb5_copy_address:172,krb5_copy_authdata:173,krb5_copy_authent:174,krb5_copy_checksum:175,krb5_copy_context:176,krb5_copy_cr:177,krb5_copy_data:178,krb5_copy_error_messag:179,krb5_copy_keyblock:180,krb5_copy_keyblock_cont:181,krb5_copy_princip:182,krb5_copy_ticket:183,krb5_cred:[177,206,207,321,405,531,821,824],krb5_cred_enc_part:822,krb5_cred_info:823,krb5_crypto_iov:825,krb5_crypto_type_checksum:532,krb5_crypto_type_data:533,krb5_crypto_type_empti:534,krb5_crypto_type_head:535,krb5_crypto_type_pad:536,krb5_crypto_type_sign_onli:537,krb5_crypto_type_stream:538,krb5_crypto_type_trail:539,krb5_cryptotyp:826,krb5_cybersafe_secureid:540,krb5_data:[178,208,209,827],krb5_decode_authdata_contain:184,krb5_decode_ticket:185,krb5_decrypt:186,krb5_deltat:828,krb5_deltat_to_str:187,krb5_domain_x500_compress:541,krb5_eblock_enctyp:188,krb5_enc_data:829,krb5_enc_kdc_rep_part:830,krb5_enc_tkt_part:831,krb5_encode_authdata_contain:189,krb5_encpadata_req_enc_pa_rep:542,krb5_encrypt:190,krb5_encrypt_block:832,krb5_encrypt_s:191,krb5_enctyp:833,krb5_enctype_to_nam:192,krb5_enctype_to_str:193,krb5_error:[543,834],krb5_error_cod:835,krb5_expand_hostnam:194,krb5_expire_callback_func:836,krb5_fast_requir:544,krb5_find_authdata:195,krb5_finish_kei:196,krb5_finish_random_kei:197,krb5_flag:837,krb5_free_address:198,krb5_free_ap_rep_enc_part:199,krb5_free_authdata:200,krb5_free_authent:201,krb5_free_checksum:202,krb5_free_checksum_cont:203,krb5_free_cksumtyp:204,krb5_free_context:205,krb5_free_cr:207,krb5_free_cred_cont:206,krb5_free_data:208,krb5_free_data_cont:209,krb5_free_default_realm:210,krb5_free_enctyp:211,krb5_free_error:212,krb5_free_error_messag:213,krb5_free_host_realm:214,krb5_free_keyblock:215,krb5_free_keyblock_cont:216,krb5_free_keytab_entry_cont:217,krb5_free_princip:218,krb5_free_str:219,krb5_free_tgt_cr:220,krb5_free_ticket:221,krb5_free_unparsed_nam:222,krb5_fwd_tgt_cred:223,krb5_gc_cach:545,krb5_gc_canonic:546,krb5_gc_constrained_deleg:547,krb5_gc_forward:548,krb5_gc_no_stor:549,krb5_gc_no_transit_check:550,krb5_gc_user_us:551,krb5_get_credenti:224,krb5_get_credentials_renew:225,krb5_get_credentials_valid:226,krb5_get_default_realm:[210,227],krb5_get_error_messag:[213,228],krb5_get_etype_info:229,krb5_get_fallback_host_realm:230,krb5_get_host_realm:[214,231],krb5_get_in_tkt_with_keytab:232,krb5_get_in_tkt_with_password:233,krb5_get_in_tkt_with_skei:234,krb5_get_init_creds_keytab:235,krb5_get_init_creds_opt:838,krb5_get_init_creds_opt_address_list:552,krb5_get_init_creds_opt_alloc:236,krb5_get_init_creds_opt_anonym:553,krb5_get_init_creds_opt_canonic:554,krb5_get_init_creds_opt_chg_pwd_prmpt:555,krb5_get_init_creds_opt_etype_list:556,krb5_get_init_creds_opt_forward:557,krb5_get_init_creds_opt_fre:237,krb5_get_init_creds_opt_get_fast_flag:238,krb5_get_init_creds_opt_init:239,krb5_get_init_creds_opt_preauth_list:558,krb5_get_init_creds_opt_proxi:559,krb5_get_init_creds_opt_renew_lif:560,krb5_get_init_creds_opt_salt:561,krb5_get_init_creds_opt_set_address_list:240,krb5_get_init_creds_opt_set_anonym:241,krb5_get_init_creds_opt_set_canonic:242,krb5_get_init_creds_opt_set_change_password_prompt:243,krb5_get_init_creds_opt_set_etype_list:244,krb5_get_init_creds_opt_set_expire_callback:245,krb5_get_init_creds_opt_set_fast_ccach:246,krb5_get_init_creds_opt_set_fast_ccache_nam:247,krb5_get_init_creds_opt_set_fast_flag:248,krb5_get_init_creds_opt_set_forward:249,krb5_get_init_creds_opt_set_in_ccach:250,krb5_get_init_creds_opt_set_out_ccach:251,krb5_get_init_creds_opt_set_pa:252,krb5_get_init_creds_opt_set_pac_request:253,krb5_get_init_creds_opt_set_preauth_list:254,krb5_get_init_creds_opt_set_proxi:255,krb5_get_init_creds_opt_set_renew_lif:256,krb5_get_init_creds_opt_set_respond:257,krb5_get_init_creds_opt_set_salt:258,krb5_get_init_creds_opt_set_tkt_lif:259,krb5_get_init_creds_opt_tkt_lif:562,krb5_get_init_creds_password:260,krb5_get_permitted_enctyp:261,krb5_get_profil:262,krb5_get_prompt_typ:263,krb5_get_renewed_cr:264,krb5_get_server_rcach:265,krb5_get_time_offset:266,krb5_get_validated_cr:267,krb5_gic_opt_pa_data:839,krb5_init_context:268,krb5_init_context_kdc:563,krb5_init_context_profil:269,krb5_init_context_secur:564,krb5_init_creds_context:840,krb5_init_creds_fre:270,krb5_init_creds_get:271,krb5_init_creds_get_cr:272,krb5_init_creds_get_error:273,krb5_init_creds_get_tim:274,krb5_init_creds_init:275,krb5_init_creds_set_keytab:276,krb5_init_creds_set_password:277,krb5_init_creds_set_servic:278,krb5_init_creds_step:279,krb5_init_creds_step_flag_continu:565,krb5_init_keyblock:280,krb5_init_random_kei:281,krb5_init_secure_context:282,krb5_int16:841,krb5_int16_max:566,krb5_int16_min:567,krb5_int32:842,krb5_int32_max:568,krb5_int32_min:569,krb5_is_config_princip:283,krb5_is_referral_realm:284,krb5_is_thread_saf:285,krb5_k_create_kei:286,krb5_k_decrypt:287,krb5_k_decrypt_iov:288,krb5_k_encrypt:289,krb5_k_encrypt_iov:290,krb5_k_free_kei:291,krb5_k_key_enctyp:292,krb5_k_key_keyblock:293,krb5_k_make_checksum:294,krb5_k_make_checksum_iov:295,krb5_k_prf:296,krb5_k_reference_kei:297,krb5_k_verify_checksum:298,krb5_k_verify_checksum_iov:299,krb5_kdc_rep:843,krb5_kdc_req:844,krb5_kdc_sign_ticket:300,krb5_kdc_verify_ticket:301,krb5_kei:[286,292,293,845],krb5_keyblock:[215,216,280,846],krb5_keytab:847,krb5_keytab_entri:848,krb5_keyusag:849,krb5_keyusage_ad_it:570,krb5_keyusage_ad_kdcissued_cksum:571,krb5_keyusage_ad_mt:572,krb5_keyusage_ad_signedpath:573,krb5_keyusage_ap_rep_encpart:576,krb5_keyusage_ap_req_auth:577,krb5_keyusage_ap_req_auth_cksum:578,krb5_keyusage_app_data_cksum:574,krb5_keyusage_app_data_encrypt:575,krb5_keyusage_as_rep_encpart:579,krb5_keyusage_as_req:580,krb5_keyusage_as_req_pa_enc_t:581,krb5_keyusage_cammac:582,krb5_keyusage_enc_challenge_cli:583,krb5_keyusage_enc_challenge_kdc:584,krb5_keyusage_fast_enc:585,krb5_keyusage_fast_finish:586,krb5_keyusage_fast_rep:587,krb5_keyusage_fast_req_chksum:588,krb5_keyusage_gss_tok_m:589,krb5_keyusage_gss_tok_wrap_integ:590,krb5_keyusage_gss_tok_wrap_priv:591,krb5_keyusage_iakerb_finish:592,krb5_keyusage_kdc_rep_ticket:593,krb5_keyusage_krb_cred_encpart:594,krb5_keyusage_krb_error_cksum:595,krb5_keyusage_krb_priv_encpart:596,krb5_keyusage_krb_safe_cksum:597,krb5_keyusage_pa_as_fresh:598,krb5_keyusage_pa_fx_cooki:599,krb5_keyusage_pa_otp_request:600,krb5_keyusage_pa_pkinit_kx:601,krb5_keyusage_pa_s4u_x509_user_repli:602,krb5_keyusage_pa_s4u_x509_user_request:603,krb5_keyusage_pa_sam_challenge_cksum:604,krb5_keyusage_pa_sam_challenge_trackid:605,krb5_keyusage_pa_sam_respons:606,krb5_keyusage_spak:607,krb5_keyusage_tgs_rep_encpart_sesskei:608,krb5_keyusage_tgs_rep_encpart_subkei:609,krb5_keyusage_tgs_req_ad_sesskei:610,krb5_keyusage_tgs_req_ad_subkei:611,krb5_keyusage_tgs_req_auth:612,krb5_keyusage_tgs_req_auth_cksum:613,krb5_kpasswd_accessdeni:614,krb5_kpasswd_autherror:615,krb5_kpasswd_bad_vers:616,krb5_kpasswd_harderror:617,krb5_kpasswd_initial_flag_need:618,krb5_kpasswd_malform:619,krb5_kpasswd_softerror:620,krb5_kpasswd_success:621,krb5_kt_add_entri:302,krb5_kt_client_default:303,krb5_kt_close:304,krb5_kt_cursor:850,krb5_kt_default:305,krb5_kt_default_nam:306,krb5_kt_dup:307,krb5_kt_end_seq_get:308,krb5_kt_free_entri:309,krb5_kt_get_entri:310,krb5_kt_get_nam:311,krb5_kt_get_typ:312,krb5_kt_have_cont:313,krb5_kt_next_entri:314,krb5_kt_read_service_kei:315,krb5_kt_remove_entri:316,krb5_kt_resolv:317,krb5_kt_start_seq_get:318,krb5_kuserok:319,krb5_kvno:851,krb5_last_req_entri:852,krb5_lrq_all_acct_exptim:622,krb5_lrq_all_last_initi:623,krb5_lrq_all_last_renew:624,krb5_lrq_all_last_req:625,krb5_lrq_all_last_tgt:626,krb5_lrq_all_last_tgt_issu:627,krb5_lrq_all_pw_exptim:628,krb5_lrq_none:629,krb5_lrq_one_acct_exptim:630,krb5_lrq_one_last_initi:631,krb5_lrq_one_last_renew:632,krb5_lrq_one_last_req:633,krb5_lrq_one_last_tgt:634,krb5_lrq_one_last_tgt_issu:635,krb5_lrq_one_pw_exptim:636,krb5_magic:853,krb5_make_authdata_kdc_issu:320,krb5_marshal_credenti:321,krb5_merge_authdata:322,krb5_mk_1cred:323,krb5_mk_error:324,krb5_mk_ncred:325,krb5_mk_priv:326,krb5_mk_rep:327,krb5_mk_rep_dc:328,krb5_mk_req:329,krb5_mk_req_checksum_func:854,krb5_mk_req_extend:330,krb5_mk_safe:331,krb5_msgtype:855,krb5_nt_ent_principal_and_id:638,krb5_nt_enterprise_princip:637,krb5_nt_ms_princip:639,krb5_nt_ms_principal_and_id:640,krb5_nt_princip:641,krb5_nt_smtp_name:642,krb5_nt_srv_hst:643,krb5_nt_srv_inst:644,krb5_nt_srv_xhst:645,krb5_nt_uid:646,krb5_nt_unknown:647,krb5_nt_wellknown:648,krb5_nt_x500_princip:649,krb5_octet:856,krb5_os_localaddr:332,krb5_pa_data:857,krb5_pa_pac_req:858,krb5_pa_server_referral_data:859,krb5_pa_svr_referral_data:860,krb5_pac:861,krb5_pac_add_buff:333,krb5_pac_attributes_info:650,krb5_pac_client_claim:651,krb5_pac_client_info:652,krb5_pac_credentials_info:653,krb5_pac_delegation_info:654,krb5_pac_device_claim:655,krb5_pac_device_info:656,krb5_pac_fre:334,krb5_pac_get_buff:335,krb5_pac_get_client_info:336,krb5_pac_get_typ:337,krb5_pac_init:338,krb5_pac_logon_info:657,krb5_pac_pars:339,krb5_pac_privsvr_checksum:658,krb5_pac_requestor:659,krb5_pac_server_checksum:660,krb5_pac_sign:340,krb5_pac_sign_ext:341,krb5_pac_ticket_checksum:661,krb5_pac_upn_dns_info:662,krb5_pac_verifi:342,krb5_pac_verify_ext:343,krb5_padata_afs3_salt:663,krb5_padata_ap_req:664,krb5_padata_as_checksum:665,krb5_padata_as_fresh:666,krb5_padata_enc_sandia_securid:668,krb5_padata_enc_timestamp:669,krb5_padata_enc_unix_tim:670,krb5_padata_encrypted_challeng:667,krb5_padata_etype_info2:672,krb5_padata_etype_info:671,krb5_padata_for_us:673,krb5_padata_fx_cooki:674,krb5_padata_fx_error:675,krb5_padata_fx_fast:676,krb5_padata_get_from_typed_data:677,krb5_padata_non:678,krb5_padata_osf_dc:679,krb5_padata_otp_challeng:680,krb5_padata_otp_pin_chang:681,krb5_padata_otp_request:682,krb5_padata_pac_opt:683,krb5_padata_pac_request:684,krb5_padata_pk_as_rep:686,krb5_padata_pk_as_rep_old:687,krb5_padata_pk_as_req:688,krb5_padata_pk_as_req_old:689,krb5_padata_pkinit_kx:685,krb5_padata_pw_salt:690,krb5_padata_redhat_idp_oauth2:691,krb5_padata_referr:692,krb5_padata_s4u_x509_us:693,krb5_padata_sam_challeng:694,krb5_padata_sam_challenge_2:695,krb5_padata_sam_redirect:696,krb5_padata_sam_respons:697,krb5_padata_sam_response_2:698,krb5_padata_sesam:699,krb5_padata_spak:700,krb5_padata_svr_referral_info:701,krb5_padata_tgs_req:702,krb5_padata_use_specified_kvno:703,krb5_parse_nam:344,krb5_parse_name_flag:345,krb5_pointer:862,krb5_post_recv_fn:863,krb5_pre_send_fn:864,krb5_preauthtyp:865,krb5_prepend_error_messag:346,krb5_princ_compon:791,krb5_princ_nam:792,krb5_princ_realm:793,krb5_princ_set_realm:794,krb5_princ_set_realm_data:795,krb5_princ_set_realm_length:796,krb5_princ_siz:797,krb5_princ_typ:798,krb5_princip:[344,345,406,407,408,409,866],krb5_principal2salt:347,krb5_principal_compar:348,krb5_principal_compare_any_realm:349,krb5_principal_compare_casefold:704,krb5_principal_compare_enterpris:705,krb5_principal_compare_flag:350,krb5_principal_compare_ignore_realm:706,krb5_principal_compare_utf8:707,krb5_principal_data:867,krb5_principal_parse_enterpris:708,krb5_principal_parse_ignore_realm:709,krb5_principal_parse_no_def_realm:710,krb5_principal_parse_no_realm:711,krb5_principal_parse_require_realm:712,krb5_principal_unparse_displai:713,krb5_principal_unparse_no_realm:714,krb5_principal_unparse_short:715,krb5_priv:716,krb5_process_kei:351,krb5_prompt:868,krb5_prompt_typ:869,krb5_prompt_type_new_password:717,krb5_prompt_type_new_password_again:718,krb5_prompt_type_password:719,krb5_prompt_type_preauth:720,krb5_prompter_fct:870,krb5_prompter_posix:352,krb5_pvno:721,krb5_pwd_data:871,krb5_random_kei:353,krb5_rcach:872,krb5_rd_cred:354,krb5_rd_error:355,krb5_rd_priv:356,krb5_rd_rep:357,krb5_rd_rep_dc:358,krb5_rd_req:359,krb5_rd_safe:360,krb5_read_error:212,krb5_read_password:361,krb5_realm_branch_char:722,krb5_realm_compar:362,krb5_recvauth:363,krb5_recvauth_badauthv:723,krb5_recvauth_skip_vers:724,krb5_recvauth_vers:364,krb5_referral_realm:[284,725],krb5_replay_data:873,krb5_responder_context:874,krb5_responder_fn:875,krb5_responder_get_challeng:365,krb5_responder_list_quest:366,krb5_responder_otp_challeng:876,krb5_responder_otp_challenge_fre:367,krb5_responder_otp_flags_collect_pin:726,krb5_responder_otp_flags_collect_token:727,krb5_responder_otp_flags_nextotp:728,krb5_responder_otp_flags_separate_pin:729,krb5_responder_otp_format_alphanumer:730,krb5_responder_otp_format_decim:731,krb5_responder_otp_format_hexadecim:732,krb5_responder_otp_get_challeng:[367,368],krb5_responder_otp_set_answ:369,krb5_responder_otp_tokeninfo:877,krb5_responder_pkinit_challeng:878,krb5_responder_pkinit_challenge_fre:370,krb5_responder_pkinit_flags_token_user_pin_count_low:733,krb5_responder_pkinit_flags_token_user_pin_final_tri:734,krb5_responder_pkinit_flags_token_user_pin_lock:735,krb5_responder_pkinit_get_challeng:[370,371],krb5_responder_pkinit_ident:879,krb5_responder_pkinit_set_answ:372,krb5_responder_question_otp:[368,369,736],krb5_responder_question_password:737,krb5_responder_question_pkinit:[371,372,738],krb5_responder_set_answ:373,krb5_respons:880,krb5_roundup:799,krb5_safe:739,krb5_salttype_to_str:374,krb5_sam_must_pk_encrypt_sad:740,krb5_sam_send_encrypted_sad:741,krb5_sam_use_sad_as_kei:742,krb5_sendauth:[212,375],krb5_server_decrypt_ticket_keytab:376,krb5_set_default_realm:377,krb5_set_default_tgs_enctyp:378,krb5_set_error_messag:379,krb5_set_kdc_recv_hook:380,krb5_set_kdc_send_hook:381,krb5_set_password:382,krb5_set_password_using_ccach:383,krb5_set_principal_realm:384,krb5_set_real_tim:385,krb5_set_trace_callback:386,krb5_set_trace_filenam:387,krb5_sname_match:388,krb5_sname_to_princip:389,krb5_string_to_cksumtyp:390,krb5_string_to_deltat:391,krb5_string_to_enctyp:392,krb5_string_to_kei:393,krb5_string_to_salttyp:394,krb5_string_to_timestamp:395,krb5_tc_match_2nd_tkt:743,krb5_tc_match_authdata:744,krb5_tc_match_flag:745,krb5_tc_match_flags_exact:746,krb5_tc_match_is_skei:747,krb5_tc_match_ktyp:748,krb5_tc_match_srv_nameonli:749,krb5_tc_match_tim:750,krb5_tc_match_times_exact:751,krb5_tc_noticket:752,krb5_tc_openclos:753,krb5_tc_supported_ktyp:754,krb5_tgs_name:755,krb5_tgs_name_s:756,krb5_tgs_rep:757,krb5_tgs_req:758,krb5_ticket:[183,881],krb5_ticket_tim:882,krb5_timeofdai:396,krb5_timestamp:[883,894],krb5_timestamp_to_sfstr:397,krb5_timestamp_to_str:398,krb5_tkt_authent:884,krb5_tkt_creds_context:885,krb5_tkt_creds_fre:399,krb5_tkt_creds_get:400,krb5_tkt_creds_get_cr:401,krb5_tkt_creds_get_tim:402,krb5_tkt_creds_init:403,krb5_tkt_creds_step:404,krb5_tkt_creds_step_flag_continu:759,krb5_trace_callback:886,krb5_trace_info:887,krb5_transit:888,krb5_typed_data:889,krb5_ui_2:890,krb5_ui_4:891,krb5_unmarshal_credenti:405,krb5_unparse_nam:406,krb5_unparse_name_ext:407,krb5_unparse_name_flag:408,krb5_unparse_name_flags_ext:409,krb5_us_timeofdai:410,krb5_use_enctyp:411,krb5_verify_authdata_kdc_issu:412,krb5_verify_checksum:413,krb5_verify_init_cr:414,krb5_verify_init_creds_opt:892,krb5_verify_init_creds_opt_ap_req_nofail:760,krb5_verify_init_creds_opt_init:415,krb5_verify_init_creds_opt_set_ap_req_nofail:416,krb5_vprepend_error_messag:417,krb5_vset_error_messag:418,krb5_vwrap_error_messag:419,krb5_wellknown_namestr:761,krb5_wrap_error_messag:420,krb5_x:800,krb5_xc:801,krb5kdc:10,krb:[107,223,323,325,326,331,354,355,356,360],krb_ap_rep:[327,328,357,358],krb_ap_req:[329,330,359],krb_error:324,krbtgt:[14,23],ksu:944,kswitch:945,ktadd:[3,15],ktremov:[3,15],ktutil:11,kvno:946,last:273,ldap:[23,24],ldapsearch:38,legaci:[14,48],length:[93,96,97,98,104,112,118,407],lib:901,libdefault:21,librari:[205,268,269,282,285],licens:917,lifetim:[256,259],lightn:24,like:915,line:[5,6],link:42,list:[5,11,20,23,41,54,92,111,173,261,322,366,916,934],list_mkei:6,list_polici:[3,5,23],list_princip:[3,23],list_request:[3,11],lndir:902,load:6,local:[56,69,82,84,319,930],localauth:[21,930],locat:[28,247,931],lock:3,lockout:35,log:[20,41,319,921],login:28,lr_type_interpretation_mask:762,lr_type_this_server_onli:763,machin:33,macro:787,mail:934,make:161,man:906,manag:[936,937],manipul:47,map:[24,39],master:[14,23],match:[284,388],max_keytab_name_len:764,mechan:[28,922],member:[803,805,806,807,809,811,816,819,821,822,823,824,825,827,829,830,831,832,834,838,839,843,844,846,848,852,857,858,859,860,866,867,868,871,873,876,877,878,879,880,881,882,884,887,888,889,892,893],memori:[24,214],merg:322,messag:[12,43,97,169,171,179,213,223,228,323,324,325,326,327,328,329,330,331,346,354,355,356,357,358,359,360,379,417,418,419,420],mic:43,migrat:26,mismatch:38,mit:[0,23,44,914,915,916,917],modifi:[5,23],modify_polici:[3,5,23],modify_princip:[3,23],modul:[19,24,28,921,922,924],most:[179,904],move:148,msec_dirbit:765,msec_val_mask:766,multithread:285,name:[38,39,43,56,91,92,93,135,136,143,144,149,152,156,192,194,231,306,311,344,345,347,366,373,387,389,895,899,904],negoex:922,next:[150,164,279,314,404],note:939,number:[69,74,116],object:[23,178,265,321,405],obtain:[400,903,937],octet:116,offset:[266,385,396],older:26,one:[179,372],onli:282,onto:39,opaqu:[287,288,289,290,294,295,296,298,299],open:265,openldap:[22,38],oper:[23,99,100,102,103,113,114,129,130,287,288,289,290,294,295,296,298,299],optimist:258,option:[3,4,5,6,7,8,9,10,20,21,23,46,157,236,237,238,240,241,242,243,244,245,246,247,248,249,250,251,252,254,255,256,257,258,259,397,415,904,939,940,941,942,943,944,945,946],order:53,organ:901,osconf:905,other:36,otp:[20,36],output:[118,251,397],over:163,overrid:[38,55,377],overview:23,pac:[253,300,301,333,334,335,336,337,338,339,342,343],packag:[904,906],pad:[98,116,397],page:[906,934],paramet:[21,126,364],pars:[47,357,358,359],passwd_phrase_el:893,password:[23,46,125,126,166,169,243,260,277,352,361,382,383,933,936],path:915,pepper:107,perform:35,permit:261,pin:46,pkinit:[20,21,37,46,910,919],place:[100,103,288,290],pluggabl:925,plugin:[21,28,921,924],polici:[23,928],port:[39,84],possibl:[194,228,300,301,343],post:380,pre:381,preauthent:[36,40,252,254,258,920,929],precomput:92,prefix:[346,417,419,420],prepar:[158,163],prerequisit:903,previous:106,prf:[101,119],primari:[34,161],princip:[15,23,34,35,38,47,49,50,56,57,91,92,93,132,145,154,182,218,222,278,283,319,344,345,347,348,349,350,362,382,383,384,388,389,908],priv:[326,356],privileg:[23,338],procedur:14,process:[139,356,360],profil:[28,55,262,269,932],program:[1,904],prompt:[243,263,352],prompter:46,proof:109,propag:[23,34,39,915],properti:937,protocol:[363,364,375,911],provis:38,proxi:29,proxiabl:255,pseudo:[117,118,119,121,296],purge_mkei:6,purgekei:3,pwqual:[21,933],qualiti:[933,936],question:[46,365,366,369,372,373],quick:916,quit:[3,11],random:[115,117,118,119,121,124,296],rare:48,read:[158,336,354,361],read_kt:11,realm:[20,21,23,28,39,58,210,227,231,343,349,362,377,384,923],receiv:[72,73,86,87,380],recent:179,refer:[31,291,297,421,906],refus:41,reject:41,rel:187,releas:[308,906],remot:[74,82,84],remov:[14,15,151,316],rename_princip:3,renew:[256,264],replai:[71,85,265,899,913],replic:35,replica:[34,39,915],represent:[222,406],request:[26,279,399,400,401,402,404],requir:[416,944],resolv:[135,152,303,305],resourc:934,respond:[46,257,365,366,373],restor:23,restrict:[240,951],result:169,retir:14,retriev:[23,59,60,64,65,66,67,68,69,71,72,73,74,76,77,142,143,144,146,150,153,227,229,238,262,272,274,292,293,314,315,318,335,365,396,401,402,410],revers:38,rfc:[101,119],risk:25,rout:41,rpc:[328,358],s2kparam:229,s4u:43,safe:[331,360],salt:[229,258,347,374,394],salt_type_afs_length:767,salt_type_no_length:768,sampl:[20,21],sclient:947,search:54,sec:410,section:[20,21,59,60],secur:[17,32,38,909,944],see:[2,3,4,5,6,7,8,9,10,11,12,19,20,21,939,940,941,942,943,944,945,946,947,949,950,951],seen:41,select:[26,154,918],send:[76,77,88,89,381],sendauth:[41,363,364,375],separ:902,sequenc:[69,74],sequenti:[139,158,318],seri:139,serial:321,server:[14,15,32,41,154,265,363,364,931],servic:[14,23,26,38,39,194,278,315,389,403],session:[26,67,68,90,261],set:[55,80,81,82,83,84,85,86,87,88,89,90,156,157,169,240,241,242,243,244,245,246,247,248,249,250,251,254,255,256,257,258,259,277,323,378,379,380,381,382,383,384,385,416,418],set_str:3,setup:35,shell:[38,944],should:48,side:944,sign:[300,320],signatur:[300,301],simpl:[787,906],sinc:410,singl:[323,902],site:906,size:95,skew:[15,167],socket:62,softwar:903,some:[32,101],sourc:[901,906],spake:[40,909],specif:[38,97,115,117,124,296,396],specifi:[21,53,54,112,127,128,132,149,153,269,276,278,343,376,377,382,386,387],sserver:12,ssh:38,start:[34,318],stash:[6,23,900],stashsrvpw:5,state:[35,79,106,108],storag:[200,218],store:[43,155,159,198],string:[60,91,93,107,125,126,170,187,193,210,219,222,344,345,374,390,391,392,394,395,397,398,406,407,408,409],strong:14,struct:[368,371],structur:[20,21,61,66,83,142,174,175,176,177,183,199,201,202,203,206,207,208,209,215,216,220,236,292,293,344,378,385,406,407,408,409,415,802],subkei:[72,73,76,77,86,87,88,89],sun:23,suppli:[252,330],support:[14,41,100,103,160,285,288,290,896],synchron:400,synopsi:[2,3,4,5,6,7,8,9,10,11,12,939,940,941,942,943,944,945,946,947],syntax:19,system:[410,904,915],tabdump:6,tabl:[217,235,302,303,304,305,306,310,311,312,314,315,316,317,318,376],tarbal:906,target:944,termin:91,test:[35,109,110,283,285,388,902],tgt:223,thi:[332,896,906],threeparamopen:769,ticket:[23,185,221,224,253,256,259,274,300,301,376,402,403,937],time:[46,167,187,266,274,385,391,396,402,410,896],timestamp:[167,395,397,398],tkt_flg_anonym:770,tkt_flg_enc_pa_rep:771,tkt_flg_forward:[772,773],tkt_flg_hw_auth:774,tkt_flg_initi:775,tkt_flg_invalid:776,tkt_flg_may_postd:777,tkt_flg_ok_as_deleg:778,tkt_flg_postdat:779,tkt_flg_pre_auth:780,tkt_flg_proxi:782,tkt_flg_proxiabl:781,tkt_flg_renew:783,tkt_flg_transit_policy_check:784,token:[36,37,43,910],tool:895,topic:13,trace:[41,386,387],trailer:98,tree:902,trivial:909,troubleshoot:[41,42],tune:904,tutori:42,two:[52,105,107,322,348,349,350,362],type:[14,20,24,26,36,41,43,81,96,97,105,109,110,111,118,127,128,144,146,149,160,170,192,193,204,211,244,254,261,263,312,337,374,378,390,392,394,802,895,899,904],uniqu:149,unix:[32,33,915],unlock:3,unpars:339,unset:[241,242,243,249,255],unwrap:[184,412],updat:[23,906],update_princ_encrypt:6,upgrad:14,usabl:111,usag:14,use:[79,154,265,276,895],use_mkei:6,used:[48,896,904],user:[46,319,352,935,938,948],uses:894,using:[91,92,93,99,101,102,119,194,235,260,264,269,271,282,287,289,330,376,382,383,400,417,418,419,902],util:901,va_list:[417,418,419],valid:[127,128,130,267,299,354],valid_int_bit:785,valid_uint_bit:786,valu:[59,60,141,155,187,335,367,370,391],variabl:[26,27,92,904,951],variou:42,verif:[41,415,416,936],verifi:[46,127,128,129,298,301,342,343,412,414],version:[364,909],via:101,view:[5,937],view_polici:5,web:[906,934],whether:[109,110,160,283,285,388,416],whitepap:42,wiki:934,within:[167,902],without:906,work:15,wrap:[43,189],write_kt:11,year:894,your:[15,936],zero:[209,291]}})
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>For users — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Password management" href="pwd_mgmt.html" />
- <link rel="prev" title="MIT Kerberos Documentation (1.20.1)" href="../index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../index.html" title="MIT Kerberos Documentation (1.20.1)"
- accesskey="P">previous</a> |
- <a href="pwd_mgmt.html" title="Password management"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__For users">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="for-users">
-<h1>For users<a class="headerlink" href="#for-users" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="pwd_mgmt.html">Password management</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="pwd_mgmt.html#changing-your-password">Changing your password</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwd_mgmt.html#granting-access-to-your-account">Granting access to your account</a></li>
-<li class="toctree-l2"><a class="reference internal" href="pwd_mgmt.html#password-quality-verification">Password quality verification</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="tkt_mgmt.html">Ticket management</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="tkt_mgmt.html#kerberos-ticket-properties">Kerberos ticket properties</a></li>
-<li class="toctree-l2"><a class="reference internal" href="tkt_mgmt.html#obtaining-tickets-with-kinit">Obtaining tickets with kinit</a></li>
-<li class="toctree-l2"><a class="reference internal" href="tkt_mgmt.html#viewing-tickets-with-klist">Viewing tickets with klist</a></li>
-<li class="toctree-l2"><a class="reference internal" href="tkt_mgmt.html#destroying-tickets-with-kdestroy">Destroying tickets with kdestroy</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="user_config/index.html">User config files</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="user_config/kerberos.html">kerberos</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_config/k5login.html">.k5login</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_config/k5identity.html">.k5identity</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="user_commands/index.html">User commands</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/kdestroy.html">kdestroy</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/kinit.html">kinit</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/klist.html">klist</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/kpasswd.html">kpasswd</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/krb5-config.html">krb5-config</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/ksu.html">ksu</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/kswitch.html">kswitch</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/kvno.html">kvno</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/sclient.html">sclient</a></li>
-</ul>
-</li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">For users</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="current reference internal" href="#">For users</a><ul>
-<li class="toctree-l2"><a class="reference internal" href="pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_config/index.html">User config files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/index.html">User commands</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../index.html" title="MIT Kerberos Documentation (1.20.1)"
- >previous</a> |
- <a href="pwd_mgmt.html" title="Password management"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__For users">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Password management — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="Ticket management" href="tkt_mgmt.html" />
- <link rel="prev" title="For users" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="For users"
- accesskey="P">previous</a> |
- <a href="tkt_mgmt.html" title="Ticket management"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Password management">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="password-management">
-<h1>Password management<a class="headerlink" href="#password-management" title="Permalink to this headline">¶</a></h1>
-<p>Your password is the only way Kerberos has of verifying your identity.
-If someone finds out your password, that person can masquerade as
-you—send email that comes from you, read, edit, or delete your files,
-or log into other hosts as you—and no one will be able to tell the
-difference. For this reason, it is important that you choose a good
-password, and keep it secret. If you need to give access to your
-account to someone else, you can do so through Kerberos (see
-<a class="reference internal" href="#grant-access"><span class="std std-ref">Granting access to your account</span></a>). You should never tell your password to anyone,
-including your system administrator, for any reason. You should
-change your password frequently, particularly any time you think
-someone may have found out what it is.</p>
-<div class="section" id="changing-your-password">
-<h2>Changing your password<a class="headerlink" href="#changing-your-password" title="Permalink to this headline">¶</a></h2>
-<p>To change your Kerberos password, use the <a class="reference internal" href="user_commands/kpasswd.html#kpasswd-1"><span class="std std-ref">kpasswd</span></a> command.
-It will ask you for your old password (to prevent someone else from
-walking up to your computer when you’re not there and changing your
-password), and then prompt you for the new one twice. (The reason you
-have to type it twice is to make sure you have typed it correctly.)
-For example, user <code class="docutils literal"><span class="pre">david</span></code> would do the following:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kpasswd</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">david</span><span class="p">:</span> <span class="o"><-</span> <span class="n">Type</span> <span class="n">your</span> <span class="n">old</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">new</span> <span class="n">password</span><span class="p">:</span> <span class="o"><-</span> <span class="n">Type</span> <span class="n">your</span> <span class="n">new</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">it</span> <span class="n">again</span><span class="p">:</span> <span class="o"><-</span> <span class="n">Type</span> <span class="n">the</span> <span class="n">new</span> <span class="n">password</span> <span class="n">again</span><span class="o">.</span>
-<span class="n">Password</span> <span class="n">changed</span><span class="o">.</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>If <code class="docutils literal"><span class="pre">david</span></code> typed the incorrect old password, he would get the
-following message:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kpasswd</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">david</span><span class="p">:</span> <span class="o"><-</span> <span class="n">Type</span> <span class="n">the</span> <span class="n">incorrect</span> <span class="n">old</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">kpasswd</span><span class="p">:</span> <span class="n">Password</span> <span class="n">incorrect</span> <span class="k">while</span> <span class="n">getting</span> <span class="n">initial</span> <span class="n">ticket</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>If you make a mistake and don’t type the new password the same way
-twice, kpasswd will ask you to try again:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kpasswd</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">david</span><span class="p">:</span> <span class="o"><-</span> <span class="n">Type</span> <span class="n">the</span> <span class="n">old</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">new</span> <span class="n">password</span><span class="p">:</span> <span class="o"><-</span> <span class="n">Type</span> <span class="n">the</span> <span class="n">new</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">Enter</span> <span class="n">it</span> <span class="n">again</span><span class="p">:</span> <span class="o"><-</span> <span class="n">Type</span> <span class="n">a</span> <span class="n">different</span> <span class="n">new</span> <span class="n">password</span><span class="o">.</span>
-<span class="n">kpasswd</span><span class="p">:</span> <span class="n">Password</span> <span class="n">mismatch</span> <span class="k">while</span> <span class="n">reading</span> <span class="n">password</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>Once you change your password, it takes some time for the change to
-propagate through the system. Depending on how your system is set up,
-this might be anywhere from a few minutes to an hour or more. If you
-need to get new Kerberos tickets shortly after changing your password,
-try the new password. If the new password doesn’t work, try again
-using the old one.</p>
-</div>
-<div class="section" id="granting-access-to-your-account">
-<span id="grant-access"></span><h2>Granting access to your account<a class="headerlink" href="#granting-access-to-your-account" title="Permalink to this headline">¶</a></h2>
-<p>If you need to give someone access to log into your account, you can
-do so through Kerberos, without telling the person your password.
-Simply create a file called <a class="reference internal" href="user_config/k5login.html#k5login-5"><span class="std std-ref">.k5login</span></a> in your home directory.
-This file should contain the Kerberos principal of each person to whom
-you wish to give access. Each principal must be on a separate line.
-Here is a sample .k5login file:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">david</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
-</pre></div>
-</div>
-<p>This file would allow the users <code class="docutils literal"><span class="pre">jennifer</span></code> and <code class="docutils literal"><span class="pre">david</span></code> to use your
-user ID, provided that they had Kerberos tickets in their respective
-realms. If you will be logging into other hosts across a network, you
-will want to include your own Kerberos principal in your .k5login file
-on each of these hosts.</p>
-<p>Using a .k5login file is much safer than giving out your password,
-because:</p>
-<ul class="simple">
-<li>You can take access away any time simply by removing the principal
-from your .k5login file.</li>
-<li>Although the user has full access to your account on one particular
-host (or set of hosts if your .k5login file is shared, e.g., over
-NFS), that user does not inherit your network privileges.</li>
-<li>Kerberos keeps a log of who obtains tickets, so a system
-administrator could find out, if necessary, who was capable of using
-your user ID at a particular time.</li>
-</ul>
-<p>One common application is to have a .k5login file in root’s home
-directory, giving root access to that machine to the Kerberos
-principals listed. This allows system administrators to allow users
-to become root locally, or to log in remotely as root, without their
-having to give out the root password, and without anyone having to
-type the root password over the network.</p>
-</div>
-<div class="section" id="password-quality-verification">
-<h2>Password quality verification<a class="headerlink" href="#password-quality-verification" title="Permalink to this headline">¶</a></h2>
-<p>TODO</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Password management</a><ul>
-<li><a class="reference internal" href="#changing-your-password">Changing your password</a></li>
-<li><a class="reference internal" href="#granting-access-to-your-account">Granting access to your account</a></li>
-<li><a class="reference internal" href="#password-quality-verification">Password quality verification</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For users</a><ul class="current">
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_config/index.html">User config files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/index.html">User commands</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="For users"
- >previous</a> |
- <a href="tkt_mgmt.html" title="Ticket management"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Password management">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>Ticket management — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../_static/jquery.js"></script>
- <script type="text/javascript" src="../_static/underscore.js"></script>
- <script type="text/javascript" src="../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../about.html" />
- <link rel="index" title="Index" href="../genindex.html" />
- <link rel="search" title="Search" href="../search.html" />
- <link rel="copyright" title="Copyright" href="../copyright.html" />
- <link rel="next" title="User config files" href="user_config/index.html" />
- <link rel="prev" title="Password management" href="pwd_mgmt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="pwd_mgmt.html" title="Password management"
- accesskey="P">previous</a> |
- <a href="user_config/index.html" title="User config files"
- accesskey="N">next</a> |
- <a href="../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Ticket management">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ticket-management">
-<h1>Ticket management<a class="headerlink" href="#ticket-management" title="Permalink to this headline">¶</a></h1>
-<p>On many systems, Kerberos is built into the login program, and you get
-tickets automatically when you log in. Other programs, such as ssh,
-can forward copies of your tickets to a remote host. Most of these
-programs also automatically destroy your tickets when they exit.
-However, MIT recommends that you explicitly destroy your Kerberos
-tickets when you are through with them, just to be sure. One way to
-help ensure that this happens is to add the <a class="reference internal" href="user_commands/kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a> command
-to your .logout file. Additionally, if you are going to be away from
-your machine and are concerned about an intruder using your
-permissions, it is safest to either destroy all copies of your
-tickets, or use a screensaver that locks the screen.</p>
-<div class="section" id="kerberos-ticket-properties">
-<h2>Kerberos ticket properties<a class="headerlink" href="#kerberos-ticket-properties" title="Permalink to this headline">¶</a></h2>
-<p>There are various properties that Kerberos tickets can have:</p>
-<p>If a ticket is <strong>forwardable</strong>, then the KDC can issue a new ticket
-(with a different network address, if necessary) based on the
-forwardable ticket. This allows for authentication forwarding without
-requiring a password to be typed in again. For example, if a user
-with a forwardable TGT logs into a remote system, the KDC could issue
-a new TGT for that user with the network address of the remote system,
-allowing authentication on that host to work as though the user were
-logged in locally.</p>
-<p>When the KDC creates a new ticket based on a forwardable ticket, it
-sets the <strong>forwarded</strong> flag on that new ticket. Any tickets that are
-created based on a ticket with the forwarded flag set will also have
-their forwarded flags set.</p>
-<p>A <strong>proxiable</strong> ticket is similar to a forwardable ticket in that it
-allows a service to take on the identity of the client. Unlike a
-forwardable ticket, however, a proxiable ticket is only issued for
-specific services. In other words, a ticket-granting ticket cannot be
-issued based on a ticket that is proxiable but not forwardable.</p>
-<p>A <strong>proxy</strong> ticket is one that was issued based on a proxiable ticket.</p>
-<p>A <strong>postdated</strong> ticket is issued with the invalid flag set. After the
-starting time listed on the ticket, it can be presented to the KDC to
-obtain valid tickets.</p>
-<p>Ticket-granting tickets with the <strong>postdateable</strong> flag set can be used
-to obtain postdated service tickets.</p>
-<p><strong>Renewable</strong> tickets can be used to obtain new session keys without
-the user entering their password again. A renewable ticket has two
-expiration times. The first is the time at which this particular
-ticket expires. The second is the latest possible expiration time for
-any ticket issued based on this renewable ticket.</p>
-<p>A ticket with the <strong>initial flag</strong> set was issued based on the
-authentication protocol, and not on a ticket-granting ticket.
-Application servers that wish to ensure that the user’s key has been
-recently presented for verification could specify that this flag must
-be set to accept the ticket.</p>
-<p>An <strong>invalid</strong> ticket must be rejected by application servers.
-Postdated tickets are usually issued with this flag set, and must be
-validated by the KDC before they can be used.</p>
-<p>A <strong>preauthenticated</strong> ticket is one that was only issued after the
-client requesting the ticket had authenticated itself to the KDC.</p>
-<p>The <strong>hardware authentication</strong> flag is set on a ticket which required
-the use of hardware for authentication. The hardware is expected to
-be possessed only by the client which requested the tickets.</p>
-<p>If a ticket has the <strong>transit policy</strong> checked flag set, then the KDC
-that issued this ticket implements the transited-realm check policy
-and checked the transited-realms list on the ticket. The
-transited-realms list contains a list of all intermediate realms
-between the realm of the KDC that issued the first ticket and that of
-the one that issued the current ticket. If this flag is not set, then
-the application server must check the transited realms itself or else
-reject the ticket.</p>
-<p>The <strong>okay as delegate</strong> flag indicates that the server specified in
-the ticket is suitable as a delegate as determined by the policy of
-that realm. Some client applications may use this flag to decide
-whether to forward tickets to a remote host, although many
-applications do not honor it.</p>
-<p>An <strong>anonymous</strong> ticket is one in which the named principal is a
-generic principal for that realm; it does not actually specify the
-individual that will be using the ticket. This ticket is meant only
-to securely distribute a session key.</p>
-</div>
-<div class="section" id="obtaining-tickets-with-kinit">
-<span id="obtain-tkt"></span><h2>Obtaining tickets with kinit<a class="headerlink" href="#obtaining-tickets-with-kinit" title="Permalink to this headline">¶</a></h2>
-<p>If your site has integrated Kerberos V5 with the login system, you
-will get Kerberos tickets automatically when you log in. Otherwise,
-you may need to explicitly obtain your Kerberos tickets, using the
-<a class="reference internal" href="user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a> program. Similarly, if your Kerberos tickets expire,
-use the kinit program to obtain new ones.</p>
-<p>To use the kinit program, simply type <code class="docutils literal"><span class="pre">kinit</span></code> and then type your
-password at the prompt. For example, Jennifer (whose username is
-<code class="docutils literal"><span class="pre">jennifer</span></code>) works for Bleep, Inc. (a fictitious company with the
-domain name mit.edu and the Kerberos realm ATHENA.MIT.EDU). She would
-type:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kinit</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><--</span> <span class="p">[</span><span class="n">Type</span> <span class="n">jennifer</span><span class="s1">'s password here.]</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>If you type your password incorrectly, kinit will give you the
-following error message:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kinit</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><--</span> <span class="p">[</span><span class="n">Type</span> <span class="n">the</span> <span class="n">wrong</span> <span class="n">password</span> <span class="n">here</span><span class="o">.</span><span class="p">]</span>
-<span class="n">kinit</span><span class="p">:</span> <span class="n">Password</span> <span class="n">incorrect</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>and you won’t get Kerberos tickets.</p>
-<p>By default, kinit assumes you want tickets for your own username in
-your default realm. Suppose Jennifer’s friend David is visiting, and
-he wants to borrow a window to check his mail. David needs to get
-tickets for himself in his own realm, EXAMPLE.COM. He would type:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kinit</span> <span class="n">david</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">david</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span> <span class="o"><--</span> <span class="p">[</span><span class="n">Type</span> <span class="n">david</span><span class="s1">'s password here.]</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>David would then have tickets which he could use to log onto his own
-machine. Note that he typed his password locally on Jennifer’s
-machine, but it never went over the network. Kerberos on the local
-host performed the authentication to the KDC in the other realm.</p>
-<p>If you want to be able to forward your tickets to another host, you
-need to request forwardable tickets. You do this by specifying the
-<strong>-f</strong> option:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kinit</span> <span class="o">-</span><span class="n">f</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="p">:</span> <span class="o"><--</span> <span class="p">[</span><span class="n">Type</span> <span class="n">your</span> <span class="n">password</span> <span class="n">here</span><span class="o">.</span><span class="p">]</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>Note that kinit does not tell you that it obtained forwardable
-tickets; you can verify this using the <a class="reference internal" href="user_commands/klist.html#klist-1"><span class="std std-ref">klist</span></a> command (see
-<a class="reference internal" href="#view-tkt"><span class="std std-ref">Viewing tickets with klist</span></a>).</p>
-<p>Normally, your tickets are good for your system’s default ticket
-lifetime, which is ten hours on many systems. You can specify a
-different ticket lifetime with the <strong>-l</strong> option. Add the letter
-<strong>s</strong> to the value for seconds, <strong>m</strong> for minutes, <strong>h</strong> for hours, or
-<strong>d</strong> for days. For example, to obtain forwardable tickets for
-<code class="docutils literal"><span class="pre">david@EXAMPLE.COM</span></code> that would be good for three hours, you would
-type:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kinit</span> <span class="o">-</span><span class="n">f</span> <span class="o">-</span><span class="n">l</span> <span class="mi">3</span><span class="n">h</span> <span class="n">david</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">Password</span> <span class="k">for</span> <span class="n">david</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span> <span class="o"><--</span> <span class="p">[</span><span class="n">Type</span> <span class="n">david</span><span class="s1">'s password here.]</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">You cannot mix units; specifying a lifetime of 3h30m would
-result in an error. Note also that most systems specify a
-maximum ticket lifetime. If you request a longer ticket
-lifetime, it will be automatically truncated to the maximum
-lifetime.</p>
-</div>
-</div>
-<div class="section" id="viewing-tickets-with-klist">
-<span id="view-tkt"></span><h2>Viewing tickets with klist<a class="headerlink" href="#viewing-tickets-with-klist" title="Permalink to this headline">¶</a></h2>
-<p>The <a class="reference internal" href="user_commands/klist.html#klist-1"><span class="std std-ref">klist</span></a> command shows your tickets. When you first obtain
-tickets, you will have only the ticket-granting ticket. The listing
-would look like this:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">klist</span>
-<span class="n">Ticket</span> <span class="n">cache</span><span class="p">:</span> <span class="o">/</span><span class="n">tmp</span><span class="o">/</span><span class="n">krb5cc_ttypa</span>
-<span class="n">Default</span> <span class="n">principal</span><span class="p">:</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-
-<span class="n">Valid</span> <span class="n">starting</span> <span class="n">Expires</span> <span class="n">Service</span> <span class="n">principal</span>
-<span class="mi">06</span><span class="o">/</span><span class="mi">07</span><span class="o">/</span><span class="mi">04</span> <span class="mi">19</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">21</span> <span class="mi">06</span><span class="o">/</span><span class="mi">08</span><span class="o">/</span><span class="mi">04</span> <span class="mi">05</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">19</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>The ticket cache is the location of your ticket file. In the above
-example, this file is named <code class="docutils literal"><span class="pre">/tmp/krb5cc_ttypa</span></code>. The default
-principal is your Kerberos principal.</p>
-<p>The “valid starting” and “expires” fields describe the period of time
-during which the ticket is valid. The “service principal” describes
-each ticket. The ticket-granting ticket has a first component
-<code class="docutils literal"><span class="pre">krbtgt</span></code>, and a second component which is the realm name.</p>
-<p>Now, if <code class="docutils literal"><span class="pre">jennifer</span></code> connected to the machine <code class="docutils literal"><span class="pre">daffodil.mit.edu</span></code>,
-and then typed “klist” again, she would have gotten the following
-result:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">klist</span>
-<span class="n">Ticket</span> <span class="n">cache</span><span class="p">:</span> <span class="o">/</span><span class="n">tmp</span><span class="o">/</span><span class="n">krb5cc_ttypa</span>
-<span class="n">Default</span> <span class="n">principal</span><span class="p">:</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-
-<span class="n">Valid</span> <span class="n">starting</span> <span class="n">Expires</span> <span class="n">Service</span> <span class="n">principal</span>
-<span class="mi">06</span><span class="o">/</span><span class="mi">07</span><span class="o">/</span><span class="mi">04</span> <span class="mi">19</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">21</span> <span class="mi">06</span><span class="o">/</span><span class="mi">08</span><span class="o">/</span><span class="mi">04</span> <span class="mi">05</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">19</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="mi">06</span><span class="o">/</span><span class="mi">07</span><span class="o">/</span><span class="mi">04</span> <span class="mi">20</span><span class="p">:</span><span class="mi">22</span><span class="p">:</span><span class="mi">30</span> <span class="mi">06</span><span class="o">/</span><span class="mi">08</span><span class="o">/</span><span class="mi">04</span> <span class="mi">05</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">19</span> <span class="n">host</span><span class="o">/</span><span class="n">daffodil</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>Here’s what happened: when <code class="docutils literal"><span class="pre">jennifer</span></code> used ssh to connect to the
-host <code class="docutils literal"><span class="pre">daffodil.mit.edu</span></code>, the ssh program presented her
-ticket-granting ticket to the KDC and requested a host ticket for the
-host <code class="docutils literal"><span class="pre">daffodil.mit.edu</span></code>. The KDC sent the host ticket, which ssh
-then presented to the host <code class="docutils literal"><span class="pre">daffodil.mit.edu</span></code>, and she was allowed
-to log in without typing her password.</p>
-<p>Suppose your Kerberos tickets allow you to log into a host in another
-domain, such as <code class="docutils literal"><span class="pre">trillium.example.com</span></code>, which is also in another
-Kerberos realm, <code class="docutils literal"><span class="pre">EXAMPLE.COM</span></code>. If you ssh to this host, you will
-receive a ticket-granting ticket for the realm <code class="docutils literal"><span class="pre">EXAMPLE.COM</span></code>, plus
-the new host ticket for <code class="docutils literal"><span class="pre">trillium.example.com</span></code>. klist will now
-show:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">klist</span>
-<span class="n">Ticket</span> <span class="n">cache</span><span class="p">:</span> <span class="o">/</span><span class="n">tmp</span><span class="o">/</span><span class="n">krb5cc_ttypa</span>
-<span class="n">Default</span> <span class="n">principal</span><span class="p">:</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-
-<span class="n">Valid</span> <span class="n">starting</span> <span class="n">Expires</span> <span class="n">Service</span> <span class="n">principal</span>
-<span class="mi">06</span><span class="o">/</span><span class="mi">07</span><span class="o">/</span><span class="mi">04</span> <span class="mi">19</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">21</span> <span class="mi">06</span><span class="o">/</span><span class="mi">08</span><span class="o">/</span><span class="mi">04</span> <span class="mi">05</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">19</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="mi">06</span><span class="o">/</span><span class="mi">07</span><span class="o">/</span><span class="mi">04</span> <span class="mi">20</span><span class="p">:</span><span class="mi">22</span><span class="p">:</span><span class="mi">30</span> <span class="mi">06</span><span class="o">/</span><span class="mi">08</span><span class="o">/</span><span class="mi">04</span> <span class="mi">05</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">19</span> <span class="n">host</span><span class="o">/</span><span class="n">daffodil</span><span class="o">.</span><span class="n">mit</span><span class="o">.</span><span class="n">edu</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="mi">06</span><span class="o">/</span><span class="mi">07</span><span class="o">/</span><span class="mi">04</span> <span class="mi">20</span><span class="p">:</span><span class="mi">24</span><span class="p">:</span><span class="mi">18</span> <span class="mi">06</span><span class="o">/</span><span class="mi">08</span><span class="o">/</span><span class="mi">04</span> <span class="mi">05</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">19</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-<span class="mi">06</span><span class="o">/</span><span class="mi">07</span><span class="o">/</span><span class="mi">04</span> <span class="mi">20</span><span class="p">:</span><span class="mi">24</span><span class="p">:</span><span class="mi">18</span> <span class="mi">06</span><span class="o">/</span><span class="mi">08</span><span class="o">/</span><span class="mi">04</span> <span class="mi">05</span><span class="p">:</span><span class="mi">49</span><span class="p">:</span><span class="mi">19</span> <span class="n">host</span><span class="o">/</span><span class="n">trillium</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>Depending on your host’s and realm’s configuration, you may also see a
-ticket with the service principal <code class="docutils literal"><span class="pre">host/trillium.example.com@</span></code>. If
-so, this means that your host did not know what realm
-trillium.example.com is in, so it asked the <code class="docutils literal"><span class="pre">ATHENA.MIT.EDU</span></code> KDC for
-a referral. The next time you connect to <code class="docutils literal"><span class="pre">trillium.example.com</span></code>,
-the odd-looking entry will be used to avoid needing to ask for a
-referral again.</p>
-<p>You can use the <strong>-f</strong> option to view the flags that apply to your
-tickets. The flags are:</p>
-<table border="1" class="docutils">
-<colgroup>
-<col width="17%" />
-<col width="83%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td>F</td>
-<td>Forwardable</td>
-</tr>
-<tr class="row-even"><td>f</td>
-<td>forwarded</td>
-</tr>
-<tr class="row-odd"><td>P</td>
-<td>Proxiable</td>
-</tr>
-<tr class="row-even"><td>p</td>
-<td>proxy</td>
-</tr>
-<tr class="row-odd"><td>D</td>
-<td>postDateable</td>
-</tr>
-<tr class="row-even"><td>d</td>
-<td>postdated</td>
-</tr>
-<tr class="row-odd"><td>R</td>
-<td>Renewable</td>
-</tr>
-<tr class="row-even"><td>I</td>
-<td>Initial</td>
-</tr>
-<tr class="row-odd"><td>i</td>
-<td>invalid</td>
-</tr>
-<tr class="row-even"><td>H</td>
-<td>Hardware authenticated</td>
-</tr>
-<tr class="row-odd"><td>A</td>
-<td>preAuthenticated</td>
-</tr>
-<tr class="row-even"><td>T</td>
-<td>Transit policy checked</td>
-</tr>
-<tr class="row-odd"><td>O</td>
-<td>Okay as delegate</td>
-</tr>
-<tr class="row-even"><td>a</td>
-<td>anonymous</td>
-</tr>
-</tbody>
-</table>
-<p>Here is a sample listing. In this example, the user <em>jennifer</em>
-obtained her initial tickets (<strong>I</strong>), which are forwardable (<strong>F</strong>)
-and postdated (<strong>d</strong>) but not yet validated (<strong>i</strong>):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">klist</span> <span class="o">-</span><span class="n">f</span>
-<span class="n">Ticket</span> <span class="n">cache</span><span class="p">:</span> <span class="o">/</span><span class="n">tmp</span><span class="o">/</span><span class="n">krb5cc_320</span>
-<span class="n">Default</span> <span class="n">principal</span><span class="p">:</span> <span class="n">jennifer</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
-
-<span class="n">Valid</span> <span class="n">starting</span> <span class="n">Expires</span> <span class="n">Service</span> <span class="n">principal</span>
-<span class="mi">31</span><span class="o">/</span><span class="mi">07</span><span class="o">/</span><span class="mi">05</span> <span class="mi">19</span><span class="p">:</span><span class="mi">06</span><span class="p">:</span><span class="mi">25</span> <span class="mi">31</span><span class="o">/</span><span class="mi">07</span><span class="o">/</span><span class="mi">05</span> <span class="mi">19</span><span class="p">:</span><span class="mi">16</span><span class="p">:</span><span class="mi">25</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span><span class="nd">@ATHENA</span><span class="o">.</span><span class="n">MIT</span><span class="o">.</span><span class="n">EDU</span>
- <span class="n">Flags</span><span class="p">:</span> <span class="n">FdiI</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>In the following example, the user <em>david</em>’s tickets were forwarded
-(<strong>f</strong>) to this host from another host. The tickets are reforwardable
-(<strong>F</strong>):</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">klist</span> <span class="o">-</span><span class="n">f</span>
-<span class="n">Ticket</span> <span class="n">cache</span><span class="p">:</span> <span class="o">/</span><span class="n">tmp</span><span class="o">/</span><span class="n">krb5cc_p11795</span>
-<span class="n">Default</span> <span class="n">principal</span><span class="p">:</span> <span class="n">david</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
-
-<span class="n">Valid</span> <span class="n">starting</span> <span class="n">Expires</span> <span class="n">Service</span> <span class="n">principal</span>
-<span class="mi">07</span><span class="o">/</span><span class="mi">31</span><span class="o">/</span><span class="mi">05</span> <span class="mi">11</span><span class="p">:</span><span class="mi">52</span><span class="p">:</span><span class="mi">29</span> <span class="mi">07</span><span class="o">/</span><span class="mi">31</span><span class="o">/</span><span class="mi">05</span> <span class="mi">21</span><span class="p">:</span><span class="mi">11</span><span class="p">:</span><span class="mi">23</span> <span class="n">krbtgt</span><span class="o">/</span><span class="n">EXAMPLE</span><span class="o">.</span><span class="n">COM</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
- <span class="n">Flags</span><span class="p">:</span> <span class="n">Ff</span>
-<span class="mi">07</span><span class="o">/</span><span class="mi">31</span><span class="o">/</span><span class="mi">05</span> <span class="mi">12</span><span class="p">:</span><span class="mi">03</span><span class="p">:</span><span class="mi">48</span> <span class="mi">07</span><span class="o">/</span><span class="mi">31</span><span class="o">/</span><span class="mi">05</span> <span class="mi">21</span><span class="p">:</span><span class="mi">11</span><span class="p">:</span><span class="mi">23</span> <span class="n">host</span><span class="o">/</span><span class="n">trillium</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span>
- <span class="n">Flags</span><span class="p">:</span> <span class="n">Ff</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="destroying-tickets-with-kdestroy">
-<h2>Destroying tickets with kdestroy<a class="headerlink" href="#destroying-tickets-with-kdestroy" title="Permalink to this headline">¶</a></h2>
-<p>Your Kerberos tickets are proof that you are indeed yourself, and
-tickets could be stolen if someone gains access to a computer where
-they are stored. If this happens, the person who has them can
-masquerade as you until they expire. For this reason, you should
-destroy your Kerberos tickets when you are away from your computer.</p>
-<p>Destroying your tickets is easy. Simply type kdestroy:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdestroy</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-<p>If <a class="reference internal" href="user_commands/kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a> fails to destroy your tickets, it will beep and
-give an error message. For example, if kdestroy can’t find any
-tickets to destroy, it will give the following message:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">kdestroy</span>
-<span class="n">kdestroy</span><span class="p">:</span> <span class="n">No</span> <span class="n">credentials</span> <span class="n">cache</span> <span class="n">file</span> <span class="n">found</span> <span class="k">while</span> <span class="n">destroying</span> <span class="n">cache</span>
-<span class="n">shell</span><span class="o">%</span>
-</pre></div>
-</div>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">Ticket management</a><ul>
-<li><a class="reference internal" href="#kerberos-ticket-properties">Kerberos ticket properties</a></li>
-<li><a class="reference internal" href="#obtaining-tickets-with-kinit">Obtaining tickets with kinit</a></li>
-<li><a class="reference internal" href="#viewing-tickets-with-klist">Viewing tickets with klist</a></li>
-<li><a class="reference internal" href="#destroying-tickets-with-kdestroy">Destroying tickets with kdestroy</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_config/index.html">User config files</a></li>
-<li class="toctree-l2"><a class="reference internal" href="user_commands/index.html">User commands</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="pwd_mgmt.html" title="Password management"
- >previous</a> |
- <a href="user_config/index.html" title="User config files"
- >next</a> |
- <a href="../genindex.html" title="General Index"
- >index</a> |
- <a href="../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Ticket management">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>User commands — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kdestroy" href="kdestroy.html" />
- <link rel="prev" title=".k5identity" href="../user_config/k5identity.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../user_config/k5identity.html" title=".k5identity"
- accesskey="P">previous</a> |
- <a href="kdestroy.html" title="kdestroy"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__User commands">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="user-commands">
-<span id="id1"></span><h1>User commands<a class="headerlink" href="#user-commands" title="Permalink to this headline">¶</a></h1>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="kdestroy.html">kdestroy</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kinit.html">kinit</a></li>
-<li class="toctree-l1"><a class="reference internal" href="klist.html">klist</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kpasswd.html">kpasswd</a></li>
-<li class="toctree-l1"><a class="reference internal" href="krb5-config.html">krb5-config</a></li>
-<li class="toctree-l1"><a class="reference internal" href="ksu.html">ksu</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kswitch.html">kswitch</a></li>
-<li class="toctree-l1"><a class="reference internal" href="kvno.html">kvno</a></li>
-<li class="toctree-l1"><a class="reference internal" href="sclient.html">sclient</a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">User commands</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../user_config/index.html">User config files</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">User commands</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="kdestroy.html">kdestroy</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kinit.html">kinit</a></li>
-<li class="toctree-l3"><a class="reference internal" href="klist.html">klist</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpasswd.html">kpasswd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5-config.html">krb5-config</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ksu.html">ksu</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kswitch.html">kswitch</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kvno.html">kvno</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sclient.html">sclient</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../user_config/k5identity.html" title=".k5identity"
- >previous</a> |
- <a href="kdestroy.html" title="kdestroy"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__User commands">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kdestroy — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kinit" href="kinit.html" />
- <link rel="prev" title="User commands" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="User commands"
- accesskey="P">previous</a> |
- <a href="kinit.html" title="kinit"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kdestroy">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kdestroy">
-<span id="kdestroy-1"></span><h1>kdestroy<a class="headerlink" href="#kdestroy" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>kdestroy</strong>
-[<strong>-A</strong>]
-[<strong>-q</strong>]
-[<strong>-c</strong> <em>cache_name</em>]
-[<strong>-p</strong> <em>princ_name</em>]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>The kdestroy utility destroys the user’s active Kerberos authorization
-tickets by overwriting and deleting the credentials cache that
-contains them. If the credentials cache is not specified, the default
-credentials cache is destroyed.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-A</strong></dt>
-<dd>Destroys all caches in the collection, if a cache collection is
-available. May be used with the <strong>-c</strong> option to specify the
-collection to be destroyed.</dd>
-<dt><strong>-q</strong></dt>
-<dd>Run quietly. Normally kdestroy beeps if it fails to destroy the
-user’s tickets. The <strong>-q</strong> flag suppresses this behavior.</dd>
-<dt><strong>-c</strong> <em>cache_name</em></dt>
-<dd><p class="first">Use <em>cache_name</em> as the credentials (ticket) cache name and
-location; if this option is not used, the default cache name and
-location are used.</p>
-<p class="last">The default credentials cache may vary between systems. If the
-<strong>KRB5CCNAME</strong> environment variable is set, its value is used to
-name the default ticket cache.</p>
-</dd>
-<dt><strong>-p</strong> <em>princ_name</em></dt>
-<dd>If a cache collection is available, destroy the cache for
-<em>princ_name</em> instead of the primary cache. May be used with the
-<strong>-c</strong> option to specify the collection to be searched.</dd>
-</dl>
-</div>
-<div class="section" id="note">
-<h2>NOTE<a class="headerlink" href="#note" title="Permalink to this headline">¶</a></h2>
-<p>Most installations recommend that you place the kdestroy command in
-your .logout file, so that your tickets are destroyed automatically
-when you log out.</p>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="files">
-<h2>FILES<a class="headerlink" href="#files" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFCCNAME</span></a></dt>
-<dd>Default location of Kerberos 5 credentials cache</dd>
-</dl>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>, <a class="reference internal" href="klist.html#klist-1"><span class="std std-ref">klist</span></a>, <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kdestroy</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#note">NOTE</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#files">FILES</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../user_config/index.html">User config files</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User commands</a><ul class="current">
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kdestroy</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kinit.html">kinit</a></li>
-<li class="toctree-l3"><a class="reference internal" href="klist.html">klist</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpasswd.html">kpasswd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5-config.html">krb5-config</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ksu.html">ksu</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kswitch.html">kswitch</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kvno.html">kvno</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sclient.html">sclient</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="User commands"
- >previous</a> |
- <a href="kinit.html" title="kinit"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kdestroy">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kinit — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="klist" href="klist.html" />
- <link rel="prev" title="kdestroy" href="kdestroy.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kdestroy.html" title="kdestroy"
- accesskey="P">previous</a> |
- <a href="klist.html" title="klist"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kinit">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kinit">
-<span id="kinit-1"></span><h1>kinit<a class="headerlink" href="#kinit" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>kinit</strong>
-[<strong>-V</strong>]
-[<strong>-l</strong> <em>lifetime</em>]
-[<strong>-s</strong> <em>start_time</em>]
-[<strong>-r</strong> <em>renewable_life</em>]
-[<strong>-p</strong> | -<strong>P</strong>]
-[<strong>-f</strong> | -<strong>F</strong>]
-[<strong>-a</strong>]
-[<strong>-A</strong>]
-[<strong>-C</strong>]
-[<strong>-E</strong>]
-[<strong>-v</strong>]
-[<strong>-R</strong>]
-[<strong>-k</strong> [<strong>-i</strong> | -<strong>t</strong> <em>keytab_file</em>]]
-[<strong>-c</strong> <em>cache_name</em>]
-[<strong>-n</strong>]
-[<strong>-S</strong> <em>service_name</em>]
-[<strong>-I</strong> <em>input_ccache</em>]
-[<strong>-T</strong> <em>armor_ccache</em>]
-[<strong>-X</strong> <em>attribute</em>[=<em>value</em>]]
-[<strong>–request-pac</strong> | <strong>–no-request-pac</strong>]
-[<em>principal</em>]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>kinit obtains and caches an initial ticket-granting ticket for
-<em>principal</em>. If <em>principal</em> is absent, kinit chooses an appropriate
-principal name based on existing credential cache contents or the
-local username of the user invoking kinit. Some options modify the
-choice of principal name.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-V</strong></dt>
-<dd>display verbose output.</dd>
-<dt><strong>-l</strong> <em>lifetime</em></dt>
-<dd><p class="first">(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> string.) Requests a ticket with the lifetime
-<em>lifetime</em>.</p>
-<p>For example, <code class="docutils literal"><span class="pre">kinit</span> <span class="pre">-l</span> <span class="pre">5:30</span></code> or <code class="docutils literal"><span class="pre">kinit</span> <span class="pre">-l</span> <span class="pre">5h30m</span></code>.</p>
-<p class="last">If the <strong>-l</strong> option is not specified, the default ticket lifetime
-(configured by each site) is used. Specifying a ticket lifetime
-longer than the maximum ticket lifetime (configured by each site)
-will not override the configured maximum ticket lifetime.</p>
-</dd>
-<dt><strong>-s</strong> <em>start_time</em></dt>
-<dd><p class="first">(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> string.) Requests a postdated ticket. Postdated
-tickets are issued with the <strong>invalid</strong> flag set, and need to be
-resubmitted to the KDC for validation before use.</p>
-<p class="last"><em>start_time</em> specifies the duration of the delay before the ticket
-can become valid.</p>
-</dd>
-<dt><strong>-r</strong> <em>renewable_life</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> string.) Requests renewable tickets, with a total
-lifetime of <em>renewable_life</em>.</dd>
-<dt><strong>-f</strong></dt>
-<dd>requests forwardable tickets.</dd>
-<dt><strong>-F</strong></dt>
-<dd>requests non-forwardable tickets.</dd>
-<dt><strong>-p</strong></dt>
-<dd>requests proxiable tickets.</dd>
-<dt><strong>-P</strong></dt>
-<dd>requests non-proxiable tickets.</dd>
-<dt><strong>-a</strong></dt>
-<dd>requests tickets restricted to the host’s local address[es].</dd>
-<dt><strong>-A</strong></dt>
-<dd>requests tickets not restricted by address.</dd>
-<dt><strong>-C</strong></dt>
-<dd>requests canonicalization of the principal name, and allows the
-KDC to reply with a different client principal from the one
-requested.</dd>
-<dt><strong>-E</strong></dt>
-<dd>treats the principal name as an enterprise name.</dd>
-<dt><strong>-v</strong></dt>
-<dd>requests that the ticket-granting ticket in the cache (with the
-<strong>invalid</strong> flag set) be passed to the KDC for validation. If the
-ticket is within its requested time range, the cache is replaced
-with the validated ticket.</dd>
-<dt><strong>-R</strong></dt>
-<dd><p class="first">requests renewal of the ticket-granting ticket. Note that an
-expired ticket cannot be renewed, even if the ticket is still
-within its renewable life.</p>
-<p class="last">Note that renewable tickets that have expired as reported by
-<a class="reference internal" href="klist.html#klist-1"><span class="std std-ref">klist</span></a> may sometimes be renewed using this option,
-because the KDC applies a grace period to account for client-KDC
-clock skew. See <a class="reference internal" href="../../admin/conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> <strong>clockskew</strong> setting.</p>
-</dd>
-<dt><strong>-k</strong> [<strong>-i</strong> | <strong>-t</strong> <em>keytab_file</em>]</dt>
-<dd>requests a ticket, obtained from a key in the local host’s keytab.
-The location of the keytab may be specified with the <strong>-t</strong>
-<em>keytab_file</em> option, or with the <strong>-i</strong> option to specify the use
-of the default client keytab; otherwise the default keytab will be
-used. By default, a host ticket for the local host is requested,
-but any principal may be specified. On a KDC, the special keytab
-location <code class="docutils literal"><span class="pre">KDB:</span></code> can be used to indicate that kinit should open
-the KDC database and look up the key directly. This permits an
-administrator to obtain tickets as any principal that supports
-authentication based on the key.</dd>
-<dt><strong>-n</strong></dt>
-<dd><p class="first">Requests anonymous processing. Two types of anonymous principals
-are supported.</p>
-<p>For fully anonymous Kerberos, configure pkinit on the KDC and
-configure <strong>pkinit_anchors</strong> in the client’s <a class="reference internal" href="../../admin/conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>.
-Then use the <strong>-n</strong> option with a principal of the form <code class="docutils literal"><span class="pre">@REALM</span></code>
-(an empty principal name followed by the at-sign and a realm
-name). If permitted by the KDC, an anonymous ticket will be
-returned.</p>
-<p>A second form of anonymous tickets is supported; these
-realm-exposed tickets hide the identity of the client but not the
-client’s realm. For this mode, use <code class="docutils literal"><span class="pre">kinit</span> <span class="pre">-n</span></code> with a normal
-principal name. If supported by the KDC, the principal (but not
-realm) will be replaced by the anonymous principal.</p>
-<p class="last">As of release 1.8, the MIT Kerberos KDC only supports fully
-anonymous operation.</p>
-</dd>
-</dl>
-<p><strong>-I</strong> <em>input_ccache</em></p>
-<blockquote>
-<div>Specifies the name of a credentials cache that already contains a
-ticket. When obtaining that ticket, if information about how that
-ticket was obtained was also stored to the cache, that information
-will be used to affect how new credentials are obtained, including
-preselecting the same methods of authenticating to the KDC.</div></blockquote>
-<dl class="docutils">
-<dt><strong>-T</strong> <em>armor_ccache</em></dt>
-<dd>Specifies the name of a credentials cache that already contains a
-ticket. If supported by the KDC, this cache will be used to armor
-the request, preventing offline dictionary attacks and allowing
-the use of additional preauthentication mechanisms. Armoring also
-makes sure that the response from the KDC is not modified in
-transit.</dd>
-<dt><strong>-c</strong> <em>cache_name</em></dt>
-<dd><p class="first">use <em>cache_name</em> as the Kerberos 5 credentials (ticket) cache
-location. If this option is not used, the default cache location
-is used.</p>
-<p class="last">The default cache location may vary between systems. If the
-<strong>KRB5CCNAME</strong> environment variable is set, its value is used to
-locate the default cache. If a principal name is specified and
-the type of the default cache supports a collection (such as the
-DIR type), an existing cache containing credentials for the
-principal is selected or a new one is created and becomes the new
-primary cache. Otherwise, any existing contents of the default
-cache are destroyed by kinit.</p>
-</dd>
-<dt><strong>-S</strong> <em>service_name</em></dt>
-<dd>specify an alternate service name to use when getting initial
-tickets.</dd>
-<dt><strong>-X</strong> <em>attribute</em>[=<em>value</em>]</dt>
-<dd><p class="first">specify a pre-authentication <em>attribute</em> and <em>value</em> to be
-interpreted by pre-authentication modules. The acceptable
-attribute and value values vary from module to module. This
-option may be specified multiple times to specify multiple
-attributes. If no value is specified, it is assumed to be “yes”.</p>
-<p>The following attributes are recognized by the PKINIT
-pre-authentication mechanism:</p>
-<dl class="last docutils">
-<dt><strong>X509_user_identity</strong>=<em>value</em></dt>
-<dd>specify where to find user’s X509 identity information</dd>
-<dt><strong>X509_anchors</strong>=<em>value</em></dt>
-<dd>specify where to find trusted X509 anchor information</dd>
-<dt><strong>flag_RSA_PROTOCOL</strong>[<strong>=yes</strong>]</dt>
-<dd>specify use of RSA, rather than the default Diffie-Hellman
-protocol</dd>
-<dt><strong>disable_freshness</strong>[<strong>=yes</strong>]</dt>
-<dd>disable sending freshness tokens (for testing purposes only)</dd>
-</dl>
-</dd>
-<dt><strong>–request-pac</strong> | <strong>–no-request-pac</strong></dt>
-<dd>mutually exclusive. If <strong>–request-pac</strong> is set, ask the KDC to
-include a PAC in authdata; if <strong>–no-request-pac</strong> is set, ask the
-KDC not to include a PAC; if neither are set, the KDC will follow
-its default, which is typically is to include a PAC if doing so is
-supported.</dd>
-</dl>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="files">
-<h2>FILES<a class="headerlink" href="#files" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFCCNAME</span></a></dt>
-<dd>default location of Kerberos 5 credentials cache</dd>
-<dt><a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a></dt>
-<dd>default location for the local host’s keytab.</dd>
-</dl>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="klist.html#klist-1"><span class="std std-ref">klist</span></a>, <a class="reference internal" href="kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a>, <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kinit</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#files">FILES</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../user_config/index.html">User config files</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User commands</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kdestroy.html">kdestroy</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kinit</a></li>
-<li class="toctree-l3"><a class="reference internal" href="klist.html">klist</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpasswd.html">kpasswd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5-config.html">krb5-config</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ksu.html">ksu</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kswitch.html">kswitch</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kvno.html">kvno</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sclient.html">sclient</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kdestroy.html" title="kdestroy"
- >previous</a> |
- <a href="klist.html" title="klist"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kinit">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>klist — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kpasswd" href="kpasswd.html" />
- <link rel="prev" title="kinit" href="kinit.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kinit.html" title="kinit"
- accesskey="P">previous</a> |
- <a href="kpasswd.html" title="kpasswd"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__klist">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="klist">
-<span id="klist-1"></span><h1>klist<a class="headerlink" href="#klist" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>klist</strong>
-[<strong>-e</strong>]
-[[<strong>-c</strong>] [<strong>-l</strong>] [<strong>-A</strong>] [<strong>-f</strong>] [<strong>-s</strong>] [<strong>-a</strong> [<strong>-n</strong>]]]
-[<strong>-C</strong>]
-[<strong>-k</strong> [<strong>-i</strong>] [<strong>-t</strong>] [<strong>-K</strong>]]
-[<strong>-V</strong>]
-[<strong>-d</strong>]
-[<em>cache_name</em>|<em>keytab_name</em>]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>klist lists the Kerberos principal and Kerberos tickets held in a
-credentials cache, or the keys held in a keytab file.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-e</strong></dt>
-<dd>Displays the encryption types of the session key and the ticket
-for each credential in the credential cache, or each key in the
-keytab file.</dd>
-<dt><strong>-l</strong></dt>
-<dd>If a cache collection is available, displays a table summarizing
-the caches present in the collection.</dd>
-<dt><strong>-A</strong></dt>
-<dd>If a cache collection is available, displays the contents of all
-of the caches in the collection.</dd>
-<dt><strong>-c</strong></dt>
-<dd>List tickets held in a credentials cache. This is the default if
-neither <strong>-c</strong> nor <strong>-k</strong> is specified.</dd>
-<dt><strong>-f</strong></dt>
-<dd><p class="first">Shows the flags present in the credentials, using the following
-abbreviations:</p>
-<div class="last highlight-default"><div class="highlight"><pre><span></span><span class="n">F</span> <span class="n">Forwardable</span>
-<span class="n">f</span> <span class="n">forwarded</span>
-<span class="n">P</span> <span class="n">Proxiable</span>
-<span class="n">p</span> <span class="n">proxy</span>
-<span class="n">D</span> <span class="n">postDateable</span>
-<span class="n">d</span> <span class="n">postdated</span>
-<span class="n">R</span> <span class="n">Renewable</span>
-<span class="n">I</span> <span class="n">Initial</span>
-<span class="n">i</span> <span class="n">invalid</span>
-<span class="n">H</span> <span class="n">Hardware</span> <span class="n">authenticated</span>
-<span class="n">A</span> <span class="n">preAuthenticated</span>
-<span class="n">T</span> <span class="n">Transit</span> <span class="n">policy</span> <span class="n">checked</span>
-<span class="n">O</span> <span class="n">Okay</span> <span class="k">as</span> <span class="n">delegate</span>
-<span class="n">a</span> <span class="n">anonymous</span>
-</pre></div>
-</div>
-</dd>
-<dt><strong>-s</strong></dt>
-<dd>Causes klist to run silently (produce no output). klist will exit
-with status 1 if the credentials cache cannot be read or is
-expired, and with status 0 otherwise.</dd>
-<dt><strong>-a</strong></dt>
-<dd>Display list of addresses in credentials.</dd>
-<dt><strong>-n</strong></dt>
-<dd>Show numeric addresses instead of reverse-resolving addresses.</dd>
-<dt><strong>-C</strong></dt>
-<dd>List configuration data that has been stored in the credentials
-cache when klist encounters it. By default, configuration data
-is not listed.</dd>
-<dt><strong>-k</strong></dt>
-<dd>List keys held in a keytab file.</dd>
-<dt><strong>-i</strong></dt>
-<dd>In combination with <strong>-k</strong>, defaults to using the default client
-keytab instead of the default acceptor keytab, if no name is
-given.</dd>
-<dt><strong>-t</strong></dt>
-<dd>Display the time entry timestamps for each keytab entry in the
-keytab file.</dd>
-<dt><strong>-K</strong></dt>
-<dd>Display the value of the encryption key in each keytab entry in
-the keytab file.</dd>
-<dt><strong>-d</strong></dt>
-<dd>Display the authdata types (if any) for each entry.</dd>
-<dt><strong>-V</strong></dt>
-<dd>Display the Kerberos version number and exit.</dd>
-</dl>
-<p>If <em>cache_name</em> or <em>keytab_name</em> is not specified, klist will display
-the credentials in the default credentials cache or keytab file as
-appropriate. If the <strong>KRB5CCNAME</strong> environment variable is set, its
-value is used to locate the default ticket cache.</p>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="files">
-<h2>FILES<a class="headerlink" href="#files" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFCCNAME</span></a></dt>
-<dd>Default location of Kerberos 5 credentials cache</dd>
-<dt><a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a></dt>
-<dd>Default location for the local host’s keytab file.</dd>
-</dl>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>, <a class="reference internal" href="kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a>, <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">klist</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#files">FILES</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../user_config/index.html">User config files</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User commands</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kdestroy.html">kdestroy</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kinit.html">kinit</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">klist</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpasswd.html">kpasswd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5-config.html">krb5-config</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ksu.html">ksu</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kswitch.html">kswitch</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kvno.html">kvno</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sclient.html">sclient</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kinit.html" title="kinit"
- >previous</a> |
- <a href="kpasswd.html" title="kpasswd"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__klist">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kpasswd — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="krb5-config" href="krb5-config.html" />
- <link rel="prev" title="klist" href="klist.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="klist.html" title="klist"
- accesskey="P">previous</a> |
- <a href="krb5-config.html" title="krb5-config"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kpasswd">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kpasswd">
-<span id="kpasswd-1"></span><h1>kpasswd<a class="headerlink" href="#kpasswd" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>kpasswd</strong> [<em>principal</em>]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>The kpasswd command is used to change a Kerberos principal’s password.
-kpasswd first prompts for the current Kerberos password, then prompts
-the user twice for the new password, and the password is changed.</p>
-<p>If the principal is governed by a policy that specifies the length
-and/or number of character classes required in the new password, the
-new password must conform to the policy. (The five character classes
-are lower case, upper case, numbers, punctuation, and all other
-characters.)</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><em>principal</em></dt>
-<dd>Change the password for the Kerberos principal principal.
-Otherwise, kpasswd uses the principal name from an existing ccache
-if there is one; if not, the principal is derived from the
-identity of the user invoking the kpasswd command.</dd>
-</dl>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="../../admin/admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>, <a class="reference internal" href="../../admin/admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a>, <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kpasswd</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../user_config/index.html">User config files</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User commands</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kdestroy.html">kdestroy</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kinit.html">kinit</a></li>
-<li class="toctree-l3"><a class="reference internal" href="klist.html">klist</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kpasswd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5-config.html">krb5-config</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ksu.html">ksu</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kswitch.html">kswitch</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kvno.html">kvno</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sclient.html">sclient</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="klist.html" title="klist"
- >previous</a> |
- <a href="krb5-config.html" title="krb5-config"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kpasswd">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>krb5-config — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="ksu" href="ksu.html" />
- <link rel="prev" title="kpasswd" href="kpasswd.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kpasswd.html" title="kpasswd"
- accesskey="P">previous</a> |
- <a href="ksu.html" title="ksu"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5-config">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="krb5-config">
-<span id="krb5-config-1"></span><h1>krb5-config<a class="headerlink" href="#krb5-config" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>krb5-config</strong>
-[<strong>-</strong><strong>-help</strong> | <strong>-</strong><strong>-all</strong> | <strong>-</strong><strong>-version</strong> | <strong>-</strong><strong>-vendor</strong> | <strong>-</strong><strong>-prefix</strong> | <strong>-</strong><strong>-exec-prefix</strong> | <strong>-</strong><strong>-defccname</strong> | <strong>-</strong><strong>-defktname</strong> | <strong>-</strong><strong>-defcktname</strong> | <strong>-</strong><strong>-cflags</strong> | <strong>-</strong><strong>-libs</strong> [<em>libraries</em>]]</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>krb5-config tells the application programmer what flags to use to compile
-and link programs against the installed Kerberos libraries.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-</strong><strong>-help</strong></dt>
-<dd>prints a usage message. This is the default behavior when no options
-are specified.</dd>
-<dt><strong>-</strong><strong>-all</strong></dt>
-<dd>prints the version, vendor, prefix, and exec-prefix.</dd>
-<dt><strong>-</strong><strong>-version</strong></dt>
-<dd>prints the version number of the Kerberos installation.</dd>
-<dt><strong>-</strong><strong>-vendor</strong></dt>
-<dd>prints the name of the vendor of the Kerberos installation.</dd>
-<dt><strong>-</strong><strong>-prefix</strong></dt>
-<dd>prints the prefix for which the Kerberos installation was built.</dd>
-<dt><strong>-</strong><strong>-exec-prefix</strong></dt>
-<dd>prints the prefix for executables for which the Kerberos installation
-was built.</dd>
-<dt><strong>-</strong><strong>-defccname</strong></dt>
-<dd>prints the built-in default credentials cache location.</dd>
-<dt><strong>-</strong><strong>-defktname</strong></dt>
-<dd>prints the built-in default keytab location.</dd>
-<dt><strong>-</strong><strong>-defcktname</strong></dt>
-<dd>prints the built-in default client (initiator) keytab location.</dd>
-<dt><strong>-</strong><strong>-cflags</strong></dt>
-<dd>prints the compilation flags used to build the Kerberos installation.</dd>
-<dt><strong>-</strong><strong>-libs</strong> [<em>library</em>]</dt>
-<dd><p class="first">prints the compiler options needed to link against <em>library</em>.
-Allowed values for <em>library</em> are:</p>
-<table border="1" class="last docutils">
-<colgroup>
-<col width="20%" />
-<col width="80%" />
-</colgroup>
-<tbody valign="top">
-<tr class="row-odd"><td>krb5</td>
-<td>Kerberos 5 applications (default)</td>
-</tr>
-<tr class="row-even"><td>gssapi</td>
-<td>GSSAPI applications with Kerberos 5 bindings</td>
-</tr>
-<tr class="row-odd"><td>kadm-client</td>
-<td>Kadmin client</td>
-</tr>
-<tr class="row-even"><td>kadm-server</td>
-<td>Kadmin server</td>
-</tr>
-<tr class="row-odd"><td>kdb</td>
-<td>Applications that access the Kerberos database</td>
-</tr>
-</tbody>
-</table>
-</dd>
-</dl>
-</div>
-<div class="section" id="examples">
-<h2>EXAMPLES<a class="headerlink" href="#examples" title="Permalink to this headline">¶</a></h2>
-<p>krb5-config is particularly useful for compiling against a Kerberos
-installation that was installed in a non-standard location. For example,
-a Kerberos installation that is installed in <code class="docutils literal"><span class="pre">/opt/krb5/</span></code> but uses
-libraries in <code class="docutils literal"><span class="pre">/usr/local/lib/</span></code> for text localization would produce
-the following output:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">shell</span><span class="o">%</span> <span class="n">krb5</span><span class="o">-</span><span class="n">config</span> <span class="o">--</span><span class="n">libs</span> <span class="n">krb5</span>
-<span class="o">-</span><span class="n">L</span><span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">krb5</span><span class="o">/</span><span class="n">lib</span> <span class="o">-</span><span class="n">Wl</span><span class="p">,</span><span class="o">-</span><span class="n">rpath</span> <span class="o">-</span><span class="n">Wl</span><span class="p">,</span><span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">krb5</span><span class="o">/</span><span class="n">lib</span> <span class="o">-</span><span class="n">L</span><span class="o">/</span><span class="n">usr</span><span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">lib</span> <span class="o">-</span><span class="n">lkrb5</span> <span class="o">-</span><span class="n">lk5crypto</span> <span class="o">-</span><span class="n">lcom_err</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a>, cc(1)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">krb5-config</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#examples">EXAMPLES</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../user_config/index.html">User config files</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User commands</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kdestroy.html">kdestroy</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kinit.html">kinit</a></li>
-<li class="toctree-l3"><a class="reference internal" href="klist.html">klist</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpasswd.html">kpasswd</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">krb5-config</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ksu.html">ksu</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kswitch.html">kswitch</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kvno.html">kvno</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sclient.html">sclient</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kpasswd.html" title="kpasswd"
- >previous</a> |
- <a href="ksu.html" title="ksu"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__krb5-config">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>ksu — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kswitch" href="kswitch.html" />
- <link rel="prev" title="krb5-config" href="krb5-config.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="krb5-config.html" title="krb5-config"
- accesskey="P">previous</a> |
- <a href="kswitch.html" title="kswitch"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ksu">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="ksu">
-<span id="ksu-1"></span><h1>ksu<a class="headerlink" href="#ksu" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>ksu</strong>
-[ <em>target_user</em> ]
-[ <strong>-n</strong> <em>target_principal_name</em> ]
-[ <strong>-c</strong> <em>source_cache_name</em> ]
-[ <strong>-k</strong> ]
-[ <strong>-r</strong> time ]
-[ <strong>-p</strong> | <strong>-P</strong>]
-[ <strong>-f</strong> | <strong>-F</strong>]
-[ <strong>-l</strong> <em>lifetime</em> ]
-[ <strong>-z | Z</strong> ]
-[ <strong>-q</strong> ]
-[ <strong>-e</strong> <em>command</em> [ args … ] ] [ <strong>-a</strong> [ args … ] ]</p>
-</div>
-<div class="section" id="requirements">
-<h2>REQUIREMENTS<a class="headerlink" href="#requirements" title="Permalink to this headline">¶</a></h2>
-<p>Must have Kerberos version 5 installed to compile ksu. Must have a
-Kerberos version 5 server running to use ksu.</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>ksu is a Kerberized version of the su program that has two missions:
-one is to securely change the real and effective user ID to that of
-the target user, and the other is to create a new security context.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p>For the sake of clarity, all references to and attributes of
-the user invoking the program will start with “source”
-(e.g., “source user”, “source cache”, etc.).</p>
-<p class="last">Likewise, all references to and attributes of the target
-account will start with “target”.</p>
-</div>
-</div>
-<div class="section" id="authentication">
-<h2>AUTHENTICATION<a class="headerlink" href="#authentication" title="Permalink to this headline">¶</a></h2>
-<p>To fulfill the first mission, ksu operates in two phases:
-authentication and authorization. Resolving the target principal name
-is the first step in authentication. The user can either specify his
-principal name with the <strong>-n</strong> option (e.g., <code class="docutils literal"><span class="pre">-n</span> <span class="pre">jqpublic@USC.EDU</span></code>)
-or a default principal name will be assigned using a heuristic
-described in the OPTIONS section (see <strong>-n</strong> option). The target user
-name must be the first argument to ksu; if not specified root is the
-default. If <code class="docutils literal"><span class="pre">.</span></code> is specified then the target user will be the
-source user (e.g., <code class="docutils literal"><span class="pre">ksu</span> <span class="pre">.</span></code>). If the source user is root or the
-target user is the source user, no authentication or authorization
-takes place. Otherwise, ksu looks for an appropriate Kerberos ticket
-in the source cache.</p>
-<p>The ticket can either be for the end-server or a ticket granting
-ticket (TGT) for the target principal’s realm. If the ticket for the
-end-server is already in the cache, it’s decrypted and verified. If
-it’s not in the cache but the TGT is, the TGT is used to obtain the
-ticket for the end-server. The end-server ticket is then verified.
-If neither ticket is in the cache, but ksu is compiled with the
-<strong>GET_TGT_VIA_PASSWD</strong> define, the user will be prompted for a
-Kerberos password which will then be used to get a TGT. If the user
-is logged in remotely and does not have a secure channel, the password
-may be exposed. If neither ticket is in the cache and
-<strong>GET_TGT_VIA_PASSWD</strong> is not defined, authentication fails.</p>
-</div>
-<div class="section" id="authorization">
-<h2>AUTHORIZATION<a class="headerlink" href="#authorization" title="Permalink to this headline">¶</a></h2>
-<p>This section describes authorization of the source user when ksu is
-invoked without the <strong>-e</strong> option. For a description of the <strong>-e</strong>
-option, see the OPTIONS section.</p>
-<p>Upon successful authentication, ksu checks whether the target
-principal is authorized to access the target account. In the target
-user’s home directory, ksu attempts to access two authorization files:
-<a class="reference internal" href="../user_config/k5login.html#k5login-5"><span class="std std-ref">.k5login</span></a> and .k5users. In the .k5login file each line
-contains the name of a principal that is authorized to access the
-account.</p>
-<p>For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">jqpublic</span><span class="nd">@USC</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">jqpublic</span><span class="o">/</span><span class="n">secure</span><span class="nd">@USC</span><span class="o">.</span><span class="n">EDU</span>
-<span class="n">jqpublic</span><span class="o">/</span><span class="n">admin</span><span class="nd">@USC</span><span class="o">.</span><span class="n">EDU</span>
-</pre></div>
-</div>
-<p>The format of .k5users is the same, except the principal name may be
-followed by a list of commands that the principal is authorized to
-execute (see the <strong>-e</strong> option in the OPTIONS section for details).</p>
-<p>Thus if the target principal name is found in the .k5login file the
-source user is authorized to access the target account. Otherwise ksu
-looks in the .k5users file. If the target principal name is found
-without any trailing commands or followed only by <code class="docutils literal"><span class="pre">*</span></code> then the
-source user is authorized. If either .k5login or .k5users exist but
-an appropriate entry for the target principal does not exist then
-access is denied. If neither file exists then the principal will be
-granted access to the account according to the aname->lname mapping
-rules. Otherwise, authorization fails.</p>
-</div>
-<div class="section" id="execution-of-the-target-shell">
-<h2>EXECUTION OF THE TARGET SHELL<a class="headerlink" href="#execution-of-the-target-shell" title="Permalink to this headline">¶</a></h2>
-<p>Upon successful authentication and authorization, ksu proceeds in a
-similar fashion to su. The environment is unmodified with the
-exception of USER, HOME and SHELL variables. If the target user is
-not root, USER gets set to the target user name. Otherwise USER
-remains unchanged. Both HOME and SHELL are set to the target login’s
-default values. In addition, the environment variable <strong>KRB5CCNAME</strong>
-gets set to the name of the target cache. The real and effective user
-ID are changed to that of the target user. The target user’s shell is
-then invoked (the shell name is specified in the password file). Upon
-termination of the shell, ksu deletes the target cache (unless ksu is
-invoked with the <strong>-k</strong> option). This is implemented by first doing a
-fork and then an exec, instead of just exec, as done by su.</p>
-</div>
-<div class="section" id="creating-a-new-security-context">
-<h2>CREATING A NEW SECURITY CONTEXT<a class="headerlink" href="#creating-a-new-security-context" title="Permalink to this headline">¶</a></h2>
-<p>ksu can be used to create a new security context for the target
-program (either the target shell, or command specified via the <strong>-e</strong>
-option). The target program inherits a set of credentials from the
-source user. By default, this set includes all of the credentials in
-the source cache plus any additional credentials obtained during
-authentication. The source user is able to limit the credentials in
-this set by using <strong>-z</strong> or <strong>-Z</strong> option. <strong>-z</strong> restricts the copy
-of tickets from the source cache to the target cache to only the
-tickets where client == the target principal name. The <strong>-Z</strong> option
-provides the target user with a fresh target cache (no creds in the
-cache). Note that for security reasons, when the source user is root
-and target user is non-root, <strong>-z</strong> option is the default mode of
-operation.</p>
-<p>While no authentication takes place if the source user is root or is
-the same as the target user, additional tickets can still be obtained
-for the target cache. If <strong>-n</strong> is specified and no credentials can
-be copied to the target cache, the source user is prompted for a
-Kerberos password (unless <strong>-Z</strong> specified or <strong>GET_TGT_VIA_PASSWD</strong>
-is undefined). If successful, a TGT is obtained from the Kerberos
-server and stored in the target cache. Otherwise, if a password is
-not provided (user hit return) ksu continues in a normal mode of
-operation (the target cache will not contain the desired TGT). If the
-wrong password is typed in, ksu fails.</p>
-<div class="admonition note">
-<p class="first admonition-title">Note</p>
-<p class="last">During authentication, only the tickets that could be
-obtained without providing a password are cached in the
-source cache.</p>
-</div>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-n</strong> <em>target_principal_name</em></dt>
-<dd><p class="first">Specify a Kerberos target principal name. Used in authentication
-and authorization phases of ksu.</p>
-<p>If ksu is invoked without <strong>-n</strong>, a default principal name is
-assigned via the following heuristic:</p>
-<ul class="last">
-<li><p class="first">Case 1: source user is non-root.</p>
-<p>If the target user is the source user the default principal name
-is set to the default principal of the source cache. If the
-cache does not exist then the default principal name is set to
-<code class="docutils literal"><span class="pre">target_user@local_realm</span></code>. If the source and target users are
-different and neither <code class="docutils literal"><span class="pre">~target_user/.k5users</span></code> nor
-<code class="docutils literal"><span class="pre">~target_user/.k5login</span></code> exist then the default principal name
-is <code class="docutils literal"><span class="pre">target_user_login_name@local_realm</span></code>. Otherwise, starting
-with the first principal listed below, ksu checks if the
-principal is authorized to access the target account and whether
-there is a legitimate ticket for that principal in the source
-cache. If both conditions are met that principal becomes the
-default target principal, otherwise go to the next principal.</p>
-<ol class="loweralpha simple">
-<li>default principal of the source cache</li>
-<li>target_user@local_realm</li>
-<li>source_user@local_realm</li>
-</ol>
-<p>If a-c fails try any principal for which there is a ticket in
-the source cache and that is authorized to access the target
-account. If that fails select the first principal that is
-authorized to access the target account from the above list. If
-none are authorized and ksu is configured with
-<strong>PRINC_LOOK_AHEAD</strong> turned on, select the default principal as
-follows:</p>
-<p>For each candidate in the above list, select an authorized
-principal that has the same realm name and first part of the
-principal name equal to the prefix of the candidate. For
-example if candidate a) is <code class="docutils literal"><span class="pre">jqpublic@ISI.EDU</span></code> and
-<code class="docutils literal"><span class="pre">jqpublic/secure@ISI.EDU</span></code> is authorized to access the target
-account then the default principal is set to
-<code class="docutils literal"><span class="pre">jqpublic/secure@ISI.EDU</span></code>.</p>
-</li>
-<li><p class="first">Case 2: source user is root.</p>
-<p>If the target user is non-root then the default principal name
-is <code class="docutils literal"><span class="pre">target_user@local_realm</span></code>. Else, if the source cache
-exists the default principal name is set to the default
-principal of the source cache. If the source cache does not
-exist, default principal name is set to <code class="docutils literal"><span class="pre">root\@local_realm</span></code>.</p>
-</li>
-</ul>
-</dd>
-</dl>
-<p><strong>-c</strong> <em>source_cache_name</em></p>
-<blockquote>
-<div><p>Specify source cache name (e.g., <code class="docutils literal"><span class="pre">-c</span> <span class="pre">FILE:/tmp/my_cache</span></code>). If
-<strong>-c</strong> option is not used then the name is obtained from
-<strong>KRB5CCNAME</strong> environment variable. If <strong>KRB5CCNAME</strong> is not
-defined the source cache name is set to <code class="docutils literal"><span class="pre">krb5cc_<source</span> <span class="pre">uid></span></code>.
-The target cache name is automatically set to <code class="docutils literal"><span class="pre">krb5cc_<target</span>
-<span class="pre">uid>.(gen_sym())</span></code>, where gen_sym generates a new number such that
-the resulting cache does not already exist. For example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">krb5cc_1984</span><span class="o">.</span><span class="mi">2</span>
-</pre></div>
-</div>
-</div></blockquote>
-<dl class="docutils">
-<dt><strong>-k</strong></dt>
-<dd>Do not delete the target cache upon termination of the target
-shell or a command (<strong>-e</strong> command). Without <strong>-k</strong>, ksu deletes
-the target cache.</dd>
-<dt><strong>-z</strong></dt>
-<dd>Restrict the copy of tickets from the source cache to the target
-cache to only the tickets where client == the target principal
-name. Use the <strong>-n</strong> option if you want the tickets for other then
-the default principal. Note that the <strong>-z</strong> option is mutually
-exclusive with the <strong>-Z</strong> option.</dd>
-<dt><strong>-Z</strong></dt>
-<dd>Don’t copy any tickets from the source cache to the target cache.
-Just create a fresh target cache, where the default principal name
-of the cache is initialized to the target principal name. Note
-that the <strong>-Z</strong> option is mutually exclusive with the <strong>-z</strong>
-option.</dd>
-<dt><strong>-q</strong></dt>
-<dd>Suppress the printing of status messages.</dd>
-</dl>
-<p>Ticket granting ticket options:</p>
-<dl class="docutils">
-<dt><strong>-l</strong> <em>lifetime</em> <strong>-r</strong> <em>time</em> <strong>-p</strong> <strong>-P</strong> <strong>-f</strong> <strong>-F</strong></dt>
-<dd>The ticket granting ticket options only apply to the case where
-there are no appropriate tickets in the cache to authenticate the
-source user. In this case if ksu is configured to prompt users
-for a Kerberos password (<strong>GET_TGT_VIA_PASSWD</strong> is defined), the
-ticket granting ticket options that are specified will be used
-when getting a ticket granting ticket from the Kerberos server.</dd>
-<dt><strong>-l</strong> <em>lifetime</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> string.) Specifies the lifetime to be requested
-for the ticket; if this option is not specified, the default ticket
-lifetime (12 hours) is used instead.</dd>
-<dt><strong>-r</strong> <em>time</em></dt>
-<dd>(<a class="reference internal" href="../../basic/date_format.html#duration"><span class="std std-ref">Time duration</span></a> string.) Specifies that the <strong>renewable</strong> option
-should be requested for the ticket, and specifies the desired
-total lifetime of the ticket.</dd>
-<dt><strong>-p</strong></dt>
-<dd>specifies that the <strong>proxiable</strong> option should be requested for
-the ticket.</dd>
-<dt><strong>-P</strong></dt>
-<dd>specifies that the <strong>proxiable</strong> option should not be requested
-for the ticket, even if the default configuration is to ask for
-proxiable tickets.</dd>
-<dt><strong>-f</strong></dt>
-<dd>option specifies that the <strong>forwardable</strong> option should be
-requested for the ticket.</dd>
-<dt><strong>-F</strong></dt>
-<dd>option specifies that the <strong>forwardable</strong> option should not be
-requested for the ticket, even if the default configuration is to
-ask for forwardable tickets.</dd>
-<dt><strong>-e</strong> <em>command</em> [<em>args</em> …]</dt>
-<dd><p class="first">ksu proceeds exactly the same as if it was invoked without the
-<strong>-e</strong> option, except instead of executing the target shell, ksu
-executes the specified command. Example of usage:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">ksu</span> <span class="n">bob</span> <span class="o">-</span><span class="n">e</span> <span class="n">ls</span> <span class="o">-</span><span class="n">lag</span>
-</pre></div>
-</div>
-<p>The authorization algorithm for <strong>-e</strong> is as follows:</p>
-<p>If the source user is root or source user == target user, no
-authorization takes place and the command is executed. If source
-user id != 0, and <code class="docutils literal"><span class="pre">~target_user/.k5users</span></code> file does not exist,
-authorization fails. Otherwise, <code class="docutils literal"><span class="pre">~target_user/.k5users</span></code> file
-must have an appropriate entry for target principal to get
-authorized.</p>
-<p>The .k5users file format:</p>
-<p>A single principal entry on each line that may be followed by a
-list of commands that the principal is authorized to execute. A
-principal name followed by a <code class="docutils literal"><span class="pre">*</span></code> means that the user is
-authorized to execute any command. Thus, in the following
-example:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">jqpublic</span><span class="nd">@USC</span><span class="o">.</span><span class="n">EDU</span> <span class="n">ls</span> <span class="n">mail</span> <span class="o">/</span><span class="n">local</span><span class="o">/</span><span class="n">kerberos</span><span class="o">/</span><span class="n">klist</span>
-<span class="n">jqpublic</span><span class="o">/</span><span class="n">secure</span><span class="nd">@USC</span><span class="o">.</span><span class="n">EDU</span> <span class="o">*</span>
-<span class="n">jqpublic</span><span class="o">/</span><span class="n">admin</span><span class="nd">@USC</span><span class="o">.</span><span class="n">EDU</span>
-</pre></div>
-</div>
-<p><code class="docutils literal"><span class="pre">jqpublic@USC.EDU</span></code> is only authorized to execute <code class="docutils literal"><span class="pre">ls</span></code>,
-<code class="docutils literal"><span class="pre">mail</span></code> and <code class="docutils literal"><span class="pre">klist</span></code> commands. <code class="docutils literal"><span class="pre">jqpublic/secure@USC.EDU</span></code> is
-authorized to execute any command. <code class="docutils literal"><span class="pre">jqpublic/admin@USC.EDU</span></code> is
-not authorized to execute any command. Note, that
-<code class="docutils literal"><span class="pre">jqpublic/admin@USC.EDU</span></code> is authorized to execute the target
-shell (regular ksu, without the <strong>-e</strong> option) but
-<code class="docutils literal"><span class="pre">jqpublic@USC.EDU</span></code> is not.</p>
-<p>The commands listed after the principal name must be either a full
-path names or just the program name. In the second case,
-<strong>CMD_PATH</strong> specifying the location of authorized programs must
-be defined at the compilation time of ksu. Which command gets
-executed?</p>
-<p class="last">If the source user is root or the target user is the source user
-or the user is authorized to execute any command (<code class="docutils literal"><span class="pre">*</span></code> entry)
-then command can be either a full or a relative path leading to
-the target program. Otherwise, the user must specify either a
-full path or just the program name.</p>
-</dd>
-<dt><strong>-a</strong> <em>args</em></dt>
-<dd><p class="first">Specify arguments to be passed to the target shell. Note that all
-flags and parameters following -a will be passed to the shell,
-thus all options intended for ksu must precede <strong>-a</strong>.</p>
-<p>The <strong>-a</strong> option can be used to simulate the <strong>-e</strong> option if
-used as follows:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="o">-</span><span class="n">a</span> <span class="o">-</span><span class="n">c</span> <span class="p">[</span><span class="n">command</span> <span class="p">[</span><span class="n">arguments</span><span class="p">]]</span><span class="o">.</span>
-</pre></div>
-</div>
-<p class="last"><strong>-c</strong> is interpreted by the c-shell to execute the command.</p>
-</dd>
-</dl>
-</div>
-<div class="section" id="installation-instructions">
-<h2>INSTALLATION INSTRUCTIONS<a class="headerlink" href="#installation-instructions" title="Permalink to this headline">¶</a></h2>
-<p>ksu can be compiled with the following four flags:</p>
-<dl class="docutils">
-<dt><strong>GET_TGT_VIA_PASSWD</strong></dt>
-<dd>In case no appropriate tickets are found in the source cache, the
-user will be prompted for a Kerberos password. The password is
-then used to get a ticket granting ticket from the Kerberos
-server. The danger of configuring ksu with this macro is if the
-source user is logged in remotely and does not have a secure
-channel, the password may get exposed.</dd>
-<dt><strong>PRINC_LOOK_AHEAD</strong></dt>
-<dd>During the resolution of the default principal name,
-<strong>PRINC_LOOK_AHEAD</strong> enables ksu to find principal names in
-the .k5users file as described in the OPTIONS section
-(see <strong>-n</strong> option).</dd>
-<dt><strong>CMD_PATH</strong></dt>
-<dd>Specifies a list of directories containing programs that users are
-authorized to execute (via .k5users file).</dd>
-<dt><strong>HAVE_GETUSERSHELL</strong></dt>
-<dd>If the source user is non-root, ksu insists that the target user’s
-shell to be invoked is a “legal shell”. <em>getusershell(3)</em> is
-called to obtain the names of “legal shells”. Note that the
-target user’s shell is obtained from the passwd file.</dd>
-</dl>
-<p>Sample configuration:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">KSU_OPTS</span> <span class="o">=</span> <span class="o">-</span><span class="n">DGET_TGT_VIA_PASSWD</span> <span class="o">-</span><span class="n">DPRINC_LOOK_AHEAD</span> <span class="o">-</span><span class="n">DCMD_PATH</span><span class="o">=</span><span class="s1">'"/bin /usr/ucb /local/bin"</span>
-</pre></div>
-</div>
-<p>ksu should be owned by root and have the set user id bit turned on.</p>
-<p>ksu attempts to get a ticket for the end server just as Kerberized
-telnet and rlogin. Thus, there must be an entry for the server in the
-Kerberos database (e.g., <code class="docutils literal"><span class="pre">host/nii.isi.edu@ISI.EDU</span></code>). The keytab
-file must be in an appropriate location.</p>
-</div>
-<div class="section" id="side-effects">
-<h2>SIDE EFFECTS<a class="headerlink" href="#side-effects" title="Permalink to this headline">¶</a></h2>
-<p>ksu deletes all expired tickets from the source cache.</p>
-</div>
-<div class="section" id="author-of-ksu">
-<h2>AUTHOR OF KSU<a class="headerlink" href="#author-of-ksu" title="Permalink to this headline">¶</a></h2>
-<p>GENNADY (ARI) MEDVINSKY</p>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a>, <a class="reference internal" href="kinit.html#kinit-1"><span class="std std-ref">kinit</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">ksu</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#requirements">REQUIREMENTS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#authentication">AUTHENTICATION</a></li>
-<li><a class="reference internal" href="#authorization">AUTHORIZATION</a></li>
-<li><a class="reference internal" href="#execution-of-the-target-shell">EXECUTION OF THE TARGET SHELL</a></li>
-<li><a class="reference internal" href="#creating-a-new-security-context">CREATING A NEW SECURITY CONTEXT</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#installation-instructions">INSTALLATION INSTRUCTIONS</a></li>
-<li><a class="reference internal" href="#side-effects">SIDE EFFECTS</a></li>
-<li><a class="reference internal" href="#author-of-ksu">AUTHOR OF KSU</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../user_config/index.html">User config files</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User commands</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kdestroy.html">kdestroy</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kinit.html">kinit</a></li>
-<li class="toctree-l3"><a class="reference internal" href="klist.html">klist</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpasswd.html">kpasswd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5-config.html">krb5-config</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">ksu</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kswitch.html">kswitch</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kvno.html">kvno</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sclient.html">sclient</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="krb5-config.html" title="krb5-config"
- >previous</a> |
- <a href="kswitch.html" title="kswitch"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__ksu">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kswitch — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kvno" href="kvno.html" />
- <link rel="prev" title="ksu" href="ksu.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="ksu.html" title="ksu"
- accesskey="P">previous</a> |
- <a href="kvno.html" title="kvno"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kswitch">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kswitch">
-<span id="kswitch-1"></span><h1>kswitch<a class="headerlink" href="#kswitch" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>kswitch</strong>
-{<strong>-c</strong> <em>cachename</em>|<strong>-p</strong> <em>principal</em>}</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>kswitch makes the specified credential cache the primary cache for the
-collection, if a cache collection is available.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-c</strong> <em>cachename</em></dt>
-<dd>Directly specifies the credential cache to be made primary.</dd>
-<dt><strong>-p</strong> <em>principal</em></dt>
-<dd>Causes the cache collection to be searched for a cache containing
-credentials for <em>principal</em>. If one is found, that collection is
-made primary.</dd>
-</dl>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="files">
-<h2>FILES<a class="headerlink" href="#files" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFCCNAME</span></a></dt>
-<dd>Default location of Kerberos 5 credentials cache</dd>
-</dl>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>, <a class="reference internal" href="kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a>, <a class="reference internal" href="klist.html#klist-1"><span class="std std-ref">klist</span></a>,
-<a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kswitch</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#files">FILES</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../user_config/index.html">User config files</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User commands</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kdestroy.html">kdestroy</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kinit.html">kinit</a></li>
-<li class="toctree-l3"><a class="reference internal" href="klist.html">klist</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpasswd.html">kpasswd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5-config.html">krb5-config</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ksu.html">ksu</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kswitch</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kvno.html">kvno</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sclient.html">sclient</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="ksu.html" title="ksu"
- >previous</a> |
- <a href="kvno.html" title="kvno"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kswitch">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kvno — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="sclient" href="sclient.html" />
- <link rel="prev" title="kswitch" href="kswitch.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kswitch.html" title="kswitch"
- accesskey="P">previous</a> |
- <a href="sclient.html" title="sclient"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kvno">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kvno">
-<span id="kvno-1"></span><h1>kvno<a class="headerlink" href="#kvno" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>kvno</strong>
-[<strong>-c</strong> <em>ccache</em>]
-[<strong>-e</strong> <em>etype</em>]
-[<strong>-k</strong> <em>keytab</em>]
-[<strong>-q</strong>]
-[<strong>-u</strong> | <strong>-S</strong> <em>sname</em>]
-[<strong>-P</strong>]
-[<strong>–cached-only</strong>]
-[<strong>–no-store</strong>]
-[<strong>–out-cache</strong> <em>cache</em>]
-[[{<strong>-F</strong> <em>cert_file</em> | {<strong>-I</strong> | <strong>-U</strong>} <em>for_user</em>} [<strong>-P</strong>]] | <strong>–u2u</strong> <em>ccache</em>]
-<em>service1 service2</em> …</p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>kvno acquires a service ticket for the specified Kerberos principals
-and prints out the key version numbers of each.</p>
-</div>
-<div class="section" id="options">
-<h2>OPTIONS<a class="headerlink" href="#options" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><strong>-c</strong> <em>ccache</em></dt>
-<dd>Specifies the name of a credentials cache to use (if not the
-default)</dd>
-<dt><strong>-e</strong> <em>etype</em></dt>
-<dd>Specifies the enctype which will be requested for the session key
-of all the services named on the command line. This is useful in
-certain backward compatibility situations.</dd>
-<dt><strong>-k</strong> <em>keytab</em></dt>
-<dd>Decrypt the acquired tickets using <em>keytab</em> to confirm their
-validity.</dd>
-<dt><strong>-q</strong></dt>
-<dd>Suppress printing output when successful. If a service ticket
-cannot be obtained, an error message will still be printed and
-kvno will exit with nonzero status.</dd>
-<dt><strong>-u</strong></dt>
-<dd>Use the unknown name type in requested service principal names.
-This option Cannot be used with <em>-S</em>.</dd>
-<dt><strong>-P</strong></dt>
-<dd>Specifies that the <em>service1 service2</em> … arguments are to be
-treated as services for which credentials should be acquired using
-constrained delegation. This option is only valid when used in
-conjunction with protocol transition.</dd>
-<dt><strong>-S</strong> <em>sname</em></dt>
-<dd>Specifies that the <em>service1 service2</em> … arguments are
-interpreted as hostnames, and the service principals are to be
-constructed from those hostnames and the service name <em>sname</em>.
-The service hostnames will be canonicalized according to the usual
-rules for constructing service principals.</dd>
-<dt><strong>-I</strong> <em>for_user</em></dt>
-<dd>Specifies that protocol transition (S4U2Self) is to be used to
-acquire a ticket on behalf of <em>for_user</em>. If constrained
-delegation is not requested, the service name must match the
-credentials cache client principal.</dd>
-<dt><strong>-U</strong> <em>for_user</em></dt>
-<dd>Same as -I, but treats <em>for_user</em> as an enterprise name.</dd>
-<dt><strong>-F</strong> <em>cert_file</em></dt>
-<dd>Specifies that protocol transition is to be used, identifying the
-client principal with the X.509 certificate in <em>cert_file</em>. The
-certificate file must be in PEM format.</dd>
-<dt><strong>–cached-only</strong></dt>
-<dd>Only retrieve credentials already present in the cache, not from
-the KDC. (Added in release 1.19.)</dd>
-<dt><strong>–no-store</strong></dt>
-<dd>Do not store retrieved credentials in the cache. If
-<strong>–out-cache</strong> is also specified, credentials will still be
-stored into the output credential cache. (Added in release 1.19.)</dd>
-<dt><strong>–out-cache</strong> <em>ccache</em></dt>
-<dd>Initialize <em>ccache</em> and store all retrieved credentials into it.
-Do not store acquired credentials in the input cache. (Added in
-release 1.19.)</dd>
-<dt><strong>–u2u</strong> <em>ccache</em></dt>
-<dd>Requests a user-to-user ticket. <em>ccache</em> must contain a local
-krbtgt ticket for the server principal. The reported version
-number will typically be 0, as the resulting ticket is not
-encrypted in the server’s long-term key.</dd>
-</dl>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="files">
-<h2>FILES<a class="headerlink" href="#files" title="Permalink to this headline">¶</a></h2>
-<dl class="docutils">
-<dt><a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFCCNAME</span></a></dt>
-<dd>Default location of the credentials cache</dd>
-</dl>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>, <a class="reference internal" href="kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a>, <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kvno</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#options">OPTIONS</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#files">FILES</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../user_config/index.html">User config files</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User commands</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kdestroy.html">kdestroy</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kinit.html">kinit</a></li>
-<li class="toctree-l3"><a class="reference internal" href="klist.html">klist</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpasswd.html">kpasswd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5-config.html">krb5-config</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ksu.html">ksu</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kswitch.html">kswitch</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kvno</a></li>
-<li class="toctree-l3"><a class="reference internal" href="sclient.html">sclient</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kswitch.html" title="kswitch"
- >previous</a> |
- <a href="sclient.html" title="sclient"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kvno">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>sclient — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="For administrators" href="../../admin/index.html" />
- <link rel="prev" title="kvno" href="kvno.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kvno.html" title="kvno"
- accesskey="P">previous</a> |
- <a href="../../admin/index.html" title="For administrators"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__sclient">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="sclient">
-<span id="sclient-1"></span><h1>sclient<a class="headerlink" href="#sclient" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="synopsis">
-<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>
-<p><strong>sclient</strong> <em>remotehost</em></p>
-</div>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>sclient is a sample application, primarily useful for testing
-purposes. It contacts a sample server <a class="reference internal" href="../../admin/admin_commands/sserver.html#sserver-8"><span class="std std-ref">sserver</span></a> and
-authenticates to it using Kerberos version 5 tickets, then displays
-the server’s response.</p>
-</div>
-<div class="section" id="environment">
-<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
-<p>See <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
-variables.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>, <a class="reference internal" href="../../admin/admin_commands/sserver.html#sserver-8"><span class="std std-ref">sserver</span></a>, <a class="reference internal" href="../user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">sclient</a><ul>
-<li><a class="reference internal" href="#synopsis">SYNOPSIS</a></li>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../user_config/index.html">User config files</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User commands</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kdestroy.html">kdestroy</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kinit.html">kinit</a></li>
-<li class="toctree-l3"><a class="reference internal" href="klist.html">klist</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kpasswd.html">kpasswd</a></li>
-<li class="toctree-l3"><a class="reference internal" href="krb5-config.html">krb5-config</a></li>
-<li class="toctree-l3"><a class="reference internal" href="ksu.html">ksu</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kswitch.html">kswitch</a></li>
-<li class="toctree-l3"><a class="reference internal" href="kvno.html">kvno</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">sclient</a></li>
-</ul>
-</li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kvno.html" title="kvno"
- >previous</a> |
- <a href="../../admin/index.html" title="For administrators"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__sclient">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>User config files — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="kerberos" href="kerberos.html" />
- <link rel="prev" title="Ticket management" href="../tkt_mgmt.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="../tkt_mgmt.html" title="Ticket management"
- accesskey="P">previous</a> |
- <a href="kerberos.html" title="kerberos"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__User config files">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="user-config-files">
-<h1>User config files<a class="headerlink" href="#user-config-files" title="Permalink to this headline">¶</a></h1>
-<p>The following files in your home directory can be used to control the
-behavior of Kerberos as it applies to your account (unless they have
-been disabled by your host’s configuration):</p>
-<div class="toctree-wrapper compound">
-<ul>
-<li class="toctree-l1"><a class="reference internal" href="kerberos.html">kerberos</a></li>
-<li class="toctree-l1"><a class="reference internal" href="k5login.html">.k5login</a></li>
-<li class="toctree-l1"><a class="reference internal" href="k5identity.html">.k5identity</a></li>
-</ul>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">User config files</a></li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2 current"><a class="current reference internal" href="#">User config files</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="kerberos.html">kerberos</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5login.html">.k5login</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5identity.html">.k5identity</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../user_commands/index.html">User commands</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="../tkt_mgmt.html" title="Ticket management"
- >previous</a> |
- <a href="kerberos.html" title="kerberos"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__User config files">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>.k5identity — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title="User commands" href="../user_commands/index.html" />
- <link rel="prev" title=".k5login" href="k5login.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="k5login.html" title=".k5login"
- accesskey="P">previous</a> |
- <a href="../user_commands/index.html" title="User commands"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__.k5identity">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="k5identity">
-<span id="k5identity-5"></span><h1>.k5identity<a class="headerlink" href="#k5identity" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>The .k5identity file, which resides in a user’s home directory,
-contains a list of rules for selecting a client principals based on
-the server being accessed. These rules are used to choose a
-credential cache within the cache collection when possible.</p>
-<p>Blank lines and lines beginning with <code class="docutils literal"><span class="pre">#</span></code> are ignored. Each line has
-the form:</p>
-<blockquote>
-<div><em>principal</em> <em>field</em>=<em>value</em> …</div></blockquote>
-<p>If the server principal meets all of the field constraints, then
-principal is chosen as the client principal. The following fields are
-recognized:</p>
-<dl class="docutils">
-<dt><strong>realm</strong></dt>
-<dd>If the realm of the server principal is known, it is matched
-against <em>value</em>, which may be a pattern using shell wildcards.
-For host-based server principals, the realm will generally only be
-known if there is a <a class="reference internal" href="../../admin/conf_files/krb5_conf.html#domain-realm"><span class="std std-ref">[domain_realm]</span></a> section in
-<a class="reference internal" href="../../admin/conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a> with a mapping for the hostname.</dd>
-<dt><strong>service</strong></dt>
-<dd>If the server principal is a host-based principal, its service
-component is matched against <em>value</em>, which may be a pattern using
-shell wildcards.</dd>
-<dt><strong>host</strong></dt>
-<dd><p class="first">If the server principal is a host-based principal, its hostname
-component is converted to lower case and matched against <em>value</em>,
-which may be a pattern using shell wildcards.</p>
-<p class="last">If the server principal matches the constraints of multiple lines
-in the .k5identity file, the principal from the first matching
-line is used. If no line matches, credentials will be selected
-some other way, such as the realm heuristic or the current primary
-cache.</p>
-</dd>
-</dl>
-</div>
-<div class="section" id="example">
-<h2>EXAMPLE<a class="headerlink" href="#example" title="Permalink to this headline">¶</a></h2>
-<p>The following example .k5identity file selects the client principal
-<code class="docutils literal"><span class="pre">alice@KRBTEST.COM</span></code> if the server principal is within that realm,
-the principal <code class="docutils literal"><span class="pre">alice/root@EXAMPLE.COM</span></code> if the server host is within
-a servers subdomain, and the principal <code class="docutils literal"><span class="pre">alice/mail@EXAMPLE.COM</span></code> when
-accessing the IMAP service on <code class="docutils literal"><span class="pre">mail.example.com</span></code>:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">alice</span><span class="nd">@KRBTEST</span><span class="o">.</span><span class="n">COM</span> <span class="n">realm</span><span class="o">=</span><span class="n">KRBTEST</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">alice</span><span class="o">/</span><span class="n">root</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span> <span class="n">host</span><span class="o">=*.</span><span class="n">servers</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span>
-<span class="n">alice</span><span class="o">/</span><span class="n">mail</span><span class="nd">@EXAMPLE</span><span class="o">.</span><span class="n">COM</span> <span class="n">host</span><span class="o">=</span><span class="n">mail</span><span class="o">.</span><span class="n">example</span><span class="o">.</span><span class="n">com</span> <span class="n">service</span><span class="o">=</span><span class="n">imap</span>
-</pre></div>
-</div>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p>kerberos(1), <a class="reference internal" href="../../admin/conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a></p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">.k5identity</a><ul>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#example">EXAMPLE</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User config files</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kerberos.html">kerberos</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5login.html">.k5login</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">.k5identity</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../user_commands/index.html">User commands</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="k5login.html" title=".k5login"
- >previous</a> |
- <a href="../user_commands/index.html" title="User commands"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__.k5identity">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>.k5login — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title=".k5identity" href="k5identity.html" />
- <link rel="prev" title="kerberos" href="kerberos.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="kerberos.html" title="kerberos"
- accesskey="P">previous</a> |
- <a href="k5identity.html" title=".k5identity"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__.k5login">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="k5login">
-<span id="k5login-5"></span><h1>.k5login<a class="headerlink" href="#k5login" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>The .k5login file, which resides in a user’s home directory, contains
-a list of the Kerberos principals. Anyone with valid tickets for a
-principal in the file is allowed host access with the UID of the user
-in whose home directory the file resides. One common use is to place
-a .k5login file in root’s home directory, thereby granting system
-administrators remote root access to the host via Kerberos.</p>
-</div>
-<div class="section" id="examples">
-<h2>EXAMPLES<a class="headerlink" href="#examples" title="Permalink to this headline">¶</a></h2>
-<p>Suppose the user <code class="docutils literal"><span class="pre">alice</span></code> had a .k5login file in her home directory
-containing just the following line:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">bob</span><span class="nd">@FOOBAR</span><span class="o">.</span><span class="n">ORG</span>
-</pre></div>
-</div>
-<p>This would allow <code class="docutils literal"><span class="pre">bob</span></code> to use Kerberos network applications, such as
-ssh(1), to access <code class="docutils literal"><span class="pre">alice</span></code>’s account, using <code class="docutils literal"><span class="pre">bob</span></code>’s Kerberos
-tickets. In a default configuration (with <strong>k5login_authoritative</strong> set
-to true in <a class="reference internal" href="../../admin/conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>), this .k5login file would not let
-<code class="docutils literal"><span class="pre">alice</span></code> use those network applications to access her account, since
-she is not listed! With no .k5login file, or with <strong>k5login_authoritative</strong>
-set to false, a default rule would permit the principal <code class="docutils literal"><span class="pre">alice</span></code> in the
-machine’s default realm to access the <code class="docutils literal"><span class="pre">alice</span></code> account.</p>
-<p>Let us further suppose that <code class="docutils literal"><span class="pre">alice</span></code> is a system administrator.
-Alice and the other system administrators would have their principals
-in root’s .k5login file on each host:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">alice</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span>
-
-<span class="n">joeadmin</span><span class="o">/</span><span class="n">root</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span>
-</pre></div>
-</div>
-<p>This would allow either system administrator to log in to these hosts
-using their Kerberos tickets instead of having to type the root
-password. Note that because <code class="docutils literal"><span class="pre">bob</span></code> retains the Kerberos tickets for
-his own principal, <code class="docutils literal"><span class="pre">bob@FOOBAR.ORG</span></code>, he would not have any of the
-privileges that require <code class="docutils literal"><span class="pre">alice</span></code>’s tickets, such as root access to
-any of the site’s hosts, or the ability to change <code class="docutils literal"><span class="pre">alice</span></code>’s
-password.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p>kerberos(1)</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">.k5login</a><ul>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#examples">EXAMPLES</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User config files</a><ul class="current">
-<li class="toctree-l3"><a class="reference internal" href="kerberos.html">kerberos</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="#">.k5login</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5identity.html">.k5identity</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../user_commands/index.html">User commands</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="kerberos.html" title="kerberos"
- >previous</a> |
- <a href="k5identity.html" title=".k5identity"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__.k5login">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
+++ /dev/null
-
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
-<html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
- <title>kerberos — MIT Kerberos Documentation</title>
- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '1.20.1',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true,
- SOURCELINK_SUFFIX: '.txt'
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="author" title="About these documents" href="../../about.html" />
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="next" title=".k5login" href="k5login.html" />
- <link rel="prev" title="User config files" href="index.html" />
- </head>
- <body>
- <div class="header-wrapper">
- <div class="header">
-
-
- <h1><a href="../../index.html">MIT Kerberos Documentation</a></h1>
-
- <div class="rel">
-
- <a href="../../index.html" title="Full Table of Contents"
- accesskey="C">Contents</a> |
- <a href="index.html" title="User config files"
- accesskey="P">previous</a> |
- <a href="k5login.html" title=".k5login"
- accesskey="N">next</a> |
- <a href="../../genindex.html" title="General Index"
- accesskey="I">index</a> |
- <a href="../../search.html" title="Enter search criteria"
- accesskey="S">Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kerberos">feedback</a>
- </div>
- </div>
- </div>
-
- <div class="content-wrapper">
- <div class="content">
- <div class="document">
-
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <div class="section" id="kerberos">
-<span id="kerberos-7"></span><h1>kerberos<a class="headerlink" href="#kerberos" title="Permalink to this headline">¶</a></h1>
-<div class="section" id="description">
-<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
-<p>The Kerberos system authenticates individual users in a network
-environment. After authenticating yourself to Kerberos, you can use
-Kerberos-enabled programs without having to present passwords or
-certificates to those programs.</p>
-<p>If you receive the following response from <a class="reference internal" href="../user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>:</p>
-<p>kinit: Client not found in Kerberos database while getting initial
-credentials</p>
-<p>you haven’t been registered as a Kerberos user. See your system
-administrator.</p>
-<p>A Kerberos name usually contains three parts. The first is the
-<strong>primary</strong>, which is usually a user’s or service’s name. The second
-is the <strong>instance</strong>, which in the case of a user is usually null.
-Some users may have privileged instances, however, such as <code class="docutils literal"><span class="pre">root</span></code> or
-<code class="docutils literal"><span class="pre">admin</span></code>. In the case of a service, the instance is the fully
-qualified name of the machine on which it runs; i.e. there can be an
-ssh service running on the machine ABC (<a class="reference external" href="mailto:ssh/ABC%40REALM">ssh/ABC<span>@</span>REALM</a>), which is
-different from the ssh service running on the machine XYZ
-(<a class="reference external" href="mailto:ssh/XYZ%40REALM">ssh/XYZ<span>@</span>REALM</a>). The third part of a Kerberos name is the <strong>realm</strong>.
-The realm corresponds to the Kerberos service providing authentication
-for the principal. Realms are conventionally all-uppercase, and often
-match the end of hostnames in the realm (for instance, host01.example.com
-might be in realm EXAMPLE.COM).</p>
-<p>When writing a Kerberos name, the principal name is separated from the
-instance (if not null) by a slash, and the realm (if not the local
-realm) follows, preceded by an “@” sign. The following are examples
-of valid Kerberos names:</p>
-<div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">david</span>
-<span class="n">jennifer</span><span class="o">/</span><span class="n">admin</span>
-<span class="n">joeuser</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span>
-<span class="n">cbrown</span><span class="o">/</span><span class="n">root</span><span class="nd">@FUBAR</span><span class="o">.</span><span class="n">ORG</span>
-</pre></div>
-</div>
-<p>When you authenticate yourself with Kerberos you get an initial
-Kerberos <strong>ticket</strong>. (A Kerberos ticket is an encrypted protocol
-message that provides authentication.) Kerberos uses this ticket for
-network utilities such as ssh. The ticket transactions are done
-transparently, so you don’t have to worry about their management.</p>
-<p>Note, however, that tickets expire. Administrators may configure more
-privileged tickets, such as those with service or instance of <code class="docutils literal"><span class="pre">root</span></code>
-or <code class="docutils literal"><span class="pre">admin</span></code>, to expire in a few minutes, while tickets that carry
-more ordinary privileges may be good for several hours or a day. If
-your login session extends beyond the time limit, you will have to
-re-authenticate yourself to Kerberos to get new tickets using the
-<a class="reference internal" href="../user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a> command.</p>
-<p>Some tickets are <strong>renewable</strong> beyond their initial lifetime. This
-means that <code class="docutils literal"><span class="pre">kinit</span> <span class="pre">-R</span></code> can extend their lifetime without requiring
-you to re-authenticate.</p>
-<p>If you wish to delete your local tickets, use the <a class="reference internal" href="../user_commands/kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a>
-command.</p>
-<p>Kerberos tickets can be forwarded. In order to forward tickets, you
-must request <strong>forwardable</strong> tickets when you kinit. Once you have
-forwardable tickets, most Kerberos programs have a command line option
-to forward them to the remote host. This can be useful for, e.g.,
-running kinit on your local machine and then sshing into another to do
-work. Note that this should not be done on untrusted machines since
-they will then have your tickets.</p>
-</div>
-<div class="section" id="environment-variables">
-<h2>ENVIRONMENT VARIABLES<a class="headerlink" href="#environment-variables" title="Permalink to this headline">¶</a></h2>
-<p>Several environment variables affect the operation of Kerberos-enabled
-programs. These include:</p>
-<dl class="docutils">
-<dt><strong>KRB5CCNAME</strong></dt>
-<dd><p class="first">Default name for the credentials cache file, in the form
-<em>TYPE</em>:<em>residual</em>. The type of the default cache may determine
-the availability of a cache collection. <code class="docutils literal"><span class="pre">FILE</span></code> is not a
-collection type; <code class="docutils literal"><span class="pre">KEYRING</span></code>, <code class="docutils literal"><span class="pre">DIR</span></code>, and <code class="docutils literal"><span class="pre">KCM</span></code> are.</p>
-<p class="last">If not set, the value of <strong>default_ccache_name</strong> from
-configuration files (see <strong>KRB5_CONFIG</strong>) will be used. If that
-is also not set, the default <em>type</em> is <code class="docutils literal"><span class="pre">FILE</span></code>, and the
-<em>residual</em> is the path /tmp/krb5cc_*uid*, where <em>uid</em> is the
-decimal user ID of the user.</p>
-</dd>
-<dt><strong>KRB5_KTNAME</strong></dt>
-<dd>Specifies the location of the default keytab file, in the form
-<em>TYPE</em>:<em>residual</em>. If no <em>type</em> is present, the <strong>FILE</strong> type is
-assumed and <em>residual</em> is the pathname of the keytab file. If
-unset, <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFKTNAME</span></a> will be used.</dd>
-<dt><strong>KRB5_CONFIG</strong></dt>
-<dd>Specifies the location of the Kerberos configuration file. The
-default is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">SYSCONFDIR</span></a><code class="docutils literal"><span class="pre">/krb5.conf</span></code>. Multiple filenames can
-be specified, separated by a colon; all files which are present
-will be read.</dd>
-<dt><strong>KRB5_KDC_PROFILE</strong></dt>
-<dd>Specifies the location of the KDC configuration file, which
-contains additional configuration directives for the Key
-Distribution Center daemon and associated programs. The default
-is <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">LOCALSTATEDIR</span></a><code class="docutils literal"><span class="pre">/krb5kdc</span></code><code class="docutils literal"><span class="pre">/kdc.conf</span></code>.</dd>
-<dt><strong>KRB5RCACHENAME</strong></dt>
-<dd>(New in release 1.18) Specifies the location of the default replay
-cache, in the form <em>type</em>:<em>residual</em>. The <code class="docutils literal"><span class="pre">file2</span></code> type with a
-pathname residual specifies a replay cache file in the version-2
-format in the specified location. The <code class="docutils literal"><span class="pre">none</span></code> type (residual is
-ignored) disables the replay cache. The <code class="docutils literal"><span class="pre">dfl</span></code> type (residual is
-ignored) indicates the default, which uses a file2 replay cache in
-a temporary directory. The default is <code class="docutils literal"><span class="pre">dfl:</span></code>.</dd>
-<dt><strong>KRB5RCACHETYPE</strong></dt>
-<dd>Specifies the type of the default replay cache, if
-<strong>KRB5RCACHENAME</strong> is unspecified. No residual can be specified,
-so <code class="docutils literal"><span class="pre">none</span></code> and <code class="docutils literal"><span class="pre">dfl</span></code> are the only useful types.</dd>
-<dt><strong>KRB5RCACHEDIR</strong></dt>
-<dd>Specifies the directory used by the <code class="docutils literal"><span class="pre">dfl</span></code> replay cache type.
-The default is the value of the <strong>TMPDIR</strong> environment variable,
-or <code class="docutils literal"><span class="pre">/var/tmp</span></code> if <strong>TMPDIR</strong> is not set.</dd>
-<dt><strong>KRB5_TRACE</strong></dt>
-<dd>Specifies a filename to write trace log output to. Trace logs can
-help illuminate decisions made internally by the Kerberos
-libraries. For example, <code class="docutils literal"><span class="pre">env</span> <span class="pre">KRB5_TRACE=/dev/stderr</span> <span class="pre">kinit</span></code>
-would send tracing information for <a class="reference internal" href="../user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a> to
-<code class="docutils literal"><span class="pre">/dev/stderr</span></code>. The default is not to write trace log output
-anywhere.</dd>
-<dt><strong>KRB5_CLIENT_KTNAME</strong></dt>
-<dd>Default client keytab file name. If unset, <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">DEFCKTNAME</span></a> will be
-used).</dd>
-<dt><strong>KPROP_PORT</strong></dt>
-<dd><a class="reference internal" href="../../admin/admin_commands/kprop.html#kprop-8"><span class="std std-ref">kprop</span></a> port to use. Defaults to 754.</dd>
-<dt><strong>GSS_MECH_CONFIG</strong></dt>
-<dd>Specifies a filename containing GSSAPI mechanism module
-configuration. The default is to read <a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">SYSCONFDIR</span></a><code class="docutils literal"><span class="pre">/gss/mech</span></code>
-and files with a <code class="docutils literal"><span class="pre">.conf</span></code> suffix within the directory
-<a class="reference internal" href="../../mitK5defaults.html#paths"><span class="std std-ref">SYSCONFDIR</span></a><code class="docutils literal"><span class="pre">/gss/mech.d</span></code>.</dd>
-</dl>
-<p>Most environment variables are disabled for certain programs, such as
-login system programs and setuid programs, which are designed to be
-secure when run within an untrusted process environment.</p>
-</div>
-<div class="section" id="see-also">
-<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="../user_commands/kdestroy.html#kdestroy-1"><span class="std std-ref">kdestroy</span></a>, <a class="reference internal" href="../user_commands/kinit.html#kinit-1"><span class="std std-ref">kinit</span></a>, <a class="reference internal" href="../user_commands/klist.html#klist-1"><span class="std std-ref">klist</span></a>,
-<a class="reference internal" href="../user_commands/kswitch.html#kswitch-1"><span class="std std-ref">kswitch</span></a>, <a class="reference internal" href="../user_commands/kpasswd.html#kpasswd-1"><span class="std std-ref">kpasswd</span></a>, <a class="reference internal" href="../user_commands/ksu.html#ksu-1"><span class="std std-ref">ksu</span></a>,
-<a class="reference internal" href="../../admin/conf_files/krb5_conf.html#krb5-conf-5"><span class="std std-ref">krb5.conf</span></a>, <a class="reference internal" href="../../admin/conf_files/kdc_conf.html#kdc-conf-5"><span class="std std-ref">kdc.conf</span></a>, <a class="reference internal" href="../../admin/admin_commands/kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>,
-<a class="reference internal" href="../../admin/admin_commands/kadmind.html#kadmind-8"><span class="std std-ref">kadmind</span></a>, <a class="reference internal" href="../../admin/admin_commands/kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>, <a class="reference internal" href="../../admin/admin_commands/krb5kdc.html#krb5kdc-8"><span class="std std-ref">krb5kdc</span></a></p>
-</div>
-<div class="section" id="bugs">
-<h2>BUGS<a class="headerlink" href="#bugs" title="Permalink to this headline">¶</a></h2>
-</div>
-<div class="section" id="authors">
-<h2>AUTHORS<a class="headerlink" href="#authors" title="Permalink to this headline">¶</a></h2>
-<div class="line-block">
-<div class="line">Steve Miller, MIT Project Athena/Digital Equipment Corporation</div>
-<div class="line">Clifford Neuman, MIT Project Athena</div>
-<div class="line">Greg Hudson, MIT Kerberos Consortium</div>
-<div class="line">Robbie Harwood, Red Hat, Inc.</div>
-</div>
-</div>
-<div class="section" id="history">
-<h2>HISTORY<a class="headerlink" href="#history" title="Permalink to this headline">¶</a></h2>
-<p>The MIT Kerberos 5 implementation was developed at MIT, with
-contributions from many outside parties. It is currently maintained
-by the MIT Kerberos Consortium.</p>
-</div>
-<div class="section" id="restrictions">
-<h2>RESTRICTIONS<a class="headerlink" href="#restrictions" title="Permalink to this headline">¶</a></h2>
-<p>Copyright 1985, 1986, 1989-1996, 2002, 2011, 2018 Masachusetts
-Institute of Technology</p>
-</div>
-</div>
-
-
- </div>
- </div>
- </div>
- </div>
- <div class="sidebar">
- <h2>On this page</h2>
- <ul>
-<li><a class="reference internal" href="#">kerberos</a><ul>
-<li><a class="reference internal" href="#description">DESCRIPTION</a></li>
-<li><a class="reference internal" href="#environment-variables">ENVIRONMENT VARIABLES</a></li>
-<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
-<li><a class="reference internal" href="#bugs">BUGS</a></li>
-<li><a class="reference internal" href="#authors">AUTHORS</a></li>
-<li><a class="reference internal" href="#history">HISTORY</a></li>
-<li><a class="reference internal" href="#restrictions">RESTRICTIONS</a></li>
-</ul>
-</li>
-</ul>
-
- <br/>
- <h2>Table of contents</h2>
- <ul class="current">
-<li class="toctree-l1 current"><a class="reference internal" href="../index.html">For users</a><ul class="current">
-<li class="toctree-l2"><a class="reference internal" href="../pwd_mgmt.html">Password management</a></li>
-<li class="toctree-l2"><a class="reference internal" href="../tkt_mgmt.html">Ticket management</a></li>
-<li class="toctree-l2 current"><a class="reference internal" href="index.html">User config files</a><ul class="current">
-<li class="toctree-l3 current"><a class="current reference internal" href="#">kerberos</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5login.html">.k5login</a></li>
-<li class="toctree-l3"><a class="reference internal" href="k5identity.html">.k5identity</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="../user_commands/index.html">User commands</a></li>
-</ul>
-</li>
-<li class="toctree-l1"><a class="reference internal" href="../../admin/index.html">For administrators</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../appdev/index.html">For application developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../plugindev/index.html">For plugin module developers</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build/index.html">Building Kerberos V5</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../basic/index.html">Kerberos V5 concepts</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../formats/index.html">Protocols and file formats</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../mitK5features.html">MIT Kerberos features</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../build_this.html">How to build this documentation from the source</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../about.html">Contributing to the MIT Kerberos Documentation</a></li>
-<li class="toctree-l1"><a class="reference internal" href="../../resources.html">Resources</a></li>
-</ul>
-
- <br/>
- <h4><a href="../../index.html">Full Table of Contents</a></h4>
- <h4>Search</h4>
- <form class="search" action="../../search.html" method="get">
- <input type="text" name="q" size="18" />
- <input type="submit" value="Go" />
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <div class="clearer"></div>
- </div>
- </div>
-
- <div class="footer-wrapper">
- <div class="footer" >
- <div class="right" ><i>Release: 1.20.1</i><br />
- © <a href="../../copyright.html">Copyright</a> 1985-2022, MIT.
- </div>
- <div class="left">
-
- <a href="../../index.html" title="Full Table of Contents"
- >Contents</a> |
- <a href="index.html" title="User config files"
- >previous</a> |
- <a href="k5login.html" title=".k5login"
- >next</a> |
- <a href="../../genindex.html" title="General Index"
- >index</a> |
- <a href="../../search.html" title="Enter search criteria"
- >Search</a> |
- <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__kerberos">feedback</a>
- </div>
- </div>
- </div>
-
- </body>
-</html>
\ No newline at end of file
operating system, the paths are generally chosen to match the
operating system's filesystem layout.
-========================== ============= =========================== ===========================
-Description Symbolic name Custom build path Typical OS path
-========================== ============= =========================== ===========================
-User programs BINDIR ``/usr/local/bin`` ``/usr/bin``
-Libraries and plugins LIBDIR ``/usr/local/lib`` ``/usr/lib``
-Parent of KDC state dir LOCALSTATEDIR ``/usr/local/var`` ``/var``
-Parent of KDC runtime dir RUNSTATEDIR ``/usr/local/var/run`` ``/run``
-Administrative programs SBINDIR ``/usr/local/sbin`` ``/usr/sbin``
-Alternate krb5.conf dir SYSCONFDIR ``/usr/local/etc`` ``/etc``
-Default ccache name DEFCCNAME ``FILE:/tmp/krb5cc_%{uid}`` ``FILE:/tmp/krb5cc_%{uid}``
-Default keytab name DEFKTNAME ``FILE:/etc/krb5.keytab`` ``FILE:/etc/krb5.keytab``
-========================== ============= =========================== ===========================
+========================== ============== =========================== ===========================
+Description Symbolic name Custom build path Typical OS path
+========================== ============== =========================== ===========================
+User programs BINDIR ``/usr/local/bin`` ``/usr/bin``
+Libraries and plugins LIBDIR ``/usr/local/lib`` ``/usr/lib``
+Parent of KDC state dir LOCALSTATEDIR ``/usr/local/var`` ``/var``
+Parent of KDC runtime dir RUNSTATEDIR ``/usr/local/var/run`` ``/run``
+Administrative programs SBINDIR ``/usr/local/sbin`` ``/usr/sbin``
+Alternate krb5.conf dir SYSCONFDIR ``/usr/local/etc`` ``/etc``
+Default ccache name DEFCCNAME ``FILE:/tmp/krb5cc_%{uid}`` ``FILE:/tmp/krb5cc_%{uid}``
+Default keytab name DEFKTNAME ``FILE:/etc/krb5.keytab`` ``FILE:/etc/krb5.keytab``
+Default PKCS11 module PKCS11_MODNAME ``opensc-pkcs11.so`` ``opensc-pkcs11.so``
+========================== ============== =========================== ===========================
The default client keytab name (DEFCKTNAME) typically defaults to
``FILE:/usr/local/var/krb5/user/%{euid}/client.keytab`` for a custom
- Converted the remaining Tcl tests to Python.
+Release 1.21
+
+* User experience:
+
+ - Added a credential cache type providing compatibility with the
+ macOS 11 native credential cache.
+
+* Developer experience:
+
+ - libkadm5 will use the provided krb5_context object to read
+ configuration values, instead of creating its own.
+
+ - Added an interface to retrieve the ticket session key from a GSS
+ context.
+
+* Protocol evolution:
+
+ - The KDC will no longer issue tickets with RC4 or triple-DES
+ session keys unless explicitly configured with the new allow_rc4
+ or allow_des3 variables respectively.
+
+ - The KDC will assume that all services can handle aes256-sha1
+ session keys unless the service principal has a session_enctypes
+ string attribute.
+
+ - Support for PAC full KDC checksums has been added to mitigate an
+ S4U2Proxy privilege escalation attack.
+
+ - The PKINIT client will advertise a more modern set of supported
+ CMS algorithms.
+
+* Code quality:
+
+ - Removed unused code in libkrb5, libkrb5support, and the PKINIT
+ module.
+
+ - Modernized the KDC code for processing TGS requests, the code for
+ encrypting and decrypting key data, the PAC handling code, and the
+ GSS library packet parsing and composition code.
+
+ - Improved the test framework's detection of memory errors in daemon
+ processes when used with asan.
`Pre-authentication mechanisms`
-Copyright |copy| 1985-2022 by the Massachusetts Institute of Technology.
+Copyright |copy| 1985-2023 by the Massachusetts Institute of Technology.
All rights reserved.
-------------------
+ Copyright |copy| 2022 United States Government as represented by the
+ Secretary of the Navy. All rights reserved.
+
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+
+ * Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+
+ * Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in
+ the documentation and/or other materials provided with the
+ distribution.
+
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ OF THE POSSIBILITY OF SUCH DAMAGE.
+
+-------------------
+
Copyright |copy| 1991, 1992, 1994 by Cygnus Support.
Permission to use, copy, modify, and
+++ /dev/null
-# Makefile for Sphinx LaTeX output
-
-ALLDOCS = $(basename $(wildcard *.tex))
-ALLPDF = $(addsuffix .pdf,$(ALLDOCS))
-ALLDVI = $(addsuffix .dvi,$(ALLDOCS))
-ALLXDV =
-ALLPS = $(addsuffix .ps,$(ALLDOCS))
-ALLIMGS = $(wildcard *.png *.gif *.jpg *.jpeg)
-
-# Prefix for archive names
-ARCHIVEPREFIX =
-# Additional LaTeX options (passed via variables in latexmkrc/latexmkjarc file)
-export LATEXOPTS =
-# Additional latexmk options
-LATEXMKOPTS =
-# format: pdf or dvi (used only by archive targets)
-FMT = pdf
-
-LATEX = latexmk -dvi
-PDFLATEX = latexmk -pdf -dvi- -ps-
-
-
-%.png %.gif %.jpg %.jpeg: FORCE_MAKE
- extractbb '$@'
-
-%.dvi: %.tex FORCE_MAKE
- $(LATEX) $(LATEXMKOPTS) '$<'
-
-%.ps: %.dvi
- dvips '$<'
-
-%.pdf: %.tex FORCE_MAKE
- $(PDFLATEX) $(LATEXMKOPTS) '$<'
-
-all: $(ALLPDF)
-
-all-dvi: $(ALLDVI)
-
-all-ps: $(ALLPS)
-
-all-pdf: $(ALLPDF)
-
-zip: all-$(FMT)
- mkdir $(ARCHIVEPREFIX)docs-$(FMT)
- cp $(ALLPDF) $(ARCHIVEPREFIX)docs-$(FMT)
- zip -q -r -9 $(ARCHIVEPREFIX)docs-$(FMT).zip $(ARCHIVEPREFIX)docs-$(FMT)
- rm -r $(ARCHIVEPREFIX)docs-$(FMT)
-
-tar: all-$(FMT)
- mkdir $(ARCHIVEPREFIX)docs-$(FMT)
- cp $(ALLPDF) $(ARCHIVEPREFIX)docs-$(FMT)
- tar cf $(ARCHIVEPREFIX)docs-$(FMT).tar $(ARCHIVEPREFIX)docs-$(FMT)
- rm -r $(ARCHIVEPREFIX)docs-$(FMT)
-
-gz: tar
- gzip -9 < $(ARCHIVEPREFIX)docs-$(FMT).tar > $(ARCHIVEPREFIX)docs-$(FMT).tar.gz
-
-bz2: tar
- bzip2 -9 -k $(ARCHIVEPREFIX)docs-$(FMT).tar
-
-xz: tar
- xz -9 -k $(ARCHIVEPREFIX)docs-$(FMT).tar
-
-clean:
- rm -f *.log *.ind *.aux *.toc *.syn *.idx *.out *.ilg *.pla *.ps *.tar *.tar.gz *.tar.bz2 *.tar.xz $(ALLPDF) $(ALLDVI) $(ALLXDV) *.fls *.fdb_latexmk
-
-.PHONY: all all-pdf all-dvi all-ps clean zip tar gz bz2 xz
-.PHONY: FORCE_MAKE
\ No newline at end of file
+++ /dev/null
-%% Generated by Sphinx.
-\def\sphinxdocclass{report}
-\documentclass[letterpaper,10pt,english]{sphinxmanual}
-\ifdefined\pdfpxdimen
- \let\sphinxpxdimen\pdfpxdimen\else\newdimen\sphinxpxdimen
-\fi \sphinxpxdimen=.75bp\relax
-
-\usepackage[utf8]{inputenc}
-\ifdefined\DeclareUnicodeCharacter
- \ifdefined\DeclareUnicodeCharacterAsOptional
- \DeclareUnicodeCharacter{"00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{"2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{"2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{"2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{"251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{"2572}{\textbackslash}
- \else
- \DeclareUnicodeCharacter{00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{2572}{\textbackslash}
- \fi
-\fi
-\usepackage{cmap}
-\usepackage[T1]{fontenc}
-\usepackage{amsmath,amssymb,amstext}
-\usepackage{babel}
-\usepackage{times}
-\usepackage[Bjarne]{fncychap}
-\usepackage[dontkeepoldnames]{sphinx}
-
-\usepackage{geometry}
-
-% Include hyperref last.
-\usepackage{hyperref}
-% Fix anchor placement for figures with captions.
-\usepackage{hypcap}% it must be loaded after hyperref.
-% Set up styles of URL: it should be placed after hyperref.
-\urlstyle{same}
-
-\addto\captionsenglish{\renewcommand{\figurename}{Fig.}}
-\addto\captionsenglish{\renewcommand{\tablename}{Table}}
-\addto\captionsenglish{\renewcommand{\literalblockname}{Listing}}
-
-\addto\captionsenglish{\renewcommand{\literalblockcontinuedname}{continued from previous page}}
-\addto\captionsenglish{\renewcommand{\literalblockcontinuesname}{continues on next page}}
-
-\addto\extrasenglish{\def\pageautorefname{page}}
-
-\setcounter{tocdepth}{0}
-
-
-
-\title{Kerberos Administration Guide}
-\date{ }
-\release{1.20.1}
-\author{MIT}
-\newcommand{\sphinxlogo}{\vbox{}}
-\renewcommand{\releasename}{Release}
-\makeindex
-
-\begin{document}
-
-\maketitle
-\sphinxtableofcontents
-\phantomsection\label{\detokenize{admin/index::doc}}
-
-
-
-\chapter{Installation guide}
-\label{\detokenize{admin/install:for-administrators}}\label{\detokenize{admin/install::doc}}\label{\detokenize{admin/install:installation-guide}}
-
-\section{Contents}
-\label{\detokenize{admin/install:contents}}
-
-\subsection{Installing KDCs}
-\label{\detokenize{admin/install_kdc:installing-kdcs}}\label{\detokenize{admin/install_kdc::doc}}
-When setting up Kerberos in a production environment, it is best to
-have multiple replica KDCs alongside with a primary KDC to ensure the
-continued availability of the Kerberized services. Each KDC contains
-a copy of the Kerberos database. The primary KDC contains the
-writable copy of the realm database, which it replicates to the
-replica KDCs at regular intervals. All database changes (such as
-password changes) are made on the primary KDC. Replica KDCs provide
-Kerberos ticket-granting services, but not database administration,
-when the primary KDC is unavailable. MIT recommends that you install
-all of your KDCs to be able to function as either the primary or one
-of the replicas. This will enable you to easily switch your primary
-KDC with one of the replicas if necessary (see
-{\hyperref[\detokenize{admin/install_kdc:switch-primary-replica}]{\sphinxcrossref{\DUrole{std,std-ref}{Switching primary and replica KDCs}}}}). This installation procedure is based
-on that recommendation.
-
-\begin{sphinxadmonition}{warning}{Warning:}\begin{itemize}
-\item {}
-The Kerberos system relies on the availability of correct time
-information. Ensure that the primary and all replica KDCs have
-properly synchronized clocks.
-
-\item {}
-It is best to install and run KDCs on secured and dedicated
-hardware with limited access. If your KDC is also a file
-server, FTP server, Web server, or even just a client machine,
-someone who obtained root access through a security hole in any
-of those areas could potentially gain access to the Kerberos
-database.
-
-\end{itemize}
-\end{sphinxadmonition}
-
-
-\subsubsection{Install and configure the primary KDC}
-\label{\detokenize{admin/install_kdc:install-and-configure-the-primary-kdc}}
-Install Kerberos either from the OS-provided packages or from the
-source (See \DUrole{xref,std,std-ref}{do\_build}).
-
-\begin{sphinxadmonition}{note}{Note:}
-For the purpose of this document we will use the following
-names:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{o}{\PYGZhy{}} \PYG{n}{primary} \PYG{n}{KDC}
-\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{o}{\PYGZhy{}} \PYG{n}{replica} \PYG{n}{KDC}
-\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{\PYGZhy{}} \PYG{n}{realm} \PYG{n}{name}
-\PYG{o}{.}\PYG{n}{k5}\PYG{o}{.}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{\PYGZhy{}} \PYG{n}{stash} \PYG{n}{file}
-\PYG{n}{admin}\PYG{o}{/}\PYG{n}{admin} \PYG{o}{\PYGZhy{}} \PYG{n}{admin} \PYG{n}{principal}
-\end{sphinxVerbatim}
-
-See {\hyperref[\detokenize{mitK5defaults:mitk5defaults}]{\sphinxcrossref{\DUrole{std,std-ref}{MIT Kerberos defaults}}}} for the default names and locations
-of the relevant to this topic files. Adjust the names and
-paths to your system environment.
-\end{sphinxadmonition}
-
-
-\subsubsection{Edit KDC configuration files}
-\label{\detokenize{admin/install_kdc:edit-kdc-configuration-files}}
-Modify the configuration files, {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} and
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}, to reflect the correct information (such as
-domain-realm mappings and Kerberos servers names) for your realm.
-(See {\hyperref[\detokenize{mitK5defaults:mitk5defaults}]{\sphinxcrossref{\DUrole{std,std-ref}{MIT Kerberos defaults}}}} for the recommended default locations for
-these files).
-
-Most of the tags in the configuration have default values that will
-work well for most sites. There are some tags in the
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} file whose values must be specified, and this
-section will explain those.
-
-If the locations for these configuration files differs from the
-default ones, set \sphinxstylestrong{KRB5\_CONFIG} and \sphinxstylestrong{KRB5\_KDC\_PROFILE} environment
-variables to point to the krb5.conf and kdc.conf respectively. For
-example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{export} \PYG{n}{KRB5\PYGZus{}CONFIG}\PYG{o}{=}\PYG{o}{/}\PYG{n}{yourdir}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{conf}
-\PYG{n}{export} \PYG{n}{KRB5\PYGZus{}KDC\PYGZus{}PROFILE}\PYG{o}{=}\PYG{o}{/}\PYG{n}{yourdir}\PYG{o}{/}\PYG{n}{kdc}\PYG{o}{.}\PYG{n}{conf}
-\end{sphinxVerbatim}
-
-
-\paragraph{krb5.conf}
-\label{\detokenize{admin/install_kdc:krb5-conf}}
-If you are not using DNS TXT records (see {\hyperref[\detokenize{admin/realm_config:mapping-hostnames}]{\sphinxcrossref{\DUrole{std,std-ref}{Mapping hostnames onto Kerberos realms}}}}),
-you must specify the \sphinxstylestrong{default\_realm} in the {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}}
-section. If you are not using DNS URI or SRV records (see
-{\hyperref[\detokenize{admin/realm_config:kdc-hostnames}]{\sphinxcrossref{\DUrole{std,std-ref}{Hostnames for KDCs}}}} and {\hyperref[\detokenize{admin/realm_config:kdc-discovery}]{\sphinxcrossref{\DUrole{std,std-ref}{KDC Discovery}}}}), you must include the
-\sphinxstylestrong{kdc} tag for each \sphinxstyleemphasis{realm} in the {\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} section. To
-communicate with the kadmin server in each realm, the \sphinxstylestrong{admin\_server}
-tag must be set in the
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} section.
-
-An example krb5.conf file:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{libdefaults}\PYG{p}{]}
- \PYG{n}{default\PYGZus{}realm} \PYG{o}{=} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{n}{admin\PYGZus{}server} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-
-\paragraph{kdc.conf}
-\label{\detokenize{admin/install_kdc:kdc-conf}}
-The kdc.conf file can be used to control the listening ports of the
-KDC and kadmind, as well as realm-specific defaults, the database type
-and location, and logging.
-
-An example kdc.conf file:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{kdcdefaults}\PYG{p}{]}
- \PYG{n}{kdc\PYGZus{}listen} \PYG{o}{=} \PYG{l+m+mi}{88}
- \PYG{n}{kdc\PYGZus{}tcp\PYGZus{}listen} \PYG{o}{=} \PYG{l+m+mi}{88}
-
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{kadmind\PYGZus{}port} \PYG{o}{=} \PYG{l+m+mi}{749}
- \PYG{n}{max\PYGZus{}life} \PYG{o}{=} \PYG{l+m+mi}{12}\PYG{n}{h} \PYG{l+m+mi}{0}\PYG{n}{m} \PYG{l+m+mi}{0}\PYG{n}{s}
- \PYG{n}{max\PYGZus{}renewable\PYGZus{}life} \PYG{o}{=} \PYG{l+m+mi}{7}\PYG{n}{d} \PYG{l+m+mi}{0}\PYG{n}{h} \PYG{l+m+mi}{0}\PYG{n}{m} \PYG{l+m+mi}{0}\PYG{n}{s}
- \PYG{n}{master\PYGZus{}key\PYGZus{}type} \PYG{o}{=} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}
- \PYG{n}{supported\PYGZus{}enctypes} \PYG{o}{=} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{p}{:}\PYG{n}{normal}
- \PYG{c+c1}{\PYGZsh{} If the default location does not suit your setup,}
- \PYG{c+c1}{\PYGZsh{} explicitly configure the following values:}
- \PYG{c+c1}{\PYGZsh{} database\PYGZus{}name = /var/krb5kdc/principal}
- \PYG{c+c1}{\PYGZsh{} key\PYGZus{}stash\PYGZus{}file = /var/krb5kdc/.k5.ATHENA.MIT.EDU}
- \PYG{c+c1}{\PYGZsh{} acl\PYGZus{}file = /var/krb5kdc/kadm5.acl}
- \PYG{p}{\PYGZcb{}}
-
-\PYG{p}{[}\PYG{n}{logging}\PYG{p}{]}
- \PYG{c+c1}{\PYGZsh{} By default, the KDC and kadmind will log output using}
- \PYG{c+c1}{\PYGZsh{} syslog. You can instead send log output to files like this:}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{log}\PYG{o}{/}\PYG{n}{krb5kdc}\PYG{o}{.}\PYG{n}{log}
- \PYG{n}{admin\PYGZus{}server} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{log}\PYG{o}{/}\PYG{n}{kadmin}\PYG{o}{.}\PYG{n}{log}
- \PYG{n}{default} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{log}\PYG{o}{/}\PYG{n}{krb5lib}\PYG{o}{.}\PYG{n}{log}
-\end{sphinxVerbatim}
-
-Replace \sphinxcode{ATHENA.MIT.EDU} and \sphinxcode{kerberos.mit.edu} with the name of
-your Kerberos realm and server respectively.
-
-\begin{sphinxadmonition}{note}{Note:}
-You have to have write permission on the target directories
-(these directories must exist) used by \sphinxstylestrong{database\_name},
-\sphinxstylestrong{key\_stash\_file}, and \sphinxstylestrong{acl\_file}.
-\end{sphinxadmonition}
-
-
-\subsubsection{Create the KDC database}
-\label{\detokenize{admin/install_kdc:create-the-kdc-database}}\label{\detokenize{admin/install_kdc:create-db}}
-You will use the {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} command on the primary KDC to
-create the Kerberos database and the optional \DUrole{xref,std,std-ref}{stash\_definition}.
-
-\begin{sphinxadmonition}{note}{Note:}
-If you choose not to install a stash file, the KDC will
-prompt you for the master key each time it starts up. This
-means that the KDC will not be able to start automatically,
-such as after a system reboot.
-\end{sphinxadmonition}
-
-{\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} will prompt you for the master password for the
-Kerberos database. This password can be any string. A good password
-is one you can remember, but that no one else can guess. Examples of
-bad passwords are words that can be found in a dictionary, any common
-or popular name, especially a famous person (or cartoon character),
-your username in any form (e.g., forward, backward, repeated twice,
-etc.), and any of the sample passwords that appear in this manual.
-One example of a password which might be good if it did not appear in
-this manual is “MITiys4K5!”, which represents the sentence “MIT is
-your source for Kerberos 5!” (It’s the first letter of each word,
-substituting the numeral “4” for the word “for”, and includes the
-punctuation mark at the end.)
-
-The following is an example of how to create a Kerberos database and
-stash file on the primary KDC, using the {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} command.
-Replace \sphinxcode{ATHENA.MIT.EDU} with the name of your Kerberos realm:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{create} \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{\PYGZhy{}}\PYG{n}{s}
-
-\PYG{n}{Initializing} \PYG{n}{database} \PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{/usr/local/var/krb5kdc/principal}\PYG{l+s+s1}{\PYGZsq{}} \PYG{k}{for} \PYG{n}{realm} \PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{ATHENA.MIT.EDU}\PYG{l+s+s1}{\PYGZsq{}}\PYG{p}{,}
-\PYG{n}{master} \PYG{n}{key} \PYG{n}{name} \PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{K/M@ATHENA.MIT.EDU}\PYG{l+s+s1}{\PYGZsq{}}
-\PYG{n}{You} \PYG{n}{will} \PYG{n}{be} \PYG{n}{prompted} \PYG{k}{for} \PYG{n}{the} \PYG{n}{database} \PYG{n}{Master} \PYG{n}{Password}\PYG{o}{.}
-\PYG{n}{It} \PYG{o+ow}{is} \PYG{n}{important} \PYG{n}{that} \PYG{n}{you} \PYG{n}{NOT} \PYG{n}{FORGET} \PYG{n}{this} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{KDC} \PYG{n}{database} \PYG{n}{master} \PYG{n}{key}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{master} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{KDC} \PYG{n}{database} \PYG{n}{master} \PYG{n}{key} \PYG{n}{to} \PYG{n}{verify}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{it} \PYG{n}{again}\PYG{o}{.}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-This will create five files in {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc} (or at the locations specified
-in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}):
-\begin{itemize}
-\item {}
-two Kerberos database files, \sphinxcode{principal}, and \sphinxcode{principal.ok}
-
-\item {}
-the Kerberos administrative database file, \sphinxcode{principal.kadm5}
-
-\item {}
-the administrative database lock file, \sphinxcode{principal.kadm5.lock}
-
-\item {}
-the stash file, in this example \sphinxcode{.k5.ATHENA.MIT.EDU}. If you do
-not want a stash file, run the above command without the \sphinxstylestrong{-s}
-option.
-
-\end{itemize}
-
-For more information on administrating Kerberos database see
-{\hyperref[\detokenize{admin/database:db-operations}]{\sphinxcrossref{\DUrole{std,std-ref}{Operations on the Kerberos database}}}}.
-
-
-\subsubsection{Add administrators to the ACL file}
-\label{\detokenize{admin/install_kdc:add-administrators-to-the-acl-file}}\label{\detokenize{admin/install_kdc:admin-acl}}
-Next, you need create an Access Control List (ACL) file and put the
-Kerberos principal of at least one of the administrators into it.
-This file is used by the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} daemon to control which
-principals may view and make privileged modifications to the Kerberos
-database files. The ACL filename is determined by the \sphinxstylestrong{acl\_file}
-variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}; the default is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/kadm5.acl}.
-
-For more information on Kerberos ACL file see {\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}}.
-
-
-\subsubsection{Add administrators to the Kerberos database}
-\label{\detokenize{admin/install_kdc:add-administrators-to-the-kerberos-database}}\label{\detokenize{admin/install_kdc:addadmin-kdb}}
-Next you need to add administrative principals (i.e., principals who
-are allowed to administer Kerberos database) to the Kerberos database.
-You \sphinxstyleemphasis{must} add at least one principal now to allow communication
-between the Kerberos administration daemon kadmind and the kadmin
-program over the network for further administration. To do this, use
-the kadmin.local utility on the primary KDC. kadmin.local is designed
-to be run on the primary KDC host without using Kerberos
-authentication to an admin server; instead, it must have read and
-write access to the Kerberos database on the local filesystem.
-
-The administrative principals you create should be the ones you added
-to the ACL file (see {\hyperref[\detokenize{admin/install_kdc:admin-acl}]{\sphinxcrossref{\DUrole{std,std-ref}{Add administrators to the ACL file}}}}).
-
-In the following example, the administrative principal \sphinxcode{admin/admin}
-is created:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kadmin}\PYG{o}{.}\PYG{n}{local}
-
-\PYG{n}{kadmin}\PYG{o}{.}\PYG{n}{local}\PYG{p}{:} \PYG{n}{addprinc} \PYG{n}{admin}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-
-\PYG{n}{No} \PYG{n}{policy} \PYG{n}{specified} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{admin/admin@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{assigning} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{default}\PYG{l+s+s2}{\PYGZdq{}}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{admin}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Enter} \PYG{n}{a} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{admin}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{it} \PYG{n}{again}\PYG{o}{.}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{admin/admin@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{o}{.}\PYG{n}{local}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsubsection{Start the Kerberos daemons on the primary KDC}
-\label{\detokenize{admin/install_kdc:start-the-kerberos-daemons-on-the-primary-kdc}}\label{\detokenize{admin/install_kdc:start-kdc-daemons}}
-At this point, you are ready to start the Kerberos KDC
-({\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}}) and administrative daemons on the primary KDC. To
-do so, type:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{krb5kdc}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kadmind}
-\end{sphinxVerbatim}
-
-Each server daemon will fork and run in the background.
-
-\begin{sphinxadmonition}{note}{Note:}
-Assuming you want these daemons to start up automatically at
-boot time, you can add them to the KDC’s \sphinxcode{/etc/rc} or
-\sphinxcode{/etc/inittab} file. You need to have a
-\DUrole{xref,std,std-ref}{stash\_definition} in order to do this.
-\end{sphinxadmonition}
-
-You can verify that they started properly by checking for their
-startup messages in the logging locations you defined in
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} (see {\hyperref[\detokenize{admin/conf_files/kdc_conf:logging}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}logging{]}}}}}). For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{tail} \PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{log}\PYG{o}{/}\PYG{n}{krb5kdc}\PYG{o}{.}\PYG{n}{log}
-\PYG{n}{Dec} \PYG{l+m+mi}{02} \PYG{l+m+mi}{12}\PYG{p}{:}\PYG{l+m+mi}{35}\PYG{p}{:}\PYG{l+m+mi}{47} \PYG{n}{beeblebrox} \PYG{n}{krb5kdc}\PYG{p}{[}\PYG{l+m+mi}{3187}\PYG{p}{]}\PYG{p}{(}\PYG{n}{info}\PYG{p}{)}\PYG{p}{:} \PYG{n}{commencing} \PYG{n}{operation}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{tail} \PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{log}\PYG{o}{/}\PYG{n}{kadmin}\PYG{o}{.}\PYG{n}{log}
-\PYG{n}{Dec} \PYG{l+m+mi}{02} \PYG{l+m+mi}{12}\PYG{p}{:}\PYG{l+m+mi}{35}\PYG{p}{:}\PYG{l+m+mi}{52} \PYG{n}{beeblebrox} \PYG{n}{kadmind}\PYG{p}{[}\PYG{l+m+mi}{3189}\PYG{p}{]}\PYG{p}{(}\PYG{n}{info}\PYG{p}{)}\PYG{p}{:} \PYG{n}{starting}
-\end{sphinxVerbatim}
-
-Any errors the daemons encounter while starting will also be listed in
-the logging output.
-
-As an additional verification, check if \DUrole{xref,std,std-ref}{kinit(1)} succeeds
-against the principals that you have created on the previous step
-({\hyperref[\detokenize{admin/install_kdc:addadmin-kdb}]{\sphinxcrossref{\DUrole{std,std-ref}{Add administrators to the Kerberos database}}}}). Run:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kinit} \PYG{n}{admin}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\end{sphinxVerbatim}
-
-
-\subsubsection{Install the replica KDCs}
-\label{\detokenize{admin/install_kdc:install-the-replica-kdcs}}
-You are now ready to start configuring the replica KDCs.
-
-\begin{sphinxadmonition}{note}{Note:}
-Assuming you are setting the KDCs up so that you can easily
-switch the primary KDC with one of the replicas, you should
-perform each of these steps on the primary KDC as well as
-the replica KDCs, unless these instructions specify
-otherwise.
-\end{sphinxadmonition}
-
-
-\paragraph{Create host keytabs for replica KDCs}
-\label{\detokenize{admin/install_kdc:create-host-keytabs-for-replica-kdcs}}\label{\detokenize{admin/install_kdc:replica-host-key}}
-Each KDC needs a \sphinxcode{host} key in the Kerberos database. These keys
-are used for mutual authentication when propagating the database dump
-file from the primary KDC to the secondary KDC servers.
-
-On the primary KDC, connect to administrative interface and create the
-host principal for each of the KDCs’ \sphinxcode{host} services. For example,
-if the primary KDC were called \sphinxcode{kerberos.mit.edu}, and you had a
-replica KDC named \sphinxcode{kerberos-1.mit.edu}, you would type the
-following:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kadmin}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{randkey} \PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-\PYG{n}{No} \PYG{n}{policy} \PYG{n}{specified} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{host/kerberos.mit.edu@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;} \PYG{n}{assigning} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{default}\PYG{l+s+s2}{\PYGZdq{}}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{host/kerberos.mit.edu@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{randkey} \PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-\PYG{n}{No} \PYG{n}{policy} \PYG{n}{specified} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{host/kerberos\PYGZhy{}1.mit.edu@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;} \PYG{n}{assigning} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{default}\PYG{l+s+s2}{\PYGZdq{}}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{host/kerberos\PYGZhy{}1.mit.edu@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-It is not strictly necessary to have the primary KDC server in the
-Kerberos database, but it can be handy if you want to be able to swap
-the primary KDC with one of the replicas.
-
-Next, extract \sphinxcode{host} random keys for all participating KDCs and
-store them in each host’s default keytab file. Ideally, you should
-extract each keytab locally on its own KDC. If this is not feasible,
-you should use an encrypted session to send them across the network.
-To extract a keytab directly on a replica KDC called
-\sphinxcode{kerberos-1.mit.edu}, you would execute the following command:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktadd} \PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{encryption}
- \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{encryption}
- \PYG{n+nb}{type} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{encryption}
- \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha384}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{192} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{encryption}
- \PYG{n+nb}{type} \PYG{n}{arcfour}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-If you are instead extracting a keytab for the replica KDC called
-\sphinxcode{kerberos-1.mit.edu} on the primary KDC, you should use a dedicated
-temporary keytab file for that machine’s keytab:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktadd} \PYG{o}{\PYGZhy{}}\PYG{n}{k} \PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{keytab} \PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{encryption}
- \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{encryption}
- \PYG{n+nb}{type} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-The file \sphinxcode{/tmp/kerberos-1.keytab} can then be installed as
-\sphinxcode{/etc/krb5.keytab} on the host \sphinxcode{kerberos-1.mit.edu}.
-
-
-\paragraph{Configure replica KDCs}
-\label{\detokenize{admin/install_kdc:configure-replica-kdcs}}
-Database propagation copies the contents of the primary’s database,
-but does not propagate configuration files, stash files, or the kadm5
-ACL file. The following files must be copied by hand to each replica
-(see {\hyperref[\detokenize{mitK5defaults:mitk5defaults}]{\sphinxcrossref{\DUrole{std,std-ref}{MIT Kerberos defaults}}}} for the default locations for these files):
-\begin{itemize}
-\item {}
-krb5.conf
-
-\item {}
-kdc.conf
-
-\item {}
-kadm5.acl
-
-\item {}
-master key stash file
-
-\end{itemize}
-
-Move the copied files into their appropriate directories, exactly as
-on the primary KDC. kadm5.acl is only needed to allow a replica to
-swap with the primary KDC.
-
-The database is propagated from the primary KDC to the replica KDCs
-via the {\hyperref[\detokenize{admin/admin_commands/kpropd:kpropd-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kpropd}}}} daemon. You must explicitly specify the
-principals which are allowed to provide Kerberos dump updates on the
-replica machine with a new database. Create a file named kpropd.acl
-in the KDC state directory containing the \sphinxcode{host} principals for each
-of the KDCs:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{host}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-If you expect that the primary and replica KDCs will be
-switched at some point of time, list the host principals
-from all participating KDC servers in kpropd.acl files on
-all of the KDCs. Otherwise, you only need to list the
-primary KDC’s host principal in the kpropd.acl files of the
-replica KDCs.
-\end{sphinxadmonition}
-
-Then, add the following line to \sphinxcode{/etc/inetd.conf} on each KDC
-(adjust the path to kpropd):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{krb5\PYGZus{}prop} \PYG{n}{stream} \PYG{n}{tcp} \PYG{n}{nowait} \PYG{n}{root} \PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{sbin}\PYG{o}{/}\PYG{n}{kpropd} \PYG{n}{kpropd}
-\end{sphinxVerbatim}
-
-You also need to add the following line to \sphinxcode{/etc/services} on each
-KDC, if it is not already present (assuming that the default port is
-used):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{krb5\PYGZus{}prop} \PYG{l+m+mi}{754}\PYG{o}{/}\PYG{n}{tcp} \PYG{c+c1}{\PYGZsh{} Kerberos replica propagation}
-\end{sphinxVerbatim}
-
-Restart inetd daemon.
-
-Alternatively, start {\hyperref[\detokenize{admin/admin_commands/kpropd:kpropd-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kpropd}}}} as a stand-alone daemon. This is
-required when incremental propagation is enabled.
-
-Now that the replica KDC is able to accept database propagation,
-you’ll need to propagate the database from the primary server.
-
-NOTE: Do not start the replica KDC yet; you still do not have a copy
-of the primary’s database.
-
-
-\paragraph{Propagate the database to each replica KDC}
-\label{\detokenize{admin/install_kdc:kprop-to-replicas}}\label{\detokenize{admin/install_kdc:propagate-the-database-to-each-replica-kdc}}
-First, create a dump file of the database on the primary KDC, as
-follows:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{dump} \PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{krb5kdc}\PYG{o}{/}\PYG{n}{replica\PYGZus{}datatrans}
-\end{sphinxVerbatim}
-
-Then, manually propagate the database to each replica KDC, as in the
-following example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kprop} \PYG{o}{\PYGZhy{}}\PYG{n}{f} \PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{krb5kdc}\PYG{o}{/}\PYG{n}{replica\PYGZus{}datatrans} \PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-
-\PYG{n}{Database} \PYG{n}{propagation} \PYG{n}{to} \PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{p}{:} \PYG{n}{SUCCEEDED}
-\end{sphinxVerbatim}
-
-You will need a script to dump and propagate the database. The
-following is an example of a Bourne shell script that will do this.
-
-\begin{sphinxadmonition}{note}{Note:}
-Remember that you need to replace \sphinxcode{/usr/local/var/krb5kdc}
-with the name of the KDC state directory.
-\end{sphinxadmonition}
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYGZsh{}!/bin/sh
-
-kdclist = \PYGZdq{}kerberos\PYGZhy{}1.mit.edu kerberos\PYGZhy{}2.mit.edu\PYGZdq{}
-
-kdb5\PYGZus{}util dump /usr/local/var/krb5kdc/replica\PYGZus{}datatrans
-
-for kdc in \PYGZdl{}kdclist
-do
- kprop \PYGZhy{}f /usr/local/var/krb5kdc/replica\PYGZus{}datatrans \PYGZdl{}kdc
-done
-\end{sphinxVerbatim}
-
-You will need to set up a cron job to run this script at the intervals
-you decided on earlier (see {\hyperref[\detokenize{admin/realm_config:db-prop}]{\sphinxcrossref{\DUrole{std,std-ref}{Database propagation}}}}).
-
-Now that the replica KDC has a copy of the Kerberos database, you can
-start the krb5kdc daemon:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{krb5kdc}
-\end{sphinxVerbatim}
-
-As with the primary KDC, you will probably want to add this command to
-the KDCs’ \sphinxcode{/etc/rc} or \sphinxcode{/etc/inittab} files, so they will start
-the krb5kdc daemon automatically at boot time.
-
-
-\subparagraph{Propagation failed?}
-\label{\detokenize{admin/install_kdc:propagation-failed}}
-You may encounter the following error messages. For a more detailed
-discussion on possible causes and solutions click on the error link
-to be redirected to {\hyperref[\detokenize{admin/troubleshoot:troubleshoot}]{\sphinxcrossref{\DUrole{std,std-ref}{Troubleshooting}}}} section.
-\begin{enumerate}
-\item {}
-{\hyperref[\detokenize{admin/troubleshoot:kprop-no-route}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop: No route to host while connecting to server}}}}
-
-\item {}
-{\hyperref[\detokenize{admin/troubleshoot:kprop-con-refused}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop: Connection refused while connecting to server}}}}
-
-\item {}
-{\hyperref[\detokenize{admin/troubleshoot:kprop-sendauth-exchange}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop: Server rejected authentication (during sendauth exchange) while authenticating to server}}}}
-
-\end{enumerate}
-
-
-\subsubsection{Add Kerberos principals to the database}
-\label{\detokenize{admin/install_kdc:add-kerberos-principals-to-the-database}}
-Once your KDCs are set up and running, you are ready to use
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} to load principals for your users, hosts, and other
-services into the Kerberos database. This procedure is described
-fully in {\hyperref[\detokenize{admin/database:add-mod-del-princs}]{\sphinxcrossref{\DUrole{std,std-ref}{Adding, modifying and deleting principals}}}}.
-
-You may occasionally want to use one of your replica KDCs as the
-primary. This might happen if you are upgrading the primary KDC, or
-if your primary KDC has a disk crash. See the following section for
-the instructions.
-
-
-\subsubsection{Switching primary and replica KDCs}
-\label{\detokenize{admin/install_kdc:switch-primary-replica}}\label{\detokenize{admin/install_kdc:switching-primary-and-replica-kdcs}}
-You may occasionally want to use one of your replica KDCs as the
-primary. This might happen if you are upgrading the primary KDC, or
-if your primary KDC has a disk crash.
-
-Assuming you have configured all of your KDCs to be able to function
-as either the primary KDC or a replica KDC (as this document
-recommends), all you need to do to make the changeover is:
-
-If the primary KDC is still running, do the following on the \sphinxstyleemphasis{old}
-primary KDC:
-\begin{enumerate}
-\item {}
-Kill the kadmind process.
-
-\item {}
-Disable the cron job that propagates the database.
-
-\item {}
-Run your database propagation script manually, to ensure that the
-replicas all have the latest copy of the database (see
-{\hyperref[\detokenize{admin/install_kdc:kprop-to-replicas}]{\sphinxcrossref{\DUrole{std,std-ref}{Propagate the database to each replica KDC}}}}).
-
-\end{enumerate}
-
-On the \sphinxstyleemphasis{new} primary KDC:
-\begin{enumerate}
-\item {}
-Start the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} daemon (see {\hyperref[\detokenize{admin/install_kdc:start-kdc-daemons}]{\sphinxcrossref{\DUrole{std,std-ref}{Start the Kerberos daemons on the primary KDC}}}}).
-
-\item {}
-Set up the cron job to propagate the database (see
-{\hyperref[\detokenize{admin/install_kdc:kprop-to-replicas}]{\sphinxcrossref{\DUrole{std,std-ref}{Propagate the database to each replica KDC}}}}).
-
-\item {}
-Switch the CNAMEs of the old and new primary KDCs. If you can’t do
-this, you’ll need to change the {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} file on every
-client machine in your Kerberos realm.
-
-\end{enumerate}
-
-
-\subsubsection{Incremental database propagation}
-\label{\detokenize{admin/install_kdc:incremental-database-propagation}}
-If you expect your Kerberos database to become large, you may wish to
-set up incremental propagation to replica KDCs. See
-{\hyperref[\detokenize{admin/database:incr-db-prop}]{\sphinxcrossref{\DUrole{std,std-ref}{Incremental database propagation}}}} for details.
-
-
-\subsection{Installing and configuring UNIX client machines}
-\label{\detokenize{admin/install_clients:installing-and-configuring-unix-client-machines}}\label{\detokenize{admin/install_clients::doc}}
-The Kerberized client programs include \DUrole{xref,std,std-ref}{kinit(1)},
-\DUrole{xref,std,std-ref}{klist(1)}, \DUrole{xref,std,std-ref}{kdestroy(1)}, and \DUrole{xref,std,std-ref}{kpasswd(1)}. All of
-these programs are in the directory {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{BINDIR}}}}.
-
-You can often integrate Kerberos with the login system on client
-machines, typically through the use of PAM. The details vary by
-operating system, and should be covered in your operating system’s
-documentation. If you do this, you will need to make sure your users
-know to use their Kerberos passwords when they log in.
-
-You will also need to educate your users to use the ticket management
-programs kinit, klist, and kdestroy. If you do not have Kerberos
-password changing integrated into the native password program (again,
-typically through PAM), you will need to educate users to use kpasswd
-in place of its non-Kerberos counterparts passwd.
-
-
-\subsubsection{Client machine configuration files}
-\label{\detokenize{admin/install_clients:client-machine-configuration-files}}
-Each machine running Kerberos should have a {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} file.
-At a minimum, it should define a \sphinxstylestrong{default\_realm} setting in
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}}. If you are not using DNS SRV records
-({\hyperref[\detokenize{admin/realm_config:kdc-hostnames}]{\sphinxcrossref{\DUrole{std,std-ref}{Hostnames for KDCs}}}}) or URI records ({\hyperref[\detokenize{admin/realm_config:kdc-discovery}]{\sphinxcrossref{\DUrole{std,std-ref}{KDC Discovery}}}}), it must
-also contain a {\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} section containing information for your
-realm’s KDCs.
-
-Consider setting \sphinxstylestrong{rdns} to false in order to reduce your dependence
-on precisely correct DNS information for service hostnames. Turning
-this flag off means that service hostnames will be canonicalized
-through forward name resolution (which adds your domain name to
-unqualified hostnames, and resolves CNAME records in DNS), but not
-through reverse address lookup. The default value of this flag is
-true for historical reasons only.
-
-If you anticipate users frequently logging into remote hosts
-(e.g., using ssh) using forwardable credentials, consider setting
-\sphinxstylestrong{forwardable} to true so that users obtain forwardable tickets by
-default. Otherwise users will need to use \sphinxcode{kinit -f} to get
-forwardable tickets.
-
-Consider adjusting the \sphinxstylestrong{ticket\_lifetime} setting to match the likely
-length of sessions for your users. For instance, if most of your
-users will be logging in for an eight-hour workday, you could set the
-default to ten hours so that tickets obtained in the morning expire
-shortly after the end of the workday. Users can still manually
-request longer tickets when necessary, up to the maximum allowed by
-each user’s principal record on the KDC.
-
-If a client host may access services in different realms, it may be
-useful to define a {\hyperref[\detokenize{admin/conf_files/krb5_conf:domain-realm}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}domain\_realm{]}}}}} mapping so that clients know
-which hosts belong to which realms. However, if your clients and KDC
-are running release 1.7 or later, it is also reasonable to leave this
-section out on client machines and just define it in the KDC’s
-krb5.conf.
-
-
-\subsection{UNIX Application Servers}
-\label{\detokenize{admin/install_appl_srv:unix-application-servers}}\label{\detokenize{admin/install_appl_srv::doc}}
-An application server is a host that provides one or more services
-over the network. Application servers can be “secure” or “insecure.”
-A “secure” host is set up to require authentication from every client
-connecting to it. An “insecure” host will still provide Kerberos
-authentication, but will also allow unauthenticated clients to
-connect.
-
-If you have Kerberos V5 installed on all of your client machines, MIT
-recommends that you make your hosts secure, to take advantage of the
-security that Kerberos authentication affords. However, if you have
-some clients that do not have Kerberos V5 installed, you can run an
-insecure server, and still take advantage of Kerberos V5’s single
-sign-on capability.
-
-
-\subsubsection{The keytab file}
-\label{\detokenize{admin/install_appl_srv:the-keytab-file}}\label{\detokenize{admin/install_appl_srv:keytab-file}}
-All Kerberos server machines need a keytab file to authenticate to the
-KDC. By default on UNIX-like systems this file is named {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{DEFKTNAME}}}}.
-The keytab file is an local copy of the host’s key. The keytab file
-is a potential point of entry for a break-in, and if compromised,
-would allow unrestricted access to its host. The keytab file should
-be readable only by root, and should exist only on the machine’s local
-disk. The file should not be part of any backup of the machine,
-unless access to the backup data is secured as tightly as access to
-the machine’s root password.
-
-In order to generate a keytab for a host, the host must have a
-principal in the Kerberos database. The procedure for adding hosts to
-the database is described fully in {\hyperref[\detokenize{admin/database:add-mod-del-princs}]{\sphinxcrossref{\DUrole{std,std-ref}{Adding, modifying and deleting principals}}}}. (See
-{\hyperref[\detokenize{admin/install_kdc:replica-host-key}]{\sphinxcrossref{\DUrole{std,std-ref}{Create host keytabs for replica KDCs}}}} for a brief description.) The keytab is
-generated by running {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} and issuing the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:ktadd}]{\sphinxcrossref{\DUrole{std,std-ref}{ktadd}}}}
-command.
-
-For example, to generate a keytab file to allow the host
-\sphinxcode{trillium.mit.edu} to authenticate for the services host, ftp, and
-pop, the administrator \sphinxcode{joeadmin} would issue the command (on
-\sphinxcode{trillium.mit.edu}):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{trillium}\PYG{o}{\PYGZpc{}} \PYG{n}{kadmin}
-\PYG{n}{Authenticating} \PYG{k}{as} \PYG{n}{principal} \PYG{n}{root}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{root}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktadd} \PYG{n}{host}\PYG{o}{/}\PYG{n}{trillium}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n}{ftp}\PYG{o}{/}\PYG{n}{trillium}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n}{pop}\PYG{o}{/}\PYG{n}{trillium}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{trillium}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha384}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{192} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{ftp}\PYG{o}{/}\PYG{n}{trillium}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha384}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{192} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{pop}\PYG{o}{/}\PYG{n}{trillium}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha384}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{192} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{quit}
-\PYG{n}{trillium}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-If you generate the keytab file on another host, you need to get a
-copy of the keytab file onto the destination host (\sphinxcode{trillium}, in
-the above example) without sending it unencrypted over the network.
-
-
-\subsubsection{Some advice about secure hosts}
-\label{\detokenize{admin/install_appl_srv:some-advice-about-secure-hosts}}
-Kerberos V5 can protect your host from certain types of break-ins, but
-it is possible to install Kerberos V5 and still leave your host
-vulnerable to attack. Obviously an installation guide is not the
-place to try to include an exhaustive list of countermeasures for
-every possible attack, but it is worth noting some of the larger holes
-and how to close them.
-
-We recommend that backups of secure machines exclude the keytab file
-({\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{DEFKTNAME}}}}). If this is not possible, the backups should at least be
-done locally, rather than over a network, and the backup tapes should
-be physically secured.
-
-The keytab file and any programs run by root, including the Kerberos
-V5 binaries, should be kept on local disk. The keytab file should be
-readable only by root.
-
-
-\section{Additional references}
-\label{\detokenize{admin/install:additional-references}}\begin{enumerate}
-\item {}
-Debian: \sphinxhref{http://techpubs.spinlocksolutions.com/dklar/kerberos.html}{Setting up MIT Kerberos 5}
-
-\item {}
-Solaris: \sphinxhref{https://docs.oracle.com/cd/E19253-01/816-4557/6maosrjv2/index.html}{Configuring the Kerberos Service}
-
-\end{enumerate}
-
-
-\chapter{Configuration Files}
-\label{\detokenize{admin/conf_files/index:configuration-files}}\label{\detokenize{admin/conf_files/index::doc}}
-Kerberos uses configuration files to allow administrators to specify
-settings on a per-machine basis. {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} applies to all
-applications using the Kerboros library, on clients and servers.
-For KDC-specific applications, additional settings can be specified in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}; the two files are merged into a configuration profile
-used by applications accessing the KDC database directly. {\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}}
-is also only used on the KDC, it controls permissions for modifying the
-KDC database.
-
-
-\section{Contents}
-\label{\detokenize{admin/conf_files/index:contents}}
-
-\subsection{krb5.conf}
-\label{\detokenize{admin/conf_files/krb5_conf::doc}}\label{\detokenize{admin/conf_files/krb5_conf:krb5-conf}}\label{\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}}
-The krb5.conf file contains Kerberos configuration information,
-including the locations of KDCs and admin servers for the Kerberos
-realms of interest, defaults for the current realm and for Kerberos
-applications, and mappings of hostnames onto Kerberos realms.
-Normally, you should install your krb5.conf file in the directory
-\sphinxcode{/etc}. You can override the default location by setting the
-environment variable \sphinxstylestrong{KRB5\_CONFIG}. Multiple colon-separated
-filenames may be specified in \sphinxstylestrong{KRB5\_CONFIG}; all files which are
-present will be read. Starting in release 1.14, directory names can
-also be specified in \sphinxstylestrong{KRB5\_CONFIG}; all files within the directory
-whose names consist solely of alphanumeric characters, dashes, or
-underscores will be read.
-
-
-\subsubsection{Structure}
-\label{\detokenize{admin/conf_files/krb5_conf:structure}}
-The krb5.conf file is set up in the style of a Windows INI file.
-Lines beginning with ‘\#’ or ‘;’ (possibly after initial whitespace)
-are ignored as comments. Sections are headed by the section name, in
-square brackets. Each section may contain zero or more relations, of
-the form:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{foo} \PYG{o}{=} \PYG{n}{bar}
-\end{sphinxVerbatim}
-
-or:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{fubar} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{foo} \PYG{o}{=} \PYG{n}{bar}
- \PYG{n}{baz} \PYG{o}{=} \PYG{n}{quux}
-\PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-Placing a ‘*’ after the closing bracket of a section name indicates
-that the section is \sphinxstyleemphasis{final}, meaning that if the same section appears
-within a later file specified in \sphinxstylestrong{KRB5\_CONFIG}, it will be ignored.
-A subsection can be marked as final by placing a ‘*’ after either the
-tag name or the closing brace.
-
-The krb5.conf file can include other files using either of the
-following directives at the beginning of a line:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{include} \PYG{n}{FILENAME}
-\PYG{n}{includedir} \PYG{n}{DIRNAME}
-\end{sphinxVerbatim}
-
-\sphinxstyleemphasis{FILENAME} or \sphinxstyleemphasis{DIRNAME} should be an absolute path. The named file or
-directory must exist and be readable. Including a directory includes
-all files within the directory whose names consist solely of
-alphanumeric characters, dashes, or underscores. Starting in release
-1.15, files with names ending in “.conf” are also included, unless the
-name begins with “.”. Included profile files are syntactically
-independent of their parents, so each included file must begin with a
-section header. Starting in release 1.17, files are read in
-alphanumeric order; in previous releases, they may be read in any
-order.
-
-The krb5.conf file can specify that configuration should be obtained
-from a loadable module, rather than the file itself, using the
-following directive at the beginning of a line before any section
-headers:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{module} \PYG{n}{MODULEPATH}\PYG{p}{:}\PYG{n}{RESIDUAL}
-\end{sphinxVerbatim}
-
-\sphinxstyleemphasis{MODULEPATH} may be relative to the library path of the krb5
-installation, or it may be an absolute path. \sphinxstyleemphasis{RESIDUAL} is provided
-to the module at initialization time. If krb5.conf uses a module
-directive, {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} should also use one if it exists.
-
-
-\subsubsection{Sections}
-\label{\detokenize{admin/conf_files/krb5_conf:sections}}
-The krb5.conf file may contain the following sections:
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}}
-&
-Settings used by the Kerberos V5 library
-\\
-\hline
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}}
-&
-Realm-specific contact information and settings
-\\
-\hline
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:domain-realm}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}domain\_realm{]}}}}}
-&
-Maps server hostnames to Kerberos realms
-\\
-\hline
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:capaths}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}capaths{]}}}}}
-&
-Authentication paths for non-hierarchical cross-realm
-\\
-\hline
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:appdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}appdefaults{]}}}}}
-&
-Settings used by some Kerberos V5 applications
-\\
-\hline
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:plugins}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}plugins{]}}}}}
-&
-Controls plugin module registration
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-Additionally, krb5.conf may include any of the relations described in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}, but it is not a recommended practice.
-
-
-\paragraph{{[}libdefaults{]}}
-\label{\detokenize{admin/conf_files/krb5_conf:libdefaults}}\label{\detokenize{admin/conf_files/krb5_conf:id1}}
-The libdefaults section may contain any of the following relations:
-\begin{description}
-\item[{\sphinxstylestrong{allow\_weak\_crypto}}] \leavevmode
-If this flag is set to false, then weak encryption types (as noted
-in {\hyperref[\detokenize{admin/conf_files/kdc_conf:encryption-types}]{\sphinxcrossref{\DUrole{std,std-ref}{Encryption types}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}) will be filtered
-out of the lists \sphinxstylestrong{default\_tgs\_enctypes},
-\sphinxstylestrong{default\_tkt\_enctypes}, and \sphinxstylestrong{permitted\_enctypes}. The default
-value for this tag is false.
-
-\item[{\sphinxstylestrong{canonicalize}}] \leavevmode
-If this flag is set to true, initial ticket requests to the KDC
-will request canonicalization of the client principal name, and
-answers with different client principals than the requested
-principal will be accepted. The default value is false.
-
-\item[{\sphinxstylestrong{ccache\_type}}] \leavevmode
-This parameter determines the format of credential cache types
-created by \DUrole{xref,std,std-ref}{kinit(1)} or other programs. The default value
-is 4, which represents the most current format. Smaller values
-can be used for compatibility with very old implementations of
-Kerberos which interact with credential caches on the same host.
-
-\item[{\sphinxstylestrong{clockskew}}] \leavevmode
-Sets the maximum allowable amount of clockskew in seconds that the
-library will tolerate before assuming that a Kerberos message is
-invalid. The default value is 300 seconds, or five minutes.
-
-The clockskew setting is also used when evaluating ticket start
-and expiration times. For example, tickets that have reached
-their expiration time can still be used (and renewed if they are
-renewable tickets) if they have been expired for a shorter
-duration than the \sphinxstylestrong{clockskew} setting.
-
-\item[{\sphinxstylestrong{default\_ccache\_name}}] \leavevmode
-This relation specifies the name of the default credential cache.
-The default is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{DEFCCNAME}}}}. This relation is subject to parameter
-expansion (see below). New in release 1.11.
-
-\item[{\sphinxstylestrong{default\_client\_keytab\_name}}] \leavevmode
-This relation specifies the name of the default keytab for
-obtaining client credentials. The default is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{DEFCKTNAME}}}}. This
-relation is subject to parameter expansion (see below).
-New in release 1.11.
-
-\item[{\sphinxstylestrong{default\_keytab\_name}}] \leavevmode
-This relation specifies the default keytab name to be used by
-application servers such as sshd. The default is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{DEFKTNAME}}}}. This
-relation is subject to parameter expansion (see below).
-
-\item[{\sphinxstylestrong{default\_rcache\_name}}] \leavevmode
-This relation specifies the name of the default replay cache.
-The default is \sphinxcode{dfl:}. This relation is subject to parameter
-expansion (see below). New in release 1.18.
-
-\item[{\sphinxstylestrong{default\_realm}}] \leavevmode
-Identifies the default Kerberos realm for the client. Set its
-value to your Kerberos realm. If this value is not set, then a
-realm must be specified with every Kerberos principal when
-invoking programs such as \DUrole{xref,std,std-ref}{kinit(1)}.
-
-\item[{\sphinxstylestrong{default\_tgs\_enctypes}}] \leavevmode
-Identifies the supported list of session key encryption types that
-the client should request when making a TGS-REQ, in order of
-preference from highest to lowest. The list may be delimited with
-commas or whitespace. See {\hyperref[\detokenize{admin/conf_files/kdc_conf:encryption-types}]{\sphinxcrossref{\DUrole{std,std-ref}{Encryption types}}}} in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a list of the accepted values for this tag.
-Starting in release 1.18, the default value is the value of
-\sphinxstylestrong{permitted\_enctypes}. For previous releases or if
-\sphinxstylestrong{permitted\_enctypes} is not set, the default value is
-\sphinxcode{aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha384-192 aes128-cts-hmac-sha256-128 des3-cbc-sha1 arcfour-hmac-md5 camellia256-cts-cmac camellia128-cts-cmac}.
-
-Do not set this unless required for specific backward
-compatibility purposes; stale values of this setting can prevent
-clients from taking advantage of new stronger enctypes when the
-libraries are upgraded.
-
-\item[{\sphinxstylestrong{default\_tkt\_enctypes}}] \leavevmode
-Identifies the supported list of session key encryption types that
-the client should request when making an AS-REQ, in order of
-preference from highest to lowest. The format is the same as for
-default\_tgs\_enctypes. Starting in release 1.18, the default
-value is the value of \sphinxstylestrong{permitted\_enctypes}. For previous
-releases or if \sphinxstylestrong{permitted\_enctypes} is not set, the default
-value is \sphinxcode{aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha384-192 aes128-cts-hmac-sha256-128 des3-cbc-sha1 arcfour-hmac-md5 camellia256-cts-cmac camellia128-cts-cmac}.
-
-Do not set this unless required for specific backward
-compatibility purposes; stale values of this setting can prevent
-clients from taking advantage of new stronger enctypes when the
-libraries are upgraded.
-
-\item[{\sphinxstylestrong{dns\_canonicalize\_hostname}}] \leavevmode
-Indicate whether name lookups will be used to canonicalize
-hostnames for use in service principal names. Setting this flag
-to false can improve security by reducing reliance on DNS, but
-means that short hostnames will not be canonicalized to
-fully-qualified hostnames. If this option is set to \sphinxcode{fallback} (new
-in release 1.18), DNS canonicalization will only be performed the
-server hostname is not found with the original name when
-requesting credentials. The default value is true.
-
-\item[{\sphinxstylestrong{dns\_lookup\_kdc}}] \leavevmode
-Indicate whether DNS SRV records should be used to locate the KDCs
-and other servers for a realm, if they are not listed in the
-krb5.conf information for the realm. (Note that the admin\_server
-entry must be in the krb5.conf realm information in order to
-contact kadmind, because the DNS implementation for kadmin is
-incomplete.)
-
-Enabling this option does open up a type of denial-of-service
-attack, if someone spoofs the DNS records and redirects you to
-another server. However, it’s no worse than a denial of service,
-because that fake KDC will be unable to decode anything you send
-it (besides the initial ticket request, which has no encrypted
-data), and anything the fake KDC sends will not be trusted without
-verification using some secret that it won’t know.
-
-\item[{\sphinxstylestrong{dns\_uri\_lookup}}] \leavevmode
-Indicate whether DNS URI records should be used to locate the KDCs
-and other servers for a realm, if they are not listed in the
-krb5.conf information for the realm. SRV records are used as a
-fallback if no URI records were found. The default value is true.
-New in release 1.15.
-
-\item[{\sphinxstylestrong{enforce\_ok\_as\_delegate}}] \leavevmode
-If this flag to true, GSSAPI credential delegation will be
-disabled when the \sphinxcode{ok-as-delegate} flag is not set in the
-service ticket. If this flag is false, the \sphinxcode{ok-as-delegate}
-ticket flag is only enforced when an application specifically
-requests enforcement. The default value is false.
-
-\item[{\sphinxstylestrong{err\_fmt}}] \leavevmode
-This relation allows for custom error message formatting. If a
-value is set, error messages will be formatted by substituting a
-normal error message for \%M and an error code for \%C in the value.
-
-\item[{\sphinxstylestrong{extra\_addresses}}] \leavevmode
-This allows a computer to use multiple local addresses, in order
-to allow Kerberos to work in a network that uses NATs while still
-using address-restricted tickets. The addresses should be in a
-comma-separated list. This option has no effect if
-\sphinxstylestrong{noaddresses} is true.
-
-\item[{\sphinxstylestrong{forwardable}}] \leavevmode
-If this flag is true, initial tickets will be forwardable by
-default, if allowed by the KDC. The default value is false.
-
-\item[{\sphinxstylestrong{ignore\_acceptor\_hostname}}] \leavevmode
-When accepting GSSAPI or krb5 security contexts for host-based
-service principals, ignore any hostname passed by the calling
-application, and allow clients to authenticate to any service
-principal in the keytab matching the service name and realm name
-(if given). This option can improve the administrative
-flexibility of server applications on multihomed hosts, but could
-compromise the security of virtual hosting environments. The
-default value is false. New in release 1.10.
-
-\item[{\sphinxstylestrong{k5login\_authoritative}}] \leavevmode
-If this flag is true, principals must be listed in a local user’s
-k5login file to be granted login access, if a \DUrole{xref,std,std-ref}{.k5login(5)}
-file exists. If this flag is false, a principal may still be
-granted login access through other mechanisms even if a k5login
-file exists but does not list the principal. The default value is
-true.
-
-\item[{\sphinxstylestrong{k5login\_directory}}] \leavevmode
-If set, the library will look for a local user’s k5login file
-within the named directory, with a filename corresponding to the
-local username. If not set, the library will look for k5login
-files in the user’s home directory, with the filename .k5login.
-For security reasons, .k5login files must be owned by
-the local user or by root.
-
-\item[{\sphinxstylestrong{kcm\_mach\_service}}] \leavevmode
-On macOS only, determines the name of the bootstrap service used to
-contact the KCM daemon for the KCM credential cache type. If the
-value is \sphinxcode{-}, Mach RPC will not be used to contact the KCM
-daemon. The default value is \sphinxcode{org.h5l.kcm}.
-
-\item[{\sphinxstylestrong{kcm\_socket}}] \leavevmode
-Determines the path to the Unix domain socket used to access the
-KCM daemon for the KCM credential cache type. If the value is
-\sphinxcode{-}, Unix domain sockets will not be used to contact the KCM
-daemon. The default value is
-\sphinxcode{/var/run/.heim\_org.h5l.kcm-socket}.
-
-\item[{\sphinxstylestrong{kdc\_default\_options}}] \leavevmode
-Default KDC options (Xored for multiple values) when requesting
-initial tickets. By default it is set to 0x00000010
-(KDC\_OPT\_RENEWABLE\_OK).
-
-\item[{\sphinxstylestrong{kdc\_timesync}}] \leavevmode
-Accepted values for this relation are 1 or 0. If it is nonzero,
-client machines will compute the difference between their time and
-the time returned by the KDC in the timestamps in the tickets and
-use this value to correct for an inaccurate system clock when
-requesting service tickets or authenticating to services. This
-corrective factor is only used by the Kerberos library; it is not
-used to change the system clock. The default value is 1.
-
-\item[{\sphinxstylestrong{noaddresses}}] \leavevmode
-If this flag is true, requests for initial tickets will not be
-made with address restrictions set, allowing the tickets to be
-used across NATs. The default value is true.
-
-\item[{\sphinxstylestrong{permitted\_enctypes}}] \leavevmode
-Identifies the encryption types that servers will permit for
-session keys and for ticket and authenticator encryption, ordered
-by preference from highest to lowest. Starting in release 1.18,
-this tag also acts as the default value for
-\sphinxstylestrong{default\_tgs\_enctypes} and \sphinxstylestrong{default\_tkt\_enctypes}. The
-default value for this tag is \sphinxcode{aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha384-192 aes128-cts-hmac-sha256-128 des3-cbc-sha1 arcfour-hmac-md5 camellia256-cts-cmac camellia128-cts-cmac}.
-
-\item[{\sphinxstylestrong{plugin\_base\_dir}}] \leavevmode
-If set, determines the base directory where krb5 plugins are
-located. The default value is the \sphinxcode{krb5/plugins} subdirectory
-of the krb5 library directory. This relation is subject to
-parameter expansion (see below) in release 1.17 and later.
-
-\item[{\sphinxstylestrong{preferred\_preauth\_types}}] \leavevmode
-This allows you to set the preferred preauthentication types which
-the client will attempt before others which may be advertised by a
-KDC. The default value for this setting is “17, 16, 15, 14”,
-which forces libkrb5 to attempt to use PKINIT if it is supported.
-
-\item[{\sphinxstylestrong{proxiable}}] \leavevmode
-If this flag is true, initial tickets will be proxiable by
-default, if allowed by the KDC. The default value is false.
-
-\item[{\sphinxstylestrong{qualify\_shortname}}] \leavevmode
-If this string is set, it determines the domain suffix for
-single-component hostnames when DNS canonicalization is not used
-(either because \sphinxstylestrong{dns\_canonicalize\_hostname} is false or because
-forward canonicalization failed). The default value is the first
-search domain of the system’s DNS configuration. To disable
-qualification of shortnames, set this relation to the empty string
-with \sphinxcode{qualify\_shortname = ""}. (New in release 1.18.)
-
-\item[{\sphinxstylestrong{rdns}}] \leavevmode
-If this flag is true, reverse name lookup will be used in addition
-to forward name lookup to canonicalizing hostnames for use in
-service principal names. If \sphinxstylestrong{dns\_canonicalize\_hostname} is set
-to false, this flag has no effect. The default value is true.
-
-\item[{\sphinxstylestrong{realm\_try\_domains}}] \leavevmode
-Indicate whether a host’s domain components should be used to
-determine the Kerberos realm of the host. The value of this
-variable is an integer: -1 means not to search, 0 means to try the
-host’s domain itself, 1 means to also try the domain’s immediate
-parent, and so forth. The library’s usual mechanism for locating
-Kerberos realms is used to determine whether a domain is a valid
-realm, which may involve consulting DNS if \sphinxstylestrong{dns\_lookup\_kdc} is
-set. The default is not to search domain components.
-
-\item[{\sphinxstylestrong{renew\_lifetime}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} string.) Sets the default renewable lifetime
-for initial ticket requests. The default value is 0.
-
-\item[{\sphinxstylestrong{spake\_preauth\_groups}}] \leavevmode
-A whitespace or comma-separated list of words which specifies the
-groups allowed for SPAKE preauthentication. The possible values
-are:
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-edwards25519
-&
-Edwards25519 curve (\index{RFC!RFC 7748}\sphinxhref{https://tools.ietf.org/html/rfc7748.html}{\sphinxstylestrong{RFC 7748}})
-\\
-\hline
-P-256
-&
-NIST P-256 curve (\index{RFC!RFC 5480}\sphinxhref{https://tools.ietf.org/html/rfc5480.html}{\sphinxstylestrong{RFC 5480}})
-\\
-\hline
-P-384
-&
-NIST P-384 curve (\index{RFC!RFC 5480}\sphinxhref{https://tools.ietf.org/html/rfc5480.html}{\sphinxstylestrong{RFC 5480}})
-\\
-\hline
-P-521
-&
-NIST P-521 curve (\index{RFC!RFC 5480}\sphinxhref{https://tools.ietf.org/html/rfc5480.html}{\sphinxstylestrong{RFC 5480}})
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-The default value for the client is \sphinxcode{edwards25519}. The default
-value for the KDC is empty. New in release 1.17.
-
-\item[{\sphinxstylestrong{ticket\_lifetime}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} string.) Sets the default lifetime for initial
-ticket requests. The default value is 1 day.
-
-\item[{\sphinxstylestrong{udp\_preference\_limit}}] \leavevmode
-When sending a message to the KDC, the library will try using TCP
-before UDP if the size of the message is above
-\sphinxstylestrong{udp\_preference\_limit}. If the message is smaller than
-\sphinxstylestrong{udp\_preference\_limit}, then UDP will be tried before TCP.
-Regardless of the size, both protocols will be tried if the first
-attempt fails.
-
-\item[{\sphinxstylestrong{verify\_ap\_req\_nofail}}] \leavevmode
-If this flag is true, then an attempt to verify initial
-credentials will fail if the client machine does not have a
-keytab. The default value is false.
-
-\item[{\sphinxstylestrong{client\_aware\_channel\_bindings}}] \leavevmode
-If this flag is true, then all application protocol authentication
-requests will be flagged to indicate that the application supports
-channel bindings when operating over a secure channel. The
-default value is false.
-
-\end{description}
-
-
-\paragraph{{[}realms{]}}
-\label{\detokenize{admin/conf_files/krb5_conf:id2}}\label{\detokenize{admin/conf_files/krb5_conf:realms}}
-Each tag in the {[}realms{]} section of the file is the name of a Kerberos
-realm. The value of the tag is a subsection with relations that
-define the properties of that particular realm. For each realm, the
-following tags may be specified in the realm’s subsection:
-\begin{description}
-\item[{\sphinxstylestrong{admin\_server}}] \leavevmode
-Identifies the host where the administration server is running.
-Typically, this is the primary Kerberos server. This tag must be
-given a value in order to communicate with the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}}
-server for the realm.
-
-\item[{\sphinxstylestrong{auth\_to\_local}}] \leavevmode
-This tag allows you to set a general rule for mapping principal
-names to local user names. It will be used if there is not an
-explicit mapping for the principal name that is being
-translated. The possible values are:
-\begin{description}
-\item[{\sphinxstylestrong{RULE:}\sphinxstyleemphasis{exp}}] \leavevmode
-The local name will be formulated from \sphinxstyleemphasis{exp}.
-
-The format for \sphinxstyleemphasis{exp} is \sphinxstylestrong{{[}}\sphinxstyleemphasis{n}\sphinxstylestrong{:}\sphinxstyleemphasis{string}\sphinxstylestrong{{]}(}\sphinxstyleemphasis{regexp}\sphinxstylestrong{)s/}\sphinxstyleemphasis{pattern}\sphinxstylestrong{/}\sphinxstyleemphasis{replacement}\sphinxstylestrong{/g}.
-The integer \sphinxstyleemphasis{n} indicates how many components the target
-principal should have. If this matches, then a string will be
-formed from \sphinxstyleemphasis{string}, substituting the realm of the principal
-for \sphinxcode{\$0} and the \sphinxstyleemphasis{n}’th component of the principal for
-\sphinxcode{\$n} (e.g., if the principal was \sphinxcode{johndoe/admin} then
-\sphinxcode{{[}2:\$2\$1foo{]}} would result in the string
-\sphinxcode{adminjohndoefoo}). If this string matches \sphinxstyleemphasis{regexp}, then
-the \sphinxcode{s//{[}g{]}} substitution command will be run over the
-string. The optional \sphinxstylestrong{g} will cause the substitution to be
-global over the \sphinxstyleemphasis{string}, instead of replacing only the first
-match in the \sphinxstyleemphasis{string}.
-
-\item[{\sphinxstylestrong{DEFAULT}}] \leavevmode
-The principal name will be used as the local user name. If
-the principal has more than one component or is not in the
-default realm, this rule is not applicable and the conversion
-will fail.
-
-\end{description}
-
-For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-[realms]
- ATHENA.MIT.EDU = \PYGZob{}
- auth\PYGZus{}to\PYGZus{}local = RULE:[2:\PYGZdl{}1](johndoe)s/\PYGZca{}.*\PYGZdl{}/guest/
- auth\PYGZus{}to\PYGZus{}local = RULE:[2:\PYGZdl{}1;\PYGZdl{}2](\PYGZca{}.*;admin\PYGZdl{})s/;admin\PYGZdl{}//
- auth\PYGZus{}to\PYGZus{}local = RULE:[2:\PYGZdl{}2](\PYGZca{}.*;root)s/\PYGZca{}.*\PYGZdl{}/root/
- auth\PYGZus{}to\PYGZus{}local = DEFAULT
- \PYGZcb{}
-\end{sphinxVerbatim}
-
-would result in any principal without \sphinxcode{root} or \sphinxcode{admin} as the
-second component to be translated with the default rule. A
-principal with a second component of \sphinxcode{admin} will become its
-first component. \sphinxcode{root} will be used as the local name for any
-principal with a second component of \sphinxcode{root}. The exception to
-these two rules are any principals \sphinxcode{johndoe/*}, which will
-always get the local name \sphinxcode{guest}.
-
-\item[{\sphinxstylestrong{auth\_to\_local\_names}}] \leavevmode
-This subsection allows you to set explicit mappings from principal
-names to local user names. The tag is the mapping name, and the
-value is the corresponding local user name.
-
-\item[{\sphinxstylestrong{default\_domain}}] \leavevmode
-This tag specifies the domain used to expand hostnames when
-translating Kerberos 4 service principals to Kerberos 5 principals
-(for example, when converting \sphinxcode{rcmd.hostname} to
-\sphinxcode{host/hostname.domain}).
-
-\item[{\sphinxstylestrong{disable\_encrypted\_timestamp}}] \leavevmode
-If this flag is true, the client will not perform encrypted
-timestamp preauthentication if requested by the KDC. Setting this
-flag can help to prevent dictionary attacks by active attackers,
-if the realm’s KDCs support SPAKE preauthentication or if initial
-authentication always uses another mechanism or always uses FAST.
-This flag persists across client referrals during initial
-authentication. This flag does not prevent the KDC from offering
-encrypted timestamp. New in release 1.17.
-
-\item[{\sphinxstylestrong{http\_anchors}}] \leavevmode
-When KDCs and kpasswd servers are accessed through HTTPS proxies, this tag
-can be used to specify the location of the CA certificate which should be
-trusted to issue the certificate for a proxy server. If left unspecified,
-the system-wide default set of CA certificates is used.
-
-The syntax for values is similar to that of values for the
-\sphinxstylestrong{pkinit\_anchors} tag:
-
-\sphinxstylestrong{FILE:} \sphinxstyleemphasis{filename}
-
-\sphinxstyleemphasis{filename} is assumed to be the name of an OpenSSL-style ca-bundle file.
-
-\sphinxstylestrong{DIR:} \sphinxstyleemphasis{dirname}
-
-\sphinxstyleemphasis{dirname} is assumed to be an directory which contains CA certificates.
-All files in the directory will be examined; if they contain certificates
-(in PEM format), they will be used.
-
-\sphinxstylestrong{ENV:} \sphinxstyleemphasis{envvar}
-
-\sphinxstyleemphasis{envvar} specifies the name of an environment variable which has been set
-to a value conforming to one of the previous values. For example,
-\sphinxcode{ENV:X509\_PROXY\_CA}, where environment variable \sphinxcode{X509\_PROXY\_CA} has
-been set to \sphinxcode{FILE:/tmp/my\_proxy.pem}.
-
-\item[{\sphinxstylestrong{kdc}}] \leavevmode
-The name or address of a host running a KDC for that realm. An
-optional port number, separated from the hostname by a colon, may
-be included. If the name or address contains colons (for example,
-if it is an IPv6 address), enclose it in square brackets to
-distinguish the colon from a port separator. For your computer to
-be able to communicate with the KDC for each realm, this tag must
-be given a value in each realm subsection in the configuration
-file, or there must be DNS SRV records specifying the KDCs.
-
-\item[{\sphinxstylestrong{kpasswd\_server}}] \leavevmode
-Points to the server where all the password changes are performed.
-If there is no such entry, DNS will be queried (unless forbidden
-by \sphinxstylestrong{dns\_lookup\_kdc}). Finally, port 464 on the \sphinxstylestrong{admin\_server}
-host will be tried.
-
-\item[{\sphinxstylestrong{master\_kdc}}] \leavevmode
-The name for \sphinxstylestrong{primary\_kdc} prior to release 1.19. Its value is
-used as a fallback if \sphinxstylestrong{primary\_kdc} is not specified.
-
-\item[{\sphinxstylestrong{primary\_kdc}}] \leavevmode
-Identifies the primary KDC(s). Currently, this tag is used in only
-one case: If an attempt to get credentials fails because of an
-invalid password, the client software will attempt to contact the
-primary KDC, in case the user’s password has just been changed, and
-the updated database has not been propagated to the replica
-servers yet. New in release 1.19.
-
-\item[{\sphinxstylestrong{v4\_instance\_convert}}] \leavevmode
-This subsection allows the administrator to configure exceptions
-to the \sphinxstylestrong{default\_domain} mapping rule. It contains V4 instances
-(the tag name) which should be translated to some specific
-hostname (the tag value) as the second component in a Kerberos V5
-principal name.
-
-\item[{\sphinxstylestrong{v4\_realm}}] \leavevmode
-This relation is used by the krb524 library routines when
-converting a V5 principal name to a V4 principal name. It is used
-when the V4 realm name and the V5 realm name are not the same, but
-still share the same principal names and passwords. The tag value
-is the Kerberos V4 realm name.
-
-\end{description}
-
-
-\paragraph{{[}domain\_realm{]}}
-\label{\detokenize{admin/conf_files/krb5_conf:id3}}\label{\detokenize{admin/conf_files/krb5_conf:domain-realm}}
-The {[}domain\_realm{]} section provides a translation from hostnames to
-Kerberos realms. Each tag is a domain name, providing the mapping for
-that domain and all subdomains. If the tag begins with a period
-(\sphinxcode{.}) then it applies only to subdomains. The Kerberos realm may be
-identified either in the {\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{realms}}} section or using DNS SRV records.
-Tag names should be in lower case. For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{domain\PYGZus{}realm}\PYG{p}{]}
- \PYG{n}{crash}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{o}{=} \PYG{n}{TEST}\PYG{o}{.}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
- \PYG{o}{.}\PYG{n}{dev}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{o}{=} \PYG{n}{TEST}\PYG{o}{.}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
- \PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{o}{=} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\end{sphinxVerbatim}
-
-maps the host with the name \sphinxcode{crash.mit.edu} into the
-\sphinxcode{TEST.ATHENA.MIT.EDU} realm. The second entry maps all hosts under the
-domain \sphinxcode{dev.mit.edu} into the \sphinxcode{TEST.ATHENA.MIT.EDU} realm, but not
-the host with the name \sphinxcode{dev.mit.edu}. That host is matched
-by the third entry, which maps the host \sphinxcode{mit.edu} and all hosts
-under the domain \sphinxcode{mit.edu} that do not match a preceding rule
-into the realm \sphinxcode{ATHENA.MIT.EDU}.
-
-If no translation entry applies to a hostname used for a service
-principal for a service ticket request, the library will try to get a
-referral to the appropriate realm from the client realm’s KDC. If
-that does not succeed, the host’s realm is considered to be the
-hostname’s domain portion converted to uppercase, unless the
-\sphinxstylestrong{realm\_try\_domains} setting in {[}libdefaults{]} causes a different
-parent domain to be used.
-
-
-\paragraph{{[}capaths{]}}
-\label{\detokenize{admin/conf_files/krb5_conf:id4}}\label{\detokenize{admin/conf_files/krb5_conf:capaths}}
-In order to perform direct (non-hierarchical) cross-realm
-authentication, configuration is needed to determine the
-authentication paths between realms.
-
-A client will use this section to find the authentication path between
-its realm and the realm of the server. The server will use this
-section to verify the authentication path used by the client, by
-checking the transited field of the received ticket.
-
-There is a tag for each participating client realm, and each tag has
-subtags for each of the server realms. The value of the subtags is an
-intermediate realm which may participate in the cross-realm
-authentication. The subtags may be repeated if there is more then one
-intermediate realm. A value of “.” means that the two realms share
-keys directly, and no intermediate realms should be allowed to
-participate.
-
-Only those entries which will be needed on the client or the server
-need to be present. A client needs a tag for its local realm with
-subtags for all the realms of servers it will need to authenticate to.
-A server needs a tag for each realm of the clients it will serve, with
-a subtag of the server realm.
-
-For example, \sphinxcode{ANL.GOV}, \sphinxcode{PNL.GOV}, and \sphinxcode{NERSC.GOV} all wish to
-use the \sphinxcode{ES.NET} realm as an intermediate realm. ANL has a sub
-realm of \sphinxcode{TEST.ANL.GOV} which will authenticate with \sphinxcode{NERSC.GOV}
-but not \sphinxcode{PNL.GOV}. The {[}capaths{]} section for \sphinxcode{ANL.GOV} systems
-would look like this:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{capaths}\PYG{p}{]}
- \PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{TEST}\PYG{o}{.}\PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{o}{.}
- \PYG{n}{PNL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET}
- \PYG{n}{NERSC}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET}
- \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET} \PYG{o}{=} \PYG{o}{.}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{TEST}\PYG{o}{.}\PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{o}{.}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{PNL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{NERSC}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{o}{.}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-The {[}capaths{]} section of the configuration file used on \sphinxcode{NERSC.GOV}
-systems would look like this:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{capaths}\PYG{p}{]}
- \PYG{n}{NERSC}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET}
- \PYG{n}{TEST}\PYG{o}{.}\PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET}
- \PYG{n}{TEST}\PYG{o}{.}\PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV}
- \PYG{n}{PNL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET}
- \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET} \PYG{o}{=} \PYG{o}{.}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{NERSC}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{PNL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{NERSC}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{NERSC}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{o}{.}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{TEST}\PYG{o}{.}\PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{NERSC}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ANL}\PYG{o}{.}\PYG{n}{GOV}
- \PYG{n}{NERSC}\PYG{o}{.}\PYG{n}{GOV} \PYG{o}{=} \PYG{n}{ES}\PYG{o}{.}\PYG{n}{NET}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-When a subtag is used more than once within a tag, clients will use
-the order of values to determine the path. The order of values is not
-important to servers.
-
-
-\paragraph{{[}appdefaults{]}}
-\label{\detokenize{admin/conf_files/krb5_conf:id5}}\label{\detokenize{admin/conf_files/krb5_conf:appdefaults}}
-Each tag in the {[}appdefaults{]} section names a Kerberos V5 application
-or an option that is used by some Kerberos V5 application{[}s{]}. The
-value of the tag defines the default behaviors for that application.
-
-For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{appdefaults}\PYG{p}{]}
- \PYG{n}{telnet} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{option1} \PYG{o}{=} \PYG{n}{false}
- \PYG{p}{\PYGZcb{}}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{telnet} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{option1} \PYG{o}{=} \PYG{n}{true}
- \PYG{n}{option2} \PYG{o}{=} \PYG{n}{true}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{option2} \PYG{o}{=} \PYG{n}{false}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{option2} \PYG{o}{=} \PYG{n}{true}
-\end{sphinxVerbatim}
-
-The above four ways of specifying the value of an option are shown in
-order of decreasing precedence. In this example, if telnet is running
-in the realm EXAMPLE.COM, it should, by default, have option1 and
-option2 set to true. However, a telnet program in the realm
-\sphinxcode{ATHENA.MIT.EDU} should have \sphinxcode{option1} set to false and
-\sphinxcode{option2} set to true. Any other programs in ATHENA.MIT.EDU should
-have \sphinxcode{option2} set to false by default. Any programs running in
-other realms should have \sphinxcode{option2} set to true.
-
-The list of specifiable options for each application may be found in
-that application’s man pages. The application defaults specified here
-are overridden by those specified in the {\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{realms}}} section.
-
-
-\paragraph{{[}plugins{]}}
-\label{\detokenize{admin/conf_files/krb5_conf:id6}}\label{\detokenize{admin/conf_files/krb5_conf:plugins}}\begin{itemize}
-\item {}
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:pwqual}]{\sphinxcrossref{pwqual}}} interface
-
-\item {}
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:kadm5-hook}]{\sphinxcrossref{kadm5\_hook}}} interface
-
-\item {}
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:clpreauth}]{\sphinxcrossref{clpreauth}}} and {\hyperref[\detokenize{admin/conf_files/krb5_conf:kdcpreauth}]{\sphinxcrossref{kdcpreauth}}} interfaces
-
-\end{itemize}
-
-Tags in the {[}plugins{]} section can be used to register dynamic plugin
-modules and to turn modules on and off. Not every krb5 pluggable
-interface uses the {[}plugins{]} section; the ones that do are documented
-here.
-
-New in release 1.9.
-
-Each pluggable interface corresponds to a subsection of {[}plugins{]}.
-All subsections support the same tags:
-\begin{description}
-\item[{\sphinxstylestrong{disable}}] \leavevmode
-This tag may have multiple values. If there are values for this
-tag, then the named modules will be disabled for the pluggable
-interface.
-
-\item[{\sphinxstylestrong{enable\_only}}] \leavevmode
-This tag may have multiple values. If there are values for this
-tag, then only the named modules will be enabled for the pluggable
-interface.
-
-\item[{\sphinxstylestrong{module}}] \leavevmode
-This tag may have multiple values. Each value is a string of the
-form \sphinxcode{modulename:pathname}, which causes the shared object
-located at \sphinxstyleemphasis{pathname} to be registered as a dynamic module named
-\sphinxstyleemphasis{modulename} for the pluggable interface. If \sphinxstyleemphasis{pathname} is not an
-absolute path, it will be treated as relative to the
-\sphinxstylestrong{plugin\_base\_dir} value from {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}}.
-
-\end{description}
-
-For pluggable interfaces where module order matters, modules
-registered with a \sphinxstylestrong{module} tag normally come first, in the order
-they are registered, followed by built-in modules in the order they
-are documented below. If \sphinxstylestrong{enable\_only} tags are used, then the
-order of those tags overrides the normal module order.
-
-The following subsections are currently supported within the {[}plugins{]}
-section:
-
-
-\subparagraph{ccselect interface}
-\label{\detokenize{admin/conf_files/krb5_conf:ccselect}}\label{\detokenize{admin/conf_files/krb5_conf:ccselect-interface}}
-The ccselect subsection controls modules for credential cache
-selection within a cache collection. In addition to any registered
-dynamic modules, the following built-in modules exist (and may be
-disabled with the disable tag):
-\begin{description}
-\item[{\sphinxstylestrong{k5identity}}] \leavevmode
-Uses a .k5identity file in the user’s home directory to select a
-client principal
-
-\item[{\sphinxstylestrong{realm}}] \leavevmode
-Uses the service realm to guess an appropriate cache from the
-collection
-
-\item[{\sphinxstylestrong{hostname}}] \leavevmode
-If the service principal is host-based, uses the service hostname
-to guess an appropriate cache from the collection
-
-\end{description}
-
-
-\subparagraph{pwqual interface}
-\label{\detokenize{admin/conf_files/krb5_conf:pwqual-interface}}\label{\detokenize{admin/conf_files/krb5_conf:pwqual}}
-The pwqual subsection controls modules for the password quality
-interface, which is used to reject weak passwords when passwords are
-changed. The following built-in modules exist for this interface:
-\begin{description}
-\item[{\sphinxstylestrong{dict}}] \leavevmode
-Checks against the realm dictionary file
-
-\item[{\sphinxstylestrong{empty}}] \leavevmode
-Rejects empty passwords
-
-\item[{\sphinxstylestrong{hesiod}}] \leavevmode
-Checks against user information stored in Hesiod (only if Kerberos
-was built with Hesiod support)
-
-\item[{\sphinxstylestrong{princ}}] \leavevmode
-Checks against components of the principal name
-
-\end{description}
-
-
-\subparagraph{kadm5\_hook interface}
-\label{\detokenize{admin/conf_files/krb5_conf:kadm5-hook-interface}}\label{\detokenize{admin/conf_files/krb5_conf:kadm5-hook}}
-The kadm5\_hook interface provides plugins with information on
-principal creation, modification, password changes and deletion. This
-interface can be used to write a plugin to synchronize MIT Kerberos
-with another database such as Active Directory. No plugins are built
-in for this interface.
-
-
-\subparagraph{kadm5\_auth interface}
-\label{\detokenize{admin/conf_files/krb5_conf:kadm5-auth-interface}}\label{\detokenize{admin/conf_files/krb5_conf:kadm5-auth}}
-The kadm5\_auth section (introduced in release 1.16) controls modules
-for the kadmin authorization interface, which determines whether a
-client principal is allowed to perform a kadmin operation. The
-following built-in modules exist for this interface:
-\begin{description}
-\item[{\sphinxstylestrong{acl}}] \leavevmode
-This module reads the {\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}} file, and authorizes
-operations which are allowed according to the rules in the file.
-
-\item[{\sphinxstylestrong{self}}] \leavevmode
-This module authorizes self-service operations including password
-changes, creation of new random keys, fetching the client’s
-principal record or string attributes, and fetching the policy
-record associated with the client principal.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/conf_files/krb5_conf:clpreauth}}
-
-\subparagraph{clpreauth and kdcpreauth interfaces}
-\label{\detokenize{admin/conf_files/krb5_conf:clpreauth-and-kdcpreauth-interfaces}}\label{\detokenize{admin/conf_files/krb5_conf:clpreauth}}\label{\detokenize{admin/conf_files/krb5_conf:kdcpreauth}}
-The clpreauth and kdcpreauth interfaces allow plugin modules to
-provide client and KDC preauthentication mechanisms. The following
-built-in modules exist for these interfaces:
-\begin{description}
-\item[{\sphinxstylestrong{pkinit}}] \leavevmode
-This module implements the PKINIT preauthentication mechanism.
-
-\item[{\sphinxstylestrong{encrypted\_challenge}}] \leavevmode
-This module implements the encrypted challenge FAST factor.
-
-\item[{\sphinxstylestrong{encrypted\_timestamp}}] \leavevmode
-This module implements the encrypted timestamp mechanism.
-
-\end{description}
-
-
-\subparagraph{hostrealm interface}
-\label{\detokenize{admin/conf_files/krb5_conf:hostrealm-interface}}\label{\detokenize{admin/conf_files/krb5_conf:hostrealm}}
-The hostrealm section (introduced in release 1.12) controls modules
-for the host-to-realm interface, which affects the local mapping of
-hostnames to realm names and the choice of default realm. The following
-built-in modules exist for this interface:
-\begin{description}
-\item[{\sphinxstylestrong{profile}}] \leavevmode
-This module consults the {[}domain\_realm{]} section of the profile for
-authoritative host-to-realm mappings, and the \sphinxstylestrong{default\_realm}
-variable for the default realm.
-
-\item[{\sphinxstylestrong{dns}}] \leavevmode
-This module looks for DNS records for fallback host-to-realm
-mappings and the default realm. It only operates if the
-\sphinxstylestrong{dns\_lookup\_realm} variable is set to true.
-
-\item[{\sphinxstylestrong{domain}}] \leavevmode
-This module applies heuristics for fallback host-to-realm
-mappings. It implements the \sphinxstylestrong{realm\_try\_domains} variable, and
-uses the uppercased parent domain of the hostname if that does not
-produce a result.
-
-\end{description}
-
-
-\subparagraph{localauth interface}
-\label{\detokenize{admin/conf_files/krb5_conf:localauth-interface}}\label{\detokenize{admin/conf_files/krb5_conf:localauth}}
-The localauth section (introduced in release 1.12) controls modules
-for the local authorization interface, which affects the relationship
-between Kerberos principals and local system accounts. The following
-built-in modules exist for this interface:
-\begin{description}
-\item[{\sphinxstylestrong{default}}] \leavevmode
-This module implements the \sphinxstylestrong{DEFAULT} type for \sphinxstylestrong{auth\_to\_local}
-values.
-
-\item[{\sphinxstylestrong{rule}}] \leavevmode
-This module implements the \sphinxstylestrong{RULE} type for \sphinxstylestrong{auth\_to\_local}
-values.
-
-\item[{\sphinxstylestrong{names}}] \leavevmode
-This module looks for an \sphinxstylestrong{auth\_to\_local\_names} mapping for the
-principal name.
-
-\item[{\sphinxstylestrong{auth\_to\_local}}] \leavevmode
-This module processes \sphinxstylestrong{auth\_to\_local} values in the default
-realm’s section, and applies the default method if no
-\sphinxstylestrong{auth\_to\_local} values exist.
-
-\item[{\sphinxstylestrong{k5login}}] \leavevmode
-This module authorizes a principal to a local account according to
-the account’s \DUrole{xref,std,std-ref}{.k5login(5)} file.
-
-\item[{\sphinxstylestrong{an2ln}}] \leavevmode
-This module authorizes a principal to a local account if the
-principal name maps to the local account name.
-
-\end{description}
-
-
-\subparagraph{certauth interface}
-\label{\detokenize{admin/conf_files/krb5_conf:certauth}}\label{\detokenize{admin/conf_files/krb5_conf:certauth-interface}}
-The certauth section (introduced in release 1.16) controls modules for
-the certificate authorization interface, which determines whether a
-certificate is allowed to preauthenticate a user via PKINIT. The
-following built-in modules exist for this interface:
-\begin{description}
-\item[{\sphinxstylestrong{pkinit\_san}}] \leavevmode
-This module authorizes the certificate if it contains a PKINIT
-Subject Alternative Name for the requested client principal, or a
-Microsoft UPN SAN matching the principal if \sphinxstylestrong{pkinit\_allow\_upn}
-is set to true for the realm.
-
-\item[{\sphinxstylestrong{pkinit\_eku}}] \leavevmode
-This module rejects the certificate if it does not contain an
-Extended Key Usage attribute consistent with the
-\sphinxstylestrong{pkinit\_eku\_checking} value for the realm.
-
-\item[{\sphinxstylestrong{dbmatch}}] \leavevmode
-This module authorizes or rejects the certificate according to
-whether it matches the \sphinxstylestrong{pkinit\_cert\_match} string attribute on
-the client principal, if that attribute is present.
-
-\end{description}
-
-
-\subsubsection{PKINIT options}
-\label{\detokenize{admin/conf_files/krb5_conf:pkinit-options}}
-\begin{sphinxadmonition}{note}{Note:}
-The following are PKINIT-specific options. These values may
-be specified in {[}libdefaults{]} as global defaults, or within
-a realm-specific subsection of {[}libdefaults{]}, or may be
-specified as realm-specific values in the {[}realms{]} section.
-A realm-specific value overrides, not adds to, a generic
-{[}libdefaults{]} specification. The search order is:
-\end{sphinxadmonition}
-\begin{enumerate}
-\item {}
-realm-specific subsection of {[}libdefaults{]}:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{libdefaults}\PYG{p}{]}
- \PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{pkinit\PYGZus{}anchors} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}\PYG{o}{.}\PYG{n}{crt}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-\item {}
-realm-specific value in the {[}realms{]} section:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{OTHERREALM}\PYG{o}{.}\PYG{n}{ORG} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{pkinit\PYGZus{}anchors} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{otherrealm}\PYG{o}{.}\PYG{n}{org}\PYG{o}{.}\PYG{n}{crt}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-\item {}
-generic value in the {[}libdefaults{]} section:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{libdefaults}\PYG{p}{]}
- \PYG{n}{pkinit\PYGZus{}anchors} \PYG{o}{=} \PYG{n}{DIR}\PYG{p}{:}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{generic\PYGZus{}trusted\PYGZus{}cas}\PYG{o}{/}
-\end{sphinxVerbatim}
-
-\end{enumerate}
-
-
-\paragraph{Specifying PKINIT identity information}
-\label{\detokenize{admin/conf_files/krb5_conf:specifying-pkinit-identity-information}}\label{\detokenize{admin/conf_files/krb5_conf:pkinit-identity}}
-The syntax for specifying Public Key identity, trust, and revocation
-information for PKINIT is as follows:
-\begin{description}
-\item[{\sphinxstylestrong{FILE:}\sphinxstyleemphasis{filename}{[}\sphinxstylestrong{,}\sphinxstyleemphasis{keyfilename}{]}}] \leavevmode
-This option has context-specific behavior.
-
-In \sphinxstylestrong{pkinit\_identity} or \sphinxstylestrong{pkinit\_identities}, \sphinxstyleemphasis{filename}
-specifies the name of a PEM-format file containing the user’s
-certificate. If \sphinxstyleemphasis{keyfilename} is not specified, the user’s
-private key is expected to be in \sphinxstyleemphasis{filename} as well. Otherwise,
-\sphinxstyleemphasis{keyfilename} is the name of the file containing the private key.
-
-In \sphinxstylestrong{pkinit\_anchors} or \sphinxstylestrong{pkinit\_pool}, \sphinxstyleemphasis{filename} is assumed to
-be the name of an OpenSSL-style ca-bundle file.
-
-\item[{\sphinxstylestrong{DIR:}\sphinxstyleemphasis{dirname}}] \leavevmode
-This option has context-specific behavior.
-
-In \sphinxstylestrong{pkinit\_identity} or \sphinxstylestrong{pkinit\_identities}, \sphinxstyleemphasis{dirname}
-specifies a directory with files named \sphinxcode{*.crt} and \sphinxcode{*.key}
-where the first part of the file name is the same for matching
-pairs of certificate and private key files. When a file with a
-name ending with \sphinxcode{.crt} is found, a matching file ending with
-\sphinxcode{.key} is assumed to contain the private key. If no such file
-is found, then the certificate in the \sphinxcode{.crt} is not used.
-
-In \sphinxstylestrong{pkinit\_anchors} or \sphinxstylestrong{pkinit\_pool}, \sphinxstyleemphasis{dirname} is assumed to
-be an OpenSSL-style hashed CA directory where each CA cert is
-stored in a file named \sphinxcode{hash-of-ca-cert.\#}. This infrastructure
-is encouraged, but all files in the directory will be examined and
-if they contain certificates (in PEM format), they will be used.
-
-In \sphinxstylestrong{pkinit\_revoke}, \sphinxstyleemphasis{dirname} is assumed to be an OpenSSL-style
-hashed CA directory where each revocation list is stored in a file
-named \sphinxcode{hash-of-ca-cert.r\#}. This infrastructure is encouraged,
-but all files in the directory will be examined and if they
-contain a revocation list (in PEM format), they will be used.
-
-\item[{\sphinxstylestrong{PKCS12:}\sphinxstyleemphasis{filename}}] \leavevmode
-\sphinxstyleemphasis{filename} is the name of a PKCS \#12 format file, containing the
-user’s certificate and private key.
-
-\item[{\sphinxstylestrong{PKCS11:}{[}\sphinxstylestrong{module\_name=}{]}\sphinxstyleemphasis{modname}{[}\sphinxstylestrong{:slotid=}\sphinxstyleemphasis{slot-id}{]}{[}\sphinxstylestrong{:token=}\sphinxstyleemphasis{token-label}{]}{[}\sphinxstylestrong{:certid=}\sphinxstyleemphasis{cert-id}{]}{[}\sphinxstylestrong{:certlabel=}\sphinxstyleemphasis{cert-label}{]}}] \leavevmode
-All keyword/values are optional. \sphinxstyleemphasis{modname} specifies the location
-of a library implementing PKCS \#11. If a value is encountered
-with no keyword, it is assumed to be the \sphinxstyleemphasis{modname}. If no
-module-name is specified, the default is \sphinxcode{opensc-pkcs11.so}.
-\sphinxcode{slotid=} and/or \sphinxcode{token=} may be specified to force the use of
-a particular smard card reader or token if there is more than one
-available. \sphinxcode{certid=} and/or \sphinxcode{certlabel=} may be specified to
-force the selection of a particular certificate on the device.
-See the \sphinxstylestrong{pkinit\_cert\_match} configuration option for more ways
-to select a particular certificate to use for PKINIT.
-
-\item[{\sphinxstylestrong{ENV:}\sphinxstyleemphasis{envvar}}] \leavevmode
-\sphinxstyleemphasis{envvar} specifies the name of an environment variable which has
-been set to a value conforming to one of the previous values. For
-example, \sphinxcode{ENV:X509\_PROXY}, where environment variable
-\sphinxcode{X509\_PROXY} has been set to \sphinxcode{FILE:/tmp/my\_proxy.pem}.
-
-\end{description}
-
-
-\paragraph{PKINIT krb5.conf options}
-\label{\detokenize{admin/conf_files/krb5_conf:pkinit-krb5-conf-options}}\begin{description}
-\item[{\sphinxstylestrong{pkinit\_anchors}}] \leavevmode
-Specifies the location of trusted anchor (root) certificates which
-the client trusts to sign KDC certificates. This option may be
-specified multiple times. These values from the config file are
-not used if the user specifies X509\_anchors on the command line.
-
-\item[{\sphinxstylestrong{pkinit\_cert\_match}}] \leavevmode
-Specifies matching rules that the client certificate must match
-before it is used to attempt PKINIT authentication. If a user has
-multiple certificates available (on a smart card, or via other
-media), there must be exactly one certificate chosen before
-attempting PKINIT authentication. This option may be specified
-multiple times. All the available certificates are checked
-against each rule in order until there is a match of exactly one
-certificate.
-
-The Subject and Issuer comparison strings are the \index{RFC!RFC 2253}\sphinxhref{https://tools.ietf.org/html/rfc2253.html}{\sphinxstylestrong{RFC 2253}}
-string representations from the certificate Subject DN and Issuer
-DN values.
-
-The syntax of the matching rules is:
-\begin{quote}
-
-{[}\sphinxstyleemphasis{relation-operator}{]}\sphinxstyleemphasis{component-rule} …
-\end{quote}
-
-where:
-\begin{description}
-\item[{\sphinxstyleemphasis{relation-operator}}] \leavevmode
-can be either \sphinxcode{\&\&}, meaning all component rules must match,
-or \sphinxcode{\textbar{}\textbar{}}, meaning only one component rule must match. The
-default is \sphinxcode{\&\&}.
-
-\item[{\sphinxstyleemphasis{component-rule}}] \leavevmode
-can be one of the following. Note that there is no
-punctuation or whitespace between component rules.
-\begin{quote}
-
-\begin{DUlineblock}{0em}
-\item[] \sphinxstylestrong{\textless{}SUBJECT\textgreater{}}\sphinxstyleemphasis{regular-expression}
-\item[] \sphinxstylestrong{\textless{}ISSUER\textgreater{}}\sphinxstyleemphasis{regular-expression}
-\item[] \sphinxstylestrong{\textless{}SAN\textgreater{}}\sphinxstyleemphasis{regular-expression}
-\item[] \sphinxstylestrong{\textless{}EKU\textgreater{}}\sphinxstyleemphasis{extended-key-usage-list}
-\item[] \sphinxstylestrong{\textless{}KU\textgreater{}}\sphinxstyleemphasis{key-usage-list}
-\end{DUlineblock}
-\end{quote}
-
-\sphinxstyleemphasis{extended-key-usage-list} is a comma-separated list of
-required Extended Key Usage values. All values in the list
-must be present in the certificate. Extended Key Usage values
-can be:
-\begin{itemize}
-\item {}
-pkinit
-
-\item {}
-msScLogin
-
-\item {}
-clientAuth
-
-\item {}
-emailProtection
-
-\end{itemize}
-
-\sphinxstyleemphasis{key-usage-list} is a comma-separated list of required Key
-Usage values. All values in the list must be present in the
-certificate. Key Usage values can be:
-\begin{itemize}
-\item {}
-digitalSignature
-
-\item {}
-keyEncipherment
-
-\end{itemize}
-
-\end{description}
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{pkinit\PYGZus{}cert\PYGZus{}match} \PYG{o}{=} \PYG{o}{\textbar{}}\PYG{o}{\textbar{}}\PYG{o}{\PYGZlt{}}\PYG{n}{SUBJECT}\PYG{o}{\PYGZgt{}}\PYG{o}{.}\PYG{o}{*}\PYG{n}{DoE}\PYG{o}{.}\PYG{o}{*}\PYG{o}{\PYGZlt{}}\PYG{n}{SAN}\PYG{o}{\PYGZgt{}}\PYG{o}{.}\PYG{o}{*}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{pkinit\PYGZus{}cert\PYGZus{}match} \PYG{o}{=} \PYG{o}{\PYGZam{}}\PYG{o}{\PYGZam{}}\PYG{o}{\PYGZlt{}}\PYG{n}{EKU}\PYG{o}{\PYGZgt{}}\PYG{n}{msScLogin}\PYG{p}{,}\PYG{n}{clientAuth}\PYG{o}{\PYGZlt{}}\PYG{n}{ISSUER}\PYG{o}{\PYGZgt{}}\PYG{o}{.}\PYG{o}{*}\PYG{n}{DoE}\PYG{o}{.}\PYG{o}{*}
-\PYG{n}{pkinit\PYGZus{}cert\PYGZus{}match} \PYG{o}{=} \PYG{o}{\PYGZlt{}}\PYG{n}{EKU}\PYG{o}{\PYGZgt{}}\PYG{n}{msScLogin}\PYG{p}{,}\PYG{n}{clientAuth}\PYG{o}{\PYGZlt{}}\PYG{n}{KU}\PYG{o}{\PYGZgt{}}\PYG{n}{digitalSignature}
-\end{sphinxVerbatim}
-
-\item[{\sphinxstylestrong{pkinit\_eku\_checking}}] \leavevmode
-This option specifies what Extended Key Usage value the KDC
-certificate presented to the client must contain. (Note that if
-the KDC certificate has the pkinit SubjectAlternativeName encoded
-as the Kerberos TGS name, EKU checking is not necessary since the
-issuing CA has certified this as a KDC certificate.) The values
-recognized in the krb5.conf file are:
-\begin{description}
-\item[{\sphinxstylestrong{kpKDC}}] \leavevmode
-This is the default value and specifies that the KDC must have
-the id-pkinit-KPKdc EKU as defined in \index{RFC!RFC 4556}\sphinxhref{https://tools.ietf.org/html/rfc4556.html}{\sphinxstylestrong{RFC 4556}}.
-
-\item[{\sphinxstylestrong{kpServerAuth}}] \leavevmode
-If \sphinxstylestrong{kpServerAuth} is specified, a KDC certificate with the
-id-kp-serverAuth EKU will be accepted. This key usage value
-is used in most commercially issued server certificates.
-
-\item[{\sphinxstylestrong{none}}] \leavevmode
-If \sphinxstylestrong{none} is specified, then the KDC certificate will not be
-checked to verify it has an acceptable EKU. The use of this
-option is not recommended.
-
-\end{description}
-
-\item[{\sphinxstylestrong{pkinit\_dh\_min\_bits}}] \leavevmode
-Specifies the size of the Diffie-Hellman key the client will
-attempt to use. The acceptable values are 1024, 2048, and 4096.
-The default is 2048.
-
-\item[{\sphinxstylestrong{pkinit\_identities}}] \leavevmode
-Specifies the location(s) to be used to find the user’s X.509
-identity information. If this option is specified multiple times,
-each value is attempted in order until certificates are found.
-Note that these values are not used if the user specifies
-\sphinxstylestrong{X509\_user\_identity} on the command line.
-
-\item[{\sphinxstylestrong{pkinit\_kdc\_hostname}}] \leavevmode
-The presence of this option indicates that the client is willing
-to accept a KDC certificate with a dNSName SAN (Subject
-Alternative Name) rather than requiring the id-pkinit-san as
-defined in \index{RFC!RFC 4556}\sphinxhref{https://tools.ietf.org/html/rfc4556.html}{\sphinxstylestrong{RFC 4556}}. This option may be specified multiple
-times. Its value should contain the acceptable hostname for the
-KDC (as contained in its certificate).
-
-\item[{\sphinxstylestrong{pkinit\_pool}}] \leavevmode
-Specifies the location of intermediate certificates which may be
-used by the client to complete the trust chain between a KDC
-certificate and a trusted anchor. This option may be specified
-multiple times.
-
-\item[{\sphinxstylestrong{pkinit\_require\_crl\_checking}}] \leavevmode
-The default certificate verification process will always check the
-available revocation information to see if a certificate has been
-revoked. If a match is found for the certificate in a CRL,
-verification fails. If the certificate being verified is not
-listed in a CRL, or there is no CRL present for its issuing CA,
-and \sphinxstylestrong{pkinit\_require\_crl\_checking} is false, then verification
-succeeds.
-
-However, if \sphinxstylestrong{pkinit\_require\_crl\_checking} is true and there is
-no CRL information available for the issuing CA, then verification
-fails.
-
-\sphinxstylestrong{pkinit\_require\_crl\_checking} should be set to true if the
-policy is such that up-to-date CRLs must be present for every CA.
-
-\item[{\sphinxstylestrong{pkinit\_revoke}}] \leavevmode
-Specifies the location of Certificate Revocation List (CRL)
-information to be used by the client when verifying the validity
-of the KDC certificate presented. This option may be specified
-multiple times.
-
-\end{description}
-
-
-\subsubsection{Parameter expansion}
-\label{\detokenize{admin/conf_files/krb5_conf:id7}}\label{\detokenize{admin/conf_files/krb5_conf:parameter-expansion}}
-Starting with release 1.11, several variables, such as
-\sphinxstylestrong{default\_keytab\_name}, allow parameters to be expanded.
-Valid parameters are:
-\begin{quote}
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\%\{TEMP\}
-&
-Temporary directory
-\\
-\hline
-\%\{uid\}
-&
-Unix real UID or Windows SID
-\\
-\hline
-\%\{euid\}
-&
-Unix effective user ID or Windows SID
-\\
-\hline
-\%\{USERID\}
-&
-Same as \%\{uid\}
-\\
-\hline
-\%\{null\}
-&
-Empty string
-\\
-\hline
-\%\{LIBDIR\}
-&
-Installation library directory
-\\
-\hline
-\%\{BINDIR\}
-&
-Installation binary directory
-\\
-\hline
-\%\{SBINDIR\}
-&
-Installation admin binary directory
-\\
-\hline
-\%\{username\}
-&
-(Unix) Username of effective user ID
-\\
-\hline
-\%\{APPDATA\}
-&
-(Windows) Roaming application data for current user
-\\
-\hline
-\%\{COMMON\_APPDATA\}
-&
-(Windows) Application data for all users
-\\
-\hline
-\%\{LOCAL\_APPDATA\}
-&
-(Windows) Local application data for current user
-\\
-\hline
-\%\{SYSTEM\}
-&
-(Windows) Windows system folder
-\\
-\hline
-\%\{WINDOWS\}
-&
-(Windows) Windows folder
-\\
-\hline
-\%\{USERCONFIG\}
-&
-(Windows) Per-user MIT krb5 config file directory
-\\
-\hline
-\%\{COMMONCONFIG\}
-&
-(Windows) Common MIT krb5 config file directory
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-\end{quote}
-
-
-\subsubsection{Sample krb5.conf file}
-\label{\detokenize{admin/conf_files/krb5_conf:sample-krb5-conf-file}}
-Here is an example of a generic krb5.conf file:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{libdefaults}\PYG{p}{]}
- \PYG{n}{default\PYGZus{}realm} \PYG{o}{=} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
- \PYG{n}{dns\PYGZus{}lookup\PYGZus{}kdc} \PYG{o}{=} \PYG{n}{true}
- \PYG{n}{dns\PYGZus{}lookup\PYGZus{}realm} \PYG{o}{=} \PYG{n}{false}
-
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{2.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{n}{admin\PYGZus{}server} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{n}{primary\PYGZus{}kdc} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{1.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}
- \PYG{n}{admin\PYGZus{}server} \PYG{o}{=} \PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}
- \PYG{p}{\PYGZcb{}}
-
-\PYG{p}{[}\PYG{n}{domain\PYGZus{}realm}\PYG{p}{]}
- \PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{o}{=} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-
-\PYG{p}{[}\PYG{n}{capaths}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM} \PYG{o}{=} \PYG{o}{.}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{o}{.}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-
-\subsubsection{FILES}
-\label{\detokenize{admin/conf_files/krb5_conf:files}}
-\sphinxcode{/etc/krb5.conf}
-
-
-\subsubsection{SEE ALSO}
-\label{\detokenize{admin/conf_files/krb5_conf:see-also}}
-syslog(3)
-
-
-\subsection{kdc.conf}
-\label{\detokenize{admin/conf_files/kdc_conf:kdc-conf}}\label{\detokenize{admin/conf_files/kdc_conf::doc}}\label{\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}}
-The kdc.conf file supplements {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} for programs which
-are typically only used on a KDC, such as the {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} and
-{\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} daemons and the {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} program.
-Relations documented here may also be specified in krb5.conf; for the
-KDC programs mentioned, krb5.conf and kdc.conf will be merged into a
-single configuration profile.
-
-Normally, the kdc.conf file is found in the KDC state directory,
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}. You can override the default location by setting the
-environment variable \sphinxstylestrong{KRB5\_KDC\_PROFILE}.
-
-Please note that you need to restart the KDC daemon for any configuration
-changes to take effect.
-
-
-\subsubsection{Structure}
-\label{\detokenize{admin/conf_files/kdc_conf:structure}}
-The kdc.conf file is set up in the same format as the
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} file.
-
-
-\subsubsection{Sections}
-\label{\detokenize{admin/conf_files/kdc_conf:sections}}
-The kdc.conf file may contain the following sections:
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdcdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}kdcdefaults{]}}}}}
-&
-Default values for KDC behavior
-\\
-\hline
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}}
-&
-Realm-specific database configuration and settings
-\\
-\hline
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:dbdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbdefaults{]}}}}}
-&
-Default database settings
-\\
-\hline
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:dbmodules}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbmodules{]}}}}}
-&
-Per-database settings
-\\
-\hline
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:logging}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}logging{]}}}}}
-&
-Controls how Kerberos daemons perform logging
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\paragraph{{[}kdcdefaults{]}}
-\label{\detokenize{admin/conf_files/kdc_conf:kdcdefaults}}\label{\detokenize{admin/conf_files/kdc_conf:id1}}
-Some relations in the {[}kdcdefaults{]} section specify default values for
-realm variables, to be used if the {[}realms{]} subsection does not
-contain a relation for the tag. See the {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} section for
-the definitions of these relations.
-\begin{itemize}
-\item {}
-\sphinxstylestrong{host\_based\_services}
-
-\item {}
-\sphinxstylestrong{kdc\_listen}
-
-\item {}
-\sphinxstylestrong{kdc\_ports}
-
-\item {}
-\sphinxstylestrong{kdc\_tcp\_listen}
-
-\item {}
-\sphinxstylestrong{kdc\_tcp\_ports}
-
-\item {}
-\sphinxstylestrong{no\_host\_referral}
-
-\item {}
-\sphinxstylestrong{restrict\_anonymous\_to\_tgt}
-
-\end{itemize}
-
-The following {[}kdcdefaults{]} variables have no per-realm equivalent:
-\begin{description}
-\item[{\sphinxstylestrong{kdc\_max\_dgram\_reply\_size}}] \leavevmode
-Specifies the maximum packet size that can be sent over UDP. The
-default value is 4096 bytes.
-
-\item[{\sphinxstylestrong{kdc\_tcp\_listen\_backlog}}] \leavevmode
-(Integer.) Set the size of the listen queue length for the KDC
-daemon. The value may be limited by OS settings. The default
-value is 5.
-
-\item[{\sphinxstylestrong{spake\_preauth\_kdc\_challenge}}] \leavevmode
-(String.) Specifies the group for a SPAKE optimistic challenge.
-See the \sphinxstylestrong{spake\_preauth\_groups} variable in {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}}
-for possible values. The default is not to issue an optimistic
-challenge. (New in release 1.17.)
-
-\end{description}
-
-
-\paragraph{{[}realms{]}}
-\label{\detokenize{admin/conf_files/kdc_conf:realms}}\label{\detokenize{admin/conf_files/kdc_conf:kdc-realms}}
-Each tag in the {[}realms{]} section is the name of a Kerberos realm. The
-value of the tag is a subsection where the relations define KDC
-parameters for that particular realm. The following example shows how
-to define one parameter for the ATHENA.MIT.EDU realm:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{max\PYGZus{}renewable\PYGZus{}life} \PYG{o}{=} \PYG{l+m+mi}{7}\PYG{n}{d} \PYG{l+m+mi}{0}\PYG{n}{h} \PYG{l+m+mi}{0}\PYG{n}{m} \PYG{l+m+mi}{0}\PYG{n}{s}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-The following tags may be specified in a {[}realms{]} subsection:
-\begin{description}
-\item[{\sphinxstylestrong{acl\_file}}] \leavevmode
-(String.) Location of the access control list file that
-{\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} uses to determine which principals are allowed
-which permissions on the Kerberos database. To operate without an
-ACL file, set this relation to the empty string with \sphinxcode{acl\_file =
-""}. The default value is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/kadm5.acl}. For more
-information on Kerberos ACL file see {\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}}.
-
-\item[{\sphinxstylestrong{database\_module}}] \leavevmode
-(String.) This relation indicates the name of the configuration
-section under {\hyperref[\detokenize{admin/conf_files/kdc_conf:dbmodules}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbmodules{]}}}}} for database-specific parameters
-used by the loadable database library. The default value is the
-realm name. If this configuration section does not exist, default
-values will be used for all database parameters.
-
-\item[{\sphinxstylestrong{database\_name}}] \leavevmode
-(String, deprecated.) This relation specifies the location of the
-Kerberos database for this realm, if the DB2 module is being used
-and the {\hyperref[\detokenize{admin/conf_files/kdc_conf:dbmodules}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbmodules{]}}}}} configuration section does not specify a
-database name. The default value is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/principal}.
-
-\item[{\sphinxstylestrong{default\_principal\_expiration}}] \leavevmode
-(\DUrole{xref,std,std-ref}{abstime} string.) Specifies the default expiration date of
-principals created in this realm. The default value is 0, which
-means no expiration date.
-
-\item[{\sphinxstylestrong{default\_principal\_flags}}] \leavevmode
-(Flag string.) Specifies the default attributes of principals
-created in this realm. The format for this string is a
-comma-separated list of flags, with ‘+’ before each flag that
-should be enabled and ‘-‘ before each flag that should be
-disabled. The \sphinxstylestrong{postdateable}, \sphinxstylestrong{forwardable}, \sphinxstylestrong{tgt-based},
-\sphinxstylestrong{renewable}, \sphinxstylestrong{proxiable}, \sphinxstylestrong{dup-skey}, \sphinxstylestrong{allow-tickets}, and
-\sphinxstylestrong{service} flags default to enabled.
-
-There are a number of possible flags:
-\begin{description}
-\item[{\sphinxstylestrong{allow-tickets}}] \leavevmode
-Enabling this flag means that the KDC will issue tickets for
-this principal. Disabling this flag essentially deactivates
-the principal within this realm.
-
-\item[{\sphinxstylestrong{dup-skey}}] \leavevmode
-Enabling this flag allows the KDC to issue user-to-user
-service tickets for this principal.
-
-\item[{\sphinxstylestrong{forwardable}}] \leavevmode
-Enabling this flag allows the principal to obtain forwardable
-tickets.
-
-\item[{\sphinxstylestrong{hwauth}}] \leavevmode
-If this flag is enabled, then the principal is required to
-preauthenticate using a hardware device before receiving any
-tickets.
-
-\item[{\sphinxstylestrong{no-auth-data-required}}] \leavevmode
-Enabling this flag prevents PAC or AD-SIGNEDPATH data from
-being added to service tickets for the principal.
-
-\item[{\sphinxstylestrong{ok-as-delegate}}] \leavevmode
-If this flag is enabled, it hints the client that credentials
-can and should be delegated when authenticating to the
-service.
-
-\item[{\sphinxstylestrong{ok-to-auth-as-delegate}}] \leavevmode
-Enabling this flag allows the principal to use S4USelf tickets.
-
-\item[{\sphinxstylestrong{postdateable}}] \leavevmode
-Enabling this flag allows the principal to obtain postdateable
-tickets.
-
-\item[{\sphinxstylestrong{preauth}}] \leavevmode
-If this flag is enabled on a client principal, then that
-principal is required to preauthenticate to the KDC before
-receiving any tickets. On a service principal, enabling this
-flag means that service tickets for this principal will only
-be issued to clients with a TGT that has the preauthenticated
-bit set.
-
-\item[{\sphinxstylestrong{proxiable}}] \leavevmode
-Enabling this flag allows the principal to obtain proxy
-tickets.
-
-\item[{\sphinxstylestrong{pwchange}}] \leavevmode
-Enabling this flag forces a password change for this
-principal.
-
-\item[{\sphinxstylestrong{pwservice}}] \leavevmode
-If this flag is enabled, it marks this principal as a password
-change service. This should only be used in special cases,
-for example, if a user’s password has expired, then the user
-has to get tickets for that principal without going through
-the normal password authentication in order to be able to
-change the password.
-
-\item[{\sphinxstylestrong{renewable}}] \leavevmode
-Enabling this flag allows the principal to obtain renewable
-tickets.
-
-\item[{\sphinxstylestrong{service}}] \leavevmode
-Enabling this flag allows the the KDC to issue service tickets
-for this principal. In release 1.17 and later, user-to-user
-service tickets are still allowed if the \sphinxstylestrong{dup-skey} flag is
-set.
-
-\item[{\sphinxstylestrong{tgt-based}}] \leavevmode
-Enabling this flag allows a principal to obtain tickets based
-on a ticket-granting-ticket, rather than repeating the
-authentication process that was used to obtain the TGT.
-
-\end{description}
-
-\item[{\sphinxstylestrong{dict\_file}}] \leavevmode
-(String.) Location of the dictionary file containing strings that
-are not allowed as passwords. The file should contain one string
-per line, with no additional whitespace. If none is specified or
-if there is no policy assigned to the principal, no dictionary
-checks of passwords will be performed.
-
-\item[{\sphinxstylestrong{disable\_pac}}] \leavevmode
-(Boolean value.) If true, the KDC will not issue PACs for this
-realm, and S4U2Self and S4U2Proxy operations will be disabled.
-The default is false, which will permit the KDC to issue PACs.
-New in release 1.20.
-
-\item[{\sphinxstylestrong{encrypted\_challenge\_indicator}}] \leavevmode
-(String.) Specifies the authentication indicator value that the KDC
-asserts into tickets obtained using FAST encrypted challenge
-pre-authentication. New in 1.16.
-
-\item[{\sphinxstylestrong{host\_based\_services}}] \leavevmode
-(Whitespace- or comma-separated list.) Lists services which will
-get host-based referral processing even if the server principal is
-not marked as host-based by the client.
-
-\item[{\sphinxstylestrong{iprop\_enable}}] \leavevmode
-(Boolean value.) Specifies whether incremental database
-propagation is enabled. The default value is false.
-
-\item[{\sphinxstylestrong{iprop\_ulogsize}}] \leavevmode
-(Integer.) Specifies the maximum number of log entries to be
-retained for incremental propagation. The default value is 1000.
-Prior to release 1.11, the maximum value was 2500. New in release
-1.19.
-
-\item[{\sphinxstylestrong{iprop\_master\_ulogsize}}] \leavevmode
-The name for \sphinxstylestrong{iprop\_ulogsize} prior to release 1.19. Its value is
-used as a fallback if \sphinxstylestrong{iprop\_ulogsize} is not specified.
-
-\item[{\sphinxstylestrong{iprop\_replica\_poll}}] \leavevmode
-(Delta time string.) Specifies how often the replica KDC polls
-for new updates from the primary. The default value is \sphinxcode{2m}
-(that is, two minutes). New in release 1.17.
-
-\item[{\sphinxstylestrong{iprop\_slave\_poll}}] \leavevmode
-(Delta time string.) The name for \sphinxstylestrong{iprop\_replica\_poll} prior to
-release 1.17. Its value is used as a fallback if
-\sphinxstylestrong{iprop\_replica\_poll} is not specified.
-
-\item[{\sphinxstylestrong{iprop\_listen}}] \leavevmode
-(Whitespace- or comma-separated list.) Specifies the iprop RPC
-listening addresses and/or ports for the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} daemon.
-Each entry may be an interface address, a port number, or an
-address and port number separated by a colon. If the address
-contains colons, enclose it in square brackets. If no address is
-specified, the wildcard address is used. If kadmind fails to bind
-to any of the specified addresses, it will fail to start. The
-default (when \sphinxstylestrong{iprop\_enable} is true) is to bind to the wildcard
-address at the port specified in \sphinxstylestrong{iprop\_port}. New in release
-1.15.
-
-\item[{\sphinxstylestrong{iprop\_port}}] \leavevmode
-(Port number.) Specifies the port number to be used for
-incremental propagation. When \sphinxstylestrong{iprop\_enable} is true, this
-relation is required in the replica KDC configuration file, and
-this relation or \sphinxstylestrong{iprop\_listen} is required in the primary
-configuration file, as there is no default port number. Port
-numbers specified in \sphinxstylestrong{iprop\_listen} entries will override this
-port number for the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} daemon.
-
-\item[{\sphinxstylestrong{iprop\_resync\_timeout}}] \leavevmode
-(Delta time string.) Specifies the amount of time to wait for a
-full propagation to complete. This is optional in configuration
-files, and is used by replica KDCs only. The default value is 5
-minutes (\sphinxcode{5m}). New in release 1.11.
-
-\item[{\sphinxstylestrong{iprop\_logfile}}] \leavevmode
-(File name.) Specifies where the update log file for the realm
-database is to be stored. The default is to use the
-\sphinxstylestrong{database\_name} entry from the realms section of the krb5 config
-file, with \sphinxcode{.ulog} appended. (NOTE: If \sphinxstylestrong{database\_name} isn’t
-specified in the realms section, perhaps because the LDAP database
-back end is being used, or the file name is specified in the
-{[}dbmodules{]} section, then the hard-coded default for
-\sphinxstylestrong{database\_name} is used. Determination of the \sphinxstylestrong{iprop\_logfile}
-default value will not use values from the {[}dbmodules{]} section.)
-
-\item[{\sphinxstylestrong{kadmind\_listen}}] \leavevmode
-(Whitespace- or comma-separated list.) Specifies the kadmin RPC
-listening addresses and/or ports for the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} daemon.
-Each entry may be an interface address, a port number, or an
-address and port number separated by a colon. If the address
-contains colons, enclose it in square brackets. If no address is
-specified, the wildcard address is used. If kadmind fails to bind
-to any of the specified addresses, it will fail to start. The
-default is to bind to the wildcard address at the port specified
-in \sphinxstylestrong{kadmind\_port}, or the standard kadmin port (749). New in
-release 1.15.
-
-\item[{\sphinxstylestrong{kadmind\_port}}] \leavevmode
-(Port number.) Specifies the port on which the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}}
-daemon is to listen for this realm. Port numbers specified in
-\sphinxstylestrong{kadmind\_listen} entries will override this port number. The
-assigned port for kadmind is 749, which is used by default.
-
-\item[{\sphinxstylestrong{key\_stash\_file}}] \leavevmode
-(String.) Specifies the location where the master key has been
-stored (via kdb5\_util stash). The default is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/.k5.REALM}, where \sphinxstyleemphasis{REALM} is the Kerberos realm.
-
-\item[{\sphinxstylestrong{kdc\_listen}}] \leavevmode
-(Whitespace- or comma-separated list.) Specifies the UDP
-listening addresses and/or ports for the {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} daemon.
-Each entry may be an interface address, a port number, or an
-address and port number separated by a colon. If the address
-contains colons, enclose it in square brackets. If no address is
-specified, the wildcard address is used. If no port is specified,
-the standard port (88) is used. If the KDC daemon fails to bind
-to any of the specified addresses, it will fail to start. The
-default is to bind to the wildcard address on the standard port.
-New in release 1.15.
-
-\item[{\sphinxstylestrong{kdc\_ports}}] \leavevmode
-(Whitespace- or comma-separated list, deprecated.) Prior to
-release 1.15, this relation lists the ports for the
-{\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} daemon to listen on for UDP requests. In
-release 1.15 and later, it has the same meaning as \sphinxstylestrong{kdc\_listen}
-if that relation is not defined.
-
-\item[{\sphinxstylestrong{kdc\_tcp\_listen}}] \leavevmode
-(Whitespace- or comma-separated list.) Specifies the TCP
-listening addresses and/or ports for the {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} daemon.
-Each entry may be an interface address, a port number, or an
-address and port number separated by a colon. If the address
-contains colons, enclose it in square brackets. If no address is
-specified, the wildcard address is used. If no port is specified,
-the standard port (88) is used. To disable listening on TCP, set
-this relation to the empty string with \sphinxcode{kdc\_tcp\_listen = ""}.
-If the KDC daemon fails to bind to any of the specified addresses,
-it will fail to start. The default is to bind to the wildcard
-address on the standard port. New in release 1.15.
-
-\item[{\sphinxstylestrong{kdc\_tcp\_ports}}] \leavevmode
-(Whitespace- or comma-separated list, deprecated.) Prior to
-release 1.15, this relation lists the ports for the
-{\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} daemon to listen on for UDP requests. In
-release 1.15 and later, it has the same meaning as
-\sphinxstylestrong{kdc\_tcp\_listen} if that relation is not defined.
-
-\item[{\sphinxstylestrong{kpasswd\_listen}}] \leavevmode
-(Comma-separated list.) Specifies the kpasswd listening addresses
-and/or ports for the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} daemon. Each entry may be
-an interface address, a port number, or an address and port number
-separated by a colon. If the address contains colons, enclose it
-in square brackets. If no address is specified, the wildcard
-address is used. If kadmind fails to bind to any of the specified
-addresses, it will fail to start. The default is to bind to the
-wildcard address at the port specified in \sphinxstylestrong{kpasswd\_port}, or the
-standard kpasswd port (464). New in release 1.15.
-
-\item[{\sphinxstylestrong{kpasswd\_port}}] \leavevmode
-(Port number.) Specifies the port on which the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}}
-daemon is to listen for password change requests for this realm.
-Port numbers specified in \sphinxstylestrong{kpasswd\_listen} entries will override
-this port number. The assigned port for password change requests
-is 464, which is used by default.
-
-\item[{\sphinxstylestrong{master\_key\_name}}] \leavevmode
-(String.) Specifies the name of the principal associated with the
-master key. The default is \sphinxcode{K/M}.
-
-\item[{\sphinxstylestrong{master\_key\_type}}] \leavevmode
-(Key type string.) Specifies the master key’s key type. The
-default value for this is \sphinxcode{aes256-cts-hmac-sha1-96}. For a list of all possible
-values, see {\hyperref[\detokenize{admin/conf_files/kdc_conf:encryption-types}]{\sphinxcrossref{\DUrole{std,std-ref}{Encryption types}}}}.
-
-\item[{\sphinxstylestrong{max\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} string.) Specifies the maximum time period for
-which a ticket may be valid in this realm. The default value is
-24 hours.
-
-\item[{\sphinxstylestrong{max\_renewable\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} string.) Specifies the maximum time period
-during which a valid ticket may be renewed in this realm.
-The default value is 0.
-
-\item[{\sphinxstylestrong{no\_host\_referral}}] \leavevmode
-(Whitespace- or comma-separated list.) Lists services to block
-from getting host-based referral processing, even if the client
-marks the server principal as host-based or the service is also
-listed in \sphinxstylestrong{host\_based\_services}. \sphinxcode{no\_host\_referral = *} will
-disable referral processing altogether.
-
-\item[{\sphinxstylestrong{reject\_bad\_transit}}] \leavevmode
-(Boolean value.) If set to true, the KDC will check the list of
-transited realms for cross-realm tickets against the transit path
-computed from the realm names and the capaths section of its
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} file; if the path in the ticket to be issued
-contains any realms not in the computed path, the ticket will not
-be issued, and an error will be returned to the client instead.
-If this value is set to false, such tickets will be issued
-anyways, and it will be left up to the application server to
-validate the realm transit path.
-
-If the disable-transited-check flag is set in the incoming
-request, this check is not performed at all. Having the
-\sphinxstylestrong{reject\_bad\_transit} option will cause such ticket requests to
-be rejected always.
-
-This transit path checking and config file option currently apply
-only to TGS requests.
-
-The default value is true.
-
-\item[{\sphinxstylestrong{restrict\_anonymous\_to\_tgt}}] \leavevmode
-(Boolean value.) If set to true, the KDC will reject ticket
-requests from anonymous principals to service principals other
-than the realm’s ticket-granting service. This option allows
-anonymous PKINIT to be enabled for use as FAST armor tickets
-without allowing anonymous authentication to services. The
-default value is false. New in release 1.9.
-
-\item[{\sphinxstylestrong{spake\_preauth\_indicator}}] \leavevmode
-(String.) Specifies an authentication indicator value that the
-KDC asserts into tickets obtained using SPAKE pre-authentication.
-The default is not to add any indicators. This option may be
-specified multiple times. New in release 1.17.
-
-\item[{\sphinxstylestrong{supported\_enctypes}}] \leavevmode
-(List of \sphinxstyleemphasis{key}:\sphinxstyleemphasis{salt} strings.) Specifies the default key/salt
-combinations of principals for this realm. Any principals created
-through {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} will have keys of these types. The
-default value for this tag is \sphinxcode{aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal}. For lists of
-possible values, see {\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}}.
-
-\end{description}
-
-
-\paragraph{{[}dbdefaults{]}}
-\label{\detokenize{admin/conf_files/kdc_conf:id2}}\label{\detokenize{admin/conf_files/kdc_conf:dbdefaults}}
-The {[}dbdefaults{]} section specifies default values for some database
-parameters, to be used if the {[}dbmodules{]} subsection does not contain
-a relation for the tag. See the {\hyperref[\detokenize{admin/conf_files/kdc_conf:dbmodules}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbmodules{]}}}}} section for the
-definitions of these relations.
-\begin{itemize}
-\item {}
-\sphinxstylestrong{ldap\_kerberos\_container\_dn}
-
-\item {}
-\sphinxstylestrong{ldap\_kdc\_dn}
-
-\item {}
-\sphinxstylestrong{ldap\_kdc\_sasl\_authcid}
-
-\item {}
-\sphinxstylestrong{ldap\_kdc\_sasl\_authzid}
-
-\item {}
-\sphinxstylestrong{ldap\_kdc\_sasl\_mech}
-
-\item {}
-\sphinxstylestrong{ldap\_kdc\_sasl\_realm}
-
-\item {}
-\sphinxstylestrong{ldap\_kadmind\_dn}
-
-\item {}
-\sphinxstylestrong{ldap\_kadmind\_sasl\_authcid}
-
-\item {}
-\sphinxstylestrong{ldap\_kadmind\_sasl\_authzid}
-
-\item {}
-\sphinxstylestrong{ldap\_kadmind\_sasl\_mech}
-
-\item {}
-\sphinxstylestrong{ldap\_kadmind\_sasl\_realm}
-
-\item {}
-\sphinxstylestrong{ldap\_service\_password\_file}
-
-\item {}
-\sphinxstylestrong{ldap\_conns\_per\_server}
-
-\end{itemize}
-
-
-\paragraph{{[}dbmodules{]}}
-\label{\detokenize{admin/conf_files/kdc_conf:dbmodules}}\label{\detokenize{admin/conf_files/kdc_conf:id3}}
-The {[}dbmodules{]} section contains parameters used by the KDC database
-library and database modules. Each tag in the {[}dbmodules{]} section is
-the name of a Kerberos realm or a section name specified by a realm’s
-\sphinxstylestrong{database\_module} parameter. The following example shows how to
-define one database parameter for the ATHENA.MIT.EDU realm:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{dbmodules}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{disable\PYGZus{}last\PYGZus{}success} \PYG{o}{=} \PYG{n}{true}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-The following tags may be specified in a {[}dbmodules{]} subsection:
-\begin{description}
-\item[{\sphinxstylestrong{database\_name}}] \leavevmode
-This DB2-specific tag indicates the location of the database in
-the filesystem. The default is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/principal}.
-
-\item[{\sphinxstylestrong{db\_library}}] \leavevmode
-This tag indicates the name of the loadable database module. The
-value should be \sphinxcode{db2} for the DB2 module, \sphinxcode{klmdb} for the LMDB
-module, or \sphinxcode{kldap} for the LDAP module.
-
-\item[{\sphinxstylestrong{disable\_last\_success}}] \leavevmode
-If set to \sphinxcode{true}, suppresses KDC updates to the “Last successful
-authentication” field of principal entries requiring
-preauthentication. Setting this flag may improve performance.
-(Principal entries which do not require preauthentication never
-update the “Last successful authentication” field.). First
-introduced in release 1.9.
-
-\item[{\sphinxstylestrong{disable\_lockout}}] \leavevmode
-If set to \sphinxcode{true}, suppresses KDC updates to the “Last failed
-authentication” and “Failed password attempts” fields of principal
-entries requiring preauthentication. Setting this flag may
-improve performance, but also disables account lockout. First
-introduced in release 1.9.
-
-\item[{\sphinxstylestrong{ldap\_conns\_per\_server}}] \leavevmode
-This LDAP-specific tag indicates the number of connections to be
-maintained per LDAP server.
-
-\item[{\sphinxstylestrong{ldap\_kdc\_dn} and \sphinxstylestrong{ldap\_kadmind\_dn}}] \leavevmode
-These LDAP-specific tags indicate the default DN for binding to
-the LDAP server. The {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} daemon uses
-\sphinxstylestrong{ldap\_kdc\_dn}, while the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} daemon and other
-administrative programs use \sphinxstylestrong{ldap\_kadmind\_dn}. The kadmind DN
-must have the rights to read and write the Kerberos data in the
-LDAP database. The KDC DN must have the same rights, unless
-\sphinxstylestrong{disable\_lockout} and \sphinxstylestrong{disable\_last\_success} are true, in
-which case it only needs to have rights to read the Kerberos data.
-These tags are ignored if a SASL mechanism is set with
-\sphinxstylestrong{ldap\_kdc\_sasl\_mech} or \sphinxstylestrong{ldap\_kadmind\_sasl\_mech}.
-
-\item[{\sphinxstylestrong{ldap\_kdc\_sasl\_mech} and \sphinxstylestrong{ldap\_kadmind\_sasl\_mech}}] \leavevmode
-These LDAP-specific tags specify the SASL mechanism (such as
-\sphinxcode{EXTERNAL}) to use when binding to the LDAP server. New in
-release 1.13.
-
-\item[{\sphinxstylestrong{ldap\_kdc\_sasl\_authcid} and \sphinxstylestrong{ldap\_kadmind\_sasl\_authcid}}] \leavevmode
-These LDAP-specific tags specify the SASL authentication identity
-to use when binding to the LDAP server. Not all SASL mechanisms
-require an authentication identity. If the SASL mechanism
-requires a secret (such as the password for \sphinxcode{DIGEST-MD5}), these
-tags also determine the name within the
-\sphinxstylestrong{ldap\_service\_password\_file} where the secret is stashed. New
-in release 1.13.
-
-\item[{\sphinxstylestrong{ldap\_kdc\_sasl\_authzid} and \sphinxstylestrong{ldap\_kadmind\_sasl\_authzid}}] \leavevmode
-These LDAP-specific tags specify the SASL authorization identity
-to use when binding to the LDAP server. In most circumstances
-they do not need to be specified. New in release 1.13.
-
-\item[{\sphinxstylestrong{ldap\_kdc\_sasl\_realm} and \sphinxstylestrong{ldap\_kadmind\_sasl\_realm}}] \leavevmode
-These LDAP-specific tags specify the SASL realm to use when
-binding to the LDAP server. In most circumstances they do not
-need to be set. New in release 1.13.
-
-\item[{\sphinxstylestrong{ldap\_kerberos\_container\_dn}}] \leavevmode
-This LDAP-specific tag indicates the DN of the container object
-where the realm objects will be located.
-
-\item[{\sphinxstylestrong{ldap\_servers}}] \leavevmode
-This LDAP-specific tag indicates the list of LDAP servers that the
-Kerberos servers can connect to. The list of LDAP servers is
-whitespace-separated. The LDAP server is specified by a LDAP URI.
-It is recommended to use \sphinxcode{ldapi:} or \sphinxcode{ldaps:} URLs to connect
-to the LDAP server.
-
-\item[{\sphinxstylestrong{ldap\_service\_password\_file}}] \leavevmode
-This LDAP-specific tag indicates the file containing the stashed
-passwords (created by \sphinxcode{kdb5\_ldap\_util stashsrvpw}) for the
-\sphinxstylestrong{ldap\_kdc\_dn} and \sphinxstylestrong{ldap\_kadmind\_dn} objects, or for the
-\sphinxstylestrong{ldap\_kdc\_sasl\_authcid} or \sphinxstylestrong{ldap\_kadmind\_sasl\_authcid} names
-for SASL authentication. This file must be kept secure.
-
-\item[{\sphinxstylestrong{mapsize}}] \leavevmode
-This LMDB-specific tag indicates the maximum size of the two
-database environments in megabytes. The default value is 128.
-Increase this value to address “Environment mapsize limit reached”
-errors. New in release 1.17.
-
-\item[{\sphinxstylestrong{max\_readers}}] \leavevmode
-This LMDB-specific tag indicates the maximum number of concurrent
-reading processes for the databases. The default value is 128.
-New in release 1.17.
-
-\item[{\sphinxstylestrong{nosync}}] \leavevmode
-This LMDB-specific tag can be set to improve the throughput of
-kadmind and other administrative agents, at the expense of
-durability (recent database changes may not survive a power outage
-or other sudden reboot). It does not affect the throughput of the
-KDC. The default value is false. New in release 1.17.
-
-\item[{\sphinxstylestrong{unlockiter}}] \leavevmode
-If set to \sphinxcode{true}, this DB2-specific tag causes iteration
-operations to release the database lock while processing each
-principal. Setting this flag to \sphinxcode{true} can prevent extended
-blocking of KDC or kadmin operations when dumps of large databases
-are in progress. First introduced in release 1.13.
-
-\end{description}
-
-The following tag may be specified directly in the {[}dbmodules{]}
-section to control where database modules are loaded from:
-\begin{description}
-\item[{\sphinxstylestrong{db\_module\_dir}}] \leavevmode
-This tag controls where the plugin system looks for database
-modules. The value should be an absolute path.
-
-\end{description}
-
-
-\paragraph{{[}logging{]}}
-\label{\detokenize{admin/conf_files/kdc_conf:id4}}\label{\detokenize{admin/conf_files/kdc_conf:logging}}
-The {[}logging{]} section indicates how {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} and
-{\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} perform logging. It may contain the following
-relations:
-\begin{description}
-\item[{\sphinxstylestrong{admin\_server}}] \leavevmode
-Specifies how {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} performs logging.
-
-\item[{\sphinxstylestrong{kdc}}] \leavevmode
-Specifies how {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} performs logging.
-
-\item[{\sphinxstylestrong{default}}] \leavevmode
-Specifies how either daemon performs logging in the absence of
-relations specific to the daemon.
-
-\item[{\sphinxstylestrong{debug}}] \leavevmode
-(Boolean value.) Specifies whether debugging messages are
-included in log outputs other than SYSLOG. Debugging messages are
-always included in the system log output because syslog performs
-its own priority filtering. The default value is false. New in
-release 1.15.
-
-\end{description}
-
-Logging specifications may have the following forms:
-\begin{description}
-\item[{\sphinxstylestrong{FILE=}\sphinxstyleemphasis{filename} or \sphinxstylestrong{FILE:}\sphinxstyleemphasis{filename}}] \leavevmode
-This value causes the daemon’s logging messages to go to the
-\sphinxstyleemphasis{filename}. If the \sphinxcode{=} form is used, the file is overwritten.
-If the \sphinxcode{:} form is used, the file is appended to.
-
-\item[{\sphinxstylestrong{STDERR}}] \leavevmode
-This value causes the daemon’s logging messages to go to its
-standard error stream.
-
-\item[{\sphinxstylestrong{CONSOLE}}] \leavevmode
-This value causes the daemon’s logging messages to go to the
-console, if the system supports it.
-
-\item[{\sphinxstylestrong{DEVICE=}\sphinxstyleemphasis{\textless{}devicename\textgreater{}}}] \leavevmode
-This causes the daemon’s logging messages to go to the specified
-device.
-
-\item[{\sphinxstylestrong{SYSLOG}{[}\sphinxstylestrong{:}\sphinxstyleemphasis{severity}{[}\sphinxstylestrong{:}\sphinxstyleemphasis{facility}{]}{]}}] \leavevmode
-This causes the daemon’s logging messages to go to the system log.
-
-For backward compatibility, a severity argument may be specified,
-and must be specified in order to specify a facility. This
-argument will be ignored.
-
-The facility argument specifies the facility under which the
-messages are logged. This may be any of the following facilities
-supported by the syslog(3) call minus the LOG\_ prefix: \sphinxstylestrong{KERN},
-\sphinxstylestrong{USER}, \sphinxstylestrong{MAIL}, \sphinxstylestrong{DAEMON}, \sphinxstylestrong{AUTH}, \sphinxstylestrong{LPR}, \sphinxstylestrong{NEWS},
-\sphinxstylestrong{UUCP}, \sphinxstylestrong{CRON}, and \sphinxstylestrong{LOCAL0} through \sphinxstylestrong{LOCAL7}. If no
-facility is specified, the default is \sphinxstylestrong{AUTH}.
-
-\end{description}
-
-In the following example, the logging messages from the KDC will go to
-the console and to the system log under the facility LOG\_DAEMON, and
-the logging messages from the administrative server will be appended
-to the file \sphinxcode{/var/adm/kadmin.log} and sent to the device
-\sphinxcode{/dev/tty04}.
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{logging}\PYG{p}{]}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{CONSOLE}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{SYSLOG}\PYG{p}{:}\PYG{n}{INFO}\PYG{p}{:}\PYG{n}{DAEMON}
- \PYG{n}{admin\PYGZus{}server} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{adm}\PYG{o}{/}\PYG{n}{kadmin}\PYG{o}{.}\PYG{n}{log}
- \PYG{n}{admin\PYGZus{}server} \PYG{o}{=} \PYG{n}{DEVICE}\PYG{o}{=}\PYG{o}{/}\PYG{n}{dev}\PYG{o}{/}\PYG{n}{tty04}
-\end{sphinxVerbatim}
-
-If no logging specification is given, the default is to use syslog.
-To disable logging entirely, specify \sphinxcode{default = DEVICE=/dev/null}.
-
-
-\paragraph{{[}otp{]}}
-\label{\detokenize{admin/conf_files/kdc_conf:otp}}\label{\detokenize{admin/conf_files/kdc_conf:id5}}
-Each subsection of {[}otp{]} is the name of an OTP token type. The tags
-within the subsection define the configuration required to forward a
-One Time Password request to a RADIUS server.
-
-For each token type, the following tags may be specified:
-\begin{description}
-\item[{\sphinxstylestrong{server}}] \leavevmode
-This is the server to send the RADIUS request to. It can be a
-hostname with optional port, an ip address with optional port, or
-a Unix domain socket address. The default is
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/\textless{}name\textgreater{}.socket}.
-
-\item[{\sphinxstylestrong{secret}}] \leavevmode
-This tag indicates a filename (which may be relative to {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc})
-containing the secret used to encrypt the RADIUS packets. The
-secret should appear in the first line of the file by itself;
-leading and trailing whitespace on the line will be removed. If
-the value of \sphinxstylestrong{server} is a Unix domain socket address, this tag
-is optional, and an empty secret will be used if it is not
-specified. Otherwise, this tag is required.
-
-\item[{\sphinxstylestrong{timeout}}] \leavevmode
-An integer which specifies the time in seconds during which the
-KDC should attempt to contact the RADIUS server. This tag is the
-total time across all retries and should be less than the time
-which an OTP value remains valid for. The default is 5 seconds.
-
-\item[{\sphinxstylestrong{retries}}] \leavevmode
-This tag specifies the number of retries to make to the RADIUS
-server. The default is 3 retries (4 tries).
-
-\item[{\sphinxstylestrong{strip\_realm}}] \leavevmode
-If this tag is \sphinxcode{true}, the principal without the realm will be
-passed to the RADIUS server. Otherwise, the realm will be
-included. The default value is \sphinxcode{true}.
-
-\item[{\sphinxstylestrong{indicator}}] \leavevmode
-This tag specifies an authentication indicator to be included in
-the ticket if this token type is used to authenticate. This
-option may be specified multiple times. (New in release 1.14.)
-
-\end{description}
-
-In the following example, requests are sent to a remote server via UDP:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-[otp]
- MyRemoteTokenType = \PYGZob{}
- server = radius.mydomain.com:1812
- secret = SEmfiajf42\PYGZdl{}
- timeout = 15
- retries = 5
- strip\PYGZus{}realm = true
- \PYGZcb{}
-\end{sphinxVerbatim}
-
-An implicit default token type named \sphinxcode{DEFAULT} is defined for when
-the per-principal configuration does not specify a token type. Its
-configuration is shown below. You may override this token type to
-something applicable for your situation:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{otp}\PYG{p}{]}
- \PYG{n}{DEFAULT} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{strip\PYGZus{}realm} \PYG{o}{=} \PYG{n}{false}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-
-\subsubsection{PKINIT options}
-\label{\detokenize{admin/conf_files/kdc_conf:pkinit-options}}
-\begin{sphinxadmonition}{note}{Note:}
-The following are pkinit-specific options. These values may
-be specified in {[}kdcdefaults{]} as global defaults, or within
-a realm-specific subsection of {[}realms{]}. Also note that a
-realm-specific value over-rides, does not add to, a generic
-{[}kdcdefaults{]} specification. The search order is:
-\end{sphinxadmonition}
-\begin{enumerate}
-\item {}
-realm-specific subsection of {[}realms{]}:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{pkinit\PYGZus{}anchors} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}\PYG{o}{.}\PYG{n}{crt}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-\item {}
-generic value in the {[}kdcdefaults{]} section:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{kdcdefaults}\PYG{p}{]}
- \PYG{n}{pkinit\PYGZus{}anchors} \PYG{o}{=} \PYG{n}{DIR}\PYG{p}{:}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{generic\PYGZus{}trusted\PYGZus{}cas}\PYG{o}{/}
-\end{sphinxVerbatim}
-
-\end{enumerate}
-
-For information about the syntax of some of these options, see
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:pkinit-identity}]{\sphinxcrossref{\DUrole{std,std-ref}{Specifying PKINIT identity information}}}} in
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}.
-\begin{description}
-\item[{\sphinxstylestrong{pkinit\_anchors}}] \leavevmode
-Specifies the location of trusted anchor (root) certificates which
-the KDC trusts to sign client certificates. This option is
-required if pkinit is to be supported by the KDC. This option may
-be specified multiple times.
-
-\item[{\sphinxstylestrong{pkinit\_dh\_min\_bits}}] \leavevmode
-Specifies the minimum number of bits the KDC is willing to accept
-for a client’s Diffie-Hellman key. The default is 2048.
-
-\item[{\sphinxstylestrong{pkinit\_allow\_upn}}] \leavevmode
-Specifies that the KDC is willing to accept client certificates
-with the Microsoft UserPrincipalName (UPN) Subject Alternative
-Name (SAN). This means the KDC accepts the binding of the UPN in
-the certificate to the Kerberos principal name. The default value
-is false.
-
-Without this option, the KDC will only accept certificates with
-the id-pkinit-san as defined in \index{RFC!RFC 4556}\sphinxhref{https://tools.ietf.org/html/rfc4556.html}{\sphinxstylestrong{RFC 4556}}. There is currently
-no option to disable SAN checking in the KDC.
-
-\item[{\sphinxstylestrong{pkinit\_eku\_checking}}] \leavevmode
-This option specifies what Extended Key Usage (EKU) values the KDC
-is willing to accept in client certificates. The values
-recognized in the kdc.conf file are:
-\begin{description}
-\item[{\sphinxstylestrong{kpClientAuth}}] \leavevmode
-This is the default value and specifies that client
-certificates must have the id-pkinit-KPClientAuth EKU as
-defined in \index{RFC!RFC 4556}\sphinxhref{https://tools.ietf.org/html/rfc4556.html}{\sphinxstylestrong{RFC 4556}}.
-
-\item[{\sphinxstylestrong{scLogin}}] \leavevmode
-If scLogin is specified, client certificates with the
-Microsoft Smart Card Login EKU (id-ms-kp-sc-logon) will be
-accepted.
-
-\item[{\sphinxstylestrong{none}}] \leavevmode
-If none is specified, then client certificates will not be
-checked to verify they have an acceptable EKU. The use of
-this option is not recommended.
-
-\end{description}
-
-\item[{\sphinxstylestrong{pkinit\_identity}}] \leavevmode
-Specifies the location of the KDC’s X.509 identity information.
-This option is required if pkinit is to be supported by the KDC.
-
-\item[{\sphinxstylestrong{pkinit\_indicator}}] \leavevmode
-Specifies an authentication indicator to include in the ticket if
-pkinit is used to authenticate. This option may be specified
-multiple times. (New in release 1.14.)
-
-\item[{\sphinxstylestrong{pkinit\_pool}}] \leavevmode
-Specifies the location of intermediate certificates which may be
-used by the KDC to complete the trust chain between a client’s
-certificate and a trusted anchor. This option may be specified
-multiple times.
-
-\item[{\sphinxstylestrong{pkinit\_revoke}}] \leavevmode
-Specifies the location of Certificate Revocation List (CRL)
-information to be used by the KDC when verifying the validity of
-client certificates. This option may be specified multiple times.
-
-\item[{\sphinxstylestrong{pkinit\_require\_crl\_checking}}] \leavevmode
-The default certificate verification process will always check the
-available revocation information to see if a certificate has been
-revoked. If a match is found for the certificate in a CRL,
-verification fails. If the certificate being verified is not
-listed in a CRL, or there is no CRL present for its issuing CA,
-and \sphinxstylestrong{pkinit\_require\_crl\_checking} is false, then verification
-succeeds.
-
-However, if \sphinxstylestrong{pkinit\_require\_crl\_checking} is true and there is
-no CRL information available for the issuing CA, then verification
-fails.
-
-\sphinxstylestrong{pkinit\_require\_crl\_checking} should be set to true if the
-policy is such that up-to-date CRLs must be present for every CA.
-
-\item[{\sphinxstylestrong{pkinit\_require\_freshness}}] \leavevmode
-Specifies whether to require clients to include a freshness token
-in PKINIT requests. The default value is false. (New in release
-1.17.)
-
-\end{description}
-
-
-\subsubsection{Encryption types}
-\label{\detokenize{admin/conf_files/kdc_conf:id6}}\label{\detokenize{admin/conf_files/kdc_conf:encryption-types}}
-Any tag in the configuration files which requires a list of encryption
-types can be set to some combination of the following strings.
-Encryption types marked as “weak” and “deprecated” are available for
-compatibility but not recommended for use.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-des3-cbc-raw
-&
-Triple DES cbc mode raw (weak)
-\\
-\hline
-des3-cbc-sha1 des3-hmac-sha1 des3-cbc-sha1-kd
-&
-Triple DES cbc mode with HMAC/sha1 (deprecated)
-\\
-\hline
-aes256-cts-hmac-sha1-96 aes256-cts aes256-sha1
-&
-AES-256 CTS mode with 96-bit SHA-1 HMAC
-\\
-\hline
-aes128-cts-hmac-sha1-96 aes128-cts aes128-sha1
-&
-AES-128 CTS mode with 96-bit SHA-1 HMAC
-\\
-\hline
-aes256-cts-hmac-sha384-192 aes256-sha2
-&
-AES-256 CTS mode with 192-bit SHA-384 HMAC
-\\
-\hline
-aes128-cts-hmac-sha256-128 aes128-sha2
-&
-AES-128 CTS mode with 128-bit SHA-256 HMAC
-\\
-\hline
-arcfour-hmac rc4-hmac arcfour-hmac-md5
-&
-RC4 with HMAC/MD5 (deprecated)
-\\
-\hline
-arcfour-hmac-exp rc4-hmac-exp arcfour-hmac-md5-exp
-&
-Exportable RC4 with HMAC/MD5 (weak)
-\\
-\hline
-camellia256-cts-cmac camellia256-cts
-&
-Camellia-256 CTS mode with CMAC
-\\
-\hline
-camellia128-cts-cmac camellia128-cts
-&
-Camellia-128 CTS mode with CMAC
-\\
-\hline
-des3
-&
-The triple DES family: des3-cbc-sha1
-\\
-\hline
-aes
-&
-The AES family: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, aes256-cts-hmac-sha384-192, and aes128-cts-hmac-sha256-128
-\\
-\hline
-rc4
-&
-The RC4 family: arcfour-hmac
-\\
-\hline
-camellia
-&
-The Camellia family: camellia256-cts-cmac and camellia128-cts-cmac
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-The string \sphinxstylestrong{DEFAULT} can be used to refer to the default set of
-types for the variable in question. Types or families can be removed
-from the current list by prefixing them with a minus sign (“-“).
-Types or families can be prefixed with a plus sign (“+”) for symmetry;
-it has the same meaning as just listing the type or family. For
-example, “\sphinxcode{DEFAULT -rc4}” would be the default set of encryption
-types with RC4 types removed, and “\sphinxcode{des3 DEFAULT}” would be the
-default set of encryption types with triple DES types moved to the
-front.
-
-While \sphinxstylestrong{aes128-cts} and \sphinxstylestrong{aes256-cts} are supported for all Kerberos
-operations, they are not supported by very old versions of our GSSAPI
-implementation (krb5-1.3.1 and earlier). Services running versions of
-krb5 without AES support must not be given keys of these encryption
-types in the KDC database.
-
-The \sphinxstylestrong{aes128-sha2} and \sphinxstylestrong{aes256-sha2} encryption types are new in
-release 1.15. Services running versions of krb5 without support for
-these newer encryption types must not be given keys of these
-encryption types in the KDC database.
-
-
-\subsubsection{Keysalt lists}
-\label{\detokenize{admin/conf_files/kdc_conf:id7}}\label{\detokenize{admin/conf_files/kdc_conf:keysalt-lists}}
-Kerberos keys for users are usually derived from passwords. Kerberos
-commands and configuration parameters that affect generation of keys
-take lists of enctype-salttype (“keysalt”) pairs, known as \sphinxstyleemphasis{keysalt
-lists}. Each keysalt pair is an enctype name followed by a salttype
-name, in the format \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt}. Individual keysalt list members are
-separated by comma (“,”) characters or space characters. For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin} \PYG{o}{\PYGZhy{}}\PYG{n}{e} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{p}{:}\PYG{n}{normal}\PYG{p}{,}\PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{p}{:}\PYG{n}{normal}
-\end{sphinxVerbatim}
-
-would start up kadmin so that by default it would generate
-password-derived keys for the \sphinxstylestrong{aes256-cts} and \sphinxstylestrong{aes128-cts}
-encryption types, using a \sphinxstylestrong{normal} salt.
-
-To ensure that people who happen to pick the same password do not have
-the same key, Kerberos 5 incorporates more information into the key
-using something called a salt. The supported salt types are as
-follows:
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-normal
-&
-default for Kerberos Version 5
-\\
-\hline
-norealm
-&
-same as the default, without using realm information
-\\
-\hline
-onlyrealm
-&
-uses only realm information as the salt
-\\
-\hline
-special
-&
-generate a random salt
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{Sample kdc.conf File}
-\label{\detokenize{admin/conf_files/kdc_conf:sample-kdc-conf-file}}
-Here’s an example of a kdc.conf file:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{kdcdefaults}\PYG{p}{]}
- \PYG{n}{kdc\PYGZus{}listen} \PYG{o}{=} \PYG{l+m+mi}{88}
- \PYG{n}{kdc\PYGZus{}tcp\PYGZus{}listen} \PYG{o}{=} \PYG{l+m+mi}{88}
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{kadmind\PYGZus{}port} \PYG{o}{=} \PYG{l+m+mi}{749}
- \PYG{n}{max\PYGZus{}life} \PYG{o}{=} \PYG{l+m+mi}{12}\PYG{n}{h} \PYG{l+m+mi}{0}\PYG{n}{m} \PYG{l+m+mi}{0}\PYG{n}{s}
- \PYG{n}{max\PYGZus{}renewable\PYGZus{}life} \PYG{o}{=} \PYG{l+m+mi}{7}\PYG{n}{d} \PYG{l+m+mi}{0}\PYG{n}{h} \PYG{l+m+mi}{0}\PYG{n}{m} \PYG{l+m+mi}{0}\PYG{n}{s}
- \PYG{n}{master\PYGZus{}key\PYGZus{}type} \PYG{o}{=} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}
- \PYG{n}{supported\PYGZus{}enctypes} \PYG{o}{=} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}\PYG{p}{:}\PYG{n}{normal}
- \PYG{n}{database\PYGZus{}module} \PYG{o}{=} \PYG{n}{openldap\PYGZus{}ldapconf}
- \PYG{p}{\PYGZcb{}}
-
-\PYG{p}{[}\PYG{n}{logging}\PYG{p}{]}
- \PYG{n}{kdc} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{krb5kdc}\PYG{o}{/}\PYG{n}{kdc}\PYG{o}{.}\PYG{n}{log}
- \PYG{n}{admin\PYGZus{}server} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{krb5kdc}\PYG{o}{/}\PYG{n}{kadmin}\PYG{o}{.}\PYG{n}{log}
-
-\PYG{p}{[}\PYG{n}{dbdefaults}\PYG{p}{]}
- \PYG{n}{ldap\PYGZus{}kerberos\PYGZus{}container\PYGZus{}dn} \PYG{o}{=} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{krbcontainer}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{mit}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{edu}
-
-\PYG{p}{[}\PYG{n}{dbmodules}\PYG{p}{]}
- \PYG{n}{openldap\PYGZus{}ldapconf} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{db\PYGZus{}library} \PYG{o}{=} \PYG{n}{kldap}
- \PYG{n}{disable\PYGZus{}last\PYGZus{}success} \PYG{o}{=} \PYG{n}{true}
- \PYG{n}{ldap\PYGZus{}kdc\PYGZus{}dn} \PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=krbadmin,dc=mit,dc=edu}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{c+c1}{\PYGZsh{} this object needs to have read rights on}
- \PYG{c+c1}{\PYGZsh{} the realm container and principal subtrees}
- \PYG{n}{ldap\PYGZus{}kadmind\PYGZus{}dn} \PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=krbadmin,dc=mit,dc=edu}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{c+c1}{\PYGZsh{} this object needs to have read and write rights on}
- \PYG{c+c1}{\PYGZsh{} the realm container and principal subtrees}
- \PYG{n}{ldap\PYGZus{}service\PYGZus{}password\PYGZus{}file} \PYG{o}{=} \PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{/}\PYG{n}{service}\PYG{o}{.}\PYG{n}{keyfile}
- \PYG{n}{ldap\PYGZus{}servers} \PYG{o}{=} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{n}{ldap\PYGZus{}conns\PYGZus{}per\PYGZus{}server} \PYG{o}{=} \PYG{l+m+mi}{5}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-
-\subsubsection{FILES}
-\label{\detokenize{admin/conf_files/kdc_conf:files}}
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/kdc.conf}
-
-
-\subsubsection{SEE ALSO}
-\label{\detokenize{admin/conf_files/kdc_conf:see-also}}
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}, {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}}, {\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}}
-
-
-\subsection{kadm5.acl}
-\label{\detokenize{admin/conf_files/kadm5_acl:kadm5-acl}}\label{\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}}\label{\detokenize{admin/conf_files/kadm5_acl::doc}}
-
-\subsubsection{DESCRIPTION}
-\label{\detokenize{admin/conf_files/kadm5_acl:description}}
-The Kerberos {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} daemon uses an Access Control List
-(ACL) file to manage access rights to the Kerberos database.
-For operations that affect principals, the ACL file also controls
-which principals can operate on which other principals.
-
-The default location of the Kerberos ACL file is
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/kadm5.acl} unless this is overridden by the \sphinxstyleemphasis{acl\_file}
-variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-
-\subsubsection{SYNTAX}
-\label{\detokenize{admin/conf_files/kadm5_acl:syntax}}
-Empty lines and lines starting with the sharp sign (\sphinxcode{\#}) are
-ignored. Lines containing ACL entries have the format:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{principal} \PYG{n}{permissions} \PYG{p}{[}\PYG{n}{target\PYGZus{}principal} \PYG{p}{[}\PYG{n}{restrictions}\PYG{p}{]} \PYG{p}{]}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-Line order in the ACL file is important. The first matching entry
-will control access for an actor principal on a target principal.
-\end{sphinxadmonition}
-\begin{description}
-\item[{\sphinxstyleemphasis{principal}}] \leavevmode
-(Partially or fully qualified Kerberos principal name.) Specifies
-the principal whose permissions are to be set.
-
-Each component of the name may be wildcarded using the \sphinxcode{*}
-character.
-
-\item[{\sphinxstyleemphasis{permissions}}] \leavevmode
-Specifies what operations may or may not be performed by a
-\sphinxstyleemphasis{principal} matching a particular entry. This is a string of one or
-more of the following list of characters or their upper-case
-counterparts. If the character is \sphinxstyleemphasis{upper-case}, then the operation
-is disallowed. If the character is \sphinxstyleemphasis{lower-case}, then the operation
-is permitted.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-a
-&
-{[}Dis{]}allows the addition of principals or policies
-\\
-\hline
-c
-&
-{[}Dis{]}allows the changing of passwords for principals
-\\
-\hline
-d
-&
-{[}Dis{]}allows the deletion of principals or policies
-\\
-\hline
-e
-&
-{[}Dis{]}allows the extraction of principal keys
-\\
-\hline
-i
-&
-{[}Dis{]}allows inquiries about principals or policies
-\\
-\hline
-l
-&
-{[}Dis{]}allows the listing of all principals or policies
-\\
-\hline
-m
-&
-{[}Dis{]}allows the modification of principals or policies
-\\
-\hline
-p
-&
-{[}Dis{]}allows the propagation of the principal database (used in {\hyperref[\detokenize{admin/database:incr-db-prop}]{\sphinxcrossref{\DUrole{std,std-ref}{Incremental database propagation}}}})
-\\
-\hline
-s
-&
-{[}Dis{]}allows the explicit setting of the key for a principal
-\\
-\hline
-x
-&
-Short for admcilsp. All privileges (except \sphinxcode{e})
-\\
-\hline
-*
-&
-Same as x.
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-\end{description}
-
-\begin{sphinxadmonition}{note}{Note:}
-The \sphinxcode{extract} privilege is not included in the wildcard
-privilege; it must be explicitly assigned. This privilege
-allows the user to extract keys from the database, and must be
-handled with great care to avoid disclosure of important keys
-like those of the kadmin/* or krbtgt/* principals. The
-\sphinxstylestrong{lockdown\_keys} principal attribute can be used to prevent
-key extraction from specific principals regardless of the
-granted privilege.
-\end{sphinxadmonition}
-\begin{description}
-\item[{\sphinxstyleemphasis{target\_principal}}] \leavevmode
-(Optional. Partially or fully qualified Kerberos principal name.)
-Specifies the principal on which \sphinxstyleemphasis{permissions} may be applied.
-Each component of the name may be wildcarded using the \sphinxcode{*}
-character.
-
-\sphinxstyleemphasis{target\_principal} can also include back-references to \sphinxstyleemphasis{principal},
-in which \sphinxcode{*number} matches the corresponding wildcard in
-\sphinxstyleemphasis{principal}.
-
-\item[{\sphinxstyleemphasis{restrictions}}] \leavevmode
-(Optional) A string of flags. Allowed restrictions are:
-\begin{quote}
-\begin{description}
-\item[{\{+\textbar{}-\}\sphinxstyleemphasis{flagname}}] \leavevmode
-flag is forced to the indicated value. The permissible flags
-are the same as those for the \sphinxstylestrong{default\_principal\_flags}
-variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstyleemphasis{-clearpolicy}}] \leavevmode
-policy is forced to be empty.
-
-\item[{\sphinxstyleemphasis{-policy pol}}] \leavevmode
-policy is forced to be \sphinxstyleemphasis{pol}.
-
-\item[{-\{\sphinxstyleemphasis{expire, pwexpire, maxlife, maxrenewlife}\} \sphinxstyleemphasis{time}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) associated value will be forced to
-MIN(\sphinxstyleemphasis{time}, requested value).
-
-\end{description}
-\end{quote}
-
-The above flags act as restrictions on any add or modify operation
-which is allowed due to that ACL line.
-
-\end{description}
-
-\begin{sphinxadmonition}{warning}{Warning:}
-If the kadmind ACL file is modified, the kadmind daemon needs to be
-restarted for changes to take effect.
-\end{sphinxadmonition}
-
-
-\subsubsection{EXAMPLE}
-\label{\detokenize{admin/conf_files/kadm5_acl:example}}
-Here is an example of a kadm5.acl file:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{o}{*}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{*} \PYG{c+c1}{\PYGZsh{} line 1}
-\PYG{n}{joeadmin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{ADMCIL} \PYG{c+c1}{\PYGZsh{} line 2}
-\PYG{n}{joeadmin}\PYG{o}{/}\PYG{o}{*}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{i} \PYG{o}{*}\PYG{o}{/}\PYG{n}{root}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{c+c1}{\PYGZsh{} line 3}
-\PYG{o}{*}\PYG{o}{/}\PYG{n}{root}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{ci} \PYG{o}{*}\PYG{l+m+mi}{1}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{c+c1}{\PYGZsh{} line 4}
-\PYG{o}{*}\PYG{o}{/}\PYG{n}{root}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{l} \PYG{o}{*} \PYG{c+c1}{\PYGZsh{} line 5}
-\PYG{n}{sms}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{x} \PYG{o}{*} \PYG{o}{\PYGZhy{}}\PYG{n}{maxlife} \PYG{l+m+mi}{9}\PYG{n}{h} \PYG{o}{\PYGZhy{}}\PYG{n}{postdateable} \PYG{c+c1}{\PYGZsh{} line 6}
-\end{sphinxVerbatim}
-
-(line 1) Any principal in the \sphinxcode{ATHENA.MIT.EDU} realm with an
-\sphinxcode{admin} instance has all administrative privileges except extracting
-keys.
-
-(lines 1-3) The user \sphinxcode{joeadmin} has all permissions except
-extracting keys with his \sphinxcode{admin} instance,
-\sphinxcode{joeadmin/admin@ATHENA.MIT.EDU} (matches line 1). He has no
-permissions at all with his null instance, \sphinxcode{joeadmin@ATHENA.MIT.EDU}
-(matches line 2). His \sphinxcode{root} and other non-\sphinxcode{admin}, non-null
-instances (e.g., \sphinxcode{extra} or \sphinxcode{dbadmin}) have inquire permissions
-with any principal that has the instance \sphinxcode{root} (matches line 3).
-
-(line 4) Any \sphinxcode{root} principal in \sphinxcode{ATHENA.MIT.EDU} can inquire
-or change the password of their null instance, but not any other
-null instance. (Here, \sphinxcode{*1} denotes a back-reference to the
-component matching the first wildcard in the actor principal.)
-
-(line 5) Any \sphinxcode{root} principal in \sphinxcode{ATHENA.MIT.EDU} can generate
-the list of principals in the database, and the list of policies
-in the database. This line is separate from line 4, because list
-permission can only be granted globally, not to specific target
-principals.
-
-(line 6) Finally, the Service Management System principal
-\sphinxcode{sms@ATHENA.MIT.EDU} has all permissions except extracting keys, but
-any principal that it creates or modifies will not be able to get
-postdateable tickets or tickets with a life of longer than 9 hours.
-
-
-\subsubsection{MODULE BEHAVIOR}
-\label{\detokenize{admin/conf_files/kadm5_acl:module-behavior}}
-The ACL file can coexist with other authorization modules in release
-1.16 and later, as configured in the {\hyperref[\detokenize{admin/conf_files/krb5_conf:kadm5-auth}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5\_auth interface}}}} section of
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}. The ACL file will positively authorize
-operations according to the rules above, but will never
-authoritatively deny an operation, so other modules can authorize
-operations in addition to those authorized by the ACL file.
-
-To operate without an ACL file, set the \sphinxstyleemphasis{acl\_file} variable in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} to the empty string with \sphinxcode{acl\_file = ""}.
-
-
-\subsubsection{SEE ALSO}
-\label{\detokenize{admin/conf_files/kadm5_acl:see-also}}
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}, {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}}
-
-
-\chapter{Realm configuration decisions}
-\label{\detokenize{admin/realm_config:realm-configuration-decisions}}\label{\detokenize{admin/realm_config::doc}}
-Before installing Kerberos V5, it is necessary to consider the
-following issues:
-\begin{itemize}
-\item {}
-The name of your Kerberos realm (or the name of each realm, if you
-need more than one).
-
-\item {}
-How you will assign your hostnames to Kerberos realms.
-
-\item {}
-Which ports your KDC and and kadmind services will use, if they will
-not be using the default ports.
-
-\item {}
-How many replica KDCs you need and where they should be located.
-
-\item {}
-The hostnames of your primary and replica KDCs.
-
-\item {}
-How frequently you will propagate the database from the primary KDC
-to the replica KDCs.
-
-\end{itemize}
-
-
-\section{Realm name}
-\label{\detokenize{admin/realm_config:realm-name}}
-Although your Kerberos realm can be any ASCII string, convention is to
-make it the same as your domain name, in upper-case letters.
-
-For example, hosts in the domain \sphinxcode{example.com} would be in the
-Kerberos realm:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
-\end{sphinxVerbatim}
-
-If you need multiple Kerberos realms, MIT recommends that you use
-descriptive names which end with your domain name, such as:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{BOSTON}\PYG{o}{.}\PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{HOUSTON}\PYG{o}{.}\PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
-\end{sphinxVerbatim}
-
-
-\section{Mapping hostnames onto Kerberos realms}
-\label{\detokenize{admin/realm_config:mapping-hostnames-onto-kerberos-realms}}\label{\detokenize{admin/realm_config:mapping-hostnames}}
-Mapping hostnames onto Kerberos realms is done in one of three ways.
-
-The first mechanism works through a set of rules in the
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:domain-realm}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}domain\_realm{]}}}}} section of {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}. You can specify
-mappings for an entire domain or on a per-hostname basis. Typically
-you would do this by specifying the mappings for a given domain or
-subdomain and listing the exceptions.
-
-The second mechanism is to use KDC host-based service referrals. With
-this method, the KDC’s krb5.conf has a full {[}domain\_realm{]} mapping for
-hosts, but the clients do not, or have mappings for only a subset of
-the hosts they might contact. When a client needs to contact a server
-host for which it has no mapping, it will ask the client realm’s KDC
-for the service ticket, and will receive a referral to the appropriate
-service realm.
-
-To use referrals, clients must be running MIT krb5 1.6 or later, and
-the KDC must be running MIT krb5 1.7 or later. The
-\sphinxstylestrong{host\_based\_services} and \sphinxstylestrong{no\_host\_referral} variables in the
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} section of {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} can be used to
-fine-tune referral behavior on the KDC.
-
-It is also possible for clients to use DNS TXT records, if
-\sphinxstylestrong{dns\_lookup\_realm} is enabled in {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}. Such lookups
-are disabled by default because DNS is an insecure protocol and security
-holes could result if DNS records are spoofed. If enabled, the client
-will try to look up a TXT record formed by prepending the prefix
-\sphinxcode{\_kerberos} to the hostname in question. If that record is not
-found, the client will attempt a lookup by prepending \sphinxcode{\_kerberos} to the
-host’s domain name, then its parent domain, up to the top-level domain.
-For the hostname \sphinxcode{boston.engineering.example.com}, the names looked up
-would be:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{\PYGZus{}kerberos}\PYG{o}{.}\PYG{n}{boston}\PYG{o}{.}\PYG{n}{engineering}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}
-\PYG{n}{\PYGZus{}kerberos}\PYG{o}{.}\PYG{n}{engineering}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}
-\PYG{n}{\PYGZus{}kerberos}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}
-\PYG{n}{\PYGZus{}kerberos}\PYG{o}{.}\PYG{n}{com}
-\end{sphinxVerbatim}
-
-The value of the first TXT record found is taken as the realm name.
-
-Even if you do not choose to use this mechanism within your site,
-you may wish to set it up anyway, for use when interacting with other sites.
-
-
-\section{Ports for the KDC and admin services}
-\label{\detokenize{admin/realm_config:ports-for-the-kdc-and-admin-services}}
-The default ports used by Kerberos are port 88 for the KDC and port
-749 for the admin server. You can, however, choose to run on other
-ports, as long as they are specified in each host’s
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} files or in DNS SRV records, and the
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} file on each KDC. For a more thorough treatment of
-port numbers used by the Kerberos V5 programs, refer to the
-{\hyperref[\detokenize{admin/appl_servers:conf-firewall}]{\sphinxcrossref{\DUrole{std,std-ref}{Configuring your firewall to work with Kerberos V5}}}}.
-
-
-\section{Replica KDCs}
-\label{\detokenize{admin/realm_config:replica-kdcs}}
-Replica KDCs provide an additional source of Kerberos ticket-granting
-services in the event of inaccessibility of the primary KDC. The
-number of replica KDCs you need and the decision of where to place them,
-both physically and logically, depends on the specifics of your
-network.
-
-Kerberos authentication requires that each client be able to contact a
-KDC. Therefore, you need to anticipate any likely reason a KDC might
-be unavailable and have a replica KDC to take up the slack.
-
-Some considerations include:
-\begin{itemize}
-\item {}
-Have at least one replica KDC as a backup, for when the primary KDC
-is down, is being upgraded, or is otherwise unavailable.
-
-\item {}
-If your network is split such that a network outage is likely to
-cause a network partition (some segment or segments of the network
-to become cut off or isolated from other segments), have a replica
-KDC accessible to each segment.
-
-\item {}
-If possible, have at least one replica KDC in a different building
-from the primary, in case of power outages, fires, or other
-localized disasters.
-
-\end{itemize}
-
-
-\section{Hostnames for KDCs}
-\label{\detokenize{admin/realm_config:kdc-hostnames}}\label{\detokenize{admin/realm_config:hostnames-for-kdcs}}
-MIT recommends that your KDCs have a predefined set of CNAME records
-(DNS hostname aliases), such as \sphinxcode{kerberos} for the primary KDC and
-\sphinxcode{kerberos-1}, \sphinxcode{kerberos-2}, … for the replica KDCs. This way,
-if you need to swap a machine, you only need to change a DNS entry,
-rather than having to change hostnames.
-
-As of MIT krb5 1.4, clients can locate a realm’s KDCs through DNS
-using SRV records (\index{RFC!RFC 2782}\sphinxhref{https://tools.ietf.org/html/rfc2782.html}{\sphinxstylestrong{RFC 2782}}), assuming the Kerberos realm name is
-also a DNS domain name. These records indicate the hostname and port
-number to contact for that service, optionally with weighting and
-prioritization. The domain name used in the SRV record name is the
-realm name. Several different Kerberos-related service names are
-used:
-\begin{description}
-\item[{\_kerberos.\_udp}] \leavevmode
-This is for contacting any KDC by UDP. This entry will be used
-the most often. Normally you should list port 88 on each of your
-KDCs.
-
-\item[{\_kerberos.\_tcp}] \leavevmode
-This is for contacting any KDC by TCP. Normally you should use
-port 88. This entry should be omitted if the KDC does not listen
-on TCP ports, as was the default prior to release 1.13.
-
-\item[{\_kerberos-master.\_udp}] \leavevmode
-This entry should refer to those KDCs, if any, that will
-immediately see password changes to the Kerberos database. If a
-user is logging in and the password appears to be incorrect, the
-client will retry with the primary KDC before failing with an
-“incorrect password” error given.
-
-If you have only one KDC, or for whatever reason there is no
-accessible KDC that would get database changes faster than the
-others, you do not need to define this entry. \_kerberos-adm.\_tcp
-This should list port 749 on your primary KDC. Support for it is
-not complete at this time, but it will eventually be used by the
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} program and related utilities. For now, you will
-also need the \sphinxstylestrong{admin\_server} variable in {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}.
-
-\item[{\_kerberos-master.\_tcp}] \leavevmode
-The corresponding TCP port for \_kerberos-master.\_udp, assuming the
-primary KDC listens on a TCP port.
-
-\item[{\_kpasswd.\_udp}] \leavevmode
-This entry should list port 464 on your primary KDC. It is used
-when a user changes her password. If this entry is not defined
-but a \_kerberos-adm.\_tcp entry is defined, the client will use the
-\_kerberos-adm.\_tcp entry with the port number changed to 464.
-
-\item[{\_kpasswd.\_tcp}] \leavevmode
-The corresponding TCP port for \_kpasswd.\_udp.
-
-\end{description}
-
-The DNS SRV specification requires that the hostnames listed be the
-canonical names, not aliases. So, for example, you might include the
-following records in your (BIND-style) zone file:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYGZdl{}ORIGIN foobar.com.
-\PYGZus{}kerberos TXT \PYGZdq{}FOOBAR.COM\PYGZdq{}
-kerberos CNAME daisy
-kerberos\PYGZhy{}1 CNAME use\PYGZhy{}the\PYGZhy{}force\PYGZhy{}luke
-kerberos\PYGZhy{}2 CNAME bunny\PYGZhy{}rabbit
-\PYGZus{}kerberos.\PYGZus{}udp SRV 0 0 88 daisy
- SRV 0 0 88 use\PYGZhy{}the\PYGZhy{}force\PYGZhy{}luke
- SRV 0 0 88 bunny\PYGZhy{}rabbit
-\PYGZus{}kerberos\PYGZhy{}master.\PYGZus{}udp SRV 0 0 88 daisy
-\PYGZus{}kerberos\PYGZhy{}adm.\PYGZus{}tcp SRV 0 0 749 daisy
-\PYGZus{}kpasswd.\PYGZus{}udp SRV 0 0 464 daisy
-\end{sphinxVerbatim}
-
-Clients can also be configured with the explicit location of services
-using the \sphinxstylestrong{kdc}, \sphinxstylestrong{master\_kdc}, \sphinxstylestrong{admin\_server}, and
-\sphinxstylestrong{kpasswd\_server} variables in the {\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} section of
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}. Even if some clients will be configured with
-explicit server locations, providing SRV records will still benefit
-unconfigured clients, and be useful for other sites.
-
-
-\section{KDC Discovery}
-\label{\detokenize{admin/realm_config:kdc-discovery}}\label{\detokenize{admin/realm_config:id1}}
-As of MIT krb5 1.15, clients can also locate KDCs in DNS through URI
-records (\index{RFC!RFC 7553}\sphinxhref{https://tools.ietf.org/html/rfc7553.html}{\sphinxstylestrong{RFC 7553}}). Limitations with the SRV record format may
-result in extra DNS queries in situations where a client must failover
-to other transport types, or find a primary server. The URI record
-can convey more information about a realm’s KDCs with a single query.
-
-The client performs a query for the following URI records:
-\begin{itemize}
-\item {}
-\sphinxcode{\_kerberos.REALM} for finding KDCs.
-
-\item {}
-\sphinxcode{\_kerberos-adm.REALM} for finding kadmin services.
-
-\item {}
-\sphinxcode{\_kpasswd.REALM} for finding password services.
-
-\end{itemize}
-
-The URI record includes a priority, weight, and a URI string that
-consists of case-insensitive colon separated fields, in the form
-\sphinxcode{scheme:{[}flags{]}:transport:residual}.
-\begin{itemize}
-\item {}
-\sphinxstyleemphasis{scheme} defines the registered URI type. It should always be
-\sphinxcode{krb5srv}.
-
-\item {}
-\sphinxstyleemphasis{flags} contains zero or more flag characters. Currently the only
-valid flag is \sphinxcode{m}, which indicates that the record is for a
-primary server.
-
-\item {}
-\sphinxstyleemphasis{transport} defines the transport type of the residual URL or
-address. Accepted values are \sphinxcode{tcp}, \sphinxcode{udp}, or \sphinxcode{kkdcp} for the
-MS-KKDCP type.
-
-\item {}
-\sphinxstyleemphasis{residual} contains the hostname, IP address, or URL to be
-contacted using the specified transport, with an optional port
-extension. The MS-KKDCP transport type uses a HTTPS URL, and can
-include a port and/or path extension.
-
-\end{itemize}
-
-An example of URI records in a zone file:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{\PYGZus{}kerberos}\PYG{o}{.}\PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{URI} \PYG{l+m+mi}{10} \PYG{l+m+mi}{1} \PYG{n}{krb5srv}\PYG{p}{:}\PYG{n}{m}\PYG{p}{:}\PYG{n}{tcp}\PYG{p}{:}\PYG{n}{kdc1}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}
- \PYG{n}{URI} \PYG{l+m+mi}{20} \PYG{l+m+mi}{1} \PYG{n}{krb5srv}\PYG{p}{:}\PYG{n}{m}\PYG{p}{:}\PYG{n}{udp}\PYG{p}{:}\PYG{n}{kdc2}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}\PYG{p}{:}\PYG{l+m+mi}{89}
- \PYG{n}{URI} \PYG{l+m+mi}{40} \PYG{l+m+mi}{1} \PYG{n}{krb5srv}\PYG{p}{:}\PYG{p}{:}\PYG{n}{udp}\PYG{p}{:}\PYG{l+m+mf}{10.10}\PYG{o}{.}\PYG{l+m+mf}{0.23}
- \PYG{n}{URI} \PYG{l+m+mi}{30} \PYG{l+m+mi}{1} \PYG{n}{krb5srv}\PYG{p}{:}\PYG{p}{:}\PYG{n}{kkdcp}\PYG{p}{:}\PYG{n}{https}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{proxy}\PYG{p}{:}\PYG{l+m+mi}{89}\PYG{o}{/}\PYG{n}{auth}
-\end{sphinxVerbatim}
-
-URI lookups are enabled by default, and can be disabled by setting
-\sphinxstylestrong{dns\_uri\_lookup} in the {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}} section of
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} to False. When enabled, URI lookups take
-precedence over SRV lookups, falling back to SRV lookups if no URI
-records are found.
-
-
-\section{Database propagation}
-\label{\detokenize{admin/realm_config:database-propagation}}\label{\detokenize{admin/realm_config:db-prop}}
-The Kerberos database resides on the primary KDC, and must be
-propagated regularly (usually by a cron job) to the replica KDCs. In
-deciding how frequently the propagation should happen, you will need
-to balance the amount of time the propagation takes against the
-maximum reasonable amount of time a user should have to wait for a
-password change to take effect.
-
-If the propagation time is longer than this maximum reasonable time
-(e.g., you have a particularly large database, you have a lot of
-replicas, or you experience frequent network delays), you may wish to
-cut down on your propagation delay by performing the propagation in
-parallel. To do this, have the primary KDC propagate the database to
-one set of replicas, and then have each of these replicas propagate
-the database to additional replicas.
-
-See also {\hyperref[\detokenize{admin/database:incr-db-prop}]{\sphinxcrossref{\DUrole{std,std-ref}{Incremental database propagation}}}}
-
-
-\chapter{Database administration}
-\label{\detokenize{admin/database::doc}}\label{\detokenize{admin/database:database-administration}}
-A Kerberos database contains all of a realm’s Kerberos principals,
-their passwords, and other administrative information about each
-principal. For the most part, you will use the {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}
-program to manipulate the Kerberos database as a whole, and the
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} program to make changes to the entries in the
-database. (One notable exception is that users will use the
-\DUrole{xref,std,std-ref}{kpasswd(1)} program to change their own passwords.) The kadmin
-program has its own command-line interface, to which you type the
-database administrating commands.
-
-{\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} provides a means to create, delete, load, or dump
-a Kerberos database. It also contains commands to roll over the
-database master key, and to stash a copy of the key so that the
-{\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} and {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} daemons can use the database
-without manual input.
-
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} provides for the maintenance of Kerberos principals,
-password policies, and service key tables (keytabs). Normally it
-operates as a network client using Kerberos authentication to
-communicate with {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}}, but there is also a variant, named
-kadmin.local, which directly accesses the Kerberos database on the
-local filesystem (or through LDAP). kadmin.local is necessary to set
-up enough of the database to be able to use the remote version.
-
-kadmin can authenticate to the admin server using the service
-principal \sphinxcode{kadmin/admin} or \sphinxcode{kadmin/HOST} (where \sphinxstyleemphasis{HOST} is the
-hostname of the admin server). If the credentials cache contains a
-ticket for either service principal and the \sphinxstylestrong{-c} ccache option is
-specified, that ticket is used to authenticate to KADM5. Otherwise,
-the \sphinxstylestrong{-p} and \sphinxstylestrong{-k} options are used to specify the client Kerberos
-principal name used to authenticate. Once kadmin has determined the
-principal name, it requests a \sphinxcode{kadmin/admin} Kerberos service ticket
-from the KDC, and uses that service ticket to authenticate to KADM5.
-
-See {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} for the available kadmin and kadmin.local
-commands and options.
-
-
-\section{kadmin options}
-\label{\detokenize{admin/database:kadmin-options}}
-You can invoke {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} or kadmin.local with any of the
-following options:
-
-\sphinxstylestrong{kadmin}
-{[}\sphinxstylestrong{-O}\textbar{}\sphinxstylestrong{-N}{]}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{]}
-{[}\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}{]}
-{[}\sphinxstylestrong{-q} \sphinxstyleemphasis{query}{]}
-{[}{[}\sphinxstylestrong{-c} \sphinxstyleemphasis{cache\_name}{]}\textbar{}{[}\sphinxstylestrong{-k} {[}\sphinxstylestrong{-t} \sphinxstyleemphasis{keytab}{]}{]}\textbar{}\sphinxstylestrong{-n}{]}
-{[}\sphinxstylestrong{-w} \sphinxstyleemphasis{password}{]}
-{[}\sphinxstylestrong{-s} \sphinxstyleemphasis{admin\_server}{[}:\sphinxstyleemphasis{port}{]}{]}
-{[}command args…{]}
-
-\sphinxstylestrong{kadmin.local}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{]}
-{[}\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}{]}
-{[}\sphinxstylestrong{-q} \sphinxstyleemphasis{query}{]}
-{[}\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}{]}
-{[}\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt} …{]}
-{[}\sphinxstylestrong{-m}{]}
-{[}\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}{]}
-{[}command args…{]}
-
-\sphinxstylestrong{OPTIONS}
-\begin{description}
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}}] \leavevmode
-Use \sphinxstyleemphasis{realm} as the default database realm.
-
-\item[{\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}}] \leavevmode
-Use \sphinxstyleemphasis{principal} to authenticate. Otherwise, kadmin will append
-\sphinxcode{/admin} to the primary principal name of the default ccache,
-the value of the \sphinxstylestrong{USER} environment variable, or the username as
-obtained with getpwuid, in order of preference.
-
-\item[{\sphinxstylestrong{-k}}] \leavevmode
-Use a keytab to decrypt the KDC response instead of prompting for
-a password. In this case, the default principal will be
-\sphinxcode{host/hostname}. If there is no keytab specified with the
-\sphinxstylestrong{-t} option, then the default keytab will be used.
-
-\item[{\sphinxstylestrong{-t} \sphinxstyleemphasis{keytab}}] \leavevmode
-Use \sphinxstyleemphasis{keytab} to decrypt the KDC response. This can only be used
-with the \sphinxstylestrong{-k} option.
-
-\item[{\sphinxstylestrong{-n}}] \leavevmode
-Requests anonymous processing. Two types of anonymous principals
-are supported. For fully anonymous Kerberos, configure PKINIT on
-the KDC and configure \sphinxstylestrong{pkinit\_anchors} in the client’s
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}. Then use the \sphinxstylestrong{-n} option with a principal
-of the form \sphinxcode{@REALM} (an empty principal name followed by the
-at-sign and a realm name). If permitted by the KDC, an anonymous
-ticket will be returned. A second form of anonymous tickets is
-supported; these realm-exposed tickets hide the identity of the
-client but not the client’s realm. For this mode, use \sphinxcode{kinit
--n} with a normal principal name. If supported by the KDC, the
-principal (but not realm) will be replaced by the anonymous
-principal. As of release 1.8, the MIT Kerberos KDC only supports
-fully anonymous operation.
-
-\item[{\sphinxstylestrong{-c} \sphinxstyleemphasis{credentials\_cache}}] \leavevmode
-Use \sphinxstyleemphasis{credentials\_cache} as the credentials cache. The cache
-should contain a service ticket for the \sphinxcode{kadmin/admin} or
-\sphinxcode{kadmin/ADMINHOST} (where \sphinxstyleemphasis{ADMINHOST} is the fully-qualified
-hostname of the admin server) service; it can be acquired with the
-\DUrole{xref,std,std-ref}{kinit(1)} program. If this option is not specified, kadmin
-requests a new service ticket from the KDC, and stores it in its
-own temporary ccache.
-
-\item[{\sphinxstylestrong{-w} \sphinxstyleemphasis{password}}] \leavevmode
-Use \sphinxstyleemphasis{password} instead of prompting for one. Use this option with
-care, as it may expose the password to other users on the system
-via the process list.
-
-\item[{\sphinxstylestrong{-q} \sphinxstyleemphasis{query}}] \leavevmode
-Perform the specified query and then exit.
-
-\item[{\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}}] \leavevmode
-Specifies the name of the KDC database. This option does not
-apply to the LDAP database module.
-
-\item[{\sphinxstylestrong{-s} \sphinxstyleemphasis{admin\_server}{[}:\sphinxstyleemphasis{port}{]}}] \leavevmode
-Specifies the admin server which kadmin should contact.
-
-\item[{\sphinxstylestrong{-m}}] \leavevmode
-If using kadmin.local, prompt for the database master password
-instead of reading it from a stash file.
-
-\item[{\sphinxstylestrong{-e} “\sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt} …”}] \leavevmode
-Sets the keysalt list to be used for any new keys created. See
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a list of possible
-values.
-
-\item[{\sphinxstylestrong{-O}}] \leavevmode
-Force use of old AUTH\_GSSAPI authentication flavor.
-
-\item[{\sphinxstylestrong{-N}}] \leavevmode
-Prevent fallback to AUTH\_GSSAPI authentication flavor.
-
-\item[{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}}] \leavevmode
-Specifies the database specific arguments. See the next section
-for supported options.
-
-\end{description}
-
-
-\section{Date Format}
-\label{\detokenize{admin/database:date-format}}
-For the supported date-time formats see \DUrole{xref,std,std-ref}{getdate} section
-in \DUrole{xref,std,std-ref}{datetime}.
-
-
-\section{Principals}
-\label{\detokenize{admin/database:principals}}
-Each entry in the Kerberos database contains a Kerberos principal and
-the attributes and policies associated with that principal.
-
-
-\subsection{Adding, modifying and deleting principals}
-\label{\detokenize{admin/database:add-mod-del-princs}}\label{\detokenize{admin/database:adding-modifying-and-deleting-principals}}
-To add a principal to the database, use the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}
-\sphinxstylestrong{add\_principal} command.
-
-To modify attributes of a principal, use the kadmin
-\sphinxstylestrong{modify\_principal} command.
-
-To delete a principal, use the kadmin \sphinxstylestrong{delete\_principal} command.
-
-
-\subsection{add\_principal}
-\label{\detokenize{admin/database:add-principal}}\begin{quote}
-
-\sphinxstylestrong{add\_principal} {[}\sphinxstyleemphasis{options}{]} \sphinxstyleemphasis{newprinc}
-\end{quote}
-
-Creates the principal \sphinxstyleemphasis{newprinc}, prompting twice for a password. If
-no password policy is specified with the \sphinxstylestrong{-policy} option, and the
-policy named \sphinxcode{default} is assigned to the principal if it exists.
-However, creating a policy named \sphinxcode{default} will not automatically
-assign this policy to previously existing principals. This policy
-assignment can be suppressed with the \sphinxstylestrong{-clearpolicy} option.
-
-This command requires the \sphinxstylestrong{add} privilege.
-
-Aliases: \sphinxstylestrong{addprinc}, \sphinxstylestrong{ank}
-
-Options:
-\begin{description}
-\item[{\sphinxstylestrong{-expire} \sphinxstyleemphasis{expdate}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) The expiration date of the principal.
-
-\item[{\sphinxstylestrong{-pwexpire} \sphinxstyleemphasis{pwexpdate}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) The password expiration date.
-
-\item[{\sphinxstylestrong{-maxlife} \sphinxstyleemphasis{maxlife}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) The maximum ticket life
-for the principal.
-
-\item[{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{maxrenewlife}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) The maximum renewable
-life of tickets for the principal.
-
-\item[{\sphinxstylestrong{-kvno} \sphinxstyleemphasis{kvno}}] \leavevmode
-The initial key version number.
-
-\item[{\sphinxstylestrong{-policy} \sphinxstyleemphasis{policy}}] \leavevmode
-The password policy used by this principal. If not specified, the
-policy \sphinxcode{default} is used if it exists (unless \sphinxstylestrong{-clearpolicy}
-is specified).
-
-\item[{\sphinxstylestrong{-clearpolicy}}] \leavevmode
-Prevents any policy from being assigned when \sphinxstylestrong{-policy} is not
-specified.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_postdated}}] \leavevmode
-\sphinxstylestrong{-allow\_postdated} prohibits this principal from obtaining
-postdated tickets. \sphinxstylestrong{+allow\_postdated} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_forwardable}}] \leavevmode
-\sphinxstylestrong{-allow\_forwardable} prohibits this principal from obtaining
-forwardable tickets. \sphinxstylestrong{+allow\_forwardable} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_renewable}}] \leavevmode
-\sphinxstylestrong{-allow\_renewable} prohibits this principal from obtaining
-renewable tickets. \sphinxstylestrong{+allow\_renewable} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_proxiable}}] \leavevmode
-\sphinxstylestrong{-allow\_proxiable} prohibits this principal from obtaining
-proxiable tickets. \sphinxstylestrong{+allow\_proxiable} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_dup\_skey}}] \leavevmode
-\sphinxstylestrong{-allow\_dup\_skey} disables user-to-user authentication for this
-principal by prohibiting others from obtaining a service ticket
-encrypted in this principal’s TGT session key.
-\sphinxstylestrong{+allow\_dup\_skey} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{requires\_preauth}}] \leavevmode
-\sphinxstylestrong{+requires\_preauth} requires this principal to preauthenticate
-before being allowed to kinit. \sphinxstylestrong{-requires\_preauth} clears this
-flag. When \sphinxstylestrong{+requires\_preauth} is set on a service principal,
-the KDC will only issue service tickets for that service principal
-if the client’s initial authentication was performed using
-preauthentication.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{requires\_hwauth}}] \leavevmode
-\sphinxstylestrong{+requires\_hwauth} requires this principal to preauthenticate
-using a hardware device before being allowed to kinit.
-\sphinxstylestrong{-requires\_hwauth} clears this flag. When \sphinxstylestrong{+requires\_hwauth} is
-set on a service principal, the KDC will only issue service tickets
-for that service principal if the client’s initial authentication was
-performed using a hardware device to preauthenticate.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{ok\_as\_delegate}}] \leavevmode
-\sphinxstylestrong{+ok\_as\_delegate} sets the \sphinxstylestrong{okay as delegate} flag on tickets
-issued with this principal as the service. Clients may use this
-flag as a hint that credentials should be delegated when
-authenticating to the service. \sphinxstylestrong{-ok\_as\_delegate} clears this
-flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_svr}}] \leavevmode
-\sphinxstylestrong{-allow\_svr} prohibits the issuance of service tickets for this
-principal. In release 1.17 and later, user-to-user service
-tickets are still allowed unless the \sphinxstylestrong{-allow\_dup\_skey} flag is
-also set. \sphinxstylestrong{+allow\_svr} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_tgs\_req}}] \leavevmode
-\sphinxstylestrong{-allow\_tgs\_req} specifies that a Ticket-Granting Service (TGS)
-request for a service ticket for this principal is not permitted.
-\sphinxstylestrong{+allow\_tgs\_req} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_tix}}] \leavevmode
-\sphinxstylestrong{-allow\_tix} forbids the issuance of any tickets for this
-principal. \sphinxstylestrong{+allow\_tix} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{needchange}}] \leavevmode
-\sphinxstylestrong{+needchange} forces a password change on the next initial
-authentication to this principal. \sphinxstylestrong{-needchange} clears this
-flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{password\_changing\_service}}] \leavevmode
-\sphinxstylestrong{+password\_changing\_service} marks this principal as a password
-change service principal.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{ok\_to\_auth\_as\_delegate}}] \leavevmode
-\sphinxstylestrong{+ok\_to\_auth\_as\_delegate} allows this principal to acquire
-forwardable tickets to itself from arbitrary users, for use with
-constrained delegation.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{no\_auth\_data\_required}}] \leavevmode
-\sphinxstylestrong{+no\_auth\_data\_required} prevents PAC or AD-SIGNEDPATH data from
-being added to service tickets for the principal.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{lockdown\_keys}}] \leavevmode
-\sphinxstylestrong{+lockdown\_keys} prevents keys for this principal from leaving
-the KDC via kadmind. The chpass and extract operations are denied
-for a principal with this attribute. The chrand operation is
-allowed, but will not return the new keys. The delete and rename
-operations are also denied if this attribute is set, in order to
-prevent a malicious administrator from replacing principals like
-krbtgt/* or kadmin/* with new principals without the attribute.
-This attribute can be set via the network protocol, but can only
-be removed using kadmin.local.
-
-\item[{\sphinxstylestrong{-randkey}}] \leavevmode
-Sets the key of the principal to a random value.
-
-\item[{\sphinxstylestrong{-nokey}}] \leavevmode
-Causes the principal to be created with no key. New in release
-1.12.
-
-\item[{\sphinxstylestrong{-pw} \sphinxstyleemphasis{password}}] \leavevmode
-Sets the password of the principal to the specified string and
-does not prompt for a password. Note: using this option in a
-shell script may expose the password to other users on the system
-via the process list.
-
-\item[{\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt},…}] \leavevmode
-Uses the specified keysalt list for setting the keys of the
-principal. See {\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a
-list of possible values.
-
-\item[{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_princ\_args}}] \leavevmode
-Indicates database-specific options. The options for the LDAP
-database module are:
-\begin{description}
-\item[{\sphinxstylestrong{-x dn=}\sphinxstyleemphasis{dn}}] \leavevmode
-Specifies the LDAP object that will contain the Kerberos
-principal being created.
-
-\item[{\sphinxstylestrong{-x linkdn=}\sphinxstyleemphasis{dn}}] \leavevmode
-Specifies the LDAP object to which the newly created Kerberos
-principal object will point.
-
-\item[{\sphinxstylestrong{-x containerdn=}\sphinxstyleemphasis{container\_dn}}] \leavevmode
-Specifies the container object under which the Kerberos
-principal is to be created.
-
-\item[{\sphinxstylestrong{-x tktpolicy=}\sphinxstyleemphasis{policy}}] \leavevmode
-Associates a ticket policy to the Kerberos principal.
-
-\end{description}
-
-\begin{sphinxadmonition}{note}{Note:}\begin{itemize}
-\item {}
-The \sphinxstylestrong{containerdn} and \sphinxstylestrong{linkdn} options cannot be
-specified with the \sphinxstylestrong{dn} option.
-
-\item {}
-If the \sphinxstyleemphasis{dn} or \sphinxstyleemphasis{containerdn} options are not specified while
-adding the principal, the principals are created under the
-principal container configured in the realm or the realm
-container.
-
-\item {}
-\sphinxstyleemphasis{dn} and \sphinxstyleemphasis{containerdn} should be within the subtrees or
-principal container configured in the realm.
-
-\end{itemize}
-\end{sphinxadmonition}
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{n}{jennifer}
-\PYG{n}{No} \PYG{n}{policy} \PYG{n}{specified} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{defaulting} \PYG{n}{to} \PYG{n}{no} \PYG{n}{policy}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{modify\_principal}
-\label{\detokenize{admin/database:modify-principal}}\begin{quote}
-
-\sphinxstylestrong{modify\_principal} {[}\sphinxstyleemphasis{options}{]} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Modifies the specified principal, changing the fields as specified.
-The options to \sphinxstylestrong{add\_principal} also apply to this command, except
-for the \sphinxstylestrong{-randkey}, \sphinxstylestrong{-pw}, and \sphinxstylestrong{-e} options. In addition, the
-option \sphinxstylestrong{-clearpolicy} will clear the current policy of a principal.
-
-This command requires the \sphinxstyleemphasis{modify} privilege.
-
-Alias: \sphinxstylestrong{modprinc}
-
-Options (in addition to the \sphinxstylestrong{addprinc} options):
-\begin{description}
-\item[{\sphinxstylestrong{-unlock}}] \leavevmode
-Unlocks a locked principal (one which has received too many failed
-authentication attempts without enough time between them according
-to its password policy) so that it can successfully authenticate.
-
-\end{description}
-
-
-\subsection{delete\_principal}
-\label{\detokenize{admin/database:delete-principal}}\begin{quote}
-
-\sphinxstylestrong{delete\_principal} {[}\sphinxstylestrong{-force}{]} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Deletes the specified \sphinxstyleemphasis{principal} from the database. This command
-prompts for deletion, unless the \sphinxstylestrong{-force} option is given.
-
-This command requires the \sphinxstylestrong{delete} privilege.
-
-Alias: \sphinxstylestrong{delprinc}
-
-
-\subsubsection{Examples}
-\label{\detokenize{admin/database:examples}}
-If you want to create a principal which is contained by a LDAP object,
-all you need to do is:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{x} \PYG{n}{dn}\PYG{o}{=}\PYG{n}{cn}\PYG{o}{=}\PYG{n}{jennifer}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{example}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{com} \PYG{n}{jennifer}
-\PYG{n}{No} \PYG{n}{policy} \PYG{n}{specified} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{defaulting} \PYG{n}{to} \PYG{n}{no} \PYG{n}{policy}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{=}\PYG{n}{Type} \PYG{n}{it} \PYG{n}{again}\PYG{o}{.}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-If you want to create a principal under a specific LDAP container and
-link to an existing LDAP object, all you need to do is:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{x} \PYG{n}{containerdn}\PYG{o}{=}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{example}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{com} \PYG{o}{\PYGZhy{}}\PYG{n}{x} \PYG{n}{linkdn}\PYG{o}{=}\PYG{n}{cn}\PYG{o}{=}\PYG{n}{david}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{example}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{com} \PYG{n}{david}
-\PYG{n}{No} \PYG{n}{policy} \PYG{n}{specified} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{david@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{defaulting} \PYG{n}{to} \PYG{n}{no} \PYG{n}{policy}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{david}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{david}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{=}\PYG{n}{Type} \PYG{n}{it} \PYG{n}{again}\PYG{o}{.}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{david@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-If you want to associate a ticket policy to a principal, all you need
-to do is:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{modprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{x} \PYG{n}{tktpolicy}\PYG{o}{=}\PYG{n}{userpolicy} \PYG{n}{david}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{david@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{modified}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-If, on the other hand, you want to set up an account that expires on
-January 1, 2000, that uses a policy called “stduser”, with a temporary
-password (which you want the user to change immediately), you would
-type the following:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{n}{david} \PYG{o}{\PYGZhy{}}\PYG{n}{expire} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{1/1/2000 12:01am EST}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{policy} \PYG{n}{stduser} \PYG{o}{+}\PYG{n}{needchange}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{david}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal}
-\PYG{n}{david}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{=} \PYG{n}{Type} \PYG{n}{it} \PYG{n}{again}\PYG{o}{.}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{david@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-If you want to delete a principal:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-kadmin: delprinc jennifer
-Are you sure you want to delete the principal
-\PYGZdq{}jennifer@ATHENA.MIT.EDU\PYGZdq{}? (yes/no): yes
-Principal \PYGZdq{}jennifer@ATHENA.MIT.EDU\PYGZdq{} deleted.
-Make sure that you have removed this principal from
-all ACLs before reusing.
-kadmin:
-\end{sphinxVerbatim}
-
-
-\subsection{Retrieving information about a principal}
-\label{\detokenize{admin/database:retrieving-information-about-a-principal}}
-To retrieve a listing of the attributes and/or policies associated
-with a principal, use the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{get\_principal} command.
-
-To generate a listing of principals, use the kadmin
-\sphinxstylestrong{list\_principals} command.
-
-
-\subsection{get\_principal}
-\label{\detokenize{admin/database:get-principal}}\begin{quote}
-
-\sphinxstylestrong{get\_principal} {[}\sphinxstylestrong{-terse}{]} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Gets the attributes of principal. With the \sphinxstylestrong{-terse} option, outputs
-fields as quoted tab-separated strings.
-
-This command requires the \sphinxstylestrong{inquire} privilege, or that the principal
-running the the program to be the same as the one being listed.
-
-Alias: \sphinxstylestrong{getprinc}
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{getprinc} \PYG{n}{tlyu}\PYG{o}{/}\PYG{n}{admin}
-\PYG{n}{Principal}\PYG{p}{:} \PYG{n}{tlyu}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{Expiration} \PYG{n}{date}\PYG{p}{:} \PYG{p}{[}\PYG{n}{never}\PYG{p}{]}
-\PYG{n}{Last} \PYG{n}{password} \PYG{n}{change}\PYG{p}{:} \PYG{n}{Mon} \PYG{n}{Aug} \PYG{l+m+mi}{12} \PYG{l+m+mi}{14}\PYG{p}{:}\PYG{l+m+mi}{16}\PYG{p}{:}\PYG{l+m+mi}{47} \PYG{n}{EDT} \PYG{l+m+mi}{1996}
-\PYG{n}{Password} \PYG{n}{expiration} \PYG{n}{date}\PYG{p}{:} \PYG{p}{[}\PYG{n}{never}\PYG{p}{]}
-\PYG{n}{Maximum} \PYG{n}{ticket} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{10}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Maximum} \PYG{n}{renewable} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{7} \PYG{n}{days} \PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Last} \PYG{n}{modified}\PYG{p}{:} \PYG{n}{Mon} \PYG{n}{Aug} \PYG{l+m+mi}{12} \PYG{l+m+mi}{14}\PYG{p}{:}\PYG{l+m+mi}{16}\PYG{p}{:}\PYG{l+m+mi}{47} \PYG{n}{EDT} \PYG{l+m+mi}{1996} \PYG{p}{(}\PYG{n}{bjaspan}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{)}
-\PYG{n}{Last} \PYG{n}{successful} \PYG{n}{authentication}\PYG{p}{:} \PYG{p}{[}\PYG{n}{never}\PYG{p}{]}
-\PYG{n}{Last} \PYG{n}{failed} \PYG{n}{authentication}\PYG{p}{:} \PYG{p}{[}\PYG{n}{never}\PYG{p}{]}
-\PYG{n}{Failed} \PYG{n}{password} \PYG{n}{attempts}\PYG{p}{:} \PYG{l+m+mi}{0}
-\PYG{n}{Number} \PYG{n}{of} \PYG{n}{keys}\PYG{p}{:} \PYG{l+m+mi}{1}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{1}\PYG{p}{,} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha384}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{192}
-\PYG{n}{MKey}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{1}
-\PYG{n}{Attributes}\PYG{p}{:}
-\PYG{n}{Policy}\PYG{p}{:} \PYG{p}{[}\PYG{n}{none}\PYG{p}{]}
-
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{getprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{terse} \PYG{n}{systest}
-\PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM} \PYG{l+m+mi}{3} \PYG{l+m+mi}{86400} \PYG{l+m+mi}{604800} \PYG{l+m+mi}{1}
-\PYG{l+m+mi}{785926535} \PYG{l+m+mi}{753241234} \PYG{l+m+mi}{785900000}
-\PYG{n}{tlyu}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM} \PYG{l+m+mi}{786100034} \PYG{l+m+mi}{0} \PYG{l+m+mi}{0}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{list\_principals}
-\label{\detokenize{admin/database:list-principals}}\begin{quote}
-
-\sphinxstylestrong{list\_principals} {[}\sphinxstyleemphasis{expression}{]}
-\end{quote}
-
-Retrieves all or some principal names. \sphinxstyleemphasis{expression} is a shell-style
-glob expression that can contain the wild-card characters \sphinxcode{?},
-\sphinxcode{*}, and \sphinxcode{{[}{]}}. All principal names matching the expression are
-printed. If no expression is provided, all principal names are
-printed. If the expression does not contain an \sphinxcode{@} character, an
-\sphinxcode{@} character followed by the local realm is appended to the
-expression.
-
-This command requires the \sphinxstylestrong{list} privilege.
-
-Alias: \sphinxstylestrong{listprincs}, \sphinxstylestrong{get\_principals}, \sphinxstylestrong{getprincs}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{listprincs} \PYG{n}{test}\PYG{o}{*}
-\PYG{n}{test3}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{test2}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{test1}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{testuser}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{Changing passwords}
-\label{\detokenize{admin/database:changing-passwords}}
-To change a principal’s password use the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}
-\sphinxstylestrong{change\_password} command.
-
-
-\subsection{change\_password}
-\label{\detokenize{admin/database:change-password}}\begin{quote}
-
-\sphinxstylestrong{change\_password} {[}\sphinxstyleemphasis{options}{]} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Changes the password of \sphinxstyleemphasis{principal}. Prompts for a new password if
-neither \sphinxstylestrong{-randkey} or \sphinxstylestrong{-pw} is specified.
-
-This command requires the \sphinxstylestrong{changepw} privilege, or that the
-principal running the program is the same as the principal being
-changed.
-
-Alias: \sphinxstylestrong{cpw}
-
-The following options are available:
-\begin{description}
-\item[{\sphinxstylestrong{-randkey}}] \leavevmode
-Sets the key of the principal to a random value.
-
-\item[{\sphinxstylestrong{-pw} \sphinxstyleemphasis{password}}] \leavevmode
-Set the password to the specified string. Using this option in a
-script may expose the password to other users on the system via
-the process list.
-
-\item[{\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt},…}] \leavevmode
-Uses the specified keysalt list for setting the keys of the
-principal. See {\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a
-list of possible values.
-
-\item[{\sphinxstylestrong{-keepold}}] \leavevmode
-Keeps the existing keys in the database. This flag is usually not
-necessary except perhaps for \sphinxcode{krbtgt} principals.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{cpw} \PYG{n}{systest}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{changed}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-Password changes through kadmin are subject to the same
-password policies as would apply to password changes through
-\DUrole{xref,std,std-ref}{kpasswd(1)}.
-\end{sphinxadmonition}
-
-
-\section{Policies}
-\label{\detokenize{admin/database:policies}}\label{\detokenize{admin/database:id1}}
-A policy is a set of rules governing passwords. Policies can dictate
-minimum and maximum password lifetimes, minimum number of characters
-and character classes a password must contain, and the number of old
-passwords kept in the database.
-
-
-\subsection{Adding, modifying and deleting policies}
-\label{\detokenize{admin/database:adding-modifying-and-deleting-policies}}
-To add a new policy, use the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{add\_policy} command.
-
-To modify attributes of a principal, use the kadmin \sphinxstylestrong{modify\_policy}
-command.
-
-To delete a policy, use the kadmin \sphinxstylestrong{delete\_policy} command.
-
-
-\subsection{add\_policy}
-\label{\detokenize{admin/database:add-policy}}\begin{quote}
-
-\sphinxstylestrong{add\_policy} {[}\sphinxstyleemphasis{options}{]} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Adds a password policy named \sphinxstyleemphasis{policy} to the database.
-
-This command requires the \sphinxstylestrong{add} privilege.
-
-Alias: \sphinxstylestrong{addpol}
-
-The following options are available:
-\begin{description}
-\item[{\sphinxstylestrong{-maxlife} \sphinxstyleemphasis{time}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the maximum
-lifetime of a password.
-
-\item[{\sphinxstylestrong{-minlife} \sphinxstyleemphasis{time}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the minimum
-lifetime of a password.
-
-\item[{\sphinxstylestrong{-minlength} \sphinxstyleemphasis{length}}] \leavevmode
-Sets the minimum length of a password.
-
-\item[{\sphinxstylestrong{-minclasses} \sphinxstyleemphasis{number}}] \leavevmode
-Sets the minimum number of character classes required in a
-password. The five character classes are lower case, upper case,
-numbers, punctuation, and whitespace/unprintable characters.
-
-\item[{\sphinxstylestrong{-history} \sphinxstyleemphasis{number}}] \leavevmode
-Sets the number of past keys kept for a principal. This option is
-not supported with the LDAP KDC database module.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/database:policy-maxfailure}}\begin{description}
-\item[{\sphinxstylestrong{-maxfailure} \sphinxstyleemphasis{maxnumber}}] \leavevmode
-Sets the number of authentication failures before the principal is
-locked. Authentication failures are only tracked for principals
-which require preauthentication. The counter of failed attempts
-resets to 0 after a successful attempt to authenticate. A
-\sphinxstyleemphasis{maxnumber} value of 0 (the default) disables lockout.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/database:policy-failurecountinterval}}\begin{description}
-\item[{\sphinxstylestrong{-failurecountinterval} \sphinxstyleemphasis{failuretime}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the allowable time
-between authentication failures. If an authentication failure
-happens after \sphinxstyleemphasis{failuretime} has elapsed since the previous
-failure, the number of authentication failures is reset to 1. A
-\sphinxstyleemphasis{failuretime} value of 0 (the default) means forever.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/database:policy-lockoutduration}}\begin{description}
-\item[{\sphinxstylestrong{-lockoutduration} \sphinxstyleemphasis{lockouttime}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the duration for
-which the principal is locked from authenticating if too many
-authentication failures occur without the specified failure count
-interval elapsing. A duration of 0 (the default) means the
-principal remains locked out until it is administratively unlocked
-with \sphinxcode{modprinc -unlock}.
-
-\item[{\sphinxstylestrong{-allowedkeysalts}}] \leavevmode
-Specifies the key/salt tuples supported for long-term keys when
-setting or changing a principal’s password/keys. See
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a list of the
-accepted values, but note that key/salt tuples must be separated
-with commas (‘,’) only. To clear the allowed key/salt policy use
-a value of ‘-‘.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{add\PYGZus{}policy} \PYG{o}{\PYGZhy{}}\PYG{n}{maxlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{2 days}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{minlength} \PYG{l+m+mi}{5} \PYG{n}{guests}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{modify\_policy}
-\label{\detokenize{admin/database:modify-policy}}\begin{quote}
-
-\sphinxstylestrong{modify\_policy} {[}\sphinxstyleemphasis{options}{]} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Modifies the password policy named \sphinxstyleemphasis{policy}. Options are as described
-for \sphinxstylestrong{add\_policy}.
-
-This command requires the \sphinxstylestrong{modify} privilege.
-
-Alias: \sphinxstylestrong{modpol}
-
-
-\subsection{delete\_policy}
-\label{\detokenize{admin/database:delete-policy}}\begin{quote}
-
-\sphinxstylestrong{delete\_policy} {[}\sphinxstylestrong{-force}{]} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Deletes the password policy named \sphinxstyleemphasis{policy}. Prompts for confirmation
-before deletion. The command will fail if the policy is in use by any
-principals.
-
-This command requires the \sphinxstylestrong{delete} privilege.
-
-Alias: \sphinxstylestrong{delpol}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-kadmin: del\PYGZus{}policy guests
-Are you sure you want to delete the policy \PYGZdq{}guests\PYGZdq{}?
-(yes/no): yes
-kadmin:
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-You must cancel the policy from \sphinxstyleemphasis{all} principals before
-deleting it. The \sphinxstyleemphasis{delete\_policy} command will fail if the policy
-is in use by any principals.
-\end{sphinxadmonition}
-
-
-\subsection{Retrieving policies}
-\label{\detokenize{admin/database:retrieving-policies}}
-To retrieve a policy, use the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{get\_policy} command.
-
-You can retrieve the list of policies with the kadmin
-\sphinxstylestrong{list\_policies} command.
-
-
-\subsection{get\_policy}
-\label{\detokenize{admin/database:get-policy}}\begin{quote}
-
-\sphinxstylestrong{get\_policy} {[} \sphinxstylestrong{-terse} {]} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Displays the values of the password policy named \sphinxstyleemphasis{policy}. With the
-\sphinxstylestrong{-terse} flag, outputs the fields as quoted strings separated by
-tabs.
-
-This command requires the \sphinxstylestrong{inquire} privilege.
-
-Alias: \sphinxstylestrong{getpol}
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{get\PYGZus{}policy} \PYG{n}{admin}
-\PYG{n}{Policy}\PYG{p}{:} \PYG{n}{admin}
-\PYG{n}{Maximum} \PYG{n}{password} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{180} \PYG{n}{days} \PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Minimum} \PYG{n}{password} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Minimum} \PYG{n}{password} \PYG{n}{length}\PYG{p}{:} \PYG{l+m+mi}{6}
-\PYG{n}{Minimum} \PYG{n}{number} \PYG{n}{of} \PYG{n}{password} \PYG{n}{character} \PYG{n}{classes}\PYG{p}{:} \PYG{l+m+mi}{2}
-\PYG{n}{Number} \PYG{n}{of} \PYG{n}{old} \PYG{n}{keys} \PYG{n}{kept}\PYG{p}{:} \PYG{l+m+mi}{5}
-\PYG{n}{Reference} \PYG{n}{count}\PYG{p}{:} \PYG{l+m+mi}{17}
-
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{get\PYGZus{}policy} \PYG{o}{\PYGZhy{}}\PYG{n}{terse} \PYG{n}{admin}
-\PYG{n}{admin} \PYG{l+m+mi}{15552000} \PYG{l+m+mi}{0} \PYG{l+m+mi}{6} \PYG{l+m+mi}{2} \PYG{l+m+mi}{5} \PYG{l+m+mi}{17}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-The “Reference count” is the number of principals using that policy.
-With the LDAP KDC database module, the reference count field is not
-meaningful.
-
-
-\subsection{list\_policies}
-\label{\detokenize{admin/database:list-policies}}\begin{quote}
-
-\sphinxstylestrong{list\_policies} {[}\sphinxstyleemphasis{expression}{]}
-\end{quote}
-
-Retrieves all or some policy names. \sphinxstyleemphasis{expression} is a shell-style
-glob expression that can contain the wild-card characters \sphinxcode{?},
-\sphinxcode{*}, and \sphinxcode{{[}{]}}. All policy names matching the expression are
-printed. If no expression is provided, all existing policy names are
-printed.
-
-This command requires the \sphinxstylestrong{list} privilege.
-
-Aliases: \sphinxstylestrong{listpols}, \sphinxstylestrong{get\_policies}, \sphinxstylestrong{getpols}.
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{listpols}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}
-\PYG{n+nb}{dict}\PYG{o}{\PYGZhy{}}\PYG{n}{only}
-\PYG{n}{once}\PYG{o}{\PYGZhy{}}\PYG{n}{a}\PYG{o}{\PYGZhy{}}\PYG{n+nb}{min}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}\PYG{o}{\PYGZhy{}}\PYG{n}{nopw}
-
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{listpols} \PYG{n}{t}\PYG{o}{*}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}\PYG{o}{\PYGZhy{}}\PYG{n}{nopw}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{Policies and principals}
-\label{\detokenize{admin/database:policies-and-principals}}
-Policies can be applied to principals as they are created by using
-the \sphinxstylestrong{-policy} flag to {\hyperref[\detokenize{admin/admin_commands/kadmin_local:add-principal}]{\sphinxcrossref{\DUrole{std,std-ref}{add\_principal}}}}. Existing principals can
-be modified by using the \sphinxstylestrong{-policy} or \sphinxstylestrong{-clearpolicy} flag to
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:modify-principal}]{\sphinxcrossref{\DUrole{std,std-ref}{modify\_principal}}}}.
-
-
-\subsection{Updating the history key}
-\label{\detokenize{admin/database:updating-history-key}}\label{\detokenize{admin/database:updating-the-history-key}}
-If a policy specifies a number of old keys kept of two or more, the
-stored old keys are encrypted in a history key, which is found in the
-key data of the \sphinxcode{kadmin/history} principal.
-
-Currently there is no support for proper rollover of the history key,
-but you can change the history key (for example, to use a better
-encryption type) at the cost of invalidating currently stored old
-keys. To change the history key, run:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{change\PYGZus{}password} \PYG{o}{\PYGZhy{}}\PYG{n}{randkey} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{history}
-\end{sphinxVerbatim}
-
-This command will fail if you specify the \sphinxstylestrong{-keepold} flag. Only one
-new history key will be created, even if you specify multiple key/salt
-combinations.
-
-In the future, we plan to migrate towards encrypting old keys in the
-master key instead of the history key, and implementing proper
-rollover support for stored old keys.
-
-
-\section{Privileges}
-\label{\detokenize{admin/database:privileges}}\label{\detokenize{admin/database:id2}}
-Administrative privileges for the Kerberos database are stored in the
-file {\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}}.
-
-\begin{sphinxadmonition}{note}{Note:}
-A common use of an admin instance is so you can grant
-separate permissions (such as administrator access to the
-Kerberos database) to a separate Kerberos principal. For
-example, the user \sphinxcode{joeadmin} might have a principal for
-his administrative use, called \sphinxcode{joeadmin/admin}. This
-way, \sphinxcode{joeadmin} would obtain \sphinxcode{joeadmin/admin} tickets
-only when he actually needs to use those permissions.
-\end{sphinxadmonition}
-
-
-\section{Operations on the Kerberos database}
-\label{\detokenize{admin/database:db-operations}}\label{\detokenize{admin/database:operations-on-the-kerberos-database}}
-The {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} command is the primary tool for administrating
-the Kerberos database.
-
-\sphinxstylestrong{kdb5\_util}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{]}
-{[}\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}{]}
-{[}\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}{]}
-{[}\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}{]}
-{[}\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}{]}
-{[}\sphinxstylestrong{-m}{]}
-{[}\sphinxstylestrong{-sf} \sphinxstyleemphasis{stashfilename}{]}
-{[}\sphinxstylestrong{-P} \sphinxstyleemphasis{password}{]}
-{[}\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}{]}
-\sphinxstyleemphasis{command} {[}\sphinxstyleemphasis{command\_options}{]}
-
-\sphinxstylestrong{OPTIONS}
-\begin{description}
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}}] \leavevmode
-specifies the Kerberos realm of the database.
-
-\item[{\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}}] \leavevmode
-specifies the name under which the principal database is stored;
-by default the database is that listed in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}. The
-password policy database and lock files are also derived from this
-value.
-
-\item[{\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}}] \leavevmode
-specifies the key type of the master key in the database. The
-default is given by the \sphinxstylestrong{master\_key\_type} variable in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}}] \leavevmode
-Specifies the version number of the master key in the database;
-the default is 1. Note that 0 is not allowed.
-
-\item[{\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}}] \leavevmode
-principal name for the master key in the database. If not
-specified, the name is determined by the \sphinxstylestrong{master\_key\_name}
-variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-m}}] \leavevmode
-specifies that the master database password should be read from
-the keyboard rather than fetched from a file on disk.
-
-\item[{\sphinxstylestrong{-sf} \sphinxstyleemphasis{stash\_file}}] \leavevmode
-specifies the stash filename of the master database password. If
-not specified, the filename is determined by the
-\sphinxstylestrong{key\_stash\_file} variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-P} \sphinxstyleemphasis{password}}] \leavevmode
-specifies the master database password. Using this option may
-expose the password to other users on the system via the process
-list.
-
-\item[{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}}] \leavevmode
-specifies database-specific options. See {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} for
-supported options.
-
-\end{description}
-
-
-\subsection{Dumping a Kerberos database to a file}
-\label{\detokenize{admin/database:dumping-a-kerberos-database-to-a-file}}
-To dump a Kerberos database into a file, use the {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}
-\sphinxstylestrong{dump} command on one of the KDCs.
-\begin{quote}
-
-\sphinxstylestrong{dump} {[}\sphinxstylestrong{-b7}\textbar{}\sphinxstylestrong{-r13}\textbar{}\sphinxstylestrong{-r18}{]}
-{[}\sphinxstylestrong{-verbose}{]} {[}\sphinxstylestrong{-mkey\_convert}{]} {[}\sphinxstylestrong{-new\_mkey\_file}
-\sphinxstyleemphasis{mkey\_file}{]} {[}\sphinxstylestrong{-rev}{]} {[}\sphinxstylestrong{-recurse}{]} {[}\sphinxstyleemphasis{filename}
-{[}\sphinxstyleemphasis{principals}…{]}{]}
-\end{quote}
-
-Dumps the current Kerberos and KADM5 database into an ASCII file. By
-default, the database is dumped in current format, “kdb5\_util
-load\_dump version 7”. If filename is not specified, or is the string
-“-“, the dump is sent to standard output. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-b7}}] \leavevmode
-causes the dump to be in the Kerberos 5 Beta 7 format (“kdb5\_util
-load\_dump version 4”). This was the dump format produced on
-releases prior to 1.2.2.
-
-\item[{\sphinxstylestrong{-r13}}] \leavevmode
-causes the dump to be in the Kerberos 5 1.3 format (“kdb5\_util
-load\_dump version 5”). This was the dump format produced on
-releases prior to 1.8.
-
-\item[{\sphinxstylestrong{-r18}}] \leavevmode
-causes the dump to be in the Kerberos 5 1.8 format (“kdb5\_util
-load\_dump version 6”). This was the dump format produced on
-releases prior to 1.11.
-
-\item[{\sphinxstylestrong{-verbose}}] \leavevmode
-causes the name of each principal and policy to be printed as it
-is dumped.
-
-\item[{\sphinxstylestrong{-mkey\_convert}}] \leavevmode
-prompts for a new master key. This new master key will be used to
-re-encrypt principal key data in the dumpfile. The principal keys
-themselves will not be changed.
-
-\item[{\sphinxstylestrong{-new\_mkey\_file} \sphinxstyleemphasis{mkey\_file}}] \leavevmode
-the filename of a stash file. The master key in this stash file
-will be used to re-encrypt the key data in the dumpfile. The key
-data in the database will not be changed.
-
-\item[{\sphinxstylestrong{-rev}}] \leavevmode
-dumps in reverse order. This may recover principals that do not
-dump normally, in cases where database corruption has occurred.
-
-\item[{\sphinxstylestrong{-recurse}}] \leavevmode
-causes the dump to walk the database recursively (btree only).
-This may recover principals that do not dump normally, in cases
-where database corruption has occurred. In cases of such
-corruption, this option will probably retrieve more principals
-than the \sphinxstylestrong{-rev} option will.
-
-\DUrole{versionmodified}{Changed in version 1.15: }Release 1.15 restored the functionality of the \sphinxstylestrong{-recurse}
-option.
-
-\DUrole{versionmodified}{Changed in version 1.5: }The \sphinxstylestrong{-recurse} option ceased working until release 1.15,
-doing a normal dump instead of a recursive traversal.
-
-\end{description}
-
-
-\subsubsection{Examples}
-\label{\detokenize{admin/database:id3}}
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{dump} \PYG{n}{dumpfile}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kbd5\PYGZus{}util} \PYG{n}{dump} \PYG{o}{\PYGZhy{}}\PYG{n}{verbose} \PYG{n}{dumpfile}
-\PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{history}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{K}\PYG{o}{/}\PYG{n}{M}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{changepw}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-If you specify which principals to dump, you must use the full
-principal, as in the following example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{dump} \PYG{o}{\PYGZhy{}}\PYG{n}{verbose} \PYG{n}{dumpfile} \PYG{n}{K}\PYG{o}{/}\PYG{n}{M}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{K}\PYG{o}{/}\PYG{n}{M}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-Otherwise, the principals will not match those in the database and
-will not be dumped:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{dump} \PYG{o}{\PYGZhy{}}\PYG{n}{verbose} \PYG{n}{dumpfile} \PYG{n}{K}\PYG{o}{/}\PYG{n}{M} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-If you do not specify a dump file, kdb5\_util will dump the database to
-the standard output.
-
-
-\subsection{Restoring a Kerberos database from a dump file}
-\label{\detokenize{admin/database:restore-from-dump}}\label{\detokenize{admin/database:restoring-a-kerberos-database-from-a-dump-file}}
-To restore a Kerberos database dump from a file, use the
-{\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{load} command on one of the KDCs.
-\begin{quote}
-
-\sphinxstylestrong{load} {[}\sphinxstylestrong{-b7}\textbar{}\sphinxstylestrong{-r13}\textbar{}\sphinxstylestrong{-r18}{]} {[}\sphinxstylestrong{-hash}{]}
-{[}\sphinxstylestrong{-verbose}{]} {[}\sphinxstylestrong{-update}{]} \sphinxstyleemphasis{filename}
-\end{quote}
-
-Loads a database dump from the named file into the named database. If
-no option is given to determine the format of the dump file, the
-format is detected automatically and handled as appropriate. Unless
-the \sphinxstylestrong{-update} option is given, \sphinxstylestrong{load} creates a new database
-containing only the data in the dump file, overwriting the contents of
-any previously existing database. Note that when using the LDAP KDC
-database module, the \sphinxstylestrong{-update} flag is required.
-
-Options:
-\begin{description}
-\item[{\sphinxstylestrong{-b7}}] \leavevmode
-requires the database to be in the Kerberos 5 Beta 7 format
-(“kdb5\_util load\_dump version 4”). This was the dump format
-produced on releases prior to 1.2.2.
-
-\item[{\sphinxstylestrong{-r13}}] \leavevmode
-requires the database to be in Kerberos 5 1.3 format (“kdb5\_util
-load\_dump version 5”). This was the dump format produced on
-releases prior to 1.8.
-
-\item[{\sphinxstylestrong{-r18}}] \leavevmode
-requires the database to be in Kerberos 5 1.8 format (“kdb5\_util
-load\_dump version 6”). This was the dump format produced on
-releases prior to 1.11.
-
-\item[{\sphinxstylestrong{-hash}}] \leavevmode
-stores the database in hash format, if using the DB2 database
-type. If this option is not specified, the database will be
-stored in btree format. This option is not recommended, as
-databases stored in hash format are known to corrupt data and lose
-principals.
-
-\item[{\sphinxstylestrong{-verbose}}] \leavevmode
-causes the name of each principal and policy to be printed as it
-is dumped.
-
-\item[{\sphinxstylestrong{-update}}] \leavevmode
-records from the dump file are added to or updated in the existing
-database. Otherwise, a new database is created containing only
-what is in the dump file and the old one destroyed upon successful
-completion.
-
-\end{description}
-
-
-\subsubsection{Examples}
-\label{\detokenize{admin/database:id4}}
-To dump a single principal and later load it, updating the database:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{dump} \PYG{n}{dumpfile} \PYG{n}{principal}\PYG{n+nd}{@REALM}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}util} \PYG{n}{load} \PYG{o}{\PYGZhy{}}\PYG{n}{update} \PYG{n}{dumpfile}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-If the database file exists, and the \sphinxstyleemphasis{-update} flag was not
-given, \sphinxstyleemphasis{kdb5\_util} will overwrite the existing database.
-\end{sphinxadmonition}
-
-\begin{sphinxadmonition}{note}{Note:}
-Using kdb5\_util to dump and reload the principal database is
-only necessary when upgrading from versions of krb5 prior
-to 1.2.0—newer versions will use the existing database as-is.
-\end{sphinxadmonition}
-
-
-\subsection{Creating a stash file}
-\label{\detokenize{admin/database:create-stash}}\label{\detokenize{admin/database:creating-a-stash-file}}
-A stash file allows a KDC to authenticate itself to the database
-utilities, such as {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}}, {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}}, and
-{\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}.
-
-To create a stash file, use the {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{stash} command.
-\begin{quote}
-
-\sphinxstylestrong{stash} {[}\sphinxstylestrong{-f} \sphinxstyleemphasis{keyfile}{]}
-\end{quote}
-
-Stores the master principal’s keys in a stash file. The \sphinxstylestrong{-f}
-argument can be used to override the \sphinxstyleemphasis{keyfile} specified in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-
-\subsubsection{Example}
-\label{\detokenize{admin/database:example}}\begin{quote}
-
-shell\% kdb5\_util stash
-kdb5\_util: Cannot find/read stored master key while reading master key
-kdb5\_util: Warning: proceeding without master key
-Enter KDC database master key: \textless{}= Type the KDC database master password.
-shell\%
-\end{quote}
-
-If you do not specify a stash file, kdb5\_util will stash the key in
-the file specified in your {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} file.
-
-
-\subsection{Creating and destroying a Kerberos database}
-\label{\detokenize{admin/database:creating-and-destroying-a-kerberos-database}}
-If you need to create a new Kerberos database, use the
-{\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{create} command.
-\begin{quote}
-
-\sphinxstylestrong{create} {[}\sphinxstylestrong{-s}{]}
-\end{quote}
-
-Creates a new database. If the \sphinxstylestrong{-s} option is specified, the stash
-file is also created. This command fails if the database already
-exists. If the command is successful, the database is opened just as
-if it had already existed when the program was first run.
-
-If you need to destroy the current Kerberos database, use the
-{\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{destroy} command.
-\begin{quote}
-
-\sphinxstylestrong{destroy} {[}\sphinxstylestrong{-f}{]}
-\end{quote}
-
-Destroys the database, first overwriting the disk sectors and then
-unlinking the files, after prompting the user for confirmation. With
-the \sphinxstylestrong{-f} argument, does not prompt the user.
-
-
-\subsubsection{Examples}
-\label{\detokenize{admin/database:id5}}
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-shell\PYGZpc{} kdb5\PYGZus{}util \PYGZhy{}r ATHENA.MIT.EDU create \PYGZhy{}s
-Loading random data
-Initializing database \PYGZsq{}/usr/local/var/krb5kdc/principal\PYGZsq{} for realm \PYGZsq{}ATHENA.MIT.EDU\PYGZsq{},
-master key name \PYGZsq{}K/M@ATHENA.MIT.EDU\PYGZsq{}
-You will be prompted for the database Master Password.
-It is important that you NOT FORGET this password.
-Enter KDC database master key: \PYGZlt{}= Type the master password.
-Re\PYGZhy{}enter KDC database master key to verify: \PYGZlt{}= Type it again.
-shell\PYGZpc{}
-
-shell\PYGZpc{} kdb5\PYGZus{}util \PYGZhy{}r ATHENA.MIT.EDU destroy
-Deleting KDC database stored in \PYGZsq{}/usr/local/var/krb5kdc/principal\PYGZsq{}, are you sure?
-(type \PYGZsq{}yes\PYGZsq{} to confirm)? \PYGZlt{}= yes
-OK, deleting database \PYGZsq{}/usr/local/var/krb5kdc/principal\PYGZsq{}...
-** Database \PYGZsq{}/usr/local/var/krb5kdc/principal\PYGZsq{} destroyed.
-shell\PYGZpc{}
-\end{sphinxVerbatim}
-
-
-\subsection{Updating the master key}
-\label{\detokenize{admin/database:updating-master-key}}\label{\detokenize{admin/database:updating-the-master-key}}
-Starting with release 1.7, {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} allows the master key
-to be changed using a rollover process, with minimal loss of
-availability. To roll over the master key, follow these steps:
-\begin{enumerate}
-\item {}
-On the primary KDC, run \sphinxcode{kdb5\_util list\_mkeys} to view the
-current master key version number (KVNO). If you have never rolled
-over the master key before, this will likely be version 1:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYGZdl{} kdb5\PYGZus{}util list\PYGZus{}mkeys
-Master keys for Principal: K/M@KRBTEST.COM
-KVNO: 1, Enctype: aes256\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha384\PYGZhy{}192, Active on: Thu Jan 01 00:00:00 UTC 1970 *
-\end{sphinxVerbatim}
-
-\item {}
-On the primary KDC, run \sphinxcode{kdb5\_util use\_mkey 1} to ensure that a
-master key activation list is present in the database. This step
-is unnecessary in release 1.11.4 or later, or if the database was
-initially created with release 1.7 or later.
-
-\item {}
-On the primary KDC, run \sphinxcode{kdb5\_util add\_mkey -s} to create a new
-master key and write it to the stash file. Enter a secure password
-when prompted. If this is the first time you are changing the
-master key, the new key will have version 2. The new master key
-will not be used until you make it active.
-
-\item {}
-Propagate the database to all replica KDCs, either manually or by
-waiting until the next scheduled propagation. If you do not have
-any replica KDCs, you can skip this and the next step.
-
-\item {}
-On each replica KDC, run \sphinxcode{kdb5\_util list\_mkeys} to verify that
-the new master key is present, and then \sphinxcode{kdb5\_util stash} to
-write the new master key to the replica KDC’s stash file.
-
-\item {}
-On the primary KDC, run \sphinxcode{kdb5\_util use\_mkey 2} to begin using the
-new master key. Replace \sphinxcode{2} with the version of the new master
-key, as appropriate. You can optionally specify a date for the new
-master key to become active; by default, it will become active
-immediately. Prior to release 1.12, {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} must be
-restarted for this change to take full effect.
-
-\item {}
-On the primary KDC, run \sphinxcode{kdb5\_util update\_princ\_encryption}.
-This command will iterate over the database and re-encrypt all keys
-in the new master key. If the database is large and uses DB2, the
-primary KDC will become unavailable while this command runs, but
-clients should fail over to replica KDCs (if any are present)
-during this time period. In release 1.13 and later, you can
-instead run \sphinxcode{kdb5\_util -x unlockiter update\_princ\_encryption} to
-use unlocked iteration; this variant will take longer, but will
-keep the database available to the KDC and kadmind while it runs.
-
-\item {}
-Wait until the above changes have propagated to all replica KDCs
-and until all running KDC and kadmind processes have serviced
-requests using updated principal entries.
-
-\item {}
-On the primary KDC, run \sphinxcode{kdb5\_util purge\_mkeys} to clean up the
-old master key.
-
-\end{enumerate}
-
-
-\section{Operations on the LDAP database}
-\label{\detokenize{admin/database:operations-on-the-ldap-database}}\label{\detokenize{admin/database:ops-on-ldap}}
-The {\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} is the primary tool for administrating
-the Kerberos LDAP database. It allows an administrator to manage
-realms, Kerberos services (KDC and Admin Server) and ticket policies.
-
-\sphinxstylestrong{kdb5\_ldap\_util}
-{[}\sphinxstylestrong{-D} \sphinxstyleemphasis{user\_dn} {[}\sphinxstylestrong{-w} \sphinxstyleemphasis{passwd}{]}{]}
-{[}\sphinxstylestrong{-H} \sphinxstyleemphasis{ldapuri}{]}
-\sphinxstylestrong{command}
-{[}\sphinxstyleemphasis{command\_options}{]}
-
-\sphinxstylestrong{OPTIONS}
-\begin{description}
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}}] \leavevmode
-Specifies the realm to be operated on.
-
-\item[{\sphinxstylestrong{-D} \sphinxstyleemphasis{user\_dn}}] \leavevmode
-Specifies the Distinguished Name (DN) of the user who has
-sufficient rights to perform the operation on the LDAP server.
-
-\item[{\sphinxstylestrong{-w} \sphinxstyleemphasis{passwd}}] \leavevmode
-Specifies the password of \sphinxstyleemphasis{user\_dn}. This option is not
-recommended.
-
-\item[{\sphinxstylestrong{-H} \sphinxstyleemphasis{ldapuri}}] \leavevmode
-Specifies the URI of the LDAP server.
-
-\end{description}
-
-By default, kdb5\_ldap\_util operates on the default realm (as specified
-in {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}) and connects and authenticates to the LDAP
-server in the same manner as :ref:kadmind(8){}` would given the
-parameters in {\hyperref[\detokenize{admin/conf_files/kdc_conf:dbdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbdefaults{]}}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-
-\subsection{Creating a Kerberos realm}
-\label{\detokenize{admin/database:creating-a-kerberos-realm}}\label{\detokenize{admin/database:ldap-create-realm}}
-If you need to create a new realm, use the {\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}}
-\sphinxstylestrong{create} command as follows.
-\begin{quote}
-
-\sphinxstylestrong{create}
-{[}\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}{]}
-{[}\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}{]}
-{[}\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn}{]}
-{[}\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}{]}
-{[}\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}{]}
-{[}\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}{]}
-{[}\sphinxstylestrong{-m\textbar{}-P} \sphinxstyleemphasis{password}\textbar{}\sphinxstylestrong{-sf} \sphinxstyleemphasis{stashfilename}{]}
-{[}\sphinxstylestrong{-s}{]}
-{[}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{]}
-{[}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{]}
-{[}\sphinxstyleemphasis{ticket\_flags}{]}
-\end{quote}
-
-Creates realm in directory. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}}] \leavevmode
-Specifies the list of subtrees containing the principals of a
-realm. The list contains the DNs of the subtree objects separated
-by colon (\sphinxcode{:}).
-
-\item[{\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}}] \leavevmode
-Specifies the scope for searching the principals under the
-subtree. The possible values are 1 or one (one level), 2 or sub
-(subtrees).
-
-\item[{\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn}}] \leavevmode
-Specifies the DN of the container object in which the principals
-of a realm will be created. If the container reference is not
-configured for a realm, the principals will be created in the
-realm container.
-
-\item[{\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}}] \leavevmode
-Specifies the key type of the master key in the database. The
-default is given by the \sphinxstylestrong{master\_key\_type} variable in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}}] \leavevmode
-Specifies the version number of the master key in the database;
-the default is 1. Note that 0 is not allowed.
-
-\item[{\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}}] \leavevmode
-Specifies the principal name for the master key in the database.
-If not specified, the name is determined by the
-\sphinxstylestrong{master\_key\_name} variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-m}}] \leavevmode
-Specifies that the master database password should be read from
-the TTY rather than fetched from a file on the disk.
-
-\item[{\sphinxstylestrong{-P} \sphinxstyleemphasis{password}}] \leavevmode
-Specifies the master database password. This option is not
-recommended.
-
-\item[{\sphinxstylestrong{-sf} \sphinxstyleemphasis{stashfilename}}] \leavevmode
-Specifies the stash file of the master database password.
-
-\item[{\sphinxstylestrong{-s}}] \leavevmode
-Specifies that the stash file is to be created.
-
-\item[{\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum ticket life for
-principals in this realm.
-
-\item[{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum renewable life of
-tickets for principals in this realm.
-
-\item[{\sphinxstyleemphasis{ticket\_flags}}] \leavevmode
-Specifies global ticket flags for the realm. Allowable flags are
-documented in the description of the \sphinxstylestrong{add\_principal} command in
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{create} \PYG{o}{\PYGZhy{}}\PYG{n}{subtrees} \PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{sscope} \PYG{n}{SUB}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Initializing} \PYG{n}{database} \PYG{k}{for} \PYG{n}{realm} \PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{ATHENA.MIT.EDU}\PYG{l+s+s1}{\PYGZsq{}}
-\PYG{n}{You} \PYG{n}{will} \PYG{n}{be} \PYG{n}{prompted} \PYG{k}{for} \PYG{n}{the} \PYG{n}{database} \PYG{n}{Master} \PYG{n}{Password}\PYG{o}{.}
-\PYG{n}{It} \PYG{o+ow}{is} \PYG{n}{important} \PYG{n}{that} \PYG{n}{you} \PYG{n}{NOT} \PYG{n}{FORGET} \PYG{n}{this} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{KDC} \PYG{n}{database} \PYG{n}{master} \PYG{n}{key}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{KDC} \PYG{n}{database} \PYG{n}{master} \PYG{n}{key} \PYG{n}{to} \PYG{n}{verify}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{Modifying a Kerberos realm}
-\label{\detokenize{admin/database:ldap-mod-realm}}\label{\detokenize{admin/database:modifying-a-kerberos-realm}}
-If you need to modify a realm, use the {\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}}
-\sphinxstylestrong{modify} command as follows.
-\begin{quote}
-
-\sphinxstylestrong{modify}
-{[}\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}{]}
-{[}\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}{]}
-{[}\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn}{]}
-{[}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{]}
-{[}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{]}
-{[}\sphinxstyleemphasis{ticket\_flags}{]}
-\end{quote}
-
-Modifies the attributes of a realm. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}}] \leavevmode
-Specifies the list of subtrees containing the principals of a
-realm. The list contains the DNs of the subtree objects separated
-by colon (\sphinxcode{:}). This list replaces the existing list.
-
-\item[{\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}}] \leavevmode
-Specifies the scope for searching the principals under the
-subtrees. The possible values are 1 or one (one level), 2 or sub
-(subtrees).
-
-\item[{\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn} Specifies the DN of the}] \leavevmode
-container object in which the principals of a realm will be
-created.
-
-\item[{\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum ticket life for
-principals in this realm.
-
-\item[{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum renewable life of
-tickets for principals in this realm.
-
-\item[{\sphinxstyleemphasis{ticket\_flags}}] \leavevmode
-Specifies global ticket flags for the realm. Allowable flags are
-documented in the description of the \sphinxstylestrong{add\_principal} command in
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H}
- \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n}{modify} \PYG{o}{+}\PYG{n}{requires\PYGZus{}preauth}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-
-\subsection{Destroying a Kerberos realm}
-\label{\detokenize{admin/database:destroying-a-kerberos-realm}}
-If you need to destroy a Kerberos realm, use the
-{\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{destroy} command as follows.
-\begin{quote}
-
-\sphinxstylestrong{destroy} {[}\sphinxstylestrong{-f}{]}
-\end{quote}
-
-Destroys an existing realm. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-f}}] \leavevmode
-If specified, will not prompt the user for confirmation.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-shell\PYGZpc{} kdb5\PYGZus{}ldap\PYGZus{}util \PYGZhy{}r ATHENA.MIT.EDU \PYGZhy{}D cn=admin,o=org \PYGZhy{}H
- ldaps://ldap\PYGZhy{}server1.mit.edu destroy
-Password for \PYGZdq{}cn=admin,o=org\PYGZdq{}:
-Deleting KDC database of \PYGZsq{}ATHENA.MIT.EDU\PYGZsq{}, are you sure?
-(type \PYGZsq{}yes\PYGZsq{} to confirm)? yes
-OK, deleting database of \PYGZsq{}ATHENA.MIT.EDU\PYGZsq{}...
-shell\PYGZpc{}
-\end{sphinxVerbatim}
-
-
-\subsection{Retrieving information about a Kerberos realm}
-\label{\detokenize{admin/database:retrieving-information-about-a-kerberos-realm}}
-If you need to display the attributes of a realm, use the
-{\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{view} command as follows.
-\begin{quote}
-
-\sphinxstylestrong{view}
-\end{quote}
-
-Displays the attributes of a realm.
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{view}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Realm} \PYG{n}{Name}\PYG{p}{:} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{Subtree}\PYG{p}{:} \PYG{n}{ou}\PYG{o}{=}\PYG{n}{users}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org}
-\PYG{n}{Subtree}\PYG{p}{:} \PYG{n}{ou}\PYG{o}{=}\PYG{n}{servers}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org}
-\PYG{n}{SearchScope}\PYG{p}{:} \PYG{n}{ONE}
-\PYG{n}{Maximum} \PYG{n}{ticket} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{01}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Maximum} \PYG{n}{renewable} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{10}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Ticket} \PYG{n}{flags}\PYG{p}{:} \PYG{n}{DISALLOW\PYGZus{}FORWARDABLE} \PYG{n}{REQUIRES\PYGZus{}PWCHANGE}
-\end{sphinxVerbatim}
-
-
-\subsection{Listing available Kerberos realms}
-\label{\detokenize{admin/database:listing-available-kerberos-realms}}
-If you need to display the list of the realms, use the
-{\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{list} command as follows.
-\begin{quote}
-
-\sphinxstylestrong{list}
-\end{quote}
-
-Lists the names of realms under the container.
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H}
- \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n+nb}{list}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{OPENLDAP}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{MEDIA}\PYG{o}{\PYGZhy{}}\PYG{n}{LAB}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-
-\subsection{Stashing service object’s password}
-\label{\detokenize{admin/database:stashing-service-object-s-password}}\label{\detokenize{admin/database:stash-ldap}}
-The {\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{stashsrvpw} command allows an
-administrator to store the password of service object in a file. The
-KDC and Administration server uses this password to authenticate to
-the LDAP server.
-\begin{quote}
-
-\sphinxstylestrong{stashsrvpw}
-{[}\sphinxstylestrong{-f} \sphinxstyleemphasis{filename}{]}
-\sphinxstyleemphasis{name}
-\end{quote}
-
-Allows an administrator to store the password for service object in a
-file so that KDC and Administration server can use it to authenticate
-to the LDAP server. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-f} \sphinxstyleemphasis{filename}}] \leavevmode
-Specifies the complete path of the service password file. By
-default, \sphinxcode{/usr/local/var/service\_passwd} is used.
-
-\item[{\sphinxstyleemphasis{name}}] \leavevmode
-Specifies the name of the object whose password is to be stored.
-If {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} or {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} are configured for
-simple binding, this should be the distinguished name it will
-use as given by the \sphinxstylestrong{ldap\_kdc\_dn} or \sphinxstylestrong{ldap\_kadmind\_dn}
-variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}. If the KDC or kadmind is
-configured for SASL binding, this should be the authentication
-name it will use as given by the \sphinxstylestrong{ldap\_kdc\_sasl\_authcid} or
-\sphinxstylestrong{ldap\_kadmind\_sasl\_authcid} variable.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{n}{stashsrvpw} \PYG{o}{\PYGZhy{}}\PYG{n}{f} \PYG{o}{/}\PYG{n}{home}\PYG{o}{/}\PYG{n}{andrew}\PYG{o}{/}\PYG{n}{conf\PYGZus{}keyfile}
- \PYG{n}{cn}\PYG{o}{=}\PYG{n}{service}\PYG{o}{\PYGZhy{}}\PYG{n}{kdc}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=service\PYGZhy{}kdc,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=service\PYGZhy{}kdc,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{Ticket Policy operations}
-\label{\detokenize{admin/database:ticket-policy-operations}}
-
-\subsubsection{Creating a Ticket Policy}
-\label{\detokenize{admin/database:creating-a-ticket-policy}}
-To create a new ticket policy in directory , use the
-{\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{create\_policy} command. Ticket policy
-objects are created under the realm container.
-\begin{quote}
-
-\sphinxstylestrong{create\_policy}
-{[}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{]}
-{[}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{]}
-{[}\sphinxstyleemphasis{ticket\_flags}{]}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Creates a ticket policy in the directory. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum ticket life for
-principals.
-
-\item[{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum renewable life of
-tickets for principals.
-
-\item[{\sphinxstyleemphasis{ticket\_flags}}] \leavevmode
-Specifies the ticket flags. If this option is not specified, by
-default, no restriction will be set by the policy. Allowable
-flags are documented in the description of the \sphinxstylestrong{add\_principal}
-command in {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}.
-
-\item[{\sphinxstyleemphasis{policy\_name}}] \leavevmode
-Specifies the name of the ticket policy.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{create\PYGZus{}policy} \PYG{o}{\PYGZhy{}}\PYG{n}{maxtktlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{1 day}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{o}{\PYGZhy{}}\PYG{n}{maxrenewlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{1 week}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{allow\PYGZus{}postdated} \PYG{o}{+}\PYG{n}{needchange}
- \PYG{o}{\PYGZhy{}}\PYG{n}{allow\PYGZus{}forwardable} \PYG{n}{tktpolicy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsubsection{Modifying a Ticket Policy}
-\label{\detokenize{admin/database:modifying-a-ticket-policy}}
-To modify a ticket policy in directory, use the
-{\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{modify\_policy} command.
-\begin{quote}
-
-\sphinxstylestrong{modify\_policy}
-{[}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{]}
-{[}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{]}
-{[}\sphinxstyleemphasis{ticket\_flags}{]}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Modifies the attributes of a ticket policy. Options are same as for
-\sphinxstylestrong{create\_policy}.
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H}
- \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{modify\PYGZus{}policy}
- \PYG{o}{\PYGZhy{}}\PYG{n}{maxtktlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{60 minutes}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{maxrenewlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{10 hours}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{o}{+}\PYG{n}{allow\PYGZus{}postdated} \PYG{o}{\PYGZhy{}}\PYG{n}{requires\PYGZus{}preauth} \PYG{n}{tktpolicy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsubsection{Retrieving Information About a Ticket Policy}
-\label{\detokenize{admin/database:retrieving-information-about-a-ticket-policy}}
-To display the attributes of a ticket policy, use the
-{\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{view\_policy} command.
-\begin{quote}
-
-\sphinxstylestrong{view\_policy}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Displays the attributes of the named ticket policy.
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{view\PYGZus{}policy} \PYG{n}{tktpolicy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Ticket} \PYG{n}{policy}\PYG{p}{:} \PYG{n}{tktpolicy}
-\PYG{n}{Maximum} \PYG{n}{ticket} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{01}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Maximum} \PYG{n}{renewable} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{10}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Ticket} \PYG{n}{flags}\PYG{p}{:} \PYG{n}{DISALLOW\PYGZus{}FORWARDABLE} \PYG{n}{REQUIRES\PYGZus{}PWCHANGE}
-\end{sphinxVerbatim}
-
-
-\subsubsection{Destroying a Ticket Policy}
-\label{\detokenize{admin/database:destroying-a-ticket-policy}}
-To destroy an existing ticket policy, use the {\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}}
-\sphinxstylestrong{destroy\_policy} command.
-\begin{quote}
-
-\sphinxstylestrong{destroy\_policy}
-{[}\sphinxstylestrong{-force}{]}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Destroys an existing ticket policy. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-force}}] \leavevmode
-Forces the deletion of the policy object. If not specified, the
-user will be prompted for confirmation before deleting the policy.
-
-\item[{\sphinxstyleemphasis{policy\_name}}] \leavevmode
-Specifies the name of the ticket policy.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-kdb5\PYGZus{}ldap\PYGZus{}util \PYGZhy{}D cn=admin,o=org \PYGZhy{}H ldaps://ldap\PYGZhy{}server1.mit.edu
- \PYGZhy{}r ATHENA.MIT.EDU destroy\PYGZus{}policy tktpolicy
-Password for \PYGZdq{}cn=admin,o=org\PYGZdq{}:
-This will delete the policy object \PYGZsq{}tktpolicy\PYGZsq{}, are you sure?
-(type \PYGZsq{}yes\PYGZsq{} to confirm)? yes
-** policy object \PYGZsq{}tktpolicy\PYGZsq{} deleted.
-\end{sphinxVerbatim}
-
-
-\subsubsection{Listing available Ticket Policies}
-\label{\detokenize{admin/database:listing-available-ticket-policies}}
-To list the name of ticket policies in a realm, use the
-{\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} \sphinxstylestrong{list\_policy} command.
-\begin{quote}
-
-\sphinxstylestrong{list\_policy}
-\end{quote}
-
-Lists ticket policies.
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{list\PYGZus{}policy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{tktpolicy}
-\PYG{n}{tmppolicy}
-\PYG{n}{userpolicy}
-\end{sphinxVerbatim}
-
-
-\section{Cross-realm authentication}
-\label{\detokenize{admin/database:cross-realm-authentication}}\label{\detokenize{admin/database:xrealm-authn}}
-In order for a KDC in one realm to authenticate Kerberos users in a
-different realm, it must share a key with the KDC in the other realm.
-In both databases, there must be krbtgt service principals for both realms.
-For example, if you need to do cross-realm authentication between the realms
-\sphinxcode{ATHENA.MIT.EDU} and \sphinxcode{EXAMPLE.COM}, you would need to add the
-principals \sphinxcode{krbtgt/EXAMPLE.COM@ATHENA.MIT.EDU} and
-\sphinxcode{krbtgt/ATHENA.MIT.EDU@EXAMPLE.COM} to both databases.
-These principals must all have the same passwords, key version
-numbers, and encryption types; this may require explicitly setting
-the key version number with the \sphinxstylestrong{-kvno} option.
-
-In the ATHENA.MIT.EDU and EXAMPLE.COM cross-realm case, the administrators
-would run the following commands on the KDCs in both realms:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}\PYG{p}{:} \PYG{n}{kadmin}\PYG{o}{.}\PYG{n}{local} \PYG{o}{\PYGZhy{}}\PYG{n}{e} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{aes256\PYGZhy{}cts:normal}\PYG{l+s+s2}{\PYGZdq{}}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{requires\PYGZus{}preauth} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{requires\PYGZus{}preauth} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-Even if most principals in a realm are generally created
-with the \sphinxstylestrong{requires\_preauth} flag enabled, this flag is not
-desirable on cross-realm authentication keys because doing
-so makes it impossible to disable preauthentication on a
-service-by-service basis. Disabling it as in the example
-above is recommended.
-\end{sphinxadmonition}
-
-\begin{sphinxadmonition}{note}{Note:}
-It is very important that these principals have good
-passwords. MIT recommends that TGT principal passwords be
-at least 26 characters of random ASCII text.
-\end{sphinxadmonition}
-
-
-\section{Changing the krbtgt key}
-\label{\detokenize{admin/database:changing-krbtgt-key}}\label{\detokenize{admin/database:changing-the-krbtgt-key}}
-A Kerberos Ticket Granting Ticket (TGT) is a service ticket for the
-principal \sphinxcode{krbtgt/REALM}. The key for this principal is created
-when the Kerberos database is initialized and need not be changed.
-However, it will only have the encryption types supported by the KDC
-at the time of the initial database creation. To allow use of newer
-encryption types for the TGT, this key has to be changed.
-
-Changing this key using the normal {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}
-\sphinxstylestrong{change\_password} command would invalidate any previously issued
-TGTs. Therefore, when changing this key, normally one should use the
-\sphinxstylestrong{-keepold} flag to change\_password to retain the previous key in the
-database as well as the new key. For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{change\PYGZus{}password} \PYG{o}{\PYGZhy{}}\PYG{n}{randkey} \PYG{o}{\PYGZhy{}}\PYG{n}{keepold} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{warning}{Warning:}
-After issuing this command, the old key is still valid
-and is still vulnerable to (for instance) brute force
-attacks. To completely retire an old key or encryption
-type, run the kadmin \sphinxstylestrong{purgekeys} command to delete keys
-with older kvnos, ideally first making sure that all
-tickets issued with the old keys have expired.
-\end{sphinxadmonition}
-
-Only the first krbtgt key of the newest key version is used to encrypt
-ticket-granting tickets. However, the set of encryption types present
-in the krbtgt keys is used by default to determine the session key
-types supported by the krbtgt service (see
-{\hyperref[\detokenize{admin/enctypes:session-key-selection}]{\sphinxcrossref{\DUrole{std,std-ref}{Session key selection}}}}). Because non-MIT Kerberos clients
-sometimes send a limited set of encryption types when making AS
-requests, it can be important for the krbtgt service to support
-multiple encryption types. This can be accomplished by giving the
-krbtgt principal multiple keys, which is usually as simple as not
-specifying any \sphinxstylestrong{-e} option when changing the krbtgt key, or by
-setting the \sphinxstylestrong{session\_enctypes} string attribute on the krbtgt
-principal (see {\hyperref[\detokenize{admin/admin_commands/kadmin_local:set-string}]{\sphinxcrossref{\DUrole{std,std-ref}{set\_string}}}}).
-
-Due to a bug in releases 1.8 through 1.13, renewed and forwarded
-tickets may not work if the original ticket was obtained prior to a
-krbtgt key change and the modified ticket is obtained afterwards.
-Upgrading the KDC to release 1.14 or later will correct this bug.
-
-
-\section{Incremental database propagation}
-\label{\detokenize{admin/database:incremental-database-propagation}}\label{\detokenize{admin/database:incr-db-prop}}
-
-\subsection{Overview}
-\label{\detokenize{admin/database:overview}}
-At some very large sites, dumping and transmitting the database can
-take more time than is desirable for changes to propagate from the
-primary KDC to the replica KDCs. The incremental propagation support
-added in the 1.7 release is intended to address this.
-
-With incremental propagation enabled, all programs on the primary KDC
-that change the database also write information about the changes to
-an “update log” file, maintained as a circular buffer of a certain
-size. A process on each replica KDC connects to a service on the
-primary KDC (currently implemented in the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} server) and
-periodically requests the changes that have been made since the last
-check. By default, this check is done every two minutes.
-
-Incremental propagation uses the following entries in the per-realm
-data in the KDC config file (See {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}):
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|T|}
-\hline
-
-iprop\_enable
-&
-\sphinxstyleemphasis{boolean}
-&
-If \sphinxstyleemphasis{true}, then incremental propagation is enabled, and (as noted below) normal kprop propagation is disabled. The default is \sphinxstyleemphasis{false}.
-\\
-\hline
-iprop\_master\_ulogsize
-&
-\sphinxstyleemphasis{integer}
-&
-Indicates the number of entries that should be retained in the update log. The default is 1000; the maximum number is 2500.
-\\
-\hline
-iprop\_replica\_poll
-&
-\sphinxstyleemphasis{time interval}
-&
-Indicates how often the replica should poll the primary KDC for changes to the database. The default is two minutes.
-\\
-\hline
-iprop\_port
-&
-\sphinxstyleemphasis{integer}
-&
-Specifies the port number to be used for incremental propagation. This is required in both primary and replica configuration files.
-\\
-\hline
-iprop\_resync\_timeout
-&
-\sphinxstyleemphasis{integer}
-&
-Specifies the number of seconds to wait for a full propagation to complete. This is optional on replica configurations. Defaults to 300 seconds (5 minutes).
-\\
-\hline
-iprop\_logfile
-&
-\sphinxstyleemphasis{file name}
-&
-Specifies where the update log file for the realm database is to be stored. The default is to use the \sphinxstyleemphasis{database\_name} entry from the realms section of the config file {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}, with \sphinxstyleemphasis{.ulog} appended. (NOTE: If database\_name isn’t specified in the realms section, perhaps because the LDAP database back end is being used, or the file name is specified in the \sphinxstyleemphasis{dbmodules} section, then the hard-coded default for \sphinxstyleemphasis{database\_name} is used. Determination of the \sphinxstyleemphasis{iprop\_logfile} default value will not use values from the \sphinxstyleemphasis{dbmodules} section.)
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-Both primary and replica sides must have a principal named
-\sphinxcode{kiprop/hostname} (where \sphinxstyleemphasis{hostname} is the lowercase,
-fully-qualified, canonical name for the host) registered in the
-Kerberos database, and have keys for that principal stored in the
-default keytab file ({\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{DEFKTNAME}}}}). The \sphinxcode{kiprop/hostname} principal may
-have been created automatically for the primary KDC, but it must
-always be created for replica KDCs.
-
-On the primary KDC side, the \sphinxcode{kiprop/hostname} principal must be
-listed in the kadmind ACL file {\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}}, and given the
-\sphinxstylestrong{p} privilege (see {\hyperref[\detokenize{admin/database:privileges}]{\sphinxcrossref{\DUrole{std,std-ref}{Privileges}}}}).
-
-On the replica KDC side, {\hyperref[\detokenize{admin/admin_commands/kpropd:kpropd-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kpropd}}}} should be run. When
-incremental propagation is enabled, it will connect to the kadmind on
-the primary KDC and start requesting updates.
-
-The normal kprop mechanism is disabled by the incremental propagation
-support. However, if the replica has been unable to fetch changes
-from the primary KDC for too long (network problems, perhaps), the log
-on the primary may wrap around and overwrite some of the updates that
-the replica has not yet retrieved. In this case, the replica will
-instruct the primary KDC to dump the current database out to a file
-and invoke a one-time kprop propagation, with special options to also
-convey the point in the update log at which the replica should resume
-fetching incremental updates. Thus, all the keytab and ACL setup
-previously described for kprop propagation is still needed.
-
-If an environment has a large number of replicas, it may be desirable
-to arrange them in a hierarchy instead of having the primary serve
-updates to every replica. To do this, run \sphinxcode{kadmind -proponly} on
-each intermediate replica, and \sphinxcode{kpropd -A upstreamhostname} on
-downstream replicas to direct each one to the appropriate upstream
-replica.
-
-There are several known restrictions in the current implementation:
-\begin{itemize}
-\item {}
-The incremental update protocol does not transport changes to policy
-objects. Any policy changes on the primary will result in full
-resyncs to all replicas.
-
-\item {}
-The replica’s KDB module must support locking; it cannot be using the
-LDAP KDB module.
-
-\item {}
-The primary and replica must be able to initiate TCP connections in
-both directions, without an intervening NAT.
-
-\end{itemize}
-
-
-\subsection{Sun/MIT incremental propagation differences}
-\label{\detokenize{admin/database:sun-mit-incremental-propagation-differences}}
-Sun donated the original code for supporting incremental database
-propagation to MIT. Some changes have been made in the MIT source
-tree that will be visible to administrators. (These notes are based
-on Sun’s patches. Changes to Sun’s implementation since then may not
-be reflected here.)
-
-The Sun config file support looks for \sphinxcode{sunw\_dbprop\_enable},
-\sphinxcode{sunw\_dbprop\_master\_ulogsize}, and \sphinxcode{sunw\_dbprop\_slave\_poll}.
-
-The incremental propagation service is implemented as an ONC RPC
-service. In the Sun implementation, the service is registered with
-rpcbind (also known as portmapper) and the client looks up the port
-number to contact. In the MIT implementation, where interaction with
-some modern versions of rpcbind doesn’t always work well, the port
-number must be specified in the config file on both the primary and
-replica sides.
-
-The Sun implementation hard-codes pathnames in \sphinxcode{/var/krb5} for the
-update log and the per-replica kprop dump files. In the MIT
-implementation, the pathname for the update log is specified in the
-config file, and the per-replica dump files are stored in
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/replica\_datatrans\_hostname}.
-
-
-\chapter{Database types}
-\label{\detokenize{admin/dbtypes::doc}}\label{\detokenize{admin/dbtypes:database-types}}
-A Kerberos database can be implemented with one of three built-in
-database providers, called KDB modules. Software which incorporates
-the MIT krb5 KDC may also provide its own KDB module. The following
-subsections describe the three built-in KDB modules and the
-configuration specific to them.
-
-The database type can be configured with the \sphinxstylestrong{db\_library} variable
-in the {\hyperref[\detokenize{admin/conf_files/kdc_conf:dbmodules}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbmodules{]}}}}} subsection for the realm. For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{dbmodules}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{db\PYGZus{}library} \PYG{o}{=} \PYG{n}{db2}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-If the \sphinxcode{ATHENA.MIT.EDU} realm subsection contains a
-\sphinxstylestrong{database\_module} setting, then the subsection within
-\sphinxcode{{[}dbmodules{]}} should use that name instead of \sphinxcode{ATHENA.MIT.EDU}.
-
-To transition from one database type to another, stop the
-{\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} service, use \sphinxcode{kdb5\_util dump} to create a dump
-file, change the \sphinxstylestrong{db\_library} value and set any appropriate
-configuration for the new database type, and use \sphinxcode{kdb5\_util load} to
-create and populate the new database. If the new database type is
-LDAP, create the new database using \sphinxcode{kdb5\_ldap\_util} and populate it
-from the dump file using \sphinxcode{kdb5\_util load -update}. Then restart the
-{\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} and {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} services.
-
-
-\section{Berkeley database module (db2)}
-\label{\detokenize{admin/dbtypes:berkeley-database-module-db2}}
-The default KDB module is \sphinxcode{db2}, which uses a version of the
-Berkeley DB library. It creates four files based on the database
-pathname. If the pathname ends with \sphinxcode{principal} then the four files
-are:
-\begin{itemize}
-\item {}
-\sphinxcode{principal}, containing principal entry data
-
-\item {}
-\sphinxcode{principal.ok}, a lock file for the principal database
-
-\item {}
-\sphinxcode{principal.kadm5}, containing policy object data
-
-\item {}
-\sphinxcode{principal.kadm5.lock}, a lock file for the policy database
-
-\end{itemize}
-
-For large databases, the {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{dump} command (perhaps
-invoked by {\hyperref[\detokenize{admin/admin_commands/kprop:kprop-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop}}}} or by {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} for incremental
-propagation) may cause {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} to stop for a noticeable
-period of time while it iterates over the database. This delay can be
-avoided by disabling account lockout features so that the KDC does not
-perform database writes (see {\hyperref[\detokenize{admin/lockout:disable-lockout}]{\sphinxcrossref{\DUrole{std,std-ref}{KDC performance and account lockout}}}}). Alternatively,
-a slower form of iteration can be enabled by setting the
-\sphinxstylestrong{unlockiter} variable to \sphinxcode{true}. For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{dbmodules}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{db\PYGZus{}library} \PYG{o}{=} \PYG{n}{db2}
- \PYG{n}{unlockiter} \PYG{o}{=} \PYG{n}{true}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-In rare cases, a power failure or other unclean system shutdown may
-cause inconsistencies in the internal pointers within a database file,
-such that \sphinxcode{kdb5\_util dump} cannot retrieve all principal entries in
-the database. In this situation, it may be possible to retrieve all
-of the principal data by running \sphinxcode{kdb5\_util dump -recurse} to
-iterate over the database using the tree pointers instead of the
-iteration pointers. Running \sphinxcode{kdb5\_util dump -rev} to iterate over
-the database backwards may also retrieve some of the data which is not
-retrieved by a normal dump operation.
-
-
-\section{Lightning Memory-Mapped Database module (klmdb)}
-\label{\detokenize{admin/dbtypes:lightning-memory-mapped-database-module-klmdb}}
-The klmdb module was added in release 1.17. It uses the LMDB library,
-and may offer better performance and reliability than the db2 module.
-It creates four files based on the database pathname. If the pathname
-ends with \sphinxcode{principal}, then the four files are:
-\begin{itemize}
-\item {}
-\sphinxcode{principal.mdb}, containing policy object data and most principal
-entry data
-
-\item {}
-\sphinxcode{principal.mdb-lock}, a lock file for the primary database
-
-\item {}
-\sphinxcode{principal.lockout.mdb}, containing the account lockout attributes
-(last successful authentication time, last failed authentication
-time, and number of failed attempts) for each principal entry
-
-\item {}
-\sphinxcode{principal.lockout.mdb-lock}, a lock file for the lockout database
-
-\end{itemize}
-
-Separating out the lockout attributes ensures that the KDC will never
-block on an administrative operation such as a database dump or load.
-It also allows the KDC to operate without write access to the primary
-database. If both account lockout features are disabled (see
-{\hyperref[\detokenize{admin/lockout:disable-lockout}]{\sphinxcrossref{\DUrole{std,std-ref}{KDC performance and account lockout}}}}), the lockout database files will be created
-but will not subsequently be opened, and the account lockout
-attributes will always have zero values.
-
-Because LMDB creates a memory map to the database files, it requires a
-configured memory map size which also determines the maximum size of
-the database. This size is applied equally to the two databases, so
-twice the configured size will be consumed in the process address
-space; this is primarily a limitation on 32-bit platforms. The
-default value of 128 megabytes should be sufficient for several
-hundred thousand principal entries. If the limit is reached, kadmin
-operations will fail and the error message “Environment mapsize limit
-reached” will appear in the kadmind log file. In this case, the
-\sphinxstylestrong{mapsize} variable can be used to increase the map size. The
-following example sets the map size to 512 megabytes:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{dbmodules}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{db\PYGZus{}library} \PYG{o}{=} \PYG{n}{klmdb}
- \PYG{n}{mapsize} \PYG{o}{=} \PYG{l+m+mi}{512}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-LMDB has a configurable maximum number of readers. The default value
-of 128 should be sufficient for most deployments. If you are going to
-use a large number of KDC worker processes, it may be necessary to set
-the \sphinxstylestrong{max\_readers} variable to a larger number.
-
-By default, LMDB synchronizes database files to disk after each write
-transaction to ensure durability in the case of an unclean system
-shutdown. The klmdb module always turns synchronization off for the
-lockout database to ensure reasonable KDC performance, but leaves it
-on for the primary database. If high throughput for administrative
-operations (including password changes) is required, the \sphinxstylestrong{nosync}
-variable can be set to “true” to disable synchronization for the
-primary database.
-
-The klmdb module does not support explicit locking with the
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{lock} command.
-
-
-\section{LDAP module (kldap)}
-\label{\detokenize{admin/dbtypes:ldap-module-kldap}}
-The kldap module stores principal and policy data using an LDAP
-server. To use it you must configure an LDAP server to use the
-Kerberos schema. See {\hyperref[\detokenize{admin/conf_ldap:conf-ldap}]{\sphinxcrossref{\DUrole{std,std-ref}{Configuring Kerberos with OpenLDAP back-end}}}} for details.
-
-Because {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} is single-threaded, latency in LDAP database
-accesses may limit KDC operation throughput. If the LDAP server is
-located on the same server host as the KDC and accessed through an
-\sphinxcode{ldapi://} URL, latency should be minimal. If this is not possible,
-consider starting multiple KDC worker processes with the
-{\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} \sphinxstylestrong{-w} option to enable concurrent processing of KDC
-requests.
-
-The kldap module does not support explicit locking with the
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{lock} command.
-
-
-\chapter{Account lockout}
-\label{\detokenize{admin/lockout:lockout}}\label{\detokenize{admin/lockout::doc}}\label{\detokenize{admin/lockout:account-lockout}}
-As of release 1.8, the KDC can be configured to lock out principals
-after a number of failed authentication attempts within a period of
-time. Account lockout can make it more difficult to attack a
-principal’s password by brute force, but also makes it easy for an
-attacker to deny access to a principal.
-
-
-\section{Configuring account lockout}
-\label{\detokenize{admin/lockout:configuring-account-lockout}}
-Account lockout only works for principals with the
-\sphinxstylestrong{+requires\_preauth} flag set. Without this flag, the KDC cannot
-know whether or not a client successfully decrypted the ticket it
-issued. It is also important to set the \sphinxstylestrong{-allow\_svr} flag on a
-principal to protect its password from an off-line dictionary attack
-through a TGS request. You can set these flags on a principal with
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} as follows:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{modprinc} \PYG{o}{+}\PYG{n}{requires\PYGZus{}preauth} \PYG{o}{\PYGZhy{}}\PYG{n}{allow\PYGZus{}svr} \PYG{n}{PRINCNAME}
-\end{sphinxVerbatim}
-
-Account lockout parameters are configured via {\hyperref[\detokenize{admin/database:policies}]{\sphinxcrossref{\DUrole{std,std-ref}{policy objects}}}}. There may be an existing policy associated with user
-principals (such as the “default” policy), or you may need to create a
-new one and associate it with each user principal.
-
-The policy parameters related to account lockout are:
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{admin/database:policy-maxfailure}]{\sphinxcrossref{\DUrole{std,std-ref}{maxfailure}}}}: the number of failed attempts
-before the principal is locked out
-
-\item {}
-{\hyperref[\detokenize{admin/database:policy-failurecountinterval}]{\sphinxcrossref{\DUrole{std,std-ref}{failurecountinterval}}}}: the
-allowable interval between failed attempts
-
-\item {}
-{\hyperref[\detokenize{admin/database:policy-lockoutduration}]{\sphinxcrossref{\DUrole{std,std-ref}{lockoutduration}}}}: the amount of time
-a principal is locked out for
-
-\end{itemize}
-
-Here is an example of setting these parameters on a new policy and
-associating it with a principal:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addpol} \PYG{o}{\PYGZhy{}}\PYG{n}{maxfailure} \PYG{l+m+mi}{10} \PYG{o}{\PYGZhy{}}\PYG{n}{failurecountinterval} \PYG{l+m+mi}{180}
- \PYG{o}{\PYGZhy{}}\PYG{n}{lockoutduration} \PYG{l+m+mi}{60} \PYG{n}{lockout\PYGZus{}policy}
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{modprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{policy} \PYG{n}{lockout\PYGZus{}policy} \PYG{n}{PRINCNAME}
-\end{sphinxVerbatim}
-
-
-\section{Testing account lockout}
-\label{\detokenize{admin/lockout:testing-account-lockout}}
-To test that account lockout is working, try authenticating as the
-principal (hopefully not one that might be in use) multiple times with
-the wrong password. For instance, if \sphinxstylestrong{maxfailure} is set to 2, you
-might see:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYGZdl{} kinit user
-Password for user@KRBTEST.COM:
-kinit: Password incorrect while getting initial credentials
-\PYGZdl{} kinit user
-Password for user@KRBTEST.COM:
-kinit: Password incorrect while getting initial credentials
-\PYGZdl{} kinit user
-kinit: Client\PYGZsq{}s credentials have been revoked while getting initial credentials
-\end{sphinxVerbatim}
-
-
-\section{Account lockout principal state}
-\label{\detokenize{admin/lockout:account-lockout-principal-state}}
-A principal entry keeps three pieces of state related to account
-lockout:
-\begin{itemize}
-\item {}
-The time of last successful authentication
-
-\item {}
-The time of last failed authentication
-
-\item {}
-A counter of failed attempts
-
-\end{itemize}
-
-The time of last successful authentication is not actually needed for
-the account lockout system to function, but may be of administrative
-interest. These fields can be observed with the \sphinxstylestrong{getprinc} kadmin
-command. For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{getprinc} \PYG{n}{user}
-\PYG{n}{Principal}\PYG{p}{:} \PYG{n}{user}\PYG{n+nd}{@KRBTEST}\PYG{o}{.}\PYG{n}{COM}
-\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}
-\PYG{n}{Last} \PYG{n}{successful} \PYG{n}{authentication}\PYG{p}{:} \PYG{p}{[}\PYG{n}{never}\PYG{p}{]}
-\PYG{n}{Last} \PYG{n}{failed} \PYG{n}{authentication}\PYG{p}{:} \PYG{n}{Mon} \PYG{n}{Dec} \PYG{l+m+mi}{03} \PYG{l+m+mi}{12}\PYG{p}{:}\PYG{l+m+mi}{30}\PYG{p}{:}\PYG{l+m+mi}{33} \PYG{n}{EST} \PYG{l+m+mi}{2012}
-\PYG{n}{Failed} \PYG{n}{password} \PYG{n}{attempts}\PYG{p}{:} \PYG{l+m+mi}{2}
-\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-A principal which has been locked out can be administratively unlocked
-with the \sphinxstylestrong{-unlock} option to the \sphinxstylestrong{modprinc} kadmin command:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{modprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{unlock} \PYG{n}{PRINCNAME}
-\end{sphinxVerbatim}
-
-This command will reset the number of failed attempts to 0.
-
-
-\section{KDC replication and account lockout}
-\label{\detokenize{admin/lockout:kdc-replication-and-account-lockout}}
-The account lockout state of a principal is not replicated by either
-traditional {\hyperref[\detokenize{admin/admin_commands/kprop:kprop-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop}}}} or incremental propagation. Because of
-this, the number of attempts an attacker can make within a time period
-is multiplied by the number of KDCs. For instance, if the
-\sphinxstylestrong{maxfailure} parameter on a policy is 10 and there are four KDCs in
-the environment (a primary and three replicas), an attacker could make
-as many as 40 attempts before the principal is locked out on all four
-KDCs.
-
-An administrative unlock is propagated from the primary to the replica
-KDCs during the next propagation. Propagation of an administrative
-unlock will cause the counter of failed attempts on each replica to
-reset to 1 on the next failure.
-
-If a KDC environment uses a replication strategy other than kprop or
-incremental propagation, such as the LDAP KDB module with multi-master
-LDAP replication, then account lockout state may be replicated between
-KDCs and the concerns of this section may not apply.
-
-
-\section{KDC performance and account lockout}
-\label{\detokenize{admin/lockout:kdc-performance-and-account-lockout}}\label{\detokenize{admin/lockout:disable-lockout}}
-In order to fully track account lockout state, the KDC must write to
-the the database on each successful and failed authentication.
-Writing to the database is generally more expensive than reading from
-it, so these writes may have a significant impact on KDC performance.
-As of release 1.9, it is possible to turn off account lockout state
-tracking in order to improve performance, by setting the
-\sphinxstylestrong{disable\_last\_success} and \sphinxstylestrong{disable\_lockout} variables in the
-database module subsection of {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}. For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{dbmodules}\PYG{p}{]}
- \PYG{n}{DB} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{disable\PYGZus{}last\PYGZus{}success} \PYG{o}{=} \PYG{n}{true}
- \PYG{n}{disable\PYGZus{}lockout} \PYG{o}{=} \PYG{n}{true}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-Of the two variables, setting \sphinxstylestrong{disable\_last\_success} will usually
-have the largest positive impact on performance, and will still allow
-account lockout policies to operate. However, it will make it
-impossible to observe the last successful authentication time with
-kadmin.
-
-
-\section{KDC setup and account lockout}
-\label{\detokenize{admin/lockout:kdc-setup-and-account-lockout}}
-To update the account lockout state on principals, the KDC must be
-able to write to the principal database. For the DB2 module, no
-special setup is required. For the LDAP module, the KDC DN must be
-granted write access to the principal objects. If the KDC DN has only
-read access, account lockout will not function.
-
-
-\chapter{Configuring Kerberos with OpenLDAP back-end}
-\label{\detokenize{admin/conf_ldap:conf-ldap}}\label{\detokenize{admin/conf_ldap::doc}}\label{\detokenize{admin/conf_ldap:configuring-kerberos-with-openldap-back-end}}\begin{enumerate}
-\item {}
-Make sure the LDAP server is using local authentication
-(\sphinxcode{ldapi://}) or TLS (\sphinxcode{ldaps}). See
-\sphinxurl{https://www.openldap.org/doc/admin/tls.html} for instructions on
-configuring TLS support in OpenLDAP.
-
-\item {}
-Add the Kerberos schema file to the LDAP Server using the OpenLDAP
-LDIF file from the krb5 source directory
-(\sphinxcode{src/plugins/kdb/ldap/libkdb\_ldap/kerberos.openldap.ldif}).
-The following example uses local authentication:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{ldapadd} \PYG{o}{\PYGZhy{}}\PYG{n}{Y} \PYG{n}{EXTERNAL} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldapi}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{o}{/} \PYG{o}{\PYGZhy{}}\PYG{n}{f} \PYG{o}{/}\PYG{n}{path}\PYG{o}{/}\PYG{n}{to}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{.}\PYG{n}{openldap}\PYG{o}{.}\PYG{n}{ldif}
-\end{sphinxVerbatim}
-
-\item {}
-Choose DNs for the {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} and {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} servers
-to bind to the LDAP server, and create them if necessary. Specify
-these DNs with the \sphinxstylestrong{ldap\_kdc\_dn} and \sphinxstylestrong{ldap\_kadmind\_dn}
-directives in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}. The kadmind DN will also be
-used for administrative commands such as {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}.
-
-Alternatively, you may configure krb5kdc and kadmind to use SASL
-authentication to access the LDAP server; see the {\hyperref[\detokenize{admin/conf_files/kdc_conf:dbmodules}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbmodules{]}}}}}
-relations \sphinxstylestrong{ldap\_kdc\_sasl\_mech} and similar.
-
-\item {}
-Specify a location for the LDAP service password file by setting
-\sphinxstylestrong{ldap\_service\_password\_file}. Use \sphinxcode{kdb5\_ldap\_util stashsrvpw}
-to stash passwords for the KDC and kadmind DNs chosen above. For
-example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{n}{stashsrvpw} \PYG{o}{\PYGZhy{}}\PYG{n}{f} \PYG{o}{/}\PYG{n}{path}\PYG{o}{/}\PYG{n}{to}\PYG{o}{/}\PYG{n}{service}\PYG{o}{.}\PYG{n}{keyfile} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{krbadmin}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{example}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{com}
-\end{sphinxVerbatim}
-
-Skip this step if you are using SASL authentication and the
-mechanism does not require a password.
-
-\item {}
-Choose a DN for the global Kerberos container entry (but do not
-create the entry at this time). Specify this DN with the
-\sphinxstylestrong{ldap\_kerberos\_container\_dn} directive in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-Realm container entries will be created underneath this DN.
-Principal entries may exist either underneath the realm container
-(the default) or in separate trees referenced from the realm
-container.
-
-\item {}
-Configure the LDAP server ACLs to enable the KDC and kadmin server
-DNs to read and write the Kerberos data. If
-\sphinxstylestrong{disable\_last\_success} and \sphinxstylestrong{disable\_lockout} are both set to
-true in the {\hyperref[\detokenize{admin/conf_files/kdc_conf:dbmodules}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbmodules{]}}}}} subsection for the realm, then the
-KDC DN only requires read access to the Kerberos data.
-
-Sample access control information:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{access} \PYG{n}{to} \PYG{n}{dn}\PYG{o}{.}\PYG{n}{base}\PYG{o}{=}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{n}{by} \PYG{o}{*} \PYG{n}{read}
-
-\PYG{n}{access} \PYG{n}{to} \PYG{n}{dn}\PYG{o}{.}\PYG{n}{base}\PYG{o}{=}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=Subschema}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{n}{by} \PYG{o}{*} \PYG{n}{read}
-
-\PYG{c+c1}{\PYGZsh{} Provide access to the realm container.}
-\PYG{n}{access} \PYG{n}{to} \PYG{n}{dn}\PYG{o}{.}\PYG{n}{subtree}\PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=EXAMPLE.COM,cn=krbcontainer,dc=example,dc=com}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{n}{by} \PYG{n}{dn}\PYG{o}{.}\PYG{n}{exact}\PYG{o}{=}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=kdc\PYGZhy{}service,dc=example,dc=com}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{write}
- \PYG{n}{by} \PYG{n}{dn}\PYG{o}{.}\PYG{n}{exact}\PYG{o}{=}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=adm\PYGZhy{}service,dc=example,dc=com}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{write}
- \PYG{n}{by} \PYG{o}{*} \PYG{n}{none}
-
-\PYG{c+c1}{\PYGZsh{} Provide access to principals, if not underneath the realm container.}
-\PYG{n}{access} \PYG{n}{to} \PYG{n}{dn}\PYG{o}{.}\PYG{n}{subtree}\PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{ou=users,dc=example,dc=com}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{n}{by} \PYG{n}{dn}\PYG{o}{.}\PYG{n}{exact}\PYG{o}{=}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=kdc\PYGZhy{}service,dc=example,dc=com}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{write}
- \PYG{n}{by} \PYG{n}{dn}\PYG{o}{.}\PYG{n}{exact}\PYG{o}{=}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=adm\PYGZhy{}service,dc=example,dc=com}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{write}
- \PYG{n}{by} \PYG{o}{*} \PYG{n}{none}
-
-\PYG{n}{access} \PYG{n}{to} \PYG{o}{*}
- \PYG{n}{by} \PYG{o}{*} \PYG{n}{read}
-\end{sphinxVerbatim}
-
-If the locations of the container and principals or the DNs of the
-service objects for a realm are changed then this information
-should be updated.
-
-\item {}
-In {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}, make sure the following relations are set
-in the {\hyperref[\detokenize{admin/conf_files/kdc_conf:dbmodules}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbmodules{]}}}}} subsection for the realm:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-db\PYGZus{}library (set to {}`{}`kldap{}`{}`)
-ldap\PYGZus{}kerberos\PYGZus{}container\PYGZus{}dn
-ldap\PYGZus{}kdc\PYGZus{}dn
-ldap\PYGZus{}kadmind\PYGZus{}dn
-ldap\PYGZus{}service\PYGZus{}password\PYGZus{}file
-ldap\PYGZus{}servers
-\end{sphinxVerbatim}
-
-\item {}
-Create the realm using {\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}} (see
-{\hyperref[\detokenize{admin/database:ldap-create-realm}]{\sphinxcrossref{\DUrole{std,std-ref}{Creating a Kerberos realm}}}}):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{n}{create} \PYG{o}{\PYGZhy{}}\PYG{n}{subtrees} \PYG{n}{ou}\PYG{o}{=}\PYG{n}{users}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{example}\PYG{p}{,}\PYG{n}{dc}\PYG{o}{=}\PYG{n}{com} \PYG{o}{\PYGZhy{}}\PYG{n}{s}
-\end{sphinxVerbatim}
-
-Use the \sphinxstylestrong{-subtrees} option if the principals are to exist in a
-separate subtree from the realm container. Before executing the
-command, make sure that the subtree mentioned above
-\sphinxcode{(ou=users,dc=example,dc=com)} exists. If the principals will
-exist underneath the realm container, omit the \sphinxstylestrong{-subtrees} option
-and do not worry about creating the principal subtree.
-
-For more information, refer to the section {\hyperref[\detokenize{admin/database:ops-on-ldap}]{\sphinxcrossref{\DUrole{std,std-ref}{Operations on the LDAP database}}}}.
-
-The realm object is created under the
-\sphinxstylestrong{ldap\_kerberos\_container\_dn} specified in the configuration
-file. This operation will also create the Kerberos container, if
-not present already. This container can be used to store
-information related to multiple realms.
-
-\item {}
-Add an \sphinxcode{eq} index for \sphinxcode{krbPrincipalName} to speed up principal
-lookup operations. See
-\sphinxurl{https://www.openldap.org/doc/admin/tuning.html\#Indexes} for
-details.
-
-\end{enumerate}
-
-With the LDAP back end it is possible to provide aliases for principal
-entries. Currently we provide no administrative utilities for
-creating aliases, so it must be done by direct manipulation of the
-LDAP entries.
-
-An entry with aliases contains multiple values of the
-\sphinxstyleemphasis{krbPrincipalName} attribute. Since LDAP attribute values are not
-ordered, it is necessary to specify which principal name is canonical,
-by using the \sphinxstyleemphasis{krbCanonicalName} attribute. Therefore, to create
-aliases for an entry, first set the \sphinxstyleemphasis{krbCanonicalName} attribute of
-the entry to the canonical principal name (which should be identical
-to the pre-existing \sphinxstyleemphasis{krbPrincipalName} value), and then add additional
-\sphinxstyleemphasis{krbPrincipalName} attributes for the aliases.
-
-Principal aliases are only returned by the KDC when the client
-requests canonicalization. Canonicalization is normally requested for
-service principals; for client principals, an explicit flag is often
-required (e.g., \sphinxcode{kinit -C}) and canonicalization is only performed
-for initial ticket requests.
-
-
-\chapter{Application servers}
-\label{\detokenize{admin/appl_servers::doc}}\label{\detokenize{admin/appl_servers:application-servers}}
-If you need to install the Kerberos V5 programs on an application
-server, please refer to the Kerberos V5 Installation Guide. Once you
-have installed the software, you need to add that host to the Kerberos
-database (see {\hyperref[\detokenize{admin/database:add-mod-del-princs}]{\sphinxcrossref{\DUrole{std,std-ref}{Adding, modifying and deleting principals}}}}), and generate a keytab for
-that host, that contains the host’s key. You also need to make sure
-the host’s clock is within your maximum clock skew of the KDCs.
-
-
-\section{Keytabs}
-\label{\detokenize{admin/appl_servers:keytabs}}
-A keytab is a host’s copy of its own keylist, which is analogous to a
-user’s password. An application server that needs to authenticate
-itself to the KDC has to have a keytab that contains its own principal
-and key. Just as it is important for users to protect their
-passwords, it is equally important for hosts to protect their keytabs.
-You should always store keytab files on local disk, and make them
-readable only by root, and you should never send a keytab file over a
-network in the clear. Ideally, you should run the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}
-command to extract a keytab on the host on which the keytab is to
-reside.
-
-
-\subsection{Adding principals to keytabs}
-\label{\detokenize{admin/appl_servers:adding-principals-to-keytabs}}\label{\detokenize{admin/appl_servers:add-princ-kt}}
-To generate a keytab, or to add a principal to an existing keytab, use
-the \sphinxstylestrong{ktadd} command from kadmin.
-
-
-\subsection{ktadd}
-\label{\detokenize{admin/appl_servers:ktadd}}\begin{quote}
-
-\begin{DUlineblock}{0em}
-\item[] \sphinxstylestrong{ktadd} {[}options{]} \sphinxstyleemphasis{principal}
-\item[] \sphinxstylestrong{ktadd} {[}options{]} \sphinxstylestrong{-glob} \sphinxstyleemphasis{princ-exp}
-\end{DUlineblock}
-\end{quote}
-
-Adds a \sphinxstyleemphasis{principal}, or all principals matching \sphinxstyleemphasis{princ-exp}, to a
-keytab file. Each principal’s keys are randomized in the process.
-The rules for \sphinxstyleemphasis{princ-exp} are described in the \sphinxstylestrong{list\_principals}
-command.
-
-This command requires the \sphinxstylestrong{inquire} and \sphinxstylestrong{changepw} privileges.
-With the \sphinxstylestrong{-glob} form, it also requires the \sphinxstylestrong{list} privilege.
-
-The options are:
-\begin{description}
-\item[{\sphinxstylestrong{-k{[}eytab{]}} \sphinxstyleemphasis{keytab}}] \leavevmode
-Use \sphinxstyleemphasis{keytab} as the keytab file. Otherwise, the default keytab is
-used.
-
-\item[{\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt},…}] \leavevmode
-Uses the specified keysalt list for setting the new keys of the
-principal. See {\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a
-list of possible values.
-
-\item[{\sphinxstylestrong{-q}}] \leavevmode
-Display less verbose information.
-
-\item[{\sphinxstylestrong{-norandkey}}] \leavevmode
-Do not randomize the keys. The keys and their version numbers stay
-unchanged. This option cannot be specified in combination with the
-\sphinxstylestrong{-e} option.
-
-\end{description}
-
-An entry for each of the principal’s unique encryption types is added,
-ignoring multiple keys with the same encryption type but different
-salt types.
-
-Alias: \sphinxstylestrong{xst}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktadd} \PYG{o}{\PYGZhy{}}\PYG{n}{k} \PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{\PYGZhy{}}\PYG{n}{new}\PYG{o}{\PYGZhy{}}\PYG{n}{keytab} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3}\PYG{p}{,}
- \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab}
- \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{\PYGZhy{}}\PYG{n}{new}\PYG{o}{\PYGZhy{}}\PYG{n}{keytab}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsubsection{Examples}
-\label{\detokenize{admin/appl_servers:examples}}
-Here is a sample session, using configuration files that enable only
-AES encryption:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktadd} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{Removing principals from keytabs}
-\label{\detokenize{admin/appl_servers:removing-principals-from-keytabs}}
-To remove a principal from an existing keytab, use the kadmin
-\sphinxstylestrong{ktremove} command.
-
-
-\subsection{ktremove}
-\label{\detokenize{admin/appl_servers:ktremove}}\begin{quote}
-
-\sphinxstylestrong{ktremove} {[}options{]} \sphinxstyleemphasis{principal} {[}\sphinxstyleemphasis{kvno} \textbar{} \sphinxstyleemphasis{all} \textbar{} \sphinxstyleemphasis{old}{]}
-\end{quote}
-
-Removes entries for the specified \sphinxstyleemphasis{principal} from a keytab. Requires
-no permissions, since this does not require database access.
-
-If the string “all” is specified, all entries for that principal are
-removed; if the string “old” is specified, all entries for that
-principal except those with the highest kvno are removed. Otherwise,
-the value specified is parsed as an integer, and all entries whose
-kvno match that integer are removed.
-
-The options are:
-\begin{description}
-\item[{\sphinxstylestrong{-k{[}eytab{]}} \sphinxstyleemphasis{keytab}}] \leavevmode
-Use \sphinxstyleemphasis{keytab} as the keytab file. Otherwise, the default keytab is
-used.
-
-\item[{\sphinxstylestrong{-q}}] \leavevmode
-Display less verbose information.
-
-\end{description}
-
-Alias: \sphinxstylestrong{ktrem}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktremove} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin} \PYG{n+nb}{all}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3} \PYG{n}{removed} \PYG{k+kn}{from} \PYG{n+nn}{keytab}
- \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsection{Using a keytab to acquire client credentials}
-\label{\detokenize{admin/appl_servers:using-a-keytab-to-acquire-client-credentials}}
-While keytabs are ordinarily used to accept credentials from clients,
-they can also be used to acquire initial credentials, allowing one
-service to authenticate to another.
-
-To manually obtain credentials using a keytab, use the \DUrole{xref,std,std-ref}{kinit(1)}
-\sphinxstylestrong{-k} option, together with the \sphinxstylestrong{-t} option if the keytab is not in
-the default location.
-
-Beginning with release 1.11, GSSAPI applications can be configured to
-automatically obtain initial credentials from a keytab as needed. The
-recommended configuration is as follows:
-\begin{enumerate}
-\item {}
-Create a keytab containing a single entry for the desired client
-identity.
-
-\item {}
-Place the keytab in a location readable by the service, and set the
-\sphinxstylestrong{KRB5\_CLIENT\_KTNAME} environment variable to its filename.
-Alternatively, use the \sphinxstylestrong{default\_client\_keytab\_name} profile
-variable in {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}}, or use the default location of
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{DEFCKTNAME}}}}.
-
-\item {}
-Set \sphinxstylestrong{KRB5CCNAME} to a filename writable by the service, which
-will not be used for any other purpose. Do not manually obtain
-credentials at this location. (Another credential cache type
-besides \sphinxstylestrong{FILE} can be used if desired, as long the cache will not
-conflict with another use. A \sphinxstylestrong{MEMORY} cache can be used if the
-service runs as a long-lived process. See \DUrole{xref,std,std-ref}{ccache\_definition}
-for details.)
-
-\item {}
-Start the service. When it authenticates using GSSAPI, it will
-automatically obtain credentials from the client keytab into the
-specified credential cache, and refresh them before they expire.
-
-\end{enumerate}
-
-
-\section{Clock Skew}
-\label{\detokenize{admin/appl_servers:clock-skew}}
-A Kerberos application server host must keep its clock synchronized or
-it will reject authentication requests from clients. Modern operating
-systems typically provide a facility to maintain the correct time;
-make sure it is enabled. This is especially important on virtual
-machines, where clocks tend to drift more rapidly than normal machine
-clocks.
-
-The default allowable clock skew is controlled by the \sphinxstylestrong{clockskew}
-variable in {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}}.
-
-
-\section{Getting DNS information correct}
-\label{\detokenize{admin/appl_servers:getting-dns-information-correct}}
-Several aspects of Kerberos rely on name service. When a hostname is
-used to name a service, clients may canonicalize the hostname using
-forward and possibly reverse name resolution. The result of this
-canonicalization must match the principal entry in the host’s keytab,
-or authentication will fail. To work with all client canonicalization
-configurations, each host’s canonical name must be the fully-qualified
-host name (including the domain), and each host’s IP address must
-reverse-resolve to the canonical name.
-
-Configuration of hostnames varies by operating system. On the
-application server itself, canonicalization will typically use the
-\sphinxcode{/etc/hosts} file rather than the DNS. Ensure that the line for the
-server’s hostname is in the following form:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{IP} \PYG{n}{address} \PYG{n}{fully}\PYG{o}{\PYGZhy{}}\PYG{n}{qualified} \PYG{n}{hostname} \PYG{n}{aliases}
-\end{sphinxVerbatim}
-
-Here is a sample \sphinxcode{/etc/hosts} file:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{c+c1}{\PYGZsh{} this is a comment}
-\PYG{l+m+mf}{127.0}\PYG{o}{.}\PYG{l+m+mf}{0.1} \PYG{n}{localhost} \PYG{n}{localhost}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-\PYG{l+m+mf}{10.0}\PYG{o}{.}\PYG{l+m+mf}{0.6} \PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n}{daffodil} \PYG{n}{trillium} \PYG{n}{wake}\PYG{o}{\PYGZhy{}}\PYG{n}{robin}
-\end{sphinxVerbatim}
-
-The output of \sphinxcode{klist -k} for this example host should look like:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{viola}\PYG{c+c1}{\PYGZsh{} klist \PYGZhy{}k}
-\PYG{n}{Keytab} \PYG{n}{name}\PYG{p}{:} \PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}
-\PYG{n}{KVNO} \PYG{n}{Principal}
-\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}
- \PYG{l+m+mi}{2} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\end{sphinxVerbatim}
-
-If you were to ssh to this host with a fresh credentials cache (ticket
-file), and then \DUrole{xref,std,std-ref}{klist(1)}, the output should list a service
-principal of \sphinxcode{host/daffodil.mit.edu@ATHENA.MIT.EDU}.
-
-
-\section{Configuring your firewall to work with Kerberos V5}
-\label{\detokenize{admin/appl_servers:conf-firewall}}\label{\detokenize{admin/appl_servers:configuring-your-firewall-to-work-with-kerberos-v5}}
-If you need off-site users to be able to get Kerberos tickets in your
-realm, they must be able to get to your KDC. This requires either
-that you have a replica KDC outside your firewall, or that you
-configure your firewall to allow UDP requests into at least one of
-your KDCs, on whichever port the KDC is running. (The default is port
-88; other ports may be specified in the KDC’s {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}
-file.) Similarly, if you need off-site users to be able to change
-their passwords in your realm, they must be able to get to your
-Kerberos admin server on the kpasswd port (which defaults to 464). If
-you need off-site users to be able to administer your Kerberos realm,
-they must be able to get to your Kerberos admin server on the
-administrative port (which defaults to 749).
-
-If your on-site users inside your firewall will need to get to KDCs in
-other realms, you will also need to configure your firewall to allow
-outgoing TCP and UDP requests to port 88, and to port 464 to allow
-password changes. If your on-site users inside your firewall will
-need to get to Kerberos admin servers in other realms, you will also
-need to allow outgoing TCP and UDP requests to port 749.
-
-If any of your KDCs are outside your firewall, you will need to allow
-kprop requests to get through to the remote KDC. {\hyperref[\detokenize{admin/admin_commands/kprop:kprop-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop}}}} uses
-the \sphinxcode{krb5\_prop} service on port 754 (tcp).
-
-The book \sphinxstyleemphasis{UNIX System Security}, by David Curry, is a good starting
-point for learning to configure firewalls.
-
-
-\chapter{Host configuration}
-\label{\detokenize{admin/host_config:host-configuration}}\label{\detokenize{admin/host_config::doc}}
-All hosts running Kerberos software, whether they are clients,
-application servers, or KDCs, can be configured using
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}. Here we describe some of the behavior changes
-you might want to make.
-
-
-\section{Default realm}
-\label{\detokenize{admin/host_config:default-realm}}
-In the {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}} section, the \sphinxstylestrong{default\_realm} realm
-relation sets the default Kerberos realm. For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{libdefaults}\PYG{p}{]}
- \PYG{n}{default\PYGZus{}realm} \PYG{o}{=} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\end{sphinxVerbatim}
-
-The default realm affects Kerberos behavior in the following ways:
-\begin{itemize}
-\item {}
-When a principal name is parsed from text, the default realm is used
-if no \sphinxcode{@REALM} component is specified.
-
-\item {}
-The default realm affects login authorization as described below.
-
-\item {}
-For programs which operate on a Kerberos database, the default realm
-is used to determine which database to operate on, unless the \sphinxstylestrong{-r}
-parameter is given to specify a realm.
-
-\item {}
-A server program may use the default realm when looking up its key
-in a {\hyperref[\detokenize{admin/install_appl_srv:keytab-file}]{\sphinxcrossref{\DUrole{std,std-ref}{keytab file}}}}, if its realm is not
-determined by {\hyperref[\detokenize{admin/conf_files/krb5_conf:domain-realm}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}domain\_realm{]}}}}} configuration or by the server
-program itself.
-
-\item {}
-If \DUrole{xref,std,std-ref}{kinit(1)} is passed the \sphinxstylestrong{-n} flag, it requests anonymous
-tickets from the default realm.
-
-\end{itemize}
-
-In some situations, these uses of the default realm might conflict.
-For example, it might be desirable for principal name parsing to use
-one realm by default, but for login authorization to use a second
-realm. In this situation, the first realm can be configured as the
-default realm, and \sphinxstylestrong{auth\_to\_local} relations can be used as
-described below to use the second realm for login authorization.
-
-
-\section{Login authorization}
-\label{\detokenize{admin/host_config:login-authorization}}\label{\detokenize{admin/host_config:id1}}
-If a host runs a Kerberos-enabled login service such as OpenSSH with
-GSSAPIAuthentication enabled, login authorization rules determine
-whether a Kerberos principal is allowed to access a local account.
-
-By default, a Kerberos principal is allowed access to an account if
-its realm matches the default realm and its name matches the account
-name. (For historical reasons, access is also granted by default if
-the name has two components and the second component matches the
-default realm; for instance, \sphinxcode{alice/ATHENA.MIT.EDU@ATHENA.MIT.EDU}
-is granted access to the \sphinxcode{alice} account if \sphinxcode{ATHENA.MIT.EDU} is
-the default realm.)
-
-The simplest way to control local access is using \DUrole{xref,std,std-ref}{.k5login(5)}
-files. To use these, place a \sphinxcode{.k5login} file in the home directory
-of each account listing the principal names which should have login
-access to that account. If it is not desirable to use \sphinxcode{.k5login}
-files located in account home directories, the \sphinxstylestrong{k5login\_directory}
-relation in the {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}} section can specify a directory
-containing one file per account uname.
-
-By default, if a \sphinxcode{.k5login} file is present, it controls
-authorization both positively and negatively\textendash{}any principal name
-contained in the file is granted access and any other principal name
-is denied access, even if it would have had access if the \sphinxcode{.k5login}
-file didn’t exist. The \sphinxstylestrong{k5login\_authoritative} relation in the
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}} section can be set to false to make \sphinxcode{.k5login}
-files provide positive authorization only.
-
-The \sphinxstylestrong{auth\_to\_local} relation in the {\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} section for the
-default realm can specify pattern-matching rules to control login
-authorization. For example, the following configuration allows access
-to principals from a different realm than the default realm:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-[realms]
- DEFAULT.REALM = \PYGZob{}
- \PYGZsh{} Allow access to principals from OTHER.REALM.
- \PYGZsh{}
- \PYGZsh{} [1:\PYGZdl{}1@\PYGZdl{}0] matches single\PYGZhy{}component principal names and creates
- \PYGZsh{} a selection string containing the principal name and realm.
- \PYGZsh{}
- \PYGZsh{} (.*@OTHER\PYGZbs{}.REALM) matches against the selection string, so that
- \PYGZsh{} only principals in OTHER.REALM are matched.
- \PYGZsh{}
- \PYGZsh{} s/@OTHER\PYGZbs{}.REALM\PYGZdl{}// removes the realm name, leaving behind the
- \PYGZsh{} principal name as the account name.
- auth\PYGZus{}to\PYGZus{}local = RULE:[1:\PYGZdl{}1@\PYGZdl{}0](.*@OTHER\PYGZbs{}.REALM)s/@OTHER\PYGZbs{}.REALM\PYGZdl{}//
-
- \PYGZsh{} Also allow principals from the default realm. Omit this line
- \PYGZsh{} to only allow access to principals in OTHER.REALM.
- auth\PYGZus{}to\PYGZus{}local = DEFAULT
- \PYGZcb{}
-\end{sphinxVerbatim}
-
-The \sphinxstylestrong{auth\_to\_local\_names} subsection of the {\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} section
-for the default realm can specify explicit mappings from principal
-names to local accounts. The key used in this subsection is the
-principal name without realm, so it is only safe to use in a Kerberos
-environment with a single realm or a tightly controlled set of realms.
-An example use of \sphinxstylestrong{auth\_to\_local\_names} might be:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{auth\PYGZus{}to\PYGZus{}local\PYGZus{}names} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{c+c1}{\PYGZsh{} Careful, these match principals in any realm!}
- \PYG{n}{host}\PYG{o}{/}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com} \PYG{o}{=} \PYG{n}{hostaccount}
- \PYG{n}{fred} \PYG{o}{=} \PYG{n}{localfred}
- \PYG{p}{\PYGZcb{}}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-Local authorization behavior can also be modified using plugin
-modules; see \DUrole{xref,std,std-ref}{hostrealm\_plugin} for details.
-
-
-\section{Plugin module configuration}
-\label{\detokenize{admin/host_config:plugin-config}}\label{\detokenize{admin/host_config:plugin-module-configuration}}
-Many aspects of Kerberos behavior, such as client preauthentication
-and KDC service location, can be modified through the use of plugin
-modules. For most of these behaviors, you can use the {\hyperref[\detokenize{admin/conf_files/krb5_conf:plugins}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}plugins{]}}}}}
-section of krb5.conf to register third-party modules, and to switch
-off registered or built-in modules.
-
-A plugin module takes the form of a Unix shared object
-(\sphinxcode{modname.so}) or Windows DLL (\sphinxcode{modname.dll}). If you have
-installed a third-party plugin module and want to register it, you do
-so using the \sphinxstylestrong{module} relation in the appropriate subsection of the
-{[}plugins{]} section. The value for \sphinxstylestrong{module} must give the module name
-and the path to the module, separated by a colon. The module name
-will often be the same as the shared object’s name, but in unusual
-cases (such as a shared object which implements multiple modules for
-the same interface) it might not be. For example, to register a
-client preauthentication module named \sphinxcode{mypreauth} installed at
-\sphinxcode{/path/to/mypreauth.so}, you could write:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{plugins}\PYG{p}{]}
- \PYG{n}{clpreauth} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{module} \PYG{o}{=} \PYG{n}{mypreauth}\PYG{p}{:}\PYG{o}{/}\PYG{n}{path}\PYG{o}{/}\PYG{n}{to}\PYG{o}{/}\PYG{n}{mypreauth}\PYG{o}{.}\PYG{n}{so}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-Many of the pluggable behaviors in MIT krb5 contain built-in modules
-which can be switched off. You can disable a built-in module (or one
-you have registered) using the \sphinxstylestrong{disable} directive in the
-appropriate subsection of the {[}plugins{]} section. For example, to
-disable the use of .k5identity files to select credential caches, you
-could write:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{plugins}\PYG{p}{]}
- \PYG{n}{ccselect} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{disable} \PYG{o}{=} \PYG{n}{k5identity}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-If you want to disable multiple modules, specify the \sphinxstylestrong{disable}
-directive multiple times, giving one module to disable each time.
-
-Alternatively, you can explicitly specify which modules you want to be
-enabled for that behavior using the \sphinxstylestrong{enable\_only} directive. For
-example, to make {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} check password quality using only a
-module you have registered, and no other mechanism, you could write:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{plugins}\PYG{p}{]}
- \PYG{n}{pwqual} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{module} \PYG{o}{=} \PYG{n}{mymodule}\PYG{p}{:}\PYG{o}{/}\PYG{n}{path}\PYG{o}{/}\PYG{n}{to}\PYG{o}{/}\PYG{n}{mymodule}\PYG{o}{.}\PYG{n}{so}
- \PYG{n}{enable\PYGZus{}only} \PYG{o}{=} \PYG{n}{mymodule}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-Again, if you want to specify multiple modules, specify the
-\sphinxstylestrong{enable\_only} directive multiple times, giving one module to enable
-each time.
-
-Some Kerberos interfaces use different mechanisms to register plugin
-modules.
-
-
-\subsection{KDC location modules}
-\label{\detokenize{admin/host_config:kdc-location-modules}}
-For historical reasons, modules to control how KDC servers are located
-are registered simply by placing the shared object or DLL into the
-“libkrb5” subdirectory of the krb5 plugin directory, which defaults to
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LIBDIR}}}}\sphinxcode{/krb5/plugins}. For example, Samba’s winbind krb5
-locator plugin would be registered by placing its shared object in
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LIBDIR}}}}\sphinxcode{/krb5/plugins/libkrb5/winbind\_krb5\_locator.so}.
-
-
-\subsection{GSSAPI mechanism modules}
-\label{\detokenize{admin/host_config:gssapi-plugin-config}}\label{\detokenize{admin/host_config:gssapi-mechanism-modules}}
-GSSAPI mechanism modules are registered using the file
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{SYSCONFDIR}}}}\sphinxcode{/gss/mech} or configuration files in the
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{SYSCONFDIR}}}}\sphinxcode{/gss/mech.d} directory with a \sphinxcode{.conf}
-suffix. Each line in these files has the form:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{name} \PYG{n}{oid} \PYG{n}{pathname} \PYG{p}{[}\PYG{n}{options}\PYG{p}{]} \PYG{o}{\PYGZlt{}}\PYG{n+nb}{type}\PYG{o}{\PYGZgt{}}
-\end{sphinxVerbatim}
-
-Only the name, oid, and pathname are required. \sphinxstyleemphasis{name} is the
-mechanism name, which may be used for debugging or logging purposes.
-\sphinxstyleemphasis{oid} is the object identifier of the GSSAPI mechanism to be
-registered. \sphinxstyleemphasis{pathname} is a path to the module shared object or DLL.
-\sphinxstyleemphasis{options} (if present) are options provided to the plugin module,
-surrounded in square brackets. \sphinxstyleemphasis{type} (if present) can be used to
-indicate a special type of module. Currently the only special module
-type is “interposer”, for a module designed to intercept calls to
-other mechanisms.
-
-If the environment variable \sphinxstylestrong{GSS\_MECH\_CONFIG} is set, its value is
-used as the sole mechanism configuration filename.
-
-
-\subsection{Configuration profile modules}
-\label{\detokenize{admin/host_config:profile-plugin-config}}\label{\detokenize{admin/host_config:configuration-profile-modules}}
-A configuration profile module replaces the information source for
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} itself. To use a profile module, begin krb5.conf
-with the line:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{module} \PYG{n}{PATHNAME}\PYG{p}{:}\PYG{n}{STRING}
-\end{sphinxVerbatim}
-
-where \sphinxstyleemphasis{PATHNAME} is a path to the module shared object or DLL, and
-\sphinxstyleemphasis{STRING} is a string to provide to the module. The module will then
-take over, and the rest of krb5.conf will be ignored.
-
-
-\chapter{Backups of secure hosts}
-\label{\detokenize{admin/backup_host:backups-of-secure-hosts}}\label{\detokenize{admin/backup_host::doc}}
-When you back up a secure host, you should exclude the host’s keytab
-file from the backup. If someone obtained a copy of the keytab from a
-backup, that person could make any host masquerade as the host whose
-keytab was compromised. In many configurations, knowledge of the
-host’s keytab also allows root access to the host. This could be
-particularly dangerous if the compromised keytab was from one of your
-KDCs. If the machine has a disk crash and the keytab file is lost, it
-is easy to generate another keytab file. (See {\hyperref[\detokenize{admin/appl_servers:add-princ-kt}]{\sphinxcrossref{\DUrole{std,std-ref}{Adding principals to keytabs}}}}.)
-If you are unable to exclude particular files from backups, you should
-ensure that the backups are kept as secure as the host’s root
-password.
-
-
-\section{Backing up the Kerberos database}
-\label{\detokenize{admin/backup_host:backing-up-the-kerberos-database}}
-As with any file, it is possible that your Kerberos database could
-become corrupted. If this happens on one of the replica KDCs, you
-might never notice, since the next automatic propagation of the
-database would install a fresh copy. However, if it happens to the
-primary KDC, the corrupted database would be propagated to all of the
-replicas during the next propagation. For this reason, MIT recommends
-that you back up your Kerberos database regularly. Because the primary
-KDC is continuously dumping the database to a file in order to
-propagate it to the replica KDCs, it is a simple matter to have a cron
-job periodically copy the dump file to a secure machine elsewhere on
-your network. (Of course, it is important to make the host where
-these backups are stored as secure as your KDCs, and to encrypt its
-transmission across your network.) Then if your database becomes
-corrupted, you can load the most recent dump onto the primary KDC.
-(See {\hyperref[\detokenize{admin/database:restore-from-dump}]{\sphinxcrossref{\DUrole{std,std-ref}{Restoring a Kerberos database from a dump file}}}}.)
-
-
-\chapter{PKINIT configuration}
-\label{\detokenize{admin/pkinit:pkinit-configuration}}\label{\detokenize{admin/pkinit:pkinit}}\label{\detokenize{admin/pkinit::doc}}
-PKINIT is a preauthentication mechanism for Kerberos 5 which uses
-X.509 certificates to authenticate the KDC to clients and vice versa.
-PKINIT can also be used to enable anonymity support, allowing clients
-to communicate securely with the KDC or with application servers
-without authenticating as a particular client principal.
-
-
-\section{Creating certificates}
-\label{\detokenize{admin/pkinit:creating-certificates}}
-PKINIT requires an X.509 certificate for the KDC and one for each
-client principal which will authenticate using PKINIT. For anonymous
-PKINIT, a KDC certificate is required, but client certificates are
-not. A commercially issued server certificate can be used for the KDC
-certificate, but generally cannot be used for client certificates.
-
-The instruction in this section describe how to establish a
-certificate authority and create standard PKINIT certificates. Skip
-this section if you are using a commercially issued server certificate
-as the KDC certificate for anonymous PKINIT, or if you are configuring
-a client to use an Active Directory KDC.
-
-
-\subsection{Generating a certificate authority certificate}
-\label{\detokenize{admin/pkinit:generating-a-certificate-authority-certificate}}
-You can establish a new certificate authority (CA) for use with a
-PKINIT deployment with the commands:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{openssl} \PYG{n}{genrsa} \PYG{o}{\PYGZhy{}}\PYG{n}{out} \PYG{n}{cakey}\PYG{o}{.}\PYG{n}{pem} \PYG{l+m+mi}{2048}
-\PYG{n}{openssl} \PYG{n}{req} \PYG{o}{\PYGZhy{}}\PYG{n}{key} \PYG{n}{cakey}\PYG{o}{.}\PYG{n}{pem} \PYG{o}{\PYGZhy{}}\PYG{n}{new} \PYG{o}{\PYGZhy{}}\PYG{n}{x509} \PYG{o}{\PYGZhy{}}\PYG{n}{out} \PYG{n}{cacert}\PYG{o}{.}\PYG{n}{pem} \PYG{o}{\PYGZhy{}}\PYG{n}{days} \PYG{l+m+mi}{3650}
-\end{sphinxVerbatim}
-
-The second command will ask for the values of several certificate
-fields. These fields can be set to any values. You can adjust the
-expiration time of the CA certificate by changing the number after
-\sphinxcode{-days}. Since the CA certificate must be deployed to client
-machines each time it changes, it should normally have an expiration
-time far in the future; however, expiration times after 2037 may cause
-interoperability issues in rare circumstances.
-
-The result of these commands will be two files, cakey.pem and
-cacert.pem. cakey.pem will contain a 2048-bit RSA private key, which
-must be carefully protected. cacert.pem will contain the CA
-certificate, which must be placed in the filesystems of the KDC and
-each client host. cakey.pem will be required to create KDC and client
-certificates.
-
-
-\subsection{Generating a KDC certificate}
-\label{\detokenize{admin/pkinit:generating-a-kdc-certificate}}
-A KDC certificate for use with PKINIT is required to have some unusual
-fields, which makes generating them with OpenSSL somewhat complicated.
-First, you will need a file containing the following:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-[kdc\PYGZus{}cert]
-basicConstraints=CA:FALSE
-keyUsage=nonRepudiation,digitalSignature,keyEncipherment,keyAgreement
-extendedKeyUsage=1.3.6.1.5.2.3.5
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer
-issuerAltName=issuer:copy
-subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:kdc\PYGZus{}princ\PYGZus{}name
-
-[kdc\PYGZus{}princ\PYGZus{}name]
-realm=EXP:0,GeneralString:\PYGZdl{}\PYGZob{}ENV::REALM\PYGZcb{}
-principal\PYGZus{}name=EXP:1,SEQUENCE:kdc\PYGZus{}principal\PYGZus{}seq
-
-[kdc\PYGZus{}principal\PYGZus{}seq]
-name\PYGZus{}type=EXP:0,INTEGER:2
-name\PYGZus{}string=EXP:1,SEQUENCE:kdc\PYGZus{}principals
-
-[kdc\PYGZus{}principals]
-princ1=GeneralString:krbtgt
-princ2=GeneralString:\PYGZdl{}\PYGZob{}ENV::REALM\PYGZcb{}
-\end{sphinxVerbatim}
-
-If the above contents are placed in extensions.kdc, you can generate
-and sign a KDC certificate with the following commands:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{openssl} \PYG{n}{genrsa} \PYG{o}{\PYGZhy{}}\PYG{n}{out} \PYG{n}{kdckey}\PYG{o}{.}\PYG{n}{pem} \PYG{l+m+mi}{2048}
-\PYG{n}{openssl} \PYG{n}{req} \PYG{o}{\PYGZhy{}}\PYG{n}{new} \PYG{o}{\PYGZhy{}}\PYG{n}{out} \PYG{n}{kdc}\PYG{o}{.}\PYG{n}{req} \PYG{o}{\PYGZhy{}}\PYG{n}{key} \PYG{n}{kdckey}\PYG{o}{.}\PYG{n}{pem}
-\PYG{n}{env} \PYG{n}{REALM}\PYG{o}{=}\PYG{n}{YOUR\PYGZus{}REALMNAME} \PYG{n}{openssl} \PYG{n}{x509} \PYG{o}{\PYGZhy{}}\PYG{n}{req} \PYG{o}{\PYGZhy{}}\PYG{o+ow}{in} \PYG{n}{kdc}\PYG{o}{.}\PYG{n}{req} \PYGZbs{}
- \PYG{o}{\PYGZhy{}}\PYG{n}{CAkey} \PYG{n}{cakey}\PYG{o}{.}\PYG{n}{pem} \PYG{o}{\PYGZhy{}}\PYG{n}{CA} \PYG{n}{cacert}\PYG{o}{.}\PYG{n}{pem} \PYG{o}{\PYGZhy{}}\PYG{n}{out} \PYG{n}{kdc}\PYG{o}{.}\PYG{n}{pem} \PYG{o}{\PYGZhy{}}\PYG{n}{days} \PYG{l+m+mi}{365} \PYGZbs{}
- \PYG{o}{\PYGZhy{}}\PYG{n}{extfile} \PYG{n}{extensions}\PYG{o}{.}\PYG{n}{kdc} \PYG{o}{\PYGZhy{}}\PYG{n}{extensions} \PYG{n}{kdc\PYGZus{}cert} \PYG{o}{\PYGZhy{}}\PYG{n}{CAcreateserial}
-\PYG{n}{rm} \PYG{n}{kdc}\PYG{o}{.}\PYG{n}{req}
-\end{sphinxVerbatim}
-
-The second command will ask for the values of certificate fields,
-which can be set to any values. In the third command, substitute your
-KDC’s realm name for YOUR\_REALMNAME. You can adjust the certificate’s
-expiration date by changing the number after \sphinxcode{-days}. Remember to
-create a new KDC certificate before the old one expires.
-
-The result of this operation will be in two files, kdckey.pem and
-kdc.pem. Both files must be placed in the KDC’s filesystem.
-kdckey.pem, which contains the KDC’s private key, must be carefully
-protected.
-
-If you examine the KDC certificate with \sphinxcode{openssl x509 -in kdc.pem
--text -noout}, OpenSSL will not know how to display the KDC principal
-name in the Subject Alternative Name extension, so it will appear as
-\sphinxcode{othername:\textless{}unsupported\textgreater{}}. This is normal and does not mean
-anything is wrong with the KDC certificate.
-
-
-\subsection{Generating client certificates}
-\label{\detokenize{admin/pkinit:generating-client-certificates}}
-PKINIT client certificates also must have some unusual certificate
-fields. To generate a client certificate with OpenSSL for a
-single-component principal name, you will need an extensions file
-(different from the KDC extensions file above) containing:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-[client\PYGZus{}cert]
-basicConstraints=CA:FALSE
-keyUsage=digitalSignature,keyEncipherment,keyAgreement
-extendedKeyUsage=1.3.6.1.5.2.3.4
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer
-issuerAltName=issuer:copy
-subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:princ\PYGZus{}name
-
-[princ\PYGZus{}name]
-realm=EXP:0,GeneralString:\PYGZdl{}\PYGZob{}ENV::REALM\PYGZcb{}
-principal\PYGZus{}name=EXP:1,SEQUENCE:principal\PYGZus{}seq
-
-[principal\PYGZus{}seq]
-name\PYGZus{}type=EXP:0,INTEGER:1
-name\PYGZus{}string=EXP:1,SEQUENCE:principals
-
-[principals]
-princ1=GeneralString:\PYGZdl{}\PYGZob{}ENV::CLIENT\PYGZcb{}
-\end{sphinxVerbatim}
-
-If the above contents are placed in extensions.client, you can
-generate and sign a client certificate with the following commands:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{openssl} \PYG{n}{genrsa} \PYG{o}{\PYGZhy{}}\PYG{n}{out} \PYG{n}{clientkey}\PYG{o}{.}\PYG{n}{pem} \PYG{l+m+mi}{2048}
-\PYG{n}{openssl} \PYG{n}{req} \PYG{o}{\PYGZhy{}}\PYG{n}{new} \PYG{o}{\PYGZhy{}}\PYG{n}{key} \PYG{n}{clientkey}\PYG{o}{.}\PYG{n}{pem} \PYG{o}{\PYGZhy{}}\PYG{n}{out} \PYG{n}{client}\PYG{o}{.}\PYG{n}{req}
-\PYG{n}{env} \PYG{n}{REALM}\PYG{o}{=}\PYG{n}{YOUR\PYGZus{}REALMNAME} \PYG{n}{CLIENT}\PYG{o}{=}\PYG{n}{YOUR\PYGZus{}PRINCNAME} \PYG{n}{openssl} \PYG{n}{x509} \PYGZbs{}
- \PYG{o}{\PYGZhy{}}\PYG{n}{CAkey} \PYG{n}{cakey}\PYG{o}{.}\PYG{n}{pem} \PYG{o}{\PYGZhy{}}\PYG{n}{CA} \PYG{n}{cacert}\PYG{o}{.}\PYG{n}{pem} \PYG{o}{\PYGZhy{}}\PYG{n}{req} \PYG{o}{\PYGZhy{}}\PYG{o+ow}{in} \PYG{n}{client}\PYG{o}{.}\PYG{n}{req} \PYGZbs{}
- \PYG{o}{\PYGZhy{}}\PYG{n}{extensions} \PYG{n}{client\PYGZus{}cert} \PYG{o}{\PYGZhy{}}\PYG{n}{extfile} \PYG{n}{extensions}\PYG{o}{.}\PYG{n}{client} \PYGZbs{}
- \PYG{o}{\PYGZhy{}}\PYG{n}{days} \PYG{l+m+mi}{365} \PYG{o}{\PYGZhy{}}\PYG{n}{out} \PYG{n}{client}\PYG{o}{.}\PYG{n}{pem}
-\PYG{n}{rm} \PYG{n}{client}\PYG{o}{.}\PYG{n}{req}
-\end{sphinxVerbatim}
-
-Normally, the first two commands should be run on the client host, and
-the resulting client.req file transferred to the certificate authority
-host for the third command. As in the previous steps, the second
-command will ask for the values of certificate fields, which can be
-set to any values. In the third command, substitute your realm’s name
-for YOUR\_REALMNAME and the client’s principal name (without realm) for
-YOUR\_PRINCNAME. You can adjust the certificate’s expiration date by
-changing the number after \sphinxcode{-days}.
-
-The result of this operation will be two files, clientkey.pem and
-client.pem. Both files must be present on the client’s host;
-clientkey.pem, which contains the client’s private key, must be
-protected from access by others.
-
-As in the KDC certificate, OpenSSL will display the client principal
-name as \sphinxcode{othername:\textless{}unsupported\textgreater{}} in the Subject Alternative Name
-extension of a PKINIT client certificate.
-
-If the client principal name contains more than one component
-(e.g. \sphinxcode{host/example.com@REALM}), the \sphinxcode{{[}principals{]}} section of
-\sphinxcode{extensions.client} must be altered to contain multiple entries.
-(Simply setting \sphinxcode{CLIENT} to \sphinxcode{host/example.com} would generate a
-certificate for \sphinxcode{host\textbackslash{}/example.com@REALM} which would not match the
-multi-component principal name.) For a two-component principal, the
-section should read:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-[principals]
-princ1=GeneralString:\PYGZdl{}\PYGZob{}ENV::CLIENT1\PYGZcb{}
-princ2=GeneralString:\PYGZdl{}\PYGZob{}ENV::CLIENT2\PYGZcb{}
-\end{sphinxVerbatim}
-
-The environment variables \sphinxcode{CLIENT1} and \sphinxcode{CLIENT2} must then be set
-to the first and second components when running \sphinxcode{openssl x509}.
-
-
-\section{Configuring the KDC}
-\label{\detokenize{admin/pkinit:configuring-the-kdc}}
-The KDC must have filesystem access to the KDC certificate (kdc.pem)
-and the KDC private key (kdckey.pem). Configure the following
-relation in the KDC’s {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} file, either in the
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdcdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}kdcdefaults{]}}}}} section or in a {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} subsection (with
-appropriate pathnames):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{pkinit\PYGZus{}identity} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{lib}\PYG{o}{/}\PYG{n}{krb5kdc}\PYG{o}{/}\PYG{n}{kdc}\PYG{o}{.}\PYG{n}{pem}\PYG{p}{,}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{lib}\PYG{o}{/}\PYG{n}{krb5kdc}\PYG{o}{/}\PYG{n}{kdckey}\PYG{o}{.}\PYG{n}{pem}
-\end{sphinxVerbatim}
-
-If any clients will authenticate using regular (as opposed to
-anonymous) PKINIT, the KDC must also have filesystem access to the CA
-certificate (cacert.pem), and the following configuration (with the
-appropriate pathname):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{pkinit\PYGZus{}anchors} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{var}\PYG{o}{/}\PYG{n}{lib}\PYG{o}{/}\PYG{n}{krb5kdc}\PYG{o}{/}\PYG{n}{cacert}\PYG{o}{.}\PYG{n}{pem}
-\end{sphinxVerbatim}
-
-Because of the larger size of requests and responses using PKINIT, you
-may also need to allow TCP access to the KDC:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdc\PYGZus{}tcp\PYGZus{}listen} \PYG{o}{=} \PYG{l+m+mi}{88}
-\end{sphinxVerbatim}
-
-Restart the {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} daemon to pick up the configuration
-changes.
-
-The principal entry for each PKINIT-using client must be configured to
-require preauthentication. Ensure this with the command:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin} \PYG{o}{\PYGZhy{}}\PYG{n}{q} \PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{modprinc +requires\PYGZus{}preauth YOUR\PYGZus{}PRINCNAME}\PYG{l+s+s1}{\PYGZsq{}}
-\end{sphinxVerbatim}
-
-Starting with release 1.12, it is possible to remove the long-term
-keys of a principal entry, which can save some space in the database
-and help to clarify some PKINIT-related error conditions by not asking
-for a password:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin} \PYG{o}{\PYGZhy{}}\PYG{n}{q} \PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{purgekeys \PYGZhy{}all YOUR\PYGZus{}PRINCNAME}\PYG{l+s+s1}{\PYGZsq{}}
-\end{sphinxVerbatim}
-
-These principal options can also be specified at principal creation
-time as follows:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin} \PYG{o}{\PYGZhy{}}\PYG{n}{q} \PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{add\PYGZus{}principal +requires\PYGZus{}preauth \PYGZhy{}nokey YOUR\PYGZus{}PRINCNAME}\PYG{l+s+s1}{\PYGZsq{}}
-\end{sphinxVerbatim}
-
-By default, the KDC requires PKINIT client certificates to have the
-standard Extended Key Usage and Subject Alternative Name attributes
-for PKINIT. Starting in release 1.16, it is possible to authorize
-client certificates based on the subject or other criteria instead of
-the standard PKINIT Subject Alternative Name, by setting the
-\sphinxstylestrong{pkinit\_cert\_match} string attribute on each client principal entry.
-For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin} \PYG{n}{set\PYGZus{}string} \PYG{n}{user}\PYG{n+nd}{@REALM} \PYG{n}{pkinit\PYGZus{}cert\PYGZus{}match} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZlt{}SUBJECT\PYGZgt{}CN=user@REALM\PYGZdl{}}\PYG{l+s+s2}{\PYGZdq{}}
-\end{sphinxVerbatim}
-
-The \sphinxstylestrong{pkinit\_cert\_match} string attribute follows the syntax used by
-the {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} \sphinxstylestrong{pkinit\_cert\_match} relation. To allow the
-use of non-PKINIT client certificates, it will also be necessary to
-disable key usage checking using the \sphinxstylestrong{pkinit\_eku\_checking} relation;
-for example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{kdcdefaults}\PYG{p}{]}
- \PYG{n}{pkinit\PYGZus{}eku\PYGZus{}checking} \PYG{o}{=} \PYG{n}{none}
-\end{sphinxVerbatim}
-
-
-\section{Configuring the clients}
-\label{\detokenize{admin/pkinit:configuring-the-clients}}
-Client hosts must be configured to trust the issuing authority for the
-KDC certificate. For a newly established certificate authority, the
-client host must have filesystem access to the CA certificate
-(cacert.pem) and the following relation in {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} in the
-appropriate {\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} subsection (with appropriate pathnames):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{pkinit\PYGZus{}anchors} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{/}\PYG{n}{cacert}\PYG{o}{.}\PYG{n}{pem}
-\end{sphinxVerbatim}
-
-If the KDC certificate is a commercially issued server certificate,
-the issuing certificate is most likely included in a system directory.
-You can specify it by filename as above, or specify the whole
-directory like so:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{pkinit\PYGZus{}anchors} \PYG{o}{=} \PYG{n}{DIR}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{ssl}\PYG{o}{/}\PYG{n}{certs}
-\end{sphinxVerbatim}
-
-A commercially issued server certificate will usually not have the
-standard PKINIT principal name or Extended Key Usage extensions, so
-the following additional configuration is required:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{pkinit\PYGZus{}eku\PYGZus{}checking} \PYG{o}{=} \PYG{n}{kpServerAuth}
-\PYG{n}{pkinit\PYGZus{}kdc\PYGZus{}hostname} \PYG{o}{=} \PYG{n}{hostname}\PYG{o}{.}\PYG{n}{of}\PYG{o}{.}\PYG{n}{kdc}\PYG{o}{.}\PYG{n}{certificate}
-\end{sphinxVerbatim}
-
-Multiple \sphinxstylestrong{pkinit\_kdc\_hostname} relations can be configured to
-recognize multiple KDC certificates. If the KDC is an Active
-Directory domain controller, setting \sphinxstylestrong{pkinit\_kdc\_hostname} is
-necessary, but it should not be necessary to set
-\sphinxstylestrong{pkinit\_eku\_checking}.
-
-To perform regular (as opposed to anonymous) PKINIT authentication, a
-client host must have filesystem access to a client certificate
-(client.pem), and the corresponding private key (clientkey.pem).
-Configure the following relations in the client host’s
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} file in the appropriate {\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} subsection
-(with appropriate pathnames):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{pkinit\PYGZus{}identities} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{/}\PYG{n}{client}\PYG{o}{.}\PYG{n}{pem}\PYG{p}{,}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{/}\PYG{n}{clientkey}\PYG{o}{.}\PYG{n}{pem}
-\end{sphinxVerbatim}
-
-If the KDC and client are properly configured, it should now be
-possible to run \sphinxcode{kinit username} without entering a password.
-
-
-\section{Anonymous PKINIT}
-\label{\detokenize{admin/pkinit:anonymous-pkinit}}\label{\detokenize{admin/pkinit:id1}}
-Anonymity support in Kerberos allows a client to obtain a ticket
-without authenticating as any particular principal. Such a ticket can
-be used as a FAST armor ticket, or to securely communicate with an
-application server anonymously.
-
-To configure anonymity support, you must generate or otherwise procure
-a KDC certificate and configure the KDC host, but you do not need to
-generate any client certificates. On the KDC, you must set the
-\sphinxstylestrong{pkinit\_identity} variable to provide the KDC certificate, but do
-not need to set the \sphinxstylestrong{pkinit\_anchors} variable or store the issuing
-certificate if you won’t have any client certificates to verify. On
-client hosts, you must set the \sphinxstylestrong{pkinit\_anchors} variable (and
-possibly \sphinxstylestrong{pkinit\_kdc\_hostname} and \sphinxstylestrong{pkinit\_eku\_checking}) in order
-to trust the issuing authority for the KDC certificate, but do not
-need to set the \sphinxstylestrong{pkinit\_identities} variable.
-
-Anonymity support is not enabled by default. To enable it, you must
-create the principal \sphinxcode{WELLKNOWN/ANONYMOUS} using the command:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin} \PYG{o}{\PYGZhy{}}\PYG{n}{q} \PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{addprinc \PYGZhy{}randkey WELLKNOWN/ANONYMOUS}\PYG{l+s+s1}{\PYGZsq{}}
-\end{sphinxVerbatim}
-
-Some Kerberos deployments include application servers which lack
-proper access control, and grant some level of access to any user who
-can authenticate. In such an environment, enabling anonymity support
-on the KDC would present a security issue. If you need to enable
-anonymity support for TGTs (for use as FAST armor tickets) without
-enabling anonymous authentication to application servers, you can set
-the variable \sphinxstylestrong{restrict\_anonymous\_to\_tgt} to \sphinxcode{true} in the
-appropriate {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} subsection of the KDC’s
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} file.
-
-To obtain anonymous credentials on a client, run \sphinxcode{kinit -n}, or
-\sphinxcode{kinit -n @REALMNAME} to specify a realm. The resulting tickets
-will have the client name \sphinxcode{WELLKNOWN/ANONYMOUS@WELLKNOWN:ANONYMOUS}.
-
-
-\section{Freshness tokens}
-\label{\detokenize{admin/pkinit:freshness-tokens}}
-Freshness tokens can ensure that the client has recently had access to
-its certificate private key. If freshness tokens are not required by
-the KDC, a client program with temporary possession of the private key
-can compose requests for future timestamps and use them later.
-
-In release 1.17 and later, freshness tokens are supported by the
-client and are sent by the KDC when the client indicates support for
-them. Because not all clients support freshness tokens yet, they are
-not required by default. To check if freshness tokens are supported
-by a realm’s clients, look in the KDC logs for the lines:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{PKINIT}\PYG{p}{:} \PYG{n}{freshness} \PYG{n}{token} \PYG{n}{received} \PYG{k+kn}{from} \PYG{o}{\PYGZlt{}}\PYG{n}{client} \PYG{n}{principal}\PYG{o}{\PYGZgt{}}
-\PYG{n}{PKINIT}\PYG{p}{:} \PYG{n}{no} \PYG{n}{freshness} \PYG{n}{token} \PYG{n}{received} \PYG{k+kn}{from} \PYG{o}{\PYGZlt{}}\PYG{n}{client} \PYG{n}{principal}\PYG{o}{\PYGZgt{}}
-\end{sphinxVerbatim}
-
-To require freshness tokens for all clients in a realm (except for
-clients authenticating anonymously), set the
-\sphinxstylestrong{pkinit\_require\_freshness} variable to \sphinxcode{true} in the appropriate
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} subsection of the KDC’s {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} file. To
-test that this option is in effect, run \sphinxcode{kinit -X disable\_freshness}
-and verify that authentication is unsuccessful.
-
-
-\chapter{OTP Preauthentication}
-\label{\detokenize{admin/otp::doc}}\label{\detokenize{admin/otp:otp-preauthentication}}\label{\detokenize{admin/otp:otp-preauth}}
-OTP is a preauthentication mechanism for Kerberos 5 which uses One
-Time Passwords (OTP) to authenticate the client to the KDC. The OTP
-is passed to the KDC over an encrypted FAST channel in clear-text.
-The KDC uses the password along with per-user configuration to proxy
-the request to a third-party RADIUS system. This enables
-out-of-the-box compatibility with a large number of already widely
-deployed proprietary systems.
-
-Additionally, our implementation of the OTP system allows for the
-passing of RADIUS requests over a UNIX domain stream socket. This
-permits the use of a local companion daemon which can handle the
-details of authentication.
-
-
-\section{Defining token types}
-\label{\detokenize{admin/otp:defining-token-types}}
-Token types are defined in either {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} or
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} according to the following format:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{otp}\PYG{p}{]}
- \PYG{o}{\PYGZlt{}}\PYG{n}{name}\PYG{o}{\PYGZgt{}} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{server} \PYG{o}{=} \PYG{o}{\PYGZlt{}}\PYG{n}{host}\PYG{p}{:}\PYG{n}{port} \PYG{o+ow}{or} \PYG{n}{filename}\PYG{o}{\PYGZgt{}} \PYG{p}{(}\PYG{n}{default}\PYG{p}{:} \PYG{n}{see} \PYG{n}{below}\PYG{p}{)}
- \PYG{n}{secret} \PYG{o}{=} \PYG{o}{\PYGZlt{}}\PYG{n}{filename}\PYG{o}{\PYGZgt{}}
- \PYG{n}{timeout} \PYG{o}{=} \PYG{o}{\PYGZlt{}}\PYG{n}{integer}\PYG{o}{\PYGZgt{}} \PYG{p}{(}\PYG{n}{default}\PYG{p}{:} \PYG{l+m+mi}{5} \PYG{p}{[}\PYG{n}{seconds}\PYG{p}{]}\PYG{p}{)}
- \PYG{n}{retries} \PYG{o}{=} \PYG{o}{\PYGZlt{}}\PYG{n}{integer}\PYG{o}{\PYGZgt{}} \PYG{p}{(}\PYG{n}{default}\PYG{p}{:} \PYG{l+m+mi}{3}\PYG{p}{)}
- \PYG{n}{strip\PYGZus{}realm} \PYG{o}{=} \PYG{o}{\PYGZlt{}}\PYG{n}{boolean}\PYG{o}{\PYGZgt{}} \PYG{p}{(}\PYG{n}{default}\PYG{p}{:} \PYG{n}{true}\PYG{p}{)}
- \PYG{n}{indicator} \PYG{o}{=} \PYG{o}{\PYGZlt{}}\PYG{n}{string}\PYG{o}{\PYGZgt{}} \PYG{p}{(}\PYG{n}{default}\PYG{p}{:} \PYG{n}{none}\PYG{p}{)}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-If the server field begins with ‘/’, it will be interpreted as a UNIX
-socket. Otherwise, it is assumed to be in the format host:port. When
-a UNIX domain socket is specified, the secret field is optional and an
-empty secret is used by default. If the server field is not
-specified, it defaults to {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{RUNSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/\textless{}name\textgreater{}.socket}.
-
-When forwarding the request over RADIUS, by default the principal is
-used in the User-Name attribute of the RADIUS packet. The strip\_realm
-parameter controls whether the principal is forwarded with or without
-the realm portion.
-
-If an indicator field is present, tickets issued using this token type
-will be annotated with the specified authentication indicator (see
-{\hyperref[\detokenize{admin/auth_indicator:auth-indicator}]{\sphinxcrossref{\DUrole{std,std-ref}{Authentication indicators}}}}). This key may be specified multiple times to
-add multiple indicators.
-
-
-\section{The default token type}
-\label{\detokenize{admin/otp:the-default-token-type}}
-A default token type is used internally when no token type is specified for a
-given user. It is defined as follows:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{otp}\PYG{p}{]}
- \PYG{n}{DEFAULT} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{strip\PYGZus{}realm} \PYG{o}{=} \PYG{n}{false}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-The administrator may override the internal \sphinxcode{DEFAULT} token type
-simply by defining a configuration with the same name.
-
-
-\section{Token instance configuration}
-\label{\detokenize{admin/otp:token-instance-configuration}}
-To enable OTP for a client principal, the administrator must define
-the \sphinxstylestrong{otp} string attribute for that principal. (See
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:set-string}]{\sphinxcrossref{\DUrole{std,std-ref}{set\_string}}}}.) The \sphinxstylestrong{otp} user string is a JSON string of the
-format:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-[\PYGZob{}
- \PYGZdq{}type\PYGZdq{}: \PYG{n+nt}{\PYGZlt{}string}\PYG{n+nt}{\PYGZgt{}},
- \PYGZdq{}username\PYGZdq{}: \PYG{n+nt}{\PYGZlt{}string}\PYG{n+nt}{\PYGZgt{}},
- \PYGZdq{}indicators\PYGZdq{}: [\PYG{n+nt}{\PYGZlt{}string}\PYG{n+nt}{\PYGZgt{}}, ...]
- \PYGZcb{}, ...]
-\end{sphinxVerbatim}
-
-This is an array of token objects. Both fields of token objects are
-optional. The \sphinxstylestrong{type} field names the token type of this token; if
-not specified, it defaults to \sphinxcode{DEFAULT}. The \sphinxstylestrong{username} field
-specifies the value to be sent in the User-Name RADIUS attribute. If
-not specified, the principal name is sent, with or without realm as
-defined in the token type. The \sphinxstylestrong{indicators} field specifies a list
-of authentication indicators to annotate tickets with, overriding any
-indicators specified in the token type.
-
-For ease of configuration, an empty array (\sphinxcode{{[}{]}}) is treated as
-equivalent to one DEFAULT token (\sphinxcode{{[}\{\}{]}}).
-
-
-\section{Other considerations}
-\label{\detokenize{admin/otp:other-considerations}}\begin{enumerate}
-\item {}
-FAST is required for OTP to work.
-
-\end{enumerate}
-
-
-\chapter{SPAKE Preauthentication}
-\label{\detokenize{admin/spake::doc}}\label{\detokenize{admin/spake:spake-preauthentication}}\label{\detokenize{admin/spake:spake}}
-SPAKE preauthentication (added in release 1.17) uses public key
-cryptography techniques to protect against {\hyperref[\detokenize{admin/dictionary:dictionary}]{\sphinxcrossref{\DUrole{std,std-ref}{password dictionary
-attacks}}}}. Unlike {\hyperref[\detokenize{admin/pkinit:pkinit}]{\sphinxcrossref{\DUrole{std,std-ref}{PKINIT}}}}, it does not
-require any additional infrastructure such as certificates; it simply
-needs to be turned on. Using SPAKE preauthentication may modestly
-increase the CPU and network load on the KDC.
-
-SPAKE preauthentication can use one of four elliptic curve groups for
-its password-authenticated key exchange. The recommended group is
-\sphinxcode{edwards25519}; three NIST curves (\sphinxcode{P-256}, \sphinxcode{P-384}, and
-\sphinxcode{P-521}) are also supported.
-
-By default, SPAKE with the \sphinxcode{edwards25519} group is enabled on
-clients, but the KDC does not offer SPAKE by default. To turn it on,
-set the \sphinxstylestrong{spake\_preauth\_groups} variable in {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}} to a
-list of allowed groups. This variable affects both the client and the
-KDC. Simply setting it to \sphinxcode{edwards25519} is recommended:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{libdefaults}\PYG{p}{]}
- \PYG{n}{spake\PYGZus{}preauth\PYGZus{}groups} \PYG{o}{=} \PYG{n}{edwards25519}
-\end{sphinxVerbatim}
-
-Set the \sphinxstylestrong{+requires\_preauth} and \sphinxstylestrong{-allow\_svr} flags on client
-principal entries, as you would for any preauthentication mechanism:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{modprinc} \PYG{o}{+}\PYG{n}{requires\PYGZus{}preauth} \PYG{o}{\PYGZhy{}}\PYG{n}{allow\PYGZus{}svr} \PYG{n}{PRINCNAME}
-\end{sphinxVerbatim}
-
-Clients which do not implement SPAKE preauthentication will fall back
-to encrypted timestamp.
-
-An active attacker can force a fallback to encrypted timestamp by
-modifying the initial KDC response, defeating the protection against
-dictionary attacks. To prevent this fallback on clients which do
-implement SPAKE preauthentication, set the
-\sphinxstylestrong{disable\_encrypted\_timestamp} variable to \sphinxcode{true} in the
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} subsection for realms whose KDCs offer SPAKE
-preauthentication.
-
-By default, SPAKE preauthentication requires an extra network round
-trip to the KDC during initial authentication. If most of the clients
-in a realm support SPAKE, this extra round trip can be eliminated
-using an optimistic challenge, by setting the
-\sphinxstylestrong{spake\_preauth\_kdc\_challenge} variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdcdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}kdcdefaults{]}}}}} to a
-single group name:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{kdcdefaults}\PYG{p}{]}
- \PYG{n}{spake\PYGZus{}preauth\PYGZus{}kdc\PYGZus{}challenge} \PYG{o}{=} \PYG{n}{edwards25519}
-\end{sphinxVerbatim}
-
-Using optimistic challenge will cause the KDC to do extra work for
-initial authentication requests that do not result in SPAKE
-preauthentication, but will save work when SPAKE preauthentication is
-used.
-
-
-\chapter{Addressing dictionary attack risks}
-\label{\detokenize{admin/dictionary:addressing-dictionary-attack-risks}}\label{\detokenize{admin/dictionary::doc}}\label{\detokenize{admin/dictionary:dictionary}}
-Kerberos initial authentication is normally secured using the client
-principal’s long-term key, which for users is generally derived from a
-password. Using a pasword-derived long-term key carries the risk of a
-dictionary attack, where an attacker tries a sequence of possible
-passwords, possibly requiring much less effort than would be required
-to try all possible values of the key. Even if {\hyperref[\detokenize{admin/database:policies}]{\sphinxcrossref{\DUrole{std,std-ref}{password policy
-objects}}}} are used to force users not to pick trivial
-passwords, dictionary attacks can sometimes be successful against a
-significant fraction of the users in a realm. Dictionary attacks are
-not a concern for principals using random keys.
-
-A dictionary attack may be online or offline. An online dictionary
-attack is performed by trying each password in a separate request to
-the KDC, and is therefore visible to the KDC and also limited in speed
-by the KDC’s processing power and the network capacity between the
-client and the KDC. Online dictionary attacks can be mitigated using
-{\hyperref[\detokenize{admin/lockout:lockout}]{\sphinxcrossref{\DUrole{std,std-ref}{account lockout}}}}. This measure is not totally
-satisfactory, as it makes it easy for an attacker to deny access to a
-client principal.
-
-An offline dictionary attack is performed by obtaining a ciphertext
-generated using the password-derived key, and trying each password
-against the ciphertext. This category of attack is invisible to the
-KDC and can be performed much faster than an online attack. The
-attack will generally take much longer with more recent encryption
-types (particularly the ones based on AES), because those encryption
-types use a much more expensive string-to-key function. However, the
-best defense is to deny the attacker access to a useful ciphertext.
-The required defensive measures depend on the attacker’s level of
-network access.
-
-An off-path attacker has no access to packets sent between legitimate
-users and the KDC. An off-path attacker could gain access to an
-attackable ciphertext either by making an AS request for a client
-principal which does not have the \sphinxstylestrong{+requires\_preauth} flag, or by
-making a TGS request (after authenticating as a different user) for a
-server principal which does not have the \sphinxstylestrong{-allow\_svr} flag. To
-address off-path attackers, a KDC administrator should set those flags
-on principals with password-derived keys:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{add\PYGZus{}principal} \PYG{o}{+}\PYG{n}{requires\PYGZus{}preauth} \PYG{o}{\PYGZhy{}}\PYG{n}{allow\PYGZus{}svr} \PYG{n}{princname}
-\end{sphinxVerbatim}
-
-An attacker with passive network access (one who can monitor packets
-sent between legitimate users and the KDC, but cannot change them or
-insert their own packets) can gain access to an attackable ciphertext
-by observing an authentication by a user using the most common form of
-preauthentication, encrypted timestamp. Any of the following methods
-can prevent dictionary attacks by attackers with passive network
-access:
-\begin{itemize}
-\item {}
-Enabling {\hyperref[\detokenize{admin/spake:spake}]{\sphinxcrossref{\DUrole{std,std-ref}{SPAKE preauthentication}}}} (added in release
-1.17) on the KDC, and ensuring that all clients are able to support
-it.
-
-\item {}
-Using an {\hyperref[\detokenize{admin/https:https}]{\sphinxcrossref{\DUrole{std,std-ref}{HTTPS proxy}}}} for communication with the KDC,
-if the attacker cannot monitor communication between the proxy
-server and the KDC.
-
-\item {}
-Using FAST, protecting the initial authentication with either a
-random key (such as a host key) or with {\hyperref[\detokenize{admin/pkinit:anonymous-pkinit}]{\sphinxcrossref{\DUrole{std,std-ref}{anonymous PKINIT}}}}.
-
-\end{itemize}
-
-An attacker with active network access (one who can inject or modify
-packets sent between legitimate users and the KDC) can try to fool the
-client software into sending an attackable ciphertext using an
-encryption type and salt string of the attacker’s choosing. Any of the
-following methods can prevent dictionary attacks by active attackers:
-\begin{itemize}
-\item {}
-Enabling SPAKE preauthentication and setting the
-\sphinxstylestrong{disable\_encrypted\_timestamp} variable to \sphinxcode{true} in the
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} subsection of the client configuration.
-
-\item {}
-Using an HTTPS proxy as described above, configured in the client’s
-krb5.conf realm configuration. If {\hyperref[\detokenize{admin/realm_config:kdc-discovery}]{\sphinxcrossref{\DUrole{std,std-ref}{KDC discovery}}}} is used to locate a proxy server, an active
-attacker may be able to use DNS spoofing to cause the client to use
-a different HTTPS server or to not use HTTPS.
-
-\item {}
-Using FAST as described above.
-
-\end{itemize}
-
-If {\hyperref[\detokenize{admin/pkinit:pkinit}]{\sphinxcrossref{\DUrole{std,std-ref}{PKINIT}}}} or {\hyperref[\detokenize{admin/otp:otp-preauth}]{\sphinxcrossref{\DUrole{std,std-ref}{OTP}}}} are used for
-initial authentication, the principal’s long-term keys are not used
-and dictionary attacks are usually not a concern.
-
-
-\chapter{Principal names and DNS}
-\label{\detokenize{admin/princ_dns:principal-names-and-dns}}\label{\detokenize{admin/princ_dns::doc}}
-Kerberos clients can do DNS lookups to canonicalize service principal
-names. This can cause difficulties when setting up Kerberos
-application servers, especially when the client’s name for the service
-is different from what the service thinks its name is.
-
-
-\section{Service principal names}
-\label{\detokenize{admin/princ_dns:service-principal-names}}
-A frequently used kind of principal name is the host-based service
-principal name. This kind of principal name has two components: a
-service name and a hostname. For example, \sphinxcode{imap/imap.example.com}
-is the principal name of the “imap” service on the host
-“imap.example.com”. Other possible service names for the first
-component include “host” (remote login services such as ssh), “HTTP”,
-and “nfs” (Network File System).
-
-Service administrators often publish well-known hostname aliases that
-they would prefer users to use instead of the canonical name of the
-service host. This gives service administrators more flexibility in
-deploying services. For example, a shell login server might be named
-“long-vanity-hostname.example.com”, but users will naturally prefer to
-type something like “login.example.com”. Hostname aliases also allow
-for administrators to set up load balancing for some sorts of services
-based on rotating \sphinxcode{CNAME} records in DNS.
-
-
-\section{Service principal canonicalization}
-\label{\detokenize{admin/princ_dns:service-principal-canonicalization}}
-In the MIT krb5 client library, canonicalization of host-based service
-principals is controlled by the \sphinxstylestrong{dns\_canonicalize\_hostname},
-\sphinxstylestrong{rnds}, and \sphinxstylestrong{qualify\_shortname} variables in {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}}.
-
-If \sphinxstylestrong{dns\_canonicalize\_hostname} is set to \sphinxcode{true} (the default
-value), the client performs forward resolution by looking up the IPv4
-and/or IPv6 addresses of the hostname using \sphinxcode{getaddrinfo()}. This
-process will typically add a domain suffix to the hostname if needed,
-and follow CNAME records in the DNS. If \sphinxstylestrong{rdns} is also set to
-\sphinxcode{true} (the default), the client will then perform a reverse lookup
-of the first returned Internet address using \sphinxcode{getnameinfo()},
-finding the name associated with the PTR record.
-
-If \sphinxstylestrong{dns\_canonicalize\_hostname} is set to \sphinxcode{false}, the hostname is
-not canonicalized using DNS. If the hostname has only one component
-(i.e. it contains no “.” characters), the host’s primary DNS search
-domain will be appended, if there is one. The \sphinxstylestrong{qualify\_shortname}
-variable can be used to override or disable this suffix.
-
-If \sphinxstylestrong{dns\_canonicalize\_hostname} is set to \sphinxcode{fallback} (added in
-release 1.18), the hostname is initially treated according to the
-rules for \sphinxcode{dns\_canonicalize\_hostname=false}. If a ticket request
-fails because the service principal is unknown, the hostname will be
-canonicalized according to the rules for
-\sphinxcode{dns\_canonicalize\_hostname=true} and the request will be retried.
-
-In all cases, the hostname is converted to lowercase, and any trailing
-dot is removed.
-
-
-\section{Reverse DNS mismatches}
-\label{\detokenize{admin/princ_dns:reverse-dns-mismatches}}
-Sometimes, an enterprise will have control over its forward DNS but
-not its reverse DNS. The reverse DNS is sometimes under the control
-of the Internet service provider of the enterprise, and the enterprise
-may not have much influence in setting up reverse DNS records for its
-address space. If there are difficulties with getting forward and
-reverse DNS to match, it is best to set \sphinxcode{rdns = false} on client
-machines.
-
-
-\section{Overriding application behavior}
-\label{\detokenize{admin/princ_dns:overriding-application-behavior}}
-Applications can choose to use a default hostname component in their
-service principal name when accepting authentication, which avoids
-some sorts of hostname mismatches. Because not all relevant
-applications do this yet, using the {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} setting:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{libdefaults}\PYG{p}{]}
- \PYG{n}{ignore\PYGZus{}acceptor\PYGZus{}hostname} \PYG{o}{=} \PYG{n}{true}
-\end{sphinxVerbatim}
-
-will allow the Kerberos library to override the application’s choice
-of service principal hostname and will allow a server program to
-accept incoming authentications using any key in its keytab that
-matches the service name and realm name (if given). This setting
-defaults to “false” and is available in releases krb5-1.10 and later.
-
-
-\section{Provisioning keytabs}
-\label{\detokenize{admin/princ_dns:provisioning-keytabs}}
-One service principal entry that should be in the keytab is a
-principal whose hostname component is the canonical hostname that
-\sphinxcode{getaddrinfo()} reports for all known aliases for the host. If the
-reverse DNS information does not match this canonical hostname, an
-additional service principal entry should be in the keytab for this
-different hostname.
-
-
-\section{Specific application advice}
-\label{\detokenize{admin/princ_dns:specific-application-advice}}
-
-\subsection{Secure shell (ssh)}
-\label{\detokenize{admin/princ_dns:secure-shell-ssh}}
-Setting \sphinxcode{GSSAPIStrictAcceptorCheck = no} in the configuration file
-of modern versions of the openssh daemon will allow the daemon to try
-any key in its keytab when accepting a connection, rather than looking
-for the keytab entry that matches the host’s own idea of its name
-(typically the name that \sphinxcode{gethostname()} returns). This requires
-krb5-1.10 or later.
-
-
-\subsection{OpenLDAP (ldapsearch, etc.)}
-\label{\detokenize{admin/princ_dns:openldap-ldapsearch-etc}}
-OpenLDAP’s SASL implementation performs reverse DNS lookup in order to
-canonicalize service principal names, even if \sphinxstylestrong{rdns} is set to
-\sphinxcode{false} in the Kerberos configuration. To disable this behavior,
-add \sphinxcode{SASL\_NOCANON on} to \sphinxcode{ldap.conf}, or set the
-\sphinxcode{LDAPSASL\_NOCANON} environment variable.
-
-
-\chapter{Encryption types}
-\label{\detokenize{admin/enctypes:enctypes}}\label{\detokenize{admin/enctypes::doc}}\label{\detokenize{admin/enctypes:encryption-types}}
-Kerberos can use a variety of cipher algorithms to protect data. A
-Kerberos \sphinxstylestrong{encryption type} (also known as an \sphinxstylestrong{enctype}) is a
-specific combination of a cipher algorithm with an integrity algorithm
-to provide both confidentiality and integrity to data.
-
-
-\section{Enctypes in requests}
-\label{\detokenize{admin/enctypes:enctypes-in-requests}}
-Clients make two types of requests (KDC-REQ) to the KDC: AS-REQs and
-TGS-REQs. The client uses the AS-REQ to obtain initial tickets
-(typically a Ticket-Granting Ticket (TGT)), and uses the TGS-REQ to
-obtain service tickets.
-
-The KDC uses three different keys when issuing a ticket to a client:
-\begin{itemize}
-\item {}
-The long-term key of the service: the KDC uses this to encrypt the
-actual service ticket. The KDC only uses the first long-term key in
-the most recent kvno for this purpose.
-
-\item {}
-The session key: the KDC randomly chooses this key and places one
-copy inside the ticket and the other copy inside the encrypted part
-of the reply.
-
-\item {}
-The reply-encrypting key: the KDC uses this to encrypt the reply it
-sends to the client. For AS replies, this is a long-term key of the
-client principal. For TGS replies, this is either the session key of the
-authenticating ticket, or a subsession key.
-
-\end{itemize}
-
-Each of these keys is of a specific enctype.
-
-Each request type allows the client to submit a list of enctypes that
-it is willing to accept. For the AS-REQ, this list affects both the
-session key selection and the reply-encrypting key selection. For the
-TGS-REQ, this list only affects the session key selection.
-
-
-\section{Session key selection}
-\label{\detokenize{admin/enctypes:session-key-selection}}\label{\detokenize{admin/enctypes:id1}}
-The KDC chooses the session key enctype by taking the intersection of
-its \sphinxstylestrong{permitted\_enctypes} list, the list of long-term keys for the
-most recent kvno of the service, and the client’s requested list of
-enctypes.
-
-Starting in krb5-1.11, it is possible to set a string attribute on a
-service principal to control what session key enctypes the KDC may
-issue for service tickets for that principal. See {\hyperref[\detokenize{admin/admin_commands/kadmin_local:set-string}]{\sphinxcrossref{\DUrole{std,std-ref}{set\_string}}}}
-in {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} for details.
-
-
-\section{Choosing enctypes for a service}
-\label{\detokenize{admin/enctypes:choosing-enctypes-for-a-service}}
-Generally, a service should have a key of the strongest
-enctype that both it and the KDC support. If the KDC is running a
-release earlier than krb5-1.11, it is also useful to generate an
-additional key for each enctype that the service can support. The KDC
-will only use the first key in the list of long-term keys for encrypting
-the service ticket, but the additional long-term keys indicate the
-other enctypes that the service supports.
-
-As noted above, starting with release krb5-1.11, there are additional
-configuration settings that control session key enctype selection
-independently of the set of long-term keys that the KDC has stored for
-a service principal.
-
-
-\section{Configuration variables}
-\label{\detokenize{admin/enctypes:configuration-variables}}
-The following \sphinxcode{{[}libdefaults{]}} settings in {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} will
-affect how enctypes are chosen.
-\begin{description}
-\item[{\sphinxstylestrong{allow\_weak\_crypto}}] \leavevmode
-defaults to \sphinxstyleemphasis{false} starting with krb5-1.8. When \sphinxstyleemphasis{false}, removes
-weak enctypes from \sphinxstylestrong{permitted\_enctypes},
-\sphinxstylestrong{default\_tkt\_enctypes}, and \sphinxstylestrong{default\_tgs\_enctypes}. Do not
-set this to \sphinxstyleemphasis{true} unless the use of weak enctypes is an
-acceptable risk for your environment and the weak enctypes are
-required for backward compatibility.
-
-\item[{\sphinxstylestrong{permitted\_enctypes}}] \leavevmode
-controls the set of enctypes that a service will permit for
-session keys and for ticket and authenticator encryption. The KDC
-and other programs that access the Kerberos database will ignore
-keys of non-permitted enctypes. Starting in release 1.18, this
-setting also acts as the default for \sphinxstylestrong{default\_tkt\_enctypes} and
-\sphinxstylestrong{default\_tgs\_enctypes}.
-
-\item[{\sphinxstylestrong{default\_tkt\_enctypes}}] \leavevmode
-controls the default set of enctypes that the Kerberos client
-library requests when making an AS-REQ. Do not set this unless
-required for specific backward compatibility purposes; stale
-values of this setting can prevent clients from taking advantage
-of new stronger enctypes when the libraries are upgraded.
-
-\item[{\sphinxstylestrong{default\_tgs\_enctypes}}] \leavevmode
-controls the default set of enctypes that the Kerberos client
-library requests when making a TGS-REQ. Do not set this unless
-required for specific backward compatibility purposes; stale
-values of this setting can prevent clients from taking advantage
-of new stronger enctypes when the libraries are upgraded.
-
-\end{description}
-
-The following per-realm setting in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} affects the
-generation of long-term keys.
-\begin{description}
-\item[{\sphinxstylestrong{supported\_enctypes}}] \leavevmode
-controls the default set of enctype-salttype pairs that {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}}
-will use for generating long-term keys, either randomly or from
-passwords
-
-\end{description}
-
-
-\section{Enctype compatibility}
-\label{\detokenize{admin/enctypes:enctype-compatibility}}
-See {\hyperref[\detokenize{admin/conf_files/kdc_conf:encryption-types}]{\sphinxcrossref{\DUrole{std,std-ref}{Encryption types}}}} for additional information about enctypes.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|T|T|}
-\hline
-\sphinxstylethead{\sphinxstyletheadfamily
-enctype
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-weak?
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-krb5
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Windows
-\unskip}\relax \\
-\hline
-des-cbc-crc
-&
-weak
-&
-\textless{}1.18
-&
-\textgreater{}=2000
-\\
-\hline
-des-cbc-md4
-&
-weak
-&
-\textless{}1.18
-&
-?
-\\
-\hline
-des-cbc-md5
-&
-weak
-&
-\textless{}1.18
-&
-\textgreater{}=2000
-\\
-\hline
-des3-cbc-sha1
-&
-deprecated
-&
-\textgreater{}=1.1
-&
-none
-\\
-\hline
-arcfour-hmac
-&
-deprecated
-&
-\textgreater{}=1.3
-&
-\textgreater{}=2000
-\\
-\hline
-arcfour-hmac-exp
-&
-weak
-&
-\textgreater{}=1.3
-&
-\textgreater{}=2000
-\\
-\hline
-aes128-cts-hmac-sha1-96
-&&
-\textgreater{}=1.3
-&
-\textgreater{}=Vista
-\\
-\hline
-aes256-cts-hmac-sha1-96
-&&
-\textgreater{}=1.3
-&
-\textgreater{}=Vista
-\\
-\hline
-aes128-cts-hmac-sha256-128
-&&
-\textgreater{}=1.15
-&
-none
-\\
-\hline
-aes256-cts-hmac-sha384-192
-&&
-\textgreater{}=1.15
-&
-none
-\\
-\hline
-camellia128-cts-cmac
-&&
-\textgreater{}=1.9
-&
-none
-\\
-\hline
-camellia256-cts-cmac
-&&
-\textgreater{}=1.9
-&
-none
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-krb5 releases 1.18 and later do not support single-DES. krb5 releases
-1.8 and later disable the single-DES enctypes by default. Microsoft
-Windows releases Windows 7 and later disable single-DES enctypes by
-default.
-
-krb5 releases 1.17 and later flag deprecated encryption types
-(including \sphinxcode{des3-cbc-sha1} and \sphinxcode{arcfour-hmac}) in KDC logs and
-kadmin output. krb5 release 1.19 issues a warning during initial
-authentication if \sphinxcode{des3-cbc-sha1} is used. Future releases will
-disable \sphinxcode{des3-cbc-sha1} by default and eventually remove support for
-it.
-
-
-\section{Migrating away from older encryption types}
-\label{\detokenize{admin/enctypes:migrating-away-from-older-encryption-types}}
-Administrator intervention may be required to migrate a realm away
-from legacy encryption types, especially if the realm was created
-using krb5 release 1.2 or earlier. This migration should be performed
-before upgrading to krb5 versions which disable or remove support for
-legacy encryption types.
-
-If there is a \sphinxstylestrong{supported\_enctypes} setting in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} on
-the KDC, make sure that it does not include weak or deprecated
-encryption types. This will ensure that newly created keys do not use
-those encryption types by default.
-
-Check the \sphinxcode{krbtgt/REALM} principal using the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}
-\sphinxstylestrong{getprinc} command. If it lists a weak or deprecated encryption
-type as the first key, it must be migrated using the procedure in
-{\hyperref[\detokenize{admin/database:changing-krbtgt-key}]{\sphinxcrossref{\DUrole{std,std-ref}{Changing the krbtgt key}}}}.
-
-Check the \sphinxcode{kadmin/history} principal, which should have only one key
-entry. If it uses a weak or deprecated encryption type, it should be
-upgraded following the notes in {\hyperref[\detokenize{admin/database:updating-history-key}]{\sphinxcrossref{\DUrole{std,std-ref}{Updating the history key}}}}.
-
-Check the other kadmin principals: kadmin/changepw, kadmin/admin, and
-any kadmin/hostname principals that may exist. These principals can
-be upgraded with \sphinxstylestrong{change\_password -randkey} in kadmin.
-
-Check the \sphinxcode{K/M} entry. If it uses a weak or deprecated encryption
-type, it should be upgraded following the procedure in
-{\hyperref[\detokenize{admin/database:updating-master-key}]{\sphinxcrossref{\DUrole{std,std-ref}{Updating the master key}}}}.
-
-User and service principals using legacy encryption types can be
-enumerated with the {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} \sphinxstylestrong{tabdump keyinfo} command.
-
-Service principals can be migrated with a keytab rotation on the
-service host, which can be accomplished using the {\hyperref[\detokenize{admin/admin_commands/k5srvutil:k5srvutil-1}]{\sphinxcrossref{\DUrole{std,std-ref}{k5srvutil}}}}
-\sphinxstylestrong{change} and \sphinxstylestrong{delold} commands. Allow enough time for existing
-tickets to expire between the change and delold operations.
-
-User principals with password-based keys can be migrated with a
-password change. The realm administrator can set a password
-expiration date using the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{modify\_principal
--pwexpire} command to force a password change.
-
-If a legacy encryption type has not yet been disabled by default in
-the version of krb5 running on the KDC, it can be disabled
-administratively with the \sphinxstylestrong{permitted\_enctypes} variable. For
-example, setting \sphinxstylestrong{permitted\_enctypes} to \sphinxcode{DEFAULT -des3 -rc4} will
-cause any database keys of the triple-DES and RC4 encryption types to
-be ignored.
-
-
-\chapter{HTTPS proxy configuration}
-\label{\detokenize{admin/https:https-proxy-configuration}}\label{\detokenize{admin/https::doc}}\label{\detokenize{admin/https:https}}
-In addition to being able to use UDP or TCP to communicate directly
-with a KDC as is outlined in RFC4120, and with kpasswd services in a
-similar fashion, the client libraries can attempt to use an HTTPS
-proxy server to communicate with a KDC or kpasswd service, using the
-protocol outlined in {[}MS-KKDCP{]}.
-
-Communicating with a KDC through an HTTPS proxy allows clients to
-contact servers when network firewalls might otherwise prevent them
-from doing so. The use of TLS also encrypts all traffic between the
-clients and the KDC, preventing observers from conducting password
-dictionary attacks or from observing the client and server principals
-being authenticated, at additional computational cost to both clients
-and servers.
-
-An HTTPS proxy server is provided as a feature in some versions of
-Microsoft Windows Server, and a WSGI implementation named \sphinxtitleref{kdcproxy}
-is available in the python package index.
-
-
-\section{Configuring the clients}
-\label{\detokenize{admin/https:configuring-the-clients}}
-To use an HTTPS proxy, a client host must trust the CA which issued
-that proxy’s SSL certificate. If that CA’s certificate is not in the
-system-wide default set of trusted certificates, configure the
-following relation in the client host’s {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} file in
-the appropriate {\hyperref[\detokenize{admin/conf_files/krb5_conf:realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} subsection:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{http\PYGZus{}anchors} \PYG{o}{=} \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{/}\PYG{n}{cacert}\PYG{o}{.}\PYG{n}{pem}
-\end{sphinxVerbatim}
-
-Adjust the pathname to match the path of the file which contains a
-copy of the CA’s certificate. The \sphinxtitleref{http\_anchors} option is documented
-more fully in {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}.
-
-Configure the client to access the KDC and kpasswd service by
-specifying their locations in its {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} file in the form
-of HTTPS URLs for the proxy server:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdc} \PYG{o}{=} \PYG{n}{https}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{server}\PYG{o}{.}\PYG{n}{fqdn}\PYG{o}{/}\PYG{n}{KdcProxy}
-\PYG{n}{kpasswd\PYGZus{}server} \PYG{o}{=} \PYG{n}{https}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{server}\PYG{o}{.}\PYG{n}{fqdn}\PYG{o}{/}\PYG{n}{KdcProxy}
-\end{sphinxVerbatim}
-
-If the proxy and client are properly configured, client commands such
-as \sphinxcode{kinit}, \sphinxcode{kvno}, and \sphinxcode{kpasswd} should all function normally.
-
-
-\chapter{Authentication indicators}
-\label{\detokenize{admin/auth_indicator:auth-indicator}}\label{\detokenize{admin/auth_indicator:authentication-indicators}}\label{\detokenize{admin/auth_indicator::doc}}
-As of release 1.14, the KDC can be configured to annotate tickets if
-the client authenticated using a stronger preauthentication mechanism
-such as {\hyperref[\detokenize{admin/pkinit:pkinit}]{\sphinxcrossref{\DUrole{std,std-ref}{PKINIT}}}} or {\hyperref[\detokenize{admin/otp:otp-preauth}]{\sphinxcrossref{\DUrole{std,std-ref}{OTP}}}}. These
-annotations are called “authentication indicators.” Service
-principals can be configured to require particular authentication
-indicators in order to authenticate to that service. An
-authentication indicator value can be any string chosen by the KDC
-administrator; there are no pre-set values.
-
-To use authentication indicators with PKINIT or OTP, first configure
-the KDC to include an indicator when that preauthentication mechanism
-is used. For PKINIT, use the \sphinxstylestrong{pkinit\_indicator} variable in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}. For OTP, use the \sphinxstylestrong{indicator} variable in the
-token type definition, or specify the indicators in the \sphinxstylestrong{otp} user
-string as described in {\hyperref[\detokenize{admin/otp:otp-preauth}]{\sphinxcrossref{\DUrole{std,std-ref}{OTP Preauthentication}}}}.
-
-To require an indicator to be present in order to authenticate to a
-service principal, set the \sphinxstylestrong{require\_auth} string attribute on the
-principal to the indicator value to be required. If you wish to allow
-one of several indicators to be accepted, you can specify multiple
-indicator values separated by spaces.
-
-For example, a realm could be configured to set the authentication
-indicator value “strong” when PKINIT is used to authenticate, using a
-setting in the {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-realms}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}realms{]}}}}} subsection:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{pkinit\PYGZus{}indicator} \PYG{o}{=} \PYG{n}{strong}
-\end{sphinxVerbatim}
-
-A service principal could be configured to require the “strong”
-authentication indicator value:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYGZdl{} kadmin setstr host/high.value.server require\PYGZus{}auth strong
-Password for user/admin@KRBTEST.COM:
-\end{sphinxVerbatim}
-
-A user who authenticates with PKINIT would be able to obtain a ticket
-for the service principal:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYGZdl{} kinit \PYGZhy{}X X509\PYGZus{}user\PYGZus{}identity=FILE:/my/cert.pem,/my/key.pem user
-\PYGZdl{} kvno host/high.value.server
-host/high.value.server@KRBTEST.COM: kvno = 1
-\end{sphinxVerbatim}
-
-but a user who authenticates with a password would not:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYGZdl{} kinit user
-Password for user@KRBTEST.COM:
-\PYGZdl{} kvno host/high.value.server
-kvno: KDC policy rejects request while getting credentials for
- host/high.value.server@KRBTEST.COM
-\end{sphinxVerbatim}
-
-GSSAPI server applications can inspect authentication indicators
-through the \DUrole{xref,std,std-ref}{auth-indicators} name
-attribute.
-
-
-\chapter{Administration programs}
-\label{\detokenize{admin/admin_commands/index:administration-programs}}\label{\detokenize{admin/admin_commands/index::doc}}
-
-\section{kadmin}
-\label{\detokenize{admin/admin_commands/kadmin_local::doc}}\label{\detokenize{admin/admin_commands/kadmin_local:kadmin}}\label{\detokenize{admin/admin_commands/kadmin_local:kadmin-1}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/kadmin_local:synopsis}}\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:kadmin-synopsis}}
-\sphinxstylestrong{kadmin}
-{[}\sphinxstylestrong{-O}\textbar{}\sphinxstylestrong{-N}{]}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{]}
-{[}\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}{]}
-{[}\sphinxstylestrong{-q} \sphinxstyleemphasis{query}{]}
-{[}{[}\sphinxstylestrong{-c} \sphinxstyleemphasis{cache\_name}{]}\textbar{}{[}\sphinxstylestrong{-k} {[}\sphinxstylestrong{-t} \sphinxstyleemphasis{keytab}{]}{]}\textbar{}\sphinxstylestrong{-n}{]}
-{[}\sphinxstylestrong{-w} \sphinxstyleemphasis{password}{]}
-{[}\sphinxstylestrong{-s} \sphinxstyleemphasis{admin\_server}{[}:\sphinxstyleemphasis{port}{]}{]}
-{[}command args…{]}
-
-\sphinxstylestrong{kadmin.local}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{]}
-{[}\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}{]}
-{[}\sphinxstylestrong{-q} \sphinxstyleemphasis{query}{]}
-{[}\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}{]}
-{[}\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt} …{]}
-{[}\sphinxstylestrong{-m}{]}
-{[}\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}{]}
-{[}command args…{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/kadmin_local:kadmin-synopsis-end}}\label{\detokenize{admin/admin_commands/kadmin_local:description}}
-kadmin and kadmin.local are command-line interfaces to the Kerberos V5
-administration system. They provide nearly identical functionalities;
-the difference is that kadmin.local directly accesses the KDC
-database, while kadmin performs operations using {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}}.
-Except as explicitly noted otherwise, this man page will use “kadmin”
-to refer to both versions. kadmin provides for the maintenance of
-Kerberos principals, password policies, and service key tables
-(keytabs).
-
-The remote kadmin client uses Kerberos to authenticate to kadmind
-using the service principal \sphinxcode{kadmin/admin} or \sphinxcode{kadmin/ADMINHOST}
-(where \sphinxstyleemphasis{ADMINHOST} is the fully-qualified hostname of the admin
-server). If the credentials cache contains a ticket for one of these
-principals, and the \sphinxstylestrong{-c} credentials\_cache option is specified, that
-ticket is used to authenticate to kadmind. Otherwise, the \sphinxstylestrong{-p} and
-\sphinxstylestrong{-k} options are used to specify the client Kerberos principal name
-used to authenticate. Once kadmin has determined the principal name,
-it requests a service ticket from the KDC, and uses that service
-ticket to authenticate to kadmind.
-
-Since kadmin.local directly accesses the KDC database, it usually must
-be run directly on the primary KDC with sufficient permissions to read
-the KDC database. If the KDC database uses the LDAP database module,
-kadmin.local can be run on any host which can access the LDAP server.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{admin/admin_commands/kadmin_local:options}}\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:kadmin-options}}\begin{description}
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}}] \leavevmode
-Use \sphinxstyleemphasis{realm} as the default database realm.
-
-\item[{\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}}] \leavevmode
-Use \sphinxstyleemphasis{principal} to authenticate. Otherwise, kadmin will append
-\sphinxcode{/admin} to the primary principal name of the default ccache,
-the value of the \sphinxstylestrong{USER} environment variable, or the username as
-obtained with getpwuid, in order of preference.
-
-\item[{\sphinxstylestrong{-k}}] \leavevmode
-Use a keytab to decrypt the KDC response instead of prompting for
-a password. In this case, the default principal will be
-\sphinxcode{host/hostname}. If there is no keytab specified with the
-\sphinxstylestrong{-t} option, then the default keytab will be used.
-
-\item[{\sphinxstylestrong{-t} \sphinxstyleemphasis{keytab}}] \leavevmode
-Use \sphinxstyleemphasis{keytab} to decrypt the KDC response. This can only be used
-with the \sphinxstylestrong{-k} option.
-
-\item[{\sphinxstylestrong{-n}}] \leavevmode
-Requests anonymous processing. Two types of anonymous principals
-are supported. For fully anonymous Kerberos, configure PKINIT on
-the KDC and configure \sphinxstylestrong{pkinit\_anchors} in the client’s
-{\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}. Then use the \sphinxstylestrong{-n} option with a principal
-of the form \sphinxcode{@REALM} (an empty principal name followed by the
-at-sign and a realm name). If permitted by the KDC, an anonymous
-ticket will be returned. A second form of anonymous tickets is
-supported; these realm-exposed tickets hide the identity of the
-client but not the client’s realm. For this mode, use \sphinxcode{kinit
--n} with a normal principal name. If supported by the KDC, the
-principal (but not realm) will be replaced by the anonymous
-principal. As of release 1.8, the MIT Kerberos KDC only supports
-fully anonymous operation.
-
-\item[{\sphinxstylestrong{-c} \sphinxstyleemphasis{credentials\_cache}}] \leavevmode
-Use \sphinxstyleemphasis{credentials\_cache} as the credentials cache. The cache
-should contain a service ticket for the \sphinxcode{kadmin/admin} or
-\sphinxcode{kadmin/ADMINHOST} (where \sphinxstyleemphasis{ADMINHOST} is the fully-qualified
-hostname of the admin server) service; it can be acquired with the
-\DUrole{xref,std,std-ref}{kinit(1)} program. If this option is not specified, kadmin
-requests a new service ticket from the KDC, and stores it in its
-own temporary ccache.
-
-\item[{\sphinxstylestrong{-w} \sphinxstyleemphasis{password}}] \leavevmode
-Use \sphinxstyleemphasis{password} instead of prompting for one. Use this option with
-care, as it may expose the password to other users on the system
-via the process list.
-
-\item[{\sphinxstylestrong{-q} \sphinxstyleemphasis{query}}] \leavevmode
-Perform the specified query and then exit.
-
-\item[{\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}}] \leavevmode
-Specifies the name of the KDC database. This option does not
-apply to the LDAP database module.
-
-\item[{\sphinxstylestrong{-s} \sphinxstyleemphasis{admin\_server}{[}:\sphinxstyleemphasis{port}{]}}] \leavevmode
-Specifies the admin server which kadmin should contact.
-
-\item[{\sphinxstylestrong{-m}}] \leavevmode
-If using kadmin.local, prompt for the database master password
-instead of reading it from a stash file.
-
-\item[{\sphinxstylestrong{-e} “\sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt} …”}] \leavevmode
-Sets the keysalt list to be used for any new keys created. See
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a list of possible
-values.
-
-\item[{\sphinxstylestrong{-O}}] \leavevmode
-Force use of old AUTH\_GSSAPI authentication flavor.
-
-\item[{\sphinxstylestrong{-N}}] \leavevmode
-Prevent fallback to AUTH\_GSSAPI authentication flavor.
-
-\item[{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}}] \leavevmode
-Specifies the database specific arguments. See the next section
-for supported options.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:kadmin-options-end}}
-Starting with release 1.14, if any command-line arguments remain after
-the options, they will be treated as a single query to be executed.
-This mode of operation is intended for scripts and behaves differently
-from the interactive mode in several respects:
-\begin{itemize}
-\item {}
-Query arguments are split by the shell, not by kadmin.
-
-\item {}
-Informational and warning messages are suppressed. Error messages
-and query output (e.g. for \sphinxstylestrong{get\_principal}) will still be
-displayed.
-
-\item {}
-Confirmation prompts are disabled (as if \sphinxstylestrong{-force} was given).
-Password prompts will still be issued as required.
-
-\item {}
-The exit status will be non-zero if the query fails.
-
-\end{itemize}
-
-The \sphinxstylestrong{-q} option does not carry these behavior differences; the query
-will be processed as if it was entered interactively. The \sphinxstylestrong{-q}
-option cannot be used in combination with a query in the remaining
-arguments.
-
-
-\subsection{DATABASE OPTIONS}
-\label{\detokenize{admin/admin_commands/kadmin_local:database-options}}\label{\detokenize{admin/admin_commands/kadmin_local:dboptions}}
-Database options can be used to override database-specific defaults.
-Supported options for the DB2 module are:
-\begin{quote}
-\begin{description}
-\item[{\sphinxstylestrong{-x dbname=}*filename*}] \leavevmode
-Specifies the base filename of the DB2 database.
-
-\item[{\sphinxstylestrong{-x lockiter}}] \leavevmode
-Make iteration operations hold the lock for the duration of
-the entire operation, rather than temporarily releasing the
-lock while handling each principal. This is the default
-behavior, but this option exists to allow command line
-override of a {[}dbmodules{]} setting. First introduced in
-release 1.13.
-
-\item[{\sphinxstylestrong{-x unlockiter}}] \leavevmode
-Make iteration operations unlock the database for each
-principal, instead of holding the lock for the duration of the
-entire operation. First introduced in release 1.13.
-
-\end{description}
-\end{quote}
-
-Supported options for the LDAP module are:
-\begin{quote}
-\begin{description}
-\item[{\sphinxstylestrong{-x host=}\sphinxstyleemphasis{ldapuri}}] \leavevmode
-Specifies the LDAP server to connect to by a LDAP URI.
-
-\item[{\sphinxstylestrong{-x binddn=}\sphinxstyleemphasis{bind\_dn}}] \leavevmode
-Specifies the DN used to bind to the LDAP server.
-
-\item[{\sphinxstylestrong{-x bindpwd=}\sphinxstyleemphasis{password}}] \leavevmode
-Specifies the password or SASL secret used to bind to the LDAP
-server. Using this option may expose the password to other
-users on the system via the process list; to avoid this,
-instead stash the password using the \sphinxstylestrong{stashsrvpw} command of
-{\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}}.
-
-\item[{\sphinxstylestrong{-x sasl\_mech=}\sphinxstyleemphasis{mechanism}}] \leavevmode
-Specifies the SASL mechanism used to bind to the LDAP server.
-The bind DN is ignored if a SASL mechanism is used. New in
-release 1.13.
-
-\item[{\sphinxstylestrong{-x sasl\_authcid=}\sphinxstyleemphasis{name}}] \leavevmode
-Specifies the authentication name used when binding to the
-LDAP server with a SASL mechanism, if the mechanism requires
-one. New in release 1.13.
-
-\item[{\sphinxstylestrong{-x sasl\_authzid=}\sphinxstyleemphasis{name}}] \leavevmode
-Specifies the authorization name used when binding to the LDAP
-server with a SASL mechanism. New in release 1.13.
-
-\item[{\sphinxstylestrong{-x sasl\_realm=}\sphinxstyleemphasis{realm}}] \leavevmode
-Specifies the realm used when binding to the LDAP server with
-a SASL mechanism, if the mechanism uses one. New in release
-1.13.
-
-\item[{\sphinxstylestrong{-x debug=}\sphinxstyleemphasis{level}}] \leavevmode
-sets the OpenLDAP client library debug level. \sphinxstyleemphasis{level} is an
-integer to be interpreted by the library. Debugging messages
-are printed to standard error. New in release 1.12.
-
-\end{description}
-\end{quote}
-
-
-\subsection{COMMANDS}
-\label{\detokenize{admin/admin_commands/kadmin_local:commands}}
-When using the remote client, available commands may be restricted
-according to the privileges specified in the {\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}} file
-on the admin server.
-
-
-\subsubsection{add\_principal}
-\label{\detokenize{admin/admin_commands/kadmin_local:add-principal}}\label{\detokenize{admin/admin_commands/kadmin_local:id1}}\begin{quote}
-
-\sphinxstylestrong{add\_principal} {[}\sphinxstyleemphasis{options}{]} \sphinxstyleemphasis{newprinc}
-\end{quote}
-
-Creates the principal \sphinxstyleemphasis{newprinc}, prompting twice for a password. If
-no password policy is specified with the \sphinxstylestrong{-policy} option, and the
-policy named \sphinxcode{default} is assigned to the principal if it exists.
-However, creating a policy named \sphinxcode{default} will not automatically
-assign this policy to previously existing principals. This policy
-assignment can be suppressed with the \sphinxstylestrong{-clearpolicy} option.
-
-This command requires the \sphinxstylestrong{add} privilege.
-
-Aliases: \sphinxstylestrong{addprinc}, \sphinxstylestrong{ank}
-
-Options:
-\begin{description}
-\item[{\sphinxstylestrong{-expire} \sphinxstyleemphasis{expdate}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) The expiration date of the principal.
-
-\item[{\sphinxstylestrong{-pwexpire} \sphinxstyleemphasis{pwexpdate}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) The password expiration date.
-
-\item[{\sphinxstylestrong{-maxlife} \sphinxstyleemphasis{maxlife}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) The maximum ticket life
-for the principal.
-
-\item[{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{maxrenewlife}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) The maximum renewable
-life of tickets for the principal.
-
-\item[{\sphinxstylestrong{-kvno} \sphinxstyleemphasis{kvno}}] \leavevmode
-The initial key version number.
-
-\item[{\sphinxstylestrong{-policy} \sphinxstyleemphasis{policy}}] \leavevmode
-The password policy used by this principal. If not specified, the
-policy \sphinxcode{default} is used if it exists (unless \sphinxstylestrong{-clearpolicy}
-is specified).
-
-\item[{\sphinxstylestrong{-clearpolicy}}] \leavevmode
-Prevents any policy from being assigned when \sphinxstylestrong{-policy} is not
-specified.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_postdated}}] \leavevmode
-\sphinxstylestrong{-allow\_postdated} prohibits this principal from obtaining
-postdated tickets. \sphinxstylestrong{+allow\_postdated} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_forwardable}}] \leavevmode
-\sphinxstylestrong{-allow\_forwardable} prohibits this principal from obtaining
-forwardable tickets. \sphinxstylestrong{+allow\_forwardable} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_renewable}}] \leavevmode
-\sphinxstylestrong{-allow\_renewable} prohibits this principal from obtaining
-renewable tickets. \sphinxstylestrong{+allow\_renewable} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_proxiable}}] \leavevmode
-\sphinxstylestrong{-allow\_proxiable} prohibits this principal from obtaining
-proxiable tickets. \sphinxstylestrong{+allow\_proxiable} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_dup\_skey}}] \leavevmode
-\sphinxstylestrong{-allow\_dup\_skey} disables user-to-user authentication for this
-principal by prohibiting others from obtaining a service ticket
-encrypted in this principal’s TGT session key.
-\sphinxstylestrong{+allow\_dup\_skey} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{requires\_preauth}}] \leavevmode
-\sphinxstylestrong{+requires\_preauth} requires this principal to preauthenticate
-before being allowed to kinit. \sphinxstylestrong{-requires\_preauth} clears this
-flag. When \sphinxstylestrong{+requires\_preauth} is set on a service principal,
-the KDC will only issue service tickets for that service principal
-if the client’s initial authentication was performed using
-preauthentication.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{requires\_hwauth}}] \leavevmode
-\sphinxstylestrong{+requires\_hwauth} requires this principal to preauthenticate
-using a hardware device before being allowed to kinit.
-\sphinxstylestrong{-requires\_hwauth} clears this flag. When \sphinxstylestrong{+requires\_hwauth} is
-set on a service principal, the KDC will only issue service tickets
-for that service principal if the client’s initial authentication was
-performed using a hardware device to preauthenticate.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{ok\_as\_delegate}}] \leavevmode
-\sphinxstylestrong{+ok\_as\_delegate} sets the \sphinxstylestrong{okay as delegate} flag on tickets
-issued with this principal as the service. Clients may use this
-flag as a hint that credentials should be delegated when
-authenticating to the service. \sphinxstylestrong{-ok\_as\_delegate} clears this
-flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_svr}}] \leavevmode
-\sphinxstylestrong{-allow\_svr} prohibits the issuance of service tickets for this
-principal. In release 1.17 and later, user-to-user service
-tickets are still allowed unless the \sphinxstylestrong{-allow\_dup\_skey} flag is
-also set. \sphinxstylestrong{+allow\_svr} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_tgs\_req}}] \leavevmode
-\sphinxstylestrong{-allow\_tgs\_req} specifies that a Ticket-Granting Service (TGS)
-request for a service ticket for this principal is not permitted.
-\sphinxstylestrong{+allow\_tgs\_req} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{allow\_tix}}] \leavevmode
-\sphinxstylestrong{-allow\_tix} forbids the issuance of any tickets for this
-principal. \sphinxstylestrong{+allow\_tix} clears this flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{needchange}}] \leavevmode
-\sphinxstylestrong{+needchange} forces a password change on the next initial
-authentication to this principal. \sphinxstylestrong{-needchange} clears this
-flag.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{password\_changing\_service}}] \leavevmode
-\sphinxstylestrong{+password\_changing\_service} marks this principal as a password
-change service principal.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{ok\_to\_auth\_as\_delegate}}] \leavevmode
-\sphinxstylestrong{+ok\_to\_auth\_as\_delegate} allows this principal to acquire
-forwardable tickets to itself from arbitrary users, for use with
-constrained delegation.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{no\_auth\_data\_required}}] \leavevmode
-\sphinxstylestrong{+no\_auth\_data\_required} prevents PAC or AD-SIGNEDPATH data from
-being added to service tickets for the principal.
-
-\item[{\{-\textbar{}+\}\sphinxstylestrong{lockdown\_keys}}] \leavevmode
-\sphinxstylestrong{+lockdown\_keys} prevents keys for this principal from leaving
-the KDC via kadmind. The chpass and extract operations are denied
-for a principal with this attribute. The chrand operation is
-allowed, but will not return the new keys. The delete and rename
-operations are also denied if this attribute is set, in order to
-prevent a malicious administrator from replacing principals like
-krbtgt/* or kadmin/* with new principals without the attribute.
-This attribute can be set via the network protocol, but can only
-be removed using kadmin.local.
-
-\item[{\sphinxstylestrong{-randkey}}] \leavevmode
-Sets the key of the principal to a random value.
-
-\item[{\sphinxstylestrong{-nokey}}] \leavevmode
-Causes the principal to be created with no key. New in release
-1.12.
-
-\item[{\sphinxstylestrong{-pw} \sphinxstyleemphasis{password}}] \leavevmode
-Sets the password of the principal to the specified string and
-does not prompt for a password. Note: using this option in a
-shell script may expose the password to other users on the system
-via the process list.
-
-\item[{\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt},…}] \leavevmode
-Uses the specified keysalt list for setting the keys of the
-principal. See {\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a
-list of possible values.
-
-\item[{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_princ\_args}}] \leavevmode
-Indicates database-specific options. The options for the LDAP
-database module are:
-\begin{description}
-\item[{\sphinxstylestrong{-x dn=}\sphinxstyleemphasis{dn}}] \leavevmode
-Specifies the LDAP object that will contain the Kerberos
-principal being created.
-
-\item[{\sphinxstylestrong{-x linkdn=}\sphinxstyleemphasis{dn}}] \leavevmode
-Specifies the LDAP object to which the newly created Kerberos
-principal object will point.
-
-\item[{\sphinxstylestrong{-x containerdn=}\sphinxstyleemphasis{container\_dn}}] \leavevmode
-Specifies the container object under which the Kerberos
-principal is to be created.
-
-\item[{\sphinxstylestrong{-x tktpolicy=}\sphinxstyleemphasis{policy}}] \leavevmode
-Associates a ticket policy to the Kerberos principal.
-
-\end{description}
-
-\begin{sphinxadmonition}{note}{Note:}\begin{itemize}
-\item {}
-The \sphinxstylestrong{containerdn} and \sphinxstylestrong{linkdn} options cannot be
-specified with the \sphinxstylestrong{dn} option.
-
-\item {}
-If the \sphinxstyleemphasis{dn} or \sphinxstyleemphasis{containerdn} options are not specified while
-adding the principal, the principals are created under the
-principal container configured in the realm or the realm
-container.
-
-\item {}
-\sphinxstyleemphasis{dn} and \sphinxstyleemphasis{containerdn} should be within the subtrees or
-principal container configured in the realm.
-
-\end{itemize}
-\end{sphinxadmonition}
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{addprinc} \PYG{n}{jennifer}
-\PYG{n}{No} \PYG{n}{policy} \PYG{n}{specified} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{defaulting} \PYG{n}{to} \PYG{n}{no} \PYG{n}{policy}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:}
-\PYG{n}{Principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{jennifer@ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{created}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:add-principal-end}}
-
-\subsubsection{modify\_principal}
-\label{\detokenize{admin/admin_commands/kadmin_local:add-principal-end}}\label{\detokenize{admin/admin_commands/kadmin_local:id2}}\label{\detokenize{admin/admin_commands/kadmin_local:modify-principal}}\begin{quote}
-
-\sphinxstylestrong{modify\_principal} {[}\sphinxstyleemphasis{options}{]} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Modifies the specified principal, changing the fields as specified.
-The options to \sphinxstylestrong{add\_principal} also apply to this command, except
-for the \sphinxstylestrong{-randkey}, \sphinxstylestrong{-pw}, and \sphinxstylestrong{-e} options. In addition, the
-option \sphinxstylestrong{-clearpolicy} will clear the current policy of a principal.
-
-This command requires the \sphinxstyleemphasis{modify} privilege.
-
-Alias: \sphinxstylestrong{modprinc}
-
-Options (in addition to the \sphinxstylestrong{addprinc} options):
-\begin{description}
-\item[{\sphinxstylestrong{-unlock}}] \leavevmode
-Unlocks a locked principal (one which has received too many failed
-authentication attempts without enough time between them according
-to its password policy) so that it can successfully authenticate.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:modify-principal-end}}
-
-\subsubsection{rename\_principal}
-\label{\detokenize{admin/admin_commands/kadmin_local:modify-principal-end}}\label{\detokenize{admin/admin_commands/kadmin_local:rename-principal}}\label{\detokenize{admin/admin_commands/kadmin_local:id3}}\begin{quote}
-
-\sphinxstylestrong{rename\_principal} {[}\sphinxstylestrong{-force}{]} \sphinxstyleemphasis{old\_principal} \sphinxstyleemphasis{new\_principal}
-\end{quote}
-
-Renames the specified \sphinxstyleemphasis{old\_principal} to \sphinxstyleemphasis{new\_principal}. This
-command prompts for confirmation, unless the \sphinxstylestrong{-force} option is
-given.
-
-This command requires the \sphinxstylestrong{add} and \sphinxstylestrong{delete} privileges.
-
-Alias: \sphinxstylestrong{renprinc}
-
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:rename-principal-end}}
-
-\subsubsection{delete\_principal}
-\label{\detokenize{admin/admin_commands/kadmin_local:id4}}\label{\detokenize{admin/admin_commands/kadmin_local:delete-principal}}\label{\detokenize{admin/admin_commands/kadmin_local:rename-principal-end}}\begin{quote}
-
-\sphinxstylestrong{delete\_principal} {[}\sphinxstylestrong{-force}{]} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Deletes the specified \sphinxstyleemphasis{principal} from the database. This command
-prompts for deletion, unless the \sphinxstylestrong{-force} option is given.
-
-This command requires the \sphinxstylestrong{delete} privilege.
-
-Alias: \sphinxstylestrong{delprinc}
-
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:delete-principal-end}}
-
-\subsubsection{change\_password}
-\label{\detokenize{admin/admin_commands/kadmin_local:id5}}\label{\detokenize{admin/admin_commands/kadmin_local:delete-principal-end}}\label{\detokenize{admin/admin_commands/kadmin_local:change-password}}\begin{quote}
-
-\sphinxstylestrong{change\_password} {[}\sphinxstyleemphasis{options}{]} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Changes the password of \sphinxstyleemphasis{principal}. Prompts for a new password if
-neither \sphinxstylestrong{-randkey} or \sphinxstylestrong{-pw} is specified.
-
-This command requires the \sphinxstylestrong{changepw} privilege, or that the
-principal running the program is the same as the principal being
-changed.
-
-Alias: \sphinxstylestrong{cpw}
-
-The following options are available:
-\begin{description}
-\item[{\sphinxstylestrong{-randkey}}] \leavevmode
-Sets the key of the principal to a random value.
-
-\item[{\sphinxstylestrong{-pw} \sphinxstyleemphasis{password}}] \leavevmode
-Set the password to the specified string. Using this option in a
-script may expose the password to other users on the system via
-the process list.
-
-\item[{\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt},…}] \leavevmode
-Uses the specified keysalt list for setting the keys of the
-principal. See {\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a
-list of possible values.
-
-\item[{\sphinxstylestrong{-keepold}}] \leavevmode
-Keeps the existing keys in the database. This flag is usually not
-necessary except perhaps for \sphinxcode{krbtgt} principals.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{cpw} \PYG{n}{systest}
-\PYG{n}{Enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{changed}\PYG{o}{.}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:change-password-end}}
-
-\subsubsection{purgekeys}
-\label{\detokenize{admin/admin_commands/kadmin_local:id6}}\label{\detokenize{admin/admin_commands/kadmin_local:change-password-end}}\label{\detokenize{admin/admin_commands/kadmin_local:purgekeys}}\begin{quote}
-
-\sphinxstylestrong{purgekeys} {[}\sphinxstylestrong{-all}\textbar{}\sphinxstylestrong{-keepkvno} \sphinxstyleemphasis{oldest\_kvno\_to\_keep}{]} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Purges previously retained old keys (e.g., from \sphinxstylestrong{change\_password
--keepold}) from \sphinxstyleemphasis{principal}. If \sphinxstylestrong{-keepkvno} is specified, then
-only purges keys with kvnos lower than \sphinxstyleemphasis{oldest\_kvno\_to\_keep}. If
-\sphinxstylestrong{-all} is specified, then all keys are purged. The \sphinxstylestrong{-all} option
-is new in release 1.12.
-
-This command requires the \sphinxstylestrong{modify} privilege.
-
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:purgekeys-end}}
-
-\subsubsection{get\_principal}
-\label{\detokenize{admin/admin_commands/kadmin_local:get-principal}}\label{\detokenize{admin/admin_commands/kadmin_local:id7}}\label{\detokenize{admin/admin_commands/kadmin_local:purgekeys-end}}\begin{quote}
-
-\sphinxstylestrong{get\_principal} {[}\sphinxstylestrong{-terse}{]} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Gets the attributes of principal. With the \sphinxstylestrong{-terse} option, outputs
-fields as quoted tab-separated strings.
-
-This command requires the \sphinxstylestrong{inquire} privilege, or that the principal
-running the the program to be the same as the one being listed.
-
-Alias: \sphinxstylestrong{getprinc}
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{getprinc} \PYG{n}{tlyu}\PYG{o}{/}\PYG{n}{admin}
-\PYG{n}{Principal}\PYG{p}{:} \PYG{n}{tlyu}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{Expiration} \PYG{n}{date}\PYG{p}{:} \PYG{p}{[}\PYG{n}{never}\PYG{p}{]}
-\PYG{n}{Last} \PYG{n}{password} \PYG{n}{change}\PYG{p}{:} \PYG{n}{Mon} \PYG{n}{Aug} \PYG{l+m+mi}{12} \PYG{l+m+mi}{14}\PYG{p}{:}\PYG{l+m+mi}{16}\PYG{p}{:}\PYG{l+m+mi}{47} \PYG{n}{EDT} \PYG{l+m+mi}{1996}
-\PYG{n}{Password} \PYG{n}{expiration} \PYG{n}{date}\PYG{p}{:} \PYG{p}{[}\PYG{n}{never}\PYG{p}{]}
-\PYG{n}{Maximum} \PYG{n}{ticket} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{10}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Maximum} \PYG{n}{renewable} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{7} \PYG{n}{days} \PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Last} \PYG{n}{modified}\PYG{p}{:} \PYG{n}{Mon} \PYG{n}{Aug} \PYG{l+m+mi}{12} \PYG{l+m+mi}{14}\PYG{p}{:}\PYG{l+m+mi}{16}\PYG{p}{:}\PYG{l+m+mi}{47} \PYG{n}{EDT} \PYG{l+m+mi}{1996} \PYG{p}{(}\PYG{n}{bjaspan}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{)}
-\PYG{n}{Last} \PYG{n}{successful} \PYG{n}{authentication}\PYG{p}{:} \PYG{p}{[}\PYG{n}{never}\PYG{p}{]}
-\PYG{n}{Last} \PYG{n}{failed} \PYG{n}{authentication}\PYG{p}{:} \PYG{p}{[}\PYG{n}{never}\PYG{p}{]}
-\PYG{n}{Failed} \PYG{n}{password} \PYG{n}{attempts}\PYG{p}{:} \PYG{l+m+mi}{0}
-\PYG{n}{Number} \PYG{n}{of} \PYG{n}{keys}\PYG{p}{:} \PYG{l+m+mi}{1}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{1}\PYG{p}{,} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha384}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{192}
-\PYG{n}{MKey}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{1}
-\PYG{n}{Attributes}\PYG{p}{:}
-\PYG{n}{Policy}\PYG{p}{:} \PYG{p}{[}\PYG{n}{none}\PYG{p}{]}
-
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{getprinc} \PYG{o}{\PYGZhy{}}\PYG{n}{terse} \PYG{n}{systest}
-\PYG{n}{systest}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM} \PYG{l+m+mi}{3} \PYG{l+m+mi}{86400} \PYG{l+m+mi}{604800} \PYG{l+m+mi}{1}
-\PYG{l+m+mi}{785926535} \PYG{l+m+mi}{753241234} \PYG{l+m+mi}{785900000}
-\PYG{n}{tlyu}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM} \PYG{l+m+mi}{786100034} \PYG{l+m+mi}{0} \PYG{l+m+mi}{0}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:get-principal-end}}
-
-\subsubsection{list\_principals}
-\label{\detokenize{admin/admin_commands/kadmin_local:get-principal-end}}\label{\detokenize{admin/admin_commands/kadmin_local:id8}}\label{\detokenize{admin/admin_commands/kadmin_local:list-principals}}\begin{quote}
-
-\sphinxstylestrong{list\_principals} {[}\sphinxstyleemphasis{expression}{]}
-\end{quote}
-
-Retrieves all or some principal names. \sphinxstyleemphasis{expression} is a shell-style
-glob expression that can contain the wild-card characters \sphinxcode{?},
-\sphinxcode{*}, and \sphinxcode{{[}{]}}. All principal names matching the expression are
-printed. If no expression is provided, all principal names are
-printed. If the expression does not contain an \sphinxcode{@} character, an
-\sphinxcode{@} character followed by the local realm is appended to the
-expression.
-
-This command requires the \sphinxstylestrong{list} privilege.
-
-Alias: \sphinxstylestrong{listprincs}, \sphinxstylestrong{get\_principals}, \sphinxstylestrong{getprincs}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{listprincs} \PYG{n}{test}\PYG{o}{*}
-\PYG{n}{test3}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{test2}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{test1}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{testuser}\PYG{n+nd}{@SECURE}\PYG{o}{\PYGZhy{}}\PYG{n}{TEST}\PYG{o}{.}\PYG{n}{OV}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:list-principals-end}}
-
-\subsubsection{get\_strings}
-\label{\detokenize{admin/admin_commands/kadmin_local:id9}}\label{\detokenize{admin/admin_commands/kadmin_local:get-strings}}\label{\detokenize{admin/admin_commands/kadmin_local:list-principals-end}}\begin{quote}
-
-\sphinxstylestrong{get\_strings} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Displays string attributes on \sphinxstyleemphasis{principal}.
-
-This command requires the \sphinxstylestrong{inquire} privilege.
-
-Alias: \sphinxstylestrong{getstrs}
-
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:get-strings-end}}
-
-\subsubsection{set\_string}
-\label{\detokenize{admin/admin_commands/kadmin_local:id10}}\label{\detokenize{admin/admin_commands/kadmin_local:set-string}}\label{\detokenize{admin/admin_commands/kadmin_local:get-strings-end}}\begin{quote}
-
-\sphinxstylestrong{set\_string} \sphinxstyleemphasis{principal} \sphinxstyleemphasis{name} \sphinxstyleemphasis{value}
-\end{quote}
-
-Sets a string attribute on \sphinxstyleemphasis{principal}. String attributes are used to
-supply per-principal configuration to the KDC and some KDC plugin
-modules. The following string attribute names are recognized by the
-KDC:
-\begin{description}
-\item[{\sphinxstylestrong{require\_auth}}] \leavevmode
-Specifies an authentication indicator which is required to
-authenticate to the principal as a service. Multiple indicators
-can be specified, separated by spaces; in this case any of the
-specified indicators will be accepted. (New in release 1.14.)
-
-\item[{\sphinxstylestrong{session\_enctypes}}] \leavevmode
-Specifies the encryption types supported for session keys when the
-principal is authenticated to as a server. See
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:encryption-types}]{\sphinxcrossref{\DUrole{std,std-ref}{Encryption types}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a list of the
-accepted values.
-
-\item[{\sphinxstylestrong{otp}}] \leavevmode
-Enables One Time Passwords (OTP) preauthentication for a client
-\sphinxstyleemphasis{principal}. The \sphinxstyleemphasis{value} is a JSON string representing an array
-of objects, each having optional \sphinxcode{type} and \sphinxcode{username} fields.
-
-\item[{\sphinxstylestrong{pkinit\_cert\_match}}] \leavevmode
-Specifies a matching expression that defines the certificate
-attributes required for the client certificate used by the
-principal during PKINIT authentication. The matching expression
-is in the same format as those used by the \sphinxstylestrong{pkinit\_cert\_match}
-option in {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}. (New in release 1.16.)
-
-\end{description}
-
-This command requires the \sphinxstylestrong{modify} privilege.
-
-Alias: \sphinxstylestrong{setstr}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{set\PYGZus{}string} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n}{session\PYGZus{}enctypes} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}
-\PYG{n}{set\PYGZus{}string} \PYG{n}{user}\PYG{n+nd}{@FOO}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{otp} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{[}\PYG{l+s+s2}{\PYGZob{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{type}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{:}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{hotp}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{,}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{username}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{:}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{al}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZcb{}]}\PYG{l+s+s2}{\PYGZdq{}}
-\end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:set-string-end}}
-
-\subsubsection{del\_string}
-\label{\detokenize{admin/admin_commands/kadmin_local:set-string-end}}\label{\detokenize{admin/admin_commands/kadmin_local:del-string}}\label{\detokenize{admin/admin_commands/kadmin_local:id11}}\begin{quote}
-
-\sphinxstylestrong{del\_string} \sphinxstyleemphasis{principal} \sphinxstyleemphasis{key}
-\end{quote}
-
-Deletes a string attribute from \sphinxstyleemphasis{principal}.
-
-This command requires the \sphinxstylestrong{delete} privilege.
-
-Alias: \sphinxstylestrong{delstr}
-
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:del-string-end}}
-
-\subsubsection{add\_policy}
-\label{\detokenize{admin/admin_commands/kadmin_local:id12}}\label{\detokenize{admin/admin_commands/kadmin_local:del-string-end}}\label{\detokenize{admin/admin_commands/kadmin_local:add-policy}}\begin{quote}
-
-\sphinxstylestrong{add\_policy} {[}\sphinxstyleemphasis{options}{]} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Adds a password policy named \sphinxstyleemphasis{policy} to the database.
-
-This command requires the \sphinxstylestrong{add} privilege.
-
-Alias: \sphinxstylestrong{addpol}
-
-The following options are available:
-\begin{description}
-\item[{\sphinxstylestrong{-maxlife} \sphinxstyleemphasis{time}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the maximum
-lifetime of a password.
-
-\item[{\sphinxstylestrong{-minlife} \sphinxstyleemphasis{time}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the minimum
-lifetime of a password.
-
-\item[{\sphinxstylestrong{-minlength} \sphinxstyleemphasis{length}}] \leavevmode
-Sets the minimum length of a password.
-
-\item[{\sphinxstylestrong{-minclasses} \sphinxstyleemphasis{number}}] \leavevmode
-Sets the minimum number of character classes required in a
-password. The five character classes are lower case, upper case,
-numbers, punctuation, and whitespace/unprintable characters.
-
-\item[{\sphinxstylestrong{-history} \sphinxstyleemphasis{number}}] \leavevmode
-Sets the number of past keys kept for a principal. This option is
-not supported with the LDAP KDC database module.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:policy-maxfailure}}\begin{description}
-\item[{\sphinxstylestrong{-maxfailure} \sphinxstyleemphasis{maxnumber}}] \leavevmode
-Sets the number of authentication failures before the principal is
-locked. Authentication failures are only tracked for principals
-which require preauthentication. The counter of failed attempts
-resets to 0 after a successful attempt to authenticate. A
-\sphinxstyleemphasis{maxnumber} value of 0 (the default) disables lockout.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:policy-failurecountinterval}}\begin{description}
-\item[{\sphinxstylestrong{-failurecountinterval} \sphinxstyleemphasis{failuretime}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the allowable time
-between authentication failures. If an authentication failure
-happens after \sphinxstyleemphasis{failuretime} has elapsed since the previous
-failure, the number of authentication failures is reset to 1. A
-\sphinxstyleemphasis{failuretime} value of 0 (the default) means forever.
-
-\end{description}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:policy-lockoutduration}}\begin{description}
-\item[{\sphinxstylestrong{-lockoutduration} \sphinxstyleemphasis{lockouttime}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} or \DUrole{xref,std,std-ref}{getdate} string) Sets the duration for
-which the principal is locked from authenticating if too many
-authentication failures occur without the specified failure count
-interval elapsing. A duration of 0 (the default) means the
-principal remains locked out until it is administratively unlocked
-with \sphinxcode{modprinc -unlock}.
-
-\item[{\sphinxstylestrong{-allowedkeysalts}}] \leavevmode
-Specifies the key/salt tuples supported for long-term keys when
-setting or changing a principal’s password/keys. See
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a list of the
-accepted values, but note that key/salt tuples must be separated
-with commas (‘,’) only. To clear the allowed key/salt policy use
-a value of ‘-‘.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{add\PYGZus{}policy} \PYG{o}{\PYGZhy{}}\PYG{n}{maxlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{2 days}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{minlength} \PYG{l+m+mi}{5} \PYG{n}{guests}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:add-policy-end}}
-
-\subsubsection{modify\_policy}
-\label{\detokenize{admin/admin_commands/kadmin_local:id13}}\label{\detokenize{admin/admin_commands/kadmin_local:modify-policy}}\label{\detokenize{admin/admin_commands/kadmin_local:add-policy-end}}\begin{quote}
-
-\sphinxstylestrong{modify\_policy} {[}\sphinxstyleemphasis{options}{]} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Modifies the password policy named \sphinxstyleemphasis{policy}. Options are as described
-for \sphinxstylestrong{add\_policy}.
-
-This command requires the \sphinxstylestrong{modify} privilege.
-
-Alias: \sphinxstylestrong{modpol}
-
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:modify-policy-end}}
-
-\subsubsection{delete\_policy}
-\label{\detokenize{admin/admin_commands/kadmin_local:delete-policy}}\label{\detokenize{admin/admin_commands/kadmin_local:modify-policy-end}}\label{\detokenize{admin/admin_commands/kadmin_local:id14}}\begin{quote}
-
-\sphinxstylestrong{delete\_policy} {[}\sphinxstylestrong{-force}{]} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Deletes the password policy named \sphinxstyleemphasis{policy}. Prompts for confirmation
-before deletion. The command will fail if the policy is in use by any
-principals.
-
-This command requires the \sphinxstylestrong{delete} privilege.
-
-Alias: \sphinxstylestrong{delpol}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-kadmin: del\PYGZus{}policy guests
-Are you sure you want to delete the policy \PYGZdq{}guests\PYGZdq{}?
-(yes/no): yes
-kadmin:
-\end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:delete-policy-end}}
-
-\subsubsection{get\_policy}
-\label{\detokenize{admin/admin_commands/kadmin_local:delete-policy-end}}\label{\detokenize{admin/admin_commands/kadmin_local:get-policy}}\label{\detokenize{admin/admin_commands/kadmin_local:id15}}\begin{quote}
-
-\sphinxstylestrong{get\_policy} {[} \sphinxstylestrong{-terse} {]} \sphinxstyleemphasis{policy}
-\end{quote}
-
-Displays the values of the password policy named \sphinxstyleemphasis{policy}. With the
-\sphinxstylestrong{-terse} flag, outputs the fields as quoted strings separated by
-tabs.
-
-This command requires the \sphinxstylestrong{inquire} privilege.
-
-Alias: \sphinxstylestrong{getpol}
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{get\PYGZus{}policy} \PYG{n}{admin}
-\PYG{n}{Policy}\PYG{p}{:} \PYG{n}{admin}
-\PYG{n}{Maximum} \PYG{n}{password} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{180} \PYG{n}{days} \PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Minimum} \PYG{n}{password} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Minimum} \PYG{n}{password} \PYG{n}{length}\PYG{p}{:} \PYG{l+m+mi}{6}
-\PYG{n}{Minimum} \PYG{n}{number} \PYG{n}{of} \PYG{n}{password} \PYG{n}{character} \PYG{n}{classes}\PYG{p}{:} \PYG{l+m+mi}{2}
-\PYG{n}{Number} \PYG{n}{of} \PYG{n}{old} \PYG{n}{keys} \PYG{n}{kept}\PYG{p}{:} \PYG{l+m+mi}{5}
-\PYG{n}{Reference} \PYG{n}{count}\PYG{p}{:} \PYG{l+m+mi}{17}
-
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{get\PYGZus{}policy} \PYG{o}{\PYGZhy{}}\PYG{n}{terse} \PYG{n}{admin}
-\PYG{n}{admin} \PYG{l+m+mi}{15552000} \PYG{l+m+mi}{0} \PYG{l+m+mi}{6} \PYG{l+m+mi}{2} \PYG{l+m+mi}{5} \PYG{l+m+mi}{17}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-The “Reference count” is the number of principals using that policy.
-With the LDAP KDC database module, the reference count field is not
-meaningful.
-
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:get-policy-end}}
-
-\subsubsection{list\_policies}
-\label{\detokenize{admin/admin_commands/kadmin_local:get-policy-end}}\label{\detokenize{admin/admin_commands/kadmin_local:list-policies}}\label{\detokenize{admin/admin_commands/kadmin_local:id16}}\begin{quote}
-
-\sphinxstylestrong{list\_policies} {[}\sphinxstyleemphasis{expression}{]}
-\end{quote}
-
-Retrieves all or some policy names. \sphinxstyleemphasis{expression} is a shell-style
-glob expression that can contain the wild-card characters \sphinxcode{?},
-\sphinxcode{*}, and \sphinxcode{{[}{]}}. All policy names matching the expression are
-printed. If no expression is provided, all existing policy names are
-printed.
-
-This command requires the \sphinxstylestrong{list} privilege.
-
-Aliases: \sphinxstylestrong{listpols}, \sphinxstylestrong{get\_policies}, \sphinxstylestrong{getpols}.
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{listpols}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}
-\PYG{n+nb}{dict}\PYG{o}{\PYGZhy{}}\PYG{n}{only}
-\PYG{n}{once}\PYG{o}{\PYGZhy{}}\PYG{n}{a}\PYG{o}{\PYGZhy{}}\PYG{n+nb}{min}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}\PYG{o}{\PYGZhy{}}\PYG{n}{nopw}
-
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{listpols} \PYG{n}{t}\PYG{o}{*}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}
-\PYG{n}{test}\PYG{o}{\PYGZhy{}}\PYG{n}{pol}\PYG{o}{\PYGZhy{}}\PYG{n}{nopw}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:list-policies-end}}
-
-\subsubsection{ktadd}
-\label{\detokenize{admin/admin_commands/kadmin_local:ktadd}}\label{\detokenize{admin/admin_commands/kadmin_local:list-policies-end}}\label{\detokenize{admin/admin_commands/kadmin_local:id17}}\begin{quote}
-
-\begin{DUlineblock}{0em}
-\item[] \sphinxstylestrong{ktadd} {[}options{]} \sphinxstyleemphasis{principal}
-\item[] \sphinxstylestrong{ktadd} {[}options{]} \sphinxstylestrong{-glob} \sphinxstyleemphasis{princ-exp}
-\end{DUlineblock}
-\end{quote}
-
-Adds a \sphinxstyleemphasis{principal}, or all principals matching \sphinxstyleemphasis{princ-exp}, to a
-keytab file. Each principal’s keys are randomized in the process.
-The rules for \sphinxstyleemphasis{princ-exp} are described in the \sphinxstylestrong{list\_principals}
-command.
-
-This command requires the \sphinxstylestrong{inquire} and \sphinxstylestrong{changepw} privileges.
-With the \sphinxstylestrong{-glob} form, it also requires the \sphinxstylestrong{list} privilege.
-
-The options are:
-\begin{description}
-\item[{\sphinxstylestrong{-k{[}eytab{]}} \sphinxstyleemphasis{keytab}}] \leavevmode
-Use \sphinxstyleemphasis{keytab} as the keytab file. Otherwise, the default keytab is
-used.
-
-\item[{\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt},…}] \leavevmode
-Uses the specified keysalt list for setting the new keys of the
-principal. See {\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{Keysalt lists}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a
-list of possible values.
-
-\item[{\sphinxstylestrong{-q}}] \leavevmode
-Display less verbose information.
-
-\item[{\sphinxstylestrong{-norandkey}}] \leavevmode
-Do not randomize the keys. The keys and their version numbers stay
-unchanged. This option cannot be specified in combination with the
-\sphinxstylestrong{-e} option.
-
-\end{description}
-
-An entry for each of the principal’s unique encryption types is added,
-ignoring multiple keys with the same encryption type but different
-salt types.
-
-Alias: \sphinxstylestrong{xst}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktadd} \PYG{o}{\PYGZhy{}}\PYG{n}{k} \PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{\PYGZhy{}}\PYG{n}{new}\PYG{o}{\PYGZhy{}}\PYG{n}{keytab} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3}\PYG{p}{,}
- \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab}
- \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{foo}\PYG{o}{\PYGZhy{}}\PYG{n}{new}\PYG{o}{\PYGZhy{}}\PYG{n}{keytab}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-\phantomsection\label{\detokenize{admin/admin_commands/kadmin_local:ktadd-end}}
-
-\subsubsection{ktremove}
-\label{\detokenize{admin/admin_commands/kadmin_local:id18}}\label{\detokenize{admin/admin_commands/kadmin_local:ktremove}}\label{\detokenize{admin/admin_commands/kadmin_local:ktadd-end}}\begin{quote}
-
-\sphinxstylestrong{ktremove} {[}options{]} \sphinxstyleemphasis{principal} {[}\sphinxstyleemphasis{kvno} \textbar{} \sphinxstyleemphasis{all} \textbar{} \sphinxstyleemphasis{old}{]}
-\end{quote}
-
-Removes entries for the specified \sphinxstyleemphasis{principal} from a keytab. Requires
-no permissions, since this does not require database access.
-
-If the string “all” is specified, all entries for that principal are
-removed; if the string “old” is specified, all entries for that
-principal except those with the highest kvno are removed. Otherwise,
-the value specified is parsed as an integer, and all entries whose
-kvno match that integer are removed.
-
-The options are:
-\begin{description}
-\item[{\sphinxstylestrong{-k{[}eytab{]}} \sphinxstyleemphasis{keytab}}] \leavevmode
-Use \sphinxstyleemphasis{keytab} as the keytab file. Otherwise, the default keytab is
-used.
-
-\item[{\sphinxstylestrong{-q}}] \leavevmode
-Display less verbose information.
-
-\end{description}
-
-Alias: \sphinxstylestrong{ktrem}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kadmin}\PYG{p}{:} \PYG{n}{ktremove} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin} \PYG{n+nb}{all}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3} \PYG{n}{removed} \PYG{k+kn}{from} \PYG{n+nn}{keytab}
- \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}
-\PYG{n}{kadmin}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsubsection{lock}
-\label{\detokenize{admin/admin_commands/kadmin_local:ktremove-end}}\label{\detokenize{admin/admin_commands/kadmin_local:lock}}
-Lock database exclusively. Use with extreme caution! This command
-only works with the DB2 KDC database module.
-
-
-\subsubsection{unlock}
-\label{\detokenize{admin/admin_commands/kadmin_local:unlock}}
-Release the exclusive database lock.
-
-
-\subsubsection{list\_requests}
-\label{\detokenize{admin/admin_commands/kadmin_local:list-requests}}
-Lists available for kadmin requests.
-
-Aliases: \sphinxstylestrong{lr}, \sphinxstylestrong{?}
-
-
-\subsubsection{quit}
-\label{\detokenize{admin/admin_commands/kadmin_local:quit}}
-Exit program. If the database was locked, the lock is released.
-
-Aliases: \sphinxstylestrong{exit}, \sphinxstylestrong{q}
-
-
-\subsection{HISTORY}
-\label{\detokenize{admin/admin_commands/kadmin_local:history}}
-The kadmin program was originally written by Tom Yu at MIT, as an
-interface to the OpenVision Kerberos administration program.
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/kadmin_local:environment}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/kadmin_local:see-also}}
-\DUrole{xref,std,std-ref}{kpasswd(1)}, {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}}, \DUrole{xref,std,std-ref}{kerberos(7)}
-
-
-\section{kadmind}
-\label{\detokenize{admin/admin_commands/kadmind:kadmind-8}}\label{\detokenize{admin/admin_commands/kadmind:kadmind}}\label{\detokenize{admin/admin_commands/kadmind::doc}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/kadmind:synopsis}}
-\sphinxstylestrong{kadmind}
-{[}\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}{]}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{]}
-{[}\sphinxstylestrong{-m}{]}
-{[}\sphinxstylestrong{-nofork}{]}
-{[}\sphinxstylestrong{-proponly}{]}
-{[}\sphinxstylestrong{-port} \sphinxstyleemphasis{port-number}{]}
-{[}\sphinxstylestrong{-P} \sphinxstyleemphasis{pid\_file}{]}
-{[}\sphinxstylestrong{-p} \sphinxstyleemphasis{kdb5\_util\_path}{]}
-{[}\sphinxstylestrong{-K} \sphinxstyleemphasis{kprop\_path}{]}
-{[}\sphinxstylestrong{-k} \sphinxstyleemphasis{kprop\_port}{]}
-{[}\sphinxstylestrong{-F} \sphinxstyleemphasis{dump\_file}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/kadmind:description}}
-kadmind starts the Kerberos administration server. kadmind typically
-runs on the primary Kerberos server, which stores the KDC database.
-If the KDC database uses the LDAP module, the administration server
-and the KDC server need not run on the same machine. kadmind accepts
-remote requests from programs such as {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} and
-\DUrole{xref,std,std-ref}{kpasswd(1)} to administer the information in these database.
-
-kadmind requires a number of configuration files to be set up in order
-for it to work:
-\begin{description}
-\item[{{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}}] \leavevmode
-The KDC configuration file contains configuration information for
-the KDC and admin servers. kadmind uses settings in this file to
-locate the Kerberos database, and is also affected by the
-\sphinxstylestrong{acl\_file}, \sphinxstylestrong{dict\_file}, \sphinxstylestrong{kadmind\_port}, and iprop-related
-settings.
-
-\item[{{\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}}}] \leavevmode
-kadmind’s ACL (access control list) tells it which principals are
-allowed to perform administration actions. The pathname to the
-ACL file can be specified with the \sphinxstylestrong{acl\_file} {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}
-variable; by default, it is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/kadm5.acl}.
-
-\end{description}
-
-After the server begins running, it puts itself in the background and
-disassociates itself from its controlling terminal.
-
-kadmind can be configured for incremental database propagation.
-Incremental propagation allows replica KDC servers to receive
-principal and policy updates incrementally instead of receiving full
-dumps of the database. This facility can be enabled in the
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} file with the \sphinxstylestrong{iprop\_enable} option. Incremental
-propagation requires the principal \sphinxcode{kiprop/PRIMARY\textbackslash{}@REALM} (where
-PRIMARY is the primary KDC’s canonical host name, and REALM the realm
-name). In release 1.13, this principal is automatically created and
-registered into the datebase.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{admin/admin_commands/kadmind:options}}\begin{description}
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}}] \leavevmode
-specifies the realm that kadmind will serve; if it is not
-specified, the default realm of the host is used.
-
-\item[{\sphinxstylestrong{-m}}] \leavevmode
-causes the master database password to be fetched from the
-keyboard (before the server puts itself in the background, if not
-invoked with the \sphinxstylestrong{-nofork} option) rather than from a file on
-disk.
-
-\item[{\sphinxstylestrong{-nofork}}] \leavevmode
-causes the server to remain in the foreground and remain
-associated to the terminal.
-
-\item[{\sphinxstylestrong{-proponly}}] \leavevmode
-causes the server to only listen and respond to Kerberos replica
-incremental propagation polling requests. This option can be used
-to set up a hierarchical propagation topology where a replica KDC
-provides incremental updates to other Kerberos replicas.
-
-\item[{\sphinxstylestrong{-port} \sphinxstyleemphasis{port-number}}] \leavevmode
-specifies the port on which the administration server listens for
-connections. The default port is determined by the
-\sphinxstylestrong{kadmind\_port} configuration variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-P} \sphinxstyleemphasis{pid\_file}}] \leavevmode
-specifies the file to which the PID of kadmind process should be
-written after it starts up. This file can be used to identify
-whether kadmind is still running and to allow init scripts to stop
-the correct process.
-
-\item[{\sphinxstylestrong{-p} \sphinxstyleemphasis{kdb5\_util\_path}}] \leavevmode
-specifies the path to the kdb5\_util command to use when dumping the
-KDB in response to full resync requests when iprop is enabled.
-
-\item[{\sphinxstylestrong{-K} \sphinxstyleemphasis{kprop\_path}}] \leavevmode
-specifies the path to the kprop command to use to send full dumps
-to replicas in response to full resync requests.
-
-\item[{\sphinxstylestrong{-k} \sphinxstyleemphasis{kprop\_port}}] \leavevmode
-specifies the port by which the kprop process that is spawned by
-kadmind connects to the replica kpropd, in order to transfer the
-dump file during an iprop full resync request.
-
-\item[{\sphinxstylestrong{-F} \sphinxstyleemphasis{dump\_file}}] \leavevmode
-specifies the file path to be used for dumping the KDB in response
-to full resync requests when iprop is enabled.
-
-\item[{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}}] \leavevmode
-specifies database-specific arguments. See {\hyperref[\detokenize{admin/admin_commands/kadmin_local:dboptions}]{\sphinxcrossref{\DUrole{std,std-ref}{Database Options}}}} in {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} for supported arguments.
-
-\end{description}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/kadmind:environment}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/kadmind:see-also}}
-\DUrole{xref,std,std-ref}{kpasswd(1)}, {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}, {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}},
-{\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}}, {\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}}, \DUrole{xref,std,std-ref}{kerberos(7)}
-
-
-\section{kdb5\_util}
-\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}}\label{\detokenize{admin/admin_commands/kdb5_util::doc}}\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/kdb5_util:synopsis}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-synopsis}}
-\sphinxstylestrong{kdb5\_util}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{]}
-{[}\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}{]}
-{[}\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}{]}
-{[}\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}{]}
-{[}\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}{]}
-{[}\sphinxstylestrong{-m}{]}
-{[}\sphinxstylestrong{-sf} \sphinxstyleemphasis{stashfilename}{]}
-{[}\sphinxstylestrong{-P} \sphinxstyleemphasis{password}{]}
-{[}\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}{]}
-\sphinxstyleemphasis{command} {[}\sphinxstyleemphasis{command\_options}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-synopsis-end}}\label{\detokenize{admin/admin_commands/kdb5_util:description}}
-kdb5\_util allows an administrator to perform maintenance procedures on
-the KDC database. Databases can be created, destroyed, and dumped to
-or loaded from ASCII files. kdb5\_util can create a Kerberos master
-key stash file or perform live rollover of the master key.
-
-When kdb5\_util is run, it attempts to acquire the master key and open
-the database. However, execution continues regardless of whether or
-not kdb5\_util successfully opens the database, because the database
-may not exist yet or the stash file may be corrupt.
-
-Note that some KDC database modules may not support all kdb5\_util
-commands.
-
-
-\subsection{COMMAND-LINE OPTIONS}
-\label{\detokenize{admin/admin_commands/kdb5_util:command-line-options}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-options}}\begin{description}
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}}] \leavevmode
-specifies the Kerberos realm of the database.
-
-\item[{\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}}] \leavevmode
-specifies the name under which the principal database is stored;
-by default the database is that listed in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}. The
-password policy database and lock files are also derived from this
-value.
-
-\item[{\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}}] \leavevmode
-specifies the key type of the master key in the database. The
-default is given by the \sphinxstylestrong{master\_key\_type} variable in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}}] \leavevmode
-Specifies the version number of the master key in the database;
-the default is 1. Note that 0 is not allowed.
-
-\item[{\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}}] \leavevmode
-principal name for the master key in the database. If not
-specified, the name is determined by the \sphinxstylestrong{master\_key\_name}
-variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-m}}] \leavevmode
-specifies that the master database password should be read from
-the keyboard rather than fetched from a file on disk.
-
-\item[{\sphinxstylestrong{-sf} \sphinxstyleemphasis{stash\_file}}] \leavevmode
-specifies the stash filename of the master database password. If
-not specified, the filename is determined by the
-\sphinxstylestrong{key\_stash\_file} variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-P} \sphinxstyleemphasis{password}}] \leavevmode
-specifies the master database password. Using this option may
-expose the password to other users on the system via the process
-list.
-
-\item[{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}}] \leavevmode
-specifies database-specific options. See {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} for
-supported options.
-
-\end{description}
-
-
-\subsection{COMMANDS}
-\label{\detokenize{admin/admin_commands/kdb5_util:commands}}\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-options-end}}
-
-\subsubsection{create}
-\label{\detokenize{admin/admin_commands/kdb5_util:create}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-create}}\begin{quote}
-
-\sphinxstylestrong{create} {[}\sphinxstylestrong{-s}{]}
-\end{quote}
-
-Creates a new database. If the \sphinxstylestrong{-s} option is specified, the stash
-file is also created. This command fails if the database already
-exists. If the command is successful, the database is opened just as
-if it had already existed when the program was first run.
-
-
-\subsubsection{destroy}
-\label{\detokenize{admin/admin_commands/kdb5_util:destroy}}\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-create-end}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-destroy}}\begin{quote}
-
-\sphinxstylestrong{destroy} {[}\sphinxstylestrong{-f}{]}
-\end{quote}
-
-Destroys the database, first overwriting the disk sectors and then
-unlinking the files, after prompting the user for confirmation. With
-the \sphinxstylestrong{-f} argument, does not prompt the user.
-
-
-\subsubsection{stash}
-\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-destroy-end}}\label{\detokenize{admin/admin_commands/kdb5_util:stash}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-stash}}\begin{quote}
-
-\sphinxstylestrong{stash} {[}\sphinxstylestrong{-f} \sphinxstyleemphasis{keyfile}{]}
-\end{quote}
-
-Stores the master principal’s keys in a stash file. The \sphinxstylestrong{-f}
-argument can be used to override the \sphinxstyleemphasis{keyfile} specified in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-
-\subsubsection{dump}
-\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-stash-end}}\label{\detokenize{admin/admin_commands/kdb5_util:dump}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-dump}}\begin{quote}
-
-\sphinxstylestrong{dump} {[}\sphinxstylestrong{-b7}\textbar{}\sphinxstylestrong{-r13}\textbar{}\sphinxstylestrong{-r18}{]}
-{[}\sphinxstylestrong{-verbose}{]} {[}\sphinxstylestrong{-mkey\_convert}{]} {[}\sphinxstylestrong{-new\_mkey\_file}
-\sphinxstyleemphasis{mkey\_file}{]} {[}\sphinxstylestrong{-rev}{]} {[}\sphinxstylestrong{-recurse}{]} {[}\sphinxstyleemphasis{filename}
-{[}\sphinxstyleemphasis{principals}…{]}{]}
-\end{quote}
-
-Dumps the current Kerberos and KADM5 database into an ASCII file. By
-default, the database is dumped in current format, “kdb5\_util
-load\_dump version 7”. If filename is not specified, or is the string
-“-“, the dump is sent to standard output. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-b7}}] \leavevmode
-causes the dump to be in the Kerberos 5 Beta 7 format (“kdb5\_util
-load\_dump version 4”). This was the dump format produced on
-releases prior to 1.2.2.
-
-\item[{\sphinxstylestrong{-r13}}] \leavevmode
-causes the dump to be in the Kerberos 5 1.3 format (“kdb5\_util
-load\_dump version 5”). This was the dump format produced on
-releases prior to 1.8.
-
-\item[{\sphinxstylestrong{-r18}}] \leavevmode
-causes the dump to be in the Kerberos 5 1.8 format (“kdb5\_util
-load\_dump version 6”). This was the dump format produced on
-releases prior to 1.11.
-
-\item[{\sphinxstylestrong{-verbose}}] \leavevmode
-causes the name of each principal and policy to be printed as it
-is dumped.
-
-\item[{\sphinxstylestrong{-mkey\_convert}}] \leavevmode
-prompts for a new master key. This new master key will be used to
-re-encrypt principal key data in the dumpfile. The principal keys
-themselves will not be changed.
-
-\item[{\sphinxstylestrong{-new\_mkey\_file} \sphinxstyleemphasis{mkey\_file}}] \leavevmode
-the filename of a stash file. The master key in this stash file
-will be used to re-encrypt the key data in the dumpfile. The key
-data in the database will not be changed.
-
-\item[{\sphinxstylestrong{-rev}}] \leavevmode
-dumps in reverse order. This may recover principals that do not
-dump normally, in cases where database corruption has occurred.
-
-\item[{\sphinxstylestrong{-recurse}}] \leavevmode
-causes the dump to walk the database recursively (btree only).
-This may recover principals that do not dump normally, in cases
-where database corruption has occurred. In cases of such
-corruption, this option will probably retrieve more principals
-than the \sphinxstylestrong{-rev} option will.
-
-\DUrole{versionmodified}{Changed in version 1.15: }Release 1.15 restored the functionality of the \sphinxstylestrong{-recurse}
-option.
-
-\DUrole{versionmodified}{Changed in version 1.5: }The \sphinxstylestrong{-recurse} option ceased working until release 1.15,
-doing a normal dump instead of a recursive traversal.
-
-\end{description}
-
-
-\subsubsection{load}
-\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-dump-end}}\label{\detokenize{admin/admin_commands/kdb5_util:load}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-load}}\begin{quote}
-
-\sphinxstylestrong{load} {[}\sphinxstylestrong{-b7}\textbar{}\sphinxstylestrong{-r13}\textbar{}\sphinxstylestrong{-r18}{]} {[}\sphinxstylestrong{-hash}{]}
-{[}\sphinxstylestrong{-verbose}{]} {[}\sphinxstylestrong{-update}{]} \sphinxstyleemphasis{filename}
-\end{quote}
-
-Loads a database dump from the named file into the named database. If
-no option is given to determine the format of the dump file, the
-format is detected automatically and handled as appropriate. Unless
-the \sphinxstylestrong{-update} option is given, \sphinxstylestrong{load} creates a new database
-containing only the data in the dump file, overwriting the contents of
-any previously existing database. Note that when using the LDAP KDC
-database module, the \sphinxstylestrong{-update} flag is required.
-
-Options:
-\begin{description}
-\item[{\sphinxstylestrong{-b7}}] \leavevmode
-requires the database to be in the Kerberos 5 Beta 7 format
-(“kdb5\_util load\_dump version 4”). This was the dump format
-produced on releases prior to 1.2.2.
-
-\item[{\sphinxstylestrong{-r13}}] \leavevmode
-requires the database to be in Kerberos 5 1.3 format (“kdb5\_util
-load\_dump version 5”). This was the dump format produced on
-releases prior to 1.8.
-
-\item[{\sphinxstylestrong{-r18}}] \leavevmode
-requires the database to be in Kerberos 5 1.8 format (“kdb5\_util
-load\_dump version 6”). This was the dump format produced on
-releases prior to 1.11.
-
-\item[{\sphinxstylestrong{-hash}}] \leavevmode
-stores the database in hash format, if using the DB2 database
-type. If this option is not specified, the database will be
-stored in btree format. This option is not recommended, as
-databases stored in hash format are known to corrupt data and lose
-principals.
-
-\item[{\sphinxstylestrong{-verbose}}] \leavevmode
-causes the name of each principal and policy to be printed as it
-is dumped.
-
-\item[{\sphinxstylestrong{-update}}] \leavevmode
-records from the dump file are added to or updated in the existing
-database. Otherwise, a new database is created containing only
-what is in the dump file and the old one destroyed upon successful
-completion.
-
-\end{description}
-
-
-\subsubsection{ark}
-\label{\detokenize{admin/admin_commands/kdb5_util:kdb5-util-load-end}}\label{\detokenize{admin/admin_commands/kdb5_util:ark}}\begin{quote}
-
-\sphinxstylestrong{ark} {[}\sphinxstylestrong{-e} \sphinxstyleemphasis{enc}:\sphinxstyleemphasis{salt},…{]} \sphinxstyleemphasis{principal}
-\end{quote}
-
-Adds new random keys to \sphinxstyleemphasis{principal} at the next available key version
-number. Keys for the current highest key version number will be
-preserved. The \sphinxstylestrong{-e} option specifies the list of encryption and
-salt types to be used for the new keys.
-
-
-\subsubsection{add\_mkey}
-\label{\detokenize{admin/admin_commands/kdb5_util:add-mkey}}\begin{quote}
-
-\sphinxstylestrong{add\_mkey} {[}\sphinxstylestrong{-e} \sphinxstyleemphasis{etype}{]} {[}\sphinxstylestrong{-s}{]}
-\end{quote}
-
-Adds a new master key to the master key principal, but does not mark
-it as active. Existing master keys will remain. The \sphinxstylestrong{-e} option
-specifies the encryption type of the new master key; see
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:encryption-types}]{\sphinxcrossref{\DUrole{std,std-ref}{Encryption types}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} for a list of possible
-values. The \sphinxstylestrong{-s} option stashes the new master key in the stash
-file, which will be created if it doesn’t already exist.
-
-After a new master key is added, it should be propagated to replica
-servers via a manual or periodic invocation of {\hyperref[\detokenize{admin/admin_commands/kprop:kprop-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop}}}}. Then,
-the stash files on the replica servers should be updated with the
-kdb5\_util \sphinxstylestrong{stash} command. Once those steps are complete, the key
-is ready to be marked active with the kdb5\_util \sphinxstylestrong{use\_mkey} command.
-
-
-\subsubsection{use\_mkey}
-\label{\detokenize{admin/admin_commands/kdb5_util:use-mkey}}\begin{quote}
-
-\sphinxstylestrong{use\_mkey} \sphinxstyleemphasis{mkeyVNO} {[}\sphinxstyleemphasis{time}{]}
-\end{quote}
-
-Sets the activation time of the master key specified by \sphinxstyleemphasis{mkeyVNO}.
-Once a master key becomes active, it will be used to encrypt newly
-created principal keys. If no \sphinxstyleemphasis{time} argument is given, the current
-time is used, causing the specified master key version to become
-active immediately. The format for \sphinxstyleemphasis{time} is \DUrole{xref,std,std-ref}{getdate} string.
-
-After a new master key becomes active, the kdb5\_util
-\sphinxstylestrong{update\_princ\_encryption} command can be used to update all
-principal keys to be encrypted in the new master key.
-
-
-\subsubsection{list\_mkeys}
-\label{\detokenize{admin/admin_commands/kdb5_util:list-mkeys}}\begin{quote}
-
-\sphinxstylestrong{list\_mkeys}
-\end{quote}
-
-List all master keys, from most recent to earliest, in the master key
-principal. The output will show the kvno, enctype, and salt type for
-each mkey, similar to the output of {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} \sphinxstylestrong{getprinc}. A
-\sphinxcode{*} following an mkey denotes the currently active master key.
-
-
-\subsubsection{purge\_mkeys}
-\label{\detokenize{admin/admin_commands/kdb5_util:purge-mkeys}}\begin{quote}
-
-\sphinxstylestrong{purge\_mkeys} {[}\sphinxstylestrong{-f}{]} {[}\sphinxstylestrong{-n}{]} {[}\sphinxstylestrong{-v}{]}
-\end{quote}
-
-Delete master keys from the master key principal that are not used to
-protect any principals. This command can be used to remove old master
-keys all principal keys are protected by a newer master key.
-\begin{description}
-\item[{\sphinxstylestrong{-f}}] \leavevmode
-does not prompt for confirmation.
-
-\item[{\sphinxstylestrong{-n}}] \leavevmode
-performs a dry run, showing master keys that would be purged, but
-not actually purging any keys.
-
-\item[{\sphinxstylestrong{-v}}] \leavevmode
-gives more verbose output.
-
-\end{description}
-
-
-\subsubsection{update\_princ\_encryption}
-\label{\detokenize{admin/admin_commands/kdb5_util:update-princ-encryption}}\begin{quote}
-
-\sphinxstylestrong{update\_princ\_encryption} {[}\sphinxstylestrong{-f}{]} {[}\sphinxstylestrong{-n}{]} {[}\sphinxstylestrong{-v}{]}
-{[}\sphinxstyleemphasis{princ-pattern}{]}
-\end{quote}
-
-Update all principal records (or only those matching the
-\sphinxstyleemphasis{princ-pattern} glob pattern) to re-encrypt the key data using the
-active database master key, if they are encrypted using a different
-version, and give a count at the end of the number of principals
-updated. If the \sphinxstylestrong{-f} option is not given, ask for confirmation
-before starting to make changes. The \sphinxstylestrong{-v} option causes each
-principal processed to be listed, with an indication as to whether it
-needed updating or not. The \sphinxstylestrong{-n} option performs a dry run, only
-showing the actions which would have been taken.
-
-
-\subsubsection{tabdump}
-\label{\detokenize{admin/admin_commands/kdb5_util:tabdump}}\begin{quote}
-
-\sphinxstylestrong{tabdump} {[}\sphinxstylestrong{-H}{]} {[}\sphinxstylestrong{-c}{]} {[}\sphinxstylestrong{-e}{]} {[}\sphinxstylestrong{-n}{]} {[}\sphinxstylestrong{-o} \sphinxstyleemphasis{outfile}{]}
-\sphinxstyleemphasis{dumptype}
-\end{quote}
-
-Dump selected fields of the database in a tabular format suitable for
-reporting (e.g., using traditional Unix text processing tools) or
-importing into relational databases. The data format is tab-separated
-(default), or optionally comma-separated (CSV), with a fixed number of
-columns. The output begins with a header line containing field names,
-unless suppression is requested using the \sphinxstylestrong{-H} option.
-
-The \sphinxstyleemphasis{dumptype} parameter specifies the name of an output table (see
-below).
-
-Options:
-\begin{description}
-\item[{\sphinxstylestrong{-H}}] \leavevmode
-suppress writing the field names in a header line
-
-\item[{\sphinxstylestrong{-c}}] \leavevmode
-use comma separated values (CSV) format, with minimal quoting,
-instead of the default tab-separated (unquoted, unescaped) format
-
-\item[{\sphinxstylestrong{-e}}] \leavevmode
-write empty hexadecimal string fields as empty fields instead of
-as “-1”.
-
-\item[{\sphinxstylestrong{-n}}] \leavevmode
-produce numeric output for fields that normally have symbolic
-output, such as enctypes and flag names. Also requests output of
-time stamps as decimal POSIX time\_t values.
-
-\item[{\sphinxstylestrong{-o} \sphinxstyleemphasis{outfile}}] \leavevmode
-write the dump to the specified output file instead of to standard
-output
-
-\end{description}
-
-Dump types:
-\begin{description}
-\item[{\sphinxstylestrong{keydata}}] \leavevmode
-principal encryption key information, including actual key data
-(which is still encrypted in the master key)
-\begin{description}
-\item[{\sphinxstylestrong{name}}] \leavevmode
-principal name
-
-\item[{\sphinxstylestrong{keyindex}}] \leavevmode
-index of this key in the principal’s key list
-
-\item[{\sphinxstylestrong{kvno}}] \leavevmode
-key version number
-
-\item[{\sphinxstylestrong{enctype}}] \leavevmode
-encryption type
-
-\item[{\sphinxstylestrong{key}}] \leavevmode
-key data as a hexadecimal string
-
-\item[{\sphinxstylestrong{salttype}}] \leavevmode
-salt type
-
-\item[{\sphinxstylestrong{salt}}] \leavevmode
-salt data as a hexadecimal string
-
-\end{description}
-
-\item[{\sphinxstylestrong{keyinfo}}] \leavevmode
-principal encryption key information (as in \sphinxstylestrong{keydata} above),
-excluding actual key data
-
-\item[{\sphinxstylestrong{princ\_flags}}] \leavevmode
-principal boolean attributes. Flag names print as hexadecimal
-numbers if the \sphinxstylestrong{-n} option is specified, and all flag positions
-are printed regardless of whether or not they are set. If \sphinxstylestrong{-n}
-is not specified, print all known flag names for each principal,
-but only print hexadecimal flag names if the corresponding flag is
-set.
-\begin{description}
-\item[{\sphinxstylestrong{name}}] \leavevmode
-principal name
-
-\item[{\sphinxstylestrong{flag}}] \leavevmode
-flag name
-
-\item[{\sphinxstylestrong{value}}] \leavevmode
-boolean value (0 for clear, or 1 for set)
-
-\end{description}
-
-\item[{\sphinxstylestrong{princ\_lockout}}] \leavevmode
-state information used for tracking repeated password failures
-\begin{description}
-\item[{\sphinxstylestrong{name}}] \leavevmode
-principal name
-
-\item[{\sphinxstylestrong{last\_success}}] \leavevmode
-time stamp of most recent successful authentication
-
-\item[{\sphinxstylestrong{last\_failed}}] \leavevmode
-time stamp of most recent failed authentication
-
-\item[{\sphinxstylestrong{fail\_count}}] \leavevmode
-count of failed attempts
-
-\end{description}
-
-\item[{\sphinxstylestrong{princ\_meta}}] \leavevmode
-principal metadata
-\begin{description}
-\item[{\sphinxstylestrong{name}}] \leavevmode
-principal name
-
-\item[{\sphinxstylestrong{modby}}] \leavevmode
-name of last principal to modify this principal
-
-\item[{\sphinxstylestrong{modtime}}] \leavevmode
-timestamp of last modification
-
-\item[{\sphinxstylestrong{lastpwd}}] \leavevmode
-timestamp of last password change
-
-\item[{\sphinxstylestrong{policy}}] \leavevmode
-policy object name
-
-\item[{\sphinxstylestrong{mkvno}}] \leavevmode
-key version number of the master key that encrypts this
-principal’s key data
-
-\item[{\sphinxstylestrong{hist\_kvno}}] \leavevmode
-key version number of the history key that encrypts the key
-history data for this principal
-
-\end{description}
-
-\item[{\sphinxstylestrong{princ\_stringattrs}}] \leavevmode
-string attributes (key/value pairs)
-\begin{description}
-\item[{\sphinxstylestrong{name}}] \leavevmode
-principal name
-
-\item[{\sphinxstylestrong{key}}] \leavevmode
-attribute name
-
-\item[{\sphinxstylestrong{value}}] \leavevmode
-attribute value
-
-\end{description}
-
-\item[{\sphinxstylestrong{princ\_tktpolicy}}] \leavevmode
-per-principal ticket policy data, including maximum ticket
-lifetimes
-\begin{description}
-\item[{\sphinxstylestrong{name}}] \leavevmode
-principal name
-
-\item[{\sphinxstylestrong{expiration}}] \leavevmode
-principal expiration date
-
-\item[{\sphinxstylestrong{pw\_expiration}}] \leavevmode
-password expiration date
-
-\item[{\sphinxstylestrong{max\_life}}] \leavevmode
-maximum ticket lifetime
-
-\item[{\sphinxstylestrong{max\_renew\_life}}] \leavevmode
-maximum renewable ticket lifetime
-
-\end{description}
-
-\end{description}
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYGZdl{} kdb5\PYGZus{}util tabdump \PYGZhy{}o keyinfo.txt keyinfo
-\PYGZdl{} cat keyinfo.txt
-name keyindex kvno enctype salttype salt
-K/M@EXAMPLE.COM 0 1 aes256\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha384\PYGZhy{}192 normal \PYGZhy{}1
-foo@EXAMPLE.COM 0 1 aes128\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha1\PYGZhy{}96 normal \PYGZhy{}1
-bar@EXAMPLE.COM 0 1 aes128\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha1\PYGZhy{}96 normal \PYGZhy{}1
-\PYGZdl{} sqlite3
-sqlite\PYGZgt{} .mode tabs
-sqlite\PYGZgt{} .import keyinfo.txt keyinfo
-sqlite\PYGZgt{} select * from keyinfo where enctype like \PYGZsq{}aes256\PYGZhy{}\PYGZpc{}\PYGZsq{};
-K/M@EXAMPLE.COM 1 1 aes256\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha384\PYGZhy{}192 normal \PYGZhy{}1
-sqlite\PYGZgt{} .quit
-\PYGZdl{} awk \PYGZhy{}F\PYGZsq{}\PYGZbs{}t\PYGZsq{} \PYGZsq{}\PYGZdl{}4 \PYGZti{} /aes256\PYGZhy{}/ \PYGZob{} print \PYGZcb{}\PYGZsq{} keyinfo.txt
-K/M@EXAMPLE.COM 1 1 aes256\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha384\PYGZhy{}192 normal \PYGZhy{}1
-\end{sphinxVerbatim}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/kdb5_util:environment}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/kdb5_util:see-also}}
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}, \DUrole{xref,std,std-ref}{kerberos(7)}
-
-
-\section{kdb5\_ldap\_util}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util::doc}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:synopsis}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-synopsis}}
-\sphinxstylestrong{kdb5\_ldap\_util}
-{[}\sphinxstylestrong{-D} \sphinxstyleemphasis{user\_dn} {[}\sphinxstylestrong{-w} \sphinxstyleemphasis{passwd}{]}{]}
-{[}\sphinxstylestrong{-H} \sphinxstyleemphasis{ldapuri}{]}
-\sphinxstylestrong{command}
-{[}\sphinxstyleemphasis{command\_options}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-synopsis-end}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:description}}
-kdb5\_ldap\_util allows an administrator to manage realms, Kerberos
-services and ticket policies.
-
-
-\subsection{COMMAND-LINE OPTIONS}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:command-line-options}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-options}}\begin{description}
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}}] \leavevmode
-Specifies the realm to be operated on.
-
-\item[{\sphinxstylestrong{-D} \sphinxstyleemphasis{user\_dn}}] \leavevmode
-Specifies the Distinguished Name (DN) of the user who has
-sufficient rights to perform the operation on the LDAP server.
-
-\item[{\sphinxstylestrong{-w} \sphinxstyleemphasis{passwd}}] \leavevmode
-Specifies the password of \sphinxstyleemphasis{user\_dn}. This option is not
-recommended.
-
-\item[{\sphinxstylestrong{-H} \sphinxstyleemphasis{ldapuri}}] \leavevmode
-Specifies the URI of the LDAP server.
-
-\end{description}
-
-By default, kdb5\_ldap\_util operates on the default realm (as specified
-in {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}) and connects and authenticates to the LDAP
-server in the same manner as :ref:kadmind(8){}` would given the
-parameters in {\hyperref[\detokenize{admin/conf_files/kdc_conf:dbdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}dbdefaults{]}}}}} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-
-\subsection{COMMANDS}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-options-end}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:commands}}
-
-\subsubsection{create}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:create}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-create}}\begin{quote}
-
-\sphinxstylestrong{create}
-{[}\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}{]}
-{[}\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}{]}
-{[}\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn}{]}
-{[}\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}{]}
-{[}\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}{]}
-{[}\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}{]}
-{[}\sphinxstylestrong{-m\textbar{}-P} \sphinxstyleemphasis{password}\textbar{}\sphinxstylestrong{-sf} \sphinxstyleemphasis{stashfilename}{]}
-{[}\sphinxstylestrong{-s}{]}
-{[}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{]}
-{[}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{]}
-{[}\sphinxstyleemphasis{ticket\_flags}{]}
-\end{quote}
-
-Creates realm in directory. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}}] \leavevmode
-Specifies the list of subtrees containing the principals of a
-realm. The list contains the DNs of the subtree objects separated
-by colon (\sphinxcode{:}).
-
-\item[{\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}}] \leavevmode
-Specifies the scope for searching the principals under the
-subtree. The possible values are 1 or one (one level), 2 or sub
-(subtrees).
-
-\item[{\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn}}] \leavevmode
-Specifies the DN of the container object in which the principals
-of a realm will be created. If the container reference is not
-configured for a realm, the principals will be created in the
-realm container.
-
-\item[{\sphinxstylestrong{-k} \sphinxstyleemphasis{mkeytype}}] \leavevmode
-Specifies the key type of the master key in the database. The
-default is given by the \sphinxstylestrong{master\_key\_type} variable in
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-kv} \sphinxstyleemphasis{mkeyVNO}}] \leavevmode
-Specifies the version number of the master key in the database;
-the default is 1. Note that 0 is not allowed.
-
-\item[{\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}}] \leavevmode
-Specifies the principal name for the master key in the database.
-If not specified, the name is determined by the
-\sphinxstylestrong{master\_key\_name} variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}.
-
-\item[{\sphinxstylestrong{-m}}] \leavevmode
-Specifies that the master database password should be read from
-the TTY rather than fetched from a file on the disk.
-
-\item[{\sphinxstylestrong{-P} \sphinxstyleemphasis{password}}] \leavevmode
-Specifies the master database password. This option is not
-recommended.
-
-\item[{\sphinxstylestrong{-sf} \sphinxstyleemphasis{stashfilename}}] \leavevmode
-Specifies the stash file of the master database password.
-
-\item[{\sphinxstylestrong{-s}}] \leavevmode
-Specifies that the stash file is to be created.
-
-\item[{\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum ticket life for
-principals in this realm.
-
-\item[{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum renewable life of
-tickets for principals in this realm.
-
-\item[{\sphinxstyleemphasis{ticket\_flags}}] \leavevmode
-Specifies global ticket flags for the realm. Allowable flags are
-documented in the description of the \sphinxstylestrong{add\_principal} command in
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{create} \PYG{o}{\PYGZhy{}}\PYG{n}{subtrees} \PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{sscope} \PYG{n}{SUB}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Initializing} \PYG{n}{database} \PYG{k}{for} \PYG{n}{realm} \PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{ATHENA.MIT.EDU}\PYG{l+s+s1}{\PYGZsq{}}
-\PYG{n}{You} \PYG{n}{will} \PYG{n}{be} \PYG{n}{prompted} \PYG{k}{for} \PYG{n}{the} \PYG{n}{database} \PYG{n}{Master} \PYG{n}{Password}\PYG{o}{.}
-\PYG{n}{It} \PYG{o+ow}{is} \PYG{n}{important} \PYG{n}{that} \PYG{n}{you} \PYG{n}{NOT} \PYG{n}{FORGET} \PYG{n}{this} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{KDC} \PYG{n}{database} \PYG{n}{master} \PYG{n}{key}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{KDC} \PYG{n}{database} \PYG{n}{master} \PYG{n}{key} \PYG{n}{to} \PYG{n}{verify}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsubsection{modify}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-create-end}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:modify}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-modify}}\begin{quote}
-
-\sphinxstylestrong{modify}
-{[}\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}{]}
-{[}\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}{]}
-{[}\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn}{]}
-{[}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{]}
-{[}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{]}
-{[}\sphinxstyleemphasis{ticket\_flags}{]}
-\end{quote}
-
-Modifies the attributes of a realm. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-subtrees} \sphinxstyleemphasis{subtree\_dn\_list}}] \leavevmode
-Specifies the list of subtrees containing the principals of a
-realm. The list contains the DNs of the subtree objects separated
-by colon (\sphinxcode{:}). This list replaces the existing list.
-
-\item[{\sphinxstylestrong{-sscope} \sphinxstyleemphasis{search\_scope}}] \leavevmode
-Specifies the scope for searching the principals under the
-subtrees. The possible values are 1 or one (one level), 2 or sub
-(subtrees).
-
-\item[{\sphinxstylestrong{-containerref} \sphinxstyleemphasis{container\_reference\_dn} Specifies the DN of the}] \leavevmode
-container object in which the principals of a realm will be
-created.
-
-\item[{\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum ticket life for
-principals in this realm.
-
-\item[{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum renewable life of
-tickets for principals in this realm.
-
-\item[{\sphinxstyleemphasis{ticket\_flags}}] \leavevmode
-Specifies global ticket flags for the realm. Allowable flags are
-documented in the description of the \sphinxstylestrong{add\_principal} command in
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H}
- \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n}{modify} \PYG{o}{+}\PYG{n}{requires\PYGZus{}preauth}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-
-\subsubsection{view}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-modify-end}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:view}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-view}}\begin{quote}
-
-\sphinxstylestrong{view}
-\end{quote}
-
-Displays the attributes of a realm.
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{view}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Realm} \PYG{n}{Name}\PYG{p}{:} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{Subtree}\PYG{p}{:} \PYG{n}{ou}\PYG{o}{=}\PYG{n}{users}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org}
-\PYG{n}{Subtree}\PYG{p}{:} \PYG{n}{ou}\PYG{o}{=}\PYG{n}{servers}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org}
-\PYG{n}{SearchScope}\PYG{p}{:} \PYG{n}{ONE}
-\PYG{n}{Maximum} \PYG{n}{ticket} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{01}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Maximum} \PYG{n}{renewable} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{10}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Ticket} \PYG{n}{flags}\PYG{p}{:} \PYG{n}{DISALLOW\PYGZus{}FORWARDABLE} \PYG{n}{REQUIRES\PYGZus{}PWCHANGE}
-\end{sphinxVerbatim}
-
-
-\subsubsection{destroy}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:destroy}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-view-end}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-destroy}}\begin{quote}
-
-\sphinxstylestrong{destroy} {[}\sphinxstylestrong{-f}{]}
-\end{quote}
-
-Destroys an existing realm. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-f}}] \leavevmode
-If specified, will not prompt the user for confirmation.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-shell\PYGZpc{} kdb5\PYGZus{}ldap\PYGZus{}util \PYGZhy{}r ATHENA.MIT.EDU \PYGZhy{}D cn=admin,o=org \PYGZhy{}H
- ldaps://ldap\PYGZhy{}server1.mit.edu destroy
-Password for \PYGZdq{}cn=admin,o=org\PYGZdq{}:
-Deleting KDC database of \PYGZsq{}ATHENA.MIT.EDU\PYGZsq{}, are you sure?
-(type \PYGZsq{}yes\PYGZsq{} to confirm)? yes
-OK, deleting database of \PYGZsq{}ATHENA.MIT.EDU\PYGZsq{}...
-shell\PYGZpc{}
-\end{sphinxVerbatim}
-
-
-\subsubsection{list}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-destroy-end}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:list}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-list}}\begin{quote}
-
-\sphinxstylestrong{list}
-\end{quote}
-
-Lists the names of realms under the container.
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H}
- \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{n+nb}{list}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{OPENLDAP}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{MEDIA}\PYG{o}{\PYGZhy{}}\PYG{n}{LAB}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-
-\subsubsection{stashsrvpw}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-list-end}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:stashsrvpw}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-stashsrvpw}}\begin{quote}
-
-\sphinxstylestrong{stashsrvpw}
-{[}\sphinxstylestrong{-f} \sphinxstyleemphasis{filename}{]}
-\sphinxstyleemphasis{name}
-\end{quote}
-
-Allows an administrator to store the password for service object in a
-file so that KDC and Administration server can use it to authenticate
-to the LDAP server. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-f} \sphinxstyleemphasis{filename}}] \leavevmode
-Specifies the complete path of the service password file. By
-default, \sphinxcode{/usr/local/var/service\_passwd} is used.
-
-\item[{\sphinxstyleemphasis{name}}] \leavevmode
-Specifies the name of the object whose password is to be stored.
-If {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}} or {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} are configured for
-simple binding, this should be the distinguished name it will
-use as given by the \sphinxstylestrong{ldap\_kdc\_dn} or \sphinxstylestrong{ldap\_kadmind\_dn}
-variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}. If the KDC or kadmind is
-configured for SASL binding, this should be the authentication
-name it will use as given by the \sphinxstylestrong{ldap\_kdc\_sasl\_authcid} or
-\sphinxstylestrong{ldap\_kadmind\_sasl\_authcid} variable.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{n}{stashsrvpw} \PYG{o}{\PYGZhy{}}\PYG{n}{f} \PYG{o}{/}\PYG{n}{home}\PYG{o}{/}\PYG{n}{andrew}\PYG{o}{/}\PYG{n}{conf\PYGZus{}keyfile}
- \PYG{n}{cn}\PYG{o}{=}\PYG{n}{service}\PYG{o}{\PYGZhy{}}\PYG{n}{kdc}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=service\PYGZhy{}kdc,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Re}\PYG{o}{\PYGZhy{}}\PYG{n}{enter} \PYG{n}{password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=service\PYGZhy{}kdc,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsubsection{create\_policy}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:create-policy}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-stashsrvpw-end}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-create-policy}}\begin{quote}
-
-\sphinxstylestrong{create\_policy}
-{[}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{]}
-{[}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{]}
-{[}\sphinxstyleemphasis{ticket\_flags}{]}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Creates a ticket policy in the directory. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum ticket life for
-principals.
-
-\item[{\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{getdate} string) Specifies maximum renewable life of
-tickets for principals.
-
-\item[{\sphinxstyleemphasis{ticket\_flags}}] \leavevmode
-Specifies the ticket flags. If this option is not specified, by
-default, no restriction will be set by the policy. Allowable
-flags are documented in the description of the \sphinxstylestrong{add\_principal}
-command in {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}.
-
-\item[{\sphinxstyleemphasis{policy\_name}}] \leavevmode
-Specifies the name of the ticket policy.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{create\PYGZus{}policy} \PYG{o}{\PYGZhy{}}\PYG{n}{maxtktlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{1 day}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{o}{\PYGZhy{}}\PYG{n}{maxrenewlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{1 week}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{allow\PYGZus{}postdated} \PYG{o}{+}\PYG{n}{needchange}
- \PYG{o}{\PYGZhy{}}\PYG{n}{allow\PYGZus{}forwardable} \PYG{n}{tktpolicy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsubsection{modify\_policy}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:modify-policy}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-create-policy-end}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-modify-policy}}\begin{quote}
-
-\sphinxstylestrong{modify\_policy}
-{[}\sphinxstylestrong{-maxtktlife} \sphinxstyleemphasis{max\_ticket\_life}{]}
-{[}\sphinxstylestrong{-maxrenewlife} \sphinxstyleemphasis{max\_renewable\_ticket\_life}{]}
-{[}\sphinxstyleemphasis{ticket\_flags}{]}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Modifies the attributes of a ticket policy. Options are same as for
-\sphinxstylestrong{create\_policy}.
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H}
- \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu} \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{modify\PYGZus{}policy}
- \PYG{o}{\PYGZhy{}}\PYG{n}{maxtktlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{60 minutes}\PYG{l+s+s2}{\PYGZdq{}} \PYG{o}{\PYGZhy{}}\PYG{n}{maxrenewlife} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{10 hours}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{o}{+}\PYG{n}{allow\PYGZus{}postdated} \PYG{o}{\PYGZhy{}}\PYG{n}{requires\PYGZus{}preauth} \PYG{n}{tktpolicy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\end{sphinxVerbatim}
-
-
-\subsubsection{view\_policy}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:view-policy}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-modify-policy-end}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-view-policy}}\begin{quote}
-
-\sphinxstylestrong{view\_policy}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Displays the attributes of the named ticket policy.
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{view\PYGZus{}policy} \PYG{n}{tktpolicy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{Ticket} \PYG{n}{policy}\PYG{p}{:} \PYG{n}{tktpolicy}
-\PYG{n}{Maximum} \PYG{n}{ticket} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{01}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Maximum} \PYG{n}{renewable} \PYG{n}{life}\PYG{p}{:} \PYG{l+m+mi}{0} \PYG{n}{days} \PYG{l+m+mi}{10}\PYG{p}{:}\PYG{l+m+mi}{00}\PYG{p}{:}\PYG{l+m+mi}{00}
-\PYG{n}{Ticket} \PYG{n}{flags}\PYG{p}{:} \PYG{n}{DISALLOW\PYGZus{}FORWARDABLE} \PYG{n}{REQUIRES\PYGZus{}PWCHANGE}
-\end{sphinxVerbatim}
-
-
-\subsubsection{destroy\_policy}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:destroy-policy}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-view-policy-end}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-destroy-policy}}\begin{quote}
-
-\sphinxstylestrong{destroy\_policy}
-{[}\sphinxstylestrong{-force}{]}
-\sphinxstyleemphasis{policy\_name}
-\end{quote}
-
-Destroys an existing ticket policy. Options:
-\begin{description}
-\item[{\sphinxstylestrong{-force}}] \leavevmode
-Forces the deletion of the policy object. If not specified, the
-user will be prompted for confirmation before deleting the policy.
-
-\item[{\sphinxstyleemphasis{policy\_name}}] \leavevmode
-Specifies the name of the ticket policy.
-
-\end{description}
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-kdb5\PYGZus{}ldap\PYGZus{}util \PYGZhy{}D cn=admin,o=org \PYGZhy{}H ldaps://ldap\PYGZhy{}server1.mit.edu
- \PYGZhy{}r ATHENA.MIT.EDU destroy\PYGZus{}policy tktpolicy
-Password for \PYGZdq{}cn=admin,o=org\PYGZdq{}:
-This will delete the policy object \PYGZsq{}tktpolicy\PYGZsq{}, are you sure?
-(type \PYGZsq{}yes\PYGZsq{} to confirm)? yes
-** policy object \PYGZsq{}tktpolicy\PYGZsq{} deleted.
-\end{sphinxVerbatim}
-
-
-\subsubsection{list\_policy}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:list-policy}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-destroy-policy-end}}\phantomsection\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-list-policy}}\begin{quote}
-
-\sphinxstylestrong{list\_policy}
-\end{quote}
-
-Lists ticket policies.
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kdb5\PYGZus{}ldap\PYGZus{}util} \PYG{o}{\PYGZhy{}}\PYG{n}{D} \PYG{n}{cn}\PYG{o}{=}\PYG{n}{admin}\PYG{p}{,}\PYG{n}{o}\PYG{o}{=}\PYG{n}{org} \PYG{o}{\PYGZhy{}}\PYG{n}{H} \PYG{n}{ldaps}\PYG{p}{:}\PYG{o}{/}\PYG{o}{/}\PYG{n}{ldap}\PYG{o}{\PYGZhy{}}\PYG{n}{server1}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}
- \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{list\PYGZus{}policy}
-\PYG{n}{Password} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{cn=admin,o=org}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{:}
-\PYG{n}{tktpolicy}
-\PYG{n}{tmppolicy}
-\PYG{n}{userpolicy}
-\end{sphinxVerbatim}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:environment}}\label{\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-list-policy-end}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/kdb5_ldap_util:see-also}}
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}, \DUrole{xref,std,std-ref}{kerberos(7)}
-
-
-\section{krb5kdc}
-\label{\detokenize{admin/admin_commands/krb5kdc::doc}}\label{\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}}\label{\detokenize{admin/admin_commands/krb5kdc:krb5kdc}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/krb5kdc:synopsis}}
-\sphinxstylestrong{krb5kdc}
-{[}\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}{]}
-{[}\sphinxstylestrong{-d} \sphinxstyleemphasis{dbname}{]}
-{[}\sphinxstylestrong{-k} \sphinxstyleemphasis{keytype}{]}
-{[}\sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname}{]}
-{[}\sphinxstylestrong{-p} \sphinxstyleemphasis{portnum}{]}
-{[}\sphinxstylestrong{-m}{]}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{]}
-{[}\sphinxstylestrong{-n}{]}
-{[}\sphinxstylestrong{-w} \sphinxstyleemphasis{numworkers}{]}
-{[}\sphinxstylestrong{-P} \sphinxstyleemphasis{pid\_file}{]}
-{[}\sphinxstylestrong{-T} \sphinxstyleemphasis{time\_offset}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/krb5kdc:description}}
-krb5kdc is the Kerberos version 5 Authentication Service and Key
-Distribution Center (AS/KDC).
-
-
-\subsection{OPTIONS}
-\label{\detokenize{admin/admin_commands/krb5kdc:options}}
-The \sphinxstylestrong{-r} \sphinxstyleemphasis{realm} option specifies the realm for which the server
-should provide service. This option may be specified multiple times
-to serve multiple realms. If no \sphinxstylestrong{-r} option is given, the default
-realm (as specified in {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}) will be served.
-
-The \sphinxstylestrong{-d} \sphinxstyleemphasis{dbname} option specifies the name under which the
-principal database can be found. This option does not apply to the
-LDAP database.
-
-The \sphinxstylestrong{-k} \sphinxstyleemphasis{keytype} option specifies the key type of the master key
-to be entered manually as a password when \sphinxstylestrong{-m} is given; the default
-is \sphinxcode{aes256-cts-hmac-sha1-96}.
-
-The \sphinxstylestrong{-M} \sphinxstyleemphasis{mkeyname} option specifies the principal name for the
-master key in the database (usually \sphinxcode{K/M} in the KDC’s realm).
-
-The \sphinxstylestrong{-m} option specifies that the master database password should
-be fetched from the keyboard rather than from a stash file.
-
-The \sphinxstylestrong{-n} option specifies that the KDC does not put itself in the
-background and does not disassociate itself from the terminal.
-
-The \sphinxstylestrong{-P} \sphinxstyleemphasis{pid\_file} option tells the KDC to write its PID into
-\sphinxstyleemphasis{pid\_file} after it starts up. This can be used to identify whether
-the KDC is still running and to allow init scripts to stop the correct
-process.
-
-The \sphinxstylestrong{-p} \sphinxstyleemphasis{portnum} option specifies the default UDP and TCP port
-numbers which the KDC should listen on for Kerberos version 5
-requests, as a comma-separated list. This value overrides the port
-numbers specified in the {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdcdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}kdcdefaults{]}}}}} section of
-{\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}, but may be overridden by realm-specific values.
-If no value is given from any source, the default port is 88.
-
-The \sphinxstylestrong{-w} \sphinxstyleemphasis{numworkers} option tells the KDC to fork \sphinxstyleemphasis{numworkers}
-processes to listen to the KDC ports and process requests in parallel.
-The top level KDC process (whose pid is recorded in the pid file if
-the \sphinxstylestrong{-P} option is also given) acts as a supervisor. The supervisor
-will relay SIGHUP signals to the worker subprocesses, and will
-terminate the worker subprocess if the it is itself terminated or if
-any other worker process exits.
-
-The \sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args} option specifies database-specific arguments.
-See {\hyperref[\detokenize{admin/admin_commands/kadmin_local:dboptions}]{\sphinxcrossref{\DUrole{std,std-ref}{Database Options}}}} in {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} for
-supported arguments.
-
-The \sphinxstylestrong{-T} \sphinxstyleemphasis{offset} option specifies a time offset, in seconds, which
-the KDC will operate under. It is intended only for testing purposes.
-
-
-\subsection{EXAMPLE}
-\label{\detokenize{admin/admin_commands/krb5kdc:example}}
-The KDC may service requests for multiple realms (maximum 32 realms).
-The realms are listed on the command line. Per-realm options that can
-be specified on the command line pertain for each realm that follows
-it and are superseded by subsequent definitions of the same option.
-
-For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{krb5kdc} \PYG{o}{\PYGZhy{}}\PYG{n}{p} \PYG{l+m+mi}{2001} \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{REALM1} \PYG{o}{\PYGZhy{}}\PYG{n}{p} \PYG{l+m+mi}{2002} \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{REALM2} \PYG{o}{\PYGZhy{}}\PYG{n}{r} \PYG{n}{REALM3}
-\end{sphinxVerbatim}
-
-specifies that the KDC listen on port 2001 for REALM1 and on port 2002
-for REALM2 and REALM3. Additionally, per-realm parameters may be
-specified in the {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} file. The location of this file
-may be specified by the \sphinxstylestrong{KRB5\_KDC\_PROFILE} environment variable.
-Per-realm parameters specified in this file take precedence over
-options specified on the command line. See the {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}
-description for further details.
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/krb5kdc:environment}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/krb5kdc:see-also}}
-{\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}, {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}, {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}},
-{\hyperref[\detokenize{admin/admin_commands/kdb5_ldap_util:kdb5-ldap-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_ldap\_util}}}}, \DUrole{xref,std,std-ref}{kerberos(7)}
-
-
-\section{kprop}
-\label{\detokenize{admin/admin_commands/kprop:kprop-8}}\label{\detokenize{admin/admin_commands/kprop::doc}}\label{\detokenize{admin/admin_commands/kprop:kprop}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/kprop:synopsis}}
-\sphinxstylestrong{kprop}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{]}
-{[}\sphinxstylestrong{-f} \sphinxstyleemphasis{file}{]}
-{[}\sphinxstylestrong{-d}{]}
-{[}\sphinxstylestrong{-P} \sphinxstyleemphasis{port}{]}
-{[}\sphinxstylestrong{-s} \sphinxstyleemphasis{keytab}{]}
-\sphinxstyleemphasis{replica\_host}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/kprop:description}}
-kprop is used to securely propagate a Kerberos V5 database dump file
-from the primary Kerberos server to a replica Kerberos server, which is
-specified by \sphinxstyleemphasis{replica\_host}. The dump file must be created by
-{\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{admin/admin_commands/kprop:options}}\begin{description}
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}}] \leavevmode
-Specifies the realm of the primary server.
-
-\item[{\sphinxstylestrong{-f} \sphinxstyleemphasis{file}}] \leavevmode
-Specifies the filename where the dumped principal database file is
-to be found; by default the dumped database file is normally
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/replica\_datatrans}.
-
-\item[{\sphinxstylestrong{-P} \sphinxstyleemphasis{port}}] \leavevmode
-Specifies the port to use to contact the {\hyperref[\detokenize{admin/admin_commands/kpropd:kpropd-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kpropd}}}} server
-on the remote host.
-
-\item[{\sphinxstylestrong{-d}}] \leavevmode
-Prints debugging information.
-
-\item[{\sphinxstylestrong{-s} \sphinxstyleemphasis{keytab}}] \leavevmode
-Specifies the location of the keytab file.
-
-\end{description}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/kprop:environment}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/kprop:see-also}}
-{\hyperref[\detokenize{admin/admin_commands/kpropd:kpropd-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kpropd}}}}, {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}, {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}},
-\DUrole{xref,std,std-ref}{kerberos(7)}
-
-
-\section{kpropd}
-\label{\detokenize{admin/admin_commands/kpropd::doc}}\label{\detokenize{admin/admin_commands/kpropd:kpropd}}\label{\detokenize{admin/admin_commands/kpropd:kpropd-8}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/kpropd:synopsis}}
-\sphinxstylestrong{kpropd}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}{]}
-{[}\sphinxstylestrong{-A} \sphinxstyleemphasis{admin\_server}{]}
-{[}\sphinxstylestrong{-a} \sphinxstyleemphasis{acl\_file}{]}
-{[}\sphinxstylestrong{-f} \sphinxstyleemphasis{replica\_dumpfile}{]}
-{[}\sphinxstylestrong{-F} \sphinxstyleemphasis{principal\_database}{]}
-{[}\sphinxstylestrong{-p} \sphinxstyleemphasis{kdb5\_util\_prog}{]}
-{[}\sphinxstylestrong{-P} \sphinxstyleemphasis{port}{]}
-{[}\sphinxstylestrong{\textendash{}pid-file}=\sphinxstyleemphasis{pid\_file}{]}
-{[}\sphinxstylestrong{-D}{]}
-{[}\sphinxstylestrong{-d}{]}
-{[}\sphinxstylestrong{-s} \sphinxstyleemphasis{keytab\_file}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/kpropd:description}}
-The \sphinxstyleemphasis{kpropd} command runs on the replica KDC server. It listens for
-update requests made by the {\hyperref[\detokenize{admin/admin_commands/kprop:kprop-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop}}}} program. If incremental
-propagation is enabled, it periodically requests incremental updates
-from the primary KDC.
-
-When the replica receives a kprop request from the primary, kpropd
-accepts the dumped KDC database and places it in a file, and then runs
-{\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}} to load the dumped database into the active
-database which is used by {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}}. This allows the primary
-Kerberos server to use {\hyperref[\detokenize{admin/admin_commands/kprop:kprop-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop}}}} to propagate its database to
-the replica servers. Upon a successful download of the KDC database
-file, the replica Kerberos server will have an up-to-date KDC
-database.
-
-Where incremental propagation is not used, kpropd is commonly invoked
-out of inetd(8) as a nowait service. This is done by adding a line to
-the \sphinxcode{/etc/inetd.conf} file which looks like this:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kprop} \PYG{n}{stream} \PYG{n}{tcp} \PYG{n}{nowait} \PYG{n}{root} \PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{sbin}\PYG{o}{/}\PYG{n}{kpropd} \PYG{n}{kpropd}
-\end{sphinxVerbatim}
-
-kpropd can also run as a standalone daemon, backgrounding itself and
-waiting for connections on port 754 (or the port specified with the
-\sphinxstylestrong{-P} option if given). Standalone mode is required for incremental
-propagation. Starting in release 1.11, kpropd automatically detects
-whether it was run from inetd and runs in standalone mode if it is
-not. Prior to release 1.11, the \sphinxstylestrong{-S} option is required to run
-kpropd in standalone mode; this option is now accepted for backward
-compatibility but does nothing.
-
-Incremental propagation may be enabled with the \sphinxstylestrong{iprop\_enable}
-variable in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}. If incremental propagation is
-enabled, the replica periodically polls the primary KDC for updates, at
-an interval determined by the \sphinxstylestrong{iprop\_replica\_poll} variable. If the
-replica receives updates, kpropd updates its log file with any updates
-from the primary. {\hyperref[\detokenize{admin/admin_commands/kproplog:kproplog-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kproplog}}}} can be used to view a summary of
-the update entry log on the replica KDC. If incremental propagation
-is enabled, the principal \sphinxcode{kiprop/replicahostname@REALM} (where
-\sphinxstyleemphasis{replicahostname} is the name of the replica KDC host, and \sphinxstyleemphasis{REALM} is
-the name of the Kerberos realm) must be present in the replica’s
-keytab file.
-
-{\hyperref[\detokenize{admin/admin_commands/kproplog:kproplog-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kproplog}}}} can be used to force full replication when iprop is
-enabled.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{admin/admin_commands/kpropd:options}}\begin{description}
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{realm}}] \leavevmode
-Specifies the realm of the primary server.
-
-\item[{\sphinxstylestrong{-A} \sphinxstyleemphasis{admin\_server}}] \leavevmode
-Specifies the server to be contacted for incremental updates; by
-default, the primary admin server is contacted.
-
-\item[{\sphinxstylestrong{-f} \sphinxstyleemphasis{file}}] \leavevmode
-Specifies the filename where the dumped principal database file is
-to be stored; by default the dumped database file is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/from\_master}.
-
-\item[{\sphinxstylestrong{-F} \sphinxstyleemphasis{kerberos\_db}}] \leavevmode
-Path to the Kerberos database file, if not the default.
-
-\item[{\sphinxstylestrong{-p}}] \leavevmode
-Allows the user to specify the pathname to the {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}
-program; by default the pathname used is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{SBINDIR}}}}\sphinxcode{/kdb5\_util}.
-
-\item[{\sphinxstylestrong{-D}}] \leavevmode
-In this mode, kpropd will not detach itself from the current job
-and run in the background. Instead, it will run in the
-foreground.
-
-\item[{\sphinxstylestrong{-d}}] \leavevmode
-Turn on debug mode. kpropd will print out debugging messages
-during the database propogation and will run in the foreground
-(implies \sphinxstylestrong{-D}).
-
-\item[{\sphinxstylestrong{-P}}] \leavevmode
-Allow for an alternate port number for kpropd to listen on. This
-is only useful in combination with the \sphinxstylestrong{-S} option.
-
-\item[{\sphinxstylestrong{-a} \sphinxstyleemphasis{acl\_file}}] \leavevmode
-Allows the user to specify the path to the kpropd.acl file; by
-default the path used is {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/kpropd.acl}.
-
-\item[{\sphinxstylestrong{\textendash{}pid-file}=\sphinxstyleemphasis{pid\_file}}] \leavevmode
-In standalone mode, write the process ID of the daemon into
-\sphinxstyleemphasis{pid\_file}.
-
-\item[{\sphinxstylestrong{-s} \sphinxstyleemphasis{keytab\_file}}] \leavevmode
-Path to a keytab to use for acquiring acceptor credentials.
-
-\item[{\sphinxstylestrong{-x} \sphinxstyleemphasis{db\_args}}] \leavevmode
-Database-specific arguments. See {\hyperref[\detokenize{admin/admin_commands/kadmin_local:dboptions}]{\sphinxcrossref{\DUrole{std,std-ref}{Database Options}}}} in {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} for supported arguments.
-
-\end{description}
-
-
-\subsection{FILES}
-\label{\detokenize{admin/admin_commands/kpropd:files}}\begin{description}
-\item[{kpropd.acl}] \leavevmode
-Access file for kpropd; the default location is
-\sphinxcode{/usr/local/var/krb5kdc/kpropd.acl}. Each entry is a line
-containing the principal of a host from which the local machine
-will allow Kerberos database propagation via {\hyperref[\detokenize{admin/admin_commands/kprop:kprop-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop}}}}.
-
-\end{description}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/kpropd:environment}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/kpropd:see-also}}
-{\hyperref[\detokenize{admin/admin_commands/kprop:kprop-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop}}}}, {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}, {\hyperref[\detokenize{admin/admin_commands/krb5kdc:krb5kdc-8}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5kdc}}}},
-\DUrole{xref,std,std-ref}{kerberos(7)}, inetd(8)
-
-
-\section{kproplog}
-\label{\detokenize{admin/admin_commands/kproplog:kproplog}}\label{\detokenize{admin/admin_commands/kproplog:kproplog-8}}\label{\detokenize{admin/admin_commands/kproplog::doc}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/kproplog:synopsis}}
-\sphinxstylestrong{kproplog} {[}\sphinxstylestrong{-h}{]} {[}\sphinxstylestrong{-e} \sphinxstyleemphasis{num}{]} {[}-v{]}
-\sphinxstylestrong{kproplog} {[}-R{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/kproplog:description}}
-The kproplog command displays the contents of the KDC database update
-log to standard output. It can be used to keep track of incremental
-updates to the principal database. The update log file contains the
-update log maintained by the {\hyperref[\detokenize{admin/admin_commands/kadmind:kadmind-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmind}}}} process on the primary
-KDC server and the {\hyperref[\detokenize{admin/admin_commands/kpropd:kpropd-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kpropd}}}} process on the replica KDC
-servers. When updates occur, they are logged to this file.
-Subsequently any KDC replica configured for incremental updates will
-request the current data from the primary KDC and update their log
-file with any updates returned.
-
-The kproplog command requires read access to the update log file. It
-will display update entries only for the KDC it runs on.
-
-If no options are specified, kproplog displays a summary of the update
-log. If invoked on the primary, kproplog also displays all of the
-update entries. If invoked on a replica KDC server, kproplog displays
-only a summary of the updates, which includes the serial number of the
-last update received and the associated time stamp of the last update.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{admin/admin_commands/kproplog:options}}\begin{description}
-\item[{\sphinxstylestrong{-R}}] \leavevmode
-Reset the update log. This forces full resynchronization. If
-used on a replica then that replica will request a full resync.
-If used on the primary then all replicas will request full
-resyncs.
-
-\item[{\sphinxstylestrong{-h}}] \leavevmode
-Display a summary of the update log. This information includes
-the database version number, state of the database, the number of
-updates in the log, the time stamp of the first and last update,
-and the version number of the first and last update entry.
-
-\item[{\sphinxstylestrong{-e} \sphinxstyleemphasis{num}}] \leavevmode
-Display the last \sphinxstyleemphasis{num} update entries in the log. This is useful
-when debugging synchronization between KDC servers.
-
-\item[{\sphinxstylestrong{-v}}] \leavevmode
-Display individual attributes per update. An example of the
-output generated for one entry:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{Update} \PYG{n}{Entry}
- \PYG{n}{Update} \PYG{n}{serial} \PYG{c+c1}{\PYGZsh{} : 4}
- \PYG{n}{Update} \PYG{n}{operation} \PYG{p}{:} \PYG{n}{Add}
- \PYG{n}{Update} \PYG{n}{principal} \PYG{p}{:} \PYG{n}{test}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
- \PYG{n}{Update} \PYG{n}{size} \PYG{p}{:} \PYG{l+m+mi}{424}
- \PYG{n}{Update} \PYG{n}{committed} \PYG{p}{:} \PYG{k+kc}{True}
- \PYG{n}{Update} \PYG{n}{time} \PYG{n}{stamp} \PYG{p}{:} \PYG{n}{Fri} \PYG{n}{Feb} \PYG{l+m+mi}{20} \PYG{l+m+mi}{23}\PYG{p}{:}\PYG{l+m+mi}{37}\PYG{p}{:}\PYG{l+m+mi}{42} \PYG{l+m+mi}{2004}
- \PYG{n}{Attributes} \PYG{n}{changed} \PYG{p}{:} \PYG{l+m+mi}{6}
- \PYG{n}{Principal}
- \PYG{n}{Key} \PYG{n}{data}
- \PYG{n}{Password} \PYG{n}{last} \PYG{n}{changed}
- \PYG{n}{Modifying} \PYG{n}{principal}
- \PYG{n}{Modification} \PYG{n}{time}
- \PYG{n}{TL} \PYG{n}{data}
-\end{sphinxVerbatim}
-
-\end{description}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/kproplog:environment}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/kproplog:see-also}}
-{\hyperref[\detokenize{admin/admin_commands/kpropd:kpropd-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kpropd}}}}, \DUrole{xref,std,std-ref}{kerberos(7)}
-
-
-\section{ktutil}
-\label{\detokenize{admin/admin_commands/ktutil:ktutil-1}}\label{\detokenize{admin/admin_commands/ktutil::doc}}\label{\detokenize{admin/admin_commands/ktutil:ktutil}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/ktutil:synopsis}}
-\sphinxstylestrong{ktutil}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/ktutil:description}}
-The ktutil command invokes a command interface from which an
-administrator can read, write, or edit entries in a keytab. (Kerberos
-V4 srvtab files are no longer supported.)
-
-
-\subsection{COMMANDS}
-\label{\detokenize{admin/admin_commands/ktutil:commands}}
-
-\subsubsection{list}
-\label{\detokenize{admin/admin_commands/ktutil:list}}\begin{quote}
-
-\sphinxstylestrong{list} {[}\sphinxstylestrong{-t}{]} {[}\sphinxstylestrong{-k}{]} {[}\sphinxstylestrong{-e}{]}
-\end{quote}
-
-Displays the current keylist. If \sphinxstylestrong{-t}, \sphinxstylestrong{-k}, and/or \sphinxstylestrong{-e} are
-specified, also display the timestamp, key contents, or enctype
-(respectively).
-
-Alias: \sphinxstylestrong{l}
-
-
-\subsubsection{read\_kt}
-\label{\detokenize{admin/admin_commands/ktutil:read-kt}}\begin{quote}
-
-\sphinxstylestrong{read\_kt} \sphinxstyleemphasis{keytab}
-\end{quote}
-
-Read the Kerberos V5 keytab file \sphinxstyleemphasis{keytab} into the current keylist.
-
-Alias: \sphinxstylestrong{rkt}
-
-
-\subsubsection{write\_kt}
-\label{\detokenize{admin/admin_commands/ktutil:write-kt}}\begin{quote}
-
-\sphinxstylestrong{write\_kt} \sphinxstyleemphasis{keytab}
-\end{quote}
-
-Write the current keylist into the Kerberos V5 keytab file \sphinxstyleemphasis{keytab}.
-
-Alias: \sphinxstylestrong{wkt}
-
-
-\subsubsection{clear\_list}
-\label{\detokenize{admin/admin_commands/ktutil:clear-list}}\begin{quote}
-
-\sphinxstylestrong{clear\_list}
-\end{quote}
-
-Clear the current keylist.
-
-Alias: \sphinxstylestrong{clear}
-
-
-\subsubsection{delete\_entry}
-\label{\detokenize{admin/admin_commands/ktutil:delete-entry}}\begin{quote}
-
-\sphinxstylestrong{delete\_entry} \sphinxstyleemphasis{slot}
-\end{quote}
-
-Delete the entry in slot number \sphinxstyleemphasis{slot} from the current keylist.
-
-Alias: \sphinxstylestrong{delent}
-
-
-\subsubsection{add\_entry}
-\label{\detokenize{admin/admin_commands/ktutil:add-entry}}\begin{quote}
-
-\sphinxstylestrong{add\_entry} \{\sphinxstylestrong{-key}\textbar{}\sphinxstylestrong{-password}\} \sphinxstylestrong{-p} \sphinxstyleemphasis{principal}
-\sphinxstylestrong{-k} \sphinxstyleemphasis{kvno} {[}\sphinxstylestrong{-e} \sphinxstyleemphasis{enctype}{]} {[}\sphinxstylestrong{-f}\textbar{}\sphinxstylestrong{-s} \sphinxstyleemphasis{salt}{]}
-\end{quote}
-
-Add \sphinxstyleemphasis{principal} to keylist using key or password. If the \sphinxstylestrong{-f} flag
-is specified, salt information will be fetched from the KDC; in this
-case the \sphinxstylestrong{-e} flag may be omitted, or it may be supplied to force a
-particular enctype. If the \sphinxstylestrong{-f} flag is not specified, the \sphinxstylestrong{-e}
-flag must be specified, and the default salt will be used unless
-overridden with the \sphinxstylestrong{-s} option.
-
-Alias: \sphinxstylestrong{addent}
-
-
-\subsubsection{list\_requests}
-\label{\detokenize{admin/admin_commands/ktutil:list-requests}}\begin{quote}
-
-\sphinxstylestrong{list\_requests}
-\end{quote}
-
-Displays a listing of available commands.
-
-Aliases: \sphinxstylestrong{lr}, \sphinxstylestrong{?}
-
-
-\subsubsection{quit}
-\label{\detokenize{admin/admin_commands/ktutil:quit}}\begin{quote}
-
-\sphinxstylestrong{quit}
-\end{quote}
-
-Quits ktutil.
-
-Aliases: \sphinxstylestrong{exit}, \sphinxstylestrong{q}
-
-
-\subsection{EXAMPLE}
-\label{\detokenize{admin/admin_commands/ktutil:example}}\begin{quote}
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{ktutil}\PYG{p}{:} \PYG{n}{add\PYGZus{}entry} \PYG{o}{\PYGZhy{}}\PYG{n}{password} \PYG{o}{\PYGZhy{}}\PYG{n}{p} \PYG{n}{alice}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM} \PYG{o}{\PYGZhy{}}\PYG{n}{k} \PYG{l+m+mi}{1} \PYG{o}{\PYGZhy{}}\PYG{n}{e}
- \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{alice}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:}
-\PYG{n}{ktutil}\PYG{p}{:} \PYG{n}{add\PYGZus{}entry} \PYG{o}{\PYGZhy{}}\PYG{n}{password} \PYG{o}{\PYGZhy{}}\PYG{n}{p} \PYG{n}{alice}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM} \PYG{o}{\PYGZhy{}}\PYG{n}{k} \PYG{l+m+mi}{1} \PYG{o}{\PYGZhy{}}\PYG{n}{e}
- \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{alice}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:}
-\PYG{n}{ktutil}\PYG{p}{:} \PYG{n}{write\PYGZus{}kt} \PYG{n}{alice}\PYG{o}{.}\PYG{n}{keytab}
-\PYG{n}{ktutil}\PYG{p}{:}
-\end{sphinxVerbatim}
-\end{quote}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/ktutil:environment}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/ktutil:see-also}}
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}, {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}, \DUrole{xref,std,std-ref}{kerberos(7)}
-
-
-\section{k5srvutil}
-\label{\detokenize{admin/admin_commands/k5srvutil:k5srvutil-1}}\label{\detokenize{admin/admin_commands/k5srvutil::doc}}\label{\detokenize{admin/admin_commands/k5srvutil:k5srvutil}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/k5srvutil:synopsis}}
-\sphinxstylestrong{k5srvutil} \sphinxstyleemphasis{operation}
-{[}\sphinxstylestrong{-i}{]}
-{[}\sphinxstylestrong{-f} \sphinxstyleemphasis{filename}{]}
-{[}\sphinxstylestrong{-e} \sphinxstyleemphasis{keysalts}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/k5srvutil:description}}
-k5srvutil allows an administrator to list keys currently in
-a keytab, to obtain new keys for a principal currently in a keytab,
-or to delete non-current keys from a keytab.
-
-\sphinxstyleemphasis{operation} must be one of the following:
-\begin{description}
-\item[{\sphinxstylestrong{list}}] \leavevmode
-Lists the keys in a keytab, showing version number and principal
-name.
-
-\item[{\sphinxstylestrong{change}}] \leavevmode
-Uses the kadmin protocol to update the keys in the Kerberos
-database to new randomly-generated keys, and updates the keys in
-the keytab to match. If a key’s version number doesn’t match the
-version number stored in the Kerberos server’s database, then the
-operation will fail. If the \sphinxstylestrong{-i} flag is given, k5srvutil will
-prompt for confirmation before changing each key. If the \sphinxstylestrong{-k}
-option is given, the old and new keys will be displayed.
-Ordinarily, keys will be generated with the default encryption
-types and key salts. This can be overridden with the \sphinxstylestrong{-e}
-option. Old keys are retained in the keytab so that existing
-tickets continue to work, but \sphinxstylestrong{delold} should be used after
-such tickets expire, to prevent attacks against the old keys.
-
-\item[{\sphinxstylestrong{delold}}] \leavevmode
-Deletes keys that are not the most recent version from the keytab.
-This operation should be used some time after a change operation
-to remove old keys, after existing tickets issued for the service
-have expired. If the \sphinxstylestrong{-i} flag is given, then k5srvutil will
-prompt for confirmation for each principal.
-
-\item[{\sphinxstylestrong{delete}}] \leavevmode
-Deletes particular keys in the keytab, interactively prompting for
-each key.
-
-\end{description}
-
-In all cases, the default keytab is used unless this is overridden by
-the \sphinxstylestrong{-f} option.
-
-k5srvutil uses the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} program to edit the keytab in
-place.
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/k5srvutil:environment}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/k5srvutil:see-also}}
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}, {\hyperref[\detokenize{admin/admin_commands/ktutil:ktutil-1}]{\sphinxcrossref{\DUrole{std,std-ref}{ktutil}}}}, \DUrole{xref,std,std-ref}{kerberos(7)}
-
-
-\section{sserver}
-\label{\detokenize{admin/admin_commands/sserver:sserver-8}}\label{\detokenize{admin/admin_commands/sserver::doc}}\label{\detokenize{admin/admin_commands/sserver:sserver}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{admin/admin_commands/sserver:synopsis}}
-\sphinxstylestrong{sserver}
-{[} \sphinxstylestrong{-p} \sphinxstyleemphasis{port} {]}
-{[} \sphinxstylestrong{-S} \sphinxstyleemphasis{keytab} {]}
-{[} \sphinxstyleemphasis{server\_port} {]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{admin/admin_commands/sserver:description}}
-sserver and \DUrole{xref,std,std-ref}{sclient(1)} are a simple demonstration client/server
-application. When sclient connects to sserver, it performs a Kerberos
-authentication, and then sserver returns to sclient the Kerberos
-principal which was used for the Kerberos authentication. It makes a
-good test that Kerberos has been successfully installed on a machine.
-
-The service name used by sserver and sclient is sample. Hence,
-sserver will require that there be a keytab entry for the service
-\sphinxcode{sample/hostname.domain.name@REALM.NAME}. This keytab is generated
-using the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} program. The keytab file is usually
-installed as {\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{DEFKTNAME}}}}.
-
-The \sphinxstylestrong{-S} option allows for a different keytab than the default.
-
-sserver is normally invoked out of inetd(8), using a line in
-\sphinxcode{/etc/inetd.conf} that looks like this:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{sample} \PYG{n}{stream} \PYG{n}{tcp} \PYG{n}{nowait} \PYG{n}{root} \PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{sbin}\PYG{o}{/}\PYG{n}{sserver} \PYG{n}{sserver}
-\end{sphinxVerbatim}
-
-Since \sphinxcode{sample} is normally not a port defined in \sphinxcode{/etc/services},
-you will usually have to add a line to \sphinxcode{/etc/services} which looks
-like this:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{sample} \PYG{l+m+mi}{13135}\PYG{o}{/}\PYG{n}{tcp}
-\end{sphinxVerbatim}
-
-When using sclient, you will first have to have an entry in the
-Kerberos database, by using {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}, and then you have to get
-Kerberos tickets, by using \DUrole{xref,std,std-ref}{kinit(1)}. Also, if you are running
-the sclient program on a different host than the sserver it will be
-connecting to, be sure that both hosts have an entry in /etc/services
-for the sample tcp port, and that the same port number is in both
-files.
-
-When you run sclient you should see something like this:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{sendauth} \PYG{n}{succeeded}\PYG{p}{,} \PYG{n}{reply} \PYG{o+ow}{is}\PYG{p}{:}
-\PYG{n}{reply} \PYG{n+nb}{len} \PYG{l+m+mi}{32}\PYG{p}{,} \PYG{n}{contents}\PYG{p}{:}
-\PYG{n}{You} \PYG{n}{are} \PYG{n}{nlgilman}\PYG{n+nd}{@JIMI}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\end{sphinxVerbatim}
-
-
-\subsection{COMMON ERROR MESSAGES}
-\label{\detokenize{admin/admin_commands/sserver:common-error-messages}}\begin{enumerate}
-\item {}
-kinit returns the error:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{kinit}\PYG{p}{:} \PYG{n}{Client} \PYG{o+ow}{not} \PYG{n}{found} \PYG{o+ow}{in} \PYG{n}{Kerberos} \PYG{n}{database} \PYG{k}{while} \PYG{n}{getting}
- \PYG{n}{initial} \PYG{n}{credentials}
-\end{sphinxVerbatim}
-
-This means that you didn’t create an entry for your username in the
-Kerberos database.
-
-\item {}
-sclient returns the error:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{unknown} \PYG{n}{service} \PYG{n}{sample}\PYG{o}{/}\PYG{n}{tcp}\PYG{p}{;} \PYG{n}{check} \PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{services}
-\end{sphinxVerbatim}
-
-This means that you don’t have an entry in /etc/services for the
-sample tcp port.
-
-\item {}
-sclient returns the error:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{connect}\PYG{p}{:} \PYG{n}{Connection} \PYG{n}{refused}
-\end{sphinxVerbatim}
-
-This probably means you didn’t edit /etc/inetd.conf correctly, or
-you didn’t restart inetd after editing inetd.conf.
-
-\item {}
-sclient returns the error:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{sclient}\PYG{p}{:} \PYG{n}{Server} \PYG{o+ow}{not} \PYG{n}{found} \PYG{o+ow}{in} \PYG{n}{Kerberos} \PYG{n}{database} \PYG{k}{while} \PYG{n}{using}
- \PYG{n}{sendauth}
-\end{sphinxVerbatim}
-
-This means that the \sphinxcode{sample/hostname@LOCAL.REALM} service was not
-defined in the Kerberos database; it should be created using
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}, and a keytab file needs to be generated to make
-the key for that service principal available for sclient.
-
-\item {}
-sclient returns the error:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{sendauth} \PYG{n}{rejected}\PYG{p}{,} \PYG{n}{error} \PYG{n}{reply} \PYG{o+ow}{is}\PYG{p}{:}
- \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{No such file or directory}\PYG{l+s+s2}{\PYGZdq{}}
-\end{sphinxVerbatim}
-
-This probably means sserver couldn’t find the keytab file. It was
-probably not installed in the proper directory.
-
-\end{enumerate}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{admin/admin_commands/sserver:environment}}
-See \DUrole{xref,std,std-ref}{kerberos(7)} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{admin/admin_commands/sserver:see-also}}
-\DUrole{xref,std,std-ref}{sclient(1)}, \DUrole{xref,std,std-ref}{kerberos(7)}, services(5), inetd(8)
-
-
-\chapter{MIT Kerberos defaults}
-\label{\detokenize{mitK5defaults:mitk5defaults}}\label{\detokenize{mitK5defaults::doc}}\label{\detokenize{mitK5defaults:mit-kerberos-defaults}}
-
-\section{General defaults}
-\label{\detokenize{mitK5defaults:general-defaults}}
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|T|}
-\hline
-\sphinxstylethead{\sphinxstyletheadfamily
-Description
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Default
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Environment
-\unskip}\relax \\
-\hline
-\DUrole{xref,std,std-ref}{keytab\_definition} file
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{DEFKTNAME}}}}
-&
-\sphinxstylestrong{KRB5\_KTNAME}
-\\
-\hline
-Client \DUrole{xref,std,std-ref}{keytab\_definition} file
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{DEFCKTNAME}}}}
-&
-\sphinxstylestrong{KRB5\_CLIENT\_KTNAME}
-\\
-\hline
-Kerberos config file {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}
-&
-\sphinxcode{/etc/krb5.conf}\sphinxcode{:}{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{SYSCONFDIR}}}}\sphinxcode{/krb5.conf}
-&
-\sphinxstylestrong{KRB5\_CONFIG}
-\\
-\hline
-KDC config file {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}}
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/kdc.conf}
-&
-\sphinxstylestrong{KRB5\_KDC\_PROFILE}
-\\
-\hline
-GSS mechanism config file
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{SYSCONFDIR}}}}\sphinxcode{/gss/mech}
-&
-\sphinxstylestrong{GSS\_MECH\_CONFIG}
-\\
-\hline
-KDC database path (DB2)
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/principal}
-&\\
-\hline
-Master key \DUrole{xref,std,std-ref}{stash\_definition}
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/.k5.}\sphinxstyleemphasis{realm}
-&\\
-\hline
-Admin server ACL file {\hyperref[\detokenize{admin/conf_files/kadm5_acl:kadm5-acl-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kadm5.acl}}}}
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/kadm5.acl}
-&\\
-\hline
-OTP socket directory
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{RUNSTATEDIR}}}}\sphinxcode{/krb5kdc}
-&\\
-\hline
-Plugin base directory
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LIBDIR}}}}\sphinxcode{/krb5/plugins}
-&\\
-\hline
-\DUrole{xref,std,std-ref}{rcache\_definition} directory
-&
-\sphinxcode{/var/tmp}
-&
-\sphinxstylestrong{KRB5RCACHEDIR}
-\\
-\hline
-Master key default enctype
-&
-\sphinxcode{aes256-cts-hmac-sha1-96}
-&\\
-\hline
-Default {\hyperref[\detokenize{admin/conf_files/kdc_conf:keysalt-lists}]{\sphinxcrossref{\DUrole{std,std-ref}{keysalt list}}}}
-&
-\sphinxcode{aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal}
-&\\
-\hline
-Permitted enctypes
-&
-\sphinxcode{aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha384-192 aes128-cts-hmac-sha256-128 des3-cbc-sha1 arcfour-hmac-md5 camellia256-cts-cmac camellia128-cts-cmac}
-&\\
-\hline
-KDC default port
-&
-88
-&\\
-\hline
-Admin server port
-&
-749
-&\\
-\hline
-Password change port
-&
-464
-&\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\section{Replica KDC propagation defaults}
-\label{\detokenize{mitK5defaults:replica-kdc-propagation-defaults}}
-This table shows defaults used by the {\hyperref[\detokenize{admin/admin_commands/kprop:kprop-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop}}}} and
-{\hyperref[\detokenize{admin/admin_commands/kpropd:kpropd-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kpropd}}}} programs.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|T|}
-\hline
-\sphinxstylethead{\sphinxstyletheadfamily
-Description
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Default
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Environment
-\unskip}\relax \\
-\hline
-kprop database dump file
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/replica\_datatrans}
-&\\
-\hline
-kpropd temporary dump file
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/from\_master}
-&\\
-\hline
-kdb5\_util location
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{SBINDIR}}}}\sphinxcode{/kdb5\_util}
-&\\
-\hline
-kprop location
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{SBINDIR}}}}\sphinxcode{/kprop}
-&\\
-\hline
-kpropd ACL file
-&
-{\hyperref[\detokenize{mitK5defaults:paths}]{\sphinxcrossref{\DUrole{std,std-ref}{LOCALSTATEDIR}}}}\sphinxcode{/krb5kdc}\sphinxcode{/kpropd.acl}
-&\\
-\hline
-kprop port
-&
-754
-&
-KPROP\_PORT
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\section{Default paths for Unix-like systems}
-\label{\detokenize{mitK5defaults:paths}}\label{\detokenize{mitK5defaults:default-paths-for-unix-like-systems}}
-On Unix-like systems, some paths used by MIT krb5 depend on parameters
-chosen at build time. For a custom build, these paths default to
-subdirectories of \sphinxcode{/usr/local}. When MIT krb5 is integrated into an
-operating system, the paths are generally chosen to match the
-operating system’s filesystem layout.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|T|T|}
-\hline
-\sphinxstylethead{\sphinxstyletheadfamily
-Description
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Symbolic name
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Custom build path
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Typical OS path
-\unskip}\relax \\
-\hline
-User programs
-&
-BINDIR
-&
-\sphinxcode{/usr/local/bin}
-&
-\sphinxcode{/usr/bin}
-\\
-\hline
-Libraries and plugins
-&
-LIBDIR
-&
-\sphinxcode{/usr/local/lib}
-&
-\sphinxcode{/usr/lib}
-\\
-\hline
-Parent of KDC state dir
-&
-LOCALSTATEDIR
-&
-\sphinxcode{/usr/local/var}
-&
-\sphinxcode{/var}
-\\
-\hline
-Parent of KDC runtime dir
-&
-RUNSTATEDIR
-&
-\sphinxcode{/usr/local/var/run}
-&
-\sphinxcode{/run}
-\\
-\hline
-Administrative programs
-&
-SBINDIR
-&
-\sphinxcode{/usr/local/sbin}
-&
-\sphinxcode{/usr/sbin}
-\\
-\hline
-Alternate krb5.conf dir
-&
-SYSCONFDIR
-&
-\sphinxcode{/usr/local/etc}
-&
-\sphinxcode{/etc}
-\\
-\hline
-Default ccache name
-&
-DEFCCNAME
-&
-\sphinxcode{FILE:/tmp/krb5cc\_\%\{uid\}}
-&
-\sphinxcode{FILE:/tmp/krb5cc\_\%\{uid\}}
-\\
-\hline
-Default keytab name
-&
-DEFKTNAME
-&
-\sphinxcode{FILE:/etc/krb5.keytab}
-&
-\sphinxcode{FILE:/etc/krb5.keytab}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-The default client keytab name (DEFCKTNAME) typically defaults to
-\sphinxcode{FILE:/usr/local/var/krb5/user/\%\{euid\}/client.keytab} for a custom
-build. A native build will typically use a path which will vary
-according to the operating system’s layout of \sphinxcode{/var}.
-
-
-\chapter{Environment variables}
-\label{\detokenize{admin/env_variables:environment-variables}}\label{\detokenize{admin/env_variables::doc}}
-This content has moved to \DUrole{xref,std,std-ref}{kerberos(7)}.
-
-
-\chapter{Troubleshooting}
-\label{\detokenize{admin/troubleshoot:troubleshoot}}\label{\detokenize{admin/troubleshoot::doc}}\label{\detokenize{admin/troubleshoot:troubleshooting}}
-
-\section{Trace logging}
-\label{\detokenize{admin/troubleshoot:trace-logging}}\label{\detokenize{admin/troubleshoot:id1}}
-Most programs using MIT krb5 1.9 or later can be made to provide
-information about internal krb5 library operations using trace
-logging. To enable this, set the \sphinxstylestrong{KRB5\_TRACE} environment variable
-to a filename before running the program. On many operating systems,
-the filename \sphinxcode{/dev/stdout} can be used to send trace logging output
-to standard output.
-
-Some programs do not honor \sphinxstylestrong{KRB5\_TRACE}, either because they use
-secure library contexts (this generally applies to setuid programs and
-parts of the login system) or because they take direct control of the
-trace logging system using the API.
-
-Here is a short example showing trace logging output for an invocation
-of the \DUrole{xref,std,std-ref}{kvno(1)} command:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{env} \PYG{n}{KRB5\PYGZus{}TRACE}\PYG{o}{=}\PYG{o}{/}\PYG{n}{dev}\PYG{o}{/}\PYG{n}{stdout} \PYG{n}{kvno} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{KRBTEST}\PYG{o}{.}\PYG{n}{COM}
-\PYG{p}{[}\PYG{l+m+mi}{9138}\PYG{p}{]} \PYG{l+m+mf}{1332348778.823276}\PYG{p}{:} \PYG{n}{Getting} \PYG{n}{credentials} \PYG{n}{user}\PYG{n+nd}{@KRBTEST}\PYG{o}{.}\PYG{n}{COM} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}
- \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{KRBTEST}\PYG{o}{.}\PYG{n}{COM}\PYG{n+nd}{@KRBTEST}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{using} \PYG{n}{ccache}
- \PYG{n}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{me}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{/}\PYG{n}{build}\PYG{o}{/}\PYG{n}{testdir}\PYG{o}{/}\PYG{n}{ccache}
-\PYG{p}{[}\PYG{l+m+mi}{9138}\PYG{p}{]} \PYG{l+m+mf}{1332348778.823381}\PYG{p}{:} \PYG{n}{Retrieving} \PYG{n}{user}\PYG{n+nd}{@KRBTEST}\PYG{o}{.}\PYG{n}{COM} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}
- \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{KRBTEST}\PYG{o}{.}\PYG{n}{COM}\PYG{n+nd}{@KRBTEST}\PYG{o}{.}\PYG{n}{COM} \PYG{k+kn}{from}
- \PYG{n+nn}{FILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{me}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{/}\PYG{n}{build}\PYG{o}{/}\PYG{n}{testdir}\PYG{o}{/}\PYG{n}{ccache} \PYG{k}{with} \PYG{n}{result}\PYG{p}{:} \PYG{l+m+mi}{0}\PYG{o}{/}\PYG{n}{Unknown} \PYG{n}{code} \PYG{l+m+mi}{0}
-\PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{KRBTEST}\PYG{o}{.}\PYG{n}{COM}\PYG{n+nd}{@KRBTEST}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:} \PYG{n}{kvno} \PYG{o}{=} \PYG{l+m+mi}{1}
-\end{sphinxVerbatim}
-
-
-\section{List of errors}
-\label{\detokenize{admin/troubleshoot:list-of-errors}}
-
-\subsection{Frequently seen errors}
-\label{\detokenize{admin/troubleshoot:frequently-seen-errors}}\begin{enumerate}
-\item {}
-{\hyperref[\detokenize{admin/troubleshoot:init-creds-etype-nosupp}]{\sphinxcrossref{\DUrole{std,std-ref}{KDC has no support for encryption type while getting initial credentials}}}}
-
-\item {}
-{\hyperref[\detokenize{admin/troubleshoot:cert-chain-etype-nosupp}]{\sphinxcrossref{\DUrole{std,std-ref}{credential verification failed: KDC has no support for encryption type}}}}
-
-\item {}
-{\hyperref[\detokenize{admin/troubleshoot:err-cert-chain-cert-expired}]{\sphinxcrossref{\DUrole{std,std-ref}{Cannot create cert chain: certificate has expired}}}}
-
-\end{enumerate}
-
-
-\subsection{Errors seen by admins}
-\label{\detokenize{admin/troubleshoot:errors-seen-by-admins}}\phantomsection\label{\detokenize{admin/troubleshoot:prop-failed-start}}\begin{enumerate}
-\item {}
-{\hyperref[\detokenize{admin/troubleshoot:kprop-no-route}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop: No route to host while connecting to server}}}}
-
-\item {}
-{\hyperref[\detokenize{admin/troubleshoot:kprop-con-refused}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop: Connection refused while connecting to server}}}}
-
-\item {}
-{\hyperref[\detokenize{admin/troubleshoot:kprop-sendauth-exchange}]{\sphinxcrossref{\DUrole{std,std-ref}{kprop: Server rejected authentication (during sendauth exchange) while authenticating to server}}}}
-
-\end{enumerate}
-\phantomsection\label{\detokenize{admin/troubleshoot:prop-failed-end}}
-
-\bigskip\hrule\bigskip
-
-
-
-\subsubsection{KDC has no support for encryption type while getting initial credentials}
-\label{\detokenize{admin/troubleshoot:kdc-has-no-support-for-encryption-type-while-getting-initial-credentials}}\label{\detokenize{admin/troubleshoot:init-creds-etype-nosupp}}
-
-\subsubsection{credential verification failed: KDC has no support for encryption type}
-\label{\detokenize{admin/troubleshoot:credential-verification-failed-kdc-has-no-support-for-encryption-type}}\label{\detokenize{admin/troubleshoot:cert-chain-etype-nosupp}}
-This most commonly happens when trying to use a principal with only
-DES keys, in a release (MIT krb5 1.7 or later) which disables DES by
-default. DES encryption is considered weak due to its inadequate key
-size. If you cannot migrate away from its use, you can re-enable DES
-by adding \sphinxcode{allow\_weak\_crypto = true} to the {\hyperref[\detokenize{admin/conf_files/krb5_conf:libdefaults}]{\sphinxcrossref{\DUrole{std,std-ref}{{[}libdefaults{]}}}}}
-section of {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}}.
-
-
-\subsubsection{Cannot create cert chain: certificate has expired}
-\label{\detokenize{admin/troubleshoot:cannot-create-cert-chain-certificate-has-expired}}\label{\detokenize{admin/troubleshoot:err-cert-chain-cert-expired}}
-This error message indicates that PKINIT authentication failed because
-the client certificate, KDC certificate, or one of the certificates in
-the signing chain above them has expired.
-
-If the KDC certificate has expired, this message appears in the KDC
-log file, and the client will receive a “Preauthentication failed”
-error. (Prior to release 1.11, the KDC log file message erroneously
-appears as “Out of memory”. Prior to release 1.12, the client will
-receive a “Generic error”.)
-
-If the client or a signing certificate has expired, this message may
-appear in {\hyperref[\detokenize{admin/troubleshoot:trace-logging}]{\sphinxcrossref{trace\_logging}}} output from \DUrole{xref,std,std-ref}{kinit(1)} or, starting in
-release 1.12, as an error message from kinit or another program which
-gets initial tickets. The error message is more likely to appear
-properly on the client if the principal entry has no long-term keys.
-
-
-\subsubsection{kprop: No route to host while connecting to server}
-\label{\detokenize{admin/troubleshoot:kprop-no-route}}\label{\detokenize{admin/troubleshoot:kprop-no-route-to-host-while-connecting-to-server}}
-Make sure that the hostname of the replica KDC (as given to kprop) is
-correct, and that any firewalls between the primary and the replica
-allow a connection on port 754.
-
-
-\subsubsection{kprop: Connection refused while connecting to server}
-\label{\detokenize{admin/troubleshoot:kprop-connection-refused-while-connecting-to-server}}\label{\detokenize{admin/troubleshoot:kprop-con-refused}}
-If the replica KDC is intended to run kpropd out of inetd, make sure
-that inetd is configured to accept krb5\_prop connections. inetd may
-need to be restarted or sent a SIGHUP to recognize the new
-configuration. If the replica is intended to run kpropd in standalone
-mode, make sure that it is running.
-
-
-\subsubsection{kprop: Server rejected authentication (during sendauth exchange) while authenticating to server}
-\label{\detokenize{admin/troubleshoot:kprop-sendauth-exchange}}\label{\detokenize{admin/troubleshoot:kprop-server-rejected-authentication-during-sendauth-exchange-while-authenticating-to-server}}
-Make sure that:
-\begin{enumerate}
-\item {}
-The time is synchronized between the primary and replica KDCs.
-
-\item {}
-The master stash file was copied from the primary to the expected
-location on the replica.
-
-\item {}
-The replica has a keytab file in the default location containing a
-\sphinxcode{host} principal for the replica’s hostname.
-
-\end{enumerate}
-
-
-\chapter{Advanced topics}
-\label{\detokenize{admin/advanced/index:advanced-topics}}\label{\detokenize{admin/advanced/index::doc}}
-
-\section{Retiring DES}
-\label{\detokenize{admin/advanced/retiring-des:retiring-des}}\label{\detokenize{admin/advanced/retiring-des::doc}}\label{\detokenize{admin/advanced/retiring-des:id1}}
-Version 5 of the Kerberos protocol was originally implemented using
-the Data Encryption Standard (DES) as a block cipher for encryption.
-While it was considered secure at the time, advancements in computational
-ability have rendered DES vulnerable to brute force attacks on its 56-bit
-keyspace. As such, it is now considered insecure and should not be
-used (\index{RFC!RFC 6649}\sphinxhref{https://tools.ietf.org/html/rfc6649.html}{\sphinxstylestrong{RFC 6649}}).
-
-
-\subsection{History}
-\label{\detokenize{admin/advanced/retiring-des:history}}
-DES was used in the original Kerberos implementation, and was the
-only cryptosystem in krb5 1.0. Partial support for triple-DES (3DES) was
-added in version 1.1, with full support following in version 1.2.
-The Advanced Encryption Standard (AES), which supersedes DES, gained
-partial support in version 1.3.0 of krb5 and full support in version 1.3.2.
-However, deployments of krb5 using Kerberos databases created with older
-versions of krb5 will not necessarily start using strong crypto for
-ordinary operation without administrator intervention.
-
-MIT krb5 began flagging deprecated encryption types with release 1.17,
-and removed DES (single-DES) support in release 1.18. As a
-consequence, a release prior to 1.18 is required to perform these
-migrations.
-
-
-\subsection{Types of keys}
-\label{\detokenize{admin/advanced/retiring-des:types-of-keys}}\begin{itemize}
-\item {}
-The database master key: This key is not exposed to user requests,
-but is used to encrypt other key material stored in the kerberos
-database. The database master key is currently stored as \sphinxcode{K/M}
-by default.
-
-\item {}
-Password-derived keys: User principals frequently have keys
-derived from a password. When a new password is set, the KDC
-uses various string2key functions to generate keys in the database
-for that principal.
-
-\item {}
-Keytab keys: Application server principals generally use random
-keys which are not derived from a password. When the database
-entry is created, the KDC generates random keys of various enctypes
-to enter in the database, which are conveyed to the application server
-and stored in a keytab.
-
-\item {}
-Session keys: These are short-term keys generated by the KDC while
-processing client requests, with an enctype selected by the KDC.
-
-\end{itemize}
-
-For details on the various enctypes and how enctypes are selected by the KDC
-for session keys and client/server long-term keys, see {\hyperref[\detokenize{admin/enctypes:enctypes}]{\sphinxcrossref{\DUrole{std,std-ref}{Encryption types}}}}.
-When using the {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} interface to generate new long-term keys,
-the \sphinxstylestrong{-e} argument can be used to force a particular set of enctypes,
-overriding the KDC default values.
-
-\begin{sphinxadmonition}{note}{Note:}
-When the KDC is selecting a session key, it has no knowledge about the
-kerberos installation on the server which will receive the service ticket,
-only what keys are in the database for the service principal.
-In order to allow uninterrupted operation to
-clients while migrating away from DES, care must be taken to ensure that
-kerberos installations on application server machines are configured to
-support newer encryption types before keys of those new encryption types
-are created in the Kerberos database for those server principals.
-\end{sphinxadmonition}
-
-
-\subsection{Upgrade procedure}
-\label{\detokenize{admin/advanced/retiring-des:upgrade-procedure}}
-This procedure assumes that the KDC software has already been upgraded
-to a modern version of krb5 that supports non-DES keys, so that the
-only remaining task is to update the actual keys used to service requests.
-The realm used for demonstrating this procedure, ZONE.MIT.EDU,
-is an example of the worst-case scenario, where all keys in the realm
-are DES. The realm was initially created with a very old version of krb5,
-and \sphinxstylestrong{supported\_enctypes} in {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} was set to a value
-appropriate when the KDC was installed, but was not updated as the KDC
-was upgraded:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{p}{[}\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}\PYG{p}{]}
- \PYG{n}{master\PYGZus{}key\PYGZus{}type} \PYG{o}{=} \PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc}
- \PYG{n}{supported\PYGZus{}enctypes} \PYG{o}{=} \PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{des}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{des}\PYG{p}{:}\PYG{n}{v4} \PYG{n}{des}\PYG{p}{:}\PYG{n}{norealm} \PYG{n}{des}\PYG{p}{:}\PYG{n}{onlyrealm} \PYG{n}{des}\PYG{p}{:}\PYG{n}{afs3}
- \PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-This resulted in the keys for all principals in the realm being forced
-to DES-only, unless specifically requested using {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}}.
-
-Before starting the upgrade, all KDCs were running krb5 1.11,
-and the database entries for some “high-value” principals were:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} kadmin.local \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}q \PYGZsq{}getprinc krbtgt/ZONE.MIT.EDU\PYGZsq{}}
-\PYG{p}{[}\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}\PYG{p}{]}
-\PYG{n}{Number} \PYG{n}{of} \PYG{n}{keys}\PYG{p}{:} \PYG{l+m+mi}{1}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{1}\PYG{p}{,} \PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc}\PYG{p}{:}\PYG{n}{v4}
-\PYG{p}{[}\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}\PYG{p}{]}
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} kadmin.local \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}q \PYGZsq{}getprinc kadmin/admin\PYGZsq{}}
-\PYG{p}{[}\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}\PYG{p}{]}
-\PYG{n}{Number} \PYG{n}{of} \PYG{n}{keys}\PYG{p}{:} \PYG{l+m+mi}{1}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{15}\PYG{p}{,} \PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc}
-\PYG{p}{[}\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}\PYG{p}{]}
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} kadmin.local \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}q \PYGZsq{}getprinc kadmin/changepw\PYGZsq{}}
-\PYG{p}{[}\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}\PYG{p}{]}
-\PYG{n}{Number} \PYG{n}{of} \PYG{n}{keys}\PYG{p}{:} \PYG{l+m+mi}{1}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{14}\PYG{p}{,} \PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc}
-\PYG{p}{[}\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}\PYG{p}{]}
-\end{sphinxVerbatim}
-
-The \sphinxcode{krbtgt/REALM} key appears to have never been changed since creation
-(its kvno is 1), and all three database entries have only a des-cbc-crc key.
-
-
-\subsubsection{The krbtgt key and KDC keys}
-\label{\detokenize{admin/advanced/retiring-des:the-krbtgt-key-and-kdc-keys}}
-Perhaps the biggest single-step improvement in the security of the cell
-is gained by strengthening the key of the ticket-granting service principal,
-\sphinxcode{krbtgt/REALM}—if this principal’s key is compromised, so is the
-entire realm. Since the server that will handle service tickets
-for this principal is the KDC itself, it is easy to guarantee that it
-will be configured to support any encryption types which might be
-selected. However, the default KDC behavior when creating new keys is to
-remove the old keys, which would invalidate all existing tickets issued
-against that principal, rendering the TGTs cached by clients useless.
-Instead, a new key can be created with the old key retained, so that
-existing tickets will still function until their scheduled expiry
-(see {\hyperref[\detokenize{admin/database:changing-krbtgt-key}]{\sphinxcrossref{\DUrole{std,std-ref}{Changing the krbtgt key}}}}).
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} enctypes=aes256\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha1\PYGZhy{}96:normal,\PYGZbs{}}
-\PYG{o}{\PYGZgt{}} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}\PYG{p}{:}\PYG{n}{normal}\PYG{p}{,}\PYG{n}{des3}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{p}{:}\PYG{n}{normal}\PYG{p}{,}\PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc}\PYG{p}{:}\PYG{n}{normal}
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} kadmin.local \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}q \PYGZdq{}cpw \PYGZhy{}e \PYGZdl{}\PYGZob{}enctypes\PYGZcb{} \PYGZhy{}randkey \PYGZbs{}}
-\PYG{o}{\PYGZgt{}} \PYG{o}{\PYGZhy{}}\PYG{n}{keepold} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{l+s+s2}{\PYGZdq{}}
-\PYG{n}{Authenticating} \PYG{k}{as} \PYG{n}{principal} \PYG{n}{root}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Key} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{krbtgt/ZONE.MIT.EDU@ZONE.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{randomized}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-The new \sphinxcode{krbtgt@REALM} key should be propagated to replica KDCs
-immediately so that TGTs issued by the primary KDC can be used to
-issue service tickets on replica KDCs. Replica KDCs will refuse
-requests using the new TGT kvno until the new krbtgt entry has
-been propagated to them.
-\end{sphinxadmonition}
-
-It is necessary to explicitly specify the enctypes for the new database
-entry, since \sphinxstylestrong{supported\_enctypes} has not been changed. Leaving
-\sphinxstylestrong{supported\_enctypes} unchanged makes a potential rollback operation
-easier, since all new keys of new enctypes are the result of explicit
-administrator action and can be easily enumerated.
-Upgrading the krbtgt key should have minimal user-visible disruption other
-than that described in the note above, since only clients which list the
-new enctypes as supported will use them, per the procedure
-in {\hyperref[\detokenize{admin/enctypes:session-key-selection}]{\sphinxcrossref{\DUrole{std,std-ref}{Session key selection}}}}.
-Once the krbtgt key is updated, the session and ticket keys for user
-TGTs will be strong keys, but subsequent requests
-for service tickets will still get DES keys until the service principals
-have new keys generated. Application service
-remains uninterrupted due to the key-selection procedure on the KDC.
-
-After the change, the database entry is now:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} kadmin.local \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}q \PYGZsq{}getprinc krbtgt/ZONE.MIT.EDU\PYGZsq{}}
-\PYG{p}{[}\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}\PYG{p}{]}
-\PYG{n}{Number} \PYG{n}{of} \PYG{n}{keys}\PYG{p}{:} \PYG{l+m+mi}{5}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{des3}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{2}\PYG{p}{,} \PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc}
-\PYG{n}{Key}\PYG{p}{:} \PYG{n}{vno} \PYG{l+m+mi}{1}\PYG{p}{,} \PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc}\PYG{p}{:}\PYG{n}{v4}
-\PYG{p}{[}\PYG{o}{.}\PYG{o}{.}\PYG{o}{.}\PYG{p}{]}
-\end{sphinxVerbatim}
-
-Since the expected disruptions from rekeying the krbtgt principal are
-minor, after a short testing period, it is
-appropriate to rekey the other high-value principals, \sphinxcode{kadmin/admin@REALM}
-and \sphinxcode{kadmin/changepw@REALM}. These are the service principals used for
-changing user passwords and updating application keytabs. The kadmin
-and password-changing services are regular kerberized services, so the
-session-key-selection algorithm described in {\hyperref[\detokenize{admin/enctypes:session-key-selection}]{\sphinxcrossref{\DUrole{std,std-ref}{Session key selection}}}}
-applies. It is particularly important to have strong session keys for
-these services, since user passwords and new long-term keys are conveyed
-over the encrypted channel.
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} enctypes=aes256\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha1\PYGZhy{}96:normal,\PYGZbs{}}
-\PYG{o}{\PYGZgt{}} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}\PYG{p}{:}\PYG{n}{normal}\PYG{p}{,}\PYG{n}{des3}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{p}{:}\PYG{n}{normal}
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} kadmin.local \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}q \PYGZdq{}cpw \PYGZhy{}e \PYGZdl{}\PYGZob{}enctypes\PYGZcb{} \PYGZhy{}randkey \PYGZbs{}}
-\PYG{o}{\PYGZgt{}} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{admin}\PYG{l+s+s2}{\PYGZdq{}}
-\PYG{n}{Authenticating} \PYG{k}{as} \PYG{n}{principal} \PYG{n}{root}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Key} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{kadmin/admin@ZONE.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{randomized}\PYG{o}{.}
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} kadmin.local \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}q \PYGZdq{}cpw \PYGZhy{}e \PYGZdl{}\PYGZob{}enctypes\PYGZcb{} \PYGZhy{}randkey \PYGZbs{}}
-\PYG{o}{\PYGZgt{}} \PYG{n}{kadmin}\PYG{o}{/}\PYG{n}{changepw}\PYG{l+s+s2}{\PYGZdq{}}
-\PYG{n}{Authenticating} \PYG{k}{as} \PYG{n}{principal} \PYG{n}{root}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Key} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{kadmin/changepw@ZONE.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{randomized}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-It is not necessary to retain a single-DES key for these services, since
-password changes are not part of normal daily workflow, and disruption
-from a client failure is likely to be minimal. Furthermore, if a kerberos
-client experiences failure changing a user password or keytab key,
-this indicates that that client will become inoperative once services
-are rekeyed to non-DES enctypes. Such problems can be detected early
-at this stage, giving more time for corrective action.
-
-
-\subsubsection{Adding strong keys to application servers}
-\label{\detokenize{admin/advanced/retiring-des:adding-strong-keys-to-application-servers}}
-Before switching the default enctypes for new keys over to strong enctypes,
-it may be desired to test upgrading a handful of services with the
-new configuration before flipping the switch for the defaults. This
-still requires using the \sphinxstylestrong{-e} argument in {\hyperref[\detokenize{admin/admin_commands/kadmin_local:kadmin-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kadmin}}}} to get non-default
-enctypes:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} enctypes=aes256\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha1\PYGZhy{}96:normal,\PYGZbs{}}
-\PYG{o}{\PYGZgt{}} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}\PYG{p}{:}\PYG{n}{normal}\PYG{p}{,}\PYG{n}{des3}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{p}{:}\PYG{n}{normal}\PYG{p}{,}\PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc}\PYG{p}{:}\PYG{n}{normal}
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} kadmin \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}p zephyr/zephyr@ZONE.MIT.EDU \PYGZhy{}k \PYGZhy{}t \PYGZbs{}}
-\PYG{o}{\PYGZgt{}} \PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab} \PYG{o}{\PYGZhy{}}\PYG{n}{q} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{ktadd \PYGZhy{}e \PYGZdl{}}\PYG{l+s+si}{\PYGZob{}enctypes\PYGZcb{}}\PYG{l+s+s2}{ }\PYG{l+s+se}{\PYGZbs{}}
-\PYG{l+s+s2}{\PYGZgt{} \PYGZhy{}k /etc/zephyr/krb5.keytab zephyr/zephyr@ZONE.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}
-\PYG{n}{Authenticating} \PYG{k}{as} \PYG{n}{principal} \PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{zephyr}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{keytab} \PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{zephyr}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{4}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{zephyr}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{4}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{zephyr}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{4}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{des3}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{zephyr}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{4}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-Be sure to remove the old keys from the application keytab, per best
-practice.
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} k5srvutil \PYGZhy{}f /etc/zephyr/krb5.keytab delold}
-\PYG{n}{Authenticating} \PYG{k}{as} \PYG{n}{principal} \PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{zephyr}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{keytab} \PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{zephyr}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3} \PYG{n}{removed} \PYG{k+kn}{from} \PYG{n+nn}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{zephyr}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-
-\subsubsection{Adding strong keys by default}
-\label{\detokenize{admin/advanced/retiring-des:adding-strong-keys-by-default}}
-Once the high-visibility services have been rekeyed, it is probably
-appropriate to change {\hyperref[\detokenize{admin/conf_files/kdc_conf:kdc-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{kdc.conf}}}} to generate keys with the new
-encryption types by default. This enables server administrators to generate
-new enctypes with the \sphinxstylestrong{change} subcommand of {\hyperref[\detokenize{admin/admin_commands/k5srvutil:k5srvutil-1}]{\sphinxcrossref{\DUrole{std,std-ref}{k5srvutil}}}},
-and causes user password
-changes to add new encryption types for their entries. It will probably
-be necessary to implement administrative controls to cause all user
-principal keys to be updated in a reasonable period of time, whether
-by forcing password changes or a password synchronization service that
-has access to the current password and can add the new keys.
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{supported\PYGZus{}enctypes} \PYG{o}{=} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{des3}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{des3}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{des}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{crc}\PYG{p}{:}\PYG{n}{normal}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-The krb5kdc process must be restarted for these changes to take effect.
-\end{sphinxadmonition}
-
-At this point, all service administrators can update their services and the
-servers behind them to take advantage of strong cryptography.
-If necessary, the server’s krb5 installation should be configured and/or
-upgraded to a version supporting non-DES keys. See {\hyperref[\detokenize{admin/enctypes:enctypes}]{\sphinxcrossref{\DUrole{std,std-ref}{Encryption types}}}} for
-krb5 version and configuration settings.
-Only when the service is configured to accept non-DES keys should
-the key version number be incremented and new keys generated
-(\sphinxcode{k5srvutil change \&\& k5srvutil delold}).
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{root}\PYG{n+nd}{@dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{p}{:}\PYG{o}{\PYGZti{}}\PYG{c+c1}{\PYGZsh{} k5srvutil change}
-\PYG{n}{Authenticating} \PYG{k}{as} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{keytab} \PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{AES}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{256} \PYG{n}{CTS} \PYG{n}{mode} \PYG{k}{with} \PYG{l+m+mi}{96}\PYG{o}{\PYGZhy{}}\PYG{n}{bit} \PYG{n}{SHA}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{1} \PYG{n}{HMAC} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{AES}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{128} \PYG{n}{CTS} \PYG{n}{mode} \PYG{k}{with} \PYG{l+m+mi}{96}\PYG{o}{\PYGZhy{}}\PYG{n}{bit} \PYG{n}{SHA}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{1} \PYG{n}{HMAC} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{Triple} \PYG{n}{DES} \PYG{n}{cbc} \PYG{n}{mode} \PYG{k}{with} \PYG{n}{HMAC}\PYG{o}{/}\PYG{n}{sha1} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{3}\PYG{p}{,} \PYG{n}{encryption} \PYG{n+nb}{type} \PYG{n}{DES} \PYG{n}{cbc} \PYG{n}{mode} \PYG{k}{with} \PYG{n}{CRC}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{32} \PYG{n}{added} \PYG{n}{to} \PYG{n}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{root}\PYG{n+nd}{@dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{p}{:}\PYG{o}{\PYGZti{}}\PYG{c+c1}{\PYGZsh{} klist \PYGZhy{}e \PYGZhy{}k \PYGZhy{}t /etc/krb5.keytab}
-\PYG{n}{Keytab} \PYG{n}{name}\PYG{p}{:} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}
-\PYG{n}{KVNO} \PYG{n}{Timestamp} \PYG{n}{Principal}
-\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}
- \PYG{l+m+mi}{2} \PYG{l+m+mi}{10}\PYG{o}{/}\PYG{l+m+mi}{10}\PYG{o}{/}\PYG{l+m+mi}{12} \PYG{l+m+mi}{17}\PYG{p}{:}\PYG{l+m+mi}{03}\PYG{p}{:}\PYG{l+m+mi}{59} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{p}{(}\PYG{n}{DES} \PYG{n}{cbc} \PYG{n}{mode} \PYG{k}{with} \PYG{n}{CRC}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{32}\PYG{p}{)}
- \PYG{l+m+mi}{3} \PYG{l+m+mi}{12}\PYG{o}{/}\PYG{l+m+mi}{12}\PYG{o}{/}\PYG{l+m+mi}{12} \PYG{l+m+mi}{15}\PYG{p}{:}\PYG{l+m+mi}{31}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{p}{(}\PYG{n}{AES}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{256} \PYG{n}{CTS} \PYG{n}{mode} \PYG{k}{with} \PYG{l+m+mi}{96}\PYG{o}{\PYGZhy{}}\PYG{n}{bit} \PYG{n}{SHA}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{1} \PYG{n}{HMAC}\PYG{p}{)}
- \PYG{l+m+mi}{3} \PYG{l+m+mi}{12}\PYG{o}{/}\PYG{l+m+mi}{12}\PYG{o}{/}\PYG{l+m+mi}{12} \PYG{l+m+mi}{15}\PYG{p}{:}\PYG{l+m+mi}{31}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{p}{(}\PYG{n}{AES}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{128} \PYG{n}{CTS} \PYG{n}{mode} \PYG{k}{with} \PYG{l+m+mi}{96}\PYG{o}{\PYGZhy{}}\PYG{n}{bit} \PYG{n}{SHA}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{1} \PYG{n}{HMAC}\PYG{p}{)}
- \PYG{l+m+mi}{3} \PYG{l+m+mi}{12}\PYG{o}{/}\PYG{l+m+mi}{12}\PYG{o}{/}\PYG{l+m+mi}{12} \PYG{l+m+mi}{15}\PYG{p}{:}\PYG{l+m+mi}{31}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{p}{(}\PYG{n}{Triple} \PYG{n}{DES} \PYG{n}{cbc} \PYG{n}{mode} \PYG{k}{with} \PYG{n}{HMAC}\PYG{o}{/}\PYG{n}{sha1}\PYG{p}{)}
- \PYG{l+m+mi}{3} \PYG{l+m+mi}{12}\PYG{o}{/}\PYG{l+m+mi}{12}\PYG{o}{/}\PYG{l+m+mi}{12} \PYG{l+m+mi}{15}\PYG{p}{:}\PYG{l+m+mi}{31}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{p}{(}\PYG{n}{DES} \PYG{n}{cbc} \PYG{n}{mode} \PYG{k}{with} \PYG{n}{CRC}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{32}\PYG{p}{)}
-\PYG{n}{root}\PYG{n+nd}{@dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{p}{:}\PYG{o}{\PYGZti{}}\PYG{c+c1}{\PYGZsh{} k5srvutil delold}
-\PYG{n}{Authenticating} \PYG{k}{as} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{keytab} \PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\PYG{n}{Entry} \PYG{k}{for} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{dr}\PYG{o}{\PYGZhy{}}\PYG{n}{willy}\PYG{o}{.}\PYG{n}{xvm}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{kvno} \PYG{l+m+mi}{2} \PYG{n}{removed} \PYG{k+kn}{from} \PYG{n+nn}{keytab} \PYG{n}{WRFILE}\PYG{p}{:}\PYG{o}{/}\PYG{n}{etc}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{.}\PYG{n}{keytab}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-When a single service principal is shared by multiple backend servers in
-a load-balanced environment, it may be necessary to schedule downtime
-or adjust the population in the load-balanced pool in order to propagate
-the updated keytab to all hosts in the pool with minimal service interruption.
-
-
-\subsubsection{Removing DES keys from usage}
-\label{\detokenize{admin/advanced/retiring-des:removing-des-keys-from-usage}}
-This situation remains something of a testing or transitory state,
-as new DES keys are still being generated, and will be used if requested
-by a client. To make more progress removing DES from the realm, the KDC
-should be configured to not generate such keys by default.
-
-\begin{sphinxadmonition}{note}{Note:}
-An attacker posing as a client can implement a brute force attack against
-a DES key for any principal, if that key is in the current (highest-kvno)
-key list. This attack is only possible if \sphinxstylestrong{allow\_weak\_crypto = true}
-is enabled on the KDC. Setting the \sphinxstylestrong{+requires\_preauth} flag on a
-principal forces this attack to be an online attack, much slower than
-the offline attack otherwise available to the attacker. However, setting
-this flag on a service principal is not always advisable; see the entry in
-{\hyperref[\detokenize{admin/admin_commands/kadmin_local:add-principal}]{\sphinxcrossref{\DUrole{std,std-ref}{add\_principal}}}} for details.
-\end{sphinxadmonition}
-
-The following KDC configuration will not generate DES keys by default:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{realms}\PYG{p}{]}
- \PYG{n}{ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{=} \PYG{p}{\PYGZob{}}
- \PYG{n}{supported\PYGZus{}enctypes} \PYG{o}{=} \PYG{n}{aes256}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{aes128}\PYG{o}{\PYGZhy{}}\PYG{n}{cts}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{o}{\PYGZhy{}}\PYG{l+m+mi}{96}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{des3}\PYG{o}{\PYGZhy{}}\PYG{n}{cbc}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{p}{:}\PYG{n}{normal} \PYG{n}{des3}\PYG{o}{\PYGZhy{}}\PYG{n}{hmac}\PYG{o}{\PYGZhy{}}\PYG{n}{sha1}\PYG{p}{:}\PYG{n}{normal}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-As before, the KDC process must be restarted for this change to take
-effect. It is best practice to update kdc.conf on all KDCs, not just the
-primary, to avoid unpleasant surprises should the primary fail and a
-replica need to be promoted.
-\end{sphinxadmonition}
-
-It is now appropriate to remove the legacy single-DES key from the
-\sphinxcode{krbtgt/REALM} entry:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} kadmin.local \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}q \PYGZdq{}cpw \PYGZhy{}randkey \PYGZhy{}keepold \PYGZbs{}}
-\PYG{o}{\PYGZgt{}} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{l+s+s2}{\PYGZdq{}}
-\PYG{n}{Authenticating} \PYG{k}{as} \PYG{n}{principal} \PYG{n}{host}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Key} \PYG{k}{for} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{krbtgt/ZONE.MIT.EDU@ZONE.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{randomized}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-After the maximum ticket lifetime has passed, the old database entry
-should be removed.
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{[}\PYG{n}{root}\PYG{n+nd}{@casio} \PYG{n}{krb5kdc}\PYG{p}{]}\PYG{c+c1}{\PYGZsh{} kadmin.local \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}q \PYGZsq{}purgekeys krbtgt/ZONE.MIT.EDU\PYGZsq{}}
-\PYG{n}{Authenticating} \PYG{k}{as} \PYG{n}{principal} \PYG{n}{root}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@ZONE}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU} \PYG{k}{with} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Old} \PYG{n}{keys} \PYG{k}{for} \PYG{n}{principal} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{krbtgt/ZONE.MIT.EDU@ZONE.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}} \PYG{n}{purged}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-After the KDC is restarted with the new \sphinxstylestrong{supported\_enctypes},
-all user password changes and application keytab updates will not
-generate DES keys by default.
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-contents\PYGZhy{}vnder\PYGZhy{}pressvre:\PYGZti{}\PYGZgt{} kpasswd zonetest@ZONE.MIT.EDU
-Password for zonetest@ZONE.MIT.EDU: [enter old password]
-Enter new password: [enter new password]
-Enter it again: [enter new password]
-Password changed.
-contents\PYGZhy{}vnder\PYGZhy{}pressvre:\PYGZti{}\PYGZgt{} kadmin \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}q \PYGZsq{}getprinc zonetest\PYGZsq{}
-[...]
-Number of keys: 3
-Key: vno 9, aes256\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha1\PYGZhy{}96
-Key: vno 9, aes128\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha1\PYGZhy{}96
-Key: vno 9, des3\PYGZhy{}cbc\PYGZhy{}sha1
-[...]
-
-[kaduk@glossolalia \PYGZti{}]\PYGZdl{} kadmin \PYGZhy{}p kaduk@ZONE.MIT.EDU \PYGZhy{}r ZONE.MIT.EDU \PYGZhy{}k \PYGZbs{}
-\PYGZgt{} \PYGZhy{}t kaduk\PYGZhy{}zone.keytab \PYGZhy{}q \PYGZsq{}ktadd \PYGZhy{}k kaduk\PYGZhy{}zone.keytab kaduk@ZONE.MIT.EDU\PYGZsq{}
-Authenticating as principal kaduk@ZONE.MIT.EDU with keytab kaduk\PYGZhy{}zone.keytab.
-Entry for principal kaduk@ZONE.MIT.EDU with kvno 3, encryption type aes256\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha1\PYGZhy{}96 added to keytab WRFILE:kaduk\PYGZhy{}zone.keytab.
-Entry for principal kaduk@ZONE.MIT.EDU with kvno 3, encryption type aes128\PYGZhy{}cts\PYGZhy{}hmac\PYGZhy{}sha1\PYGZhy{}96 added to keytab WRFILE:kaduk\PYGZhy{}zone.keytab.
-Entry for principal kaduk@ZONE.MIT.EDU with kvno 3, encryption type des3\PYGZhy{}cbc\PYGZhy{}sha1 added to keytab WRFILE:kaduk\PYGZhy{}zone.keytab.
-\end{sphinxVerbatim}
-
-Once all principals have been re-keyed, DES support can be disabled on the
-KDC (\sphinxstylestrong{allow\_weak\_crypto = false}), and client machines can remove
-\sphinxstylestrong{allow\_weak\_crypto = true} from their {\hyperref[\detokenize{admin/conf_files/krb5_conf:krb5-conf-5}]{\sphinxcrossref{\DUrole{std,std-ref}{krb5.conf}}}} configuration
-files, completing the migration. \sphinxstylestrong{allow\_weak\_crypto} takes precedence over
-all places where DES enctypes could be explicitly configured. DES keys will
-not be used, even if they are present, when \sphinxstylestrong{allow\_weak\_crypto = false}.
-
-
-\subsubsection{Support for legacy services}
-\label{\detokenize{admin/advanced/retiring-des:support-for-legacy-services}}
-If there remain legacy services which do not support non-DES enctypes
-(such as older versions of AFS), \sphinxstylestrong{allow\_weak\_crypto} must remain
-enabled on the KDC. Client machines need not have this setting,
-though—applications which require DES can use API calls to allow
-weak crypto on a per-request basis, overriding the system krb5.conf.
-However, having \sphinxstylestrong{allow\_weak\_crypto} set on the KDC means that any
-principals which have a DES key in the database could still use those
-keys. To minimize the use of DES in the realm and restrict it to just
-legacy services which require DES, it is necessary to remove all other
-DES keys. The realm has been configured such that at password and
-keytab change, no DES keys will be generated by default. The task
-then reduces to requiring user password changes and having server
-administrators update their service keytabs. Administrative outreach
-will be necessary, and if the desire to eliminate DES is sufficiently
-strong, the KDC administrators may choose to randkey any principals
-which have not been rekeyed after some timeout period, forcing the
-user to contact the helpdesk for access.
-
-
-\subsection{The Database Master Key}
-\label{\detokenize{admin/advanced/retiring-des:the-database-master-key}}
-This procedure does not alter \sphinxcode{K/M@REALM}, the key used to encrypt key
-material in the Kerberos database. (This is the key stored in the stash file
-on the KDC if stash files are used.) However, the security risk of
-a single-DES key for \sphinxcode{K/M} is minimal, given that access to material
-encrypted in \sphinxcode{K/M} (the Kerberos database) is generally tightly controlled.
-If an attacker can gain access to the encrypted database, they likely
-have access to the stash file as well, rendering the weak cryptography
-broken by non-cryptographic means. As such, upgrading \sphinxcode{K/M} to a stronger
-encryption type is unlikely to be a high-priority task.
-
-Is is possible to upgrade the master key used for the database, if
-desired. Using {\hyperref[\detokenize{admin/admin_commands/kdb5_util:kdb5-util-8}]{\sphinxcrossref{\DUrole{std,std-ref}{kdb5\_util}}}}’s \sphinxstylestrong{add\_mkey}, \sphinxstylestrong{use\_mkey}, and
-\sphinxstylestrong{update\_princ\_encryption} commands, a new master key can be added
-and activated for use on new key material, and the existing entries
-converted to the new master key.
-
-
-\chapter{Various links}
-\label{\detokenize{admin/various_envs:various-links}}\label{\detokenize{admin/various_envs::doc}}
-
-\section{Whitepapers}
-\label{\detokenize{admin/various_envs:whitepapers}}\begin{enumerate}
-\item {}
-\sphinxurl{https://kerberos.org/software/whitepapers.html}
-
-\end{enumerate}
-
-
-\section{Tutorials}
-\label{\detokenize{admin/various_envs:tutorials}}\begin{enumerate}
-\item {}
-Fulvio Ricciardi \textless{}\sphinxurl{https://www.kerberos.org/software/tutorial.html}\textgreater{}\_
-
-\end{enumerate}
-
-
-\section{Troubleshooting}
-\label{\detokenize{admin/various_envs:troubleshooting}}\begin{enumerate}
-\item {}
-\sphinxurl{https://wiki.ncsa.illinois.edu/display/ITS/Windows+Kerberos+Troubleshooting}
-
-\item {}
-\sphinxurl{https://www.shrubbery.net/solaris9ab/SUNWaadm/SYSADV6/p27.html}
-
-\item {}
-\sphinxurl{https://docs.oracle.com/cd/E19253-01/816-4557/trouble-1/index.html}
-
-\item {}
-\sphinxurl{https://docs.microsoft.com/en-us/previous-versions/tn-archive/bb463167(v=technet.10})\#EBAA
-
-\item {}
-\sphinxurl{https://bugs.launchpad.net/ubuntu/+source/libpam-heimdal/+bug/86528}
-
-\end{enumerate}
-
-
-
-\renewcommand{\indexname}{Index}
-\printindex
-\end{document}
\ No newline at end of file
+++ /dev/null
-%% Generated by Sphinx.
-\def\sphinxdocclass{report}
-\documentclass[letterpaper,10pt,english]{sphinxmanual}
-\ifdefined\pdfpxdimen
- \let\sphinxpxdimen\pdfpxdimen\else\newdimen\sphinxpxdimen
-\fi \sphinxpxdimen=.75bp\relax
-
-\usepackage[utf8]{inputenc}
-\ifdefined\DeclareUnicodeCharacter
- \ifdefined\DeclareUnicodeCharacterAsOptional
- \DeclareUnicodeCharacter{"00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{"2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{"2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{"2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{"251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{"2572}{\textbackslash}
- \else
- \DeclareUnicodeCharacter{00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{2572}{\textbackslash}
- \fi
-\fi
-\usepackage{cmap}
-\usepackage[T1]{fontenc}
-\usepackage{amsmath,amssymb,amstext}
-\usepackage{babel}
-\usepackage{times}
-\usepackage[Bjarne]{fncychap}
-\usepackage[dontkeepoldnames]{sphinx}
-
-\usepackage{geometry}
-
-% Include hyperref last.
-\usepackage{hyperref}
-% Fix anchor placement for figures with captions.
-\usepackage{hypcap}% it must be loaded after hyperref.
-% Set up styles of URL: it should be placed after hyperref.
-\urlstyle{same}
-
-\addto\captionsenglish{\renewcommand{\figurename}{Fig.}}
-\addto\captionsenglish{\renewcommand{\tablename}{Table}}
-\addto\captionsenglish{\renewcommand{\literalblockname}{Listing}}
-
-\addto\captionsenglish{\renewcommand{\literalblockcontinuedname}{continued from previous page}}
-\addto\captionsenglish{\renewcommand{\literalblockcontinuesname}{continues on next page}}
-
-\addto\extrasenglish{\def\pageautorefname{page}}
-
-\setcounter{tocdepth}{0}
-
-
-
-\title{Kerberos Application Developer Guide}
-\date{ }
-\release{1.20.1}
-\author{MIT}
-\newcommand{\sphinxlogo}{\vbox{}}
-\renewcommand{\releasename}{Release}
-\makeindex
-
-\begin{document}
-
-\maketitle
-\sphinxtableofcontents
-\phantomsection\label{\detokenize{appdev/index::doc}}
-
-
-
-\chapter{Developing with GSSAPI}
-\label{\detokenize{appdev/gssapi:for-application-developers}}\label{\detokenize{appdev/gssapi::doc}}\label{\detokenize{appdev/gssapi:developing-with-gssapi}}
-The GSSAPI (Generic Security Services API) allows applications to
-communicate securely using Kerberos 5 or other security mechanisms.
-We recommend using the GSSAPI (or a higher-level framework which
-encompasses GSSAPI, such as SASL) for secure network communication
-over using the libkrb5 API directly.
-
-GSSAPIv2 is specified in \index{RFC!RFC 2743}\sphinxhref{https://tools.ietf.org/html/rfc2743.html}{\sphinxstylestrong{RFC 2743}} and \index{RFC!RFC 2744}\sphinxhref{https://tools.ietf.org/html/rfc2744.html}{\sphinxstylestrong{RFC 2744}}. Also see
-\index{RFC!RFC 7546}\sphinxhref{https://tools.ietf.org/html/rfc7546.html}{\sphinxstylestrong{RFC 7546}} for a description of how to use the GSSAPI in a client or
-server program.
-
-This documentation will describe how various ways of using the
-GSSAPI will behave with the krb5 mechanism as implemented in MIT krb5,
-as well as krb5-specific extensions to the GSSAPI.
-
-
-\section{Name types}
-\label{\detokenize{appdev/gssapi:name-types}}
-A GSSAPI application can name a local or remote entity by calling
-\sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.16}{gss\_import\_name}, specifying a name type and a value. The following
-name types are supported by the krb5 mechanism:
-\begin{itemize}
-\item {}
-\sphinxstylestrong{GSS\_C\_NT\_HOSTBASED\_SERVICE}: The value should be a string of the
-form \sphinxcode{service} or \sphinxcode{service@hostname}. This is the most common
-way to name target services when initiating a security context, and
-is the most likely name type to work across multiple mechanisms.
-
-\item {}
-\sphinxstylestrong{GSS\_KRB5\_NT\_PRINCIPAL\_NAME}: The value should be a principal name
-string. This name type only works with the krb5 mechanism, and is
-defined in the \sphinxcode{\textless{}gssapi/gssapi\_krb5.h\textgreater{}} header.
-
-\item {}
-\sphinxstylestrong{GSS\_C\_NT\_USER\_NAME} or \sphinxstylestrong{GSS\_C\_NULL\_OID}: The value is treated
-as an unparsed principal name string, as above. These name types
-may work with mechanisms other than krb5, but will have different
-interpretations in those mechanisms. \sphinxstylestrong{GSS\_C\_NT\_USER\_NAME} is
-intended to be used with a local username, which will parse into a
-single-component principal in the default realm.
-
-\item {}
-\sphinxstylestrong{GSS\_C\_NT\_ANONYMOUS}: The value is ignored. The anonymous
-principal is used, allowing a client to authenticate to a server
-without asserting a particular identity (which may or may not be
-allowed by a particular server or Kerberos realm).
-
-\item {}
-\sphinxstylestrong{GSS\_C\_NT\_MACHINE\_UID\_NAME}: The value is uid\_t object. On
-Unix-like systems, the username of the uid is looked up in the
-system user database and the resulting username is parsed as a
-principal name.
-
-\item {}
-\sphinxstylestrong{GSS\_C\_NT\_STRING\_UID\_NAME}: As above, but the value is a decimal
-string representation of the uid.
-
-\item {}
-\sphinxstylestrong{GSS\_C\_NT\_EXPORT\_NAME}: The value must be the result of a
-\sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.13}{gss\_export\_name} call.
-
-\item {}
-\sphinxstylestrong{GSS\_KRB5\_NT\_ENTERPRISE\_NAME}: The value should be a krb5
-enterprise name string (see \index{RFC!RFC 6806}\sphinxhref{https://tools.ietf.org/html/rfc6806.html}{\sphinxstylestrong{RFC 6806}} section 5), in the form
-\sphinxcode{user@suffix}. This name type is used to convey alias names, and
-is defined in the \sphinxcode{\textless{}gssapi/gssapi\_krb5.h\textgreater{}} header. (New in
-release 1.17.)
-
-\item {}
-\sphinxstylestrong{GSS\_KRB5\_NT\_X509\_CERT}: The value should be an X.509 certificate
-encoded according to \index{RFC!RFC 5280}\sphinxhref{https://tools.ietf.org/html/rfc5280.html}{\sphinxstylestrong{RFC 5280}}. This name form can be used for
-the desired\_name parameter of gss\_acquire\_cred\_impersonate\_name(),
-to identify the S4U2Self user by certificate. (New in release
-1.19.)
-
-\end{itemize}
-
-
-\section{Initiator credentials}
-\label{\detokenize{appdev/gssapi:initiator-credentials}}
-A GSSAPI client application uses \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.19}{gss\_init\_sec\_context} to establish a
-security context. The \sphinxstyleemphasis{initiator\_cred\_handle} parameter determines
-what tickets are used to establish the connection. An application can
-either pass \sphinxstylestrong{GSS\_C\_NO\_CREDENTIAL} to use the default client
-credential, or it can use \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.2}{gss\_acquire\_cred} beforehand to acquire an
-initiator credential. The call to \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.2}{gss\_acquire\_cred} may include a
-\sphinxstyleemphasis{desired\_name} parameter, or it may pass \sphinxstylestrong{GSS\_C\_NO\_NAME} if it does
-not have a specific name preference.
-
-If the desired name for a krb5 initiator credential is a host-based
-name, it is converted to a principal name of the form
-\sphinxcode{service/hostname} in the local realm, where \sphinxstyleemphasis{hostname} is the local
-hostname if not specified. The hostname will be canonicalized using
-forward name resolution, and possibly also using reverse name
-resolution depending on the value of the \sphinxstylestrong{rdns} variable in
-\DUrole{xref,std,std-ref}{libdefaults}.
-
-If a desired name is specified in the call to \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.2}{gss\_acquire\_cred}, the
-krb5 mechanism will attempt to find existing tickets for that client
-principal name in the default credential cache or collection. If the
-default cache type does not support a collection, and the default
-cache contains credentials for a different principal than the desired
-name, a \sphinxstylestrong{GSS\_S\_CRED\_UNAVAIL} error will be returned with a minor
-code indicating a mismatch.
-
-If no existing tickets are available for the desired name, but the
-name has an entry in the default client \DUrole{xref,std,std-ref}{keytab\_definition}, the
-krb5 mechanism will acquire initial tickets for the name using the
-default client keytab.
-
-If no desired name is specified, credential acquisition will be
-deferred until the credential is used in a call to
-\sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.19}{gss\_init\_sec\_context} or \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.21}{gss\_inquire\_cred}. If the call is to
-\sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.19}{gss\_init\_sec\_context}, the target name will be used to choose a client
-principal name using the credential cache selection facility. (This
-facility might, for instance, try to choose existing tickets for a
-client principal in the same realm as the target service). If there
-are no existing tickets for the chosen principal, but it is present in
-the default client keytab, the krb5 mechanism will acquire initial
-tickets using the keytab.
-
-If the target name cannot be used to select a client principal
-(because the credentials are used in a call to \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.21}{gss\_inquire\_cred}), or
-if the credential cache selection facility cannot choose a principal
-for it, the default credential cache will be selected if it exists and
-contains tickets.
-
-If the default credential cache does not exist, but the default client
-keytab does, the krb5 mechanism will try to acquire initial tickets
-for the first principal in the default client keytab.
-
-If the krb5 mechanism acquires initial tickets using the default
-client keytab, the resulting tickets will be stored in the default
-cache or collection, and will be refreshed by future calls to
-\sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.2}{gss\_acquire\_cred} as they approach their expire time.
-
-
-\section{Acceptor names}
-\label{\detokenize{appdev/gssapi:acceptor-names}}
-A GSSAPI server application uses \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.1}{gss\_accept\_sec\_context} to establish
-a security context based on tokens provided by the client. The
-\sphinxstyleemphasis{acceptor\_cred\_handle} parameter determines what
-\DUrole{xref,std,std-ref}{keytab\_definition} entries may be authenticated to by the
-client, if the krb5 mechanism is used.
-
-The simplest choice is to pass \sphinxstylestrong{GSS\_C\_NO\_CREDENTIAL} as the acceptor
-credential. In this case, clients may authenticate to any service
-principal in the default keytab (typically \DUrole{xref,std,std-ref}{DEFKTNAME}, or the value of
-the \sphinxstylestrong{KRB5\_KTNAME} environment variable). This is the recommended
-approach if the server application has no specific requirements to the
-contrary.
-
-A server may acquire an acceptor credential with \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.2}{gss\_acquire\_cred} and
-a \sphinxstyleemphasis{cred\_usage} of \sphinxstylestrong{GSS\_C\_ACCEPT} or \sphinxstylestrong{GSS\_C\_BOTH}. If the
-\sphinxstyleemphasis{desired\_name} parameter is \sphinxstylestrong{GSS\_C\_NO\_NAME}, then clients will be
-allowed to authenticate to any service principal in the default
-keytab, just as if no acceptor credential was supplied.
-
-If a server wishes to specify a \sphinxstyleemphasis{desired\_name} to \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.2}{gss\_acquire\_cred},
-the most common choice is a host-based name. If the host-based
-\sphinxstyleemphasis{desired\_name} contains just a \sphinxstyleemphasis{service}, then clients will be allowed
-to authenticate to any host-based service principal (that is, a
-principal of the form \sphinxcode{service/hostname@REALM}) for the named
-service, regardless of hostname or realm, as long as it is present in
-the default keytab. If the input name contains both a \sphinxstyleemphasis{service} and a
-\sphinxstyleemphasis{hostname}, clients will be allowed to authenticate to any host-based
-principal for the named service and hostname, regardless of realm.
-
-\begin{sphinxadmonition}{note}{Note:}
-If a \sphinxstyleemphasis{hostname} is specified, it will be canonicalized
-using forward name resolution, and possibly also using
-reverse name resolution depending on the value of the
-\sphinxstylestrong{rdns} variable in \DUrole{xref,std,std-ref}{libdefaults}.
-\end{sphinxadmonition}
-
-\begin{sphinxadmonition}{note}{Note:}
-If the \sphinxstylestrong{ignore\_acceptor\_hostname} variable in
-\DUrole{xref,std,std-ref}{libdefaults} is enabled, then \sphinxstyleemphasis{hostname} will be
-ignored even if one is specified in the input name.
-\end{sphinxadmonition}
-
-\begin{sphinxadmonition}{note}{Note:}
-In MIT krb5 versions prior to 1.10, and in Heimdal’s
-implementation of the krb5 mechanism, an input name with
-just a \sphinxstyleemphasis{service} is treated like an input name of
-\sphinxcode{service@localhostname}, where \sphinxstyleemphasis{localhostname} is the
-string returned by gethostname().
-\end{sphinxadmonition}
-
-If the \sphinxstyleemphasis{desired\_name} is a krb5 principal name or a local system name
-type which is mapped to a krb5 principal name, clients will only be
-allowed to authenticate to that principal in the default keytab.
-
-
-\section{Name Attributes}
-\label{\detokenize{appdev/gssapi:name-attributes}}
-In release 1.8 or later, the \sphinxhref{https://tools.ietf.org/html/rfc6680.txt\#section-7.4}{gss\_inquire\_name} and
-\sphinxhref{https://tools.ietf.org/html/6680.html\#section-7.5}{gss\_get\_name\_attribute} functions, specified in \index{RFC!RFC 6680}\sphinxhref{https://tools.ietf.org/html/rfc6680.html}{\sphinxstylestrong{RFC 6680}}, can be
-used to retrieve name attributes from the \sphinxstyleemphasis{src\_name} returned by
-\sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.1}{gss\_accept\_sec\_context}. The following attributes are defined when
-the krb5 mechanism is used:
-
-\phantomsection\label{\detokenize{appdev/gssapi:gssapi-authind-attr}}\begin{itemize}
-\item {}
-“auth-indicators” attribute:
-
-\end{itemize}
-
-This attribute will be included in the \sphinxhref{https://tools.ietf.org/html/rfc6680.txt\#section-7.4}{gss\_inquire\_name} output if the
-ticket contains \DUrole{xref,std,std-ref}{authentication indicators}.
-One indicator is returned per invocation of \sphinxhref{https://tools.ietf.org/html/6680.html\#section-7.5}{gss\_get\_name\_attribute},
-so multiple invocations may be necessary to retrieve all of the
-indicators from the ticket. (New in release 1.15.)
-
-
-\section{Credential store extensions}
-\label{\detokenize{appdev/gssapi:credential-store-extensions}}
-Beginning with release 1.11, the following GSSAPI extensions declared
-in \sphinxcode{\textless{}gssapi/gssapi\_ext.h\textgreater{}} can be used to specify how credentials
-are acquired or stored:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{struct} \PYG{n}{gss\PYGZus{}key\PYGZus{}value\PYGZus{}element\PYGZus{}struct} \PYG{p}{\PYGZob{}}
- \PYG{n}{const} \PYG{n}{char} \PYG{o}{*}\PYG{n}{key}\PYG{p}{;}
- \PYG{n}{const} \PYG{n}{char} \PYG{o}{*}\PYG{n}{value}\PYG{p}{;}
-\PYG{p}{\PYGZcb{}}\PYG{p}{;}
-\PYG{n}{typedef} \PYG{n}{struct} \PYG{n}{gss\PYGZus{}key\PYGZus{}value\PYGZus{}element\PYGZus{}struct} \PYG{n}{gss\PYGZus{}key\PYGZus{}value\PYGZus{}element\PYGZus{}desc}\PYG{p}{;}
-
-\PYG{n}{struct} \PYG{n}{gss\PYGZus{}key\PYGZus{}value\PYGZus{}set\PYGZus{}struct} \PYG{p}{\PYGZob{}}
- \PYG{n}{OM\PYGZus{}uint32} \PYG{n}{count}\PYG{p}{;}
- \PYG{n}{gss\PYGZus{}key\PYGZus{}value\PYGZus{}element\PYGZus{}desc} \PYG{o}{*}\PYG{n}{elements}\PYG{p}{;}
-\PYG{p}{\PYGZcb{}}\PYG{p}{;}
-\PYG{n}{typedef} \PYG{n}{const} \PYG{n}{struct} \PYG{n}{gss\PYGZus{}key\PYGZus{}value\PYGZus{}set\PYGZus{}struct} \PYG{n}{gss\PYGZus{}key\PYGZus{}value\PYGZus{}set\PYGZus{}desc}\PYG{p}{;}
-\PYG{n}{typedef} \PYG{n}{const} \PYG{n}{gss\PYGZus{}key\PYGZus{}value\PYGZus{}set\PYGZus{}desc} \PYG{o}{*}\PYG{n}{gss\PYGZus{}const\PYGZus{}key\PYGZus{}value\PYGZus{}set\PYGZus{}t}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}acquire\PYGZus{}cred\PYGZus{}from}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{const} \PYG{n}{gss\PYGZus{}name\PYGZus{}t} \PYG{n}{desired\PYGZus{}name}\PYG{p}{,}
- \PYG{n}{OM\PYGZus{}uint32} \PYG{n}{time\PYGZus{}req}\PYG{p}{,}
- \PYG{n}{const} \PYG{n}{gss\PYGZus{}OID\PYGZus{}set} \PYG{n}{desired\PYGZus{}mechs}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}usage\PYGZus{}t} \PYG{n}{cred\PYGZus{}usage}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}const\PYGZus{}key\PYGZus{}value\PYGZus{}set\PYGZus{}t} \PYG{n}{cred\PYGZus{}store}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}id\PYGZus{}t} \PYG{o}{*}\PYG{n}{output\PYGZus{}cred\PYGZus{}handle}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}OID\PYGZus{}set} \PYG{o}{*}\PYG{n}{actual\PYGZus{}mechs}\PYG{p}{,}
- \PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{time\PYGZus{}rec}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}store\PYGZus{}cred\PYGZus{}into}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}id\PYGZus{}t} \PYG{n}{input\PYGZus{}cred\PYGZus{}handle}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}usage\PYGZus{}t} \PYG{n}{cred\PYGZus{}usage}\PYG{p}{,}
- \PYG{n}{const} \PYG{n}{gss\PYGZus{}OID} \PYG{n}{desired\PYGZus{}mech}\PYG{p}{,}
- \PYG{n}{OM\PYGZus{}uint32} \PYG{n}{overwrite\PYGZus{}cred}\PYG{p}{,}
- \PYG{n}{OM\PYGZus{}uint32} \PYG{n}{default\PYGZus{}cred}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}const\PYGZus{}key\PYGZus{}value\PYGZus{}set\PYGZus{}t} \PYG{n}{cred\PYGZus{}store}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}OID\PYGZus{}set} \PYG{o}{*}\PYG{n}{elements\PYGZus{}stored}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}usage\PYGZus{}t} \PYG{o}{*}\PYG{n}{cred\PYGZus{}usage\PYGZus{}stored}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-The additional \sphinxstyleemphasis{cred\_store} parameter allows the caller to specify
-information about how the credentials should be obtained and stored.
-The following options are supported by the krb5 mechanism:
-\begin{itemize}
-\item {}
-\sphinxstylestrong{ccache}: For acquiring initiator credentials, the name of the
-\DUrole{xref,std,std-ref}{credential cache} to which the handle will
-refer. For storing credentials, the name of the cache or collection
-where the credentials will be stored (see below).
-
-\item {}
-\sphinxstylestrong{client\_keytab}: For acquiring initiator credentials, the name of
-the \DUrole{xref,std,std-ref}{keytab} which will be used, if
-necessary, to refresh the credentials in the cache.
-
-\item {}
-\sphinxstylestrong{keytab}: For acquiring acceptor credentials, the name of the
-\DUrole{xref,std,std-ref}{keytab} to which the handle will refer.
-In release 1.19 and later, this option also determines the keytab to
-be used for verification when initiator credentials are acquired
-using a password and verified.
-
-\item {}
-\sphinxstylestrong{password}: For acquiring initiator credentials, this option
-instructs the mechanism to acquire fresh credentials into a unique
-memory credential cache. This option may not be used with the
-\sphinxstylestrong{ccache} or \sphinxstylestrong{client\_keytab} options, and a \sphinxstyleemphasis{desired\_name} must
-be specified. (New in release 1.19.)
-
-\item {}
-\sphinxstylestrong{rcache}: For acquiring acceptor credentials, the name of the
-\DUrole{xref,std,std-ref}{replay cache} to be used when processing
-the initiator tokens. (New in release 1.13.)
-
-\item {}
-\sphinxstylestrong{verify}: For acquiring initiator credentials, this option
-instructs the mechanism to verify the credentials by obtaining a
-ticket to a service with a known key. The service key is obtained
-from the keytab specified with the \sphinxstylestrong{keytab} option or the default
-keytab. The value may be the name of a principal in the keytab, or
-the empty string. If the empty string is given, any \sphinxcode{host}
-service principal in the keytab may be used. (New in release 1.19.)
-
-\end{itemize}
-
-In release 1.20 or later, if a collection name is specified for
-\sphinxstylestrong{cache} in a call to gss\_store\_cred\_into(), an existing cache for
-the client principal within the collection will be selected, or a new
-cache will be created within the collection. If \sphinxstyleemphasis{overwrite\_cred} is
-false and the selected credential cache already exists, a
-\sphinxstylestrong{GSS\_S\_DUPLICATE\_ELEMENT} error will be returned. If \sphinxstyleemphasis{default\_cred}
-is true, the primary cache of the collection will be switched to the
-selected cache.
-
-
-\section{Importing and exporting credentials}
-\label{\detokenize{appdev/gssapi:importing-and-exporting-credentials}}
-The following GSSAPI extensions can be used to import and export
-credentials (declared in \sphinxcode{\textless{}gssapi/gssapi\_ext.h\textgreater{}}):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}export\PYGZus{}cred}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}id\PYGZus{}t} \PYG{n}{cred\PYGZus{}handle}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{token}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}import\PYGZus{}cred}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{token}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}id\PYGZus{}t} \PYG{o}{*}\PYG{n}{cred\PYGZus{}handle}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-The first function serializes a GSSAPI credential handle into a
-buffer; the second unseralizes a buffer into a GSSAPI credential
-handle. Serializing a credential does not destroy it. If any of the
-mechanisms used in \sphinxstyleemphasis{cred\_handle} do not support serialization,
-gss\_export\_cred will return \sphinxstylestrong{GSS\_S\_UNAVAILABLE}. As with other
-GSSAPI serialization functions, these extensions are only intended to
-work with a matching implementation on the other side; they do not
-serialize credentials in a standardized format.
-
-A serialized credential may contain secret information such as ticket
-session keys. The serialization format does not protect this
-information from eavesdropping or tampering. The calling application
-must take care to protect the serialized credential when communicating
-it over an insecure channel or to an untrusted party.
-
-A krb5 GSSAPI credential may contain references to a credential cache,
-a client keytab, an acceptor keytab, and a replay cache. These
-resources are normally serialized as references to their external
-locations (such as the filename of the credential cache). Because of
-this, a serialized krb5 credential can only be imported by a process
-with similar privileges to the exporter. A serialized credential
-should not be trusted if it originates from a source with lower
-privileges than the importer, as it may contain references to external
-credential cache, keytab, or replay cache resources not accessible to
-the originator.
-
-An exception to the above rule applies when a krb5 GSSAPI credential
-refers to a memory credential cache, as is normally the case for
-delegated credentials received by \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.1}{gss\_accept\_sec\_context}. In this
-case, the contents of the credential cache are serialized, so that the
-resulting token may be imported even if the original memory credential
-cache no longer exists.
-
-
-\section{Constrained delegation (S4U)}
-\label{\detokenize{appdev/gssapi:constrained-delegation-s4u}}
-The Microsoft S4U2Self and S4U2Proxy Kerberos protocol extensions
-allow an intermediate service to acquire credentials from a client to
-a target service without requiring the client to delegate a
-ticket-granting ticket, if the KDC is configured to allow it.
-
-To perform a constrained delegation operation, the intermediate
-service must submit to the KDC an “evidence ticket” from the client to
-the intermediate service. An evidence ticket can be acquired when the
-client authenticates to the intermediate service with Kerberos, or
-with an S4U2Self request if the KDC allows it. The MIT krb5 GSSAPI
-library represents an evidence ticket using a “proxy credential”,
-which is a special kind of gss\_cred\_id\_t object whose underlying
-credential cache contains the evidence ticket and a krbtgt ticket for
-the intermediate service.
-
-To acquire a proxy credential during client authentication, the
-service should first create an acceptor credential using the
-\sphinxstylestrong{GSS\_C\_BOTH} usage. The application should then pass this
-credential as the \sphinxstyleemphasis{acceptor\_cred\_handle} to \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.1}{gss\_accept\_sec\_context},
-and also pass a \sphinxstyleemphasis{delegated\_cred\_handle} output parameter to receive a
-proxy credential containing the evidence ticket. The output value of
-\sphinxstyleemphasis{delegated\_cred\_handle} may be a delegated ticket-granting ticket if
-the client sent one, or a proxy credential if not. If the library can
-determine that the client’s ticket is not a valid evidence ticket, it
-will place \sphinxstylestrong{GSS\_C\_NO\_CREDENTIAL} in \sphinxstyleemphasis{delegated\_cred\_handle}.
-
-To acquire a proxy credential using an S4U2Self request, the service
-can use the following GSSAPI extension:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}acquire\PYGZus{}cred\PYGZus{}impersonate\PYGZus{}name}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}id\PYGZus{}t} \PYG{n}{icred}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}name\PYGZus{}t} \PYG{n}{desired\PYGZus{}name}\PYG{p}{,}
- \PYG{n}{OM\PYGZus{}uint32} \PYG{n}{time\PYGZus{}req}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}OID\PYGZus{}set} \PYG{n}{desired\PYGZus{}mechs}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}usage\PYGZus{}t} \PYG{n}{cred\PYGZus{}usage}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}id\PYGZus{}t} \PYG{o}{*}\PYG{n}{output\PYGZus{}cred}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}OID\PYGZus{}set} \PYG{o}{*}\PYG{n}{actual\PYGZus{}mechs}\PYG{p}{,}
- \PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{time\PYGZus{}rec}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-The parameters to this function are similar to those of
-\sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.2}{gss\_acquire\_cred}, except that \sphinxstyleemphasis{icred} is used to make an S4U2Self
-request to the KDC for a ticket from \sphinxstyleemphasis{desired\_name} to the
-intermediate service. Both \sphinxstyleemphasis{icred} and \sphinxstyleemphasis{desired\_name} are required
-for this function; passing \sphinxstylestrong{GSS\_C\_NO\_CREDENTIAL} or
-\sphinxstylestrong{GSS\_C\_NO\_NAME} will cause the call to fail. \sphinxstyleemphasis{icred} must contain a
-krbtgt ticket for the intermediate service. The result of this
-operation is a proxy credential. (Prior to release 1.18, the result
-of this operation may be a regular credential for \sphinxstyleemphasis{desired\_name}, if
-the KDC issues a non-forwardable ticket.)
-
-Once the intermediate service has a proxy credential, it can simply
-pass it to \sphinxhref{https://tools.ietf.org/html/rfc2744.html\#section-5.19}{gss\_init\_sec\_context} as the \sphinxstyleemphasis{initiator\_cred\_handle}
-parameter, and the desired service as the \sphinxstyleemphasis{target\_name} parameter.
-The GSSAPI library will present the krbtgt ticket and evidence ticket
-in the proxy credential to the KDC in an S4U2Proxy request; if the
-intermediate service has the appropriate permissions, the KDC will
-issue a ticket from the client to the target service. The GSSAPI
-library will then use this ticket to authenticate to the target
-service.
-
-If an application needs to find out whether a credential it holds is a
-proxy credential and the name of the intermediate service, it can
-query the credential with the \sphinxstylestrong{GSS\_KRB5\_GET\_CRED\_IMPERSONATOR} OID
-(new in release 1.16, declared in \sphinxcode{\textless{}gssapi/gssapi\_krb5.h\textgreater{}}) using
-the gss\_inquire\_cred\_by\_oid extension (declared in
-\sphinxcode{\textless{}gssapi/gssapi\_ext.h\textgreater{}}):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}inquire\PYGZus{}cred\PYGZus{}by\PYGZus{}oid}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{const} \PYG{n}{gss\PYGZus{}cred\PYGZus{}id\PYGZus{}t} \PYG{n}{cred\PYGZus{}handle}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}OID} \PYG{n}{desired\PYGZus{}object}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}buffer\PYGZus{}set\PYGZus{}t} \PYG{o}{*}\PYG{n}{data\PYGZus{}set}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-If the call succeeds and \sphinxstyleemphasis{cred\_handle} is a proxy credential,
-\sphinxstyleemphasis{data\_set} will be set to a single-element buffer set containing the
-unparsed principal name of the intermediate service. If \sphinxstyleemphasis{cred\_handle}
-is not a proxy credential, \sphinxstyleemphasis{data\_set} will be set to an empty buffer
-set. If the library does not support the query,
-gss\_inquire\_cred\_by\_oid will return \sphinxstylestrong{GSS\_S\_UNAVAILABLE}.
-
-
-\section{AEAD message wrapping}
-\label{\detokenize{appdev/gssapi:aead-message-wrapping}}
-The following GSSAPI extensions (declared in
-\sphinxcode{\textless{}gssapi/gssapi\_ext.h\textgreater{}}) can be used to wrap and unwrap messages
-with additional “associated data” which is integrity-checked but is
-not included in the output buffer:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}wrap\PYGZus{}aead}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}ctx\PYGZus{}id\PYGZus{}t} \PYG{n}{context\PYGZus{}handle}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{n}{conf\PYGZus{}req\PYGZus{}flag}\PYG{p}{,} \PYG{n}{gss\PYGZus{}qop\PYGZus{}t} \PYG{n}{qop\PYGZus{}req}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{input\PYGZus{}assoc\PYGZus{}buffer}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{input\PYGZus{}payload\PYGZus{}buffer}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{o}{*}\PYG{n}{conf\PYGZus{}state}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{output\PYGZus{}message\PYGZus{}buffer}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}unwrap\PYGZus{}aead}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}ctx\PYGZus{}id\PYGZus{}t} \PYG{n}{context\PYGZus{}handle}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{input\PYGZus{}message\PYGZus{}buffer}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{input\PYGZus{}assoc\PYGZus{}buffer}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{output\PYGZus{}payload\PYGZus{}buffer}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{o}{*}\PYG{n}{conf\PYGZus{}state}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}qop\PYGZus{}t} \PYG{o}{*}\PYG{n}{qop\PYGZus{}state}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-Wrap tokens created with gss\_wrap\_aead will successfully unwrap only
-if the same \sphinxstyleemphasis{input\_assoc\_buffer} contents are presented to
-gss\_unwrap\_aead.
-
-
-\section{IOV message wrapping}
-\label{\detokenize{appdev/gssapi:iov-message-wrapping}}
-The following extensions (declared in \sphinxcode{\textless{}gssapi/gssapi\_ext.h\textgreater{}}) can
-be used for in-place encryption, fine-grained control over wrap token
-layout, and for constructing wrap tokens compatible with Microsoft DCE
-RPC:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{typedef} \PYG{n}{struct} \PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc\PYGZus{}struct} \PYG{p}{\PYGZob{}}
- \PYG{n}{OM\PYGZus{}uint32} \PYG{n+nb}{type}\PYG{p}{;}
- \PYG{n}{gss\PYGZus{}buffer\PYGZus{}desc} \PYG{n}{buffer}\PYG{p}{;}
-\PYG{p}{\PYGZcb{}} \PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc}\PYG{p}{,} \PYG{o}{*}\PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}t}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}wrap\PYGZus{}iov}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}ctx\PYGZus{}id\PYGZus{}t} \PYG{n}{context\PYGZus{}handle}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{n}{conf\PYGZus{}req\PYGZus{}flag}\PYG{p}{,} \PYG{n}{gss\PYGZus{}qop\PYGZus{}t} \PYG{n}{qop\PYGZus{}req}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{o}{*}\PYG{n}{conf\PYGZus{}state}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{o}{*}\PYG{n}{iov}\PYG{p}{,} \PYG{n+nb}{int} \PYG{n}{iov\PYGZus{}count}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}unwrap\PYGZus{}iov}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}ctx\PYGZus{}id\PYGZus{}t} \PYG{n}{context\PYGZus{}handle}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{o}{*}\PYG{n}{conf\PYGZus{}state}\PYG{p}{,} \PYG{n}{gss\PYGZus{}qop\PYGZus{}t} \PYG{o}{*}\PYG{n}{qop\PYGZus{}state}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{o}{*}\PYG{n}{iov}\PYG{p}{,} \PYG{n+nb}{int} \PYG{n}{iov\PYGZus{}count}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}wrap\PYGZus{}iov\PYGZus{}length}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}ctx\PYGZus{}id\PYGZus{}t} \PYG{n}{context\PYGZus{}handle}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{n}{conf\PYGZus{}req\PYGZus{}flag}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}qop\PYGZus{}t} \PYG{n}{qop\PYGZus{}req}\PYG{p}{,} \PYG{n+nb}{int} \PYG{o}{*}\PYG{n}{conf\PYGZus{}state}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{o}{*}\PYG{n}{iov}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{n}{iov\PYGZus{}count}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}release\PYGZus{}iov\PYGZus{}buffer}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{o}{*}\PYG{n}{iov}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{n}{iov\PYGZus{}count}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-The caller of gss\_wrap\_iov provides an array of gss\_iov\_buffer\_desc
-structures, each containing a type and a gss\_buffer\_desc structure.
-Valid types include:
-\begin{itemize}
-\item {}
-\sphinxstylestrong{GSS\_C\_BUFFER\_TYPE\_DATA}: A data buffer to be included in the
-token, and to be encrypted or decrypted in-place if the token is
-confidentiality-protected.
-
-\item {}
-\sphinxstylestrong{GSS\_C\_BUFFER\_TYPE\_HEADER}: The GSSAPI wrap token header and
-underlying cryptographic header.
-
-\item {}
-\sphinxstylestrong{GSS\_C\_BUFFER\_TYPE\_TRAILER}: The cryptographic trailer, if one is
-required.
-
-\item {}
-\sphinxstylestrong{GSS\_C\_BUFFER\_TYPE\_PADDING}: Padding to be combined with the data
-during encryption and decryption. (The implementation may choose to
-place padding in the trailer buffer, in which case it will set the
-padding buffer length to 0.)
-
-\item {}
-\sphinxstylestrong{GSS\_C\_BUFFER\_TYPE\_STREAM}: For unwrapping only, a buffer
-containing a complete wrap token in standard format to be unwrapped.
-
-\item {}
-\sphinxstylestrong{GSS\_C\_BUFFER\_TYPE\_SIGN\_ONLY}: A buffer to be included in the
-token’s integrity protection checksum, but not to be encrypted or
-included in the token itself.
-
-\end{itemize}
-
-For gss\_wrap\_iov, the IOV list should contain one HEADER buffer,
-followed by zero or more SIGN\_ONLY buffers, followed by one or more
-DATA buffers, followed by a TRAILER buffer. The memory pointed to by
-the buffers is not required to be contiguous or in any particular
-order. If \sphinxstyleemphasis{conf\_req\_flag} is true, DATA buffers will be encrypted
-in-place, while SIGN\_ONLY buffers will not be modified.
-
-The type of an output buffer may be combined with
-\sphinxstylestrong{GSS\_C\_BUFFER\_FLAG\_ALLOCATE} to request that gss\_wrap\_iov allocate
-the buffer contents. If gss\_wrap\_iov allocates a buffer, it sets the
-\sphinxstylestrong{GSS\_C\_BUFFER\_FLAG\_ALLOCATED} flag on the buffer type.
-gss\_release\_iov\_buffer can be used to release all allocated buffers
-within an iov list and unset their allocated flags. Here is an
-example of how gss\_wrap\_iov can be used with allocation requested
-(\sphinxstyleemphasis{ctx} is assumed to be a previously established gss\_ctx\_id\_t):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{;}
-\PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{4}\PYG{p}{]}\PYG{p}{;}
-\PYG{n}{char} \PYG{n+nb}{str}\PYG{p}{[}\PYG{p}{]} \PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{message}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}HEADER} \PYG{o}{\textbar{}} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}FLAG\PYGZus{}ALLOCATE}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}DATA}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{value} \PYG{o}{=} \PYG{n+nb}{str}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length} \PYG{o}{=} \PYG{n}{strlen}\PYG{p}{(}\PYG{n+nb}{str}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{2}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}PADDING} \PYG{o}{\textbar{}} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}FLAG\PYGZus{}ALLOCATE}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{3}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}TRAILER} \PYG{o}{\textbar{}} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}FLAG\PYGZus{}ALLOCATE}\PYG{p}{;}
-
-\PYG{n}{major} \PYG{o}{=} \PYG{n}{gss\PYGZus{}wrap\PYGZus{}iov}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{minor}\PYG{p}{,} \PYG{n}{ctx}\PYG{p}{,} \PYG{l+m+mi}{1}\PYG{p}{,} \PYG{n}{GSS\PYGZus{}C\PYGZus{}QOP\PYGZus{}DEFAULT}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,}
- \PYG{n}{iov}\PYG{p}{,} \PYG{l+m+mi}{4}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{GSS\PYGZus{}ERROR}\PYG{p}{(}\PYG{n}{major}\PYG{p}{)}\PYG{p}{)}
- \PYG{n}{handle\PYGZus{}error}\PYG{p}{(}\PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{o}{/}\PYG{o}{*} \PYG{n}{Transmit} \PYG{o+ow}{or} \PYG{n}{otherwise} \PYG{n}{use} \PYG{n}{resulting} \PYG{n}{buffers}\PYG{o}{.} \PYG{o}{*}\PYG{o}{/}
-
-\PYG{p}{(}\PYG{n}{void}\PYG{p}{)}\PYG{n}{gss\PYGZus{}release\PYGZus{}iov\PYGZus{}buffer}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{minor}\PYG{p}{,} \PYG{n}{iov}\PYG{p}{,} \PYG{l+m+mi}{4}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-If the caller does not choose to request buffer allocation by
-gss\_wrap\_iov, it should first call gss\_wrap\_iov\_length to query the
-lengths of the HEADER, PADDING, and TRAILER buffers. DATA buffers
-must be provided in the iov list so that padding length can be
-computed correctly, but the output buffers need not be initialized.
-Here is an example of using gss\_wrap\_iov\_length and gss\_wrap\_iov:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{;}
-\PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{4}\PYG{p}{]}\PYG{p}{;}
-\PYG{n}{char} \PYG{n+nb}{str}\PYG{p}{[}\PYG{l+m+mi}{1024}\PYG{p}{]} \PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{message}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{,} \PYG{o}{*}\PYG{n}{ptr}\PYG{p}{;}
-
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}HEADER}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}DATA}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{value} \PYG{o}{=} \PYG{n+nb}{str}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length} \PYG{o}{=} \PYG{n}{strlen}\PYG{p}{(}\PYG{n+nb}{str}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{2}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}PADDING}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{3}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}TRAILER}\PYG{p}{;}
-
-\PYG{n}{major} \PYG{o}{=} \PYG{n}{gss\PYGZus{}wrap\PYGZus{}iov\PYGZus{}length}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{minor}\PYG{p}{,} \PYG{n}{ctx}\PYG{p}{,} \PYG{l+m+mi}{1}\PYG{p}{,} \PYG{n}{GSS\PYGZus{}C\PYGZus{}QOP\PYGZus{}DEFAULT}\PYG{p}{,}
- \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{iov}\PYG{p}{,} \PYG{l+m+mi}{4}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{GSS\PYGZus{}ERROR}\PYG{p}{(}\PYG{n}{major}\PYG{p}{)}\PYG{p}{)}
- \PYG{n}{handle\PYGZus{}error}\PYG{p}{(}\PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{strlen}\PYG{p}{(}\PYG{n+nb}{str}\PYG{p}{)} \PYG{o}{+} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length} \PYG{o}{+} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{2}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length} \PYG{o}{+}
- \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{3}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length} \PYG{o}{\PYGZgt{}} \PYG{n}{sizeof}\PYG{p}{(}\PYG{n+nb}{str}\PYG{p}{)}\PYG{p}{)}
- \PYG{n}{handle\PYGZus{}out\PYGZus{}of\PYGZus{}space\PYGZus{}error}\PYG{p}{(}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{ptr} \PYG{o}{=} \PYG{n+nb}{str} \PYG{o}{+} \PYG{n}{strlen}\PYG{p}{(}\PYG{n+nb}{str}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{value} \PYG{o}{=} \PYG{n}{ptr}\PYG{p}{;}
-\PYG{n}{ptr} \PYG{o}{+}\PYG{o}{=} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{2}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{value} \PYG{o}{=} \PYG{n}{ptr}\PYG{p}{;}
-\PYG{n}{ptr} \PYG{o}{+}\PYG{o}{=} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{2}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{3}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{value} \PYG{o}{=} \PYG{n}{ptr}\PYG{p}{;}
-
-\PYG{n}{major} \PYG{o}{=} \PYG{n}{gss\PYGZus{}wrap\PYGZus{}iov}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{minor}\PYG{p}{,} \PYG{n}{ctx}\PYG{p}{,} \PYG{l+m+mi}{1}\PYG{p}{,} \PYG{n}{GSS\PYGZus{}C\PYGZus{}QOP\PYGZus{}DEFAULT}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,}
- \PYG{n}{iov}\PYG{p}{,} \PYG{l+m+mi}{4}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{GSS\PYGZus{}ERROR}\PYG{p}{(}\PYG{n}{major}\PYG{p}{)}\PYG{p}{)}
- \PYG{n}{handle\PYGZus{}error}\PYG{p}{(}\PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-If the context was established using the \sphinxstylestrong{GSS\_C\_DCE\_STYLE} flag
-(described in \index{RFC!RFC 4757}\sphinxhref{https://tools.ietf.org/html/rfc4757.html}{\sphinxstylestrong{RFC 4757}}), wrap tokens compatible with Microsoft DCE
-RPC can be constructed. In this case, the IOV list must include a
-SIGN\_ONLY buffer, a DATA buffer, a second SIGN\_ONLY buffer, and a
-HEADER buffer in that order (the order of the buffer contents remains
-arbitrary). The application must pad the DATA buffer to a multiple of
-16 bytes as no padding or trailer buffer is used.
-
-gss\_unwrap\_iov may be called with an IOV list just like one which
-would be provided to gss\_wrap\_iov. DATA buffers will be decrypted
-in-place if they were encrypted, and SIGN\_ONLY buffers will not be
-modified.
-
-Alternatively, gss\_unwrap\_iov may be called with a single STREAM
-buffer, zero or more SIGN\_ONLY buffers, and a single DATA buffer. The
-STREAM buffer is interpreted as a complete wrap token. The STREAM
-buffer will be modified in-place to decrypt its contents. The DATA
-buffer will be initialized to point to the decrypted data within the
-STREAM buffer, unless it has the \sphinxstylestrong{GSS\_C\_BUFFER\_FLAG\_ALLOCATE} flag
-set, in which case it will be initialized with a copy of the decrypted
-data. Here is an example (\sphinxstyleemphasis{token} and \sphinxstyleemphasis{token\_len} are assumed to be a
-pre-existing pointer and length for a modifiable region of data):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{;}
-\PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{2}\PYG{p}{]}\PYG{p}{;}
-
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}STREAM}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{value} \PYG{o}{=} \PYG{n}{token}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length} \PYG{o}{=} \PYG{n}{token\PYGZus{}len}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}DATA}\PYG{p}{;}
-\PYG{n}{major} \PYG{o}{=} \PYG{n}{gss\PYGZus{}unwrap\PYGZus{}iov}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{minor}\PYG{p}{,} \PYG{n}{ctx}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{iov}\PYG{p}{,} \PYG{l+m+mi}{2}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{GSS\PYGZus{}ERROR}\PYG{p}{(}\PYG{n}{major}\PYG{p}{)}\PYG{p}{)}
- \PYG{n}{handle\PYGZus{}error}\PYG{p}{(}\PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{o}{/}\PYG{o}{*} \PYG{n}{Decrypted} \PYG{n}{data} \PYG{o+ow}{is} \PYG{o+ow}{in} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{p}{,} \PYG{n}{pointing} \PYG{n}{to} \PYG{n}{a} \PYG{n}{subregion} \PYG{n}{of}
- \PYG{o}{*} \PYG{n}{token}\PYG{o}{.} \PYG{o}{*}\PYG{o}{/}
-\end{sphinxVerbatim}
-
-
-\section{IOV MIC tokens}
-\label{\detokenize{appdev/gssapi:gssapi-mic-token}}\label{\detokenize{appdev/gssapi:iov-mic-tokens}}
-The following extensions (declared in \sphinxcode{\textless{}gssapi/gssapi\_ext.h\textgreater{}}) can
-be used in release 1.12 or later to construct and verify MIC tokens
-using an IOV list:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}get\PYGZus{}mic\PYGZus{}iov}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}ctx\PYGZus{}id\PYGZus{}t} \PYG{n}{context\PYGZus{}handle}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}qop\PYGZus{}t} \PYG{n}{qop\PYGZus{}req}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{o}{*}\PYG{n}{iov}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{n}{iov\PYGZus{}count}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}get\PYGZus{}mic\PYGZus{}iov\PYGZus{}length}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}ctx\PYGZus{}id\PYGZus{}t} \PYG{n}{context\PYGZus{}handle}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}qop\PYGZus{}t} \PYG{n}{qop\PYGZus{}req}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{o}{*}\PYG{n}{iov}\PYG{p}{,}
- \PYG{n}{iov\PYGZus{}count}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gss\PYGZus{}verify\PYGZus{}mic\PYGZus{}iov}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}ctx\PYGZus{}id\PYGZus{}t} \PYG{n}{context\PYGZus{}handle}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}qop\PYGZus{}t} \PYG{o}{*}\PYG{n}{qop\PYGZus{}state}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{o}{*}\PYG{n}{iov}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{n}{iov\PYGZus{}count}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-The caller of gss\_get\_mic\_iov provides an array of gss\_iov\_buffer\_desc
-structures, each containing a type and a gss\_buffer\_desc structure.
-Valid types include:
-\begin{itemize}
-\item {}
-\sphinxstylestrong{GSS\_C\_BUFFER\_TYPE\_DATA} and \sphinxstylestrong{GSS\_C\_BUFFER\_TYPE\_SIGN\_ONLY}: The
-corresponding buffer for each of these types will be signed for the
-MIC token, in the order provided.
-
-\item {}
-\sphinxstylestrong{GSS\_C\_BUFFER\_TYPE\_MIC\_TOKEN}: The GSSAPI MIC token.
-
-\end{itemize}
-
-The type of the MIC\_TOKEN buffer may be combined with
-\sphinxstylestrong{GSS\_C\_BUFFER\_FLAG\_ALLOCATE} to request that gss\_get\_mic\_iov
-allocate the buffer contents. If gss\_get\_mic\_iov allocates the
-buffer, it sets the \sphinxstylestrong{GSS\_C\_BUFFER\_FLAG\_ALLOCATED} flag on the buffer
-type. gss\_release\_iov\_buffer can be used to release all allocated
-buffers within an iov list and unset their allocated flags. Here is
-an example of how gss\_get\_mic\_iov can be used with allocation
-requested (\sphinxstyleemphasis{ctx} is assumed to be a previously established
-gss\_ctx\_id\_t):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{;}
-\PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{3}\PYG{p}{]}\PYG{p}{;}
-
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}DATA}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{value} \PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{sign1}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length} \PYG{o}{=} \PYG{l+m+mi}{5}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}SIGN\PYGZus{}ONLY}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{value} \PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{sign2}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length} \PYG{o}{=} \PYG{l+m+mi}{5}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{2}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}MIC\PYGZus{}TOKEN} \PYG{o}{\textbar{}} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}FLAG\PYGZus{}ALLOCATE}\PYG{p}{;}
-
-\PYG{n}{major} \PYG{o}{=} \PYG{n}{gss\PYGZus{}get\PYGZus{}mic\PYGZus{}iov}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{minor}\PYG{p}{,} \PYG{n}{ctx}\PYG{p}{,} \PYG{n}{GSS\PYGZus{}C\PYGZus{}QOP\PYGZus{}DEFAULT}\PYG{p}{,} \PYG{n}{iov}\PYG{p}{,} \PYG{l+m+mi}{3}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{GSS\PYGZus{}ERROR}\PYG{p}{(}\PYG{n}{major}\PYG{p}{)}\PYG{p}{)}
- \PYG{n}{handle\PYGZus{}error}\PYG{p}{(}\PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{o}{/}\PYG{o}{*} \PYG{n}{Transmit} \PYG{o+ow}{or} \PYG{n}{otherwise} \PYG{n}{use} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{2}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.} \PYG{o}{*}\PYG{o}{/}
-
-\PYG{p}{(}\PYG{n}{void}\PYG{p}{)}\PYG{n}{gss\PYGZus{}release\PYGZus{}iov\PYGZus{}buffer}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{minor}\PYG{p}{,} \PYG{n}{iov}\PYG{p}{,} \PYG{l+m+mi}{3}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-If the caller does not choose to request buffer allocation by
-gss\_get\_mic\_iov, it should first call gss\_get\_mic\_iov\_length to query
-the length of the MIC\_TOKEN buffer. Here is an example of using
-gss\_get\_mic\_iov\_length and gss\_get\_mic\_iov:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{;}
-\PYG{n}{gss\PYGZus{}iov\PYGZus{}buffer\PYGZus{}desc} \PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{2}\PYG{p}{]}\PYG{p}{;}
-\PYG{n}{char} \PYG{n}{data}\PYG{p}{[}\PYG{l+m+mi}{1024}\PYG{p}{]}\PYG{p}{;}
-
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}MIC\PYGZus{}TOKEN}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{type} \PYG{o}{=} \PYG{n}{GSS\PYGZus{}IOV\PYGZus{}BUFFER\PYGZus{}TYPE\PYGZus{}DATA}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{value} \PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{message}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length} \PYG{o}{=} \PYG{l+m+mi}{7}\PYG{p}{;}
-
-\PYG{n}{major} \PYG{o}{=} \PYG{n}{gss\PYGZus{}get\PYGZus{}mic\PYGZus{}iov\PYGZus{}length}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{minor}\PYG{p}{,} \PYG{n}{ctx}\PYG{p}{,} \PYG{n}{GSS\PYGZus{}C\PYGZus{}QOP\PYGZus{}DEFAULT}\PYG{p}{,} \PYG{n}{iov}\PYG{p}{,} \PYG{l+m+mi}{2}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{GSS\PYGZus{}ERROR}\PYG{p}{(}\PYG{n}{major}\PYG{p}{)}\PYG{p}{)}
- \PYG{n}{handle\PYGZus{}error}\PYG{p}{(}\PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{length} \PYG{o}{\PYGZgt{}} \PYG{n}{sizeof}\PYG{p}{(}\PYG{n}{data}\PYG{p}{)}\PYG{p}{)}
- \PYG{n}{handle\PYGZus{}out\PYGZus{}of\PYGZus{}space\PYGZus{}error}\PYG{p}{(}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{iov}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{o}{.}\PYG{n}{buffer}\PYG{o}{.}\PYG{n}{value} \PYG{o}{=} \PYG{n}{data}\PYG{p}{;}
-
-\PYG{n}{major} \PYG{o}{=} \PYG{n}{gss\PYGZus{}get\PYGZus{}mic\PYGZus{}iov}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{minor}\PYG{p}{,} \PYG{n}{ctx}\PYG{p}{,} \PYG{n}{GSS\PYGZus{}C\PYGZus{}QOP\PYGZus{}DEFAULT}\PYG{p}{,} \PYG{n}{iov}\PYG{p}{,} \PYG{l+m+mi}{2}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{GSS\PYGZus{}ERROR}\PYG{p}{(}\PYG{n}{major}\PYG{p}{)}\PYG{p}{)}
- \PYG{n}{handle\PYGZus{}error}\PYG{p}{(}\PYG{n}{major}\PYG{p}{,} \PYG{n}{minor}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-
-\chapter{Year 2038 considerations for uses of krb5\_timestamp}
-\label{\detokenize{appdev/y2038::doc}}\label{\detokenize{appdev/y2038:year-2038-considerations-for-uses-of-krb5-timestamp}}
-POSIX time values, which measure the number of seconds since January 1
-1970, will exceed the maximum value representable in a signed 32-bit
-integer in January 2038. This documentation describes considerations
-for consumers of the MIT krb5 libraries.
-
-Applications or libraries which use libkrb5 and consume the timestamps
-included in credentials or other structures make use of the
-{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{\sphinxcode{krb5\_timestamp}}}} type. For historical reasons, krb5\_timestamp
-is a signed 32-bit integer, even on platforms where a larger type is
-natively used to represent time values. To behave properly for time
-values after January 2038, calling code should cast krb5\_timestamp
-values to uint32\_t, and then to time\_t:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{(}\PYG{n}{time\PYGZus{}t}\PYG{p}{)}\PYG{p}{(}\PYG{n}{uint32\PYGZus{}t}\PYG{p}{)}\PYG{n}{timestamp}
-\end{sphinxVerbatim}
-
-Used in this way, krb5\_timestamp values can represent time values up
-until February 2106, provided that the platform uses a 64-bit or
-larger time\_t type. This usage will also remain safe if a later
-version of MIT krb5 changes krb5\_timestamp to an unsigned 32-bit
-integer.
-
-The GSSAPI only uses representations of time intervals, not absolute
-times. Callers of the GSSAPI should require no changes to behave
-correctly after January 2038, provided that they use MIT krb5 release
-1.16 or later.
-
-
-\chapter{Differences between Heimdal and MIT Kerberos API}
-\label{\detokenize{appdev/h5l_mit_apidiff:differences-between-heimdal-and-mit-kerberos-api}}\label{\detokenize{appdev/h5l_mit_apidiff::doc}}
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|l|l|}
-\hline
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_getaddrs:c.krb5_auth_con_getaddrs}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_getaddrs()}}}}
-&
-H5l: If either of the pointers to local\_addr
-and remote\_addr is not NULL, it is freed
-first and then reallocated before being
-populated with the content of corresponding
-address from authentication context.
-\\
-\hline
-{\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_setaddrs:c.krb5_auth_con_setaddrs}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_setaddrs()}}}}
-&
-H5l: If either address is NULL, the previous
-address remains in place
-\\
-\hline
-{\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_setports:c.krb5_auth_con_setports}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_setports()}}}}
-&
-H5l: Not implemented as of version 1.3.3
-\\
-\hline
-{\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_setrecvsubkey:c.krb5_auth_con_setrecvsubkey}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_setrecvsubkey()}}}}
-&
-H5l: If either port is NULL, the previous
-port remains in place
-\\
-\hline
-{\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_setsendsubkey:c.krb5_auth_con_setsendsubkey}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_setsendsubkey()}}}}
-&
-H5l: Not implemented as of version 1.3.3
-\\
-\hline
-{\hyperref[\detokenize{appdev/refs/api/krb5_cc_set_config:c.krb5_cc_set_config}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_set\_config()}}}}
-&
-MIT: Before version 1.10 it was assumed that
-the last argument \sphinxstyleemphasis{data} is ALWAYS non-zero.
-\\
-\hline
-\sphinxcode{krb5\_cccol\_last\_change\_time()}
-&
-MIT: not implemented
-\\
-\hline
-{\hyperref[\detokenize{appdev/refs/api/krb5_set_default_realm:c.krb5_set_default_realm}]{\sphinxcrossref{\sphinxcode{krb5\_set\_default\_realm()}}}}
-&
-H5l: Caches the computed default realm context
-field. If the second argument is NULL,
-it tries to retrieve it from libdefaults or DNS.
-MIT: Computes the default realm each time
-if it wasn’t explicitly set in the context
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\chapter{Initial credentials}
-\label{\detokenize{appdev/init_creds:initial-credentials}}\label{\detokenize{appdev/init_creds::doc}}
-Software that performs tasks such as logging users into a computer
-when they type their Kerberos password needs to get initial
-credentials (usually ticket granting tickets) from Kerberos. Such
-software shares some behavior with the \DUrole{xref,std,std-ref}{kinit(1)} program.
-
-Whenever a program grants access to a resource (such as a local login
-session on a desktop computer) based on a user successfully getting
-initial Kerberos credentials, it must verify those credentials against
-a secure shared secret (e.g., a host keytab) to ensure that the user
-credentials actually originate from a legitimate KDC. Failure to
-perform this verification is a critical vulnerability, because a
-malicious user can execute the “Zanarotti attack”: the user constructs
-a fake response that appears to come from the legitimate KDC, but
-whose contents come from an attacker-controlled KDC.
-
-Some applications read a Kerberos password over the network (ideally
-over a secure channel), which they then verify against the KDC. While
-this technique may be the only practical way to integrate Kerberos
-into some existing legacy systems, its use is contrary to the original
-design goals of Kerberos.
-
-The function {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_password:c.krb5_get_init_creds_password}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_password()}}}} will get initial
-credentials for a client using a password. An application that needs
-to verify the credentials can call {\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds:c.krb5_verify_init_creds}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds()}}}}.
-Here is an example of code to obtain and verify TGT credentials, given
-strings \sphinxstyleemphasis{princname} and \sphinxstyleemphasis{password} for the client principal name and
-password:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{krb5\PYGZus{}error\PYGZus{}code} \PYG{n}{ret}\PYG{p}{;}
-\PYG{n}{krb5\PYGZus{}creds} \PYG{n}{creds}\PYG{p}{;}
-\PYG{n}{krb5\PYGZus{}principal} \PYG{n}{client\PYGZus{}princ} \PYG{o}{=} \PYG{n}{NULL}\PYG{p}{;}
-
-\PYG{n}{memset}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{,} \PYG{l+m+mi}{0}\PYG{p}{,} \PYG{n}{sizeof}\PYG{p}{(}\PYG{n}{creds}\PYG{p}{)}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}parse\PYGZus{}name}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{n}{princname}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{client\PYGZus{}princ}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{ret}\PYG{p}{)}
- \PYG{n}{goto} \PYG{n}{cleanup}\PYG{p}{;}
-\PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}password}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{,} \PYG{n}{client\PYGZus{}princ}\PYG{p}{,}
- \PYG{n}{password}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{l+m+mi}{0}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{ret}\PYG{p}{)}
- \PYG{n}{goto} \PYG{n}{cleanup}\PYG{p}{;}
-\PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}verify\PYGZus{}init\PYGZus{}creds}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{cleanup}\PYG{p}{:}
-\PYG{n}{krb5\PYGZus{}free\PYGZus{}principal}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{n}{client\PYGZus{}princ}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{krb5\PYGZus{}free\PYGZus{}cred\PYGZus{}contents}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{return} \PYG{n}{ret}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-
-\section{Options for get\_init\_creds}
-\label{\detokenize{appdev/init_creds:options-for-get-init-creds}}
-The function {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_password:c.krb5_get_init_creds_password}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_password()}}}} takes an options
-parameter (which can be a null pointer). Use the function
-{\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_alloc:c.krb5_get_init_creds_opt_alloc}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_alloc()}}}} to allocate an options
-structure, and {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_free:c.krb5_get_init_creds_opt_free}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_free()}}}} to free it. For
-example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{krb5\PYGZus{}error\PYGZus{}code} \PYG{n}{ret}\PYG{p}{;}
-\PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}opt} \PYG{o}{*}\PYG{n}{opt} \PYG{o}{=} \PYG{n}{NULL}\PYG{p}{;}
-\PYG{n}{krb5\PYGZus{}creds} \PYG{n}{creds}\PYG{p}{;}
-
-\PYG{n}{memset}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{,} \PYG{l+m+mi}{0}\PYG{p}{,} \PYG{n}{sizeof}\PYG{p}{(}\PYG{n}{creds}\PYG{p}{)}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}opt\PYGZus{}alloc}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{opt}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{ret}\PYG{p}{)}
- \PYG{n}{goto} \PYG{n}{cleanup}\PYG{p}{;}
-\PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}opt\PYGZus{}set\PYGZus{}tkt\PYGZus{}life}\PYG{p}{(}\PYG{n}{opt}\PYG{p}{,} \PYG{l+m+mi}{24} \PYG{o}{*} \PYG{l+m+mi}{60} \PYG{o}{*} \PYG{l+m+mi}{60}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}password}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{,} \PYG{n}{client\PYGZus{}princ}\PYG{p}{,}
- \PYG{n}{password}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{l+m+mi}{0}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{opt}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{ret}\PYG{p}{)}
- \PYG{n}{goto} \PYG{n}{cleanup}\PYG{p}{;}
-
-\PYG{n}{cleanup}\PYG{p}{:}
-\PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}opt\PYGZus{}free}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{n}{opt}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{krb5\PYGZus{}free\PYGZus{}cred\PYGZus{}contents}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{return} \PYG{n}{ret}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-
-\section{Getting anonymous credentials}
-\label{\detokenize{appdev/init_creds:getting-anonymous-credentials}}
-As of release 1.8, it is possible to obtain fully anonymous or
-partially anonymous (realm-exposed) credentials, if the KDC supports
-it. The MIT KDC supports issuing fully anonymous credentials as of
-release 1.8 if configured appropriately (see \DUrole{xref,std,std-ref}{anonymous\_pkinit}),
-but does not support issuing realm-exposed anonymous credentials at
-this time.
-
-To obtain fully anonymous credentials, call
-{\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_anonymous:c.krb5_get_init_creds_opt_set_anonymous}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_set\_anonymous()}}}} on the options
-structure to set the anonymous flag, and specify a client principal
-with the KDC’s realm and a single empty data component (the principal
-obtained by parsing \sphinxcode{@}\sphinxstyleemphasis{realmname}). Authentication will take
-place using anonymous PKINIT; if successful, the client principal of
-the resulting tickets will be
-\sphinxcode{WELLKNOWN/ANONYMOUS@WELLKNOWN:ANONYMOUS}. Here is an example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}opt\PYGZus{}set\PYGZus{}anonymous}\PYG{p}{(}\PYG{n}{opt}\PYG{p}{,} \PYG{l+m+mi}{1}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}build\PYGZus{}principal}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{client\PYGZus{}princ}\PYG{p}{,} \PYG{n}{strlen}\PYG{p}{(}\PYG{n}{myrealm}\PYG{p}{)}\PYG{p}{,}
- \PYG{n}{myrealm}\PYG{p}{,} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{,} \PYG{p}{(}\PYG{n}{char} \PYG{o}{*}\PYG{p}{)}\PYG{n}{NULL}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{ret}\PYG{p}{)}
- \PYG{n}{goto} \PYG{n}{cleanup}\PYG{p}{;}
-\PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}password}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{,} \PYG{n}{client\PYGZus{}princ}\PYG{p}{,}
- \PYG{n}{password}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{l+m+mi}{0}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{opt}\PYG{p}{)}\PYG{p}{;}
-\PYG{k}{if} \PYG{p}{(}\PYG{n}{ret}\PYG{p}{)}
- \PYG{n}{goto} \PYG{n}{cleanup}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-To obtain realm-exposed anonymous credentials, set the anonymous flag
-on the options structure as above, but specify a normal client
-principal in order to prove membership in the realm. Authentication
-will take place as it normally does; if successful, the client
-principal of the resulting tickets will be \sphinxcode{WELLKNOWN/ANONYMOUS@}\sphinxstyleemphasis{realmname}.
-
-
-\section{User interaction}
-\label{\detokenize{appdev/init_creds:user-interaction}}
-Authenticating a user usually requires the entry of secret
-information, such as a password. A password can be supplied directly
-to {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_password:c.krb5_get_init_creds_password}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_password()}}}} via the \sphinxstyleemphasis{password}
-parameter, or the application can supply prompter and/or responder
-callbacks instead. If callbacks are used, the user can also be
-queried for other secret information such as a PIN, informed of
-impending password expiration, or prompted to change a password which
-has expired.
-
-
-\subsection{Prompter callback}
-\label{\detokenize{appdev/init_creds:prompter-callback}}
-A prompter callback can be specified via the \sphinxstyleemphasis{prompter} and \sphinxstyleemphasis{data}
-parameters to {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_password:c.krb5_get_init_creds_password}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_password()}}}}. The prompter
-will be invoked each time the krb5 library has a question to ask or
-information to present. When the prompter callback is invoked, the
-\sphinxstyleemphasis{banner} argument (if not null) is intended to be displayed to the
-user, and the questions to be answered are specified in the \sphinxstyleemphasis{prompts}
-array. Each prompt contains a text question in the \sphinxstyleemphasis{prompt} field, a
-\sphinxstyleemphasis{hidden} bit to indicate whether the answer should be hidden from
-display, and a storage area for the answer in the \sphinxstyleemphasis{reply} field. The
-callback should fill in each question’s \sphinxcode{reply-\textgreater{}data} with the
-answer, up to a maximum number of \sphinxcode{reply-\textgreater{}length} bytes, and then
-reset \sphinxcode{reply-\textgreater{}length} to the length of the answer.
-
-A prompter callback can call {\hyperref[\detokenize{appdev/refs/api/krb5_get_prompt_types:c.krb5_get_prompt_types}]{\sphinxcrossref{\sphinxcode{krb5\_get\_prompt\_types()}}}} to get an
-array of type constants corresponding to the prompts, to get
-programmatic information about the semantic meaning of the questions.
-{\hyperref[\detokenize{appdev/refs/api/krb5_get_prompt_types:c.krb5_get_prompt_types}]{\sphinxcrossref{\sphinxcode{krb5\_get\_prompt\_types()}}}} may return a null pointer if no prompt
-type information is available.
-
-Text-based applications can use a built-in text prompter
-implementation by supplying {\hyperref[\detokenize{appdev/refs/api/krb5_prompter_posix:c.krb5_prompter_posix}]{\sphinxcrossref{\sphinxcode{krb5\_prompter\_posix()}}}} as the
-\sphinxstyleemphasis{prompter} parameter and a null pointer as the \sphinxstyleemphasis{data} parameter. For
-example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}password}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{,} \PYG{n}{client\PYGZus{}princ}\PYG{p}{,}
- \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{krb5\PYGZus{}prompter\PYGZus{}posix}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{l+m+mi}{0}\PYG{p}{,}
- \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-
-\subsection{Responder callback}
-\label{\detokenize{appdev/init_creds:responder-callback}}
-A responder callback can be specified through the init\_creds options
-using the {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_responder:c.krb5_get_init_creds_opt_set_responder}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_set\_responder()}}}} function.
-Responder callbacks can present a more sophisticated user interface
-for authentication secrets. The responder callback is usually invoked
-only once per authentication, with a list of questions produced by all
-of the allowed preauthentication mechanisms.
-
-When the responder callback is invoked, the \sphinxstyleemphasis{rctx} argument can be
-accessed to obtain the list of questions and to answer them. The
-{\hyperref[\detokenize{appdev/refs/api/krb5_responder_list_questions:c.krb5_responder_list_questions}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_list\_questions()}}}} function retrieves an array of
-question types. For each question type, the
-{\hyperref[\detokenize{appdev/refs/api/krb5_responder_get_challenge:c.krb5_responder_get_challenge}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_get\_challenge()}}}} function retrieves additional
-information about the question, if applicable, and the
-{\hyperref[\detokenize{appdev/refs/api/krb5_responder_set_answer:c.krb5_responder_set_answer}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_set\_answer()}}}} function sets the answer.
-
-Responder question types, challenges, and answers are UTF-8 strings.
-The question type is a well-known string; the meaning of the challenge
-and answer depend on the question type. If an application does not
-understand a question type, it cannot interpret the challenge or
-provide an answer. Failing to answer a question typically results in
-the prompter callback being used as a fallback.
-
-
-\subsubsection{Password question}
-\label{\detokenize{appdev/init_creds:password-question}}
-The \sphinxcode{KRB5\_RESPONDER\_QUESTION\_PASSWORD} (or \sphinxcode{"password"})
-question type requests the user’s password. This question does not
-have a challenge, and the response is simply the password string.
-
-
-\subsubsection{One-time password question}
-\label{\detokenize{appdev/init_creds:one-time-password-question}}
-The \sphinxcode{KRB5\_RESPONDER\_QUESTION\_OTP} (or \sphinxcode{"otp"}) question
-type requests a choice among one-time password tokens and the PIN and
-value for the chosen token. The challenge and answer are JSON-encoded
-strings, but an application can use convenience functions to avoid
-doing any JSON processing itself.
-
-The {\hyperref[\detokenize{appdev/refs/api/krb5_responder_otp_get_challenge:c.krb5_responder_otp_get_challenge}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_otp\_get\_challenge()}}}} function decodes the
-challenge into a krb5\_responder\_otp\_challenge structure. The
-{\hyperref[\detokenize{appdev/refs/api/krb5_responder_otp_set_answer:c.krb5_responder_otp_set_answer}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_otp\_set\_answer()}}}} function selects one of the
-token information elements from the challenge and supplies the value
-and pin for that token.
-
-
-\subsubsection{PKINIT password or PIN question}
-\label{\detokenize{appdev/init_creds:pkinit-password-or-pin-question}}
-The \sphinxcode{KRB5\_RESPONDER\_QUESTION\_PKINIT} (or \sphinxcode{"pkinit"}) question
-type requests PINs for hardware devices and/or passwords for encrypted
-credentials which are stored on disk, potentially also supplying
-information about the state of the hardware devices. The challenge and
-answer are JSON-encoded strings, but an application can use convenience
-functions to avoid doing any JSON processing itself.
-
-The {\hyperref[\detokenize{appdev/refs/api/krb5_responder_pkinit_get_challenge:c.krb5_responder_pkinit_get_challenge}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_pkinit\_get\_challenge()}}}} function decodes the
-challenges into a krb5\_responder\_pkinit\_challenge structure. The
-{\hyperref[\detokenize{appdev/refs/api/krb5_responder_pkinit_set_answer:c.krb5_responder_pkinit_set_answer}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_pkinit\_set\_answer()}}}} function can be used to
-supply the PIN or password for a particular client credential, and can
-be called multiple times.
-
-
-\subsubsection{Example}
-\label{\detokenize{appdev/init_creds:example}}
-Here is an example of using a responder callback:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{static} \PYG{n}{krb5\PYGZus{}error\PYGZus{}code}
-\PYG{n}{my\PYGZus{}responder}\PYG{p}{(}\PYG{n}{krb5\PYGZus{}context} \PYG{n}{context}\PYG{p}{,} \PYG{n}{void} \PYG{o}{*}\PYG{n}{data}\PYG{p}{,}
- \PYG{n}{krb5\PYGZus{}responder\PYGZus{}context} \PYG{n}{rctx}\PYG{p}{)}
-\PYG{p}{\PYGZob{}}
- \PYG{n}{krb5\PYGZus{}error\PYGZus{}code} \PYG{n}{ret}\PYG{p}{;}
- \PYG{n}{krb5\PYGZus{}responder\PYGZus{}otp\PYGZus{}challenge} \PYG{o}{*}\PYG{n}{chl}\PYG{p}{;}
-
- \PYG{k}{if} \PYG{p}{(}\PYG{n}{krb5\PYGZus{}responder\PYGZus{}get\PYGZus{}challenge}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{n}{rctx}\PYG{p}{,}
- \PYG{n}{KRB5\PYGZus{}RESPONDER\PYGZus{}QUESTION\PYGZus{}PASSWORD}\PYG{p}{)}\PYG{p}{)} \PYG{p}{\PYGZob{}}
- \PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}responder\PYGZus{}set\PYGZus{}answer}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{n}{rctx}\PYG{p}{,}
- \PYG{n}{KRB5\PYGZus{}RESPONDER\PYGZus{}QUESTION\PYGZus{}PASSWORD}\PYG{p}{,}
- \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{open sesame}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{)}\PYG{p}{;}
- \PYG{k}{if} \PYG{p}{(}\PYG{n}{ret}\PYG{p}{)}
- \PYG{k}{return} \PYG{n}{ret}\PYG{p}{;}
- \PYG{p}{\PYGZcb{}}
- \PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}responder\PYGZus{}otp\PYGZus{}get\PYGZus{}challenge}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{n}{rctx}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{chl}\PYG{p}{)}\PYG{p}{;}
- \PYG{k}{if} \PYG{p}{(}\PYG{n}{ret} \PYG{o}{==} \PYG{l+m+mi}{0} \PYG{o}{\PYGZam{}}\PYG{o}{\PYGZam{}} \PYG{n}{chl} \PYG{o}{!=} \PYG{n}{NULL}\PYG{p}{)} \PYG{p}{\PYGZob{}}
- \PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}responder\PYGZus{}otp\PYGZus{}set\PYGZus{}answer}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{n}{rctx}\PYG{p}{,} \PYG{l+m+mi}{0}\PYG{p}{,} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{1234}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{,}
- \PYG{n}{NULL}\PYG{p}{)}\PYG{p}{;}
- \PYG{n}{krb5\PYGZus{}responder\PYGZus{}otp\PYGZus{}challenge\PYGZus{}free}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{n}{rctx}\PYG{p}{,} \PYG{n}{chl}\PYG{p}{)}\PYG{p}{;}
- \PYG{k}{if} \PYG{p}{(}\PYG{n}{ret}\PYG{p}{)}
- \PYG{k}{return} \PYG{n}{ret}\PYG{p}{;}
- \PYG{p}{\PYGZcb{}}
- \PYG{k}{return} \PYG{l+m+mi}{0}\PYG{p}{;}
-\PYG{p}{\PYGZcb{}}
-
-\PYG{n}{static} \PYG{n}{krb5\PYGZus{}error\PYGZus{}code}
-\PYG{n}{get\PYGZus{}creds}\PYG{p}{(}\PYG{n}{krb5\PYGZus{}context} \PYG{n}{context}\PYG{p}{,} \PYG{n}{krb5\PYGZus{}principal} \PYG{n}{client\PYGZus{}princ}\PYG{p}{)}
-\PYG{p}{\PYGZob{}}
- \PYG{n}{krb5\PYGZus{}error\PYGZus{}code} \PYG{n}{ret}\PYG{p}{;}
- \PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}opt} \PYG{o}{*}\PYG{n}{opt} \PYG{o}{=} \PYG{n}{NULL}\PYG{p}{;}
- \PYG{n}{krb5\PYGZus{}creds} \PYG{n}{creds}\PYG{p}{;}
-
- \PYG{n}{memset}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{,} \PYG{l+m+mi}{0}\PYG{p}{,} \PYG{n}{sizeof}\PYG{p}{(}\PYG{n}{creds}\PYG{p}{)}\PYG{p}{)}\PYG{p}{;}
- \PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}opt\PYGZus{}alloc}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{opt}\PYG{p}{)}\PYG{p}{;}
- \PYG{k}{if} \PYG{p}{(}\PYG{n}{ret}\PYG{p}{)}
- \PYG{n}{goto} \PYG{n}{cleanup}\PYG{p}{;}
- \PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}opt\PYGZus{}set\PYGZus{}responder}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{n}{opt}\PYG{p}{,} \PYG{n}{my\PYGZus{}responder}\PYG{p}{,}
- \PYG{n}{NULL}\PYG{p}{)}\PYG{p}{;}
- \PYG{k}{if} \PYG{p}{(}\PYG{n}{ret}\PYG{p}{)}
- \PYG{n}{goto} \PYG{n}{cleanup}\PYG{p}{;}
- \PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}password}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{,} \PYG{n}{client\PYGZus{}princ}\PYG{p}{,}
- \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{l+m+mi}{0}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{opt}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{cleanup}\PYG{p}{:}
- \PYG{n}{krb5\PYGZus{}get\PYGZus{}init\PYGZus{}creds\PYGZus{}opt\PYGZus{}free}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{n}{opt}\PYG{p}{)}\PYG{p}{;}
- \PYG{n}{krb5\PYGZus{}free\PYGZus{}cred\PYGZus{}contents}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{)}\PYG{p}{;}
- \PYG{k}{return} \PYG{n}{ret}\PYG{p}{;}
-\PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-
-\section{Verifying initial credentials}
-\label{\detokenize{appdev/init_creds:verifying-initial-credentials}}
-Use the function {\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds:c.krb5_verify_init_creds}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds()}}}} to verify initial
-credentials. It takes an options structure (which can be a null
-pointer). Use {\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds_opt_init:c.krb5_verify_init_creds_opt_init}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds\_opt\_init()}}}} to initialize
-the caller-allocated options structure, and
-{\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail:c.krb5_verify_init_creds_opt_set_ap_req_nofail}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds\_opt\_set\_ap\_req\_nofail()}}}} to set the
-“nofail” option. For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{krb5\PYGZus{}verify\PYGZus{}init\PYGZus{}creds\PYGZus{}opt} \PYG{n}{vopt}\PYG{p}{;}
-
-\PYG{n}{krb5\PYGZus{}verify\PYGZus{}init\PYGZus{}creds\PYGZus{}opt\PYGZus{}init}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{vopt}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{krb5\PYGZus{}verify\PYGZus{}init\PYGZus{}creds\PYGZus{}opt\PYGZus{}set\PYGZus{}ap\PYGZus{}req\PYGZus{}nofail}\PYG{p}{(}\PYG{o}{\PYGZam{}}\PYG{n}{vopt}\PYG{p}{,} \PYG{l+m+mi}{1}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{ret} \PYG{o}{=} \PYG{n}{krb5\PYGZus{}verify\PYGZus{}init\PYGZus{}creds}\PYG{p}{(}\PYG{n}{context}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{creds}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{n}{NULL}\PYG{p}{,} \PYG{o}{\PYGZam{}}\PYG{n}{vopt}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-The confusingly named “nofail” option, when set, means that the
-verification must actually succeed in order for
-{\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds:c.krb5_verify_init_creds}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds()}}}} to indicate success. The default
-state of this option (cleared) means that if there is no key material
-available to verify the user credentials, the verification will
-succeed anyway. (The default can be changed by a configuration file
-setting.)
-
-This accommodates a use case where a large number of unkeyed shared
-desktop workstations need to allow users to log in using Kerberos.
-The security risks from this practice are mitigated by the absence of
-valuable state on the shared workstations—any valuable resources
-that the users would access reside on networked servers.
-
-
-\chapter{Principal manipulation and parsing}
-\label{\detokenize{appdev/princ_handle:principal-manipulation-and-parsing}}\label{\detokenize{appdev/princ_handle::doc}}
-Kerberos principal structure
-
-{\hyperref[\detokenize{appdev/refs/types/krb5_principal_data:c.krb5_principal_data}]{\sphinxcrossref{\sphinxcode{krb5\_principal\_data}}}}
-
-{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{\sphinxcode{krb5\_principal}}}}
-
-Create and free principal
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_build_principal:c.krb5_build_principal}]{\sphinxcrossref{\sphinxcode{krb5\_build\_principal()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_build_principal_alloc_va:c.krb5_build_principal_alloc_va}]{\sphinxcrossref{\sphinxcode{krb5\_build\_principal\_alloc\_va()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_build_principal_ext:c.krb5_build_principal_ext}]{\sphinxcrossref{\sphinxcode{krb5\_build\_principal\_ext()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_copy_principal:c.krb5_copy_principal}]{\sphinxcrossref{\sphinxcode{krb5\_copy\_principal()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}]{\sphinxcrossref{\sphinxcode{krb5\_free\_principal()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_cc_get_principal:c.krb5_cc_get_principal}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_get\_principal()}}}}
-
-Comparing
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_principal_compare:c.krb5_principal_compare}]{\sphinxcrossref{\sphinxcode{krb5\_principal\_compare()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_principal_compare_flags:c.krb5_principal_compare_flags}]{\sphinxcrossref{\sphinxcode{krb5\_principal\_compare\_flags()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_principal_compare_any_realm:c.krb5_principal_compare_any_realm}]{\sphinxcrossref{\sphinxcode{krb5\_principal\_compare\_any\_realm()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_sname_match:c.krb5_sname_match}]{\sphinxcrossref{\sphinxcode{krb5\_sname\_match()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_sname_to_principal:c.krb5_sname_to_principal}]{\sphinxcrossref{\sphinxcode{krb5\_sname\_to\_principal()}}}}
-
-Parsing:
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_parse_name:c.krb5_parse_name}]{\sphinxcrossref{\sphinxcode{krb5\_parse\_name()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_parse_name_flags:c.krb5_parse_name_flags}]{\sphinxcrossref{\sphinxcode{krb5\_parse\_name\_flags()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_unparse_name:c.krb5_unparse_name}]{\sphinxcrossref{\sphinxcode{krb5\_unparse\_name()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_unparse_name_flags:c.krb5_unparse_name_flags}]{\sphinxcrossref{\sphinxcode{krb5\_unparse\_name\_flags()}}}}
-
-Utilities:
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_is_config_principal:c.krb5_is_config_principal}]{\sphinxcrossref{\sphinxcode{krb5\_is\_config\_principal()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_kuserok:c.krb5_kuserok}]{\sphinxcrossref{\sphinxcode{krb5\_kuserok()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_set_password:c.krb5_set_password}]{\sphinxcrossref{\sphinxcode{krb5\_set\_password()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_set_password_using_ccache:c.krb5_set_password_using_ccache}]{\sphinxcrossref{\sphinxcode{krb5\_set\_password\_using\_ccache()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_set_principal_realm:c.krb5_set_principal_realm}]{\sphinxcrossref{\sphinxcode{krb5\_set\_principal\_realm()}}}}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_realm_compare:c.krb5_realm_compare}]{\sphinxcrossref{\sphinxcode{krb5\_realm\_compare()}}}}
-
-
-\chapter{Complete reference - API and datatypes}
-\label{\detokenize{appdev/refs/index:complete-reference-api-and-datatypes}}\label{\detokenize{appdev/refs/index::doc}}
-
-\section{krb5 API}
-\label{\detokenize{appdev/refs/api/index:krb5-api}}\label{\detokenize{appdev/refs/api/index::doc}}
-
-\subsection{Frequently used public interfaces}
-\label{\detokenize{appdev/refs/api/index:frequently-used-public-interfaces}}
-
-\subsubsection{krb5\_build\_principal - Build a principal name using null-terminated strings.}
-\label{\detokenize{appdev/refs/api/krb5_build_principal:krb5-build-principal-build-a-principal-name-using-null-terminated-strings}}\label{\detokenize{appdev/refs/api/krb5_build_principal::doc}}\index{krb5\_build\_principal (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_build_principal:c.krb5_build_principal}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_build\_principal}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ princ}, unsigned int\sphinxstyleemphasis{ rlen}, const char *\sphinxstyleemphasis{ realm}, ...}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{princ} - Principal name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rlen} - Realm name length
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{realm} - Realm name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Call {\hyperref[\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}]{\sphinxcrossref{\sphinxcode{krb5\_free\_principal()}}}} to free \sphinxstyleemphasis{princ} when it is no longer needed.
-
-Beginning with release 1.20, the name type of the principal will be inferred as \sphinxstylestrong{KRB5\_NT\_SRV\_INST} or \sphinxstylestrong{KRB5\_NT\_WELLKNOWN} based on the principal name. The type will be \sphinxstylestrong{KRB5\_NT\_PRINCIPAL} if a type cannot be inferred.
-
-\begin{sphinxadmonition}{note}{Note:}
-{\hyperref[\detokenize{appdev/refs/api/krb5_build_principal:c.krb5_build_principal}]{\sphinxcrossref{\sphinxcode{krb5\_build\_principal()}}}} and {\hyperref[\detokenize{appdev/refs/api/krb5_build_principal_alloc_va:c.krb5_build_principal_alloc_va}]{\sphinxcrossref{\sphinxcode{krb5\_build\_principal\_alloc\_va()}}}} perform the same task. {\hyperref[\detokenize{appdev/refs/api/krb5_build_principal:c.krb5_build_principal}]{\sphinxcrossref{\sphinxcode{krb5\_build\_principal()}}}} takes variadic arguments. {\hyperref[\detokenize{appdev/refs/api/krb5_build_principal_alloc_va:c.krb5_build_principal_alloc_va}]{\sphinxcrossref{\sphinxcode{krb5\_build\_principal\_alloc\_va()}}}} takes a pre-computed \sphinxstyleemphasis{varargs} pointer.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_build\_principal\_alloc\_va - Build a principal name, using a precomputed variable argument list.}
-\label{\detokenize{appdev/refs/api/krb5_build_principal_alloc_va:krb5-build-principal-alloc-va-build-a-principal-name-using-a-precomputed-variable-argument-list}}\label{\detokenize{appdev/refs/api/krb5_build_principal_alloc_va::doc}}\index{krb5\_build\_principal\_alloc\_va (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_build_principal_alloc_va:c.krb5_build_principal_alloc_va}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_build\_principal\_alloc\_va}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ princ}, unsigned int\sphinxstyleemphasis{ rlen}, const char *\sphinxstyleemphasis{ realm}, va\_list\sphinxstyleemphasis{ ap}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{princ} - Principal structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rlen} - Realm name length
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{realm} - Realm name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ap} - List of char * components, ending with NULL
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Similar to {\hyperref[\detokenize{appdev/refs/api/krb5_build_principal:c.krb5_build_principal}]{\sphinxcrossref{\sphinxcode{krb5\_build\_principal()}}}} , this function builds a principal name, but its name components are specified as a va\_list.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}]{\sphinxcrossref{\sphinxcode{krb5\_free\_principal()}}}} to deallocate \sphinxstyleemphasis{princ} when it is no longer needed.
-
-
-\subsubsection{krb5\_build\_principal\_ext - Build a principal name using length-counted strings.}
-\label{\detokenize{appdev/refs/api/krb5_build_principal_ext:krb5-build-principal-ext-build-a-principal-name-using-length-counted-strings}}\label{\detokenize{appdev/refs/api/krb5_build_principal_ext::doc}}\index{krb5\_build\_principal\_ext (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_build_principal_ext:c.krb5_build_principal_ext}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_build\_principal\_ext}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ princ}, unsigned int\sphinxstyleemphasis{ rlen}, const char *\sphinxstyleemphasis{ realm}, ...}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{princ} - Principal name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rlen} - Realm name length
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{realm} - Realm name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a principal from a length-counted string and a variable-length list of length-counted components. The list of components ends with the first 0 length argument (so it is not possible to specify an empty component with this function). Call {\hyperref[\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}]{\sphinxcrossref{\sphinxcode{krb5\_free\_principal()}}}} to free allocated memory for principal when it is no longer needed.
-
-Beginning with release 1.20, the name type of the principal will be inferred as \sphinxstylestrong{KRB5\_NT\_SRV\_INST} or \sphinxstylestrong{KRB5\_NT\_WELLKNOWN} based on the principal name. The type will be \sphinxstylestrong{KRB5\_NT\_PRINCIPAL} if a type cannot be inferred.
-
-
-\subsubsection{krb5\_cc\_close - Close a credential cache handle.}
-\label{\detokenize{appdev/refs/api/krb5_cc_close:krb5-cc-close-close-a-credential-cache-handle}}\label{\detokenize{appdev/refs/api/krb5_cc_close::doc}}\index{krb5\_cc\_close (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_close:c.krb5_cc_close}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_close}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function closes a credential cache handle \sphinxstyleemphasis{cache} without affecting the contents of the cache.
-
-
-\subsubsection{krb5\_cc\_default - Resolve the default credential cache name.}
-\label{\detokenize{appdev/refs/api/krb5_cc_default::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_default:krb5-cc-default-resolve-the-default-credential-cache-name}}\index{krb5\_cc\_default (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_default:c.krb5_cc_default}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_default}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}} *\sphinxstyleemphasis{ ccache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ccache} - Pointer to credential cache name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KV5M\_CONTEXT Bad magic number for \_krb5\_context structure
-
-\item {}
-KRB5\_FCC\_INTERNAL The name of the default credential cache cannot be obtained
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Create a handle to the default credential cache as given by {\hyperref[\detokenize{appdev/refs/api/krb5_cc_default_name:c.krb5_cc_default_name}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_default\_name()}}}} .
-
-
-\subsubsection{krb5\_cc\_default\_name - Return the name of the default credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_default_name::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_default_name:krb5-cc-default-name-return-the-name-of-the-default-credential-cache}}\index{krb5\_cc\_default\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_default_name:c.krb5_cc_default_name}}\pysiglinewithargsret{const char * \sphinxbfcode{krb5\_cc\_default\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Name of default credential cache for the current user.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Return a pointer to the default credential cache name for \sphinxstyleemphasis{context} , as determined by a prior call to {\hyperref[\detokenize{appdev/refs/api/krb5_cc_set_default_name:c.krb5_cc_set_default_name}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_set\_default\_name()}}}} , by the KRB5CCNAME environment variable, by the default\_ccache\_name profile variable, or by the operating system or build-time default value. The returned value must not be modified or freed by the caller. The returned value becomes invalid when \sphinxstyleemphasis{context} is destroyed {\hyperref[\detokenize{appdev/refs/api/krb5_free_context:c.krb5_free_context}]{\sphinxcrossref{\sphinxcode{krb5\_free\_context()}}}} or if a subsequent call to {\hyperref[\detokenize{appdev/refs/api/krb5_cc_set_default_name:c.krb5_cc_set_default_name}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_set\_default\_name()}}}} is made on \sphinxstyleemphasis{context} .
-
-The default credential cache name is cached in \sphinxstyleemphasis{context} between calls to this function, so if the value of KRB5CCNAME changes in the process environment after the first call to this function on, that change will not be reflected in later calls with the same context. The caller can invoke {\hyperref[\detokenize{appdev/refs/api/krb5_cc_set_default_name:c.krb5_cc_set_default_name}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_set\_default\_name()}}}} with a NULL value of \sphinxstyleemphasis{name} to clear the cached value and force the default name to be recomputed.
-
-
-\subsubsection{krb5\_cc\_destroy - Destroy a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_destroy:krb5-cc-destroy-destroy-a-credential-cache}}\label{\detokenize{appdev/refs/api/krb5_cc_destroy::doc}}\index{krb5\_cc\_destroy (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_destroy:c.krb5_cc_destroy}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_destroy}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Permission errors
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function destroys any existing contents of \sphinxstyleemphasis{cache} and closes the handle to it.
-
-
-\subsubsection{krb5\_cc\_dup - Duplicate ccache handle.}
-\label{\detokenize{appdev/refs/api/krb5_cc_dup:krb5-cc-dup-duplicate-ccache-handle}}\label{\detokenize{appdev/refs/api/krb5_cc_dup::doc}}\index{krb5\_cc\_dup (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_dup:c.krb5_cc_dup}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_dup}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ in}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}} *\sphinxstyleemphasis{ out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in} - Credential cache handle to be duplicated
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out} - Credential cache handle
-
-\end{description}\end{quote}
-
-Create a new handle referring to the same cache as \sphinxstyleemphasis{in} . The new handle and \sphinxstyleemphasis{in} can be closed independently.
-
-
-\subsubsection{krb5\_cc\_get\_name - Retrieve the name, but not type of a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_get_name::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_get_name:krb5-cc-get-name-retrieve-the-name-but-not-type-of-a-credential-cache}}\index{krb5\_cc\_get\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_get_name:c.krb5_cc_get_name}}\pysiglinewithargsret{const char * \sphinxbfcode{krb5\_cc\_get\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-On success - the name of the credential cache.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{warning}{Warning:}
-Returns the name of the credential cache. The result is an alias into \sphinxstyleemphasis{cache} and should not be freed or modified by the caller. This name does not include the cache type, so should not be used as input to {\hyperref[\detokenize{appdev/refs/api/krb5_cc_resolve:c.krb5_cc_resolve}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_resolve()}}}} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cc\_get\_principal - Get the default principal of a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_get_principal:krb5-cc-get-principal-get-the-default-principal-of-a-credential-cache}}\label{\detokenize{appdev/refs/api/krb5_cc_get_principal::doc}}\index{krb5\_cc\_get\_principal (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_get_principal:c.krb5_cc_get_principal}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_get\_principal}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ principal}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{principal} - Primary principal
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Returns the default client principal of a credential cache as set by {\hyperref[\detokenize{appdev/refs/api/krb5_cc_initialize:c.krb5_cc_initialize}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_initialize()}}}} .
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}]{\sphinxcrossref{\sphinxcode{krb5\_free\_principal()}}}} to free \sphinxstyleemphasis{principal} when it is no longer needed.
-
-
-\subsubsection{krb5\_cc\_get\_type - Retrieve the type of a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_get_type:krb5-cc-get-type-retrieve-the-type-of-a-credential-cache}}\label{\detokenize{appdev/refs/api/krb5_cc_get_type::doc}}\index{krb5\_cc\_get\_type (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_get_type:c.krb5_cc_get_type}}\pysiglinewithargsret{const char * \sphinxbfcode{krb5\_cc\_get\_type}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-The type of a credential cache as an alias that must not be modified or freed by the caller.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_cc\_initialize - Initialize a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_initialize::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_initialize:krb5-cc-initialize-initialize-a-credential-cache}}\index{krb5\_cc\_initialize (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_initialize:c.krb5_cc_initialize}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_initialize}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ principal}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Default principal name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-System errors; Permission errors; Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Destroy any existing contents of \sphinxstyleemphasis{cache} and initialize it for the default principal \sphinxstyleemphasis{principal} .
-
-
-\subsubsection{krb5\_cc\_new\_unique - Create a new credential cache of the specified type with a unique name.}
-\label{\detokenize{appdev/refs/api/krb5_cc_new_unique:krb5-cc-new-unique-create-a-new-credential-cache-of-the-specified-type-with-a-unique-name}}\label{\detokenize{appdev/refs/api/krb5_cc_new_unique::doc}}\index{krb5\_cc\_new\_unique (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_new_unique:c.krb5_cc_new_unique}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_new\_unique}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ type}, const char *\sphinxstyleemphasis{ hint}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}} *\sphinxstyleemphasis{ id}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{type} - Credential cache type name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{hint} - Unused
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{id} - Credential cache handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_cc\_resolve - Resolve a credential cache name.}
-\label{\detokenize{appdev/refs/api/krb5_cc_resolve:krb5-cc-resolve-resolve-a-credential-cache-name}}\label{\detokenize{appdev/refs/api/krb5_cc_resolve::doc}}\index{krb5\_cc\_resolve (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_resolve:c.krb5_cc_resolve}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_resolve}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ name}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}} *\sphinxstyleemphasis{ cache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{name} - Credential cache name to be resolved
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Fills in \sphinxstyleemphasis{cache} with a \sphinxstyleemphasis{cache} handle that corresponds to the name in \sphinxstyleemphasis{name} . \sphinxstyleemphasis{name} should be of the form \sphinxstylestrong{type:residual} , and \sphinxstyleemphasis{type} must be a type known to the library. If the \sphinxstyleemphasis{name} does not contain a colon, interpret it as a file name.
-
-
-\subsubsection{krb5\_change\_password - Change a password for an existing Kerberos account.}
-\label{\detokenize{appdev/refs/api/krb5_change_password:krb5-change-password-change-a-password-for-an-existing-kerberos-account}}\label{\detokenize{appdev/refs/api/krb5_change_password::doc}}\index{krb5\_change\_password (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_change_password:c.krb5_change_password}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_change\_password}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, const char *\sphinxstyleemphasis{ newpw}, int *\sphinxstyleemphasis{ result\_code}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ result\_code\_string}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ result\_string}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{creds} - Credentials for kadmin/changepw service
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{newpw} - New password
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{result\_code} - Numeric error code from server
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{result\_code\_string} - String equivalent to \sphinxstyleemphasis{result\_code}
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{result\_string} - Change password response from the KDC
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Change the password for the existing principal identified by \sphinxstyleemphasis{creds} .
-
-The possible values of the output \sphinxstyleemphasis{result\_code} are:
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_KPASSWD_SUCCESS:KRB5_KPASSWD_SUCCESS}]{\sphinxcrossref{\sphinxcode{KRB5\_KPASSWD\_SUCCESS}}}} (0) - success
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_KPASSWD_MALFORMED:KRB5_KPASSWD_MALFORMED}]{\sphinxcrossref{\sphinxcode{KRB5\_KPASSWD\_MALFORMED}}}} (1) - Malformed request error
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_KPASSWD_HARDERROR:KRB5_KPASSWD_HARDERROR}]{\sphinxcrossref{\sphinxcode{KRB5\_KPASSWD\_HARDERROR}}}} (2) - Server error
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_KPASSWD_AUTHERROR:KRB5_KPASSWD_AUTHERROR}]{\sphinxcrossref{\sphinxcode{KRB5\_KPASSWD\_AUTHERROR}}}} (3) - Authentication error
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_KPASSWD_SOFTERROR:KRB5_KPASSWD_SOFTERROR}]{\sphinxcrossref{\sphinxcode{KRB5\_KPASSWD\_SOFTERROR}}}} (4) - Password change rejected
-
-\end{itemize}
-
-
-\subsubsection{krb5\_chpw\_message - Get a result message for changing or setting a password.}
-\label{\detokenize{appdev/refs/api/krb5_chpw_message:krb5-chpw-message-get-a-result-message-for-changing-or-setting-a-password}}\label{\detokenize{appdev/refs/api/krb5_chpw_message::doc}}\index{krb5\_chpw\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_chpw_message:c.krb5_chpw_message}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_chpw\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ server\_string}, char **\sphinxstyleemphasis{ message\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server\_string} - Data returned from the remote system
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{message\_out} - A message displayable to the user
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function processes the \sphinxstyleemphasis{server\_string} returned in the \sphinxstyleemphasis{result\_string} parameter of {\hyperref[\detokenize{appdev/refs/api/krb5_change_password:c.krb5_change_password}]{\sphinxcrossref{\sphinxcode{krb5\_change\_password()}}}} , {\hyperref[\detokenize{appdev/refs/api/krb5_set_password:c.krb5_set_password}]{\sphinxcrossref{\sphinxcode{krb5\_set\_password()}}}} , and related functions, and returns a displayable string. If \sphinxstyleemphasis{server\_string} contains Active Directory structured policy information, it will be converted into human-readable text.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_string:c.krb5_free_string}]{\sphinxcrossref{\sphinxcode{krb5\_free\_string()}}}} to free \sphinxstyleemphasis{message\_out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_expand\_hostname - Canonicalize a hostname, possibly using name service.}
-\label{\detokenize{appdev/refs/api/krb5_expand_hostname:krb5-expand-hostname-canonicalize-a-hostname-possibly-using-name-service}}\label{\detokenize{appdev/refs/api/krb5_expand_hostname::doc}}\index{krb5\_expand\_hostname (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_expand_hostname:c.krb5_expand_hostname}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_expand\_hostname}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ host}, char **\sphinxstyleemphasis{ canonhost\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{host} - Input hostname
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{canonhost\_out} - Canonicalized hostname
-
-\end{description}\end{quote}
-
-This function canonicalizes orig\_hostname, possibly using name service lookups if configuration permits. Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_string:c.krb5_free_string}]{\sphinxcrossref{\sphinxcode{krb5\_free\_string()}}}} to free \sphinxstyleemphasis{canonhost\_out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.15
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_free\_context - Free a krb5 library context.}
-\label{\detokenize{appdev/refs/api/krb5_free_context:krb5-free-context-free-a-krb5-library-context}}\label{\detokenize{appdev/refs/api/krb5_free_context::doc}}\index{krb5\_free\_context (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_context:c.krb5_free_context}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_context}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\end{description}\end{quote}
-
-This function frees a \sphinxstyleemphasis{context} that was created by {\hyperref[\detokenize{appdev/refs/api/krb5_init_context:c.krb5_init_context}]{\sphinxcrossref{\sphinxcode{krb5\_init\_context()}}}} or {\hyperref[\detokenize{appdev/refs/api/krb5_init_secure_context:c.krb5_init_secure_context}]{\sphinxcrossref{\sphinxcode{krb5\_init\_secure\_context()}}}} .
-
-
-\subsubsection{krb5\_free\_error\_message - Free an error message generated by krb5\_get\_error\_message() .}
-\label{\detokenize{appdev/refs/api/krb5_free_error_message:krb5-free-error-message-free-an-error-message-generated-by-krb5-get-error-message}}\label{\detokenize{appdev/refs/api/krb5_free_error_message::doc}}\index{krb5\_free\_error\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_error_message:c.krb5_free_error_message}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_error\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, const char *\sphinxstyleemphasis{ msg}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{msg} - Pointer to error message
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_free\_principal - Free the storage assigned to a principal.}
-\label{\detokenize{appdev/refs/api/krb5_free_principal::doc}}\label{\detokenize{appdev/refs/api/krb5_free_principal:krb5-free-principal-free-the-storage-assigned-to-a-principal}}\index{krb5\_free\_principal (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_principal}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Principal to be freed
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_fwd\_tgt\_creds - Get a forwarded TGT and format a KRB-CRED message.}
-\label{\detokenize{appdev/refs/api/krb5_fwd_tgt_creds:krb5-fwd-tgt-creds-get-a-forwarded-tgt-and-format-a-krb-cred-message}}\label{\detokenize{appdev/refs/api/krb5_fwd_tgt_creds::doc}}\index{krb5\_fwd\_tgt\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_fwd_tgt_creds:c.krb5_fwd_tgt_creds}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_fwd\_tgt\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, const char *\sphinxstyleemphasis{ rhost}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ client}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ server}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cc}, int\sphinxstyleemphasis{ forwardable}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ outbuf}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rhost} - Remote host
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{client} - Client principal of TGT
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Principal of server to receive TGT
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cc} - Credential cache handle (NULL to use default)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{forwardable} - Whether TGT should be forwardable
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outbuf} - KRB-CRED message
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-ENOMEM Insufficient memory
-
-\item {}
-KRB5\_PRINC\_NOMATCH Requested principal and ticket do not match
-
-\item {}
-KRB5\_NO\_TKT\_SUPPLIED Request did not supply a ticket
-
-\item {}
-KRB5\_CC\_BADNAME Credential cache name or principal name malformed
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Get a TGT for use at the remote host \sphinxstyleemphasis{rhost} and format it into a KRB-CRED message. If \sphinxstyleemphasis{rhost} is NULL and \sphinxstyleemphasis{server} is of type {\hyperref[\detokenize{appdev/refs/macros/KRB5_NT_SRV_HST:KRB5_NT_SRV_HST}]{\sphinxcrossref{\sphinxcode{KRB5\_NT\_SRV\_HST}}}} , the second component of \sphinxstyleemphasis{server} will be used.
-
-
-\subsubsection{krb5\_get\_default\_realm - Retrieve the default realm.}
-\label{\detokenize{appdev/refs/api/krb5_get_default_realm:krb5-get-default-realm-retrieve-the-default-realm}}\label{\detokenize{appdev/refs/api/krb5_get_default_realm::doc}}\index{krb5\_get\_default\_realm (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_default_realm:c.krb5_get_default_realm}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_default\_realm}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, char **\sphinxstyleemphasis{ lrealm}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{lrealm} - Default realm name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Retrieves the default realm to be used if no user-specified realm is available.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_default_realm:c.krb5_free_default_realm}]{\sphinxcrossref{\sphinxcode{krb5\_free\_default\_realm()}}}} to free \sphinxstyleemphasis{lrealm} when it is no longer needed.
-
-
-\subsubsection{krb5\_get\_error\_message - Get the (possibly extended) error message for a code.}
-\label{\detokenize{appdev/refs/api/krb5_get_error_message::doc}}\label{\detokenize{appdev/refs/api/krb5_get_error_message:krb5-get-error-message-get-the-possibly-extended-error-message-for-a-code}}\index{krb5\_get\_error\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_error_message:c.krb5_get_error_message}}\pysiglinewithargsret{const char * \sphinxbfcode{krb5\_get\_error\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}}\sphinxstyleemphasis{ code}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{code} - Error code
-
-\end{description}\end{quote}
-
-The behavior of {\hyperref[\detokenize{appdev/refs/api/krb5_get_error_message:c.krb5_get_error_message}]{\sphinxcrossref{\sphinxcode{krb5\_get\_error\_message()}}}} is only defined the first time it is called after a failed call to a krb5 function using the same context, and only when the error code passed in is the same as that returned by the krb5 function.
-
-This function never returns NULL, so its result may be used unconditionally as a C string.
-
-The string returned by this function must be freed using {\hyperref[\detokenize{appdev/refs/api/krb5_free_error_message:c.krb5_free_error_message}]{\sphinxcrossref{\sphinxcode{krb5\_free\_error\_message()}}}}
-
-\begin{sphinxadmonition}{note}{Note:}
-Future versions may return the same string for the second and following calls.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_get\_host\_realm - Get the Kerberos realm names for a host.}
-\label{\detokenize{appdev/refs/api/krb5_get_host_realm:krb5-get-host-realm-get-the-kerberos-realm-names-for-a-host}}\label{\detokenize{appdev/refs/api/krb5_get_host_realm::doc}}\index{krb5\_get\_host\_realm (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_host_realm:c.krb5_get_host_realm}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_host\_realm}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ host}, char ***\sphinxstyleemphasis{ realmsp}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{host} - Host name (or NULL)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{realmsp} - Null-terminated list of realm names
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-ENOMEM Insufficient memory
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Fill in \sphinxstyleemphasis{realmsp} with a pointer to a null-terminated list of realm names. If there are no known realms for the host, a list containing the referral (empty) realm is returned.
-
-If \sphinxstyleemphasis{host} is NULL, the local host’s realms are determined.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_host_realm:c.krb5_free_host_realm}]{\sphinxcrossref{\sphinxcode{krb5\_free\_host\_realm()}}}} to release \sphinxstyleemphasis{realmsp} when it is no longer needed.
-
-
-\subsubsection{krb5\_get\_credentials - Get an additional ticket.}
-\label{\detokenize{appdev/refs/api/krb5_get_credentials:krb5-get-credentials-get-an-additional-ticket}}\label{\detokenize{appdev/refs/api/krb5_get_credentials::doc}}\index{krb5\_get\_credentials (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_credentials:c.krb5_get_credentials}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_credentials}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ options}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ in\_creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} **\sphinxstyleemphasis{ out\_creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{options} - Options
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_creds} - Input credentials
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out\_creds} - Output updated credentials
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use \sphinxstyleemphasis{ccache} or a TGS exchange to get a service ticket matching \sphinxstyleemphasis{in\_creds} .
-
-Valid values for \sphinxstyleemphasis{options} are:
-\begin{quote}
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_GC_CACHED:KRB5_GC_CACHED}]{\sphinxcrossref{\sphinxcode{KRB5\_GC\_CACHED}}}} Search only credential cache for the ticket
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_GC_USER_USER:KRB5_GC_USER_USER}]{\sphinxcrossref{\sphinxcode{KRB5\_GC\_USER\_USER}}}} Return a user to user authentication ticket
-
-\end{itemize}
-
-\sphinxstyleemphasis{in\_creds} must be non-null. \sphinxstyleemphasis{in\_creds-\textgreater{}client} and \sphinxstyleemphasis{in\_creds-\textgreater{}server} must be filled in to specify the client and the server respectively. If any authorization data needs to be requested for the service ticket (such as restrictions on how the ticket can be used), specify it in \sphinxstyleemphasis{in\_creds-\textgreater{}authdata} ; otherwise set \sphinxstyleemphasis{in\_creds-\textgreater{}authdata} to NULL. The session key type is specified in \sphinxstyleemphasis{in\_creds-\textgreater{}keyblock.enctype} , if it is nonzero.
-\end{quote}
-
-The expiration date is specified in \sphinxstyleemphasis{in\_creds-\textgreater{}times.endtime} . The KDC may return tickets with an earlier expiration date. If \sphinxstyleemphasis{in\_creds-\textgreater{}times.endtime} is set to 0, the latest possible expiration date will be requested.
-
-Any returned ticket and intermediate ticket-granting tickets are stored in \sphinxstyleemphasis{ccache} .
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_creds:c.krb5_free_creds}]{\sphinxcrossref{\sphinxcode{krb5\_free\_creds()}}}} to free \sphinxstyleemphasis{out\_creds} when it is no longer needed.
-
-
-\subsubsection{krb5\_get\_fallback\_host\_realm}
-\label{\detokenize{appdev/refs/api/krb5_get_fallback_host_realm:krb5-get-fallback-host-realm}}\label{\detokenize{appdev/refs/api/krb5_get_fallback_host_realm::doc}}\index{krb5\_get\_fallback\_host\_realm (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_fallback_host_realm:c.krb5_get_fallback_host_realm}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_fallback\_host\_realm}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ hdata}, char ***\sphinxstyleemphasis{ realmsp}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{hdata} - Host name (or NULL)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{realmsp} - Null-terminated list of realm names
-
-\end{description}\end{quote}
-
-Fill in \sphinxstyleemphasis{realmsp} with a pointer to a null-terminated list of realm names obtained through heuristics or insecure resolution methods which have lower priority than KDC referrals.
-
-If \sphinxstyleemphasis{host} is NULL, the local host’s realms are determined.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_host_realm:c.krb5_free_host_realm}]{\sphinxcrossref{\sphinxcode{krb5\_free\_host\_realm()}}}} to release \sphinxstyleemphasis{realmsp} when it is no longer needed.
-
-
-\subsubsection{krb5\_get\_init\_creds\_keytab - Get initial credentials using a key table.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_keytab:krb5-get-init-creds-keytab-get-initial-credentials-using-a-key-table}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_keytab::doc}}\index{krb5\_get\_init\_creds\_keytab (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_keytab:c.krb5_get_init_creds_keytab}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_keytab}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ client}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ arg\_keytab}, {\hyperref[\detokenize{appdev/refs/types/krb5_deltat:c.krb5_deltat}]{\sphinxcrossref{krb5\_deltat}}}\sphinxstyleemphasis{ start\_time}, const char *\sphinxstyleemphasis{ in\_tkt\_service}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ k5\_gic\_options}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{creds} - New credentials
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{client} - Client principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{arg\_keytab} - Key table handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{start\_time} - Time when ticket becomes valid (0 for now)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_tkt\_service} - Service name of initial credentials (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{k5\_gic\_options} - Initial credential options
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function requests KDC for an initial credentials for \sphinxstyleemphasis{client} using a client key stored in \sphinxstyleemphasis{arg\_keytab} . If \sphinxstyleemphasis{in\_tkt\_service} is specified, it is parsed as a principal name (with the realm ignored) and used as the service principal for the request; otherwise the ticket-granting service is used.
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_alloc - Allocate a new initial credential options structure.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_alloc:krb5-get-init-creds-opt-alloc-allocate-a-new-initial-credential-options-structure}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_alloc::doc}}\index{krb5\_get\_init\_creds\_opt\_alloc (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_alloc:c.krb5_get_init_creds_opt_alloc}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_alloc}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} **\sphinxstyleemphasis{ opt}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{opt} - New options structure
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 - Success; Kerberos errors otherwise.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function is the preferred way to create an options structure for getting initial credentials, and is required to make use of certain options. Use {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_free:c.krb5_get_init_creds_opt_free}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_free()}}}} to free \sphinxstyleemphasis{opt} when it is no longer needed.
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_free - Free initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_free::doc}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_free:krb5-get-init-creds-opt-free-free-initial-credential-options}}\index{krb5\_get\_init\_creds\_opt\_free (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_free:c.krb5_get_init_creds_opt_free}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_free}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure to free
-
-\end{description}\end{quote}
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_alloc:c.krb5_get_init_creds_opt_alloc}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_alloc()}}}}
-
-
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_get\_fast\_flags - Retrieve FAST flags from initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags::doc}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags:krb5-get-init-creds-opt-get-fast-flags-retrieve-fast-flags-from-initial-credential-options}}\index{krb5\_get\_init\_creds\_opt\_get\_fast\_flags (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_get_fast_flags:c.krb5_get_init_creds_opt_get_fast_flags}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_get\_fast\_flags}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} *\sphinxstyleemphasis{ out\_flags}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out\_flags} - FAST flags
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 - Success; Kerberos errors otherwise.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_address\_list - Set address restrictions in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_address_list:krb5-get-init-creds-opt-set-address-list-set-address-restrictions-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_address_list::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_address\_list (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_address_list:c.krb5_get_init_creds_opt_set_address_list}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_address\_list}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} **\sphinxstyleemphasis{ addresses}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{addresses} - Null-terminated array of addresses
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_anonymous - Set or unset the anonymous flag in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_anonymous:krb5-get-init-creds-opt-set-anonymous-set-or-unset-the-anonymous-flag-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_anonymous::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_anonymous (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_anonymous:c.krb5_get_init_creds_opt_set_anonymous}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_anonymous}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, int\sphinxstyleemphasis{ anonymous}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{anonymous} - Whether to make an anonymous request
-
-\end{description}\end{quote}
-
-This function may be used to request anonymous credentials from the KDC by setting \sphinxstyleemphasis{anonymous} to non-zero. Note that anonymous credentials are only a request; clients must verify that credentials are anonymous if that is a requirement.
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_canonicalize - Set or unset the canonicalize flag in initialcredential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize:krb5-get-init-creds-opt-set-canonicalize-set-or-unset-the-canonicalize-flag-in-initialcredential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_canonicalize (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_canonicalize:c.krb5_get_init_creds_opt_set_canonicalize}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_canonicalize}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, int\sphinxstyleemphasis{ canonicalize}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{canonicalize} - Whether to canonicalize client principal
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_change\_password\_prompt - Set or unset change-password-prompt flag in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt::doc}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt:krb5-get-init-creds-opt-set-change-password-prompt-set-or-unset-change-password-prompt-flag-in-initial-credential-options}}\index{krb5\_get\_init\_creds\_opt\_set\_change\_password\_prompt (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_change_password_prompt:c.krb5_get_init_creds_opt_set_change_password_prompt}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_change\_password\_prompt}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, int\sphinxstyleemphasis{ prompt}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{prompt} - Whether to prompt to change password
-
-\end{description}\end{quote}
-
-This flag is on by default. It controls whether {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_password:c.krb5_get_init_creds_password}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_password()}}}} will react to an expired-password error by prompting for a new password and attempting to change the old one.
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_etype\_list - Set allowable encryption types in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_etype_list:krb5-get-init-creds-opt-set-etype-list-set-allowable-encryption-types-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_etype_list::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_etype\_list (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_etype_list:c.krb5_get_init_creds_opt_set_etype_list}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_etype\_list}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} *\sphinxstyleemphasis{ etype\_list}, int\sphinxstyleemphasis{ etype\_list\_length}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{etype\_list} - Array of encryption types
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{etype\_list\_length} - Length of \sphinxstyleemphasis{etype\_list}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_expire\_callback - Set an expiration callback in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback::doc}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback:krb5-get-init-creds-opt-set-expire-callback-set-an-expiration-callback-in-initial-credential-options}}\index{krb5\_get\_init\_creds\_opt\_set\_expire\_callback (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_expire_callback:c.krb5_get_init_creds_opt_set_expire_callback}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_expire\_callback}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_expire_callback_func:c.krb5_expire_callback_func}]{\sphinxcrossref{krb5\_expire\_callback\_func}}}\sphinxstyleemphasis{ cb}, void *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cb} - Callback function
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - Callback argument
-
-\end{description}\end{quote}
-
-Set a callback to receive password and account expiration times.
-\begin{quote}
-
-\sphinxstyleemphasis{cb} will be invoked if and only if credentials are successfully acquired. The callback will receive the \sphinxstyleemphasis{context} from the calling function and the \sphinxstyleemphasis{data} argument supplied with this API. The remaining arguments should be interpreted as follows:
-\end{quote}
-
-If \sphinxstyleemphasis{is\_last\_req} is true, then the KDC reply contained last-req entries which unambiguously indicated the password expiration, account expiration, or both. (If either value was not present, the corresponding argument will be 0.) Furthermore, a non-zero \sphinxstyleemphasis{password\_expiration} should be taken as a suggestion from the KDC that a warning be displayed.
-
-If \sphinxstyleemphasis{is\_last\_req} is false, then \sphinxstyleemphasis{account\_expiration} will be 0 and \sphinxstyleemphasis{password\_expiration} will contain the expiration time of either the password or account, or 0 if no expiration time was indicated in the KDC reply. The callback should independently decide whether to display a password expiration warning.
-
-Note that \sphinxstyleemphasis{cb} may be invoked even if credentials are being acquired for the kadmin/changepw service in order to change the password. It is the caller’s responsibility to avoid displaying a password expiry warning in this case.
-
-\begin{sphinxadmonition}{warning}{Warning:}
-Setting an expire callback with this API will cause {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_password:c.krb5_get_init_creds_password}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_password()}}}} not to send password expiry warnings to the prompter, as it ordinarily may.
-\end{sphinxadmonition}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_fast\_ccache - Set FAST armor cache in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache::doc}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache:krb5-get-init-creds-opt-set-fast-ccache-set-fast-armor-cache-in-initial-credential-options}}\index{krb5\_get\_init\_creds\_opt\_set\_fast\_ccache (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache:c.krb5_get_init_creds_opt_set_fast_ccache}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_fast\_ccache}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache handle
-
-\end{description}\end{quote}
-
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name:c.krb5_get_init_creds_opt_set_fast_ccache_name}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_set\_fast\_ccache\_name()}}}} , but uses a credential cache handle instead of a name.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_fast\_ccache\_name - Set location of FAST armor ccache in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name:krb5-get-init-creds-opt-set-fast-ccache-name-set-location-of-fast-armor-ccache-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_fast\_ccache\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name:c.krb5_get_init_creds_opt_set_fast_ccache_name}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_fast\_ccache\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, const char *\sphinxstyleemphasis{ fast\_ccache\_name}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fast\_ccache\_name} - Credential cache name
-
-\end{description}\end{quote}
-
-Sets the location of a credential cache containing an armor ticket to protect an initial credential exchange using the FAST protocol extension.
-
-In version 1.7, setting an armor ccache requires that FAST be used for the exchange. In version 1.8 or later, setting the armor ccache causes FAST to be used if the KDC supports it; {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags:c.krb5_get_init_creds_opt_set_fast_flags}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_set\_fast\_flags()}}}} must be used to require that FAST be used.
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_fast\_flags - Set FAST flags in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags:krb5-get-init-creds-opt-set-fast-flags-set-fast-flags-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_fast\_flags (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_flags:c.krb5_get_init_creds_opt_set_fast_flags}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_fast\_flags}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ flags}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - FAST flags
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 - Success; Kerberos errors otherwise.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-The following flag values are valid:
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_FAST_REQUIRED:KRB5_FAST_REQUIRED}]{\sphinxcrossref{\sphinxcode{KRB5\_FAST\_REQUIRED}}}} - Require FAST to be used
-
-\end{itemize}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_forwardable - Set or unset the forwardable flag in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_forwardable:krb5-get-init-creds-opt-set-forwardable-set-or-unset-the-forwardable-flag-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_forwardable::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_forwardable (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_forwardable:c.krb5_get_init_creds_opt_set_forwardable}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_forwardable}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, int\sphinxstyleemphasis{ forwardable}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{forwardable} - Whether credentials should be forwardable
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_in\_ccache - Set an input credential cache in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache::doc}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache:krb5-get-init-creds-opt-set-in-ccache-set-an-input-credential-cache-in-initial-credential-options}}\index{krb5\_get\_init\_creds\_opt\_set\_in\_ccache (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_in_ccache:c.krb5_get_init_creds_opt_set_in_ccache}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_in\_ccache}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache handle
-
-\end{description}\end{quote}
-
-If an input credential cache is set, then the krb5\_get\_init\_creds family of APIs will read settings from it. Setting an input ccache is desirable when the application wishes to perform authentication in the same way (using the same preauthentication mechanisms, and making the same non-security- sensitive choices) as the previous authentication attempt, which stored information in the passed-in ccache.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_out\_ccache - Set an output credential cache in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache:krb5-get-init-creds-opt-set-out-ccache-set-an-output-credential-cache-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_out\_ccache (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_out_ccache:c.krb5_get_init_creds_opt_set_out_ccache}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_out\_ccache}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache handle
-
-\end{description}\end{quote}
-
-If an output credential cache is set, then the krb5\_get\_init\_creds family of APIs will write credentials to it. Setting an output ccache is desirable both because it simplifies calling code and because it permits the krb5\_get\_init\_creds APIs to write out configuration information about the realm to the ccache.
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_pa - Supply options for preauthentication in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_pa::doc}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_pa:krb5-get-init-creds-opt-set-pa-supply-options-for-preauthentication-in-initial-credential-options}}\index{krb5\_get\_init\_creds\_opt\_set\_pa (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_pa:c.krb5_get_init_creds_opt_set_pa}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_pa}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, const char *\sphinxstyleemphasis{ attr}, const char *\sphinxstyleemphasis{ value}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{attr} - Preauthentication option name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{value} - Preauthentication option value
-
-\end{description}\end{quote}
-
-This function allows the caller to supply options for preauthentication. The values of \sphinxstyleemphasis{attr} and \sphinxstyleemphasis{value} are supplied to each preauthentication module available within \sphinxstyleemphasis{context} .
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_pac\_request - Ask the KDC to include or not include a PAC in the ticket.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_pac_request:krb5-get-init-creds-opt-set-pac-request-ask-the-kdc-to-include-or-not-include-a-pac-in-the-ticket}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_pac_request::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_pac\_request (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_pac_request:c.krb5_get_init_creds_opt_set_pac_request}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_pac\_request}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}}\sphinxstyleemphasis{ req\_pac}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{req\_pac} - Whether to request a PAC or not
-
-\end{description}\end{quote}
-
-If this option is set, the AS request will include a PAC-REQUEST pa-data item explicitly asking the KDC to either include or not include a privilege attribute certificate in the ticket authorization data. By default, no request is made; typically the KDC will default to including a PAC if it supports them.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.15
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_preauth\_list - Set preauthentication types in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list:krb5-get-init-creds-opt-set-preauth-list-set-preauthentication-types-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_preauth\_list (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_preauth_list:c.krb5_get_init_creds_opt_set_preauth_list}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_preauth\_list}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_preauthtype:c.krb5_preauthtype}]{\sphinxcrossref{krb5\_preauthtype}}} *\sphinxstyleemphasis{ preauth\_list}, int\sphinxstyleemphasis{ preauth\_list\_length}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{preauth\_list} - Array of preauthentication types
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{preauth\_list\_length} - Length of \sphinxstyleemphasis{preauth\_list}
-
-\end{description}\end{quote}
-
-This function can be used to perform optimistic preauthentication when getting initial credentials, in combination with {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_salt:c.krb5_get_init_creds_opt_set_salt}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_set\_salt()}}}} and {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_pa:c.krb5_get_init_creds_opt_set_pa}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_set\_pa()}}}} .
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_proxiable - Set or unset the proxiable flag in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_proxiable::doc}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_proxiable:krb5-get-init-creds-opt-set-proxiable-set-or-unset-the-proxiable-flag-in-initial-credential-options}}\index{krb5\_get\_init\_creds\_opt\_set\_proxiable (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_proxiable:c.krb5_get_init_creds_opt_set_proxiable}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_proxiable}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, int\sphinxstyleemphasis{ proxiable}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{proxiable} - Whether credentials should be proxiable
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_renew\_life - Set the ticket renewal lifetime in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_renew_life::doc}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_renew_life:krb5-get-init-creds-opt-set-renew-life-set-the-ticket-renewal-lifetime-in-initial-credential-options}}\index{krb5\_get\_init\_creds\_opt\_set\_renew\_life (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_renew_life:c.krb5_get_init_creds_opt_set_renew_life}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_renew\_life}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_deltat:c.krb5_deltat}]{\sphinxcrossref{krb5\_deltat}}}\sphinxstyleemphasis{ renew\_life}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Pointer to \sphinxstyleemphasis{options} field
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{renew\_life} - Ticket renewal lifetime
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_responder - Set the responder function in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_responder:krb5-get-init-creds-opt-set-responder-set-the-responder-function-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_responder::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_responder (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_responder:c.krb5_get_init_creds_opt_set_responder}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_responder}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_fn:c.krb5_responder_fn}]{\sphinxcrossref{krb5\_responder\_fn}}}\sphinxstyleemphasis{ responder}, void *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{responder} - Responder function
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - Responder data argument
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_salt - Set salt for optimistic preauthentication in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_salt:krb5-get-init-creds-opt-set-salt-set-salt-for-optimistic-preauthentication-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_salt::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_salt (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_salt:c.krb5_get_init_creds_opt_set_salt}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_salt}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ salt}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{salt} - Salt data
-
-\end{description}\end{quote}
-
-When getting initial credentials with a password, a salt string it used to convert the password to a key. Normally this salt is obtained from the first KDC reply, but when performing optimistic preauthentication, the client may need to supply the salt string with this function.
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_set\_tkt\_life - Set the ticket lifetime in initial credential options.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life:krb5-get-init-creds-opt-set-tkt-life-set-the-ticket-lifetime-in-initial-credential-options}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life::doc}}\index{krb5\_get\_init\_creds\_opt\_set\_tkt\_life (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_tkt_life:c.krb5_get_init_creds_opt_set_tkt_life}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_set\_tkt\_life}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_deltat:c.krb5_deltat}]{\sphinxcrossref{krb5\_deltat}}}\sphinxstyleemphasis{ tkt\_life}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{tkt\_life} - Ticket lifetime
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_init\_creds\_password - Get initial credentials using a password.}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_password::doc}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_password:krb5-get-init-creds-password-get-initial-credentials-using-a-password}}\index{krb5\_get\_init\_creds\_password (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_password:c.krb5_get_init_creds_password}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_init\_creds\_password}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ client}, const char *\sphinxstyleemphasis{ password}, {\hyperref[\detokenize{appdev/refs/types/krb5_prompter_fct:c.krb5_prompter_fct}]{\sphinxcrossref{krb5\_prompter\_fct}}}\sphinxstyleemphasis{ prompter}, void *\sphinxstyleemphasis{ data}, {\hyperref[\detokenize{appdev/refs/types/krb5_deltat:c.krb5_deltat}]{\sphinxcrossref{krb5\_deltat}}}\sphinxstyleemphasis{ start\_time}, const char *\sphinxstyleemphasis{ in\_tkt\_service}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ k5\_gic\_options}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{creds} - New credentials
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{client} - Client principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{password} - Password (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{prompter} - Prompter function
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - Prompter callback data
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{start\_time} - Time when ticket becomes valid (0 for now)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_tkt\_service} - Service name of initial credentials (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{k5\_gic\_options} - Initial credential options
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-EINVAL Invalid argument
-
-\item {}
-KRB5\_KDC\_UNREACH Cannot contact any KDC for requested realm
-
-\item {}
-KRB5\_PREAUTH\_FAILED Generic Pre-athentication failure
-
-\item {}
-KRB5\_LIBOS\_PWDINTR Password read interrupted
-
-\item {}
-KRB5\_REALM\_CANT\_RESOLVE Cannot resolve network address for KDC in requested realm
-
-\item {}
-KRB5KDC\_ERR\_KEY\_EXP Password has expired
-
-\item {}
-KRB5\_LIBOS\_BADPWDMATCH Password mismatch
-
-\item {}
-KRB5\_CHPW\_PWDNULL New password cannot be zero length
-
-\item {}
-KRB5\_CHPW\_FAIL Password change failed
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function requests KDC for an initial credentials for \sphinxstyleemphasis{client} using \sphinxstyleemphasis{password} . If \sphinxstyleemphasis{password} is NULL, a password will be prompted for using \sphinxstyleemphasis{prompter} if necessary. If \sphinxstyleemphasis{in\_tkt\_service} is specified, it is parsed as a principal name (with the realm ignored) and used as the service principal for the request; otherwise the ticket-granting service is used.
-
-
-\subsubsection{krb5\_get\_profile - Retrieve configuration profile from the context.}
-\label{\detokenize{appdev/refs/api/krb5_get_profile::doc}}\label{\detokenize{appdev/refs/api/krb5_get_profile:krb5-get-profile-retrieve-configuration-profile-from-the-context}}\index{krb5\_get\_profile (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_profile:c.krb5_get_profile}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_profile}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, struct \_profile\_t **\sphinxstyleemphasis{ profile}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{profile} - Pointer to data read from a configuration file
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new \sphinxstyleemphasis{profile} object that reflects profile in the supplied \sphinxstyleemphasis{context} .
-
-The \sphinxstyleemphasis{profile} object may be freed with profile\_release() function. See profile.h and profile API for more details.
-
-
-\subsubsection{krb5\_get\_prompt\_types - Get prompt types array from a context.}
-\label{\detokenize{appdev/refs/api/krb5_get_prompt_types::doc}}\label{\detokenize{appdev/refs/api/krb5_get_prompt_types:krb5-get-prompt-types-get-prompt-types-array-from-a-context}}\index{krb5\_get\_prompt\_types (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_prompt_types:c.krb5_get_prompt_types}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_prompt_type:c.krb5_prompt_type}]{\sphinxcrossref{krb5\_prompt\_type}}} * \sphinxbfcode{krb5\_get\_prompt\_types}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Pointer to an array of prompt types corresponding to the prompter’s prompts arguments. Each type has one of the following values: KRB5\_PROMPT\_TYPE\_PASSWORD KRB5\_PROMPT\_TYPE\_NEW\_PASSWORD KRB5\_PROMPT\_TYPE\_NEW\_PASSWORD\_AGAIN KRB5\_PROMPT\_TYPE\_PREAUTH
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_renewed\_creds - Get renewed credential from KDC using an existing credential.}
-\label{\detokenize{appdev/refs/api/krb5_get_renewed_creds:krb5-get-renewed-creds-get-renewed-credential-from-kdc-using-an-existing-credential}}\label{\detokenize{appdev/refs/api/krb5_get_renewed_creds::doc}}\index{krb5\_get\_renewed\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_renewed_creds:c.krb5_get_renewed_creds}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_renewed\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ client}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, const char *\sphinxstyleemphasis{ in\_tkt\_service}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{creds} - Renewed credentials
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{client} - Client principal name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_tkt\_service} - Server principal string (or NULL)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function gets a renewed credential using an existing one from \sphinxstyleemphasis{ccache} . If \sphinxstyleemphasis{in\_tkt\_service} is specified, it is parsed (with the realm part ignored) and used as the server principal of the credential; otherwise, the ticket-granting service is used.
-
-If successful, the renewed credential is placed in \sphinxstyleemphasis{creds} .
-
-
-\subsubsection{krb5\_get\_validated\_creds - Get validated credentials from the KDC.}
-\label{\detokenize{appdev/refs/api/krb5_get_validated_creds:krb5-get-validated-creds-get-validated-credentials-from-the-kdc}}\label{\detokenize{appdev/refs/api/krb5_get_validated_creds::doc}}\index{krb5\_get\_validated\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_validated_creds:c.krb5_get_validated_creds}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_validated\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ client}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, const char *\sphinxstyleemphasis{ in\_tkt\_service}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{creds} - Validated credentials
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{client} - Client principal name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_tkt\_service} - Server principal string (or NULL)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KRB5\_NO\_2ND\_TKT Request missing second ticket
-
-\item {}
-KRB5\_NO\_TKT\_SUPPLIED Request did not supply a ticket
-
-\item {}
-KRB5\_PRINC\_NOMATCH Requested principal and ticket do not match
-
-\item {}
-KRB5\_KDCREP\_MODIFIED KDC reply did not match expectations
-
-\item {}
-KRB5\_KDCREP\_SKEW Clock skew too great in KDC reply
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function gets a validated credential using a postdated credential from \sphinxstyleemphasis{ccache} . If \sphinxstyleemphasis{in\_tkt\_service} is specified, it is parsed (with the realm part ignored) and used as the server principal of the credential; otherwise, the ticket-granting service is used.
-
-If successful, the validated credential is placed in \sphinxstyleemphasis{creds} .
-
-
-\subsubsection{krb5\_init\_context - Create a krb5 library context.}
-\label{\detokenize{appdev/refs/api/krb5_init_context:krb5-init-context-create-a-krb5-library-context}}\label{\detokenize{appdev/refs/api/krb5_init_context::doc}}\index{krb5\_init\_context (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_context:c.krb5_init_context}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_context}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}} *\sphinxstyleemphasis{ context}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{context} - Library context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-The \sphinxstyleemphasis{context} must be released by calling {\hyperref[\detokenize{appdev/refs/api/krb5_free_context:c.krb5_free_context}]{\sphinxcrossref{\sphinxcode{krb5\_free\_context()}}}} when it is no longer needed.
-
-\begin{sphinxadmonition}{warning}{Warning:}
-Any program or module that needs the Kerberos code to not trust the environment must use {\hyperref[\detokenize{appdev/refs/api/krb5_init_secure_context:c.krb5_init_secure_context}]{\sphinxcrossref{\sphinxcode{krb5\_init\_secure\_context()}}}} , or clean out the environment.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_init\_secure\_context - Create a krb5 library context using only configuration files.}
-\label{\detokenize{appdev/refs/api/krb5_init_secure_context::doc}}\label{\detokenize{appdev/refs/api/krb5_init_secure_context:krb5-init-secure-context-create-a-krb5-library-context-using-only-configuration-files}}\index{krb5\_init\_secure\_context (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_secure_context:c.krb5_init_secure_context}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_secure\_context}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}} *\sphinxstyleemphasis{ context}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{context} - Library context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Create a context structure, using only system configuration files. All information passed through the environment variables is ignored.
-
-The \sphinxstyleemphasis{context} must be released by calling {\hyperref[\detokenize{appdev/refs/api/krb5_free_context:c.krb5_free_context}]{\sphinxcrossref{\sphinxcode{krb5\_free\_context()}}}} when it is no longer needed.
-
-
-\subsubsection{krb5\_is\_config\_principal - Test whether a principal is a configuration principal.}
-\label{\detokenize{appdev/refs/api/krb5_is_config_principal:krb5-is-config-principal-test-whether-a-principal-is-a-configuration-principal}}\label{\detokenize{appdev/refs/api/krb5_is_config_principal::doc}}\index{krb5\_is\_config\_principal (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_is_config_principal:c.krb5_is_config_principal}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_is\_config\_principal}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Principal to check
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-TRUE if the principal is a configuration principal (generated part of krb5\_cc\_set\_config() ); FALSE otherwise.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_is\_thread\_safe - Test whether the Kerberos library was built with multithread support.}
-\label{\detokenize{appdev/refs/api/krb5_is_thread_safe::doc}}\label{\detokenize{appdev/refs/api/krb5_is_thread_safe:krb5-is-thread-safe-test-whether-the-kerberos-library-was-built-with-multithread-support}}\index{krb5\_is\_thread\_safe (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_is_thread_safe:c.krb5_is_thread_safe}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_is\_thread\_safe}}{void\sphinxstyleemphasis{ None}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{None}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-TRUE if the library is threadsafe; FALSE otherwise
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_kt\_close - Close a key table handle.}
-\label{\detokenize{appdev/refs/api/krb5_kt_close:krb5-kt-close-close-a-key-table-handle}}\label{\detokenize{appdev/refs/api/krb5_kt_close::doc}}\index{krb5\_kt\_close (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_close:c.krb5_kt_close}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_close}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 None
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_kt\_client\_default - Resolve the default client key table.}
-\label{\detokenize{appdev/refs/api/krb5_kt_client_default::doc}}\label{\detokenize{appdev/refs/api/krb5_kt_client_default:krb5-kt-client-default-resolve-the-default-client-key-table}}\index{krb5\_kt\_client\_default (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_client_default:c.krb5_kt_client_default}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_client\_default}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}} *\sphinxstyleemphasis{ keytab\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{keytab\_out} - Key table handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Fill \sphinxstyleemphasis{keytab\_out} with a handle to the default client key table.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_kt\_default - Resolve the default key table.}
-\label{\detokenize{appdev/refs/api/krb5_kt_default:krb5-kt-default-resolve-the-default-key-table}}\label{\detokenize{appdev/refs/api/krb5_kt_default::doc}}\index{krb5\_kt\_default (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_default:c.krb5_kt_default}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_default}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}} *\sphinxstyleemphasis{ id}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{id} - Key table handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Set \sphinxstyleemphasis{id} to a handle to the default key table. The key table is not opened.
-
-
-\subsubsection{krb5\_kt\_default\_name - Get the default key table name.}
-\label{\detokenize{appdev/refs/api/krb5_kt_default_name::doc}}\label{\detokenize{appdev/refs/api/krb5_kt_default_name:krb5-kt-default-name-get-the-default-key-table-name}}\index{krb5\_kt\_default\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_default_name:c.krb5_kt_default_name}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_default\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, char *\sphinxstyleemphasis{ name}, int\sphinxstyleemphasis{ name\_size}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{name} - Default key table name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{name\_size} - Space available in \sphinxstyleemphasis{name}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KRB5\_CONFIG\_NOTENUFSPACE Buffer is too short
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Fill \sphinxstyleemphasis{name} with the name of the default key table for \sphinxstyleemphasis{context} .
-
-
-\subsubsection{krb5\_kt\_dup - Duplicate keytab handle.}
-\label{\detokenize{appdev/refs/api/krb5_kt_dup:krb5-kt-dup-duplicate-keytab-handle}}\label{\detokenize{appdev/refs/api/krb5_kt_dup::doc}}\index{krb5\_kt\_dup (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_dup:c.krb5_kt_dup}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_dup}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ in}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}} *\sphinxstyleemphasis{ out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in} - Key table handle to be duplicated
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out} - Key table handle
-
-\end{description}\end{quote}
-
-Create a new handle referring to the same key table as \sphinxstyleemphasis{in} . The new handle and \sphinxstyleemphasis{in} can be closed independently.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.12
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_kt\_get\_name - Get a key table name.}
-\label{\detokenize{appdev/refs/api/krb5_kt_get_name::doc}}\label{\detokenize{appdev/refs/api/krb5_kt_get_name:krb5-kt-get-name-get-a-key-table-name}}\index{krb5\_kt\_get\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_get_name:c.krb5_kt_get_name}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_get\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}, char *\sphinxstyleemphasis{ name}, unsigned int\sphinxstyleemphasis{ namelen}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{name} - Key table name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{namelen} - Maximum length to fill in name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KRB5\_KT\_NAME\_TOOLONG Key table name does not fit in namelen bytes
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Fill \sphinxstyleemphasis{name} with the name of \sphinxstyleemphasis{keytab} including the type and delimiter.
-
-
-\subsubsection{krb5\_kt\_get\_type - Return the type of a key table.}
-\label{\detokenize{appdev/refs/api/krb5_kt_get_type:krb5-kt-get-type-return-the-type-of-a-key-table}}\label{\detokenize{appdev/refs/api/krb5_kt_get_type::doc}}\index{krb5\_kt\_get\_type (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_get_type:c.krb5_kt_get_type}}\pysiglinewithargsret{const char * \sphinxbfcode{krb5\_kt\_get\_type}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-The type of a key table as an alias that must not be modified or freed by the caller.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_kt\_resolve - Get a handle for a key table.}
-\label{\detokenize{appdev/refs/api/krb5_kt_resolve:krb5-kt-resolve-get-a-handle-for-a-key-table}}\label{\detokenize{appdev/refs/api/krb5_kt_resolve::doc}}\index{krb5\_kt\_resolve (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_resolve:c.krb5_kt_resolve}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_resolve}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ name}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}} *\sphinxstyleemphasis{ ktid}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{name} - Name of the key table
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ktid} - Key table handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Resolve the key table name \sphinxstyleemphasis{name} and set \sphinxstyleemphasis{ktid} to a handle identifying the key table. Use {\hyperref[\detokenize{appdev/refs/api/krb5_kt_close:c.krb5_kt_close}]{\sphinxcrossref{\sphinxcode{krb5\_kt\_close()}}}} to free \sphinxstyleemphasis{ktid} when it is no longer needed.
-\begin{quote}
-
-\sphinxstyleemphasis{name} must be of the form \sphinxstylestrong{type:residual} , where \sphinxstyleemphasis{type} must be a type known to the library and \sphinxstyleemphasis{residual} portion should be specific to the particular keytab type. If no \sphinxstyleemphasis{type} is given, the default is \sphinxstylestrong{FILE} .
-\end{quote}
-
-If \sphinxstyleemphasis{name} is of type \sphinxstylestrong{FILE} , the keytab file is not opened by this call.
-
-
-\subsubsection{krb5\_kuserok - Determine if a principal is authorized to log in as a local user.}
-\label{\detokenize{appdev/refs/api/krb5_kuserok:krb5-kuserok-determine-if-a-principal-is-authorized-to-log-in-as-a-local-user}}\label{\detokenize{appdev/refs/api/krb5_kuserok::doc}}\index{krb5\_kuserok (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kuserok:c.krb5_kuserok}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_kuserok}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ principal}, const char *\sphinxstyleemphasis{ luser}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Principal name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{luser} - Local username
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-TRUE Principal is authorized to log in as user; FALSE otherwise.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Determine whether \sphinxstyleemphasis{principal} is authorized to log in as a local user \sphinxstyleemphasis{luser} .
-
-
-\subsubsection{krb5\_parse\_name - Convert a string principal name to a krb5\_principal structure.}
-\label{\detokenize{appdev/refs/api/krb5_parse_name::doc}}\label{\detokenize{appdev/refs/api/krb5_parse_name:krb5-parse-name-convert-a-string-principal-name-to-a-krb5-principal-structure}}\index{krb5\_parse\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_parse_name:c.krb5_parse_name}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_parse\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ name}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ principal\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{name} - String representation of a principal name
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{principal\_out} - New principal
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Convert a string representation of a principal name to a krb5\_principal structure.
-
-A string representation of a Kerberos name consists of one or more principal name components, separated by slashes, optionally followed by the @ character and a realm name. If the realm name is not specified, the local realm is used.
-
-To use the slash and @ symbols as part of a component (quoted) instead of using them as a component separator or as a realm prefix), put a backslash () character in front of the symbol. Similarly, newline, tab, backspace, and NULL characters can be included in a component by using \sphinxstylestrong{n} , \sphinxstylestrong{t} , \sphinxstylestrong{b} or \sphinxstylestrong{0} , respectively.
-
-Beginning with release 1.20, the name type of the principal will be inferred as \sphinxstylestrong{KRB5\_NT\_SRV\_INST} or \sphinxstylestrong{KRB5\_NT\_WELLKNOWN} based on the principal name. The type will be \sphinxstylestrong{KRB5\_NT\_PRINCIPAL} if a type cannot be inferred.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}]{\sphinxcrossref{\sphinxcode{krb5\_free\_principal()}}}} to free \sphinxstyleemphasis{principal\_out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-The realm in a Kerberos \sphinxstyleemphasis{name} cannot contain slash, colon, or NULL characters.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_parse\_name\_flags - Convert a string principal name to a krb5\_principal with flags.}
-\label{\detokenize{appdev/refs/api/krb5_parse_name_flags:krb5-parse-name-flags-convert-a-string-principal-name-to-a-krb5-principal-with-flags}}\label{\detokenize{appdev/refs/api/krb5_parse_name_flags::doc}}\index{krb5\_parse\_name\_flags (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_parse_name_flags:c.krb5_parse_name_flags}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_parse\_name\_flags}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ name}, int\sphinxstyleemphasis{ flags}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ principal\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{name} - String representation of a principal name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Flag
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{principal\_out} - New principal
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Similar to {\hyperref[\detokenize{appdev/refs/api/krb5_parse_name:c.krb5_parse_name}]{\sphinxcrossref{\sphinxcode{krb5\_parse\_name()}}}} , this function converts a single-string representation of a principal name to a krb5\_principal structure.
-
-The following flags are valid:
-\begin{quote}
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM:KRB5_PRINCIPAL_PARSE_NO_REALM}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_PARSE\_NO\_REALM}}}} - no realm must be present in \sphinxstyleemphasis{name}
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM:KRB5_PRINCIPAL_PARSE_REQUIRE_REALM}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_PARSE\_REQUIRE\_REALM}}}} - realm must be present in \sphinxstyleemphasis{name}
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE:KRB5_PRINCIPAL_PARSE_ENTERPRISE}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_PARSE\_ENTERPRISE}}}} - create single-component enterprise principal
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM:KRB5_PRINCIPAL_PARSE_IGNORE_REALM}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_PARSE\_IGNORE\_REALM}}}} - ignore realm if present in \sphinxstyleemphasis{name}
-
-\end{itemize}
-
-If \sphinxstylestrong{KRB5\_PRINCIPAL\_PARSE\_NO\_REALM} or \sphinxstylestrong{KRB5\_PRINCIPAL\_PARSE\_IGNORE\_REALM} is specified in \sphinxstyleemphasis{flags} , the realm of the new principal will be empty. Otherwise, the default realm for \sphinxstyleemphasis{context} will be used if \sphinxstyleemphasis{name} does not specify a realm.
-\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}]{\sphinxcrossref{\sphinxcode{krb5\_free\_principal()}}}} to free \sphinxstyleemphasis{principal\_out} when it is no longer needed.
-
-
-\subsubsection{krb5\_principal\_compare - Compare two principals.}
-\label{\detokenize{appdev/refs/api/krb5_principal_compare:krb5-principal-compare-compare-two-principals}}\label{\detokenize{appdev/refs/api/krb5_principal_compare::doc}}\index{krb5\_principal\_compare (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_principal_compare:c.krb5_principal_compare}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_principal\_compare}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ princ1}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ princ2}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{princ1} - First principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{princ2} - Second principal
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-TRUE if the principals are the same; FALSE otherwise
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_principal\_compare\_any\_realm - Compare two principals ignoring realm components.}
-\label{\detokenize{appdev/refs/api/krb5_principal_compare_any_realm:krb5-principal-compare-any-realm-compare-two-principals-ignoring-realm-components}}\label{\detokenize{appdev/refs/api/krb5_principal_compare_any_realm::doc}}\index{krb5\_principal\_compare\_any\_realm (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_principal_compare_any_realm:c.krb5_principal_compare_any_realm}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_principal\_compare\_any\_realm}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ princ1}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ princ2}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{princ1} - First principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{princ2} - Second principal
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-TRUE if the principals are the same; FALSE otherwise
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Similar to {\hyperref[\detokenize{appdev/refs/api/krb5_principal_compare:c.krb5_principal_compare}]{\sphinxcrossref{\sphinxcode{krb5\_principal\_compare()}}}} , but do not compare the realm components of the principals.
-
-
-\subsubsection{krb5\_principal\_compare\_flags - Compare two principals with additional flags.}
-\label{\detokenize{appdev/refs/api/krb5_principal_compare_flags:krb5-principal-compare-flags-compare-two-principals-with-additional-flags}}\label{\detokenize{appdev/refs/api/krb5_principal_compare_flags::doc}}\index{krb5\_principal\_compare\_flags (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_principal_compare_flags:c.krb5_principal_compare_flags}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_principal\_compare\_flags}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ princ1}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ princ2}, int\sphinxstyleemphasis{ flags}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{princ1} - First principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{princ2} - Second principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Flags
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-TRUE if the principal names are the same; FALSE otherwise
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Valid flags are:
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM:KRB5_PRINCIPAL_COMPARE_IGNORE_REALM}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_COMPARE\_IGNORE\_REALM}}}} - ignore realm component
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE:KRB5_PRINCIPAL_COMPARE_ENTERPRISE}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_COMPARE\_ENTERPRISE}}}} - UPNs as real principals
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD:KRB5_PRINCIPAL_COMPARE_CASEFOLD}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_COMPARE\_CASEFOLD}}}} case-insensitive
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8:KRB5_PRINCIPAL_COMPARE_UTF8}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_COMPARE\_UTF8}}}} - treat principals as UTF-8
-
-\end{itemize}
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_principal_compare:c.krb5_principal_compare}]{\sphinxcrossref{\sphinxcode{krb5\_principal\_compare()}}}}
-
-
-
-
-\subsubsection{krb5\_prompter\_posix - Prompt user for password.}
-\label{\detokenize{appdev/refs/api/krb5_prompter_posix:krb5-prompter-posix-prompt-user-for-password}}\label{\detokenize{appdev/refs/api/krb5_prompter_posix::doc}}\index{krb5\_prompter\_posix (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_prompter_posix:c.krb5_prompter_posix}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_prompter\_posix}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, void *\sphinxstyleemphasis{ data}, const char *\sphinxstyleemphasis{ name}, const char *\sphinxstyleemphasis{ banner}, int\sphinxstyleemphasis{ num\_prompts}, {\hyperref[\detokenize{appdev/refs/types/krb5_prompt:c.krb5_prompt}]{\sphinxcrossref{krb5\_prompt}}}\sphinxstyleemphasis{ prompts}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{data} - Unused (callback argument)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{name} - Name to output during prompt
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{banner} - Banner to output during prompt
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{num\_prompts} - Number of prompts in \sphinxstyleemphasis{prompts}
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{prompts} - Array of prompts and replies
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function is intended to be used as a prompter callback for {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_password:c.krb5_get_init_creds_password}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_password()}}}} or {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_init:c.krb5_init_creds_init}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_init()}}}} .
-
-Writes \sphinxstyleemphasis{name} and \sphinxstyleemphasis{banner} to stdout, each followed by a newline, then writes each prompt field in the \sphinxstyleemphasis{prompts} array, followed by”:”, and sets the reply field of the entry to a line of input read from stdin. If the hidden flag is set for a prompt, then terminal echoing is turned off when input is read.
-
-
-\subsubsection{krb5\_realm\_compare - Compare the realms of two principals.}
-\label{\detokenize{appdev/refs/api/krb5_realm_compare::doc}}\label{\detokenize{appdev/refs/api/krb5_realm_compare:krb5-realm-compare-compare-the-realms-of-two-principals}}\index{krb5\_realm\_compare (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_realm_compare:c.krb5_realm_compare}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_realm\_compare}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ princ1}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ princ2}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{princ1} - First principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{princ2} - Second principal
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-TRUE if the realm names are the same; FALSE otherwise
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_responder\_get\_challenge - Retrieve the challenge data for a given question in the responder context.}
-\label{\detokenize{appdev/refs/api/krb5_responder_get_challenge:krb5-responder-get-challenge-retrieve-the-challenge-data-for-a-given-question-in-the-responder-context}}\label{\detokenize{appdev/refs/api/krb5_responder_get_challenge::doc}}\index{krb5\_responder\_get\_challenge (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_responder_get_challenge:c.krb5_responder_get_challenge}}\pysiglinewithargsret{const char * \sphinxbfcode{krb5\_responder\_get\_challenge}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_context:c.krb5_responder_context}]{\sphinxcrossref{krb5\_responder\_context}}}\sphinxstyleemphasis{ rctx}, const char *\sphinxstyleemphasis{ question}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rctx} - Responder context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{question} - Question name
-
-\end{description}\end{quote}
-
-Return a pointer to a C string containing the challenge for \sphinxstyleemphasis{question} within \sphinxstyleemphasis{rctx} , or NULL if the question is not present in \sphinxstyleemphasis{rctx} . The structure of the question depends on the question name, but will always be printable UTF-8 text. The returned pointer is an alias, valid only as long as the lifetime of \sphinxstyleemphasis{rctx} , and should not be modified or freed by the caller.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_responder\_list\_questions - List the question names contained in the responder context.}
-\label{\detokenize{appdev/refs/api/krb5_responder_list_questions::doc}}\label{\detokenize{appdev/refs/api/krb5_responder_list_questions:krb5-responder-list-questions-list-the-question-names-contained-in-the-responder-context}}\index{krb5\_responder\_list\_questions (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_responder_list_questions:c.krb5_responder_list_questions}}\pysiglinewithargsret{const char *const * \sphinxbfcode{krb5\_responder\_list\_questions}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_context:c.krb5_responder_context}]{\sphinxcrossref{krb5\_responder\_context}}}\sphinxstyleemphasis{ rctx}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rctx} - Responder context
-
-\end{description}\end{quote}
-
-Return a pointer to a null-terminated list of question names which are present in \sphinxstyleemphasis{rctx} . The pointer is an alias, valid only as long as the lifetime of \sphinxstyleemphasis{rctx} , and should not be modified or freed by the caller. A question’s challenge can be retrieved using {\hyperref[\detokenize{appdev/refs/api/krb5_responder_get_challenge:c.krb5_responder_get_challenge}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_get\_challenge()}}}} and answered using {\hyperref[\detokenize{appdev/refs/api/krb5_responder_set_answer:c.krb5_responder_set_answer}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_set\_answer()}}}} .
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_responder\_set\_answer - Answer a named question in the responder context.}
-\label{\detokenize{appdev/refs/api/krb5_responder_set_answer:krb5-responder-set-answer-answer-a-named-question-in-the-responder-context}}\label{\detokenize{appdev/refs/api/krb5_responder_set_answer::doc}}\index{krb5\_responder\_set\_answer (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_responder_set_answer:c.krb5_responder_set_answer}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_responder\_set\_answer}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_context:c.krb5_responder_context}]{\sphinxcrossref{krb5\_responder\_context}}}\sphinxstyleemphasis{ rctx}, const char *\sphinxstyleemphasis{ question}, const char *\sphinxstyleemphasis{ answer}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rctx} - Responder context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{question} - Question name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{answer} - The string to set (MUST be printable UTF-8)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-EINVAL question is not present within rctx
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function supplies an answer to \sphinxstyleemphasis{question} within \sphinxstyleemphasis{rctx} . The appropriate form of the answer depends on the question name.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_responder\_otp\_get\_challenge - Decode the KRB5\_RESPONDER\_QUESTION\_OTP to a C struct.}
-\label{\detokenize{appdev/refs/api/krb5_responder_otp_get_challenge:krb5-responder-otp-get-challenge-decode-the-krb5-responder-question-otp-to-a-c-struct}}\label{\detokenize{appdev/refs/api/krb5_responder_otp_get_challenge::doc}}\index{krb5\_responder\_otp\_get\_challenge (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_responder_otp_get_challenge:c.krb5_responder_otp_get_challenge}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_responder\_otp\_get\_challenge}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_context:c.krb5_responder_context}]{\sphinxcrossref{krb5\_responder\_context}}}\sphinxstyleemphasis{ rctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_otp_challenge:c.krb5_responder_otp_challenge}]{\sphinxcrossref{krb5\_responder\_otp\_challenge}}} **\sphinxstyleemphasis{ chl}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rctx} - Responder context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{chl} - Challenge structure
-
-\end{description}\end{quote}
-
-A convenience function which parses the KRB5\_RESPONDER\_QUESTION\_OTP question challenge data, making it available in native C. The main feature of this function is the ability to interact with OTP tokens without parsing the JSON.
-
-The returned value must be passed to {\hyperref[\detokenize{appdev/refs/api/krb5_responder_otp_challenge_free:c.krb5_responder_otp_challenge_free}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_otp\_challenge\_free()}}}} to be freed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_responder\_otp\_set\_answer - Answer the KRB5\_RESPONDER\_QUESTION\_OTP question.}
-\label{\detokenize{appdev/refs/api/krb5_responder_otp_set_answer:krb5-responder-otp-set-answer-answer-the-krb5-responder-question-otp-question}}\label{\detokenize{appdev/refs/api/krb5_responder_otp_set_answer::doc}}\index{krb5\_responder\_otp\_set\_answer (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_responder_otp_set_answer:c.krb5_responder_otp_set_answer}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_responder\_otp\_set\_answer}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_context:c.krb5_responder_context}]{\sphinxcrossref{krb5\_responder\_context}}}\sphinxstyleemphasis{ rctx}, size\_t\sphinxstyleemphasis{ ti}, const char *\sphinxstyleemphasis{ value}, const char *\sphinxstyleemphasis{ pin}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rctx} - Responder context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ti} - The index of the tokeninfo selected
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{value} - The value to set, or NULL for none
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pin} - The pin to set, or NULL for none
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_responder\_otp\_challenge\_free - Free the value returned by krb5\_responder\_otp\_get\_challenge() .}
-\label{\detokenize{appdev/refs/api/krb5_responder_otp_challenge_free:krb5-responder-otp-challenge-free-free-the-value-returned-by-krb5-responder-otp-get-challenge}}\label{\detokenize{appdev/refs/api/krb5_responder_otp_challenge_free::doc}}\index{krb5\_responder\_otp\_challenge\_free (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_responder_otp_challenge_free:c.krb5_responder_otp_challenge_free}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_responder\_otp\_challenge\_free}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_context:c.krb5_responder_context}]{\sphinxcrossref{krb5\_responder\_context}}}\sphinxstyleemphasis{ rctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_otp_challenge:c.krb5_responder_otp_challenge}]{\sphinxcrossref{krb5\_responder\_otp\_challenge}}} *\sphinxstyleemphasis{ chl}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rctx} - Responder context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{chl} - The challenge to free
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_responder\_pkinit\_get\_challenge - Decode the KRB5\_RESPONDER\_QUESTION\_PKINIT to a C struct.}
-\label{\detokenize{appdev/refs/api/krb5_responder_pkinit_get_challenge:krb5-responder-pkinit-get-challenge-decode-the-krb5-responder-question-pkinit-to-a-c-struct}}\label{\detokenize{appdev/refs/api/krb5_responder_pkinit_get_challenge::doc}}\index{krb5\_responder\_pkinit\_get\_challenge (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_responder_pkinit_get_challenge:c.krb5_responder_pkinit_get_challenge}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_responder\_pkinit\_get\_challenge}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_context:c.krb5_responder_context}]{\sphinxcrossref{krb5\_responder\_context}}}\sphinxstyleemphasis{ rctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_pkinit_challenge:c.krb5_responder_pkinit_challenge}]{\sphinxcrossref{krb5\_responder\_pkinit\_challenge}}} **\sphinxstyleemphasis{ chl\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rctx} - Responder context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{chl\_out} - Challenge structure
-
-\end{description}\end{quote}
-
-A convenience function which parses the KRB5\_RESPONDER\_QUESTION\_PKINIT question challenge data, making it available in native C. The main feature of this function is the ability to read the challenge without parsing the JSON.
-
-The returned value must be passed to {\hyperref[\detokenize{appdev/refs/api/krb5_responder_pkinit_challenge_free:c.krb5_responder_pkinit_challenge_free}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_pkinit\_challenge\_free()}}}} to be freed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.12
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_responder\_pkinit\_set\_answer - Answer the KRB5\_RESPONDER\_QUESTION\_PKINIT question for one identity.}
-\label{\detokenize{appdev/refs/api/krb5_responder_pkinit_set_answer:krb5-responder-pkinit-set-answer-answer-the-krb5-responder-question-pkinit-question-for-one-identity}}\label{\detokenize{appdev/refs/api/krb5_responder_pkinit_set_answer::doc}}\index{krb5\_responder\_pkinit\_set\_answer (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_responder_pkinit_set_answer:c.krb5_responder_pkinit_set_answer}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_responder\_pkinit\_set\_answer}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_context:c.krb5_responder_context}]{\sphinxcrossref{krb5\_responder\_context}}}\sphinxstyleemphasis{ rctx}, const char *\sphinxstyleemphasis{ identity}, const char *\sphinxstyleemphasis{ pin}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rctx} - Responder context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{identity} - The identity for which a PIN is being supplied
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pin} - The provided PIN, or NULL for none
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.12
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_responder\_pkinit\_challenge\_free - Free the value returned by krb5\_responder\_pkinit\_get\_challenge() .}
-\label{\detokenize{appdev/refs/api/krb5_responder_pkinit_challenge_free:krb5-responder-pkinit-challenge-free-free-the-value-returned-by-krb5-responder-pkinit-get-challenge}}\label{\detokenize{appdev/refs/api/krb5_responder_pkinit_challenge_free::doc}}\index{krb5\_responder\_pkinit\_challenge\_free (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_responder_pkinit_challenge_free:c.krb5_responder_pkinit_challenge_free}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_responder\_pkinit\_challenge\_free}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_context:c.krb5_responder_context}]{\sphinxcrossref{krb5\_responder\_context}}}\sphinxstyleemphasis{ rctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_responder_pkinit_challenge:c.krb5_responder_pkinit_challenge}]{\sphinxcrossref{krb5\_responder\_pkinit\_challenge}}} *\sphinxstyleemphasis{ chl}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rctx} - Responder context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{chl} - The challenge to free
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.12
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_set\_default\_realm - Override the default realm for the specified context.}
-\label{\detokenize{appdev/refs/api/krb5_set_default_realm::doc}}\label{\detokenize{appdev/refs/api/krb5_set_default_realm:krb5-set-default-realm-override-the-default-realm-for-the-specified-context}}\index{krb5\_set\_default\_realm (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_default_realm:c.krb5_set_default_realm}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_set\_default\_realm}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ lrealm}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{lrealm} - Realm name for the default realm
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-If \sphinxstyleemphasis{lrealm} is NULL, clear the default realm setting.
-
-
-\subsubsection{krb5\_set\_password - Set a password for a principal using specified credentials.}
-\label{\detokenize{appdev/refs/api/krb5_set_password:krb5-set-password-set-a-password-for-a-principal-using-specified-credentials}}\label{\detokenize{appdev/refs/api/krb5_set_password::doc}}\index{krb5\_set\_password (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_password:c.krb5_set_password}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_set\_password}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, const char *\sphinxstyleemphasis{ newpw}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ change\_password\_for}, int *\sphinxstyleemphasis{ result\_code}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ result\_code\_string}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ result\_string}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{creds} - Credentials for kadmin/changepw service
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{newpw} - New password
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{change\_password\_for} - Change the password for this principal
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{result\_code} - Numeric error code from server
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{result\_code\_string} - String equivalent to \sphinxstyleemphasis{result\_code}
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{result\_string} - Data returned from the remote system
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success and result\_code is set to KRB5\_KPASSWD\_SUCCESS .
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function uses the credentials \sphinxstyleemphasis{creds} to set the password \sphinxstyleemphasis{newpw} for the principal \sphinxstyleemphasis{change\_password\_for} . It implements the set password operation of RFC 3244, for interoperability with Microsoft Windows implementations.
-
-The error code and strings are returned in \sphinxstyleemphasis{result\_code} , \sphinxstyleemphasis{result\_code\_string} and \sphinxstyleemphasis{result\_string} .
-
-\begin{sphinxadmonition}{note}{Note:}
-If \sphinxstyleemphasis{change\_password\_for} is NULL, the change is performed on the current principal. If \sphinxstyleemphasis{change\_password\_for} is non-null, the change is performed on the principal name passed in \sphinxstyleemphasis{change\_password\_for} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_set\_password\_using\_ccache - Set a password for a principal using cached credentials.}
-\label{\detokenize{appdev/refs/api/krb5_set_password_using_ccache:krb5-set-password-using-ccache-set-a-password-for-a-principal-using-cached-credentials}}\label{\detokenize{appdev/refs/api/krb5_set_password_using_ccache::doc}}\index{krb5\_set\_password\_using\_ccache (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_password_using_ccache:c.krb5_set_password_using_ccache}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_set\_password\_using\_ccache}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, const char *\sphinxstyleemphasis{ newpw}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ change\_password\_for}, int *\sphinxstyleemphasis{ result\_code}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ result\_code\_string}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ result\_string}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{newpw} - New password
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{change\_password\_for} - Change the password for this principal
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{result\_code} - Numeric error code from server
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{result\_code\_string} - String equivalent to \sphinxstyleemphasis{result\_code}
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{result\_string} - Data returned from the remote system
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function uses the cached credentials from \sphinxstyleemphasis{ccache} to set the password \sphinxstyleemphasis{newpw} for the principal \sphinxstyleemphasis{change\_password\_for} . It implements RFC 3244 set password operation (interoperable with MS Windows implementations) using the credential cache.
-
-The error code and strings are returned in \sphinxstyleemphasis{result\_code} , \sphinxstyleemphasis{result\_code\_string} and \sphinxstyleemphasis{result\_string} .
-
-\begin{sphinxadmonition}{note}{Note:}
-If \sphinxstyleemphasis{change\_password\_for} is set to NULL, the change is performed on the default principal in \sphinxstyleemphasis{ccache} . If \sphinxstyleemphasis{change\_password\_for} is non null, the change is performed on the specified principal.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_set\_principal\_realm - Set the realm field of a principal.}
-\label{\detokenize{appdev/refs/api/krb5_set_principal_realm::doc}}\label{\detokenize{appdev/refs/api/krb5_set_principal_realm:krb5-set-principal-realm-set-the-realm-field-of-a-principal}}\index{krb5\_set\_principal\_realm (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_principal_realm:c.krb5_set_principal_realm}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_set\_principal\_realm}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ principal}, const char *\sphinxstyleemphasis{ realm}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Principal name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{realm} - Realm name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Set the realm name part of \sphinxstyleemphasis{principal} to \sphinxstyleemphasis{realm} , overwriting the previous realm.
-
-
-\subsubsection{krb5\_set\_trace\_callback - Specify a callback function for trace events.}
-\label{\detokenize{appdev/refs/api/krb5_set_trace_callback:krb5-set-trace-callback-specify-a-callback-function-for-trace-events}}\label{\detokenize{appdev/refs/api/krb5_set_trace_callback::doc}}\index{krb5\_set\_trace\_callback (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_trace_callback:c.krb5_set_trace_callback}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_set\_trace\_callback}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_trace_callback:c.krb5_trace_callback}]{\sphinxcrossref{krb5\_trace\_callback}}}\sphinxstyleemphasis{ fn}, void *\sphinxstyleemphasis{ cb\_data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fn} - Callback function
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cb\_data} - Callback data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Returns KRB5\_TRACE\_NOSUPP if tracing is not supported in the library (unless fn is NULL).
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Specify a callback for trace events occurring in krb5 operations performed within \sphinxstyleemphasis{context} . \sphinxstyleemphasis{fn} will be invoked with \sphinxstyleemphasis{context} as the first argument, \sphinxstyleemphasis{cb\_data} as the last argument, and a pointer to a krb5\_trace\_info as the second argument. If the trace callback is reset via this function or \sphinxstyleemphasis{context} is destroyed, \sphinxstyleemphasis{fn} will be invoked with a NULL second argument so it can clean up \sphinxstyleemphasis{cb\_data} . Supply a NULL value for \sphinxstyleemphasis{fn} to disable trace callbacks within \sphinxstyleemphasis{context} .
-
-\begin{sphinxadmonition}{note}{Note:}
-This function overrides the information passed through the \sphinxstyleemphasis{KRB5\_TRACE} environment variable.
-\end{sphinxadmonition}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_set\_trace\_filename - Specify a file name for directing trace events.}
-\label{\detokenize{appdev/refs/api/krb5_set_trace_filename:krb5-set-trace-filename-specify-a-file-name-for-directing-trace-events}}\label{\detokenize{appdev/refs/api/krb5_set_trace_filename::doc}}\index{krb5\_set\_trace\_filename (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_trace_filename:c.krb5_set_trace_filename}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_set\_trace\_filename}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ filename}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{filename} - File name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-KRB5\_TRACE\_NOSUPP Tracing is not supported in the library.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Open \sphinxstyleemphasis{filename} for appending (creating it, if necessary) and set up a callback to write trace events to it.
-
-\begin{sphinxadmonition}{note}{Note:}
-This function overrides the information passed through the \sphinxstyleemphasis{KRB5\_TRACE} environment variable.
-\end{sphinxadmonition}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_sname\_match - Test whether a principal matches a matching principal.}
-\label{\detokenize{appdev/refs/api/krb5_sname_match::doc}}\label{\detokenize{appdev/refs/api/krb5_sname_match:krb5-sname-match-test-whether-a-principal-matches-a-matching-principal}}\index{krb5\_sname\_match (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_sname_match:c.krb5_sname_match}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_sname\_match}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ matching}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ princ}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{matching} - Matching principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{princ} - Principal to test
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-TRUE if princ matches matching , FALSE otherwise.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-If \sphinxstyleemphasis{matching} is NULL, return TRUE. If \sphinxstyleemphasis{matching} is not a matching principal, return the value of krb5\_principal\_compare(context, matching, princ).
-
-\begin{sphinxadmonition}{note}{Note:}
-A matching principal is a host-based principal with an empty realm and/or second data component (hostname). Profile configuration may cause the hostname to be ignored even if it is present. A principal matches a matching principal if the former has the same non-empty (and non-ignored) components of the latter.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_sname\_to\_principal - Generate a full principal name from a service name.}
-\label{\detokenize{appdev/refs/api/krb5_sname_to_principal:krb5-sname-to-principal-generate-a-full-principal-name-from-a-service-name}}\label{\detokenize{appdev/refs/api/krb5_sname_to_principal::doc}}\index{krb5\_sname\_to\_principal (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_sname_to_principal:c.krb5_sname_to_principal}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_sname\_to\_principal}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ hostname}, const char *\sphinxstyleemphasis{ sname}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}}\sphinxstyleemphasis{ type}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ ret\_princ}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{hostname} - Host name, or NULL to use local host
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{sname} - Service name, or NULL to use \sphinxstylestrong{“host”}
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{type} - Principal type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ret\_princ} - Generated principal
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function converts a \sphinxstyleemphasis{hostname} and \sphinxstyleemphasis{sname} into \sphinxstyleemphasis{krb5\_principal} structure \sphinxstyleemphasis{ret\_princ} . The returned principal will be of the form \sphinxstyleemphasis{sname/hostname@REALM} where REALM is determined by {\hyperref[\detokenize{appdev/refs/api/krb5_get_host_realm:c.krb5_get_host_realm}]{\sphinxcrossref{\sphinxcode{krb5\_get\_host\_realm()}}}} . In some cases this may be the referral (empty) realm.
-
-The \sphinxstyleemphasis{type} can be one of the following:
-\begin{quote}
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_NT_SRV_HST:KRB5_NT_SRV_HST}]{\sphinxcrossref{\sphinxcode{KRB5\_NT\_SRV\_HST}}}} canonicalizes the host name before looking up the realm and generating the principal.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_NT_UNKNOWN:KRB5_NT_UNKNOWN}]{\sphinxcrossref{\sphinxcode{KRB5\_NT\_UNKNOWN}}}} accepts the hostname as given, and does not canonicalize it.
-
-\end{itemize}
-
-Use krb5\_free\_principal to free \sphinxstyleemphasis{ret\_princ} when it is no longer needed.
-\end{quote}
-
-
-\subsubsection{krb5\_unparse\_name - Convert a krb5\_principal structure to a string representation.}
-\label{\detokenize{appdev/refs/api/krb5_unparse_name:krb5-unparse-name-convert-a-krb5-principal-structure-to-a-string-representation}}\label{\detokenize{appdev/refs/api/krb5_unparse_name::doc}}\index{krb5\_unparse\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_unparse_name:c.krb5_unparse_name}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_unparse\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, char **\sphinxstyleemphasis{ name}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Principal
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{name} - String representation of principal name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-The resulting string representation uses the format and quoting conventions described for {\hyperref[\detokenize{appdev/refs/api/krb5_parse_name:c.krb5_parse_name}]{\sphinxcrossref{\sphinxcode{krb5\_parse\_name()}}}} .
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_unparsed_name:c.krb5_free_unparsed_name}]{\sphinxcrossref{\sphinxcode{krb5\_free\_unparsed\_name()}}}} to free \sphinxstyleemphasis{name} when it is no longer needed.
-
-
-\subsubsection{krb5\_unparse\_name\_ext - Convert krb5\_principal structure to string and length.}
-\label{\detokenize{appdev/refs/api/krb5_unparse_name_ext:krb5-unparse-name-ext-convert-krb5-principal-structure-to-string-and-length}}\label{\detokenize{appdev/refs/api/krb5_unparse_name_ext::doc}}\index{krb5\_unparse\_name\_ext (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_unparse_name_ext:c.krb5_unparse_name_ext}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_unparse\_name\_ext}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, char **\sphinxstyleemphasis{ name}, unsigned int *\sphinxstyleemphasis{ size}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Principal
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{name} - String representation of principal name
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{size} - Size of unparsed name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes. On failure name is set to NULL
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_unparse_name:c.krb5_unparse_name}]{\sphinxcrossref{\sphinxcode{krb5\_unparse\_name()}}}} , but allows the use of an existing buffer for the result. If size is not NULL, then \sphinxstyleemphasis{name} must point to either NULL or an existing buffer of at least the size pointed to by \sphinxstyleemphasis{size} . The buffer will be allocated or resized if necessary, with the new pointer stored into \sphinxstyleemphasis{name} . Whether or not the buffer is resized, the necessary space for the result, including null terminator, will be stored into \sphinxstyleemphasis{size} .
-
-If size is NULL, this function behaves exactly as {\hyperref[\detokenize{appdev/refs/api/krb5_unparse_name:c.krb5_unparse_name}]{\sphinxcrossref{\sphinxcode{krb5\_unparse\_name()}}}} .
-
-
-\subsubsection{krb5\_unparse\_name\_flags - Convert krb5\_principal structure to a string with flags.}
-\label{\detokenize{appdev/refs/api/krb5_unparse_name_flags::doc}}\label{\detokenize{appdev/refs/api/krb5_unparse_name_flags:krb5-unparse-name-flags-convert-krb5-principal-structure-to-a-string-with-flags}}\index{krb5\_unparse\_name\_flags (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_unparse_name_flags:c.krb5_unparse_name_flags}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_unparse\_name\_flags}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, int\sphinxstyleemphasis{ flags}, char **\sphinxstyleemphasis{ name}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Flags
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{name} - String representation of principal name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes. On failure name is set to NULL
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Similar to {\hyperref[\detokenize{appdev/refs/api/krb5_unparse_name:c.krb5_unparse_name}]{\sphinxcrossref{\sphinxcode{krb5\_unparse\_name()}}}} , this function converts a krb5\_principal structure to a string representation.
-
-The following flags are valid:
-\begin{quote}
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT:KRB5_PRINCIPAL_UNPARSE_SHORT}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_UNPARSE\_SHORT}}}} - omit realm if it is the local realm
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM:KRB5_PRINCIPAL_UNPARSE_NO_REALM}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_UNPARSE\_NO\_REALM}}}} - omit realm
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY:KRB5_PRINCIPAL_UNPARSE_DISPLAY}]{\sphinxcrossref{\sphinxcode{KRB5\_PRINCIPAL\_UNPARSE\_DISPLAY}}}} - do not quote special characters
-
-\end{itemize}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_unparsed_name:c.krb5_free_unparsed_name}]{\sphinxcrossref{\sphinxcode{krb5\_free\_unparsed\_name()}}}} to free \sphinxstyleemphasis{name} when it is no longer needed.
-\end{quote}
-
-
-\subsubsection{krb5\_unparse\_name\_flags\_ext - Convert krb5\_principal structure to string format with flags.}
-\label{\detokenize{appdev/refs/api/krb5_unparse_name_flags_ext:krb5-unparse-name-flags-ext-convert-krb5-principal-structure-to-string-format-with-flags}}\label{\detokenize{appdev/refs/api/krb5_unparse_name_flags_ext::doc}}\index{krb5\_unparse\_name\_flags\_ext (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_unparse_name_flags_ext:c.krb5_unparse_name_flags_ext}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_unparse\_name\_flags\_ext}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, int\sphinxstyleemphasis{ flags}, char **\sphinxstyleemphasis{ name}, unsigned int *\sphinxstyleemphasis{ size}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Flags
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{name} - Single string format of principal name
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{size} - Size of unparsed name buffer
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes. On failure name is set to NULL
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_us\_timeofday - Retrieve the system time of day, in sec and ms, since the epoch.}
-\label{\detokenize{appdev/refs/api/krb5_us_timeofday:krb5-us-timeofday-retrieve-the-system-time-of-day-in-sec-and-ms-since-the-epoch}}\label{\detokenize{appdev/refs/api/krb5_us_timeofday::doc}}\index{krb5\_us\_timeofday (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_us_timeofday:c.krb5_us_timeofday}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_us\_timeofday}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} *\sphinxstyleemphasis{ seconds}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} *\sphinxstyleemphasis{ microseconds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{seconds} - System timeofday, seconds portion
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{microseconds} - System timeofday, microseconds portion
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function retrieves the system time of day with the context specific time offset adjustment.
-
-
-\subsubsection{krb5\_verify\_authdata\_kdc\_issued - Unwrap and verify AD-KDCIssued authorization data.}
-\label{\detokenize{appdev/refs/api/krb5_verify_authdata_kdc_issued:krb5-verify-authdata-kdc-issued-unwrap-and-verify-ad-kdcissued-authorization-data}}\label{\detokenize{appdev/refs/api/krb5_verify_authdata_kdc_issued::doc}}\index{krb5\_verify\_authdata\_kdc\_issued (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_verify_authdata_kdc_issued:c.krb5_verify_authdata_kdc_issued}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_verify\_authdata\_kdc\_issued}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, const {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} *\sphinxstyleemphasis{ ad\_kdcissued}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ issuer}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ***\sphinxstyleemphasis{ authdata}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Session key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ad\_kdcissued} - AD-KDCIssued authorization data to be unwrapped
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{issuer} - Name of issuing principal (or NULL)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{authdata} - Unwrapped list of authorization data
-
-\end{description}\end{quote}
-
-This function unwraps an AD-KDCIssued authdatum (see RFC 4120 section 5.2.6.2) and verifies its signature against \sphinxstyleemphasis{key} . The issuer field of the authdatum element is returned in \sphinxstyleemphasis{issuer} , and the unwrapped list of authdata is returned in \sphinxstyleemphasis{authdata} .
-
-
-\subsection{Rarely used public interfaces}
-\label{\detokenize{appdev/refs/api/index:rarely-used-public-interfaces}}
-
-\subsubsection{krb5\_425\_conv\_principal - Convert a Kerberos V4 principal to a Kerberos V5 principal.}
-\label{\detokenize{appdev/refs/api/krb5_425_conv_principal:krb5-425-conv-principal-convert-a-kerberos-v4-principal-to-a-kerberos-v5-principal}}\label{\detokenize{appdev/refs/api/krb5_425_conv_principal::doc}}\index{krb5\_425\_conv\_principal (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_425_conv_principal:c.krb5_425_conv_principal}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_425\_conv\_principal}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ name}, const char *\sphinxstyleemphasis{ instance}, const char *\sphinxstyleemphasis{ realm}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ princ}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{name} - V4 name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{instance} - V4 instance
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{realm} - Realm
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{princ} - V5 principal
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function builds a \sphinxstyleemphasis{princ} from V4 specification based on given input \sphinxstyleemphasis{name.instance@realm} .
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}]{\sphinxcrossref{\sphinxcode{krb5\_free\_principal()}}}} to free \sphinxstyleemphasis{princ} when it is no longer needed.
-
-
-\subsubsection{krb5\_524\_conv\_principal - Convert a Kerberos V5 principal to a Kerberos V4 principal.}
-\label{\detokenize{appdev/refs/api/krb5_524_conv_principal:krb5-524-conv-principal-convert-a-kerberos-v5-principal-to-a-kerberos-v4-principal}}\label{\detokenize{appdev/refs/api/krb5_524_conv_principal::doc}}\index{krb5\_524\_conv\_principal (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_524_conv_principal:c.krb5_524_conv_principal}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_524\_conv\_principal}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ princ}, char *\sphinxstyleemphasis{ name}, char *\sphinxstyleemphasis{ inst}, char *\sphinxstyleemphasis{ realm}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{princ} - V5 Principal
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{name} - V4 principal’s name to be filled in
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{inst} - V4 principal’s instance name to be filled in
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{realm} - Principal’s realm name to be filled in
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KRB5\_INVALID\_PRINCIPAL Invalid principal name
-
-\item {}
-KRB5\_CONFIG\_CANTOPEN Can’t open or find Kerberos configuration file
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function separates a V5 principal \sphinxstyleemphasis{princ} into \sphinxstyleemphasis{name} , \sphinxstyleemphasis{instance} , and \sphinxstyleemphasis{realm} .
-
-
-\subsubsection{krb5\_address\_compare - Compare two Kerberos addresses.}
-\label{\detokenize{appdev/refs/api/krb5_address_compare:krb5-address-compare-compare-two-kerberos-addresses}}\label{\detokenize{appdev/refs/api/krb5_address_compare::doc}}\index{krb5\_address\_compare (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_address_compare:c.krb5_address_compare}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_address\_compare}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *\sphinxstyleemphasis{ addr1}, const {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *\sphinxstyleemphasis{ addr2}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{addr1} - First address to be compared
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{addr2} - Second address to be compared
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-TRUE if the addresses are the same, FALSE otherwise
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_address\_order - Return an ordering of the specified addresses.}
-\label{\detokenize{appdev/refs/api/krb5_address_order:krb5-address-order-return-an-ordering-of-the-specified-addresses}}\label{\detokenize{appdev/refs/api/krb5_address_order::doc}}\index{krb5\_address\_order (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_address_order:c.krb5_address_order}}\pysiglinewithargsret{int \sphinxbfcode{krb5\_address\_order}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *\sphinxstyleemphasis{ addr1}, const {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *\sphinxstyleemphasis{ addr2}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{addr1} - First address
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{addr2} - Second address
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 if The two addresses are the same
-
-\item {}
-\textless{} 0 First address is less than second
-
-\item {}
-\textgreater{} 0 First address is greater than second
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_address\_search - Search a list of addresses for a specified address.}
-\label{\detokenize{appdev/refs/api/krb5_address_search:krb5-address-search-search-a-list-of-addresses-for-a-specified-address}}\label{\detokenize{appdev/refs/api/krb5_address_search::doc}}\index{krb5\_address\_search (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_address_search:c.krb5_address_search}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_address\_search}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *\sphinxstyleemphasis{ addr}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *const *\sphinxstyleemphasis{ addrlist}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{addr} - Address to search for
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{addrlist} - Address list to be searched (or NULL)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-TRUE if addr is listed in addrlist , or addrlist is NULL; FALSE otherwise
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-If \sphinxstyleemphasis{addrlist} contains only a NetBIOS addresses, it will be treated as a null list.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_allow\_weak\_crypto - Allow the application to override the profile’s allow\_weak\_crypto setting.}
-\label{\detokenize{appdev/refs/api/krb5_allow_weak_crypto::doc}}\label{\detokenize{appdev/refs/api/krb5_allow_weak_crypto:krb5-allow-weak-crypto-allow-the-application-to-override-the-profile-s-allow-weak-crypto-setting}}\index{krb5\_allow\_weak\_crypto (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_allow_weak_crypto:c.krb5_allow_weak_crypto}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_allow\_weak\_crypto}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}}\sphinxstyleemphasis{ enable}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enable} - Boolean flag
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 (always)
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function allows an application to override the allow\_weak\_crypto setting. It is primarily for use by aklog.
-
-
-\subsubsection{krb5\_aname\_to\_localname - Convert a principal name to a local name.}
-\label{\detokenize{appdev/refs/api/krb5_aname_to_localname::doc}}\label{\detokenize{appdev/refs/api/krb5_aname_to_localname:krb5-aname-to-localname-convert-a-principal-name-to-a-local-name}}\index{krb5\_aname\_to\_localname (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_aname_to_localname:c.krb5_aname_to_localname}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_aname\_to\_localname}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ aname}, int\sphinxstyleemphasis{ lnsize\_in}, char *\sphinxstyleemphasis{ lname}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{aname} - Principal name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{lnsize\_in} - Space available in \sphinxstyleemphasis{lname}
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{lname} - Local name buffer to be filled in
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-System errors
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-If \sphinxstyleemphasis{aname} does not correspond to any local account, KRB5\_LNAME\_NOTRANS is returned. If \sphinxstyleemphasis{lnsize\_in} is too small for the local name, KRB5\_CONFIG\_NOTENUFSPACE is returned.
-
-Local names, rather than principal names, can be used by programs that translate to an environment-specific name (for example, a user account name).
-
-
-\subsubsection{krb5\_anonymous\_principal - Build an anonymous principal.}
-\label{\detokenize{appdev/refs/api/krb5_anonymous_principal:krb5-anonymous-principal-build-an-anonymous-principal}}\label{\detokenize{appdev/refs/api/krb5_anonymous_principal::doc}}\index{krb5\_anonymous\_principal (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_anonymous_principal:c.krb5_anonymous_principal}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}} \sphinxbfcode{krb5\_anonymous\_principal}}{void\sphinxstyleemphasis{ None}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{None}
-
-\end{description}\end{quote}
-
-This function returns constant storage that must not be freed.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR:KRB5_ANONYMOUS_PRINCSTR}]{\sphinxcrossref{\sphinxcode{KRB5\_ANONYMOUS\_PRINCSTR}}}}
-
-
-
-
-\subsubsection{krb5\_anonymous\_realm - Return an anonymous realm data.}
-\label{\detokenize{appdev/refs/api/krb5_anonymous_realm::doc}}\label{\detokenize{appdev/refs/api/krb5_anonymous_realm:krb5-anonymous-realm-return-an-anonymous-realm-data}}\index{krb5\_anonymous\_realm (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_anonymous_realm:c.krb5_anonymous_realm}}\pysiglinewithargsret{const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} * \sphinxbfcode{krb5\_anonymous\_realm}}{void\sphinxstyleemphasis{ None}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{None}
-
-\end{description}\end{quote}
-
-This function returns constant storage that must not be freed.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR:KRB5_ANONYMOUS_REALMSTR}]{\sphinxcrossref{\sphinxcode{KRB5\_ANONYMOUS\_REALMSTR}}}}
-
-
-
-
-\subsubsection{krb5\_appdefault\_boolean - Retrieve a boolean value from the appdefaults section of krb5.conf.}
-\label{\detokenize{appdev/refs/api/krb5_appdefault_boolean::doc}}\label{\detokenize{appdev/refs/api/krb5_appdefault_boolean:krb5-appdefault-boolean-retrieve-a-boolean-value-from-the-appdefaults-section-of-krb5-conf}}\index{krb5\_appdefault\_boolean (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_appdefault_boolean:c.krb5_appdefault_boolean}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_appdefault\_boolean}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ appname}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ realm}, const char *\sphinxstyleemphasis{ option}, int\sphinxstyleemphasis{ default\_value}, int *\sphinxstyleemphasis{ ret\_value}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{appname} - Application name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{realm} - Realm name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{option} - Option to be checked
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{default\_value} - Default value to return if no match is found
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ret\_value} - Boolean value of \sphinxstyleemphasis{option}
-
-\end{description}\end{quote}
-
-This function gets the application defaults for \sphinxstyleemphasis{option} based on the given \sphinxstyleemphasis{appname} and/or \sphinxstyleemphasis{realm} .
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_appdefault_string:c.krb5_appdefault_string}]{\sphinxcrossref{\sphinxcode{krb5\_appdefault\_string()}}}}
-
-
-
-
-\subsubsection{krb5\_appdefault\_string - Retrieve a string value from the appdefaults section of krb5.conf.}
-\label{\detokenize{appdev/refs/api/krb5_appdefault_string::doc}}\label{\detokenize{appdev/refs/api/krb5_appdefault_string:krb5-appdefault-string-retrieve-a-string-value-from-the-appdefaults-section-of-krb5-conf}}\index{krb5\_appdefault\_string (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_appdefault_string:c.krb5_appdefault_string}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_appdefault\_string}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ appname}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ realm}, const char *\sphinxstyleemphasis{ option}, const char *\sphinxstyleemphasis{ default\_value}, char **\sphinxstyleemphasis{ ret\_value}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{appname} - Application name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{realm} - Realm name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{option} - Option to be checked
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{default\_value} - Default value to return if no match is found
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ret\_value} - String value of \sphinxstyleemphasis{option}
-
-\end{description}\end{quote}
-
-This function gets the application defaults for \sphinxstyleemphasis{option} based on the given \sphinxstyleemphasis{appname} and/or \sphinxstyleemphasis{realm} .
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_appdefault_boolean:c.krb5_appdefault_boolean}]{\sphinxcrossref{\sphinxcode{krb5\_appdefault\_boolean()}}}}
-
-
-
-
-\subsubsection{krb5\_auth\_con\_free - Free a krb5\_auth\_context structure.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_free:krb5-auth-con-free-free-a-krb5-auth-context-structure}}\label{\detokenize{appdev/refs/api/krb5_auth_con_free::doc}}\index{krb5\_auth\_con\_free (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_free:c.krb5_auth_con_free}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_free}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context to be freed
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 (always)
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function frees an auth context allocated by {\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_init:c.krb5_auth_con_init}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_init()}}}} .
-
-
-\subsubsection{krb5\_auth\_con\_genaddrs - Generate auth context addresses from a connected socket.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_genaddrs::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_genaddrs:krb5-auth-con-genaddrs-generate-auth-context-addresses-from-a-connected-socket}}\index{krb5\_auth\_con\_genaddrs (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_genaddrs:c.krb5_auth_con_genaddrs}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_genaddrs}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, int\sphinxstyleemphasis{ infd}, int\sphinxstyleemphasis{ flags}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{infd} - Connected socket descriptor
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Flags
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets the local and/or remote addresses in \sphinxstyleemphasis{auth\_context} based on the local and remote endpoints of the socket \sphinxstyleemphasis{infd} . The following flags determine the operations performed:
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR:KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_LOCAL\_ADDR}}}} Generate local address.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR:KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_REMOTE\_ADDR}}}} Generate remote address.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR:KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_LOCAL\_FULL\_ADDR}}}} Generate local address and port.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR:KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_REMOTE\_FULL\_ADDR}}}} Generate remote address and port.
-
-\end{itemize}
-
-
-\subsubsection{krb5\_auth\_con\_get\_checksum\_func - Get the checksum callback from an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_get_checksum_func::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_get_checksum_func:krb5-auth-con-get-checksum-func-get-the-checksum-callback-from-an-auth-context}}\index{krb5\_auth\_con\_get\_checksum\_func (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_get_checksum_func:c.krb5_auth_con_get_checksum_func}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_get\_checksum\_func}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_mk_req_checksum_func:c.krb5_mk_req_checksum_func}]{\sphinxcrossref{krb5\_mk\_req\_checksum\_func}}} *\sphinxstyleemphasis{ func}, void **\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{func} - Checksum callback
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{data} - Callback argument
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 (always)
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_auth\_con\_getaddrs - Retrieve address fields from an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getaddrs:krb5-auth-con-getaddrs-retrieve-address-fields-from-an-auth-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getaddrs::doc}}\index{krb5\_auth\_con\_getaddrs (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getaddrs:c.krb5_auth_con_getaddrs}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getaddrs}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} **\sphinxstyleemphasis{ local\_addr}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} **\sphinxstyleemphasis{ remote\_addr}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{local\_addr} - Local address (NULL if not needed)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{remote\_addr} - Remote address (NULL if not needed)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_auth\_con\_getauthenticator - Retrieve the authenticator from an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getauthenticator:krb5-auth-con-getauthenticator-retrieve-the-authenticator-from-an-auth-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getauthenticator::doc}}\index{krb5\_auth\_con\_getauthenticator (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getauthenticator:c.krb5_auth_con_getauthenticator}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getauthenticator}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator}]{\sphinxcrossref{krb5\_authenticator}}} **\sphinxstyleemphasis{ authenticator}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{authenticator} - Authenticator
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success. Otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_authenticator:c.krb5_free_authenticator}]{\sphinxcrossref{\sphinxcode{krb5\_free\_authenticator()}}}} to free \sphinxstyleemphasis{authenticator} when it is no longer needed.
-
-
-\subsubsection{krb5\_auth\_con\_getflags - Retrieve flags from a krb5\_auth\_context structure.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getflags:krb5-auth-con-getflags-retrieve-flags-from-a-krb5-auth-context-structure}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getflags::doc}}\index{krb5\_auth\_con\_getflags (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getflags:c.krb5_auth_con_getflags}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getflags}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} *\sphinxstyleemphasis{ flags}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{flags} - Flags bit mask
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 (always)
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Valid values for \sphinxstyleemphasis{flags} are:
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} Use timestamps
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} Save timestamps
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}}} Use sequence numbers
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} Save sequence numbers
-
-\end{itemize}
-
-
-\subsubsection{krb5\_auth\_con\_getkey - Retrieve the session key from an auth context as a keyblock.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getkey::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getkey:krb5-auth-con-getkey-retrieve-the-session-key-from-an-auth-context-as-a-keyblock}}\index{krb5\_auth\_con\_getkey (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getkey:c.krb5_auth_con_getkey}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getkey}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ keyblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{keyblock} - Session key
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success. Otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a keyblock containing the session key from \sphinxstyleemphasis{auth\_context} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_keyblock:c.krb5_free_keyblock}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keyblock()}}}} to free \sphinxstyleemphasis{keyblock} when it is no longer needed
-
-
-\subsubsection{krb5\_auth\_con\_getkey\_k - Retrieve the session key from an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getkey_k:krb5-auth-con-getkey-k-retrieve-the-session-key-from-an-auth-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getkey_k::doc}}\index{krb5\_auth\_con\_getkey\_k (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getkey_k:c.krb5_auth_con_getkey_k}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getkey\_k}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}} *\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{key} - Session key
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 (always)
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets \sphinxstyleemphasis{key} to the session key from \sphinxstyleemphasis{auth\_context} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_k_free_key:c.krb5_k_free_key}]{\sphinxcrossref{\sphinxcode{krb5\_k\_free\_key()}}}} to release \sphinxstyleemphasis{key} when it is no longer needed.
-
-
-\subsubsection{krb5\_auth\_con\_getlocalseqnumber - Retrieve the local sequence number from an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getlocalseqnumber::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getlocalseqnumber:krb5-auth-con-getlocalseqnumber-retrieve-the-local-sequence-number-from-an-auth-context}}\index{krb5\_auth\_con\_getlocalseqnumber (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getlocalseqnumber:c.krb5_auth_con_getlocalseqnumber}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getlocalseqnumber}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} *\sphinxstyleemphasis{ seqnumber}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{seqnumber} - Local sequence number
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Retrieve the local sequence number from \sphinxstyleemphasis{auth\_context} and return it in \sphinxstyleemphasis{seqnumber} . The {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}}} flag must be set in \sphinxstyleemphasis{auth\_context} for this function to be useful.
-
-
-\subsubsection{krb5\_auth\_con\_getrcache - Retrieve the replay cache from an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getrcache:krb5-auth-con-getrcache-retrieve-the-replay-cache-from-an-auth-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getrcache::doc}}\index{krb5\_auth\_con\_getrcache (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getrcache:c.krb5_auth_con_getrcache}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getrcache}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_rcache:c.krb5_rcache}]{\sphinxcrossref{krb5\_rcache}}} *\sphinxstyleemphasis{ rcache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rcache} - Replay cache handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 (always)
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function fetches the replay cache from \sphinxstyleemphasis{auth\_context} . The caller should not close \sphinxstyleemphasis{rcache} .
-
-
-\subsubsection{krb5\_auth\_con\_getrecvsubkey - Retrieve the receiving subkey from an auth context as a keyblock.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getrecvsubkey:krb5-auth-con-getrecvsubkey-retrieve-the-receiving-subkey-from-an-auth-context-as-a-keyblock}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getrecvsubkey::doc}}\index{krb5\_auth\_con\_getrecvsubkey (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getrecvsubkey:c.krb5_auth_con_getrecvsubkey}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getrecvsubkey}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ ac}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ keyblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ac} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{keyblock} - Receiving subkey
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a keyblock containing the receiving subkey from \sphinxstyleemphasis{auth\_context} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_keyblock:c.krb5_free_keyblock}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keyblock()}}}} to free \sphinxstyleemphasis{keyblock} when it is no longer needed.
-
-
-\subsubsection{krb5\_auth\_con\_getrecvsubkey\_k - Retrieve the receiving subkey from an auth context as a keyblock.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getrecvsubkey_k:krb5-auth-con-getrecvsubkey-k-retrieve-the-receiving-subkey-from-an-auth-context-as-a-keyblock}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getrecvsubkey_k::doc}}\index{krb5\_auth\_con\_getrecvsubkey\_k (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getrecvsubkey_k:c.krb5_auth_con_getrecvsubkey_k}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getrecvsubkey\_k}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ ac}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}} *\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ac} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{key} - Receiving subkey
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets \sphinxstyleemphasis{key} to the receiving subkey from \sphinxstyleemphasis{auth\_context} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_k_free_key:c.krb5_k_free_key}]{\sphinxcrossref{\sphinxcode{krb5\_k\_free\_key()}}}} to release \sphinxstyleemphasis{key} when it is no longer needed.
-
-
-\subsubsection{krb5\_auth\_con\_getremoteseqnumber - Retrieve the remote sequence number from an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getremoteseqnumber:krb5-auth-con-getremoteseqnumber-retrieve-the-remote-sequence-number-from-an-auth-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getremoteseqnumber::doc}}\index{krb5\_auth\_con\_getremoteseqnumber (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getremoteseqnumber:c.krb5_auth_con_getremoteseqnumber}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getremoteseqnumber}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} *\sphinxstyleemphasis{ seqnumber}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{seqnumber} - Remote sequence number
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Retrieve the remote sequence number from \sphinxstyleemphasis{auth\_context} and return it in \sphinxstyleemphasis{seqnumber} . The {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}}} flag must be set in \sphinxstyleemphasis{auth\_context} for this function to be useful.
-
-
-\subsubsection{krb5\_auth\_con\_getsendsubkey - Retrieve the send subkey from an auth context as a keyblock.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getsendsubkey:krb5-auth-con-getsendsubkey-retrieve-the-send-subkey-from-an-auth-context-as-a-keyblock}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getsendsubkey::doc}}\index{krb5\_auth\_con\_getsendsubkey (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getsendsubkey:c.krb5_auth_con_getsendsubkey}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getsendsubkey}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ ac}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ keyblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ac} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{keyblock} - Send subkey
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a keyblock containing the send subkey from \sphinxstyleemphasis{auth\_context} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_keyblock:c.krb5_free_keyblock}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keyblock()}}}} to free \sphinxstyleemphasis{keyblock} when it is no longer needed.
-
-
-\subsubsection{krb5\_auth\_con\_getsendsubkey\_k - Retrieve the send subkey from an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getsendsubkey_k:krb5-auth-con-getsendsubkey-k-retrieve-the-send-subkey-from-an-auth-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getsendsubkey_k::doc}}\index{krb5\_auth\_con\_getsendsubkey\_k (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getsendsubkey_k:c.krb5_auth_con_getsendsubkey_k}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getsendsubkey\_k}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ ac}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}} *\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ac} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{key} - Send subkey
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets \sphinxstyleemphasis{key} to the send subkey from \sphinxstyleemphasis{auth\_context} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_k_free_key:c.krb5_k_free_key}]{\sphinxcrossref{\sphinxcode{krb5\_k\_free\_key()}}}} to release \sphinxstyleemphasis{key} when it is no longer needed.
-
-
-\subsubsection{krb5\_auth\_con\_init - Create and initialize an authentication context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_init:krb5-auth-con-init-create-and-initialize-an-authentication-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_init::doc}}\index{krb5\_auth\_con\_init (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_init:c.krb5_auth_con_init}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_init}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}} *\sphinxstyleemphasis{ auth\_context}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates an authentication context to hold configuration and state relevant to krb5 functions for authenticating principals and protecting messages once authentication has occurred.
-
-By default, flags for the context are set to enable the use of the replay cache ( {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} ), but not sequence numbers. Use {\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_setflags:c.krb5_auth_con_setflags}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_setflags()}}}} to change the flags.
-
-The allocated \sphinxstyleemphasis{auth\_context} must be freed with {\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_free:c.krb5_auth_con_free}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_free()}}}} when it is no longer needed.
-
-
-\subsubsection{krb5\_auth\_con\_set\_checksum\_func - Set a checksum callback in an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_set_checksum_func:krb5-auth-con-set-checksum-func-set-a-checksum-callback-in-an-auth-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_set_checksum_func::doc}}\index{krb5\_auth\_con\_set\_checksum\_func (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_set_checksum_func:c.krb5_auth_con_set_checksum_func}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_set\_checksum\_func}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_mk_req_checksum_func:c.krb5_mk_req_checksum_func}]{\sphinxcrossref{krb5\_mk\_req\_checksum\_func}}}\sphinxstyleemphasis{ func}, void *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{func} - Checksum callback
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - Callback argument
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 (always)
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Set a callback to obtain checksum data in {\hyperref[\detokenize{appdev/refs/api/krb5_mk_req:c.krb5_mk_req}]{\sphinxcrossref{\sphinxcode{krb5\_mk\_req()}}}} . The callback will be invoked after the subkey and local sequence number are stored in \sphinxstyleemphasis{auth\_context} .
-
-
-\subsubsection{krb5\_auth\_con\_set\_req\_cksumtype - Set checksum type in an an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_set_req_cksumtype:krb5-auth-con-set-req-cksumtype-set-checksum-type-in-an-an-auth-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_set_req_cksumtype::doc}}\index{krb5\_auth\_con\_set\_req\_cksumtype (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_set_req_cksumtype:c.krb5_auth_con_set_req_cksumtype}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_set\_req\_cksumtype}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ cksumtype}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksumtype} - Checksum type
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success. Otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets the checksum type in \sphinxstyleemphasis{auth\_context} to be used by {\hyperref[\detokenize{appdev/refs/api/krb5_mk_req:c.krb5_mk_req}]{\sphinxcrossref{\sphinxcode{krb5\_mk\_req()}}}} for the authenticator checksum.
-
-
-\subsubsection{krb5\_auth\_con\_setaddrs - Set the local and remote addresses in an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_setaddrs::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_setaddrs:krb5-auth-con-setaddrs-set-the-local-and-remote-addresses-in-an-auth-context}}\index{krb5\_auth\_con\_setaddrs (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_setaddrs:c.krb5_auth_con_setaddrs}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_setaddrs}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *\sphinxstyleemphasis{ local\_addr}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *\sphinxstyleemphasis{ remote\_addr}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{local\_addr} - Local address
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{remote\_addr} - Remote address
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function releases the storage assigned to the contents of the local and remote addresses of \sphinxstyleemphasis{auth\_context} and then sets them to \sphinxstyleemphasis{local\_addr} and \sphinxstyleemphasis{remote\_addr} respectively.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_genaddrs:c.krb5_auth_con_genaddrs}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_genaddrs()}}}}
-
-
-
-
-\subsubsection{krb5\_auth\_con\_setflags - Set a flags field in a krb5\_auth\_context structure.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_setflags:krb5-auth-con-setflags-set-a-flags-field-in-a-krb5-auth-context-structure}}\label{\detokenize{appdev/refs/api/krb5_auth_con_setflags::doc}}\index{krb5\_auth\_con\_setflags (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_setflags:c.krb5_auth_con_setflags}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_setflags}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}}\sphinxstyleemphasis{ flags}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Flags bit mask
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 (always)
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Valid values for \sphinxstyleemphasis{flags} are:
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} Use timestamps
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} Save timestamps
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}}} Use sequence numbers
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} Save sequence numbers
-
-\end{itemize}
-
-
-\subsubsection{krb5\_auth\_con\_setports - Set local and remote port fields in an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_setports:krb5-auth-con-setports-set-local-and-remote-port-fields-in-an-auth-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_setports::doc}}\index{krb5\_auth\_con\_setports (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_setports:c.krb5_auth_con_setports}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_setports}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *\sphinxstyleemphasis{ local\_port}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *\sphinxstyleemphasis{ remote\_port}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{local\_port} - Local port
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{remote\_port} - Remote port
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function releases the storage assigned to the contents of the local and remote ports of \sphinxstyleemphasis{auth\_context} and then sets them to \sphinxstyleemphasis{local\_port} and \sphinxstyleemphasis{remote\_port} respectively.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_genaddrs:c.krb5_auth_con_genaddrs}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_genaddrs()}}}}
-
-
-
-
-\subsubsection{krb5\_auth\_con\_setrcache - Set the replay cache in an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_setrcache::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_setrcache:krb5-auth-con-setrcache-set-the-replay-cache-in-an-auth-context}}\index{krb5\_auth\_con\_setrcache (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_setrcache:c.krb5_auth_con_setrcache}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_setrcache}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_rcache:c.krb5_rcache}]{\sphinxcrossref{krb5\_rcache}}}\sphinxstyleemphasis{ rcache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{rcache} - Replay cache haddle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets the replay cache in \sphinxstyleemphasis{auth\_context} to \sphinxstyleemphasis{rcache} . \sphinxstyleemphasis{rcache} will be closed when \sphinxstyleemphasis{auth\_context} is freed, so the caller should relinquish that responsibility.
-
-
-\subsubsection{krb5\_auth\_con\_setrecvsubkey - Set the receiving subkey in an auth context with a keyblock.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_setrecvsubkey:krb5-auth-con-setrecvsubkey-set-the-receiving-subkey-in-an-auth-context-with-a-keyblock}}\label{\detokenize{appdev/refs/api/krb5_auth_con_setrecvsubkey::doc}}\index{krb5\_auth\_con\_setrecvsubkey (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_setrecvsubkey:c.krb5_auth_con_setrecvsubkey}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_setrecvsubkey}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ ac}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ keyblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ac} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keyblock} - Receiving subkey
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets the receiving subkey in \sphinxstyleemphasis{ac} to a copy of \sphinxstyleemphasis{keyblock} .
-
-
-\subsubsection{krb5\_auth\_con\_setrecvsubkey\_k - Set the receiving subkey in an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_setrecvsubkey_k::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_setrecvsubkey_k:krb5-auth-con-setrecvsubkey-k-set-the-receiving-subkey-in-an-auth-context}}\index{krb5\_auth\_con\_setrecvsubkey\_k (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_setrecvsubkey_k:c.krb5_auth_con_setrecvsubkey_k}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_setrecvsubkey\_k}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ ac}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ac} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Receiving subkey
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets the receiving subkey in \sphinxstyleemphasis{ac} to \sphinxstyleemphasis{key} , incrementing its reference count.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_auth\_con\_setsendsubkey - Set the send subkey in an auth context with a keyblock.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_setsendsubkey::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_setsendsubkey:krb5-auth-con-setsendsubkey-set-the-send-subkey-in-an-auth-context-with-a-keyblock}}\index{krb5\_auth\_con\_setsendsubkey (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_setsendsubkey:c.krb5_auth_con_setsendsubkey}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_setsendsubkey}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ ac}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ keyblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ac} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keyblock} - Send subkey
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success. Otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets the send subkey in \sphinxstyleemphasis{ac} to a copy of \sphinxstyleemphasis{keyblock} .
-
-
-\subsubsection{krb5\_auth\_con\_setsendsubkey\_k - Set the send subkey in an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_setsendsubkey_k:krb5-auth-con-setsendsubkey-k-set-the-send-subkey-in-an-auth-context}}\label{\detokenize{appdev/refs/api/krb5_auth_con_setsendsubkey_k::doc}}\index{krb5\_auth\_con\_setsendsubkey\_k (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_setsendsubkey_k:c.krb5_auth_con_setsendsubkey_k}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_setsendsubkey\_k}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ ac}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ac} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{key} - Send subkey
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets the send subkey in \sphinxstyleemphasis{ac} to \sphinxstyleemphasis{key} , incrementing its reference count.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_auth\_con\_setuseruserkey - Set the session key in an auth context.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_setuseruserkey::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_setuseruserkey:krb5-auth-con-setuseruserkey-set-the-session-key-in-an-auth-context}}\index{krb5\_auth\_con\_setuseruserkey (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_setuseruserkey:c.krb5_auth_con_setuseruserkey}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_setuseruserkey}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ keyblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keyblock} - User key
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_cc\_cache\_match - Find a credential cache with a specified client principal.}
-\label{\detokenize{appdev/refs/api/krb5_cc_cache_match:krb5-cc-cache-match-find-a-credential-cache-with-a-specified-client-principal}}\label{\detokenize{appdev/refs/api/krb5_cc_cache_match::doc}}\index{krb5\_cc\_cache\_match (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_cache_match:c.krb5_cc_cache_match}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_cache\_match}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ client}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}} *\sphinxstyleemphasis{ cache\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{client} - Client principal
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cache\_out} - Credential cache handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KRB5\_CC\_NOTFOUND None
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Find a cache within the collection whose default principal is \sphinxstyleemphasis{client} . Use \sphinxstyleemphasis{krb5\_cc\_close} to close \sphinxstyleemphasis{ccache} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.10
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cc\_copy\_creds - Copy a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_copy_creds::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_copy_creds:krb5-cc-copy-creds-copy-a-credential-cache}}\index{krb5\_cc\_copy\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_copy_creds:c.krb5_cc_copy_creds}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_copy\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ incc}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ outcc}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{incc} - Credential cache to be copied
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outcc} - Copy of credential cache to be filled in
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_cc\_end\_seq\_get - Finish a series of sequential processing credential cache entries.}
-\label{\detokenize{appdev/refs/api/krb5_cc_end_seq_get:krb5-cc-end-seq-get-finish-a-series-of-sequential-processing-credential-cache-entries}}\label{\detokenize{appdev/refs/api/krb5_cc_end_seq_get::doc}}\index{krb5\_cc\_end\_seq\_get (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_end_seq_get:c.krb5_cc_end_seq_get}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_end\_seq\_get}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, {\hyperref[\detokenize{appdev/refs/types/krb5_cc_cursor:c.krb5_cc_cursor}]{\sphinxcrossref{krb5\_cc\_cursor}}} *\sphinxstyleemphasis{ cursor}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cursor} - Cursor
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 (always)
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function finishes processing credential cache entries and invalidates \sphinxstyleemphasis{cursor} .
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_cc_start_seq_get:c.krb5_cc_start_seq_get}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_start\_seq\_get()}}}} , {\hyperref[\detokenize{appdev/refs/api/krb5_cc_next_cred:c.krb5_cc_next_cred}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_next\_cred()}}}}
-
-
-
-
-\subsubsection{krb5\_cc\_get\_config - Get a configuration value from a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_get_config:krb5-cc-get-config-get-a-configuration-value-from-a-credential-cache}}\label{\detokenize{appdev/refs/api/krb5_cc_get_config::doc}}\index{krb5\_cc\_get\_config (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_get_config:c.krb5_cc_get_config}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_get\_config}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ id}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, const char *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{id} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Configuration for this principal; if NULL, global for the whole cache
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Name of config variable
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{data} - Data to be fetched
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{data} when it is no longer needed.
-
-
-\subsubsection{krb5\_cc\_get\_flags - Retrieve flags from a credential cache structure.}
-\label{\detokenize{appdev/refs/api/krb5_cc_get_flags:krb5-cc-get-flags-retrieve-flags-from-a-credential-cache-structure}}\label{\detokenize{appdev/refs/api/krb5_cc_get_flags::doc}}\index{krb5\_cc\_get\_flags (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_get_flags:c.krb5_cc_get_flags}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_get\_flags}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} *\sphinxstyleemphasis{ flags}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{flags} - Flag bit mask
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{warning}{Warning:}
-For memory credential cache always returns a flag mask of 0.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cc\_get\_full\_name - Retrieve the full name of a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_get_full_name::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_get_full_name:krb5-cc-get-full-name-retrieve-the-full-name-of-a-credential-cache}}\index{krb5\_cc\_get\_full\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_get_full_name:c.krb5_cc_get_full_name}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_get\_full\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, char **\sphinxstyleemphasis{ fullname\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{fullname\_out} - Full name of cache
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_string:c.krb5_free_string}]{\sphinxcrossref{\sphinxcode{krb5\_free\_string()}}}} to free \sphinxstyleemphasis{fullname\_out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.10
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cc\_move - Move a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_move:krb5-cc-move-move-a-credential-cache}}\label{\detokenize{appdev/refs/api/krb5_cc_move::doc}}\index{krb5\_cc\_move (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_move:c.krb5_cc_move}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_move}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ src}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ dst}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{src} - The credential cache to move the content from
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{dst} - The credential cache to move the content to
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; src is closed.
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes; src is still allocated.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function reinitializes \sphinxstyleemphasis{dst} and populates it with the credentials and default principal of \sphinxstyleemphasis{src} ; then, if successful, destroys \sphinxstyleemphasis{src} .
-
-
-\subsubsection{krb5\_cc\_next\_cred - Retrieve the next entry from the credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_next_cred::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_next_cred:krb5-cc-next-cred-retrieve-the-next-entry-from-the-credential-cache}}\index{krb5\_cc\_next\_cred (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_next_cred:c.krb5_cc_next_cred}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_next\_cred}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, {\hyperref[\detokenize{appdev/refs/types/krb5_cc_cursor:c.krb5_cc_cursor}]{\sphinxcrossref{krb5\_cc\_cursor}}} *\sphinxstyleemphasis{ cursor}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cursor} - Cursor
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{creds} - Next credential cache entry
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function fills in \sphinxstyleemphasis{creds} with the next entry in \sphinxstyleemphasis{cache} and advances \sphinxstyleemphasis{cursor} .
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_cred_contents:c.krb5_free_cred_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_cred\_contents()}}}} to free \sphinxstyleemphasis{creds} when it is no longer needed.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_cc_start_seq_get:c.krb5_cc_start_seq_get}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_start\_seq\_get()}}}} , krb5\_end\_seq\_get()
-
-
-
-
-\subsubsection{krb5\_cc\_remove\_cred - Remove credentials from a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_remove_cred:krb5-cc-remove-cred-remove-credentials-from-a-credential-cache}}\label{\detokenize{appdev/refs/api/krb5_cc_remove_cred::doc}}\index{krb5\_cc\_remove\_cred (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_remove_cred:c.krb5_cc_remove_cred}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_remove\_cred}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ flags}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Bitwise-ORed search flags
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{creds} - Credentials to be matched
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-KRB5\_CC\_NOSUPP Not implemented for this cache type
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-No matches found; Data cannot be deleted; Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function accepts the same flag values as {\hyperref[\detokenize{appdev/refs/api/krb5_cc_retrieve_cred:c.krb5_cc_retrieve_cred}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_retrieve\_cred()}}}} .
-
-\begin{sphinxadmonition}{warning}{Warning:}
-This function is not implemented for some cache types.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cc\_retrieve\_cred - Retrieve a specified credentials from a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_retrieve_cred:krb5-cc-retrieve-cred-retrieve-a-specified-credentials-from-a-credential-cache}}\label{\detokenize{appdev/refs/api/krb5_cc_retrieve_cred::doc}}\index{krb5\_cc\_retrieve\_cred (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_retrieve_cred:c.krb5_cc_retrieve_cred}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_retrieve\_cred}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ flags}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ mcreds}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Flags bit mask
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{mcreds} - Credentials to match
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{creds} - Credentials matching the requested value
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function searches a credential cache for credentials matching \sphinxstyleemphasis{mcreds} and returns it if found.
-
-Valid values for \sphinxstyleemphasis{flags} are:
-\begin{quote}
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_TC_MATCH_TIMES:KRB5_TC_MATCH_TIMES}]{\sphinxcrossref{\sphinxcode{KRB5\_TC\_MATCH\_TIMES}}}} The requested lifetime must be at least as great as in \sphinxstyleemphasis{mcreds} .
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY:KRB5_TC_MATCH_IS_SKEY}]{\sphinxcrossref{\sphinxcode{KRB5\_TC\_MATCH\_IS\_SKEY}}}} The \sphinxstyleemphasis{is\_skey} field much match exactly.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_TC_MATCH_FLAGS:KRB5_TC_MATCH_FLAGS}]{\sphinxcrossref{\sphinxcode{KRB5\_TC\_MATCH\_FLAGS}}}} Flags set in \sphinxstyleemphasis{mcreds} must be set.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT:KRB5_TC_MATCH_TIMES_EXACT}]{\sphinxcrossref{\sphinxcode{KRB5\_TC\_MATCH\_TIMES\_EXACT}}}} The requested lifetime must match exactly.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT:KRB5_TC_MATCH_FLAGS_EXACT}]{\sphinxcrossref{\sphinxcode{KRB5\_TC\_MATCH\_FLAGS\_EXACT}}}} Flags must match exactly.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA:KRB5_TC_MATCH_AUTHDATA}]{\sphinxcrossref{\sphinxcode{KRB5\_TC\_MATCH\_AUTHDATA}}}} The authorization data must match.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY:KRB5_TC_MATCH_SRV_NAMEONLY}]{\sphinxcrossref{\sphinxcode{KRB5\_TC\_MATCH\_SRV\_NAMEONLY}}}} Only the name portion of the principal name must match, not the realm.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT:KRB5_TC_MATCH_2ND_TKT}]{\sphinxcrossref{\sphinxcode{KRB5\_TC\_MATCH\_2ND\_TKT}}}} The second tickets must match.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_TC_MATCH_KTYPE:KRB5_TC_MATCH_KTYPE}]{\sphinxcrossref{\sphinxcode{KRB5\_TC\_MATCH\_KTYPE}}}} The encryption key types must match.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES:KRB5_TC_SUPPORTED_KTYPES}]{\sphinxcrossref{\sphinxcode{KRB5\_TC\_SUPPORTED\_KTYPES}}}} Check all matching entries that have any supported encryption type and return the one with the encryption type listed earliest.
-
-\end{itemize}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_cred_contents:c.krb5_free_cred_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_cred\_contents()}}}} to free \sphinxstyleemphasis{creds} when it is no longer needed.
-\end{quote}
-
-
-\subsubsection{krb5\_cc\_select - Select a credential cache to use with a server principal.}
-\label{\detokenize{appdev/refs/api/krb5_cc_select::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_select:krb5-cc-select-select-a-credential-cache-to-use-with-a-server-principal}}\index{krb5\_cc\_select (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_select:c.krb5_cc_select}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_select}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ server}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}} *\sphinxstyleemphasis{ cache\_out}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ princ\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Server principal
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cache\_out} - Credential cache handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{princ\_out} - Client principal
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-If an appropriate cache is found, 0 is returned, cache\_out is set to the selected cache, and princ\_out is set to the default principal of that cache.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Select a cache within the collection containing credentials most appropriate for use with \sphinxstyleemphasis{server} , according to configured rules and heuristics.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_cc_close:c.krb5_cc_close}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_close()}}}} to release \sphinxstyleemphasis{cache\_out} when it is no longer needed. Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}]{\sphinxcrossref{\sphinxcode{krb5\_free\_principal()}}}} to release \sphinxstyleemphasis{princ\_out} when it is no longer needed. Note that \sphinxstyleemphasis{princ\_out} is set in some error conditions.
-
-If the appropriate client principal can be authoritatively determined but the cache collection contains no credentials for that principal, then KRB5\_CC\_NOTFOUND is returned, \sphinxstyleemphasis{cache\_out} is set to NULL, and \sphinxstyleemphasis{princ\_out} is set to the appropriate client principal.
-
-If no configured mechanism can determine the appropriate cache or principal, KRB5\_CC\_NOTFOUND is returned and \sphinxstyleemphasis{cache\_out} and \sphinxstyleemphasis{princ\_out} are set to NULL.
-
-Any other error code indicates a fatal error in the processing of a cache selection mechanism.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.10
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cc\_set\_config - Store a configuration value in a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_set_config::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_set_config:krb5-cc-set-config-store-a-configuration-value-in-a-credential-cache}}\index{krb5\_cc\_set\_config (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_set_config:c.krb5_cc_set_config}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_set\_config}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ id}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, const char *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{id} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Configuration for a specific principal; if NULL, global for the whole cache
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Name of config variable
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - Data to store, or NULL to remove
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{warning}{Warning:}
-Before version 1.10 \sphinxstyleemphasis{data} was assumed to be always non-null.
-\end{sphinxadmonition}
-
-\begin{sphinxadmonition}{note}{Note:}
-Existing configuration under the same key is over-written.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cc\_set\_default\_name - Set the default credential cache name.}
-\label{\detokenize{appdev/refs/api/krb5_cc_set_default_name:krb5-cc-set-default-name-set-the-default-credential-cache-name}}\label{\detokenize{appdev/refs/api/krb5_cc_set_default_name::doc}}\index{krb5\_cc\_set\_default\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_set_default_name:c.krb5_cc_set_default_name}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_set\_default\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ name}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{name} - Default credential cache name or NULL
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KV5M\_CONTEXT Bad magic number for \_krb5\_context structure
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Set the default credential cache name to \sphinxstyleemphasis{name} for future operations using \sphinxstyleemphasis{context} . If \sphinxstyleemphasis{name} is NULL, clear any previous application-set default name and forget any cached value of the default name for \sphinxstyleemphasis{context} .
-
-Calls to this function invalidate the result of any previous calls to {\hyperref[\detokenize{appdev/refs/api/krb5_cc_default_name:c.krb5_cc_default_name}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_default\_name()}}}} using \sphinxstyleemphasis{context} .
-
-
-\subsubsection{krb5\_cc\_set\_flags - Set options flags on a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_set_flags:krb5-cc-set-flags-set-options-flags-on-a-credential-cache}}\label{\detokenize{appdev/refs/api/krb5_cc_set_flags::doc}}\index{krb5\_cc\_set\_flags (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_set_flags:c.krb5_cc_set_flags}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_set\_flags}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ flags}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Flag bit mask
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function resets \sphinxstyleemphasis{cache} flags to \sphinxstyleemphasis{flags} .
-
-
-\subsubsection{krb5\_cc\_start\_seq\_get - Prepare to sequentially read every credential in a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_start_seq_get::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_start_seq_get:krb5-cc-start-seq-get-prepare-to-sequentially-read-every-credential-in-a-credential-cache}}\index{krb5\_cc\_start\_seq\_get (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_start_seq_get:c.krb5_cc_start_seq_get}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_start\_seq\_get}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, {\hyperref[\detokenize{appdev/refs/types/krb5_cc_cursor:c.krb5_cc_cursor}]{\sphinxcrossref{krb5\_cc\_cursor}}} *\sphinxstyleemphasis{ cursor}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cursor} - Cursor
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-\begin{quote}
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_cc_end_seq_get:c.krb5_cc_end_seq_get}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_end\_seq\_get()}}}} must be called to complete the retrieve operation.
-\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-If the cache represented by \sphinxstyleemphasis{cache} is modified between the time of the call to this function and the time of the final {\hyperref[\detokenize{appdev/refs/api/krb5_cc_end_seq_get:c.krb5_cc_end_seq_get}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_end\_seq\_get()}}}} , these changes may not be reflected in the results of {\hyperref[\detokenize{appdev/refs/api/krb5_cc_next_cred:c.krb5_cc_next_cred}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_next\_cred()}}}} calls.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cc\_store\_cred - Store credentials in a credential cache.}
-\label{\detokenize{appdev/refs/api/krb5_cc_store_cred:krb5-cc-store-cred-store-credentials-in-a-credential-cache}}\label{\detokenize{appdev/refs/api/krb5_cc_store_cred::doc}}\index{krb5\_cc\_store\_cred (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_store_cred:c.krb5_cc_store_cred}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_store\_cred}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{creds} - Credentials to be stored in cache
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Permission errors; storage failure errors; Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function stores \sphinxstyleemphasis{creds} into \sphinxstyleemphasis{cache} . If \sphinxstyleemphasis{creds-\textgreater{}server} and the server in the decoded ticket \sphinxstyleemphasis{creds-\textgreater{}ticket} differ, the credentials will be stored under both server principal names.
-
-
-\subsubsection{krb5\_cc\_support\_switch - Determine whether a credential cache type supports switching.}
-\label{\detokenize{appdev/refs/api/krb5_cc_support_switch::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_support_switch:krb5-cc-support-switch-determine-whether-a-credential-cache-type-supports-switching}}\index{krb5\_cc\_support\_switch (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_support_switch:c.krb5_cc_support_switch}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_cc\_support\_switch}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ type}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{type} - Credential cache type
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-TRUE if type supports switching
-
-\item {}
-FALSE if it does not or is not a valid credential cache type.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.10
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cc\_switch - Make a credential cache the primary cache for its collection.}
-\label{\detokenize{appdev/refs/api/krb5_cc_switch::doc}}\label{\detokenize{appdev/refs/api/krb5_cc_switch:krb5-cc-switch-make-a-credential-cache-the-primary-cache-for-its-collection}}\index{krb5\_cc\_switch (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_switch:c.krb5_cc_switch}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_switch}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ cache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cache} - Credential cache handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success, or the type of cache doesn’t support switching
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-If the type of \sphinxstyleemphasis{cache} supports it, set \sphinxstyleemphasis{cache} to be the primary credential cache for the collection it belongs to.
-
-
-\subsubsection{krb5\_cccol\_cursor\_free - Free a credential cache collection cursor.}
-\label{\detokenize{appdev/refs/api/krb5_cccol_cursor_free::doc}}\label{\detokenize{appdev/refs/api/krb5_cccol_cursor_free:krb5-cccol-cursor-free-free-a-credential-cache-collection-cursor}}\index{krb5\_cccol\_cursor\_free (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cccol_cursor_free:c.krb5_cccol_cursor_free}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cccol\_cursor\_free}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cccol_cursor:c.krb5_cccol_cursor}]{\sphinxcrossref{krb5\_cccol\_cursor}}} *\sphinxstyleemphasis{ cursor}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cursor} - Cursor
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_cccol_cursor_new:c.krb5_cccol_cursor_new}]{\sphinxcrossref{\sphinxcode{krb5\_cccol\_cursor\_new()}}}} , {\hyperref[\detokenize{appdev/refs/api/krb5_cccol_cursor_next:c.krb5_cccol_cursor_next}]{\sphinxcrossref{\sphinxcode{krb5\_cccol\_cursor\_next()}}}}
-
-
-
-
-\subsubsection{krb5\_cccol\_cursor\_new - Prepare to iterate over the collection of known credential caches.}
-\label{\detokenize{appdev/refs/api/krb5_cccol_cursor_new::doc}}\label{\detokenize{appdev/refs/api/krb5_cccol_cursor_new:krb5-cccol-cursor-new-prepare-to-iterate-over-the-collection-of-known-credential-caches}}\index{krb5\_cccol\_cursor\_new (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cccol_cursor_new:c.krb5_cccol_cursor_new}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cccol\_cursor\_new}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cccol_cursor:c.krb5_cccol_cursor}]{\sphinxcrossref{krb5\_cccol\_cursor}}} *\sphinxstyleemphasis{ cursor}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cursor} - Cursor
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Get a new cache iteration \sphinxstyleemphasis{cursor} that will iterate over all known credential caches independent of type.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_cccol_cursor_free:c.krb5_cccol_cursor_free}]{\sphinxcrossref{\sphinxcode{krb5\_cccol\_cursor\_free()}}}} to release \sphinxstyleemphasis{cursor} when it is no longer needed.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_cccol_cursor_next:c.krb5_cccol_cursor_next}]{\sphinxcrossref{\sphinxcode{krb5\_cccol\_cursor\_next()}}}}
-
-
-
-
-\subsubsection{krb5\_cccol\_cursor\_next - Get the next credential cache in the collection.}
-\label{\detokenize{appdev/refs/api/krb5_cccol_cursor_next::doc}}\label{\detokenize{appdev/refs/api/krb5_cccol_cursor_next:krb5-cccol-cursor-next-get-the-next-credential-cache-in-the-collection}}\index{krb5\_cccol\_cursor\_next (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cccol_cursor_next:c.krb5_cccol_cursor_next}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cccol\_cursor\_next}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cccol_cursor:c.krb5_cccol_cursor}]{\sphinxcrossref{krb5\_cccol\_cursor}}}\sphinxstyleemphasis{ cursor}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}} *\sphinxstyleemphasis{ ccache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cursor} - Cursor
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ccache} - Credential cache handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_cc_close:c.krb5_cc_close}]{\sphinxcrossref{\sphinxcode{krb5\_cc\_close()}}}} to close \sphinxstyleemphasis{ccache} when it is no longer needed.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_cccol_cursor_new:c.krb5_cccol_cursor_new}]{\sphinxcrossref{\sphinxcode{krb5\_cccol\_cursor\_new()}}}} , {\hyperref[\detokenize{appdev/refs/api/krb5_cccol_cursor_free:c.krb5_cccol_cursor_free}]{\sphinxcrossref{\sphinxcode{krb5\_cccol\_cursor\_free()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-When all caches are iterated over and the end of the list is reached, \sphinxstyleemphasis{ccache} is set to NULL.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cccol\_have\_content - Check if the credential cache collection contains any initialized caches.}
-\label{\detokenize{appdev/refs/api/krb5_cccol_have_content:krb5-cccol-have-content-check-if-the-credential-cache-collection-contains-any-initialized-caches}}\label{\detokenize{appdev/refs/api/krb5_cccol_have_content::doc}}\index{krb5\_cccol\_have\_content (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cccol_have_content:c.krb5_cccol_have_content}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cccol\_have\_content}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 At least one initialized cache is present in the collection
-
-\item {}
-KRB5\_CC\_NOTFOUND The collection contains no caches
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_clear\_error\_message - Clear the extended error message in a context.}
-\label{\detokenize{appdev/refs/api/krb5_clear_error_message:krb5-clear-error-message-clear-the-extended-error-message-in-a-context}}\label{\detokenize{appdev/refs/api/krb5_clear_error_message::doc}}\index{krb5\_clear\_error\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_clear_error_message:c.krb5_clear_error_message}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_clear\_error\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\end{description}\end{quote}
-
-This function unsets the extended error message in a context, to ensure that it is not mistakenly applied to another occurrence of the same error code.
-
-
-\subsubsection{krb5\_check\_clockskew - Check if a timestamp is within the allowed clock skew of the current time.}
-\label{\detokenize{appdev/refs/api/krb5_check_clockskew:krb5-check-clockskew-check-if-a-timestamp-is-within-the-allowed-clock-skew-of-the-current-time}}\label{\detokenize{appdev/refs/api/krb5_check_clockskew::doc}}\index{krb5\_check\_clockskew (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_check_clockskew:c.krb5_check_clockskew}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_check\_clockskew}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}}\sphinxstyleemphasis{ date}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{date} - Timestamp to check
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KRB5KRB\_AP\_ERR\_SKEW date is not within allowable clock skew
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function checks if \sphinxstyleemphasis{date} is close enough to the current time according to the configured allowable clock skew.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.10
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_copy\_addresses - Copy an array of addresses.}
-\label{\detokenize{appdev/refs/api/krb5_copy_addresses:krb5-copy-addresses-copy-an-array-of-addresses}}\label{\detokenize{appdev/refs/api/krb5_copy_addresses::doc}}\index{krb5\_copy\_addresses (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_addresses:c.krb5_copy_addresses}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_addresses}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *const *\sphinxstyleemphasis{ inaddr}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} ***\sphinxstyleemphasis{ outaddr}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{inaddr} - Array of addresses to be copied
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outaddr} - Copy of array of addresses
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new address array containing a copy of \sphinxstyleemphasis{inaddr} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_addresses:c.krb5_free_addresses}]{\sphinxcrossref{\sphinxcode{krb5\_free\_addresses()}}}} to free \sphinxstyleemphasis{outaddr} when it is no longer needed.
-
-
-\subsubsection{krb5\_copy\_authdata - Copy an authorization data list.}
-\label{\detokenize{appdev/refs/api/krb5_copy_authdata:krb5-copy-authdata-copy-an-authorization-data-list}}\label{\detokenize{appdev/refs/api/krb5_copy_authdata::doc}}\index{krb5\_copy\_authdata (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_authdata:c.krb5_copy_authdata}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_authdata}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} *const *\sphinxstyleemphasis{ in\_authdat}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ***\sphinxstyleemphasis{ out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_authdat} - List of \sphinxstyleemphasis{krb5\_authdata} structures
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out} - New array of \sphinxstyleemphasis{krb5\_authdata} structures
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new authorization data list containing a copy of \sphinxstyleemphasis{in\_authdat} , which must be null-terminated. Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_authdata:c.krb5_free_authdata}]{\sphinxcrossref{\sphinxcode{krb5\_free\_authdata()}}}} to free \sphinxstyleemphasis{out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-The last array entry in \sphinxstyleemphasis{in\_authdat} must be a NULL pointer.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_copy\_authenticator - Copy a krb5\_authenticator structure.}
-\label{\detokenize{appdev/refs/api/krb5_copy_authenticator:krb5-copy-authenticator-copy-a-krb5-authenticator-structure}}\label{\detokenize{appdev/refs/api/krb5_copy_authenticator::doc}}\index{krb5\_copy\_authenticator (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_authenticator:c.krb5_copy_authenticator}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_authenticator}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator}]{\sphinxcrossref{krb5\_authenticator}}} *\sphinxstyleemphasis{ authfrom}, {\hyperref[\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator}]{\sphinxcrossref{krb5\_authenticator}}} **\sphinxstyleemphasis{ authto}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{authfrom} - krb5\_authenticator structure to be copied
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{authto} - Copy of krb5\_authenticator structure
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new krb5\_authenticator structure with the content of \sphinxstyleemphasis{authfrom} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_authenticator:c.krb5_free_authenticator}]{\sphinxcrossref{\sphinxcode{krb5\_free\_authenticator()}}}} to free \sphinxstyleemphasis{authto} when it is no longer needed.
-
-
-\subsubsection{krb5\_copy\_checksum - Copy a krb5\_checksum structure.}
-\label{\detokenize{appdev/refs/api/krb5_copy_checksum:krb5-copy-checksum-copy-a-krb5-checksum-structure}}\label{\detokenize{appdev/refs/api/krb5_copy_checksum::doc}}\index{krb5\_copy\_checksum (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_checksum:c.krb5_copy_checksum}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_checksum}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} *\sphinxstyleemphasis{ ckfrom}, {\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} **\sphinxstyleemphasis{ ckto}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ckfrom} - Checksum to be copied
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ckto} - Copy of krb5\_checksum structure
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new krb5\_checksum structure with the contents of \sphinxstyleemphasis{ckfrom} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_checksum:c.krb5_free_checksum}]{\sphinxcrossref{\sphinxcode{krb5\_free\_checksum()}}}} to free \sphinxstyleemphasis{ckto} when it is no longer needed.
-
-
-\subsubsection{krb5\_copy\_context - Copy a krb5\_context structure.}
-\label{\detokenize{appdev/refs/api/krb5_copy_context:krb5-copy-context-copy-a-krb5-context-structure}}\label{\detokenize{appdev/refs/api/krb5_copy_context::doc}}\index{krb5\_copy\_context (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_context:c.krb5_copy_context}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_context}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}} *\sphinxstyleemphasis{ nctx\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{nctx\_out} - New context structure
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-The newly created context must be released by calling {\hyperref[\detokenize{appdev/refs/api/krb5_free_context:c.krb5_free_context}]{\sphinxcrossref{\sphinxcode{krb5\_free\_context()}}}} when it is no longer needed.
-
-
-\subsubsection{krb5\_copy\_creds - Copy a krb5\_creds structure.}
-\label{\detokenize{appdev/refs/api/krb5_copy_creds:krb5-copy-creds-copy-a-krb5-creds-structure}}\label{\detokenize{appdev/refs/api/krb5_copy_creds::doc}}\index{krb5\_copy\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_creds:c.krb5_copy_creds}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ incred}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} **\sphinxstyleemphasis{ outcred}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{incred} - Credentials structure to be copied
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outcred} - Copy of \sphinxstyleemphasis{incred}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new credential with the contents of \sphinxstyleemphasis{incred} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_creds:c.krb5_free_creds}]{\sphinxcrossref{\sphinxcode{krb5\_free\_creds()}}}} to free \sphinxstyleemphasis{outcred} when it is no longer needed.
-
-
-\subsubsection{krb5\_copy\_data - Copy a krb5\_data object.}
-\label{\detokenize{appdev/refs/api/krb5_copy_data:krb5-copy-data-copy-a-krb5-data-object}}\label{\detokenize{appdev/refs/api/krb5_copy_data::doc}}\index{krb5\_copy\_data (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_data:c.krb5_copy_data}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_data}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ indata}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} **\sphinxstyleemphasis{ outdata}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{indata} - Data object to be copied
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outdata} - Copy of \sphinxstyleemphasis{indata}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new krb5\_data object with the contents of \sphinxstyleemphasis{indata} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data:c.krb5_free_data}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data()}}}} to free \sphinxstyleemphasis{outdata} when it is no longer needed.
-
-
-\subsubsection{krb5\_copy\_error\_message - Copy the most recent extended error message from one context to another.}
-\label{\detokenize{appdev/refs/api/krb5_copy_error_message:krb5-copy-error-message-copy-the-most-recent-extended-error-message-from-one-context-to-another}}\label{\detokenize{appdev/refs/api/krb5_copy_error_message::doc}}\index{krb5\_copy\_error\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_error_message:c.krb5_copy_error_message}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_copy\_error\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ dest\_ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ src\_ctx}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{dest\_ctx} - Library context to copy message to
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{src\_ctx} - Library context with current message
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_copy\_keyblock - Copy a keyblock.}
-\label{\detokenize{appdev/refs/api/krb5_copy_keyblock:krb5-copy-keyblock-copy-a-keyblock}}\label{\detokenize{appdev/refs/api/krb5_copy_keyblock::doc}}\index{krb5\_copy\_keyblock (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_keyblock:c.krb5_copy_keyblock}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_keyblock}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ from}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ to}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{from} - Keyblock to be copied
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{to} - Copy of keyblock \sphinxstyleemphasis{from}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new keyblock with the same contents as \sphinxstyleemphasis{from} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_keyblock:c.krb5_free_keyblock}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keyblock()}}}} to free \sphinxstyleemphasis{to} when it is no longer needed.
-
-
-\subsubsection{krb5\_copy\_keyblock\_contents - Copy the contents of a keyblock.}
-\label{\detokenize{appdev/refs/api/krb5_copy_keyblock_contents:krb5-copy-keyblock-contents-copy-the-contents-of-a-keyblock}}\label{\detokenize{appdev/refs/api/krb5_copy_keyblock_contents::doc}}\index{krb5\_copy\_keyblock\_contents (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_keyblock_contents:c.krb5_copy_keyblock_contents}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_keyblock\_contents}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ from}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ to}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{from} - Key to be copied
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{to} - Output key
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function copies the contents of \sphinxstyleemphasis{from} to \sphinxstyleemphasis{to} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_keyblock_contents:c.krb5_free_keyblock_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keyblock\_contents()}}}} to free \sphinxstyleemphasis{to} when it is no longer needed.
-
-
-\subsubsection{krb5\_copy\_principal - Copy a principal.}
-\label{\detokenize{appdev/refs/api/krb5_copy_principal:krb5-copy-principal-copy-a-principal}}\label{\detokenize{appdev/refs/api/krb5_copy_principal::doc}}\index{krb5\_copy\_principal (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_principal:c.krb5_copy_principal}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_principal}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ inprinc}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} *\sphinxstyleemphasis{ outprinc}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{inprinc} - Principal to be copied
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outprinc} - Copy of \sphinxstyleemphasis{inprinc}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new principal structure with the contents of \sphinxstyleemphasis{inprinc} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_principal:c.krb5_free_principal}]{\sphinxcrossref{\sphinxcode{krb5\_free\_principal()}}}} to free \sphinxstyleemphasis{outprinc} when it is no longer needed.
-
-
-\subsubsection{krb5\_copy\_ticket - Copy a krb5\_ticket structure.}
-\label{\detokenize{appdev/refs/api/krb5_copy_ticket:krb5-copy-ticket-copy-a-krb5-ticket-structure}}\label{\detokenize{appdev/refs/api/krb5_copy_ticket::doc}}\index{krb5\_copy\_ticket (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_copy_ticket:c.krb5_copy_ticket}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_copy\_ticket}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} *\sphinxstyleemphasis{ from}, {\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} **\sphinxstyleemphasis{ pto}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{from} - Ticket to be copied
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{pto} - Copy of ticket
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new krb5\_ticket structure containing the contents of \sphinxstyleemphasis{from} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_ticket:c.krb5_free_ticket}]{\sphinxcrossref{\sphinxcode{krb5\_free\_ticket()}}}} to free \sphinxstyleemphasis{pto} when it is no longer needed.
-
-
-\subsubsection{krb5\_find\_authdata - Find authorization data elements.}
-\label{\detokenize{appdev/refs/api/krb5_find_authdata:krb5-find-authdata-find-authorization-data-elements}}\label{\detokenize{appdev/refs/api/krb5_find_authdata::doc}}\index{krb5\_find\_authdata (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_find_authdata:c.krb5_find_authdata}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_find\_authdata}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} *const *\sphinxstyleemphasis{ ticket\_authdata}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} *const *\sphinxstyleemphasis{ ap\_req\_authdata}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdatatype:c.krb5_authdatatype}]{\sphinxcrossref{krb5\_authdatatype}}}\sphinxstyleemphasis{ ad\_type}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ***\sphinxstyleemphasis{ results}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ticket\_authdata} - Authorization data list from ticket
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ap\_req\_authdata} - Authorization data list from AP request
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ad\_type} - Authorization data type to find
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{results} - List of matching entries
-
-\end{description}\end{quote}
-
-This function searches \sphinxstyleemphasis{ticket\_authdata} and \sphinxstyleemphasis{ap\_req\_authdata} for elements of type \sphinxstyleemphasis{ad\_type} . Either input list may be NULL, in which case it will not be searched; otherwise, the input lists must be terminated by NULL entries. This function will search inside AD-IF-RELEVANT containers if found in either list. Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_authdata:c.krb5_free_authdata}]{\sphinxcrossref{\sphinxcode{krb5\_free\_authdata()}}}} to free \sphinxstyleemphasis{results} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.10
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_free\_addresses - Free the data stored in array of addresses.}
-\label{\detokenize{appdev/refs/api/krb5_free_addresses:krb5-free-addresses-free-the-data-stored-in-array-of-addresses}}\label{\detokenize{appdev/refs/api/krb5_free_addresses::doc}}\index{krb5\_free\_addresses (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_addresses:c.krb5_free_addresses}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_addresses}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} **\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Array of addresses to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} and the array itself.
-
-\begin{sphinxadmonition}{note}{Note:}
-The last entry in the array must be a NULL pointer.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_free\_ap\_rep\_enc\_part - Free a krb5\_ap\_rep\_enc\_part structure.}
-\label{\detokenize{appdev/refs/api/krb5_free_ap_rep_enc_part:krb5-free-ap-rep-enc-part-free-a-krb5-ap-rep-enc-part-structure}}\label{\detokenize{appdev/refs/api/krb5_free_ap_rep_enc_part::doc}}\index{krb5\_free\_ap\_rep\_enc\_part (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_ap_rep_enc_part:c.krb5_free_ap_rep_enc_part}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_ap\_rep\_enc\_part}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:c.krb5_ap_rep_enc_part}]{\sphinxcrossref{krb5\_ap\_rep\_enc\_part}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - AP-REP enc part to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} and the structure itself.
-
-
-\subsubsection{krb5\_free\_authdata - Free the storage assigned to array of authentication data.}
-\label{\detokenize{appdev/refs/api/krb5_free_authdata::doc}}\label{\detokenize{appdev/refs/api/krb5_free_authdata:krb5-free-authdata-free-the-storage-assigned-to-array-of-authentication-data}}\index{krb5\_free\_authdata (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_authdata:c.krb5_free_authdata}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_authdata}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} **\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Array of authentication data to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} and the array itself.
-
-\begin{sphinxadmonition}{note}{Note:}
-The last entry in the array must be a NULL pointer.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_free\_authenticator - Free a krb5\_authenticator structure.}
-\label{\detokenize{appdev/refs/api/krb5_free_authenticator:krb5-free-authenticator-free-a-krb5-authenticator-structure}}\label{\detokenize{appdev/refs/api/krb5_free_authenticator::doc}}\index{krb5\_free\_authenticator (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_authenticator:c.krb5_free_authenticator}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_authenticator}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator}]{\sphinxcrossref{krb5\_authenticator}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Authenticator structure to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} and the structure itself.
-
-
-\subsubsection{krb5\_free\_cred\_contents - Free the contents of a krb5\_creds structure.}
-\label{\detokenize{appdev/refs/api/krb5_free_cred_contents::doc}}\label{\detokenize{appdev/refs/api/krb5_free_cred_contents:krb5-free-cred-contents-free-the-contents-of-a-krb5-creds-structure}}\index{krb5\_free\_cred\_contents (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_cred_contents:c.krb5_free_cred_contents}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_cred\_contents}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Credential structure to free contents of
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} , but not the structure itself.
-
-
-\subsubsection{krb5\_free\_creds - Free a krb5\_creds structure.}
-\label{\detokenize{appdev/refs/api/krb5_free_creds::doc}}\label{\detokenize{appdev/refs/api/krb5_free_creds:krb5-free-creds-free-a-krb5-creds-structure}}\index{krb5\_free\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_creds:c.krb5_free_creds}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Credential structure to be freed.
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} and the structure itself.
-
-
-\subsubsection{krb5\_free\_data - Free a krb5\_data structure.}
-\label{\detokenize{appdev/refs/api/krb5_free_data:krb5-free-data-free-a-krb5-data-structure}}\label{\detokenize{appdev/refs/api/krb5_free_data::doc}}\index{krb5\_free\_data (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_data:c.krb5_free_data}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_data}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Data structure to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} and the structure itself.
-
-
-\subsubsection{krb5\_free\_data\_contents - Free the contents of a krb5\_data structure and zero the data field.}
-\label{\detokenize{appdev/refs/api/krb5_free_data_contents:krb5-free-data-contents-free-the-contents-of-a-krb5-data-structure-and-zero-the-data-field}}\label{\detokenize{appdev/refs/api/krb5_free_data_contents::doc}}\index{krb5\_free\_data\_contents (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_data\_contents}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Data structure to free contents of
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} , but not the structure itself. It sets the structure’s data pointer to null and (beginning in release 1.19) sets its length to zero.
-
-
-\subsubsection{krb5\_free\_default\_realm - Free a default realm string returned by krb5\_get\_default\_realm() .}
-\label{\detokenize{appdev/refs/api/krb5_free_default_realm:krb5-free-default-realm-free-a-default-realm-string-returned-by-krb5-get-default-realm}}\label{\detokenize{appdev/refs/api/krb5_free_default_realm::doc}}\index{krb5\_free\_default\_realm (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_default_realm:c.krb5_free_default_realm}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_default\_realm}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, char *\sphinxstyleemphasis{ lrealm}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{lrealm} - Realm to be freed
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_free\_enctypes - Free an array of encryption types.}
-\label{\detokenize{appdev/refs/api/krb5_free_enctypes::doc}}\label{\detokenize{appdev/refs/api/krb5_free_enctypes:krb5-free-enctypes-free-an-array-of-encryption-types}}\index{krb5\_free\_enctypes (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_enctypes:c.krb5_free_enctypes}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_enctypes}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Array of enctypes to be freed
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.12
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_free\_error - Free an error allocated by krb5\_read\_error() or krb5\_sendauth() .}
-\label{\detokenize{appdev/refs/api/krb5_free_error::doc}}\label{\detokenize{appdev/refs/api/krb5_free_error:krb5-free-error-free-an-error-allocated-by-krb5-read-error-or-krb5-sendauth}}\index{krb5\_free\_error (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_error:c.krb5_free_error}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_error}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_error:c.krb5_error}]{\sphinxcrossref{krb5\_error}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Error data structure to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} and the structure itself.
-
-
-\subsubsection{krb5\_free\_host\_realm - Free the memory allocated by krb5\_get\_host\_realm() .}
-\label{\detokenize{appdev/refs/api/krb5_free_host_realm::doc}}\label{\detokenize{appdev/refs/api/krb5_free_host_realm:krb5-free-host-realm-free-the-memory-allocated-by-krb5-get-host-realm}}\index{krb5\_free\_host\_realm (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_host_realm:c.krb5_free_host_realm}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_free\_host\_realm}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, char *const *\sphinxstyleemphasis{ realmlist}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{realmlist} - List of realm names to be released
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_free\_keyblock - Free a krb5\_keyblock structure.}
-\label{\detokenize{appdev/refs/api/krb5_free_keyblock:krb5-free-keyblock-free-a-krb5-keyblock-structure}}\label{\detokenize{appdev/refs/api/krb5_free_keyblock::doc}}\index{krb5\_free\_keyblock (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_keyblock:c.krb5_free_keyblock}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_keyblock}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Keyblock to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} and the structure itself.
-
-
-\subsubsection{krb5\_free\_keyblock\_contents - Free the contents of a krb5\_keyblock structure.}
-\label{\detokenize{appdev/refs/api/krb5_free_keyblock_contents::doc}}\label{\detokenize{appdev/refs/api/krb5_free_keyblock_contents:krb5-free-keyblock-contents-free-the-contents-of-a-krb5-keyblock-structure}}\index{krb5\_free\_keyblock\_contents (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_keyblock_contents:c.krb5_free_keyblock_contents}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_keyblock\_contents}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Keyblock to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{key} , but not the structure itself.
-
-
-\subsubsection{krb5\_free\_keytab\_entry\_contents - Free the contents of a key table entry.}
-\label{\detokenize{appdev/refs/api/krb5_free_keytab_entry_contents:krb5-free-keytab-entry-contents-free-the-contents-of-a-key-table-entry}}\label{\detokenize{appdev/refs/api/krb5_free_keytab_entry_contents::doc}}\index{krb5\_free\_keytab\_entry\_contents (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_keytab_entry_contents:c.krb5_free_keytab_entry_contents}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_free\_keytab\_entry\_contents}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry}]{\sphinxcrossref{krb5\_keytab\_entry}}} *\sphinxstyleemphasis{ entry}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{entry} - Key table entry whose contents are to be freed
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-The pointer is not freed.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_free\_string - Free a string allocated by a krb5 function.}
-\label{\detokenize{appdev/refs/api/krb5_free_string:krb5-free-string-free-a-string-allocated-by-a-krb5-function}}\label{\detokenize{appdev/refs/api/krb5_free_string::doc}}\index{krb5\_free\_string (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_string:c.krb5_free_string}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_string}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, char *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - String to be freed
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.10
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_free\_ticket - Free a ticket.}
-\label{\detokenize{appdev/refs/api/krb5_free_ticket:krb5-free-ticket-free-a-ticket}}\label{\detokenize{appdev/refs/api/krb5_free_ticket::doc}}\index{krb5\_free\_ticket (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_ticket:c.krb5_free_ticket}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_ticket}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Ticket to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} and the structure itself.
-
-
-\subsubsection{krb5\_free\_unparsed\_name - Free a string representation of a principal.}
-\label{\detokenize{appdev/refs/api/krb5_free_unparsed_name::doc}}\label{\detokenize{appdev/refs/api/krb5_free_unparsed_name:krb5-free-unparsed-name-free-a-string-representation-of-a-principal}}\index{krb5\_free\_unparsed\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_unparsed_name:c.krb5_free_unparsed_name}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_unparsed\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, char *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Name string to be freed
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_etype\_info - Retrieve enctype, salt and s2kparams from KDC.}
-\label{\detokenize{appdev/refs/api/krb5_get_etype_info:krb5-get-etype-info-retrieve-enctype-salt-and-s2kparams-from-kdc}}\label{\detokenize{appdev/refs/api/krb5_get_etype_info::doc}}\index{krb5\_get\_etype\_info (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_etype_info:c.krb5_get_etype_info}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_etype\_info}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ principal}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} *\sphinxstyleemphasis{ enctype\_out}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ salt\_out}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ s2kparams\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Principal whose information is requested
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{opt} - Initial credential options
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{enctype\_out} - The enctype chosen by KDC
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{salt\_out} - Salt returned from KDC
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{s2kparams\_out} - String-to-key parameters returned from KDC
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-A Kerberos error code
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Send an initial ticket request for \sphinxstyleemphasis{principal} and extract the encryption type, salt type, and string-to-key parameters from the KDC response. If the KDC provides no etype-info, set \sphinxstyleemphasis{enctype\_out} to \sphinxstylestrong{ENCTYPE\_NULL} and set \sphinxstyleemphasis{salt\_out} and \sphinxstyleemphasis{s2kparams\_out} to empty. If the KDC etype-info provides no salt, compute the default salt and place it in \sphinxstyleemphasis{salt\_out} . If the KDC etype-info provides no string-to-key parameters, set \sphinxstyleemphasis{s2kparams\_out} to empty.
-\begin{quote}
-
-\sphinxstyleemphasis{opt} may be used to specify options which affect the initial request, such as request encryption types or a FAST armor cache (see {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_etype_list:c.krb5_get_init_creds_opt_set_etype_list}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_set\_etype\_list()}}}} and {\hyperref[\detokenize{appdev/refs/api/krb5_get_init_creds_opt_set_fast_ccache_name:c.krb5_get_init_creds_opt_set_fast_ccache_name}]{\sphinxcrossref{\sphinxcode{krb5\_get\_init\_creds\_opt\_set\_fast\_ccache\_name()}}}} ).
-\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{salt\_out} and \sphinxstyleemphasis{s2kparams\_out} when they are no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.17
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_get\_permitted\_enctypes - Return a list of encryption types permitted for session keys.}
-\label{\detokenize{appdev/refs/api/krb5_get_permitted_enctypes:krb5-get-permitted-enctypes-return-a-list-of-encryption-types-permitted-for-session-keys}}\label{\detokenize{appdev/refs/api/krb5_get_permitted_enctypes::doc}}\index{krb5\_get\_permitted\_enctypes (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_permitted_enctypes:c.krb5_get_permitted_enctypes}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_permitted\_enctypes}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} **\sphinxstyleemphasis{ ktypes}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ktypes} - Zero-terminated list of encryption types
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function returns the list of encryption types permitted for session keys within \sphinxstyleemphasis{context} , as determined by configuration or by a previous call to {\hyperref[\detokenize{appdev/refs/api/krb5_set_default_tgs_enctypes:c.krb5_set_default_tgs_enctypes}]{\sphinxcrossref{\sphinxcode{krb5\_set\_default\_tgs\_enctypes()}}}} .
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_enctypes:c.krb5_free_enctypes}]{\sphinxcrossref{\sphinxcode{krb5\_free\_enctypes()}}}} to free \sphinxstyleemphasis{ktypes} when it is no longer needed.
-
-
-\subsubsection{krb5\_get\_server\_rcache - Generate a replay cache object for server use and open it.}
-\label{\detokenize{appdev/refs/api/krb5_get_server_rcache:krb5-get-server-rcache-generate-a-replay-cache-object-for-server-use-and-open-it}}\label{\detokenize{appdev/refs/api/krb5_get_server_rcache::doc}}\index{krb5\_get\_server\_rcache (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_server_rcache:c.krb5_get_server_rcache}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_server\_rcache}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ piece}, {\hyperref[\detokenize{appdev/refs/types/krb5_rcache:c.krb5_rcache}]{\sphinxcrossref{krb5\_rcache}}} *\sphinxstyleemphasis{ rcptr}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{piece} - Unused (replay cache identifier)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rcptr} - Handle to an open rcache
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a handle to the default replay cache. Use krb5\_rc\_close() to close \sphinxstyleemphasis{rcptr} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-Prior to release 1.18, this function creates a handle to a different replay cache for each unique value of \sphinxstyleemphasis{piece} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_get\_time\_offsets - Return the time offsets from the os context.}
-\label{\detokenize{appdev/refs/api/krb5_get_time_offsets:krb5-get-time-offsets-return-the-time-offsets-from-the-os-context}}\label{\detokenize{appdev/refs/api/krb5_get_time_offsets::doc}}\index{krb5\_get\_time\_offsets (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_time_offsets:c.krb5_get_time_offsets}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_time\_offsets}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} *\sphinxstyleemphasis{ seconds}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} *\sphinxstyleemphasis{ microseconds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{seconds} - Time offset, seconds portion
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{microseconds} - Time offset, microseconds portion
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function returns the time offsets in \sphinxstyleemphasis{context} .
-
-
-\subsubsection{krb5\_init\_context\_profile - Create a krb5 library context using a specified profile.}
-\label{\detokenize{appdev/refs/api/krb5_init_context_profile:krb5-init-context-profile-create-a-krb5-library-context-using-a-specified-profile}}\label{\detokenize{appdev/refs/api/krb5_init_context_profile::doc}}\index{krb5\_init\_context\_profile (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_context_profile:c.krb5_init_context_profile}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_context\_profile}}{struct \_profile\_t *\sphinxstyleemphasis{ profile}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ flags}, {\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}} *\sphinxstyleemphasis{ context}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{profile} - Profile object (NULL to create default profile)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Context initialization flags
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{context} - Library context
-
-\end{description}\end{quote}
-
-Create a context structure, optionally using a specified profile and initialization flags. If \sphinxstyleemphasis{profile} is NULL, the default profile will be created from config files. If \sphinxstyleemphasis{profile} is non-null, a copy of it will be made for the new context; the caller should still clean up its copy. Valid flag values are:
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE:KRB5_INIT_CONTEXT_SECURE}]{\sphinxcrossref{\sphinxcode{KRB5\_INIT\_CONTEXT\_SECURE}}}} Ignore environment variables
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_INIT_CONTEXT_KDC:KRB5_INIT_CONTEXT_KDC}]{\sphinxcrossref{\sphinxcode{KRB5\_INIT\_CONTEXT\_KDC}}}} Use KDC configuration if creating profile
-
-\end{itemize}
-
-
-\subsubsection{krb5\_init\_creds\_free - Free an initial credentials context.}
-\label{\detokenize{appdev/refs/api/krb5_init_creds_free::doc}}\label{\detokenize{appdev/refs/api/krb5_init_creds_free:krb5-init-creds-free-free-an-initial-credentials-context}}\index{krb5\_init\_creds\_free (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_creds_free:c.krb5_init_creds_free}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_init\_creds\_free}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}]{\sphinxcrossref{krb5\_init\_creds\_context}}}\sphinxstyleemphasis{ ctx}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Initial credentials context
-
-\end{description}\end{quote}
-\begin{quote}
-
-\sphinxstyleemphasis{context} must be the same as the one passed to {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_init:c.krb5_init_creds_init}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_init()}}}} for this initial credentials context.
-\end{quote}
-
-
-\subsubsection{krb5\_init\_creds\_get - Acquire credentials using an initial credentials context.}
-\label{\detokenize{appdev/refs/api/krb5_init_creds_get::doc}}\label{\detokenize{appdev/refs/api/krb5_init_creds_get:krb5-init-creds-get-acquire-credentials-using-an-initial-credentials-context}}\index{krb5\_init\_creds\_get (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_creds_get:c.krb5_init_creds_get}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_creds\_get}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}]{\sphinxcrossref{krb5\_init\_creds\_context}}}\sphinxstyleemphasis{ ctx}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Initial credentials context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function synchronously obtains credentials using a context created by {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_init:c.krb5_init_creds_init}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_init()}}}} . On successful return, the credentials can be retrieved with {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_get_creds:c.krb5_init_creds_get_creds}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_get\_creds()}}}} .
-\begin{quote}
-
-\sphinxstyleemphasis{context} must be the same as the one passed to {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_init:c.krb5_init_creds_init}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_init()}}}} for this initial credentials context.
-\end{quote}
-
-
-\subsubsection{krb5\_init\_creds\_get\_creds - Retrieve acquired credentials from an initial credentials context.}
-\label{\detokenize{appdev/refs/api/krb5_init_creds_get_creds::doc}}\label{\detokenize{appdev/refs/api/krb5_init_creds_get_creds:krb5-init-creds-get-creds-retrieve-acquired-credentials-from-an-initial-credentials-context}}\index{krb5\_init\_creds\_get\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_creds_get_creds:c.krb5_init_creds_get_creds}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_creds\_get\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}]{\sphinxcrossref{krb5\_init\_creds\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Initial credentials context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{creds} - Acquired credentials
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function copies the acquired initial credentials from \sphinxstyleemphasis{ctx} into \sphinxstyleemphasis{creds} , after the successful completion of {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_get:c.krb5_init_creds_get}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_get()}}}} or {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_step:c.krb5_init_creds_step}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_step()}}}} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_cred_contents:c.krb5_free_cred_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_cred\_contents()}}}} to free \sphinxstyleemphasis{creds} when it is no longer needed.
-
-
-\subsubsection{krb5\_init\_creds\_get\_error - Get the last error from KDC from an initial credentials context.}
-\label{\detokenize{appdev/refs/api/krb5_init_creds_get_error:krb5-init-creds-get-error-get-the-last-error-from-kdc-from-an-initial-credentials-context}}\label{\detokenize{appdev/refs/api/krb5_init_creds_get_error::doc}}\index{krb5\_init\_creds\_get\_error (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_creds_get_error:c.krb5_init_creds_get_error}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_creds\_get\_error}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}]{\sphinxcrossref{krb5\_init\_creds\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_error:c.krb5_error}]{\sphinxcrossref{krb5\_error}}} **\sphinxstyleemphasis{ error}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Initial credentials context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{error} - Error from KDC, or NULL if none was received
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_init\_creds\_get\_times - Retrieve ticket times from an initial credentials context.}
-\label{\detokenize{appdev/refs/api/krb5_init_creds_get_times::doc}}\label{\detokenize{appdev/refs/api/krb5_init_creds_get_times:krb5-init-creds-get-times-retrieve-ticket-times-from-an-initial-credentials-context}}\index{krb5\_init\_creds\_get\_times (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_creds_get_times:c.krb5_init_creds_get_times}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_creds\_get\_times}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}]{\sphinxcrossref{krb5\_init\_creds\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times}]{\sphinxcrossref{krb5\_ticket\_times}}} *\sphinxstyleemphasis{ times}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Initial credentials context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{times} - Ticket times for acquired credentials
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-The initial credentials context must have completed obtaining credentials via either {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_get:c.krb5_init_creds_get}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_get()}}}} or {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_step:c.krb5_init_creds_step}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_step()}}}} .
-
-
-\subsubsection{krb5\_init\_creds\_init - Create a context for acquiring initial credentials.}
-\label{\detokenize{appdev/refs/api/krb5_init_creds_init::doc}}\label{\detokenize{appdev/refs/api/krb5_init_creds_init:krb5-init-creds-init-create-a-context-for-acquiring-initial-credentials}}\index{krb5\_init\_creds\_init (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_creds_init:c.krb5_init_creds_init}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_creds\_init}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ client}, {\hyperref[\detokenize{appdev/refs/types/krb5_prompter_fct:c.krb5_prompter_fct}]{\sphinxcrossref{krb5\_prompter\_fct}}}\sphinxstyleemphasis{ prompter}, void *\sphinxstyleemphasis{ data}, {\hyperref[\detokenize{appdev/refs/types/krb5_deltat:c.krb5_deltat}]{\sphinxcrossref{krb5\_deltat}}}\sphinxstyleemphasis{ start\_time}, {\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ options}, {\hyperref[\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}]{\sphinxcrossref{krb5\_init\_creds\_context}}} *\sphinxstyleemphasis{ ctx}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{client} - Client principal to get initial creds for
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{prompter} - Prompter callback
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - Prompter callback argument
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{start\_time} - Time when credentials become valid (0 for now)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{options} - Options structure (NULL for default)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ctx} - New initial credentials context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a new context for acquiring initial credentials. Use {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_free:c.krb5_init_creds_free}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_free()}}}} to free \sphinxstyleemphasis{ctx} when it is no longer needed.
-
-Any subsequent calls to {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_step:c.krb5_init_creds_step}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_step()}}}} , {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_get:c.krb5_init_creds_get}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_get()}}}} , or {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_free:c.krb5_init_creds_free}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_free()}}}} for this initial credentials context must use the same \sphinxstyleemphasis{context} argument as the one passed to this function.
-
-
-\subsubsection{krb5\_init\_creds\_set\_keytab - Specify a keytab to use for acquiring initial credentials.}
-\label{\detokenize{appdev/refs/api/krb5_init_creds_set_keytab:krb5-init-creds-set-keytab-specify-a-keytab-to-use-for-acquiring-initial-credentials}}\label{\detokenize{appdev/refs/api/krb5_init_creds_set_keytab::doc}}\index{krb5\_init\_creds\_set\_keytab (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_creds_set_keytab:c.krb5_init_creds_set_keytab}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_creds\_set\_keytab}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}]{\sphinxcrossref{krb5\_init\_creds\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Initial credentials context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function supplies a keytab containing the client key for an initial credentials request.
-
-
-\subsubsection{krb5\_init\_creds\_set\_password - Set a password for acquiring initial credentials.}
-\label{\detokenize{appdev/refs/api/krb5_init_creds_set_password:krb5-init-creds-set-password-set-a-password-for-acquiring-initial-credentials}}\label{\detokenize{appdev/refs/api/krb5_init_creds_set_password::doc}}\index{krb5\_init\_creds\_set\_password (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_creds_set_password:c.krb5_init_creds_set_password}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_creds\_set\_password}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}]{\sphinxcrossref{krb5\_init\_creds\_context}}}\sphinxstyleemphasis{ ctx}, const char *\sphinxstyleemphasis{ password}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Initial credentials context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{password} - Password
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function supplies a password to be used to construct the client key for an initial credentials request.
-
-
-\subsubsection{krb5\_init\_creds\_set\_service - Specify a service principal for acquiring initial credentials.}
-\label{\detokenize{appdev/refs/api/krb5_init_creds_set_service::doc}}\label{\detokenize{appdev/refs/api/krb5_init_creds_set_service:krb5-init-creds-set-service-specify-a-service-principal-for-acquiring-initial-credentials}}\index{krb5\_init\_creds\_set\_service (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_creds_set_service:c.krb5_init_creds_set_service}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_creds\_set\_service}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}]{\sphinxcrossref{krb5\_init\_creds\_context}}}\sphinxstyleemphasis{ ctx}, const char *\sphinxstyleemphasis{ service}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Initial credentials context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{service} - Service principal string
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function supplies a service principal string to acquire initial credentials for instead of the default krbtgt service. \sphinxstyleemphasis{service} is parsed as a principal name; any realm part is ignored.
-
-
-\subsubsection{krb5\_init\_creds\_step - Get the next KDC request for acquiring initial credentials.}
-\label{\detokenize{appdev/refs/api/krb5_init_creds_step::doc}}\label{\detokenize{appdev/refs/api/krb5_init_creds_step:krb5-init-creds-step-get-the-next-kdc-request-for-acquiring-initial-credentials}}\index{krb5\_init\_creds\_step (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_creds_step:c.krb5_init_creds_step}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_creds\_step}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}]{\sphinxcrossref{krb5\_init\_creds\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ in}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ out}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ realm}, unsigned int *\sphinxstyleemphasis{ flags}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Initial credentials context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in} - KDC response (empty on the first call)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out} - Next KDC request
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{realm} - Realm for next KDC request
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{flags} - Output flags
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function constructs the next KDC request in an initial credential exchange, allowing the caller to control the transport of KDC requests and replies. On the first call, \sphinxstyleemphasis{in} should be set to an empty buffer; on subsequent calls, it should be set to the KDC’s reply to the previous request.
-
-If more requests are needed, \sphinxstyleemphasis{flags} will be set to {\hyperref[\detokenize{appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE:KRB5_INIT_CREDS_STEP_FLAG_CONTINUE}]{\sphinxcrossref{\sphinxcode{KRB5\_INIT\_CREDS\_STEP\_FLAG\_CONTINUE}}}} and the next request will be placed in \sphinxstyleemphasis{out} . If no more requests are needed, \sphinxstyleemphasis{flags} will not contain {\hyperref[\detokenize{appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE:KRB5_INIT_CREDS_STEP_FLAG_CONTINUE}]{\sphinxcrossref{\sphinxcode{KRB5\_INIT\_CREDS\_STEP\_FLAG\_CONTINUE}}}} and \sphinxstyleemphasis{out} will be empty.
-
-If this function returns \sphinxstylestrong{KRB5KRB\_ERR\_RESPONSE\_TOO\_BIG} , the caller should transmit the next request using TCP rather than UDP. If this function returns any other error, the initial credential exchange has failed.
-\begin{quote}
-
-\sphinxstyleemphasis{context} must be the same as the one passed to {\hyperref[\detokenize{appdev/refs/api/krb5_init_creds_init:c.krb5_init_creds_init}]{\sphinxcrossref{\sphinxcode{krb5\_init\_creds\_init()}}}} for this initial credentials context.
-\end{quote}
-
-
-\subsubsection{krb5\_init\_keyblock - Initialize an empty krb5\_keyblock .}
-\label{\detokenize{appdev/refs/api/krb5_init_keyblock:krb5-init-keyblock-initialize-an-empty-krb5-keyblock}}\label{\detokenize{appdev/refs/api/krb5_init_keyblock::doc}}\index{krb5\_init\_keyblock (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_keyblock:c.krb5_init_keyblock}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_keyblock}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, size\_t\sphinxstyleemphasis{ length}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{length} - Length of keyblock (or 0)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out} - New keyblock structure
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Initialize a new keyblock and allocate storage for the contents of the key. It is legal to pass in a length of 0, in which case contents are left unallocated. Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_keyblock:c.krb5_free_keyblock}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keyblock()}}}} to free \sphinxstyleemphasis{out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-If \sphinxstyleemphasis{length} is set to 0, contents are left unallocated.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_is\_referral\_realm - Check for a match with KRB5\_REFERRAL\_REALM.}
-\label{\detokenize{appdev/refs/api/krb5_is_referral_realm:krb5-is-referral-realm-check-for-a-match-with-krb5-referral-realm}}\label{\detokenize{appdev/refs/api/krb5_is_referral_realm::doc}}\index{krb5\_is\_referral\_realm (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_is_referral_realm:c.krb5_is_referral_realm}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_is\_referral\_realm}}{const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ r}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{r} - Realm to check
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-TRUE if r is zero-length, FALSE otherwise
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_kdc\_sign\_ticket - Sign a PAC, possibly including a ticket signature.}
-\label{\detokenize{appdev/refs/api/krb5_kdc_sign_ticket:krb5-kdc-sign-ticket-sign-a-pac-possibly-including-a-ticket-signature}}\label{\detokenize{appdev/refs/api/krb5_kdc_sign_ticket::doc}}\index{krb5\_kdc\_sign\_ticket (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kdc_sign_ticket:c.krb5_kdc_sign_ticket}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kdc\_sign\_ticket}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part}]{\sphinxcrossref{krb5\_enc\_tkt\_part}}} *\sphinxstyleemphasis{ enc\_tkt}, const {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}}\sphinxstyleemphasis{ pac}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ server\_princ}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ client\_princ}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ server}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ privsvr}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}}\sphinxstyleemphasis{ with\_realm}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enc\_tkt} - The ticket for the signature
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pac} - PAC handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server\_princ} - Canonical ticket server name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{client\_princ} - PAC\_CLIENT\_INFO principal (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Key for server checksum
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{privsvr} - Key for KDC and ticket checksum
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{with\_realm} - If true, include the realm of \sphinxstyleemphasis{principal}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 on success, otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Sign \sphinxstyleemphasis{pac} using the keys \sphinxstyleemphasis{server} and \sphinxstyleemphasis{privsvr} . Include a ticket signature over \sphinxstyleemphasis{enc\_tkt} if \sphinxstyleemphasis{server\_princ} is not a TGS or kadmin/changepw principal name. Add the signed PAC’s encoding to the authorization data of \sphinxstyleemphasis{enc\_tkt} in the first slot, wrapped in an AD-IF-RELEVANT container. If \sphinxstyleemphasis{client\_princ} is non-null, add a PAC\_CLIENT\_INFO buffer, including the realm if \sphinxstyleemphasis{with\_realm} is true.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.20
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_kdc\_verify\_ticket - Verify a PAC, possibly including ticket signature.}
-\label{\detokenize{appdev/refs/api/krb5_kdc_verify_ticket:krb5-kdc-verify-ticket-verify-a-pac-possibly-including-ticket-signature}}\label{\detokenize{appdev/refs/api/krb5_kdc_verify_ticket::doc}}\index{krb5\_kdc\_verify\_ticket (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kdc_verify_ticket:c.krb5_kdc_verify_ticket}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kdc\_verify\_ticket}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part}]{\sphinxcrossref{krb5\_enc\_tkt\_part}}} *\sphinxstyleemphasis{ enc\_tkt}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ server\_princ}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ server}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ privsvr}, {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}} *\sphinxstyleemphasis{ pac\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enc\_tkt} - Ticket enc-part, possibly containing a PAC
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server\_princ} - Canonicalized name of ticket server
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Key to validate server checksum (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{privsvr} - Key to validate KDC checksum (or NULL)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{pac\_out} - Verified PAC (NULL if no PAC included)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-If a PAC is present in \sphinxstyleemphasis{enc\_tkt} , verify its signatures. If \sphinxstyleemphasis{privsvr} is not NULL and \sphinxstyleemphasis{server\_princ} is not a krbtgt or kadmin/changepw service, require a ticket signature over \sphinxstyleemphasis{enc\_tkt} in addition to the KDC signature. Place the verified PAC in \sphinxstyleemphasis{pac\_out} . If an invalid PAC signature is found, return an error matching the Windows KDC protocol code for that condition as closely as possible.
-
-If no PAC is present in \sphinxstyleemphasis{enc\_tkt} , set \sphinxstyleemphasis{pac\_out} to NULL and return successfully.
-
-\begin{sphinxadmonition}{note}{Note:}
-This function does not validate the PAC\_CLIENT\_INFO buffer. If a specific value is expected, the caller can make a separate call to {\hyperref[\detokenize{appdev/refs/api/krb5_pac_verify_ext:c.krb5_pac_verify_ext}]{\sphinxcrossref{\sphinxcode{krb5\_pac\_verify\_ext()}}}} with a principal but no keys.
-\end{sphinxadmonition}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.20
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_kt\_add\_entry - Add a new entry to a key table.}
-\label{\detokenize{appdev/refs/api/krb5_kt_add_entry:krb5-kt-add-entry-add-a-new-entry-to-a-key-table}}\label{\detokenize{appdev/refs/api/krb5_kt_add_entry::doc}}\index{krb5\_kt\_add\_entry (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_add_entry:c.krb5_kt_add_entry}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_add\_entry}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ id}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry}]{\sphinxcrossref{krb5\_keytab\_entry}}} *\sphinxstyleemphasis{ entry}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{id} - Key table handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{entry} - Entry to be added
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-ENOMEM Insufficient memory
-
-\item {}
-KRB5\_KT\_NOWRITE Key table is not writeable
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_kt\_end\_seq\_get - Release a keytab cursor.}
-\label{\detokenize{appdev/refs/api/krb5_kt_end_seq_get::doc}}\label{\detokenize{appdev/refs/api/krb5_kt_end_seq_get:krb5-kt-end-seq-get-release-a-keytab-cursor}}\index{krb5\_kt\_end\_seq\_get (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_end_seq_get:c.krb5_kt_end_seq_get}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_end\_seq\_get}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}, {\hyperref[\detokenize{appdev/refs/types/krb5_kt_cursor:c.krb5_kt_cursor}]{\sphinxcrossref{krb5\_kt\_cursor}}} *\sphinxstyleemphasis{ cursor}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cursor} - Cursor
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function should be called to release the cursor created by {\hyperref[\detokenize{appdev/refs/api/krb5_kt_start_seq_get:c.krb5_kt_start_seq_get}]{\sphinxcrossref{\sphinxcode{krb5\_kt\_start\_seq\_get()}}}} .
-
-
-\subsubsection{krb5\_kt\_get\_entry - Get an entry from a key table.}
-\label{\detokenize{appdev/refs/api/krb5_kt_get_entry:krb5-kt-get-entry-get-an-entry-from-a-key-table}}\label{\detokenize{appdev/refs/api/krb5_kt_get_entry::doc}}\index{krb5\_kt\_get\_entry (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_get_entry:c.krb5_kt_get_entry}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_get\_entry}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, {\hyperref[\detokenize{appdev/refs/types/krb5_kvno:c.krb5_kvno}]{\sphinxcrossref{krb5\_kvno}}}\sphinxstyleemphasis{ vno}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry}]{\sphinxcrossref{krb5\_keytab\_entry}}} *\sphinxstyleemphasis{ entry}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Principal name
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{vno} - Key version number (0 for highest available)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type (0 zero for any enctype)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{entry} - Returned entry from key table
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-Kerberos error codes on failure
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Retrieve an entry from a key table which matches the \sphinxstyleemphasis{keytab} , \sphinxstyleemphasis{principal} , \sphinxstyleemphasis{vno} , and \sphinxstyleemphasis{enctype} . If \sphinxstyleemphasis{vno} is zero, retrieve the highest-numbered kvno matching the other fields. If \sphinxstyleemphasis{enctype} is 0, match any enctype.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_keytab_entry_contents:c.krb5_free_keytab_entry_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keytab\_entry\_contents()}}}} to free \sphinxstyleemphasis{entry} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-If \sphinxstyleemphasis{vno} is zero, the function retrieves the highest-numbered-kvno entry that matches the specified principal.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_kt\_have\_content - Check if a keytab exists and contains entries.}
-\label{\detokenize{appdev/refs/api/krb5_kt_have_content::doc}}\label{\detokenize{appdev/refs/api/krb5_kt_have_content:krb5-kt-have-content-check-if-a-keytab-exists-and-contains-entries}}\index{krb5\_kt\_have\_content (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_have_content:c.krb5_kt_have_content}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_have\_content}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Keytab exists and contains entries
-
-\item {}
-KRB5\_KT\_NOTFOUND Keytab does not contain entries
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.11
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_kt\_next\_entry - Retrieve the next entry from the key table.}
-\label{\detokenize{appdev/refs/api/krb5_kt_next_entry:krb5-kt-next-entry-retrieve-the-next-entry-from-the-key-table}}\label{\detokenize{appdev/refs/api/krb5_kt_next_entry::doc}}\index{krb5\_kt\_next\_entry (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_next_entry:c.krb5_kt_next_entry}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_next\_entry}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry}]{\sphinxcrossref{krb5\_keytab\_entry}}} *\sphinxstyleemphasis{ entry}, {\hyperref[\detokenize{appdev/refs/types/krb5_kt_cursor:c.krb5_kt_cursor}]{\sphinxcrossref{krb5\_kt\_cursor}}} *\sphinxstyleemphasis{ cursor}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{entry} - Returned key table entry
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cursor} - Key table cursor
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KRB5\_KT\_END - if the last entry was reached
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Return the next sequential entry in \sphinxstyleemphasis{keytab} and advance \sphinxstyleemphasis{cursor} . Callers must release the returned entry with {\hyperref[\detokenize{appdev/refs/api/krb5_kt_free_entry:c.krb5_kt_free_entry}]{\sphinxcrossref{\sphinxcode{krb5\_kt\_free\_entry()}}}} .
-
-
-\subsubsection{krb5\_kt\_read\_service\_key - Retrieve a service key from a key table.}
-\label{\detokenize{appdev/refs/api/krb5_kt_read_service_key::doc}}\label{\detokenize{appdev/refs/api/krb5_kt_read_service_key:krb5-kt-read-service-key-retrieve-a-service-key-from-a-key-table}}\index{krb5\_kt\_read\_service\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_read_service_key:c.krb5_kt_read_service_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_read\_service\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}}\sphinxstyleemphasis{ keyprocarg}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ principal}, {\hyperref[\detokenize{appdev/refs/types/krb5_kvno:c.krb5_kvno}]{\sphinxcrossref{krb5\_kvno}}}\sphinxstyleemphasis{ vno}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keyprocarg} - Name of a key table (NULL to use default name)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Service principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{vno} - Key version number (0 for highest available)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type (0 for any type)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{key} - Service key from key table
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error code if not found or keyprocarg is invalid.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Open and search the specified key table for the entry identified by \sphinxstyleemphasis{principal} , \sphinxstyleemphasis{enctype} , and \sphinxstyleemphasis{vno} . If no key is found, return an error code.
-
-The default key table is used, unless \sphinxstyleemphasis{keyprocarg} is non-null. \sphinxstyleemphasis{keyprocarg} designates a specific key table.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_keyblock:c.krb5_free_keyblock}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keyblock()}}}} to free \sphinxstyleemphasis{key} when it is no longer needed.
-
-
-\subsubsection{krb5\_kt\_remove\_entry - Remove an entry from a key table.}
-\label{\detokenize{appdev/refs/api/krb5_kt_remove_entry::doc}}\label{\detokenize{appdev/refs/api/krb5_kt_remove_entry:krb5-kt-remove-entry-remove-an-entry-from-a-key-table}}\index{krb5\_kt\_remove\_entry (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_remove_entry:c.krb5_kt_remove_entry}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_remove\_entry}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ id}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry}]{\sphinxcrossref{krb5\_keytab\_entry}}} *\sphinxstyleemphasis{ entry}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{id} - Key table handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{entry} - Entry to remove from key table
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KRB5\_KT\_NOWRITE Key table is not writable
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_kt\_start\_seq\_get - Start a sequential retrieval of key table entries.}
-\label{\detokenize{appdev/refs/api/krb5_kt_start_seq_get:krb5-kt-start-seq-get-start-a-sequential-retrieval-of-key-table-entries}}\label{\detokenize{appdev/refs/api/krb5_kt_start_seq_get::doc}}\index{krb5\_kt\_start\_seq\_get (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_start_seq_get:c.krb5_kt_start_seq_get}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_start\_seq\_get}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}, {\hyperref[\detokenize{appdev/refs/types/krb5_kt_cursor:c.krb5_kt_cursor}]{\sphinxcrossref{krb5\_kt\_cursor}}} *\sphinxstyleemphasis{ cursor}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cursor} - Cursor
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Prepare to read sequentially every key in the specified key table. Use {\hyperref[\detokenize{appdev/refs/api/krb5_kt_end_seq_get:c.krb5_kt_end_seq_get}]{\sphinxcrossref{\sphinxcode{krb5\_kt\_end\_seq\_get()}}}} to release the cursor when it is no longer needed.
-
-
-\subsubsection{krb5\_make\_authdata\_kdc\_issued - Encode and sign AD-KDCIssued authorization data.}
-\label{\detokenize{appdev/refs/api/krb5_make_authdata_kdc_issued:krb5-make-authdata-kdc-issued-encode-and-sign-ad-kdcissued-authorization-data}}\label{\detokenize{appdev/refs/api/krb5_make_authdata_kdc_issued::doc}}\index{krb5\_make\_authdata\_kdc\_issued (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_make_authdata_kdc_issued:c.krb5_make_authdata_kdc_issued}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_make\_authdata\_kdc\_issued}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ issuer}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} *const *\sphinxstyleemphasis{ authdata}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ***\sphinxstyleemphasis{ ad\_kdcissued}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Session key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{issuer} - The name of the issuing principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{authdata} - List of authorization data to be signed
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ad\_kdcissued} - List containing AD-KDCIssued authdata
-
-\end{description}\end{quote}
-
-This function wraps a list of authorization data entries \sphinxstyleemphasis{authdata} in an AD-KDCIssued container (see RFC 4120 section 5.2.6.2) signed with \sphinxstyleemphasis{key} . The result is returned in \sphinxstyleemphasis{ad\_kdcissued} as a single-element list.
-
-
-\subsubsection{krb5\_marshal\_credentials - Serialize a krb5\_creds object.}
-\label{\detokenize{appdev/refs/api/krb5_marshal_credentials:krb5-marshal-credentials-serialize-a-krb5-creds-object}}\label{\detokenize{appdev/refs/api/krb5_marshal_credentials::doc}}\index{krb5\_marshal\_credentials (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_marshal_credentials:c.krb5_marshal_credentials}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_marshal\_credentials}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ in\_creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} **\sphinxstyleemphasis{ data\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_creds} - The credentials object to serialize
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{data\_out} - The serialized credentials
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Serialize \sphinxstyleemphasis{creds} in the format used by the FILE ccache format (vesion 4) and KCM ccache protocol.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data:c.krb5_free_data}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data()}}}} to free \sphinxstyleemphasis{data\_out} when it is no longer needed.
-
-
-\subsubsection{krb5\_merge\_authdata - Merge two authorization data lists into a new list.}
-\label{\detokenize{appdev/refs/api/krb5_merge_authdata:krb5-merge-authdata-merge-two-authorization-data-lists-into-a-new-list}}\label{\detokenize{appdev/refs/api/krb5_merge_authdata::doc}}\index{krb5\_merge\_authdata (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_merge_authdata:c.krb5_merge_authdata}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_merge\_authdata}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} *const *\sphinxstyleemphasis{ inauthdat1}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} *const *\sphinxstyleemphasis{ inauthdat2}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ***\sphinxstyleemphasis{ outauthdat}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{inauthdat1} - First list of \sphinxstyleemphasis{krb5\_authdata} structures
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{inauthdat2} - Second list of \sphinxstyleemphasis{krb5\_authdata} structures
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outauthdat} - Merged list of \sphinxstyleemphasis{krb5\_authdata} structures
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Merge two authdata arrays, such as the array from a ticket and authenticator. Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_authdata:c.krb5_free_authdata}]{\sphinxcrossref{\sphinxcode{krb5\_free\_authdata()}}}} to free \sphinxstyleemphasis{outauthdat} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-The last array entry in \sphinxstyleemphasis{inauthdat1} and \sphinxstyleemphasis{inauthdat2} must be a NULL pointer.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_mk\_1cred - Format a KRB-CRED message for a single set of credentials.}
-\label{\detokenize{appdev/refs/api/krb5_mk_1cred:krb5-mk-1cred-format-a-krb-cred-message-for-a-single-set-of-credentials}}\label{\detokenize{appdev/refs/api/krb5_mk_1cred::doc}}\index{krb5\_mk\_1cred (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_mk_1cred:c.krb5_mk_1cred}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_mk\_1cred}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} **\sphinxstyleemphasis{ der\_out}, {\hyperref[\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data}]{\sphinxcrossref{krb5\_replay\_data}}} *\sphinxstyleemphasis{ rdata\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{creds} - Pointer to credentials
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{der\_out} - Encoded credentials
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rdata\_out} - Replay cache data (NULL if not needed)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-ENOMEM Insufficient memory
-
-\item {}
-KRB5\_RC\_REQUIRED Message replay detection requires rcache parameter
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This is a convenience function that calls {\hyperref[\detokenize{appdev/refs/api/krb5_mk_ncred:c.krb5_mk_ncred}]{\sphinxcrossref{\sphinxcode{krb5\_mk\_ncred()}}}} with a single set of credentials.
-
-
-\subsubsection{krb5\_mk\_error - Format and encode a KRB\_ERROR message.}
-\label{\detokenize{appdev/refs/api/krb5_mk_error:krb5-mk-error-format-and-encode-a-krb-error-message}}\label{\detokenize{appdev/refs/api/krb5_mk_error::doc}}\index{krb5\_mk\_error (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_mk_error:c.krb5_mk_error}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_mk\_error}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_error:c.krb5_error}]{\sphinxcrossref{krb5\_error}}} *\sphinxstyleemphasis{ dec\_err}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ enc\_err}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{dec\_err} - Error structure to be encoded
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{enc\_err} - Encoded error structure
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates a \sphinxstylestrong{KRB\_ERROR} message in \sphinxstyleemphasis{enc\_err} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{enc\_err} when it is no longer needed.
-
-
-\subsubsection{krb5\_mk\_ncred - Format a KRB-CRED message for an array of credentials.}
-\label{\detokenize{appdev/refs/api/krb5_mk_ncred::doc}}\label{\detokenize{appdev/refs/api/krb5_mk_ncred:krb5-mk-ncred-format-a-krb-cred-message-for-an-array-of-credentials}}\index{krb5\_mk\_ncred (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_mk_ncred:c.krb5_mk_ncred}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_mk\_ncred}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} **\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} **\sphinxstyleemphasis{ der\_out}, {\hyperref[\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data}]{\sphinxcrossref{krb5\_replay\_data}}} *\sphinxstyleemphasis{ rdata\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{creds} - Null-terminated array of credentials
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{der\_out} - Encoded credentials
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rdata\_out} - Replay cache information (NULL if not needed)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-ENOMEM Insufficient memory
-
-\item {}
-KRB5\_RC\_REQUIRED Message replay detection requires rcache parameter
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function takes an array of credentials \sphinxstyleemphasis{creds} and formats a \sphinxstylestrong{KRB-CRED} message \sphinxstyleemphasis{der\_out} to pass to {\hyperref[\detokenize{appdev/refs/api/krb5_rd_cred:c.krb5_rd_cred}]{\sphinxcrossref{\sphinxcode{krb5\_rd\_cred()}}}} .
-
-The local and remote addresses in \sphinxstyleemphasis{auth\_context} are optional; if either is specified, they are used to form the sender and receiver addresses in the KRB-CRED message.
-
-If the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} flag is set in \sphinxstyleemphasis{auth\_context} , an entry for the message is entered in an in-memory replay cache to detect if the message is reflected by an attacker. If {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} is not set, no replay cache is used. If {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} is set in \sphinxstyleemphasis{auth\_context} , the timestamp used for the KRB-CRED message is stored in \sphinxstyleemphasis{rdata\_out} .
-
-If either {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}}} or {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} is set, the \sphinxstyleemphasis{auth\_context} local sequence number is included in the KRB-CRED message and then incremented. If {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} is set, the sequence number used is stored in \sphinxstyleemphasis{rdata\_out} .
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{der\_out} when it is no longer needed.
-
-The message will be encrypted using the send subkey of \sphinxstyleemphasis{auth\_context} if it is present, or the session key otherwise. If neither key is present, the credentials will not be encrypted, and the message should only be sent over a secure channel. No replay cache entry is used in this case.
-
-\begin{sphinxadmonition}{note}{Note:}
-The \sphinxstyleemphasis{rdata\_out} argument is required if the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} or {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} flag is set in \sphinxstyleemphasis{auth\_context} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_mk\_priv - Format a KRB-PRIV message.}
-\label{\detokenize{appdev/refs/api/krb5_mk_priv:krb5-mk-priv-format-a-krb-priv-message}}\label{\detokenize{appdev/refs/api/krb5_mk_priv::doc}}\index{krb5\_mk\_priv (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_mk_priv:c.krb5_mk_priv}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_mk\_priv}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ userdata}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ der\_out}, {\hyperref[\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data}]{\sphinxcrossref{krb5\_replay\_data}}} *\sphinxstyleemphasis{ rdata\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{userdata} - User data for \sphinxstylestrong{KRB-PRIV} message
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{der\_out} - Formatted \sphinxstylestrong{KRB-PRIV} message
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rdata\_out} - Replay data (NULL if not needed)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_mk_safe:c.krb5_mk_safe}]{\sphinxcrossref{\sphinxcode{krb5\_mk\_safe()}}}} , but the message is encrypted and integrity-protected, not just integrity-protected.
-
-The local address in \sphinxstyleemphasis{auth\_context} must be set, and is used to form the sender address used in the KRB-PRIV message. The remote address is optional; if specified, it will be used to form the receiver address used in the message.
-
-If the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} flag is set in \sphinxstyleemphasis{auth\_context} , a timestamp is included in the KRB-PRIV message, and an entry for the message is entered in an in-memory replay cache to detect if the message is reflected by an attacker. If {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} is not set, no replay cache is used. If {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} is set in \sphinxstyleemphasis{auth\_context} , a timestamp is included in the KRB-PRIV message and is stored in \sphinxstyleemphasis{rdata\_out} .
-
-If either {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}}} or {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} is set, the \sphinxstyleemphasis{auth\_context} local sequence number is included in the KRB-PRIV message and then incremented. If {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} is set, the sequence number used is stored in \sphinxstyleemphasis{rdata\_out} .
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{der\_out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-The \sphinxstyleemphasis{rdata\_out} argument is required if the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} or {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} flag is set in \sphinxstyleemphasis{auth\_context} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_mk\_rep - Format and encrypt a KRB\_AP\_REP message.}
-\label{\detokenize{appdev/refs/api/krb5_mk_rep:krb5-mk-rep-format-and-encrypt-a-krb-ap-rep-message}}\label{\detokenize{appdev/refs/api/krb5_mk_rep::doc}}\index{krb5\_mk\_rep (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_mk_rep:c.krb5_mk_rep}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_mk\_rep}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ outbuf}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outbuf} - \sphinxstylestrong{AP-REP} message
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function fills in \sphinxstyleemphasis{outbuf} with an AP-REP message using information from \sphinxstyleemphasis{auth\_context} .
-
-If the flags in \sphinxstyleemphasis{auth\_context} indicate that a sequence number should be used (either {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}}} or {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} ) and the local sequence number in \sphinxstyleemphasis{auth\_context} is 0, a new number will be generated with krb5\_generate\_seq\_number().
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{outbuf} when it is no longer needed.
-
-
-\subsubsection{krb5\_mk\_rep\_dce - Format and encrypt a KRB\_AP\_REP message for DCE RPC.}
-\label{\detokenize{appdev/refs/api/krb5_mk_rep_dce:krb5-mk-rep-dce-format-and-encrypt-a-krb-ap-rep-message-for-dce-rpc}}\label{\detokenize{appdev/refs/api/krb5_mk_rep_dce::doc}}\index{krb5\_mk\_rep\_dce (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_mk_rep_dce:c.krb5_mk_rep_dce}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_mk\_rep\_dce}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ outbuf}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outbuf} - \sphinxstylestrong{AP-REP} message
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{outbuf} when it is no longer needed.
-
-
-\subsubsection{krb5\_mk\_req - Create a KRB\_AP\_REQ message.}
-\label{\detokenize{appdev/refs/api/krb5_mk_req:krb5-mk-req-create-a-krb-ap-req-message}}\label{\detokenize{appdev/refs/api/krb5_mk_req::doc}}\index{krb5\_mk\_req (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_mk_req:c.krb5_mk_req}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_mk\_req}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}} *\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ ap\_req\_options}, const char *\sphinxstyleemphasis{ service}, const char *\sphinxstyleemphasis{ hostname}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ in\_data}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ outbuf}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{auth\_context} - Pre-existing or newly created auth context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ap\_req\_options} - \sphinxcode{AP\_OPTS} options
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{service} - Service name, or NULL to use \sphinxstylestrong{“host”}
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{hostname} - Host name, or NULL to use local hostname
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_data} - Application data to be checksummed in the authenticator, or NULL
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache used to obtain credentials for the desired service.
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outbuf} - \sphinxstylestrong{AP-REQ} message
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_mk_req_extended:c.krb5_mk_req_extended}]{\sphinxcrossref{\sphinxcode{krb5\_mk\_req\_extended()}}}} except that it uses a given \sphinxstyleemphasis{hostname} , \sphinxstyleemphasis{service} , and \sphinxstyleemphasis{ccache} to construct a service principal name and obtain credentials.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{outbuf} when it is no longer needed.
-
-
-\subsubsection{krb5\_mk\_req\_extended - Create a KRB\_AP\_REQ message using supplied credentials.}
-\label{\detokenize{appdev/refs/api/krb5_mk_req_extended::doc}}\label{\detokenize{appdev/refs/api/krb5_mk_req_extended:krb5-mk-req-extended-create-a-krb-ap-req-message-using-supplied-credentials}}\index{krb5\_mk\_req\_extended (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_mk_req_extended:c.krb5_mk_req_extended}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_mk\_req\_extended}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}} *\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ ap\_req\_options}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ in\_data}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ in\_creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ outbuf}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{auth\_context} - Pre-existing or newly created auth context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ap\_req\_options} - \sphinxcode{AP\_OPTS} options
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_data} - Application data to be checksummed in the authenticator, or NULL
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_creds} - Credentials for the service with valid ticket and key
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{outbuf} - \sphinxstylestrong{AP-REQ} message
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Valid \sphinxstyleemphasis{ap\_req\_options} are:
-\begin{quote}
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/AP_OPTS_USE_SESSION_KEY:AP_OPTS_USE_SESSION_KEY}]{\sphinxcrossref{\sphinxcode{AP\_OPTS\_USE\_SESSION\_KEY}}}} - Use the session key when creating the request used for user to user authentication.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED:AP_OPTS_MUTUAL_REQUIRED}]{\sphinxcrossref{\sphinxcode{AP\_OPTS\_MUTUAL\_REQUIRED}}}} - Request a mutual authentication packet from the receiver.
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/AP_OPTS_USE_SUBKEY:AP_OPTS_USE_SUBKEY}]{\sphinxcrossref{\sphinxcode{AP\_OPTS\_USE\_SUBKEY}}}} - Generate a subsession key from the current session key obtained from the credentials.
-
-\end{itemize}
-
-This function creates a KRB\_AP\_REQ message using supplied credentials \sphinxstyleemphasis{in\_creds} . \sphinxstyleemphasis{auth\_context} may point to an existing auth context or to NULL, in which case a new one will be created. If \sphinxstyleemphasis{in\_data} is non-null, a checksum of it will be included in the authenticator contained in the KRB\_AP\_REQ message. Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{outbuf} when it is no longer needed.
-\end{quote}
-
-On successful return, the authenticator is stored in \sphinxstyleemphasis{auth\_context} with the \sphinxstyleemphasis{client} and \sphinxstyleemphasis{checksum} fields nulled out. (This is to prevent pointer-sharing problems; the caller should not need these fields anyway, since the caller supplied them.)
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_mk_req:c.krb5_mk_req}]{\sphinxcrossref{\sphinxcode{krb5\_mk\_req()}}}}
-
-
-
-
-\subsubsection{krb5\_mk\_safe - Format a KRB-SAFE message.}
-\label{\detokenize{appdev/refs/api/krb5_mk_safe:krb5-mk-safe-format-a-krb-safe-message}}\label{\detokenize{appdev/refs/api/krb5_mk_safe::doc}}\index{krb5\_mk\_safe (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_mk_safe:c.krb5_mk_safe}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_mk\_safe}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ userdata}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ der\_out}, {\hyperref[\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data}]{\sphinxcrossref{krb5\_replay\_data}}} *\sphinxstyleemphasis{ rdata\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{userdata} - User data in the message
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{der\_out} - Formatted \sphinxstylestrong{KRB-SAFE} buffer
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rdata\_out} - Replay data. Specify NULL if not needed
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function creates an integrity protected \sphinxstylestrong{KRB-SAFE} message using data supplied by the application.
-
-Fields in \sphinxstyleemphasis{auth\_context} specify the checksum type, the keyblock that can be used to seed the checksum, full addresses (host and port) for the sender and receiver, and \sphinxcode{KRB5\_AUTH\_CONTEXT} flags.
-
-The local address in \sphinxstyleemphasis{auth\_context} must be set, and is used to form the sender address used in the KRB-SAFE message. The remote address is optional; if specified, it will be used to form the receiver address used in the message.
-
-If the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} flag is set in \sphinxstyleemphasis{auth\_context} , a timestamp is included in the KRB-SAFE message, and an entry for the message is entered in an in-memory replay cache to detect if the message is reflected by an attacker. If {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} is not set, no replay cache is used. If {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} is set in \sphinxstyleemphasis{auth\_context} , a timestamp is included in the KRB-SAFE message and is stored in \sphinxstyleemphasis{rdata\_out} .
-
-If either {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}}} or {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} is set, the \sphinxstyleemphasis{auth\_context} local sequence number is included in the KRB-SAFE message and then incremented. If {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} is set, the sequence number used is stored in \sphinxstyleemphasis{rdata\_out} .
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{der\_out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-The \sphinxstyleemphasis{rdata\_out} argument is required if the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} or {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} flag is set in \sphinxstyleemphasis{auth\_context} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_os\_localaddr - Return all interface addresses for this host.}
-\label{\detokenize{appdev/refs/api/krb5_os_localaddr:krb5-os-localaddr-return-all-interface-addresses-for-this-host}}\label{\detokenize{appdev/refs/api/krb5_os_localaddr::doc}}\index{krb5\_os\_localaddr (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_os_localaddr:c.krb5_os_localaddr}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_os\_localaddr}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} ***\sphinxstyleemphasis{ addr}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{addr} - Array of krb5\_address pointers, ending with NULL
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_addresses:c.krb5_free_addresses}]{\sphinxcrossref{\sphinxcode{krb5\_free\_addresses()}}}} to free \sphinxstyleemphasis{addr} when it is no longer needed.
-
-
-\subsubsection{krb5\_pac\_add\_buffer - Add a buffer to a PAC handle.}
-\label{\detokenize{appdev/refs/api/krb5_pac_add_buffer:krb5-pac-add-buffer-add-a-buffer-to-a-pac-handle}}\label{\detokenize{appdev/refs/api/krb5_pac_add_buffer::doc}}\index{krb5\_pac\_add\_buffer (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_add_buffer:c.krb5_pac_add_buffer}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_pac\_add\_buffer}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}}\sphinxstyleemphasis{ pac}, {\hyperref[\detokenize{appdev/refs/types/krb5_ui_4:c.krb5_ui_4}]{\sphinxcrossref{krb5\_ui\_4}}}\sphinxstyleemphasis{ type}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pac} - PAC handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{type} - Buffer type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - contents
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function adds a buffer of type \sphinxstyleemphasis{type} and contents \sphinxstyleemphasis{data} to \sphinxstyleemphasis{pac} if there isn’t already a buffer of this type present.
-
-The valid values of \sphinxstyleemphasis{type} is one of the following:
-\begin{itemize}
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PAC_LOGON_INFO:KRB5_PAC_LOGON_INFO}]{\sphinxcrossref{\sphinxcode{KRB5\_PAC\_LOGON\_INFO}}}} - Logon information
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO:KRB5_PAC_CREDENTIALS_INFO}]{\sphinxcrossref{\sphinxcode{KRB5\_PAC\_CREDENTIALS\_INFO}}}} - Credentials information
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM:KRB5_PAC_SERVER_CHECKSUM}]{\sphinxcrossref{\sphinxcode{KRB5\_PAC\_SERVER\_CHECKSUM}}}} - Server checksum
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM:KRB5_PAC_PRIVSVR_CHECKSUM}]{\sphinxcrossref{\sphinxcode{KRB5\_PAC\_PRIVSVR\_CHECKSUM}}}} - KDC checksum
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PAC_CLIENT_INFO:KRB5_PAC_CLIENT_INFO}]{\sphinxcrossref{\sphinxcode{KRB5\_PAC\_CLIENT\_INFO}}}} - Client name and ticket information
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PAC_DELEGATION_INFO:KRB5_PAC_DELEGATION_INFO}]{\sphinxcrossref{\sphinxcode{KRB5\_PAC\_DELEGATION\_INFO}}}} - Constrained delegation information
-
-\item {}
-{\hyperref[\detokenize{appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO:KRB5_PAC_UPN_DNS_INFO}]{\sphinxcrossref{\sphinxcode{KRB5\_PAC\_UPN\_DNS\_INFO}}}} - User principal name and DNS information
-
-\end{itemize}
-
-
-\subsubsection{krb5\_pac\_free - Free a PAC handle.}
-\label{\detokenize{appdev/refs/api/krb5_pac_free:krb5-pac-free-free-a-pac-handle}}\label{\detokenize{appdev/refs/api/krb5_pac_free::doc}}\index{krb5\_pac\_free (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_free:c.krb5_pac_free}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_pac\_free}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}}\sphinxstyleemphasis{ pac}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pac} - PAC to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{pac} and the structure itself.
-
-
-\subsubsection{krb5\_pac\_get\_buffer - Retrieve a buffer value from a PAC.}
-\label{\detokenize{appdev/refs/api/krb5_pac_get_buffer::doc}}\label{\detokenize{appdev/refs/api/krb5_pac_get_buffer:krb5-pac-get-buffer-retrieve-a-buffer-value-from-a-pac}}\index{krb5\_pac\_get\_buffer (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_get_buffer:c.krb5_pac_get_buffer}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_pac\_get\_buffer}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}}\sphinxstyleemphasis{ pac}, {\hyperref[\detokenize{appdev/refs/types/krb5_ui_4:c.krb5_ui_4}]{\sphinxcrossref{krb5\_ui\_4}}}\sphinxstyleemphasis{ type}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pac} - PAC handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{type} - Type of buffer to retrieve
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{data} - Buffer value
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{data} when it is no longer needed.
-
-
-\subsubsection{krb5\_pac\_get\_types - Return an array of buffer types in a PAC handle.}
-\label{\detokenize{appdev/refs/api/krb5_pac_get_types:krb5-pac-get-types-return-an-array-of-buffer-types-in-a-pac-handle}}\label{\detokenize{appdev/refs/api/krb5_pac_get_types::doc}}\index{krb5\_pac\_get\_types (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_get_types:c.krb5_pac_get_types}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_pac\_get\_types}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}}\sphinxstyleemphasis{ pac}, size\_t *\sphinxstyleemphasis{ len}, {\hyperref[\detokenize{appdev/refs/types/krb5_ui_4:c.krb5_ui_4}]{\sphinxcrossref{krb5\_ui\_4}}} **\sphinxstyleemphasis{ types}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pac} - PAC handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{len} - Number of entries in \sphinxstyleemphasis{types}
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{types} - Array of buffer types
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_pac\_init - Create an empty Privilege Attribute Certificate (PAC) handle.}
-\label{\detokenize{appdev/refs/api/krb5_pac_init:krb5-pac-init-create-an-empty-privilege-attribute-certificate-pac-handle}}\label{\detokenize{appdev/refs/api/krb5_pac_init::doc}}\index{krb5\_pac\_init (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_init:c.krb5_pac_init}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_pac\_init}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}} *\sphinxstyleemphasis{ pac}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{pac} - New PAC handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_pac_free:c.krb5_pac_free}]{\sphinxcrossref{\sphinxcode{krb5\_pac\_free()}}}} to free \sphinxstyleemphasis{pac} when it is no longer needed.
-
-
-\subsubsection{krb5\_pac\_parse - Unparse an encoded PAC into a new handle.}
-\label{\detokenize{appdev/refs/api/krb5_pac_parse:krb5-pac-parse-unparse-an-encoded-pac-into-a-new-handle}}\label{\detokenize{appdev/refs/api/krb5_pac_parse::doc}}\index{krb5\_pac\_parse (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_parse:c.krb5_pac_parse}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_pac\_parse}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const void *\sphinxstyleemphasis{ ptr}, size\_t\sphinxstyleemphasis{ len}, {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}} *\sphinxstyleemphasis{ pac}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ptr} - PAC buffer
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{len} - Length of \sphinxstyleemphasis{ptr}
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{pac} - PAC handle
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_pac_free:c.krb5_pac_free}]{\sphinxcrossref{\sphinxcode{krb5\_pac\_free()}}}} to free \sphinxstyleemphasis{pac} when it is no longer needed.
-
-
-\subsubsection{krb5\_pac\_sign}
-\label{\detokenize{appdev/refs/api/krb5_pac_sign:krb5-pac-sign}}\label{\detokenize{appdev/refs/api/krb5_pac_sign::doc}}\index{krb5\_pac\_sign (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_sign:c.krb5_pac_sign}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_pac\_sign}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}}\sphinxstyleemphasis{ pac}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}}\sphinxstyleemphasis{ authtime}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ server\_key}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ privsvr\_key}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{pac}
-
-\sphinxstylestrong{authtime}
-
-\sphinxstylestrong{principal}
-
-\sphinxstylestrong{server\_key}
-
-\sphinxstylestrong{privsvr\_key}
-
-\sphinxstylestrong{data}
-
-\end{description}\end{quote}
-
-DEPRECATED Use krb5\_kdc\_sign\_ticket() instead.
-
-
-\subsubsection{krb5\_pac\_sign\_ext}
-\label{\detokenize{appdev/refs/api/krb5_pac_sign_ext:krb5-pac-sign-ext}}\label{\detokenize{appdev/refs/api/krb5_pac_sign_ext::doc}}\index{krb5\_pac\_sign\_ext (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_sign_ext:c.krb5_pac_sign_ext}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_pac\_sign\_ext}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}}\sphinxstyleemphasis{ pac}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}}\sphinxstyleemphasis{ authtime}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ server\_key}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ privsvr\_key}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}}\sphinxstyleemphasis{ with\_realm}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{pac}
-
-\sphinxstylestrong{authtime}
-
-\sphinxstylestrong{principal}
-
-\sphinxstylestrong{server\_key}
-
-\sphinxstylestrong{privsvr\_key}
-
-\sphinxstylestrong{with\_realm}
-
-\sphinxstylestrong{data}
-
-\end{description}\end{quote}
-
-DEPRECATED Use krb5\_kdc\_sign\_ticket() instead.
-
-
-\subsubsection{krb5\_pac\_verify - Verify a PAC.}
-\label{\detokenize{appdev/refs/api/krb5_pac_verify::doc}}\label{\detokenize{appdev/refs/api/krb5_pac_verify:krb5-pac-verify-verify-a-pac}}\index{krb5\_pac\_verify (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_verify:c.krb5_pac_verify}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_pac\_verify}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}}\sphinxstyleemphasis{ pac}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}}\sphinxstyleemphasis{ authtime}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ server}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ privsvr}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pac} - PAC handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{authtime} - Expected timestamp
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Expected principal name (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Key to validate server checksum (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{privsvr} - Key to validate KDC checksum (or NULL)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function validates \sphinxstyleemphasis{pac} against the supplied \sphinxstyleemphasis{server} , \sphinxstyleemphasis{privsvr} , \sphinxstyleemphasis{principal} and \sphinxstyleemphasis{authtime} . If \sphinxstyleemphasis{principal} is NULL, the principal and authtime are not verified. If \sphinxstyleemphasis{server} or \sphinxstyleemphasis{privsvr} is NULL, the corresponding checksum is not verified.
-
-If successful, \sphinxstyleemphasis{pac} is marked as verified.
-
-\begin{sphinxadmonition}{note}{Note:}
-A checksum mismatch can occur if the PAC was copied from a cross-realm TGT by an ignorant KDC; also macOS Server Open Directory (as of 10.6) generates PACs with no server checksum at all. One should consider not failing the whole authentication because of this reason, but, instead, treating the ticket as if it did not contain a PAC or marking the PAC information as non-verified.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_pac\_verify\_ext - Verify a PAC, possibly from a specified realm.}
-\label{\detokenize{appdev/refs/api/krb5_pac_verify_ext:krb5-pac-verify-ext-verify-a-pac-possibly-from-a-specified-realm}}\label{\detokenize{appdev/refs/api/krb5_pac_verify_ext::doc}}\index{krb5\_pac\_verify\_ext (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_verify_ext:c.krb5_pac_verify_ext}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_pac\_verify\_ext}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}}\sphinxstyleemphasis{ pac}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}}\sphinxstyleemphasis{ authtime}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ principal}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ server}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ privsvr}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}}\sphinxstyleemphasis{ with\_realm}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pac} - PAC handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{authtime} - Expected timestamp
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{principal} - Expected principal name (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Key to validate server checksum (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{privsvr} - Key to validate KDC checksum (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{with\_realm} - If true, expect the realm of \sphinxstyleemphasis{principal}
-
-\end{description}\end{quote}
-
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_pac_verify:c.krb5_pac_verify}]{\sphinxcrossref{\sphinxcode{krb5\_pac\_verify()}}}} , but adds a parameter \sphinxstyleemphasis{with\_realm} . If \sphinxstyleemphasis{with\_realm} is true, the PAC\_CLIENT\_INFO field is expected to include the realm of \sphinxstyleemphasis{principal} as well as the name. This flag is necessary to verify PACs in cross-realm S4U2Self referral TGTs.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.17
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_pac\_get\_client\_info - Read client information from a PAC.}
-\label{\detokenize{appdev/refs/api/krb5_pac_get_client_info::doc}}\label{\detokenize{appdev/refs/api/krb5_pac_get_client_info:krb5-pac-get-client-info-read-client-information-from-a-pac}}\index{krb5\_pac\_get\_client\_info (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_pac_get_client_info:c.krb5_pac_get_client_info}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_pac\_get\_client\_info}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}]{\sphinxcrossref{krb5\_pac}}}\sphinxstyleemphasis{ pac}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} *\sphinxstyleemphasis{ authtime\_out}, char **\sphinxstyleemphasis{ princname\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pac} - PAC handle
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{authtime\_out} - Authentication timestamp (NULL if not needed)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{princname\_out} - Client account name
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 on success, ENOENT if no PAC\_CLIENT\_INFO buffer is present in pac , ERANGE if the buffer contains invalid lengths.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Read the PAC\_CLIENT\_INFO buffer in \sphinxstyleemphasis{pac} . Place the client account name as a string in \sphinxstyleemphasis{princname\_out} . If \sphinxstyleemphasis{authtime\_out} is not NULL, place the initial authentication timestamp in \sphinxstyleemphasis{authtime\_out} .
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.18
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_prepend\_error\_message - Add a prefix to the message for an error code.}
-\label{\detokenize{appdev/refs/api/krb5_prepend_error_message:krb5-prepend-error-message-add-a-prefix-to-the-message-for-an-error-code}}\label{\detokenize{appdev/refs/api/krb5_prepend_error_message::doc}}\index{krb5\_prepend\_error\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_prepend_error_message:c.krb5_prepend_error_message}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_prepend\_error\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}}\sphinxstyleemphasis{ code}, const char *\sphinxstyleemphasis{ fmt}, ...}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{code} - Error code
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fmt} - Format string for error message prefix
-
-\end{description}\end{quote}
-
-Format a message and prepend it to the current message for \sphinxstyleemphasis{code} . The prefix will be separated from the old message with a colon and space.
-
-
-\subsubsection{krb5\_principal2salt - Convert a principal name into the default salt for that principal.}
-\label{\detokenize{appdev/refs/api/krb5_principal2salt:krb5-principal2salt-convert-a-principal-name-into-the-default-salt-for-that-principal}}\label{\detokenize{appdev/refs/api/krb5_principal2salt::doc}}\index{krb5\_principal2salt (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_principal2salt:c.krb5_principal2salt}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_principal2salt}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ pr}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ ret}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pr} - Principal name
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ret} - Default salt for \sphinxstyleemphasis{pr} to be filled in
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_rd\_cred - Read and validate a KRB-CRED message.}
-\label{\detokenize{appdev/refs/api/krb5_rd_cred:krb5-rd-cred-read-and-validate-a-krb-cred-message}}\label{\detokenize{appdev/refs/api/krb5_rd_cred::doc}}\index{krb5\_rd\_cred (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_rd_cred:c.krb5_rd_cred}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_rd\_cred}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ creddata}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} ***\sphinxstyleemphasis{ creds\_out}, {\hyperref[\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data}]{\sphinxcrossref{krb5\_replay\_data}}} *\sphinxstyleemphasis{ rdata\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{creddata} - \sphinxstylestrong{KRB-CRED} message
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{creds\_out} - Null-terminated array of forwarded credentials
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rdata\_out} - Replay data (NULL if not needed)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-\begin{quote}
-
-\sphinxstyleemphasis{creddata} will be decrypted using the receiving subkey if it is present in \sphinxstyleemphasis{auth\_context} , or the session key if the receiving subkey is not present or fails to decrypt the message.
-\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_tgt_creds:c.krb5_free_tgt_creds}]{\sphinxcrossref{\sphinxcode{krb5\_free\_tgt\_creds()}}}} to free \sphinxstyleemphasis{creds\_out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-The \sphinxstyleemphasis{rdata\_out} argument is required if the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} or {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} flag is set in \sphinxstyleemphasis{auth\_context} .{}`
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_rd\_error - Decode a KRB-ERROR message.}
-\label{\detokenize{appdev/refs/api/krb5_rd_error:krb5-rd-error-decode-a-krb-error-message}}\label{\detokenize{appdev/refs/api/krb5_rd_error::doc}}\index{krb5\_rd\_error (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_rd_error:c.krb5_rd_error}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_rd\_error}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ enc\_errbuf}, {\hyperref[\detokenize{appdev/refs/types/krb5_error:c.krb5_error}]{\sphinxcrossref{krb5\_error}}} **\sphinxstyleemphasis{ dec\_error}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enc\_errbuf} - Encoded error message
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{dec\_error} - Decoded error message
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function processes \sphinxstylestrong{KRB-ERROR} message \sphinxstyleemphasis{enc\_errbuf} and returns an allocated structure \sphinxstyleemphasis{dec\_error} containing the error message. Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_error:c.krb5_free_error}]{\sphinxcrossref{\sphinxcode{krb5\_free\_error()}}}} to free \sphinxstyleemphasis{dec\_error} when it is no longer needed.
-
-
-\subsubsection{krb5\_rd\_priv - Process a KRB-PRIV message.}
-\label{\detokenize{appdev/refs/api/krb5_rd_priv:krb5-rd-priv-process-a-krb-priv-message}}\label{\detokenize{appdev/refs/api/krb5_rd_priv::doc}}\index{krb5\_rd\_priv (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_rd_priv:c.krb5_rd_priv}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_rd\_priv}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ inbuf}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ userdata\_out}, {\hyperref[\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data}]{\sphinxcrossref{krb5\_replay\_data}}} *\sphinxstyleemphasis{ rdata\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{inbuf} - \sphinxstylestrong{KRB-PRIV} message to be parsed
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{userdata\_out} - Data parsed from \sphinxstylestrong{KRB-PRIV} message
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rdata\_out} - Replay data. Specify NULL if not needed
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function parses a \sphinxstylestrong{KRB-PRIV} message, verifies its integrity, and stores its unencrypted data into \sphinxstyleemphasis{userdata\_out} .
-
-If \sphinxstyleemphasis{auth\_context} has a remote address set, the address will be used to verify the sender address in the KRB-PRIV message. If \sphinxstyleemphasis{auth\_context} has a local address set, it will be used to verify the receiver address in the KRB-PRIV message if the message contains one.
-
-If the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}}} flag is set in \sphinxstyleemphasis{auth\_context} , the sequence number of the KRB-PRIV message is checked against the remote sequence number field of \sphinxstyleemphasis{auth\_context} . Otherwise, the sequence number is not used.
-
-If the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} flag is set in \sphinxstyleemphasis{auth\_context} , then the timestamp in the message is verified to be within the permitted clock skew of the current time, and the message is checked against an in-memory replay cache to detect reflections or replays.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{userdata\_out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-The \sphinxstyleemphasis{rdata\_out} argument is required if the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} or {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} flag is set in \sphinxstyleemphasis{auth\_context} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_rd\_rep - Parse and decrypt a KRB\_AP\_REP message.}
-\label{\detokenize{appdev/refs/api/krb5_rd_rep::doc}}\label{\detokenize{appdev/refs/api/krb5_rd_rep:krb5-rd-rep-parse-and-decrypt-a-krb-ap-rep-message}}\index{krb5\_rd\_rep (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_rd_rep:c.krb5_rd_rep}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_rd\_rep}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ inbuf}, {\hyperref[\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:c.krb5_ap_rep_enc_part}]{\sphinxcrossref{krb5\_ap\_rep\_enc\_part}}} **\sphinxstyleemphasis{ repl}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{inbuf} - AP-REP message
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{repl} - Decrypted reply message
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function parses, decrypts and verifies a message from \sphinxstyleemphasis{inbuf} and fills in \sphinxstyleemphasis{repl} with a pointer to allocated memory containing the fields from the encrypted response.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_ap_rep_enc_part:c.krb5_free_ap_rep_enc_part}]{\sphinxcrossref{\sphinxcode{krb5\_free\_ap\_rep\_enc\_part()}}}} to free \sphinxstyleemphasis{repl} when it is no longer needed.
-
-
-\subsubsection{krb5\_rd\_rep\_dce - Parse and decrypt a KRB\_AP\_REP message for DCE RPC.}
-\label{\detokenize{appdev/refs/api/krb5_rd_rep_dce::doc}}\label{\detokenize{appdev/refs/api/krb5_rd_rep_dce:krb5-rd-rep-dce-parse-and-decrypt-a-krb-ap-rep-message-for-dce-rpc}}\index{krb5\_rd\_rep\_dce (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_rd_rep_dce:c.krb5_rd_rep_dce}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_rd\_rep\_dce}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ inbuf}, {\hyperref[\detokenize{appdev/refs/types/krb5_ui_4:c.krb5_ui_4}]{\sphinxcrossref{krb5\_ui\_4}}} *\sphinxstyleemphasis{ nonce}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{inbuf} - AP-REP message
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{nonce} - Sequence number from the decrypted reply
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function parses, decrypts and verifies a message from \sphinxstyleemphasis{inbuf} and fills in \sphinxstyleemphasis{nonce} with a decrypted reply sequence number.
-
-
-\subsubsection{krb5\_rd\_req - Parse and decrypt a KRB\_AP\_REQ message.}
-\label{\detokenize{appdev/refs/api/krb5_rd_req::doc}}\label{\detokenize{appdev/refs/api/krb5_rd_req:krb5-rd-req-parse-and-decrypt-a-krb-ap-req-message}}\index{krb5\_rd\_req (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_rd_req:c.krb5_rd_req}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_rd\_req}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}} *\sphinxstyleemphasis{ auth\_context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ inbuf}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}]{\sphinxcrossref{krb5\_const\_principal}}}\sphinxstyleemphasis{ server}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} *\sphinxstyleemphasis{ ap\_req\_options}, {\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} **\sphinxstyleemphasis{ ticket}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{auth\_context} - Pre-existing or newly created auth context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{inbuf} - AP-REQ message to be parsed
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Matching principal for server, or NULL to allow any principal in keytab
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table, or NULL to use the default
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ap\_req\_options} - If non-null, the AP-REQ flags on output
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ticket} - If non-null, ticket from the AP-REQ message
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function parses, decrypts and verifies a AP-REQ message from \sphinxstyleemphasis{inbuf} and stores the authenticator in \sphinxstyleemphasis{auth\_context} .
-
-If a keyblock was specified in \sphinxstyleemphasis{auth\_context} using {\hyperref[\detokenize{appdev/refs/api/krb5_auth_con_setuseruserkey:c.krb5_auth_con_setuseruserkey}]{\sphinxcrossref{\sphinxcode{krb5\_auth\_con\_setuseruserkey()}}}} , that key is used to decrypt the ticket in AP-REQ message and \sphinxstyleemphasis{keytab} is ignored. In this case, \sphinxstyleemphasis{server} should be specified as a complete principal name to allow for proper transited-path checking and replay cache selection.
-
-Otherwise, the decryption key is obtained from \sphinxstyleemphasis{keytab} , or from the default keytab if it is NULL. In this case, \sphinxstyleemphasis{server} may be a complete principal name, a matching principal (see {\hyperref[\detokenize{appdev/refs/api/krb5_sname_match:c.krb5_sname_match}]{\sphinxcrossref{\sphinxcode{krb5\_sname\_match()}}}} ), or NULL to match any principal name. The keys tried against the encrypted part of the ticket are determined as follows:
-\begin{itemize}
-\item {}
-If \sphinxstyleemphasis{server} is a complete principal name, then its entry in \sphinxstyleemphasis{keytab} is tried.
-
-\item {}
-Otherwise, if \sphinxstyleemphasis{keytab} is iterable, then all entries in \sphinxstyleemphasis{keytab} which match \sphinxstyleemphasis{server} are tried.
-
-\item {}
-Otherwise, the server principal in the ticket must match \sphinxstyleemphasis{server} , and its entry in \sphinxstyleemphasis{keytab} is tried.
-
-\end{itemize}
-
-The client specified in the decrypted authenticator must match the client specified in the decrypted ticket.
-
-If the \sphinxstyleemphasis{remote\_addr} field of \sphinxstyleemphasis{auth\_context} is set, the request must come from that address.
-
-If a replay cache handle is provided in the \sphinxstyleemphasis{auth\_context} , the authenticator and ticket are verified against it. If no conflict is found, the new authenticator is then stored in the replay cache of \sphinxstyleemphasis{auth\_context} .
-
-Various other checks are performed on the decoded data, including cross-realm policy, clockskew, and ticket validation times.
-
-On success the authenticator, subkey, and remote sequence number of the request are stored in \sphinxstyleemphasis{auth\_context} . If the {\hyperref[\detokenize{appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED:AP_OPTS_MUTUAL_REQUIRED}]{\sphinxcrossref{\sphinxcode{AP\_OPTS\_MUTUAL\_REQUIRED}}}} bit is set, the local sequence number is XORed with the remote sequence number in the request.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_ticket:c.krb5_free_ticket}]{\sphinxcrossref{\sphinxcode{krb5\_free\_ticket()}}}} to free \sphinxstyleemphasis{ticket} when it is no longer needed.
-
-
-\subsubsection{krb5\_rd\_safe - Process KRB-SAFE message.}
-\label{\detokenize{appdev/refs/api/krb5_rd_safe:krb5-rd-safe-process-krb-safe-message}}\label{\detokenize{appdev/refs/api/krb5_rd_safe::doc}}\index{krb5\_rd\_safe (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_rd_safe:c.krb5_rd_safe}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_rd\_safe}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ inbuf}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ userdata\_out}, {\hyperref[\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data}]{\sphinxcrossref{krb5\_replay\_data}}} *\sphinxstyleemphasis{ rdata\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{inbuf} - \sphinxstylestrong{KRB-SAFE} message to be parsed
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{userdata\_out} - Data parsed from \sphinxstylestrong{KRB-SAFE} message
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rdata\_out} - Replay data. Specify NULL if not needed
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function parses a \sphinxstylestrong{KRB-SAFE} message, verifies its integrity, and stores its data into \sphinxstyleemphasis{userdata\_out} .
-
-If \sphinxstyleemphasis{auth\_context} has a remote address set, the address will be used to verify the sender address in the KRB-SAFE message. If \sphinxstyleemphasis{auth\_context} has a local address set, it will be used to verify the receiver address in the KRB-SAFE message if the message contains one.
-
-If the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}}} flag is set in \sphinxstyleemphasis{auth\_context} , the sequence number of the KRB-SAFE message is checked against the remote sequence number field of \sphinxstyleemphasis{auth\_context} . Otherwise, the sequence number is not used.
-
-If the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}}} flag is set in \sphinxstyleemphasis{auth\_context} , then the timestamp in the message is verified to be within the permitted clock skew of the current time, and the message is checked against an in-memory replay cache to detect reflections or replays.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_data_contents:c.krb5_free_data_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_data\_contents()}}}} to free \sphinxstyleemphasis{userdata\_out} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-The \sphinxstyleemphasis{rdata\_out} argument is required if the {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}}} or {\hyperref[\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}]{\sphinxcrossref{\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}}} flag is set in \sphinxstyleemphasis{auth\_context} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_read\_password - Read a password from keyboard input.}
-\label{\detokenize{appdev/refs/api/krb5_read_password:krb5-read-password-read-a-password-from-keyboard-input}}\label{\detokenize{appdev/refs/api/krb5_read_password::doc}}\index{krb5\_read\_password (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_read_password:c.krb5_read_password}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_read\_password}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const char *\sphinxstyleemphasis{ prompt}, const char *\sphinxstyleemphasis{ prompt2}, char *\sphinxstyleemphasis{ return\_pwd}, unsigned int *\sphinxstyleemphasis{ size\_return}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{prompt} - First user prompt when reading password
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{prompt2} - Second user prompt (NULL to prompt only once)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{return\_pwd} - Returned password
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{size\_return} - On input, maximum size of password; on output, size of password read
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Error in reading or verifying the password
-
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function reads a password from keyboard input and stores it in \sphinxstyleemphasis{return\_pwd} . \sphinxstyleemphasis{size\_return} should be set by the caller to the amount of storage space available in \sphinxstyleemphasis{return\_pwd} ; on successful return, it will be set to the length of the password read.
-\begin{quote}
-
-\sphinxstyleemphasis{prompt} is printed to the terminal, followed by”:”, and then a password is read from the keyboard.
-\end{quote}
-
-If \sphinxstyleemphasis{prompt2} is NULL, the password is read only once. Otherwise, \sphinxstyleemphasis{prompt2} is printed to the terminal and a second password is read. If the two passwords entered are not identical, KRB5\_LIBOS\_BADPWDMATCH is returned.
-
-Echoing is turned off when the password is read.
-
-
-\subsubsection{krb5\_salttype\_to\_string - Convert a salt type to a string.}
-\label{\detokenize{appdev/refs/api/krb5_salttype_to_string::doc}}\label{\detokenize{appdev/refs/api/krb5_salttype_to_string:krb5-salttype-to-string-convert-a-salt-type-to-a-string}}\index{krb5\_salttype\_to\_string (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_salttype_to_string:c.krb5_salttype_to_string}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_salttype\_to\_string}}{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}}\sphinxstyleemphasis{ salttype}, char *\sphinxstyleemphasis{ buffer}, size\_t\sphinxstyleemphasis{ buflen}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{salttype} - Salttype to convert
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{buffer} - Buffer to receive the converted string
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{buflen} - Storage available in \sphinxstyleemphasis{buffer}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_server\_decrypt\_ticket\_keytab - Decrypt a ticket using the specified key table.}
-\label{\detokenize{appdev/refs/api/krb5_server_decrypt_ticket_keytab:krb5-server-decrypt-ticket-keytab-decrypt-a-ticket-using-the-specified-key-table}}\label{\detokenize{appdev/refs/api/krb5_server_decrypt_ticket_keytab::doc}}\index{krb5\_server\_decrypt\_ticket\_keytab (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_server_decrypt_ticket_keytab:c.krb5_server_decrypt_ticket_keytab}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_server\_decrypt\_ticket\_keytab}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ kt}, {\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} *\sphinxstyleemphasis{ ticket}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{kt} - Key table
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ticket} - Ticket to be decrypted
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function takes a \sphinxstyleemphasis{ticket} as input and decrypts it using key data from \sphinxstyleemphasis{kt} . The result is placed into \sphinxstyleemphasis{ticket-\textgreater{}enc\_part2} .
-
-
-\subsubsection{krb5\_set\_default\_tgs\_enctypes - Set default TGS encryption types in a krb5\_context structure.}
-\label{\detokenize{appdev/refs/api/krb5_set_default_tgs_enctypes::doc}}\label{\detokenize{appdev/refs/api/krb5_set_default_tgs_enctypes:krb5-set-default-tgs-enctypes-set-default-tgs-encryption-types-in-a-krb5-context-structure}}\index{krb5\_set\_default\_tgs\_enctypes (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_default_tgs_enctypes:c.krb5_set_default_tgs_enctypes}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_set\_default\_tgs\_enctypes}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} *\sphinxstyleemphasis{ etypes}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{etypes} - Encryption type(s) to set
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\item {}
-KRB5\_PROG\_ETYPE\_NOSUPP Program lacks support for encryption type
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets the default enctype list for TGS requests made using \sphinxstyleemphasis{context} to \sphinxstyleemphasis{etypes} .
-
-\begin{sphinxadmonition}{note}{Note:}
-This overrides the default list (from config file or built-in).
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_set\_error\_message - Set an extended error message for an error code.}
-\label{\detokenize{appdev/refs/api/krb5_set_error_message::doc}}\label{\detokenize{appdev/refs/api/krb5_set_error_message:krb5-set-error-message-set-an-extended-error-message-for-an-error-code}}\index{krb5\_set\_error\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_error_message:c.krb5_set_error_message}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_set\_error\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}}\sphinxstyleemphasis{ code}, const char *\sphinxstyleemphasis{ fmt}, ...}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{code} - Error code
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fmt} - Error string for the error code
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_set\_kdc\_recv\_hook - Set a KDC post-receive hook function.}
-\label{\detokenize{appdev/refs/api/krb5_set_kdc_recv_hook::doc}}\label{\detokenize{appdev/refs/api/krb5_set_kdc_recv_hook:krb5-set-kdc-recv-hook-set-a-kdc-post-receive-hook-function}}\index{krb5\_set\_kdc\_recv\_hook (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_kdc_recv_hook:c.krb5_set_kdc_recv_hook}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_set\_kdc\_recv\_hook}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_post_recv_fn:c.krb5_post_recv_fn}]{\sphinxcrossref{krb5\_post\_recv\_fn}}}\sphinxstyleemphasis{ recv\_hook}, void *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - The library context.
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{recv\_hook} - Hook function (or NULL to disable the hook)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - Callback data to be passed to \sphinxstyleemphasis{recv\_hook}
-
-\end{description}\end{quote}
-\begin{quote}
-
-\sphinxstyleemphasis{recv\_hook} will be called after a reply is received from a KDC during a call to a library function such as {\hyperref[\detokenize{appdev/refs/api/krb5_get_credentials:c.krb5_get_credentials}]{\sphinxcrossref{\sphinxcode{krb5\_get\_credentials()}}}} . The hook function may inspect or override the reply. This hook will not be executed if the pre-send hook returns a synthetic reply.
-\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.15
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_set\_kdc\_send\_hook - Set a KDC pre-send hook function.}
-\label{\detokenize{appdev/refs/api/krb5_set_kdc_send_hook:krb5-set-kdc-send-hook-set-a-kdc-pre-send-hook-function}}\label{\detokenize{appdev/refs/api/krb5_set_kdc_send_hook::doc}}\index{krb5\_set\_kdc\_send\_hook (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_kdc_send_hook:c.krb5_set_kdc_send_hook}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_set\_kdc\_send\_hook}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pre_send_fn:c.krb5_pre_send_fn}]{\sphinxcrossref{krb5\_pre\_send\_fn}}}\sphinxstyleemphasis{ send\_hook}, void *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{send\_hook} - Hook function (or NULL to disable the hook)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - Callback data to be passed to \sphinxstyleemphasis{send\_hook}
-
-\end{description}\end{quote}
-\begin{quote}
-
-\sphinxstyleemphasis{send\_hook} will be called before messages are sent to KDCs by library functions such as {\hyperref[\detokenize{appdev/refs/api/krb5_get_credentials:c.krb5_get_credentials}]{\sphinxcrossref{\sphinxcode{krb5\_get\_credentials()}}}} . The hook function may inspect, override, or synthesize its own reply to the message.
-\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.15
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_set\_real\_time - Set time offset field in a krb5\_context structure.}
-\label{\detokenize{appdev/refs/api/krb5_set_real_time::doc}}\label{\detokenize{appdev/refs/api/krb5_set_real_time:krb5-set-real-time-set-time-offset-field-in-a-krb5-context-structure}}\index{krb5\_set\_real\_time (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_set_real_time:c.krb5_set_real_time}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_set\_real\_time}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}}\sphinxstyleemphasis{ seconds}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}}\sphinxstyleemphasis{ microseconds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{seconds} - Real time, seconds portion
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{microseconds} - Real time, microseconds portion
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function sets the time offset in \sphinxstyleemphasis{context} to the difference between the system time and the real time as determined by \sphinxstyleemphasis{seconds} and \sphinxstyleemphasis{microseconds} .
-
-
-\subsubsection{krb5\_string\_to\_cksumtype - Convert a string to a checksum type.}
-\label{\detokenize{appdev/refs/api/krb5_string_to_cksumtype:krb5-string-to-cksumtype-convert-a-string-to-a-checksum-type}}\label{\detokenize{appdev/refs/api/krb5_string_to_cksumtype::doc}}\index{krb5\_string\_to\_cksumtype (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_string_to_cksumtype:c.krb5_string_to_cksumtype}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_string\_to\_cksumtype}}{char *\sphinxstyleemphasis{ string}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}} *\sphinxstyleemphasis{ cksumtypep}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{string} - String to be converted
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cksumtypep} - Checksum type to be filled in
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - EINVAL
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_string\_to\_deltat - Convert a string to a delta time value.}
-\label{\detokenize{appdev/refs/api/krb5_string_to_deltat::doc}}\label{\detokenize{appdev/refs/api/krb5_string_to_deltat:krb5-string-to-deltat-convert-a-string-to-a-delta-time-value}}\index{krb5\_string\_to\_deltat (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_string_to_deltat:c.krb5_string_to_deltat}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_string\_to\_deltat}}{char *\sphinxstyleemphasis{ string}, {\hyperref[\detokenize{appdev/refs/types/krb5_deltat:c.krb5_deltat}]{\sphinxcrossref{krb5\_deltat}}} *\sphinxstyleemphasis{ deltatp}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{string} - String to be converted
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{deltatp} - Delta time to be filled in
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - KRB5\_DELTAT\_BADFORMAT
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_string\_to\_enctype - Convert a string to an encryption type.}
-\label{\detokenize{appdev/refs/api/krb5_string_to_enctype::doc}}\label{\detokenize{appdev/refs/api/krb5_string_to_enctype:krb5-string-to-enctype-convert-a-string-to-an-encryption-type}}\index{krb5\_string\_to\_enctype (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_string_to_enctype:c.krb5_string_to_enctype}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_string\_to\_enctype}}{char *\sphinxstyleemphasis{ string}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} *\sphinxstyleemphasis{ enctypep}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{string} - String to convert to an encryption type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{enctypep} - Encryption type
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - EINVAL
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_string\_to\_salttype - Convert a string to a salt type.}
-\label{\detokenize{appdev/refs/api/krb5_string_to_salttype:krb5-string-to-salttype-convert-a-string-to-a-salt-type}}\label{\detokenize{appdev/refs/api/krb5_string_to_salttype::doc}}\index{krb5\_string\_to\_salttype (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_string_to_salttype:c.krb5_string_to_salttype}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_string\_to\_salttype}}{char *\sphinxstyleemphasis{ string}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} *\sphinxstyleemphasis{ salttypep}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{string} - String to convert to an encryption type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{salttypep} - Salt type to be filled in
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - EINVAL
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_string\_to\_timestamp - Convert a string to a timestamp.}
-\label{\detokenize{appdev/refs/api/krb5_string_to_timestamp::doc}}\label{\detokenize{appdev/refs/api/krb5_string_to_timestamp:krb5-string-to-timestamp-convert-a-string-to-a-timestamp}}\index{krb5\_string\_to\_timestamp (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_string_to_timestamp:c.krb5_string_to_timestamp}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_string\_to\_timestamp}}{char *\sphinxstyleemphasis{ string}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} *\sphinxstyleemphasis{ timestampp}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{string} - String to be converted
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{timestampp} - Pointer to timestamp
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - EINVAL
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_timeofday - Retrieve the current time with context specific time offset adjustment.}
-\label{\detokenize{appdev/refs/api/krb5_timeofday:krb5-timeofday-retrieve-the-current-time-with-context-specific-time-offset-adjustment}}\label{\detokenize{appdev/refs/api/krb5_timeofday::doc}}\index{krb5\_timeofday (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_timeofday:c.krb5_timeofday}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_timeofday}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} *\sphinxstyleemphasis{ timeret}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{timeret} - Timestamp to fill in
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success
-
-\end{itemize}
-
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function retrieves the system time of day with the context specific time offset adjustment.
-
-
-\subsubsection{krb5\_timestamp\_to\_sfstring - Convert a timestamp to a string, with optional output padding.}
-\label{\detokenize{appdev/refs/api/krb5_timestamp_to_sfstring:krb5-timestamp-to-sfstring-convert-a-timestamp-to-a-string-with-optional-output-padding}}\label{\detokenize{appdev/refs/api/krb5_timestamp_to_sfstring::doc}}\index{krb5\_timestamp\_to\_sfstring (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_timestamp_to_sfstring:c.krb5_timestamp_to_sfstring}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_timestamp\_to\_sfstring}}{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}}\sphinxstyleemphasis{ timestamp}, char *\sphinxstyleemphasis{ buffer}, size\_t\sphinxstyleemphasis{ buflen}, char *\sphinxstyleemphasis{ pad}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{timestamp} - Timestamp to convert
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{buffer} - Buffer to hold the converted timestamp
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{buflen} - Length of buffer
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pad} - Optional value to pad \sphinxstyleemphasis{buffer} if converted timestamp does not fill it
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-If \sphinxstyleemphasis{pad} is not NULL, \sphinxstyleemphasis{buffer} is padded out to \sphinxstyleemphasis{buflen} - 1 characters with the value of * \sphinxstyleemphasis{pad} .
-
-
-\subsubsection{krb5\_timestamp\_to\_string - Convert a timestamp to a string.}
-\label{\detokenize{appdev/refs/api/krb5_timestamp_to_string::doc}}\label{\detokenize{appdev/refs/api/krb5_timestamp_to_string:krb5-timestamp-to-string-convert-a-timestamp-to-a-string}}\index{krb5\_timestamp\_to\_string (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_timestamp_to_string:c.krb5_timestamp_to_string}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_timestamp\_to\_string}}{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}}\sphinxstyleemphasis{ timestamp}, char *\sphinxstyleemphasis{ buffer}, size\_t\sphinxstyleemphasis{ buflen}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{timestamp} - Timestamp to convert
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{buffer} - Buffer to hold converted timestamp
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{buflen} - Storage available in \sphinxstyleemphasis{buffer}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-The string is returned in the locale’s appropriate date and time representation.
-
-
-\subsubsection{krb5\_tkt\_creds\_free - Free a TGS request context.}
-\label{\detokenize{appdev/refs/api/krb5_tkt_creds_free::doc}}\label{\detokenize{appdev/refs/api/krb5_tkt_creds_free:krb5-tkt-creds-free-free-a-tgs-request-context}}\index{krb5\_tkt\_creds\_free (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_tkt_creds_free:c.krb5_tkt_creds_free}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_tkt\_creds\_free}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_tkt_creds_context:c.krb5_tkt_creds_context}]{\sphinxcrossref{krb5\_tkt\_creds\_context}}}\sphinxstyleemphasis{ ctx}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - TGS request context
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_tkt\_creds\_get - Synchronously obtain credentials using a TGS request context.}
-\label{\detokenize{appdev/refs/api/krb5_tkt_creds_get:krb5-tkt-creds-get-synchronously-obtain-credentials-using-a-tgs-request-context}}\label{\detokenize{appdev/refs/api/krb5_tkt_creds_get::doc}}\index{krb5\_tkt\_creds\_get (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_tkt_creds_get:c.krb5_tkt_creds_get}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_tkt\_creds\_get}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_tkt_creds_context:c.krb5_tkt_creds_context}]{\sphinxcrossref{krb5\_tkt\_creds\_context}}}\sphinxstyleemphasis{ ctx}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - TGS request context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function synchronously obtains credentials using a context created by {\hyperref[\detokenize{appdev/refs/api/krb5_tkt_creds_init:c.krb5_tkt_creds_init}]{\sphinxcrossref{\sphinxcode{krb5\_tkt\_creds\_init()}}}} . On successful return, the credentials can be retrieved with {\hyperref[\detokenize{appdev/refs/api/krb5_tkt_creds_get_creds:c.krb5_tkt_creds_get_creds}]{\sphinxcrossref{\sphinxcode{krb5\_tkt\_creds\_get\_creds()}}}} .
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_tkt\_creds\_get\_creds - Retrieve acquired credentials from a TGS request context.}
-\label{\detokenize{appdev/refs/api/krb5_tkt_creds_get_creds:krb5-tkt-creds-get-creds-retrieve-acquired-credentials-from-a-tgs-request-context}}\label{\detokenize{appdev/refs/api/krb5_tkt_creds_get_creds::doc}}\index{krb5\_tkt\_creds\_get\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_tkt_creds_get_creds:c.krb5_tkt_creds_get_creds}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_tkt\_creds\_get\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_tkt_creds_context:c.krb5_tkt_creds_context}]{\sphinxcrossref{krb5\_tkt\_creds\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - TGS request context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{creds} - Acquired credentials
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function copies the acquired initial credentials from \sphinxstyleemphasis{ctx} into \sphinxstyleemphasis{creds} , after the successful completion of {\hyperref[\detokenize{appdev/refs/api/krb5_tkt_creds_get:c.krb5_tkt_creds_get}]{\sphinxcrossref{\sphinxcode{krb5\_tkt\_creds\_get()}}}} or {\hyperref[\detokenize{appdev/refs/api/krb5_tkt_creds_step:c.krb5_tkt_creds_step}]{\sphinxcrossref{\sphinxcode{krb5\_tkt\_creds\_step()}}}} . Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_cred_contents:c.krb5_free_cred_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_cred\_contents()}}}} to free \sphinxstyleemphasis{creds} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_tkt\_creds\_get\_times - Retrieve ticket times from a TGS request context.}
-\label{\detokenize{appdev/refs/api/krb5_tkt_creds_get_times:krb5-tkt-creds-get-times-retrieve-ticket-times-from-a-tgs-request-context}}\label{\detokenize{appdev/refs/api/krb5_tkt_creds_get_times::doc}}\index{krb5\_tkt\_creds\_get\_times (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_tkt_creds_get_times:c.krb5_tkt_creds_get_times}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_tkt\_creds\_get\_times}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_tkt_creds_context:c.krb5_tkt_creds_context}]{\sphinxcrossref{krb5\_tkt\_creds\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times}]{\sphinxcrossref{krb5\_ticket\_times}}} *\sphinxstyleemphasis{ times}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - TGS request context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{times} - Ticket times for acquired credentials
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-The TGS request context must have completed obtaining credentials via either {\hyperref[\detokenize{appdev/refs/api/krb5_tkt_creds_get:c.krb5_tkt_creds_get}]{\sphinxcrossref{\sphinxcode{krb5\_tkt\_creds\_get()}}}} or {\hyperref[\detokenize{appdev/refs/api/krb5_tkt_creds_step:c.krb5_tkt_creds_step}]{\sphinxcrossref{\sphinxcode{krb5\_tkt\_creds\_step()}}}} .
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_tkt\_creds\_init - Create a context to get credentials from a KDC’s Ticket Granting Service.}
-\label{\detokenize{appdev/refs/api/krb5_tkt_creds_init:krb5-tkt-creds-init-create-a-context-to-get-credentials-from-a-kdc-s-ticket-granting-service}}\label{\detokenize{appdev/refs/api/krb5_tkt_creds_init::doc}}\index{krb5\_tkt\_creds\_init (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_tkt_creds_init:c.krb5_tkt_creds_init}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_tkt\_creds\_init}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ options}, {\hyperref[\detokenize{appdev/refs/types/krb5_tkt_creds_context:c.krb5_tkt_creds_context}]{\sphinxcrossref{krb5\_tkt\_creds\_context}}} *\sphinxstyleemphasis{ ctx}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache handle
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{creds} - Input credentials
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{options} - \sphinxcode{KRB5\_GC} options for this request.
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ctx} - New TGS request context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function prepares to obtain credentials matching \sphinxstyleemphasis{creds} , either by retrieving them from \sphinxstyleemphasis{ccache} or by making requests to ticket-granting services beginning with a ticket-granting ticket for the client principal’s realm.
-
-The resulting TGS acquisition context can be used asynchronously with {\hyperref[\detokenize{appdev/refs/api/krb5_tkt_creds_step:c.krb5_tkt_creds_step}]{\sphinxcrossref{\sphinxcode{krb5\_tkt\_creds\_step()}}}} or synchronously with {\hyperref[\detokenize{appdev/refs/api/krb5_tkt_creds_get:c.krb5_tkt_creds_get}]{\sphinxcrossref{\sphinxcode{krb5\_tkt\_creds\_get()}}}} . See also {\hyperref[\detokenize{appdev/refs/api/krb5_get_credentials:c.krb5_get_credentials}]{\sphinxcrossref{\sphinxcode{krb5\_get\_credentials()}}}} for synchronous use.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_tkt_creds_free:c.krb5_tkt_creds_free}]{\sphinxcrossref{\sphinxcode{krb5\_tkt\_creds\_free()}}}} to free \sphinxstyleemphasis{ctx} when it is no longer needed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_tkt\_creds\_step - Get the next KDC request in a TGS exchange.}
-\label{\detokenize{appdev/refs/api/krb5_tkt_creds_step:krb5-tkt-creds-step-get-the-next-kdc-request-in-a-tgs-exchange}}\label{\detokenize{appdev/refs/api/krb5_tkt_creds_step::doc}}\index{krb5\_tkt\_creds\_step (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_tkt_creds_step:c.krb5_tkt_creds_step}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_tkt\_creds\_step}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_tkt_creds_context:c.krb5_tkt_creds_context}]{\sphinxcrossref{krb5\_tkt\_creds\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ in}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ out}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ realm}, unsigned int *\sphinxstyleemphasis{ flags}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - TGS request context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in} - KDC response (empty on the first call)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out} - Next KDC request
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{realm} - Realm for next KDC request
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{flags} - Output flags
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function constructs the next KDC request for a TGS exchange, allowing the caller to control the transport of KDC requests and replies. On the first call, \sphinxstyleemphasis{in} should be set to an empty buffer; on subsequent calls, it should be set to the KDC’s reply to the previous request.
-
-If more requests are needed, \sphinxstyleemphasis{flags} will be set to {\hyperref[\detokenize{appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE:KRB5_TKT_CREDS_STEP_FLAG_CONTINUE}]{\sphinxcrossref{\sphinxcode{KRB5\_TKT\_CREDS\_STEP\_FLAG\_CONTINUE}}}} and the next request will be placed in \sphinxstyleemphasis{out} . If no more requests are needed, \sphinxstyleemphasis{flags} will not contain {\hyperref[\detokenize{appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE:KRB5_TKT_CREDS_STEP_FLAG_CONTINUE}]{\sphinxcrossref{\sphinxcode{KRB5\_TKT\_CREDS\_STEP\_FLAG\_CONTINUE}}}} and \sphinxstyleemphasis{out} will be empty.
-
-If this function returns \sphinxstylestrong{KRB5KRB\_ERR\_RESPONSE\_TOO\_BIG} , the caller should transmit the next request using TCP rather than UDP. If this function returns any other error, the TGS exchange has failed.
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_unmarshal\_credentials - Deserialize a krb5\_creds object.}
-\label{\detokenize{appdev/refs/api/krb5_unmarshal_credentials::doc}}\label{\detokenize{appdev/refs/api/krb5_unmarshal_credentials:krb5-unmarshal-credentials-deserialize-a-krb5-creds-object}}\index{krb5\_unmarshal\_credentials (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_unmarshal_credentials:c.krb5_unmarshal_credentials}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_unmarshal\_credentials}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} **\sphinxstyleemphasis{ creds\_out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - The serialized credentials
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{creds\_out} - The resulting creds object
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Deserialize \sphinxstyleemphasis{data} to credentials in the format used by the FILE ccache format (vesion 4) and KCM ccache protocol.
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_creds:c.krb5_free_creds}]{\sphinxcrossref{\sphinxcode{krb5\_free\_creds()}}}} to free \sphinxstyleemphasis{creds\_out} when it is no longer needed.
-
-
-\subsubsection{krb5\_verify\_init\_creds - Verify initial credentials against a keytab.}
-\label{\detokenize{appdev/refs/api/krb5_verify_init_creds:krb5-verify-init-creds-verify-initial-credentials-against-a-keytab}}\label{\detokenize{appdev/refs/api/krb5_verify_init_creds::doc}}\index{krb5\_verify\_init\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_verify_init_creds:c.krb5_verify_init_creds}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_verify\_init\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ server}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}} *\sphinxstyleemphasis{ ccache}, {\hyperref[\detokenize{appdev/refs/types/krb5_verify_init_creds_opt:c.krb5_verify_init_creds_opt}]{\sphinxcrossref{krb5\_verify\_init\_creds\_opt}}} *\sphinxstyleemphasis{ options}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{creds} - Initial credentials to be verified
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Server principal (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table (NULL to use default keytab)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache for fetched creds (or NULL)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{options} - Verification options (NULL for default options)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function attempts to verify that \sphinxstyleemphasis{creds} were obtained from a KDC with knowledge of a key in \sphinxstyleemphasis{keytab} , or the default keytab if \sphinxstyleemphasis{keytab} is NULL. If \sphinxstyleemphasis{server} is provided, the highest-kvno key entry for that principal name is used to verify the credentials; otherwise, all unique”host”service principals in the keytab are tried.
-
-If the specified keytab does not exist, or is empty, or cannot be read, or does not contain an entry for \sphinxstyleemphasis{server} , then credential verification may be skipped unless configuration demands that it succeed. The caller can control this behavior by providing a verification options structure; see {\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds_opt_init:c.krb5_verify_init_creds_opt_init}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds\_opt\_init()}}}} and {\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail:c.krb5_verify_init_creds_opt_set_ap_req_nofail}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds\_opt\_set\_ap\_req\_nofail()}}}} .
-
-If \sphinxstyleemphasis{ccache} is NULL, any additional credentials fetched during the verification process will be destroyed. If \sphinxstyleemphasis{ccache} points to NULL, a memory ccache will be created for the additional credentials and returned in \sphinxstyleemphasis{ccache} . If \sphinxstyleemphasis{ccache} points to a valid credential cache handle, the additional credentials will be stored in that cache.
-
-
-\subsubsection{krb5\_verify\_init\_creds\_opt\_init - Initialize a credential verification options structure.}
-\label{\detokenize{appdev/refs/api/krb5_verify_init_creds_opt_init:krb5-verify-init-creds-opt-init-initialize-a-credential-verification-options-structure}}\label{\detokenize{appdev/refs/api/krb5_verify_init_creds_opt_init::doc}}\index{krb5\_verify\_init\_creds\_opt\_init (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_verify_init_creds_opt_init:c.krb5_verify_init_creds_opt_init}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_verify\_init\_creds\_opt\_init}}{{\hyperref[\detokenize{appdev/refs/types/krb5_verify_init_creds_opt:c.krb5_verify_init_creds_opt}]{\sphinxcrossref{krb5\_verify\_init\_creds\_opt}}} *\sphinxstyleemphasis{ k5\_vic\_options}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{k5\_vic\_options} - Verification options structure
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_verify\_init\_creds\_opt\_set\_ap\_req\_nofail - Set whether credential verification is required.}
-\label{\detokenize{appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail::doc}}\label{\detokenize{appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail:krb5-verify-init-creds-opt-set-ap-req-nofail-set-whether-credential-verification-is-required}}\index{krb5\_verify\_init\_creds\_opt\_set\_ap\_req\_nofail (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_verify_init_creds_opt_set_ap_req_nofail:c.krb5_verify_init_creds_opt_set_ap_req_nofail}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_verify\_init\_creds\_opt\_set\_ap\_req\_nofail}}{{\hyperref[\detokenize{appdev/refs/types/krb5_verify_init_creds_opt:c.krb5_verify_init_creds_opt}]{\sphinxcrossref{krb5\_verify\_init\_creds\_opt}}} *\sphinxstyleemphasis{ k5\_vic\_options}, int\sphinxstyleemphasis{ ap\_req\_nofail}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{k5\_vic\_options} - Verification options structure
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ap\_req\_nofail} - Whether to require successful verification
-
-\end{description}\end{quote}
-
-This function determines how {\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds:c.krb5_verify_init_creds}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds()}}}} behaves if no keytab information is available. If \sphinxstyleemphasis{ap\_req\_nofail} is \sphinxstylestrong{FALSE} , verification will be skipped in this case and {\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds:c.krb5_verify_init_creds}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds()}}}} will return successfully. If \sphinxstyleemphasis{ap\_req\_nofail} is \sphinxstylestrong{TRUE} , {\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds:c.krb5_verify_init_creds}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds()}}}} will not return successfully unless verification can be performed.
-
-If this function is not used, the behavior of {\hyperref[\detokenize{appdev/refs/api/krb5_verify_init_creds:c.krb5_verify_init_creds}]{\sphinxcrossref{\sphinxcode{krb5\_verify\_init\_creds()}}}} is determined through configuration.
-
-
-\subsubsection{krb5\_vprepend\_error\_message - Add a prefix to the message for an error code using a va\_list.}
-\label{\detokenize{appdev/refs/api/krb5_vprepend_error_message::doc}}\label{\detokenize{appdev/refs/api/krb5_vprepend_error_message:krb5-vprepend-error-message-add-a-prefix-to-the-message-for-an-error-code-using-a-va-list}}\index{krb5\_vprepend\_error\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_vprepend_error_message:c.krb5_vprepend_error_message}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_vprepend\_error\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}}\sphinxstyleemphasis{ code}, const char *\sphinxstyleemphasis{ fmt}, va\_list\sphinxstyleemphasis{ args}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{code} - Error code
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fmt} - Format string for error message prefix
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{args} - List of vprintf(3) style arguments
-
-\end{description}\end{quote}
-
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_prepend_error_message:c.krb5_prepend_error_message}]{\sphinxcrossref{\sphinxcode{krb5\_prepend\_error\_message()}}}} , but uses a va\_list instead of variadic arguments.
-
-
-\subsubsection{krb5\_vset\_error\_message - Set an extended error message for an error code using a va\_list.}
-\label{\detokenize{appdev/refs/api/krb5_vset_error_message:krb5-vset-error-message-set-an-extended-error-message-for-an-error-code-using-a-va-list}}\label{\detokenize{appdev/refs/api/krb5_vset_error_message::doc}}\index{krb5\_vset\_error\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_vset_error_message:c.krb5_vset_error_message}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_vset\_error\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}}\sphinxstyleemphasis{ code}, const char *\sphinxstyleemphasis{ fmt}, va\_list\sphinxstyleemphasis{ args}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{code} - Error code
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fmt} - Error string for the error code
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{args} - List of vprintf(3) style arguments
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_vwrap\_error\_message - Add a prefix to a different error code’s message using a va\_list.}
-\label{\detokenize{appdev/refs/api/krb5_vwrap_error_message:krb5-vwrap-error-message-add-a-prefix-to-a-different-error-code-s-message-using-a-va-list}}\label{\detokenize{appdev/refs/api/krb5_vwrap_error_message::doc}}\index{krb5\_vwrap\_error\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_vwrap_error_message:c.krb5_vwrap_error_message}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_vwrap\_error\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}}\sphinxstyleemphasis{ old\_code}, {\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}}\sphinxstyleemphasis{ code}, const char *\sphinxstyleemphasis{ fmt}, va\_list\sphinxstyleemphasis{ args}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{old\_code} - Previous error code
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{code} - Error code
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fmt} - Format string for error message prefix
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{args} - List of vprintf(3) style arguments
-
-\end{description}\end{quote}
-
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_wrap_error_message:c.krb5_wrap_error_message}]{\sphinxcrossref{\sphinxcode{krb5\_wrap\_error\_message()}}}} , but uses a va\_list instead of variadic arguments.
-
-
-\subsubsection{krb5\_wrap\_error\_message - Add a prefix to a different error code’s message.}
-\label{\detokenize{appdev/refs/api/krb5_wrap_error_message:krb5-wrap-error-message-add-a-prefix-to-a-different-error-code-s-message}}\label{\detokenize{appdev/refs/api/krb5_wrap_error_message::doc}}\index{krb5\_wrap\_error\_message (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_wrap_error_message:c.krb5_wrap_error_message}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_wrap\_error\_message}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ ctx}, {\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}}\sphinxstyleemphasis{ old\_code}, {\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}}\sphinxstyleemphasis{ code}, const char *\sphinxstyleemphasis{ fmt}, ...}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctx} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{old\_code} - Previous error code
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{code} - Error code
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fmt} - Format string for error message prefix
-
-\end{description}\end{quote}
-
-Format a message and prepend it to the message for \sphinxstyleemphasis{old\_code} . The prefix will be separated from the old message with a colon and space. Set the resulting message as the extended error message for \sphinxstyleemphasis{code} .
-
-
-\subsection{Public interfaces that should not be called directly}
-\label{\detokenize{appdev/refs/api/index:public-interfaces-that-should-not-be-called-directly}}
-
-\subsubsection{krb5\_c\_block\_size - Return cipher block size.}
-\label{\detokenize{appdev/refs/api/krb5_c_block_size:krb5-c-block-size-return-cipher-block-size}}\label{\detokenize{appdev/refs/api/krb5_c_block_size::doc}}\index{krb5\_c\_block\_size (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_block_size:c.krb5_c_block_size}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_block\_size}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, size\_t *\sphinxstyleemphasis{ blocksize}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{blocksize} - Block size for \sphinxstyleemphasis{enctype}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_checksum\_length - Return the length of checksums for a checksum type.}
-\label{\detokenize{appdev/refs/api/krb5_c_checksum_length:krb5-c-checksum-length-return-the-length-of-checksums-for-a-checksum-type}}\label{\detokenize{appdev/refs/api/krb5_c_checksum_length::doc}}\index{krb5\_c\_checksum\_length (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_checksum_length:c.krb5_c_checksum_length}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_checksum\_length}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ cksumtype}, size\_t *\sphinxstyleemphasis{ length}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksumtype} - Checksum type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{length} - Checksum length
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_crypto\_length - Return a length of a message field specific to the encryption type.}
-\label{\detokenize{appdev/refs/api/krb5_c_crypto_length:krb5-c-crypto-length-return-a-length-of-a-message-field-specific-to-the-encryption-type}}\label{\detokenize{appdev/refs/api/krb5_c_crypto_length::doc}}\index{krb5\_c\_crypto\_length (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_crypto_length:c.krb5_c_crypto_length}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_crypto\_length}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, {\hyperref[\detokenize{appdev/refs/types/krb5_cryptotype:c.krb5_cryptotype}]{\sphinxcrossref{krb5\_cryptotype}}}\sphinxstyleemphasis{ type}, unsigned int *\sphinxstyleemphasis{ size}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{type} - Type field (See \sphinxcode{KRB5\_CRYPTO\_TYPE} types)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{size} - Length of the \sphinxstyleemphasis{type} specific to \sphinxstyleemphasis{enctype}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_crypto\_length\_iov - Fill in lengths for header, trailer and padding in a IOV array.}
-\label{\detokenize{appdev/refs/api/krb5_c_crypto_length_iov:krb5-c-crypto-length-iov-fill-in-lengths-for-header-trailer-and-padding-in-a-iov-array}}\label{\detokenize{appdev/refs/api/krb5_c_crypto_length_iov::doc}}\index{krb5\_c\_crypto\_length\_iov (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_crypto_length_iov:c.krb5_c_crypto_length_iov}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_crypto\_length\_iov}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, {\hyperref[\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov}]{\sphinxcrossref{krb5\_crypto\_iov}}} *\sphinxstyleemphasis{ data}, size\_t\sphinxstyleemphasis{ num\_data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{data} - IOV array
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{num\_data} - Size of \sphinxstyleemphasis{data}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Padding is set to the actual padding required based on the provided \sphinxstyleemphasis{data} buffers. Typically this API is used after setting up the data buffers and {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY:KRB5_CRYPTO_TYPE_SIGN_ONLY}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_SIGN\_ONLY}}}} buffers, but before actually allocating header, trailer and padding.
-
-
-\subsubsection{krb5\_c\_decrypt - Decrypt data using a key (operates on keyblock).}
-\label{\detokenize{appdev/refs/api/krb5_c_decrypt::doc}}\label{\detokenize{appdev/refs/api/krb5_c_decrypt:krb5-c-decrypt-decrypt-data-using-a-key-operates-on-keyblock}}\index{krb5\_c\_decrypt (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_decrypt:c.krb5_c_decrypt}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_decrypt}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ cipher\_state}, const {\hyperref[\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}]{\sphinxcrossref{krb5\_enc\_data}}} *\sphinxstyleemphasis{ input}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ output}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{cipher\_state} - Cipher state; specify NULL if not needed
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{input} - Encrypted data
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{output} - Decrypted data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function decrypts the data block \sphinxstyleemphasis{input} and stores the output into \sphinxstyleemphasis{output} . The actual decryption key will be derived from \sphinxstyleemphasis{key} and \sphinxstyleemphasis{usage} if key derivation is specified for the encryption type. If non-null, \sphinxstyleemphasis{cipher\_state} specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation.
-
-\begin{sphinxadmonition}{note}{Note:}
-The caller must initialize \sphinxstyleemphasis{output} and allocate at least enough space for the result. The usual practice is to allocate an output buffer as long as the ciphertext, and let {\hyperref[\detokenize{appdev/refs/api/krb5_c_decrypt:c.krb5_c_decrypt}]{\sphinxcrossref{\sphinxcode{krb5\_c\_decrypt()}}}} trim \sphinxstyleemphasis{output-\textgreater{}length} . For some enctypes, the resulting \sphinxstyleemphasis{output-\textgreater{}length} may include padding bytes.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_c\_decrypt\_iov - Decrypt data in place supporting AEAD (operates on keyblock).}
-\label{\detokenize{appdev/refs/api/krb5_c_decrypt_iov:krb5-c-decrypt-iov-decrypt-data-in-place-supporting-aead-operates-on-keyblock}}\label{\detokenize{appdev/refs/api/krb5_c_decrypt_iov::doc}}\index{krb5\_c\_decrypt\_iov (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_decrypt_iov:c.krb5_c_decrypt_iov}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_decrypt\_iov}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ keyblock}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ cipher\_state}, {\hyperref[\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov}]{\sphinxcrossref{krb5\_crypto\_iov}}} *\sphinxstyleemphasis{ data}, size\_t\sphinxstyleemphasis{ num\_data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keyblock} - Encryption key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cipher\_state} - Cipher state; specify NULL if not needed
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{data} - IOV array. Modified in-place.
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{num\_data} - Size of \sphinxstyleemphasis{data}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function decrypts the data block \sphinxstyleemphasis{data} and stores the output in-place. The actual decryption key will be derived from \sphinxstyleemphasis{keyblock} and \sphinxstyleemphasis{usage} if key derivation is specified for the encryption type. If non-null, \sphinxstyleemphasis{cipher\_state} specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5\_crypto\_iov structures before calling into this API.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_c_decrypt_iov:c.krb5_c_decrypt_iov}]{\sphinxcrossref{\sphinxcode{krb5\_c\_decrypt\_iov()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-On return from a {\hyperref[\detokenize{appdev/refs/api/krb5_c_decrypt_iov:c.krb5_c_decrypt_iov}]{\sphinxcrossref{\sphinxcode{krb5\_c\_decrypt\_iov()}}}} call, the \sphinxstyleemphasis{data-\textgreater{}length} in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_c\_derive\_prfplus - Derive a key using some input data (via RFC 6113 PRF+).}
-\label{\detokenize{appdev/refs/api/krb5_c_derive_prfplus::doc}}\label{\detokenize{appdev/refs/api/krb5_c_derive_prfplus:krb5-c-derive-prfplus-derive-a-key-using-some-input-data-via-rfc-6113-prf}}\index{krb5\_c\_derive\_prfplus (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_derive_prfplus:c.krb5_c_derive_prfplus}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_derive\_prfplus}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ k}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ input}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{k} - KDC contribution key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{input} - Input string
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Output key enctype (or \sphinxstylestrong{ENCTYPE\_NULL} )
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out} - Derived keyblock
-
-\end{description}\end{quote}
-
-This function uses PRF+ as defined in RFC 6113 to derive a key from another key and an input string. If \sphinxstyleemphasis{enctype} is \sphinxstylestrong{ENCTYPE\_NULL} , the output key will have the same enctype as the input key.
-
-
-\subsubsection{krb5\_c\_encrypt - Encrypt data using a key (operates on keyblock).}
-\label{\detokenize{appdev/refs/api/krb5_c_encrypt::doc}}\label{\detokenize{appdev/refs/api/krb5_c_encrypt:krb5-c-encrypt-encrypt-data-using-a-key-operates-on-keyblock}}\index{krb5\_c\_encrypt (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_encrypt:c.krb5_c_encrypt}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_encrypt}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ cipher\_state}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ input}, {\hyperref[\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}]{\sphinxcrossref{krb5\_enc\_data}}} *\sphinxstyleemphasis{ output}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{cipher\_state} - Cipher state; specify NULL if not needed
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{input} - Data to be encrypted
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{output} - Encrypted data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function encrypts the data block \sphinxstyleemphasis{input} and stores the output into \sphinxstyleemphasis{output} . The actual encryption key will be derived from \sphinxstyleemphasis{key} and \sphinxstyleemphasis{usage} if key derivation is specified for the encryption type. If non-null, \sphinxstyleemphasis{cipher\_state} specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation.
-
-\begin{sphinxadmonition}{note}{Note:}
-The caller must initialize \sphinxstyleemphasis{output} and allocate at least enough space for the result (using {\hyperref[\detokenize{appdev/refs/api/krb5_c_encrypt_length:c.krb5_c_encrypt_length}]{\sphinxcrossref{\sphinxcode{krb5\_c\_encrypt\_length()}}}} to determine the amount of space needed). \sphinxstyleemphasis{output-\textgreater{}length} will be set to the actual length of the ciphertext.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_c\_encrypt\_iov - Encrypt data in place supporting AEAD (operates on keyblock).}
-\label{\detokenize{appdev/refs/api/krb5_c_encrypt_iov:krb5-c-encrypt-iov-encrypt-data-in-place-supporting-aead-operates-on-keyblock}}\label{\detokenize{appdev/refs/api/krb5_c_encrypt_iov::doc}}\index{krb5\_c\_encrypt\_iov (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_encrypt_iov:c.krb5_c_encrypt_iov}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_encrypt\_iov}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ keyblock}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ cipher\_state}, {\hyperref[\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov}]{\sphinxcrossref{krb5\_crypto\_iov}}} *\sphinxstyleemphasis{ data}, size\_t\sphinxstyleemphasis{ num\_data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keyblock} - Encryption key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cipher\_state} - Cipher state; specify NULL if not needed
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{data} - IOV array. Modified in-place.
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{num\_data} - Size of \sphinxstyleemphasis{data}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function encrypts the data block \sphinxstyleemphasis{data} and stores the output in-place. The actual encryption key will be derived from \sphinxstyleemphasis{keyblock} and \sphinxstyleemphasis{usage} if key derivation is specified for the encryption type. If non-null, \sphinxstyleemphasis{cipher\_state} specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5\_crypto\_iov structures before calling into this API.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_c_decrypt_iov:c.krb5_c_decrypt_iov}]{\sphinxcrossref{\sphinxcode{krb5\_c\_decrypt\_iov()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-On return from a {\hyperref[\detokenize{appdev/refs/api/krb5_c_encrypt_iov:c.krb5_c_encrypt_iov}]{\sphinxcrossref{\sphinxcode{krb5\_c\_encrypt\_iov()}}}} call, the \sphinxstyleemphasis{data-\textgreater{}length} in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_c\_encrypt\_length - Compute encrypted data length.}
-\label{\detokenize{appdev/refs/api/krb5_c_encrypt_length:krb5-c-encrypt-length-compute-encrypted-data-length}}\label{\detokenize{appdev/refs/api/krb5_c_encrypt_length::doc}}\index{krb5\_c\_encrypt\_length (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_encrypt_length:c.krb5_c_encrypt_length}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_encrypt\_length}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, size\_t\sphinxstyleemphasis{ inputlen}, size\_t *\sphinxstyleemphasis{ length}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{inputlen} - Length of the data to be encrypted
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{length} - Length of the encrypted data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function computes the length of the ciphertext produced by encrypting \sphinxstyleemphasis{inputlen} bytes including padding, confounder, and checksum.
-
-
-\subsubsection{krb5\_c\_enctype\_compare - Compare two encryption types.}
-\label{\detokenize{appdev/refs/api/krb5_c_enctype_compare::doc}}\label{\detokenize{appdev/refs/api/krb5_c_enctype_compare:krb5-c-enctype-compare-compare-two-encryption-types}}\index{krb5\_c\_enctype\_compare (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_enctype_compare:c.krb5_c_enctype_compare}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_enctype\_compare}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ e1}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ e2}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} *\sphinxstyleemphasis{ similar}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{e1} - First encryption type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{e2} - Second encryption type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{similar} - \sphinxstylestrong{TRUE} if types are similar, \sphinxstylestrong{FALSE} if not
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function determines whether two encryption types use the same kind of keys.
-
-
-\subsubsection{krb5\_c\_free\_state - Free a cipher state previously allocated by krb5\_c\_init\_state() .}
-\label{\detokenize{appdev/refs/api/krb5_c_free_state:krb5-c-free-state-free-a-cipher-state-previously-allocated-by-krb5-c-init-state}}\label{\detokenize{appdev/refs/api/krb5_c_free_state::doc}}\index{krb5\_c\_free\_state (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_free_state:c.krb5_c_free_state}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_free\_state}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ state}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{state} - Cipher state to be freed
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_fx\_cf2\_simple - Compute the KRB-FX-CF2 combination of two keys and pepper strings.}
-\label{\detokenize{appdev/refs/api/krb5_c_fx_cf2_simple:krb5-c-fx-cf2-simple-compute-the-krb-fx-cf2-combination-of-two-keys-and-pepper-strings}}\label{\detokenize{appdev/refs/api/krb5_c_fx_cf2_simple::doc}}\index{krb5\_c\_fx\_cf2\_simple (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_fx_cf2_simple:c.krb5_c_fx_cf2_simple}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_fx\_cf2\_simple}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ k1}, const char *\sphinxstyleemphasis{ pepper1}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ k2}, const char *\sphinxstyleemphasis{ pepper2}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{k1} - KDC contribution key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pepper1} - String”PKINIT”
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{k2} - Reply key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{pepper2} - String”KeyExchange”
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out} - Output key
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function computes the KRB-FX-CF2 function over its inputs and places the results in a newly allocated keyblock. This function is simple in that it assumes that \sphinxstyleemphasis{pepper1} and \sphinxstyleemphasis{pepper2} are C strings with no internal nulls and that the enctype of the result will be the same as that of \sphinxstyleemphasis{k1} . \sphinxstyleemphasis{k1} and \sphinxstyleemphasis{k2} may be of different enctypes.
-
-
-\subsubsection{krb5\_c\_init\_state - Initialize a new cipher state.}
-\label{\detokenize{appdev/refs/api/krb5_c_init_state:krb5-c-init-state-initialize-a-new-cipher-state}}\label{\detokenize{appdev/refs/api/krb5_c_init_state::doc}}\index{krb5\_c\_init\_state (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_init_state:c.krb5_c_init_state}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_init\_state}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ new\_state}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{new\_state} - New cipher state
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_is\_coll\_proof\_cksum - Test whether a checksum type is collision-proof.}
-\label{\detokenize{appdev/refs/api/krb5_c_is_coll_proof_cksum:krb5-c-is-coll-proof-cksum-test-whether-a-checksum-type-is-collision-proof}}\label{\detokenize{appdev/refs/api/krb5_c_is_coll_proof_cksum::doc}}\index{krb5\_c\_is\_coll\_proof\_cksum (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_is_coll_proof_cksum:c.krb5_c_is_coll_proof_cksum}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_c\_is\_coll\_proof\_cksum}}{{\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ ctype}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctype} - Checksum type
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-TRUE if ctype is collision-proof, FALSE if it is not collision-proof or not a valid checksum type.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_is\_keyed\_cksum - Test whether a checksum type is keyed.}
-\label{\detokenize{appdev/refs/api/krb5_c_is_keyed_cksum::doc}}\label{\detokenize{appdev/refs/api/krb5_c_is_keyed_cksum:krb5-c-is-keyed-cksum-test-whether-a-checksum-type-is-keyed}}\index{krb5\_c\_is\_keyed\_cksum (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_is_keyed_cksum:c.krb5_c_is_keyed_cksum}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_c\_is\_keyed\_cksum}}{{\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ ctype}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctype} - Checksum type
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-TRUE if ctype is a keyed checksum type, FALSE otherwise.
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_keyed\_checksum\_types - Return a list of keyed checksum types usable with an encryption type.}
-\label{\detokenize{appdev/refs/api/krb5_c_keyed_checksum_types::doc}}\label{\detokenize{appdev/refs/api/krb5_c_keyed_checksum_types:krb5-c-keyed-checksum-types-return-a-list-of-keyed-checksum-types-usable-with-an-encryption-type}}\index{krb5\_c\_keyed\_checksum\_types (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_keyed_checksum_types:c.krb5_c_keyed_checksum_types}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_keyed\_checksum\_types}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, unsigned int *\sphinxstyleemphasis{ count}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}} **\sphinxstyleemphasis{ cksumtypes}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{count} - Count of allowable checksum types
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cksumtypes} - Array of allowable checksum types
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_cksumtypes:c.krb5_free_cksumtypes}]{\sphinxcrossref{\sphinxcode{krb5\_free\_cksumtypes()}}}} to free \sphinxstyleemphasis{cksumtypes} when it is no longer needed.
-
-
-\subsubsection{krb5\_c\_keylengths - Return length of the specified key in bytes.}
-\label{\detokenize{appdev/refs/api/krb5_c_keylengths::doc}}\label{\detokenize{appdev/refs/api/krb5_c_keylengths:krb5-c-keylengths-return-length-of-the-specified-key-in-bytes}}\index{krb5\_c\_keylengths (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_keylengths:c.krb5_c_keylengths}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_keylengths}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, size\_t *\sphinxstyleemphasis{ keybytes}, size\_t *\sphinxstyleemphasis{ keylength}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{keybytes} - Number of bytes required to make a key
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{keylength} - Length of final key
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_make\_checksum - Compute a checksum (operates on keyblock).}
-\label{\detokenize{appdev/refs/api/krb5_c_make_checksum::doc}}\label{\detokenize{appdev/refs/api/krb5_c_make_checksum:krb5-c-make-checksum-compute-a-checksum-operates-on-keyblock}}\index{krb5\_c\_make\_checksum (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_make_checksum:c.krb5_c_make_checksum}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_make\_checksum}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ cksumtype}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ input}, {\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} *\sphinxstyleemphasis{ cksum}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksumtype} - Checksum type (0 for mandatory type)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key for a keyed checksum
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{input} - Input data
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cksum} - Generated checksum
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function computes a checksum of type \sphinxstyleemphasis{cksumtype} over \sphinxstyleemphasis{input} , using \sphinxstyleemphasis{key} if the checksum type is a keyed checksum. If \sphinxstyleemphasis{cksumtype} is 0 and \sphinxstyleemphasis{key} is non-null, the checksum type will be the mandatory-to-implement checksum type for the key’s encryption type. The actual checksum key will be derived from \sphinxstyleemphasis{key} and \sphinxstyleemphasis{usage} if key derivation is specified for the checksum type. The newly created \sphinxstyleemphasis{cksum} must be released by calling {\hyperref[\detokenize{appdev/refs/api/krb5_free_checksum_contents:c.krb5_free_checksum_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_checksum\_contents()}}}} when it is no longer needed.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_c_verify_checksum:c.krb5_c_verify_checksum}]{\sphinxcrossref{\sphinxcode{krb5\_c\_verify\_checksum()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_k_make_checksum:c.krb5_k_make_checksum}]{\sphinxcrossref{\sphinxcode{krb5\_k\_make\_checksum()}}}} , but operates on keyblock \sphinxstyleemphasis{key} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_c\_make\_checksum\_iov - Fill in a checksum element in IOV array (operates on keyblock)}
-\label{\detokenize{appdev/refs/api/krb5_c_make_checksum_iov:krb5-c-make-checksum-iov-fill-in-a-checksum-element-in-iov-array-operates-on-keyblock}}\label{\detokenize{appdev/refs/api/krb5_c_make_checksum_iov::doc}}\index{krb5\_c\_make\_checksum\_iov (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_make_checksum_iov:c.krb5_c_make_checksum_iov}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_make\_checksum\_iov}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ cksumtype}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, {\hyperref[\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov}]{\sphinxcrossref{krb5\_crypto\_iov}}} *\sphinxstyleemphasis{ data}, size\_t\sphinxstyleemphasis{ num\_data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksumtype} - Checksum type (0 for mandatory type)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key for a keyed checksum
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{data} - IOV array
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{num\_data} - Size of \sphinxstyleemphasis{data}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Create a checksum in the {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM:KRB5_CRYPTO_TYPE_CHECKSUM}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_CHECKSUM}}}} element over {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA:KRB5_CRYPTO_TYPE_DATA}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_DATA}}}} and {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY:KRB5_CRYPTO_TYPE_SIGN_ONLY}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_SIGN\_ONLY}}}} chunks in \sphinxstyleemphasis{data} . Only the {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM:KRB5_CRYPTO_TYPE_CHECKSUM}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_CHECKSUM}}}} region is modified.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_c_verify_checksum_iov:c.krb5_c_verify_checksum_iov}]{\sphinxcrossref{\sphinxcode{krb5\_c\_verify\_checksum\_iov()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_k_make_checksum_iov:c.krb5_k_make_checksum_iov}]{\sphinxcrossref{\sphinxcode{krb5\_k\_make\_checksum\_iov()}}}} , but operates on keyblock \sphinxstyleemphasis{key} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_c\_make\_random\_key - Generate an enctype-specific random encryption key.}
-\label{\detokenize{appdev/refs/api/krb5_c_make_random_key:krb5-c-make-random-key-generate-an-enctype-specific-random-encryption-key}}\label{\detokenize{appdev/refs/api/krb5_c_make_random_key::doc}}\index{krb5\_c\_make\_random\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_make_random_key:c.krb5_c_make_random_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_make\_random\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ k5\_random\_key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type of the generated key
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{k5\_random\_key} - An allocated and initialized keyblock
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_keyblock_contents:c.krb5_free_keyblock_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keyblock\_contents()}}}} to free \sphinxstyleemphasis{k5\_random\_key} when no longer needed.
-
-
-\subsubsection{krb5\_c\_padding\_length - Return a number of padding octets.}
-\label{\detokenize{appdev/refs/api/krb5_c_padding_length:krb5-c-padding-length-return-a-number-of-padding-octets}}\label{\detokenize{appdev/refs/api/krb5_c_padding_length::doc}}\index{krb5\_c\_padding\_length (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_padding_length:c.krb5_c_padding_length}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_padding\_length}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, size\_t\sphinxstyleemphasis{ data\_length}, unsigned int *\sphinxstyleemphasis{ size}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data\_length} - Length of the plaintext to pad
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{size} - Number of padding octets
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - KRB5\_BAD\_ENCTYPE
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function returns the number of the padding octets required to pad \sphinxstyleemphasis{data\_length} octets of plaintext.
-
-
-\subsubsection{krb5\_c\_prf - Generate enctype-specific pseudo-random bytes.}
-\label{\detokenize{appdev/refs/api/krb5_c_prf:krb5-c-prf-generate-enctype-specific-pseudo-random-bytes}}\label{\detokenize{appdev/refs/api/krb5_c_prf::doc}}\index{krb5\_c\_prf (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_prf:c.krb5_c_prf}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_prf}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ keyblock}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ input}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ output}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keyblock} - Key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{input} - Input data
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{output} - Output data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function selects a pseudo-random function based on \sphinxstyleemphasis{keyblock} and computes its value over \sphinxstyleemphasis{input} , placing the result into \sphinxstyleemphasis{output} . The caller must preinitialize \sphinxstyleemphasis{output} and allocate space for the result, using {\hyperref[\detokenize{appdev/refs/api/krb5_c_prf_length:c.krb5_c_prf_length}]{\sphinxcrossref{\sphinxcode{krb5\_c\_prf\_length()}}}} to determine the required length.
-
-
-\subsubsection{krb5\_c\_prfplus - Generate pseudo-random bytes using RFC 6113 PRF+.}
-\label{\detokenize{appdev/refs/api/krb5_c_prfplus:krb5-c-prfplus-generate-pseudo-random-bytes-using-rfc-6113-prf}}\label{\detokenize{appdev/refs/api/krb5_c_prfplus::doc}}\index{krb5\_c\_prfplus (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_prfplus:c.krb5_c_prfplus}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_prfplus}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ k}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ input}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ output}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{k} - KDC contribution key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{input} - Input data
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{output} - Pseudo-random output buffer
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-0 on success, E2BIG if output-\textgreater{}length is too large for PRF+ to generate, ENOMEM on allocation failure, or an error code from krb5\_c\_prf()
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function fills \sphinxstyleemphasis{output} with PRF+(k, input) as defined in RFC 6113 section 5.1. The caller must preinitialize \sphinxstyleemphasis{output} and allocate the desired amount of space. The length of the pseudo-random output will match the length of \sphinxstyleemphasis{output} .
-
-\begin{sphinxadmonition}{note}{Note:}
-RFC 4402 defines a different PRF+ operation. This function does not implement that operation.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_c\_prf\_length - Get the output length of pseudo-random functions for an encryption type.}
-\label{\detokenize{appdev/refs/api/krb5_c_prf_length::doc}}\label{\detokenize{appdev/refs/api/krb5_c_prf_length:krb5-c-prf-length-get-the-output-length-of-pseudo-random-functions-for-an-encryption-type}}\index{krb5\_c\_prf\_length (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_prf_length:c.krb5_c_prf_length}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_prf\_length}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, size\_t *\sphinxstyleemphasis{ len}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{len} - Length of PRF output
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_random\_add\_entropy}
-\label{\detokenize{appdev/refs/api/krb5_c_random_add_entropy::doc}}\label{\detokenize{appdev/refs/api/krb5_c_random_add_entropy:krb5-c-random-add-entropy}}\index{krb5\_c\_random\_add\_entropy (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_random_add_entropy:c.krb5_c_random_add_entropy}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_random\_add\_entropy}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, unsigned int\sphinxstyleemphasis{ randsource}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{randsource}
-
-\sphinxstylestrong{data}
-
-\end{description}\end{quote}
-
-DEPRECATED This call is no longer necessary.
-
-
-\subsubsection{krb5\_c\_random\_make\_octets - Generate pseudo-random bytes.}
-\label{\detokenize{appdev/refs/api/krb5_c_random_make_octets::doc}}\label{\detokenize{appdev/refs/api/krb5_c_random_make_octets:krb5-c-random-make-octets-generate-pseudo-random-bytes}}\index{krb5\_c\_random\_make\_octets (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_random_make_octets:c.krb5_c_random_make_octets}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_random\_make\_octets}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{data} - Random data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Fills in \sphinxstyleemphasis{data} with bytes from the PRNG used by krb5 crypto operations. The caller must preinitialize \sphinxstyleemphasis{data} and allocate the desired amount of space.
-
-
-\subsubsection{krb5\_c\_random\_os\_entropy}
-\label{\detokenize{appdev/refs/api/krb5_c_random_os_entropy::doc}}\label{\detokenize{appdev/refs/api/krb5_c_random_os_entropy:krb5-c-random-os-entropy}}\index{krb5\_c\_random\_os\_entropy (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_random_os_entropy:c.krb5_c_random_os_entropy}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_random\_os\_entropy}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, int\sphinxstyleemphasis{ strong}, int *\sphinxstyleemphasis{ success}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{strong}
-
-\sphinxstylestrong{success}
-
-\end{description}\end{quote}
-
-DEPRECATED This call is no longer necessary.
-
-
-\subsubsection{krb5\_c\_random\_to\_key - Generate an enctype-specific key from random data.}
-\label{\detokenize{appdev/refs/api/krb5_c_random_to_key:krb5-c-random-to-key-generate-an-enctype-specific-key-from-random-data}}\label{\detokenize{appdev/refs/api/krb5_c_random_to_key::doc}}\index{krb5\_c\_random\_to\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_random_to_key:c.krb5_c_random_to_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_random\_to\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ random\_data}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ k5\_random\_key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{random\_data} - Random input data
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{k5\_random\_key} - Resulting key
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function takes random input data \sphinxstyleemphasis{random\_data} and produces a valid key \sphinxstyleemphasis{k5\_random\_key} for a given \sphinxstyleemphasis{enctype} .
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_c_keylengths:c.krb5_c_keylengths}]{\sphinxcrossref{\sphinxcode{krb5\_c\_keylengths()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-It is assumed that \sphinxstyleemphasis{k5\_random\_key} has already been initialized and \sphinxstyleemphasis{k5\_random\_key-\textgreater{}contents} has been allocated with the correct length.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_c\_string\_to\_key - Convert a string (such a password) to a key.}
-\label{\detokenize{appdev/refs/api/krb5_c_string_to_key:krb5-c-string-to-key-convert-a-string-such-a-password-to-a-key}}\label{\detokenize{appdev/refs/api/krb5_c_string_to_key::doc}}\index{krb5\_c\_string\_to\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_string_to_key:c.krb5_c_string_to_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_string\_to\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ string}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ salt}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{string} - String to be converted
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{salt} - Salt value
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{key} - Generated key
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function converts \sphinxstyleemphasis{string} to a \sphinxstyleemphasis{key} of encryption type \sphinxstyleemphasis{enctype} , using the specified \sphinxstyleemphasis{salt} . The newly created \sphinxstyleemphasis{key} must be released by calling {\hyperref[\detokenize{appdev/refs/api/krb5_free_keyblock_contents:c.krb5_free_keyblock_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keyblock\_contents()}}}} when it is no longer needed.
-
-
-\subsubsection{krb5\_c\_string\_to\_key\_with\_params - Convert a string (such as a password) to a key with additional parameters.}
-\label{\detokenize{appdev/refs/api/krb5_c_string_to_key_with_params::doc}}\label{\detokenize{appdev/refs/api/krb5_c_string_to_key_with_params:krb5-c-string-to-key-with-params-convert-a-string-such-as-a-password-to-a-key-with-additional-parameters}}\index{krb5\_c\_string\_to\_key\_with\_params (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_string_to_key_with_params:c.krb5_c_string_to_key_with_params}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_string\_to\_key\_with\_params}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ string}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ salt}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ params}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{string} - String to be converted
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{salt} - Salt value
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{params} - Parameters
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{key} - Generated key
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_c_string_to_key:c.krb5_c_string_to_key}]{\sphinxcrossref{\sphinxcode{krb5\_c\_string\_to\_key()}}}} , but also takes parameters which may affect the algorithm in an enctype-dependent way. The newly created \sphinxstyleemphasis{key} must be released by calling {\hyperref[\detokenize{appdev/refs/api/krb5_free_keyblock_contents:c.krb5_free_keyblock_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_keyblock\_contents()}}}} when it is no longer needed.
-
-
-\subsubsection{krb5\_c\_valid\_cksumtype - Verify that specified checksum type is a valid Kerberos checksum type.}
-\label{\detokenize{appdev/refs/api/krb5_c_valid_cksumtype:krb5-c-valid-cksumtype-verify-that-specified-checksum-type-is-a-valid-kerberos-checksum-type}}\label{\detokenize{appdev/refs/api/krb5_c_valid_cksumtype::doc}}\index{krb5\_c\_valid\_cksumtype (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_valid_cksumtype:c.krb5_c_valid_cksumtype}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_c\_valid\_cksumtype}}{{\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ ctype}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ctype} - Checksum type
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-TRUE if ctype is valid, FALSE if not
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_valid\_enctype - Verify that a specified encryption type is a valid Kerberos encryption type.}
-\label{\detokenize{appdev/refs/api/krb5_c_valid_enctype:krb5-c-valid-enctype-verify-that-a-specified-encryption-type-is-a-valid-kerberos-encryption-type}}\label{\detokenize{appdev/refs/api/krb5_c_valid_enctype::doc}}\index{krb5\_c\_valid\_enctype (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_valid_enctype:c.krb5_c_valid_enctype}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_c\_valid\_enctype}}{{\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ ktype}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ktype} - Encryption type
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{return}] \leavevmode\begin{itemize}
-\item {}
-TRUE if ktype is valid, FALSE if not
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_c\_verify\_checksum - Verify a checksum (operates on keyblock).}
-\label{\detokenize{appdev/refs/api/krb5_c_verify_checksum:krb5-c-verify-checksum-verify-a-checksum-operates-on-keyblock}}\label{\detokenize{appdev/refs/api/krb5_c_verify_checksum::doc}}\index{krb5\_c\_verify\_checksum (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_verify_checksum:c.krb5_c_verify_checksum}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_verify\_checksum}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}, const {\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} *\sphinxstyleemphasis{ cksum}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} *\sphinxstyleemphasis{ valid}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key for a keyed checksum
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - \sphinxstyleemphasis{key} usage
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - Data to be used to compute a new checksum using \sphinxstyleemphasis{key} to compare \sphinxstyleemphasis{cksum} against
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksum} - Checksum to be verified
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{valid} - Non-zero for success, zero for failure
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function verifies that \sphinxstyleemphasis{cksum} is a valid checksum for \sphinxstyleemphasis{data} . If the checksum type of \sphinxstyleemphasis{cksum} is a keyed checksum, \sphinxstyleemphasis{key} is used to verify the checksum. If the checksum type in \sphinxstyleemphasis{cksum} is 0 and \sphinxstyleemphasis{key} is not NULL, the mandatory checksum type for \sphinxstyleemphasis{key} will be used. The actual checksum key will be derived from \sphinxstyleemphasis{key} and \sphinxstyleemphasis{usage} if key derivation is specified for the checksum type.
-
-\begin{sphinxadmonition}{note}{Note:}
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_k_verify_checksum:c.krb5_k_verify_checksum}]{\sphinxcrossref{\sphinxcode{krb5\_k\_verify\_checksum()}}}} , but operates on keyblock \sphinxstyleemphasis{key} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_c\_verify\_checksum\_iov - Validate a checksum element in IOV array (operates on keyblock).}
-\label{\detokenize{appdev/refs/api/krb5_c_verify_checksum_iov::doc}}\label{\detokenize{appdev/refs/api/krb5_c_verify_checksum_iov:krb5-c-verify-checksum-iov-validate-a-checksum-element-in-iov-array-operates-on-keyblock}}\index{krb5\_c\_verify\_checksum\_iov (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_verify_checksum_iov:c.krb5_c_verify_checksum_iov}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_verify\_checksum\_iov}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ cksumtype}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov}]{\sphinxcrossref{krb5\_crypto\_iov}}} *\sphinxstyleemphasis{ data}, size\_t\sphinxstyleemphasis{ num\_data}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} *\sphinxstyleemphasis{ valid}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksumtype} - Checksum type (0 for mandatory type)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key for a keyed checksum
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - IOV array
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{num\_data} - Size of \sphinxstyleemphasis{data}
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{valid} - Non-zero for success, zero for failure
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Confirm that the checksum in the {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM:KRB5_CRYPTO_TYPE_CHECKSUM}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_CHECKSUM}}}} element is a valid checksum of the {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA:KRB5_CRYPTO_TYPE_DATA}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_DATA}}}} and {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY:KRB5_CRYPTO_TYPE_SIGN_ONLY}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_SIGN\_ONLY}}}} regions in the iov.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_c_make_checksum_iov:c.krb5_c_make_checksum_iov}]{\sphinxcrossref{\sphinxcode{krb5\_c\_make\_checksum\_iov()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_k_verify_checksum_iov:c.krb5_k_verify_checksum_iov}]{\sphinxcrossref{\sphinxcode{krb5\_k\_verify\_checksum\_iov()}}}} , but operates on keyblock \sphinxstyleemphasis{key} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_cksumtype\_to\_string - Convert a checksum type to a string.}
-\label{\detokenize{appdev/refs/api/krb5_cksumtype_to_string::doc}}\label{\detokenize{appdev/refs/api/krb5_cksumtype_to_string:krb5-cksumtype-to-string-convert-a-checksum-type-to-a-string}}\index{krb5\_cksumtype\_to\_string (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cksumtype_to_string:c.krb5_cksumtype_to_string}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cksumtype\_to\_string}}{{\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ cksumtype}, char *\sphinxstyleemphasis{ buffer}, size\_t\sphinxstyleemphasis{ buflen}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksumtype} - Checksum type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{buffer} - Buffer to hold converted checksum type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{buflen} - Storage available in \sphinxstyleemphasis{buffer}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_decode\_authdata\_container - Unwrap authorization data.}
-\label{\detokenize{appdev/refs/api/krb5_decode_authdata_container::doc}}\label{\detokenize{appdev/refs/api/krb5_decode_authdata_container:krb5-decode-authdata-container-unwrap-authorization-data}}\index{krb5\_decode\_authdata\_container (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_decode_authdata_container:c.krb5_decode_authdata_container}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_decode\_authdata\_container}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdatatype:c.krb5_authdatatype}]{\sphinxcrossref{krb5\_authdatatype}}}\sphinxstyleemphasis{ type}, const {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} *\sphinxstyleemphasis{ container}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ***\sphinxstyleemphasis{ authdata}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{type} - \sphinxcode{KRB5\_AUTHDATA} type of \sphinxstyleemphasis{container}
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{container} - Authorization data to be decoded
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{authdata} - List of decoded authorization data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_encode_authdata_container:c.krb5_encode_authdata_container}]{\sphinxcrossref{\sphinxcode{krb5\_encode\_authdata\_container()}}}}
-
-
-
-
-\subsubsection{krb5\_decode\_ticket - Decode an ASN.1-formatted ticket.}
-\label{\detokenize{appdev/refs/api/krb5_decode_ticket::doc}}\label{\detokenize{appdev/refs/api/krb5_decode_ticket:krb5-decode-ticket-decode-an-asn-1-formatted-ticket}}\index{krb5\_decode\_ticket (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_decode_ticket:c.krb5_decode_ticket}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_decode\_ticket}}{const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ code}, {\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} **\sphinxstyleemphasis{ rep}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{code} - ASN.1-formatted ticket
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rep} - Decoded ticket information
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_deltat\_to\_string - Convert a relative time value to a string.}
-\label{\detokenize{appdev/refs/api/krb5_deltat_to_string::doc}}\label{\detokenize{appdev/refs/api/krb5_deltat_to_string:krb5-deltat-to-string-convert-a-relative-time-value-to-a-string}}\index{krb5\_deltat\_to\_string (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_deltat_to_string:c.krb5_deltat_to_string}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_deltat\_to\_string}}{{\hyperref[\detokenize{appdev/refs/types/krb5_deltat:c.krb5_deltat}]{\sphinxcrossref{krb5\_deltat}}}\sphinxstyleemphasis{ deltat}, char *\sphinxstyleemphasis{ buffer}, size\_t\sphinxstyleemphasis{ buflen}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{deltat} - Relative time value to convert
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{buffer} - Buffer to hold time string
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{buflen} - Storage available in \sphinxstyleemphasis{buffer}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_encode\_authdata\_container - Wrap authorization data in a container.}
-\label{\detokenize{appdev/refs/api/krb5_encode_authdata_container::doc}}\label{\detokenize{appdev/refs/api/krb5_encode_authdata_container:krb5-encode-authdata-container-wrap-authorization-data-in-a-container}}\index{krb5\_encode\_authdata\_container (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_encode_authdata_container:c.krb5_encode_authdata_container}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_encode\_authdata\_container}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdatatype:c.krb5_authdatatype}]{\sphinxcrossref{krb5\_authdatatype}}}\sphinxstyleemphasis{ type}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} *const *\sphinxstyleemphasis{ authdata}, {\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ***\sphinxstyleemphasis{ container}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{type} - \sphinxcode{KRB5\_AUTHDATA} type of \sphinxstyleemphasis{container}
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{authdata} - List of authorization data to be encoded
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{container} - List of encoded authorization data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-The result is returned in \sphinxstyleemphasis{container} as a single-element list.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_decode_authdata_container:c.krb5_decode_authdata_container}]{\sphinxcrossref{\sphinxcode{krb5\_decode\_authdata\_container()}}}}
-
-
-
-
-\subsubsection{krb5\_enctype\_to\_name - Convert an encryption type to a name or alias.}
-\label{\detokenize{appdev/refs/api/krb5_enctype_to_name::doc}}\label{\detokenize{appdev/refs/api/krb5_enctype_to_name:krb5-enctype-to-name-convert-an-encryption-type-to-a-name-or-alias}}\index{krb5\_enctype\_to\_name (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_enctype_to_name:c.krb5_enctype_to_name}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_enctype\_to\_name}}{{\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}}\sphinxstyleemphasis{ shortest}, char *\sphinxstyleemphasis{ buffer}, size\_t\sphinxstyleemphasis{ buflen}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{shortest} - Flag
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{buffer} - Buffer to hold encryption type string
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{buflen} - Storage available in \sphinxstyleemphasis{buffer}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-If \sphinxstyleemphasis{shortest} is FALSE, this function returns the enctype’s canonical name (like”aes128-cts-hmac-sha1-96”). If \sphinxstyleemphasis{shortest} is TRUE, it return the enctype’s shortest alias (like”aes128-cts”).
-
-\begin{sphinxadmonition}{note}{Note:}
-New in 1.9
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_enctype\_to\_string - Convert an encryption type to a string.}
-\label{\detokenize{appdev/refs/api/krb5_enctype_to_string::doc}}\label{\detokenize{appdev/refs/api/krb5_enctype_to_string:krb5-enctype-to-string-convert-an-encryption-type-to-a-string}}\index{krb5\_enctype\_to\_string (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_enctype_to_string:c.krb5_enctype_to_string}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_enctype\_to\_string}}{{\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}, char *\sphinxstyleemphasis{ buffer}, size\_t\sphinxstyleemphasis{ buflen}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{enctype} - Encryption type
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{buffer} - Buffer to hold encryption type string
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{buflen} - Storage available in \sphinxstyleemphasis{buffer}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_free\_checksum - Free a krb5\_checksum structure.}
-\label{\detokenize{appdev/refs/api/krb5_free_checksum:krb5-free-checksum-free-a-krb5-checksum-structure}}\label{\detokenize{appdev/refs/api/krb5_free_checksum::doc}}\index{krb5\_free\_checksum (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_checksum:c.krb5_free_checksum}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_checksum}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Checksum structure to be freed
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} and the structure itself.
-
-
-\subsubsection{krb5\_free\_checksum\_contents - Free the contents of a krb5\_checksum structure.}
-\label{\detokenize{appdev/refs/api/krb5_free_checksum_contents:krb5-free-checksum-contents-free-the-contents-of-a-krb5-checksum-structure}}\label{\detokenize{appdev/refs/api/krb5_free_checksum_contents::doc}}\index{krb5\_free\_checksum\_contents (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_checksum_contents:c.krb5_free_checksum_contents}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_checksum\_contents}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Checksum structure to free contents of
-
-\end{description}\end{quote}
-
-This function frees the contents of \sphinxstyleemphasis{val} , but not the structure itself. It sets the checksum’s data pointer to null and (beginning in release 1.19) sets its length to zero.
-
-
-\subsubsection{krb5\_free\_cksumtypes - Free an array of checksum types.}
-\label{\detokenize{appdev/refs/api/krb5_free_cksumtypes:krb5-free-cksumtypes-free-an-array-of-checksum-types}}\label{\detokenize{appdev/refs/api/krb5_free_cksumtypes::doc}}\index{krb5\_free\_cksumtypes (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_cksumtypes:c.krb5_free_cksumtypes}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_cksumtypes}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}} *\sphinxstyleemphasis{ val}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{val} - Array of checksum types to be freed
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_free\_tgt\_creds - Free an array of credential structures.}
-\label{\detokenize{appdev/refs/api/krb5_free_tgt_creds::doc}}\label{\detokenize{appdev/refs/api/krb5_free_tgt_creds:krb5-free-tgt-creds-free-an-array-of-credential-structures}}\index{krb5\_free\_tgt\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_free_tgt_creds:c.krb5_free_tgt_creds}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_free\_tgt\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} **\sphinxstyleemphasis{ tgts}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{tgts} - Null-terminated array of credentials to free
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-The last entry in the array \sphinxstyleemphasis{tgts} must be a NULL pointer.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_k\_create\_key - Create a krb5\_key from the enctype and key data in a keyblock.}
-\label{\detokenize{appdev/refs/api/krb5_k_create_key::doc}}\label{\detokenize{appdev/refs/api/krb5_k_create_key:krb5-k-create-key-create-a-krb5-key-from-the-enctype-and-key-data-in-a-keyblock}}\index{krb5\_k\_create\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_create_key:c.krb5_k_create_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_create\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key\_data}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}} *\sphinxstyleemphasis{ out}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key\_data} - Keyblock
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out} - Opaque key
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - KRB5\_BAD\_ENCTYPE
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-The reference count on a key \sphinxstyleemphasis{out} is set to 1. Use {\hyperref[\detokenize{appdev/refs/api/krb5_k_free_key:c.krb5_k_free_key}]{\sphinxcrossref{\sphinxcode{krb5\_k\_free\_key()}}}} to free \sphinxstyleemphasis{out} when it is no longer needed.
-
-
-\subsubsection{krb5\_k\_decrypt - Decrypt data using a key (operates on opaque key).}
-\label{\detokenize{appdev/refs/api/krb5_k_decrypt:krb5-k-decrypt-decrypt-data-using-a-key-operates-on-opaque-key}}\label{\detokenize{appdev/refs/api/krb5_k_decrypt::doc}}\index{krb5\_k\_decrypt (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_decrypt:c.krb5_k_decrypt}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_decrypt}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ cipher\_state}, const {\hyperref[\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}]{\sphinxcrossref{krb5\_enc\_data}}} *\sphinxstyleemphasis{ input}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ output}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{cipher\_state} - Cipher state; specify NULL if not needed
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{input} - Encrypted data
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{output} - Decrypted data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function decrypts the data block \sphinxstyleemphasis{input} and stores the output into \sphinxstyleemphasis{output} . The actual decryption key will be derived from \sphinxstyleemphasis{key} and \sphinxstyleemphasis{usage} if key derivation is specified for the encryption type. If non-null, \sphinxstyleemphasis{cipher\_state} specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation.
-
-\begin{sphinxadmonition}{note}{Note:}
-The caller must initialize \sphinxstyleemphasis{output} and allocate at least enough space for the result. The usual practice is to allocate an output buffer as long as the ciphertext, and let {\hyperref[\detokenize{appdev/refs/api/krb5_c_decrypt:c.krb5_c_decrypt}]{\sphinxcrossref{\sphinxcode{krb5\_c\_decrypt()}}}} trim \sphinxstyleemphasis{output-\textgreater{}length} . For some enctypes, the resulting \sphinxstyleemphasis{output-\textgreater{}length} may include padding bytes.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_k\_decrypt\_iov - Decrypt data in place supporting AEAD (operates on opaque key).}
-\label{\detokenize{appdev/refs/api/krb5_k_decrypt_iov::doc}}\label{\detokenize{appdev/refs/api/krb5_k_decrypt_iov:krb5-k-decrypt-iov-decrypt-data-in-place-supporting-aead-operates-on-opaque-key}}\index{krb5\_k\_decrypt\_iov (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_decrypt_iov:c.krb5_k_decrypt_iov}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_decrypt\_iov}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ cipher\_state}, {\hyperref[\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov}]{\sphinxcrossref{krb5\_crypto\_iov}}} *\sphinxstyleemphasis{ data}, size\_t\sphinxstyleemphasis{ num\_data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cipher\_state} - Cipher state; specify NULL if not needed
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{data} - IOV array. Modified in-place.
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{num\_data} - Size of \sphinxstyleemphasis{data}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function decrypts the data block \sphinxstyleemphasis{data} and stores the output in-place. The actual decryption key will be derived from \sphinxstyleemphasis{key} and \sphinxstyleemphasis{usage} if key derivation is specified for the encryption type. If non-null, \sphinxstyleemphasis{cipher\_state} specifies the beginning state for the decryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5\_crypto\_iov structures before calling into this API.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_k_encrypt_iov:c.krb5_k_encrypt_iov}]{\sphinxcrossref{\sphinxcode{krb5\_k\_encrypt\_iov()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-On return from a {\hyperref[\detokenize{appdev/refs/api/krb5_c_decrypt_iov:c.krb5_c_decrypt_iov}]{\sphinxcrossref{\sphinxcode{krb5\_c\_decrypt\_iov()}}}} call, the \sphinxstyleemphasis{data-\textgreater{}length} in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_k\_encrypt - Encrypt data using a key (operates on opaque key).}
-\label{\detokenize{appdev/refs/api/krb5_k_encrypt:krb5-k-encrypt-encrypt-data-using-a-key-operates-on-opaque-key}}\label{\detokenize{appdev/refs/api/krb5_k_encrypt::doc}}\index{krb5\_k\_encrypt (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_encrypt:c.krb5_k_encrypt}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_encrypt}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ cipher\_state}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ input}, {\hyperref[\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}]{\sphinxcrossref{krb5\_enc\_data}}} *\sphinxstyleemphasis{ output}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{cipher\_state} - Cipher state; specify NULL if not needed
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{input} - Data to be encrypted
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{output} - Encrypted data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function encrypts the data block \sphinxstyleemphasis{input} and stores the output into \sphinxstyleemphasis{output} . The actual encryption key will be derived from \sphinxstyleemphasis{key} and \sphinxstyleemphasis{usage} if key derivation is specified for the encryption type. If non-null, \sphinxstyleemphasis{cipher\_state} specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation.
-
-\begin{sphinxadmonition}{note}{Note:}
-The caller must initialize \sphinxstyleemphasis{output} and allocate at least enough space for the result (using {\hyperref[\detokenize{appdev/refs/api/krb5_c_encrypt_length:c.krb5_c_encrypt_length}]{\sphinxcrossref{\sphinxcode{krb5\_c\_encrypt\_length()}}}} to determine the amount of space needed). \sphinxstyleemphasis{output-\textgreater{}length} will be set to the actual length of the ciphertext.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_k\_encrypt\_iov - Encrypt data in place supporting AEAD (operates on opaque key).}
-\label{\detokenize{appdev/refs/api/krb5_k_encrypt_iov::doc}}\label{\detokenize{appdev/refs/api/krb5_k_encrypt_iov:krb5-k-encrypt-iov-encrypt-data-in-place-supporting-aead-operates-on-opaque-key}}\index{krb5\_k\_encrypt\_iov (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_encrypt_iov:c.krb5_k_encrypt_iov}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_encrypt\_iov}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ cipher\_state}, {\hyperref[\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov}]{\sphinxcrossref{krb5\_crypto\_iov}}} *\sphinxstyleemphasis{ data}, size\_t\sphinxstyleemphasis{ num\_data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cipher\_state} - Cipher state; specify NULL if not needed
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{data} - IOV array. Modified in-place.
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{num\_data} - Size of \sphinxstyleemphasis{data}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function encrypts the data block \sphinxstyleemphasis{data} and stores the output in-place. The actual encryption key will be derived from \sphinxstyleemphasis{key} and \sphinxstyleemphasis{usage} if key derivation is specified for the encryption type. If non-null, \sphinxstyleemphasis{cipher\_state} specifies the beginning state for the encryption operation, and is updated with the state to be passed as input to the next operation. The caller must allocate the right number of krb5\_crypto\_iov structures before calling into this API.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_k_decrypt_iov:c.krb5_k_decrypt_iov}]{\sphinxcrossref{\sphinxcode{krb5\_k\_decrypt\_iov()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-On return from a {\hyperref[\detokenize{appdev/refs/api/krb5_c_encrypt_iov:c.krb5_c_encrypt_iov}]{\sphinxcrossref{\sphinxcode{krb5\_c\_encrypt\_iov()}}}} call, the \sphinxstyleemphasis{data-\textgreater{}length} in the iov structure are adjusted to reflect actual lengths of the ciphertext used. For example, if the padding length is too large, the length will be reduced. Lengths are never increased.
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_k\_free\_key - Decrement the reference count on a key and free it if it hits zero.}
-\label{\detokenize{appdev/refs/api/krb5_k_free_key:krb5-k-free-key-decrement-the-reference-count-on-a-key-and-free-it-if-it-hits-zero}}\label{\detokenize{appdev/refs/api/krb5_k_free_key::doc}}\index{krb5\_k\_free\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_free_key:c.krb5_k_free_key}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_k\_free\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{key}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_k\_key\_enctype - Retrieve the enctype of a krb5\_key structure.}
-\label{\detokenize{appdev/refs/api/krb5_k_key_enctype::doc}}\label{\detokenize{appdev/refs/api/krb5_k_key_enctype:krb5-k-key-enctype-retrieve-the-enctype-of-a-krb5-key-structure}}\index{krb5\_k\_key\_enctype (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_key_enctype:c.krb5_k_key_enctype}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} \sphinxbfcode{krb5\_k\_key\_enctype}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{key}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_k\_key\_keyblock - Retrieve a copy of the keyblock from a krb5\_key structure.}
-\label{\detokenize{appdev/refs/api/krb5_k_key_keyblock:krb5-k-key-keyblock-retrieve-a-copy-of-the-keyblock-from-a-krb5-key-structure}}\label{\detokenize{appdev/refs/api/krb5_k_key_keyblock::doc}}\index{krb5\_k\_key\_keyblock (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_key_keyblock:c.krb5_k_key_keyblock}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_key\_keyblock}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ key\_data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{key}
-
-\sphinxstylestrong{key\_data}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_k\_make\_checksum - Compute a checksum (operates on opaque key).}
-\label{\detokenize{appdev/refs/api/krb5_k_make_checksum::doc}}\label{\detokenize{appdev/refs/api/krb5_k_make_checksum:krb5-k-make-checksum-compute-a-checksum-operates-on-opaque-key}}\index{krb5\_k\_make\_checksum (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_make_checksum:c.krb5_k_make_checksum}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_make\_checksum}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ cksumtype}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ input}, {\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} *\sphinxstyleemphasis{ cksum}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksumtype} - Checksum type (0 for mandatory type)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key for a keyed checksum
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{input} - Input data
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{cksum} - Generated checksum
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function computes a checksum of type \sphinxstyleemphasis{cksumtype} over \sphinxstyleemphasis{input} , using \sphinxstyleemphasis{key} if the checksum type is a keyed checksum. If \sphinxstyleemphasis{cksumtype} is 0 and \sphinxstyleemphasis{key} is non-null, the checksum type will be the mandatory-to-implement checksum type for the key’s encryption type. The actual checksum key will be derived from \sphinxstyleemphasis{key} and \sphinxstyleemphasis{usage} if key derivation is specified for the checksum type. The newly created \sphinxstyleemphasis{cksum} must be released by calling {\hyperref[\detokenize{appdev/refs/api/krb5_free_checksum_contents:c.krb5_free_checksum_contents}]{\sphinxcrossref{\sphinxcode{krb5\_free\_checksum\_contents()}}}} when it is no longer needed.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_c_verify_checksum:c.krb5_c_verify_checksum}]{\sphinxcrossref{\sphinxcode{krb5\_c\_verify\_checksum()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_c_make_checksum:c.krb5_c_make_checksum}]{\sphinxcrossref{\sphinxcode{krb5\_c\_make\_checksum()}}}} , but operates on opaque \sphinxstyleemphasis{key} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_k\_make\_checksum\_iov - Fill in a checksum element in IOV array (operates on opaque key)}
-\label{\detokenize{appdev/refs/api/krb5_k_make_checksum_iov::doc}}\label{\detokenize{appdev/refs/api/krb5_k_make_checksum_iov:krb5-k-make-checksum-iov-fill-in-a-checksum-element-in-iov-array-operates-on-opaque-key}}\index{krb5\_k\_make\_checksum\_iov (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_make_checksum_iov:c.krb5_k_make_checksum_iov}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_make\_checksum\_iov}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ cksumtype}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, {\hyperref[\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov}]{\sphinxcrossref{krb5\_crypto\_iov}}} *\sphinxstyleemphasis{ data}, size\_t\sphinxstyleemphasis{ num\_data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksumtype} - Checksum type (0 for mandatory type)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key for a keyed checksum
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{data} - IOV array
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{num\_data} - Size of \sphinxstyleemphasis{data}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Create a checksum in the {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM:KRB5_CRYPTO_TYPE_CHECKSUM}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_CHECKSUM}}}} element over {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA:KRB5_CRYPTO_TYPE_DATA}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_DATA}}}} and {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY:KRB5_CRYPTO_TYPE_SIGN_ONLY}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_SIGN\_ONLY}}}} chunks in \sphinxstyleemphasis{data} . Only the {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM:KRB5_CRYPTO_TYPE_CHECKSUM}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_CHECKSUM}}}} region is modified.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_k_verify_checksum_iov:c.krb5_k_verify_checksum_iov}]{\sphinxcrossref{\sphinxcode{krb5\_k\_verify\_checksum\_iov()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_c_make_checksum_iov:c.krb5_c_make_checksum_iov}]{\sphinxcrossref{\sphinxcode{krb5\_c\_make\_checksum\_iov()}}}} , but operates on opaque \sphinxstyleemphasis{key} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_k\_prf - Generate enctype-specific pseudo-random bytes (operates on opaque key).}
-\label{\detokenize{appdev/refs/api/krb5_k_prf:krb5-k-prf-generate-enctype-specific-pseudo-random-bytes-operates-on-opaque-key}}\label{\detokenize{appdev/refs/api/krb5_k_prf::doc}}\index{krb5\_k\_prf (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_prf:c.krb5_k_prf}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_prf}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ input}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ output}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Key
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{input} - Input data
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{output} - Output data
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function selects a pseudo-random function based on \sphinxstyleemphasis{key} and computes its value over \sphinxstyleemphasis{input} , placing the result into \sphinxstyleemphasis{output} . The caller must preinitialize \sphinxstyleemphasis{output} and allocate space for the result.
-
-\begin{sphinxadmonition}{note}{Note:}
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_c_prf:c.krb5_c_prf}]{\sphinxcrossref{\sphinxcode{krb5\_c\_prf()}}}} , but operates on opaque \sphinxstyleemphasis{key} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_k\_reference\_key - Increment the reference count on a key.}
-\label{\detokenize{appdev/refs/api/krb5_k_reference_key::doc}}\label{\detokenize{appdev/refs/api/krb5_k_reference_key:krb5-k-reference-key-increment-the-reference-count-on-a-key}}\index{krb5\_k\_reference\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_reference_key:c.krb5_k_reference_key}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_k\_reference\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{key}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_k\_verify\_checksum - Verify a checksum (operates on opaque key).}
-\label{\detokenize{appdev/refs/api/krb5_k_verify_checksum::doc}}\label{\detokenize{appdev/refs/api/krb5_k_verify_checksum:krb5-k-verify-checksum-verify-a-checksum-operates-on-opaque-key}}\index{krb5\_k\_verify\_checksum (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_verify_checksum:c.krb5_k_verify_checksum}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_verify\_checksum}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}, const {\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} *\sphinxstyleemphasis{ cksum}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} *\sphinxstyleemphasis{ valid}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key for a keyed checksum
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - \sphinxstyleemphasis{key} usage
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - Data to be used to compute a new checksum using \sphinxstyleemphasis{key} to compare \sphinxstyleemphasis{cksum} against
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksum} - Checksum to be verified
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{valid} - Non-zero for success, zero for failure
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function verifies that \sphinxstyleemphasis{cksum} is a valid checksum for \sphinxstyleemphasis{data} . If the checksum type of \sphinxstyleemphasis{cksum} is a keyed checksum, \sphinxstyleemphasis{key} is used to verify the checksum. If the checksum type in \sphinxstyleemphasis{cksum} is 0 and \sphinxstyleemphasis{key} is not NULL, the mandatory checksum type for \sphinxstyleemphasis{key} will be used. The actual checksum key will be derived from \sphinxstyleemphasis{key} and \sphinxstyleemphasis{usage} if key derivation is specified for the checksum type.
-
-\begin{sphinxadmonition}{note}{Note:}
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_c_verify_checksum:c.krb5_c_verify_checksum}]{\sphinxcrossref{\sphinxcode{krb5\_c\_verify\_checksum()}}}} , but operates on opaque \sphinxstyleemphasis{key} .
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_k\_verify\_checksum\_iov - Validate a checksum element in IOV array (operates on opaque key).}
-\label{\detokenize{appdev/refs/api/krb5_k_verify_checksum_iov:krb5-k-verify-checksum-iov-validate-a-checksum-element-in-iov-array-operates-on-opaque-key}}\label{\detokenize{appdev/refs/api/krb5_k_verify_checksum_iov::doc}}\index{krb5\_k\_verify\_checksum\_iov (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_k_verify_checksum_iov:c.krb5_k_verify_checksum_iov}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_k\_verify\_checksum\_iov}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ cksumtype}, {\hyperref[\detokenize{appdev/refs/types/krb5_key:c.krb5_key}]{\sphinxcrossref{krb5\_key}}}\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}]{\sphinxcrossref{krb5\_keyusage}}}\sphinxstyleemphasis{ usage}, const {\hyperref[\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov}]{\sphinxcrossref{krb5\_crypto\_iov}}} *\sphinxstyleemphasis{ data}, size\_t\sphinxstyleemphasis{ num\_data}, {\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} *\sphinxstyleemphasis{ valid}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{cksumtype} - Checksum type (0 for mandatory type)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{key} - Encryption key for a keyed checksum
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{usage} - Key usage (see \sphinxcode{KRB5\_KEYUSAGE} types)
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{data} - IOV array
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{num\_data} - Size of \sphinxstyleemphasis{data}
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{valid} - Non-zero for success, zero for failure
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Confirm that the checksum in the {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM:KRB5_CRYPTO_TYPE_CHECKSUM}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_CHECKSUM}}}} element is a valid checksum of the {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA:KRB5_CRYPTO_TYPE_DATA}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_DATA}}}} and {\hyperref[\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY:KRB5_CRYPTO_TYPE_SIGN_ONLY}]{\sphinxcrossref{\sphinxcode{KRB5\_CRYPTO\_TYPE\_SIGN\_ONLY}}}} regions in the iov.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_k_make_checksum_iov:c.krb5_k_make_checksum_iov}]{\sphinxcrossref{\sphinxcode{krb5\_k\_make\_checksum\_iov()}}}}
-
-
-
-\begin{sphinxadmonition}{note}{Note:}
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_c_verify_checksum_iov:c.krb5_c_verify_checksum_iov}]{\sphinxcrossref{\sphinxcode{krb5\_c\_verify\_checksum\_iov()}}}} , but operates on opaque \sphinxstyleemphasis{key} .
-\end{sphinxadmonition}
-
-
-\subsection{Legacy convenience interfaces}
-\label{\detokenize{appdev/refs/api/index:legacy-convenience-interfaces}}
-
-\subsubsection{krb5\_recvauth - Server function for sendauth protocol.}
-\label{\detokenize{appdev/refs/api/krb5_recvauth::doc}}\label{\detokenize{appdev/refs/api/krb5_recvauth:krb5-recvauth-server-function-for-sendauth-protocol}}\index{krb5\_recvauth (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_recvauth:c.krb5_recvauth}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_recvauth}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}} *\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}}\sphinxstyleemphasis{ fd}, char *\sphinxstyleemphasis{ appl\_version}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ server}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}}\sphinxstyleemphasis{ flags}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}, {\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} **\sphinxstyleemphasis{ ticket}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{auth\_context} - Pre-existing or newly created auth context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fd} - File descriptor
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{appl\_version} - Application protocol version to be matched against the client’s application version
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Server principal (NULL for any in \sphinxstyleemphasis{keytab} )
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Additional specifications
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Key table containing service keys
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ticket} - Ticket (NULL if not needed)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function performs the server side of a sendauth/recvauth exchange by sending and receiving messages over \sphinxstyleemphasis{fd} .
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_ticket:c.krb5_free_ticket}]{\sphinxcrossref{\sphinxcode{krb5\_free\_ticket()}}}} to free \sphinxstyleemphasis{ticket} when it is no longer needed.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_sendauth:c.krb5_sendauth}]{\sphinxcrossref{\sphinxcode{krb5\_sendauth()}}}}
-
-
-
-
-\subsubsection{krb5\_recvauth\_version - Server function for sendauth protocol with version parameter.}
-\label{\detokenize{appdev/refs/api/krb5_recvauth_version::doc}}\label{\detokenize{appdev/refs/api/krb5_recvauth_version:krb5-recvauth-version-server-function-for-sendauth-protocol-with-version-parameter}}\index{krb5\_recvauth\_version (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_recvauth_version:c.krb5_recvauth_version}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_recvauth\_version}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}} *\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}}\sphinxstyleemphasis{ fd}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ server}, {\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}}\sphinxstyleemphasis{ flags}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ keytab}, {\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} **\sphinxstyleemphasis{ ticket}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ version}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{auth\_context} - Pre-existing or newly created auth context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fd} - File descriptor
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Server principal (NULL for any in \sphinxstyleemphasis{keytab} )
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{flags} - Additional specifications
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{keytab} - Decryption key
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{ticket} - Ticket (NULL if not needed)
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{version} - sendauth protocol version (NULL if not needed)
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function is similar to {\hyperref[\detokenize{appdev/refs/api/krb5_recvauth:c.krb5_recvauth}]{\sphinxcrossref{\sphinxcode{krb5\_recvauth()}}}} with the additional output information place into \sphinxstyleemphasis{version} .
-
-
-\subsubsection{krb5\_sendauth - Client function for sendauth protocol.}
-\label{\detokenize{appdev/refs/api/krb5_sendauth:krb5-sendauth-client-function-for-sendauth-protocol}}\label{\detokenize{appdev/refs/api/krb5_sendauth::doc}}\index{krb5\_sendauth (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_sendauth:c.krb5_sendauth}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_sendauth}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}} *\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}}\sphinxstyleemphasis{ fd}, char *\sphinxstyleemphasis{ appl\_version}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ client}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ server}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ ap\_req\_options}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ in\_data}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ in\_creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, {\hyperref[\detokenize{appdev/refs/types/krb5_error:c.krb5_error}]{\sphinxcrossref{krb5\_error}}} **\sphinxstyleemphasis{ error}, {\hyperref[\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:c.krb5_ap_rep_enc_part}]{\sphinxcrossref{krb5\_ap\_rep\_enc\_part}}} **\sphinxstyleemphasis{ rep\_result}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} **\sphinxstyleemphasis{ out\_creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}inout{]}} \sphinxstylestrong{auth\_context} - Pre-existing or newly created auth context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{fd} - File descriptor that describes network socket
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{appl\_version} - Application protocol version to be matched with the receiver’s application version
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{client} - Client principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{server} - Server principal
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ap\_req\_options} - \sphinxcode{AP\_OPTS} options
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_data} - Data to be sent to the server
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{in\_creds} - Input credentials, or NULL to use \sphinxstyleemphasis{ccache}
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{ccache} - Credential cache
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{error} - If non-null, contains KRB\_ERROR message returned from server
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{rep\_result} - If non-null and \sphinxstyleemphasis{ap\_req\_options} is {\hyperref[\detokenize{appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED:AP_OPTS_MUTUAL_REQUIRED}]{\sphinxcrossref{\sphinxcode{AP\_OPTS\_MUTUAL\_REQUIRED}}}} , contains the result of mutual authentication exchange
-
-\sphinxstylestrong{{[}out{]}} \sphinxstylestrong{out\_creds} - If non-null, the retrieved credentials
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-This function performs the client side of a sendauth/recvauth exchange by sending and receiving messages over \sphinxstyleemphasis{fd} .
-
-Credentials may be specified in three ways:
-\begin{quote}
-\begin{itemize}
-\item {}
-If \sphinxstyleemphasis{in\_creds} is NULL, credentials are obtained with {\hyperref[\detokenize{appdev/refs/api/krb5_get_credentials:c.krb5_get_credentials}]{\sphinxcrossref{\sphinxcode{krb5\_get\_credentials()}}}} using the principals \sphinxstyleemphasis{client} and \sphinxstyleemphasis{server} . \sphinxstyleemphasis{server} must be non-null; \sphinxstyleemphasis{client} may NULL to use the default principal of \sphinxstyleemphasis{ccache} .
-
-\item {}
-If \sphinxstyleemphasis{in\_creds} is non-null, but does not contain a ticket, credentials for the exchange are obtained with {\hyperref[\detokenize{appdev/refs/api/krb5_get_credentials:c.krb5_get_credentials}]{\sphinxcrossref{\sphinxcode{krb5\_get\_credentials()}}}} using \sphinxstyleemphasis{in\_creds} . In this case, the values of \sphinxstyleemphasis{client} and \sphinxstyleemphasis{server} are unused.
-
-\item {}
-If \sphinxstyleemphasis{in\_creds} is a complete credentials structure, it used directly. In this case, the values of \sphinxstyleemphasis{client} , \sphinxstyleemphasis{server} , and \sphinxstyleemphasis{ccache} are unused.
-
-\end{itemize}
-
-If the server is using a different application protocol than that specified in \sphinxstyleemphasis{appl\_version} , an error will be returned.
-\end{quote}
-
-Use {\hyperref[\detokenize{appdev/refs/api/krb5_free_creds:c.krb5_free_creds}]{\sphinxcrossref{\sphinxcode{krb5\_free\_creds()}}}} to free \sphinxstyleemphasis{out\_creds} , {\hyperref[\detokenize{appdev/refs/api/krb5_free_ap_rep_enc_part:c.krb5_free_ap_rep_enc_part}]{\sphinxcrossref{\sphinxcode{krb5\_free\_ap\_rep\_enc\_part()}}}} to free \sphinxstyleemphasis{rep\_result} , and {\hyperref[\detokenize{appdev/refs/api/krb5_free_error:c.krb5_free_error}]{\sphinxcrossref{\sphinxcode{krb5\_free\_error()}}}} to free \sphinxstyleemphasis{error} when they are no longer needed.
-
-
-\sphinxstrong{See also:}
-
-
-{\hyperref[\detokenize{appdev/refs/api/krb5_recvauth:c.krb5_recvauth}]{\sphinxcrossref{\sphinxcode{krb5\_recvauth()}}}}
-
-
-
-
-\subsection{Deprecated public interfaces}
-\label{\detokenize{appdev/refs/api/index:deprecated-public-interfaces}}
-
-\subsubsection{krb5\_524\_convert\_creds - Convert a Kerberos V5 credentials to a Kerberos V4 credentials.}
-\label{\detokenize{appdev/refs/api/krb5_524_convert_creds:krb5-524-convert-creds-convert-a-kerberos-v5-credentials-to-a-kerberos-v4-credentials}}\label{\detokenize{appdev/refs/api/krb5_524_convert_creds::doc}}\index{krb5\_524\_convert\_creds (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_524_convert_creds:c.krb5_524_convert_creds}}\pysiglinewithargsret{int \sphinxbfcode{krb5\_524\_convert\_creds}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ v5creds}, struct credentials *\sphinxstyleemphasis{ v4creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{v5creds}
-
-\sphinxstylestrong{v4creds}
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-KRB524\_KRB4\_DISABLED (always)
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-\begin{sphinxadmonition}{note}{Note:}
-Not implemented
-\end{sphinxadmonition}
-
-
-\subsubsection{krb5\_auth\_con\_getlocalsubkey}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getlocalsubkey::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getlocalsubkey:krb5-auth-con-getlocalsubkey}}\index{krb5\_auth\_con\_getlocalsubkey (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getlocalsubkey:c.krb5_auth_con_getlocalsubkey}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getlocalsubkey}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ keyblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{auth\_context}
-
-\sphinxstylestrong{keyblock}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_auth\_con\_getsendsubkey() .
-
-
-\subsubsection{krb5\_auth\_con\_getremotesubkey}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_getremotesubkey::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_getremotesubkey:krb5-auth-con-getremotesubkey}}\index{krb5\_auth\_con\_getremotesubkey (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_getremotesubkey:c.krb5_auth_con_getremotesubkey}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_getremotesubkey}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ keyblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{auth\_context}
-
-\sphinxstylestrong{keyblock}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_auth\_con\_getrecvsubkey() .
-
-
-\subsubsection{krb5\_auth\_con\_initivector - Cause an auth context to use cipher state.}
-\label{\detokenize{appdev/refs/api/krb5_auth_con_initivector::doc}}\label{\detokenize{appdev/refs/api/krb5_auth_con_initivector:krb5-auth-con-initivector-cause-an-auth-context-to-use-cipher-state}}\index{krb5\_auth\_con\_initivector (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_auth_con_initivector:c.krb5_auth_con_initivector}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_auth\_con\_initivector}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}]{\sphinxcrossref{krb5\_auth\_context}}}\sphinxstyleemphasis{ auth\_context}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{context} - Library context
-
-\sphinxstylestrong{{[}in{]}} \sphinxstylestrong{auth\_context} - Authentication context
-
-\end{description}\end{quote}
-\begin{quote}\begin{description}
-\item[{retval}] \leavevmode\begin{itemize}
-\item {}
-0 Success; otherwise - Kerberos error codes
-
-\end{itemize}
-
-\end{description}\end{quote}
-
-Prepare \sphinxstyleemphasis{auth\_context} to use cipher state when {\hyperref[\detokenize{appdev/refs/api/krb5_mk_priv:c.krb5_mk_priv}]{\sphinxcrossref{\sphinxcode{krb5\_mk\_priv()}}}} or {\hyperref[\detokenize{appdev/refs/api/krb5_rd_priv:c.krb5_rd_priv}]{\sphinxcrossref{\sphinxcode{krb5\_rd\_priv()}}}} encrypt or decrypt data.
-
-
-\subsubsection{krb5\_build\_principal\_va}
-\label{\detokenize{appdev/refs/api/krb5_build_principal_va:krb5-build-principal-va}}\label{\detokenize{appdev/refs/api/krb5_build_principal_va::doc}}\index{krb5\_build\_principal\_va (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_build_principal_va:c.krb5_build_principal_va}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_build\_principal\_va}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}}\sphinxstyleemphasis{ princ}, unsigned int\sphinxstyleemphasis{ rlen}, const char *\sphinxstyleemphasis{ realm}, va\_list\sphinxstyleemphasis{ ap}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{princ}
-
-\sphinxstylestrong{rlen}
-
-\sphinxstylestrong{realm}
-
-\sphinxstylestrong{ap}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_build\_principal\_alloc\_va() .
-
-
-\subsubsection{krb5\_c\_random\_seed}
-\label{\detokenize{appdev/refs/api/krb5_c_random_seed:krb5-c-random-seed}}\label{\detokenize{appdev/refs/api/krb5_c_random_seed::doc}}\index{krb5\_c\_random\_seed (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_c_random_seed:c.krb5_c_random_seed}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_c\_random\_seed}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{data}
-
-\end{description}\end{quote}
-
-DEPRECATED This call is no longer necessary.
-
-
-\subsubsection{krb5\_calculate\_checksum}
-\label{\detokenize{appdev/refs/api/krb5_calculate_checksum:krb5-calculate-checksum}}\label{\detokenize{appdev/refs/api/krb5_calculate_checksum::doc}}\index{krb5\_calculate\_checksum (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_calculate_checksum:c.krb5_calculate_checksum}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_calculate\_checksum}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ ctype}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_pointer:c.krb5_const_pointer}]{\sphinxcrossref{krb5\_const\_pointer}}}\sphinxstyleemphasis{ in}, size\_t\sphinxstyleemphasis{ in\_length}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_pointer:c.krb5_const_pointer}]{\sphinxcrossref{krb5\_const\_pointer}}}\sphinxstyleemphasis{ seed}, size\_t\sphinxstyleemphasis{ seed\_length}, {\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} *\sphinxstyleemphasis{ outcksum}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{ctype}
-
-\sphinxstylestrong{in}
-
-\sphinxstylestrong{in\_length}
-
-\sphinxstylestrong{seed}
-
-\sphinxstylestrong{seed\_length}
-
-\sphinxstylestrong{outcksum}
-
-\end{description}\end{quote}
-
-DEPRECATED See krb5\_c\_make\_checksum()
-
-
-\subsubsection{krb5\_checksum\_size}
-\label{\detokenize{appdev/refs/api/krb5_checksum_size:krb5-checksum-size}}\label{\detokenize{appdev/refs/api/krb5_checksum_size::doc}}\index{krb5\_checksum\_size (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_checksum_size:c.krb5_checksum_size}}\pysiglinewithargsret{size\_t \sphinxbfcode{krb5\_checksum\_size}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ ctype}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{ctype}
-
-\end{description}\end{quote}
-
-DEPRECATED See krb5\_c\_checksum\_length()
-
-
-\subsubsection{krb5\_encrypt}
-\label{\detokenize{appdev/refs/api/krb5_encrypt:krb5-encrypt}}\label{\detokenize{appdev/refs/api/krb5_encrypt::doc}}\index{krb5\_encrypt (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_encrypt:c.krb5_encrypt}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_encrypt}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_pointer:c.krb5_const_pointer}]{\sphinxcrossref{krb5\_const\_pointer}}}\sphinxstyleemphasis{ inptr}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}}\sphinxstyleemphasis{ outptr}, size\_t\sphinxstyleemphasis{ size}, {\hyperref[\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}]{\sphinxcrossref{krb5\_encrypt\_block}}} *\sphinxstyleemphasis{ eblock}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}}\sphinxstyleemphasis{ ivec}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{inptr}
-
-\sphinxstylestrong{outptr}
-
-\sphinxstylestrong{size}
-
-\sphinxstylestrong{eblock}
-
-\sphinxstylestrong{ivec}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_c\_* API family.
-
-
-\subsubsection{krb5\_decrypt}
-\label{\detokenize{appdev/refs/api/krb5_decrypt:krb5-decrypt}}\label{\detokenize{appdev/refs/api/krb5_decrypt::doc}}\index{krb5\_decrypt (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_decrypt:c.krb5_decrypt}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_decrypt}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_pointer:c.krb5_const_pointer}]{\sphinxcrossref{krb5\_const\_pointer}}}\sphinxstyleemphasis{ inptr}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}}\sphinxstyleemphasis{ outptr}, size\_t\sphinxstyleemphasis{ size}, {\hyperref[\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}]{\sphinxcrossref{krb5\_encrypt\_block}}} *\sphinxstyleemphasis{ eblock}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}}\sphinxstyleemphasis{ ivec}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{inptr}
-
-\sphinxstylestrong{outptr}
-
-\sphinxstylestrong{size}
-
-\sphinxstylestrong{eblock}
-
-\sphinxstylestrong{ivec}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_c\_* API family.
-
-
-\subsubsection{krb5\_eblock\_enctype}
-\label{\detokenize{appdev/refs/api/krb5_eblock_enctype::doc}}\label{\detokenize{appdev/refs/api/krb5_eblock_enctype:krb5-eblock-enctype}}\index{krb5\_eblock\_enctype (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_eblock_enctype:c.krb5_eblock_enctype}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} \sphinxbfcode{krb5\_eblock\_enctype}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}]{\sphinxcrossref{krb5\_encrypt\_block}}} *\sphinxstyleemphasis{ eblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{eblock}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_c\_* API family.
-
-
-\subsubsection{krb5\_encrypt\_size}
-\label{\detokenize{appdev/refs/api/krb5_encrypt_size:krb5-encrypt-size}}\label{\detokenize{appdev/refs/api/krb5_encrypt_size::doc}}\index{krb5\_encrypt\_size (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_encrypt_size:c.krb5_encrypt_size}}\pysiglinewithargsret{size\_t \sphinxbfcode{krb5\_encrypt\_size}}{size\_t\sphinxstyleemphasis{ length}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ crypto}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{length}
-
-\sphinxstylestrong{crypto}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_c\_* API family.
-
-
-\subsubsection{krb5\_finish\_key}
-\label{\detokenize{appdev/refs/api/krb5_finish_key:krb5-finish-key}}\label{\detokenize{appdev/refs/api/krb5_finish_key::doc}}\index{krb5\_finish\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_finish_key:c.krb5_finish_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_finish\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}]{\sphinxcrossref{krb5\_encrypt\_block}}} *\sphinxstyleemphasis{ eblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{eblock}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_c\_* API family.
-
-
-\subsubsection{krb5\_finish\_random\_key}
-\label{\detokenize{appdev/refs/api/krb5_finish_random_key:krb5-finish-random-key}}\label{\detokenize{appdev/refs/api/krb5_finish_random_key::doc}}\index{krb5\_finish\_random\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_finish_random_key:c.krb5_finish_random_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_finish\_random\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}]{\sphinxcrossref{krb5\_encrypt\_block}}} *\sphinxstyleemphasis{ eblock}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}} *\sphinxstyleemphasis{ ptr}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{eblock}
-
-\sphinxstylestrong{ptr}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_c\_* API family.
-
-
-\subsubsection{krb5\_cc\_gen\_new}
-\label{\detokenize{appdev/refs/api/krb5_cc_gen_new:krb5-cc-gen-new}}\label{\detokenize{appdev/refs/api/krb5_cc_gen_new::doc}}\index{krb5\_cc\_gen\_new (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_cc_gen_new:c.krb5_cc_gen_new}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_cc\_gen\_new}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}} *\sphinxstyleemphasis{ cache}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{cache}
-
-\end{description}\end{quote}
-
-
-\subsubsection{krb5\_get\_credentials\_renew}
-\label{\detokenize{appdev/refs/api/krb5_get_credentials_renew:krb5-get-credentials-renew}}\label{\detokenize{appdev/refs/api/krb5_get_credentials_renew::doc}}\index{krb5\_get\_credentials\_renew (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_credentials_renew:c.krb5_get_credentials_renew}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_credentials\_renew}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ options}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ in\_creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} **\sphinxstyleemphasis{ out\_creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{options}
-
-\sphinxstylestrong{ccache}
-
-\sphinxstylestrong{in\_creds}
-
-\sphinxstylestrong{out\_creds}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_get\_renewed\_creds.
-
-
-\subsubsection{krb5\_get\_credentials\_validate}
-\label{\detokenize{appdev/refs/api/krb5_get_credentials_validate:krb5-get-credentials-validate}}\label{\detokenize{appdev/refs/api/krb5_get_credentials_validate::doc}}\index{krb5\_get\_credentials\_validate (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_credentials_validate:c.krb5_get_credentials_validate}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_credentials\_validate}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ options}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ in\_creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} **\sphinxstyleemphasis{ out\_creds}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{options}
-
-\sphinxstylestrong{ccache}
-
-\sphinxstylestrong{in\_creds}
-
-\sphinxstylestrong{out\_creds}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_get\_validated\_creds.
-
-
-\subsubsection{krb5\_get\_in\_tkt\_with\_password}
-\label{\detokenize{appdev/refs/api/krb5_get_in_tkt_with_password:krb5-get-in-tkt-with-password}}\label{\detokenize{appdev/refs/api/krb5_get_in_tkt_with_password::doc}}\index{krb5\_get\_in\_tkt\_with\_password (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_in_tkt_with_password:c.krb5_get_in_tkt_with_password}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_in\_tkt\_with\_password}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ options}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *const *\sphinxstyleemphasis{ addrs}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} *\sphinxstyleemphasis{ ktypes}, {\hyperref[\detokenize{appdev/refs/types/krb5_preauthtype:c.krb5_preauthtype}]{\sphinxcrossref{krb5\_preauthtype}}} *\sphinxstyleemphasis{ pre\_auth\_types}, const char *\sphinxstyleemphasis{ password}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep}]{\sphinxcrossref{krb5\_kdc\_rep}}} **\sphinxstyleemphasis{ ret\_as\_reply}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{options}
-
-\sphinxstylestrong{addrs}
-
-\sphinxstylestrong{ktypes}
-
-\sphinxstylestrong{pre\_auth\_types}
-
-\sphinxstylestrong{password}
-
-\sphinxstylestrong{ccache}
-
-\sphinxstylestrong{creds}
-
-\sphinxstylestrong{ret\_as\_reply}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_get\_init\_creds\_password() .
-
-
-\subsubsection{krb5\_get\_in\_tkt\_with\_skey}
-\label{\detokenize{appdev/refs/api/krb5_get_in_tkt_with_skey:krb5-get-in-tkt-with-skey}}\label{\detokenize{appdev/refs/api/krb5_get_in_tkt_with_skey::doc}}\index{krb5\_get\_in\_tkt\_with\_skey (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_in_tkt_with_skey:c.krb5_get_in_tkt_with_skey}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_in\_tkt\_with\_skey}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ options}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *const *\sphinxstyleemphasis{ addrs}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} *\sphinxstyleemphasis{ ktypes}, {\hyperref[\detokenize{appdev/refs/types/krb5_preauthtype:c.krb5_preauthtype}]{\sphinxcrossref{krb5\_preauthtype}}} *\sphinxstyleemphasis{ pre\_auth\_types}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep}]{\sphinxcrossref{krb5\_kdc\_rep}}} **\sphinxstyleemphasis{ ret\_as\_reply}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{options}
-
-\sphinxstylestrong{addrs}
-
-\sphinxstylestrong{ktypes}
-
-\sphinxstylestrong{pre\_auth\_types}
-
-\sphinxstylestrong{key}
-
-\sphinxstylestrong{ccache}
-
-\sphinxstylestrong{creds}
-
-\sphinxstylestrong{ret\_as\_reply}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_get\_init\_creds().
-
-
-\subsubsection{krb5\_get\_in\_tkt\_with\_keytab}
-\label{\detokenize{appdev/refs/api/krb5_get_in_tkt_with_keytab:krb5-get-in-tkt-with-keytab}}\label{\detokenize{appdev/refs/api/krb5_get_in_tkt_with_keytab::doc}}\index{krb5\_get\_in\_tkt\_with\_keytab (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_in_tkt_with_keytab:c.krb5_get_in_tkt_with_keytab}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_get\_in\_tkt\_with\_keytab}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}}\sphinxstyleemphasis{ options}, {\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} *const *\sphinxstyleemphasis{ addrs}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} *\sphinxstyleemphasis{ ktypes}, {\hyperref[\detokenize{appdev/refs/types/krb5_preauthtype:c.krb5_preauthtype}]{\sphinxcrossref{krb5\_preauthtype}}} *\sphinxstyleemphasis{ pre\_auth\_types}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}]{\sphinxcrossref{krb5\_keytab}}}\sphinxstyleemphasis{ arg\_keytab}, {\hyperref[\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}]{\sphinxcrossref{krb5\_ccache}}}\sphinxstyleemphasis{ ccache}, {\hyperref[\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}]{\sphinxcrossref{krb5\_creds}}} *\sphinxstyleemphasis{ creds}, {\hyperref[\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep}]{\sphinxcrossref{krb5\_kdc\_rep}}} **\sphinxstyleemphasis{ ret\_as\_reply}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{options}
-
-\sphinxstylestrong{addrs}
-
-\sphinxstylestrong{ktypes}
-
-\sphinxstylestrong{pre\_auth\_types}
-
-\sphinxstylestrong{arg\_keytab}
-
-\sphinxstylestrong{ccache}
-
-\sphinxstylestrong{creds}
-
-\sphinxstylestrong{ret\_as\_reply}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_get\_init\_creds\_keytab() .
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt\_init}
-\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_init:krb5-get-init-creds-opt-init}}\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_init::doc}}\index{krb5\_get\_init\_creds\_opt\_init (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_get_init_creds_opt_init:c.krb5_get_init_creds_opt_init}}\pysiglinewithargsret{void \sphinxbfcode{krb5\_get\_init\_creds\_opt\_init}}{{\hyperref[\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}]{\sphinxcrossref{krb5\_get\_init\_creds\_opt}}} *\sphinxstyleemphasis{ opt}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{opt}
-
-\end{description}\end{quote}
-
-DEPRECATED Use krb5\_get\_init\_creds\_opt\_alloc() instead.
-
-
-\subsubsection{krb5\_init\_random\_key}
-\label{\detokenize{appdev/refs/api/krb5_init_random_key:krb5-init-random-key}}\label{\detokenize{appdev/refs/api/krb5_init_random_key::doc}}\index{krb5\_init\_random\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_init_random_key:c.krb5_init_random_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_init\_random\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}]{\sphinxcrossref{krb5\_encrypt\_block}}} *\sphinxstyleemphasis{ eblock}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ keyblock}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}} *\sphinxstyleemphasis{ ptr}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{eblock}
-
-\sphinxstylestrong{keyblock}
-
-\sphinxstylestrong{ptr}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_c\_* API family.
-
-
-\subsubsection{krb5\_kt\_free\_entry}
-\label{\detokenize{appdev/refs/api/krb5_kt_free_entry:krb5-kt-free-entry}}\label{\detokenize{appdev/refs/api/krb5_kt_free_entry::doc}}\index{krb5\_kt\_free\_entry (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_kt_free_entry:c.krb5_kt_free_entry}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_kt\_free\_entry}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry}]{\sphinxcrossref{krb5\_keytab\_entry}}} *\sphinxstyleemphasis{ entry}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{entry}
-
-\end{description}\end{quote}
-
-DEPRECATED Use krb5\_free\_keytab\_entry\_contents instead.
-
-
-\subsubsection{krb5\_random\_key}
-\label{\detokenize{appdev/refs/api/krb5_random_key:krb5-random-key}}\label{\detokenize{appdev/refs/api/krb5_random_key::doc}}\index{krb5\_random\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_random_key:c.krb5_random_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_random\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}]{\sphinxcrossref{krb5\_encrypt\_block}}} *\sphinxstyleemphasis{ eblock}, {\hyperref[\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}]{\sphinxcrossref{krb5\_pointer}}}\sphinxstyleemphasis{ ptr}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} **\sphinxstyleemphasis{ keyblock}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{eblock}
-
-\sphinxstylestrong{ptr}
-
-\sphinxstylestrong{keyblock}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_c\_* API family.
-
-
-\subsubsection{krb5\_process\_key}
-\label{\detokenize{appdev/refs/api/krb5_process_key:krb5-process-key}}\label{\detokenize{appdev/refs/api/krb5_process_key::doc}}\index{krb5\_process\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_process_key:c.krb5_process_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_process\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}]{\sphinxcrossref{krb5\_encrypt\_block}}} *\sphinxstyleemphasis{ eblock}, const {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ key}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{eblock}
-
-\sphinxstylestrong{key}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_c\_* API family.
-
-
-\subsubsection{krb5\_string\_to\_key}
-\label{\detokenize{appdev/refs/api/krb5_string_to_key:krb5-string-to-key}}\label{\detokenize{appdev/refs/api/krb5_string_to_key::doc}}\index{krb5\_string\_to\_key (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_string_to_key:c.krb5_string_to_key}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_string\_to\_key}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, const {\hyperref[\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}]{\sphinxcrossref{krb5\_encrypt\_block}}} *\sphinxstyleemphasis{ eblock}, {\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} *\sphinxstyleemphasis{ keyblock}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ data}, const {\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} *\sphinxstyleemphasis{ salt}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{eblock}
-
-\sphinxstylestrong{keyblock}
-
-\sphinxstylestrong{data}
-
-\sphinxstylestrong{salt}
-
-\end{description}\end{quote}
-
-DEPRECATED See krb5\_c\_string\_to\_key()
-
-
-\subsubsection{krb5\_use\_enctype}
-\label{\detokenize{appdev/refs/api/krb5_use_enctype:krb5-use-enctype}}\label{\detokenize{appdev/refs/api/krb5_use_enctype::doc}}\index{krb5\_use\_enctype (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_use_enctype:c.krb5_use_enctype}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_use\_enctype}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}]{\sphinxcrossref{krb5\_encrypt\_block}}} *\sphinxstyleemphasis{ eblock}, {\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}}\sphinxstyleemphasis{ enctype}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{eblock}
-
-\sphinxstylestrong{enctype}
-
-\end{description}\end{quote}
-
-DEPRECATED Replaced by krb5\_c\_* API family.
-
-
-\subsubsection{krb5\_verify\_checksum}
-\label{\detokenize{appdev/refs/api/krb5_verify_checksum::doc}}\label{\detokenize{appdev/refs/api/krb5_verify_checksum:krb5-verify-checksum}}\index{krb5\_verify\_checksum (C function)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/api/krb5_verify_checksum:c.krb5_verify_checksum}}\pysiglinewithargsret{{\hyperref[\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}]{\sphinxcrossref{krb5\_error\_code}}} \sphinxbfcode{krb5\_verify\_checksum}}{{\hyperref[\detokenize{appdev/refs/types/krb5_context:c.krb5_context}]{\sphinxcrossref{krb5\_context}}}\sphinxstyleemphasis{ context}, {\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}}\sphinxstyleemphasis{ ctype}, const {\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} *\sphinxstyleemphasis{ cksum}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_pointer:c.krb5_const_pointer}]{\sphinxcrossref{krb5\_const\_pointer}}}\sphinxstyleemphasis{ in}, size\_t\sphinxstyleemphasis{ in\_length}, {\hyperref[\detokenize{appdev/refs/types/krb5_const_pointer:c.krb5_const_pointer}]{\sphinxcrossref{krb5\_const\_pointer}}}\sphinxstyleemphasis{ seed}, size\_t\sphinxstyleemphasis{ seed\_length}}{}
-\end{fulllineitems}
-
-\begin{quote}\begin{description}
-\item[{param}] \leavevmode
-\sphinxstylestrong{context}
-
-\sphinxstylestrong{ctype}
-
-\sphinxstylestrong{cksum}
-
-\sphinxstylestrong{in}
-
-\sphinxstylestrong{in\_length}
-
-\sphinxstylestrong{seed}
-
-\sphinxstylestrong{seed\_length}
-
-\end{description}\end{quote}
-
-DEPRECATED See krb5\_c\_verify\_checksum()
-
-
-\section{krb5 types and structures}
-\label{\detokenize{appdev/refs/types/index::doc}}\label{\detokenize{appdev/refs/types/index:krb5-types-and-structures}}
-
-\subsection{Public}
-\label{\detokenize{appdev/refs/types/index:public}}
-
-\subsubsection{krb5\_address}
-\label{\detokenize{appdev/refs/types/krb5_address:krb5-address-struct}}\label{\detokenize{appdev/refs/types/krb5_address::doc}}\label{\detokenize{appdev/refs/types/krb5_address:krb5-address}}\index{krb5\_address (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_address:c.krb5_address}}\pysigline{\sphinxbfcode{krb5\_address}}
-\end{fulllineitems}
-
-
-Structure for address.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_address:declaration}}
-typedef struct \_krb5\_address krb5\_address
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_address:members}}\index{krb5\_address.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_address:c.krb5_address.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_address.magic}}
-\end{fulllineitems}
-
-\index{krb5\_address.addrtype (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_address:c.krb5_address.addrtype}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_addrtype:c.krb5_addrtype}]{\sphinxcrossref{krb5\_addrtype}}} \sphinxbfcode{krb5\_address.addrtype}}
-\end{fulllineitems}
-
-\index{krb5\_address.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_address:c.krb5_address.length}}\pysigline{unsigned int \sphinxbfcode{krb5\_address.length}}
-\end{fulllineitems}
-
-\index{krb5\_address.contents (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_address:c.krb5_address.contents}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_octet:c.krb5_octet}]{\sphinxcrossref{krb5\_octet}}} * \sphinxbfcode{krb5\_address.contents}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_addrtype}
-\label{\detokenize{appdev/refs/types/krb5_addrtype:krb5-addrtype}}\label{\detokenize{appdev/refs/types/krb5_addrtype:krb5-addrtype-struct}}\label{\detokenize{appdev/refs/types/krb5_addrtype::doc}}\index{krb5\_addrtype (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_addrtype:c.krb5_addrtype}}\pysigline{\sphinxbfcode{krb5\_addrtype}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_addrtype:declaration}}
-typedef krb5\_int32 krb5\_addrtype
-
-
-\subsubsection{krb5\_ap\_req}
-\label{\detokenize{appdev/refs/types/krb5_ap_req:krb5-ap-req}}\label{\detokenize{appdev/refs/types/krb5_ap_req::doc}}\label{\detokenize{appdev/refs/types/krb5_ap_req:krb5-ap-req-struct}}\index{krb5\_ap\_req (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_req:c.krb5_ap_req}}\pysigline{\sphinxbfcode{krb5\_ap\_req}}
-\end{fulllineitems}
-
-
-Authentication header.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_ap_req:declaration}}
-typedef struct \_krb5\_ap\_req krb5\_ap\_req
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_ap_req:members}}\index{krb5\_ap\_req.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_req:c.krb5_ap_req.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_ap\_req.magic}}
-\end{fulllineitems}
-
-\index{krb5\_ap\_req.ap\_options (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_req:c.krb5_ap_req.ap_options}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} \sphinxbfcode{krb5\_ap\_req.ap\_options}}
-Requested options.
-
-\end{fulllineitems}
-
-\index{krb5\_ap\_req.ticket (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_req:c.krb5_ap_req.ticket}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} * \sphinxbfcode{krb5\_ap\_req.ticket}}
-Ticket.
-
-\end{fulllineitems}
-
-\index{krb5\_ap\_req.authenticator (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_req:c.krb5_ap_req.authenticator}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}]{\sphinxcrossref{krb5\_enc\_data}}} \sphinxbfcode{krb5\_ap\_req.authenticator}}
-Encrypted authenticator.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_ap\_rep}
-\label{\detokenize{appdev/refs/types/krb5_ap_rep:krb5-ap-rep-struct}}\label{\detokenize{appdev/refs/types/krb5_ap_rep:krb5-ap-rep}}\label{\detokenize{appdev/refs/types/krb5_ap_rep::doc}}\index{krb5\_ap\_rep (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_rep:c.krb5_ap_rep}}\pysigline{\sphinxbfcode{krb5\_ap\_rep}}
-\end{fulllineitems}
-
-
-C representaton of AP-REP message.
-
-The server’s response to a client’s request for mutual authentication.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_ap_rep:declaration}}
-typedef struct \_krb5\_ap\_rep krb5\_ap\_rep
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_ap_rep:members}}\index{krb5\_ap\_rep.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_rep:c.krb5_ap_rep.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_ap\_rep.magic}}
-\end{fulllineitems}
-
-\index{krb5\_ap\_rep.enc\_part (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_rep:c.krb5_ap_rep.enc_part}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}]{\sphinxcrossref{krb5\_enc\_data}}} \sphinxbfcode{krb5\_ap\_rep.enc\_part}}
-Ciphertext of ApRepEncPart.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_ap\_rep\_enc\_part}
-\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:krb5-ap-rep-enc-part-struct}}\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part::doc}}\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:krb5-ap-rep-enc-part}}\index{krb5\_ap\_rep\_enc\_part (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:c.krb5_ap_rep_enc_part}}\pysigline{\sphinxbfcode{krb5\_ap\_rep\_enc\_part}}
-\end{fulllineitems}
-
-
-Cleartext that is encrypted and put into \sphinxcode{\_krb5\_ap\_rep} .
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:declaration}}
-typedef struct \_krb5\_ap\_rep\_enc\_part krb5\_ap\_rep\_enc\_part
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:members}}\index{krb5\_ap\_rep\_enc\_part.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:c.krb5_ap_rep_enc_part.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_ap\_rep\_enc\_part.magic}}
-\end{fulllineitems}
-
-\index{krb5\_ap\_rep\_enc\_part.ctime (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:c.krb5_ap_rep_enc_part.ctime}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_ap\_rep\_enc\_part.ctime}}
-Client time, seconds portion.
-
-\end{fulllineitems}
-
-\index{krb5\_ap\_rep\_enc\_part.cusec (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:c.krb5_ap_rep_enc_part.cusec}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_ap\_rep\_enc\_part.cusec}}
-Client time, microseconds portion.
-
-\end{fulllineitems}
-
-\index{krb5\_ap\_rep\_enc\_part.subkey (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:c.krb5_ap_rep_enc_part.subkey}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} * \sphinxbfcode{krb5\_ap\_rep\_enc\_part.subkey}}
-Subkey (optional)
-
-\end{fulllineitems}
-
-\index{krb5\_ap\_rep\_enc\_part.seq\_number (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ap_rep_enc_part:c.krb5_ap_rep_enc_part.seq_number}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ui_4:c.krb5_ui_4}]{\sphinxcrossref{krb5\_ui\_4}}} \sphinxbfcode{krb5\_ap\_rep\_enc\_part.seq\_number}}
-Sequence number.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_authdata}
-\label{\detokenize{appdev/refs/types/krb5_authdata:krb5-authdata}}\label{\detokenize{appdev/refs/types/krb5_authdata::doc}}\label{\detokenize{appdev/refs/types/krb5_authdata:krb5-authdata-struct}}\index{krb5\_authdata (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}}\pysigline{\sphinxbfcode{krb5\_authdata}}
-\end{fulllineitems}
-
-
-Structure for auth data.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_authdata:declaration}}
-typedef struct \_krb5\_authdata krb5\_authdata
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_authdata:members}}\index{krb5\_authdata.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_authdata.magic}}
-\end{fulllineitems}
-
-\index{krb5\_authdata.ad\_type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata.ad_type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_authdatatype:c.krb5_authdatatype}]{\sphinxcrossref{krb5\_authdatatype}}} \sphinxbfcode{krb5\_authdata.ad\_type}}
-ADTYPE.
-
-\end{fulllineitems}
-
-\index{krb5\_authdata.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata.length}}\pysigline{unsigned int \sphinxbfcode{krb5\_authdata.length}}
-Length of data.
-
-\end{fulllineitems}
-
-\index{krb5\_authdata.contents (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata.contents}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_octet:c.krb5_octet}]{\sphinxcrossref{krb5\_octet}}} * \sphinxbfcode{krb5\_authdata.contents}}
-Data.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_authdatatype}
-\label{\detokenize{appdev/refs/types/krb5_authdatatype:krb5-authdatatype-struct}}\label{\detokenize{appdev/refs/types/krb5_authdatatype::doc}}\label{\detokenize{appdev/refs/types/krb5_authdatatype:krb5-authdatatype}}\index{krb5\_authdatatype (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authdatatype:c.krb5_authdatatype}}\pysigline{\sphinxbfcode{krb5\_authdatatype}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_authdatatype:declaration}}
-typedef krb5\_int32 krb5\_authdatatype
-
-
-\subsubsection{krb5\_authenticator}
-\label{\detokenize{appdev/refs/types/krb5_authenticator:krb5-authenticator-struct}}\label{\detokenize{appdev/refs/types/krb5_authenticator:krb5-authenticator}}\label{\detokenize{appdev/refs/types/krb5_authenticator::doc}}\index{krb5\_authenticator (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator}}\pysigline{\sphinxbfcode{krb5\_authenticator}}
-\end{fulllineitems}
-
-
-Ticket authenticator.
-
-The C representation of an unencrypted authenticator.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_authenticator:declaration}}
-typedef struct \_krb5\_authenticator krb5\_authenticator
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_authenticator:members}}\index{krb5\_authenticator.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_authenticator.magic}}
-\end{fulllineitems}
-
-\index{krb5\_authenticator.client (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator.client}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_authenticator.client}}
-client name/realm
-
-\end{fulllineitems}
-
-\index{krb5\_authenticator.checksum (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator.checksum}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} * \sphinxbfcode{krb5\_authenticator.checksum}}
-checksum, includes type, optional
-
-\end{fulllineitems}
-
-\index{krb5\_authenticator.cusec (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator.cusec}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_authenticator.cusec}}
-client usec portion
-
-\end{fulllineitems}
-
-\index{krb5\_authenticator.ctime (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator.ctime}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_authenticator.ctime}}
-client sec portion
-
-\end{fulllineitems}
-
-\index{krb5\_authenticator.subkey (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator.subkey}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} * \sphinxbfcode{krb5\_authenticator.subkey}}
-true session key, optional
-
-\end{fulllineitems}
-
-\index{krb5\_authenticator.seq\_number (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator.seq_number}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ui_4:c.krb5_ui_4}]{\sphinxcrossref{krb5\_ui\_4}}} \sphinxbfcode{krb5\_authenticator.seq\_number}}
-sequence \#, optional
-
-\end{fulllineitems}
-
-\index{krb5\_authenticator.authorization\_data (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator.authorization_data}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ** \sphinxbfcode{krb5\_authenticator.authorization\_data}}
-authoriazation data
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_boolean}
-\label{\detokenize{appdev/refs/types/krb5_boolean:krb5-boolean-struct}}\label{\detokenize{appdev/refs/types/krb5_boolean::doc}}\label{\detokenize{appdev/refs/types/krb5_boolean:krb5-boolean}}\index{krb5\_boolean (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}}\pysigline{\sphinxbfcode{krb5\_boolean}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_boolean:declaration}}
-typedef unsigned int krb5\_boolean
-
-
-\subsubsection{krb5\_checksum}
-\label{\detokenize{appdev/refs/types/krb5_checksum::doc}}\label{\detokenize{appdev/refs/types/krb5_checksum:krb5-checksum}}\label{\detokenize{appdev/refs/types/krb5_checksum:krb5-checksum-struct}}\index{krb5\_checksum (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}}\pysigline{\sphinxbfcode{krb5\_checksum}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_checksum:declaration}}
-typedef struct \_krb5\_checksum krb5\_checksum
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_checksum:members}}\index{krb5\_checksum.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_checksum.magic}}
-\end{fulllineitems}
-
-\index{krb5\_checksum.checksum\_type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum.checksum_type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}]{\sphinxcrossref{krb5\_cksumtype}}} \sphinxbfcode{krb5\_checksum.checksum\_type}}
-\end{fulllineitems}
-
-\index{krb5\_checksum.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum.length}}\pysigline{unsigned int \sphinxbfcode{krb5\_checksum.length}}
-\end{fulllineitems}
-
-\index{krb5\_checksum.contents (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum.contents}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_octet:c.krb5_octet}]{\sphinxcrossref{krb5\_octet}}} * \sphinxbfcode{krb5\_checksum.contents}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_const\_pointer}
-\label{\detokenize{appdev/refs/types/krb5_const_pointer:krb5-const-pointer}}\label{\detokenize{appdev/refs/types/krb5_const_pointer::doc}}\label{\detokenize{appdev/refs/types/krb5_const_pointer:krb5-const-pointer-struct}}\index{krb5\_const\_pointer (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_const_pointer:c.krb5_const_pointer}}\pysigline{\sphinxbfcode{krb5\_const\_pointer}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_const_pointer:declaration}}
-typedef void const* krb5\_const\_pointer
-
-
-\subsubsection{krb5\_const\_principal}
-\label{\detokenize{appdev/refs/types/krb5_const_principal:krb5-const-principal-struct}}\label{\detokenize{appdev/refs/types/krb5_const_principal:krb5-const-principal}}\label{\detokenize{appdev/refs/types/krb5_const_principal::doc}}\index{krb5\_const\_principal (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal}}\pysigline{\sphinxbfcode{krb5\_const\_principal}}
-\end{fulllineitems}
-
-
-Constant version of {\hyperref[\detokenize{appdev/refs/types/krb5_principal_data:c.krb5_principal_data}]{\sphinxcrossref{\sphinxcode{krb5\_principal\_data}}}} .
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_const_principal:declaration}}
-typedef const krb5\_principal\_data* krb5\_const\_principal
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_const_principal:members}}\index{krb5\_const\_principal.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_const\_principal.magic}}
-\end{fulllineitems}
-
-\index{krb5\_const\_principal.realm (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal.realm}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_const\_principal.realm}}
-\end{fulllineitems}
-
-\index{krb5\_const\_principal.data (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal.data}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} * \sphinxbfcode{krb5\_const\_principal.data}}
-An array of strings.
-
-\end{fulllineitems}
-
-\index{krb5\_const\_principal.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal.length}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_const\_principal.length}}
-\end{fulllineitems}
-
-\index{krb5\_const\_principal.type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_const_principal:c.krb5_const_principal.type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_const\_principal.type}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_cred}
-\label{\detokenize{appdev/refs/types/krb5_cred:krb5-cred-struct}}\label{\detokenize{appdev/refs/types/krb5_cred::doc}}\label{\detokenize{appdev/refs/types/krb5_cred:krb5-cred}}\index{krb5\_cred (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred:c.krb5_cred}}\pysigline{\sphinxbfcode{krb5\_cred}}
-\end{fulllineitems}
-
-
-Credentials data structure.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_cred:declaration}}
-typedef struct \_krb5\_cred krb5\_cred
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_cred:members}}\index{krb5\_cred.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred:c.krb5_cred.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_cred.magic}}
-\end{fulllineitems}
-
-\index{krb5\_cred.tickets (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred:c.krb5_cred.tickets}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} ** \sphinxbfcode{krb5\_cred.tickets}}
-Tickets.
-
-\end{fulllineitems}
-
-\index{krb5\_cred.enc\_part (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred:c.krb5_cred.enc_part}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}]{\sphinxcrossref{krb5\_enc\_data}}} \sphinxbfcode{krb5\_cred.enc\_part}}
-Encrypted part.
-
-\end{fulllineitems}
-
-\index{krb5\_cred.enc\_part2 (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred:c.krb5_cred.enc_part2}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_cred_enc_part:c.krb5_cred_enc_part}]{\sphinxcrossref{krb5\_cred\_enc\_part}}} * \sphinxbfcode{krb5\_cred.enc\_part2}}
-Unencrypted version, if available.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_cred\_enc\_part}
-\label{\detokenize{appdev/refs/types/krb5_cred_enc_part::doc}}\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:krb5-cred-enc-part}}\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:krb5-cred-enc-part-struct}}\index{krb5\_cred\_enc\_part (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:c.krb5_cred_enc_part}}\pysigline{\sphinxbfcode{krb5\_cred\_enc\_part}}
-\end{fulllineitems}
-
-
-Cleartext credentials information.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:declaration}}
-typedef struct \_krb5\_cred\_enc\_part krb5\_cred\_enc\_part
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:members}}\index{krb5\_cred\_enc\_part.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:c.krb5_cred_enc_part.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_cred\_enc\_part.magic}}
-\end{fulllineitems}
-
-\index{krb5\_cred\_enc\_part.nonce (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:c.krb5_cred_enc_part.nonce}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_cred\_enc\_part.nonce}}
-Nonce (optional)
-
-\end{fulllineitems}
-
-\index{krb5\_cred\_enc\_part.timestamp (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:c.krb5_cred_enc_part.timestamp}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_cred\_enc\_part.timestamp}}
-Generation time, seconds portion.
-
-\end{fulllineitems}
-
-\index{krb5\_cred\_enc\_part.usec (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:c.krb5_cred_enc_part.usec}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_cred\_enc\_part.usec}}
-Generation time, microseconds portion.
-
-\end{fulllineitems}
-
-\index{krb5\_cred\_enc\_part.s\_address (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:c.krb5_cred_enc_part.s_address}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} * \sphinxbfcode{krb5\_cred\_enc\_part.s\_address}}
-Sender address (optional)
-
-\end{fulllineitems}
-
-\index{krb5\_cred\_enc\_part.r\_address (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:c.krb5_cred_enc_part.r_address}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} * \sphinxbfcode{krb5\_cred\_enc\_part.r\_address}}
-Recipient address (optional)
-
-\end{fulllineitems}
-
-\index{krb5\_cred\_enc\_part.ticket\_info (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_enc_part:c.krb5_cred_enc_part.ticket_info}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_cred_info:c.krb5_cred_info}]{\sphinxcrossref{krb5\_cred\_info}}} ** \sphinxbfcode{krb5\_cred\_enc\_part.ticket\_info}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_cred\_info}
-\label{\detokenize{appdev/refs/types/krb5_cred_info:krb5-cred-info-struct}}\label{\detokenize{appdev/refs/types/krb5_cred_info::doc}}\label{\detokenize{appdev/refs/types/krb5_cred_info:krb5-cred-info}}\index{krb5\_cred\_info (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_info:c.krb5_cred_info}}\pysigline{\sphinxbfcode{krb5\_cred\_info}}
-\end{fulllineitems}
-
-
-Credentials information inserted into \sphinxstyleemphasis{EncKrbCredPart} .
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_cred_info:declaration}}
-typedef struct \_krb5\_cred\_info krb5\_cred\_info
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_cred_info:members}}\index{krb5\_cred\_info.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_info:c.krb5_cred_info.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_cred\_info.magic}}
-\end{fulllineitems}
-
-\index{krb5\_cred\_info.session (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_info:c.krb5_cred_info.session}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} * \sphinxbfcode{krb5\_cred\_info.session}}
-Session key used to encrypt ticket.
-
-\end{fulllineitems}
-
-\index{krb5\_cred\_info.client (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_info:c.krb5_cred_info.client}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_cred\_info.client}}
-Client principal and realm.
-
-\end{fulllineitems}
-
-\index{krb5\_cred\_info.server (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_info:c.krb5_cred_info.server}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_cred\_info.server}}
-Server principal and realm.
-
-\end{fulllineitems}
-
-\index{krb5\_cred\_info.flags (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_info:c.krb5_cred_info.flags}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} \sphinxbfcode{krb5\_cred\_info.flags}}
-Ticket flags.
-
-\end{fulllineitems}
-
-\index{krb5\_cred\_info.times (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_info:c.krb5_cred_info.times}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times}]{\sphinxcrossref{krb5\_ticket\_times}}} \sphinxbfcode{krb5\_cred\_info.times}}
-Auth, start, end, renew\_till.
-
-\end{fulllineitems}
-
-\index{krb5\_cred\_info.caddrs (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cred_info:c.krb5_cred_info.caddrs}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} ** \sphinxbfcode{krb5\_cred\_info.caddrs}}
-Array of pointers to addrs (optional)
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_creds}
-\label{\detokenize{appdev/refs/types/krb5_creds::doc}}\label{\detokenize{appdev/refs/types/krb5_creds:krb5-creds}}\label{\detokenize{appdev/refs/types/krb5_creds:krb5-creds-struct}}\index{krb5\_creds (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds}}\pysigline{\sphinxbfcode{krb5\_creds}}
-\end{fulllineitems}
-
-
-Credentials structure including ticket, session key, and lifetime info.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_creds:declaration}}
-typedef struct \_krb5\_creds krb5\_creds
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_creds:members}}\index{krb5\_creds.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_creds.magic}}
-\end{fulllineitems}
-
-\index{krb5\_creds.client (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.client}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_creds.client}}
-client’s principal identifier
-
-\end{fulllineitems}
-
-\index{krb5\_creds.server (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.server}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_creds.server}}
-server’s principal identifier
-
-\end{fulllineitems}
-
-\index{krb5\_creds.keyblock (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.keyblock}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} \sphinxbfcode{krb5\_creds.keyblock}}
-session encryption key info
-
-\end{fulllineitems}
-
-\index{krb5\_creds.times (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.times}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times}]{\sphinxcrossref{krb5\_ticket\_times}}} \sphinxbfcode{krb5\_creds.times}}
-lifetime info
-
-\end{fulllineitems}
-
-\index{krb5\_creds.is\_skey (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.is_skey}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_creds.is\_skey}}
-true if ticket is encrypted in another ticket’s skey
-
-\end{fulllineitems}
-
-\index{krb5\_creds.ticket\_flags (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.ticket_flags}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} \sphinxbfcode{krb5\_creds.ticket\_flags}}
-flags in ticket
-
-\end{fulllineitems}
-
-\index{krb5\_creds.addresses (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.addresses}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} ** \sphinxbfcode{krb5\_creds.addresses}}
-addrs in ticket
-
-\end{fulllineitems}
-
-\index{krb5\_creds.ticket (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.ticket}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_creds.ticket}}
-ticket string itself
-
-\end{fulllineitems}
-
-\index{krb5\_creds.second\_ticket (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.second_ticket}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_creds.second\_ticket}}
-second ticket, if related to ticket (via DUPLICATE-SKEY or ENC-TKT-IN-SKEY)
-
-\end{fulllineitems}
-
-\index{krb5\_creds.authdata (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_creds:c.krb5_creds.authdata}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ** \sphinxbfcode{krb5\_creds.authdata}}
-authorization data
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_crypto\_iov}
-\label{\detokenize{appdev/refs/types/krb5_crypto_iov:krb5-crypto-iov}}\label{\detokenize{appdev/refs/types/krb5_crypto_iov::doc}}\label{\detokenize{appdev/refs/types/krb5_crypto_iov:krb5-crypto-iov-struct}}\index{krb5\_crypto\_iov (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov}}\pysigline{\sphinxbfcode{krb5\_crypto\_iov}}
-\end{fulllineitems}
-
-
-Structure to describe a region of text to be encrypted or decrypted.
-
-The \sphinxstyleemphasis{flags} member describes the type of the iov. The \sphinxstyleemphasis{data} member points to the memory that will be manipulated. All iov APIs take a pointer to the first element of an array of krb5\_crypto\_iov’s along with the size of that array. Buffer contents are manipulated in-place; data is overwritten. Callers must allocate the right number of krb5\_crypto\_iov structures before calling into an iov API.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_crypto_iov:declaration}}
-typedef struct \_krb5\_crypto\_iov krb5\_crypto\_iov
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_crypto_iov:members}}\index{krb5\_crypto\_iov.flags (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov.flags}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_cryptotype:c.krb5_cryptotype}]{\sphinxcrossref{krb5\_cryptotype}}} \sphinxbfcode{krb5\_crypto\_iov.flags}}
-\sphinxcode{KRB5\_CRYPTO\_TYPE} type of the iov
-
-\end{fulllineitems}
-
-\index{krb5\_crypto\_iov.data (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_crypto_iov:c.krb5_crypto_iov.data}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_crypto\_iov.data}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_cryptotype}
-\label{\detokenize{appdev/refs/types/krb5_cryptotype:krb5-cryptotype}}\label{\detokenize{appdev/refs/types/krb5_cryptotype::doc}}\label{\detokenize{appdev/refs/types/krb5_cryptotype:krb5-cryptotype-struct}}\index{krb5\_cryptotype (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cryptotype:c.krb5_cryptotype}}\pysigline{\sphinxbfcode{krb5\_cryptotype}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_cryptotype:declaration}}
-typedef krb5\_int32 krb5\_cryptotype
-
-
-\subsubsection{krb5\_data}
-\label{\detokenize{appdev/refs/types/krb5_data:krb5-data}}\label{\detokenize{appdev/refs/types/krb5_data::doc}}\label{\detokenize{appdev/refs/types/krb5_data:krb5-data-struct}}\index{krb5\_data (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_data:c.krb5_data}}\pysigline{\sphinxbfcode{krb5\_data}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_data:declaration}}
-typedef struct \_krb5\_data krb5\_data
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_data:members}}\index{krb5\_data.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_data:c.krb5_data.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_data.magic}}
-\end{fulllineitems}
-
-\index{krb5\_data.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_data:c.krb5_data.length}}\pysigline{unsigned int \sphinxbfcode{krb5\_data.length}}
-\end{fulllineitems}
-
-\index{krb5\_data.data (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_data:c.krb5_data.data}}\pysigline{char * \sphinxbfcode{krb5\_data.data}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_deltat}
-\label{\detokenize{appdev/refs/types/krb5_deltat:krb5-deltat}}\label{\detokenize{appdev/refs/types/krb5_deltat:krb5-deltat-struct}}\label{\detokenize{appdev/refs/types/krb5_deltat::doc}}\index{krb5\_deltat (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_deltat:c.krb5_deltat}}\pysigline{\sphinxbfcode{krb5\_deltat}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_deltat:declaration}}
-typedef krb5\_int32 krb5\_deltat
-
-
-\subsubsection{krb5\_enc\_data}
-\label{\detokenize{appdev/refs/types/krb5_enc_data::doc}}\label{\detokenize{appdev/refs/types/krb5_enc_data:krb5-enc-data}}\label{\detokenize{appdev/refs/types/krb5_enc_data:krb5-enc-data-struct}}\index{krb5\_enc\_data (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}}\pysigline{\sphinxbfcode{krb5\_enc\_data}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_enc_data:declaration}}
-typedef struct \_krb5\_enc\_data krb5\_enc\_data
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_enc_data:members}}\index{krb5\_enc\_data.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_enc\_data.magic}}
-\end{fulllineitems}
-
-\index{krb5\_enc\_data.enctype (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data.enctype}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} \sphinxbfcode{krb5\_enc\_data.enctype}}
-\end{fulllineitems}
-
-\index{krb5\_enc\_data.kvno (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data.kvno}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_kvno:c.krb5_kvno}]{\sphinxcrossref{krb5\_kvno}}} \sphinxbfcode{krb5\_enc\_data.kvno}}
-\end{fulllineitems}
-
-\index{krb5\_enc\_data.ciphertext (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data.ciphertext}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_enc\_data.ciphertext}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_enc\_kdc\_rep\_part}
-\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part::doc}}\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:krb5-enc-kdc-rep-part}}\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:krb5-enc-kdc-rep-part-struct}}\index{krb5\_enc\_kdc\_rep\_part (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part}}\pysigline{\sphinxbfcode{krb5\_enc\_kdc\_rep\_part}}
-\end{fulllineitems}
-
-
-C representation of \sphinxstyleemphasis{EncKDCRepPart} protocol message.
-
-This is the cleartext message that is encrypted and inserted in \sphinxstyleemphasis{KDC-REP} .
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:declaration}}
-typedef struct \_krb5\_enc\_kdc\_rep\_part krb5\_enc\_kdc\_rep\_part
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:members}}\index{krb5\_enc\_kdc\_rep\_part.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.magic}}
-\end{fulllineitems}
-
-\index{krb5\_enc\_kdc\_rep\_part.msg\_type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.msg_type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_msgtype:c.krb5_msgtype}]{\sphinxcrossref{krb5\_msgtype}}} \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.msg\_type}}
-krb5 message type
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_kdc\_rep\_part.session (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.session}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} * \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.session}}
-Session key.
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_kdc\_rep\_part.last\_req (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.last_req}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_last_req_entry:c.krb5_last_req_entry}]{\sphinxcrossref{krb5\_last\_req\_entry}}} ** \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.last\_req}}
-Array of pointers to entries.
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_kdc\_rep\_part.nonce (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.nonce}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.nonce}}
-Nonce from request.
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_kdc\_rep\_part.key\_exp (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.key_exp}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.key\_exp}}
-Expiration date.
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_kdc\_rep\_part.flags (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.flags}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.flags}}
-Ticket flags.
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_kdc\_rep\_part.times (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.times}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times}]{\sphinxcrossref{krb5\_ticket\_times}}} \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.times}}
-Lifetime info.
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_kdc\_rep\_part.server (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.server}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.server}}
-Server’s principal identifier.
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_kdc\_rep\_part.caddrs (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.caddrs}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} ** \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.caddrs}}
-Array of ptrs to addrs, optional.
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_kdc\_rep\_part.enc\_padata (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part.enc_padata}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_pa_data:c.krb5_pa_data}]{\sphinxcrossref{krb5\_pa\_data}}} ** \sphinxbfcode{krb5\_enc\_kdc\_rep\_part.enc\_padata}}
-Encrypted preauthentication data.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_enc\_tkt\_part}
-\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:krb5-enc-tkt-part}}\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part::doc}}\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:krb5-enc-tkt-part-struct}}\index{krb5\_enc\_tkt\_part (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part}}\pysigline{\sphinxbfcode{krb5\_enc\_tkt\_part}}
-\end{fulllineitems}
-
-
-Encrypted part of ticket.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:declaration}}
-typedef struct \_krb5\_enc\_tkt\_part krb5\_enc\_tkt\_part
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:members}}\index{krb5\_enc\_tkt\_part.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_enc\_tkt\_part.magic}}
-\end{fulllineitems}
-
-\index{krb5\_enc\_tkt\_part.flags (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part.flags}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} \sphinxbfcode{krb5\_enc\_tkt\_part.flags}}
-flags
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_tkt\_part.session (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part.session}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} * \sphinxbfcode{krb5\_enc\_tkt\_part.session}}
-session key: includes enctype
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_tkt\_part.client (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part.client}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_enc\_tkt\_part.client}}
-client name/realm
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_tkt\_part.transited (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part.transited}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_transited:c.krb5_transited}]{\sphinxcrossref{krb5\_transited}}} \sphinxbfcode{krb5\_enc\_tkt\_part.transited}}
-list of transited realms
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_tkt\_part.times (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part.times}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times}]{\sphinxcrossref{krb5\_ticket\_times}}} \sphinxbfcode{krb5\_enc\_tkt\_part.times}}
-auth, start, end, renew\_till
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_tkt\_part.caddrs (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part.caddrs}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} ** \sphinxbfcode{krb5\_enc\_tkt\_part.caddrs}}
-array of ptrs to addresses
-
-\end{fulllineitems}
-
-\index{krb5\_enc\_tkt\_part.authorization\_data (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part.authorization_data}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ** \sphinxbfcode{krb5\_enc\_tkt\_part.authorization\_data}}
-auth data
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_encrypt\_block}
-\label{\detokenize{appdev/refs/types/krb5_encrypt_block:krb5-encrypt-block}}\label{\detokenize{appdev/refs/types/krb5_encrypt_block:krb5-encrypt-block-struct}}\label{\detokenize{appdev/refs/types/krb5_encrypt_block::doc}}\index{krb5\_encrypt\_block (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block}}\pysigline{\sphinxbfcode{krb5\_encrypt\_block}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_encrypt_block:declaration}}
-typedef struct \_krb5\_encrypt\_block krb5\_encrypt\_block
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_encrypt_block:members}}\index{krb5\_encrypt\_block.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_encrypt\_block.magic}}
-\end{fulllineitems}
-
-\index{krb5\_encrypt\_block.crypto\_entry (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block.crypto_entry}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} \sphinxbfcode{krb5\_encrypt\_block.crypto\_entry}}
-\end{fulllineitems}
-
-\index{krb5\_encrypt\_block.key (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_encrypt_block:c.krb5_encrypt_block.key}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} * \sphinxbfcode{krb5\_encrypt\_block.key}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_enctype}
-\label{\detokenize{appdev/refs/types/krb5_enctype:krb5-enctype-struct}}\label{\detokenize{appdev/refs/types/krb5_enctype:krb5-enctype}}\label{\detokenize{appdev/refs/types/krb5_enctype::doc}}\index{krb5\_enctype (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}}\pysigline{\sphinxbfcode{krb5\_enctype}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_enctype:declaration}}
-typedef krb5\_int32 krb5\_enctype
-
-
-\subsubsection{krb5\_error}
-\label{\detokenize{appdev/refs/types/krb5_error:krb5-error-struct}}\label{\detokenize{appdev/refs/types/krb5_error:krb5-error}}\label{\detokenize{appdev/refs/types/krb5_error::doc}}\index{krb5\_error (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error}}\pysigline{\sphinxbfcode{krb5\_error}}
-\end{fulllineitems}
-
-
-Error message structure.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_error:declaration}}
-typedef struct \_krb5\_error krb5\_error
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_error:members}}\index{krb5\_error.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_error.magic}}
-\end{fulllineitems}
-
-\index{krb5\_error.ctime (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error.ctime}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_error.ctime}}
-Client sec portion; optional.
-
-\end{fulllineitems}
-
-\index{krb5\_error.cusec (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error.cusec}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_error.cusec}}
-Client usec portion; optional.
-
-\end{fulllineitems}
-
-\index{krb5\_error.susec (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error.susec}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_error.susec}}
-Server usec portion.
-
-\end{fulllineitems}
-
-\index{krb5\_error.stime (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error.stime}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_error.stime}}
-Server sec portion.
-
-\end{fulllineitems}
-
-\index{krb5\_error.error (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error.error}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ui_4:c.krb5_ui_4}]{\sphinxcrossref{krb5\_ui\_4}}} \sphinxbfcode{krb5\_error.error}}
-Error code (protocol error \#’s)
-
-\end{fulllineitems}
-
-\index{krb5\_error.client (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error.client}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_error.client}}
-Client principal and realm.
-
-\end{fulllineitems}
-
-\index{krb5\_error.server (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error.server}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_error.server}}
-Server principal and realm.
-
-\end{fulllineitems}
-
-\index{krb5\_error.text (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error.text}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_error.text}}
-Descriptive text.
-
-\end{fulllineitems}
-
-\index{krb5\_error.e\_data (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error:c.krb5_error.e_data}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_error.e\_data}}
-Additional error-describing data.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_error\_code}
-\label{\detokenize{appdev/refs/types/krb5_error_code:krb5-error-code}}\label{\detokenize{appdev/refs/types/krb5_error_code::doc}}\label{\detokenize{appdev/refs/types/krb5_error_code:krb5-error-code-struct}}\index{krb5\_error\_code (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_error_code:c.krb5_error_code}}\pysigline{\sphinxbfcode{krb5\_error\_code}}
-\end{fulllineitems}
-
-
-Used to convey an operation status.
-
-The value 0 indicates success; any other values are com\_err codes. Use {\hyperref[\detokenize{appdev/refs/api/krb5_get_error_message:c.krb5_get_error_message}]{\sphinxcrossref{\sphinxcode{krb5\_get\_error\_message()}}}} to obtain a string describing the error.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_error_code:declaration}}
-typedef krb5\_int32 krb5\_error\_code
-
-
-\subsubsection{krb5\_expire\_callback\_func}
-\label{\detokenize{appdev/refs/types/krb5_expire_callback_func:krb5-expire-callback-func}}\label{\detokenize{appdev/refs/types/krb5_expire_callback_func::doc}}\label{\detokenize{appdev/refs/types/krb5_expire_callback_func:krb5-expire-callback-func-struct}}\index{krb5\_expire\_callback\_func (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_expire_callback_func:c.krb5_expire_callback_func}}\pysigline{\sphinxbfcode{krb5\_expire\_callback\_func}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_expire_callback_func:declaration}}
-typedef void( * krb5\_expire\_callback\_func) (krb5\_context context, void *data, krb5\_timestamp password\_expiration, krb5\_timestamp account\_expiration, krb5\_boolean is\_last\_req)
-
-
-\subsubsection{krb5\_flags}
-\label{\detokenize{appdev/refs/types/krb5_flags:krb5-flags-struct}}\label{\detokenize{appdev/refs/types/krb5_flags:krb5-flags}}\label{\detokenize{appdev/refs/types/krb5_flags::doc}}\index{krb5\_flags (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}}\pysigline{\sphinxbfcode{krb5\_flags}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_flags:declaration}}
-typedef krb5\_int32 krb5\_flags
-
-
-\subsubsection{krb5\_get\_init\_creds\_opt}
-\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:krb5-get-init-creds-opt-struct}}\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt::doc}}\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:krb5-get-init-creds-opt}}\index{krb5\_get\_init\_creds\_opt (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt}}\pysigline{\sphinxbfcode{krb5\_get\_init\_creds\_opt}}
-\end{fulllineitems}
-
-
-Store options for \sphinxstyleemphasis{\_krb5\_get\_init\_creds} .
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:declaration}}
-typedef struct \_krb5\_get\_init\_creds\_opt krb5\_get\_init\_creds\_opt
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:members}}\index{krb5\_get\_init\_creds\_opt.flags (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.flags}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt.flags}}
-\end{fulllineitems}
-
-\index{krb5\_get\_init\_creds\_opt.tkt\_life (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.tkt_life}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_deltat:c.krb5_deltat}]{\sphinxcrossref{krb5\_deltat}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt.tkt\_life}}
-\end{fulllineitems}
-
-\index{krb5\_get\_init\_creds\_opt.renew\_life (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.renew_life}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_deltat:c.krb5_deltat}]{\sphinxcrossref{krb5\_deltat}}} \sphinxbfcode{krb5\_get\_init\_creds\_opt.renew\_life}}
-\end{fulllineitems}
-
-\index{krb5\_get\_init\_creds\_opt.forwardable (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.forwardable}}\pysigline{int \sphinxbfcode{krb5\_get\_init\_creds\_opt.forwardable}}
-\end{fulllineitems}
-
-\index{krb5\_get\_init\_creds\_opt.proxiable (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.proxiable}}\pysigline{int \sphinxbfcode{krb5\_get\_init\_creds\_opt.proxiable}}
-\end{fulllineitems}
-
-\index{krb5\_get\_init\_creds\_opt.etype\_list (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.etype_list}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} * \sphinxbfcode{krb5\_get\_init\_creds\_opt.etype\_list}}
-\end{fulllineitems}
-
-\index{krb5\_get\_init\_creds\_opt.etype\_list\_length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.etype_list_length}}\pysigline{int \sphinxbfcode{krb5\_get\_init\_creds\_opt.etype\_list\_length}}
-\end{fulllineitems}
-
-\index{krb5\_get\_init\_creds\_opt.address\_list (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.address_list}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} ** \sphinxbfcode{krb5\_get\_init\_creds\_opt.address\_list}}
-\end{fulllineitems}
-
-\index{krb5\_get\_init\_creds\_opt.preauth\_list (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.preauth_list}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_preauthtype:c.krb5_preauthtype}]{\sphinxcrossref{krb5\_preauthtype}}} * \sphinxbfcode{krb5\_get\_init\_creds\_opt.preauth\_list}}
-\end{fulllineitems}
-
-\index{krb5\_get\_init\_creds\_opt.preauth\_list\_length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.preauth_list_length}}\pysigline{int \sphinxbfcode{krb5\_get\_init\_creds\_opt.preauth\_list\_length}}
-\end{fulllineitems}
-
-\index{krb5\_get\_init\_creds\_opt.salt (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_get_init_creds_opt:c.krb5_get_init_creds_opt.salt}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} * \sphinxbfcode{krb5\_get\_init\_creds\_opt.salt}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_gic\_opt\_pa\_data}
-\label{\detokenize{appdev/refs/types/krb5_gic_opt_pa_data::doc}}\label{\detokenize{appdev/refs/types/krb5_gic_opt_pa_data:krb5-gic-opt-pa-data}}\label{\detokenize{appdev/refs/types/krb5_gic_opt_pa_data:krb5-gic-opt-pa-data-struct}}\index{krb5\_gic\_opt\_pa\_data (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_gic_opt_pa_data:c.krb5_gic_opt_pa_data}}\pysigline{\sphinxbfcode{krb5\_gic\_opt\_pa\_data}}
-\end{fulllineitems}
-
-
-Generic preauth option attribute/value pairs.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_gic_opt_pa_data:declaration}}
-typedef struct \_krb5\_gic\_opt\_pa\_data krb5\_gic\_opt\_pa\_data
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_gic_opt_pa_data:members}}\index{krb5\_gic\_opt\_pa\_data.attr (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_gic_opt_pa_data:c.krb5_gic_opt_pa_data.attr}}\pysigline{char * \sphinxbfcode{krb5\_gic\_opt\_pa\_data.attr}}
-\end{fulllineitems}
-
-\index{krb5\_gic\_opt\_pa\_data.value (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_gic_opt_pa_data:c.krb5_gic_opt_pa_data.value}}\pysigline{char * \sphinxbfcode{krb5\_gic\_opt\_pa\_data.value}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_int16}
-\label{\detokenize{appdev/refs/types/krb5_int16:krb5-int16-struct}}\label{\detokenize{appdev/refs/types/krb5_int16:krb5-int16}}\label{\detokenize{appdev/refs/types/krb5_int16::doc}}\index{krb5\_int16 (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_int16:c.krb5_int16}}\pysigline{\sphinxbfcode{krb5\_int16}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_int16:declaration}}
-typedef int16\_t krb5\_int16
-
-
-\subsubsection{krb5\_int32}
-\label{\detokenize{appdev/refs/types/krb5_int32:krb5-int32-struct}}\label{\detokenize{appdev/refs/types/krb5_int32::doc}}\label{\detokenize{appdev/refs/types/krb5_int32:krb5-int32}}\index{krb5\_int32 (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}}\pysigline{\sphinxbfcode{krb5\_int32}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_int32:declaration}}
-typedef int32\_t krb5\_int32
-
-
-\subsubsection{krb5\_kdc\_rep}
-\label{\detokenize{appdev/refs/types/krb5_kdc_rep::doc}}\label{\detokenize{appdev/refs/types/krb5_kdc_rep:krb5-kdc-rep}}\label{\detokenize{appdev/refs/types/krb5_kdc_rep:krb5-kdc-rep-struct}}\index{krb5\_kdc\_rep (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep}}\pysigline{\sphinxbfcode{krb5\_kdc\_rep}}
-\end{fulllineitems}
-
-
-Representation of the \sphinxstyleemphasis{KDC-REP} protocol message.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_kdc_rep:declaration}}
-typedef struct \_krb5\_kdc\_rep krb5\_kdc\_rep
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_kdc_rep:members}}\index{krb5\_kdc\_rep.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_kdc\_rep.magic}}
-\end{fulllineitems}
-
-\index{krb5\_kdc\_rep.msg\_type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep.msg_type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_msgtype:c.krb5_msgtype}]{\sphinxcrossref{krb5\_msgtype}}} \sphinxbfcode{krb5\_kdc\_rep.msg\_type}}
-KRB5\_AS\_REP or KRB5\_KDC\_REP.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_rep.padata (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep.padata}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_pa_data:c.krb5_pa_data}]{\sphinxcrossref{krb5\_pa\_data}}} ** \sphinxbfcode{krb5\_kdc\_rep.padata}}
-Preauthentication data from KDC.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_rep.client (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep.client}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_kdc\_rep.client}}
-Client principal and realm.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_rep.ticket (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep.ticket}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} * \sphinxbfcode{krb5\_kdc\_rep.ticket}}
-Ticket.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_rep.enc\_part (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep.enc_part}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}]{\sphinxcrossref{krb5\_enc\_data}}} \sphinxbfcode{krb5\_kdc\_rep.enc\_part}}
-Encrypted part of reply.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_rep.enc\_part2 (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_rep:c.krb5_kdc_rep.enc_part2}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enc_kdc_rep_part:c.krb5_enc_kdc_rep_part}]{\sphinxcrossref{krb5\_enc\_kdc\_rep\_part}}} * \sphinxbfcode{krb5\_kdc\_rep.enc\_part2}}
-Unencrypted version, if available.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_kdc\_req}
-\label{\detokenize{appdev/refs/types/krb5_kdc_req:krb5-kdc-req-struct}}\label{\detokenize{appdev/refs/types/krb5_kdc_req:krb5-kdc-req}}\label{\detokenize{appdev/refs/types/krb5_kdc_req::doc}}\index{krb5\_kdc\_req (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req}}\pysigline{\sphinxbfcode{krb5\_kdc\_req}}
-\end{fulllineitems}
-
-
-C representation of KDC-REQ protocol message, including KDC-REQ-BODY.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_kdc_req:declaration}}
-typedef struct \_krb5\_kdc\_req krb5\_kdc\_req
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_kdc_req:members}}\index{krb5\_kdc\_req.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_kdc\_req.magic}}
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.msg\_type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.msg_type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_msgtype:c.krb5_msgtype}]{\sphinxcrossref{krb5\_msgtype}}} \sphinxbfcode{krb5\_kdc\_req.msg\_type}}
-KRB5\_AS\_REQ or KRB5\_TGS\_REQ.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.padata (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.padata}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_pa_data:c.krb5_pa_data}]{\sphinxcrossref{krb5\_pa\_data}}} ** \sphinxbfcode{krb5\_kdc\_req.padata}}
-Preauthentication data.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.kdc\_options (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.kdc_options}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} \sphinxbfcode{krb5\_kdc\_req.kdc\_options}}
-Requested options.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.client (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.client}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_kdc\_req.client}}
-Client principal and realm.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.server (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.server}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_kdc\_req.server}}
-Server principal and realm.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.from (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.from}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_kdc\_req.from}}
-Requested start time.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.till (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.till}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_kdc\_req.till}}
-Requested end time.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.rtime (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.rtime}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_kdc\_req.rtime}}
-Requested renewable end time.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.nonce (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.nonce}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_kdc\_req.nonce}}
-Nonce to match request and response.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.nktypes (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.nktypes}}\pysigline{int \sphinxbfcode{krb5\_kdc\_req.nktypes}}
-Number of enctypes.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.ktype (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.ktype}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} * \sphinxbfcode{krb5\_kdc\_req.ktype}}
-Requested enctypes.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.addresses (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.addresses}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_address:c.krb5_address}]{\sphinxcrossref{krb5\_address}}} ** \sphinxbfcode{krb5\_kdc\_req.addresses}}
-Requested addresses (optional)
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.authorization\_data (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.authorization_data}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}]{\sphinxcrossref{krb5\_enc\_data}}} \sphinxbfcode{krb5\_kdc\_req.authorization\_data}}
-Encrypted authz data (optional)
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.unenc\_authdata (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.unenc_authdata}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_authdata:c.krb5_authdata}]{\sphinxcrossref{krb5\_authdata}}} ** \sphinxbfcode{krb5\_kdc\_req.unenc\_authdata}}
-Unencrypted authz data.
-
-\end{fulllineitems}
-
-\index{krb5\_kdc\_req.second\_ticket (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kdc_req:c.krb5_kdc_req.second_ticket}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} ** \sphinxbfcode{krb5\_kdc\_req.second\_ticket}}
-Second ticket array (optional)
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_keyblock}
-\label{\detokenize{appdev/refs/types/krb5_keyblock:krb5-keyblock}}\label{\detokenize{appdev/refs/types/krb5_keyblock::doc}}\label{\detokenize{appdev/refs/types/krb5_keyblock:krb5-keyblock-struct}}\index{krb5\_keyblock (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}}\pysigline{\sphinxbfcode{krb5\_keyblock}}
-\end{fulllineitems}
-
-
-Exposed contents of a key.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_keyblock:declaration}}
-typedef struct \_krb5\_keyblock krb5\_keyblock
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_keyblock:members}}\index{krb5\_keyblock.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_keyblock.magic}}
-\end{fulllineitems}
-
-\index{krb5\_keyblock.enctype (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock.enctype}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enctype:c.krb5_enctype}]{\sphinxcrossref{krb5\_enctype}}} \sphinxbfcode{krb5\_keyblock.enctype}}
-\end{fulllineitems}
-
-\index{krb5\_keyblock.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock.length}}\pysigline{unsigned int \sphinxbfcode{krb5\_keyblock.length}}
-\end{fulllineitems}
-
-\index{krb5\_keyblock.contents (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock.contents}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_octet:c.krb5_octet}]{\sphinxcrossref{krb5\_octet}}} * \sphinxbfcode{krb5\_keyblock.contents}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_keytab\_entry}
-\label{\detokenize{appdev/refs/types/krb5_keytab_entry:krb5-keytab-entry}}\label{\detokenize{appdev/refs/types/krb5_keytab_entry:krb5-keytab-entry-struct}}\label{\detokenize{appdev/refs/types/krb5_keytab_entry::doc}}\index{krb5\_keytab\_entry (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry}}\pysigline{\sphinxbfcode{krb5\_keytab\_entry}}
-\end{fulllineitems}
-
-
-A key table entry.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_keytab_entry:declaration}}
-typedef struct krb5\_keytab\_entry\_st krb5\_keytab\_entry
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_keytab_entry:members}}\index{krb5\_keytab\_entry.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_keytab\_entry.magic}}
-\end{fulllineitems}
-
-\index{krb5\_keytab\_entry.principal (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry.principal}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_keytab\_entry.principal}}
-Principal of this key.
-
-\end{fulllineitems}
-
-\index{krb5\_keytab\_entry.timestamp (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry.timestamp}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_keytab\_entry.timestamp}}
-Time entry written to keytable.
-
-\end{fulllineitems}
-
-\index{krb5\_keytab\_entry.vno (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry.vno}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_kvno:c.krb5_kvno}]{\sphinxcrossref{krb5\_kvno}}} \sphinxbfcode{krb5\_keytab\_entry.vno}}
-Key version number.
-
-\end{fulllineitems}
-
-\index{krb5\_keytab\_entry.key (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keytab_entry:c.krb5_keytab_entry.key}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_keyblock:c.krb5_keyblock}]{\sphinxcrossref{krb5\_keyblock}}} \sphinxbfcode{krb5\_keytab\_entry.key}}
-The secret key.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_keyusage}
-\label{\detokenize{appdev/refs/types/krb5_keyusage:krb5-keyusage}}\label{\detokenize{appdev/refs/types/krb5_keyusage::doc}}\label{\detokenize{appdev/refs/types/krb5_keyusage:krb5-keyusage-struct}}\index{krb5\_keyusage (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keyusage:c.krb5_keyusage}}\pysigline{\sphinxbfcode{krb5\_keyusage}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_keyusage:declaration}}
-typedef krb5\_int32 krb5\_keyusage
-
-
-\subsubsection{krb5\_kt\_cursor}
-\label{\detokenize{appdev/refs/types/krb5_kt_cursor:krb5-kt-cursor-struct}}\label{\detokenize{appdev/refs/types/krb5_kt_cursor::doc}}\label{\detokenize{appdev/refs/types/krb5_kt_cursor:krb5-kt-cursor}}\index{krb5\_kt\_cursor (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kt_cursor:c.krb5_kt_cursor}}\pysigline{\sphinxbfcode{krb5\_kt\_cursor}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_kt_cursor:declaration}}
-typedef krb5\_pointer krb5\_kt\_cursor
-
-
-\subsubsection{krb5\_kvno}
-\label{\detokenize{appdev/refs/types/krb5_kvno:krb5-kvno}}\label{\detokenize{appdev/refs/types/krb5_kvno::doc}}\label{\detokenize{appdev/refs/types/krb5_kvno:krb5-kvno-struct}}\index{krb5\_kvno (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_kvno:c.krb5_kvno}}\pysigline{\sphinxbfcode{krb5\_kvno}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_kvno:declaration}}
-typedef unsigned int krb5\_kvno
-
-
-\subsubsection{krb5\_last\_req\_entry}
-\label{\detokenize{appdev/refs/types/krb5_last_req_entry:krb5-last-req-entry}}\label{\detokenize{appdev/refs/types/krb5_last_req_entry::doc}}\label{\detokenize{appdev/refs/types/krb5_last_req_entry:krb5-last-req-entry-struct}}\index{krb5\_last\_req\_entry (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_last_req_entry:c.krb5_last_req_entry}}\pysigline{\sphinxbfcode{krb5\_last\_req\_entry}}
-\end{fulllineitems}
-
-
-Last request entry.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_last_req_entry:declaration}}
-typedef struct \_krb5\_last\_req\_entry krb5\_last\_req\_entry
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_last_req_entry:members}}\index{krb5\_last\_req\_entry.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_last_req_entry:c.krb5_last_req_entry.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_last\_req\_entry.magic}}
-\end{fulllineitems}
-
-\index{krb5\_last\_req\_entry.lr\_type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_last_req_entry:c.krb5_last_req_entry.lr_type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_last\_req\_entry.lr\_type}}
-LR type.
-
-\end{fulllineitems}
-
-\index{krb5\_last\_req\_entry.value (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_last_req_entry:c.krb5_last_req_entry.value}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_last\_req\_entry.value}}
-Timestamp.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_magic}
-\label{\detokenize{appdev/refs/types/krb5_magic:krb5-magic}}\label{\detokenize{appdev/refs/types/krb5_magic::doc}}\label{\detokenize{appdev/refs/types/krb5_magic:krb5-magic-struct}}\index{krb5\_magic (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}}\pysigline{\sphinxbfcode{krb5\_magic}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_magic:declaration}}
-typedef krb5\_error\_code krb5\_magic
-
-
-\subsubsection{krb5\_mk\_req\_checksum\_func}
-\label{\detokenize{appdev/refs/types/krb5_mk_req_checksum_func:krb5-mk-req-checksum-func-struct}}\label{\detokenize{appdev/refs/types/krb5_mk_req_checksum_func::doc}}\label{\detokenize{appdev/refs/types/krb5_mk_req_checksum_func:krb5-mk-req-checksum-func}}\index{krb5\_mk\_req\_checksum\_func (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_mk_req_checksum_func:c.krb5_mk_req_checksum_func}}\pysigline{\sphinxbfcode{krb5\_mk\_req\_checksum\_func}}
-\end{fulllineitems}
-
-
-Type of function used as a callback to generate checksum data for mk\_req.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_mk_req_checksum_func:declaration}}
-typedef krb5\_error\_code( * krb5\_mk\_req\_checksum\_func) (krb5\_context, krb5\_auth\_context, void *, krb5\_data **)
-
-
-\subsubsection{krb5\_msgtype}
-\label{\detokenize{appdev/refs/types/krb5_msgtype:krb5-msgtype}}\label{\detokenize{appdev/refs/types/krb5_msgtype::doc}}\label{\detokenize{appdev/refs/types/krb5_msgtype:krb5-msgtype-struct}}\index{krb5\_msgtype (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_msgtype:c.krb5_msgtype}}\pysigline{\sphinxbfcode{krb5\_msgtype}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_msgtype:declaration}}
-typedef unsigned int krb5\_msgtype
-
-
-\subsubsection{krb5\_octet}
-\label{\detokenize{appdev/refs/types/krb5_octet:krb5-octet-struct}}\label{\detokenize{appdev/refs/types/krb5_octet:krb5-octet}}\label{\detokenize{appdev/refs/types/krb5_octet::doc}}\index{krb5\_octet (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_octet:c.krb5_octet}}\pysigline{\sphinxbfcode{krb5\_octet}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_octet:declaration}}
-typedef uint8\_t krb5\_octet
-
-
-\subsubsection{krb5\_pa\_pac\_req}
-\label{\detokenize{appdev/refs/types/krb5_pa_pac_req:krb5-pa-pac-req-struct}}\label{\detokenize{appdev/refs/types/krb5_pa_pac_req::doc}}\label{\detokenize{appdev/refs/types/krb5_pa_pac_req:krb5-pa-pac-req}}\index{krb5\_pa\_pac\_req (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_pac_req:c.krb5_pa_pac_req}}\pysigline{\sphinxbfcode{krb5\_pa\_pac\_req}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_pa_pac_req:declaration}}
-typedef struct \_krb5\_pa\_pac\_req krb5\_pa\_pac\_req
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_pa_pac_req:members}}\index{krb5\_pa\_pac\_req.include\_pac (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_pac_req:c.krb5_pa_pac_req.include_pac}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_boolean:c.krb5_boolean}]{\sphinxcrossref{krb5\_boolean}}} \sphinxbfcode{krb5\_pa\_pac\_req.include\_pac}}
-TRUE if a PAC should be included in TGS-REP.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_pa\_server\_referral\_data}
-\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data:krb5-pa-server-referral-data-struct}}\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data::doc}}\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data:krb5-pa-server-referral-data}}\index{krb5\_pa\_server\_referral\_data (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data:c.krb5_pa_server_referral_data}}\pysigline{\sphinxbfcode{krb5\_pa\_server\_referral\_data}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data:declaration}}
-typedef struct \_krb5\_pa\_server\_referral\_data krb5\_pa\_server\_referral\_data
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data:members}}\index{krb5\_pa\_server\_referral\_data.referred\_realm (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data:c.krb5_pa_server_referral_data.referred_realm}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} * \sphinxbfcode{krb5\_pa\_server\_referral\_data.referred\_realm}}
-\end{fulllineitems}
-
-\index{krb5\_pa\_server\_referral\_data.true\_principal\_name (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data:c.krb5_pa_server_referral_data.true_principal_name}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_pa\_server\_referral\_data.true\_principal\_name}}
-\end{fulllineitems}
-
-\index{krb5\_pa\_server\_referral\_data.requested\_principal\_name (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data:c.krb5_pa_server_referral_data.requested_principal_name}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_pa\_server\_referral\_data.requested\_principal\_name}}
-\end{fulllineitems}
-
-\index{krb5\_pa\_server\_referral\_data.referral\_valid\_until (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data:c.krb5_pa_server_referral_data.referral_valid_until}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_pa\_server\_referral\_data.referral\_valid\_until}}
-\end{fulllineitems}
-
-\index{krb5\_pa\_server\_referral\_data.rep\_cksum (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_server_referral_data:c.krb5_pa_server_referral_data.rep_cksum}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_checksum:c.krb5_checksum}]{\sphinxcrossref{krb5\_checksum}}} \sphinxbfcode{krb5\_pa\_server\_referral\_data.rep\_cksum}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_pa\_svr\_referral\_data}
-\label{\detokenize{appdev/refs/types/krb5_pa_svr_referral_data:krb5-pa-svr-referral-data}}\label{\detokenize{appdev/refs/types/krb5_pa_svr_referral_data::doc}}\label{\detokenize{appdev/refs/types/krb5_pa_svr_referral_data:krb5-pa-svr-referral-data-struct}}\index{krb5\_pa\_svr\_referral\_data (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_svr_referral_data:c.krb5_pa_svr_referral_data}}\pysigline{\sphinxbfcode{krb5\_pa\_svr\_referral\_data}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_pa_svr_referral_data:declaration}}
-typedef struct \_krb5\_pa\_svr\_referral\_data krb5\_pa\_svr\_referral\_data
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_pa_svr_referral_data:members}}\index{krb5\_pa\_svr\_referral\_data.principal (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_svr_referral_data:c.krb5_pa_svr_referral_data.principal}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_pa\_svr\_referral\_data.principal}}
-Referred name, only realm is required.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_pa\_data}
-\label{\detokenize{appdev/refs/types/krb5_pa_data:krb5-pa-data}}\label{\detokenize{appdev/refs/types/krb5_pa_data:krb5-pa-data-struct}}\label{\detokenize{appdev/refs/types/krb5_pa_data::doc}}\index{krb5\_pa\_data (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_data:c.krb5_pa_data}}\pysigline{\sphinxbfcode{krb5\_pa\_data}}
-\end{fulllineitems}
-
-
-Pre-authentication data.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_pa_data:declaration}}
-typedef struct \_krb5\_pa\_data krb5\_pa\_data
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_pa_data:members}}\index{krb5\_pa\_data.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_data:c.krb5_pa_data.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_pa\_data.magic}}
-\end{fulllineitems}
-
-\index{krb5\_pa\_data.pa\_type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_data:c.krb5_pa_data.pa_type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_preauthtype:c.krb5_preauthtype}]{\sphinxcrossref{krb5\_preauthtype}}} \sphinxbfcode{krb5\_pa\_data.pa\_type}}
-Preauthentication data type.
-
-\end{fulllineitems}
-
-\index{krb5\_pa\_data.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_data:c.krb5_pa_data.length}}\pysigline{unsigned int \sphinxbfcode{krb5\_pa\_data.length}}
-Length of data.
-
-\end{fulllineitems}
-
-\index{krb5\_pa\_data.contents (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pa_data:c.krb5_pa_data.contents}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_octet:c.krb5_octet}]{\sphinxcrossref{krb5\_octet}}} * \sphinxbfcode{krb5\_pa\_data.contents}}
-Data.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_pointer}
-\label{\detokenize{appdev/refs/types/krb5_pointer:krb5-pointer-struct}}\label{\detokenize{appdev/refs/types/krb5_pointer:krb5-pointer}}\label{\detokenize{appdev/refs/types/krb5_pointer::doc}}\index{krb5\_pointer (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pointer:c.krb5_pointer}}\pysigline{\sphinxbfcode{krb5\_pointer}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_pointer:declaration}}
-typedef void* krb5\_pointer
-
-
-\subsubsection{krb5\_post\_recv\_fn}
-\label{\detokenize{appdev/refs/types/krb5_post_recv_fn:krb5-post-recv-fn}}\label{\detokenize{appdev/refs/types/krb5_post_recv_fn:krb5-post-recv-fn-struct}}\label{\detokenize{appdev/refs/types/krb5_post_recv_fn::doc}}\index{krb5\_post\_recv\_fn (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_post_recv_fn:c.krb5_post_recv_fn}}\pysigline{\sphinxbfcode{krb5\_post\_recv\_fn}}
-\end{fulllineitems}
-
-
-Hook function for inspecting or overriding KDC replies.
-
-If \sphinxstyleemphasis{code} is non-zero, KDC communication failed and \sphinxstyleemphasis{reply} should be ignored. The hook function may return \sphinxstyleemphasis{code} or a different error code, or may synthesize a reply by setting \sphinxstyleemphasis{new\_reply\_out} and return successfully.
-The hook function should use {\hyperref[\detokenize{appdev/refs/api/krb5_copy_data:c.krb5_copy_data}]{\sphinxcrossref{\sphinxcode{krb5\_copy\_data()}}}} to construct the value for \sphinxstyleemphasis{new\_reply\_out} , to ensure that it can be freed correctly by the library.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_post_recv_fn:declaration}}
-typedef krb5\_error\_code( * krb5\_post\_recv\_fn) (krb5\_context context, void *data, krb5\_error\_code code, const krb5\_data *realm, const krb5\_data *message, const krb5\_data *reply, krb5\_data **new\_reply\_out)
-
-
-\subsubsection{krb5\_pre\_send\_fn}
-\label{\detokenize{appdev/refs/types/krb5_pre_send_fn:krb5-pre-send-fn-struct}}\label{\detokenize{appdev/refs/types/krb5_pre_send_fn::doc}}\label{\detokenize{appdev/refs/types/krb5_pre_send_fn:krb5-pre-send-fn}}\index{krb5\_pre\_send\_fn (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pre_send_fn:c.krb5_pre_send_fn}}\pysigline{\sphinxbfcode{krb5\_pre\_send\_fn}}
-\end{fulllineitems}
-
-
-Hook function for inspecting or modifying messages sent to KDCs.
-
-If the hook function sets \sphinxstyleemphasis{new\_reply\_out} , \sphinxstyleemphasis{message} will not be sent to the KDC, and the given reply will used instead.
-If the hook function sets \sphinxstyleemphasis{new\_message\_out} , the given message will be sent to the KDC in place of \sphinxstyleemphasis{message} .
-If the hook function returns successfully without setting either output, \sphinxstyleemphasis{message} will be sent to the KDC normally.
-The hook function should use {\hyperref[\detokenize{appdev/refs/api/krb5_copy_data:c.krb5_copy_data}]{\sphinxcrossref{\sphinxcode{krb5\_copy\_data()}}}} to construct the value for \sphinxstyleemphasis{new\_message\_out} or \sphinxstyleemphasis{reply\_out} , to ensure that it can be freed correctly by the library.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_pre_send_fn:declaration}}
-typedef krb5\_error\_code( * krb5\_pre\_send\_fn) (krb5\_context context, void *data, const krb5\_data *realm, const krb5\_data *message, krb5\_data **new\_message\_out, krb5\_data **new\_reply\_out)
-
-
-\subsubsection{krb5\_preauthtype}
-\label{\detokenize{appdev/refs/types/krb5_preauthtype::doc}}\label{\detokenize{appdev/refs/types/krb5_preauthtype:krb5-preauthtype}}\label{\detokenize{appdev/refs/types/krb5_preauthtype:krb5-preauthtype-struct}}\index{krb5\_preauthtype (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_preauthtype:c.krb5_preauthtype}}\pysigline{\sphinxbfcode{krb5\_preauthtype}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_preauthtype:declaration}}
-typedef krb5\_int32 krb5\_preauthtype
-
-
-\subsubsection{krb5\_principal}
-\label{\detokenize{appdev/refs/types/krb5_principal:krb5-principal-struct}}\label{\detokenize{appdev/refs/types/krb5_principal:krb5-principal}}\label{\detokenize{appdev/refs/types/krb5_principal::doc}}\index{krb5\_principal (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}}\pysigline{\sphinxbfcode{krb5\_principal}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_principal:declaration}}
-typedef krb5\_principal\_data* krb5\_principal
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_principal:members}}\index{krb5\_principal.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_principal.magic}}
-\end{fulllineitems}
-
-\index{krb5\_principal.realm (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal.realm}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_principal.realm}}
-\end{fulllineitems}
-
-\index{krb5\_principal.data (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal.data}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} * \sphinxbfcode{krb5\_principal.data}}
-An array of strings.
-
-\end{fulllineitems}
-
-\index{krb5\_principal.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal.length}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_principal.length}}
-\end{fulllineitems}
-
-\index{krb5\_principal.type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal.type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_principal.type}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_principal\_data}
-\label{\detokenize{appdev/refs/types/krb5_principal_data:krb5-principal-data}}\label{\detokenize{appdev/refs/types/krb5_principal_data::doc}}\label{\detokenize{appdev/refs/types/krb5_principal_data:krb5-principal-data-struct}}\index{krb5\_principal\_data (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal_data:c.krb5_principal_data}}\pysigline{\sphinxbfcode{krb5\_principal\_data}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_principal_data:declaration}}
-typedef struct krb5\_principal\_data krb5\_principal\_data
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_principal_data:members}}\index{krb5\_principal\_data.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal_data:c.krb5_principal_data.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_principal\_data.magic}}
-\end{fulllineitems}
-
-\index{krb5\_principal\_data.realm (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal_data:c.krb5_principal_data.realm}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_principal\_data.realm}}
-\end{fulllineitems}
-
-\index{krb5\_principal\_data.data (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal_data:c.krb5_principal_data.data}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} * \sphinxbfcode{krb5\_principal\_data.data}}
-An array of strings.
-
-\end{fulllineitems}
-
-\index{krb5\_principal\_data.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal_data:c.krb5_principal_data.length}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_principal\_data.length}}
-\end{fulllineitems}
-
-\index{krb5\_principal\_data.type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_principal_data:c.krb5_principal_data.type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_principal\_data.type}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_prompt}
-\label{\detokenize{appdev/refs/types/krb5_prompt:krb5-prompt}}\label{\detokenize{appdev/refs/types/krb5_prompt::doc}}\label{\detokenize{appdev/refs/types/krb5_prompt:krb5-prompt-struct}}\index{krb5\_prompt (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_prompt:c.krb5_prompt}}\pysigline{\sphinxbfcode{krb5\_prompt}}
-\end{fulllineitems}
-
-
-Text for prompt used in prompter callback function.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_prompt:declaration}}
-typedef struct \_krb5\_prompt krb5\_prompt
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_prompt:members}}\index{krb5\_prompt.prompt (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_prompt:c.krb5_prompt.prompt}}\pysigline{char * \sphinxbfcode{krb5\_prompt.prompt}}
-The prompt to show to the user.
-
-\end{fulllineitems}
-
-\index{krb5\_prompt.hidden (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_prompt:c.krb5_prompt.hidden}}\pysigline{int \sphinxbfcode{krb5\_prompt.hidden}}
-Boolean; informative prompt or hidden (e.g.
-PIN)
-
-\end{fulllineitems}
-
-\index{krb5\_prompt.reply (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_prompt:c.krb5_prompt.reply}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} * \sphinxbfcode{krb5\_prompt.reply}}
-Must be allocated before call to prompt routine.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_prompt\_type}
-\label{\detokenize{appdev/refs/types/krb5_prompt_type:krb5-prompt-type-struct}}\label{\detokenize{appdev/refs/types/krb5_prompt_type:krb5-prompt-type}}\label{\detokenize{appdev/refs/types/krb5_prompt_type::doc}}\index{krb5\_prompt\_type (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_prompt_type:c.krb5_prompt_type}}\pysigline{\sphinxbfcode{krb5\_prompt\_type}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_prompt_type:declaration}}
-typedef krb5\_int32 krb5\_prompt\_type
-
-
-\subsubsection{krb5\_prompter\_fct}
-\label{\detokenize{appdev/refs/types/krb5_prompter_fct:krb5-prompter-fct-struct}}\label{\detokenize{appdev/refs/types/krb5_prompter_fct:krb5-prompter-fct}}\label{\detokenize{appdev/refs/types/krb5_prompter_fct::doc}}\index{krb5\_prompter\_fct (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_prompter_fct:c.krb5_prompter_fct}}\pysigline{\sphinxbfcode{krb5\_prompter\_fct}}
-\end{fulllineitems}
-
-
-Pointer to a prompter callback function.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_prompter_fct:declaration}}
-typedef krb5\_error\_code( * krb5\_prompter\_fct) (krb5\_context context, void *data, const char *name, const char *banner, int num\_prompts, krb5\_prompt prompts{[}{]})
-
-
-\subsubsection{krb5\_pwd\_data}
-\label{\detokenize{appdev/refs/types/krb5_pwd_data:krb5-pwd-data}}\label{\detokenize{appdev/refs/types/krb5_pwd_data::doc}}\label{\detokenize{appdev/refs/types/krb5_pwd_data:krb5-pwd-data-struct}}\index{krb5\_pwd\_data (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pwd_data:c.krb5_pwd_data}}\pysigline{\sphinxbfcode{krb5\_pwd\_data}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_pwd_data:declaration}}
-typedef struct \_krb5\_pwd\_data krb5\_pwd\_data
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_pwd_data:members}}\index{krb5\_pwd\_data.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pwd_data:c.krb5_pwd_data.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_pwd\_data.magic}}
-\end{fulllineitems}
-
-\index{krb5\_pwd\_data.sequence\_count (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pwd_data:c.krb5_pwd_data.sequence_count}}\pysigline{int \sphinxbfcode{krb5\_pwd\_data.sequence\_count}}
-\end{fulllineitems}
-
-\index{krb5\_pwd\_data.element (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pwd_data:c.krb5_pwd_data.element}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/passwd_phrase_element:c.passwd_phrase_element}]{\sphinxcrossref{passwd\_phrase\_element}}} ** \sphinxbfcode{krb5\_pwd\_data.element}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_responder\_context}
-\label{\detokenize{appdev/refs/types/krb5_responder_context:krb5-responder-context-struct}}\label{\detokenize{appdev/refs/types/krb5_responder_context::doc}}\label{\detokenize{appdev/refs/types/krb5_responder_context:krb5-responder-context}}\index{krb5\_responder\_context (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_context:c.krb5_responder_context}}\pysigline{\sphinxbfcode{krb5\_responder\_context}}
-\end{fulllineitems}
-
-
-A container for a set of preauthentication questions and answers.
-
-A responder context is supplied by the krb5 authentication system to a {\hyperref[\detokenize{appdev/refs/types/krb5_responder_fn:c.krb5_responder_fn}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_fn}}}} callback. It contains a list of questions and can receive answers. Questions contained in a responder context can be listed using {\hyperref[\detokenize{appdev/refs/api/krb5_responder_list_questions:c.krb5_responder_list_questions}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_list\_questions()}}}} , retrieved using {\hyperref[\detokenize{appdev/refs/api/krb5_responder_get_challenge:c.krb5_responder_get_challenge}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_get\_challenge()}}}} , or answered using {\hyperref[\detokenize{appdev/refs/api/krb5_responder_set_answer:c.krb5_responder_set_answer}]{\sphinxcrossref{\sphinxcode{krb5\_responder\_set\_answer()}}}} . The form of a question’s challenge and answer depend on the question name.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_responder_context:declaration}}
-typedef struct krb5\_responder\_context\_st* krb5\_responder\_context
-
-
-\subsubsection{krb5\_responder\_fn}
-\label{\detokenize{appdev/refs/types/krb5_responder_fn:krb5-responder-fn-struct}}\label{\detokenize{appdev/refs/types/krb5_responder_fn::doc}}\label{\detokenize{appdev/refs/types/krb5_responder_fn:krb5-responder-fn}}\index{krb5\_responder\_fn (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_fn:c.krb5_responder_fn}}\pysigline{\sphinxbfcode{krb5\_responder\_fn}}
-\end{fulllineitems}
-
-
-Responder function for an initial credential exchange.
-
-If a required question is unanswered, the prompter may be called.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_responder_fn:declaration}}
-typedef krb5\_error\_code( * krb5\_responder\_fn) (krb5\_context ctx, void *data, krb5\_responder\_context rctx)
-
-
-\subsubsection{krb5\_responder\_otp\_challenge}
-\label{\detokenize{appdev/refs/types/krb5_responder_otp_challenge:krb5-responder-otp-challenge}}\label{\detokenize{appdev/refs/types/krb5_responder_otp_challenge:krb5-responder-otp-challenge-struct}}\label{\detokenize{appdev/refs/types/krb5_responder_otp_challenge::doc}}\index{krb5\_responder\_otp\_challenge (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_challenge:c.krb5_responder_otp_challenge}}\pysigline{\sphinxbfcode{krb5\_responder\_otp\_challenge}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_responder_otp_challenge:declaration}}
-typedef struct \_krb5\_responder\_otp\_challenge krb5\_responder\_otp\_challenge
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_responder_otp_challenge:members}}\index{krb5\_responder\_otp\_challenge.service (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_challenge:c.krb5_responder_otp_challenge.service}}\pysigline{char * \sphinxbfcode{krb5\_responder\_otp\_challenge.service}}
-\end{fulllineitems}
-
-\index{krb5\_responder\_otp\_challenge.tokeninfo (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_challenge:c.krb5_responder_otp_challenge.tokeninfo}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:c.krb5_responder_otp_tokeninfo}]{\sphinxcrossref{krb5\_responder\_otp\_tokeninfo}}} ** \sphinxbfcode{krb5\_responder\_otp\_challenge.tokeninfo}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_responder\_otp\_tokeninfo}
-\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:krb5-responder-otp-tokeninfo}}\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:krb5-responder-otp-tokeninfo-struct}}\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo::doc}}\index{krb5\_responder\_otp\_tokeninfo (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:c.krb5_responder_otp_tokeninfo}}\pysigline{\sphinxbfcode{krb5\_responder\_otp\_tokeninfo}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:declaration}}
-typedef struct \_krb5\_responder\_otp\_tokeninfo krb5\_responder\_otp\_tokeninfo
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:members}}\index{krb5\_responder\_otp\_tokeninfo.flags (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:c.krb5_responder_otp_tokeninfo.flags}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} \sphinxbfcode{krb5\_responder\_otp\_tokeninfo.flags}}
-\end{fulllineitems}
-
-\index{krb5\_responder\_otp\_tokeninfo.format (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:c.krb5_responder_otp_tokeninfo.format}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_responder\_otp\_tokeninfo.format}}
-\end{fulllineitems}
-
-\index{krb5\_responder\_otp\_tokeninfo.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:c.krb5_responder_otp_tokeninfo.length}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_responder\_otp\_tokeninfo.length}}
-\end{fulllineitems}
-
-\index{krb5\_responder\_otp\_tokeninfo.vendor (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:c.krb5_responder_otp_tokeninfo.vendor}}\pysigline{char * \sphinxbfcode{krb5\_responder\_otp\_tokeninfo.vendor}}
-\end{fulllineitems}
-
-\index{krb5\_responder\_otp\_tokeninfo.challenge (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:c.krb5_responder_otp_tokeninfo.challenge}}\pysigline{char * \sphinxbfcode{krb5\_responder\_otp\_tokeninfo.challenge}}
-\end{fulllineitems}
-
-\index{krb5\_responder\_otp\_tokeninfo.token\_id (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:c.krb5_responder_otp_tokeninfo.token_id}}\pysigline{char * \sphinxbfcode{krb5\_responder\_otp\_tokeninfo.token\_id}}
-\end{fulllineitems}
-
-\index{krb5\_responder\_otp\_tokeninfo.alg\_id (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_otp_tokeninfo:c.krb5_responder_otp_tokeninfo.alg_id}}\pysigline{char * \sphinxbfcode{krb5\_responder\_otp\_tokeninfo.alg\_id}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_responder\_pkinit\_challenge}
-\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_challenge:krb5-responder-pkinit-challenge-struct}}\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_challenge::doc}}\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_challenge:krb5-responder-pkinit-challenge}}\index{krb5\_responder\_pkinit\_challenge (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_challenge:c.krb5_responder_pkinit_challenge}}\pysigline{\sphinxbfcode{krb5\_responder\_pkinit\_challenge}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_challenge:declaration}}
-typedef struct \_krb5\_responder\_pkinit\_challenge krb5\_responder\_pkinit\_challenge
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_challenge:members}}\index{krb5\_responder\_pkinit\_challenge.identities (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_challenge:c.krb5_responder_pkinit_challenge.identities}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_responder_pkinit_identity:c.krb5_responder_pkinit_identity}]{\sphinxcrossref{krb5\_responder\_pkinit\_identity}}} ** \sphinxbfcode{krb5\_responder\_pkinit\_challenge.identities}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_responder\_pkinit\_identity}
-\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_identity:krb5-responder-pkinit-identity}}\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_identity::doc}}\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_identity:krb5-responder-pkinit-identity-struct}}\index{krb5\_responder\_pkinit\_identity (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_identity:c.krb5_responder_pkinit_identity}}\pysigline{\sphinxbfcode{krb5\_responder\_pkinit\_identity}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_identity:declaration}}
-typedef struct \_krb5\_responder\_pkinit\_identity krb5\_responder\_pkinit\_identity
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_identity:members}}\index{krb5\_responder\_pkinit\_identity.identity (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_identity:c.krb5_responder_pkinit_identity.identity}}\pysigline{char * \sphinxbfcode{krb5\_responder\_pkinit\_identity.identity}}
-\end{fulllineitems}
-
-\index{krb5\_responder\_pkinit\_identity.token\_flags (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_responder_pkinit_identity:c.krb5_responder_pkinit_identity.token_flags}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_responder\_pkinit\_identity.token\_flags}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_response}
-\label{\detokenize{appdev/refs/types/krb5_response::doc}}\label{\detokenize{appdev/refs/types/krb5_response:krb5-response}}\label{\detokenize{appdev/refs/types/krb5_response:krb5-response-struct}}\index{krb5\_response (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_response:c.krb5_response}}\pysigline{\sphinxbfcode{krb5\_response}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_response:declaration}}
-typedef struct \_krb5\_response krb5\_response
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_response:members}}\index{krb5\_response.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_response:c.krb5_response.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_response.magic}}
-\end{fulllineitems}
-
-\index{krb5\_response.message\_type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_response:c.krb5_response.message_type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_octet:c.krb5_octet}]{\sphinxcrossref{krb5\_octet}}} \sphinxbfcode{krb5\_response.message\_type}}
-\end{fulllineitems}
-
-\index{krb5\_response.response (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_response:c.krb5_response.response}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_response.response}}
-\end{fulllineitems}
-
-\index{krb5\_response.expected\_nonce (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_response:c.krb5_response.expected_nonce}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_response.expected\_nonce}}
-\end{fulllineitems}
-
-\index{krb5\_response.request\_time (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_response:c.krb5_response.request_time}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_response.request\_time}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_replay\_data}
-\label{\detokenize{appdev/refs/types/krb5_replay_data:krb5-replay-data}}\label{\detokenize{appdev/refs/types/krb5_replay_data:krb5-replay-data-struct}}\label{\detokenize{appdev/refs/types/krb5_replay_data::doc}}\index{krb5\_replay\_data (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data}}\pysigline{\sphinxbfcode{krb5\_replay\_data}}
-\end{fulllineitems}
-
-
-Replay data.
-
-Sequence number and timestamp information output by {\hyperref[\detokenize{appdev/refs/api/krb5_rd_priv:c.krb5_rd_priv}]{\sphinxcrossref{\sphinxcode{krb5\_rd\_priv()}}}} and {\hyperref[\detokenize{appdev/refs/api/krb5_rd_safe:c.krb5_rd_safe}]{\sphinxcrossref{\sphinxcode{krb5\_rd\_safe()}}}} .
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_replay_data:declaration}}
-typedef struct krb5\_replay\_data krb5\_replay\_data
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_replay_data:members}}\index{krb5\_replay\_data.timestamp (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data.timestamp}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_replay\_data.timestamp}}
-Timestamp, seconds portion.
-
-\end{fulllineitems}
-
-\index{krb5\_replay\_data.usec (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data.usec}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_replay\_data.usec}}
-Timestamp, microseconds portion.
-
-\end{fulllineitems}
-
-\index{krb5\_replay\_data.seq (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_replay_data:c.krb5_replay_data.seq}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ui_4:c.krb5_ui_4}]{\sphinxcrossref{krb5\_ui\_4}}} \sphinxbfcode{krb5\_replay\_data.seq}}
-Sequence number.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_ticket}
-\label{\detokenize{appdev/refs/types/krb5_ticket:krb5-ticket}}\label{\detokenize{appdev/refs/types/krb5_ticket::doc}}\label{\detokenize{appdev/refs/types/krb5_ticket:krb5-ticket-struct}}\index{krb5\_ticket (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}}\pysigline{\sphinxbfcode{krb5\_ticket}}
-\end{fulllineitems}
-
-
-Ticket structure.
-
-The C representation of the ticket message, with a pointer to the C representation of the encrypted part.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_ticket:declaration}}
-typedef struct \_krb5\_ticket krb5\_ticket
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_ticket:members}}\index{krb5\_ticket.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_ticket.magic}}
-\end{fulllineitems}
-
-\index{krb5\_ticket.server (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket.server}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_principal:c.krb5_principal}]{\sphinxcrossref{krb5\_principal}}} \sphinxbfcode{krb5\_ticket.server}}
-server name/realm
-
-\end{fulllineitems}
-
-\index{krb5\_ticket.enc\_part (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket.enc_part}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enc_data:c.krb5_enc_data}]{\sphinxcrossref{krb5\_enc\_data}}} \sphinxbfcode{krb5\_ticket.enc\_part}}
-encryption type, kvno, encrypted encoding
-
-\end{fulllineitems}
-
-\index{krb5\_ticket.enc\_part2 (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket.enc_part2}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_enc_tkt_part:c.krb5_enc_tkt_part}]{\sphinxcrossref{krb5\_enc\_tkt\_part}}} * \sphinxbfcode{krb5\_ticket.enc\_part2}}
-ptr to decrypted version, if available
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_ticket\_times}
-\label{\detokenize{appdev/refs/types/krb5_ticket_times:krb5-ticket-times}}\label{\detokenize{appdev/refs/types/krb5_ticket_times:krb5-ticket-times-struct}}\label{\detokenize{appdev/refs/types/krb5_ticket_times::doc}}\index{krb5\_ticket\_times (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times}}\pysigline{\sphinxbfcode{krb5\_ticket\_times}}
-\end{fulllineitems}
-
-
-Ticket start time, end time, and renewal duration.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_ticket_times:declaration}}
-typedef struct \_krb5\_ticket\_times krb5\_ticket\_times
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_ticket_times:members}}\index{krb5\_ticket\_times.authtime (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times.authtime}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_ticket\_times.authtime}}
-Time at which KDC issued the initial ticket that corresponds to this ticket.
-
-\end{fulllineitems}
-
-\index{krb5\_ticket\_times.starttime (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times.starttime}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_ticket\_times.starttime}}
-optional in ticket, if not present, use \sphinxstyleemphasis{authtime}
-
-\end{fulllineitems}
-
-\index{krb5\_ticket\_times.endtime (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times.endtime}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_ticket\_times.endtime}}
-Ticket expiration time.
-
-\end{fulllineitems}
-
-\index{krb5\_ticket\_times.renew\_till (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ticket_times:c.krb5_ticket_times.renew_till}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}]{\sphinxcrossref{krb5\_timestamp}}} \sphinxbfcode{krb5\_ticket\_times.renew\_till}}
-Latest time at which renewal of ticket can be valid.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_timestamp}
-\label{\detokenize{appdev/refs/types/krb5_timestamp:krb5-timestamp-struct}}\label{\detokenize{appdev/refs/types/krb5_timestamp::doc}}\label{\detokenize{appdev/refs/types/krb5_timestamp:krb5-timestamp}}\index{krb5\_timestamp (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_timestamp:c.krb5_timestamp}}\pysigline{\sphinxbfcode{krb5\_timestamp}}
-\end{fulllineitems}
-
-
-Represents a timestamp in seconds since the POSIX epoch.
-
-This legacy type is used frequently in the ABI, but cannot represent timestamps after 2038 as a positive number. Code which uses this type should cast values of it to uint32\_t so that negative values are treated as timestamps between 2038 and 2106 on platforms with 64-bit time\_t.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_timestamp:declaration}}
-typedef krb5\_int32 krb5\_timestamp
-
-
-\subsubsection{krb5\_tkt\_authent}
-\label{\detokenize{appdev/refs/types/krb5_tkt_authent:krb5-tkt-authent}}\label{\detokenize{appdev/refs/types/krb5_tkt_authent:krb5-tkt-authent-struct}}\label{\detokenize{appdev/refs/types/krb5_tkt_authent::doc}}\index{krb5\_tkt\_authent (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_tkt_authent:c.krb5_tkt_authent}}\pysigline{\sphinxbfcode{krb5\_tkt\_authent}}
-\end{fulllineitems}
-
-
-Ticket authentication data.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_tkt_authent:declaration}}
-typedef struct \_krb5\_tkt\_authent krb5\_tkt\_authent
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_tkt_authent:members}}\index{krb5\_tkt\_authent.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_tkt_authent:c.krb5_tkt_authent.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_tkt\_authent.magic}}
-\end{fulllineitems}
-
-\index{krb5\_tkt\_authent.ticket (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_tkt_authent:c.krb5_tkt_authent.ticket}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_ticket:c.krb5_ticket}]{\sphinxcrossref{krb5\_ticket}}} * \sphinxbfcode{krb5\_tkt\_authent.ticket}}
-\end{fulllineitems}
-
-\index{krb5\_tkt\_authent.authenticator (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_tkt_authent:c.krb5_tkt_authent.authenticator}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_authenticator:c.krb5_authenticator}]{\sphinxcrossref{krb5\_authenticator}}} * \sphinxbfcode{krb5\_tkt\_authent.authenticator}}
-\end{fulllineitems}
-
-\index{krb5\_tkt\_authent.ap\_options (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_tkt_authent:c.krb5_tkt_authent.ap_options}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} \sphinxbfcode{krb5\_tkt\_authent.ap\_options}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_trace\_callback}
-\label{\detokenize{appdev/refs/types/krb5_trace_callback:krb5-trace-callback-struct}}\label{\detokenize{appdev/refs/types/krb5_trace_callback:krb5-trace-callback}}\label{\detokenize{appdev/refs/types/krb5_trace_callback::doc}}\index{krb5\_trace\_callback (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_trace_callback:c.krb5_trace_callback}}\pysigline{\sphinxbfcode{krb5\_trace\_callback}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_trace_callback:declaration}}
-typedef void( * krb5\_trace\_callback) (krb5\_context context, const krb5\_trace\_info *info, void *cb\_data)
-
-
-\subsubsection{krb5\_trace\_info}
-\label{\detokenize{appdev/refs/types/krb5_trace_info:krb5-trace-info-struct}}\label{\detokenize{appdev/refs/types/krb5_trace_info::doc}}\label{\detokenize{appdev/refs/types/krb5_trace_info:krb5-trace-info}}\index{krb5\_trace\_info (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_trace_info:c.krb5_trace_info}}\pysigline{\sphinxbfcode{krb5\_trace\_info}}
-\end{fulllineitems}
-
-
-A wrapper for passing information to a \sphinxstyleemphasis{krb5\_trace\_callback} .
-
-Currently, it only contains the formatted message as determined the the format string and arguments of the tracing macro, but it may be extended to contain more fields in the future.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_trace_info:declaration}}
-typedef struct \_krb5\_trace\_info krb5\_trace\_info
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_trace_info:members}}\index{krb5\_trace\_info.message (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_trace_info:c.krb5_trace_info.message}}\pysigline{const char * \sphinxbfcode{krb5\_trace\_info.message}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_transited}
-\label{\detokenize{appdev/refs/types/krb5_transited:krb5-transited-struct}}\label{\detokenize{appdev/refs/types/krb5_transited::doc}}\label{\detokenize{appdev/refs/types/krb5_transited:krb5-transited}}\index{krb5\_transited (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_transited:c.krb5_transited}}\pysigline{\sphinxbfcode{krb5\_transited}}
-\end{fulllineitems}
-
-
-Structure for transited encoding.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_transited:declaration}}
-typedef struct \_krb5\_transited krb5\_transited
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_transited:members}}\index{krb5\_transited.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_transited:c.krb5_transited.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_transited.magic}}
-\end{fulllineitems}
-
-\index{krb5\_transited.tr\_type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_transited:c.krb5_transited.tr_type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_octet:c.krb5_octet}]{\sphinxcrossref{krb5\_octet}}} \sphinxbfcode{krb5\_transited.tr\_type}}
-Transited encoding type.
-
-\end{fulllineitems}
-
-\index{krb5\_transited.tr\_contents (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_transited:c.krb5_transited.tr_contents}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} \sphinxbfcode{krb5\_transited.tr\_contents}}
-Contents.
-
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_typed\_data}
-\label{\detokenize{appdev/refs/types/krb5_typed_data:krb5-typed-data-struct}}\label{\detokenize{appdev/refs/types/krb5_typed_data::doc}}\label{\detokenize{appdev/refs/types/krb5_typed_data:krb5-typed-data}}\index{krb5\_typed\_data (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_typed_data:c.krb5_typed_data}}\pysigline{\sphinxbfcode{krb5\_typed\_data}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_typed_data:declaration}}
-typedef struct \_krb5\_typed\_data krb5\_typed\_data
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_typed_data:members}}\index{krb5\_typed\_data.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_typed_data:c.krb5_typed_data.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{krb5\_typed\_data.magic}}
-\end{fulllineitems}
-
-\index{krb5\_typed\_data.type (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_typed_data:c.krb5_typed_data.type}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_int32:c.krb5_int32}]{\sphinxcrossref{krb5\_int32}}} \sphinxbfcode{krb5\_typed\_data.type}}
-\end{fulllineitems}
-
-\index{krb5\_typed\_data.length (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_typed_data:c.krb5_typed_data.length}}\pysigline{unsigned int \sphinxbfcode{krb5\_typed\_data.length}}
-\end{fulllineitems}
-
-\index{krb5\_typed\_data.data (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_typed_data:c.krb5_typed_data.data}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_octet:c.krb5_octet}]{\sphinxcrossref{krb5\_octet}}} * \sphinxbfcode{krb5\_typed\_data.data}}
-\end{fulllineitems}
-
-
-
-\subsubsection{krb5\_ui\_2}
-\label{\detokenize{appdev/refs/types/krb5_ui_2:krb5-ui-2-struct}}\label{\detokenize{appdev/refs/types/krb5_ui_2::doc}}\label{\detokenize{appdev/refs/types/krb5_ui_2:krb5-ui-2}}\index{krb5\_ui\_2 (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ui_2:c.krb5_ui_2}}\pysigline{\sphinxbfcode{krb5\_ui\_2}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_ui_2:declaration}}
-typedef uint16\_t krb5\_ui\_2
-
-
-\subsubsection{krb5\_ui\_4}
-\label{\detokenize{appdev/refs/types/krb5_ui_4:krb5-ui-4}}\label{\detokenize{appdev/refs/types/krb5_ui_4:krb5-ui-4-struct}}\label{\detokenize{appdev/refs/types/krb5_ui_4::doc}}\index{krb5\_ui\_4 (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ui_4:c.krb5_ui_4}}\pysigline{\sphinxbfcode{krb5\_ui\_4}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_ui_4:declaration}}
-typedef uint32\_t krb5\_ui\_4
-
-
-\subsubsection{krb5\_verify\_init\_creds\_opt}
-\label{\detokenize{appdev/refs/types/krb5_verify_init_creds_opt:krb5-verify-init-creds-opt-struct}}\label{\detokenize{appdev/refs/types/krb5_verify_init_creds_opt::doc}}\label{\detokenize{appdev/refs/types/krb5_verify_init_creds_opt:krb5-verify-init-creds-opt}}\index{krb5\_verify\_init\_creds\_opt (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_verify_init_creds_opt:c.krb5_verify_init_creds_opt}}\pysigline{\sphinxbfcode{krb5\_verify\_init\_creds\_opt}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_verify_init_creds_opt:declaration}}
-typedef struct \_krb5\_verify\_init\_creds\_opt krb5\_verify\_init\_creds\_opt
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/krb5_verify_init_creds_opt:members}}\index{krb5\_verify\_init\_creds\_opt.flags (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_verify_init_creds_opt:c.krb5_verify_init_creds_opt.flags}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_flags:c.krb5_flags}]{\sphinxcrossref{krb5\_flags}}} \sphinxbfcode{krb5\_verify\_init\_creds\_opt.flags}}
-\end{fulllineitems}
-
-\index{krb5\_verify\_init\_creds\_opt.ap\_req\_nofail (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_verify_init_creds_opt:c.krb5_verify_init_creds_opt.ap_req_nofail}}\pysigline{int \sphinxbfcode{krb5\_verify\_init\_creds\_opt.ap\_req\_nofail}}
-boolean
-
-\end{fulllineitems}
-
-
-
-\subsubsection{passwd\_phrase\_element}
-\label{\detokenize{appdev/refs/types/passwd_phrase_element:passwd-phrase-element-struct}}\label{\detokenize{appdev/refs/types/passwd_phrase_element::doc}}\label{\detokenize{appdev/refs/types/passwd_phrase_element:passwd-phrase-element}}\index{passwd\_phrase\_element (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/passwd_phrase_element:c.passwd_phrase_element}}\pysigline{\sphinxbfcode{passwd\_phrase\_element}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/passwd_phrase_element:declaration}}
-typedef struct \_passwd\_phrase\_element passwd\_phrase\_element
-
-
-\paragraph{Members}
-\label{\detokenize{appdev/refs/types/passwd_phrase_element:members}}\index{passwd\_phrase\_element.magic (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/passwd_phrase_element:c.passwd_phrase_element.magic}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_magic:c.krb5_magic}]{\sphinxcrossref{krb5\_magic}}} \sphinxbfcode{passwd\_phrase\_element.magic}}
-\end{fulllineitems}
-
-\index{passwd\_phrase\_element.passwd (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/passwd_phrase_element:c.passwd_phrase_element.passwd}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} * \sphinxbfcode{passwd\_phrase\_element.passwd}}
-\end{fulllineitems}
-
-\index{passwd\_phrase\_element.phrase (C member)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/passwd_phrase_element:c.passwd_phrase_element.phrase}}\pysigline{{\hyperref[\detokenize{appdev/refs/types/krb5_data:c.krb5_data}]{\sphinxcrossref{krb5\_data}}} * \sphinxbfcode{passwd\_phrase\_element.phrase}}
-\end{fulllineitems}
-
-
-
-\subsection{Internal}
-\label{\detokenize{appdev/refs/types/index:internal}}
-
-\subsubsection{krb5\_auth\_context}
-\label{\detokenize{appdev/refs/types/krb5_auth_context:krb5-auth-context}}\label{\detokenize{appdev/refs/types/krb5_auth_context::doc}}\label{\detokenize{appdev/refs/types/krb5_auth_context:krb5-auth-context-struct}}\index{krb5\_auth\_context (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_auth_context:c.krb5_auth_context}}\pysigline{\sphinxbfcode{krb5\_auth\_context}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_auth_context:declaration}}
-typedef struct \_krb5\_auth\_context* krb5\_auth\_context
-
-
-\subsubsection{krb5\_cksumtype}
-\label{\detokenize{appdev/refs/types/krb5_cksumtype:krb5-cksumtype}}\label{\detokenize{appdev/refs/types/krb5_cksumtype:krb5-cksumtype-struct}}\label{\detokenize{appdev/refs/types/krb5_cksumtype::doc}}\index{krb5\_cksumtype (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cksumtype:c.krb5_cksumtype}}\pysigline{\sphinxbfcode{krb5\_cksumtype}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_cksumtype:declaration}}
-typedef krb5\_int32 krb5\_cksumtype
-
-
-\subsubsection{krb5\_context}
-\label{\detokenize{appdev/refs/types/krb5_context:krb5-context}}\label{\detokenize{appdev/refs/types/krb5_context:krb5-context-struct}}\label{\detokenize{appdev/refs/types/krb5_context::doc}}\index{krb5\_context (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_context:c.krb5_context}}\pysigline{\sphinxbfcode{krb5\_context}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_context:declaration}}
-typedef struct \_krb5\_context* krb5\_context
-
-
-\subsubsection{krb5\_cc\_cursor}
-\label{\detokenize{appdev/refs/types/krb5_cc_cursor:krb5-cc-cursor-struct}}\label{\detokenize{appdev/refs/types/krb5_cc_cursor:krb5-cc-cursor}}\label{\detokenize{appdev/refs/types/krb5_cc_cursor::doc}}\index{krb5\_cc\_cursor (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cc_cursor:c.krb5_cc_cursor}}\pysigline{\sphinxbfcode{krb5\_cc\_cursor}}
-\end{fulllineitems}
-
-
-Cursor for sequential lookup.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_cc_cursor:declaration}}
-typedef krb5\_pointer krb5\_cc\_cursor
-
-
-\subsubsection{krb5\_ccache}
-\label{\detokenize{appdev/refs/types/krb5_ccache:krb5-ccache-struct}}\label{\detokenize{appdev/refs/types/krb5_ccache::doc}}\label{\detokenize{appdev/refs/types/krb5_ccache:krb5-ccache}}\index{krb5\_ccache (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_ccache:c.krb5_ccache}}\pysigline{\sphinxbfcode{krb5\_ccache}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_ccache:declaration}}
-typedef struct \_krb5\_ccache* krb5\_ccache
-
-
-\subsubsection{krb5\_cccol\_cursor}
-\label{\detokenize{appdev/refs/types/krb5_cccol_cursor:krb5-cccol-cursor-struct}}\label{\detokenize{appdev/refs/types/krb5_cccol_cursor::doc}}\label{\detokenize{appdev/refs/types/krb5_cccol_cursor:krb5-cccol-cursor}}\index{krb5\_cccol\_cursor (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_cccol_cursor:c.krb5_cccol_cursor}}\pysigline{\sphinxbfcode{krb5\_cccol\_cursor}}
-\end{fulllineitems}
-
-
-Cursor for iterating over all ccaches.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_cccol_cursor:declaration}}
-typedef struct \_krb5\_cccol\_cursor* krb5\_cccol\_cursor
-
-
-\subsubsection{krb5\_init\_creds\_context}
-\label{\detokenize{appdev/refs/types/krb5_init_creds_context:krb5-init-creds-context}}\label{\detokenize{appdev/refs/types/krb5_init_creds_context::doc}}\label{\detokenize{appdev/refs/types/krb5_init_creds_context:krb5-init-creds-context-struct}}\index{krb5\_init\_creds\_context (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_init_creds_context:c.krb5_init_creds_context}}\pysigline{\sphinxbfcode{krb5\_init\_creds\_context}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_init_creds_context:declaration}}
-typedef struct \_krb5\_init\_creds\_context* krb5\_init\_creds\_context
-
-
-\subsubsection{krb5\_key}
-\label{\detokenize{appdev/refs/types/krb5_key::doc}}\label{\detokenize{appdev/refs/types/krb5_key:krb5-key}}\label{\detokenize{appdev/refs/types/krb5_key:krb5-key-struct}}\index{krb5\_key (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_key:c.krb5_key}}\pysigline{\sphinxbfcode{krb5\_key}}
-\end{fulllineitems}
-
-
-Opaque identifier for a key.
-
-Use with the krb5\_k APIs for better performance for repeated operations with the same key and usage. Key identifiers must not be used simultaneously within multiple threads, as they may contain mutable internal state and are not mutex-protected.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_key:declaration}}
-typedef struct krb5\_key\_st* krb5\_key
-
-
-\subsubsection{krb5\_keytab}
-\label{\detokenize{appdev/refs/types/krb5_keytab:krb5-keytab}}\label{\detokenize{appdev/refs/types/krb5_keytab::doc}}\label{\detokenize{appdev/refs/types/krb5_keytab:krb5-keytab-struct}}\index{krb5\_keytab (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_keytab:c.krb5_keytab}}\pysigline{\sphinxbfcode{krb5\_keytab}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_keytab:declaration}}
-typedef struct \_krb5\_kt* krb5\_keytab
-
-
-\subsubsection{krb5\_pac}
-\label{\detokenize{appdev/refs/types/krb5_pac:krb5-pac-struct}}\label{\detokenize{appdev/refs/types/krb5_pac:krb5-pac}}\label{\detokenize{appdev/refs/types/krb5_pac::doc}}\index{krb5\_pac (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_pac:c.krb5_pac}}\pysigline{\sphinxbfcode{krb5\_pac}}
-\end{fulllineitems}
-
-
-PAC data structure to convey authorization information.
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_pac:declaration}}
-typedef struct krb5\_pac\_data* krb5\_pac
-
-
-\subsubsection{krb5\_rcache}
-\label{\detokenize{appdev/refs/types/krb5_rcache:krb5-rcache-struct}}\label{\detokenize{appdev/refs/types/krb5_rcache::doc}}\label{\detokenize{appdev/refs/types/krb5_rcache:krb5-rcache}}\index{krb5\_rcache (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_rcache:c.krb5_rcache}}\pysigline{\sphinxbfcode{krb5\_rcache}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_rcache:declaration}}
-typedef struct krb5\_rc\_st* krb5\_rcache
-
-
-\subsubsection{krb5\_tkt\_creds\_context}
-\label{\detokenize{appdev/refs/types/krb5_tkt_creds_context::doc}}\label{\detokenize{appdev/refs/types/krb5_tkt_creds_context:krb5-tkt-creds-context}}\label{\detokenize{appdev/refs/types/krb5_tkt_creds_context:krb5-tkt-creds-context-struct}}\index{krb5\_tkt\_creds\_context (C type)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/types/krb5_tkt_creds_context:c.krb5_tkt_creds_context}}\pysigline{\sphinxbfcode{krb5\_tkt\_creds\_context}}
-\end{fulllineitems}
-
-
-
-\paragraph{Declaration}
-\label{\detokenize{appdev/refs/types/krb5_tkt_creds_context:declaration}}
-typedef struct \_krb5\_tkt\_creds\_context* krb5\_tkt\_creds\_context
-
-
-\section{krb5 simple macros}
-\label{\detokenize{appdev/refs/macros/index:krb5-simple-macros}}\label{\detokenize{appdev/refs/macros/index::doc}}
-
-\subsection{Public}
-\label{\detokenize{appdev/refs/macros/index:public}}
-
-\subsubsection{ADDRTYPE\_ADDRPORT}
-\label{\detokenize{appdev/refs/macros/ADDRTYPE_ADDRPORT:addrtype-addrport-data}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_ADDRPORT::doc}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_ADDRPORT:addrtype-addrport}}\index{ADDRTYPE\_ADDRPORT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ADDRTYPE_ADDRPORT:ADDRTYPE_ADDRPORT}}\pysigline{\sphinxbfcode{ADDRTYPE\_ADDRPORT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ADDRTYPE\_ADDRPORT}
-&
-\sphinxcode{0x0100}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ADDRTYPE\_CHAOS}
-\label{\detokenize{appdev/refs/macros/ADDRTYPE_CHAOS:addrtype-chaos}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_CHAOS:addrtype-chaos-data}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_CHAOS::doc}}\index{ADDRTYPE\_CHAOS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ADDRTYPE_CHAOS:ADDRTYPE_CHAOS}}\pysigline{\sphinxbfcode{ADDRTYPE\_CHAOS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ADDRTYPE\_CHAOS}
-&
-\sphinxcode{0x0005}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ADDRTYPE\_DDP}
-\label{\detokenize{appdev/refs/macros/ADDRTYPE_DDP:addrtype-ddp-data}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_DDP::doc}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_DDP:addrtype-ddp}}\index{ADDRTYPE\_DDP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ADDRTYPE_DDP:ADDRTYPE_DDP}}\pysigline{\sphinxbfcode{ADDRTYPE\_DDP}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ADDRTYPE\_DDP}
-&
-\sphinxcode{0x0010}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ADDRTYPE\_INET}
-\label{\detokenize{appdev/refs/macros/ADDRTYPE_INET:addrtype-inet}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_INET:addrtype-inet-data}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_INET::doc}}\index{ADDRTYPE\_INET (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ADDRTYPE_INET:ADDRTYPE_INET}}\pysigline{\sphinxbfcode{ADDRTYPE\_INET}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ADDRTYPE\_INET}
-&
-\sphinxcode{0x0002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ADDRTYPE\_INET6}
-\label{\detokenize{appdev/refs/macros/ADDRTYPE_INET6:addrtype-inet6-data}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_INET6:addrtype-inet6}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_INET6::doc}}\index{ADDRTYPE\_INET6 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ADDRTYPE_INET6:ADDRTYPE_INET6}}\pysigline{\sphinxbfcode{ADDRTYPE\_INET6}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ADDRTYPE\_INET6}
-&
-\sphinxcode{0x0018}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ADDRTYPE\_IPPORT}
-\label{\detokenize{appdev/refs/macros/ADDRTYPE_IPPORT:addrtype-ipport}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_IPPORT::doc}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_IPPORT:addrtype-ipport-data}}\index{ADDRTYPE\_IPPORT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ADDRTYPE_IPPORT:ADDRTYPE_IPPORT}}\pysigline{\sphinxbfcode{ADDRTYPE\_IPPORT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ADDRTYPE\_IPPORT}
-&
-\sphinxcode{0x0101}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ADDRTYPE\_ISO}
-\label{\detokenize{appdev/refs/macros/ADDRTYPE_ISO::doc}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_ISO:addrtype-iso}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_ISO:addrtype-iso-data}}\index{ADDRTYPE\_ISO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ADDRTYPE_ISO:ADDRTYPE_ISO}}\pysigline{\sphinxbfcode{ADDRTYPE\_ISO}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ADDRTYPE\_ISO}
-&
-\sphinxcode{0x0007}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ADDRTYPE\_IS\_LOCAL}
-\label{\detokenize{appdev/refs/macros/ADDRTYPE_IS_LOCAL::doc}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_IS_LOCAL:addrtype-is-local}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_IS_LOCAL:addrtype-is-local-data}}\index{ADDRTYPE\_IS\_LOCAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ADDRTYPE_IS_LOCAL:ADDRTYPE_IS_LOCAL}}\pysigline{\sphinxbfcode{ADDRTYPE\_IS\_LOCAL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ADDRTYPE\_IS\_LOCAL (addrtype)}
-&
-\sphinxcode{(addrtype \& 0x8000)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ADDRTYPE\_NETBIOS}
-\label{\detokenize{appdev/refs/macros/ADDRTYPE_NETBIOS:addrtype-netbios}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_NETBIOS::doc}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_NETBIOS:addrtype-netbios-data}}\index{ADDRTYPE\_NETBIOS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ADDRTYPE_NETBIOS:ADDRTYPE_NETBIOS}}\pysigline{\sphinxbfcode{ADDRTYPE\_NETBIOS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ADDRTYPE\_NETBIOS}
-&
-\sphinxcode{0x0014}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ADDRTYPE\_XNS}
-\label{\detokenize{appdev/refs/macros/ADDRTYPE_XNS::doc}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_XNS:addrtype-xns-data}}\label{\detokenize{appdev/refs/macros/ADDRTYPE_XNS:addrtype-xns}}\index{ADDRTYPE\_XNS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ADDRTYPE_XNS:ADDRTYPE_XNS}}\pysigline{\sphinxbfcode{ADDRTYPE\_XNS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ADDRTYPE\_XNS}
-&
-\sphinxcode{0x0006}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{AD\_TYPE\_EXTERNAL}
-\label{\detokenize{appdev/refs/macros/AD_TYPE_EXTERNAL:ad-type-external-data}}\label{\detokenize{appdev/refs/macros/AD_TYPE_EXTERNAL::doc}}\label{\detokenize{appdev/refs/macros/AD_TYPE_EXTERNAL:ad-type-external}}\index{AD\_TYPE\_EXTERNAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/AD_TYPE_EXTERNAL:AD_TYPE_EXTERNAL}}\pysigline{\sphinxbfcode{AD\_TYPE\_EXTERNAL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{AD\_TYPE\_EXTERNAL}
-&
-\sphinxcode{0x4000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{AD\_TYPE\_FIELD\_TYPE\_MASK}
-\label{\detokenize{appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK:ad-type-field-type-mask}}\label{\detokenize{appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK::doc}}\label{\detokenize{appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK:ad-type-field-type-mask-data}}\index{AD\_TYPE\_FIELD\_TYPE\_MASK (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/AD_TYPE_FIELD_TYPE_MASK:AD_TYPE_FIELD_TYPE_MASK}}\pysigline{\sphinxbfcode{AD\_TYPE\_FIELD\_TYPE\_MASK}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{AD\_TYPE\_FIELD\_TYPE\_MASK}
-&
-\sphinxcode{0x1fff}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{AD\_TYPE\_REGISTERED}
-\label{\detokenize{appdev/refs/macros/AD_TYPE_REGISTERED:ad-type-registered-data}}\label{\detokenize{appdev/refs/macros/AD_TYPE_REGISTERED:ad-type-registered}}\label{\detokenize{appdev/refs/macros/AD_TYPE_REGISTERED::doc}}\index{AD\_TYPE\_REGISTERED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/AD_TYPE_REGISTERED:AD_TYPE_REGISTERED}}\pysigline{\sphinxbfcode{AD\_TYPE\_REGISTERED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{AD\_TYPE\_REGISTERED}
-&
-\sphinxcode{0x2000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{AD\_TYPE\_RESERVED}
-\label{\detokenize{appdev/refs/macros/AD_TYPE_RESERVED::doc}}\label{\detokenize{appdev/refs/macros/AD_TYPE_RESERVED:ad-type-reserved}}\label{\detokenize{appdev/refs/macros/AD_TYPE_RESERVED:ad-type-reserved-data}}\index{AD\_TYPE\_RESERVED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/AD_TYPE_RESERVED:AD_TYPE_RESERVED}}\pysigline{\sphinxbfcode{AD\_TYPE\_RESERVED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{AD\_TYPE\_RESERVED}
-&
-\sphinxcode{0x8000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{AP\_OPTS\_ETYPE\_NEGOTIATION}
-\label{\detokenize{appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION::doc}}\label{\detokenize{appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION:ap-opts-etype-negotiation}}\label{\detokenize{appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION:ap-opts-etype-negotiation-data}}\index{AP\_OPTS\_ETYPE\_NEGOTIATION (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/AP_OPTS_ETYPE_NEGOTIATION:AP_OPTS_ETYPE_NEGOTIATION}}\pysigline{\sphinxbfcode{AP\_OPTS\_ETYPE\_NEGOTIATION}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{AP\_OPTS\_ETYPE\_NEGOTIATION}
-&
-\sphinxcode{0x00000002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{AP\_OPTS\_MUTUAL\_REQUIRED}
-\label{\detokenize{appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED:ap-opts-mutual-required}}\label{\detokenize{appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED:ap-opts-mutual-required-data}}\label{\detokenize{appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED::doc}}\index{AP\_OPTS\_MUTUAL\_REQUIRED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/AP_OPTS_MUTUAL_REQUIRED:AP_OPTS_MUTUAL_REQUIRED}}\pysigline{\sphinxbfcode{AP\_OPTS\_MUTUAL\_REQUIRED}}
-\end{fulllineitems}
-
-
-Perform a mutual authentication exchange.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{AP\_OPTS\_MUTUAL\_REQUIRED}
-&
-\sphinxcode{0x20000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{AP\_OPTS\_RESERVED}
-\label{\detokenize{appdev/refs/macros/AP_OPTS_RESERVED::doc}}\label{\detokenize{appdev/refs/macros/AP_OPTS_RESERVED:ap-opts-reserved-data}}\label{\detokenize{appdev/refs/macros/AP_OPTS_RESERVED:ap-opts-reserved}}\index{AP\_OPTS\_RESERVED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/AP_OPTS_RESERVED:AP_OPTS_RESERVED}}\pysigline{\sphinxbfcode{AP\_OPTS\_RESERVED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{AP\_OPTS\_RESERVED}
-&
-\sphinxcode{0x80000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{AP\_OPTS\_USE\_SESSION\_KEY}
-\label{\detokenize{appdev/refs/macros/AP_OPTS_USE_SESSION_KEY:ap-opts-use-session-key}}\label{\detokenize{appdev/refs/macros/AP_OPTS_USE_SESSION_KEY::doc}}\label{\detokenize{appdev/refs/macros/AP_OPTS_USE_SESSION_KEY:ap-opts-use-session-key-data}}\index{AP\_OPTS\_USE\_SESSION\_KEY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/AP_OPTS_USE_SESSION_KEY:AP_OPTS_USE_SESSION_KEY}}\pysigline{\sphinxbfcode{AP\_OPTS\_USE\_SESSION\_KEY}}
-\end{fulllineitems}
-
-
-Use session key.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{AP\_OPTS\_USE\_SESSION\_KEY}
-&
-\sphinxcode{0x40000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{AP\_OPTS\_USE\_SUBKEY}
-\label{\detokenize{appdev/refs/macros/AP_OPTS_USE_SUBKEY:ap-opts-use-subkey}}\label{\detokenize{appdev/refs/macros/AP_OPTS_USE_SUBKEY:ap-opts-use-subkey-data}}\label{\detokenize{appdev/refs/macros/AP_OPTS_USE_SUBKEY::doc}}\index{AP\_OPTS\_USE\_SUBKEY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/AP_OPTS_USE_SUBKEY:AP_OPTS_USE_SUBKEY}}\pysigline{\sphinxbfcode{AP\_OPTS\_USE\_SUBKEY}}
-\end{fulllineitems}
-
-
-Generate a subsession key from the current session key obtained from the credentials.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{AP\_OPTS\_USE\_SUBKEY}
-&
-\sphinxcode{0x00000001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{AP\_OPTS\_WIRE\_MASK}
-\label{\detokenize{appdev/refs/macros/AP_OPTS_WIRE_MASK:ap-opts-wire-mask-data}}\label{\detokenize{appdev/refs/macros/AP_OPTS_WIRE_MASK:ap-opts-wire-mask}}\label{\detokenize{appdev/refs/macros/AP_OPTS_WIRE_MASK::doc}}\index{AP\_OPTS\_WIRE\_MASK (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/AP_OPTS_WIRE_MASK:AP_OPTS_WIRE_MASK}}\pysigline{\sphinxbfcode{AP\_OPTS\_WIRE\_MASK}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{AP\_OPTS\_WIRE\_MASK}
-&
-\sphinxcode{0xfffffff0}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_CMAC\_CAMELLIA128}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128:cksumtype-cmac-camellia128}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128:cksumtype-cmac-camellia128-data}}\index{CKSUMTYPE\_CMAC\_CAMELLIA128 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA128:CKSUMTYPE_CMAC_CAMELLIA128}}\pysigline{\sphinxbfcode{CKSUMTYPE\_CMAC\_CAMELLIA128}}
-\end{fulllineitems}
-
-
-RFC 6803.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_CMAC\_CAMELLIA128}
-&
-\sphinxcode{0x0011}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_CMAC\_CAMELLIA256}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256:cksumtype-cmac-camellia256}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256:cksumtype-cmac-camellia256-data}}\index{CKSUMTYPE\_CMAC\_CAMELLIA256 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CMAC_CAMELLIA256:CKSUMTYPE_CMAC_CAMELLIA256}}\pysigline{\sphinxbfcode{CKSUMTYPE\_CMAC\_CAMELLIA256}}
-\end{fulllineitems}
-
-
-RFC 6803.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_CMAC\_CAMELLIA256}
-&
-\sphinxcode{0x0012}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_CRC32}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CRC32:cksumtype-crc32-data}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CRC32::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CRC32:cksumtype-crc32}}\index{CKSUMTYPE\_CRC32 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_CRC32:CKSUMTYPE_CRC32}}\pysigline{\sphinxbfcode{CKSUMTYPE\_CRC32}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_CRC32}
-&
-\sphinxcode{0x0001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_DESCBC}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_DESCBC:cksumtype-descbc-data}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_DESCBC::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_DESCBC:cksumtype-descbc}}\index{CKSUMTYPE\_DESCBC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_DESCBC:CKSUMTYPE_DESCBC}}\pysigline{\sphinxbfcode{CKSUMTYPE\_DESCBC}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_DESCBC}
-&
-\sphinxcode{0x0004}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_HMAC\_MD5\_ARCFOUR}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR:cksumtype-hmac-md5-arcfour-data}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR:cksumtype-hmac-md5-arcfour}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR::doc}}\index{CKSUMTYPE\_HMAC\_MD5\_ARCFOUR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_MD5_ARCFOUR:CKSUMTYPE_HMAC_MD5_ARCFOUR}}\pysigline{\sphinxbfcode{CKSUMTYPE\_HMAC\_MD5\_ARCFOUR}}
-\end{fulllineitems}
-
-
-RFC 4757.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_HMAC\_MD5\_ARCFOUR}
-&
-\sphinxcode{-138}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_HMAC\_SHA1\_96\_AES128}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128:cksumtype-hmac-sha1-96-aes128}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128:cksumtype-hmac-sha1-96-aes128-data}}\index{CKSUMTYPE\_HMAC\_SHA1\_96\_AES128 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES128:CKSUMTYPE_HMAC_SHA1_96_AES128}}\pysigline{\sphinxbfcode{CKSUMTYPE\_HMAC\_SHA1\_96\_AES128}}
-\end{fulllineitems}
-
-
-RFC 3962.
-
-Used with ENCTYPE\_AES128\_CTS\_HMAC\_SHA1\_96
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_HMAC\_SHA1\_96\_AES128}
-&
-\sphinxcode{0x000f}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_HMAC\_SHA1\_96\_AES256}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256:cksumtype-hmac-sha1-96-aes256}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256:cksumtype-hmac-sha1-96-aes256-data}}\index{CKSUMTYPE\_HMAC\_SHA1\_96\_AES256 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_96_AES256:CKSUMTYPE_HMAC_SHA1_96_AES256}}\pysigline{\sphinxbfcode{CKSUMTYPE\_HMAC\_SHA1\_96\_AES256}}
-\end{fulllineitems}
-
-
-RFC 3962.
-
-Used with ENCTYPE\_AES256\_CTS\_HMAC\_SHA1\_96
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_HMAC\_SHA1\_96\_AES256}
-&
-\sphinxcode{0x0010}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_HMAC\_SHA256\_128\_AES128}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128:cksumtype-hmac-sha256-128-aes128-data}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128:cksumtype-hmac-sha256-128-aes128}}\index{CKSUMTYPE\_HMAC\_SHA256\_128\_AES128 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA256_128_AES128:CKSUMTYPE_HMAC_SHA256_128_AES128}}\pysigline{\sphinxbfcode{CKSUMTYPE\_HMAC\_SHA256\_128\_AES128}}
-\end{fulllineitems}
-
-
-RFC 8009.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_HMAC\_SHA256\_128\_AES128}
-&
-\sphinxcode{0x0013}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_HMAC\_SHA384\_192\_AES256}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256:cksumtype-hmac-sha384-192-aes256}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256:cksumtype-hmac-sha384-192-aes256-data}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256::doc}}\index{CKSUMTYPE\_HMAC\_SHA384\_192\_AES256 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA384_192_AES256:CKSUMTYPE_HMAC_SHA384_192_AES256}}\pysigline{\sphinxbfcode{CKSUMTYPE\_HMAC\_SHA384\_192\_AES256}}
-\end{fulllineitems}
-
-
-RFC 8009.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_HMAC\_SHA384\_192\_AES256}
-&
-\sphinxcode{0x0014}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_HMAC\_SHA1\_DES3}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3:cksumtype-hmac-sha1-des3}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3:cksumtype-hmac-sha1-des3-data}}\index{CKSUMTYPE\_HMAC\_SHA1\_DES3 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_HMAC_SHA1_DES3:CKSUMTYPE_HMAC_SHA1_DES3}}\pysigline{\sphinxbfcode{CKSUMTYPE\_HMAC\_SHA1\_DES3}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_HMAC\_SHA1\_DES3}
-&
-\sphinxcode{0x000c}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_MD5\_HMAC\_ARCFOUR}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR:cksumtype-md5-hmac-arcfour}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR:cksumtype-md5-hmac-arcfour-data}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR::doc}}\index{CKSUMTYPE\_MD5\_HMAC\_ARCFOUR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_MD5_HMAC_ARCFOUR:CKSUMTYPE_MD5_HMAC_ARCFOUR}}\pysigline{\sphinxbfcode{CKSUMTYPE\_MD5\_HMAC\_ARCFOUR}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_MD5\_HMAC\_ARCFOUR}
-&
-\sphinxcode{-137 /* Microsoft netlogon */}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_NIST\_SHA}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_NIST_SHA::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_NIST_SHA:cksumtype-nist-sha}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_NIST_SHA:cksumtype-nist-sha-data}}\index{CKSUMTYPE\_NIST\_SHA (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_NIST_SHA:CKSUMTYPE_NIST_SHA}}\pysigline{\sphinxbfcode{CKSUMTYPE\_NIST\_SHA}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_NIST\_SHA}
-&
-\sphinxcode{0x0009}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_RSA\_MD4}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD4::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD4:cksumtype-rsa-md4}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD4:cksumtype-rsa-md4-data}}\index{CKSUMTYPE\_RSA\_MD4 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD4:CKSUMTYPE_RSA_MD4}}\pysigline{\sphinxbfcode{CKSUMTYPE\_RSA\_MD4}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_RSA\_MD4}
-&
-\sphinxcode{0x0002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_RSA\_MD4\_DES}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES:cksumtype-rsa-md4-des}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES:cksumtype-rsa-md4-des-data}}\index{CKSUMTYPE\_RSA\_MD4\_DES (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD4_DES:CKSUMTYPE_RSA_MD4_DES}}\pysigline{\sphinxbfcode{CKSUMTYPE\_RSA\_MD4\_DES}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_RSA\_MD4\_DES}
-&
-\sphinxcode{0x0003}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_RSA\_MD5}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD5:cksumtype-rsa-md5-data}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD5::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD5:cksumtype-rsa-md5}}\index{CKSUMTYPE\_RSA\_MD5 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD5:CKSUMTYPE_RSA_MD5}}\pysigline{\sphinxbfcode{CKSUMTYPE\_RSA\_MD5}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_RSA\_MD5}
-&
-\sphinxcode{0x0007}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_RSA\_MD5\_DES}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES:cksumtype-rsa-md5-des-data}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES:cksumtype-rsa-md5-des}}\index{CKSUMTYPE\_RSA\_MD5\_DES (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_RSA_MD5_DES:CKSUMTYPE_RSA_MD5_DES}}\pysigline{\sphinxbfcode{CKSUMTYPE\_RSA\_MD5\_DES}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_RSA\_MD5\_DES}
-&
-\sphinxcode{0x0008}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{CKSUMTYPE\_SHA1}
-\label{\detokenize{appdev/refs/macros/CKSUMTYPE_SHA1::doc}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_SHA1:cksumtype-sha1}}\label{\detokenize{appdev/refs/macros/CKSUMTYPE_SHA1:cksumtype-sha1-data}}\index{CKSUMTYPE\_SHA1 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/CKSUMTYPE_SHA1:CKSUMTYPE_SHA1}}\pysigline{\sphinxbfcode{CKSUMTYPE\_SHA1}}
-\end{fulllineitems}
-
-
-RFC 3961.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{CKSUMTYPE\_SHA1}
-&
-\sphinxcode{0x000e}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_AES128\_CTS\_HMAC\_SHA1\_96}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96:enctype-aes128-cts-hmac-sha1-96-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96:enctype-aes128-cts-hmac-sha1-96}}\index{ENCTYPE\_AES128\_CTS\_HMAC\_SHA1\_96 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA1_96:ENCTYPE_AES128_CTS_HMAC_SHA1_96}}\pysigline{\sphinxbfcode{ENCTYPE\_AES128\_CTS\_HMAC\_SHA1\_96}}
-\end{fulllineitems}
-
-
-RFC 3962.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_AES128\_CTS\_HMAC\_SHA1\_96}
-&
-\sphinxcode{0x0011}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_AES128\_CTS\_HMAC\_SHA256\_128}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128:enctype-aes128-cts-hmac-sha256-128}}\label{\detokenize{appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128:enctype-aes128-cts-hmac-sha256-128-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128::doc}}\index{ENCTYPE\_AES128\_CTS\_HMAC\_SHA256\_128 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_AES128_CTS_HMAC_SHA256_128:ENCTYPE_AES128_CTS_HMAC_SHA256_128}}\pysigline{\sphinxbfcode{ENCTYPE\_AES128\_CTS\_HMAC\_SHA256\_128}}
-\end{fulllineitems}
-
-
-RFC 8009.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_AES128\_CTS\_HMAC\_SHA256\_128}
-&
-\sphinxcode{0x0013}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_AES256\_CTS\_HMAC\_SHA1\_96}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96:enctype-aes256-cts-hmac-sha1-96-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96:enctype-aes256-cts-hmac-sha1-96}}\index{ENCTYPE\_AES256\_CTS\_HMAC\_SHA1\_96 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA1_96:ENCTYPE_AES256_CTS_HMAC_SHA1_96}}\pysigline{\sphinxbfcode{ENCTYPE\_AES256\_CTS\_HMAC\_SHA1\_96}}
-\end{fulllineitems}
-
-
-RFC 3962.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_AES256\_CTS\_HMAC\_SHA1\_96}
-&
-\sphinxcode{0x0012}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_AES256\_CTS\_HMAC\_SHA384\_192}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192:enctype-aes256-cts-hmac-sha384-192-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192:enctype-aes256-cts-hmac-sha384-192}}\label{\detokenize{appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192::doc}}\index{ENCTYPE\_AES256\_CTS\_HMAC\_SHA384\_192 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_AES256_CTS_HMAC_SHA384_192:ENCTYPE_AES256_CTS_HMAC_SHA384_192}}\pysigline{\sphinxbfcode{ENCTYPE\_AES256\_CTS\_HMAC\_SHA384\_192}}
-\end{fulllineitems}
-
-
-RFC 8009.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_AES256\_CTS\_HMAC\_SHA384\_192}
-&
-\sphinxcode{0x0014}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_ARCFOUR\_HMAC}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC:enctype-arcfour-hmac}}\label{\detokenize{appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC:enctype-arcfour-hmac-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC::doc}}\index{ENCTYPE\_ARCFOUR\_HMAC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC:ENCTYPE_ARCFOUR_HMAC}}\pysigline{\sphinxbfcode{ENCTYPE\_ARCFOUR\_HMAC}}
-\end{fulllineitems}
-
-
-RFC 4757.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_ARCFOUR\_HMAC}
-&
-\sphinxcode{0x0017}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_ARCFOUR\_HMAC\_EXP}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP:enctype-arcfour-hmac-exp-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP:enctype-arcfour-hmac-exp}}\label{\detokenize{appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP::doc}}\index{ENCTYPE\_ARCFOUR\_HMAC\_EXP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_ARCFOUR_HMAC_EXP:ENCTYPE_ARCFOUR_HMAC_EXP}}\pysigline{\sphinxbfcode{ENCTYPE\_ARCFOUR\_HMAC\_EXP}}
-\end{fulllineitems}
-
-
-RFC 4757.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_ARCFOUR\_HMAC\_EXP}
-&
-\sphinxcode{0x0018}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_CAMELLIA128\_CTS\_CMAC}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC:enctype-camellia128-cts-cmac-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC:enctype-camellia128-cts-cmac}}\label{\detokenize{appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC::doc}}\index{ENCTYPE\_CAMELLIA128\_CTS\_CMAC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_CAMELLIA128_CTS_CMAC:ENCTYPE_CAMELLIA128_CTS_CMAC}}\pysigline{\sphinxbfcode{ENCTYPE\_CAMELLIA128\_CTS\_CMAC}}
-\end{fulllineitems}
-
-
-RFC 6803.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_CAMELLIA128\_CTS\_CMAC}
-&
-\sphinxcode{0x0019}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_CAMELLIA256\_CTS\_CMAC}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC:enctype-camellia256-cts-cmac-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC:enctype-camellia256-cts-cmac}}\label{\detokenize{appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC::doc}}\index{ENCTYPE\_CAMELLIA256\_CTS\_CMAC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_CAMELLIA256_CTS_CMAC:ENCTYPE_CAMELLIA256_CTS_CMAC}}\pysigline{\sphinxbfcode{ENCTYPE\_CAMELLIA256\_CTS\_CMAC}}
-\end{fulllineitems}
-
-
-RFC 6803.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_CAMELLIA256\_CTS\_CMAC}
-&
-\sphinxcode{0x001a}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_DES3\_CBC\_ENV}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_ENV::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_ENV:enctype-des3-cbc-env}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_ENV:enctype-des3-cbc-env-data}}\index{ENCTYPE\_DES3\_CBC\_ENV (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_ENV:ENCTYPE_DES3_CBC_ENV}}\pysigline{\sphinxbfcode{ENCTYPE\_DES3\_CBC\_ENV}}
-\end{fulllineitems}
-
-
-DES-3 cbc mode, CMS enveloped data.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_DES3\_CBC\_ENV}
-&
-\sphinxcode{0x000f}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_DES3\_CBC\_RAW}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_RAW:enctype-des3-cbc-raw}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_RAW::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_RAW:enctype-des3-cbc-raw-data}}\index{ENCTYPE\_DES3\_CBC\_RAW (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_RAW:ENCTYPE_DES3_CBC_RAW}}\pysigline{\sphinxbfcode{ENCTYPE\_DES3\_CBC\_RAW}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_DES3\_CBC\_RAW}
-&
-\sphinxcode{0x0006}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_DES3\_CBC\_SHA}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_SHA:enctype-des3-cbc-sha}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_SHA::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_SHA:enctype-des3-cbc-sha-data}}\index{ENCTYPE\_DES3\_CBC\_SHA (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_SHA:ENCTYPE_DES3_CBC_SHA}}\pysigline{\sphinxbfcode{ENCTYPE\_DES3\_CBC\_SHA}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_DES3\_CBC\_SHA}
-&
-\sphinxcode{0x0005}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_DES3\_CBC\_SHA1}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1:enctype-des3-cbc-sha1}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1:enctype-des3-cbc-sha1-data}}\index{ENCTYPE\_DES3\_CBC\_SHA1 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_DES3_CBC_SHA1:ENCTYPE_DES3_CBC_SHA1}}\pysigline{\sphinxbfcode{ENCTYPE\_DES3\_CBC\_SHA1}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_DES3\_CBC\_SHA1}
-&
-\sphinxcode{0x0010}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_DES\_CBC\_CRC}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_CRC:enctype-des-cbc-crc-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_CRC:enctype-des-cbc-crc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_CRC::doc}}\index{ENCTYPE\_DES\_CBC\_CRC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_CRC:ENCTYPE_DES_CBC_CRC}}\pysigline{\sphinxbfcode{ENCTYPE\_DES\_CBC\_CRC}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_DES\_CBC\_CRC}
-&
-\sphinxcode{0x0001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_DES\_CBC\_MD4}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_MD4:enctype-des-cbc-md4-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_MD4::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_MD4:enctype-des-cbc-md4}}\index{ENCTYPE\_DES\_CBC\_MD4 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_MD4:ENCTYPE_DES_CBC_MD4}}\pysigline{\sphinxbfcode{ENCTYPE\_DES\_CBC\_MD4}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_DES\_CBC\_MD4}
-&
-\sphinxcode{0x0002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_DES\_CBC\_MD5}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_MD5:enctype-des-cbc-md5-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_MD5::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_MD5:enctype-des-cbc-md5}}\index{ENCTYPE\_DES\_CBC\_MD5 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_MD5:ENCTYPE_DES_CBC_MD5}}\pysigline{\sphinxbfcode{ENCTYPE\_DES\_CBC\_MD5}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_DES\_CBC\_MD5}
-&
-\sphinxcode{0x0003}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_DES\_CBC\_RAW}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_RAW:enctype-des-cbc-raw-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_RAW:enctype-des-cbc-raw}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_RAW::doc}}\index{ENCTYPE\_DES\_CBC\_RAW (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_CBC_RAW:ENCTYPE_DES_CBC_RAW}}\pysigline{\sphinxbfcode{ENCTYPE\_DES\_CBC\_RAW}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_DES\_CBC\_RAW}
-&
-\sphinxcode{0x0004}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_DES\_HMAC\_SHA1}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1:enctype-des-hmac-sha1-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1:enctype-des-hmac-sha1}}\index{ENCTYPE\_DES\_HMAC\_SHA1 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_DES_HMAC_SHA1:ENCTYPE_DES_HMAC_SHA1}}\pysigline{\sphinxbfcode{ENCTYPE\_DES\_HMAC\_SHA1}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_DES\_HMAC\_SHA1}
-&
-\sphinxcode{0x0008}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_DSA\_SHA1\_CMS}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS:enctype-dsa-sha1-cms-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS:enctype-dsa-sha1-cms}}\label{\detokenize{appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS::doc}}\index{ENCTYPE\_DSA\_SHA1\_CMS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_DSA_SHA1_CMS:ENCTYPE_DSA_SHA1_CMS}}\pysigline{\sphinxbfcode{ENCTYPE\_DSA\_SHA1\_CMS}}
-\end{fulllineitems}
-
-
-DSA with SHA1, CMS signature.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_DSA\_SHA1\_CMS}
-&
-\sphinxcode{0x0009}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_MD5\_RSA\_CMS}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_MD5_RSA_CMS:enctype-md5-rsa-cms}}\label{\detokenize{appdev/refs/macros/ENCTYPE_MD5_RSA_CMS:enctype-md5-rsa-cms-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_MD5_RSA_CMS::doc}}\index{ENCTYPE\_MD5\_RSA\_CMS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_MD5_RSA_CMS:ENCTYPE_MD5_RSA_CMS}}\pysigline{\sphinxbfcode{ENCTYPE\_MD5\_RSA\_CMS}}
-\end{fulllineitems}
-
-
-MD5 with RSA, CMS signature.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_MD5\_RSA\_CMS}
-&
-\sphinxcode{0x000a}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_NULL}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_NULL:enctype-null}}\label{\detokenize{appdev/refs/macros/ENCTYPE_NULL::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_NULL:enctype-null-data}}\index{ENCTYPE\_NULL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_NULL:ENCTYPE_NULL}}\pysigline{\sphinxbfcode{ENCTYPE\_NULL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_NULL}
-&
-\sphinxcode{0x0000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_RC2\_CBC\_ENV}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_RC2_CBC_ENV:enctype-rc2-cbc-env}}\label{\detokenize{appdev/refs/macros/ENCTYPE_RC2_CBC_ENV::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_RC2_CBC_ENV:enctype-rc2-cbc-env-data}}\index{ENCTYPE\_RC2\_CBC\_ENV (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_RC2_CBC_ENV:ENCTYPE_RC2_CBC_ENV}}\pysigline{\sphinxbfcode{ENCTYPE\_RC2\_CBC\_ENV}}
-\end{fulllineitems}
-
-
-RC2 cbc mode, CMS enveloped data.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_RC2\_CBC\_ENV}
-&
-\sphinxcode{0x000c}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_RSA\_ENV}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_RSA_ENV:enctype-rsa-env-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_RSA_ENV:enctype-rsa-env}}\label{\detokenize{appdev/refs/macros/ENCTYPE_RSA_ENV::doc}}\index{ENCTYPE\_RSA\_ENV (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_RSA_ENV:ENCTYPE_RSA_ENV}}\pysigline{\sphinxbfcode{ENCTYPE\_RSA\_ENV}}
-\end{fulllineitems}
-
-
-RSA encryption, CMS enveloped data.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_RSA\_ENV}
-&
-\sphinxcode{0x000d}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_RSA\_ES\_OAEP\_ENV}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV:enctype-rsa-es-oaep-env}}\label{\detokenize{appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV:enctype-rsa-es-oaep-env-data}}\index{ENCTYPE\_RSA\_ES\_OAEP\_ENV (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_RSA_ES_OAEP_ENV:ENCTYPE_RSA_ES_OAEP_ENV}}\pysigline{\sphinxbfcode{ENCTYPE\_RSA\_ES\_OAEP\_ENV}}
-\end{fulllineitems}
-
-
-RSA w/OEAP encryption, CMS enveloped data.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_RSA\_ES\_OAEP\_ENV}
-&
-\sphinxcode{0x000e}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_SHA1\_RSA\_CMS}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS:enctype-sha1-rsa-cms-data}}\label{\detokenize{appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS:enctype-sha1-rsa-cms}}\index{ENCTYPE\_SHA1\_RSA\_CMS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_SHA1_RSA_CMS:ENCTYPE_SHA1_RSA_CMS}}\pysigline{\sphinxbfcode{ENCTYPE\_SHA1\_RSA\_CMS}}
-\end{fulllineitems}
-
-
-SHA1 with RSA, CMS signature.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_SHA1\_RSA\_CMS}
-&
-\sphinxcode{0x000b}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{ENCTYPE\_UNKNOWN}
-\label{\detokenize{appdev/refs/macros/ENCTYPE_UNKNOWN:enctype-unknown}}\label{\detokenize{appdev/refs/macros/ENCTYPE_UNKNOWN::doc}}\label{\detokenize{appdev/refs/macros/ENCTYPE_UNKNOWN:enctype-unknown-data}}\index{ENCTYPE\_UNKNOWN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/ENCTYPE_UNKNOWN:ENCTYPE_UNKNOWN}}\pysigline{\sphinxbfcode{ENCTYPE\_UNKNOWN}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{ENCTYPE\_UNKNOWN}
-&
-\sphinxcode{0x01ff}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_ALLOW\_POSTDATE}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE:kdc-opt-allow-postdate}}\label{\detokenize{appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE:kdc-opt-allow-postdate-data}}\label{\detokenize{appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE::doc}}\index{KDC\_OPT\_ALLOW\_POSTDATE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_ALLOW_POSTDATE:KDC_OPT_ALLOW_POSTDATE}}\pysigline{\sphinxbfcode{KDC\_OPT\_ALLOW\_POSTDATE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_ALLOW\_POSTDATE}
-&
-\sphinxcode{0x04000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_CANONICALIZE}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_CANONICALIZE:kdc-opt-canonicalize}}\label{\detokenize{appdev/refs/macros/KDC_OPT_CANONICALIZE:kdc-opt-canonicalize-data}}\label{\detokenize{appdev/refs/macros/KDC_OPT_CANONICALIZE::doc}}\index{KDC\_OPT\_CANONICALIZE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_CANONICALIZE:KDC_OPT_CANONICALIZE}}\pysigline{\sphinxbfcode{KDC\_OPT\_CANONICALIZE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_CANONICALIZE}
-&
-\sphinxcode{0x00010000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_CNAME\_IN\_ADDL\_TKT}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT:kdc-opt-cname-in-addl-tkt-data}}\label{\detokenize{appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT:kdc-opt-cname-in-addl-tkt}}\label{\detokenize{appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT::doc}}\index{KDC\_OPT\_CNAME\_IN\_ADDL\_TKT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_CNAME_IN_ADDL_TKT:KDC_OPT_CNAME_IN_ADDL_TKT}}\pysigline{\sphinxbfcode{KDC\_OPT\_CNAME\_IN\_ADDL\_TKT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_CNAME\_IN\_ADDL\_TKT}
-&
-\sphinxcode{0x00020000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_DISABLE\_TRANSITED\_CHECK}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK:kdc-opt-disable-transited-check}}\label{\detokenize{appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK::doc}}\label{\detokenize{appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK:kdc-opt-disable-transited-check-data}}\index{KDC\_OPT\_DISABLE\_TRANSITED\_CHECK (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_DISABLE_TRANSITED_CHECK:KDC_OPT_DISABLE_TRANSITED_CHECK}}\pysigline{\sphinxbfcode{KDC\_OPT\_DISABLE\_TRANSITED\_CHECK}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_DISABLE\_TRANSITED\_CHECK}
-&
-\sphinxcode{0x00000020}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_ENC\_TKT\_IN\_SKEY}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY:kdc-opt-enc-tkt-in-skey}}\label{\detokenize{appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY::doc}}\label{\detokenize{appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY:kdc-opt-enc-tkt-in-skey-data}}\index{KDC\_OPT\_ENC\_TKT\_IN\_SKEY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_ENC_TKT_IN_SKEY:KDC_OPT_ENC_TKT_IN_SKEY}}\pysigline{\sphinxbfcode{KDC\_OPT\_ENC\_TKT\_IN\_SKEY}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_ENC\_TKT\_IN\_SKEY}
-&
-\sphinxcode{0x00000008}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_FORWARDABLE}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_FORWARDABLE:kdc-opt-forwardable-data}}\label{\detokenize{appdev/refs/macros/KDC_OPT_FORWARDABLE::doc}}\label{\detokenize{appdev/refs/macros/KDC_OPT_FORWARDABLE:kdc-opt-forwardable}}\index{KDC\_OPT\_FORWARDABLE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_FORWARDABLE:KDC_OPT_FORWARDABLE}}\pysigline{\sphinxbfcode{KDC\_OPT\_FORWARDABLE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_FORWARDABLE}
-&
-\sphinxcode{0x40000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_FORWARDED}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_FORWARDED::doc}}\label{\detokenize{appdev/refs/macros/KDC_OPT_FORWARDED:kdc-opt-forwarded}}\label{\detokenize{appdev/refs/macros/KDC_OPT_FORWARDED:kdc-opt-forwarded-data}}\index{KDC\_OPT\_FORWARDED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_FORWARDED:KDC_OPT_FORWARDED}}\pysigline{\sphinxbfcode{KDC\_OPT\_FORWARDED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_FORWARDED}
-&
-\sphinxcode{0x20000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_POSTDATED}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_POSTDATED:kdc-opt-postdated-data}}\label{\detokenize{appdev/refs/macros/KDC_OPT_POSTDATED:kdc-opt-postdated}}\label{\detokenize{appdev/refs/macros/KDC_OPT_POSTDATED::doc}}\index{KDC\_OPT\_POSTDATED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_POSTDATED:KDC_OPT_POSTDATED}}\pysigline{\sphinxbfcode{KDC\_OPT\_POSTDATED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_POSTDATED}
-&
-\sphinxcode{0x02000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_PROXIABLE}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_PROXIABLE:kdc-opt-proxiable-data}}\label{\detokenize{appdev/refs/macros/KDC_OPT_PROXIABLE::doc}}\label{\detokenize{appdev/refs/macros/KDC_OPT_PROXIABLE:kdc-opt-proxiable}}\index{KDC\_OPT\_PROXIABLE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_PROXIABLE:KDC_OPT_PROXIABLE}}\pysigline{\sphinxbfcode{KDC\_OPT\_PROXIABLE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_PROXIABLE}
-&
-\sphinxcode{0x10000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_PROXY}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_PROXY::doc}}\label{\detokenize{appdev/refs/macros/KDC_OPT_PROXY:kdc-opt-proxy}}\label{\detokenize{appdev/refs/macros/KDC_OPT_PROXY:kdc-opt-proxy-data}}\index{KDC\_OPT\_PROXY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_PROXY:KDC_OPT_PROXY}}\pysigline{\sphinxbfcode{KDC\_OPT\_PROXY}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_PROXY}
-&
-\sphinxcode{0x08000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_RENEW}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEW::doc}}\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEW:kdc-opt-renew}}\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEW:kdc-opt-renew-data}}\index{KDC\_OPT\_RENEW (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEW:KDC_OPT_RENEW}}\pysigline{\sphinxbfcode{KDC\_OPT\_RENEW}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_RENEW}
-&
-\sphinxcode{0x00000002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_RENEWABLE}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEWABLE:kdc-opt-renewable}}\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEWABLE:kdc-opt-renewable-data}}\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEWABLE::doc}}\index{KDC\_OPT\_RENEWABLE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEWABLE:KDC_OPT_RENEWABLE}}\pysigline{\sphinxbfcode{KDC\_OPT\_RENEWABLE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_RENEWABLE}
-&
-\sphinxcode{0x00800000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_RENEWABLE\_OK}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEWABLE_OK::doc}}\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEWABLE_OK:kdc-opt-renewable-ok-data}}\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEWABLE_OK:kdc-opt-renewable-ok}}\index{KDC\_OPT\_RENEWABLE\_OK (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_RENEWABLE_OK:KDC_OPT_RENEWABLE_OK}}\pysigline{\sphinxbfcode{KDC\_OPT\_RENEWABLE\_OK}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_RENEWABLE\_OK}
-&
-\sphinxcode{0x00000010}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_REQUEST\_ANONYMOUS}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS:kdc-opt-request-anonymous}}\label{\detokenize{appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS:kdc-opt-request-anonymous-data}}\label{\detokenize{appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS::doc}}\index{KDC\_OPT\_REQUEST\_ANONYMOUS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_REQUEST_ANONYMOUS:KDC_OPT_REQUEST_ANONYMOUS}}\pysigline{\sphinxbfcode{KDC\_OPT\_REQUEST\_ANONYMOUS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_REQUEST\_ANONYMOUS}
-&
-\sphinxcode{0x00008000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_OPT\_VALIDATE}
-\label{\detokenize{appdev/refs/macros/KDC_OPT_VALIDATE:kdc-opt-validate-data}}\label{\detokenize{appdev/refs/macros/KDC_OPT_VALIDATE:kdc-opt-validate}}\label{\detokenize{appdev/refs/macros/KDC_OPT_VALIDATE::doc}}\index{KDC\_OPT\_VALIDATE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_OPT_VALIDATE:KDC_OPT_VALIDATE}}\pysigline{\sphinxbfcode{KDC\_OPT\_VALIDATE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_OPT\_VALIDATE}
-&
-\sphinxcode{0x00000001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KDC\_TKT\_COMMON\_MASK}
-\label{\detokenize{appdev/refs/macros/KDC_TKT_COMMON_MASK:kdc-tkt-common-mask-data}}\label{\detokenize{appdev/refs/macros/KDC_TKT_COMMON_MASK::doc}}\label{\detokenize{appdev/refs/macros/KDC_TKT_COMMON_MASK:kdc-tkt-common-mask}}\index{KDC\_TKT\_COMMON\_MASK (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KDC_TKT_COMMON_MASK:KDC_TKT_COMMON_MASK}}\pysigline{\sphinxbfcode{KDC\_TKT\_COMMON\_MASK}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KDC\_TKT\_COMMON\_MASK}
-&
-\sphinxcode{0x54800000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_ALTAUTH\_ATT\_CHALLENGE\_RESPONSE}
-\label{\detokenize{appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE:krb5-altauth-att-challenge-response}}\label{\detokenize{appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE:krb5-altauth-att-challenge-response-data}}\label{\detokenize{appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE::doc}}\index{KRB5\_ALTAUTH\_ATT\_CHALLENGE\_RESPONSE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE:KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE}}\pysigline{\sphinxbfcode{KRB5\_ALTAUTH\_ATT\_CHALLENGE\_RESPONSE}}
-\end{fulllineitems}
-
-
-alternate authentication types
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_ALTAUTH\_ATT\_CHALLENGE\_RESPONSE}
-&
-\sphinxcode{64}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_ANONYMOUS\_PRINCSTR}
-\label{\detokenize{appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR:krb5-anonymous-princstr}}\label{\detokenize{appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR:krb5-anonymous-princstr-data}}\label{\detokenize{appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR::doc}}\index{KRB5\_ANONYMOUS\_PRINCSTR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_ANONYMOUS_PRINCSTR:KRB5_ANONYMOUS_PRINCSTR}}\pysigline{\sphinxbfcode{KRB5\_ANONYMOUS\_PRINCSTR}}
-\end{fulllineitems}
-
-
-Anonymous principal name.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_ANONYMOUS\_PRINCSTR}
-&
-\sphinxcode{"ANONYMOUS"}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_ANONYMOUS\_REALMSTR}
-\label{\detokenize{appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR:krb5-anonymous-realmstr-data}}\label{\detokenize{appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR:krb5-anonymous-realmstr}}\label{\detokenize{appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR::doc}}\index{KRB5\_ANONYMOUS\_REALMSTR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_ANONYMOUS_REALMSTR:KRB5_ANONYMOUS_REALMSTR}}\pysigline{\sphinxbfcode{KRB5\_ANONYMOUS\_REALMSTR}}
-\end{fulllineitems}
-
-
-Anonymous realm.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_ANONYMOUS\_REALMSTR}
-&
-\sphinxcode{"WELLKNOWN:ANONYMOUS"}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AP\_REP}
-\label{\detokenize{appdev/refs/macros/KRB5_AP_REP:krb5-ap-rep}}\label{\detokenize{appdev/refs/macros/KRB5_AP_REP::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AP_REP:krb5-ap-rep-data}}\index{KRB5\_AP\_REP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AP_REP:KRB5_AP_REP}}\pysigline{\sphinxbfcode{KRB5\_AP\_REP}}
-\end{fulllineitems}
-
-
-Response to mutual AP request.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AP\_REP}
-&
-\sphinxcode{((krb5\_msgtype)15)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AP\_REQ}
-\label{\detokenize{appdev/refs/macros/KRB5_AP_REQ:krb5-ap-req}}\label{\detokenize{appdev/refs/macros/KRB5_AP_REQ::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AP_REQ:krb5-ap-req-data}}\index{KRB5\_AP\_REQ (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AP_REQ:KRB5_AP_REQ}}\pysigline{\sphinxbfcode{KRB5\_AP\_REQ}}
-\end{fulllineitems}
-
-
-Auth req to application server.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AP\_REQ}
-&
-\sphinxcode{((krb5\_msgtype)14)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AS\_REP}
-\label{\detokenize{appdev/refs/macros/KRB5_AS_REP:krb5-as-rep}}\label{\detokenize{appdev/refs/macros/KRB5_AS_REP:krb5-as-rep-data}}\label{\detokenize{appdev/refs/macros/KRB5_AS_REP::doc}}\index{KRB5\_AS\_REP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AS_REP:KRB5_AS_REP}}\pysigline{\sphinxbfcode{KRB5\_AS\_REP}}
-\end{fulllineitems}
-
-
-Response to AS request.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AS\_REP}
-&
-\sphinxcode{((krb5\_msgtype)11)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AS\_REQ}
-\label{\detokenize{appdev/refs/macros/KRB5_AS_REQ:krb5-as-req}}\label{\detokenize{appdev/refs/macros/KRB5_AS_REQ:krb5-as-req-data}}\label{\detokenize{appdev/refs/macros/KRB5_AS_REQ::doc}}\index{KRB5\_AS\_REQ (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AS_REQ:KRB5_AS_REQ}}\pysigline{\sphinxbfcode{KRB5\_AS\_REQ}}
-\end{fulllineitems}
-
-
-Initial authentication request.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AS\_REQ}
-&
-\sphinxcode{((krb5\_msgtype)10)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_AND\_OR}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AND_OR::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AND_OR:krb5-authdata-and-or-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AND_OR:krb5-authdata-and-or}}\index{KRB5\_AUTHDATA\_AND\_OR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AND_OR:KRB5_AUTHDATA_AND_OR}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_AND\_OR}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_AND\_OR}
-&
-\sphinxcode{5}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_AP\_OPTIONS}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS:krb5-authdata-ap-options-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS:krb5-authdata-ap-options}}\index{KRB5\_AUTHDATA\_AP\_OPTIONS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AP_OPTIONS:KRB5_AUTHDATA_AP_OPTIONS}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_AP\_OPTIONS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_AP\_OPTIONS}
-&
-\sphinxcode{143}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_AUTH\_INDICATOR}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR:krb5-authdata-auth-indicator}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR:krb5-authdata-auth-indicator-data}}\index{KRB5\_AUTHDATA\_AUTH\_INDICATOR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_AUTH_INDICATOR:KRB5_AUTHDATA_AUTH_INDICATOR}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_AUTH\_INDICATOR}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_AUTH\_INDICATOR}
-&
-\sphinxcode{97}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_CAMMAC}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_CAMMAC:krb5-authdata-cammac}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_CAMMAC::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_CAMMAC:krb5-authdata-cammac-data}}\index{KRB5\_AUTHDATA\_CAMMAC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_CAMMAC:KRB5_AUTHDATA_CAMMAC}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_CAMMAC}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_CAMMAC}
-&
-\sphinxcode{96}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_ETYPE\_NEGOTIATION}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION:krb5-authdata-etype-negotiation}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION:krb5-authdata-etype-negotiation-data}}\index{KRB5\_AUTHDATA\_ETYPE\_NEGOTIATION (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_ETYPE_NEGOTIATION:KRB5_AUTHDATA_ETYPE_NEGOTIATION}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_ETYPE\_NEGOTIATION}}
-\end{fulllineitems}
-
-
-RFC 4537.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_ETYPE\_NEGOTIATION}
-&
-\sphinxcode{129}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_FX\_ARMOR}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR:krb5-authdata-fx-armor}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR:krb5-authdata-fx-armor-data}}\index{KRB5\_AUTHDATA\_FX\_ARMOR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_FX_ARMOR:KRB5_AUTHDATA_FX_ARMOR}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_FX\_ARMOR}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_FX\_ARMOR}
-&
-\sphinxcode{71}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_IF\_RELEVANT}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT:krb5-authdata-if-relevant-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT:krb5-authdata-if-relevant}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT::doc}}\index{KRB5\_AUTHDATA\_IF\_RELEVANT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_IF_RELEVANT:KRB5_AUTHDATA_IF_RELEVANT}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_IF\_RELEVANT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_IF\_RELEVANT}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_INITIAL\_VERIFIED\_CAS}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS:krb5-authdata-initial-verified-cas-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS:krb5-authdata-initial-verified-cas}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS::doc}}\index{KRB5\_AUTHDATA\_INITIAL\_VERIFIED\_CAS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_INITIAL_VERIFIED_CAS:KRB5_AUTHDATA_INITIAL_VERIFIED_CAS}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_INITIAL\_VERIFIED\_CAS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_INITIAL\_VERIFIED\_CAS}
-&
-\sphinxcode{9}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_KDC\_ISSUED}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED:krb5-authdata-kdc-issued-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED:krb5-authdata-kdc-issued}}\index{KRB5\_AUTHDATA\_KDC\_ISSUED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_KDC_ISSUED:KRB5_AUTHDATA_KDC_ISSUED}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_KDC\_ISSUED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_KDC\_ISSUED}
-&
-\sphinxcode{4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_MANDATORY\_FOR\_KDC}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC:krb5-authdata-mandatory-for-kdc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC:krb5-authdata-mandatory-for-kdc-data}}\index{KRB5\_AUTHDATA\_MANDATORY\_FOR\_KDC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_MANDATORY_FOR_KDC:KRB5_AUTHDATA_MANDATORY_FOR_KDC}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_MANDATORY\_FOR\_KDC}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_MANDATORY\_FOR\_KDC}
-&
-\sphinxcode{8}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_OSF\_DCE}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE:krb5-authdata-osf-dce-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE:krb5-authdata-osf-dce}}\index{KRB5\_AUTHDATA\_OSF\_DCE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_OSF_DCE:KRB5_AUTHDATA_OSF_DCE}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_OSF\_DCE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_OSF\_DCE}
-&
-\sphinxcode{64}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_SESAME}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_SESAME:krb5-authdata-sesame}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_SESAME::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_SESAME:krb5-authdata-sesame-data}}\index{KRB5\_AUTHDATA\_SESAME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_SESAME:KRB5_AUTHDATA_SESAME}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_SESAME}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_SESAME}
-&
-\sphinxcode{65}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_SIGNTICKET}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET:krb5-authdata-signticket-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET:krb5-authdata-signticket}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET::doc}}\index{KRB5\_AUTHDATA\_SIGNTICKET (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_SIGNTICKET:KRB5_AUTHDATA_SIGNTICKET}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_SIGNTICKET}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_SIGNTICKET}
-&
-\sphinxcode{512}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTHDATA\_WIN2K\_PAC}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC:krb5-authdata-win2k-pac-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC:krb5-authdata-win2k-pac}}\index{KRB5\_AUTHDATA\_WIN2K\_PAC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTHDATA_WIN2K_PAC:KRB5_AUTHDATA_WIN2K_PAC}}\pysigline{\sphinxbfcode{KRB5\_AUTHDATA\_WIN2K\_PAC}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTHDATA\_WIN2K\_PAC}
-&
-\sphinxcode{128}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:krb5-auth-context-do-sequence-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:krb5-auth-context-do-sequence}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE::doc}}\index{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_SEQUENCE:KRB5_AUTH_CONTEXT_DO_SEQUENCE}}\pysigline{\sphinxbfcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}}
-\end{fulllineitems}
-
-
-Prevent replays with sequence numbers.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_SEQUENCE}
-&
-\sphinxcode{0x00000004}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTH\_CONTEXT\_DO\_TIME}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:krb5-auth-context-do-time-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:krb5-auth-context-do-time}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME::doc}}\index{KRB5\_AUTH\_CONTEXT\_DO\_TIME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_DO_TIME:KRB5_AUTH_CONTEXT_DO_TIME}}\pysigline{\sphinxbfcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}}
-\end{fulllineitems}
-
-
-Prevent replays with timestamps and replay cache.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTH\_CONTEXT\_DO\_TIME}
-&
-\sphinxcode{0x00000001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTH\_CONTEXT\_GENERATE\_LOCAL\_ADDR}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR:krb5-auth-context-generate-local-addr}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR:krb5-auth-context-generate-local-addr-data}}\index{KRB5\_AUTH\_CONTEXT\_GENERATE\_LOCAL\_ADDR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR:KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR}}\pysigline{\sphinxbfcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_LOCAL\_ADDR}}
-\end{fulllineitems}
-
-
-Generate the local network address.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_LOCAL\_ADDR}
-&
-\sphinxcode{0x00000001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTH\_CONTEXT\_GENERATE\_LOCAL\_FULL\_ADDR}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR:krb5-auth-context-generate-local-full-addr}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR:krb5-auth-context-generate-local-full-addr-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR::doc}}\index{KRB5\_AUTH\_CONTEXT\_GENERATE\_LOCAL\_FULL\_ADDR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR:KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR}}\pysigline{\sphinxbfcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_LOCAL\_FULL\_ADDR}}
-\end{fulllineitems}
-
-
-Generate the local network address and the local port.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_LOCAL\_FULL\_ADDR}
-&
-\sphinxcode{0x00000004}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTH\_CONTEXT\_GENERATE\_REMOTE\_ADDR}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR:krb5-auth-context-generate-remote-addr-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR:krb5-auth-context-generate-remote-addr}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR::doc}}\index{KRB5\_AUTH\_CONTEXT\_GENERATE\_REMOTE\_ADDR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR:KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR}}\pysigline{\sphinxbfcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_REMOTE\_ADDR}}
-\end{fulllineitems}
-
-
-Generate the remote network address.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_REMOTE\_ADDR}
-&
-\sphinxcode{0x00000002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTH\_CONTEXT\_GENERATE\_REMOTE\_FULL\_ADDR}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR:krb5-auth-context-generate-remote-full-addr}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR:krb5-auth-context-generate-remote-full-addr-data}}\index{KRB5\_AUTH\_CONTEXT\_GENERATE\_REMOTE\_FULL\_ADDR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR:KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR}}\pysigline{\sphinxbfcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_REMOTE\_FULL\_ADDR}}
-\end{fulllineitems}
-
-
-Generate the remote network address and the remote port.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTH\_CONTEXT\_GENERATE\_REMOTE\_FULL\_ADDR}
-&
-\sphinxcode{0x00000008}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTH\_CONTEXT\_PERMIT\_ALL}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL:krb5-auth-context-permit-all}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL:krb5-auth-context-permit-all-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL::doc}}\index{KRB5\_AUTH\_CONTEXT\_PERMIT\_ALL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_PERMIT_ALL:KRB5_AUTH_CONTEXT_PERMIT_ALL}}\pysigline{\sphinxbfcode{KRB5\_AUTH\_CONTEXT\_PERMIT\_ALL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTH\_CONTEXT\_PERMIT\_ALL}
-&
-\sphinxcode{0x00000010}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:krb5-auth-context-ret-sequence}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:krb5-auth-context-ret-sequence-data}}\index{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_SEQUENCE:KRB5_AUTH_CONTEXT_RET_SEQUENCE}}\pysigline{\sphinxbfcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}}
-\end{fulllineitems}
-
-
-Save sequence numbers for application.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE}
-&
-\sphinxcode{0x00000008}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTH\_CONTEXT\_RET\_TIME}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:krb5-auth-context-ret-time}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:krb5-auth-context-ret-time-data}}\index{KRB5\_AUTH\_CONTEXT\_RET\_TIME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_RET_TIME:KRB5_AUTH_CONTEXT_RET_TIME}}\pysigline{\sphinxbfcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}}
-\end{fulllineitems}
-
-
-Save timestamps for application.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTH\_CONTEXT\_RET\_TIME}
-&
-\sphinxcode{0x00000002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_AUTH\_CONTEXT\_USE\_SUBKEY}
-\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY::doc}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY:krb5-auth-context-use-subkey-data}}\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY:krb5-auth-context-use-subkey}}\index{KRB5\_AUTH\_CONTEXT\_USE\_SUBKEY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_AUTH_CONTEXT_USE_SUBKEY:KRB5_AUTH_CONTEXT_USE_SUBKEY}}\pysigline{\sphinxbfcode{KRB5\_AUTH\_CONTEXT\_USE\_SUBKEY}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_AUTH\_CONTEXT\_USE\_SUBKEY}
-&
-\sphinxcode{0x00000020}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_CRED}
-\label{\detokenize{appdev/refs/macros/KRB5_CRED:krb5-cred-data}}\label{\detokenize{appdev/refs/macros/KRB5_CRED::doc}}\label{\detokenize{appdev/refs/macros/KRB5_CRED:krb5-cred}}\index{KRB5\_CRED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_CRED:KRB5_CRED}}\pysigline{\sphinxbfcode{KRB5\_CRED}}
-\end{fulllineitems}
-
-
-Cred forwarding message.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_CRED}
-&
-\sphinxcode{((krb5\_msgtype)22)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_CRYPTO\_TYPE\_CHECKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM:krb5-crypto-type-checksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM:krb5-crypto-type-checksum}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM::doc}}\index{KRB5\_CRYPTO\_TYPE\_CHECKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_CHECKSUM:KRB5_CRYPTO_TYPE_CHECKSUM}}\pysigline{\sphinxbfcode{KRB5\_CRYPTO\_TYPE\_CHECKSUM}}
-\end{fulllineitems}
-
-
-{[}out{]} checksum for MIC
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_CRYPTO\_TYPE\_CHECKSUM}
-&
-\sphinxcode{6}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_CRYPTO\_TYPE\_DATA}
-\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA::doc}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA:krb5-crypto-type-data}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA:krb5-crypto-type-data-data}}\index{KRB5\_CRYPTO\_TYPE\_DATA (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_DATA:KRB5_CRYPTO_TYPE_DATA}}\pysigline{\sphinxbfcode{KRB5\_CRYPTO\_TYPE\_DATA}}
-\end{fulllineitems}
-
-
-{[}in, out{]} plaintext
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_CRYPTO\_TYPE\_DATA}
-&
-\sphinxcode{2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_CRYPTO\_TYPE\_EMPTY}
-\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY::doc}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY:krb5-crypto-type-empty}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY:krb5-crypto-type-empty-data}}\index{KRB5\_CRYPTO\_TYPE\_EMPTY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_EMPTY:KRB5_CRYPTO_TYPE_EMPTY}}\pysigline{\sphinxbfcode{KRB5\_CRYPTO\_TYPE\_EMPTY}}
-\end{fulllineitems}
-
-
-{[}in{]} ignored
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_CRYPTO\_TYPE\_EMPTY}
-&
-\sphinxcode{0}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_CRYPTO\_TYPE\_HEADER}
-\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER:krb5-crypto-type-header}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER:krb5-crypto-type-header-data}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER::doc}}\index{KRB5\_CRYPTO\_TYPE\_HEADER (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_HEADER:KRB5_CRYPTO_TYPE_HEADER}}\pysigline{\sphinxbfcode{KRB5\_CRYPTO\_TYPE\_HEADER}}
-\end{fulllineitems}
-
-
-{[}out{]} header
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_CRYPTO\_TYPE\_HEADER}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_CRYPTO\_TYPE\_PADDING}
-\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING::doc}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING:krb5-crypto-type-padding-data}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING:krb5-crypto-type-padding}}\index{KRB5\_CRYPTO\_TYPE\_PADDING (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_PADDING:KRB5_CRYPTO_TYPE_PADDING}}\pysigline{\sphinxbfcode{KRB5\_CRYPTO\_TYPE\_PADDING}}
-\end{fulllineitems}
-
-
-{[}out{]} padding
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_CRYPTO\_TYPE\_PADDING}
-&
-\sphinxcode{4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_CRYPTO\_TYPE\_SIGN\_ONLY}
-\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY:krb5-crypto-type-sign-only}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY:krb5-crypto-type-sign-only-data}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY::doc}}\index{KRB5\_CRYPTO\_TYPE\_SIGN\_ONLY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_SIGN_ONLY:KRB5_CRYPTO_TYPE_SIGN_ONLY}}\pysigline{\sphinxbfcode{KRB5\_CRYPTO\_TYPE\_SIGN\_ONLY}}
-\end{fulllineitems}
-
-
-{[}in{]} associated data
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_CRYPTO\_TYPE\_SIGN\_ONLY}
-&
-\sphinxcode{3}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_CRYPTO\_TYPE\_STREAM}
-\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM:krb5-crypto-type-stream-data}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM:krb5-crypto-type-stream}}\index{KRB5\_CRYPTO\_TYPE\_STREAM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_STREAM:KRB5_CRYPTO_TYPE_STREAM}}\pysigline{\sphinxbfcode{KRB5\_CRYPTO\_TYPE\_STREAM}}
-\end{fulllineitems}
-
-
-{[}in{]} entire message without decomposing the structure into header, data and trailer buffers
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_CRYPTO\_TYPE\_STREAM}
-&
-\sphinxcode{7}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_CRYPTO\_TYPE\_TRAILER}
-\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER:krb5-crypto-type-trailer}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER:krb5-crypto-type-trailer-data}}\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER::doc}}\index{KRB5\_CRYPTO\_TYPE\_TRAILER (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_CRYPTO_TYPE_TRAILER:KRB5_CRYPTO_TYPE_TRAILER}}\pysigline{\sphinxbfcode{KRB5\_CRYPTO\_TYPE\_TRAILER}}
-\end{fulllineitems}
-
-
-{[}out{]} checksum for encrypt
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_CRYPTO\_TYPE\_TRAILER}
-&
-\sphinxcode{5}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_CYBERSAFE\_SECUREID}
-\label{\detokenize{appdev/refs/macros/KRB5_CYBERSAFE_SECUREID:krb5-cybersafe-secureid}}\label{\detokenize{appdev/refs/macros/KRB5_CYBERSAFE_SECUREID::doc}}\label{\detokenize{appdev/refs/macros/KRB5_CYBERSAFE_SECUREID:krb5-cybersafe-secureid-data}}\index{KRB5\_CYBERSAFE\_SECUREID (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_CYBERSAFE_SECUREID:KRB5_CYBERSAFE_SECUREID}}\pysigline{\sphinxbfcode{KRB5\_CYBERSAFE\_SECUREID}}
-\end{fulllineitems}
-
-
-Cybersafe.
-
-RFC 4120
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_CYBERSAFE\_SECUREID}
-&
-\sphinxcode{9}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_DOMAIN\_X500\_COMPRESS}
-\label{\detokenize{appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS::doc}}\label{\detokenize{appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS:krb5-domain-x500-compress}}\label{\detokenize{appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS:krb5-domain-x500-compress-data}}\index{KRB5\_DOMAIN\_X500\_COMPRESS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_DOMAIN_X500_COMPRESS:KRB5_DOMAIN_X500_COMPRESS}}\pysigline{\sphinxbfcode{KRB5\_DOMAIN\_X500\_COMPRESS}}
-\end{fulllineitems}
-
-
-Transited encoding types.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_DOMAIN\_X500\_COMPRESS}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_ENCPADATA\_REQ\_ENC\_PA\_REP}
-\label{\detokenize{appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP:krb5-encpadata-req-enc-pa-rep}}\label{\detokenize{appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP:krb5-encpadata-req-enc-pa-rep-data}}\label{\detokenize{appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP::doc}}\index{KRB5\_ENCPADATA\_REQ\_ENC\_PA\_REP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_ENCPADATA_REQ_ENC_PA_REP:KRB5_ENCPADATA_REQ_ENC_PA_REP}}\pysigline{\sphinxbfcode{KRB5\_ENCPADATA\_REQ\_ENC\_PA\_REP}}
-\end{fulllineitems}
-
-
-RFC 6806.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_ENCPADATA\_REQ\_ENC\_PA\_REP}
-&
-\sphinxcode{149}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_ERROR}
-\label{\detokenize{appdev/refs/macros/KRB5_ERROR:krb5-error-data}}\label{\detokenize{appdev/refs/macros/KRB5_ERROR:krb5-error}}\label{\detokenize{appdev/refs/macros/KRB5_ERROR::doc}}\index{KRB5\_ERROR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_ERROR:KRB5_ERROR}}\pysigline{\sphinxbfcode{KRB5\_ERROR}}
-\end{fulllineitems}
-
-
-Error response.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_ERROR}
-&
-\sphinxcode{((krb5\_msgtype)30)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_FAST\_REQUIRED}
-\label{\detokenize{appdev/refs/macros/KRB5_FAST_REQUIRED:krb5-fast-required}}\label{\detokenize{appdev/refs/macros/KRB5_FAST_REQUIRED:krb5-fast-required-data}}\label{\detokenize{appdev/refs/macros/KRB5_FAST_REQUIRED::doc}}\index{KRB5\_FAST\_REQUIRED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_FAST_REQUIRED:KRB5_FAST_REQUIRED}}\pysigline{\sphinxbfcode{KRB5\_FAST\_REQUIRED}}
-\end{fulllineitems}
-
-
-Require KDC to support FAST.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_FAST\_REQUIRED}
-&
-\sphinxcode{0x0001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GC\_CACHED}
-\label{\detokenize{appdev/refs/macros/KRB5_GC_CACHED:krb5-gc-cached}}\label{\detokenize{appdev/refs/macros/KRB5_GC_CACHED:krb5-gc-cached-data}}\label{\detokenize{appdev/refs/macros/KRB5_GC_CACHED::doc}}\index{KRB5\_GC\_CACHED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GC_CACHED:KRB5_GC_CACHED}}\pysigline{\sphinxbfcode{KRB5\_GC\_CACHED}}
-\end{fulllineitems}
-
-
-Want cached ticket only.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GC\_CACHED}
-&
-\sphinxcode{2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GC\_CANONICALIZE}
-\label{\detokenize{appdev/refs/macros/KRB5_GC_CANONICALIZE:krb5-gc-canonicalize-data}}\label{\detokenize{appdev/refs/macros/KRB5_GC_CANONICALIZE:krb5-gc-canonicalize}}\label{\detokenize{appdev/refs/macros/KRB5_GC_CANONICALIZE::doc}}\index{KRB5\_GC\_CANONICALIZE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GC_CANONICALIZE:KRB5_GC_CANONICALIZE}}\pysigline{\sphinxbfcode{KRB5\_GC\_CANONICALIZE}}
-\end{fulllineitems}
-
-
-Set canonicalize KDC option.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GC\_CANONICALIZE}
-&
-\sphinxcode{4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GC\_CONSTRAINED\_DELEGATION}
-\label{\detokenize{appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION:krb5-gc-constrained-delegation}}\label{\detokenize{appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION:krb5-gc-constrained-delegation-data}}\label{\detokenize{appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION::doc}}\index{KRB5\_GC\_CONSTRAINED\_DELEGATION (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GC_CONSTRAINED_DELEGATION:KRB5_GC_CONSTRAINED_DELEGATION}}\pysigline{\sphinxbfcode{KRB5\_GC\_CONSTRAINED\_DELEGATION}}
-\end{fulllineitems}
-
-
-Constrained delegation.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GC\_CONSTRAINED\_DELEGATION}
-&
-\sphinxcode{64}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GC\_FORWARDABLE}
-\label{\detokenize{appdev/refs/macros/KRB5_GC_FORWARDABLE:krb5-gc-forwardable-data}}\label{\detokenize{appdev/refs/macros/KRB5_GC_FORWARDABLE:krb5-gc-forwardable}}\label{\detokenize{appdev/refs/macros/KRB5_GC_FORWARDABLE::doc}}\index{KRB5\_GC\_FORWARDABLE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GC_FORWARDABLE:KRB5_GC_FORWARDABLE}}\pysigline{\sphinxbfcode{KRB5\_GC\_FORWARDABLE}}
-\end{fulllineitems}
-
-
-Acquire forwardable tickets.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GC\_FORWARDABLE}
-&
-\sphinxcode{16}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GC\_NO\_STORE}
-\label{\detokenize{appdev/refs/macros/KRB5_GC_NO_STORE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_GC_NO_STORE:krb5-gc-no-store}}\label{\detokenize{appdev/refs/macros/KRB5_GC_NO_STORE:krb5-gc-no-store-data}}\index{KRB5\_GC\_NO\_STORE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GC_NO_STORE:KRB5_GC_NO_STORE}}\pysigline{\sphinxbfcode{KRB5\_GC\_NO\_STORE}}
-\end{fulllineitems}
-
-
-Do not store in credential cache.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GC\_NO\_STORE}
-&
-\sphinxcode{8}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GC\_NO\_TRANSIT\_CHECK}
-\label{\detokenize{appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK:krb5-gc-no-transit-check-data}}\label{\detokenize{appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK:krb5-gc-no-transit-check}}\label{\detokenize{appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK::doc}}\index{KRB5\_GC\_NO\_TRANSIT\_CHECK (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GC_NO_TRANSIT_CHECK:KRB5_GC_NO_TRANSIT_CHECK}}\pysigline{\sphinxbfcode{KRB5\_GC\_NO\_TRANSIT\_CHECK}}
-\end{fulllineitems}
-
-
-Disable transited check.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GC\_NO\_TRANSIT\_CHECK}
-&
-\sphinxcode{32}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GC\_USER\_USER}
-\label{\detokenize{appdev/refs/macros/KRB5_GC_USER_USER::doc}}\label{\detokenize{appdev/refs/macros/KRB5_GC_USER_USER:krb5-gc-user-user}}\label{\detokenize{appdev/refs/macros/KRB5_GC_USER_USER:krb5-gc-user-user-data}}\index{KRB5\_GC\_USER\_USER (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GC_USER_USER:KRB5_GC_USER_USER}}\pysigline{\sphinxbfcode{KRB5\_GC\_USER\_USER}}
-\end{fulllineitems}
-
-
-Want user-user ticket.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GC\_USER\_USER}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_ADDRESS\_LIST}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST:krb5-get-init-creds-opt-address-list}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST::doc}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST:krb5-get-init-creds-opt-address-list-data}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_ADDRESS\_LIST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST:KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_ADDRESS\_LIST}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_ADDRESS\_LIST}
-&
-\sphinxcode{0x0020}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_ANONYMOUS}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS:krb5-get-init-creds-opt-anonymous-data}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS::doc}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS:krb5-get-init-creds-opt-anonymous}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_ANONYMOUS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ANONYMOUS:KRB5_GET_INIT_CREDS_OPT_ANONYMOUS}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_ANONYMOUS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_ANONYMOUS}
-&
-\sphinxcode{0x0400}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_CANONICALIZE}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE:krb5-get-init-creds-opt-canonicalize-data}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE:krb5-get-init-creds-opt-canonicalize}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_CANONICALIZE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CANONICALIZE:KRB5_GET_INIT_CREDS_OPT_CANONICALIZE}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_CANONICALIZE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_CANONICALIZE}
-&
-\sphinxcode{0x0200}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_CHG\_PWD\_PRMPT}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT::doc}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT:krb5-get-init-creds-opt-chg-pwd-prmpt}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT:krb5-get-init-creds-opt-chg-pwd-prmpt-data}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_CHG\_PWD\_PRMPT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT:KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_CHG\_PWD\_PRMPT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_CHG\_PWD\_PRMPT}
-&
-\sphinxcode{0x0100}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_ETYPE\_LIST}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST:krb5-get-init-creds-opt-etype-list-data}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST:krb5-get-init-creds-opt-etype-list}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST::doc}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_ETYPE\_LIST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST:KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_ETYPE\_LIST}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_ETYPE\_LIST}
-&
-\sphinxcode{0x0010}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_FORWARDABLE}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE:krb5-get-init-creds-opt-forwardable}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE:krb5-get-init-creds-opt-forwardable-data}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_FORWARDABLE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_FORWARDABLE:KRB5_GET_INIT_CREDS_OPT_FORWARDABLE}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_FORWARDABLE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_FORWARDABLE}
-&
-\sphinxcode{0x0004}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_PREAUTH\_LIST}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST:krb5-get-init-creds-opt-preauth-list}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST:krb5-get-init-creds-opt-preauth-list-data}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST::doc}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_PREAUTH\_LIST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST:KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_PREAUTH\_LIST}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_PREAUTH\_LIST}
-&
-\sphinxcode{0x0040}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_PROXIABLE}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE:krb5-get-init-creds-opt-proxiable-data}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE:krb5-get-init-creds-opt-proxiable}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE::doc}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_PROXIABLE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_PROXIABLE:KRB5_GET_INIT_CREDS_OPT_PROXIABLE}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_PROXIABLE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_PROXIABLE}
-&
-\sphinxcode{0x0008}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_RENEW\_LIFE}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE:krb5-get-init-creds-opt-renew-life-data}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE:krb5-get-init-creds-opt-renew-life}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_RENEW\_LIFE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE:KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_RENEW\_LIFE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_RENEW\_LIFE}
-&
-\sphinxcode{0x0002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_SALT}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT:krb5-get-init-creds-opt-salt-data}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT:krb5-get-init-creds-opt-salt}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT::doc}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_SALT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_SALT:KRB5_GET_INIT_CREDS_OPT_SALT}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_SALT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_SALT}
-&
-\sphinxcode{0x0080}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_GET\_INIT\_CREDS\_OPT\_TKT\_LIFE}
-\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE:krb5-get-init-creds-opt-tkt-life-data}}\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE:krb5-get-init-creds-opt-tkt-life}}\index{KRB5\_GET\_INIT\_CREDS\_OPT\_TKT\_LIFE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_GET_INIT_CREDS_OPT_TKT_LIFE:KRB5_GET_INIT_CREDS_OPT_TKT_LIFE}}\pysigline{\sphinxbfcode{KRB5\_GET\_INIT\_CREDS\_OPT\_TKT\_LIFE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_GET\_INIT\_CREDS\_OPT\_TKT\_LIFE}
-&
-\sphinxcode{0x0001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_INIT\_CONTEXT\_SECURE}
-\label{\detokenize{appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE:krb5-init-context-secure}}\label{\detokenize{appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE:krb5-init-context-secure-data}}\index{KRB5\_INIT\_CONTEXT\_SECURE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_INIT_CONTEXT_SECURE:KRB5_INIT_CONTEXT_SECURE}}\pysigline{\sphinxbfcode{KRB5\_INIT\_CONTEXT\_SECURE}}
-\end{fulllineitems}
-
-
-Use secure context configuration.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_INIT\_CONTEXT\_SECURE}
-&
-\sphinxcode{0x1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_INIT\_CONTEXT\_KDC}
-\label{\detokenize{appdev/refs/macros/KRB5_INIT_CONTEXT_KDC:krb5-init-context-kdc}}\label{\detokenize{appdev/refs/macros/KRB5_INIT_CONTEXT_KDC::doc}}\label{\detokenize{appdev/refs/macros/KRB5_INIT_CONTEXT_KDC:krb5-init-context-kdc-data}}\index{KRB5\_INIT\_CONTEXT\_KDC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_INIT_CONTEXT_KDC:KRB5_INIT_CONTEXT_KDC}}\pysigline{\sphinxbfcode{KRB5\_INIT\_CONTEXT\_KDC}}
-\end{fulllineitems}
-
-
-Use KDC configuration if available.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_INIT\_CONTEXT\_KDC}
-&
-\sphinxcode{0x2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_INIT\_CREDS\_STEP\_FLAG\_CONTINUE}
-\label{\detokenize{appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE:krb5-init-creds-step-flag-continue-data}}\label{\detokenize{appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE:krb5-init-creds-step-flag-continue}}\label{\detokenize{appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE::doc}}\index{KRB5\_INIT\_CREDS\_STEP\_FLAG\_CONTINUE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_INIT_CREDS_STEP_FLAG_CONTINUE:KRB5_INIT_CREDS_STEP_FLAG_CONTINUE}}\pysigline{\sphinxbfcode{KRB5\_INIT\_CREDS\_STEP\_FLAG\_CONTINUE}}
-\end{fulllineitems}
-
-
-More responses needed.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_INIT\_CREDS\_STEP\_FLAG\_CONTINUE}
-&
-\sphinxcode{0x1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_INT16\_MAX}
-\label{\detokenize{appdev/refs/macros/KRB5_INT16_MAX:krb5-int16-max-data}}\label{\detokenize{appdev/refs/macros/KRB5_INT16_MAX::doc}}\label{\detokenize{appdev/refs/macros/KRB5_INT16_MAX:krb5-int16-max}}\index{KRB5\_INT16\_MAX (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_INT16_MAX:KRB5_INT16_MAX}}\pysigline{\sphinxbfcode{KRB5\_INT16\_MAX}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_INT16\_MAX}
-&
-\sphinxcode{65535}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_INT16\_MIN}
-\label{\detokenize{appdev/refs/macros/KRB5_INT16_MIN:krb5-int16-min-data}}\label{\detokenize{appdev/refs/macros/KRB5_INT16_MIN:krb5-int16-min}}\label{\detokenize{appdev/refs/macros/KRB5_INT16_MIN::doc}}\index{KRB5\_INT16\_MIN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_INT16_MIN:KRB5_INT16_MIN}}\pysigline{\sphinxbfcode{KRB5\_INT16\_MIN}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_INT16\_MIN}
-&
-\sphinxcode{(-KRB5\_INT16\_MAX-1)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_INT32\_MAX}
-\label{\detokenize{appdev/refs/macros/KRB5_INT32_MAX:krb5-int32-max-data}}\label{\detokenize{appdev/refs/macros/KRB5_INT32_MAX:krb5-int32-max}}\label{\detokenize{appdev/refs/macros/KRB5_INT32_MAX::doc}}\index{KRB5\_INT32\_MAX (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_INT32_MAX:KRB5_INT32_MAX}}\pysigline{\sphinxbfcode{KRB5\_INT32\_MAX}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_INT32\_MAX}
-&
-\sphinxcode{2147483647}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_INT32\_MIN}
-\label{\detokenize{appdev/refs/macros/KRB5_INT32_MIN:krb5-int32-min-data}}\label{\detokenize{appdev/refs/macros/KRB5_INT32_MIN::doc}}\label{\detokenize{appdev/refs/macros/KRB5_INT32_MIN:krb5-int32-min}}\index{KRB5\_INT32\_MIN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_INT32_MIN:KRB5_INT32_MIN}}\pysigline{\sphinxbfcode{KRB5\_INT32\_MIN}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_INT32\_MIN}
-&
-\sphinxcode{(-KRB5\_INT32\_MAX-1)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_AD\_ITE}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE:krb5-keyusage-ad-ite-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE:krb5-keyusage-ad-ite}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE::doc}}\index{KRB5\_KEYUSAGE\_AD\_ITE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_ITE:KRB5_KEYUSAGE_AD_ITE}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_AD\_ITE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_AD\_ITE}
-&
-\sphinxcode{21}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_AD\_KDCISSUED\_CKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM:krb5-keyusage-ad-kdcissued-cksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM:krb5-keyusage-ad-kdcissued-cksum}}\index{KRB5\_KEYUSAGE\_AD\_KDCISSUED\_CKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM:KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_AD\_KDCISSUED\_CKSUM}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_AD\_KDCISSUED\_CKSUM}
-&
-\sphinxcode{19}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_AD\_MTE}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE:krb5-keyusage-ad-mte-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE:krb5-keyusage-ad-mte}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE::doc}}\index{KRB5\_KEYUSAGE\_AD\_MTE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_MTE:KRB5_KEYUSAGE_AD_MTE}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_AD\_MTE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_AD\_MTE}
-&
-\sphinxcode{20}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_AD\_SIGNEDPATH}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH:krb5-keyusage-ad-signedpath-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH:krb5-keyusage-ad-signedpath}}\index{KRB5\_KEYUSAGE\_AD\_SIGNEDPATH (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AD_SIGNEDPATH:KRB5_KEYUSAGE_AD_SIGNEDPATH}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_AD\_SIGNEDPATH}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_AD\_SIGNEDPATH}
-&
-\sphinxcode{-21}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_APP\_DATA\_CKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM:krb5-keyusage-app-data-cksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM:krb5-keyusage-app-data-cksum}}\index{KRB5\_KEYUSAGE\_APP\_DATA\_CKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_CKSUM:KRB5_KEYUSAGE_APP_DATA_CKSUM}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_APP\_DATA\_CKSUM}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_APP\_DATA\_CKSUM}
-&
-\sphinxcode{17}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_APP\_DATA\_ENCRYPT}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT:krb5-keyusage-app-data-encrypt}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT:krb5-keyusage-app-data-encrypt-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT::doc}}\index{KRB5\_KEYUSAGE\_APP\_DATA\_ENCRYPT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_APP_DATA_ENCRYPT:KRB5_KEYUSAGE_APP_DATA_ENCRYPT}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_APP\_DATA\_ENCRYPT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_APP\_DATA\_ENCRYPT}
-&
-\sphinxcode{16}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_AP\_REP\_ENCPART}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART:krb5-keyusage-ap-rep-encpart}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART:krb5-keyusage-ap-rep-encpart-data}}\index{KRB5\_KEYUSAGE\_AP\_REP\_ENCPART (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REP_ENCPART:KRB5_KEYUSAGE_AP_REP_ENCPART}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_AP\_REP\_ENCPART}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_AP\_REP\_ENCPART}
-&
-\sphinxcode{12}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_AP\_REQ\_AUTH}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH:krb5-keyusage-ap-req-auth}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH:krb5-keyusage-ap-req-auth-data}}\index{KRB5\_KEYUSAGE\_AP\_REQ\_AUTH (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH:KRB5_KEYUSAGE_AP_REQ_AUTH}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_AP\_REQ\_AUTH}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_AP\_REQ\_AUTH}
-&
-\sphinxcode{11}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_AP\_REQ\_AUTH\_CKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM:krb5-keyusage-ap-req-auth-cksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM:krb5-keyusage-ap-req-auth-cksum}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM::doc}}\index{KRB5\_KEYUSAGE\_AP\_REQ\_AUTH\_CKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM:KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_AP\_REQ\_AUTH\_CKSUM}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_AP\_REQ\_AUTH\_CKSUM}
-&
-\sphinxcode{10}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_AS\_REP\_ENCPART}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART:krb5-keyusage-as-rep-encpart-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART:krb5-keyusage-as-rep-encpart}}\index{KRB5\_KEYUSAGE\_AS\_REP\_ENCPART (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REP_ENCPART:KRB5_KEYUSAGE_AS_REP_ENCPART}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_AS\_REP\_ENCPART}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_AS\_REP\_ENCPART}
-&
-\sphinxcode{3}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_AS\_REQ}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ:krb5-keyusage-as-req-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ:krb5-keyusage-as-req}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ::doc}}\index{KRB5\_KEYUSAGE\_AS\_REQ (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ:KRB5_KEYUSAGE_AS_REQ}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_AS\_REQ}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_AS\_REQ}
-&
-\sphinxcode{56}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_AS\_REQ\_PA\_ENC\_TS}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS:krb5-keyusage-as-req-pa-enc-ts-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS:krb5-keyusage-as-req-pa-enc-ts}}\index{KRB5\_KEYUSAGE\_AS\_REQ\_PA\_ENC\_TS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS:KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_AS\_REQ\_PA\_ENC\_TS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_AS\_REQ\_PA\_ENC\_TS}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_CAMMAC}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC:krb5-keyusage-cammac}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC:krb5-keyusage-cammac-data}}\index{KRB5\_KEYUSAGE\_CAMMAC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_CAMMAC:KRB5_KEYUSAGE_CAMMAC}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_CAMMAC}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_CAMMAC}
-&
-\sphinxcode{64}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_ENC\_CHALLENGE\_CLIENT}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT:krb5-keyusage-enc-challenge-client-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT:krb5-keyusage-enc-challenge-client}}\index{KRB5\_KEYUSAGE\_ENC\_CHALLENGE\_CLIENT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT:KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_ENC\_CHALLENGE\_CLIENT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_ENC\_CHALLENGE\_CLIENT}
-&
-\sphinxcode{54}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_ENC\_CHALLENGE\_KDC}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC:krb5-keyusage-enc-challenge-kdc-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC:krb5-keyusage-enc-challenge-kdc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC::doc}}\index{KRB5\_KEYUSAGE\_ENC\_CHALLENGE\_KDC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_ENC_CHALLENGE_KDC:KRB5_KEYUSAGE_ENC_CHALLENGE_KDC}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_ENC\_CHALLENGE\_KDC}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_ENC\_CHALLENGE\_KDC}
-&
-\sphinxcode{55}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_FAST\_ENC}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC:krb5-keyusage-fast-enc-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC:krb5-keyusage-fast-enc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC::doc}}\index{KRB5\_KEYUSAGE\_FAST\_ENC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_ENC:KRB5_KEYUSAGE_FAST_ENC}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_FAST\_ENC}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_FAST\_ENC}
-&
-\sphinxcode{51}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_FAST\_FINISHED}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED:krb5-keyusage-fast-finished-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED:krb5-keyusage-fast-finished}}\index{KRB5\_KEYUSAGE\_FAST\_FINISHED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_FINISHED:KRB5_KEYUSAGE_FAST_FINISHED}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_FAST\_FINISHED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_FAST\_FINISHED}
-&
-\sphinxcode{53}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_FAST\_REP}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP:krb5-keyusage-fast-rep-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP:krb5-keyusage-fast-rep}}\index{KRB5\_KEYUSAGE\_FAST\_REP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_REP:KRB5_KEYUSAGE_FAST_REP}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_FAST\_REP}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_FAST\_REP}
-&
-\sphinxcode{52}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_FAST\_REQ\_CHKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM:krb5-keyusage-fast-req-chksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM:krb5-keyusage-fast-req-chksum}}\index{KRB5\_KEYUSAGE\_FAST\_REQ\_CHKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_FAST_REQ_CHKSUM:KRB5_KEYUSAGE_FAST_REQ_CHKSUM}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_FAST\_REQ\_CHKSUM}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_FAST\_REQ\_CHKSUM}
-&
-\sphinxcode{50}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_GSS\_TOK\_MIC}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC:krb5-keyusage-gss-tok-mic}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC:krb5-keyusage-gss-tok-mic-data}}\index{KRB5\_KEYUSAGE\_GSS\_TOK\_MIC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_MIC:KRB5_KEYUSAGE_GSS_TOK_MIC}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_GSS\_TOK\_MIC}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_GSS\_TOK\_MIC}
-&
-\sphinxcode{22}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_GSS\_TOK\_WRAP\_INTEG}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG:krb5-keyusage-gss-tok-wrap-integ}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG:krb5-keyusage-gss-tok-wrap-integ-data}}\index{KRB5\_KEYUSAGE\_GSS\_TOK\_WRAP\_INTEG (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG:KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_GSS\_TOK\_WRAP\_INTEG}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_GSS\_TOK\_WRAP\_INTEG}
-&
-\sphinxcode{23}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_GSS\_TOK\_WRAP\_PRIV}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV:krb5-keyusage-gss-tok-wrap-priv-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV:krb5-keyusage-gss-tok-wrap-priv}}\index{KRB5\_KEYUSAGE\_GSS\_TOK\_WRAP\_PRIV (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV:KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_GSS\_TOK\_WRAP\_PRIV}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_GSS\_TOK\_WRAP\_PRIV}
-&
-\sphinxcode{24}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_IAKERB\_FINISHED}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED:krb5-keyusage-iakerb-finished-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED:krb5-keyusage-iakerb-finished}}\index{KRB5\_KEYUSAGE\_IAKERB\_FINISHED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_IAKERB_FINISHED:KRB5_KEYUSAGE_IAKERB_FINISHED}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_IAKERB\_FINISHED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_IAKERB\_FINISHED}
-&
-\sphinxcode{42}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_KDC\_REP\_TICKET}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET:krb5-keyusage-kdc-rep-ticket-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET:krb5-keyusage-kdc-rep-ticket}}\index{KRB5\_KEYUSAGE\_KDC\_REP\_TICKET (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KDC_REP_TICKET:KRB5_KEYUSAGE_KDC_REP_TICKET}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_KDC\_REP\_TICKET}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_KDC\_REP\_TICKET}
-&
-\sphinxcode{2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_KRB\_CRED\_ENCPART}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART:krb5-keyusage-krb-cred-encpart-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART:krb5-keyusage-krb-cred-encpart}}\index{KRB5\_KEYUSAGE\_KRB\_CRED\_ENCPART (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_CRED_ENCPART:KRB5_KEYUSAGE_KRB_CRED_ENCPART}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_KRB\_CRED\_ENCPART}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_KRB\_CRED\_ENCPART}
-&
-\sphinxcode{14}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_KRB\_ERROR\_CKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM:krb5-keyusage-krb-error-cksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM:krb5-keyusage-krb-error-cksum}}\index{KRB5\_KEYUSAGE\_KRB\_ERROR\_CKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_ERROR_CKSUM:KRB5_KEYUSAGE_KRB_ERROR_CKSUM}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_KRB\_ERROR\_CKSUM}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_KRB\_ERROR\_CKSUM}
-&
-\sphinxcode{18}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_KRB\_PRIV\_ENCPART}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART:krb5-keyusage-krb-priv-encpart}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART:krb5-keyusage-krb-priv-encpart-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART::doc}}\index{KRB5\_KEYUSAGE\_KRB\_PRIV\_ENCPART (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_PRIV_ENCPART:KRB5_KEYUSAGE_KRB_PRIV_ENCPART}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_KRB\_PRIV\_ENCPART}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_KRB\_PRIV\_ENCPART}
-&
-\sphinxcode{13}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_KRB\_SAFE\_CKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM:krb5-keyusage-krb-safe-cksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM:krb5-keyusage-krb-safe-cksum}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM::doc}}\index{KRB5\_KEYUSAGE\_KRB\_SAFE\_CKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_KRB_SAFE_CKSUM:KRB5_KEYUSAGE_KRB_SAFE_CKSUM}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_KRB\_SAFE\_CKSUM}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_KRB\_SAFE\_CKSUM}
-&
-\sphinxcode{15}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_PA\_AS\_FRESHNESS}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS:krb5-keyusage-pa-as-freshness}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS:krb5-keyusage-pa-as-freshness-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS::doc}}\index{KRB5\_KEYUSAGE\_PA\_AS\_FRESHNESS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_AS_FRESHNESS:KRB5_KEYUSAGE_PA_AS_FRESHNESS}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_PA\_AS\_FRESHNESS}}
-\end{fulllineitems}
-
-
-Used for freshness tokens.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_PA\_AS\_FRESHNESS}
-&
-\sphinxcode{514}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_PA\_FX\_COOKIE}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE:krb5-keyusage-pa-fx-cookie}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE:krb5-keyusage-pa-fx-cookie-data}}\index{KRB5\_KEYUSAGE\_PA\_FX\_COOKIE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_FX_COOKIE:KRB5_KEYUSAGE_PA_FX_COOKIE}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_PA\_FX\_COOKIE}}
-\end{fulllineitems}
-
-
-Used for encrypted FAST cookies.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_PA\_FX\_COOKIE}
-&
-\sphinxcode{513}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_PA\_OTP\_REQUEST}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST:krb5-keyusage-pa-otp-request}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST:krb5-keyusage-pa-otp-request-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST::doc}}\index{KRB5\_KEYUSAGE\_PA\_OTP\_REQUEST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_OTP_REQUEST:KRB5_KEYUSAGE_PA_OTP_REQUEST}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_PA\_OTP\_REQUEST}}
-\end{fulllineitems}
-
-
-See RFC 6560 section 4.2.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_PA\_OTP\_REQUEST}
-&
-\sphinxcode{45}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_PA\_PKINIT\_KX}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX:krb5-keyusage-pa-pkinit-kx-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX:krb5-keyusage-pa-pkinit-kx}}\index{KRB5\_KEYUSAGE\_PA\_PKINIT\_KX (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_PKINIT_KX:KRB5_KEYUSAGE_PA_PKINIT_KX}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_PA\_PKINIT\_KX}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_PA\_PKINIT\_KX}
-&
-\sphinxcode{44}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_PA\_S4U\_X509\_USER\_REPLY}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY:krb5-keyusage-pa-s4u-x509-user-reply-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY:krb5-keyusage-pa-s4u-x509-user-reply}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY::doc}}\index{KRB5\_KEYUSAGE\_PA\_S4U\_X509\_USER\_REPLY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY:KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_PA\_S4U\_X509\_USER\_REPLY}}
-\end{fulllineitems}
-
-
-Note conflict with \sphinxcode{KRB5\_KEYUSAGE\_PA\_SAM\_RESPONSE} .
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_PA\_S4U\_X509\_USER\_REPLY}
-&
-\sphinxcode{27}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_PA\_S4U\_X509\_USER\_REQUEST}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST:krb5-keyusage-pa-s4u-x509-user-request}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST:krb5-keyusage-pa-s4u-x509-user-request-data}}\index{KRB5\_KEYUSAGE\_PA\_S4U\_X509\_USER\_REQUEST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST:KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_PA\_S4U\_X509\_USER\_REQUEST}}
-\end{fulllineitems}
-
-
-Note conflict with \sphinxcode{KRB5\_KEYUSAGE\_PA\_SAM\_CHALLENGE\_TRACKID} .
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_PA\_S4U\_X509\_USER\_REQUEST}
-&
-\sphinxcode{26}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_PA\_SAM\_CHALLENGE\_CKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM:krb5-keyusage-pa-sam-challenge-cksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM:krb5-keyusage-pa-sam-challenge-cksum}}\index{KRB5\_KEYUSAGE\_PA\_SAM\_CHALLENGE\_CKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM:KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_PA\_SAM\_CHALLENGE\_CKSUM}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_PA\_SAM\_CHALLENGE\_CKSUM}
-&
-\sphinxcode{25}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_PA\_SAM\_CHALLENGE\_TRACKID}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID:krb5-keyusage-pa-sam-challenge-trackid}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID:krb5-keyusage-pa-sam-challenge-trackid-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID::doc}}\index{KRB5\_KEYUSAGE\_PA\_SAM\_CHALLENGE\_TRACKID (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID:KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_PA\_SAM\_CHALLENGE\_TRACKID}}
-\end{fulllineitems}
-
-
-Note conflict with \sphinxcode{KRB5\_KEYUSAGE\_PA\_S4U\_X509\_USER\_REQUEST} .
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_PA\_SAM\_CHALLENGE\_TRACKID}
-&
-\sphinxcode{26}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_PA\_SAM\_RESPONSE}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE:krb5-keyusage-pa-sam-response-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE:krb5-keyusage-pa-sam-response}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE::doc}}\index{KRB5\_KEYUSAGE\_PA\_SAM\_RESPONSE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_PA_SAM_RESPONSE:KRB5_KEYUSAGE_PA_SAM_RESPONSE}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_PA\_SAM\_RESPONSE}}
-\end{fulllineitems}
-
-
-Note conflict with \sphinxcode{KRB5\_KEYUSAGE\_PA\_S4U\_X509\_USER\_REPLY} .
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_PA\_SAM\_RESPONSE}
-&
-\sphinxcode{27}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_SPAKE}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_SPAKE:krb5-keyusage-spake}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_SPAKE:krb5-keyusage-spake-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_SPAKE::doc}}\index{KRB5\_KEYUSAGE\_SPAKE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_SPAKE:KRB5_KEYUSAGE_SPAKE}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_SPAKE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_SPAKE}
-&
-\sphinxcode{65}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_TGS\_REP\_ENCPART\_SESSKEY}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY:krb5-keyusage-tgs-rep-encpart-sesskey}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY:krb5-keyusage-tgs-rep-encpart-sesskey-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY::doc}}\index{KRB5\_KEYUSAGE\_TGS\_REP\_ENCPART\_SESSKEY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY:KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_TGS\_REP\_ENCPART\_SESSKEY}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_TGS\_REP\_ENCPART\_SESSKEY}
-&
-\sphinxcode{8}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_TGS\_REP\_ENCPART\_SUBKEY}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY:krb5-keyusage-tgs-rep-encpart-subkey-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY:krb5-keyusage-tgs-rep-encpart-subkey}}\index{KRB5\_KEYUSAGE\_TGS\_REP\_ENCPART\_SUBKEY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY:KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_TGS\_REP\_ENCPART\_SUBKEY}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_TGS\_REP\_ENCPART\_SUBKEY}
-&
-\sphinxcode{9}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_TGS\_REQ\_AD\_SESSKEY}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY:krb5-keyusage-tgs-req-ad-sesskey}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY:krb5-keyusage-tgs-req-ad-sesskey-data}}\index{KRB5\_KEYUSAGE\_TGS\_REQ\_AD\_SESSKEY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY:KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_TGS\_REQ\_AD\_SESSKEY}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_TGS\_REQ\_AD\_SESSKEY}
-&
-\sphinxcode{4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_TGS\_REQ\_AD\_SUBKEY}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY:krb5-keyusage-tgs-req-ad-subkey}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY:krb5-keyusage-tgs-req-ad-subkey-data}}\index{KRB5\_KEYUSAGE\_TGS\_REQ\_AD\_SUBKEY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY:KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_TGS\_REQ\_AD\_SUBKEY}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_TGS\_REQ\_AD\_SUBKEY}
-&
-\sphinxcode{5}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_TGS\_REQ\_AUTH}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH:krb5-keyusage-tgs-req-auth}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH:krb5-keyusage-tgs-req-auth-data}}\index{KRB5\_KEYUSAGE\_TGS\_REQ\_AUTH (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH:KRB5_KEYUSAGE_TGS_REQ_AUTH}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_TGS\_REQ\_AUTH}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_TGS\_REQ\_AUTH}
-&
-\sphinxcode{7}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KEYUSAGE\_TGS\_REQ\_AUTH\_CKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM:krb5-keyusage-tgs-req-auth-cksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM:krb5-keyusage-tgs-req-auth-cksum}}\index{KRB5\_KEYUSAGE\_TGS\_REQ\_AUTH\_CKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM:KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM}}\pysigline{\sphinxbfcode{KRB5\_KEYUSAGE\_TGS\_REQ\_AUTH\_CKSUM}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KEYUSAGE\_TGS\_REQ\_AUTH\_CKSUM}
-&
-\sphinxcode{6}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KPASSWD\_ACCESSDENIED}
-\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED:krb5-kpasswd-accessdenied}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED:krb5-kpasswd-accessdenied-data}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED::doc}}\index{KRB5\_KPASSWD\_ACCESSDENIED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_ACCESSDENIED:KRB5_KPASSWD_ACCESSDENIED}}\pysigline{\sphinxbfcode{KRB5\_KPASSWD\_ACCESSDENIED}}
-\end{fulllineitems}
-
-
-Not authorized.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KPASSWD\_ACCESSDENIED}
-&
-\sphinxcode{5}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KPASSWD\_AUTHERROR}
-\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_AUTHERROR:krb5-kpasswd-autherror-data}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_AUTHERROR:krb5-kpasswd-autherror}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_AUTHERROR::doc}}\index{KRB5\_KPASSWD\_AUTHERROR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_AUTHERROR:KRB5_KPASSWD_AUTHERROR}}\pysigline{\sphinxbfcode{KRB5\_KPASSWD\_AUTHERROR}}
-\end{fulllineitems}
-
-
-Authentication error.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KPASSWD\_AUTHERROR}
-&
-\sphinxcode{3}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KPASSWD\_BAD\_VERSION}
-\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION:krb5-kpasswd-bad-version-data}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION:krb5-kpasswd-bad-version}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION::doc}}\index{KRB5\_KPASSWD\_BAD\_VERSION (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_BAD_VERSION:KRB5_KPASSWD_BAD_VERSION}}\pysigline{\sphinxbfcode{KRB5\_KPASSWD\_BAD\_VERSION}}
-\end{fulllineitems}
-
-
-Unknown RPC version.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KPASSWD\_BAD\_VERSION}
-&
-\sphinxcode{6}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KPASSWD\_HARDERROR}
-\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_HARDERROR:krb5-kpasswd-harderror}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_HARDERROR:krb5-kpasswd-harderror-data}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_HARDERROR::doc}}\index{KRB5\_KPASSWD\_HARDERROR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_HARDERROR:KRB5_KPASSWD_HARDERROR}}\pysigline{\sphinxbfcode{KRB5\_KPASSWD\_HARDERROR}}
-\end{fulllineitems}
-
-
-Server error.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KPASSWD\_HARDERROR}
-&
-\sphinxcode{2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KPASSWD\_INITIAL\_FLAG\_NEEDED}
-\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED:krb5-kpasswd-initial-flag-needed}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED:krb5-kpasswd-initial-flag-needed-data}}\index{KRB5\_KPASSWD\_INITIAL\_FLAG\_NEEDED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_INITIAL_FLAG_NEEDED:KRB5_KPASSWD_INITIAL_FLAG_NEEDED}}\pysigline{\sphinxbfcode{KRB5\_KPASSWD\_INITIAL\_FLAG\_NEEDED}}
-\end{fulllineitems}
-
-
-The presented credentials were not obtained using a password directly.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KPASSWD\_INITIAL\_FLAG\_NEEDED}
-&
-\sphinxcode{7}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KPASSWD\_MALFORMED}
-\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_MALFORMED:krb5-kpasswd-malformed-data}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_MALFORMED:krb5-kpasswd-malformed}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_MALFORMED::doc}}\index{KRB5\_KPASSWD\_MALFORMED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_MALFORMED:KRB5_KPASSWD_MALFORMED}}\pysigline{\sphinxbfcode{KRB5\_KPASSWD\_MALFORMED}}
-\end{fulllineitems}
-
-
-Malformed request.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KPASSWD\_MALFORMED}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KPASSWD\_SOFTERROR}
-\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_SOFTERROR::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_SOFTERROR:krb5-kpasswd-softerror}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_SOFTERROR:krb5-kpasswd-softerror-data}}\index{KRB5\_KPASSWD\_SOFTERROR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_SOFTERROR:KRB5_KPASSWD_SOFTERROR}}\pysigline{\sphinxbfcode{KRB5\_KPASSWD\_SOFTERROR}}
-\end{fulllineitems}
-
-
-Password change rejected.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KPASSWD\_SOFTERROR}
-&
-\sphinxcode{4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_KPASSWD\_SUCCESS}
-\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_SUCCESS:krb5-kpasswd-success-data}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_SUCCESS::doc}}\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_SUCCESS:krb5-kpasswd-success}}\index{KRB5\_KPASSWD\_SUCCESS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_KPASSWD_SUCCESS:KRB5_KPASSWD_SUCCESS}}\pysigline{\sphinxbfcode{KRB5\_KPASSWD\_SUCCESS}}
-\end{fulllineitems}
-
-
-Success.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_KPASSWD\_SUCCESS}
-&
-\sphinxcode{0}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ALL\_ACCT\_EXPTIME}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME:krb5-lrq-all-acct-exptime}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME:krb5-lrq-all-acct-exptime-data}}\index{KRB5\_LRQ\_ALL\_ACCT\_EXPTIME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_ACCT_EXPTIME:KRB5_LRQ_ALL_ACCT_EXPTIME}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ALL\_ACCT\_EXPTIME}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ALL\_ACCT\_EXPTIME}
-&
-\sphinxcode{7}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ALL\_LAST\_INITIAL}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL:krb5-lrq-all-last-initial}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL:krb5-lrq-all-last-initial-data}}\index{KRB5\_LRQ\_ALL\_LAST\_INITIAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_INITIAL:KRB5_LRQ_ALL_LAST_INITIAL}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ALL\_LAST\_INITIAL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ALL\_LAST\_INITIAL}
-&
-\sphinxcode{2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ALL\_LAST\_RENEWAL}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL:krb5-lrq-all-last-renewal}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL:krb5-lrq-all-last-renewal-data}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL::doc}}\index{KRB5\_LRQ\_ALL\_LAST\_RENEWAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_RENEWAL:KRB5_LRQ_ALL_LAST_RENEWAL}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ALL\_LAST\_RENEWAL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ALL\_LAST\_RENEWAL}
-&
-\sphinxcode{4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ALL\_LAST\_REQ}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ:krb5-lrq-all-last-req}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ:krb5-lrq-all-last-req-data}}\index{KRB5\_LRQ\_ALL\_LAST\_REQ (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_REQ:KRB5_LRQ_ALL_LAST_REQ}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ALL\_LAST\_REQ}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ALL\_LAST\_REQ}
-&
-\sphinxcode{5}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ALL\_LAST\_TGT}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT:krb5-lrq-all-last-tgt-data}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT:krb5-lrq-all-last-tgt}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT::doc}}\index{KRB5\_LRQ\_ALL\_LAST\_TGT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT:KRB5_LRQ_ALL_LAST_TGT}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ALL\_LAST\_TGT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ALL\_LAST\_TGT}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ALL\_LAST\_TGT\_ISSUED}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED:krb5-lrq-all-last-tgt-issued}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED:krb5-lrq-all-last-tgt-issued-data}}\index{KRB5\_LRQ\_ALL\_LAST\_TGT\_ISSUED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_LAST_TGT_ISSUED:KRB5_LRQ_ALL_LAST_TGT_ISSUED}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ALL\_LAST\_TGT\_ISSUED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ALL\_LAST\_TGT\_ISSUED}
-&
-\sphinxcode{3}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ALL\_PW\_EXPTIME}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME:krb5-lrq-all-pw-exptime-data}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME:krb5-lrq-all-pw-exptime}}\index{KRB5\_LRQ\_ALL\_PW\_EXPTIME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ALL_PW_EXPTIME:KRB5_LRQ_ALL_PW_EXPTIME}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ALL\_PW\_EXPTIME}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ALL\_PW\_EXPTIME}
-&
-\sphinxcode{6}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_NONE}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_NONE:krb5-lrq-none-data}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_NONE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_NONE:krb5-lrq-none}}\index{KRB5\_LRQ\_NONE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_NONE:KRB5_LRQ_NONE}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_NONE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_NONE}
-&
-\sphinxcode{0}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ONE\_ACCT\_EXPTIME}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME:krb5-lrq-one-acct-exptime}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME:krb5-lrq-one-acct-exptime-data}}\index{KRB5\_LRQ\_ONE\_ACCT\_EXPTIME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_ACCT_EXPTIME:KRB5_LRQ_ONE_ACCT_EXPTIME}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ONE\_ACCT\_EXPTIME}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ONE\_ACCT\_EXPTIME}
-&
-\sphinxcode{(-7)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ONE\_LAST\_INITIAL}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL:krb5-lrq-one-last-initial-data}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL:krb5-lrq-one-last-initial}}\index{KRB5\_LRQ\_ONE\_LAST\_INITIAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_INITIAL:KRB5_LRQ_ONE_LAST_INITIAL}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ONE\_LAST\_INITIAL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ONE\_LAST\_INITIAL}
-&
-\sphinxcode{(-2)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ONE\_LAST\_RENEWAL}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL:krb5-lrq-one-last-renewal-data}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL:krb5-lrq-one-last-renewal}}\index{KRB5\_LRQ\_ONE\_LAST\_RENEWAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_RENEWAL:KRB5_LRQ_ONE_LAST_RENEWAL}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ONE\_LAST\_RENEWAL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ONE\_LAST\_RENEWAL}
-&
-\sphinxcode{(-4)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ONE\_LAST\_REQ}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ:krb5-lrq-one-last-req}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ:krb5-lrq-one-last-req-data}}\index{KRB5\_LRQ\_ONE\_LAST\_REQ (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_REQ:KRB5_LRQ_ONE_LAST_REQ}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ONE\_LAST\_REQ}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ONE\_LAST\_REQ}
-&
-\sphinxcode{(-5)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ONE\_LAST\_TGT}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT:krb5-lrq-one-last-tgt-data}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT::doc}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT:krb5-lrq-one-last-tgt}}\index{KRB5\_LRQ\_ONE\_LAST\_TGT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT:KRB5_LRQ_ONE_LAST_TGT}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ONE\_LAST\_TGT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ONE\_LAST\_TGT}
-&
-\sphinxcode{(-1)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ONE\_LAST\_TGT\_ISSUED}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED:krb5-lrq-one-last-tgt-issued}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED:krb5-lrq-one-last-tgt-issued-data}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED::doc}}\index{KRB5\_LRQ\_ONE\_LAST\_TGT\_ISSUED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_LAST_TGT_ISSUED:KRB5_LRQ_ONE_LAST_TGT_ISSUED}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ONE\_LAST\_TGT\_ISSUED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ONE\_LAST\_TGT\_ISSUED}
-&
-\sphinxcode{(-3)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_LRQ\_ONE\_PW\_EXPTIME}
-\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME:krb5-lrq-one-pw-exptime}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME:krb5-lrq-one-pw-exptime-data}}\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME::doc}}\index{KRB5\_LRQ\_ONE\_PW\_EXPTIME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_LRQ_ONE_PW_EXPTIME:KRB5_LRQ_ONE_PW_EXPTIME}}\pysigline{\sphinxbfcode{KRB5\_LRQ\_ONE\_PW\_EXPTIME}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_LRQ\_ONE\_PW\_EXPTIME}
-&
-\sphinxcode{(-6)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_ENTERPRISE\_PRINCIPAL}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL:krb5-nt-enterprise-principal-data}}\label{\detokenize{appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL:krb5-nt-enterprise-principal}}\label{\detokenize{appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL::doc}}\index{KRB5\_NT\_ENTERPRISE\_PRINCIPAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_ENTERPRISE_PRINCIPAL:KRB5_NT_ENTERPRISE_PRINCIPAL}}\pysigline{\sphinxbfcode{KRB5\_NT\_ENTERPRISE\_PRINCIPAL}}
-\end{fulllineitems}
-
-
-Windows 2000 UPN.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_ENTERPRISE\_PRINCIPAL}
-&
-\sphinxcode{10}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_ENT\_PRINCIPAL\_AND\_ID}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID:krb5-nt-ent-principal-and-id-data}}\label{\detokenize{appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID::doc}}\label{\detokenize{appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID:krb5-nt-ent-principal-and-id}}\index{KRB5\_NT\_ENT\_PRINCIPAL\_AND\_ID (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_ENT_PRINCIPAL_AND_ID:KRB5_NT_ENT_PRINCIPAL_AND_ID}}\pysigline{\sphinxbfcode{KRB5\_NT\_ENT\_PRINCIPAL\_AND\_ID}}
-\end{fulllineitems}
-
-
-NT 4 style name and SID.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_ENT\_PRINCIPAL\_AND\_ID}
-&
-\sphinxcode{-130}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_MS\_PRINCIPAL}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_MS_PRINCIPAL::doc}}\label{\detokenize{appdev/refs/macros/KRB5_NT_MS_PRINCIPAL:krb5-nt-ms-principal}}\label{\detokenize{appdev/refs/macros/KRB5_NT_MS_PRINCIPAL:krb5-nt-ms-principal-data}}\index{KRB5\_NT\_MS\_PRINCIPAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_MS_PRINCIPAL:KRB5_NT_MS_PRINCIPAL}}\pysigline{\sphinxbfcode{KRB5\_NT\_MS\_PRINCIPAL}}
-\end{fulllineitems}
-
-
-Windows 2000 UPN and SID.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_MS\_PRINCIPAL}
-&
-\sphinxcode{-128}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_MS\_PRINCIPAL\_AND\_ID}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID:krb5-nt-ms-principal-and-id-data}}\label{\detokenize{appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID::doc}}\label{\detokenize{appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID:krb5-nt-ms-principal-and-id}}\index{KRB5\_NT\_MS\_PRINCIPAL\_AND\_ID (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_MS_PRINCIPAL_AND_ID:KRB5_NT_MS_PRINCIPAL_AND_ID}}\pysigline{\sphinxbfcode{KRB5\_NT\_MS\_PRINCIPAL\_AND\_ID}}
-\end{fulllineitems}
-
-
-NT 4 style name.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_MS\_PRINCIPAL\_AND\_ID}
-&
-\sphinxcode{-129}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_PRINCIPAL}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_PRINCIPAL:krb5-nt-principal}}\label{\detokenize{appdev/refs/macros/KRB5_NT_PRINCIPAL::doc}}\label{\detokenize{appdev/refs/macros/KRB5_NT_PRINCIPAL:krb5-nt-principal-data}}\index{KRB5\_NT\_PRINCIPAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_PRINCIPAL:KRB5_NT_PRINCIPAL}}\pysigline{\sphinxbfcode{KRB5\_NT\_PRINCIPAL}}
-\end{fulllineitems}
-
-
-Just the name of the principal as in DCE, or for users.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_PRINCIPAL}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_SMTP\_NAME}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_SMTP_NAME:krb5-nt-smtp-name}}\label{\detokenize{appdev/refs/macros/KRB5_NT_SMTP_NAME:krb5-nt-smtp-name-data}}\label{\detokenize{appdev/refs/macros/KRB5_NT_SMTP_NAME::doc}}\index{KRB5\_NT\_SMTP\_NAME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_SMTP_NAME:KRB5_NT_SMTP_NAME}}\pysigline{\sphinxbfcode{KRB5\_NT\_SMTP\_NAME}}
-\end{fulllineitems}
-
-
-Name in form of SMTP email name.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_SMTP\_NAME}
-&
-\sphinxcode{7}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_SRV\_HST}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_HST:krb5-nt-srv-hst-data}}\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_HST::doc}}\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_HST:krb5-nt-srv-hst}}\index{KRB5\_NT\_SRV\_HST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_HST:KRB5_NT_SRV_HST}}\pysigline{\sphinxbfcode{KRB5\_NT\_SRV\_HST}}
-\end{fulllineitems}
-
-
-Service with host name as instance (telnet, rcommands)
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_SRV\_HST}
-&
-\sphinxcode{3}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_SRV\_INST}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_INST:krb5-nt-srv-inst-data}}\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_INST::doc}}\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_INST:krb5-nt-srv-inst}}\index{KRB5\_NT\_SRV\_INST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_INST:KRB5_NT_SRV_INST}}\pysigline{\sphinxbfcode{KRB5\_NT\_SRV\_INST}}
-\end{fulllineitems}
-
-
-Service and other unique instance (krbtgt)
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_SRV\_INST}
-&
-\sphinxcode{2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_SRV\_XHST}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_XHST:krb5-nt-srv-xhst}}\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_XHST:krb5-nt-srv-xhst-data}}\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_XHST::doc}}\index{KRB5\_NT\_SRV\_XHST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_SRV_XHST:KRB5_NT_SRV_XHST}}\pysigline{\sphinxbfcode{KRB5\_NT\_SRV\_XHST}}
-\end{fulllineitems}
-
-
-Service with host as remaining components.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_SRV\_XHST}
-&
-\sphinxcode{4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_UID}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_UID:krb5-nt-uid}}\label{\detokenize{appdev/refs/macros/KRB5_NT_UID:krb5-nt-uid-data}}\label{\detokenize{appdev/refs/macros/KRB5_NT_UID::doc}}\index{KRB5\_NT\_UID (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_UID:KRB5_NT_UID}}\pysigline{\sphinxbfcode{KRB5\_NT\_UID}}
-\end{fulllineitems}
-
-
-Unique ID.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_UID}
-&
-\sphinxcode{5}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_UNKNOWN}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_UNKNOWN::doc}}\label{\detokenize{appdev/refs/macros/KRB5_NT_UNKNOWN:krb5-nt-unknown}}\label{\detokenize{appdev/refs/macros/KRB5_NT_UNKNOWN:krb5-nt-unknown-data}}\index{KRB5\_NT\_UNKNOWN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_UNKNOWN:KRB5_NT_UNKNOWN}}\pysigline{\sphinxbfcode{KRB5\_NT\_UNKNOWN}}
-\end{fulllineitems}
-
-
-Name type not known.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_UNKNOWN}
-&
-\sphinxcode{0}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_WELLKNOWN}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_WELLKNOWN:krb5-nt-wellknown-data}}\label{\detokenize{appdev/refs/macros/KRB5_NT_WELLKNOWN:krb5-nt-wellknown}}\label{\detokenize{appdev/refs/macros/KRB5_NT_WELLKNOWN::doc}}\index{KRB5\_NT\_WELLKNOWN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_WELLKNOWN:KRB5_NT_WELLKNOWN}}\pysigline{\sphinxbfcode{KRB5\_NT\_WELLKNOWN}}
-\end{fulllineitems}
-
-
-Well-known (special) principal.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_WELLKNOWN}
-&
-\sphinxcode{11}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_NT\_X500\_PRINCIPAL}
-\label{\detokenize{appdev/refs/macros/KRB5_NT_X500_PRINCIPAL:krb5-nt-x500-principal-data}}\label{\detokenize{appdev/refs/macros/KRB5_NT_X500_PRINCIPAL::doc}}\label{\detokenize{appdev/refs/macros/KRB5_NT_X500_PRINCIPAL:krb5-nt-x500-principal}}\index{KRB5\_NT\_X500\_PRINCIPAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_NT_X500_PRINCIPAL:KRB5_NT_X500_PRINCIPAL}}\pysigline{\sphinxbfcode{KRB5\_NT\_X500\_PRINCIPAL}}
-\end{fulllineitems}
-
-
-PKINIT.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_NT\_X500\_PRINCIPAL}
-&
-\sphinxcode{6}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_ATTRIBUTES\_INFO}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO:krb5-pac-attributes-info-data}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO:krb5-pac-attributes-info}}\index{KRB5\_PAC\_ATTRIBUTES\_INFO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_ATTRIBUTES_INFO:KRB5_PAC_ATTRIBUTES_INFO}}\pysigline{\sphinxbfcode{KRB5\_PAC\_ATTRIBUTES\_INFO}}
-\end{fulllineitems}
-
-
-PAC attributes.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_ATTRIBUTES\_INFO}
-&
-\sphinxcode{17}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_CLIENT\_INFO}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_CLIENT_INFO:krb5-pac-client-info}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_CLIENT_INFO::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_CLIENT_INFO:krb5-pac-client-info-data}}\index{KRB5\_PAC\_CLIENT\_INFO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_CLIENT_INFO:KRB5_PAC_CLIENT_INFO}}\pysigline{\sphinxbfcode{KRB5\_PAC\_CLIENT\_INFO}}
-\end{fulllineitems}
-
-
-Client name and ticket info.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_CLIENT\_INFO}
-&
-\sphinxcode{10}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_CLIENT\_CLAIMS}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS:krb5-pac-client-claims-data}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS:krb5-pac-client-claims}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS::doc}}\index{KRB5\_PAC\_CLIENT\_CLAIMS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_CLIENT_CLAIMS:KRB5_PAC_CLIENT_CLAIMS}}\pysigline{\sphinxbfcode{KRB5\_PAC\_CLIENT\_CLAIMS}}
-\end{fulllineitems}
-
-
-Client claims information.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_CLIENT\_CLAIMS}
-&
-\sphinxcode{13}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_CREDENTIALS\_INFO}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO:krb5-pac-credentials-info}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO:krb5-pac-credentials-info-data}}\index{KRB5\_PAC\_CREDENTIALS\_INFO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_CREDENTIALS_INFO:KRB5_PAC_CREDENTIALS_INFO}}\pysigline{\sphinxbfcode{KRB5\_PAC\_CREDENTIALS\_INFO}}
-\end{fulllineitems}
-
-
-Credentials information.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_CREDENTIALS\_INFO}
-&
-\sphinxcode{2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_DELEGATION\_INFO}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_DELEGATION_INFO::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_DELEGATION_INFO:krb5-pac-delegation-info-data}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_DELEGATION_INFO:krb5-pac-delegation-info}}\index{KRB5\_PAC\_DELEGATION\_INFO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_DELEGATION_INFO:KRB5_PAC_DELEGATION_INFO}}\pysigline{\sphinxbfcode{KRB5\_PAC\_DELEGATION\_INFO}}
-\end{fulllineitems}
-
-
-Constrained delegation info.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_DELEGATION\_INFO}
-&
-\sphinxcode{11}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_DEVICE\_CLAIMS}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS:krb5-pac-device-claims}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS:krb5-pac-device-claims-data}}\index{KRB5\_PAC\_DEVICE\_CLAIMS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_DEVICE_CLAIMS:KRB5_PAC_DEVICE_CLAIMS}}\pysigline{\sphinxbfcode{KRB5\_PAC\_DEVICE\_CLAIMS}}
-\end{fulllineitems}
-
-
-Device claims information.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_DEVICE\_CLAIMS}
-&
-\sphinxcode{15}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_DEVICE\_INFO}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_DEVICE_INFO::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_DEVICE_INFO:krb5-pac-device-info-data}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_DEVICE_INFO:krb5-pac-device-info}}\index{KRB5\_PAC\_DEVICE\_INFO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_DEVICE_INFO:KRB5_PAC_DEVICE_INFO}}\pysigline{\sphinxbfcode{KRB5\_PAC\_DEVICE\_INFO}}
-\end{fulllineitems}
-
-
-Device information.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_DEVICE\_INFO}
-&
-\sphinxcode{14}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_LOGON\_INFO}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_LOGON_INFO:krb5-pac-logon-info}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_LOGON_INFO:krb5-pac-logon-info-data}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_LOGON_INFO::doc}}\index{KRB5\_PAC\_LOGON\_INFO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_LOGON_INFO:KRB5_PAC_LOGON_INFO}}\pysigline{\sphinxbfcode{KRB5\_PAC\_LOGON\_INFO}}
-\end{fulllineitems}
-
-
-Logon information.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_LOGON\_INFO}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_PRIVSVR\_CHECKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM:krb5-pac-privsvr-checksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM:krb5-pac-privsvr-checksum}}\index{KRB5\_PAC\_PRIVSVR\_CHECKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_PRIVSVR_CHECKSUM:KRB5_PAC_PRIVSVR_CHECKSUM}}\pysigline{\sphinxbfcode{KRB5\_PAC\_PRIVSVR\_CHECKSUM}}
-\end{fulllineitems}
-
-
-KDC checksum.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_PRIVSVR\_CHECKSUM}
-&
-\sphinxcode{7}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_REQUESTOR}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_REQUESTOR::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_REQUESTOR:krb5-pac-requestor}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_REQUESTOR:krb5-pac-requestor-data}}\index{KRB5\_PAC\_REQUESTOR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_REQUESTOR:KRB5_PAC_REQUESTOR}}\pysigline{\sphinxbfcode{KRB5\_PAC\_REQUESTOR}}
-\end{fulllineitems}
-
-
-PAC requestor SID.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_REQUESTOR}
-&
-\sphinxcode{18}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_SERVER\_CHECKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM:krb5-pac-server-checksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM:krb5-pac-server-checksum}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM::doc}}\index{KRB5\_PAC\_SERVER\_CHECKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_SERVER_CHECKSUM:KRB5_PAC_SERVER_CHECKSUM}}\pysigline{\sphinxbfcode{KRB5\_PAC\_SERVER\_CHECKSUM}}
-\end{fulllineitems}
-
-
-Server checksum.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_SERVER\_CHECKSUM}
-&
-\sphinxcode{6}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_TICKET\_CHECKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM:krb5-pac-ticket-checksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM:krb5-pac-ticket-checksum}}\index{KRB5\_PAC\_TICKET\_CHECKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_TICKET_CHECKSUM:KRB5_PAC_TICKET_CHECKSUM}}\pysigline{\sphinxbfcode{KRB5\_PAC\_TICKET\_CHECKSUM}}
-\end{fulllineitems}
-
-
-Ticket checksum.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_TICKET\_CHECKSUM}
-&
-\sphinxcode{16}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PAC\_UPN\_DNS\_INFO}
-\label{\detokenize{appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO:krb5-pac-upn-dns-info-data}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO:krb5-pac-upn-dns-info}}\index{KRB5\_PAC\_UPN\_DNS\_INFO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PAC_UPN_DNS_INFO:KRB5_PAC_UPN_DNS_INFO}}\pysigline{\sphinxbfcode{KRB5\_PAC\_UPN\_DNS\_INFO}}
-\end{fulllineitems}
-
-
-User principal name and DNS info.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PAC\_UPN\_DNS\_INFO}
-&
-\sphinxcode{12}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_AFS3\_SALT}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AFS3_SALT::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AFS3_SALT:krb5-padata-afs3-salt}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AFS3_SALT:krb5-padata-afs3-salt-data}}\index{KRB5\_PADATA\_AFS3\_SALT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AFS3_SALT:KRB5_PADATA_AFS3_SALT}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_AFS3\_SALT}}
-\end{fulllineitems}
-
-
-Cygnus.
-
-RFC 4120, 3961
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_AFS3\_SALT}
-&
-\sphinxcode{10}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_AP\_REQ}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AP_REQ::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AP_REQ:krb5-padata-ap-req-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AP_REQ:krb5-padata-ap-req}}\index{KRB5\_PADATA\_AP\_REQ (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AP_REQ:KRB5_PADATA_AP_REQ}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_AP\_REQ}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_AP\_REQ}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_AS\_CHECKSUM}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM:krb5-padata-as-checksum}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM:krb5-padata-as-checksum-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM::doc}}\index{KRB5\_PADATA\_AS\_CHECKSUM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AS_CHECKSUM:KRB5_PADATA_AS_CHECKSUM}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_AS\_CHECKSUM}}
-\end{fulllineitems}
-
-
-AS checksum.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_AS\_CHECKSUM}
-&
-\sphinxcode{132}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_AS\_FRESHNESS}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS:krb5-padata-as-freshness-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS:krb5-padata-as-freshness}}\index{KRB5\_PADATA\_AS\_FRESHNESS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_AS_FRESHNESS:KRB5_PADATA_AS_FRESHNESS}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_AS\_FRESHNESS}}
-\end{fulllineitems}
-
-
-RFC 8070.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_AS\_FRESHNESS}
-&
-\sphinxcode{150}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_ENCRYPTED\_CHALLENGE}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE:krb5-padata-encrypted-challenge-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE:krb5-padata-encrypted-challenge}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE::doc}}\index{KRB5\_PADATA\_ENCRYPTED\_CHALLENGE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENCRYPTED_CHALLENGE:KRB5_PADATA_ENCRYPTED_CHALLENGE}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_ENCRYPTED\_CHALLENGE}}
-\end{fulllineitems}
-
-
-RFC 6113.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_ENCRYPTED\_CHALLENGE}
-&
-\sphinxcode{138}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_ENC\_SANDIA\_SECURID}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID:krb5-padata-enc-sandia-securid-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID:krb5-padata-enc-sandia-securid}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID::doc}}\index{KRB5\_PADATA\_ENC\_SANDIA\_SECURID (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_SANDIA_SECURID:KRB5_PADATA_ENC_SANDIA_SECURID}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_ENC\_SANDIA\_SECURID}}
-\end{fulllineitems}
-
-
-SecurId passcode.
-
-RFC 4120
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_ENC\_SANDIA\_SECURID}
-&
-\sphinxcode{6}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_ENC\_TIMESTAMP}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP:krb5-padata-enc-timestamp}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP:krb5-padata-enc-timestamp-data}}\index{KRB5\_PADATA\_ENC\_TIMESTAMP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_TIMESTAMP:KRB5_PADATA_ENC_TIMESTAMP}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_ENC\_TIMESTAMP}}
-\end{fulllineitems}
-
-
-RFC 4120.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_ENC\_TIMESTAMP}
-&
-\sphinxcode{2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_ENC\_UNIX\_TIME}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME:krb5-padata-enc-unix-time}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME:krb5-padata-enc-unix-time-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME::doc}}\index{KRB5\_PADATA\_ENC\_UNIX\_TIME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ENC_UNIX_TIME:KRB5_PADATA_ENC_UNIX_TIME}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_ENC\_UNIX\_TIME}}
-\end{fulllineitems}
-
-
-timestamp encrypted in key.
-
-RFC 4120
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_ENC\_UNIX\_TIME}
-&
-\sphinxcode{5}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_ETYPE\_INFO}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ETYPE_INFO::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ETYPE_INFO:krb5-padata-etype-info}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ETYPE_INFO:krb5-padata-etype-info-data}}\index{KRB5\_PADATA\_ETYPE\_INFO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ETYPE_INFO:KRB5_PADATA_ETYPE_INFO}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_ETYPE\_INFO}}
-\end{fulllineitems}
-
-
-Etype info for preauth.
-
-RFC 4120
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_ETYPE\_INFO}
-&
-\sphinxcode{11}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_ETYPE\_INFO2}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2:krb5-padata-etype-info2-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2:krb5-padata-etype-info2}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2::doc}}\index{KRB5\_PADATA\_ETYPE\_INFO2 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_ETYPE_INFO2:KRB5_PADATA_ETYPE_INFO2}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_ETYPE\_INFO2}}
-\end{fulllineitems}
-
-
-RFC 4120.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_ETYPE\_INFO2}
-&
-\sphinxcode{19}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_FOR\_USER}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FOR_USER:krb5-padata-for-user}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FOR_USER::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FOR_USER:krb5-padata-for-user-data}}\index{KRB5\_PADATA\_FOR\_USER (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FOR_USER:KRB5_PADATA_FOR_USER}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_FOR\_USER}}
-\end{fulllineitems}
-
-
-username protocol transition request
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_FOR\_USER}
-&
-\sphinxcode{129}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_FX\_COOKIE}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_COOKIE:krb5-padata-fx-cookie}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_COOKIE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_COOKIE:krb5-padata-fx-cookie-data}}\index{KRB5\_PADATA\_FX\_COOKIE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_COOKIE:KRB5_PADATA_FX_COOKIE}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_FX\_COOKIE}}
-\end{fulllineitems}
-
-
-RFC 6113.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_FX\_COOKIE}
-&
-\sphinxcode{133}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_FX\_ERROR}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_ERROR:krb5-padata-fx-error}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_ERROR::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_ERROR:krb5-padata-fx-error-data}}\index{KRB5\_PADATA\_FX\_ERROR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_ERROR:KRB5_PADATA_FX_ERROR}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_FX\_ERROR}}
-\end{fulllineitems}
-
-
-RFC 6113.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_FX\_ERROR}
-&
-\sphinxcode{137}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_FX\_FAST}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_FAST::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_FAST:krb5-padata-fx-fast}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_FAST:krb5-padata-fx-fast-data}}\index{KRB5\_PADATA\_FX\_FAST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_FX_FAST:KRB5_PADATA_FX_FAST}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_FX\_FAST}}
-\end{fulllineitems}
-
-
-RFC 6113.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_FX\_FAST}
-&
-\sphinxcode{136}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_GET\_FROM\_TYPED\_DATA}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA:krb5-padata-get-from-typed-data-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA:krb5-padata-get-from-typed-data}}\index{KRB5\_PADATA\_GET\_FROM\_TYPED\_DATA (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_GET_FROM_TYPED_DATA:KRB5_PADATA_GET_FROM_TYPED_DATA}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_GET\_FROM\_TYPED\_DATA}}
-\end{fulllineitems}
-
-
-Embedded in typed data.
-
-RFC 4120
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_GET\_FROM\_TYPED\_DATA}
-&
-\sphinxcode{22}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_NONE}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_NONE:krb5-padata-none-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_NONE:krb5-padata-none}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_NONE::doc}}\index{KRB5\_PADATA\_NONE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_NONE:KRB5_PADATA_NONE}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_NONE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_NONE}
-&
-\sphinxcode{0}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_OSF\_DCE}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OSF_DCE:krb5-padata-osf-dce}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OSF_DCE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OSF_DCE:krb5-padata-osf-dce-data}}\index{KRB5\_PADATA\_OSF\_DCE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OSF_DCE:KRB5_PADATA_OSF_DCE}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_OSF\_DCE}}
-\end{fulllineitems}
-
-
-OSF DCE.
-
-RFC 4120
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_OSF\_DCE}
-&
-\sphinxcode{8}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_OTP\_CHALLENGE}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE:krb5-padata-otp-challenge}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE:krb5-padata-otp-challenge-data}}\index{KRB5\_PADATA\_OTP\_CHALLENGE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_CHALLENGE:KRB5_PADATA_OTP_CHALLENGE}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_OTP\_CHALLENGE}}
-\end{fulllineitems}
-
-
-RFC 6560 section 4.1.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_OTP\_CHALLENGE}
-&
-\sphinxcode{141}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_OTP\_PIN\_CHANGE}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE:krb5-padata-otp-pin-change}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE:krb5-padata-otp-pin-change-data}}\index{KRB5\_PADATA\_OTP\_PIN\_CHANGE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_PIN_CHANGE:KRB5_PADATA_OTP_PIN_CHANGE}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_OTP\_PIN\_CHANGE}}
-\end{fulllineitems}
-
-
-RFC 6560 section 4.3.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_OTP\_PIN\_CHANGE}
-&
-\sphinxcode{144}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_OTP\_REQUEST}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_REQUEST:krb5-padata-otp-request}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_REQUEST::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_REQUEST:krb5-padata-otp-request-data}}\index{KRB5\_PADATA\_OTP\_REQUEST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_OTP_REQUEST:KRB5_PADATA_OTP_REQUEST}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_OTP\_REQUEST}}
-\end{fulllineitems}
-
-
-RFC 6560 section 4.2.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_OTP\_REQUEST}
-&
-\sphinxcode{142}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_PAC\_OPTIONS}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS:krb5-padata-pac-options}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS:krb5-padata-pac-options-data}}\index{KRB5\_PADATA\_PAC\_OPTIONS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PAC_OPTIONS:KRB5_PADATA_PAC_OPTIONS}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_PAC\_OPTIONS}}
-\end{fulllineitems}
-
-
-MS-KILE and MS-SFU.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_PAC\_OPTIONS}
-&
-\sphinxcode{167}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_PAC\_REQUEST}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PAC_REQUEST:krb5-padata-pac-request-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PAC_REQUEST:krb5-padata-pac-request}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PAC_REQUEST::doc}}\index{KRB5\_PADATA\_PAC\_REQUEST (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PAC_REQUEST:KRB5_PADATA_PAC_REQUEST}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_PAC\_REQUEST}}
-\end{fulllineitems}
-
-
-include Windows PAC
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_PAC\_REQUEST}
-&
-\sphinxcode{128}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_PKINIT\_KX}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PKINIT_KX:krb5-padata-pkinit-kx}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PKINIT_KX:krb5-padata-pkinit-kx-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PKINIT_KX::doc}}\index{KRB5\_PADATA\_PKINIT\_KX (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PKINIT_KX:KRB5_PADATA_PKINIT_KX}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_PKINIT\_KX}}
-\end{fulllineitems}
-
-
-RFC 6112.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_PKINIT\_KX}
-&
-\sphinxcode{147}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_PK\_AS\_REP}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REP:krb5-padata-pk-as-rep-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REP:krb5-padata-pk-as-rep}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REP::doc}}\index{KRB5\_PADATA\_PK\_AS\_REP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REP:KRB5_PADATA_PK_AS_REP}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_PK\_AS\_REP}}
-\end{fulllineitems}
-
-
-PKINIT.
-
-RFC 4556
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_PK\_AS\_REP}
-&
-\sphinxcode{17}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_PK\_AS\_REP\_OLD}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD:krb5-padata-pk-as-rep-old-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD:krb5-padata-pk-as-rep-old}}\index{KRB5\_PADATA\_PK\_AS\_REP\_OLD (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REP_OLD:KRB5_PADATA_PK_AS_REP_OLD}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_PK\_AS\_REP\_OLD}}
-\end{fulllineitems}
-
-
-PKINIT.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_PK\_AS\_REP\_OLD}
-&
-\sphinxcode{15}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_PK\_AS\_REQ}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REQ::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REQ:krb5-padata-pk-as-req}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REQ:krb5-padata-pk-as-req-data}}\index{KRB5\_PADATA\_PK\_AS\_REQ (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REQ:KRB5_PADATA_PK_AS_REQ}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_PK\_AS\_REQ}}
-\end{fulllineitems}
-
-
-PKINIT.
-
-RFC 4556
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_PK\_AS\_REQ}
-&
-\sphinxcode{16}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_PK\_AS\_REQ\_OLD}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD:krb5-padata-pk-as-req-old}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD:krb5-padata-pk-as-req-old-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD::doc}}\index{KRB5\_PADATA\_PK\_AS\_REQ\_OLD (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PK_AS_REQ_OLD:KRB5_PADATA_PK_AS_REQ_OLD}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_PK\_AS\_REQ\_OLD}}
-\end{fulllineitems}
-
-
-PKINIT.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_PK\_AS\_REQ\_OLD}
-&
-\sphinxcode{14}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_PW\_SALT}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PW_SALT:krb5-padata-pw-salt-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PW_SALT:krb5-padata-pw-salt}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PW_SALT::doc}}\index{KRB5\_PADATA\_PW\_SALT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_PW_SALT:KRB5_PADATA_PW_SALT}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_PW\_SALT}}
-\end{fulllineitems}
-
-
-RFC 4120.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_PW\_SALT}
-&
-\sphinxcode{3}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_REFERRAL}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REFERRAL:krb5-padata-referral}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REFERRAL::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REFERRAL:krb5-padata-referral-data}}\index{KRB5\_PADATA\_REFERRAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REFERRAL:KRB5_PADATA_REFERRAL}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_REFERRAL}}
-\end{fulllineitems}
-
-
-draft referral system
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_REFERRAL}
-&
-\sphinxcode{25}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_S4U\_X509\_USER}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_S4U_X509_USER:krb5-padata-s4u-x509-user-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_S4U_X509_USER::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_S4U_X509_USER:krb5-padata-s4u-x509-user}}\index{KRB5\_PADATA\_S4U\_X509\_USER (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_S4U_X509_USER:KRB5_PADATA_S4U_X509_USER}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_S4U\_X509\_USER}}
-\end{fulllineitems}
-
-
-certificate protocol transition request
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_S4U\_X509\_USER}
-&
-\sphinxcode{130}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_SAM\_CHALLENGE}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE:krb5-padata-sam-challenge-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE:krb5-padata-sam-challenge}}\index{KRB5\_PADATA\_SAM\_CHALLENGE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE:KRB5_PADATA_SAM_CHALLENGE}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_SAM\_CHALLENGE}}
-\end{fulllineitems}
-
-
-SAM/OTP.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_SAM\_CHALLENGE}
-&
-\sphinxcode{12}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_SAM\_CHALLENGE\_2}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2:krb5-padata-sam-challenge-2-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2:krb5-padata-sam-challenge-2}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2::doc}}\index{KRB5\_PADATA\_SAM\_CHALLENGE\_2 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_CHALLENGE_2:KRB5_PADATA_SAM_CHALLENGE_2}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_SAM\_CHALLENGE\_2}}
-\end{fulllineitems}
-
-
-draft challenge system, updated
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_SAM\_CHALLENGE\_2}
-&
-\sphinxcode{30}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_SAM\_REDIRECT}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT:krb5-padata-sam-redirect-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT:krb5-padata-sam-redirect}}\index{KRB5\_PADATA\_SAM\_REDIRECT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_REDIRECT:KRB5_PADATA_SAM_REDIRECT}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_SAM\_REDIRECT}}
-\end{fulllineitems}
-
-
-SAM/OTP.
-
-RFC 4120
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_SAM\_REDIRECT}
-&
-\sphinxcode{21}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_SAM\_RESPONSE}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE:krb5-padata-sam-response-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE:krb5-padata-sam-response}}\index{KRB5\_PADATA\_SAM\_RESPONSE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE:KRB5_PADATA_SAM_RESPONSE}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_SAM\_RESPONSE}}
-\end{fulllineitems}
-
-
-SAM/OTP.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_SAM\_RESPONSE}
-&
-\sphinxcode{13}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_SAM\_RESPONSE\_2}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2:krb5-padata-sam-response-2}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2:krb5-padata-sam-response-2-data}}\index{KRB5\_PADATA\_SAM\_RESPONSE\_2 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SAM_RESPONSE_2:KRB5_PADATA_SAM_RESPONSE_2}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_SAM\_RESPONSE\_2}}
-\end{fulllineitems}
-
-
-draft challenge system, updated
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_SAM\_RESPONSE\_2}
-&
-\sphinxcode{31}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_SESAME}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SESAME::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SESAME:krb5-padata-sesame}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SESAME:krb5-padata-sesame-data}}\index{KRB5\_PADATA\_SESAME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SESAME:KRB5_PADATA_SESAME}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_SESAME}}
-\end{fulllineitems}
-
-
-Sesame project.
-
-RFC 4120
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_SESAME}
-&
-\sphinxcode{7}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_SPAKE}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SPAKE:krb5-padata-spake-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SPAKE:krb5-padata-spake}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SPAKE::doc}}\index{KRB5\_PADATA\_SPAKE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SPAKE:KRB5_PADATA_SPAKE}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_SPAKE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_SPAKE}
-&
-\sphinxcode{151}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_REDHAT\_IDP\_OAUTH2}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2:krb5-padata-redhat-idp-oauth2-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2:krb5-padata-redhat-idp-oauth2}}\index{KRB5\_PADATA\_REDHAT\_IDP\_OAUTH2 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_REDHAT_IDP_OAUTH2:KRB5_PADATA_REDHAT_IDP_OAUTH2}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_REDHAT\_IDP\_OAUTH2}}
-\end{fulllineitems}
-
-
-Red Hat IdP mechanism.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_REDHAT\_IDP\_OAUTH2}
-&
-\sphinxcode{152}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_SVR\_REFERRAL\_INFO}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO:krb5-padata-svr-referral-info}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO:krb5-padata-svr-referral-info-data}}\index{KRB5\_PADATA\_SVR\_REFERRAL\_INFO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_SVR_REFERRAL_INFO:KRB5_PADATA_SVR_REFERRAL_INFO}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_SVR\_REFERRAL\_INFO}}
-\end{fulllineitems}
-
-
-Windows 2000 referrals.
-
-RFC 6820
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_SVR\_REFERRAL\_INFO}
-&
-\sphinxcode{20}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_TGS\_REQ}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_TGS_REQ::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_TGS_REQ:krb5-padata-tgs-req}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_TGS_REQ:krb5-padata-tgs-req-data}}\index{KRB5\_PADATA\_TGS\_REQ (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_TGS_REQ:KRB5_PADATA_TGS_REQ}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_TGS\_REQ}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_TGS\_REQ}
-&
-\sphinxcode{KRB5\_PADATA\_AP\_REQ}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PADATA\_USE\_SPECIFIED\_KVNO}
-\label{\detokenize{appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO:krb5-padata-use-specified-kvno}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO:krb5-padata-use-specified-kvno-data}}\label{\detokenize{appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO::doc}}\index{KRB5\_PADATA\_USE\_SPECIFIED\_KVNO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PADATA_USE_SPECIFIED_KVNO:KRB5_PADATA_USE_SPECIFIED_KVNO}}\pysigline{\sphinxbfcode{KRB5\_PADATA\_USE\_SPECIFIED\_KVNO}}
-\end{fulllineitems}
-
-
-RFC 4120.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PADATA\_USE\_SPECIFIED\_KVNO}
-&
-\sphinxcode{20}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_COMPARE\_CASEFOLD}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD:krb5-principal-compare-casefold-data}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD:krb5-principal-compare-casefold}}\index{KRB5\_PRINCIPAL\_COMPARE\_CASEFOLD (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_CASEFOLD:KRB5_PRINCIPAL_COMPARE_CASEFOLD}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_COMPARE\_CASEFOLD}}
-\end{fulllineitems}
-
-
-case-insensitive
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_COMPARE\_CASEFOLD}
-&
-\sphinxcode{4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_COMPARE\_ENTERPRISE}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE:krb5-principal-compare-enterprise}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE:krb5-principal-compare-enterprise-data}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE::doc}}\index{KRB5\_PRINCIPAL\_COMPARE\_ENTERPRISE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_ENTERPRISE:KRB5_PRINCIPAL_COMPARE_ENTERPRISE}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_COMPARE\_ENTERPRISE}}
-\end{fulllineitems}
-
-
-UPNs as real principals.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_COMPARE\_ENTERPRISE}
-&
-\sphinxcode{2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_COMPARE\_IGNORE\_REALM}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM:krb5-principal-compare-ignore-realm}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM:krb5-principal-compare-ignore-realm-data}}\index{KRB5\_PRINCIPAL\_COMPARE\_IGNORE\_REALM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_IGNORE_REALM:KRB5_PRINCIPAL_COMPARE_IGNORE_REALM}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_COMPARE\_IGNORE\_REALM}}
-\end{fulllineitems}
-
-
-ignore realm component
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_COMPARE\_IGNORE\_REALM}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_COMPARE\_UTF8}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8:krb5-principal-compare-utf8-data}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8:krb5-principal-compare-utf8}}\index{KRB5\_PRINCIPAL\_COMPARE\_UTF8 (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_COMPARE_UTF8:KRB5_PRINCIPAL_COMPARE_UTF8}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_COMPARE\_UTF8}}
-\end{fulllineitems}
-
-
-treat principals as UTF-8
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_COMPARE\_UTF8}
-&
-\sphinxcode{8}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_PARSE\_ENTERPRISE}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE:krb5-principal-parse-enterprise-data}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE:krb5-principal-parse-enterprise}}\index{KRB5\_PRINCIPAL\_PARSE\_ENTERPRISE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_ENTERPRISE:KRB5_PRINCIPAL_PARSE_ENTERPRISE}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_PARSE\_ENTERPRISE}}
-\end{fulllineitems}
-
-
-Create single-component enterprise principle.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_PARSE\_ENTERPRISE}
-&
-\sphinxcode{0x4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_PARSE\_IGNORE\_REALM}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM:krb5-principal-parse-ignore-realm}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM:krb5-principal-parse-ignore-realm-data}}\index{KRB5\_PRINCIPAL\_PARSE\_IGNORE\_REALM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_IGNORE_REALM:KRB5_PRINCIPAL_PARSE_IGNORE_REALM}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_PARSE\_IGNORE\_REALM}}
-\end{fulllineitems}
-
-
-Ignore realm if present.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_PARSE\_IGNORE\_REALM}
-&
-\sphinxcode{0x8}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_PARSE\_NO\_DEF\_REALM}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM:krb5-principal-parse-no-def-realm-data}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM:krb5-principal-parse-no-def-realm}}\index{KRB5\_PRINCIPAL\_PARSE\_NO\_DEF\_REALM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_DEF_REALM:KRB5_PRINCIPAL_PARSE_NO_DEF_REALM}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_PARSE\_NO\_DEF\_REALM}}
-\end{fulllineitems}
-
-
-Don’t add default realm.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_PARSE\_NO\_DEF\_REALM}
-&
-\sphinxcode{0x10}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_PARSE\_NO\_REALM}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM:krb5-principal-parse-no-realm-data}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM:krb5-principal-parse-no-realm}}\index{KRB5\_PRINCIPAL\_PARSE\_NO\_REALM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_NO_REALM:KRB5_PRINCIPAL_PARSE_NO_REALM}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_PARSE\_NO\_REALM}}
-\end{fulllineitems}
-
-
-Error if realm is present.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_PARSE\_NO\_REALM}
-&
-\sphinxcode{0x1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_PARSE\_REQUIRE\_REALM}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM:krb5-principal-parse-require-realm}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM:krb5-principal-parse-require-realm-data}}\index{KRB5\_PRINCIPAL\_PARSE\_REQUIRE\_REALM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_PARSE_REQUIRE_REALM:KRB5_PRINCIPAL_PARSE_REQUIRE_REALM}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_PARSE\_REQUIRE\_REALM}}
-\end{fulllineitems}
-
-
-Error if realm is not present.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_PARSE\_REQUIRE\_REALM}
-&
-\sphinxcode{0x2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_UNPARSE\_DISPLAY}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY:krb5-principal-unparse-display-data}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY:krb5-principal-unparse-display}}\index{KRB5\_PRINCIPAL\_UNPARSE\_DISPLAY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_DISPLAY:KRB5_PRINCIPAL_UNPARSE_DISPLAY}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_UNPARSE\_DISPLAY}}
-\end{fulllineitems}
-
-
-Don’t escape special characters.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_UNPARSE\_DISPLAY}
-&
-\sphinxcode{0x4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_UNPARSE\_NO\_REALM}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM:krb5-principal-unparse-no-realm}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM:krb5-principal-unparse-no-realm-data}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM::doc}}\index{KRB5\_PRINCIPAL\_UNPARSE\_NO\_REALM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_NO_REALM:KRB5_PRINCIPAL_UNPARSE_NO_REALM}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_UNPARSE\_NO\_REALM}}
-\end{fulllineitems}
-
-
-Omit realm always.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_UNPARSE\_NO\_REALM}
-&
-\sphinxcode{0x2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRINCIPAL\_UNPARSE\_SHORT}
-\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT:krb5-principal-unparse-short}}\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT:krb5-principal-unparse-short-data}}\index{KRB5\_PRINCIPAL\_UNPARSE\_SHORT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRINCIPAL_UNPARSE_SHORT:KRB5_PRINCIPAL_UNPARSE_SHORT}}\pysigline{\sphinxbfcode{KRB5\_PRINCIPAL\_UNPARSE\_SHORT}}
-\end{fulllineitems}
-
-
-Omit realm if it is the local realm.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRINCIPAL\_UNPARSE\_SHORT}
-&
-\sphinxcode{0x1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PRIV}
-\label{\detokenize{appdev/refs/macros/KRB5_PRIV:krb5-priv-data}}\label{\detokenize{appdev/refs/macros/KRB5_PRIV::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PRIV:krb5-priv}}\index{KRB5\_PRIV (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PRIV:KRB5_PRIV}}\pysigline{\sphinxbfcode{KRB5\_PRIV}}
-\end{fulllineitems}
-
-
-Private application message.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PRIV}
-&
-\sphinxcode{((krb5\_msgtype)21)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PROMPT\_TYPE\_NEW\_PASSWORD}
-\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD:krb5-prompt-type-new-password-data}}\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD:krb5-prompt-type-new-password}}\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD::doc}}\index{KRB5\_PROMPT\_TYPE\_NEW\_PASSWORD (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD:KRB5_PROMPT_TYPE_NEW_PASSWORD}}\pysigline{\sphinxbfcode{KRB5\_PROMPT\_TYPE\_NEW\_PASSWORD}}
-\end{fulllineitems}
-
-
-Prompt for new password (during password change)
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PROMPT\_TYPE\_NEW\_PASSWORD}
-&
-\sphinxcode{0x2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PROMPT\_TYPE\_NEW\_PASSWORD\_AGAIN}
-\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN:krb5-prompt-type-new-password-again}}\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN:krb5-prompt-type-new-password-again-data}}\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN::doc}}\index{KRB5\_PROMPT\_TYPE\_NEW\_PASSWORD\_AGAIN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN:KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN}}\pysigline{\sphinxbfcode{KRB5\_PROMPT\_TYPE\_NEW\_PASSWORD\_AGAIN}}
-\end{fulllineitems}
-
-
-Prompt for new password again.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PROMPT\_TYPE\_NEW\_PASSWORD\_AGAIN}
-&
-\sphinxcode{0x3}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PROMPT\_TYPE\_PASSWORD}
-\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD:krb5-prompt-type-password-data}}\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD:krb5-prompt-type-password}}\index{KRB5\_PROMPT\_TYPE\_PASSWORD (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_PASSWORD:KRB5_PROMPT_TYPE_PASSWORD}}\pysigline{\sphinxbfcode{KRB5\_PROMPT\_TYPE\_PASSWORD}}
-\end{fulllineitems}
-
-
-Prompt for password.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PROMPT\_TYPE\_PASSWORD}
-&
-\sphinxcode{0x1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PROMPT\_TYPE\_PREAUTH}
-\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH:krb5-prompt-type-preauth-data}}\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH:krb5-prompt-type-preauth}}\index{KRB5\_PROMPT\_TYPE\_PREAUTH (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PROMPT_TYPE_PREAUTH:KRB5_PROMPT_TYPE_PREAUTH}}\pysigline{\sphinxbfcode{KRB5\_PROMPT\_TYPE\_PREAUTH}}
-\end{fulllineitems}
-
-
-Prompt for preauthentication data (such as an OTP value)
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PROMPT\_TYPE\_PREAUTH}
-&
-\sphinxcode{0x4}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_PVNO}
-\label{\detokenize{appdev/refs/macros/KRB5_PVNO:krb5-pvno-data}}\label{\detokenize{appdev/refs/macros/KRB5_PVNO::doc}}\label{\detokenize{appdev/refs/macros/KRB5_PVNO:krb5-pvno}}\index{KRB5\_PVNO (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_PVNO:KRB5_PVNO}}\pysigline{\sphinxbfcode{KRB5\_PVNO}}
-\end{fulllineitems}
-
-
-Protocol version number.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_PVNO}
-&
-\sphinxcode{5}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_REALM\_BRANCH\_CHAR}
-\label{\detokenize{appdev/refs/macros/KRB5_REALM_BRANCH_CHAR::doc}}\label{\detokenize{appdev/refs/macros/KRB5_REALM_BRANCH_CHAR:krb5-realm-branch-char}}\label{\detokenize{appdev/refs/macros/KRB5_REALM_BRANCH_CHAR:krb5-realm-branch-char-data}}\index{KRB5\_REALM\_BRANCH\_CHAR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_REALM_BRANCH_CHAR:KRB5_REALM_BRANCH_CHAR}}\pysigline{\sphinxbfcode{KRB5\_REALM\_BRANCH\_CHAR}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_REALM\_BRANCH\_CHAR}
-&
-\sphinxcode{'.'}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RECVAUTH\_BADAUTHVERS}
-\label{\detokenize{appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS:krb5-recvauth-badauthvers-data}}\label{\detokenize{appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS:krb5-recvauth-badauthvers}}\label{\detokenize{appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS::doc}}\index{KRB5\_RECVAUTH\_BADAUTHVERS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RECVAUTH_BADAUTHVERS:KRB5_RECVAUTH_BADAUTHVERS}}\pysigline{\sphinxbfcode{KRB5\_RECVAUTH\_BADAUTHVERS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RECVAUTH\_BADAUTHVERS}
-&
-\sphinxcode{0x0002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RECVAUTH\_SKIP\_VERSION}
-\label{\detokenize{appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION:krb5-recvauth-skip-version}}\label{\detokenize{appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION:krb5-recvauth-skip-version-data}}\label{\detokenize{appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION::doc}}\index{KRB5\_RECVAUTH\_SKIP\_VERSION (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RECVAUTH_SKIP_VERSION:KRB5_RECVAUTH_SKIP_VERSION}}\pysigline{\sphinxbfcode{KRB5\_RECVAUTH\_SKIP\_VERSION}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RECVAUTH\_SKIP\_VERSION}
-&
-\sphinxcode{0x0001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_REFERRAL\_REALM}
-\label{\detokenize{appdev/refs/macros/KRB5_REFERRAL_REALM:krb5-referral-realm-data}}\label{\detokenize{appdev/refs/macros/KRB5_REFERRAL_REALM::doc}}\label{\detokenize{appdev/refs/macros/KRB5_REFERRAL_REALM:krb5-referral-realm}}\index{KRB5\_REFERRAL\_REALM (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_REFERRAL_REALM:KRB5_REFERRAL_REALM}}\pysigline{\sphinxbfcode{KRB5\_REFERRAL\_REALM}}
-\end{fulllineitems}
-
-
-Constant for realm referrals.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_REFERRAL\_REALM}
-&
-\sphinxcode{""}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_COUNT\_LOW}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW:krb5-responder-pkinit-flags-token-user-pin-count-low-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW::doc}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW:krb5-responder-pkinit-flags-token-user-pin-count-low}}\index{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_COUNT\_LOW (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW:KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_COUNT_LOW}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_COUNT\_LOW}}
-\end{fulllineitems}
-
-
-This flag indicates that an incorrect PIN was supplied at least once since the last time the correct PIN was supplied.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_COUNT\_LOW}
-&
-\sphinxcode{(1 \textless{}\textless{} 0)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_FINAL\_TRY}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY:krb5-responder-pkinit-flags-token-user-pin-final-try}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY::doc}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY:krb5-responder-pkinit-flags-token-user-pin-final-try-data}}\index{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_FINAL\_TRY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY:KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_FINAL_TRY}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_FINAL\_TRY}}
-\end{fulllineitems}
-
-
-This flag indicates that supplying an incorrect PIN will cause the token to lock itself.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_FINAL\_TRY}
-&
-\sphinxcode{(1 \textless{}\textless{} 1)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_LOCKED}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED::doc}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED:krb5-responder-pkinit-flags-token-user-pin-locked}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED:krb5-responder-pkinit-flags-token-user-pin-locked-data}}\index{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_LOCKED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED:KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_USER_PIN_LOCKED}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_LOCKED}}
-\end{fulllineitems}
-
-
-This flag indicates that the user PIN is locked, and you can’t log in to the token with it.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_USER\_PIN\_LOCKED}
-&
-\sphinxcode{(1 \textless{}\textless{} 2)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_QUESTION\_PKINIT}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT:krb5-responder-question-pkinit}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT:krb5-responder-question-pkinit-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT::doc}}\index{KRB5\_RESPONDER\_QUESTION\_PKINIT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_PKINIT:KRB5_RESPONDER_QUESTION_PKINIT}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_QUESTION\_PKINIT}}
-\end{fulllineitems}
-
-
-PKINIT responder question.
-
-The PKINIT responder question is asked when the client needs a password that’s being used to protect key information, and is formatted as a JSON object. A specific identity’s flags value, if not zero, is the bitwise-OR of one or more of the KRB5\_RESPONDER\_PKINIT\_FLAGS\_TOKEN\_* flags defined below, and possibly other flags to be added later. Any resemblance to similarly-named CKF\_* values in the PKCS\#11 API should not be depended on.
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{\PYGZob{}}
- \PYG{n}{identity} \PYG{o}{\PYGZlt{}}\PYG{n}{string}\PYG{o}{\PYGZgt{}} \PYG{o}{:} \PYG{n}{flags} \PYG{o}{\PYGZlt{}}\PYG{n}{number}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{p}{.}\PYG{p}{.}\PYG{p}{.}
-\PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-The answer to the question MUST be JSON formatted:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{\PYGZob{}}
- \PYG{n}{identity} \PYG{o}{\PYGZlt{}}\PYG{n}{string}\PYG{o}{\PYGZgt{}} \PYG{o}{:} \PYG{n}{password} \PYG{o}{\PYGZlt{}}\PYG{n}{string}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{p}{.}\PYG{p}{.}\PYG{p}{.}
-\PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_QUESTION\_PKINIT}
-&
-\sphinxcode{"pkinit"}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_OTP\_FLAGS\_COLLECT\_PIN}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN:krb5-responder-otp-flags-collect-pin-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN::doc}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN:krb5-responder-otp-flags-collect-pin}}\index{KRB5\_RESPONDER\_OTP\_FLAGS\_COLLECT\_PIN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN:KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_OTP\_FLAGS\_COLLECT\_PIN}}
-\end{fulllineitems}
-
-
-This flag indicates that the PIN value MUST be collected.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_OTP\_FLAGS\_COLLECT\_PIN}
-&
-\sphinxcode{0x0002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_OTP\_FLAGS\_COLLECT\_TOKEN}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN:krb5-responder-otp-flags-collect-token-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN:krb5-responder-otp-flags-collect-token}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN::doc}}\index{KRB5\_RESPONDER\_OTP\_FLAGS\_COLLECT\_TOKEN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN:KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_OTP\_FLAGS\_COLLECT\_TOKEN}}
-\end{fulllineitems}
-
-
-This flag indicates that the token value MUST be collected.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_OTP\_FLAGS\_COLLECT\_TOKEN}
-&
-\sphinxcode{0x0001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_OTP\_FLAGS\_NEXTOTP}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP:krb5-responder-otp-flags-nextotp-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP::doc}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP:krb5-responder-otp-flags-nextotp}}\index{KRB5\_RESPONDER\_OTP\_FLAGS\_NEXTOTP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_NEXTOTP:KRB5_RESPONDER_OTP_FLAGS_NEXTOTP}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_OTP\_FLAGS\_NEXTOTP}}
-\end{fulllineitems}
-
-
-This flag indicates that the token is now in re-synchronization mode with the server.
-
-The user is expected to reply with the next code displayed on the token.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_OTP\_FLAGS\_NEXTOTP}
-&
-\sphinxcode{0x0004}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_OTP\_FLAGS\_SEPARATE\_PIN}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN:krb5-responder-otp-flags-separate-pin}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN:krb5-responder-otp-flags-separate-pin-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN::doc}}\index{KRB5\_RESPONDER\_OTP\_FLAGS\_SEPARATE\_PIN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN:KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_OTP\_FLAGS\_SEPARATE\_PIN}}
-\end{fulllineitems}
-
-
-This flag indicates that the PIN MUST be returned as a separate item.
-
-This flag only takes effect if KRB5\_RESPONDER\_OTP\_FLAGS\_COLLECT\_PIN is set. If this flag is not set, the responder may either concatenate PIN + token value and store it as “value” in the answer or it may return them separately. If they are returned separately, they will be concatenated internally.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_OTP\_FLAGS\_SEPARATE\_PIN}
-&
-\sphinxcode{0x0008}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_OTP\_FORMAT\_ALPHANUMERIC}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC:krb5-responder-otp-format-alphanumeric-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC:krb5-responder-otp-format-alphanumeric}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC::doc}}\index{KRB5\_RESPONDER\_OTP\_FORMAT\_ALPHANUMERIC (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC:KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_OTP\_FORMAT\_ALPHANUMERIC}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_OTP\_FORMAT\_ALPHANUMERIC}
-&
-\sphinxcode{2}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_OTP\_FORMAT\_DECIMAL}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL:krb5-responder-otp-format-decimal-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL::doc}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL:krb5-responder-otp-format-decimal}}\index{KRB5\_RESPONDER\_OTP\_FORMAT\_DECIMAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_DECIMAL:KRB5_RESPONDER_OTP_FORMAT_DECIMAL}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_OTP\_FORMAT\_DECIMAL}}
-\end{fulllineitems}
-
-
-These format constants identify the format of the token value.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_OTP\_FORMAT\_DECIMAL}
-&
-\sphinxcode{0}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_OTP\_FORMAT\_HEXADECIMAL}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL:krb5-responder-otp-format-hexadecimal-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL::doc}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL:krb5-responder-otp-format-hexadecimal}}\index{KRB5\_RESPONDER\_OTP\_FORMAT\_HEXADECIMAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL:KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_OTP\_FORMAT\_HEXADECIMAL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_OTP\_FORMAT\_HEXADECIMAL}
-&
-\sphinxcode{1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_QUESTION\_OTP}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP:krb5-responder-question-otp}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP:krb5-responder-question-otp-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP::doc}}\index{KRB5\_RESPONDER\_QUESTION\_OTP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_OTP:KRB5_RESPONDER_QUESTION_OTP}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_QUESTION\_OTP}}
-\end{fulllineitems}
-
-
-OTP responder question.
-
-The OTP responder question is asked when the KDC indicates that an OTP value is required in order to complete the authentication. The JSON format of the challenge is:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{\PYGZob{}}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{service}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{string} \PYG{p}{(}\PYG{n}{optional}\PYG{p}{)}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{tokenInfo}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{p}{[}
- \PYG{p}{\PYGZob{}}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{flags}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{number}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{vendor}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{string} \PYG{p}{(}\PYG{n}{optional}\PYG{p}{)}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{challenge}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{string} \PYG{p}{(}\PYG{n}{optional}\PYG{p}{)}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{length}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{number} \PYG{p}{(}\PYG{n}{optional}\PYG{p}{)}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{format}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{number} \PYG{p}{(}\PYG{n}{optional}\PYG{p}{)}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{tokenID}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{string} \PYG{p}{(}\PYG{n}{optional}\PYG{p}{)}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{algID}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{string} \PYG{p}{(}\PYG{n}{optional}\PYG{p}{)}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{p}{\PYGZcb{}}\PYG{p}{,}
- \PYG{p}{.}\PYG{p}{.}\PYG{p}{.}
- \PYG{p}{]}
-\PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-The answer to the question MUST be JSON formatted:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{p}{\PYGZob{}}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{tokeninfo}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{number}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{value}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{string} \PYG{p}{(}\PYG{n}{optional}\PYG{p}{)}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
- \PYG{l+s}{\PYGZdq{}}\PYG{l+s}{pin}\PYG{l+s}{\PYGZdq{}}\PYG{o}{:} \PYG{o}{\PYGZlt{}}\PYG{n}{string} \PYG{p}{(}\PYG{n}{optional}\PYG{p}{)}\PYG{o}{\PYGZgt{}}\PYG{p}{,}
-\PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-For more detail, please see RFC 6560.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_QUESTION\_OTP}
-&
-\sphinxcode{"otp"}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_RESPONDER\_QUESTION\_PASSWORD}
-\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD:krb5-responder-question-password-data}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD:krb5-responder-question-password}}\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD::doc}}\index{KRB5\_RESPONDER\_QUESTION\_PASSWORD (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_RESPONDER_QUESTION_PASSWORD:KRB5_RESPONDER_QUESTION_PASSWORD}}\pysigline{\sphinxbfcode{KRB5\_RESPONDER\_QUESTION\_PASSWORD}}
-\end{fulllineitems}
-
-
-Long-term password responder question.
-
-This question is asked when the long-term password is needed. It has no challenge and the response is simply the password string.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_RESPONDER\_QUESTION\_PASSWORD}
-&
-\sphinxcode{"password"}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_SAFE}
-\label{\detokenize{appdev/refs/macros/KRB5_SAFE:krb5-safe}}\label{\detokenize{appdev/refs/macros/KRB5_SAFE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_SAFE:krb5-safe-data}}\index{KRB5\_SAFE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_SAFE:KRB5_SAFE}}\pysigline{\sphinxbfcode{KRB5\_SAFE}}
-\end{fulllineitems}
-
-
-Safe application message.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_SAFE}
-&
-\sphinxcode{((krb5\_msgtype)20)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_SAM\_MUST\_PK\_ENCRYPT\_SAD}
-\label{\detokenize{appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD:krb5-sam-must-pk-encrypt-sad}}\label{\detokenize{appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD:krb5-sam-must-pk-encrypt-sad-data}}\label{\detokenize{appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD::doc}}\index{KRB5\_SAM\_MUST\_PK\_ENCRYPT\_SAD (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_SAM_MUST_PK_ENCRYPT_SAD:KRB5_SAM_MUST_PK_ENCRYPT_SAD}}\pysigline{\sphinxbfcode{KRB5\_SAM\_MUST\_PK\_ENCRYPT\_SAD}}
-\end{fulllineitems}
-
-
-currently must be zero
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_SAM\_MUST\_PK\_ENCRYPT\_SAD}
-&
-\sphinxcode{0x20000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_SAM\_SEND\_ENCRYPTED\_SAD}
-\label{\detokenize{appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD:krb5-sam-send-encrypted-sad}}\label{\detokenize{appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD::doc}}\label{\detokenize{appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD:krb5-sam-send-encrypted-sad-data}}\index{KRB5\_SAM\_SEND\_ENCRYPTED\_SAD (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_SAM_SEND_ENCRYPTED_SAD:KRB5_SAM_SEND_ENCRYPTED_SAD}}\pysigline{\sphinxbfcode{KRB5\_SAM\_SEND\_ENCRYPTED\_SAD}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_SAM\_SEND\_ENCRYPTED\_SAD}
-&
-\sphinxcode{0x40000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_SAM\_USE\_SAD\_AS\_KEY}
-\label{\detokenize{appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY::doc}}\label{\detokenize{appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY:krb5-sam-use-sad-as-key}}\label{\detokenize{appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY:krb5-sam-use-sad-as-key-data}}\index{KRB5\_SAM\_USE\_SAD\_AS\_KEY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_SAM_USE_SAD_AS_KEY:KRB5_SAM_USE_SAD_AS_KEY}}\pysigline{\sphinxbfcode{KRB5\_SAM\_USE\_SAD\_AS\_KEY}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_SAM\_USE\_SAD\_AS\_KEY}
-&
-\sphinxcode{0x80000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_MATCH\_2ND\_TKT}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT:krb5-tc-match-2nd-tkt-data}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT:krb5-tc-match-2nd-tkt}}\index{KRB5\_TC\_MATCH\_2ND\_TKT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_2ND_TKT:KRB5_TC_MATCH_2ND_TKT}}\pysigline{\sphinxbfcode{KRB5\_TC\_MATCH\_2ND\_TKT}}
-\end{fulllineitems}
-
-
-The second ticket must match.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_MATCH\_2ND\_TKT}
-&
-\sphinxcode{0x00000080}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_MATCH\_AUTHDATA}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA:krb5-tc-match-authdata-data}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA:krb5-tc-match-authdata}}\index{KRB5\_TC\_MATCH\_AUTHDATA (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_AUTHDATA:KRB5_TC_MATCH_AUTHDATA}}\pysigline{\sphinxbfcode{KRB5\_TC\_MATCH\_AUTHDATA}}
-\end{fulllineitems}
-
-
-The authorization data must match.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_MATCH\_AUTHDATA}
-&
-\sphinxcode{0x00000020}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_MATCH\_FLAGS}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_FLAGS:krb5-tc-match-flags}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_FLAGS::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_FLAGS:krb5-tc-match-flags-data}}\index{KRB5\_TC\_MATCH\_FLAGS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_FLAGS:KRB5_TC_MATCH_FLAGS}}\pysigline{\sphinxbfcode{KRB5\_TC\_MATCH\_FLAGS}}
-\end{fulllineitems}
-
-
-All the flags set in the match credentials must be set.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_MATCH\_FLAGS}
-&
-\sphinxcode{0x00000004}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_MATCH\_FLAGS\_EXACT}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT:krb5-tc-match-flags-exact}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT:krb5-tc-match-flags-exact-data}}\index{KRB5\_TC\_MATCH\_FLAGS\_EXACT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_FLAGS_EXACT:KRB5_TC_MATCH_FLAGS_EXACT}}\pysigline{\sphinxbfcode{KRB5\_TC\_MATCH\_FLAGS\_EXACT}}
-\end{fulllineitems}
-
-
-All the flags must match exactly.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_MATCH\_FLAGS\_EXACT}
-&
-\sphinxcode{0x00000010}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_MATCH\_IS\_SKEY}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY:krb5-tc-match-is-skey}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY:krb5-tc-match-is-skey-data}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY::doc}}\index{KRB5\_TC\_MATCH\_IS\_SKEY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_IS_SKEY:KRB5_TC_MATCH_IS_SKEY}}\pysigline{\sphinxbfcode{KRB5\_TC\_MATCH\_IS\_SKEY}}
-\end{fulllineitems}
-
-
-The is\_skey field must match exactly.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_MATCH\_IS\_SKEY}
-&
-\sphinxcode{0x00000002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_MATCH\_KTYPE}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_KTYPE:krb5-tc-match-ktype}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_KTYPE:krb5-tc-match-ktype-data}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_KTYPE::doc}}\index{KRB5\_TC\_MATCH\_KTYPE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_KTYPE:KRB5_TC_MATCH_KTYPE}}\pysigline{\sphinxbfcode{KRB5\_TC\_MATCH\_KTYPE}}
-\end{fulllineitems}
-
-
-The encryption key type must match.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_MATCH\_KTYPE}
-&
-\sphinxcode{0x00000100}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_MATCH\_SRV\_NAMEONLY}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY:krb5-tc-match-srv-nameonly}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY:krb5-tc-match-srv-nameonly-data}}\index{KRB5\_TC\_MATCH\_SRV\_NAMEONLY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_SRV_NAMEONLY:KRB5_TC_MATCH_SRV_NAMEONLY}}\pysigline{\sphinxbfcode{KRB5\_TC\_MATCH\_SRV\_NAMEONLY}}
-\end{fulllineitems}
-
-
-Only the name portion of the principal name must match.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_MATCH\_SRV\_NAMEONLY}
-&
-\sphinxcode{0x00000040}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_MATCH\_TIMES}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_TIMES:krb5-tc-match-times}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_TIMES:krb5-tc-match-times-data}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_TIMES::doc}}\index{KRB5\_TC\_MATCH\_TIMES (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_TIMES:KRB5_TC_MATCH_TIMES}}\pysigline{\sphinxbfcode{KRB5\_TC\_MATCH\_TIMES}}
-\end{fulllineitems}
-
-
-The requested lifetime must be at least as great as the time specified.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_MATCH\_TIMES}
-&
-\sphinxcode{0x00000001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_MATCH\_TIMES\_EXACT}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT:krb5-tc-match-times-exact-data}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT:krb5-tc-match-times-exact}}\index{KRB5\_TC\_MATCH\_TIMES\_EXACT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_MATCH_TIMES_EXACT:KRB5_TC_MATCH_TIMES_EXACT}}\pysigline{\sphinxbfcode{KRB5\_TC\_MATCH\_TIMES\_EXACT}}
-\end{fulllineitems}
-
-
-All the time fields must match exactly.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_MATCH\_TIMES\_EXACT}
-&
-\sphinxcode{0x00000008}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_NOTICKET}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_NOTICKET:krb5-tc-noticket}}\label{\detokenize{appdev/refs/macros/KRB5_TC_NOTICKET::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TC_NOTICKET:krb5-tc-noticket-data}}\index{KRB5\_TC\_NOTICKET (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_NOTICKET:KRB5_TC_NOTICKET}}\pysigline{\sphinxbfcode{KRB5\_TC\_NOTICKET}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_NOTICKET}
-&
-\sphinxcode{0x00000002}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_OPENCLOSE}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_OPENCLOSE:krb5-tc-openclose}}\label{\detokenize{appdev/refs/macros/KRB5_TC_OPENCLOSE:krb5-tc-openclose-data}}\label{\detokenize{appdev/refs/macros/KRB5_TC_OPENCLOSE::doc}}\index{KRB5\_TC\_OPENCLOSE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_OPENCLOSE:KRB5_TC_OPENCLOSE}}\pysigline{\sphinxbfcode{KRB5\_TC\_OPENCLOSE}}
-\end{fulllineitems}
-
-
-Open and close the file for each cache operation.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_OPENCLOSE}
-&
-\sphinxcode{0x00000001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TC\_SUPPORTED\_KTYPES}
-\label{\detokenize{appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES:krb5-tc-supported-ktypes-data}}\label{\detokenize{appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES:krb5-tc-supported-ktypes}}\index{KRB5\_TC\_SUPPORTED\_KTYPES (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TC_SUPPORTED_KTYPES:KRB5_TC_SUPPORTED_KTYPES}}\pysigline{\sphinxbfcode{KRB5\_TC\_SUPPORTED\_KTYPES}}
-\end{fulllineitems}
-
-
-The supported key types must match.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TC\_SUPPORTED\_KTYPES}
-&
-\sphinxcode{0x00000200}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TGS\_NAME}
-\label{\detokenize{appdev/refs/macros/KRB5_TGS_NAME:krb5-tgs-name-data}}\label{\detokenize{appdev/refs/macros/KRB5_TGS_NAME::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TGS_NAME:krb5-tgs-name}}\index{KRB5\_TGS\_NAME (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TGS_NAME:KRB5_TGS_NAME}}\pysigline{\sphinxbfcode{KRB5\_TGS\_NAME}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TGS\_NAME}
-&
-\sphinxcode{"krbtgt"}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TGS\_NAME\_SIZE}
-\label{\detokenize{appdev/refs/macros/KRB5_TGS_NAME_SIZE:krb5-tgs-name-size}}\label{\detokenize{appdev/refs/macros/KRB5_TGS_NAME_SIZE:krb5-tgs-name-size-data}}\label{\detokenize{appdev/refs/macros/KRB5_TGS_NAME_SIZE::doc}}\index{KRB5\_TGS\_NAME\_SIZE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TGS_NAME_SIZE:KRB5_TGS_NAME_SIZE}}\pysigline{\sphinxbfcode{KRB5\_TGS\_NAME\_SIZE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TGS\_NAME\_SIZE}
-&
-\sphinxcode{6}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TGS\_REP}
-\label{\detokenize{appdev/refs/macros/KRB5_TGS_REP::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TGS_REP:krb5-tgs-rep-data}}\label{\detokenize{appdev/refs/macros/KRB5_TGS_REP:krb5-tgs-rep}}\index{KRB5\_TGS\_REP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TGS_REP:KRB5_TGS_REP}}\pysigline{\sphinxbfcode{KRB5\_TGS\_REP}}
-\end{fulllineitems}
-
-
-Response to TGS request.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TGS\_REP}
-&
-\sphinxcode{((krb5\_msgtype)13)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TGS\_REQ}
-\label{\detokenize{appdev/refs/macros/KRB5_TGS_REQ:krb5-tgs-req-data}}\label{\detokenize{appdev/refs/macros/KRB5_TGS_REQ::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TGS_REQ:krb5-tgs-req}}\index{KRB5\_TGS\_REQ (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TGS_REQ:KRB5_TGS_REQ}}\pysigline{\sphinxbfcode{KRB5\_TGS\_REQ}}
-\end{fulllineitems}
-
-
-Ticket granting server request.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TGS\_REQ}
-&
-\sphinxcode{((krb5\_msgtype)12)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_TKT\_CREDS\_STEP\_FLAG\_CONTINUE}
-\label{\detokenize{appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE:krb5-tkt-creds-step-flag-continue-data}}\label{\detokenize{appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE::doc}}\label{\detokenize{appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE:krb5-tkt-creds-step-flag-continue}}\index{KRB5\_TKT\_CREDS\_STEP\_FLAG\_CONTINUE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_TKT_CREDS_STEP_FLAG_CONTINUE:KRB5_TKT_CREDS_STEP_FLAG_CONTINUE}}\pysigline{\sphinxbfcode{KRB5\_TKT\_CREDS\_STEP\_FLAG\_CONTINUE}}
-\end{fulllineitems}
-
-
-More responses needed.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_TKT\_CREDS\_STEP\_FLAG\_CONTINUE}
-&
-\sphinxcode{0x1}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_VERIFY\_INIT\_CREDS\_OPT\_AP\_REQ\_NOFAIL}
-\label{\detokenize{appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL:krb5-verify-init-creds-opt-ap-req-nofail}}\label{\detokenize{appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL::doc}}\label{\detokenize{appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL:krb5-verify-init-creds-opt-ap-req-nofail-data}}\index{KRB5\_VERIFY\_INIT\_CREDS\_OPT\_AP\_REQ\_NOFAIL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL:KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL}}\pysigline{\sphinxbfcode{KRB5\_VERIFY\_INIT\_CREDS\_OPT\_AP\_REQ\_NOFAIL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_VERIFY\_INIT\_CREDS\_OPT\_AP\_REQ\_NOFAIL}
-&
-\sphinxcode{0x0001}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{KRB5\_WELLKNOWN\_NAMESTR}
-\label{\detokenize{appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR::doc}}\label{\detokenize{appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR:krb5-wellknown-namestr}}\label{\detokenize{appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR:krb5-wellknown-namestr-data}}\index{KRB5\_WELLKNOWN\_NAMESTR (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/KRB5_WELLKNOWN_NAMESTR:KRB5_WELLKNOWN_NAMESTR}}\pysigline{\sphinxbfcode{KRB5\_WELLKNOWN\_NAMESTR}}
-\end{fulllineitems}
-
-
-First component of NT\_WELLKNOWN principals.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{KRB5\_WELLKNOWN\_NAMESTR}
-&
-\sphinxcode{"WELLKNOWN"}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{LR\_TYPE\_INTERPRETATION\_MASK}
-\label{\detokenize{appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK:lr-type-interpretation-mask-data}}\label{\detokenize{appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK:lr-type-interpretation-mask}}\label{\detokenize{appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK::doc}}\index{LR\_TYPE\_INTERPRETATION\_MASK (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/LR_TYPE_INTERPRETATION_MASK:LR_TYPE_INTERPRETATION_MASK}}\pysigline{\sphinxbfcode{LR\_TYPE\_INTERPRETATION\_MASK}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{LR\_TYPE\_INTERPRETATION\_MASK}
-&
-\sphinxcode{0x7fff}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{LR\_TYPE\_THIS\_SERVER\_ONLY}
-\label{\detokenize{appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY:lr-type-this-server-only-data}}\label{\detokenize{appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY:lr-type-this-server-only}}\label{\detokenize{appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY::doc}}\index{LR\_TYPE\_THIS\_SERVER\_ONLY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/LR_TYPE_THIS_SERVER_ONLY:LR_TYPE_THIS_SERVER_ONLY}}\pysigline{\sphinxbfcode{LR\_TYPE\_THIS\_SERVER\_ONLY}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{LR\_TYPE\_THIS\_SERVER\_ONLY}
-&
-\sphinxcode{0x8000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{MAX\_KEYTAB\_NAME\_LEN}
-\label{\detokenize{appdev/refs/macros/MAX_KEYTAB_NAME_LEN:max-keytab-name-len-data}}\label{\detokenize{appdev/refs/macros/MAX_KEYTAB_NAME_LEN::doc}}\label{\detokenize{appdev/refs/macros/MAX_KEYTAB_NAME_LEN:max-keytab-name-len}}\index{MAX\_KEYTAB\_NAME\_LEN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/MAX_KEYTAB_NAME_LEN:MAX_KEYTAB_NAME_LEN}}\pysigline{\sphinxbfcode{MAX\_KEYTAB\_NAME\_LEN}}
-\end{fulllineitems}
-
-
-Long enough for MAXPATHLEN + some extra.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{MAX\_KEYTAB\_NAME\_LEN}
-&
-\sphinxcode{1100}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{MSEC\_DIRBIT}
-\label{\detokenize{appdev/refs/macros/MSEC_DIRBIT:msec-dirbit}}\label{\detokenize{appdev/refs/macros/MSEC_DIRBIT:msec-dirbit-data}}\label{\detokenize{appdev/refs/macros/MSEC_DIRBIT::doc}}\index{MSEC\_DIRBIT (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/MSEC_DIRBIT:MSEC_DIRBIT}}\pysigline{\sphinxbfcode{MSEC\_DIRBIT}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{MSEC\_DIRBIT}
-&
-\sphinxcode{0x8000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{MSEC\_VAL\_MASK}
-\label{\detokenize{appdev/refs/macros/MSEC_VAL_MASK:msec-val-mask-data}}\label{\detokenize{appdev/refs/macros/MSEC_VAL_MASK::doc}}\label{\detokenize{appdev/refs/macros/MSEC_VAL_MASK:msec-val-mask}}\index{MSEC\_VAL\_MASK (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/MSEC_VAL_MASK:MSEC_VAL_MASK}}\pysigline{\sphinxbfcode{MSEC\_VAL\_MASK}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{MSEC\_VAL\_MASK}
-&
-\sphinxcode{0x7fff}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{SALT\_TYPE\_AFS\_LENGTH}
-\label{\detokenize{appdev/refs/macros/SALT_TYPE_AFS_LENGTH::doc}}\label{\detokenize{appdev/refs/macros/SALT_TYPE_AFS_LENGTH:salt-type-afs-length-data}}\label{\detokenize{appdev/refs/macros/SALT_TYPE_AFS_LENGTH:salt-type-afs-length}}\index{SALT\_TYPE\_AFS\_LENGTH (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/SALT_TYPE_AFS_LENGTH:SALT_TYPE_AFS_LENGTH}}\pysigline{\sphinxbfcode{SALT\_TYPE\_AFS\_LENGTH}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{SALT\_TYPE\_AFS\_LENGTH}
-&
-\sphinxcode{UINT\_MAX}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{SALT\_TYPE\_NO\_LENGTH}
-\label{\detokenize{appdev/refs/macros/SALT_TYPE_NO_LENGTH:salt-type-no-length-data}}\label{\detokenize{appdev/refs/macros/SALT_TYPE_NO_LENGTH::doc}}\label{\detokenize{appdev/refs/macros/SALT_TYPE_NO_LENGTH:salt-type-no-length}}\index{SALT\_TYPE\_NO\_LENGTH (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/SALT_TYPE_NO_LENGTH:SALT_TYPE_NO_LENGTH}}\pysigline{\sphinxbfcode{SALT\_TYPE\_NO\_LENGTH}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{SALT\_TYPE\_NO\_LENGTH}
-&
-\sphinxcode{UINT\_MAX}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{THREEPARAMOPEN}
-\label{\detokenize{appdev/refs/macros/THREEPARAMOPEN:threeparamopen}}\label{\detokenize{appdev/refs/macros/THREEPARAMOPEN:threeparamopen-data}}\label{\detokenize{appdev/refs/macros/THREEPARAMOPEN::doc}}\index{THREEPARAMOPEN (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/THREEPARAMOPEN:THREEPARAMOPEN}}\pysigline{\sphinxbfcode{THREEPARAMOPEN}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{THREEPARAMOPEN (x, y, z)}
-&
-\sphinxcode{open(x,y,z)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_ANONYMOUS}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_ANONYMOUS::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_ANONYMOUS:tkt-flg-anonymous}}\label{\detokenize{appdev/refs/macros/TKT_FLG_ANONYMOUS:tkt-flg-anonymous-data}}\index{TKT\_FLG\_ANONYMOUS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_ANONYMOUS:TKT_FLG_ANONYMOUS}}\pysigline{\sphinxbfcode{TKT\_FLG\_ANONYMOUS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_ANONYMOUS}
-&
-\sphinxcode{0x00008000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_ENC\_PA\_REP}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_ENC_PA_REP:tkt-flg-enc-pa-rep}}\label{\detokenize{appdev/refs/macros/TKT_FLG_ENC_PA_REP:tkt-flg-enc-pa-rep-data}}\label{\detokenize{appdev/refs/macros/TKT_FLG_ENC_PA_REP::doc}}\index{TKT\_FLG\_ENC\_PA\_REP (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_ENC_PA_REP:TKT_FLG_ENC_PA_REP}}\pysigline{\sphinxbfcode{TKT\_FLG\_ENC\_PA\_REP}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_ENC\_PA\_REP}
-&
-\sphinxcode{0x00010000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_FORWARDABLE}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_FORWARDABLE:tkt-flg-forwardable-data}}\label{\detokenize{appdev/refs/macros/TKT_FLG_FORWARDABLE:tkt-flg-forwardable}}\label{\detokenize{appdev/refs/macros/TKT_FLG_FORWARDABLE::doc}}\index{TKT\_FLG\_FORWARDABLE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_FORWARDABLE:TKT_FLG_FORWARDABLE}}\pysigline{\sphinxbfcode{TKT\_FLG\_FORWARDABLE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_FORWARDABLE}
-&
-\sphinxcode{0x40000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_FORWARDED}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_FORWARDED::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_FORWARDED:tkt-flg-forwarded}}\label{\detokenize{appdev/refs/macros/TKT_FLG_FORWARDED:tkt-flg-forwarded-data}}\index{TKT\_FLG\_FORWARDED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_FORWARDED:TKT_FLG_FORWARDED}}\pysigline{\sphinxbfcode{TKT\_FLG\_FORWARDED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_FORWARDED}
-&
-\sphinxcode{0x20000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_HW\_AUTH}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_HW_AUTH::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_HW_AUTH:tkt-flg-hw-auth}}\label{\detokenize{appdev/refs/macros/TKT_FLG_HW_AUTH:tkt-flg-hw-auth-data}}\index{TKT\_FLG\_HW\_AUTH (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_HW_AUTH:TKT_FLG_HW_AUTH}}\pysigline{\sphinxbfcode{TKT\_FLG\_HW\_AUTH}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_HW\_AUTH}
-&
-\sphinxcode{0x00100000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_INITIAL}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_INITIAL:tkt-flg-initial}}\label{\detokenize{appdev/refs/macros/TKT_FLG_INITIAL::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_INITIAL:tkt-flg-initial-data}}\index{TKT\_FLG\_INITIAL (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_INITIAL:TKT_FLG_INITIAL}}\pysigline{\sphinxbfcode{TKT\_FLG\_INITIAL}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_INITIAL}
-&
-\sphinxcode{0x00400000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_INVALID}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_INVALID:tkt-flg-invalid-data}}\label{\detokenize{appdev/refs/macros/TKT_FLG_INVALID::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_INVALID:tkt-flg-invalid}}\index{TKT\_FLG\_INVALID (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_INVALID:TKT_FLG_INVALID}}\pysigline{\sphinxbfcode{TKT\_FLG\_INVALID}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_INVALID}
-&
-\sphinxcode{0x01000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_MAY\_POSTDATE}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_MAY_POSTDATE:tkt-flg-may-postdate}}\label{\detokenize{appdev/refs/macros/TKT_FLG_MAY_POSTDATE::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_MAY_POSTDATE:tkt-flg-may-postdate-data}}\index{TKT\_FLG\_MAY\_POSTDATE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_MAY_POSTDATE:TKT_FLG_MAY_POSTDATE}}\pysigline{\sphinxbfcode{TKT\_FLG\_MAY\_POSTDATE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_MAY\_POSTDATE}
-&
-\sphinxcode{0x04000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_OK\_AS\_DELEGATE}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE:tkt-flg-ok-as-delegate-data}}\label{\detokenize{appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE:tkt-flg-ok-as-delegate}}\label{\detokenize{appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE::doc}}\index{TKT\_FLG\_OK\_AS\_DELEGATE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_OK_AS_DELEGATE:TKT_FLG_OK_AS_DELEGATE}}\pysigline{\sphinxbfcode{TKT\_FLG\_OK\_AS\_DELEGATE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_OK\_AS\_DELEGATE}
-&
-\sphinxcode{0x00040000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_POSTDATED}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_POSTDATED:tkt-flg-postdated}}\label{\detokenize{appdev/refs/macros/TKT_FLG_POSTDATED::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_POSTDATED:tkt-flg-postdated-data}}\index{TKT\_FLG\_POSTDATED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_POSTDATED:TKT_FLG_POSTDATED}}\pysigline{\sphinxbfcode{TKT\_FLG\_POSTDATED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_POSTDATED}
-&
-\sphinxcode{0x02000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_PRE\_AUTH}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_PRE_AUTH:tkt-flg-pre-auth-data}}\label{\detokenize{appdev/refs/macros/TKT_FLG_PRE_AUTH::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_PRE_AUTH:tkt-flg-pre-auth}}\index{TKT\_FLG\_PRE\_AUTH (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_PRE_AUTH:TKT_FLG_PRE_AUTH}}\pysigline{\sphinxbfcode{TKT\_FLG\_PRE\_AUTH}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_PRE\_AUTH}
-&
-\sphinxcode{0x00200000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_PROXIABLE}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_PROXIABLE:tkt-flg-proxiable}}\label{\detokenize{appdev/refs/macros/TKT_FLG_PROXIABLE:tkt-flg-proxiable-data}}\label{\detokenize{appdev/refs/macros/TKT_FLG_PROXIABLE::doc}}\index{TKT\_FLG\_PROXIABLE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_PROXIABLE:TKT_FLG_PROXIABLE}}\pysigline{\sphinxbfcode{TKT\_FLG\_PROXIABLE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_PROXIABLE}
-&
-\sphinxcode{0x10000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_PROXY}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_PROXY::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_PROXY:tkt-flg-proxy}}\label{\detokenize{appdev/refs/macros/TKT_FLG_PROXY:tkt-flg-proxy-data}}\index{TKT\_FLG\_PROXY (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_PROXY:TKT_FLG_PROXY}}\pysigline{\sphinxbfcode{TKT\_FLG\_PROXY}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_PROXY}
-&
-\sphinxcode{0x08000000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_RENEWABLE}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_RENEWABLE::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_RENEWABLE:tkt-flg-renewable}}\label{\detokenize{appdev/refs/macros/TKT_FLG_RENEWABLE:tkt-flg-renewable-data}}\index{TKT\_FLG\_RENEWABLE (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_RENEWABLE:TKT_FLG_RENEWABLE}}\pysigline{\sphinxbfcode{TKT\_FLG\_RENEWABLE}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_RENEWABLE}
-&
-\sphinxcode{0x00800000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{TKT\_FLG\_TRANSIT\_POLICY\_CHECKED}
-\label{\detokenize{appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED::doc}}\label{\detokenize{appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED:tkt-flg-transit-policy-checked}}\label{\detokenize{appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED:tkt-flg-transit-policy-checked-data}}\index{TKT\_FLG\_TRANSIT\_POLICY\_CHECKED (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/TKT_FLG_TRANSIT_POLICY_CHECKED:TKT_FLG_TRANSIT_POLICY_CHECKED}}\pysigline{\sphinxbfcode{TKT\_FLG\_TRANSIT\_POLICY\_CHECKED}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{TKT\_FLG\_TRANSIT\_POLICY\_CHECKED}
-&
-\sphinxcode{0x00080000}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{VALID\_INT\_BITS}
-\label{\detokenize{appdev/refs/macros/VALID_INT_BITS:valid-int-bits}}\label{\detokenize{appdev/refs/macros/VALID_INT_BITS:valid-int-bits-data}}\label{\detokenize{appdev/refs/macros/VALID_INT_BITS::doc}}\index{VALID\_INT\_BITS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/VALID_INT_BITS:VALID_INT_BITS}}\pysigline{\sphinxbfcode{VALID\_INT\_BITS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{VALID\_INT\_BITS}
-&
-\sphinxcode{INT\_MAX}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{VALID\_UINT\_BITS}
-\label{\detokenize{appdev/refs/macros/VALID_UINT_BITS:valid-uint-bits}}\label{\detokenize{appdev/refs/macros/VALID_UINT_BITS::doc}}\label{\detokenize{appdev/refs/macros/VALID_UINT_BITS:valid-uint-bits-data}}\index{VALID\_UINT\_BITS (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/VALID_UINT_BITS:VALID_UINT_BITS}}\pysigline{\sphinxbfcode{VALID\_UINT\_BITS}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{VALID\_UINT\_BITS}
-&
-\sphinxcode{UINT\_MAX}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_const}
-\label{\detokenize{appdev/refs/macros/krb5_const:krb5-const}}\label{\detokenize{appdev/refs/macros/krb5_const:krb5-const-data}}\label{\detokenize{appdev/refs/macros/krb5_const::doc}}\index{krb5\_const (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_const:krb5_const}}\pysigline{\sphinxbfcode{krb5\_const}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_const}
-&
-\sphinxcode{const}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_princ\_component}
-\label{\detokenize{appdev/refs/macros/krb5_princ_component::doc}}\label{\detokenize{appdev/refs/macros/krb5_princ_component:krb5-princ-component-data}}\label{\detokenize{appdev/refs/macros/krb5_princ_component:krb5-princ-component}}\index{krb5\_princ\_component (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_princ_component:krb5_princ_component}}\pysigline{\sphinxbfcode{krb5\_princ\_component}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_princ\_component (context, princ, i)}
-&
-\sphinxcode{(((i) \textless{} krb5\_princ\_size(context, princ)) ? (princ)-\textgreater{}data + (i) : NULL)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_princ\_name}
-\label{\detokenize{appdev/refs/macros/krb5_princ_name:krb5-princ-name-data}}\label{\detokenize{appdev/refs/macros/krb5_princ_name:krb5-princ-name}}\label{\detokenize{appdev/refs/macros/krb5_princ_name::doc}}\index{krb5\_princ\_name (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_princ_name:krb5_princ_name}}\pysigline{\sphinxbfcode{krb5\_princ\_name}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_princ\_name (context, princ)}
-&
-\sphinxcode{(princ)-\textgreater{}data}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_princ\_realm}
-\label{\detokenize{appdev/refs/macros/krb5_princ_realm::doc}}\label{\detokenize{appdev/refs/macros/krb5_princ_realm:krb5-princ-realm-data}}\label{\detokenize{appdev/refs/macros/krb5_princ_realm:krb5-princ-realm}}\index{krb5\_princ\_realm (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_princ_realm:krb5_princ_realm}}\pysigline{\sphinxbfcode{krb5\_princ\_realm}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_princ\_realm (context, princ)}
-&
-\sphinxcode{(\&(princ)-\textgreater{}realm)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_princ\_set\_realm}
-\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm:krb5-princ-set-realm-data}}\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm::doc}}\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm:krb5-princ-set-realm}}\index{krb5\_princ\_set\_realm (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm:krb5_princ_set_realm}}\pysigline{\sphinxbfcode{krb5\_princ\_set\_realm}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_princ\_set\_realm (context, princ, value)}
-&
-\sphinxcode{((princ)-\textgreater{}realm = *(value))}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_princ\_set\_realm\_data}
-\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm_data:krb5-princ-set-realm-data-data}}\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm_data::doc}}\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm_data:krb5-princ-set-realm-data}}\index{krb5\_princ\_set\_realm\_data (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm_data:krb5_princ_set_realm_data}}\pysigline{\sphinxbfcode{krb5\_princ\_set\_realm\_data}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_princ\_set\_realm\_data (context, princ, value)}
-&
-\sphinxcode{(princ)-\textgreater{}realm.data = (value)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_princ\_set\_realm\_length}
-\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm_length:krb5-princ-set-realm-length-data}}\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm_length::doc}}\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm_length:krb5-princ-set-realm-length}}\index{krb5\_princ\_set\_realm\_length (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_princ_set_realm_length:krb5_princ_set_realm_length}}\pysigline{\sphinxbfcode{krb5\_princ\_set\_realm\_length}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_princ\_set\_realm\_length (context, princ, value)}
-&
-\sphinxcode{(princ)-\textgreater{}realm.length = (value)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_princ\_size}
-\label{\detokenize{appdev/refs/macros/krb5_princ_size:krb5-princ-size-data}}\label{\detokenize{appdev/refs/macros/krb5_princ_size::doc}}\label{\detokenize{appdev/refs/macros/krb5_princ_size:krb5-princ-size}}\index{krb5\_princ\_size (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_princ_size:krb5_princ_size}}\pysigline{\sphinxbfcode{krb5\_princ\_size}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_princ\_size (context, princ)}
-&
-\sphinxcode{(princ)-\textgreater{}length}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_princ\_type}
-\label{\detokenize{appdev/refs/macros/krb5_princ_type:krb5-princ-type}}\label{\detokenize{appdev/refs/macros/krb5_princ_type:krb5-princ-type-data}}\label{\detokenize{appdev/refs/macros/krb5_princ_type::doc}}\index{krb5\_princ\_type (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_princ_type:krb5_princ_type}}\pysigline{\sphinxbfcode{krb5\_princ\_type}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_princ\_type (context, princ)}
-&
-\sphinxcode{(princ)-\textgreater{}type}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_roundup}
-\label{\detokenize{appdev/refs/macros/krb5_roundup:krb5-roundup-data}}\label{\detokenize{appdev/refs/macros/krb5_roundup:krb5-roundup}}\label{\detokenize{appdev/refs/macros/krb5_roundup::doc}}\index{krb5\_roundup (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_roundup:krb5_roundup}}\pysigline{\sphinxbfcode{krb5\_roundup}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_roundup (x, y)}
-&
-\sphinxcode{((((x) + (y) - 1)/(y))*(y))}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_x}
-\label{\detokenize{appdev/refs/macros/krb5_x::doc}}\label{\detokenize{appdev/refs/macros/krb5_x:krb5-x}}\label{\detokenize{appdev/refs/macros/krb5_x:krb5-x-data}}\index{krb5\_x (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_x:krb5_x}}\pysigline{\sphinxbfcode{krb5\_x}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_x (ptr, args)}
-&
-\sphinxcode{((ptr)?((*(ptr)) args):(abort(),1))}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb5\_xc}
-\label{\detokenize{appdev/refs/macros/krb5_xc::doc}}\label{\detokenize{appdev/refs/macros/krb5_xc:krb5-xc}}\label{\detokenize{appdev/refs/macros/krb5_xc:krb5-xc-data}}\index{krb5\_xc (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb5_xc:krb5_xc}}\pysigline{\sphinxbfcode{krb5\_xc}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb5\_xc (ptr, args)}
-&
-\sphinxcode{((ptr)?((*(ptr)) args):(abort(),(char*)0))}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsection{Deprecated macros}
-\label{\detokenize{appdev/refs/macros/index:deprecated-macros}}
-
-\subsubsection{krb524\_convert\_creds\_kdc}
-\label{\detokenize{appdev/refs/macros/krb524_convert_creds_kdc:krb524-convert-creds-kdc-data}}\label{\detokenize{appdev/refs/macros/krb524_convert_creds_kdc:krb524-convert-creds-kdc}}\label{\detokenize{appdev/refs/macros/krb524_convert_creds_kdc::doc}}\index{krb524\_convert\_creds\_kdc (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb524_convert_creds_kdc:krb524_convert_creds_kdc}}\pysigline{\sphinxbfcode{krb524\_convert\_creds\_kdc}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb524\_convert\_creds\_kdc}
-&
-\sphinxcode{krb5\_524\_convert\_creds}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsubsection{krb524\_init\_ets}
-\label{\detokenize{appdev/refs/macros/krb524_init_ets:krb524-init-ets-data}}\label{\detokenize{appdev/refs/macros/krb524_init_ets::doc}}\label{\detokenize{appdev/refs/macros/krb524_init_ets:krb524-init-ets}}\index{krb524\_init\_ets (built-in variable)}
-
-\begin{fulllineitems}
-\phantomsection\label{\detokenize{appdev/refs/macros/krb524_init_ets:krb524_init_ets}}\pysigline{\sphinxbfcode{krb524\_init\_ets}}
-\end{fulllineitems}
-
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-\sphinxcode{krb524\_init\_ets (x)}
-&
-\sphinxcode{(0)}
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-
-\renewcommand{\indexname}{Index}
-\printindex
-\end{document}
\ No newline at end of file
+++ /dev/null
-%% Generated by Sphinx.
-\def\sphinxdocclass{report}
-\documentclass[letterpaper,10pt,english]{sphinxmanual}
-\ifdefined\pdfpxdimen
- \let\sphinxpxdimen\pdfpxdimen\else\newdimen\sphinxpxdimen
-\fi \sphinxpxdimen=.75bp\relax
-
-\usepackage[utf8]{inputenc}
-\ifdefined\DeclareUnicodeCharacter
- \ifdefined\DeclareUnicodeCharacterAsOptional
- \DeclareUnicodeCharacter{"00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{"2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{"2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{"2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{"251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{"2572}{\textbackslash}
- \else
- \DeclareUnicodeCharacter{00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{2572}{\textbackslash}
- \fi
-\fi
-\usepackage{cmap}
-\usepackage[T1]{fontenc}
-\usepackage{amsmath,amssymb,amstext}
-\usepackage{babel}
-\usepackage{times}
-\usepackage[Bjarne]{fncychap}
-\usepackage[dontkeepoldnames]{sphinx}
-
-\usepackage{geometry}
-
-% Include hyperref last.
-\usepackage{hyperref}
-% Fix anchor placement for figures with captions.
-\usepackage{hypcap}% it must be loaded after hyperref.
-% Set up styles of URL: it should be placed after hyperref.
-\urlstyle{same}
-
-\addto\captionsenglish{\renewcommand{\figurename}{Fig.}}
-\addto\captionsenglish{\renewcommand{\tablename}{Table}}
-\addto\captionsenglish{\renewcommand{\literalblockname}{Listing}}
-
-\addto\captionsenglish{\renewcommand{\literalblockcontinuedname}{continued from previous page}}
-\addto\captionsenglish{\renewcommand{\literalblockcontinuesname}{continues on next page}}
-
-\addto\extrasenglish{\def\pageautorefname{page}}
-
-\setcounter{tocdepth}{0}
-
-
-
-\title{Kerberos Concepts}
-\date{ }
-\release{1.20.1}
-\author{MIT}
-\newcommand{\sphinxlogo}{\vbox{}}
-\renewcommand{\releasename}{Release}
-\makeindex
-
-\begin{document}
-
-\maketitle
-\sphinxtableofcontents
-\phantomsection\label{\detokenize{basic/index::doc}}
-
-
-
-\chapter{Credential cache}
-\label{\detokenize{basic/ccache_def:basic-concepts}}\label{\detokenize{basic/ccache_def::doc}}\label{\detokenize{basic/ccache_def:credential-cache}}\label{\detokenize{basic/ccache_def:ccache-definition}}\label{\detokenize{basic/ccache_def:kerberos-v5-concepts}}
-A credential cache (or “ccache”) holds Kerberos credentials while they
-remain valid and, generally, while the user’s session lasts, so that
-authenticating to a service multiple times (e.g., connecting to a web
-or mail server more than once) doesn’t require contacting the KDC
-every time.
-
-A credential cache usually contains one initial ticket which is
-obtained using a password or another form of identity verification.
-If this ticket is a ticket-granting ticket, it can be used to obtain
-additional credentials without the password. Because the credential
-cache does not store the password, less long-term damage can be done
-to the user’s account if the machine is compromised.
-
-A credentials cache stores a default client principal name, set when
-the cache is created. This is the name shown at the top of the
-\DUrole{xref,std,std-ref}{klist(1)} \sphinxstyleemphasis{-A} output.
-
-Each normal cache entry includes a service principal name, a client
-principal name (which, in some ccache types, need not be the same as
-the default), lifetime information, and flags, along with the
-credential itself. There are also other entries, indicated by special
-names, that store additional information.
-
-
-\section{ccache types}
-\label{\detokenize{basic/ccache_def:ccache-types}}
-The credential cache interface, like the {\hyperref[\detokenize{basic/keytab_def:keytab-definition}]{\sphinxcrossref{\DUrole{std,std-ref}{keytab}}}} and
-{\hyperref[\detokenize{basic/rcache_def:rcache-definition}]{\sphinxcrossref{\DUrole{std,std-ref}{replay cache}}}} interfaces, uses \sphinxtitleref{TYPE:value} strings to
-indicate the type of credential cache and any associated cache naming
-data to use.
-
-There are several kinds of credentials cache supported in the MIT
-Kerberos library. Not all are supported on every platform. In most
-cases, it should be correct to use the default type built into the
-library.
-\begin{enumerate}
-\item {}
-\sphinxstylestrong{API} is only implemented on Windows. It communicates with a
-server process that holds the credentials in memory for the user,
-rather than writing them to disk.
-
-\item {}
-\sphinxstylestrong{DIR} points to the storage location of the collection of the
-credential caches in \sphinxstyleemphasis{FILE:} format. It is most useful when dealing
-with multiple Kerberos realms and KDCs. For release 1.10 the
-directory must already exist. In post-1.10 releases the
-requirement is for parent directory to exist and the current
-process must have permissions to create the directory if it does
-not exist. See {\hyperref[\detokenize{basic/ccache_def:col-ccache}]{\sphinxcrossref{\DUrole{std,std-ref}{Collections of caches}}}} for details. New in release 1.10.
-The following residual forms are supported:
-\begin{itemize}
-\item {}
-DIR:dirname
-
-\item {}
-DIR::dirpath/filename - a single cache within the directory
-
-\end{itemize}
-
-Switching to a ccache of the latter type causes it to become the
-primary for the directory.
-
-\item {}
-\sphinxstylestrong{FILE} caches are the simplest and most portable. A simple flat
-file format is used to store one credential after another. This is
-the default ccache type if no type is specified in a ccache name.
-
-\item {}
-\sphinxstylestrong{KCM} caches work by contacting a daemon process called \sphinxcode{kcm}
-to perform cache operations. If the cache name is just \sphinxcode{KCM:},
-the default cache as determined by the KCM daemon will be used.
-Newly created caches must generally be named \sphinxcode{KCM:uid:name},
-where \sphinxstyleemphasis{uid} is the effective user ID of the running process.
-
-KCM client support is new in release 1.13. A KCM daemon has not
-yet been implemented in MIT krb5, but the client will interoperate
-with the KCM daemon implemented by Heimdal. macOS 10.7 and higher
-provides a KCM daemon as part of the operating system, and the
-\sphinxstylestrong{KCM} cache type is used as the default cache on that platform in
-a default build.
-
-\item {}
-\sphinxstylestrong{KEYRING} is Linux-specific, and uses the kernel keyring support
-to store credential data in unswappable kernel memory where only
-the current user should be able to access it. The following
-residual forms are supported:
-\begin{itemize}
-\item {}
-KEYRING:name
-
-\item {}
-KEYRING:process:name - process keyring
-
-\item {}
-KEYRING:thread:name - thread keyring
-
-\end{itemize}
-
-Starting with release 1.12 the \sphinxstyleemphasis{KEYRING} type supports collections.
-The following new residual forms were added:
-\begin{itemize}
-\item {}
-KEYRING:session:name - session keyring
-
-\item {}
-KEYRING:user:name - user keyring
-
-\item {}
-KEYRING:persistent:uidnumber - persistent per-UID collection.
-Unlike the user keyring, this collection survives after the user
-logs out, until the cache credentials expire. This type of
-ccache requires support from the kernel; otherwise, it will fall
-back to the user keyring.
-
-\end{itemize}
-
-See {\hyperref[\detokenize{basic/ccache_def:col-ccache}]{\sphinxcrossref{\DUrole{std,std-ref}{Collections of caches}}}} for details.
-
-\item {}
-\sphinxstylestrong{MEMORY} caches are for storage of credentials that don’t need to
-be made available outside of the current process. For example, a
-memory ccache is used by \DUrole{xref,std,std-ref}{kadmin(1)} to store the
-administrative ticket used to contact the admin server. Memory
-ccaches are faster than file ccaches and are automatically
-destroyed when the process exits.
-
-\item {}
-\sphinxstylestrong{MSLSA} is a Windows-specific cache type that accesses the
-Windows credential store.
-
-\end{enumerate}
-
-
-\section{Collections of caches}
-\label{\detokenize{basic/ccache_def:collections-of-caches}}\label{\detokenize{basic/ccache_def:col-ccache}}
-Some credential cache types can support collections of multiple
-caches. One of the caches in the collection is designated as the
-\sphinxstyleemphasis{primary} and will be used when the collection is resolved as a cache.
-When a collection-enabled cache type is the default cache for a
-process, applications can search the specified collection for a
-specific client principal, and GSSAPI applications will automatically
-select between the caches in the collection based on criteria such as
-the target service realm.
-
-Credential cache collections are new in release 1.10, with support
-from the \sphinxstylestrong{DIR} and \sphinxstylestrong{API} ccache types. Starting in release 1.12,
-collections are also supported by the \sphinxstylestrong{KEYRING} ccache type.
-Collections are supported by the \sphinxstylestrong{KCM} ccache type in release 1.13.
-
-
-\subsection{Tool alterations to use cache collection}
-\label{\detokenize{basic/ccache_def:tool-alterations-to-use-cache-collection}}\begin{itemize}
-\item {}
-\DUrole{xref,std,std-ref}{kdestroy(1)} \sphinxstyleemphasis{-A} will destroy all caches in the collection.
-
-\item {}
-If the default cache type supports switching, \DUrole{xref,std,std-ref}{kinit(1)}
-\sphinxstyleemphasis{princname} will search the collection for a matching cache and
-store credentials there, or will store credentials in a new unique
-cache of the default type if no existing cache for the principal
-exists. Either way, kinit will switch to the selected cache.
-
-\item {}
-\DUrole{xref,std,std-ref}{klist(1)} \sphinxstyleemphasis{-l} will list the caches in the collection.
-
-\item {}
-\DUrole{xref,std,std-ref}{klist(1)} \sphinxstyleemphasis{-A} will show the content of all caches in the
-collection.
-
-\item {}
-\DUrole{xref,std,std-ref}{kswitch(1)} \sphinxstyleemphasis{-p princname} will search the collection for a
-matching cache and switch to it.
-
-\item {}
-\DUrole{xref,std,std-ref}{kswitch(1)} \sphinxstyleemphasis{-c cachename} will switch to a specified cache.
-
-\end{itemize}
-
-
-\section{Default ccache name}
-\label{\detokenize{basic/ccache_def:default-ccache-name}}
-The default credential cache name is determined by the following, in
-descending order of priority:
-\begin{enumerate}
-\item {}
-The \sphinxstylestrong{KRB5CCNAME} environment variable. For example,
-\sphinxcode{KRB5CCNAME=DIR:/mydir/}.
-
-\item {}
-The \sphinxstylestrong{default\_ccache\_name} profile variable in \DUrole{xref,std,std-ref}{libdefaults}.
-
-\item {}
-The hardcoded default, \DUrole{xref,std,std-ref}{DEFCCNAME}.
-
-\end{enumerate}
-
-
-\chapter{keytab}
-\label{\detokenize{basic/keytab_def:keytab}}\label{\detokenize{basic/keytab_def::doc}}\label{\detokenize{basic/keytab_def:keytab-definition}}
-A keytab (short for “key table”) stores long-term keys for one or more
-principals. Keytabs are normally represented by files in a standard
-format, although in rare cases they can be represented in other ways.
-Keytabs are used most often to allow server applications to accept
-authentications from clients, but can also be used to obtain initial
-credentials for client applications.
-
-Keytabs are named using the format \sphinxstyleemphasis{type}\sphinxcode{:}\sphinxstyleemphasis{value}. Usually
-\sphinxstyleemphasis{type} is \sphinxcode{FILE} and \sphinxstyleemphasis{value} is the absolute pathname of the file.
-The other possible value for \sphinxstyleemphasis{type} is \sphinxcode{MEMORY}, which indicates a
-temporary keytab stored in the memory of the current process.
-
-A keytab contains one or more entries, where each entry consists of a
-timestamp (indicating when the entry was written to the keytab), a
-principal name, a key version number, an encryption type, and the
-encryption key itself.
-
-A keytab can be displayed using the \DUrole{xref,std,std-ref}{klist(1)} command with the
-\sphinxcode{-k} option. Keytabs can be created or appended to by extracting
-keys from the KDC database using the \DUrole{xref,std,std-ref}{kadmin(1)} \DUrole{xref,std,std-ref}{ktadd}
-command. Keytabs can be manipulated using the \DUrole{xref,std,std-ref}{ktutil(1)} and
-\DUrole{xref,std,std-ref}{k5srvutil(1)} commands.
-
-
-\section{Default keytab}
-\label{\detokenize{basic/keytab_def:default-keytab}}
-The default keytab is used by server applications if the application
-does not request a specific keytab. The name of the default keytab is
-determined by the following, in decreasing order of preference:
-\begin{enumerate}
-\item {}
-The \sphinxstylestrong{KRB5\_KTNAME} environment variable.
-
-\item {}
-The \sphinxstylestrong{default\_keytab\_name} profile variable in \DUrole{xref,std,std-ref}{libdefaults}.
-
-\item {}
-The hardcoded default, \DUrole{xref,std,std-ref}{DEFKTNAME}.
-
-\end{enumerate}
-
-
-\section{Default client keytab}
-\label{\detokenize{basic/keytab_def:default-client-keytab}}
-The default client keytab is used, if it is present and readable, to
-automatically obtain initial credentials for GSSAPI client
-applications. The principal name of the first entry in the client
-keytab is used by default when obtaining initial credentials. The
-name of the default client keytab is determined by the following, in
-decreasing order of preference:
-\begin{enumerate}
-\item {}
-The \sphinxstylestrong{KRB5\_CLIENT\_KTNAME} environment variable.
-
-\item {}
-The \sphinxstylestrong{default\_client\_keytab\_name} profile variable in
-\DUrole{xref,std,std-ref}{libdefaults}.
-
-\item {}
-The hardcoded default, \DUrole{xref,std,std-ref}{DEFCKTNAME}.
-
-\end{enumerate}
-
-
-\chapter{replay cache}
-\label{\detokenize{basic/rcache_def:replay-cache}}\label{\detokenize{basic/rcache_def:rcache-definition}}\label{\detokenize{basic/rcache_def::doc}}
-A replay cache (or “rcache”) keeps track of all authenticators
-recently presented to a service. If a duplicate authentication
-request is detected in the replay cache, an error message is sent to
-the application program.
-
-The replay cache interface, like the credential cache and
-{\hyperref[\detokenize{basic/keytab_def:keytab-definition}]{\sphinxcrossref{\DUrole{std,std-ref}{keytab}}}} interfaces, uses \sphinxtitleref{type:residual} strings to
-indicate the type of replay cache and any associated cache naming
-data to use.
-
-
-\section{Background information}
-\label{\detokenize{basic/rcache_def:background-information}}
-Some Kerberos or GSSAPI services use a simple authentication mechanism
-where a message is sent containing an authenticator, which establishes
-the encryption key that the client will use for talking to the
-service. But nothing about that prevents an eavesdropper from
-recording the messages sent by the client, establishing a new
-connection, and re-sending or “replaying” the same messages; the
-replayed authenticator will establish the same encryption key for the
-new session, and the following messages will be decrypted and
-processed. The attacker may not know what the messages say, and can’t
-generate new messages under the same encryption key, but in some
-instances it may be harmful to the user (or helpful to the attacker)
-to cause the server to see the same messages again a second time. For
-example, if the legitimate client sends “delete first message in
-mailbox”, a replay from an attacker may delete another, different
-“first” message. (Protocol design to guard against such problems has
-been discussed in \index{RFC!RFC 4120\#section-10}\sphinxhref{https://tools.ietf.org/html/rfc4120.html\#section-10}{\sphinxstylestrong{RFC 4120\#section-10}}.)
-
-Even if one protocol uses further protection to verify that the client
-side of the connection actually knows the encryption keys (and thus is
-presumably a legitimate user), if another service uses the same
-service principal name, it may be possible to record an authenticator
-used with the first protocol and “replay” it against the second.
-
-The replay cache mitigates these attacks somewhat, by keeping track of
-authenticators that have been seen until their five-minute window
-expires. Different authenticators generated by multiple connections
-from the same legitimate client will generally have different
-timestamps, and thus will not be considered the same.
-
-This mechanism isn’t perfect. If a message is sent to one application
-server but a man-in-the-middle attacker can prevent it from actually
-arriving at that server, the attacker could then use the authenticator
-(once!) against a different service on the same host. This could be a
-problem if the message from the client included something more than
-authentication in the first message that could be useful to the
-attacker (which is uncommon; in most protocols the server has to
-indicate a successful authentication before the client sends
-additional messages), or if the simple act of presenting the
-authenticator triggers some interesting action in the service being
-attacked.
-
-
-\section{Replay cache types}
-\label{\detokenize{basic/rcache_def:replay-cache-types}}
-Unlike the credential cache and keytab interfaces, replay cache types
-are in lowercase. The following types are defined:
-\begin{enumerate}
-\item {}
-\sphinxstylestrong{none} disables the replay cache. The residual value is ignored.
-
-\item {}
-\sphinxstylestrong{file2} (new in release 1.18) uses a hash-based format to store
-replay records. The file may grow to accommodate hash collisions.
-The residual value is the filename.
-
-\item {}
-\sphinxstylestrong{dfl} is the default type if no environment variable or
-configuration specifies a different type. It stores replay data in
-a file2 replay cache with a filename based on the effective uid.
-The residual value is ignored.
-
-\end{enumerate}
-
-For the dfl type, the location of the replay cache file is determined
-as follows:
-\begin{enumerate}
-\item {}
-The directory is taken from the \sphinxstylestrong{KRB5RCACHEDIR} environment
-variable, or the \sphinxstylestrong{TMPDIR} environment variable, or a temporary
-directory determined at configuration time such as \sphinxcode{/var/tmp}, in
-descending order of preference.
-
-\item {}
-The filename is \sphinxcode{krb5\_EUID.rcache2} where EUID is the effective
-uid of the process.
-
-\item {}
-The file is opened without following symbolic links, and ownership
-of the file is verified to match the effective uid.
-
-\end{enumerate}
-
-On Windows, the directory for the dfl type is the local appdata
-directory, unless overridden by the \sphinxstylestrong{KRB5RCACHEDIR} environment
-variable. The filename on Windows is \sphinxcode{krb5.rcache2}, and the file
-is opened normally.
-
-
-\section{Default replay cache name}
-\label{\detokenize{basic/rcache_def:default-replay-cache-name}}
-The default replay cache name is determined by the following, in
-descending order of priority:
-\begin{enumerate}
-\item {}
-The \sphinxstylestrong{KRB5RCACHENAME} environment variable (new in release 1.18).
-
-\item {}
-The \sphinxstylestrong{KRB5RCACHETYPE} environment variable. If this variable is
-set, the residual value is empty.
-
-\item {}
-The \sphinxstylestrong{default\_rcache\_name} profile variable in \DUrole{xref,std,std-ref}{libdefaults}
-(new in release 1.18).
-
-\item {}
-If none of the above are set, the default replay cache name is
-\sphinxcode{dfl:}.
-
-\end{enumerate}
-
-
-\chapter{stash file}
-\label{\detokenize{basic/stash_file_def:stash-file}}\label{\detokenize{basic/stash_file_def::doc}}\label{\detokenize{basic/stash_file_def:stash-definition}}
-The stash file is a local copy of the master key that resides in
-encrypted form on the KDC’s local disk. The stash file is used to
-authenticate the KDC to itself automatically before starting the
-\DUrole{xref,std,std-ref}{kadmind(8)} and \DUrole{xref,std,std-ref}{krb5kdc(8)} daemons (e.g., as part of the
-machine’s boot sequence). The stash file, like the keytab file (see
-\DUrole{xref,std,std-ref}{keytab\_file}) is a potential point-of-entry for a break-in, and
-if compromised, would allow unrestricted access to the Kerberos
-database. If you choose to install a stash file, it should be
-readable only by root, and should exist only on the KDC’s local disk.
-The file should not be part of any backup of the machine, unless
-access to the backup data is secured as tightly as access to the
-master password itself.
-
-\begin{sphinxadmonition}{note}{Note:}
-If you choose not to install a stash file, the KDC will prompt you for the master key each time it starts up.
-This means that the KDC will not be able to start automatically, such as after a system reboot.
-\end{sphinxadmonition}
-
-
-\chapter{Supported date and time formats}
-\label{\detokenize{basic/date_format:supported-date-and-time-formats}}\label{\detokenize{basic/date_format::doc}}\label{\detokenize{basic/date_format:datetime}}
-
-\section{Time duration}
-\label{\detokenize{basic/date_format:duration}}\label{\detokenize{basic/date_format:time-duration}}
-This format is used to express a time duration in the Kerberos
-configuration files and user commands. The allowed formats are:
-\begin{quote}
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|T|}
-\hline
-
-Format
-&
-Example
-&
-Value
-\\
-\hline
-h:m{[}:s{]}
-&
-36:00
-&
-36 hours
-\\
-\hline
-NdNhNmNs
-&
-8h30s
-&
-8 hours 30 seconds
-\\
-\hline
-N (number of seconds)
-&
-3600
-&
-1 hour
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-\end{quote}
-
-Here \sphinxstyleemphasis{N} denotes a number, \sphinxstyleemphasis{d} - days, \sphinxstyleemphasis{h} - hours, \sphinxstyleemphasis{m} - minutes,
-\sphinxstyleemphasis{s} - seconds.
-
-\begin{sphinxadmonition}{note}{Note:}
-The time interval should not exceed 2147483647 seconds.
-\end{sphinxadmonition}
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{Request} \PYG{n}{a} \PYG{n}{ticket} \PYG{n}{valid} \PYG{k}{for} \PYG{n}{one} \PYG{n}{hour}\PYG{p}{,} \PYG{n}{five} \PYG{n}{hours}\PYG{p}{,} \PYG{l+m+mi}{30} \PYG{n}{minutes}
-\PYG{o+ow}{and} \PYG{l+m+mi}{10} \PYG{n}{days} \PYG{n}{respectively}\PYG{p}{:}
-
- \PYG{n}{kinit} \PYG{o}{\PYGZhy{}}\PYG{n}{l} \PYG{l+m+mi}{3600}
- \PYG{n}{kinit} \PYG{o}{\PYGZhy{}}\PYG{n}{l} \PYG{l+m+mi}{5}\PYG{p}{:}\PYG{l+m+mi}{00}
- \PYG{n}{kinit} \PYG{o}{\PYGZhy{}}\PYG{n}{l} \PYG{l+m+mi}{30}\PYG{n}{m}
- \PYG{n}{kinit} \PYG{o}{\PYGZhy{}}\PYG{n}{l} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{10d 0h 0m 0s}\PYG{l+s+s2}{\PYGZdq{}}
-\end{sphinxVerbatim}
-
-
-\section{getdate time}
-\label{\detokenize{basic/date_format:getdate-time}}\label{\detokenize{basic/date_format:getdate}}
-Some of the kadmin and kdb5\_util commands take a date-time in a
-human-readable format. Some of the acceptable date-time
-strings are:
-\begin{quote}
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|T|}
-\hline
-\sphinxstylethead{\sphinxstyletheadfamily \unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Format
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Example
-\unskip}\relax \\
-\hline\sphinxmultirow{3}{4}{%
-\begin{varwidth}[t]{\sphinxcolwidth{1}{3}}
-Date
-\par
-\vskip-\baselineskip\vbox{\hbox{\strut}}\end{varwidth}%
-}%
-&
-mm/dd/yy
-&
-07/27/12
-\\
-\cline{2-3}\sphinxtablestrut{4}&
-month dd, yyyy
-&
-Jul 27, 2012
-\\
-\cline{2-3}\sphinxtablestrut{4}&
-yyyy-mm-dd
-&
-2012-07-27
-\\
-\hline\sphinxmultirow{2}{11}{%
-\begin{varwidth}[t]{\sphinxcolwidth{1}{3}}
-Absolute
-time
-\par
-\vskip-\baselineskip\vbox{\hbox{\strut}}\end{varwidth}%
-}%
-&
-HH:mm{[}:ss{]}pp
-&
-08:30 PM
-\\
-\cline{2-3}\sphinxtablestrut{11}&
-hh:mm{[}:ss{]}
-&
-20:30
-\\
-\hline
-Relative
-time
-&
-N tt
-&
-30 sec
-\\
-\hline\sphinxmultirow{2}{19}{%
-\begin{varwidth}[t]{\sphinxcolwidth{1}{3}}
-Time zone
-\par
-\vskip-\baselineskip\vbox{\hbox{\strut}}\end{varwidth}%
-}%
-&
-Z
-&
-EST
-\\
-\cline{2-3}\sphinxtablestrut{19}&
-z
-&
--0400
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-\end{quote}
-
-(See {\hyperref[\detokenize{basic/date_format:abbreviation}]{\sphinxcrossref{\DUrole{std,std-ref}{Abbreviations used in this document}}}}.)
-
-Examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{Create} \PYG{n}{a} \PYG{n}{principal} \PYG{n}{that} \PYG{n}{expires} \PYG{n}{on} \PYG{n}{the} \PYG{n}{date} \PYG{n}{indicated}\PYG{p}{:}
- \PYG{n}{addprinc} \PYG{n}{test1} \PYG{o}{\PYGZhy{}}\PYG{n}{expire} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{3/27/12 10:00:07 EST}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{n}{addprinc} \PYG{n}{test2} \PYG{o}{\PYGZhy{}}\PYG{n}{expire} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{January 23, 2015 10:05pm}\PYG{l+s+s2}{\PYGZdq{}}
- \PYG{n}{addprinc} \PYG{n}{test3} \PYG{o}{\PYGZhy{}}\PYG{n}{expire} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{22:00 GMT}\PYG{l+s+s2}{\PYGZdq{}}
-\PYG{n}{Add} \PYG{n}{a} \PYG{n}{principal} \PYG{n}{that} \PYG{n}{will} \PYG{n}{expire} \PYG{o+ow}{in} \PYG{l+m+mi}{30} \PYG{n}{minutes}\PYG{p}{:}
- \PYG{n}{addprinc} \PYG{n}{test4} \PYG{o}{\PYGZhy{}}\PYG{n}{expire} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{30 minutes}\PYG{l+s+s2}{\PYGZdq{}}
-\end{sphinxVerbatim}
-
-
-\section{Absolute time}
-\label{\detokenize{basic/date_format:abstime}}\label{\detokenize{basic/date_format:absolute-time}}
-This rarely used date-time format can be noted in one of the
-following ways:
-\begin{quote}
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|T|}
-\hline
-\sphinxstylethead{\sphinxstyletheadfamily
-Format
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Example
-\unskip}\relax &\sphinxstylethead{\sphinxstyletheadfamily
-Value
-\unskip}\relax \\
-\hline
-yyyymmddhhmmss
-&
-20141231235900
-&\sphinxmultirow{5}{6}{%
-\begin{varwidth}[t]{\sphinxcolwidth{1}{3}}
-One minute
-before 2015
-\par
-\vskip-\baselineskip\vbox{\hbox{\strut}}\end{varwidth}%
-}%
-\\
-\cline{1-2}
-yyyy.mm.dd.hh.mm.ss
-&
-2014.12.31.23.59.00
-&\sphinxtablestrut{6}\\
-\cline{1-2}
-yymmddhhmmss
-&
-141231235900
-&\sphinxtablestrut{6}\\
-\cline{1-2}
-yy.mm.dd.hh.mm.ss
-&
-14.12.31.23.59.00
-&\sphinxtablestrut{6}\\
-\cline{1-2}
-dd-month-yyyy:hh:mm:ss
-&
-31-Dec-2014:23:59:00
-&\sphinxtablestrut{6}\\
-\hline
-hh:mm:ss
-&
-20:00:00
-&\sphinxmultirow{2}{17}{%
-\begin{varwidth}[t]{\sphinxcolwidth{1}{3}}
-8 o’clock in
-the evening
-\par
-\vskip-\baselineskip\vbox{\hbox{\strut}}\end{varwidth}%
-}%
-\\
-\cline{1-2}
-hhmmss
-&
-200000
-&\sphinxtablestrut{17}\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-\end{quote}
-
-(See {\hyperref[\detokenize{basic/date_format:abbreviation}]{\sphinxcrossref{\DUrole{std,std-ref}{Abbreviations used in this document}}}}.)
-
-Example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{Set} \PYG{n}{the} \PYG{n}{default} \PYG{n}{expiration} \PYG{n}{date} \PYG{n}{to} \PYG{n}{July} \PYG{l+m+mi}{27}\PYG{p}{,} \PYG{l+m+mi}{2012} \PYG{n}{at} \PYG{l+m+mi}{20}\PYG{p}{:}\PYG{l+m+mi}{30}
-\PYG{n}{default\PYGZus{}principal\PYGZus{}expiration} \PYG{o}{=} \PYG{l+m+mi}{20120727203000}
-\end{sphinxVerbatim}
-
-
-\subsection{Abbreviations used in this document}
-\label{\detokenize{basic/date_format:abbreviation}}\label{\detokenize{basic/date_format:abbreviations-used-in-this-document}}
-\begin{DUlineblock}{0em}
-\item[] \sphinxstyleemphasis{month} : locale’s month name or its abbreviation;
-\item[] \sphinxstyleemphasis{dd} : day of month (01-31);
-\item[] \sphinxstyleemphasis{HH} : hours (00-12);
-\item[] \sphinxstyleemphasis{hh} : hours (00-23);
-\item[] \sphinxstyleemphasis{mm} : in time - minutes (00-59); in date - month (01-12);
-\item[] \sphinxstyleemphasis{N} : number;
-\item[] \sphinxstyleemphasis{pp} : AM or PM;
-\item[] \sphinxstyleemphasis{ss} : seconds (00-60);
-\item[] \sphinxstyleemphasis{tt} : time units (hours, minutes, min, seconds, sec);
-\item[] \sphinxstyleemphasis{yyyy} : year;
-\item[] \sphinxstyleemphasis{yy} : last two digits of the year;
-\item[] \sphinxstyleemphasis{Z} : alphabetic time zone abbreviation;
-\item[] \sphinxstyleemphasis{z} : numeric time zone;
-\end{DUlineblock}
-
-\begin{sphinxadmonition}{note}{Note:}\begin{itemize}
-\item {}
-If the date specification contains spaces, you may need to
-enclose it in double quotes;
-
-\item {}
-All keywords are case-insensitive.
-
-\end{itemize}
-\end{sphinxadmonition}
-
-
-
-\renewcommand{\indexname}{Index}
-\printindex
-\end{document}
\ No newline at end of file
+++ /dev/null
-%% Generated by Sphinx.
-\def\sphinxdocclass{report}
-\documentclass[letterpaper,10pt,english]{sphinxmanual}
-\ifdefined\pdfpxdimen
- \let\sphinxpxdimen\pdfpxdimen\else\newdimen\sphinxpxdimen
-\fi \sphinxpxdimen=.75bp\relax
-
-\usepackage[utf8]{inputenc}
-\ifdefined\DeclareUnicodeCharacter
- \ifdefined\DeclareUnicodeCharacterAsOptional
- \DeclareUnicodeCharacter{"00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{"2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{"2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{"2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{"251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{"2572}{\textbackslash}
- \else
- \DeclareUnicodeCharacter{00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{2572}{\textbackslash}
- \fi
-\fi
-\usepackage{cmap}
-\usepackage[T1]{fontenc}
-\usepackage{amsmath,amssymb,amstext}
-\usepackage{babel}
-\usepackage{times}
-\usepackage[Bjarne]{fncychap}
-\usepackage[dontkeepoldnames]{sphinx}
-
-\usepackage{geometry}
-
-% Include hyperref last.
-\usepackage{hyperref}
-% Fix anchor placement for figures with captions.
-\usepackage{hypcap}% it must be loaded after hyperref.
-% Set up styles of URL: it should be placed after hyperref.
-\urlstyle{same}
-
-\addto\captionsenglish{\renewcommand{\figurename}{Fig.}}
-\addto\captionsenglish{\renewcommand{\tablename}{Table}}
-\addto\captionsenglish{\renewcommand{\literalblockname}{Listing}}
-
-\addto\captionsenglish{\renewcommand{\literalblockcontinuedname}{continued from previous page}}
-\addto\captionsenglish{\renewcommand{\literalblockcontinuesname}{continues on next page}}
-
-\addto\extrasenglish{\def\pageautorefname{page}}
-
-\setcounter{tocdepth}{0}
-
-
-
-\title{Building MIT Kerberos}
-\date{ }
-\release{1.20.1}
-\author{MIT}
-\newcommand{\sphinxlogo}{\vbox{}}
-\renewcommand{\releasename}{Release}
-\makeindex
-
-\begin{document}
-
-\maketitle
-\sphinxtableofcontents
-\phantomsection\label{\detokenize{build/index::doc}}
-
-
-This section details how to build and install MIT Kerberos software
-from the source.
-
-
-\chapter{Prerequisites}
-\label{\detokenize{build/index:building-kerberos-v5}}\label{\detokenize{build/index:prerequisites}}\label{\detokenize{build/index:build-v5}}
-In order to build Kerberos V5, you will need approximately 60-70
-megabytes of disk space. The exact amount will vary depending on the
-platform and whether the distribution is compiled with debugging
-symbol tables or not.
-
-Your C compiler must conform to ANSI C (ISO/IEC 9899:1990, “c89”).
-Some operating systems do not have an ANSI C compiler, or their
-default compiler requires extra command-line options to enable ANSI C
-conformance.
-
-If you wish to keep a separate build tree, which contains the compiled
-*.o file and executables, separate from your source tree, you will
-need a make program which supports \sphinxstylestrong{VPATH}, or you will need to use
-a tool such as lndir to produce a symbolic link tree for your build
-tree.
-
-
-\chapter{Obtaining the software}
-\label{\detokenize{build/index:obtaining-the-software}}
-The source code can be obtained from MIT Kerberos Distribution page,
-at \sphinxurl{https://kerberos.org/dist/index.html}.
-The MIT Kerberos distribution comes in an archive file, generally
-named krb5-VERSION-signed.tar, where \sphinxstyleemphasis{VERSION} is a placeholder for
-the major and minor versions of MIT Kerberos. (For example, MIT
-Kerberos 1.9 has major version “1” and minor version “9”.)
-
-The krb5-VERSION-signed.tar contains a compressed tar file consisting
-of the sources for all of Kerberos (generally named
-krb5-VERSION.tar.gz) and a PGP signature file for this source tree
-(generally named krb5-VERSION.tar.gz.asc). MIT highly recommends that
-you verify the integrity of the source code using this signature,
-e.g., by running:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{tar} \PYG{n}{xf} \PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{\PYGZhy{}}\PYG{n}{signed}\PYG{o}{.}\PYG{n}{tar}
-\PYG{n}{gpg} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{n}{verify} \PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{.}\PYG{n}{tar}\PYG{o}{.}\PYG{n}{gz}\PYG{o}{.}\PYG{n}{asc}
-\end{sphinxVerbatim}
-
-Unpack krb5-VERSION.tar.gz in some directory. In this section we will assume
-that you have chosen the top directory of the distribution the directory
-\sphinxcode{/u1/krb5-VERSION}.
-
-Review the README file for the license, copyright and other sprecific to the
-distribution information.
-
-
-\chapter{Contents}
-\label{\detokenize{build/index:contents}}
-
-\section{Organization of the source directory}
-\label{\detokenize{build/directory_org::doc}}\label{\detokenize{build/directory_org:organization-of-the-source-directory}}
-Below is a brief overview of the organization of the complete source
-directory. More detailed descriptions follow.
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-appl
-&
-Kerberos application client and server programs
-\\
-\hline
-ccapi
-&
-Credential cache services
-\\
-\hline
-clients
-&
-Kerberos V5 user programs (See \DUrole{xref,std,std-ref}{user\_commands})
-\\
-\hline
-config
-&
-Configure scripts
-\\
-\hline
-config-files
-&
-Sample Kerberos configuration files
-\\
-\hline
-include
-&
-include files needed to build the Kerberos system
-\\
-\hline
-kadmin
-&
-Administrative interface to the Kerberos database: \DUrole{xref,std,std-ref}{kadmin(1)}, \DUrole{xref,std,std-ref}{kdb5\_util(8)}, \DUrole{xref,std,std-ref}{ktutil(1)}.
-\\
-\hline
-kdc
-&
-Kerberos V5 Authentication Service and Key Distribution Center
-\\
-\hline
-{\hyperref[\detokenize{build/directory_org:lib}]{\sphinxcrossref{lib}}}
-&
-Libraries for use with/by Kerberos V5
-\\
-\hline
-plugins
-&
-Kerberos plugins directory
-\\
-\hline
-po
-&
-Localization infrastructure
-\\
-\hline
-prototype
-&
-Templates files containing the MIT copyright message and a placeholder for the title and description of the file.
-\\
-\hline
-kprop
-&
-Utilities for propagating the database to replica KDCs \DUrole{xref,std,std-ref}{kprop(8)} and \DUrole{xref,std,std-ref}{kpropd(8)}
-\\
-\hline
-tests
-&
-Test suite
-\\
-\hline
-{\hyperref[\detokenize{build/directory_org:util}]{\sphinxcrossref{util}}}
-&
-Various utilities for building/configuring the code, sending bug reports, etc.
-\\
-\hline
-windows
-&
-Source code for building Kerberos V5 on Windows (see windows/README)
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-
-\subsection{lib}
-\label{\detokenize{build/directory_org:lib}}\label{\detokenize{build/directory_org:id1}}
-The lib directory contain several subdirectories as well as some
-definition and glue files.
-\begin{itemize}
-\item {}
-The apputils directory contains the code for the generic network
-servicing.
-
-\item {}
-The crypto subdirectory contains the Kerberos V5 encryption
-library.
-
-\item {}
-The gssapi library contains the Generic Security Services API,
-which is a library of commands to be used in secure client-server
-communication.
-
-\item {}
-The kadm5 directory contains the libraries for the KADM5
-administration utilities.
-
-\item {}
-The Kerberos 5 database libraries are contained in kdb.
-
-\item {}
-The krb5 directory contains Kerberos 5 API.
-
-\item {}
-The rpc directory contains the API for the Kerberos Remote
-Procedure Call protocol.
-
-\end{itemize}
-
-
-\subsection{util}
-\label{\detokenize{build/directory_org:util}}\label{\detokenize{build/directory_org:id2}}\begin{description}
-\item[{The util directory contains several utility programs and libraries.}] \leavevmode\begin{itemize}
-\item {}
-the programs used to configure and build the code, such as
-autoconf, lndir, kbuild, reconf, and makedepend, are in this
-directory.
-
-\item {}
-the profile directory contains most of the functions which parse
-the Kerberos configuration files (krb5.conf and kdc.conf).
-
-\item {}
-the Kerberos error table library and utilities (et);
-
-\item {}
-the Sub-system library and utilities (ss);
-
-\item {}
-database utilities (db2);
-
-\item {}
-pseudo-terminal utilities (pty);
-
-\item {}
-bug-reporting program send-pr;
-
-\item {}
-a generic support library support used by several of our other
-libraries;
-
-\item {}
-the build infrastructure for building lightweight Kerberos client
-(collected-client-lib)
-
-\item {}
-the tool for validating Kerberos configuration files
-(confvalidator);
-
-\item {}
-the toolkit for kernel integrators for building krb5 code subsets
-(gss-kernel-lib);
-
-\item {}
-source code for building Kerberos V5 on MacOS (mac)
-
-\item {}
-Windows getopt operations (windows)
-
-\end{itemize}
-
-\end{description}
-
-
-\section{Doing the build}
-\label{\detokenize{build/doing_build::doc}}\label{\detokenize{build/doing_build:doing-the-build}}
-
-\subsection{Building within a single tree}
-\label{\detokenize{build/doing_build:do-build}}\label{\detokenize{build/doing_build:building-within-a-single-tree}}
-If you only need to build Kerberos for one platform, using a single
-directory tree which contains both the source files and the object
-files is the simplest. However, if you need to maintain Kerberos for
-a large number of platforms, you will probably want to use separate
-build trees for each platform. We recommend that you look at OS
-Incompatibilities, for notes that we have on particular operating
-systems.
-
-If you don’t want separate build trees for each architecture, then use
-the following abbreviated procedure:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{cd} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{/}\PYG{n}{src}
-\PYG{o}{.}\PYG{o}{/}\PYG{n}{configure}
-\PYG{n}{make}
-\end{sphinxVerbatim}
-
-That’s it!
-
-
-\subsection{Building with separate build directories}
-\label{\detokenize{build/doing_build:building-with-separate-build-directories}}
-If you wish to keep separate build directories for each platform, you
-can do so using the following procedure. (Note, this requires that
-your make program support VPATH. GNU’s make will provide this
-functionality, for example.) If your make program does not support
-this, see the next section.
-
-For example, if you wish to store the binaries in \sphinxcode{tmpbuild} build
-directory you might use the following procedure:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{mkdir} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{tmpbuild}
-\PYG{n}{cd} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{tmpbuild}
-\PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{/}\PYG{n}{src}\PYG{o}{/}\PYG{n}{configure}
-\PYG{n}{make}
-\end{sphinxVerbatim}
-
-
-\subsection{Building using lndir}
-\label{\detokenize{build/doing_build:building-using-lndir}}
-If you wish to keep separate build directories for each platform, and
-you do not have access to a make program which supports VPATH, all is
-not lost. You can use the lndir program to create symbolic link trees
-in your build directory.
-
-For example, if you wish to create a build directory for solaris
-binaries you might use the following procedure:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-mkdir /u1/krb5\PYGZhy{}VERSION/solaris
-cd /u1/krb5\PYGZhy{}VERSION/solaris
-/u1/krb5\PYGZhy{}VERSION/src/util/lndir {}`pwd{}`/../src
-./configure
-make
-\end{sphinxVerbatim}
-
-You must give an absolute pathname to lndir because it has a bug that
-makes it fail for relative pathnames. Note that this version differs
-from the latest version as distributed and installed by the
-XConsortium with X11R6. Either version should be acceptable.
-
-
-\subsection{Installing the binaries}
-\label{\detokenize{build/doing_build:installing-the-binaries}}
-Once you have built Kerberos, you should install the binaries. You can
-do this by running:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{make} \PYG{n}{install}
-\end{sphinxVerbatim}
-
-If you want to install the binaries into a destination directory that
-is not their final destination, which may be convenient if you want to
-build a binary distribution to be deployed on multiple hosts, you may
-use:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{make} \PYG{n}{install} \PYG{n}{DESTDIR}\PYG{o}{=}\PYG{o}{/}\PYG{n}{path}\PYG{o}{/}\PYG{n}{to}\PYG{o}{/}\PYG{n}{destdir}
-\end{sphinxVerbatim}
-
-This will install the binaries under \sphinxstyleemphasis{DESTDIR/PREFIX}, e.g., the user
-programs will install into \sphinxstyleemphasis{DESTDIR/PREFIX/bin}, the libraries into
-\sphinxstyleemphasis{DESTDIR/PREFIX/lib}, etc. \sphinxstyleemphasis{DESTDIR} must be an absolute path.
-
-Some implementations of make allow multiple commands to be run in
-parallel, for faster builds. We test our Makefiles in parallel builds
-with GNU make only; they may not be compatible with other parallel
-build implementations.
-
-
-\subsection{Testing the build}
-\label{\detokenize{build/doing_build:testing-the-build}}
-The Kerberos V5 distribution comes with built-in regression tests. To
-run them, simply type the following command while in the top-level
-build directory (i.e., the directory where you sent typed make to
-start building Kerberos; see {\hyperref[\detokenize{build/doing_build:do-build}]{\sphinxcrossref{\DUrole{std,std-ref}{Building within a single tree}}}}):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{make} \PYG{n}{check}
-\end{sphinxVerbatim}
-
-On some operating systems, you have to run \sphinxcode{make install} before
-running \sphinxcode{make check}, or the test suite will pick up installed
-versions of Kerberos libraries rather than the newly built ones. You
-can install into a prefix that isn’t in the system library search
-path, though. Alternatively, you can configure with
-\sphinxstylestrong{-}\sphinxstylestrong{-disable-rpath}, which renders the build tree less suitable
-for installation, but allows testing without interference from
-previously installed libraries.
-
-There are additional regression tests available, which are not run
-by \sphinxcode{make check}. These tests require manual setup and teardown of
-support infrastructure which is not easily automated, or require
-excessive resources for ordinary use. The procedure for running
-the manual tests is documented at
-\sphinxurl{https://k5wiki.kerberos.org/wiki/Manual\_Testing}.
-
-
-\subsection{Cleaning up the build}
-\label{\detokenize{build/doing_build:cleaning-up-the-build}}\begin{itemize}
-\item {}
-Use \sphinxcode{make clean} to remove all files generated by running make
-command.
-
-\item {}
-Use \sphinxcode{make distclean} to remove all files generated by running
-./configure script. After running \sphinxcode{make distclean} your source
-tree (ideally) should look like the raw (just un-tarred) source
-tree.
-
-\end{itemize}
-
-
-\subsection{Using autoconf}
-\label{\detokenize{build/doing_build:using-autoconf}}
-(If you are not a developer, you can ignore this section.)
-
-In the Kerberos V5 source directory, there is a configure script which
-automatically determines the compilation environment and creates the
-proper Makefiles for a particular platform. This configure script is
-generated using autoconf, which you should already have installed if
-you will be making changes to \sphinxcode{src/configure.in}.
-
-Normal users will not need to worry about running autoconf; the
-distribution comes with the configure script already prebuilt.
-
-The autoconf package comes with a script called \sphinxcode{autoreconf} that
-will automatically run \sphinxcode{autoconf} and \sphinxcode{autoheader} as needed. You
-should run \sphinxcode{autoreconf} from the top source directory, e.g.:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{cd} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{/}\PYG{n}{src}
-\PYG{n}{autoreconf} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{n}{verbose}
-\end{sphinxVerbatim}
-
-
-\section{Options to \sphinxstyleemphasis{configure}}
-\label{\detokenize{build/options2configure:options2configure}}\label{\detokenize{build/options2configure::doc}}\label{\detokenize{build/options2configure:options-to-configure}}
-There are a number of options to configure which you can use to
-control how the Kerberos distribution is built.
-
-
-\subsection{Most commonly used options}
-\label{\detokenize{build/options2configure:most-commonly-used-options}}\begin{description}
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-help}}] \leavevmode
-Provides help to configure. This will list the set of commonly
-used options for building Kerberos.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-prefix=}\sphinxstyleemphasis{PREFIX}}] \leavevmode
-By default, Kerberos will install the package’s files rooted at
-\sphinxcode{/usr/local}. If you desire to place the binaries into the
-directory \sphinxstyleemphasis{PREFIX}, use this option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-exec-prefix=}\sphinxstyleemphasis{EXECPREFIX}}] \leavevmode
-This option allows one to separate the architecture independent
-programs from the host-dependent files (configuration files,
-manual pages). Use this option to install architecture-dependent
-programs in \sphinxstyleemphasis{EXECPREFIX}. The default location is the value of
-specified by \sphinxstylestrong{-}\sphinxstylestrong{-prefix} option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-localstatedir=}\sphinxstyleemphasis{LOCALSTATEDIR}}] \leavevmode
-This option sets the directory for locally modifiable
-single-machine data. In Kerberos, this mostly is useful for
-setting a location for the KDC data files, as they will be
-installed in \sphinxcode{LOCALSTATEDIR/krb5kdc}, which is by default
-\sphinxcode{PREFIX/var/krb5kdc}.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-netlib}{[}=\sphinxstyleemphasis{libs}{]}}] \leavevmode
-Allows for suppression of or replacement of network libraries. By
-default, Kerberos V5 configuration will look for \sphinxcode{-lnsl} and
-\sphinxcode{-lsocket}. If your operating system has a broken resolver
-library or fails to pass the tests in \sphinxcode{src/tests/resolv}, you
-will need to use this option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-enable-dns-for-realm}}] \leavevmode
-Enable the use of DNS to look up a host’s Kerberos realm,
-if the information is not provided in
-\DUrole{xref,std,std-ref}{krb5.conf(5)}. See \DUrole{xref,std,std-ref}{mapping\_hostnames}
-for information about using DNS to determine the default realm.
-DNS lookups for realm names are disabled by default.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-system-et}}] \leavevmode
-Use an installed version of the error-table (et) support software,
-the compile\_et program, the com\_err.h header file and the com\_err
-library. If these are not in the default locations, you may wish
-to specify \sphinxcode{CPPFLAGS=-I/some/dir} and
-\sphinxcode{LDFLAGS=-L/some/other/dir} options at configuration time as
-well.
-
-If this option is not given, a version supplied with the Kerberos
-sources will be built and installed along with the rest of the
-Kerberos tree, for Kerberos applications to link against.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-system-ss}}] \leavevmode
-Use an installed version of the subsystem command-line interface
-software, the mk\_cmds program, the \sphinxcode{ss/ss.h} header file and the
-ss library. If these are not in the default locations, you may
-wish to specify \sphinxcode{CPPFLAGS=-I/some/dir} and
-\sphinxcode{LDFLAGS=-L/some/other/dir} options at configuration time as
-well. See also the \sphinxstylestrong{SS\_LIB} option.
-
-If this option is not given, the ss library supplied with the
-Kerberos sources will be compiled and linked into those programs
-that need it; it will not be installed separately.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-system-db}}] \leavevmode
-Use an installed version of the Berkeley DB package, which must
-provide an API compatible with version 1.85. This option is
-unsupported and untested. In particular, we do not know if the
-database-rename code used in the dumpfile load operation will
-behave properly.
-
-If this option is not given, a version supplied with the Kerberos
-sources will be built and installed. (We are not updating this
-version at this time because of licensing issues with newer
-versions that we haven’t investigated sufficiently yet.)
-
-\end{description}
-
-
-\subsection{Environment variables}
-\label{\detokenize{build/options2configure:environment-variables}}\begin{description}
-\item[{\sphinxstylestrong{CC=}\sphinxstyleemphasis{COMPILER}}] \leavevmode
-Use \sphinxstyleemphasis{COMPILER} as the C compiler.
-
-\item[{\sphinxstylestrong{CFLAGS=}\sphinxstyleemphasis{FLAGS}}] \leavevmode
-Use \sphinxstyleemphasis{FLAGS} as the default set of C compiler flags.
-
-\item[{\sphinxstylestrong{CPP=}\sphinxstyleemphasis{CPP}}] \leavevmode
-C preprocessor to use. (e.g., \sphinxcode{CPP='gcc -E'})
-
-\item[{\sphinxstylestrong{CPPFLAGS=}\sphinxstyleemphasis{CPPOPTS}}] \leavevmode
-Use \sphinxstyleemphasis{CPPOPTS} as the default set of C preprocessor flags. The
-most common use of this option is to select certain \#define’s for
-use with the operating system’s include files.
-
-\item[{\sphinxstylestrong{DB\_HEADER=}\sphinxstyleemphasis{headername}}] \leavevmode
-If db.h is not the correct header file to include to compile
-against the Berkeley DB 1.85 API, specify the correct header file
-name with this option. For example, \sphinxcode{DB\_HEADER=db3/db\_185.h}.
-
-\item[{\sphinxstylestrong{DB\_LIB=}\sphinxstyleemphasis{libs}…}] \leavevmode
-If \sphinxcode{-ldb} is not the correct library specification for the
-Berkeley DB library version to be used, override it with this
-option. For example, \sphinxcode{DB\_LIB=-ldb-3.3}.
-
-\item[{\sphinxstylestrong{DEFCCNAME=}\sphinxstyleemphasis{ccachename}}] \leavevmode
-Override the built-in default credential cache name.
-For example, \sphinxcode{DEFCCNAME=DIR:/var/run/user/\%\{USERID\}/ccache}
-See \DUrole{xref,std,std-ref}{parameter\_expansion} for information about supported
-parameter expansions.
-
-\item[{\sphinxstylestrong{DEFCKTNAME=}\sphinxstyleemphasis{keytabname}}] \leavevmode
-Override the built-in default client keytab name.
-The format is the same as for \sphinxstyleemphasis{DEFCCNAME}.
-
-\item[{\sphinxstylestrong{DEFKTNAME=}\sphinxstyleemphasis{keytabname}}] \leavevmode
-Override the built-in default keytab name.
-The format is the same as for \sphinxstyleemphasis{DEFCCNAME}.
-
-\item[{\sphinxstylestrong{LD=}\sphinxstyleemphasis{LINKER}}] \leavevmode
-Use \sphinxstyleemphasis{LINKER} as the default loader if it should be different from
-C compiler as specified above.
-
-\item[{\sphinxstylestrong{LDFLAGS=}\sphinxstyleemphasis{LDOPTS}}] \leavevmode
-This option informs the linker where to get additional libraries
-(e.g., \sphinxcode{-L\textless{}lib dir\textgreater{}}).
-
-\item[{\sphinxstylestrong{LIBS=}\sphinxstyleemphasis{LDNAME}}] \leavevmode
-This option allows one to specify libraries to be passed to the
-linker (e.g., \sphinxcode{-l\textless{}library\textgreater{}})
-
-\item[{\sphinxstylestrong{SS\_LIB=}\sphinxstyleemphasis{libs}…}] \leavevmode
-If \sphinxcode{-lss} is not the correct way to link in your installed ss
-library, for example if additional support libraries are needed,
-specify the correct link options here. Some variants of this
-library are around which allow for Emacs-like line editing, but
-different versions require different support libraries to be
-explicitly specified.
-
-This option is ignored if \sphinxstylestrong{-}\sphinxstylestrong{-with-system-ss} is not specified.
-
-\item[{\sphinxstylestrong{YACC}}] \leavevmode
-The ‘Yet Another C Compiler’ implementation to use. Defaults to
-the first program found out of: ‘\sphinxtitleref{bison -y}’, ‘\sphinxtitleref{byacc}’,
-‘\sphinxtitleref{yacc}’.
-
-\item[{\sphinxstylestrong{YFLAGS}}] \leavevmode
-The list of arguments that will be passed by default to \$YACC.
-This script will default YFLAGS to the empty string to avoid a
-default value of \sphinxcode{-d} given by some make applications.
-
-\end{description}
-
-
-\subsection{Fine tuning of the installation directories}
-\label{\detokenize{build/options2configure:fine-tuning-of-the-installation-directories}}\begin{description}
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-bindir=}\sphinxstyleemphasis{DIR}}] \leavevmode
-User executables. Defaults to \sphinxcode{EXECPREFIX/bin}, where
-\sphinxstyleemphasis{EXECPREFIX} is the path specified by \sphinxstylestrong{-}\sphinxstylestrong{-exec-prefix}
-configuration option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-sbindir=}\sphinxstyleemphasis{DIR}}] \leavevmode
-System admin executables. Defaults to \sphinxcode{EXECPREFIX/sbin}, where
-\sphinxstyleemphasis{EXECPREFIX} is the path specified by \sphinxstylestrong{-}\sphinxstylestrong{-exec-prefix}
-configuration option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-sysconfdir=}\sphinxstyleemphasis{DIR}}] \leavevmode
-Read-only single-machine data such as krb5.conf.
-Defaults to \sphinxcode{PREFIX/etc}, where
-\sphinxstyleemphasis{PREFIX} is the path specified by \sphinxstylestrong{-}\sphinxstylestrong{-prefix} configuration
-option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-libdir=}\sphinxstyleemphasis{DIR}}] \leavevmode
-Object code libraries. Defaults to \sphinxcode{EXECPREFIX/lib}, where
-\sphinxstyleemphasis{EXECPREFIX} is the path specified by \sphinxstylestrong{-}\sphinxstylestrong{-exec-prefix}
-configuration option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-includedir=}\sphinxstyleemphasis{DIR}}] \leavevmode
-C header files. Defaults to \sphinxcode{PREFIX/include}, where \sphinxstyleemphasis{PREFIX} is
-the path specified by \sphinxstylestrong{-}\sphinxstylestrong{-prefix} configuration option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-datarootdir=}\sphinxstyleemphasis{DATAROOTDIR}}] \leavevmode
-Read-only architecture-independent data root. Defaults to
-\sphinxcode{PREFIX/share}, where \sphinxstyleemphasis{PREFIX} is the path specified by
-\sphinxstylestrong{-}\sphinxstylestrong{-prefix} configuration option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-datadir=}\sphinxstyleemphasis{DIR}}] \leavevmode
-Read-only architecture-independent data. Defaults to path
-specified by \sphinxstylestrong{-}\sphinxstylestrong{-datarootdir} configuration option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-localedir=}\sphinxstyleemphasis{DIR}}] \leavevmode
-Locale-dependent data. Defaults to \sphinxcode{DATAROOTDIR/locale}, where
-\sphinxstyleemphasis{DATAROOTDIR} is the path specified by \sphinxstylestrong{-}\sphinxstylestrong{-datarootdir}
-configuration option.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-mandir=}\sphinxstyleemphasis{DIR}}] \leavevmode
-Man documentation. Defaults to \sphinxcode{DATAROOTDIR/man}, where
-\sphinxstyleemphasis{DATAROOTDIR} is the path specified by \sphinxstylestrong{-}\sphinxstylestrong{-datarootdir}
-configuration option.
-
-\end{description}
-
-
-\subsection{Program names}
-\label{\detokenize{build/options2configure:program-names}}\begin{description}
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-program-prefix=}\sphinxstyleemphasis{PREFIX}}] \leavevmode
-Prepend \sphinxstyleemphasis{PREFIX} to the names of the programs when installing
-them. For example, specifying \sphinxcode{-{-}program-prefix=mit-} at the
-configure time will cause the program named \sphinxcode{abc} to be
-installed as \sphinxcode{mit-abc}.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-program-suffix=}\sphinxstyleemphasis{SUFFIX}}] \leavevmode
-Append \sphinxstyleemphasis{SUFFIX} to the names of the programs when installing them.
-For example, specifying \sphinxcode{-{-}program-suffix=-mit} at the configure
-time will cause the program named \sphinxcode{abc} to be installed as
-\sphinxcode{abc-mit}.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-program-transform-name=}\sphinxstyleemphasis{PROGRAM}}] \leavevmode
-Run \sphinxcode{sed -e PROGRAM} on installed program names. (\sphinxstyleemphasis{PROGRAM} is a
-sed script).
-
-\end{description}
-
-
-\subsection{System types}
-\label{\detokenize{build/options2configure:system-types}}\begin{description}
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-build=}\sphinxstyleemphasis{BUILD}}] \leavevmode
-Configure for building on \sphinxstyleemphasis{BUILD}
-(e.g., \sphinxcode{-{-}build=x86\_64-linux-gnu}).
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-host=}\sphinxstyleemphasis{HOST}}] \leavevmode
-Cross-compile to build programs to run on \sphinxstyleemphasis{HOST}
-(e.g., \sphinxcode{-{-}host=x86\_64-linux-gnu}). By default, Kerberos V5
-configuration will look for “build” option.
-
-\end{description}
-
-
-\subsection{Optional features}
-\label{\detokenize{build/options2configure:optional-features}}\begin{description}
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-disable-option-checking}}] \leavevmode
-Ignore unrecognized \textendash{}enable/\textendash{}with options.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-disable-}\sphinxstyleemphasis{FEATURE}}] \leavevmode
-Do not include \sphinxstyleemphasis{FEATURE} (same as \textendash{}enable-FEATURE=no).
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-enable-}\sphinxstyleemphasis{FEATURE}{[}=\sphinxstyleemphasis{ARG}{]}}] \leavevmode
-Include \sphinxstyleemphasis{FEATURE} {[}ARG=yes{]}.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-enable-maintainer-mode}}] \leavevmode
-Enable rebuilding of source files, Makefiles, etc.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-disable-delayed-initialization}}] \leavevmode
-Initialize library code when loaded. Defaults to delay until
-first use.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-disable-thread-support}}] \leavevmode
-Don’t enable thread support. Defaults to enabled.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-disable-rpath}}] \leavevmode
-Suppress run path flags in link lines.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-enable-athena}}] \leavevmode
-Build with MIT Project Athena configuration.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-disable-kdc-lookaside-cache}}] \leavevmode
-Disable the cache which detects client retransmits.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-disable-pkinit}}] \leavevmode
-Disable PKINIT plugin support.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-disable-aesni}}] \leavevmode
-Disable support for using AES instructions on x86 platforms.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-enable-asan}{[}=\sphinxstyleemphasis{ARG}{]}}] \leavevmode
-Enable building with asan memory error checking. If \sphinxstyleemphasis{ARG} is
-given, it controls the -fsanitize compilation flag value (the
-default is “address”).
-
-\end{description}
-
-
-\subsection{Optional packages}
-\label{\detokenize{build/options2configure:optional-packages}}\begin{description}
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-}\sphinxstyleemphasis{PACKAGE}{[}=ARG{]}}] \leavevmode
-Use \sphinxstyleemphasis{PACKAGE} (e.g., \sphinxcode{-{-}with-imap}). The default value of \sphinxstyleemphasis{ARG}
-is \sphinxcode{yes}.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-without-}\sphinxstyleemphasis{PACKAGE}}] \leavevmode
-Do not use \sphinxstyleemphasis{PACKAGE} (same as \sphinxcode{-{-}with-PACKAGE=no})
-(e.g., \sphinxcode{-{-}without-libedit}).
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-size-optimizations}}] \leavevmode
-Enable a few optimizations to reduce code size possibly at some
-run-time cost.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-system-et}}] \leavevmode
-Use the com\_err library and compile\_et utility that are already
-installed on the system, instead of building and installing
-local versions.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-system-ss}}] \leavevmode
-Use the ss library and mk\_cmds utility that are already installed
-on the system, instead of building and using private versions.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-system-db}}] \leavevmode
-Use the berkeley db utility already installed on the system,
-instead of using a private version. This option is not
-recommended; enabling it may result in incompatibility with key
-databases originating on other systems.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-netlib=}\sphinxstyleemphasis{LIBS}}] \leavevmode
-Use the resolver library specified in \sphinxstyleemphasis{LIBS}. Use this variable
-if the C library resolver is insufficient or broken.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-hesiod=}\sphinxstyleemphasis{path}}] \leavevmode
-Compile with Hesiod support. The \sphinxstyleemphasis{path} points to the Hesiod
-directory. By default Hesiod is unsupported.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-ldap}}] \leavevmode
-Compile OpenLDAP database backend module.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-lmdb}}] \leavevmode
-Compile LMDB database backend module.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-vague-errors}}] \leavevmode
-Do not send helpful errors to client. For example, if the KDC
-should return only vague error codes to clients.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-crypto-impl=}\sphinxstyleemphasis{IMPL}}] \leavevmode
-Use specified crypto implementation (e.g., \sphinxstylestrong{-}\sphinxstylestrong{-with-crypto-impl=}\sphinxstyleemphasis{openssl}). The default is the native MIT
-Kerberos implementation \sphinxcode{builtin}. The other currently
-implemented crypto backend is \sphinxcode{openssl}. (See
-\DUrole{xref,std,std-ref}{mitK5features})
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-without-libedit}}] \leavevmode
-Do not compile and link against libedit. Some utilities will no
-longer offer command history or completion in interactive mode if
-libedit is disabled.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-readline}}] \leavevmode
-Compile and link against GNU readline, as an alternative to libedit.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-system-verto}}] \leavevmode
-Use an installed version of libverto. If the libverto header and
-library are not in default locations, you may wish to specify
-\sphinxcode{CPPFLAGS=-I/some/dir} and \sphinxcode{LDFLAGS=-L/some/other/dir} options
-at configuration time as well.
-
-If this option is not given, the build system will try to detect
-an installed version of libverto and use it if it is found.
-Otherwise, a version supplied with the Kerberos sources will be
-built and installed. The built-in version does not contain the
-full set of back-end modules and is not a suitable general
-replacement for the upstream version, but will work for the
-purposes of Kerberos.
-
-Specifying \sphinxstylestrong{-}\sphinxstylestrong{-without-system-verto} will cause the built-in
-version of libverto to be used unconditionally.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-with-krb5-config=}\sphinxstyleemphasis{PATH}}] \leavevmode
-Use the krb5-config program at \sphinxstyleemphasis{PATH} to obtain the build-time
-default credential cache, keytab, and client keytab names. The
-default is to use \sphinxcode{krb5-config} from the program path. Specify
-\sphinxcode{-{-}without-krb5-config} to disable the use of krb5-config and
-use the usual built-in defaults.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-without-keyutils}}] \leavevmode
-Build without libkeyutils support. This disables the KEYRING
-credential cache type.
-
-\end{description}
-
-
-\subsection{Examples}
-\label{\detokenize{build/options2configure:examples}}
-For example, in order to configure Kerberos on a Solaris machine using
-the suncc compiler with the optimizer turned on, run the configure
-script with the following options:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{o}{\PYGZpc{}} \PYG{o}{.}\PYG{o}{/}\PYG{n}{configure} \PYG{n}{CC}\PYG{o}{=}\PYG{n}{suncc} \PYG{n}{CFLAGS}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{O}
-\end{sphinxVerbatim}
-
-For a slightly more complicated example, consider a system where
-several packages to be used by Kerberos are installed in
-\sphinxcode{/usr/foobar}, including Berkeley DB 3.3, and an ss library that
-needs to link against the curses library. The configuration of
-Kerberos might be done thus:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{o}{.}\PYG{o}{/}\PYG{n}{configure} \PYG{n}{CPPFLAGS}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{I}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{foobar}\PYG{o}{/}\PYG{n}{include} \PYG{n}{LDFLAGS}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{L}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{foobar}\PYG{o}{/}\PYG{n}{lib} \PYGZbs{}
-\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{k}{with}\PYG{o}{\PYGZhy{}}\PYG{n}{system}\PYG{o}{\PYGZhy{}}\PYG{n}{et} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{k}{with}\PYG{o}{\PYGZhy{}}\PYG{n}{system}\PYG{o}{\PYGZhy{}}\PYG{n}{ss} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{k}{with}\PYG{o}{\PYGZhy{}}\PYG{n}{system}\PYG{o}{\PYGZhy{}}\PYG{n}{db} \PYGZbs{}
-\PYG{n}{SS\PYGZus{}LIB}\PYG{o}{=}\PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{\PYGZhy{}lss \PYGZhy{}lcurses}\PYG{l+s+s1}{\PYGZsq{}} \PYG{n}{DB\PYGZus{}HEADER}\PYG{o}{=}\PYG{n}{db3}\PYG{o}{/}\PYG{n}{db\PYGZus{}185}\PYG{o}{.}\PYG{n}{h} \PYG{n}{DB\PYGZus{}LIB}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{ldb}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{3.3}
-\end{sphinxVerbatim}
-
-
-\section{osconf.hin}
-\label{\detokenize{build/osconf:osconf-hin}}\label{\detokenize{build/osconf::doc}}
-There is one configuration file which you may wish to edit to control
-various compile-time parameters in the Kerberos distribution:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{include}\PYG{o}{/}\PYG{n}{osconf}\PYG{o}{.}\PYG{n}{hin}
-\end{sphinxVerbatim}
-
-The list that follows is by no means complete, just some of the more
-interesting variables.
-\begin{description}
-\item[{\sphinxstylestrong{DEFAULT\_PROFILE\_PATH}}] \leavevmode
-The pathname to the file which contains the profiles for the known
-realms, their KDCs, etc. The default value is \sphinxcode{/etc/krb5.conf}.
-
-\item[{\sphinxstylestrong{DEFAULT\_KEYTAB\_NAME}}] \leavevmode
-The type and pathname to the default server keytab file. The
-default is \DUrole{xref,std,std-ref}{DEFKTNAME}.
-
-\item[{\sphinxstylestrong{DEFAULT\_KDC\_ENCTYPE}}] \leavevmode
-The default encryption type for the KDC database master key. The
-default value is \sphinxcode{aes256-cts-hmac-sha1-96}.
-
-\item[{\sphinxstylestrong{RCTMPDIR}}] \leavevmode
-The directory which stores replay caches. The default is
-\sphinxcode{/var/tmp}.
-
-\item[{\sphinxstylestrong{DEFAULT\_KDB\_FILE}}] \leavevmode
-The location of the default database. The default value is
-\DUrole{xref,std,std-ref}{LOCALSTATEDIR}\sphinxcode{/krb5kdc}\sphinxcode{/principal}.
-
-\end{description}
-
-
-
-\renewcommand{\indexname}{Index}
-\printindex
-\end{document}
\ No newline at end of file
+++ /dev/null
-\NeedsTeXFormat{LaTeX2e}
-\ProvidesPackage{footnotehyper-sphinx}%
- [2017/03/07 v1.6 hyperref aware footnote.sty for sphinx (JFB)]
-%%
-%% Package: footnotehyper-sphinx
-%% Version: based on footnotehyper.sty 2017/03/07 v1.0
-%% as available at http://www.ctan.org/pkg/footnotehyper
-%% License: the one applying to Sphinx
-%%
-%% Refer to the PDF documentation at http://www.ctan.org/pkg/footnotehyper for
-%% the code comments.
-%%
-%% Differences:
-%% 1. a partial tabulary compatibility layer added (enough for Sphinx mark-up),
-%% 2. use of \spx@opt@BeforeFootnote from sphinx.sty,
-%% 3. use of \sphinxunactivateextrasandspace from sphinx.sty,
-%% 4. macro definition \sphinxfootnotemark,
-%% 5. macro definition \sphinxlongtablepatch
-\DeclareOption*{\PackageWarning{footnotehyper-sphinx}{Option `\CurrentOption' is unknown}}%
-\ProcessOptions\relax
-\newbox\FNH@notes
-\newdimen\FNH@width
-\let\FNH@colwidth\columnwidth
-\newif\ifFNH@savingnotes
-\AtBeginDocument {%
- \let\FNH@latex@footnote \footnote
- \let\FNH@latex@footnotetext\footnotetext
- \let\FNH@H@@footnotetext \@footnotetext
- \newenvironment{savenotes}
- {\FNH@savenotes\ignorespaces}{\FNH@spewnotes\ignorespacesafterend}%
- \let\spewnotes \FNH@spewnotes
- \let\footnote \FNH@footnote
- \let\footnotetext \FNH@footnotetext
- \let\endfootnote \FNH@endfntext
- \let\endfootnotetext\FNH@endfntext
- \@ifpackageloaded{hyperref}
- {\ifHy@hyperfootnotes
- \let\FNH@H@@footnotetext\H@@footnotetext
- \else
- \let\FNH@hyper@fntext\FNH@nohyp@fntext
- \fi}%
- {\let\FNH@hyper@fntext\FNH@nohyp@fntext}%
-}%
-\def\FNH@hyper@fntext{\FNH@fntext\FNH@hyper@fntext@i}%
-\def\FNH@nohyp@fntext{\FNH@fntext\FNH@nohyp@fntext@i}%
-\def\FNH@fntext #1{%
- \ifx\ifmeasuring@\@undefined
- \expandafter\@secondoftwo\else\expandafter\@firstofone\fi
-% these two lines modified for Sphinx (tabulary compatibility):
- {\ifmeasuring@\expandafter\@gobbletwo\else\expandafter\@firstofone\fi}%
- {\ifx\equation$\expandafter\@gobbletwo\fi #1}%$
-}%
-\long\def\FNH@hyper@fntext@i#1{%
- \global\setbox\FNH@notes\vbox
- {\unvbox\FNH@notes
- \FNH@startnote
- \@makefntext
- {\rule\z@\footnotesep\ignorespaces
- \ifHy@nesting\expandafter\ltx@firstoftwo
- \else\expandafter\ltx@secondoftwo
- \fi
- {\expandafter\hyper@@anchor\expandafter{\Hy@footnote@currentHref}{#1}}%
- {\Hy@raisedlink
- {\expandafter\hyper@@anchor\expandafter{\Hy@footnote@currentHref}%
- {\relax}}%
- \let\@currentHref\Hy@footnote@currentHref
- \let\@currentlabelname\@empty
- #1}%
- \@finalstrut\strutbox
- }%
- \FNH@endnote
- }%
-}%
-\long\def\FNH@nohyp@fntext@i#1{%
- \global\setbox\FNH@notes\vbox
- {\unvbox\FNH@notes
- \FNH@startnote
- \@makefntext{\rule\z@\footnotesep\ignorespaces#1\@finalstrut\strutbox}%
- \FNH@endnote
- }%
-}%
-\def\FNH@startnote{%
- \hsize\FNH@colwidth
- \interlinepenalty\interfootnotelinepenalty
- \reset@font\footnotesize
- \floatingpenalty\@MM
- \@parboxrestore
- \protected@edef\@currentlabel{\csname p@\@mpfn\endcsname\@thefnmark}%
- \color@begingroup
-}%
-\def\FNH@endnote{\color@endgroup}%
-\def\FNH@savenotes{%
- \begingroup
- \ifFNH@savingnotes\else
- \FNH@savingnotestrue
- \let\@footnotetext \FNH@hyper@fntext
- \let\@mpfootnotetext \FNH@hyper@fntext
- \let\H@@mpfootnotetext\FNH@nohyp@fntext
- \FNH@width\columnwidth
- \let\FNH@colwidth\FNH@width
- \global\setbox\FNH@notes\box\voidb@x
- \let\FNH@thempfn\thempfn
- \let\FNH@mpfn\@mpfn
- \ifx\@minipagerestore\relax\let\@minipagerestore\@empty\fi
- \expandafter\def\expandafter\@minipagerestore\expandafter{%
- \@minipagerestore
- \let\thempfn\FNH@thempfn
- \let\@mpfn\FNH@mpfn
- }%
- \fi
-}%
-\def\FNH@spewnotes {%
- \endgroup
- \ifFNH@savingnotes\else
- \ifvoid\FNH@notes\else
- \begingroup
- \let\@makefntext\@empty
- \let\@finalstrut\@gobble
- \let\rule\@gobbletwo
- \FNH@H@@footnotetext{\unvbox\FNH@notes}%
- \endgroup
- \fi
- \fi
-}%
-\def\FNH@footnote@envname {footnote}%
-\def\FNH@footnotetext@envname{footnotetext}%
-\def\FNH@footnote{%
-% this line added for Sphinx:
- \spx@opt@BeforeFootnote
- \ifx\@currenvir\FNH@footnote@envname
- \expandafter\FNH@footnoteenv
- \else
- \expandafter\FNH@latex@footnote
- \fi
-}%
-\def\FNH@footnoteenv{%
-% this line added for Sphinx (footnotes in parsed literal blocks):
- \catcode13=5 \sphinxunactivateextrasandspace
- \@ifnextchar[%
- \FNH@footnoteenv@i %]
- {\stepcounter\@mpfn
- \protected@xdef\@thefnmark{\thempfn}%
- \@footnotemark
- \def\FNH@endfntext@fntext{\@footnotetext}%
- \FNH@startfntext}%
-}%
-\def\FNH@footnoteenv@i[#1]{%
- \begingroup
- \csname c@\@mpfn\endcsname #1\relax
- \unrestored@protected@xdef\@thefnmark{\thempfn}%
- \endgroup
- \@footnotemark
- \def\FNH@endfntext@fntext{\@footnotetext}%
- \FNH@startfntext
-}%
-\def\FNH@footnotetext{%
- \ifx\@currenvir\FNH@footnotetext@envname
- \expandafter\FNH@footnotetextenv
- \else
- \expandafter\FNH@latex@footnotetext
- \fi
-}%
-\def\FNH@footnotetextenv{%
- \@ifnextchar[%
- \FNH@footnotetextenv@i %]
- {\protected@xdef\@thefnmark{\thempfn}%
- \def\FNH@endfntext@fntext{\@footnotetext}%
- \FNH@startfntext}%
-}%
-\def\FNH@footnotetextenv@i[#1]{%
- \begingroup
- \csname c@\@mpfn\endcsname #1\relax
- \unrestored@protected@xdef\@thefnmark{\thempfn}%
- \endgroup
- \ifFNH@savingnotes
- \def\FNH@endfntext@fntext{\FNH@nohyp@fntext}%
- \else
- \def\FNH@endfntext@fntext{\FNH@H@@footnotetext}%
- \fi
- \FNH@startfntext
-}%
-\def\FNH@startfntext{%
- \setbox\z@\vbox\bgroup
- \FNH@startnote
- \FNH@prefntext
- \rule\z@\footnotesep\ignorespaces
-}%
-\def\FNH@endfntext {%
- \@finalstrut\strutbox
- \FNH@postfntext
- \FNH@endnote
- \egroup
- \begingroup
- \let\@makefntext\@empty\let\@finalstrut\@gobble\let\rule\@gobbletwo
- \FNH@endfntext@fntext {\unvbox\z@}%
- \endgroup
-}%
-\AtBeginDocument{%
- \let\FNH@@makefntext\@makefntext
- \ifx\@makefntextFB\undefined
- \expandafter\@gobble\else\expandafter\@firstofone\fi
- {\ifFBFrenchFootnotes \let\FNH@@makefntext\@makefntextFB \else
- \let\FNH@@makefntext\@makefntextORI\fi}%
- \expandafter\FNH@check@a\FNH@@makefntext{1.2!3?4,}%
- \FNH@@@1.2!3?4,\FNH@@@\relax
-}%
-\long\def\FNH@check@a #11.2!3?4,#2\FNH@@@#3{%
- \ifx\relax#3\expandafter\@firstoftwo\else\expandafter\@secondoftwo\fi
- \FNH@bad@makefntext@alert
- {\def\FNH@prefntext{#1}\def\FNH@postfntext{#2}\FNH@check@b}%
-}%
-\def\FNH@check@b #1\relax{%
- \expandafter\expandafter\expandafter\FNH@check@c
- \expandafter\meaning\expandafter\FNH@prefntext
- \meaning\FNH@postfntext1.2!3?4,\FNH@check@c\relax
-}%
-\def\FNH@check@c #11.2!3?4,#2#3\relax{%
- \ifx\FNH@check@c#2\expandafter\@gobble\fi\FNH@bad@makefntext@alert
-}%
-% slight reformulation for Sphinx
-\def\FNH@bad@makefntext@alert{%
- \PackageWarningNoLine{footnotehyper-sphinx}%
- {Footnotes will be sub-optimal, sorry. This is due to the document class or^^J
- some package modifying macro \string\@makefntext.^^J
- You can try to report this incompatibility at^^J
- https://github.com/sphinx-doc/sphinx with this info:}%
- \typeout{\meaning\@makefntext}%
- \let\FNH@prefntext\@empty\let\FNH@postfntext\@empty
-}%
-% this macro from original footnote.sty is not used anymore by Sphinx
-% but for simplicity sake let's just keep it as is
-\def\makesavenoteenv{\@ifnextchar[\FNH@msne@ii\FNH@msne@i}%]
-\def\FNH@msne@i #1{%
- \expandafter\let\csname FNH$#1\expandafter\endcsname %$
- \csname #1\endcsname
- \expandafter\let\csname endFNH$#1\expandafter\endcsname %$
- \csname end#1\endcsname
- \FNH@msne@ii[#1]{FNH$#1}%$
-}%
-\def\FNH@msne@ii[#1]#2{%
- \expandafter\edef\csname#1\endcsname{%
- \noexpand\savenotes
- \expandafter\noexpand\csname#2\endcsname
- }%
- \expandafter\edef\csname end#1\endcsname{%
- \expandafter\noexpand\csname end#2\endcsname
- \noexpand\expandafter
- \noexpand\spewnotes
- \noexpand\if@endpe\noexpand\@endpetrue\noexpand\fi
- }%
-}%
-% end of footnotehyper 2017/02/16 v0.99
-% some extras for Sphinx :
-% \sphinxfootnotemark: usable in section titles and silently removed from TOCs.
-\def\sphinxfootnotemark [#1]%
- {\ifx\thepage\relax\else\protect\spx@opt@BeforeFootnote
- \protect\footnotemark[#1]\fi}%
-\AtBeginDocument{%
- % let hyperref less complain
- \pdfstringdefDisableCommands{\def\sphinxfootnotemark [#1]{}}%
- % to obtain hyperlinked footnotes in longtable environment we must replace
- % hyperref's patch of longtable's patch of \@footnotetext by our own
- \let\LT@p@ftntext\FNH@hyper@fntext
- % this *requires* longtable to be used always wrapped in savenotes environment
-}%
-\endinput
-%%
-%% End of file `footnotehyper-sphinx.sty'.
+++ /dev/null
-$latex = 'platex ' . $ENV{'LATEXOPTS'} . ' -kanji=utf8 %O %S';
-$dvipdf = 'dvipdfmx %O -o %D %S';
-$makeindex = 'rm -f %D; mendex -U -f -d %B.dic -s python.ist %S || echo "mendex exited with error code $? (ignoring)" && : >> %D';
-add_cus_dep( "glo", "gls", 0, "makeglo" );
-sub makeglo {
- return system( "mendex -J -f -s gglo.ist -o '$_[0].gls' '$_[0].glo'" );
-}
+++ /dev/null
-$latex = 'latex ' . $ENV{'LATEXOPTS'} . ' %O %S';
-$pdflatex = 'pdflatex ' . $ENV{'LATEXOPTS'} . ' %O %S';
-$lualatex = 'lualatex ' . $ENV{'LATEXOPTS'} . ' %O %S';
-$xelatex = 'xelatex --no-pdf ' . $ENV{'LATEXOPTS'} . ' %O %S';
-$makeindex = 'makeindex -s python.ist %O -o %D %S';
-add_cus_dep( "glo", "gls", 0, "makeglo" );
-sub makeglo {
- return system( "makeindex -s gglo.ist -o '$_[0].gls' '$_[0].glo'" );
-}
\ No newline at end of file
+++ /dev/null
-%% Generated by Sphinx.
-\def\sphinxdocclass{report}
-\documentclass[letterpaper,10pt,english]{sphinxmanual}
-\ifdefined\pdfpxdimen
- \let\sphinxpxdimen\pdfpxdimen\else\newdimen\sphinxpxdimen
-\fi \sphinxpxdimen=.75bp\relax
-
-\usepackage[utf8]{inputenc}
-\ifdefined\DeclareUnicodeCharacter
- \ifdefined\DeclareUnicodeCharacterAsOptional
- \DeclareUnicodeCharacter{"00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{"2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{"2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{"2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{"251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{"2572}{\textbackslash}
- \else
- \DeclareUnicodeCharacter{00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{2572}{\textbackslash}
- \fi
-\fi
-\usepackage{cmap}
-\usepackage[T1]{fontenc}
-\usepackage{amsmath,amssymb,amstext}
-\usepackage{babel}
-\usepackage{times}
-\usepackage[Bjarne]{fncychap}
-\usepackage[dontkeepoldnames]{sphinx}
-
-\usepackage{geometry}
-
-% Include hyperref last.
-\usepackage{hyperref}
-% Fix anchor placement for figures with captions.
-\usepackage{hypcap}% it must be loaded after hyperref.
-% Set up styles of URL: it should be placed after hyperref.
-\urlstyle{same}
-
-\addto\captionsenglish{\renewcommand{\figurename}{Fig.}}
-\addto\captionsenglish{\renewcommand{\tablename}{Table}}
-\addto\captionsenglish{\renewcommand{\literalblockname}{Listing}}
-
-\addto\captionsenglish{\renewcommand{\literalblockcontinuedname}{continued from previous page}}
-\addto\captionsenglish{\renewcommand{\literalblockcontinuesname}{continues on next page}}
-
-\addto\extrasenglish{\def\pageautorefname{page}}
-
-\setcounter{tocdepth}{1}
-
-
-
-\title{Kerberos Plugin Module Developer Guide}
-\date{ }
-\release{1.20.1}
-\author{MIT}
-\newcommand{\sphinxlogo}{\vbox{}}
-\renewcommand{\releasename}{Release}
-\makeindex
-
-\begin{document}
-
-\maketitle
-\sphinxtableofcontents
-\phantomsection\label{\detokenize{plugindev/index::doc}}
-
-
-Kerberos plugin modules allow increased control over MIT krb5 library
-and server behavior. This guide describes how to create dynamic
-plugin modules and the currently available pluggable interfaces.
-
-See \DUrole{xref,std,std-ref}{plugin\_config} for information on how to register dynamic
-plugin modules and how to enable and disable modules via
-\DUrole{xref,std,std-ref}{krb5.conf(5)}.
-
-
-\chapter{Contents}
-\label{\detokenize{plugindev/index:for-plugin-module-developers}}\label{\detokenize{plugindev/index:contents}}
-
-\section{General plugin concepts}
-\label{\detokenize{plugindev/general:general-plugin-concepts}}\label{\detokenize{plugindev/general::doc}}
-A krb5 dynamic plugin module is a Unix shared object or Windows DLL.
-Typically, the source code for a dynamic plugin module should live in
-its own project with a build system using \sphinxhref{https://www.gnu.org/software/automake/}{automake} and \sphinxhref{https://www.gnu.org/software/libtool/}{libtool}, or
-tools with similar functionality.
-
-A plugin module must define a specific symbol name, which depends on
-the pluggable interface and module name. For most pluggable
-interfaces, the exported symbol is a function named
-\sphinxcode{INTERFACE\_MODULE\_initvt}, where \sphinxstyleemphasis{INTERFACE} is the name of the
-pluggable interface and \sphinxstyleemphasis{MODULE} is the name of the module. For these
-interfaces, it is possible for one shared object or DLL to implement
-multiple plugin modules, either for the same pluggable interface or
-for different ones. For example, a shared object could implement both
-KDC and client preauthentication mechanisms, by exporting functions
-named \sphinxcode{kdcpreauth\_mymech\_initvt} and \sphinxcode{clpreauth\_mymech\_initvt}.
-
-A plugin module implementation should include the header file
-\sphinxcode{\textless{}krb5/INTERFACE\_plugin.h\textgreater{}}, where \sphinxstyleemphasis{INTERFACE} is the name of the
-pluggable interface. For instance, a ccselect plugin module
-implementation should use \sphinxcode{\#include \textless{}krb5/ccselect\_plugin.h\textgreater{}}.
-
-initvt functions have the following prototype:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{krb5\PYGZus{}error\PYGZus{}code} \PYG{n}{interface\PYGZus{}modname\PYGZus{}initvt}\PYG{p}{(}\PYG{n}{krb5\PYGZus{}context} \PYG{n}{context}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{n}{maj\PYGZus{}ver}\PYG{p}{,} \PYG{n+nb}{int} \PYG{n}{min\PYGZus{}ver}\PYG{p}{,}
- \PYG{n}{krb5\PYGZus{}plugin\PYGZus{}vtable} \PYG{n}{vtable}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-and should do the following:
-\begin{enumerate}
-\item {}
-Check that the supplied maj\_ver argument is supported by the
-module. If it is not supported, the function should return
-KRB5\_PLUGIN\_VER\_NOTSUPP.
-
-\item {}
-Cast the supplied vtable pointer to the structure type
-corresponding to the major version, as documented in the pluggable
-interface header file.
-
-\item {}
-Fill in the structure fields with pointers to method functions and
-static data, stopping at the field indicated by the supplied minor
-version. Fields for unimplemented optional methods can be left
-alone; it is not necessary to initialize them to NULL.
-
-\end{enumerate}
-
-In most cases, the context argument will not be used. The initvt
-function should not allocate memory; think of it as a glorified
-structure initializer. Each pluggable interface defines methods for
-allocating and freeing module state if doing so is necessary for the
-interface.
-
-Pluggable interfaces typically include a \sphinxstylestrong{name} field in the vtable
-structure, which should be filled in with a pointer to a string
-literal containing the module name.
-
-Here is an example of what an initvt function might look like for a
-fictional pluggable interface named fences, for a module named
-“wicker”:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{krb5\PYGZus{}error\PYGZus{}code}
-\PYG{n}{fences\PYGZus{}wicker\PYGZus{}initvt}\PYG{p}{(}\PYG{n}{krb5\PYGZus{}context} \PYG{n}{context}\PYG{p}{,} \PYG{n+nb}{int} \PYG{n}{maj\PYGZus{}ver}\PYG{p}{,}
- \PYG{n+nb}{int} \PYG{n}{min\PYGZus{}ver}\PYG{p}{,} \PYG{n}{krb5\PYGZus{}plugin\PYGZus{}vtable} \PYG{n}{vtable}\PYG{p}{)}
-\PYG{p}{\PYGZob{}}
- \PYG{n}{krb5\PYGZus{}ccselect\PYGZus{}vtable} \PYG{n}{vt}\PYG{p}{;}
-
- \PYG{k}{if} \PYG{p}{(}\PYG{n}{maj\PYGZus{}ver} \PYG{o}{==} \PYG{l+m+mi}{1}\PYG{p}{)} \PYG{p}{\PYGZob{}}
- \PYG{n}{krb5\PYGZus{}fences\PYGZus{}vtable} \PYG{n}{vt} \PYG{o}{=} \PYG{p}{(}\PYG{n}{krb5\PYGZus{}fences\PYGZus{}vtable}\PYG{p}{)}\PYG{n}{vtable}\PYG{p}{;}
- \PYG{n}{vt}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}\PYG{n}{name} \PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{wicker}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
- \PYG{n}{vt}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}\PYG{n}{slats} \PYG{o}{=} \PYG{n}{wicker\PYGZus{}slats}\PYG{p}{;}
- \PYG{n}{vt}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}\PYG{n}{braces} \PYG{o}{=} \PYG{n}{wicker\PYGZus{}braces}\PYG{p}{;}
- \PYG{p}{\PYGZcb{}} \PYG{k}{else} \PYG{k}{if} \PYG{p}{(}\PYG{n}{maj\PYGZus{}ver} \PYG{o}{==} \PYG{l+m+mi}{2}\PYG{p}{)} \PYG{p}{\PYGZob{}}
- \PYG{n}{krb5\PYGZus{}fences\PYGZus{}vtable\PYGZus{}v2} \PYG{n}{vt} \PYG{o}{=} \PYG{p}{(}\PYG{n}{krb5\PYGZus{}fences\PYGZus{}vtable\PYGZus{}v2}\PYG{p}{)}\PYG{n}{vtable}\PYG{p}{;}
- \PYG{n}{vt}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}\PYG{n}{name} \PYG{o}{=} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{wicker}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{;}
- \PYG{n}{vt}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}\PYG{n}{material} \PYG{o}{=} \PYG{n}{wicker\PYGZus{}material}\PYG{p}{;}
- \PYG{n}{vt}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}\PYG{n}{construction} \PYG{o}{=} \PYG{n}{wicker\PYGZus{}construction}\PYG{p}{;}
- \PYG{k}{if} \PYG{p}{(}\PYG{n}{min\PYGZus{}ver} \PYG{o}{\PYGZlt{}} \PYG{l+m+mi}{2}\PYG{p}{)}
- \PYG{k}{return} \PYG{l+m+mi}{0}\PYG{p}{;}
- \PYG{n}{vt}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}\PYG{n}{footing} \PYG{o}{=} \PYG{n}{wicker\PYGZus{}footing}\PYG{p}{;}
- \PYG{k}{if} \PYG{p}{(}\PYG{n}{min\PYGZus{}ver} \PYG{o}{\PYGZlt{}} \PYG{l+m+mi}{3}\PYG{p}{)}
- \PYG{k}{return} \PYG{l+m+mi}{0}\PYG{p}{;}
- \PYG{n}{vt}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}\PYG{n}{appearance} \PYG{o}{=} \PYG{n}{wicker\PYGZus{}appearance}\PYG{p}{;}
- \PYG{p}{\PYGZcb{}} \PYG{k}{else} \PYG{p}{\PYGZob{}}
- \PYG{k}{return} \PYG{n}{KRB5\PYGZus{}PLUGIN\PYGZus{}VER\PYGZus{}NOTSUPP}\PYG{p}{;}
- \PYG{p}{\PYGZcb{}}
- \PYG{k}{return} \PYG{l+m+mi}{0}\PYG{p}{;}
-\PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-
-\subsection{Logging from KDC and kadmind plugin modules}
-\label{\detokenize{plugindev/general:logging-from-kdc-and-kadmind-plugin-modules}}
-Plugin modules for the KDC or kadmind daemons can write to the
-configured logging outputs (see \DUrole{xref,std,std-ref}{logging}) by calling the
-\sphinxstylestrong{com\_err} function. The first argument (\sphinxstyleemphasis{whoami}) is ignored. If
-the second argument (\sphinxstyleemphasis{code}) is zero, the formatted message is logged
-at informational severity; otherwise, the formatted message is logged
-at error severity and includes the error message for the supplied
-code. Here are examples:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{com\PYGZus{}err}\PYG{p}{(}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{,} \PYG{l+m+mi}{0}\PYG{p}{,} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{Client message contains }\PYG{l+s+si}{\PYGZpc{}d}\PYG{l+s+s2}{ items}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{,} \PYG{n}{nitems}\PYG{p}{)}\PYG{p}{;}
-\PYG{n}{com\PYGZus{}err}\PYG{p}{(}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{,} \PYG{n}{retval}\PYG{p}{,} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{while decoding client message}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-(The behavior described above is new in release 1.17. In prior
-releases, the \sphinxstyleemphasis{whoami} argument is included for some logging output
-types, the logged message does not include the usual header for some
-output types, and the severity for syslog outputs is configured as
-part of the logging specification, defaulting to error severity.)
-
-
-\section{Client preauthentication interface (clpreauth)}
-\label{\detokenize{plugindev/clpreauth:client-preauthentication-interface-clpreauth}}\label{\detokenize{plugindev/clpreauth::doc}}
-During an initial ticket request, a KDC may ask a client to prove its
-knowledge of the password before issuing an encrypted ticket, or to
-use credentials other than a password. This process is called
-preauthentication, and is described in \index{RFC!RFC 4120}\sphinxhref{https://tools.ietf.org/html/rfc4120.html}{\sphinxstylestrong{RFC 4120}} and \index{RFC!RFC 6113}\sphinxhref{https://tools.ietf.org/html/rfc6113.html}{\sphinxstylestrong{RFC 6113}}.
-The clpreauth interface allows the addition of client support for
-preauthentication mechanisms beyond those included in the core MIT
-krb5 code base. For a detailed description of the clpreauth
-interface, see the header file \sphinxcode{\textless{}krb5/clpreauth\_plugin.h\textgreater{}} (or
-\sphinxcode{\textless{}krb5/preauth\_plugin.h\textgreater{}} before release 1.12).
-
-A clpreauth module is generally responsible for:
-\begin{itemize}
-\item {}
-Supplying a list of preauth type numbers used by the module in the
-\sphinxstylestrong{pa\_type\_list} field of the vtable structure.
-
-\item {}
-Indicating what kind of preauthentication mechanism it implements,
-with the \sphinxstylestrong{flags} method. In the most common case, this method
-just returns \sphinxcode{PA\_REAL}, indicating that it implements a normal
-preauthentication type.
-
-\item {}
-Examining the padata information included in a PREAUTH\_REQUIRED or
-MORE\_PREAUTH\_DATA\_REQUIRED error and producing padata values for the
-next AS request. This is done with the \sphinxstylestrong{process} method.
-
-\item {}
-Examining the padata information included in a successful ticket
-reply, possibly verifying the KDC identity and computing a reply
-key. This is also done with the \sphinxstylestrong{process} method.
-
-\item {}
-For preauthentication types which support it, recovering from errors
-by examining the error data from the KDC and producing a padata
-value for another AS request. This is done with the \sphinxstylestrong{tryagain}
-method.
-
-\item {}
-Receiving option information (supplied by \sphinxcode{kinit -X} or by an
-application), with the \sphinxstylestrong{gic\_opts} method.
-
-\end{itemize}
-
-A clpreauth module can create and destroy per-library-context and
-per-request state objects by implementing the \sphinxstylestrong{init}, \sphinxstylestrong{fini},
-\sphinxstylestrong{request\_init}, and \sphinxstylestrong{request\_fini} methods. Per-context state
-objects have the type krb5\_clpreauth\_moddata, and per-request state
-objects have the type krb5\_clpreauth\_modreq. These are abstract
-pointer types; a module should typically cast these to internal
-types for the state objects.
-
-The \sphinxstylestrong{process} and \sphinxstylestrong{tryagain} methods have access to a callback
-function and handle (called a “rock”) which can be used to get
-additional information about the current request, including the
-expected enctype of the AS reply, the FAST armor key, and the client
-long-term key (prompting for the user password if necessary). A
-callback can also be used to replace the AS reply key if the
-preauthentication mechanism computes one.
-
-
-\section{KDC preauthentication interface (kdcpreauth)}
-\label{\detokenize{plugindev/kdcpreauth:kdc-preauthentication-interface-kdcpreauth}}\label{\detokenize{plugindev/kdcpreauth::doc}}
-The kdcpreauth interface allows the addition of KDC support for
-preauthentication mechanisms beyond those included in the core MIT
-krb5 code base. For a detailed description of the kdcpreauth
-interface, see the header file \sphinxcode{\textless{}krb5/kdcpreauth\_plugin.h\textgreater{}} (or
-\sphinxcode{\textless{}krb5/preauth\_plugin.h\textgreater{}} before release 1.12).
-
-A kdcpreauth module is generally responsible for:
-\begin{itemize}
-\item {}
-Supplying a list of preauth type numbers used by the module in the
-\sphinxstylestrong{pa\_type\_list} field of the vtable structure.
-
-\item {}
-Indicating what kind of preauthentication mechanism it implements,
-with the \sphinxstylestrong{flags} method. If the mechanism computes a new reply
-key, it must specify the \sphinxcode{PA\_REPLACES\_KEY} flag. If the mechanism
-is generally only used with hardware tokens, the \sphinxcode{PA\_HARDWARE}
-flag allows the mechanism to work with principals which have the
-\sphinxstylestrong{requires\_hwauth} flag set.
-
-\item {}
-Producing a padata value to be sent with a preauth\_required error,
-with the \sphinxstylestrong{edata} method.
-
-\item {}
-Examining a padata value sent by a client and verifying that it
-proves knowledge of the appropriate client credential information.
-This is done with the \sphinxstylestrong{verify} method.
-
-\item {}
-Producing a padata response value for the client, and possibly
-computing a reply key. This is done with the \sphinxstylestrong{return\_padata}
-method.
-
-\end{itemize}
-
-A module can create and destroy per-KDC state objects by implementing
-the \sphinxstylestrong{init} and \sphinxstylestrong{fini} methods. Per-KDC state objects have the
-type krb5\_kdcpreauth\_moddata, which is an abstract pointer types. A
-module should typically cast this to an internal type for the state
-object.
-
-A module can create a per-request state object by returning one in the
-\sphinxstylestrong{verify} method, receiving it in the \sphinxstylestrong{return\_padata} method, and
-destroying it in the \sphinxstylestrong{free\_modreq} method. Note that these state
-objects only apply to the processing of a single AS request packet,
-not to an entire authentication exchange (since an authentication
-exchange may remain unfinished by the client or may involve multiple
-different KDC hosts). Per-request state objects have the type
-krb5\_kdcpreauth\_modreq, which is an abstract pointer type.
-
-The \sphinxstylestrong{edata}, \sphinxstylestrong{verify}, and \sphinxstylestrong{return\_padata} methods have access
-to a callback function and handle (called a “rock”) which can be used
-to get additional information about the current request, including the
-maximum allowable clock skew, the client’s long-term keys, the
-DER-encoded request body, the FAST armor key, string attributes on the
-client’s database entry, and the client’s database entry itself. The
-\sphinxstylestrong{verify} method can assert one or more authentication indicators to
-be included in the issued ticket using the \sphinxcode{add\_auth\_indicator}
-callback (new in release 1.14).
-
-A module can generate state information to be included with the next
-client request using the \sphinxcode{set\_cookie} callback (new in release
-1.14). On the next request, the module can read this state
-information using the \sphinxcode{get\_cookie} callback. Cookie information is
-encrypted, timestamped, and transmitted to the client in a
-\sphinxcode{PA-FX-COOKIE} pa-data item. Older clients may not support cookies
-and therefore may not transmit the cookie in the next request; in this
-case, \sphinxcode{get\_cookie} will not yield the saved information.
-
-If a module implements a mechanism which requires multiple round
-trips, its \sphinxstylestrong{verify} method can respond with the code
-\sphinxcode{KRB5KDC\_ERR\_MORE\_PREAUTH\_DATA\_REQUIRED} and a list of pa-data in
-the \sphinxstyleemphasis{e\_data} parameter to be processed by the client.
-
-The \sphinxstylestrong{edata} and \sphinxstylestrong{verify} methods can be implemented
-asynchronously. Because of this, they do not return values directly
-to the caller, but must instead invoke responder functions with their
-results. A synchronous implementation can invoke the responder
-function immediately. An asynchronous implementation can use the
-callback to get an event context for use with the \sphinxhref{https://fedorahosted.org/libverto/}{libverto} API.
-
-
-\section{Credential cache selection interface (ccselect)}
-\label{\detokenize{plugindev/ccselect:credential-cache-selection-interface-ccselect}}\label{\detokenize{plugindev/ccselect::doc}}\label{\detokenize{plugindev/ccselect:ccselect-plugin}}
-The ccselect interface allows modules to control how credential caches
-are chosen when a GSSAPI client contacts a service. For a detailed
-description of the ccselect interface, see the header file
-\sphinxcode{\textless{}krb5/ccselect\_plugin.h\textgreater{}}.
-
-The primary ccselect method is \sphinxstylestrong{choose}, which accepts a server
-principal as input and returns a ccache and/or principal name as
-output. A module can use the krb5\_cccol APIs to iterate over the
-cache collection in order to find an appropriate ccache to use.
-
-A module can create and destroy per-library-context state objects by
-implementing the \sphinxstylestrong{init} and \sphinxstylestrong{fini} methods. State objects have
-the type krb5\_ccselect\_moddata, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object.
-
-A module can have one of two priorities, “authoritative” or
-“heuristic”. Results from authoritative modules, if any are
-available, will take priority over results from heuristic modules. A
-module communicates its priority as a result of the \sphinxstylestrong{init} method.
-
-
-\section{Password quality interface (pwqual)}
-\label{\detokenize{plugindev/pwqual::doc}}\label{\detokenize{plugindev/pwqual:password-quality-interface-pwqual}}\label{\detokenize{plugindev/pwqual:pwqual-plugin}}
-The pwqual interface allows modules to control what passwords are
-allowed when a user changes passwords. For a detailed description of
-the pwqual interface, see the header file \sphinxcode{\textless{}krb5/pwqual\_plugin.h\textgreater{}}.
-
-The primary pwqual method is \sphinxstylestrong{check}, which receives a password as
-input and returns success (0) or a \sphinxcode{KADM5\_PASS\_Q\_} failure code
-depending on whether the password is allowed. The \sphinxstylestrong{check} method
-also receives the principal name and the name of the principal’s
-password policy as input; although there is no stable interface for
-the module to obtain the fields of the password policy, it can define
-its own configuration or data store based on the policy name.
-
-A module can create and destroy per-process state objects by
-implementing the \sphinxstylestrong{open} and \sphinxstylestrong{close} methods. State objects have
-the type krb5\_pwqual\_moddata, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object. The \sphinxstylestrong{open} method also receives the name of the realm’s
-dictionary file (as configured by the \sphinxstylestrong{dict\_file} variable in the
-\DUrole{xref,std,std-ref}{kdc\_realms} section of \DUrole{xref,std,std-ref}{kdc.conf(5)}) if it wishes to use
-it.
-
-
-\section{KADM5 hook interface (kadm5\_hook)}
-\label{\detokenize{plugindev/kadm5_hook:kadm5-hook-interface-kadm5-hook}}\label{\detokenize{plugindev/kadm5_hook::doc}}\label{\detokenize{plugindev/kadm5_hook:kadm5-hook-plugin}}
-The kadm5\_hook interface allows modules to perform actions when
-changes are made to the Kerberos database through \DUrole{xref,std,std-ref}{kadmin(1)}.
-For a detailed description of the kadm5\_hook interface, see the header
-file \sphinxcode{\textless{}krb5/kadm5\_hook\_plugin.h\textgreater{}}.
-
-The kadm5\_hook interface has five primary methods: \sphinxstylestrong{chpass},
-\sphinxstylestrong{create}, \sphinxstylestrong{modify}, \sphinxstylestrong{remove}, and \sphinxstylestrong{rename}. (The \sphinxstylestrong{rename}
-method was introduced in release 1.14.) Each of these methods is
-called twice when the corresponding administrative action takes place,
-once before the action is committed and once afterwards. A module can
-prevent the action from taking place by returning an error code during
-the pre-commit stage.
-
-A module can create and destroy per-process state objects by
-implementing the \sphinxstylestrong{init} and \sphinxstylestrong{fini} methods. State objects have
-the type kadm5\_hook\_modinfo, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object.
-
-Because the kadm5\_hook interface is tied closely to the kadmin
-interface (which is explicitly unstable), it may not remain as stable
-across versions as other public pluggable interfaces.
-
-
-\section{kadmin authorization interface (kadm5\_auth)}
-\label{\detokenize{plugindev/kadm5_auth:kadm5-auth-plugin}}\label{\detokenize{plugindev/kadm5_auth:kadmin-authorization-interface-kadm5-auth}}\label{\detokenize{plugindev/kadm5_auth::doc}}
-The kadm5\_auth interface (new in release 1.16) allows modules to
-determine whether a client principal is authorized to perform an
-operation in the kadmin protocol, and to apply restrictions to
-principal operations. For a detailed description of the kadm5\_auth
-interface, see the header file \sphinxcode{\textless{}krb5/kadm5\_auth\_plugin.h\textgreater{}}.
-
-A module can create and destroy per-process state objects by
-implementing the \sphinxstylestrong{init} and \sphinxstylestrong{fini} methods. State objects have
-the type kadm5\_auth\_modinfo, which is an abstract pointer type. A
-module should typically cast this to an internal type for the state
-object.
-
-The kadm5\_auth interface has one method for each kadmin operation,
-with parameters specific to the operation. Each method can return
-either 0 to authorize access, KRB5\_PLUGIN\_NO\_HANDLE to defer the
-decision to other modules, or another error (canonically EPERM) to
-authoritatively deny access. Access is granted if at least one module
-grants access and no module authoritatively denies access.
-
-The \sphinxstylestrong{addprinc} and \sphinxstylestrong{modprinc} methods can also impose restrictions
-on the principal operation by returning a \sphinxcode{struct
-kadm5\_auth\_restrictions} object. The module should also implement
-the \sphinxstylestrong{free\_restrictions} method if it dynamically allocates
-restrictions objects for principal operations.
-
-kadm5\_auth modules can optionally inspect principal or policy objects.
-To do this, the module must also include \sphinxcode{\textless{}kadm5/admin.h\textgreater{}} to gain
-access to the structure definitions for those objects. As the kadmin
-interface is explicitly not as stable as other public interfaces,
-modules which do this may not retain compatibility across releases.
-
-
-\section{Host-to-realm interface (hostrealm)}
-\label{\detokenize{plugindev/hostrealm:hostrealm-plugin}}\label{\detokenize{plugindev/hostrealm::doc}}\label{\detokenize{plugindev/hostrealm:host-to-realm-interface-hostrealm}}
-The host-to-realm interface was first introduced in release 1.12. It
-allows modules to control the local mapping of hostnames to realm
-names as well as the default realm. For a detailed description of the
-hostrealm interface, see the header file
-\sphinxcode{\textless{}krb5/hostrealm\_plugin.h\textgreater{}}.
-
-Although the mapping methods in the hostrealm interface return a list
-of one or more realms, only the first realm in the list is currently
-used by callers. Callers may begin using later responses in the
-future.
-
-Any mapping method may return KRB5\_PLUGIN\_NO\_HANDLE to defer
-processing to a later module.
-
-A module can create and destroy per-library-context state objects
-using the \sphinxstylestrong{init} and \sphinxstylestrong{fini} methods. If the module does not need
-any state, it does not need to implement these methods.
-
-The optional \sphinxstylestrong{host\_realm} method allows a module to determine
-authoritative realm mappings for a hostname. The first authoritative
-mapping is used in preference to KDC referrals when getting service
-credentials.
-
-The optional \sphinxstylestrong{fallback\_realm} method allows a module to determine
-fallback mappings for a hostname. The first fallback mapping is tried
-if there is no authoritative mapping for a realm, and KDC referrals
-failed to produce a successful result.
-
-The optional \sphinxstylestrong{default\_realm} method allows a module to determine the
-local default realm.
-
-If a module implements any of the above methods, it must also
-implement \sphinxstylestrong{free\_list} to ensure that memory is allocated and
-deallocated consistently.
-
-
-\section{Local authorization interface (localauth)}
-\label{\detokenize{plugindev/localauth:local-authorization-interface-localauth}}\label{\detokenize{plugindev/localauth:localauth-plugin}}\label{\detokenize{plugindev/localauth::doc}}
-The localauth interface was first introduced in release 1.12. It
-allows modules to control the relationship between Kerberos principals
-and local system accounts. When an application calls
-\sphinxcode{krb5\_kuserok()} or \sphinxcode{krb5\_aname\_to\_localname()}, localauth
-modules are consulted to determine the result. For a detailed
-description of the localauth interface, see the header file
-\sphinxcode{\textless{}krb5/localauth\_plugin.h\textgreater{}}.
-
-A module can create and destroy per-library-context state objects
-using the \sphinxstylestrong{init} and \sphinxstylestrong{fini} methods. If the module does not need
-any state, it does not need to implement these methods.
-
-The optional \sphinxstylestrong{userok} method allows a module to control the behavior
-of \sphinxcode{krb5\_kuserok()}. The module receives the authenticated name
-and the local account name as inputs, and can return either 0 to
-authorize access, KRB5\_PLUGIN\_NO\_HANDLE to defer the decision to other
-modules, or another error (canonically EPERM) to authoritatively deny
-access. Access is granted if at least one module grants access and no
-module authoritatively denies access.
-
-The optional \sphinxstylestrong{an2ln} method can work in two different ways. If the
-module sets an array of uppercase type names in \sphinxstylestrong{an2ln\_types}, then
-the module’s \sphinxstylestrong{an2ln} method will only be invoked by
-\sphinxcode{krb5\_aname\_to\_localname()} if an \sphinxstylestrong{auth\_to\_local} value in
-\DUrole{xref,std,std-ref}{krb5.conf(5)} refers to one of the module’s types. In this
-case, the \sphinxstyleemphasis{type} and \sphinxstyleemphasis{residual} arguments will give the type name and
-residual string of the \sphinxstylestrong{auth\_to\_local} value.
-
-If the module does not set \sphinxstylestrong{an2ln\_types} but does implement
-\sphinxstylestrong{an2ln}, the module’s \sphinxstylestrong{an2ln} method will be invoked for all
-\sphinxcode{krb5\_aname\_to\_localname()} operations unless an earlier module
-determines a mapping, with \sphinxstyleemphasis{type} and \sphinxstyleemphasis{residual} set to NULL. The
-module can return KRB5\_LNAME\_NO\_TRANS to defer mapping to later
-modules.
-
-If a module implements \sphinxstylestrong{an2ln}, it must also implement
-\sphinxstylestrong{free\_string} to ensure that memory is allocated and deallocated
-consistently.
-
-
-\section{Server location interface (locate)}
-\label{\detokenize{plugindev/locate:server-location-interface-locate}}\label{\detokenize{plugindev/locate::doc}}
-The locate interface allows modules to control how KDCs and similar
-services are located by clients. For a detailed description of the
-ccselect interface, see the header file \sphinxcode{\textless{}krb5/locate\_plugin.h\textgreater{}}.
-
-A locate module exports a structure object of type
-krb5plugin\_service\_locate\_ftable, with the name \sphinxcode{service\_locator}.
-The structure contains a minor version and pointers to the module’s
-methods.
-
-The primary locate method is \sphinxstylestrong{lookup}, which accepts a service type,
-realm name, desired socket type, and desired address family (which
-will be AF\_UNSPEC if no specific address family is desired). The
-method should invoke the callback function once for each server
-address it wants to return, passing a socket type (SOCK\_STREAM for TCP
-or SOCK\_DGRAM for UDP) and socket address. The \sphinxstylestrong{lookup} method
-should return 0 if it has authoritatively determined the server
-addresses for the realm, KRB5\_PLUGIN\_NO\_HANDLE if it wants to let
-other location mechanisms determine the server addresses, or another
-code if it experienced a failure which should abort the location
-process.
-
-A module can create and destroy per-library-context state objects by
-implementing the \sphinxstylestrong{init} and \sphinxstylestrong{fini} methods. State objects have
-the type void *, and should be cast to an internal type for the state
-object.
-
-
-\section{Configuration interface (profile)}
-\label{\detokenize{plugindev/profile:configuration-interface-profile}}\label{\detokenize{plugindev/profile::doc}}\label{\detokenize{plugindev/profile:profile-plugin}}
-The profile interface allows a module to control how krb5
-configuration information is obtained by the Kerberos library and
-applications. For a detailed description of the profile interface,
-see the header file \sphinxcode{\textless{}profile.h\textgreater{}}.
-
-\begin{sphinxadmonition}{note}{Note:}
-The profile interface does not follow the normal conventions
-for MIT krb5 pluggable interfaces, because it is part of a
-lower-level component of the krb5 library.
-\end{sphinxadmonition}
-
-As with other types of plugin modules, a profile module is a Unix
-shared object or Windows DLL, built separately from the krb5 tree.
-The krb5 library will dynamically load and use a profile plugin module
-if it reads a \sphinxcode{module} directive at the beginning of krb5.conf, as
-described in \DUrole{xref,std,std-ref}{profile\_plugin\_config}.
-
-A profile module exports a function named \sphinxcode{profile\_module\_init}
-matching the signature of the profile\_module\_init\_fn type. This
-function accepts a residual string, which may be used to help locate
-the configuration source. The function fills in a vtable and may also
-create a per-profile state object. If the module uses state objects,
-it should implement the \sphinxstylestrong{copy} and \sphinxstylestrong{cleanup} methods to manage
-them.
-
-A basic read-only profile module need only implement the
-\sphinxstylestrong{get\_values} and \sphinxstylestrong{free\_values} methods. The \sphinxstylestrong{get\_values} method
-accepts a null-terminated list of C string names (e.g., an array
-containing “libdefaults”, “clockskew”, and NULL for the \sphinxstylestrong{clockskew}
-variable in the \DUrole{xref,std,std-ref}{libdefaults} section) and returns a
-null-terminated list of values, which will be cleaned up with the
-\sphinxstylestrong{free\_values} method when the caller is done with them.
-
-Iterable profile modules must also define the \sphinxstylestrong{iterator\_create},
-\sphinxstylestrong{iterator}, \sphinxstylestrong{iterator\_free}, and \sphinxstylestrong{free\_string} methods. The
-core krb5 code does not require profiles to be iterable, but some
-applications may iterate over the krb5 profile object in order to
-present configuration interfaces.
-
-Writable profile modules must also define the \sphinxstylestrong{writable},
-\sphinxstylestrong{modified}, \sphinxstylestrong{update\_relation}, \sphinxstylestrong{rename\_section},
-\sphinxstylestrong{add\_relation}, and \sphinxstylestrong{flush} methods. The core krb5 code does not
-require profiles to be writable, but some applications may write to
-the krb5 profile in order to present configuration interfaces.
-
-The following is an example of a very basic read-only profile module
-which returns a hardcoded value for the \sphinxstylestrong{default\_realm} variable in
-\DUrole{xref,std,std-ref}{libdefaults}, and provides no other configuration information.
-(For conciseness, the example omits code for checking the return
-values of malloc and strdup.)
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{c+c1}{\PYGZsh{}include \PYGZlt{}stdlib.h\PYGZgt{}}
-\PYG{c+c1}{\PYGZsh{}include \PYGZlt{}string.h\PYGZgt{}}
-\PYG{c+c1}{\PYGZsh{}include \PYGZlt{}profile.h\PYGZgt{}}
-
-\PYG{n}{static} \PYG{n}{long}
-\PYG{n}{get\PYGZus{}values}\PYG{p}{(}\PYG{n}{void} \PYG{o}{*}\PYG{n}{cbdata}\PYG{p}{,} \PYG{n}{const} \PYG{n}{char} \PYG{o}{*}\PYG{n}{const} \PYG{o}{*}\PYG{n}{names}\PYG{p}{,} \PYG{n}{char} \PYG{o}{*}\PYG{o}{*}\PYG{o}{*}\PYG{n}{values}\PYG{p}{)}
-\PYG{p}{\PYGZob{}}
- \PYG{k}{if} \PYG{p}{(}\PYG{n}{names}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]} \PYG{o}{!=} \PYG{n}{NULL} \PYG{o}{\PYGZam{}}\PYG{o}{\PYGZam{}} \PYG{n}{strcmp}\PYG{p}{(}\PYG{n}{names}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]}\PYG{p}{,} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{libdefaults}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{)} \PYG{o}{==} \PYG{l+m+mi}{0} \PYG{o}{\PYGZam{}}\PYG{o}{\PYGZam{}}
- \PYG{n}{names}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]} \PYG{o}{!=} \PYG{n}{NULL} \PYG{o}{\PYGZam{}}\PYG{o}{\PYGZam{}} \PYG{n}{strcmp}\PYG{p}{(}\PYG{n}{names}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]}\PYG{p}{,} \PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{default\PYGZus{}realm}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{)} \PYG{o}{==} \PYG{l+m+mi}{0}\PYG{p}{)} \PYG{p}{\PYGZob{}}
- \PYG{o}{*}\PYG{n}{values} \PYG{o}{=} \PYG{n}{malloc}\PYG{p}{(}\PYG{l+m+mi}{2} \PYG{o}{*} \PYG{n}{sizeof}\PYG{p}{(}\PYG{n}{char} \PYG{o}{*}\PYG{p}{)}\PYG{p}{)}\PYG{p}{;}
- \PYG{p}{(}\PYG{o}{*}\PYG{n}{values}\PYG{p}{)}\PYG{p}{[}\PYG{l+m+mi}{0}\PYG{p}{]} \PYG{o}{=} \PYG{n}{strdup}\PYG{p}{(}\PYG{l+s+s2}{\PYGZdq{}}\PYG{l+s+s2}{ATHENA.MIT.EDU}\PYG{l+s+s2}{\PYGZdq{}}\PYG{p}{)}\PYG{p}{;}
- \PYG{p}{(}\PYG{o}{*}\PYG{n}{values}\PYG{p}{)}\PYG{p}{[}\PYG{l+m+mi}{1}\PYG{p}{]} \PYG{o}{=} \PYG{n}{NULL}\PYG{p}{;}
- \PYG{k}{return} \PYG{l+m+mi}{0}\PYG{p}{;}
- \PYG{p}{\PYGZcb{}}
- \PYG{k}{return} \PYG{n}{PROF\PYGZus{}NO\PYGZus{}RELATION}\PYG{p}{;}
-\PYG{p}{\PYGZcb{}}
-
-\PYG{n}{static} \PYG{n}{void}
-\PYG{n}{free\PYGZus{}values}\PYG{p}{(}\PYG{n}{void} \PYG{o}{*}\PYG{n}{cbdata}\PYG{p}{,} \PYG{n}{char} \PYG{o}{*}\PYG{o}{*}\PYG{n}{values}\PYG{p}{)}
-\PYG{p}{\PYGZob{}}
- \PYG{n}{char} \PYG{o}{*}\PYG{o}{*}\PYG{n}{v}\PYG{p}{;}
-
- \PYG{k}{for} \PYG{p}{(}\PYG{n}{v} \PYG{o}{=} \PYG{n}{values}\PYG{p}{;} \PYG{o}{*}\PYG{n}{v}\PYG{p}{;} \PYG{n}{v}\PYG{o}{+}\PYG{o}{+}\PYG{p}{)}
- \PYG{n}{free}\PYG{p}{(}\PYG{o}{*}\PYG{n}{v}\PYG{p}{)}\PYG{p}{;}
- \PYG{n}{free}\PYG{p}{(}\PYG{n}{values}\PYG{p}{)}\PYG{p}{;}
-\PYG{p}{\PYGZcb{}}
-
-\PYG{n}{long}
-\PYG{n}{profile\PYGZus{}module\PYGZus{}init}\PYG{p}{(}\PYG{n}{const} \PYG{n}{char} \PYG{o}{*}\PYG{n}{residual}\PYG{p}{,} \PYG{n}{struct} \PYG{n}{profile\PYGZus{}vtable} \PYG{o}{*}\PYG{n}{vtable}\PYG{p}{,}
- \PYG{n}{void} \PYG{o}{*}\PYG{o}{*}\PYG{n}{cb\PYGZus{}ret}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{long}
-\PYG{n}{profile\PYGZus{}module\PYGZus{}init}\PYG{p}{(}\PYG{n}{const} \PYG{n}{char} \PYG{o}{*}\PYG{n}{residual}\PYG{p}{,} \PYG{n}{struct} \PYG{n}{profile\PYGZus{}vtable} \PYG{o}{*}\PYG{n}{vtable}\PYG{p}{,}
- \PYG{n}{void} \PYG{o}{*}\PYG{o}{*}\PYG{n}{cb\PYGZus{}ret}\PYG{p}{)}
-\PYG{p}{\PYGZob{}}
- \PYG{o}{*}\PYG{n}{cb\PYGZus{}ret} \PYG{o}{=} \PYG{n}{NULL}\PYG{p}{;}
- \PYG{n}{vtable}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}\PYG{n}{get\PYGZus{}values} \PYG{o}{=} \PYG{n}{get\PYGZus{}values}\PYG{p}{;}
- \PYG{n}{vtable}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZgt{}}\PYG{n}{free\PYGZus{}values} \PYG{o}{=} \PYG{n}{free\PYGZus{}values}\PYG{p}{;}
- \PYG{k}{return} \PYG{l+m+mi}{0}\PYG{p}{;}
-\PYG{p}{\PYGZcb{}}
-\end{sphinxVerbatim}
-
-
-\section{GSSAPI mechanism interface}
-\label{\detokenize{plugindev/gssapi::doc}}\label{\detokenize{plugindev/gssapi:gssapi-mechanism-interface}}
-The GSSAPI library in MIT krb5 can load mechanism modules to augment
-the set of built-in mechanisms.
-
-A mechanism module is a Unix shared object or Windows DLL, built
-separately from the krb5 tree. Modules are loaded according to the
-GSS mechanism config files described in \DUrole{xref,std,std-ref}{gssapi\_plugin\_config}.
-
-For the most part, a GSSAPI mechanism module exports the same
-functions as would a GSSAPI implementation itself, with the same
-function signatures. The mechanism selection layer within the GSSAPI
-library (called the “mechglue”) will dispatch calls from the
-application to the module if the module’s mechanism is requested. If
-a module does not wish to implement a GSSAPI extension, it can simply
-refrain from exporting it, and the mechglue will fail gracefully if
-the application calls that function.
-
-The mechglue does not invoke a module’s \sphinxstylestrong{gss\_add\_cred},
-\sphinxstylestrong{gss\_add\_cred\_from}, \sphinxstylestrong{gss\_add\_cred\_impersonate\_name}, or
-\sphinxstylestrong{gss\_add\_cred\_with\_password} function. A mechanism only needs to
-implement the “acquire” variants of those functions.
-
-A module does not need to coordinate its minor status codes with those
-of other mechanisms. If the mechglue detects conflicts, it will map
-the mechanism’s status codes onto unique values, and then map them
-back again when \sphinxstylestrong{gss\_display\_status} is called.
-
-
-\subsection{NegoEx modules}
-\label{\detokenize{plugindev/gssapi:negoex-modules}}
-Some Windows GSSAPI mechanisms can only be negotiated via a Microsoft
-extension to SPNEGO called NegoEx. Beginning with release 1.18,
-mechanism modules can support NegoEx as follows:
-\begin{itemize}
-\item {}
-Implement the gssspi\_query\_meta\_data(), gssspi\_exchange\_meta\_data(),
-and gssspi\_query\_mechanism\_info() SPIs declared in
-\sphinxcode{\textless{}gssapi/gssapi\_ext.h\textgreater{}}.
-
-\item {}
-Implement gss\_inquire\_sec\_context\_by\_oid() and answer the
-\sphinxstylestrong{GSS\_C\_INQ\_NEGOEX\_KEY} and \sphinxstylestrong{GSS\_C\_INQ\_NEGOEX\_VERIFY\_KEY} OIDs
-to provide the checksum keys for outgoing and incoming checksums,
-respectively. The answer must be in two buffers: the first buffer
-contains the key contents, and the second buffer contains the key
-encryption type as a four-byte little-endian integer.
-
-\end{itemize}
-
-By default, NegoEx mechanisms will not be directly negotiated via
-SPNEGO. If direct SPNEGO negotiation is required for
-interoperability, implement gss\_inquire\_attrs\_for\_mech() and assert
-the GSS\_C\_MA\_NEGOEX\_AND\_SPNEGO attribute (along with any applicable
-RFC 5587 attributes).
-
-
-\subsection{Interposer modules}
-\label{\detokenize{plugindev/gssapi:interposer-modules}}
-The mechglue also supports a kind of loadable module, called an
-interposer module, which intercepts calls to existing mechanisms
-rather than implementing a new mechanism.
-
-An interposer module must export the symbol \sphinxstylestrong{gss\_mech\_interposer}
-with the following signature:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{gss\PYGZus{}OID\PYGZus{}set} \PYG{n}{gss\PYGZus{}mech\PYGZus{}interposer}\PYG{p}{(}\PYG{n}{gss\PYGZus{}OID} \PYG{n}{mech\PYGZus{}type}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-This function is invoked with the OID of the interposer mechanism as
-specified in the mechanism config file, and returns a set of mechanism
-OIDs to be interposed. The returned OID set must have been created
-using the mechglue’s gss\_create\_empty\_oid\_set and
-gss\_add\_oid\_set\_member functions.
-
-An interposer module must use the prefix \sphinxcode{gssi\_} for the GSSAPI
-functions it exports, instead of the prefix \sphinxcode{gss\_}. In most cases,
-unexported \sphinxcode{gssi\_} functions will result in failure from their
-corresponding \sphinxcode{gss\_} calls.
-
-An interposer module can link against the GSSAPI library in order to
-make calls to the original mechanism. To do so, it must specify a
-special mechanism OID which is the concatention of the interposer’s
-own OID byte string and the original mechanism’s OID byte string.
-
-Functions that do not accept a mechanism argument directly require no
-special handling, with the following exceptions:
-
-Since \sphinxstylestrong{gss\_accept\_sec\_context} does not accept a mechanism argument,
-an interposer mechanism must, in order to invoke the original
-mechanism’s function, acquire a credential for the concatenated OID
-and pass that as the \sphinxstyleemphasis{verifier\_cred\_handle} parameter.
-
-Since \sphinxstylestrong{gss\_import\_name}, \sphinxstylestrong{gss\_import\_cred}, and
-\sphinxstylestrong{gss\_import\_sec\_context} do not accept mechanism parameters, the SPI
-has been extended to include variants which do. This allows the
-interposer module to know which mechanism should be used to interpret
-the token. These functions have the following signatures:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gssi\PYGZus{}import\PYGZus{}sec\PYGZus{}context\PYGZus{}by\PYGZus{}mech}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}OID} \PYG{n}{desired\PYGZus{}mech}\PYG{p}{,} \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{interprocess\PYGZus{}token}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}ctx\PYGZus{}id\PYGZus{}t} \PYG{o}{*}\PYG{n}{context\PYGZus{}handle}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gssi\PYGZus{}import\PYGZus{}name\PYGZus{}by\PYGZus{}mech}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}OID} \PYG{n}{mech\PYGZus{}type}\PYG{p}{,} \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{input\PYGZus{}name\PYGZus{}buffer}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}OID} \PYG{n}{input\PYGZus{}name\PYGZus{}type}\PYG{p}{,} \PYG{n}{gss\PYGZus{}name\PYGZus{}t} \PYG{n}{output\PYGZus{}name}\PYG{p}{)}\PYG{p}{;}
-
-\PYG{n}{OM\PYGZus{}uint32} \PYG{n}{gssi\PYGZus{}import\PYGZus{}cred\PYGZus{}by\PYGZus{}mech}\PYG{p}{(}\PYG{n}{OM\PYGZus{}uint32} \PYG{o}{*}\PYG{n}{minor\PYGZus{}status}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}OID} \PYG{n}{mech\PYGZus{}type}\PYG{p}{,} \PYG{n}{gss\PYGZus{}buffer\PYGZus{}t} \PYG{n}{token}\PYG{p}{,}
- \PYG{n}{gss\PYGZus{}cred\PYGZus{}id\PYGZus{}t} \PYG{o}{*}\PYG{n}{cred\PYGZus{}handle}\PYG{p}{)}\PYG{p}{;}
-\end{sphinxVerbatim}
-
-To re-enter the original mechanism when importing tokens for the above
-functions, the interposer module must wrap the mechanism token in the
-mechglue’s format, using the concatenated OID (except in
-\sphinxstylestrong{gss\_import\_name}). The mechglue token formats are:
-\begin{itemize}
-\item {}
-For \sphinxstylestrong{gss\_import\_sec\_context}, a four-byte OID length in big-endian
-order, followed by the concatenated OID, followed by the mechanism
-token.
-
-\item {}
-For \sphinxstylestrong{gss\_import\_name}, the bytes 04 01, followed by a two-byte OID
-length in big-endian order, followed by the mechanism OID, followed
-by a four-byte token length in big-endian order, followed by the
-mechanism token. Unlike most uses of OIDs in the API, the mechanism
-OID encoding must include the DER tag and length for an object
-identifier (06 followed by the DER length of the OID byte string),
-and this prefix must be included in the two-byte OID length.
-input\_name\_type must also be set to GSS\_C\_NT\_EXPORT\_NAME.
-
-\item {}
-For \sphinxstylestrong{gss\_import\_cred}, a four-byte OID length in big-endian order,
-followed by the concatenated OID, followed by a four-byte token
-length in big-endian order, followed by the mechanism token. This
-sequence may be repeated multiple times.
-
-\end{itemize}
-
-
-\section{Internal pluggable interfaces}
-\label{\detokenize{plugindev/internal::doc}}\label{\detokenize{plugindev/internal:internal-pluggable-interfaces}}
-Following are brief discussions of pluggable interfaces which have not
-yet been made public. These interfaces are functional, but the
-interfaces are likely to change in incompatible ways from release to
-release. In some cases, it may be necessary to copy header files from
-the krb5 source tree to use an internal interface. Use these with
-care, and expect to need to update your modules for each new release
-of MIT krb5.
-
-
-\subsection{Kerberos database interface (KDB)}
-\label{\detokenize{plugindev/internal:kerberos-database-interface-kdb}}
-A KDB module implements a database back end for KDC principal and
-policy information, and can also control many aspects of KDC behavior.
-For a full description of the interface, see the header file
-\sphinxcode{\textless{}kdb.h\textgreater{}}.
-
-The KDB pluggable interface is often referred to as the DAL (Database
-Access Layer).
-
-
-\subsection{Authorization data interface (authdata)}
-\label{\detokenize{plugindev/internal:authorization-data-interface-authdata}}
-The authdata interface allows a module to provide (from the KDC) or
-consume (in application servers) authorization data of types beyond
-those handled by the core MIT krb5 code base. The interface is
-defined in the header file \sphinxcode{\textless{}krb5/authdata\_plugin.h\textgreater{}}, which is not
-installed by the build.
-
-
-\section{PKINIT certificate authorization interface (certauth)}
-\label{\detokenize{plugindev/certauth:certauth-plugin}}\label{\detokenize{plugindev/certauth::doc}}\label{\detokenize{plugindev/certauth:pkinit-certificate-authorization-interface-certauth}}
-The certauth interface was first introduced in release 1.16. It
-allows customization of the X.509 certificate attribute requirements
-placed on certificates used by PKINIT enabled clients. For a detailed
-description of the certauth interface, see the header file
-\sphinxcode{\textless{}krb5/certauth\_plugin.h\textgreater{}}
-
-A certauth module implements the \sphinxstylestrong{authorize} method to determine
-whether a client’s certificate is authorized to authenticate a client
-principal. \sphinxstylestrong{authorize} receives the DER-encoded certificate, the
-requested client principal, and a pointer to the client’s
-krb5\_db\_entry (for modules that link against libkdb5). The method
-must decode the certificate and inspect its attributes to determine if
-it should authorize PKINIT authentication. It returns the
-authorization status and optionally outputs a list of authentication
-indicator strings to be added to the ticket.
-
-Beginning in release 1.19, the authorize method can request that the
-hardware authentication bit be set in the ticket by returning
-\sphinxstylestrong{KRB5\_CERTAUTH\_HWAUTH}. Beginning in release 1.20, the authorize
-method can return \sphinxstylestrong{KRB5\_CERTAUTH\_HWAUTH\_PASS} to request that the
-hardware authentication bit be set in the ticket but otherwise defer
-authorization to another certauth module. A module must use its own
-internal or library-provided ASN.1 certificate decoder.
-
-A module can optionally create and destroy module data with the
-\sphinxstylestrong{init} and \sphinxstylestrong{fini} methods. Module data objects last for the
-lifetime of the KDC process.
-
-If a module allocates and returns a list of authentication indicators
-from \sphinxstylestrong{authorize}, it must also implement the \sphinxstylestrong{free\_ind} method
-to free the list.
-
-
-\section{KDC policy interface (kdcpolicy)}
-\label{\detokenize{plugindev/kdcpolicy:kdcpolicy-plugin}}\label{\detokenize{plugindev/kdcpolicy::doc}}\label{\detokenize{plugindev/kdcpolicy:kdc-policy-interface-kdcpolicy}}
-The kdcpolicy interface was first introduced in release 1.16. It
-allows modules to veto otherwise valid AS and TGS requests or restrict
-the lifetime and renew time of the resulting ticket. For a detailed
-description of the kdcpolicy interface, see the header file
-\sphinxcode{\textless{}krb5/kdcpolicy\_plugin.h\textgreater{}}.
-
-The optional \sphinxstylestrong{check\_as} and \sphinxstylestrong{check\_tgs} functions allow the module
-to perform access control. Additionally, a module can create and
-destroy module data with the \sphinxstylestrong{init} and \sphinxstylestrong{fini} methods. Module
-data objects last for the lifetime of the KDC process, and are
-provided to all other methods. The data has the type
-krb5\_kdcpolicy\_moddata, which should be cast to the appropriate
-internal type.
-
-kdcpolicy modules can optionally inspect principal entries. To do
-this, the module must also include \sphinxcode{\textless{}kdb.h\textgreater{}} to gain access to the
-principal entry structure definition. As the KDB interface is
-explicitly not as stable as other public interfaces, modules which do
-this may not retain compatibility across releases.
-
-
-
-\renewcommand{\indexname}{Index}
-\printindex
-\end{document}
\ No newline at end of file
+++ /dev/null
-line_max 100
-headings_flag 1
-heading_prefix " \\bigletter "
-
-preamble "\\begin{sphinxtheindex}
-\\def\\bigletter#1{{\\Large\\sffamily#1}\\nopagebreak\\vspace{1mm}}
-
-"
-
-postamble "\n\n\\end{sphinxtheindex}\n"
-
-symhead_positive "{Symbols}"
-numhead_positive "{Numbers}"
+++ /dev/null
-%
-% sphinx.sty
-%
-% Adapted from the old python.sty, mostly written by Fred Drake,
-% by Georg Brandl.
-%
-
-\NeedsTeXFormat{LaTeX2e}[1995/12/01]
-\ProvidesPackage{sphinx}[2017/12/12 v1.6.6 LaTeX package (Sphinx markup)]
-
-% provides \ltx@ifundefined
-% (many packages load ltxcmds: graphicx does for pdftex and lualatex but
-% not xelatex, and anyhow kvoptions does, but it may be needed in future to
-% use \sphinxdeprecationwarning earlier, and it needs \ltx@ifundefined)
-\RequirePackage{ltxcmds}
-
-%% for deprecation warnings
-\newcommand\sphinxdeprecationwarning[4]{% #1 the deprecated macro or name,
-% #2 = when deprecated, #3 = when removed, #4 = additional info
- \edef\spx@tempa{\detokenize{#1}}%
- \ltx@ifundefined{sphinx_depr_\spx@tempa}{%
- \global\expandafter\let\csname sphinx_depr_\spx@tempa\endcsname\spx@tempa
- \expandafter\AtEndDocument\expandafter{\expandafter\let\expandafter
- \sphinxdeprecatedmacro\csname sphinx_depr_\spx@tempa\endcsname
- \PackageWarningNoLine{sphinx}{^^J**** SPHINX DEPRECATION WARNING:^^J
- \sphinxdeprecatedmacro^^J
- \@spaces- is deprecated at Sphinx #2^^J
- \@spaces- and removed at Sphinx #3.^^J
- #4^^J****}}%
- }{% warning already emitted (at end of latex log), don't repeat
- }}
-
-
-%% PACKAGES
-%
-% we delay handling of options to after having loaded packages, because
-% of the need to use \definecolor.
-\RequirePackage{graphicx}
-\@ifclassloaded{memoir}{}{\RequirePackage{fancyhdr}}
-% for \text macro and \iffirstchoice@ conditional even if amsmath not loaded
-\RequirePackage{amstext}
-\RequirePackage[warn]{textcomp}
-\RequirePackage{titlesec}
-\@ifpackagelater{titlesec}{2016/03/15}%
- {\@ifpackagelater{titlesec}{2016/03/21}%
- {}%
- {\newif\ifsphinx@ttlpatch@ok
- \IfFileExists{etoolbox.sty}{%
- \RequirePackage{etoolbox}%
- \patchcmd{\ttlh@hang}{\parindent\z@}{\parindent\z@\leavevmode}%
- {\sphinx@ttlpatch@oktrue}{}%
- \ifsphinx@ttlpatch@ok
- \patchcmd{\ttlh@hang}{\noindent}{}{}{\sphinx@ttlpatch@okfalse}%
- \fi
- }{}%
- \ifsphinx@ttlpatch@ok
- \typeout{^^J Package Sphinx Info: ^^J
- **** titlesec 2.10.1 successfully patched for bugfix ****^^J}%
- \else
- \AtEndDocument{\PackageWarningNoLine{sphinx}{^^J%
-******** titlesec 2.10.1 has a bug, (section numbers disappear) ......|^^J%
-******** and Sphinx could not patch it, perhaps because your local ...|^^J%
-******** copy is already fixed without a changed release date. .......|^^J%
-******** If not, you must update titlesec! ...........................|}}%
- \fi
- }%
- }{}
-\RequirePackage{tabulary}
-% tabulary has a bug with its re-definition of \multicolumn in its first pass
-% which is not \long. But now Sphinx does not use LaTeX's \multicolumn but its
-% own macro. Hence we don't even need to patch tabulary. See sphinxmulticell.sty
-% X or S (Sphinx) may have meanings if some table package is loaded hence
-% \X was chosen to avoid possibility of conflict
-\newcolumntype{\X}[2]{p{\dimexpr
- (\linewidth-\arrayrulewidth)*#1/#2-\tw@\tabcolsep-\arrayrulewidth\relax}}
-\newcolumntype{\Y}[1]{p{\dimexpr
- #1\dimexpr\linewidth-\arrayrulewidth\relax-\tw@\tabcolsep-\arrayrulewidth\relax}}
-% using here T (for Tabulary) feels less of a problem than the X could be
-\newcolumntype{T}{J}%
-% For tables allowing pagebreaks
-\RequirePackage{longtable}
-% User interface to set-up whitespace before and after tables:
-\newcommand*\sphinxtablepre {0pt}%
-\newcommand*\sphinxtablepost{\medskipamount}%
-\newcommand*\sphinxbelowcaptionspace{.5\sphinxbaselineskip}%
-% as one can not use \baselineskip from inside longtable (it is zero there)
-% we need \sphinxbaselineskip, which defaults to \baselineskip
-\def\sphinxbaselineskip{\baselineskip}%
-% These commands are inserted by the table templates
-\def\sphinxatlongtablestart
- {\par
- \vskip\parskip
- \vskip\dimexpr\sphinxtablepre\relax % adjust vertical position
- \vbox{}% get correct baseline from above
- \LTpre\z@skip\LTpost\z@skip % set to zero longtable's own skips
- \edef\sphinxbaselineskip{\dimexpr\the\dimexpr\baselineskip\relax\relax}%
- }%
-\def\sphinxatlongtableend{\prevdepth\z@\vskip\sphinxtablepost\relax}%
-\def\sphinxlongtablecapskipadjust
- {\dimexpr-\dp\strutbox-\sphinxbaselineskip+\sphinxbelowcaptionspace\relax}%
-% Now for tables not using longtable
-\def\sphinxattablestart
- {\par
- \vskip\dimexpr\sphinxtablepre\relax
- }%
-\let\sphinxattableend\sphinxatlongtableend
-% longtable's wraps captions to a maximal width of \LTcapwidth
-% so we do the same for all tables
-\newcommand*\sphinxcapstartof[1]{%
- \vskip\parskip
- \vbox{}% force baselineskip for good positioning by capstart of hyperanchor
- \def\@captype{#1}%
- \capstart
-% move back vertically to compensate space inserted by next paragraph
- \vskip-\baselineskip\vskip-\parskip
-}%
-\newcommand\sphinxcaption[2][\LTcapwidth]{%
- \noindent\hb@xt@\linewidth{\hss
- \vtop{\@tempdima\dimexpr#1\relax
-% don't exceed linewidth for the caption width
- \ifdim\@tempdima>\linewidth\hsize\linewidth\else\hsize\@tempdima\fi
-% longtable ignores \abovecaptionskip/\belowcaptionskip, so do the same here
- \abovecaptionskip\z@skip
- \belowcaptionskip\z@skip
- \caption[{#2}]%
- {\strut\ignorespaces#2\ifhmode\unskip\@finalstrut\strutbox\fi}%
- }\hss}%
- \par\prevdepth\dp\strutbox
-}%
-\newcommand\sphinxaftercaption
-{% this default definition serves with a caption *above* a table, to make sure
- % its last baseline is \sphinxbelowcaptionspace above table top
- \nobreak
- \vskip\dimexpr\sphinxbelowcaptionspace\relax
- \vskip-\baselineskip\vskip-\parskip
-}%
-% varwidth is crucial for our handling of general contents in merged cells
-\RequirePackage{varwidth}
-% but addition of a compatibility patch with hyperref is needed
-% (tested with varwidth v 0.92 Mar 2009)
-\AtBeginDocument {%
- \let\@@vwid@Hy@raisedlink\Hy@raisedlink
- \long\def\@vwid@Hy@raisedlink#1{\@vwid@wrap{\@@vwid@Hy@raisedlink{#1}}}%
- \edef\@vwid@setup{%
- \let\noexpand\Hy@raisedlink\noexpand\@vwid@Hy@raisedlink % HYPERREF !
- \unexpanded\expandafter{\@vwid@setup}}%
-}%
-% Homemade package to handle merged cells
-\RequirePackage{sphinxmulticell}
-\RequirePackage{makeidx}
-% For framing code-blocks and warning type notices, and shadowing topics
-\RequirePackage{framed}
-% The xcolor package draws better fcolorboxes around verbatim code
-\IfFileExists{xcolor.sty}{
- \RequirePackage{xcolor}
-}{
- \RequirePackage{color}
-}
-% For highlighted code.
-\RequirePackage{fancyvrb}
-\fvset{fontsize=\small}
-\define@key{FV}{hllines}{\def\sphinx@verbatim@checkifhl##1{\in@{, ##1,}{#1}}}
-% For hyperlinked footnotes in tables; also for gathering footnotes from
-% topic and warning blocks. Also to allow code-blocks in footnotes.
-\RequirePackage{footnotehyper-sphinx}
-% For the H specifier. Do not \restylefloat{figure}, it breaks Sphinx code
-% for allowing figures in tables.
-\RequirePackage{float}
-% For floating figures in the text. Better to load after float.
-\RequirePackage{wrapfig}
-% Separate paragraphs by space by default.
-\RequirePackage{parskip}
-% For parsed-literal blocks.
-\RequirePackage{alltt}
-% Display "real" single quotes in literal blocks.
-\RequirePackage{upquote}
-% control caption around literal-block
-\RequirePackage{capt-of}
-\RequirePackage{needspace}
-
-% to make pdf with correct encoded bookmarks in Japanese
-% this should precede the hyperref package
-\ifx\kanjiskip\undefined
-% for non-Japanese: make sure bookmarks are ok also with lualatex
- \PassOptionsToPackage{pdfencoding=unicode}{hyperref}
-\else
- \RequirePackage{atbegshi}
- \ifx\ucs\undefined
- \ifnum 42146=\euc"A4A2
- \AtBeginShipoutFirst{\special{pdf:tounicode EUC-UCS2}}
- \else
- \AtBeginShipoutFirst{\special{pdf:tounicode 90ms-RKSJ-UCS2}}
- \fi
- \else
- \AtBeginShipoutFirst{\special{pdf:tounicode UTF8-UCS2}}
- \fi
-\fi
-
-\ifx\@jsc@uplatextrue\undefined\else
- \PassOptionsToPackage{setpagesize=false}{hyperref}
-\fi
-
-% These options can be overriden inside 'hyperref' key
-% or by later use of \hypersetup.
-\PassOptionsToPackage{colorlinks,breaklinks,%
- linkcolor=InnerLinkColor,filecolor=OuterLinkColor,%
- menucolor=OuterLinkColor,urlcolor=OuterLinkColor,%
- citecolor=InnerLinkColor}{hyperref}
-
-% stylesheet for highlighting with pygments
-\RequirePackage{sphinxhighlight}
-% fix baseline increase from Pygments latex formatter in case of error tokens
-% and keep \fboxsep's scope local via added braces
-\def\PYG@tok@err{%
- \def\PYG@bc##1{{\setlength{\fboxsep}{-\fboxrule}%
- \fcolorbox[rgb]{1.00,0.00,0.00}{1,1,1}{\strut ##1}}}%
-}
-\def\PYG@tok@cs{%
- \def\PYG@tc##1{\textcolor[rgb]{0.25,0.50,0.56}{##1}}%
- \def\PYG@bc##1{{\setlength{\fboxsep}{0pt}%
- \colorbox[rgb]{1.00,0.94,0.94}{\strut ##1}}}%
-}%
-
-
-%% OPTIONS
-%
-% Handle options via "kvoptions" (later loaded by hyperref anyhow)
-\RequirePackage{kvoptions}
-\SetupKeyvalOptions{prefix=spx@opt@} % use \spx@opt@ prefix
-
-% Sphinx legacy text layout: 1in margins on all four sides
-\ifx\@jsc@uplatextrue\undefined
-\DeclareStringOption[1in]{hmargin}
-\DeclareStringOption[1in]{vmargin}
-\DeclareStringOption[.5in]{marginpar}
-\else
-% Japanese standard document classes handle \mag in a special way
-\DeclareStringOption[\inv@mag in]{hmargin}
-\DeclareStringOption[\inv@mag in]{vmargin}
-\DeclareStringOption[.5\dimexpr\inv@mag in\relax]{marginpar}
-\fi
-
-\DeclareBoolOption{dontkeepoldnames} % \ifspx@opt@dontkeepoldnames = \iffalse
-\DeclareStringOption[0]{maxlistdepth}% \newcommand*\spx@opt@maxlistdepth{0}
-
-% dimensions, we declare the \dimen registers here.
-\newdimen\sphinxverbatimsep
-\newdimen\sphinxverbatimborder
-\newdimen\sphinxshadowsep
-\newdimen\sphinxshadowsize
-\newdimen\sphinxshadowrule
-% \DeclareStringOption is not convenient for the handling of these dimensions
-% because we want to assign the values to the corresponding registers. Even if
-% we added the code to the key handler it would be too late for the initial
-% set-up and we would need to do initial assignments explicitely. We end up
-% using \define@key directly.
-% verbatim
-\sphinxverbatimsep=\fboxsep
- \define@key{sphinx}{verbatimsep}{\sphinxverbatimsep\dimexpr #1\relax}
-\sphinxverbatimborder=\fboxrule
- \define@key{sphinx}{verbatimborder}{\sphinxverbatimborder\dimexpr #1\relax}
-% topic boxes
-\sphinxshadowsep =5pt
- \define@key{sphinx}{shadowsep}{\sphinxshadowsep\dimexpr #1\relax}
-\sphinxshadowsize=4pt
- \define@key{sphinx}{shadowsize}{\sphinxshadowsize\dimexpr #1\relax}
-\sphinxshadowrule=\fboxrule
- \define@key{sphinx}{shadowrule}{\sphinxshadowrule\dimexpr #1\relax}
-% verbatim
-\DeclareBoolOption[true]{verbatimwithframe}
-\DeclareBoolOption[true]{verbatimwrapslines}
-\DeclareBoolOption[false]{verbatimhintsturnover}
-\DeclareBoolOption[true]{inlineliteralwraps}
-% parsed literal
-\DeclareBoolOption[true]{parsedliteralwraps}
-% \textvisiblespace for compatibility with fontspec+XeTeX/LuaTeX
-\DeclareStringOption[\textcolor{red}{\textvisiblespace}]{verbatimvisiblespace}
-\DeclareStringOption % must use braces to hide the brackets
- [{\makebox[2\fontcharwd\font`\x][r]{\textcolor{red}{\tiny$\m@th\hookrightarrow$}}}]%
- {verbatimcontinued}
-% notices/admonitions
-% the dimensions for notices/admonitions are kept as macros and assigned to
-% \spx@notice@border at time of use, hence \DeclareStringOption is ok for this
-\newdimen\spx@notice@border
-\DeclareStringOption[0.5pt]{noteborder}
-\DeclareStringOption[0.5pt]{hintborder}
-\DeclareStringOption[0.5pt]{importantborder}
-\DeclareStringOption[0.5pt]{tipborder}
-\DeclareStringOption[1pt]{warningborder}
-\DeclareStringOption[1pt]{cautionborder}
-\DeclareStringOption[1pt]{attentionborder}
-\DeclareStringOption[1pt]{dangerborder}
-\DeclareStringOption[1pt]{errorborder}
-% footnotes
-\DeclareStringOption[\mbox{ }]{AtStartFootnote}
-% we need a public macro name for direct use in latex file
-\newcommand*{\sphinxAtStartFootnote}{\spx@opt@AtStartFootnote}
-% no such need for this one, as it is used inside other macros
-\DeclareStringOption[\leavevmode\unskip]{BeforeFootnote}
-% some font styling.
-\DeclareStringOption[\sffamily\bfseries]{HeaderFamily}
-% colours
-% same problems as for dimensions: we want the key handler to use \definecolor.
-% first, some colours with no prefix, for backwards compatibility
-\newcommand*{\sphinxDeclareColorOption}[2]{%
- \definecolor{#1}#2%
- \define@key{sphinx}{#1}{\definecolor{#1}##1}%
-}%
-\sphinxDeclareColorOption{TitleColor}{{rgb}{0.126,0.263,0.361}}
-\sphinxDeclareColorOption{InnerLinkColor}{{rgb}{0.208,0.374,0.486}}
-\sphinxDeclareColorOption{OuterLinkColor}{{rgb}{0.216,0.439,0.388}}
-\sphinxDeclareColorOption{VerbatimColor}{{rgb}{1,1,1}}
-\sphinxDeclareColorOption{VerbatimBorderColor}{{rgb}{0,0,0}}
-% now the colours defined with "sphinx" prefix in their names
-\newcommand*{\sphinxDeclareSphinxColorOption}[2]{%
- % set the initial default
- \definecolor{sphinx#1}#2%
- % set the key handler. The "value" ##1 must be acceptable by \definecolor.
- \define@key{sphinx}{#1}{\definecolor{sphinx#1}##1}%
-}%
-% Default color chosen to be as in minted.sty LaTeX package!
-\sphinxDeclareSphinxColorOption{VerbatimHighlightColor}{{rgb}{0.878,1,1}}
-% admonition boxes, "light" style
-\sphinxDeclareSphinxColorOption{noteBorderColor}{{rgb}{0,0,0}}
-\sphinxDeclareSphinxColorOption{hintBorderColor}{{rgb}{0,0,0}}
-\sphinxDeclareSphinxColorOption{importantBorderColor}{{rgb}{0,0,0}}
-\sphinxDeclareSphinxColorOption{tipBorderColor}{{rgb}{0,0,0}}
-% admonition boxes, "heavy" style
-\sphinxDeclareSphinxColorOption{warningBorderColor}{{rgb}{0,0,0}}
-\sphinxDeclareSphinxColorOption{cautionBorderColor}{{rgb}{0,0,0}}
-\sphinxDeclareSphinxColorOption{attentionBorderColor}{{rgb}{0,0,0}}
-\sphinxDeclareSphinxColorOption{dangerBorderColor}{{rgb}{0,0,0}}
-\sphinxDeclareSphinxColorOption{errorBorderColor}{{rgb}{0,0,0}}
-\sphinxDeclareSphinxColorOption{warningBgColor}{{rgb}{1,1,1}}
-\sphinxDeclareSphinxColorOption{cautionBgColor}{{rgb}{1,1,1}}
-\sphinxDeclareSphinxColorOption{attentionBgColor}{{rgb}{1,1,1}}
-\sphinxDeclareSphinxColorOption{dangerBgColor}{{rgb}{1,1,1}}
-\sphinxDeclareSphinxColorOption{errorBgColor}{{rgb}{1,1,1}}
-
-\DeclareDefaultOption{\@unknownoptionerror}
-\ProcessKeyvalOptions*
-% don't allow use of maxlistdepth via \sphinxsetup.
-\DisableKeyvalOption{sphinx}{maxlistdepth}
-% user interface: options can be changed midway in a document!
-\newcommand\sphinxsetup[1]{\setkeys{sphinx}{#1}}
-
-
-%% MAXLISTDEPTH
-%
-% remove LaTeX's cap on nesting depth if 'maxlistdepth' key used.
-% This is a hack, which works with the standard classes: it assumes \@toodeep
-% is always used in "true" branches: "\if ... \@toodeep \else .. \fi."
-
-% will force use the "false" branch (if there is one)
-\def\spx@toodeep@hack{\fi\iffalse}
-
-% do nothing if 'maxlistdepth' key not used or if package enumitem loaded.
-\ifnum\spx@opt@maxlistdepth=\z@\expandafter\@gobbletwo\fi
-\AtBeginDocument{%
-\@ifpackageloaded{enumitem}{\remove@to@nnil}{}%
- \let\spx@toodeepORI\@toodeep
- \def\@toodeep{%
- \ifnum\@listdepth<\spx@opt@maxlistdepth\relax
- \expandafter\spx@toodeep@hack
- \else
- \expandafter\spx@toodeepORI
- \fi}%
-% define all missing \@list... macros
- \count@\@ne
- \loop
- \ltx@ifundefined{@list\romannumeral\the\count@}
- {\iffalse}{\iftrue\advance\count@\@ne}%
- \repeat
- \loop
- \ifnum\count@>\spx@opt@maxlistdepth\relax\else
- \expandafter\let
- \csname @list\romannumeral\the\count@\expandafter\endcsname
- \csname @list\romannumeral\the\numexpr\count@-\@ne\endcsname
- % workaround 2.6--3.2d babel-french issue (fixed in 3.2e; no change needed)
- \ltx@ifundefined{leftmargin\romannumeral\the\count@}
- {\expandafter\let
- \csname leftmargin\romannumeral\the\count@\expandafter\endcsname
- \csname leftmargin\romannumeral\the\numexpr\count@-\@ne\endcsname}{}%
- \advance\count@\@ne
- \repeat
-% define all missing enum... counters and \labelenum... macros and \p@enum..
- \count@\@ne
- \loop
- \ltx@ifundefined{c@enum\romannumeral\the\count@}
- {\iffalse}{\iftrue\advance\count@\@ne}%
- \repeat
- \loop
- \ifnum\count@>\spx@opt@maxlistdepth\relax\else
- \newcounter{enum\romannumeral\the\count@}%
- \expandafter\def
- \csname labelenum\romannumeral\the\count@\expandafter\endcsname
- \expandafter
- {\csname theenum\romannumeral\the\numexpr\count@\endcsname.}%
- \expandafter\def
- \csname p@enum\romannumeral\the\count@\expandafter\endcsname
- \expandafter
- {\csname p@enum\romannumeral\the\numexpr\count@-\@ne\expandafter
- \endcsname\csname theenum\romannumeral\the\numexpr\count@-\@ne\endcsname.}%
- \advance\count@\@ne
- \repeat
-% define all missing labelitem... macros
- \count@\@ne
- \loop
- \ltx@ifundefined{labelitem\romannumeral\the\count@}
- {\iffalse}{\iftrue\advance\count@\@ne}%
- \repeat
- \loop
- \ifnum\count@>\spx@opt@maxlistdepth\relax\else
- \expandafter\let
- \csname labelitem\romannumeral\the\count@\expandafter\endcsname
- \csname labelitem\romannumeral\the\numexpr\count@-\@ne\endcsname
- \advance\count@\@ne
- \repeat
- \PackageInfo{sphinx}{maximal list depth extended to \spx@opt@maxlistdepth}%
-\@gobble\@nnil
-}
-
-
-%% INDEX, BIBLIOGRAPHY, APPENDIX, TABLE OF CONTENTS
-%
-% fix the double index and bibliography on the table of contents
-% in jsclasses (Japanese standard document classes)
-\ifx\@jsc@uplatextrue\undefined\else
- \renewenvironment{sphinxtheindex}
- {\cleardoublepage\phantomsection
- \begin{theindex}}
- {\end{theindex}}
-
- \renewenvironment{sphinxthebibliography}[1]
- {\cleardoublepage% \phantomsection % not needed here since TeXLive 2010's hyperref
- \begin{thebibliography}{1}}
- {\end{thebibliography}}
-\fi
-
-% disable \@chappos in Appendix in pTeX
-\ifx\kanjiskip\undefined\else
- \let\py@OldAppendix=\appendix
- \renewcommand{\appendix}{
- \py@OldAppendix
- \gdef\@chappos{}
- }
-\fi
-
-% make commands known to non-Sphinx document classes
-\providecommand*{\sphinxtableofcontents}{\tableofcontents}
-\ltx@ifundefined{sphinxthebibliography}
- {\newenvironment
- {sphinxthebibliography}{\begin{thebibliography}}{\end{thebibliography}}%
- }
- {}% else clause of ifundefined
-\ltx@ifundefined{sphinxtheindex}
- {\newenvironment{sphinxtheindex}{\begin{theindex}}{\end{theindex}}}%
- {}% else clause of ifundefined
-
-
-%% COLOR (general)
-%
-% FIXME: \normalcolor should probably be used in place of \py@NormalColor
-% elsewhere, and \py@NormalColor should never be defined. \normalcolor
-% switches to the colour from last \color call in preamble.
-\def\py@NormalColor{\color{black}}
-% FIXME: it is probably better to use \color{TitleColor}, as TitleColor
-% can be customized from 'sphinxsetup', and drop usage of \py@TitleColor
-\def\py@TitleColor{\color{TitleColor}}
-% FIXME: this line should be dropped, as "9" is default anyhow.
-\ifdefined\pdfcompresslevel\pdfcompresslevel = 9 \fi
-
-
-%% PAGE STYLING
-%
-% Style parameters and macros used by most documents here
-\raggedbottom
-\sloppy
-\hbadness = 5000 % don't print trivial gripes
-
-\pagestyle{empty} % start this way
-
-% Redefine the 'normal' header/footer style when using "fancyhdr" package:
-% Note: this presupposes "twoside". If "oneside" class option, there will be warnings.
-\ltx@ifundefined{fancyhf}{}{
- % Use \pagestyle{normal} as the primary pagestyle for text.
- \fancypagestyle{normal}{
- \fancyhf{}
-% (for \py@HeaderFamily cf "TITLES")
- \fancyfoot[LE,RO]{{\py@HeaderFamily\thepage}}
- \fancyfoot[LO]{{\py@HeaderFamily\nouppercase{\rightmark}}}
- \fancyfoot[RE]{{\py@HeaderFamily\nouppercase{\leftmark}}}
- \fancyhead[LE,RO]{{\py@HeaderFamily \@title, \py@release}}
- \renewcommand{\headrulewidth}{0.4pt}
- \renewcommand{\footrulewidth}{0.4pt}
- % define chaptermark with \@chappos when \@chappos is available for Japanese
- \ltx@ifundefined{@chappos}{}
- {\def\chaptermark##1{\markboth{\@chapapp\space\thechapter\space\@chappos\space ##1}{}}}
- }
- % Update the plain style so we get the page number & footer line,
- % but not a chapter or section title. This is to keep the first
- % page of a chapter and the blank page between chapters `clean.'
- \fancypagestyle{plain}{
- \fancyhf{}
- \fancyfoot[LE,RO]{{\py@HeaderFamily\thepage}}
- \renewcommand{\headrulewidth}{0pt}
- \renewcommand{\footrulewidth}{0.4pt}
- }
-}
-
-% geometry
-\ifx\kanjiskip\undefined
- \PassOptionsToPackage{%
- hmargin={\unexpanded{\spx@opt@hmargin}},%
- vmargin={\unexpanded{\spx@opt@vmargin}},%
- marginpar=\unexpanded{\spx@opt@marginpar}}
- {geometry}
-\else
- % set text width for Japanese documents to be integer multiple of 1zw
- % and text height to be integer multiple of \baselineskip
- % the execution is delayed to \sphinxsetup then geometry.sty
- \normalsize\normalfont
- \newcommand*\sphinxtextwidthja[1]{%
- \if@twocolumn\tw@\fi
- \dimexpr
- \numexpr\dimexpr\paperwidth-\tw@\dimexpr#1\relax\relax/
- \dimexpr\if@twocolumn\tw@\else\@ne\fi zw\relax
- zw\relax}%
- \newcommand*\sphinxmarginparwidthja[1]{%
- \dimexpr\numexpr\dimexpr#1\relax/\dimexpr1zw\relax zw\relax}%
- \newcommand*\sphinxtextlinesja[1]{%
- \numexpr\@ne+\dimexpr\paperheight-\topskip-\tw@\dimexpr#1\relax\relax/
- \baselineskip\relax}%
- \ifx\@jsc@uplatextrue\undefined\else
- % the way we found in order for the papersize special written by
- % geometry in the dvi file to be correct in case of jsbook class
- \ifnum\mag=\@m\else % do nothing special if nomag class option or 10pt
- \PassOptionsToPackage{truedimen}{geometry}%
- \fi
- \fi
- \PassOptionsToPackage{%
- hmarginratio={1:1},%
- textwidth=\unexpanded{\sphinxtextwidthja{\spx@opt@hmargin}},%
- vmarginratio={1:1},%
- lines=\unexpanded{\sphinxtextlinesja{\spx@opt@vmargin}},%
- marginpar=\unexpanded{\sphinxmarginparwidthja{\spx@opt@marginpar}},%
- footskip=2\baselineskip,%
- }{geometry}%
- \AtBeginDocument
- {% update a dimension used by the jsclasses
- \ifx\@jsc@uplatextrue\undefined\else\fullwidth\textwidth\fi
- % for some reason, jreport normalizes all dimensions with \@settopoint
- \@ifclassloaded{jreport}
- {\@settopoint\textwidth\@settopoint\textheight\@settopoint\marginparwidth}
- {}% <-- "false" clause of \@ifclassloaded
- }%
-\fi
-
-% fix fncychap's bug which uses prematurely the \textwidth value
-\@ifpackagewith{fncychap}{Bjornstrup}
- {\AtBeginDocument{\mylen\textwidth\advance\mylen-2\myhi}}%
- {}% <-- "false" clause of \@ifpackagewith
-
-
-%% TITLES
-%
-% Since Sphinx 1.5, users should use HeaderFamily key to 'sphinxsetup' rather
-% than defining their own \py@HeaderFamily command (which is still possible).
-% Memo: \py@HeaderFamily is also used by \maketitle as defined in
-% sphinxmanual.cls/sphinxhowto.cls
-\newcommand{\py@HeaderFamily}{\spx@opt@HeaderFamily}
-
-% This sets up the fancy chapter headings that make the documents look
-% at least a little better than the usual LaTeX output.
-\@ifpackagewith{fncychap}{Bjarne}{
- \ChNameVar {\raggedleft\normalsize \py@HeaderFamily}
- \ChNumVar {\raggedleft\Large \py@HeaderFamily}
- \ChTitleVar{\raggedleft\Large \py@HeaderFamily}
- % This creates (numbered) chapter heads without the leading \vspace*{}:
- \def\@makechapterhead#1{%
- {\parindent \z@ \raggedright \normalfont
- \ifnum \c@secnumdepth >\m@ne
- \if@mainmatter
- \DOCH
- \fi
- \fi
- \interlinepenalty\@M
- \if@mainmatter
- \DOTI{#1}%
- \else%
- \DOTIS{#1}%
- \fi
- }}
-}{}% <-- "false" clause of \@ifpackagewith
-
-% Augment the sectioning commands used to get our own font family in place,
-% and reset some internal data items (\titleformat from titlesec package)
-\titleformat{\section}{\Large\py@HeaderFamily}%
- {\py@TitleColor\thesection}{0.5em}{\py@TitleColor}{\py@NormalColor}
-\titleformat{\subsection}{\large\py@HeaderFamily}%
- {\py@TitleColor\thesubsection}{0.5em}{\py@TitleColor}{\py@NormalColor}
-\titleformat{\subsubsection}{\py@HeaderFamily}%
- {\py@TitleColor\thesubsubsection}{0.5em}{\py@TitleColor}{\py@NormalColor}
-% By default paragraphs (and subsubsections) will not be numbered because
-% sphinxmanual.cls and sphinxhowto.cls set secnumdepth to 2
-\titleformat{\paragraph}{\py@HeaderFamily}%
- {\py@TitleColor\theparagraph}{0.5em}{\py@TitleColor}{\py@NormalColor}
-\titleformat{\subparagraph}{\py@HeaderFamily}%
- {\py@TitleColor\thesubparagraph}{0.5em}{\py@TitleColor}{\py@NormalColor}
-
-
-%% GRAPHICS
-%
-% \sphinxincludegraphics defined to resize images larger than the line width,
-% except if height or width option present.
-%
-% If scale is present, rescale before fitting to line width. (since 1.5)
-\newbox\spx@image@box
-\newcommand*{\sphinxincludegraphics}[2][]{%
- \in@{height}{#1}\ifin@\else\in@{width}{#1}\fi
- \ifin@ % height or width present
- \includegraphics[#1]{#2}%
- \else % no height nor width (but #1 may be "scale=...")
- \setbox\spx@image@box\hbox{\includegraphics[#1,draft]{#2}}%
- \ifdim \wd\spx@image@box>\linewidth
- \setbox\spx@image@box\box\voidb@x % clear memory
- \includegraphics[#1,width=\linewidth]{#2}%
- \else
- \includegraphics[#1]{#2}%
- \fi
- \fi
-}
-
-
-%% FIGURE IN TABLE
-%
-\newenvironment{sphinxfigure-in-table}[1][\linewidth]{%
- \def\@captype{figure}%
- \sphinxsetvskipsforfigintablecaption
- \begin{minipage}{#1}%
-}{\end{minipage}}
-% store original \caption macro for use with figures in longtable and tabulary
-\AtBeginDocument{\let\spx@originalcaption\caption}
-\newcommand*\sphinxfigcaption
- {\ifx\equation$%$% this is trick to identify tabulary first pass
- \firstchoice@false\else\firstchoice@true\fi
- \spx@originalcaption }
-\newcommand*\sphinxsetvskipsforfigintablecaption
- {\abovecaptionskip\smallskipamount
- \belowcaptionskip\smallskipamount}
-
-%% FOOTNOTES
-%
-% Support large numbered footnotes in minipage
-% But now obsolete due to systematic use of \savenotes/\spewnotes
-% when minipages are in use in the various macro definitions next.
-\def\thempfootnote{\arabic{mpfootnote}}
-
-
-%% LITERAL BLOCKS
-%
-% Based on use of "fancyvrb.sty"'s Verbatim.
-% - with framing allowing page breaks ("framed.sty")
-% - with breaking of long lines (exploits Pygments mark-up),
-% - with possibly of a top caption, non-separable by pagebreak.
-% - and usable inside tables or footnotes ("footnotehyper-sphinx").
-
-% For extensions which use \OriginalVerbatim and compatibility with Sphinx <
-% 1.5, we define and use these when (unmodified) Verbatim will be needed. But
-% Sphinx >= 1.5 does not modify the \Verbatim macro anymore.
-\let\OriginalVerbatim \Verbatim
-\let\endOriginalVerbatim\endVerbatim
-
-% if the available space on page is less than \literalblockneedspace, insert pagebreak
-\newcommand{\sphinxliteralblockneedspace}{5\baselineskip}
-\newcommand{\sphinxliteralblockwithoutcaptionneedspace}{1.5\baselineskip}
-
-% for captions of literal blocks
-% also define `\theH...` macros for hyperref
-\newcounter{literalblock}
-\ltx@ifundefined{c@chapter}
- {\@addtoreset{literalblock}{section}
- \def\theliteralblock {\ifnum\c@section>\z@ \thesection.\fi\arabic{literalblock}}
- \def\theHliteralblock {\theHsection.\arabic{literalblock}}}
- {\@addtoreset{literalblock}{chapter}
- \def\theliteralblock {\ifnum\c@chapter>\z@ \thechapter.\fi\arabic{literalblock}}
- \def\theHliteralblock {\theHchapter.\arabic{literalblock}}}
-% at start of caption title
-\newcommand*{\fnum@literalblock}{\literalblockname\nobreakspace\theliteralblock}
-% this will be overwritten in document preamble by Babel translation
-\newcommand*{\literalblockname}{Listing }
-% file extension needed for \caption's good functioning, the file is created
-% only if a \listof{literalblock}{foo} command is encountered, which is
-% analogous to \listoffigures, but for the code listings (foo = chosen title.)
-\newcommand*{\ext@literalblock}{lol}
-
-% The title (caption) is specified from outside as macro \sphinxVerbatimTitle.
-% \sphinxVerbatimTitle is reset to empty after each use of Verbatim.
-\newcommand*\sphinxVerbatimTitle {}
-% This box to typeset the caption before framed.sty multiple passes for framing.
-\newbox\spx@Verbatim@TitleBox
-% Holder macro for labels of literal blocks. Set-up by LaTeX writer.
-\newcommand*\sphinxLiteralBlockLabel {}
-\newcommand*\sphinxSetupCaptionForVerbatim [1]
-{%
- \needspace{\sphinxliteralblockneedspace}%
-% insert a \label via \sphinxLiteralBlockLabel
-% reset to normal the color for the literal block caption
-% the caption inserts \abovecaptionskip whitespace above itself (usually 10pt)
-% there is also \belowcaptionskip but it is usually zero, hence the \smallskip
- \def\sphinxVerbatimTitle
- {\py@NormalColor
- \captionof{literalblock}{\sphinxLiteralBlockLabel #1}\smallskip }%
-}
-\newcommand*\sphinxSetupCodeBlockInFootnote {%
- \fvset{fontsize=\footnotesize}\let\caption\sphinxfigcaption
- \sphinxverbatimwithminipagetrue % reduces vertical spaces
- % we counteract float.sty's \caption which does \@normalsize
- \let\normalsize\footnotesize\let\@parboxrestore\relax
- \abovecaptionskip \smallskipamount \belowcaptionskip \z@skip}
-
-\newif\ifspx@inframed % flag set if we are already in a framed environment
-% if forced use of minipage encapsulation is needed (e.g. table cells)
-\newif\ifsphinxverbatimwithminipage \sphinxverbatimwithminipagefalse
-\long\def\spx@colorbox #1#2#3{%
-% let the framing obey the current indentation (adapted from framed.sty's code).
- \hskip\@totalleftmargin
- \hskip-\fboxsep\hskip-\fboxrule
- \spx@fcolorbox{VerbatimBorderColor}{VerbatimColor}{#1}{#2}{#3}%
- \hskip-\fboxsep\hskip-\fboxrule
- \hskip-\linewidth \hskip-\@totalleftmargin \hskip\columnwidth
-}
-% use of \color@b@x here is compatible with both xcolor.sty and color.sty
-\long\def\spx@fcolorbox #1#2#3#4%
- {\color@b@x {\color{#1}\spx@VerbatimFBox{#3}{#4}}{\color{#2}}}%
-% Frame drawing macro
-% #1 = used by default for title above frame, may contain "continued" hint
-% #2 = for material underneath frame, used for "continues on next page" hint
-% #3 = actual contents with background color
-\long\def\spx@VerbatimFBox#1#2#3{%
- \leavevmode
- \begingroup
- \setbox\@tempboxa\hbox{{#3}}% inner braces to avoid color leaks
- \hbox
- {\lower\dimexpr\fboxrule+\dp\@tempboxa\hbox{%
- \vbox{#1% above frame
- % draw frame border _latest_ to avoid pdf viewer issue
- \kern\fboxrule
- \hbox{\kern\fboxrule
- \copy\@tempboxa
- \kern-\wd\@tempboxa\kern-\fboxrule
- \vrule\@width\fboxrule
- \kern\wd\@tempboxa
- \vrule\@width\fboxrule}%
- \kern-\dimexpr\ht\@tempboxa+\dp\@tempboxa+\fboxrule\relax
- \hrule\@height\fboxrule
- \kern\dimexpr\ht\@tempboxa+\dp\@tempboxa\relax
- \hrule\@height\fboxrule
- #2% below frame
- }%
- }%
- }%
- \endgroup
-}
-
-% Customize framed.sty \MakeFramed to glue caption to literal block
-% and add optional hint "continued on next page"
-\def\spx@Verbatim@FrameCommand
- {\spx@colorbox\spx@Verbatim@Title{}}%
-% Macros for a frame with page breaks:
-\def\spx@Verbatim@FirstFrameCommand
- {\spx@colorbox\spx@Verbatim@Title\spx@Verbatim@Continues}%
-\def\spx@Verbatim@MidFrameCommand
- {\spx@colorbox\spx@Verbatim@Continued\spx@Verbatim@Continues}%
-\def\spx@Verbatim@LastFrameCommand
- {\spx@colorbox\spx@Verbatim@Continued{}}%
-
-\def\spx@Verbatim@Title{% hide width from framed.sty measuring
- \moveright\dimexpr\fboxrule+.5\wd\@tempboxa
- \hb@xt@\z@{\hss\unhcopy\spx@Verbatim@TitleBox\hss}%
-}%
-\def\spx@Verbatim@Continued{%
- \moveright\dimexpr\fboxrule+\wd\@tempboxa-\fboxsep
- \hb@xt@\z@{\hss
- {\normalcolor\sphinxstylecodecontinued\literalblockcontinuedname}}%
-}%
-\def\spx@Verbatim@Continues{%
- \moveright\dimexpr\fboxrule+\wd\@tempboxa-\fboxsep
- \hb@xt@\z@{\hss
- {\normalcolor\sphinxstylecodecontinues\literalblockcontinuesname}}%
-}%
-% Defaults are redefined in document preamble according to language
-\newcommand*\literalblockcontinuedname{continued from previous page}%
-\newcommand*\literalblockcontinuesname{continues on next page}%
-
-% For linebreaks inside Verbatim environment from package fancyvrb.
-\newbox\sphinxcontinuationbox
-\newbox\sphinxvisiblespacebox
-\newcommand*\sphinxafterbreak {\copy\sphinxcontinuationbox}
-
-% Take advantage of the already applied Pygments mark-up to insert
-% potential linebreaks for TeX processing.
-% {, <, #, %, $, ' and ": go to next line.
-% _, }, ^, &, >, - and ~: stay at end of broken line.
-% Use of \textquotesingle for straight quote.
-% FIXME: convert this to package options ?
-\newcommand*\sphinxbreaksbeforelist {%
- \do\PYGZob\{\do\PYGZlt\<\do\PYGZsh\#\do\PYGZpc\%% {, <, #, %,
- \do\PYGZdl\$\do\PYGZdq\"% $, "
- \def\PYGZsq
- {\discretionary{}{\sphinxafterbreak\textquotesingle}{\textquotesingle}}% '
-}
-\newcommand*\sphinxbreaksafterlist {%
- \do\PYGZus\_\do\PYGZcb\}\do\PYGZca\^\do\PYGZam\&% _, }, ^, &,
- \do\PYGZgt\>\do\PYGZhy\-\do\PYGZti\~% >, -, ~
-}
-\newcommand*\sphinxbreaksatspecials {%
- \def\do##1##2%
- {\def##1{\discretionary{}{\sphinxafterbreak\char`##2}{\char`##2}}}%
- \sphinxbreaksbeforelist
- \def\do##1##2%
- {\def##1{\discretionary{\char`##2}{\sphinxafterbreak}{\char`##2}}}%
- \sphinxbreaksafterlist
-}
-
-\def\sphinx@verbatim@nolig@list {\do \`}%
-% Some characters . , ; ? ! / are not pygmentized.
-% This macro makes them "active" and they will insert potential linebreaks.
-% Not compatible with math mode (cf \sphinxunactivateextras).
-\newcommand*\sphinxbreaksbeforeactivelist {}% none
-\newcommand*\sphinxbreaksafteractivelist {\do\.\do\,\do\;\do\?\do\!\do\/}
-\newcommand*\sphinxbreaksviaactive {%
- \def\do##1{\lccode`\~`##1%
- \lowercase{\def~}{\discretionary{}{\sphinxafterbreak\char`##1}{\char`##1}}%
- \catcode`##1\active}%
- \sphinxbreaksbeforeactivelist
- \def\do##1{\lccode`\~`##1%
- \lowercase{\def~}{\discretionary{\char`##1}{\sphinxafterbreak}{\char`##1}}%
- \catcode`##1\active}%
- \sphinxbreaksafteractivelist
- \lccode`\~`\~
-}
-
-% If the linebreak is at a space, the latter will be displayed as visible
-% space at end of first line, and a continuation symbol starts next line.
-\def\spx@verbatim@space {%
- \nobreak\hskip\z@skip
- \discretionary{\copy\sphinxvisiblespacebox}{\sphinxafterbreak}
- {\kern\fontdimen2\font}%
-}%
-
-% needed to create wrapper environments of fancyvrb's Verbatim
-\newcommand*{\sphinxVerbatimEnvironment}{\gdef\FV@EnvironName{sphinxVerbatim}}
-% serves to implement line highlighting and line wrapping
-\newcommand\sphinxFancyVerbFormatLine[1]{%
- \expandafter\sphinx@verbatim@checkifhl\expandafter{\the\FV@CodeLineNo}%
- \ifin@
- \sphinxVerbatimHighlightLine{#1}%
- \else
- \sphinxVerbatimFormatLine{#1}%
- \fi
-}%
-\newcommand\sphinxVerbatimHighlightLine[1]{%
- \edef\sphinxrestorefboxsep{\fboxsep\the\fboxsep\relax}%
- \fboxsep0pt\relax % cf LaTeX bug graphics/4524
- \colorbox{sphinxVerbatimHighlightColor}%
- {\sphinxrestorefboxsep\sphinxVerbatimFormatLine{#1}}%
- % no need to restore \fboxsep here, as this ends up in a \hbox from fancyvrb
-}%
-% \sphinxVerbatimFormatLine will be set locally to one of those two:
-\newcommand\sphinxVerbatimFormatLineWrap[1]{%
- \hsize\linewidth
- \vtop{\raggedright\hyphenpenalty\z@\exhyphenpenalty\z@
- \doublehyphendemerits\z@\finalhyphendemerits\z@
- \strut #1\strut}%
-}%
-\newcommand\sphinxVerbatimFormatLineNoWrap[1]{\hb@xt@\linewidth{\strut #1\hss}}%
-\g@addto@macro\FV@SetupFont{%
- \sbox\sphinxcontinuationbox {\spx@opt@verbatimcontinued}%
- \sbox\sphinxvisiblespacebox {\spx@opt@verbatimvisiblespace}%
-}%
-% Sphinx <1.5 optional argument was in fact mandatory. It is now really
-% optional and handled by original Verbatim.
-\newenvironment{sphinxVerbatim}{%
- % quit horizontal mode if we are still in a paragraph
- \par
- % list starts new par, but we don't want it to be set apart vertically
- \parskip\z@skip
- % first, let's check if there is a caption
- \ifx\sphinxVerbatimTitle\empty
- \addvspace\z@% counteract possible previous negative skip (French lists!)
- \smallskip
- % there was no caption. Check if nevertheless a label was set.
- \ifx\sphinxLiteralBlockLabel\empty\else
- % we require some space to be sure hyperlink target from \phantomsection
- % will not be separated from upcoming verbatim by a page break
- \needspace{\sphinxliteralblockwithoutcaptionneedspace}%
- \phantomsection\sphinxLiteralBlockLabel
- \fi
- \let\spx@Verbatim@Title\@empty
- \else
- % non-empty \sphinxVerbatimTitle has label inside it (in case there is one)
- \setbox\spx@Verbatim@TitleBox
- \hbox{\begin{minipage}{\linewidth}%
- \sphinxVerbatimTitle
- \end{minipage}}%
- \fi
- \fboxsep\sphinxverbatimsep \fboxrule\sphinxverbatimborder
- % setting borderwidth to zero is simplest for no-frame effect with same pagebreaks
- \ifspx@opt@verbatimwithframe\else\fboxrule\z@\fi
- \let\FrameCommand \spx@Verbatim@FrameCommand
- \let\FirstFrameCommand\spx@Verbatim@FirstFrameCommand
- \let\MidFrameCommand \spx@Verbatim@MidFrameCommand
- \let\LastFrameCommand \spx@Verbatim@LastFrameCommand
- \ifspx@opt@verbatimhintsturnover\else
- \let\spx@Verbatim@Continued\@empty
- \let\spx@Verbatim@Continues\@empty
- \fi
- \ifspx@opt@verbatimwrapslines
- % fancyvrb's Verbatim puts each input line in (unbreakable) horizontal boxes.
- % This customization wraps each line from the input in a \vtop, thus
- % allowing it to wrap and display on two or more lines in the latex output.
- % - The codeline counter will be increased only once.
- % - The wrapped material will not break across pages, it is impossible
- % to achieve this without extensive rewrite of fancyvrb.
- % - The (not used in sphinx) obeytabs option to Verbatim is
- % broken by this change (showtabs and tabspace work).
- \let\sphinxVerbatimFormatLine\sphinxVerbatimFormatLineWrap
- \let\FV@Space\spx@verbatim@space
- % Allow breaks at special characters using \PYG... macros.
- \sphinxbreaksatspecials
- % Breaks at punctuation characters . , ; ? ! and / (needs catcode activation)
- \fvset{codes*=\sphinxbreaksviaactive}%
- \else % end of conditional code for wrapping long code lines
- \let\sphinxVerbatimFormatLine\sphinxVerbatimFormatLineNoWrap
- \fi
- \let\FancyVerbFormatLine\sphinxFancyVerbFormatLine
- % workaround to fancyvrb's check of \@currenvir
- \let\VerbatimEnvironment\sphinxVerbatimEnvironment
- % workaround to fancyvrb's check of current list depth
- \def\@toodeep {\advance\@listdepth\@ne}%
- % The list environment is needed to control perfectly the vertical space.
- % Note: \OuterFrameSep used by framed.sty is later set to \topsep hence 0pt.
- % - if caption: vertical space above caption = (\abovecaptionskip + D) with
- % D = \baselineskip-\FrameHeightAdjust, and then \smallskip above frame.
- % - if no caption: (\smallskip + D) above frame. By default D=6pt.
- % Use trivlist rather than list to avoid possible "too deeply nested" error.
- \itemsep \z@skip
- \topsep \z@skip
- \partopsep \z@skip% trivlist will set \parsep to \parskip = zero (see above)
- % \leftmargin will be set to zero by trivlist
- \rightmargin\z@
- \parindent \z@% becomes \itemindent. Default zero, but perhaps overwritten.
- \trivlist\item\relax
- \ifsphinxverbatimwithminipage\spx@inframedtrue\fi
- % use a minipage if we are already inside a framed environment
- \ifspx@inframed\noindent\begin{minipage}{\linewidth}\fi
- \MakeFramed {% adapted over from framed.sty's snugshade environment
- \advance\hsize-\width\@totalleftmargin\z@\linewidth\hsize\@setminipage
- }%
- % For grid placement from \strut's in \FancyVerbFormatLine
- \lineskip\z@skip
- % active comma should not be overwritten by \@noligs
- \ifspx@opt@verbatimwrapslines
- \let\verbatim@nolig@list \sphinx@verbatim@nolig@list
- \fi
- % will fetch its optional arguments if any
- \OriginalVerbatim
-}
-{%
- \endOriginalVerbatim
- \par\unskip\@minipagefalse\endMakeFramed % from framed.sty snugshade
- \ifspx@inframed\end{minipage}\fi
- \endtrivlist
-}
-\newenvironment {sphinxVerbatimNoFrame}
- {\spx@opt@verbatimwithframefalse
- % needed for fancyvrb as literal code will end in \end{sphinxVerbatimNoFrame}
- \def\sphinxVerbatimEnvironment{\gdef\FV@EnvironName{sphinxVerbatimNoFrame}}%
- \begin{sphinxVerbatim}}
- {\end{sphinxVerbatim}}
-\newenvironment {sphinxVerbatimintable}
- {% don't use a frame if in a table cell
- \spx@opt@verbatimwithframefalse
- \sphinxverbatimwithminipagetrue
- % counteract longtable redefinition of caption
- \let\caption\sphinxfigcaption
- % reduce above caption space if in a table cell
- \abovecaptionskip\smallskipamount
- \def\sphinxVerbatimEnvironment{\gdef\FV@EnvironName{sphinxVerbatimintable}}%
- \begin{sphinxVerbatim}}
- {\end{sphinxVerbatim}}
-
-
-%% PARSED LITERALS
-% allow long lines to wrap like they do in code-blocks
-
-% this should be kept in sync with definitions in sphinx.util.texescape
-\newcommand*\sphinxbreaksattexescapedchars{%
- \def\do##1##2% put potential break point before character
- {\def##1{\discretionary{}{\sphinxafterbreak\char`##2}{\char`##2}}}%
- \do\{\{\do\textless\<\do\#\#\do\%\%\do\$\$% {, <, #, %, $
- \def\do##1##2% put potential break point after character
- {\def##1{\discretionary{\char`##2}{\sphinxafterbreak}{\char`##2}}}%
- \do\_\_\do\}\}\do\textasciicircum\^\do\&\&% _, }, ^, &,
- \do\textgreater\>\do\textasciitilde\~% >, ~
-}
-\newcommand*\sphinxbreaksviaactiveinparsedliteral{%
- \sphinxbreaksviaactive % by default handles . , ; ? ! /
- \do\-% we need also the hyphen character (ends up "as is" in parsed-literal)
- \lccode`\~`\~ %
- % update \dospecials as it is used by \url
- % but deactivation will already have been done hence this is unneeded:
- % \expandafter\def\expandafter\dospecials\expandafter{\dospecials
- % \sphinxbreaksbeforeactivelist\sphinxbreaksafteractivelist\do\-}%
-}
-\newcommand*\sphinxbreaksatspaceinparsedliteral{%
- \lccode`~32 \lowercase{\let~}\spx@verbatim@space\lccode`\~`\~
-}
-\newcommand*{\sphinxunactivateextras}{\let\do\@makeother
- \sphinxbreaksbeforeactivelist\sphinxbreaksafteractivelist\do\-}%
-% the \catcode13=5\relax (deactivate end of input lines) is left to callers
-\newcommand*{\sphinxunactivateextrasandspace}{\catcode32=10\relax
- \sphinxunactivateextras}%
-% now for the modified alltt environment
-\newenvironment{sphinxalltt}
-{% at start of next line to workaround Emacs/AUCTeX issue with this file
-\begin{alltt}%
- \ifspx@opt@parsedliteralwraps
- \sbox\sphinxcontinuationbox {\spx@opt@verbatimcontinued}%
- \sbox\sphinxvisiblespacebox {\spx@opt@verbatimvisiblespace}%
- \sphinxbreaksattexescapedchars
- \sphinxbreaksviaactiveinparsedliteral
- \sphinxbreaksatspaceinparsedliteral
-% alltt takes care of the ' as derivative ("prime") in math mode
- \everymath\expandafter{\the\everymath\sphinxunactivateextrasandspace
- \catcode`\<=12\catcode`\>=12\catcode`\^=7\catcode`\_=8 }%
-% not sure if displayed math (align,...) can end up in parsed-literal, anyway
- \everydisplay\expandafter{\the\everydisplay
- \catcode13=5 \sphinxunactivateextrasandspace
- \catcode`\<=12\catcode`\>=12\catcode`\^=7\catcode`\_=8 }%
- \fi }
-{\end{alltt}}
-
-% Protect \href's first argument in contexts such as sphinxalltt (or
-% \sphinxcode). Sphinx uses \#, \%, \& ... always inside \sphinxhref.
-\protected\def\sphinxhref#1#2{{%
- \sphinxunactivateextrasandspace % never do \scantokens with active space!
- \endlinechar\m@ne\everyeof{{#2}}% keep catcode regime for #2
- \scantokens{\href{#1}}% normalise it for #1 during \href expansion
-}}
-% Same for \url. And also \nolinkurl for coherence.
-\protected\def\sphinxurl#1{{%
- \sphinxunactivateextrasandspace\everyeof{}% (<- precaution for \scantokens)
- \endlinechar\m@ne\scantokens{\url{#1}}%
-}}
-\protected\def\sphinxnolinkurl#1{{%
- \sphinxunactivateextrasandspace\everyeof{}%
- \endlinechar\m@ne\scantokens{\nolinkurl{#1}}%
-}}
-
-
-%% TOPIC AND CONTENTS BOXES
-%
-% Again based on use of "framed.sty", this allows breakable framed boxes.
-\long\def\spx@ShadowFBox#1{%
- \leavevmode\begingroup
- % first we frame the box #1
- \setbox\@tempboxa
- \hbox{\vrule\@width\sphinxshadowrule
- \vbox{\hrule\@height\sphinxshadowrule
- \kern\sphinxshadowsep
- \hbox{\kern\sphinxshadowsep #1\kern\sphinxshadowsep}%
- \kern\sphinxshadowsep
- \hrule\@height\sphinxshadowrule}%
- \vrule\@width\sphinxshadowrule}%
- % Now we add the shadow, like \shadowbox from fancybox.sty would do
- \dimen@\dimexpr.5\sphinxshadowrule+\sphinxshadowsize\relax
- \hbox{\vbox{\offinterlineskip
- \hbox{\copy\@tempboxa\kern-.5\sphinxshadowrule
- % add shadow on right side
- \lower\sphinxshadowsize
- \hbox{\vrule\@height\ht\@tempboxa \@width\dimen@}%
- }%
- \kern-\dimen@ % shift back vertically to bottom of frame
- % and add shadow at bottom
- \moveright\sphinxshadowsize
- \vbox{\hrule\@width\wd\@tempboxa \@height\dimen@}%
- }%
- % move left by the size of right shadow so shadow adds no width
- \kern-\sphinxshadowsize
- }%
- \endgroup
-}
-
-% use framed.sty to allow page breaks in frame+shadow
-% works well inside Lists and Quote-like environments
-% produced by ``topic'' directive (or local contents)
-% could nest if LaTeX writer authorized it
-\newenvironment{sphinxShadowBox}
- {\def\FrameCommand {\spx@ShadowFBox }%
- % configure framed.sty not to add extra vertical spacing
- \ltx@ifundefined{OuterFrameSep}{}{\OuterFrameSep\z@skip}%
- % the \trivlist will add the vertical spacing on top and bottom which is
- % typical of center environment as used in Sphinx <= 1.4.1
- % the \noindent has the effet of an extra blank line on top, to
- % imitate closely the layout from Sphinx <= 1.4.1; the \FrameHeightAdjust
- % will put top part of frame on this baseline.
- \def\FrameHeightAdjust {\baselineskip}%
- % use package footnote to handle footnotes
- \savenotes
- \trivlist\item\noindent
- % use a minipage if we are already inside a framed environment
- \ifspx@inframed\begin{minipage}{\linewidth}\fi
- \MakeFramed {\spx@inframedtrue
- % framed.sty puts into "\width" the added width (=2shadowsep+2shadowrule)
- % adjust \hsize to what the contents must use
- \advance\hsize-\width
- % adjust LaTeX parameters to behave properly in indented/quoted contexts
- \FrameRestore
- % typeset the contents as in a minipage (Sphinx <= 1.4.1 used a minipage and
- % itemize/enumerate are therein typeset more tightly, we want to keep
- % that). We copy-paste from LaTeX source code but don't do a real minipage.
- \@pboxswfalse
- \let\@listdepth\@mplistdepth \@mplistdepth\z@
- \@minipagerestore
- \@setminipage
- }%
- }%
- {% insert the "endminipage" code
- \par\unskip
- \@minipagefalse
- \endMakeFramed
- \ifspx@inframed\end{minipage}\fi
- \endtrivlist
- % output the stored footnotes
- \spewnotes
- }
-
-
-%% NOTICES AND ADMONITIONS
-%
-% Some are quite plain
-% the spx@notice@bordercolor etc are set in the sphinxadmonition environment
-\newenvironment{sphinxlightbox}{%
- \par\allowbreak
- \noindent{\color{spx@notice@bordercolor}%
- \rule{\linewidth}{\spx@notice@border}}\par\nobreak
- {\parskip\z@skip\noindent}%
- }
- {%
- \par
- % counteract previous possible negative skip (French lists!):
- % (we can't cancel that any earlier \vskip introduced a potential pagebreak)
- \ifdim\lastskip<\z@\vskip-\lastskip\fi
- \nobreak\vbox{\noindent\kern\@totalleftmargin
- {\color{spx@notice@bordercolor}%
- \rule[\dimexpr.4\baselineskip-\spx@notice@border\relax]
- {\linewidth}{\spx@notice@border}}\hss}\allowbreak
- }% end of sphinxlightbox environment definition
-% may be renewenvironment'd by user for complete customization
-\newenvironment{sphinxnote}[1]
- {\begin{sphinxlightbox}\sphinxstrong{#1} }{\end{sphinxlightbox}}
-\newenvironment{sphinxhint}[1]
- {\begin{sphinxlightbox}\sphinxstrong{#1} }{\end{sphinxlightbox}}
-\newenvironment{sphinximportant}[1]
- {\begin{sphinxlightbox}\sphinxstrong{#1} }{\end{sphinxlightbox}}
-\newenvironment{sphinxtip}[1]
- {\begin{sphinxlightbox}\sphinxstrong{#1} }{\end{sphinxlightbox}}
-% or just use the package options
-% these are needed for common handling by notice environment of lightbox
-% and heavybox but they are currently not used by lightbox environment
-% and there is consequently no corresponding package option
-\definecolor{sphinxnoteBgColor}{rgb}{1,1,1}
-\definecolor{sphinxhintBgColor}{rgb}{1,1,1}
-\definecolor{sphinximportantBgColor}{rgb}{1,1,1}
-\definecolor{sphinxtipBgColor}{rgb}{1,1,1}
-
-% Others get more distinction
-% Code adapted from framed.sty's "snugshade" environment.
-% Nesting works (inner frames do not allow page breaks).
-\newenvironment{sphinxheavybox}{\par
- \setlength{\FrameRule}{\spx@notice@border}%
- \setlength{\FrameSep}{\dimexpr.6\baselineskip-\FrameRule\relax}
- % configure framed.sty's parameters to obtain same vertical spacing
- % as for "light" boxes. We need for this to manually insert parskip glue and
- % revert a skip done by framed before the frame.
- \ltx@ifundefined{OuterFrameSep}{}{\OuterFrameSep\z@skip}%
- \vspace{\FrameHeightAdjust}
- % copied/adapted from framed.sty's snugshade
- \def\FrameCommand##1{\hskip\@totalleftmargin
- \fboxsep\FrameSep \fboxrule\FrameRule
- \fcolorbox{spx@notice@bordercolor}{spx@notice@bgcolor}{##1}%
- \hskip-\linewidth \hskip-\@totalleftmargin \hskip\columnwidth}%
- \savenotes
- % use a minipage if we are already inside a framed environment
- \ifspx@inframed
- \noindent\begin{minipage}{\linewidth}
- \else
- % handle case where notice is first thing in a list item (or is quoted)
- \if@inlabel
- \noindent\par\vspace{-\baselineskip}
- \else
- \vspace{\parskip}
- \fi
- \fi
- \MakeFramed {\spx@inframedtrue
- \advance\hsize-\width \@totalleftmargin\z@ \linewidth\hsize
- % minipage initialization copied from LaTeX source code.
- \@pboxswfalse
- \let\@listdepth\@mplistdepth \@mplistdepth\z@
- \@minipagerestore
- \@setminipage }%
- }
- {%
- \par\unskip
- \@minipagefalse
- \endMakeFramed
- \ifspx@inframed\end{minipage}\fi
- % set footnotes at bottom of page
- \spewnotes
- % arrange for similar spacing below frame as for "light" boxes.
- \vskip .4\baselineskip
- }% end of sphinxheavybox environment definition
-% may be renewenvironment'd by user for complete customization
-\newenvironment{sphinxwarning}[1]
- {\begin{sphinxheavybox}\sphinxstrong{#1} }{\end{sphinxheavybox}}
-\newenvironment{sphinxcaution}[1]
- {\begin{sphinxheavybox}\sphinxstrong{#1} }{\end{sphinxheavybox}}
-\newenvironment{sphinxattention}[1]
- {\begin{sphinxheavybox}\sphinxstrong{#1} }{\end{sphinxheavybox}}
-\newenvironment{sphinxdanger}[1]
- {\begin{sphinxheavybox}\sphinxstrong{#1} }{\end{sphinxheavybox}}
-\newenvironment{sphinxerror}[1]
- {\begin{sphinxheavybox}\sphinxstrong{#1} }{\end{sphinxheavybox}}
-% or just use package options
-
-% the \colorlet of xcolor (if at all loaded) is overkill for our use case
-\newcommand{\sphinxcolorlet}[2]
- {\expandafter\let\csname\@backslashchar color@#1\expandafter\endcsname
- \csname\@backslashchar color@#2\endcsname }
-
-% the main dispatch for all types of notices
-\newenvironment{sphinxadmonition}[2]{% #1=type, #2=heading
- % can't use #1 directly in definition of end part
- \def\spx@noticetype {#1}%
- % set parameters of heavybox/lightbox
- \sphinxcolorlet{spx@notice@bordercolor}{sphinx#1BorderColor}%
- \sphinxcolorlet{spx@notice@bgcolor}{sphinx#1BgColor}%
- \spx@notice@border \dimexpr\csname spx@opt@#1border\endcsname\relax
- % start specific environment, passing the heading as argument
- \begin{sphinx#1}{#2}}
- % workaround some LaTeX "feature" of \end command
- {\edef\spx@temp{\noexpand\end{sphinx\spx@noticetype}}\spx@temp}
-% use of ``notice'' is for backwards compatibility and will be removed in
-% Sphinx 1.7.
-\newenvironment{notice}
- {\sphinxdeprecationwarning {notice}{1.6}{1.7}{%
- This document was probably built with a Sphinx extension using ``notice''^^J
- environment. At Sphinx 1.7, ``notice'' environment will be removed. Please^^J
- report to extension author to use ``sphinxadmonition'' instead.^^J%
- ****}\begin{sphinxadmonition}}{\end{sphinxadmonition}}
-
-
-%% PYTHON DOCS MACROS AND ENVIRONMENTS
-% (some macros here used by \maketitle in sphinxmanual.cls and sphinxhowto.cls)
-
-% \moduleauthor{name}{email}
-\newcommand{\moduleauthor}[2]{}
-
-% \sectionauthor{name}{email}
-\newcommand{\sectionauthor}[2]{}
-
-% Allow the release number to be specified independently of the
-% \date{}. This allows the date to reflect the document's date and
-% release to specify the release that is documented.
-%
-\newcommand{\py@release}{}
-\newcommand{\version}{}
-\newcommand{\shortversion}{}
-\newcommand{\releaseinfo}{}
-\newcommand{\releasename}{Release}
-\newcommand{\release}[1]{%
- \renewcommand{\py@release}{\releasename\space\version}%
- \renewcommand{\version}{#1}}
-\newcommand{\setshortversion}[1]{%
- \renewcommand{\shortversion}{#1}}
-\newcommand{\setreleaseinfo}[1]{%
- \renewcommand{\releaseinfo}{#1}}
-
-% Allow specification of the author's address separately from the
-% author's name. This can be used to format them differently, which
-% is a good thing.
-%
-\newcommand{\py@authoraddress}{}
-\newcommand{\authoraddress}[1]{\renewcommand{\py@authoraddress}{#1}}
-
-% {fulllineitems} is the main environment for object descriptions.
-%
-\newcommand{\py@itemnewline}[1]{%
- \kern\labelsep
- \@tempdima\linewidth
- \advance\@tempdima \labelwidth\makebox[\@tempdima][l]{#1}%
- \kern-\labelsep
-}
-
-\newenvironment{fulllineitems}{%
- \begin{list}{}{\labelwidth \leftmargin
- \rightmargin \z@ \topsep -\parskip \partopsep \parskip
- \itemsep -\parsep
- \let\makelabel=\py@itemnewline}%
-}{\end{list}}
-
-% Signatures, possibly multi-line
-%
-\newlength{\py@argswidth}
-\newcommand{\py@sigparams}[2]{%
- \parbox[t]{\py@argswidth}{#1\sphinxcode{)}#2}}
-\newcommand{\pysigline}[1]{\item[{#1}]}
-\newcommand{\pysiglinewithargsret}[3]{%
- \settowidth{\py@argswidth}{#1\sphinxcode{(}}%
- \addtolength{\py@argswidth}{-2\py@argswidth}%
- \addtolength{\py@argswidth}{\linewidth}%
- \item[{#1\sphinxcode{(}\py@sigparams{#2}{#3}}]}
-\newcommand{\pysigstartmultiline}{%
- \def\pysigstartmultiline{\vskip\smallskipamount\parskip\z@skip\itemsep\z@skip}%
- \edef\pysigstopmultiline
- {\noexpand\leavevmode\parskip\the\parskip\relax\itemsep\the\itemsep\relax}%
- \parskip\z@skip\itemsep\z@skip
-}
-
-% Production lists
-%
-\newenvironment{productionlist}{%
-% \def\sphinxoptional##1{{\Large[}##1{\Large]}}
- \def\production##1##2{\\\sphinxcode{##1}&::=&\sphinxcode{##2}}%
- \def\productioncont##1{\\& &\sphinxcode{##1}}%
- \parindent=2em
- \indent
- \setlength{\LTpre}{0pt}%
- \setlength{\LTpost}{0pt}%
- \begin{longtable}[l]{lcl}
-}{%
- \end{longtable}
-}
-
-% Definition lists; requested by AMK for HOWTO documents. Probably useful
-% elsewhere as well, so keep in in the general style support.
-%
-\newenvironment{definitions}{%
- \begin{description}%
- \def\term##1{\item[{##1}]\mbox{}\\*[0mm]}%
-}{%
- \end{description}%
-}
-
-%% FROM DOCTUTILS LATEX WRITER
-%
-% The following is stuff copied from docutils' latex writer.
-%
-\newcommand{\optionlistlabel}[1]{\normalfont\bfseries #1 \hfill}% \bf deprecated
-\newenvironment{optionlist}[1]
-{\begin{list}{}
- {\setlength{\labelwidth}{#1}
- \setlength{\rightmargin}{1cm}
- \setlength{\leftmargin}{\rightmargin}
- \addtolength{\leftmargin}{\labelwidth}
- \addtolength{\leftmargin}{\labelsep}
- \renewcommand{\makelabel}{\optionlistlabel}}
-}{\end{list}}
-
-\newlength{\lineblockindentation}
-\setlength{\lineblockindentation}{2.5em}
-\newenvironment{lineblock}[1]
-{\begin{list}{}
- {\setlength{\partopsep}{\parskip}
- \addtolength{\partopsep}{\baselineskip}
- \topsep0pt\itemsep0.15\baselineskip\parsep0pt
- \leftmargin#1\relax}
- \raggedright}
-{\end{list}}
-
-% From docutils.writers.latex2e
-% inline markup (custom roles)
-% \DUrole{#1}{#2} tries \DUrole#1{#2}
-\providecommand*{\DUrole}[2]{%
- \ifcsname DUrole\detokenize{#1}\endcsname
- \csname DUrole\detokenize{#1}\endcsname{#2}%
- \else% backwards compatibility: try \docutilsrole#1{#2}
- \ifcsname docutilsrole\detokenize{#1}\endcsname
- \csname docutilsrole\detokenize{#1}\endcsname{#2}%
- \else
- #2%
- \fi
- \fi
-}
-
-\providecommand*{\DUprovidelength}[2]{%
- \ifdefined#1\else\newlength{#1}\setlength{#1}{#2}\fi
-}
-
-\DUprovidelength{\DUlineblockindent}{2.5em}
-\ifdefined\DUlineblock\else
- \newenvironment{DUlineblock}[1]{%
- \list{}{\setlength{\partopsep}{\parskip}
- \addtolength{\partopsep}{\baselineskip}
- \setlength{\topsep}{0pt}
- \setlength{\itemsep}{0.15\baselineskip}
- \setlength{\parsep}{0pt}
- \setlength{\leftmargin}{#1}}
- \raggedright
- }
- {\endlist}
-\fi
-
-%% TEXT STYLING
-%
-% Some custom font markup commands.
-% *** the macros without \sphinx prefix are still defined farther down ***
-\protected\def\sphinxstrong#1{{\textbf{#1}}}
-% to obtain straight quotes we execute \@noligs as patched by upquote, and
-% \scantokens is needed in cases where it would be too late for the macro to
-% first set catcodes and then fetch its argument. We also make the contents
-% breakable at non-escaped . , ; ? ! / using \sphinxbreaksviaactive.
-% the macro must be protected if it ends up used in moving arguments,
-% in 'alltt' \@noligs is done already, and the \scantokens must be avoided.
-\protected\def\sphinxcode#1{{\def\@tempa{alltt}%
- \ifx\@tempa\@currenvir\else
- \ifspx@opt@inlineliteralwraps
- \sphinxbreaksviaactive\let\sphinxafterbreak\empty
- % do not overwrite the comma set-up
- \let\verbatim@nolig@list\sphinx@literal@nolig@list
- \fi
- % fix a space-gobbling issue due to LaTeX's original \do@noligs
- \let\do@noligs\sphinx@do@noligs
- \@noligs\endlinechar\m@ne\everyeof{}% (<- in case inside \sphinxhref)
- \expandafter\scantokens
- \fi {\texttt{#1}}}}
-\def\sphinx@do@noligs #1{\catcode`#1\active\begingroup\lccode`\~`#1\relax
- \lowercase{\endgroup\def~{\leavevmode\kern\z@\char`#1 }}}
-\def\sphinx@literal@nolig@list {\do\`\do\<\do\>\do\'\do\-}%
-
-\protected\def\sphinxbfcode#1{\sphinxcode{\bfseries{}#1}}
-\protected\def\sphinxemail#1{\textsf{#1}}
-\protected\def\sphinxtablecontinued#1{\textsf{#1}}
-\protected\def\sphinxtitleref#1{\emph{#1}}
-\protected\def\sphinxmenuselection#1{\emph{#1}}
-\protected\def\sphinxaccelerator#1{\underline{#1}}
-\protected\def\sphinxcrossref#1{\emph{#1}}
-\protected\def\sphinxtermref#1{\emph{#1}}
-% \optional is used for ``[, arg]``, i.e. desc_optional nodes.
-\long\protected\def\sphinxoptional#1{%
- {\textnormal{\Large[}}{#1}\hspace{0.5mm}{\textnormal{\Large]}}}
-
-\ifspx@opt@dontkeepoldnames\else
- \let\spx@alreadydefinedlist\@empty
- \typeout{** (sphinx) defining (legacy) text style macros without \string\sphinx\space prefix}
- \typeout{** if clashes with packages, do not set latex_keep_old_macro_names=True
- in conf.py}
- \@for\@tempa:=code,strong,bfcode,email,tablecontinued,titleref,%
- menuselection,accelerator,crossref,termref,optional\do
- {% first, check if command with no prefix already exists
- \ltx@ifundefined{\@tempa}{%
- % give it the meaning defined so far with \sphinx prefix
- \expandafter\let\csname\@tempa\expandafter\endcsname
- \csname sphinx\@tempa\endcsname
- % redefine the \sphinx prefixed macro to expand to non-prefixed one
- \expandafter\def\csname sphinx\@tempa\expandafter\endcsname
- \expandafter{\csname\@tempa\endcsname}%
- }{\edef\spx@alreadydefinedlist{\spx@alreadydefinedlist{\@tempa}}}%
- }%
- \ifx\spx@alreadydefinedlist\@empty\else
- \expandafter\@tfor\expandafter\@tempa\expandafter:\expandafter=\spx@alreadydefinedlist\do
- {% emit warning now
- \PackageWarning{sphinx}{not redefining already existing \@backslashchar\@tempa\space!^^J%
- Anyhow, Sphinx mark-up uses only \string\sphinx\@tempa.}%
- % and also at end of log for better visibility
- \expandafter\sphinxdeprecationwarning\expandafter{\csname\@tempa\endcsname}{1.6}{1.7}
- {\sphinxdeprecatedmacro already existed at Sphinx loading time! Not redefined!^^J
- Sphinx mark-up uses only \string\sphinx\expandafter\@gobble\sphinxdeprecatedmacro.^^J
- Note: if this warning is about macro \string\strong, it presumably results^^J
- from fontspec 2.6 having defined it prior to Sphinx. No need for alarm!}%
- }%
- \fi
- \sphinxdeprecationwarning{latex_keep_old_macro_names=True}{1.6}{1.7}{}%
-\fi
-
-% additional customizable styling
-% FIXME: convert this to package options ?
-\protected\def\sphinxstyleindexentry {\texttt}
-\protected\def\sphinxstyleindexextra #1{ \emph{(#1)}}
-\protected\def\sphinxstyleindexpageref {, \pageref}
-\protected\def\sphinxstyletopictitle #1{\textbf{#1}\par\medskip}
-\let\sphinxstylesidebartitle\sphinxstyletopictitle
-\protected\def\sphinxstyleothertitle {\textbf}
-\protected\def\sphinxstylesidebarsubtitle #1{~\\\textbf{#1} \smallskip}
-% \text.. commands do not allow multiple paragraphs
-\let\sphinxstylethead\empty
-\protected\def\sphinxstyletheadfamily {\ifx\sphinxstylethead\empty\sffamily\fi}
-\AtBeginDocument{\ifx\sphinxstylethead\empty\else
-\sphinxdeprecationwarning{\sphinxstylethead}{1.6}{1.7}{%
- \string\sphinxstyletheadfamily\space replaces it
- (it defaults to \string\sffamily) to allow use^^J
- with multiple paragraphs. Backwards compatibility is maintained, but please^^J
- move customization into \string\sphinxstyletheadfamily\space
- in time for 1.7.^^J
- And if you do it now, you will spare yourself this warning!}\fi}
-\protected\def\sphinxstyleemphasis {\emph}
-\protected\def\sphinxstyleliteralemphasis#1{\emph{\sphinxcode{#1}}}
-\protected\def\sphinxstylestrong {\textbf}
-\protected\def\sphinxstyleliteralstrong {\sphinxbfcode}
-\protected\def\sphinxstyleabbreviation {\textsc}
-\protected\def\sphinxstyleliteralintitle {\sphinxcode}
-\newcommand*\sphinxstylecodecontinued[1]{\footnotesize(#1)}%
-\newcommand*\sphinxstylecodecontinues[1]{\footnotesize(#1)}%
-% figure legend comes after caption and may contain arbitrary body elements
-\newenvironment{sphinxlegend}{\par\small}{\par}
-
-% Declare Unicode characters used by linux tree command to pdflatex utf8/utf8x
-\def\spx@bd#1#2{%
- \leavevmode
- \begingroup
- \ifx\spx@bd@height \@undefined\def\spx@bd@height{\baselineskip}\fi
- \ifx\spx@bd@width \@undefined\setbox0\hbox{0}\def\spx@bd@width{\wd0 }\fi
- \ifx\spx@bd@thickness\@undefined\def\spx@bd@thickness{.6\p@}\fi
- \ifx\spx@bd@lower \@undefined\def\spx@bd@lower{\dp\strutbox}\fi
- \lower\spx@bd@lower#1{#2}%
- \endgroup
-}%
-\@namedef{sphinx@u2500}% BOX DRAWINGS LIGHT HORIZONTAL
- {\spx@bd{\vbox to\spx@bd@height}
- {\vss\hrule\@height\spx@bd@thickness
- \@width\spx@bd@width\vss}}%
-\@namedef{sphinx@u2502}% BOX DRAWINGS LIGHT VERTICAL
- {\spx@bd{\hb@xt@\spx@bd@width}
- {\hss\vrule\@height\spx@bd@height
- \@width \spx@bd@thickness\hss}}%
-\@namedef{sphinx@u2514}% BOX DRAWINGS LIGHT UP AND RIGHT
- {\spx@bd{\hb@xt@\spx@bd@width}
- {\hss\raise.5\spx@bd@height
- \hb@xt@\z@{\hss\vrule\@height.5\spx@bd@height
- \@width \spx@bd@thickness\hss}%
- \vbox to\spx@bd@height{\vss\hrule\@height\spx@bd@thickness
- \@width.5\spx@bd@width\vss}}}%
-\@namedef{sphinx@u251C}% BOX DRAWINGS LIGHT VERTICAL AND RIGHT
- {\spx@bd{\hb@xt@\spx@bd@width}
- {\hss
- \hb@xt@\z@{\hss\vrule\@height\spx@bd@height
- \@width \spx@bd@thickness\hss}%
- \vbox to\spx@bd@height{\vss\hrule\@height\spx@bd@thickness
- \@width.5\spx@bd@width\vss}}}%
-\protected\def\sphinxunichar#1{\@nameuse{sphinx@u#1}}%
-
-% Tell TeX about pathological hyphenation cases:
-\hyphenation{Base-HTTP-Re-quest-Hand-ler}
-\endinput
+++ /dev/null
-\NeedsTeXFormat{LaTeX2e}[1995/12/01]
-\ProvidesPackage{sphinxhighlight}[2016/05/29 stylesheet for highlighting with pygments]
-
-
-\makeatletter
-\def\PYG@reset{\let\PYG@it=\relax \let\PYG@bf=\relax%
- \let\PYG@ul=\relax \let\PYG@tc=\relax%
- \let\PYG@bc=\relax \let\PYG@ff=\relax}
-\def\PYG@tok#1{\csname PYG@tok@#1\endcsname}
-\def\PYG@toks#1+{\ifx\relax#1\empty\else%
- \PYG@tok{#1}\expandafter\PYG@toks\fi}
-\def\PYG@do#1{\PYG@bc{\PYG@tc{\PYG@ul{%
- \PYG@it{\PYG@bf{\PYG@ff{#1}}}}}}}
-\def\PYG#1#2{\PYG@reset\PYG@toks#1+\relax+\PYG@do{#2}}
-
-\expandafter\def\csname PYG@tok@gd\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.63,0.00,0.00}{##1}}}
-\expandafter\def\csname PYG@tok@gu\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.50,0.00,0.50}{##1}}}
-\expandafter\def\csname PYG@tok@gt\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.00,0.27,0.87}{##1}}}
-\expandafter\def\csname PYG@tok@gs\endcsname{\let\PYG@bf=\textbf}
-\expandafter\def\csname PYG@tok@gr\endcsname{\def\PYG@tc##1{\textcolor[rgb]{1.00,0.00,0.00}{##1}}}
-\expandafter\def\csname PYG@tok@cm\endcsname{\let\PYG@it=\textit\def\PYG@tc##1{\textcolor[rgb]{0.25,0.50,0.56}{##1}}}
-\expandafter\def\csname PYG@tok@vg\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.73,0.38,0.84}{##1}}}
-\expandafter\def\csname PYG@tok@vi\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.73,0.38,0.84}{##1}}}
-\expandafter\def\csname PYG@tok@vm\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.73,0.38,0.84}{##1}}}
-\expandafter\def\csname PYG@tok@mh\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.13,0.50,0.31}{##1}}}
-\expandafter\def\csname PYG@tok@cs\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.25,0.50,0.56}{##1}}\def\PYG@bc##1{\setlength{\fboxsep}{0pt}\colorbox[rgb]{1.00,0.94,0.94}{\strut ##1}}}
-\expandafter\def\csname PYG@tok@ge\endcsname{\let\PYG@it=\textit}
-\expandafter\def\csname PYG@tok@vc\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.73,0.38,0.84}{##1}}}
-\expandafter\def\csname PYG@tok@il\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.13,0.50,0.31}{##1}}}
-\expandafter\def\csname PYG@tok@go\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.20,0.20,0.20}{##1}}}
-\expandafter\def\csname PYG@tok@cp\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@gi\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.00,0.63,0.00}{##1}}}
-\expandafter\def\csname PYG@tok@gh\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.00,0.00,0.50}{##1}}}
-\expandafter\def\csname PYG@tok@ni\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.84,0.33,0.22}{##1}}}
-\expandafter\def\csname PYG@tok@nl\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.00,0.13,0.44}{##1}}}
-\expandafter\def\csname PYG@tok@nn\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.05,0.52,0.71}{##1}}}
-\expandafter\def\csname PYG@tok@no\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.38,0.68,0.84}{##1}}}
-\expandafter\def\csname PYG@tok@na\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-\expandafter\def\csname PYG@tok@nb\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@nc\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.05,0.52,0.71}{##1}}}
-\expandafter\def\csname PYG@tok@nd\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.33,0.33,0.33}{##1}}}
-\expandafter\def\csname PYG@tok@ne\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@nf\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.02,0.16,0.49}{##1}}}
-\expandafter\def\csname PYG@tok@si\endcsname{\let\PYG@it=\textit\def\PYG@tc##1{\textcolor[rgb]{0.44,0.63,0.82}{##1}}}
-\expandafter\def\csname PYG@tok@s2\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-\expandafter\def\csname PYG@tok@nt\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.02,0.16,0.45}{##1}}}
-\expandafter\def\csname PYG@tok@nv\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.73,0.38,0.84}{##1}}}
-\expandafter\def\csname PYG@tok@s1\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-\expandafter\def\csname PYG@tok@dl\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-\expandafter\def\csname PYG@tok@ch\endcsname{\let\PYG@it=\textit\def\PYG@tc##1{\textcolor[rgb]{0.25,0.50,0.56}{##1}}}
-\expandafter\def\csname PYG@tok@m\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.13,0.50,0.31}{##1}}}
-\expandafter\def\csname PYG@tok@gp\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.78,0.36,0.04}{##1}}}
-\expandafter\def\csname PYG@tok@sh\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-\expandafter\def\csname PYG@tok@ow\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@sx\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.78,0.36,0.04}{##1}}}
-\expandafter\def\csname PYG@tok@bp\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@c1\endcsname{\let\PYG@it=\textit\def\PYG@tc##1{\textcolor[rgb]{0.25,0.50,0.56}{##1}}}
-\expandafter\def\csname PYG@tok@fm\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.02,0.16,0.49}{##1}}}
-\expandafter\def\csname PYG@tok@o\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.40,0.40,0.40}{##1}}}
-\expandafter\def\csname PYG@tok@kc\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@c\endcsname{\let\PYG@it=\textit\def\PYG@tc##1{\textcolor[rgb]{0.25,0.50,0.56}{##1}}}
-\expandafter\def\csname PYG@tok@mf\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.13,0.50,0.31}{##1}}}
-\expandafter\def\csname PYG@tok@err\endcsname{\def\PYG@bc##1{\setlength{\fboxsep}{0pt}\fcolorbox[rgb]{1.00,0.00,0.00}{1,1,1}{\strut ##1}}}
-\expandafter\def\csname PYG@tok@mb\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.13,0.50,0.31}{##1}}}
-\expandafter\def\csname PYG@tok@ss\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.32,0.47,0.09}{##1}}}
-\expandafter\def\csname PYG@tok@sr\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.14,0.33,0.53}{##1}}}
-\expandafter\def\csname PYG@tok@mo\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.13,0.50,0.31}{##1}}}
-\expandafter\def\csname PYG@tok@kd\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@mi\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.13,0.50,0.31}{##1}}}
-\expandafter\def\csname PYG@tok@kn\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@cpf\endcsname{\let\PYG@it=\textit\def\PYG@tc##1{\textcolor[rgb]{0.25,0.50,0.56}{##1}}}
-\expandafter\def\csname PYG@tok@kr\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@s\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-\expandafter\def\csname PYG@tok@kp\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@w\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.73,0.73,0.73}{##1}}}
-\expandafter\def\csname PYG@tok@kt\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.56,0.13,0.00}{##1}}}
-\expandafter\def\csname PYG@tok@sc\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-\expandafter\def\csname PYG@tok@sb\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-\expandafter\def\csname PYG@tok@sa\endcsname{\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-\expandafter\def\csname PYG@tok@k\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.00,0.44,0.13}{##1}}}
-\expandafter\def\csname PYG@tok@se\endcsname{\let\PYG@bf=\textbf\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-\expandafter\def\csname PYG@tok@sd\endcsname{\let\PYG@it=\textit\def\PYG@tc##1{\textcolor[rgb]{0.25,0.44,0.63}{##1}}}
-
-\def\PYGZbs{\char`\\}
-\def\PYGZus{\char`\_}
-\def\PYGZob{\char`\{}
-\def\PYGZcb{\char`\}}
-\def\PYGZca{\char`\^}
-\def\PYGZam{\char`\&}
-\def\PYGZlt{\char`\<}
-\def\PYGZgt{\char`\>}
-\def\PYGZsh{\char`\#}
-\def\PYGZpc{\char`\%}
-\def\PYGZdl{\char`\$}
-\def\PYGZhy{\char`\-}
-\def\PYGZsq{\char`\'}
-\def\PYGZdq{\char`\"}
-\def\PYGZti{\char`\~}
-% for compatibility with earlier versions
-\def\PYGZat{@}
-\def\PYGZlb{[}
-\def\PYGZrb{]}
-\makeatother
-
-\renewcommand\PYGZsq{\textquotesingle}
+++ /dev/null
-%
-% sphinxhowto.cls for Sphinx (http://sphinx-doc.org/)
-%
-
-\NeedsTeXFormat{LaTeX2e}[1995/12/01]
-\ProvidesClass{sphinxhowto}[2017/03/26 v1.6 Document class (Sphinx HOWTO)]
-
-% 'oneside' option overriding the 'twoside' default
-\newif\if@oneside
-\DeclareOption{oneside}{\@onesidetrue}
-% Pass remaining document options to the parent class.
-\DeclareOption*{\PassOptionsToClass{\CurrentOption}{\sphinxdocclass}}
-\ProcessOptions\relax
-
-% Default to two-side document
-\if@oneside
-% nothing to do (oneside is the default)
-\else
-\PassOptionsToClass{twoside}{\sphinxdocclass}
-\fi
-
-\LoadClass{\sphinxdocclass}
-
-% Set some sane defaults for section numbering depth and TOC depth. You can
-% reset these counters in your preamble.
-%
-\setcounter{secnumdepth}{2}
-
-% Change the title page to look a bit better, and fit in with the fncychap
-% ``Bjarne'' style a bit better.
-%
-\renewcommand{\maketitle}{%
- \noindent\rule{\textwidth}{1pt}\par
- \begingroup % for PDF information dictionary
- \def\endgraf{ }\def\and{\& }%
- \pdfstringdefDisableCommands{\def\\{, }}% overwrite hyperref setup
- \hypersetup{pdfauthor={\@author}, pdftitle={\@title}}%
- \endgroup
- \begin{flushright}
- \sphinxlogo
- \py@HeaderFamily
- {\Huge \@title }\par
- {\itshape\large \py@release \releaseinfo}\par
- \vspace{25pt}
- {\Large
- \begin{tabular}[t]{c}
- \@author
- \end{tabular}}\par
- \vspace{25pt}
- \@date \par
- \py@authoraddress \par
- \end{flushright}
- \@thanks
- \setcounter{footnote}{0}
- \let\thanks\relax\let\maketitle\relax
- %\gdef\@thanks{}\gdef\@author{}\gdef\@title{}
-}
-
-\newcommand{\sphinxtableofcontents}{
- \begingroup
- \parskip = 0mm
- \tableofcontents
- \endgroup
- \rule{\textwidth}{1pt}
- \vspace{12pt}
-}
-
-\@ifundefined{fancyhf}{
- \pagestyle{plain}}{
- \pagestyle{normal}} % start this way; change for
-\pagenumbering{arabic} % ToC & chapters
-
-\thispagestyle{empty}
-
-% Fix the bibliography environment to add an entry to the Table of
-% Contents.
-% For an article document class this environment is a section,
-% so no page break before it.
-%
-\newenvironment{sphinxthebibliography}[1]{%
- % \phantomsection % not needed here since TeXLive 2010's hyperref
- \begin{thebibliography}{1}%
- \addcontentsline{toc}{section}{\ifdefined\refname\refname\else\ifdefined\bibname\bibname\fi\fi}}{\end{thebibliography}}
-
-
-% Same for the indices.
-% The memoir class already does this, so we don't duplicate it in that case.
-%
-\@ifclassloaded{memoir}
- {\newenvironment{sphinxtheindex}{\begin{theindex}}{\end{theindex}}}
- {\newenvironment{sphinxtheindex}{%
- \phantomsection % needed because no chapter, section, ... is created by theindex
- \begin{theindex}%
- \addcontentsline{toc}{section}{\indexname}}{\end{theindex}}}
+++ /dev/null
-%
-% sphinxmanual.cls for Sphinx (http://sphinx-doc.org/)
-%
-
-\NeedsTeXFormat{LaTeX2e}[1995/12/01]
-\ProvidesClass{sphinxmanual}[2017/03/26 v1.6 Document class (Sphinx manual)]
-
-% chapters starting at odd pages (overridden by 'openany' document option)
-\PassOptionsToClass{openright}{\sphinxdocclass}
-
-% 'oneside' option overriding the 'twoside' default
-\newif\if@oneside
-\DeclareOption{oneside}{\@onesidetrue}
-% Pass remaining document options to the parent class.
-\DeclareOption*{\PassOptionsToClass{\CurrentOption}{\sphinxdocclass}}
-\ProcessOptions\relax
-
-% Defaults two-side document
-\if@oneside
-% nothing to do (oneside is the default)
-\else
-\PassOptionsToClass{twoside}{\sphinxdocclass}
-\fi
-
-\LoadClass{\sphinxdocclass}
-
-% Set some sane defaults for section numbering depth and TOC depth. You can
-% reset these counters in your preamble.
-%
-\setcounter{secnumdepth}{2}
-\setcounter{tocdepth}{1}
-
-% Change the title page to look a bit better, and fit in with the fncychap
-% ``Bjarne'' style a bit better.
-%
-\renewcommand{\maketitle}{%
- \let\spx@tempa\relax
- \ifHy@pageanchor\def\spx@tempa{\Hy@pageanchortrue}\fi
- \hypersetup{pageanchor=false}% avoid duplicate destination warnings
- \begin{titlepage}%
- \let\footnotesize\small
- \let\footnoterule\relax
- \noindent\rule{\textwidth}{1pt}\par
- \begingroup % for PDF information dictionary
- \def\endgraf{ }\def\and{\& }%
- \pdfstringdefDisableCommands{\def\\{, }}% overwrite hyperref setup
- \hypersetup{pdfauthor={\@author}, pdftitle={\@title}}%
- \endgroup
- \begin{flushright}%
- \sphinxlogo
- \py@HeaderFamily
- {\Huge \@title \par}
- {\itshape\LARGE \py@release\releaseinfo \par}
- \vfill
- {\LARGE
- \begin{tabular}[t]{c}
- \@author
- \end{tabular}
- \par}
- \vfill\vfill
- {\large
- \@date \par
- \vfill
- \py@authoraddress \par
- }%
- \end{flushright}%\par
- \@thanks
- \end{titlepage}%
- \setcounter{footnote}{0}%
- \let\thanks\relax\let\maketitle\relax
- %\gdef\@thanks{}\gdef\@author{}\gdef\@title{}
- \if@openright\cleardoublepage\else\clearpage\fi
- \spx@tempa
-}
-
-\newcommand{\sphinxtableofcontents}{%
- \pagenumbering{roman}%
- \pagestyle{plain}%
- \begingroup
- \parskip \z@skip
- \tableofcontents
- \endgroup
- % before resetting page counter, let's do the right thing.
- \if@openright\cleardoublepage\else\clearpage\fi
- \pagenumbering{arabic}%
- \ifdefined\fancyhf\pagestyle{normal}\fi
-}
-
-% This is needed to get the width of the section # area wide enough in the
-% library reference. Doing it here keeps it the same for all the manuals.
-%
-\renewcommand*\l@section{\@dottedtocline{1}{1.5em}{2.6em}}
-\renewcommand*\l@subsection{\@dottedtocline{2}{4.1em}{3.5em}}
-
-% Fix the bibliography environment to add an entry to the Table of
-% Contents.
-% For a report document class this environment is a chapter.
-%
-\newenvironment{sphinxthebibliography}[1]{%
- \if@openright\cleardoublepage\else\clearpage\fi
- % \phantomsection % not needed here since TeXLive 2010's hyperref
- \begin{thebibliography}{1}%
- \addcontentsline{toc}{chapter}{\bibname}}{\end{thebibliography}}
-
-% Same for the indices.
-% The memoir class already does this, so we don't duplicate it in that case.
-%
-\@ifclassloaded{memoir}
- {\newenvironment{sphinxtheindex}{\begin{theindex}}{\end{theindex}}}
- {\newenvironment{sphinxtheindex}{%
- \if@openright\cleardoublepage\else\clearpage\fi
- \phantomsection % needed as no chapter, section, ... created
- \begin{theindex}%
- \addcontentsline{toc}{chapter}{\indexname}}{\end{theindex}}}
+++ /dev/null
-\NeedsTeXFormat{LaTeX2e}
-\ProvidesPackage{sphinxmulticell}%
- [2017/02/23 v1.6 better span rows and columns of a table (Sphinx team)]%
-\DeclareOption*{\PackageWarning{sphinxmulticell}{Option `\CurrentOption' is unknown}}%
-\ProcessOptions\relax
-%
-% --- MULTICOLUMN ---
-% standard LaTeX's \multicolumn
-% 1. does not allow verbatim contents,
-% 2. interacts very poorly with tabulary.
-%
-% It is needed to write own macros for Sphinx: to allow code-blocks in merged
-% cells rendered by tabular/longtable, and to allow multi-column cells with
-% paragraphs to be taken into account sanely by tabulary algorithm for column
-% widths.
-%
-% This requires quite a bit of hacking. First, in Sphinx, the multi-column
-% contents will *always* be wrapped in a varwidth environment. The issue
-% becomes to pass it the correct target width. We must trick tabulary into
-% believing the multicolumn is simply separate columns, else tabulary does not
-% incorporate the contents in its algorithm. But then we must clear the
-% vertical rules...
-%
-% configuration of tabulary
-\setlength{\tymin}{3\fontcharwd\font`0 }% minimal width of "squeezed" columns
-\setlength{\tymax}{10000pt}% allow enough room for paragraphs to "compete"
-% we need access to tabulary's final computed width. \@tempdima is too volatile
-% to hope it has kept tabulary's value when \sphinxcolwidth needs it.
-\newdimen\sphinx@TY@tablewidth
-\def\tabulary{%
- \def\TY@final{\sphinx@TY@tablewidth\@tempdima\tabular}%
- \let\endTY@final\endtabular
- \TY@tabular}%
-% next hack is needed only if user has set latex_use_latex_multicolumn to True:
-% it fixes tabulary's bug with \multicolumn defined "short" in first pass. (if
-% upstream tabulary adds a \long, our extra one causes no harm)
-\def\sphinx@tempa #1\def\multicolumn#2#3#4#5#6#7#8#9\sphinx@tempa
- {\def\TY@tab{#1\long\def\multicolumn####1####2####3{\multispan####1\relax}#9}}%
-\expandafter\sphinx@tempa\TY@tab\sphinx@tempa
-%
-% TN. 1: as \omit is never executed, Sphinx multicolumn does not need to worry
-% like standard multicolumn about |l| vs l|. On the other hand it assumes
-% columns are separated by a | ... (if not it will add extraneous
-% \arrayrulewidth space for each column separation in its estimate of available
-% width).
-%
-% TN. 1b: as Sphinx multicolumn uses neither \omit nor \span, it can not
-% (easily) get rid of extra macros from >{...} or <{...} between columns. At
-% least, it has been made compatible with colortbl's \columncolor.
-%
-% TN. 2: tabulary's second pass is handled like tabular/longtable's single
-% pass, with the difference that we hacked \TY@final to set in
-% \sphinx@TY@tablewidth the final target width as computed by tabulary. This is
-% needed only to handle columns with a "horizontal" specifier: "p" type columns
-% (inclusive of tabulary's LJRC) holds the target column width in the
-% \linewidth dimension.
-%
-% TN. 3: use of \begin{sphinxmulticolumn}...\end{sphinxmulticolumn} mark-up
-% would need some hacking around the fact that groups can not span across table
-% cells (the code does inserts & tokens, see TN1b). It was decided to keep it
-% simple with \sphinxstartmulticolumn...\sphinxstopmulticolumn.
-%
-% MEMO about nesting: if sphinxmulticolumn is encountered in a nested tabular
-% inside a tabulary it will think to be at top level in the tabulary. But
-% Sphinx generates no nested tables, and if some LaTeX macro uses internally a
-% tabular this will not have a \sphinxstartmulticolumn within it!
-%
-\def\sphinxstartmulticolumn{%
- \ifx\equation$% $ tabulary's first pass
- \expandafter\sphinx@TYI@start@multicolumn
- \else % either not tabulary or tabulary's second pass
- \expandafter\sphinx@start@multicolumn
- \fi
-}%
-\def\sphinxstopmulticolumn{%
- \ifx\equation$% $ tabulary's first pass
- \expandafter\sphinx@TYI@stop@multicolumn
- \else % either not tabulary or tabulary's second pass
- \ignorespaces
- \fi
-}%
-\def\sphinx@TYI@start@multicolumn#1{%
- % use \gdef always to avoid stack space build up
- \gdef\sphinx@tempa{#1}\begingroup\setbox\z@\hbox\bgroup
-}%
-\def\sphinx@TYI@stop@multicolumn{\egroup % varwidth was used with \tymax
- \xdef\sphinx@tempb{\the\dimexpr\wd\z@/\sphinx@tempa}% per column width
- \endgroup
- \expandafter\sphinx@TYI@multispan\expandafter{\sphinx@tempa}%
-}%
-\def\sphinx@TYI@multispan #1{%
- \kern\sphinx@tempb\ignorespaces % the per column occupied width
- \ifnum#1>\@ne % repeat, taking into account subtleties of TeX's & ...
- \expandafter\sphinx@TYI@multispan@next\expandafter{\the\numexpr#1-\@ne\expandafter}%
- \fi
-}%
-\def\sphinx@TYI@multispan@next{&\relax\sphinx@TYI@multispan}%
-%
-% Now the branch handling either the second pass of tabulary or the single pass
-% of tabular/longtable. This is the delicate part where we gather the
-% dimensions from the p columns either set-up by tabulary or by user p column
-% or Sphinx \X, \Y columns. The difficulty is that to get the said width, the
-% template must be inserted (other hacks would be horribly complicated except
-% if we rewrote crucial parts of LaTeX's \@array !) and we can not do
-% \omit\span like standard \multicolumn's easy approach. Thus we must cancel
-% the \vrule separators. Also, perhaps the column specifier is of the l, c, r
-% type, then we attempt an ad hoc rescue to give varwidth a reasonable target
-% width.
-\def\sphinx@start@multicolumn#1{%
- \gdef\sphinx@multiwidth{0pt}\gdef\sphinx@tempa{#1}\sphinx@multispan{#1}%
-}%
-\def\sphinx@multispan #1{%
- \ifnum#1=\@ne\expandafter\sphinx@multispan@end
- \else\expandafter\sphinx@multispan@next
- \fi {#1}%
-}%
-\def\sphinx@multispan@next #1{%
- % trick to recognize L, C, R, J or p, m, b type columns
- \ifdim\baselineskip>\z@
- \gdef\sphinx@tempb{\linewidth}%
- \else
- % if in an l, r, c type column, try and hope for the best
- \xdef\sphinx@tempb{\the\dimexpr(\ifx\TY@final\@undefined\linewidth\else
- \sphinx@TY@tablewidth\fi-\arrayrulewidth)/\sphinx@tempa
- -\tw@\tabcolsep-\arrayrulewidth\relax}%
- \fi
- \noindent\kern\sphinx@tempb\relax
- \xdef\sphinx@multiwidth
- {\the\dimexpr\sphinx@multiwidth+\sphinx@tempb+\tw@\tabcolsep+\arrayrulewidth}%
- % hack the \vline and the colortbl macros
- \sphinx@hack@vline\sphinx@hack@CT&\relax
- % repeat
- \expandafter\sphinx@multispan\expandafter{\the\numexpr#1-\@ne}%
-}%
-% packages like colortbl add group levels, we need to "climb back up" to be
-% able to hack the \vline and also the colortbl inserted tokens. This creates
-% empty space whether or not the columns were | separated:
-\def\sphinx@hack@vline{\ifnum\currentgrouptype=6\relax
- \kern\arrayrulewidth\arrayrulewidth\z@\else\aftergroup\sphinx@hack@vline\fi}%
-\def\sphinx@hack@CT{\ifnum\currentgrouptype=6\relax
- \let\CT@setup\sphinx@CT@setup\else\aftergroup\sphinx@hack@CT\fi}%
-% It turns out \CT@row@color is not expanded contrarily to \CT@column@color
-% during LaTeX+colortbl preamble preparation, hence it would be possible for
-% \sphinx@CT@setup to discard only the column color and choose to obey or not
-% row color and cell color. It would even be possible to propagate cell color
-% to row color for the duration of the Sphinx multicolumn... the (provisional?)
-% choice has been made to cancel the colortbl colours for the multicolumn
-% duration.
-\def\sphinx@CT@setup #1\endgroup{\endgroup}% hack to remove colour commands
-\def\sphinx@multispan@end#1{%
- % first, trace back our steps horizontally
- \noindent\kern-\dimexpr\sphinx@multiwidth\relax
- % and now we set the final computed width for the varwidth environment
- \ifdim\baselineskip>\z@
- \xdef\sphinx@multiwidth{\the\dimexpr\sphinx@multiwidth+\linewidth}%
- \else
- \xdef\sphinx@multiwidth{\the\dimexpr\sphinx@multiwidth+
- (\ifx\TY@final\@undefined\linewidth\else
- \sphinx@TY@tablewidth\fi-\arrayrulewidth)/\sphinx@tempa
- -\tw@\tabcolsep-\arrayrulewidth\relax}%
- \fi
- % we need to remove colour set-up also for last cell of the multi-column
- \aftergroup\sphinx@hack@CT
-}%
-\newcommand*\sphinxcolwidth[2]{%
- % this dimension will always be used for varwidth, and serves as maximum
- % width when cells are merged either via multirow or multicolumn or both,
- % as always their contents is wrapped in varwidth environment.
- \ifnum#1>\@ne % multi-column (and possibly also multi-row)
- % we wrote our own multicolumn code especially to handle that (and allow
- % verbatim contents)
- \ifx\equation$%$
- \tymax % first pass of tabulary (cf MEMO above regarding nesting)
- \else % the \@gobble thing is for compatibility with standard \multicolumn
- \sphinx@multiwidth\@gobble{#1/#2}%
- \fi
- \else % single column multirow
- \ifx\TY@final\@undefined % not a tabulary.
- \ifdim\baselineskip>\z@
- % in a p{..} type column, \linewidth is the target box width
- \linewidth
- \else
- % l, c, r columns. Do our best.
- \dimexpr(\linewidth-\arrayrulewidth)/#2-
- \tw@\tabcolsep-\arrayrulewidth\relax
- \fi
- \else % in tabulary
- \ifx\equation$%$% first pass
- \tymax % it is set to a big value so that paragraphs can express themselves
- \else
- % second pass.
- \ifdim\baselineskip>\z@
- \linewidth % in a L, R, C, J column or a p, \X, \Y ...
- \else
- % we have hacked \TY@final to put in \sphinx@TY@tablewidth the table width
- \dimexpr(\sphinx@TY@tablewidth-\arrayrulewidth)/#2-
- \tw@\tabcolsep-\arrayrulewidth\relax
- \fi
- \fi
- \fi
- \fi
-}%
-% fallback default in case user has set latex_use_latex_multicolumn to True:
-% \sphinxcolwidth will use this only inside LaTeX's standard \multicolumn
-\def\sphinx@multiwidth #1#2{\dimexpr % #1 to gobble the \@gobble (!)
- (\ifx\TY@final\@undefined\linewidth\else\sphinx@TY@tablewidth\fi
- -\arrayrulewidth)*#2-\tw@\tabcolsep-\arrayrulewidth\relax}%
-%
-% --- MULTIROW ---
-% standard \multirow
-% 1. does not allow verbatim contents,
-% 2. does not allow blank lines in its argument,
-% 3. its * specifier means to typeset "horizontally" which is very
-% bad for paragraph content. 2016 version has = specifier but it
-% must be used with p type columns only, else results are bad,
-% 4. it requires manual intervention if the contents is too long to fit
-% in the asked-for number of rows.
-% 5. colour panels (either from \rowcolor or \columncolor) will hide
-% the bottom part of multirow text, hence manual tuning is needed
-% to put the multirow insertion at the _bottom_.
-%
-% The Sphinx solution consists in always having contents wrapped
-% in a varwidth environment so that it makes sense to estimate how many
-% lines it will occupy, and then ensure by insertion of suitable struts
-% that the table rows have the needed height. The needed mark-up is done
-% by LaTeX writer, which has its own id for the merged cells.
-%
-% The colour issue is solved by clearing colour panels in all cells,
-% whether or not the multirow is single-column or multi-column.
-%
-% In passing we obtain baseline alignements across rows (only if
-% \arraylinestretch is 1, as LaTeX's does not obey \arraylinestretch in "p"
-% multi-line contents, only first and last line...)
-%
-% TODO: examine the situation with \arraylinestretch > 1. The \extrarowheight
-% is hopeless for multirow anyhow, it makes baseline alignment strictly
-% impossible.
-\newcommand\sphinxmultirow[2]{\begingroup
- % #1 = nb of spanned rows, #2 = Sphinx id of "cell", #3 = contents
- % but let's fetch #3 in a way allowing verbatim contents !
- \def\sphinx@nbofrows{#1}\def\sphinx@cellid{#2}%
- \afterassignment\sphinx@multirow\let\next=
-}%
-\def\sphinx@multirow {%
- \setbox\z@\hbox\bgroup\aftergroup\sphinx@@multirow\strut
-}%
-\def\sphinx@@multirow {%
- % The contents, which is a varwidth environment, has been captured in
- % \box0 (a \hbox).
- % We have with \sphinx@cellid an assigned unique id. The goal is to give
- % about the same height to all the involved rows.
- % For this Sphinx will insert a \sphinxtablestrut{cell_id} mark-up
- % in LaTeX file and the expansion of the latter will do the suitable thing.
- \dimen@\dp\z@
- \dimen\tw@\ht\@arstrutbox
- \advance\dimen@\dimen\tw@
- \advance\dimen\tw@\dp\@arstrutbox
- \count@=\dimen@ % type conversion dim -> int
- \count\tw@=\dimen\tw@
- \divide\count@\count\tw@ % TeX division truncates
- \advance\dimen@-\count@\dimen\tw@
- % 1300sp is about 0.02pt. For comparison a rule default width is 0.4pt.
- % (note that if \count@ holds 0, surely \dimen@>1300sp)
- \ifdim\dimen@>1300sp \advance\count@\@ne \fi
- % now \count@ holds the count L of needed "lines"
- % and \sphinx@nbofrows holds the number N of rows
- % we have L >= 1 and N >= 1
- % if L is a multiple of N, ... clear what to do !
- % else write L = qN + r, 1 <= r < N and we will
- % arrange for each row to have enough space for:
- % q+1 "lines" in each of the first r rows
- % q "lines" in each of the (N-r) bottom rows
- % for a total of (q+1) * r + q * (N-r) = q * N + r = L
- % It is possible that q == 0.
- \count\tw@\count@
- % the TeX division truncates
- \divide\count\tw@\sphinx@nbofrows\relax
- \count4\count\tw@ % q
- \multiply\count\tw@\sphinx@nbofrows\relax
- \advance\count@-\count\tw@ % r
- \expandafter\xdef\csname sphinx@tablestrut_\sphinx@cellid\endcsname
- {\noexpand\sphinx@tablestrut{\the\count4}{\the\count@}{\sphinx@cellid}}%
- \dp\z@\z@
- % this will use the real height if it is >\ht\@arstrutbox
- \sphinxtablestrut{\sphinx@cellid}\box\z@
- \endgroup % group was opened in \sphinxmultirow
-}%
-\newcommand*\sphinxtablestrut[1]{%
- % #1 is a "cell_id", i.e. the id of a merged group of table cells
- \csname sphinx@tablestrut_#1\endcsname
-}%
-% LaTeX typesets the table row by row, hence each execution can do
-% an update for the next row.
-\newcommand*\sphinx@tablestrut[3]{\begingroup
- % #1 = q, #2 = (initially) r, #3 = cell_id, q+1 lines in first r rows
- % if #2 = 0, create space for max(q,1) table lines
- % if #2 > 0, create space for q+1 lines and decrement #2
- \leavevmode
- \count@#1\relax
- \ifnum#2=\z@
- \ifnum\count@=\z@\count@\@ne\fi
- \else
- % next row will be with a #2 decremented by one
- \expandafter\xdef\csname sphinx@tablestrut_#3\endcsname
- {\noexpand\sphinx@tablestrut{#1}{\the\numexpr#2-\@ne}{#3}}%
- \advance\count@\@ne
- \fi
- \vrule\@height\ht\@arstrutbox
- \@depth\dimexpr\count@\ht\@arstrutbox+\count@\dp\@arstrutbox-\ht\@arstrutbox\relax
- \@width\z@
- \endgroup
- % we need this to avoid colour panels hiding bottom parts of multirow text
- \sphinx@hack@CT
-}%
-\endinput
-%%
-%% End of file `sphinxmulticell.sty'.
+++ /dev/null
-%% Generated by Sphinx.
-\def\sphinxdocclass{report}
-\documentclass[letterpaper,10pt,english]{sphinxmanual}
-\ifdefined\pdfpxdimen
- \let\sphinxpxdimen\pdfpxdimen\else\newdimen\sphinxpxdimen
-\fi \sphinxpxdimen=.75bp\relax
-
-\usepackage[utf8]{inputenc}
-\ifdefined\DeclareUnicodeCharacter
- \ifdefined\DeclareUnicodeCharacterAsOptional
- \DeclareUnicodeCharacter{"00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{"2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{"2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{"2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{"251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{"2572}{\textbackslash}
- \else
- \DeclareUnicodeCharacter{00A0}{\nobreakspace}
- \DeclareUnicodeCharacter{2500}{\sphinxunichar{2500}}
- \DeclareUnicodeCharacter{2502}{\sphinxunichar{2502}}
- \DeclareUnicodeCharacter{2514}{\sphinxunichar{2514}}
- \DeclareUnicodeCharacter{251C}{\sphinxunichar{251C}}
- \DeclareUnicodeCharacter{2572}{\textbackslash}
- \fi
-\fi
-\usepackage{cmap}
-\usepackage[T1]{fontenc}
-\usepackage{amsmath,amssymb,amstext}
-\usepackage{babel}
-\usepackage{times}
-\usepackage[Bjarne]{fncychap}
-\usepackage[dontkeepoldnames]{sphinx}
-
-\usepackage{geometry}
-
-% Include hyperref last.
-\usepackage{hyperref}
-% Fix anchor placement for figures with captions.
-\usepackage{hypcap}% it must be loaded after hyperref.
-% Set up styles of URL: it should be placed after hyperref.
-\urlstyle{same}
-
-\addto\captionsenglish{\renewcommand{\figurename}{Fig.}}
-\addto\captionsenglish{\renewcommand{\tablename}{Table}}
-\addto\captionsenglish{\renewcommand{\literalblockname}{Listing}}
-
-\addto\captionsenglish{\renewcommand{\literalblockcontinuedname}{continued from previous page}}
-\addto\captionsenglish{\renewcommand{\literalblockcontinuesname}{continues on next page}}
-
-\addto\extrasenglish{\def\pageautorefname{page}}
-
-\setcounter{tocdepth}{1}
-
-
-
-\title{Kerberos User Guide}
-\date{ }
-\release{1.20.1}
-\author{MIT}
-\newcommand{\sphinxlogo}{\vbox{}}
-\renewcommand{\releasename}{Release}
-\makeindex
-
-\begin{document}
-
-\maketitle
-\sphinxtableofcontents
-\phantomsection\label{\detokenize{user/index::doc}}
-
-
-
-\chapter{Password management}
-\label{\detokenize{user/pwd_mgmt:for-users}}\label{\detokenize{user/pwd_mgmt::doc}}\label{\detokenize{user/pwd_mgmt:password-management}}
-Your password is the only way Kerberos has of verifying your identity.
-If someone finds out your password, that person can masquerade as
-you—send email that comes from you, read, edit, or delete your files,
-or log into other hosts as you—and no one will be able to tell the
-difference. For this reason, it is important that you choose a good
-password, and keep it secret. If you need to give access to your
-account to someone else, you can do so through Kerberos (see
-{\hyperref[\detokenize{user/pwd_mgmt:grant-access}]{\sphinxcrossref{\DUrole{std,std-ref}{Granting access to your account}}}}). You should never tell your password to anyone,
-including your system administrator, for any reason. You should
-change your password frequently, particularly any time you think
-someone may have found out what it is.
-
-
-\section{Changing your password}
-\label{\detokenize{user/pwd_mgmt:changing-your-password}}
-To change your Kerberos password, use the {\hyperref[\detokenize{user/user_commands/kpasswd:kpasswd-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kpasswd}}}} command.
-It will ask you for your old password (to prevent someone else from
-walking up to your computer when you’re not there and changing your
-password), and then prompt you for the new one twice. (The reason you
-have to type it twice is to make sure you have typed it correctly.)
-For example, user \sphinxcode{david} would do the following:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kpasswd}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{david}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}} \PYG{n}{Type} \PYG{n}{your} \PYG{n}{old} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{new} \PYG{n}{password}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}} \PYG{n}{Type} \PYG{n}{your} \PYG{n}{new} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{it} \PYG{n}{again}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{new} \PYG{n}{password} \PYG{n}{again}\PYG{o}{.}
-\PYG{n}{Password} \PYG{n}{changed}\PYG{o}{.}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-If \sphinxcode{david} typed the incorrect old password, he would get the
-following message:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kpasswd}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{david}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{incorrect} \PYG{n}{old} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{kpasswd}\PYG{p}{:} \PYG{n}{Password} \PYG{n}{incorrect} \PYG{k}{while} \PYG{n}{getting} \PYG{n}{initial} \PYG{n}{ticket}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-If you make a mistake and don’t type the new password the same way
-twice, kpasswd will ask you to try again:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kpasswd}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{david}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{old} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{new} \PYG{n}{password}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}} \PYG{n}{Type} \PYG{n}{the} \PYG{n}{new} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{Enter} \PYG{n}{it} \PYG{n}{again}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}} \PYG{n}{Type} \PYG{n}{a} \PYG{n}{different} \PYG{n}{new} \PYG{n}{password}\PYG{o}{.}
-\PYG{n}{kpasswd}\PYG{p}{:} \PYG{n}{Password} \PYG{n}{mismatch} \PYG{k}{while} \PYG{n}{reading} \PYG{n}{password}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-Once you change your password, it takes some time for the change to
-propagate through the system. Depending on how your system is set up,
-this might be anywhere from a few minutes to an hour or more. If you
-need to get new Kerberos tickets shortly after changing your password,
-try the new password. If the new password doesn’t work, try again
-using the old one.
-
-
-\section{Granting access to your account}
-\label{\detokenize{user/pwd_mgmt:grant-access}}\label{\detokenize{user/pwd_mgmt:granting-access-to-your-account}}
-If you need to give someone access to log into your account, you can
-do so through Kerberos, without telling the person your password.
-Simply create a file called {\hyperref[\detokenize{user/user_config/k5login:k5login-5}]{\sphinxcrossref{\DUrole{std,std-ref}{.k5login}}}} in your home directory.
-This file should contain the Kerberos principal of each person to whom
-you wish to give access. Each principal must be on a separate line.
-Here is a sample .k5login file:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{david}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
-\end{sphinxVerbatim}
-
-This file would allow the users \sphinxcode{jennifer} and \sphinxcode{david} to use your
-user ID, provided that they had Kerberos tickets in their respective
-realms. If you will be logging into other hosts across a network, you
-will want to include your own Kerberos principal in your .k5login file
-on each of these hosts.
-
-Using a .k5login file is much safer than giving out your password,
-because:
-\begin{itemize}
-\item {}
-You can take access away any time simply by removing the principal
-from your .k5login file.
-
-\item {}
-Although the user has full access to your account on one particular
-host (or set of hosts if your .k5login file is shared, e.g., over
-NFS), that user does not inherit your network privileges.
-
-\item {}
-Kerberos keeps a log of who obtains tickets, so a system
-administrator could find out, if necessary, who was capable of using
-your user ID at a particular time.
-
-\end{itemize}
-
-One common application is to have a .k5login file in root’s home
-directory, giving root access to that machine to the Kerberos
-principals listed. This allows system administrators to allow users
-to become root locally, or to log in remotely as root, without their
-having to give out the root password, and without anyone having to
-type the root password over the network.
-
-
-\section{Password quality verification}
-\label{\detokenize{user/pwd_mgmt:password-quality-verification}}
-TODO
-
-
-\chapter{Ticket management}
-\label{\detokenize{user/tkt_mgmt:ticket-management}}\label{\detokenize{user/tkt_mgmt::doc}}
-On many systems, Kerberos is built into the login program, and you get
-tickets automatically when you log in. Other programs, such as ssh,
-can forward copies of your tickets to a remote host. Most of these
-programs also automatically destroy your tickets when they exit.
-However, MIT recommends that you explicitly destroy your Kerberos
-tickets when you are through with them, just to be sure. One way to
-help ensure that this happens is to add the {\hyperref[\detokenize{user/user_commands/kdestroy:kdestroy-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kdestroy}}}} command
-to your .logout file. Additionally, if you are going to be away from
-your machine and are concerned about an intruder using your
-permissions, it is safest to either destroy all copies of your
-tickets, or use a screensaver that locks the screen.
-
-
-\section{Kerberos ticket properties}
-\label{\detokenize{user/tkt_mgmt:kerberos-ticket-properties}}
-There are various properties that Kerberos tickets can have:
-
-If a ticket is \sphinxstylestrong{forwardable}, then the KDC can issue a new ticket
-(with a different network address, if necessary) based on the
-forwardable ticket. This allows for authentication forwarding without
-requiring a password to be typed in again. For example, if a user
-with a forwardable TGT logs into a remote system, the KDC could issue
-a new TGT for that user with the network address of the remote system,
-allowing authentication on that host to work as though the user were
-logged in locally.
-
-When the KDC creates a new ticket based on a forwardable ticket, it
-sets the \sphinxstylestrong{forwarded} flag on that new ticket. Any tickets that are
-created based on a ticket with the forwarded flag set will also have
-their forwarded flags set.
-
-A \sphinxstylestrong{proxiable} ticket is similar to a forwardable ticket in that it
-allows a service to take on the identity of the client. Unlike a
-forwardable ticket, however, a proxiable ticket is only issued for
-specific services. In other words, a ticket-granting ticket cannot be
-issued based on a ticket that is proxiable but not forwardable.
-
-A \sphinxstylestrong{proxy} ticket is one that was issued based on a proxiable ticket.
-
-A \sphinxstylestrong{postdated} ticket is issued with the invalid flag set. After the
-starting time listed on the ticket, it can be presented to the KDC to
-obtain valid tickets.
-
-Ticket-granting tickets with the \sphinxstylestrong{postdateable} flag set can be used
-to obtain postdated service tickets.
-
-\sphinxstylestrong{Renewable} tickets can be used to obtain new session keys without
-the user entering their password again. A renewable ticket has two
-expiration times. The first is the time at which this particular
-ticket expires. The second is the latest possible expiration time for
-any ticket issued based on this renewable ticket.
-
-A ticket with the \sphinxstylestrong{initial flag} set was issued based on the
-authentication protocol, and not on a ticket-granting ticket.
-Application servers that wish to ensure that the user’s key has been
-recently presented for verification could specify that this flag must
-be set to accept the ticket.
-
-An \sphinxstylestrong{invalid} ticket must be rejected by application servers.
-Postdated tickets are usually issued with this flag set, and must be
-validated by the KDC before they can be used.
-
-A \sphinxstylestrong{preauthenticated} ticket is one that was only issued after the
-client requesting the ticket had authenticated itself to the KDC.
-
-The \sphinxstylestrong{hardware authentication} flag is set on a ticket which required
-the use of hardware for authentication. The hardware is expected to
-be possessed only by the client which requested the tickets.
-
-If a ticket has the \sphinxstylestrong{transit policy} checked flag set, then the KDC
-that issued this ticket implements the transited-realm check policy
-and checked the transited-realms list on the ticket. The
-transited-realms list contains a list of all intermediate realms
-between the realm of the KDC that issued the first ticket and that of
-the one that issued the current ticket. If this flag is not set, then
-the application server must check the transited realms itself or else
-reject the ticket.
-
-The \sphinxstylestrong{okay as delegate} flag indicates that the server specified in
-the ticket is suitable as a delegate as determined by the policy of
-that realm. Some client applications may use this flag to decide
-whether to forward tickets to a remote host, although many
-applications do not honor it.
-
-An \sphinxstylestrong{anonymous} ticket is one in which the named principal is a
-generic principal for that realm; it does not actually specify the
-individual that will be using the ticket. This ticket is meant only
-to securely distribute a session key.
-
-
-\section{Obtaining tickets with kinit}
-\label{\detokenize{user/tkt_mgmt:obtaining-tickets-with-kinit}}\label{\detokenize{user/tkt_mgmt:obtain-tkt}}
-If your site has integrated Kerberos V5 with the login system, you
-will get Kerberos tickets automatically when you log in. Otherwise,
-you may need to explicitly obtain your Kerberos tickets, using the
-{\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}} program. Similarly, if your Kerberos tickets expire,
-use the kinit program to obtain new ones.
-
-To use the kinit program, simply type \sphinxcode{kinit} and then type your
-password at the prompt. For example, Jennifer (whose username is
-\sphinxcode{jennifer}) works for Bleep, Inc. (a fictitious company with the
-domain name mit.edu and the Kerberos realm ATHENA.MIT.EDU). She would
-type:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kinit}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}} \PYG{p}{[}\PYG{n}{Type} \PYG{n}{jennifer}\PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{s password here.]}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-If you type your password incorrectly, kinit will give you the
-following error message:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kinit}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}} \PYG{p}{[}\PYG{n}{Type} \PYG{n}{the} \PYG{n}{wrong} \PYG{n}{password} \PYG{n}{here}\PYG{o}{.}\PYG{p}{]}
-\PYG{n}{kinit}\PYG{p}{:} \PYG{n}{Password} \PYG{n}{incorrect}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-and you won’t get Kerberos tickets.
-
-By default, kinit assumes you want tickets for your own username in
-your default realm. Suppose Jennifer’s friend David is visiting, and
-he wants to borrow a window to check his mail. David needs to get
-tickets for himself in his own realm, EXAMPLE.COM. He would type:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kinit} \PYG{n}{david}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{david}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}} \PYG{p}{[}\PYG{n}{Type} \PYG{n}{david}\PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{s password here.]}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-David would then have tickets which he could use to log onto his own
-machine. Note that he typed his password locally on Jennifer’s
-machine, but it never went over the network. Kerberos on the local
-host performed the authentication to the KDC in the other realm.
-
-If you want to be able to forward your tickets to another host, you
-need to request forwardable tickets. You do this by specifying the
-\sphinxstylestrong{-f} option:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kinit} \PYG{o}{\PYGZhy{}}\PYG{n}{f}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}} \PYG{p}{[}\PYG{n}{Type} \PYG{n}{your} \PYG{n}{password} \PYG{n}{here}\PYG{o}{.}\PYG{p}{]}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-Note that kinit does not tell you that it obtained forwardable
-tickets; you can verify this using the {\hyperref[\detokenize{user/user_commands/klist:klist-1}]{\sphinxcrossref{\DUrole{std,std-ref}{klist}}}} command (see
-{\hyperref[\detokenize{user/tkt_mgmt:view-tkt}]{\sphinxcrossref{\DUrole{std,std-ref}{Viewing tickets with klist}}}}).
-
-Normally, your tickets are good for your system’s default ticket
-lifetime, which is ten hours on many systems. You can specify a
-different ticket lifetime with the \sphinxstylestrong{-l} option. Add the letter
-\sphinxstylestrong{s} to the value for seconds, \sphinxstylestrong{m} for minutes, \sphinxstylestrong{h} for hours, or
-\sphinxstylestrong{d} for days. For example, to obtain forwardable tickets for
-\sphinxcode{david@EXAMPLE.COM} that would be good for three hours, you would
-type:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kinit} \PYG{o}{\PYGZhy{}}\PYG{n}{f} \PYG{o}{\PYGZhy{}}\PYG{n}{l} \PYG{l+m+mi}{3}\PYG{n}{h} \PYG{n}{david}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{Password} \PYG{k}{for} \PYG{n}{david}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}\PYG{p}{:} \PYG{o}{\PYGZlt{}}\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}} \PYG{p}{[}\PYG{n}{Type} \PYG{n}{david}\PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{s password here.]}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-\begin{sphinxadmonition}{note}{Note:}
-You cannot mix units; specifying a lifetime of 3h30m would
-result in an error. Note also that most systems specify a
-maximum ticket lifetime. If you request a longer ticket
-lifetime, it will be automatically truncated to the maximum
-lifetime.
-\end{sphinxadmonition}
-
-
-\section{Viewing tickets with klist}
-\label{\detokenize{user/tkt_mgmt:viewing-tickets-with-klist}}\label{\detokenize{user/tkt_mgmt:view-tkt}}
-The {\hyperref[\detokenize{user/user_commands/klist:klist-1}]{\sphinxcrossref{\DUrole{std,std-ref}{klist}}}} command shows your tickets. When you first obtain
-tickets, you will have only the ticket-granting ticket. The listing
-would look like this:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{klist}
-\PYG{n}{Ticket} \PYG{n}{cache}\PYG{p}{:} \PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{krb5cc\PYGZus{}ttypa}
-\PYG{n}{Default} \PYG{n}{principal}\PYG{p}{:} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-
-\PYG{n}{Valid} \PYG{n}{starting} \PYG{n}{Expires} \PYG{n}{Service} \PYG{n}{principal}
-\PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{19}\PYG{p}{:}\PYG{l+m+mi}{49}\PYG{p}{:}\PYG{l+m+mi}{21} \PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{08}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{05}\PYG{p}{:}\PYG{l+m+mi}{49}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-The ticket cache is the location of your ticket file. In the above
-example, this file is named \sphinxcode{/tmp/krb5cc\_ttypa}. The default
-principal is your Kerberos principal.
-
-The “valid starting” and “expires” fields describe the period of time
-during which the ticket is valid. The “service principal” describes
-each ticket. The ticket-granting ticket has a first component
-\sphinxcode{krbtgt}, and a second component which is the realm name.
-
-Now, if \sphinxcode{jennifer} connected to the machine \sphinxcode{daffodil.mit.edu},
-and then typed “klist” again, she would have gotten the following
-result:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{klist}
-\PYG{n}{Ticket} \PYG{n}{cache}\PYG{p}{:} \PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{krb5cc\PYGZus{}ttypa}
-\PYG{n}{Default} \PYG{n}{principal}\PYG{p}{:} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-
-\PYG{n}{Valid} \PYG{n}{starting} \PYG{n}{Expires} \PYG{n}{Service} \PYG{n}{principal}
-\PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{19}\PYG{p}{:}\PYG{l+m+mi}{49}\PYG{p}{:}\PYG{l+m+mi}{21} \PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{08}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{05}\PYG{p}{:}\PYG{l+m+mi}{49}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{20}\PYG{p}{:}\PYG{l+m+mi}{22}\PYG{p}{:}\PYG{l+m+mi}{30} \PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{08}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{05}\PYG{p}{:}\PYG{l+m+mi}{49}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-Here’s what happened: when \sphinxcode{jennifer} used ssh to connect to the
-host \sphinxcode{daffodil.mit.edu}, the ssh program presented her
-ticket-granting ticket to the KDC and requested a host ticket for the
-host \sphinxcode{daffodil.mit.edu}. The KDC sent the host ticket, which ssh
-then presented to the host \sphinxcode{daffodil.mit.edu}, and she was allowed
-to log in without typing her password.
-
-Suppose your Kerberos tickets allow you to log into a host in another
-domain, such as \sphinxcode{trillium.example.com}, which is also in another
-Kerberos realm, \sphinxcode{EXAMPLE.COM}. If you ssh to this host, you will
-receive a ticket-granting ticket for the realm \sphinxcode{EXAMPLE.COM}, plus
-the new host ticket for \sphinxcode{trillium.example.com}. klist will now
-show:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{klist}
-\PYG{n}{Ticket} \PYG{n}{cache}\PYG{p}{:} \PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{krb5cc\PYGZus{}ttypa}
-\PYG{n}{Default} \PYG{n}{principal}\PYG{p}{:} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-
-\PYG{n}{Valid} \PYG{n}{starting} \PYG{n}{Expires} \PYG{n}{Service} \PYG{n}{principal}
-\PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{19}\PYG{p}{:}\PYG{l+m+mi}{49}\PYG{p}{:}\PYG{l+m+mi}{21} \PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{08}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{05}\PYG{p}{:}\PYG{l+m+mi}{49}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{20}\PYG{p}{:}\PYG{l+m+mi}{22}\PYG{p}{:}\PYG{l+m+mi}{30} \PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{08}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{05}\PYG{p}{:}\PYG{l+m+mi}{49}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{host}\PYG{o}{/}\PYG{n}{daffodil}\PYG{o}{.}\PYG{n}{mit}\PYG{o}{.}\PYG{n}{edu}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{20}\PYG{p}{:}\PYG{l+m+mi}{24}\PYG{p}{:}\PYG{l+m+mi}{18} \PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{08}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{05}\PYG{p}{:}\PYG{l+m+mi}{49}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{20}\PYG{p}{:}\PYG{l+m+mi}{24}\PYG{p}{:}\PYG{l+m+mi}{18} \PYG{l+m+mi}{06}\PYG{o}{/}\PYG{l+m+mi}{08}\PYG{o}{/}\PYG{l+m+mi}{04} \PYG{l+m+mi}{05}\PYG{p}{:}\PYG{l+m+mi}{49}\PYG{p}{:}\PYG{l+m+mi}{19} \PYG{n}{host}\PYG{o}{/}\PYG{n}{trillium}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-Depending on your host’s and realm’s configuration, you may also see a
-ticket with the service principal \sphinxcode{host/trillium.example.com@}. If
-so, this means that your host did not know what realm
-trillium.example.com is in, so it asked the \sphinxcode{ATHENA.MIT.EDU} KDC for
-a referral. The next time you connect to \sphinxcode{trillium.example.com},
-the odd-looking entry will be used to avoid needing to ask for a
-referral again.
-
-You can use the \sphinxstylestrong{-f} option to view the flags that apply to your
-tickets. The flags are:
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-F
-&
-Forwardable
-\\
-\hline
-f
-&
-forwarded
-\\
-\hline
-P
-&
-Proxiable
-\\
-\hline
-p
-&
-proxy
-\\
-\hline
-D
-&
-postDateable
-\\
-\hline
-d
-&
-postdated
-\\
-\hline
-R
-&
-Renewable
-\\
-\hline
-I
-&
-Initial
-\\
-\hline
-i
-&
-invalid
-\\
-\hline
-H
-&
-Hardware authenticated
-\\
-\hline
-A
-&
-preAuthenticated
-\\
-\hline
-T
-&
-Transit policy checked
-\\
-\hline
-O
-&
-Okay as delegate
-\\
-\hline
-a
-&
-anonymous
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-Here is a sample listing. In this example, the user \sphinxstyleemphasis{jennifer}
-obtained her initial tickets (\sphinxstylestrong{I}), which are forwardable (\sphinxstylestrong{F})
-and postdated (\sphinxstylestrong{d}) but not yet validated (\sphinxstylestrong{i}):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{klist} \PYG{o}{\PYGZhy{}}\PYG{n}{f}
-\PYG{n}{Ticket} \PYG{n}{cache}\PYG{p}{:} \PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{krb5cc\PYGZus{}320}
-\PYG{n}{Default} \PYG{n}{principal}\PYG{p}{:} \PYG{n}{jennifer}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
-
-\PYG{n}{Valid} \PYG{n}{starting} \PYG{n}{Expires} \PYG{n}{Service} \PYG{n}{principal}
-\PYG{l+m+mi}{31}\PYG{o}{/}\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{05} \PYG{l+m+mi}{19}\PYG{p}{:}\PYG{l+m+mi}{06}\PYG{p}{:}\PYG{l+m+mi}{25} \PYG{l+m+mi}{31}\PYG{o}{/}\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{05} \PYG{l+m+mi}{19}\PYG{p}{:}\PYG{l+m+mi}{16}\PYG{p}{:}\PYG{l+m+mi}{25} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}\PYG{n+nd}{@ATHENA}\PYG{o}{.}\PYG{n}{MIT}\PYG{o}{.}\PYG{n}{EDU}
- \PYG{n}{Flags}\PYG{p}{:} \PYG{n}{FdiI}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-In the following example, the user \sphinxstyleemphasis{david}’s tickets were forwarded
-(\sphinxstylestrong{f}) to this host from another host. The tickets are reforwardable
-(\sphinxstylestrong{F}):
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{klist} \PYG{o}{\PYGZhy{}}\PYG{n}{f}
-\PYG{n}{Ticket} \PYG{n}{cache}\PYG{p}{:} \PYG{o}{/}\PYG{n}{tmp}\PYG{o}{/}\PYG{n}{krb5cc\PYGZus{}p11795}
-\PYG{n}{Default} \PYG{n}{principal}\PYG{p}{:} \PYG{n}{david}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
-
-\PYG{n}{Valid} \PYG{n}{starting} \PYG{n}{Expires} \PYG{n}{Service} \PYG{n}{principal}
-\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{31}\PYG{o}{/}\PYG{l+m+mi}{05} \PYG{l+m+mi}{11}\PYG{p}{:}\PYG{l+m+mi}{52}\PYG{p}{:}\PYG{l+m+mi}{29} \PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{31}\PYG{o}{/}\PYG{l+m+mi}{05} \PYG{l+m+mi}{21}\PYG{p}{:}\PYG{l+m+mi}{11}\PYG{p}{:}\PYG{l+m+mi}{23} \PYG{n}{krbtgt}\PYG{o}{/}\PYG{n}{EXAMPLE}\PYG{o}{.}\PYG{n}{COM}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
- \PYG{n}{Flags}\PYG{p}{:} \PYG{n}{Ff}
-\PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{31}\PYG{o}{/}\PYG{l+m+mi}{05} \PYG{l+m+mi}{12}\PYG{p}{:}\PYG{l+m+mi}{03}\PYG{p}{:}\PYG{l+m+mi}{48} \PYG{l+m+mi}{07}\PYG{o}{/}\PYG{l+m+mi}{31}\PYG{o}{/}\PYG{l+m+mi}{05} \PYG{l+m+mi}{21}\PYG{p}{:}\PYG{l+m+mi}{11}\PYG{p}{:}\PYG{l+m+mi}{23} \PYG{n}{host}\PYG{o}{/}\PYG{n}{trillium}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM}
- \PYG{n}{Flags}\PYG{p}{:} \PYG{n}{Ff}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-
-\section{Destroying tickets with kdestroy}
-\label{\detokenize{user/tkt_mgmt:destroying-tickets-with-kdestroy}}
-Your Kerberos tickets are proof that you are indeed yourself, and
-tickets could be stolen if someone gains access to a computer where
-they are stored. If this happens, the person who has them can
-masquerade as you until they expire. For this reason, you should
-destroy your Kerberos tickets when you are away from your computer.
-
-Destroying your tickets is easy. Simply type kdestroy:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdestroy}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-If {\hyperref[\detokenize{user/user_commands/kdestroy:kdestroy-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kdestroy}}}} fails to destroy your tickets, it will beep and
-give an error message. For example, if kdestroy can’t find any
-tickets to destroy, it will give the following message:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{kdestroy}
-\PYG{n}{kdestroy}\PYG{p}{:} \PYG{n}{No} \PYG{n}{credentials} \PYG{n}{cache} \PYG{n}{file} \PYG{n}{found} \PYG{k}{while} \PYG{n}{destroying} \PYG{n}{cache}
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}}
-\end{sphinxVerbatim}
-
-
-\chapter{User config files}
-\label{\detokenize{user/user_config/index::doc}}\label{\detokenize{user/user_config/index:user-config-files}}
-The following files in your home directory can be used to control the
-behavior of Kerberos as it applies to your account (unless they have
-been disabled by your host’s configuration):
-
-
-\section{kerberos}
-\label{\detokenize{user/user_config/kerberos:kerberos-7}}\label{\detokenize{user/user_config/kerberos:kerberos}}\label{\detokenize{user/user_config/kerberos::doc}}
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_config/kerberos:description}}
-The Kerberos system authenticates individual users in a network
-environment. After authenticating yourself to Kerberos, you can use
-Kerberos-enabled programs without having to present passwords or
-certificates to those programs.
-
-If you receive the following response from {\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}}:
-
-kinit: Client not found in Kerberos database while getting initial
-credentials
-
-you haven’t been registered as a Kerberos user. See your system
-administrator.
-
-A Kerberos name usually contains three parts. The first is the
-\sphinxstylestrong{primary}, which is usually a user’s or service’s name. The second
-is the \sphinxstylestrong{instance}, which in the case of a user is usually null.
-Some users may have privileged instances, however, such as \sphinxcode{root} or
-\sphinxcode{admin}. In the case of a service, the instance is the fully
-qualified name of the machine on which it runs; i.e. there can be an
-ssh service running on the machine ABC (\sphinxhref{mailto:ssh/ABC@REALM}{ssh/ABC@REALM}), which is
-different from the ssh service running on the machine XYZ
-(\sphinxhref{mailto:ssh/XYZ@REALM}{ssh/XYZ@REALM}). The third part of a Kerberos name is the \sphinxstylestrong{realm}.
-The realm corresponds to the Kerberos service providing authentication
-for the principal. Realms are conventionally all-uppercase, and often
-match the end of hostnames in the realm (for instance, host01.example.com
-might be in realm EXAMPLE.COM).
-
-When writing a Kerberos name, the principal name is separated from the
-instance (if not null) by a slash, and the realm (if not the local
-realm) follows, preceded by an “@” sign. The following are examples
-of valid Kerberos names:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{david}
-\PYG{n}{jennifer}\PYG{o}{/}\PYG{n}{admin}
-\PYG{n}{joeuser}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{cbrown}\PYG{o}{/}\PYG{n}{root}\PYG{n+nd}{@FUBAR}\PYG{o}{.}\PYG{n}{ORG}
-\end{sphinxVerbatim}
-
-When you authenticate yourself with Kerberos you get an initial
-Kerberos \sphinxstylestrong{ticket}. (A Kerberos ticket is an encrypted protocol
-message that provides authentication.) Kerberos uses this ticket for
-network utilities such as ssh. The ticket transactions are done
-transparently, so you don’t have to worry about their management.
-
-Note, however, that tickets expire. Administrators may configure more
-privileged tickets, such as those with service or instance of \sphinxcode{root}
-or \sphinxcode{admin}, to expire in a few minutes, while tickets that carry
-more ordinary privileges may be good for several hours or a day. If
-your login session extends beyond the time limit, you will have to
-re-authenticate yourself to Kerberos to get new tickets using the
-{\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}} command.
-
-Some tickets are \sphinxstylestrong{renewable} beyond their initial lifetime. This
-means that \sphinxcode{kinit -R} can extend their lifetime without requiring
-you to re-authenticate.
-
-If you wish to delete your local tickets, use the {\hyperref[\detokenize{user/user_commands/kdestroy:kdestroy-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kdestroy}}}}
-command.
-
-Kerberos tickets can be forwarded. In order to forward tickets, you
-must request \sphinxstylestrong{forwardable} tickets when you kinit. Once you have
-forwardable tickets, most Kerberos programs have a command line option
-to forward them to the remote host. This can be useful for, e.g.,
-running kinit on your local machine and then sshing into another to do
-work. Note that this should not be done on untrusted machines since
-they will then have your tickets.
-
-
-\subsection{ENVIRONMENT VARIABLES}
-\label{\detokenize{user/user_config/kerberos:environment-variables}}
-Several environment variables affect the operation of Kerberos-enabled
-programs. These include:
-\begin{description}
-\item[{\sphinxstylestrong{KRB5CCNAME}}] \leavevmode
-Default name for the credentials cache file, in the form
-\sphinxstyleemphasis{TYPE}:\sphinxstyleemphasis{residual}. The type of the default cache may determine
-the availability of a cache collection. \sphinxcode{FILE} is not a
-collection type; \sphinxcode{KEYRING}, \sphinxcode{DIR}, and \sphinxcode{KCM} are.
-
-If not set, the value of \sphinxstylestrong{default\_ccache\_name} from
-configuration files (see \sphinxstylestrong{KRB5\_CONFIG}) will be used. If that
-is also not set, the default \sphinxstyleemphasis{type} is \sphinxcode{FILE}, and the
-\sphinxstyleemphasis{residual} is the path /tmp/krb5cc\_*uid*, where \sphinxstyleemphasis{uid} is the
-decimal user ID of the user.
-
-\item[{\sphinxstylestrong{KRB5\_KTNAME}}] \leavevmode
-Specifies the location of the default keytab file, in the form
-\sphinxstyleemphasis{TYPE}:\sphinxstyleemphasis{residual}. If no \sphinxstyleemphasis{type} is present, the \sphinxstylestrong{FILE} type is
-assumed and \sphinxstyleemphasis{residual} is the pathname of the keytab file. If
-unset, \DUrole{xref,std,std-ref}{DEFKTNAME} will be used.
-
-\item[{\sphinxstylestrong{KRB5\_CONFIG}}] \leavevmode
-Specifies the location of the Kerberos configuration file. The
-default is \DUrole{xref,std,std-ref}{SYSCONFDIR}\sphinxcode{/krb5.conf}. Multiple filenames can
-be specified, separated by a colon; all files which are present
-will be read.
-
-\item[{\sphinxstylestrong{KRB5\_KDC\_PROFILE}}] \leavevmode
-Specifies the location of the KDC configuration file, which
-contains additional configuration directives for the Key
-Distribution Center daemon and associated programs. The default
-is \DUrole{xref,std,std-ref}{LOCALSTATEDIR}\sphinxcode{/krb5kdc}\sphinxcode{/kdc.conf}.
-
-\item[{\sphinxstylestrong{KRB5RCACHENAME}}] \leavevmode
-(New in release 1.18) Specifies the location of the default replay
-cache, in the form \sphinxstyleemphasis{type}:\sphinxstyleemphasis{residual}. The \sphinxcode{file2} type with a
-pathname residual specifies a replay cache file in the version-2
-format in the specified location. The \sphinxcode{none} type (residual is
-ignored) disables the replay cache. The \sphinxcode{dfl} type (residual is
-ignored) indicates the default, which uses a file2 replay cache in
-a temporary directory. The default is \sphinxcode{dfl:}.
-
-\item[{\sphinxstylestrong{KRB5RCACHETYPE}}] \leavevmode
-Specifies the type of the default replay cache, if
-\sphinxstylestrong{KRB5RCACHENAME} is unspecified. No residual can be specified,
-so \sphinxcode{none} and \sphinxcode{dfl} are the only useful types.
-
-\item[{\sphinxstylestrong{KRB5RCACHEDIR}}] \leavevmode
-Specifies the directory used by the \sphinxcode{dfl} replay cache type.
-The default is the value of the \sphinxstylestrong{TMPDIR} environment variable,
-or \sphinxcode{/var/tmp} if \sphinxstylestrong{TMPDIR} is not set.
-
-\item[{\sphinxstylestrong{KRB5\_TRACE}}] \leavevmode
-Specifies a filename to write trace log output to. Trace logs can
-help illuminate decisions made internally by the Kerberos
-libraries. For example, \sphinxcode{env KRB5\_TRACE=/dev/stderr kinit}
-would send tracing information for {\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}} to
-\sphinxcode{/dev/stderr}. The default is not to write trace log output
-anywhere.
-
-\item[{\sphinxstylestrong{KRB5\_CLIENT\_KTNAME}}] \leavevmode
-Default client keytab file name. If unset, \DUrole{xref,std,std-ref}{DEFCKTNAME} will be
-used).
-
-\item[{\sphinxstylestrong{KPROP\_PORT}}] \leavevmode
-\DUrole{xref,std,std-ref}{kprop(8)} port to use. Defaults to 754.
-
-\item[{\sphinxstylestrong{GSS\_MECH\_CONFIG}}] \leavevmode
-Specifies a filename containing GSSAPI mechanism module
-configuration. The default is to read \DUrole{xref,std,std-ref}{SYSCONFDIR}\sphinxcode{/gss/mech}
-and files with a \sphinxcode{.conf} suffix within the directory
-\DUrole{xref,std,std-ref}{SYSCONFDIR}\sphinxcode{/gss/mech.d}.
-
-\end{description}
-
-Most environment variables are disabled for certain programs, such as
-login system programs and setuid programs, which are designed to be
-secure when run within an untrusted process environment.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_config/kerberos:see-also}}
-{\hyperref[\detokenize{user/user_commands/kdestroy:kdestroy-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kdestroy}}}}, {\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}}, {\hyperref[\detokenize{user/user_commands/klist:klist-1}]{\sphinxcrossref{\DUrole{std,std-ref}{klist}}}},
-{\hyperref[\detokenize{user/user_commands/kswitch:kswitch-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kswitch}}}}, {\hyperref[\detokenize{user/user_commands/kpasswd:kpasswd-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kpasswd}}}}, {\hyperref[\detokenize{user/user_commands/ksu:ksu-1}]{\sphinxcrossref{\DUrole{std,std-ref}{ksu}}}},
-\DUrole{xref,std,std-ref}{krb5.conf(5)}, \DUrole{xref,std,std-ref}{kdc.conf(5)}, \DUrole{xref,std,std-ref}{kadmin(1)},
-\DUrole{xref,std,std-ref}{kadmind(8)}, \DUrole{xref,std,std-ref}{kdb5\_util(8)}, \DUrole{xref,std,std-ref}{krb5kdc(8)}
-
-
-\subsection{BUGS}
-\label{\detokenize{user/user_config/kerberos:bugs}}
-
-\subsection{AUTHORS}
-\label{\detokenize{user/user_config/kerberos:authors}}
-\begin{DUlineblock}{0em}
-\item[] Steve Miller, MIT Project Athena/Digital Equipment Corporation
-\item[] Clifford Neuman, MIT Project Athena
-\item[] Greg Hudson, MIT Kerberos Consortium
-\item[] Robbie Harwood, Red Hat, Inc.
-\end{DUlineblock}
-
-
-\subsection{HISTORY}
-\label{\detokenize{user/user_config/kerberos:history}}
-The MIT Kerberos 5 implementation was developed at MIT, with
-contributions from many outside parties. It is currently maintained
-by the MIT Kerberos Consortium.
-
-
-\subsection{RESTRICTIONS}
-\label{\detokenize{user/user_config/kerberos:restrictions}}
-Copyright 1985, 1986, 1989-1996, 2002, 2011, 2018 Masachusetts
-Institute of Technology
-
-
-\section{.k5login}
-\label{\detokenize{user/user_config/k5login:k5login-5}}\label{\detokenize{user/user_config/k5login:k5login}}\label{\detokenize{user/user_config/k5login::doc}}
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_config/k5login:description}}
-The .k5login file, which resides in a user’s home directory, contains
-a list of the Kerberos principals. Anyone with valid tickets for a
-principal in the file is allowed host access with the UID of the user
-in whose home directory the file resides. One common use is to place
-a .k5login file in root’s home directory, thereby granting system
-administrators remote root access to the host via Kerberos.
-
-
-\subsection{EXAMPLES}
-\label{\detokenize{user/user_config/k5login:examples}}
-Suppose the user \sphinxcode{alice} had a .k5login file in her home directory
-containing just the following line:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{bob}\PYG{n+nd}{@FOOBAR}\PYG{o}{.}\PYG{n}{ORG}
-\end{sphinxVerbatim}
-
-This would allow \sphinxcode{bob} to use Kerberos network applications, such as
-ssh(1), to access \sphinxcode{alice}’s account, using \sphinxcode{bob}’s Kerberos
-tickets. In a default configuration (with \sphinxstylestrong{k5login\_authoritative} set
-to true in \DUrole{xref,std,std-ref}{krb5.conf(5)}), this .k5login file would not let
-\sphinxcode{alice} use those network applications to access her account, since
-she is not listed! With no .k5login file, or with \sphinxstylestrong{k5login\_authoritative}
-set to false, a default rule would permit the principal \sphinxcode{alice} in the
-machine’s default realm to access the \sphinxcode{alice} account.
-
-Let us further suppose that \sphinxcode{alice} is a system administrator.
-Alice and the other system administrators would have their principals
-in root’s .k5login file on each host:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{alice}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}
-
-\PYG{n}{joeadmin}\PYG{o}{/}\PYG{n}{root}\PYG{n+nd}{@BLEEP}\PYG{o}{.}\PYG{n}{COM}
-\end{sphinxVerbatim}
-
-This would allow either system administrator to log in to these hosts
-using their Kerberos tickets instead of having to type the root
-password. Note that because \sphinxcode{bob} retains the Kerberos tickets for
-his own principal, \sphinxcode{bob@FOOBAR.ORG}, he would not have any of the
-privileges that require \sphinxcode{alice}’s tickets, such as root access to
-any of the site’s hosts, or the ability to change \sphinxcode{alice}’s
-password.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_config/k5login:see-also}}
-kerberos(1)
-
-
-\section{.k5identity}
-\label{\detokenize{user/user_config/k5identity:k5identity-5}}\label{\detokenize{user/user_config/k5identity:k5identity}}\label{\detokenize{user/user_config/k5identity::doc}}
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_config/k5identity:description}}
-The .k5identity file, which resides in a user’s home directory,
-contains a list of rules for selecting a client principals based on
-the server being accessed. These rules are used to choose a
-credential cache within the cache collection when possible.
-
-Blank lines and lines beginning with \sphinxcode{\#} are ignored. Each line has
-the form:
-\begin{quote}
-
-\sphinxstyleemphasis{principal} \sphinxstyleemphasis{field}=\sphinxstyleemphasis{value} …
-\end{quote}
-
-If the server principal meets all of the field constraints, then
-principal is chosen as the client principal. The following fields are
-recognized:
-\begin{description}
-\item[{\sphinxstylestrong{realm}}] \leavevmode
-If the realm of the server principal is known, it is matched
-against \sphinxstyleemphasis{value}, which may be a pattern using shell wildcards.
-For host-based server principals, the realm will generally only be
-known if there is a \DUrole{xref,std,std-ref}{domain\_realm} section in
-\DUrole{xref,std,std-ref}{krb5.conf(5)} with a mapping for the hostname.
-
-\item[{\sphinxstylestrong{service}}] \leavevmode
-If the server principal is a host-based principal, its service
-component is matched against \sphinxstyleemphasis{value}, which may be a pattern using
-shell wildcards.
-
-\item[{\sphinxstylestrong{host}}] \leavevmode
-If the server principal is a host-based principal, its hostname
-component is converted to lower case and matched against \sphinxstyleemphasis{value},
-which may be a pattern using shell wildcards.
-
-If the server principal matches the constraints of multiple lines
-in the .k5identity file, the principal from the first matching
-line is used. If no line matches, credentials will be selected
-some other way, such as the realm heuristic or the current primary
-cache.
-
-\end{description}
-
-
-\subsection{EXAMPLE}
-\label{\detokenize{user/user_config/k5identity:example}}
-The following example .k5identity file selects the client principal
-\sphinxcode{alice@KRBTEST.COM} if the server principal is within that realm,
-the principal \sphinxcode{alice/root@EXAMPLE.COM} if the server host is within
-a servers subdomain, and the principal \sphinxcode{alice/mail@EXAMPLE.COM} when
-accessing the IMAP service on \sphinxcode{mail.example.com}:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{alice}\PYG{n+nd}{@KRBTEST}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{realm}\PYG{o}{=}\PYG{n}{KRBTEST}\PYG{o}{.}\PYG{n}{COM}
-\PYG{n}{alice}\PYG{o}{/}\PYG{n}{root}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{host}\PYG{o}{=}\PYG{o}{*}\PYG{o}{.}\PYG{n}{servers}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com}
-\PYG{n}{alice}\PYG{o}{/}\PYG{n}{mail}\PYG{n+nd}{@EXAMPLE}\PYG{o}{.}\PYG{n}{COM} \PYG{n}{host}\PYG{o}{=}\PYG{n}{mail}\PYG{o}{.}\PYG{n}{example}\PYG{o}{.}\PYG{n}{com} \PYG{n}{service}\PYG{o}{=}\PYG{n}{imap}
-\end{sphinxVerbatim}
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_config/k5identity:see-also}}
-kerberos(1), \DUrole{xref,std,std-ref}{krb5.conf(5)}
-
-
-\chapter{User commands}
-\label{\detokenize{user/user_commands/index::doc}}\label{\detokenize{user/user_commands/index:user-commands}}\label{\detokenize{user/user_commands/index:id1}}
-
-\section{kdestroy}
-\label{\detokenize{user/user_commands/kdestroy:kdestroy}}\label{\detokenize{user/user_commands/kdestroy::doc}}\label{\detokenize{user/user_commands/kdestroy:kdestroy-1}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{user/user_commands/kdestroy:synopsis}}
-\sphinxstylestrong{kdestroy}
-{[}\sphinxstylestrong{-A}{]}
-{[}\sphinxstylestrong{-q}{]}
-{[}\sphinxstylestrong{-c} \sphinxstyleemphasis{cache\_name}{]}
-{[}\sphinxstylestrong{-p} \sphinxstyleemphasis{princ\_name}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_commands/kdestroy:description}}
-The kdestroy utility destroys the user’s active Kerberos authorization
-tickets by overwriting and deleting the credentials cache that
-contains them. If the credentials cache is not specified, the default
-credentials cache is destroyed.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{user/user_commands/kdestroy:options}}\begin{description}
-\item[{\sphinxstylestrong{-A}}] \leavevmode
-Destroys all caches in the collection, if a cache collection is
-available. May be used with the \sphinxstylestrong{-c} option to specify the
-collection to be destroyed.
-
-\item[{\sphinxstylestrong{-q}}] \leavevmode
-Run quietly. Normally kdestroy beeps if it fails to destroy the
-user’s tickets. The \sphinxstylestrong{-q} flag suppresses this behavior.
-
-\item[{\sphinxstylestrong{-c} \sphinxstyleemphasis{cache\_name}}] \leavevmode
-Use \sphinxstyleemphasis{cache\_name} as the credentials (ticket) cache name and
-location; if this option is not used, the default cache name and
-location are used.
-
-The default credentials cache may vary between systems. If the
-\sphinxstylestrong{KRB5CCNAME} environment variable is set, its value is used to
-name the default ticket cache.
-
-\item[{\sphinxstylestrong{-p} \sphinxstyleemphasis{princ\_name}}] \leavevmode
-If a cache collection is available, destroy the cache for
-\sphinxstyleemphasis{princ\_name} instead of the primary cache. May be used with the
-\sphinxstylestrong{-c} option to specify the collection to be searched.
-
-\end{description}
-
-
-\subsection{NOTE}
-\label{\detokenize{user/user_commands/kdestroy:note}}
-Most installations recommend that you place the kdestroy command in
-your .logout file, so that your tickets are destroyed automatically
-when you log out.
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{user/user_commands/kdestroy:environment}}
-See {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}} for a description of Kerberos environment
-variables.
-
-
-\subsection{FILES}
-\label{\detokenize{user/user_commands/kdestroy:files}}\begin{description}
-\item[{\DUrole{xref,std,std-ref}{DEFCCNAME}}] \leavevmode
-Default location of Kerberos 5 credentials cache
-
-\end{description}
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_commands/kdestroy:see-also}}
-{\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}}, {\hyperref[\detokenize{user/user_commands/klist:klist-1}]{\sphinxcrossref{\DUrole{std,std-ref}{klist}}}}, {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}}
-
-
-\section{kinit}
-\label{\detokenize{user/user_commands/kinit:kinit-1}}\label{\detokenize{user/user_commands/kinit:kinit}}\label{\detokenize{user/user_commands/kinit::doc}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{user/user_commands/kinit:synopsis}}
-\sphinxstylestrong{kinit}
-{[}\sphinxstylestrong{-V}{]}
-{[}\sphinxstylestrong{-l} \sphinxstyleemphasis{lifetime}{]}
-{[}\sphinxstylestrong{-s} \sphinxstyleemphasis{start\_time}{]}
-{[}\sphinxstylestrong{-r} \sphinxstyleemphasis{renewable\_life}{]}
-{[}\sphinxstylestrong{-p} \textbar{} -\sphinxstylestrong{P}{]}
-{[}\sphinxstylestrong{-f} \textbar{} -\sphinxstylestrong{F}{]}
-{[}\sphinxstylestrong{-a}{]}
-{[}\sphinxstylestrong{-A}{]}
-{[}\sphinxstylestrong{-C}{]}
-{[}\sphinxstylestrong{-E}{]}
-{[}\sphinxstylestrong{-v}{]}
-{[}\sphinxstylestrong{-R}{]}
-{[}\sphinxstylestrong{-k} {[}\sphinxstylestrong{-i} \textbar{} -\sphinxstylestrong{t} \sphinxstyleemphasis{keytab\_file}{]}{]}
-{[}\sphinxstylestrong{-c} \sphinxstyleemphasis{cache\_name}{]}
-{[}\sphinxstylestrong{-n}{]}
-{[}\sphinxstylestrong{-S} \sphinxstyleemphasis{service\_name}{]}
-{[}\sphinxstylestrong{-I} \sphinxstyleemphasis{input\_ccache}{]}
-{[}\sphinxstylestrong{-T} \sphinxstyleemphasis{armor\_ccache}{]}
-{[}\sphinxstylestrong{-X} \sphinxstyleemphasis{attribute}{[}=\sphinxstyleemphasis{value}{]}{]}
-{[}\sphinxstylestrong{\textendash{}request-pac} \textbar{} \sphinxstylestrong{\textendash{}no-request-pac}{]}
-{[}\sphinxstyleemphasis{principal}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_commands/kinit:description}}
-kinit obtains and caches an initial ticket-granting ticket for
-\sphinxstyleemphasis{principal}. If \sphinxstyleemphasis{principal} is absent, kinit chooses an appropriate
-principal name based on existing credential cache contents or the
-local username of the user invoking kinit. Some options modify the
-choice of principal name.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{user/user_commands/kinit:options}}\begin{description}
-\item[{\sphinxstylestrong{-V}}] \leavevmode
-display verbose output.
-
-\item[{\sphinxstylestrong{-l} \sphinxstyleemphasis{lifetime}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} string.) Requests a ticket with the lifetime
-\sphinxstyleemphasis{lifetime}.
-
-For example, \sphinxcode{kinit -l 5:30} or \sphinxcode{kinit -l 5h30m}.
-
-If the \sphinxstylestrong{-l} option is not specified, the default ticket lifetime
-(configured by each site) is used. Specifying a ticket lifetime
-longer than the maximum ticket lifetime (configured by each site)
-will not override the configured maximum ticket lifetime.
-
-\item[{\sphinxstylestrong{-s} \sphinxstyleemphasis{start\_time}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} string.) Requests a postdated ticket. Postdated
-tickets are issued with the \sphinxstylestrong{invalid} flag set, and need to be
-resubmitted to the KDC for validation before use.
-
-\sphinxstyleemphasis{start\_time} specifies the duration of the delay before the ticket
-can become valid.
-
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{renewable\_life}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} string.) Requests renewable tickets, with a total
-lifetime of \sphinxstyleemphasis{renewable\_life}.
-
-\item[{\sphinxstylestrong{-f}}] \leavevmode
-requests forwardable tickets.
-
-\item[{\sphinxstylestrong{-F}}] \leavevmode
-requests non-forwardable tickets.
-
-\item[{\sphinxstylestrong{-p}}] \leavevmode
-requests proxiable tickets.
-
-\item[{\sphinxstylestrong{-P}}] \leavevmode
-requests non-proxiable tickets.
-
-\item[{\sphinxstylestrong{-a}}] \leavevmode
-requests tickets restricted to the host’s local address{[}es{]}.
-
-\item[{\sphinxstylestrong{-A}}] \leavevmode
-requests tickets not restricted by address.
-
-\item[{\sphinxstylestrong{-C}}] \leavevmode
-requests canonicalization of the principal name, and allows the
-KDC to reply with a different client principal from the one
-requested.
-
-\item[{\sphinxstylestrong{-E}}] \leavevmode
-treats the principal name as an enterprise name.
-
-\item[{\sphinxstylestrong{-v}}] \leavevmode
-requests that the ticket-granting ticket in the cache (with the
-\sphinxstylestrong{invalid} flag set) be passed to the KDC for validation. If the
-ticket is within its requested time range, the cache is replaced
-with the validated ticket.
-
-\item[{\sphinxstylestrong{-R}}] \leavevmode
-requests renewal of the ticket-granting ticket. Note that an
-expired ticket cannot be renewed, even if the ticket is still
-within its renewable life.
-
-Note that renewable tickets that have expired as reported by
-{\hyperref[\detokenize{user/user_commands/klist:klist-1}]{\sphinxcrossref{\DUrole{std,std-ref}{klist}}}} may sometimes be renewed using this option,
-because the KDC applies a grace period to account for client-KDC
-clock skew. See \DUrole{xref,std,std-ref}{krb5.conf(5)} \sphinxstylestrong{clockskew} setting.
-
-\item[{\sphinxstylestrong{-k} {[}\sphinxstylestrong{-i} \textbar{} \sphinxstylestrong{-t} \sphinxstyleemphasis{keytab\_file}{]}}] \leavevmode
-requests a ticket, obtained from a key in the local host’s keytab.
-The location of the keytab may be specified with the \sphinxstylestrong{-t}
-\sphinxstyleemphasis{keytab\_file} option, or with the \sphinxstylestrong{-i} option to specify the use
-of the default client keytab; otherwise the default keytab will be
-used. By default, a host ticket for the local host is requested,
-but any principal may be specified. On a KDC, the special keytab
-location \sphinxcode{KDB:} can be used to indicate that kinit should open
-the KDC database and look up the key directly. This permits an
-administrator to obtain tickets as any principal that supports
-authentication based on the key.
-
-\item[{\sphinxstylestrong{-n}}] \leavevmode
-Requests anonymous processing. Two types of anonymous principals
-are supported.
-
-For fully anonymous Kerberos, configure pkinit on the KDC and
-configure \sphinxstylestrong{pkinit\_anchors} in the client’s \DUrole{xref,std,std-ref}{krb5.conf(5)}.
-Then use the \sphinxstylestrong{-n} option with a principal of the form \sphinxcode{@REALM}
-(an empty principal name followed by the at-sign and a realm
-name). If permitted by the KDC, an anonymous ticket will be
-returned.
-
-A second form of anonymous tickets is supported; these
-realm-exposed tickets hide the identity of the client but not the
-client’s realm. For this mode, use \sphinxcode{kinit -n} with a normal
-principal name. If supported by the KDC, the principal (but not
-realm) will be replaced by the anonymous principal.
-
-As of release 1.8, the MIT Kerberos KDC only supports fully
-anonymous operation.
-
-\end{description}
-
-\sphinxstylestrong{-I} \sphinxstyleemphasis{input\_ccache}
-\begin{quote}
-
-Specifies the name of a credentials cache that already contains a
-ticket. When obtaining that ticket, if information about how that
-ticket was obtained was also stored to the cache, that information
-will be used to affect how new credentials are obtained, including
-preselecting the same methods of authenticating to the KDC.
-\end{quote}
-\begin{description}
-\item[{\sphinxstylestrong{-T} \sphinxstyleemphasis{armor\_ccache}}] \leavevmode
-Specifies the name of a credentials cache that already contains a
-ticket. If supported by the KDC, this cache will be used to armor
-the request, preventing offline dictionary attacks and allowing
-the use of additional preauthentication mechanisms. Armoring also
-makes sure that the response from the KDC is not modified in
-transit.
-
-\item[{\sphinxstylestrong{-c} \sphinxstyleemphasis{cache\_name}}] \leavevmode
-use \sphinxstyleemphasis{cache\_name} as the Kerberos 5 credentials (ticket) cache
-location. If this option is not used, the default cache location
-is used.
-
-The default cache location may vary between systems. If the
-\sphinxstylestrong{KRB5CCNAME} environment variable is set, its value is used to
-locate the default cache. If a principal name is specified and
-the type of the default cache supports a collection (such as the
-DIR type), an existing cache containing credentials for the
-principal is selected or a new one is created and becomes the new
-primary cache. Otherwise, any existing contents of the default
-cache are destroyed by kinit.
-
-\item[{\sphinxstylestrong{-S} \sphinxstyleemphasis{service\_name}}] \leavevmode
-specify an alternate service name to use when getting initial
-tickets.
-
-\item[{\sphinxstylestrong{-X} \sphinxstyleemphasis{attribute}{[}=\sphinxstyleemphasis{value}{]}}] \leavevmode
-specify a pre-authentication \sphinxstyleemphasis{attribute} and \sphinxstyleemphasis{value} to be
-interpreted by pre-authentication modules. The acceptable
-attribute and value values vary from module to module. This
-option may be specified multiple times to specify multiple
-attributes. If no value is specified, it is assumed to be “yes”.
-
-The following attributes are recognized by the PKINIT
-pre-authentication mechanism:
-\begin{description}
-\item[{\sphinxstylestrong{X509\_user\_identity}=\sphinxstyleemphasis{value}}] \leavevmode
-specify where to find user’s X509 identity information
-
-\item[{\sphinxstylestrong{X509\_anchors}=\sphinxstyleemphasis{value}}] \leavevmode
-specify where to find trusted X509 anchor information
-
-\item[{\sphinxstylestrong{flag\_RSA\_PROTOCOL}{[}\sphinxstylestrong{=yes}{]}}] \leavevmode
-specify use of RSA, rather than the default Diffie-Hellman
-protocol
-
-\item[{\sphinxstylestrong{disable\_freshness}{[}\sphinxstylestrong{=yes}{]}}] \leavevmode
-disable sending freshness tokens (for testing purposes only)
-
-\end{description}
-
-\item[{\sphinxstylestrong{\textendash{}request-pac} \textbar{} \sphinxstylestrong{\textendash{}no-request-pac}}] \leavevmode
-mutually exclusive. If \sphinxstylestrong{\textendash{}request-pac} is set, ask the KDC to
-include a PAC in authdata; if \sphinxstylestrong{\textendash{}no-request-pac} is set, ask the
-KDC not to include a PAC; if neither are set, the KDC will follow
-its default, which is typically is to include a PAC if doing so is
-supported.
-
-\end{description}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{user/user_commands/kinit:environment}}
-See {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}} for a description of Kerberos environment
-variables.
-
-
-\subsection{FILES}
-\label{\detokenize{user/user_commands/kinit:files}}\begin{description}
-\item[{\DUrole{xref,std,std-ref}{DEFCCNAME}}] \leavevmode
-default location of Kerberos 5 credentials cache
-
-\item[{\DUrole{xref,std,std-ref}{DEFKTNAME}}] \leavevmode
-default location for the local host’s keytab.
-
-\end{description}
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_commands/kinit:see-also}}
-{\hyperref[\detokenize{user/user_commands/klist:klist-1}]{\sphinxcrossref{\DUrole{std,std-ref}{klist}}}}, {\hyperref[\detokenize{user/user_commands/kdestroy:kdestroy-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kdestroy}}}}, {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}}
-
-
-\section{klist}
-\label{\detokenize{user/user_commands/klist:klist}}\label{\detokenize{user/user_commands/klist::doc}}\label{\detokenize{user/user_commands/klist:klist-1}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{user/user_commands/klist:synopsis}}
-\sphinxstylestrong{klist}
-{[}\sphinxstylestrong{-e}{]}
-{[}{[}\sphinxstylestrong{-c}{]} {[}\sphinxstylestrong{-l}{]} {[}\sphinxstylestrong{-A}{]} {[}\sphinxstylestrong{-f}{]} {[}\sphinxstylestrong{-s}{]} {[}\sphinxstylestrong{-a} {[}\sphinxstylestrong{-n}{]}{]}{]}
-{[}\sphinxstylestrong{-C}{]}
-{[}\sphinxstylestrong{-k} {[}\sphinxstylestrong{-i}{]} {[}\sphinxstylestrong{-t}{]} {[}\sphinxstylestrong{-K}{]}{]}
-{[}\sphinxstylestrong{-V}{]}
-{[}\sphinxstylestrong{-d}{]}
-{[}\sphinxstyleemphasis{cache\_name}\textbar{}\sphinxstyleemphasis{keytab\_name}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_commands/klist:description}}
-klist lists the Kerberos principal and Kerberos tickets held in a
-credentials cache, or the keys held in a keytab file.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{user/user_commands/klist:options}}\begin{description}
-\item[{\sphinxstylestrong{-e}}] \leavevmode
-Displays the encryption types of the session key and the ticket
-for each credential in the credential cache, or each key in the
-keytab file.
-
-\item[{\sphinxstylestrong{-l}}] \leavevmode
-If a cache collection is available, displays a table summarizing
-the caches present in the collection.
-
-\item[{\sphinxstylestrong{-A}}] \leavevmode
-If a cache collection is available, displays the contents of all
-of the caches in the collection.
-
-\item[{\sphinxstylestrong{-c}}] \leavevmode
-List tickets held in a credentials cache. This is the default if
-neither \sphinxstylestrong{-c} nor \sphinxstylestrong{-k} is specified.
-
-\item[{\sphinxstylestrong{-f}}] \leavevmode
-Shows the flags present in the credentials, using the following
-abbreviations:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{F} \PYG{n}{Forwardable}
-\PYG{n}{f} \PYG{n}{forwarded}
-\PYG{n}{P} \PYG{n}{Proxiable}
-\PYG{n}{p} \PYG{n}{proxy}
-\PYG{n}{D} \PYG{n}{postDateable}
-\PYG{n}{d} \PYG{n}{postdated}
-\PYG{n}{R} \PYG{n}{Renewable}
-\PYG{n}{I} \PYG{n}{Initial}
-\PYG{n}{i} \PYG{n}{invalid}
-\PYG{n}{H} \PYG{n}{Hardware} \PYG{n}{authenticated}
-\PYG{n}{A} \PYG{n}{preAuthenticated}
-\PYG{n}{T} \PYG{n}{Transit} \PYG{n}{policy} \PYG{n}{checked}
-\PYG{n}{O} \PYG{n}{Okay} \PYG{k}{as} \PYG{n}{delegate}
-\PYG{n}{a} \PYG{n}{anonymous}
-\end{sphinxVerbatim}
-
-\item[{\sphinxstylestrong{-s}}] \leavevmode
-Causes klist to run silently (produce no output). klist will exit
-with status 1 if the credentials cache cannot be read or is
-expired, and with status 0 otherwise.
-
-\item[{\sphinxstylestrong{-a}}] \leavevmode
-Display list of addresses in credentials.
-
-\item[{\sphinxstylestrong{-n}}] \leavevmode
-Show numeric addresses instead of reverse-resolving addresses.
-
-\item[{\sphinxstylestrong{-C}}] \leavevmode
-List configuration data that has been stored in the credentials
-cache when klist encounters it. By default, configuration data
-is not listed.
-
-\item[{\sphinxstylestrong{-k}}] \leavevmode
-List keys held in a keytab file.
-
-\item[{\sphinxstylestrong{-i}}] \leavevmode
-In combination with \sphinxstylestrong{-k}, defaults to using the default client
-keytab instead of the default acceptor keytab, if no name is
-given.
-
-\item[{\sphinxstylestrong{-t}}] \leavevmode
-Display the time entry timestamps for each keytab entry in the
-keytab file.
-
-\item[{\sphinxstylestrong{-K}}] \leavevmode
-Display the value of the encryption key in each keytab entry in
-the keytab file.
-
-\item[{\sphinxstylestrong{-d}}] \leavevmode
-Display the authdata types (if any) for each entry.
-
-\item[{\sphinxstylestrong{-V}}] \leavevmode
-Display the Kerberos version number and exit.
-
-\end{description}
-
-If \sphinxstyleemphasis{cache\_name} or \sphinxstyleemphasis{keytab\_name} is not specified, klist will display
-the credentials in the default credentials cache or keytab file as
-appropriate. If the \sphinxstylestrong{KRB5CCNAME} environment variable is set, its
-value is used to locate the default ticket cache.
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{user/user_commands/klist:environment}}
-See {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}} for a description of Kerberos environment
-variables.
-
-
-\subsection{FILES}
-\label{\detokenize{user/user_commands/klist:files}}\begin{description}
-\item[{\DUrole{xref,std,std-ref}{DEFCCNAME}}] \leavevmode
-Default location of Kerberos 5 credentials cache
-
-\item[{\DUrole{xref,std,std-ref}{DEFKTNAME}}] \leavevmode
-Default location for the local host’s keytab file.
-
-\end{description}
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_commands/klist:see-also}}
-{\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}}, {\hyperref[\detokenize{user/user_commands/kdestroy:kdestroy-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kdestroy}}}}, {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}}
-
-
-\section{kpasswd}
-\label{\detokenize{user/user_commands/kpasswd:kpasswd}}\label{\detokenize{user/user_commands/kpasswd::doc}}\label{\detokenize{user/user_commands/kpasswd:kpasswd-1}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{user/user_commands/kpasswd:synopsis}}
-\sphinxstylestrong{kpasswd} {[}\sphinxstyleemphasis{principal}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_commands/kpasswd:description}}
-The kpasswd command is used to change a Kerberos principal’s password.
-kpasswd first prompts for the current Kerberos password, then prompts
-the user twice for the new password, and the password is changed.
-
-If the principal is governed by a policy that specifies the length
-and/or number of character classes required in the new password, the
-new password must conform to the policy. (The five character classes
-are lower case, upper case, numbers, punctuation, and all other
-characters.)
-
-
-\subsection{OPTIONS}
-\label{\detokenize{user/user_commands/kpasswd:options}}\begin{description}
-\item[{\sphinxstyleemphasis{principal}}] \leavevmode
-Change the password for the Kerberos principal principal.
-Otherwise, kpasswd uses the principal name from an existing ccache
-if there is one; if not, the principal is derived from the
-identity of the user invoking the kpasswd command.
-
-\end{description}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{user/user_commands/kpasswd:environment}}
-See {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_commands/kpasswd:see-also}}
-\DUrole{xref,std,std-ref}{kadmin(1)}, \DUrole{xref,std,std-ref}{kadmind(8)}, {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}}
-
-
-\section{krb5-config}
-\label{\detokenize{user/user_commands/krb5-config:krb5-config-1}}\label{\detokenize{user/user_commands/krb5-config:krb5-config}}\label{\detokenize{user/user_commands/krb5-config::doc}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{user/user_commands/krb5-config:synopsis}}
-\sphinxstylestrong{krb5-config}
-{[}\sphinxstylestrong{-}\sphinxstylestrong{-help} \textbar{} \sphinxstylestrong{-}\sphinxstylestrong{-all} \textbar{} \sphinxstylestrong{-}\sphinxstylestrong{-version} \textbar{} \sphinxstylestrong{-}\sphinxstylestrong{-vendor} \textbar{} \sphinxstylestrong{-}\sphinxstylestrong{-prefix} \textbar{} \sphinxstylestrong{-}\sphinxstylestrong{-exec-prefix} \textbar{} \sphinxstylestrong{-}\sphinxstylestrong{-defccname} \textbar{} \sphinxstylestrong{-}\sphinxstylestrong{-defktname} \textbar{} \sphinxstylestrong{-}\sphinxstylestrong{-defcktname} \textbar{} \sphinxstylestrong{-}\sphinxstylestrong{-cflags} \textbar{} \sphinxstylestrong{-}\sphinxstylestrong{-libs} {[}\sphinxstyleemphasis{libraries}{]}{]}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_commands/krb5-config:description}}
-krb5-config tells the application programmer what flags to use to compile
-and link programs against the installed Kerberos libraries.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{user/user_commands/krb5-config:options}}\begin{description}
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-help}}] \leavevmode
-prints a usage message. This is the default behavior when no options
-are specified.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-all}}] \leavevmode
-prints the version, vendor, prefix, and exec-prefix.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-version}}] \leavevmode
-prints the version number of the Kerberos installation.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-vendor}}] \leavevmode
-prints the name of the vendor of the Kerberos installation.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-prefix}}] \leavevmode
-prints the prefix for which the Kerberos installation was built.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-exec-prefix}}] \leavevmode
-prints the prefix for executables for which the Kerberos installation
-was built.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-defccname}}] \leavevmode
-prints the built-in default credentials cache location.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-defktname}}] \leavevmode
-prints the built-in default keytab location.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-defcktname}}] \leavevmode
-prints the built-in default client (initiator) keytab location.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-cflags}}] \leavevmode
-prints the compilation flags used to build the Kerberos installation.
-
-\item[{\sphinxstylestrong{-}\sphinxstylestrong{-libs} {[}\sphinxstyleemphasis{library}{]}}] \leavevmode
-prints the compiler options needed to link against \sphinxstyleemphasis{library}.
-Allowed values for \sphinxstyleemphasis{library} are:
-
-
-\begin{savenotes}\sphinxattablestart
-\centering
-\begin{tabulary}{\linewidth}[t]{|T|T|}
-\hline
-
-krb5
-&
-Kerberos 5 applications (default)
-\\
-\hline
-gssapi
-&
-GSSAPI applications with Kerberos 5 bindings
-\\
-\hline
-kadm-client
-&
-Kadmin client
-\\
-\hline
-kadm-server
-&
-Kadmin server
-\\
-\hline
-kdb
-&
-Applications that access the Kerberos database
-\\
-\hline
-\end{tabulary}
-\par
-\sphinxattableend\end{savenotes}
-
-\end{description}
-
-
-\subsection{EXAMPLES}
-\label{\detokenize{user/user_commands/krb5-config:examples}}
-krb5-config is particularly useful for compiling against a Kerberos
-installation that was installed in a non-standard location. For example,
-a Kerberos installation that is installed in \sphinxcode{/opt/krb5/} but uses
-libraries in \sphinxcode{/usr/local/lib/} for text localization would produce
-the following output:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{shell}\PYG{o}{\PYGZpc{}} \PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{config} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{n}{libs} \PYG{n}{krb5}
-\PYG{o}{\PYGZhy{}}\PYG{n}{L}\PYG{o}{/}\PYG{n}{opt}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{/}\PYG{n}{lib} \PYG{o}{\PYGZhy{}}\PYG{n}{Wl}\PYG{p}{,}\PYG{o}{\PYGZhy{}}\PYG{n}{rpath} \PYG{o}{\PYGZhy{}}\PYG{n}{Wl}\PYG{p}{,}\PYG{o}{/}\PYG{n}{opt}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{/}\PYG{n}{lib} \PYG{o}{\PYGZhy{}}\PYG{n}{L}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{lib} \PYG{o}{\PYGZhy{}}\PYG{n}{lkrb5} \PYG{o}{\PYGZhy{}}\PYG{n}{lk5crypto} \PYG{o}{\PYGZhy{}}\PYG{n}{lcom\PYGZus{}err}
-\end{sphinxVerbatim}
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_commands/krb5-config:see-also}}
-{\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}}, cc(1)
-
-
-\section{ksu}
-\label{\detokenize{user/user_commands/ksu:ksu-1}}\label{\detokenize{user/user_commands/ksu:ksu}}\label{\detokenize{user/user_commands/ksu::doc}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{user/user_commands/ksu:synopsis}}
-\sphinxstylestrong{ksu}
-{[} \sphinxstyleemphasis{target\_user} {]}
-{[} \sphinxstylestrong{-n} \sphinxstyleemphasis{target\_principal\_name} {]}
-{[} \sphinxstylestrong{-c} \sphinxstyleemphasis{source\_cache\_name} {]}
-{[} \sphinxstylestrong{-k} {]}
-{[} \sphinxstylestrong{-r} time {]}
-{[} \sphinxstylestrong{-p} \textbar{} \sphinxstylestrong{-P}{]}
-{[} \sphinxstylestrong{-f} \textbar{} \sphinxstylestrong{-F}{]}
-{[} \sphinxstylestrong{-l} \sphinxstyleemphasis{lifetime} {]}
-{[} \sphinxstylestrong{-z \textbar{} Z} {]}
-{[} \sphinxstylestrong{-q} {]}
-{[} \sphinxstylestrong{-e} \sphinxstyleemphasis{command} {[} args … {]} {]} {[} \sphinxstylestrong{-a} {[} args … {]} {]}
-
-
-\subsection{REQUIREMENTS}
-\label{\detokenize{user/user_commands/ksu:requirements}}
-Must have Kerberos version 5 installed to compile ksu. Must have a
-Kerberos version 5 server running to use ksu.
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_commands/ksu:description}}
-ksu is a Kerberized version of the su program that has two missions:
-one is to securely change the real and effective user ID to that of
-the target user, and the other is to create a new security context.
-
-\begin{sphinxadmonition}{note}{Note:}
-For the sake of clarity, all references to and attributes of
-the user invoking the program will start with “source”
-(e.g., “source user”, “source cache”, etc.).
-
-Likewise, all references to and attributes of the target
-account will start with “target”.
-\end{sphinxadmonition}
-
-
-\subsection{AUTHENTICATION}
-\label{\detokenize{user/user_commands/ksu:authentication}}
-To fulfill the first mission, ksu operates in two phases:
-authentication and authorization. Resolving the target principal name
-is the first step in authentication. The user can either specify his
-principal name with the \sphinxstylestrong{-n} option (e.g., \sphinxcode{-n jqpublic@USC.EDU})
-or a default principal name will be assigned using a heuristic
-described in the OPTIONS section (see \sphinxstylestrong{-n} option). The target user
-name must be the first argument to ksu; if not specified root is the
-default. If \sphinxcode{.} is specified then the target user will be the
-source user (e.g., \sphinxcode{ksu .}). If the source user is root or the
-target user is the source user, no authentication or authorization
-takes place. Otherwise, ksu looks for an appropriate Kerberos ticket
-in the source cache.
-
-The ticket can either be for the end-server or a ticket granting
-ticket (TGT) for the target principal’s realm. If the ticket for the
-end-server is already in the cache, it’s decrypted and verified. If
-it’s not in the cache but the TGT is, the TGT is used to obtain the
-ticket for the end-server. The end-server ticket is then verified.
-If neither ticket is in the cache, but ksu is compiled with the
-\sphinxstylestrong{GET\_TGT\_VIA\_PASSWD} define, the user will be prompted for a
-Kerberos password which will then be used to get a TGT. If the user
-is logged in remotely and does not have a secure channel, the password
-may be exposed. If neither ticket is in the cache and
-\sphinxstylestrong{GET\_TGT\_VIA\_PASSWD} is not defined, authentication fails.
-
-
-\subsection{AUTHORIZATION}
-\label{\detokenize{user/user_commands/ksu:authorization}}
-This section describes authorization of the source user when ksu is
-invoked without the \sphinxstylestrong{-e} option. For a description of the \sphinxstylestrong{-e}
-option, see the OPTIONS section.
-
-Upon successful authentication, ksu checks whether the target
-principal is authorized to access the target account. In the target
-user’s home directory, ksu attempts to access two authorization files:
-{\hyperref[\detokenize{user/user_config/k5login:k5login-5}]{\sphinxcrossref{\DUrole{std,std-ref}{.k5login}}}} and .k5users. In the .k5login file each line
-contains the name of a principal that is authorized to access the
-account.
-
-For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{jqpublic}\PYG{n+nd}{@USC}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{jqpublic}\PYG{o}{/}\PYG{n}{secure}\PYG{n+nd}{@USC}\PYG{o}{.}\PYG{n}{EDU}
-\PYG{n}{jqpublic}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@USC}\PYG{o}{.}\PYG{n}{EDU}
-\end{sphinxVerbatim}
-
-The format of .k5users is the same, except the principal name may be
-followed by a list of commands that the principal is authorized to
-execute (see the \sphinxstylestrong{-e} option in the OPTIONS section for details).
-
-Thus if the target principal name is found in the .k5login file the
-source user is authorized to access the target account. Otherwise ksu
-looks in the .k5users file. If the target principal name is found
-without any trailing commands or followed only by \sphinxcode{*} then the
-source user is authorized. If either .k5login or .k5users exist but
-an appropriate entry for the target principal does not exist then
-access is denied. If neither file exists then the principal will be
-granted access to the account according to the aname-\textgreater{}lname mapping
-rules. Otherwise, authorization fails.
-
-
-\subsection{EXECUTION OF THE TARGET SHELL}
-\label{\detokenize{user/user_commands/ksu:execution-of-the-target-shell}}
-Upon successful authentication and authorization, ksu proceeds in a
-similar fashion to su. The environment is unmodified with the
-exception of USER, HOME and SHELL variables. If the target user is
-not root, USER gets set to the target user name. Otherwise USER
-remains unchanged. Both HOME and SHELL are set to the target login’s
-default values. In addition, the environment variable \sphinxstylestrong{KRB5CCNAME}
-gets set to the name of the target cache. The real and effective user
-ID are changed to that of the target user. The target user’s shell is
-then invoked (the shell name is specified in the password file). Upon
-termination of the shell, ksu deletes the target cache (unless ksu is
-invoked with the \sphinxstylestrong{-k} option). This is implemented by first doing a
-fork and then an exec, instead of just exec, as done by su.
-
-
-\subsection{CREATING A NEW SECURITY CONTEXT}
-\label{\detokenize{user/user_commands/ksu:creating-a-new-security-context}}
-ksu can be used to create a new security context for the target
-program (either the target shell, or command specified via the \sphinxstylestrong{-e}
-option). The target program inherits a set of credentials from the
-source user. By default, this set includes all of the credentials in
-the source cache plus any additional credentials obtained during
-authentication. The source user is able to limit the credentials in
-this set by using \sphinxstylestrong{-z} or \sphinxstylestrong{-Z} option. \sphinxstylestrong{-z} restricts the copy
-of tickets from the source cache to the target cache to only the
-tickets where client == the target principal name. The \sphinxstylestrong{-Z} option
-provides the target user with a fresh target cache (no creds in the
-cache). Note that for security reasons, when the source user is root
-and target user is non-root, \sphinxstylestrong{-z} option is the default mode of
-operation.
-
-While no authentication takes place if the source user is root or is
-the same as the target user, additional tickets can still be obtained
-for the target cache. If \sphinxstylestrong{-n} is specified and no credentials can
-be copied to the target cache, the source user is prompted for a
-Kerberos password (unless \sphinxstylestrong{-Z} specified or \sphinxstylestrong{GET\_TGT\_VIA\_PASSWD}
-is undefined). If successful, a TGT is obtained from the Kerberos
-server and stored in the target cache. Otherwise, if a password is
-not provided (user hit return) ksu continues in a normal mode of
-operation (the target cache will not contain the desired TGT). If the
-wrong password is typed in, ksu fails.
-
-\begin{sphinxadmonition}{note}{Note:}
-During authentication, only the tickets that could be
-obtained without providing a password are cached in the
-source cache.
-\end{sphinxadmonition}
-
-
-\subsection{OPTIONS}
-\label{\detokenize{user/user_commands/ksu:options}}\begin{description}
-\item[{\sphinxstylestrong{-n} \sphinxstyleemphasis{target\_principal\_name}}] \leavevmode
-Specify a Kerberos target principal name. Used in authentication
-and authorization phases of ksu.
-
-If ksu is invoked without \sphinxstylestrong{-n}, a default principal name is
-assigned via the following heuristic:
-\begin{itemize}
-\item {}
-Case 1: source user is non-root.
-
-If the target user is the source user the default principal name
-is set to the default principal of the source cache. If the
-cache does not exist then the default principal name is set to
-\sphinxcode{target\_user@local\_realm}. If the source and target users are
-different and neither \sphinxcode{\textasciitilde{}target\_user/.k5users} nor
-\sphinxcode{\textasciitilde{}target\_user/.k5login} exist then the default principal name
-is \sphinxcode{target\_user\_login\_name@local\_realm}. Otherwise, starting
-with the first principal listed below, ksu checks if the
-principal is authorized to access the target account and whether
-there is a legitimate ticket for that principal in the source
-cache. If both conditions are met that principal becomes the
-default target principal, otherwise go to the next principal.
-\begin{enumerate}
-\item {}
-default principal of the source cache
-
-\item {}
-target\_user@local\_realm
-
-\item {}
-source\_user@local\_realm
-
-\end{enumerate}
-
-If a-c fails try any principal for which there is a ticket in
-the source cache and that is authorized to access the target
-account. If that fails select the first principal that is
-authorized to access the target account from the above list. If
-none are authorized and ksu is configured with
-\sphinxstylestrong{PRINC\_LOOK\_AHEAD} turned on, select the default principal as
-follows:
-
-For each candidate in the above list, select an authorized
-principal that has the same realm name and first part of the
-principal name equal to the prefix of the candidate. For
-example if candidate a) is \sphinxcode{jqpublic@ISI.EDU} and
-\sphinxcode{jqpublic/secure@ISI.EDU} is authorized to access the target
-account then the default principal is set to
-\sphinxcode{jqpublic/secure@ISI.EDU}.
-
-\item {}
-Case 2: source user is root.
-
-If the target user is non-root then the default principal name
-is \sphinxcode{target\_user@local\_realm}. Else, if the source cache
-exists the default principal name is set to the default
-principal of the source cache. If the source cache does not
-exist, default principal name is set to \sphinxcode{root\textbackslash{}@local\_realm}.
-
-\end{itemize}
-
-\end{description}
-
-\sphinxstylestrong{-c} \sphinxstyleemphasis{source\_cache\_name}
-\begin{quote}
-
-Specify source cache name (e.g., \sphinxcode{-c FILE:/tmp/my\_cache}). If
-\sphinxstylestrong{-c} option is not used then the name is obtained from
-\sphinxstylestrong{KRB5CCNAME} environment variable. If \sphinxstylestrong{KRB5CCNAME} is not
-defined the source cache name is set to \sphinxcode{krb5cc\_\textless{}source uid\textgreater{}}.
-The target cache name is automatically set to \sphinxcode{krb5cc\_\textless{}target
-uid\textgreater{}.(gen\_sym())}, where gen\_sym generates a new number such that
-the resulting cache does not already exist. For example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{krb5cc\PYGZus{}1984}\PYG{o}{.}\PYG{l+m+mi}{2}
-\end{sphinxVerbatim}
-\end{quote}
-\begin{description}
-\item[{\sphinxstylestrong{-k}}] \leavevmode
-Do not delete the target cache upon termination of the target
-shell or a command (\sphinxstylestrong{-e} command). Without \sphinxstylestrong{-k}, ksu deletes
-the target cache.
-
-\item[{\sphinxstylestrong{-z}}] \leavevmode
-Restrict the copy of tickets from the source cache to the target
-cache to only the tickets where client == the target principal
-name. Use the \sphinxstylestrong{-n} option if you want the tickets for other then
-the default principal. Note that the \sphinxstylestrong{-z} option is mutually
-exclusive with the \sphinxstylestrong{-Z} option.
-
-\item[{\sphinxstylestrong{-Z}}] \leavevmode
-Don’t copy any tickets from the source cache to the target cache.
-Just create a fresh target cache, where the default principal name
-of the cache is initialized to the target principal name. Note
-that the \sphinxstylestrong{-Z} option is mutually exclusive with the \sphinxstylestrong{-z}
-option.
-
-\item[{\sphinxstylestrong{-q}}] \leavevmode
-Suppress the printing of status messages.
-
-\end{description}
-
-Ticket granting ticket options:
-\begin{description}
-\item[{\sphinxstylestrong{-l} \sphinxstyleemphasis{lifetime} \sphinxstylestrong{-r} \sphinxstyleemphasis{time} \sphinxstylestrong{-p} \sphinxstylestrong{-P} \sphinxstylestrong{-f} \sphinxstylestrong{-F}}] \leavevmode
-The ticket granting ticket options only apply to the case where
-there are no appropriate tickets in the cache to authenticate the
-source user. In this case if ksu is configured to prompt users
-for a Kerberos password (\sphinxstylestrong{GET\_TGT\_VIA\_PASSWD} is defined), the
-ticket granting ticket options that are specified will be used
-when getting a ticket granting ticket from the Kerberos server.
-
-\item[{\sphinxstylestrong{-l} \sphinxstyleemphasis{lifetime}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} string.) Specifies the lifetime to be requested
-for the ticket; if this option is not specified, the default ticket
-lifetime (12 hours) is used instead.
-
-\item[{\sphinxstylestrong{-r} \sphinxstyleemphasis{time}}] \leavevmode
-(\DUrole{xref,std,std-ref}{duration} string.) Specifies that the \sphinxstylestrong{renewable} option
-should be requested for the ticket, and specifies the desired
-total lifetime of the ticket.
-
-\item[{\sphinxstylestrong{-p}}] \leavevmode
-specifies that the \sphinxstylestrong{proxiable} option should be requested for
-the ticket.
-
-\item[{\sphinxstylestrong{-P}}] \leavevmode
-specifies that the \sphinxstylestrong{proxiable} option should not be requested
-for the ticket, even if the default configuration is to ask for
-proxiable tickets.
-
-\item[{\sphinxstylestrong{-f}}] \leavevmode
-option specifies that the \sphinxstylestrong{forwardable} option should be
-requested for the ticket.
-
-\item[{\sphinxstylestrong{-F}}] \leavevmode
-option specifies that the \sphinxstylestrong{forwardable} option should not be
-requested for the ticket, even if the default configuration is to
-ask for forwardable tickets.
-
-\item[{\sphinxstylestrong{-e} \sphinxstyleemphasis{command} {[}\sphinxstyleemphasis{args} …{]}}] \leavevmode
-ksu proceeds exactly the same as if it was invoked without the
-\sphinxstylestrong{-e} option, except instead of executing the target shell, ksu
-executes the specified command. Example of usage:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{ksu} \PYG{n}{bob} \PYG{o}{\PYGZhy{}}\PYG{n}{e} \PYG{n}{ls} \PYG{o}{\PYGZhy{}}\PYG{n}{lag}
-\end{sphinxVerbatim}
-
-The authorization algorithm for \sphinxstylestrong{-e} is as follows:
-
-If the source user is root or source user == target user, no
-authorization takes place and the command is executed. If source
-user id != 0, and \sphinxcode{\textasciitilde{}target\_user/.k5users} file does not exist,
-authorization fails. Otherwise, \sphinxcode{\textasciitilde{}target\_user/.k5users} file
-must have an appropriate entry for target principal to get
-authorized.
-
-The .k5users file format:
-
-A single principal entry on each line that may be followed by a
-list of commands that the principal is authorized to execute. A
-principal name followed by a \sphinxcode{*} means that the user is
-authorized to execute any command. Thus, in the following
-example:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{jqpublic}\PYG{n+nd}{@USC}\PYG{o}{.}\PYG{n}{EDU} \PYG{n}{ls} \PYG{n}{mail} \PYG{o}{/}\PYG{n}{local}\PYG{o}{/}\PYG{n}{kerberos}\PYG{o}{/}\PYG{n}{klist}
-\PYG{n}{jqpublic}\PYG{o}{/}\PYG{n}{secure}\PYG{n+nd}{@USC}\PYG{o}{.}\PYG{n}{EDU} \PYG{o}{*}
-\PYG{n}{jqpublic}\PYG{o}{/}\PYG{n}{admin}\PYG{n+nd}{@USC}\PYG{o}{.}\PYG{n}{EDU}
-\end{sphinxVerbatim}
-
-\sphinxcode{jqpublic@USC.EDU} is only authorized to execute \sphinxcode{ls},
-\sphinxcode{mail} and \sphinxcode{klist} commands. \sphinxcode{jqpublic/secure@USC.EDU} is
-authorized to execute any command. \sphinxcode{jqpublic/admin@USC.EDU} is
-not authorized to execute any command. Note, that
-\sphinxcode{jqpublic/admin@USC.EDU} is authorized to execute the target
-shell (regular ksu, without the \sphinxstylestrong{-e} option) but
-\sphinxcode{jqpublic@USC.EDU} is not.
-
-The commands listed after the principal name must be either a full
-path names or just the program name. In the second case,
-\sphinxstylestrong{CMD\_PATH} specifying the location of authorized programs must
-be defined at the compilation time of ksu. Which command gets
-executed?
-
-If the source user is root or the target user is the source user
-or the user is authorized to execute any command (\sphinxcode{*} entry)
-then command can be either a full or a relative path leading to
-the target program. Otherwise, the user must specify either a
-full path or just the program name.
-
-\item[{\sphinxstylestrong{-a} \sphinxstyleemphasis{args}}] \leavevmode
-Specify arguments to be passed to the target shell. Note that all
-flags and parameters following -a will be passed to the shell,
-thus all options intended for ksu must precede \sphinxstylestrong{-a}.
-
-The \sphinxstylestrong{-a} option can be used to simulate the \sphinxstylestrong{-e} option if
-used as follows:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{o}{\PYGZhy{}}\PYG{n}{a} \PYG{o}{\PYGZhy{}}\PYG{n}{c} \PYG{p}{[}\PYG{n}{command} \PYG{p}{[}\PYG{n}{arguments}\PYG{p}{]}\PYG{p}{]}\PYG{o}{.}
-\end{sphinxVerbatim}
-
-\sphinxstylestrong{-c} is interpreted by the c-shell to execute the command.
-
-\end{description}
-
-
-\subsection{INSTALLATION INSTRUCTIONS}
-\label{\detokenize{user/user_commands/ksu:installation-instructions}}
-ksu can be compiled with the following four flags:
-\begin{description}
-\item[{\sphinxstylestrong{GET\_TGT\_VIA\_PASSWD}}] \leavevmode
-In case no appropriate tickets are found in the source cache, the
-user will be prompted for a Kerberos password. The password is
-then used to get a ticket granting ticket from the Kerberos
-server. The danger of configuring ksu with this macro is if the
-source user is logged in remotely and does not have a secure
-channel, the password may get exposed.
-
-\item[{\sphinxstylestrong{PRINC\_LOOK\_AHEAD}}] \leavevmode
-During the resolution of the default principal name,
-\sphinxstylestrong{PRINC\_LOOK\_AHEAD} enables ksu to find principal names in
-the .k5users file as described in the OPTIONS section
-(see \sphinxstylestrong{-n} option).
-
-\item[{\sphinxstylestrong{CMD\_PATH}}] \leavevmode
-Specifies a list of directories containing programs that users are
-authorized to execute (via .k5users file).
-
-\item[{\sphinxstylestrong{HAVE\_GETUSERSHELL}}] \leavevmode
-If the source user is non-root, ksu insists that the target user’s
-shell to be invoked is a “legal shell”. \sphinxstyleemphasis{getusershell(3)} is
-called to obtain the names of “legal shells”. Note that the
-target user’s shell is obtained from the passwd file.
-
-\end{description}
-
-Sample configuration:
-
-\fvset{hllines={, ,}}%
-\begin{sphinxVerbatim}[commandchars=\\\{\}]
-\PYG{n}{KSU\PYGZus{}OPTS} \PYG{o}{=} \PYG{o}{\PYGZhy{}}\PYG{n}{DGET\PYGZus{}TGT\PYGZus{}VIA\PYGZus{}PASSWD} \PYG{o}{\PYGZhy{}}\PYG{n}{DPRINC\PYGZus{}LOOK\PYGZus{}AHEAD} \PYG{o}{\PYGZhy{}}\PYG{n}{DCMD\PYGZus{}PATH}\PYG{o}{=}\PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{\PYGZdq{}}\PYG{l+s+s1}{/bin /usr/ucb /local/bin}\PYG{l+s+s1}{\PYGZdq{}}
-\end{sphinxVerbatim}
-
-ksu should be owned by root and have the set user id bit turned on.
-
-ksu attempts to get a ticket for the end server just as Kerberized
-telnet and rlogin. Thus, there must be an entry for the server in the
-Kerberos database (e.g., \sphinxcode{host/nii.isi.edu@ISI.EDU}). The keytab
-file must be in an appropriate location.
-
-
-\subsection{SIDE EFFECTS}
-\label{\detokenize{user/user_commands/ksu:side-effects}}
-ksu deletes all expired tickets from the source cache.
-
-
-\subsection{AUTHOR OF KSU}
-\label{\detokenize{user/user_commands/ksu:author-of-ksu}}
-GENNADY (ARI) MEDVINSKY
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{user/user_commands/ksu:environment}}
-See {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_commands/ksu:see-also}}
-{\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}}, {\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}}
-
-
-\section{kswitch}
-\label{\detokenize{user/user_commands/kswitch:kswitch-1}}\label{\detokenize{user/user_commands/kswitch:kswitch}}\label{\detokenize{user/user_commands/kswitch::doc}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{user/user_commands/kswitch:synopsis}}
-\sphinxstylestrong{kswitch}
-\{\sphinxstylestrong{-c} \sphinxstyleemphasis{cachename}\textbar{}\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}\}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_commands/kswitch:description}}
-kswitch makes the specified credential cache the primary cache for the
-collection, if a cache collection is available.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{user/user_commands/kswitch:options}}\begin{description}
-\item[{\sphinxstylestrong{-c} \sphinxstyleemphasis{cachename}}] \leavevmode
-Directly specifies the credential cache to be made primary.
-
-\item[{\sphinxstylestrong{-p} \sphinxstyleemphasis{principal}}] \leavevmode
-Causes the cache collection to be searched for a cache containing
-credentials for \sphinxstyleemphasis{principal}. If one is found, that collection is
-made primary.
-
-\end{description}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{user/user_commands/kswitch:environment}}
-See {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}} for a description of Kerberos environment
-variables.
-
-
-\subsection{FILES}
-\label{\detokenize{user/user_commands/kswitch:files}}\begin{description}
-\item[{\DUrole{xref,std,std-ref}{DEFCCNAME}}] \leavevmode
-Default location of Kerberos 5 credentials cache
-
-\end{description}
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_commands/kswitch:see-also}}
-{\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}}, {\hyperref[\detokenize{user/user_commands/kdestroy:kdestroy-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kdestroy}}}}, {\hyperref[\detokenize{user/user_commands/klist:klist-1}]{\sphinxcrossref{\DUrole{std,std-ref}{klist}}}},
-{\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}}
-
-
-\section{kvno}
-\label{\detokenize{user/user_commands/kvno:kvno-1}}\label{\detokenize{user/user_commands/kvno::doc}}\label{\detokenize{user/user_commands/kvno:kvno}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{user/user_commands/kvno:synopsis}}
-\sphinxstylestrong{kvno}
-{[}\sphinxstylestrong{-c} \sphinxstyleemphasis{ccache}{]}
-{[}\sphinxstylestrong{-e} \sphinxstyleemphasis{etype}{]}
-{[}\sphinxstylestrong{-k} \sphinxstyleemphasis{keytab}{]}
-{[}\sphinxstylestrong{-q}{]}
-{[}\sphinxstylestrong{-u} \textbar{} \sphinxstylestrong{-S} \sphinxstyleemphasis{sname}{]}
-{[}\sphinxstylestrong{-P}{]}
-{[}\sphinxstylestrong{\textendash{}cached-only}{]}
-{[}\sphinxstylestrong{\textendash{}no-store}{]}
-{[}\sphinxstylestrong{\textendash{}out-cache} \sphinxstyleemphasis{cache}{]}
-{[}{[}\{\sphinxstylestrong{-F} \sphinxstyleemphasis{cert\_file} \textbar{} \{\sphinxstylestrong{-I} \textbar{} \sphinxstylestrong{-U}\} \sphinxstyleemphasis{for\_user}\} {[}\sphinxstylestrong{-P}{]}{]} \textbar{} \sphinxstylestrong{\textendash{}u2u} \sphinxstyleemphasis{ccache}{]}
-\sphinxstyleemphasis{service1 service2} …
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_commands/kvno:description}}
-kvno acquires a service ticket for the specified Kerberos principals
-and prints out the key version numbers of each.
-
-
-\subsection{OPTIONS}
-\label{\detokenize{user/user_commands/kvno:options}}\begin{description}
-\item[{\sphinxstylestrong{-c} \sphinxstyleemphasis{ccache}}] \leavevmode
-Specifies the name of a credentials cache to use (if not the
-default)
-
-\item[{\sphinxstylestrong{-e} \sphinxstyleemphasis{etype}}] \leavevmode
-Specifies the enctype which will be requested for the session key
-of all the services named on the command line. This is useful in
-certain backward compatibility situations.
-
-\item[{\sphinxstylestrong{-k} \sphinxstyleemphasis{keytab}}] \leavevmode
-Decrypt the acquired tickets using \sphinxstyleemphasis{keytab} to confirm their
-validity.
-
-\item[{\sphinxstylestrong{-q}}] \leavevmode
-Suppress printing output when successful. If a service ticket
-cannot be obtained, an error message will still be printed and
-kvno will exit with nonzero status.
-
-\item[{\sphinxstylestrong{-u}}] \leavevmode
-Use the unknown name type in requested service principal names.
-This option Cannot be used with \sphinxstyleemphasis{-S}.
-
-\item[{\sphinxstylestrong{-P}}] \leavevmode
-Specifies that the \sphinxstyleemphasis{service1 service2} … arguments are to be
-treated as services for which credentials should be acquired using
-constrained delegation. This option is only valid when used in
-conjunction with protocol transition.
-
-\item[{\sphinxstylestrong{-S} \sphinxstyleemphasis{sname}}] \leavevmode
-Specifies that the \sphinxstyleemphasis{service1 service2} … arguments are
-interpreted as hostnames, and the service principals are to be
-constructed from those hostnames and the service name \sphinxstyleemphasis{sname}.
-The service hostnames will be canonicalized according to the usual
-rules for constructing service principals.
-
-\item[{\sphinxstylestrong{-I} \sphinxstyleemphasis{for\_user}}] \leavevmode
-Specifies that protocol transition (S4U2Self) is to be used to
-acquire a ticket on behalf of \sphinxstyleemphasis{for\_user}. If constrained
-delegation is not requested, the service name must match the
-credentials cache client principal.
-
-\item[{\sphinxstylestrong{-U} \sphinxstyleemphasis{for\_user}}] \leavevmode
-Same as -I, but treats \sphinxstyleemphasis{for\_user} as an enterprise name.
-
-\item[{\sphinxstylestrong{-F} \sphinxstyleemphasis{cert\_file}}] \leavevmode
-Specifies that protocol transition is to be used, identifying the
-client principal with the X.509 certificate in \sphinxstyleemphasis{cert\_file}. The
-certificate file must be in PEM format.
-
-\item[{\sphinxstylestrong{\textendash{}cached-only}}] \leavevmode
-Only retrieve credentials already present in the cache, not from
-the KDC. (Added in release 1.19.)
-
-\item[{\sphinxstylestrong{\textendash{}no-store}}] \leavevmode
-Do not store retrieved credentials in the cache. If
-\sphinxstylestrong{\textendash{}out-cache} is also specified, credentials will still be
-stored into the output credential cache. (Added in release 1.19.)
-
-\item[{\sphinxstylestrong{\textendash{}out-cache} \sphinxstyleemphasis{ccache}}] \leavevmode
-Initialize \sphinxstyleemphasis{ccache} and store all retrieved credentials into it.
-Do not store acquired credentials in the input cache. (Added in
-release 1.19.)
-
-\item[{\sphinxstylestrong{\textendash{}u2u} \sphinxstyleemphasis{ccache}}] \leavevmode
-Requests a user-to-user ticket. \sphinxstyleemphasis{ccache} must contain a local
-krbtgt ticket for the server principal. The reported version
-number will typically be 0, as the resulting ticket is not
-encrypted in the server’s long-term key.
-
-\end{description}
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{user/user_commands/kvno:environment}}
-See {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}} for a description of Kerberos environment
-variables.
-
-
-\subsection{FILES}
-\label{\detokenize{user/user_commands/kvno:files}}\begin{description}
-\item[{\DUrole{xref,std,std-ref}{DEFCCNAME}}] \leavevmode
-Default location of the credentials cache
-
-\end{description}
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_commands/kvno:see-also}}
-{\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}}, {\hyperref[\detokenize{user/user_commands/kdestroy:kdestroy-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kdestroy}}}}, {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}}
-
-
-\section{sclient}
-\label{\detokenize{user/user_commands/sclient:sclient}}\label{\detokenize{user/user_commands/sclient::doc}}\label{\detokenize{user/user_commands/sclient:sclient-1}}
-
-\subsection{SYNOPSIS}
-\label{\detokenize{user/user_commands/sclient:synopsis}}
-\sphinxstylestrong{sclient} \sphinxstyleemphasis{remotehost}
-
-
-\subsection{DESCRIPTION}
-\label{\detokenize{user/user_commands/sclient:description}}
-sclient is a sample application, primarily useful for testing
-purposes. It contacts a sample server \DUrole{xref,std,std-ref}{sserver(8)} and
-authenticates to it using Kerberos version 5 tickets, then displays
-the server’s response.
-
-
-\subsection{ENVIRONMENT}
-\label{\detokenize{user/user_commands/sclient:environment}}
-See {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}} for a description of Kerberos environment
-variables.
-
-
-\subsection{SEE ALSO}
-\label{\detokenize{user/user_commands/sclient:see-also}}
-{\hyperref[\detokenize{user/user_commands/kinit:kinit-1}]{\sphinxcrossref{\DUrole{std,std-ref}{kinit}}}}, \DUrole{xref,std,std-ref}{sserver(8)}, {\hyperref[\detokenize{user/user_config/kerberos:kerberos-7}]{\sphinxcrossref{\DUrole{std,std-ref}{kerberos}}}}
-
-
-
-\renewcommand{\indexname}{Index}
-\printindex
-\end{document}
\ No newline at end of file
[[struct sockaddr_in6 in;
AF_INET6;
IN6_IS_ADDR_LINKLOCAL(&in.sin6_addr);]])],
- [krb5_cv_inet6=yes], [krb5_cv_inet6=no])])
-fi
+ [krb5_cv_inet6=yes], [krb5_cv_inet6=no])
+fi])
AC_MSG_RESULT($krb5_cv_inet6)
if test "$krb5_cv_inet6" = no && test "$ac_cv_func_inet_ntop" = yes; then
AC_MSG_CHECKING(for IPv6 compile-time support with -DINET6)
#define GETPEERNAME_ARG3_TYPE int
#endif
-#define DEBUG
-
static void
usage(char *name)
{
* This program performs no useful function.
*/
-#include <k5-int.h>
+#include <krb5.h>
#include "com_err.h"
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
+#include <stdio.h>
+#include <string.h>
+#include <errno.h>
#include <netdb.h>
-#include <ctype.h>
+#include <getopt.h>
#ifdef HAVE_UNISTD_H
#include <unistd.h>
#endif
int flags = 0; /* flags for sendto() */
struct servent *serv;
struct hostent *host;
- char *cp;
#ifdef BROKEN_STREAMS_SOCKETS
char my_hostname[MAXHOSTNAMELEN];
#endif
krb5_error_code retval;
krb5_data packet, inbuf;
krb5_ccache ccdef;
- krb5_address addr, *portlocal_addr;
+ krb5_address addr;
krb5_context context;
krb5_auth_context auth_context = NULL;
exit(1);
}
- if ((retval = krb5_mk_req(context, &auth_context, 0, service, hostname,
- &inbuf, ccdef, &packet))) {
+ retval = krb5_mk_req(context, &auth_context, AP_OPTS_USE_SUBKEY, service,
+ hostname, &inbuf, ccdef, &packet);
+ if (retval) {
com_err(progname, retval, "while preparing AP_REQ");
exit(1);
}
exit(1);
}
- /* THIS IS UGLY */
- if ((retval = krb5_gen_portaddr(context, &addr,
- (krb5_pointer) &c_sock.sin_port,
- &portlocal_addr))) {
- com_err(progname, retval, "while generating port address");
- exit(1);
- }
-
- if ((retval = krb5_gen_replay_name(context,portlocal_addr,
- "_sim_clt",&cp))) {
- com_err(progname, retval, "while generating replay cache name");
- exit(1);
- }
-
/* Make the safe message */
inbuf.data = message;
inbuf.length = strlen(message);
libdir=@libdir@
CC_LINK='@CC_LINK@'
KDB5_DB_LIB=@KDB5_DB_LIB@
-LDFLAGS='@LDFLAGS@'
RPATH_FLAG='@RPATH_FLAG@'
PROG_RPATH_FLAGS='@PROG_RPATH_FLAGS@'
PTHREAD_CFLAGS='@PTHREAD_CFLAGS@'
-e 's#\$(PROG_RPATH)#'$libdir'#' \
-e 's#\$(PROG_LIBPATH)#'$libdirarg'#' \
-e 's#\$(RPATH_FLAG)#'"$RPATH_FLAG"'#' \
- -e 's#\$(LDFLAGS)#'"$LDFLAGS"'#' \
+ -e 's#\$(LDFLAGS)##' \
-e 's#\$(PTHREAD_CFLAGS)#'"$PTHREAD_CFLAGS"'#' \
-e 's#\$(CFLAGS)##'`
for(j= 0; j < i; j ++)
k5_buf_add_fmt(&buf, " %s ", fcmd_arr[j]);
k5_buf_add(&buf, "\n");
- if (k5_buf_status(&buf) != 0) {
+ *err_out = k5_buf_cstring(&buf);
+ if (*err_out == NULL) {
perror(prog_name);
exit(1);
}
- *err_out = buf.data;
}
FILE *fp = NULL;
const char *begin_line = "-----BEGIN CERTIFICATE-----";
const char *end_line = "-----END ", *line;
- char linebuf[256];
+ char linebuf[256], *b64;
struct k5buf buf = EMPTY_K5BUF;
uint8_t *der_cert;
size_t dlen;
k5_buf_add(&buf, line);
}
- der_cert = k5_base64_decode(buf.data, &dlen);
+ b64 = k5_buf_cstring(&buf);
+ if (b64 == NULL) {
+ ret = ENOMEM;
+ goto cleanup;
+ }
+ der_cert = k5_base64_decode(b64, &dlen);
if (der_cert == NULL) {
ret = EINVAL;
k5_setmsg(context, ret, _("Invalid base64"));
under a modified version of the GNU General Public License as noted in
the comments near the top of each file.
-ax_pthread.m4 serial 24 2017-02-06
+ax_pthread.m4 serial 31 2023-02-20
ax_recursive_eval.m4 serial 1 2017-01-05
# flags that are needed. (The user can also force certain compiler
# flags/libs to be tested by setting these environment variables.)
#
-# Also sets PTHREAD_CC to any special C compiler that is needed for
-# multi-threaded programs (defaults to the value of CC otherwise). (This
-# is necessary on AIX to use the special cc_r compiler alias.)
+# Also sets PTHREAD_CC and PTHREAD_CXX to any special C compiler that is
+# needed for multi-threaded programs (defaults to the value of CC
+# respectively CXX otherwise). (This is necessary on e.g. AIX to use the
+# special cc_r/CC_r compiler alias.)
#
# NOTE: You are assumed to not only compile your program with these flags,
# but also to link with them as well. For example, you might link with
# $PTHREAD_CC $CFLAGS $PTHREAD_CFLAGS $LDFLAGS ... $PTHREAD_LIBS $LIBS
+# $PTHREAD_CXX $CXXFLAGS $PTHREAD_CFLAGS $LDFLAGS ... $PTHREAD_LIBS $LIBS
#
# If you are only building threaded programs, you may wish to use these
# variables in your default LIBS, CFLAGS, and CC:
#
# LIBS="$PTHREAD_LIBS $LIBS"
# CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
+# CXXFLAGS="$CXXFLAGS $PTHREAD_CFLAGS"
# CC="$PTHREAD_CC"
+# CXX="$PTHREAD_CXX"
#
# In addition, if the PTHREAD_CREATE_JOINABLE thread-attribute constant
# has a nonstandard name, this macro defines PTHREAD_CREATE_JOINABLE to
#
# Copyright (c) 2008 Steven G. Johnson <stevenj@alum.mit.edu>
# Copyright (c) 2011 Daniel Richard G. <skunk@iSKUNK.ORG>
+# Copyright (c) 2019 Marc Stevens <marc.stevens@cwi.nl>
#
# This program is free software: you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by the
# modified version of the Autoconf Macro, you may extend this special
# exception to the GPL to apply to your modified version as well.
-#serial 24
+#serial 31
AU_ALIAS([ACX_PTHREAD], [AX_PTHREAD])
AC_DEFUN([AX_PTHREAD], [
ax_pthread_save_CFLAGS="$CFLAGS"
ax_pthread_save_LIBS="$LIBS"
AS_IF([test "x$PTHREAD_CC" != "x"], [CC="$PTHREAD_CC"])
+ AS_IF([test "x$PTHREAD_CXX" != "x"], [CXX="$PTHREAD_CXX"])
CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
LIBS="$PTHREAD_LIBS $LIBS"
AC_MSG_CHECKING([for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS])
# (e.g. DEC) have both -lpthread and -lpthreads, where one of the
# libraries is broken (non-POSIX).
-# Create a list of thread flags to try. Items starting with a "-" are
-# C compiler flags, and other items are library names, except for "none"
-# which indicates that we try without any flags at all, and "pthread-config"
-# which is a program returning the flags for the Pth emulation library.
+# Create a list of thread flags to try. Items with a "," contain both
+# C compiler flags (before ",") and linker flags (after ","). Other items
+# starting with a "-" are C compiler flags, and remaining items are
+# library names, except for "none" which indicates that we try without
+# any flags at all, and "pthread-config" which is a program returning
+# the flags for the Pth emulation library.
ax_pthread_flags="pthreads none -Kthread -pthread -pthreads -mthreads pthread --thread-safe -mt pthread-config"
# that too in a future libc.) So we'll check first for the
# standard Solaris way of linking pthreads (-mt -lpthread).
- ax_pthread_flags="-mt,pthread pthread $ax_pthread_flags"
+ ax_pthread_flags="-mt,-lpthread pthread $ax_pthread_flags"
;;
esac
+# Are we compiling with Clang?
+
+AC_CACHE_CHECK([whether $CC is Clang],
+ [ax_cv_PTHREAD_CLANG],
+ [ax_cv_PTHREAD_CLANG=no
+ # Note that Autoconf sets GCC=yes for Clang as well as GCC
+ if test "x$GCC" = "xyes"; then
+ AC_EGREP_CPP([AX_PTHREAD_CC_IS_CLANG],
+ [/* Note: Clang 2.7 lacks __clang_[a-z]+__ */
+# if defined(__clang__) && defined(__llvm__)
+ AX_PTHREAD_CC_IS_CLANG
+# endif
+ ],
+ [ax_cv_PTHREAD_CLANG=yes])
+ fi
+ ])
+ax_pthread_clang="$ax_cv_PTHREAD_CLANG"
+
+
# GCC generally uses -pthread, or -pthreads on some platforms (e.g. SPARC)
+# Note that for GCC and Clang -pthread generally implies -lpthread,
+# except when -nostdlib is passed.
+# This is problematic using libtool to build C++ shared libraries with pthread:
+# [1] https://gcc.gnu.org/bugzilla/show_bug.cgi?id=25460
+# [2] https://bugzilla.redhat.com/show_bug.cgi?id=661333
+# [3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468555
+# To solve this, first try -pthread together with -lpthread for GCC
+
AS_IF([test "x$GCC" = "xyes"],
- [ax_pthread_flags="-pthread -pthreads $ax_pthread_flags"])
+ [ax_pthread_flags="-pthread,-lpthread -pthread -pthreads $ax_pthread_flags"])
+
+# Clang takes -pthread (never supported any other flag), but we'll try with -lpthread first
+
+AS_IF([test "x$ax_pthread_clang" = "xyes"],
+ [ax_pthread_flags="-pthread,-lpthread -pthread"])
+
# The presence of a feature test macro requesting re-entrant function
# definitions is, on some systems, a strong hint that pthreads support is
[ax_pthread_check_cond=0],
[ax_pthread_check_cond="!defined($ax_pthread_check_macro)"])
-# Are we compiling with Clang?
-AC_CACHE_CHECK([whether $CC is Clang],
- [ax_cv_PTHREAD_CLANG],
- [ax_cv_PTHREAD_CLANG=no
- # Note that Autoconf sets GCC=yes for Clang as well as GCC
- if test "x$GCC" = "xyes"; then
- AC_EGREP_CPP([AX_PTHREAD_CC_IS_CLANG],
- [/* Note: Clang 2.7 lacks __clang_[a-z]+__ */
-# if defined(__clang__) && defined(__llvm__)
- AX_PTHREAD_CC_IS_CLANG
-# endif
- ],
- [ax_cv_PTHREAD_CLANG=yes])
- fi
- ])
-ax_pthread_clang="$ax_cv_PTHREAD_CLANG"
+if test "x$ax_pthread_ok" = "xno"; then
+for ax_pthread_try_flag in $ax_pthread_flags; do
+
+ case $ax_pthread_try_flag in
+ none)
+ AC_MSG_CHECKING([whether pthreads work without any flags])
+ ;;
+
+ *,*)
+ PTHREAD_CFLAGS=`echo $ax_pthread_try_flag | sed "s/^\(.*\),\(.*\)$/\1/"`
+ PTHREAD_LIBS=`echo $ax_pthread_try_flag | sed "s/^\(.*\),\(.*\)$/\2/"`
+ AC_MSG_CHECKING([whether pthreads work with "$PTHREAD_CFLAGS" and "$PTHREAD_LIBS"])
+ ;;
+
+ -*)
+ AC_MSG_CHECKING([whether pthreads work with $ax_pthread_try_flag])
+ PTHREAD_CFLAGS="$ax_pthread_try_flag"
+ ;;
+
+ pthread-config)
+ AC_CHECK_PROG([ax_pthread_config], [pthread-config], [yes], [no])
+ AS_IF([test "x$ax_pthread_config" = "xno"], [continue])
+ PTHREAD_CFLAGS="`pthread-config --cflags`"
+ PTHREAD_LIBS="`pthread-config --ldflags` `pthread-config --libs`"
+ ;;
+
+ *)
+ AC_MSG_CHECKING([for the pthreads library -l$ax_pthread_try_flag])
+ PTHREAD_LIBS="-l$ax_pthread_try_flag"
+ ;;
+ esac
+
+ ax_pthread_save_CFLAGS="$CFLAGS"
+ ax_pthread_save_LIBS="$LIBS"
+ CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
+ LIBS="$PTHREAD_LIBS $LIBS"
+
+ # Check for various functions. We must include pthread.h,
+ # since some functions may be macros. (On the Sequent, we
+ # need a special flag -Kthread to make this header compile.)
+ # We check for pthread_join because it is in -lpthread on IRIX
+ # while pthread_create is in libc. We check for pthread_attr_init
+ # due to DEC craziness with -lpthreads. We check for
+ # pthread_cleanup_push because it is one of the few pthread
+ # functions on Solaris that doesn't have a non-functional libc stub.
+ # We try pthread_create on general principles.
+
+ AC_LINK_IFELSE([AC_LANG_PROGRAM([#include <pthread.h>
+# if $ax_pthread_check_cond
+# error "$ax_pthread_check_macro must be defined"
+# endif
+ static void *some_global = NULL;
+ static void routine(void *a)
+ {
+ /* To avoid any unused-parameter or
+ unused-but-set-parameter warning. */
+ some_global = a;
+ }
+ static void *start_routine(void *a) { return a; }],
+ [pthread_t th; pthread_attr_t attr;
+ pthread_create(&th, 0, start_routine, 0);
+ pthread_join(th, 0);
+ pthread_attr_init(&attr);
+ pthread_cleanup_push(routine, 0);
+ pthread_cleanup_pop(0) /* ; */])],
+ [ax_pthread_ok=yes],
+ [])
+
+ CFLAGS="$ax_pthread_save_CFLAGS"
+ LIBS="$ax_pthread_save_LIBS"
+
+ AC_MSG_RESULT([$ax_pthread_ok])
+ AS_IF([test "x$ax_pthread_ok" = "xyes"], [break])
+
+ PTHREAD_LIBS=""
+ PTHREAD_CFLAGS=""
+done
+fi
-ax_pthread_clang_warning=no
# Clang needs special handling, because older versions handle the -pthread
# option in a rather... idiosyncratic way
# -pthread does define _REENTRANT, and while the Darwin headers
# ignore this macro, third-party headers might not.)
- PTHREAD_CFLAGS="-pthread"
- PTHREAD_LIBS=
-
- ax_pthread_ok=yes
-
# However, older versions of Clang make a point of warning the user
# that, in an invocation where only linking and no compilation is
# taking place, the -pthread option has no effect ("argument unused
# step
ax_pthread_save_ac_link="$ac_link"
ax_pthread_sed='s/conftest\.\$ac_ext/conftest.$ac_objext/g'
- ax_pthread_link_step=`$as_echo "$ac_link" | sed "$ax_pthread_sed"`
+ ax_pthread_link_step=`AS_ECHO(["$ac_link"]) | sed "$ax_pthread_sed"`
ax_pthread_2step_ac_link="($ac_compile) && (echo ==== >&5) && ($ax_pthread_link_step)"
ax_pthread_save_CFLAGS="$CFLAGS"
for ax_pthread_try in '' -Qunused-arguments -Wno-unused-command-line-argument unknown; do
fi # $ax_pthread_clang = yes
-if test "x$ax_pthread_ok" = "xno"; then
-for ax_pthread_try_flag in $ax_pthread_flags; do
-
- case $ax_pthread_try_flag in
- none)
- AC_MSG_CHECKING([whether pthreads work without any flags])
- ;;
-
- -mt,pthread)
- AC_MSG_CHECKING([whether pthreads work with -mt -lpthread])
- PTHREAD_CFLAGS="-mt"
- PTHREAD_LIBS="-lpthread"
- ;;
-
- -*)
- AC_MSG_CHECKING([whether pthreads work with $ax_pthread_try_flag])
- PTHREAD_CFLAGS="$ax_pthread_try_flag"
- ;;
- pthread-config)
- AC_CHECK_PROG([ax_pthread_config], [pthread-config], [yes], [no])
- AS_IF([test "x$ax_pthread_config" = "xno"], [continue])
- PTHREAD_CFLAGS="`pthread-config --cflags`"
- PTHREAD_LIBS="`pthread-config --ldflags` `pthread-config --libs`"
- ;;
-
- *)
- AC_MSG_CHECKING([for the pthreads library -l$ax_pthread_try_flag])
- PTHREAD_LIBS="-l$ax_pthread_try_flag"
- ;;
- esac
-
- ax_pthread_save_CFLAGS="$CFLAGS"
- ax_pthread_save_LIBS="$LIBS"
- CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
- LIBS="$PTHREAD_LIBS $LIBS"
-
- # Check for various functions. We must include pthread.h,
- # since some functions may be macros. (On the Sequent, we
- # need a special flag -Kthread to make this header compile.)
- # We check for pthread_join because it is in -lpthread on IRIX
- # while pthread_create is in libc. We check for pthread_attr_init
- # due to DEC craziness with -lpthreads. We check for
- # pthread_cleanup_push because it is one of the few pthread
- # functions on Solaris that doesn't have a non-functional libc stub.
- # We try pthread_create on general principles.
-
- AC_LINK_IFELSE([AC_LANG_PROGRAM([#include <pthread.h>
-# if $ax_pthread_check_cond
-# error "$ax_pthread_check_macro must be defined"
-# endif
- static void routine(void *a) { a = 0; }
- static void *start_routine(void *a) { return a; }],
- [pthread_t th; pthread_attr_t attr;
- pthread_create(&th, 0, start_routine, 0);
- pthread_join(th, 0);
- pthread_attr_init(&attr);
- pthread_cleanup_push(routine, 0);
- pthread_cleanup_pop(0) /* ; */])],
- [ax_pthread_ok=yes],
- [])
-
- CFLAGS="$ax_pthread_save_CFLAGS"
- LIBS="$ax_pthread_save_LIBS"
-
- AC_MSG_RESULT([$ax_pthread_ok])
- AS_IF([test "x$ax_pthread_ok" = "xyes"], [break])
-
- PTHREAD_LIBS=""
- PTHREAD_CFLAGS=""
-done
-fi
# Various other checks:
if test "x$ax_pthread_ok" = "xyes"; then
AC_CACHE_CHECK([for PTHREAD_PRIO_INHERIT],
[ax_cv_PTHREAD_PRIO_INHERIT],
[AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include <pthread.h>]],
- [[int i = PTHREAD_PRIO_INHERIT;]])],
+ [[int i = PTHREAD_PRIO_INHERIT;
+ return i;]])],
[ax_cv_PTHREAD_PRIO_INHERIT=yes],
[ax_cv_PTHREAD_PRIO_INHERIT=no])
])
[#handle absolute path differently from PATH based program lookup
AS_CASE(["x$CC"],
[x/*],
- [AS_IF([AS_EXECUTABLE_P([${CC}_r])],[PTHREAD_CC="${CC}_r"])],
- [AC_CHECK_PROGS([PTHREAD_CC],[${CC}_r],[$CC])])])
+ [
+ AS_IF([AS_EXECUTABLE_P([${CC}_r])],[PTHREAD_CC="${CC}_r"])
+ AS_IF([test "x${CXX}" != "x"], [AS_IF([AS_EXECUTABLE_P([${CXX}_r])],[PTHREAD_CXX="${CXX}_r"])])
+ ],
+ [
+ AC_CHECK_PROGS([PTHREAD_CC],[${CC}_r],[$CC])
+ AS_IF([test "x${CXX}" != "x"], [AC_CHECK_PROGS([PTHREAD_CXX],[${CXX}_r],[$CXX])])
+ ]
+ )
+ ])
;;
esac
fi
fi
test -n "$PTHREAD_CC" || PTHREAD_CC="$CC"
+test -n "$PTHREAD_CXX" || PTHREAD_CXX="$CXX"
AC_SUBST([PTHREAD_LIBS])
AC_SUBST([PTHREAD_CFLAGS])
AC_SUBST([PTHREAD_CC])
+AC_SUBST([PTHREAD_CXX])
# Finally, execute ACTION-IF-FOUND/ACTION-IF-NOT-FOUND:
if test "x$ax_pthread_ok" = "xyes"; then
#! /bin/sh
# Attempt to guess a canonical system name.
-# Copyright 1992-2022 Free Software Foundation, Inc.
+# Copyright 1992-2023 Free Software Foundation, Inc.
# shellcheck disable=SC2006,SC2268 # see below for rationale
-timestamp='2022-01-09'
+timestamp='2023-01-01'
# This file is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
GNU config.guess ($timestamp)
Originally written by Per Bothner.
-Copyright 1992-2022 Free Software Foundation, Inc.
+Copyright 1992-2023 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
GNU_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
GUESS=$UNAME_MACHINE-unknown-$GNU_SYS$GNU_REL-$LIBC
;;
+ x86_64:[Mm]anagarm:*:*|i?86:[Mm]anagarm:*:*)
+ GUESS="$UNAME_MACHINE-pc-managarm-mlibc"
+ ;;
+ *:[Mm]anagarm:*:*)
+ GUESS="$UNAME_MACHINE-unknown-managarm-mlibc"
+ ;;
*:Minix:*:*)
GUESS=$UNAME_MACHINE-unknown-minix
;;
k1om:Linux:*:*)
GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
;;
- loongarch32:Linux:*:* | loongarch64:Linux:*:* | loongarchx32:Linux:*:*)
+ loongarch32:Linux:*:* | loongarch64:Linux:*:*)
GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
;;
m32r*:Linux:*:*)
;;
x86_64:Linux:*:*)
set_cc_for_build
+ CPU=$UNAME_MACHINE
LIBCABI=$LIBC
if test "$CC_FOR_BUILD" != no_compiler_found; then
- if (echo '#ifdef __ILP32__'; echo IS_X32; echo '#endif') | \
- (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \
- grep IS_X32 >/dev/null
- then
- LIBCABI=${LIBC}x32
- fi
+ ABI=64
+ sed 's/^ //' << EOF > "$dummy.c"
+ #ifdef __i386__
+ ABI=x86
+ #else
+ #ifdef __ILP32__
+ ABI=x32
+ #endif
+ #endif
+EOF
+ cc_set_abi=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^ABI' | sed 's, ,,g'`
+ eval "$cc_set_abi"
+ case $ABI in
+ x86) CPU=i686 ;;
+ x32) LIBCABI=${LIBC}x32 ;;
+ esac
fi
- GUESS=$UNAME_MACHINE-pc-linux-$LIBCABI
+ GUESS=$CPU-pc-linux-$LIBCABI
;;
xtensa*:Linux:*:*)
GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
BePC:Haiku:*:*) # Haiku running on Intel PC compatible.
GUESS=i586-pc-haiku
;;
- x86_64:Haiku:*:*)
- GUESS=x86_64-unknown-haiku
+ ppc:Haiku:*:*) # Haiku running on Apple PowerPC
+ GUESS=powerpc-apple-haiku
+ ;;
+ *:Haiku:*:*) # Haiku modern gcc (not bound by BeOS compat)
+ GUESS=$UNAME_MACHINE-unknown-haiku
;;
SX-4:SUPER-UX:*:*)
GUESS=sx4-nec-superux$UNAME_RELEASE
#! /bin/sh
# Configuration validation subroutine script.
-# Copyright 1992-2022 Free Software Foundation, Inc.
+# Copyright 1992-2023 Free Software Foundation, Inc.
# shellcheck disable=SC2006,SC2268 # see below for rationale
-timestamp='2022-01-03'
+timestamp='2023-01-21'
# This file is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
version="\
GNU config.sub ($timestamp)
-Copyright 1992-2022 Free Software Foundation, Inc.
+Copyright 1992-2023 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
nto-qnx* | linux-* | uclinux-uclibc* \
| uclinux-gnu* | kfreebsd*-gnu* | knetbsd*-gnu* | netbsd*-gnu* \
| netbsd*-eabi* | kopensolaris*-gnu* | cloudabi*-eabi* \
- | storm-chaos* | os2-emx* | rtmk-nova*)
+ | storm-chaos* | os2-emx* | rtmk-nova* | managarm-*)
basic_machine=$field1
basic_os=$maybe_os
;;
pentium-* | p5-* | k5-* | k6-* | nexgen-* | viac3-*)
cpu=i586
;;
- pentiumpro-* | p6-* | 6x86-* | athlon-* | athalon_*-*)
+ pentiumpro-* | p6-* | 6x86-* | athlon-* | athlon_*-*)
cpu=i686
;;
pentiumii-* | pentium2-* | pentiumiii-* | pentium3-*)
| k1om \
| le32 | le64 \
| lm32 \
- | loongarch32 | loongarch64 | loongarchx32 \
+ | loongarch32 | loongarch64 \
| m32c | m32r | m32rle \
| m5200 | m68000 | m680[012346]0 | m68360 | m683?2 | m68k \
| m6811 | m68hc11 | m6812 | m68hc12 | m68hcs12x \
kernel=linux
os=`echo "$basic_os" | sed -e 's|linux|gnu|'`
;;
+ managarm*)
+ kernel=managarm
+ os=`echo "$basic_os" | sed -e 's|managarm|mlibc|'`
+ ;;
*)
kernel=
os=$basic_os
| onefs* | tirtos* | phoenix* | fuchsia* | redox* | bme* \
| midnightbsd* | amdhsa* | unleashed* | emscripten* | wasi* \
| nsk* | powerunix* | genode* | zvmoe* | qnx* | emx* | zephyr* \
- | fiwix* )
+ | fiwix* | mlibc* )
;;
# This one is extra strict with allowed versions
sco3.2v2 | sco3.2v[4-9]* | sco5v6*)
;;
none)
;;
+ kernel* )
+ # Restricted further below
+ ;;
*)
echo Invalid configuration \`"$1"\': OS \`"$os"\' not recognized 1>&2
exit 1
# (given a valid OS), if there is a kernel.
case $kernel-$os in
linux-gnu* | linux-dietlibc* | linux-android* | linux-newlib* \
- | linux-musl* | linux-relibc* | linux-uclibc* )
+ | linux-musl* | linux-relibc* | linux-uclibc* | linux-mlibc* )
;;
uclinux-uclibc* )
;;
- -dietlibc* | -newlib* | -musl* | -relibc* | -uclibc* )
+ managarm-mlibc* | managarm-kernel* )
+ ;;
+ -dietlibc* | -newlib* | -musl* | -relibc* | -uclibc* | -mlibc* )
# These are just libc implementations, not actual OSes, and thus
# require a kernel.
echo "Invalid configuration \`$1': libc \`$os' needs explicit kernel." 1>&2
exit 1
;;
+ -kernel* )
+ echo "Invalid configuration \`$1': \`$os' needs explicit kernel." 1>&2
+ exit 1
+ ;;
+ *-kernel* )
+ echo "Invalid configuration \`$1': \`$kernel' does not support \`$os'." 1>&2
+ exit 1
+ ;;
kfreebsd*-gnu* | kopensolaris*-gnu*)
;;
vxworks-simlinux | vxworks-simwindows | vxworks-spe)
ENTRYPOINT=_DllMainCRTStartup@12
!endif
CCLINKOPTION=
-DEBUGOPT=/Zi
+DEBUGOPT=/guard:cf /Zi
#if the compiler is vstudio 8, generate manifest
!if exists("$(VCINSTALLDIR)\..\..\MICROSOFT VISUAL STUDIO 8")
+++ /dev/null
-#! /bin/sh
-# Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69 for Kerberos 5 1.20.1.
-#
-# Report bugs to <krb5-bugs@mit.edu>.
-#
-# Copyright 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2007, 2008, 2009
-# Massachusetts Institute of Technology.
-#
-#
-#
-# Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc.
-#
-#
-# This configure script is free software; the Free Software Foundation
-# gives unlimited permission to copy, distribute and modify it.
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
- emulate sh
- NULLCMD=:
- # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
- # is contrary to our usage. Disable this feature.
- alias -g '${1+"$@"}'='"$@"'
- setopt NO_GLOB_SUBST
-else
- case `(set -o) 2>/dev/null` in #(
- *posix*) :
- set -o posix ;; #(
- *) :
- ;;
-esac
-fi
-
-
-as_nl='
-'
-export as_nl
-# Printing a long string crashes Solaris 7 /usr/bin/printf.
-as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo
-as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo
-# Prefer a ksh shell builtin over an external printf program on Solaris,
-# but without wasting forks for bash or zsh.
-if test -z "$BASH_VERSION$ZSH_VERSION" \
- && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then
- as_echo='print -r --'
- as_echo_n='print -rn --'
-elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then
- as_echo='printf %s\n'
- as_echo_n='printf %s'
-else
- if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then
- as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"'
- as_echo_n='/usr/ucb/echo -n'
- else
- as_echo_body='eval expr "X$1" : "X\\(.*\\)"'
- as_echo_n_body='eval
- arg=$1;
- case $arg in #(
- *"$as_nl"*)
- expr "X$arg" : "X\\(.*\\)$as_nl";
- arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;;
- esac;
- expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl"
- '
- export as_echo_n_body
- as_echo_n='sh -c $as_echo_n_body as_echo'
- fi
- export as_echo_body
- as_echo='sh -c $as_echo_body as_echo'
-fi
-
-# The user is always right.
-if test "${PATH_SEPARATOR+set}" != set; then
- PATH_SEPARATOR=:
- (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
- (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
- PATH_SEPARATOR=';'
- }
-fi
-
-
-# IFS
-# We need space, tab and new line, in precisely that order. Quoting is
-# there to prevent editors from complaining about space-tab.
-# (If _AS_PATH_WALK were called with IFS unset, it would disable word
-# splitting by setting IFS to empty value.)
-IFS=" "" $as_nl"
-
-# Find who we are. Look in the path if we contain no directory separator.
-as_myself=
-case $0 in #((
- *[\\/]* ) as_myself=$0 ;;
- *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
- done
-IFS=$as_save_IFS
-
- ;;
-esac
-# We did not find ourselves, most probably we were run as `sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
- as_myself=$0
-fi
-if test ! -f "$as_myself"; then
- $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
- exit 1
-fi
-
-# Unset variables that we do not need and which cause bugs (e.g. in
-# pre-3.0 UWIN ksh). But do not cause bugs in bash 2.01; the "|| exit 1"
-# suppresses any "Segmentation fault" message there. '((' could
-# trigger a bug in pdksh 5.2.14.
-for as_var in BASH_ENV ENV MAIL MAILPATH
-do eval test x\${$as_var+set} = xset \
- && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# NLS nuisances.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# CDPATH.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-# Use a proper internal environment variable to ensure we don't fall
- # into an infinite loop, continuously re-executing ourselves.
- if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then
- _as_can_reexec=no; export _as_can_reexec;
- # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in # ((((
- *v*x* | *x*v* ) as_opts=-vx ;;
- *v* ) as_opts=-v ;;
- *x* ) as_opts=-x ;;
- * ) as_opts= ;;
-esac
-exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"}
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed `exec'.
-$as_echo "$0: could not re-execute with $CONFIG_SHELL" >&2
-as_fn_exit 255
- fi
- # We don't want this to propagate to other subprocesses.
- { _as_can_reexec=; unset _as_can_reexec;}
-if test "x$CONFIG_SHELL" = x; then
- as_bourne_compatible="if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then :
- emulate sh
- NULLCMD=:
- # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
- # is contrary to our usage. Disable this feature.
- alias -g '\${1+\"\$@\"}'='\"\$@\"'
- setopt NO_GLOB_SUBST
-else
- case \`(set -o) 2>/dev/null\` in #(
- *posix*) :
- set -o posix ;; #(
- *) :
- ;;
-esac
-fi
-"
- as_required="as_fn_return () { (exit \$1); }
-as_fn_success () { as_fn_return 0; }
-as_fn_failure () { as_fn_return 1; }
-as_fn_ret_success () { return 0; }
-as_fn_ret_failure () { return 1; }
-
-exitcode=0
-as_fn_success || { exitcode=1; echo as_fn_success failed.; }
-as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
-as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
-as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
-if ( set x; as_fn_ret_success y && test x = \"\$1\" ); then :
-
-else
- exitcode=1; echo positional parameters were not saved.
-fi
-test x\$exitcode = x0 || exit 1
-test -x / || exit 1"
- as_suggested=" as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
- as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
- eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
- test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
-test \$(( 1 + 1 )) = 2 || exit 1"
- if (eval "$as_required") 2>/dev/null; then :
- as_have_required=yes
-else
- as_have_required=no
-fi
- if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null; then :
-
-else
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- as_found=:
- case $as_dir in #(
- /*)
- for as_base in sh bash ksh sh5; do
- # Try only shells that exist, to save several forks.
- as_shell=$as_dir/$as_base
- if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
- { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$as_shell"; } 2>/dev/null; then :
- CONFIG_SHELL=$as_shell as_have_required=yes
- if { $as_echo "$as_bourne_compatible""$as_suggested" | as_run=a "$as_shell"; } 2>/dev/null; then :
- break 2
-fi
-fi
- done;;
- esac
- as_found=false
-done
-$as_found || { if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
- { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$SHELL"; } 2>/dev/null; then :
- CONFIG_SHELL=$SHELL as_have_required=yes
-fi; }
-IFS=$as_save_IFS
-
-
- if test "x$CONFIG_SHELL" != x; then :
- export CONFIG_SHELL
- # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in # ((((
- *v*x* | *x*v* ) as_opts=-vx ;;
- *v* ) as_opts=-v ;;
- *x* ) as_opts=-x ;;
- * ) as_opts= ;;
-esac
-exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"}
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed `exec'.
-$as_echo "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-fi
-
- if test x$as_have_required = xno; then :
- $as_echo "$0: This script requires a shell more modern than all"
- $as_echo "$0: the shells that I found on your system."
- if test x${ZSH_VERSION+set} = xset ; then
- $as_echo "$0: In particular, zsh $ZSH_VERSION has bugs and should"
- $as_echo "$0: be upgraded to zsh 4.3.4 or later."
- else
- $as_echo "$0: Please tell bug-autoconf@gnu.org and krb5-bugs@mit.edu
-$0: about your system, including any error possibly output
-$0: before this message. Then install a modern shell, or
-$0: manually run the script under such a shell if you do
-$0: have one."
- fi
- exit 1
-fi
-fi
-fi
-SHELL=${CONFIG_SHELL-/bin/sh}
-export SHELL
-# Unset more variables known to interfere with behavior of common tools.
-CLICOLOR_FORCE= GREP_OPTIONS=
-unset CLICOLOR_FORCE GREP_OPTIONS
-
-## --------------------- ##
-## M4sh Shell Functions. ##
-## --------------------- ##
-# as_fn_unset VAR
-# ---------------
-# Portably unset VAR.
-as_fn_unset ()
-{
- { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-# as_fn_set_status STATUS
-# -----------------------
-# Set $? to STATUS, without forking.
-as_fn_set_status ()
-{
- return $1
-} # as_fn_set_status
-
-# as_fn_exit STATUS
-# -----------------
-# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
- set +e
- as_fn_set_status $1
- exit $1
-} # as_fn_exit
-
-# as_fn_mkdir_p
-# -------------
-# Create "$as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
- case $as_dir in #(
- -*) as_dir=./$as_dir;;
- esac
- test -d "$as_dir" || eval $as_mkdir_p || {
- as_dirs=
- while :; do
- case $as_dir in #(
- *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
- *) as_qdir=$as_dir;;
- esac
- as_dirs="'$as_qdir' $as_dirs"
- as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
- X"$as_dir" : 'X\(//\)[^/]' \| \
- X"$as_dir" : 'X\(//\)$' \| \
- X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$as_dir" |
- sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
- s//\1/
- q
- }
- /^X\(\/\/\)[^/].*/{
- s//\1/
- q
- }
- /^X\(\/\/\)$/{
- s//\1/
- q
- }
- /^X\(\/\).*/{
- s//\1/
- q
- }
- s/.*/./; q'`
- test -d "$as_dir" && break
- done
- test -z "$as_dirs" || eval "mkdir $as_dirs"
- } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} # as_fn_mkdir_p
-
-# as_fn_executable_p FILE
-# -----------------------
-# Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
- test -f "$1" && test -x "$1"
-} # as_fn_executable_p
-# as_fn_append VAR VALUE
-# ----------------------
-# Append the text in VALUE to the end of the definition contained in VAR. Take
-# advantage of any shell optimizations that allow amortized linear growth over
-# repeated appends, instead of the typical quadratic growth present in naive
-# implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then :
- eval 'as_fn_append ()
- {
- eval $1+=\$2
- }'
-else
- as_fn_append ()
- {
- eval $1=\$$1\$2
- }
-fi # as_fn_append
-
-# as_fn_arith ARG...
-# ------------------
-# Perform arithmetic evaluation on the ARGs, and store the result in the
-# global $as_val. Take advantage of shells that can avoid forks. The arguments
-# must be portable across $(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then :
- eval 'as_fn_arith ()
- {
- as_val=$(( $* ))
- }'
-else
- as_fn_arith ()
- {
- as_val=`expr "$@" || test $? -eq 1`
- }
-fi # as_fn_arith
-
-
-# as_fn_error STATUS ERROR [LINENO LOG_FD]
-# ----------------------------------------
-# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-# script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
- as_status=$1; test $as_status -eq 0 && as_status=1
- if test "$4"; then
- as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
- fi
- $as_echo "$as_me: error: $2" >&2
- as_fn_exit $as_status
-} # as_fn_error
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
- test "X`expr 00001 : '.*\(...\)'`" = X001; then
- as_expr=expr
-else
- as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
- as_basename=basename
-else
- as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
- as_dirname=dirname
-else
- as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
- X"$0" : 'X\(//\)$' \| \
- X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X/"$0" |
- sed '/^.*\/\([^/][^/]*\)\/*$/{
- s//\1/
- q
- }
- /^X\/\(\/\/\)$/{
- s//\1/
- q
- }
- /^X\/\(\/\).*/{
- s//\1/
- q
- }
- s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-
- as_lineno_1=$LINENO as_lineno_1a=$LINENO
- as_lineno_2=$LINENO as_lineno_2a=$LINENO
- eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
- test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
- # Blame Lee E. McMahon (1931-1989) for sed's syntax. :-)
- sed -n '
- p
- /[$]LINENO/=
- ' <$as_myself |
- sed '
- s/[$]LINENO.*/&-/
- t lineno
- b
- :lineno
- N
- :loop
- s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
- t loop
- s/-\n.*//
- ' >$as_me.lineno &&
- chmod +x "$as_me.lineno" ||
- { $as_echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
-
- # If we had to re-execute with $CONFIG_SHELL, we're ensured to have
- # already done that, so ensure we don't try to do so again and fall
- # in an infinite loop. This has already happened in practice.
- _as_can_reexec=no; export _as_can_reexec
- # Don't try to exec as it changes $[0], causing all sort of problems
- # (the dirname of $[0] is not the place where we might find the
- # original and so on. Autoconf is especially sensitive to this).
- . "./$as_me.lineno"
- # Exit status is that of the last command.
- exit
-}
-
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in #(((((
--n*)
- case `echo 'xy\c'` in
- *c*) ECHO_T=' ';; # ECHO_T is single tab character.
- xy) ECHO_C='\c';;
- *) echo `echo ksh88 bug on AIX 6.1` > /dev/null
- ECHO_T=' ';;
- esac;;
-*)
- ECHO_N='-n';;
-esac
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
- rm -f conf$$.dir/conf$$.file
-else
- rm -f conf$$.dir
- mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
- if ln -s conf$$.file conf$$ 2>/dev/null; then
- as_ln_s='ln -s'
- # ... but there are two gotchas:
- # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
- # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
- # In both cases, we have to default to `cp -pR'.
- ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
- as_ln_s='cp -pR'
- elif ln conf$$.file conf$$ 2>/dev/null; then
- as_ln_s=ln
- else
- as_ln_s='cp -pR'
- fi
-else
- as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-if mkdir -p . 2>/dev/null; then
- as_mkdir_p='mkdir -p "$as_dir"'
-else
- test -d ./-p && rmdir ./-p
- as_mkdir_p=false
-fi
-
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
-
-# Sed expression to map a string onto a valid variable name.
-as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
-
-
-test -n "$DJDIR" || exec 7<&0 </dev/null
-exec 6>&1
-
-# Name of the host.
-# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
-# so uname gets run too.
-ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
-
-#
-# Initializations.
-#
-ac_default_prefix=/usr/local
-ac_clean_files=
-ac_config_libobj_dir=.
-LIBOBJS=
-cross_compiling=no
-subdirs=
-MFLAGS=
-MAKEFLAGS=
-
-# Identity of this package.
-PACKAGE_NAME='Kerberos 5'
-PACKAGE_TARNAME='krb5'
-PACKAGE_VERSION='1.20.1'
-PACKAGE_STRING='Kerberos 5 1.20.1'
-PACKAGE_BUGREPORT='krb5-bugs@mit.edu'
-PACKAGE_URL=''
-
-ac_unique_file="aclocal.m4"
-# Factoring default headers for most tests.
-ac_includes_default="\
-#include <stdio.h>
-#ifdef HAVE_SYS_TYPES_H
-# include <sys/types.h>
-#endif
-#ifdef HAVE_SYS_STAT_H
-# include <sys/stat.h>
-#endif
-#ifdef STDC_HEADERS
-# include <stdlib.h>
-# include <stddef.h>
-#else
-# ifdef HAVE_STDLIB_H
-# include <stdlib.h>
-# endif
-#endif
-#ifdef HAVE_STRING_H
-# if !defined STDC_HEADERS && defined HAVE_MEMORY_H
-# include <memory.h>
-# endif
-# include <string.h>
-#endif
-#ifdef HAVE_STRINGS_H
-# include <strings.h>
-#endif
-#ifdef HAVE_INTTYPES_H
-# include <inttypes.h>
-#endif
-#ifdef HAVE_STDINT_H
-# include <stdint.h>
-#endif
-#ifdef HAVE_UNISTD_H
-# include <unistd.h>
-#endif"
-
-ac_subst_vars='LTLIBOBJS
-DEFCKTNAME
-DEFKTNAME
-DEFCCNAME
-OSX
-GROFF
-VERTO_VERSION
-VERTO_LIBS
-VERTO_CFLAGS
-RL_LIBS
-RL_CFLAGS
-LIBEDIT_LIBS
-LIBEDIT_CFLAGS
-lmdb_plugin_dir
-LMDB_LIBS
-HAVE_LMDB
-sam2_plugin
-LDAP
-ldap_plugin_dir
-HAVE_SASL
-LDAP_LIBS
-SUPPORTLIB_MAJOR
-DB_EXTRA_LIBS
-HAVE_RESOLV_WRAPPER
-CMOCKA_LIBS
-HAVE_CMOCKA
-HAVE_PYTHON
-PYTHON
-PYTHON_MINVERSION
-LIBOBJS
-PKINIT
-GSSRPC__BSD_TYPEALIASES
-GSSRPC__NETDB_H
-GSSRPC__SYS_PARAM_H
-GSSRPC__UNISTD_H
-GSSRPC__SYS_TIME_H
-GSSRPC__SYS_SELECT_H
-rpcent_define
-include_xom
-PRIOCNTL_HACK
-YFLAGS
-YACC
-NSLOOKUP
-DIG
-FCTSH
-BASH
-SH5
-SH
-KRB5_RCTMPDIR
-SIZEOF_TIME_T
-SETENVOBJ
-KSU_LIBS
-EXTRA_SUPPORT_SYMS
-GETTIMEOFDAY_ST_OBJ
-GETTIMEOFDAY_OBJ
-MKSTEMP_ST_OBJ
-MKSTEMP_OBJ
-ASAN
-ASAN_FLAGS
-KRB5_RUN_VARS
-KRB5_RUN_ENV
-AESNI_FLAGS
-AESNI_OBJ
-YASM
-SPAKE_OPENSSL_LIBS
-HAVE_SPAKE_OPENSSL
-TLS_IMPL_LIBS
-TLS_IMPL_CFLAGS
-TLS_IMPL
-CRYPTO_BUILTIN_TESTS
-CRYPTO_IMPL_LIBS
-CRYPTO_IMPL_CFLAGS
-audit_plugin
-AUDIT_IMPL_LIBS
-AWK
-SECURE_GETENV_INIT
-SECURE_GETENV_ST_OBJ
-SECURE_GETENV_OBJ
-PRINTF_ST_OBJ
-PRINTF_OBJ
-FNMATCH_ST_OBJ
-FNMATCH_OBJ
-GETOPT_LONG_ST_OBJ
-GETOPT_LONG_OBJ
-GETOPT_ST_OBJ
-GETOPT_OBJ
-STRLCPY_ST_OBJ
-STRLCPY_OBJ
-po
-MSGFMT
-LIBUTIL
-PROG_RPATH_FLAGS
-RPATH_FLAG
-CXX_LINK
-CC_LINK
-GEN_LIB
-UNDEF_CHECK
-MAKE_DYNOBJ_COMMAND
-DYNOBJEXT
-LIBINSTLIST
-PFLIBEXT
-DEPLIBEXT
-SHLIBSEXT
-SHLIBVEXT
-SHLIBEXT
-STLIBEXT
-INSTALL_SHLIB
-DYNOBJ_EXPFLAGS
-DYNOBJ_EXPDEPS
-SHLIB_EXPORT_FILE_DEP
-SHLIB_EXPFLAGS
-SHLIB_RPATH_FLAGS
-MAKE_SHLIB_COMMAND
-KDB5_PLUGIN_LIBS
-KDB5_PLUGIN_DEPLIBS
-PLUGININST
-PLUGINLINK
-PLUGIN
-LIBLINKS
-LIBLIST
-PERL
-AR
-INSTALL_DATA
-INSTALL_SCRIPT
-INSTALL_PROGRAM
-RANLIB
-LN_S
-PROFFLAGS
-PICFLAGS
-PFOBJEXT
-SHOBJEXT
-STOBJEXT
-OBJLISTS
-KRB5_VERSION
-DL_LIB
-THREAD_SUPPORT
-PTHREAD_CFLAGS
-PTHREAD_LIBS
-PTHREAD_CC
-ax_pthread_config
-EGREP
-GREP
-SED
-krb5_cv_host
-host_os
-host_vendor
-host_cpu
-host
-build_os
-build_vendor
-build_cpu
-build
-CONFIG_RELTOPDIR
-MAINT
-MAINTAINER_MODE_FALSE
-MAINTAINER_MODE_TRUE
-HESIOD_LIBS
-HESIOD_DEFS
-KDB5_DB_LIB
-DB_HEADER_VERSION
-DB_VERSION
-DB_LIB
-DB_HEADER
-SS_VERSION
-SS_LIB
-COM_ERR_LIB
-COM_ERR_VERSION
-compile_et
-COM_ERR_LIBS
-COM_ERR_CFLAGS
-PKG_CONFIG_LIBDIR
-PKG_CONFIG_PATH
-PKG_CONFIG
-LD
-CPP
-WARN_CXXFLAGS
-WARN_CFLAGS
-HAVE_GCC
-ac_ct_CXX
-CXXFLAGS
-CXX
-OBJEXT
-EXEEXT
-ac_ct_CC
-CPPFLAGS
-LDFLAGS
-CFLAGS
-CC
-EXTRA_FILES
-SYSCONFCONF
-target_alias
-host_alias
-build_alias
-LIBS
-ECHO_T
-ECHO_N
-ECHO_C
-DEFS
-mandir
-localedir
-libdir
-psdir
-pdfdir
-dvidir
-htmldir
-infodir
-docdir
-oldincludedir
-includedir
-runstatedir
-localstatedir
-sharedstatedir
-sysconfdir
-datadir
-datarootdir
-libexecdir
-sbindir
-bindir
-program_transform_name
-prefix
-exec_prefix
-PACKAGE_URL
-PACKAGE_BUGREPORT
-PACKAGE_STRING
-PACKAGE_VERSION
-PACKAGE_TARNAME
-PACKAGE_NAME
-PATH_SEPARATOR
-SHELL'
-ac_subst_files='lib_frag
-libobj_frag
-libnover_frag
-libpriv_frag
-libnodeps_frag'
-ac_user_opts='
-enable_option_checking
-with_size_optimizations
-with_system_et
-with_system_ss
-with_system_db
-with_netlib
-enable_dns_for_realm
-with_hesiod
-enable_maintainer_mode
-with_ldap
-enable_delayed_initialization
-enable_thread_support
-enable_static
-enable_shared
-enable_rpath
-enable_profiled
-enable_athena
-enable_nls
-with_vague_errors
-enable_audit_plugin
-with_crypto_impl
-with_tls_impl
-with_keyutils
-with_spake_openssl
-enable_aesni
-enable_kdc_lookaside_cache
-enable_asan
-enable_pkinit
-with_lmdb
-with_libedit
-with_readline
-with_system_verto
-with_krb5_config
-'
- ac_precious_vars='build_alias
-host_alias
-target_alias
-CC
-CFLAGS
-LDFLAGS
-LIBS
-CPPFLAGS
-CXX
-CXXFLAGS
-CCC
-CPP
-LD
-PKG_CONFIG
-PKG_CONFIG_PATH
-PKG_CONFIG_LIBDIR
-COM_ERR_CFLAGS
-COM_ERR_LIBS
-SS_LIB
-DB_HEADER
-DB_LIB
-YACC
-YFLAGS
-LIBEDIT_CFLAGS
-LIBEDIT_LIBS
-VERTO_CFLAGS
-VERTO_LIBS
-DEFCCNAME
-DEFKTNAME
-DEFCKTNAME'
-
-
-# Initialize some variables set by options.
-ac_init_help=
-ac_init_version=false
-ac_unrecognized_opts=
-ac_unrecognized_sep=
-# The variables have the same names as the options, with
-# dashes changed to underlines.
-cache_file=/dev/null
-exec_prefix=NONE
-no_create=
-no_recursion=
-prefix=NONE
-program_prefix=NONE
-program_suffix=NONE
-program_transform_name=s,x,x,
-silent=
-site=
-srcdir=
-verbose=
-x_includes=NONE
-x_libraries=NONE
-
-# Installation directory options.
-# These are left unexpanded so users can "make install exec_prefix=/foo"
-# and all the variables that are supposed to be based on exec_prefix
-# by default will actually change.
-# Use braces instead of parens because sh, perl, etc. also accept them.
-# (The list follows the same order as the GNU Coding Standards.)
-bindir='${exec_prefix}/bin'
-sbindir='${exec_prefix}/sbin'
-libexecdir='${exec_prefix}/libexec'
-datarootdir='${prefix}/share'
-datadir='${datarootdir}'
-sysconfdir='${prefix}/etc'
-sharedstatedir='${prefix}/com'
-localstatedir='${prefix}/var'
-runstatedir='${localstatedir}/run'
-includedir='${prefix}/include'
-oldincludedir='/usr/include'
-docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
-infodir='${datarootdir}/info'
-htmldir='${docdir}'
-dvidir='${docdir}'
-pdfdir='${docdir}'
-psdir='${docdir}'
-libdir='${exec_prefix}/lib'
-localedir='${datarootdir}/locale'
-mandir='${datarootdir}/man'
-
-ac_prev=
-ac_dashdash=
-for ac_option
-do
- # If the previous option needs an argument, assign it.
- if test -n "$ac_prev"; then
- eval $ac_prev=\$ac_option
- ac_prev=
- continue
- fi
-
- case $ac_option in
- *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
- *=) ac_optarg= ;;
- *) ac_optarg=yes ;;
- esac
-
- # Accept the important Cygnus configure options, so we can diagnose typos.
-
- case $ac_dashdash$ac_option in
- --)
- ac_dashdash=yes ;;
-
- -bindir | --bindir | --bindi | --bind | --bin | --bi)
- ac_prev=bindir ;;
- -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*)
- bindir=$ac_optarg ;;
-
- -build | --build | --buil | --bui | --bu)
- ac_prev=build_alias ;;
- -build=* | --build=* | --buil=* | --bui=* | --bu=*)
- build_alias=$ac_optarg ;;
-
- -cache-file | --cache-file | --cache-fil | --cache-fi \
- | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c)
- ac_prev=cache_file ;;
- -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \
- | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*)
- cache_file=$ac_optarg ;;
-
- --config-cache | -C)
- cache_file=config.cache ;;
-
- -datadir | --datadir | --datadi | --datad)
- ac_prev=datadir ;;
- -datadir=* | --datadir=* | --datadi=* | --datad=*)
- datadir=$ac_optarg ;;
-
- -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \
- | --dataroo | --dataro | --datar)
- ac_prev=datarootdir ;;
- -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \
- | --dataroot=* | --dataroo=* | --dataro=* | --datar=*)
- datarootdir=$ac_optarg ;;
-
- -disable-* | --disable-*)
- ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
- # Reject names that are not valid shell variable names.
- expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
- as_fn_error $? "invalid feature name: $ac_useropt"
- ac_useropt_orig=$ac_useropt
- ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
- case $ac_user_opts in
- *"
-"enable_$ac_useropt"
-"*) ;;
- *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
- ac_unrecognized_sep=', ';;
- esac
- eval enable_$ac_useropt=no ;;
-
- -docdir | --docdir | --docdi | --doc | --do)
- ac_prev=docdir ;;
- -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*)
- docdir=$ac_optarg ;;
-
- -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv)
- ac_prev=dvidir ;;
- -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*)
- dvidir=$ac_optarg ;;
-
- -enable-* | --enable-*)
- ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
- # Reject names that are not valid shell variable names.
- expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
- as_fn_error $? "invalid feature name: $ac_useropt"
- ac_useropt_orig=$ac_useropt
- ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
- case $ac_user_opts in
- *"
-"enable_$ac_useropt"
-"*) ;;
- *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
- ac_unrecognized_sep=', ';;
- esac
- eval enable_$ac_useropt=\$ac_optarg ;;
-
- -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
- | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
- | --exec | --exe | --ex)
- ac_prev=exec_prefix ;;
- -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \
- | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \
- | --exec=* | --exe=* | --ex=*)
- exec_prefix=$ac_optarg ;;
-
- -gas | --gas | --ga | --g)
- # Obsolete; use --with-gas.
- with_gas=yes ;;
-
- -help | --help | --hel | --he | -h)
- ac_init_help=long ;;
- -help=r* | --help=r* | --hel=r* | --he=r* | -hr*)
- ac_init_help=recursive ;;
- -help=s* | --help=s* | --hel=s* | --he=s* | -hs*)
- ac_init_help=short ;;
-
- -host | --host | --hos | --ho)
- ac_prev=host_alias ;;
- -host=* | --host=* | --hos=* | --ho=*)
- host_alias=$ac_optarg ;;
-
- -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht)
- ac_prev=htmldir ;;
- -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \
- | --ht=*)
- htmldir=$ac_optarg ;;
-
- -includedir | --includedir | --includedi | --included | --include \
- | --includ | --inclu | --incl | --inc)
- ac_prev=includedir ;;
- -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \
- | --includ=* | --inclu=* | --incl=* | --inc=*)
- includedir=$ac_optarg ;;
-
- -infodir | --infodir | --infodi | --infod | --info | --inf)
- ac_prev=infodir ;;
- -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*)
- infodir=$ac_optarg ;;
-
- -libdir | --libdir | --libdi | --libd)
- ac_prev=libdir ;;
- -libdir=* | --libdir=* | --libdi=* | --libd=*)
- libdir=$ac_optarg ;;
-
- -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \
- | --libexe | --libex | --libe)
- ac_prev=libexecdir ;;
- -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \
- | --libexe=* | --libex=* | --libe=*)
- libexecdir=$ac_optarg ;;
-
- -localedir | --localedir | --localedi | --localed | --locale)
- ac_prev=localedir ;;
- -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*)
- localedir=$ac_optarg ;;
-
- -localstatedir | --localstatedir | --localstatedi | --localstated \
- | --localstate | --localstat | --localsta | --localst | --locals)
- ac_prev=localstatedir ;;
- -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \
- | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*)
- localstatedir=$ac_optarg ;;
-
- -mandir | --mandir | --mandi | --mand | --man | --ma | --m)
- ac_prev=mandir ;;
- -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*)
- mandir=$ac_optarg ;;
-
- -nfp | --nfp | --nf)
- # Obsolete; use --without-fp.
- with_fp=no ;;
-
- -no-create | --no-create | --no-creat | --no-crea | --no-cre \
- | --no-cr | --no-c | -n)
- no_create=yes ;;
-
- -no-recursion | --no-recursion | --no-recursio | --no-recursi \
- | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r)
- no_recursion=yes ;;
-
- -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \
- | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \
- | --oldin | --oldi | --old | --ol | --o)
- ac_prev=oldincludedir ;;
- -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \
- | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \
- | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*)
- oldincludedir=$ac_optarg ;;
-
- -prefix | --prefix | --prefi | --pref | --pre | --pr | --p)
- ac_prev=prefix ;;
- -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*)
- prefix=$ac_optarg ;;
-
- -program-prefix | --program-prefix | --program-prefi | --program-pref \
- | --program-pre | --program-pr | --program-p)
- ac_prev=program_prefix ;;
- -program-prefix=* | --program-prefix=* | --program-prefi=* \
- | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*)
- program_prefix=$ac_optarg ;;
-
- -program-suffix | --program-suffix | --program-suffi | --program-suff \
- | --program-suf | --program-su | --program-s)
- ac_prev=program_suffix ;;
- -program-suffix=* | --program-suffix=* | --program-suffi=* \
- | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*)
- program_suffix=$ac_optarg ;;
-
- -program-transform-name | --program-transform-name \
- | --program-transform-nam | --program-transform-na \
- | --program-transform-n | --program-transform- \
- | --program-transform | --program-transfor \
- | --program-transfo | --program-transf \
- | --program-trans | --program-tran \
- | --progr-tra | --program-tr | --program-t)
- ac_prev=program_transform_name ;;
- -program-transform-name=* | --program-transform-name=* \
- | --program-transform-nam=* | --program-transform-na=* \
- | --program-transform-n=* | --program-transform-=* \
- | --program-transform=* | --program-transfor=* \
- | --program-transfo=* | --program-transf=* \
- | --program-trans=* | --program-tran=* \
- | --progr-tra=* | --program-tr=* | --program-t=*)
- program_transform_name=$ac_optarg ;;
-
- -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd)
- ac_prev=pdfdir ;;
- -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*)
- pdfdir=$ac_optarg ;;
-
- -psdir | --psdir | --psdi | --psd | --ps)
- ac_prev=psdir ;;
- -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*)
- psdir=$ac_optarg ;;
-
- -q | -quiet | --quiet | --quie | --qui | --qu | --q \
- | -silent | --silent | --silen | --sile | --sil)
- silent=yes ;;
-
- -runstatedir | --runstatedir | --runstatedi | --runstated \
- | --runstate | --runstat | --runsta | --runst | --runs \
- | --run | --ru | --r)
- ac_prev=runstatedir ;;
- -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
- | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
- | --run=* | --ru=* | --r=*)
- runstatedir=$ac_optarg ;;
-
- -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
- ac_prev=sbindir ;;
- -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
- | --sbi=* | --sb=*)
- sbindir=$ac_optarg ;;
-
- -sharedstatedir | --sharedstatedir | --sharedstatedi \
- | --sharedstated | --sharedstate | --sharedstat | --sharedsta \
- | --sharedst | --shareds | --shared | --share | --shar \
- | --sha | --sh)
- ac_prev=sharedstatedir ;;
- -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \
- | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \
- | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \
- | --sha=* | --sh=*)
- sharedstatedir=$ac_optarg ;;
-
- -site | --site | --sit)
- ac_prev=site ;;
- -site=* | --site=* | --sit=*)
- site=$ac_optarg ;;
-
- -srcdir | --srcdir | --srcdi | --srcd | --src | --sr)
- ac_prev=srcdir ;;
- -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*)
- srcdir=$ac_optarg ;;
-
- -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \
- | --syscon | --sysco | --sysc | --sys | --sy)
- ac_prev=sysconfdir ;;
- -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \
- | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*)
- sysconfdir=$ac_optarg ;;
-
- -target | --target | --targe | --targ | --tar | --ta | --t)
- ac_prev=target_alias ;;
- -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*)
- target_alias=$ac_optarg ;;
-
- -v | -verbose | --verbose | --verbos | --verbo | --verb)
- verbose=yes ;;
-
- -version | --version | --versio | --versi | --vers | -V)
- ac_init_version=: ;;
-
- -with-* | --with-*)
- ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
- # Reject names that are not valid shell variable names.
- expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
- as_fn_error $? "invalid package name: $ac_useropt"
- ac_useropt_orig=$ac_useropt
- ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
- case $ac_user_opts in
- *"
-"with_$ac_useropt"
-"*) ;;
- *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
- ac_unrecognized_sep=', ';;
- esac
- eval with_$ac_useropt=\$ac_optarg ;;
-
- -without-* | --without-*)
- ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
- # Reject names that are not valid shell variable names.
- expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
- as_fn_error $? "invalid package name: $ac_useropt"
- ac_useropt_orig=$ac_useropt
- ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
- case $ac_user_opts in
- *"
-"with_$ac_useropt"
-"*) ;;
- *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
- ac_unrecognized_sep=', ';;
- esac
- eval with_$ac_useropt=no ;;
-
- --x)
- # Obsolete; use --with-x.
- with_x=yes ;;
-
- -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \
- | --x-incl | --x-inc | --x-in | --x-i)
- ac_prev=x_includes ;;
- -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \
- | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*)
- x_includes=$ac_optarg ;;
-
- -x-libraries | --x-libraries | --x-librarie | --x-librari \
- | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l)
- ac_prev=x_libraries ;;
- -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \
- | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
- x_libraries=$ac_optarg ;;
-
- -*) as_fn_error $? "unrecognized option: \`$ac_option'
-Try \`$0 --help' for more information"
- ;;
-
- *=*)
- ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
- # Reject names that are not valid shell variable names.
- case $ac_envvar in #(
- '' | [0-9]* | *[!_$as_cr_alnum]* )
- as_fn_error $? "invalid variable name: \`$ac_envvar'" ;;
- esac
- eval $ac_envvar=\$ac_optarg
- export $ac_envvar ;;
-
- *)
- # FIXME: should be removed in autoconf 3.0.
- $as_echo "$as_me: WARNING: you should use --build, --host, --target" >&2
- expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
- $as_echo "$as_me: WARNING: invalid host type: $ac_option" >&2
- : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
- ;;
-
- esac
-done
-
-if test -n "$ac_prev"; then
- ac_option=--`echo $ac_prev | sed 's/_/-/g'`
- as_fn_error $? "missing argument to $ac_option"
-fi
-
-if test -n "$ac_unrecognized_opts"; then
- case $enable_option_checking in
- no) ;;
- fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
- *) $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
- esac
-fi
-
-# Check all directory arguments for consistency.
-for ac_var in exec_prefix prefix bindir sbindir libexecdir datarootdir \
- datadir sysconfdir sharedstatedir localstatedir includedir \
- oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
- libdir localedir mandir runstatedir
-do
- eval ac_val=\$$ac_var
- # Remove trailing slashes.
- case $ac_val in
- */ )
- ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
- eval $ac_var=\$ac_val;;
- esac
- # Be sure to have absolute directory names.
- case $ac_val in
- [\\/$]* | ?:[\\/]* ) continue;;
- NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
- esac
- as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
-done
-
-# There might be people who depend on the old broken behavior: `$host'
-# used to hold the argument of --host etc.
-# FIXME: To remove some day.
-build=$build_alias
-host=$host_alias
-target=$target_alias
-
-# FIXME: To remove some day.
-if test "x$host_alias" != x; then
- if test "x$build_alias" = x; then
- cross_compiling=maybe
- elif test "x$build_alias" != "x$host_alias"; then
- cross_compiling=yes
- fi
-fi
-
-ac_tool_prefix=
-test -n "$host_alias" && ac_tool_prefix=$host_alias-
-
-test "$silent" = yes && exec 6>/dev/null
-
-
-ac_pwd=`pwd` && test -n "$ac_pwd" &&
-ac_ls_di=`ls -di .` &&
-ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
- as_fn_error $? "working directory cannot be determined"
-test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
- as_fn_error $? "pwd does not report name of working directory"
-
-
-# Find the source files, if location was not specified.
-if test -z "$srcdir"; then
- ac_srcdir_defaulted=yes
- # Try the directory containing this script, then the parent directory.
- ac_confdir=`$as_dirname -- "$as_myself" ||
-$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
- X"$as_myself" : 'X\(//\)[^/]' \| \
- X"$as_myself" : 'X\(//\)$' \| \
- X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$as_myself" |
- sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
- s//\1/
- q
- }
- /^X\(\/\/\)[^/].*/{
- s//\1/
- q
- }
- /^X\(\/\/\)$/{
- s//\1/
- q
- }
- /^X\(\/\).*/{
- s//\1/
- q
- }
- s/.*/./; q'`
- srcdir=$ac_confdir
- if test ! -r "$srcdir/$ac_unique_file"; then
- srcdir=..
- fi
-else
- ac_srcdir_defaulted=no
-fi
-if test ! -r "$srcdir/$ac_unique_file"; then
- test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
- as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
-fi
-ac_msg="sources are in $srcdir, but \`cd $srcdir' does not work"
-ac_abs_confdir=`(
- cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
- pwd)`
-# When building in place, set srcdir=.
-if test "$ac_abs_confdir" = "$ac_pwd"; then
- srcdir=.
-fi
-# Remove unnecessary trailing slashes from srcdir.
-# Double slashes in file names in object file debugging info
-# mess up M-x gdb in Emacs.
-case $srcdir in
-*/) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;;
-esac
-for ac_var in $ac_precious_vars; do
- eval ac_env_${ac_var}_set=\${${ac_var}+set}
- eval ac_env_${ac_var}_value=\$${ac_var}
- eval ac_cv_env_${ac_var}_set=\${${ac_var}+set}
- eval ac_cv_env_${ac_var}_value=\$${ac_var}
-done
-
-#
-# Report the --help message.
-#
-if test "$ac_init_help" = "long"; then
- # Omit some internal or obsolete options to make the list less imposing.
- # This message is too long to be a string in the A/UX 3.1 sh.
- cat <<_ACEOF
-\`configure' configures Kerberos 5 1.20.1 to adapt to many kinds of systems.
-
-Usage: $0 [OPTION]... [VAR=VALUE]...
-
-To assign environment variables (e.g., CC, CFLAGS...), specify them as
-VAR=VALUE. See below for descriptions of some of the useful variables.
-
-Defaults for the options are specified in brackets.
-
-Configuration:
- -h, --help display this help and exit
- --help=short display options specific to this package
- --help=recursive display the short help of all the included packages
- -V, --version display version information and exit
- -q, --quiet, --silent do not print \`checking ...' messages
- --cache-file=FILE cache test results in FILE [disabled]
- -C, --config-cache alias for \`--cache-file=config.cache'
- -n, --no-create do not create output files
- --srcdir=DIR find the sources in DIR [configure dir or \`..']
-
-Installation directories:
- --prefix=PREFIX install architecture-independent files in PREFIX
- [$ac_default_prefix]
- --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX
- [PREFIX]
-
-By default, \`make install' will install all the files in
-\`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc. You can specify
-an installation prefix other than \`$ac_default_prefix' using \`--prefix',
-for instance \`--prefix=\$HOME'.
-
-For better control, use the options below.
-
-Fine tuning of the installation directories:
- --bindir=DIR user executables [EPREFIX/bin]
- --sbindir=DIR system admin executables [EPREFIX/sbin]
- --libexecdir=DIR program executables [EPREFIX/libexec]
- --sysconfdir=DIR read-only single-machine data [PREFIX/etc]
- --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com]
- --localstatedir=DIR modifiable single-machine data [PREFIX/var]
- --runstatedir=DIR modifiable per-process data [LOCALSTATEDIR/run]
- --libdir=DIR object code libraries [EPREFIX/lib]
- --includedir=DIR C header files [PREFIX/include]
- --oldincludedir=DIR C header files for non-gcc [/usr/include]
- --datarootdir=DIR read-only arch.-independent data root [PREFIX/share]
- --datadir=DIR read-only architecture-independent data [DATAROOTDIR]
- --infodir=DIR info documentation [DATAROOTDIR/info]
- --localedir=DIR locale-dependent data [DATAROOTDIR/locale]
- --mandir=DIR man documentation [DATAROOTDIR/man]
- --docdir=DIR documentation root [DATAROOTDIR/doc/krb5]
- --htmldir=DIR html documentation [DOCDIR]
- --dvidir=DIR dvi documentation [DOCDIR]
- --pdfdir=DIR pdf documentation [DOCDIR]
- --psdir=DIR ps documentation [DOCDIR]
-_ACEOF
-
- cat <<\_ACEOF
-
-Program names:
- --program-prefix=PREFIX prepend PREFIX to installed program names
- --program-suffix=SUFFIX append SUFFIX to installed program names
- --program-transform-name=PROGRAM run sed PROGRAM on installed program names
-
-System types:
- --build=BUILD configure for building on BUILD [guessed]
- --host=HOST cross-compile to build programs to run on HOST [BUILD]
-_ACEOF
-fi
-
-if test -n "$ac_init_help"; then
- case $ac_init_help in
- short | recursive ) echo "Configuration of Kerberos 5 1.20.1:";;
- esac
- cat <<\_ACEOF
-
-Optional Features:
- --disable-option-checking ignore unrecognized --enable/--with options
- --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no)
- --enable-FEATURE[=ARG] include FEATURE [ARG=yes]
- --enable-dns-for-realm enable DNS lookups of Kerberos realm names
- --enable-maintainer-mode
- enable rebuilding of source files, Makefiles, etc
- --disable-delayed-initialization
- initialize library code when loaded [delay until
- first use]
- --disable-thread-support
- don't enable thread support [enabled]
-
- --disable-rpath suppress run path flags in link lines
- --enable-athena build with MIT Project Athena configuration
- --disable-nls disable native language support
- --enable-audit-plugin=IMPL
- use audit plugin [ do not use audit ]
- --disable-aesni Do not build with AES-NI support
- --disable-kdc-lookaside-cache
- Disable the cache which detects client retransmits
- --enable-asan Build with asan memory checking
- --disable-pkinit disable PKINIT plugin support
-
-Optional Packages:
- --with-PACKAGE[=ARG] use PACKAGE [ARG=yes]
- --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no)
- --with-size-optimizations enable a few optimizations to reduce code size
- possibly at some run-time cost
- --with-system-et use system compile_et and -lcom_err [default: build
- and install a local version]
- --with-system-ss use system -lss and mk_cmds [private version]
- --with-system-db use system Berkeley db [private version]
- --with-netlib=LIBS use user defined resolver library
- --with-hesiod=path compile with hesiod support [omitted]
- --with-ldap compile OpenLDAP database backend module
- --with-vague-errors Do not [do] send helpful errors to client
- --with-crypto-impl=IMPL use specified crypto implementation [builtin]
- --with-tls-impl=IMPL use specified TLS implementation [auto]
- --without-keyutils do not link with libkeyutils
- --with-spake-openssl use OpenSSL for SPAKE preauth [auto]
- --with-lmdb compile LMDB database backend module [auto]
- --without-libedit do not compile with libedit
- --with-readline compile with GNU Readline
- --with-system-verto always use system verto library
- --with-krb5-config=PATH path to existing krb5-config program for defaults
-
-Some influential environment variables:
- CC C compiler command
- CFLAGS C compiler flags
- LDFLAGS linker flags, e.g. -L<lib dir> if you have libraries in a
- nonstandard directory <lib dir>
- LIBS libraries to pass to the linker, e.g. -l<library>
- CPPFLAGS (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
- you have headers in a nonstandard directory <include dir>
- CXX C++ compiler command
- CXXFLAGS C++ compiler flags
- CPP C preprocessor
- LD linker command [CC]
- PKG_CONFIG path to pkg-config utility
- PKG_CONFIG_PATH
- directories to add to pkg-config's search path
- PKG_CONFIG_LIBDIR
- path overriding pkg-config's built-in search path
- COM_ERR_CFLAGS
- C compiler flags for COM_ERR, overriding pkg-config
- COM_ERR_LIBS
- linker flags for COM_ERR, overriding pkg-config
- SS_LIB system libraries for 'ss' package [-lss]
- DB_HEADER header file for system Berkeley db package [db.h]
- DB_LIB library for system Berkeley db package [-ldb]
- YACC The `Yet Another Compiler Compiler' implementation to use.
- Defaults to the first program found out of: `bison -y', `byacc',
- `yacc'.
- YFLAGS The list of arguments that will be passed by default to $YACC.
- This script will default YFLAGS to the empty string to avoid a
- default value of `-d' given by some make applications.
- LIBEDIT_CFLAGS
- C compiler flags for LIBEDIT, overriding pkg-config
- LIBEDIT_LIBS
- linker flags for LIBEDIT, overriding pkg-config
- VERTO_CFLAGS
- C compiler flags for VERTO, overriding pkg-config
- VERTO_LIBS linker flags for VERTO, overriding pkg-config
- DEFCCNAME Default ccache name
- DEFKTNAME Default keytab name
- DEFCKTNAME Default client keytab name
-
-Use these variables to override the choices made by `configure' or to help
-it to find libraries and programs with nonstandard names/locations.
-
-Report bugs to <krb5-bugs@mit.edu>.
-_ACEOF
-ac_status=$?
-fi
-
-if test "$ac_init_help" = "recursive"; then
- # If there are subdirs, report their specific --help.
- for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
- test -d "$ac_dir" ||
- { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
- continue
- ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
- ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'`
- # A ".." for each directory in $ac_dir_suffix.
- ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
- case $ac_top_builddir_sub in
- "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
- *) ac_top_build_prefix=$ac_top_builddir_sub/ ;;
- esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
- .) # We are building in place.
- ac_srcdir=.
- ac_top_srcdir=$ac_top_builddir_sub
- ac_abs_top_srcdir=$ac_pwd ;;
- [\\/]* | ?:[\\/]* ) # Absolute name.
- ac_srcdir=$srcdir$ac_dir_suffix;
- ac_top_srcdir=$srcdir
- ac_abs_top_srcdir=$srcdir ;;
- *) # Relative name.
- ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
- ac_top_srcdir=$ac_top_build_prefix$srcdir
- ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
- cd "$ac_dir" || { ac_status=$?; continue; }
- # Check for guested configure.
- if test -f "$ac_srcdir/configure.gnu"; then
- echo &&
- $SHELL "$ac_srcdir/configure.gnu" --help=recursive
- elif test -f "$ac_srcdir/configure"; then
- echo &&
- $SHELL "$ac_srcdir/configure" --help=recursive
- else
- $as_echo "$as_me: WARNING: no configuration information is in $ac_dir" >&2
- fi || ac_status=$?
- cd "$ac_pwd" || { ac_status=$?; break; }
- done
-fi
-
-test -n "$ac_init_help" && exit $ac_status
-if $ac_init_version; then
- cat <<\_ACEOF
-Kerberos 5 configure 1.20.1
-generated by GNU Autoconf 2.69
-
-Copyright (C) 2012 Free Software Foundation, Inc.
-This configure script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it.
-
-Copyright 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2007, 2008, 2009
-Massachusetts Institute of Technology.
-
-_ACEOF
- exit
-fi
-
-## ------------------------ ##
-## Autoconf initialization. ##
-## ------------------------ ##
-
-# ac_fn_c_try_compile LINENO
-# --------------------------
-# Try to compile conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_compile ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- rm -f conftest.$ac_objext
- if { { ac_try="$ac_compile"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_compile") 2>conftest.err
- ac_status=$?
- if test -s conftest.err; then
- grep -v '^ *+' conftest.err >conftest.er1
- cat conftest.er1 >&5
- mv -f conftest.er1 conftest.err
- fi
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; } && {
- test -z "$ac_c_werror_flag" ||
- test ! -s conftest.err
- } && test -s conftest.$ac_objext; then :
- ac_retval=0
-else
- $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
- ac_retval=1
-fi
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
- as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_compile
-
-# ac_fn_cxx_try_compile LINENO
-# ----------------------------
-# Try to compile conftest.$ac_ext, and return whether this succeeded.
-ac_fn_cxx_try_compile ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- rm -f conftest.$ac_objext
- if { { ac_try="$ac_compile"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_compile") 2>conftest.err
- ac_status=$?
- if test -s conftest.err; then
- grep -v '^ *+' conftest.err >conftest.er1
- cat conftest.er1 >&5
- mv -f conftest.er1 conftest.err
- fi
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; } && {
- test -z "$ac_cxx_werror_flag" ||
- test ! -s conftest.err
- } && test -s conftest.$ac_objext; then :
- ac_retval=0
-else
- $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
- ac_retval=1
-fi
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
- as_fn_set_status $ac_retval
-
-} # ac_fn_cxx_try_compile
-
-# ac_fn_c_try_cpp LINENO
-# ----------------------
-# Try to preprocess conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_cpp ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- if { { ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_cpp conftest.$ac_ext") 2>conftest.err
- ac_status=$?
- if test -s conftest.err; then
- grep -v '^ *+' conftest.err >conftest.er1
- cat conftest.er1 >&5
- mv -f conftest.er1 conftest.err
- fi
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; } > conftest.i && {
- test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
- test ! -s conftest.err
- }; then :
- ac_retval=0
-else
- $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
- ac_retval=1
-fi
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
- as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_cpp
-
-# ac_fn_c_try_link LINENO
-# -----------------------
-# Try to link conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_link ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- rm -f conftest.$ac_objext conftest$ac_exeext
- if { { ac_try="$ac_link"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_link") 2>conftest.err
- ac_status=$?
- if test -s conftest.err; then
- grep -v '^ *+' conftest.err >conftest.er1
- cat conftest.er1 >&5
- mv -f conftest.er1 conftest.err
- fi
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; } && {
- test -z "$ac_c_werror_flag" ||
- test ! -s conftest.err
- } && test -s conftest$ac_exeext && {
- test "$cross_compiling" = yes ||
- test -x conftest$ac_exeext
- }; then :
- ac_retval=0
-else
- $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
- ac_retval=1
-fi
- # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
- # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
- # interfere with the next link command; also delete a directory that is
- # left behind by Apple's compiler. We do this before executing the actions.
- rm -rf conftest.dSYM conftest_ipa8_conftest.oo
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
- as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_link
-
-# ac_fn_c_try_run LINENO
-# ----------------------
-# Try to link conftest.$ac_ext, and return whether this succeeded. Assumes
-# that executables *can* be run.
-ac_fn_c_try_run ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- if { { ac_try="$ac_link"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_link") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; } && { ac_try='./conftest$ac_exeext'
- { { case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_try") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; }; then :
- ac_retval=0
-else
- $as_echo "$as_me: program exited with status $ac_status" >&5
- $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
- ac_retval=$ac_status
-fi
- rm -rf conftest.dSYM conftest_ipa8_conftest.oo
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
- as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_run
-
-# ac_fn_c_check_func LINENO FUNC VAR
-# ----------------------------------
-# Tests whether FUNC exists, setting the cache variable VAR accordingly
-ac_fn_c_check_func ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
- For example, HP-UX 11i <limits.h> declares gettimeofday. */
-#define $2 innocuous_$2
-
-/* System header to define __stub macros and hopefully few prototypes,
- which can conflict with char $2 (); below.
- Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
- <limits.h> exists even on freestanding compilers. */
-
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-
-#undef $2
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $2 ();
-/* The GNU C library defines this for functions which it implements
- to always fail with ENOSYS. Some functions are actually named
- something starting with __ and the normal name is an alias. */
-#if defined __stub_$2 || defined __stub___$2
-choke me
-#endif
-
-int
-main ()
-{
-return $2 ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- eval "$3=yes"
-else
- eval "$3=no"
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-eval ac_res=\$$3
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_func
-
-# ac_fn_c_check_header_mongrel LINENO HEADER VAR INCLUDES
-# -------------------------------------------------------
-# Tests whether HEADER exists, giving a warning if it cannot be compiled using
-# the include files in INCLUDES and setting the cache variable VAR
-# accordingly.
-ac_fn_c_check_header_mongrel ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- if eval \${$3+:} false; then :
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
- $as_echo_n "(cached) " >&6
-fi
-eval ac_res=\$$3
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-else
- # Is the header compilable?
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking $2 usability" >&5
-$as_echo_n "checking $2 usability... " >&6; }
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-#include <$2>
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_header_compiler=yes
-else
- ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_header_compiler" >&5
-$as_echo "$ac_header_compiler" >&6; }
-
-# Is the header present?
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking $2 presence" >&5
-$as_echo_n "checking $2 presence... " >&6; }
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <$2>
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
- ac_header_preproc=yes
-else
- ac_header_preproc=no
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_header_preproc" >&5
-$as_echo "$ac_header_preproc" >&6; }
-
-# So? What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in #((
- yes:no: )
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: accepted by the compiler, rejected by the preprocessor!" >&5
-$as_echo "$as_me: WARNING: $2: accepted by the compiler, rejected by the preprocessor!" >&2;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5
-$as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;}
- ;;
- no:yes:* )
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: present but cannot be compiled" >&5
-$as_echo "$as_me: WARNING: $2: present but cannot be compiled" >&2;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: check for missing prerequisite headers?" >&5
-$as_echo "$as_me: WARNING: $2: check for missing prerequisite headers?" >&2;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: see the Autoconf documentation" >&5
-$as_echo "$as_me: WARNING: $2: see the Autoconf documentation" >&2;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: section \"Present But Cannot Be Compiled\"" >&5
-$as_echo "$as_me: WARNING: $2: section \"Present But Cannot Be Compiled\"" >&2;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5
-$as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;}
-( $as_echo "## -------------------------------- ##
-## Report this to krb5-bugs@mit.edu ##
-## -------------------------------- ##"
- ) | sed "s/^/$as_me: WARNING: /" >&2
- ;;
-esac
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- eval "$3=\$ac_header_compiler"
-fi
-eval ac_res=\$$3
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-fi
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_header_mongrel
-
-# ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
-# -------------------------------------------------------
-# Tests whether HEADER exists and can be compiled using the include files in
-# INCLUDES, setting the cache variable VAR accordingly.
-ac_fn_c_check_header_compile ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-#include <$2>
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval "$3=yes"
-else
- eval "$3=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$3
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_header_compile
-
-# ac_fn_c_check_type LINENO TYPE VAR INCLUDES
-# -------------------------------------------
-# Tests whether TYPE exists after having included INCLUDES, setting cache
-# variable VAR accordingly.
-ac_fn_c_check_type ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- eval "$3=no"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-int
-main ()
-{
-if (sizeof ($2))
- return 0;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-int
-main ()
-{
-if (sizeof (($2)))
- return 0;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
- eval "$3=yes"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$3
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_type
-
-# ac_fn_c_check_member LINENO AGGR MEMBER VAR INCLUDES
-# ----------------------------------------------------
-# Tries to find if the field MEMBER exists in type AGGR, after including
-# INCLUDES, setting cache variable VAR accordingly.
-ac_fn_c_check_member ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2.$3" >&5
-$as_echo_n "checking for $2.$3... " >&6; }
-if eval \${$4+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$5
-int
-main ()
-{
-static $2 ac_aggr;
-if (ac_aggr.$3)
-return 0;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval "$4=yes"
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$5
-int
-main ()
-{
-static $2 ac_aggr;
-if (sizeof ac_aggr.$3)
-return 0;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval "$4=yes"
-else
- eval "$4=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$4
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_member
-
-# ac_fn_c_check_decl LINENO SYMBOL VAR INCLUDES
-# ---------------------------------------------
-# Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
-# accordingly.
-ac_fn_c_check_decl ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- as_decl_name=`echo $2|sed 's/ *(.*//'`
- as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
-$as_echo_n "checking whether $as_decl_name is declared... " >&6; }
-if eval \${$3+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-int
-main ()
-{
-#ifndef $as_decl_name
-#ifdef __cplusplus
- (void) $as_decl_use;
-#else
- (void) $as_decl_name;
-#endif
-#endif
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval "$3=yes"
-else
- eval "$3=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$3
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_decl
-
-# ac_fn_c_compute_int LINENO EXPR VAR INCLUDES
-# --------------------------------------------
-# Tries to find the compile-time value of EXPR in a program that includes
-# INCLUDES, setting VAR accordingly. Returns whether the value could be
-# computed
-ac_fn_c_compute_int ()
-{
- as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- if test "$cross_compiling" = yes; then
- # Depending upon the size, compute the lo and hi bounds.
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-int
-main ()
-{
-static int test_array [1 - 2 * !(($2) >= 0)];
-test_array [0] = 0;
-return test_array [0];
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_lo=0 ac_mid=0
- while :; do
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-int
-main ()
-{
-static int test_array [1 - 2 * !(($2) <= $ac_mid)];
-test_array [0] = 0;
-return test_array [0];
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_hi=$ac_mid; break
-else
- as_fn_arith $ac_mid + 1 && ac_lo=$as_val
- if test $ac_lo -le $ac_mid; then
- ac_lo= ac_hi=
- break
- fi
- as_fn_arith 2 '*' $ac_mid + 1 && ac_mid=$as_val
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- done
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-int
-main ()
-{
-static int test_array [1 - 2 * !(($2) < 0)];
-test_array [0] = 0;
-return test_array [0];
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_hi=-1 ac_mid=-1
- while :; do
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-int
-main ()
-{
-static int test_array [1 - 2 * !(($2) >= $ac_mid)];
-test_array [0] = 0;
-return test_array [0];
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_lo=$ac_mid; break
-else
- as_fn_arith '(' $ac_mid ')' - 1 && ac_hi=$as_val
- if test $ac_mid -le $ac_hi; then
- ac_lo= ac_hi=
- break
- fi
- as_fn_arith 2 '*' $ac_mid && ac_mid=$as_val
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- done
-else
- ac_lo= ac_hi=
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-# Binary search between lo and hi bounds.
-while test "x$ac_lo" != "x$ac_hi"; do
- as_fn_arith '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo && ac_mid=$as_val
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-int
-main ()
-{
-static int test_array [1 - 2 * !(($2) <= $ac_mid)];
-test_array [0] = 0;
-return test_array [0];
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_hi=$ac_mid
-else
- as_fn_arith '(' $ac_mid ')' + 1 && ac_lo=$as_val
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-done
-case $ac_lo in #((
-?*) eval "$3=\$ac_lo"; ac_retval=0 ;;
-'') ac_retval=1 ;;
-esac
- else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$4
-static long int longval () { return $2; }
-static unsigned long int ulongval () { return $2; }
-#include <stdio.h>
-#include <stdlib.h>
-int
-main ()
-{
-
- FILE *f = fopen ("conftest.val", "w");
- if (! f)
- return 1;
- if (($2) < 0)
- {
- long int i = longval ();
- if (i != ($2))
- return 1;
- fprintf (f, "%ld", i);
- }
- else
- {
- unsigned long int i = ulongval ();
- if (i != ($2))
- return 1;
- fprintf (f, "%lu", i);
- }
- /* Do not output a trailing newline, as this causes \r\n confusion
- on some platforms. */
- return ferror (f) || fclose (f) != 0;
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
- echo >>conftest.val; read $3 <conftest.val; ac_retval=0
-else
- ac_retval=1
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
- conftest.$ac_objext conftest.beam conftest.$ac_ext
-rm -f conftest.val
-
- fi
- eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
- as_fn_set_status $ac_retval
-
-} # ac_fn_c_compute_int
-cat >config.log <<_ACEOF
-This file contains any messages produced by compilers while
-running configure, to aid debugging if configure makes a mistake.
-
-It was created by Kerberos 5 $as_me 1.20.1, which was
-generated by GNU Autoconf 2.69. Invocation command line was
-
- $ $0 $@
-
-_ACEOF
-exec 5>>config.log
-{
-cat <<_ASUNAME
-## --------- ##
-## Platform. ##
-## --------- ##
-
-hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown`
-/bin/uname -X = `(/bin/uname -X) 2>/dev/null || echo unknown`
-
-/bin/arch = `(/bin/arch) 2>/dev/null || echo unknown`
-/usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null || echo unknown`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown`
-/usr/bin/hostinfo = `(/usr/bin/hostinfo) 2>/dev/null || echo unknown`
-/bin/machine = `(/bin/machine) 2>/dev/null || echo unknown`
-/usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null || echo unknown`
-/bin/universe = `(/bin/universe) 2>/dev/null || echo unknown`
-
-_ASUNAME
-
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- $as_echo "PATH: $as_dir"
- done
-IFS=$as_save_IFS
-
-} >&5
-
-cat >&5 <<_ACEOF
-
-
-## ----------- ##
-## Core tests. ##
-## ----------- ##
-
-_ACEOF
-
-
-# Keep a trace of the command line.
-# Strip out --no-create and --no-recursion so they do not pile up.
-# Strip out --silent because we don't want to record it for future runs.
-# Also quote any args containing shell meta-characters.
-# Make two passes to allow for proper duplicate-argument suppression.
-ac_configure_args=
-ac_configure_args0=
-ac_configure_args1=
-ac_must_keep_next=false
-for ac_pass in 1 2
-do
- for ac_arg
- do
- case $ac_arg in
- -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;;
- -q | -quiet | --quiet | --quie | --qui | --qu | --q \
- | -silent | --silent | --silen | --sile | --sil)
- continue ;;
- *\'*)
- ac_arg=`$as_echo "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
- esac
- case $ac_pass in
- 1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
- 2)
- as_fn_append ac_configure_args1 " '$ac_arg'"
- if test $ac_must_keep_next = true; then
- ac_must_keep_next=false # Got value, back to normal.
- else
- case $ac_arg in
- *=* | --config-cache | -C | -disable-* | --disable-* \
- | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \
- | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \
- | -with-* | --with-* | -without-* | --without-* | --x)
- case "$ac_configure_args0 " in
- "$ac_configure_args1"*" '$ac_arg' "* ) continue ;;
- esac
- ;;
- -* ) ac_must_keep_next=true ;;
- esac
- fi
- as_fn_append ac_configure_args " '$ac_arg'"
- ;;
- esac
- done
-done
-{ ac_configure_args0=; unset ac_configure_args0;}
-{ ac_configure_args1=; unset ac_configure_args1;}
-
-# When interrupted or exit'd, cleanup temporary files, and complete
-# config.log. We remove comments because anyway the quotes in there
-# would cause problems or look ugly.
-# WARNING: Use '\'' to represent an apostrophe within the trap.
-# WARNING: Do not start the trap code with a newline, due to a FreeBSD 4.0 bug.
-trap 'exit_status=$?
- # Save into config.log some information that might help in debugging.
- {
- echo
-
- $as_echo "## ---------------- ##
-## Cache variables. ##
-## ---------------- ##"
- echo
- # The following way of writing the cache mishandles newlines in values,
-(
- for ac_var in `(set) 2>&1 | sed -n '\''s/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'\''`; do
- eval ac_val=\$$ac_var
- case $ac_val in #(
- *${as_nl}*)
- case $ac_var in #(
- *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-$as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
- esac
- case $ac_var in #(
- _ | IFS | as_nl) ;; #(
- BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
- *) { eval $ac_var=; unset $ac_var;} ;;
- esac ;;
- esac
- done
- (set) 2>&1 |
- case $as_nl`(ac_space='\'' '\''; set) 2>&1` in #(
- *${as_nl}ac_space=\ *)
- sed -n \
- "s/'\''/'\''\\\\'\'''\''/g;
- s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\''\\2'\''/p"
- ;; #(
- *)
- sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
- ;;
- esac |
- sort
-)
- echo
-
- $as_echo "## ----------------- ##
-## Output variables. ##
-## ----------------- ##"
- echo
- for ac_var in $ac_subst_vars
- do
- eval ac_val=\$$ac_var
- case $ac_val in
- *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
- esac
- $as_echo "$ac_var='\''$ac_val'\''"
- done | sort
- echo
-
- if test -n "$ac_subst_files"; then
- $as_echo "## ------------------- ##
-## File substitutions. ##
-## ------------------- ##"
- echo
- for ac_var in $ac_subst_files
- do
- eval ac_val=\$$ac_var
- case $ac_val in
- *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
- esac
- $as_echo "$ac_var='\''$ac_val'\''"
- done | sort
- echo
- fi
-
- if test -s confdefs.h; then
- $as_echo "## ----------- ##
-## confdefs.h. ##
-## ----------- ##"
- echo
- cat confdefs.h
- echo
- fi
- test "$ac_signal" != 0 &&
- $as_echo "$as_me: caught signal $ac_signal"
- $as_echo "$as_me: exit $exit_status"
- } >&5
- rm -f core *.core core.conftest.* &&
- rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
- exit $exit_status
-' 0
-for ac_signal in 1 2 13 15; do
- trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
-done
-ac_signal=0
-
-# confdefs.h avoids OS command line length limits that DEFS can exceed.
-rm -f -r conftest* confdefs.h
-
-$as_echo "/* confdefs.h */" > confdefs.h
-
-# Predefined preprocessor variables.
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_NAME "$PACKAGE_NAME"
-_ACEOF
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_TARNAME "$PACKAGE_TARNAME"
-_ACEOF
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_VERSION "$PACKAGE_VERSION"
-_ACEOF
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_STRING "$PACKAGE_STRING"
-_ACEOF
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_BUGREPORT "$PACKAGE_BUGREPORT"
-_ACEOF
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_URL "$PACKAGE_URL"
-_ACEOF
-
-
-# Let the site file select an alternate cache file if it wants to.
-# Prefer an explicitly selected file to automatically selected ones.
-ac_site_file1=NONE
-ac_site_file2=NONE
-if test -n "$CONFIG_SITE"; then
- # We do not want a PATH search for config.site.
- case $CONFIG_SITE in #((
- -*) ac_site_file1=./$CONFIG_SITE;;
- */*) ac_site_file1=$CONFIG_SITE;;
- *) ac_site_file1=./$CONFIG_SITE;;
- esac
-elif test "x$prefix" != xNONE; then
- ac_site_file1=$prefix/share/config.site
- ac_site_file2=$prefix/etc/config.site
-else
- ac_site_file1=$ac_default_prefix/share/config.site
- ac_site_file2=$ac_default_prefix/etc/config.site
-fi
-for ac_site_file in "$ac_site_file1" "$ac_site_file2"
-do
- test "x$ac_site_file" = xNONE && continue
- if test /dev/null != "$ac_site_file" && test -r "$ac_site_file"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
-$as_echo "$as_me: loading site script $ac_site_file" >&6;}
- sed 's/^/| /' "$ac_site_file" >&5
- . "$ac_site_file" \
- || { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "failed to load site script $ac_site_file
-See \`config.log' for more details" "$LINENO" 5; }
- fi
-done
-
-if test -r "$cache_file"; then
- # Some versions of bash will fail to source /dev/null (special files
- # actually), so we avoid doing that. DJGPP emulates it as a regular file.
- if test /dev/null != "$cache_file" && test -f "$cache_file"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
-$as_echo "$as_me: loading cache $cache_file" >&6;}
- case $cache_file in
- [\\/]* | ?:[\\/]* ) . "$cache_file";;
- *) . "./$cache_file";;
- esac
- fi
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
-$as_echo "$as_me: creating cache $cache_file" >&6;}
- >$cache_file
-fi
-
-# Check that the precious variables saved in the cache have kept the same
-# value.
-ac_cache_corrupted=false
-for ac_var in $ac_precious_vars; do
- eval ac_old_set=\$ac_cv_env_${ac_var}_set
- eval ac_new_set=\$ac_env_${ac_var}_set
- eval ac_old_val=\$ac_cv_env_${ac_var}_value
- eval ac_new_val=\$ac_env_${ac_var}_value
- case $ac_old_set,$ac_new_set in
- set,)
- { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5
-$as_echo "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;}
- ac_cache_corrupted=: ;;
- ,set)
- { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was not set in the previous run" >&5
-$as_echo "$as_me: error: \`$ac_var' was not set in the previous run" >&2;}
- ac_cache_corrupted=: ;;
- ,);;
- *)
- if test "x$ac_old_val" != "x$ac_new_val"; then
- # differences in whitespace do not lead to failure.
- ac_old_val_w=`echo x $ac_old_val`
- ac_new_val_w=`echo x $ac_new_val`
- if test "$ac_old_val_w" != "$ac_new_val_w"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' has changed since the previous run:" >&5
-$as_echo "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;}
- ac_cache_corrupted=:
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&5
-$as_echo "$as_me: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&2;}
- eval $ac_var=\$ac_old_val
- fi
- { $as_echo "$as_me:${as_lineno-$LINENO}: former value: \`$ac_old_val'" >&5
-$as_echo "$as_me: former value: \`$ac_old_val'" >&2;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: current value: \`$ac_new_val'" >&5
-$as_echo "$as_me: current value: \`$ac_new_val'" >&2;}
- fi;;
- esac
- # Pass precious variables to config.status.
- if test "$ac_new_set" = set; then
- case $ac_new_val in
- *\'*) ac_arg=$ac_var=`$as_echo "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
- *) ac_arg=$ac_var=$ac_new_val ;;
- esac
- case " $ac_configure_args " in
- *" '$ac_arg' "*) ;; # Avoid dups. Use of quotes ensures accuracy.
- *) as_fn_append ac_configure_args " '$ac_arg'" ;;
- esac
- fi
-done
-if $ac_cache_corrupted; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
-$as_echo "$as_me: error: changes in the environment can compromise the build" >&2;}
- as_fn_error $? "run \`make distclean' and/or \`rm $cache_file' and start over" "$LINENO" 5
-fi
-## -------------------- ##
-## Main body of script. ##
-## -------------------- ##
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-build_dynobj=no
-
-# If $runstatedir isn't set by autoconf (<2.70), set it manually.
-if test x"$runstatedir" = x; then
- runstatedir='${localstatedir}/run'
-fi
-
-
-# Don't make duplicate profile path entries for /etc/krb5.conf if
-# $sysconfdir is /etc
-if test "$sysconfdir" = /etc; then
- SYSCONFCONF=""
-else
- SYSCONFCONF=":${sysconfdir}/krb5.conf"
-fi
-
-
-ac_reltopdir="."
-if test ! -r "$srcdir/./aclocal.m4"; then
- as_fn_error $? "Configure could not determine the relative topdir" "$LINENO" 5
-fi
-ac_topdir=$srcdir/$ac_reltopdir
-ac_config_fragdir=$ac_reltopdir/config
-# echo "Looking for $srcdir/$ac_config_fragdir"
-ac_aux_dir=
-for ac_dir in ./config "$srcdir"/./config; do
- if test -f "$ac_dir/install-sh"; then
- ac_aux_dir=$ac_dir
- ac_install_sh="$ac_aux_dir/install-sh -c"
- break
- elif test -f "$ac_dir/install.sh"; then
- ac_aux_dir=$ac_dir
- ac_install_sh="$ac_aux_dir/install.sh -c"
- break
- elif test -f "$ac_dir/shtool"; then
- ac_aux_dir=$ac_dir
- ac_install_sh="$ac_aux_dir/shtool install -c"
- break
- fi
-done
-if test -z "$ac_aux_dir"; then
- as_fn_error $? "cannot find install-sh, install.sh, or shtool in ./config \"$srcdir\"/./config" "$LINENO" 5
-fi
-
-# These three variables are undocumented and unsupported,
-# and are intended to be withdrawn in a future Autoconf release.
-# They can cause serious problems if a builder's source tree is in a directory
-# whose full name contains unusual characters.
-ac_config_guess="$SHELL $ac_aux_dir/config.guess" # Please don't use this var.
-ac_config_sub="$SHELL $ac_aux_dir/config.sub" # Please don't use this var.
-ac_configure="$SHELL $ac_aux_dir/configure" # Please don't use this var.
-
-
-
-
-
-
-krb5_ac_cflags_set=${CFLAGS+set}
-krb5_ac_cxxflags_set=${CXXFLAGS+set}
-krb5_ac_warn_cflags_set=${WARN_CFLAGS+set}
-krb5_ac_warn_cxxflags_set=${WARN_CXXFLAGS+set}
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-if test -n "$ac_tool_prefix"; then
- # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}gcc; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$CC"; then
- ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_CC="${ac_tool_prefix}gcc"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
- ac_ct_CC=$CC
- # Extract the first word of "gcc", so it can be a program name with args.
-set dummy gcc; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_CC+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$ac_ct_CC"; then
- ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_ac_ct_CC="gcc"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-$as_echo "$ac_ct_CC" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
- if test "x$ac_ct_CC" = x; then
- CC=""
- else
- case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
- CC=$ac_ct_CC
- fi
-else
- CC="$ac_cv_prog_CC"
-fi
-
-if test -z "$CC"; then
- if test -n "$ac_tool_prefix"; then
- # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}cc; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$CC"; then
- ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_CC="${ac_tool_prefix}cc"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- fi
-fi
-if test -z "$CC"; then
- # Extract the first word of "cc", so it can be a program name with args.
-set dummy cc; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$CC"; then
- ac_cv_prog_CC="$CC" # Let the user override the test.
-else
- ac_prog_rejected=no
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- if test "$as_dir/$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
- ac_prog_rejected=yes
- continue
- fi
- ac_cv_prog_CC="cc"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-if test $ac_prog_rejected = yes; then
- # We found a bogon in the path, so make sure we never use it.
- set dummy $ac_cv_prog_CC
- shift
- if test $# != 0; then
- # We chose a different compiler from the bogus one.
- # However, it has the same basename, so the bogon will be chosen
- # first if we set CC to just the basename; use the full file name.
- shift
- ac_cv_prog_CC="$as_dir/$ac_word${1+' '}$@"
- fi
-fi
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$CC"; then
- if test -n "$ac_tool_prefix"; then
- for ac_prog in cl.exe
- do
- # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$CC"; then
- ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- test -n "$CC" && break
- done
-fi
-if test -z "$CC"; then
- ac_ct_CC=$CC
- for ac_prog in cl.exe
-do
- # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_CC+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$ac_ct_CC"; then
- ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_ac_ct_CC="$ac_prog"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-$as_echo "$ac_ct_CC" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- test -n "$ac_ct_CC" && break
-done
-
- if test "x$ac_ct_CC" = x; then
- CC=""
- else
- case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
- CC=$ac_ct_CC
- fi
-fi
-
-fi
-
-
-test -z "$CC" && { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "no acceptable C compiler found in \$PATH
-See \`config.log' for more details" "$LINENO" 5; }
-
-# Provide some information about the compiler.
-$as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
-set X $ac_compile
-ac_compiler=$2
-for ac_option in --version -v -V -qversion; do
- { { ac_try="$ac_compiler $ac_option >&5"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_compiler $ac_option >&5") 2>conftest.err
- ac_status=$?
- if test -s conftest.err; then
- sed '10a\
-... rest of stderr output deleted ...
- 10q' conftest.err >conftest.er1
- cat conftest.er1 >&5
- fi
- rm -f conftest.er1 conftest.err
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }
-done
-
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-
- ;
- return 0;
-}
-_ACEOF
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
-# Try to create an executable without -o first, disregard a.out.
-# It will help us diagnose broken compilers, and finding out an intuition
-# of exeext.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
-$as_echo_n "checking whether the C compiler works... " >&6; }
-ac_link_default=`$as_echo "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
-
-# The possible output files:
-ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
-
-ac_rmfiles=
-for ac_file in $ac_files
-do
- case $ac_file in
- *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
- * ) ac_rmfiles="$ac_rmfiles $ac_file";;
- esac
-done
-rm -f $ac_rmfiles
-
-if { { ac_try="$ac_link_default"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_link_default") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; then :
- # Autoconf-2.13 could set the ac_cv_exeext variable to `no'.
-# So ignore a value of `no', otherwise this would lead to `EXEEXT = no'
-# in a Makefile. We should not override ac_cv_exeext if it was cached,
-# so that the user can short-circuit this test for compilers unknown to
-# Autoconf.
-for ac_file in $ac_files ''
-do
- test -f "$ac_file" || continue
- case $ac_file in
- *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
- ;;
- [ab].out )
- # We found the default executable, but exeext='' is most
- # certainly right.
- break;;
- *.* )
- if test "${ac_cv_exeext+set}" = set && test "$ac_cv_exeext" != no;
- then :; else
- ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
- fi
- # We set ac_cv_exeext here because the later test for it is not
- # safe: cross compilers may not add the suffix if given an `-o'
- # argument, so we may need to know it at that point already.
- # Even if this section looks crufty: it has the advantage of
- # actually working.
- break;;
- * )
- break;;
- esac
-done
-test "$ac_cv_exeext" = no && ac_cv_exeext=
-
-else
- ac_file=''
-fi
-if test -z "$ac_file"; then :
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-$as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error 77 "C compiler cannot create executables
-See \`config.log' for more details" "$LINENO" 5; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
-$as_echo_n "checking for C compiler default output file name... " >&6; }
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
-$as_echo "$ac_file" >&6; }
-ac_exeext=$ac_cv_exeext
-
-rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
-ac_clean_files=$ac_clean_files_save
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
-$as_echo_n "checking for suffix of executables... " >&6; }
-if { { ac_try="$ac_link"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_link") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; then :
- # If both `conftest.exe' and `conftest' are `present' (well, observable)
-# catch `conftest.exe'. For instance with Cygwin, `ls conftest' will
-# work properly (i.e., refer to `conftest.exe'), while it won't with
-# `rm'.
-for ac_file in conftest.exe conftest conftest.*; do
- test -f "$ac_file" || continue
- case $ac_file in
- *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
- *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
- break;;
- * ) break;;
- esac
-done
-else
- { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of executables: cannot compile and link
-See \`config.log' for more details" "$LINENO" 5; }
-fi
-rm -f conftest conftest$ac_cv_exeext
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
-$as_echo "$ac_cv_exeext" >&6; }
-
-rm -f conftest.$ac_ext
-EXEEXT=$ac_cv_exeext
-ac_exeext=$EXEEXT
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <stdio.h>
-int
-main ()
-{
-FILE *f = fopen ("conftest.out", "w");
- return ferror (f) || fclose (f) != 0;
-
- ;
- return 0;
-}
-_ACEOF
-ac_clean_files="$ac_clean_files conftest.out"
-# Check that the compiler produces executables we can run. If not, either
-# the compiler is broken, or we cross compile.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
-$as_echo_n "checking whether we are cross compiling... " >&6; }
-if test "$cross_compiling" != yes; then
- { { ac_try="$ac_link"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_link") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }
- if { ac_try='./conftest$ac_cv_exeext'
- { { case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_try") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; }; then
- cross_compiling=no
- else
- if test "$cross_compiling" = maybe; then
- cross_compiling=yes
- else
- { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot run C compiled programs.
-If you meant to cross compile, use \`--host'.
-See \`config.log' for more details" "$LINENO" 5; }
- fi
- fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
-$as_echo "$cross_compiling" >&6; }
-
-rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out
-ac_clean_files=$ac_clean_files_save
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
-$as_echo_n "checking for suffix of object files... " >&6; }
-if ${ac_cv_objext+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-
- ;
- return 0;
-}
-_ACEOF
-rm -f conftest.o conftest.obj
-if { { ac_try="$ac_compile"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_compile") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; then :
- for ac_file in conftest.o conftest.obj conftest.*; do
- test -f "$ac_file" || continue;
- case $ac_file in
- *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
- *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
- break;;
- esac
-done
-else
- $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of object files: cannot compile
-See \`config.log' for more details" "$LINENO" 5; }
-fi
-rm -f conftest.$ac_cv_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
-$as_echo "$ac_cv_objext" >&6; }
-OBJEXT=$ac_cv_objext
-ac_objext=$OBJEXT
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C compiler" >&5
-$as_echo_n "checking whether we are using the GNU C compiler... " >&6; }
-if ${ac_cv_c_compiler_gnu+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-#ifndef __GNUC__
- choke me
-#endif
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_compiler_gnu=yes
-else
- ac_compiler_gnu=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-ac_cv_c_compiler_gnu=$ac_compiler_gnu
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
-$as_echo "$ac_cv_c_compiler_gnu" >&6; }
-if test $ac_compiler_gnu = yes; then
- GCC=yes
-else
- GCC=
-fi
-ac_test_CFLAGS=${CFLAGS+set}
-ac_save_CFLAGS=$CFLAGS
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
-$as_echo_n "checking whether $CC accepts -g... " >&6; }
-if ${ac_cv_prog_cc_g+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_save_c_werror_flag=$ac_c_werror_flag
- ac_c_werror_flag=yes
- ac_cv_prog_cc_g=no
- CFLAGS="-g"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_cv_prog_cc_g=yes
-else
- CFLAGS=""
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
- ac_c_werror_flag=$ac_save_c_werror_flag
- CFLAGS="-g"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_cv_prog_cc_g=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- ac_c_werror_flag=$ac_save_c_werror_flag
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
-$as_echo "$ac_cv_prog_cc_g" >&6; }
-if test "$ac_test_CFLAGS" = set; then
- CFLAGS=$ac_save_CFLAGS
-elif test $ac_cv_prog_cc_g = yes; then
- if test "$GCC" = yes; then
- CFLAGS="-g -O2"
- else
- CFLAGS="-g"
- fi
-else
- if test "$GCC" = yes; then
- CFLAGS="-O2"
- else
- CFLAGS=
- fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $CC option to accept ISO C89" >&5
-$as_echo_n "checking for $CC option to accept ISO C89... " >&6; }
-if ${ac_cv_prog_cc_c89+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_cv_prog_cc_c89=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <stdarg.h>
-#include <stdio.h>
-struct stat;
-/* Most of the following tests are stolen from RCS 5.7's src/conf.sh. */
-struct buf { int x; };
-FILE * (*rcsopen) (struct buf *, struct stat *, int);
-static char *e (p, i)
- char **p;
- int i;
-{
- return p[i];
-}
-static char *f (char * (*g) (char **, int), char **p, ...)
-{
- char *s;
- va_list v;
- va_start (v,p);
- s = g (p, va_arg (v,int));
- va_end (v);
- return s;
-}
-
-/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default. It has
- function prototypes and stuff, but not '\xHH' hex character constants.
- These don't provoke an error unfortunately, instead are silently treated
- as 'x'. The following induces an error, until -std is added to get
- proper ANSI mode. Curiously '\x00'!='x' always comes out true, for an
- array size at least. It's necessary to write '\x00'==0 to get something
- that's true only with -std. */
-int osf4_cc_array ['\x00' == 0 ? 1 : -1];
-
-/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
- inside strings and character constants. */
-#define FOO(x) 'x'
-int xlc6_cc_array[FOO(a) == 'x' ? 1 : -1];
-
-int test (int i, double x);
-struct s1 {int (*f) (int a);};
-struct s2 {int (*f) (double a);};
-int pairnames (int, char **, FILE *(*)(struct buf *, struct stat *, int), int, int);
-int argc;
-char **argv;
-int
-main ()
-{
-return f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1];
- ;
- return 0;
-}
-_ACEOF
-for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std \
- -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
-do
- CC="$ac_save_CC $ac_arg"
- if ac_fn_c_try_compile "$LINENO"; then :
- ac_cv_prog_cc_c89=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext
- test "x$ac_cv_prog_cc_c89" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC
-
-fi
-# AC_CACHE_VAL
-case "x$ac_cv_prog_cc_c89" in
- x)
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-$as_echo "none needed" >&6; } ;;
- xno)
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-$as_echo "unsupported" >&6; } ;;
- *)
- CC="$CC $ac_cv_prog_cc_c89"
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
-$as_echo "$ac_cv_prog_cc_c89" >&6; } ;;
-esac
-if test "x$ac_cv_prog_cc_c89" != xno; then :
-
-fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-ac_ext=cpp
-ac_cpp='$CXXCPP $CPPFLAGS'
-ac_compile='$CXX -c $CXXFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CXX -o conftest$ac_exeext $CXXFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_cxx_compiler_gnu
-if test -z "$CXX"; then
- if test -n "$CCC"; then
- CXX=$CCC
- else
- if test -n "$ac_tool_prefix"; then
- for ac_prog in g++ c++ gpp aCC CC cxx cc++ cl.exe FCC KCC RCC xlC_r xlC
- do
- # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CXX+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$CXX"; then
- ac_cv_prog_CXX="$CXX" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_CXX="$ac_tool_prefix$ac_prog"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-CXX=$ac_cv_prog_CXX
-if test -n "$CXX"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CXX" >&5
-$as_echo "$CXX" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- test -n "$CXX" && break
- done
-fi
-if test -z "$CXX"; then
- ac_ct_CXX=$CXX
- for ac_prog in g++ c++ gpp aCC CC cxx cc++ cl.exe FCC KCC RCC xlC_r xlC
-do
- # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_CXX+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$ac_ct_CXX"; then
- ac_cv_prog_ac_ct_CXX="$ac_ct_CXX" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_ac_ct_CXX="$ac_prog"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_CXX=$ac_cv_prog_ac_ct_CXX
-if test -n "$ac_ct_CXX"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CXX" >&5
-$as_echo "$ac_ct_CXX" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- test -n "$ac_ct_CXX" && break
-done
-
- if test "x$ac_ct_CXX" = x; then
- CXX="g++"
- else
- case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
- CXX=$ac_ct_CXX
- fi
-fi
-
- fi
-fi
-# Provide some information about the compiler.
-$as_echo "$as_me:${as_lineno-$LINENO}: checking for C++ compiler version" >&5
-set X $ac_compile
-ac_compiler=$2
-for ac_option in --version -v -V -qversion; do
- { { ac_try="$ac_compiler $ac_option >&5"
-case "(($ac_try" in
- *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
- *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
- (eval "$ac_compiler $ac_option >&5") 2>conftest.err
- ac_status=$?
- if test -s conftest.err; then
- sed '10a\
-... rest of stderr output deleted ...
- 10q' conftest.err >conftest.er1
- cat conftest.er1 >&5
- fi
- rm -f conftest.er1 conftest.err
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }
-done
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C++ compiler" >&5
-$as_echo_n "checking whether we are using the GNU C++ compiler... " >&6; }
-if ${ac_cv_cxx_compiler_gnu+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-#ifndef __GNUC__
- choke me
-#endif
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_cxx_try_compile "$LINENO"; then :
- ac_compiler_gnu=yes
-else
- ac_compiler_gnu=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-ac_cv_cxx_compiler_gnu=$ac_compiler_gnu
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_cxx_compiler_gnu" >&5
-$as_echo "$ac_cv_cxx_compiler_gnu" >&6; }
-if test $ac_compiler_gnu = yes; then
- GXX=yes
-else
- GXX=
-fi
-ac_test_CXXFLAGS=${CXXFLAGS+set}
-ac_save_CXXFLAGS=$CXXFLAGS
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CXX accepts -g" >&5
-$as_echo_n "checking whether $CXX accepts -g... " >&6; }
-if ${ac_cv_prog_cxx_g+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_save_cxx_werror_flag=$ac_cxx_werror_flag
- ac_cxx_werror_flag=yes
- ac_cv_prog_cxx_g=no
- CXXFLAGS="-g"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_cxx_try_compile "$LINENO"; then :
- ac_cv_prog_cxx_g=yes
-else
- CXXFLAGS=""
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_cxx_try_compile "$LINENO"; then :
-
-else
- ac_cxx_werror_flag=$ac_save_cxx_werror_flag
- CXXFLAGS="-g"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_cxx_try_compile "$LINENO"; then :
- ac_cv_prog_cxx_g=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- ac_cxx_werror_flag=$ac_save_cxx_werror_flag
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cxx_g" >&5
-$as_echo "$ac_cv_prog_cxx_g" >&6; }
-if test "$ac_test_CXXFLAGS" = set; then
- CXXFLAGS=$ac_save_CXXFLAGS
-elif test $ac_cv_prog_cxx_g = yes; then
- if test "$GXX" = yes; then
- CXXFLAGS="-g -O2"
- else
- CXXFLAGS="-g"
- fi
-else
- if test "$GXX" = yes; then
- CXXFLAGS="-O2"
- else
- CXXFLAGS=
- fi
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
- cflags_warning_test_flags=
- cachevar=`echo "krb5_cv_cc_flag_-Werror=unknown-warning-option" | sed -e s/=/_eq_/g -e s/-/_dash_/g -e s/[^a-zA-Z0-9_]/_/g`
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if C compiler supports -Werror=unknown-warning-option" >&5
-$as_echo_n "checking if C compiler supports -Werror=unknown-warning-option... " >&6; }
-if eval \${$cachevar+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- # first try without, then with
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- old_cflags="$CFLAGS"
- CFLAGS="$CFLAGS $cflags_warning_test_flags -Werror=unknown-warning-option"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval $cachevar=yes
-else
- eval $cachevar=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- CFLAGS="$old_cflags"
-else
- as_fn_error $? "compiling simple test program with $CFLAGS failed" "$LINENO" 5
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$cachevar
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- if eval test '"${'$cachevar'}"' = yes; then
- WARN_CFLAGS="$WARN_CFLAGS -Werror=unknown-warning-option"
- fi
- eval flag_supported='${'$cachevar'}'
-
- if test $flag_supported = yes; then
- cflags_warning_test_flags=-Werror=unknown-warning-option
- fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5
-$as_echo_n "checking how to run the C preprocessor... " >&6; }
-# On Suns, sometimes $CPP names a directory.
-if test -n "$CPP" && test -d "$CPP"; then
- CPP=
-fi
-if test -z "$CPP"; then
- if ${ac_cv_prog_CPP+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- # Double quotes because CPP needs to be expanded
- for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp"
- do
- ac_preproc_ok=false
-for ac_c_preproc_warn_flag in '' yes
-do
- # Use a header file that comes with gcc, so configuring glibc
- # with a fresh cross-compiler works.
- # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
- # <limits.h> exists even on freestanding compilers.
- # On the NeXT, cc -E runs the code through the compiler's parser,
- # not just through cpp. "Syntax error" is here to catch this case.
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
- Syntax error
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
-
-else
- # Broken: fails on valid input.
-continue
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-
- # OK, works on sane cases. Now check whether nonexistent headers
- # can be detected and how.
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <ac_nonexistent.h>
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
- # Broken: success on invalid input.
-continue
-else
- # Passes both tests.
-ac_preproc_ok=:
-break
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-
-done
-# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
-rm -f conftest.i conftest.err conftest.$ac_ext
-if $ac_preproc_ok; then :
- break
-fi
-
- done
- ac_cv_prog_CPP=$CPP
-
-fi
- CPP=$ac_cv_prog_CPP
-else
- ac_cv_prog_CPP=$CPP
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5
-$as_echo "$CPP" >&6; }
-ac_preproc_ok=false
-for ac_c_preproc_warn_flag in '' yes
-do
- # Use a header file that comes with gcc, so configuring glibc
- # with a fresh cross-compiler works.
- # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
- # <limits.h> exists even on freestanding compilers.
- # On the NeXT, cc -E runs the code through the compiler's parser,
- # not just through cpp. "Syntax error" is here to catch this case.
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
- Syntax error
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
-
-else
- # Broken: fails on valid input.
-continue
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-
- # OK, works on sane cases. Now check whether nonexistent headers
- # can be detected and how.
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <ac_nonexistent.h>
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
- # Broken: success on invalid input.
-continue
-else
- # Passes both tests.
-ac_preproc_ok=:
-break
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-
-done
-# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
-rm -f conftest.i conftest.err conftest.$ac_ext
-if $ac_preproc_ok; then :
-
-else
- { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "C preprocessor \"$CPP\" fails sanity check
-See \`config.log' for more details" "$LINENO" 5; }
-fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-
-
-
-
-
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
- if test -n "$ac_tool_prefix"; then
- # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_PKG_CONFIG+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $PKG_CONFIG in
- [\\/]* | ?:[\\/]*)
- ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
- ;;
- *)
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_path_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- ;;
-esac
-fi
-PKG_CONFIG=$ac_cv_path_PKG_CONFIG
-if test -n "$PKG_CONFIG"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
-$as_echo "$PKG_CONFIG" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_path_PKG_CONFIG"; then
- ac_pt_PKG_CONFIG=$PKG_CONFIG
- # Extract the first word of "pkg-config", so it can be a program name with args.
-set dummy pkg-config; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_ac_pt_PKG_CONFIG+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $ac_pt_PKG_CONFIG in
- [\\/]* | ?:[\\/]*)
- ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
- ;;
- *)
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_path_ac_pt_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- ;;
-esac
-fi
-ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
-if test -n "$ac_pt_PKG_CONFIG"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
-$as_echo "$ac_pt_PKG_CONFIG" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
- if test "x$ac_pt_PKG_CONFIG" = x; then
- PKG_CONFIG=""
- else
- case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
- PKG_CONFIG=$ac_pt_PKG_CONFIG
- fi
-else
- PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
-fi
-
-fi
-if test -n "$PKG_CONFIG"; then
- _pkg_min_version=0.9.0
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
-$as_echo_n "checking pkg-config is at least version $_pkg_min_version... " >&6; }
- if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
- PKG_CONFIG=""
- fi
-fi
-test "$program_prefix" != NONE &&
- program_transform_name="s&^&$program_prefix&;$program_transform_name"
-# Use a double $ so make ignores it.
-test "$program_suffix" != NONE &&
- program_transform_name="s&\$&$program_suffix&;$program_transform_name"
-# Double any \ or $.
-# By default was `s,x,x', remove it if useless.
-ac_script='s/[\\$]/&&/g;s/;s,x,x,$//'
-program_transform_name=`$as_echo "$program_transform_name" | sed "$ac_script"`
-
-# Make sure we can run config.sub.
-$SHELL "$ac_aux_dir/config.sub" sun4 >/dev/null 2>&1 ||
- as_fn_error $? "cannot run $SHELL $ac_aux_dir/config.sub" "$LINENO" 5
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking build system type" >&5
-$as_echo_n "checking build system type... " >&6; }
-if ${ac_cv_build+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_build_alias=$build_alias
-test "x$ac_build_alias" = x &&
- ac_build_alias=`$SHELL "$ac_aux_dir/config.guess"`
-test "x$ac_build_alias" = x &&
- as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5
-ac_cv_build=`$SHELL "$ac_aux_dir/config.sub" $ac_build_alias` ||
- as_fn_error $? "$SHELL $ac_aux_dir/config.sub $ac_build_alias failed" "$LINENO" 5
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5
-$as_echo "$ac_cv_build" >&6; }
-case $ac_cv_build in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;;
-esac
-build=$ac_cv_build
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_build
-shift
-build_cpu=$1
-build_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-build_os=$*
-IFS=$ac_save_IFS
-case $build_os in *\ *) build_os=`echo "$build_os" | sed 's/ /-/g'`;; esac
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking host system type" >&5
-$as_echo_n "checking host system type... " >&6; }
-if ${ac_cv_host+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test "x$host_alias" = x; then
- ac_cv_host=$ac_cv_build
-else
- ac_cv_host=`$SHELL "$ac_aux_dir/config.sub" $host_alias` ||
- as_fn_error $? "$SHELL $ac_aux_dir/config.sub $host_alias failed" "$LINENO" 5
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5
-$as_echo "$ac_cv_host" >&6; }
-case $ac_cv_host in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;;
-esac
-host=$ac_cv_host
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_host
-shift
-host_cpu=$1
-host_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-host_os=$*
-IFS=$ac_save_IFS
-case $host_os in *\ *) host_os=`echo "$host_os" | sed 's/ /-/g'`;; esac
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5
-$as_echo_n "checking for a sed that does not truncate output... " >&6; }
-if ${ac_cv_path_SED+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
- for ac_i in 1 2 3 4 5 6 7; do
- ac_script="$ac_script$as_nl$ac_script"
- done
- echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed
- { ac_script=; unset ac_script;}
- if test -z "$SED"; then
- ac_path_SED_found=false
- # Loop through the user's path and test for each of PROGNAME-LIST
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_prog in sed gsed; do
- for ac_exec_ext in '' $ac_executable_extensions; do
- ac_path_SED="$as_dir/$ac_prog$ac_exec_ext"
- as_fn_executable_p "$ac_path_SED" || continue
-# Check for GNU ac_path_SED and select it if it is found.
- # Check for GNU $ac_path_SED
-case `"$ac_path_SED" --version 2>&1` in
-*GNU*)
- ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;;
-*)
- ac_count=0
- $as_echo_n 0123456789 >"conftest.in"
- while :
- do
- cat "conftest.in" "conftest.in" >"conftest.tmp"
- mv "conftest.tmp" "conftest.in"
- cp "conftest.in" "conftest.nl"
- $as_echo '' >> "conftest.nl"
- "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break
- diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
- as_fn_arith $ac_count + 1 && ac_count=$as_val
- if test $ac_count -gt ${ac_path_SED_max-0}; then
- # Best one so far, save it but keep looking for a better one
- ac_cv_path_SED="$ac_path_SED"
- ac_path_SED_max=$ac_count
- fi
- # 10*(2^10) chars as input seems more than enough
- test $ac_count -gt 10 && break
- done
- rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
- $ac_path_SED_found && break 3
- done
- done
- done
-IFS=$as_save_IFS
- if test -z "$ac_cv_path_SED"; then
- as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5
- fi
-else
- ac_cv_path_SED=$SED
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5
-$as_echo "$ac_cv_path_SED" >&6; }
- SED="$ac_cv_path_SED"
- rm -f conftest.sed
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
-$as_echo_n "checking for grep that handles long lines and -e... " >&6; }
-if ${ac_cv_path_GREP+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -z "$GREP"; then
- ac_path_GREP_found=false
- # Loop through the user's path and test for each of PROGNAME-LIST
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_prog in grep ggrep; do
- for ac_exec_ext in '' $ac_executable_extensions; do
- ac_path_GREP="$as_dir/$ac_prog$ac_exec_ext"
- as_fn_executable_p "$ac_path_GREP" || continue
-# Check for GNU ac_path_GREP and select it if it is found.
- # Check for GNU $ac_path_GREP
-case `"$ac_path_GREP" --version 2>&1` in
-*GNU*)
- ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
-*)
- ac_count=0
- $as_echo_n 0123456789 >"conftest.in"
- while :
- do
- cat "conftest.in" "conftest.in" >"conftest.tmp"
- mv "conftest.tmp" "conftest.in"
- cp "conftest.in" "conftest.nl"
- $as_echo 'GREP' >> "conftest.nl"
- "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
- diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
- as_fn_arith $ac_count + 1 && ac_count=$as_val
- if test $ac_count -gt ${ac_path_GREP_max-0}; then
- # Best one so far, save it but keep looking for a better one
- ac_cv_path_GREP="$ac_path_GREP"
- ac_path_GREP_max=$ac_count
- fi
- # 10*(2^10) chars as input seems more than enough
- test $ac_count -gt 10 && break
- done
- rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
- $ac_path_GREP_found && break 3
- done
- done
- done
-IFS=$as_save_IFS
- if test -z "$ac_cv_path_GREP"; then
- as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
- fi
-else
- ac_cv_path_GREP=$GREP
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
-$as_echo "$ac_cv_path_GREP" >&6; }
- GREP="$ac_cv_path_GREP"
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-$as_echo_n "checking for egrep... " >&6; }
-if ${ac_cv_path_EGREP+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
- then ac_cv_path_EGREP="$GREP -E"
- else
- if test -z "$EGREP"; then
- ac_path_EGREP_found=false
- # Loop through the user's path and test for each of PROGNAME-LIST
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_prog in egrep; do
- for ac_exec_ext in '' $ac_executable_extensions; do
- ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
- as_fn_executable_p "$ac_path_EGREP" || continue
-# Check for GNU ac_path_EGREP and select it if it is found.
- # Check for GNU $ac_path_EGREP
-case `"$ac_path_EGREP" --version 2>&1` in
-*GNU*)
- ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
-*)
- ac_count=0
- $as_echo_n 0123456789 >"conftest.in"
- while :
- do
- cat "conftest.in" "conftest.in" >"conftest.tmp"
- mv "conftest.tmp" "conftest.in"
- cp "conftest.in" "conftest.nl"
- $as_echo 'EGREP' >> "conftest.nl"
- "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
- diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
- as_fn_arith $ac_count + 1 && ac_count=$as_val
- if test $ac_count -gt ${ac_path_EGREP_max-0}; then
- # Best one so far, save it but keep looking for a better one
- ac_cv_path_EGREP="$ac_path_EGREP"
- ac_path_EGREP_max=$ac_count
- fi
- # 10*(2^10) chars as input seems more than enough
- test $ac_count -gt 10 && break
- done
- rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
- $ac_path_EGREP_found && break 3
- done
- done
- done
-IFS=$as_save_IFS
- if test -z "$ac_cv_path_EGREP"; then
- as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
- fi
-else
- ac_cv_path_EGREP=$EGREP
-fi
-
- fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-$as_echo "$ac_cv_path_EGREP" >&6; }
- EGREP="$ac_cv_path_EGREP"
-
-
- EXTRA_FILES=""
-
-
-$as_echo "#define _GNU_SOURCE 1" >>confdefs.h
-
-
-$as_echo "#define __STDC_WANT_LIB_EXT1__ 1" >>confdefs.h
-
-
-if test $ac_cv_c_compiler_gnu = yes ; then
- HAVE_GCC=yes
- else HAVE_GCC=
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for GNU linker" >&5
-$as_echo_n "checking for GNU linker... " >&6; }
-if ${krb5_cv_prog_gnu_ld+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- krb5_cv_prog_gnu_ld=no
-if test "$GCC" = yes; then
- if { ac_try='$CC -Wl,-v 2>&1 | grep "GNU ld" > /dev/null'
- { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5
- (eval $ac_try) 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; }; then
- krb5_cv_prog_gnu_ld=yes
- fi
-fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_prog_gnu_ld" >&5
-$as_echo "$krb5_cv_prog_gnu_ld" >&6; }
-
-# Check whether --with-size-optimizations was given.
-if test "${with_size_optimizations+set}" = set; then :
- withval=$with_size_optimizations;
-else
- withval=no
-fi
-
-if test "$withval" = yes; then
-
-$as_echo "#define CONFIG_SMALL 1" >>confdefs.h
-
-fi
-# -Wno-long-long, if needed, for k5-platform.h without inttypes.h etc.
-extra_gcc_warn_opts="-Wall -Wcast-align -Wshadow"
-# -Wmissing-prototypes
-if test "$GCC" = yes ; then
- # Putting this here means we get -Os after -O2, which works.
- if test "$with_size_optimizations" = yes && test "x$krb5_ac_cflags_set" != xset; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: adding -Os optimization option" >&5
-$as_echo "$as_me: adding -Os optimization option" >&6;}
- case "$CFLAGS" in
- "-g -O2") CFLAGS="-g -Os" ;;
- "-O2") CFLAGS="-Os" ;;
- *) CFLAGS="$CFLAGS -Os" ;;
- esac
- fi
- if test "x$krb5_ac_warn_cflags_set" = xset ; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: not adding extra gcc warning flags because WARN_CFLAGS was set" >&5
-$as_echo "$as_me: not adding extra gcc warning flags because WARN_CFLAGS was set" >&6;}
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: adding extra warning flags for gcc" >&5
-$as_echo "$as_me: adding extra warning flags for gcc" >&6;}
- WARN_CFLAGS="$WARN_CFLAGS $extra_gcc_warn_opts -Wmissing-prototypes"
- if test "`uname -s`" = Darwin ; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: skipping pedantic warnings on Darwin" >&5
-$as_echo "$as_me: skipping pedantic warnings on Darwin" >&6;}
- elif test "`uname -s`" = Linux ; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: skipping pedantic warnings on Linux" >&5
-$as_echo "$as_me: skipping pedantic warnings on Linux" >&6;}
- else
- WARN_CFLAGS="$WARN_CFLAGS -pedantic"
- fi
- if test "$ac_cv_cxx_compiler_gnu" = yes; then
- if test "x$krb5_ac_warn_cxxflags_set" = xset ; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: not adding extra g++ warnings because WARN_CXXFLAGS was set" >&5
-$as_echo "$as_me: not adding extra g++ warnings because WARN_CXXFLAGS was set" >&6;}
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: adding extra warning flags for g++" >&5
-$as_echo "$as_me: adding extra warning flags for g++" >&6;}
- WARN_CXXFLAGS="$WARN_CXXFLAGS $extra_gcc_warn_opts"
- fi
- fi
- # Currently, G++ does not support -Wno-format-zero-length.
- cachevar=`echo "krb5_cv_cc_flag_-Wno-format-zero-length" | sed -e s/=/_eq_/g -e s/-/_dash_/g -e s/[^a-zA-Z0-9_]/_/g`
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if C compiler supports -Wno-format-zero-length" >&5
-$as_echo_n "checking if C compiler supports -Wno-format-zero-length... " >&6; }
-if eval \${$cachevar+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- # first try without, then with
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- old_cflags="$CFLAGS"
- CFLAGS="$CFLAGS $cflags_warning_test_flags -Wno-format-zero-length"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval $cachevar=yes
-else
- eval $cachevar=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- CFLAGS="$old_cflags"
-else
- as_fn_error $? "compiling simple test program with $CFLAGS failed" "$LINENO" 5
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$cachevar
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- if eval test '"${'$cachevar'}"' = yes; then
- WARN_CFLAGS="$WARN_CFLAGS -Wno-format-zero-length"
- fi
- eval flag_supported='${'$cachevar'}'
-
- # Other flags here may not be supported on some versions of
- # gcc that people want to use.
- for flag in overflow strict-overflow missing-format-attribute missing-prototypes return-type missing-braces parentheses switch unused-function unused-label unused-variable unused-value unknown-pragmas sign-compare newline-eof error=uninitialized no-maybe-uninitialized error=pointer-arith error=int-conversion error=incompatible-pointer-types error=discarded-qualifiers error=implicit-int ; do
- cachevar=`echo "krb5_cv_cc_flag_-W$flag" | sed -e s/=/_eq_/g -e s/-/_dash_/g -e s/[^a-zA-Z0-9_]/_/g`
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if C compiler supports -W$flag" >&5
-$as_echo_n "checking if C compiler supports -W$flag... " >&6; }
-if eval \${$cachevar+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- # first try without, then with
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- old_cflags="$CFLAGS"
- CFLAGS="$CFLAGS $cflags_warning_test_flags -W$flag"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval $cachevar=yes
-else
- eval $cachevar=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- CFLAGS="$old_cflags"
-else
- as_fn_error $? "compiling simple test program with $CFLAGS failed" "$LINENO" 5
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$cachevar
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- if eval test '"${'$cachevar'}"' = yes; then
- WARN_CFLAGS="$WARN_CFLAGS -W$flag"
- fi
- eval flag_supported='${'$cachevar'}'
-
- done
- # old-style-definition? generates many, many warnings
- #
- # Warnings that we'd like to turn into errors on versions of gcc
- # that support promoting only specific warnings to errors, but
- # we'll take as warnings on older compilers. (If such a warning
- # is added after the -Werror=foo feature, you can just put
- # error=foo in the above list, and skip the test for the
- # warning-only form.) At least in some versions, -Werror= doesn't
- # seem to make the conditions actual errors, but still issues
- # warnings; I guess we'll take what we can get.
- #
- # We're currently targeting C89+, not C99, so disallow some
- # constructs.
- for flag in declaration-after-statement ; do
- cachevar=`echo "krb5_cv_cc_flag_-Werror=$flag" | sed -e s/=/_eq_/g -e s/-/_dash_/g -e s/[^a-zA-Z0-9_]/_/g`
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if C compiler supports -Werror=$flag" >&5
-$as_echo_n "checking if C compiler supports -Werror=$flag... " >&6; }
-if eval \${$cachevar+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- # first try without, then with
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- old_cflags="$CFLAGS"
- CFLAGS="$CFLAGS $cflags_warning_test_flags -Werror=$flag"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval $cachevar=yes
-else
- eval $cachevar=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- CFLAGS="$old_cflags"
-else
- as_fn_error $? "compiling simple test program with $CFLAGS failed" "$LINENO" 5
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$cachevar
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- if eval test '"${'$cachevar'}"' = yes; then
- WARN_CFLAGS="$WARN_CFLAGS -Werror=$flag"
- fi
- eval flag_supported='${'$cachevar'}'
-
- if test "$flag_supported" = no; then
- cachevar=`echo "krb5_cv_cc_flag_-W$flag" | sed -e s/=/_eq_/g -e s/-/_dash_/g -e s/[^a-zA-Z0-9_]/_/g`
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if C compiler supports -W$flag" >&5
-$as_echo_n "checking if C compiler supports -W$flag... " >&6; }
-if eval \${$cachevar+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- # first try without, then with
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- old_cflags="$CFLAGS"
- CFLAGS="$CFLAGS $cflags_warning_test_flags -W$flag"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval $cachevar=yes
-else
- eval $cachevar=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- CFLAGS="$old_cflags"
-else
- as_fn_error $? "compiling simple test program with $CFLAGS failed" "$LINENO" 5
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$cachevar
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- if eval test '"${'$cachevar'}"' = yes; then
- WARN_CFLAGS="$WARN_CFLAGS -W$flag"
- fi
- eval flag_supported='${'$cachevar'}'
-
- fi
- done
- # We require function declarations now.
- #
- # In some compiler versions -- e.g., "gcc version 4.2.1 (Apple
- # Inc. build 5664)" -- the -Werror- option works, but the -Werror=
- # version doesn't cause implicitly declared functions to be
- # flagged as errors. If neither works, -Wall implies
- # -Wimplicit-function-declaration so don't bother.
- cachevar=`echo "krb5_cv_cc_flag_-Werror-implicit-function-declaration" | sed -e s/=/_eq_/g -e s/-/_dash_/g -e s/[^a-zA-Z0-9_]/_/g`
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if C compiler supports -Werror-implicit-function-declaration" >&5
-$as_echo_n "checking if C compiler supports -Werror-implicit-function-declaration... " >&6; }
-if eval \${$cachevar+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- # first try without, then with
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- old_cflags="$CFLAGS"
- CFLAGS="$CFLAGS $cflags_warning_test_flags -Werror-implicit-function-declaration"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval $cachevar=yes
-else
- eval $cachevar=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- CFLAGS="$old_cflags"
-else
- as_fn_error $? "compiling simple test program with $CFLAGS failed" "$LINENO" 5
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$cachevar
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- if eval test '"${'$cachevar'}"' = yes; then
- WARN_CFLAGS="$WARN_CFLAGS -Werror-implicit-function-declaration"
- fi
- eval flag_supported='${'$cachevar'}'
-
- if test "implicit-function-declaration_supported" = no; then
- cachevar=`echo "krb5_cv_cc_flag_-Werror=implicit-function-declaration" | sed -e s/=/_eq_/g -e s/-/_dash_/g -e s/[^a-zA-Z0-9_]/_/g`
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if C compiler supports -Werror=implicit-function-declaration" >&5
-$as_echo_n "checking if C compiler supports -Werror=implicit-function-declaration... " >&6; }
-if eval \${$cachevar+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- # first try without, then with
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- old_cflags="$CFLAGS"
- CFLAGS="$CFLAGS $cflags_warning_test_flags -Werror=implicit-function-declaration"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval $cachevar=yes
-else
- eval $cachevar=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- CFLAGS="$old_cflags"
-else
- as_fn_error $? "compiling simple test program with $CFLAGS failed" "$LINENO" 5
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$cachevar
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
- if eval test '"${'$cachevar'}"' = yes; then
- WARN_CFLAGS="$WARN_CFLAGS -Werror=implicit-function-declaration"
- fi
- eval flag_supported='${'$cachevar'}'
-
- fi
- #
- fi
- if test "`uname -s`" = Darwin ; then
- # Someday this should be a feature test.
- # One current (Jaguar = OS 10.2) problem:
- # Archive library with foo.o undef sym X and bar.o common sym X,
- # if foo.o is pulled in at link time, bar.o may not be, causing
- # the linker to complain.
- # Dynamic library problems too?
- case "$CC $CFLAGS" in
- *-fcommon*) ;; # why someone would do this, I don't know
- *-fno-common*) ;; # okay, they're already doing the right thing
- *)
- { $as_echo "$as_me:${as_lineno-$LINENO}: disabling the use of common storage on Darwin" >&5
-$as_echo "$as_me: disabling the use of common storage on Darwin" >&6;}
- CFLAGS="$CFLAGS -fno-common"
- ;;
- esac
- fi
-else
- if test "`uname -s`" = AIX ; then
- # Using AIX but not GCC, assume native compiler.
- # The native compiler appears not to give a nonzero exit
- # status for certain classes of errors, like missing arguments
- # in function calls. Let's try to fix that with -qhalt=e.
- case "$CC $CFLAGS" in
- *-qhalt=*) ;;
- *)
- CFLAGS="$CFLAGS -qhalt=e"
- { $as_echo "$as_me:${as_lineno-$LINENO}: adding -qhalt=e for better error reporting" >&5
-$as_echo "$as_me: adding -qhalt=e for better error reporting" >&6;}
- ;;
- esac
- # Also, the optimizer isn't turned on by default, which means
- # the static inline functions get left in random object files,
- # leading to references to pthread_mutex_lock from anything that
- # includes k5-int.h whether it uses threads or not.
- case "$CC $CFLAGS" in
- *-O*) ;;
- *)
- CFLAGS="$CFLAGS -O"
- { $as_echo "$as_me:${as_lineno-$LINENO}: adding -O for inline thread-support function elimination" >&5
-$as_echo "$as_me: adding -O for inline thread-support function elimination" >&6;}
- ;;
- esac
- fi
- if test "`uname -s`" = SunOS ; then
- # Using Solaris but not GCC, assume Sunsoft compiler.
- # We have some error-out-on-warning options available.
- # Sunsoft 12 compiler defaults to -xc99=all, it appears, so "inline"
- # works, but it also means that declaration-in-code warnings won't
- # be issued.
- # -v -fd -errwarn=E_DECLARATION_IN_CODE ...
- if test "x$krb5_ac_warn_cflags_set" = xset ; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: not adding extra warning flags because WARN_CFLAGS was set" >&5
-$as_echo "$as_me: not adding extra warning flags because WARN_CFLAGS was set" >&6;}
- else
- WARN_CFLAGS="-errtags=yes -errwarn=E_BAD_PTR_INT_COMBINATION,E_BAD_PTR_INT_COMB_ARG,E_PTR_TO_VOID_IN_ARITHMETIC,E_NO_IMPLICIT_DECL_ALLOWED,E_ATTRIBUTE_PARAM_UNDEFINED"
- fi
- if test "x$krb5_ac_warn_cxxflags_set" = xset ; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: not adding extra warning flags because WARN_CXXFLAGS was set" >&5
-$as_echo "$as_me: not adding extra warning flags because WARN_CXXFLAGS was set" >&6;}
- else
- WARN_CXXFLAGS="-errtags=yes +w +w2 -xport64"
- fi
- fi
-fi
-
-
-
-if test -z "$LD" ; then LD=$CC; fi
-
-
-
-# Check whether --with-system-et was given.
-if test "${with_system_et+set}" = set; then :
- withval=$with_system_et;
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking which version of com_err to use" >&5
-$as_echo_n "checking which version of com_err to use... " >&6; }
-if test "x$with_system_et" = xyes ; then
- # This will be changed to "intlsys" if textdomain support is present.
- COM_ERR_VERSION=sys
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: system" >&5
-$as_echo "system" >&6; }
-else
- COM_ERR_VERSION=k5
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: krb5" >&5
-$as_echo "krb5" >&6; }
-fi
-OLDLIBS="$LIBS"
-COM_ERR_LIB=-lcom_err
-if test $COM_ERR_VERSION = sys; then
-
-pkg_failed=no
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for com_err" >&5
-$as_echo_n "checking for com_err... " >&6; }
-
-if test -n "$COM_ERR_CFLAGS"; then
- pkg_cv_COM_ERR_CFLAGS="$COM_ERR_CFLAGS"
- elif test -n "$PKG_CONFIG"; then
- if test -n "$PKG_CONFIG" && \
- { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"com_err\""; } >&5
- ($PKG_CONFIG --exists --print-errors "com_err") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; then
- pkg_cv_COM_ERR_CFLAGS=`$PKG_CONFIG --cflags "com_err" 2>/dev/null`
- test "x$?" != "x0" && pkg_failed=yes
-else
- pkg_failed=yes
-fi
- else
- pkg_failed=untried
-fi
-if test -n "$COM_ERR_LIBS"; then
- pkg_cv_COM_ERR_LIBS="$COM_ERR_LIBS"
- elif test -n "$PKG_CONFIG"; then
- if test -n "$PKG_CONFIG" && \
- { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"com_err\""; } >&5
- ($PKG_CONFIG --exists --print-errors "com_err") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; then
- pkg_cv_COM_ERR_LIBS=`$PKG_CONFIG --libs "com_err" 2>/dev/null`
- test "x$?" != "x0" && pkg_failed=yes
-else
- pkg_failed=yes
-fi
- else
- pkg_failed=untried
-fi
-
-
-
-if test $pkg_failed = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
- _pkg_short_errors_supported=yes
-else
- _pkg_short_errors_supported=no
-fi
- if test $_pkg_short_errors_supported = yes; then
- COM_ERR_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "com_err" 2>&1`
- else
- COM_ERR_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "com_err" 2>&1`
- fi
- # Put the nasty error message in config.log where it belongs
- echo "$COM_ERR_PKG_ERRORS" >&5
-
- have_com_err=no
-elif test $pkg_failed = untried; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
- have_com_err=no
-else
- COM_ERR_CFLAGS=$pkg_cv_COM_ERR_CFLAGS
- COM_ERR_LIBS=$pkg_cv_COM_ERR_LIBS
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
- have_com_err=yes
-fi
- if test "x$have_com_err = xyes"; then
- COM_ERR_LIB="$COM_ERR_LIBS"
- fi
- LIBS="$LIBS $COM_ERR_LIB"
- # check for various functions we need
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for add_error_table in -lcom_err" >&5
-$as_echo_n "checking for add_error_table in -lcom_err... " >&6; }
-if ${ac_cv_lib_com_err_add_error_table+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcom_err $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char add_error_table ();
-int
-main ()
-{
-return add_error_table ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_com_err_add_error_table=yes
-else
- ac_cv_lib_com_err_add_error_table=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_com_err_add_error_table" >&5
-$as_echo "$ac_cv_lib_com_err_add_error_table" >&6; }
-if test "x$ac_cv_lib_com_err_add_error_table" = xyes; then :
- :
-else
- as_fn_error $? "cannot find add_error_table in com_err library" "$LINENO" 5
-fi
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for remove_error_table in -lcom_err" >&5
-$as_echo_n "checking for remove_error_table in -lcom_err... " >&6; }
-if ${ac_cv_lib_com_err_remove_error_table+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcom_err $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char remove_error_table ();
-int
-main ()
-{
-return remove_error_table ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_com_err_remove_error_table=yes
-else
- ac_cv_lib_com_err_remove_error_table=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_com_err_remove_error_table" >&5
-$as_echo "$ac_cv_lib_com_err_remove_error_table" >&6; }
-if test "x$ac_cv_lib_com_err_remove_error_table" = xyes; then :
- :
-else
- as_fn_error $? "cannot find remove_error_table in com_err library" "$LINENO" 5
-fi
-
- # make sure compile_et provides "et_foo" name
- cat >> conf$$e.et <<EOF
-error_table foo
-error_code ERR_FOO, "foo"
-end
-EOF
- for ac_prog in compile_et
-do
- # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_compile_et+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$compile_et"; then
- ac_cv_prog_compile_et="$compile_et" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_compile_et="$ac_prog"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-compile_et=$ac_cv_prog_compile_et
-if test -n "$compile_et"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $compile_et" >&5
-$as_echo "$compile_et" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- test -n "$compile_et" && break
-done
-test -n "$compile_et" || compile_et="false"
-
- if test "$compile_et" = false; then
- as_fn_error $? "cannot find compile_et" "$LINENO" 5
- fi
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether compile_et is useful" >&5
-$as_echo_n "checking whether compile_et is useful... " >&6; }
-if ${krb5_cv_compile_et_useful+:} false; then :
- $as_echo_n "(cached) " >&6
-else
-
- if compile_et conf$$e.et >/dev/null 2>&1 ; then true ; else
- as_fn_error $? "execution failed" "$LINENO" 5
- fi
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include "conf$$e.h"
-
-int
-main ()
-{
-&et_foo_error_table;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
- as_fn_error $? "cannot use et_foo_error_table" "$LINENO" 5
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- # Anything else we need to test for?
- rm -f conf$$e.c conf$$e.h
- krb5_cv_compile_et_useful=yes
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_compile_et_useful" >&5
-$as_echo "$krb5_cv_compile_et_useful" >&6; }
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether compile_et supports --textdomain" >&5
-$as_echo_n "checking whether compile_et supports --textdomain... " >&6; }
-if ${krb5_cv_compile_et_textdomain+:} false; then :
- $as_echo_n "(cached) " >&6
-else
-
- krb5_cv_compile_et_textdomain=no
- if compile_et --textdomain=xyzw conf$$e.et >/dev/null 2>&1 ; then
- if grep -q xyzw conf$$e.c; then
- krb5_cv_compile_et_textdomain=yes
- fi
- fi
- rm -f conf$$e.c conf$$e.h
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_compile_et_textdomain" >&5
-$as_echo "$krb5_cv_compile_et_textdomain" >&6; }
- if test "$krb5_cv_compile_et_textdomain" = yes; then
- COM_ERR_VERSION=intlsys
- fi
- rm -f conf$$e.et
-fi
-
-
-LIBS="$OLDLIBS"
-if test "$COM_ERR_VERSION" = k5 -o "$COM_ERR_VERSION" = intlsys; then
-
-$as_echo "#define HAVE_COM_ERR_INTL 1" >>confdefs.h
-
-fi
-
-
-# Check whether --with-system-ss was given.
-if test "${with_system_ss+set}" = set; then :
- withval=$with_system_ss;
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking which version of subsystem package to use" >&5
-$as_echo_n "checking which version of subsystem package to use... " >&6; }
-if test "x$with_system_ss" = xyes ; then
- SS_VERSION=sys
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: system" >&5
-$as_echo "system" >&6; }
- # todo: check for various libraries we might need
- # in the meantime...
- test "x${SS_LIB+set}" = xset || SS_LIB=-lss
- old_LIBS="$LIBS"
- LIBS="$LIBS $SS_LIB"
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether system ss package works" >&5
-$as_echo_n "checking whether system ss package works... " >&6; }
-if ${krb5_cv_system_ss_okay+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test "$cross_compiling" = yes; then :
- krb5_cv_system_ss_okay=assumed
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <ss/ss.h>
- int main(int argc, char *argv[]) {
- if (argc == 42) {
- int i, err;
- i = ss_create_invocation("foo","foo","",0,&err);
- ss_listen(i);
- }
- return 0;
- }
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
- krb5_cv_system_ss_okay=yes
-else
- as_fn_error $? "cannot run test program" "$LINENO" 5
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
- conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_system_ss_okay" >&5
-$as_echo "$krb5_cv_system_ss_okay" >&6; }
- LIBS="$old_LIBS"
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if ss_execute_command needs a prototype provided" >&5
-$as_echo_n "checking if ss_execute_command needs a prototype provided... " >&6; }
-if ${krb5_cv_func_ss_execute_command_noproto+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <ss/ss.h>
-int
-main ()
-{
-#undef ss_execute_command
- struct k5foo {int foo; } xx;
- extern int ss_execute_command (struct k5foo*);
- ss_execute_command(&xx);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_func_ss_execute_command_noproto=yes
-else
- krb5_cv_func_ss_execute_command_noproto=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_func_ss_execute_command_noproto" >&5
-$as_echo "$krb5_cv_func_ss_execute_command_noproto" >&6; }
-if test $krb5_cv_func_ss_execute_command_noproto = yes; then
-
-$as_echo "#define NEED_SS_EXECUTE_COMMAND_PROTO 1" >>confdefs.h
-
-fi
-
-
-else
- SS_VERSION=k5
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: krb5" >&5
-$as_echo "krb5" >&6; }
-fi
-
-
-
-
-# Check whether --with-system-db was given.
-if test "${with_system_db+set}" = set; then :
- withval=$with_system_db;
-fi
-
-
-
-if test "x$with_system_db" = xyes ; then
- DB_VERSION=sys
- # TODO: Do we have specific routines we should check for?
- # How about known, easily recognizable bugs?
- # We want to use bt_rseq in some cases, but no other version but
- # ours has it right now.
- #
- # Okay, check the variables.
- test "x${DB_HEADER+set}" = xset || DB_HEADER=db.h
- test "x${DB_LIB+set}" = xset || DB_LIB=-ldb
- #
- if test "x${DB_HEADER}" = xdb.h ; then
- DB_HEADER_VERSION=sys
- else
- DB_HEADER_VERSION=redirect
- fi
- KDB5_DB_LIB="$DB_LIB"
-else
- DB_VERSION=k5
-
-$as_echo "#define HAVE_BT_RSEQ 1" >>confdefs.h
-
- DB_HEADER=db.h
- DB_HEADER_VERSION=k5
- # libdb gets sucked into libkdb
- KDB5_DB_LIB=
- # needed for a couple of things that need libdb for its own sake
- DB_LIB=-ldb
-fi
-
-
-
-
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for an ANSI C-conforming const" >&5
-$as_echo_n "checking for an ANSI C-conforming const... " >&6; }
-if ${ac_cv_c_const+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-
-#ifndef __cplusplus
- /* Ultrix mips cc rejects this sort of thing. */
- typedef int charset[2];
- const charset cs = { 0, 0 };
- /* SunOS 4.1.1 cc rejects this. */
- char const *const *pcpcc;
- char **ppc;
- /* NEC SVR4.0.2 mips cc rejects this. */
- struct point {int x, y;};
- static struct point const zero = {0,0};
- /* AIX XL C 1.02.0.0 rejects this.
- It does not let you subtract one const X* pointer from another in
- an arm of an if-expression whose if-part is not a constant
- expression */
- const char *g = "string";
- pcpcc = &g + (g ? g-g : 0);
- /* HPUX 7.0 cc rejects these. */
- ++pcpcc;
- ppc = (char**) pcpcc;
- pcpcc = (char const *const *) ppc;
- { /* SCO 3.2v4 cc rejects this sort of thing. */
- char tx;
- char *t = &tx;
- char const *s = 0 ? (char *) 0 : (char const *) 0;
-
- *t++ = 0;
- if (s) return 0;
- }
- { /* Someone thinks the Sun supposedly-ANSI compiler will reject this. */
- int x[] = {25, 17};
- const int *foo = &x[0];
- ++foo;
- }
- { /* Sun SC1.0 ANSI compiler rejects this -- but not the above. */
- typedef const int *iptr;
- iptr p = 0;
- ++p;
- }
- { /* AIX XL C 1.02.0.0 rejects this sort of thing, saying
- "k.c", line 2.27: 1506-025 (S) Operand must be a modifiable lvalue. */
- struct s { int j; const int *ap[3]; } bx;
- struct s *b = &bx; b->j = 5;
- }
- { /* ULTRIX-32 V3.1 (Rev 9) vcc rejects this */
- const int foo = 10;
- if (!foo) return 0;
- }
- return !cs[0] && !zero.x;
-#endif
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_cv_c_const=yes
-else
- ac_cv_c_const=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_const" >&5
-$as_echo "$ac_cv_c_const" >&6; }
-if test $ac_cv_c_const = no; then
-
-$as_echo "#define const /**/" >>confdefs.h
-
-fi
-
-
-# Check whether --with-netlib was given.
-if test "${with_netlib+set}" = set; then :
- withval=$with_netlib; if test "$withval" = yes -o "$withval" = no ; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: \"netlib will link with C library resolver only\"" >&5
-$as_echo "\"netlib will link with C library resolver only\"" >&6; }
- else
- LIBS="$LIBS $withval"
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: \"netlib will use \'$withval\'\"" >&5
-$as_echo "\"netlib will use \'$withval\'\"" >&6; }
- fi
-
-else
-
- # Most operating systems have gethostbyname() in the default searched
- # libraries (i.e. libc):
- ac_fn_c_check_func "$LINENO" "gethostbyname" "ac_cv_func_gethostbyname"
-if test "x$ac_cv_func_gethostbyname" = xyes; then :
-
-else
-
- # Some OSes (eg. Solaris) place it in libnsl:
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gethostbyname in -lnsl" >&5
-$as_echo_n "checking for gethostbyname in -lnsl... " >&6; }
-if ${ac_cv_lib_nsl_gethostbyname+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lnsl $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char gethostbyname ();
-int
-main ()
-{
-return gethostbyname ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_nsl_gethostbyname=yes
-else
- ac_cv_lib_nsl_gethostbyname=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nsl_gethostbyname" >&5
-$as_echo "$ac_cv_lib_nsl_gethostbyname" >&6; }
-if test "x$ac_cv_lib_nsl_gethostbyname" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBNSL 1
-_ACEOF
-
- LIBS="-lnsl $LIBS"
-
-else
-
- # Some strange OSes (SINIX) have it in libsocket:
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gethostbyname in -lsocket" >&5
-$as_echo_n "checking for gethostbyname in -lsocket... " >&6; }
-if ${ac_cv_lib_socket_gethostbyname+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsocket $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char gethostbyname ();
-int
-main ()
-{
-return gethostbyname ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_socket_gethostbyname=yes
-else
- ac_cv_lib_socket_gethostbyname=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_socket_gethostbyname" >&5
-$as_echo "$ac_cv_lib_socket_gethostbyname" >&6; }
-if test "x$ac_cv_lib_socket_gethostbyname" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBSOCKET 1
-_ACEOF
-
- LIBS="-lsocket $LIBS"
-
-else
-
- # Unfortunately libsocket sometimes depends on libnsl.
- # AC_CHECK_LIB's API is essentially broken so the following
- # ugliness is necessary:
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gethostbyname in -lsocket" >&5
-$as_echo_n "checking for gethostbyname in -lsocket... " >&6; }
-if ${ac_cv_lib_socket_gethostbyname+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsocket -lnsl $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char gethostbyname ();
-int
-main ()
-{
-return gethostbyname ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_socket_gethostbyname=yes
-else
- ac_cv_lib_socket_gethostbyname=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_socket_gethostbyname" >&5
-$as_echo "$ac_cv_lib_socket_gethostbyname" >&6; }
-if test "x$ac_cv_lib_socket_gethostbyname" = xyes; then :
- LIBS="-lsocket -lnsl $LIBS"
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for gethostbyname in -lresolv" >&5
-$as_echo_n "checking for gethostbyname in -lresolv... " >&6; }
-if ${ac_cv_lib_resolv_gethostbyname+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lresolv $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char gethostbyname ();
-int
-main ()
-{
-return gethostbyname ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_resolv_gethostbyname=yes
-else
- ac_cv_lib_resolv_gethostbyname=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_resolv_gethostbyname" >&5
-$as_echo "$ac_cv_lib_resolv_gethostbyname" >&6; }
-if test "x$ac_cv_lib_resolv_gethostbyname" = xyes; then :
- LIBS="-lresolv $LIBS"
-fi
-
-fi
-
-
-fi
-
-
-fi
-
-
-fi
-
- ac_fn_c_check_func "$LINENO" "socket" "ac_cv_func_socket"
-if test "x$ac_cv_func_socket" = xyes; then :
-
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for socket in -lsocket" >&5
-$as_echo_n "checking for socket in -lsocket... " >&6; }
-if ${ac_cv_lib_socket_socket+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsocket $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char socket ();
-int
-main ()
-{
-return socket ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_socket_socket=yes
-else
- ac_cv_lib_socket_socket=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_socket_socket" >&5
-$as_echo "$ac_cv_lib_socket_socket" >&6; }
-if test "x$ac_cv_lib_socket_socket" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBSOCKET 1
-_ACEOF
-
- LIBS="-lsocket $LIBS"
-
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for socket in -lsocket" >&5
-$as_echo_n "checking for socket in -lsocket... " >&6; }
-if ${ac_cv_lib_socket_socket+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsocket -lnsl $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char socket ();
-int
-main ()
-{
-return socket ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_socket_socket=yes
-else
- ac_cv_lib_socket_socket=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_socket_socket" >&5
-$as_echo "$ac_cv_lib_socket_socket" >&6; }
-if test "x$ac_cv_lib_socket_socket" = xyes; then :
- LIBS="-lsocket -lnsl $LIBS"
-fi
-
-fi
-
-fi
-
-
-enable_dns=yes
- # Check whether --enable-dns-for-realm was given.
-if test "${enable_dns_for_realm+set}" = set; then :
- enableval=$enable_dns_for_realm;
-else
- enable_dns_for_realm=no
-fi
-
- if test "$enable_dns_for_realm" = yes; then
-
-$as_echo "#define KRB5_DNS_LOOKUP_REALM 1" >>confdefs.h
-
- fi
-
-
-$as_echo "#define KRB5_DNS_LOOKUP 1" >>confdefs.h
-
-
-
- if test "$enable_dns" = yes ; then
- # We assume that if libresolv exists we can link against it.
- # This may get us a gethostby* that doesn't respect nsswitch.
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for main in -lresolv" >&5
-$as_echo_n "checking for main in -lresolv... " >&6; }
-if ${ac_cv_lib_resolv_main+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lresolv $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-
-int
-main ()
-{
-return main ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_resolv_main=yes
-else
- ac_cv_lib_resolv_main=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_resolv_main" >&5
-$as_echo "$ac_cv_lib_resolv_main" >&6; }
-if test "x$ac_cv_lib_resolv_main" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBRESOLV 1
-_ACEOF
-
- LIBS="-lresolv $LIBS"
-
-fi
-
-
-for krb5_func in res_ninit res_nclose res_ndestroy res_nsearch ns_initparse ns_name_uncompress dn_skipname res_search; do
-
-# Solaris 9 prototypes ns_name_uncompress() in arpa/nameser.h, but
-# doesn't export it from libresolv.so, so we use extreme paranoia here
-# and check both for the declaration and that we can link against the
-# function.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $krb5_func" >&5
-$as_echo_n "checking for $krb5_func... " >&6; }
-if eval \${krb5_cv_func_$krb5_func+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/types.h>
- #include <netinet/in.h>
- #include <arpa/nameser.h>
- #include <resolv.h>
-
-int
-main ()
-{
-/*
- * Use volatile, or else optimization can cause false positives.
- */
- void (* volatile p)() = (void (*)())$krb5_func;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- eval "krb5_cv_func_$krb5_func=yes"
-else
- eval "krb5_cv_func_$krb5_func=no"
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-eval ac_res=\$krb5_cv_func_$krb5_func
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-if test `eval 'as_val=${'krb5_cv_func_$krb5_func'};$as_echo "$as_val"'` = yes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$krb5_func" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-done
-
- if test $krb5_cv_func_res_nsearch = no \
- && test $krb5_cv_func_res_search = no; then
- # Attempt to link with res_search(), in case it's not prototyped.
- ac_fn_c_check_func "$LINENO" "res_search" "ac_cv_func_res_search"
-if test "x$ac_cv_func_res_search" = xyes; then :
-
-$as_echo "#define HAVE_RES_SEARCH 1" >>confdefs.h
-
-else
- as_fn_error $? "cannot find res_nsearch or res_search" "$LINENO" 5
-fi
-
- fi
- fi
-
-
-fi
-
-# Check whether --with-hesiod was given.
-if test "${with_hesiod+set}" = set; then :
- withval=$with_hesiod; hesiod=$with_hesiod
-else
- with_hesiod=no
-fi
-
-if test "$with_hesiod" != "no"; then
- HESIOD_DEFS=-DHESIOD
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for res_send in -lresolv" >&5
-$as_echo_n "checking for res_send in -lresolv... " >&6; }
-if ${ac_cv_lib_resolv_res_send+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lresolv $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char res_send ();
-int
-main ()
-{
-return res_send ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_resolv_res_send=yes
-else
- ac_cv_lib_resolv_res_send=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_resolv_res_send" >&5
-$as_echo "$ac_cv_lib_resolv_res_send" >&6; }
-if test "x$ac_cv_lib_resolv_res_send" = xyes; then :
- res_lib=-lresolv
-fi
-
- if test "$hesiod" != "yes"; then
- HESIOD_LIBS="-L${hesiod}/lib -lhesiod $res_lib"
- else
- HESIOD_LIBS="-lhesiod $res_lib"
- fi
-else
- HESIOD_DEFS=
- HESIOD_LIBS=
-fi
-
- # Check whether --enable-maintainer-mode was given.
-if test "${enable_maintainer_mode+set}" = set; then :
- enableval=$enable_maintainer_mode; USE_MAINTAINER_MODE=$enableval
-else
- USE_MAINTAINER_MODE=no
-fi
-
-if test "$USE_MAINTAINER_MODE" = yes; then
- MAINTAINER_MODE_TRUE=
- MAINTAINER_MODE_FALSE='#'
- { $as_echo "$as_me:${as_lineno-$LINENO}: enabling maintainer mode" >&5
-$as_echo "$as_me: enabling maintainer mode" >&6;}
-else
- MAINTAINER_MODE_TRUE='#'
- MAINTAINER_MODE_FALSE=
-fi
-MAINT=$MAINTAINER_MODE_TRUE
-
-
-
- CONFIG_RELTOPDIR=$ac_reltopdir
-
-lib_frag=$srcdir/$ac_config_fragdir/lib.in
-
-libobj_frag=$srcdir/$ac_config_fragdir/libobj.in
-
-libnover_frag=$srcdir/$ac_config_fragdir/libnover.in
-
-libpriv_frag=$srcdir/$ac_config_fragdir/libpriv.in
-
-libnodeps_frag=$srcdir/$ac_config_fragdir/libnodeps.in
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pragma weak references are supported" >&5
-$as_echo_n "checking whether pragma weak references are supported... " >&6; }
-if ${krb5_cv_pragma_weak_ref+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#pragma weak flurbl
- extern int flurbl(void);
-int
-main ()
-{
-if (&flurbl != 0) return flurbl();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- krb5_cv_pragma_weak_ref=yes
-else
- krb5_cv_pragma_weak_ref=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_pragma_weak_ref" >&5
-$as_echo "$krb5_cv_pragma_weak_ref" >&6; }
-if test $krb5_cv_pragma_weak_ref = yes ; then
-
-$as_echo "#define HAVE_PRAGMA_WEAK_REF 1" >>confdefs.h
-
-fi
-
-
-# Check whether --with-ldap was given.
-if test "${with_ldap+set}" = set; then :
- withval=$with_ldap; case "$withval" in
- OPENLDAP) with_ldap=yes ;;
- yes | no) ;;
- *) as_fn_error $? "Invalid option value --with-ldap=\"$withval\"" "$LINENO" 5 ;;
-esac
-else
- with_ldap=no
-fi
-
-if test "$with_ldap" = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: enabling OpenLDAP database backend module support" >&5
-$as_echo "$as_me: enabling OpenLDAP database backend module support" >&6;}
- OPENLDAP_PLUGIN=yes
-fi
-
-krb5_cv_host=$host
-
-. $ac_topdir/config/shlib.conf
-
-# Check whether --enable-delayed-initialization was given.
-if test "${enable_delayed_initialization+set}" = set; then :
- enableval=$enable_delayed_initialization;
-else
- enable_delayed_initialization=yes
-fi
-
-case "$enable_delayed_initialization" in
- yes)
-
-$as_echo "#define DELAY_INITIALIZER 1" >>confdefs.h
- ;;
- no) ;;
- *) as_fn_error $? "invalid option $enable_delayed_initialization for delayed-initialization" "$LINENO" 5 ;;
-esac
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for constructor/destructor attribute support" >&5
-$as_echo_n "checking for constructor/destructor attribute support... " >&6; }
-if ${krb5_cv_attr_constructor_destructor+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- rm -f conftest.1 conftest.2
-if test -r conftest.1 || test -r conftest.2 ; then
- as_fn_error $? "write error in local file system?" "$LINENO" 5
-fi
-true > conftest.1
-true > conftest.2
-if test -r conftest.1 && test -r conftest.2 ; then true ; else
- as_fn_error $? "write error in local file system?" "$LINENO" 5
-fi
-a=no
-b=no
-# blindly assume we have 'unlink' and unistd.h.
-if test "$cross_compiling" = yes; then :
- as_fn_error $? "Cannot test for constructor/destructor support when cross compiling" "$LINENO" 5
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <unistd.h>
- void foo1() __attribute__((constructor));
- void foo1() { unlink("conftest.1"); }
- void foo2() __attribute__((destructor));
- void foo2() { unlink("conftest.2"); }
- int main () { return 0; }
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
- test -r conftest.1 || a=yes
- test -r conftest.2 || b=yes
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
- conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-case $krb5_cv_host in
-*-*-aix4.*)
- # Under AIX 4.3.3, at least, shared library destructor functions
- # appear to get executed in reverse link order (right to left),
- # so that a library's destructor function may run after that of
- # libraries it depends on, and may still have to access in the
- # destructor.
- #
- # That counts as "not working", for me, but it's a much more
- # complicated test case to set up.
- b=no
- ;;
-esac
-krb5_cv_attr_constructor_destructor="$a,$b"
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_attr_constructor_destructor" >&5
-$as_echo "$krb5_cv_attr_constructor_destructor" >&6; }
-# Okay, krb5_cv_... should be set now.
-case $krb5_cv_attr_constructor_destructor in
- yes,*)
-
-$as_echo "#define CONSTRUCTOR_ATTR_WORKS 1" >>confdefs.h
- ;;
-esac
-case $krb5_cv_attr_constructor_destructor in
- *,yes)
-
-$as_echo "#define DESTRUCTOR_ATTR_WORKS 1" >>confdefs.h
- ;;
-esac
-
-if test -z "$use_linker_init_option" ; then
- as_fn_error $? "ran INITFINI before checking shlib.conf?" "$LINENO" 5
-fi
-if test "$use_linker_init_option" = yes; then
-
-$as_echo "#define USE_LINKER_INIT_OPTION 1" >>confdefs.h
-
-fi
-if test "$use_linker_fini_option" = yes; then
-
-$as_echo "#define USE_LINKER_FINI_OPTION 1" >>confdefs.h
-
-fi
-
-
-# Check whether --enable-thread-support was given.
-if test "${enable_thread_support+set}" = set; then :
- enableval=$enable_thread_support;
-else
- enable_thread_support=yes
-fi
-
-if test "$enable_thread_support" = yes ; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: enabling thread support" >&5
-$as_echo "$as_me: enabling thread support" >&6;}
-
-$as_echo "#define ENABLE_THREADS 1" >>confdefs.h
-
-fi
-if test "$enable_thread_support" = yes; then
-
-
-
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-ax_pthread_ok=no
-
-# We used to check for pthread.h first, but this fails if pthread.h
-# requires special compiler flags (e.g. on Tru64 or Sequent).
-# It gets checked for in the link test anyway.
-
-# First of all, check if the user has set any of the PTHREAD_LIBS,
-# etcetera environment variables, and if threads linking works using
-# them:
-if test "x$PTHREAD_CFLAGS$PTHREAD_LIBS" != "x"; then
- ax_pthread_save_CC="$CC"
- ax_pthread_save_CFLAGS="$CFLAGS"
- ax_pthread_save_LIBS="$LIBS"
- if test "x$PTHREAD_CC" != "x"; then :
- CC="$PTHREAD_CC"
-fi
- CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
- LIBS="$PTHREAD_LIBS $LIBS"
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS" >&5
-$as_echo_n "checking for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS... " >&6; }
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char pthread_join ();
-int
-main ()
-{
-return pthread_join ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ax_pthread_ok=yes
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_pthread_ok" >&5
-$as_echo "$ax_pthread_ok" >&6; }
- if test "x$ax_pthread_ok" = "xno"; then
- PTHREAD_LIBS=""
- PTHREAD_CFLAGS=""
- fi
- CC="$ax_pthread_save_CC"
- CFLAGS="$ax_pthread_save_CFLAGS"
- LIBS="$ax_pthread_save_LIBS"
-fi
-
-# We must check for the threads library under a number of different
-# names; the ordering is very important because some systems
-# (e.g. DEC) have both -lpthread and -lpthreads, where one of the
-# libraries is broken (non-POSIX).
-
-# Create a list of thread flags to try. Items starting with a "-" are
-# C compiler flags, and other items are library names, except for "none"
-# which indicates that we try without any flags at all, and "pthread-config"
-# which is a program returning the flags for the Pth emulation library.
-
-ax_pthread_flags="pthreads none -Kthread -pthread -pthreads -mthreads pthread --thread-safe -mt pthread-config"
-
-# The ordering *is* (sometimes) important. Some notes on the
-# individual items follow:
-
-# pthreads: AIX (must check this before -lpthread)
-# none: in case threads are in libc; should be tried before -Kthread and
-# other compiler flags to prevent continual compiler warnings
-# -Kthread: Sequent (threads in libc, but -Kthread needed for pthread.h)
-# -pthread: Linux/gcc (kernel threads), BSD/gcc (userland threads), Tru64
-# (Note: HP C rejects this with "bad form for `-t' option")
-# -pthreads: Solaris/gcc (Note: HP C also rejects)
-# -mt: Sun Workshop C (may only link SunOS threads [-lthread], but it
-# doesn't hurt to check since this sometimes defines pthreads and
-# -D_REENTRANT too), HP C (must be checked before -lpthread, which
-# is present but should not be used directly; and before -mthreads,
-# because the compiler interprets this as "-mt" + "-hreads")
-# -mthreads: Mingw32/gcc, Lynx/gcc
-# pthread: Linux, etcetera
-# --thread-safe: KAI C++
-# pthread-config: use pthread-config program (for GNU Pth library)
-
-case $host_os in
-
- freebsd*)
-
- # -kthread: FreeBSD kernel threads (preferred to -pthread since SMP-able)
- # lthread: LinuxThreads port on FreeBSD (also preferred to -pthread)
-
- ax_pthread_flags="-kthread lthread $ax_pthread_flags"
- ;;
-
- hpux*)
-
- # From the cc(1) man page: "[-mt] Sets various -D flags to enable
- # multi-threading and also sets -lpthread."
-
- ax_pthread_flags="-mt -pthread pthread $ax_pthread_flags"
- ;;
-
- openedition*)
-
- # IBM z/OS requires a feature-test macro to be defined in order to
- # enable POSIX threads at all, so give the user a hint if this is
- # not set. (We don't define these ourselves, as they can affect
- # other portions of the system API in unpredictable ways.)
-
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-# if !defined(_OPEN_THREADS) && !defined(_UNIX03_THREADS)
- AX_PTHREAD_ZOS_MISSING
-# endif
-
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
- $EGREP "AX_PTHREAD_ZOS_MISSING" >/dev/null 2>&1; then :
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: IBM z/OS requires -D_OPEN_THREADS or -D_UNIX03_THREADS to enable pthreads support." >&5
-$as_echo "$as_me: WARNING: IBM z/OS requires -D_OPEN_THREADS or -D_UNIX03_THREADS to enable pthreads support." >&2;}
-fi
-rm -f conftest*
-
- ;;
-
- solaris*)
-
- # On Solaris (at least, for some versions), libc contains stubbed
- # (non-functional) versions of the pthreads routines, so link-based
- # tests will erroneously succeed. (N.B.: The stubs are missing
- # pthread_cleanup_push, or rather a function called by this macro,
- # so we could check for that, but who knows whether they'll stub
- # that too in a future libc.) So we'll check first for the
- # standard Solaris way of linking pthreads (-mt -lpthread).
-
- ax_pthread_flags="-mt,pthread pthread $ax_pthread_flags"
- ;;
-esac
-
-# GCC generally uses -pthread, or -pthreads on some platforms (e.g. SPARC)
-
-if test "x$GCC" = "xyes"; then :
- ax_pthread_flags="-pthread -pthreads $ax_pthread_flags"
-fi
-
-# The presence of a feature test macro requesting re-entrant function
-# definitions is, on some systems, a strong hint that pthreads support is
-# correctly enabled
-
-case $host_os in
- darwin* | hpux* | linux* | osf* | solaris*)
- ax_pthread_check_macro="_REENTRANT"
- ;;
-
- aix*)
- ax_pthread_check_macro="_THREAD_SAFE"
- ;;
-
- *)
- ax_pthread_check_macro="--"
- ;;
-esac
-if test "x$ax_pthread_check_macro" = "x--"; then :
- ax_pthread_check_cond=0
-else
- ax_pthread_check_cond="!defined($ax_pthread_check_macro)"
-fi
-
-# Are we compiling with Clang?
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC is Clang" >&5
-$as_echo_n "checking whether $CC is Clang... " >&6; }
-if ${ax_cv_PTHREAD_CLANG+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ax_cv_PTHREAD_CLANG=no
- # Note that Autoconf sets GCC=yes for Clang as well as GCC
- if test "x$GCC" = "xyes"; then
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-/* Note: Clang 2.7 lacks __clang_[a-z]+__ */
-# if defined(__clang__) && defined(__llvm__)
- AX_PTHREAD_CC_IS_CLANG
-# endif
-
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
- $EGREP "AX_PTHREAD_CC_IS_CLANG" >/dev/null 2>&1; then :
- ax_cv_PTHREAD_CLANG=yes
-fi
-rm -f conftest*
-
- fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_CLANG" >&5
-$as_echo "$ax_cv_PTHREAD_CLANG" >&6; }
-ax_pthread_clang="$ax_cv_PTHREAD_CLANG"
-
-ax_pthread_clang_warning=no
-
-# Clang needs special handling, because older versions handle the -pthread
-# option in a rather... idiosyncratic way
-
-if test "x$ax_pthread_clang" = "xyes"; then
-
- # Clang takes -pthread; it has never supported any other flag
-
- # (Note 1: This will need to be revisited if a system that Clang
- # supports has POSIX threads in a separate library. This tends not
- # to be the way of modern systems, but it's conceivable.)
-
- # (Note 2: On some systems, notably Darwin, -pthread is not needed
- # to get POSIX threads support; the API is always present and
- # active. We could reasonably leave PTHREAD_CFLAGS empty. But
- # -pthread does define _REENTRANT, and while the Darwin headers
- # ignore this macro, third-party headers might not.)
-
- PTHREAD_CFLAGS="-pthread"
- PTHREAD_LIBS=
-
- ax_pthread_ok=yes
-
- # However, older versions of Clang make a point of warning the user
- # that, in an invocation where only linking and no compilation is
- # taking place, the -pthread option has no effect ("argument unused
- # during compilation"). They expect -pthread to be passed in only
- # when source code is being compiled.
- #
- # Problem is, this is at odds with the way Automake and most other
- # C build frameworks function, which is that the same flags used in
- # compilation (CFLAGS) are also used in linking. Many systems
- # supported by AX_PTHREAD require exactly this for POSIX threads
- # support, and in fact it is often not straightforward to specify a
- # flag that is used only in the compilation phase and not in
- # linking. Such a scenario is extremely rare in practice.
- #
- # Even though use of the -pthread flag in linking would only print
- # a warning, this can be a nuisance for well-run software projects
- # that build with -Werror. So if the active version of Clang has
- # this misfeature, we search for an option to squash it.
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether Clang needs flag to prevent \"argument unused\" warning when linking with -pthread" >&5
-$as_echo_n "checking whether Clang needs flag to prevent \"argument unused\" warning when linking with -pthread... " >&6; }
-if ${ax_cv_PTHREAD_CLANG_NO_WARN_FLAG+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ax_cv_PTHREAD_CLANG_NO_WARN_FLAG=unknown
- # Create an alternate version of $ac_link that compiles and
- # links in two steps (.c -> .o, .o -> exe) instead of one
- # (.c -> exe), because the warning occurs only in the second
- # step
- ax_pthread_save_ac_link="$ac_link"
- ax_pthread_sed='s/conftest\.\$ac_ext/conftest.$ac_objext/g'
- ax_pthread_link_step=`$as_echo "$ac_link" | sed "$ax_pthread_sed"`
- ax_pthread_2step_ac_link="($ac_compile) && (echo ==== >&5) && ($ax_pthread_link_step)"
- ax_pthread_save_CFLAGS="$CFLAGS"
- for ax_pthread_try in '' -Qunused-arguments -Wno-unused-command-line-argument unknown; do
- if test "x$ax_pthread_try" = "xunknown"; then :
- break
-fi
- CFLAGS="-Werror -Wunknown-warning-option $ax_pthread_try -pthread $ax_pthread_save_CFLAGS"
- ac_link="$ax_pthread_save_ac_link"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-int main(void){return 0;}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_link="$ax_pthread_2step_ac_link"
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-int main(void){return 0;}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- break
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
- done
- ac_link="$ax_pthread_save_ac_link"
- CFLAGS="$ax_pthread_save_CFLAGS"
- if test "x$ax_pthread_try" = "x"; then :
- ax_pthread_try=no
-fi
- ax_cv_PTHREAD_CLANG_NO_WARN_FLAG="$ax_pthread_try"
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" >&5
-$as_echo "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" >&6; }
-
- case "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" in
- no | unknown) ;;
- *) PTHREAD_CFLAGS="$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG $PTHREAD_CFLAGS" ;;
- esac
-
-fi # $ax_pthread_clang = yes
-
-if test "x$ax_pthread_ok" = "xno"; then
-for ax_pthread_try_flag in $ax_pthread_flags; do
-
- case $ax_pthread_try_flag in
- none)
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pthreads work without any flags" >&5
-$as_echo_n "checking whether pthreads work without any flags... " >&6; }
- ;;
-
- -mt,pthread)
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pthreads work with -mt -lpthread" >&5
-$as_echo_n "checking whether pthreads work with -mt -lpthread... " >&6; }
- PTHREAD_CFLAGS="-mt"
- PTHREAD_LIBS="-lpthread"
- ;;
-
- -*)
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether pthreads work with $ax_pthread_try_flag" >&5
-$as_echo_n "checking whether pthreads work with $ax_pthread_try_flag... " >&6; }
- PTHREAD_CFLAGS="$ax_pthread_try_flag"
- ;;
-
- pthread-config)
- # Extract the first word of "pthread-config", so it can be a program name with args.
-set dummy pthread-config; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ax_pthread_config+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$ax_pthread_config"; then
- ac_cv_prog_ax_pthread_config="$ax_pthread_config" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_ax_pthread_config="yes"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- test -z "$ac_cv_prog_ax_pthread_config" && ac_cv_prog_ax_pthread_config="no"
-fi
-fi
-ax_pthread_config=$ac_cv_prog_ax_pthread_config
-if test -n "$ax_pthread_config"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_pthread_config" >&5
-$as_echo "$ax_pthread_config" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- if test "x$ax_pthread_config" = "xno"; then :
- continue
-fi
- PTHREAD_CFLAGS="`pthread-config --cflags`"
- PTHREAD_LIBS="`pthread-config --ldflags` `pthread-config --libs`"
- ;;
-
- *)
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for the pthreads library -l$ax_pthread_try_flag" >&5
-$as_echo_n "checking for the pthreads library -l$ax_pthread_try_flag... " >&6; }
- PTHREAD_LIBS="-l$ax_pthread_try_flag"
- ;;
- esac
-
- ax_pthread_save_CFLAGS="$CFLAGS"
- ax_pthread_save_LIBS="$LIBS"
- CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
- LIBS="$PTHREAD_LIBS $LIBS"
-
- # Check for various functions. We must include pthread.h,
- # since some functions may be macros. (On the Sequent, we
- # need a special flag -Kthread to make this header compile.)
- # We check for pthread_join because it is in -lpthread on IRIX
- # while pthread_create is in libc. We check for pthread_attr_init
- # due to DEC craziness with -lpthreads. We check for
- # pthread_cleanup_push because it is one of the few pthread
- # functions on Solaris that doesn't have a non-functional libc stub.
- # We try pthread_create on general principles.
-
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <pthread.h>
-# if $ax_pthread_check_cond
-# error "$ax_pthread_check_macro must be defined"
-# endif
- static void routine(void *a) { a = 0; }
- static void *start_routine(void *a) { return a; }
-int
-main ()
-{
-pthread_t th; pthread_attr_t attr;
- pthread_create(&th, 0, start_routine, 0);
- pthread_join(th, 0);
- pthread_attr_init(&attr);
- pthread_cleanup_push(routine, 0);
- pthread_cleanup_pop(0) /* ; */
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ax_pthread_ok=yes
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-
- CFLAGS="$ax_pthread_save_CFLAGS"
- LIBS="$ax_pthread_save_LIBS"
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_pthread_ok" >&5
-$as_echo "$ax_pthread_ok" >&6; }
- if test "x$ax_pthread_ok" = "xyes"; then :
- break
-fi
-
- PTHREAD_LIBS=""
- PTHREAD_CFLAGS=""
-done
-fi
-
-# Various other checks:
-if test "x$ax_pthread_ok" = "xyes"; then
- ax_pthread_save_CFLAGS="$CFLAGS"
- ax_pthread_save_LIBS="$LIBS"
- CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
- LIBS="$PTHREAD_LIBS $LIBS"
-
- # Detect AIX lossage: JOINABLE attribute is called UNDETACHED.
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for joinable pthread attribute" >&5
-$as_echo_n "checking for joinable pthread attribute... " >&6; }
-if ${ax_cv_PTHREAD_JOINABLE_ATTR+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ax_cv_PTHREAD_JOINABLE_ATTR=unknown
- for ax_pthread_attr in PTHREAD_CREATE_JOINABLE PTHREAD_CREATE_UNDETACHED; do
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <pthread.h>
-int
-main ()
-{
-int attr = $ax_pthread_attr; return attr /* ; */
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ax_cv_PTHREAD_JOINABLE_ATTR=$ax_pthread_attr; break
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
- done
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_JOINABLE_ATTR" >&5
-$as_echo "$ax_cv_PTHREAD_JOINABLE_ATTR" >&6; }
- if test "x$ax_cv_PTHREAD_JOINABLE_ATTR" != "xunknown" && \
- test "x$ax_cv_PTHREAD_JOINABLE_ATTR" != "xPTHREAD_CREATE_JOINABLE" && \
- test "x$ax_pthread_joinable_attr_defined" != "xyes"; then :
-
-cat >>confdefs.h <<_ACEOF
-#define PTHREAD_CREATE_JOINABLE $ax_cv_PTHREAD_JOINABLE_ATTR
-_ACEOF
-
- ax_pthread_joinable_attr_defined=yes
-
-fi
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether more special flags are required for pthreads" >&5
-$as_echo_n "checking whether more special flags are required for pthreads... " >&6; }
-if ${ax_cv_PTHREAD_SPECIAL_FLAGS+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ax_cv_PTHREAD_SPECIAL_FLAGS=no
- case $host_os in
- solaris*)
- ax_cv_PTHREAD_SPECIAL_FLAGS="-D_POSIX_PTHREAD_SEMANTICS"
- ;;
- esac
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_SPECIAL_FLAGS" >&5
-$as_echo "$ax_cv_PTHREAD_SPECIAL_FLAGS" >&6; }
- if test "x$ax_cv_PTHREAD_SPECIAL_FLAGS" != "xno" && \
- test "x$ax_pthread_special_flags_added" != "xyes"; then :
- PTHREAD_CFLAGS="$ax_cv_PTHREAD_SPECIAL_FLAGS $PTHREAD_CFLAGS"
- ax_pthread_special_flags_added=yes
-fi
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for PTHREAD_PRIO_INHERIT" >&5
-$as_echo_n "checking for PTHREAD_PRIO_INHERIT... " >&6; }
-if ${ax_cv_PTHREAD_PRIO_INHERIT+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <pthread.h>
-int
-main ()
-{
-int i = PTHREAD_PRIO_INHERIT;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ax_cv_PTHREAD_PRIO_INHERIT=yes
-else
- ax_cv_PTHREAD_PRIO_INHERIT=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_PRIO_INHERIT" >&5
-$as_echo "$ax_cv_PTHREAD_PRIO_INHERIT" >&6; }
- if test "x$ax_cv_PTHREAD_PRIO_INHERIT" = "xyes" && \
- test "x$ax_pthread_prio_inherit_defined" != "xyes"; then :
-
-$as_echo "#define HAVE_PTHREAD_PRIO_INHERIT 1" >>confdefs.h
-
- ax_pthread_prio_inherit_defined=yes
-
-fi
-
- CFLAGS="$ax_pthread_save_CFLAGS"
- LIBS="$ax_pthread_save_LIBS"
-
- # More AIX lossage: compile with *_r variant
- if test "x$GCC" != "xyes"; then
- case $host_os in
- aix*)
- case "x/$CC" in #(
- x*/c89|x*/c89_128|x*/c99|x*/c99_128|x*/cc|x*/cc128|x*/xlc|x*/xlc_v6|x*/xlc128|x*/xlc128_v6) :
- #handle absolute path differently from PATH based program lookup
- case "x$CC" in #(
- x/*) :
- if as_fn_executable_p ${CC}_r; then :
- PTHREAD_CC="${CC}_r"
-fi ;; #(
- *) :
- for ac_prog in ${CC}_r
-do
- # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_PTHREAD_CC+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$PTHREAD_CC"; then
- ac_cv_prog_PTHREAD_CC="$PTHREAD_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_PTHREAD_CC="$ac_prog"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-PTHREAD_CC=$ac_cv_prog_PTHREAD_CC
-if test -n "$PTHREAD_CC"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PTHREAD_CC" >&5
-$as_echo "$PTHREAD_CC" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- test -n "$PTHREAD_CC" && break
-done
-test -n "$PTHREAD_CC" || PTHREAD_CC="$CC"
- ;;
-esac ;; #(
- *) :
- ;;
-esac
- ;;
- esac
- fi
-fi
-
-test -n "$PTHREAD_CC" || PTHREAD_CC="$CC"
-
-
-
-
-
-# Finally, execute ACTION-IF-FOUND/ACTION-IF-NOT-FOUND:
-if test "x$ax_pthread_ok" = "xyes"; then
-
-$as_echo "#define HAVE_PTHREAD 1" >>confdefs.h
-
- :
-else
- ax_pthread_ok=no
- as_fn_error $? "cannot determine options for enabling thread support; try --disable-thread-support" "$LINENO" 5
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: PTHREAD_CC = $PTHREAD_CC" >&5
-$as_echo "$as_me: PTHREAD_CC = $PTHREAD_CC" >&6;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: PTHREAD_CFLAGS = $PTHREAD_CFLAGS" >&5
-$as_echo "$as_me: PTHREAD_CFLAGS = $PTHREAD_CFLAGS" >&6;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: PTHREAD_LIBS = $PTHREAD_LIBS" >&5
-$as_echo "$as_me: PTHREAD_LIBS = $PTHREAD_LIBS" >&6;}
- # AIX and Tru64 don't support weak references, and don't have
- # stub versions of the pthread code in libc.
- case "${host_os}" in
- aix* | osf*)
- # On these platforms, we'll always pull in the thread support.
- LIBS="$LIBS $PTHREAD_LIBS"
- CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
- # We don't need to sometimes add the flags we've just folded in...
- PTHREAD_LIBS=
- PTHREAD_CFLAGS=
- ;;
- hpux*)
- # These are the flags that "gcc -pthread" adds. But we don't
- # want "-pthread" because that has link-time effects, and we
- # don't exclude CFLAGS when linking. *sigh*
- PTHREAD_CFLAGS="-D_REENTRANT -D_THREAD_SAFE -D_POSIX_C_SOURCE=199506L"
- ;;
- solaris2.[1-9])
- # On Solaris 10 with gcc 3.4.3, the autoconf archive macro doesn't
- # get the right result. XXX What about Solaris 9 and earlier?
- if test "$GCC" = yes ; then
- PTHREAD_CFLAGS="-D_REENTRANT -pthreads"
- fi
- ;;
- solaris*)
- # On Solaris 10 with gcc 3.4.3, the autoconf archive macro doesn't
- # get the right result.
- if test "$GCC" = yes ; then
- PTHREAD_CFLAGS="-D_REENTRANT -pthreads"
- fi
- # On Solaris 10, the thread support is always available in libc.
-
-$as_echo "#define NO_WEAK_PTHREADS 1" >>confdefs.h
-
- ;;
- esac
- THREAD_SUPPORT=1
-else
- PTHREAD_CC="$CC"
- PTHREAD_CFLAGS=""
- PTHREAD_LIBS=""
- THREAD_SUPPORT=0
-fi
-
-for ac_func in pthread_once pthread_rwlock_init
-do :
- as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-done
-
-old_CC="$CC"
-test "$PTHREAD_CC" != "" && test "$ac_cv_c_compiler_gnu" = no && CC=$PTHREAD_CC
-old_CFLAGS="$CFLAGS"
-# On Solaris, -pthreads is added to CFLAGS, no extra explicit libraries.
-CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
-
-old_LIBS="$LIBS"
-LIBS="$PTHREAD_LIBS $LIBS"
-{ $as_echo "$as_me:${as_lineno-$LINENO}: rechecking with PTHREAD_... options" >&5
-$as_echo "$as_me: rechecking with PTHREAD_... options" >&6;}
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for pthread_rwlock_init in -lc" >&5
-$as_echo_n "checking for pthread_rwlock_init in -lc... " >&6; }
-if ${ac_cv_lib_c_pthread_rwlock_init+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lc $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char pthread_rwlock_init ();
-int
-main ()
-{
-return pthread_rwlock_init ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_c_pthread_rwlock_init=yes
-else
- ac_cv_lib_c_pthread_rwlock_init=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_c_pthread_rwlock_init" >&5
-$as_echo "$ac_cv_lib_c_pthread_rwlock_init" >&6; }
-if test "x$ac_cv_lib_c_pthread_rwlock_init" = xyes; then :
-
-$as_echo "#define HAVE_PTHREAD_RWLOCK_INIT_IN_THREAD_LIB 1" >>confdefs.h
-
-fi
-
-LIBS="$old_LIBS"
-CC="$old_CC"
-CFLAGS="$old_CFLAGS"
-
-
-old_LIBS="$LIBS"
-DL_LIB=
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing dlopen" >&5
-$as_echo_n "checking for library containing dlopen... " >&6; }
-if ${ac_cv_search_dlopen+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_func_search_save_LIBS=$LIBS
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen ();
-int
-main ()
-{
-return dlopen ();
- ;
- return 0;
-}
-_ACEOF
-for ac_lib in '' dl; do
- if test -z "$ac_lib"; then
- ac_res="none required"
- else
- ac_res=-l$ac_lib
- LIBS="-l$ac_lib $ac_func_search_save_LIBS"
- fi
- if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_search_dlopen=$ac_res
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext
- if ${ac_cv_search_dlopen+:} false; then :
- break
-fi
-done
-if ${ac_cv_search_dlopen+:} false; then :
-
-else
- ac_cv_search_dlopen=no
-fi
-rm conftest.$ac_ext
-LIBS=$ac_func_search_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_dlopen" >&5
-$as_echo "$ac_cv_search_dlopen" >&6; }
-ac_res=$ac_cv_search_dlopen
-if test "$ac_res" != no; then :
- test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
-
-if test "$ac_cv_search_dlopen" != "none required"; then
- DL_LIB=$ac_cv_search_dlopen
-fi
-LIBS="$old_LIBS"
-
-$as_echo "#define USE_DLOPEN 1" >>confdefs.h
-
-fi
-
-
-
-
-KRB5_VERSION=1.20.1
-
-
-
-
-
-
-
-
-
-
-
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
- if test -n "$ac_tool_prefix"; then
- # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_PKG_CONFIG+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $PKG_CONFIG in
- [\\/]* | ?:[\\/]*)
- ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
- ;;
- *)
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_path_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- ;;
-esac
-fi
-PKG_CONFIG=$ac_cv_path_PKG_CONFIG
-if test -n "$PKG_CONFIG"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
-$as_echo "$PKG_CONFIG" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_path_PKG_CONFIG"; then
- ac_pt_PKG_CONFIG=$PKG_CONFIG
- # Extract the first word of "pkg-config", so it can be a program name with args.
-set dummy pkg-config; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_ac_pt_PKG_CONFIG+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $ac_pt_PKG_CONFIG in
- [\\/]* | ?:[\\/]*)
- ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
- ;;
- *)
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_path_ac_pt_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- ;;
-esac
-fi
-ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
-if test -n "$ac_pt_PKG_CONFIG"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
-$as_echo "$ac_pt_PKG_CONFIG" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
- if test "x$ac_pt_PKG_CONFIG" = x; then
- PKG_CONFIG=""
- else
- case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
- PKG_CONFIG=$ac_pt_PKG_CONFIG
- fi
-else
- PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
-fi
-
-fi
-if test -n "$PKG_CONFIG"; then
- _pkg_min_version=0.9.0
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
-$as_echo_n "checking pkg-config is at least version $_pkg_min_version... " >&6; }
- if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
- PKG_CONFIG=""
- fi
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5
-$as_echo_n "checking for ANSI C header files... " >&6; }
-if ${ac_cv_header_stdc+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <stdlib.h>
-#include <stdarg.h>
-#include <string.h>
-#include <float.h>
-
-int
-main ()
-{
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_cv_header_stdc=yes
-else
- ac_cv_header_stdc=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-if test $ac_cv_header_stdc = yes; then
- # SunOS 4.x string.h does not declare mem*, contrary to ANSI.
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <string.h>
-
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
- $EGREP "memchr" >/dev/null 2>&1; then :
-
-else
- ac_cv_header_stdc=no
-fi
-rm -f conftest*
-
-fi
-
-if test $ac_cv_header_stdc = yes; then
- # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI.
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <stdlib.h>
-
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
- $EGREP "free" >/dev/null 2>&1; then :
-
-else
- ac_cv_header_stdc=no
-fi
-rm -f conftest*
-
-fi
-
-if test $ac_cv_header_stdc = yes; then
- # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi.
- if test "$cross_compiling" = yes; then :
- :
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <ctype.h>
-#include <stdlib.h>
-#if ((' ' & 0x0FF) == 0x020)
-# define ISLOWER(c) ('a' <= (c) && (c) <= 'z')
-# define TOUPPER(c) (ISLOWER(c) ? 'A' + ((c) - 'a') : (c))
-#else
-# define ISLOWER(c) \
- (('a' <= (c) && (c) <= 'i') \
- || ('j' <= (c) && (c) <= 'r') \
- || ('s' <= (c) && (c) <= 'z'))
-# define TOUPPER(c) (ISLOWER(c) ? ((c) | 0x40) : (c))
-#endif
-
-#define XOR(e, f) (((e) && !(f)) || (!(e) && (f)))
-int
-main ()
-{
- int i;
- for (i = 0; i < 256; i++)
- if (XOR (islower (i), ISLOWER (i))
- || toupper (i) != TOUPPER (i))
- return 2;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
-
-else
- ac_cv_header_stdc=no
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
- conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5
-$as_echo "$ac_cv_header_stdc" >&6; }
-if test $ac_cv_header_stdc = yes; then
-
-$as_echo "#define STDC_HEADERS 1" >>confdefs.h
-
-fi
-
-# On IRIX 5.3, sys/types and inttypes.h are conflicting.
-for ac_header in sys/types.h sys/stat.h stdlib.h string.h memory.h strings.h \
- inttypes.h stdint.h unistd.h
-do :
- as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default
-"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-
-done
-
-
-ac_fn_c_check_header_mongrel "$LINENO" "stdint.h" "ac_cv_header_stdint_h" "$ac_includes_default"
-if test "x$ac_cv_header_stdint_h" = xyes; then :
-
-else
- as_fn_error $? "stdint.h is required" "$LINENO" 5
-fi
-
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether integers are two's complement" >&5
-$as_echo_n "checking whether integers are two's complement... " >&6; }
-if ${krb5_cv_ints_twos_compl+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <limits.h>
-
-int
-main ()
-{
-static int test_array [1 - 2 * !(/* Basic two's complement check */
- ~(-1) == 0 && ~(-1L) == 0L &&
- /* Check that values with sign bit 1 and value bits 0 are valid */
- -(INT_MIN + 1) == INT_MAX && -(LONG_MIN + 1) == LONG_MAX &&
- /* Check that unsigned-to-signed conversions preserve bit patterns */
- (int)((unsigned int)INT_MAX + 1) == INT_MIN &&
- (long)((unsigned long)LONG_MAX + 1) == LONG_MIN)];
-test_array [0] = 0;
-return test_array [0];
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_ints_twos_compl=yes
-else
- krb5_cv_ints_twos_compl=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_ints_twos_compl" >&5
-$as_echo "$krb5_cv_ints_twos_compl" >&6; }
-
-if test "$krb5_cv_ints_twos_compl" = "no"; then
- as_fn_error $? "integers are not two's complement" "$LINENO" 5
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether CHAR_BIT is 8" >&5
-$as_echo_n "checking whether CHAR_BIT is 8... " >&6; }
-if ${krb5_cv_char_bit_8+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <limits.h>
-#if CHAR_BIT != 8
- #error CHAR_BIT != 8
-#endif
-
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
- krb5_cv_char_bit_8=yes
-else
- krb5_cv_char_bit_8=no
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_char_bit_8" >&5
-$as_echo "$krb5_cv_char_bit_8" >&6; }
-
-if test "$krb5_cv_char_bit_8" = "no"; then
- as_fn_error $? "CHAR_BIT is not 8" "$LINENO" 5
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if va_copy is available" >&5
-$as_echo_n "checking if va_copy is available... " >&6; }
-if ${krb5_cv_va_copy+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-#include <stdarg.h>
-void f(va_list ap) {
- va_list ap2;
- va_copy(ap2, ap);
- va_end(ap2);
-}
-va_list x;
-int main()
-{
- f(x);
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- krb5_cv_va_copy=yes
-else
- krb5_cv_va_copy=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_va_copy" >&5
-$as_echo "$krb5_cv_va_copy" >&6; }
-if test "$krb5_cv_va_copy" = yes; then
-
-$as_echo "#define HAS_VA_COPY 1" >>confdefs.h
-
-fi
-
-# Note that this isn't checking if the copied value *works*, just
-# whether the C language constraints permit the copying. If
-# va_list is defined as an array type, it can't be assigned.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if va_list objects can be copied by assignment" >&5
-$as_echo_n "checking if va_list objects can be copied by assignment... " >&6; }
-if ${krb5_cv_va_simple_copy+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-#include <stdarg.h>
-void f(va_list va2) {
- va_list va1;
- va1 = va2;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_va_simple_copy=yes
-else
- krb5_cv_va_simple_copy=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_va_simple_copy" >&5
-$as_echo "$krb5_cv_va_simple_copy" >&6; }
-if test "$krb5_cv_va_simple_copy" = yes; then
-
-$as_echo "#define CAN_COPY_VA_LIST 1" >>confdefs.h
-
-fi
-
-# The following lines are so that configure --help gives some global
-# configuration options.
-
-
-# Check whether --enable-static was given.
-if test "${enable_static+set}" = set; then :
- enableval=$enable_static;
-else
- enable_static=no
-fi
-
-# Check whether --enable-shared was given.
-if test "${enable_shared+set}" = set; then :
- enableval=$enable_shared;
-else
- enable_shared=yes
-fi
-
-
-if test "x$enable_static" = "x$enable_shared"; then
- as_fn_error $? "--enable-static must be specified with --disable-shared" "$LINENO" 5
-fi
-
-# Check whether --enable-rpath was given.
-if test "${enable_rpath+set}" = set; then :
- enableval=$enable_rpath;
-else
- enable_rpath=yes
-fi
-
-
-if test "x$enable_rpath" != xyes ; then
- # Unset the rpath flag values set by shlib.conf
- SHLIB_RPATH_FLAGS=
- RPATH_FLAG=
- PROG_RPATH_FLAGS=
-fi
-
-if test "$SHLIBEXT" = ".so-nobuild"; then
- as_fn_error $? "Shared libraries are not yet supported on this platform." "$LINENO" 5
-fi
-
-DEPLIBEXT=$SHLIBEXT
-
-if test "x$enable_static" = xyes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: using static libraries" >&5
-$as_echo "$as_me: using static libraries" >&6;}
- LIBLIST='lib$(LIBBASE)$(STLIBEXT)'
- LIBLINKS='$(TOPLIBD)/lib$(LIBBASE)$(STLIBEXT)'
- PLUGIN='libkrb5_$(LIBBASE)$(STLIBEXT)'
- PLUGINLINK='$(TOPLIBD)/libkrb5_$(LIBBASE)$(STLIBEXT)'
- PLUGININST=install-static
- OBJLISTS=OBJS.ST
- LIBINSTLIST=install-static
- DEPLIBEXT=$STLIBEXT
-
-$as_echo "#define STATIC_PLUGINS 1" >>confdefs.h
-
-
- KDB5_PLUGIN_DEPLIBS='$(TOPLIBD)/libkrb5_db2$(DEPLIBEXT)'
- KDB5_PLUGIN_LIBS='-lkrb5_db2'
- if test "x$OPENLDAP_PLUGIN" = xyes; then
- KDB5_PLUGIN_DEBLIBS=$KDB5_PLUGIN_DEPLIBS' $(TOPLIBD)/libkrb5_ldap$(DEPLIBEXT) $(TOPLIBD)/libkdb_ldap$(DEPLIBEXT)'
- KDB5_PLUGIN_LIBS=$KDB5_PLUGIN_LIBS' -lkrb5_kldap -lkdb_ldap $(LDAP_LIBS)'
- fi
- # kadm5srv_mit normally comes before kdb on the link line. Add it
- # again after the KDB plugins, since they depend on it for XDR stuff.
- KDB5_PLUGIN_DEPLIBS=$KDB5_PLUGIN_DEPLIBS' $(TOPLIBD)/libkadm5srv_mit$(DEPLIBEXT)'
- KDB5_PLUGIN_LIBS=$KDB5_PLUGIN_LIBS' -lkadm5srv_mit'
-
- # avoid duplicate rules generation for AIX and such
- SHLIBEXT=.so-nobuild
- SHLIBVEXT=.so.v-nobuild
- SHLIBSEXT=.so.s-nobuild
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: using shared libraries" >&5
-$as_echo "$as_me: using shared libraries" >&6;}
-
- # Clear some stuff in case of AIX, etc.
- if test "$STLIBEXT" = "$SHLIBEXT" ; then
- STLIBEXT=.a-nobuild
- fi
- case "$SHLIBSEXT" in
- .so.s-nobuild)
- LIBLIST='lib$(LIBBASE)$(SHLIBEXT)'
- LIBLINKS='$(TOPLIBD)/lib$(LIBBASE)$(SHLIBEXT) $(TOPLIBD)/lib$(LIBBASE)$(SHLIBVEXT)'
- LIBINSTLIST="install-shared"
- ;;
- *)
- LIBLIST='lib$(LIBBASE)$(SHLIBEXT) lib$(LIBBASE)$(SHLIBSEXT)'
- LIBLINKS='$(TOPLIBD)/lib$(LIBBASE)$(SHLIBEXT) $(TOPLIBD)/lib$(LIBBASE)$(SHLIBVEXT) $(TOPLIBD)/lib$(LIBBASE)$(SHLIBSEXT)'
- LIBINSTLIST="install-shlib-soname"
- ;;
- esac
- OBJLISTS="OBJS.SH"
- PLUGIN='$(LIBBASE)$(DYNOBJEXT)'
- PLUGINLINK='../$(PLUGIN)'
- PLUGININST=install-plugin
- KDB5_PLUGIN_DEPLIBS=
- KDB5_PLUGIN_LIBS=
-fi
-CC_LINK="$CC_LINK_SHARED"
-CXX_LINK="$CXX_LINK_SHARED"
-
-if test -z "$LIBLIST"; then
- as_fn_error $? "must enable one of shared or static libraries" "$LINENO" 5
-fi
-
-# Check whether to build profiled libraries.
-# Check whether --enable-profiled was given.
-if test "${enable_profiled+set}" = set; then :
- enableval=$enable_profiled; if test "$enableval" = yes; then
- as_fn_error $? "Sorry, profiled libraries do not work in this release." "$LINENO" 5
-fi
-fi
-
-# Check whether --enable-athena was given.
-if test "${enable_athena+set}" = set; then :
- enableval=$enable_athena;
-fi
-
-
-# Begin autoconf tests for the Makefiles generated out of the top-level
-# configure.in...
-
-
-
-
-
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5
-$as_echo_n "checking whether ln -s works... " >&6; }
-LN_S=$as_ln_s
-if test "$LN_S" = "ln -s"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5
-$as_echo "no, using $LN_S" >&6; }
-fi
-
-if test -n "$ac_tool_prefix"; then
- # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
-set dummy ${ac_tool_prefix}ranlib; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_RANLIB+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$RANLIB"; then
- ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-RANLIB=$ac_cv_prog_RANLIB
-if test -n "$RANLIB"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
-$as_echo "$RANLIB" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_RANLIB"; then
- ac_ct_RANLIB=$RANLIB
- # Extract the first word of "ranlib", so it can be a program name with args.
-set dummy ranlib; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_RANLIB+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$ac_ct_RANLIB"; then
- ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_ac_ct_RANLIB="ranlib"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
-if test -n "$ac_ct_RANLIB"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
-$as_echo "$ac_ct_RANLIB" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
- if test "x$ac_ct_RANLIB" = x; then
- RANLIB=":"
- else
- case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
- RANLIB=$ac_ct_RANLIB
- fi
-else
- RANLIB="$ac_cv_prog_RANLIB"
-fi
-
-# Find a good install program. We prefer a C program (faster),
-# so one script is as good as another. But avoid the broken or
-# incompatible versions:
-# SysV /etc/install, /usr/sbin/install
-# SunOS /usr/etc/install
-# IRIX /sbin/install
-# AIX /bin/install
-# AmigaOS /C/install, which installs bootblocks on floppy discs
-# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
-# AFS /usr/afsws/bin/install, which mishandles nonexistent args
-# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
-# OS/2's system install, which has a completely different semantic
-# ./install, which can be erroneously created by make from ./install.sh.
-# Reject install programs that cannot install multiple files.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
-$as_echo_n "checking for a BSD-compatible install... " >&6; }
-if test -z "$INSTALL"; then
-if ${ac_cv_path_install+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- # Account for people who put trailing slashes in PATH elements.
-case $as_dir/ in #((
- ./ | .// | /[cC]/* | \
- /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
- ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
- /usr/ucb/* ) ;;
- *)
- # OSF1 and SCO ODT 3.0 have their own names for install.
- # Don't use installbsd from OSF since it installs stuff as root
- # by default.
- for ac_prog in ginstall scoinst install; do
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_prog$ac_exec_ext"; then
- if test $ac_prog = install &&
- grep dspmsg "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
- # AIX install. It has an incompatible calling convention.
- :
- elif test $ac_prog = install &&
- grep pwplus "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
- # program-specific install script used by HP pwplus--don't use.
- :
- else
- rm -rf conftest.one conftest.two conftest.dir
- echo one > conftest.one
- echo two > conftest.two
- mkdir conftest.dir
- if "$as_dir/$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir" &&
- test -s conftest.one && test -s conftest.two &&
- test -s conftest.dir/conftest.one &&
- test -s conftest.dir/conftest.two
- then
- ac_cv_path_install="$as_dir/$ac_prog$ac_exec_ext -c"
- break 3
- fi
- fi
- fi
- done
- done
- ;;
-esac
-
- done
-IFS=$as_save_IFS
-
-rm -rf conftest.one conftest.two conftest.dir
-
-fi
- if test "${ac_cv_path_install+set}" = set; then
- INSTALL=$ac_cv_path_install
- else
- # As a last resort, use the slow shell script. Don't cache a
- # value for INSTALL within a source directory, because that will
- # break other packages using the cache if that directory is
- # removed, or if the value is a relative name.
- INSTALL=$ac_install_sh
- fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
-$as_echo "$INSTALL" >&6; }
-
-# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
-# It thinks the first close brace ends the variable substitution.
-test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
-
-test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
-
-test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
-
-if test -n "$ac_tool_prefix"; then
- # Extract the first word of "${ac_tool_prefix}ar", so it can be a program name with args.
-set dummy ${ac_tool_prefix}ar; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_AR+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$AR"; then
- ac_cv_prog_AR="$AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_AR="${ac_tool_prefix}ar"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-AR=$ac_cv_prog_AR
-if test -n "$AR"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
-$as_echo "$AR" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_AR"; then
- ac_ct_AR=$AR
- # Extract the first word of "ar", so it can be a program name with args.
-set dummy ar; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_AR+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$ac_ct_AR"; then
- ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_ac_ct_AR="ar"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_AR=$ac_cv_prog_ac_ct_AR
-if test -n "$ac_ct_AR"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5
-$as_echo "$ac_ct_AR" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
- if test "x$ac_ct_AR" = x; then
- AR="false"
- else
- case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
- AR=$ac_ct_AR
- fi
-else
- AR="$ac_cv_prog_AR"
-fi
-
-if test "$AR" = "false"; then
- as_fn_error $? "ar not found in PATH" "$LINENO" 5
-fi
-# Extract the first word of "perl", so it can be a program name with args.
-set dummy perl; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_PERL+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$PERL"; then
- ac_cv_prog_PERL="$PERL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_PERL="perl"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- test -z "$ac_cv_prog_PERL" && ac_cv_prog_PERL="false"
-fi
-fi
-PERL=$ac_cv_prog_PERL
-if test -n "$PERL"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PERL" >&5
-$as_echo "$PERL" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-if test "$ac_cv_prog_PERL" = "false"; then
- as_fn_error $? "Perl is now required for Kerberos builds." "$LINENO" 5
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for working regcomp" >&5
-$as_echo_n "checking for working regcomp... " >&6; }
-if ${ac_cv_func_regcomp+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test "$cross_compiling" = yes; then :
- as_fn_error $? "Cannot test regcomp when cross compiling" "$LINENO" 5
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/types.h>
- #include <regex.h>
- regex_t x; regmatch_t m;
-int
-main ()
-{
-return regcomp(&x,"pat.*",0) || regexec(&x,"pattern",1,&m,0);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
- ac_cv_func_regcomp=yes
-else
- ac_cv_func_regcomp=no
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
- conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_regcomp" >&5
-$as_echo "$ac_cv_func_regcomp" >&6; }
-test $ac_cv_func_regcomp = yes &&
-$as_echo "#define HAVE_REGCOMP 1" >>confdefs.h
-
-if test $ac_cv_func_regcomp = no; then
- save_LIBS="$LIBS"
- LIBS=-lgen
- for ac_func in compile step
-do :
- as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-done
-
- LIBS="$save_LIBS"
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for compile in -lgen" >&5
-$as_echo_n "checking for compile in -lgen... " >&6; }
-if ${ac_cv_lib_gen_compile+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lgen $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char compile ();
-int
-main ()
-{
-return compile ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_gen_compile=yes
-else
- ac_cv_lib_gen_compile=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gen_compile" >&5
-$as_echo "$ac_cv_lib_gen_compile" >&6; }
-if test "x$ac_cv_lib_gen_compile" = xyes; then :
- GEN_LIB=-lgen
-else
- GEN_LIB=
-fi
-
-
-fi
-
-
-
-
-
-
-# for kprop
-ac_fn_c_check_type "$LINENO" "mode_t" "ac_cv_type_mode_t" "$ac_includes_default"
-if test "x$ac_cv_type_mode_t" = xyes; then :
-
-else
-
-cat >>confdefs.h <<_ACEOF
-#define mode_t int
-_ACEOF
-
-fi
-
-
-
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if daemon needs a prototype provided" >&5
-$as_echo_n "checking if daemon needs a prototype provided... " >&6; }
-if ${krb5_cv_func_daemon_noproto+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#ifdef HAVE_UNISTD_H
-#include <unistd.h>
-#endif
-int
-main ()
-{
-#undef daemon
- struct k5foo {int foo; } xx;
- extern int daemon (struct k5foo*);
- daemon(&xx);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_func_daemon_noproto=yes
-else
- krb5_cv_func_daemon_noproto=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_func_daemon_noproto" >&5
-$as_echo "$krb5_cv_func_daemon_noproto" >&6; }
-if test $krb5_cv_func_daemon_noproto = yes; then
-
-$as_echo "#define NEED_DAEMON_PROTO 1" >>confdefs.h
-
-fi
-
-
-
-sock_set=no
-for sock_arg1 in "struct sockaddr *" "void *"
-do
- for sock_arg2 in "size_t *" "int *" "socklen_t *"
- do
- if test $sock_set = no; then
-
-krb5_lib_var=`echo "$sock_arg1 $sock_arg2" | sed 'y% ./+-*%___p_p%'`
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if getsockname() takes arguments $sock_arg1 and $sock_arg2" >&5
-$as_echo_n "checking if getsockname() takes arguments $sock_arg1 and $sock_arg2... " >&6; }
-if eval \${krb5_cv_getsockname_proto_$krb5_lib_var+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/types.h>
- #include <sys/socket.h>
- extern int getsockname(int, $sock_arg1, $sock_arg2);
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval "krb5_cv_getsockname_proto_$krb5_lib_var=yes"
-else
- eval "krb5_cv_getsockname_proto_$krb5_lib_var=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-if eval "test \"`echo '$krb5_cv_getsockname_proto_'$krb5_lib_var`\" = yes"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
- sock_set=yes; res1="$sock_arg1"; res2="$sock_arg2"
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
- fi
- done
-done
-if test "$sock_set" = no; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: assuming struct sockaddr and socklen_t for getsockname args" >&5
-$as_echo "$as_me: assuming struct sockaddr and socklen_t for getsockname args" >&6;}
- res1="struct sockaddr *"
- res2="socklen_t *"
-fi
-res1=`echo "$res1" | tr -d '*' | sed -e 's/ *$//'`
-res2=`echo "$res2" | tr -d '*' | sed -e 's/ *$//'`
-
-cat >>confdefs.h <<_ACEOF
-#define GETSOCKNAME_ARG3_TYPE $res2
-_ACEOF
-
-
-
-
-$as_echo "#define GETPEERNAME_ARG3_TYPE GETSOCKNAME_ARG3_TYPE" >>confdefs.h
-
-
-LIBUTIL=
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for main in -lutil" >&5
-$as_echo_n "checking for main in -lutil... " >&6; }
-if ${ac_cv_lib_util_main+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lutil $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-
-int
-main ()
-{
-return main ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_util_main=yes
-else
- ac_cv_lib_util_main=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_util_main" >&5
-$as_echo "$ac_cv_lib_util_main" >&6; }
-if test "x$ac_cv_lib_util_main" = xyes; then :
-
-$as_echo "#define HAVE_LIBUTIL 1" >>confdefs.h
-
-LIBUTIL=-lutil
-
-fi
-
-
-
-# Determine if NLS is desired and supported.
-po=
-# Check whether --enable-nls was given.
-if test "${enable_nls+set}" = set; then :
- enableval=$enable_nls;
-else
- enable_nls=check
-fi
-
-if test "$enable_nls" != no; then
- ac_fn_c_check_header_mongrel "$LINENO" "libintl.h" "ac_cv_header_libintl_h" "$ac_includes_default"
-if test "x$ac_cv_header_libintl_h" = xyes; then :
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing dgettext" >&5
-$as_echo_n "checking for library containing dgettext... " >&6; }
-if ${ac_cv_search_dgettext+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_func_search_save_LIBS=$LIBS
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dgettext ();
-int
-main ()
-{
-return dgettext ();
- ;
- return 0;
-}
-_ACEOF
-for ac_lib in '' intl; do
- if test -z "$ac_lib"; then
- ac_res="none required"
- else
- ac_res=-l$ac_lib
- LIBS="-l$ac_lib $ac_func_search_save_LIBS"
- fi
- if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_search_dgettext=$ac_res
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext
- if ${ac_cv_search_dgettext+:} false; then :
- break
-fi
-done
-if ${ac_cv_search_dgettext+:} false; then :
-
-else
- ac_cv_search_dgettext=no
-fi
-rm conftest.$ac_ext
-LIBS=$ac_func_search_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_dgettext" >&5
-$as_echo "$ac_cv_search_dgettext" >&6; }
-ac_res=$ac_cv_search_dgettext
-if test "$ac_res" != no; then :
- test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
-
-
-$as_echo "#define ENABLE_NLS 1" >>confdefs.h
-
- nls_enabled=yes
-fi
-
-fi
-
-
-
- # Extract the first word of "msgfmt", so it can be a program name with args.
-set dummy msgfmt; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_MSGFMT+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$MSGFMT"; then
- ac_cv_prog_MSGFMT="$MSGFMT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_MSGFMT="msgfmt"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-MSGFMT=$ac_cv_prog_MSGFMT
-if test -n "$MSGFMT"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $MSGFMT" >&5
-$as_echo "$MSGFMT" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- if test x"$MSGFMT" != x; then
- ac_config_files="$ac_config_files po/Makefile:$srcdir/./config/pre.in:po/Makefile.in:po/deps:$srcdir/./config/post.in"
-
-
-
- po=po
- fi
-
- # Error out if --enable-nls was explicitly requested but can't be enabled.
- if test "$enable_nls" = yes; then
- if test "$nls_enabled" != yes -o "x$po" = x; then
- as_fn_error $? "NLS support requested but cannot be built" "$LINENO" 5
- fi
- fi
-fi
-
-
-# for kdc
-for ac_header in sys/sockio.h ifaddrs.h unistd.h fnmatch.h
-do :
- as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-
-done
-
-for ac_func in vsprintf vasprintf vsnprintf strlcpy fnmatch secure_getenv
-do :
- as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-done
-
-
-EXTRA_SUPPORT_SYMS=
-ac_fn_c_check_func "$LINENO" "strlcpy" "ac_cv_func_strlcpy"
-if test "x$ac_cv_func_strlcpy" = xyes; then :
- STRLCPY_ST_OBJ=
-STRLCPY_OBJ=
-else
- STRLCPY_ST_OBJ=strlcpy.o
-STRLCPY_OBJ='$(OUTPRE)strlcpy.$(OBJEXT)'
-EXTRA_SUPPORT_SYMS="$EXTRA_SUPPORT_SYMS krb5int_strlcpy krb5int_strlcat"
-fi
-
-
-
-
-ac_fn_c_check_func "$LINENO" "getopt" "ac_cv_func_getopt"
-if test "x$ac_cv_func_getopt" = xyes; then :
- GETOPT_ST_OBJ=
-GETOPT_OBJ=
-
-$as_echo "#define HAVE_GETOPT 1" >>confdefs.h
-
-else
- GETOPT_ST_OBJ='getopt.o'
-GETOPT_OBJ='$(OUTPRE)getopt.$(OBJEXT)'
-EXTRA_SUPPORT_SYMS="$EXTRA_SUPPORT_SYMS k5_optind k5_optarg k5_opterr k5_optopt k5_getopt"
-fi
-
-
-
-
-ac_fn_c_check_func "$LINENO" "getopt_long" "ac_cv_func_getopt_long"
-if test "x$ac_cv_func_getopt_long" = xyes; then :
- GETOPT_LONG_ST_OBJ=
-GETOPT_LONG_OBJ=
-
-$as_echo "#define HAVE_GETOPT_LONG 1" >>confdefs.h
-
-else
- GETOPT_LONG_ST_OBJ='getopt_long.o'
-GETOPT_LONG_OBJ='$(OUTPRE)getopt_long.$(OBJEXT)'
-EXTRA_SUPPORT_SYMS="$EXTRA_SUPPORT_SYMS k5_getopt_long"
-fi
-
-
-
-
-ac_fn_c_check_func "$LINENO" "fnmatch" "ac_cv_func_fnmatch"
-if test "x$ac_cv_func_fnmatch" = xyes; then :
- FNMATCH_ST_OBJ=
-FNMATCH_OBJ=
-else
- FNMATCH_ST_OBJ=fnmatch.o
-FNMATCH_OBJ='$(OUTPRE)fnmatch.$(OBJEXT)'
-EXTRA_SUPPORT_SYMS="$EXTRA_SUPPORT_SYMS k5_fnmatch"
-fi
-
-
-
-
-ac_fn_c_check_func "$LINENO" "vasprintf" "ac_cv_func_vasprintf"
-if test "x$ac_cv_func_vasprintf" = xyes; then :
- PRINTF_ST_OBJ=
-PRINTF_OBJ=
-else
- PRINTF_ST_OBJ=printf.o
-PRINTF_OBJ='$(OUTPRE)printf.$(OBJEXT)'
-EXTRA_SUPPORT_SYMS="$EXTRA_SUPPORT_SYMS krb5int_asprintf krb5int_vasprintf"
-fi
-
-
-
-
-if test "x$ac_cv_func_vasprintf" = xyes; then
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if vasprintf needs a prototype provided" >&5
-$as_echo_n "checking if vasprintf needs a prototype provided... " >&6; }
-if ${krb5_cv_func_vasprintf_noproto+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <stdarg.h>
-#include <stdio.h>
-
-int
-main ()
-{
-#undef vasprintf
- struct k5foo {int foo; } xx;
- extern int vasprintf (struct k5foo*);
- vasprintf(&xx);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_func_vasprintf_noproto=yes
-else
- krb5_cv_func_vasprintf_noproto=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_func_vasprintf_noproto" >&5
-$as_echo "$krb5_cv_func_vasprintf_noproto" >&6; }
-if test $krb5_cv_func_vasprintf_noproto = yes; then
-
-$as_echo "#define NEED_VASPRINTF_PROTO 1" >>confdefs.h
-
-fi
-fi
-
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if swab needs a prototype provided" >&5
-$as_echo_n "checking if swab needs a prototype provided... " >&6; }
-if ${krb5_cv_func_swab_noproto+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <string.h>
-#ifdef HAVE_UNISTD_H
-#include <unistd.h>
-#endif
-/* Solaris 8 declares swab in stdlib.h. */
-#include <stdlib.h>
-
-int
-main ()
-{
-#undef swab
- struct k5foo {int foo; } xx;
- extern int swab (struct k5foo*);
- swab(&xx);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_func_swab_noproto=yes
-else
- krb5_cv_func_swab_noproto=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_func_swab_noproto" >&5
-$as_echo "$krb5_cv_func_swab_noproto" >&6; }
-if test $krb5_cv_func_swab_noproto = yes; then
-
-$as_echo "#define NEED_SWAB_PROTO 1" >>confdefs.h
-
-fi
-
-
-
-ac_fn_c_check_func "$LINENO" "secure_getenv" "ac_cv_func_secure_getenv"
-if test "x$ac_cv_func_secure_getenv" = xyes; then :
- SECURE_GETENV_ST_OBJ=
-SECURE_GETENV_OBJ=
-SECURE_GETENV_INIT=
-else
- SECURE_GETENV_ST_OBJ=secure_getenv.o
-SECURE_GETENV_OBJ='$(OUTPRE)secure_getenv.$(OBJEXT)'
-SECURE_GETENV_INIT=k5_secure_getenv_init
-EXTRA_SUPPORT_SYMS="$EXTRA_SUPPORT_SYMS k5_secure_getenv"
-fi
-
-
-
-
-
-for ac_prog in gawk mawk nawk awk
-do
- # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_AWK+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$AWK"; then
- ac_cv_prog_AWK="$AWK" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_AWK="$ac_prog"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-AWK=$ac_cv_prog_AWK
-if test -n "$AWK"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
-$as_echo "$AWK" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- test -n "$AWK" && break
-done
-
- ac_fn_c_check_member "$LINENO" "struct sockaddr" "sa_len" "ac_cv_member_struct_sockaddr_sa_len" "#include <sys/types.h>
-#include <sys/socket.h>
-"
-if test "x$ac_cv_member_struct_sockaddr_sa_len" = xyes; then :
-
-$as_echo "#define HAVE_SA_LEN 1" >>confdefs.h
-
-
-fi
-
-
-for ac_header in sys/types.h sys/socket.h netinet/in.h netdb.h
-do :
- as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-
-done
-
-for ac_func in inet_ntop inet_pton getnameinfo
-do :
- as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-done
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for getaddrinfo" >&5
-$as_echo_n "checking for getaddrinfo... " >&6; }
-if ${ac_cv_func_getaddrinfo+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#ifdef HAVE_NETDB_H
- #include <netdb.h>
- #endif
-
-int
-main ()
-{
-struct addrinfo *ai;
- getaddrinfo("kerberos.mit.edu", "echo", 0, &ai);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_func_getaddrinfo=yes
-else
- ac_cv_func_getaddrinfo=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_getaddrinfo" >&5
-$as_echo "$ac_cv_func_getaddrinfo" >&6; }
-if test $ac_cv_func_getaddrinfo = yes; then
-
-$as_echo "#define HAVE_GETADDRINFO 1" >>confdefs.h
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for IPv6 compile-time support without -DINET6" >&5
-$as_echo_n "checking for IPv6 compile-time support without -DINET6... " >&6; }
-if ${krb5_cv_inet6+:} false; then :
- $as_echo_n "(cached) " >&6
-else
-
-if test "$ac_cv_func_inet_ntop" != "yes" ; then
- krb5_cv_inet6=no
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#ifdef HAVE_SYS_TYPES_H
- #include <sys/types.h>
- #endif
- #include <sys/socket.h>
- #include <netinet/in.h>
- #include <netdb.h>
-
-int
-main ()
-{
-struct sockaddr_in6 in;
- AF_INET6;
- IN6_IS_ADDR_LINKLOCAL(&in.sin6_addr);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_inet6=yes
-else
- krb5_cv_inet6=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_inet6" >&5
-$as_echo "$krb5_cv_inet6" >&6; }
-if test "$krb5_cv_inet6" = no && test "$ac_cv_func_inet_ntop" = yes; then
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for IPv6 compile-time support with -DINET6" >&5
-$as_echo_n "checking for IPv6 compile-time support with -DINET6... " >&6; }
-if ${krb5_cv_inet6_with_dinet6+:} false; then :
- $as_echo_n "(cached) " >&6
-else
-
-old_CC="$CC"
-CC="$CC -DINET6"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#ifdef HAVE_SYS_TYPES_H
- #include <sys/types.h>
- #endif
- #include <sys/socket.h>
- #include <netinet/in.h>
- #include <netdb.h>
-
-int
-main ()
-{
-struct sockaddr_in6 in;
- AF_INET6;
- IN6_IS_ADDR_LINKLOCAL (&in.sin6_addr);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_inet6_with_dinet6=yes
-else
- krb5_cv_inet6_with_dinet6=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-CC="$old_CC"
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_inet6_with_dinet6" >&5
-$as_echo "$krb5_cv_inet6_with_dinet6" >&6; }
-fi
-if test $krb5_cv_inet6 = yes || test "$krb5_cv_inet6_with_dinet6" = yes; then
- if test "$krb5_cv_inet6_with_dinet6" = yes; then
-
-$as_echo "#define INET6 1" >>confdefs.h
-
- fi
-fi
-
- ac_fn_c_check_member "$LINENO" "struct sockaddr" "sa_len" "ac_cv_member_struct_sockaddr_sa_len" "#include <sys/types.h>
-#include <sys/socket.h>
-"
-if test "x$ac_cv_member_struct_sockaddr_sa_len" = xyes; then :
-
-$as_echo "#define HAVE_SA_LEN 1" >>confdefs.h
-
-
-fi
-
-
-ac_fn_c_check_func "$LINENO" "sigprocmask" "ac_cv_func_sigprocmask"
-if test "x$ac_cv_func_sigprocmask" = xyes; then :
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for sigset_t and POSIX_SIGNALS" >&5
-$as_echo_n "checking for sigset_t and POSIX_SIGNALS... " >&6; }
-if ${krb5_cv_type_sigset_t+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <signal.h>
-
-int
-main ()
-{
-sigset_t x
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_type_sigset_t=yes
-else
- krb5_cv_type_sigset_t=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_type_sigset_t" >&5
-$as_echo "$krb5_cv_type_sigset_t" >&6; }
-if test $krb5_cv_type_sigset_t = yes; then
-
-$as_echo "#define POSIX_SIGNALS 1" >>confdefs.h
-
-fi
-
-fi
-
-
-# --with-vague-errors disables useful error messages.
-
-
-# Check whether --with-vague-errors was given.
-if test "${with_vague_errors+set}" = set; then :
- withval=$with_vague_errors;
-else
- withval=no
-fi
-
-if test "$withval" = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: Supplying vague error messages to KDC clients" >&5
-$as_echo "$as_me: Supplying vague error messages to KDC clients" >&6;}
-
-$as_echo "#define KRBCONF_VAGUE_ERRORS 1" >>confdefs.h
-
-fi
-
-# Check which (if any) audit plugin to build
-audit_plugin=""
-# Check whether --enable-audit-plugin was given.
-if test "${enable_audit_plugin+set}" = set; then :
- enableval=$enable_audit_plugin;
-else
- enableval=no
-fi
-
-if test "$enableval" != no; then
- case "$enableval" in
- simple)
- # if audit_log_user_message is found, we assume
- # that audit_open and audit_close are also defined.
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for audit_log_user_message in -laudit" >&5
-$as_echo_n "checking for audit_log_user_message in -laudit... " >&6; }
-if ${ac_cv_lib_audit_audit_log_user_message+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-laudit $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char audit_log_user_message ();
-int
-main ()
-{
-return audit_log_user_message ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_audit_audit_log_user_message=yes
-else
- ac_cv_lib_audit_audit_log_user_message=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_audit_audit_log_user_message" >&5
-$as_echo "$ac_cv_lib_audit_audit_log_user_message" >&6; }
-if test "x$ac_cv_lib_audit_audit_log_user_message" = xyes; then :
- AUDIT_IMPL_LIBS=-laudit
- ac_config_files="$ac_config_files plugins/audit/simple/Makefile:$srcdir/./config/pre.in:plugins/audit/simple/Makefile.in:plugins/audit/simple/deps:$srcdir/./config/post.in"
-
-
-
- audit_plugin=plugins/audit/simple
-else
- as_fn_error $? "libaudit not found or undefined symbol audit_log_user_message" "$LINENO" 5
-fi
-
- ;;
- *)
- as_fn_error $? "Unknown audit plugin implementation $enableval." "$LINENO" 5
- ;;
- esac
-fi
-
-
-
-# WITH_CRYPTO_IMPL
-
-CRYPTO_IMPL=builtin
-
-# Check whether --with-crypto-impl was given.
-if test "${with_crypto_impl+set}" = set; then :
- withval=$with_crypto_impl; CRYPTO_IMPL=$withval
- { $as_echo "$as_me:${as_lineno-$LINENO}: k5crypto will use '$withval'" >&5
-$as_echo "$as_me: k5crypto will use '$withval'" >&6;}
-fi
-
-
-CRYPTO_BUILTIN_TESTS=no
-case $CRYPTO_IMPL in
-builtin)
- CRYPTO_BUILTIN_TESTS=yes
- ;;
-openssl)
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for PKCS7_get_signer_info in -lcrypto" >&5
-$as_echo_n "checking for PKCS7_get_signer_info in -lcrypto... " >&6; }
-if ${ac_cv_lib_crypto_PKCS7_get_signer_info+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypto $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char PKCS7_get_signer_info ();
-int
-main ()
-{
-return PKCS7_get_signer_info ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_crypto_PKCS7_get_signer_info=yes
-else
- ac_cv_lib_crypto_PKCS7_get_signer_info=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_PKCS7_get_signer_info" >&5
-$as_echo "$ac_cv_lib_crypto_PKCS7_get_signer_info" >&6; }
-if test "x$ac_cv_lib_crypto_PKCS7_get_signer_info" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBCRYPTO 1
-_ACEOF
-
- LIBS="-lcrypto $LIBS"
-
-fi
-
-
-$as_echo "#define CRYPTO_OPENSSL 1" >>confdefs.h
-
- ;;
-*)
- as_fn_error $? "Unknown crypto implementation $withval" "$LINENO" 5
- ;;
-esac
-
-
-
-
-# WITH_TLS_IMPL
-
-
-# Check whether --with-tls-impl was given.
-if test "${with_tls_impl+set}" = set; then :
- withval=$with_tls_impl; TLS_IMPL=$withval
-else
- TLS_IMPL=auto
-fi
-
-case "$TLS_IMPL" in
-openssl|auto)
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for SSL_CTX_new in -lssl" >&5
-$as_echo_n "checking for SSL_CTX_new in -lssl... " >&6; }
-if ${ac_cv_lib_ssl_SSL_CTX_new+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lssl -lcrypto $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char SSL_CTX_new ();
-int
-main ()
-{
-return SSL_CTX_new ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_ssl_SSL_CTX_new=yes
-else
- ac_cv_lib_ssl_SSL_CTX_new=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ssl_SSL_CTX_new" >&5
-$as_echo "$ac_cv_lib_ssl_SSL_CTX_new" >&6; }
-if test "x$ac_cv_lib_ssl_SSL_CTX_new" = xyes; then :
- have_lib_ssl=true
-else
- have_lib_ssl=false
-fi
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL" >&5
-$as_echo_n "checking for OpenSSL... " >&6; }
- if test x$have_lib_ssl = xtrue ; then
-
-$as_echo "#define TLS_IMPL_OPENSSL 1" >>confdefs.h
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
- TLS_IMPL_LIBS="-lssl -lcrypto"
- TLS_IMPL=openssl
- { $as_echo "$as_me:${as_lineno-$LINENO}: TLS module will use OpenSSL" >&5
-$as_echo "$as_me: TLS module will use OpenSSL" >&6;}
- else
- if test "$TLS_IMPL" = openssl ; then
- as_fn_error $? "OpenSSL not found!" "$LINENO" 5
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: OpenSSL not found!" >&5
-$as_echo "$as_me: WARNING: OpenSSL not found!" >&2;}
- fi
- TLS_IMPL=no
- { $as_echo "$as_me:${as_lineno-$LINENO}: building without TLS support" >&5
-$as_echo "$as_me: building without TLS support" >&6;}
- fi
- ;;
-no)
- { $as_echo "$as_me:${as_lineno-$LINENO}: building without TLS support" >&5
-$as_echo "$as_me: building without TLS support" >&6;}
- ;;
-*)
- as_fn_error $? "Unsupported TLS implementation $withval" "$LINENO" 5
- ;;
-esac
-
-if test "$TLS_IMPL" = no; then
-
-$as_echo "#define TLS_IMPL_NONE 1" >>confdefs.h
-
-fi
-
-
-
-
-
-
-# Check whether --with-keyutils was given.
-if test "${with_keyutils+set}" = set; then :
- withval=$with_keyutils;
-else
- with_keyutils=check
-fi
-
-if test "$with_keyutils" != no; then
- have_keyutils=false
- for ac_header in keyutils.h
-do :
- ac_fn_c_check_header_mongrel "$LINENO" "keyutils.h" "ac_cv_header_keyutils_h" "$ac_includes_default"
-if test "x$ac_cv_header_keyutils_h" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_KEYUTILS_H 1
-_ACEOF
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for add_key in -lkeyutils" >&5
-$as_echo_n "checking for add_key in -lkeyutils... " >&6; }
-if ${ac_cv_lib_keyutils_add_key+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lkeyutils $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char add_key ();
-int
-main ()
-{
-return add_key ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_keyutils_add_key=yes
-else
- ac_cv_lib_keyutils_add_key=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_keyutils_add_key" >&5
-$as_echo "$ac_cv_lib_keyutils_add_key" >&6; }
-if test "x$ac_cv_lib_keyutils_add_key" = xyes; then :
- have_keyutils=true
-fi
-
-fi
-
-done
-
- if test "$have_keyutils" = true; then
-
-$as_echo "#define USE_KEYRING_CCACHE 1" >>confdefs.h
-
- LIBS="-lkeyutils $LIBS"
- # If libkeyutils supports persistent keyrings, use them.
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for keyctl_get_persistent in -lkeyutils" >&5
-$as_echo_n "checking for keyctl_get_persistent in -lkeyutils... " >&6; }
-if ${ac_cv_lib_keyutils_keyctl_get_persistent+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lkeyutils $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char keyctl_get_persistent ();
-int
-main ()
-{
-return keyctl_get_persistent ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_keyutils_keyctl_get_persistent=yes
-else
- ac_cv_lib_keyutils_keyctl_get_persistent=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_keyutils_keyctl_get_persistent" >&5
-$as_echo "$ac_cv_lib_keyutils_keyctl_get_persistent" >&6; }
-if test "x$ac_cv_lib_keyutils_keyctl_get_persistent" = xyes; then :
-
-$as_echo "#define HAVE_PERSISTENT_KEYRING 1" >>confdefs.h
-
-
-fi
-
- elif test "$with_keyutils" = yes; then
- as_fn_error $? "libkeyutils not found" "$LINENO" 5
- fi
-fi
-
-# The SPAKE preauth plugin currently supports edwards25519 natively,
-# and can support three NIST groups using OpenSSL.
-HAVE_SPAKE_OPENSSL=no
-
-# Check whether --with-spake-openssl was given.
-if test "${with_spake_openssl+set}" = set; then :
- withval=$with_spake_openssl;
-else
- withval=auto
-fi
-
-if test "$withval" = auto -o "$withval" = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for EC_POINT_new in -lcrypto" >&5
-$as_echo_n "checking for EC_POINT_new in -lcrypto... " >&6; }
-if ${ac_cv_lib_crypto_EC_POINT_new+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypto $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char EC_POINT_new ();
-int
-main ()
-{
-return EC_POINT_new ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_crypto_EC_POINT_new=yes
-else
- ac_cv_lib_crypto_EC_POINT_new=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_EC_POINT_new" >&5
-$as_echo "$ac_cv_lib_crypto_EC_POINT_new" >&6; }
-if test "x$ac_cv_lib_crypto_EC_POINT_new" = xyes; then :
- have_crypto=true
-else
- have_crypto=false
-fi
-
- if test "$have_crypto" = true; then
-
-$as_echo "#define SPAKE_OPENSSL 1" >>confdefs.h
-
- SPAKE_OPENSSL_LIBS=-lcrypto
- HAVE_SPAKE_OPENSSL=yes
- elif test "$withval" = yes; then
- as_fn_error $? "OpenSSL libcrypto not found" "$LINENO" 5
- fi
-fi
-
-
-
-# Check whether --enable-aesni was given.
-if test "${enable_aesni+set}" = set; then :
- enableval=$enable_aesni;
-else
- enable_aesni=check
-fi
-
-if test "$CRYPTO_IMPL" = builtin -a "x$enable_aesni" != xno; then
- case "$host" in
- i686-*)
- aesni_obj=iaesx86.o
- aesni_machine=x86
- ;;
- x86_64-*)
- aesni_obj=iaesx64.o
- aesni_machine=amd64
- ;;
- esac
- case "$host" in
- *-*-linux* | *-*-gnu* | *-*-*bsd* | *-*-solaris*)
- # All Unix-like platforms need -D__linux__ for iaesx64.s to
- # use the System V x86-64 calling convention.
- aesni_flags="-D__linux__ -f elf -m $aesni_machine"
- ;;
- esac
- if test "x$aesni_obj" != x && test "x$aesni_flags" != x; then
- # Extract the first word of "yasm", so it can be a program name with args.
-set dummy yasm; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_YASM+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$YASM"; then
- ac_cv_prog_YASM="$YASM" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_YASM="yasm"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-YASM=$ac_cv_prog_YASM
-if test -n "$YASM"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $YASM" >&5
-$as_echo "$YASM" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- for ac_header in cpuid.h
-do :
- ac_fn_c_check_header_mongrel "$LINENO" "cpuid.h" "ac_cv_header_cpuid_h" "$ac_includes_default"
-if test "x$ac_cv_header_cpuid_h" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_CPUID_H 1
-_ACEOF
-
-fi
-
-done
-
- if test x"$YASM" != x -a "x$ac_cv_header_cpuid_h" = xyes; then
- AESNI_OBJ=$aesni_obj
- AESNI_FLAGS=$aesni_flags
-
-$as_echo "#define AESNI 1" >>confdefs.h
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: Building with AES-NI support" >&5
-$as_echo "$as_me: Building with AES-NI support" >&6;}
- fi
- fi
- if test "x$enable_aesni" = xyes -a "x$AESNI_OBJ" = x; then
- as_fn_error $? "AES-NI support requested but cannot be built" "$LINENO" 5
- fi
-fi
-
-
-
-# Check whether --enable-kdc-lookaside-cache was given.
-if test "${enable_kdc_lookaside_cache+set}" = set; then :
- enableval=$enable_kdc_lookaside_cache;
-else
- enableval=yes
-fi
-
-if test "$enableval" = no ; then
-
-$as_echo "#define NOCACHE 1" >>confdefs.h
-
-fi
-KRB5_RUN_ENV="$RUN_ENV"
-KRB5_RUN_VARS="$RUN_VARS"
-
-
-
-# asan is a gcc and clang facility to instrument the code with memory
-# error checking. To use it, we compile C and C++ source files with
-# -fsanitize=address, and set ASAN=yes to suppress the undefined
-# symbols check when building shared libraries.
-# Check whether --enable-asan was given.
-if test "${enable_asan+set}" = set; then :
- enableval=$enable_asan;
-else
- enable_asan=no
-fi
-
-if test "$enable_asan" != no; then
- if test "$enable_asan" = yes; then
- enable_asan=address
- fi
- ASAN_FLAGS="$DEFS -fsanitize=$enable_asan"
- ASAN=yes
- UNDEF_CHECK=
-else
- ASAN_FLAGS=
- ASAN=no
-fi
-
-
-
-# from old include/configure.in
-
-
-ac_config_headers="$ac_config_headers include/autoconf.h"
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for an ANSI C-conforming const" >&5
-$as_echo_n "checking for an ANSI C-conforming const... " >&6; }
-if ${ac_cv_c_const+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-int
-main ()
-{
-
-#ifndef __cplusplus
- /* Ultrix mips cc rejects this sort of thing. */
- typedef int charset[2];
- const charset cs = { 0, 0 };
- /* SunOS 4.1.1 cc rejects this. */
- char const *const *pcpcc;
- char **ppc;
- /* NEC SVR4.0.2 mips cc rejects this. */
- struct point {int x, y;};
- static struct point const zero = {0,0};
- /* AIX XL C 1.02.0.0 rejects this.
- It does not let you subtract one const X* pointer from another in
- an arm of an if-expression whose if-part is not a constant
- expression */
- const char *g = "string";
- pcpcc = &g + (g ? g-g : 0);
- /* HPUX 7.0 cc rejects these. */
- ++pcpcc;
- ppc = (char**) pcpcc;
- pcpcc = (char const *const *) ppc;
- { /* SCO 3.2v4 cc rejects this sort of thing. */
- char tx;
- char *t = &tx;
- char const *s = 0 ? (char *) 0 : (char const *) 0;
-
- *t++ = 0;
- if (s) return 0;
- }
- { /* Someone thinks the Sun supposedly-ANSI compiler will reject this. */
- int x[] = {25, 17};
- const int *foo = &x[0];
- ++foo;
- }
- { /* Sun SC1.0 ANSI compiler rejects this -- but not the above. */
- typedef const int *iptr;
- iptr p = 0;
- ++p;
- }
- { /* AIX XL C 1.02.0.0 rejects this sort of thing, saying
- "k.c", line 2.27: 1506-025 (S) Operand must be a modifiable lvalue. */
- struct s { int j; const int *ap[3]; } bx;
- struct s *b = &bx; b->j = 5;
- }
- { /* ULTRIX-32 V3.1 (Rev 9) vcc rejects this */
- const int foo = 10;
- if (!foo) return 0;
- }
- return !cs[0] && !zero.x;
-#endif
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_cv_c_const=yes
-else
- ac_cv_c_const=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_const" >&5
-$as_echo "$ac_cv_c_const" >&6; }
-if test $ac_cv_c_const = no; then
-
-$as_echo "#define const /**/" >>confdefs.h
-
-fi
-
-ac_header_dirent=no
-for ac_hdr in dirent.h sys/ndir.h sys/dir.h ndir.h; do
- as_ac_Header=`$as_echo "ac_cv_header_dirent_$ac_hdr" | $as_tr_sh`
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_hdr that defines DIR" >&5
-$as_echo_n "checking for $ac_hdr that defines DIR... " >&6; }
-if eval \${$as_ac_Header+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/types.h>
-#include <$ac_hdr>
-
-int
-main ()
-{
-if ((DIR *) 0)
-return 0;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- eval "$as_ac_Header=yes"
-else
- eval "$as_ac_Header=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$as_ac_Header
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_hdr" | $as_tr_cpp` 1
-_ACEOF
-
-ac_header_dirent=$ac_hdr; break
-fi
-
-done
-# Two versions of opendir et al. are in -ldir and -lx on SCO Xenix.
-if test $ac_header_dirent = dirent.h; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing opendir" >&5
-$as_echo_n "checking for library containing opendir... " >&6; }
-if ${ac_cv_search_opendir+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_func_search_save_LIBS=$LIBS
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char opendir ();
-int
-main ()
-{
-return opendir ();
- ;
- return 0;
-}
-_ACEOF
-for ac_lib in '' dir; do
- if test -z "$ac_lib"; then
- ac_res="none required"
- else
- ac_res=-l$ac_lib
- LIBS="-l$ac_lib $ac_func_search_save_LIBS"
- fi
- if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_search_opendir=$ac_res
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext
- if ${ac_cv_search_opendir+:} false; then :
- break
-fi
-done
-if ${ac_cv_search_opendir+:} false; then :
-
-else
- ac_cv_search_opendir=no
-fi
-rm conftest.$ac_ext
-LIBS=$ac_func_search_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_opendir" >&5
-$as_echo "$ac_cv_search_opendir" >&6; }
-ac_res=$ac_cv_search_opendir
-if test "$ac_res" != no; then :
- test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
-
-fi
-
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing opendir" >&5
-$as_echo_n "checking for library containing opendir... " >&6; }
-if ${ac_cv_search_opendir+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_func_search_save_LIBS=$LIBS
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char opendir ();
-int
-main ()
-{
-return opendir ();
- ;
- return 0;
-}
-_ACEOF
-for ac_lib in '' x; do
- if test -z "$ac_lib"; then
- ac_res="none required"
- else
- ac_res=-l$ac_lib
- LIBS="-l$ac_lib $ac_func_search_save_LIBS"
- fi
- if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_search_opendir=$ac_res
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext
- if ${ac_cv_search_opendir+:} false; then :
- break
-fi
-done
-if ${ac_cv_search_opendir+:} false; then :
-
-else
- ac_cv_search_opendir=no
-fi
-rm conftest.$ac_ext
-LIBS=$ac_func_search_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_opendir" >&5
-$as_echo "$ac_cv_search_opendir" >&6; }
-ac_res=$ac_cv_search_opendir
-if test "$ac_res" != no; then :
- test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
-
-fi
-
-fi
-
-ac_fn_c_check_decl "$LINENO" "strerror_r" "ac_cv_have_decl_strerror_r" "$ac_includes_default"
-if test "x$ac_cv_have_decl_strerror_r" = xyes; then :
- ac_have_decl=1
-else
- ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_STRERROR_R $ac_have_decl
-_ACEOF
-
-for ac_func in strerror_r
-do :
- ac_fn_c_check_func "$LINENO" "strerror_r" "ac_cv_func_strerror_r"
-if test "x$ac_cv_func_strerror_r" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_STRERROR_R 1
-_ACEOF
-
-fi
-done
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether strerror_r returns char *" >&5
-$as_echo_n "checking whether strerror_r returns char *... " >&6; }
-if ${ac_cv_func_strerror_r_char_p+:} false; then :
- $as_echo_n "(cached) " >&6
-else
-
- ac_cv_func_strerror_r_char_p=no
- if test $ac_cv_have_decl_strerror_r = yes; then
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$ac_includes_default
-int
-main ()
-{
-
- char buf[100];
- char x = *strerror_r (0, buf, sizeof buf);
- char *p = strerror_r (0, buf, sizeof buf);
- return !p || x;
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_cv_func_strerror_r_char_p=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- else
- # strerror_r is not declared. Choose between
- # systems that have relatively inaccessible declarations for the
- # function. BeOS and DEC UNIX 4.0 fall in this category, but the
- # former has a strerror_r that returns char*, while the latter
- # has a strerror_r that returns `int'.
- # This test should segfault on the DEC system.
- if test "$cross_compiling" = yes; then :
- :
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-$ac_includes_default
- extern char *strerror_r ();
-int
-main ()
-{
-char buf[100];
- char x = *strerror_r (0, buf, sizeof buf);
- return ! isalpha (x);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
- ac_cv_func_strerror_r_char_p=yes
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
- conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
- fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_strerror_r_char_p" >&5
-$as_echo "$ac_cv_func_strerror_r_char_p" >&6; }
-if test $ac_cv_func_strerror_r_char_p = yes; then
-
-$as_echo "#define STRERROR_R_CHAR_P 1" >>confdefs.h
-
-fi
-
-for ac_func in strdup setvbuf seteuid setresuid setreuid setegid setresgid setregid setsid flock fchmod chmod strptime geteuid setenv unsetenv getenv gmtime_r localtime_r bswap16 bswap64 mkstemp getusershell access getcwd srand48 srand srandom stat strchr strerror timegm explicit_bzero explicit_memset getresuid getresgid
-do :
- as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-done
-
-
-ac_fn_c_check_func "$LINENO" "mkstemp" "ac_cv_func_mkstemp"
-if test "x$ac_cv_func_mkstemp" = xyes; then :
- MKSTEMP_ST_OBJ=
-MKSTEMP_OBJ=
-else
- MKSTEMP_ST_OBJ='mkstemp.o'
-MKSTEMP_OBJ='$(OUTPRE)mkstemp.$(OBJEXT)'
-EXTRA_SUPPORT_SYMS="$EXTRA_SUPPORT_SYMS krb5int_mkstemp"
-fi
-
-
-
-
-ac_fn_c_check_func "$LINENO" "gettimeofday" "ac_cv_func_gettimeofday"
-if test "x$ac_cv_func_gettimeofday" = xyes; then :
- GETTIMEOFDAY_ST_OBJ=
- GETTIMEOFDAY_OBJ=
-
-$as_echo "#define HAVE_GETTIMEOFDAY 1" >>confdefs.h
-
-
-else
- GETTIMEOFDAY_ST_OBJ='gettimeofday.o'
- GETTIMEOFDAY_OBJ='$(OUTPRE)gettimeofday.$(OBJEXT)'
- EXTRA_SUPPORT_SYMS="$EXTRA_SUPPORT_SYMS krb5int_gettimeofday"
-fi
-
-
-
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for sys_errlist declaration" >&5
-$as_echo_n "checking for sys_errlist declaration... " >&6; }
-if ${krb5_cv_decl_sys_errlist+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <stdio.h>
- #include <errno.h>
-
-int
-main ()
-{
-1+sys_nerr;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_decl_sys_errlist=yes
-else
- krb5_cv_decl_sys_errlist=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_decl_sys_errlist" >&5
-$as_echo "$krb5_cv_decl_sys_errlist" >&6; }
-# assume sys_nerr won't be declared w/o being in libc
-if test $krb5_cv_decl_sys_errlist = yes; then
-
-$as_echo "#define SYS_ERRLIST_DECLARED 1" >>confdefs.h
-
-
-$as_echo "#define HAVE_SYS_ERRLIST 1" >>confdefs.h
-
-else
- # This means that sys_errlist is not declared in errno.h, but may still
- # be in libc.
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for sys_errlist in libc" >&5
-$as_echo_n "checking for sys_errlist in libc... " >&6; }
-if ${krb5_cv_var_sys_errlist+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-extern int sys_nerr;
-int
-main ()
-{
-if (1+sys_nerr < 0) return 1;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- krb5_cv_var_sys_errlist=yes
-else
- krb5_cv_var_sys_errlist=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_var_sys_errlist" >&5
-$as_echo "$krb5_cv_var_sys_errlist" >&6; }
- if test $krb5_cv_var_sys_errlist = yes; then
-
-$as_echo "#define HAVE_SYS_ERRLIST 1" >>confdefs.h
-
- # Do this cruft for backwards compatibility for now.
-
-$as_echo "#define NEED_SYS_ERRLIST 1" >>confdefs.h
-
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: sys_errlist is neither in errno.h nor in libc" >&5
-$as_echo "$as_me: WARNING: sys_errlist is neither in errno.h nor in libc" >&2;}
- fi
-fi
-for ac_header in unistd.h paths.h regex.h regexpr.h fcntl.h memory.h ifaddrs.h sys/filio.h byteswap.h machine/endian.h machine/byte_order.h sys/bswap.h endian.h pwd.h arpa/inet.h alloca.h dlfcn.h limits.h
-do :
- as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-
-done
-
-ac_fn_c_check_header_compile "$LINENO" "regexp.h" "ac_cv_header_regexp_h" "#define INIT char *sp = instring;
-#define GETC() (*sp++)
-#define PEEKC() (*sp)
-#define UNGETC(c) (--sp)
-#define RETURN(c) return(c)
-#define ERROR(c)
-
-"
-if test "x$ac_cv_header_regexp_h" = xyes; then :
-
-fi
-
-
-ac_fn_c_check_member "$LINENO" "struct stat" "st_mtimensec" "ac_cv_member_struct_stat_st_mtimensec" "#include <sys/types.h>
-#include <sys/stat.h>
-"
-if test "x$ac_cv_member_struct_stat_st_mtimensec" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_STRUCT_STAT_ST_MTIMENSEC 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_member "$LINENO" "struct stat" "st_mtimespec.tv_nsec" "ac_cv_member_struct_stat_st_mtimespec_tv_nsec" "#include <sys/types.h>
-#include <sys/stat.h>
-"
-if test "x$ac_cv_member_struct_stat_st_mtimespec_tv_nsec" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_STRUCT_STAT_ST_MTIMESPEC_TV_NSEC 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_member "$LINENO" "struct stat" "st_mtim.tv_nsec" "ac_cv_member_struct_stat_st_mtim_tv_nsec" "#include <sys/types.h>
-#include <sys/stat.h>
-"
-if test "x$ac_cv_member_struct_stat_st_mtim_tv_nsec" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_STRUCT_STAT_ST_MTIM_TV_NSEC 1
-_ACEOF
-
-
-fi
-
-
-for ac_func in re_comp re_exec regexec
-do :
- as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-done
-
-
-ac_fn_c_check_type "$LINENO" "off_t" "ac_cv_type_off_t" "$ac_includes_default"
-if test "x$ac_cv_type_off_t" = xyes; then :
-
-else
-
-cat >>confdefs.h <<_ACEOF
-#define off_t long int
-_ACEOF
-
-fi
-
-
-# Fancy caching of perror result...
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for perror declaration" >&5
-$as_echo_n "checking for perror declaration... " >&6; }
-if ${krb5_cv_decl_perror+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <errno.h>
-
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
- $EGREP "perror" >/dev/null 2>&1; then :
- krb5_cv_decl_perror=yes
-else
- krb5_cv_decl_perror=no
-fi
-rm -f conftest*
-
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_decl_perror" >&5
-$as_echo "$krb5_cv_decl_perror" >&6; }
-if test $krb5_cv_decl_perror = yes; then
-
-$as_echo "#define HDR_HAS_PERROR 1" >>confdefs.h
-
-fi
-
-
-if test "x$ac_cv_func_strptime" = xyes; then
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if strptime needs a prototype provided" >&5
-$as_echo_n "checking if strptime needs a prototype provided... " >&6; }
-if ${krb5_cv_func_strptime_noproto+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <time.h>
-int
-main ()
-{
-#undef strptime
- struct k5foo {int foo; } xx;
- extern int strptime (struct k5foo*);
- strptime(&xx);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_func_strptime_noproto=yes
-else
- krb5_cv_func_strptime_noproto=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_func_strptime_noproto" >&5
-$as_echo "$krb5_cv_func_strptime_noproto" >&6; }
-if test $krb5_cv_func_strptime_noproto = yes; then
-
-$as_echo "#define NEED_STRPTIME_PROTO 1" >>confdefs.h
-
-fi
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking if argument to wait is int *" >&5
-$as_echo_n "checking if argument to wait is int *... " >&6; }
-if ${krb5_cv_struct_wait+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/types.h>
- #include <sys/wait.h>
- extern pid_t wait(int *);
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_struct_wait=no
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/wait.h>
-
-int
-main ()
-{
-union wait i;
- #ifdef WEXITSTATUS
- WEXITSTATUS (i);
- #endif
-
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_struct_wait=yes
-else
- krb5_cv_struct_wait=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_struct_wait" >&5
-$as_echo "$krb5_cv_struct_wait" >&6; }
-if test $krb5_cv_struct_wait = no; then
-
-$as_echo "#define WAIT_USES_INT 1" >>confdefs.h
-
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for use of sigprocmask" >&5
-$as_echo_n "checking for use of sigprocmask... " >&6; }
-if ${krb5_cv_func_sigprocmask_use+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <signal.h>
-
-int
-main ()
-{
-sigprocmask(SIG_SETMASK, 0, 0);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- krb5_cv_func_sigprocmask_use=yes
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <signal.h>
-
-int
-main ()
-{
-sigmask(1);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- krb5_cv_func_sigprocmask_use=no
-else
- krb5_cv_func_sigprocmask_use=yes
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_func_sigprocmask_use" >&5
-$as_echo "$krb5_cv_func_sigprocmask_use" >&6; }
-if test $krb5_cv_func_sigprocmask_use = yes; then
-
-$as_echo "#define USE_SIGPROCMASK 1" >>confdefs.h
-
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for uid_t in sys/types.h" >&5
-$as_echo_n "checking for uid_t in sys/types.h... " >&6; }
-if ${ac_cv_type_uid_t+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/types.h>
-
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
- $EGREP "uid_t" >/dev/null 2>&1; then :
- ac_cv_type_uid_t=yes
-else
- ac_cv_type_uid_t=no
-fi
-rm -f conftest*
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_type_uid_t" >&5
-$as_echo "$ac_cv_type_uid_t" >&6; }
-if test $ac_cv_type_uid_t = no; then
-
-$as_echo "#define uid_t int" >>confdefs.h
-
-
-$as_echo "#define gid_t int" >>confdefs.h
-
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking type of array argument to getgroups" >&5
-$as_echo_n "checking type of array argument to getgroups... " >&6; }
-if ${ac_cv_type_getgroups+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test "$cross_compiling" = yes; then :
- ac_cv_type_getgroups=cross
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-/* Thanks to Mike Rendell for this test. */
-$ac_includes_default
-#define NGID 256
-#undef MAX
-#define MAX(x, y) ((x) > (y) ? (x) : (y))
-
-int
-main ()
-{
- gid_t gidset[NGID];
- int i, n;
- union { gid_t gval; long int lval; } val;
-
- val.lval = -1;
- for (i = 0; i < NGID; i++)
- gidset[i] = val.gval;
- n = getgroups (sizeof (gidset) / MAX (sizeof (int), sizeof (gid_t)) - 1,
- gidset);
- /* Exit non-zero if getgroups seems to require an array of ints. This
- happens when gid_t is short int but getgroups modifies an array
- of ints. */
- return n > 0 && gidset[n] != val.gval;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
- ac_cv_type_getgroups=gid_t
-else
- ac_cv_type_getgroups=int
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
- conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-if test $ac_cv_type_getgroups = cross; then
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <unistd.h>
-
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
- $EGREP "getgroups.*int.*gid_t" >/dev/null 2>&1; then :
- ac_cv_type_getgroups=gid_t
-else
- ac_cv_type_getgroups=int
-fi
-rm -f conftest*
-
-fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_type_getgroups" >&5
-$as_echo "$ac_cv_type_getgroups" >&6; }
-
-cat >>confdefs.h <<_ACEOF
-#define GETGROUPS_T $ac_cv_type_getgroups
-_ACEOF
-
-
-
-ac_fn_c_check_func "$LINENO" "sigsetjmp" "ac_cv_func_sigsetjmp"
-if test "x$ac_cv_func_sigsetjmp" = xyes; then :
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for sigjmp_buf" >&5
-$as_echo_n "checking for sigjmp_buf... " >&6; }
-if ${krb5_cv_struct_sigjmp_buf+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <setjmp.h>
-
-int
-main ()
-{
-sigjmp_buf x
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_struct_sigjmp_buf=yes
-else
- krb5_cv_struct_sigjmp_buf=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_struct_sigjmp_buf" >&5
-$as_echo "$krb5_cv_struct_sigjmp_buf" >&6; }
-if test $krb5_cv_struct_sigjmp_buf = yes; then
-
-$as_echo "#define POSIX_SETJMP 1" >>confdefs.h
-
-fi
-
-fi
-
-
-# *rpcent return types needed for lib/rpc
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking return type of setrpcent" >&5
-$as_echo_n "checking return type of setrpcent... " >&6; }
-if ${k5_cv_type_setrpcent+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
- extern void setrpcent();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- k5_cv_type_setrpcent=void
-else
- k5_cv_type_setrpcent=int
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $k5_cv_type_setrpcent" >&5
-$as_echo "$k5_cv_type_setrpcent" >&6; }
-
-cat >>confdefs.h <<_ACEOF
-#define SETRPCENT_TYPE $k5_cv_type_setrpcent
-_ACEOF
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking return type of endrpcent" >&5
-$as_echo_n "checking return type of endrpcent... " >&6; }
-if ${k5_cv_type_endrpcent+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
- extern void endrpcent();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- k5_cv_type_endrpcent=void
-else
- k5_cv_type_endrpcent=int
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $k5_cv_type_endrpcent" >&5
-$as_echo "$k5_cv_type_endrpcent" >&6; }
-
-cat >>confdefs.h <<_ACEOF
-#define ENDRPCENT_TYPE $k5_cv_type_endrpcent
-_ACEOF
-
-
-
-# bswap_16 is a macro in byteswap.h under GNU libc
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for bswap_16" >&5
-$as_echo_n "checking for bswap_16... " >&6; }
-if ${krb5_cv_bswap_16+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#if HAVE_BYTESWAP_H
- #include <byteswap.h>
- #endif
-
-int
-main ()
-{
-bswap_16(37);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- krb5_cv_bswap_16=yes
-else
- krb5_cv_bswap_16=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_bswap_16" >&5
-$as_echo "$krb5_cv_bswap_16" >&6; }
-if test "$krb5_cv_bswap_16" = yes; then
-
-$as_echo "#define HAVE_BSWAP_16 1" >>confdefs.h
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for bswap_64" >&5
-$as_echo_n "checking for bswap_64... " >&6; }
-if ${krb5_cv_bswap_64+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#if HAVE_BYTESWAP_H
- #include <byteswap.h>
- #endif
-
-int
-main ()
-{
-bswap_64(37);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- krb5_cv_bswap_64=yes
-else
- krb5_cv_bswap_64=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_bswap_64" >&5
-$as_echo "$krb5_cv_bswap_64" >&6; }
-if test "$krb5_cv_bswap_64" = yes; then
-
-$as_echo "#define HAVE_BSWAP_64 1" >>confdefs.h
-
-fi
-
-# Needed for ksu and some appl stuff.
-
-case $krb5_cv_host in
-alpha*-dec-osf*)
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for setluid in -lsecurity" >&5
-$as_echo_n "checking for setluid in -lsecurity... " >&6; }
-if ${ac_cv_lib_security_setluid+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsecurity $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char setluid ();
-int
-main ()
-{
-return setluid ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_security_setluid=yes
-else
- ac_cv_lib_security_setluid=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_security_setluid" >&5
-$as_echo "$ac_cv_lib_security_setluid" >&6; }
-if test "x$ac_cv_lib_security_setluid" = xyes; then :
-
-$as_echo "#define HAVE_SETLUID 1" >>confdefs.h
-
- KSU_LIBS="-lsecurity"
-
-fi
-
- ;;
-esac
-
-
-if test $ac_cv_func_setenv = no || test $ac_cv_func_unsetenv = no \
- || test $ac_cv_func_getenv = no; then
- SETENVOBJ=setenv.o
-else
- SETENVOBJ=
-fi
-
-
-# Check what the return types for gethostbyname_r and getservbyname_r are.
-
-ac_fn_c_check_func "$LINENO" "gethostbyname_r" "ac_cv_func_gethostbyname_r"
-if test "x$ac_cv_func_gethostbyname_r" = xyes; then :
-
-ac_cv_func_gethostbyname_r=yes
-if test "$ac_cv_func_gethostbyname_r" = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if gethostbyname_r returns an int" >&5
-$as_echo_n "checking if gethostbyname_r returns an int... " >&6; }
- if ${krb5_cv_gethostbyname_r_returns_int+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
- extern int gethostbyname_r();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_gethostbyname_r_returns_int=yes
-else
- krb5_cv_gethostbyname_r_returns_int=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_gethostbyname_r_returns_int" >&5
-$as_echo "$krb5_cv_gethostbyname_r_returns_int" >&6; }
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if gethostbyname_r returns a pointer" >&5
-$as_echo_n "checking if gethostbyname_r returns a pointer... " >&6; }
- if ${krb5_cv_gethostbyname_r_returns_ptr+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
- extern struct hostent *gethostbyname_r();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_gethostbyname_r_returns_ptr=yes
-else
- krb5_cv_gethostbyname_r_returns_ptr=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_gethostbyname_r_returns_ptr" >&5
-$as_echo "$krb5_cv_gethostbyname_r_returns_ptr" >&6; }
-
- if test "$krb5_cv_gethostbyname_r_returns_int" = "$krb5_cv_gethostbyname_r_returns_ptr"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cannot determine return type of gethostbyname_r -- disabling" >&5
-$as_echo "$as_me: WARNING: cannot determine return type of gethostbyname_r -- disabling" >&2;}
- ac_cv_func_gethostbyname_r=no
- fi
- if test "$krb5_cv_gethostbyname_r_returns_int" = yes; then
-
-$as_echo "#define GETHOSTBYNAME_R_RETURNS_INT 1" >>confdefs.h
-
- fi
-fi
-if test "$ac_cv_func_gethostbyname_r" = yes; then
-
-$as_echo "#define HAVE_GETHOSTBYNAME_R 1" >>confdefs.h
-
- ac_fn_c_check_func "$LINENO" "gethostbyaddr_r" "ac_cv_func_gethostbyaddr_r"
-if test "x$ac_cv_func_gethostbyaddr_r" = xyes; then :
-
-fi
-
-fi
-
-fi
-
-
-
-# PTHREAD_CFLAGS changes which variant of these functions is declared
-# on Solaris 11, so use it for these tests.
-old_CFLAGS=$CFLAGS
-CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
-ac_fn_c_check_func "$LINENO" "getpwnam_r" "ac_cv_func_getpwnam_r"
-if test "x$ac_cv_func_getpwnam_r" = xyes; then :
- ac_cv_func_getpwnam_r=yes
-else
- ac_cv_func_getpwnam_r=no
-fi
-
-ac_fn_c_check_func "$LINENO" "getpwuid_r" "ac_cv_func_getpwuid_r"
-if test "x$ac_cv_func_getpwuid_r" = xyes; then :
- ac_cv_func_getpwuid_r=yes
-else
- ac_cv_func_getpwuid_r=no
-fi
-
-if test "$ac_cv_func_getpwnam_r" = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking return type of getpwnam_r" >&5
-$as_echo_n "checking return type of getpwnam_r... " >&6; }
- if ${krb5_cv_getpwnam_r_return_type+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <pwd.h>
- extern int getpwnam_r();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- getpwnam_r_returns_int=yes
-else
- getpwnam_r_returns_int=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <pwd.h>
- extern struct passwd *getpwnam_r();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- getpwnam_r_returns_ptr=yes
-else
- getpwnam_r_returns_ptr=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- case "$getpwnam_r_returns_int/$getpwnam_r_returns_ptr" in
- yes/no) krb5_cv_getpwnam_r_return_type=int ;;
- no/yes) krb5_cv_getpwnam_r_return_type=ptr ;;
- *) krb5_cv_getpwnam_r_return_type=unknown ;;
- esac
-fi
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_getpwnam_r_return_type" >&5
-$as_echo "$krb5_cv_getpwnam_r_return_type" >&6; }
- if test $krb5_cv_getpwnam_r_return_type = int; then
-
-$as_echo "#define GETPWNAM_R_RETURNS_INT 1" >>confdefs.h
-
- elif test $krb5_cv_getpwnam_r_return_type = unknown; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot determine getpwnam_r return type, disabling getpwnam_r" >&5
-$as_echo "$as_me: WARNING: Cannot determine getpwnam_r return type, disabling getpwnam_r" >&2;}
- ac_cv_func_getpwnam_r=no
- fi
-fi
-if test "$ac_cv_func_getpwnam_r" = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking number of arguments to getpwnam_r" >&5
-$as_echo_n "checking number of arguments to getpwnam_r... " >&6; }
- if ${krb5_cv_getpwnam_r_args+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <pwd.h>
- struct passwd pwx; char buf[1024];
-int
-main ()
-{
-getpwnam_r("", &pwx, buf, sizeof(buf));
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- args4=yes
-else
- args4=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <pwd.h>
- struct passwd pwx, *p;
- char buf[1024];
-int
-main ()
-{
-getpwnam_r("", &pwx, buf, sizeof(buf), &p);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- args5=yes
-else
- args5=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- case $args4/$args5 in
- yes/no) krb5_cv_getpwnam_r_args=4 ;;
- no/yes) krb5_cv_getpwnam_r_args=5 ;;
- *) krb5_cv_getpwnam_r_args=unknown ;;
- esac
-fi
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_getpwnam_r_args" >&5
-$as_echo "$krb5_cv_getpwnam_r_args" >&6; }
- if test "$krb5_cv_getpwnam_r_args" = unknown; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot determine number of arguments to getpwnam_r, disabling its use." >&5
-$as_echo "$as_me: WARNING: Cannot determine number of arguments to getpwnam_r, disabling its use." >&2;}
- ac_cv_func_getpwnam_r=no
- else
-
-$as_echo "#define HAVE_GETPWNAM_R 1" >>confdefs.h
-
- if test "$krb5_cv_getpwnam_r_args" = 4; then
-
-$as_echo "#define GETPWNAM_R_4_ARGS 1" >>confdefs.h
-
- fi
- fi
-fi
-CFLAGS=$old_CFLAGS
-
-if test "$ac_cv_func_getpwnam_r" = no && test "$ac_cv_func_getpwuid_r" = yes; then
- # Actually, we could do this check, and the corresponding checks
- # for return type and number of arguments, but I doubt we'll run
- # into a system where we'd get to use getpwuid_r but not getpwnam_r.
- { $as_echo "$as_me:${as_lineno-$LINENO}: getpwnam_r not useful, so disabling getpwuid_r too" >&5
-$as_echo "$as_me: getpwnam_r not useful, so disabling getpwuid_r too" >&6;}
- ac_cv_func_getpwuid_r=no
-fi
-if test "$ac_cv_func_getpwuid_r" = yes; then
-
-$as_echo "#define HAVE_GETPWUID_R 1" >>confdefs.h
-
- # Hack: Assume getpwuid_r is the shorter form if getpwnam_r is.
- if test "$krb5_cv_getpwnam_r_args" = 4; then
-
-$as_echo "#define GETPWUID_R_4_ARGS 1" >>confdefs.h
-
- fi
-fi
-
-if test "$ac_cv_func_gmtime_r" = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether gmtime_r returns int" >&5
-$as_echo_n "checking whether gmtime_r returns int... " >&6; }
- if ${krb5_cv_gmtime_r_returns_int+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <time.h>
- extern int gmtime_r();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- return_int=yes
-else
- return_int=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
- #include <time.h>
- extern struct tm *gmtime_r();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- return_ptr=yes
-else
- return_ptr=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- case $return_int/$return_ptr in
- yes/no) krb5_cv_gmtime_r_returns_int=yes ;;
- no/yes) krb5_cv_gmtime_r_returns_int=no ;;
- *) # Can't figure it out, punt the function.
- ac_cv_func_gmtime_r=no ;;
- esac
-fi
-
- if test "$ac_cv_func_gmtime_r" = no; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: unknown -- ignoring gmtime_r" >&5
-$as_echo "unknown -- ignoring gmtime_r" >&6; }
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_gmtime_r_returns_int" >&5
-$as_echo "$krb5_cv_gmtime_r_returns_int" >&6; }
- if test "$krb5_cv_gmtime_r_returns_int" = yes; then
-
-$as_echo "#define GMTIME_R_RETURNS_INT 1" >>confdefs.h
-
- fi
- fi
-fi
-
-ac_fn_c_check_func "$LINENO" "getservbyname_r" "ac_cv_func_getservbyname_r"
-if test "x$ac_cv_func_getservbyname_r" = xyes; then :
-
-ac_cv_func_getservbyname_r=yes
-if test "$ac_cv_func_getservbyname_r" = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if getservbyname_r returns an int" >&5
-$as_echo_n "checking if getservbyname_r returns an int... " >&6; }
- if ${krb5_cv_getservbyname_r_returns_int+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
- extern int getservbyname_r();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_getservbyname_r_returns_int=yes
-else
- krb5_cv_getservbyname_r_returns_int=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_getservbyname_r_returns_int" >&5
-$as_echo "$krb5_cv_getservbyname_r_returns_int" >&6; }
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if getservbyname_r returns a pointer" >&5
-$as_echo_n "checking if getservbyname_r returns a pointer... " >&6; }
- if ${krb5_cv_getservbyname_r_returns_ptr+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
- extern struct servent *getservbyname_r();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_getservbyname_r_returns_ptr=yes
-else
- krb5_cv_getservbyname_r_returns_ptr=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_getservbyname_r_returns_ptr" >&5
-$as_echo "$krb5_cv_getservbyname_r_returns_ptr" >&6; }
-
- if test "$krb5_cv_getservbyname_r_returns_int" = "$krb5_cv_getservbyname_r_returns_ptr"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cannot determine return type of getservbyname_r -- disabling" >&5
-$as_echo "$as_me: WARNING: cannot determine return type of getservbyname_r -- disabling" >&2;}
- ac_cv_func_getservbyname_r=no
- fi
- if test "$krb5_cv_getservbyname_r_returns_int" = yes; then
-
-$as_echo "#define GETSERVBYNAME_R_RETURNS_INT 1" >>confdefs.h
-
- fi
-fi
-if test "$ac_cv_func_getservbyname_r" = yes; then
-
-$as_echo "#define HAVE_GETSERVBYNAME_R 1" >>confdefs.h
-
- ac_fn_c_check_func "$LINENO" "getservbyport_r" "ac_cv_func_getservbyport_r"
-if test "x$ac_cv_func_getservbyport_r" = xyes; then :
-
-fi
-
-fi
-
-fi
-
-
-
-ac_fn_c_check_header_mongrel "$LINENO" "dirent.h" "ac_cv_header_dirent_h" "$ac_includes_default"
-if test "x$ac_cv_header_dirent_h" = xyes; then :
-
-$as_echo "#define USE_DIRENT_H 1" >>confdefs.h
-
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for uid_t in sys/types.h" >&5
-$as_echo_n "checking for uid_t in sys/types.h... " >&6; }
-if ${ac_cv_type_uid_t+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/types.h>
-
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
- $EGREP "uid_t" >/dev/null 2>&1; then :
- ac_cv_type_uid_t=yes
-else
- ac_cv_type_uid_t=no
-fi
-rm -f conftest*
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_type_uid_t" >&5
-$as_echo "$ac_cv_type_uid_t" >&6; }
-if test $ac_cv_type_uid_t = no; then
-
-$as_echo "#define uid_t int" >>confdefs.h
-
-
-$as_echo "#define gid_t int" >>confdefs.h
-
-fi
-
-
-ac_fn_c_check_header_mongrel "$LINENO" "termios.h" "ac_cv_header_termios_h" "$ac_includes_default"
-if test "x$ac_cv_header_termios_h" = xyes; then :
- ac_fn_c_check_func "$LINENO" "tcsetattr" "ac_cv_func_tcsetattr"
-if test "x$ac_cv_func_tcsetattr" = xyes; then :
-
-$as_echo "#define POSIX_TERMIOS 1" >>confdefs.h
-
-fi
-
-fi
-
-
-
-for ac_header in poll.h stdlib.h string.h stddef.h sys/types.h sys/file.h sys/param.h sys/stat.h sys/time.h netinet/in.h sys/uio.h sys/filio.h sys/select.h time.h paths.h errno.h
-do :
- as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-
-done
-
-
-# If compiling with IPv6 support, test if in6addr_any functions.
-# Irix 6.5.16 defines it, but lacks support in the C library.
-if test $krb5_cv_inet6 = yes || test "$krb5_cv_inet6_with_dinet6" = yes ; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for in6addr_any definition in library" >&5
-$as_echo_n "checking for in6addr_any definition in library... " >&6; }
-if ${krb5_cv_var_in6addr_any+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#ifdef HAVE_SYS_TYPES_H
- #include <sys/types.h>
- #endif
- #include <sys/socket.h>
- #include <netinet/in.h>
- #include <netdb.h>
- #include <stdio.h>
-
-int
-main ()
-{
-struct sockaddr_in6 in;
- in.sin6_addr = in6addr_any;
- printf("%x", &in);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- krb5_cv_var_in6addr_any=yes
-else
- krb5_cv_var_in6addr_any=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_var_in6addr_any" >&5
-$as_echo "$krb5_cv_var_in6addr_any" >&6; }
- if test $krb5_cv_var_in6addr_any = no; then
-
-$as_echo "#define NEED_INSIXADDR_ANY 1" >>confdefs.h
-
- fi
-fi
-
-# then from osconf.h, we have
-
-ac_fn_c_check_type "$LINENO" "time_t" "ac_cv_type_time_t" "$ac_includes_default"
-if test "x$ac_cv_type_time_t" = xyes; then :
-
-else
-
-cat >>confdefs.h <<_ACEOF
-#define time_t long
-_ACEOF
-
-fi
-
-# The cast to long int works around a bug in the HP C Compiler
-# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
-# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
-# This bug is HP SR number 8606223364.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of time_t" >&5
-$as_echo_n "checking size of time_t... " >&6; }
-if ${ac_cv_sizeof_time_t+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (time_t))" "ac_cv_sizeof_time_t" "$ac_includes_default"; then :
-
-else
- if test "$ac_cv_type_time_t" = yes; then
- { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error 77 "cannot compute sizeof (time_t)
-See \`config.log' for more details" "$LINENO" 5; }
- else
- ac_cv_sizeof_time_t=0
- fi
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_time_t" >&5
-$as_echo "$ac_cv_sizeof_time_t" >&6; }
-
-
-
-cat >>confdefs.h <<_ACEOF
-#define SIZEOF_TIME_T $ac_cv_sizeof_time_t
-_ACEOF
-
-
-SIZEOF_TIME_T=$ac_cv_sizeof_time_t
-
-
-# Determine where to put the replay cache.
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for replay cache directory" >&5
-$as_echo_n "checking for replay cache directory... " >&6; }
-if ${krb5_cv_sys_rcdir+:} false; then :
- $as_echo_n "(cached) " >&6
-else
-
-if test $cross_compiling = yes; then
- krb5_cv_sys_rcdir=/var/tmp
-else
- for t_dir in /var/tmp /usr/tmp /var/usr/tmp /tmp ; do
- test -d $t_dir || continue
- krb5_cv_sys_rcdir=$t_dir
- break
- done
-fi
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_sys_rcdir" >&5
-$as_echo "$krb5_cv_sys_rcdir" >&6; }
-KRB5_RCTMPDIR=$krb5_cv_sys_rcdir
-
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for socklen_t" >&5
-$as_echo_n "checking for socklen_t... " >&6; }
-if ${krb5_cv_has_type_socklen_t+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/types.h>
- #include <sys/socket.h>
-
-int
-main ()
-{
-sizeof(socklen_t);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_has_type_socklen_t=yes
-else
- krb5_cv_has_type_socklen_t=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_has_type_socklen_t" >&5
-$as_echo "$krb5_cv_has_type_socklen_t" >&6; }
-if test $krb5_cv_has_type_socklen_t = yes; then
-
-$as_echo "#define HAVE_SOCKLEN_T 1" >>confdefs.h
-
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct lifconf" >&5
-$as_echo_n "checking for struct lifconf... " >&6; }
-if ${krb5_cv_has_struct_lifconf+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/socket.h>
- #include <net/if.h>
-
-int
-main ()
-{
-sizeof (struct lifconf);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_has_struct_lifconf=yes
-else
- krb5_cv_has_struct_lifconf=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_has_struct_lifconf" >&5
-$as_echo "$krb5_cv_has_struct_lifconf" >&6; }
-if test $krb5_cv_has_struct_lifconf = yes; then
-
-$as_echo "#define HAVE_STRUCT_LIFCONF 1" >>confdefs.h
-
-fi
-# HP-UX 11 uses stuct if_laddrconf
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for struct if_laddrconf" >&5
-$as_echo_n "checking for struct if_laddrconf... " >&6; }
-if ${krb5_cv_has_struct_if_laddrconf+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/socket.h>
- #include <net/if.h>
- #include <net/if6.h>
-
-int
-main ()
-{
-sizeof(struct if_laddrconf);
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_has_struct_if_laddrconf=yes
-else
- krb5_cv_has_struct_if_laddrconf=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_has_struct_if_laddrconf" >&5
-$as_echo "$krb5_cv_has_struct_if_laddrconf" >&6; }
-if test $krb5_cv_has_struct_if_laddrconf = yes; then
-
-$as_echo "#define HAVE_STRUCT_IF_LADDRCONF 1" >>confdefs.h
-
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for h_errno in netdb.h" >&5
-$as_echo_n "checking for h_errno in netdb.h... " >&6; }
-if ${krb5_cv_header_netdb_h_h_errno+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
-int
-main ()
-{
-int x = h_errno;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_header_netdb_h_h_errno=yes
-else
- krb5_cv_header_netdb_h_h_errno=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_header_netdb_h_h_errno" >&5
-$as_echo "$krb5_cv_header_netdb_h_h_errno" >&6; }
-if test $krb5_cv_header_netdb_h_h_errno = yes; then
-
-$as_echo "#define HAVE_NETDB_H_H_ERRNO 1" >>confdefs.h
-
-fi
-
-
-# Check whether --enable-athena was given.
-if test "${enable_athena+set}" = set; then :
- enableval=$enable_athena;
-$as_echo "#define KRB5_ATHENA_COMPAT 1" >>confdefs.h
-
-fi
-
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for inline" >&5
-$as_echo_n "checking for inline... " >&6; }
-if ${ac_cv_c_inline+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_cv_c_inline=no
-for ac_kw in inline __inline__ __inline; do
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#ifndef __cplusplus
-typedef int foo_t;
-static $ac_kw foo_t static_foo () {return 0; }
-$ac_kw foo_t foo () {return 0; }
-#endif
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- ac_cv_c_inline=$ac_kw
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- test "$ac_cv_c_inline" != no && break
-done
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_inline" >&5
-$as_echo "$ac_cv_c_inline" >&6; }
-
-case $ac_cv_c_inline in
- inline | yes) ;;
- *)
- case $ac_cv_c_inline in
- no) ac_val=;;
- *) ac_val=$ac_cv_c_inline;;
- esac
- cat >>confdefs.h <<_ACEOF
-#ifndef __cplusplus
-#define inline $ac_val
-#endif
-_ACEOF
- ;;
-esac
-
-
-
-
-ac_fn_c_check_type "$LINENO" "struct cmsghdr" "ac_cv_type_struct_cmsghdr" "
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-
-"
-if test "x$ac_cv_type_struct_cmsghdr" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_STRUCT_CMSGHDR 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "struct in_pktinfo" "ac_cv_type_struct_in_pktinfo" "
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-
-"
-if test "x$ac_cv_type_struct_in_pktinfo" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_STRUCT_IN_PKTINFO 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "struct in6_pktinfo" "ac_cv_type_struct_in6_pktinfo" "
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-
-"
-if test "x$ac_cv_type_struct_in6_pktinfo" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_STRUCT_IN6_PKTINFO 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "struct sockaddr_storage" "ac_cv_type_struct_sockaddr_storage" "
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-
-"
-if test "x$ac_cv_type_struct_sockaddr_storage" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_STRUCT_SOCKADDR_STORAGE 1
-_ACEOF
-
-
-fi
-
-ac_fn_c_check_type "$LINENO" "struct rt_msghdr" "ac_cv_type_struct_rt_msghdr" "
-#include <sys/socket.h>
-#include <net/if.h>
-#include <net/route.h>
-
-"
-if test "x$ac_cv_type_struct_rt_msghdr" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_STRUCT_RT_MSGHDR 1
-_ACEOF
-
-
-fi
-
-
-# Tests for 64-bit edwards25519 code.
-# The cast to long int works around a bug in the HP C Compiler
-# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
-# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
-# This bug is HP SR number 8606223364.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of size_t" >&5
-$as_echo_n "checking size of size_t... " >&6; }
-if ${ac_cv_sizeof_size_t+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (size_t))" "ac_cv_sizeof_size_t" "$ac_includes_default"; then :
-
-else
- if test "$ac_cv_type_size_t" = yes; then
- { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error 77 "cannot compute sizeof (size_t)
-See \`config.log' for more details" "$LINENO" 5; }
- else
- ac_cv_sizeof_size_t=0
- fi
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_size_t" >&5
-$as_echo "$ac_cv_sizeof_size_t" >&6; }
-
-
-
-cat >>confdefs.h <<_ACEOF
-#define SIZEOF_SIZE_T $ac_cv_sizeof_size_t
-_ACEOF
-
-
-ac_fn_c_check_type "$LINENO" "__int128_t" "ac_cv_type___int128_t" "$ac_includes_default"
-if test "x$ac_cv_type___int128_t" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE___INT128_T 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "__uint128_t" "ac_cv_type___uint128_t" "$ac_includes_default"
-if test "x$ac_cv_type___uint128_t" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE___UINT128_T 1
-_ACEOF
-
-
-fi
-
-
-# types libdb2 wants
-
-ac_fn_c_check_type "$LINENO" "ssize_t" "ac_cv_type_ssize_t" "$ac_includes_default"
-if test "x$ac_cv_type_ssize_t" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_SSIZE_T 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "u_char" "ac_cv_type_u_char" "$ac_includes_default"
-if test "x$ac_cv_type_u_char" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_U_CHAR 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "u_int" "ac_cv_type_u_int" "$ac_includes_default"
-if test "x$ac_cv_type_u_int" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_U_INT 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "u_long" "ac_cv_type_u_long" "$ac_includes_default"
-if test "x$ac_cv_type_u_long" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_U_LONG 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "u_int8_t" "ac_cv_type_u_int8_t" "$ac_includes_default"
-if test "x$ac_cv_type_u_int8_t" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_U_INT8_T 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "u_int16_t" "ac_cv_type_u_int16_t" "$ac_includes_default"
-if test "x$ac_cv_type_u_int16_t" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_U_INT16_T 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "u_int32_t" "ac_cv_type_u_int32_t" "$ac_includes_default"
-if test "x$ac_cv_type_u_int32_t" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_U_INT32_T 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "int8_t" "ac_cv_type_int8_t" "$ac_includes_default"
-if test "x$ac_cv_type_int8_t" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_INT8_T 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "int16_t" "ac_cv_type_int16_t" "$ac_includes_default"
-if test "x$ac_cv_type_int16_t" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_INT16_T 1
-_ACEOF
-
-
-fi
-ac_fn_c_check_type "$LINENO" "int32_t" "ac_cv_type_int32_t" "$ac_includes_default"
-if test "x$ac_cv_type_int32_t" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_INT32_T 1
-_ACEOF
-
-
-fi
-
-
-# Some libdb2 test programs want a shell that supports functions.
-FCTSH=false
-# Extract the first word of "sh", so it can be a program name with args.
-set dummy sh; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_SH+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $SH in
- [\\/]* | ?:[\\/]*)
- ac_cv_path_SH="$SH" # Let the user override the test with a path.
- ;;
- *)
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_path_SH="$as_dir/$ac_word$ac_exec_ext"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- test -z "$ac_cv_path_SH" && ac_cv_path_SH="false"
- ;;
-esac
-fi
-SH=$ac_cv_path_SH
-if test -n "$SH"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $SH" >&5
-$as_echo "$SH" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-# Extract the first word of "sh5", so it can be a program name with args.
-set dummy sh5; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_SH5+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $SH5 in
- [\\/]* | ?:[\\/]*)
- ac_cv_path_SH5="$SH5" # Let the user override the test with a path.
- ;;
- *)
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_path_SH5="$as_dir/$ac_word$ac_exec_ext"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- test -z "$ac_cv_path_SH5" && ac_cv_path_SH5="false"
- ;;
-esac
-fi
-SH5=$ac_cv_path_SH5
-if test -n "$SH5"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $SH5" >&5
-$as_echo "$SH5" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-# Extract the first word of "bash", so it can be a program name with args.
-set dummy bash; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_BASH+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $BASH in
- [\\/]* | ?:[\\/]*)
- ac_cv_path_BASH="$BASH" # Let the user override the test with a path.
- ;;
- *)
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_path_BASH="$as_dir/$ac_word$ac_exec_ext"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- test -z "$ac_cv_path_BASH" && ac_cv_path_BASH="false"
- ;;
-esac
-fi
-BASH=$ac_cv_path_BASH
-if test -n "$BASH"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $BASH" >&5
-$as_echo "$BASH" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-for prog in $SH $SH5 $BASH; do
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $prog supports functions" >&5
-$as_echo_n "checking if $prog supports functions... " >&6; }
- if $prog -c 'foo() { true; }; foo' >/dev/null 2>&1; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
- FCTSH=$prog
- break
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
- fi
-done
-
-
-# Test for POSIX 2001 *printf support (X/Open System Interfaces extension
-# to ANSI/ISO C 1999 specification). Specifically, positional
-# specifications; not checking for other features like %zx at present.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for POSIX printf positional specification support" >&5
-$as_echo_n "checking for POSIX printf positional specification support... " >&6; }
-if ${ac_cv_printf_positional+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test "$cross_compiling" = yes; then :
- as_fn_error $? "Cannot test for printf positional argument support when cross compiling" "$LINENO" 5
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <stdio.h>
- #include <string.h>
- const char expected[] = "200 100";
- int main()
- {
- char buf[30];
- sprintf(buf, "%2\$x %1\$d", 100, 512);
- if (strcmp(expected, buf)) {
- fprintf(stderr, "bad result: <%s> wanted: <%s>\n",
- buf, expected);
- return 1;
- }
- return 0;
- }
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
- ac_cv_printf_positional=yes
-else
- ac_cv_printf_positional=no
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
- conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-fi
-
-# Nothing for autoconf.h for now.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_printf_positional" >&5
-$as_echo "$ac_cv_printf_positional" >&6; }
-
-
-# for t_locate_kdc test
-
-# Extract the first word of "dig", so it can be a program name with args.
-set dummy dig; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_DIG+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $DIG in
- [\\/]* | ?:[\\/]*)
- ac_cv_path_DIG="$DIG" # Let the user override the test with a path.
- ;;
- *)
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_path_DIG="$as_dir/$ac_word$ac_exec_ext"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- test -z "$ac_cv_path_DIG" && ac_cv_path_DIG="false"
- ;;
-esac
-fi
-DIG=$ac_cv_path_DIG
-if test -n "$DIG"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $DIG" >&5
-$as_echo "$DIG" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-# Extract the first word of "nslookup", so it can be a program name with args.
-set dummy nslookup; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_NSLOOKUP+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $NSLOOKUP in
- [\\/]* | ?:[\\/]*)
- ac_cv_path_NSLOOKUP="$NSLOOKUP" # Let the user override the test with a path.
- ;;
- *)
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_path_NSLOOKUP="$as_dir/$ac_word$ac_exec_ext"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- test -z "$ac_cv_path_NSLOOKUP" && ac_cv_path_NSLOOKUP="false"
- ;;
-esac
-fi
-NSLOOKUP=$ac_cv_path_NSLOOKUP
-if test -n "$NSLOOKUP"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $NSLOOKUP" >&5
-$as_echo "$NSLOOKUP" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-
-# for kadmin
-
-for ac_prog in 'bison -y' byacc
-do
- # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_YACC+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$YACC"; then
- ac_cv_prog_YACC="$YACC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_YACC="$ac_prog"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-YACC=$ac_cv_prog_YACC
-if test -n "$YACC"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $YACC" >&5
-$as_echo "$YACC" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- test -n "$YACC" && break
-done
-test -n "$YACC" || YACC="yacc"
-
-ath_compat=
-# Check whether --enable-athena was given.
-if test "${enable_athena+set}" = set; then :
- enableval=$enable_athena; ath_compat=compat
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to use priocntl hack" >&5
-$as_echo_n "checking whether to use priocntl hack... " >&6; }
-if ${krb5_cv_priocntl_hack+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $krb5_cv_host in
-*-*-solaris2.9*)
- if test "$cross_compiling" = yes; then
- krb5_cv_priocntl_hack=yes
- else
- # Solaris patch 117171-11 (sparc) or 117172-11 (x86)
- # fixes the Solaris 9 bug where final pty output
- # gets lost on close.
- if showrev -p | $AWK 'BEGIN { e = 1 }
-/Patch: 11717[12]/ { x = index($2, "-");
-if (substr($2, x + 1, length($2) - x) >= 11)
-{ e = 0 } else { e = 1 } }
-END { exit e; }'; then
- krb5_cv_priocntl_hack=no
- else
- krb5_cv_priocntl_hack=yes
- fi
- fi
- ;;
-*)
- krb5_cv_priocntl_hack=no
- ;;
-esac
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_priocntl_hack" >&5
-$as_echo "$krb5_cv_priocntl_hack" >&6; }
-if test "$krb5_cv_priocntl_hack" = yes; then
- PRIOCNTL_HACK=1
-else
- PRIOCNTL_HACK=0
-fi
-
-
-# Extract the first word of "perl", so it can be a program name with args.
-set dummy perl; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_PERL+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$PERL"; then
- ac_cv_prog_PERL="$PERL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_PERL="perl"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-PERL=$ac_cv_prog_PERL
-if test -n "$PERL"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PERL" >&5
-$as_echo "$PERL" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-
-# lib/gssapi
-ac_fn_c_check_header_mongrel "$LINENO" "xom.h" "ac_cv_header_xom_h" "$ac_includes_default"
-if test "x$ac_cv_header_xom_h" = xyes; then :
-
- include_xom='awk '\''END{printf("%cinclude <xom.h>\n", 35);}'\'' < /dev/null'
-else
-
- include_xom='echo "/* no xom.h */"'
-fi
-
-
-
-
-
-# lib/rpc
-### Check where struct rpcent is declared.
-
-# This is necessary to determine:
-# 1. If /usr/include/netdb.h declares struct rpcent
-# 2. If /usr/include/rpc/netdb.h declares struct rpcent
-
-# We have our own rpc/netdb.h, and if /usr/include/netdb.h includes
-# rpc/netdb.h, then nastiness could happen.
-
-# Logic: If /usr/include/netdb.h declares struct rpcent, then check
-# rpc/netdb.h. If /usr/include/rpc/netdb.h declares struct rpcent,
-# then define STRUCT_RPCENT_IN_RPC_NETDB_H, otherwise do not. If
-# neither netdb.h nor rpc/netdb.h declares struct rpcent, then define
-# STRUCT_RPCENT_IN_RPC_NETDB_H anyway.
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking where struct rpcent is declared" >&5
-$as_echo_n "checking where struct rpcent is declared... " >&6; }
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
-
-int
-main ()
-{
-struct rpcent e;
- char c = e.r_name[0];
- int i = e.r_number;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- netdb_rpcent=yes
-else
- netdb_rpcent=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-if test "$netdb_rpcent" = yes; then
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <rpc/netdb.h>
-
-int
-main ()
-{
-struct rpcent e;
- char c = e.r_name[0];
- int i = e.r_number;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- rpc_netdb_rpcent=yes
-else
- rpc_netdb_rpcent=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
- if test "$rpc_netdb_rpcent" = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: rpc/netdb.h" >&5
-$as_echo "rpc/netdb.h" >&6; }
- rpcent_define='#define STRUCT_RPCENT_IN_RPC_NETDB_H'
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: netdb.h" >&5
-$as_echo "netdb.h" >&6; }
- fi
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: nowhere" >&5
-$as_echo "nowhere" >&6; }
- rpcent_define='#define STRUCT_RPCENT_IN_RPC_NETDB_H'
-fi
-
-
-for ac_header in sys/select.h sys/time.h unistd.h
-do :
- as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-
-done
-
-if test $ac_cv_header_sys_select_h = yes; then
- GSSRPC__SYS_SELECT_H='#include <sys/select.h>'
-else
- GSSRPC__SYS_SELECT_H='/* #include <sys/select.h> */'
-fi
-
-if test $ac_cv_header_sys_time_h = yes; then
- GSSRPC__SYS_TIME_H='#include <sys/time.h>'
-else
- GSSRPC__SYS_TIME_H='/* #include <sys/time.h> */'
-fi
-
-if test $ac_cv_header_unistd_h = yes; then
- GSSRPC__UNISTD_H='#include <unistd.h>'
-else
- GSSRPC__UNISTD_H='/* #include <unistd.h> */'
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for MAXHOSTNAMELEN in sys/param.h" >&5
-$as_echo_n "checking for MAXHOSTNAMELEN in sys/param.h... " >&6; }
-if ${krb5_cv_header_sys_param_h_maxhostnamelen+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/param.h>
-
-int
-main ()
-{
-int i = MAXHOSTNAMELEN;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_header_sys_param_h_maxhostnamelen=yes
-else
- krb5_cv_header_sys_param_h_maxhostnamelen=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_header_sys_param_h_maxhostnamelen" >&5
-$as_echo "$krb5_cv_header_sys_param_h_maxhostnamelen" >&6; }
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for MAXHOSTNAMELEN in netdb.h" >&5
-$as_echo_n "checking for MAXHOSTNAMELEN in netdb.h... " >&6; }
-if ${krb5_cv_header_netdb_h_maxhostnamelen+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
-
-int
-main ()
-{
-int i = MAXHOSTNAMELEN;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_header_netdb_h_maxhostnamelen=yes
-else
- krb5_cv_header_netdb_h_maxhostnamelen=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_header_netdb_h_maxhostnamelen" >&5
-$as_echo "$krb5_cv_header_netdb_h_maxhostnamelen" >&6; }
-
-GSSRPC__SYS_PARAM_H='/* #include <sys/param.h> */'
-GSSRPC__NETDB_H='/* #include <netdb.h> */'
-if test $krb5_cv_header_sys_param_h_maxhostnamelen = yes; then
- GSSRPC__SYS_PARAM_H='#include <sys/param.h>'
-else
- if test $krb5_cv_header_netdb_h_maxhostnamelen = yes; then
- GSSRPC__NETDB_H='#include <netdb.h>'
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: can't find MAXHOSTNAMELEN definition; faking it" >&5
-$as_echo "$as_me: WARNING: can't find MAXHOSTNAMELEN definition; faking it" >&2;}
- fi
-fi
-
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for BSD type aliases" >&5
-$as_echo_n "checking for BSD type aliases... " >&6; }
-if ${krb5_cv_type_bsdaliases+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <sys/types.h>
- #if HAVE_UNISTD_H
- #include <unistd.h>
- #endif
-
-int
-main ()
-{
-u_char c;
- u_int i;
- u_long l;
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- krb5_cv_type_bsdaliases=yes
-else
- krb5_cv_type_bsdaliases=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $krb5_cv_type_bsdaliases" >&5
-$as_echo "$krb5_cv_type_bsdaliases" >&6; }
-if test $krb5_cv_type_bsdaliases = yes; then
- GSSRPC__BSD_TYPEALIASES='/* #undef GSSRPC__BSD_TYPEALIASES */'
-else
- GSSRPC__BSD_TYPEALIASES='#define GSSRPC__BSD_TYPEALIASES 1'
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking return type of setrpcent" >&5
-$as_echo_n "checking return type of setrpcent... " >&6; }
-if ${k5_cv_type_setrpcent+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
- extern void setrpcent();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- k5_cv_type_setrpcent=void
-else
- k5_cv_type_setrpcent=int
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $k5_cv_type_setrpcent" >&5
-$as_echo "$k5_cv_type_setrpcent" >&6; }
-
-cat >>confdefs.h <<_ACEOF
-#define SETRPCENT_TYPE $k5_cv_type_setrpcent
-_ACEOF
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking return type of endrpcent" >&5
-$as_echo_n "checking return type of endrpcent... " >&6; }
-if ${k5_cv_type_endrpcent+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <netdb.h>
- extern void endrpcent();
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- k5_cv_type_endrpcent=void
-else
- k5_cv_type_endrpcent=int
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $k5_cv_type_endrpcent" >&5
-$as_echo "$k5_cv_type_endrpcent" >&6; }
-
-cat >>confdefs.h <<_ACEOF
-#define ENDRPCENT_TYPE $k5_cv_type_endrpcent
-_ACEOF
-
-ac_config_files="$ac_config_files include/gssrpc/types.h:include/gssrpc/types.hin"
-
-
-# for pkinit
-# Check whether --enable-pkinit was given.
-if test "${enable_pkinit+set}" = set; then :
- enableval=$enable_pkinit;
-else
- enable_pkinit=try
-fi
-
-if test "$enable_pkinit" = yes || test "$enable_pkinit" = try; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for a recent enough OpenSSL" >&5
-$as_echo_n "checking for a recent enough OpenSSL... " >&6; }
-if ${k5_cv_openssl_version_okay+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-#include <openssl/opensslv.h>
-#if OPENSSL_VERSION_NUMBER < 0x10000000L
-# error openssl is too old, need 1.0.0
-#endif
-int i = 1;
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
- k5_cv_openssl_version_okay=yes
-else
- k5_cv_openssl_version_okay=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $k5_cv_openssl_version_okay" >&5
-$as_echo "$k5_cv_openssl_version_okay" >&6; }
- old_LIBS="$LIBS"
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for PKCS7_get_signer_info in -lcrypto" >&5
-$as_echo_n "checking for PKCS7_get_signer_info in -lcrypto... " >&6; }
-if ${ac_cv_lib_crypto_PKCS7_get_signer_info+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypto $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char PKCS7_get_signer_info ();
-int
-main ()
-{
-return PKCS7_get_signer_info ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_crypto_PKCS7_get_signer_info=yes
-else
- ac_cv_lib_crypto_PKCS7_get_signer_info=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_PKCS7_get_signer_info" >&5
-$as_echo "$ac_cv_lib_crypto_PKCS7_get_signer_info" >&6; }
-if test "x$ac_cv_lib_crypto_PKCS7_get_signer_info" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBCRYPTO 1
-_ACEOF
-
- LIBS="-lcrypto $LIBS"
-
-fi
-
- for ac_func in EVP_PKEY_get_bn_param
-do :
- ac_fn_c_check_func "$LINENO" "EVP_PKEY_get_bn_param" "ac_cv_func_EVP_PKEY_get_bn_param"
-if test "x$ac_cv_func_EVP_PKEY_get_bn_param" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_EVP_PKEY_GET_BN_PARAM 1
-_ACEOF
-
-fi
-done
-
- LIBS="$old_LIBS"
-fi
-if test "$k5_cv_openssl_version_okay" = yes && (test "$enable_pkinit" = yes || test "$enable_pkinit" = try); then
- ac_config_files="$ac_config_files plugins/preauth/pkinit/Makefile:$srcdir/./config/pre.in:plugins/preauth/pkinit/Makefile.in:plugins/preauth/pkinit/deps:$srcdir/./config/post.in"
-
-
-
- ac_config_files="$ac_config_files tests/softpkcs11/Makefile:$srcdir/./config/pre.in:tests/softpkcs11/Makefile.in:tests/softpkcs11/deps:$srcdir/./config/post.in"
-
-
-
- PKINIT=yes
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for CMS_get0_content in -lcrypto" >&5
-$as_echo_n "checking for CMS_get0_content in -lcrypto... " >&6; }
-if ${ac_cv_lib_crypto_CMS_get0_content+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypto $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char CMS_get0_content ();
-int
-main ()
-{
-return CMS_get0_content ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_crypto_CMS_get0_content=yes
-else
- ac_cv_lib_crypto_CMS_get0_content=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_CMS_get0_content" >&5
-$as_echo "$ac_cv_lib_crypto_CMS_get0_content" >&6; }
-if test "x$ac_cv_lib_crypto_CMS_get0_content" = xyes; then :
-
-$as_echo "#define HAVE_OPENSSL_CMS 1" >>confdefs.h
-
-fi
-
-elif test "$k5_cv_openssl_version_okay" = no && test "$enable_pkinit" = yes; then
- as_fn_error $? "Version of OpenSSL is too old; cannot enable PKINIT." "$LINENO" 5
-else
-
-$as_echo "#define DISABLE_PKINIT 1" >>confdefs.h
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: Disabling PKINIT support." >&5
-$as_echo "$as_me: Disabling PKINIT support." >&6;}
- PKINIT=no
-fi
-
-
-# for lib/apputils
-ac_fn_c_check_func "$LINENO" "daemon" "ac_cv_func_daemon"
-if test "x$ac_cv_func_daemon" = xyes; then :
- $as_echo "#define HAVE_DAEMON 1" >>confdefs.h
-
-else
- case " $LIBOBJS " in
- *" daemon.$ac_objext "* ) ;;
- *) LIBOBJS="$LIBOBJS daemon.$ac_objext"
- ;;
-esac
-
-fi
-
-
-
-# For Python tests. Python version 3.2.4 is required as prior
-# versions do not accept string input to subprocess.Popen.communicate
-# when universal_newlines is set.
-PYTHON_MINVERSION=3.2.4
-
-# Extract the first word of "python3", so it can be a program name with args.
-set dummy python3; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_PYTHON+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$PYTHON"; then
- ac_cv_prog_PYTHON="$PYTHON" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_PYTHON="python3"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-PYTHON=$ac_cv_prog_PYTHON
-if test -n "$PYTHON"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PYTHON" >&5
-$as_echo "$PYTHON" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-if test x"$PYTHON" = x; then
- # Extract the first word of "python", so it can be a program name with args.
-set dummy python; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_PYTHON+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- if test -n "$PYTHON"; then
- ac_cv_prog_PYTHON="$PYTHON" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_prog_PYTHON="python"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
-fi
-fi
-PYTHON=$ac_cv_prog_PYTHON
-if test -n "$PYTHON"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PYTHON" >&5
-$as_echo "$PYTHON" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-HAVE_PYTHON=no
-if test x"$PYTHON" != x; then
- wantver="(sys.hexversion >= 0x30204F0)"
- if "$PYTHON" -c "import sys; sys.exit(not $wantver and 1 or 0)"; then
- HAVE_PYTHON=yes
- fi
-fi
-
-
-# For cmocka tests.
-CMOCKA_LIBS=
-HAVE_CMOCKA=no
-HAVE_CMOCKA_H=no
-HAVE_CMOCKA_LIB=no
-ac_fn_c_check_header_compile "$LINENO" "cmocka.h" "ac_cv_header_cmocka_h" "
-#include <stdarg.h>
-#include <stddef.h>
-#include <setjmp.h>
-"
-if test "x$ac_cv_header_cmocka_h" = xyes; then :
- HAVE_CMOCKA_H=yes
-else
- :
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for _cmocka_run_group_tests in -lcmocka" >&5
-$as_echo_n "checking for _cmocka_run_group_tests in -lcmocka... " >&6; }
-if ${ac_cv_lib_cmocka__cmocka_run_group_tests+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcmocka $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char _cmocka_run_group_tests ();
-int
-main ()
-{
-return _cmocka_run_group_tests ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_cmocka__cmocka_run_group_tests=yes
-else
- ac_cv_lib_cmocka__cmocka_run_group_tests=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_cmocka__cmocka_run_group_tests" >&5
-$as_echo "$ac_cv_lib_cmocka__cmocka_run_group_tests" >&6; }
-if test "x$ac_cv_lib_cmocka__cmocka_run_group_tests" = xyes; then :
- HAVE_CMOCKA_LIB=yes
-fi
-
-if test "$HAVE_CMOCKA_LIB" = yes && test "$HAVE_CMOCKA_H" = yes; then
- HAVE_CMOCKA=yes
- CMOCKA_LIBS='-lcmocka'
-
-$as_echo "#define HAVE_CMOCKA 1" >>confdefs.h
-
-fi
-
-
-
-# For URI lookup tests. Requires resolv_wrapper >= 1.1.5 for URI
-# support.
-HAVE_RESOLV_WRAPPER=0
-if test -n "$PKG_CONFIG" && \
- { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"resolv_wrapper >= 1.1.5\""; } >&5
- ($PKG_CONFIG --exists --print-errors "resolv_wrapper >= 1.1.5") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; then
- HAVE_RESOLV_WRAPPER=1
-fi
-
-
-# for plugins/kdb/db2
-
-# AIX is unusual in that it wants all symbols resolved at link time
-# Fortunately, it will allow us to link the kdb library now, even if
-# it is linked again later.
-case $krb5_cv_host in
-*-*-aix*)
- DB_EXTRA_LIBS=-ldb
- ;;
-*)
- DB_EXTRA_LIBS=
- ;;
-esac
-
-
-
-
-# Warn about possible thread safety issues. These functions have all
-# been checked for previously.
-tsfuncs="getpwnam_r getpwuid_r gethostbyname_r getservbyname_r gmtime_r localtime_r"
-if test "$enable_thread_support" = yes; then
- tsmissing=""
- for ts in $tsfuncs; do
- if eval "test \"\${ac_cv_func_$ts}\" != yes"; then
- tsmissing="$tsmissing $ts"
- fi
- done
- if test "$ac_cv_func_res_nsearch/$ac_cv_lib_resolv_res_nsearch" = "no/no"; then
- tsmissing="$tsmissing res_nsearch"
- fi
- if test "$tsmissing" != ""; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Some functions that are needed for library thread" >&5
-$as_echo "$as_me: WARNING: Some functions that are needed for library thread" >&2;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: safety appear to be missing." >&5
-$as_echo "$as_me: WARNING: safety appear to be missing." >&2;}
- for ts in $tsmissing; do
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: missing thread-safe function: $ts" >&5
-$as_echo "$as_me: WARNING: missing thread-safe function: $ts" >&2;}
- done
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Without these functions, the installed libraries" >&5
-$as_echo "$as_me: WARNING: Without these functions, the installed libraries" >&2;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: may not be thread-safe." >&5
-$as_echo "$as_me: WARNING: may not be thread-safe." >&2;}
- fi # tsmissing not empty
-fi # enable_thread_support
-
-# Sadly, we seem to have accidentally committed ourselves in 1.4 to
-# an ABI that includes the existence of libkrb5support.0 even
-# though random apps should never use anything from it. And on
-# the Mac, to which that didn't apply, we can't use major version 0.
-
-case $krb5_cv_host in
-*-*-darwin* | *-*-rhapsody*) SUPPORTLIB_MAJOR=1 ;;
-*) SUPPORTLIB_MAJOR=0 ;;
-esac
-
-
-
-if test "$COM_ERR_VERSION" = k5 ; then
- ac_config_files="$ac_config_files util/et/Makefile:$srcdir/./config/pre.in:util/et/Makefile.in:util/et/deps:$srcdir/./config/post.in"
-
-
-
-fi
-if test "$SS_VERSION" = k5 ; then
- ac_config_files="$ac_config_files util/ss/Makefile:$srcdir/./config/pre.in:util/ss/Makefile.in:util/ss/deps:$srcdir/./config/post.in"
-
-
-
-fi
-
-
-ldap_plugin_dir=""
-ldap_lib=""
-if test -n "$OPENLDAP_PLUGIN"; then
- for ac_header in ldap.h lber.h
-do :
- as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
- cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
- :
-else
- as_fn_error $? "$ac_header not found" "$LINENO" 5
-fi
-
-done
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ldap_str2dn in -lldap" >&5
-$as_echo_n "checking for ldap_str2dn in -lldap... " >&6; }
-if ${ac_cv_lib_ldap_ldap_str2dn+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lldap $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char ldap_str2dn ();
-int
-main ()
-{
-return ldap_str2dn ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_ldap_ldap_str2dn=yes
-else
- ac_cv_lib_ldap_ldap_str2dn=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ldap_ldap_str2dn" >&5
-$as_echo "$ac_cv_lib_ldap_ldap_str2dn" >&6; }
-if test "x$ac_cv_lib_ldap_ldap_str2dn" = xyes; then :
- :
-else
- as_fn_error $? "libldap not found or missing ldap_str2dn" "$LINENO" 5
-fi
-
-
- BER_OKAY=0
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ber_init in -lldap" >&5
-$as_echo_n "checking for ber_init in -lldap... " >&6; }
-if ${ac_cv_lib_ldap_ber_init+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lldap $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char ber_init ();
-int
-main ()
-{
-return ber_init ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_ldap_ber_init=yes
-else
- ac_cv_lib_ldap_ber_init=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ldap_ber_init" >&5
-$as_echo "$ac_cv_lib_ldap_ber_init" >&6; }
-if test "x$ac_cv_lib_ldap_ber_init" = xyes; then :
- BER_OKAY=1
-fi
-
- if test "$BER_OKAY" = "1"; then
- LDAP_LIBS='-lldap'
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ber_init in -llber" >&5
-$as_echo_n "checking for ber_init in -llber... " >&6; }
-if ${ac_cv_lib_lber_ber_init+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-llber $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char ber_init ();
-int
-main ()
-{
-return ber_init ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_lber_ber_init=yes
-else
- ac_cv_lib_lber_ber_init=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lber_ber_init" >&5
-$as_echo "$ac_cv_lib_lber_ber_init" >&6; }
-if test "x$ac_cv_lib_lber_ber_init" = xyes; then :
- BER_OKAY=1
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: libber not found" >&5
-$as_echo "$as_me: WARNING: libber not found" >&2;}
-fi
-
- if test "$BER_OKAY" = "1"; then
- LDAP_LIBS='-lldap -llber'
- else
- as_fn_error $? "\"BER library missing - cannot build LDAP database module\"" "$LINENO" 5
- fi
- fi
-
-$as_echo "#define ENABLE_LDAP 1" >>confdefs.h
-
-
-
- for ac_header in sasl/sasl.h
-do :
- ac_fn_c_check_header_mongrel "$LINENO" "sasl/sasl.h" "ac_cv_header_sasl_sasl_h" "$ac_includes_default"
-if test "x$ac_cv_header_sasl_sasl_h" = xyes; then :
- cat >>confdefs.h <<_ACEOF
-#define HAVE_SASL_SASL_H 1
-_ACEOF
- HAVE_SASL=yes
-else
- HAVE_SASL=no
-fi
-
-done
-
-
- if test "$HAVE_SASL" = no; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: not building LDAP SASL support" >&5
-$as_echo "$as_me: WARNING: not building LDAP SASL support" >&2;}
- fi
-
- ac_config_files="$ac_config_files plugins/kdb/ldap/Makefile:$srcdir/./config/pre.in:plugins/kdb/ldap/Makefile.in:plugins/kdb/ldap/deps:$srcdir/./config/post.in"
-
-
-
- ac_config_files="$ac_config_files plugins/kdb/ldap/ldap_util/Makefile:$srcdir/./config/pre.in:plugins/kdb/ldap/ldap_util/Makefile.in:plugins/kdb/ldap/ldap_util/deps:$srcdir/./config/post.in"
-
-
-
- ac_config_files="$ac_config_files plugins/kdb/ldap/libkdb_ldap/Makefile:$srcdir/./config/pre.in:plugins/kdb/ldap/libkdb_ldap/Makefile.in:plugins/kdb/ldap/libkdb_ldap/deps:$srcdir/./config/post.in"
-
-
-
- ldap_plugin_dir='plugins/kdb/ldap plugins/kdb/ldap/ldap_util'
- LDAP=yes
-else
- LDAP=no
-fi
-
-
-# This check is for plugins/preauth/securid_sam2
-sam2_plugin=""
-old_CFLAGS=$CFLAGS
-CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for SD_Init in -laceclnt" >&5
-$as_echo_n "checking for SD_Init in -laceclnt... " >&6; }
-if ${ac_cv_lib_aceclnt_SD_Init+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-laceclnt $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char SD_Init ();
-int
-main ()
-{
-return SD_Init ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_aceclnt_SD_Init=yes
-else
- ac_cv_lib_aceclnt_SD_Init=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_aceclnt_SD_Init" >&5
-$as_echo "$ac_cv_lib_aceclnt_SD_Init" >&6; }
-if test "x$ac_cv_lib_aceclnt_SD_Init" = xyes; then :
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: Enabling RSA securID support" >&5
-$as_echo "$as_me: Enabling RSA securID support" >&6;}
- ac_config_files="$ac_config_files plugins/preauth/securid_sam2/Makefile:$srcdir/./config/pre.in:plugins/preauth/securid_sam2/Makefile.in:plugins/preauth/securid_sam2/deps:$srcdir/./config/post.in"
-
-
-
- sam2_plugin=plugins/preauth/securid_sam2
-
-fi
-
-
-CFLAGS=$old_CFLAGS
-
-lmdb_plugin_dir=""
-HAVE_LMDB=no
-
-# Check whether --with-lmdb was given.
-if test "${with_lmdb+set}" = set; then :
- withval=$with_lmdb;
-else
- withval=auto
-fi
-
-if test "$withval" = auto -o "$withval" = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for mdb_env_create in -llmdb" >&5
-$as_echo_n "checking for mdb_env_create in -llmdb... " >&6; }
-if ${ac_cv_lib_lmdb_mdb_env_create+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-llmdb $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-/* Override any GCC internal prototype to avoid an error.
- Use char because int might match the return type of a GCC
- builtin and then its argument prototype would still apply. */
-#ifdef __cplusplus
-extern "C"
-#endif
-char mdb_env_create ();
-int
-main ()
-{
-return mdb_env_create ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_lmdb_mdb_env_create=yes
-else
- ac_cv_lib_lmdb_mdb_env_create=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_lmdb_mdb_env_create" >&5
-$as_echo "$ac_cv_lib_lmdb_mdb_env_create" >&6; }
-if test "x$ac_cv_lib_lmdb_mdb_env_create" = xyes; then :
- have_lmdb=true
-else
- have_lmdb=false
-fi
-
- if test "$have_lmdb" = true; then
- LMDB_LIBS=-llmdb
- HAVE_LMDB=yes
- lmdb_plugin_dir='plugins/kdb/lmdb'
- ac_config_files="$ac_config_files plugins/kdb/lmdb/Makefile:$srcdir/./config/pre.in:plugins/kdb/lmdb/Makefile.in:plugins/kdb/lmdb/deps:$srcdir/./config/post.in"
-
-
-
- elif test "$withval" = yes; then
- as_fn_error $? "liblmdb not found" "$LINENO" 5
- fi
-fi
-
-
-
-
-# Kludge for simple server --- FIXME is this the best way to do this?
-
-if test "$ac_cv_lib_socket" = "yes" -a "$ac_cv_lib_nsl" = "yes"; then
-
-$as_echo "#define BROKEN_STREAMS_SOCKETS 1" >>confdefs.h
-
-fi
-
-# Compile with libedit support in ss by default if available. Compile
-# with readline only if asked, to avoid a default GPL dependency.
-
-# Check whether --with-libedit was given.
-if test "${with_libedit+set}" = set; then :
- withval=$with_libedit;
-else
- with_libedit=default
-fi
-
-
-# Check whether --with-readline was given.
-if test "${with_readline+set}" = set; then :
- withval=$with_readline;
-else
- with_readline=no
-fi
-
-if test "x$with_readline" = xyes; then
- with_libedit=no
-fi
-RL_CFLAGS=
-RL_LIBS=
-if test "x$with_libedit" != xno; then
-
-pkg_failed=no
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for libedit" >&5
-$as_echo_n "checking for libedit... " >&6; }
-
-if test -n "$LIBEDIT_CFLAGS"; then
- pkg_cv_LIBEDIT_CFLAGS="$LIBEDIT_CFLAGS"
- elif test -n "$PKG_CONFIG"; then
- if test -n "$PKG_CONFIG" && \
- { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libedit\""; } >&5
- ($PKG_CONFIG --exists --print-errors "libedit") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; then
- pkg_cv_LIBEDIT_CFLAGS=`$PKG_CONFIG --cflags "libedit" 2>/dev/null`
- test "x$?" != "x0" && pkg_failed=yes
-else
- pkg_failed=yes
-fi
- else
- pkg_failed=untried
-fi
-if test -n "$LIBEDIT_LIBS"; then
- pkg_cv_LIBEDIT_LIBS="$LIBEDIT_LIBS"
- elif test -n "$PKG_CONFIG"; then
- if test -n "$PKG_CONFIG" && \
- { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libedit\""; } >&5
- ($PKG_CONFIG --exists --print-errors "libedit") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; then
- pkg_cv_LIBEDIT_LIBS=`$PKG_CONFIG --libs "libedit" 2>/dev/null`
- test "x$?" != "x0" && pkg_failed=yes
-else
- pkg_failed=yes
-fi
- else
- pkg_failed=untried
-fi
-
-
-
-if test $pkg_failed = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
- _pkg_short_errors_supported=yes
-else
- _pkg_short_errors_supported=no
-fi
- if test $_pkg_short_errors_supported = yes; then
- LIBEDIT_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "libedit" 2>&1`
- else
- LIBEDIT_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "libedit" 2>&1`
- fi
- # Put the nasty error message in config.log where it belongs
- echo "$LIBEDIT_PKG_ERRORS" >&5
-
- have_libedit=no
-elif test $pkg_failed = untried; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
- have_libedit=no
-else
- LIBEDIT_CFLAGS=$pkg_cv_LIBEDIT_CFLAGS
- LIBEDIT_LIBS=$pkg_cv_LIBEDIT_LIBS
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
- have_libedit=yes
-fi
- if test "x$have_libedit" = xyes; then
- RL_CFLAGS=$LIBEDIT_CFLAGS
- RL_LIBS=$LIBEDIT_LIBS
-
-$as_echo "#define HAVE_LIBEDIT 1" >>confdefs.h
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: Using libedit for readline support" >&5
-$as_echo "$as_me: Using libedit for readline support" >&6;}
- elif test "x$with_libedit" = xyes; then
- # We were explicitly asked for libedit and couldn't find it.
- as_fn_error $? "Could not detect libedit with pkg-config" "$LINENO" 5
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: Not using any readline support" >&5
-$as_echo "$as_me: Not using any readline support" >&6;}
- fi
-elif test "x$with_readline" = xyes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: Using GNU Readline" >&5
-$as_echo "$as_me: Using GNU Readline" >&6;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for main in -lreadline" >&5
-$as_echo_n "checking for main in -lreadline... " >&6; }
-if ${ac_cv_lib_readline_main+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- ac_check_lib_save_LIBS=$LIBS
-LIBS="-lreadline $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h. */
-
-
-int
-main ()
-{
-return main ();
- ;
- return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
- ac_cv_lib_readline_main=yes
-else
- ac_cv_lib_readline_main=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
- conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_readline_main" >&5
-$as_echo "$ac_cv_lib_readline_main" >&6; }
-if test "x$ac_cv_lib_readline_main" = xyes; then :
- :
-else
- { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "Cannot find readline library.
-See \`config.log' for more details" "$LINENO" 5; }
-fi
-
-
-$as_echo "#define HAVE_READLINE 1" >>confdefs.h
-
- RL_LIBS='-lreadline'
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: Not using any readline support" >&5
-$as_echo "Not using any readline support" >&6; }
-fi
-
-
-
-
-# Check whether --with-system-verto was given.
-if test "${with_system_verto+set}" = set; then :
- withval=$with_system_verto;
-else
- with_system_verto=default
-fi
-
-VERTO_VERSION=k5
-if test "x$with_system_verto" != xno; then
-
-pkg_failed=no
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for libverto" >&5
-$as_echo_n "checking for libverto... " >&6; }
-
-if test -n "$VERTO_CFLAGS"; then
- pkg_cv_VERTO_CFLAGS="$VERTO_CFLAGS"
- elif test -n "$PKG_CONFIG"; then
- if test -n "$PKG_CONFIG" && \
- { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libverto\""; } >&5
- ($PKG_CONFIG --exists --print-errors "libverto") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; then
- pkg_cv_VERTO_CFLAGS=`$PKG_CONFIG --cflags "libverto" 2>/dev/null`
- test "x$?" != "x0" && pkg_failed=yes
-else
- pkg_failed=yes
-fi
- else
- pkg_failed=untried
-fi
-if test -n "$VERTO_LIBS"; then
- pkg_cv_VERTO_LIBS="$VERTO_LIBS"
- elif test -n "$PKG_CONFIG"; then
- if test -n "$PKG_CONFIG" && \
- { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libverto\""; } >&5
- ($PKG_CONFIG --exists --print-errors "libverto") 2>&5
- ac_status=$?
- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
- test $ac_status = 0; }; then
- pkg_cv_VERTO_LIBS=`$PKG_CONFIG --libs "libverto" 2>/dev/null`
- test "x$?" != "x0" && pkg_failed=yes
-else
- pkg_failed=yes
-fi
- else
- pkg_failed=untried
-fi
-
-
-
-if test $pkg_failed = yes; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
- _pkg_short_errors_supported=yes
-else
- _pkg_short_errors_supported=no
-fi
- if test $_pkg_short_errors_supported = yes; then
- VERTO_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "libverto" 2>&1`
- else
- VERTO_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "libverto" 2>&1`
- fi
- # Put the nasty error message in config.log where it belongs
- echo "$VERTO_PKG_ERRORS" >&5
-
- have_sysverto=no
-elif test $pkg_failed = untried; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
- have_sysverto=no
-else
- VERTO_CFLAGS=$pkg_cv_VERTO_CFLAGS
- VERTO_LIBS=$pkg_cv_VERTO_LIBS
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
- have_sysverto=yes
-fi
- if test "x$have_sysverto" = xyes; then
- VERTO_VERSION=sys
- elif test "x$with_system_verto" = xyes; then
- as_fn_error $? "cannot detect system libverto" "$LINENO" 5
- fi
-fi
-if test "x$VERTO_VERSION" = xsys; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: Using system libverto" >&5
-$as_echo "$as_me: Using system libverto" >&6;}
-else
- VERTO_CFLAGS=
- VERTO_LIBS="-lverto"
- { $as_echo "$as_me:${as_lineno-$LINENO}: Using built-in libverto" >&5
-$as_echo "$as_me: Using built-in libverto" >&6;}
-fi
-
-
-
-
-# Extract the first word of "groff", so it can be a program name with args.
-set dummy groff; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_GROFF+:} false; then :
- $as_echo_n "(cached) " >&6
-else
- case $GROFF in
- [\\/]* | ?:[\\/]*)
- ac_cv_path_GROFF="$GROFF" # Let the user override the test with a path.
- ;;
- *)
- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- for ac_exec_ext in '' $ac_executable_extensions; do
- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
- ac_cv_path_GROFF="$as_dir/$ac_word$ac_exec_ext"
- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
- break 2
- fi
-done
- done
-IFS=$as_save_IFS
-
- ;;
-esac
-fi
-GROFF=$ac_cv_path_GROFF
-if test -n "$GROFF"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $GROFF" >&5
-$as_echo "$GROFF" >&6; }
-else
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-
-# Make localedir work in autoconf 2.5x.
-if test "${localedir+set}" != set; then
- localedir='$(datadir)/locale'
-fi
-
-
-# For KCM lib/krb5/ccache to build KCM Mach RPC support for macOS only.
-case $host in
-*-*-darwin* | *-*-rhapsody*) OSX=osx ;;
-*) OSX=no ;;
-esac
-
-
-# Build-time default ccache, keytab, and client keytab names. These
-# can be given as variable arguments DEFCCNAME, DEFKTNAME, and
-# DEFCKTNAME. Otherwise, we try to get the OS defaults from
-# krb5-config if we can, or fall back to hardcoded defaults.
-
-
-
-
-# Check whether --with-krb5-config was given.
-if test "${with_krb5_config+set}" = set; then :
- withval=$with_krb5_config;
-else
- with_krb5_config=krb5-config
-fi
-
-if test "x$with_krb5_config" != xno; then
- if test "x$with_krb5_config" = xyes; then
- with_krb5_config=krb5-config
- fi
- if $with_krb5_config --help 2>&1 | grep defccname >/dev/null; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: Using $with_krb5_config for build defaults" >&5
-$as_echo "$as_me: Using $with_krb5_config for build defaults" >&6;}
- : "${DEFCCNAME=`$with_krb5_config --defccname`}"
- : "${DEFKTNAME=`$with_krb5_config --defktname`}"
- : "${DEFCKTNAME=`$with_krb5_config --defcktname`}"
- fi
-fi
-if test "${DEFCCNAME+set}" != set; then
- case $host in
- *-*-darwin[0-9].* | *-*-darwin10.*)
- # Use the normal default for macOS 10.6 (Darwin 10) and prior.
- ;;
- *-*-darwin*)
- # For macOS 10.7 (Darwin 11) and later, the native ccache uses
- # the KCM daemon.
- DEFCCNAME=KCM:
- ;;
- esac
- if test "${DEFCCNAME+set}" != set; then
- DEFCCNAME=FILE:/tmp/krb5cc_%{uid}
- fi
-fi
-if test "${DEFKTNAME+set}" != set; then
- DEFKTNAME=FILE:/etc/krb5.keytab
-fi
-if test "${DEFCKTNAME+set}" != set; then
- _lcl_receval="$localstatedir"
-exp_localstatedir=`(test "x$prefix" = xNONE && prefix="$ac_default_prefix"
- test "x$exec_prefix" = xNONE && exec_prefix="${prefix}"
- _lcl_receval_old=''
- while test "$_lcl_receval_old" != "$_lcl_receval"; do
- _lcl_receval_old="$_lcl_receval"
- eval _lcl_receval="\"$_lcl_receval\""
- done
- echo "$_lcl_receval")`
- DEFCKTNAME=FILE:$exp_localstatedir/krb5/user/%{euid}/client.keytab
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: Default ccache name: $DEFCCNAME" >&5
-$as_echo "$as_me: Default ccache name: $DEFCCNAME" >&6;}
-{ $as_echo "$as_me:${as_lineno-$LINENO}: Default keytab name: $DEFKTNAME" >&5
-$as_echo "$as_me: Default keytab name: $DEFKTNAME" >&6;}
-{ $as_echo "$as_me:${as_lineno-$LINENO}: Default client keytab name: $DEFCKTNAME" >&5
-$as_echo "$as_me: Default client keytab name: $DEFCKTNAME" >&6;}
-
-cat >>confdefs.h <<_ACEOF
-#define DEFCCNAME "$DEFCCNAME"
-_ACEOF
-
-
-cat >>confdefs.h <<_ACEOF
-#define DEFKTNAME "$DEFKTNAME"
-_ACEOF
-
-
-cat >>confdefs.h <<_ACEOF
-#define DEFCKTNAME "$DEFCKTNAME"
-_ACEOF
-
-
-ac_config_files="$ac_config_files build-tools/krb5-config"
-
-ac_config_files="$ac_config_files build-tools/kadm-server.pc build-tools/kadm-client.pc build-tools/kdb.pc build-tools/krb5.pc build-tools/krb5-gssapi.pc build-tools/mit-krb5.pc build-tools/mit-krb5-gssapi.pc build-tools/gssrpc.pc"
-
-
- ac_config_files="$ac_config_files ./Makefile:$srcdir/./config/pre.in:./Makefile.in:./deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files util/Makefile:$srcdir/./config/pre.in:util/Makefile.in:util/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files util/support/Makefile:$srcdir/./config/pre.in:util/support/Makefile.in:util/support/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files util/profile/Makefile:$srcdir/./config/pre.in:util/profile/Makefile.in:util/profile/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files util/profile/testmod/Makefile:$srcdir/./config/pre.in:util/profile/testmod/Makefile.in:util/profile/testmod/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files util/verto/Makefile:$srcdir/./config/pre.in:util/verto/Makefile.in:util/verto/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/Makefile:$srcdir/./config/pre.in:lib/Makefile.in:lib/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/kdb/Makefile:$srcdir/./config/pre.in:lib/kdb/Makefile.in:lib/kdb/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/Makefile:$srcdir/./config/pre.in:lib/crypto/Makefile.in:lib/crypto/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/krb/Makefile:$srcdir/./config/pre.in:lib/crypto/krb/Makefile.in:lib/crypto/krb/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/crypto_tests/Makefile:$srcdir/./config/pre.in:lib/crypto/crypto_tests/Makefile.in:lib/crypto/crypto_tests/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/builtin/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/Makefile.in:lib/crypto/builtin/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/builtin/des/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/des/Makefile.in:lib/crypto/builtin/des/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/builtin/aes/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/aes/Makefile.in:lib/crypto/builtin/aes/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/builtin/camellia/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/camellia/Makefile.in:lib/crypto/builtin/camellia/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/builtin/md4/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/md4/Makefile.in:lib/crypto/builtin/md4/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/builtin/md5/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/md5/Makefile.in:lib/crypto/builtin/md5/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/builtin/sha1/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/sha1/Makefile.in:lib/crypto/builtin/sha1/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/builtin/sha2/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/sha2/Makefile.in:lib/crypto/builtin/sha2/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/builtin/enc_provider/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/enc_provider/Makefile.in:lib/crypto/builtin/enc_provider/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/builtin/hash_provider/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/hash_provider/Makefile.in:lib/crypto/builtin/hash_provider/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/openssl/Makefile:$srcdir/./config/pre.in:lib/crypto/openssl/Makefile.in:lib/crypto/openssl/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/openssl/des/Makefile:$srcdir/./config/pre.in:lib/crypto/openssl/des/Makefile.in:lib/crypto/openssl/des/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/openssl/enc_provider/Makefile:$srcdir/./config/pre.in:lib/crypto/openssl/enc_provider/Makefile.in:lib/crypto/openssl/enc_provider/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/crypto/openssl/hash_provider/Makefile:$srcdir/./config/pre.in:lib/crypto/openssl/hash_provider/Makefile.in:lib/crypto/openssl/hash_provider/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/krb5/Makefile:$srcdir/./config/pre.in:lib/krb5/Makefile.in:lib/krb5/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/krb5/error_tables/Makefile:$srcdir/./config/pre.in:lib/krb5/error_tables/Makefile.in:lib/krb5/error_tables/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/krb5/asn.1/Makefile:$srcdir/./config/pre.in:lib/krb5/asn.1/Makefile.in:lib/krb5/asn.1/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/krb5/ccache/Makefile:$srcdir/./config/pre.in:lib/krb5/ccache/Makefile.in:lib/krb5/ccache/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/krb5/keytab/Makefile:$srcdir/./config/pre.in:lib/krb5/keytab/Makefile.in:lib/krb5/keytab/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/krb5/krb/Makefile:$srcdir/./config/pre.in:lib/krb5/krb/Makefile.in:lib/krb5/krb/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/krb5/rcache/Makefile:$srcdir/./config/pre.in:lib/krb5/rcache/Makefile.in:lib/krb5/rcache/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/krb5/os/Makefile:$srcdir/./config/pre.in:lib/krb5/os/Makefile.in:lib/krb5/os/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/krb5/unicode/Makefile:$srcdir/./config/pre.in:lib/krb5/unicode/Makefile.in:lib/krb5/unicode/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/gssapi/Makefile:$srcdir/./config/pre.in:lib/gssapi/Makefile.in:lib/gssapi/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/gssapi/generic/Makefile:$srcdir/./config/pre.in:lib/gssapi/generic/Makefile.in:lib/gssapi/generic/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/gssapi/krb5/Makefile:$srcdir/./config/pre.in:lib/gssapi/krb5/Makefile.in:lib/gssapi/krb5/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/gssapi/spnego/Makefile:$srcdir/./config/pre.in:lib/gssapi/spnego/Makefile.in:lib/gssapi/spnego/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/gssapi/mechglue/Makefile:$srcdir/./config/pre.in:lib/gssapi/mechglue/Makefile.in:lib/gssapi/mechglue/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/rpc/Makefile:$srcdir/./config/pre.in:lib/rpc/Makefile.in:lib/rpc/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/rpc/unit-test/Makefile:$srcdir/./config/pre.in:lib/rpc/unit-test/Makefile.in:lib/rpc/unit-test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/kadm5/Makefile:$srcdir/./config/pre.in:lib/kadm5/Makefile.in:lib/kadm5/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/kadm5/clnt/Makefile:$srcdir/./config/pre.in:lib/kadm5/clnt/Makefile.in:lib/kadm5/clnt/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/kadm5/srv/Makefile:$srcdir/./config/pre.in:lib/kadm5/srv/Makefile.in:lib/kadm5/srv/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/krad/Makefile:$srcdir/./config/pre.in:lib/krad/Makefile.in:lib/krad/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files lib/apputils/Makefile:$srcdir/./config/pre.in:lib/apputils/Makefile.in:lib/apputils/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files kdc/Makefile:$srcdir/./config/pre.in:kdc/Makefile.in:kdc/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files kprop/Makefile:$srcdir/./config/pre.in:kprop/Makefile.in:kprop/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files config-files/Makefile:$srcdir/./config/pre.in:config-files/Makefile.in:config-files/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files build-tools/Makefile:$srcdir/./config/pre.in:build-tools/Makefile.in:build-tools/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files man/Makefile:$srcdir/./config/pre.in:man/Makefile.in:man/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files doc/Makefile:$srcdir/./config/pre.in:doc/Makefile.in:doc/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files include/Makefile:$srcdir/./config/pre.in:include/Makefile.in:include/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/certauth/test/Makefile:$srcdir/./config/pre.in:plugins/certauth/test/Makefile.in:plugins/certauth/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/gssapi/negoextest/Makefile:$srcdir/./config/pre.in:plugins/gssapi/negoextest/Makefile.in:plugins/gssapi/negoextest/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/hostrealm/test/Makefile:$srcdir/./config/pre.in:plugins/hostrealm/test/Makefile.in:plugins/hostrealm/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/localauth/test/Makefile:$srcdir/./config/pre.in:plugins/localauth/test/Makefile.in:plugins/localauth/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kadm5_hook/test/Makefile:$srcdir/./config/pre.in:plugins/kadm5_hook/test/Makefile.in:plugins/kadm5_hook/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kadm5_auth/test/Makefile:$srcdir/./config/pre.in:plugins/kadm5_auth/test/Makefile.in:plugins/kadm5_auth/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/pwqual/test/Makefile:$srcdir/./config/pre.in:plugins/pwqual/test/Makefile.in:plugins/pwqual/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/audit/Makefile:$srcdir/./config/pre.in:plugins/audit/Makefile.in:plugins/audit/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/audit/test/Makefile:$srcdir/./config/pre.in:plugins/audit/test/Makefile.in:plugins/audit/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kdb/db2/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/Makefile.in:plugins/kdb/db2/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kdb/db2/libdb2/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/Makefile.in:plugins/kdb/db2/libdb2/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kdb/db2/libdb2/hash/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/hash/Makefile.in:plugins/kdb/db2/libdb2/hash/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kdb/db2/libdb2/btree/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/btree/Makefile.in:plugins/kdb/db2/libdb2/btree/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kdb/db2/libdb2/db/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/db/Makefile.in:plugins/kdb/db2/libdb2/db/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kdb/db2/libdb2/mpool/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/mpool/Makefile.in:plugins/kdb/db2/libdb2/mpool/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kdb/db2/libdb2/recno/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/recno/Makefile.in:plugins/kdb/db2/libdb2/recno/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kdb/db2/libdb2/test/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/test/Makefile.in:plugins/kdb/db2/libdb2/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kdb/test/Makefile:$srcdir/./config/pre.in:plugins/kdb/test/Makefile.in:plugins/kdb/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/kdcpolicy/test/Makefile:$srcdir/./config/pre.in:plugins/kdcpolicy/test/Makefile.in:plugins/kdcpolicy/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/preauth/otp/Makefile:$srcdir/./config/pre.in:plugins/preauth/otp/Makefile.in:plugins/preauth/otp/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/preauth/spake/Makefile:$srcdir/./config/pre.in:plugins/preauth/spake/Makefile.in:plugins/preauth/spake/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/preauth/test/Makefile:$srcdir/./config/pre.in:plugins/preauth/test/Makefile.in:plugins/preauth/test/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/authdata/greet_client/Makefile:$srcdir/./config/pre.in:plugins/authdata/greet_client/Makefile.in:plugins/authdata/greet_client/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/authdata/greet_server/Makefile:$srcdir/./config/pre.in:plugins/authdata/greet_server/Makefile.in:plugins/authdata/greet_server/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files plugins/tls/k5tls/Makefile:$srcdir/./config/pre.in:plugins/tls/k5tls/Makefile.in:plugins/tls/k5tls/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files clients/Makefile:$srcdir/./config/pre.in:clients/Makefile.in:clients/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files clients/klist/Makefile:$srcdir/./config/pre.in:clients/klist/Makefile.in:clients/klist/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files clients/kinit/Makefile:$srcdir/./config/pre.in:clients/kinit/Makefile.in:clients/kinit/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files clients/kvno/Makefile:$srcdir/./config/pre.in:clients/kvno/Makefile.in:clients/kvno/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files clients/kdestroy/Makefile:$srcdir/./config/pre.in:clients/kdestroy/Makefile.in:clients/kdestroy/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files clients/kpasswd/Makefile:$srcdir/./config/pre.in:clients/kpasswd/Makefile.in:clients/kpasswd/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files clients/ksu/Makefile:$srcdir/./config/pre.in:clients/ksu/Makefile.in:clients/ksu/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files clients/kswitch/Makefile:$srcdir/./config/pre.in:clients/kswitch/Makefile.in:clients/kswitch/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files kadmin/Makefile:$srcdir/./config/pre.in:kadmin/Makefile.in:kadmin/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files kadmin/cli/Makefile:$srcdir/./config/pre.in:kadmin/cli/Makefile.in:kadmin/cli/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files kadmin/dbutil/Makefile:$srcdir/./config/pre.in:kadmin/dbutil/Makefile.in:kadmin/dbutil/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files kadmin/ktutil/Makefile:$srcdir/./config/pre.in:kadmin/ktutil/Makefile.in:kadmin/ktutil/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files kadmin/server/Makefile:$srcdir/./config/pre.in:kadmin/server/Makefile.in:kadmin/server/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files appl/Makefile:$srcdir/./config/pre.in:appl/Makefile.in:appl/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files appl/sample/Makefile:$srcdir/./config/pre.in:appl/sample/Makefile.in:appl/sample/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files appl/sample/sclient/Makefile:$srcdir/./config/pre.in:appl/sample/sclient/Makefile.in:appl/sample/sclient/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files appl/sample/sserver/Makefile:$srcdir/./config/pre.in:appl/sample/sserver/Makefile.in:appl/sample/sserver/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files appl/simple/Makefile:$srcdir/./config/pre.in:appl/simple/Makefile.in:appl/simple/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files appl/simple/client/Makefile:$srcdir/./config/pre.in:appl/simple/client/Makefile.in:appl/simple/client/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files appl/simple/server/Makefile:$srcdir/./config/pre.in:appl/simple/server/Makefile.in:appl/simple/server/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files appl/gss-sample/Makefile:$srcdir/./config/pre.in:appl/gss-sample/Makefile.in:appl/gss-sample/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files appl/user_user/Makefile:$srcdir/./config/pre.in:appl/user_user/Makefile.in:appl/user_user/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files tests/Makefile:$srcdir/./config/pre.in:tests/Makefile.in:tests/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files tests/asn.1/Makefile:$srcdir/./config/pre.in:tests/asn.1/Makefile.in:tests/asn.1/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files tests/create/Makefile:$srcdir/./config/pre.in:tests/create/Makefile.in:tests/create/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files tests/hammer/Makefile:$srcdir/./config/pre.in:tests/hammer/Makefile.in:tests/hammer/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files tests/verify/Makefile:$srcdir/./config/pre.in:tests/verify/Makefile.in:tests/verify/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files tests/gssapi/Makefile:$srcdir/./config/pre.in:tests/gssapi/Makefile.in:tests/gssapi/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files tests/threads/Makefile:$srcdir/./config/pre.in:tests/threads/Makefile.in:tests/threads/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files tests/shlib/Makefile:$srcdir/./config/pre.in:tests/shlib/Makefile.in:tests/shlib/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files tests/gss-threads/Makefile:$srcdir/./config/pre.in:tests/gss-threads/Makefile.in:tests/gss-threads/deps:$srcdir/./config/post.in"
- ac_config_files="$ac_config_files tests/misc/Makefile:$srcdir/./config/pre.in:tests/misc/Makefile.in:tests/misc/deps:$srcdir/./config/post.in"
-
-cat >confcache <<\_ACEOF
-# This file is a shell script that caches the results of configure
-# tests run on this system so they can be shared between configure
-# scripts and configure runs, see configure's option --config-cache.
-# It is not useful on other systems. If it contains results you don't
-# want to keep, you may remove or edit it.
-#
-# config.status only pays attention to the cache file if you give it
-# the --recheck option to rerun configure.
-#
-# `ac_cv_env_foo' variables (set or unset) will be overridden when
-# loading this file, other *unset* `ac_cv_foo' will be assigned the
-# following values.
-
-_ACEOF
-
-# The following way of writing the cache mishandles newlines in values,
-# but we know of no workaround that is simple, portable, and efficient.
-# So, we kill variables containing newlines.
-# Ultrix sh set writes to stderr and can't be redirected directly,
-# and sets the high bit in the cache file unless we assign to the vars.
-(
- for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do
- eval ac_val=\$$ac_var
- case $ac_val in #(
- *${as_nl}*)
- case $ac_var in #(
- *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-$as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
- esac
- case $ac_var in #(
- _ | IFS | as_nl) ;; #(
- BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
- *) { eval $ac_var=; unset $ac_var;} ;;
- esac ;;
- esac
- done
-
- (set) 2>&1 |
- case $as_nl`(ac_space=' '; set) 2>&1` in #(
- *${as_nl}ac_space=\ *)
- # `set' does not quote correctly, so add quotes: double-quote
- # substitution turns \\\\ into \\, and sed turns \\ into \.
- sed -n \
- "s/'/'\\\\''/g;
- s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
- ;; #(
- *)
- # `set' quotes correctly as required by POSIX, so do not add quotes.
- sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
- ;;
- esac |
- sort
-) |
- sed '
- /^ac_cv_env_/b end
- t clear
- :clear
- s/^\([^=]*\)=\(.*[{}].*\)$/test "${\1+set}" = set || &/
- t end
- s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/
- :end' >>confcache
-if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
- if test -w "$cache_file"; then
- if test "x$cache_file" != "x/dev/null"; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
-$as_echo "$as_me: updating cache $cache_file" >&6;}
- if test ! -f "$cache_file" || test -h "$cache_file"; then
- cat confcache >"$cache_file"
- else
- case $cache_file in #(
- */* | ?:*)
- mv -f confcache "$cache_file"$$ &&
- mv -f "$cache_file"$$ "$cache_file" ;; #(
- *)
- mv -f confcache "$cache_file" ;;
- esac
- fi
- fi
- else
- { $as_echo "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
-$as_echo "$as_me: not updating unwritable cache $cache_file" >&6;}
- fi
-fi
-rm -f confcache
-
-test "x$prefix" = xNONE && prefix=$ac_default_prefix
-# Let make expand exec_prefix.
-test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
-
-DEFS=-DHAVE_CONFIG_H
-
-ac_libobjs=
-ac_ltlibobjs=
-U=
-for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue
- # 1. Remove the extension, and $U if already installed.
- ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
- ac_i=`$as_echo "$ac_i" | sed "$ac_script"`
- # 2. Prepend LIBOBJDIR. When used with automake>=1.10 LIBOBJDIR
- # will be set to the directory where LIBOBJS objects are built.
- as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
- as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
-done
-LIBOBJS=$ac_libobjs
-
-LTLIBOBJS=$ac_ltlibobjs
-
-
-
-: "${CONFIG_STATUS=./config.status}"
-ac_write_fail=0
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files $CONFIG_STATUS"
-{ $as_echo "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
-$as_echo "$as_me: creating $CONFIG_STATUS" >&6;}
-as_write_fail=0
-cat >$CONFIG_STATUS <<_ASEOF || as_write_fail=1
-#! $SHELL
-# Generated by $as_me.
-# Run this file to recreate the current configuration.
-# Compiler output produced by configure, useful for debugging
-# configure, is in config.log if it exists.
-
-debug=false
-ac_cs_recheck=false
-ac_cs_silent=false
-
-SHELL=\${CONFIG_SHELL-$SHELL}
-export SHELL
-_ASEOF
-cat >>$CONFIG_STATUS <<\_ASEOF || as_write_fail=1
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
- emulate sh
- NULLCMD=:
- # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
- # is contrary to our usage. Disable this feature.
- alias -g '${1+"$@"}'='"$@"'
- setopt NO_GLOB_SUBST
-else
- case `(set -o) 2>/dev/null` in #(
- *posix*) :
- set -o posix ;; #(
- *) :
- ;;
-esac
-fi
-
-
-as_nl='
-'
-export as_nl
-# Printing a long string crashes Solaris 7 /usr/bin/printf.
-as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo
-as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo
-# Prefer a ksh shell builtin over an external printf program on Solaris,
-# but without wasting forks for bash or zsh.
-if test -z "$BASH_VERSION$ZSH_VERSION" \
- && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then
- as_echo='print -r --'
- as_echo_n='print -rn --'
-elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then
- as_echo='printf %s\n'
- as_echo_n='printf %s'
-else
- if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then
- as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"'
- as_echo_n='/usr/ucb/echo -n'
- else
- as_echo_body='eval expr "X$1" : "X\\(.*\\)"'
- as_echo_n_body='eval
- arg=$1;
- case $arg in #(
- *"$as_nl"*)
- expr "X$arg" : "X\\(.*\\)$as_nl";
- arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;;
- esac;
- expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl"
- '
- export as_echo_n_body
- as_echo_n='sh -c $as_echo_n_body as_echo'
- fi
- export as_echo_body
- as_echo='sh -c $as_echo_body as_echo'
-fi
-
-# The user is always right.
-if test "${PATH_SEPARATOR+set}" != set; then
- PATH_SEPARATOR=:
- (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
- (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
- PATH_SEPARATOR=';'
- }
-fi
-
-
-# IFS
-# We need space, tab and new line, in precisely that order. Quoting is
-# there to prevent editors from complaining about space-tab.
-# (If _AS_PATH_WALK were called with IFS unset, it would disable word
-# splitting by setting IFS to empty value.)
-IFS=" "" $as_nl"
-
-# Find who we are. Look in the path if we contain no directory separator.
-as_myself=
-case $0 in #((
- *[\\/]* ) as_myself=$0 ;;
- *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
- IFS=$as_save_IFS
- test -z "$as_dir" && as_dir=.
- test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
- done
-IFS=$as_save_IFS
-
- ;;
-esac
-# We did not find ourselves, most probably we were run as `sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
- as_myself=$0
-fi
-if test ! -f "$as_myself"; then
- $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
- exit 1
-fi
-
-# Unset variables that we do not need and which cause bugs (e.g. in
-# pre-3.0 UWIN ksh). But do not cause bugs in bash 2.01; the "|| exit 1"
-# suppresses any "Segmentation fault" message there. '((' could
-# trigger a bug in pdksh 5.2.14.
-for as_var in BASH_ENV ENV MAIL MAILPATH
-do eval test x\${$as_var+set} = xset \
- && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# NLS nuisances.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# CDPATH.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-
-# as_fn_error STATUS ERROR [LINENO LOG_FD]
-# ----------------------------------------
-# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-# script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
- as_status=$1; test $as_status -eq 0 && as_status=1
- if test "$4"; then
- as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
- $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
- fi
- $as_echo "$as_me: error: $2" >&2
- as_fn_exit $as_status
-} # as_fn_error
-
-
-# as_fn_set_status STATUS
-# -----------------------
-# Set $? to STATUS, without forking.
-as_fn_set_status ()
-{
- return $1
-} # as_fn_set_status
-
-# as_fn_exit STATUS
-# -----------------
-# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
- set +e
- as_fn_set_status $1
- exit $1
-} # as_fn_exit
-
-# as_fn_unset VAR
-# ---------------
-# Portably unset VAR.
-as_fn_unset ()
-{
- { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-# as_fn_append VAR VALUE
-# ----------------------
-# Append the text in VALUE to the end of the definition contained in VAR. Take
-# advantage of any shell optimizations that allow amortized linear growth over
-# repeated appends, instead of the typical quadratic growth present in naive
-# implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then :
- eval 'as_fn_append ()
- {
- eval $1+=\$2
- }'
-else
- as_fn_append ()
- {
- eval $1=\$$1\$2
- }
-fi # as_fn_append
-
-# as_fn_arith ARG...
-# ------------------
-# Perform arithmetic evaluation on the ARGs, and store the result in the
-# global $as_val. Take advantage of shells that can avoid forks. The arguments
-# must be portable across $(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then :
- eval 'as_fn_arith ()
- {
- as_val=$(( $* ))
- }'
-else
- as_fn_arith ()
- {
- as_val=`expr "$@" || test $? -eq 1`
- }
-fi # as_fn_arith
-
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
- test "X`expr 00001 : '.*\(...\)'`" = X001; then
- as_expr=expr
-else
- as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
- as_basename=basename
-else
- as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
- as_dirname=dirname
-else
- as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
- X"$0" : 'X\(//\)$' \| \
- X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X/"$0" |
- sed '/^.*\/\([^/][^/]*\)\/*$/{
- s//\1/
- q
- }
- /^X\/\(\/\/\)$/{
- s//\1/
- q
- }
- /^X\/\(\/\).*/{
- s//\1/
- q
- }
- s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in #(((((
--n*)
- case `echo 'xy\c'` in
- *c*) ECHO_T=' ';; # ECHO_T is single tab character.
- xy) ECHO_C='\c';;
- *) echo `echo ksh88 bug on AIX 6.1` > /dev/null
- ECHO_T=' ';;
- esac;;
-*)
- ECHO_N='-n';;
-esac
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
- rm -f conf$$.dir/conf$$.file
-else
- rm -f conf$$.dir
- mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
- if ln -s conf$$.file conf$$ 2>/dev/null; then
- as_ln_s='ln -s'
- # ... but there are two gotchas:
- # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
- # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
- # In both cases, we have to default to `cp -pR'.
- ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
- as_ln_s='cp -pR'
- elif ln conf$$.file conf$$ 2>/dev/null; then
- as_ln_s=ln
- else
- as_ln_s='cp -pR'
- fi
-else
- as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-
-# as_fn_mkdir_p
-# -------------
-# Create "$as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
- case $as_dir in #(
- -*) as_dir=./$as_dir;;
- esac
- test -d "$as_dir" || eval $as_mkdir_p || {
- as_dirs=
- while :; do
- case $as_dir in #(
- *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
- *) as_qdir=$as_dir;;
- esac
- as_dirs="'$as_qdir' $as_dirs"
- as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
- X"$as_dir" : 'X\(//\)[^/]' \| \
- X"$as_dir" : 'X\(//\)$' \| \
- X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$as_dir" |
- sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
- s//\1/
- q
- }
- /^X\(\/\/\)[^/].*/{
- s//\1/
- q
- }
- /^X\(\/\/\)$/{
- s//\1/
- q
- }
- /^X\(\/\).*/{
- s//\1/
- q
- }
- s/.*/./; q'`
- test -d "$as_dir" && break
- done
- test -z "$as_dirs" || eval "mkdir $as_dirs"
- } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} # as_fn_mkdir_p
-if mkdir -p . 2>/dev/null; then
- as_mkdir_p='mkdir -p "$as_dir"'
-else
- test -d ./-p && rmdir ./-p
- as_mkdir_p=false
-fi
-
-
-# as_fn_executable_p FILE
-# -----------------------
-# Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
- test -f "$1" && test -x "$1"
-} # as_fn_executable_p
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
-
-# Sed expression to map a string onto a valid variable name.
-as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
-
-
-exec 6>&1
-## ----------------------------------- ##
-## Main body of $CONFIG_STATUS script. ##
-## ----------------------------------- ##
-_ASEOF
-test $as_write_fail = 0 && chmod +x $CONFIG_STATUS || ac_write_fail=1
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-# Save the log message, to keep $0 and so on meaningful, and to
-# report actual input values of CONFIG_FILES etc. instead of their
-# values after options handling.
-ac_log="
-This file was extended by Kerberos 5 $as_me 1.20.1, which was
-generated by GNU Autoconf 2.69. Invocation command line was
-
- CONFIG_FILES = $CONFIG_FILES
- CONFIG_HEADERS = $CONFIG_HEADERS
- CONFIG_LINKS = $CONFIG_LINKS
- CONFIG_COMMANDS = $CONFIG_COMMANDS
- $ $0 $@
-
-on `(hostname || uname -n) 2>/dev/null | sed 1q`
-"
-
-_ACEOF
-
-case $ac_config_files in *"
-"*) set x $ac_config_files; shift; ac_config_files=$*;;
-esac
-
-case $ac_config_headers in *"
-"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
-esac
-
-
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-# Files that config.status was made for.
-config_files="$ac_config_files"
-config_headers="$ac_config_headers"
-
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-ac_cs_usage="\
-\`$as_me' instantiates files and other configuration actions
-from templates according to the current configuration. Unless the files
-and actions are specified as TAGs, all are instantiated by default.
-
-Usage: $0 [OPTION]... [TAG]...
-
- -h, --help print this help, then exit
- -V, --version print version number and configuration settings, then exit
- --config print configuration, then exit
- -q, --quiet, --silent
- do not print progress messages
- -d, --debug don't remove temporary files
- --recheck update $as_me by reconfiguring in the same conditions
- --file=FILE[:TEMPLATE]
- instantiate the configuration file FILE
- --header=FILE[:TEMPLATE]
- instantiate the configuration header FILE
-
-Configuration files:
-$config_files
-
-Configuration headers:
-$config_headers
-
-Report bugs to <krb5-bugs@mit.edu>."
-
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
-ac_cs_version="\\
-Kerberos 5 config.status 1.20.1
-configured by $0, generated by GNU Autoconf 2.69,
- with options \\"\$ac_cs_config\\"
-
-Copyright (C) 2012 Free Software Foundation, Inc.
-This config.status script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-ac_pwd='$ac_pwd'
-srcdir='$srcdir'
-INSTALL='$INSTALL'
-AWK='$AWK'
-test -n "\$AWK" || AWK=awk
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-# The default lists apply if the user does not specify any file.
-ac_need_defaults=:
-while test $# != 0
-do
- case $1 in
- --*=?*)
- ac_option=`expr "X$1" : 'X\([^=]*\)='`
- ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
- ac_shift=:
- ;;
- --*=)
- ac_option=`expr "X$1" : 'X\([^=]*\)='`
- ac_optarg=
- ac_shift=:
- ;;
- *)
- ac_option=$1
- ac_optarg=$2
- ac_shift=shift
- ;;
- esac
-
- case $ac_option in
- # Handling of the options.
- -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
- ac_cs_recheck=: ;;
- --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
- $as_echo "$ac_cs_version"; exit ;;
- --config | --confi | --conf | --con | --co | --c )
- $as_echo "$ac_cs_config"; exit ;;
- --debug | --debu | --deb | --de | --d | -d )
- debug=: ;;
- --file | --fil | --fi | --f )
- $ac_shift
- case $ac_optarg in
- *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
- '') as_fn_error $? "missing file argument" ;;
- esac
- as_fn_append CONFIG_FILES " '$ac_optarg'"
- ac_need_defaults=false;;
- --header | --heade | --head | --hea )
- $ac_shift
- case $ac_optarg in
- *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
- esac
- as_fn_append CONFIG_HEADERS " '$ac_optarg'"
- ac_need_defaults=false;;
- --he | --h)
- # Conflict between --help and --header
- as_fn_error $? "ambiguous option: \`$1'
-Try \`$0 --help' for more information.";;
- --help | --hel | -h )
- $as_echo "$ac_cs_usage"; exit ;;
- -q | -quiet | --quiet | --quie | --qui | --qu | --q \
- | -silent | --silent | --silen | --sile | --sil | --si | --s)
- ac_cs_silent=: ;;
-
- # This is an error.
- -*) as_fn_error $? "unrecognized option: \`$1'
-Try \`$0 --help' for more information." ;;
-
- *) as_fn_append ac_config_targets " $1"
- ac_need_defaults=false ;;
-
- esac
- shift
-done
-
-ac_configure_extra_args=
-
-if $ac_cs_silent; then
- exec 6>/dev/null
- ac_configure_extra_args="$ac_configure_extra_args --silent"
-fi
-
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-if \$ac_cs_recheck; then
- set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
- shift
- \$as_echo "running CONFIG_SHELL=$SHELL \$*" >&6
- CONFIG_SHELL='$SHELL'
- export CONFIG_SHELL
- exec "\$@"
-fi
-
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-exec 5>>config.log
-{
- echo
- sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX
-## Running $as_me. ##
-_ASBOX
- $as_echo "$ac_log"
-} >&5
-
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-
-# Handling of arguments.
-for ac_config_target in $ac_config_targets
-do
- case $ac_config_target in
- "po/Makefile") CONFIG_FILES="$CONFIG_FILES po/Makefile:$srcdir/./config/pre.in:po/Makefile.in:po/deps:$srcdir/./config/post.in" ;;
- "plugins/audit/simple/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/audit/simple/Makefile:$srcdir/./config/pre.in:plugins/audit/simple/Makefile.in:plugins/audit/simple/deps:$srcdir/./config/post.in" ;;
- "include/autoconf.h") CONFIG_HEADERS="$CONFIG_HEADERS include/autoconf.h" ;;
- "include/gssrpc/types.h") CONFIG_FILES="$CONFIG_FILES include/gssrpc/types.h:include/gssrpc/types.hin" ;;
- "plugins/preauth/pkinit/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/preauth/pkinit/Makefile:$srcdir/./config/pre.in:plugins/preauth/pkinit/Makefile.in:plugins/preauth/pkinit/deps:$srcdir/./config/post.in" ;;
- "tests/softpkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES tests/softpkcs11/Makefile:$srcdir/./config/pre.in:tests/softpkcs11/Makefile.in:tests/softpkcs11/deps:$srcdir/./config/post.in" ;;
- "util/et/Makefile") CONFIG_FILES="$CONFIG_FILES util/et/Makefile:$srcdir/./config/pre.in:util/et/Makefile.in:util/et/deps:$srcdir/./config/post.in" ;;
- "util/ss/Makefile") CONFIG_FILES="$CONFIG_FILES util/ss/Makefile:$srcdir/./config/pre.in:util/ss/Makefile.in:util/ss/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/ldap/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/ldap/Makefile:$srcdir/./config/pre.in:plugins/kdb/ldap/Makefile.in:plugins/kdb/ldap/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/ldap/ldap_util/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/ldap/ldap_util/Makefile:$srcdir/./config/pre.in:plugins/kdb/ldap/ldap_util/Makefile.in:plugins/kdb/ldap/ldap_util/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/ldap/libkdb_ldap/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/ldap/libkdb_ldap/Makefile:$srcdir/./config/pre.in:plugins/kdb/ldap/libkdb_ldap/Makefile.in:plugins/kdb/ldap/libkdb_ldap/deps:$srcdir/./config/post.in" ;;
- "plugins/preauth/securid_sam2/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/preauth/securid_sam2/Makefile:$srcdir/./config/pre.in:plugins/preauth/securid_sam2/Makefile.in:plugins/preauth/securid_sam2/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/lmdb/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/lmdb/Makefile:$srcdir/./config/pre.in:plugins/kdb/lmdb/Makefile.in:plugins/kdb/lmdb/deps:$srcdir/./config/post.in" ;;
- "build-tools/krb5-config") CONFIG_FILES="$CONFIG_FILES build-tools/krb5-config" ;;
- "build-tools/kadm-server.pc") CONFIG_FILES="$CONFIG_FILES build-tools/kadm-server.pc" ;;
- "build-tools/kadm-client.pc") CONFIG_FILES="$CONFIG_FILES build-tools/kadm-client.pc" ;;
- "build-tools/kdb.pc") CONFIG_FILES="$CONFIG_FILES build-tools/kdb.pc" ;;
- "build-tools/krb5.pc") CONFIG_FILES="$CONFIG_FILES build-tools/krb5.pc" ;;
- "build-tools/krb5-gssapi.pc") CONFIG_FILES="$CONFIG_FILES build-tools/krb5-gssapi.pc" ;;
- "build-tools/mit-krb5.pc") CONFIG_FILES="$CONFIG_FILES build-tools/mit-krb5.pc" ;;
- "build-tools/mit-krb5-gssapi.pc") CONFIG_FILES="$CONFIG_FILES build-tools/mit-krb5-gssapi.pc" ;;
- "build-tools/gssrpc.pc") CONFIG_FILES="$CONFIG_FILES build-tools/gssrpc.pc" ;;
- "./Makefile") CONFIG_FILES="$CONFIG_FILES ./Makefile:$srcdir/./config/pre.in:./Makefile.in:./deps:$srcdir/./config/post.in" ;;
- "util/Makefile") CONFIG_FILES="$CONFIG_FILES util/Makefile:$srcdir/./config/pre.in:util/Makefile.in:util/deps:$srcdir/./config/post.in" ;;
- "util/support/Makefile") CONFIG_FILES="$CONFIG_FILES util/support/Makefile:$srcdir/./config/pre.in:util/support/Makefile.in:util/support/deps:$srcdir/./config/post.in" ;;
- "util/profile/Makefile") CONFIG_FILES="$CONFIG_FILES util/profile/Makefile:$srcdir/./config/pre.in:util/profile/Makefile.in:util/profile/deps:$srcdir/./config/post.in" ;;
- "util/profile/testmod/Makefile") CONFIG_FILES="$CONFIG_FILES util/profile/testmod/Makefile:$srcdir/./config/pre.in:util/profile/testmod/Makefile.in:util/profile/testmod/deps:$srcdir/./config/post.in" ;;
- "util/verto/Makefile") CONFIG_FILES="$CONFIG_FILES util/verto/Makefile:$srcdir/./config/pre.in:util/verto/Makefile.in:util/verto/deps:$srcdir/./config/post.in" ;;
- "lib/Makefile") CONFIG_FILES="$CONFIG_FILES lib/Makefile:$srcdir/./config/pre.in:lib/Makefile.in:lib/deps:$srcdir/./config/post.in" ;;
- "lib/kdb/Makefile") CONFIG_FILES="$CONFIG_FILES lib/kdb/Makefile:$srcdir/./config/pre.in:lib/kdb/Makefile.in:lib/kdb/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/Makefile:$srcdir/./config/pre.in:lib/crypto/Makefile.in:lib/crypto/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/krb/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/krb/Makefile:$srcdir/./config/pre.in:lib/crypto/krb/Makefile.in:lib/crypto/krb/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/crypto_tests/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/crypto_tests/Makefile:$srcdir/./config/pre.in:lib/crypto/crypto_tests/Makefile.in:lib/crypto/crypto_tests/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/builtin/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/builtin/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/Makefile.in:lib/crypto/builtin/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/builtin/des/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/builtin/des/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/des/Makefile.in:lib/crypto/builtin/des/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/builtin/aes/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/builtin/aes/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/aes/Makefile.in:lib/crypto/builtin/aes/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/builtin/camellia/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/builtin/camellia/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/camellia/Makefile.in:lib/crypto/builtin/camellia/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/builtin/md4/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/builtin/md4/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/md4/Makefile.in:lib/crypto/builtin/md4/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/builtin/md5/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/builtin/md5/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/md5/Makefile.in:lib/crypto/builtin/md5/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/builtin/sha1/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/builtin/sha1/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/sha1/Makefile.in:lib/crypto/builtin/sha1/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/builtin/sha2/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/builtin/sha2/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/sha2/Makefile.in:lib/crypto/builtin/sha2/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/builtin/enc_provider/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/builtin/enc_provider/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/enc_provider/Makefile.in:lib/crypto/builtin/enc_provider/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/builtin/hash_provider/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/builtin/hash_provider/Makefile:$srcdir/./config/pre.in:lib/crypto/builtin/hash_provider/Makefile.in:lib/crypto/builtin/hash_provider/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/openssl/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/openssl/Makefile:$srcdir/./config/pre.in:lib/crypto/openssl/Makefile.in:lib/crypto/openssl/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/openssl/des/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/openssl/des/Makefile:$srcdir/./config/pre.in:lib/crypto/openssl/des/Makefile.in:lib/crypto/openssl/des/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/openssl/enc_provider/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/openssl/enc_provider/Makefile:$srcdir/./config/pre.in:lib/crypto/openssl/enc_provider/Makefile.in:lib/crypto/openssl/enc_provider/deps:$srcdir/./config/post.in" ;;
- "lib/crypto/openssl/hash_provider/Makefile") CONFIG_FILES="$CONFIG_FILES lib/crypto/openssl/hash_provider/Makefile:$srcdir/./config/pre.in:lib/crypto/openssl/hash_provider/Makefile.in:lib/crypto/openssl/hash_provider/deps:$srcdir/./config/post.in" ;;
- "lib/krb5/Makefile") CONFIG_FILES="$CONFIG_FILES lib/krb5/Makefile:$srcdir/./config/pre.in:lib/krb5/Makefile.in:lib/krb5/deps:$srcdir/./config/post.in" ;;
- "lib/krb5/error_tables/Makefile") CONFIG_FILES="$CONFIG_FILES lib/krb5/error_tables/Makefile:$srcdir/./config/pre.in:lib/krb5/error_tables/Makefile.in:lib/krb5/error_tables/deps:$srcdir/./config/post.in" ;;
- "lib/krb5/asn.1/Makefile") CONFIG_FILES="$CONFIG_FILES lib/krb5/asn.1/Makefile:$srcdir/./config/pre.in:lib/krb5/asn.1/Makefile.in:lib/krb5/asn.1/deps:$srcdir/./config/post.in" ;;
- "lib/krb5/ccache/Makefile") CONFIG_FILES="$CONFIG_FILES lib/krb5/ccache/Makefile:$srcdir/./config/pre.in:lib/krb5/ccache/Makefile.in:lib/krb5/ccache/deps:$srcdir/./config/post.in" ;;
- "lib/krb5/keytab/Makefile") CONFIG_FILES="$CONFIG_FILES lib/krb5/keytab/Makefile:$srcdir/./config/pre.in:lib/krb5/keytab/Makefile.in:lib/krb5/keytab/deps:$srcdir/./config/post.in" ;;
- "lib/krb5/krb/Makefile") CONFIG_FILES="$CONFIG_FILES lib/krb5/krb/Makefile:$srcdir/./config/pre.in:lib/krb5/krb/Makefile.in:lib/krb5/krb/deps:$srcdir/./config/post.in" ;;
- "lib/krb5/rcache/Makefile") CONFIG_FILES="$CONFIG_FILES lib/krb5/rcache/Makefile:$srcdir/./config/pre.in:lib/krb5/rcache/Makefile.in:lib/krb5/rcache/deps:$srcdir/./config/post.in" ;;
- "lib/krb5/os/Makefile") CONFIG_FILES="$CONFIG_FILES lib/krb5/os/Makefile:$srcdir/./config/pre.in:lib/krb5/os/Makefile.in:lib/krb5/os/deps:$srcdir/./config/post.in" ;;
- "lib/krb5/unicode/Makefile") CONFIG_FILES="$CONFIG_FILES lib/krb5/unicode/Makefile:$srcdir/./config/pre.in:lib/krb5/unicode/Makefile.in:lib/krb5/unicode/deps:$srcdir/./config/post.in" ;;
- "lib/gssapi/Makefile") CONFIG_FILES="$CONFIG_FILES lib/gssapi/Makefile:$srcdir/./config/pre.in:lib/gssapi/Makefile.in:lib/gssapi/deps:$srcdir/./config/post.in" ;;
- "lib/gssapi/generic/Makefile") CONFIG_FILES="$CONFIG_FILES lib/gssapi/generic/Makefile:$srcdir/./config/pre.in:lib/gssapi/generic/Makefile.in:lib/gssapi/generic/deps:$srcdir/./config/post.in" ;;
- "lib/gssapi/krb5/Makefile") CONFIG_FILES="$CONFIG_FILES lib/gssapi/krb5/Makefile:$srcdir/./config/pre.in:lib/gssapi/krb5/Makefile.in:lib/gssapi/krb5/deps:$srcdir/./config/post.in" ;;
- "lib/gssapi/spnego/Makefile") CONFIG_FILES="$CONFIG_FILES lib/gssapi/spnego/Makefile:$srcdir/./config/pre.in:lib/gssapi/spnego/Makefile.in:lib/gssapi/spnego/deps:$srcdir/./config/post.in" ;;
- "lib/gssapi/mechglue/Makefile") CONFIG_FILES="$CONFIG_FILES lib/gssapi/mechglue/Makefile:$srcdir/./config/pre.in:lib/gssapi/mechglue/Makefile.in:lib/gssapi/mechglue/deps:$srcdir/./config/post.in" ;;
- "lib/rpc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/rpc/Makefile:$srcdir/./config/pre.in:lib/rpc/Makefile.in:lib/rpc/deps:$srcdir/./config/post.in" ;;
- "lib/rpc/unit-test/Makefile") CONFIG_FILES="$CONFIG_FILES lib/rpc/unit-test/Makefile:$srcdir/./config/pre.in:lib/rpc/unit-test/Makefile.in:lib/rpc/unit-test/deps:$srcdir/./config/post.in" ;;
- "lib/kadm5/Makefile") CONFIG_FILES="$CONFIG_FILES lib/kadm5/Makefile:$srcdir/./config/pre.in:lib/kadm5/Makefile.in:lib/kadm5/deps:$srcdir/./config/post.in" ;;
- "lib/kadm5/clnt/Makefile") CONFIG_FILES="$CONFIG_FILES lib/kadm5/clnt/Makefile:$srcdir/./config/pre.in:lib/kadm5/clnt/Makefile.in:lib/kadm5/clnt/deps:$srcdir/./config/post.in" ;;
- "lib/kadm5/srv/Makefile") CONFIG_FILES="$CONFIG_FILES lib/kadm5/srv/Makefile:$srcdir/./config/pre.in:lib/kadm5/srv/Makefile.in:lib/kadm5/srv/deps:$srcdir/./config/post.in" ;;
- "lib/krad/Makefile") CONFIG_FILES="$CONFIG_FILES lib/krad/Makefile:$srcdir/./config/pre.in:lib/krad/Makefile.in:lib/krad/deps:$srcdir/./config/post.in" ;;
- "lib/apputils/Makefile") CONFIG_FILES="$CONFIG_FILES lib/apputils/Makefile:$srcdir/./config/pre.in:lib/apputils/Makefile.in:lib/apputils/deps:$srcdir/./config/post.in" ;;
- "kdc/Makefile") CONFIG_FILES="$CONFIG_FILES kdc/Makefile:$srcdir/./config/pre.in:kdc/Makefile.in:kdc/deps:$srcdir/./config/post.in" ;;
- "kprop/Makefile") CONFIG_FILES="$CONFIG_FILES kprop/Makefile:$srcdir/./config/pre.in:kprop/Makefile.in:kprop/deps:$srcdir/./config/post.in" ;;
- "config-files/Makefile") CONFIG_FILES="$CONFIG_FILES config-files/Makefile:$srcdir/./config/pre.in:config-files/Makefile.in:config-files/deps:$srcdir/./config/post.in" ;;
- "build-tools/Makefile") CONFIG_FILES="$CONFIG_FILES build-tools/Makefile:$srcdir/./config/pre.in:build-tools/Makefile.in:build-tools/deps:$srcdir/./config/post.in" ;;
- "man/Makefile") CONFIG_FILES="$CONFIG_FILES man/Makefile:$srcdir/./config/pre.in:man/Makefile.in:man/deps:$srcdir/./config/post.in" ;;
- "doc/Makefile") CONFIG_FILES="$CONFIG_FILES doc/Makefile:$srcdir/./config/pre.in:doc/Makefile.in:doc/deps:$srcdir/./config/post.in" ;;
- "include/Makefile") CONFIG_FILES="$CONFIG_FILES include/Makefile:$srcdir/./config/pre.in:include/Makefile.in:include/deps:$srcdir/./config/post.in" ;;
- "plugins/certauth/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/certauth/test/Makefile:$srcdir/./config/pre.in:plugins/certauth/test/Makefile.in:plugins/certauth/test/deps:$srcdir/./config/post.in" ;;
- "plugins/gssapi/negoextest/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/gssapi/negoextest/Makefile:$srcdir/./config/pre.in:plugins/gssapi/negoextest/Makefile.in:plugins/gssapi/negoextest/deps:$srcdir/./config/post.in" ;;
- "plugins/hostrealm/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/hostrealm/test/Makefile:$srcdir/./config/pre.in:plugins/hostrealm/test/Makefile.in:plugins/hostrealm/test/deps:$srcdir/./config/post.in" ;;
- "plugins/localauth/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/localauth/test/Makefile:$srcdir/./config/pre.in:plugins/localauth/test/Makefile.in:plugins/localauth/test/deps:$srcdir/./config/post.in" ;;
- "plugins/kadm5_hook/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kadm5_hook/test/Makefile:$srcdir/./config/pre.in:plugins/kadm5_hook/test/Makefile.in:plugins/kadm5_hook/test/deps:$srcdir/./config/post.in" ;;
- "plugins/kadm5_auth/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kadm5_auth/test/Makefile:$srcdir/./config/pre.in:plugins/kadm5_auth/test/Makefile.in:plugins/kadm5_auth/test/deps:$srcdir/./config/post.in" ;;
- "plugins/pwqual/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/pwqual/test/Makefile:$srcdir/./config/pre.in:plugins/pwqual/test/Makefile.in:plugins/pwqual/test/deps:$srcdir/./config/post.in" ;;
- "plugins/audit/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/audit/Makefile:$srcdir/./config/pre.in:plugins/audit/Makefile.in:plugins/audit/deps:$srcdir/./config/post.in" ;;
- "plugins/audit/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/audit/test/Makefile:$srcdir/./config/pre.in:plugins/audit/test/Makefile.in:plugins/audit/test/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/db2/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/db2/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/Makefile.in:plugins/kdb/db2/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/db2/libdb2/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/db2/libdb2/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/Makefile.in:plugins/kdb/db2/libdb2/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/db2/libdb2/hash/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/db2/libdb2/hash/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/hash/Makefile.in:plugins/kdb/db2/libdb2/hash/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/db2/libdb2/btree/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/db2/libdb2/btree/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/btree/Makefile.in:plugins/kdb/db2/libdb2/btree/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/db2/libdb2/db/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/db2/libdb2/db/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/db/Makefile.in:plugins/kdb/db2/libdb2/db/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/db2/libdb2/mpool/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/db2/libdb2/mpool/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/mpool/Makefile.in:plugins/kdb/db2/libdb2/mpool/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/db2/libdb2/recno/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/db2/libdb2/recno/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/recno/Makefile.in:plugins/kdb/db2/libdb2/recno/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/db2/libdb2/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/db2/libdb2/test/Makefile:$srcdir/./config/pre.in:plugins/kdb/db2/libdb2/test/Makefile.in:plugins/kdb/db2/libdb2/test/deps:$srcdir/./config/post.in" ;;
- "plugins/kdb/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdb/test/Makefile:$srcdir/./config/pre.in:plugins/kdb/test/Makefile.in:plugins/kdb/test/deps:$srcdir/./config/post.in" ;;
- "plugins/kdcpolicy/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/kdcpolicy/test/Makefile:$srcdir/./config/pre.in:plugins/kdcpolicy/test/Makefile.in:plugins/kdcpolicy/test/deps:$srcdir/./config/post.in" ;;
- "plugins/preauth/otp/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/preauth/otp/Makefile:$srcdir/./config/pre.in:plugins/preauth/otp/Makefile.in:plugins/preauth/otp/deps:$srcdir/./config/post.in" ;;
- "plugins/preauth/spake/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/preauth/spake/Makefile:$srcdir/./config/pre.in:plugins/preauth/spake/Makefile.in:plugins/preauth/spake/deps:$srcdir/./config/post.in" ;;
- "plugins/preauth/test/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/preauth/test/Makefile:$srcdir/./config/pre.in:plugins/preauth/test/Makefile.in:plugins/preauth/test/deps:$srcdir/./config/post.in" ;;
- "plugins/authdata/greet_client/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/authdata/greet_client/Makefile:$srcdir/./config/pre.in:plugins/authdata/greet_client/Makefile.in:plugins/authdata/greet_client/deps:$srcdir/./config/post.in" ;;
- "plugins/authdata/greet_server/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/authdata/greet_server/Makefile:$srcdir/./config/pre.in:plugins/authdata/greet_server/Makefile.in:plugins/authdata/greet_server/deps:$srcdir/./config/post.in" ;;
- "plugins/tls/k5tls/Makefile") CONFIG_FILES="$CONFIG_FILES plugins/tls/k5tls/Makefile:$srcdir/./config/pre.in:plugins/tls/k5tls/Makefile.in:plugins/tls/k5tls/deps:$srcdir/./config/post.in" ;;
- "clients/Makefile") CONFIG_FILES="$CONFIG_FILES clients/Makefile:$srcdir/./config/pre.in:clients/Makefile.in:clients/deps:$srcdir/./config/post.in" ;;
- "clients/klist/Makefile") CONFIG_FILES="$CONFIG_FILES clients/klist/Makefile:$srcdir/./config/pre.in:clients/klist/Makefile.in:clients/klist/deps:$srcdir/./config/post.in" ;;
- "clients/kinit/Makefile") CONFIG_FILES="$CONFIG_FILES clients/kinit/Makefile:$srcdir/./config/pre.in:clients/kinit/Makefile.in:clients/kinit/deps:$srcdir/./config/post.in" ;;
- "clients/kvno/Makefile") CONFIG_FILES="$CONFIG_FILES clients/kvno/Makefile:$srcdir/./config/pre.in:clients/kvno/Makefile.in:clients/kvno/deps:$srcdir/./config/post.in" ;;
- "clients/kdestroy/Makefile") CONFIG_FILES="$CONFIG_FILES clients/kdestroy/Makefile:$srcdir/./config/pre.in:clients/kdestroy/Makefile.in:clients/kdestroy/deps:$srcdir/./config/post.in" ;;
- "clients/kpasswd/Makefile") CONFIG_FILES="$CONFIG_FILES clients/kpasswd/Makefile:$srcdir/./config/pre.in:clients/kpasswd/Makefile.in:clients/kpasswd/deps:$srcdir/./config/post.in" ;;
- "clients/ksu/Makefile") CONFIG_FILES="$CONFIG_FILES clients/ksu/Makefile:$srcdir/./config/pre.in:clients/ksu/Makefile.in:clients/ksu/deps:$srcdir/./config/post.in" ;;
- "clients/kswitch/Makefile") CONFIG_FILES="$CONFIG_FILES clients/kswitch/Makefile:$srcdir/./config/pre.in:clients/kswitch/Makefile.in:clients/kswitch/deps:$srcdir/./config/post.in" ;;
- "kadmin/Makefile") CONFIG_FILES="$CONFIG_FILES kadmin/Makefile:$srcdir/./config/pre.in:kadmin/Makefile.in:kadmin/deps:$srcdir/./config/post.in" ;;
- "kadmin/cli/Makefile") CONFIG_FILES="$CONFIG_FILES kadmin/cli/Makefile:$srcdir/./config/pre.in:kadmin/cli/Makefile.in:kadmin/cli/deps:$srcdir/./config/post.in" ;;
- "kadmin/dbutil/Makefile") CONFIG_FILES="$CONFIG_FILES kadmin/dbutil/Makefile:$srcdir/./config/pre.in:kadmin/dbutil/Makefile.in:kadmin/dbutil/deps:$srcdir/./config/post.in" ;;
- "kadmin/ktutil/Makefile") CONFIG_FILES="$CONFIG_FILES kadmin/ktutil/Makefile:$srcdir/./config/pre.in:kadmin/ktutil/Makefile.in:kadmin/ktutil/deps:$srcdir/./config/post.in" ;;
- "kadmin/server/Makefile") CONFIG_FILES="$CONFIG_FILES kadmin/server/Makefile:$srcdir/./config/pre.in:kadmin/server/Makefile.in:kadmin/server/deps:$srcdir/./config/post.in" ;;
- "appl/Makefile") CONFIG_FILES="$CONFIG_FILES appl/Makefile:$srcdir/./config/pre.in:appl/Makefile.in:appl/deps:$srcdir/./config/post.in" ;;
- "appl/sample/Makefile") CONFIG_FILES="$CONFIG_FILES appl/sample/Makefile:$srcdir/./config/pre.in:appl/sample/Makefile.in:appl/sample/deps:$srcdir/./config/post.in" ;;
- "appl/sample/sclient/Makefile") CONFIG_FILES="$CONFIG_FILES appl/sample/sclient/Makefile:$srcdir/./config/pre.in:appl/sample/sclient/Makefile.in:appl/sample/sclient/deps:$srcdir/./config/post.in" ;;
- "appl/sample/sserver/Makefile") CONFIG_FILES="$CONFIG_FILES appl/sample/sserver/Makefile:$srcdir/./config/pre.in:appl/sample/sserver/Makefile.in:appl/sample/sserver/deps:$srcdir/./config/post.in" ;;
- "appl/simple/Makefile") CONFIG_FILES="$CONFIG_FILES appl/simple/Makefile:$srcdir/./config/pre.in:appl/simple/Makefile.in:appl/simple/deps:$srcdir/./config/post.in" ;;
- "appl/simple/client/Makefile") CONFIG_FILES="$CONFIG_FILES appl/simple/client/Makefile:$srcdir/./config/pre.in:appl/simple/client/Makefile.in:appl/simple/client/deps:$srcdir/./config/post.in" ;;
- "appl/simple/server/Makefile") CONFIG_FILES="$CONFIG_FILES appl/simple/server/Makefile:$srcdir/./config/pre.in:appl/simple/server/Makefile.in:appl/simple/server/deps:$srcdir/./config/post.in" ;;
- "appl/gss-sample/Makefile") CONFIG_FILES="$CONFIG_FILES appl/gss-sample/Makefile:$srcdir/./config/pre.in:appl/gss-sample/Makefile.in:appl/gss-sample/deps:$srcdir/./config/post.in" ;;
- "appl/user_user/Makefile") CONFIG_FILES="$CONFIG_FILES appl/user_user/Makefile:$srcdir/./config/pre.in:appl/user_user/Makefile.in:appl/user_user/deps:$srcdir/./config/post.in" ;;
- "tests/Makefile") CONFIG_FILES="$CONFIG_FILES tests/Makefile:$srcdir/./config/pre.in:tests/Makefile.in:tests/deps:$srcdir/./config/post.in" ;;
- "tests/asn.1/Makefile") CONFIG_FILES="$CONFIG_FILES tests/asn.1/Makefile:$srcdir/./config/pre.in:tests/asn.1/Makefile.in:tests/asn.1/deps:$srcdir/./config/post.in" ;;
- "tests/create/Makefile") CONFIG_FILES="$CONFIG_FILES tests/create/Makefile:$srcdir/./config/pre.in:tests/create/Makefile.in:tests/create/deps:$srcdir/./config/post.in" ;;
- "tests/hammer/Makefile") CONFIG_FILES="$CONFIG_FILES tests/hammer/Makefile:$srcdir/./config/pre.in:tests/hammer/Makefile.in:tests/hammer/deps:$srcdir/./config/post.in" ;;
- "tests/verify/Makefile") CONFIG_FILES="$CONFIG_FILES tests/verify/Makefile:$srcdir/./config/pre.in:tests/verify/Makefile.in:tests/verify/deps:$srcdir/./config/post.in" ;;
- "tests/gssapi/Makefile") CONFIG_FILES="$CONFIG_FILES tests/gssapi/Makefile:$srcdir/./config/pre.in:tests/gssapi/Makefile.in:tests/gssapi/deps:$srcdir/./config/post.in" ;;
- "tests/threads/Makefile") CONFIG_FILES="$CONFIG_FILES tests/threads/Makefile:$srcdir/./config/pre.in:tests/threads/Makefile.in:tests/threads/deps:$srcdir/./config/post.in" ;;
- "tests/shlib/Makefile") CONFIG_FILES="$CONFIG_FILES tests/shlib/Makefile:$srcdir/./config/pre.in:tests/shlib/Makefile.in:tests/shlib/deps:$srcdir/./config/post.in" ;;
- "tests/gss-threads/Makefile") CONFIG_FILES="$CONFIG_FILES tests/gss-threads/Makefile:$srcdir/./config/pre.in:tests/gss-threads/Makefile.in:tests/gss-threads/deps:$srcdir/./config/post.in" ;;
- "tests/misc/Makefile") CONFIG_FILES="$CONFIG_FILES tests/misc/Makefile:$srcdir/./config/pre.in:tests/misc/Makefile.in:tests/misc/deps:$srcdir/./config/post.in" ;;
-
- *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;;
- esac
-done
-
-
-# If the user did not use the arguments to specify the items to instantiate,
-# then the envvar interface is used. Set only those that are not.
-# We use the long form for the default assignment because of an extremely
-# bizarre bug on SunOS 4.1.3.
-if $ac_need_defaults; then
- test "${CONFIG_FILES+set}" = set || CONFIG_FILES=$config_files
- test "${CONFIG_HEADERS+set}" = set || CONFIG_HEADERS=$config_headers
-fi
-
-# Have a temporary directory for convenience. Make it in the build tree
-# simply because there is no reason against having it here, and in addition,
-# creating and moving files from /tmp can sometimes cause problems.
-# Hook for its removal unless debugging.
-# Note that there is a small window in which the directory will not be cleaned:
-# after its creation but before its name has been assigned to `$tmp'.
-$debug ||
-{
- tmp= ac_tmp=
- trap 'exit_status=$?
- : "${ac_tmp:=$tmp}"
- { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
-' 0
- trap 'as_fn_exit 1' 1 2 13 15
-}
-# Create a (secure) tmp directory for tmp files.
-
-{
- tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
- test -d "$tmp"
-} ||
-{
- tmp=./conf$$-$RANDOM
- (umask 077 && mkdir "$tmp")
-} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
-ac_tmp=$tmp
-
-# Set up the scripts for CONFIG_FILES section.
-# No need to generate them if there are no CONFIG_FILES.
-# This happens for instance with `./config.status config.h'.
-if test -n "$CONFIG_FILES"; then
-
-if $AWK 'BEGIN { getline <"/dev/null" }' </dev/null 2>/dev/null; then
- ac_cs_awk_getline=:
- ac_cs_awk_pipe_init=
- ac_cs_awk_read_file='
- while ((getline aline < (F[key])) > 0)
- print(aline)
- close(F[key])'
- ac_cs_awk_pipe_fini=
-else
- ac_cs_awk_getline=false
- ac_cs_awk_pipe_init="print \"cat <<'|#_!!_#|' &&\""
- ac_cs_awk_read_file='
- print "|#_!!_#|"
- print "cat " F[key] " &&"
- '$ac_cs_awk_pipe_init
- # The final `:' finishes the AND list.
- ac_cs_awk_pipe_fini='END { print "|#_!!_#|"; print ":" }'
-fi
-ac_cr=`echo X | tr X '\015'`
-# On cygwin, bash can eat \r inside `` if the user requested igncr.
-# But we know of no other shell where ac_cr would be empty at this
-# point, so we can use a bashism as a fallback.
-if test "x$ac_cr" = x; then
- eval ac_cr=\$\'\\r\'
-fi
-ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
-if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
- ac_cs_awk_cr='\\r'
-else
- ac_cs_awk_cr=$ac_cr
-fi
-
-echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
-_ACEOF
-
-# Create commands to substitute file output variables.
-{
- echo "cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1" &&
- echo 'cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&' &&
- echo "$ac_subst_files" | sed 's/.*/F["&"]="$&"/' &&
- echo "_ACAWK" &&
- echo "_ACEOF"
-} >conf$$files.sh &&
-. ./conf$$files.sh ||
- as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-rm -f conf$$files.sh
-
-{
- echo "cat >conf$$subs.awk <<_ACEOF" &&
- echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
- echo "_ACEOF"
-} >conf$$subs.sh ||
- as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-ac_delim_num=`echo "$ac_subst_vars" | grep -c '^'`
-ac_delim='%!_!# '
-for ac_last_try in false false false false false :; do
- . ./conf$$subs.sh ||
- as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-
- ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | grep -c X`
- if test $ac_delim_n = $ac_delim_num; then
- break
- elif $ac_last_try; then
- as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
- else
- ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
- fi
-done
-rm -f conf$$subs.sh
-
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
-_ACEOF
-sed -n '
-h
-s/^/S["/; s/!.*/"]=/
-p
-g
-s/^[^!]*!//
-:repl
-t repl
-s/'"$ac_delim"'$//
-t delim
-:nl
-h
-s/\(.\{148\}\)..*/\1/
-t more1
-s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
-p
-n
-b repl
-:more1
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t nl
-:delim
-h
-s/\(.\{148\}\)..*/\1/
-t more2
-s/["\\]/\\&/g; s/^/"/; s/$/"/
-p
-b
-:more2
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t delim
-' <conf$$subs.awk | sed '
-/^[^""]/{
- N
- s/\n//
-}
-' >>$CONFIG_STATUS || ac_write_fail=1
-rm -f conf$$subs.awk
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-_ACAWK
-cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
- for (key in S) S_is_set[key] = 1
- FS = "\a"
- \$ac_cs_awk_pipe_init
-}
-{
- line = $ 0
- nfields = split(line, field, "@")
- substed = 0
- len = length(field[1])
- for (i = 2; i < nfields; i++) {
- key = field[i]
- keylen = length(key)
- if (S_is_set[key]) {
- value = S[key]
- line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
- len += length(value) + length(field[++i])
- substed = 1
- } else
- len += 1 + keylen
- }
- if (nfields == 3 && !substed) {
- key = field[2]
- if (F[key] != "" && line ~ /^[ ]*@.*@[ ]*$/) {
- \$ac_cs_awk_read_file
- next
- }
- }
- print line
-}
-\$ac_cs_awk_pipe_fini
-_ACAWK
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
- sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
-else
- cat
-fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
- || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
-_ACEOF
-
-# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
-# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
-# trailing colons and then remove the whole line if VPATH becomes empty
-# (actually we leave an empty line to preserve line numbers).
-if test "x$srcdir" = x.; then
- ac_vpsub='/^[ ]*VPATH[ ]*=[ ]*/{
-h
-s///
-s/^/:/
-s/[ ]*$/:/
-s/:\$(srcdir):/:/g
-s/:\${srcdir}:/:/g
-s/:@srcdir@:/:/g
-s/^:*//
-s/:*$//
-x
-s/\(=[ ]*\).*/\1/
-G
-s/\n//
-s/^[^=]*=[ ]*$//
-}'
-fi
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-fi # test -n "$CONFIG_FILES"
-
-# Set up the scripts for CONFIG_HEADERS section.
-# No need to generate them if there are no CONFIG_HEADERS.
-# This happens for instance with `./config.status Makefile'.
-if test -n "$CONFIG_HEADERS"; then
-cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
-BEGIN {
-_ACEOF
-
-# Transform confdefs.h into an awk script `defines.awk', embedded as
-# here-document in config.status, that substitutes the proper values into
-# config.h.in to produce config.h.
-
-# Create a delimiter string that does not exist in confdefs.h, to ease
-# handling of long lines.
-ac_delim='%!_!# '
-for ac_last_try in false false :; do
- ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
- if test -z "$ac_tt"; then
- break
- elif $ac_last_try; then
- as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
- else
- ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
- fi
-done
-
-# For the awk script, D is an array of macro values keyed by name,
-# likewise P contains macro parameters if any. Preserve backslash
-# newline sequences.
-
-ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
-sed -n '
-s/.\{148\}/&'"$ac_delim"'/g
-t rset
-:rset
-s/^[ ]*#[ ]*define[ ][ ]*/ /
-t def
-d
-:def
-s/\\$//
-t bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[ ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3"/p
-s/^ \('"$ac_word_re"'\)[ ]*\(.*\)/D["\1"]=" \2"/p
-d
-:bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[ ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3\\\\\\n"\\/p
-t cont
-s/^ \('"$ac_word_re"'\)[ ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
-t cont
-d
-:cont
-n
-s/.\{148\}/&'"$ac_delim"'/g
-t clear
-:clear
-s/\\$//
-t bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/"/p
-d
-:bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
-b cont
-' <confdefs.h | sed '
-s/'"$ac_delim"'/"\\\
-"/g' >>$CONFIG_STATUS || ac_write_fail=1
-
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
- for (key in D) D_is_set[key] = 1
- FS = "\a"
-}
-/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
- line = \$ 0
- split(line, arg, " ")
- if (arg[1] == "#") {
- defundef = arg[2]
- mac1 = arg[3]
- } else {
- defundef = substr(arg[1], 2)
- mac1 = arg[2]
- }
- split(mac1, mac2, "(") #)
- macro = mac2[1]
- prefix = substr(line, 1, index(line, defundef) - 1)
- if (D_is_set[macro]) {
- # Preserve the white space surrounding the "#".
- print prefix "define", macro P[macro] D[macro]
- next
- } else {
- # Replace #undef with comments. This is necessary, for example,
- # in the case of _POSIX_SOURCE, which is predefined and required
- # on some systems where configure will not decide to define it.
- if (defundef == "undef") {
- print "/*", prefix defundef, macro, "*/"
- next
- }
- }
-}
-{ print }
-_ACAWK
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
- as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
-fi # test -n "$CONFIG_HEADERS"
-
-
-eval set X " :F $CONFIG_FILES :H $CONFIG_HEADERS "
-shift
-for ac_tag
-do
- case $ac_tag in
- :[FHLC]) ac_mode=$ac_tag; continue;;
- esac
- case $ac_mode$ac_tag in
- :[FHL]*:*);;
- :L* | :C*:*) as_fn_error $? "invalid tag \`$ac_tag'" "$LINENO" 5;;
- :[FH]-) ac_tag=-:-;;
- :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
- esac
- ac_save_IFS=$IFS
- IFS=:
- set x $ac_tag
- IFS=$ac_save_IFS
- shift
- ac_file=$1
- shift
-
- case $ac_mode in
- :L) ac_source=$1;;
- :[FH])
- ac_file_inputs=
- for ac_f
- do
- case $ac_f in
- -) ac_f="$ac_tmp/stdin";;
- *) # Look for the file first in the build tree, then in the source tree
- # (if the path is not absolute). The absolute path cannot be DOS-style,
- # because $ac_f cannot contain `:'.
- test -f "$ac_f" ||
- case $ac_f in
- [\\/$]*) false;;
- *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
- esac ||
- as_fn_error 1 "cannot find input file: \`$ac_f'" "$LINENO" 5;;
- esac
- case $ac_f in *\'*) ac_f=`$as_echo "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
- as_fn_append ac_file_inputs " '$ac_f'"
- done
-
- # Let's still pretend it is `configure' which instantiates (i.e., don't
- # use $as_me), people would be surprised to read:
- # /* config.h. Generated by config.status. */
- configure_input='Generated from '`
- $as_echo "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
- `' by configure.'
- if test x"$ac_file" != x-; then
- configure_input="$ac_file. $configure_input"
- { $as_echo "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
-$as_echo "$as_me: creating $ac_file" >&6;}
- fi
- # Neutralize special characters interpreted by sed in replacement strings.
- case $configure_input in #(
- *\&* | *\|* | *\\* )
- ac_sed_conf_input=`$as_echo "$configure_input" |
- sed 's/[\\\\&|]/\\\\&/g'`;; #(
- *) ac_sed_conf_input=$configure_input;;
- esac
-
- case $ac_tag in
- *:-:* | *:-) cat >"$ac_tmp/stdin" \
- || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
- esac
- ;;
- esac
-
- ac_dir=`$as_dirname -- "$ac_file" ||
-$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
- X"$ac_file" : 'X\(//\)[^/]' \| \
- X"$ac_file" : 'X\(//\)$' \| \
- X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$ac_file" |
- sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
- s//\1/
- q
- }
- /^X\(\/\/\)[^/].*/{
- s//\1/
- q
- }
- /^X\(\/\/\)$/{
- s//\1/
- q
- }
- /^X\(\/\).*/{
- s//\1/
- q
- }
- s/.*/./; q'`
- as_dir="$ac_dir"; as_fn_mkdir_p
- ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
- ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'`
- # A ".." for each directory in $ac_dir_suffix.
- ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
- case $ac_top_builddir_sub in
- "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
- *) ac_top_build_prefix=$ac_top_builddir_sub/ ;;
- esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
- .) # We are building in place.
- ac_srcdir=.
- ac_top_srcdir=$ac_top_builddir_sub
- ac_abs_top_srcdir=$ac_pwd ;;
- [\\/]* | ?:[\\/]* ) # Absolute name.
- ac_srcdir=$srcdir$ac_dir_suffix;
- ac_top_srcdir=$srcdir
- ac_abs_top_srcdir=$srcdir ;;
- *) # Relative name.
- ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
- ac_top_srcdir=$ac_top_build_prefix$srcdir
- ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-
- case $ac_mode in
- :F)
- #
- # CONFIG_FILE
- #
-
- case $INSTALL in
- [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
- *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
- esac
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-# If the template does not know about datarootdir, expand it.
-# FIXME: This hack should be removed a few years after 2.60.
-ac_datarootdir_hack=; ac_datarootdir_seen=
-ac_sed_dataroot='
-/datarootdir/ {
- p
- q
-}
-/@datadir@/p
-/@docdir@/p
-/@infodir@/p
-/@localedir@/p
-/@mandir@/p'
-case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
-*datarootdir*) ac_datarootdir_seen=yes;;
-*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
-$as_echo "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
- ac_datarootdir_hack='
- s&@datadir@&$datadir&g
- s&@docdir@&$docdir&g
- s&@infodir@&$infodir&g
- s&@localedir@&$localedir&g
- s&@mandir@&$mandir&g
- s&\\\${datarootdir}&$datarootdir&g' ;;
-esac
-_ACEOF
-
-# Neutralize VPATH when `$srcdir' = `.'.
-# Shell code in configure.ac might set extrasub.
-# FIXME: do we really want to maintain this feature?
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-ac_sed_extra="$ac_vpsub
-$extrasub
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-:t
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-s|@configure_input@|$ac_sed_conf_input|;t t
-s&@top_builddir@&$ac_top_builddir_sub&;t t
-s&@top_build_prefix@&$ac_top_build_prefix&;t t
-s&@srcdir@&$ac_srcdir&;t t
-s&@abs_srcdir@&$ac_abs_srcdir&;t t
-s&@top_srcdir@&$ac_top_srcdir&;t t
-s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
-s&@builddir@&$ac_builddir&;t t
-s&@abs_builddir@&$ac_abs_builddir&;t t
-s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
-s&@INSTALL@&$ac_INSTALL&;t t
-$ac_datarootdir_hack
-"
-eval sed \"\$ac_sed_extra\" "$ac_file_inputs" |
-if $ac_cs_awk_getline; then
- $AWK -f "$ac_tmp/subs.awk"
-else
- $AWK -f "$ac_tmp/subs.awk" | $SHELL
-fi \
- >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-
-test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
- { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
- { ac_out=`sed -n '/^[ ]*datarootdir[ ]*:*=/p' \
- "$ac_tmp/out"`; test -z "$ac_out"; } &&
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable \`datarootdir'
-which seems to be undefined. Please make sure it is defined" >&5
-$as_echo "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir'
-which seems to be undefined. Please make sure it is defined" >&2;}
-
- rm -f "$ac_tmp/stdin"
- case $ac_file in
- -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
- *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
- esac \
- || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- ;;
- :H)
- #
- # CONFIG_HEADER
- #
- if test x"$ac_file" != x-; then
- {
- $as_echo "/* $configure_input */" \
- && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
- } >"$ac_tmp/config.h" \
- || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
-$as_echo "$as_me: $ac_file is unchanged" >&6;}
- else
- rm -f "$ac_file"
- mv "$ac_tmp/config.h" "$ac_file" \
- || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- fi
- else
- $as_echo "/* $configure_input */" \
- && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
- || as_fn_error $? "could not create -" "$LINENO" 5
- fi
- ;;
-
-
- esac
-
-
- case $ac_file$ac_mode in
- "include/autoconf.h":H) echo timestamp > include/autoconf.stamp ;;
- "build-tools/krb5-config":F) chmod +x build-tools/krb5-config ;;
-
- esac
-done # for ac_tag
-
-
-as_fn_exit 0
-_ACEOF
-ac_clean_files=$ac_clean_files_save
-
-test $ac_write_fail = 0 ||
- as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
-
-
-# configure is writing to config.log, and then calls config.status.
-# config.status does its own redirection, appending to config.log.
-# Unfortunately, on DOS this fails, as config.log is still kept open
-# by configure, so config.status won't be able to write to it; its
-# output is simply discarded. So we exec the FD to /dev/null,
-# effectively closing config.log, so it can be properly (re)opened and
-# appended to by config.status. When coming back to configure, we
-# need to make the FD available again.
-if test "$no_create" != yes; then
- ac_cs_success=:
- ac_config_status_args=
- test "$silent" = yes &&
- ac_config_status_args="$ac_config_status_args --quiet"
- exec 5>/dev/null
- $SHELL $CONFIG_STATUS $ac_config_status_args || ac_cs_success=false
- exec 5>>config.log
- # Use ||, not &&, to avoid exiting from the if with $? = 1, which
- # would make configure fail if this is the last instruction.
- $ac_cs_success || as_fn_exit 1
-fi
-if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
-$as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
-fi
-
K5_GEN_MAKEFILE(plugins/preauth/pkinit)
K5_GEN_MAKEFILE(tests/softpkcs11)
PKINIT=yes
- AC_CHECK_LIB(crypto, CMS_get0_content, [AC_DEFINE([HAVE_OPENSSL_CMS], 1, [Define if OpenSSL supports cms.])])
elif test "$k5_cv_openssl_version_okay" = no && test "$enable_pkinit" = yes; then
AC_MSG_ERROR([Version of OpenSSL is too old; cannot enable PKINIT.])
else
fi
AC_SUBST(localedir)
-# For KCM lib/krb5/ccache to build KCM Mach RPC support for macOS only.
-case $host in
-*-*-darwin* | *-*-rhapsody*) OSX=osx ;;
-*) OSX=no ;;
-esac
+# Determine the default macOS ccache type and whether to build the KCM
+# Mach RPC support.
+MACOS_FRAMEWORK=
+dnl The outer brackets around the case statement prevent m4 from
+dnl eating the brackets in the glob patterns, but also prevent us from
+dnl using AC_DEFINE within the body.
+[case $host in
+*-*-darwin[0-9].* | *-*-darwin10.*)
+ # Use the normal default cache type for macOS 10.6 (Darwin 10) and
+ # prior. Build the KCM Mach RPC support.
+ OSX=osx
+ ;;
+*-*-darwin*)
+ # macOS 10.6 (Darwin 11) uses the KCM type by default. macOS 11
+ # (Darwin 20) uses an xpc-based cache type called XCACHE by default.
+ # We can access either of these collections via a macos-specific
+ # implementation of the API cache type. Build the KCM Mach RPC
+ # support.
+ OSX=osx
+ macos_defccname=API:
+ MACOS_FRAMEWORK="-framework Kerberos"
+ ;;
+*)
+ # This is not macOS; do not build the Mach RPC support and use the
+ # normal default cache type.
+ OSX=no
+ ;;
+esac]
+if test "$macos_defccname" = API:; then
+ AC_DEFINE(USE_CCAPI_MACOS, 1, [Define to build macOS CCAPI client])
+fi
AC_SUBST(OSX)
+AC_SUBST(MACOS_FRAMEWORK)
# Build-time default ccache, keytab, and client keytab names. These
# can be given as variable arguments DEFCCNAME, DEFKTNAME, and
: "${DEFCKTNAME=`$with_krb5_config --defcktname`}"
fi
fi
-dnl The outer brackets around the case statement prevent m4 from eating the
-dnl brackets in the glob patterns.
if test "${DEFCCNAME+set}" != set; then
- [case $host in
- *-*-darwin[0-9].* | *-*-darwin10.*)
- # Use the normal default for macOS 10.6 (Darwin 10) and prior.
- ;;
- *-*-darwin*)
- # For macOS 10.7 (Darwin 11) and later, the native ccache uses
- # the KCM daemon.
- DEFCCNAME=KCM:
- ;;
- esac]
- if test "${DEFCCNAME+set}" != set; then
+ if test "${macos_defccname+set}" = set; then
+ DEFCCNAME=$macos_defccname
+ else
DEFCCNAME=FILE:/tmp/krb5cc_%{uid}
fi
fi
AC_DEFINE_UNQUOTED(DEFCKTNAME, ["$DEFCKTNAME"],
[Define to default client keytab name])
+AC_ARG_VAR(PKCS11_MODNAME, [Default PKCS11 module name])
+if test "${PKCS11_MODNAME+set}" != set; then
+ PKCS11_MODNAME=opensc-pkcs11.so
+fi
+AC_MSG_NOTICE([Default PKCS11 module name: $PKCS11_MODNAME])
+AC_DEFINE_UNQUOTED(PKCS11_MODNAME, ["$PKCS11_MODNAME"],
+ [Default PKCS11 module name])
+
AC_CONFIG_FILES([build-tools/krb5-config], [chmod +x build-tools/krb5-config])
AC_CONFIG_FILES([build-tools/kadm-server.pc
build-tools/kadm-client.pc
DEFCCNAME=@DEFCCNAME@
DEFKTNAME=@DEFKTNAME@
DEFCKTNAME=@DEFCKTNAME@
+PKCS11_MODNAME=@PKCS11_MODNAME@
RST_SOURCES= _static \
_templates \
echo 'ccache = "``$(DEFCCNAME)``"' >> $@
echo 'keytab = "``$(DEFKTNAME)``"' >> $@
echo 'ckeytab = "``$(DEFCKTNAME)``"' >> $@
+ echo 'pkcs11_modname = "``$(PKCS11_MODNAME)``"' >> $@
# Dummy rule that man/Makefile can invoke
version.py: $(docsrc)/version.py
void krb5_klog_reopen (krb5_context);
/* alt_prof.c */
-krb5_error_code krb5_aprof_init(char *, char *, krb5_pointer *);
krb5_error_code krb5_aprof_getvals(krb5_pointer, const char **, char ***);
krb5_error_code krb5_aprof_get_boolean(krb5_pointer, const char **, int,
krb5_boolean *);
char **);
krb5_error_code krb5_aprof_get_int32(krb5_pointer, const char **,
krb5_boolean, krb5_int32 *);
-krb5_error_code krb5_aprof_finish(krb5_pointer);
/* str_conv.c */
krb5_error_code krb5_flagspec_to_mask(const char *,
+++ /dev/null
-/* include/autoconf.h.in. Generated from configure.ac by autoheader. */
-
-
-#ifndef KRB5_AUTOCONF_H
-#define KRB5_AUTOCONF_H
-
-
-/* Define if AES-NI support is enabled */
-#undef AESNI
-
-/* Define if socket can't be bound to 0.0.0.0 */
-#undef BROKEN_STREAMS_SOCKETS
-
-/* Define if va_list objects can be simply copied by assignment. */
-#undef CAN_COPY_VA_LIST
-
-/* Define to reduce code size even if it means more cpu usage */
-#undef CONFIG_SMALL
-
-/* Define if __attribute__((constructor)) works */
-#undef CONSTRUCTOR_ATTR_WORKS
-
-/* Define to use OpenSSL crypto library */
-#undef CRYPTO_OPENSSL
-
-/* Define to default ccache name */
-#undef DEFCCNAME
-
-/* Define to default client keytab name */
-#undef DEFCKTNAME
-
-/* Define to default keytab name */
-#undef DEFKTNAME
-
-/* Define if library initialization should be delayed until first use */
-#undef DELAY_INITIALIZER
-
-/* Define if __attribute__((destructor)) works */
-#undef DESTRUCTOR_ATTR_WORKS
-
-/* Define to disable PKINIT plugin support */
-#undef DISABLE_PKINIT
-
-/* Define if LDAP KDB support within the Kerberos library (mainly ASN.1 code)
- should be enabled. */
-#undef ENABLE_LDAP
-
-/* Define if translation functions should be used. */
-#undef ENABLE_NLS
-
-/* Define if thread support enabled */
-#undef ENABLE_THREADS
-
-/* Define as return type of endrpcent */
-#undef ENDRPCENT_TYPE
-
-/* Define to the type of elements in the array set by `getgroups'. Usually
- this is either `int' or `gid_t'. */
-#undef GETGROUPS_T
-
-/* Define if gethostbyname_r returns int rather than struct hostent * */
-#undef GETHOSTBYNAME_R_RETURNS_INT
-
-/* Type of getpeername second argument. */
-#undef GETPEERNAME_ARG3_TYPE
-
-/* Define if getpwnam_r exists but takes only 4 arguments (e.g., POSIX draft 6
- implementations like some Solaris releases). */
-#undef GETPWNAM_R_4_ARGS
-
-/* Define if getpwnam_r returns an int */
-#undef GETPWNAM_R_RETURNS_INT
-
-/* Define if getpwuid_r exists but takes only 4 arguments (e.g., POSIX draft 6
- implementations like some Solaris releases). */
-#undef GETPWUID_R_4_ARGS
-
-/* Define if getservbyname_r returns int rather than struct servent * */
-#undef GETSERVBYNAME_R_RETURNS_INT
-
-/* Type of pointer target for argument 3 to getsockname */
-#undef GETSOCKNAME_ARG3_TYPE
-
-/* Define if gmtime_r returns int instead of struct tm pointer, as on old
- HP-UX systems. */
-#undef GMTIME_R_RETURNS_INT
-
-/* Define if va_copy macro or function is available. */
-#undef HAS_VA_COPY
-
-/* Define to 1 if you have the `access' function. */
-#undef HAVE_ACCESS
-
-/* Define to 1 if you have the <alloca.h> header file. */
-#undef HAVE_ALLOCA_H
-
-/* Define to 1 if you have the <arpa/inet.h> header file. */
-#undef HAVE_ARPA_INET_H
-
-/* Define to 1 if you have the `bswap16' function. */
-#undef HAVE_BSWAP16
-
-/* Define to 1 if you have the `bswap64' function. */
-#undef HAVE_BSWAP64
-
-/* Define to 1 if bswap_16 is available via byteswap.h */
-#undef HAVE_BSWAP_16
-
-/* Define to 1 if bswap_64 is available via byteswap.h */
-#undef HAVE_BSWAP_64
-
-/* Define if bt_rseq is available, for recursive btree traversal. */
-#undef HAVE_BT_RSEQ
-
-/* Define to 1 if you have the <byteswap.h> header file. */
-#undef HAVE_BYTESWAP_H
-
-/* Define to 1 if you have the `chmod' function. */
-#undef HAVE_CHMOD
-
-/* Define if cmocka library is available. */
-#undef HAVE_CMOCKA
-
-/* Define to 1 if you have the `compile' function. */
-#undef HAVE_COMPILE
-
-/* Define if com_err has compatible gettext support */
-#undef HAVE_COM_ERR_INTL
-
-/* Define to 1 if you have the <cpuid.h> header file. */
-#undef HAVE_CPUID_H
-
-/* Define to 1 if you have the `daemon' function. */
-#undef HAVE_DAEMON
-
-/* Define to 1 if you have the declaration of `strerror_r', and to 0 if you
- don't. */
-#undef HAVE_DECL_STRERROR_R
-
-/* Define to 1 if you have the <dirent.h> header file, and it defines `DIR'.
- */
-#undef HAVE_DIRENT_H
-
-/* Define to 1 if you have the <dlfcn.h> header file. */
-#undef HAVE_DLFCN_H
-
-/* Define to 1 if you have the `dn_skipname' function. */
-#undef HAVE_DN_SKIPNAME
-
-/* Define to 1 if you have the <endian.h> header file. */
-#undef HAVE_ENDIAN_H
-
-/* Define to 1 if you have the <errno.h> header file. */
-#undef HAVE_ERRNO_H
-
-/* Define to 1 if you have the `EVP_PKEY_get_bn_param' function. */
-#undef HAVE_EVP_PKEY_GET_BN_PARAM
-
-/* Define to 1 if you have the `explicit_bzero' function. */
-#undef HAVE_EXPLICIT_BZERO
-
-/* Define to 1 if you have the `explicit_memset' function. */
-#undef HAVE_EXPLICIT_MEMSET
-
-/* Define to 1 if you have the `fchmod' function. */
-#undef HAVE_FCHMOD
-
-/* Define to 1 if you have the <fcntl.h> header file. */
-#undef HAVE_FCNTL_H
-
-/* Define to 1 if you have the `flock' function. */
-#undef HAVE_FLOCK
-
-/* Define to 1 if you have the `fnmatch' function. */
-#undef HAVE_FNMATCH
-
-/* Define to 1 if you have the <fnmatch.h> header file. */
-#undef HAVE_FNMATCH_H
-
-/* Define if you have the getaddrinfo function */
-#undef HAVE_GETADDRINFO
-
-/* Define to 1 if you have the `getcwd' function. */
-#undef HAVE_GETCWD
-
-/* Define to 1 if you have the `getenv' function. */
-#undef HAVE_GETENV
-
-/* Define to 1 if you have the `geteuid' function. */
-#undef HAVE_GETEUID
-
-/* Define if gethostbyname_r exists and its return type is known */
-#undef HAVE_GETHOSTBYNAME_R
-
-/* Define to 1 if you have the `getnameinfo' function. */
-#undef HAVE_GETNAMEINFO
-
-/* Define if system getopt should be used. */
-#undef HAVE_GETOPT
-
-/* Define if system getopt_long should be used. */
-#undef HAVE_GETOPT_LONG
-
-/* Define if getpwnam_r is available and useful. */
-#undef HAVE_GETPWNAM_R
-
-/* Define if getpwuid_r is available and useful. */
-#undef HAVE_GETPWUID_R
-
-/* Define to 1 if you have the `getresgid' function. */
-#undef HAVE_GETRESGID
-
-/* Define to 1 if you have the `getresuid' function. */
-#undef HAVE_GETRESUID
-
-/* Define if getservbyname_r exists and its return type is known */
-#undef HAVE_GETSERVBYNAME_R
-
-/* Have the gettimeofday function */
-#undef HAVE_GETTIMEOFDAY
-
-/* Define to 1 if you have the `getusershell' function. */
-#undef HAVE_GETUSERSHELL
-
-/* Define to 1 if you have the `gmtime_r' function. */
-#undef HAVE_GMTIME_R
-
-/* Define to 1 if you have the <ifaddrs.h> header file. */
-#undef HAVE_IFADDRS_H
-
-/* Define to 1 if you have the `inet_ntop' function. */
-#undef HAVE_INET_NTOP
-
-/* Define to 1 if you have the `inet_pton' function. */
-#undef HAVE_INET_PTON
-
-/* Define to 1 if the system has the type `int16_t'. */
-#undef HAVE_INT16_T
-
-/* Define to 1 if the system has the type `int32_t'. */
-#undef HAVE_INT32_T
-
-/* Define to 1 if the system has the type `int8_t'. */
-#undef HAVE_INT8_T
-
-/* Define to 1 if you have the <inttypes.h> header file. */
-#undef HAVE_INTTYPES_H
-
-/* Define to 1 if you have the <keyutils.h> header file. */
-#undef HAVE_KEYUTILS_H
-
-/* Define to 1 if you have the <lber.h> header file. */
-#undef HAVE_LBER_H
-
-/* Define to 1 if you have the <ldap.h> header file. */
-#undef HAVE_LDAP_H
-
-/* Define to 1 if you have the `crypto' library (-lcrypto). */
-#undef HAVE_LIBCRYPTO
-
-/* Define if building with libedit. */
-#undef HAVE_LIBEDIT
-
-/* Define to 1 if you have the `nsl' library (-lnsl). */
-#undef HAVE_LIBNSL
-
-/* Define to 1 if you have the `resolv' library (-lresolv). */
-#undef HAVE_LIBRESOLV
-
-/* Define to 1 if you have the `socket' library (-lsocket). */
-#undef HAVE_LIBSOCKET
-
-/* Define if the util library is available */
-#undef HAVE_LIBUTIL
-
-/* Define to 1 if you have the <limits.h> header file. */
-#undef HAVE_LIMITS_H
-
-/* Define to 1 if you have the `localtime_r' function. */
-#undef HAVE_LOCALTIME_R
-
-/* Define to 1 if you have the <machine/byte_order.h> header file. */
-#undef HAVE_MACHINE_BYTE_ORDER_H
-
-/* Define to 1 if you have the <machine/endian.h> header file. */
-#undef HAVE_MACHINE_ENDIAN_H
-
-/* Define to 1 if you have the <memory.h> header file. */
-#undef HAVE_MEMORY_H
-
-/* Define to 1 if you have the `mkstemp' function. */
-#undef HAVE_MKSTEMP
-
-/* Define to 1 if you have the <ndir.h> header file, and it defines `DIR'. */
-#undef HAVE_NDIR_H
-
-/* Define to 1 if you have the <netdb.h> header file. */
-#undef HAVE_NETDB_H
-
-/* Define if netdb.h declares h_errno */
-#undef HAVE_NETDB_H_H_ERRNO
-
-/* Define to 1 if you have the <netinet/in.h> header file. */
-#undef HAVE_NETINET_IN_H
-
-/* Define to 1 if you have the `ns_initparse' function. */
-#undef HAVE_NS_INITPARSE
-
-/* Define to 1 if you have the `ns_name_uncompress' function. */
-#undef HAVE_NS_NAME_UNCOMPRESS
-
-/* Define if OpenSSL supports cms. */
-#undef HAVE_OPENSSL_CMS
-
-/* Define to 1 if you have the <paths.h> header file. */
-#undef HAVE_PATHS_H
-
-/* Define if persistent keyrings are supported */
-#undef HAVE_PERSISTENT_KEYRING
-
-/* Define to 1 if you have the <poll.h> header file. */
-#undef HAVE_POLL_H
-
-/* Define if #pragma weak references work */
-#undef HAVE_PRAGMA_WEAK_REF
-
-/* Define if you have POSIX threads libraries and header files. */
-#undef HAVE_PTHREAD
-
-/* Define to 1 if you have the `pthread_once' function. */
-#undef HAVE_PTHREAD_ONCE
-
-/* Have PTHREAD_PRIO_INHERIT. */
-#undef HAVE_PTHREAD_PRIO_INHERIT
-
-/* Define to 1 if you have the `pthread_rwlock_init' function. */
-#undef HAVE_PTHREAD_RWLOCK_INIT
-
-/* Define if pthread_rwlock_init is provided in the thread library. */
-#undef HAVE_PTHREAD_RWLOCK_INIT_IN_THREAD_LIB
-
-/* Define to 1 if you have the <pwd.h> header file. */
-#undef HAVE_PWD_H
-
-/* Define if building with GNU Readline. */
-#undef HAVE_READLINE
-
-/* Define if regcomp exists and functions */
-#undef HAVE_REGCOMP
-
-/* Define to 1 if you have the `regexec' function. */
-#undef HAVE_REGEXEC
-
-/* Define to 1 if you have the <regexpr.h> header file. */
-#undef HAVE_REGEXPR_H
-
-/* Define to 1 if you have the <regex.h> header file. */
-#undef HAVE_REGEX_H
-
-/* Define to 1 if you have the `res_nclose' function. */
-#undef HAVE_RES_NCLOSE
-
-/* Define to 1 if you have the `res_ndestroy' function. */
-#undef HAVE_RES_NDESTROY
-
-/* Define to 1 if you have the `res_ninit' function. */
-#undef HAVE_RES_NINIT
-
-/* Define to 1 if you have the `res_nsearch' function. */
-#undef HAVE_RES_NSEARCH
-
-/* Define to 1 if you have the `res_search' function */
-#undef HAVE_RES_SEARCH
-
-/* Define to 1 if you have the `re_comp' function. */
-#undef HAVE_RE_COMP
-
-/* Define to 1 if you have the `re_exec' function. */
-#undef HAVE_RE_EXEC
-
-/* Define to 1 if you have the <sasl/sasl.h> header file. */
-#undef HAVE_SASL_SASL_H
-
-/* Define if struct sockaddr contains sa_len */
-#undef HAVE_SA_LEN
-
-/* Define to 1 if you have the `secure_getenv' function. */
-#undef HAVE_SECURE_GETENV
-
-/* Define to 1 if you have the `setegid' function. */
-#undef HAVE_SETEGID
-
-/* Define to 1 if you have the `setenv' function. */
-#undef HAVE_SETENV
-
-/* Define to 1 if you have the `seteuid' function. */
-#undef HAVE_SETEUID
-
-/* Define if setluid provided in OSF/1 security library */
-#undef HAVE_SETLUID
-
-/* Define to 1 if you have the `setregid' function. */
-#undef HAVE_SETREGID
-
-/* Define to 1 if you have the `setresgid' function. */
-#undef HAVE_SETRESGID
-
-/* Define to 1 if you have the `setresuid' function. */
-#undef HAVE_SETRESUID
-
-/* Define to 1 if you have the `setreuid' function. */
-#undef HAVE_SETREUID
-
-/* Define to 1 if you have the `setsid' function. */
-#undef HAVE_SETSID
-
-/* Define to 1 if you have the `setvbuf' function. */
-#undef HAVE_SETVBUF
-
-/* Define if there is a socklen_t type. If not, probably use size_t */
-#undef HAVE_SOCKLEN_T
-
-/* Define to 1 if you have the `srand' function. */
-#undef HAVE_SRAND
-
-/* Define to 1 if you have the `srand48' function. */
-#undef HAVE_SRAND48
-
-/* Define to 1 if you have the `srandom' function. */
-#undef HAVE_SRANDOM
-
-/* Define to 1 if the system has the type `ssize_t'. */
-#undef HAVE_SSIZE_T
-
-/* Define to 1 if you have the `stat' function. */
-#undef HAVE_STAT
-
-/* Define to 1 if you have the <stddef.h> header file. */
-#undef HAVE_STDDEF_H
-
-/* Define to 1 if you have the <stdint.h> header file. */
-#undef HAVE_STDINT_H
-
-/* Define to 1 if you have the <stdlib.h> header file. */
-#undef HAVE_STDLIB_H
-
-/* Define to 1 if you have the `step' function. */
-#undef HAVE_STEP
-
-/* Define to 1 if you have the `strchr' function. */
-#undef HAVE_STRCHR
-
-/* Define to 1 if you have the `strdup' function. */
-#undef HAVE_STRDUP
-
-/* Define to 1 if you have the `strerror' function. */
-#undef HAVE_STRERROR
-
-/* Define to 1 if you have the `strerror_r' function. */
-#undef HAVE_STRERROR_R
-
-/* Define to 1 if you have the <strings.h> header file. */
-#undef HAVE_STRINGS_H
-
-/* Define to 1 if you have the <string.h> header file. */
-#undef HAVE_STRING_H
-
-/* Define to 1 if you have the `strlcpy' function. */
-#undef HAVE_STRLCPY
-
-/* Define to 1 if you have the `strptime' function. */
-#undef HAVE_STRPTIME
-
-/* Define to 1 if the system has the type `struct cmsghdr'. */
-#undef HAVE_STRUCT_CMSGHDR
-
-/* Define if there is a struct if_laddrconf. */
-#undef HAVE_STRUCT_IF_LADDRCONF
-
-/* Define to 1 if the system has the type `struct in6_pktinfo'. */
-#undef HAVE_STRUCT_IN6_PKTINFO
-
-/* Define to 1 if the system has the type `struct in_pktinfo'. */
-#undef HAVE_STRUCT_IN_PKTINFO
-
-/* Define if there is a struct lifconf. */
-#undef HAVE_STRUCT_LIFCONF
-
-/* Define to 1 if the system has the type `struct rt_msghdr'. */
-#undef HAVE_STRUCT_RT_MSGHDR
-
-/* Define to 1 if the system has the type `struct sockaddr_storage'. */
-#undef HAVE_STRUCT_SOCKADDR_STORAGE
-
-/* Define to 1 if `st_mtimensec' is a member of `struct stat'. */
-#undef HAVE_STRUCT_STAT_ST_MTIMENSEC
-
-/* Define to 1 if `st_mtimespec.tv_nsec' is a member of `struct stat'. */
-#undef HAVE_STRUCT_STAT_ST_MTIMESPEC_TV_NSEC
-
-/* Define to 1 if `st_mtim.tv_nsec' is a member of `struct stat'. */
-#undef HAVE_STRUCT_STAT_ST_MTIM_TV_NSEC
-
-/* Define to 1 if you have the <sys/bswap.h> header file. */
-#undef HAVE_SYS_BSWAP_H
-
-/* Define to 1 if you have the <sys/dir.h> header file, and it defines `DIR'.
- */
-#undef HAVE_SYS_DIR_H
-
-/* Define if sys_errlist in libc */
-#undef HAVE_SYS_ERRLIST
-
-/* Define to 1 if you have the <sys/file.h> header file. */
-#undef HAVE_SYS_FILE_H
-
-/* Define to 1 if you have the <sys/filio.h> header file. */
-#undef HAVE_SYS_FILIO_H
-
-/* Define to 1 if you have the <sys/ndir.h> header file, and it defines `DIR'.
- */
-#undef HAVE_SYS_NDIR_H
-
-/* Define to 1 if you have the <sys/param.h> header file. */
-#undef HAVE_SYS_PARAM_H
-
-/* Define to 1 if you have the <sys/select.h> header file. */
-#undef HAVE_SYS_SELECT_H
-
-/* Define to 1 if you have the <sys/socket.h> header file. */
-#undef HAVE_SYS_SOCKET_H
-
-/* Define to 1 if you have the <sys/sockio.h> header file. */
-#undef HAVE_SYS_SOCKIO_H
-
-/* Define to 1 if you have the <sys/stat.h> header file. */
-#undef HAVE_SYS_STAT_H
-
-/* Define to 1 if you have the <sys/time.h> header file. */
-#undef HAVE_SYS_TIME_H
-
-/* Define to 1 if you have the <sys/types.h> header file. */
-#undef HAVE_SYS_TYPES_H
-
-/* Define to 1 if you have the <sys/uio.h> header file. */
-#undef HAVE_SYS_UIO_H
-
-/* Define to 1 if you have the `timegm' function. */
-#undef HAVE_TIMEGM
-
-/* Define to 1 if you have the <time.h> header file. */
-#undef HAVE_TIME_H
-
-/* Define to 1 if you have the <unistd.h> header file. */
-#undef HAVE_UNISTD_H
-
-/* Define to 1 if you have the `unsetenv' function. */
-#undef HAVE_UNSETENV
-
-/* Define to 1 if the system has the type `u_char'. */
-#undef HAVE_U_CHAR
-
-/* Define to 1 if the system has the type `u_int'. */
-#undef HAVE_U_INT
-
-/* Define to 1 if the system has the type `u_int16_t'. */
-#undef HAVE_U_INT16_T
-
-/* Define to 1 if the system has the type `u_int32_t'. */
-#undef HAVE_U_INT32_T
-
-/* Define to 1 if the system has the type `u_int8_t'. */
-#undef HAVE_U_INT8_T
-
-/* Define to 1 if the system has the type `u_long'. */
-#undef HAVE_U_LONG
-
-/* Define to 1 if you have the `vasprintf' function. */
-#undef HAVE_VASPRINTF
-
-/* Define to 1 if you have the `vsnprintf' function. */
-#undef HAVE_VSNPRINTF
-
-/* Define to 1 if you have the `vsprintf' function. */
-#undef HAVE_VSPRINTF
-
-/* Define to 1 if the system has the type `__int128_t'. */
-#undef HAVE___INT128_T
-
-/* Define to 1 if the system has the type `__uint128_t'. */
-#undef HAVE___UINT128_T
-
-/* Define if errno.h declares perror */
-#undef HDR_HAS_PERROR
-
-/* May need to be defined to enable IPv6 support, for example on IRIX */
-#undef INET6
-
-/* Define if MIT Project Athena default configuration should be used */
-#undef KRB5_ATHENA_COMPAT
-
-/* Define for DNS support of locating realms and KDCs */
-#undef KRB5_DNS_LOOKUP
-
-/* Define to enable DNS lookups of Kerberos realm names */
-#undef KRB5_DNS_LOOKUP_REALM
-
-/* Define if the KDC should return only vague error codes to clients */
-#undef KRBCONF_VAGUE_ERRORS
-
-/* define if the system header files are missing prototype for daemon() */
-#undef NEED_DAEMON_PROTO
-
-/* Define if in6addr_any is not defined in libc */
-#undef NEED_INSIXADDR_ANY
-
-/* define if the system header files are missing prototype for
- ss_execute_command() */
-#undef NEED_SS_EXECUTE_COMMAND_PROTO
-
-/* define if the system header files are missing prototype for strptime() */
-#undef NEED_STRPTIME_PROTO
-
-/* define if the system header files are missing prototype for swab() */
-#undef NEED_SWAB_PROTO
-
-/* Define if need to declare sys_errlist */
-#undef NEED_SYS_ERRLIST
-
-/* define if the system header files are missing prototype for vasprintf() */
-#undef NEED_VASPRINTF_PROTO
-
-/* Define if the KDC should use no lookaside cache */
-#undef NOCACHE
-
-/* Define if references to pthread routines should be non-weak. */
-#undef NO_WEAK_PTHREADS
-
-/* Define to the address where bug reports for this package should be sent. */
-#undef PACKAGE_BUGREPORT
-
-/* Define to the full name of this package. */
-#undef PACKAGE_NAME
-
-/* Define to the full name and version of this package. */
-#undef PACKAGE_STRING
-
-/* Define to the one symbol short name of this package. */
-#undef PACKAGE_TARNAME
-
-/* Define to the home page for this package. */
-#undef PACKAGE_URL
-
-/* Define to the version of this package. */
-#undef PACKAGE_VERSION
-
-/* Define if setjmp indicates POSIX interface */
-#undef POSIX_SETJMP
-
-/* Define if POSIX signal handling is used */
-#undef POSIX_SIGNALS
-
-/* Define if termios.h exists and tcsetattr exists */
-#undef POSIX_TERMIOS
-
-/* Define to necessary symbol if this constant uses a non-standard name on
- your system. */
-#undef PTHREAD_CREATE_JOINABLE
-
-/* Define as return type of setrpcent */
-#undef SETRPCENT_TYPE
-
-/* The size of `size_t', as computed by sizeof. */
-#undef SIZEOF_SIZE_T
-
-/* The size of `time_t', as computed by sizeof. */
-#undef SIZEOF_TIME_T
-
-/* Define to use OpenSSL for SPAKE preauth */
-#undef SPAKE_OPENSSL
-
-/* Define for static plugin linkage */
-#undef STATIC_PLUGINS
-
-/* Define to 1 if you have the ANSI C header files. */
-#undef STDC_HEADERS
-
-/* Define to 1 if strerror_r returns char *. */
-#undef STRERROR_R_CHAR_P
-
-/* Define if sys_errlist is defined in errno.h */
-#undef SYS_ERRLIST_DECLARED
-
-/* Define if no TLS implementation is selected */
-#undef TLS_IMPL_NONE
-
-/* Define if TLS implementation is OpenSSL */
-#undef TLS_IMPL_OPENSSL
-
-/* Define if you have dirent.h functionality */
-#undef USE_DIRENT_H
-
-/* Define if dlopen should be used */
-#undef USE_DLOPEN
-
-/* Define if the keyring ccache should be enabled */
-#undef USE_KEYRING_CCACHE
-
-/* Define if link-time options for library finalization will be used */
-#undef USE_LINKER_FINI_OPTION
-
-/* Define if link-time options for library initialization will be used */
-#undef USE_LINKER_INIT_OPTION
-
-/* Define if sigprocmask should be used */
-#undef USE_SIGPROCMASK
-
-/* Define if wait takes int as a argument */
-#undef WAIT_USES_INT
-
-/* Define to enable extensions in glibc */
-#undef _GNU_SOURCE
-
-/* Define to enable C11 extensions */
-#undef __STDC_WANT_LIB_EXT1__
-
-/* Define to empty if `const' does not conform to ANSI C. */
-#undef const
-
-/* Define to `int' if <sys/types.h> doesn't define. */
-#undef gid_t
-
-/* Define to `__inline__' or `__inline' if that's what the C compiler
- calls it, or to nothing if 'inline' is not supported under any name. */
-#ifndef __cplusplus
-#undef inline
-#endif
-
-/* Define to `int' if <sys/types.h> does not define. */
-#undef mode_t
-
-/* Define to `long int' if <sys/types.h> does not define. */
-#undef off_t
-
-/* Define to `long' if <sys/types.h> does not define. */
-#undef time_t
-
-/* Define to `int' if <sys/types.h> doesn't define. */
-#undef uid_t
-
-
-#if defined(__GNUC__) && !defined(inline)
-/* Silence gcc pedantic warnings about ANSI C. */
-# define inline __inline__
-#endif
-#endif /* KRB5_AUTOCONF_H */
-
* fixed or dynamic buffer without the need to check for a failure at each step
* (and without aborting on malloc failure). If an allocation failure occurs
* or the fixed buffer runs out of room, the buffer will be set to an error
- * state which can be detected with k5_buf_status. Data in a buffer is
- * terminated with a zero byte so that it can be used as a C string.
+ * state which can be detected with k5_buf_status. Data in a buffer is not
+ * automatically terminated with a zero byte; call k5_buf_cstring() to use the
+ * contents as a C string.
*
* k5buf structures are usually stack-allocated. Do not put k5buf structure
* pointers into public APIs. It is okay to reference the data and len fields
/* Initialize a k5buf using a fixed-sized, existing buffer. SPACE must be
* more than zero, or an assertion failure will result. */
-void k5_buf_init_fixed(struct k5buf *buf, char *data, size_t space);
+void k5_buf_init_fixed(struct k5buf *buf, void *data, size_t space);
/* Initialize a k5buf using an internally allocated dynamic buffer. */
void k5_buf_init_dynamic(struct k5buf *buf);
/* Add a counted series of bytes to BUF. */
void k5_buf_add_len(struct k5buf *buf, const void *data, size_t len);
-/* Add sprintf-style formatted data to BUF. */
+/* Add sprintf-style formatted data to BUF. For a fixed-length buffer this
+ * operation will fail if there isn't room for a zero terminator. */
void k5_buf_add_fmt(struct k5buf *buf, const char *fmt, ...)
#if !defined(__cplusplus) && (__GNUC__ > 2)
__attribute__((__format__(__printf__, 2, 3)))
#endif
;
+/* Without changing the length of buf, ensure that there is a zero byte after
+ * buf.data and return it. Return NULL on error. */
+char *k5_buf_cstring(struct k5buf *buf);
+
/* Extend the length of buf by len and return a pointer to the reserved space,
* to be filled in by the caller. Return NULL on error. */
void *k5_buf_get_space(struct k5buf *buf, size_t len);
void k5_buf_free(struct k5buf *buf);
static inline void
+k5_buf_add_byte(struct k5buf *buf, uint8_t val)
+{
+ k5_buf_add_len(buf, &val, 1);
+}
+
+static inline void
k5_buf_add_uint16_be(struct k5buf *buf, uint16_t val)
{
void *p = k5_buf_get_space(buf, 2);
--- /dev/null
+/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
+/* include/k5-der.h - Distinguished Encoding Rules (DER) declarations */
+/*
+ * Copyright (C) 2023 by the Massachusetts Institute of Technology.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * * Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * * Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in
+ * the documentation and/or other materials provided with the
+ * distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/*
+ * Most ASN.1 encoding and decoding is done using the table-driven framework in
+ * libkrb5. When that is not an option, these helpers can be used to encode
+ * and decode simple types.
+ */
+
+#ifndef K5_DER_H
+#define K5_DER_H
+
+#include <stdint.h>
+#include <stdbool.h>
+#include "k5-buf.h"
+#include "k5-input.h"
+
+/* Return the number of bytes needed to encode len as a DER encoding length. */
+static inline size_t
+k5_der_len_len(size_t len)
+{
+ size_t llen;
+
+ if (len < 128)
+ return 1;
+ llen = 1;
+ while (len > 0) {
+ len >>= 8;
+ llen++;
+ }
+ return llen;
+}
+
+/* Return the number of bytes needed to encode a DER value (with identifier
+ * byte and length) for a given contents length. */
+static inline size_t
+k5_der_value_len(size_t contents_len)
+{
+ return 1 + k5_der_len_len(contents_len) + contents_len;
+}
+
+/* Add a DER identifier byte (composed by the caller, including the ASN.1
+ * class, tag, and constructed bit) and length. */
+static inline void
+k5_der_add_taglen(struct k5buf *buf, uint8_t idbyte, size_t len)
+{
+ uint8_t *p;
+ size_t llen = k5_der_len_len(len);
+
+ p = k5_buf_get_space(buf, 1 + llen);
+ if (p == NULL)
+ return;
+ *p++ = idbyte;
+ if (len < 128) {
+ *p = len;
+ } else {
+ *p = 0x80 | (llen - 1);
+ /* Encode the length bytes backwards so the most significant byte is
+ * first. */
+ p += llen;
+ while (len > 0) {
+ *--p = len & 0xFF;
+ len >>= 8;
+ }
+ }
+}
+
+/* Add a DER value (identifier byte, length, and contents). */
+static inline void
+k5_der_add_value(struct k5buf *buf, uint8_t idbyte, const void *contents,
+ size_t len)
+{
+ k5_der_add_taglen(buf, idbyte, len);
+ k5_buf_add_len(buf, contents, len);
+}
+
+/*
+ * If the next byte in in matches idbyte and the subsequent DER length is
+ * valid, advance in past the value, set *contents_out to the value contents,
+ * and return true. Otherwise return false. Only set an error on in if the
+ * next bytes matches idbyte but the ensuing length is invalid. contents_out
+ * may be aliased to in; it will only be written to on successful decoding of a
+ * value.
+ */
+static inline bool
+k5_der_get_value(struct k5input *in, uint8_t idbyte,
+ struct k5input *contents_out)
+{
+ uint8_t lenbyte, i;
+ size_t len;
+ const void *bytes;
+
+ /* Do nothing if in is empty or the next byte doesn't match idbyte. */
+ if (in->status || in->len == 0 || *in->ptr != idbyte)
+ return false;
+
+ /* Advance past the identifier byte and decode the length. */
+ (void)k5_input_get_byte(in);
+ lenbyte = k5_input_get_byte(in);
+ if (lenbyte < 128) {
+ len = lenbyte;
+ } else {
+ len = 0;
+ for (i = 0; i < (lenbyte & 0x7F); i++) {
+ if (len > (SIZE_MAX >> 8)) {
+ k5_input_set_status(in, EOVERFLOW);
+ return false;
+ }
+ len = (len << 8) | k5_input_get_byte(in);
+ }
+ }
+
+ bytes = k5_input_get_bytes(in, len);
+ if (bytes == NULL)
+ return false;
+ k5_input_init(contents_out, bytes, len);
+ return true;
+}
+
+#endif /* K5_DER_H */
* matches the variable name. Keep these alphabetized. */
#define KRB5_CONF_ACL_FILE "acl_file"
#define KRB5_CONF_ADMIN_SERVER "admin_server"
+#define KRB5_CONF_ALLOW_DES3 "allow_des3"
+#define KRB5_CONF_ALLOW_RC4 "allow_rc4"
#define KRB5_CONF_ALLOW_WEAK_CRYPTO "allow_weak_crypto"
#define KRB5_CONF_AUTH_TO_LOCAL "auth_to_local"
#define KRB5_CONF_AUTH_TO_LOCAL_NAMES "auth_to_local_names"
struct _kdb_log_context *kdblog_context;
krb5_boolean allow_weak_crypto;
+ krb5_boolean allow_des3;
+ krb5_boolean allow_rc4;
krb5_boolean ignore_acceptor_hostname;
krb5_boolean enforce_ok_as_delegate;
enum dns_canonhost dns_canonicalize_hostname;
return (krb5_deltat)((uint32_t)a - (uint32_t)b);
}
+/* Return (end - start) as an unsigned 32-bit value, or 0 if start > end. */
+static inline uint32_t
+ts_interval(krb5_timestamp start, krb5_timestamp end)
+{
+ if ((uint32_t)start > (uint32_t)end)
+ return 0;
+ return (uint32_t)end - (uint32_t)start;
+}
+
/* Increment a timestamp by a signed 32-bit interval, without relying on
* undefined behavior. */
static inline krb5_timestamp
#define TRACE_FAST_ARMOR_CCACHE(c, ccache_name) \
TRACE(c, "FAST armor ccache: {str}", ccache_name)
#define TRACE_FAST_ARMOR_CCACHE_KEY(c, keyblock) \
- TRACE(c, "Armor ccache sesion key: {keyblock}", keyblock)
+ TRACE(c, "Armor ccache session key: {keyblock}", keyblock)
#define TRACE_FAST_ARMOR_KEY(c, keyblock) \
TRACE(c, "FAST armor key: {keyblock}", keyblock)
#define TRACE_FAST_CCACHE_CONFIG(c) \
typedef krb5_ucs4 krb5_unicode;
-int krb5int_ucstrncmp(
- const krb5_unicode *,
- const krb5_unicode *,
- size_t);
-
-int krb5int_ucstrncasecmp(
- const krb5_unicode *,
- const krb5_unicode *,
- size_t);
-
-krb5_unicode *krb5int_ucstrnchr(
- const krb5_unicode *,
- size_t,
- krb5_unicode);
-
-krb5_unicode *krb5int_ucstrncasechr(
- const krb5_unicode *,
- size_t,
- krb5_unicode);
-
-void krb5int_ucstr2upper(
- krb5_unicode *,
- size_t);
-
#define KRB5_UTF8_NOCASEFOLD 0x0U
#define KRB5_UTF8_CASEFOLD 0x1U
#define KRB5_UTF8_ARG1NFC 0x2U
#define KRB5_UTF8_ARG2NFC 0x4U
#define KRB5_UTF8_APPROX 0x8U
-krb5_error_code krb5int_utf8_normalize(
- const krb5_data *,
- krb5_data **,
- unsigned);
-
int krb5int_utf8_normcmp(
const krb5_data *,
const krb5_data *,
unsigned);
+krb5_boolean k5_utf8_validate(const krb5_data *data);
+
#endif /* K5_UNICODE_H */
typedef uint16_t krb5_ucs2;
typedef uint32_t krb5_ucs4;
-int krb5int_utf8_to_ucs2(const char *p, krb5_ucs2 *out);
-size_t krb5int_ucs2_to_utf8(krb5_ucs2 c, char *buf);
-
int krb5int_utf8_to_ucs4(const char *p, krb5_ucs4 *out);
size_t krb5int_ucs4_to_utf8(krb5_ucs4 c, char *buf);
int k5_utf8_to_utf16le(const char *utf8, uint8_t **utf16_out,
size_t *nbytes_out);
-/* returns the number of bytes in the UTF-8 string */
-size_t krb5int_utf8_bytes(const char *);
-/* returns the number of UTF-8 characters in the string */
-size_t krb5int_utf8_chars(const char *);
-/* returns the number of UTF-8 characters in the counted string */
-size_t krb5int_utf8c_chars(const char *, size_t);
-/* returns the length (in bytes) of the UTF-8 character */
-int krb5int_utf8_offset(const char *);
-/* returns the length (in bytes) indicated by the UTF-8 character */
-int krb5int_utf8_charlen(const char *);
-
-/* returns the length (in bytes) indicated by the UTF-8 character
- * also checks that shortest possible encoding was used
- */
-int krb5int_utf8_charlen2(const char *);
-
-/* copies a UTF-8 character and returning number of bytes copied */
-int krb5int_utf8_copy(char *, const char *);
-
-/* returns pointer of next UTF-8 character in string */
-char *krb5int_utf8_next( const char *);
-/* returns pointer of previous UTF-8 character in string */
-char *krb5int_utf8_prev( const char *);
-
-/* primitive ctype routines -- not aware of non-ascii characters */
-int krb5int_utf8_isascii( const char *);
-int krb5int_utf8_isalpha( const char *);
-int krb5int_utf8_isalnum( const char *);
-int krb5int_utf8_isdigit( const char *);
-int krb5int_utf8_isxdigit( const char *);
-int krb5int_utf8_isspace( const char *);
-
-/* span characters not in set, return bytes spanned */
-size_t krb5int_utf8_strcspn( const char* str, const char *set);
-/* span characters in set, return bytes spanned */
-size_t krb5int_utf8_strspn( const char* str, const char *set);
-/* return first occurrence of character in string */
-char *krb5int_utf8_strchr( const char* str, const char *chr);
-/* return first character of set in string */
-char *krb5int_utf8_strpbrk( const char* str, const char *set);
-/* reentrant tokenizer */
-char *krb5int_utf8_strtok( char* sp, const char* sep, char **last);
-
/* Optimizations */
extern const char krb5int_utf8_lentab[128];
extern const char krb5int_utf8_mintab[32];
(krb5int_utf8_mintab[KRB5_UTF8_BV(p) & 0x1f] & (p)[1])) ? \
l : 0)
-#define KRB5_UTF8_OFFSET(p) (KRB5_UTF8_ISASCII(p) \
- ? 1 : krb5int_utf8_offset((p)) )
-
-#define KRB5_UTF8_COPY(d,s) (KRB5_UTF8_ISASCII(s) \
- ? (*(d) = *(s), 1) : krb5int_utf8_copy((d),(s)))
-
-#define KRB5_UTF8_NEXT(p) (KRB5_UTF8_ISASCII(p) \
- ? (char *)(p)+1 : krb5int_utf8_next((p)))
-
-#define KRB5_UTF8_INCR(p) ((p) = KRB5_UTF8_NEXT(p))
-
-/* For symmetry */
-#define KRB5_UTF8_PREV(p) (krb5int_utf8_prev((p)))
-#define KRB5_UTF8_DECR(p) ((p)=KRB5_UTF8_PREV((p)))
-
/*
* these macros assume 'x' is an ASCII x
* and assume the "C" locale
*/
-#define KRB5_ASCII(c) (!((c) & 0x80))
-#define KRB5_SPACE(c) ((c) == ' ' || (c) == '\t' || (c) == '\n')
-#define KRB5_DIGIT(c) ((c) >= '0' && (c) <= '9')
-#define KRB5_LOWER(c) ((c) >= 'a' && (c) <= 'z')
#define KRB5_UPPER(c) ((c) >= 'A' && (c) <= 'Z')
-#define KRB5_ALPHA(c) (KRB5_LOWER(c) || KRB5_UPPER(c))
-#define KRB5_ALNUM(c) (KRB5_ALPHA(c) || KRB5_DIGIT(c))
-
-#define KRB5_LDH(c) (KRB5_ALNUM(c) || (c) == '-')
-
-#define KRB5_HEXLOWER(c) ((c) >= 'a' && (c) <= 'f')
-#define KRB5_HEXUPPER(c) ((c) >= 'A' && (c) <= 'F')
-#define KRB5_HEX(c) (KRB5_DIGIT(c) || \
- KRB5_HEXLOWER(c) || KRB5_HEXUPPER(c))
#endif /* K5_UTF8_H */
#ifndef KRB5_KDB5__
#define KRB5_KDB5__
+#include <time.h>
#include <krb5.h>
/* This version will be incremented when incompatible changes are made to the
#define KRB5_DB_ITER_RECURSE 0x00000004
/* String attribute names recognized by krb5 */
+#define KRB5_KDB_SK_PAC_PRIVSVR_ENCTYPE "pac_privsvr_enctype"
#define KRB5_KDB_SK_SESSION_ENCTYPES "session_enctypes"
#define KRB5_KDB_SK_REQUIRE_AUTH "require_auth"
*
* The certauth pluggable interface currently has only one supported major
* version, which is 1. Major version 1 has a current minor version number of
- * 1.
+ * 2.
*
* certauth plugin modules should define a function named
* certauth_<modulename>_initvt, matching the signature:
krb5_certauth_moddata *moddata_out);
/*
+ * Optional: Initialize module data. Supersedes init if present.
+ */
+typedef krb5_error_code
+(*krb5_certauth_init_ex_fn)(krb5_context context, const char *const *realmlist,
+ krb5_certauth_moddata *moddata_out);
+
+/*
* Optional: Clean up the module data.
*/
typedef void
krb5_certauth_fini_fn fini;
krb5_certauth_authorize_fn authorize;
krb5_certauth_free_indicator_fn free_ind;
+ /* Minor version 1 ends here. */
+
+ krb5_certauth_init_ex_fn init_ex;
+ /* Minor version 2 ends here. */
} *krb5_certauth_vtable;
#endif /* KRB5_CERTAUTH_PLUGIN_H */
#define KRB5_PADATA_AS_FRESHNESS 150 /**< RFC 8070 */
#define KRB5_PADATA_SPAKE 151
#define KRB5_PADATA_REDHAT_IDP_OAUTH2 152 /**< Red Hat IdP mechanism */
+#define KRB5_PADATA_REDHAT_PASSKEY 153 /**< Red Hat Passkey mechanism */
#define KRB5_PADATA_PAC_OPTIONS 167 /**< MS-KILE and MS-SFU */
#define KRB5_SAM_USE_SAD_AS_KEY 0x80000000
#define KRB5_PAC_TICKET_CHECKSUM 16 /**< Ticket checksum */
#define KRB5_PAC_ATTRIBUTES_INFO 17 /**< PAC attributes */
#define KRB5_PAC_REQUESTOR 18 /**< PAC requestor SID */
+#define KRB5_PAC_FULL_CHECKSUM 19 /**< KDC full checksum */
struct krb5_pac_data;
/** PAC data structure to convey authorization information */
%token tAGO tID tDST tNEVER
%token <Number> tDAY tDAYZONE tMINUTE_UNIT tMONTH tMONTH_UNIT
-%token <Number> tSEC_UNIT tSNUMBER tUNUMBER tZONE tMERIDIAN
+%token <Number> tSEC_UNIT tSNUMBER tUNUMBER tZONE
+%token <Meridian> tMERIDIAN
%type <Meridian> o_merid
%%
if (*sp == fl->quotechar)
k5_buf_add_len(&buf, sp, 1);
}
- return buf.data;
+ return k5_buf_cstring(&buf);
}
/*
*incr = 0;
k5_buf_truncate(&buf, 0);
} else {
- return buf.data;
+ return k5_buf_cstring(&buf);
}
}
}
#include <arpa/inet.h>
#include <string.h>
-static krb5_error_code make_too_big_error(kdc_realm_t *kdc_active_realm,
- krb5_data **out);
+static krb5_error_code make_too_big_error(kdc_realm_t *realm, krb5_data **out);
struct dispatch_state {
loop_respond_fn respond;
{
loop_respond_fn oldrespond = state->respond;
void *oldarg = state->arg;
- kdc_realm_t *kdc_active_realm = state->active_realm;
if (state->is_tcp == 0 && response &&
response->length > (unsigned int)max_dgram_reply_size) {
- krb5_free_data(kdc_context, response);
+ krb5_free_data(NULL, response);
response = NULL;
- code = make_too_big_error(kdc_active_realm, &response);
+ code = make_too_big_error(state->active_realm, &response);
if (code)
krb5_klog_syslog(LOG_ERR, "error constructing "
"KRB_ERR_RESPONSE_TOO_BIG error: %s",
}
static krb5_error_code
-make_too_big_error(kdc_realm_t *kdc_active_realm, krb5_data **out)
+make_too_big_error(kdc_realm_t *realm, krb5_data **out)
{
+ krb5_context context = realm->realm_context;
krb5_error errpkt;
krb5_error_code retval;
krb5_data *scratch;
*out = NULL;
memset(&errpkt, 0, sizeof(errpkt));
- retval = krb5_us_timeofday(kdc_context, &errpkt.stime, &errpkt.susec);
+ retval = krb5_us_timeofday(context, &errpkt.stime, &errpkt.susec);
if (retval)
return retval;
errpkt.error = KRB_ERR_RESPONSE_TOO_BIG;
- errpkt.server = tgs_server;
+ errpkt.server = realm->realm_tgsprinc;
errpkt.client = NULL;
errpkt.text.length = 0;
errpkt.text.data = 0;
scratch = malloc(sizeof(*scratch));
if (scratch == NULL)
return ENOMEM;
- retval = krb5_mk_error(kdc_context, &errpkt, scratch);
+ retval = krb5_mk_error(context, &errpkt, scratch);
if (retval) {
free(scratch);
return retval;
static krb5_error_code
prepare_error_as(struct kdc_request_state *, krb5_kdc_req *, krb5_db_entry *,
- krb5_keyblock *, int, krb5_pa_data **, krb5_boolean,
- krb5_principal, krb5_data **, const char *);
+ krb5_keyblock *, krb5_error_code, krb5_pa_data **,
+ krb5_boolean, krb5_principal, krb5_data **, const char *);
/* Determine the key-expiration value according to RFC 4120 section 5.4.2. */
static krb5_timestamp
static void
finish_process_as_req(struct as_req_state *state, krb5_error_code errcode)
{
+ kdc_realm_t *realm = state->active_realm;
+ krb5_context context = realm->realm_context;
krb5_keyblock *as_encrypting_key = NULL;
krb5_data *response = NULL;
const char *emsg = 0;
int did_log = 0;
loop_respond_fn oldrespond;
void *oldarg;
- kdc_realm_t *kdc_active_realm = state->active_realm;
krb5_audit_state *au_state = state->au_state;
krb5_keyblock *replaced_reply_key = NULL;
state->ticket_reply.enc_part2 = &state->enc_tkt_reply;
- errcode = check_kdcpolicy_as(kdc_context, state->request, state->client,
+ errcode = check_kdcpolicy_as(context, state->request, state->client,
state->server, state->auth_indicators,
state->kdc_time, &state->enc_tkt_reply.times,
&state->status);
if (errcode)
goto egress;
- errcode = get_first_current_key(kdc_context, state->server,
+ errcode = get_first_current_key(context, state->server,
&state->server_keyblock);
if (errcode) {
state->status = "FINDING_SERVER_KEY";
/* Fetch the padata info to be returned (do this before
* authdata to handle possible replacement of reply key
*/
- errcode = return_padata(kdc_context, &state->rock, state->req_pkt,
+ errcode = return_padata(context, &state->rock, state->req_pkt,
state->request, &state->reply,
&state->client_keyblock, &state->pa_context);
if (errcode) {
if (state->rock.replaced_reply_key)
replaced_reply_key = &state->client_keyblock;
- errcode = handle_authdata(kdc_active_realm, state->c_flags, state->client,
+ errcode = handle_authdata(realm, state->c_flags, state->client,
state->server, NULL, state->local_tgt,
&state->local_tgt_key, &state->client_keyblock,
&state->server_keyblock, NULL,
goto egress;
}
- errcode = check_indicators(kdc_context, state->server,
- state->auth_indicators);
+ errcode = check_indicators(context, state->server, state->auth_indicators);
if (errcode) {
state->status = "HIGHER_AUTHENTICATION_REQUIRED";
goto egress;
}
- errcode = krb5_encrypt_tkt_part(kdc_context, &state->server_keyblock,
+ errcode = krb5_encrypt_tkt_part(context, &state->server_keyblock,
&state->ticket_reply);
if (errcode)
goto egress;
- errcode = kau_make_tkt_id(kdc_context, &state->ticket_reply,
+ errcode = kau_make_tkt_id(context, &state->ticket_reply,
&au_state->tkt_out_id);
if (errcode)
goto egress;
&as_encrypting_key);
if (errcode)
goto egress;
- errcode = return_enc_padata(kdc_context, state->req_pkt, state->request,
+ errcode = return_enc_padata(context, state->req_pkt, state->request,
as_encrypting_key, state->server,
&state->reply_encpart, FALSE);
if (errcode) {
if (kdc_fast_hide_client(state->rstate))
state->reply.client = (krb5_principal)krb5_anonymous_principal();
- errcode = krb5_encode_kdc_rep(kdc_context, KRB5_AS_REP,
- &state->reply_encpart, 0,
- as_encrypting_key,
- &state->reply, &response);
+ errcode = krb5_encode_kdc_rep(context, KRB5_AS_REP, &state->reply_encpart,
+ 0, as_encrypting_key, &state->reply,
+ &response);
if (state->client_key != NULL)
state->reply.enc_part.kvno = state->client_key->key_data_kvno;
if (errcode)
state->reply.enc_part.ciphertext.length);
free(state->reply.enc_part.ciphertext.data);
- log_as_req(kdc_context, state->local_addr, state->remote_addr,
+ log_as_req(context, state->local_addr, state->remote_addr,
state->request, &state->reply, state->client, state->cname,
state->server, state->sname, state->kdc_time, 0, 0, 0);
did_log = 1;
au_state->status = state->status;
au_state->reply = &state->reply;
- kau_as_req(kdc_context,
- (errcode || state->preauth_err) ? FALSE : TRUE, au_state);
+ kau_as_req(context, (errcode || state->preauth_err) ? FALSE : TRUE,
+ au_state);
kau_free_kdc_req(au_state);
- free_padata_context(kdc_context, state->pa_context);
+ free_padata_context(context, state->pa_context);
if (as_encrypting_key)
- krb5_free_keyblock(kdc_context, as_encrypting_key);
+ krb5_free_keyblock(context, as_encrypting_key);
if (errcode)
- emsg = krb5_get_error_message(kdc_context, errcode);
+ emsg = krb5_get_error_message(context, errcode);
if (state->status) {
- log_as_req(kdc_context, state->local_addr, state->remote_addr,
+ log_as_req(context, state->local_addr, state->remote_addr,
state->request, &state->reply, state->client,
state->cname, state->server, state->sname, state->kdc_time,
state->status, errcode, emsg);
state->status = emsg;
}
if (errcode != KRB5KDC_ERR_DISCARD) {
- errcode -= ERROR_TABLE_BASE_krb5;
- if (errcode < 0 || errcode > KRB_ERR_MAX)
- errcode = KRB_ERR_GENERIC;
-
errcode = prepare_error_as(state->rstate, state->request,
state->local_tgt, &state->local_tgt_key,
errcode, state->e_data,
}
if (emsg)
- krb5_free_error_message(kdc_context, emsg);
+ krb5_free_error_message(context, emsg);
if (state->enc_tkt_reply.authorization_data != NULL)
- krb5_free_authdata(kdc_context,
- state->enc_tkt_reply.authorization_data);
+ krb5_free_authdata(context, state->enc_tkt_reply.authorization_data);
if (state->local_tgt_key.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &state->local_tgt_key);
+ krb5_free_keyblock_contents(context, &state->local_tgt_key);
if (state->server_keyblock.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &state->server_keyblock);
+ krb5_free_keyblock_contents(context, &state->server_keyblock);
if (state->client_keyblock.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &state->client_keyblock);
+ krb5_free_keyblock_contents(context, &state->client_keyblock);
if (state->reply.padata != NULL)
- krb5_free_pa_data(kdc_context, state->reply.padata);
+ krb5_free_pa_data(context, state->reply.padata);
if (state->reply_encpart.enc_padata)
- krb5_free_pa_data(kdc_context, state->reply_encpart.enc_padata);
+ krb5_free_pa_data(context, state->reply_encpart.enc_padata);
if (state->cname != NULL)
free(state->cname);
if (state->sname != NULL)
free(state->sname);
- krb5_db_free_principal(kdc_context, state->client);
- krb5_db_free_principal(kdc_context, state->server);
- krb5_db_free_principal(kdc_context, state->local_tgt_storage);
+ krb5_db_free_principal(context, state->client);
+ krb5_db_free_principal(context, state->server);
+ krb5_db_free_principal(context, state->local_tgt_storage);
if (state->session_key.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &state->session_key);
+ krb5_free_keyblock_contents(context, &state->session_key);
if (state->ticket_reply.enc_part.ciphertext.data != NULL) {
memset(state->ticket_reply.enc_part.ciphertext.data , 0,
state->ticket_reply.enc_part.ciphertext.length);
free(state->ticket_reply.enc_part.ciphertext.data);
}
- krb5_free_pa_data(kdc_context, state->e_data);
- krb5_free_data(kdc_context, state->inner_body);
+ krb5_free_pa_data(context, state->e_data);
+ krb5_free_data(context, state->inner_body);
kdc_free_rstate(state->rstate);
- krb5_free_kdc_req(kdc_context, state->request);
+ krb5_free_kdc_req(context, state->request);
k5_free_data_ptr_list(state->auth_indicators);
assert(did_log != 0);
void
process_as_req(krb5_kdc_req *request, krb5_data *req_pkt,
const krb5_fulladdr *local_addr,
- const krb5_fulladdr *remote_addr, kdc_realm_t *kdc_active_realm,
+ const krb5_fulladdr *remote_addr, kdc_realm_t *realm,
verto_ctx *vctx, loop_respond_fn respond, void *arg)
{
+ krb5_context context = realm->realm_context;
krb5_error_code errcode;
krb5_data encoded_req_body;
krb5_enctype useenctype;
state->req_pkt = req_pkt;
state->local_addr = local_addr;
state->remote_addr = remote_addr;
- state->active_realm = kdc_active_realm;
+ state->active_realm = realm;
- errcode = kdc_make_rstate(kdc_active_realm, &state->rstate);
+ errcode = kdc_make_rstate(realm, &state->rstate);
if (errcode != 0) {
(*respond)(arg, errcode, NULL);
free(state);
}
/* Initialize audit state. */
- errcode = kau_init_kdc_req(kdc_context, state->request, remote_addr,
+ errcode = kau_init_kdc_req(context, state->request, remote_addr,
&au_state);
if (errcode) {
(*respond)(arg, errcode, NULL);
}
/* Seed the audit trail with the request ID and basic information. */
- kau_as_req(kdc_context, TRUE, au_state);
+ kau_as_req(context, TRUE, au_state);
- errcode = krb5_timeofday(kdc_context, &state->kdc_time);
+ errcode = krb5_timeofday(context, &state->kdc_time);
if (errcode)
goto errout;
}
if (state->inner_body == NULL) {
/* Not a FAST request; copy the encoded request body. */
- errcode = krb5_copy_data(kdc_context, &encoded_req_body,
+ errcode = krb5_copy_data(context, &encoded_req_body,
&state->inner_body);
if (errcode)
goto errout;
errcode = KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN;
goto errout;
}
- if ((errcode = krb5_unparse_name(kdc_context,
- state->request->client,
- &state->cname)))
+ errcode = krb5_unparse_name(context, state->request->client,
+ &state->cname);
+ if (errcode)
goto errout;
limit_string(state->cname);
errcode = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
goto errout;
}
- if ((errcode = krb5_unparse_name(kdc_context,
- state->request->server,
- &state->sname)))
+ errcode = krb5_unparse_name(context, state->request->server,
+ &state->sname);
+ if (errcode)
goto errout;
limit_string(state->sname);
if (isflagset(state->request->kdc_options, KDC_OPT_CANONICALIZE) ||
state->request->client->type == KRB5_NT_ENTERPRISE_PRINCIPAL)
setflag(state->c_flags, KRB5_KDB_FLAG_REFERRAL_OK);
- errcode = lookup_client(kdc_context, state->request, state->c_flags,
+ errcode = lookup_client(context, state->request, state->c_flags,
&state->client);
if (errcode == KRB5_KDB_CANTLOCK_DB)
errcode = KRB5KDC_ERR_SVC_UNAVAILABLE;
au_state->stage = SRVC_PRINC;
- errcode = krb5_db_get_principal(kdc_context, state->request->server, 0,
+ errcode = krb5_db_get_principal(context, state->request->server, 0,
&state->server);
if (errcode == KRB5_KDB_CANTLOCK_DB)
errcode = KRB5KDC_ERR_SVC_UNAVAILABLE;
goto errout;
}
- errcode = get_local_tgt(kdc_context, &state->request->server->realm,
+ errcode = get_local_tgt(context, &state->request->server->realm,
state->server, &state->local_tgt,
&state->local_tgt_storage, &state->local_tgt_key);
if (errcode) {
au_state->stage = VALIDATE_POL;
- if ((errcode = validate_as_request(kdc_active_realm,
- state->request, state->client,
- state->server, state->kdc_time,
- &state->status, &state->e_data))) {
- errcode += ERROR_TABLE_BASE_krb5;
+ errcode = validate_as_request(realm, state->request, state->client,
+ state->server, state->kdc_time,
+ &state->status, &state->e_data);
+ if (errcode)
goto errout;
- }
au_state->stage = ISSUE_TKT;
/*
* Select the keytype for the ticket session key.
*/
- if ((useenctype = select_session_keytype(kdc_active_realm, state->server,
- state->request->nktypes,
- state->request->ktype)) == 0) {
+ useenctype = select_session_keytype(context, state->server,
+ state->request->nktypes,
+ state->request->ktype);
+ if (useenctype == 0) {
/* unsupported ktype */
state->status = "BAD_ENCRYPTION_TYPE";
errcode = KRB5KDC_ERR_ETYPE_NOSUPP;
goto errout;
}
- if ((errcode = krb5_c_make_random_key(kdc_context, useenctype,
- &state->session_key)))
+ errcode = krb5_c_make_random_key(context, useenctype, &state->session_key);
+ if (errcode)
goto errout;
/*
else
state->enc_tkt_reply.times.starttime = state->kdc_time;
- kdc_get_ticket_endtime(kdc_active_realm,
- state->enc_tkt_reply.times.starttime,
+ kdc_get_ticket_endtime(realm, state->enc_tkt_reply.times.starttime,
kdc_infinity, state->request->till, state->client,
state->server, &state->enc_tkt_reply.times.endtime);
- kdc_get_ticket_renewtime(kdc_active_realm, state->request, NULL,
- state->client, state->server,
- &state->enc_tkt_reply);
+ kdc_get_ticket_renewtime(realm, state->request, NULL, state->client,
+ state->server, &state->enc_tkt_reply.flags,
+ &state->enc_tkt_reply.times);
/*
* starttime is optional, and treated as authtime if not present.
/* If anonymous requests are being used, adjust the realm of the client
* principal. */
if (isflagset(state->request->kdc_options, KDC_OPT_REQUEST_ANONYMOUS)) {
- if (!krb5_principal_compare_any_realm(kdc_context,
- state->request->client,
+ if (!krb5_principal_compare_any_realm(context, state->request->client,
krb5_anonymous_principal())) {
errcode = KRB5KDC_ERR_BADOPTION;
/* Anonymous requested but anonymous principal not used.*/
state->status = "VALIDATE_ANONYMOUS_PRINCIPAL";
goto errout;
}
- krb5_free_principal(kdc_context, state->request->client);
+ krb5_free_principal(context, state->request->client);
state->request->client = NULL;
- errcode = krb5_copy_principal(kdc_context, krb5_anonymous_principal(),
+ errcode = krb5_copy_principal(context, krb5_anonymous_principal(),
&state->request->client);
if (errcode)
goto errout;
setflag(state->client->attributes, KRB5_KDB_REQUIRES_PRE_AUTH);
}
- errcode = select_client_key(kdc_context, state->client,
- state->request->ktype, state->request->nktypes,
+ errcode = select_client_key(context, state->client, state->request->ktype,
+ state->request->nktypes,
&state->client_keyblock, &state->client_key);
if (errcode) {
state->status = "DECRYPT_CLIENT_KEY";
state->rock.client_key = state->client_key;
state->rock.client_keyblock = &state->client_keyblock;
- errcode = kdc_fast_read_cookie(kdc_context, state->rstate, state->request,
+ errcode = kdc_fast_read_cookie(context, state->rstate, state->request,
state->local_tgt, &state->local_tgt_key);
if (errcode) {
state->status = "READ_COOKIE";
* Check the preauthentication if it is there.
*/
if (state->request->padata) {
- check_padata(kdc_context, &state->rock, state->req_pkt,
- state->request, &state->enc_tkt_reply, &state->pa_context,
- &state->e_data, &state->typed_e_data, finish_preauth,
- state);
+ check_padata(context, &state->rock, state->req_pkt, state->request,
+ &state->enc_tkt_reply, &state->pa_context, &state->e_data,
+ &state->typed_e_data, finish_preauth, state);
} else
finish_preauth(state, 0);
return;
static krb5_error_code
prepare_error_as(struct kdc_request_state *rstate, krb5_kdc_req *request,
krb5_db_entry *local_tgt, krb5_keyblock *local_tgt_key,
- int error, krb5_pa_data **e_data_in,
+ krb5_error_code code, krb5_pa_data **e_data_in,
krb5_boolean typed_e_data, krb5_principal canon_client,
krb5_data **response, const char *status)
{
+ krb5_context context = rstate->realm_data->realm_context;
krb5_error errpkt;
krb5_error_code retval;
krb5_data *scratch = NULL, *e_data_asn1 = NULL, *fast_edata = NULL;
krb5_pa_data **e_data = NULL, *cookie = NULL;
- kdc_realm_t *kdc_active_realm = rstate->realm_data;
size_t count;
errpkt.magic = KV5M_ERROR;
if (e_data == NULL)
return ENOMEM;
memcpy(e_data, e_data_in, count * sizeof(*e_data));
- retval = kdc_fast_make_cookie(kdc_context, rstate, local_tgt,
- local_tgt_key, request->client,
- &cookie);
+ retval = kdc_fast_make_cookie(context, rstate, local_tgt,
+ local_tgt_key, request->client, &cookie);
e_data[count] = cookie;
}
errpkt.ctime = 0;
errpkt.cusec = 0;
- retval = krb5_us_timeofday(kdc_context, &errpkt.stime, &errpkt.susec);
+ retval = krb5_us_timeofday(context, &errpkt.stime, &errpkt.susec);
if (retval)
goto cleanup;
- errpkt.error = error;
+ errpkt.error = errcode_to_protocol(code);
errpkt.server = request->server;
- errpkt.client = (error == KDC_ERR_WRONG_REALM) ? canon_client :
+ errpkt.client = (code == KRB5KDC_ERR_WRONG_REALM) ? canon_client :
request->client;
errpkt.text = string2data((char *)status);
} else
errpkt.e_data = empty_data();
- retval = kdc_fast_handle_error(kdc_context, rstate, request, e_data,
- &errpkt, &fast_edata);
+ retval = kdc_fast_handle_error(context, rstate, request, e_data, &errpkt,
+ &fast_edata);
if (retval)
goto cleanup;
if (fast_edata != NULL)
goto cleanup;
if (kdc_fast_hide_client(rstate) && errpkt.client != NULL)
errpkt.client = (krb5_principal)krb5_anonymous_principal();
- retval = krb5_mk_error(kdc_context, &errpkt, scratch);
+ retval = krb5_mk_error(context, &errpkt, scratch);
if (retval)
goto cleanup;
scratch = NULL;
cleanup:
- krb5_free_data(kdc_context, fast_edata);
- krb5_free_data(kdc_context, e_data_asn1);
+ krb5_free_data(context, fast_edata);
+ krb5_free_data(context, e_data_asn1);
free(scratch);
free(e_data);
if (cookie != NULL)
#include "adm_proto.h"
#include <ctype.h>
-static krb5_error_code
-find_alternate_tgs(kdc_realm_t *, krb5_principal, krb5_db_entry **,
- const char**);
-
-static krb5_error_code
-prepare_error_tgs(struct kdc_request_state *, krb5_kdc_req *,krb5_ticket *,int,
- krb5_principal,krb5_data **,const char *, krb5_pa_data **);
-
-static krb5_error_code
-decrypt_2ndtkt(kdc_realm_t *, krb5_kdc_req *, krb5_flags, krb5_db_entry *,
- krb5_keyblock *, const krb5_ticket **, krb5_pac *,
- krb5_db_entry **, krb5_keyblock **, const char **);
-
-static krb5_error_code
-gen_session_key(kdc_realm_t *, krb5_kdc_req *, krb5_db_entry *,
- krb5_keyblock *, const char **);
-
-static krb5_int32
-find_referral_tgs(kdc_realm_t *, krb5_kdc_req *, krb5_principal *);
-
-static krb5_error_code
-db_get_svc_princ(krb5_context, krb5_principal, krb5_flags,
- krb5_db_entry **, const char **);
-
-static krb5_error_code
-search_sprinc(kdc_realm_t *, krb5_kdc_req *, krb5_flags,
- krb5_db_entry **, const char **);
-
-/*ARGSUSED*/
-krb5_error_code
-process_tgs_req(krb5_kdc_req *request, krb5_data *pkt,
- const krb5_fulladdr *from, kdc_realm_t *kdc_active_realm,
- krb5_data **response)
-{
- krb5_keyblock * subkey = 0;
- krb5_keyblock *header_key = NULL;
- krb5_keyblock *stkt_server_key = NULL;
- krb5_keyblock *subject_key;
- krb5_db_entry *server = NULL;
- krb5_db_entry *stkt_server = NULL;
- krb5_db_entry *subject_server;
- krb5_kdc_rep reply;
- krb5_enc_kdc_rep_part reply_encpart;
- krb5_ticket ticket_reply, *header_ticket = 0;
- const krb5_ticket *stkt = NULL;
- krb5_enc_tkt_part enc_tkt_reply;
- int newtransited = 0;
- krb5_error_code retval = 0;
- krb5_keyblock server_keyblock, *encrypting_key;
- krb5_timestamp kdc_time, authtime = 0;
- krb5_keyblock session_key, local_tgt_key;
- krb5_keyblock *reply_key = NULL;
- krb5_principal cprinc = NULL, sprinc = NULL, altcprinc = NULL;
- krb5_principal stkt_authdata_client = NULL;
- krb5_last_req_entry *nolrarray[2], nolrentry;
- int errcode;
- const char *status = 0;
- krb5_enc_tkt_part *header_enc_tkt = NULL; /* TGT */
- krb5_enc_tkt_part *subject_tkt = NULL; /* TGT or evidence ticket */
- krb5_db_entry *client = NULL, *header_server = NULL;
- krb5_db_entry *local_tgt, *local_tgt_storage = NULL;
- krb5_pa_s4u_x509_user *s4u_x509_user = NULL; /* protocol transition request */
- krb5_authdata **kdc_issued_auth_data = NULL; /* auth data issued by KDC */
- unsigned int c_flags = 0, s_flags = 0; /* client/server KDB flags */
- krb5_boolean is_referral, is_crossrealm;
- const char *emsg = NULL;
- krb5_kvno ticket_kvno = 0;
- struct kdc_request_state *state = NULL;
- krb5_pa_data *pa_tgs_req; /*points into request*/
- krb5_data scratch;
- krb5_pa_data **e_data = NULL;
- krb5_audit_state *au_state = NULL;
- krb5_data **auth_indicators = NULL;
- krb5_pac header_pac = NULL, stkt_pac = NULL, subject_pac;
-
- memset(&reply, 0, sizeof(reply));
- memset(&reply_encpart, 0, sizeof(reply_encpart));
- memset(&ticket_reply, 0, sizeof(ticket_reply));
- memset(&enc_tkt_reply, 0, sizeof(enc_tkt_reply));
- memset(&server_keyblock, 0, sizeof(server_keyblock));
- memset(&local_tgt_key, 0, sizeof(local_tgt_key));
- session_key.contents = NULL;
-
- /* Save pointer to client-requested service principal, in case of
- * errors before a successful call to search_sprinc(). */
- sprinc = request->server;
-
- if (request->msg_type != KRB5_TGS_REQ) {
- krb5_free_kdc_req(kdc_context, request);
- return KRB5_BADMSGTYPE;
- }
-
- errcode = kdc_make_rstate(kdc_active_realm, &state);
- if (errcode != 0)
- goto cleanup;
-
- /* Initialize audit state. */
- errcode = kau_init_kdc_req(kdc_context, request, from, &au_state);
- if (errcode)
- goto cleanup;
-
- /* Seed the audit trail with the request ID and basic information. */
- kau_tgs_req(kdc_context, TRUE, au_state);
-
- errcode = kdc_process_tgs_req(kdc_active_realm,
- request, from, pkt, &header_ticket,
- &header_server, &header_key, &subkey,
- &pa_tgs_req);
- if (header_ticket && header_ticket->enc_part2)
- cprinc = header_ticket->enc_part2->client;
-
- if (errcode) {
- status = "PROCESS_TGS";
- goto cleanup;
- }
-
- if (!header_ticket) {
- errcode = KRB5_NO_TKT_SUPPLIED; /* XXX? */
- goto cleanup;
- }
- errcode = kau_make_tkt_id(kdc_context, header_ticket,
- &au_state->tkt_in_id);
- if (errcode)
- goto cleanup;
-
- scratch.length = pa_tgs_req->length;
- scratch.data = (char *) pa_tgs_req->contents;
- errcode = kdc_find_fast(&request, &scratch, subkey,
- header_ticket->enc_part2->session, state, NULL);
- /* Reset sprinc because kdc_find_fast() can replace request. */
- sprinc = request->server;
- if (errcode !=0) {
- status = "FIND_FAST";
- goto cleanup;
- }
- if (sprinc == NULL) {
- status = "NULL_SERVER";
- errcode = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
- goto cleanup;
- }
-
- errcode = get_local_tgt(kdc_context, &sprinc->realm, header_server,
- &local_tgt, &local_tgt_storage, &local_tgt_key);
- if (errcode) {
- status = "GET_LOCAL_TGT";
- goto cleanup;
- }
-
- errcode = get_verified_pac(kdc_context, header_ticket->enc_part2,
- header_server->princ, header_key, local_tgt,
- &local_tgt_key, &header_pac);
- if (errcode) {
- status = "HEADER_PAC";
- goto cleanup;
- }
-
- /* Ignore (for now) the request modification due to FAST processing. */
- au_state->request = request;
+struct tgs_req_info {
+ /* The decoded request. Ownership is transferred to this structure. This
+ * will be replaced with the inner FAST body if present. */
+ krb5_kdc_req *req;
/*
- * Pointer to the encrypted part of the header ticket, which may be
- * replaced to point to the encrypted part of the evidence ticket
- * if constrained delegation is used. This simplifies the number of
- * special cases for constrained delegation.
+ * The decrypted authentication header ticket from the request's
+ * PA-TGS-REQ, the KDB entry for its server, its encryption key, the
+ * PA-TGS-REQ subkey if present, and the decoded and verified header ticket
+ * PAC if present.
*/
- header_enc_tkt = header_ticket->enc_part2;
+ krb5_ticket *header_tkt;
+ krb5_db_entry *header_server;
+ krb5_keyblock *header_key;
+ krb5_keyblock *subkey;
+ krb5_pac header_pac;
/*
- * We've already dealt with the AP_REQ authentication, so we can
- * use header_ticket freely. The encrypted part (if any) has been
- * decrypted with the session key.
+ * If a second ticket is present and this is a U2U or S4U2Proxy request,
+ * the decoded and verified PAC if present, the KDB entry for the second
+ * ticket server server, and the key used to decrypt the second ticket.
*/
-
- au_state->stage = SRVC_PRINC;
-
- /* XXX make sure server here has the proper realm...taken from AP_REQ
- header? */
-
- if (isflagset(request->kdc_options, KDC_OPT_CANONICALIZE))
- setflag(s_flags, KRB5_KDB_FLAG_REFERRAL_OK);
-
- errcode = search_sprinc(kdc_active_realm, request, s_flags, &server,
- &status);
- if (errcode != 0)
- goto cleanup;
- sprinc = server->princ;
-
- /* If we got a cross-realm TGS which is not the requested server, we are
- * issuing a referral (or alternate TGT, which we treat similarly). */
- is_referral = is_cross_tgs_principal(server->princ) &&
- !krb5_principal_compare(kdc_context, request->server, server->princ);
-
- au_state->stage = VALIDATE_POL;
-
- if ((errcode = krb5_timeofday(kdc_context, &kdc_time)))
- goto cleanup;
-
- is_crossrealm = !data_eq(header_server->princ->realm, sprinc->realm);
- if (is_crossrealm)
- setflag(c_flags, KRB5_KDB_FLAG_CROSS_REALM);
- if (is_referral)
- setflag(c_flags, KRB5_KDB_FLAG_ISSUING_REFERRAL);
-
- /* Check for protocol transition */
- errcode = kdc_process_s4u2self_req(kdc_active_realm, request, server,
- subkey, header_enc_tkt->session,
- &s4u_x509_user, &client, &status);
- if (s4u_x509_user != NULL || errcode != 0) {
- if (s4u_x509_user != NULL)
- au_state->s4u2self_user = s4u_x509_user->user_id.user;
- au_state->status = status;
- kau_s4u2self(kdc_context, errcode ? FALSE : TRUE, au_state);
- au_state->s4u2self_user = NULL;
- if (errcode)
- goto cleanup;
- }
- if (s4u_x509_user != NULL)
- setflag(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION);
-
- /* For user-to-user and S4U2Proxy requests, decrypt the second ticket. */
- errcode = decrypt_2ndtkt(kdc_active_realm, request, c_flags, local_tgt,
- &local_tgt_key, &stkt, &stkt_pac, &stkt_server,
- &stkt_server_key, &status);
- if (errcode)
- goto cleanup;
-
- retval = validate_tgs_request(kdc_active_realm, request, server,
- header_ticket, header_pac, stkt, stkt_pac,
- stkt_server, kdc_time, s4u_x509_user,
- client, is_crossrealm, is_referral,
- &status, &e_data);
- if (retval) {
- if (retval == KDC_ERR_POLICY || retval == KDC_ERR_BADOPTION)
- au_state->violation = PROT_CONSTRAINT;
- errcode = retval + ERROR_TABLE_BASE_krb5;
- goto cleanup;
- }
-
- if (isflagset(request->kdc_options, KDC_OPT_CNAME_IN_ADDL_TKT)) {
- /* Do constrained delegation protocol and authorization checks. */
- setflag(c_flags, KRB5_KDB_FLAG_CONSTRAINED_DELEGATION);
-
- errcode = kdc_process_s4u2proxy_req(kdc_active_realm, c_flags,
- request, header_pac,
- stkt->enc_part2, stkt_pac,
- stkt_server, stkt_server_key,
- header_ticket->enc_part2->client,
- server, &stkt_authdata_client,
- &status);
- if (errcode == KDC_ERR_POLICY || errcode == KDC_ERR_BADOPTION)
- au_state->violation = PROT_CONSTRAINT;
- else if (errcode)
- au_state->violation = LOCAL_POLICY;
- au_state->status = status;
- retval = kau_make_tkt_id(kdc_context, stkt, &au_state->evid_tkt_id);
- if (retval) {
- errcode = retval;
- goto cleanup;
- }
- kau_s4u2proxy(kdc_context, errcode ? FALSE : TRUE, au_state);
- if (errcode)
- goto cleanup;
-
- assert(krb5_is_tgs_principal(header_ticket->server));
- }
-
- au_state->stage = ISSUE_TKT;
-
- errcode = gen_session_key(kdc_active_realm, request, server, &session_key,
- &status);
- if (errcode)
- goto cleanup;
+ krb5_pac stkt_pac;
+ krb5_db_entry *stkt_server;
+ krb5_keyblock *stkt_server_key;
+ /* For cross-realm S4U2Proxy requests, the client principal retrieved from
+ * stkt_pac. */
+ krb5_principal stkt_pac_client;
+
+ /* Storage for the local TGT KDB entry for the service realm if that isn't
+ * the header server. */
+ krb5_db_entry *local_tgt_storage;
+ /* The decrypted first key of the local TGT entry. */
+ krb5_keyblock local_tgt_key;
+
+ /* The server KDB entry. Normally the requested server, but for referral
+ * and alternate TGS replies this will be a cross-realm TGT entry. */
+ krb5_db_entry *server;
/*
- * subject_tkt will refer to the evidence ticket (for constrained
- * delegation) or the TGT. The distinction from header_enc_tkt is
- * necessary because the TGS signature only protects some fields:
- * the others could be forged by a malicious server.
+ * The subject client KDB entry for an S4U2Self request, or the header
+ * ticket client KDB entry for other requests. NULL if
+ * NO_AUTH_DATA_REQUIRED is set on the server KDB entry and this isn't an
+ * S4U2Self request, or if the client is in another realm and the KDB
+ * cannot map its principal name.
*/
+ krb5_db_entry *client;
- if (isflagset(c_flags, KRB5_KDB_FLAG_CONSTRAINED_DELEGATION)) {
- subject_tkt = stkt->enc_part2;
- subject_pac = stkt_pac;
- subject_server = stkt_server;
- subject_key = stkt_server_key;
- } else {
- subject_tkt = header_enc_tkt;
- subject_pac = header_pac;
- subject_server = header_server;
- subject_key = header_key;
- }
- authtime = subject_tkt->times.authtime;
-
- /* Extract and check auth indicators from the subject ticket, except for
- * S4U2Self requests (where the client didn't authenticate). */
- if (s4u_x509_user == NULL) {
- errcode = get_auth_indicators(kdc_context, subject_tkt, local_tgt,
- &local_tgt_key, &auth_indicators);
- if (errcode) {
- status = "GET_AUTH_INDICATORS";
- goto cleanup;
- }
+ /* The decoded S4U2Self padata from the request, if present. */
+ krb5_pa_s4u_x509_user *s4u2self;
- errcode = check_indicators(kdc_context, server, auth_indicators);
- if (errcode) {
- status = "HIGHER_AUTHENTICATION_REQUIRED";
- goto cleanup;
- }
- }
+ /* Authentication indicators retrieved from the header ticket, for
+ * non-S4U2Self requests. */
+ krb5_data **auth_indicators;
- if (is_referral)
- ticket_reply.server = server->princ;
- else
- ticket_reply.server = request->server; /* XXX careful for realm... */
+ /* Storage for a transited list with the header TGT realm added, if that
+ * realm is different from the client and server realm. */
+ krb5_data new_transited;
- enc_tkt_reply.flags = get_ticket_flags(request->kdc_options, client,
- server, header_enc_tkt);
- enc_tkt_reply.times.starttime = 0;
+ /* The KDB flags applicable to this request (a subset of {CROSS_REALM,
+ * ISSUING_REFERRAL, PROTOCOL_TRANSITION, CONSTRAINED_DELEGATION}). */
+ unsigned int flags;
- if (s4u_x509_user != NULL && !is_referral) {
- /* Check if we need to suppress the forwardable ticket flag. */
- errcode = s4u2self_forwardable(kdc_context, server, &enc_tkt_reply);
- if (errcode)
- goto cleanup;
- }
+ /* Booleans for two of the above flags, for convenience. */
+ krb5_boolean is_referral;
+ krb5_boolean is_crossrealm;
- /* don't use new addresses unless forwarded, see below */
+ /* The authtime of subject_tkt. On early failures this may be 0. */
+ krb5_timestamp authtime;
- enc_tkt_reply.caddrs = header_enc_tkt->caddrs;
- /* noaddrarray[0] = 0; */
- reply_encpart.caddrs = 0;/* optional...don't put it in */
- reply_encpart.enc_padata = NULL;
+ /* The following fields are (or contain) alias pointers and should not be
+ * freed. */
- /*
- * It should be noted that local policy may affect the
- * processing of any of these flags. For example, some
- * realms may refuse to issue renewable tickets
- */
+ /* The transited list implied by the request, aliasing new_transited or the
+ * header ticket transited field. */
+ krb5_transited transited;
- if (isflagset(request->kdc_options, KDC_OPT_FORWARDED) ||
- isflagset(request->kdc_options, KDC_OPT_PROXY)) {
+ /* Alias to the decrypted second ticket within req, if one applies to this
+ * request. */
+ const krb5_ticket *stkt;
- /* include new addresses in ticket & reply */
+ /* Alias to stkt for S4U2Proxy requests, header_tkt otherwise. */
+ krb5_enc_tkt_part *subject_tkt;
- enc_tkt_reply.caddrs = request->addresses;
- reply_encpart.caddrs = request->addresses;
- }
+ /* Alias to local_tgt_storage or header_server. */
+ krb5_db_entry *local_tgt;
- if (isflagset(request->kdc_options, KDC_OPT_POSTDATED))
- enc_tkt_reply.times.starttime = request->from;
- else
- enc_tkt_reply.times.starttime = kdc_time;
-
- if (isflagset(request->kdc_options, KDC_OPT_VALIDATE)) {
- assert(isflagset(c_flags, KRB5_KDB_FLAGS_S4U) == 0);
- /* BEWARE of allocation hanging off of ticket & enc_part2, it belongs
- to the caller */
- ticket_reply = *(header_ticket);
- enc_tkt_reply = *(header_ticket->enc_part2);
- enc_tkt_reply.authorization_data = NULL;
- clear(enc_tkt_reply.flags, TKT_FLG_INVALID);
- }
-
- if (isflagset(request->kdc_options, KDC_OPT_RENEW)) {
- krb5_timestamp old_starttime;
- krb5_deltat old_life;
-
- assert(isflagset(c_flags, KRB5_KDB_FLAGS_S4U) == 0);
- /* BEWARE of allocation hanging off of ticket & enc_part2, it belongs
- to the caller */
- ticket_reply = *(header_ticket);
- enc_tkt_reply = *(header_ticket->enc_part2);
- enc_tkt_reply.authorization_data = NULL;
-
- old_starttime = enc_tkt_reply.times.starttime ?
- enc_tkt_reply.times.starttime : enc_tkt_reply.times.authtime;
- old_life = ts_delta(enc_tkt_reply.times.endtime, old_starttime);
-
- enc_tkt_reply.times.starttime = kdc_time;
- enc_tkt_reply.times.endtime =
- ts_min(header_ticket->enc_part2->times.renew_till,
- ts_incr(kdc_time, old_life));
- } else {
- /* not a renew request */
- enc_tkt_reply.times.starttime = kdc_time;
-
- kdc_get_ticket_endtime(kdc_active_realm, enc_tkt_reply.times.starttime,
- header_enc_tkt->times.endtime, request->till,
- client, server, &enc_tkt_reply.times.endtime);
- }
-
- kdc_get_ticket_renewtime(kdc_active_realm, request, header_enc_tkt, client,
- server, &enc_tkt_reply);
-
- errcode = check_kdcpolicy_tgs(kdc_context, request, server, header_ticket,
- auth_indicators, kdc_time,
- &enc_tkt_reply.times, &status);
- if (errcode)
- goto cleanup;
-
- /*
- * Set authtime to be the same as header or evidence ticket's
- */
- enc_tkt_reply.times.authtime = authtime;
-
- /* starttime is optional, and treated as authtime if not present.
- so we can nuke it if it matches */
- if (enc_tkt_reply.times.starttime == enc_tkt_reply.times.authtime)
- enc_tkt_reply.times.starttime = 0;
-
- if (isflagset(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION)) {
- altcprinc = s4u_x509_user->user_id.user;
- } else if (isflagset(c_flags, KRB5_KDB_FLAG_CONSTRAINED_DELEGATION)) {
- /* kdc_process_s4u2proxy_req() only allows cross-realm requests if
- * stkt_authdata_client is set. */
- altcprinc = is_crossrealm ? stkt_authdata_client : subject_tkt->client;
- } else {
- altcprinc = NULL;
- }
- if (isflagset(request->kdc_options, KDC_OPT_ENC_TKT_IN_SKEY)) {
- encrypting_key = stkt->enc_part2->session;
- } else {
- errcode = get_first_current_key(kdc_context, server, &server_keyblock);
- if (errcode) {
- status = "FINDING_SERVER_KEY";
- goto cleanup;
- }
- encrypting_key = &server_keyblock;
- }
-
- if (isflagset(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION)) {
- /*
- * For consistency with Active Directory, don't allow authorization
- * data to be disabled if S4U2Self is requested. The server likely
- * needs a PAC to inspect or for an S4U2Proxy operation, even if it
- * doesn't need authorization data in tickets received from clients.
- */
- clear(server->attributes, KRB5_KDB_NO_AUTH_DATA_REQUIRED);
- }
- if (isflagset(server->attributes, KRB5_KDB_NO_AUTH_DATA_REQUIRED) == 0) {
- /* If we are not doing protocol transition, try to look up the subject
- * principal so that KDB modules can add additional authdata. */
- if (!isflagset(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION)) {
- setflag(c_flags, KRB5_KDB_FLAG_CLIENT);
- /* Map principals from foreign (possibly non-AD) realms */
- setflag(c_flags, KRB5_KDB_FLAG_MAP_PRINCIPALS);
-
- assert(client == NULL); /* should not have been set already */
-
- errcode = krb5_db_get_principal(kdc_context, subject_tkt->client,
- c_flags, &client);
- }
- }
-
- if (isflagset(c_flags, KRB5_KDB_FLAGS_S4U) && !is_referral)
- enc_tkt_reply.client = altcprinc;
- else
- enc_tkt_reply.client = header_enc_tkt->client;
-
- enc_tkt_reply.session = &session_key;
- enc_tkt_reply.transited.tr_type = KRB5_DOMAIN_X500_COMPRESS;
- enc_tkt_reply.transited.tr_contents = empty_string; /* equivalent of "" */
-
- /*
- * Only add the realm of the presented tgt to the transited list if
- * it is different than the server realm (cross-realm) and it is different
- * than the realm of the client (since the realm of the client is already
- * implicitly part of the transited list and should not be explicitly
- * listed).
- */
- if (!is_crossrealm ||
- krb5_realm_compare(kdc_context, header_ticket->server,
- enc_tkt_reply.client)) {
- /* tgt issued by local realm or issued by realm of client */
- enc_tkt_reply.transited = header_enc_tkt->transited;
- } else {
- /* tgt issued by some other realm and not the realm of the client */
- /* assemble new transited field into allocated storage */
- if (header_enc_tkt->transited.tr_type !=
- KRB5_DOMAIN_X500_COMPRESS) {
- status = "VALIDATE_TRANSIT_TYPE";
- errcode = KRB5KDC_ERR_TRTYPE_NOSUPP;
- goto cleanup;
- }
- memset(&enc_tkt_reply.transited, 0, sizeof(enc_tkt_reply.transited));
- enc_tkt_reply.transited.tr_type = KRB5_DOMAIN_X500_COMPRESS;
- if ((errcode =
- add_to_transited(&header_enc_tkt->transited.tr_contents,
- &enc_tkt_reply.transited.tr_contents,
- header_ticket->server,
- enc_tkt_reply.client,
- request->server))) {
- status = "ADD_TO_TRANSITED_LIST";
- goto cleanup;
- }
- newtransited = 1;
- }
- if (!isflagset (request->kdc_options, KDC_OPT_DISABLE_TRANSITED_CHECK)) {
- errcode = kdc_check_transited_list (kdc_active_realm,
- &enc_tkt_reply.transited.tr_contents,
- krb5_princ_realm (kdc_context, header_enc_tkt->client),
- krb5_princ_realm (kdc_context, request->server));
- if (errcode == 0) {
- setflag (enc_tkt_reply.flags, TKT_FLG_TRANSIT_POLICY_CHECKED);
- } else {
- log_tgs_badtrans(kdc_context, cprinc, sprinc,
- &enc_tkt_reply.transited.tr_contents, errcode);
- }
- } else
- krb5_klog_syslog(LOG_INFO, _("not checking transit path"));
- if (kdc_active_realm->realm_reject_bad_transit &&
- !isflagset(enc_tkt_reply.flags, TKT_FLG_TRANSIT_POLICY_CHECKED)) {
- errcode = KRB5KDC_ERR_POLICY;
- status = "BAD_TRANSIT";
- au_state->violation = LOCAL_POLICY;
- goto cleanup;
- }
+ /* For either kind of S4U request, an alias to the requested client
+ * principal name. */
+ krb5_principal s4u_cprinc;
- errcode = handle_authdata(kdc_active_realm, c_flags, client, server,
- subject_server, local_tgt, &local_tgt_key,
- subkey != NULL ? subkey :
- header_ticket->enc_part2->session,
- encrypting_key, subject_key, NULL, pkt, request,
- altcprinc, subject_pac, subject_tkt,
- &auth_indicators, &enc_tkt_reply);
- if (errcode) {
- krb5_klog_syslog(LOG_INFO, _("TGS_REQ : handle_authdata (%d)"),
- errcode);
- status = "HANDLE_AUTHDATA";
- goto cleanup;
- }
+ /* An alias to the client principal name we should issue the ticket for
+ * (either header_tkt->enc_part2->client or s4u_cprinc). */
+ krb5_principal tkt_client;
- ticket_reply.enc_part2 = &enc_tkt_reply;
+ /* The client principal of the PA-TGS-REQ header ticket. On early failures
+ * this may be NULL. */
+ krb5_principal cprinc;
- /* If we are doing user-to-user authentication, encrypt the ticket using
- * the session key of the second ticket. */
- if (isflagset(request->kdc_options, KDC_OPT_ENC_TKT_IN_SKEY)) {
- ticket_kvno = 0;
- ticket_reply.enc_part.enctype = stkt->enc_part2->session->enctype;
- kau_u2u(kdc_context, TRUE, au_state);
- } else {
- ticket_kvno = current_kvno(server);
- }
+ /* The canonicalized request server principal or referral/alternate TGT.
+ * On early failures this may be the requested server instead. */
+ krb5_principal sprinc;
- errcode = krb5_encrypt_tkt_part(kdc_context, encrypting_key,
- &ticket_reply);
- if (errcode)
- goto cleanup;
- ticket_reply.enc_part.kvno = ticket_kvno;
- /* Start assembling the response */
- au_state->stage = ENCR_REP;
- reply.msg_type = KRB5_TGS_REP;
- if (isflagset(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION) &&
- krb5int_find_pa_data(kdc_context, request->padata,
- KRB5_PADATA_S4U_X509_USER) != NULL) {
- errcode = kdc_make_s4u2self_rep(kdc_context,
- subkey,
- header_ticket->enc_part2->session,
- s4u_x509_user,
- &reply,
- &reply_encpart);
- if (errcode)
- au_state->status = status;
- kau_s4u2self(kdc_context, errcode ? FALSE : TRUE, au_state);
- if (errcode)
- goto cleanup;
- }
-
- reply.client = enc_tkt_reply.client;
- reply.enc_part.kvno = 0;/* We are using the session key */
- reply.ticket = &ticket_reply;
-
- reply_encpart.session = &session_key;
- reply_encpart.nonce = request->nonce;
-
- /* copy the time fields */
- reply_encpart.times = enc_tkt_reply.times;
-
- nolrentry.lr_type = KRB5_LRQ_NONE;
- nolrentry.value = 0;
- nolrentry.magic = 0;
- nolrarray[0] = &nolrentry;
- nolrarray[1] = 0;
- reply_encpart.last_req = nolrarray; /* not available for TGS reqs */
- reply_encpart.key_exp = 0;/* ditto */
- reply_encpart.flags = enc_tkt_reply.flags;
- reply_encpart.server = ticket_reply.server;
+};
- /* use the session key in the ticket, unless there's a subsession key
- in the AP_REQ */
- reply.enc_part.enctype = subkey ? subkey->enctype :
- header_ticket->enc_part2->session->enctype;
- errcode = kdc_fast_response_handle_padata(state, request, &reply,
- subkey ? subkey->enctype : header_ticket->enc_part2->session->enctype);
- if (errcode)
- goto cleanup;
- errcode =kdc_fast_handle_reply_key(state,
- subkey?subkey:header_ticket->enc_part2->session, &reply_key);
- if (errcode)
- goto cleanup;
- errcode = return_enc_padata(kdc_context, pkt, request,
- reply_key, server, &reply_encpart,
- is_referral &&
- isflagset(s_flags, KRB5_KDB_FLAG_REFERRAL_OK));
- if (errcode) {
- status = "KDC_RETURN_ENC_PADATA";
- goto cleanup;
- }
-
- errcode = kau_make_tkt_id(kdc_context, &ticket_reply, &au_state->tkt_out_id);
- if (errcode)
- goto cleanup;
-
- if (kdc_fast_hide_client(state))
- reply.client = (krb5_principal)krb5_anonymous_principal();
- errcode = krb5_encode_kdc_rep(kdc_context, KRB5_TGS_REP, &reply_encpart,
- subkey ? 1 : 0,
- reply_key,
- &reply, response);
- if (!errcode)
- status = "ISSUE";
-
- memset(ticket_reply.enc_part.ciphertext.data, 0,
- ticket_reply.enc_part.ciphertext.length);
- free(ticket_reply.enc_part.ciphertext.data);
- /* these parts are left on as a courtesy from krb5_encode_kdc_rep so we
- can use them in raw form if needed. But, we don't... */
- memset(reply.enc_part.ciphertext.data, 0,
- reply.enc_part.ciphertext.length);
- free(reply.enc_part.ciphertext.data);
-
-cleanup:
- if (status == NULL)
- status = "UNKNOWN_REASON";
- krb5_free_keyblock_contents(kdc_context, &server_keyblock);
- if (reply_key)
- krb5_free_keyblock(kdc_context, reply_key);
- if (stkt_server_key)
- krb5_free_keyblock(kdc_context, stkt_server_key);
- if (errcode)
- emsg = krb5_get_error_message (kdc_context, errcode);
-
- if (au_state != NULL) {
- au_state->status = status;
- if (!errcode)
- au_state->reply = &reply;
- kau_tgs_req(kdc_context, errcode ? FALSE : TRUE, au_state);
- kau_free_kdc_req(au_state);
- }
-
- log_tgs_req(kdc_context, from, request, &reply, cprinc,
- sprinc, altcprinc, authtime,
- c_flags, status, errcode, emsg);
- if (errcode) {
- krb5_free_error_message (kdc_context, emsg);
- emsg = NULL;
- }
-
- if (errcode && state != NULL) {
- int got_err = 0;
- if (status == 0) {
- status = krb5_get_error_message (kdc_context, errcode);
- got_err = 1;
- }
- errcode -= ERROR_TABLE_BASE_krb5;
- if (errcode < 0 || errcode > KRB_ERR_MAX)
- errcode = KRB_ERR_GENERIC;
-
- retval = prepare_error_tgs(state, request, header_ticket, errcode,
- (server != NULL) ? server->princ : NULL,
- response, status, e_data);
- if (got_err) {
- krb5_free_error_message (kdc_context, status);
- status = 0;
- }
- }
-
- if (header_ticket != NULL)
- krb5_free_ticket(kdc_context, header_ticket);
- if (request != NULL)
- krb5_free_kdc_req(kdc_context, request);
- if (state)
- kdc_free_rstate(state);
- krb5_db_free_principal(kdc_context, server);
- krb5_db_free_principal(kdc_context, stkt_server);
- krb5_db_free_principal(kdc_context, header_server);
- krb5_db_free_principal(kdc_context, client);
- krb5_db_free_principal(kdc_context, local_tgt_storage);
- if (local_tgt_key.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &local_tgt_key);
- if (session_key.contents != NULL)
- krb5_free_keyblock_contents(kdc_context, &session_key);
- if (newtransited)
- free(enc_tkt_reply.transited.tr_contents.data);
- if (s4u_x509_user != NULL)
- krb5_free_pa_s4u_x509_user(kdc_context, s4u_x509_user);
- if (kdc_issued_auth_data != NULL)
- krb5_free_authdata(kdc_context, kdc_issued_auth_data);
- if (subkey != NULL)
- krb5_free_keyblock(kdc_context, subkey);
- if (header_key != NULL)
- krb5_free_keyblock(kdc_context, header_key);
- if (reply.padata)
- krb5_free_pa_data(kdc_context, reply.padata);
- if (reply_encpart.enc_padata)
- krb5_free_pa_data(kdc_context, reply_encpart.enc_padata);
- if (enc_tkt_reply.authorization_data != NULL)
- krb5_free_authdata(kdc_context, enc_tkt_reply.authorization_data);
- krb5_free_pa_data(kdc_context, e_data);
- k5_free_data_ptr_list(auth_indicators);
- krb5_pac_free(kdc_context, header_pac);
- krb5_pac_free(kdc_context, stkt_pac);
- krb5_free_principal(kdc_context, stkt_authdata_client);
-
- return retval;
-}
+static krb5_error_code
+db_get_svc_princ(krb5_context, krb5_principal, krb5_flags,
+ krb5_db_entry **, const char **);
static krb5_error_code
-prepare_error_tgs (struct kdc_request_state *state,
- krb5_kdc_req *request, krb5_ticket *ticket, int error,
- krb5_principal canon_server,
- krb5_data **response, const char *status,
- krb5_pa_data **e_data)
+prepare_error_tgs(struct kdc_request_state *state, krb5_kdc_req *request,
+ krb5_ticket *ticket, krb5_error_code code,
+ krb5_principal canon_server, krb5_data **response,
+ const char *status, krb5_pa_data **e_data)
{
+ krb5_context context = state->realm_data->realm_context;
krb5_error errpkt;
krb5_error_code retval = 0;
krb5_data *scratch, *e_data_asn1 = NULL, *fast_edata = NULL;
- kdc_realm_t *kdc_active_realm = state->realm_data;
errpkt.magic = KV5M_ERROR;
errpkt.ctime = 0;
errpkt.cusec = 0;
- if ((retval = krb5_us_timeofday(kdc_context, &errpkt.stime,
- &errpkt.susec)))
+ retval = krb5_us_timeofday(context, &errpkt.stime, &errpkt.susec);
+ if (retval)
return(retval);
- errpkt.error = error;
+ errpkt.error = errcode_to_protocol(code);
errpkt.server = request->server;
if (ticket && ticket->enc_part2)
errpkt.client = ticket->enc_part2->client;
} else
errpkt.e_data = empty_data();
- retval = kdc_fast_handle_error(kdc_context, state, request, e_data,
+ retval = kdc_fast_handle_error(context, state, request, e_data,
&errpkt, &fast_edata);
if (retval) {
free(scratch);
free(errpkt.text.data);
- krb5_free_data(kdc_context, e_data_asn1);
+ krb5_free_data(context, e_data_asn1);
return retval;
}
if (fast_edata)
errpkt.e_data = *fast_edata;
if (kdc_fast_hide_client(state) && errpkt.client != NULL)
errpkt.client = (krb5_principal)krb5_anonymous_principal();
- retval = krb5_mk_error(kdc_context, &errpkt, scratch);
+ retval = krb5_mk_error(context, &errpkt, scratch);
free(errpkt.text.data);
- krb5_free_data(kdc_context, e_data_asn1);
- krb5_free_data(kdc_context, fast_edata);
+ krb5_free_data(context, e_data_asn1);
+ krb5_free_data(context, fast_edata);
if (retval)
free(scratch);
else
* key.
*/
static krb5_error_code
-decrypt_2ndtkt(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
- krb5_flags flags, krb5_db_entry *local_tgt,
- krb5_keyblock *local_tgt_key, const krb5_ticket **stkt_out,
- krb5_pac *pac_out, krb5_db_entry **server_out,
- krb5_keyblock **key_out, const char **status)
+decrypt_2ndtkt(krb5_context context, krb5_kdc_req *req, krb5_flags flags,
+ krb5_db_entry *local_tgt, krb5_keyblock *local_tgt_key,
+ const krb5_ticket **stkt_out, krb5_pac *pac_out,
+ krb5_db_entry **server_out, krb5_keyblock **key_out,
+ const char **status)
{
krb5_error_code retval;
krb5_db_entry *server = NULL;
return 0;
stkt = req->second_ticket[0];
- retval = kdc_get_server_key(kdc_context, stkt, flags, TRUE,
- &server, &key, &kvno);
+ retval = kdc_get_server_key(context, stkt, flags, TRUE, &server, &key,
+ &kvno);
if (retval != 0) {
*status = "2ND_TKT_SERVER";
goto cleanup;
}
- retval = krb5_decrypt_tkt_part(kdc_context, key, stkt);
+ retval = krb5_decrypt_tkt_part(context, key, stkt);
if (retval != 0) {
*status = "2ND_TKT_DECRYPT";
goto cleanup;
}
- retval = get_verified_pac(kdc_context, stkt->enc_part2, server->princ,
- key, local_tgt, local_tgt_key, pac_out);
+ retval = get_verified_pac(context, stkt->enc_part2, server, key, local_tgt,
+ local_tgt_key, pac_out);
if (retval != 0) {
*status = "2ND_TKT_PAC";
goto cleanup;
key = NULL;
cleanup:
- krb5_db_free_principal(kdc_context, server);
- krb5_free_keyblock(kdc_context, key);
+ krb5_db_free_principal(context, server);
+ krb5_free_keyblock(context, key);
return retval;
}
static krb5_error_code
-get_2ndtkt_enctype(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
- krb5_enctype *useenctype, const char **status)
+get_2ndtkt_enctype(krb5_kdc_req *req, krb5_enctype *useenctype,
+ const char **status)
{
krb5_enctype etype;
krb5_ticket *stkt = req->second_ticket[0];
}
static krb5_error_code
-gen_session_key(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
- krb5_db_entry *server, krb5_keyblock *skey,
- const char **status)
+gen_session_key(krb5_context context, krb5_kdc_req *req, krb5_db_entry *server,
+ krb5_keyblock *skey, const char **status)
{
krb5_error_code retval;
krb5_enctype useenctype = 0;
* to anything else.
*/
if (req->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY) {
- retval = get_2ndtkt_enctype(kdc_active_realm, req, &useenctype,
- status);
+ retval = get_2ndtkt_enctype(req, &useenctype, status);
if (retval != 0)
return retval;
}
if (useenctype == 0) {
- useenctype = select_session_keytype(kdc_active_realm, server,
- req->nktypes,
- req->ktype);
+ useenctype = select_session_keytype(context, server,
+ req->nktypes, req->ktype);
}
if (useenctype == 0) {
/* unsupported ktype */
return KRB5KDC_ERR_ETYPE_NOSUPP;
}
- return krb5_c_make_random_key(kdc_context, useenctype, skey);
+ return krb5_c_make_random_key(context, useenctype, skey);
}
/*
* some intermediate realm.
*/
static krb5_error_code
-find_alternate_tgs(kdc_realm_t *kdc_active_realm, krb5_principal princ,
+find_alternate_tgs(krb5_context context, krb5_principal princ,
krb5_db_entry **server_ptr, const char **status)
{
krb5_error_code retval;
*server_ptr = NULL;
assert(is_cross_tgs_principal(princ));
- if ((retval = krb5_walk_realm_tree(kdc_context,
- krb5_princ_realm(kdc_context, princ),
- krb5_princ_component(kdc_context, princ, 1),
- &plist, KRB5_REALM_BRANCH_CHAR))) {
+ retval = krb5_walk_realm_tree(context, &princ->realm, &princ->data[1],
+ &plist, KRB5_REALM_BRANCH_CHAR);
+ if (retval)
goto cleanup;
- }
/* move to the end */
for (pl2 = plist; *pl2; pl2++);
/* the first entry in this array is for krbtgt/local@local, so we
ignore it */
while (--pl2 > plist) {
- tmp = *krb5_princ_realm(kdc_context, *pl2);
- krb5_princ_set_realm(kdc_context, *pl2,
- krb5_princ_realm(kdc_context, princ));
- retval = db_get_svc_princ(kdc_context, *pl2, 0, &server, status);
- krb5_princ_set_realm(kdc_context, *pl2, &tmp);
+ tmp = *krb5_princ_realm(context, *pl2);
+ krb5_princ_set_realm(context, *pl2, &princ->realm);
+ retval = db_get_svc_princ(context, *pl2, 0, &server, status);
+ krb5_princ_set_realm(context, *pl2, &tmp);
if (retval == KRB5_KDB_NOENTRY)
continue;
else if (retval)
goto cleanup;
- log_tgs_alt_tgt(kdc_context, server->princ);
+ log_tgs_alt_tgt(context, server->princ);
*server_ptr = server;
server = NULL;
goto cleanup;
if (retval != 0)
*status = "UNKNOWN_SERVER";
- krb5_free_realm_tree(kdc_context, plist);
- krb5_db_free_principal(kdc_context, server);
+ krb5_free_realm_tree(context, plist);
+ krb5_db_free_principal(context, server);
return retval;
}
* TGT. The caller checks whether the hostname component looks like a FQDN.
*/
static krb5_boolean
-is_referral_req(kdc_realm_t *kdc_active_realm, krb5_kdc_req *request)
+is_referral_req(kdc_realm_t *realm, krb5_kdc_req *request)
{
krb5_boolean ret = FALSE;
char *stype = NULL;
- char *hostbased = kdc_active_realm->realm_hostbased;
- char *no_referral = kdc_active_realm->realm_no_referral;
+ char *hostbased = realm->realm_hostbased;
+ char *no_referral = realm->realm_no_referral;
if (!(request->kdc_options & KDC_OPT_CANONICALIZE))
return FALSE;
if (request->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY)
return FALSE;
- if (krb5_princ_size(kdc_context, request->server) != 2)
+ if (request->server->length != 2)
return FALSE;
- stype = data2string(krb5_princ_component(kdc_context, request->server, 0));
+ stype = data2string(&request->server->data[0]);
if (stype == NULL)
return FALSE;
- switch (krb5_princ_type(kdc_context, request->server)) {
+ switch (request->server->type) {
case KRB5_NT_UNKNOWN:
/* Allow referrals for NT-UNKNOWN principals, if configured. */
if (!in_list(hostbased, stype) && !in_list(hostbased, "*"))
* principal.
*/
static krb5_int32
-find_referral_tgs(kdc_realm_t *kdc_active_realm, krb5_kdc_req *request,
+find_referral_tgs(kdc_realm_t *realm, krb5_kdc_req *request,
krb5_principal *krbtgt_princ)
{
+ krb5_context context = realm->realm_context;
krb5_error_code retval = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
char **realms = NULL, *hostname = NULL;
krb5_data srealm = request->server->realm;
- if (!is_referral_req(kdc_active_realm, request))
+ if (!is_referral_req(realm, request))
goto cleanup;
- hostname = data2string(krb5_princ_component(kdc_context,
- request->server, 1));
+ hostname = data2string(&request->server->data[1]);
if (hostname == NULL) {
retval = ENOMEM;
goto cleanup;
/* If the hostname doesn't contain a '.', it's not a FQDN. */
if (strchr(hostname, '.') == NULL)
goto cleanup;
- retval = krb5_get_host_realm(kdc_context, hostname, &realms);
+ retval = krb5_get_host_realm(context, hostname, &realms);
if (retval) {
/* no match found */
- kdc_err(kdc_context, retval, "unable to find realm of host");
+ kdc_err(context, retval, "unable to find realm of host");
goto cleanup;
}
/* Don't return a referral to the empty realm or the service realm. */
retval = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
goto cleanup;
}
- retval = krb5_build_principal(kdc_context, krbtgt_princ,
+ retval = krb5_build_principal(context, krbtgt_princ,
srealm.length, srealm.data,
"krbtgt", realms[0], (char *)0);
cleanup:
- krb5_free_host_realm(kdc_context, realms);
+ krb5_free_host_realm(context, realms);
free(hostname);
return retval;
}
static krb5_error_code
-search_sprinc(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
+search_sprinc(kdc_realm_t *realm, krb5_kdc_req *req,
krb5_flags flags, krb5_db_entry **server, const char **status)
{
+ krb5_context context = realm->realm_context;
krb5_error_code ret;
krb5_principal princ = req->server;
krb5_principal reftgs = NULL;
if (!allow_referral)
flags &= ~KRB5_KDB_FLAG_REFERRAL_OK;
- ret = db_get_svc_princ(kdc_context, princ, flags, server, status);
+ ret = db_get_svc_princ(context, princ, flags, server, status);
if (ret == 0 || ret != KRB5_KDB_NOENTRY || !allow_referral)
goto cleanup;
if (!is_cross_tgs_principal(req->server)) {
- ret = find_referral_tgs(kdc_active_realm, req, &reftgs);
+ ret = find_referral_tgs(realm, req, &reftgs);
if (ret != 0)
goto cleanup;
- ret = db_get_svc_princ(kdc_context, reftgs, flags, server, status);
+ ret = db_get_svc_princ(context, reftgs, flags, server, status);
if (ret == 0 || ret != KRB5_KDB_NOENTRY)
goto cleanup;
princ = reftgs;
}
- ret = find_alternate_tgs(kdc_active_realm, princ, server, status);
+ ret = find_alternate_tgs(context, princ, server, status);
cleanup:
if (ret != 0 && ret != KRB5KDC_ERR_SVC_UNAVAILABLE) {
if (*status == NULL)
*status = "LOOKING_UP_SERVER";
}
- krb5_free_principal(kdc_context, reftgs);
+ krb5_free_principal(context, reftgs);
+ return ret;
+}
+
+/*
+ * Transfer ownership of *reqptr to *t and fill *t with information about the
+ * request. Decode the PA-TGS-REQ header ticket and the second ticket if
+ * applicable, and decode and verify their PACs if present. Decode and verify
+ * the S4U2Self request pa-data if present. Extract authentication indicators
+ * from the subject ticket. Construct the transited list implied by the
+ * request.
+ */
+static krb5_error_code
+gather_tgs_req_info(kdc_realm_t *realm, krb5_kdc_req **reqptr, krb5_data *pkt,
+ const krb5_fulladdr *from,
+ struct kdc_request_state *fast_state,
+ krb5_audit_state *au_state, struct tgs_req_info *t,
+ const char **status)
+{
+ krb5_context context = realm->realm_context;
+ krb5_error_code ret;
+ krb5_pa_data *pa_tgs_req;
+ unsigned int s_flags;
+ krb5_enc_tkt_part *header_enc;
+ krb5_data d;
+
+ /* Transfer ownership of *reqptr to *t. */
+ t->req = *reqptr;
+ *reqptr = NULL;
+
+ if (t->req->msg_type != KRB5_TGS_REQ)
+ return KRB5_BADMSGTYPE;
+
+ /* Initially set t->sprinc to the outer request server, for logging of
+ * early failures. */
+ t->sprinc = t->req->server;
+
+ /* Read the PA-TGS-REQ authenticator and decrypt the header ticket. */
+ ret = kdc_process_tgs_req(realm, t->req, from, pkt, &t->header_tkt,
+ &t->header_server, &t->header_key, &t->subkey,
+ &pa_tgs_req);
+ if (t->header_tkt != NULL && t->header_tkt->enc_part2 != NULL)
+ t->cprinc = t->header_tkt->enc_part2->client;
+ if (ret) {
+ *status = "PROCESS_TGS";
+ return ret;
+ }
+ ret = kau_make_tkt_id(context, t->header_tkt, &au_state->tkt_in_id);
+ if (ret)
+ return ret;
+ header_enc = t->header_tkt->enc_part2;
+
+ /* If PA-FX-FAST-REQUEST padata is present, replace t->req with the inner
+ * request body. */
+ d = make_data(pa_tgs_req->contents, pa_tgs_req->length);
+ ret = kdc_find_fast(&t->req, &d, t->subkey, header_enc->session,
+ fast_state, NULL);
+ if (ret) {
+ *status = "FIND_FAST";
+ return ret;
+ }
+ /* Reset t->sprinc for the inner body and check it. */
+ t->sprinc = t->req->server;
+ if (t->sprinc == NULL) {
+ *status = "NULL_SERVER";
+ return KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
+ }
+
+ /* The header ticket server is usually a TGT, but if it is not, fetch the
+ * local TGT for the realm. Get the decrypted first local TGT key. */
+ ret = get_local_tgt(context, &t->sprinc->realm, t->header_server,
+ &t->local_tgt, &t->local_tgt_storage,
+ &t->local_tgt_key);
+ if (ret) {
+ *status = "GET_LOCAL_TGT";
+ return ret;
+ }
+
+ /* Decode and verify the header ticket PAC. */
+ ret = get_verified_pac(context, header_enc, t->header_server,
+ t->header_key, t->local_tgt, &t->local_tgt_key,
+ &t->header_pac);
+ if (ret) {
+ *status = "HEADER_PAC";
+ return ret;
+ }
+
+ au_state->request = t->req;
+ au_state->stage = SRVC_PRINC;
+
+ /* Look up the server principal entry, or a referral/alternate TGT. Reset
+ * t->sprinc to the canonical server name (its final value). */
+ s_flags = (t->req->kdc_options & KDC_OPT_CANONICALIZE) ?
+ KRB5_KDB_FLAG_REFERRAL_OK : 0;
+ ret = search_sprinc(realm, t->req, s_flags, &t->server, status);
+ if (ret)
+ return ret;
+ t->sprinc = t->server->princ;
+
+ /* If we got a cross-realm TGS which is not the requested server, we are
+ * issuing a referral (or alternate TGT, which we treat similarly). */
+ if (is_cross_tgs_principal(t->server->princ) &&
+ !krb5_principal_compare(context, t->req->server, t->server->princ))
+ t->flags |= KRB5_KDB_FLAG_ISSUING_REFERRAL;
+
+ /* Mark the request as cross-realm if the header ticket server is not from
+ * this realm. */
+ if (!data_eq(t->header_server->princ->realm, t->sprinc->realm))
+ t->flags |= KRB5_KDB_FLAG_CROSS_REALM;
+
+ t->is_referral = (t->flags & KRB5_KDB_FLAG_ISSUING_REFERRAL);
+ t->is_crossrealm = (t->flags & KRB5_KDB_FLAG_CROSS_REALM);
+
+ /* If S4U2Self padata is present, read it to get the requested principal
+ * name. Look up the requested client if it is in this realm. */
+ ret = kdc_process_s4u2self_req(context, t->req, t->server, t->subkey,
+ header_enc->session, &t->s4u2self,
+ &t->client, status);
+ if (t->s4u2self != NULL || ret) {
+ if (t->s4u2self != NULL)
+ au_state->s4u2self_user = t->s4u2self->user_id.user;
+ au_state->status = *status;
+ kau_s4u2self(context, !ret, au_state);
+ au_state->s4u2self_user = NULL;
+ }
+ if (ret)
+ return ret;
+ if (t->s4u2self != NULL) {
+ t->flags |= KRB5_KDB_FLAG_PROTOCOL_TRANSITION;
+ t->s4u_cprinc = t->s4u2self->user_id.user;
+
+ /*
+ * For consistency with Active Directory, don't allow authorization
+ * data to be disabled if S4U2Self is requested. The requesting
+ * service likely needs a PAC for an S4U2Proxy operation, even if it
+ * doesn't need authorization data in tickets received from clients.
+ */
+ t->server->attributes &= ~KRB5_KDB_NO_AUTH_DATA_REQUIRED;
+ }
+
+ /* For U2U or S4U2Proxy requests, decrypt the second ticket and read its
+ * PAC. */
+ ret = decrypt_2ndtkt(context, t->req, t->flags, t->local_tgt,
+ &t->local_tgt_key, &t->stkt, &t->stkt_pac,
+ &t->stkt_server, &t->stkt_server_key, status);
+ if (ret)
+ return ret;
+
+ /* Determine the subject ticket and set the authtime for logging. For
+ * S4U2Proxy requests determine the requested client principal. */
+ if (t->req->kdc_options & KDC_OPT_CNAME_IN_ADDL_TKT) {
+ t->flags |= KRB5_KDB_FLAG_CONSTRAINED_DELEGATION;
+ ret = kau_make_tkt_id(context, t->stkt, &au_state->evid_tkt_id);
+ if (ret)
+ return ret;
+ if (t->is_crossrealm) {
+ /* For cross-realm S4U2PROXY requests, the second ticket is a
+ * cross TGT with the requested client principal in its PAC. */
+ if (t->stkt_pac == NULL ||
+ get_pac_princ_with_realm(context, t->stkt_pac,
+ &t->stkt_pac_client, NULL) != 0) {
+ au_state->status = *status = "RBCD_PAC_PRINC";
+ au_state->violation = PROT_CONSTRAINT;
+ kau_s4u2proxy(context, FALSE, au_state);
+ return KRB5KDC_ERR_BADOPTION;
+ }
+ t->s4u_cprinc = t->stkt_pac_client;
+ } else {
+ /* Otherwise the requested client is the evidence ticket client. */
+ t->s4u_cprinc = t->stkt->enc_part2->client;
+ }
+ t->subject_tkt = t->stkt->enc_part2;
+ } else {
+ t->subject_tkt = header_enc;
+ }
+ t->authtime = t->subject_tkt->times.authtime;
+
+ /* For final S4U requests (either type) the issued ticket will be for the
+ * requested name; otherwise it will be for the header ticket client. */
+ t->tkt_client = ((t->flags & KRB5_KDB_FLAGS_S4U) && !t->is_referral) ?
+ t->s4u_cprinc : header_enc->client;
+
+ if (t->s4u2self == NULL) {
+ /* Extract auth indicators from the subject ticket. Skip this for
+ * S4U2Self requests as the subject didn't authenticate. */
+ ret = get_auth_indicators(context, t->subject_tkt, t->local_tgt,
+ &t->local_tgt_key, &t->auth_indicators);
+ if (ret) {
+ *status = "GET_AUTH_INDICATORS";
+ return ret;
+ }
+
+ if (!(t->server->attributes & KRB5_KDB_NO_AUTH_DATA_REQUIRED)) {
+ /* Try to look up the subject principal so that KDB modules can add
+ * additional authdata. Ask the KDB to map foreign principals. */
+ assert(t->client == NULL);
+ (void)krb5_db_get_principal(context, t->subject_tkt->client,
+ t->flags | KRB5_KDB_FLAG_CLIENT |
+ KRB5_KDB_FLAG_MAP_PRINCIPALS,
+ &t->client);
+ }
+ }
+
+ /*
+ * Compute the transited list implied by the request. Use the existing
+ * transited list if the realm of the header ticket server is the same as
+ * the subject or server realm.
+ */
+ if (!t->is_crossrealm ||
+ data_eq(t->header_tkt->server->realm, t->tkt_client->realm)) {
+ t->transited = header_enc->transited;
+ } else {
+ if (header_enc->transited.tr_type != KRB5_DOMAIN_X500_COMPRESS) {
+ *status = "VALIDATE_TRANSIT_TYPE";
+ return KRB5KDC_ERR_TRTYPE_NOSUPP;
+ }
+ ret = add_to_transited(&header_enc->transited.tr_contents,
+ &t->new_transited, t->header_tkt->server,
+ t->tkt_client, t->req->server);
+ if (ret) {
+ *status = "ADD_TO_TRANSITED_LIST";
+ return ret;
+ }
+ t->transited.tr_type = KRB5_DOMAIN_X500_COMPRESS;
+ t->transited.tr_contents = t->new_transited;
+ }
+
+ return 0;
+}
+
+/* Fill in *times_out with the times of the ticket to be issued. Set the
+ * TKT_FLG_RENEWABLE bit in *tktflags if the ticket will be renewable. */
+static void
+compute_ticket_times(kdc_realm_t *realm, struct tgs_req_info *t,
+ krb5_timestamp kdc_time, krb5_flags *tktflags,
+ krb5_ticket_times *times)
+{
+ krb5_timestamp hstarttime;
+ krb5_deltat hlife;
+ krb5_ticket_times *htimes = &t->header_tkt->enc_part2->times;
+
+ if (t->req->kdc_options & KDC_OPT_VALIDATE) {
+ /* Validation requests preserve the header ticket times. */
+ *times = *htimes;
+ return;
+ }
+
+ /* Preserve the authtime from the subject ticket. */
+ times->authtime = t->authtime;
+
+ times->starttime = (t->req->kdc_options & KDC_OPT_POSTDATED) ?
+ t->req->from : kdc_time;
+
+ if (t->req->kdc_options & KDC_OPT_RENEW) {
+ /* Give the new ticket the same lifetime as the header ticket, but no
+ * later than the renewable end time. */
+ hstarttime = htimes->starttime ? htimes->starttime : htimes->authtime;
+ hlife = ts_delta(htimes->endtime, hstarttime);
+ times->endtime = ts_min(htimes->renew_till,
+ ts_incr(times->starttime, hlife));
+ } else {
+ kdc_get_ticket_endtime(realm, times->starttime, htimes->endtime,
+ t->req->till, t->client, t->server,
+ ×->endtime);
+ }
+
+ kdc_get_ticket_renewtime(realm, t->req, t->header_tkt->enc_part2,
+ t->client, t->server, tktflags, times);
+
+ /* starttime is optional, and treated as authtime if not present.
+ * so we can omit it if it matches. */
+ if (times->starttime == times->authtime)
+ times->starttime = 0;
+}
+
+/* Check the request in *t against semantic protocol constraints and local
+ * policy. Determine flags and times for the ticket to be issued. */
+static krb5_error_code
+check_tgs_req(kdc_realm_t *realm, struct tgs_req_info *t,
+ krb5_audit_state *au_state, krb5_flags *tktflags,
+ krb5_ticket_times *times, const char **status,
+ krb5_pa_data ***e_data)
+{
+ krb5_context context = realm->realm_context;
+ krb5_error_code ret;
+ krb5_timestamp kdc_time;
+
+ au_state->stage = VALIDATE_POL;
+
+ ret = krb5_timeofday(context, &kdc_time);
+ if (ret)
+ return ret;
+
+ ret = check_tgs_constraints(realm, t->req, t->server, t->header_tkt,
+ t->header_pac, t->stkt, t->stkt_pac,
+ t->stkt_server, kdc_time, t->s4u2self,
+ t->client, t->is_crossrealm, t->is_referral,
+ status, e_data);
+ if (ret) {
+ au_state->violation = PROT_CONSTRAINT;
+ return ret;
+ }
+
+ ret = check_tgs_policy(realm, t->req, t->server, t->header_tkt,
+ t->header_pac, t->stkt, t->stkt_pac,
+ t->stkt_pac_client, t->stkt_server, kdc_time,
+ t->is_crossrealm, t->is_referral, status, e_data);
+ if (ret) {
+ au_state->violation = LOCAL_POLICY;
+ if (t->flags & KRB5_KDB_FLAG_CONSTRAINED_DELEGATION) {
+ au_state->status = *status;
+ kau_s4u2proxy(context, FALSE, au_state);
+ }
+ return ret;
+ }
+
+ /* Check auth indicators from the subject ticket, except for S4U2Self
+ * requests (where the client didn't authenticate). */
+ if (t->s4u2self == NULL) {
+ ret = check_indicators(context, t->server, t->auth_indicators);
+ if (ret) {
+ *status = "HIGHER_AUTHENTICATION_REQUIRED";
+ return ret;
+ }
+ }
+
+ *tktflags = get_ticket_flags(t->req->kdc_options, t->client, t->server,
+ t->header_tkt->enc_part2);
+ compute_ticket_times(realm, t, kdc_time, tktflags, times);
+
+ /* For S4U2Self requests, check if we need to suppress the forwardable
+ * ticket flag. */
+ if (t->s4u2self != NULL && !t->is_referral) {
+ ret = s4u2self_forwardable(context, t->server, tktflags);
+ if (ret)
+ return ret;
+ }
+
+ /* Consult kdcpolicy modules, giving them a chance to modify the times of
+ * the issued ticket. */
+ ret = check_kdcpolicy_tgs(context, t->req, t->server, t->header_tkt,
+ t->auth_indicators, kdc_time, times, status);
+ if (ret)
+ return ret;
+
+ if (!(t->req->kdc_options & KDC_OPT_DISABLE_TRANSITED_CHECK)) {
+ /* Check the transited path for the issued ticket and set the
+ * transited-policy-checked flag if successful. */
+ ret = kdc_check_transited_list(context, &t->transited.tr_contents,
+ &t->subject_tkt->client->realm,
+ &t->req->server->realm);
+ if (ret) {
+ /* Log the transited-check failure and continue. */
+ log_tgs_badtrans(context, t->cprinc, t->sprinc,
+ &t->transited.tr_contents, ret);
+ } else {
+ *tktflags |= TKT_FLG_TRANSIT_POLICY_CHECKED;
+ }
+ } else {
+ krb5_klog_syslog(LOG_INFO, _("not checking transit path"));
+ }
+
+ /* By default, reject the request if the transited path was not checked
+ * successfully. */
+ if (realm->realm_reject_bad_transit &&
+ !(*tktflags & TKT_FLG_TRANSIT_POLICY_CHECKED)) {
+ *status = "BAD_TRANSIT";
+ au_state->violation = LOCAL_POLICY;
+ return KRB5KDC_ERR_POLICY;
+ }
+
+ return 0;
+}
+
+/* Construct a response issuing a ticket for the request in *t, using tktflags
+ * and *times for the ticket flags and times. */
+static krb5_error_code
+tgs_issue_ticket(kdc_realm_t *realm, struct tgs_req_info *t,
+ krb5_flags tktflags, krb5_ticket_times *times, krb5_data *pkt,
+ const krb5_fulladdr *from,
+ struct kdc_request_state *fast_state,
+ krb5_audit_state *au_state, const char **status,
+ krb5_data **response)
+{
+ krb5_context context = realm->realm_context;
+ krb5_error_code ret;
+ krb5_keyblock session_key = { 0 }, server_key = { 0 };
+ krb5_keyblock *ticket_encrypting_key, *subject_key;
+ krb5_keyblock *initial_reply_key, *fast_reply_key = NULL;
+ krb5_enc_tkt_part enc_tkt_reply = { 0 };
+ krb5_ticket ticket_reply = { 0 };
+ krb5_enc_kdc_rep_part reply_encpart = { 0 };
+ krb5_kdc_rep reply = { 0 };
+ krb5_pac subject_pac;
+ krb5_db_entry *subject_server;
+ krb5_enc_tkt_part *header_enc_tkt = t->header_tkt->enc_part2;
+ krb5_last_req_entry nolrentry = { KV5M_LAST_REQ_ENTRY, KRB5_LRQ_NONE, 0 };
+ krb5_last_req_entry *nolrarray[2] = { &nolrentry, NULL };
+
+ au_state->stage = ISSUE_TKT;
+
+ ret = gen_session_key(context, t->req, t->server, &session_key, status);
+ if (ret)
+ goto cleanup;
+
+ if (t->flags & KRB5_KDB_FLAG_CONSTRAINED_DELEGATION) {
+ subject_pac = t->stkt_pac;
+ subject_server = t->stkt_server;
+ subject_key = t->stkt_server_key;
+ } else {
+ subject_pac = t->header_pac;
+ subject_server = t->header_server;
+ subject_key = t->header_key;
+ }
+
+ initial_reply_key = (t->subkey != NULL) ? t->subkey :
+ t->header_tkt->enc_part2->session;
+
+ if (t->req->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY) {
+ /* For user-to-user, encrypt the ticket with the second ticket's
+ * session key. */
+ ticket_encrypting_key = t->stkt->enc_part2->session;
+ } else {
+ /* Otherwise encrypt the ticket with the server entry's first long-term
+ * key. */
+ ret = get_first_current_key(context, t->server, &server_key);
+ if (ret) {
+ *status = "FINDING_SERVER_KEY";
+ goto cleanup;
+ }
+ ticket_encrypting_key = &server_key;
+ }
+
+ if (t->req->kdc_options & (KDC_OPT_VALIDATE | KDC_OPT_RENEW)) {
+ /* Copy the header ticket server and all enc-part fields except for
+ * authorization data. */
+ ticket_reply.server = t->header_tkt->server;
+ enc_tkt_reply = *t->header_tkt->enc_part2;
+ enc_tkt_reply.authorization_data = NULL;
+ } else {
+ if (t->req->kdc_options & (KDC_OPT_FORWARDED | KDC_OPT_PROXY)) {
+ /* Include the requested addresses in the ticket and reply. */
+ enc_tkt_reply.caddrs = t->req->addresses;
+ reply_encpart.caddrs = t->req->addresses;
+ } else {
+ /* Use the header ticket addresses and omit them from the reply. */
+ enc_tkt_reply.caddrs = header_enc_tkt->caddrs;
+ reply_encpart.caddrs = NULL;
+ }
+
+ ticket_reply.server = t->is_referral ? t->sprinc : t->req->server;
+ }
+
+ enc_tkt_reply.flags = tktflags;
+ enc_tkt_reply.times = *times;
+ enc_tkt_reply.client = t->tkt_client;
+ enc_tkt_reply.session = &session_key;
+ enc_tkt_reply.transited = t->transited;
+
+ ret = handle_authdata(realm, t->flags, t->client, t->server,
+ subject_server, t->local_tgt, &t->local_tgt_key,
+ initial_reply_key, ticket_encrypting_key,
+ subject_key, NULL, pkt, t->req, t->s4u_cprinc,
+ subject_pac, t->subject_tkt, &t->auth_indicators,
+ &enc_tkt_reply);
+ if (ret) {
+ krb5_klog_syslog(LOG_INFO, _("TGS_REQ : handle_authdata (%d)"), ret);
+ *status = "HANDLE_AUTHDATA";
+ goto cleanup;
+ }
+
+ ticket_reply.enc_part2 = &enc_tkt_reply;
+
+ ret = krb5_encrypt_tkt_part(context, ticket_encrypting_key, &ticket_reply);
+ if (ret)
+ goto cleanup;
+
+ if (t->req->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY) {
+ ticket_reply.enc_part.kvno = 0;
+ kau_u2u(context, TRUE, au_state);
+ } else {
+ ticket_reply.enc_part.kvno = current_kvno(t->server);
+ }
+
+ au_state->stage = ENCR_REP;
+
+ if (t->s4u2self != NULL &&
+ krb5int_find_pa_data(context, t->req->padata,
+ KRB5_PADATA_S4U_X509_USER) != NULL) {
+ /* Add an S4U2Self response to the encrypted padata (skipped if the
+ * request only included PA-FOR-USER padata). */
+ ret = kdc_make_s4u2self_rep(context, t->subkey,
+ t->header_tkt->enc_part2->session,
+ t->s4u2self, &reply, &reply_encpart);
+ if (ret)
+ goto cleanup;
+ }
+
+ reply_encpart.session = &session_key;
+ reply_encpart.nonce = t->req->nonce;
+ reply_encpart.times = enc_tkt_reply.times;
+ reply_encpart.last_req = nolrarray;
+ reply_encpart.key_exp = 0;
+ reply_encpart.flags = enc_tkt_reply.flags;
+ reply_encpart.server = ticket_reply.server;
+
+ reply.msg_type = KRB5_TGS_REP;
+ reply.client = enc_tkt_reply.client;
+ reply.ticket = &ticket_reply;
+ reply.enc_part.kvno = 0;
+ reply.enc_part.enctype = initial_reply_key->enctype;
+ ret = kdc_fast_response_handle_padata(fast_state, t->req, &reply,
+ initial_reply_key->enctype);
+ if (ret)
+ goto cleanup;
+ ret = kdc_fast_handle_reply_key(fast_state, initial_reply_key,
+ &fast_reply_key);
+ if (ret)
+ goto cleanup;
+ ret = return_enc_padata(context, pkt, t->req, fast_reply_key, t->server,
+ &reply_encpart,
+ t->is_referral &&
+ (t->req->kdc_options & KDC_OPT_CANONICALIZE));
+ if (ret) {
+ *status = "KDC_RETURN_ENC_PADATA";
+ goto cleanup;
+ }
+
+ ret = kau_make_tkt_id(context, &ticket_reply, &au_state->tkt_out_id);
+ if (ret)
+ goto cleanup;
+
+ if (kdc_fast_hide_client(fast_state))
+ reply.client = (krb5_principal)krb5_anonymous_principal();
+ ret = krb5_encode_kdc_rep(context, KRB5_TGS_REP, &reply_encpart,
+ t->subkey != NULL, fast_reply_key, &reply,
+ response);
+ if (ret)
+ goto cleanup;
+
+ log_tgs_req(context, from, t->req, &reply, t->cprinc, t->sprinc,
+ t->s4u_cprinc, t->authtime, t->flags, "ISSUE", 0, NULL);
+ au_state->status = "ISSUE";
+ au_state->reply = &reply;
+ if (t->flags & KRB5_KDB_FLAG_CONSTRAINED_DELEGATION)
+ kau_s4u2proxy(context, TRUE, au_state);
+ kau_tgs_req(context, TRUE, au_state);
+ au_state->reply = NULL;
+
+cleanup:
+ zapfree(ticket_reply.enc_part.ciphertext.data,
+ ticket_reply.enc_part.ciphertext.length);
+ zapfree(reply.enc_part.ciphertext.data, reply.enc_part.ciphertext.length);
+ krb5_free_pa_data(context, reply.padata);
+ krb5_free_pa_data(context, reply_encpart.enc_padata);
+ krb5_free_authdata(context, enc_tkt_reply.authorization_data);
+ krb5_free_keyblock_contents(context, &session_key);
+ krb5_free_keyblock_contents(context, &server_key);
+ krb5_free_keyblock(context, fast_reply_key);
+ return ret;
+}
+
+static void
+free_req_info(krb5_context context, struct tgs_req_info *t)
+{
+ krb5_free_kdc_req(context, t->req);
+ krb5_free_ticket(context, t->header_tkt);
+ krb5_db_free_principal(context, t->header_server);
+ krb5_free_keyblock(context, t->header_key);
+ krb5_free_keyblock(context, t->subkey);
+ krb5_pac_free(context, t->header_pac);
+ krb5_pac_free(context, t->stkt_pac);
+ krb5_db_free_principal(context, t->stkt_server);
+ krb5_free_keyblock(context, t->stkt_server_key);
+ krb5_db_free_principal(context, t->local_tgt_storage);
+ krb5_free_keyblock_contents(context, &t->local_tgt_key);
+ krb5_db_free_principal(context, t->server);
+ krb5_db_free_principal(context, t->client);
+ krb5_free_pa_s4u_x509_user(context, t->s4u2self);
+ krb5_free_principal(context, t->stkt_pac_client);
+ k5_free_data_ptr_list(t->auth_indicators);
+ krb5_free_data_contents(context, &t->new_transited);
+}
+
+krb5_error_code
+process_tgs_req(krb5_kdc_req *request, krb5_data *pkt,
+ const krb5_fulladdr *from, kdc_realm_t *realm,
+ krb5_data **response)
+{
+ krb5_context context = realm->realm_context;
+ krb5_error_code ret;
+ struct tgs_req_info t = { 0 };
+ struct kdc_request_state *fast_state = NULL;
+ krb5_audit_state *au_state = NULL;
+ krb5_pa_data **e_data = NULL;
+ krb5_flags tktflags;
+ krb5_ticket_times times = { 0 };
+ const char *emsg = NULL, *status = NULL;
+
+ ret = kdc_make_rstate(realm, &fast_state);
+ if (ret)
+ goto cleanup;
+ ret = kau_init_kdc_req(context, request, from, &au_state);
+ if (ret)
+ goto cleanup;
+ kau_tgs_req(context, TRUE, au_state);
+
+ ret = gather_tgs_req_info(realm, &request, pkt, from, fast_state, au_state,
+ &t, &status);
+ if (ret)
+ goto cleanup;
+
+ ret = check_tgs_req(realm, &t, au_state, &tktflags, ×, &status,
+ &e_data);
+ if (ret)
+ goto cleanup;
+
+ ret = tgs_issue_ticket(realm, &t, tktflags, ×, pkt, from, fast_state,
+ au_state, &status, response);
+ if (ret)
+ goto cleanup;
+
+cleanup:
+ if (status == NULL)
+ status = "UNKNOWN_REASON";
+
+ if (ret) {
+ emsg = krb5_get_error_message(context, ret);
+ log_tgs_req(context, from, t.req, NULL, t.cprinc, t.sprinc,
+ t.s4u_cprinc, t.authtime, t.flags, status, ret, emsg);
+ krb5_free_error_message(context, emsg);
+
+ if (au_state != NULL) {
+ au_state->status = status;
+ kau_tgs_req(context, FALSE, au_state);
+ }
+ }
+
+ if (ret && fast_state != NULL) {
+ ret = prepare_error_tgs(fast_state, t.req, t.header_tkt, ret,
+ (t.server != NULL) ? t.server->princ : NULL,
+ response, status, e_data);
+ }
+
+ krb5_free_kdc_req(context, request);
+ kdc_free_rstate(fast_state);
+ kau_free_kdc_req(au_state);
+ free_req_info(context, &t);
+ krb5_free_pa_data(context, e_data);
return ret;
}
krb5_auth_context authcontext = NULL;
krb5_ticket *ticket = NULL;
krb5_keyblock *subkey = NULL;
- kdc_realm_t *kdc_active_realm = state->realm_data;
+ kdc_realm_t *realm = state->realm_data;
+ krb5_context context = realm->realm_context;
assert(armor->armor_type == KRB5_FAST_ARMOR_AP_REQUEST);
- krb5_clear_error_message(kdc_context);
- retval = krb5_auth_con_init(kdc_context, &authcontext);
+ krb5_clear_error_message(context);
+ retval = krb5_auth_con_init(context, &authcontext);
+ /*disable replay cache*/
if (retval == 0)
- retval = krb5_auth_con_setflags(kdc_context,
- authcontext, 0); /*disable replay cache*/
+ retval = krb5_auth_con_setflags(context, authcontext, 0);
if (retval == 0)
- retval = krb5_rd_req(kdc_context, &authcontext, &armor->armor_value,
- NULL /*server*/, kdc_active_realm->realm_keytab,
+ retval = krb5_rd_req(context, &authcontext, &armor->armor_value,
+ NULL /*server*/, realm->realm_keytab,
NULL, &ticket);
if (retval != 0) {
- const char * errmsg = krb5_get_error_message(kdc_context, retval);
- k5_setmsg(kdc_context, retval, _("%s while handling ap-request armor"),
+ const char * errmsg = krb5_get_error_message(context, retval);
+ k5_setmsg(context, retval, _("%s while handling ap-request armor"),
errmsg);
- krb5_free_error_message(kdc_context, errmsg);
+ krb5_free_error_message(context, errmsg);
}
if (retval == 0) {
- if (!krb5_principal_compare_any_realm(kdc_context,
- tgs_server,
+ if (!krb5_principal_compare_any_realm(context, realm->realm_tgsprinc,
ticket->server)) {
- k5_setmsg(kdc_context, KRB5KDC_ERR_SERVER_NOMATCH,
+ k5_setmsg(context, KRB5KDC_ERR_SERVER_NOMATCH,
_("ap-request armor for something other than the local "
"TGS"));
retval = KRB5KDC_ERR_SERVER_NOMATCH;
}
}
if (retval == 0) {
- retval = krb5_auth_con_getrecvsubkey(kdc_context, authcontext, &subkey);
+ retval = krb5_auth_con_getrecvsubkey(context, authcontext, &subkey);
if (retval != 0 || subkey == NULL) {
- k5_setmsg(kdc_context, KRB5KDC_ERR_POLICY,
+ k5_setmsg(context, KRB5KDC_ERR_POLICY,
_("ap-request armor without subkey"));
retval = KRB5KDC_ERR_POLICY;
}
}
if (retval == 0)
- retval = krb5_c_fx_cf2_simple(kdc_context,
+ retval = krb5_c_fx_cf2_simple(context,
subkey, "subkeyarmor",
ticket->enc_part2->session, "ticketarmor",
&state->armor_key);
if (ticket)
- krb5_free_ticket(kdc_context, ticket);
+ krb5_free_ticket(context, ticket);
if (subkey)
- krb5_free_keyblock(kdc_context, subkey);
+ krb5_free_keyblock(context, subkey);
if (authcontext)
- krb5_auth_con_free(kdc_context, authcontext);
+ krb5_auth_con_free(context, authcontext);
return retval;
}
const krb5_fast_response *response,
krb5_data **fx_fast_reply)
{
+ krb5_context context = state->realm_data->realm_context;
krb5_error_code retval = 0;
krb5_enc_data encrypted_reply;
krb5_data *encoded_response = NULL;
- kdc_realm_t *kdc_active_realm = state->realm_data;
assert(state->armor_key);
retval = encode_krb5_fast_response(response, &encoded_response);
if (retval== 0)
- retval = krb5_encrypt_helper(kdc_context, state->armor_key,
+ retval = krb5_encrypt_helper(context, state->armor_key,
KRB5_KEYUSAGE_FAST_REP,
encoded_response, &encrypted_reply);
if (encoded_response)
- krb5_free_data(kdc_context, encoded_response);
+ krb5_free_data(context, encoded_response);
encoded_response = NULL;
if (retval == 0) {
retval = encode_krb5_pa_fx_fast_reply(&encrypted_reply,
fx_fast_reply);
- krb5_free_data_contents(kdc_context, &encrypted_reply.ciphertext);
+ krb5_free_data_contents(context, &encrypted_reply.ciphertext);
}
return retval;
}
struct kdc_request_state *state,
krb5_data **inner_body_out)
{
+ krb5_context context = state->realm_data->realm_context;
krb5_error_code retval = 0;
krb5_pa_data *fast_padata;
krb5_data scratch, plaintext, *inner_body = NULL;
krb5_checksum *cksum;
krb5_boolean cksum_valid;
krb5_keyblock empty_keyblock;
- kdc_realm_t *kdc_active_realm = state->realm_data;
if (inner_body_out != NULL)
*inner_body_out = NULL;
scratch.data = NULL;
- krb5_clear_error_message(kdc_context);
+ krb5_clear_error_message(context);
memset(&empty_keyblock, 0, sizeof(krb5_keyblock));
- fast_padata = krb5int_find_pa_data(kdc_context,
- request->padata, KRB5_PADATA_FX_FAST);
+ fast_padata = krb5int_find_pa_data(context, request->padata,
+ KRB5_PADATA_FX_FAST);
if (fast_padata != NULL){
scratch.length = fast_padata->length;
scratch.data = (char *) fast_padata->contents;
case KRB5_FAST_ARMOR_AP_REQUEST:
if (tgs_subkey) {
retval = KRB5KDC_ERR_PREAUTH_FAILED;
- k5_setmsg(kdc_context, retval,
+ k5_setmsg(context, retval,
_("Ap-request armor not permitted with TGS"));
break;
}
retval = armor_ap_request(state, fast_armored_req->armor);
break;
default:
- k5_setmsg(kdc_context, KRB5KDC_ERR_PREAUTH_FAILED,
+ k5_setmsg(context, KRB5KDC_ERR_PREAUTH_FAILED,
_("Unknown FAST armor type %d"),
fast_armored_req->armor->armor_type);
retval = KRB5KDC_ERR_PREAUTH_FAILED;
}
if (retval == 0 && !state->armor_key) {
if (tgs_subkey)
- retval = krb5_c_fx_cf2_simple(kdc_context,
+ retval = krb5_c_fx_cf2_simple(context,
tgs_subkey, "subkeyarmor",
tgs_session, "ticketarmor",
&state->armor_key);
else {
retval = KRB5KDC_ERR_PREAUTH_FAILED;
- k5_setmsg(kdc_context, retval,
+ k5_setmsg(context, retval,
_("No armor key but FAST armored request present"));
}
}
plaintext.data = k5alloc(plaintext.length, &retval);
}
if (retval == 0) {
- retval = krb5_c_decrypt(kdc_context,
- state->armor_key,
+ retval = krb5_c_decrypt(context, state->armor_key,
KRB5_KEYUSAGE_FAST_ENC, NULL,
&fast_armored_req->enc_part,
&plaintext);
retval = fetch_asn1_field((unsigned char *)plaintext.data,
1, 2, &scratch);
if (retval == 0) {
- retval = krb5_copy_data(kdc_context, &scratch,
- &inner_body);
+ retval = krb5_copy_data(context, &scratch, &inner_body);
}
}
if (plaintext.data)
}
cksum = &fast_armored_req->req_checksum;
if (retval == 0)
- retval = krb5_c_verify_checksum(kdc_context, state->armor_key,
+ retval = krb5_c_verify_checksum(context, state->armor_key,
KRB5_KEYUSAGE_FAST_REQ_CHKSUM,
checksummed_data, cksum,
&cksum_valid);
if (retval == 0 && !cksum_valid) {
retval = KRB5KRB_AP_ERR_MODIFIED;
- k5_setmsg(kdc_context, retval,
+ k5_setmsg(context, retval,
_("FAST req_checksum invalid; request modified"));
}
if (retval == 0) {
if (!krb5_c_is_keyed_cksum(cksum->checksum_type)) {
retval = KRB5KDC_ERR_POLICY;
- k5_setmsg(kdc_context, retval,
+ k5_setmsg(context, retval,
_("Unkeyed checksum used in fast_req"));
}
}
if (retval == 0) {
state->fast_options = fast_req->fast_options;
fast_req->req_body->msg_type = request->msg_type;
- krb5_free_kdc_req( kdc_context, request);
+ krb5_free_kdc_req(context, request);
*requestptr = fast_req->req_body;
fast_req->req_body = NULL;
}
*inner_body_out = inner_body;
inner_body = NULL;
}
- krb5_free_data(kdc_context, inner_body);
+ krb5_free_data(context, inner_body);
if (fast_req)
- krb5_free_fast_req( kdc_context, fast_req);
+ krb5_free_fast_req(context, fast_req);
if (fast_armored_req)
- krb5_free_fast_armored_req(kdc_context, fast_armored_req);
+ krb5_free_fast_armored_req(context, fast_armored_req);
return retval;
}
void
kdc_free_rstate (struct kdc_request_state *s)
{
- kdc_realm_t *kdc_active_realm = s->realm_data;
-
+ if (s == NULL)
+ return;
if (s->armor_key)
- krb5_free_keyblock(kdc_context, s->armor_key);
+ krb5_free_keyblock(s->realm_data->realm_context, s->armor_key);
if (s->strengthen_key)
- krb5_free_keyblock(kdc_context, s->strengthen_key);
+ krb5_free_keyblock(s->realm_data->realm_context, s->strengthen_key);
k5_zapfree_pa_data(s->in_cookie_padata);
k5_zapfree_pa_data(s->out_cookie_padata);
free(s);
krb5_kdc_req *request,
krb5_kdc_rep *rep, krb5_enctype enctype)
{
+ krb5_context context = state->realm_data->realm_context;
krb5_error_code retval = 0;
krb5_fast_finished finish;
krb5_fast_response fast_response;
krb5_cksumtype cksumtype = CKSUMTYPE_RSA_MD5;
krb5_pa_data *empty_padata[] = {NULL};
krb5_keyblock *strengthen_key = NULL;
- kdc_realm_t *kdc_active_realm = state->realm_data;
if (!state->armor_key)
return 0;
memset(&finish, 0, sizeof(finish));
- retval = krb5_init_keyblock(kdc_context, enctype, 0, &strengthen_key);
+ retval = krb5_init_keyblock(context, enctype, 0, &strengthen_key);
if (retval == 0)
- retval = krb5_c_make_random_key(kdc_context, enctype, strengthen_key);
+ retval = krb5_c_make_random_key(context, enctype, strengthen_key);
if (retval == 0) {
state->strengthen_key = strengthen_key;
strengthen_key = NULL;
if (retval == 0 && pa == NULL)
retval = ENOMEM;
if (retval == 0)
- retval = krb5_us_timeofday(kdc_context, &finish.timestamp, &finish.usec);
+ retval = krb5_us_timeofday(context, &finish.timestamp, &finish.usec);
if (retval == 0)
retval = encode_krb5_ticket(rep->ticket, &encoded_ticket);
if (retval == 0)
- retval = krb5int_c_mandatory_cksumtype(kdc_context,
+ retval = krb5int_c_mandatory_cksumtype(context,
state->armor_key->enctype,
&cksumtype);
if (retval == 0)
- retval = krb5_c_make_checksum(kdc_context, cksumtype,
- state->armor_key,
+ retval = krb5_c_make_checksum(context, cksumtype, state->armor_key,
KRB5_KEYUSAGE_FAST_FINISHED,
encoded_ticket, &finish.ticket_checksum);
if (retval == 0)
pa[0].length = encrypted_reply->length;
pa[0].contents = (unsigned char *) encrypted_reply->data;
pa_array[0] = &pa[0];
- krb5_free_pa_data(kdc_context, rep->padata);
+ krb5_free_pa_data(context, rep->padata);
rep->padata = pa_array;
pa_array = NULL;
free(encrypted_reply);
if (pa_array)
free(pa_array);
if (encrypted_reply)
- krb5_free_data(kdc_context, encrypted_reply);
+ krb5_free_data(context, encrypted_reply);
if (encoded_ticket)
- krb5_free_data(kdc_context, encoded_ticket);
+ krb5_free_data(context, encoded_ticket);
if (strengthen_key != NULL)
- krb5_free_keyblock(kdc_context, strengthen_key);
+ krb5_free_keyblock(context, strengthen_key);
if (finish.ticket_checksum.contents)
- krb5_free_checksum_contents(kdc_context, &finish.ticket_checksum);
+ krb5_free_checksum_contents(context, &finish.ticket_checksum);
return retval;
}
krb5_pa_data *outer_pa[3];
krb5_pa_data **inner_pa = NULL;
size_t size = 0;
- kdc_realm_t *kdc_active_realm = state->realm_data;
*fast_edata_out = NULL;
memset(outer_pa, 0, sizeof(outer_pa));
}
retval = encode_krb5_padata_sequence(outer_pa, fast_edata_out);
if (encrypted_reply)
- krb5_free_data(kdc_context, encrypted_reply);
+ krb5_free_data(context, encrypted_reply);
if (encoded_fx_error)
- krb5_free_data(kdc_context, encoded_fx_error);
+ krb5_free_data(context, encoded_fx_error);
return retval;
}
krb5_keyblock *existing_key,
krb5_keyblock **out_key)
{
+ krb5_context context = state->realm_data->realm_context;
krb5_error_code retval = 0;
- kdc_realm_t *kdc_active_realm = state->realm_data;
if (state->armor_key)
- retval = krb5_c_fx_cf2_simple(kdc_context,
+ retval = krb5_c_fx_cf2_simple(context,
state->strengthen_key, "strengthenkey",
- existing_key,
- "replykey", out_key);
+ existing_key, "replykey", out_key);
else
- retval = krb5_copy_keyblock(kdc_context, existing_key, out_key);
+ retval = krb5_copy_keyblock(context, existing_key, out_key);
return retval;
}
void
kau_free_kdc_req(krb5_audit_state *state)
{
+ if (state == NULL)
+ return;
free(state->tkt_in_id);
free(state->tkt_out_id);
free(state->evid_tkt_id);
* method can alter the auth indicator list.
*/
static krb5_error_code
-handle_pac(kdc_realm_t *kdc_active_realm, unsigned int flags,
- krb5_db_entry *client, krb5_db_entry *server,
- krb5_db_entry *subject_server, krb5_db_entry *local_tgt,
- krb5_keyblock *local_tgt_key, krb5_keyblock *server_key,
- krb5_keyblock *subject_key, krb5_keyblock *replaced_reply_key,
- krb5_enc_tkt_part *subject_tkt, krb5_pac subject_pac,
- krb5_kdc_req *req, krb5_const_principal altcprinc,
- krb5_timestamp authtime, krb5_enc_tkt_part *enc_tkt_reply,
- krb5_data ***auth_indicators)
+handle_pac(kdc_realm_t *realm, unsigned int flags, krb5_db_entry *client,
+ krb5_db_entry *server, krb5_db_entry *subject_server,
+ krb5_db_entry *local_tgt, krb5_keyblock *local_tgt_key,
+ krb5_keyblock *server_key, krb5_keyblock *subject_key,
+ krb5_keyblock *replaced_reply_key, krb5_enc_tkt_part *subject_tkt,
+ krb5_pac subject_pac, krb5_kdc_req *req,
+ krb5_const_principal altcprinc, krb5_timestamp authtime,
+ krb5_enc_tkt_part *enc_tkt_reply, krb5_data ***auth_indicators)
{
+ krb5_context context = realm->realm_context;
krb5_error_code ret;
- krb5_context context = kdc_context;
krb5_pac new_pac = NULL;
krb5_const_principal pac_client = NULL;
krb5_boolean with_realm, is_as_req = (req->msg_type == KRB5_AS_REQ);
krb5_db_entry *signing_tgt;
+ krb5_keyblock *privsvr_key = NULL;
/* Don't add a PAC or auth indicators if the server disables authdata. */
if (server->attributes & KRB5_KDB_NO_AUTH_DATA_REQUIRED)
* or for an AS-REQ if the client requested not to get one, or for a
* TGS-REQ if the subject ticket didn't contain one.
*/
- if (kdc_active_realm->realm_disable_pac ||
+ if (realm->realm_disable_pac ||
(enc_tkt_reply->flags & TKT_FLG_ANONYMOUS) ||
(is_as_req && !include_pac_p(context, req)) ||
(!is_as_req && subject_pac == NULL)) {
with_realm = FALSE;
}
+ ret = pac_privsvr_key(context, server, local_tgt_key, &privsvr_key);
+ if (ret)
+ goto cleanup;
ret = krb5_kdc_sign_ticket(context, enc_tkt_reply, new_pac, server->princ,
- pac_client, server_key, local_tgt_key,
+ pac_client, server_key, privsvr_key,
with_realm);
if (ret)
goto cleanup;
cleanup:
krb5_pac_free(context, new_pac);
+ krb5_free_keyblock(context, privsvr_key);
return ret;
}
krb5_error_code
-handle_authdata(kdc_realm_t *kdc_active_realm, unsigned int flags,
- krb5_db_entry *client, krb5_db_entry *server,
- krb5_db_entry *subject_server, krb5_db_entry *local_tgt,
- krb5_keyblock *local_tgt_key, krb5_keyblock *client_key,
- krb5_keyblock *server_key, krb5_keyblock *subject_key,
- krb5_keyblock *replaced_reply_key, krb5_data *req_pkt,
- krb5_kdc_req *req, krb5_const_principal altcprinc,
- krb5_pac subject_pac, krb5_enc_tkt_part *enc_tkt_req,
- krb5_data ***auth_indicators, krb5_enc_tkt_part *enc_tkt_reply)
+handle_authdata(kdc_realm_t *realm, unsigned int flags, krb5_db_entry *client,
+ krb5_db_entry *server, krb5_db_entry *subject_server,
+ krb5_db_entry *local_tgt, krb5_keyblock *local_tgt_key,
+ krb5_keyblock *client_key, krb5_keyblock *server_key,
+ krb5_keyblock *subject_key, krb5_keyblock *replaced_reply_key,
+ krb5_data *req_pkt, krb5_kdc_req *req,
+ krb5_const_principal altcprinc, krb5_pac subject_pac,
+ krb5_enc_tkt_part *enc_tkt_req, krb5_data ***auth_indicators,
+ krb5_enc_tkt_part *enc_tkt_reply)
{
+ krb5_context context = realm->realm_context;
kdcauthdata_handle *h;
krb5_error_code ret = 0;
size_t i;
- krb5_context context = kdc_active_realm->realm_context;
if (req->msg_type == KRB5_TGS_REQ &&
req->authorization_data.ciphertext.data != NULL) {
return ret;
}
- return handle_pac(kdc_active_realm, flags, client, server, subject_server,
- local_tgt, local_tgt_key, server_key, subject_key,
+ return handle_pac(realm, flags, client, server, subject_server, local_tgt,
+ local_tgt_key, server_key, subject_key,
replaced_reply_key, enc_tkt_req, subject_pac, req,
altcprinc, enc_tkt_reply->times.authtime, enc_tkt_reply,
auth_indicators);
important). */
if (errcode != KRB5KDC_ERR_SERVER_NOMATCH) {
ktypestr = ktypes2str(request->ktype, request->nktypes);
- rep_etypestr = rep_etypes2str(reply);
+ if (reply != NULL)
+ rep_etypestr = rep_etypes2str(reply);
krb5_klog_syslog(LOG_INFO, _("TGS_REQ (%s) %s: %s: authtime %u, %s%s "
"%s for %s%s%s"),
ktypestr ? ktypestr : "", fromstring, status,
struct hint_state {
kdc_hint_respond_fn respond;
void *arg;
- kdc_realm_t *realm;
+ krb5_context context;
krb5_kdcpreauth_rock rock;
krb5_kdc_req *request;
static void
hint_list_finish(struct hint_state *state, krb5_error_code code)
{
+ krb5_context context = state->context;
kdc_hint_respond_fn oldrespond = state->respond;
void *oldarg = state->arg;
- kdc_realm_t *kdc_active_realm = state->realm;
/* Add a freshness token if a preauth module requested it and the client
* request indicates support for it. */
if (!code)
- code = add_freshness_token(kdc_context, state->rock, &state->pa_data);
+ code = add_freshness_token(context, state->rock, &state->pa_data);
if (!code) {
if (state->pa_data == NULL) {
state->pa_data = NULL;
}
- krb5_free_pa_data(kdc_context, state->pa_data);
+ krb5_free_pa_data(context, state->pa_data);
free(state);
(*oldrespond)(oldarg);
}
static void
hint_list_next(struct hint_state *state)
{
+ krb5_context context = state->context;
preauth_system *ap = state->ap;
- kdc_realm_t *kdc_active_realm = state->realm;
if (ap->type == -1) {
hint_list_finish(state, 0);
state->pa_type = ap->type;
if (ap->get_edata) {
- ap->get_edata(kdc_context, state->request, &callbacks, state->rock,
+ ap->get_edata(context, state->request, &callbacks, state->rock,
ap->moddata, ap->type, finish_get_edata, state);
} else
finish_get_edata(state, 0, NULL);
krb5_pa_data ***e_data_out, kdc_hint_respond_fn respond,
void *arg)
{
- kdc_realm_t *kdc_active_realm = rock->rstate->realm_data;
+ krb5_context context = rock->rstate->realm_data->realm_context;
struct hint_state *state;
*e_data_out = NULL;
state->arg = arg;
state->request = request;
state->rock = rock;
- state->realm = rock->rstate->realm_data;
+ state->context = context;
state->e_data_out = e_data_out;
state->pa_data = NULL;
state->ap = preauth_systems;
if (k5_add_empty_pa_data(&state->pa_data, KRB5_PADATA_FX_FAST) != 0)
goto error;
- if (add_etype_info(kdc_context, rock, &state->pa_data) != 0)
+ if (add_etype_info(context, rock, &state->pa_data) != 0)
goto error;
hint_list_next(state);
error:
if (state != NULL)
- krb5_free_pa_data(kdc_context, state->pa_data);
+ krb5_free_pa_data(context, state->pa_data);
free(state);
(*respond)(arg);
}
const int vague_errors = 0;
#endif
-static krb5_error_code kdc_rd_ap_req(kdc_realm_t *kdc_active_realm,
- krb5_ap_req *apreq,
+static krb5_error_code kdc_rd_ap_req(kdc_realm_t *realm, krb5_ap_req *apreq,
krb5_auth_context auth_context,
krb5_db_entry **server,
krb5_keyblock **tgskey);
/* If a header ticket is decrypted, *ticket_out is filled in even on error. */
krb5_error_code
-kdc_process_tgs_req(kdc_realm_t *kdc_active_realm,
- krb5_kdc_req *request, const krb5_fulladdr *from,
- krb5_data *pkt, krb5_ticket **ticket_out,
- krb5_db_entry **krbtgt_ptr,
- krb5_keyblock **tgskey,
- krb5_keyblock **subkey,
+kdc_process_tgs_req(kdc_realm_t *realm, krb5_kdc_req *request,
+ const krb5_fulladdr *from, krb5_data *pkt,
+ krb5_ticket **ticket_out, krb5_db_entry **krbtgt_ptr,
+ krb5_keyblock **tgskey, krb5_keyblock **subkey,
krb5_pa_data **pa_tgs_req)
{
+ krb5_context context = realm->realm_context;
krb5_pa_data * tmppa;
krb5_ap_req * apreq;
krb5_error_code retval;
*krbtgt_ptr = NULL;
*tgskey = NULL;
- tmppa = krb5int_find_pa_data(kdc_context,
- request->padata, KRB5_PADATA_AP_REQ);
+ tmppa = krb5int_find_pa_data(context, request->padata, KRB5_PADATA_AP_REQ);
if (!tmppa)
return KRB5KDC_ERR_PADATA_TYPE_NOSUPP;
goto cleanup;
}
- if ((retval = krb5_auth_con_init(kdc_context, &auth_context)))
+ retval = krb5_auth_con_init(context, &auth_context);
+ if (retval)
goto cleanup;
/* Don't use a replay cache. */
- if ((retval = krb5_auth_con_setflags(kdc_context, auth_context, 0)))
+ retval = krb5_auth_con_setflags(context, auth_context, 0);
+ if (retval)
goto cleanup;
- if ((retval = krb5_auth_con_setaddrs(kdc_context, auth_context, NULL,
- from->address)) )
+ retval = krb5_auth_con_setaddrs(context, auth_context, NULL,
+ from->address);
+ if (retval)
goto cleanup_auth_context;
- retval = kdc_rd_ap_req(kdc_active_realm,
- apreq, auth_context, &krbtgt, tgskey);
+ retval = kdc_rd_ap_req(realm, apreq, auth_context, &krbtgt, tgskey);
if (retval)
goto cleanup_auth_context;
- if ((retval = krb5_auth_con_getrecvsubkey(kdc_context,
- auth_context, subkey)))
+ retval = krb5_auth_con_getrecvsubkey(context, auth_context, subkey);
+ if (retval)
goto cleanup_auth_context;
- if ((retval = krb5_auth_con_getauthenticator(kdc_context, auth_context,
- &authenticator)))
+ retval = krb5_auth_con_getauthenticator(context, auth_context,
+ &authenticator);
+ if (retval)
goto cleanup_auth_context;
- retval = krb5_find_authdata(kdc_context,
- ticket->enc_part2->authorization_data,
+ retval = krb5_find_authdata(context, ticket->enc_part2->authorization_data,
authenticator->authorization_data,
KRB5_AUTHDATA_FX_ARMOR, &authdata);
if (retval != 0)
goto cleanup_authenticator;
if (authdata&& authdata[0]) {
- k5_setmsg(kdc_context, KRB5KDC_ERR_POLICY,
+ k5_setmsg(context, KRB5KDC_ERR_POLICY,
"ticket valid only as FAST armor");
retval = KRB5KDC_ERR_POLICY;
- krb5_free_authdata(kdc_context, authdata);
+ krb5_free_authdata(context, authdata);
goto cleanup_authenticator;
}
- krb5_free_authdata(kdc_context, authdata);
+ krb5_free_authdata(context, authdata);
/* Check for a checksum */
*/
if (pkt && (fetch_asn1_field((unsigned char *) pkt->data,
1, 4, &scratch1) >= 0)) {
- if (comp_cksum(kdc_context, &scratch1, ticket, his_cksum)) {
+ if (comp_cksum(context, &scratch1, ticket, his_cksum)) {
if (!(retval = encode_krb5_kdc_req_body(request, &scratch)))
- retval = comp_cksum(kdc_context, scratch, ticket, his_cksum);
- krb5_free_data(kdc_context, scratch);
+ retval = comp_cksum(context, scratch, ticket, his_cksum);
+ krb5_free_data(context, scratch);
if (retval)
goto cleanup_authenticator;
}
krbtgt = NULL;
cleanup_authenticator:
- krb5_free_authenticator(kdc_context, authenticator);
+ krb5_free_authenticator(context, authenticator);
cleanup_auth_context:
- krb5_auth_con_free(kdc_context, auth_context);
+ krb5_auth_con_free(context, auth_context);
cleanup:
if (retval != 0) {
- krb5_free_keyblock(kdc_context, *tgskey);
+ krb5_free_keyblock(context, *tgskey);
*tgskey = NULL;
}
if (apreq->ticket->enc_part2 != NULL) {
*ticket_out = apreq->ticket;
apreq->ticket = NULL;
}
- krb5_free_ap_req(kdc_context, apreq);
- krb5_db_free_principal(kdc_context, krbtgt);
+ krb5_free_ap_req(context, apreq);
+ krb5_db_free_principal(context, krbtgt);
return retval;
}
*/
static
krb5_error_code
-kdc_rd_ap_req(kdc_realm_t *kdc_active_realm,
- krb5_ap_req *apreq, krb5_auth_context auth_context,
- krb5_db_entry **server, krb5_keyblock **tgskey)
+kdc_rd_ap_req(kdc_realm_t *realm, krb5_ap_req *apreq,
+ krb5_auth_context auth_context, krb5_db_entry **server,
+ krb5_keyblock **tgskey)
{
+ krb5_context context = realm->realm_context;
krb5_error_code retval;
krb5_enctype search_enctype = apreq->ticket->enc_part.enctype;
krb5_boolean match_enctype = 1;
match_enctype = 0;
}
- retval = kdc_get_server_key(kdc_context, apreq->ticket, 0, match_enctype,
+ retval = kdc_get_server_key(context, apreq->ticket, 0, match_enctype,
server, NULL, NULL);
if (retval)
return retval;
*tgskey = NULL;
kvno = apreq->ticket->enc_part.kvno;
do {
- krb5_free_keyblock(kdc_context, *tgskey);
- retval = find_server_key(kdc_context,
- *server, search_enctype, kvno, tgskey, &kvno);
+ krb5_free_keyblock(context, *tgskey);
+ retval = find_server_key(context, *server, search_enctype, kvno,
+ tgskey, &kvno);
if (retval)
continue;
/* Make the TGS key available to krb5_rd_req_decoded_anyflag() */
- retval = krb5_auth_con_setuseruserkey(kdc_context, auth_context,
- *tgskey);
+ retval = krb5_auth_con_setuseruserkey(context, auth_context, *tgskey);
if (retval)
return retval;
- retval = krb5_rd_req_decoded_anyflag(kdc_context, &auth_context, apreq,
+ retval = krb5_rd_req_decoded_anyflag(context, &auth_context, apreq,
apreq->ticket->server,
- kdc_active_realm->realm_keytab,
- NULL, NULL);
+ realm->realm_keytab, NULL, NULL);
/* If the ticket was decrypted, don't try any more keys. */
if (apreq->ticket->enc_part2 != NULL)
return ret;
}
+/* If server has a pac_privsvr_enctype attribute and it differs from tgt_key's
+ * enctype, derive a key of the specified enctype. Otherwise copy tgt_key. */
+krb5_error_code
+pac_privsvr_key(krb5_context context, krb5_db_entry *server,
+ const krb5_keyblock *tgt_key, krb5_keyblock **key_out)
+{
+ krb5_error_code ret;
+ char *attrval = NULL;
+ krb5_enctype privsvr_enctype;
+ krb5_data prf_input = string2data("pac_privsvr");
+
+ ret = krb5_dbe_get_string(context, server, KRB5_KDB_SK_PAC_PRIVSVR_ENCTYPE,
+ &attrval);
+ if (ret)
+ return ret;
+ if (attrval == NULL)
+ return krb5_copy_keyblock(context, tgt_key, key_out);
+
+ ret = krb5_string_to_enctype(attrval, &privsvr_enctype);
+ if (ret) {
+ k5_setmsg(context, ret, _("Invalid pac_privsvr_enctype value %s"),
+ attrval);
+ goto cleanup;
+ }
+
+ if (tgt_key->enctype == privsvr_enctype) {
+ ret = krb5_copy_keyblock(context, tgt_key, key_out);
+ } else {
+ ret = krb5_c_derive_prfplus(context, tgt_key, &prf_input,
+ privsvr_enctype, key_out);
+ }
+
+cleanup:
+ krb5_dbe_free_string(context, attrval);
+ return ret;
+}
+
+/* Try verifying a ticket's PAC using a privsvr key either equal to or derived
+ * from tgt_key, respecting the server's pac_privsvr_enctype value if set. */
+static krb5_error_code
+try_verify_pac(krb5_context context, const krb5_enc_tkt_part *enc_tkt,
+ krb5_db_entry *server, krb5_keyblock *server_key,
+ const krb5_keyblock *tgt_key, krb5_pac *pac_out)
+{
+ krb5_error_code ret;
+ krb5_keyblock *privsvr_key;
+
+ ret = pac_privsvr_key(context, server, tgt_key, &privsvr_key);
+ if (ret)
+ return ret;
+ ret = krb5_kdc_verify_ticket(context, enc_tkt, server->princ, server_key,
+ privsvr_key, pac_out);
+ krb5_free_keyblock(context, privsvr_key);
+ return ret;
+}
+
/*
* If a PAC is present in enc_tkt, verify it and place it in *pac_out. sprinc
* is the canonical name of the server principal entry used to decrypt enc_tkt.
*/
krb5_error_code
get_verified_pac(krb5_context context, const krb5_enc_tkt_part *enc_tkt,
- krb5_const_principal sprinc, krb5_keyblock *server_key,
+ krb5_db_entry *server, krb5_keyblock *server_key,
krb5_db_entry *tgt, krb5_keyblock *tgt_key, krb5_pac *pac_out)
{
krb5_error_code ret;
*pac_out = NULL;
/* For local or cross-realm TGTs we only check the server signature. */
- if (krb5_is_tgs_principal(sprinc)) {
- return krb5_kdc_verify_ticket(context, enc_tkt, sprinc, server_key,
- NULL, pac_out);
+ if (krb5_is_tgs_principal(server->princ)) {
+ return krb5_kdc_verify_ticket(context, enc_tkt, server->princ,
+ server_key, NULL, pac_out);
}
- ret = krb5_kdc_verify_ticket(context, enc_tkt, sprinc, server_key,
- tgt_key, pac_out);
+ ret = try_verify_pac(context, enc_tkt, server, server_key, tgt_key,
+ pac_out);
if (ret != KRB5KRB_AP_ERR_MODIFIED && ret != KRB5_BAD_ENCTYPE)
return ret;
ret = krb5_dbe_decrypt_key_data(context, NULL, kd, &old_key, NULL);
if (ret)
return ret;
- ret = krb5_kdc_verify_ticket(context, enc_tkt, sprinc, server_key,
- &old_key, pac_out);
+ ret = try_verify_pac(context, enc_tkt, server, server_key, &old_key,
+ pac_out);
krb5_free_keyblock_contents(context, &old_key);
if (!ret)
return 0;
}
-/* XXX! This is a temporary place-holder */
-
-krb5_error_code
-check_hot_list(krb5_ticket *ticket)
-{
- return 0;
-}
-
-
/* Convert an API error code to a protocol error code. */
int
errcode_to_protocol(krb5_error_code code)
/* Return -1 if the AS or TGS request is disallowed due to KDC policy on
* anonymous tickets. */
int
-check_anon(kdc_realm_t *kdc_active_realm,
- krb5_principal client, krb5_principal server)
+check_anon(kdc_realm_t *realm, krb5_principal client, krb5_principal server)
{
/* If restrict_anon is set, reject requests from anonymous clients to
* server principals other than local TGTs. */
- if (kdc_active_realm->realm_restrict_anon &&
- krb5_principal_compare_any_realm(kdc_context, client,
+ if (realm->realm_restrict_anon &&
+ krb5_principal_compare_any_realm(realm->realm_context, client,
krb5_anonymous_principal()) &&
!is_local_tgs_principal(server))
return -1;
return 0;
}
-/*
- * Routines that validate a AS request; checks a lot of things. :-)
- *
- * Returns a Kerberos protocol error number, which is _not_ the same
- * as a com_err error number!
- */
-int
-validate_as_request(kdc_realm_t *kdc_active_realm,
- krb5_kdc_req *request, krb5_db_entry *client,
- krb5_db_entry *server, krb5_timestamp kdc_time,
- const char **status, krb5_pa_data ***e_data)
+krb5_error_code
+validate_as_request(kdc_realm_t *realm, krb5_kdc_req *request,
+ krb5_db_entry *client, krb5_db_entry *server,
+ krb5_timestamp kdc_time, const char **status,
+ krb5_pa_data ***e_data)
{
+ krb5_context context = realm->realm_context;
krb5_error_code ret;
/*
*/
if (request->kdc_options & AS_INVALID_OPTIONS) {
*status = "INVALID AS OPTIONS";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
/* The client must not be expired */
if (client->expiration && ts_after(kdc_time, client->expiration)) {
*status = "CLIENT EXPIRED";
if (vague_errors)
- return(KRB_ERR_GENERIC);
+ return KRB5KRB_ERR_GENERIC;
else
- return(KDC_ERR_NAME_EXP);
+ return KRB5KDC_ERR_NAME_EXP;
}
/* The client's password must not be expired, unless the server is
!isflagset(server->attributes, KRB5_KDB_PWCHANGE_SERVICE)) {
*status = "CLIENT KEY EXPIRED";
if (vague_errors)
- return(KRB_ERR_GENERIC);
+ return KRB5KRB_ERR_GENERIC;
else
- return(KDC_ERR_KEY_EXP);
+ return KRB5KDC_ERR_KEY_EXP;
}
/* The server must not be expired */
if (server->expiration && ts_after(kdc_time, server->expiration)) {
*status = "SERVICE EXPIRED";
- return(KDC_ERR_SERVICE_EXP);
+ return KRB5KDC_ERR_SERVICE_EXP;
}
/*
if (isflagset(client->attributes, KRB5_KDB_REQUIRES_PWCHANGE) &&
!isflagset(server->attributes, KRB5_KDB_PWCHANGE_SERVICE)) {
*status = "REQUIRED PWCHANGE";
- return(KDC_ERR_KEY_EXP);
+ return KRB5KDC_ERR_KEY_EXP;
}
/* Client and server must allow postdating tickets */
(isflagset(client->attributes, KRB5_KDB_DISALLOW_POSTDATED) ||
isflagset(server->attributes, KRB5_KDB_DISALLOW_POSTDATED))) {
*status = "POSTDATE NOT ALLOWED";
- return(KDC_ERR_CANNOT_POSTDATE);
+ return KRB5KDC_ERR_CANNOT_POSTDATE;
}
/* Check to see if client is locked out */
if (isflagset(client->attributes, KRB5_KDB_DISALLOW_ALL_TIX)) {
*status = "CLIENT LOCKED OUT";
- return(KDC_ERR_CLIENT_REVOKED);
+ return KRB5KDC_ERR_CLIENT_REVOKED;
}
/* Check to see if server is locked out */
if (isflagset(server->attributes, KRB5_KDB_DISALLOW_ALL_TIX)) {
*status = "SERVICE LOCKED OUT";
- return(KDC_ERR_S_PRINCIPAL_UNKNOWN);
+ return KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
}
/* Check to see if server is allowed to be a service */
if (isflagset(server->attributes, KRB5_KDB_DISALLOW_SVR)) {
*status = "SERVICE NOT ALLOWED";
- return(KDC_ERR_MUST_USE_USER2USER);
+ return KRB5KDC_ERR_MUST_USE_USER2USER;
}
- if (check_anon(kdc_active_realm, client->princ, request->server) != 0) {
+ if (check_anon(realm, client->princ, request->server) != 0) {
*status = "ANONYMOUS NOT ALLOWED";
- return(KDC_ERR_POLICY);
+ return KRB5KDC_ERR_POLICY;
}
/* Perform KDB module policy checks. */
- ret = krb5_db_check_policy_as(kdc_context, request, client, server,
- kdc_time, status, e_data);
- if (ret && ret != KRB5_PLUGIN_OP_NOTSUPP)
- return errcode_to_protocol(ret);
-
- return 0;
+ ret = krb5_db_check_policy_as(context, request, client, server, kdc_time,
+ status, e_data);
+ return (ret == KRB5_PLUGIN_OP_NOTSUPP) ? 0 : ret;
}
/*
{
krb5_flags flags;
+ /* Validation and renewal TGS requests preserve the header ticket flags. */
+ if ((reqflags & (KDC_OPT_VALIDATE | KDC_OPT_RENEW)) && header_enc != NULL)
+ return header_enc->flags & ~TKT_FLG_INVALID;
+
/* Indicate support for encrypted padata (RFC 6806), and set flags based on
* request options and the header ticket. */
flags = OPTS2FLAGS(reqflags) | TKT_FLG_ENC_PA_REP;
/* Return true if we believe server can support enctype as a session key. */
static krb5_boolean
-dbentry_supports_enctype(kdc_realm_t *kdc_active_realm, krb5_db_entry *server,
+dbentry_supports_enctype(krb5_context context, krb5_db_entry *server,
krb5_enctype enctype)
{
krb5_error_code retval;
krb5_boolean in_list;
/* Look up the supported session key enctypes list in the KDB. */
- retval = krb5_dbe_get_string(kdc_context, server,
- KRB5_KDB_SK_SESSION_ENCTYPES,
+ retval = krb5_dbe_get_string(context, server, KRB5_KDB_SK_SESSION_ENCTYPES,
&etypes_str);
if (retval == 0 && etypes_str != NULL && *etypes_str != '\0') {
/* Pass a fake profile key for tracing of unrecognized tokens. */
- retval = krb5int_parse_enctype_list(kdc_context, "KDB-session_etypes",
+ retval = krb5int_parse_enctype_list(context, "KDB-session_etypes",
etypes_str, default_enctypes,
&etypes);
if (retval == 0 && etypes != NULL && etypes[0]) {
free(etypes_str);
free(etypes);
+ /* Assume every server without a session_enctypes attribute supports
+ * aes256-cts-hmac-sha1-96. */
+ if (enctype == ENCTYPE_AES256_CTS_HMAC_SHA1_96)
+ return TRUE;
/* Assume the server supports any enctype it has a long-term key for. */
- return !krb5_dbe_find_enctype(kdc_context, server, enctype, -1, 0, &datap);
+ return !krb5_dbe_find_enctype(context, server, enctype, -1, 0, &datap);
}
/*
* requested, and what the KDC and the application server can support.
*/
krb5_enctype
-select_session_keytype(kdc_realm_t *kdc_active_realm, krb5_db_entry *server,
+select_session_keytype(krb5_context context, krb5_db_entry *server,
int nktypes, krb5_enctype *ktype)
{
int i;
if (!krb5_c_valid_enctype(ktype[i]))
continue;
- if (!krb5_is_permitted_enctype(kdc_context, ktype[i]))
+ if (!krb5_is_permitted_enctype(context, ktype[i]))
+ continue;
+
+ /*
+ * Prevent these deprecated enctypes from being used as session keys
+ * unless they are explicitly allowed. In the future they will be more
+ * comprehensively disabled and eventually removed.
+ */
+ if (ktype[i] == ENCTYPE_DES3_CBC_SHA1 && !context->allow_des3)
+ continue;
+ if (ktype[i] == ENCTYPE_ARCFOUR_HMAC && !context->allow_rc4)
continue;
- if (dbentry_supports_enctype(kdc_active_realm, server, ktype[i]))
+ if (dbentry_supports_enctype(context, server, ktype[i]))
return ktype[i];
}
k5_buf_add_fmt(&buf, "%s%s(%ld)", i ? ", " : "", name, (long)ktype[i]);
}
k5_buf_add(&buf, "}");
- return buf.data;
+ return k5_buf_cstring(&buf);
}
char *
}
k5_buf_add(&buf, "}");
- return buf.data;
+ return k5_buf_cstring(&buf);
}
static krb5_error_code
* Legacy protocol transition (Windows 2003 and above)
*/
static krb5_error_code
-kdc_process_for_user(kdc_realm_t *kdc_active_realm,
- krb5_pa_data *pa_data,
+kdc_process_for_user(krb5_context context, krb5_pa_data *pa_data,
krb5_keyblock *tgs_session,
krb5_pa_s4u_x509_user **s4u_x509_user,
const char **status)
return code;
}
- code = verify_for_user_checksum(kdc_context, tgs_session, for_user);
+ code = verify_for_user_checksum(context, tgs_session, for_user);
if (code) {
*status = "INVALID_S4U2SELF_CHECKSUM";
- krb5_free_pa_for_user(kdc_context, for_user);
+ krb5_free_pa_for_user(context, for_user);
return code;
}
*s4u_x509_user = calloc(1, sizeof(krb5_pa_s4u_x509_user));
if (*s4u_x509_user == NULL) {
- krb5_free_pa_for_user(kdc_context, for_user);
+ krb5_free_pa_for_user(context, for_user);
return ENOMEM;
}
(*s4u_x509_user)->user_id.user = for_user->user;
for_user->user = NULL;
- krb5_free_pa_for_user(kdc_context, for_user);
+ krb5_free_pa_for_user(context, for_user);
return 0;
}
* local, look up the client and set *princ_ptr to its DB entry.
*/
krb5_error_code
-kdc_process_s4u2self_req(kdc_realm_t *kdc_active_realm,
- krb5_kdc_req *request,
+kdc_process_s4u2self_req(krb5_context context, krb5_kdc_req *request,
const krb5_db_entry *server,
- krb5_keyblock *tgs_subkey,
- krb5_keyblock *tgs_session,
+ krb5_keyblock *tgs_subkey, krb5_keyblock *tgs_session,
krb5_pa_s4u_x509_user **s4u_x509_user,
- krb5_db_entry **princ_ptr,
- const char **status)
+ krb5_db_entry **princ_ptr, const char **status)
{
krb5_error_code code;
krb5_pa_data *pa_data;
*princ_ptr = NULL;
- pa_data = krb5int_find_pa_data(kdc_context,
- request->padata, KRB5_PADATA_S4U_X509_USER);
+ pa_data = krb5int_find_pa_data(context, request->padata,
+ KRB5_PADATA_S4U_X509_USER);
if (pa_data != NULL) {
- code = kdc_process_s4u_x509_user(kdc_context,
- request,
- pa_data,
- tgs_subkey,
- tgs_session,
- s4u_x509_user,
- status);
+ code = kdc_process_s4u_x509_user(context, request, pa_data, tgs_subkey,
+ tgs_session, s4u_x509_user, status);
if (code != 0)
return code;
} else {
- pa_data = krb5int_find_pa_data(kdc_context,
- request->padata, KRB5_PADATA_FOR_USER);
+ pa_data = krb5int_find_pa_data(context, request->padata,
+ KRB5_PADATA_FOR_USER);
if (pa_data != NULL) {
- code = kdc_process_for_user(kdc_active_realm,
- pa_data,
- tgs_session,
- s4u_x509_user,
- status);
+ code = kdc_process_for_user(context, pa_data, tgs_session,
+ s4u_x509_user, status);
if (code != 0)
return code;
} else
if (data_eq(server->princ->realm, id->user->realm)) {
if (id->subject_cert.length != 0) {
- code = krb5_db_get_s4u_x509_principal(kdc_context,
+ code = krb5_db_get_s4u_x509_principal(context,
&id->subject_cert, id->user,
KRB5_KDB_FLAG_CLIENT,
&princ);
if (code == 0 && id->user->length == 0) {
- krb5_free_principal(kdc_context, id->user);
- code = krb5_copy_principal(kdc_context, princ->princ,
- &id->user);
+ krb5_free_principal(context, id->user);
+ code = krb5_copy_principal(context, princ->princ, &id->user);
}
} else {
- code = krb5_db_get_principal(kdc_context, id->user,
+ code = krb5_db_get_principal(context, id->user,
KRB5_KDB_FLAG_CLIENT, &princ);
}
if (code == KRB5_KDB_NOENTRY) {
* S4U2Self tickets according to [MS-SFU] 3.2.5.1.2. */
krb5_error_code
s4u2self_forwardable(krb5_context context, krb5_db_entry *server,
- krb5_enc_tkt_part *tkt)
+ krb5_flags *tktflags)
{
krb5_error_code ret;
* targets for traditional S4U2Proxy. */
ret = krb5_db_check_allowed_to_delegate(context, NULL, server, NULL);
if (!ret)
- tkt->flags &= ~TKT_FLG_FORWARDABLE;
+ *tktflags &= ~TKT_FLG_FORWARDABLE;
if (ret == KRB5KDC_ERR_BADOPTION || ret == KRB5_PLUGIN_OP_NOTSUPP)
return 0;
return ret;
}
-/*
- * Determine if an S4U2Proxy request is authorized. Set **stkt_ad_info to the
- * KDB authdata handle for the second ticket if the KDB module supplied one.
- * Set *stkt_authdata_client to the subject client name if the KDB module
- * supplied one; it must do so for a cross-realm request to be authorized.
- */
-krb5_error_code
-kdc_process_s4u2proxy_req(kdc_realm_t *kdc_active_realm, unsigned int flags,
- krb5_kdc_req *request, krb5_pac header_pac,
- const krb5_enc_tkt_part *t2enc, krb5_pac t2_pac,
- const krb5_db_entry *server,
- krb5_keyblock *server_key,
- krb5_const_principal server_princ,
- const krb5_db_entry *proxy,
- krb5_principal *stkt_pac_client,
- const char **status)
-{
- krb5_error_code errcode;
- krb5_boolean support_rbcd;
- krb5_principal client_princ = t2enc->client, t2_pac_princ = NULL;
-
- *stkt_pac_client = NULL;
-
- /* Check if the client supports resource-based constrained delegation. */
- errcode = kdc_get_pa_pac_rbcd(kdc_context, request->padata, &support_rbcd);
- if (errcode)
- return errcode;
-
- /* For an RBCD final request, recover the reply ticket client name from
- * the evidence ticket PAC. */
- if (flags & KRB5_KDB_FLAG_CROSS_REALM) {
- if (get_pac_princ_with_realm(kdc_context, t2_pac, &t2_pac_princ,
- NULL) != 0) {
- *status = "RBCD_PAC_PRINC";
- errcode = KRB5KDC_ERR_BADOPTION;
- goto done;
- }
- client_princ = t2_pac_princ;
- }
-
- /* If both are in the same realm, try allowed_to_delegate first. */
- if (krb5_realm_compare(kdc_context, server->princ, request->server)) {
-
- errcode = krb5_db_check_allowed_to_delegate(kdc_context, client_princ,
- server, request->server);
- if (errcode != KRB5KDC_ERR_BADOPTION &&
- errcode != KRB5_PLUGIN_OP_NOTSUPP)
- goto done;
-
- /* Fall back to resource-based constrained-delegation. */
- }
-
- if (!support_rbcd) {
- *status = "UNSUPPORTED_S4U2PROXY_REQUEST";
- errcode = KRB5KDC_ERR_BADOPTION;
- goto done;
- }
-
- /* If we are issuing a referral, the KDC in the resource realm will check
- * if delegation is allowed. */
- if (isflagset(flags, KRB5_KDB_FLAG_ISSUING_REFERRAL)) {
- errcode = 0;
- goto done;
- }
-
- errcode = krb5_db_allowed_to_delegate_from(kdc_context, client_princ,
- server_princ, header_pac,
- proxy);
- if (errcode == KRB5_PLUGIN_OP_NOTSUPP) {
- *status = "UNSUPPORTED_S4U2PROXY_REQUEST";
- errcode = KRB5KDC_ERR_BADOPTION;
- goto done;
- } else if (errcode) {
- *status = "NOT_ALLOWED_TO_DELEGATE";
- goto done;
- }
-
- *stkt_pac_client = t2_pac_princ;
- t2_pac_princ = NULL;
-
-done:
- krb5_free_principal(kdc_context, t2_pac_princ);
- return errcode;
-}
-
krb5_error_code
-kdc_check_transited_list(kdc_realm_t *kdc_active_realm,
- const krb5_data *trans,
- const krb5_data *realm1,
- const krb5_data *realm2)
+kdc_check_transited_list(krb5_context context, const krb5_data *trans,
+ const krb5_data *realm1, const krb5_data *realm2)
{
krb5_error_code code;
/* Check against the KDB module. Treat this answer as authoritative if the
* method is supported and doesn't explicitly pass control. */
- code = krb5_db_check_transited_realms(kdc_context, trans, realm1, realm2);
+ code = krb5_db_check_transited_realms(context, trans, realm1, realm2);
if (code != KRB5_PLUGIN_OP_NOTSUPP && code != KRB5_PLUGIN_NO_HANDLE)
return code;
/* Check using krb5.conf [capaths] or hierarchical relationships. */
- return krb5_check_transited_list(kdc_context, trans, realm1, realm2);
+ return krb5_check_transited_list(context, trans, realm1, realm2);
}
krb5_boolean
}
void
-kdc_get_ticket_endtime(kdc_realm_t *kdc_active_realm,
- krb5_timestamp starttime,
- krb5_timestamp endtime,
- krb5_timestamp till,
- krb5_db_entry *client,
- krb5_db_entry *server,
+kdc_get_ticket_endtime(kdc_realm_t *realm, krb5_timestamp starttime,
+ krb5_timestamp endtime, krb5_timestamp till,
+ krb5_db_entry *client, krb5_db_entry *server,
krb5_timestamp *out_endtime)
{
krb5_timestamp until;
life = min(life, client->max_life);
if (server->max_life != 0)
life = min(life, server->max_life);
- if (kdc_active_realm->realm_maxlife != 0)
- life = min(life, kdc_active_realm->realm_maxlife);
+ if (realm->realm_maxlife != 0)
+ life = min(life, realm->realm_maxlife);
*out_endtime = ts_incr(starttime, life);
}
/*
- * Set tkt->renew_till to the requested renewable lifetime as modified by
- * policy. Set the TKT_FLG_RENEWABLE flag if we set a nonzero renew_till.
- * client and tgt may be NULL.
+ * Set times->renew_till to the requested renewable lifetime as modified by
+ * policy. Set the TKT_FLG_RENEWABLE bit in *tktflags if we set a nonzero
+ * renew_till. *times must be filled in except for renew_till. client and tgt
+ * may be NULL.
*/
void
kdc_get_ticket_renewtime(kdc_realm_t *realm, krb5_kdc_req *request,
krb5_enc_tkt_part *tgt, krb5_db_entry *client,
- krb5_db_entry *server, krb5_enc_tkt_part *tkt)
+ krb5_db_entry *server, krb5_flags *tktflags,
+ krb5_ticket_times *times)
{
krb5_timestamp rtime, max_rlife;
- clear(tkt->flags, TKT_FLG_RENEWABLE);
- tkt->times.renew_till = 0;
+ *tktflags &= ~TKT_FLG_RENEWABLE;
+ times->renew_till = 0;
/* Don't issue renewable tickets if the client or server don't allow it,
* or if this is a TGS request and the TGT isn't renewable. */
if (isflagset(request->kdc_options, KDC_OPT_RENEWABLE))
rtime = request->rtime ? request->rtime : kdc_infinity;
else if (isflagset(request->kdc_options, KDC_OPT_RENEWABLE_OK) &&
- ts_after(request->till, tkt->times.endtime))
+ ts_after(request->till, times->endtime))
rtime = request->till;
else
return;
max_rlife = min(server->max_renewable_life, realm->realm_maxrlife);
if (client != NULL)
max_rlife = min(max_rlife, client->max_renewable_life);
- rtime = ts_min(rtime, ts_incr(tkt->times.starttime, max_rlife));
+ rtime = ts_min(rtime, ts_incr(times->starttime, max_rlife));
/* If the client only specified renewable-ok, don't issue a renewable
* ticket unless the truncated renew time exceeds the ticket end time. */
if (!isflagset(request->kdc_options, KDC_OPT_RENEWABLE) &&
- !ts_after(rtime, tkt->times.endtime))
+ !ts_after(rtime, times->endtime))
return;
- setflag(tkt->flags, TKT_FLG_RENEWABLE);
- tkt->times.renew_till = rtime;
+ *tktflags |= TKT_FLG_RENEWABLE;
+ times->renew_till = rtime;
}
/**
#include "realm_data.h"
#include "reqstate.h"
-krb5_error_code check_hot_list (krb5_ticket *);
krb5_boolean krb5_is_tgs_principal (krb5_const_principal);
krb5_boolean is_cross_tgs_principal(krb5_const_principal);
krb5_boolean is_local_tgs_principal(krb5_const_principal);
krb5_db_entry *candidate, krb5_db_entry **alias_out,
krb5_db_entry **storage_out, krb5_keyblock *kb_out);
-int
+krb5_error_code
validate_as_request (kdc_realm_t *, krb5_kdc_req *, krb5_db_entry *,
krb5_db_entry *, krb5_timestamp,
const char **, krb5_pa_data ***);
-int
-validate_tgs_request(kdc_realm_t *kdc_active_realm,
- krb5_kdc_req *request, krb5_db_entry *server,
- krb5_ticket *ticket, krb5_pac pac,
- const krb5_ticket *stkt, krb5_pac stkt_pac,
- krb5_db_entry *stkt_server, krb5_timestamp kdc_time,
- krb5_pa_s4u_x509_user *s4u_x509_user,
- krb5_db_entry *s4u2self_client,
- krb5_boolean is_crossrealm, krb5_boolean is_referral,
- const char **status, krb5_pa_data ***e_data);
+krb5_error_code
+check_tgs_constraints(kdc_realm_t *realm, krb5_kdc_req *request,
+ krb5_db_entry *server, krb5_ticket *ticket, krb5_pac pac,
+ const krb5_ticket *stkt, krb5_pac stkt_pac,
+ krb5_db_entry *stkt_server, krb5_timestamp kdc_time,
+ krb5_pa_s4u_x509_user *s4u_x509_user,
+ krb5_db_entry *s4u2self_client,
+ krb5_boolean is_crossrealm, krb5_boolean is_referral,
+ const char **status, krb5_pa_data ***e_data);
+
+krb5_error_code
+check_tgs_policy(kdc_realm_t *realm, krb5_kdc_req *request,
+ krb5_db_entry *server, krb5_ticket *ticket,
+ krb5_pac pac, const krb5_ticket *stkt, krb5_pac stkt_pac,
+ krb5_principal stkt_pac_client, krb5_db_entry *stkt_server,
+ krb5_timestamp kdc_time, krb5_boolean is_crossrealm,
+ krb5_boolean is_referral, const char **status,
+ krb5_pa_data ***e_data);
krb5_flags
get_ticket_flags(krb5_flags reqflags, krb5_db_entry *client,
fetch_asn1_field (unsigned char *, unsigned int, unsigned int, krb5_data *);
krb5_enctype
-select_session_keytype (kdc_realm_t *kdc_active_realm,
- krb5_db_entry *server,
- int nktypes,
- krb5_enctype *ktypes);
+select_session_keytype (krb5_context context, krb5_db_entry *server,
+ int nktypes, krb5_enctype *ktypes);
void limit_string (char *name);
krb5_data ***indicators_out);
krb5_error_code
-handle_authdata (kdc_realm_t *kdc_active_realm,
- unsigned int flags,
- krb5_db_entry *client,
- krb5_db_entry *server,
- krb5_db_entry *subject_server,
- krb5_db_entry *local_tgt,
- krb5_keyblock *local_tgt_key,
- krb5_keyblock *client_key,
- krb5_keyblock *server_key,
- krb5_keyblock *header_key,
- krb5_keyblock *replaced_reply_key,
- krb5_data *req_pkt,
- krb5_kdc_req *request,
- krb5_const_principal altcprinc,
- krb5_pac subject_pac,
- krb5_enc_tkt_part *enc_tkt_request,
- krb5_data ***auth_indicators,
- krb5_enc_tkt_part *enc_tkt_reply);
+handle_authdata(kdc_realm_t *realm, unsigned int flags, krb5_db_entry *client,
+ krb5_db_entry *server, krb5_db_entry *subject_server,
+ krb5_db_entry *local_tgt, krb5_keyblock *local_tgt_key,
+ krb5_keyblock *client_key, krb5_keyblock *server_key,
+ krb5_keyblock *header_key, krb5_keyblock *replaced_reply_key,
+ krb5_data *req_pkt, krb5_kdc_req *request,
+ krb5_const_principal altcprinc, krb5_pac subject_pac,
+ krb5_enc_tkt_part *enc_tkt_request,
+ krb5_data ***auth_indicators,
+ krb5_enc_tkt_part *enc_tkt_reply);
/* replay.c */
krb5_error_code kdc_init_lookaside(krb5_context context);
void reset_for_hangup(void *);
krb5_error_code
+pac_privsvr_key(krb5_context context, krb5_db_entry *server,
+ const krb5_keyblock *tgt_key, krb5_keyblock **key_out);
+
+krb5_error_code
get_verified_pac(krb5_context context, const krb5_enc_tkt_part *enc_tkt,
- krb5_const_principal sprinc, krb5_keyblock *server_key,
+ krb5_db_entry *server, krb5_keyblock *server_key,
krb5_db_entry *tgt, krb5_keyblock *tgt_key,
krb5_pac *pac_out);
krb5_boolean is_referral);
krb5_error_code
-kdc_process_s4u2self_req (kdc_realm_t *kdc_active_realm,
- krb5_kdc_req *request,
- const krb5_db_entry *server,
- krb5_keyblock *tgs_subkey,
- krb5_keyblock *tgs_session,
- krb5_pa_s4u_x509_user **s4u2self_req,
- krb5_db_entry **princ_ptr,
- const char **status);
+kdc_process_s4u2self_req(krb5_context context, krb5_kdc_req *request,
+ const krb5_db_entry *server,
+ krb5_keyblock *tgs_subkey, krb5_keyblock *tgs_session,
+ krb5_pa_s4u_x509_user **s4u2self_req,
+ krb5_db_entry **princ_ptr, const char **status);
krb5_error_code
s4u2self_forwardable(krb5_context context, krb5_db_entry *server,
- krb5_enc_tkt_part *enc_tkt);
+ krb5_flags *tktflags);
krb5_error_code
kdc_make_s4u2self_rep (krb5_context context,
krb5_enc_kdc_rep_part *reply_encpart);
krb5_error_code
-kdc_process_s4u2proxy_req(kdc_realm_t *kdc_active_realm, unsigned int flags,
- krb5_kdc_req *request, krb5_pac header_pac,
- const krb5_enc_tkt_part *t2enc, krb5_pac t2_pac,
- const krb5_db_entry *server,
- krb5_keyblock *server_key,
- krb5_const_principal server_princ,
- const krb5_db_entry *proxy,
- krb5_principal *stkt_ad_client,
- const char **status);
-
-krb5_error_code
-kdc_check_transited_list (kdc_realm_t *kdc_active_realm,
- const krb5_data *trans,
- const krb5_data *realm1,
- const krb5_data *realm2);
+kdc_check_transited_list(krb5_context context, const krb5_data *trans,
+ const krb5_data *realm1, const krb5_data *realm2);
void
-kdc_get_ticket_endtime(kdc_realm_t *kdc_active_realm,
- krb5_timestamp now,
- krb5_timestamp endtime,
- krb5_timestamp till,
- krb5_db_entry *client,
- krb5_db_entry *server,
+kdc_get_ticket_endtime(kdc_realm_t *realm, krb5_timestamp now,
+ krb5_timestamp endtime, krb5_timestamp till,
+ krb5_db_entry *client, krb5_db_entry *server,
krb5_timestamp *out_endtime);
void
kdc_get_ticket_renewtime(kdc_realm_t *realm, krb5_kdc_req *request,
krb5_enc_tkt_part *tgt, krb5_db_entry *client,
- krb5_db_entry *server, krb5_enc_tkt_part *tkt);
+ krb5_db_entry *server, krb5_flags *tktflags,
+ krb5_ticket_times *times);
void
log_as_req(krb5_context context,
/* Copy appropriate header ticket flags to new ticket. */
#define COPY_TKT_FLAGS(x) (x & TGS_COPIED_FLAGS_MASK)
-int check_anon(kdc_realm_t *kdc_active_realm,
- krb5_principal client, krb5_principal server);
+int check_anon(kdc_realm_t *realm, krb5_principal client,
+ krb5_principal server);
int errcode_to_protocol(krb5_error_code code);
char *data2string(krb5_data *d);
krb5_boolean def_restrict_anon;
char *def_udp_listen = NULL;
char *def_tcp_listen = NULL;
- krb5_pointer aprof = NULL;
+ krb5_pointer aprof = kcontext->profile;
const char *hierarchy[3];
char *no_referral = NULL;
char *hostbased = NULL;
extern char *optarg;
- if (!krb5_aprof_init(DEFAULT_KDC_PROFILE, KDC_PROFILE_ENV, &aprof)) {
- hierarchy[0] = KRB5_CONF_KDCDEFAULTS;
- hierarchy[1] = KRB5_CONF_KDC_LISTEN;
- hierarchy[2] = (char *) NULL;
- if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_udp_listen)) {
- hierarchy[1] = KRB5_CONF_KDC_PORTS;
- if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_udp_listen))
- def_udp_listen = NULL;
- }
- hierarchy[1] = KRB5_CONF_KDC_TCP_LISTEN;
- if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_tcp_listen)) {
- hierarchy[1] = KRB5_CONF_KDC_TCP_PORTS;
- if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_tcp_listen))
- def_tcp_listen = NULL;
- }
- hierarchy[1] = KRB5_CONF_KDC_MAX_DGRAM_REPLY_SIZE;
- if (krb5_aprof_get_int32(aprof, hierarchy, TRUE, &max_dgram_reply_size))
- max_dgram_reply_size = MAX_DGRAM_SIZE;
- if (tcp_listen_backlog_out != NULL) {
- hierarchy[1] = KRB5_CONF_KDC_TCP_LISTEN_BACKLOG;
- if (krb5_aprof_get_int32(aprof, hierarchy, TRUE,
- tcp_listen_backlog_out))
- *tcp_listen_backlog_out = DEFAULT_TCP_LISTEN_BACKLOG;
- }
- hierarchy[1] = KRB5_CONF_RESTRICT_ANONYMOUS_TO_TGT;
- if (krb5_aprof_get_boolean(aprof, hierarchy, TRUE, &def_restrict_anon))
- def_restrict_anon = FALSE;
- hierarchy[1] = KRB5_CONF_NO_HOST_REFERRAL;
- if (krb5_aprof_get_string_all(aprof, hierarchy, &no_referral))
- no_referral = 0;
- hierarchy[1] = KRB5_CONF_HOST_BASED_SERVICES;
- if (krb5_aprof_get_string_all(aprof, hierarchy, &hostbased))
- hostbased = 0;
+ hierarchy[0] = KRB5_CONF_KDCDEFAULTS;
+ hierarchy[1] = KRB5_CONF_KDC_LISTEN;
+ hierarchy[2] = NULL;
+ if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_udp_listen)) {
+ hierarchy[1] = KRB5_CONF_KDC_PORTS;
+ if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_udp_listen))
+ def_udp_listen = NULL;
+ }
+ hierarchy[1] = KRB5_CONF_KDC_TCP_LISTEN;
+ if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_tcp_listen)) {
+ hierarchy[1] = KRB5_CONF_KDC_TCP_PORTS;
+ if (krb5_aprof_get_string(aprof, hierarchy, TRUE, &def_tcp_listen))
+ def_tcp_listen = NULL;
+ }
+ hierarchy[1] = KRB5_CONF_KDC_MAX_DGRAM_REPLY_SIZE;
+ if (krb5_aprof_get_int32(aprof, hierarchy, TRUE, &max_dgram_reply_size))
+ max_dgram_reply_size = MAX_DGRAM_SIZE;
+ if (tcp_listen_backlog_out != NULL) {
+ hierarchy[1] = KRB5_CONF_KDC_TCP_LISTEN_BACKLOG;
+ if (krb5_aprof_get_int32(aprof, hierarchy, TRUE,
+ tcp_listen_backlog_out))
+ *tcp_listen_backlog_out = DEFAULT_TCP_LISTEN_BACKLOG;
}
+ hierarchy[1] = KRB5_CONF_RESTRICT_ANONYMOUS_TO_TGT;
+ if (krb5_aprof_get_boolean(aprof, hierarchy, TRUE, &def_restrict_anon))
+ def_restrict_anon = FALSE;
+ hierarchy[1] = KRB5_CONF_NO_HOST_REFERRAL;
+ if (krb5_aprof_get_string_all(aprof, hierarchy, &no_referral))
+ no_referral = 0;
+ hierarchy[1] = KRB5_CONF_HOST_BASED_SERVICES;
+ if (krb5_aprof_get_string_all(aprof, hierarchy, &hostbased))
+ hostbased = 0;
if (def_udp_listen == NULL) {
def_udp_listen = strdup(DEFAULT_KDC_UDP_PORTLIST);
free(hostbased);
if (no_referral)
free(no_referral);
- if (aprof)
- krb5_aprof_finish(aprof);
return;
}
kdc_realm_t *find_realm_data(struct server_handle *, char *, krb5_ui_4);
kdc_realm_t *setup_server_realm(struct server_handle *, krb5_principal);
-/*
- * These macros used to refer to a global pointer to the active realm state
- * structure for a request. They now refer to a local variable that must be
- * properly declared in each function that uses these macros.
- */
-#define kdc_context kdc_active_realm->realm_context
-#define tgs_server kdc_active_realm->realm_tgsprinc
-
#endif /* REALM_DATA_H */
RUN_TEST_FAIL(fuzz2);
printf("Passed NDR tests\n");
+ return 0;
}
static const struct tgsflagrule tgsflagrules[] = {
{ KDC_OPT_FORWARDED, TKT_FLG_FORWARDABLE,
- "TGT NOT FORWARDABLE", KDC_ERR_BADOPTION },
+ "TGT NOT FORWARDABLE", KRB5KDC_ERR_BADOPTION },
{ KDC_OPT_PROXY, TKT_FLG_PROXIABLE,
- "TGT NOT PROXIABLE", KDC_ERR_BADOPTION },
+ "TGT NOT PROXIABLE", KRB5KDC_ERR_BADOPTION },
{ (KDC_OPT_ALLOW_POSTDATE | KDC_OPT_POSTDATED), TKT_FLG_MAY_POSTDATE,
- "TGT NOT POSTDATABLE", KDC_ERR_BADOPTION },
+ "TGT NOT POSTDATABLE", KRB5KDC_ERR_BADOPTION },
{ KDC_OPT_VALIDATE, TKT_FLG_INVALID,
- "VALIDATE VALID TICKET", KDC_ERR_BADOPTION },
+ "VALIDATE VALID TICKET", KRB5KDC_ERR_BADOPTION },
{ KDC_OPT_RENEW, TKT_FLG_RENEWABLE,
- "TICKET NOT RENEWABLE", KDC_ERR_BADOPTION }
+ "TICKET NOT RENEWABLE", KRB5KDC_ERR_BADOPTION }
};
/*
* Some TGS-REQ options require that the ticket have corresponding flags set.
*/
-static int
+static krb5_error_code
check_tgs_opts(krb5_kdc_req *req, krb5_ticket *tkt, const char **status)
{
size_t i;
if (isflagset(tkt->enc_part2->flags, TKT_FLG_INVALID) &&
!isflagset(req->kdc_options, KDC_OPT_VALIDATE)) {
*status = "TICKET NOT VALID";
- return KRB_AP_ERR_TKT_NYV;
+ return KRB5KRB_AP_ERR_TKT_NYV;
}
return 0;
static const struct tgsflagrule svcdenyrules[] = {
{ KDC_OPT_RENEWABLE, KRB5_KDB_DISALLOW_RENEWABLE,
- "NON-RENEWABLE TICKET", KDC_ERR_POLICY },
+ "NON-RENEWABLE TICKET", KRB5KDC_ERR_POLICY },
{ KDC_OPT_ALLOW_POSTDATE, KRB5_KDB_DISALLOW_POSTDATED,
- "NON-POSTDATABLE TICKET", KDC_ERR_CANNOT_POSTDATE },
+ "NON-POSTDATABLE TICKET", KRB5KDC_ERR_CANNOT_POSTDATE },
{ KDC_OPT_ENC_TKT_IN_SKEY, KRB5_KDB_DISALLOW_DUP_SKEY,
- "DUP_SKEY DISALLOWED", KDC_ERR_POLICY }
+ "DUP_SKEY DISALLOWED", KRB5KDC_ERR_POLICY }
};
/*
* A service principal can forbid some TGS-REQ options.
*/
-static int
+static krb5_error_code
check_tgs_svc_deny_opts(krb5_kdc_req *req, krb5_db_entry *server,
krb5_ticket *tkt, krb5_timestamp kdc_time,
const char **status)
/*
* A service principal can deny all TGS-REQs for it.
*/
-static int
+static krb5_error_code
check_tgs_svc_deny_all(krb5_kdc_req *req, krb5_db_entry *server,
krb5_ticket *tkt, krb5_timestamp kdc_time,
const char **status)
{
if (server->attributes & KRB5_KDB_DISALLOW_ALL_TIX) {
*status = "SERVER LOCKED OUT";
- return KDC_ERR_S_PRINCIPAL_UNKNOWN;
+ return KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
}
if ((server->attributes & KRB5_KDB_DISALLOW_SVR) &&
!(req->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY)) {
*status = "SERVER NOT ALLOWED";
- return KDC_ERR_MUST_USE_USER2USER;
+ return KRB5KDC_ERR_MUST_USE_USER2USER;
}
if (server->attributes & KRB5_KDB_DISALLOW_TGT_BASED) {
if (krb5_is_tgs_principal(tkt->server)) {
*status = "TGT BASED NOT ALLOWED";
- return KDC_ERR_POLICY;
+ return KRB5KDC_ERR_POLICY;
}
}
return 0;
/*
* A service principal can require certain TGT flags.
*/
-static int
+static krb5_error_code
check_tgs_svc_reqd_flags(krb5_kdc_req *req, krb5_db_entry *server,
krb5_ticket *tkt,
krb5_timestamp kdc_time, const char **status)
if (server->attributes & KRB5_KDB_REQUIRES_HW_AUTH) {
if (!(tkt->enc_part2->flags & TKT_FLG_HW_AUTH)) {
*status = "NO HW PREAUTH";
- return KRB_ERR_GENERIC;
+ return KRB5KRB_ERR_GENERIC;
}
}
if (server->attributes & KRB5_KDB_REQUIRES_PRE_AUTH) {
if (!(tkt->enc_part2->flags & TKT_FLG_PRE_AUTH)) {
*status = "NO PREAUTH";
- return KRB_ERR_GENERIC;
+ return KRB5KRB_ERR_GENERIC;
}
}
return 0;
}
-static int
+static krb5_error_code
check_tgs_svc_time(krb5_kdc_req *req, krb5_db_entry *server, krb5_ticket *tkt,
krb5_timestamp kdc_time, const char **status)
{
if (server->expiration && ts_after(kdc_time, server->expiration)) {
*status = "SERVICE EXPIRED";
- return KDC_ERR_SERVICE_EXP;
+ return KRB5KDC_ERR_SERVICE_EXP;
}
return 0;
}
-static int
+static krb5_error_code
check_tgs_svc_policy(krb5_kdc_req *req, krb5_db_entry *server,
krb5_ticket *tkt, krb5_timestamp kdc_time,
const char **status)
/*
* Check header ticket timestamps against the current time.
*/
-static int
+static krb5_error_code
check_tgs_times(krb5_kdc_req *req, krb5_ticket_times *times,
krb5_timestamp kdc_time, const char **status)
{
starttime = times->starttime ? times->starttime : times->authtime;
if (ts_after(starttime, kdc_time)) {
*status = "NOT_YET_VALID";
- return KRB_AP_ERR_TKT_NYV;
+ return KRB5KRB_AP_ERR_TKT_NYV;
}
}
/*
if ((req->kdc_options & KDC_OPT_RENEW) &&
ts_after(kdc_time, times->renew_till)) {
*status = "TKT_EXPIRED";
- return KRB_AP_ERR_TKT_EXPIRED;
+ return KRB5KRB_AP_ERR_TKT_EXPIRED;
}
return 0;
}
/* Check for local user tickets issued by foreign realms. This check is
* skipped for S4U2Self requests. */
-static int
+static krb5_error_code
check_tgs_lineage(krb5_db_entry *server, krb5_ticket *tkt,
krb5_boolean is_crossrealm, const char **status)
{
if (is_crossrealm && data_eq(tkt->enc_part2->client->realm,
server->princ->realm)) {
*status = "INVALID LINEAGE";
- return KDC_ERR_POLICY;
+ return KRB5KDC_ERR_POLICY;
}
return 0;
}
-static int
-check_tgs_s4u2self(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
+static krb5_error_code
+check_tgs_s4u2self(kdc_realm_t *realm, krb5_kdc_req *req,
krb5_db_entry *server, krb5_ticket *tkt, krb5_pac pac,
krb5_timestamp kdc_time,
krb5_pa_s4u_x509_user *s4u_x509_user, krb5_db_entry *client,
krb5_boolean is_crossrealm, krb5_boolean is_referral,
const char **status, krb5_pa_data ***e_data)
{
+ krb5_context context = realm->realm_context;
krb5_db_entry empty_server = { 0 };
/* If the server is local, check that the request is for self. */
if (!is_referral &&
- !is_client_db_alias(kdc_context, server, tkt->enc_part2->client)) {
+ !is_client_db_alias(context, server, tkt->enc_part2->client)) {
*status = "INVALID_S4U2SELF_REQUEST_SERVER_MISMATCH";
- return KRB_AP_ERR_BADMATCH;
+ return KRB5KRB_AP_ERR_BADMATCH;
}
/* S4U2Self requests must use options valid for AS requests. */
if (req->kdc_options & AS_INVALID_OPTIONS) {
*status = "INVALID S4U2SELF OPTIONS";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
/*
/* This could happen if the requesting server no longer exists, and we
* found a referral instead. Treat this as a server lookup failure. */
*status = "LOOKING_UP_SERVER";
- return KDC_ERR_S_PRINCIPAL_UNKNOWN;
+ return KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;
}
if (client != NULL && is_crossrealm && !is_referral) {
/* A local server should not need a cross-realm TGT to impersonate
* a local principal. */
*status = "NOT_CROSS_REALM_REQUEST";
- return KDC_ERR_C_PRINCIPAL_UNKNOWN; /* match Windows error */
+ return KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN; /* match Windows error */
}
if (client == NULL && !is_crossrealm) {
/*
* follow referrals back to us.
*/
*status = "S4U2SELF_CLIENT_NOT_OURS";
- return KDC_ERR_POLICY; /* match Windows error */
+ return KRB5KDC_ERR_POLICY; /* match Windows error */
}
if (client == NULL && s4u_x509_user->user_id.user->length == 0) {
/*
* the subject-certificate field.
*/
*status = "INVALID_XREALM_S4U2SELF_REQUEST";
- return KDC_ERR_POLICY; /* match Windows error */
+ return KRB5KDC_ERR_POLICY; /* match Windows error */
}
/* The header ticket PAC must be present. */
if (pac == NULL) {
*status = "S4U2SELF_NO_PAC";
- return KDC_ERR_TGT_REVOKED;
+ return KRB5KDC_ERR_TGT_REVOKED;
}
if (client != NULL) {
/* The header ticket PAC must be for the impersonator. */
- if (krb5_pac_verify(kdc_context, pac, tkt->enc_part2->times.authtime,
+ if (krb5_pac_verify(context, pac, tkt->enc_part2->times.authtime,
tkt->enc_part2->client, NULL, NULL) != 0) {
*status = "S4U2SELF_LOCAL_PAC_CLIENT";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
/* Validate the client policy. Use an empty server principal to bypass
* server policy checks. */
- return validate_as_request(kdc_active_realm, req, client,
- &empty_server, kdc_time, status, e_data);
+ return validate_as_request(realm, req, client, &empty_server, kdc_time,
+ status, e_data);
} else {
/* The header ticket PAC must be for the subject, with realm. */
- if (krb5_pac_verify_ext(kdc_context, pac,
- tkt->enc_part2->times.authtime,
+ if (krb5_pac_verify_ext(context, pac, tkt->enc_part2->times.authtime,
s4u_x509_user->user_id.user, NULL, NULL,
TRUE) != 0) {
*status = "S4U2SELF_FOREIGN_PAC_CLIENT";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
}
return result;
}
-static int
-check_tgs_s4u2proxy(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
+static krb5_error_code
+check_tgs_s4u2proxy(krb5_context context, krb5_kdc_req *req,
krb5_db_entry *server, krb5_ticket *tkt, krb5_pac pac,
const krb5_ticket *stkt, krb5_pac stkt_pac,
krb5_db_entry *stkt_server, krb5_boolean is_crossrealm,
/* A forwardable second ticket must be present in the request. */
if (stkt == NULL) {
*status = "NO_2ND_TKT";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
if (!(stkt->enc_part2->flags & TKT_FLG_FORWARDABLE)) {
*status = "EVIDENCE_TKT_NOT_FORWARDABLE";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
/* Constrained delegation is mutually exclusive with renew/forward/etc.
* (and therefore requires the header ticket to be a TGT). */
if (req->kdc_options & (NON_TGT_OPTION | KDC_OPT_ENC_TKT_IN_SKEY)) {
*status = "INVALID_S4U2PROXY_OPTIONS";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
/* Can't get a TGT (otherwise it would be unconstrained delegation). */
if (krb5_is_tgs_principal(req->server)) {
*status = "NOT_ALLOWED_TO_DELEGATE";
- return KDC_ERR_POLICY;
+ return KRB5KDC_ERR_POLICY;
}
/* The header ticket PAC must be present and for the impersonator. */
if (pac == NULL) {
*status = "S4U2PROXY_NO_HEADER_PAC";
- return KDC_ERR_TGT_REVOKED;
+ return KRB5KDC_ERR_TGT_REVOKED;
}
- if (krb5_pac_verify(kdc_context, pac, tkt->enc_part2->times.authtime,
+ if (krb5_pac_verify(context, pac, tkt->enc_part2->times.authtime,
tkt->enc_part2->client, NULL, NULL) != 0) {
*status = "S4U2PROXY_HEADER_PAC";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
/*
if (stkt_pac == NULL) {
*status = "S4U2PROXY_NO_STKT_PAC";
- return KRB_AP_ERR_MODIFIED;
+ return KRB5KRB_AP_ERR_MODIFIED;
}
if (!is_crossrealm) {
/* For an initial or same-realm request, the second ticket server and
* header ticket client must be the same principal. */
- if (!is_client_db_alias(kdc_context, stkt_server,
+ if (!is_client_db_alias(context, stkt_server,
tkt->enc_part2->client)) {
*status = "EVIDENCE_TICKET_MISMATCH";
- return KDC_ERR_SERVER_NOMATCH;
+ return KRB5KDC_ERR_SERVER_NOMATCH;
}
/* The second ticket client and PAC client are the subject, and must
* match. */
- if (krb5_pac_verify(kdc_context, stkt_pac,
- stkt->enc_part2->times.authtime,
+ if (krb5_pac_verify(context, stkt_pac, stkt->enc_part2->times.authtime,
stkt->enc_part2->client, NULL, NULL) != 0) {
*status = "S4U2PROXY_LOCAL_STKT_PAC";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
} else {
*/
if (is_referral || !is_cross_tgs_principal(stkt_server->princ) ||
!data_eq(stkt_server->princ->data[1], server->princ->realm) ||
- !krb5_principal_compare(kdc_context, stkt->enc_part2->client,
+ !krb5_principal_compare(context, stkt->enc_part2->client,
tkt->enc_part2->client)) {
*status = "XREALM_EVIDENCE_TICKET_MISMATCH";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
/* The second ticket PAC must be present and for the impersonated
* client, with delegation info. */
if (stkt_pac == NULL ||
- verify_deleg_pac(kdc_context, stkt_pac, stkt->enc_part2,
+ verify_deleg_pac(context, stkt_pac, stkt->enc_part2,
req->server) != 0) {
*status = "S4U2PROXY_CROSS_STKT_PAC";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
}
return 0;
}
-static int
-check_tgs_u2u(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
- const krb5_ticket *stkt, krb5_db_entry *server,
- const char **status)
+/* Check the KDB policy for a final RBCD request. */
+static krb5_error_code
+check_s4u2proxy_policy(krb5_context context, krb5_kdc_req *req,
+ krb5_principal desired_client,
+ krb5_principal impersonator_name,
+ krb5_db_entry *impersonator, krb5_pac impersonator_pac,
+ krb5_principal resource_name, krb5_db_entry *resource,
+ krb5_boolean is_crossrealm, krb5_boolean is_referral,
+ const char **status)
+{
+ krb5_error_code ret;
+ krb5_boolean support_rbcd, policy_denial = FALSE;
+
+ /* Check if the client supports resource-based constrained delegation. */
+ ret = kdc_get_pa_pac_rbcd(context, req->padata, &support_rbcd);
+ if (ret)
+ return ret;
+
+ if (is_referral) {
+ if (!support_rbcd) {
+ /* The client must support RBCD for a referral to be useful. */
+ *status = "UNSUPPORTED_S4U2PROXY_REQUEST";
+ return KRB5KDC_ERR_BADOPTION;
+ }
+ /* Policy will be checked in the resource realm. */
+ return 0;
+ }
+
+ /* Try resource-based authorization if the client supports RBCD. */
+ if (support_rbcd) {
+ ret = krb5_db_allowed_to_delegate_from(context, desired_client,
+ impersonator_name,
+ impersonator_pac, resource);
+ if (ret == KRB5KDC_ERR_BADOPTION)
+ policy_denial = TRUE;
+ else if (ret != KRB5_PLUGIN_OP_NOTSUPP)
+ return ret;
+ }
+
+ /* Try traditional authorization if the requestor is in this realm. */
+ if (!is_crossrealm) {
+ ret = krb5_db_check_allowed_to_delegate(context, desired_client,
+ impersonator, resource_name);
+ if (ret == KRB5KDC_ERR_BADOPTION)
+ policy_denial = TRUE;
+ else if (ret != KRB5_PLUGIN_OP_NOTSUPP)
+ return ret;
+ }
+
+ *status = policy_denial ? "NOT_ALLOWED_TO_DELEGATE" :
+ "UNSUPPORTED_S4U2PROXY_REQUEST";
+ return KRB5KDC_ERR_BADOPTION;
+}
+
+static krb5_error_code
+check_tgs_u2u(krb5_context context, krb5_kdc_req *req, const krb5_ticket *stkt,
+ krb5_db_entry *server, const char **status)
{
/* A second ticket must be present in the request. */
if (stkt == NULL) {
*status = "NO_2ND_TKT";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
/* The second ticket must be a TGT to the server realm. */
if (!is_local_tgs_principal(stkt->server) ||
!data_eq(stkt->server->data[1], server->princ->realm)) {
*status = "2ND_TKT_NOT_TGS";
- return KDC_ERR_POLICY;
+ return KRB5KDC_ERR_POLICY;
}
/* The second ticket client must match the requested server. */
- if (!is_client_db_alias(kdc_context, server, stkt->enc_part2->client)) {
+ if (!is_client_db_alias(context, server, stkt->enc_part2->client)) {
*status = "2ND_TKT_MISMATCH";
- return KDC_ERR_SERVER_NOMATCH;
+ return KRB5KDC_ERR_SERVER_NOMATCH;
}
return 0;
}
/* Validate the PAC of a non-S4U TGS request, if one is present. */
-static int
+static krb5_error_code
check_normal_tgs_pac(krb5_context context, krb5_enc_tkt_part *enc_tkt,
krb5_pac pac, krb5_db_entry *server,
krb5_boolean is_crossrealm, const char **status)
return 0;
*status = "HEADER_PAC";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
/*
* checks that are peculiar to these cases. (e.g., ticket service principal
* matches requested service principal)
*/
-static int
-check_tgs_nontgt(kdc_realm_t *kdc_active_realm,
- krb5_kdc_req *req, krb5_ticket *tkt, const char **status)
+static krb5_error_code
+check_tgs_nontgt(krb5_context context, krb5_kdc_req *req, krb5_ticket *tkt,
+ const char **status)
{
- if (!krb5_principal_compare(kdc_context, tkt->server, req->server)) {
+ if (!krb5_principal_compare(context, tkt->server, req->server)) {
*status = "SERVER DIDN'T MATCH TICKET FOR RENEW/FORWARD/ETC";
- return KDC_ERR_SERVER_NOMATCH;
+ return KRB5KDC_ERR_SERVER_NOMATCH;
}
/* Cannot proxy ticket granting tickets. */
if ((req->kdc_options & KDC_OPT_PROXY) &&
krb5_is_tgs_principal(req->server)) {
*status = "CAN'T PROXY TGT";
- return KDC_ERR_BADOPTION;
+ return KRB5KDC_ERR_BADOPTION;
}
return 0;
}
* Do some checks for a normal TGS-REQ (where the ticket service must be a TGS
* principal).
*/
-static int
-check_tgs_tgt(kdc_realm_t *kdc_active_realm, krb5_kdc_req *req,
- krb5_ticket *tkt, const char **status)
+static krb5_error_code
+check_tgs_tgt(krb5_kdc_req *req, krb5_ticket *tkt, const char **status)
{
/* Make sure it's a TGS principal. */
if (!krb5_is_tgs_principal(tkt->server)) {
*status = "BAD TGS SERVER NAME";
- return KRB_AP_ERR_NOT_US;
+ return KRB5KRB_AP_ERR_NOT_US;
}
/* TGS principal second component must match service realm. */
- if (!data_eq(*krb5_princ_component(kdc_context, tkt->server, 1),
- *krb5_princ_realm(kdc_context, req->server))) {
+ if (!data_eq(tkt->server->data[1], req->server->realm)) {
*status = "BAD TGS SERVER INSTANCE";
- return KRB_AP_ERR_NOT_US;
+ return KRB5KRB_AP_ERR_NOT_US;
}
return 0;
}
-int
-validate_tgs_request(kdc_realm_t *kdc_active_realm,
- krb5_kdc_req *request, krb5_db_entry *server,
- krb5_ticket *ticket, krb5_pac pac,
- const krb5_ticket *stkt, krb5_pac stkt_pac,
- krb5_db_entry *stkt_server, krb5_timestamp kdc_time,
- krb5_pa_s4u_x509_user *s4u_x509_user,
- krb5_db_entry *s4u2self_client,
- krb5_boolean is_crossrealm, krb5_boolean is_referral,
- const char **status, krb5_pa_data ***e_data)
+krb5_error_code
+check_tgs_constraints(kdc_realm_t *realm, krb5_kdc_req *request,
+ krb5_db_entry *server, krb5_ticket *ticket, krb5_pac pac,
+ const krb5_ticket *stkt, krb5_pac stkt_pac,
+ krb5_db_entry *stkt_server, krb5_timestamp kdc_time,
+ krb5_pa_s4u_x509_user *s4u_x509_user,
+ krb5_db_entry *s4u2self_client,
+ krb5_boolean is_crossrealm, krb5_boolean is_referral,
+ const char **status, krb5_pa_data ***e_data)
{
+ krb5_context context = realm->realm_context;
int errcode;
- krb5_error_code ret;
/* Depends only on request and ticket. */
errcode = check_tgs_opts(request, ticket, status);
if (errcode != 0)
return errcode;
- errcode = check_tgs_svc_policy(request, server, ticket, kdc_time, status);
- if (errcode != 0)
- return errcode;
-
if (request->kdc_options & NON_TGT_OPTION)
- errcode = check_tgs_nontgt(kdc_active_realm, request, ticket, status);
+ errcode = check_tgs_nontgt(context, request, ticket, status);
else
- errcode = check_tgs_tgt(kdc_active_realm, request, ticket, status);
+ errcode = check_tgs_tgt(request, ticket, status);
if (errcode != 0)
return errcode;
- /* Check the hot list */
- if (check_hot_list(ticket)) {
- *status = "HOT_LIST";
- return(KRB_AP_ERR_REPEAT);
- }
-
if (s4u_x509_user != NULL) {
- errcode = check_tgs_s4u2self(kdc_active_realm, request, server, ticket,
- pac, kdc_time, s4u_x509_user,
- s4u2self_client, is_crossrealm,
- is_referral, status, e_data);
+ errcode = check_tgs_s4u2self(realm, request, server, ticket, pac,
+ kdc_time, s4u_x509_user, s4u2self_client,
+ is_crossrealm, is_referral, status,
+ e_data);
} else {
errcode = check_tgs_lineage(server, ticket, is_crossrealm, status);
}
return errcode;
if (request->kdc_options & KDC_OPT_ENC_TKT_IN_SKEY) {
- errcode = check_tgs_u2u(kdc_active_realm, request, stkt, server,
- status);
+ errcode = check_tgs_u2u(context, request, stkt, server, status);
if (errcode != 0)
return errcode;
}
if (request->kdc_options & KDC_OPT_CNAME_IN_ADDL_TKT) {
- errcode = check_tgs_s4u2proxy(kdc_active_realm, request, server,
- ticket, pac, stkt, stkt_pac, stkt_server,
+ errcode = check_tgs_s4u2proxy(context, request, server, ticket, pac,
+ stkt, stkt_pac, stkt_server,
is_crossrealm, is_referral, status);
if (errcode != 0)
return errcode;
} else if (s4u_x509_user == NULL) {
- errcode = check_normal_tgs_pac(kdc_context, ticket->enc_part2, pac,
- server, is_crossrealm, status);
+ errcode = check_normal_tgs_pac(context, ticket->enc_part2, pac, server,
+ is_crossrealm, status);
if (errcode != 0)
return errcode;
}
- if (check_anon(kdc_active_realm, ticket->enc_part2->client,
- request->server) != 0) {
+ return 0;
+}
+
+krb5_error_code
+check_tgs_policy(kdc_realm_t *realm, krb5_kdc_req *request,
+ krb5_db_entry *server, krb5_ticket *ticket,
+ krb5_pac pac, const krb5_ticket *stkt, krb5_pac stkt_pac,
+ krb5_principal stkt_pac_client, krb5_db_entry *stkt_server,
+ krb5_timestamp kdc_time, krb5_boolean is_crossrealm,
+ krb5_boolean is_referral, const char **status,
+ krb5_pa_data ***e_data)
+{
+ krb5_context context = realm->realm_context;
+ int errcode;
+ krb5_error_code ret;
+ krb5_principal desired_client;
+
+ errcode = check_tgs_svc_policy(request, server, ticket, kdc_time, status);
+ if (errcode != 0)
+ return errcode;
+
+ if (request->kdc_options & KDC_OPT_CNAME_IN_ADDL_TKT) {
+ desired_client = (stkt_pac_client != NULL) ? stkt_pac_client :
+ stkt->enc_part2->client;
+ errcode = check_s4u2proxy_policy(context, request, desired_client,
+ ticket->enc_part2->client,
+ stkt_server, pac, request->server,
+ server, is_crossrealm, is_referral,
+ status);
+ if (errcode != 0)
+ return errcode;
+ }
+
+ if (check_anon(realm, ticket->enc_part2->client, request->server) != 0) {
*status = "ANONYMOUS NOT ALLOWED";
- return(KDC_ERR_POLICY);
+ return KRB5KDC_ERR_POLICY;
}
/* Perform KDB module policy checks. */
- ret = krb5_db_check_policy_tgs(kdc_context, request, server, ticket,
- status, e_data);
- if (ret && ret != KRB5_PLUGIN_OP_NOTSUPP)
- return errcode_to_protocol(ret);
-
- return 0;
+ ret = krb5_db_check_policy_tgs(context, request, server, ticket, status,
+ e_data);
+ return (ret == KRB5_PLUGIN_OP_NOTSUPP) ? 0 : ret;
}
enum { PID_FILE = 256 };
struct option long_options[] = {
{ "pid-file", 1, NULL, PID_FILE },
+ { NULL, 0, NULL, 0 },
};
memset(¶ms, 0, sizeof(params));
}
}
- if (krb5_init_context(&context)) {
+ if (kadm5_init_krb5_context(&context)) {
fprintf(stderr, _("Unable to initialize Kerberos\n\n"));
exit(1);
}
$(srcdir)/kdf.c \
$(srcdir)/pbkdf2.c
-STOBJLISTS= des/OBJS.ST md4/OBJS.ST \
- md5/OBJS.ST sha1/OBJS.ST sha2/OBJS.ST \
- enc_provider/OBJS.ST \
- hash_provider/OBJS.ST \
- aes/OBJS.ST \
- camellia/OBJS.ST \
- OBJS.ST
-
SUBDIROBJLISTS= des/OBJS.ST md4/OBJS.ST \
md5/OBJS.ST sha1/OBJS.ST sha2/OBJS.ST \
enc_provider/OBJS.ST \
aes/OBJS.ST \
camellia/OBJS.ST
+STOBJLISTS= $(SUBDIROBJLISTS) OBJS.ST
+
##DOS##LIBOBJS = $(OBJS)
all-unix: all-libobjs
$(srcdir)/pbkdf2.c \
$(srcdir)/sha256.c
-STOBJLISTS= des/OBJS.ST md4/OBJS.ST \
- md5/OBJS.ST sha1/OBJS.ST sha2/OBJS.ST \
- enc_provider/OBJS.ST \
- hash_provider/OBJS.ST \
- aes/OBJS.ST \
- OBJS.ST
-
SUBDIROBJLISTS= des/OBJS.ST md4/OBJS.ST \
md5/OBJS.ST sha1/OBJS.ST sha2/OBJS.ST \
enc_provider/OBJS.ST \
hash_provider/OBJS.ST \
aes/OBJS.ST
+STOBJLISTS= $(SUBDIROBJLISTS) OBJS.ST
+
all-unix: all-libobjs
includes: depend
LIBMINOR=2
#LIBINITFUNC=gssint_lib_init
#LIBFINIFUNC=gssint_lib_fini
-STOBJLISTS=OBJS.ST generic/OBJS.ST mechglue/OBJS.ST krb5/OBJS.ST spnego/OBJS.ST
SUBDIROBJLISTS=generic/OBJS.ST mechglue/OBJS.ST krb5/OBJS.ST spnego/OBJS.ST
+STOBJLISTS=OBJS.ST $(SUBDIROBJLISTS)
SHLIB_EXPDEPS=\
$(KRB5_DEPLIB) $(CRYPTO_DEPLIB) $(SUPPORT_DEPLIB) $(COM_ERR_DEPLIB)
SHLIB_EXPLIBS=-lkrb5 -lk5crypto $(COM_ERR_LIB) $(SUPPORT_LIB) $(DL_LIB) $(LIBS)
util_token.so util_token.po $(OUTPRE)util_token.$(OBJEXT): \
$(BUILDTOP)/include/autoconf.h $(BUILDTOP)/include/gssapi/gssapi.h \
$(BUILDTOP)/include/gssapi/gssapi_alloc.h $(COM_ERR_DEPS) \
- $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-platform.h \
+ $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-der.h \
+ $(top_srcdir)/include/k5-input.h $(top_srcdir)/include/k5-platform.h \
$(top_srcdir)/include/k5-thread.h gssapiP_generic.h \
gssapi_err_generic.h gssapi_ext.h gssapi_generic.h \
util_token.c
(((o1)->length == (o2)->length) && \
(memcmp((o1)->elements, (o2)->elements, (o1)->length) == 0))
-/* this code knows that an int on the wire is 32 bits. The type of
- num should be at least this big, or the extra shifts may do weird
- things */
-
-#define TWRITE_INT(ptr, num, bigend) \
- if (bigend) store_32_be(num, ptr); else store_32_le(num, ptr); \
- (ptr) += 4;
-
-#define TWRITE_INT16(ptr, num, bigend) \
- if (bigend) store_16_be((num)>>16, ptr); else store_16_le(num, ptr); \
- (ptr) += 2;
-
-#define TREAD_INT(ptr, num, bigend) \
- (num) = ((bigend) ? load_32_be(ptr) : load_32_le(ptr)); \
- (ptr) += 4;
-
-#define TREAD_INT16(ptr, num, bigend) \
- (num) = ((bigend) ? (load_16_be(ptr) << 16) : load_16_le(ptr)); \
- (ptr) += 2;
-
-#define TWRITE_STR(ptr, str, len) \
- memcpy((ptr), (str), (len)); \
- (ptr) += (len);
-
-#define TREAD_STR(ptr, str, len) \
- (str) = (ptr); \
- (ptr) += (len);
-
-#define TWRITE_BUF(ptr, buf, bigend) \
- TWRITE_INT((ptr), (buf).length, (bigend)); \
- TWRITE_STR((ptr), (buf).value, (buf).length);
-
/** malloc wrappers; these may actually do something later */
#define xmalloc(n) malloc(n)
unsigned int g_token_size (const gss_OID_desc * mech, unsigned int body_size);
-void g_make_token_header (const gss_OID_desc * mech, unsigned int body_size,
- unsigned char **buf, int tok_type);
+void g_make_token_header (struct k5buf *buf, const gss_OID_desc *mech,
+ size_t body_size, int tok_type);
/* flags for g_verify_token_header() */
#define G_VFY_TOKEN_HDR_WRAPPER_REQUIRED 0x01
*/
GSS_DLLIMP extern gss_OID GSS_C_INQ_SSPI_SESSION_KEY;
+/*
+ * Returns a buffer set with the first member containing the ticket session key
+ * for ODBC compatibility. The optional second member contains an OID
+ * identifying the session key type.
+ */
+GSS_DLLIMP extern gss_OID GSS_C_INQ_ODBC_SESSION_KEY;
+
GSS_DLLIMP extern gss_OID GSS_C_INQ_NEGOEX_KEY;
GSS_DLLIMP extern gss_OID GSS_C_INQ_NEGOEX_VERIFY_KEY;
* infosys(1) gssapi(2) krb5(2) krb5-gssapi-ext(5) sasl-ssf(15)
*/
{11, (void *)"\x2a\x86\x48\x86\xf7\x12\x01\x02\x02\x05\x0f"},
+
+ /*
+ * GSS_C_INQ_ODBC_SESSION_KEY 1.2.840.113554.1.2.2.5.19
+ * iso(1) member-body(2) United States(840) mit(113554)
+ * infosys(1) ssapi(2) krb5(2) krb5-gssapi-ext(5)
+ * inq-odbc-session-key(19)
+ */
+ {11, (void *)"\x2a\x86\x48\x86\xf7\x12\x01\x02\x02\x05\x05\13"},
};
/* Here are the constants which point to the static structure above.
GSS_DLLIMP gss_OID GSS_C_SEC_CONTEXT_SASL_SSF = oids+39;
+GSS_DLLIMP gss_OID GSS_C_INQ_ODBC_SESSION_KEY = oids+40;
+
static gss_OID_set_desc gss_ma_known_attrs_desc = { 28, oids+11 };
gss_OID_set gss_ma_known_attrs = &gss_ma_known_attrs_desc;
*/
#include "gssapiP_generic.h"
+#include "k5-der.h"
#ifdef HAVE_MEMORY_H
#include <memory.h>
#endif
* $Id$
*/
-/* XXXX this code currently makes the assumption that a mech oid will
- never be longer than 127 bytes. This assumption is not inherent in
- the interfaces, so the code can be fixed if the OSI namespace
- balloons unexpectedly. */
-
-/*
- * Each token looks like this:
- * 0x60 tag for APPLICATION 0, SEQUENCE
- * (constructed, definite-length)
- * <length> possible multiple bytes, need to parse/generate
- * 0x06 tag for OBJECT IDENTIFIER
- * <moid_length> compile-time constant string (assume 1 byte)
- * <moid_bytes> compile-time constant string
- * <inner_bytes> the ANY containing the application token
- * bytes 0,1 are the token type
- * bytes 2,n are the token data
- *
- * Note that the token type field is a feature of RFC 1964 mechanisms and
- * is not used by other GSSAPI mechanisms. As such, a token type of -1
- * is interpreted to mean that no token type should be expected or
- * generated.
- *
- * For the purposes of this abstraction, the token "header" consists of
- * the sequence tag and length octets, the mech OID DER encoding, and the
- * first two inner bytes, which indicate the token type. The token
- * "body" consists of everything else.
- */
-static unsigned int
-der_length_size(int length)
-{
- if (length < (1<<7))
- return(1);
- else if (length < (1<<8))
- return(2);
-#if INT_MAX == 0x7fff
- else
- return(3);
-#else
- else if (length < (1<<16))
- return(3);
- else if (length < (1<<24))
- return(4);
- else
- return(5);
-#endif
-}
-
-static void
-der_write_length(unsigned char **buf, int length)
-{
- if (length < (1<<7)) {
- *(*buf)++ = (unsigned char) length;
- } else {
- *(*buf)++ = (unsigned char) (der_length_size(length)+127);
-#if INT_MAX > 0x7fff
- if (length >= (1<<24))
- *(*buf)++ = (unsigned char) (length>>24);
- if (length >= (1<<16))
- *(*buf)++ = (unsigned char) ((length>>16)&0xff);
-#endif
- if (length >= (1<<8))
- *(*buf)++ = (unsigned char) ((length>>8)&0xff);
- *(*buf)++ = (unsigned char) (length&0xff);
- }
-}
-
-/* returns decoded length, or < 0 on failure. Advances buf and
- decrements bufsize */
-
-static int
-der_read_length(unsigned char **buf, int *bufsize)
-{
- unsigned char sf;
- int ret;
-
- if (*bufsize < 1)
- return(-1);
- sf = *(*buf)++;
- (*bufsize)--;
- if (sf & 0x80) {
- if ((sf &= 0x7f) > ((*bufsize)-1))
- return(-1);
- if (sf > sizeof(int))
- return (-1);
- ret = 0;
- for (; sf; sf--) {
- ret = (ret<<8) + (*(*buf)++);
- (*bufsize)--;
- }
- } else {
- ret = sf;
- }
-
- return(ret);
-}
-
-/* returns the length of a token, given the mech oid and the body size */
-
+/* Return the length of an RFC 4121 token with RFC 2743 token framing, given
+ * the mech oid and the body size (without the two-byte RFC 4121 token ID). */
unsigned int
g_token_size(const gss_OID_desc * mech, unsigned int body_size)
{
- /* set body_size to sequence contents size */
- body_size += 4 + (unsigned int)mech->length; /* NEED overflow check */
- return(1 + der_length_size(body_size) + body_size);
-}
+ size_t mech_der_len = k5_der_value_len(mech->length);
-/* fills in a buffer with the token header. The buffer is assumed to
- be the right size. buf is advanced past the token header */
+ return k5_der_value_len(mech_der_len + 2 + body_size);
+}
+/*
+ * Add RFC 2743 generic token framing to buf with room left for body_size bytes
+ * in the sequence to be added by the caller. If tok_type is not -1, add it as
+ * a two-byte RFC 4121 token identifier after the framing and include room for
+ * it in the sequence.
+ */
void
-g_make_token_header(
- const gss_OID_desc * mech,
- unsigned int body_size,
- unsigned char **buf,
- int tok_type)
+g_make_token_header(struct k5buf *buf, const gss_OID_desc *mech,
+ size_t body_size, int tok_type)
{
- *(*buf)++ = 0x60;
- der_write_length(buf, ((tok_type == -1) ? 2 : 4) + mech->length + body_size);
- *(*buf)++ = 0x06;
- *(*buf)++ = (unsigned char) mech->length;
- TWRITE_STR(*buf, mech->elements, mech->length);
- if (tok_type != -1) {
- *(*buf)++ = (unsigned char) ((tok_type>>8)&0xff);
- *(*buf)++ = (unsigned char) (tok_type&0xff);
- }
+ size_t tok_len = (tok_type == -1) ? 0 : 2;
+ size_t seq_len = k5_der_value_len(mech->length) + body_size + tok_len;
+
+ k5_der_add_taglen(buf, 0x60, seq_len);
+ k5_der_add_value(buf, 0x06, mech->elements, mech->length);
+ if (tok_type != -1)
+ k5_buf_add_uint16_be(buf, tok_type);
}
/*
unsigned int toksize_in,
int flags)
{
- unsigned char *buf = *buf_in;
- int seqsize;
+ struct k5input in, mech_der;
gss_OID_desc toid;
- int toksize = toksize_in;
- if ((toksize-=1) < 0)
- return(G_BAD_TOK_HEADER);
- if (*buf++ != 0x60) {
- if (flags & G_VFY_TOKEN_HDR_WRAPPER_REQUIRED)
- return(G_BAD_TOK_HEADER);
- buf--;
- toksize++;
- goto skip_wrapper;
+ k5_input_init(&in, *buf_in, toksize_in);
+
+ if (k5_der_get_value(&in, 0x60, &in)) {
+ if (in.ptr + in.len != *buf_in + toksize_in)
+ return G_BAD_TOK_HEADER;
+ if (!k5_der_get_value(&in, 0x06, &mech_der))
+ return G_BAD_TOK_HEADER;
+ toid.elements = (uint8_t *)mech_der.ptr;
+ toid.length = mech_der.len;
+ if (!g_OID_equal(&toid, mech))
+ return G_WRONG_MECH;
+ } else if (flags & G_VFY_TOKEN_HDR_WRAPPER_REQUIRED) {
+ return G_BAD_TOK_HEADER;
}
- if ((seqsize = der_read_length(&buf, &toksize)) < 0)
- return(G_BAD_TOK_HEADER);
-
- if (seqsize != toksize)
- return(G_BAD_TOK_HEADER);
-
- if ((toksize-=1) < 0)
- return(G_BAD_TOK_HEADER);
- if (*buf++ != 0x06)
- return(G_BAD_TOK_HEADER);
-
- if ((toksize-=1) < 0)
- return(G_BAD_TOK_HEADER);
- toid.length = *buf++;
-
- if ((toksize-=toid.length) < 0)
- return(G_BAD_TOK_HEADER);
- toid.elements = buf;
- buf+=toid.length;
-
- if (! g_OID_equal(&toid, mech))
- return G_WRONG_MECH;
-skip_wrapper:
if (tok_type != -1) {
- if ((toksize-=2) < 0)
- return(G_BAD_TOK_HEADER);
-
- if ((*buf++ != ((tok_type>>8)&0xff)) ||
- (*buf++ != (tok_type&0xff)))
- return(G_WRONG_TOKID);
+ if (k5_input_get_uint16_be(&in) != tok_type)
+ return in.status ? G_BAD_TOK_HEADER : G_WRONG_TOKID;
}
- *buf_in = buf;
- *body_size = toksize;
+ *buf_in = (uint8_t *)in.ptr;
+ *body_size = in.len;
return 0;
}
*mech_type = ctx->mech_used;
if (time_rec) {
- *time_rec = ts_delta(ctx->krb_times.endtime, now) +
- ctx->k5_context->clockskew;
+ *time_rec = ts_interval(ts_incr(now, -ctx->k5_context->clockskew),
+ ctx->krb_times.endtime);
}
/* Never return GSS_C_DELEG_FLAG since we don't support DCE credential
{
krb5_context context;
unsigned char *ptr;
- char *sptr;
krb5_gss_cred_id_t cred = 0;
krb5_data ap_rep, ap_req;
krb5_error_code code;
krb5_enctype negotiated_etype;
krb5_authdata_context ad_context = NULL;
krb5_ap_req *request = NULL;
+ struct k5buf buf;
code = krb5int_accessor (&kaccess, KRB5INT_ACCESS_VERSION);
if (code) {
} else if (code == G_BAD_TOK_HEADER) {
/* DCE style not encapsulated */
ap_req.length = input_token->length;
- ap_req.data = input_token->value;
mech_used = gss_mech_krb5;
no_encap = 1;
} else {
major_status = GSS_S_DEFECTIVE_TOKEN;
goto fail;
}
-
- sptr = (char *) ptr;
- TREAD_STR(sptr, ap_req.data, ap_req.length);
+ ap_req.data = (char *)ptr;
/* construct the sender_addr */
/* generate an AP_REP if necessary */
if (ctx->gss_flags & GSS_C_MUTUAL_FLAG) {
- unsigned char * ptr3;
krb5_int32 seq_temp;
int cfx_generate_subkey;
ctx->established = 1;
token.length = g_token_size(mech_used, ap_rep.length);
-
- if ((token.value = (unsigned char *) gssalloc_malloc(token.length))
- == NULL) {
+ token.value = gssalloc_malloc(token.length);
+ if (token.value == NULL) {
major_status = GSS_S_FAILURE;
code = ENOMEM;
goto fail;
}
- ptr3 = token.value;
- g_make_token_header(mech_used, ap_rep.length,
- &ptr3, KG_TOK_CTX_AP_REP);
-
- TWRITE_STR(ptr3, ap_rep.data, ap_rep.length);
+ k5_buf_init_fixed(&buf, token.value, token.length);
+ g_make_token_header(&buf, mech_used, ap_rep.length, KG_TOK_CTX_AP_REP);
+ k5_buf_add_len(&buf, ap_rep.data, ap_rep.length);
+ assert(buf.len == token.length);
ctx->established = 1;
/* Add the maximum allowable clock skew as a grace period for context
* expiration, just as we do for the ticket. */
- if (time_rec)
- *time_rec = ts_delta(ctx->krb_times.endtime, now) + context->clockskew;
+ if (time_rec) {
+ *time_rec = ts_interval(ts_incr(now, -context->clockskew),
+ ctx->krb_times.endtime);
+ }
if (ret_flags)
*ret_flags = ctx->gss_flags;
(request->ap_options & AP_OPTS_MUTUAL_REQUIRED) ||
major_status == GSS_S_CONTINUE_NEEDED)) {
unsigned int tmsglen;
- int toktype;
/*
* The client is expecting a response, so we can send an
goto done;
tmsglen = scratch.length;
- toktype = KG_TOK_CTX_ERROR;
token.length = g_token_size(mech_used, tmsglen);
token.value = gssalloc_malloc(token.length);
if (!token.value)
goto done;
+ k5_buf_init_fixed(&buf, token.value, token.length);
+ g_make_token_header(&buf, mech_used, tmsglen, KG_TOK_CTX_ERROR);
+ k5_buf_add_len(&buf, scratch.data, scratch.length);
+ assert(buf.len == token.length);
- ptr = token.value;
- g_make_token_header(mech_used, tmsglen, &ptr, toktype);
-
- TWRITE_STR(ptr, scratch.data, scratch.length);
krb5_free_data_contents(context, &scratch);
*output_token = token;
GSS_C_NO_NAME);
if (GSS_ERROR(ret))
goto error_out;
- *time_rec = ts_after(cred->expire, now) ?
- ts_delta(cred->expire, now) : 0;
+ *time_rec = ts_interval(now, cred->expire);
k5_mutex_unlock(&cred->lock);
}
}
{
krb5_error_code code;
krb5_gss_ctx_id_rec *ctx;
- krb5_timestamp now;
- krb5_deltat lifetime;
+ krb5_timestamp now, start;
ctx = (krb5_gss_ctx_id_rec *) context_handle;
return(GSS_S_FAILURE);
}
- lifetime = ts_delta(ctx->krb_times.endtime, now);
- if (!ctx->initiate)
- lifetime += ctx->k5_context->clockskew;
- if (lifetime <= 0) {
- *time_rec = 0;
- *minor_status = 0;
- return(GSS_S_CONTEXT_EXPIRED);
- } else {
- *time_rec = lifetime;
- *minor_status = 0;
- return(GSS_S_COMPLETE);
- }
+ /* Add the maximum allowable clock skew for acceptor contexts. */
+ start = ctx->initiate ? now : ts_incr(now, -ctx->k5_context->clockskew);
+ *time_rec = ts_interval(start, ctx->krb_times.endtime);
+ *minor_status = 0;
+ return (*time_rec == 0) ? GSS_S_CONTEXT_EXPIRED : GSS_S_COMPLETE;
}
$(BUILDTOP)/include/osconf.h $(BUILDTOP)/include/profile.h \
$(COM_ERR_DEPS) $(srcdir)/../generic/gssapiP_generic.h \
$(srcdir)/../generic/gssapi_ext.h $(srcdir)/../generic/gssapi_generic.h \
- $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-err.h \
- $(top_srcdir)/include/k5-gmt_mktime.h $(top_srcdir)/include/k5-int-pkinit.h \
+ $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-der.h \
+ $(top_srcdir)/include/k5-err.h $(top_srcdir)/include/k5-gmt_mktime.h \
+ $(top_srcdir)/include/k5-input.h $(top_srcdir)/include/k5-int-pkinit.h \
$(top_srcdir)/include/k5-int.h $(top_srcdir)/include/k5-platform.h \
$(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-thread.h \
$(top_srcdir)/include/k5-trace.h $(top_srcdir)/include/krb5.h \
#define GSS_KRB5_INQ_SSPI_SESSION_KEY_OID_LENGTH 11
#define GSS_KRB5_INQ_SSPI_SESSION_KEY_OID "\x2a\x86\x48\x86\xf7\x12\x01\x02\x02\x05\x05"
+#define GSS_KRB5_INQ_ODBC_SESSION_KEY_OID_LENGTH 11
+#define GSS_KRB5_INQ_ODBC_SESSION_KEY_OID "\x2a\x86\x48\x86\xf7\x12\x01\x02\x02\x05\x13"
OM_uint32
-gss_krb5int_inq_session_key(OM_uint32 *, const gss_ctx_id_t, const gss_OID, gss_buffer_set_t *);
+gss_krb5int_inq_sspi_session_key(OM_uint32 *, const gss_ctx_id_t, const gss_OID, gss_buffer_set_t *);
+OM_uint32
+gss_krb5int_inq_odbc_session_key(OM_uint32 *, const gss_ctx_id_t, const gss_OID, gss_buffer_set_t *);
#define GSS_KRB5_SET_ALLOWABLE_ENCTYPES_OID_LENGTH 11
#define GSS_KRB5_SET_ALLOWABLE_ENCTYPES_OID "\x2a\x86\x48\x86\xf7\x12\x01\x02\x02\x05\x04"
},
{
{GSS_KRB5_INQ_SSPI_SESSION_KEY_OID_LENGTH, GSS_KRB5_INQ_SSPI_SESSION_KEY_OID},
- gss_krb5int_inq_session_key
+ gss_krb5int_inq_sspi_session_key
+ },
+ {
+ {GSS_KRB5_INQ_ODBC_SESSION_KEY_OID_LENGTH, GSS_KRB5_INQ_ODBC_SESSION_KEY_OID},
+ gss_krb5int_inq_odbc_session_key
},
{
{GSS_KRB5_EXPORT_LUCID_SEC_CONTEXT_OID_LENGTH, GSS_KRB5_EXPORT_LUCID_SEC_CONTEXT_OID},
* or implied warranty.
*/
#include "k5-int.h"
+#include "k5-der.h"
#include "gssapiP_krb5.h"
/*
* IAKERB implementation
*/
-extern int gssint_get_der_length(unsigned char **, OM_uint32, unsigned int*);
-
enum iakerb_state {
IAKERB_AS_REQ, /* acquiring ticket with initial creds */
IAKERB_TGS_REQ, /* acquiring ticket with TGT */
{
krb5_error_code code;
krb5_iakerb_header *iah = NULL;
- unsigned int bodysize, lenlen;
- int length;
- unsigned char *ptr;
+ unsigned int bodysize;
+ uint8_t *body;
int flags = 0;
krb5_data data;
+ struct k5input in, seq;
if (token == GSS_C_NO_BUFFER || token->length == 0) {
code = KRB5_BAD_MSIZE;
if (initialContextToken)
flags |= G_VFY_TOKEN_HDR_WRAPPER_REQUIRED;
- ptr = token->value;
-
- code = g_verify_token_header(gss_mech_iakerb,
- &bodysize, &ptr,
- IAKERB_TOK_PROXY,
- token->length, flags);
+ body = token->value;
+ code = g_verify_token_header(gss_mech_iakerb, &bodysize, &body,
+ IAKERB_TOK_PROXY, token->length, flags);
if (code != 0)
goto cleanup;
- data.data = (char *)ptr;
-
- if (bodysize-- == 0 || *ptr++ != 0x30 /* SEQUENCE */) {
+ /* Find the end of the DER sequence tag and decode it (with the tag) as the
+ * IAKERB jeader. */
+ k5_input_init(&in, body, bodysize);
+ if (!k5_der_get_value(&in, 0x30, &seq)) {
code = ASN1_BAD_ID;
goto cleanup;
}
-
- length = gssint_get_der_length(&ptr, bodysize, &lenlen);
- if (length < 0 || bodysize - lenlen < (unsigned int)length) {
- code = KRB5_BAD_MSIZE;
- goto cleanup;
- }
- data.length = 1 /* SEQUENCE */ + lenlen + length;
-
- ptr += length;
- bodysize -= (lenlen + length);
-
+ data = make_data(body, seq.ptr + seq.len - body);
code = decode_krb5_iakerb_header(&data, &iah);
if (code != 0)
goto cleanup;
iah->cookie = NULL;
}
- request->data = (char *)ptr;
- request->length = bodysize;
-
+ /* The remainder of the token body is the request. */
+ *request = make_data((uint8_t *)in.ptr, in.len);
assert(request->data + request->length ==
(char *)token->value + token->length);
krb5_data *data = NULL;
char *p;
unsigned int tokenSize;
- unsigned char *q;
+ struct k5buf buf;
token->value = NULL;
token->length = 0;
else
tokenSize = 2 + data->length;
- token->value = q = gssalloc_malloc(tokenSize);
- if (q == NULL) {
+ token->value = gssalloc_malloc(tokenSize);
+ if (token->value == NULL) {
code = ENOMEM;
goto cleanup;
}
token->length = tokenSize;
+ k5_buf_init_fixed(&buf, token->value, token->length);
if (initialContextToken) {
- g_make_token_header(gss_mech_iakerb, data->length, &q,
+ g_make_token_header(&buf, gss_mech_iakerb, data->length,
IAKERB_TOK_PROXY);
} else {
- store_16_be(IAKERB_TOK_PROXY, q);
- q += 2;
+ k5_buf_add_uint16_be(&buf, IAKERB_TOK_PROXY);
}
- memcpy(q, data->data, data->length);
- q += data->length;
-
- assert(q == (unsigned char *)token->value + token->length);
+ k5_buf_add_len(&buf, data->data, data->length);
+ assert(buf.len == token->length);
cleanup:
krb5_free_data(ctx->k5c, data);
{
krb5_error_code code;
krb5_int32 con_flags;
- unsigned char *ptr;
struct gss_checksum_data *data = cksum_data;
krb5_data credmsg;
unsigned int junk;
krb5_data *finished = NULL;
krb5_key send_subkey;
+ struct k5buf buf;
- data->checksum_data.data = 0;
+ data->checksum_data = empty_data();
credmsg.data = 0;
/* build the checksum field */
request */
data->ctx->gss_flags &= ~(GSS_C_DELEG_FLAG |
GSS_C_DELEG_POLICY_FLAG);
-
- data->checksum_data.length = 24;
} else {
if (credmsg.length+28 > KRB5_INT16_MAX) {
code = KRB5KRB_ERR_FIELD_TOOLONG;
goto cleanup;
}
-
- data->checksum_data.length = 28+credmsg.length;
}
- } else {
- data->checksum_data.length = 24;
}
#ifdef CFX_EXERCISE
if (data->ctx->auth_context->keyblock != NULL
}
krb5_k_free_key(context, key);
- data->checksum_data.length += 8 + finished->length;
}
- data->checksum_data.length += junk;
-
/* now allocate a buffer to hold the checksum data and
(maybe) KRB_CRED msg */
-
- if ((data->checksum_data.data =
- (char *) xmalloc(data->checksum_data.length)) == NULL) {
- code = ENOMEM;
- goto cleanup;
+ k5_buf_init_dynamic(&buf);
+ k5_buf_add_uint32_le(&buf, data->md5.length);
+ k5_buf_add_len(&buf, data->md5.contents, data->md5.length);
+ k5_buf_add_uint32_le(&buf, data->ctx->gss_flags);
+ if (credmsg.data != NULL) {
+ k5_buf_add_uint16_le(&buf, KRB5_GSS_FOR_CREDS_OPTION);
+ k5_buf_add_uint16_le(&buf, credmsg.length);
+ k5_buf_add_len(&buf, credmsg.data, credmsg.length);
}
+ if (data->exts->iakerb.conv != NULL) {
+ k5_buf_add_uint32_be(&buf, KRB5_GSS_EXTS_IAKERB_FINISHED);
+ k5_buf_add_uint32_be(&buf, finished->length);
+ k5_buf_add_len(&buf, finished->data, finished->length);
+ }
+ while (junk--)
+ k5_buf_add_byte(&buf, 'i');
- ptr = (unsigned char *)data->checksum_data.data;
-
- TWRITE_INT(ptr, data->md5.length, 0);
- TWRITE_STR(ptr, data->md5.contents, data->md5.length);
- TWRITE_INT(ptr, data->ctx->gss_flags, 0);
+ code = k5_buf_status(&buf);
+ if (code)
+ goto cleanup;
- if (credmsg.data) {
- TWRITE_INT16(ptr, KRB5_GSS_FOR_CREDS_OPTION, 0);
- TWRITE_INT16(ptr, credmsg.length, 0);
- TWRITE_STR(ptr, credmsg.data, credmsg.length);
- }
- if (data->exts->iakerb.conv) {
- TWRITE_INT(ptr, KRB5_GSS_EXTS_IAKERB_FINISHED, 1);
- TWRITE_INT(ptr, finished->length, 1);
- TWRITE_STR(ptr, finished->data, finished->length);
- }
- if (junk)
- memset(ptr, 'i', junk);
+ data->checksum_data = make_data(buf.data, buf.len);
*out = &data->checksum_data;
code = 0;
+
cleanup:
krb5_free_data_contents(context, &credmsg);
krb5_free_data(context, finished);
struct gss_checksum_data cksum_struct;
krb5_checksum md5;
krb5_data ap_req;
- unsigned char *ptr;
unsigned char *t;
unsigned int tlen;
+ struct k5buf buf;
k5_mutex_assert_locked(&cred->lock);
ap_req.data = 0;
} else {
/* allocate space for the token */
tlen = g_token_size((gss_OID) mech_type, ap_req.length);
-
- if ((t = (unsigned char *) gssalloc_malloc(tlen)) == NULL) {
+ t = gssalloc_malloc(tlen);
+ if (t == NULL) {
code = ENOMEM;
goto cleanup;
}
-
- /* fill in the buffer */
- ptr = t;
-
- g_make_token_header(mech_type, ap_req.length,
- &ptr, KG_TOK_CTX_AP_REQ);
-
- TWRITE_STR(ptr, ap_req.data, ap_req.length);
+ k5_buf_init_fixed(&buf, t, tlen);
+ g_make_token_header(&buf, mech_type, ap_req.length, KG_TOK_CTX_AP_REQ);
+ k5_buf_add_len(&buf, ap_req.data, ap_req.length);
+ assert(buf.len == tlen);
/* pass it back */
if (time_rec) {
if ((code = krb5_timeofday(context, &now)))
goto cleanup;
- *time_rec = ts_delta(ctx->krb_times.endtime, now);
+ *time_rec = ts_interval(now, ctx->krb_times.endtime);
}
/* set the other returns */
{
OM_uint32 major_status;
unsigned char *ptr;
- char *sptr;
krb5_data ap_rep;
krb5_ap_rep_enc_part *ap_rep_data;
krb5_timestamp now;
if (ctx->gss_flags & GSS_C_DCE_STYLE) {
/* Raw AP-REP */
ap_rep.length = input_token->length;
- ap_rep.data = (char *)input_token->value;
} else if (g_verify_token_header(ctx->mech_used,
&(ap_rep.length),
&ptr, KG_TOK_CTX_AP_REP,
/* Handle a KRB_ERROR message from the server */
- sptr = (char *) ptr; /* PC compiler bug */
- TREAD_STR(sptr, ap_rep.data, ap_rep.length);
-
+ ap_rep.data = (char *)ptr;
code = krb5_rd_error(context, &ap_rep, &krb_error);
if (code)
goto fail;
return(GSS_S_DEFECTIVE_TOKEN);
}
}
-
- sptr = (char *) ptr; /* PC compiler bug */
- TREAD_STR(sptr, ap_rep.data, ap_rep.length);
+ ap_rep.data = (char *)ptr;
/* decode the ap_rep */
if ((code = krb5_rd_rep(context, ctx->auth_context, &ap_rep,
if (time_rec) {
if ((code = krb5_timeofday(context, &now)))
goto fail;
- *time_rec = ts_delta(ctx->krb_times.endtime, now);
+ *time_rec = ts_interval(now, ctx->krb_times.endtime);
}
if (ret_flags)
krb5_error_code code;
krb5_gss_ctx_id_rec *ctx;
krb5_gss_name_t initiator, acceptor;
- krb5_timestamp now;
- krb5_deltat lifetime;
+ krb5_timestamp now, start;
+ OM_uint32 lifetime;
if (initiator_name)
*initiator_name = (gss_name_t) NULL;
/* Add the maximum allowable clock skew as a grace period for context
* expiration, just as we do for the ticket during authentication. */
- lifetime = ts_delta(ctx->krb_times.endtime, now);
- if (!ctx->initiate)
- lifetime += context->clockskew;
- if (lifetime < 0)
- lifetime = 0;
+ start = ctx->initiate ? now : ts_incr(now, -context->clockskew);
+ lifetime = ts_interval(start, ctx->krb_times.endtime);
if (initiator_name) {
code = kg_duplicate_name(context,
return GSS_S_COMPLETE;
}
-OM_uint32
-gss_krb5int_inq_session_key(
- OM_uint32 *minor_status,
- const gss_ctx_id_t context_handle,
- const gss_OID desired_object,
- gss_buffer_set_t *data_set)
+/* Add two buffers to data_set giving the contents and enctype of key. */
+static OM_uint32
+inq_session_key_result(OM_uint32 *minor_status, krb5_key key,
+ gss_buffer_set_t *data_set)
{
- krb5_gss_ctx_id_rec *ctx;
- krb5_key key;
gss_buffer_desc keyvalue, keyinfo;
- OM_uint32 major_status, minor;
+ OM_uint32 major, tmpmin;
unsigned char oid_buf[GSS_KRB5_SESSION_KEY_ENCTYPE_OID_LENGTH + 6];
gss_OID_desc oid;
- ctx = (krb5_gss_ctx_id_rec *) context_handle;
- key = ctx->have_acceptor_subkey ? ctx->acceptor_subkey : ctx->subkey;
-
keyvalue.value = key->keyblock.contents;
keyvalue.length = key->keyblock.length;
-
- major_status = generic_gss_add_buffer_set_member(minor_status, &keyvalue, data_set);
- if (GSS_ERROR(major_status))
+ major = generic_gss_add_buffer_set_member(minor_status, &keyvalue,
+ data_set);
+ if (GSS_ERROR(major))
goto cleanup;
oid.elements = oid_buf;
oid.length = sizeof(oid_buf);
-
- major_status = generic_gss_oid_compose(minor_status,
- GSS_KRB5_SESSION_KEY_ENCTYPE_OID,
- GSS_KRB5_SESSION_KEY_ENCTYPE_OID_LENGTH,
- key->keyblock.enctype,
- &oid);
- if (GSS_ERROR(major_status))
+ major = generic_gss_oid_compose(minor_status,
+ GSS_KRB5_SESSION_KEY_ENCTYPE_OID,
+ GSS_KRB5_SESSION_KEY_ENCTYPE_OID_LENGTH,
+ key->keyblock.enctype, &oid);
+ if (GSS_ERROR(major))
goto cleanup;
keyinfo.value = oid.elements;
keyinfo.length = oid.length;
-
- major_status = generic_gss_add_buffer_set_member(minor_status, &keyinfo, data_set);
- if (GSS_ERROR(major_status))
+ major = generic_gss_add_buffer_set_member(minor_status, &keyinfo,
+ data_set);
+ if (GSS_ERROR(major))
goto cleanup;
return GSS_S_COMPLETE;
cleanup:
if (*data_set != GSS_C_NO_BUFFER_SET) {
- if ((*data_set)->count != 0)
- memset((*data_set)->elements[0].value, 0, (*data_set)->elements[0].length);
- gss_release_buffer_set(&minor, data_set);
+ if ((*data_set)->count != 0) {
+ zap((*data_set)->elements[0].value,
+ (*data_set)->elements[0].length);
+ }
+ gss_release_buffer_set(&tmpmin, data_set);
}
- return major_status;
+ return major;
+}
+
+OM_uint32
+gss_krb5int_inq_sspi_session_key(OM_uint32 *minor_status,
+ const gss_ctx_id_t context_handle,
+ const gss_OID desired_object,
+ gss_buffer_set_t *data_set)
+{
+ krb5_gss_ctx_id_t ctx = (krb5_gss_ctx_id_t)context_handle;
+ krb5_key key;
+
+ if (ctx->terminated || !ctx->established) {
+ *minor_status = KG_CTX_INCOMPLETE;
+ return GSS_S_NO_CONTEXT;
+ }
+ key = ctx->have_acceptor_subkey ? ctx->acceptor_subkey : ctx->subkey;
+ return inq_session_key_result(minor_status, key, data_set);
+}
+
+OM_uint32
+gss_krb5int_inq_odbc_session_key(OM_uint32 *minor_status,
+ const gss_ctx_id_t context_handle,
+ const gss_OID desired_object,
+ gss_buffer_set_t *data_set)
+{
+ OM_uint32 major;
+ krb5_error_code ret;
+ krb5_gss_ctx_id_t ctx = (krb5_gss_ctx_id_t)context_handle;
+ krb5_key key;
+
+ if (ctx->terminated || !ctx->established) {
+ *minor_status = KG_CTX_INCOMPLETE;
+ return GSS_S_NO_CONTEXT;
+ }
+
+ ret = krb5_auth_con_getkey_k(ctx->k5_context, ctx->auth_context, &key);
+ if (ret) {
+ *minor_status = ret;
+ return GSS_S_FAILURE;
+ }
+
+ major = inq_session_key_result(minor_status, key, data_set);
+ krb5_k_free_key(ctx->k5_context, key);
+ return major;
}
OM_uint32
}
if (cred->expire != 0) {
- lifetime = ts_delta(cred->expire, now);
+ lifetime = ts_interval(now, cred->expire);
if (lifetime < 0)
lifetime = 0;
}
* tlen is the length of the token
* including header. */
unsigned int conflen=0, tmsglen, tlen, msglen;
- unsigned char *t, *ptr;
+ unsigned char *t, *metadata, *checksum, *payload;
unsigned char *plain;
unsigned char pad;
krb5_keyusage sign_usage = KG_USAGE_SIGN;
-
+ struct k5buf buf;
assert((!do_encrypt) || (toktype == KG_TOK_SEAL_MSG));
/* create the token buffer */
msglen = text->length;
pad = 0;
}
- tlen = g_token_size((gss_OID) oid, 14+cksum_size+tmsglen);
- if ((t = (unsigned char *) gssalloc_malloc(tlen)) == NULL)
+ tlen = g_token_size(oid, 14 + cksum_size + tmsglen);
+ t = gssalloc_malloc(tlen);
+ if (t == NULL)
return(ENOMEM);
+ k5_buf_init_fixed(&buf, t, tlen);
/*** fill in the token */
- ptr = t;
- g_make_token_header(oid, 14+cksum_size+tmsglen, &ptr, toktype);
+ g_make_token_header(&buf, oid, 14 + cksum_size + tmsglen, toktype);
+ metadata = k5_buf_get_space(&buf, 14);
+ checksum = k5_buf_get_space(&buf, cksum_size);
+ payload = k5_buf_get_space(&buf, tmsglen);
+ assert(metadata != NULL && checksum != NULL && payload != NULL);
+ assert(buf.len == tlen);
/* 0..1 SIGN_ALG */
- store_16_le(signalg, &ptr[0]);
+ store_16_le(signalg, &metadata[0]);
/* 2..3 SEAL_ALG or Filler */
if ((toktype == KG_TOK_SEAL_MSG) && do_encrypt) {
- store_16_le(sealalg, &ptr[2]);
+ store_16_le(sealalg, &metadata[2]);
} else {
/* No seal */
- ptr[2] = 0xff;
- ptr[3] = 0xff;
+ metadata[2] = 0xFF;
+ metadata[3] = 0xFF;
}
/* 4..5 Filler */
- ptr[4] = 0xff;
- ptr[5] = 0xff;
+ metadata[4] = 0xFF;
+ metadata[5] = 0xFF;
/* pad the plaintext, encrypt if needed, and stick it in the token */
gssalloc_free(t);
return(ENOMEM);
}
- (void) memcpy(data_ptr, ptr-2, 8);
- (void) memcpy(data_ptr+8, plain, msglen);
+ /* Checksum over the token ID, metadata bytes, and plaintext. */
+ memcpy(data_ptr, metadata - 2, 8);
+ memcpy(data_ptr + 8, plain, msglen);
plaind.length = 8 + msglen;
plaind.data = data_ptr;
code = krb5_k_make_checksum(context, md5cksum.checksum_type, seq,
*/
if (md5cksum.length != cksum_size)
abort ();
- memcpy (ptr+14, md5cksum.contents, md5cksum.length);
+ memcpy(checksum, md5cksum.contents, md5cksum.length);
break;
case SGN_ALG_HMAC_MD5:
- memcpy (ptr+14, md5cksum.contents, cksum_size);
+ memcpy(checksum, md5cksum.contents, cksum_size);
break;
}
/* create the seq_num */
- if ((code = kg_make_seq_num(context, seq, direction?0:0xff,
- (krb5_ui_4)*seqnum, ptr+14, ptr+6))) {
+ code = kg_make_seq_num(context, seq, direction?0:0xff,
+ (krb5_ui_4)*seqnum, checksum, metadata + 6);
+ if (code) {
xfree (plain);
gssalloc_free(t);
return(code);
assert (enc_key->length == 16);
for (i = 0; i <= 15; i++)
((char *) enc_key->contents)[i] ^=0xf0;
- code = kg_arcfour_docrypt (enc_key, 0,
- bigend_seqnum, 4,
- plain, tmsglen,
- ptr+14+cksum_size);
+ code = kg_arcfour_docrypt(enc_key, 0, bigend_seqnum, 4, plain,
+ tmsglen, payload);
krb5_free_keyblock (context, enc_key);
if (code)
{
}
break;
default:
- if ((code = kg_encrypt(context, enc, KG_USAGE_SEAL, NULL,
- (krb5_pointer) plain,
- (krb5_pointer) (ptr+cksum_size+14),
- tmsglen))) {
+ code = kg_encrypt(context, enc, KG_USAGE_SEAL, NULL, plain,
+ payload, tmsglen);
+ if (code) {
xfree(plain);
gssalloc_free(t);
return(code);
}
}else {
if (tmsglen)
- memcpy(ptr+14+cksum_size, plain, tmsglen);
+ memcpy(payload, plain, tmsglen);
}
xfree(plain);
krb5_checksum cksum;
size_t k5_headerlen = 0, k5_trailerlen = 0;
size_t data_length = 0, assoc_data_length = 0;
- size_t tmsglen = 0, tlen;
- unsigned char *ptr;
+ size_t tmsglen = 0, cnflen = 0, tlen;
+ uint8_t *metadata, *checksum, *confounder;
krb5_keyusage sign_usage = KG_USAGE_SIGN;
+ struct k5buf buf;
md5cksum.length = cksum.length = 0;
md5cksum.contents = cksum.contents = NULL;
trailer->buffer.length = 0;
/* Determine confounder length */
- if (toktype == KG_TOK_WRAP_MSG || conf_req_flag)
- k5_headerlen = kg_confounder_size(context, ctx->enc->keyblock.enctype);
-
- /* Check padding length */
if (toktype == KG_TOK_WRAP_MSG) {
size_t k5_padlen = (ctx->sealalg == SEAL_ALG_MICROSOFT_RC4) ? 1 : 8;
size_t gss_padlen;
size_t conf_data_length;
+ cnflen = kg_confounder_size(context, ctx->enc->keyblock.enctype);
+
kg_iov_msglen(iov, iov_count, &data_length, &assoc_data_length);
- conf_data_length = k5_headerlen + data_length - assoc_data_length;
+ conf_data_length = cnflen + data_length - assoc_data_length;
if (k5_padlen == 1)
gss_padlen = 1; /* one byte to indicate one byte of padding */
}
if (ctx->gss_flags & GSS_C_DCE_STYLE)
- tmsglen = k5_headerlen; /* confounder length */
+ tmsglen = cnflen; /* confounder length */
else
tmsglen = conf_data_length + padding->buffer.length;
}
/* Determine token size */
tlen = g_token_size(ctx->mech_used, 14 + ctx->cksum_size + tmsglen);
- k5_headerlen += tlen - tmsglen;
+ k5_headerlen = cnflen + tlen - tmsglen;
if (header->type & GSS_IOV_BUFFER_FLAG_ALLOCATE)
code = kg_allocate_iov(header, k5_headerlen);
header->buffer.length = k5_headerlen;
- ptr = (unsigned char *)header->buffer.value;
- g_make_token_header(ctx->mech_used, 14 + ctx->cksum_size + tmsglen, &ptr, toktype);
+ k5_buf_init_fixed(&buf, header->buffer.value, k5_headerlen);
+ g_make_token_header(&buf, ctx->mech_used, 14 + ctx->cksum_size + tmsglen,
+ toktype);
+ metadata = k5_buf_get_space(&buf, 14);
+ checksum = k5_buf_get_space(&buf, ctx->cksum_size);
+ assert(metadata != NULL && checksum != NULL);
/* 0..1 SIGN_ALG */
- store_16_le(ctx->signalg, &ptr[0]);
+ store_16_le(ctx->signalg, &metadata[0]);
/* 2..3 SEAL_ALG or Filler */
if (toktype == KG_TOK_WRAP_MSG && conf_req_flag) {
- store_16_le(ctx->sealalg, &ptr[2]);
+ store_16_le(ctx->sealalg, &metadata[2]);
} else {
/* No seal */
- ptr[2] = 0xFF;
- ptr[3] = 0xFF;
+ metadata[2] = 0xFF;
+ metadata[3] = 0xFF;
}
/* 4..5 Filler */
- ptr[4] = 0xFF;
- ptr[5] = 0xFF;
+ metadata[4] = 0xFF;
+ metadata[5] = 0xFF;
/* pad the plaintext, encrypt if needed, and stick it in the token */
md5cksum.length = k5_trailerlen;
if (k5_headerlen != 0 && toktype == KG_TOK_WRAP_MSG) {
+ confounder = k5_buf_get_space(&buf, cnflen);
+ assert(confounder != NULL);
code = kg_make_confounder(context, ctx->enc->keyblock.enctype,
- ptr + 14 + ctx->cksum_size);
+ confounder);
if (code != 0)
goto cleanup;
}
switch (ctx->signalg) {
case SGN_ALG_HMAC_SHA1_DES3_KD:
assert(md5cksum.length == ctx->cksum_size);
- memcpy(ptr + 14, md5cksum.contents, md5cksum.length);
+ memcpy(checksum, md5cksum.contents, md5cksum.length);
break;
case SGN_ALG_HMAC_MD5:
- memcpy(ptr + 14, md5cksum.contents, ctx->cksum_size);
+ memcpy(checksum, md5cksum.contents, ctx->cksum_size);
break;
}
/* create the seq_num */
code = kg_make_seq_num(context, ctx->seq, ctx->initiate ? 0 : 0xFF,
- (OM_uint32)ctx->seq_send, ptr + 14, ptr + 6);
+ (OM_uint32)ctx->seq_send, checksum, metadata + 6);
if (code != 0)
goto cleanup;
if (code != 0)
goto cleanup;
- *time_rec = ts_delta(cred->expire, now);
+ *time_rec = ts_interval(now, cred->expire);
}
major_status = GSS_S_COMPLETE;
gss_channel_bindings_t cb;
krb5_checksum *cksum;
{
- size_t len;
- char *buf = 0;
- char *ptr;
+ struct k5buf buf;
size_t sumlen;
krb5_data plaind;
krb5_error_code code;
return(0);
}
- /* create the buffer to checksum into */
-
- len = (sizeof(krb5_int32)*5+
- cb->initiator_address.length+
- cb->acceptor_address.length+
- cb->application_data.length);
-
- if ((buf = (char *) xmalloc(len)) == NULL)
- return(ENOMEM);
-
- /* helper macros. This code currently depends on a long being 32
- bits, and htonl dtrt. */
-
- ptr = buf;
-
- TWRITE_INT(ptr, cb->initiator_addrtype, 0);
- TWRITE_BUF(ptr, cb->initiator_address, 0);
- TWRITE_INT(ptr, cb->acceptor_addrtype, 0);
- TWRITE_BUF(ptr, cb->acceptor_address, 0);
- TWRITE_BUF(ptr, cb->application_data, 0);
+ k5_buf_init_dynamic(&buf);
+ k5_buf_add_uint32_le(&buf, cb->initiator_addrtype);
+ k5_buf_add_uint32_le(&buf, cb->initiator_address.length);
+ k5_buf_add_len(&buf, cb->initiator_address.value,
+ cb->initiator_address.length);
+ k5_buf_add_uint32_le(&buf, cb->acceptor_addrtype);
+ k5_buf_add_uint32_le(&buf, cb->acceptor_address.length);
+ k5_buf_add_len(&buf, cb->acceptor_address.value,
+ cb->acceptor_address.length);
+ k5_buf_add_uint32_le(&buf, cb->application_data.length);
+ k5_buf_add_len(&buf, cb->application_data.value,
+ cb->application_data.length);
+ code = k5_buf_status(&buf);
+ if (code)
+ return code;
/* checksum the data */
- plaind.length = len;
- plaind.data = buf;
-
+ plaind = make_data(buf.data, buf.len);
code = krb5_c_make_checksum(context, CKSUMTYPE_RSA_MD5, 0, 0,
&plaind, cksum);
- if (buf)
- xfree(buf);
+ k5_buf_free(&buf);
return code;
}
$(BUILDTOP)/include/gssapi/gssapi_ext.h $(COM_ERR_DEPS) \
$(srcdir)/../generic/gssapiP_generic.h $(srcdir)/../generic/gssapi_ext.h \
$(srcdir)/../generic/gssapi_generic.h $(top_srcdir)/include/k5-buf.h \
+ $(top_srcdir)/include/k5-der.h $(top_srcdir)/include/k5-input.h \
$(top_srcdir)/include/k5-platform.h $(top_srcdir)/include/k5-thread.h \
../generic/gssapi_err_generic.h g_glue.c mechglue.h \
mglueP.h
$(BUILDTOP)/include/gssapi/gssapi_alloc.h $(BUILDTOP)/include/gssapi/gssapi_ext.h \
$(COM_ERR_DEPS) $(srcdir)/../generic/gssapiP_generic.h \
$(srcdir)/../generic/gssapi_ext.h $(srcdir)/../generic/gssapi_generic.h \
- $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-platform.h \
+ $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-der.h \
+ $(top_srcdir)/include/k5-input.h $(top_srcdir)/include/k5-platform.h \
$(top_srcdir)/include/k5-thread.h ../generic/gssapi_err_generic.h \
g_imp_name.c mechglue.h mglueP.h
g_imp_sec_context.so g_imp_sec_context.po $(OUTPRE)g_imp_sec_context.$(OBJEXT): \
gss_buffer_t output_token)
{
unsigned int tokenSize;
- unsigned char *buf;
+ struct k5buf buf;
if (input_token == GSS_C_NO_BUFFER || token_oid == GSS_C_NO_OID)
return GSS_S_CALL_INACCESSIBLE_READ;
if (output_token->value == NULL)
return GSS_S_FAILURE;
- buf = output_token->value;
-
- g_make_token_header(token_oid, input_token->length, &buf, -1);
- memcpy(buf, input_token->value, input_token->length);
+ k5_buf_init_fixed(&buf, output_token->value, tokenSize);
+ g_make_token_header(&buf, token_oid, input_token->length, -1);
+ k5_buf_add_len(&buf, input_token->value, input_token->length);
+ assert(buf.len == tokenSize);
output_token->length = tokenSize;
return GSS_S_COMPLETE;
*/
#include "mglueP.h"
+#include "k5-der.h"
#include <stdio.h>
#ifdef HAVE_STDLIB_H
#include <stdlib.h>
* This file contains the support routines for the glue layer.
*/
-/*
- * get_der_length: Givin a pointer to a buffer that contains a DER encoded
- * length, decode the length updating the buffer to point to the character
- * after the DER encoding. The parameter bytes will point to the number of
- * bytes that made up the DER encoding of the length originally pointed to
- * by the buffer. Note we return -1 on error.
- */
-int
-gssint_get_der_length(unsigned char **buf, unsigned int buf_len, unsigned int *bytes)
+/* Retrieve the mechanism OID from an RFC 2743 InitialContextToken. Place
+ * the result into *oid_out, aliasing memory from token. */
+OM_uint32 gssint_get_mech_type_oid(gss_OID oid_out, gss_buffer_t token)
{
- /* p points to the beginning of the buffer */
- unsigned char *p = *buf;
- int length, new_length;
- unsigned int octets;
-
- if (buf_len < 1)
- return (-1);
-
- /* We should have at least one byte */
- *bytes = 1;
-
- /*
- * If the High order bit is not set then the length is just the value
- * of *p.
- */
- if (*p < 128) {
- *buf = p+1; /* Advance the buffer */
- return (*p); /* return the length */
- }
-
- /*
- * if the High order bit is set, then the low order bits represent
- * the number of bytes that contain the DER encoding of the length.
- */
+ struct k5input in;
- octets = *p++ & 0x7f;
- *bytes += octets;
-
- /* See if the supplied buffer contains enough bytes for the length. */
- if (octets > buf_len - 1)
- return (-1);
-
- /*
- * Calculate a multibyte length. The length is encoded as an
- * unsigned integer base 256.
- */
- for (length = 0; octets; octets--) {
- new_length = (length << 8) + *p++;
- if (new_length < length) /* overflow */
- return (-1);
- length = new_length;
- }
-
- *buf = p; /* Advance the buffer */
-
- return (length);
-}
-
-/*
- * der_length_size: Return the number of bytes to encode a given length.
- */
-unsigned int
-gssint_der_length_size(unsigned int len)
-{
- int i;
-
- if (len < 128)
- return (1);
-
- for (i = 0; len; i++) {
- len >>= 8;
- }
-
- return (i+1);
-}
-
-/*
- * put_der_length: Encode the supplied length into the buffer pointed to
- * by buf. max_length represents the maximum length of the buffer pointed
- * to by buff. We will advance buf to point to the character after the newly
- * DER encoded length. We return 0 on success or -l it the length cannot
- * be encoded in max_len characters.
- */
-int
-gssint_put_der_length(unsigned int length, unsigned char **buf, unsigned int max_len)
-{
- unsigned char *s, *p;
- unsigned int buf_len = 0;
- int i, first;
-
- /* Oops */
- if (buf == 0 || max_len < 1)
- return (-1);
-
- s = *buf;
-
- /* Single byte is the length */
- if (length < 128) {
- *s++ = length;
- *buf = s;
- return (0);
- }
-
- /* First byte contains the number of octets */
- p = s + 1;
-
- /* Running total of the DER encoding length */
- buf_len = 0;
-
- /*
- * Encode MSB first. We do the encoding by setting a shift
- * factor to MSO_BIT (24 for 32 bit words) and then shifting the length
- * by the factor. We then encode the resulting low order byte.
- * We subtract 8 from the shift factor and repeat to ecnode the next
- * byte. We stop when the shift factor is zero or we've run out of
- * buffer to encode into.
- */
- first = 0;
- for (i = MSO_BIT; i >= 0 && buf_len <= max_len; i -= 8) {
- unsigned int v;
- v = (length >> i) & 0xff;
- if ((v) || first) {
- buf_len += 1;
- *p++ = v;
- first = 1;
- }
- }
- if (i >= 0) /* buffer overflow */
- return (-1);
-
- /*
- * We go back now and set the first byte to be the length with
- * the high order bit set.
- */
- *s = buf_len | 0x80;
- *buf = p;
-
- return (0);
-}
-
-
-/*
- * glue routine for get_mech_type
- *
- */
-
-OM_uint32 gssint_get_mech_type_oid(OID, token)
- gss_OID OID;
- gss_buffer_t token;
-{
- unsigned char * buffer_ptr;
- size_t buflen, lenbytes, length, oidlen;
-
- /*
- * This routine reads the prefix of "token" in order to determine
- * its mechanism type. It assumes the encoding suggested in
- * Appendix B of RFC 1508. This format starts out as follows :
- *
- * tag for APPLICATION 0, Sequence[constructed, definite length]
- * length of remainder of token
- * tag of OBJECT IDENTIFIER
- * length of mechanism OID
- * encoding of mechanism OID
- * <the rest of the token>
- *
- * Numerically, this looks like :
- *
- * 0x60
- * <length> - could be multiple bytes
- * 0x06
- * <length> - assume only one byte, hence OID length < 127
- * <mech OID bytes>
- *
- * The routine fills in the OID value and returns an error as necessary.
- */
-
- if (OID == NULL)
- return (GSS_S_CALL_INACCESSIBLE_WRITE);
-
- if ((token == NULL) || (token->value == NULL))
- return (GSS_S_DEFECTIVE_TOKEN);
-
- /* Skip past the APP/Sequnce byte and the token length */
-
- buffer_ptr = (unsigned char *) token->value;
- buflen = token->length;
-
- if (buflen < 2 || *buffer_ptr++ != 0x60)
+ if (oid_out == NULL)
+ return (GSS_S_CALL_INACCESSIBLE_WRITE);
+ if (token == NULL || token->value == NULL)
return (GSS_S_DEFECTIVE_TOKEN);
- length = *buffer_ptr++;
- buflen -= 2;
-
- /* check if token length is null */
- if (length == 0)
- return (GSS_S_DEFECTIVE_TOKEN);
-
- if (length & 0x80) {
- lenbytes = length & 0x7f;
- if (lenbytes > 4 || lenbytes > buflen)
- return (GSS_S_DEFECTIVE_TOKEN);
- buffer_ptr += lenbytes;
- buflen -= lenbytes;
- }
- if (buflen < 2 || *buffer_ptr++ != 0x06)
+ k5_input_init(&in, token->value, token->length);
+ if (!k5_der_get_value(&in, 0x60, &in))
return (GSS_S_DEFECTIVE_TOKEN);
- oidlen = *buffer_ptr++;
- buflen -= 2;
- if (oidlen > 0x7f || oidlen > buflen)
+ if (!k5_der_get_value(&in, 0x06, &in))
return (GSS_S_DEFECTIVE_TOKEN);
-
- OID->length = oidlen;
- OID->elements = (void *) buffer_ptr;
+ oid_out->length = in.len;
+ oid_out->elements = (uint8_t *)in.ptr;
return (GSS_S_COMPLETE);
}
gss_mechanism mech;
gss_buffer_desc dispName;
gss_OID nameOid;
- unsigned char *buf = NULL;
- const unsigned char tokId[] = "\x04\x01";
- const unsigned int tokIdLen = 2;
- const int mechOidLenLen = 2, mechOidTagLen = 1, nameLenLen = 4;
- int mechOidDERLen = 0;
- int mechOidLen = 0;
+ int mech_der_len = 0;
+ struct k5buf buf;
mech = gssint_get_mechanism(mech_type);
if (!mech)
return (status);
}
- /* determine the size of the buffer needed */
- mechOidDERLen = gssint_der_length_size(mech_type->length);
- name_buf->length = tokIdLen + mechOidLenLen +
- mechOidTagLen + mechOidDERLen +
- mech_type->length +
- nameLenLen + dispName.length;
- if ((name_buf->value = (void*)gssalloc_malloc(name_buf->length)) ==
- (void*)NULL) {
+ /* Allocate space and prepare a buffer. */
+ mech_der_len = k5_der_value_len(mech_type->length);
+ name_buf->length = 2 + 2 + mech_der_len + 4 + dispName.length;
+ name_buf->value = gssalloc_malloc(name_buf->length);
+ if (name_buf->value == NULL) {
name_buf->length = 0;
(void) gss_release_buffer(&status, &dispName);
return (GSS_S_FAILURE);
}
-
- /* now create the name ..... */
- buf = (unsigned char *)name_buf->value;
- (void) memset(name_buf->value, 0, name_buf->length);
- (void) memcpy(buf, tokId, tokIdLen);
- buf += tokIdLen;
-
- /* spec allows only 2 bytes for the mech oid length */
- mechOidLen = mechOidDERLen + mechOidTagLen + mech_type->length;
- store_16_be(mechOidLen, buf);
- buf += 2;
-
- /*
- * DER Encoding of mech OID contains OID Tag (0x06), length and
- * mech OID value
- */
- *buf++ = 0x06;
- if (gssint_put_der_length(mech_type->length, &buf,
- (name_buf->length - tokIdLen -2)) != 0) {
- name_buf->length = 0;
- free(name_buf->value);
- (void) gss_release_buffer(&status, &dispName);
- return (GSS_S_FAILURE);
- }
-
- (void) memcpy(buf, mech_type->elements, mech_type->length);
- buf += mech_type->length;
-
- /* spec designates the next 4 bytes for the name length */
- store_32_be(dispName.length, buf);
- buf += 4;
-
- /* for the final ingredient - add the name from gss_display_name */
- (void) memcpy(buf, dispName.value, dispName.length);
+ k5_buf_init_fixed(&buf, name_buf->value, name_buf->length);
+
+ /* Assemble the name. */
+ k5_buf_add_len(&buf, "\x04\x01", 2);
+ k5_buf_add_uint16_be(&buf, mech_der_len);
+ k5_der_add_value(&buf, 0x06, mech_type->elements, mech_type->length);
+ k5_buf_add_uint32_be(&buf, dispName.length);
+ k5_buf_add_len(&buf, dispName.value, dispName.length);
+ assert(buf.len == name_buf->length);
/* release the buffer obtained from gss_display_name */
(void) gss_release_buffer(minor_status, &dispName);
*/
#include "mglueP.h"
+#include "k5-der.h"
#include <stdio.h>
#ifdef HAVE_STDLIB_H
#include <stdlib.h>
return (major_status);
}
-/*
- * GSS export name constants
- */
-static const unsigned int expNameTokIdLen = 2;
-static const unsigned int mechOidLenLen = 2;
-static const unsigned int nameTypeLenLen = 2;
-
static OM_uint32
importExportName(minor, unionName, inputNameType)
OM_uint32 *minor;
{
gss_OID_desc mechOid;
gss_buffer_desc expName;
- unsigned char *buf;
gss_mechanism mech;
- OM_uint32 major, mechOidLen, nameLen, curLength;
- unsigned int bytes;
+ OM_uint32 major, mechOidLen, nameLen;
+ uint8_t b2;
+ const uint8_t *name;
+ struct k5input in, oid, old_format;
expName.value = unionName->external_name->value;
expName.length = unionName->external_name->length;
+ k5_input_init(&in, expName.value, expName.length);
- curLength = expNameTokIdLen + mechOidLenLen;
- if (expName.length < curLength)
+ if (k5_input_get_byte(&in) != 0x04)
return (GSS_S_DEFECTIVE_TOKEN);
-
- buf = (unsigned char *)expName.value;
- if (buf[0] != 0x04)
- return (GSS_S_DEFECTIVE_TOKEN);
- if (buf[1] != 0x01 && buf[1] != 0x02) /* allow composite names */
+ b2 = k5_input_get_byte(&in);
+ if (b2 != 0x01 && b2 != 0x02) /* allow composite names */
return (GSS_S_DEFECTIVE_TOKEN);
- buf += expNameTokIdLen;
+ mechOidLen = k5_input_get_uint16_be(&in);
- /* extract the mechanism oid length */
- mechOidLen = (*buf++ << 8);
- mechOidLen |= (*buf++);
- curLength += mechOidLen;
- if (expName.length < curLength)
+ if (!k5_der_get_value(&in, 0x06, &oid))
return (GSS_S_DEFECTIVE_TOKEN);
- /*
- * The mechOid itself is encoded in DER format, OID Tag (0x06)
- * length and the value of mech_OID
- */
- if (*buf++ != 0x06)
- return (GSS_S_DEFECTIVE_TOKEN);
-
- /*
- * mechoid Length is encoded twice; once in 2 bytes as
- * explained in RFC2743 (under mechanism independent exported
- * name object format) and once using DER encoding
- *
- * We verify both lengths.
- */
-
- mechOid.length = gssint_get_der_length(&buf,
- (expName.length - curLength), &bytes);
- mechOid.elements = (void *)buf;
-
- /*
- * 'bytes' is the length of the DER length, '1' is for the DER
- * tag for OID
- */
- if ((bytes + mechOid.length + 1) != mechOidLen)
+ /* Verify that mechOidLen is consistent with the DER OID length. */
+ if (mechOidLen != k5_der_value_len(oid.len))
return (GSS_S_DEFECTIVE_TOKEN);
-
- buf += mechOid.length;
+ mechOid.length = oid.len;
+ mechOid.elements = (uint8_t *)oid.ptr;
if ((mech = gssint_get_mechanism(&mechOid)) == NULL)
return (GSS_S_BAD_MECH);
* that included a null terminator which was counted in the
* display name gss_buffer_desc.
*/
- curLength += 4; /* 4 bytes for name len */
- if (expName.length < curLength)
- return (GSS_S_DEFECTIVE_TOKEN);
/* next 4 bytes in the name are the name length */
- nameLen = load_32_be(buf);
- buf += 4;
-
- /*
- * we use < here because bad code in rpcsec_gss rounds up exported
- * name token lengths and pads with nulls, otherwise != would be
- * appropriate
- */
- curLength += nameLen; /* this is the total length */
- if (expName.length < curLength)
+ nameLen = k5_input_get_uint32_be(&in);
+ name = k5_input_get_bytes(&in, nameLen);
+ if (name == NULL)
return (GSS_S_DEFECTIVE_TOKEN);
/*
* and length) there's the name itself, though null-terminated;
* this null terminator should also not be there, but it is.
*/
- if (nameLen > 0 && *buf == '\0') {
+ if (nameLen > 0 && *name == '\0') {
OM_uint32 nameTypeLen;
- /* next two bytes are the name oid */
- if (nameLen < nameTypeLenLen)
- return (GSS_S_DEFECTIVE_TOKEN);
-
- nameLen -= nameTypeLenLen;
- nameTypeLen = (*buf++) << 8;
- nameTypeLen |= (*buf++);
-
- if (nameLen < nameTypeLen)
+ /* Skip the name type. */
+ k5_input_init(&old_format, name, nameLen);
+ nameTypeLen = k5_input_get_uint16_be(&old_format);
+ if (k5_input_get_bytes(&old_format, nameTypeLen) == NULL)
return (GSS_S_DEFECTIVE_TOKEN);
-
- buf += nameTypeLen;
- nameLen -= nameTypeLen;
-
- /*
- * adjust for expected null terminator that should
- * really not be there
- */
- if (nameLen > 0 && *(buf + nameLen - 1) == '\0')
- nameLen--;
+ /* Remove a null terminator if one is present. */
+ if (old_format.len > 0 && old_format.ptr[old_format.len - 1] == 0)
+ old_format.len--;
+ name = old_format.ptr;
+ nameLen = old_format.len;
}
/*
* IDN is thrown in with Kerberos V extensions).
*/
expName.length = nameLen;
- expName.value = nameLen ? (void *)buf : NULL;
+ expName.value = nameLen ? (uint8_t *)name : NULL;
if (mech->gssspi_import_name_by_mech) {
major = mech->gssspi_import_name_by_mech(minor, &mechOid, &expName,
GSS_C_NULL_OID,
* Sun extensions to GSS-API v2
*/
-int
-gssint_get_der_length(
- unsigned char **, /* buf */
- unsigned int, /* buf_len */
- unsigned int * /* bytes */
-);
-
-unsigned int
-gssint_der_length_size(unsigned int /* len */);
-
-int
-gssint_put_der_length(
- unsigned int, /* length */
- unsigned char **, /* buf */
- unsigned int /* max_len */
-);
-
OM_uint32
gssint_wrap_aead (gss_mechanism, /* mech */
OM_uint32 *, /* minor_status */
$(BUILDTOP)/include/profile.h $(COM_ERR_DEPS) $(srcdir)/../generic/gssapiP_generic.h \
$(srcdir)/../generic/gssapi_ext.h $(srcdir)/../generic/gssapi_generic.h \
$(srcdir)/../mechglue/mechglue.h $(srcdir)/../mechglue/mglueP.h \
- $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-err.h \
- $(top_srcdir)/include/k5-gmt_mktime.h $(top_srcdir)/include/k5-int-pkinit.h \
+ $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-der.h \
+ $(top_srcdir)/include/k5-err.h $(top_srcdir)/include/k5-gmt_mktime.h \
+ $(top_srcdir)/include/k5-input.h $(top_srcdir)/include/k5-int-pkinit.h \
$(top_srcdir)/include/k5-int.h $(top_srcdir)/include/k5-platform.h \
$(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-queue.h \
$(top_srcdir)/include/k5-thread.h $(top_srcdir)/include/k5-trace.h \
k5_buf_init_dynamic(&buf);
add_guid(&buf, guid);
- return buf.data;
+ return k5_buf_cstring(&buf);
}
/* Check that the described vector lies within the message, and return a
if (i + 1 < msg->u.n.nschemes)
k5_buf_add(&buf, " ");
}
- info = buf.data;
+ info = k5_buf_cstring(&buf);
} else if (msg->type == INITIATOR_META_DATA ||
msg->type == ACCEPTOR_META_DATA ||
msg->type == CHALLENGE || msg->type == AP_REQUEST) {
if (buf.len > 0) {
k5_buf_truncate(&buf, buf.len - 1);
- TRACE_NEGOEX_OUTGOING(ctx->kctx, seqnum, typestr(type), buf.data);
+ TRACE_NEGOEX_OUTGOING(ctx->kctx, seqnum, typestr(type),
+ k5_buf_cstring(&buf));
k5_buf_free(&buf);
}
}
/* #pragma ident "@(#)spnego_mech.c 1.7 04/09/28 SMI" */
#include <k5-int.h>
+#include <k5-der.h>
#include <krb5.h>
#include <mglueP.h>
#include "gssapiP_spnego.h"
#include <gssapi_err_generic.h>
-#undef g_token_size
-#undef g_verify_token_header
-#undef g_make_token_header
-
#define HARD_ERROR(v) ((v) != GSS_S_COMPLETE && (v) != GSS_S_CONTINUE_NEEDED)
typedef const gss_OID_desc *gss_OID_const;
-/* der routines defined in libgss */
-extern unsigned int gssint_der_length_size(unsigned int);
-extern int gssint_get_der_length(unsigned char **, unsigned int,
- unsigned int*);
-extern int gssint_put_der_length(unsigned int, unsigned char **, unsigned int);
-
-
/* private routines for spnego_mechanism */
static spnego_token_t make_spnego_token(const char *);
static gss_buffer_desc make_err_msg(const char *);
-static int g_token_size(gss_OID_const, unsigned int);
-static int g_make_token_header(gss_OID_const, unsigned int,
- unsigned char **, unsigned int);
-static int g_verify_token_header(gss_OID_const, unsigned int *,
- unsigned char **,
- int, unsigned int);
-static int g_verify_neg_token_init(unsigned char **, unsigned int);
-static gss_OID get_mech_oid(OM_uint32 *, unsigned char **, size_t);
-static gss_buffer_t get_input_token(unsigned char **, unsigned int);
-static gss_OID_set get_mech_set(OM_uint32 *, unsigned char **, unsigned int);
-static OM_uint32 get_req_flags(unsigned char **, OM_uint32, OM_uint32 *);
+static int verify_token_header(struct k5input *, gss_OID_const);
+static gss_OID get_mech_oid(OM_uint32 *minor_status, struct k5input *);
+static gss_buffer_t get_octet_string(struct k5input *);
+static gss_OID_set get_mech_set(OM_uint32 *, struct k5input *);
+static OM_uint32 get_req_flags(struct k5input *, OM_uint32 *);
static OM_uint32 get_available_mechs(OM_uint32 *, gss_name_t, gss_cred_usage_t,
gss_const_key_value_set_t,
gss_cred_id_t *, gss_OID_set *,
static void release_spnego_ctx(spnego_gss_ctx_id_t *);
static spnego_gss_ctx_id_t create_spnego_ctx(int);
static int put_mech_set(gss_OID_set mechSet, gss_buffer_t buf);
-static int put_input_token(unsigned char **, gss_buffer_t, unsigned int);
-static int put_mech_oid(unsigned char **, gss_OID_const, unsigned int);
-static int put_negResult(unsigned char **, OM_uint32, unsigned int);
static OM_uint32
process_mic(OM_uint32 *, gss_buffer_t, spnego_gss_ctx_id_t,
static gss_OID
negotiate_mech(spnego_gss_ctx_id_t, gss_OID_set, OM_uint32 *);
-static int
-g_get_tag_and_length(unsigned char **, int, unsigned int, unsigned int *);
static int
make_spnego_tokenInit_msg(spnego_gss_ctx_id_t,
gss_buffer_t,
OM_uint32, gss_buffer_t, send_token_flag,
gss_buffer_t);
-static int
-make_spnego_tokenTarg_msg(OM_uint32, gss_OID, gss_buffer_t,
+static OM_uint32
+make_spnego_tokenTarg_msg(uint8_t, gss_OID, gss_buffer_t,
gss_buffer_t, send_token_flag,
gss_buffer_t);
gss_OID_set *, OM_uint32 *, gss_buffer_t *,
gss_buffer_t *);
static OM_uint32
-get_negTokenResp(OM_uint32 *, unsigned char *, unsigned int,
- OM_uint32 *, gss_OID *, gss_buffer_t *, gss_buffer_t *);
+get_negTokenResp(OM_uint32 *, struct k5input *, OM_uint32 *, gss_OID *,
+ gss_buffer_t *, gss_buffer_t *);
static int
is_kerb_mech(gss_OID oid);
static gss_OID_desc negoex_mech = { NEGOEX_OID_LENGTH, NEGOEX_OID };
static int make_NegHints(OM_uint32 *, gss_buffer_t *);
-static int put_neg_hints(unsigned char **, gss_buffer_t, unsigned int);
static OM_uint32
acc_ctx_hints(OM_uint32 *, spnego_gss_cred_id_t, gss_buffer_t *, OM_uint32 *,
send_token_flag *, spnego_gss_ctx_id_t *);
send_token_flag *tokflag)
{
OM_uint32 ret, tmpmin;
- unsigned char *ptr;
gss_OID supportedMech = GSS_C_NO_OID;
+ struct k5input in;
*acc_negState = UNSPECIFIED;
*tokflag = ERROR_TOKEN_SEND;
- ptr = buf->value;
- ret = get_negTokenResp(minor_status, ptr, buf->length, acc_negState,
- &supportedMech, responseToken, mechListMIC);
+ k5_input_init(&in, buf->value, buf->length);
+ ret = get_negTokenResp(minor_status, &in, acc_negState, &supportedMech,
+ responseToken, mechListMIC);
if (ret != GSS_S_COMPLETE)
goto cleanup;
{ 9, "\052\206\110\202\367\022\001\002\002" };
/*
- * verify that the input token length is not 0. If it is, just return.
- * If the token length is greater than 0, der encode as a sequence
- * and place in buf_out, advancing buf_out.
- */
-
-static int
-put_neg_hints(unsigned char **buf_out, gss_buffer_t input_token,
- unsigned int buflen)
-{
- int ret;
-
- /* if token length is 0, we do not want to send */
- if (input_token->length == 0)
- return (0);
-
- if (input_token->length > buflen)
- return (-1);
-
- *(*buf_out)++ = SEQUENCE;
- if ((ret = gssint_put_der_length(input_token->length, buf_out,
- input_token->length)))
- return (ret);
- TWRITE_STR(*buf_out, input_token->value, input_token->length);
- return (0);
-}
-
-/*
* NegHints ::= SEQUENCE {
* hintName [0] GeneralString OPTIONAL,
* hintAddress [1] OCTET STRING OPTIONAL
make_NegHints(OM_uint32 *minor_status, gss_buffer_t *outbuf)
{
OM_uint32 major_status;
- unsigned int tlen = 0;
- unsigned int hintNameSize = 0;
- unsigned char *ptr;
- unsigned char *t;
+ size_t hint_len, tlen;
+ uint8_t *t;
const char *hintname = "not_defined_in_RFC4178@please_ignore";
const size_t hintname_len = strlen(hintname);
+ struct k5buf buf;
*outbuf = GSS_C_NO_BUFFER;
major_status = GSS_S_FAILURE;
- /* Length of DER encoded GeneralString */
- tlen = 1 + gssint_der_length_size(hintname_len) + hintname_len;
- hintNameSize = tlen;
-
- /* Length of DER encoded hintName */
- tlen += 1 + gssint_der_length_size(hintNameSize);
+ hint_len = k5_der_value_len(hintname_len);
+ tlen = k5_der_value_len(hint_len);
t = gssalloc_malloc(tlen);
if (t == NULL) {
*minor_status = ENOMEM;
goto errout;
}
+ k5_buf_init_fixed(&buf, t, tlen);
- ptr = t;
-
- *ptr++ = CONTEXT | 0x00; /* hintName identifier */
- if (gssint_put_der_length(hintNameSize,
- &ptr, tlen - (int)(ptr-t)))
- goto errout;
-
- *ptr++ = GENERAL_STRING;
- if (gssint_put_der_length(hintname_len, &ptr, tlen - (int)(ptr-t)))
- goto errout;
-
- memcpy(ptr, hintname, hintname_len);
- ptr += hintname_len;
+ k5_der_add_taglen(&buf, CONTEXT | 0x00, hint_len);
+ k5_der_add_value(&buf, GENERAL_STRING, hintname, hintname_len);
+ assert(buf.len == tlen);
*outbuf = (gss_buffer_t)malloc(sizeof(gss_buffer_desc));
if (*outbuf == NULL) {
goto errout;
}
(*outbuf)->value = (void *)t;
- (*outbuf)->length = ptr - t;
+ (*outbuf)->length = tlen;
t = NULL; /* don't free */
{
OM_uint32 ret, tmpmin;
gss_OID supportedMech;
- unsigned int len;
- unsigned char *ptr, *bufstart;
+ struct k5input in;
ret = GSS_S_DEFECTIVE_TOKEN;
*negState = REJECT;
*return_token = ERROR_TOKEN_SEND;
*responseToken = *mechListMIC = GSS_C_NO_BUFFER;
- ptr = bufstart = buf->value;
-#define REMAIN (buf->length - (ptr - bufstart))
- if (REMAIN == 0 || REMAIN > INT_MAX)
- return GSS_S_DEFECTIVE_TOKEN;
+ k5_input_init(&in, buf->value, buf->length);
- /*
- * Attempt to work with old Sun SPNEGO.
- */
- if (*ptr == HEADER_ID) {
- ret = g_verify_token_header(gss_mech_spnego,
- &len, &ptr, 0, REMAIN);
+ /* Attempt to work with old Sun SPNEGO. */
+ if (in.len > 0 && *in.ptr == HEADER_ID) {
+ ret = verify_token_header(&in, gss_mech_spnego);
if (ret) {
*minstat = ret;
return GSS_S_DEFECTIVE_TOKEN;
}
}
- if (*ptr != (CONTEXT | 0x01)) {
- return GSS_S_DEFECTIVE_TOKEN;
- }
- ret = get_negTokenResp(minstat, ptr, REMAIN,
- negState, &supportedMech,
+
+ ret = get_negTokenResp(minstat, &in, negState, &supportedMech,
responseToken, mechListMIC);
if (ret != GSS_S_COMPLETE)
goto cleanup;
generic_gss_release_oid(&tmpmin, &supportedMech);
}
return ret;
-#undef REMAIN
}
/*
/* following are token creation and reading routines */
/*
- * If buff_in is not pointing to a MECH_OID, then return NULL and do not
- * advance the buffer, otherwise, decode the mech_oid from the buffer and
- * place in gss_OID.
+ * If in contains a tagged OID encoding, return a copy of the contents as a
+ * gss_OID and advance in past the encoding. Otherwise return NULL and do not
+ * advance in.
*/
static gss_OID
-get_mech_oid(OM_uint32 *minor_status, unsigned char **buff_in, size_t length)
+get_mech_oid(OM_uint32 *minor_status, struct k5input *in)
{
- OM_uint32 status;
- gss_OID_desc toid;
- gss_OID mech_out = NULL;
- unsigned int bytes;
- int oid_length;
-
- if (length < 1 || **buff_in != MECH_OID)
- return (NULL);
- (*buff_in)++;
- length--;
+ struct k5input oidrep;
+ OM_uint32 status;
+ gss_OID_desc oid;
+ gss_OID mech_out = NULL;
- oid_length = gssint_get_der_length(buff_in, length, &bytes);
- if (oid_length < 0 || length - bytes < (size_t)oid_length)
+ if (!k5_der_get_value(in, MECH_OID, &oidrep))
return (NULL);
- toid.length = oid_length;
- toid.elements = *buff_in;
- *buff_in += toid.length;
-
- status = generic_gss_copy_oid(minor_status, &toid, &mech_out);
-
+ oid.length = oidrep.len;
+ oid.elements = (uint8_t *)oidrep.ptr;
+ status = generic_gss_copy_oid(minor_status, &oid, &mech_out);
if (status != GSS_S_COMPLETE) {
map_errcode(minor_status);
mech_out = NULL;
}
/*
- * der encode the given mechanism oid into buf_out, advancing the
- * buffer pointer.
- */
-
-static int
-put_mech_oid(unsigned char **buf_out, gss_OID_const mech, unsigned int buflen)
-{
- if (buflen < mech->length + 2)
- return (-1);
- *(*buf_out)++ = MECH_OID;
- *(*buf_out)++ = (unsigned char) mech->length;
- memcpy(*buf_out, mech->elements, mech->length);
- *buf_out += mech->length;
- return (0);
-}
-
-/*
- * verify that buff_in points to an octet string, if it does not,
- * return NULL and don't advance the pointer. If it is an octet string
- * decode buff_in into a gss_buffer_t and return it, advancing the
- * buffer pointer.
+ * If in contains a tagged octet string encoding, return a copy of the contents
+ * as a gss_buffer_t and advance in past the encoding. Otherwise return NULL
+ * and do not advance in.
*/
static gss_buffer_t
-get_input_token(unsigned char **buff_in, unsigned int buff_length)
+get_octet_string(struct k5input *in)
{
gss_buffer_t input_token;
- unsigned int len;
+ struct k5input ostr;
- if (g_get_tag_and_length(buff_in, OCTET_STRING, buff_length, &len) < 0)
+ if (!k5_der_get_value(in, OCTET_STRING, &ostr))
return (NULL);
input_token = (gss_buffer_t)malloc(sizeof (gss_buffer_desc));
if (input_token == NULL)
return (NULL);
- input_token->length = len;
+ input_token->length = ostr.len;
if (input_token->length > 0) {
input_token->value = gssalloc_malloc(input_token->length);
if (input_token->value == NULL) {
return (NULL);
}
- memcpy(input_token->value, *buff_in, input_token->length);
+ memcpy(input_token->value, ostr.ptr, input_token->length);
} else {
input_token->value = NULL;
}
- *buff_in += input_token->length;
return (input_token);
}
/*
- * verify that the input token length is not 0. If it is, just return.
- * If the token length is greater than 0, der encode as an octet string
- * and place in buf_out, advancing buf_out.
- */
-
-static int
-put_input_token(unsigned char **buf_out, gss_buffer_t input_token,
- unsigned int buflen)
-{
- int ret;
-
- /* if token length is 0, we do not want to send */
- if (input_token->length == 0)
- return (0);
-
- if (input_token->length > buflen)
- return (-1);
-
- *(*buf_out)++ = OCTET_STRING;
- if ((ret = gssint_put_der_length(input_token->length, buf_out,
- input_token->length)))
- return (ret);
- TWRITE_STR(*buf_out, input_token->value, input_token->length);
- return (0);
-}
-
-/*
* verify that buff_in points to a sequence of der encoding. The mech
* set is the only sequence of encoded object in the token, so if it is
* a sequence of encoding, decode the mechset into a gss_OID_set and
* return it, advancing the buffer pointer.
*/
static gss_OID_set
-get_mech_set(OM_uint32 *minor_status, unsigned char **buff_in,
- unsigned int buff_length)
+get_mech_set(OM_uint32 *minor_status, struct k5input *in)
{
gss_OID_set returned_mechSet;
- OM_uint32 major_status;
- int length;
- unsigned int bytes;
- OM_uint32 set_length;
- unsigned char *start;
- int i;
+ OM_uint32 major_status, tmpmin;
+ struct k5input seq;
- if (buff_length < 1 || **buff_in != SEQUENCE_OF)
+ if (!k5_der_get_value(in, SEQUENCE_OF, &seq))
return (NULL);
- start = *buff_in;
- (*buff_in)++;
-
- length = gssint_get_der_length(buff_in, buff_length - 1, &bytes);
- if (length < 0 || buff_length - 1 - bytes < (unsigned int)length)
- return NULL;
-
major_status = gss_create_empty_oid_set(minor_status,
&returned_mechSet);
if (major_status != GSS_S_COMPLETE)
return (NULL);
- for (set_length = 0, i = 0; set_length < (unsigned int)length; i++) {
- gss_OID_desc *temp = get_mech_oid(minor_status, buff_in,
- buff_length - (*buff_in - start));
- if (temp == NULL)
- break;
+ while (!seq.status && seq.len > 0) {
+ gss_OID_desc *oid = get_mech_oid(minor_status, &seq);
+
+ if (oid == NULL) {
+ gss_release_oid_set(&tmpmin, &returned_mechSet);
+ return (NULL);
+ }
major_status = gss_add_oid_set_member(minor_status,
- temp, &returned_mechSet);
- if (major_status == GSS_S_COMPLETE)
- set_length += returned_mechSet->elements[i].length +2;
- generic_gss_release_oid(minor_status, &temp);
+ oid, &returned_mechSet);
+ generic_gss_release_oid(minor_status, &oid);
+ if (major_status != GSS_S_COMPLETE) {
+ gss_release_oid_set(&tmpmin, &returned_mechSet);
+ return (NULL);
+ }
}
return (returned_mechSet);
* Encode mechSet into buf.
*/
static int
-put_mech_set(gss_OID_set mechSet, gss_buffer_t buf)
+put_mech_set(gss_OID_set mechSet, gss_buffer_t buffer_out)
{
- unsigned char *ptr;
- unsigned int i;
- unsigned int tlen, ilen;
+ uint8_t *ptr;
+ size_t ilen, tlen, i;
+ struct k5buf buf;
+
+ ilen = 0;
+ for (i = 0; i < mechSet->count; i++)
+ ilen += k5_der_value_len(mechSet->elements[i].length);
+ tlen = k5_der_value_len(ilen);
- tlen = ilen = 0;
- for (i = 0; i < mechSet->count; i++) {
- /*
- * 0x06 [DER LEN] [OID]
- */
- ilen += 1 +
- gssint_der_length_size(mechSet->elements[i].length) +
- mechSet->elements[i].length;
- }
- /*
- * 0x30 [DER LEN]
- */
- tlen = 1 + gssint_der_length_size(ilen) + ilen;
ptr = gssalloc_malloc(tlen);
if (ptr == NULL)
return -1;
+ k5_buf_init_fixed(&buf, ptr, tlen);
- buf->value = ptr;
- buf->length = tlen;
-#define REMAIN (buf->length - ((unsigned char *)buf->value - ptr))
-
- *ptr++ = SEQUENCE_OF;
- if (gssint_put_der_length(ilen, &ptr, REMAIN) < 0)
- return -1;
+ k5_der_add_taglen(&buf, SEQUENCE_OF, ilen);
for (i = 0; i < mechSet->count; i++) {
- if (put_mech_oid(&ptr, &mechSet->elements[i], REMAIN) < 0) {
- return -1;
- }
+ k5_der_add_value(&buf, MECH_OID,
+ mechSet->elements[i].elements,
+ mechSet->elements[i].length);
}
+ assert(buf.len == tlen);
+
+ buffer_out->value = ptr;
+ buffer_out->length = tlen;
return 0;
-#undef REMAIN
}
-/*
- * Verify that buff_in is pointing to a BIT_STRING with the correct
- * length and padding for the req_flags. If it is, decode req_flags
- * and return them, otherwise, return NULL.
- */
+/* Decode SPNEGO request flags from the DER encoding of a bit string and set
+ * them in *ret_flags. */
static OM_uint32
-get_req_flags(unsigned char **buff_in, OM_uint32 bodysize,
- OM_uint32 *req_flags)
+get_req_flags(struct k5input *in, OM_uint32 *req_flags)
{
- unsigned int len;
-
- if (bodysize < 1 || **buff_in != (CONTEXT | 0x01))
- return (0);
-
- if (g_get_tag_and_length(buff_in, (CONTEXT | 0x01),
- bodysize, &len) < 0 || len != 4)
+ if (in->status || in->len != 4 ||
+ k5_input_get_byte(in) != BIT_STRING ||
+ k5_input_get_byte(in) != BIT_STRING_LENGTH ||
+ k5_input_get_byte(in) != BIT_STRING_PADDING)
return GSS_S_DEFECTIVE_TOKEN;
- if (*(*buff_in)++ != BIT_STRING)
- return GSS_S_DEFECTIVE_TOKEN;
-
- if (*(*buff_in)++ != BIT_STRING_LENGTH)
- return GSS_S_DEFECTIVE_TOKEN;
-
- if (*(*buff_in)++ != BIT_STRING_PADDING)
- return GSS_S_DEFECTIVE_TOKEN;
-
- *req_flags = (OM_uint32) (*(*buff_in)++ >> 1);
- return (0);
+ *req_flags = k5_input_get_byte(in) >> 1;
+ return GSS_S_COMPLETE;
}
static OM_uint32
gss_buffer_t *mechListMIC)
{
OM_uint32 err;
- unsigned char *ptr, *bufstart;
- unsigned int len;
- gss_buffer_desc tmpbuf;
+ struct k5input in, seq, field;
*minor_status = 0;
der_mechSet->length = 0;
*req_flags = 0;
*mechtok = *mechListMIC = GSS_C_NO_BUFFER;
- ptr = bufstart = buf->value;
- if ((buf->length - (ptr - bufstart)) > INT_MAX)
- return GSS_S_FAILURE;
-#define REMAIN (buf->length - (ptr - bufstart))
+ k5_input_init(&in, buf->value, buf->length);
- err = g_verify_token_header(gss_mech_spnego,
- &len, &ptr, 0, REMAIN);
- if (err) {
- *minor_status = err;
- map_errcode(minor_status);
- return GSS_S_FAILURE;
- }
- *minor_status = g_verify_neg_token_init(&ptr, REMAIN);
- if (*minor_status) {
- map_errcode(minor_status);
- return GSS_S_FAILURE;
- }
+ /* Advance past the framing header. */
+ err = verify_token_header(&in, gss_mech_spnego);
+ if (err)
+ return GSS_S_DEFECTIVE_TOKEN;
- /* alias into input_token */
- tmpbuf.value = ptr;
- tmpbuf.length = REMAIN;
- *mechSet = get_mech_set(minor_status, &ptr, REMAIN);
- if (*mechSet == NULL)
- return GSS_S_FAILURE;
+ /* Advance past the [0] tag for the NegotiationToken choice. */
+ if (!k5_der_get_value(&in, CONTEXT, &seq))
+ return GSS_S_DEFECTIVE_TOKEN;
+
+ /* Advance past the SEQUENCE tag. */
+ if (!k5_der_get_value(&seq, SEQUENCE, &seq))
+ return GSS_S_DEFECTIVE_TOKEN;
+
+ /* Get the contents of the mechTypes field. Reject an empty field here
+ * since we musn't allocate a zero-length buffer in the next step. */
+ if (!k5_der_get_value(&seq, CONTEXT, &field) || field.len == 0)
+ return GSS_S_DEFECTIVE_TOKEN;
- tmpbuf.length = ptr - (unsigned char *)tmpbuf.value;
- der_mechSet->value = gssalloc_malloc(tmpbuf.length);
+ /* Store a copy of the contents for MIC computation. */
+ der_mechSet->value = gssalloc_malloc(field.len);
if (der_mechSet->value == NULL)
return GSS_S_FAILURE;
- memcpy(der_mechSet->value, tmpbuf.value, tmpbuf.length);
- der_mechSet->length = tmpbuf.length;
+ memcpy(der_mechSet->value, field.ptr, field.len);
+ der_mechSet->length = field.len;
- err = get_req_flags(&ptr, REMAIN, req_flags);
- if (err != GSS_S_COMPLETE) {
- return err;
+ /* Decode the contents into an OID set. */
+ *mechSet = get_mech_set(minor_status, &field);
+ if (*mechSet == NULL)
+ return GSS_S_FAILURE;
+
+ if (k5_der_get_value(&seq, CONTEXT | 0x01, &field)) {
+ err = get_req_flags(&field, req_flags);
+ if (err != GSS_S_COMPLETE)
+ return err;
}
- if (g_get_tag_and_length(&ptr, (CONTEXT | 0x02),
- REMAIN, &len) >= 0) {
- *mechtok = get_input_token(&ptr, len);
- if (*mechtok == GSS_C_NO_BUFFER) {
+
+ if (k5_der_get_value(&seq, CONTEXT | 0x02, &field)) {
+ *mechtok = get_octet_string(&field);
+ if (*mechtok == GSS_C_NO_BUFFER)
return GSS_S_FAILURE;
- }
}
- if (g_get_tag_and_length(&ptr, (CONTEXT | 0x03),
- REMAIN, &len) >= 0) {
- *mechListMIC = get_input_token(&ptr, len);
- if (*mechListMIC == GSS_C_NO_BUFFER) {
+
+ if (k5_der_get_value(&seq, CONTEXT | 0x03, &field)) {
+ *mechListMIC = get_octet_string(&field);
+ if (*mechListMIC == GSS_C_NO_BUFFER)
return GSS_S_FAILURE;
- }
}
- return GSS_S_COMPLETE;
-#undef REMAIN
+
+ return seq.status ? GSS_S_DEFECTIVE_TOKEN : GSS_S_COMPLETE;
}
+/* Decode a NegotiationToken of type negTokenResp. */
static OM_uint32
-get_negTokenResp(OM_uint32 *minor_status,
- unsigned char *buf, unsigned int buflen,
- OM_uint32 *negState,
- gss_OID *supportedMech,
- gss_buffer_t *responseToken,
- gss_buffer_t *mechListMIC)
+get_negTokenResp(OM_uint32 *minor_status, struct k5input *in,
+ OM_uint32 *negState, gss_OID *supportedMech,
+ gss_buffer_t *responseToken, gss_buffer_t *mechListMIC)
{
- unsigned char *ptr, *bufstart;
- unsigned int len;
- int tmplen;
- unsigned int tag, bytes;
+ struct k5input seq, field, en;
*negState = UNSPECIFIED;
*supportedMech = GSS_C_NO_OID;
*responseToken = *mechListMIC = GSS_C_NO_BUFFER;
- ptr = bufstart = buf;
-#define REMAIN (buflen - (ptr - bufstart))
- if (g_get_tag_and_length(&ptr, (CONTEXT | 0x01), REMAIN, &len) < 0)
+ /* Advance past the [1] tag for the NegotiationToken choice. */
+ if (!k5_der_get_value(in, CONTEXT | 0x01, &seq))
return GSS_S_DEFECTIVE_TOKEN;
- if (*ptr++ == SEQUENCE) {
- tmplen = gssint_get_der_length(&ptr, REMAIN, &bytes);
- if (tmplen < 0 || REMAIN < (unsigned int)tmplen)
- return GSS_S_DEFECTIVE_TOKEN;
- }
- if (REMAIN < 1)
- tag = 0;
- else
- tag = *ptr++;
-
- if (tag == CONTEXT) {
- tmplen = gssint_get_der_length(&ptr, REMAIN, &bytes);
- if (tmplen < 0 || REMAIN < (unsigned int)tmplen)
- return GSS_S_DEFECTIVE_TOKEN;
- if (g_get_tag_and_length(&ptr, ENUMERATED,
- REMAIN, &len) < 0)
- return GSS_S_DEFECTIVE_TOKEN;
+ /* Advance seq past the SEQUENCE tag (historically this code allows the
+ * tag to be missing). */
+ (void)k5_der_get_value(&seq, SEQUENCE, &seq);
- if (len != ENUMERATION_LENGTH)
+ if (k5_der_get_value(&seq, CONTEXT, &field)) {
+ if (!k5_der_get_value(&field, ENUMERATED, &en))
return GSS_S_DEFECTIVE_TOKEN;
-
- if (REMAIN < 1)
+ if (en.len != ENUMERATION_LENGTH)
return GSS_S_DEFECTIVE_TOKEN;
- *negState = *ptr++;
-
- if (REMAIN < 1)
- tag = 0;
- else
- tag = *ptr++;
+ *negState = *en.ptr;
}
- if (tag == (CONTEXT | 0x01)) {
- tmplen = gssint_get_der_length(&ptr, REMAIN, &bytes);
- if (tmplen < 0 || REMAIN < (unsigned int)tmplen)
- return GSS_S_DEFECTIVE_TOKEN;
- *supportedMech = get_mech_oid(minor_status, &ptr, REMAIN);
+ if (k5_der_get_value(&seq, CONTEXT | 0x01, &field)) {
+ *supportedMech = get_mech_oid(minor_status, &field);
if (*supportedMech == GSS_C_NO_OID)
return GSS_S_DEFECTIVE_TOKEN;
-
- if (REMAIN < 1)
- tag = 0;
- else
- tag = *ptr++;
}
- if (tag == (CONTEXT | 0x02)) {
- tmplen = gssint_get_der_length(&ptr, REMAIN, &bytes);
- if (tmplen < 0 || REMAIN < (unsigned int)tmplen)
- return GSS_S_DEFECTIVE_TOKEN;
- *responseToken = get_input_token(&ptr, REMAIN);
+ if (k5_der_get_value(&seq, CONTEXT | 0x02, &field)) {
+ *responseToken = get_octet_string(&field);
if (*responseToken == GSS_C_NO_BUFFER)
return GSS_S_DEFECTIVE_TOKEN;
-
- if (REMAIN < 1)
- tag = 0;
- else
- tag = *ptr++;
}
- if (tag == (CONTEXT | 0x03)) {
- tmplen = gssint_get_der_length(&ptr, REMAIN, &bytes);
- if (tmplen < 0 || REMAIN < (unsigned int)tmplen)
- return GSS_S_DEFECTIVE_TOKEN;
- *mechListMIC = get_input_token(&ptr, REMAIN);
- if (*mechListMIC == GSS_C_NO_BUFFER)
- return GSS_S_DEFECTIVE_TOKEN;
+ if (k5_der_get_value(&seq, CONTEXT | 0x04, &field)) {
+ *mechListMIC = get_octet_string(&field);
/* Handle Windows 2000 duplicate response token */
if (*responseToken &&
*mechListMIC = NULL;
}
}
- return GSS_S_COMPLETE;
-#undef REMAIN
-}
-/*
- * der encode the passed negResults as an ENUMERATED type and
- * place it in buf_out, advancing the buffer.
- */
-
-static int
-put_negResult(unsigned char **buf_out, OM_uint32 negResult,
- unsigned int buflen)
-{
- if (buflen < 3)
- return (-1);
- *(*buf_out)++ = ENUMERATED;
- *(*buf_out)++ = ENUMERATION_LENGTH;
- *(*buf_out)++ = (unsigned char) negResult;
- return (0);
+ return seq.status ? GSS_S_DEFECTIVE_TOKEN : GSS_S_COMPLETE;
}
/*
* Use DER rules, definite length method per RFC 2478
*/
static int
-make_spnego_tokenInit_msg(spnego_gss_ctx_id_t spnego_ctx,
- int negHintsCompat,
- gss_buffer_t mechListMIC, OM_uint32 req_flags,
- gss_buffer_t data, send_token_flag sendtoken,
+make_spnego_tokenInit_msg(spnego_gss_ctx_id_t spnego_ctx, int negHintsCompat,
+ gss_buffer_t mic, OM_uint32 req_flags,
+ gss_buffer_t token, send_token_flag sendtoken,
gss_buffer_t outbuf)
{
- int ret = 0;
- unsigned int tlen, dataLen = 0;
- unsigned int negTokenInitSize = 0;
- unsigned int negTokenInitSeqSize = 0;
- unsigned int negTokenInitContSize = 0;
- unsigned int rspTokenSize = 0;
- unsigned int mechListTokenSize = 0;
- unsigned int micTokenSize = 0;
- unsigned char *t;
- unsigned char *ptr;
+ size_t f0len, f2len, f3len, fields_len, seq_len, choice_len;
+ size_t mech_len, framed_len;
+ uint8_t *t;
+ struct k5buf buf;
if (outbuf == GSS_C_NO_BUFFER)
return (-1);
outbuf->length = 0;
outbuf->value = NULL;
- /* calculate the data length */
-
- /*
- * 0xa0 [DER LEN] [mechTypes]
- */
- mechListTokenSize = 1 +
- gssint_der_length_size(spnego_ctx->DER_mechTypes.length) +
- spnego_ctx->DER_mechTypes.length;
- dataLen += mechListTokenSize;
-
- /*
- * If a token from gss_init_sec_context exists,
- * add the length of the token + the ASN.1 overhead
- */
- if (data != NULL) {
- /*
- * Encoded in final output as:
- * 0xa2 [DER LEN] 0x04 [DER LEN] [DATA]
- * -----s--------|--------s2----------
- */
- rspTokenSize = 1 +
- gssint_der_length_size(data->length) +
- data->length;
- dataLen += 1 + gssint_der_length_size(rspTokenSize) +
- rspTokenSize;
- }
-
- if (mechListMIC) {
- /*
- * Encoded in final output as:
- * 0xa3 [DER LEN] 0x04 [DER LEN] [DATA]
- * --s-- -----tlen------------
- */
- micTokenSize = 1 +
- gssint_der_length_size(mechListMIC->length) +
- mechListMIC->length;
- dataLen += 1 +
- gssint_der_length_size(micTokenSize) +
- micTokenSize;
- }
-
- /*
- * Add size of DER encoding
- * [ SEQUENCE { MechTypeList | ReqFLags | Token | mechListMIC } ]
- * 0x30 [DER_LEN] [data]
- *
- */
- negTokenInitContSize = dataLen;
- negTokenInitSeqSize = 1 + gssint_der_length_size(dataLen) + dataLen;
- dataLen = negTokenInitSeqSize;
-
- /*
- * negTokenInitSize indicates the bytes needed to
- * hold the ASN.1 encoding of the entire NegTokenInit
- * SEQUENCE.
- * 0xa0 [DER_LEN] + data
- *
- */
- negTokenInitSize = 1 +
- gssint_der_length_size(negTokenInitSeqSize) +
- negTokenInitSeqSize;
-
- tlen = g_token_size(gss_mech_spnego, negTokenInitSize);
-
- t = (unsigned char *) gssalloc_malloc(tlen);
-
- if (t == NULL) {
+ /* Calculate the length of each field and the total fields length. */
+ fields_len = 0;
+ /* mechTypes [0] MechTypeList, previously assembled in spnego_ctx */
+ f0len = spnego_ctx->DER_mechTypes.length;
+ fields_len += k5_der_value_len(f0len);
+ if (token != NULL) {
+ /* mechToken [2] OCTET STRING OPTIONAL */
+ f2len = k5_der_value_len(token->length);
+ fields_len += k5_der_value_len(f2len);
+ }
+ if (mic != GSS_C_NO_BUFFER) {
+ /* mechListMIC [3] OCTET STRING OPTIONAL */
+ f3len = k5_der_value_len(mic->length);
+ fields_len += k5_der_value_len(f3len);
+ }
+
+ /* Calculate the length of the sequence and choice. */
+ seq_len = k5_der_value_len(fields_len);
+ choice_len = k5_der_value_len(seq_len);
+
+ /* Calculate the framed token length. */
+ mech_len = k5_der_value_len(gss_mech_spnego->length);
+ framed_len = k5_der_value_len(mech_len + choice_len);
+
+ /* Allocate space and prepare a buffer. */
+ t = gssalloc_malloc(framed_len);
+ if (t == NULL)
return (-1);
- }
-
- ptr = t;
-
- /* create the message */
- if ((ret = g_make_token_header(gss_mech_spnego, negTokenInitSize,
- &ptr, tlen)))
- goto errout;
+ k5_buf_init_fixed(&buf, t, framed_len);
- *ptr++ = CONTEXT; /* NegotiationToken identifier */
- if ((ret = gssint_put_der_length(negTokenInitSeqSize, &ptr, tlen)))
- goto errout;
-
- *ptr++ = SEQUENCE;
- if ((ret = gssint_put_der_length(negTokenInitContSize, &ptr,
- tlen - (int)(ptr-t))))
- goto errout;
-
- *ptr++ = CONTEXT | 0x00; /* MechTypeList identifier */
- if ((ret = gssint_put_der_length(spnego_ctx->DER_mechTypes.length,
- &ptr, tlen - (int)(ptr-t))))
- goto errout;
+ /* Add generic token framing. */
+ k5_der_add_taglen(&buf, HEADER_ID, mech_len + choice_len);
+ k5_der_add_value(&buf, MECH_OID, gss_mech_spnego->elements,
+ gss_mech_spnego->length);
- /* We already encoded the MechSetList */
- (void) memcpy(ptr, spnego_ctx->DER_mechTypes.value,
- spnego_ctx->DER_mechTypes.length);
+ /* Add NegotiationToken choice tag and NegTokenInit sequence tag. */
+ k5_der_add_taglen(&buf, CONTEXT | 0x00, seq_len);
+ k5_der_add_taglen(&buf, SEQUENCE, fields_len);
- ptr += spnego_ctx->DER_mechTypes.length;
+ /* Add the already-encoded mechanism list as mechTypes. */
+ k5_der_add_value(&buf, CONTEXT | 0x00, spnego_ctx->DER_mechTypes.value,
+ spnego_ctx->DER_mechTypes.length);
- if (data != NULL) {
- *ptr++ = CONTEXT | 0x02;
- if ((ret = gssint_put_der_length(rspTokenSize,
- &ptr, tlen - (int)(ptr - t))))
- goto errout;
-
- if ((ret = put_input_token(&ptr, data,
- tlen - (int)(ptr - t))))
- goto errout;
+ if (token != NULL) {
+ k5_der_add_taglen(&buf, CONTEXT | 0x02, f2len);
+ k5_der_add_value(&buf, OCTET_STRING, token->value,
+ token->length);
}
- if (mechListMIC != GSS_C_NO_BUFFER) {
- *ptr++ = CONTEXT | 0x03;
- if ((ret = gssint_put_der_length(micTokenSize,
- &ptr, tlen - (int)(ptr - t))))
- goto errout;
-
- if (negHintsCompat) {
- ret = put_neg_hints(&ptr, mechListMIC,
- tlen - (int)(ptr - t));
- if (ret)
- goto errout;
- } else if ((ret = put_input_token(&ptr, mechListMIC,
- tlen - (int)(ptr - t))))
- goto errout;
+ if (mic != GSS_C_NO_BUFFER) {
+ uint8_t id = negHintsCompat ? SEQUENCE : OCTET_STRING;
+ k5_der_add_taglen(&buf, CONTEXT | 0x03, f3len);
+ k5_der_add_value(&buf, id, mic->value, mic->length);
}
-errout:
- if (ret != 0) {
- if (t)
- free(t);
- t = NULL;
- tlen = 0;
- }
- outbuf->length = tlen;
- outbuf->value = (void *) t;
+ assert(buf.len == framed_len);
+ outbuf->length = framed_len;
+ outbuf->value = t;
- return (ret);
+ return (0);
}
/*
* gss_accept_sec_context and eventually up to the application program
* and over to the client.
*/
-static int
-make_spnego_tokenTarg_msg(OM_uint32 status, gss_OID mech_wanted,
- gss_buffer_t data, gss_buffer_t mechListMIC,
+static OM_uint32
+make_spnego_tokenTarg_msg(uint8_t status, gss_OID mech_wanted,
+ gss_buffer_t token, gss_buffer_t mic,
send_token_flag sendtoken,
gss_buffer_t outbuf)
{
- unsigned int tlen = 0;
- unsigned int ret = 0;
- unsigned int NegTokenTargSize = 0;
- unsigned int NegTokenSize = 0;
- unsigned int rspTokenSize = 0;
- unsigned int micTokenSize = 0;
- unsigned int dataLen = 0;
- unsigned char *t;
- unsigned char *ptr;
+ size_t f0len, f1len, f2len, f3len, fields_len, seq_len, choice_len;
+ uint8_t *t;
+ struct k5buf buf;
if (outbuf == GSS_C_NO_BUFFER)
return (GSS_S_DEFECTIVE_TOKEN);
if (sendtoken == INIT_TOKEN_SEND && mech_wanted == GSS_C_NO_OID)
- return (GSS_S_DEFECTIVE_TOKEN);
+ return (GSS_S_DEFECTIVE_TOKEN);
outbuf->length = 0;
outbuf->value = NULL;
- /*
- * ASN.1 encoding of the negResult
- * ENUMERATED type is 3 bytes
- * ENUMERATED TAG, Length, Value,
- * Plus 2 bytes for the CONTEXT id and length.
- */
- dataLen = 5;
-
- /*
- * calculate data length
- *
- * If this is the initial token, include length of
- * mech_type and the negotiation result fields.
- */
+ /* Calculate the length of each field and the total fields length. */
+ fields_len = 0;
+ /* negState [0] ENUMERATED { ... } OPTIONAL */
+ f0len = k5_der_value_len(1);
+ fields_len += k5_der_value_len(f0len);
if (sendtoken == INIT_TOKEN_SEND) {
- int mechlistTokenSize;
- /*
- * 1 byte for the CONTEXT ID(0xa0),
- * 1 byte for the OID ID(0x06)
- * 1 byte for OID Length field
- * Plus the rest... (OID Length, OID value)
- */
- mechlistTokenSize = 3 + mech_wanted->length +
- gssint_der_length_size(mech_wanted->length);
-
- dataLen += mechlistTokenSize;
+ /* supportedMech [1] MechType OPTIONAL */
+ f1len = k5_der_value_len(mech_wanted->length);
+ fields_len += k5_der_value_len(f1len);
}
- if (data != NULL && data->length > 0) {
- /* Length of the inner token */
- rspTokenSize = 1 + gssint_der_length_size(data->length) +
- data->length;
-
- dataLen += rspTokenSize;
-
- /* Length of the outer token */
- dataLen += 1 + gssint_der_length_size(rspTokenSize);
+ if (token != NULL && token->length > 0) {
+ /* mechToken [2] OCTET STRING OPTIONAL */
+ f2len = k5_der_value_len(token->length);
+ fields_len += k5_der_value_len(f2len);
}
- if (mechListMIC != NULL) {
-
- /* Length of the inner token */
- micTokenSize = 1 + gssint_der_length_size(mechListMIC->length) +
- mechListMIC->length;
-
- dataLen += micTokenSize;
-
- /* Length of the outer token */
- dataLen += 1 + gssint_der_length_size(micTokenSize);
+ if (mic != NULL) {
+ /* mechListMIC [3] OCTET STRING OPTIONAL */
+ f3len = k5_der_value_len(mic->length);
+ fields_len += k5_der_value_len(f3len);
}
- /*
- * Add size of DER encoded:
- * NegTokenTarg [ SEQUENCE ] of
- * NegResult[0] ENUMERATED {
- * accept_completed(0),
- * accept_incomplete(1),
- * reject(2) }
- * supportedMech [1] MechType OPTIONAL,
- * responseToken [2] OCTET STRING OPTIONAL,
- * mechListMIC [3] OCTET STRING OPTIONAL
- *
- * size = data->length + MechListMic + SupportedMech len +
- * Result Length + ASN.1 overhead
- */
- NegTokenTargSize = dataLen;
- dataLen += 1 + gssint_der_length_size(NegTokenTargSize);
- /*
- * NegotiationToken [ CHOICE ]{
- * negTokenInit [0] NegTokenInit,
- * negTokenTarg [1] NegTokenTarg }
- */
- NegTokenSize = dataLen;
- dataLen += 1 + gssint_der_length_size(NegTokenSize);
-
- tlen = dataLen;
- t = (unsigned char *) gssalloc_malloc(tlen);
+ /* Calculate the length of the sequence and choice. */
+ seq_len = k5_der_value_len(fields_len);
+ choice_len = k5_der_value_len(seq_len);
- if (t == NULL) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
+ /* Allocate space and prepare a buffer. */
+ t = gssalloc_malloc(choice_len);
+ if (t == NULL)
+ return (GSS_S_DEFECTIVE_TOKEN);
+ k5_buf_init_fixed(&buf, t, choice_len);
- ptr = t;
+ /* Add the choice tag and begin the sequence. */
+ k5_der_add_taglen(&buf, CONTEXT | 0x01, seq_len);
+ k5_der_add_taglen(&buf, SEQUENCE, fields_len);
- /*
- * Indicate that we are sending CHOICE 1
- * (NegTokenTarg)
- */
- *ptr++ = CONTEXT | 0x01;
- if (gssint_put_der_length(NegTokenSize, &ptr, dataLen) < 0) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
- *ptr++ = SEQUENCE;
- if (gssint_put_der_length(NegTokenTargSize, &ptr,
- tlen - (int)(ptr-t)) < 0) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
+ /* Add the negState field. */
+ k5_der_add_taglen(&buf, CONTEXT | 0x00, f0len);
+ k5_der_add_value(&buf, ENUMERATED, &status, 1);
- /*
- * First field of the NegTokenTarg SEQUENCE
- * is the ENUMERATED NegResult.
- */
- *ptr++ = CONTEXT;
- if (gssint_put_der_length(3, &ptr,
- tlen - (int)(ptr-t)) < 0) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
- if (put_negResult(&ptr, status, tlen - (int)(ptr - t)) < 0) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
if (sendtoken == INIT_TOKEN_SEND) {
- /*
- * Next, is the Supported MechType
- */
- *ptr++ = CONTEXT | 0x01;
- if (gssint_put_der_length(mech_wanted->length + 2,
- &ptr,
- tlen - (int)(ptr - t)) < 0) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
- if (put_mech_oid(&ptr, mech_wanted,
- tlen - (int)(ptr - t)) < 0) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
- }
- if (data != NULL && data->length > 0) {
- *ptr++ = CONTEXT | 0x02;
- if (gssint_put_der_length(rspTokenSize, &ptr,
- tlen - (int)(ptr - t)) < 0) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
- if (put_input_token(&ptr, data,
- tlen - (int)(ptr - t)) < 0) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
- }
- if (mechListMIC != NULL) {
- *ptr++ = CONTEXT | 0x03;
- if (gssint_put_der_length(micTokenSize, &ptr,
- tlen - (int)(ptr - t)) < 0) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
- if (put_input_token(&ptr, mechListMIC,
- tlen - (int)(ptr - t)) < 0) {
- ret = GSS_S_DEFECTIVE_TOKEN;
- goto errout;
- }
- }
- ret = GSS_S_COMPLETE;
-errout:
- if (ret != GSS_S_COMPLETE) {
- if (t)
- free(t);
- } else {
- outbuf->length = ptr - t;
- outbuf->value = (void *) t;
- }
-
- return (ret);
-}
-
-/* determine size of token */
-static int
-g_token_size(gss_OID_const mech, unsigned int body_size)
-{
- int hdrsize;
-
- /*
- * Initialize the header size to the
- * MECH_OID byte + the bytes needed to indicate the
- * length of the OID + the OID itself.
- *
- * 0x06 [MECHLENFIELD] MECHDATA
- */
- hdrsize = 1 + gssint_der_length_size(mech->length) + mech->length;
-
- /*
- * Now add the bytes needed for the initial header
- * token bytes:
- * 0x60 + [DER_LEN] + HDRSIZE
- */
- hdrsize += 1 + gssint_der_length_size(body_size + hdrsize);
-
- return (hdrsize + body_size);
-}
-
-/*
- * generate token header.
- *
- * Use DER Definite Length method per RFC2478
- * Use of indefinite length encoding will not be compatible
- * with Microsoft or others that actually follow the spec.
- */
-static int
-g_make_token_header(gss_OID_const mech,
- unsigned int body_size,
- unsigned char **buf,
- unsigned int totallen)
-{
- int ret = 0;
- unsigned int hdrsize;
- unsigned char *p = *buf;
-
- hdrsize = 1 + gssint_der_length_size(mech->length) + mech->length;
-
- *(*buf)++ = HEADER_ID;
- if ((ret = gssint_put_der_length(hdrsize + body_size, buf, totallen)))
- return (ret);
-
- *(*buf)++ = MECH_OID;
- if ((ret = gssint_put_der_length(mech->length, buf,
- totallen - (int)(p - *buf))))
- return (ret);
- TWRITE_STR(*buf, mech->elements, mech->length);
- return (0);
-}
-
-/*
- * NOTE: This checks that the length returned by
- * gssint_get_der_length() is not greater than the number of octets
- * remaining, even though gssint_get_der_length() already checks, in
- * theory.
- */
-static int
-g_get_tag_and_length(unsigned char **buf, int tag,
- unsigned int buflen, unsigned int *outlen)
-{
- unsigned char *ptr = *buf;
- int ret = -1; /* pessimists, assume failure ! */
- unsigned int encoded_len;
- int tmplen = 0;
-
- *outlen = 0;
- if (buflen > 1 && *ptr == tag) {
- ptr++;
- tmplen = gssint_get_der_length(&ptr, buflen - 1,
- &encoded_len);
- if (tmplen < 0) {
- ret = -1;
- } else if ((unsigned int)tmplen > buflen - (ptr - *buf)) {
- ret = -1;
- } else
- ret = 0;
+ /* Add the supportedMech field. */
+ k5_der_add_taglen(&buf, CONTEXT | 0x01, f1len);
+ k5_der_add_value(&buf, MECH_OID, mech_wanted->elements,
+ mech_wanted->length);
}
- *outlen = tmplen;
- *buf = ptr;
- return (ret);
-}
-
-static int
-g_verify_neg_token_init(unsigned char **buf_in, unsigned int cur_size)
-{
- unsigned char *buf = *buf_in;
- unsigned char *endptr = buf + cur_size;
- int seqsize;
- int ret = 0;
- unsigned int bytes;
-
- /*
- * Verify this is a NegotiationToken type token
- * - check for a0(context specific identifier)
- * - get length and verify that enoughd ata exists
- */
- if (g_get_tag_and_length(&buf, CONTEXT, cur_size, &bytes) < 0)
- return (G_BAD_TOK_HEADER);
-
- cur_size = bytes; /* should indicate bytes remaining */
- /*
- * Verify the next piece, it should identify this as
- * a strucure of type NegTokenInit.
- */
- if (*buf++ == SEQUENCE) {
- if ((seqsize = gssint_get_der_length(&buf, cur_size, &bytes)) < 0)
- return (G_BAD_TOK_HEADER);
- /*
- * Make sure we have the entire buffer as described
- */
- if (seqsize > endptr - buf)
- return (G_BAD_TOK_HEADER);
- } else {
- return (G_BAD_TOK_HEADER);
+ if (token != NULL && token->length > 0) {
+ /* Add the mechToken field. */
+ k5_der_add_taglen(&buf, CONTEXT | 0x02, f2len);
+ k5_der_add_value(&buf, OCTET_STRING, token->value,
+ token->length);
}
- cur_size = seqsize; /* should indicate bytes remaining */
-
- /*
- * Verify that the first blob is a sequence of mechTypes
- */
- if (*buf++ == CONTEXT) {
- if ((seqsize = gssint_get_der_length(&buf, cur_size, &bytes)) < 0)
- return (G_BAD_TOK_HEADER);
- /*
- * Make sure we have the entire buffer as described
- */
- if (seqsize > endptr - buf)
- return (G_BAD_TOK_HEADER);
- } else {
- return (G_BAD_TOK_HEADER);
+ if (mic != NULL) {
+ /* Add the mechListMIC field. */
+ k5_der_add_taglen(&buf, CONTEXT | 0x03, f3len);
+ k5_der_add_value(&buf, OCTET_STRING, mic->value, mic->length);
}
- /*
- * At this point, *buf should be at the beginning of the
- * DER encoded list of mech types that are to be negotiated.
- */
- *buf_in = buf;
-
- return (ret);
+ assert(buf.len == choice_len);
+ outbuf->length = choice_len;
+ outbuf->value = t;
+ return (0);
}
-/* verify token header. */
+/* Advance in past the [APPLICATION 0] tag and thisMech field of an
+ * InitialContextToken encoding, checking that thisMech matches mech. */
static int
-g_verify_token_header(gss_OID_const mech,
- unsigned int *body_size,
- unsigned char **buf_in,
- int tok_type,
- unsigned int toksize)
+verify_token_header(struct k5input *in, gss_OID_const mech)
{
- unsigned char *buf = *buf_in;
- int seqsize;
- gss_OID_desc toid;
- int ret = 0;
- unsigned int bytes;
-
- if (toksize-- < 1)
- return (G_BAD_TOK_HEADER);
-
- if (*buf++ != HEADER_ID)
- return (G_BAD_TOK_HEADER);
-
- if ((seqsize = gssint_get_der_length(&buf, toksize, &bytes)) < 0)
- return (G_BAD_TOK_HEADER);
+ gss_OID_desc oid;
+ struct k5input field;
- if ((seqsize + bytes) != toksize)
+ if (!k5_der_get_value(in, HEADER_ID, in))
return (G_BAD_TOK_HEADER);
-
- if (toksize-- < 1)
+ if (!k5_der_get_value(in, MECH_OID, &field))
return (G_BAD_TOK_HEADER);
-
- if (*buf++ != MECH_OID)
- return (G_BAD_TOK_HEADER);
-
- if (toksize-- < 1)
- return (G_BAD_TOK_HEADER);
-
- toid.length = *buf++;
-
- if (toksize < toid.length)
- return (G_BAD_TOK_HEADER);
- else
- toksize -= toid.length;
-
- toid.elements = buf;
- buf += toid.length;
-
- if (!g_OID_equal(&toid, mech))
- ret = G_WRONG_MECH;
-
- /*
- * G_WRONG_MECH is not returned immediately because it's more important
- * to return G_BAD_TOK_HEADER if the token header is in fact bad
- */
- if (toksize < 2)
- return (G_BAD_TOK_HEADER);
- else
- toksize -= 2;
-
- if (!ret) {
- *buf_in = buf;
- *body_size = toksize;
- }
-
- return (ret);
+ oid.length = field.len;
+ oid.elements = (uint8_t *)field.ptr;
+ return g_OID_equal(&oid, mech) ? 0 : G_WRONG_MECH;
}
/*
* functions
*/
+/* The use_kdc_config parameter is no longer used, as configuration is
+ * retrieved from the context profile. */
krb5_error_code kadm5_get_config_params(krb5_context context,
int use_kdc_config,
kadm5_config_params *params_in,
}
/*
- * krb5_aprof_init() - Initialize alternate profile context.
- *
- * Parameters:
- * fname - default file name of the profile.
- * envname - environment variable which can override fname
- * acontextp - Pointer to opaque context for alternate profile
- *
- * Returns:
- * error codes from profile_init()
- */
-krb5_error_code
-krb5_aprof_init(char *fname, char *envname, krb5_pointer *acontextp)
-{
- krb5_error_code ret;
- profile_t profile;
- const char *kdc_config;
- char **filenames;
- int i;
- struct k5buf buf;
-
- ret = krb5_get_default_config_files(&filenames);
- if (ret)
- return ret;
- if (envname == NULL || (kdc_config = secure_getenv(envname)) == NULL)
- kdc_config = fname;
- k5_buf_init_dynamic(&buf);
- if (kdc_config)
- k5_buf_add(&buf, kdc_config);
- for (i = 0; filenames[i] != NULL; i++) {
- if (buf.len > 0)
- k5_buf_add(&buf, ":");
- k5_buf_add(&buf, filenames[i]);
- }
- krb5_free_config_files(filenames);
- if (k5_buf_status(&buf) != 0)
- return ENOMEM;
- profile = (profile_t) NULL;
- ret = profile_init_path(buf.data, &profile);
- k5_buf_free(&buf);
- if (ret)
- return ret;
- *acontextp = profile;
- return 0;
-}
-
-/*
* krb5_aprof_getvals() - Get values from alternate profile.
*
* Parameters:
}
/*
- * krb5_aprof_finish() - Finish alternate profile context.
- *
- * Parameter:
- * acontext - opaque context for alternate profile.
- *
- * Returns:
- * 0 on success, something else on failure.
- */
-krb5_error_code
-krb5_aprof_finish(krb5_pointer acontext)
-{
- profile_release(acontext);
- return 0;
-}
-
-/*
* Returns nonzero if it found something to copy; the caller may still need to
* check the output field or mask to see if the copy (allocation) was
* successful. Returns zero if nothing was found to copy, and thus the caller
kadm5_config_params *params_in,
kadm5_config_params *params_out)
{
- char *filename, *envname, *lrealm, *svalue, *sp, *ep, *tp;
- krb5_pointer aprofile = 0;
+ char *lrealm, *svalue, *sp, *ep, *tp;
+ krb5_pointer aprofile = context->profile;
const char *hierarchy[4];
krb5_int32 ivalue;
kadm5_config_params params, empty_params;
params.kvno = params_in->kvno;
params.mask |= KADM5_CONFIG_KVNO;
}
- /*
- * XXX These defaults should to work on both client and
- * server. kadm5_get_config_params can be implemented as a
- * wrapper function in each library that provides correct
- * defaults for NULL values.
- */
- if (use_kdc_config) {
- filename = DEFAULT_KDC_PROFILE;
- envname = KDC_PROFILE_ENV;
- } else {
- filename = DEFAULT_PROFILE_PATH;
- envname = "KRB5_CONFIG";
- }
- if (context->profile_secure == TRUE)
- envname = NULL;
-
- ret = krb5_aprof_init(filename, envname, &aprofile);
- if (ret)
- goto cleanup;
/* Initialize realm parameters. */
hierarchy[0] = KRB5_CONF_REALMS;
*params_out = params;
cleanup:
- krb5_aprof_finish(aprofile);
if (ret) {
kadm5_free_config_params(context, ¶ms);
params_out->mask = 0;
kadm5_setkey_principal_3
kadm5_setkey_principal_4
kadm5_unlock
-krb5_aprof_finish
krb5_aprof_get_boolean
krb5_aprof_get_deltat
krb5_aprof_get_int32
krb5_aprof_get_string
krb5_aprof_getvals
-krb5_aprof_init
krb5_flagnum_to_string
krb5_flagspec_to_mask
krb5_flags_to_strings
int v)
{
unsigned int n;
+ bool_t r;
if (!xdr_krb5_principal(xdrs, &objp->principal)) {
return (FALSE);
if (!xdr_krb5_int16(xdrs, &objp->n_key_data)) {
return (FALSE);
}
+ if (xdrs->x_op == XDR_DECODE && objp->n_key_data < 0) {
+ return (FALSE);
+ }
if (!xdr_krb5_int16(xdrs, &objp->n_tl_data)) {
return (FALSE);
}
return FALSE;
}
n = objp->n_key_data;
- if (!xdr_array(xdrs, (caddr_t *) &objp->key_data,
- &n, ~0, sizeof(krb5_key_data),
- xdr_krb5_key_data_nocontents)) {
+ r = xdr_array(xdrs, (caddr_t *) &objp->key_data, &n, objp->n_key_data,
+ sizeof(krb5_key_data), xdr_krb5_key_data_nocontents);
+ objp->n_key_data = n;
+ if (!r) {
return (FALSE);
}
klog_com_err_proc(const char *whoami, long int code, const char *format, va_list ap)
{
struct k5buf buf;
- const char *emsg;
+ const char *emsg, *msg;
if (format == NULL)
return;
/* Add the formatted message. */
k5_buf_add_vfmt(&buf, format, ap);
- if (k5_buf_status(&buf) == 0)
- krb5_klog_syslog(code ? LOG_ERR : LOG_INFO, "%s", (char *)buf.data);
+ msg = k5_buf_cstring(&buf);
+ if (msg != NULL)
+ krb5_klog_syslog(code ? LOG_ERR : LOG_INFO, "%s", msg);
k5_buf_free(&buf);
}
kdb_init_master
kdb_iter_entry
kdb_put_entry
-krb5_aprof_finish
krb5_aprof_get_boolean
krb5_aprof_get_deltat
krb5_aprof_get_int32
krb5_aprof_get_string
krb5_aprof_get_string_all
krb5_aprof_getvals
-krb5_aprof_init
krb5_copy_key_data_contents
krb5_flagnum_to_string
krb5_flagspec_to_mask
/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
/* lib/kdb/decrypt_key.c */
/*
- * Copyright 1990,1991 by the Massachusetts Institute of Technology.
+ * Copyright 1990,1991,2023 by the Massachusetts Institute of Technology.
* All Rights Reserved.
*
* Export of this software from the United States of America may
#include "k5-int.h"
#include "kdb.h"
-/*
- * Decrypt a key from storage in the database. "eblock" is used
- * to decrypt the key in "in" into "out"; the storage pointed to by "out"
- * is allocated before use.
- */
-
+/* Decrypt key_data, putting the result into dbkey_out and (if not null)
+ * keysalt_out. */
krb5_error_code
-krb5_dbe_def_decrypt_key_data( krb5_context context,
- const krb5_keyblock * mkey,
- const krb5_key_data * key_data,
- krb5_keyblock * dbkey,
- krb5_keysalt * keysalt)
+krb5_dbe_def_decrypt_key_data(krb5_context context, const krb5_keyblock *mkey,
+ const krb5_key_data *kd,
+ krb5_keyblock *dbkey_out,
+ krb5_keysalt *keysalt_out)
{
- krb5_error_code retval = 0;
- krb5_int16 tmplen;
- krb5_octet * ptr;
- krb5_enc_data cipher;
- krb5_data plain;
+ krb5_error_code ret;
+ int16_t keylen;
+ krb5_enc_data cipher;
+ krb5_data plain = empty_data();
+ krb5_keyblock kb = { 0 };
+ krb5_keysalt salt = { 0 };
- if (!mkey)
- return KRB5_KDB_BADSTORED_MKEY;
- ptr = key_data->key_data_contents[0];
+ memset(dbkey_out, 0, sizeof(*dbkey_out));
+ if (keysalt_out != NULL)
+ memset(keysalt_out, 0, sizeof(*keysalt_out));
- if (ptr) {
- krb5_kdb_decode_int16(ptr, tmplen);
- ptr += 2;
+ if (mkey == NULL)
+ return KRB5_KDB_BADSTORED_MKEY;
- if (tmplen < 0)
+ if (kd->key_data_contents[0] != NULL && kd->key_data_length[0] >= 2) {
+ keylen = load_16_le(kd->key_data_contents[0]);
+ if (keylen < 0)
return EINVAL;
cipher.enctype = ENCTYPE_UNKNOWN;
- cipher.ciphertext.length = key_data->key_data_length[0]-2;
- cipher.ciphertext.data = (char *) ptr;
- plain.length = key_data->key_data_length[0]-2;
- if ((plain.data = malloc(plain.length)) == NULL)
- return(ENOMEM);
-
- if ((retval = krb5_c_decrypt(context, mkey, 0 /* XXX */, 0,
- &cipher, &plain))) {
- free(plain.data);
- return retval;
- }
+ cipher.ciphertext = make_data(kd->key_data_contents[0] + 2,
+ kd->key_data_length[0] - 2);
+ ret = alloc_data(&plain, kd->key_data_length[0] - 2);
+ if (ret)
+ goto cleanup;
- /* tmplen is the true length of the key. plain.data is the
- plaintext data length, but it may be padded, since the
- old-style etypes didn't store the real length. I can check
- to make sure that there are enough bytes, but I can't do
- any better than that. */
+ ret = krb5_c_decrypt(context, mkey, 0, 0, &cipher, &plain);
+ if (ret)
+ goto cleanup;
- if ((unsigned int) tmplen > plain.length) {
- free(plain.data);
- return(KRB5_CRYPTO_INTERNAL);
+ /* Make sure the plaintext has at least as many bytes as the true ke
+ * length (it may have more due to padding). */
+ if ((unsigned int)keylen > plain.length) {
+ ret = KRB5_CRYPTO_INTERNAL;
+ if (ret)
+ goto cleanup;
}
- dbkey->magic = KV5M_KEYBLOCK;
- dbkey->enctype = key_data->key_data_type[0];
- dbkey->length = tmplen;
- dbkey->contents = (krb5_octet *) plain.data;
+ kb.magic = KV5M_KEYBLOCK;
+ kb.enctype = kd->key_data_type[0];
+ kb.length = keylen;
+ kb.contents = (uint8_t *)plain.data;
+ plain = empty_data();
}
- /* Decode salt data */
- if (keysalt) {
- if (key_data->key_data_ver == 2) {
- keysalt->type = key_data->key_data_type[1];
- if ((keysalt->data.length = key_data->key_data_length[1])) {
- if (!(keysalt->data.data=(char *)malloc(keysalt->data.length))){
- if (key_data->key_data_contents[0]) {
- free(dbkey->contents);
- dbkey->contents = 0;
- dbkey->length = 0;
- }
- return ENOMEM;
- }
- memcpy(keysalt->data.data, key_data->key_data_contents[1],
- (size_t) keysalt->data.length);
- } else
- keysalt->data.data = (char *) NULL;
+ /* Decode salt data. */
+ if (keysalt_out != NULL) {
+ if (kd->key_data_ver == 2) {
+ salt.type = kd->key_data_type[1];
+ salt.data.length = kd->key_data_length[1];
+ if (kd->key_data_length[1] > 0) {
+ ret = alloc_data(&salt.data, kd->key_data_length[1]);
+ if (ret)
+ goto cleanup;
+ memcpy(salt.data.data, kd->key_data_contents[1],
+ salt.data.length);
+ }
} else {
- keysalt->type = KRB5_KDB_SALTTYPE_NORMAL;
- keysalt->data.data = (char *) NULL;
- keysalt->data.length = 0;
+ salt.type = KRB5_KDB_SALTTYPE_NORMAL;
}
}
- return retval;
+ *dbkey_out = kb;
+ if (keysalt_out != NULL)
+ *keysalt_out = salt;
+ memset(&kb, 0, sizeof(kb));
+ memset(&salt, 0, sizeof(salt));
+
+cleanup:
+ zapfree(plain.data, plain.length);
+ krb5_free_keyblock_contents(context, &kb);
+ free(salt.data.data);
+ return ret;
}
/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
/* lib/kdb/encrypt_key.c */
/*
- * Copyright 1990,1991 by the Massachusetts Institute of Technology.
+ * Copyright 1990,1991,2023 by the Massachusetts Institute of Technology.
* All Rights Reserved.
*
* Export of this software from the United States of America may
#include "kdb.h"
/*
- * Encrypt a key for storage in the database. "eblock" is used
- * to encrypt the key in "in" into "out"; the storage pointed to by "out"
- * is allocated before use.
+ * Encrypt dbkey for storage in the database, putting the result into
+ * key_data_out.
*/
-
krb5_error_code
-krb5_dbe_def_encrypt_key_data( krb5_context context,
- const krb5_keyblock * mkey,
- const krb5_keyblock * dbkey,
- const krb5_keysalt * keysalt,
- int keyver,
- krb5_key_data * key_data)
+krb5_dbe_def_encrypt_key_data(krb5_context context, const krb5_keyblock *mkey,
+ const krb5_keyblock *dbkey,
+ const krb5_keysalt *keysalt, int keyver,
+ krb5_key_data *key_data_out)
{
- krb5_error_code retval;
- krb5_octet * ptr;
- size_t len;
- int i;
- krb5_data plain;
- krb5_enc_data cipher;
-
- for (i = 0; i < key_data->key_data_ver; i++) {
- free(key_data->key_data_contents[i]);
- key_data->key_data_contents[i] = NULL;
- }
-
- key_data->key_data_ver = 1;
- key_data->key_data_kvno = keyver;
+ krb5_error_code ret;
+ size_t clen;
+ krb5_data plain;
+ krb5_enc_data cipher;
+ krb5_key_data kd = { 0 };
- /*
- * The First element of the type/length/contents
- * fields is the key type/length/contents
- */
- if ((retval = krb5_c_encrypt_length(context, mkey->enctype, dbkey->length,
- &len)))
- return(retval);
+ memset(key_data_out, 0, sizeof(*key_data_out));
- ptr = malloc(2 + len);
- if (ptr == NULL)
- return(ENOMEM);
+ kd.key_data_ver = 1;
+ kd.key_data_kvno = keyver;
- key_data->key_data_type[0] = dbkey->enctype;
- key_data->key_data_length[0] = 2 + len;
- key_data->key_data_contents[0] = ptr;
+ ret = krb5_c_encrypt_length(context, mkey->enctype, dbkey->length, &clen);
+ if (ret)
+ goto cleanup;
- krb5_kdb_encode_int16(dbkey->length, ptr);
- ptr += 2;
+ /* The first element of the type/length/contents fields is the key
+ * type/length/contents. */
+ kd.key_data_type[0] = dbkey->enctype;
+ kd.key_data_length[0] = 2 + clen;
+ kd.key_data_contents[0] = k5alloc(kd.key_data_length[0], &ret);
+ if (kd.key_data_contents[0] == NULL)
+ goto cleanup;
+ store_16_le(dbkey->length, kd.key_data_contents[0]);
- plain.length = dbkey->length;
- plain.data = (char *) dbkey->contents;
+ plain = make_data(dbkey->contents, dbkey->length);
+ cipher.ciphertext = make_data(kd.key_data_contents[0] + 2, clen);
+ ret = krb5_c_encrypt(context, mkey, 0, 0, &plain, &cipher);
+ if (ret)
+ goto cleanup;
- cipher.ciphertext.length = len;
- cipher.ciphertext.data = (char *) ptr;
-
- if ((retval = krb5_c_encrypt(context, mkey, /* XXX */ 0, 0,
- &plain, &cipher))) {
- free(key_data->key_data_contents[0]);
- return retval;
- }
-
- /* After key comes the salt in necessary */
- if (keysalt) {
- if (keysalt->type > 0) {
- key_data->key_data_ver++;
- key_data->key_data_type[1] = keysalt->type;
- if ((key_data->key_data_length[1] = keysalt->data.length) != 0) {
- key_data->key_data_contents[1] = malloc(keysalt->data.length);
- if (key_data->key_data_contents[1] == NULL) {
- free(key_data->key_data_contents[0]);
- return ENOMEM;
- }
- memcpy(key_data->key_data_contents[1], keysalt->data.data,
- (size_t) keysalt->data.length);
- }
+ /* The second element of each array is the salt, if necessary. */
+ if (keysalt != NULL && keysalt->type > 0) {
+ kd.key_data_ver++;
+ kd.key_data_type[1] = keysalt->type;
+ kd.key_data_length[1] = keysalt->data.length;
+ if (keysalt->data.length > 0) {
+ kd.key_data_contents[1] = k5memdup(keysalt->data.data,
+ keysalt->data.length, &ret);
+ if (kd.key_data_contents[1] == NULL)
+ goto cleanup;
}
}
- return retval;
+ *key_data_out = kd;
+ memset(&kd, 0, sizeof(kd));
+
+cleanup:
+ krb5_dbe_free_key_data_contents(context, &kd);
+ return ret;
}
LIBINITFUNC=profile_library_initializer krb5int_lib_init
LIBFINIFUNC=profile_library_finalizer krb5int_lib_fini
-STOBJLISTS= \
- OBJS.ST \
- error_tables/OBJS.ST \
- asn.1/OBJS.ST \
- ccache/OBJS.ST \
- keytab/OBJS.ST \
- krb/OBJS.ST \
- rcache/OBJS.ST \
- unicode/OBJS.ST \
- os/OBJS.ST \
- $(BUILDTOP)/util/profile/OBJS.ST
-
SUBDIROBJLISTS= \
error_tables/OBJS.ST \
asn.1/OBJS.ST \
os/OBJS.ST \
$(BUILDTOP)/util/profile/OBJS.ST
+STOBJLISTS= OBJS.ST $(SUBDIROBJLISTS)
+
OBJS=\
$(OUTPRE)krb5_libinit.$(OBJEXT)
SHLIB_EXPDEPS = \
$(TOPLIBD)/libk5crypto$(SHLIBEXT) \
$(COM_ERR_DEPLIB) $(SUPPORT_DEPLIB)
-SHLIB_EXPLIBS=-lk5crypto $(COM_ERR_LIB) $(SUPPORT_LIB) @GEN_LIB@ $(LIBS)
+SHLIB_EXPLIBS=-lk5crypto $(COM_ERR_LIB) $(SUPPORT_LIB) @GEN_LIB@ \
+ @MACOS_FRAMEWORK@ $(LIBS)
all-unix: all-liblinks
BUILDTOP=$(REL)..$(S)..$(S)..
SUBDIRS = # ccapi
WINSUBDIRS = ccapi
-##WIN32##DEFINES = -DUSE_CCAPI -DUSE_CCAPI_V3
+##WIN32##DEFINES = -DUSE_CCAPI
-LOCALINCLUDES = -I$(srcdir)$(S)ccapi -I$(srcdir) -I. $(WIN_INCLUDES)
-
-##DOS##WIN_INCLUDES = -I$(top_srcdir)\windows\lib
+LOCALINCLUDES = -I$(srcdir)$(S)ccapi -I$(srcdir) -I.
##DOS##BUILDTOP = ..\..\..
##DOS##PREFIXDIR=ccache
STLIBOBJS= \
+ ccapi_util.o \
ccbase.o \
cccopy.o \
cccursor.o \
ccselect_hostname.o \
ccselect_k5identity.o \
ccselect_realm.o \
+ cc_api_macos.o \
cc_dir.o \
cc_retr.o \
cc_file.o \
ccfns.o \
$(KCMRPC_OBJ)
-OBJS= $(OUTPRE)ccbase.$(OBJEXT) \
+OBJS= $(OUTPRE)ccapi_util.$(OBJEXT) \
+ $(OUTPRE)ccbase.$(OBJEXT) \
$(OUTPRE)cccopy.$(OBJEXT) \
$(OUTPRE)cccursor.$(OBJEXT) \
$(OUTPRE)ccdefault.$(OBJEXT) \
$(OUTPRE)ccselect_hostname.$(OBJEXT) \
$(OUTPRE)ccselect_k5identity.$(OBJEXT) \
$(OUTPRE)ccselect_realm.$(OBJEXT) \
+ $(OUTPRE)cc_api_macos.$(OBJEXT) \
$(OUTPRE)cc_dir.$(OBJEXT) \
$(OUTPRE)cc_retr.$(OBJEXT) \
$(OUTPRE)cc_file.$(OBJEXT) \
$(OUTPRE)ccfns.$(OBJEXT) \
$(MSLSA_OBJ)
-SRCS= $(srcdir)/ccbase.c \
+SRCS= $(srcdir)/ccapi_util.c \
+ $(srcdir)/ccbase.c \
$(srcdir)/cccopy.c \
$(srcdir)/cccursor.c \
$(srcdir)/ccdefault.c \
$(srcdir)/ccselect_hostname.c \
$(srcdir)/ccselect_k5identity.c \
$(srcdir)/ccselect_realm.c \
+ $(srcdir)/cc_api_macos.c \
$(srcdir)/cc_dir.c \
$(srcdir)/cc_retr.c \
$(srcdir)/cc_file.c \
extern k5_cc_mutex krb5int_krcc_mutex;
extern k5_cc_mutex krb5int_cc_file_mutex;
-#ifdef USE_CCAPI_V3
extern krb5_error_code KRB5_CALLCONV krb5_stdccv3_context_lock
(krb5_context context);
extern krb5_error_code KRB5_CALLCONV krb5_stdccv3_context_unlock
(krb5_context context);
-#endif
krb5_error_code
k5_cc_lock(krb5_context context, krb5_ccache ccache);
void
k5_marshal_princ(struct k5buf *buf, int version, krb5_principal princ);
+krb5_error_code
+k5_kcm_primary_name(krb5_context context, char **name_out);
+
/*
* Per-type ccache cursor.
*/
--- /dev/null
+/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
+/* lib/krb5/ccache/cc_api_macos.c - Native MacOS X ccache code */
+/*
+ * Copyright (C) 2022 United States Government as represented by the
+ * Secretary of the Navy.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * * Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * * Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in
+ * the documentation and/or other materials provided with the
+ * distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/*
+ * This ccache module provides compatibility with the default native ccache
+ * type for macOS, by linking against the native Kerberos framework and calling
+ * the CCAPI stubs. Due to workarounds for specific behaviors of the CCAPI
+ * stubs, this implementation is separate from the API ccache implementation
+ * used on Windows.
+ */
+
+#include "k5-int.h"
+#include "cc-int.h"
+#include "ccapi_util.h"
+#include <CredentialsCache.h>
+
+#ifdef USE_CCAPI_MACOS
+
+#include <sys/utsname.h>
+#include <xpc/xpc.h>
+
+const krb5_cc_ops krb5_api_macos_ops;
+
+struct api_macos_cache_data {
+ char *residual;
+ cc_context_t cc_context;
+ cc_ccache_t cache;
+};
+
+struct api_macos_ptcursor {
+ krb5_boolean first;
+ char *primary;
+ cc_context_t cc_context;
+ cc_ccache_iterator_t iter;
+};
+
+/* Map a CCAPI error code to a com_err code. */
+static krb5_error_code
+ccerr2mit(uint32_t err)
+{
+ switch (err) {
+ case ccNoError:
+ return 0;
+ case ccIteratorEnd:
+ return KRB5_CC_END;
+ case ccErrNoMem:
+ return ENOMEM;
+ case ccErrCCacheNotFound:
+ return KRB5_FCC_NOFILE;
+ default:
+ return KRB5_FCC_INTERNAL;
+ }
+}
+
+/* Construct a ccache handle for residual. Use cc_context if it is not null,
+ * or initialize a new one if it is. */
+static krb5_error_code
+make_cache(const char *residual, cc_context_t cc_context,
+ krb5_ccache *ccache_out)
+{
+ krb5_ccache cache = NULL;
+ char *residual_copy = NULL;
+ struct api_macos_cache_data *data = NULL;
+ uint32_t err;
+
+ *ccache_out = NULL;
+
+ if (cc_context == NULL) {
+ err = cc_initialize(&cc_context, ccapi_version_max, NULL, NULL);
+ if (err != ccNoError)
+ return KRB5_FCC_INTERNAL;
+ }
+
+ cache = malloc(sizeof(*cache));
+ if (cache == NULL)
+ goto oom;
+
+ data = calloc(1, sizeof(*data));
+ if (data == NULL)
+ goto oom;
+
+ residual_copy = strdup(residual);
+ if (residual_copy == NULL)
+ goto oom;
+
+ data->residual = residual_copy;
+ data->cc_context = cc_context;
+ cache->ops = &krb5_api_macos_ops;
+ cache->data = data;
+ cache->magic = KV5M_CCACHE;
+ *ccache_out = cache;
+ return 0;
+
+oom:
+ free(cache);
+ free(data);
+ free(residual_copy);
+ if (cc_context)
+ cc_context_release(cc_context);
+ return ENOMEM;
+}
+
+static uint32_t
+open_cache(struct api_macos_cache_data *data)
+{
+ if (data->cache != NULL)
+ return ccNoError;
+ return cc_context_open_ccache(data->cc_context, data->residual,
+ &data->cache);
+}
+
+static const char *
+api_macos_get_name(krb5_context context, krb5_ccache ccache)
+{
+ struct api_macos_cache_data *data = ccache->data;
+
+ return data->residual;
+}
+
+/*
+ * We would like to use cc_context_get_default_ccache_name() for this, but that
+ * doesn't work on macOS if the default cache name is set by the environment or
+ * configuration. So we have to do what the underlying macOS Heimdal API cache
+ * type does to fetch the primary name.
+ *
+ * For macOS 11 (Darwin 20) and later, implement just enough of the XCACHE
+ * protocol to fetch the primary UUID. For earlier versions, query the KCM
+ * daemon.
+ */
+static krb5_error_code
+get_primary_name(krb5_context context, char **name_out)
+{
+ krb5_error_code ret;
+ xpc_connection_t conn = NULL;
+ xpc_object_t request = NULL, reply = NULL;
+ const uint8_t *uuid;
+ uint64_t flags = XPC_CONNECTION_MACH_SERVICE_PRIVILEGED;
+ char uuidstr[37], *end;
+ struct utsname un;
+ long release;
+
+ *name_out = NULL;
+
+ if (uname(&un) == 0) {
+ release = strtol(un.release, &end, 10);
+ if (end != un.release && release < 20) {
+ /* Query the KCM daemon for macOS 10 and earlier. */
+ ret = k5_kcm_primary_name(context, name_out);
+ goto cleanup;
+ }
+ }
+
+ conn = xpc_connection_create_mach_service("com.apple.GSSCred", NULL,
+ flags);
+ if (conn == NULL) {
+ ret = ENOMEM;
+ goto cleanup;
+ }
+ xpc_connection_set_event_handler(conn, ^(xpc_object_t o){ ; });
+ xpc_connection_resume(conn);
+
+ request = xpc_dictionary_create(NULL, NULL, 0);
+ if (request == NULL) {
+ ret = ENOMEM;
+ goto cleanup;
+ }
+ xpc_dictionary_set_string(request, "command", "default");
+ xpc_dictionary_set_string(request, "mech", "kHEIMTypeKerberos");
+
+ reply = xpc_connection_send_message_with_reply_sync(conn, request);
+ if (reply == NULL || xpc_get_type(reply) == XPC_TYPE_ERROR) {
+ ret = KRB5_CC_IO;
+ goto cleanup;
+ }
+
+ uuid = xpc_dictionary_get_uuid(reply, "default");
+ if (uuid == NULL) {
+ ret = KRB5_CC_IO;
+ goto cleanup;
+ }
+ uuid_unparse(uuid, uuidstr);
+
+ *name_out = strdup(uuidstr);
+ ret = (*name_out == NULL) ? ENOMEM : 0;
+
+cleanup:
+ if (request != NULL)
+ xpc_release(request);
+ if (reply != NULL)
+ xpc_release(reply);
+ if (conn != NULL)
+ xpc_connection_cancel(conn);
+ return ret;
+}
+
+static krb5_error_code
+api_macos_resolve(krb5_context context, krb5_ccache *cache_out,
+ const char *residual)
+{
+ krb5_error_code ret;
+ char *primary = NULL;
+
+ if (*residual == '\0') {
+ ret = get_primary_name(context, &primary);
+ if (ret)
+ return ret;
+ residual = primary;
+ }
+ ret = make_cache(residual, NULL, cache_out);
+ free(primary);
+ return ret;
+}
+
+static krb5_error_code
+api_macos_gen_new(krb5_context context, krb5_ccache *cache_out)
+{
+ krb5_error_code ret;
+ uint32_t err;
+ cc_context_t cc_context = NULL;
+ cc_ccache_t cc_ccache = NULL;
+ cc_string_t cachename = NULL;
+ struct api_macos_cache_data *data;
+
+ *cache_out = NULL;
+
+ err = cc_initialize(&cc_context, ccapi_version_max, NULL, NULL);
+ if (err)
+ goto cleanup;
+
+ err = cc_context_create_new_ccache(cc_context, cc_credentials_v5, "",
+ &cc_ccache);
+ if (err)
+ goto cleanup;
+
+ err = cc_ccache_get_name(cc_ccache, &cachename);
+ if (err)
+ goto cleanup;
+
+ ret = make_cache(cachename->data, cc_context, cache_out);
+ cc_context = NULL;
+ if (!ret) {
+ data = (*cache_out)->data;
+ data->cache = cc_ccache;
+ cc_ccache = NULL;
+ }
+
+cleanup:
+ if (cc_context != NULL)
+ cc_context_release(cc_context);
+ if (cc_ccache != NULL)
+ cc_ccache_release(cc_ccache);
+ return err ? KRB5_FCC_INTERNAL : 0;
+}
+
+static krb5_error_code
+api_macos_initialize(krb5_context context, krb5_ccache cache,
+ krb5_principal princ)
+{
+ krb5_error_code ret;
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+ char *princstr = NULL, *prefix_name = NULL;
+
+ /* Apple's cc_context_create_ccache() requires a name with type prefix. */
+ if (asprintf(&prefix_name, "API:%s", data->residual) < 0)
+ return ENOMEM;
+
+ ret = krb5_unparse_name(context, princ, &princstr);
+ if (ret) {
+ free(prefix_name);
+ return ret;
+ }
+
+ if (data->cache != NULL) {
+ cc_ccache_release(data->cache);
+ data->cache = NULL;
+ }
+
+ err = cc_context_create_ccache(data->cc_context, prefix_name,
+ cc_credentials_v5, princstr,
+ &data->cache);
+ krb5_free_unparsed_name(context, princstr);
+ free(prefix_name);
+ return ccerr2mit(err);
+}
+
+static krb5_error_code
+api_macos_close(krb5_context context, krb5_ccache cache)
+{
+ struct api_macos_cache_data *data = cache->data;
+
+ if (data->cache != NULL)
+ cc_ccache_release(data->cache);
+ cc_context_release(data->cc_context);
+ free(data->residual);
+ free(data);
+ free(cache);
+ return 0;
+}
+
+static krb5_error_code
+api_macos_destroy(krb5_context context, krb5_ccache cache)
+{
+ struct api_macos_cache_data *data = cache->data;
+
+ open_cache(data);
+ if (data->cache != NULL) {
+ cc_ccache_destroy(data->cache);
+ data->cache = NULL;
+ }
+ return api_macos_close(context, cache);
+}
+
+static krb5_error_code
+api_macos_store(krb5_context context, krb5_ccache cache, krb5_creds *creds)
+{
+ struct api_macos_cache_data *data = cache->data;
+ cc_credentials_union *c_un = NULL;
+ krb5_error_code ret;
+ uint32_t err;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ ret = k5_krb5_to_ccapi_creds(context, creds, &c_un);
+ if (ret)
+ return ret;
+ err = cc_ccache_store_credentials(data->cache, c_un);
+ k5_release_ccapi_cred(c_un);
+ return ccerr2mit(err);
+}
+
+static krb5_error_code
+api_macos_retrieve(krb5_context context, krb5_ccache cache,
+ krb5_flags whichfields, krb5_creds *mcreds,
+ krb5_creds *creds)
+{
+ return k5_cc_retrieve_cred_default(context, cache, whichfields,
+ mcreds, creds);
+}
+
+static krb5_error_code
+api_macos_get_princ(krb5_context context, krb5_ccache cache,
+ krb5_principal *princ)
+{
+ struct api_macos_cache_data *data = cache->data;
+ krb5_error_code ret;
+ uint32_t err;
+ cc_string_t outprinc;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_get_principal(data->cache, cc_credentials_v5, &outprinc);
+ if (err)
+ return ccerr2mit(err);
+ ret = krb5_parse_name(context, outprinc->data, princ);
+ cc_string_release(outprinc);
+ return ret;
+}
+
+static krb5_error_code
+api_macos_start_seq_get(krb5_context context, krb5_ccache cache,
+ krb5_cc_cursor *cursor)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+ cc_credentials_iterator_t iter;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_new_credentials_iterator(data->cache, &iter);
+ if (err)
+ return ccerr2mit(err);
+
+ *cursor = (krb5_cc_cursor)iter;
+ return 0;
+}
+
+static krb5_error_code
+api_macos_next_cred(krb5_context context, krb5_ccache cache,
+ krb5_cc_cursor *cursor, krb5_creds *creds)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+ krb5_error_code ret;
+ cc_credentials_iterator_t iter = (cc_credentials_iterator_t) *cursor;
+ cc_credentials_t acreds;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_credentials_iterator_next(iter, &acreds);
+ if (!err) {
+ ret = k5_ccapi_to_krb5_creds(context, acreds->data, creds);
+ cc_credentials_release(acreds);
+ } else {
+ ret = ccerr2mit(err);
+ }
+ return ret;
+}
+
+static krb5_error_code
+api_macos_end_seq_get(krb5_context context, krb5_ccache cache,
+ krb5_cc_cursor *cursor)
+{
+ cc_credentials_iterator_t iter = *cursor;
+
+ cc_credentials_iterator_release(iter);
+ *cursor = NULL;
+ return 0;
+}
+
+static krb5_error_code
+api_macos_remove_cred(krb5_context context, krb5_ccache cache,
+ krb5_flags flags, krb5_creds *creds)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+ krb5_error_code ret = 0;
+ cc_credentials_iterator_t iter = NULL;
+ cc_credentials_t acreds;
+ krb5_creds mcreds;
+ krb5_boolean match;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_new_credentials_iterator(data->cache, &iter);
+ if (err)
+ return ccerr2mit(err);
+
+ for (;;) {
+ err = cc_credentials_iterator_next(iter, &acreds);
+ if (err)
+ break;
+
+ ret = k5_ccapi_to_krb5_creds(context, acreds->data, &mcreds);
+ if (ret) {
+ cc_credentials_release(acreds);
+ break;
+ }
+
+ match = krb5int_cc_creds_match_request(context, flags, creds, &mcreds);
+ krb5_free_cred_contents(context, &mcreds);
+ if (match)
+ err = cc_ccache_remove_credentials(data->cache, acreds);
+ cc_credentials_release(acreds);
+ if (err)
+ break;
+ }
+
+ cc_credentials_iterator_release(iter);
+
+ if (ret)
+ return ret;
+ if (err != ccIteratorEnd)
+ return ccerr2mit(err);
+ return 0;
+}
+
+static krb5_error_code
+api_macos_set_flags(krb5_context context, krb5_ccache cache, krb5_flags flags)
+{
+ return 0;
+}
+
+static krb5_error_code
+api_macos_get_flags(krb5_context context, krb5_ccache cache, krb5_flags *flags)
+{
+ *flags = 0;
+ return 0;
+}
+
+static krb5_error_code
+api_macos_ptcursor_new(krb5_context context, krb5_cc_ptcursor *ptcursor_out)
+{
+ krb5_cc_ptcursor ptcursor = NULL;
+ struct api_macos_ptcursor *apt = NULL;
+
+ apt = malloc(sizeof(*apt));
+ if (apt == NULL)
+ return ENOMEM;
+ apt->first = TRUE;
+ apt->primary = NULL;
+ apt->cc_context = NULL;
+ apt->iter = NULL;
+
+ ptcursor = malloc(sizeof(*ptcursor));
+ if (ptcursor == NULL) {
+ free(apt);
+ return ENOMEM;
+ }
+
+ ptcursor->ops = &krb5_api_macos_ops;
+ ptcursor->data = apt;
+ *ptcursor_out = ptcursor;
+ return 0;
+}
+
+/* Create a cache object and open it to ensure that it exists in the
+ * collection. If it does not, return success but set *cache_out to NULL. */
+static krb5_error_code
+make_open_cache(const char *residual, krb5_ccache *cache_out)
+{
+ krb5_error_code ret;
+ krb5_ccache cache;
+ uint32_t err;
+
+ *cache_out = NULL;
+
+ ret = make_cache(residual, NULL, &cache);
+ if (ret)
+ return ret;
+
+ err = open_cache(cache->data);
+ if (err) {
+ api_macos_close(NULL, cache);
+ return (err == ccErrCCacheNotFound) ? 0 : ccerr2mit(err);
+ }
+
+ *cache_out = cache;
+ return 0;
+}
+
+static krb5_error_code
+api_macos_ptcursor_next(krb5_context context, krb5_cc_ptcursor ptcursor,
+ krb5_ccache *cache_out)
+{
+ krb5_error_code ret;
+ uint32_t err;
+ struct api_macos_ptcursor *apt = ptcursor->data;
+ const char *defname, *defresidual;
+ cc_ccache_t cache;
+ cc_string_t residual;
+ struct api_macos_cache_data *data;
+
+ *cache_out = NULL;
+
+ defname = krb5_cc_default_name(context);
+ if (defname == NULL || strncmp(defname, "API:", 4) != 0)
+ return 0;
+ defresidual = defname + 4;
+
+ /* If the default cache name is a subsidiary cache, yield that cache if it
+ * exists and stop. */
+ if (*defresidual != '\0') {
+ if (!apt->first)
+ return 0;
+ apt->first = FALSE;
+ return make_open_cache(defresidual, cache_out);
+ }
+
+ if (apt->first) {
+ apt->first = FALSE;
+
+ /* Prepare to iterate over the collection. */
+ err = cc_initialize(&apt->cc_context, ccapi_version_max, NULL, NULL);
+ if (err)
+ return KRB5_FCC_INTERNAL;
+ err = cc_context_new_ccache_iterator(apt->cc_context, &apt->iter);
+ if (err)
+ return KRB5_FCC_INTERNAL;
+
+ /* Yield the primary cache first if it exists. */
+ ret = get_primary_name(context, &apt->primary);
+ if (ret)
+ return ret;
+ ret = make_open_cache(apt->primary, cache_out);
+ if (ret || *cache_out != NULL)
+ return ret;
+ }
+
+ for (;;) {
+ err = cc_ccache_iterator_next(apt->iter, &cache);
+ if (err)
+ return (err == ccIteratorEnd) ? 0 : ccerr2mit(err);
+
+ err = cc_ccache_get_name(cache, &residual);
+ if (err) {
+ cc_ccache_release(cache);
+ return ccerr2mit(err);
+ }
+
+ /* Skip the primary cache since we yielded it first. */
+ if (strcmp(residual->data, apt->primary) != 0)
+ break;
+ }
+
+ ret = make_cache(residual->data, NULL, cache_out);
+ cc_string_release(residual);
+ if (ret) {
+ cc_ccache_release(cache);
+ return ret;
+ }
+ data = (*cache_out)->data;
+ data->cache = cache;
+ return 0;
+}
+
+static krb5_error_code
+api_macos_ptcursor_free(krb5_context context, krb5_cc_ptcursor *ptcursor)
+{
+ struct api_macos_ptcursor *apt = (*ptcursor)->data;
+
+ if (apt != NULL) {
+ if (apt->iter != NULL)
+ cc_ccache_iterator_release(apt->iter);
+ if (apt->cc_context != NULL)
+ cc_context_release(apt->cc_context);
+ free(apt->primary);
+ free(apt);
+ }
+
+ free(*ptcursor);
+ *ptcursor = NULL;
+
+ return 0;
+}
+
+static krb5_error_code
+api_macos_lock(krb5_context context, krb5_ccache cache)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_lock(data->cache, cc_lock_write, cc_lock_block);
+ return ccerr2mit(err);
+}
+
+static krb5_error_code
+api_macos_unlock(krb5_context context, krb5_ccache cache)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_unlock(data->cache);
+ return ccerr2mit(err);
+}
+
+static krb5_error_code
+api_macos_switch_to(krb5_context context, krb5_ccache cache)
+{
+ struct api_macos_cache_data *data = cache->data;
+ uint32_t err;
+
+ err = open_cache(data);
+ if (err)
+ return ccerr2mit(err);
+
+ err = cc_ccache_set_default(data->cache);
+ return ccerr2mit(err);
+}
+
+const krb5_cc_ops krb5_api_macos_ops = {
+ 0,
+ "API",
+ api_macos_get_name,
+ api_macos_resolve,
+ api_macos_gen_new,
+ api_macos_initialize,
+ api_macos_destroy,
+ api_macos_close,
+ api_macos_store,
+ api_macos_retrieve,
+ api_macos_get_princ,
+ api_macos_start_seq_get,
+ api_macos_next_cred,
+ api_macos_end_seq_get,
+ api_macos_remove_cred,
+ api_macos_set_flags,
+ api_macos_get_flags,
+ api_macos_ptcursor_new,
+ api_macos_ptcursor_next,
+ api_macos_ptcursor_free,
+ NULL, /* move */
+ NULL, /* wasdefault */
+ api_macos_lock,
+ api_macos_unlock,
+ api_macos_switch_to,
+};
+
+#endif /* TARGET_OS_MAC */
return ((struct kcm_cache_data *)cache->data)->residual;
}
+/* Fetch the primary name within the collection. The result is only valid for
+ * the lifetime of req and should not be freed. */
+static krb5_error_code
+get_primary_name(krb5_context context, struct kcmreq *req, struct kcmio *io,
+ const char **name_out)
+{
+ krb5_error_code ret;
+
+ *name_out = NULL;
+
+ kcmreq_init(req, KCM_OP_GET_DEFAULT_CACHE, NULL);
+ ret = kcmio_call(context, io, req);
+ if (ret)
+ return ret;
+ return kcmreq_get_name(req, name_out);
+}
+
static krb5_error_code KRB5_CALLCONV
kcm_resolve(krb5_context context, krb5_ccache *cache_out, const char *residual)
{
goto cleanup;
if (*residual == '\0') {
- kcmreq_init(&req, KCM_OP_GET_DEFAULT_CACHE, NULL);
- ret = kcmio_call(context, io, &req);
- if (ret)
- goto cleanup;
- ret = kcmreq_get_name(&req, &defname);
+ ret = get_primary_name(context, &req, io, &defname);
if (ret)
goto cleanup;
residual = defname;
return ret;
}
+krb5_error_code
+k5_kcm_primary_name(krb5_context context, char **name_out)
+{
+ krb5_error_code ret;
+ struct kcmreq req = EMPTY_KCMREQ;
+ struct kcmio *io = NULL;
+ const char *name;
+
+ *name_out = NULL;
+
+ ret = kcmio_connect(context, &io);
+ if (ret)
+ goto cleanup;
+ ret = get_primary_name(context, &req, io, &name);
+ if (ret)
+ goto cleanup;
+ *name_out = strdup(name);
+ ret = (*name_out == NULL) ? ENOMEM : 0;
+
+cleanup:
+ kcmio_close(io);
+ kcmreq_free(&req);
+ return ret;
+}
+
static krb5_error_code KRB5_CALLCONV
kcm_gen_new(krb5_context context, krb5_ccache *cache_out)
{
/* Setting the timeout to zero would reset the timeout, so we set it to one
* second instead if creds are already expired. */
- timeout = ts_after(endtime, now) ? ts_delta(endtime, now) : 1;
+ timeout = ts_after(endtime, now) ? ts_interval(now, endtime) : 1;
(void)keyctl_set_timeout(data->cache_id, timeout);
}
if (ts_after(creds->times.endtime, now)) {
(void)keyctl_set_timeout(cred_key,
- ts_delta(creds->times.endtime, now));
+ ts_interval(now, creds->times.endtime));
}
update_keyring_expiration(context, id);
mydir=lib$(S)krb5$(S)ccache$(S)ccapi
BUILDTOP=$(REL)..$(S)..$(S)..$(S)..
LOCALINCLUDES = $(WIN_INCLUDES)
-DEFINES= -DUSE_CCAPI -DUSE_CCAPI_V3
+DEFINES= -DUSE_CCAPI
##DOS##WIN_INCLUDES = -I$(top_srcdir)\windows\lib
STLIBOBJS = \
stdcc.o \
- stdcc_util.o \
winccld.o
-OBJS = $(OUTPRE)stdcc.$(OBJEXT) $(OUTPRE)stdcc_util.$(OBJEXT) $(OUTPRE)winccld.$(OBJEXT)
+OBJS = $(OUTPRE)stdcc.$(OBJEXT) $(OUTPRE)winccld.$(OBJEXT)
-SRCS = $(srcdir)/stdcc.c $(srcdir)/stdcc_util.c $(srcdir)/winccld.c
+SRCS = $(srcdir)/stdcc.c $(srcdir)/winccld.c
##DOS##LIBOBJS = $(OBJS)
$(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-thread.h \
$(top_srcdir)/include/krb5.h $(top_srcdir)/include/krb5/locate_plugin.h \
$(top_srcdir)/include/krb5/preauth_plugin.h $(top_srcdir)/include/port-sockets.h \
- $(top_srcdir)/include/socket-utils.h stdcc.c stdcc.h stdcc_util.h
-stdcc_util.so stdcc_util.po $(OUTPRE)stdcc_util.$(OBJEXT): \
- $(BUILDTOP)/include/autoconf.h $(BUILDTOP)/include/krb5/krb5.h \
- $(COM_ERR_DEPS) $(top_srcdir)/include/CredentialsCache.h \
- $(top_srcdir)/include/krb5.h stdcc_util.c stdcc_util.h
+ $(top_srcdir)/include/socket-utils.h stdcc.c stdcc.h
winccld.so winccld.po $(OUTPRE)winccld.$(OBJEXT): winccld.c
#include "k5-int.h"
#include "../cc-int.h"
+#include "../ccapi_util.h"
#include "stdcc.h"
-#include "stdcc_util.h"
#include "string.h"
#include <stdio.h>
#define SHOW_DEBUG(buf)
#endif
-#ifdef USE_CCAPI_V3
cc_context_t gCntrlBlock = NULL;
cc_int32 gCCVersion = 0;
-#else
-apiCB *gCntrlBlock = NULL;
-#endif
/*
* declare our global object wanna-be
krb5_cc_ops krb5_cc_stdcc_ops = {
0,
"API",
-#ifdef USE_CCAPI_V3
krb5_stdccv3_get_name,
krb5_stdccv3_resolve,
krb5_stdccv3_generate_new,
krb5_stdccv3_lock,
krb5_stdccv3_unlock,
krb5_stdccv3_switch_to,
-#else
- krb5_stdcc_get_name,
- krb5_stdcc_resolve,
- krb5_stdcc_generate_new,
- krb5_stdcc_initialize,
- krb5_stdcc_destroy,
- krb5_stdcc_close,
- krb5_stdcc_store,
- krb5_stdcc_retrieve,
- krb5_stdcc_get_principal,
- krb5_stdcc_start_seq_get,
- krb5_stdcc_next_cred,
- krb5_stdcc_end_seq_get,
- krb5_stdcc_remove,
- krb5_stdcc_set_flags,
- krb5_stdcc_get_flags,
- NULL,
- NULL,
- NULL,
- NULL,
- NULL,
-#endif
};
#if defined(_WIN32)
static const struct err_xlate err_xlate_table[] =
{
-#ifdef USE_CCAPI_V3
{ ccIteratorEnd, KRB5_CC_END },
{ ccErrBadParam, KRB5_FCC_INTERNAL },
{ ccErrNoMem, KRB5_CC_NOMEM },
{ ccErrTimeOffsetNotSet, KRB5_FCC_INTERNAL },
{ ccErrBadInternalMessage, KRB5_FCC_INTERNAL },
{ ccErrNotImplemented, KRB5_FCC_INTERNAL },
-#else
- { CC_BADNAME, KRB5_CC_BADNAME },
- { CC_NOTFOUND, KRB5_CC_NOTFOUND },
- { CC_END, KRB5_CC_END },
- { CC_IO, KRB5_CC_IO },
- { CC_WRITE, KRB5_CC_WRITE },
- { CC_NOMEM, KRB5_CC_NOMEM },
- { CC_FORMAT, KRB5_CC_FORMAT },
- { CC_WRITE, KRB5_CC_WRITE },
- { CC_LOCKED, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_BAD_API_VERSION, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_NO_EXIST, KRB5_FCC_NOFILE },
- { CC_NOT_SUPP, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_BAD_PARM, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_ERR_CACHE_ATTACH, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_ERR_CACHE_RELEASE, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_ERR_CACHE_FULL, KRB5_FCC_INTERNAL /* XXX */ },
- { CC_ERR_CRED_VERSION, KRB5_FCC_INTERNAL /* XXX */ },
-#endif
{ 0, 0 }
};
{
const struct err_xlate *p;
-#ifdef USE_CCAPI_V3
if (err == ccNoError)
return 0;
-#else
- if (err == CC_NOERROR)
- return 0;
-#endif
for (p = err_xlate_table; p->cc_err; p++) {
if (err == p->cc_err)
}
-#ifdef USE_CCAPI_V3
-
static krb5_error_code stdccv3_get_timeoffset (krb5_context in_context,
cc_ccache_t in_ccache)
{
if (!err) {
/* copy the fields from the almost identical structures */
- err = copy_krb5_creds_to_cc_cred_union (context, creds, &cred_union);
+ err = k5_krb5_to_ccapi_creds (context, creds, &cred_union);
}
if (!err) {
cache_changed();
}
- if (cred_union) { cred_union_release (cred_union); }
+ if (cred_union) { k5_release_ccapi_cred (cred_union); }
return cc_err_xlate (err);
}
err = cc_credentials_iterator_next (iterator, &credentials);
if (!err && (credentials->data->version == cc_credentials_v5)) {
- copy_cc_cred_union_to_krb5_creds(context, credentials->data, creds);
+ err = k5_ccapi_to_krb5_creds (context, credentials->data, creds);
break;
}
}
if (!err && (credentials->data->version == cc_credentials_v5)) {
krb5_creds creds;
- err = copy_cc_cred_union_to_krb5_creds(context,
- credentials->data, &creds);
+ err = k5_ccapi_to_krb5_creds (context, credentials->data, &creds);
if (!err) {
found = krb5int_cc_creds_match_request(context,
return cc_err_xlate(err);
}
-#else /* !USE_CCAPI_V3 */
-
-static krb5_error_code stdcc_setup(krb5_context context,
- stdccCacheDataPtr ccapi_data)
-{
- int err;
-
- /* make sure the API has been initialized */
- if (gCntrlBlock == NULL) {
-#ifdef CC_API_VER2
- err = cc_initialize(&gCntrlBlock, CC_API_VER_2, NULL, NULL);
-#else
- err = cc_initialize(&gCntrlBlock, CC_API_VER_1, NULL, NULL);
-#endif
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
- }
-
- /*
- * No ccapi_data structure, so we don't need to make sure the
- * ccache exists.
- */
- if (!ccapi_data)
- return 0;
-
- /*
- * The ccache already exists
- */
- if (ccapi_data->NamedCache)
- return 0;
-
- err = cc_open(gCntrlBlock, ccapi_data->cache_name,
- CC_CRED_V5, 0L, &ccapi_data->NamedCache);
- if (err == CC_NOTFOUND)
- err = CC_NO_EXIST;
- if (err == CC_NOERROR)
- return 0;
-
- ccapi_data->NamedCache = NULL;
- return cc_err_xlate(err);
-}
-
-void krb5_stdcc_shutdown()
-{
- if (gCntrlBlock)
- cc_shutdown(&gCntrlBlock);
- gCntrlBlock = NULL;
-}
-
-/*
- * -- generate_new --------------------------------
- *
- * create a new cache with a unique name, corresponds to creating a
- * named cache iniitialize the API here if we have to.
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_generate_new
-(krb5_context context, krb5_ccache *id )
-{
- krb5_ccache newCache = NULL;
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = NULL;
- char *name = NULL;
- cc_time_t change_time;
- int err;
-
- if ((retval = stdcc_setup(context, NULL)))
- return retval;
-
- retval = KRB5_CC_NOMEM;
- if (!(newCache = (krb5_ccache) malloc(sizeof(struct _krb5_ccache))))
- goto errout;
- if (!(ccapi_data = (stdccCacheDataPtr)malloc(sizeof(stdccCacheData))))
- goto errout;
- if (!(name = malloc(256)))
- goto errout;
-
- /* create a unique name */
- cc_get_change_time(gCntrlBlock, &change_time);
- snprintf(name, 256, "gen_new_cache%d", change_time);
-
- /* create the new cache */
- err = cc_create(gCntrlBlock, name, name, CC_CRED_V5, 0L,
- &ccapi_data->NamedCache);
- if (err != CC_NOERROR) {
- retval = cc_err_xlate(err);
- goto errout;
- }
-
- /* setup some fields */
- newCache->ops = &krb5_cc_stdcc_ops;
- newCache->data = ccapi_data;
- ccapi_data->cache_name = name;
-
- /* return a pointer to the new cache */
- *id = newCache;
-
- return 0;
-
-errout:
- if (newCache)
- free(newCache);
- if (ccapi_data)
- free(ccapi_data);
- if (name)
- free(name);
- return retval;
-}
-
-/*
- * resolve
- *
- * create a new cache with the name stored in residual
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_resolve
-(krb5_context context, krb5_ccache *id , const char *residual )
-{
- krb5_ccache newCache = NULL;
- stdccCacheDataPtr ccapi_data = NULL;
- int err;
- krb5_error_code retval;
- char *cName = NULL;
-
- if ((retval = stdcc_setup(context, NULL)))
- return retval;
-
- retval = KRB5_CC_NOMEM;
- if (!(newCache = (krb5_ccache) malloc(sizeof(struct _krb5_ccache))))
- goto errout;
-
- if (!(ccapi_data = (stdccCacheDataPtr)malloc(sizeof(stdccCacheData))))
- goto errout;
-
- if (!(cName = strdup(residual)))
- goto errout;
-
- newCache->ops = &krb5_cc_stdcc_ops;
- newCache->data = ccapi_data;
- ccapi_data->cache_name = cName;
-
- err = cc_open(gCntrlBlock, cName, CC_CRED_V5, 0L,
- &ccapi_data->NamedCache);
- if (err != CC_NOERROR) {
- ccapi_data->NamedCache = NULL;
- if (err != CC_NO_EXIST) {
- retval = cc_err_xlate(err);
- goto errout;
- }
- }
-
- /* return new cache structure */
- *id = newCache;
-
- return 0;
-
-errout:
- if (newCache)
- free(newCache);
- if (ccapi_data)
- free(ccapi_data);
- if (cName)
- free(cName);
- return retval;
-}
-
-/*
- * initialize
- *
- * initialize the cache, check to see if one already exists for this
- * principal if not set our principal to this principal. This
- * searching enables ticket sharing
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_initialize
-(krb5_context context, krb5_ccache id, krb5_principal princ)
-{
- stdccCacheDataPtr ccapi_data = NULL;
- int err;
- char *cName = NULL;
- krb5_error_code retval;
-
- if ((retval = stdcc_setup(context, NULL)))
- return retval;
-
- /* test id for null */
- if (id == NULL) return KRB5_CC_NOMEM;
-
- if ((retval = krb5_unparse_name(context, princ, &cName)))
- return retval;
-
- ccapi_data = id->data;
-
-
- if (ccapi_data->NamedCache)
- cc_close(gCntrlBlock, &ccapi_data->NamedCache);
-
- err = cc_create(gCntrlBlock, ccapi_data->cache_name, cName,
- CC_CRED_V5, 0L, &ccapi_data->NamedCache);
- if (err != CC_NOERROR) {
- krb5_free_unparsed_name(context, cName);
- return cc_err_xlate(err);
- }
-
- krb5_free_unparsed_name(context, cName);
- cache_changed();
-
- return cc_err_xlate(err);
-}
-
-/*
- * store
- *
- * store some credentials in our cache
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_store
-(krb5_context context, krb5_ccache id, krb5_creds *creds )
-{
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = id->data;
- cred_union *cu = NULL;
- int err;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
- /* copy the fields from the almost identical structures */
- dupK5toCC(context, creds, &cu);
-
- /*
- * finally store the credential
- * store will copy (that is duplicate) everything
- */
- err = cc_store(gCntrlBlock,
- ((stdccCacheDataPtr)(id->data))->NamedCache, *cu);
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-
- /* free the cred union using our local version of cc_free_creds()
- since we allocated it locally */
- err = krb5int_free_cc_cred_union(&cu);
-
- cache_changed();
- return err;
-}
-
-/*
- * start_seq_get
- *
- * begin an iterator call to get all of the credentials in the cache
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_start_seq_get
-(krb5_context context, krb5_ccache id , krb5_cc_cursor *cursor )
-{
- stdccCacheDataPtr ccapi_data = id->data;
- krb5_error_code retval;
- int err;
- ccache_cit *iterator;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
-#ifdef CC_API_VER2
- err = cc_seq_fetch_creds_begin(gCntrlBlock, ccapi_data->NamedCache,
- &iterator);
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
- *cursor = iterator;
-#else
- /* all we have to do is initialize the cursor */
- *cursor = NULL;
-#endif
- return 0;
-}
-
-/*
- * next cred
- *
- * - get the next credential in the cache as part of an iterator call
- * - this maps to call to cc_seq_fetch_creds
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_next_cred
-(krb5_context context, krb5_ccache id, krb5_cc_cursor *cursor,
- krb5_creds *creds)
-{
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = id->data;
- int err;
- cred_union *credU = NULL;
- ccache_cit *iterator;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
-#ifdef CC_API_VER2
- iterator = *cursor;
- if (iterator == 0)
- return KRB5_CC_END;
- err = cc_seq_fetch_creds_next(gCntrlBlock, &credU, iterator);
-
- if (err == CC_END) {
- cc_seq_fetch_creds_end(gCntrlBlock, &iterator);
- *cursor = 0;
- }
-#else
- err = cc_seq_fetch_creds(gCntrlBlock, ccapi_data->NamedCache,
- &credU, (ccache_cit **)cursor);
-#endif
-
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-
- /* copy data (with translation) */
- dupCCtoK5(context, credU->cred.pV5Cred, creds);
-
- /* free our version of the cred - okay to use cc_free_creds() here
- because we got it from the CCache library */
- cc_free_creds(gCntrlBlock, &credU);
-
- return 0;
-}
-
-
-/*
- * retrieve
- *
- * - try to find a matching credential in the cache
- */
-krb5_error_code KRB5_CALLCONV
-krb5_stdcc_retrieve(context, id, whichfields, mcreds, creds)
- krb5_context context;
- krb5_ccache id;
- krb5_flags whichfields;
- krb5_creds *mcreds;
- krb5_creds *creds;
-{
- return k5_cc_retrieve_cred_default(context, id, whichfields, mcreds,
- creds);
-}
-
-/*
- * end seq
- *
- * just free up the storage associated with the cursor (if we could)
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_end_seq_get
-(krb5_context context, krb5_ccache id, krb5_cc_cursor *cursor)
-{
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = NULL;
- int err;
-#ifndef CC_API_VER2
- cred_union *credU = NULL;
-#endif
-
- ccapi_data = id->data;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
- if (*cursor == NULL)
- return 0;
-
-#ifdef CC_API_VER2
- err = cc_seq_fetch_creds_end(gCntrlBlock, (ccache_cit **)cursor);
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-#else
- /*
- * Finish calling cc_seq_fetch_creds to clear out the cursor
- */
- while (*cursor) {
- err = cc_seq_fetch_creds(gCntrlBlock, ccapi_data->NamedCache,
- &credU, (ccache_cit **)cursor);
- if (err)
- break;
-
- /* okay to call cc_free_creds() here because we got credU from CCache lib */
- cc_free_creds(gCntrlBlock, &credU);
- }
-#endif
-
- return(0);
-}
-
-/*
- * close
- *
- * - free our pointers to the NC
- */
-krb5_error_code KRB5_CALLCONV
-krb5_stdcc_close(krb5_context context, krb5_ccache id)
-{
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = id->data;
-
- if ((retval = stdcc_setup(context, NULL)))
- return retval;
-
- /* free it */
-
- if (ccapi_data) {
- if (ccapi_data->cache_name)
- free(ccapi_data->cache_name);
- if (ccapi_data->NamedCache)
- cc_close(gCntrlBlock, &ccapi_data->NamedCache);
- free(ccapi_data);
- id->data = NULL;
- }
- free(id);
-
- return 0;
-}
-
-/*
- * destroy
- *
- * - free our storage and the cache
- */
-krb5_error_code KRB5_CALLCONV
-krb5_stdcc_destroy (krb5_context context, krb5_ccache id)
-{
- int err;
- krb5_error_code retval;
- stdccCacheDataPtr ccapi_data = id->data;
-
- if ((retval = stdcc_setup(context, ccapi_data))) {
- return retval;
- }
-
- /* free memory associated with the krb5_ccache */
- if (ccapi_data) {
- if (ccapi_data->cache_name)
- free(ccapi_data->cache_name);
- if (ccapi_data->NamedCache) {
- /* destroy the named cache */
- err = cc_destroy(gCntrlBlock, &ccapi_data->NamedCache);
- retval = cc_err_xlate(err);
- cache_changed();
- }
- free(ccapi_data);
- id->data = NULL;
- }
- free(id);
-
- /* If the cache does not exist when we tried to destroy it,
- that's fine. That means someone else destroyed it since
- we resolved it. */
- if (retval == KRB5_FCC_NOFILE)
- return 0;
- return retval;
-}
-
-/*
- * getname
- *
- * - return the name of the named cache
- */
-const char * KRB5_CALLCONV krb5_stdcc_get_name
-(krb5_context context, krb5_ccache id )
-{
- stdccCacheDataPtr ccapi_data = id->data;
-
- if (!ccapi_data)
- return 0;
-
- return (ccapi_data->cache_name);
-}
-
-
-/* get_principal
- *
- * - return the principal associated with the named cache
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_get_principal
-(krb5_context context, krb5_ccache id , krb5_principal *princ)
-{
- int err;
- char *name = NULL;
- stdccCacheDataPtr ccapi_data = id->data;
- krb5_error_code retval;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
- /* another wrapper */
- err = cc_get_principal(gCntrlBlock, ccapi_data->NamedCache,
- &name);
-
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-
- /* turn it into a krb principal */
- err = krb5_parse_name(context, name, princ);
-
- cc_free_principal(gCntrlBlock, &name);
-
- return err;
-}
-
-/*
- * set_flags
- *
- * - currently a NOP since we don't store any flags in the NC
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_set_flags
-(krb5_context context, krb5_ccache id , krb5_flags flags)
-{
- stdccCacheDataPtr ccapi_data = id->data;
- krb5_error_code retval;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
- return 0;
-}
-
-/*
- * get_flags
- *
- * - currently a NOP since we don't store any flags in the NC
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_get_flags
-(krb5_context context, krb5_ccache id , krb5_flags *flags)
-{
- stdccCacheDataPtr ccapi_data = id->data;
- krb5_error_code retval;
-
- if ((retval = stdcc_setup(context, ccapi_data)))
- return retval;
-
- return 0;
-}
-
-/*
- * remove
- *
- * - remove the specified credentials from the NC
- */
-krb5_error_code KRB5_CALLCONV krb5_stdcc_remove
-(krb5_context context, krb5_ccache id,
- krb5_flags flags, krb5_creds *creds)
-{
- cred_union *cu = NULL;
- int err;
- stdccCacheDataPtr ccapi_data = id->data;
- krb5_error_code retval;
-
- if ((retval = stdcc_setup(context, ccapi_data))) {
- if (retval == KRB5_FCC_NOFILE)
- return 0;
- return retval;
- }
-
- /* convert to a cred union */
- dupK5toCC(context, creds, &cu);
-
- /* remove it */
- err = cc_remove_cred(gCntrlBlock, ccapi_data->NamedCache, *cu);
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-
- /* free the cred union using our local version of cc_free_creds()
- since we allocated it locally */
- err = krb5int_free_cc_cred_union(&cu);
- cache_changed();
- if (err != CC_NOERROR)
- return cc_err_xlate(err);
-
- return 0;
-}
-#endif /* !USE_CCAPI_V3 */
-
#endif /* defined(_WIN32) || defined(USE_CCAPI) */
#include "k5-int.h" /* loads krb5.h */
#include "../cc-int.h"
-#ifdef USE_CCAPI_V3
#include <CredentialsCache.h>
-#else
-#if defined(_WIN32)
-#include "cacheapi.h"
-#else
-#include <CredentialsCache2.h>
-#endif
-#endif
#define kStringLiteralLen 255
*/
typedef struct _stdccCacheData {
char *cache_name;
-#ifdef USE_CCAPI_V3
cc_ccache_t NamedCache;
-#else
- ccache_p *NamedCache;
-#endif
} stdccCacheData, *stdccCacheDataPtr;
void krb5_stdcc_shutdown(void);
-#ifdef USE_CCAPI_V3
-
krb5_error_code KRB5_CALLCONV krb5_stdccv3_close
(krb5_context, krb5_ccache id );
krb5_error_code KRB5_CALLCONV krb5_stdccv3_switch_to
(krb5_context context, krb5_ccache id);
-#else
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_close
-(krb5_context, krb5_ccache id );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_destroy
-(krb5_context, krb5_ccache id );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_end_seq_get
-(krb5_context, krb5_ccache id , krb5_cc_cursor *cursor );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_generate_new
-(krb5_context, krb5_ccache *id );
-
-const char * KRB5_CALLCONV krb5_stdcc_get_name
-(krb5_context, krb5_ccache id );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_get_principal
-(krb5_context, krb5_ccache id , krb5_principal *princ );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_initialize
-(krb5_context, krb5_ccache id , krb5_principal princ );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_next_cred
-(krb5_context,
- krb5_ccache id ,
- krb5_cc_cursor *cursor ,
- krb5_creds *creds );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_resolve
-(krb5_context, krb5_ccache *id , const char *residual );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_retrieve
-(krb5_context,
- krb5_ccache id ,
- krb5_flags whichfields ,
- krb5_creds *mcreds ,
- krb5_creds *creds );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_start_seq_get
-(krb5_context, krb5_ccache id , krb5_cc_cursor *cursor );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_store
-(krb5_context, krb5_ccache id , krb5_creds *creds );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_set_flags
-(krb5_context, krb5_ccache id , krb5_flags flags );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_get_flags
-(krb5_context, krb5_ccache id , krb5_flags *flags );
-
-krb5_error_code KRB5_CALLCONV krb5_stdcc_remove
-(krb5_context, krb5_ccache id , krb5_flags flags, krb5_creds *creds);
-#endif
#endif /* defined(_WIN32) || defined(USE_CCAPI) */
+++ /dev/null
-/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
-/*
- * stdcc_util.c
- * utility functions used in implementing the ccache api for krb5
- * not publicly exported
- * Frank Dabek, July 1998
- */
-
-#if defined(_WIN32) || defined(USE_CCAPI)
-
-#include <stdlib.h>
-#include <string.h>
-#include <errno.h>
-
-#if defined(_WIN32)
-#include <malloc.h>
-#endif
-
-#include "k5-int.h"
-#include "stdcc_util.h"
-#ifdef _WIN32 /* it's part of krb5.h everywhere else */
-#include "kv5m_err.h"
-#endif
-
-#define fieldSize 255
-
-#ifdef USE_CCAPI_V3
-
-
-static void
-free_cc_array (cc_data **io_cc_array)
-{
- if (io_cc_array) {
- unsigned int i;
-
- for (i = 0; io_cc_array[i]; i++) {
- if (io_cc_array[i]->data) { free (io_cc_array[i]->data); }
- free (io_cc_array[i]);
- }
- free (io_cc_array);
- }
-}
-
-static krb5_error_code
-copy_cc_array_to_addresses (krb5_context in_context,
- cc_data **in_cc_array,
- krb5_address ***out_addresses)
-{
- krb5_error_code err = 0;
-
- if (in_cc_array == NULL) {
- *out_addresses = NULL;
-
- } else {
- unsigned int count, i;
- krb5_address **addresses = NULL;
-
- /* get length of array */
- for (count = 0; in_cc_array[count]; count++);
- addresses = (krb5_address **) malloc (sizeof (*addresses) * (count + 1));
- if (!addresses) { err = KRB5_CC_NOMEM; }
-
- for (i = 0; !err && i < count; i++) {
- addresses[i] = (krb5_address *) malloc (sizeof (krb5_address));
- if (!addresses[i]) { err = KRB5_CC_NOMEM; }
-
- if (!err) {
- addresses[i]->contents = (krb5_octet *) malloc (sizeof (krb5_octet) *
- in_cc_array[i]->length);
- if (!addresses[i]->contents) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- addresses[i]->magic = KV5M_ADDRESS;
- addresses[i]->addrtype = in_cc_array[i]->type;
- addresses[i]->length = in_cc_array[i]->length;
- memcpy (addresses[i]->contents,
- in_cc_array[i]->data, in_cc_array[i]->length);
- }
- }
-
- if (!err) {
- addresses[i] = NULL; /* terminator */
- *out_addresses = addresses;
- addresses = NULL;
- }
-
- if (addresses) { krb5_free_addresses (in_context, addresses); }
- }
-
- return err;
-}
-
-static krb5_error_code
-copy_cc_array_to_authdata (krb5_context in_context,
- cc_data **in_cc_array,
- krb5_authdata ***out_authdata)
-{
- krb5_error_code err = 0;
-
- if (in_cc_array == NULL) {
- *out_authdata = NULL;
-
- } else {
- unsigned int count, i;
- krb5_authdata **authdata = NULL;
-
- /* get length of array */
- for (count = 0; in_cc_array[count]; count++);
- authdata = (krb5_authdata **) malloc (sizeof (*authdata) * (count + 1));
- if (!authdata) { err = KRB5_CC_NOMEM; }
-
- for (i = 0; !err && i < count; i++) {
- authdata[i] = (krb5_authdata *) malloc (sizeof (krb5_authdata));
- if (!authdata[i]) { err = KRB5_CC_NOMEM; }
-
- if (!err) {
- authdata[i]->contents = (krb5_octet *) malloc (sizeof (krb5_octet) *
- in_cc_array[i]->length);
- if (!authdata[i]->contents) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- authdata[i]->magic = KV5M_AUTHDATA;
- authdata[i]->ad_type = in_cc_array[i]->type;
- authdata[i]->length = in_cc_array[i]->length;
- memcpy (authdata[i]->contents,
- in_cc_array[i]->data, in_cc_array[i]->length);
- }
- }
-
- if (!err) {
- authdata[i] = NULL; /* terminator */
- *out_authdata = authdata;
- authdata = NULL;
- }
-
- if (authdata) { krb5_free_authdata (in_context, authdata); }
- }
-
- return err;
-}
-
-static krb5_error_code
-copy_addresses_to_cc_array (krb5_context in_context,
- krb5_address **in_addresses,
- cc_data ***out_cc_array)
-{
- krb5_error_code err = 0;
-
- if (in_addresses == NULL) {
- *out_cc_array = NULL;
-
- } else {
- unsigned int count, i;
- cc_data **cc_array = NULL;
-
- /* get length of array */
- for (count = 0; in_addresses[count]; count++);
- cc_array = (cc_data **) malloc (sizeof (*cc_array) * (count + 1));
- if (!cc_array) { err = KRB5_CC_NOMEM; }
-
- for (i = 0; !err && i < count; i++) {
- cc_array[i] = (cc_data *) malloc (sizeof (cc_data));
- if (!cc_array[i]) { err = KRB5_CC_NOMEM; }
-
- if (!err) {
- cc_array[i]->data = malloc (in_addresses[i]->length);
- if (!cc_array[i]->data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- cc_array[i]->type = in_addresses[i]->addrtype;
- cc_array[i]->length = in_addresses[i]->length;
- memcpy (cc_array[i]->data, in_addresses[i]->contents, in_addresses[i]->length);
- }
- }
-
- if (!err) {
- cc_array[i] = NULL; /* terminator */
- *out_cc_array = cc_array;
- cc_array = NULL;
- }
-
- if (cc_array) { free_cc_array (cc_array); }
- }
-
-
- return err;
-}
-
-static krb5_error_code
-copy_authdata_to_cc_array (krb5_context in_context,
- krb5_authdata **in_authdata,
- cc_data ***out_cc_array)
-{
- krb5_error_code err = 0;
-
- if (in_authdata == NULL) {
- *out_cc_array = NULL;
-
- } else {
- unsigned int count, i;
- cc_data **cc_array = NULL;
-
- /* get length of array */
- for (count = 0; in_authdata[count]; count++);
- cc_array = (cc_data **) malloc (sizeof (*cc_array) * (count + 1));
- if (!cc_array) { err = KRB5_CC_NOMEM; }
-
- for (i = 0; !err && i < count; i++) {
- cc_array[i] = (cc_data *) malloc (sizeof (cc_data));
- if (!cc_array[i]) { err = KRB5_CC_NOMEM; }
-
- if (!err) {
- cc_array[i]->data = malloc (in_authdata[i]->length);
- if (!cc_array[i]->data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- cc_array[i]->type = in_authdata[i]->ad_type;
- cc_array[i]->length = in_authdata[i]->length;
- memcpy (cc_array[i]->data, in_authdata[i]->contents, in_authdata[i]->length);
- }
- }
-
- if (!err) {
- cc_array[i] = NULL; /* terminator */
- *out_cc_array = cc_array;
- cc_array = NULL;
- }
-
- if (cc_array) { free_cc_array (cc_array); }
- }
-
-
- return err;
-}
-
-
-/*
- * copy_cc_credentials_to_krb5_creds
- * - allocate an empty k5 style ticket and copy info from the cc_creds ticket
- */
-
-krb5_error_code
-copy_cc_cred_union_to_krb5_creds (krb5_context in_context,
- const cc_credentials_union *in_cred_union,
- krb5_creds *out_creds)
-{
- krb5_error_code err = 0;
- cc_credentials_v5_t *cv5 = NULL;
- krb5_int32 offset_seconds = 0, offset_microseconds = 0;
- krb5_principal client = NULL;
- krb5_principal server = NULL;
- char *ticket_data = NULL;
- char *second_ticket_data = NULL;
- unsigned char *keyblock_contents = NULL;
- krb5_address **addresses = NULL;
- krb5_authdata **authdata = NULL;
-
- if (in_cred_union->version != cc_credentials_v5) {
- err = KRB5_CC_NOT_KTYPE;
- } else {
- cv5 = in_cred_union->credentials.credentials_v5;
- }
-
-#if TARGET_OS_MAC
- if (!err) {
- err = krb5_get_time_offsets (in_context, &offset_seconds, &offset_microseconds);
- }
-#endif
-
- if (!err) {
- err = krb5_parse_name (in_context, cv5->client, &client);
- }
-
- if (!err) {
- err = krb5_parse_name (in_context, cv5->server, &server);
- }
-
- if (!err && cv5->keyblock.data) {
- keyblock_contents = (unsigned char *) malloc (cv5->keyblock.length);
- if (!keyblock_contents) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err && cv5->ticket.data) {
- ticket_data = (char *) malloc (cv5->ticket.length);
- if (!ticket_data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err && cv5->second_ticket.data) {
- second_ticket_data = (char *) malloc (cv5->second_ticket.length);
- if (!second_ticket_data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- /* addresses */
- err = copy_cc_array_to_addresses (in_context, cv5->addresses, &addresses);
- }
-
- if (!err) {
- /* authdata */
- err = copy_cc_array_to_authdata (in_context, cv5->authdata, &authdata);
- }
-
- if (!err) {
- /* principals */
- out_creds->client = client;
- client = NULL;
- out_creds->server = server;
- server = NULL;
-
- /* copy keyblock */
- if (cv5->keyblock.data) {
- memcpy (keyblock_contents, cv5->keyblock.data, cv5->keyblock.length);
- }
- out_creds->keyblock.enctype = cv5->keyblock.type;
- out_creds->keyblock.length = cv5->keyblock.length;
- out_creds->keyblock.contents = keyblock_contents;
- keyblock_contents = NULL;
-
- /* copy times */
- out_creds->times.authtime = ts_incr(cv5->authtime, offset_seconds);
- out_creds->times.starttime = ts_incr(cv5->starttime, offset_seconds);
- out_creds->times.endtime = ts_incr(cv5->endtime, offset_seconds);
- out_creds->times.renew_till = ts_incr(cv5->renew_till, offset_seconds);
- out_creds->is_skey = cv5->is_skey;
- out_creds->ticket_flags = cv5->ticket_flags;
-
- /* first ticket */
- if (cv5->ticket.data) {
- memcpy(ticket_data, cv5->ticket.data, cv5->ticket.length);
- }
- out_creds->ticket.length = cv5->ticket.length;
- out_creds->ticket.data = ticket_data;
- ticket_data = NULL;
-
- /* second ticket */
- if (cv5->second_ticket.data) {
- memcpy(second_ticket_data, cv5->second_ticket.data, cv5->second_ticket.length);
- }
- out_creds->second_ticket.length = cv5->second_ticket.length;
- out_creds->second_ticket.data = second_ticket_data;
- second_ticket_data = NULL;
-
- out_creds->addresses = addresses;
- addresses = NULL;
-
- out_creds->authdata = authdata;
- authdata = NULL;
-
- /* zero out magic number */
- out_creds->magic = 0;
- }
-
- if (addresses) { krb5_free_addresses (in_context, addresses); }
- if (authdata) { krb5_free_authdata (in_context, authdata); }
- if (keyblock_contents) { free (keyblock_contents); }
- if (ticket_data) { free (ticket_data); }
- if (second_ticket_data) { free (second_ticket_data); }
- if (client) { krb5_free_principal (in_context, client); }
- if (server) { krb5_free_principal (in_context, server); }
-
- return err;
-}
-
-/*
- * copy_krb5_creds_to_cc_credentials
- * - analogous to above but in the reverse direction
- */
-krb5_error_code
-copy_krb5_creds_to_cc_cred_union (krb5_context in_context,
- krb5_creds *in_creds,
- cc_credentials_union **out_cred_union)
-{
- krb5_error_code err = 0;
- cc_credentials_union *cred_union = NULL;
- cc_credentials_v5_t *cv5 = NULL;
- char *client = NULL;
- char *server = NULL;
- unsigned char *ticket_data = NULL;
- unsigned char *second_ticket_data = NULL;
- unsigned char *keyblock_data = NULL;
- krb5_int32 offset_seconds = 0, offset_microseconds = 0;
- cc_data **cc_address_array = NULL;
- cc_data **cc_authdata_array = NULL;
-
- if (out_cred_union == NULL) { err = KRB5_CC_NOMEM; }
-
-#if TARGET_OS_MAC
- if (!err) {
- err = krb5_get_time_offsets (in_context, &offset_seconds, &offset_microseconds);
- }
-#endif
-
- if (!err) {
- cred_union = (cc_credentials_union *) malloc (sizeof (*cred_union));
- if (!cred_union) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- cv5 = (cc_credentials_v5_t *) malloc (sizeof (*cv5));
- if (!cv5) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- err = krb5_unparse_name (in_context, in_creds->client, &client);
- }
-
- if (!err) {
- err = krb5_unparse_name (in_context, in_creds->server, &server);
- }
-
- if (!err && in_creds->keyblock.contents) {
- keyblock_data = (unsigned char *) malloc (in_creds->keyblock.length);
- if (!keyblock_data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err && in_creds->ticket.data) {
- ticket_data = (unsigned char *) malloc (in_creds->ticket.length);
- if (!ticket_data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err && in_creds->second_ticket.data) {
- second_ticket_data = (unsigned char *) malloc (in_creds->second_ticket.length);
- if (!second_ticket_data) { err = KRB5_CC_NOMEM; }
- }
-
- if (!err) {
- err = copy_addresses_to_cc_array (in_context, in_creds->addresses, &cc_address_array);
- }
-
- if (!err) {
- err = copy_authdata_to_cc_array (in_context, in_creds->authdata, &cc_authdata_array);
- }
-
- if (!err) {
- /* principals */
- cv5->client = client;
- client = NULL;
- cv5->server = server;
- server = NULL;
-
- /* copy more fields */
- if (in_creds->keyblock.contents) {
- memcpy(keyblock_data, in_creds->keyblock.contents, in_creds->keyblock.length);
- }
- cv5->keyblock.type = in_creds->keyblock.enctype;
- cv5->keyblock.length = in_creds->keyblock.length;
- cv5->keyblock.data = keyblock_data;
- keyblock_data = NULL;
-
- cv5->authtime = ts_incr(in_creds->times.authtime, -offset_seconds);
- cv5->starttime = ts_incr(in_creds->times.starttime, -offset_seconds);
- cv5->endtime = ts_incr(in_creds->times.endtime, -offset_seconds);
- cv5->renew_till = ts_incr(in_creds->times.renew_till, -offset_seconds);
- cv5->is_skey = in_creds->is_skey;
- cv5->ticket_flags = in_creds->ticket_flags;
-
- if (in_creds->ticket.data) {
- memcpy (ticket_data, in_creds->ticket.data, in_creds->ticket.length);
- }
- cv5->ticket.length = in_creds->ticket.length;
- cv5->ticket.data = ticket_data;
- ticket_data = NULL;
-
- if (in_creds->second_ticket.data) {
- memcpy (second_ticket_data, in_creds->second_ticket.data, in_creds->second_ticket.length);
- }
- cv5->second_ticket.length = in_creds->second_ticket.length;
- cv5->second_ticket.data = second_ticket_data;
- second_ticket_data = NULL;
-
- cv5->addresses = cc_address_array;
- cc_address_array = NULL;
-
- cv5->authdata = cc_authdata_array;
- cc_authdata_array = NULL;
-
- /* Set up the structures to return to the caller */
- cred_union->version = cc_credentials_v5;
- cred_union->credentials.credentials_v5 = cv5;
- cv5 = NULL;
-
- *out_cred_union = cred_union;
- cred_union = NULL;
- }
-
- if (cc_address_array) { free_cc_array (cc_address_array); }
- if (cc_authdata_array) { free_cc_array (cc_authdata_array); }
- if (keyblock_data) { free (keyblock_data); }
- if (ticket_data) { free (ticket_data); }
- if (second_ticket_data) { free (second_ticket_data); }
- if (client) { krb5_free_unparsed_name (in_context, client); }
- if (server) { krb5_free_unparsed_name (in_context, server); }
- if (cv5) { free (cv5); }
- if (cred_union) { free (cred_union); }
-
- return err;
-}
-
-krb5_error_code
-cred_union_release (cc_credentials_union *in_cred_union)
-{
- if (in_cred_union) {
- if (in_cred_union->version == cc_credentials_v5 &&
- in_cred_union->credentials.credentials_v5) {
- cc_credentials_v5_t *cv5 = in_cred_union->credentials.credentials_v5;
-
- /* should use krb5_free_unparsed_name but we have no context */
- if (cv5->client) { free (cv5->client); }
- if (cv5->server) { free (cv5->server); }
-
- if (cv5->keyblock.data) { free (cv5->keyblock.data); }
- if (cv5->ticket.data) { free (cv5->ticket.data); }
- if (cv5->second_ticket.data) { free (cv5->second_ticket.data); }
-
- free_cc_array (cv5->addresses);
- free_cc_array (cv5->authdata);
-
- free (cv5);
-
- }
- free ((cc_credentials_union *) in_cred_union);
- }
-
- return 0;
-}
-
-#else /* !USE_CCAPI_V3 */
-/*
- * CopyCCDataArrayToK5
- * - copy and translate the null terminated arrays of data records
- * used in k5 tickets
- */
-int copyCCDataArrayToK5(cc_creds *ccCreds, krb5_creds *v5Creds, char whichArray) {
-
- if (whichArray == kAddressArray) {
- if (ccCreds->addresses == NULL) {
- v5Creds->addresses = NULL;
- } else {
-
- krb5_address **addrPtr, *addr;
- cc_data **dataPtr, *data;
- unsigned int numRecords = 0;
-
- /* Allocate the array of pointers: */
- for (dataPtr = ccCreds->addresses; *dataPtr != NULL; numRecords++, dataPtr++) {}
-
- v5Creds->addresses = (krb5_address **) malloc (sizeof(krb5_address *) * (numRecords + 1));
- if (v5Creds->addresses == NULL)
- return ENOMEM;
-
- /* Fill in the array, allocating the address structures: */
- for (dataPtr = ccCreds->addresses, addrPtr = v5Creds->addresses; *dataPtr != NULL; addrPtr++, dataPtr++) {
-
- *addrPtr = (krb5_address *) malloc (sizeof(krb5_address));
- if (*addrPtr == NULL)
- return ENOMEM;
- data = *dataPtr;
- addr = *addrPtr;
-
- addr->addrtype = data->type;
- addr->magic = KV5M_ADDRESS;
- addr->length = data->length;
- addr->contents = (krb5_octet *) malloc (sizeof(krb5_octet) * addr->length);
- if (addr->contents == NULL)
- return ENOMEM;
- memmove(addr->contents, data->data, addr->length); /* copy contents */
- }
-
- /* Write terminator: */
- *addrPtr = NULL;
- }
- }
-
- if (whichArray == kAuthDataArray) {
- if (ccCreds->authdata == NULL) {
- v5Creds->authdata = NULL;
- } else {
- krb5_authdata **authPtr, *auth;
- cc_data **dataPtr, *data;
- unsigned int numRecords = 0;
-
- /* Allocate the array of pointers: */
- for (dataPtr = ccCreds->authdata; *dataPtr != NULL; numRecords++, dataPtr++) {}
-
- v5Creds->authdata = (krb5_authdata **) malloc (sizeof(krb5_authdata *) * (numRecords + 1));
- if (v5Creds->authdata == NULL)
- return ENOMEM;
-
- /* Fill in the array, allocating the address structures: */
- for (dataPtr = ccCreds->authdata, authPtr = v5Creds->authdata; *dataPtr != NULL; authPtr++, dataPtr++) {
-
- *authPtr = (krb5_authdata *) malloc (sizeof(krb5_authdata));
- if (*authPtr == NULL)
- return ENOMEM;
- data = *dataPtr;
- auth = *authPtr;
-
- auth->ad_type = data->type;
- auth->magic = KV5M_AUTHDATA;
- auth->length = data->length;
- auth->contents = (krb5_octet *) malloc (sizeof(krb5_octet) * auth->length);
- if (auth->contents == NULL)
- return ENOMEM;
- memmove(auth->contents, data->data, auth->length); /* copy contents */
- }
-
- /* Write terminator: */
- *authPtr = NULL;
- }
- }
-
- return 0;
-}
-
-/*
- * copyK5DataArrayToCC
- * - analogous to above, but in the other direction
- */
-int copyK5DataArrayToCC(krb5_creds *v5Creds, cc_creds *ccCreds, char whichArray)
-{
- if (whichArray == kAddressArray) {
- if (v5Creds->addresses == NULL) {
- ccCreds->addresses = NULL;
- } else {
-
- krb5_address **addrPtr, *addr;
- cc_data **dataPtr, *data;
- unsigned int numRecords = 0;
-
- /* Allocate the array of pointers: */
- for (addrPtr = v5Creds->addresses; *addrPtr != NULL; numRecords++, addrPtr++) {}
-
- ccCreds->addresses = (cc_data **) malloc (sizeof(cc_data *) * (numRecords + 1));
- if (ccCreds->addresses == NULL)
- return ENOMEM;
-
- /* Fill in the array, allocating the address structures: */
- for (dataPtr = ccCreds->addresses, addrPtr = v5Creds->addresses; *addrPtr != NULL; addrPtr++, dataPtr++) {
-
- *dataPtr = (cc_data *) malloc (sizeof(cc_data));
- if (*dataPtr == NULL)
- return ENOMEM;
- data = *dataPtr;
- addr = *addrPtr;
-
- data->type = addr->addrtype;
- data->length = addr->length;
- data->data = malloc (sizeof(char) * data->length);
- if (data->data == NULL)
- return ENOMEM;
- memmove(data->data, addr->contents, data->length); /* copy contents */
- }
-
- /* Write terminator: */
- *dataPtr = NULL;
- }
- }
-
- if (whichArray == kAuthDataArray) {
- if (v5Creds->authdata == NULL) {
- ccCreds->authdata = NULL;
- } else {
- krb5_authdata **authPtr, *auth;
- cc_data **dataPtr, *data;
- unsigned int numRecords = 0;
-
- /* Allocate the array of pointers: */
- for (authPtr = v5Creds->authdata; *authPtr != NULL; numRecords++, authPtr++) {}
-
- ccCreds->authdata = (cc_data **) malloc (sizeof(cc_data *) * (numRecords + 1));
- if (ccCreds->authdata == NULL)
- return ENOMEM;
-
- /* Fill in the array, allocating the address structures: */
- for (dataPtr = ccCreds->authdata, authPtr = v5Creds->authdata; *authPtr != NULL; authPtr++, dataPtr++) {
-
- *dataPtr = (cc_data *) malloc (sizeof(cc_data));
- if (*dataPtr == NULL)
- return ENOMEM;
- data = *dataPtr;
- auth = *authPtr;
-
- data->type = auth->ad_type;
- data->length = auth->length;
- data->data = malloc (sizeof(char) * data->length);
- if (data->data == NULL)
- return ENOMEM;
- memmove(data->data, auth->contents, data->length); /* copy contents */
- }
-
- /* Write terminator: */
- *dataPtr = NULL;
- }
- }
-
- return 0;
-}
-
-/*
- * dupcctok5
- * - allocate an empty k5 style ticket and copy info from the cc_creds ticket
- */
-
-void dupCCtoK5(krb5_context context, cc_creds *src, krb5_creds *dest)
-{
- krb5_int32 offset_seconds = 0, offset_microseconds = 0;
- int err;
-
- /*
- * allocate and copy
- * copy all of those damn fields back
- */
- err = krb5_parse_name(context, src->client, &(dest->client));
- err = krb5_parse_name(context, src->server, &(dest->server));
- if (err) return; /* parsename fails w/o krb5.ini for example */
-
- /* copy keyblock */
- dest->keyblock.enctype = src->keyblock.type;
- dest->keyblock.length = src->keyblock.length;
- dest->keyblock.contents = (krb5_octet *)malloc(dest->keyblock.length);
- memcpy(dest->keyblock.contents, src->keyblock.data, dest->keyblock.length);
-
- /* copy times */
-#if TARGET_OS_MAC
- err = krb5_get_time_offsets(context, &offset_seconds, &offset_microseconds);
- if (err) return;
-#endif
- dest->times.authtime = ts_incr(src->authtime, offset_seconds);
- dest->times.starttime = ts_incr(src->starttime, offset_seconds);
- dest->times.endtime = ts_incr(src->endtime, offset_seconds);
- dest->times.renew_till = ts_incr(src->renew_till, offset_seconds);
- dest->is_skey = src->is_skey;
- dest->ticket_flags = src->ticket_flags;
-
- /* more branching fields */
- err = copyCCDataArrayToK5(src, dest, kAddressArray);
- if (err) return;
-
- dest->ticket.length = src->ticket.length;
- dest->ticket.data = (char *)malloc(src->ticket.length);
- memcpy(dest->ticket.data, src->ticket.data, src->ticket.length);
- dest->second_ticket.length = src->second_ticket.length;
- (dest->second_ticket).data = ( char *)malloc(src->second_ticket.length);
- memcpy(dest->second_ticket.data, src->second_ticket.data, src->second_ticket.length);
-
- /* zero out magic number */
- dest->magic = 0;
-
- /* authdata */
- err = copyCCDataArrayToK5(src, dest, kAuthDataArray);
- if (err) return;
-
- return;
-}
-
-/*
- * dupK5toCC
- * - analogous to above but in the reverse direction
- */
-void dupK5toCC(krb5_context context, krb5_creds *creds, cred_union **cu)
-{
- cc_creds *c;
- int err;
- krb5_int32 offset_seconds = 0, offset_microseconds = 0;
-
- if (cu == NULL) return;
-
- /* allocate the cred_union */
- *cu = (cred_union *)malloc(sizeof(cred_union));
- if ((*cu) == NULL)
- return;
-
- (*cu)->cred_type = CC_CRED_V5;
-
- /* allocate creds structure (and install) */
- c = (cc_creds *)malloc(sizeof(cc_creds));
- if (c == NULL) return;
- (*cu)->cred.pV5Cred = c;
-
- /* convert krb5 principals to flat principals */
- err = krb5_unparse_name(context, creds->client, &(c->client));
- err = krb5_unparse_name(context, creds->server, &(c->server));
- if (err) return;
-
- /* copy more fields */
- c->keyblock.type = creds->keyblock.enctype;
- c->keyblock.length = creds->keyblock.length;
-
- if (creds->keyblock.contents != NULL) {
- c->keyblock.data = (unsigned char *)malloc(creds->keyblock.length);
- memcpy(c->keyblock.data, creds->keyblock.contents, creds->keyblock.length);
- } else {
- c->keyblock.data = NULL;
- }
-
-#if TARGET_OS_MAC
- err = krb5_get_time_offsets(context, &offset_seconds, &offset_microseconds);
- if (err) return;
-#endif
- c->authtime = ts_incr(creds->times.authtime, -offset_seconds);
- c->starttime = ts_incr(creds->times.starttime, -offset_seconds);
- c->endtime = ts_incr(creds->times.endtime, -offset_seconds);
- c->renew_till = ts_incr(creds->times.renew_till, -offset_seconds);
- c->is_skey = creds->is_skey;
- c->ticket_flags = creds->ticket_flags;
-
- err = copyK5DataArrayToCC(creds, c, kAddressArray);
- if (err) return;
-
- c->ticket.length = creds->ticket.length;
- if (creds->ticket.data != NULL) {
- c->ticket.data = (unsigned char *)malloc(creds->ticket.length);
- memcpy(c->ticket.data, creds->ticket.data, creds->ticket.length);
- } else {
- c->ticket.data = NULL;
- }
-
- c->second_ticket.length = creds->second_ticket.length;
- if (creds->second_ticket.data != NULL) {
- c->second_ticket.data = (unsigned char *)malloc(creds->second_ticket.length);
- memcpy(c->second_ticket.data, creds->second_ticket.data, creds->second_ticket.length);
- } else {
- c->second_ticket.data = NULL;
- }
-
- err = copyK5DataArrayToCC(creds, c, kAuthDataArray);
- if (err) return;
-
- return;
-}
-
-/* ----- free_cc_cred_union, etc -------------- */
-/*
- Since the Kerberos5 library allocates a credentials cache structure
- (in dupK5toCC() above) with its own memory allocation routines - which
- may be different than how the CCache allocates memory - the Kerb5 library
- must have its own version of cc_free_creds() to deallocate it. These
- functions do that. The top-level function to substitute for cc_free_creds()
- is krb5_free_cc_cred_union().
-
- If the CCache library wants to use a cred_union structure created by
- the Kerb5 library, it should make a deep copy of it to "translate" to its
- own memory allocation space.
-*/
-static void deep_free_cc_data (cc_data data)
-{
- if (data.data != NULL)
- free (data.data);
-}
-
-static void deep_free_cc_data_array (cc_data** data) {
-
- unsigned int i;
-
- if (data == NULL)
- return;
-
- for (i = 0; data [i] != NULL; i++) {
- deep_free_cc_data (*(data [i]));
- free (data [i]);
- }
-
- free (data);
-}
-
-static void deep_free_cc_v5_creds (cc_creds* creds)
-{
- if (creds == NULL)
- return;
-
- if (creds -> client != NULL)
- free (creds -> client);
- if (creds -> server != NULL)
- free (creds -> server);
-
- deep_free_cc_data (creds -> keyblock);
- deep_free_cc_data (creds -> ticket);
- deep_free_cc_data (creds -> second_ticket);
-
- deep_free_cc_data_array (creds -> addresses);
- deep_free_cc_data_array (creds -> authdata);
-
- free(creds);
-}
-
-static void deep_free_cc_creds (cred_union creds)
-{
- if (creds.cred_type == CC_CRED_V5) {
- deep_free_cc_v5_creds (creds.cred.pV5Cred);
- }
-}
-
-/* top-level exported function */
-cc_int32 krb5int_free_cc_cred_union (cred_union** creds)
-{
- if (creds == NULL)
- return CC_BAD_PARM;
-
- if (*creds != NULL) {
- deep_free_cc_creds (**creds);
- free (*creds);
- *creds = NULL;
- }
-
- return CC_NOERROR;
-}
-#endif
-
-/*
- * Utility functions...
- */
-static krb5_boolean
-times_match(t1, t2)
- const krb5_ticket_times *t1;
- const krb5_ticket_times *t2;
-{
- if (t1->renew_till) {
- if (ts_after(t1->renew_till, t2->renew_till))
- return FALSE; /* this one expires too late */
- }
- if (t1->endtime) {
- if (ts_after(t1->endtime, t2->endtime))
- return FALSE; /* this one expires too late */
- }
- /* only care about expiration on a times_match */
- return TRUE;
-}
-
-static krb5_boolean
-times_match_exact (t1, t2)
- const krb5_ticket_times *t1, *t2;
-{
- return (t1->authtime == t2->authtime
- && t1->starttime == t2->starttime
- && t1->endtime == t2->endtime
- && t1->renew_till == t2->renew_till);
-}
-
-static krb5_boolean
-standard_fields_match(context, mcreds, creds)
- krb5_context context;
- const krb5_creds *mcreds, *creds;
-{
- if (mcreds->client != NULL &&
- !krb5_principal_compare(context, mcreds->client, creds->client))
- return FALSE;
- if (mcreds->server != NULL &&
- !krb5_principal_compare(context, mcreds->server,creds->server))
- return FALSE;
- return TRUE;
-}
-
-/* only match the server name portion, not the server realm portion */
-
-static krb5_boolean
-srvname_match(context, mcreds, creds)
- krb5_context context;
- const krb5_creds *mcreds, *creds;
-{
- if (mcreds->client != NULL &&
- !krb5_principal_compare(context, mcreds->client, creds->client))
- return FALSE;
- if (mcreds->server != NULL &&
- !krb5_principal_compare_any_realm(context, mcreds->server,
- creds->server))
- return FALSE;
- return TRUE;
-}
-
-
-static krb5_boolean
-authdata_match(mdata, data)
- krb5_authdata *const *mdata, *const *data;
-{
- const krb5_authdata *mdatap, *datap;
-
- if (mdata == data)
- return TRUE;
-
- if (mdata == NULL)
- return *data == NULL;
-
- if (data == NULL)
- return *mdata == NULL;
-
- while ((mdatap = *mdata)
- && (datap = *data)
- && mdatap->ad_type == datap->ad_type
- && mdatap->length == datap->length
- && !memcmp ((char *) mdatap->contents, (char *) datap->contents,
- datap->length)) {
- mdata++;
- data++;
- }
-
- return !*mdata && !*data;
-}
-
-static krb5_boolean
-data_match(data1, data2)
- const krb5_data *data1, *data2;
-{
- if (!data1) {
- if (!data2)
- return TRUE;
- else
- return FALSE;
- }
- if (!data2) return FALSE;
-
- if (data1->length != data2->length)
- return FALSE;
- else
- return memcmp(data1->data, data2->data, data1->length) ? FALSE : TRUE;
-}
-
-#define MATCH_SET(bits) (whichfields & bits)
-#define flags_match(a,b) (((a) & (b)) == (a))
-
-/* stdccCredsMatch
- * - check to see if the creds match based on the whichFields variable
- * NOTE: if whichfields is zero we are now comparing 'standard fields.'
- * This is the bug that was killing fetch for a
- * week. The behaviour is what krb5 expects, however.
- */
-int stdccCredsMatch(krb5_context context, krb5_creds *base,
- krb5_creds *match, int whichfields)
-{
- if (((MATCH_SET(KRB5_TC_MATCH_SRV_NAMEONLY) &&
- srvname_match(context, match, base)) ||
- standard_fields_match(context, match, base))
- &&
- (! MATCH_SET(KRB5_TC_MATCH_IS_SKEY) ||
- match->is_skey == base->is_skey)
- &&
- (! MATCH_SET(KRB5_TC_MATCH_FLAGS_EXACT) ||
- match->ticket_flags == base->ticket_flags)
- &&
- (! MATCH_SET(KRB5_TC_MATCH_FLAGS) ||
- flags_match(match->ticket_flags, base->ticket_flags))
- &&
- (! MATCH_SET(KRB5_TC_MATCH_TIMES_EXACT) ||
- times_match_exact(&match->times, &base->times))
- &&
- (! MATCH_SET(KRB5_TC_MATCH_TIMES) ||
- times_match(&match->times, &base->times))
- &&
- (! MATCH_SET(KRB5_TC_MATCH_AUTHDATA) ||
- authdata_match (match->authdata, base->authdata))
- &&
- (! MATCH_SET(KRB5_TC_MATCH_2ND_TKT) ||
- data_match (&match->second_ticket, &base->second_ticket))
- &&
- ((! MATCH_SET(KRB5_TC_MATCH_KTYPE))||
- (match->keyblock.enctype == base->keyblock.enctype))
- )
- return TRUE;
- return FALSE;
-}
-
-#endif /* defined(_WIN32) || defined(USE_CCAPI) */
+++ /dev/null
-/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
-/* stdcc_util.h
- *
- * Frank Dabek, July 1998
- */
-
-#if defined(_WIN32) || defined(USE_CCAPI)
-
-#include "autoconf.h"
-
-#if USE_CCAPI_V3
-#include <CredentialsCache.h>
-#else
-#if defined(_WIN32)
-#include "cacheapi.h"
-#else
-#include <CredentialsCache2.h>
-#endif
-#endif
-
-#include "krb5.h"
-
-/* prototypes for private functions declared in stdcc_util.c */
-#ifdef USE_CCAPI_V3
-krb5_error_code
-copy_cc_cred_union_to_krb5_creds (krb5_context in_context,
- const cc_credentials_union *in_cred_union,
- krb5_creds *out_creds);
-krb5_error_code
-copy_krb5_creds_to_cc_cred_union (krb5_context in_context,
- krb5_creds *in_creds,
- cc_credentials_union **out_cred_union);
-
-krb5_error_code
-cred_union_release (cc_credentials_union *in_cred_union);
-#else
-int copyCCDataArrayToK5(cc_creds *cc, krb5_creds *kc, char whichArray);
-int copyK5DataArrayToCC(krb5_creds *kc, cc_creds *cc, char whichArray);
-void dupCCtoK5(krb5_context context, cc_creds *src, krb5_creds *dest);
-void dupK5toCC(krb5_context context, krb5_creds *creds, cred_union **cu);
-cc_int32 krb5int_free_cc_cred_union (cred_union** creds);
-#endif
-int stdccCredsMatch(krb5_context context, krb5_creds *base, krb5_creds *match, int whichfields);
-int bitTst(int var, int mask);
-
-#define kAddressArray 4
-#define kAuthDataArray 5
-
-#endif /* defined(_WIN32) || defined(USE_CCAPI) */
#ifndef KRB5_WINCCLD_H_
#define KRB5_WINCCLD_H_
-#ifdef USE_CCAPI_V3
#include <CredentialsCache.h>
-#else
-
-#ifndef CC_API_VER2
-#define CC_API_VER2
-#endif
-
-#include "cacheapi.h"
-#endif
-#ifdef USE_CCAPI_V3
typedef CCACHE_API cc_int32 (*FP_cc_initialize) (
cc_context_t* outContext,
cc_int32 inVersion,
cc_int32* outSupportedVersion,
char const** outVendor);
-#else
-typedef cc_int32 (*FP_cc_initialize)(apiCB**, const cc_int32,
- cc_int32*, const char**);
-typedef cc_int32 (*FP_cc_shutdown)(apiCB**);
-typedef cc_int32 (*FP_cc_get_change_time)(apiCB*, cc_time_t*);
-typedef cc_int32 (*FP_cc_create)(apiCB*, const char*, const char*,
- const enum cc_cred_vers, const cc_int32, ccache_p**);
-typedef cc_int32 (*FP_cc_open)(apiCB*, const char*, const enum cc_cred_vers,
- const cc_int32, ccache_p**);
-typedef cc_int32 (*FP_cc_close)(apiCB*, ccache_p**);
-typedef cc_int32 (*FP_cc_destroy)(apiCB*, ccache_p**);
-typedef cc_int32 (*FP_cc_seq_fetch_NCs)(apiCB*, ccache_p**, ccache_cit**);
-typedef cc_int32 (*FP_cc_seq_fetch_NCs_begin)(apiCB*, ccache_cit**);
-typedef cc_int32 (*FP_cc_seq_fetch_NCs_next)(apiCB*, ccache_p**, ccache_cit*);
-typedef cc_int32 (*FP_cc_seq_fetch_NCs_end)(apiCB*, ccache_cit**);
-typedef cc_int32 (*FP_cc_get_NC_info)(apiCB*, struct _infoNC***);
-typedef cc_int32 (*FP_cc_free_NC_info)(apiCB*, struct _infoNC***);
-typedef cc_int32 (*FP_cc_get_name)(apiCB*, const ccache_p*, char**);
-typedef cc_int32 (*FP_cc_set_principal)(apiCB*, const ccache_p*,
- const enum cc_cred_vers, const char*);
-typedef cc_int32 (*FP_cc_get_principal)(apiCB*, ccache_p*, char**);
-typedef cc_int32 (*FP_cc_get_cred_version)(apiCB*, const ccache_p*,
- enum cc_cred_vers*);
-typedef cc_int32 (*FP_cc_lock_request)(apiCB*, const ccache_p*,
- const cc_int32);
-typedef cc_int32 (*FP_cc_store)(apiCB*, const ccache_p*, const cred_union);
-typedef cc_int32 (*FP_cc_remove_cred)(apiCB*, const ccache_p*,
- const cred_union);
-typedef cc_int32 (*FP_cc_seq_fetch_creds)(apiCB*, const ccache_p*,
- cred_union**, ccache_cit**);
-typedef cc_int32 (*FP_cc_seq_fetch_creds_begin)(apiCB*, const ccache_p*,
- ccache_cit**);
-typedef cc_int32 (*FP_cc_seq_fetch_creds_next)(apiCB*, cred_union**,
- ccache_cit*);
-typedef cc_int32 (*FP_cc_seq_fetch_creds_end)(apiCB*, ccache_cit**);
-typedef cc_int32 (*FP_cc_free_principal)(apiCB*, char**);
-typedef cc_int32 (*FP_cc_free_name)(apiCB*, char** name);
-typedef cc_int32 (*FP_cc_free_creds)(apiCB*, cred_union** pCred);
-#endif
#ifdef KRB5_WINCCLD_C_
typedef struct _FUNC_INFO {
#endif
DECL_FUNC_PTR(cc_initialize);
-#ifndef USE_CCAPI_V3
-DECL_FUNC_PTR(cc_shutdown);
-DECL_FUNC_PTR(cc_get_change_time);
-DECL_FUNC_PTR(cc_create);
-DECL_FUNC_PTR(cc_open);
-DECL_FUNC_PTR(cc_close);
-DECL_FUNC_PTR(cc_destroy);
-DECL_FUNC_PTR(cc_get_name);
-DECL_FUNC_PTR(cc_set_principal);
-DECL_FUNC_PTR(cc_get_principal);
-DECL_FUNC_PTR(cc_get_cred_version);
-DECL_FUNC_PTR(cc_store);
-DECL_FUNC_PTR(cc_remove_cred);
-#ifdef CC_API_VER2
-DECL_FUNC_PTR(cc_seq_fetch_creds_begin);
-DECL_FUNC_PTR(cc_seq_fetch_creds_next);
-DECL_FUNC_PTR(cc_seq_fetch_creds_end);
-#else
-DECL_FUNC_PTR(cc_seq_fetch_creds);
-#endif
-DECL_FUNC_PTR(cc_free_principal);
-DECL_FUNC_PTR(cc_free_name);
-DECL_FUNC_PTR(cc_free_creds);
-#endif
#ifdef KRB5_WINCCLD_C_
FUNC_INFO krbcc_fi[] = {
MAKE_FUNC_INFO(cc_initialize),
-#ifndef USE_CCAPI_V3
- MAKE_FUNC_INFO(cc_shutdown),
- MAKE_FUNC_INFO(cc_get_change_time),
- MAKE_FUNC_INFO(cc_create),
- MAKE_FUNC_INFO(cc_open),
- MAKE_FUNC_INFO(cc_close),
- MAKE_FUNC_INFO(cc_destroy),
- MAKE_FUNC_INFO(cc_get_name),
- MAKE_FUNC_INFO(cc_set_principal),
- MAKE_FUNC_INFO(cc_get_principal),
- MAKE_FUNC_INFO(cc_get_cred_version),
- MAKE_FUNC_INFO(cc_store),
- MAKE_FUNC_INFO(cc_remove_cred),
-#ifdef CC_API_VER2
- MAKE_FUNC_INFO(cc_seq_fetch_creds_begin),
- MAKE_FUNC_INFO(cc_seq_fetch_creds_next),
- MAKE_FUNC_INFO(cc_seq_fetch_creds_end),
-#else
- MAKE_FUNC_INFO(cc_seq_fetch_creds),
-#endif
- MAKE_FUNC_INFO(cc_free_principal),
- MAKE_FUNC_INFO(cc_free_name),
- MAKE_FUNC_INFO(cc_free_creds),
-#endif
END_FUNC_INFO
};
#undef MAKE_FUNC_INFO
#else
#define cc_initialize pcc_initialize
-#ifndef USE_CCAPI_V3
-#define cc_shutdown pcc_shutdown
-#define cc_get_change_time pcc_get_change_time
-#define cc_create pcc_create
-#define cc_open pcc_open
-#define cc_close pcc_close
-#define cc_destroy pcc_destroy
-#define cc_get_name pcc_get_name
-#define cc_set_principal pcc_set_principal
-#define cc_get_principal pcc_get_principal
-#define cc_get_cred_version pcc_get_cred_version
-#define cc_store pcc_store
-#define cc_remove_cred pcc_remove_cred
-#ifdef CC_API_VER2
-#define cc_seq_fetch_creds_begin pcc_seq_fetch_creds_begin
-#define cc_seq_fetch_creds_next pcc_seq_fetch_creds_next
-#define cc_seq_fetch_creds_end pcc_seq_fetch_creds_end
-#else
-#define cc_seq_fetch_creds pcc_seq_fetch_creds
-#endif
-#define cc_free_principal pcc_free_principal
-#define cc_free_name pcc_free_name
-#define cc_free_creds pcc_free_creds
-#endif
#endif
#undef DECL_FUNC_PTR
--- /dev/null
+/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
+/* lib/krb5/ccache/ccapi_util.c - conversion functions for CCAPI creds */
+/*
+ * Copyright (C) 2022 by the Massachusetts Institute of Technology.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * * Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * * Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in
+ * the documentation and/or other materials provided with the
+ * distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#include "cc-int.h"
+#include "ccapi_util.h"
+
+#if defined(USE_CCAPI) || defined(USE_CCAPI_MACOS)
+
+static void
+free_cc_data_list(cc_data **list)
+{
+ size_t i;
+
+ for (i = 0; list != NULL && list[i] != NULL; i++) {
+ free(list[i]->data);
+ free(list[i]);
+ }
+ free(list);
+}
+
+static krb5_error_code
+cc_data_list_to_addresses(krb5_context context, cc_data **list,
+ krb5_address ***addrs_out)
+{
+ krb5_error_code ret;
+ size_t count, i;
+ krb5_address **addrs = NULL;
+
+ *addrs_out = NULL;
+ if (list == NULL)
+ return 0;
+
+ for (count = 0; list[count]; count++);
+ addrs = k5calloc(count + 1, sizeof(*addrs), &ret);
+ if (addrs == NULL)
+ return ret;
+
+ for (i = 0; i < count; i++) {
+ addrs[i] = k5alloc(sizeof(*addrs[i]), &ret);
+ if (addrs[i] == NULL)
+ goto cleanup;
+
+ addrs[i]->contents = k5memdup(list[i]->data, list[i]->length, &ret);
+ if (addrs[i]->contents == NULL)
+ goto cleanup;
+ addrs[i]->length = list[i]->length;
+ addrs[i]->addrtype = list[i]->type;
+ addrs[i]->magic = KV5M_ADDRESS;
+ }
+
+ *addrs_out = addrs;
+ addrs = NULL;
+
+cleanup:
+ krb5_free_addresses(context, addrs);
+ return ret;
+}
+
+static krb5_error_code
+cc_data_list_to_authdata(krb5_context context, cc_data **list,
+ krb5_authdata ***authdata_out)
+{
+ krb5_error_code ret;
+ size_t count, i;
+ krb5_authdata **authdata = NULL;
+
+ *authdata_out = NULL;
+ if (list == NULL)
+ return 0;
+
+ for (count = 0; list[count]; count++);
+ authdata = k5calloc(count + 1, sizeof(*authdata), &ret);
+ if (authdata == NULL)
+ return ret;
+
+ for (i = 0; i < count; i++) {
+ authdata[i] = k5alloc(sizeof(*authdata[i]), &ret);
+ if (authdata[i] == NULL)
+ goto cleanup;
+
+ authdata[i]->contents = k5memdup(list[i]->data, list[i]->length, &ret);
+ if (authdata[i]->contents == NULL)
+ goto cleanup;
+ authdata[i]->length = list[i]->length;
+ authdata[i]->ad_type = list[i]->type;
+ authdata[i]->magic = KV5M_AUTHDATA;
+ }
+
+ *authdata_out = authdata;
+ authdata = NULL;
+
+cleanup:
+ krb5_free_authdata(context, authdata);
+ return ret;
+}
+
+static krb5_error_code
+addresses_to_cc_data_list(krb5_context context, krb5_address **addrs,
+ cc_data ***list_out)
+{
+ krb5_error_code ret;
+ size_t count, i;
+ cc_data **list = NULL;
+
+ *list_out = NULL;
+ if (addrs == NULL)
+ return 0;
+
+ for (count = 0; addrs[count]; count++);
+ list = k5calloc(count + 1, sizeof(*list), &ret);
+ if (list == NULL)
+ return ret;
+
+ for (i = 0; i < count; i++) {
+ list[i] = k5alloc(sizeof(*list[i]), &ret);
+ if (list[i] == NULL)
+ goto cleanup;
+
+ list[i]->data = k5memdup(addrs[i]->contents, addrs[i]->length, &ret);
+ if (list[i]->data == NULL)
+ goto cleanup;
+ list[i]->length = addrs[i]->length;
+ list[i]->type = addrs[i]->addrtype;
+ }
+
+ *list_out = list;
+ list = NULL;
+
+cleanup:
+ free_cc_data_list(list);
+ return ret;
+}
+
+static krb5_error_code
+authdata_to_cc_data_list(krb5_context context, krb5_authdata **authdata,
+ cc_data ***list_out)
+{
+ krb5_error_code ret;
+ size_t count, i;
+ cc_data **list = NULL;
+
+ *list_out = NULL;
+ if (authdata == NULL)
+ return 0;
+
+ for (count = 0; authdata[count]; count++);
+ list = k5calloc(count + 1, sizeof(*list), &ret);
+ if (list == NULL)
+ return ret;
+
+ for (i = 0; i < count; i++) {
+ list[i] = k5alloc(sizeof(*list[i]), &ret);
+ if (list[i] == NULL)
+ goto cleanup;
+
+ list[i]->data = k5memdup(authdata[i]->contents, authdata[i]->length,
+ &ret);
+ if (list[i]->data == NULL)
+ goto cleanup;
+ list[i]->length = authdata[i]->length;
+ list[i]->type = authdata[i]->ad_type;
+ }
+
+ *list_out = list;
+ list = NULL;
+
+cleanup:
+ free_cc_data_list(list);
+ return ret;
+}
+
+krb5_error_code
+k5_ccapi_to_krb5_creds(krb5_context context,
+ const cc_credentials_union *ccapi_cred,
+ krb5_creds *cred_out)
+{
+ krb5_error_code ret;
+ cc_credentials_v5_t *cv5 = NULL;
+ krb5_principal client = NULL;
+ krb5_principal server = NULL;
+ char *ticket_data = NULL;
+ char *second_ticket_data = NULL;
+ uint8_t *keyblock_contents = NULL;
+ krb5_address **addresses = NULL;
+ krb5_authdata **authdata = NULL;
+
+ if (ccapi_cred->version != cc_credentials_v5)
+ return KRB5_CC_NOT_KTYPE;
+
+ cv5 = ccapi_cred->credentials.credentials_v5;
+
+ ret = krb5_parse_name(context, cv5->client, &client);
+ if (ret)
+ goto cleanup;
+ ret = krb5_parse_name(context, cv5->server, &server);
+ if (ret)
+ goto cleanup;
+
+ if (cv5->keyblock.length > 0) {
+ keyblock_contents = k5memdup(cv5->keyblock.data, cv5->keyblock.length,
+ &ret);
+ if (keyblock_contents == NULL)
+ goto cleanup;
+ }
+
+ if (cv5->ticket.length > 0) {
+ ticket_data = k5memdup(cv5->ticket.data, cv5->ticket.length, &ret);
+ if (ticket_data == NULL)
+ goto cleanup;
+ }
+
+ if (cv5->second_ticket.length > 0) {
+ second_ticket_data = k5memdup(cv5->second_ticket.data,
+ cv5->second_ticket.length, &ret);
+ if (second_ticket_data == NULL)
+ goto cleanup;
+ }
+
+ ret = cc_data_list_to_addresses(context, cv5->addresses, &addresses);
+ if (ret)
+ goto cleanup;
+
+ ret = cc_data_list_to_authdata(context, cv5->authdata, &authdata);
+ if (ret)
+ goto cleanup;
+
+ cred_out->client = client;
+ cred_out->server = server;
+ client = server = NULL;
+
+ cred_out->keyblock.magic = KV5M_KEYBLOCK;
+ cred_out->keyblock.enctype = cv5->keyblock.type;
+ cred_out->keyblock.length = cv5->keyblock.length;
+ cred_out->keyblock.contents = keyblock_contents;
+ keyblock_contents = NULL;
+
+ cred_out->times.authtime = cv5->authtime;
+ cred_out->times.starttime = cv5->starttime;
+ cred_out->times.endtime = cv5->endtime;
+ cred_out->times.renew_till = cv5->renew_till;
+ cred_out->is_skey = cv5->is_skey;
+ cred_out->ticket_flags = cv5->ticket_flags;
+
+ cred_out->ticket = make_data(ticket_data, cv5->ticket.length);
+ cred_out->second_ticket = make_data(second_ticket_data,
+ cv5->second_ticket.length);
+ ticket_data = second_ticket_data = NULL;
+
+ cred_out->addresses = addresses;
+ addresses = NULL;
+
+ cred_out->authdata = authdata;
+ authdata = NULL;
+
+ cred_out->magic = KV5M_CREDS;
+
+cleanup:
+ krb5_free_principal(context, client);
+ krb5_free_principal(context, server);
+ krb5_free_addresses(context, addresses);
+ krb5_free_authdata(context, authdata);
+ free(keyblock_contents);
+ free(ticket_data);
+ free(second_ticket_data);
+ return ret;
+}
+
+krb5_error_code
+k5_krb5_to_ccapi_creds(krb5_context context, krb5_creds *cred,
+ cc_credentials_union **ccapi_cred_out)
+{
+ krb5_error_code ret;
+ cc_credentials_union *cred_union = NULL;
+ cc_credentials_v5_t *cv5 = NULL;
+ char *client = NULL, *server = NULL;
+ uint8_t *ticket_data = NULL, *second_ticket_data = NULL;
+ uint8_t *keyblock_data = NULL;
+ cc_data **addr_list = NULL, **authdata_list = NULL;
+
+ cred_union = k5alloc(sizeof(*cred_union), &ret);
+ if (cred_union == NULL)
+ goto cleanup;
+
+ cv5 = k5alloc(sizeof(*cv5), &ret);
+ if (cv5 == NULL)
+ goto cleanup;
+
+ ret = krb5_unparse_name(context, cred->client, &client);
+ if (ret)
+ goto cleanup;
+ ret = krb5_unparse_name(context, cred->server, &server);
+ if (ret)
+ goto cleanup;
+
+ if (cred->keyblock.length > 0) {
+ keyblock_data = k5memdup(cred->keyblock.contents,
+ cred->keyblock.length, &ret);
+ if (keyblock_data == NULL)
+ goto cleanup;
+ }
+
+ if (cred->ticket.length > 0) {
+ ticket_data = k5memdup0(cred->ticket.data, cred->ticket.length, &ret);
+ if (ticket_data == NULL)
+ goto cleanup;
+ }
+
+ if (cred->second_ticket.length > 0) {
+ second_ticket_data = k5memdup0(cred->second_ticket.data,
+ cred->second_ticket.length, &ret);
+ if (second_ticket_data == NULL)
+ goto cleanup;
+ }
+
+ ret = addresses_to_cc_data_list(context, cred->addresses, &addr_list);
+ if (ret)
+ goto cleanup;
+
+ ret = authdata_to_cc_data_list(context, cred->authdata, &authdata_list);
+ if (ret)
+ goto cleanup;
+
+ cv5->client = client;
+ cv5->server = server;
+ client = server = NULL;
+
+ cv5->keyblock.type = cred->keyblock.enctype;
+ cv5->keyblock.length = cred->keyblock.length;
+ cv5->keyblock.data = keyblock_data;
+ keyblock_data = NULL;
+
+ cv5->authtime = cred->times.authtime;
+ cv5->starttime = cred->times.starttime;
+ cv5->endtime = cred->times.endtime;
+ cv5->renew_till = cred->times.renew_till;
+ cv5->is_skey = cred->is_skey;
+ cv5->ticket_flags = cred->ticket_flags;
+
+ cv5->ticket.length = cred->ticket.length;
+ cv5->ticket.data = ticket_data;
+ cv5->second_ticket.length = cred->second_ticket.length;
+ cv5->second_ticket.data = second_ticket_data;
+ ticket_data = second_ticket_data = NULL;
+
+ cv5->addresses = addr_list;
+ addr_list = NULL;
+
+ cv5->authdata = authdata_list;
+ authdata_list = NULL;
+
+ cred_union->version = cc_credentials_v5;
+ cred_union->credentials.credentials_v5 = cv5;
+ cv5 = NULL;
+
+ *ccapi_cred_out = cred_union;
+ cred_union = NULL;
+
+cleanup:
+ free_cc_data_list(addr_list);
+ free_cc_data_list(authdata_list);
+ free(keyblock_data);
+ free(ticket_data);
+ free(second_ticket_data);
+ krb5_free_unparsed_name(context, client);
+ krb5_free_unparsed_name(context, server);
+ free(cv5);
+ free(cred_union);
+ return ret;
+}
+
+void
+k5_release_ccapi_cred(cc_credentials_union *ccapi_cred)
+{
+ cc_credentials_v5_t *cv5;
+
+ if (ccapi_cred == NULL)
+ return;
+ if (ccapi_cred->version != cc_credentials_v5)
+ return;
+ if (ccapi_cred->credentials.credentials_v5 == NULL)
+ return;
+
+ cv5 = ccapi_cred->credentials.credentials_v5;
+
+ free(cv5->client);
+ free(cv5->server);
+ free(cv5->keyblock.data);
+ free(cv5->ticket.data);
+ free(cv5->second_ticket.data);
+ free_cc_data_list(cv5->addresses);
+ free_cc_data_list(cv5->authdata);
+ free(cv5);
+ free(ccapi_cred);
+}
+
+#endif /* defined(USE_CCAPI) */
--- /dev/null
+/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
+/* lib/krb5/ccache/ccapi_util.c - conversion declarations for CCAPI creds */
+/*
+ * Copyright (C) 2021 by the Massachusetts Institute of Technology.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * * Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * * Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in
+ * the documentation and/or other materials provided with the
+ * distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#ifndef CCAPI_UTIL_H
+#define CCAPI_UTIL_H
+
+#include <CredentialsCache.h>
+
+krb5_error_code
+k5_ccapi_to_krb5_creds(krb5_context context,
+ const cc_credentials_union *ccapi_cred,
+ krb5_creds *cred_out);
+
+krb5_error_code
+k5_krb5_to_ccapi_creds(krb5_context context, krb5_creds *cred,
+ cc_credentials_union **ccapi_cred_out);
+
+void
+k5_release_ccapi_cred(cc_credentials_union *ccapi_cred);
+
+#endif /* CCAPI_UTIL_H */
#define NEXT &cc_lcc_entry
#endif
-#ifdef USE_CCAPI_V3
+#ifdef USE_CCAPI
extern const krb5_cc_ops krb5_cc_stdcc_ops;
static struct krb5_cc_typelist cc_stdcc_entry = { &krb5_cc_stdcc_ops, NEXT };
#undef NEXT
#define NEXT &cc_kcm_entry
#endif /* not _WIN32 */
+#ifdef USE_CCAPI_MACOS
+extern const krb5_cc_ops krb5_api_macos_ops;
+static struct krb5_cc_typelist cc_macos_entry = { &krb5_api_macos_ops, NEXT };
+#undef NEXT
+#define NEXT &cc_macos_entry
+#endif /* USE_CCAPI_MACOS */
#define INITIAL_TYPEHEAD (NEXT)
static struct krb5_cc_typelist *cc_typehead = INITIAL_TYPEHEAD;
#ifdef USE_KEYRING_CCACHE
k5_cc_mutex_lock(context, &krb5int_krcc_mutex);
#endif
-#ifdef USE_CCAPI_V3
+#ifdef USE_CCAPI
ret = krb5_stdccv3_context_lock(context);
if (ret) {
k5_cc_mutex_unlock(context, &krb5int_mcc_mutex);
k5_mutex_lock(&cc_typelist_lock);
/* unlock each type in the opposite order */
-#ifdef USE_CCAPI_V3
+#ifdef USE_CCAPI
krb5_stdccv3_context_unlock(context);
#endif
#ifdef USE_KEYRING_CCACHE
#ifdef USE_KEYRING_CCACHE
k5_cc_mutex_force_unlock(&krb5int_krcc_mutex);
#endif
-#ifdef USE_CCAPI_V3
+#ifdef USE_CCAPI
krb5_stdccv3_context_unlock(NULL);
#endif
k5_cc_mutex_force_unlock(&krb5int_mcc_mutex);
#
# Generated makefile dependencies follow.
#
+ccapi_util.so ccapi_util.po $(OUTPRE)ccapi_util.$(OBJEXT): \
+ $(BUILDTOP)/include/autoconf.h $(BUILDTOP)/include/krb5/krb5.h \
+ $(BUILDTOP)/include/osconf.h $(BUILDTOP)/include/profile.h \
+ $(COM_ERR_DEPS) $(top_srcdir)/include/CredentialsCache.h \
+ $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-err.h \
+ $(top_srcdir)/include/k5-gmt_mktime.h $(top_srcdir)/include/k5-int-pkinit.h \
+ $(top_srcdir)/include/k5-int.h $(top_srcdir)/include/k5-platform.h \
+ $(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-thread.h \
+ $(top_srcdir)/include/k5-trace.h $(top_srcdir)/include/krb5.h \
+ $(top_srcdir)/include/krb5/authdata_plugin.h $(top_srcdir)/include/krb5/plugin.h \
+ $(top_srcdir)/include/port-sockets.h $(top_srcdir)/include/socket-utils.h \
+ cc-int.h ccapi_util.c ccapi_util.h
ccbase.so ccbase.po $(OUTPRE)ccbase.$(OBJEXT): $(BUILDTOP)/include/autoconf.h \
$(BUILDTOP)/include/krb5/krb5.h $(BUILDTOP)/include/osconf.h \
$(BUILDTOP)/include/profile.h $(COM_ERR_DEPS) $(top_srcdir)/include/k5-buf.h \
$(top_srcdir)/include/krb5/authdata_plugin.h $(top_srcdir)/include/krb5/ccselect_plugin.h \
$(top_srcdir)/include/krb5/plugin.h $(top_srcdir)/include/port-sockets.h \
$(top_srcdir)/include/socket-utils.h cc-int.h ccselect_realm.c
+cc_api_macos.so cc_api_macos.po $(OUTPRE)cc_api_macos.$(OBJEXT): \
+ $(BUILDTOP)/include/autoconf.h $(BUILDTOP)/include/krb5/krb5.h \
+ $(BUILDTOP)/include/osconf.h $(BUILDTOP)/include/profile.h \
+ $(COM_ERR_DEPS) $(top_srcdir)/include/CredentialsCache.h \
+ $(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-err.h \
+ $(top_srcdir)/include/k5-gmt_mktime.h $(top_srcdir)/include/k5-int-pkinit.h \
+ $(top_srcdir)/include/k5-int.h $(top_srcdir)/include/k5-platform.h \
+ $(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-thread.h \
+ $(top_srcdir)/include/k5-trace.h $(top_srcdir)/include/krb5.h \
+ $(top_srcdir)/include/krb5/authdata_plugin.h $(top_srcdir)/include/krb5/plugin.h \
+ $(top_srcdir)/include/port-sockets.h $(top_srcdir)/include/socket-utils.h \
+ cc-int.h cc_api_macos.c ccapi_util.h
cc_dir.so cc_dir.po $(OUTPRE)cc_dir.$(OBJEXT): $(BUILDTOP)/include/autoconf.h \
$(BUILDTOP)/include/krb5/krb5.h $(BUILDTOP)/include/osconf.h \
$(BUILDTOP)/include/profile.h $(COM_ERR_DEPS) $(top_srcdir)/include/k5-buf.h \
* to the application (notwithstanding signature verification).
*/
-typedef struct _PAC_INFO_BUFFER {
- krb5_ui_4 ulType;
- krb5_ui_4 cbBufferSize;
- uint64_t Offset;
-} PAC_INFO_BUFFER;
-
-typedef struct _PACTYPE {
- krb5_ui_4 cBuffers;
- krb5_ui_4 Version;
- PAC_INFO_BUFFER Buffers[1];
-} PACTYPE;
+struct k5_pac_buffer {
+ uint32_t type;
+ uint32_t size;
+ uint64_t offset;
+};
struct krb5_pac_data {
- PACTYPE *pac; /* PAC header + info buffer array */
krb5_data data; /* PAC data (including uninitialised header) */
krb5_boolean verified;
+ uint32_t nbuffers;
+ uint32_t version;
+ struct k5_pac_buffer *buffers;
};
uint64_t password_days;
const char *p;
struct k5buf buf;
+ char *msg;
*msg_out = NULL;
if (data->length != AD_POLICY_INFO_LENGTH)
(int)password_days);
}
- if (k5_buf_status(&buf) != 0)
+ msg = k5_buf_cstring(&buf);
+ if (msg == NULL)
return ENOMEM;
-
- if (buf.len > 0)
- *msg_out = buf.data;
+ if (*msg != '\0')
+ *msg_out = msg;
else
- k5_buf_free(&buf);
+ free(msg);
return 0;
}
char **message_out)
{
krb5_error_code ret;
- krb5_data *string;
char *msg;
*message_out = NULL;
/* If server_string contains a valid UTF-8 string, return that. */
if (server_string->length > 0 &&
memchr(server_string->data, 0, server_string->length) == NULL &&
- krb5int_utf8_normalize(server_string, &string,
- KRB5_UTF8_APPROX) == 0) {
- *message_out = string->data; /* already null terminated */
- free(string);
- return 0;
+ k5_utf8_validate(server_string)) {
+ *message_out = k5memdup0(server_string->data, server_string->length,
+ &ret);
+ return (*message_out == NULL) ? ENOMEM : 0;
}
/* server_string appears invalid, so try to be helpful. */
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
- along with this program. If not, see <https://www.gnu.org/licenses/>. */
+ along with this program. If not, see <http://www.gnu.org/licenses/>. */
/* As a special exception, you may create a larger work that contains
part or all of the Bison parser skeleton and distribute that work
/* XXX assumes ASCII */
num = c - '0';
while (isdigit ((int) *P)) {
- if (num > MAX_TIME / 10)
- return tok_OVERFLOW;
+ if (num > MAX_TIME / 10)
+ return tok_OVERFLOW;
num *= 10;
if (num > MAX_TIME - (*P - '0'))
return tok_OVERFLOW;
$(BUILDTOP)/include/krb5/krb5.h $(BUILDTOP)/include/osconf.h \
$(BUILDTOP)/include/profile.h $(COM_ERR_DEPS) $(top_srcdir)/include/k5-buf.h \
$(top_srcdir)/include/k5-err.h $(top_srcdir)/include/k5-gmt_mktime.h \
- $(top_srcdir)/include/k5-int-pkinit.h $(top_srcdir)/include/k5-int.h \
- $(top_srcdir)/include/k5-platform.h $(top_srcdir)/include/k5-plugin.h \
- $(top_srcdir)/include/k5-thread.h $(top_srcdir)/include/k5-trace.h \
- $(top_srcdir)/include/k5-utf8.h $(top_srcdir)/include/krb5.h \
- $(top_srcdir)/include/krb5/authdata_plugin.h $(top_srcdir)/include/krb5/plugin.h \
- $(top_srcdir)/include/port-sockets.h $(top_srcdir)/include/socket-utils.h \
- authdata.h int-proto.h pac.c
+ $(top_srcdir)/include/k5-input.h $(top_srcdir)/include/k5-int-pkinit.h \
+ $(top_srcdir)/include/k5-int.h $(top_srcdir)/include/k5-platform.h \
+ $(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-thread.h \
+ $(top_srcdir)/include/k5-trace.h $(top_srcdir)/include/k5-utf8.h \
+ $(top_srcdir)/include/krb5.h $(top_srcdir)/include/krb5/authdata_plugin.h \
+ $(top_srcdir)/include/krb5/plugin.h $(top_srcdir)/include/port-sockets.h \
+ $(top_srcdir)/include/socket-utils.h authdata.h int-proto.h \
+ pac.c
pac_sign.so pac_sign.po $(OUTPRE)pac_sign.$(OBJEXT): \
$(BUILDTOP)/include/autoconf.h $(BUILDTOP)/include/krb5/krb5.h \
$(BUILDTOP)/include/osconf.h $(BUILDTOP)/include/profile.h \
void *expire_data;
krb5_timestamp pw_exp, acct_exp, now;
krb5_boolean is_last_req;
- krb5_deltat delta;
+ uint32_t interval;
char ts[256], banner[1024];
if (as_reply == NULL || as_reply->enc_part2 == NULL)
ret = krb5_timeofday(context, &now);
if (ret != 0)
return;
- if (!is_last_req &&
- (ts_after(now, pw_exp) || ts_delta(pw_exp, now) > 7 * 24 * 60 * 60))
+ interval = ts_interval(now, pw_exp);
+ if (!is_last_req && (!interval || interval > 7 * 24 * 60 * 60))
return;
if (!prompter)
if (ret != 0)
return;
- delta = ts_delta(pw_exp, now);
- if (delta < 3600) {
+ if (interval < 3600) {
snprintf(banner, sizeof(banner),
_("Warning: Your password will expire in less than one hour "
"on %s"), ts);
- } else if (delta < 86400 * 2) {
+ } else if (interval < 86400 * 2) {
snprintf(banner, sizeof(banner),
_("Warning: Your password will expire in %d hour%s on %s"),
- delta / 3600, delta < 7200 ? "" : "s", ts);
+ interval / 3600, interval < 7200 ? "" : "s", ts);
} else {
snprintf(banner, sizeof(banner),
_("Warning: Your password will expire in %d days on %s"),
- delta / 86400, ts);
+ interval / 86400, ts);
}
/* PROMPTER_INVOCATION */
(*prompter)(context, data, 0, banner, 0, 0);
}
-/* Display a warning via the prompter if des3-cbc-sha1 was used for either the
- * reply key or the session key. */
+/* Display a warning via the prompter if a deprecated enctype was used for
+ * either the reply key or the session key. */
static void
-warn_des3(krb5_context context, krb5_init_creds_context ctx,
- krb5_enctype as_key_enctype)
+warn_deprecated(krb5_context context, krb5_init_creds_context ctx,
+ krb5_enctype as_key_enctype)
{
- const char *banner;
+ krb5_enctype etype;
+ char encbuf[128], banner[256];
- if (as_key_enctype != ENCTYPE_DES3_CBC_SHA1 &&
- ctx->cred.keyblock.enctype != ENCTYPE_DES3_CBC_SHA1)
- return;
if (ctx->prompter == NULL)
return;
- banner = _("Warning: encryption type des3-cbc-sha1 used for "
- "authentication is weak and will be disabled");
+ if (krb5int_c_deprecated_enctype(as_key_enctype))
+ etype = as_key_enctype;
+ else if (krb5int_c_deprecated_enctype(ctx->cred.keyblock.enctype))
+ etype = ctx->cred.keyblock.enctype;
+ else
+ return;
+
+ if (krb5_enctype_to_name(etype, FALSE, encbuf, sizeof(encbuf)) != 0)
+ return;
+ snprintf(banner, sizeof(banner),
+ _("Warning: encryption type %s used for authentication is "
+ "deprecated and will be disabled"), encbuf);
+
/* PROMPTER_INVOCATION */
(*ctx->prompter)(context, ctx->prompter_data, NULL, banner, 0, NULL);
}
ctx->complete = TRUE;
warn_pw_expiry(context, ctx->opt, ctx->prompter, ctx->prompter_data,
ctx->in_tkt_service, ctx->reply);
- warn_des3(context, ctx, encrypting_key.enctype);
+ warn_deprecated(context, ctx, encrypting_key.enctype);
cleanup:
krb5_free_pa_data(context, kdc_padata);
krb5_keytab keytab = (krb5_keytab) gak_data;
krb5_error_code ret;
krb5_keytab_entry kt_ent;
- krb5_keyblock *kt_key;
/* We don't need the password from the responder to create the AS key. */
if (as_key == NULL)
etype, &kt_ent)))
return(ret);
- ret = krb5_copy_keyblock(context, &kt_ent.key, &kt_key);
-
- /* again, krb5's memory management is lame... */
-
- *as_key = *kt_key;
- free(kt_key);
+ /* Steal the keyblock from kt_ent for the caller. */
+ *as_key = kt_ent.key;
+ memset(&kt_ent.key, 0, sizeof(kt_ent.key));
(void) krb5_kt_free_entry(context, &kt_ent);
- return(ret);
+ return 0;
}
/* Return the list of etypes available for client in keytab. */
goto cleanup;
ctx->allow_weak_crypto = tmp;
+ retval = get_boolean(ctx, KRB5_CONF_ALLOW_DES3, 0, &tmp);
+ if (retval)
+ goto cleanup;
+ ctx->allow_des3 = tmp;
+
+ retval = get_boolean(ctx, KRB5_CONF_ALLOW_RC4, 0, &tmp);
+ if (retval)
+ goto cleanup;
+ ctx->allow_rc4 = tmp;
+
retval = get_boolean(ctx, KRB5_CONF_IGNORE_ACCEPTOR_HOSTNAME, 0, &tmp);
if (retval)
goto cleanup;
s += 2;
}
k5_buf_add(&buf, s); /* Remainder after last token */
- return buf.data;
+ return k5_buf_cstring(&buf);
}
const char * KRB5_CALLCONV
#include "k5-int.h"
#include "int-proto.h"
#include "authdata.h"
+#include "k5-input.h"
#define MAX_BUFFERS 4096
-/* draft-brezak-win2k-krb-authz-00 */
-
/*
- * Add a buffer to the provided PAC and update header.
+ * Add a buffer containing data to pac's metadata and encoding. If zerofill is
+ * true, data->data must be NULL and the buffer will be zero-filled with length
+ * data->length.
*/
krb5_error_code
-k5_pac_add_buffer(krb5_context context,
- krb5_pac pac,
- krb5_ui_4 type,
- const krb5_data *data,
- krb5_boolean zerofill,
- krb5_data *out_data)
+k5_pac_add_buffer(krb5_context context, krb5_pac pac, uint32_t type,
+ const krb5_data *data, krb5_boolean zerofill,
+ krb5_data *data_out)
{
- PACTYPE *header;
+ struct k5_pac_buffer *nbufs;
size_t header_len, i, pad = 0;
- char *pac_data;
+ char *ndata, *bufdata;
assert((data->data == NULL) == zerofill);
- /* Check there isn't already a buffer of this type */
- if (k5_pac_locate_buffer(context, pac, type, NULL) == 0) {
+ /* Check for an existing buffer of this type. */
+ if (k5_pac_locate_buffer(context, pac, type, NULL) == 0)
return EEXIST;
- }
- header = (PACTYPE *)realloc(pac->pac,
- sizeof(PACTYPE) +
- (pac->pac->cBuffers * sizeof(PAC_INFO_BUFFER)));
- if (header == NULL) {
+ if (pac->nbuffers >= MAX_BUFFERS)
+ return ERANGE;
+ nbufs = realloc(pac->buffers, (pac->nbuffers + 1) * sizeof(*pac->buffers));
+ if (nbufs == NULL)
return ENOMEM;
- }
- pac->pac = header;
+ pac->buffers = nbufs;
- header_len = PACTYPE_LENGTH + (pac->pac->cBuffers * PAC_INFO_BUFFER_LENGTH);
+ header_len = PACTYPE_LENGTH + pac->nbuffers * PAC_INFO_BUFFER_LENGTH;
if (data->length % PAC_ALIGNMENT)
pad = PAC_ALIGNMENT - (data->length % PAC_ALIGNMENT);
-
- pac_data = realloc(pac->data.data,
- pac->data.length + PAC_INFO_BUFFER_LENGTH + data->length + pad);
- if (pac_data == NULL) {
+ ndata = realloc(pac->data.data,
+ pac->data.length + PAC_INFO_BUFFER_LENGTH +
+ data->length + pad);
+ if (ndata == NULL)
return ENOMEM;
- }
- pac->data.data = pac_data;
+ pac->data.data = ndata;
- /* Update offsets of existing buffers */
- for (i = 0; i < pac->pac->cBuffers; i++)
- pac->pac->Buffers[i].Offset += PAC_INFO_BUFFER_LENGTH;
+ /* Update the offsets of existing buffers. */
+ for (i = 0; i < pac->nbuffers; i++)
+ pac->buffers[i].offset += PAC_INFO_BUFFER_LENGTH;
- /* Make room for new PAC_INFO_BUFFER */
+ /* Make room for the new buffer's metadata. */
memmove(pac->data.data + header_len + PAC_INFO_BUFFER_LENGTH,
pac->data.data + header_len,
pac->data.length - header_len);
memset(pac->data.data + header_len, 0, PAC_INFO_BUFFER_LENGTH);
- /* Initialise new PAC_INFO_BUFFER */
- pac->pac->Buffers[i].ulType = type;
- pac->pac->Buffers[i].cbBufferSize = data->length;
- pac->pac->Buffers[i].Offset = pac->data.length + PAC_INFO_BUFFER_LENGTH;
- assert((pac->pac->Buffers[i].Offset % PAC_ALIGNMENT) == 0);
+ /* Initialize the new buffer. */
+ pac->buffers[i].type = type;
+ pac->buffers[i].size = data->length;
+ pac->buffers[i].offset = pac->data.length + PAC_INFO_BUFFER_LENGTH;
+ assert((pac->buffers[i].offset % PAC_ALIGNMENT) == 0);
- /* Copy in new PAC data and zero padding bytes */
+ /* Copy in new PAC data and zero padding bytes. */
+ bufdata = pac->data.data + pac->buffers[i].offset;
if (zerofill)
- memset(pac->data.data + pac->pac->Buffers[i].Offset, 0, data->length);
+ memset(bufdata, 0, data->length);
else
- memcpy(pac->data.data + pac->pac->Buffers[i].Offset, data->data, data->length);
-
- memset(pac->data.data + pac->pac->Buffers[i].Offset + data->length, 0, pad);
+ memcpy(bufdata, data->data, data->length);
+ memset(bufdata + data->length, 0, pad);
- pac->pac->cBuffers++;
+ pac->nbuffers++;
pac->data.length += PAC_INFO_BUFFER_LENGTH + data->length + pad;
- if (out_data != NULL) {
- out_data->data = pac->data.data + pac->pac->Buffers[i].Offset;
- out_data->length = data->length;
- }
+ if (data_out != NULL)
+ *data_out = make_data(bufdata, data->length);
pac->verified = FALSE;
}
krb5_error_code KRB5_CALLCONV
-krb5_pac_add_buffer(krb5_context context,
- krb5_pac pac,
- krb5_ui_4 type,
+krb5_pac_add_buffer(krb5_context context, krb5_pac pac, uint32_t type,
const krb5_data *data)
{
return k5_pac_add_buffer(context, pac, type, data, FALSE, NULL);
* Free a PAC
*/
void KRB5_CALLCONV
-krb5_pac_free(krb5_context context,
- krb5_pac pac)
+krb5_pac_free(krb5_context context, krb5_pac pac)
{
if (pac != NULL) {
zapfree(pac->data.data, pac->data.length);
- free(pac->pac);
+ free(pac->buffers);
zapfree(pac, sizeof(*pac));
}
}
krb5_error_code
-k5_pac_locate_buffer(krb5_context context,
- const krb5_pac pac,
- krb5_ui_4 type,
- krb5_data *data)
+k5_pac_locate_buffer(krb5_context context, const krb5_pac pac, uint32_t type,
+ krb5_data *data_out)
{
- PAC_INFO_BUFFER *buffer = NULL;
+ struct k5_pac_buffer *buffer = NULL;
size_t i;
if (pac == NULL)
return EINVAL;
- for (i = 0; i < pac->pac->cBuffers; i++) {
- if (pac->pac->Buffers[i].ulType == type) {
+ for (i = 0; i < pac->nbuffers; i++) {
+ if (pac->buffers[i].type == type) {
if (buffer == NULL)
- buffer = &pac->pac->Buffers[i];
+ buffer = &pac->buffers[i];
else
return EINVAL;
}
if (buffer == NULL)
return ENOENT;
- assert(buffer->Offset + buffer->cbBufferSize <= pac->data.length);
+ assert(buffer->offset < pac->data.length);
+ assert(buffer->size <= pac->data.length - buffer->offset);
- if (data != NULL) {
- data->length = buffer->cbBufferSize;
- data->data = pac->data.data + buffer->Offset;
- }
+ if (data_out != NULL)
+ *data_out = make_data(pac->data.data + buffer->offset, buffer->size);
return 0;
}
* Find a buffer and copy data into output
*/
krb5_error_code KRB5_CALLCONV
-krb5_pac_get_buffer(krb5_context context,
- krb5_pac pac,
- krb5_ui_4 type,
- krb5_data *data)
+krb5_pac_get_buffer(krb5_context context, krb5_pac pac, uint32_t type,
+ krb5_data *data_out)
{
krb5_data d;
krb5_error_code ret;
ret = k5_pac_locate_buffer(context, pac, type, &d);
- if (ret != 0)
+ if (ret)
return ret;
- data->data = k5memdup(d.data, d.length, &ret);
- if (data->data == NULL)
+ data_out->data = k5memdup(d.data, d.length, &ret);
+ if (data_out->data == NULL)
return ret;
- data->length = d.length;
-
+ data_out->length = d.length;
return 0;
}
* Return an array of the types of data in the PAC
*/
krb5_error_code KRB5_CALLCONV
-krb5_pac_get_types(krb5_context context,
- krb5_pac pac,
- size_t *len,
- krb5_ui_4 **types)
+krb5_pac_get_types(krb5_context context, krb5_pac pac, size_t *len_out,
+ uint32_t **types_out)
{
size_t i;
- *types = (krb5_ui_4 *)malloc(pac->pac->cBuffers * sizeof(krb5_ui_4));
- if (*types == NULL)
+ *types_out = calloc(pac->nbuffers, sizeof(*types_out));
+ if (*types_out == NULL)
return ENOMEM;
- *len = pac->pac->cBuffers;
+ *len_out = pac->nbuffers;
- for (i = 0; i < pac->pac->cBuffers; i++)
- (*types)[i] = pac->pac->Buffers[i].ulType;
+ for (i = 0; i < pac->nbuffers; i++)
+ (*types_out)[i] = pac->buffers[i].type;
return 0;
}
-/*
- * Initialize PAC
- */
krb5_error_code KRB5_CALLCONV
-krb5_pac_init(krb5_context context,
- krb5_pac *ppac)
+krb5_pac_init(krb5_context context, krb5_pac *pac_out)
{
+ krb5_error_code ret;
krb5_pac pac;
- pac = (krb5_pac)malloc(sizeof(*pac));
- if (pac == NULL)
- return ENOMEM;
+ *pac_out = NULL;
- pac->pac = (PACTYPE *)malloc(sizeof(PACTYPE));
- if (pac->pac == NULL) {
- free(pac);
+ pac = malloc(sizeof(*pac));
+ if (pac == NULL)
return ENOMEM;
- }
- pac->pac->cBuffers = 0;
- pac->pac->Version = 0;
+ pac->nbuffers = 0;
+ pac->buffers = NULL;
+ pac->version = 0;
pac->data.length = PACTYPE_LENGTH;
- pac->data.data = calloc(1, pac->data.length);
+ pac->data.data = k5alloc(pac->data.length, &ret);
if (pac->data.data == NULL) {
- krb5_pac_free(context, pac);
- return ENOMEM;
+ free(pac);
+ return ret;
}
pac->verified = FALSE;
- *ppac = pac;
-
+ *pac_out = pac;
return 0;
}
static krb5_error_code
-k5_pac_copy(krb5_context context,
- krb5_pac src,
- krb5_pac *dst)
+copy_pac(krb5_context context, krb5_pac src, krb5_pac *dst_out)
{
- size_t header_len;
- krb5_ui_4 cbuffers;
- krb5_error_code code;
+ krb5_error_code ret;
krb5_pac pac;
- cbuffers = src->pac->cBuffers;
- if (cbuffers != 0)
- cbuffers--;
+ *dst_out = NULL;
- header_len = sizeof(PACTYPE) + cbuffers * sizeof(PAC_INFO_BUFFER);
-
- pac = (krb5_pac)malloc(sizeof(*pac));
+ pac = k5alloc(sizeof(*pac), &ret);
if (pac == NULL)
- return ENOMEM;
+ goto fail;
- pac->pac = k5memdup(src->pac, header_len, &code);
- if (pac->pac == NULL) {
- free(pac);
- return code;
- }
+ pac->buffers = k5memdup(src->buffers,
+ src->nbuffers * sizeof(*pac->buffers), &ret);
+ if (pac->buffers == NULL)
+ goto fail;
- code = krb5int_copy_data_contents(context, &src->data, &pac->data);
- if (code != 0) {
- free(pac->pac);
- free(pac);
- return ENOMEM;
- }
+ ret = krb5int_copy_data_contents(context, &src->data, &pac->data);
+ if (ret)
+ goto fail;
+ pac->nbuffers = src->nbuffers;
+ pac->version = src->version;
pac->verified = src->verified;
- *dst = pac;
+ *dst_out = pac;
return 0;
+
+fail:
+ krb5_pac_free(context, pac);
+ return ret;
}
-/*
- * Parse the supplied data into the PAC allocated by this function
- */
+/* Parse the supplied data into an allocated PAC. */
krb5_error_code KRB5_CALLCONV
-krb5_pac_parse(krb5_context context,
- const void *ptr,
- size_t len,
+krb5_pac_parse(krb5_context context, const void *ptr, size_t len,
krb5_pac *ppac)
{
krb5_error_code ret;
size_t i;
- const unsigned char *p = (const unsigned char *)ptr;
krb5_pac pac;
size_t header_len;
- krb5_ui_4 cbuffers, version;
+ uint32_t nbuffers, version;
+ struct k5input in;
+ char *ndata;
*ppac = NULL;
- if (len < PACTYPE_LENGTH)
- return ERANGE;
-
- cbuffers = load_32_le(p);
- p += 4;
- version = load_32_le(p);
- p += 4;
+ k5_input_init(&in, ptr, len);
- if (version != 0)
+ nbuffers = k5_input_get_uint32_le(&in);
+ version = k5_input_get_uint32_le(&in);
+ if (in.status || version != 0)
return EINVAL;
- if (cbuffers < 1 || cbuffers > MAX_BUFFERS)
+ if (nbuffers < 1 || nbuffers > MAX_BUFFERS)
return ERANGE;
- header_len = PACTYPE_LENGTH + (cbuffers * PAC_INFO_BUFFER_LENGTH);
+ header_len = PACTYPE_LENGTH + (nbuffers * PAC_INFO_BUFFER_LENGTH);
if (len < header_len)
return ERANGE;
ret = krb5_pac_init(context, &pac);
- if (ret != 0)
+ if (ret)
return ret;
- pac->pac = (PACTYPE *)realloc(pac->pac,
- sizeof(PACTYPE) + ((cbuffers - 1) * sizeof(PAC_INFO_BUFFER)));
- if (pac->pac == NULL) {
- krb5_pac_free(context, pac);
- return ENOMEM;
- }
+ pac->buffers = k5calloc(nbuffers, sizeof(*pac->buffers), &ret);
+ if (ret)
+ goto fail;
- pac->pac->cBuffers = cbuffers;
- pac->pac->Version = version;
+ pac->nbuffers = nbuffers;
+ pac->version = version;
- for (i = 0; i < pac->pac->cBuffers; i++) {
- PAC_INFO_BUFFER *buffer = &pac->pac->Buffers[i];
+ for (i = 0; i < nbuffers; i++) {
+ struct k5_pac_buffer *buffer = &pac->buffers[i];
- buffer->ulType = load_32_le(p);
- p += 4;
- buffer->cbBufferSize = load_32_le(p);
- p += 4;
- buffer->Offset = load_64_le(p);
- p += 8;
+ buffer->type = k5_input_get_uint32_le(&in);
+ buffer->size = k5_input_get_uint32_le(&in);
+ buffer->offset = k5_input_get_uint64_le(&in);
- if (buffer->Offset % PAC_ALIGNMENT) {
- krb5_pac_free(context, pac);
- return EINVAL;
+ if (in.status || buffer->offset % PAC_ALIGNMENT) {
+ ret = EINVAL;
+ goto fail;
}
- if (buffer->Offset < header_len || buffer->Offset > len ||
- buffer->cbBufferSize > len - buffer->Offset) {
- krb5_pac_free(context, pac);
- return ERANGE;
+ if (buffer->offset < header_len || buffer->offset > len ||
+ buffer->size > len - buffer->offset) {
+ ret = ERANGE;
+ goto fail;
}
}
- pac->data.data = realloc(pac->data.data, len);
- if (pac->data.data == NULL) {
+ ndata = realloc(pac->data.data, len);
+ if (ndata == NULL) {
krb5_pac_free(context, pac);
return ENOMEM;
}
- memcpy(pac->data.data, ptr, len);
+ pac->data.data = ndata;
+ memcpy(ndata, ptr, len);
pac->data.length = len;
*ppac = pac;
return 0;
+
+fail:
+ krb5_pac_free(context, pac);
+ return ret;
}
static krb5_error_code
}
krb5_error_code KRB5_CALLCONV
-krb5_pac_get_client_info(krb5_context context,
- const krb5_pac pac,
- krb5_timestamp *authtime_out,
- char **princname_out)
+krb5_pac_get_client_info(krb5_context context, const krb5_pac pac,
+ krb5_timestamp *authtime_out, char **princname_out)
{
krb5_error_code ret;
krb5_data client_info;
char *pac_princname;
unsigned char *p;
krb5_timestamp pac_authtime;
- krb5_ui_2 pac_princname_length;
+ uint16_t pac_princname_length;
uint64_t pac_nt_authtime;
if (authtime_out != NULL)
ret = k5_pac_locate_buffer(context, pac, KRB5_PAC_CLIENT_INFO,
&client_info);
- if (ret != 0)
+ if (ret)
return ret;
if (client_info.length < PAC_CLIENT_INFO_LENGTH)
p += 2;
ret = k5_time_to_seconds_since_1970(pac_nt_authtime, &pac_authtime);
- if (ret != 0)
+ if (ret)
return ret;
if (client_info.length < PAC_CLIENT_INFO_LENGTH + pac_princname_length ||
return ERANGE;
ret = k5_utf16le_to_utf8(p, pac_princname_length, &pac_princname);
- if (ret != 0)
+ if (ret)
return ret;
if (authtime_out != NULL)
}
krb5_error_code
-k5_pac_validate_client(krb5_context context,
- const krb5_pac pac,
- krb5_timestamp authtime,
- krb5_const_principal principal,
+k5_pac_validate_client(krb5_context context, const krb5_pac pac,
+ krb5_timestamp authtime, krb5_const_principal principal,
krb5_boolean with_realm)
{
krb5_error_code ret;
ret = krb5_pac_get_client_info(context, pac, &pac_authtime,
&pac_princname);
- if (ret != 0)
+ if (ret)
return ret;
flags = KRB5_PRINCIPAL_UNPARSE_DISPLAY;
flags |= KRB5_PRINCIPAL_UNPARSE_NO_REALM;
ret = krb5_unparse_name_flags(context, principal, flags, &princname);
- if (ret != 0) {
+ if (ret) {
free(pac_princname);
return ret;
}
return ret;
}
+/* Zero out the signature in a copy of the PAC data. */
static krb5_error_code
-zero_signature(krb5_context context, const krb5_pac pac, krb5_ui_4 type,
+zero_signature(krb5_context context, const krb5_pac pac, uint32_t type,
krb5_data *data)
{
- PAC_INFO_BUFFER *buffer = NULL;
+ struct k5_pac_buffer *buffer = NULL;
size_t i;
assert(type == KRB5_PAC_SERVER_CHECKSUM ||
- type == KRB5_PAC_PRIVSVR_CHECKSUM);
+ type == KRB5_PAC_PRIVSVR_CHECKSUM ||
+ type == KRB5_PAC_FULL_CHECKSUM);
assert(data->length >= pac->data.length);
- for (i = 0; i < pac->pac->cBuffers; i++) {
- if (pac->pac->Buffers[i].ulType == type) {
- buffer = &pac->pac->Buffers[i];
+ for (i = 0; i < pac->nbuffers; i++) {
+ if (pac->buffers[i].type == type) {
+ buffer = &pac->buffers[i];
break;
}
}
if (buffer == NULL)
return ENOENT;
- if (buffer->Offset + buffer->cbBufferSize > pac->data.length)
- return ERANGE;
-
- if (buffer->cbBufferSize < PAC_SIGNATURE_DATA_LENGTH)
+ if (buffer->size < PAC_SIGNATURE_DATA_LENGTH)
return KRB5_BAD_MSIZE;
+ if (buffer->size > pac->data.length ||
+ buffer->offset > pac->data.length - buffer->size)
+ return ERANGE;
- /* Zero out the data portion of the checksum only */
- memset(data->data + buffer->Offset + PAC_SIGNATURE_DATA_LENGTH,
- 0,
- buffer->cbBufferSize - PAC_SIGNATURE_DATA_LENGTH);
+ /* Within the copy, zero out the data portion of the checksum only. */
+ memset(data->data + buffer->offset + PAC_SIGNATURE_DATA_LENGTH, 0,
+ buffer->size - PAC_SIGNATURE_DATA_LENGTH);
return 0;
}
size_t cksumlen;
ret = k5_pac_locate_buffer(context, pac, buffer_type, &buffer);
- if (ret != 0)
+ if (ret)
return ret;
if (buffer.length < PAC_SIGNATURE_DATA_LENGTH)
return KRB5_BAD_MSIZE;
}
static krb5_error_code
-verify_server_checksum(krb5_context context, const krb5_pac pac,
- const krb5_keyblock *server)
+verify_pac_checksums(krb5_context context, const krb5_pac pac,
+ krb5_boolean expect_full_checksum,
+ const krb5_keyblock *server, const krb5_keyblock *privsvr)
{
krb5_error_code ret;
- krb5_data copy; /* PAC with zeroed checksums */
+ krb5_data copy, server_checksum;
+ /* Make a copy of the PAC with zeroed out server and privsvr checksums. */
ret = krb5int_copy_data_contents(context, &pac->data, ©);
if (ret)
return ret;
- /* Zero out both checksum buffers */
ret = zero_signature(context, pac, KRB5_PAC_SERVER_CHECKSUM, ©);
if (ret)
goto cleanup;
if (ret)
goto cleanup;
- ret = verify_checksum(context, pac, KRB5_PAC_SERVER_CHECKSUM, server,
- KRB5_KEYUSAGE_APP_DATA_CKSUM, ©);
+ if (server != NULL) {
+ /* Verify the server checksum over the PAC copy. */
+ ret = verify_checksum(context, pac, KRB5_PAC_SERVER_CHECKSUM, server,
+ KRB5_KEYUSAGE_APP_DATA_CKSUM, ©);
+ }
-cleanup:
- free(copy.data);
- return ret;
-}
+ if (privsvr != NULL && expect_full_checksum) {
+ /* Zero the full checksum buffer in the copy and verify the full
+ * checksum over the copy with all three checksums zeroed. */
+ ret = zero_signature(context, pac, KRB5_PAC_FULL_CHECKSUM, ©);
+ if (ret)
+ goto cleanup;
+ ret = verify_checksum(context, pac, KRB5_PAC_FULL_CHECKSUM, privsvr,
+ KRB5_KEYUSAGE_APP_DATA_CKSUM, ©);
+ if (ret)
+ goto cleanup;
+ }
-static krb5_error_code
-verify_kdc_checksum(krb5_context context, const krb5_pac pac,
- const krb5_keyblock *privsvr)
-{
- krb5_error_code ret;
- krb5_data server_checksum;
+ if (privsvr != NULL) {
+ /* Verify the privsvr checksum over the server checksum. */
+ ret = k5_pac_locate_buffer(context, pac, KRB5_PAC_SERVER_CHECKSUM,
+ &server_checksum);
+ if (ret)
+ return ret;
+ if (server_checksum.length < PAC_SIGNATURE_DATA_LENGTH)
+ return KRB5_BAD_MSIZE;
+ server_checksum.data += PAC_SIGNATURE_DATA_LENGTH;
+ server_checksum.length -= PAC_SIGNATURE_DATA_LENGTH;
- ret = k5_pac_locate_buffer(context, pac, KRB5_PAC_SERVER_CHECKSUM,
- &server_checksum);
- if (ret)
- return ret;
- if (server_checksum.length < PAC_SIGNATURE_DATA_LENGTH)
- return KRB5_BAD_MSIZE;
- server_checksum.data += PAC_SIGNATURE_DATA_LENGTH;
- server_checksum.length -= PAC_SIGNATURE_DATA_LENGTH;
+ ret = verify_checksum(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM, privsvr,
+ KRB5_KEYUSAGE_APP_DATA_CKSUM, &server_checksum);
+ if (ret)
+ goto cleanup;
+ }
- return verify_checksum(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM, privsvr,
- KRB5_KEYUSAGE_APP_DATA_CKSUM, &server_checksum);
+ pac->verified = TRUE;
+
+cleanup:
+ free(copy.data);
+ return ret;
}
/* Per MS-PAC 2.8.3, tickets encrypted to TGS and password change principals
krb5_error_code ret;
krb5_pac pac = NULL;
krb5_data *recoded_tkt = NULL;
- krb5_authdata **authdata, *orig, **ifrel = NULL, **recoded_ifrel = NULL;
+ krb5_authdata **authdata = enc_tkt->authorization_data;
+ krb5_authdata *orig, **ifrel = NULL, **recoded_ifrel = NULL;
uint8_t z = 0;
krb5_authdata zpac = { KV5M_AUTHDATA, KRB5_AUTHDATA_WIN2K_PAC, 1, &z };
+ krb5_boolean is_service_tkt;
size_t i, j;
*pac_out = NULL;
+ if (authdata == NULL)
+ return 0;
+
/*
* Find the position of the PAC in the ticket authdata. ifrel will be the
* decoded AD-IF-RELEVANT container at position i containing a PAC, and j
* will be the offset within the container.
*/
- authdata = enc_tkt->authorization_data;
- for (i = 0; authdata != NULL && authdata[i] != NULL; i++) {
+ for (i = 0; authdata[i] != NULL; i++) {
if (authdata[i]->ad_type != KRB5_AUTHDATA_IF_RELEVANT)
continue;
}
/* Stop and return successfully if we didn't find a PAC. */
- if (ifrel == NULL) {
+ if (authdata[i] == NULL) {
ret = 0;
goto cleanup;
}
if (ret)
goto cleanup;
- if (privsvr != NULL && k5_pac_should_have_ticket_signature(server_princ)) {
+ is_service_tkt = k5_pac_should_have_ticket_signature(server_princ);
+ if (privsvr != NULL && is_service_tkt) {
/* To check the PAC ticket signatures, re-encode the ticket with the
* PAC contents replaced by a single zero. */
orig = ifrel[j];
goto cleanup;
}
- ret = krb5_pac_verify_ext(context, pac, enc_tkt->times.authtime, NULL,
- server, privsvr, FALSE);
+ ret = verify_pac_checksums(context, pac, is_service_tkt, server, privsvr);
+ if (ret)
+ goto cleanup;
*pac_out = pac;
pac = NULL;
{
krb5_error_code ret;
- if (server != NULL) {
- ret = verify_server_checksum(context, pac, server);
- if (ret != 0)
- return ret;
- }
-
- if (privsvr != NULL) {
- ret = verify_kdc_checksum(context, pac, privsvr);
- if (ret != 0)
+ if (server != NULL || privsvr != NULL) {
+ ret = verify_pac_checksums(context, pac, FALSE, server, privsvr);
+ if (ret)
return ret;
}
if (principal != NULL) {
ret = k5_pac_validate_client(context, pac, authtime,
principal, with_realm);
- if (ret != 0)
+ if (ret)
return ret;
}
- pac->verified = TRUE;
-
return 0;
}
};
static krb5_error_code
-mspac_init(krb5_context kcontext, void **plugin_context)
+mspac_init(krb5_context context, void **plugin_context)
{
*plugin_context = NULL;
return 0;
}
static void
-mspac_flags(krb5_context kcontext,
- void *plugin_context,
- krb5_authdatatype ad_type,
- krb5_flags *flags)
+mspac_flags(krb5_context context, void *plugin_context,
+ krb5_authdatatype ad_type, krb5_flags *flags)
{
*flags = AD_USAGE_TGS_REQ;
}
static void
-mspac_fini(krb5_context kcontext, void *plugin_context)
+mspac_fini(krb5_context context, void *plugin_context)
{
return;
}
static krb5_error_code
-mspac_request_init(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void **request_context)
+mspac_request_init(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void **request_context)
{
struct mspac_context *pacctx;
- pacctx = (struct mspac_context *)malloc(sizeof(*pacctx));
+ pacctx = malloc(sizeof(*pacctx));
if (pacctx == NULL)
return ENOMEM;
}
static krb5_error_code
-mspac_import_authdata(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_authdata **authdata,
- krb5_boolean kdc_issued,
+mspac_import_authdata(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_authdata **authdata, krb5_boolean kdc_issued,
krb5_const_principal kdc_issuer)
{
- krb5_error_code code;
struct mspac_context *pacctx = (struct mspac_context *)request_context;
if (kdc_issued)
return EINVAL;
if (pacctx->pac != NULL) {
- krb5_pac_free(kcontext, pacctx->pac);
+ krb5_pac_free(context, pacctx->pac);
pacctx->pac = NULL;
}
assert((authdata[0]->ad_type & AD_TYPE_FIELD_TYPE_MASK) ==
KRB5_AUTHDATA_WIN2K_PAC);
- code = krb5_pac_parse(kcontext, authdata[0]->contents,
- authdata[0]->length, &pacctx->pac);
-
- return code;
+ return krb5_pac_parse(context, authdata[0]->contents, authdata[0]->length,
+ &pacctx->pac);
}
static krb5_error_code
-mspac_export_authdata(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_flags usage,
- krb5_authdata ***out_authdata)
+mspac_export_authdata(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_flags usage, krb5_authdata ***authdata_out)
{
struct mspac_context *pacctx = (struct mspac_context *)request_context;
krb5_error_code code;
}
authdata[1] = NULL;
- code = krb5int_copy_data_contents(kcontext, &pacctx->pac->data, &data);
+ code = krb5int_copy_data_contents(context, &pacctx->pac->data, &data);
if (code != 0) {
- krb5_free_authdata(kcontext, authdata);
+ krb5_free_authdata(context, authdata);
return code;
}
authdata[1] = NULL;
- *out_authdata = authdata;
+ *authdata_out = authdata;
return 0;
}
static krb5_error_code
-mspac_verify(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- const krb5_auth_context *auth_context,
- const krb5_keyblock *key,
+mspac_verify(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ const krb5_auth_context *auth_context, const krb5_keyblock *key,
const krb5_ap_req *req)
{
- krb5_error_code code;
+ krb5_error_code ret;
struct mspac_context *pacctx = (struct mspac_context *)request_context;
if (pacctx->pac == NULL)
return EINVAL;
- code = krb5_pac_verify(kcontext, pacctx->pac,
- req->ticket->enc_part2->times.authtime,
- req->ticket->enc_part2->client, key, NULL);
- if (code != 0)
- TRACE_MSPAC_VERIFY_FAIL(kcontext, code);
+ ret = krb5_pac_verify(context, pacctx->pac,
+ req->ticket->enc_part2->times.authtime,
+ req->ticket->enc_part2->client, key, NULL);
+ if (ret)
+ TRACE_MSPAC_VERIFY_FAIL(context, ret);
/*
* If the above verification failed, don't fail the whole authentication,
}
static void
-mspac_request_fini(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context)
+mspac_request_fini(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context)
{
struct mspac_context *pacctx = (struct mspac_context *)request_context;
if (pacctx != NULL) {
- if (pacctx->pac != NULL)
- krb5_pac_free(kcontext, pacctx->pac);
-
+ krb5_pac_free(context, pacctx->pac);
free(pacctx);
}
}
#define STRLENOF(x) (sizeof((x)) - 1)
static struct {
- krb5_ui_4 type;
+ uint32_t type;
krb5_data attribute;
} mspac_attribute_types[] = {
- { (krb5_ui_4)-1, { KV5M_DATA, STRLENOF("urn:mspac:"),
+ { (uint32_t)-1, { KV5M_DATA, STRLENOF("urn:mspac:"),
"urn:mspac:" } },
{ KRB5_PAC_LOGON_INFO, { KV5M_DATA,
STRLENOF("urn:mspac:logon-info"),
#define MSPAC_ATTRIBUTE_COUNT (sizeof(mspac_attribute_types)/sizeof(mspac_attribute_types[0]))
static krb5_error_code
-mspac_type2attr(krb5_ui_4 type, krb5_data *attr)
+mspac_type2attr(uint32_t type, krb5_data *attr)
{
unsigned int i;
}
static krb5_error_code
-mspac_attr2type(const krb5_data *attr, krb5_ui_4 *type)
+mspac_attr2type(const krb5_data *attr, uint32_t *type)
{
unsigned int i;
}
static krb5_error_code
-mspac_get_attribute_types(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_data **out_attrs)
+mspac_get_attribute_types(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_data **attrs_out)
{
struct mspac_context *pacctx = (struct mspac_context *)request_context;
unsigned int i, j;
krb5_data *attrs;
- krb5_error_code code;
+ krb5_error_code ret;
if (pacctx->pac == NULL)
return ENOENT;
- attrs = calloc(1 + pacctx->pac->pac->cBuffers + 1, sizeof(krb5_data));
+ attrs = calloc(1 + pacctx->pac->nbuffers + 1, sizeof(krb5_data));
if (attrs == NULL)
return ENOMEM;
j = 0;
/* The entire PAC */
- code = krb5int_copy_data_contents(kcontext,
- &mspac_attribute_types[0].attribute,
- &attrs[j++]);
- if (code != 0) {
- free(attrs);
- return code;
- }
+ ret = krb5int_copy_data_contents(context,
+ &mspac_attribute_types[0].attribute,
+ &attrs[j++]);
+ if (ret)
+ goto fail;
/* PAC buffers */
- for (i = 0; i < pacctx->pac->pac->cBuffers; i++) {
+ for (i = 0; i < pacctx->pac->nbuffers; i++) {
krb5_data attr;
- code = mspac_type2attr(pacctx->pac->pac->Buffers[i].ulType, &attr);
- if (code == 0) {
- code = krb5int_copy_data_contents(kcontext, &attr, &attrs[j++]);
- if (code != 0) {
- krb5int_free_data_list(kcontext, attrs);
- return code;
- }
+ ret = mspac_type2attr(pacctx->pac->buffers[i].type, &attr);
+ if (!ret) {
+ ret = krb5int_copy_data_contents(context, &attr, &attrs[j++]);
+ if (ret)
+ goto fail;
} else {
int length;
length = asprintf(&attrs[j].data, "urn:mspac:%d",
- pacctx->pac->pac->Buffers[i].ulType);
+ pacctx->pac->buffers[i].type);
if (length < 0) {
- krb5int_free_data_list(kcontext, attrs);
- return ENOMEM;
+ ret = ENOMEM;
+ goto fail;
}
attrs[j++].length = length;
}
attrs[j].data = NULL;
attrs[j].length = 0;
- *out_attrs = attrs;
+ *attrs_out = attrs;
return 0;
+
+fail:
+ krb5int_free_data_list(context, attrs);
+ return ret;
}
static krb5_error_code
-mspac_get_attribute(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- const krb5_data *attribute,
- krb5_boolean *authenticated,
- krb5_boolean *complete,
- krb5_data *value,
- krb5_data *display_value,
- int *more)
+mspac_get_attribute(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ const krb5_data *attribute, krb5_boolean *authenticated,
+ krb5_boolean *complete, krb5_data *value,
+ krb5_data *display_value, int *more)
{
struct mspac_context *pacctx = (struct mspac_context *)request_context;
- krb5_error_code code;
- krb5_ui_4 type;
+ krb5_error_code ret;
+ uint32_t type;
if (display_value != NULL) {
display_value->data = NULL;
/* If it didn't verify, pretend it didn't exist. */
if (!pacctx->pac->verified) {
- TRACE_MSPAC_DISCARD_UNVERF(kcontext);
+ TRACE_MSPAC_DISCARD_UNVERF(context);
return ENOENT;
}
- code = mspac_attr2type(attribute, &type);
- if (code != 0)
- return code;
+ ret = mspac_attr2type(attribute, &type);
+ if (ret)
+ return ret;
/* -1 is a magic type that refers to the entire PAC */
- if (type == (krb5_ui_4)-1) {
+ if (type == (uint32_t)-1) {
if (value != NULL)
- code = krb5int_copy_data_contents(kcontext,
- &pacctx->pac->data,
- value);
+ ret = krb5int_copy_data_contents(context, &pacctx->pac->data,
+ value);
else
- code = 0;
+ ret = 0;
} else {
if (value != NULL)
- code = krb5_pac_get_buffer(kcontext, pacctx->pac, type, value);
+ ret = krb5_pac_get_buffer(context, pacctx->pac, type, value);
else
- code = k5_pac_locate_buffer(kcontext, pacctx->pac, type, NULL);
+ ret = k5_pac_locate_buffer(context, pacctx->pac, type, NULL);
}
- if (code == 0) {
+ if (!ret) {
*authenticated = pacctx->pac->verified;
*complete = TRUE;
}
*more = 0;
- return code;
+ return ret;
}
static krb5_error_code
-mspac_set_attribute(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_boolean complete,
- const krb5_data *attribute,
+mspac_set_attribute(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_boolean complete, const krb5_data *attribute,
const krb5_data *value)
{
struct mspac_context *pacctx = (struct mspac_context *)request_context;
- krb5_error_code code;
- krb5_ui_4 type;
+ krb5_error_code ret;
+ uint32_t type;
if (pacctx->pac == NULL)
return ENOENT;
- code = mspac_attr2type(attribute, &type);
- if (code != 0)
- return code;
+ ret = mspac_attr2type(attribute, &type);
+ if (ret)
+ return ret;
/* -1 is a magic type that refers to the entire PAC */
- if (type == (krb5_ui_4)-1) {
+ if (type == (uint32_t)-1) {
krb5_pac newpac;
- code = krb5_pac_parse(kcontext, value->data, value->length, &newpac);
- if (code != 0)
- return code;
+ ret = krb5_pac_parse(context, value->data, value->length, &newpac);
+ if (ret)
+ return ret;
- krb5_pac_free(kcontext, pacctx->pac);
+ krb5_pac_free(context, pacctx->pac);
pacctx->pac = newpac;
} else {
- code = krb5_pac_add_buffer(kcontext, pacctx->pac, type, value);
+ ret = krb5_pac_add_buffer(context, pacctx->pac, type, value);
}
- return code;
+ return ret;
}
static krb5_error_code
-mspac_export_internal(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_boolean restrict_authenticated,
- void **ptr)
+mspac_export_internal(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_boolean restrict_authenticated, void **ptr)
{
struct mspac_context *pacctx = (struct mspac_context *)request_context;
- krb5_error_code code;
+ krb5_error_code ret;
krb5_pac pac;
*ptr = NULL;
if (restrict_authenticated && (pacctx->pac->verified) == FALSE)
return ENOENT;
- code = krb5_pac_parse(kcontext, pacctx->pac->data.data,
- pacctx->pac->data.length, &pac);
- if (code == 0) {
+ ret = krb5_pac_parse(context, pacctx->pac->data.data,
+ pacctx->pac->data.length, &pac);
+ if (!ret) {
pac->verified = pacctx->pac->verified;
*ptr = pac;
}
- return code;
+ return ret;
}
static void
-mspac_free_internal(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- void *ptr)
+mspac_free_internal(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context, void *ptr)
{
if (ptr != NULL)
- krb5_pac_free(kcontext, (krb5_pac)ptr);
+ krb5_pac_free(context, (krb5_pac)ptr);
return;
}
static krb5_error_code
-mspac_size(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- size_t *sizep)
+mspac_size(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context, size_t *sizep)
{
struct mspac_context *pacctx = (struct mspac_context *)request_context;
- *sizep += sizeof(krb5_int32);
+ *sizep += sizeof(int32_t);
if (pacctx->pac != NULL)
*sizep += pacctx->pac->data.length;
- *sizep += sizeof(krb5_int32);
+ *sizep += sizeof(int32_t);
return 0;
}
static krb5_error_code
-mspac_externalize(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_octet **buffer,
- size_t *lenremain)
+mspac_externalize(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_octet **buffer, size_t *lenremain)
{
- krb5_error_code code = 0;
+ krb5_error_code ret = 0;
struct mspac_context *pacctx = (struct mspac_context *)request_context;
size_t required = 0;
krb5_octet *bp;
remain = *lenremain;
if (pacctx->pac != NULL) {
- mspac_size(kcontext, context, plugin_context,
- request_context, &required);
+ mspac_size(context, actx, plugin_context, request_context, &required);
if (required <= remain) {
- krb5_ser_pack_int32((krb5_int32)pacctx->pac->data.length,
- &bp, &remain);
+ krb5_ser_pack_int32(pacctx->pac->data.length, &bp, &remain);
krb5_ser_pack_bytes((krb5_octet *)pacctx->pac->data.data,
(size_t)pacctx->pac->data.length,
&bp, &remain);
- krb5_ser_pack_int32((krb5_int32)pacctx->pac->verified,
- &bp, &remain);
+ krb5_ser_pack_int32(pacctx->pac->verified, &bp, &remain);
} else {
- code = ENOMEM;
+ ret = ENOMEM;
}
} else {
krb5_ser_pack_int32(0, &bp, &remain); /* length */
*buffer = bp;
*lenremain = remain;
- return code;
+ return ret;
}
static krb5_error_code
-mspac_internalize(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- krb5_octet **buffer,
- size_t *lenremain)
+mspac_internalize(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ krb5_octet **buffer, size_t *lenremain)
{
struct mspac_context *pacctx = (struct mspac_context *)request_context;
- krb5_error_code code;
- krb5_int32 ibuf;
- krb5_octet *bp;
+ krb5_error_code ret;
+ int32_t ibuf;
+ uint8_t *bp;
size_t remain;
krb5_pac pac = NULL;
remain = *lenremain;
/* length */
- code = krb5_ser_unpack_int32(&ibuf, &bp, &remain);
- if (code != 0)
- return code;
+ ret = krb5_ser_unpack_int32(&ibuf, &bp, &remain);
+ if (ret)
+ return ret;
if (ibuf != 0) {
- code = krb5_pac_parse(kcontext, bp, ibuf, &pac);
- if (code != 0)
- return code;
+ ret = krb5_pac_parse(context, bp, ibuf, &pac);
+ if (ret)
+ return ret;
bp += ibuf;
remain -= ibuf;
}
/* verified */
- code = krb5_ser_unpack_int32(&ibuf, &bp, &remain);
- if (code != 0) {
- krb5_pac_free(kcontext, pac);
- return code;
+ ret = krb5_ser_unpack_int32(&ibuf, &bp, &remain);
+ if (ret) {
+ krb5_pac_free(context, pac);
+ return ret;
}
- if (pac != NULL) {
+ if (pac != NULL)
pac->verified = (ibuf != 0);
- }
- if (pacctx->pac != NULL) {
- krb5_pac_free(kcontext, pacctx->pac);
- }
+ if (pacctx->pac != NULL)
+ krb5_pac_free(context, pacctx->pac);
pacctx->pac = pac;
}
static krb5_error_code
-mspac_copy(krb5_context kcontext,
- krb5_authdata_context context,
- void *plugin_context,
- void *request_context,
- void *dst_plugin_context,
- void *dst_request_context)
+mspac_copy(krb5_context context, krb5_authdata_context actx,
+ void *plugin_context, void *request_context,
+ void *dst_plugin_context, void *dst_request_context)
{
struct mspac_context *srcctx = (struct mspac_context *)request_context;
struct mspac_context *dstctx = (struct mspac_context *)dst_request_context;
- krb5_error_code code = 0;
+ krb5_error_code ret = 0;
assert(dstctx != NULL);
assert(dstctx->pac == NULL);
if (srcctx->pac != NULL)
- code = k5_pac_copy(kcontext, srcctx->pac, &dstctx->pac);
+ ret = copy_pac(context, srcctx->pac, &dstctx->pac);
- return code;
+ return ret;
}
static krb5_authdatatype mspac_ad_types[] = { KRB5_AUTHDATA_WIN2K_PAC, 0 };
/* draft-brezak-win2k-krb-authz-00 */
static krb5_error_code
-k5_insert_client_info(krb5_context context,
- krb5_pac pac,
- krb5_timestamp authtime,
- krb5_const_principal principal,
- krb5_boolean with_realm)
+insert_client_info(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
+ krb5_const_principal principal, krb5_boolean with_realm)
{
krb5_error_code ret;
krb5_data client_info;
char *princ_name_utf8 = NULL;
- unsigned char *princ_name_utf16 = NULL, *p;
+ uint8_t *princ_name_utf16 = NULL, *p;
size_t princ_name_utf16_len = 0;
uint64_t nt_authtime;
int flags = 0;
}
ret = krb5_unparse_name_flags(context, principal, flags, &princ_name_utf8);
- if (ret != 0)
+ if (ret)
goto cleanup;
ret = k5_utf8_to_utf16le(princ_name_utf8, &princ_name_utf16,
&princ_name_utf16_len);
- if (ret != 0)
+ if (ret)
goto cleanup;
client_info.length = PAC_CLIENT_INFO_LENGTH + princ_name_utf16_len;
ret = k5_pac_add_buffer(context, pac, KRB5_PAC_CLIENT_INFO,
&client_info, TRUE, &client_info);
- if (ret != 0)
+ if (ret)
goto cleanup;
- p = (unsigned char *)client_info.data;
+ p = (uint8_t *)client_info.data;
/* copy in authtime converted to a 64-bit NT time */
k5_seconds_since_1970_to_time(authtime, &nt_authtime);
}
static krb5_error_code
-k5_insert_checksum(krb5_context context,
- krb5_pac pac,
- krb5_ui_4 type,
- const krb5_keyblock *key,
- krb5_cksumtype *cksumtype)
+insert_checksum(krb5_context context, krb5_pac pac, krb5_ui_4 type,
+ const krb5_keyblock *key, krb5_cksumtype *cksumtype)
{
krb5_error_code ret;
size_t len;
krb5_data cksumdata;
ret = krb5int_c_mandatory_cksumtype(context, key->enctype, cksumtype);
- if (ret != 0)
+ if (ret)
return ret;
ret = krb5_c_checksum_length(context, *cksumtype, &len);
- if (ret != 0)
+ if (ret)
return ret;
ret = k5_pac_locate_buffer(context, pac, type, &cksumdata);
- if (ret == 0) {
+ if (!ret) {
/*
* If we're resigning PAC, make sure we can fit checksum
* into existing buffer
cksumdata.length = PAC_SIGNATURE_DATA_LENGTH + len;
cksumdata.data = NULL;
- ret = k5_pac_add_buffer(context, pac,
- type, &cksumdata,
- TRUE, &cksumdata);
- if (ret != 0)
+ ret = k5_pac_add_buffer(context, pac, type, &cksumdata, TRUE,
+ &cksumdata);
+ if (ret)
return ret;
}
/* in-place encoding of PAC header */
static krb5_error_code
-k5_pac_encode_header(krb5_context context, krb5_pac pac)
+encode_header(krb5_context context, krb5_pac pac)
{
size_t i;
unsigned char *p;
size_t header_len;
- header_len = PACTYPE_LENGTH +
- (pac->pac->cBuffers * PAC_INFO_BUFFER_LENGTH);
+ header_len = PACTYPE_LENGTH + (pac->nbuffers * PAC_INFO_BUFFER_LENGTH);
assert(pac->data.length >= header_len);
- p = (unsigned char *)pac->data.data;
+ p = (uint8_t *)pac->data.data;
- store_32_le(pac->pac->cBuffers, p);
+ store_32_le(pac->nbuffers, p);
p += 4;
- store_32_le(pac->pac->Version, p);
+ store_32_le(pac->version, p);
p += 4;
- for (i = 0; i < pac->pac->cBuffers; i++) {
- PAC_INFO_BUFFER *buffer = &pac->pac->Buffers[i];
+ for (i = 0; i < pac->nbuffers; i++) {
+ struct k5_pac_buffer *buffer = &pac->buffers[i];
- store_32_le(buffer->ulType, p);
+ store_32_le(buffer->type, p);
p += 4;
- store_32_le(buffer->cbBufferSize, p);
+ store_32_le(buffer->size, p);
p += 4;
- store_64_le(buffer->Offset, p);
+ store_64_le(buffer->offset, p);
p += 8;
- assert((buffer->Offset % PAC_ALIGNMENT) == 0);
- assert(buffer->Offset + buffer->cbBufferSize <= pac->data.length);
- assert(buffer->Offset >= header_len);
+ assert((buffer->offset % PAC_ALIGNMENT) == 0);
+ assert(buffer->size < pac->data.length);
+ assert(buffer->offset <= pac->data.length - buffer->size);
+ assert(buffer->offset >= header_len);
- if (buffer->Offset % PAC_ALIGNMENT ||
- buffer->Offset + buffer->cbBufferSize > pac->data.length ||
- buffer->Offset < header_len)
+ if (buffer->offset % PAC_ALIGNMENT ||
+ buffer->size > pac->data.length ||
+ buffer->offset > pac->data.length - buffer->size ||
+ buffer->offset < header_len)
return ERANGE;
}
return 0;
}
-krb5_error_code KRB5_CALLCONV
-krb5_pac_sign(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
- krb5_const_principal principal, const krb5_keyblock *server_key,
- const krb5_keyblock *privsvr_key, krb5_data *data)
+/* Find the buffer of type buftype in pac and write within it a checksum of
+ * type cksumtype over data. Set *cksum_out to the checksum. */
+static krb5_error_code
+compute_pac_checksum(krb5_context context, krb5_pac pac, uint32_t buftype,
+ const krb5_keyblock *key, krb5_cksumtype cksumtype,
+ const krb5_data *data, krb5_data *cksum_out)
{
- return krb5_pac_sign_ext(context, pac, authtime, principal, server_key,
- privsvr_key, FALSE, data);
+ krb5_error_code ret;
+ krb5_data buf;
+ krb5_crypto_iov iov[2];
+
+ ret = k5_pac_locate_buffer(context, pac, buftype, &buf);
+ if (ret)
+ return ret;
+
+ assert(buf.length > PAC_SIGNATURE_DATA_LENGTH);
+ *cksum_out = make_data(buf.data + PAC_SIGNATURE_DATA_LENGTH,
+ buf.length - PAC_SIGNATURE_DATA_LENGTH);
+ iov[0].flags = KRB5_CRYPTO_TYPE_DATA;
+ iov[0].data = *data;
+ iov[1].flags = KRB5_CRYPTO_TYPE_CHECKSUM;
+ iov[1].data = *cksum_out;
+ return krb5_c_make_checksum_iov(context, cksumtype, key,
+ KRB5_KEYUSAGE_APP_DATA_CKSUM, iov, 2);
}
-krb5_error_code KRB5_CALLCONV
-krb5_pac_sign_ext(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
- krb5_const_principal principal,
- const krb5_keyblock *server_key,
- const krb5_keyblock *privsvr_key, krb5_boolean with_realm,
- krb5_data *data)
+static krb5_error_code
+sign_pac(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
+ krb5_const_principal principal, const krb5_keyblock *server_key,
+ const krb5_keyblock *privsvr_key, krb5_boolean with_realm,
+ krb5_boolean is_service_tkt, krb5_data *data)
{
krb5_error_code ret;
- krb5_data server_cksum, privsvr_cksum;
+ krb5_data full_cksum, server_cksum, privsvr_cksum;
krb5_cksumtype server_cksumtype, privsvr_cksumtype;
- krb5_crypto_iov iov[2];
data->length = 0;
data->data = NULL;
if (principal != NULL) {
- ret = k5_insert_client_info(context, pac, authtime, principal,
- with_realm);
- if (ret != 0)
+ ret = insert_client_info(context, pac, authtime, principal,
+ with_realm);
+ if (ret)
return ret;
}
- /* Create zeroed buffers for both checksums */
- ret = k5_insert_checksum(context, pac, KRB5_PAC_SERVER_CHECKSUM,
- server_key, &server_cksumtype);
- if (ret != 0)
- return ret;
-
- ret = k5_insert_checksum(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM,
- privsvr_key, &privsvr_cksumtype);
- if (ret != 0)
+ /* Create zeroed buffers for all checksums. */
+ ret = insert_checksum(context, pac, KRB5_PAC_SERVER_CHECKSUM, server_key,
+ &server_cksumtype);
+ if (ret)
return ret;
-
- /* Now, encode the PAC header so that the checksums will include it */
- ret = k5_pac_encode_header(context, pac);
- if (ret != 0)
+ ret = insert_checksum(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM, privsvr_key,
+ &privsvr_cksumtype);
+ if (ret)
return ret;
+ if (is_service_tkt) {
+ ret = insert_checksum(context, pac, KRB5_PAC_FULL_CHECKSUM,
+ privsvr_key, &privsvr_cksumtype);
+ if (ret)
+ return ret;
+ }
- /* Generate the server checksum over the entire PAC */
- ret = k5_pac_locate_buffer(context, pac, KRB5_PAC_SERVER_CHECKSUM,
- &server_cksum);
- if (ret != 0)
+ /* Encode the PAC header so that the checksums will include it. */
+ ret = encode_header(context, pac);
+ if (ret)
return ret;
- assert(server_cksum.length > PAC_SIGNATURE_DATA_LENGTH);
-
- iov[0].flags = KRB5_CRYPTO_TYPE_DATA;
- iov[0].data = pac->data;
-
- iov[1].flags = KRB5_CRYPTO_TYPE_CHECKSUM;
- iov[1].data.data = server_cksum.data + PAC_SIGNATURE_DATA_LENGTH;
- iov[1].data.length = server_cksum.length - PAC_SIGNATURE_DATA_LENGTH;
+ if (is_service_tkt) {
+ /* Generate a full KDC checksum over the whole PAC. */
+ ret = compute_pac_checksum(context, pac, KRB5_PAC_FULL_CHECKSUM,
+ privsvr_key, privsvr_cksumtype,
+ &pac->data, &full_cksum);
+ if (ret)
+ return ret;
+ }
- ret = krb5_c_make_checksum_iov(context, server_cksumtype,
- server_key, KRB5_KEYUSAGE_APP_DATA_CKSUM,
- iov, sizeof(iov)/sizeof(iov[0]));
- if (ret != 0)
+ /* Generate the server checksum over the whole PAC, including the full KDC
+ * checksum if we added one. */
+ ret = compute_pac_checksum(context, pac, KRB5_PAC_SERVER_CHECKSUM,
+ server_key, server_cksumtype, &pac->data,
+ &server_cksum);
+ if (ret)
return ret;
- /* Generate the privsvr checksum over the server checksum buffer */
- ret = k5_pac_locate_buffer(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM,
+ /* Generate the privsvr checksum over the server checksum buffer. */
+ ret = compute_pac_checksum(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM,
+ privsvr_key, privsvr_cksumtype, &server_cksum,
&privsvr_cksum);
- if (ret != 0)
- return ret;
-
- assert(privsvr_cksum.length > PAC_SIGNATURE_DATA_LENGTH);
-
- iov[0].flags = KRB5_CRYPTO_TYPE_DATA;
- iov[0].data.data = server_cksum.data + PAC_SIGNATURE_DATA_LENGTH;
- iov[0].data.length = server_cksum.length - PAC_SIGNATURE_DATA_LENGTH;
-
- iov[1].flags = KRB5_CRYPTO_TYPE_CHECKSUM;
- iov[1].data.data = privsvr_cksum.data + PAC_SIGNATURE_DATA_LENGTH;
- iov[1].data.length = privsvr_cksum.length - PAC_SIGNATURE_DATA_LENGTH;
-
- ret = krb5_c_make_checksum_iov(context, privsvr_cksumtype,
- privsvr_key, KRB5_KEYUSAGE_APP_DATA_CKSUM,
- iov, sizeof(iov)/sizeof(iov[0]));
- if (ret != 0)
+ if (ret)
return ret;
data->data = k5memdup(pac->data.data, pac->data.length, &ret);
data->length = pac->data.length;
memset(pac->data.data, 0,
- PACTYPE_LENGTH + (pac->pac->cBuffers * PAC_INFO_BUFFER_LENGTH));
+ PACTYPE_LENGTH + (pac->nbuffers * PAC_INFO_BUFFER_LENGTH));
return 0;
}
+krb5_error_code KRB5_CALLCONV
+krb5_pac_sign(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
+ krb5_const_principal principal, const krb5_keyblock *server_key,
+ const krb5_keyblock *privsvr_key, krb5_data *data)
+{
+ return sign_pac(context, pac, authtime, principal, server_key,
+ privsvr_key, FALSE, FALSE, data);
+}
+
+krb5_error_code KRB5_CALLCONV
+krb5_pac_sign_ext(krb5_context context, krb5_pac pac, krb5_timestamp authtime,
+ krb5_const_principal principal,
+ const krb5_keyblock *server_key,
+ const krb5_keyblock *privsvr_key, krb5_boolean with_realm,
+ krb5_data *data)
+{
+ return sign_pac(context, pac, authtime, principal, server_key, privsvr_key,
+ with_realm, FALSE, data);
+}
+
/* Add a signature over der_enc_tkt in privsvr to pac. der_enc_tkt should be
* encoded with a dummy PAC authdata element containing a single zero byte. */
static krb5_error_code
krb5_crypto_iov iov[2];
/* Create zeroed buffer for checksum. */
- ret = k5_insert_checksum(context, pac, KRB5_PAC_TICKET_CHECKSUM,
- privsvr, &ticket_cksumtype);
+ ret = insert_checksum(context, pac, KRB5_PAC_TICKET_CHECKSUM, privsvr,
+ &ticket_cksumtype);
if (ret)
return ret;
krb5_error_code ret;
krb5_data *der_enc_tkt = NULL, pac_data = empty_data();
krb5_authdata **list, *pac_ad;
+ krb5_boolean is_service_tkt;
size_t count;
/* Reallocate space for another authdata element in enc_tkt. */
memmove(list + 1, list, (count + 1) * sizeof(*list));
list[0] = pac_ad;
- if (k5_pac_should_have_ticket_signature(server_princ)) {
+ is_service_tkt = k5_pac_should_have_ticket_signature(server_princ);
+ if (is_service_tkt) {
ret = encode_krb5_enc_tkt_part(enc_tkt, &der_enc_tkt);
if (ret)
goto cleanup;
goto cleanup;
}
- ret = krb5_pac_sign_ext(context, pac, enc_tkt->times.authtime,
- client_princ, server, privsvr, with_realm,
- &pac_data);
+ ret = sign_pac(context, pac, enc_tkt->times.authtime, client_princ, server,
+ privsvr, with_realm, is_service_tkt, &pac_data);
if (ret)
goto cleanup;
* preauth context's array of handles. */
for (count = 0; pctx->handles[count] != NULL; count++);
reqctx->modreqs = calloc(count, sizeof(*reqctx->modreqs));
+ if (reqctx->modreqs == NULL) {
+ free(reqctx);
+ return;
+ }
for (i = 0; i < count; i++) {
h = pctx->handles[i];
if (h->vt.request_init != NULL)
void *prompter_data, krb5_otp_tokeninfo **tis,
krb5_otp_tokeninfo **out_ti)
{
- char response[1024];
+ char response[1024], *prompt;
krb5_otp_tokeninfo *ti = NULL;
krb5_error_code retval = 0;
struct k5buf buf;
k5_buf_add_len(&buf, tis[i]->vendor.data, tis[i]->vendor.length);
k5_buf_add(&buf, "\n");
}
- if (k5_buf_status(&buf) != 0)
+ prompt = k5_buf_cstring(&buf);
+ if (prompt == NULL)
return ENOMEM;
do {
- retval = doprompt(context, prompter, prompter_data, buf.data,
+ retval = doprompt(context, prompter, prompter_data, prompt,
_("Enter #"), response, sizeof(response));
if (retval != 0)
goto cleanup;
static const krb5_keyblock ticket_sig_krbtgt_key = {
0, ENCTYPE_AES256_CTS_HMAC_SHA1_96,
- 32, U("\x7a\x58\x98\xd2\xaf\xa6\xaf\xc0\x6a\xce\x06\x04\x4b\xc2\x70\x84"
- "\x9b\x8e\x0a\x6c\x4c\x07\xdc\x6f\xbb\x48\x43\xe1\xd2\xaa\x97\xf7")
+ 32, U("\x03\x73\x81\xEC\x43\x96\x7B\xC2\xAC\x3D\xF5\x2A\xAE\x95\xA6\x8E"
+ "\xBE\x24\x58\xDB\xCE\x52\x28\x20\xAF\x5E\xB7\x04\xA2\x22\x71\x4F")
};
static const krb5_keyblock ticket_sig_server_key = {
- 0, ENCTYPE_ARCFOUR_HMAC,
- 16, U("\xed\x23\x11\x20\x7a\x21\x44\x20\xbf\xc0\x8d\x36\xf7\xf6\xb2\x3e")
+ 0, ENCTYPE_AES256_CTS_HMAC_SHA1_96,
+ 32, U("\x11\x4A\x84\xE3\x14\x8F\xAA\xB1\xFA\x7B\x53\x51\xB2\x8A\xC2\xF1"
+ "\xFD\x19\x6D\x61\xE0\xF3\xF2\x3E\x1F\xDB\xD3\xC1\x79\x7D\xC1\xEE")
};
+/* A ticket issued by an Active Directory KDC (Windows Server 2022), containing
+ * a PAC with a full checksum. */
static const krb5_data ticket_data = {
- .length = 972, .data =
- "\x61\x82\x03\xC8\x30\x82\x03\xC4\xA0\x03\x02\x01\x05\xA1\x0A\x1B"
- "\x08\x43\x44\x4F\x4D\x2E\x43\x4F\x4D\xA2\x0F\x30\x0D\xA0\x03\x02"
- "\x01\x01\xA1\x06\x30\x04\x1B\x02\x73\x31\xA3\x82\x03\x9E\x30\x82"
- "\x03\x9A\xA0\x03\x02\x01\x17\xA1\x03\x02\x01\x03\xA2\x82\x03\x8C"
- "\x04\x82\x03\x88\x44\x31\x61\x20\x17\xC9\xFE\xBC\xAC\x46\xB5\x77"
- "\xE9\x68\x04\x4C\x9B\x31\x91\x0C\xC1\xD4\xDD\xEF\xC7\x34\x20\x08"
- "\x90\x91\xE8\x79\xE0\xB5\x03\x26\xA4\x65\xDE\xEC\x47\x03\x2A\x8F"
- "\x61\xE7\x4D\x38\x5A\x42\x95\x5A\xF9\x2F\x41\x2C\x2A\x6E\x60\xA1"
- "\xEB\x51\xB3\xBD\x4C\x00\x41\x2A\x44\x76\x08\x37\x1A\x51\xFD\x65"
- "\x67\x7E\xBF\x3D\x90\x86\xE3\x9A\x54\x6B\x67\xA8\x08\x7A\x73\xCC"
- "\xC3\xB7\x4B\xD5\x5C\x3A\x14\x6C\xC1\x5F\x54\x4B\x92\x55\xB4\xB7"
- "\x92\x23\x3F\x53\x89\x47\x8E\x1F\x8B\xB9\xDB\x3B\x93\xE8\x70\xE4"
- "\x24\xB8\x9D\xF0\x0E\x35\x28\xF8\x7A\x27\x5D\xF7\x25\x97\x9C\xF5"
- "\x9F\x9F\x64\x04\xF2\xA3\xAB\x11\x15\xB6\xDA\x18\xD6\x46\xD5\xE6"
- "\xB8\x08\xDE\x0A\x62\xFD\xF8\xAA\x52\x90\xD9\x67\x29\xB2\xCD\x06"
- "\xB6\xB0\x50\x2B\x3F\x0F\xA3\xA5\xBF\xAA\x6E\x40\x03\xD6\x5F\x02"
- "\xBC\xD8\x18\x47\x97\x09\xD7\xE4\x96\x3B\xCB\xEB\x92\x2C\x3C\x49"
- "\xFF\x1F\x71\xE0\x52\x94\x0F\x8B\x9F\xB8\x2A\xBB\x9C\xE2\xA3\xDD"
- "\x38\x89\xE2\xB1\x0B\x9E\x1F\x7A\xB3\xE3\xD2\xB0\x94\xDC\x87\xBE"
- "\x37\xA6\xD3\xB3\x29\x35\x9A\x72\xC3\x7A\xF1\xA9\xE6\xC5\xD1\x26"
- "\x83\x65\x44\x17\xBA\x55\xA8\x5E\x94\x26\xED\xE9\x8A\x93\x11\x5D"
- "\x7E\x20\x1B\x9C\x15\x9E\x13\x37\x03\x4D\xDD\x99\x51\xD8\x66\x29"
- "\x6A\xB9\xFB\x49\xFE\x52\x78\xDA\x86\x85\xA9\xA3\xB9\xEF\xEC\xAD"
- "\x35\xA6\x8D\xAC\x0F\x75\x22\xBB\x0B\x49\x1C\x13\x52\x40\xC9\x52"
- "\x69\x09\x54\xD1\x0F\x94\x3F\x22\x48\x67\xB0\x96\x28\xAA\xE6\x28"
- "\xD9\x0C\x08\xEF\x51\xED\x15\x5E\xA2\x53\x59\xA5\x03\xB4\x06\x20"
- "\x3D\xCC\xB4\xC5\xF8\x8C\x73\x67\xA3\x21\x3D\x19\xCD\xD4\x12\x28"
- "\xD2\x93\xDE\x0D\xF0\x71\x10\x50\xD6\x33\x35\x04\x11\x64\x43\x39"
- "\xC3\xDF\x96\xE3\x66\xE3\x85\xCA\xE7\x67\x14\x3A\xF0\x43\xAA\xBB"
- "\xD4\x1D\xB5\x24\xB5\x74\x90\x25\xA7\x87\x7E\xDB\xD3\x83\x8A\x3A"
- "\x69\xA8\x2D\xAF\xB7\xB8\xF3\xDC\x13\xAF\x45\x61\x3F\x59\x39\x7E"
- "\x69\xDE\x0C\x04\xF1\x10\x6B\xB4\x56\xFA\x21\x9F\x72\x2B\x60\x86"
- "\xE3\x23\x0E\xC4\x51\xF6\xBE\xD8\xE1\x5F\xEE\x73\x4C\x17\x4C\x2C"
- "\x1B\xFB\x9F\x1F\x7A\x3B\x07\x5B\x8E\xF1\x01\xAC\xD6\x30\x94\x8A"
- "\x5D\x22\x6F\x08\xCE\xED\x5E\xB6\xDB\x86\x8C\x87\xEB\x8D\x91\xFF"
- "\x0A\x86\x30\xBD\xC0\xF8\x25\xE7\xAE\x24\x35\xF2\xFC\xE5\xFD\x1B"
- "\xB0\x05\x4A\xA3\xE5\xEB\x2E\x05\xAD\x99\x67\x49\x87\xE6\xB3\x87"
- "\x82\xA4\x59\xA7\x6E\xDD\xF2\xB6\x66\xE8\xF7\x70\xF5\xBD\xC9\x0E"
- "\xFA\x9C\x79\x84\xD4\x9B\x05\x0E\xBB\xF5\xDB\xEF\xFC\xCC\x26\xF2"
- "\x93\xCF\xD2\x04\x3C\xA9\x2C\x65\x42\x97\x86\xD8\x38\x0A\x1E\xF6"
- "\xD6\xCA\x30\xB5\x1A\xEC\xFB\xBA\x3B\x84\x57\xB0\xFD\xFB\xE6\xBC"
- "\xF2\x76\xF6\x4C\xBB\xAB\xB1\x31\xA1\x27\x7C\xE6\xE6\x81\xB6\xCE"
- "\x84\x86\x40\xB6\x40\x33\xC4\xF8\xB4\x15\xCF\xAA\xA5\x51\x78\xB9"
- "\x8B\x50\x25\xB2\x88\x86\x96\x72\x8C\x71\x4D\xB5\x3A\x94\x86\x77"
- "\x0E\x95\x9B\x16\x93\xEF\x3A\x11\x79\xBA\x83\xF7\x74\xD3\x8D\xBA"
- "\x15\xE1\x2C\x04\x57\xA8\x92\x1E\x9D\x00\x8E\x20\xFD\x30\x70\xE7"
- "\xF5\x65\x2F\x19\x0C\x94\xBA\x03\x71\x12\x96\xCD\xC8\xB4\x96\xDB"
- "\xCE\x19\xC2\xDF\x3C\xC2\xF6\x3D\x53\xED\x98\xA5\x41\x72\x2A\x22"
- "\x7B\xF3\x2B\x17\x6C\xE1\x39\x7D\xAE\x9B\x11\xF9\xC1\xA6\x9E\x9F"
- "\x89\x3C\x12\xAA\x94\x74\xA7\x4F\x70\xE8\xB9\xDE\x04\xF0\x9D\x39"
- "\x24\x2D\x92\xE8\x46\x2D\x2E\xF0\x40\x66\x1A\xD9\x27\xF9\x98\xF1"
- "\x81\x1D\x70\x62\x63\x30\x6D\xCD\x84\x04\x5F\xFA\x83\xD3\xEC\x8D"
- "\x86\xFB\x40\x61\xC1\x8A\x45\xFF\x7B\xD9\xD4\x18\x61\x7F\x51\xE3"
- "\xFC\x1E\x18\xF0\xAF\xC6\x18\x2C\xE1\x6D\x5D\xF9\x62\xFC\x20\xA3"
- "\xB2\x8A\x5F\xE5\xBB\x29\x0F\x99\x63\x07\x88\x38\x3A\x3B\x73\x2A"
- "\x6D\xDA\x3D\xA8\x0D\x8F\x56\x41\x89\x82\xE5\xB8\x61\x00\x64\x7D"
- "\x17\x0C\xCE\x03\x55\x8F\xF4\x5B\x0D\x50\xF2\xEB\x05\x67\xBE\xDB"
- "\x7B\x75\xC5\xEA\xA1\xAB\x1D\xB0\x3C\x6D\x42\x08\x0B\x9A\x45\x20"
- "\xA8\x8F\xE5\x67\x47\x30\xDE\x93\x5F\x43\x05\xEB\xA8\x2D\x80\xF5"
- "\x1A\xB8\x4A\x4E\x42\x2D\x0B\x7A\xDC\x46\x20\x2D\x13\x17\xDD\x4B"
- "\x94\x96\xAA\x1F\x06\x0C\x1F\x62\x07\x9C\x40\xA1"
+ .length = 1307, .data =
+ "\x61\x82\x05\x17\x30\x82\x05\x13\xA0\x03\x02\x01\x05\xA1\x0F\x1B"
+ "\x0D\x57\x32\x30\x32\x32\x2D\x4C\x37\x2E\x42\x41\x53\x45\xA2\x2A"
+ "\x30\x28\xA0\x03\x02\x01\x01\xA1\x21\x30\x1F\x1B\x04\x63\x69\x66"
+ "\x73\x1B\x17\x77\x32\x30\x32\x32\x2D\x31\x31\x38\x2E\x77\x32\x30"
+ "\x32\x32\x2D\x6C\x37\x2E\x62\x61\x73\x65\xA3\x82\x04\xCD\x30\x82"
+ "\x04\xC9\xA0\x03\x02\x01\x12\xA1\x03\x02\x01\x05\xA2\x82\x04\xBB"
+ "\x04\x82\x04\xB7\x44\x5C\x7B\x5A\x3F\x2E\xA3\x50\x34\xDE\xB0\x69"
+ "\x23\x2D\x47\x89\x2C\xC0\xA3\xF9\xDD\x70\xAA\xA5\x1E\xFE\x74\xE5"
+ "\x19\xA2\x4F\x65\x6C\x9E\x00\xB4\x60\x00\x7C\x0C\x29\x43\x31\x99"
+ "\x77\x02\x73\xED\xB9\x40\xF5\xD2\xD1\xC9\x20\x0F\xE3\x38\xF9\xCC"
+ "\x5E\x2A\xBD\x1F\x91\x66\x1A\xD8\x2A\x80\x3C\x2C\x00\x3C\x1E\xC9"
+ "\x2A\x29\x19\x19\x96\x18\x54\x03\x97\x8F\x1D\x5F\xDB\xE9\x66\x68"
+ "\xCD\xB1\xD5\x00\x35\x69\x49\x45\xF1\x6A\x78\x7B\x37\x71\x87\x14"
+ "\x1C\x98\x4D\x69\xCB\x1B\xD8\xF5\xA3\xD8\x53\x4A\x75\x76\x62\xBA"
+ "\x6C\x3F\xEA\x8B\x97\x21\xCA\x8A\x46\x4B\x38\xDA\x09\x9F\x5A\xC8"
+ "\x38\xFF\x34\x97\x5B\xA2\xE5\xBA\xC9\x87\x17\xD8\x08\x05\x7A\x83"
+ "\x04\xD6\x02\x8E\x9B\x18\xB6\x40\x1A\xF7\x47\x25\x24\x3E\x37\x1E"
+ "\xF6\xC1\x3A\x1F\xCA\xB3\x43\x5A\xAE\x94\x83\x31\xAF\xFB\xEE\xED"
+ "\x46\x71\xEF\xE2\x37\x37\x15\xFE\x1B\x0B\x9E\xF8\x3E\x0C\x43\x96"
+ "\xB6\x0A\x04\x78\xF8\x5E\xAA\x33\x1F\xE2\x07\x5A\x8D\xC4\x4E\x32"
+ "\x6D\xD6\xA0\xC5\xEA\x3D\x12\x59\xD4\x41\x40\x4E\xA1\xD8\xBE\xED"
+ "\x17\xCB\x68\xCC\x59\xCB\x53\xB2\x0E\x58\x8A\xA9\x33\x7F\x6F\x2B"
+ "\x37\x89\x08\x44\xBA\xC7\x67\x17\xBB\x91\xF7\xC3\x0F\x00\xF8\xAA"
+ "\xA1\x33\xA6\x08\x47\xCA\xFA\xE8\x49\x27\x45\x46\xF1\xC1\xC3\x5F"
+ "\xE2\x45\x0A\x7D\x64\x52\x8C\x2E\xE1\xDE\xFF\xB2\x64\xEC\x69\x98"
+ "\x15\xDF\x9E\xB1\xEB\xD6\x9D\x08\x06\x4E\x73\xC1\x0B\x71\x21\x05"
+ "\x9E\xBC\xA2\x17\xCF\xB3\x70\xF4\xEF\xB8\x69\xA9\x94\x27\xFD\x5E"
+ "\x72\xB1\x2D\xD2\x20\x1B\x57\x80\xAB\x38\x97\xCF\x22\x68\x4F\xB8"
+ "\xB7\x17\x53\x25\x67\x0B\xED\xD1\x58\x20\x0D\x45\xF9\x09\xFA\xE7"
+ "\x61\x3E\xDB\xC2\x59\x7B\x3A\x3B\x59\x81\x51\xAA\xA4\x81\xF4\x96"
+ "\x3B\xE1\x6F\x6F\xF4\x8E\x68\x9E\xBA\x1E\x0F\xF2\x44\x68\x11\xFC"
+ "\x2B\x5F\xBE\xF2\xEA\x07\x80\xB9\xCA\x9E\x41\xBD\x2F\x81\xF5\x11"
+ "\x2A\x12\xF3\x4F\xD6\x12\x16\x0F\x21\x90\xF1\xD3\x1E\xF1\xA4\x94"
+ "\x46\xEA\x30\xF3\x84\x06\xC1\xA4\x51\xFC\x43\x35\xBD\xEF\x4D\x89"
+ "\x1D\xA5\x44\xB2\x69\xC4\x0F\xBF\x86\x01\x08\x44\x77\xD5\xB4\xB7"
+ "\x5C\x3F\xA7\xD4\x2F\x39\x73\x85\x88\xEE\xB1\x64\x1D\x80\x6C\xEE"
+ "\x6E\x31\x90\x92\x0D\xA1\xB7\xC4\x5C\xCC\xEE\x91\xC8\xCB\x11\x2D"
+ "\x4A\x1A\x7D\x43\x8F\xEB\x60\x09\xED\x1B\x07\x58\xBE\xBC\xBD\x29"
+ "\xF3\xB3\xA3\x4F\xC5\x8A\x30\x33\xB9\xA9\x9F\x43\x08\x27\x15\xC4"
+ "\x9C\x5D\x8E\xBD\x5C\x05\xC6\x05\x9C\x87\x60\x08\x1E\xE2\x52\xB8"
+ "\x45\x8D\x28\xB6\x2C\x15\x46\x74\x9F\x0E\xAA\x6B\x70\x3A\x2A\x55"
+ "\x45\x26\xB2\x58\x4D\x35\xA6\xF1\x96\xBE\x60\xB2\x71\x7B\xF8\x54"
+ "\xB9\x90\x21\x8E\xB9\x0F\x35\x98\x5E\x88\xEB\x1A\x53\xB4\x59\x7F"
+ "\xAF\x69\x1C\x61\x67\xF4\xF6\xBD\xAC\x24\xCD\xB7\xA9\x67\xE8\xA1"
+ "\x83\x85\x5F\x11\x74\x1F\xF7\x4C\x78\x36\xEF\x50\x74\x88\x58\x4B"
+ "\x1A\x9F\x84\x9A\x9A\x05\x92\xEC\x1D\xD5\xF3\xC4\x95\x51\x28\xE2"
+ "\x3F\x32\x87\xB2\xFD\x21\x27\x66\xE4\x6B\x85\x2F\xDC\x7B\xC0\x22"
+ "\xEB\x7A\x94\x20\x5A\x7B\xD3\x7A\xB9\x5B\xF8\x1A\x5A\x84\x4E\xA1"
+ "\x73\x41\x53\xD2\x60\xF7\x7C\xEE\x68\x59\x85\x80\xFC\x3D\x70\x4B"
+ "\x04\x32\xE7\xF2\xFD\xBD\xB3\xD9\x21\xE2\x37\x56\xA2\x16\xCC\xDE"
+ "\x8A\xD3\xBC\x71\xEF\x58\x19\x0E\x45\x8A\x5B\x53\xD6\x77\x30\x6A"
+ "\xA7\xF8\x68\x06\x4E\x07\xCA\xCE\x30\xD7\x35\xAB\x1A\xC7\x18\xD4"
+ "\xC6\x2F\x1A\xFF\xE9\x7A\x94\x0B\x76\x5E\x7E\x29\x0C\xE6\xD3\x3B"
+ "\x5B\x44\x96\xA8\xF1\x29\x23\x95\xD9\x79\xB3\x39\xFC\x76\xED\xE1"
+ "\x1E\x67\x4E\xF7\xE8\x7B\x7A\x12\x9E\xD8\x4B\x35\x09\x0A\xF2\xC1"
+ "\x63\x5B\xEE\xFD\x2A\xC2\xA6\x66\x30\x3C\x1F\x95\xAF\x65\x22\x95"
+ "\x14\x1D\xF5\xD5\xDC\x38\x79\x35\x1C\xCD\x24\x47\xE0\xFD\x08\xC8"
+ "\xF4\x15\x55\x9F\xD9\xC7\xAC\x3F\x67\xB3\x4F\xEB\x26\x7C\x8E\xD6"
+ "\x74\xB3\x0A\xCD\xE7\xFA\xBE\x7E\xA3\x3E\xEC\x61\x50\x77\x52\x56"
+ "\xCF\x90\x5D\x48\xFB\xD4\x2C\x6C\x61\x8B\xDD\x2B\xF5\x92\x1F\x30"
+ "\xBF\x3F\x80\x0D\x31\xDB\xB2\x0B\x7D\x84\xE3\xA6\x42\x7F\x00\x38"
+ "\x44\x02\xC5\xB8\xD9\x58\x29\x9D\x68\x5C\x32\x8B\x76\xAE\xED\x15"
+ "\xF9\x7C\xAE\x7B\xB6\x8E\xD6\x54\x24\xFF\xFA\x87\x05\xEF\x15\x08"
+ "\x5E\x4B\x21\xA2\x2F\x49\xE7\x0F\xC3\xD0\xB9\x49\x22\xEF\xD5\xCA"
+ "\xB2\x11\xF2\x17\xB6\x77\x24\x68\x76\xB2\x07\xF8\x0A\x73\xDD\x65"
+ "\x9C\x75\x64\xF7\xA1\xC6\x23\x08\x84\x72\x3E\x54\x2E\xEB\x9B\x40"
+ "\xA6\x83\x87\xEB\xB5\x00\x40\x4F\xE1\x72\x2A\x59\x3A\x06\x60\x29"
+ "\x7E\x25\x2F\xD8\x80\x40\x8C\x59\xCA\xCF\x8E\x44\xE4\x2D\x84\x7E"
+ "\xCB\xFD\x1E\x3B\xD5\xFF\x9A\xB9\x66\x93\x6D\x5E\xC8\xB7\x13\x26"
+ "\xD6\x38\x1B\x2B\xE1\x87\x96\x05\xD5\xF3\xAB\x68\xF7\x12\x62\x2C"
+ "\x58\xC1\xC9\x85\x3C\x72\xF1\x26\xEE\xC0\x09\x5F\x1D\x4B\xAC\x01"
+ "\x41\xC8\x12\xF8\xF3\x93\x43\x41\xFF\xEC\x0B\x80\xE2\xEE\x20\x85"
+ "\x25\xCD\x6C\x30\x8C\x0D\x24\x2E\xBA\x19\xEA\x28\x7F\xCF\xD5\x10"
+ "\x5C\xE9\xB2\x9D\x5F\x16\xE4\xC0\xF3\xCC\xD9\x68\x4A\x05\x08\x70"
+ "\x17\x26\xC8\x5C\x4A\xBF\x94\x6A\x0E\xD5\xDA\x67\x47\x4B\xAF\x44"
+ "\xE3\x94\xAA\x05\xDB\xA2\x49\x74\xFA\x5C\x69\xAB\x44\xB7\xF7\xBA"
+ "\xAE\x7A\x23\x87\xEB\x54\x7E\x80\xF1\x5B\x60\xA5\x93\xE5\xD4\x24"
+ "\x84\xF7\x0A\x16\x10\xBE\xE9\x4D\xD8\x6B\x15\x40\x5D\x74\xDA\x1B"
+ "\xFF\x2E\x4D\x17\x9D\x35\xF7\x0D\xCF\x66\x38\x0D\x8A\xE4\xDD\x6B"
+ "\xE1\x0F\x1F\xBD\xFD\x4F\x30\x37\x3F\x96\xB4\x92\x54\xD3\x9A\x7A"
+ "\xD1\x5B\x5B\xA9\x54\x16\xE6\x24\xAB\xD4\x23\x39\x7D\xD2\xC7\x09"
+ "\xFA\xD4\x86\x55\x4D\x60\xC2\x87\x67\x6B\xE6"
};
static void
{
krb5_error_code ret;
krb5_ticket *ticket;
- krb5_principal sprinc;
+ krb5_principal cprinc, sprinc;
krb5_authdata **authdata1, **authdata2;
krb5_pac pac, pac2, pac3;
uint32_t *list;
if (ret)
err(context, ret, "while decrypting ticket");
- ret = krb5_parse_name(context, "s1@CDOM.COM", &sprinc);
+ ret = krb5_parse_name(context, "administrator@W2022-L7.BASE", &cprinc);
+ if (ret)
+ err(context, ret, "krb5_parse_name");
+
+ ret = krb5_parse_name(context,
+ "cifs/w2022-118.w2022-l7.base@W2022-L7.BASE",
+ &sprinc);
if (ret)
err(context, ret, "krb5_parse_name");
/* In this test, the server is also the client. */
ret = krb5_pac_verify(context, pac, ticket->enc_part2->times.authtime,
- ticket->server, NULL, NULL);
+ cprinc, NULL, NULL);
if (ret)
err(context, ret, "while verifying PAC client info");
ticket->enc_part2->authorization_data = NULL;
ret = krb5_kdc_sign_ticket(context, ticket->enc_part2, pac, sprinc,
- sprinc, &ticket_sig_server_key,
+ cprinc, &ticket_sig_server_key,
&ticket_sig_krbtgt_key, FALSE);
if (ret)
err(context, ret, "while signing ticket");
krb5_pac_free(context, pac);
krb5_pac_free(context, pac2);
krb5_pac_free(context, pac3);
+ krb5_free_principal(context, cprinc);
krb5_free_principal(context, sprinc);
krb5_free_ticket(context, ticket);
}
/* XXX assumes ASCII */
num = c - '0';
while (isdigit ((int) *P)) {
- if (num > MAX_TIME / 10)
- return tok_OVERFLOW;
+ if (num > MAX_TIME / 10)
+ return tok_OVERFLOW;
num *= 10;
if (num > MAX_TIME - (*P - '0'))
return tok_OVERFLOW;
k5_buf_add(&buf, ".");
}
- return buf.data;
+ return k5_buf_cstring(&buf);
}
/*
if (buf.len > 0 && ((char *)buf.data)[buf.len - 1] != '.')
k5_buf_add(&buf, ".");
- return buf.data;
+ return k5_buf_cstring(&buf);
}
/* Insert new into the list *head, ordering by priority. Weight is not
{
krb5_error_code ret;
struct k5buf buf;
- char *tok_begin, *tok_end, *tok_val, **extra_tokens = NULL;
+ char *tok_begin, *tok_end, *tok_val, **extra_tokens = NULL, *path;
const char *path_left;
size_t nargs = 0, i;
va_list ap;
path_left = tok_end + 1;
}
- ret = k5_buf_status(&buf);
- if (ret)
+ path = k5_buf_cstring(&buf);
+ if (path == NULL) {
+ ret = ENOMEM;
goto cleanup;
+ }
#ifdef _WIN32
/* Also deal with slashes. */
{
char *p;
- for (p = buf.data; *p != '\0'; p++) {
+ for (p = path; *p != '\0'; p++) {
if (*p == '/')
*p = '\\';
}
}
#endif
- *path_out = buf.data;
+ *path_out = path;
memset(&buf, 0, sizeof(buf));
+ ret = 0;
cleanup:
k5_buf_free(&buf);
}
regfree(&re);
k5_buf_add(&buf, instr);
- if (k5_buf_status(&buf) != 0)
- return ENOMEM;
- *outstr = buf.data;
- return 0;
+ *outstr = k5_buf_cstring(&buf);
+ return (*outstr == NULL) ? ENOMEM : 0;
}
/*
return KRB5_CONFIG_BADFORMAT;
}
- if (k5_buf_status(&selstring) != 0)
+ *selstring_out = k5_buf_cstring(&selstring);
+ if (*selstring_out == NULL)
return ENOMEM;
-
*contextp = current + 1;
- *selstring_out = selstring.data;
return 0;
}
case KRB5_PADATA_AS_FRESHNESS: return "PA_AS_FRESHNESS";
case KRB5_PADATA_SPAKE: return "PA-SPAKE";
case KRB5_PADATA_REDHAT_IDP_OAUTH2: return "PA-REDHAT-IDP-OAUTH2";
+ case KRB5_PADATA_REDHAT_PASSKEY: return "PA-REDHAT-PASSKEY";
default: return NULL;
}
}
creds->client, creds->server);
}
}
- return buf.data;
+ return k5_buf_cstring(&buf);
}
/* Allows trace_format formatters to be represented in terms of other
##DOS##OBJFILE=..\$(OUTPRE)$(PREFIXDIR).lst
XXDIR = $(srcdir)/ucdata/
-XXHEADERS = ucdata.h ure.h uctable.h
-XXSRCS = ucdata.c ucgendat.c ure.c urestubs.c
+XXHEADERS = ucdata.h uctable.h
+XXSRCS = ucdata.c ucgendat.c
STLIBOBJS= \
ucdata.o \
- ure.o \
- urestubs.o \
ucstr.o
OBJS= \
$(OUTPRE)ucdata.$(OBJEXT) \
- $(OUTPRE)ure.$(OBJEXT) \
- $(OUTPRE)urestubs.$(OBJEXT) \
$(OUTPRE)ucstr.$(OBJEXT)
SRCS= \
##DOS## $(CP) $(srcdir)\ucdata\ucdata.c ucdata.c
##DOS## $(CP) $(srcdir)\ucdata\ucgendat.c ucgendat.c
##DOS## $(CP) $(srcdir)\ucdata\uctable.h uctable.h
-##DOS## $(CP) $(srcdir)\ure\ure.h ure.h
-##DOS## $(CP) $(srcdir)\ure\ure.c ure.c
-##DOS## $(CP) $(srcdir)\ure\urestubs.c urestubs.c
##DOS## $(CP) nul .links
$(XXSRCS) $(XXHEADERS) : .links
$(BUILDTOP)/include/krb5/krb5.h $(BUILDTOP)/include/osconf.h \
$(BUILDTOP)/include/profile.h $(COM_ERR_DEPS) $(srcdir)/ucdata/ucdata.h \
$(top_srcdir)/include/k5-buf.h $(top_srcdir)/include/k5-err.h \
- $(top_srcdir)/include/k5-gmt_mktime.h $(top_srcdir)/include/k5-int-pkinit.h \
- $(top_srcdir)/include/k5-int.h $(top_srcdir)/include/k5-platform.h \
- $(top_srcdir)/include/k5-plugin.h $(top_srcdir)/include/k5-thread.h \
- $(top_srcdir)/include/k5-trace.h $(top_srcdir)/include/k5-unicode.h \
- $(top_srcdir)/include/k5-utf8.h $(top_srcdir)/include/krb5.h \
- $(top_srcdir)/include/krb5/authdata_plugin.h $(top_srcdir)/include/krb5/plugin.h \
- $(top_srcdir)/include/port-sockets.h $(top_srcdir)/include/socket-utils.h \
- ucstr.c
+ $(top_srcdir)/include/k5-gmt_mktime.h $(top_srcdir)/include/k5-input.h \
+ $(top_srcdir)/include/k5-int-pkinit.h $(top_srcdir)/include/k5-int.h \
+ $(top_srcdir)/include/k5-platform.h $(top_srcdir)/include/k5-plugin.h \
+ $(top_srcdir)/include/k5-thread.h $(top_srcdir)/include/k5-trace.h \
+ $(top_srcdir)/include/k5-unicode.h $(top_srcdir)/include/k5-utf8.h \
+ $(top_srcdir)/include/krb5.h $(top_srcdir)/include/krb5/authdata_plugin.h \
+ $(top_srcdir)/include/krb5/plugin.h $(top_srcdir)/include/port-sockets.h \
+ $(top_srcdir)/include/socket-utils.h ucstr.c
+++ /dev/null
-#
-# $Id: bidiapi.txt,v 1.2 1999/11/19 15:24:29 mleisher Exp $
-#
-
- "Pretty Good Bidi Algorithm" API
-
-The PGBA (Pretty Good Bidi Algorithm) is an effective alternative to the
-Unicode BiDi algorithm. It currently provides only implicit reordering and
-does not yet support explicit reordering codes that the Unicode BiDi algorithm
-supports. In addition to reordering, the PGBA includes cursor movement
-support for both visual and logical navigation.
-
------------------------------------------------------------------------------
-
-#define UCPGBA_LTR 0
-#define UCPGBA_RTL 1
-
- These macros appear in the `direction' field of the data structures.
-
-#define UCPGBA_CURSOR_VISUAL 0
-#define UCPGBA_CURSOR_LOGICAL 1
-
- These macros are used to set the cursor movement for each reordered string.
-
------------------------------------------------------------------------------
-
-ucstring_t *ucstring_create(unsigned long *source, unsigned long start,
- unsigned long end, int default_direction,
- int cursor_motion)
-
- This function will create a reordered string by using the implicit
- directionality of the characters in the specified substring.
-
- The `default_direction' parameter should be one of UCPGBA_LTR or UCPGBA_RTL
- and is used only in cases where a string contains no characters with strong
- directionality.
-
- The `cursor_motion' parameter should be one of UCPGBA_CURSOR_VISUAL or
- UCPGBA_CURSOR_LOGICAL, and is used to specify the initial cursor motion
- behavior. This behavior can be switched at any time using
- ustring_set_cursor_motion().
-
------------------------------------------------------------------------------
-
-void ucstring_free(ucstring_t *string)
-
- This function will deallocate the memory used by the string, incuding the
- string itself.
-
------------------------------------------------------------------------------
-
-void ucstring_cursor_info(ustring_t *string, int *direction,
- unsigned long *position)
-
- This function will return the text position of the internal cursor and the
- directionality of the text at that position. The position returned is the
- original text position of the character.
-
------------------------------------------------------------------------------
-
-int ucstring_set_cursor_motion(ucstring_t *string, int cursor_motion)
-
- This function will change the cursor motion type and return the previous
- cursor motion type.
-
------------------------------------------------------------------------------
-
-int ucstring_cursor_right(ucstring_t *string, int count)
-
- This function will move the internal cursor to the right according to the
- type of cursor motion set for the string.
-
- If no cursor motion is performed, it returns 0. Otherwise it will return a
- 1.
-
------------------------------------------------------------------------------
-
-int ucstring_cursor_left(ucstring_t *string, int count)
-
- This function will move the internal cursor to the left according to the
- type of cursor motion set for the string.
-
- If no cursor motion is performed, it returns 0. Otherwise it will return a
- 1.
for (l = i; l > 0; l--)
if (class >= uccombining_class((*out)[l-1]))
break;
- memcpy(*out + l + 1, *out + l, (i - l) * sizeof(**out));
+ memmove(*out + l + 1, *out + l, (i - l) * sizeof(**out));
(*out)[l] = decomp[k];
}
i++;
for (l = i; l > 0; l--)
if (class >= uccombining_class((*out)[l-1]))
break;
- memcpy(*out + l + 1, *out + l, (i - l) * sizeof(**out));
+ memmove(*out + l + 1, *out + l, (i - l) * sizeof(**out));
(*out)[l] = in[j];
}
i++;
* Shift the decomps up by one if the codes don't match.
*/
for (j = *pdecomps_used; j > i; j--)
- (void) memcpy((char *) &(*pdecomps)[j], (char *) &(*pdecomps)[j - 1],
- sizeof(_decomp_t));
+ (void) memmove((char *) &(*pdecomps)[j], (char *) &(*pdecomps)[j - 1],
+ sizeof(_decomp_t));
}
/*
(*pdecomps)[i].code = code;
(*pdecomps)[i].used = dectmp_size;
- (void) memcpy((char *) (*pdecomps)[i].decomp, (char *) dectmp,
- sizeof(krb5_ui_4) * dectmp_size);
+ (void) memmove((char *) (*pdecomps)[i].decomp, (char *) dectmp,
+ sizeof(krb5_ui_4) * dectmp_size);
/*
* NOTICE: This needs changing later so it is more general than simply
* Shift the array up by one.
*/
for (j = title_used; j > i; j--)
- (void) memcpy((char *) &title[j], (char *) &title[j - 1],
- sizeof(_case_t));
+ (void) memmove((char *) &title[j], (char *) &title[j - 1],
+ sizeof(_case_t));
}
title[i].key = cases[2]; /* Title */
* Shift the array up by one.
*/
for (j = upper_used; j > i; j--)
- (void) memcpy((char *) &upper[j], (char *) &upper[j - 1],
- sizeof(_case_t));
+ (void) memmove((char *) &upper[j], (char *) &upper[j - 1],
+ sizeof(_case_t));
}
upper[i].key = cases[0]; /* Upper */
* Shift the array up by one.
*/
for (j = lower_used; j > i; j--)
- (void) memcpy((char *) &lower[j], (char *) &lower[j - 1],
- sizeof(_case_t));
+ (void) memmove((char *) &lower[j], (char *) &lower[j - 1],
+ sizeof(_case_t));
}
lower[i].key = cases[1]; /* Lower */
+++ /dev/null
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 2001 Computing Research Labs, New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/ucdata/ucpgba.c,v 1.9 2008/01/07 23:20:05 kurt Exp $
- * $Id: ucpgba.c,v 1.5 2001/01/02 18:46:20 mleisher Exp $
- */
-
-#include "k5-int.h"
-#include "k5-utf8.h"
-#include "k5-unicode.h"
-
-#include <stdio.h>
-#include <stdlib.h>
-
-#include "ucdata.h"
-#include "ucpgba.h"
-
-/*
- * These macros are used while reordering of RTL runs of text for the
- * special case of non-spacing characters being in runs of weakly
- * directional text. They check for weak and non-spacing, and digits and
- * non-spacing.
- */
-#define ISWEAKSPECIAL(cc) ucisprop(cc, UC_EN|UC_ES|UC_MN, UC_ET|UC_AN|UC_CS)
-#define ISDIGITSPECIAL(cc) ucisprop(cc, UC_ND|UC_MN, 0)
-
-/*
- * These macros are used while breaking a string into runs of text in
- * different directions. Descriptions:
- *
- * ISLTR_LTR - Test for members of an LTR run in an LTR context. This looks
- * for characters with ltr, non-spacing, weak, and neutral
- * properties.
- *
- * ISRTL_RTL - Test for members of an RTL run in an RTL context. This looks
- * for characters with rtl, non-spacing, weak, and neutral
- * properties.
- *
- * ISRTL_NEUTRAL - Test for RTL or neutral characters.
- *
- * ISWEAK_NEUTRAL - Test for weak or neutral characters.
- */
-#define ISLTR_LTR(cc) ucisprop(cc, UC_L|UC_MN|UC_EN|UC_ES,\
- UC_ET|UC_CS|UC_B|UC_S|UC_WS|UC_ON)
-
-#define ISRTL_RTL(cc) ucisprop(cc, UC_R|UC_MN|UC_EN|UC_ES,\
- UC_ET|UC_AN|UC_CS|UC_B|UC_S|UC_WS|UC_ON)
-
-#define ISRTL_NEUTRAL(cc) ucisprop(cc, UC_R, UC_B|UC_S|UC_WS|UC_ON)
-#define ISWEAK_NEUTRAL(cc) ucisprop(cc, UC_EN|UC_ES, \
- UC_B|UC_S|UC_WS|UC_ON|UC_ET|UC_AN|UC_CS)
-
-/*
- * This table is temporarily hard-coded here until it can be constructed
- * automatically somehow.
- */
-static unsigned long _symmetric_pairs[] = {
- 0x0028, 0x0029, 0x0029, 0x0028, 0x003C, 0x003E, 0x003E, 0x003C,
- 0x005B, 0x005D, 0x005D, 0x005B, 0x007B, 0x007D, 0x007D, 0x007B,
- 0x2045, 0x2046, 0x2046, 0x2045, 0x207D, 0x207E, 0x207E, 0x207D,
- 0x208D, 0x208E, 0x208E, 0x208D, 0x3008, 0x3009, 0x3009, 0x3008,
- 0x300A, 0x300B, 0x300B, 0x300A, 0x300C, 0x300D, 0x300D, 0x300C,
- 0x300E, 0x300F, 0x300F, 0x300E, 0x3010, 0x3011, 0x3011, 0x3010,
- 0x3014, 0x3015, 0x3015, 0x3014, 0x3016, 0x3017, 0x3017, 0x3016,
- 0x3018, 0x3019, 0x3019, 0x3018, 0x301A, 0x301B, 0x301B, 0x301A,
- 0xFD3E, 0xFD3F, 0xFD3F, 0xFD3E, 0xFE59, 0xFE5A, 0xFE5A, 0xFE59,
- 0xFE5B, 0xFE5C, 0xFE5C, 0xFE5B, 0xFE5D, 0xFE5E, 0xFE5E, 0xFE5D,
- 0xFF08, 0xFF09, 0xFF09, 0xFF08, 0xFF3B, 0xFF3D, 0xFF3D, 0xFF3B,
- 0xFF5B, 0xFF5D, 0xFF5D, 0xFF5B, 0xFF62, 0xFF63, 0xFF63, 0xFF62,
-};
-
-static int _symmetric_pairs_size =
-sizeof(_symmetric_pairs)/sizeof(_symmetric_pairs[0]);
-
-/*
- * This routine looks up the other form of a symmetric pair.
- */
-static unsigned long
-_ucsymmetric_pair(unsigned long c)
-{
- int i;
-
- for (i = 0; i < _symmetric_pairs_size; i += 2) {
- if (_symmetric_pairs[i] == c)
- return _symmetric_pairs[i+1];
- }
- return c;
-}
-
-/*
- * This routine creates a new run, copies the text into it, links it into the
- * logical text order chain and returns it to the caller to be linked into
- * the visual text order chain.
- */
-static ucrun_t *
-_add_run(ucstring_t *str, unsigned long *src,
- unsigned long start, unsigned long end, int direction)
-{
- long i, t;
- ucrun_t *run;
-
- run = (ucrun_t *) malloc(sizeof(ucrun_t));
- run->visual_next = run->visual_prev = 0;
- run->direction = direction;
-
- run->cursor = ~0;
-
- run->chars = (unsigned long *)
- malloc(sizeof(unsigned long) * ((end - start) << 1));
- run->positions = run->chars + (end - start);
-
- run->source = src;
- run->start = start;
- run->end = end;
-
- if (direction == UCPGBA_RTL) {
- /*
- * Copy the source text into the run in reverse order and select
- * replacements for the pairwise punctuation and the <> characters.
- */
- for (i = 0, t = end - 1; start < end; start++, t--, i++) {
- run->positions[i] = t;
- if (ucissymmetric(src[t]) || src[t] == '<' || src[t] == '>')
- run->chars[i] = _ucsymmetric_pair(src[t]);
- else
- run->chars[i] = src[t];
- }
- } else {
- /*
- * Copy the source text into the run directly.
- */
- for (i = start; i < end; i++) {
- run->positions[i - start] = i;
- run->chars[i - start] = src[i];
- }
- }
-
- /*
- * Add the run to the logical list for cursor traversal.
- */
- if (str->logical_first == 0)
- str->logical_first = str->logical_last = run;
- else {
- run->logical_prev = str->logical_last;
- str->logical_last->logical_next = run;
- str->logical_last = run;
- }
-
- return run;
-}
-
-static void
-_ucadd_rtl_segment(ucstring_t *str, unsigned long *source, unsigned long start,
- unsigned long end)
-{
- unsigned long s, e;
- ucrun_t *run, *lrun;
-
- /*
- * This is used to splice runs into strings with overall LTR direction.
- * The `lrun' variable will never be NULL because at least one LTR run was
- * added before this RTL run.
- */
- lrun = str->visual_last;
-
- for (e = s = start; s < end;) {
- for (; e < end && ISRTL_NEUTRAL(source[e]); e++) ;
-
- if (e > s) {
- run = _add_run(str, source, s, e, UCPGBA_RTL);
-
- /*
- * Add the run to the visual list for cursor traversal.
- */
- if (str->visual_first != 0) {
- if (str->direction == UCPGBA_LTR) {
- run->visual_prev = lrun;
- run->visual_next = lrun->visual_next;
- if (lrun->visual_next != 0)
- lrun->visual_next->visual_prev = run;
- lrun->visual_next = run;
- if (lrun == str->visual_last)
- str->visual_last = run;
- } else {
- run->visual_next = str->visual_first;
- str->visual_first->visual_prev = run;
- str->visual_first = run;
- }
- } else
- str->visual_first = str->visual_last = run;
- }
-
- /*
- * Handle digits in a special way. This makes sure the weakly
- * directional characters appear on the expected sides of a number
- * depending on whether that number is Arabic or not.
- */
- for (s = e; e < end && ISWEAKSPECIAL(source[e]); e++) {
- if (!ISDIGITSPECIAL(source[e]) &&
- (e + 1 == end || !ISDIGITSPECIAL(source[e + 1])))
- break;
- }
-
- if (e > s) {
- run = _add_run(str, source, s, e, UCPGBA_LTR);
-
- /*
- * Add the run to the visual list for cursor traversal.
- */
- if (str->visual_first != 0) {
- if (str->direction == UCPGBA_LTR) {
- run->visual_prev = lrun;
- run->visual_next = lrun->visual_next;
- if (lrun->visual_next != 0)
- lrun->visual_next->visual_prev = run;
- lrun->visual_next = run;
- if (lrun == str->visual_last)
- str->visual_last = run;
- } else {
- run->visual_next = str->visual_first;
- str->visual_first->visual_prev = run;
- str->visual_first = run;
- }
- } else
- str->visual_first = str->visual_last = run;
- }
-
- /*
- * Collect all weak non-digit sequences for an RTL segment. These
- * will appear as part of the next RTL segment or will be added as
- * an RTL segment by themselves.
- */
- for (s = e; e < end && ucisweak(source[e]) && !ucisdigit(source[e]);
- e++) ;
- }
-
- /*
- * Capture any weak non-digit sequences that occur at the end of the RTL
- * run.
- */
- if (e > s) {
- run = _add_run(str, source, s, e, UCPGBA_RTL);
-
- /*
- * Add the run to the visual list for cursor traversal.
- */
- if (str->visual_first != 0) {
- if (str->direction == UCPGBA_LTR) {
- run->visual_prev = lrun;
- run->visual_next = lrun->visual_next;
- if (lrun->visual_next != 0)
- lrun->visual_next->visual_prev = run;
- lrun->visual_next = run;
- if (lrun == str->visual_last)
- str->visual_last = run;
- } else {
- run->visual_next = str->visual_first;
- str->visual_first->visual_prev = run;
- str->visual_first = run;
- }
- } else
- str->visual_first = str->visual_last = run;
- }
-}
-
-static void
-_ucadd_ltr_segment(ucstring_t *str, unsigned long *source, unsigned long start,
- unsigned long end)
-{
- ucrun_t *run;
-
- run = _add_run(str, source, start, end, UCPGBA_LTR);
-
- /*
- * Add the run to the visual list for cursor traversal.
- */
- if (str->visual_first != 0) {
- if (str->direction == UCPGBA_LTR) {
- run->visual_prev = str->visual_last;
- str->visual_last->visual_next = run;
- str->visual_last = run;
- } else {
- run->visual_next = str->visual_first;
- str->visual_first->visual_prev = run;
- str->visual_first = run;
- }
- } else
- str->visual_first = str->visual_last = run;
-}
-
-ucstring_t *
-ucstring_create(unsigned long *source, unsigned long start, unsigned long end,
- int default_direction, int cursor_motion)
-{
- int rtl_first;
- unsigned long s, e, ld;
- ucstring_t *str;
-
- str = (ucstring_t *) malloc(sizeof(ucstring_t));
-
- /*
- * Set the initial values.
- */
- str->cursor_motion = cursor_motion;
- str->logical_first = str->logical_last = 0;
- str->visual_first = str->visual_last = str->cursor = 0;
- str->source = source;
- str->start = start;
- str->end = end;
-
- /*
- * If the length of the string is 0, then just return it at this point.
- */
- if (start == end)
- return str;
-
- /*
- * This flag indicates whether the collection loop for RTL is called
- * before the LTR loop the first time.
- */
- rtl_first = 0;
-
- /*
- * Look for the first character in the string that has strong
- * directionality.
- */
- for (s = start; s < end && !ucisstrong(source[s]); s++) ;
-
- if (s == end)
- /*
- * If the string contains no characters with strong directionality, use
- * the default direction.
- */
- str->direction = default_direction;
- else
- str->direction = ucisrtl(source[s]) ? UCPGBA_RTL : UCPGBA_LTR;
-
- if (str->direction == UCPGBA_RTL)
- /*
- * Set the flag that causes the RTL collection loop to run first.
- */
- rtl_first = 1;
-
- /*
- * This loop now separates the string into runs based on directionality.
- */
- for (s = e = 0; s < end; s = e) {
- if (!rtl_first) {
- /*
- * Determine the next run of LTR text.
- */
-
- ld = s;
- while (e < end && ISLTR_LTR(source[e])) {
- if (ucisdigit(source[e]) &&
- !(0x660 <= source[e] && source[e] <= 0x669))
- ld = e;
- e++;
- }
- if (str->direction != UCPGBA_LTR) {
- while (e > ld && ISWEAK_NEUTRAL(source[e - 1]))
- e--;
- }
-
- /*
- * Add the LTR segment to the string.
- */
- if (e > s)
- _ucadd_ltr_segment(str, source, s, e);
- }
-
- /*
- * Determine the next run of RTL text.
- */
- ld = s = e;
- while (e < end && ISRTL_RTL(source[e])) {
- if (ucisdigit(source[e]) &&
- !(0x660 <= source[e] && source[e] <= 0x669))
- ld = e;
- e++;
- }
- if (str->direction != UCPGBA_RTL) {
- while (e > ld && ISWEAK_NEUTRAL(source[e - 1]))
- e--;
- }
-
- /*
- * Add the RTL segment to the string.
- */
- if (e > s)
- _ucadd_rtl_segment(str, source, s, e);
-
- /*
- * Clear the flag that allowed the RTL collection loop to run first
- * for strings with overall RTL directionality.
- */
- rtl_first = 0;
- }
-
- /*
- * Set up the initial cursor run.
- */
- str->cursor = str->logical_first;
- if (str != 0)
- str->cursor->cursor = (str->cursor->direction == UCPGBA_RTL) ?
- str->cursor->end - str->cursor->start : 0;
-
- return str;
-}
-
-void
-ucstring_free(ucstring_t *s)
-{
- ucrun_t *l, *r;
-
- if (s == 0)
- return;
-
- for (l = 0, r = s->visual_first; r != 0; r = r->visual_next) {
- if (r->end > r->start)
- free((char *) r->chars);
- if (l)
- free((char *) l);
- l = r;
- }
- if (l)
- free((char *) l);
-
- free((char *) s);
-}
-
-int
-ucstring_set_cursor_motion(ucstring_t *str, int cursor_motion)
-{
- int n;
-
- if (str == 0)
- return -1;
-
- n = str->cursor_motion;
- str->cursor_motion = cursor_motion;
- return n;
-}
-
-static int
-_ucstring_visual_cursor_right(ucstring_t *str, int count)
-{
- int cnt = count;
- unsigned long size;
- ucrun_t *cursor;
-
- if (str == 0)
- return 0;
-
- cursor = str->cursor;
- while (cnt > 0) {
- size = cursor->end - cursor->start;
- if ((cursor->direction == UCPGBA_RTL && cursor->cursor + 1 == size) ||
- cursor->cursor + 1 > size) {
- /*
- * If the next run is NULL, then the cursor is already on the
- * far right end already.
- */
- if (cursor->visual_next == 0)
- /*
- * If movement occured, then report it.
- */
- return (cnt != count);
-
- /*
- * Move to the next run.
- */
- str->cursor = cursor = cursor->visual_next;
- cursor->cursor = (cursor->direction == UCPGBA_RTL) ? -1 : 0;
- size = cursor->end - cursor->start;
- } else
- cursor->cursor++;
- cnt--;
- }
- return 1;
-}
-
-static int
-_ucstring_logical_cursor_right(ucstring_t *str, int count)
-{
- int cnt = count;
- unsigned long size;
- ucrun_t *cursor;
-
- if (str == 0)
- return 0;
-
- cursor = str->cursor;
- while (cnt > 0) {
- size = cursor->end - cursor->start;
- if (str->direction == UCPGBA_RTL) {
- if (cursor->direction == UCPGBA_RTL) {
- if (cursor->cursor + 1 == size) {
- if (cursor == str->logical_first)
- /*
- * Already at the beginning of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_prev;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- size : 0;
- } else
- cursor->cursor++;
- } else {
- if (cursor->cursor == 0) {
- if (cursor == str->logical_first)
- /*
- * At the beginning of the string already.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_prev;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- size : 0;
- } else
- cursor->cursor--;
- }
- } else {
- if (cursor->direction == UCPGBA_RTL) {
- if (cursor->cursor == 0) {
- if (cursor == str->logical_last)
- /*
- * Already at the end of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_next;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- 0 : size - 1;
- } else
- cursor->cursor--;
- } else {
- if (cursor->cursor + 1 > size) {
- if (cursor == str->logical_last)
- /*
- * Already at the end of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_next;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- 0 : size - 1;
- } else
- cursor->cursor++;
- }
- }
- cnt--;
- }
- return 1;
-}
-
-int
-ucstring_cursor_right(ucstring_t *str, int count)
-{
- if (str == 0)
- return 0;
- return (str->cursor_motion == UCPGBA_CURSOR_VISUAL) ?
- _ucstring_visual_cursor_right(str, count) :
- _ucstring_logical_cursor_right(str, count);
-}
-
-static int
-_ucstring_visual_cursor_left(ucstring_t *str, int count)
-{
- int cnt = count;
- unsigned long size;
- ucrun_t *cursor;
-
- if (str == 0)
- return 0;
-
- cursor = str->cursor;
- while (cnt > 0) {
- size = cursor->end - cursor->start;
- if ((cursor->direction == UCPGBA_LTR && cursor->cursor == 0) ||
- cursor->cursor - 1 < -1) {
- /*
- * If the preceding run is NULL, then the cursor is already on the
- * far left end already.
- */
- if (cursor->visual_prev == 0)
- /*
- * If movement occured, then report it.
- */
- return (cnt != count);
-
- /*
- * Move to the previous run.
- */
- str->cursor = cursor = cursor->visual_prev;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_RTL) ?
- size : size - 1;
- } else
- cursor->cursor--;
- cnt--;
- }
- return 1;
-}
-
-static int
-_ucstring_logical_cursor_left(ucstring_t *str, int count)
-{
- int cnt = count;
- unsigned long size;
- ucrun_t *cursor;
-
- if (str == 0)
- return 0;
-
- cursor = str->cursor;
- while (cnt > 0) {
- size = cursor->end - cursor->start;
- if (str->direction == UCPGBA_RTL) {
- if (cursor->direction == UCPGBA_RTL) {
- if (cursor->cursor == -1) {
- if (cursor == str->logical_last)
- /*
- * Already at the end of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_next;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- 0 : size - 1;
- } else
- cursor->cursor--;
- } else {
- if (cursor->cursor + 1 > size) {
- if (cursor == str->logical_last)
- /*
- * At the end of the string already.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_next;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- 0 : size - 1;
- } else
- cursor->cursor++;
- }
- } else {
- if (cursor->direction == UCPGBA_RTL) {
- if (cursor->cursor + 1 == size) {
- if (cursor == str->logical_first)
- /*
- * Already at the beginning of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_prev;
- size = cursor->end - cursor->start;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- size : 0;
- } else
- cursor->cursor++;
- } else {
- if (cursor->cursor == 0) {
- if (cursor == str->logical_first)
- /*
- * Already at the beginning of the string.
- */
- return (cnt != count);
-
- str->cursor = cursor = cursor->logical_prev;
- cursor->cursor = (cursor->direction == UCPGBA_LTR) ?
- size : 0;
- } else
- cursor->cursor--;
- }
- }
- cnt--;
- }
- return 1;
-}
-
-int
-ucstring_cursor_left(ucstring_t *str, int count)
-{
- if (str == 0)
- return 0;
- return (str->cursor_motion == UCPGBA_CURSOR_VISUAL) ?
- _ucstring_visual_cursor_left(str, count) :
- _ucstring_logical_cursor_left(str, count);
-}
-
-void
-ucstring_cursor_info(ucstring_t *str, int *direction, unsigned long *position)
-{
- long c;
- unsigned long size;
- ucrun_t *cursor;
-
- if (str == 0 || direction == 0 || position == 0)
- return;
-
- cursor = str->cursor;
-
- *direction = cursor->direction;
-
- c = cursor->cursor;
- size = cursor->end - cursor->start;
-
- if (c == size)
- *position = (cursor->direction == UCPGBA_RTL) ?
- cursor->start : cursor->positions[c - 1];
- else if (c == -1)
- *position = (cursor->direction == UCPGBA_RTL) ?
- cursor->end : cursor->start;
- else
- *position = cursor->positions[c];
-}
+++ /dev/null
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1999 Computing Research Labs, New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/ucdata/ucpgba.h,v 1.10 2008/01/07 23:20:05 kurt Exp $
- * $Id: ucpgba.h,v 1.4 1999/11/19 15:24:30 mleisher Exp $
- */
-
-#ifndef _h_ucpgba
-#define _h_ucpgba
-
-#include "k5-int.h"
-
-/***************************************************************************
- *
- * Macros and types.
- *
- ***************************************************************************/
-
-/*
- * These are the direction values that can appear in render runs and render
- * strings.
- */
-#define UCPGBA_LTR 0
-#define UCPGBA_RTL 1
-
-/*
- * These are the flags for cursor motion.
- */
-#define UCPGBA_CURSOR_VISUAL 0
-#define UCPGBA_CURSOR_LOGICAL 1
-
-/*
- * This structure is used to contain runs of text in a particular direction.
- */
-typedef struct _ucrun_t {
- struct _ucrun_t *visual_prev; /* Pointer to the previous visual run. */
- struct _ucrun_t *visual_next; /* Pointer to the next visual run. */
-
- struct _ucrun_t *logical_prev; /* Pointer to the previous logical run. */
- struct _ucrun_t *logical_next; /* Pointer to the next logical run. */
-
- int direction; /* Direction of the run. */
-
- long cursor; /* Position of "cursor" in the string. */
-
- unsigned long *chars; /* List of characters for the run. */
- unsigned long *positions; /* List of original positions in source. */
-
- unsigned long *source; /* The source string. */
- unsigned long start; /* Beginning offset in the source string. */
- unsigned long end; /* Ending offset in the source string. */
-} ucrun_t;
-
-/*
- * This represents a string of runs rendered up to a point that is not
- * platform specific.
- */
-typedef struct _ucstring_t {
- int direction; /* Overall direction of the string. */
-
- int cursor_motion; /* Logical or visual cursor motion flag. */
-
- ucrun_t *cursor; /* The run containing the "cursor." */
-
- ucrun_t *logical_first; /* First run in the logical order. */
- ucrun_t *logical_last; /* Last run in the logical order. */
-
- ucrun_t *visual_first; /* First run in the visual order. */
- ucrun_t *visual_last; /* Last run in the visual order. */
-
- unsigned long *source; /* The source string. */
- unsigned long start; /* The beginning offset in the source. */
- unsigned long end; /* The ending offset in the source. */
-} ucstring_t;
-
-/***************************************************************************
- *
- * API
- *
- ***************************************************************************/
-
-/*
- * This creates and reorders the specified substring using the
- * "Pretty Good Bidi Algorithm." A default direction is provided for cases
- * of a string containing no strong direction characters and the default
- * cursor motion should be provided.
- */
-ucstring_t *
-ucstring_create (unsigned long *source,
- unsigned long start,
- unsigned long end,
- int default_direction,
- int cursor_motion);
-/*
- * This releases the string.
- */
-void ucstring_free (ucstring_t *string);
-
-/*
- * This changes the cursor motion flag for the string.
- */
-int
-ucstring_set_cursor_motion (ucstring_t *string,
- int cursor_motion);
-
-/*
- * This function will move the cursor to the right depending on the
- * type of cursor motion that was specified for the string.
- *
- * A 0 is returned if no cursor motion is performed, otherwise a
- * 1 is returned.
- */
-int
-ucstring_cursor_right (ucstring_t *string, int count);
-
-/*
- * This function will move the cursor to the left depending on the
- * type of cursor motion that was specified for the string.
- *
- * A 0 is returned if no cursor motion is performed, otherwise a
- * 1 is returned.
- */
-int
-ucstring_cursor_left (ucstring_t *string, int count);
-
-/*
- * This routine retrieves the direction of the run containing the cursor
- * and the actual position in the original text string.
- */
-void
-ucstring_cursor_info (ucstring_t *string, int *direction,
- unsigned long *position);
-
-#endif /* _h_ucpgba */
+++ /dev/null
-.\"
-.\" $Id: ucpgba.man,v 1.1 1999/11/19 16:08:34 mleisher Exp $
-.\"
-.TH ucpgba 3 "19 November 1999"
-.SH NAME
-ucpgba \- functions for doing bidirectional reordering of Unicode text and
-logical and visual cursor motion
-
-.SH SYNOPSIS
-.nf
-#include <ucdata.h>
-#include <ucpgba.h>
-
-ucstring_t *ucstring_create(unsigned long *source, unsigned long start,
- unsigned long end, int default_direction,
- int cursor_motion)
-.sp
-void ucstring_free(ucstring_t *string)
-.sp
-int ucstring_set_cursor_motion(ucstring_t *string, int cursor_motion)
-.sp
-int ucstring_cursor_right(ucstring_t *string, int count)
-.sp
-int ucstring_cursor_left(ucstring_t *string, int count)
-.sp
-void ucstring_cursor_info(ucstring_t *string, int *direction,
- unsigned long *position)
-
-.SH DESCRIPTION
-.TP 4
-.BR Macros
-UCPGBA_LTR
-.br
-UCPGBA_RTL
-.br
-UCPGBA_CURSOR_VISUAL
-.br
-UCPGBA_CURSOR_LOGICAL
-
-.TP 4
-.BR ucstring_create()
-This function will create a reordered string by using the implicit
-directionality of the characters in the specified substring.
-.sp
-The `default_direction' parameter should be one of UCPGBA_LTR or UCPGBA_RTL
-and is used only in cases where a string contains no characters with strong
-directionality.
-.sp
-The `cursor_motion' parameter should be one of UCPGBA_CURSOR_VISUAL or
-UCPGBA_CURSOR_LOGICAL, and is used to specify the initial cursor motion
-behavior. This behavior can be switched at any time using
-ustring_set_cursor_motion().
-
-.TP 4
-.BR ucstring_free()
-This function will deallocate the memory used by the string, incuding the
-string itself.
-
-.TP 4
-.BR ucstring_cursor_info()
-This function will return the text position of the internal cursor and the
-directionality of the text at that position. The position returned is the
-original text position of the character.
-
-.TP 4
-.BR ucstring_set_cursor_motion()
-This function will change the cursor motion type and return the previous
-cursor motion type.
-
-.TP 4
-.BR ucstring_cursor_right()
-This function will move the internal cursor to the right according to the
-type of cursor motion set for the string.
-.sp
-If no cursor motion is performed, it returns 0. Otherwise it will return a 1.
-
-.TP 4
-.BR ucstring_cursor_left()
-This function will move the internal cursor to the left according to the
-type of cursor motion set for the string.
-.sp
-If no cursor motion is performed, it returns 0. Otherwise it will return a 1.
-
-.SH "SEE ALSO"
-ucdata(3)
-
-.SH ACKNOWLEDGMENTS
-These are people who have helped with patches or alerted me about problems.
-
-.SH AUTHOR
-Mark Leisher
-.br
-Computing Research Lab
-.br
-New Mexico State University
-.br
-Email: mleisher@crl.nmsu.edu
#include "k5-int.h"
#include "k5-utf8.h"
#include "k5-unicode.h"
+#include "k5-input.h"
#include "ucdata/ucdata.h"
#include <ctype.h>
-int
+static int
krb5int_ucstrncmp(
const krb5_unicode * u1,
const krb5_unicode * u2,
return 0;
}
-int
+static int
krb5int_ucstrncasecmp(
const krb5_unicode * u1,
const krb5_unicode * u2,
return 0;
}
-krb5_unicode *
-krb5int_ucstrnchr(
- const krb5_unicode * u,
- size_t n,
- krb5_unicode c)
-{
- for (; 0 < n; ++u, --n) {
- if (*u == c) {
- return (krb5_unicode *) u;
- }
- }
-
- return NULL;
-}
-
-krb5_unicode *
-krb5int_ucstrncasechr(
- const krb5_unicode * u,
- size_t n,
- krb5_unicode c)
-{
- c = uctolower(c);
- for (; 0 < n; ++u, --n) {
- if ((krb5_unicode) uctolower(*u) == c) {
- return (krb5_unicode *) u;
- }
- }
-
- return NULL;
-}
-
-void
-krb5int_ucstr2upper(
- krb5_unicode * u,
- size_t n)
+/* Return true if data contains valid UTF-8 sequences. */
+krb5_boolean
+k5_utf8_validate(const krb5_data *data)
{
- for (; 0 < n; ++u, --n) {
- *u = uctoupper(*u);
- }
+ struct k5input in;
+ int len, tmplen, i;
+ const uint8_t *bytes;
+
+ k5_input_init(&in, data->data, data->length);
+ while (!in.status && in.len > 0) {
+ len = KRB5_UTF8_CHARLEN(in.ptr);
+ if (len < 1 || len > 4)
+ return FALSE;
+ bytes = k5_input_get_bytes(&in, len);
+ if (bytes == NULL)
+ return FALSE;
+ if (KRB5_UTF8_CHARLEN2(bytes, tmplen) != len)
+ return FALSE;
+ for (i = 1; i < len; i++) {
+ if ((bytes[i] & 0xc0) != 0x80)
+ return FALSE;
+ }
+ }
+ return !in.status;
}
-#define TOUPPER(c) (islower(c) ? toupper(c) : (c))
#define TOLOWER(c) (isupper(c) ? tolower(c) : (c))
-krb5_error_code
-krb5int_utf8_normalize(
- const krb5_data * data,
- krb5_data ** newdataptr,
- unsigned flags)
-{
- int i, j, len, clen, outpos = 0, ucsoutlen, outsize;
- char *out = NULL, *outtmp, *s;
- krb5_ucs4 *ucs = NULL, *p, *ucsout = NULL;
- krb5_data *newdata;
- krb5_error_code retval = 0;
-
- static unsigned char mask[] = {
- 0, 0x7f, 0x1f, 0x0f, 0x07, 0x03, 0x01};
-
- unsigned casefold = flags & KRB5_UTF8_CASEFOLD;
- unsigned approx = flags & KRB5_UTF8_APPROX;
-
- *newdataptr = NULL;
-
- s = data->data;
- len = data->length;
-
- newdata = malloc(sizeof(*newdata));
- if (newdata == NULL)
- return ENOMEM;
-
- /*
- * Should first check to see if string is already in proper normalized
- * form. This is almost as time consuming as the normalization though.
- */
-
- /* finish off everything up to character before first non-ascii */
- if (KRB5_UTF8_ISASCII(s)) {
- if (casefold) {
- outsize = len + 7;
- out = malloc(outsize);
- if (out == NULL) {
- retval = ENOMEM;
- goto cleanup;
- }
-
- for (i = 1; (i < len) && KRB5_UTF8_ISASCII(s + i); i++) {
- out[outpos++] = TOLOWER(s[i - 1]);
- }
- if (i == len) {
- out[outpos++] = TOLOWER(s[len - 1]);
- goto cleanup;
- }
- } else {
- for (i = 1; (i < len) && KRB5_UTF8_ISASCII(s + i); i++) {
- /* empty */
- }
-
- if (i == len) {
- newdata->length = len;
- newdata->data = k5memdup0(s, len, &retval);
- if (newdata->data == NULL)
- goto cleanup;
- *newdataptr = newdata;
- return 0;
- }
- outsize = len + 7;
- out = malloc(outsize);
- if (out == NULL) {
- retval = ENOMEM;
- goto cleanup;
- }
- outpos = i - 1;
- memcpy(out, s, outpos);
- }
- } else {
- outsize = len + 7;
- out = malloc(outsize);
- if (out == NULL) {
- retval = ENOMEM;
- goto cleanup;
- }
- i = 0;
- }
-
- p = ucs = malloc(len * sizeof(*ucs));
- if (ucs == NULL) {
- retval = ENOMEM;
- goto cleanup;
- }
- /* convert character before first non-ascii to ucs-4 */
- if (i > 0) {
- *p = casefold ? TOLOWER(s[i - 1]) : s[i - 1];
- p++;
- }
- /* s[i] is now first non-ascii character */
- for (;;) {
- /* s[i] is non-ascii */
- /* convert everything up to next ascii to ucs-4 */
- while (i < len) {
- clen = KRB5_UTF8_CHARLEN2(s + i, clen);
- if (clen == 0) {
- retval = KRB5_ERR_INVALID_UTF8;
- goto cleanup;
- }
- if (clen == 1) {
- /* ascii */
- break;
- }
- *p = s[i] & mask[clen];
- i++;
- for (j = 1; j < clen; j++) {
- if ((s[i] & 0xc0) != 0x80) {
- retval = KRB5_ERR_INVALID_UTF8;
- goto cleanup;
- }
- *p <<= 6;
- *p |= s[i] & 0x3f;
- i++;
- }
- if (casefold) {
- *p = uctolower(*p);
- }
- p++;
- }
- /* normalize ucs of length p - ucs */
- uccompatdecomp(ucs, p - ucs, &ucsout, &ucsoutlen);
- if (approx) {
- for (j = 0; j < ucsoutlen; j++) {
- if (ucsout[j] < 0x80) {
- out[outpos++] = ucsout[j];
- }
- }
- } else {
- ucsoutlen = uccanoncomp(ucsout, ucsoutlen);
- /* convert ucs to utf-8 and store in out */
- for (j = 0; j < ucsoutlen; j++) {
- /*
- * allocate more space if not enough room for 6 bytes and
- * terminator
- */
- if (outsize - outpos < 7) {
- outsize = ucsoutlen - j + outpos + 6;
- outtmp = realloc(out, outsize);
- if (outtmp == NULL) {
- retval = ENOMEM;
- goto cleanup;
- }
- out = outtmp;
- }
- outpos += krb5int_ucs4_to_utf8(ucsout[j], &out[outpos]);
- }
- }
-
- free(ucsout);
- ucsout = NULL;
-
- if (i == len) {
- break;
- }
-
- /* Allocate more space in out if necessary */
- if (len - i >= outsize - outpos) {
- outsize += 1 + ((len - i) - (outsize - outpos));
- outtmp = realloc(out, outsize);
- if (outtmp == NULL) {
- retval = ENOMEM;
- goto cleanup;
- }
- out = outtmp;
- }
- /* s[i] is ascii */
- /* finish off everything up to char before next non-ascii */
- for (i++; (i < len) && KRB5_UTF8_ISASCII(s + i); i++) {
- out[outpos++] = casefold ? TOLOWER(s[i - 1]) : s[i - 1];
- }
- if (i == len) {
- out[outpos++] = casefold ? TOLOWER(s[len - 1]) : s[len - 1];
- break;
- }
- /* convert character before next non-ascii to ucs-4 */
- *ucs = casefold ? TOLOWER(s[i - 1]) : s[i - 1];
- p = ucs + 1;
- }
-
-cleanup:
- free(ucs);
- free(ucsout);
- if (retval) {
- free(out);
- free(newdata);
- return retval;
- }
- out[outpos] = '\0';
- newdata->data = out;
- newdata->length = outpos;
- *newdataptr = newdata;
- return 0;
-}
-
/* compare UTF8-strings, optionally ignore casing */
/* slow, should be optimized */
int
+++ /dev/null
-#
-# $Id: README,v 1.3 1999/09/21 15:47:43 mleisher Exp $
-#
-# Copyright 1997, 1998, 1999 Computing Research Labs,
-# New Mexico State University
-#
-# Permission is hereby granted, free of charge, to any person obtaining a
-# copy of this software and associated documentation files (the "Software"),
-# to deal in the Software without restriction, including without limitation
-# the rights to use, copy, modify, merge, publish, distribute, sublicense,
-# and/or sell copies of the Software, and to permit persons to whom the
-# Software is furnished to do so, subject to the following conditions:
-#
-# The above copyright notice and this permission notice shall be included in
-# all copies or substantial portions of the Software.
-#
-# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
-# THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
-# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
-# OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
-# THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-#
-
-
- Unicode and Regular Expressions
- Version 0.5
-
-This is a simple regular expression package for matching against Unicode text
-in UCS2 form. The implementation of this URE package is a variation on the
-RE->DFA algorithm done by Mark Hopkins (markh@csd4.csd.uwm.edu). Mark
-Hopkins' algorithm had the virtue of being very simple, so it was used as a
-model.
-
----------------------------------------------------------------------------
-
-Assumptions:
-
- o Regular expression and text already normalized.
-
- o Conversion to lower case assumes a 1-1 mapping.
-
-Definitions:
-
- Separator - any one of U+2028, U+2029, '\n', '\r'.
-
-Operators:
- . - match any character.
- * - match zero or more of the last subexpression.
- + - match one or more of the last subexpression.
- ? - match zero or one of the last subexpression.
- () - subexpression grouping.
-
- Notes:
-
- o The "." operator normally does not match separators, but a flag is
- available for the ure_exec() function that will allow this operator to
- match a separator.
-
-Literals and Constants:
-
- c - literal UCS2 character.
- \x.... - hexadecimal number of up to 4 digits.
- \X.... - hexadecimal number of up to 4 digits.
- \u.... - hexadecimal number of up to 4 digits.
- \U.... - hexadecimal number of up to 4 digits.
-
-Character classes:
-
- [...] - Character class.
- [^...] - Negated character class.
- \pN1,N2,...,Nn - Character properties class.
- \PN1,N2,...,Nn - Negated character properties class.
-
- POSIX character classes recognized:
-
- :alnum:
- :alpha:
- :cntrl:
- :digit:
- :graph:
- :lower:
- :print:
- :punct:
- :space:
- :upper:
- :xdigit:
-
- Notes:
-
- o Character property classes are \p or \P followed by a comma separated
- list of integers between 1 and 32. These integers are references to
- the following character properties:
-
- N Character Property
- --------------------------
- 1 _URE_NONSPACING
- 2 _URE_COMBINING
- 3 _URE_NUMDIGIT
- 4 _URE_NUMOTHER
- 5 _URE_SPACESEP
- 6 _URE_LINESEP
- 7 _URE_PARASEP
- 8 _URE_CNTRL
- 9 _URE_PUA
- 10 _URE_UPPER
- 11 _URE_LOWER
- 12 _URE_TITLE
- 13 _URE_MODIFIER
- 14 _URE_OTHERLETTER
- 15 _URE_DASHPUNCT
- 16 _URE_OPENPUNCT
- 17 _URE_CLOSEPUNCT
- 18 _URE_OTHERPUNCT
- 19 _URE_MATHSYM
- 20 _URE_CURRENCYSYM
- 21 _URE_OTHERSYM
- 22 _URE_LTR
- 23 _URE_RTL
- 24 _URE_EURONUM
- 25 _URE_EURONUMSEP
- 26 _URE_EURONUMTERM
- 27 _URE_ARABNUM
- 28 _URE_COMMONSEP
- 29 _URE_BLOCKSEP
- 30 _URE_SEGMENTSEP
- 31 _URE_WHITESPACE
- 32 _URE_OTHERNEUT
-
- o Character classes can contain literals, constants, and character
- property classes. Example:
-
- [abc\U10A\p1,3,4]
-
----------------------------------------------------------------------------
-
-Before using URE
-----------------
-Before URE is used, two functions need to be created. One to check if a
-character matches a set of URE character properties, and one to convert a
-character to lower case.
-
-Stubs for these function are located in the urestubs.c file.
-
-Using URE
----------
-
-Sample pseudo-code fragment.
-
- ure_buffer_t rebuf;
- ure_dfa_t dfa;
- ucs2_t *re, *text;
- unsigned long relen, textlen;
- unsigned long match_start, match_end;
-
- /*
- * Allocate the dynamic storage needed to compile regular expressions.
- */
- rebuf = ure_buffer_create();
-
- for each regular expression in a list {
- re = next regular expression;
- relen = length(re);
-
- /*
- * Compile the regular expression with the case insensitive flag
- * turned on.
- */
- dfa = ure_compile(re, relen, 1, rebuf);
-
- /*
- * Look for the first match in some text. The matching will be done
- * in a case insensitive manner because the expression was compiled
- * with the case insensitive flag on.
- */
- if (ure_exec(dfa, 0, text, textlen, &match_start, &match_end))
- printf("MATCH: %ld %ld\n", match_start, match_end);
-
- /*
- * Look for the first match in some text, ignoring non-spacing
- * characters.
- */
- if (ure_exec(dfa, URE_IGNORE_NONSPACING, text, textlen,
- &match_start, &match_end))
- printf("MATCH: %ld %ld\n", match_start, match_end);
-
- /*
- * Free the DFA.
- */
- ure_free_dfa(dfa);
- }
-
- /*
- * Free the dynamic storage used for compiling the expressions.
- */
- ure_free_buffer(rebuf);
-
----------------------------------------------------------------------------
-
-Mark Leisher <mleisher@crl.nmsu.edu>
-29 March 1997
-
-===========================================================================
-
-CHANGES
--------
-
-Version: 0.5
-Date : 21 September 1999
-==========================
- 1. Added copyright stuff and put in CVS.
+++ /dev/null
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/ure/ure.c,v 1.19 2008/01/07 23:20:05 kurt Exp $
- * $Id: ure.c,v 1.2 1999/09/21 15:47:43 mleisher Exp $"
- */
-
-#include <k5-int.h>
-
-#include <stdlib.h>
-#include <string.h>
-#ifndef _WIN32
-#include <unistd.h>
-#endif
-
-#include "ure.h"
-
-/*
- * Flags used internally in the DFA.
- */
-#define _URE_DFA_CASEFOLD 0x01
-#define _URE_DFA_BLANKLINE 0x02
-
-static unsigned long cclass_flags[] = {
- 0,
- _URE_NONSPACING,
- _URE_COMBINING,
- _URE_NUMDIGIT,
- _URE_NUMOTHER,
- _URE_SPACESEP,
- _URE_LINESEP,
- _URE_PARASEP,
- _URE_CNTRL,
- _URE_PUA,
- _URE_UPPER,
- _URE_LOWER,
- _URE_TITLE,
- _URE_MODIFIER,
- _URE_OTHERLETTER,
- _URE_DASHPUNCT,
- _URE_OPENPUNCT,
- _URE_CLOSEPUNCT,
- _URE_OTHERPUNCT,
- _URE_MATHSYM,
- _URE_CURRENCYSYM,
- _URE_OTHERSYM,
- _URE_LTR,
- _URE_RTL,
- _URE_EURONUM,
- _URE_EURONUMSEP,
- _URE_EURONUMTERM,
- _URE_ARABNUM,
- _URE_COMMONSEP,
- _URE_BLOCKSEP,
- _URE_SEGMENTSEP,
- _URE_WHITESPACE,
- _URE_OTHERNEUT,
-};
-
-/*
- * Symbol types for the DFA.
- */
-#define _URE_ANY_CHAR 1
-#define _URE_CHAR 2
-#define _URE_CCLASS 3
-#define _URE_NCCLASS 4
-#define _URE_BOL_ANCHOR 5
-#define _URE_EOL_ANCHOR 6
-
-/*
- * Op codes for converting the NFA to a DFA.
- */
-#define _URE_SYMBOL 10
-#define _URE_PAREN 11
-#define _URE_QUEST 12
-#define _URE_STAR 13
-#define _URE_PLUS 14
-#define _URE_ONE 15
-#define _URE_AND 16
-#define _URE_OR 17
-
-#define _URE_NOOP 0xffff
-
-#define _URE_REGSTART 0x8000
-#define _URE_REGEND 0x4000
-
-/*
- * Structure used to handle a compacted range of characters.
- */
-typedef struct {
- ucs4_t min_code;
- ucs4_t max_code;
-} _ure_range_t;
-
-typedef struct {
- _ure_range_t *ranges;
- ucs2_t ranges_used;
- ucs2_t ranges_size;
-} _ure_ccl_t;
-
-typedef union {
- ucs4_t chr;
- _ure_ccl_t ccl;
-} _ure_sym_t;
-
-/*
- * This is a general element structure used for expressions and stack
- * elements.
- */
-typedef struct {
- ucs2_t reg;
- ucs2_t onstack;
- ucs2_t type;
- ucs2_t lhs;
- ucs2_t rhs;
-} _ure_elt_t;
-
-/*
- * This is a structure used to track a list or a stack of states.
- */
-typedef struct {
- ucs2_t *slist;
- ucs2_t slist_size;
- ucs2_t slist_used;
-} _ure_stlist_t;
-
-/*
- * Structure to track the list of unique states for a symbol
- * during reduction.
- */
-typedef struct {
- ucs2_t id;
- ucs2_t type;
- unsigned long mods;
- unsigned long props;
- _ure_sym_t sym;
- _ure_stlist_t states;
-} _ure_symtab_t;
-
-/*
- * Structure to hold a single state.
- */
-typedef struct {
- ucs2_t id;
- ucs2_t accepting;
- ucs2_t pad;
- _ure_stlist_t st;
- _ure_elt_t *trans;
- ucs2_t trans_size;
- ucs2_t trans_used;
-} _ure_state_t;
-
-/*
- * Structure used for keeping lists of states.
- */
-typedef struct {
- _ure_state_t *states;
- ucs2_t states_size;
- ucs2_t states_used;
-} _ure_statetable_t;
-
-/*
- * Structure to track pairs of DFA states when equivalent states are
- * merged.
- */
-typedef struct {
- ucs2_t l;
- ucs2_t r;
-} _ure_equiv_t;
-
-/*
- * Structure used for constructing the NFA and reducing to a minimal DFA.
- */
-typedef struct _ure_buffer_t {
- int reducing;
- int error;
- unsigned long flags;
-
- _ure_stlist_t stack;
-
- /*
- * Table of unique symbols encountered.
- */
- _ure_symtab_t *symtab;
- ucs2_t symtab_size;
- ucs2_t symtab_used;
-
- /*
- * Tracks the unique expressions generated for the NFA and when the NFA is
- * reduced.
- */
- _ure_elt_t *expr;
- ucs2_t expr_used;
- ucs2_t expr_size;
-
- /*
- * The reduced table of unique groups of NFA states.
- */
- _ure_statetable_t states;
-
- /*
- * Tracks states when equivalent states are merged.
- */
- _ure_equiv_t *equiv;
- ucs2_t equiv_used;
- ucs2_t equiv_size;
-} _ure_buffer_t;
-
-typedef struct {
- ucs2_t symbol;
- ucs2_t next_state;
-} _ure_trans_t;
-
-typedef struct {
- ucs2_t accepting;
- ucs2_t ntrans;
- _ure_trans_t *trans;
-} _ure_dstate_t;
-
-typedef struct _ure_dfa_t {
- unsigned long flags;
-
- _ure_symtab_t *syms;
- ucs2_t nsyms;
-
- _ure_dstate_t *states;
- ucs2_t nstates;
-
- _ure_trans_t *trans;
- ucs2_t ntrans;
-} _ure_dfa_t;
-
-/*************************************************************************
- *
- * Functions.
- *
- *************************************************************************/
-
-static void
-_ure_memmove(char *dest, char *src, unsigned long bytes)
-{
- long i, j;
-
- i = (long) bytes;
- j = i & 7;
- i = (i + 7) >> 3;
-
- /*
- * Do a memmove using Ye Olde Duff's Device for efficiency.
- */
- if (src < dest) {
- src += bytes;
- dest += bytes;
-
- switch (j) {
- case 0: do {
- *--dest = *--src;
- case 7: *--dest = *--src;
- case 6: *--dest = *--src;
- case 5: *--dest = *--src;
- case 4: *--dest = *--src;
- case 3: *--dest = *--src;
- case 2: *--dest = *--src;
- case 1: *--dest = *--src;
- } while (--i > 0);
- }
- } else if (src > dest) {
- switch (j) {
- case 0: do {
- *dest++ = *src++;
- case 7: *dest++ = *src++;
- case 6: *dest++ = *src++;
- case 5: *dest++ = *src++;
- case 4: *dest++ = *src++;
- case 3: *dest++ = *src++;
- case 2: *dest++ = *src++;
- case 1: *dest++ = *src++;
- } while (--i > 0);
- }
- }
-}
-
-static void
-_ure_push(ucs2_t v, _ure_buffer_t *b)
-{
- _ure_stlist_t *s;
-
- if (b == 0)
- return;
-
- /*
- * If the `reducing' parameter is non-zero, check to see if the value
- * passed is already on the stack.
- */
- if (b->reducing != 0 && b->expr[v].onstack != 0)
- return;
-
- s = &b->stack;
- if (s->slist_used == s->slist_size) {
- if (s->slist_size == 0)
- s->slist = (ucs2_t *) malloc(sizeof(ucs2_t) << 3);
- else
- s->slist = (ucs2_t *) realloc((char *) s->slist,
- sizeof(ucs2_t) * (s->slist_size + 8));
- s->slist_size += 8;
- }
- s->slist[s->slist_used++] = v;
-
- /*
- * If the `reducing' parameter is non-zero, flag the element as being on
- * the stack.
- */
- if (b->reducing != 0)
- b->expr[v].onstack = 1;
-}
-
-static ucs2_t
-_ure_peek(_ure_buffer_t *b)
-{
- if (b == 0 || b->stack.slist_used == 0)
- return _URE_NOOP;
-
- return b->stack.slist[b->stack.slist_used - 1];
-}
-
-static ucs2_t
-_ure_pop(_ure_buffer_t *b)
-{
- ucs2_t v;
-
- if (b == 0 || b->stack.slist_used == 0)
- return _URE_NOOP;
-
- v = b->stack.slist[--b->stack.slist_used];
- if (b->reducing)
- b->expr[v].onstack = 0;
-
- return v;
-}
-
-/*************************************************************************
- *
- * Start symbol parse functions.
- *
- *************************************************************************/
-
-/*
- * Parse a comma-separated list of integers that represent character
- * properties. Combine them into a mask that is returned in the `mask'
- * variable, and return the number of characters consumed.
- */
-static unsigned long
-_ure_prop_list(ucs2_t *pp, unsigned long limit, unsigned long *mask,
- _ure_buffer_t *b)
-{
- unsigned long n, m;
- ucs2_t *sp, *ep;
-
- sp = pp;
- ep = sp + limit;
-
- for (m = n = 0; b->error == _URE_OK && sp < ep; sp++) {
- if (*sp == ',') {
- /*
- * Encountered a comma, so select the next character property flag
- * and reset the number.
- */
- m |= cclass_flags[n];
- n = 0;
- } else if (*sp >= '0' && *sp <= '9')
- /*
- * Encountered a digit, so start or continue building the cardinal
- * that represents the character property flag.
- */
- n = (n * 10) + (*sp - '0');
- else
- /*
- * Encountered something that is not part of the property list.
- * Indicate that we are done.
- */
- break;
-
- /*
- * If a property number greater than 32 occurs, then there is a
- * problem. Most likely a missing comma separator.
- */
- if (n > 32)
- b->error = _URE_INVALID_PROPERTY;
- }
-
- if (b->error == _URE_OK && n != 0)
- m |= cclass_flags[n];
-
- /*
- * Set the mask that represents the group of character properties.
- */
- *mask = m;
-
- /*
- * Return the number of characters consumed.
- */
- return sp - pp;
-}
-
-/*
- * Collect a hex number with 1 to 4 digits and return the number
- * of characters used.
- */
-static unsigned long
-_ure_hex(ucs2_t *np, unsigned long limit, ucs4_t *n)
-{
- ucs2_t i;
- ucs2_t *sp, *ep;
- ucs4_t nn;
-
- sp = np;
- ep = sp + limit;
-
- for (nn = 0, i = 0; i < 4 && sp < ep; i++, sp++) {
- if (*sp >= '0' && *sp <= '9')
- nn = (nn << 4) + (*sp - '0');
- else if (*sp >= 'A' && *sp <= 'F')
- nn = (nn << 4) + ((*sp - 'A') + 10);
- else if (*sp >= 'a' && *sp <= 'f')
- nn = (nn << 4) + ((*sp - 'a') + 10);
- else
- /*
- * Encountered something that is not a hex digit.
- */
- break;
- }
-
- /*
- * Assign the character code collected and return the number of
- * characters used.
- */
- *n = nn;
-
- return sp - np;
-}
-
-/*
- * Insert a range into a character class, removing duplicates and ordering
- * them in increasing range-start order.
- */
-static void
-_ure_add_range(_ure_ccl_t *ccl, _ure_range_t *r, _ure_buffer_t *b)
-{
- ucs2_t i;
- ucs4_t tmp;
- _ure_range_t *rp;
-
- /*
- * If the `casefold' flag is set, then make sure both endpoints of the
- * range are converted to lower case.
- */
- if (b->flags & _URE_DFA_CASEFOLD) {
- r->min_code = _ure_tolower(r->min_code);
- r->max_code = _ure_tolower(r->max_code);
- }
-
- /*
- * Swap the range endpoints if they are not in increasing order.
- */
- if (r->min_code > r->max_code) {
- tmp = r->min_code;
- r->min_code = r->max_code;
- r->max_code = tmp;
- }
-
- for (i = 0, rp = ccl->ranges;
- i < ccl->ranges_used && r->min_code < rp->min_code; i++, rp++) ;
-
- /*
- * Check for a duplicate.
- */
- if (i < ccl->ranges_used &&
- r->min_code == rp->min_code && r->max_code == rp->max_code)
- return;
-
- if (ccl->ranges_used == ccl->ranges_size) {
- if (ccl->ranges_size == 0)
- ccl->ranges = (_ure_range_t *) malloc(sizeof(_ure_range_t) << 3);
- else
- ccl->ranges = (_ure_range_t *)
- realloc((char *) ccl->ranges,
- sizeof(_ure_range_t) * (ccl->ranges_size + 8));
- ccl->ranges_size += 8;
- }
-
- rp = ccl->ranges + ccl->ranges_used;
-
- if (i < ccl->ranges_used)
- _ure_memmove((char *) (rp + 1), (char *) rp,
- sizeof(_ure_range_t) * (ccl->ranges_used - i));
-
- ccl->ranges_used++;
- rp->min_code = r->min_code;
- rp->max_code = r->max_code;
-}
-
-#define _URE_ALPHA_MASK (_URE_UPPER|_URE_LOWER|_URE_OTHERLETTER|\
-_URE_MODIFIER|_URE_TITLE|_URE_NONSPACING|_URE_COMBINING)
-#define _URE_ALNUM_MASK (_URE_ALPHA_MASK|_URE_NUMDIGIT)
-#define _URE_PUNCT_MASK (_URE_DASHPUNCT|_URE_OPENPUNCT|_URE_CLOSEPUNCT|\
-_URE_OTHERPUNCT)
-#define _URE_GRAPH_MASK (_URE_NUMDIGIT|_URE_NUMOTHER|_URE_ALPHA_MASK|\
-_URE_MATHSYM|_URE_CURRENCYSYM|_URE_OTHERSYM)
-#define _URE_PRINT_MASK (_URE_GRAPH_MASK|_URE_SPACESEP)
-#define _URE_SPACE_MASK (_URE_SPACESEP|_URE_LINESEP|_URE_PARASEP)
-
-typedef void (*_ure_cclsetup_t)(
- _ure_symtab_t *sym,
- unsigned long mask,
- _ure_buffer_t *b
-);
-
-typedef struct {
- ucs2_t key;
- unsigned int len : 8;
- unsigned int next : 8;
- _ure_cclsetup_t func;
- unsigned long mask;
-} _ure_trie_t;
-
-static void
-_ure_ccl_setup(_ure_symtab_t *sym, unsigned long mask, _ure_buffer_t *b)
-{
- sym->props |= mask;
-}
-
-static void
-_ure_space_setup(_ure_symtab_t *sym, unsigned long mask, _ure_buffer_t *b)
-{
- _ure_range_t range;
-
- sym->props |= mask;
-
- /*
- * Add the additional characters needed for handling isspace().
- */
- range.min_code = range.max_code = '\t';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = range.max_code = '\r';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = range.max_code = '\n';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = range.max_code = '\f';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = range.max_code = 0xfeff;
- _ure_add_range(&sym->sym.ccl, &range, b);
-}
-
-static void
-_ure_xdigit_setup(_ure_symtab_t *sym, unsigned long mask, _ure_buffer_t *b)
-{
- _ure_range_t range;
-
- /*
- * Add the additional characters needed for handling isxdigit().
- */
- range.min_code = '0';
- range.max_code = '9';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = 'A';
- range.max_code = 'F';
- _ure_add_range(&sym->sym.ccl, &range, b);
- range.min_code = 'a';
- range.max_code = 'f';
- _ure_add_range(&sym->sym.ccl, &range, b);
-}
-
-static const _ure_trie_t cclass_trie[] = {
- {0x003a, 1, 1, 0, 0},
- {0x0061, 9, 10, 0, 0},
- {0x0063, 8, 19, 0, 0},
- {0x0064, 7, 24, 0, 0},
- {0x0067, 6, 29, 0, 0},
- {0x006c, 5, 34, 0, 0},
- {0x0070, 4, 39, 0, 0},
- {0x0073, 3, 49, 0, 0},
- {0x0075, 2, 54, 0, 0},
- {0x0078, 1, 59, 0, 0},
- {0x006c, 1, 11, 0, 0},
- {0x006e, 2, 13, 0, 0},
- {0x0070, 1, 16, 0, 0},
- {0x0075, 1, 14, 0, 0},
- {0x006d, 1, 15, 0, 0},
- {0x003a, 1, 16, _ure_ccl_setup, _URE_ALNUM_MASK},
- {0x0068, 1, 17, 0, 0},
- {0x0061, 1, 18, 0, 0},
- {0x003a, 1, 19, _ure_ccl_setup, _URE_ALPHA_MASK},
- {0x006e, 1, 20, 0, 0},
- {0x0074, 1, 21, 0, 0},
- {0x0072, 1, 22, 0, 0},
- {0x006c, 1, 23, 0, 0},
- {0x003a, 1, 24, _ure_ccl_setup, _URE_CNTRL},
- {0x0069, 1, 25, 0, 0},
- {0x0067, 1, 26, 0, 0},
- {0x0069, 1, 27, 0, 0},
- {0x0074, 1, 28, 0, 0},
- {0x003a, 1, 29, _ure_ccl_setup, _URE_NUMDIGIT},
- {0x0072, 1, 30, 0, 0},
- {0x0061, 1, 31, 0, 0},
- {0x0070, 1, 32, 0, 0},
- {0x0068, 1, 33, 0, 0},
- {0x003a, 1, 34, _ure_ccl_setup, _URE_GRAPH_MASK},
- {0x006f, 1, 35, 0, 0},
- {0x0077, 1, 36, 0, 0},
- {0x0065, 1, 37, 0, 0},
- {0x0072, 1, 38, 0, 0},
- {0x003a, 1, 39, _ure_ccl_setup, _URE_LOWER},
- {0x0072, 2, 41, 0, 0},
- {0x0075, 1, 45, 0, 0},
- {0x0069, 1, 42, 0, 0},
- {0x006e, 1, 43, 0, 0},
- {0x0074, 1, 44, 0, 0},
- {0x003a, 1, 45, _ure_ccl_setup, _URE_PRINT_MASK},
- {0x006e, 1, 46, 0, 0},
- {0x0063, 1, 47, 0, 0},
- {0x0074, 1, 48, 0, 0},
- {0x003a, 1, 49, _ure_ccl_setup, _URE_PUNCT_MASK},
- {0x0070, 1, 50, 0, 0},
- {0x0061, 1, 51, 0, 0},
- {0x0063, 1, 52, 0, 0},
- {0x0065, 1, 53, 0, 0},
- {0x003a, 1, 54, _ure_space_setup, _URE_SPACE_MASK},
- {0x0070, 1, 55, 0, 0},
- {0x0070, 1, 56, 0, 0},
- {0x0065, 1, 57, 0, 0},
- {0x0072, 1, 58, 0, 0},
- {0x003a, 1, 59, _ure_ccl_setup, _URE_UPPER},
- {0x0064, 1, 60, 0, 0},
- {0x0069, 1, 61, 0, 0},
- {0x0067, 1, 62, 0, 0},
- {0x0069, 1, 63, 0, 0},
- {0x0074, 1, 64, 0, 0},
- {0x003a, 1, 65, _ure_xdigit_setup, 0},
-};
-
-/*
- * Probe for one of the POSIX colon delimited character classes in the static
- * trie.
- */
-static unsigned long
-_ure_posix_ccl(ucs2_t *cp, unsigned long limit, _ure_symtab_t *sym,
- _ure_buffer_t *b)
-{
- int i;
- unsigned long n;
- const _ure_trie_t *tp;
- ucs2_t *sp, *ep;
-
- /*
- * If the number of characters left is less than 7, then this cannot be
- * interpreted as one of the colon delimited classes.
- */
- if (limit < 7)
- return 0;
-
- sp = cp;
- ep = sp + limit;
- tp = cclass_trie;
- for (i = 0; sp < ep && i < 8; i++, sp++) {
- n = tp->len;
-
- for (; n > 0 && tp->key != *sp; tp++, n--) ;
-
- if (n == 0)
- return 0;
-
- if (*sp == ':' && (i == 6 || i == 7)) {
- sp++;
- break;
- }
- if (sp + 1 < ep)
- tp = cclass_trie + tp->next;
- }
- if (tp->func == 0)
- return 0;
-
- (*tp->func)(sym, tp->mask, b);
-
- return sp - cp;
-}
-
-/*
- * Construct a list of ranges and return the number of characters consumed.
- */
-static unsigned long
-_ure_cclass(ucs2_t *cp, unsigned long limit, _ure_symtab_t *symp,
- _ure_buffer_t *b)
-{
- int range_end;
- unsigned long n;
- ucs2_t *sp, *ep;
- ucs4_t c, last;
- _ure_ccl_t *cclp;
- _ure_range_t range;
-
- sp = cp;
- ep = sp + limit;
-
- if (*sp == '^') {
- symp->type = _URE_NCCLASS;
- sp++;
- } else
- symp->type = _URE_CCLASS;
-
- for (last = 0, range_end = 0;
- b->error == _URE_OK && sp < ep && *sp != ']'; ) {
- c = *sp++;
- if (c == '\\') {
- if (sp == ep) {
- /*
- * The EOS was encountered when expecting the reverse solidus
- * to be followed by the character it is escaping. Set an
- * error code and return the number of characters consumed up
- * to this point.
- */
- b->error = _URE_UNEXPECTED_EOS;
- return sp - cp;
- }
-
- c = *sp++;
- switch (c) {
- case 'a':
- c = 0x07;
- break;
- case 'b':
- c = 0x08;
- break;
- case 'f':
- c = 0x0c;
- break;
- case 'n':
- c = 0x0a;
- break;
- case 'r':
- c = 0x0d;
- break;
- case 't':
- c = 0x09;
- break;
- case 'v':
- c = 0x0b;
- break;
- case 'p':
- case 'P':
- sp += _ure_prop_list(sp, ep - sp, &symp->props, b);
- /*
- * Invert the bit mask of the properties if this is a negated
- * character class or if 'P' is used to specify a list of
- * character properties that should *not* match in a
- * character class.
- */
- if (c == 'P')
- symp->props = ~symp->props;
- continue;
- break;
- case 'x':
- case 'X':
- case 'u':
- case 'U':
- if (sp < ep &&
- ((*sp >= '0' && *sp <= '9') ||
- (*sp >= 'A' && *sp <= 'F') ||
- (*sp >= 'a' && *sp <= 'f')))
- sp += _ure_hex(sp, ep - sp, &c);
- }
- } else if (c == ':') {
- /*
- * Probe for a POSIX colon delimited character class.
- */
- sp--;
- if ((n = _ure_posix_ccl(sp, ep - sp, symp, b)) == 0)
- sp++;
- else {
- sp += n;
- continue;
- }
- }
-
- cclp = &symp->sym.ccl;
-
- /*
- * Check to see if the current character is a low surrogate that needs
- * to be combined with a preceding high surrogate.
- */
- if (last != 0) {
- if (c >= 0xdc00 && c <= 0xdfff)
- /*
- * Construct the UTF16 character code.
- */
- c = 0x10000 + (((last & 0x03ff) << 10) | (c & 0x03ff));
- else {
- /*
- * Add the isolated high surrogate to the range.
- */
- if (range_end == 1)
- range.max_code = last & 0xffff;
- else
- range.min_code = range.max_code = last & 0xffff;
-
- _ure_add_range(cclp, &range, b);
- range_end = 0;
- }
- }
-
- /*
- * Clear the last character code.
- */
- last = 0;
-
- /*
- * This slightly awkward code handles the different cases needed to
- * construct a range.
- */
- if (c >= 0xd800 && c <= 0xdbff) {
- /*
- * If the high surrogate is followed by a range indicator, simply
- * add it as the range start. Otherwise, save it in case the next
- * character is a low surrogate.
- */
- if (*sp == '-') {
- sp++;
- range.min_code = c;
- range_end = 1;
- } else
- last = c;
- } else if (range_end == 1) {
- range.max_code = c;
- _ure_add_range(cclp, &range, b);
- range_end = 0;
- } else {
- range.min_code = range.max_code = c;
- if (*sp == '-') {
- sp++;
- range_end = 1;
- } else
- _ure_add_range(cclp, &range, b);
- }
- }
-
- if (sp < ep && *sp == ']')
- sp++;
- else
- /*
- * The parse was not terminated by the character class close symbol
- * (']'), so set an error code.
- */
- b->error = _URE_CCLASS_OPEN;
-
- return sp - cp;
-}
-
-/*
- * Probe for a low surrogate hex code.
- */
-static unsigned long
-_ure_probe_ls(ucs2_t *ls, unsigned long limit, ucs4_t *c)
-{
- ucs4_t i, code;
- ucs2_t *sp, *ep;
-
- for (i = code = 0, sp = ls, ep = sp + limit; i < 4 && sp < ep; sp++) {
- if (*sp >= '0' && *sp <= '9')
- code = (code << 4) + (*sp - '0');
- else if (*sp >= 'A' && *sp <= 'F')
- code = (code << 4) + ((*sp - 'A') + 10);
- else if (*sp >= 'a' && *sp <= 'f')
- code = (code << 4) + ((*sp - 'a') + 10);
- else
- break;
- }
-
- *c = code;
- return (0xdc00 <= code && code <= 0xdfff) ? sp - ls : 0;
-}
-
-static unsigned long
-_ure_compile_symbol(ucs2_t *sym, unsigned long limit, _ure_symtab_t *symp,
- _ure_buffer_t *b)
-{
- ucs4_t c;
- ucs2_t *sp, *ep;
-
- sp = sym;
- ep = sym + limit;
-
- if ((c = *sp++) == '\\') {
-
- if (sp == ep) {
- /*
- * The EOS was encountered when expecting the reverse solidus to
- * be followed by the character it is escaping. Set an error code
- * and return the number of characters consumed up to this point.
- */
- b->error = _URE_UNEXPECTED_EOS;
- return sp - sym;
- }
-
- c = *sp++;
- switch (c) {
- case 'p':
- case 'P':
- symp->type = (c == 'p') ? _URE_CCLASS : _URE_NCCLASS;
- sp += _ure_prop_list(sp, ep - sp, &symp->props, b);
- break;
- case 'a':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x07;
- break;
- case 'b':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x08;
- break;
- case 'f':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x0c;
- break;
- case 'n':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x0a;
- break;
- case 'r':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x0d;
- break;
- case 't':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x09;
- break;
- case 'v':
- symp->type = _URE_CHAR;
- symp->sym.chr = 0x0b;
- break;
- case 'x':
- case 'X':
- case 'u':
- case 'U':
- /*
- * Collect between 1 and 4 digits representing a UCS2 code. Fall
- * through to the next case.
- */
- if (sp < ep &&
- ((*sp >= '0' && *sp <= '9') ||
- (*sp >= 'A' && *sp <= 'F') ||
- (*sp >= 'a' && *sp <= 'f')))
- sp += _ure_hex(sp, ep - sp, &c);
- /* FALLTHROUGH */
- default:
- /*
- * Simply add an escaped character here.
- */
- symp->type = _URE_CHAR;
- symp->sym.chr = c;
- }
- } else if (c == '^' || c == '$')
- /*
- * Handle the BOL and EOL anchors. This actually consists simply of
- * setting a flag that indicates that the user supplied anchor match
- * function should be called. This needs to be done instead of simply
- * matching line/paragraph separators because beginning-of-text and
- * end-of-text tests are needed as well.
- */
- symp->type = (c == '^') ? _URE_BOL_ANCHOR : _URE_EOL_ANCHOR;
- else if (c == '[')
- /*
- * Construct a character class.
- */
- sp += _ure_cclass(sp, ep - sp, symp, b);
- else if (c == '.')
- symp->type = _URE_ANY_CHAR;
- else {
- symp->type = _URE_CHAR;
- symp->sym.chr = c;
- }
-
- /*
- * If the symbol type happens to be a character and is a high surrogate,
- * then probe forward to see if it is followed by a low surrogate that
- * needs to be added.
- */
- if (sp < ep && symp->type == _URE_CHAR &&
- 0xd800 <= symp->sym.chr && symp->sym.chr <= 0xdbff) {
-
- if (0xdc00 <= *sp && *sp <= 0xdfff) {
- symp->sym.chr = 0x10000 + (((symp->sym.chr & 0x03ff) << 10) |
- (*sp & 0x03ff));
- sp++;
- } else if (*sp == '\\' && (*(sp + 1) == 'x' || *(sp + 1) == 'X' ||
- *(sp + 1) == 'u' || *(sp + 1) == 'U')) {
- sp += _ure_probe_ls(sp + 2, ep - (sp + 2), &c);
- if (0xdc00 <= c && c <= 0xdfff) {
- /*
- * Take into account the \[xu] in front of the hex code.
- */
- sp += 2;
- symp->sym.chr = 0x10000 + (((symp->sym.chr & 0x03ff) << 10) |
- (c & 0x03ff));
- }
- }
- }
-
- /*
- * Last, make sure any _URE_CHAR type symbols are changed to lower case if
- * the `casefold' flag is set.
- */
- if ((b->flags & _URE_DFA_CASEFOLD) && symp->type == _URE_CHAR)
- symp->sym.chr = _ure_tolower(symp->sym.chr);
-
- /*
- * If the symbol constructed is anything other than one of the anchors,
- * make sure the _URE_DFA_BLANKLINE flag is removed.
- */
- if (symp->type != _URE_BOL_ANCHOR && symp->type != _URE_EOL_ANCHOR)
- b->flags &= ~_URE_DFA_BLANKLINE;
-
- /*
- * Return the number of characters consumed.
- */
- return sp - sym;
-}
-
-static int
-_ure_sym_neq(_ure_symtab_t *a, _ure_symtab_t *b)
-{
- if (a->type != b->type || a->mods != b->mods || a->props != b->props)
- return 1;
-
- if (a->type == _URE_CCLASS || a->type == _URE_NCCLASS) {
- if (a->sym.ccl.ranges_used != b->sym.ccl.ranges_used)
- return 1;
- if (a->sym.ccl.ranges_used > 0 &&
- memcmp((char *) a->sym.ccl.ranges, (char *) b->sym.ccl.ranges,
- sizeof(_ure_range_t) * a->sym.ccl.ranges_used) != 0)
- return 1;
- } else if (a->type == _URE_CHAR && a->sym.chr != b->sym.chr)
- return 1;
- return 0;
-}
-
-/*
- * Construct a symbol, but only keep unique symbols.
- */
-static ucs2_t
-_ure_make_symbol(ucs2_t *sym, unsigned long limit, unsigned long *consumed,
- _ure_buffer_t *b)
-{
- ucs2_t i;
- _ure_symtab_t *sp, symbol;
-
- /*
- * Build the next symbol so we can test to see if it is already in the
- * symbol table.
- */
- (void) memset((char *) &symbol, '\0', sizeof(_ure_symtab_t));
- *consumed = _ure_compile_symbol(sym, limit, &symbol, b);
-
- /*
- * Check to see if the symbol exists.
- */
- for (i = 0, sp = b->symtab;
- i < b->symtab_used && _ure_sym_neq(&symbol, sp); i++, sp++) ;
-
- if (i < b->symtab_used) {
- /*
- * Free up any ranges used for the symbol.
- */
- if ((symbol.type == _URE_CCLASS || symbol.type == _URE_NCCLASS) &&
- symbol.sym.ccl.ranges_size > 0)
- free((char *) symbol.sym.ccl.ranges);
-
- return b->symtab[i].id;
- }
-
- /*
- * Need to add the new symbol.
- */
- if (b->symtab_used == b->symtab_size) {
- if (b->symtab_size == 0)
- b->symtab = (_ure_symtab_t *) malloc(sizeof(_ure_symtab_t) << 3);
- else
- b->symtab = (_ure_symtab_t *)
- realloc((char *) b->symtab,
- sizeof(_ure_symtab_t) * (b->symtab_size + 8));
- sp = b->symtab + b->symtab_size;
- (void) memset((char *) sp, '\0', sizeof(_ure_symtab_t) << 3);
- b->symtab_size += 8;
- }
-
- symbol.id = b->symtab_used++;
- (void) memcpy((char *) &b->symtab[symbol.id], (char *) &symbol,
- sizeof(_ure_symtab_t));
-
- return symbol.id;
-}
-
-/*************************************************************************
- *
- * End symbol parse functions.
- *
- *************************************************************************/
-
-static ucs2_t
-_ure_make_expr(ucs2_t type, ucs2_t lhs, ucs2_t rhs, _ure_buffer_t *b)
-{
- ucs2_t i;
-
- if (b == 0)
- return _URE_NOOP;
-
- /*
- * Determine if the expression already exists or not.
- */
- for (i = 0; i < b->expr_used; i++) {
- if (b->expr[i].type == type && b->expr[i].lhs == lhs &&
- b->expr[i].rhs == rhs)
- break;
- }
- if (i < b->expr_used)
- return i;
-
- /*
- * Need to add a new expression.
- */
- if (b->expr_used == b->expr_size) {
- if (b->expr_size == 0)
- b->expr = (_ure_elt_t *) malloc(sizeof(_ure_elt_t) << 3);
- else
- b->expr = (_ure_elt_t *)
- realloc((char *) b->expr,
- sizeof(_ure_elt_t) * (b->expr_size + 8));
- b->expr_size += 8;
- }
-
- b->expr[b->expr_used].onstack = 0;
- b->expr[b->expr_used].type = type;
- b->expr[b->expr_used].lhs = lhs;
- b->expr[b->expr_used].rhs = rhs;
-
- return b->expr_used++;
-}
-
-static unsigned char spmap[] = {
- 0x00, 0x00, 0x00, 0x00, 0x00, 0x0f, 0x00, 0x80, 0x00, 0x00, 0x00, 0x00,
- 0x00, 0x00, 0x00, 0x10, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
- 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
-};
-
-#define _ure_isspecial(cc) ((cc) > 0x20 && (cc) < 0x7f && \
- (spmap[(cc) >> 3] & (1 << ((cc) & 7))))
-
-/*
- * Convert the regular expression into an NFA in a form that will be easy to
- * reduce to a DFA. The starting state for the reduction will be returned.
- */
-static ucs2_t
-_ure_re2nfa(ucs2_t *re, unsigned long relen, _ure_buffer_t *b)
-{
- ucs2_t c, state, top, sym, *sp, *ep;
- unsigned long used;
-
- state = _URE_NOOP;
-
- sp = re;
- ep = sp + relen;
- while (b->error == _URE_OK && sp < ep) {
- c = *sp++;
- switch (c) {
- case '(':
- _ure_push(_URE_PAREN, b);
- break;
- case ')':
- /*
- * Check for the case of too many close parentheses.
- */
- if (_ure_peek(b) == _URE_NOOP) {
- b->error = _URE_UNBALANCED_GROUP;
- break;
- }
-
- while ((top = _ure_peek(b)) == _URE_AND || top == _URE_OR)
- /*
- * Make an expression with the AND or OR operator and its right
- * hand side.
- */
- state = _ure_make_expr(_ure_pop(b), _ure_pop(b), state, b);
-
- /*
- * Remove the _URE_PAREN off the stack.
- */
- (void) _ure_pop(b);
- break;
- case '*':
- state = _ure_make_expr(_URE_STAR, state, _URE_NOOP, b);
- break;
- case '+':
- state = _ure_make_expr(_URE_PLUS, state, _URE_NOOP, b);
- break;
- case '?':
- state = _ure_make_expr(_URE_QUEST, state, _URE_NOOP, b);
- break;
- case '|':
- while ((top = _ure_peek(b)) == _URE_AND || top == _URE_OR)
- /*
- * Make an expression with the AND or OR operator and its right
- * hand side.
- */
- state = _ure_make_expr(_ure_pop(b), _ure_pop(b), state, b);
-
- _ure_push(state, b);
- _ure_push(_URE_OR, b);
- break;
- default:
- sp--;
- sym = _ure_make_symbol(sp, ep - sp, &used, b);
- sp += used;
- state = _ure_make_expr(_URE_SYMBOL, sym, _URE_NOOP, b);
- break;
- }
-
- if (c != '(' && c != '|' && sp < ep &&
- (!_ure_isspecial(*sp) || *sp == '(')) {
- _ure_push(state, b);
- _ure_push(_URE_AND, b);
- }
- }
- while ((top = _ure_peek(b)) == _URE_AND || top == _URE_OR)
- /*
- * Make an expression with the AND or OR operator and its right
- * hand side.
- */
- state = _ure_make_expr(_ure_pop(b), _ure_pop(b), state, b);
-
- if (b->stack.slist_used > 0)
- b->error = _URE_UNBALANCED_GROUP;
-
- return (b->error == _URE_OK) ? state : _URE_NOOP;
-}
-
-static void
-_ure_add_symstate(ucs2_t sym, ucs2_t state, _ure_buffer_t *b)
-{
- ucs2_t i, *stp;
- _ure_symtab_t *sp;
-
- /*
- * Locate the symbol in the symbol table so the state can be added.
- * If the symbol doesn't exist, then a real problem exists.
- */
- for (i = 0, sp = b->symtab; i < b->symtab_used && sym != sp->id;
- i++, sp++) ;
-
- /*
- * Now find out if the state exists in the symbol's state list.
- */
- for (i = 0, stp = sp->states.slist;
- i < sp->states.slist_used && state > *stp; i++, stp++) ;
-
- if (i == sp->states.slist_used || state < *stp) {
- /*
- * Need to add the state in order.
- */
- if (sp->states.slist_used == sp->states.slist_size) {
- if (sp->states.slist_size == 0)
- sp->states.slist = (ucs2_t *) malloc(sizeof(ucs2_t) << 3);
- else
- sp->states.slist = (ucs2_t *)
- realloc((char *) sp->states.slist,
- sizeof(ucs2_t) * (sp->states.slist_size + 8));
- sp->states.slist_size += 8;
- }
- if (i < sp->states.slist_used)
- (void) _ure_memmove((char *) (sp->states.slist + i + 1),
- (char *) (sp->states.slist + i),
- sizeof(ucs2_t) * (sp->states.slist_used - i));
- sp->states.slist[i] = state;
- sp->states.slist_used++;
- }
-}
-
-static ucs2_t
-_ure_add_state(ucs2_t nstates, ucs2_t *states, _ure_buffer_t *b)
-{
- ucs2_t i;
- _ure_state_t *sp;
-
- for (i = 0, sp = b->states.states; i < b->states.states_used; i++, sp++) {
- if (sp->st.slist_used == nstates &&
- memcmp((char *) states, (char *) sp->st.slist,
- sizeof(ucs2_t) * nstates) == 0)
- break;
- }
-
- if (i == b->states.states_used) {
- /*
- * Need to add a new DFA state (set of NFA states).
- */
- if (b->states.states_used == b->states.states_size) {
- if (b->states.states_size == 0)
- b->states.states = (_ure_state_t *)
- malloc(sizeof(_ure_state_t) << 3);
- else
- b->states.states = (_ure_state_t *)
- realloc((char *) b->states.states,
- sizeof(_ure_state_t) * (b->states.states_size + 8));
- sp = b->states.states + b->states.states_size;
- (void) memset((char *) sp, '\0', sizeof(_ure_state_t) << 3);
- b->states.states_size += 8;
- }
-
- sp = b->states.states + b->states.states_used++;
- sp->id = i;
-
- if (sp->st.slist_used + nstates > sp->st.slist_size) {
- if (sp->st.slist_size == 0)
- sp->st.slist = (ucs2_t *)
- malloc(sizeof(ucs2_t) * (sp->st.slist_used + nstates));
- else
- sp->st.slist = (ucs2_t *)
- realloc((char *) sp->st.slist,
- sizeof(ucs2_t) * (sp->st.slist_used + nstates));
- sp->st.slist_size = sp->st.slist_used + nstates;
- }
- sp->st.slist_used = nstates;
- (void) memcpy((char *) sp->st.slist, (char *) states,
- sizeof(ucs2_t) * nstates);
- }
-
- /*
- * Return the ID of the DFA state representing a group of NFA states.
- */
- return i;
-}
-
-static void
-_ure_reduce(ucs2_t start, _ure_buffer_t *b)
-{
- ucs2_t i, j, state, eval, syms, rhs;
- ucs2_t s1, s2, ns1, ns2;
- _ure_state_t *sp;
- _ure_symtab_t *smp;
-
- b->reducing = 1;
-
- /*
- * Add the starting state for the reduction.
- */
- _ure_add_state(1, &start, b);
-
- /*
- * Process each set of NFA states that get created.
- */
- for (i = 0; i < b->states.states_used; i++) {
- sp = b->states.states + i;
-
- /*
- * Push the current states on the stack.
- */
- for (j = 0; j < sp->st.slist_used; j++)
- _ure_push(sp->st.slist[j], b);
-
- /*
- * Reduce the NFA states.
- */
- for (j = sp->accepting = syms = 0; j < b->stack.slist_used; j++) {
- state = b->stack.slist[j];
- eval = 1;
-
- /*
- * This inner loop is the iterative equivalent of recursively
- * reducing subexpressions generated as a result of a reduction.
- */
- while (eval) {
- switch (b->expr[state].type) {
- case _URE_SYMBOL:
- ns1 = _ure_make_expr(_URE_ONE, _URE_NOOP, _URE_NOOP, b);
- _ure_add_symstate(b->expr[state].lhs, ns1, b);
- syms++;
- eval = 0;
- break;
- case _URE_ONE:
- sp->accepting = 1;
- eval = 0;
- break;
- case _URE_QUEST:
- s1 = b->expr[state].lhs;
- ns1 = _ure_make_expr(_URE_ONE, _URE_NOOP, _URE_NOOP, b);
- state = _ure_make_expr(_URE_OR, ns1, s1, b);
- break;
- case _URE_PLUS:
- s1 = b->expr[state].lhs;
- ns1 = _ure_make_expr(_URE_STAR, s1, _URE_NOOP, b);
- state = _ure_make_expr(_URE_AND, s1, ns1, b);
- break;
- case _URE_STAR:
- s1 = b->expr[state].lhs;
- ns1 = _ure_make_expr(_URE_ONE, _URE_NOOP, _URE_NOOP, b);
- ns2 = _ure_make_expr(_URE_PLUS, s1, _URE_NOOP, b);
- state = _ure_make_expr(_URE_OR, ns1, ns2, b);
- break;
- case _URE_OR:
- s1 = b->expr[state].lhs;
- s2 = b->expr[state].rhs;
- _ure_push(s1, b);
- _ure_push(s2, b);
- eval = 0;
- break;
- case _URE_AND:
- s1 = b->expr[state].lhs;
- s2 = b->expr[state].rhs;
- switch (b->expr[s1].type) {
- case _URE_SYMBOL:
- _ure_add_symstate(b->expr[s1].lhs, s2, b);
- syms++;
- eval = 0;
- break;
- case _URE_ONE:
- state = s2;
- break;
- case _URE_QUEST:
- ns1 = b->expr[s1].lhs;
- ns2 = _ure_make_expr(_URE_AND, ns1, s2, b);
- state = _ure_make_expr(_URE_OR, s2, ns2, b);
- break;
- case _URE_PLUS:
- ns1 = b->expr[s1].lhs;
- ns2 = _ure_make_expr(_URE_OR, s2, state, b);
- state = _ure_make_expr(_URE_AND, ns1, ns2, b);
- break;
- case _URE_STAR:
- ns1 = b->expr[s1].lhs;
- ns2 = _ure_make_expr(_URE_AND, ns1, state, b);
- state = _ure_make_expr(_URE_OR, s2, ns2, b);
- break;
- case _URE_OR:
- ns1 = b->expr[s1].lhs;
- ns2 = b->expr[s1].rhs;
- ns1 = _ure_make_expr(_URE_AND, ns1, s2, b);
- ns2 = _ure_make_expr(_URE_AND, ns2, s2, b);
- state = _ure_make_expr(_URE_OR, ns1, ns2, b);
- break;
- case _URE_AND:
- ns1 = b->expr[s1].lhs;
- ns2 = b->expr[s1].rhs;
- ns2 = _ure_make_expr(_URE_AND, ns2, s2, b);
- state = _ure_make_expr(_URE_AND, ns1, ns2, b);
- break;
- }
- }
- }
- }
-
- /*
- * Clear the state stack.
- */
- while (_ure_pop(b) != _URE_NOOP) ;
-
- /*
- * Reset the state pointer because the reduction may have moved it
- * during a reallocation.
- */
- sp = b->states.states + i;
-
- /*
- * Generate the DFA states for the symbols collected during the
- * current reduction.
- */
- if (sp->trans_used + syms > sp->trans_size) {
- if (sp->trans_size == 0)
- sp->trans = (_ure_elt_t *)
- malloc(sizeof(_ure_elt_t) * (sp->trans_used + syms));
- else
- sp->trans = (_ure_elt_t *)
- realloc((char *) sp->trans,
- sizeof(_ure_elt_t) * (sp->trans_used + syms));
- sp->trans_size = sp->trans_used + syms;
- }
-
- /*
- * Go through the symbol table and generate the DFA state transitions
- * for each symbol that has collected NFA states.
- */
- for (j = syms = 0, smp = b->symtab; j < b->symtab_used; j++, smp++) {
- sp = b->states.states + i;
-
- if (smp->states.slist_used > 0) {
- sp->trans[syms].lhs = smp->id;
- rhs = _ure_add_state(smp->states.slist_used,
- smp->states.slist, b);
- /*
- * Reset the state pointer in case the reallocation moves it
- * in memory.
- */
- sp = b->states.states + i;
- sp->trans[syms].rhs = rhs;
-
- smp->states.slist_used = 0;
- syms++;
- }
- }
-
- /*
- * Set the number of transitions actually used.
- */
- sp->trans_used = syms;
- }
- b->reducing = 0;
-}
-
-static void
-_ure_add_equiv(ucs2_t l, ucs2_t r, _ure_buffer_t *b)
-{
- ucs2_t tmp;
-
- l = b->states.states[l].id;
- r = b->states.states[r].id;
-
- if (l == r)
- return;
-
- if (l > r) {
- tmp = l;
- l = r;
- r = tmp;
- }
-
- /*
- * Check to see if the equivalence pair already exists.
- */
- for (tmp = 0; tmp < b->equiv_used &&
- (b->equiv[tmp].l != l || b->equiv[tmp].r != r);
- tmp++) ;
-
- if (tmp < b->equiv_used)
- return;
-
- if (b->equiv_used == b->equiv_size) {
- if (b->equiv_size == 0)
- b->equiv = (_ure_equiv_t *) malloc(sizeof(_ure_equiv_t) << 3);
- else
- b->equiv = (_ure_equiv_t *) realloc((char *) b->equiv,
- sizeof(_ure_equiv_t) *
- (b->equiv_size + 8));
- b->equiv_size += 8;
- }
- b->equiv[b->equiv_used].l = l;
- b->equiv[b->equiv_used].r = r;
- b->equiv_used++;
-}
-
-/*
- * Merge the DFA states that are equivalent.
- */
-static void
-_ure_merge_equiv(_ure_buffer_t *b)
-{
- ucs2_t i, j, k, eq, done;
- _ure_state_t *sp1, *sp2, *ls, *rs;
-
- for (i = 0; i < b->states.states_used; i++) {
- sp1 = b->states.states + i;
- if (sp1->id != i)
- continue;
- for (j = 0; j < i; j++) {
- sp2 = b->states.states + j;
- if (sp2->id != j)
- continue;
- b->equiv_used = 0;
- _ure_add_equiv(i, j, b);
- for (eq = 0, done = 0; eq < b->equiv_used; eq++) {
- ls = b->states.states + b->equiv[eq].l;
- rs = b->states.states + b->equiv[eq].r;
- if (ls->accepting != rs->accepting ||
- ls->trans_used != rs->trans_used) {
- done = 1;
- break;
- }
- for (k = 0; k < ls->trans_used &&
- ls->trans[k].lhs == rs->trans[k].lhs; k++) ;
- if (k < ls->trans_used) {
- done = 1;
- break;
- }
-
- for (k = 0; k < ls->trans_used; k++)
- _ure_add_equiv(ls->trans[k].rhs, rs->trans[k].rhs, b);
- }
- if (done == 0)
- break;
- }
- for (eq = 0; j < i && eq < b->equiv_used; eq++)
- b->states.states[b->equiv[eq].r].id =
- b->states.states[b->equiv[eq].l].id;
- }
-
- /*
- * Renumber the states appropriately.
- */
- for (i = eq = 0, sp1 = b->states.states; i < b->states.states_used;
- sp1++, i++)
- sp1->id = (sp1->id == i) ? eq++ : b->states.states[sp1->id].id;
-}
-
-/*************************************************************************
- *
- * API.
- *
- *************************************************************************/
-
-ure_buffer_t
-ure_buffer_create(void)
-{
- ure_buffer_t b;
-
- b = (ure_buffer_t) calloc(1, sizeof(_ure_buffer_t));
-
- return b;
-}
-
-void
-ure_buffer_free(ure_buffer_t buf)
-{
- unsigned long i;
-
- if (buf == 0)
- return;
-
- if (buf->stack.slist_size > 0)
- free((char *) buf->stack.slist);
-
- if (buf->expr_size > 0)
- free((char *) buf->expr);
-
- for (i = 0; i < buf->symtab_size; i++) {
- if (buf->symtab[i].states.slist_size > 0)
- free((char *) buf->symtab[i].states.slist);
- }
-
- if (buf->symtab_size > 0)
- free((char *) buf->symtab);
-
- for (i = 0; i < buf->states.states_size; i++) {
- if (buf->states.states[i].trans_size > 0)
- free((char *) buf->states.states[i].trans);
- if (buf->states.states[i].st.slist_size > 0)
- free((char *) buf->states.states[i].st.slist);
- }
-
- if (buf->states.states_size > 0)
- free((char *) buf->states.states);
-
- if (buf->equiv_size > 0)
- free((char *) buf->equiv);
-
- free((char *) buf);
-}
-
-ure_dfa_t
-ure_compile(ucs2_t *re, unsigned long relen, int casefold, ure_buffer_t buf)
-{
- ucs2_t i, j, state;
- _ure_state_t *sp;
- _ure_dstate_t *dsp;
- _ure_trans_t *tp;
- ure_dfa_t dfa;
-
- if (re == 0 || *re == 0 || relen == 0 || buf == 0)
- return 0;
-
- /*
- * Reset the various fields of the compilation buffer. Default the flags
- * to indicate the presense of the "^$" pattern. If any other pattern
- * occurs, then this flag will be removed. This is done to catch this
- * special pattern and handle it specially when matching.
- */
- buf->flags = _URE_DFA_BLANKLINE | ((casefold) ? _URE_DFA_CASEFOLD : 0);
- buf->reducing = 0;
- buf->stack.slist_used = 0;
- buf->expr_used = 0;
-
- for (i = 0; i < buf->symtab_used; i++)
- buf->symtab[i].states.slist_used = 0;
- buf->symtab_used = 0;
-
- for (i = 0; i < buf->states.states_used; i++) {
- buf->states.states[i].st.slist_used = 0;
- buf->states.states[i].trans_used = 0;
- }
- buf->states.states_used = 0;
-
- /*
- * Construct the NFA. If this stage returns a 0, then an error occurred or
- * an empty expression was passed.
- */
- if ((state = _ure_re2nfa(re, relen, buf)) == _URE_NOOP)
- return 0;
-
- /*
- * Do the expression reduction to get the initial DFA.
- */
- _ure_reduce(state, buf);
-
- /*
- * Merge all the equivalent DFA states.
- */
- _ure_merge_equiv(buf);
-
- /*
- * Construct the minimal DFA.
- */
- dfa = (ure_dfa_t) malloc(sizeof(_ure_dfa_t));
- (void) memset((char *) dfa, '\0', sizeof(_ure_dfa_t));
-
- dfa->flags = buf->flags & (_URE_DFA_CASEFOLD|_URE_DFA_BLANKLINE);
-
- /*
- * Free up the NFA state groups and transfer the symbols from the buffer
- * to the DFA.
- */
- for (i = 0; i < buf->symtab_size; i++) {
- if (buf->symtab[i].states.slist_size > 0)
- free((char *) buf->symtab[i].states.slist);
- }
- dfa->syms = buf->symtab;
- dfa->nsyms = buf->symtab_used;
-
- buf->symtab_used = buf->symtab_size = 0;
-
- /*
- * Collect the total number of states and transitions needed for the DFA.
- */
- for (i = state = 0, sp = buf->states.states; i < buf->states.states_used;
- i++, sp++) {
- if (sp->id == state) {
- dfa->nstates++;
- dfa->ntrans += sp->trans_used;
- state++;
- }
- }
-
- /*
- * Allocate enough space for the states and transitions.
- */
- dfa->states = (_ure_dstate_t *) malloc(sizeof(_ure_dstate_t) *
- dfa->nstates);
- dfa->trans = (_ure_trans_t *) malloc(sizeof(_ure_trans_t) * dfa->ntrans);
-
- /*
- * Actually transfer the DFA states from the buffer.
- */
- dsp = dfa->states;
- tp = dfa->trans;
- for (i = state = 0, sp = buf->states.states; i < buf->states.states_used;
- i++, sp++) {
- if (sp->id == state) {
- dsp->trans = tp;
- dsp->ntrans = sp->trans_used;
- dsp->accepting = sp->accepting;
-
- /*
- * Add the transitions for the state.
- */
- for (j = 0; j < dsp->ntrans; j++, tp++) {
- tp->symbol = sp->trans[j].lhs;
- tp->next_state = buf->states.states[sp->trans[j].rhs].id;
- }
-
- dsp++;
- state++;
- }
- }
-
- return dfa;
-}
-
-void
-ure_dfa_free(ure_dfa_t dfa)
-{
- ucs2_t i;
-
- if (dfa == 0)
- return;
-
- for (i = 0; i < dfa->nsyms; i++) {
- if ((dfa->syms[i].type == _URE_CCLASS ||
- dfa->syms[i].type == _URE_NCCLASS) &&
- dfa->syms[i].sym.ccl.ranges_size > 0)
- free((char *) dfa->syms[i].sym.ccl.ranges);
- }
- if (dfa->nsyms > 0)
- free((char *) dfa->syms);
-
- if (dfa->nstates > 0)
- free((char *) dfa->states);
- if (dfa->ntrans > 0)
- free((char *) dfa->trans);
- free((char *) dfa);
-}
-
-void
-ure_write_dfa(ure_dfa_t dfa, FILE *out)
-{
- ucs2_t i, j, k, h, l;
- _ure_dstate_t *sp;
- _ure_symtab_t *sym;
- _ure_range_t *rp;
-
- if (dfa == 0 || out == 0)
- return;
-
- /*
- * Write all the different character classes.
- */
- for (i = 0, sym = dfa->syms; i < dfa->nsyms; i++, sym++) {
- if (sym->type == _URE_CCLASS || sym->type == _URE_NCCLASS) {
- fprintf(out, "C%hd = ", sym->id);
- if (sym->sym.ccl.ranges_used > 0) {
- putc('[', out);
- if (sym->type == _URE_NCCLASS)
- putc('^', out);
- }
- if (sym->props != 0) {
- if (sym->type == _URE_NCCLASS)
- fprintf(out, "\\P");
- else
- fprintf(out, "\\p");
- for (k = h = 0; k < 32; k++) {
- if (sym->props & (1 << k)) {
- if (h != 0)
- putc(',', out);
- fprintf(out, "%d", k + 1);
- h = 1;
- }
- }
- }
- /*
- * Dump the ranges.
- */
- for (k = 0, rp = sym->sym.ccl.ranges;
- k < sym->sym.ccl.ranges_used; k++, rp++) {
- /*
- * Check for UTF16 characters.
- */
- if (0x10000 <= rp->min_code &&
- rp->min_code <= 0x10ffff) {
- h = (ucs2_t) (((rp->min_code - 0x10000) >> 10) + 0xd800);
- l = (ucs2_t) (((rp->min_code - 0x10000) & 1023) + 0xdc00);
- fprintf(out, "\\x%04hX\\x%04hX", h, l);
- } else
- fprintf(out, "\\x%04lX",
- (unsigned long)(rp->min_code & 0xffff));
- if (rp->max_code != rp->min_code) {
- putc('-', out);
- if (rp->max_code >= 0x10000 &&
- rp->max_code <= 0x10ffff) {
- h = (ucs2_t) (((rp->max_code - 0x10000) >> 10) + 0xd800);
- l = (ucs2_t) (((rp->max_code - 0x10000) & 1023) + 0xdc00);
- fprintf(out, "\\x%04hX\\x%04hX", h, l);
- } else
- fprintf(out, "\\x%04lX",
- (unsigned long)(rp->max_code & 0xffff));
- }
- }
- if (sym->sym.ccl.ranges_used > 0)
- putc(']', out);
- putc('\n', out);
- }
- }
-
- for (i = 0, sp = dfa->states; i < dfa->nstates; i++, sp++) {
- fprintf(out, "S%hd = ", i);
- if (sp->accepting) {
- fprintf(out, "1 ");
- if (sp->ntrans)
- fprintf(out, "| ");
- }
- for (j = 0; j < sp->ntrans; j++) {
- if (j > 0)
- fprintf(out, "| ");
-
- sym = dfa->syms + sp->trans[j].symbol;
- switch (sym->type) {
- case _URE_CHAR:
- if (0x10000 <= sym->sym.chr && sym->sym.chr <= 0x10ffff) {
- /*
- * Take care of UTF16 characters.
- */
- h = (ucs2_t) (((sym->sym.chr - 0x10000) >> 10) + 0xd800);
- l = (ucs2_t) (((sym->sym.chr - 0x10000) & 1023) + 0xdc00);
- fprintf(out, "\\x%04hX\\x%04hX ", h, l);
- } else
- fprintf(out, "\\x%04lX ",
- (unsigned long)(sym->sym.chr & 0xffff));
- break;
- case _URE_ANY_CHAR:
- fprintf(out, "<any> ");
- break;
- case _URE_BOL_ANCHOR:
- fprintf(out, "<bol-anchor> ");
- break;
- case _URE_EOL_ANCHOR:
- fprintf(out, "<eol-anchor> ");
- break;
- case _URE_CCLASS:
- case _URE_NCCLASS:
- fprintf(out, "[C%hd] ", sym->id);
- break;
- }
- fprintf(out, "S%hd", sp->trans[j].next_state);
- if (j + 1 < sp->ntrans)
- putc(' ', out);
- }
- putc('\n', out);
- }
-}
-
-#define _ure_issep(cc) ((cc) == '\n' || (cc) == '\r' || (cc) == 0x2028 ||\
- (cc) == 0x2029)
-
-int
-ure_exec(ure_dfa_t dfa, int flags, ucs2_t *text, unsigned long textlen,
- unsigned long *match_start, unsigned long *match_end)
-{
- int i, j, matched, found;
- unsigned long ms, me;
- ucs4_t c;
- ucs2_t *sp, *ep, *lp;
- _ure_dstate_t *stp;
- _ure_symtab_t *sym;
- _ure_range_t *rp;
-
- if (dfa == 0 || text == 0)
- return 0;
-
- /*
- * Handle the special case of an empty string matching the "^$" pattern.
- */
- if (textlen == 0 && (dfa->flags & _URE_DFA_BLANKLINE)) {
- *match_start = *match_end = 0;
- return 1;
- }
-
- sp = text;
- ep = sp + textlen;
-
- ms = me = ~0;
-
- stp = dfa->states;
-
- for (found = 0; found == 0 && sp < ep; ) {
- lp = sp;
- c = *sp++;
-
- /*
- * Check to see if this is a high surrogate that should be
- * combined with a following low surrogate.
- */
- if (sp < ep && 0xd800 <= c && c <= 0xdbff &&
- 0xdc00 <= *sp && *sp <= 0xdfff)
- c = 0x10000 + (((c & 0x03ff) << 10) | (*sp++ & 0x03ff));
-
- /*
- * Determine if the character is non-spacing and should be skipped.
- */
- if (_ure_matches_properties(_URE_NONSPACING, c) &&
- (flags & URE_IGNORE_NONSPACING)) {
- sp++;
- continue;
- }
-
- if (dfa->flags & _URE_DFA_CASEFOLD)
- c = _ure_tolower(c);
-
- /*
- * See if one of the transitions matches.
- */
- for (i = 0, matched = 0; matched == 0 && i < stp->ntrans; i++) {
- sym = dfa->syms + stp->trans[i].symbol;
- switch (sym->type) {
- case _URE_ANY_CHAR:
- if ((flags & URE_DOT_MATCHES_SEPARATORS) ||
- !_ure_issep(c))
- matched = 1;
- break;
- case _URE_CHAR:
- if (c == sym->sym.chr)
- matched = 1;
- break;
- case _URE_BOL_ANCHOR:
- if (lp == text) {
- sp = lp;
- matched = 1;
- } else if (_ure_issep(c)) {
- if (c == '\r' && sp < ep && *sp == '\n')
- sp++;
- lp = sp;
- matched = 1;
- }
- break;
- case _URE_EOL_ANCHOR:
- if (_ure_issep(c)) {
- /*
- * Put the pointer back before the separator so the match
- * end position will be correct. This case will also
- * cause the `sp' pointer to be advanced over the current
- * separator once the match end point has been recorded.
- */
- sp = lp;
- matched = 1;
- }
- break;
- case _URE_CCLASS:
- case _URE_NCCLASS:
- if (sym->props != 0)
- matched = _ure_matches_properties(sym->props, c);
- for (j = 0, rp = sym->sym.ccl.ranges;
- j < sym->sym.ccl.ranges_used; j++, rp++) {
- if (rp->min_code <= c && c <= rp->max_code)
- matched = 1;
- }
- if (sym->type == _URE_NCCLASS)
- matched = !matched;
- break;
- }
-
- if (matched) {
- if (ms == ~0UL)
- ms = lp - text;
- else
- me = sp - text;
- stp = dfa->states + stp->trans[i].next_state;
-
- /*
- * If the match was an EOL anchor, adjust the pointer past the
- * separator that caused the match. The correct match
- * position has been recorded already.
- */
- if (sym->type == _URE_EOL_ANCHOR) {
- /*
- * Skip the character that caused the match.
- */
- sp++;
-
- /*
- * Handle the infamous CRLF situation.
- */
- if (sp < ep && c == '\r' && *sp == '\n')
- sp++;
- }
- }
- }
-
- if (matched == 0) {
- if (stp->accepting == 0) {
- /*
- * If the last state was not accepting, then reset
- * and start over.
- */
- stp = dfa->states;
- ms = me = ~0;
- } else
- /*
- * The last state was accepting, so terminate the matching
- * loop to avoid more work.
- */
- found = 1;
- } else if (sp == ep) {
- if (!stp->accepting) {
- /*
- * This ugly hack is to make sure the end-of-line anchors
- * match when the source text hits the end. This is only done
- * if the last subexpression matches.
- */
- for (i = 0; found == 0 && i < stp->ntrans; i++) {
- sym = dfa->syms + stp->trans[i].symbol;
- if (sym->type ==_URE_EOL_ANCHOR) {
- stp = dfa->states + stp->trans[i].next_state;
- if (stp->accepting) {
- me = sp - text;
- found = 1;
- } else
- break;
- }
- }
- } else {
- /*
- * Make sure any conditions that match all the way to the end
- * of the string match.
- */
- found = 1;
- me = sp - text;
- }
- }
- }
-
- if (found == 0)
- ms = me = ~0;
-
- *match_start = ms;
- *match_end = me;
-
- return (ms != ~0UL) ? 1 : 0;
-}
+++ /dev/null
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <http://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <http://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/ure/ure.h,v 1.15 2008/01/07 23:20:05 kurt Exp $
- * $Id: ure.h,v 1.2 1999/09/21 15:47:44 mleisher Exp $
- */
-
-#ifndef _h_ure
-#define _h_ure
-
-#include "k5-int.h"
-
-#include <stdio.h>
-
-/*
- * Set of character class flags.
- */
-#define _URE_NONSPACING 0x00000001
-#define _URE_COMBINING 0x00000002
-#define _URE_NUMDIGIT 0x00000004
-#define _URE_NUMOTHER 0x00000008
-#define _URE_SPACESEP 0x00000010
-#define _URE_LINESEP 0x00000020
-#define _URE_PARASEP 0x00000040
-#define _URE_CNTRL 0x00000080
-#define _URE_PUA 0x00000100
-
-#define _URE_UPPER 0x00000200
-#define _URE_LOWER 0x00000400
-#define _URE_TITLE 0x00000800
-#define _URE_MODIFIER 0x00001000
-#define _URE_OTHERLETTER 0x00002000
-#define _URE_DASHPUNCT 0x00004000
-#define _URE_OPENPUNCT 0x00008000
-#define _URE_CLOSEPUNCT 0x00010000
-#define _URE_OTHERPUNCT 0x00020000
-#define _URE_MATHSYM 0x00040000
-#define _URE_CURRENCYSYM 0x00080000
-#define _URE_OTHERSYM 0x00100000
-
-#define _URE_LTR 0x00200000
-#define _URE_RTL 0x00400000
-
-#define _URE_EURONUM 0x00800000
-#define _URE_EURONUMSEP 0x01000000
-#define _URE_EURONUMTERM 0x02000000
-#define _URE_ARABNUM 0x04000000
-#define _URE_COMMONSEP 0x08000000
-
-#define _URE_BLOCKSEP 0x10000000
-#define _URE_SEGMENTSEP 0x20000000
-
-#define _URE_WHITESPACE 0x40000000
-#define _URE_OTHERNEUT 0x80000000
-
-/*
- * Error codes.
- */
-#define _URE_OK 0
-#define _URE_UNEXPECTED_EOS -1
-#define _URE_CCLASS_OPEN -2
-#define _URE_UNBALANCED_GROUP -3
-#define _URE_INVALID_PROPERTY -4
-
-/*
- * Options that can be combined for searching.
- */
-#define URE_IGNORE_NONSPACING 0x01
-#define URE_DOT_MATCHES_SEPARATORS 0x02
-
-typedef krb5_ui_4 ucs4_t;
-typedef krb5_ui_2 ucs2_t;
-
-/*
- * Opaque type for memory used when compiling expressions.
- */
-typedef struct _ure_buffer_t *ure_buffer_t;
-
-/*
- * Opaque type for the minimal DFA used when matching.
- */
-typedef struct _ure_dfa_t *ure_dfa_t;
-
-/*************************************************************************
- *
- * API.
- *
- *************************************************************************/
-
-ure_buffer_t ure_buffer_create (void);
-
-void ure_buffer_free (ure_buffer_t buf);
-
-ure_dfa_t
-ure_compile (ucs2_t *re, unsigned long relen,
- int casefold, ure_buffer_t buf);
-
-void ure_dfa_free (ure_dfa_t dfa);
-
-void ure_write_dfa (ure_dfa_t dfa, FILE *out);
-
-int
-ure_exec (ure_dfa_t dfa, int flags, ucs2_t *text,
- unsigned long textlen, unsigned long *match_start,
- unsigned long *match_end);
-
-/*************************************************************************
- *
- * Prototypes for stub functions used for URE. These need to be rewritten to
- * use the Unicode support available on the system.
- *
- *************************************************************************/
-
-ucs4_t _ure_tolower (ucs4_t c);
-
-int
-_ure_matches_properties (unsigned long props, ucs4_t c);
-
-#endif /* _h_ure */
+++ /dev/null
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/*
- * Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/ure/urestubs.c,v 1.16 2008/01/07 23:20:05 kurt Exp $
- * $Id: urestubs.c,v 1.2 1999/09/21 15:47:44 mleisher Exp $"
- */
-
-#include "k5-int.h"
-
-#include "ure.h"
-
-#include "ucdata.h"
-
-/*
- * This file contains stub routines needed by the URE package to test
- * character properties and other Unicode implementation specific details.
- */
-
-/*
- * This routine should return the lower case equivalent for the character or,
- * if there is no lower case quivalent, the character itself.
- */
-ucs4_t _ure_tolower(ucs4_t c)
-{
- return uctoupper(c);
-}
-
-static struct ucmaskmap {
- unsigned long mask1;
- unsigned long mask2;
-} masks[32] = {
- { UC_MN, 0 }, /* _URE_NONSPACING */
- { UC_MC, 0 }, /* _URE_COMBINING */
- { UC_ND, 0 }, /* _URE_NUMDIGIT */
- { UC_NL|UC_NO, 0 }, /* _URE_NUMOTHER */
- { UC_ZS, 0 }, /* _URE_SPACESEP */
- { UC_ZL, 0 }, /* _URE_LINESEP */
- { UC_ZP, 0 }, /* _URE_PARASEP */
- { UC_CC, 0 }, /* _URE_CNTRL */
- { UC_CO, 0 }, /* _URE_PUA */
-
- { UC_LU, 0 }, /* _URE_UPPER */
- { UC_LL, 0 }, /* _URE_LOWER */
- { UC_LT, 0 }, /* _URE_TITLE */
- { UC_LM, 0 }, /* _URE_MODIFIER */
- { UC_LO, 0 }, /* _URE_OTHERLETTER */
- { UC_PD, 0 }, /* _URE_DASHPUNCT */
- { UC_PS, 0 }, /* _URE_OPENPUNCT */
- { UC_PC, 0 }, /* _URE_CLOSEPUNCT */
- { UC_PO, 0 }, /* _URE_OTHERPUNCT */
- { UC_SM, 0 }, /* _URE_MATHSYM */
- { UC_SC, 0 }, /* _URE_CURRENCYSYM */
- { UC_SO, 0 }, /* _URE_OTHERSYM */
-
- { UC_L, 0 }, /* _URE_LTR */
- { UC_R, 0 }, /* _URE_RTL */
-
- { 0, UC_EN }, /* _URE_EURONUM */
- { 0, UC_ES }, /* _URE_EURONUMSEP */
- { 0, UC_ET }, /* _URE_EURONUMTERM */
- { 0, UC_AN }, /* _URE_ARABNUM */
- { 0, UC_CS }, /* _URE_COMMONSEP */
-
- { 0, UC_B }, /* _URE_BLOCKSEP */
- { 0, UC_S }, /* _URE_SEGMENTSEP */
-
- { 0, UC_WS }, /* _URE_WHITESPACE */
- { 0, UC_ON } /* _URE_OTHERNEUT */
-};
-
-
-/*
- * This routine takes a set of URE character property flags (see ure.h) along
- * with a character and tests to see if the character has one or more of those
- * properties.
- */
-int
-_ure_matches_properties(unsigned long props, ucs4_t c)
-{
- int i;
- unsigned long mask1=0, mask2=0;
-
- for( i=0; i<32; i++ ) {
- if( props & (1 << i) ) {
- mask1 |= masks[i].mask1;
- mask2 |= masks[i].mask2;
- }
- }
-
- return ucisprop( mask1, mask2, c );
-}
+++ /dev/null
-#
-# $Id: README,v 1.1 1999/09/21 15:45:17 mleisher Exp $
-#
-# Copyright 1997, 1998, 1999 Computing Research Labs,
-# New Mexico State University
-#
-# Permission is hereby granted, free of charge, to any person obtaining a
-# copy of this software and associated documentation files (the "Software"),
-# to deal in the Software without restriction, including without limitation
-# the rights to use, copy, modify, merge, publish, distribute, sublicense,
-# and/or sell copies of the Software, and to permit persons to whom the
-# Software is furnished to do so, subject to the following conditions:
-#
-# The above copyright notice and this permission notice shall be included in
-# all copies or substantial portions of the Software.
-#
-# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
-# THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
-# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
-# OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
-# THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-#
-
- Unicode and Boyer-Moore Searching
- Version 0.2
-
-UTBM (Unicode Tuned Boyer-Moore) is a simple package that provides tuned
-Boyer-Moore searches on Unicode UCS2 text (handles high and low surrogates).
-
----------------------------------------------------------------------------
-
-Assumptions:
-
- o Search pattern and text already normalized in some fasion.
-
- o Upper, lower, and title case conversions are one-to-one.
-
- o For conversions between upper, lower, and title case, UCS2 characters
- always convert to other UCS2 characters, and UTF-16 characters always
- convert to other UTF-16 characters.
-
-Flags:
-
- UTBM provides three processing flags:
-
- o UTBM_CASEFOLD - search in a case-insensitive manner.
-
- o UTBM_IGNORE_NONSPACING - ignore non-spacing characters in the pattern and
- the text.
-
- o UTBM_SPACE_COMPRESS - view as a *single space*, sequential groups of
- U+2028, U+2029, '\n', '\r', '\t', and any
- character identified as a space by the Unicode
- support on the platform.
-
- This flag also causes all characters identified
- as control by the Unicode support on the
- platform to be ignored (except for '\n', '\r',
- and '\t').
-
----------------------------------------------------------------------------
-
-Before using UTBM
------------------
-Before UTBM is used, some functions need to be created. The "utbmstub.c" file
-contains stubs that need to be rewritten so they work with the Unicode support
-on the platform on which this package is being used.
-
-Using UTBM
-----------
-
-Sample pseudo-code fragment.
-
- utbm_pattern_t pat;
- ucs2_t *pattern, *text;
- unsigned long patternlen, textlen;
- unsigned long flags, match_start, match_end;
-
- /*
- * Allocate the dynamic storage needed for a search pattern.
- */
- pat = utbm_create_pattern();
-
- /*
- * Set the search flags desired.
- */
- flags = UTBM_CASEFOLD|UTBM_IGNORE_NONSPACING;
-
- /*
- * Compile the search pattern.
- */
- utbm_compile(pattern, patternlen, flags, pat);
-
- /*
- * Find the first occurance of the search pattern in the text.
- */
- if (utbm_exec(pat, text, textlen, &match_start, &match_end))
- printf("MATCH: %ld %ld\n", match_start, match_end);
-
- /*
- * Free the dynamic storage used for the search pattern.
- */
- ure_free_pattern(pat);
-
----------------------------------------------------------------------------
-
-Mark Leisher <mleisher@crl.nmsu.edu>
-2 May 1997
-
-===========================================================================
-
-CHANGES
--------
-
-Version: 0.2
-Date : 21 September 1999
-==========================
- 1. Added copyright stuff and put in CVS.
-
+++ /dev/null
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/utbm/utbm.c,v 1.9 2008/01/07 23:20:05 kurt Exp $
- * $Id: utbm.c,v 1.1 1999/09/21 15:45:17 mleisher Exp $
- */
-
-/*
- * Assumptions:
- * 1. Case conversions of UTF-16 characters must also be UTF-16 characters.
- * 2. Case conversions are all one-to-one.
- * 3. Text and pattern have already been normalized in some fashion.
- */
-
-#include <stdlib.h>
-#include <unistd.h>
-#include <string.h>
-#include "utbm.h"
-
-/*
- * Single pattern character.
- */
-typedef struct {
- ucs4_t lc;
- ucs4_t uc;
- ucs4_t tc;
-} _utbm_char_t;
-
-typedef struct {
- _utbm_char_t *ch;
- unsigned long skip;
-} _utbm_skip_t;
-
-typedef struct _utbm_pattern_t {
- unsigned long flags;
-
- _utbm_char_t *pat;
- unsigned long pat_used;
- unsigned long pat_size;
- unsigned long patlen;
-
- _utbm_skip_t *skip;
- unsigned long skip_used;
- unsigned long skip_size;
-
- unsigned long md4;
-} _utbm_pattern_t;
-
-/*************************************************************************
- *
- * Support functions.
- *
- *************************************************************************/
-
-/*
- * Routine to look up the skip value for a character.
- */
-static unsigned long
-_utbm_skip(utbm_pattern_t p, ucs2_t *start, ucs2_t *end)
-{
- unsigned long i;
- ucs4_t c1, c2;
- _utbm_skip_t *sp;
-
- if (start >= end)
- return 0;
-
- c1 = *start;
- c2 = (start + 1 < end) ? *(start + 1) : ~0;
- if (0xd800 <= c1 && c1 <= 0xdbff && 0xdc00 <= c2 && c2 <= 0xdfff)
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
-
- for (i = 0, sp = p->skip; i < p->skip_used; i++, sp++) {
- if (!((c1 ^ sp->ch->uc) & (c1 ^ sp->ch->lc) & (c1 ^ sp->ch->tc))) {
- return ((unsigned long) (end - start) < sp->skip) ?
- end - start : sp->skip;
- }
- }
- return p->patlen;
-}
-
-static int
-_utbm_match(utbm_pattern_t pat, ucs2_t *text, ucs2_t *start, ucs2_t *end,
- unsigned long *match_start, unsigned long *match_end)
-{
- int check_space;
- ucs4_t c1, c2;
- unsigned long count;
- _utbm_char_t *cp;
-
- /*
- * Set the potential match endpoint first.
- */
- *match_end = (start - text) + 1;
-
- c1 = *start;
- c2 = (start + 1 < end) ? *(start + 1) : ~0;
- if (0xd800 <= c1 && c1 <= 0xdbff && 0xdc00 <= c2 && c2 <= 0xdfff) {
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
- /*
- * Adjust the match end point to occur after the UTF-16 character.
- */
- *match_end = *match_end + 1;
- }
-
- if (pat->pat_used == 1) {
- *match_start = start - text;
- return 1;
- }
-
- /*
- * Compare backward.
- */
- cp = pat->pat + (pat->pat_used - 1);
-
- for (count = pat->patlen; start > text && count > 0;) {
- /*
- * Ignore non-spacing characters if indicated.
- */
- if (pat->flags & UTBM_IGNORE_NONSPACING) {
- while (start > text && _utbm_nonspacing(c1)) {
- c2 = *--start;
- c1 = (start - 1 > text) ? *(start - 1) : ~0;
- if (0xdc00 <= c2 && c2 <= 0xdfff &&
- 0xd800 <= c1 && c1 <= 0xdbff) {
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
- start--;
- } else
- c1 = c2;
- }
- }
-
- /*
- * Handle space compression if indicated.
- */
- if (pat->flags & UTBM_SPACE_COMPRESS) {
- check_space = 0;
- while (start > text &&
- (_utbm_isspace(c1, 1) || _utbm_iscntrl(c1))) {
- check_space = _utbm_isspace(c1, 1);
- c2 = *--start;
- c1 = (start - 1 > text) ? *(start - 1) : ~0;
- if (0xdc00 <= c2 && c2 <= 0xdfff &&
- 0xd800 <= c1 && c1 <= 0xdbff) {
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
- start--;
- } else
- c1 = c2;
- }
- /*
- * Handle things if space compression was indicated and one or
- * more member characters were found.
- */
- if (check_space) {
- if (cp->uc != ' ')
- return 0;
- cp--;
- count--;
- }
- }
-
- /*
- * Handle the normal comparison cases.
- */
- if (count > 0 && ((c1 ^ cp->uc) & (c1 ^ cp->lc) & (c1 ^ cp->tc)))
- return 0;
-
- count -= (c1 >= 0x10000) ? 2 : 1;
- if (count > 0) {
- cp--;
-
- /*
- * Get the next preceding character.
- */
- if (start > text) {
- c2 = *--start;
- c1 = (start - 1 > text) ? *(start - 1) : ~0;
- if (0xdc00 <= c2 && c2 <= 0xdfff &&
- 0xd800 <= c1 && c1 <= 0xdbff) {
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
- start--;
- } else
- c1 = c2;
- }
- }
- }
-
- /*
- * Set the match start position.
- */
- *match_start = start - text;
- return 1;
-}
-
-/*************************************************************************
- *
- * API.
- *
- *************************************************************************/
-
-utbm_pattern_t
-utbm_create_pattern(void)
-{
- utbm_pattern_t p;
-
- p = (utbm_pattern_t) malloc(sizeof(_utbm_pattern_t));
- (void) memset((char *) p, '\0', sizeof(_utbm_pattern_t));
- return p;
-}
-
-void
-utbm_free_pattern(utbm_pattern_t pattern)
-{
- if (pattern == 0)
- return;
-
- if (pattern->pat_size > 0)
- free((char *) pattern->pat);
-
- if (pattern->skip_size > 0)
- free((char *) pattern->skip);
-
- free((char *) pattern);
-}
-
-void
-utbm_compile(ucs2_t *pat, unsigned long patlen, unsigned long flags,
- utbm_pattern_t p)
-{
- int have_space;
- unsigned long i, j, k, slen;
- _utbm_char_t *cp;
- _utbm_skip_t *sp;
- ucs4_t c1, c2, sentinel;
-
- if (p == 0 || pat == 0 || *pat == 0 || patlen == 0)
- return;
-
- /*
- * Reset the pattern buffer.
- */
- p->patlen = p->pat_used = p->skip_used = 0;
-
- /*
- * Set the flags.
- */
- p->flags = flags;
-
- /*
- * Initialize the extra skip flag.
- */
- p->md4 = 1;
-
- /*
- * Allocate more storage if necessary.
- */
- if (patlen > p->pat_size) {
- if (p->pat_size == 0) {
- p->pat = (_utbm_char_t *) malloc(sizeof(_utbm_char_t) * patlen);
- p->skip = (_utbm_skip_t *) malloc(sizeof(_utbm_skip_t) * patlen);
- } else {
- p->pat = (_utbm_char_t *)
- realloc((char *) p->pat, sizeof(_utbm_char_t) * patlen);
- p->skip = (_utbm_skip_t *)
- realloc((char *) p->skip, sizeof(_utbm_skip_t) * patlen);
- }
- p->pat_size = p->skip_size = patlen;
- }
-
- /*
- * Preprocess the pattern to remove controls (if specified) and determine
- * case.
- */
- for (have_space = 0, cp = p->pat, i = 0; i < patlen; i++) {
- c1 = pat[i];
- c2 = (i + 1 < patlen) ? pat[i + 1] : ~0;
- if (0xd800 <= c1 && c1 <= 0xdbff && 0xdc00 <= c2 && c2 <= 0xdfff)
- c1 = 0x10000 + (((c1 & 0x03ff) << 10) | (c2 & 0x03ff));
-
- /*
- * Make sure the `have_space' flag is turned off if the character
- * is not an appropriate one.
- */
- if (!_utbm_isspace(c1, flags & UTBM_SPACE_COMPRESS))
- have_space = 0;
-
- /*
- * If non-spacing characters should be ignored, do it here.
- */
- if ((flags & UTBM_IGNORE_NONSPACING) && _utbm_nonspacing(c1))
- continue;
-
- /*
- * Check if spaces and controls need to be compressed.
- */
- if (flags & UTBM_SPACE_COMPRESS) {
- if (_utbm_isspace(c1, 1)) {
- if (!have_space) {
- /*
- * Add a space and set the flag.
- */
- cp->uc = cp->lc = cp->tc = ' ';
- cp++;
-
- /*
- * Increase the real pattern length.
- */
- p->patlen++;
- sentinel = ' ';
- have_space = 1;
- }
- continue;
- }
-
- /*
- * Ignore all control characters.
- */
- if (_utbm_iscntrl(c1))
- continue;
- }
-
- /*
- * Add the character.
- */
- if (flags & UTBM_CASEFOLD) {
- cp->uc = _utbm_toupper(c1);
- cp->lc = _utbm_tolower(c1);
- cp->tc = _utbm_totitle(c1);
- } else
- cp->uc = cp->lc = cp->tc = c1;
-
- /*
- * Set the sentinel character.
- */
- sentinel = cp->uc;
-
- /*
- * Move to the next character.
- */
- cp++;
-
- /*
- * Increase the real pattern length appropriately.
- */
- p->patlen += (c1 >= 0x10000) ? 2 : 1;
-
- /*
- * Increment the loop index for UTF-16 characters.
- */
- i += (c1 >= 0x10000) ? 1 : 0;
-
- }
-
- /*
- * Set the number of characters actually used.
- */
- p->pat_used = cp - p->pat;
-
- /*
- * Go through and construct the skip array and determine the actual length
- * of the pattern in UCS2 terms.
- */
- slen = p->patlen - 1;
- cp = p->pat;
- for (i = k = 0; i < p->pat_used; i++, cp++) {
- /*
- * Locate the character in the skip array.
- */
- for (sp = p->skip, j = 0;
- j < p->skip_used && sp->ch->uc != cp->uc; j++, sp++) ;
-
- /*
- * If the character is not found, set the new skip element and
- * increase the number of skip elements.
- */
- if (j == p->skip_used) {
- sp->ch = cp;
- p->skip_used++;
- }
-
- /*
- * Set the updated skip value. If the character is UTF-16 and is
- * not the last one in the pattern, add one to its skip value.
- */
- sp->skip = slen - k;
- if (cp->uc >= 0x10000 && k + 2 < slen)
- sp->skip++;
-
- /*
- * Set the new extra skip for the sentinel character.
- */
- if (((cp->uc >= 0x10000 && k + 2 <= slen) || k + 1 <= slen) &&
- cp->uc == sentinel)
- p->md4 = slen - k;
-
- /*
- * Increase the actual index.
- */
- k += (cp->uc >= 0x10000) ? 2 : 1;
- }
-}
-
-int
-utbm_exec(utbm_pattern_t pat, ucs2_t *text, unsigned long textlen,
- unsigned long *match_start, unsigned long *match_end)
-{
- unsigned long k;
- ucs2_t *start, *end;
-
- if (pat == 0 || pat->pat_used == 0 || text == 0 || textlen == 0 ||
- textlen < pat->patlen)
- return 0;
-
- start = text + pat->patlen;
- end = text + textlen;
-
- /*
- * Adjust the start point if it points to a low surrogate.
- */
- if (0xdc00 <= *start && *start <= 0xdfff &&
- 0xd800 <= *(start - 1) && *(start - 1) <= 0xdbff)
- start--;
-
- while (start < end) {
- while ((k = _utbm_skip(pat, start, end))) {
- start += k;
- if (start < end && 0xdc00 <= *start && *start <= 0xdfff &&
- 0xd800 <= *(start - 1) && *(start - 1) <= 0xdbff)
- start--;
- }
-
- if (start < end &&
- _utbm_match(pat, text, start, end, match_start, match_end))
- return 1;
-
- start += pat->md4;
- if (start < end && 0xdc00 <= *start && *start <= 0xdfff &&
- 0xd800 <= *(start - 1) && *(start - 1) <= 0xdbff)
- start--;
- }
- return 0;
-}
+++ /dev/null
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/utbm/utbm.h,v 1.10 2008/01/07 23:20:05 kurt Exp $
- * $Id: utbm.h,v 1.1 1999/09/21 15:45:18 mleisher Exp $
- */
-
-#ifndef _h_utbm
-#define _h_utbm
-
-#include "k5-int.h"
-
-/*************************************************************************
- *
- * Types.
- *
- *************************************************************************/
-
-/*
- * Fundamental character types.
- */
-typedef krb5_ui_4 ucs4_t;
-typedef krb5_ui_2 ucs2_t;
-
-/*
- * An opaque type used for the search pattern.
- */
-typedef struct _utbm_pattern_t *utbm_pattern_t;
-
-/*************************************************************************
- *
- * Flags.
- *
- *************************************************************************/
-
-#define UTBM_CASEFOLD 0x01
-#define UTBM_IGNORE_NONSPACING 0x02
-#define UTBM_SPACE_COMPRESS 0x04
-
-/*************************************************************************
- *
- * API.
- *
- *************************************************************************/
-
-utbm_pattern_t utbm_create_pattern (void);
-
-void utbm_free_pattern (utbm_pattern_t pattern);
-
-void
-utbm_compile (ucs2_t *pat, unsigned long patlen,
- unsigned long flags, utbm_pattern_t pattern);
-
-int
-utbm_exec (utbm_pattern_t pat, ucs2_t *text,
- unsigned long textlen, unsigned long *match_start,
- unsigned long *match_end);
-
-/*************************************************************************
- *
- * Prototypes for the stub functions needed.
- *
- *************************************************************************/
-
-int _utbm_isspace (ucs4_t c, int compress);
-
-int _utbm_iscntrl (ucs4_t c);
-
-int _utbm_nonspacing (ucs4_t c);
-
-ucs4_t _utbm_tolower (ucs4_t c);
-
-ucs4_t _utbm_toupper (ucs4_t c);
-
-ucs4_t _utbm_totitle (ucs4_t c);
-
-#endif /* _h_utbm */
+++ /dev/null
-/*
- * Copyright 1998-2008 The OpenLDAP Foundation.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.
- *
- * A copy of this license is available in file LICENSE in the
- * top-level directory of the distribution or, alternatively, at
- * <https://www.OpenLDAP.org/license.html>.
- */
-/* Copyright 1997, 1998, 1999 Computing Research Labs,
- * New Mexico State University
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY
- * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
- * OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
- * THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- */
-
-/*
- * This work is part of OpenLDAP Software <https://www.openldap.org/>.
- * $OpenLDAP: pkg/ldap/libraries/liblunicode/utbm/utbmstub.c,v 1.8 2008/01/07 23:20:05 kurt Exp $
- * $Id: utbmstub.c,v 1.1 1999/09/21 15:45:18 mleisher Exp $
- */
-
-#include "utbm.h"
-
-/*
- * This should be redefined to use the `isspace' function available in the
- * Unicode support on the platform where this is being used.
- */
-#define _platform_isspace(x) 0
-
-/*
- * Return non-zero for any character that should be considered the equivalent
- * of a space character. Return zero otherwise.
- */
-int
-_utbm_isspace(ucs4_t c, int compress)
-{
- if (compress)
- return (c == 0x09 || c == 0x0a || c == 0x0d ||
- c == 0x2028 || c == 0x2029 || _platform_isspace(c)) ? 1 : 0;
-
- return _platform_isspace(c);
-
-}
-
-/*
- * Return non-zero if the character is a control character, or zero otherwise.
- */
-int
-_utbm_iscntrl(ucs4_t c)
-{
- return 0;
-}
-
-/*
- * Return non-zero if the character is a non-spacing character, or zero
- * otherwise.
- */
-int
-_utbm_nonspacing(ucs4_t c)
-{
- return 0;
-}
-
-/*
- * Convert a character to lower case.
- */
-ucs4_t
-_utbm_tolower(ucs4_t c)
-{
- return c;
-}
-
-/*
- * Convert a character to upper case.
- */
-ucs4_t
-_utbm_toupper(ucs4_t c)
-{
- return c;
-}
-
-/*
- * Convert a character to title case.
- */
-ucs4_t
-_utbm_totitle(ucs4_t c)
-{
- return c;
-}
DEFCCNAME=@DEFCCNAME@
DEFKTNAME=@DEFKTNAME@
DEFCKTNAME=@DEFCKTNAME@
+PKCS11_MODNAME=@PKCS11_MODNAME@
MANSUBS=k5identity.sub k5login.sub k5srvutil.sub kadm5.acl.sub kadmin.sub \
kadmind.sub kdb5_ldap_util.sub kdb5_util.sub kdc.conf.sub \
-e 's|@SYSCONFDIR@|$(sysconfdir)|g' \
-e 's|@CCNAME@|$(DEFCCNAME)|g' \
-e 's|@KTNAME@|$(DEFKTNAME)|g' \
- -e 's|@CKTNAME@|$(DEFCKTNAME)|g' $? > $@
+ -e 's|@CKTNAME@|$(DEFCKTNAME)|g' \
+ -e 's|@PKCS11MOD@|$(PKCS11_MODNAME)|g' $? > $@
all: $(MANSUBS)
.\" Man page generated from reStructuredText.
.
-.TH "K5IDENTITY" "5" " " "1.20.1" "MIT Kerberos"
+.TH "K5IDENTITY" "5" " " "1.21.2" "MIT Kerberos"
.SH NAME
k5identity \- Kerberos V5 client principal selection rules
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "K5LOGIN" "5" " " "1.20.1" "MIT Kerberos"
+.TH "K5LOGIN" "5" " " "1.21.2" "MIT Kerberos"
.SH NAME
k5login \- Kerberos V5 acl file for host access
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "K5SRVUTIL" "1" " " "1.20.1" "MIT Kerberos"
+.TH "K5SRVUTIL" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
k5srvutil \- host key table (keytab) manipulation utility
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KADM5.ACL" "5" " " "1.20.1" "MIT Kerberos"
+.TH "KADM5.ACL" "5" " " "1.21.2" "MIT Kerberos"
.SH NAME
kadm5.acl \- Kerberos ACL file
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KADMIN" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KADMIN" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
kadmin \- Kerberos V5 database administration program
.
principal during PKINIT authentication. The matching expression
is in the same format as those used by the \fBpkinit_cert_match\fP
option in krb5.conf(5)\&. (New in release 1.16.)
+.TP
+\fBpac_privsvr_enctype\fP
+Forces the encryption type of the PAC KDC checksum buffers to the
+specified encryption type for tickets issued to this server, by
+deriving a key from the local krbtgt key if it is of a different
+encryption type. It may be necessary to set this value to
+"aes256\-sha1" on the cross\-realm krbtgt entry for an Active
+Directory realm when using aes\-sha2 keys on the local krbtgt
+entry.
.UNINDENT
.sp
This command requires the \fBmodify\fP privilege.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KADMIND" "8" " " "1.20.1" "MIT Kerberos"
+.TH "KADMIND" "8" " " "1.21.2" "MIT Kerberos"
.SH NAME
kadmind \- KADM5 administration server
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KDB5_LDAP_UTIL" "8" " " "1.20.1" "MIT Kerberos"
+.TH "KDB5_LDAP_UTIL" "8" " " "1.21.2" "MIT Kerberos"
.SH NAME
kdb5_ldap_util \- Kerberos configuration utility
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KDB5_UTIL" "8" " " "1.20.1" "MIT Kerberos"
+.TH "KDB5_UTIL" "8" " " "1.21.2" "MIT Kerberos"
.SH NAME
kdb5_util \- Kerberos database maintenance utility
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KDC.CONF" "5" " " "1.20.1" "MIT Kerberos"
+.TH "KDC.CONF" "5" " " "1.21.2" "MIT Kerberos"
.SH NAME
kdc.conf \- Kerberos V5 KDC configuration file
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KDESTROY" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KDESTROY" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
kdestroy \- destroy Kerberos tickets
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KERBEROS" "7" " " "1.20.1" "MIT Kerberos"
+.TH "KERBEROS" "7" " " "1.21.2" "MIT Kerberos"
.SH NAME
kerberos \- Overview of using Kerberos
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KINIT" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KINIT" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
kinit \- obtain and cache Kerberos ticket-granting ticket
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KLIST" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KLIST" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
klist \- list cached Kerberos tickets
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KPASSWD" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KPASSWD" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
kpasswd \- change a user's Kerberos password
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KPROP" "8" " " "1.20.1" "MIT Kerberos"
+.TH "KPROP" "8" " " "1.21.2" "MIT Kerberos"
.SH NAME
kprop \- propagate a Kerberos V5 principal database to a replica server
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KPROPD" "8" " " "1.20.1" "MIT Kerberos"
+.TH "KPROPD" "8" " " "1.21.2" "MIT Kerberos"
.SH NAME
kpropd \- Kerberos V5 replica KDC update server
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KPROPLOG" "8" " " "1.20.1" "MIT Kerberos"
+.TH "KPROPLOG" "8" " " "1.21.2" "MIT Kerberos"
.SH NAME
kproplog \- display the contents of the Kerberos principal update log
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KRB5-CONFIG" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KRB5-CONFIG" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
krb5-config \- tool for linking against MIT Kerberos libraries
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KRB5.CONF" "5" " " "1.20.1" "MIT Kerberos"
+.TH "KRB5.CONF" "5" " " "1.21.2" "MIT Kerberos"
.SH NAME
krb5.conf \- Kerberos configuration file
.
The libdefaults section may contain any of the following relations:
.INDENT 0.0
.TP
+\fBallow_des3\fP
+Permit the KDC to issue tickets with des3\-cbc\-sha1 session keys.
+In future releases, this flag will allow des3\-cbc\-sha1 to be used
+at all. The default value for this tag is false. (Added in
+release 1.21.)
+.TP
+\fBallow_rc4\fP
+Permit the KDC to issue tickets with arcfour\-hmac session keys.
+In future releases, this flag will allow arcfour\-hmac to be used
+at all. The default value for this tag is false. (Added in
+release 1.21.)
+.TP
\fBallow_weak_crypto\fP
If this flag is set to false, then weak encryption types (as noted
in Encryption_types in kdc.conf(5)) will be filtered
All keyword/values are optional. \fImodname\fP specifies the location
of a library implementing PKCS #11. If a value is encountered
with no keyword, it is assumed to be the \fImodname\fP\&. If no
-module\-name is specified, the default is \fBopensc\-pkcs11.so\fP\&.
+module\-name is specified, the default is \fB@PKCS11MOD@\fP\&.
\fBslotid=\fP and/or \fBtoken=\fP may be specified to force the use of
a particular smard card reader or token if there is more than one
available. \fBcertid=\fP and/or \fBcertlabel=\fP may be specified to
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KRB5KDC" "8" " " "1.20.1" "MIT Kerberos"
+.TH "KRB5KDC" "8" " " "1.21.2" "MIT Kerberos"
.SH NAME
krb5kdc \- Kerberos V5 KDC
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KSU" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KSU" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
ksu \- Kerberized super-user
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KSWITCH" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KSWITCH" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
kswitch \- switch primary ticket cache
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KTUTIL" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KTUTIL" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
ktutil \- Kerberos keytab file maintenance utility
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KVNO" "1" " " "1.20.1" "MIT Kerberos"
+.TH "KVNO" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
kvno \- print key version numbers of Kerberos principals
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "SCLIENT" "1" " " "1.20.1" "MIT Kerberos"
+.TH "SCLIENT" "1" " " "1.21.2" "MIT Kerberos"
.SH NAME
sclient \- sample Kerberos version 5 client
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "SSERVER" "8" " " "1.20.1" "MIT Kerberos"
+.TH "SSERVER" "8" " " "1.21.2" "MIT Kerberos"
.SH NAME
sserver \- sample Kerberos version 5 server
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2022, MIT
+1985-2023, MIT
.\" Generated by docutils manpage writer.
.
* organization.
*/
#define KRB5_MAJOR_RELEASE 1
-#define KRB5_MINOR_RELEASE 20
-#define KRB5_PATCHLEVEL 1
+#define KRB5_MINOR_RELEASE 21
+#define KRB5_PATCHLEVEL 2
/* #undef KRB5_RELTAIL */
-#define KRB5_RELDATE "20221111"
-#define KRB5_RELTAG "krb5-1.20.1-final"
+/* #undef KRB5_RELDATE */
+#define KRB5_RELTAG "krb5-1.21.2-final"
goto open_ok;
db->db = dbopen(db->filename, O_RDWR, 0600, DB_BTREE, &db->btinfo);
- if (db->db != NULL)
- goto open_ok;
- if (IS_EFTYPE(errno)) {
+ if (db->db == NULL && IS_EFTYPE(errno))
db->db = dbopen(db->filename, O_RDWR, 0600, DB_HASH, &db->info);
- if (db->db != NULL)
- goto open_ok;
- } else {
- (void) osa_adb_release_lock(db);
- if (errno == EINVAL)
- return OSA_ADB_BAD_DB;
- return errno;
+ if (db->db == NULL) {
+ (void)osa_adb_release_lock(db);
+ return (errno == EINVAL) ? OSA_ADB_BAD_DB : errno;
}
+
open_ok:
db->opencnt++;
return OSA_ADB_OK;
static int32_t add_bigptr __P((HTAB *, ITEM_INFO *, indx_t));
static u_int32_t *fetch_bitmap __P((HTAB *, int32_t));
static u_int32_t first_free __P((u_int32_t));
-static indx_t next_realkey __P((PAGE16 *, indx_t));
static u_int16_t overflow_page __P((HTAB *));
static void page_init __P((HTAB *, PAGE16 *, db_pgno_t, u_int8_t));
static indx_t prev_realkey __P((PAGE16 *, indx_t));
}
/*
- * Returns the index of the next non-bigkey pair after n on the page.
- * Returns -1 if there are no more non-big things on the page.
- */
-static indx_t
-#ifdef __STDC__
-next_realkey(PAGE16 * pagep, indx_t n)
-#else
-next_realkey(pagep, n)
- PAGE16 *pagep;
- u_int32_t n;
-#endif
-{
- indx_t i;
-
- for (i = n + 1; i < NUM_ENT(pagep); i++)
- if (KEY_OFF(pagep, i) != BIGPAIR)
- return (i);
- return (-1);
-}
-
-/*
* Returns the index of the previous non-bigkey pair after n on the page.
* Returns n if there are no previous non-big things on the page.
*/
PAGE16 *pagep;
indx_t ndx;
short check_ndx;
- int16_t delta, len, next_key;
+ int16_t delta, len;
int32_t n;
u_int8_t *src, *dest;
/* Adjust the offsets. */
for (n = ndx; n < NUM_ENT(pagep) - 1; n++)
if (KEY_OFF(pagep, (n + 1)) != BIGPAIR) {
- next_key = next_realkey(pagep, n);
-#ifdef DEBUG
- assert(next_key != -1);
-#endif
KEY_OFF(pagep, n) = KEY_OFF(pagep, (n + 1)) + delta;
DATA_OFF(pagep, n) = DATA_OFF(pagep, (n + 1)) + delta;
} else {
time_t now;
int mask = 0;
krb5_error_code retval = 0;
- krb5_boolean no_msg = FALSE;
-
- krb5_boolean print_usage = FALSE;
char *me = progname;
time(&now);
if (!strcmp(argv[*i], "-maxtktlife")) {
if (++(*i) > argc-1)
- goto err_usage;
+ return 0;
date = get_date(argv[*i]);
if (date == (time_t)(-1)) {
retval = EINVAL;
com_err(me, retval, _("while providing time specification"));
- goto err_nomsg;
+ return 0;
}
rparams->max_life = date-now;
mask |= LDAP_REALM_MAXTICKETLIFE;
else if (!strcmp(argv[*i], "-maxrenewlife")) {
if (++(*i) > argc-1)
- goto err_usage;
+ return 0;
date = get_date(argv[*i]);
if (date == (time_t)(-1)) {
retval = EINVAL;
com_err(me, retval, _("while providing time specification"));
- goto err_nomsg;
+ return 0;
}
rparams->max_renewable_life = date-now;
mask |= LDAP_REALM_MAXRENEWLIFE;
else if (*(argv[*i]) == '-')
rparams->tktflags |= KRB5_KDB_DISALLOW_POSTDATED;
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
} else if (!strcmp((argv[*i] + 1), "allow_forwardable")) {
else if (*(argv[*i]) == '-')
rparams->tktflags |= KRB5_KDB_DISALLOW_FORWARDABLE;
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
} else if (!strcmp((argv[*i] + 1), "allow_renewable")) {
else if (*(argv[*i]) == '-')
rparams->tktflags |= KRB5_KDB_DISALLOW_RENEWABLE;
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
} else if (!strcmp((argv[*i] + 1), "allow_proxiable")) {
else if (*(argv[*i]) == '-')
rparams->tktflags |= KRB5_KDB_DISALLOW_PROXIABLE;
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
} else if (!strcmp((argv[*i] + 1), "allow_dup_skey")) {
else if (*(argv[*i]) == '-')
rparams->tktflags |= KRB5_KDB_DISALLOW_DUP_SKEY;
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
}
else if (*(argv[*i]) == '-')
rparams->tktflags &= (int)(~KRB5_KDB_REQUIRES_PRE_AUTH);
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
} else if (!strcmp((argv[*i] + 1), "requires_hwauth")) {
else if (*(argv[*i]) == '-')
rparams->tktflags &= (int)(~KRB5_KDB_REQUIRES_HW_AUTH);
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
} else if (!strcmp((argv[*i] + 1), "allow_svr")) {
else if (*(argv[*i]) == '-')
rparams->tktflags |= KRB5_KDB_DISALLOW_SVR;
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
} else if (!strcmp((argv[*i] + 1), "allow_tgs_req")) {
else if (*(argv[*i]) == '-')
rparams->tktflags |= KRB5_KDB_DISALLOW_TGT_BASED;
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
} else if (!strcmp((argv[*i] + 1), "allow_tix")) {
else if (*(argv[*i]) == '-')
rparams->tktflags |= KRB5_KDB_DISALLOW_ALL_TIX;
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
} else if (!strcmp((argv[*i] + 1), "needchange")) {
else if (*(argv[*i]) == '-')
rparams->tktflags &= (int)(~KRB5_KDB_REQUIRES_PWCHANGE);
else
- goto err_usage;
+ return 0;
mask |= LDAP_REALM_KRBTICKETFLAGS;
} else if (!strcmp((argv[*i] + 1), "password_changing_service")) {
else if (*(argv[*i]) == '-')
rparams->tktflags &= (int)(~KRB5_KDB_PWCHANGE_SERVICE);
else
- goto err_usage;
+ return 0;
mask |=LDAP_REALM_KRBTICKETFLAGS;
}
-err_usage:
- print_usage = TRUE;
-
-err_nomsg:
- no_msg = TRUE;
return mask;
}
{
krb5_error_code ret;
int i;
- char **auth_inds = NULL;
+ char **auth_inds = NULL, *indstr;
struct k5buf buf = EMPTY_K5BUF;
auth_inds = ldap_get_values(ld, ldap_ent, "krbPrincipalAuthInd");
k5_buf_add(&buf, " ");
}
- ret = k5_buf_status(&buf);
- if (ret)
+ indstr = k5_buf_cstring(&buf);
+ if (indstr == NULL) {
+ ret = ENOMEM;
goto cleanup;
+ }
ret = krb5_dbe_set_string(context, entry, KRB5_KDB_SK_REQUIRE_AUTH,
- buf.data);
+ indstr);
if (!ret)
*mask |= KDB_AUTH_IND_ATTR;
at_rlm_name = strrchr(i_princ_name, '@');
if (!at_rlm_name) {
*o_princ_name = strdup(i_princ_name);
- if (!*o_princ_name)
- return ENOMEM;
} else {
k5_buf_init_dynamic(&buf);
for (p = i_princ_name; p < at_rlm_name; p++) {
k5_buf_add_len(&buf, p, 1);
}
k5_buf_add(&buf, at_rlm_name);
- if (k5_buf_status(&buf) != 0)
- return ENOMEM;
- *o_princ_name = buf.data;
+ *o_princ_name = k5_buf_cstring(&buf);
}
- return 0;
+ return (*o_princ_name == NULL) ? ENOMEM : 0;
}
break;
k5_buf_add_fmt(&buf, "\\%2x", (unsigned char)*in++);
}
- return buf.data;
+ return k5_buf_cstring(&buf);
}
static int
{
krb5_data data = empty_data();
krb5_boolean found_logon_info = FALSE;
- krb5_ui_4 *types;
+ krb5_ui_4 *types = NULL;
size_t num_buffers = 0, i;
change_auth_indicators(context, auth_indicators);
if (old_pac != NULL)
assert(found_logon_info);
+
+ free(types);
}
return 0;
found = match_in_table(context, "rbcd", proxy_princ, server_princ);
krb5_free_unparsed_name(context, proxy_princ);
krb5_free_unparsed_name(context, server_princ);
+ krb5_free_unparsed_name(context, client_princ);
return found ? 0 : KRB5KDC_ERR_BADOPTION;
}
#ifndef WITHOUT_PKCS11
#include "pkcs11.h"
-#define PKCS11_MODNAME "opensc-pkcs11.so"
#define PK_SIGLEN_GUESS 1000
#define PK_NOSLOT 999999
#endif
} else {
retval = cms_signeddata_create(context, plgctx->cryptoctx,
reqctx->cryptoctx, reqctx->idctx,
- CMS_SIGN_CLIENT, 1,
+ CMS_SIGN_CLIENT,
(unsigned char *)
coded_auth_pack->data,
coded_auth_pack->length,
#include "pkinit.h"
-/* statically declare OID constants for all three algorithms */
-static char sha1_oid[8] = { 0x2B, 0x06, 0x01, 0x05, 0x02, 0x03, 0x06, 0x01};
+/* RFC 8636 id-pkinit-kdf-ah-sha1: iso(1) identified-organization(3) dod(6)
+ * internet(1) security(5) kerberosv5(2) pkinit(3) kdf(6) sha1(1) */
+static char sha1_oid[8] = { 0x2B, 0x06, 0x01, 0x05, 0x02, 0x03, 0x06, 0x01 };
+/* RFC 8636 id-pkinit-kdf-ah-sha256: iso(1) identified-organization(3) dod(6)
+ * internet(1) security(5) kerberosv5(2) pkinit(3) kdf(6) sha256(2) */
static char sha256_oid[8] = { 0x2B, 0x06, 0x01, 0x05, 0x02, 0x03, 0x06, 0x02 };
+/* RFC 8636 id-pkinit-kdf-ah-sha512: iso(1) identified-organization(3) dod(6)
+ * internet(1) security(5) kerberosv5(2) pkinit(3) kdf(6) sha512(3) */
static char sha512_oid[8] = { 0x2B, 0x06, 0x01, 0x05, 0x02, 0x03, 0x06, 0x03 };
const krb5_data sha1_id = { KV5M_DATA, sizeof(sha1_oid), sha1_oid };
NULL
};
+/* RFC 4055 sha256WithRSAEncryption: iso(1) member-body(2) us(840)
+ * rsadsi(113549) pkcs(1) 1 11 */
+static char sha256WithRSAEncr_oid[9] = {
+ 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b
+};
+/* RFC 4055 sha256WithRSAEncryption: iso(1) member-body(2) us(840)
+ * rsadsi(113549) pkcs(1) 1 13 */
+static char sha512WithRSAEncr_oid[9] = {
+ 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0d
+};
+
+const krb5_data sha256WithRSAEncr_id = {
+ KV5M_DATA, sizeof(sha256WithRSAEncr_oid), sha256WithRSAEncr_oid
+};
+const krb5_data sha512WithRSAEncr_id = {
+ KV5M_DATA, sizeof(sha512WithRSAEncr_oid), sha512WithRSAEncr_oid
+};
+
+krb5_data const * const supported_cms_algs[] = {
+ &sha512WithRSAEncr_id,
+ &sha256WithRSAEncr_id,
+ NULL
+};
+
/* RFC 2412 section E.2 (well-known group 2) parameters, DER-encoded as
* DomainParameters (RFC 3279 section 2.3.3). */
static const uint8_t o1024[] = {
int cms_msg_type, /* IN
specifies CMS_SIGN_CLIENT for client-side CMS message
and CMS_SIGN_SERVER for kdc-side */
- int include_certchain, /* IN
- specifies where certificates field in SignedData
- should contain certificate path */
unsigned char *auth_pack, /* IN
contains DER encoded AuthPack (CMS_SIGN_CLIENT)
or DER encoded DHRepInfo (CMS_SIGN_SERVER) */
pkinit_req_crypto_context req_cryptoctx, /* IN */
pkinit_identity_crypto_context id_cryptoctx, /* IN */
krb5_preauthtype pa_type, /* IN */
- int include_certchain, /* IN
- specifies whether the certificates field in
- SignedData should contain certificate path */
unsigned char *key_pack, /* IN
contains DER encoded ReplyKeyPack */
unsigned int key_pack_len, /* IN
*/
extern krb5_data const * const supported_kdf_alg_ids[];
+/* CMS signature algorithms supported by this implementation, in order of
+ * decreasing preference. */
+extern krb5_data const * const supported_cms_algs[];
+
krb5_error_code
crypto_encode_der_cert(krb5_context context, pkinit_req_crypto_context reqctx,
uint8_t **der_out, size_t *der_len);
pkcs11err(int err);
-#ifdef HAVE_OPENSSL_CMS
-/* Use CMS support present in OpenSSL. */
-#include <openssl/cms.h>
-#define pkinit_CMS_get0_content_signed(_cms) CMS_get0_content(_cms)
-#define pkinit_CMS_get0_content_data(_cms) CMS_get0_content(_cms)
-#define pkinit_CMS_free1_crls(_sk_x509crl) \
- sk_X509_CRL_pop_free((_sk_x509crl), X509_CRL_free)
-#define pkinit_CMS_free1_certs(_sk_x509) \
- sk_X509_pop_free((_sk_x509), X509_free)
-#define pkinit_CMS_SignerInfo_get_cert(_cms,_si,_x509_pp) \
- CMS_SignerInfo_get0_algs(_si,NULL,_x509_pp,NULL,NULL)
-#else
-/* Fake up CMS support using PKCS7. */
-#define pkinit_CMS_free1_crls(_stack_of_x509crls) /* Don't free these */
-#define pkinit_CMS_free1_certs(_stack_of_x509certs) /* Don't free these */
-#define CMS_NO_SIGNER_CERT_VERIFY PKCS7_NOVERIFY
-#define CMS_NOATTR PKCS7_NOATTR
-#define CMS_ContentInfo PKCS7
-#define CMS_SignerInfo PKCS7_SIGNER_INFO
-#define d2i_CMS_ContentInfo d2i_PKCS7
-#define CMS_get0_type(_p7) ((_p7)->type)
-#define pkinit_CMS_get0_content_signed(_p7) (&((_p7)->d.sign->contents->d.other->value.octet_string))
-#define pkinit_CMS_get0_content_data(_p7) (&((_p7)->d.other->value.octet_string))
-#define CMS_set1_signers_certs(_p7,_stack_of_x509,_uint)
-#define CMS_get0_SignerInfos PKCS7_get_signer_info
-#define stack_st_CMS_SignerInfo stack_st_PKCS7_SIGNER_INFO
-#undef sk_CMS_SignerInfo_value
-#define sk_CMS_SignerInfo_value sk_PKCS7_SIGNER_INFO_value
-#define CMS_get0_eContentType(_p7) (_p7->d.sign->contents->type)
-#define CMS_verify PKCS7_verify
-#define CMS_get1_crls(_p7) (_p7->d.sign->crl)
-#define CMS_get1_certs(_p7) (_p7->d.sign->cert)
-#define CMS_ContentInfo_free(_p7) PKCS7_free(_p7)
-#define pkinit_CMS_SignerInfo_get_cert(_p7,_si,_x509_pp) \
- (*_x509_pp) = PKCS7_cert_from_signer_info(_p7,_si)
-#endif
-
#if OPENSSL_VERSION_NUMBER < 0x10100000L
/* 1.1 standardizes constructor and destructor names, renaming
pkinit_req_crypto_context req_cryptoctx,
pkinit_identity_crypto_context id_cryptoctx,
int cms_msg_type,
- int include_certchain,
unsigned char *data,
unsigned int data_len,
unsigned char **signed_data,
goto cleanup;
if (id_cryptoctx->my_certs != NULL) {
- /* create a cert chain that has at least the signer's certificate */
+ X509_STORE *certstore = NULL;
+ X509_STORE_CTX *certctx;
+ STACK_OF(X509) *certstack = NULL;
+ char buf[DN_BUF_LEN];
+ unsigned int i = 0, size = 0;
+
+ /* create a cert chain */
if ((cert_stack = sk_X509_new_null()) == NULL)
goto cleanup;
cert = sk_X509_value(id_cryptoctx->my_certs, id_cryptoctx->cert_index);
- if (!include_certchain) {
- pkiDebug("only including signer's certificate\n");
- sk_X509_push(cert_stack, X509_dup(cert));
- } else {
- /* create a cert chain */
- X509_STORE *certstore = NULL;
- X509_STORE_CTX *certctx;
- STACK_OF(X509) *certstack = NULL;
- char buf[DN_BUF_LEN];
- unsigned int i = 0, size = 0;
-
- if ((certstore = X509_STORE_new()) == NULL)
- goto cleanup;
- pkiDebug("building certificate chain\n");
- X509_STORE_set_verify_cb(certstore, openssl_callback);
- certctx = X509_STORE_CTX_new();
- if (certctx == NULL)
- goto cleanup;
- X509_STORE_CTX_init(certctx, certstore, cert,
- id_cryptoctx->intermediateCAs);
- X509_STORE_CTX_trusted_stack(certctx, id_cryptoctx->trustedCAs);
- if (!X509_verify_cert(certctx)) {
- retval = oerr_cert(context, 0, certctx,
- _("Failed to verify own certificate"));
- goto cleanup;
- }
- certstack = X509_STORE_CTX_get1_chain(certctx);
- size = sk_X509_num(certstack);
- for(i = 0; i < size - 1; i++) {
- X509 *x = sk_X509_value(certstack, i);
- X509_NAME_oneline(X509_get_subject_name(x), buf, sizeof(buf));
- TRACE_PKINIT_CERT_CHAIN_NAME(context, (int)i, buf);
- sk_X509_push(cert_stack, X509_dup(x));
- }
- X509_STORE_CTX_free(certctx);
- X509_STORE_free(certstore);
- sk_X509_pop_free(certstack, X509_free);
+
+ certstore = X509_STORE_new();
+ if (certstore == NULL)
+ goto cleanup;
+ pkiDebug("building certificate chain\n");
+ X509_STORE_set_verify_cb(certstore, openssl_callback);
+ certctx = X509_STORE_CTX_new();
+ if (certctx == NULL)
+ goto cleanup;
+ X509_STORE_CTX_init(certctx, certstore, cert,
+ id_cryptoctx->intermediateCAs);
+ X509_STORE_CTX_trusted_stack(certctx, id_cryptoctx->trustedCAs);
+ if (!X509_verify_cert(certctx)) {
+ retval = oerr_cert(context, 0, certctx,
+ _("Failed to verify own certificate"));
+ goto cleanup;
+ }
+ certstack = X509_STORE_CTX_get1_chain(certctx);
+ size = sk_X509_num(certstack);
+ for (i = 0; i < size - 1; i++) {
+ X509 *x = sk_X509_value(certstack, i);
+ X509_NAME_oneline(X509_get_subject_name(x), buf, sizeof(buf));
+ TRACE_PKINIT_CERT_CHAIN_NAME(context, (int)i, buf);
+ sk_X509_push(cert_stack, X509_dup(x));
}
+ X509_STORE_CTX_free(certctx);
+ X509_STORE_free(certstore);
+ sk_X509_pop_free(certstack, X509_free);
+
p7s->cert = cert_stack;
/* fill-in PKCS7_SIGNER_INFO */
if (is_signed && !OBJ_cmp(type, oid)) {
unsigned char *d;
*is_signed = 0;
- octets = pkinit_CMS_get0_content_data(cms);
+ octets = CMS_get0_content(cms);
if (!octets || ((*octets)->type != V_ASN1_OCTET_STRING)) {
retval = KRB5KDC_ERR_PREAUTH_FAILED;
krb5_set_error_message(context, retval,
goto cleanup;
*is_signed = 0;
/* We cannot use CMS_dataInit because there may be no digest */
- octets = pkinit_CMS_get0_content_signed(cms);
+ octets = CMS_get0_content(cms);
if (octets)
out = BIO_new_mem_buf((*octets)->data, (*octets)->length);
if (out == NULL)
goto cleanup;
} else {
- pkinit_CMS_SignerInfo_get_cert(cms, si, &x);
+ CMS_SignerInfo_get0_algs(si, NULL, &x, NULL, NULL);
if (x == NULL)
goto cleanup;
goto cleanup;
out = BIO_new(BIO_s_mem());
if (CMS_verify(cms, NULL, store, NULL, out, flags) == 0) {
- unsigned long err = ERR_peek_error();
- switch(ERR_GET_REASON(err)) {
- case PKCS7_R_DIGEST_FAILURE:
- retval = KRB5KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED;
- break;
- case PKCS7_R_SIGNATURE_FAILURE:
- default:
+ if (ERR_peek_last_error() == CMS_R_VERIFICATION_FAILURE)
retval = KRB5KDC_ERR_INVALID_SIG;
- }
+ else
+ retval = KRB5KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED;
(void)oerr(context, retval, _("Failed to verify CMS message"));
goto cleanup;
}
X509_STORE_free(store);
if (cms != NULL) {
if (signerCerts != NULL)
- pkinit_CMS_free1_certs(signerCerts);
+ sk_X509_pop_free(signerCerts, X509_free);
if (idctx->intermediateCAs != NULL && signerCerts)
sk_X509_free(intermediateCAs);
if (signerRevoked != NULL)
- pkinit_CMS_free1_crls(signerRevoked);
+ sk_X509_CRL_pop_free(signerRevoked, X509_CRL_free);
if (idctx->revoked != NULL && signerRevoked)
sk_X509_CRL_free(revoked);
CMS_ContentInfo_free(cms);
pkinit_req_crypto_context reqctx,
pkinit_identity_crypto_context idctx,
krb5_preauthtype pa_type,
- int include_certchain,
unsigned char *key_pack,
unsigned int key_pack_len,
unsigned char **out,
const EVP_CIPHER *cipher = NULL;
retval = cms_signeddata_create(context, plgctx, reqctx, idctx,
- CMS_ENVEL_SERVER, include_certchain,
- key_pack, key_pack_len, &signed_data,
+ CMS_ENVEL_SERVER, key_pack, key_pack_len,
+ &signed_data,
(unsigned int *)&signed_data_len);
if (retval) {
pkiDebug("failed to create pkcs7 signed data\n");
{
struct k5buf buf;
int n = 0;
- char *ret;
k5_buf_init_dynamic(&buf);
k5_buf_add(&buf, "PKCS11:");
k5_buf_add_fmt(&buf, "%sslotid=%ld", n++ ? ":" : "",
(long)idopts->slotid);
}
- if (k5_buf_status(&buf) == 0)
- ret = strdup(buf.data);
- else
- ret = NULL;
- k5_buf_free(&buf);
- return ret;
+ return k5_buf_cstring(&buf);
}
static krb5_error_code
pkinit_plg_crypto_context plg_cryptoctx,
pkinit_req_crypto_context req_cryptoctx,
pkinit_identity_crypto_context id_cryptoctx,
- krb5_algorithm_identifier ***oids)
+ krb5_algorithm_identifier ***algs_out)
{
+ krb5_error_code ret;
+ krb5_algorithm_identifier **algs = NULL;
+ size_t i, count;
- krb5_error_code retval = ENOMEM;
- krb5_algorithm_identifier **loids = NULL;
- krb5_data des3oid = {0, 8, "\x2A\x86\x48\x86\xF7\x0D\x03\x07" };
+ *algs_out = NULL;
- *oids = NULL;
- loids = malloc(2 * sizeof(krb5_algorithm_identifier *));
- if (loids == NULL)
- goto cleanup;
- loids[1] = NULL;
- loids[0] = malloc(sizeof(krb5_algorithm_identifier));
- if (loids[0] == NULL) {
- free(loids);
- goto cleanup;
- }
- retval = pkinit_copy_krb5_data(&loids[0]->algorithm, &des3oid);
- if (retval) {
- free(loids[0]);
- free(loids);
+ /* Count supported OIDs and allocate list (including null terminator). */
+ for (count = 0; supported_cms_algs[count] != NULL; count++);
+ algs = k5calloc(count + 1, sizeof(*algs), &ret);
+ if (algs == NULL)
goto cleanup;
+
+ /* Add an algorithm identifier for each OID, with no parameters. */
+ for (i = 0; i < count; i++) {
+ algs[i] = k5alloc(sizeof(*algs[i]), &ret);
+ if (algs[i] == NULL)
+ goto cleanup;
+ ret = krb5int_copy_data_contents(context, supported_cms_algs[i],
+ &algs[i]->algorithm);
+ if (ret)
+ goto cleanup;
+ algs[i]->parameters = empty_data();
}
- loids[0]->parameters.length = 0;
- loids[0]->parameters.data = NULL;
- *oids = loids;
- retval = 0;
-cleanup:
+ *algs_out = algs;
+ algs = NULL;
- return retval;
+cleanup:
+ free_krb5_algorithm_identifiers(&algs);
+ return ret;
}
krb5_error_code
#include <openssl/asn1.h>
#include <openssl/pem.h>
#include <openssl/asn1t.h>
+#include <openssl/cms.h>
#if OPENSSL_VERSION_NUMBER >= 0x30000000L
#include <openssl/core_names.h>
#include <openssl/decoder.h>
retval = cms_signeddata_create(context, plgctx->cryptoctx,
reqctx->cryptoctx, plgctx->idctx,
- CMS_SIGN_SERVER, 1,
+ CMS_SIGN_SERVER,
(unsigned char *)
encoded_dhkey_info->data,
encoded_dhkey_info->length,
rep->choice = choice_pa_pk_as_rep_encKeyPack;
retval = cms_envelopeddata_create(context, plgctx->cryptoctx,
reqctx->cryptoctx, plgctx->idctx,
- padata->pa_type, 1,
+ padata->pa_type,
(unsigned char *)
encoded_key_pack->data,
encoded_key_pack->length,
}
static krb5_error_code
-load_certauth_plugins(krb5_context context, certauth_handle **handle_out)
+load_certauth_plugins(krb5_context context, const char *const *realmnames,
+ certauth_handle **handle_out)
{
krb5_error_code ret;
krb5_plugin_initvt_fn *modules = NULL, *mod;
if (h == NULL)
goto cleanup;
- ret = (*mod)(context, 1, 1, (krb5_plugin_vtable)&h->vt);
+ ret = (*mod)(context, 1, 2, (krb5_plugin_vtable)&h->vt);
if (ret) {
TRACE_CERTAUTH_VTINIT_FAIL(context, ret);
free(h);
continue;
}
h->moddata = NULL;
- if (h->vt.init != NULL) {
+ if (h->vt.init_ex != NULL)
+ ret = h->vt.init_ex(context, realmnames, &h->moddata);
+ else if (h->vt.init != NULL)
ret = h->vt.init(context, &h->moddata);
- if (ret) {
- TRACE_CERTAUTH_INIT_FAIL(context, h->vt.name, ret);
- free(h);
- continue;
- }
+ if (ret) {
+ TRACE_CERTAUTH_INIT_FAIL(context, h->vt.name, ret);
+ free(h);
+ continue;
}
list[count++] = h;
list[count] = NULL;
goto errout;
}
- retval = load_certauth_plugins(context, &certauth_modules);
+ retval = load_certauth_plugins(context, realmnames, &certauth_modules);
if (retval)
goto errout;
$(BUILDTOP)/lib/krb5/error_tables/asn1_err.c \
$(BUILDTOP)/lib/krb5/error_tables/kv5m_err.c \
$(BUILDTOP)/lib/krb5/error_tables/krb524_err.c
-# This is a placeholder until we have an actual translation.
-CATALOGS=en_US.mo de.mo
+CATALOGS=en_US.mo de.mo ka.mo
.SUFFIXES: .po .mo
.po.mo:
--- /dev/null
+# Georgian translation for Kerberos.
+# Copyright (C) 2022 MIT
+# This file is distributed under the same license as the mit-krb5 package.
+# Temuri Doghonadze <temuri.doghonadze@gmail.com>, 2022.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: mit-krb5 1.21-prerelease\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2022-04-26 17:09-0400\n"
+"PO-Revision-Date: 2022-11-09 08:11+0100\n"
+"Last-Translator: Temuri Doghonadze <temuri.doghonadze@gmail.com>\n"
+"Language-Team: Georgian <(nothing)>\n"
+"Language: ka\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Poedit 3.2\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:52
+#, c-format
+msgid "Usage: %s [-A] [-q] [-c cache_name] [-p princ_name]\n"
+msgstr "გამოყენება: %s [-A] [-q] [-c ქეშის_სახელი] [-p პრინც_სახელი]\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:54
+#, c-format
+msgid "\t-A destroy all credential caches in collection\n"
+msgstr "\t-A კოლექციაში ავტორიზაციის დეტალების ყველა ქეშის განადგურება\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:55
+#, c-format
+msgid "\t-q quiet mode\n"
+msgstr "\t-q ჩუმი რეჟიმი\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:56
+#: ../../src/clients/kswitch/kswitch.c:42
+#, c-format
+msgid "\t-c specify name of credentials cache\n"
+msgstr "\t-c ავტორიზაციის დეტალების ქეშის სახელის მითითება\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:57
+#, c-format
+msgid "\t-p specify principal name within collection\n"
+msgstr "\t-p კოლექციაში პრინციპალის სახელის მითითება \n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:71
+#: ../../src/clients/kdestroy/kdestroy.c:165
+msgid "while listing credential caches"
+msgstr "ავტორიზაციის დეტალების ქეშების ჩამოთვლისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:78
+#, c-format
+msgid "Other credential caches present, use -A to destroy all\n"
+msgstr ""
+"არსებობს სხვა ავტორიზაიცის დეტალის ქეშებიც. გასანადგურებლად გამოიყენეთ -A\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:110
+#: ../../src/clients/kinit/kinit.c:332 ../../src/clients/ksu/main.c:296
+#, c-format
+msgid "Only one -c option allowed\n"
+msgstr "-c პარამეტრის მითითება ნებადართულია მხოლოდ ერთხელ\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:118
+#, c-format
+msgid "Only one -p option allowed\n"
+msgstr "-p პარამეტრის მითითება ნებადართულია მხოლოდ ერთხელ\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:125
+#: ../../src/clients/kinit/kinit.c:360 ../../src/clients/klist/klist.c:178
+#, c-format
+msgid "Kerberos 4 is no longer supported\n"
+msgstr ""
+"Kerberos 4 უკვე მხარდაუჭერელია\n"
+"\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:138
+#, c-format
+msgid "-A option is exclusive with -p option\n"
+msgstr "-A პარამეტრი ექსკლუზიურად -p -სთან ერთად უნდა იქნას გამოყენებული\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:150
+#: ../../src/clients/klist/klist.c:241 ../../src/clients/ksu/main.c:135
+#: ../../src/clients/ksu/main.c:141 ../../src/clients/kswitch/kswitch.c:94
+#: ../../src/kadmin/ktutil/ktutil.c:52 ../../src/kdc/main.c:929
+#: ../../src/kprop/kprop.c:103 ../../src/kprop/kpropd.c:1058
+msgid "while initializing krb5"
+msgstr "krb5-ის ინიციალიზაციისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:157
+#: ../../src/clients/klist/klist.c:248
+msgid "while setting default cache name"
+msgstr "ნაგულისხმები ქეშის სახელის დაყენებისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:172
+msgid "composing ccache name"
+msgstr "ccache-ს სახელის შედგენა"
+
+#: ../../src/clients/kdestroy/kdestroy.c:177
+#, c-format
+msgid "while destroying cache %s"
+msgstr "ქეშის (%s) განადგურებისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:190
+#: ../../src/clients/kswitch/kswitch.c:107 ../../src/clients/kvno/kvno.c:311
+#: ../../src/clients/kvno/kvno.c:517 ../../src/kadmin/cli/keytab.c:373
+#: ../../src/kadmin/dbutil/kdb5_util.c:544
+#, c-format
+msgid "while parsing principal name %s"
+msgstr "პრინციპალის სახელის (%s) დამუშავებისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:196
+#, c-format
+msgid "while finding cache for %s"
+msgstr "%s-სთვის ქეშის ძებნისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:204
+#: ../../src/clients/klist/klist.c:462
+msgid "while resolving ccache"
+msgstr "ccache-ის ამოხსნისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:211 ../../src/clients/ksu/main.c:1026
+msgid "while destroying cache"
+msgstr "ქეშის განადგურებისას"
+
+#: ../../src/clients/kdestroy/kdestroy.c:214
+#, c-format
+msgid "Ticket cache NOT destroyed!\n"
+msgstr "ბილეთის ქეში არ განადგურებულა!\n"
+
+#: ../../src/clients/kdestroy/kdestroy.c:216
+#, c-format
+msgid "Ticket cache %cNOT%c destroyed!\n"
+msgstr "ბილეთის ქეში %cNOT%c განადგურებულა!\n"
+
+#: ../../src/clients/kinit/kinit.c:143
+#, c-format
+msgid ""
+"Usage: %s [-V] [-l lifetime] [-s start_time] [-r renewable_life]\n"
+"\t[-f | -F] [-p | -P] [-n] [-a | -A] [-C] [-E]\n"
+"\t[--request-pac | --no-request-pac]\n"
+"\t[-v] [-R] [-k [-i|-t keytab_file]] [-c cachename]\n"
+"\t[-S service_name] [-I input_ccache] [-T ticket_armor_cache]\n"
+"\t[-X <attribute>[=<value>]] [principal]\n"
+"\n"
+msgstr ""
+"Usage: %s [-V] [-l lifetime] [-s start_time] [-r renewable_life]\n"
+"\t[-f | -F] [-p | -P] [-n] [-a | -A] [-C] [-E]\n"
+"\t[--request-pac | --no-request-pac]\n"
+"\t[-v] [-R] [-k [-i|-t keytab_ფაილი]] [-c ქეშისსახელი]\n"
+"\t[-S სერვისის_სახელი] [-I შეყვანის_ccache] [-T ბილეთის_armor_cache]\n"
+"\t[-X <ატრიბუტი>[=<მნიშვნელობა>]] [პრინციპალი]\n"
+"\n"
+
+#: ../../src/clients/kinit/kinit.c:153
+#, c-format
+msgid "\t-V verbose\n"
+msgstr "\t-V დამატებითი შეტყობინებები\n"
+
+#: ../../src/clients/kinit/kinit.c:154
+#, c-format
+msgid "\t-l lifetime\n"
+msgstr "\t-l სიცოცხლისდრო\n"
+
+#: ../../src/clients/kinit/kinit.c:155
+#, c-format
+msgid "\t-s start time\n"
+msgstr "\t-s გაშვების დრო\n"
+
+#: ../../src/clients/kinit/kinit.c:156
+#, c-format
+msgid "\t-r renewable lifetime\n"
+msgstr "\t-r განახლებადი სიცოცხლის დრო\n"
+
+#: ../../src/clients/kinit/kinit.c:157
+#, c-format
+msgid "\t-f forwardable\n"
+msgstr "\t-f გადაგზავნადი\n"
+
+#: ../../src/clients/kinit/kinit.c:158
+#, c-format
+msgid "\t-F not forwardable\n"
+msgstr "\t-F არაგადაგზავნადი\n"
+
+#: ../../src/clients/kinit/kinit.c:159
+#, c-format
+msgid "\t-p proxiable\n"
+msgstr "\t-p პროქსირებადი\n"
+
+#: ../../src/clients/kinit/kinit.c:160
+#, c-format
+msgid "\t-P not proxiable\n"
+msgstr "\t-P არაპროქსირებადი\n"
+
+#: ../../src/clients/kinit/kinit.c:161
+#, c-format
+msgid "\t-n anonymous\n"
+msgstr "\t-n ანონიმური\n"
+
+#: ../../src/clients/kinit/kinit.c:162
+#, c-format
+msgid "\t-a include addresses\n"
+msgstr "\t-a მისამართების ჩათვლით\n"
+
+#: ../../src/clients/kinit/kinit.c:163
+#, c-format
+msgid "\t-A do not include addresses\n"
+msgstr "\t-A მისამართები არ ჩაითვლება\n"
+
+#: ../../src/clients/kinit/kinit.c:164
+#, c-format
+msgid "\t-v validate\n"
+msgstr "\t-v გადამოწმება\n"
+
+#: ../../src/clients/kinit/kinit.c:165
+#, c-format
+msgid "\t-R renew\n"
+msgstr "\t-R განახლება\n"
+
+#: ../../src/clients/kinit/kinit.c:166
+#, c-format
+msgid "\t-C canonicalize\n"
+msgstr "\t-C კანონიკალიზაცია\n"
+
+#: ../../src/clients/kinit/kinit.c:167
+#, c-format
+msgid "\t-E client is enterprise principal name\n"
+msgstr "\t-E კლიენტი საწარმოო პრინციპალის სახელია\n"
+
+#: ../../src/clients/kinit/kinit.c:168
+#, c-format
+msgid "\t-k use keytab\n"
+msgstr "\t-k keytab-ის გამოყენება\n"
+
+#: ../../src/clients/kinit/kinit.c:169
+#, c-format
+msgid "\t-i use default client keytab (with -k)\n"
+msgstr "\t-i კლიენტის ნაგულისხმები keytab -ის გამოყენება (-k-ით)\n"
+
+#: ../../src/clients/kinit/kinit.c:170
+#, c-format
+msgid "\t-t filename of keytab to use\n"
+msgstr "\t-t keytab -ის ფაილის სახელი\n"
+
+#: ../../src/clients/kinit/kinit.c:171
+#, c-format
+msgid "\t-c Kerberos 5 cache name\n"
+msgstr "\t-c Kerberos 5 -ის ქეშის სახელი\n"
+
+#: ../../src/clients/kinit/kinit.c:172
+#, c-format
+msgid "\t-S service\n"
+msgstr "\t-S სერვისი\n"
+
+#: ../../src/clients/kinit/kinit.c:173
+#, c-format
+msgid "\t-I input credential cache\n"
+msgstr "\t-I შეყვანის ავტორიზაციის დეტალების ქეში\n"
+
+#: ../../src/clients/kinit/kinit.c:174
+#, c-format
+msgid "\t-T armor credential cache\n"
+msgstr "\t-T აბჯრის ავტორიზაციის ქეში\n"
+
+#: ../../src/clients/kinit/kinit.c:175
+#, c-format
+msgid "\t-X <attribute>[=<value>]\n"
+msgstr "\t-X <ატრიბუტი>[=<მნიშვნელობა>]\n"
+
+#: ../../src/clients/kinit/kinit.c:177
+#, c-format
+msgid "\t--{,no}-request-pac request KDC include/exclude a PAC\n"
+msgstr "\t--{,no}-request-pac KDC -ში PAC -ის ჩასმა/ამოღების მოთხოვნა\n"
+
+#: ../../src/clients/kinit/kinit.c:250 ../../src/clients/kinit/kinit.c:258
+#, c-format
+msgid "Bad lifetime value %s\n"
+msgstr "სიცოცხლის დროის არასწორი მნიშვნელობა %s\n"
+
+#: ../../src/clients/kinit/kinit.c:292
+#, c-format
+msgid "Bad start time value %s\n"
+msgstr "დაწყების დროის არასწორი მნიშვნელობა %s\n"
+
+#: ../../src/clients/kinit/kinit.c:310
+#, c-format
+msgid "Only one -t option allowed.\n"
+msgstr "-t პარამეტრის მითითება ნებადართულია მხოლოდ ერთხელ\n"
+
+#: ../../src/clients/kinit/kinit.c:318
+#, c-format
+msgid "Only one armor_ccache\n"
+msgstr "მხოლოდ ერთი armor_ccache\n"
+
+#: ../../src/clients/kinit/kinit.c:340
+#, c-format
+msgid "Only one -I option allowed\n"
+msgstr "-l პარამეტრის მითითება ნებადართულია მხოლოდ ერთხელ\n"
+
+#: ../../src/clients/kinit/kinit.c:349
+msgid "while adding preauth option"
+msgstr "preauth პარამეტრის დამატებისას"
+
+#: ../../src/clients/kinit/kinit.c:375
+#, c-format
+msgid "Only one of -f and -F allowed\n"
+msgstr "-f და -F პარამეტრებიდან მხოლოდ ერთ-ერთი მათგანის მითითება შეგიძლიათ\n"
+
+#: ../../src/clients/kinit/kinit.c:379
+#, c-format
+msgid "Only one of -p and -P allowed\n"
+msgstr "-p და -P პარამეტრებიდან მხოლოდ ერთი უნდა იყოს მითითებული\n"
+
+#: ../../src/clients/kinit/kinit.c:383
+#, c-format
+msgid "Only one of --request-pac and --no-request-pac allowed\n"
+msgstr ""
+"--request-pac და --no-request-pac პარამეტრებიდან მხოლოდ ერთ-ერთი მათგანის "
+"მითითება შეგიძლიათ\n"
+
+#: ../../src/clients/kinit/kinit.c:388
+#, c-format
+msgid "Only one of -a and -A allowed\n"
+msgstr "-a და -A პარამეტრებიდან მხოლოდ ერთ-ერთი მათგანის მითითება შეგიძლიათ\n"
+
+#: ../../src/clients/kinit/kinit.c:392
+#, c-format
+msgid "Only one of -t and -i allowed\n"
+msgstr "-t და -i პარამეტრებიდან მხოლოდ ერთ-ერთი მათგანის მითითება შეგიძლიათ\n"
+
+#: ../../src/clients/kinit/kinit.c:398
+#, c-format
+msgid "keytab specified, forcing -k\n"
+msgstr "keytab მითითებულია. -k ნაძალადევია\n"
+
+#: ../../src/clients/kinit/kinit.c:401 ../../src/clients/klist/klist.c:216
+#, c-format
+msgid "Extra arguments (starting with \"%s\").\n"
+msgstr "დამატებითი არგუმენტები (\"%s\"-ით დაწყებული).\n"
+
+#: ../../src/clients/kinit/kinit.c:427
+msgid "while initializing Kerberos 5 library"
+msgstr "kerberos5 ბიბლიოთეკის ინიციალიზაციისას"
+
+#: ../../src/clients/kinit/kinit.c:435 ../../src/clients/kinit/kinit.c:578
+#, c-format
+msgid "resolving ccache %s"
+msgstr "ccache-ის (%s) ამოხსნა"
+
+#: ../../src/clients/kinit/kinit.c:440
+#, c-format
+msgid "Using specified cache: %s\n"
+msgstr "გამოიყენება მითითებული ქეში: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:448
+msgid "while getting default ccache"
+msgstr "ნაგულისხმები ccache-ის მიღებისას"
+
+#: ../../src/clients/kinit/kinit.c:462 ../../src/clients/kinit/kinit.c:530
+#: ../../src/clients/kpasswd/kpasswd.c:30 ../../src/clients/ksu/main.c:249
+#, c-format
+msgid "when parsing name %s"
+msgstr "სახელის (%s) დამუშავებისას"
+
+#: ../../src/clients/kinit/kinit.c:470 ../../src/kadmin/dbutil/kdb5_util.c:309
+#: ../../src/kprop/kprop.c:157
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:395
+msgid "while getting default realm"
+msgstr "ნაგულისხმები რეალმის მიღებისას"
+
+#: ../../src/clients/kinit/kinit.c:481
+msgid "while building principal"
+msgstr "პრინციპალის აგებისას"
+
+#: ../../src/clients/kinit/kinit.c:489
+msgid "When resolving the default client keytab"
+msgstr "ნაგულისხმები კლიენტის keytab-ის ამოხსნისას"
+
+#: ../../src/clients/kinit/kinit.c:496
+msgid "When determining client principal name from keytab"
+msgstr "კლიენტის პრინციპალის keytab-დან დადგენისას"
+
+#: ../../src/clients/kinit/kinit.c:505
+msgid "when creating default server principal name"
+msgstr "ნაგულისხმები სერვერის პრინციპალის სახელის შექმნისას"
+
+#: ../../src/clients/kinit/kinit.c:525 ../../src/clients/kpasswd/kpasswd.c:43
+#, c-format
+msgid "Unable to identify user\n"
+msgstr "მომხმარებლის იდენტიფიკაცია შეუძლებელია\n"
+
+#: ../../src/clients/kinit/kinit.c:539 ../../src/clients/kswitch/kswitch.c:113
+#, c-format
+msgid "while searching for ccache for %s"
+msgstr "ccache-ში %s-ის ძებნისას"
+
+#: ../../src/clients/kinit/kinit.c:545
+#, c-format
+msgid "Using existing cache: %s\n"
+msgstr "არსებული ქეშის გამოყენება: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:554
+msgid "while generating new ccache"
+msgstr "ახალი ccache-ის გენერირებისას"
+
+#: ../../src/clients/kinit/kinit.c:558
+#, c-format
+msgid "Using new cache: %s\n"
+msgstr "გამოიყენება ახალი ქეში: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:570
+#, c-format
+msgid "Using default cache: %s\n"
+msgstr "გამოიყენება ნაგულისხმები ქეში: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:583
+#, c-format
+msgid "Using specified input cache: %s\n"
+msgstr "გამოიყენება შეყვანის მითითებული ქეში: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:590 ../../src/clients/ksu/krb_auth_su.c:160
+msgid "when unparsing name"
+msgstr "სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/kinit/kinit.c:594
+#, c-format
+msgid "Using principal: %s\n"
+msgstr "გამოიყენება პრინციპალი: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:677
+msgid "getting local addresses"
+msgstr "ლოკალური მისამართების მიღება"
+
+#: ../../src/clients/kinit/kinit.c:701
+#, c-format
+msgid "while setting up KDB keytab for realm %s"
+msgstr "რეალმისთვის (%s) KBD keytab-ის მორგებისას"
+
+#: ../../src/clients/kinit/kinit.c:710 ../../src/clients/kvno/kvno.c:508
+#, c-format
+msgid "resolving keytab %s"
+msgstr "keytab-ის (%s) ამოხსნა"
+
+#: ../../src/clients/kinit/kinit.c:715
+#, c-format
+msgid "Using keytab: %s\n"
+msgstr "გამოიყენება kytab: %s\n"
+
+#: ../../src/clients/kinit/kinit.c:719
+msgid "resolving default client keytab"
+msgstr "ნაგულისხმები კლიენტის keytab-ის ამოხსნა"
+
+#: ../../src/clients/kinit/kinit.c:729
+#, c-format
+msgid "while setting '%s'='%s'"
+msgstr "დაყენებისას '%s'='%s'"
+
+#: ../../src/clients/kinit/kinit.c:734
+#, c-format
+msgid "PA Option %s = %s\n"
+msgstr "PA პარამეტრი %s = %s\n"
+
+#: ../../src/clients/kinit/kinit.c:775
+msgid "getting initial credentials"
+msgstr "საწყისი ავტორიზაციის დეტალების მიღება"
+
+#: ../../src/clients/kinit/kinit.c:778
+msgid "validating credentials"
+msgstr "ავტორიზაციის დეტალების გადამოწმება"
+
+#: ../../src/clients/kinit/kinit.c:781
+msgid "renewing credentials"
+msgstr "ავტორიზაციის დეტალების განახლება"
+
+#: ../../src/clients/kinit/kinit.c:789
+#, c-format
+msgid "%s: Password incorrect while %s\n"
+msgstr "%s: %s-ისას პაროლი არასწორია\n"
+
+#: ../../src/clients/kinit/kinit.c:792
+#, c-format
+msgid "while %s"
+msgstr "%s-სას"
+
+#: ../../src/clients/kinit/kinit.c:803
+msgid "when creating temporary cache"
+msgstr "დროებითი ქეშის შექმნისას"
+
+#: ../../src/clients/kinit/kinit.c:807
+#, c-format
+msgid "Initialized cache\n"
+msgstr "ქეში ინიციალიზებულია\n"
+
+#: ../../src/clients/kinit/kinit.c:811
+msgid "while storing credentials"
+msgstr "ავტორიზაციის დეტალების დამახსოვრებისას"
+
+#: ../../src/clients/kinit/kinit.c:816
+#, c-format
+msgid "while saving to cache %s"
+msgstr "ქეშში (%s) შენახვისას"
+
+#: ../../src/clients/kinit/kinit.c:822
+#, c-format
+msgid "Stored credentials\n"
+msgstr "დამახსოვრებული ავტორიზაციის დეტალები\n"
+
+#: ../../src/clients/kinit/kinit.c:828
+msgid "while switching to new ccache"
+msgstr "ახალ ccache-ზე გადართვისას"
+
+#: ../../src/clients/kinit/kinit.c:885
+#, c-format
+msgid "Authenticated to Kerberos v5\n"
+msgstr "Kerberos v5-თან ავტორიზაცია წარმატებულია\n"
+
+#: ../../src/clients/klist/klist.c:85
+#, c-format
+msgid ""
+"Usage: %s [-e] [-V] [[-c] [-l] [-A] [-d] [-f] [-s] [-a [-n]]] [-k [-i] [-t] "
+"[-K]] [-C] [name]\n"
+msgstr ""
+"გამოყენება: %s [-e] [-V] [[-c] [-l] [-A] [-d] [-f] [-s] [-a [-n]]] [-k [-i] "
+"[-t] [-K]] [-C] [სახელი]\n"
+
+#: ../../src/clients/klist/klist.c:88
+#, c-format
+msgid "\t-c specifies credentials cache\n"
+msgstr "\t-c მიუთითებს ავტორიზაციის დეტალების ქეშს\n"
+
+#: ../../src/clients/klist/klist.c:89
+#, c-format
+msgid "\t-k specifies keytab\n"
+msgstr "\t-k keytab-ის მითითება\n"
+
+#: ../../src/clients/klist/klist.c:90
+#, c-format
+msgid "\t (Default is credentials cache)\n"
+msgstr "\t (ნაგულისხმებია ავტორიზაციის დეტალების ქეში)\n"
+
+#: ../../src/clients/klist/klist.c:91
+#, c-format
+msgid "\t-i uses default client keytab if no name given\n"
+msgstr ""
+"\t-i თუ სახელი მითითებული არაა, ნაგულისხმები კლიენტის keytab -ის გამოყენება\n"
+
+#: ../../src/clients/klist/klist.c:92
+#, c-format
+msgid "\t-l lists credential caches in collection\n"
+msgstr "\t-l კოლექციაში ავტორიზაციის დეტალების ქეშების ჩამონათვალის გამოტანა\n"
+
+#: ../../src/clients/klist/klist.c:93
+#, c-format
+msgid "\t-A shows content of all credential caches\n"
+msgstr "\t-A ყველა ავტორიზაციის დეტალის ქეშის შემცველობის გამოტანა\n"
+
+#: ../../src/clients/klist/klist.c:94
+#, c-format
+msgid "\t-e shows the encryption type\n"
+msgstr "\t-e დაშიფვრის ტიპის ჩვენება\n"
+
+#: ../../src/clients/klist/klist.c:95
+#, c-format
+msgid "\t-V shows the Kerberos version and exits\n"
+msgstr "\t-V Kerberos -ის ვერსიის გამოტანა და გასვლა\n"
+
+#: ../../src/clients/klist/klist.c:96
+#, c-format
+msgid "\toptions for credential caches:\n"
+msgstr "\tპარამეტრები ავტორიზაციის დეტალების ქეშებისთვის:\n"
+
+#: ../../src/clients/klist/klist.c:97
+#, c-format
+msgid "\t\t-d shows the submitted authorization data types\n"
+msgstr "\t\t-d აჩვენებს გადაცემულ ავტორიზაციის მონაცემების ტიპებს\n"
+
+#: ../../src/clients/klist/klist.c:99
+#, c-format
+msgid "\t\t-f shows credentials flags\n"
+msgstr "\t\t-f ავტორიზაციის დეტალების ალმების ჩვენება\n"
+
+#: ../../src/clients/klist/klist.c:100
+#, c-format
+msgid "\t\t-s sets exit status based on valid tgt existence\n"
+msgstr "\t\t-s სწორი სამიზნის არსებობისას გასვლის სტატუსის დაყენება\n"
+
+#: ../../src/clients/klist/klist.c:102
+#, c-format
+msgid "\t\t-a displays the address list\n"
+msgstr "\t\t-a მისამართების სიის ჩვენება\n"
+
+#: ../../src/clients/klist/klist.c:103
+#, c-format
+msgid "\t\t\t-n do not reverse-resolve\n"
+msgstr "\t\t\t-n უკუ-ამოხსნა არ მოხდება\n"
+
+#: ../../src/clients/klist/klist.c:104
+#, c-format
+msgid "\toptions for keytabs:\n"
+msgstr "\tkeytab-ის პარამეტრები:\n"
+
+#: ../../src/clients/klist/klist.c:105
+#, c-format
+msgid "\t\t-t shows keytab entry timestamps\n"
+msgstr "\t\t-t keytab -ის ჩანაწერების დროის შტამპების ჩვენება\n"
+
+#: ../../src/clients/klist/klist.c:106
+#, c-format
+msgid "\t\t-K shows keytab entry keys\n"
+msgstr "\t\t-K keytab ჩანაწერის გასაღებების ჩვენება\n"
+
+#: ../../src/clients/klist/klist.c:107
+#, c-format
+msgid "\t\t-C includes configuration data entries\n"
+msgstr "\t\t-C კონფიგურაციის მონაცემების ჩანაწერების ჩათვლა\n"
+
+#: ../../src/clients/klist/klist.c:225
+#, c-format
+msgid "%s version %s\n"
+msgstr "%s ვერსია %s\n"
+
+#: ../../src/clients/klist/klist.c:278
+msgid "while getting default client keytab"
+msgstr "ნაგულისხმები კლიენტის keytab-ის მიღებისას"
+
+#: ../../src/clients/klist/klist.c:284
+msgid "while getting default keytab"
+msgstr "ნაგულისხმები keytab-ის მიღებისას"
+
+#: ../../src/clients/klist/klist.c:290 ../../src/kadmin/cli/keytab.c:103
+#, c-format
+msgid "while resolving keytab %s"
+msgstr "keytab-ის (%s) ამოხსნისას"
+
+#: ../../src/clients/klist/klist.c:297 ../../src/kadmin/cli/keytab.c:87
+msgid "while getting keytab name"
+msgstr "keytab-ის სახელის მიღებისას"
+
+#: ../../src/clients/klist/klist.c:305 ../../src/kadmin/cli/keytab.c:422
+msgid "while starting keytab scan"
+msgstr "keytab-ის სკანირების გაშვებისას"
+
+#: ../../src/clients/klist/klist.c:328 ../../src/clients/klist/klist.c:484
+#: ../../src/clients/ksu/ccache.c:455 ../../src/kadmin/dbutil/dump.c:487
+#: ../../src/kadmin/dbutil/tabdump.c:549
+msgid "while unparsing principal name"
+msgstr "პრინციპალის სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/klist/klist.c:350 ../../src/kadmin/cli/keytab.c:466
+msgid "while scanning keytab"
+msgstr "keytab-ის სკანირებისას"
+
+#: ../../src/clients/klist/klist.c:355 ../../src/kadmin/cli/keytab.c:471
+msgid "while ending keytab scan"
+msgstr "keytab-ის სკანირების დასრულებისას"
+
+#: ../../src/clients/klist/klist.c:372 ../../src/clients/klist/klist.c:435
+msgid "while listing ccache collection"
+msgstr "ccache-ის კოლექციის ჩამოთვლისას"
+
+#: ../../src/clients/klist/klist.c:411
+msgid "(Expired)"
+msgstr "(ვადაგასულია)"
+
+#: ../../src/clients/klist/klist.c:488
+#, c-format
+msgid ""
+"Ticket cache: %s:%s\n"
+"Default principal: %s\n"
+"\n"
+msgstr ""
+"ბილეთების ქეში: %s:%s\n"
+"ნაგულისხმები პრინციპალი: %s\n"
+"\n"
+
+#: ../../src/clients/klist/klist.c:500
+msgid "while starting to retrieve tickets"
+msgstr "ბილეთების მიღების დაწყებისას"
+
+#: ../../src/clients/klist/klist.c:514
+msgid "while finishing ticket retrieval"
+msgstr "ბილეთების მიღების დასრულებისას"
+
+#: ../../src/clients/klist/klist.c:519
+msgid "while retrieving a ticket"
+msgstr "ბილეთის მიღებისას"
+
+#: ../../src/clients/klist/klist.c:674 ../../src/clients/ksu/ccache.c:440
+#: ../../src/kprop/kpropd.c:1205 ../../src/kprop/kpropd.c:1270
+msgid "while unparsing client name"
+msgstr "კლიენტის სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/klist/klist.c:679 ../../src/clients/ksu/ccache.c:445
+#: ../../src/kprop/kprop.c:191
+msgid "while unparsing server name"
+msgstr "სერვერის სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/klist/klist.c:710 ../../src/clients/ksu/ccache.c:470
+#, c-format
+msgid "\tfor client %s"
+msgstr "\tკლიენტისთვის %s"
+
+#: ../../src/clients/klist/klist.c:722 ../../src/clients/ksu/ccache.c:479
+msgid "renew until "
+msgstr "განაახლეთ ვადამდე "
+
+#: ../../src/clients/klist/klist.c:734 ../../src/clients/ksu/ccache.c:489
+#, c-format
+msgid "Flags: %s"
+msgstr "ალმები: %s"
+
+#: ../../src/clients/klist/klist.c:749
+#, c-format
+msgid "Etype (skey, tkt): %s, "
+msgstr "Etype (skey, ბლთ): %s, "
+
+#: ../../src/clients/klist/klist.c:761
+#, c-format
+msgid "AD types: "
+msgstr "AD ტიპები: "
+
+#: ../../src/clients/klist/klist.c:777
+#, c-format
+msgid "\tAddresses: (none)\n"
+msgstr "\tმისამართები: (არცერთი)\n"
+
+#: ../../src/clients/klist/klist.c:779
+#, c-format
+msgid "\tAddresses: "
+msgstr "\tმისამართები: "
+
+#: ../../src/clients/klist/klist.c:797
+msgid "while unparsing ticket server name"
+msgstr "ბილეთის სერვერის სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/klist/klist.c:800
+#, c-format
+msgid "\tTicket server: %s\n"
+msgstr "\tბილეთის სერვერი: %s\n"
+
+#: ../../src/clients/klist/klist.c:828 ../../src/clients/klist/klist.c:838
+#, c-format
+msgid "broken address (type %d length %d)"
+msgstr "არასწორი მისამართი (ტიპი %d სიგრძე %d)"
+
+#: ../../src/clients/klist/klist.c:847
+#, c-format
+msgid "unknown addrtype %d"
+msgstr "მისამართის უცნობი ტიპი %d"
+
+#: ../../src/clients/klist/klist.c:856
+#, c-format
+msgid "unprintable address (type %d, error %d %s)"
+msgstr "მისამართის დაბეჭდვა შეუძლებელია (ტიპი %d, შეცდომა %d %s)"
+
+#: ../../src/clients/kpasswd/kpasswd.c:13 ../../src/lib/krb5/krb/gic_pwd.c:288
+msgid "Enter new password"
+msgstr "შეიყვანეთ ახალი პაროლი"
+
+#: ../../src/clients/kpasswd/kpasswd.c:14 ../../src/lib/krb5/krb/gic_pwd.c:296
+msgid "Enter it again"
+msgstr "შეიყვანეთ კიდევ ერთხელ"
+
+#: ../../src/clients/kpasswd/kpasswd.c:34
+#, c-format
+msgid "Unable to identify user from password file\n"
+msgstr "მომხმარების იდენტიფიკაცია პაროლის ფაილიდან შეუძლებელია\n"
+
+#: ../../src/clients/kpasswd/kpasswd.c:64
+#, c-format
+msgid "usage: %s [principal]\n"
+msgstr "გამოყენება: %s [პრინციპალი]\n"
+
+#: ../../src/clients/kpasswd/kpasswd.c:72
+msgid "initializing kerberos library"
+msgstr "kerberos -ის ბიბლიოთეკის ინიციალიზაცია"
+
+#: ../../src/clients/kpasswd/kpasswd.c:77
+msgid "allocating krb5_get_init_creds_opt"
+msgstr "krb5_get_init_creds_opt-ის გამოყოფა"
+
+#: ../../src/clients/kpasswd/kpasswd.c:93
+msgid "opening default ccache"
+msgstr "ნაგულისხმები ccache-ის გახსნა"
+
+#: ../../src/clients/kpasswd/kpasswd.c:98
+msgid "getting principal from ccache"
+msgstr "ccache-დან პრინციპალის მიღება"
+
+#: ../../src/clients/kpasswd/kpasswd.c:103
+msgid "while setting FAST ccache"
+msgstr "ccache-ზე FAST-ის დაყენებისას"
+
+#: ../../src/clients/kpasswd/kpasswd.c:109
+msgid "closing ccache"
+msgstr "ccache-ის დახურვა"
+
+#: ../../src/clients/kpasswd/kpasswd.c:117
+msgid "parsing client name"
+msgstr "კლიენტის სახელის დამუშავება"
+
+#: ../../src/clients/kpasswd/kpasswd.c:135
+msgid "Password incorrect while getting initial ticket"
+msgstr "საწყისი ბილეთის მიღებისას პაროლი არასწორია"
+
+#: ../../src/clients/kpasswd/kpasswd.c:137
+msgid "getting initial ticket"
+msgstr "საწყისი ბილეთის მიღება"
+
+#: ../../src/clients/kpasswd/kpasswd.c:147
+msgid "while reading password"
+msgstr "პაროლის კითხვისას"
+
+#: ../../src/clients/kpasswd/kpasswd.c:155
+msgid "changing password"
+msgstr "პაროლის შეცვლა"
+
+#: ../../src/clients/kpasswd/kpasswd.c:175
+#: ../lib/kadm5/chpass_util_strings.c:30
+#, c-format
+msgid "Password changed.\n"
+msgstr "პაროლი შეიცვალა.\n"
+
+#: ../../src/clients/ksu/authorization.c:352
+#, c-format
+msgid ""
+"Error: bad entry - %s in %s file, must be either full path or just the cmd "
+"name\n"
+msgstr ""
+"შეცდომა: არასწორი ჩანაწერი - %s %s ფაილში, ან სრული ბილიკი უნდა იყოს, ან "
+"მხოლოდ ბრძანების სახელი\n"
+
+#: ../../src/clients/ksu/authorization.c:360
+#, c-format
+msgid ""
+"Error: bad entry - %s in %s file, since %s is just the cmd name, CMD_PATH "
+"must be defined \n"
+msgstr ""
+"შეცდომა: არასწორი ჩანაწერი - %s %s ფაილში, რადგან %s უბრალოდ ბრძანების "
+"სახელია, CMD_PATH აღწერილი უნდა იყოს \n"
+
+#: ../../src/clients/ksu/authorization.c:375
+#, c-format
+msgid "Error: bad entry - %s in %s file, CMD_PATH contains no paths \n"
+msgstr ""
+"შეცდომა: არასწორი ჩანაწერი - %s %s ფაილში, CMD_PATH ბილიკებს არ შეიცავს \n"
+
+#: ../../src/clients/ksu/authorization.c:384
+#, c-format
+msgid "Error: bad path %s in CMD_PATH for %s must start with '/' \n"
+msgstr ""
+"შეცდომა: არასწორი ბილიკი %s CMD_PATH -ში %s -სთვის '/' -ით უნდა იწყებოდეს \n"
+
+#: ../../src/clients/ksu/authorization.c:500
+msgid "Error: not found -> "
+msgstr "შეცდომა: ვერ ვიპოვე -> "
+
+#: ../../src/clients/ksu/authorization.c:706
+#, c-format
+msgid "home directory name `%s' too long, can't search for .k5login\n"
+msgstr ""
+"საწყისი საქაღალდის სახელი '%s' ძალიან გრძელია. .k5login-მდე ვერ მივედი\n"
+
+#: ../../src/clients/ksu/ccache.c:358
+#, c-format
+msgid "home directory path for %s too long\n"
+msgstr "საწყისი საქაღალდის ბილიკი %s-სთვის ძალიან გრძელია\n"
+
+#: ../../src/clients/ksu/ccache.c:451
+msgid "while retrieving principal name"
+msgstr "პრინციპალის სახელის მიღებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:57
+#: ../../src/clients/ksu/krb_auth_su.c:62
+msgid "while copying client principal"
+msgstr "კლიენტის პრინციპალის კოპირებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:69
+msgid "while creating tgt for local realm"
+msgstr "ლოკალური რეალმისთვის სამიზნის შექმნსიას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:84
+msgid "while retrieving creds from cache"
+msgstr "ქეშიდან ავტ.დეტ-ების მიღებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:95
+msgid "while switching to target uid"
+msgstr "სამიზნე uid-ზე გადართვისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:100
+#, c-format
+msgid ""
+"WARNING: Your password may be exposed if you enter it here and are logged \n"
+msgstr ""
+"გაფრთხილება: თქვენი პაროლი შეიძლება გამოჩნდეს, თუ აქ აკრეფთ და ის ჟურნალშიც "
+"შეინახება\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:102
+#, c-format
+msgid " in remotely using an unsecure (non-encrypted) channel. \n"
+msgstr " დაუცველი (არადაშიფრული) არხის გამოყენებაში. \n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:114 ../../src/clients/ksu/main.c:481
+msgid "while reclaiming root uid"
+msgstr "root-ის uid-ის გამოთხოვისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:121
+#, c-format
+msgid "does not have any appropriate tickets in the cache.\n"
+msgstr "ქეშში შესაბამისი ბილეთები არ გაგაჩნიათ.\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:133
+msgid "while verifying ticket for server"
+msgstr "სერვერისთვის ბილეთის გადამოწმებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:167
+msgid "while getting time of day"
+msgstr "დროის მიღებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:171
+#, c-format
+msgid "Kerberos password for %s: "
+msgstr "Kerberos -ის პაროლი %s-სთვის: "
+
+#: ../../src/clients/ksu/krb_auth_su.c:175
+#, c-format
+msgid "principal name %s too long for internal buffer space\n"
+msgstr "პრინციპალის სახელი %s ძალიან გრძელია შიდა ბუფერის სივრცისთვის\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:184
+#, c-format
+msgid "while reading password for '%s'\n"
+msgstr "'%s'-სთვის პაროლის წაკითხვისას\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:190
+#, c-format
+msgid "No password given\n"
+msgstr "პაროლი მითითებული არაა\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:203
+#, c-format
+msgid "%s: Password incorrect\n"
+msgstr "%s: პაროლი არასწორია\n"
+
+#: ../../src/clients/ksu/krb_auth_su.c:205
+msgid "while getting initial credentials"
+msgstr "საწყისი ავტორიზაციის დეტალების მიღებისას"
+
+#: ../../src/clients/ksu/krb_auth_su.c:225
+#: ../../src/clients/ksu/krb_auth_su.c:239
+#, c-format
+msgid " %s while unparsing name\n"
+msgstr " %s სახელის დამუშავების გაუქმებისას\n"
+
+#: ../../src/clients/ksu/main.c:69
+#, c-format
+msgid ""
+"Usage: %s [target user] [-n principal] [-c source cachename] [-k] [-r time] "
+"[-p|-P] [-f|-F] [-l lifetime] [-zZ] [-q] [-e command [args... ] ] [-a "
+"[args... ] ]\n"
+msgstr ""
+"გამოყენება: %s [სამიზნე მომხმარებელი] [-n პრინციპალი] [-c საწყისი ქეშის "
+"სახელი] [-k] [-r დრო] [-p|-P] [-f|-F] [-l სიცოცხლის დრო] [-zZ] [-q] [-e "
+"ბრძანება [არგუმენტები... ] ] [-a [არგუმენტები... ] ]\n"
+
+#: ../../src/clients/ksu/main.c:151
+msgid ""
+"program name too long - quitting to avoid triggering system logging bugs"
+msgstr ""
+"პროგრამის სახელი ძალიან გრძელია - მუშაობის დასრულება სისტემის ჟურნალის "
+"შეცდომების აღძვრის თავიდან ასაცილებლად"
+
+#: ../../src/clients/ksu/main.c:177
+msgid "while allocating memory"
+msgstr "მეხსიერების გამოყოფისას"
+
+#: ../../src/clients/ksu/main.c:190
+msgid "while setting euid to source user"
+msgstr "საწყის მომხმარებელზე euid-ის დაყენებისას"
+
+#: ../../src/clients/ksu/main.c:201 ../../src/clients/ksu/main.c:242
+#, c-format
+msgid "Bad lifetime value (%s hours?)\n"
+msgstr "სიცოცხლის დროის არასწორი მნიშვნელობა (%s საათი?)\n"
+
+#: ../../src/clients/ksu/main.c:213 ../../src/clients/ksu/main.c:304
+msgid "when gathering parameters"
+msgstr "პარამეტრების შეგროვებისას"
+
+#: ../../src/clients/ksu/main.c:263
+#, c-format
+msgid "-z option is mutually exclusive with -Z.\n"
+msgstr "-z ორმხრივად გამორიცხავს -Z -ის მითითებას.\n"
+
+#: ../../src/clients/ksu/main.c:271
+#, c-format
+msgid "-Z option is mutually exclusive with -z.\n"
+msgstr "-Z ორმხრივად გამორიცხავს -z -ის მითითებას.\n"
+
+#: ../../src/clients/ksu/main.c:284
+#, c-format
+msgid "while looking for credentials cache %s"
+msgstr "ავტორიზაციის ქეშში (%s) ძებნისას"
+
+#: ../../src/clients/ksu/main.c:290
+#, c-format
+msgid "malformed credential cache name %s\n"
+msgstr "არასწორად ფორმირებული ავტორიზაციის დეტალების ქეშის სახელი %s\n"
+
+#: ../../src/clients/ksu/main.c:348
+#, c-format
+msgid "ksu: who are you?\n"
+msgstr "ksu: ვინ ბრძანდებით?\n"
+
+#: ../../src/clients/ksu/main.c:352
+#, c-format
+msgid "Your uid doesn't match your passwd entry?!\n"
+msgstr "თქვენი uid -ი passwd ფაილის ჩანაწერს არ ემთხვევა?!\n"
+
+#: ../../src/clients/ksu/main.c:367
+#, c-format
+msgid "ksu: unknown login %s\n"
+msgstr "ksu: უცნობი მომხმარებელი %s\n"
+
+#: ../../src/clients/ksu/main.c:387
+msgid "while getting source cache"
+msgstr "საწყისი ქეშის მიღებისას"
+
+#: ../../src/clients/ksu/main.c:396
+msgid "while selecting the best principal"
+msgstr "საუკეთესო პრინციპალის არჩევისას"
+
+#: ../../src/clients/ksu/main.c:404
+msgid "while returning to source uid after finding best principal"
+msgstr "საუკეთესო პრინციპალის არჩევის შემდეგ საწყის uid-ზე დაბრუნებისას"
+
+#: ../../src/clients/ksu/main.c:424
+#, c-format
+msgid "account %s: authorization failed\n"
+msgstr "ანგარიში %s: ავტორიზაციის შეცდომა\n"
+
+#: ../../src/clients/ksu/main.c:459
+msgid "while parsing temporary name"
+msgstr "დროებითი სახელის დამუშავებისას"
+
+#: ../../src/clients/ksu/main.c:464
+msgid "while creating temporary cache"
+msgstr "დროებითი ქეშის შექმნისას"
+
+#: ../../src/clients/ksu/main.c:470 ../../src/clients/ksu/main.c:710
+#, c-format
+msgid "while copying cache %s to %s"
+msgstr "ქეშის %s-დან %s-მდე კოპირებისას"
+
+#: ../../src/clients/ksu/main.c:488
+#, c-format
+msgid ""
+"WARNING: Your password may be exposed if you enter it here and are logged\n"
+msgstr ""
+"გაფრთხილება: თქვენი პაროლი შეიძლება გამოჩნდეს, თუ აქ აკრეფთ და ის ჟურნალშიც "
+"შეინახება\n"
+
+#: ../../src/clients/ksu/main.c:490
+#, c-format
+msgid " in remotely using an unsecure (non-encrypted) channel.\n"
+msgstr " დაუცველი (არადაშიფრული) არხის გამოყენებაში.\n"
+
+#: ../../src/clients/ksu/main.c:496
+#, c-format
+msgid "Goodbye\n"
+msgstr "ნახვამდის\n"
+
+#: ../../src/clients/ksu/main.c:500
+#, c-format
+msgid "Could not get a tgt for "
+msgstr "სამიზნის მიღება შეუძლებელია "
+
+#: ../../src/clients/ksu/main.c:522
+#, c-format
+msgid "Authentication failed.\n"
+msgstr "ავთენტიკაციის შეცდომა.\n"
+
+#: ../../src/clients/ksu/main.c:530
+msgid "When unparsing name"
+msgstr "სახელის დამუშავების გაუქმებისას"
+
+#: ../../src/clients/ksu/main.c:534
+#, c-format
+msgid "Authenticated %s\n"
+msgstr "ავთენტიფიცირებული %s\n"
+
+#: ../../src/clients/ksu/main.c:541
+msgid "while switching to target for authorization check"
+msgstr "ავთორიზაციის შემოწმებისთვის სამიზნის გადართვისას"
+
+#: ../../src/clients/ksu/main.c:548
+msgid "while checking authorization"
+msgstr "ავტორიზაციის შემოწმებისას"
+
+#: ../../src/clients/ksu/main.c:554
+msgid "while switching back from target after authorization check"
+msgstr "ავტორიზაციის შემოწმების შემდეგ სამიზნეზე დაბრუნებისას"
+
+#: ../../src/clients/ksu/main.c:561
+#, c-format
+msgid "Account %s: authorization for %s for execution of\n"
+msgstr "ანგარიში %s: ავტორიზაცია %s-სთვის, რომ შესრულდეს\n"
+
+#: ../../src/clients/ksu/main.c:563
+#, c-format
+msgid " %s successful\n"
+msgstr " %s წარმატებულია\n"
+
+#: ../../src/clients/ksu/main.c:569
+#, c-format
+msgid "Account %s: authorization for %s successful\n"
+msgstr "ანგარიში %s: ავტორიზაცია %s-სთვის წარმატებულია\n"
+
+#: ../../src/clients/ksu/main.c:581
+#, c-format
+msgid "Account %s: authorization for %s for execution of %s failed\n"
+msgstr "ანგარიში %s: ავტორიზაციის შეცდომა %s-სთვის, %s-ის შესასრულებლად\n"
+
+#: ../../src/clients/ksu/main.c:589
+#, c-format
+msgid "Account %s: authorization of %s failed\n"
+msgstr "ანგარიშის %s: %s-ის ავტორიზაციის შეცდომა\n"
+
+#: ../../src/clients/ksu/main.c:604
+msgid "while calling cc_filter"
+msgstr "cc_filter-ის გამოძახებისას"
+
+#: ../../src/clients/ksu/main.c:612
+msgid "while erasing target cache"
+msgstr "სამიზნე ქეშის წაშლისას"
+
+#: ../../src/clients/ksu/main.c:632
+#, c-format
+msgid "ksu: permission denied (shell).\n"
+msgstr "ksu: წვდომა აკრძალულია (გარსი).\n"
+
+#: ../../src/clients/ksu/main.c:641
+#, c-format
+msgid "ksu: couldn't set environment variable USER\n"
+msgstr "ksu: გარემოს ცვლადის დაყენების შეცდომა: USER\n"
+
+#: ../../src/clients/ksu/main.c:647
+#, c-format
+msgid "ksu: couldn't set environment variable HOME\n"
+msgstr "ksu: გარემოს ცვლადის დაყენების შეცდომა: HOME\n"
+
+#: ../../src/clients/ksu/main.c:652
+#, c-format
+msgid "ksu: couldn't set environment variable SHELL\n"
+msgstr "ksu: გარემოს ცვლადის დაყენების შეცდომა: SHELL\n"
+
+#: ../../src/clients/ksu/main.c:663
+#, c-format
+msgid "ksu: initgroups failed.\n"
+msgstr "ksu: initgroups -ის შეცდომა.\n"
+
+#: ../../src/clients/ksu/main.c:668
+#, c-format
+msgid "Leaving uid as %s (%ld)\n"
+msgstr "UID-ი დარჩება %s (%ld)\n"
+
+#: ../../src/clients/ksu/main.c:671
+#, c-format
+msgid "Changing uid to %s (%ld)\n"
+msgstr "UID-ის შეცვლა %s-ზე (%ld)\n"
+
+#: ../../src/clients/ksu/main.c:697
+msgid "while getting name of target ccache"
+msgstr "სამიზნე ccache-ის სახელის მიღებისას"
+
+#: ../../src/clients/ksu/main.c:717
+#, c-format
+msgid "%s does not have correct permissions for %s, %s aborted"
+msgstr "%s-ს %s-სთვის სწორი წვდომები არ გააჩნია. %s ავარიულად დასრულდა"
+
+#: ../../src/clients/ksu/main.c:738
+#, c-format
+msgid "Internal error: command %s did not get resolved\n"
+msgstr "შიდა შეცდომა: ბრძანება %s\n"
+
+#: ../../src/clients/ksu/main.c:755 ../../src/clients/ksu/main.c:791
+#, c-format
+msgid "while trying to execv %s"
+msgstr "%s-ის execv-ისას"
+
+#: ../../src/clients/ksu/main.c:781
+msgid "while calling waitpid"
+msgstr "waitpid-ის გამოძახებისას"
+
+#: ../../src/clients/ksu/main.c:786
+msgid "while trying to fork."
+msgstr "fork-ის მცდელობისას."
+
+#: ../../src/clients/ksu/main.c:836
+msgid "while reading cache name from ccache"
+msgstr "ქეშის სახელის ccache-დან წაკითხვისას"
+
+#: ../../src/clients/ksu/main.c:842
+#, c-format
+msgid "ksu: couldn't set environment variable %s\n"
+msgstr "ksu: შეცდომა გარემოს ცვლადის დაყენებისას %s\n"
+
+#: ../../src/clients/ksu/main.c:868
+msgid "while resetting target ccache name"
+msgstr "სამიზნის ccache-ის სახელის საწყის მნიშვნელობაზე დაყენებისას"
+
+#: ../../src/clients/ksu/main.c:882
+msgid "while determining target ccache name"
+msgstr "სამიზნის ccache-ის სახელის დადგენისას"
+
+#: ../../src/clients/ksu/main.c:921
+msgid "while generating part of the target ccache name"
+msgstr "სამიზნე ccache-ის სახელის ნაწილის გენერირებისას"
+
+#: ../../src/clients/ksu/main.c:927
+msgid "while allocating memory for the target ccache name"
+msgstr "სამიზნე ccache-ის სახელისთვის მეხსიერების გამოყოფისას"
+
+#: ../../src/clients/ksu/main.c:946
+msgid "while creating new target ccache"
+msgstr "ახალი სამიზნე ccache-ის შექმნისას"
+
+#: ../../src/clients/ksu/main.c:952
+msgid "while initializing target cache"
+msgstr "სამიზნე ქეშის ინიციალიზაციისას"
+
+#: ../../src/clients/ksu/main.c:992
+#, c-format
+msgid "terminal name %s too long\n"
+msgstr "საბოლოო სახელი %s ძალიან გრძელია\n"
+
+#: ../../src/clients/ksu/main.c:1020
+msgid "while changing to target uid for destroying ccache"
+msgstr "ccache-ის გასანადგურებლად სამიზნე uid-ზე გადართვისას"
+
+#: ../../src/clients/kswitch/kswitch.c:41
+#, c-format
+msgid "Usage: %s {-c cache_name | -p principal}\n"
+msgstr "გამოყენება: %s {-c ქეშის სახელი | -p პრინციპალი}\n"
+
+#: ../../src/clients/kswitch/kswitch.c:43
+#, c-format
+msgid "\t-p specify name of principal\n"
+msgstr "\t-p მიუთითეთ პრინციპალის სახელი\n"
+
+#: ../../src/clients/kswitch/kswitch.c:66
+#, c-format
+msgid "Only one -c or -p option allowed\n"
+msgstr "-p და -c პარამეტრებიდან მხოლოდ ერთ-ერთი მათგანის მითითება შეგიძლიათ\n"
+
+#: ../../src/clients/kswitch/kswitch.c:85
+#, c-format
+msgid "One of -c or -p must be specified\n"
+msgstr "-p და -c პარამეტრებიდან მხოლოდ ერთი მათგანიუნდა იყოს მითითებული\n"
+
+#: ../../src/clients/kswitch/kswitch.c:101
+#, c-format
+msgid "while resolving %s"
+msgstr "%s-ის ამოხსნისას"
+
+#: ../../src/clients/kswitch/kswitch.c:122
+msgid "while switching to credential cache"
+msgstr "ავტორიზაციის დეტალების ქეშის გადართვისას"
+
+#: ../../src/clients/kvno/kvno.c:44
+#, c-format
+msgid ""
+"usage: %s [-c ccache] [-e etype] [-k keytab] [-q] [-u | -S sname]\n"
+"\t[[{-F cert_file | {-I | -U} for_user} [-P]] | --u2u ccache]\n"
+"\t[--cached-only] [--no-store] [--out-cache] service1 service2 ...\n"
+msgstr ""
+"გამოყენება: %s [-c ccache] [-e etype] [-k keytab] [-q] [-u | -S sname]\n"
+"\t[[{-F სერტ_ფაილი | {-I | -U} მომხმარებლისთვის} [-P]] | --u2u ccache]\n"
+"\t[--cached-only] [--no-store] [--out-cache] სერვისი1 სერვისი2 ...\n"
+
+#: ../../src/clients/kvno/kvno.c:117 ../../src/clients/kvno/kvno.c:125
+#, c-format
+msgid "Options -u and -S are mutually exclusive\n"
+msgstr "-u და -S ურთიერთგამომრიცხავი პარამეტრებია\n"
+
+#: ../../src/clients/kvno/kvno.c:159
+#, c-format
+msgid "Options --u2u and -I|-U|-F are mutually exclusive\n"
+msgstr "--u2u და -I|-U|-F ურთიერთგამომრიცხავი პარამეტრებია\n"
+
+#: ../../src/clients/kvno/kvno.c:165
+#, c-format
+msgid ""
+"Option -P (constrained delegation) requires option -I|-U|-F (protocol "
+"transition)\n"
+msgstr ""
+"პარამეტრს -P (შეზღუდული დელეგაცია) -I|-U|-F პარამეტრებიდან ერთერთი "
+"(პროტოკოლის გადაცემა) ესაჭიროება\n"
+
+#: ../../src/clients/kvno/kvno.c:240
+msgid "No begin line not found"
+msgstr "ხაზის დასაწყისი ნაპოვნი არაა"
+
+#: ../../src/clients/kvno/kvno.c:252
+msgid "No end line found"
+msgstr "ხაზის ბოლო ნაპოვნი არაა"
+
+#: ../../src/clients/kvno/kvno.c:263
+msgid "Unexpected header line"
+msgstr "მოულოდნელი თავსართის საზი"
+
+#: ../../src/clients/kvno/kvno.c:273
+msgid "Invalid base64"
+msgstr "არასწორი base64"
+
+#: ../../src/clients/kvno/kvno.c:319
+#, c-format
+msgid "while formatting parsed principal name for '%s'"
+msgstr "'%s'-სთვის დამუშავებული პრინციპალის სახელის ფორმატირებისას"
+
+#: ../../src/clients/kvno/kvno.c:333
+msgid "client and server principal names must match"
+msgstr "კლიენტისა და სერვერის პრინციპალის სახელები უნდა ემთხვეოდეს"
+
+#: ../../src/clients/kvno/kvno.c:349
+#, c-format
+msgid "while getting credentials for %s"
+msgstr "%s-სთვის ავტორიზაციის დეტალების მიღებისას"
+
+#: ../../src/clients/kvno/kvno.c:356
+#, c-format
+msgid "while decoding ticket for %s"
+msgstr "%s-სთვის ბილეთის დეკოდირებისას"
+
+#: ../../src/clients/kvno/kvno.c:367
+#, c-format
+msgid "while decrypting ticket for %s"
+msgstr "%s-სთვის ბილეთის გაშიფვრისას"
+
+#: ../../src/clients/kvno/kvno.c:371
+#, c-format
+msgid "%s: kvno = %d, keytab entry valid\n"
+msgstr "%s: kvno = %d, keytab -ის ჩანაწერი არასწორია \n"
+
+#: ../../src/clients/kvno/kvno.c:376
+#, c-format
+msgid "%s: kvno = %d\n"
+msgstr "%s: kvno = %d\n"
+
+#: ../../src/clients/kvno/kvno.c:391
+#, c-format
+msgid "%s: constrained delegation failed"
+msgstr "%s: შეზღუდული დელეგირების შეცდომა"
+
+#: ../../src/clients/kvno/kvno.c:474 ../../src/kadmin/cli/kadmin.c:311
+msgid "while initializing krb5 library"
+msgstr "krb5-ის ბიბლიოთეკის ინიციალიზაციისას"
+
+#: ../../src/clients/kvno/kvno.c:481
+msgid "while converting etype"
+msgstr "etype-ის გარდაქმნისას"
+
+#: ../../src/clients/kvno/kvno.c:493
+msgid "while opening ccache"
+msgstr "ccache-ის გახნისას"
+
+#: ../../src/clients/kvno/kvno.c:500
+msgid "while resolving output ccache"
+msgstr "გამოტანის ccache-ის ამოხსნისას"
+
+#: ../../src/clients/kvno/kvno.c:525
+#, c-format
+msgid "while reading certificate file %s"
+msgstr "ფაილისთვის %s სერტიფიკატის წაკითხვისას"
+
+#: ../../src/clients/kvno/kvno.c:535
+#, c-format
+msgid "while getting user-to-user ticket from %s"
+msgstr "მომხმარებლიდან-მომხმარებლამდე ბილეთის %s-სგან მიღებისას"
+
+#: ../../src/clients/kvno/kvno.c:544
+msgid "while getting client principal name"
+msgstr "კლიენტის პრინციპალის სახელის მიღებისას"
+
+#: ../../src/clients/kvno/kvno.c:551
+msgid "while creating temporary output ccache"
+msgstr "დროებითი გამოტანის ccache-ის შექმნისას"
+
+#: ../../src/clients/kvno/kvno.c:565
+msgid "while initializing output ccache"
+msgstr "გამოტანის ccache-ის ინიციალიზაციისას"
+
+#: ../../src/clients/kvno/kvno.c:575
+msgid "while storing creds in output ccache"
+msgstr "ავტორიზაციის დეტალების გამოტანის ccache-ში შენახვისას"
+
+#: ../../src/clients/kvno/kvno.c:586
+msgid "while writing output ccache"
+msgstr "გამოტანის ccache-ის შენახვისას"
+
+#: ../../src/kadmin/cli/kadmin.c:103
+#, c-format
+msgid ""
+"Usage: %s [-r realm] [-p principal] [-q query] [clnt|local args]\n"
+" [command args...]\n"
+"\tclnt args: [-s admin_server[:port]] [[-c ccache]|[-k [-t keytab]]]|[-n] [-"
+"O | -N]\n"
+"\tlocal args: [-x db_args]* [-d dbname] [-e \"enc:salt ...\"] [-m] [-w "
+"password] where,\n"
+"\t[-x db_args]* - any number of database specific arguments.\n"
+"\t\t\tLook at each database documentation for supported arguments\n"
+msgstr ""
+"გამოყენება: %s [-r რეალმი] [-p პრინციპალი] [-q მოთხოვნა] [კლიენტი|ლოკალური "
+"არგუმენტები]\n"
+" [ბრძანების არგუმენტები...]\n"
+"\tკლიენტის არგუმენტები: [-s ადმინ_სერვერი[:პორტი]] [[-c ccache]|[-k [-t "
+"keytab]]]|[-n] [-O | -N]\n"
+"\tლოკალური არგუმენტები: [-x ბაზის_არგუმენტები]* [-d ბაზსსახელი] [-e \"შიფრი:"
+"მარილი ...\"] [-m] [-w პაროლი] სად,\n"
+"\t[-x ბაზის_არგუმენტები]* - ბაზის ნებისმიერი პარამეტრი.\n"
+"\t\t\tმხარდაჭერილი არგუმენტებისთვის მიმართეთ ბაზის დოკუმენტაციას\n"
+
+#: ../../src/kadmin/cli/kadmin.c:164
+#, c-format
+msgid "Invalid date specification \"%s\".\n"
+msgstr "არასწორი მონაცემების სპეციფიკაცია \"%s\".\n"
+
+#: ../../src/kadmin/cli/kadmin.c:192
+#, c-format
+msgid "Interval specification \"%s\" is in the past.\n"
+msgstr "ინტერვალის სპეციფიკაცია \"%s\" წარსულშია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:322 ../../src/kadmin/cli/kadmin.c:361
+#, c-format
+msgid "%s: Cannot initialize. Not enough memory\n"
+msgstr "%s: ინიციალიზაციის შეცდომა. არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:380 ../../src/kadmin/cli/kadmin.c:840
+#: ../../src/kadmin/cli/kadmin.c:1109 ../../src/kadmin/cli/kadmin.c:1630
+#: ../../src/kadmin/cli/keytab.c:148 ../../src/kadmin/dbutil/kdb5_util.c:559
+#, c-format
+msgid "while parsing keysalts %s"
+msgstr "keysalt %s-ის დამუშავებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:403
+#, c-format
+msgid "%s: -q is exclusive with command-line query"
+msgstr "%s: -q ბრძანების სტრიქონიდან გამოთხოვისთვის ექსკლუზიურია"
+
+#: ../../src/kadmin/cli/kadmin.c:411
+#, c-format
+msgid "%s: unable to get default realm\n"
+msgstr "%s: ნაგულისხმები რეალმის მიღების შეცდომა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:431
+msgid "while opening default credentials cache"
+msgstr "ნაგულისხმები ავტორიზაციის დეტალების ქეშის გახსნისას"
+
+#: ../../src/kadmin/cli/kadmin.c:437
+#, c-format
+msgid "while opening credentials cache %s"
+msgstr "ავტორიზაციის დეტალების ქეშის (%s) გახსნისას"
+
+#: ../../src/kadmin/cli/kadmin.c:459 ../../src/kadmin/cli/kadmin.c:513
+#: ../../src/kadmin/cli/kadmin.c:521 ../../src/kadmin/cli/kadmin.c:528
+#, c-format
+msgid "%s: out of memory\n"
+msgstr "%s: არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:468 ../../src/kadmin/cli/kadmin.c:483
+#: ../../src/kprop/kpropd.c:677
+msgid "while canonicalizing principal name"
+msgstr "პრინციპალის სახელის კანონიკალიზირებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:477
+msgid "creating host service principal"
+msgstr "ჰოსტის სერვისის პრინციპალის შექმნა"
+
+#: ../../src/kadmin/cli/kadmin.c:490
+#, c-format
+msgid "%s: unable to canonicalize principal\n"
+msgstr "%s: პრინციპალის კანონიკალიზაციის შეცდომა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:533
+#, c-format
+msgid "%s: unable to figure out a principal name\n"
+msgstr "%s: პრინციპალის სახელის გარკვევის შეცდომა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:540
+msgid "while setting up logging"
+msgstr "ჟურნალის მორგებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:549
+#, c-format
+msgid "Authenticating as principal %s with existing credentials.\n"
+msgstr "ავთენტიკაცია, როგორც პრინციპალი %s, არსებული ავტორიზაციის დეტალებით.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:555
+#, c-format
+msgid "Authenticating as principal %s with password; anonymous requested.\n"
+msgstr "ავთენტიკაცია, როგორც პრინციპალი %s, პაროლით: ანონიმური მოთხოვნილია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:562
+#, c-format
+msgid "Authenticating as principal %s with keytab %s.\n"
+msgstr "ავთენტიკაცია, როგორც პრინციპალი %s, keytab-ით %s.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:565
+#, c-format
+msgid "Authenticating as principal %s with default keytab.\n"
+msgstr "ავთენტიკაცია, როგორც პრინციპალი %s, ნაგულისხმები keytab-ით.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:572
+#, c-format
+msgid "Authenticating as principal %s with password.\n"
+msgstr "ავთენტიკაცია, როგორც პრინციპალი %s, პაროლით.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:580 ../../src/kprop/kpropd.c:722
+#, c-format
+msgid "while initializing %s interface"
+msgstr "%s ინტერფეისის ინიციალიზაციისას"
+
+#: ../../src/kadmin/cli/kadmin.c:595
+#, c-format
+msgid "while closing ccache %s"
+msgstr "ccache -ის (%s) დახურვისას"
+
+#: ../../src/kadmin/cli/kadmin.c:601
+msgid "while mapping update log"
+msgstr "განახლების ჟურნალის მიბმიბსას"
+
+#: ../../src/kadmin/cli/kadmin.c:617
+msgid "while unlocking locked database"
+msgstr "დაბლოკილიბაზის განბლოკვისას"
+
+#: ../../src/kadmin/cli/kadmin.c:626
+msgid "Administration credentials NOT DESTROYED.\n"
+msgstr "ადმინისტრატორის ავტორიზაციის დეტალები არ განადგურებულა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:675
+msgid "usage: delete_principal [-force] principal\n"
+msgstr "გამოყენება: delete_principal [-force] პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:680 ../../src/kadmin/cli/kadmin.c:859
+msgid "while parsing principal name"
+msgstr "პრინციპალის სახელის დამუშავებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:686 ../../src/kadmin/cli/kadmin.c:865
+#: ../../src/kadmin/cli/kadmin.c:1218 ../../src/kadmin/cli/kadmin.c:1343
+#: ../../src/kadmin/cli/kadmin.c:1413 ../../src/kadmin/cli/kadmin.c:1853
+#: ../../src/kadmin/cli/kadmin.c:1897 ../../src/kadmin/cli/kadmin.c:1943
+#: ../../src/kadmin/cli/kadmin.c:1983
+msgid "while canonicalizing principal"
+msgstr "პრინციპალის სახელის კანონიკალიზირებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:690
+#, c-format
+msgid "Are you sure you want to delete the principal \"%s\"? (yes/no): "
+msgstr ""
+"დარწმუნებული ბრძანდებით რომ გნებავთ პრინციპალი \"%s\"-ის საბოლოოდ წაშლა "
+"(yes(დიახ)/no(არა)): "
+
+#: ../../src/kadmin/cli/kadmin.c:694
+#, c-format
+msgid "Principal \"%s\" not deleted\n"
+msgstr "პრინციპალი \"%s\" არ წაშლილა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:701
+#, c-format
+msgid "while deleting principal \"%s\""
+msgstr "პრინციპალი \"%s\"-ის წაშლისას"
+
+#: ../../src/kadmin/cli/kadmin.c:704
+#, c-format
+msgid "Principal \"%s\" deleted.\n"
+msgstr "პრინციპალი \"%s\" წაიშალა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:705
+msgid ""
+"Make sure that you have removed this principal from all ACLs before "
+"reusing.\n"
+msgstr ""
+"დარწმუნდით, რომ თავიდან გამოყენებამდე პრინციპალი ყველა ACL-დან წაშალეთ\n"
+
+#: ../../src/kadmin/cli/kadmin.c:722
+msgid "usage: rename_principal [-force] old_principal new_principal\n"
+msgstr ""
+"გამოყენება: rename_principal [-force] ძველი_პრინციპალი ახალი_პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:729
+msgid "while parsing old principal name"
+msgstr "ძველი პრინციპალის სახელის დამუშავებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:735
+msgid "while parsing new principal name"
+msgstr "ახალი პრინციპალის სახელის დამუშავებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:741
+msgid "while canonicalizing old principal"
+msgstr "ძველი პრინციპალის კანონიკალიზირებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:747
+msgid "while canonicalizing new principal"
+msgstr "ახალი პრინციპალის კანონიკალიზირებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:751
+#, c-format
+msgid ""
+"Are you sure you want to rename the principal \"%s\" to \"%s\"? (yes/no): "
+msgstr ""
+"დარწმუნებული ბრძანდებით რომ გნებავთ, პრინციპალის სახელის \"%s\"-დან %s-მდე "
+"გადარქმევა (yes(დიახ)/no(არა)): "
+
+#: ../../src/kadmin/cli/kadmin.c:755
+#, c-format
+msgid "Principal \"%s\" not renamed\n"
+msgstr "პრინციპალი '%s\"-ის სახელი არ შეცვლილა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:762
+#, c-format
+msgid "while renaming principal \"%s\" to \"%s\""
+msgstr "პრინციპალის სახელის \"%s\"-დან \"%s\"-მდე გადარქმევისას"
+
+#: ../../src/kadmin/cli/kadmin.c:766
+#, c-format
+msgid "Principal \"%s\" renamed to \"%s\".\n"
+msgstr "პრინციპალი \"%s\" -ის სახელი \"%s\"-ზე შეიცვალა.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:767
+msgid ""
+"Make sure that you have removed the old principal from all ACLs before "
+"reusing.\n"
+msgstr ""
+"დარწმუნდით, რომ თავიდან გამოყენებამდე ძველი პრინციპალი ყველა ACL-დან "
+"წაშალეთ\n"
+
+#: ../../src/kadmin/cli/kadmin.c:782
+msgid ""
+"usage: change_password [-randkey] [-keepold] [-e keysaltlist] [-pw password] "
+"principal\n"
+msgstr ""
+"გამოყენება: change_password [-randkey] [-keepold] [-e keysaltlist] [-pw "
+"პაროლი] პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:808
+msgid "change_password: missing db argument"
+msgstr "change_password: ბაზის არგუმენტის გაერშე"
+
+#: ../../src/kadmin/cli/kadmin.c:814
+msgid "change_password: Not enough memory\n"
+msgstr "change_password: არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:822
+msgid "change_password: missing password arg"
+msgstr "change_password: აკლია პაროლის არგუმენტი"
+
+#: ../../src/kadmin/cli/kadmin.c:833
+msgid "change_password: missing keysaltlist arg"
+msgstr "change_password: აკლია keysaltlist არგუმენტი"
+
+#: ../../src/kadmin/cli/kadmin.c:844
+#, c-format
+msgid "unrecognized option %s"
+msgstr "უცნობი პარამეტრი %s"
+
+#: ../../src/kadmin/cli/kadmin.c:851
+msgid "missing principal name"
+msgstr "აკლია პრინციპალის სახელი"
+
+#: ../../src/kadmin/cli/kadmin.c:853
+msgid "too many arguments"
+msgstr "მეტისმეტად ბევრი არგუმენტი"
+
+#: ../../src/kadmin/cli/kadmin.c:877 ../../src/kadmin/cli/kadmin.c:914
+#, c-format
+msgid "while changing password for \"%s\"."
+msgstr "\"%s\"-სთვის პაროლის ცვლილებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:880 ../../src/kadmin/cli/kadmin.c:917
+#, c-format
+msgid "Password for \"%s\" changed.\n"
+msgstr "%s-ის პაროლი შეიცვალა.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:886 ../../src/kadmin/cli/kadmin.c:1294
+#, c-format
+msgid "while randomizing key for \"%s\"."
+msgstr "\"%s\"-ის გასაღების რანდომიზებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:889
+#, c-format
+msgid "Key for \"%s\" randomized.\n"
+msgstr "\"%s\"-ის გასაღები რანდომიზებულია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:894 ../../src/kadmin/cli/kadmin.c:1254
+#, c-format
+msgid "Enter password for principal \"%s\""
+msgstr "შეყვანეთ პაროლი პრინციპალისთვის \"%s\""
+
+#: ../../src/kadmin/cli/kadmin.c:896 ../../src/kadmin/cli/kadmin.c:1256
+#, c-format
+msgid "Re-enter password for principal \"%s\""
+msgstr "ხელახლა შეიყვანეთ პაროლი პრინციპალისთვის \"%s\""
+
+#: ../../src/kadmin/cli/kadmin.c:901 ../../src/kadmin/cli/kadmin.c:1260
+#, c-format
+msgid "while reading password for \"%s\"."
+msgstr "%s-ის პაროლის წაკითხვისას."
+
+#: ../../src/kadmin/cli/kadmin.c:955
+msgid "Not enough memory\n"
+msgstr "არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:985 ../../src/kadmin/dbutil/kdb5_util.c:591
+msgid "while getting time"
+msgstr "დროის მიღებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1126 ../../src/kadmin/cli/kadmin.c:1337
+#: ../../src/kadmin/cli/kadmin.c:1408 ../../src/kadmin/cli/kadmin.c:1847
+#: ../../src/kadmin/cli/kadmin.c:1891 ../../src/kadmin/cli/kadmin.c:1937
+#: ../../src/kadmin/cli/kadmin.c:1977
+msgid "while parsing principal"
+msgstr "პრინციპალის დამუშავებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1135
+msgid "usage: add_principal [options] principal\n"
+msgstr "გამოყენება: add_principal [პარამეტრები] პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1136 ../../src/kadmin/cli/kadmin.c:1160
+#: ../../src/kadmin/cli/kadmin.c:1653
+msgid "\toptions are:\n"
+msgstr "\tპარამეტრებია:\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1137
+msgid ""
+"\t\t[-randkey|-nokey] [-x db_princ_args]* [-expire expdate] [-pwexpire "
+"pwexpdate] [-maxlife maxtixlife]\n"
+"\t\t[-kvno kvno] [-policy policy] [-clearpolicy]\n"
+"\t\t[-pw password] [-maxrenewlife maxrenewlife]\n"
+"\t\t[-e keysaltlist]\n"
+"\t\t[{+|-}attribute]\n"
+msgstr ""
+"\t\t[-randkey|-nokey] [-x ბაზის_პრინც_არგუმენტები]* [-expire ვადის_თარიღი] [-"
+"pwexpire პაროლის_ვადა] [-maxlife maxtixlife]\n"
+"\t\t[-kvno kvno] [-policy პოლიტიკა] [-clearpolicy]\n"
+"\t\t[-pw პაროლი] [-maxrenewlife maxrenewlife]\n"
+"\t\t[-e გასაღების_მარილის_სია]\n"
+"\t\t[{+|-}ატრიბუტი]\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1142 ../../src/kadmin/cli/kadmin.c:1165
+msgid "\tattributes are:\n"
+msgstr "\tატრიბუტებია:\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1143 ../../src/kadmin/cli/kadmin.c:1166
+msgid ""
+"\t\tallow_postdated allow_forwardable allow_tgs_req allow_renewable\n"
+"\t\tallow_proxiable allow_dup_skey allow_tix requires_preauth\n"
+"\t\trequires_hwauth needchange allow_svr password_changing_service\n"
+"\t\tok_as_delegate ok_to_auth_as_delegate no_auth_data_required\n"
+"\t\tlockdown_keys\n"
+"\n"
+"where,\n"
+"\t[-x db_princ_args]* - any number of database specific arguments.\n"
+"\t\t\tLook at each database documentation for supported arguments\n"
+msgstr ""
+"\t\tallow_postdated allow_forwardable allow_tgs_req allow_renewable\n"
+"\t\tallow_proxiable allow_dup_skey allow_tix requires_preauth\n"
+"\t\trequires_hwauth needchange allow_svr password_changing_service\n"
+"\t\tok_as_delegate ok_to_auth_as_delegate no_auth_data_required\n"
+"\t\tlockdown_keys\n"
+"\n"
+"სადაც,\n"
+"\t[-x ბაზის_პრინციპული_არგუმენტები]* - ბაზისთვის გადაცემული არგუმენტები.\n"
+"\t\t\tმხარდაჭერილი არგუმენტების სანახავად მიმართეთ ბაზის დოკუმენტაციას\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1159
+msgid "usage: modify_principal [options] principal\n"
+msgstr "გამოყენება: modify_principal [პარამეტრები] პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1161
+msgid ""
+"\t\t[-x db_princ_args]* [-expire expdate] [-pwexpire pwexpdate] [-maxlife "
+"maxtixlife]\n"
+"\t\t[-kvno kvno] [-policy policy] [-clearpolicy]\n"
+"\t\t[-maxrenewlife maxrenewlife] [-unlock] [{+|-}attribute]\n"
+msgstr ""
+"\t\t[-x ბაზის_პრინციპული_არგუმენტები]* [-expire ვადა] [-pwexpire "
+"პაროლის_ვადა] [-maxlife maxtixlife]\n"
+"\t\t[-kvno kvno] [-policy პოლიტიკა] [-clearpolicy]\n"
+"\t\t[-maxrenewlife maxrenewlife] [-unlock] [{+|-}ატრიბუტი]\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1225 ../../src/kadmin/cli/kadmin.c:1366
+#, c-format
+msgid "WARNING: policy \"%s\" does not exist\n"
+msgstr "გაფრთხილება: პოლიტიკა \"%s\" არ არსებობს\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1232
+#, c-format
+msgid "No policy specified for %s; assigning \"default\"\n"
+msgstr "%s-სთვის პოლიტიკა მითითებული არაა. \"ნაგულისხმების\" მინიჭება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1238
+#, c-format
+msgid "No policy specified for %s; defaulting to no policy\n"
+msgstr ""
+"%s-სთვის პოლიტიკა მითიტებული არაა. ნაგულისხმებად პოლიტიკა მინიჭებული არ "
+"იქნება\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1280
+#, c-format
+msgid "Admin server does not support -nokey while creating \"%s\"\n"
+msgstr "ადმინის სერვერს \"%s\"-ის შექმნისას -nokey -ის მხარდაჭერა არ გააჩნია\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1302
+#, c-format
+msgid "while clearing DISALLOW_ALL_TIX for \"%s\"."
+msgstr "\"%s\"-სთვის DISALLOW_ALL_TIX -ის გასუფთავებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1349
+#, c-format
+msgid "while getting \"%s\"."
+msgstr "\"%s\"-ის მიღებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1375
+#, c-format
+msgid "while modifying \"%s\"."
+msgstr "\"%s\"-ის ცვლილებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1379
+#, c-format
+msgid "Principal \"%s\" modified.\n"
+msgstr "პრინციპალი \"%s\" შეიცვალა.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1400
+msgid "usage: get_principal [-terse] principal\n"
+msgstr "გამოყენება: get_principal [-terse] პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1419
+#, c-format
+msgid "while retrieving \"%s\"."
+msgstr "\"%s\"-ის მიღებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1424 ../../src/kadmin/cli/kadmin.c:1429
+msgid "while unparsing principal"
+msgstr "პრინციპალის დამუშავების გაუქმებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1433
+#, c-format
+msgid "Principal: %s\n"
+msgstr "პრინციპალი: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1434
+#, c-format
+msgid "Expiration date: %s\n"
+msgstr "ვადის თარიღი: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1435 ../../src/kadmin/cli/kadmin.c:1437
+#: ../../src/kadmin/cli/kadmin.c:1440 ../../src/kadmin/cli/kadmin.c:1448
+msgid "[never]"
+msgstr "[არასდროს]"
+
+#: ../../src/kadmin/cli/kadmin.c:1436
+#, c-format
+msgid "Last password change: %s\n"
+msgstr "პაროლის ბოლო ცვლილება: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1438
+#, c-format
+msgid "Password expiration date: %s\n"
+msgstr "პაროლის ამოწურვის ვადა: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1441
+#, c-format
+msgid "Maximum ticket life: %s\n"
+msgstr "ბილეთის მაქსიმალური სიცოცხლე: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1442
+#, c-format
+msgid "Maximum renewable life: %s\n"
+msgstr "მაქსიმალური განახლებადი სიცოცხლე: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1444
+#, c-format
+msgid "Last modified: %s (%s)\n"
+msgstr "ბოლო ცვლილება: %s (%s)\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1446
+#, c-format
+msgid "Last successful authentication: %s\n"
+msgstr "ბოლო წარმატებული ავთენტიკაცია: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1452
+#, c-format
+msgid "Failed password attempts: %d\n"
+msgstr "პაროლის წარუმატებელი მცდელობები: %d\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1454
+#, c-format
+msgid "Number of keys: %d\n"
+msgstr "გასაღებების რაოდენობა: %d\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1462
+#, c-format
+msgid "<Encryption type 0x%x>"
+msgstr "<შიფრაციის ტიპი 0x%x>"
+
+#: ../../src/kadmin/cli/kadmin.c:1474
+#, c-format
+msgid "<Salt type 0x%x>"
+msgstr "<მარილის ტიპი 0x%x>"
+
+#: ../../src/kadmin/cli/kadmin.c:1480
+#, c-format
+msgid "MKey: vno %d\n"
+msgstr "MKey: vno %d\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1482
+#, c-format
+msgid "Attributes:"
+msgstr "ატრიბუტები:"
+
+#: ../../src/kadmin/cli/kadmin.c:1485
+msgid "while printing flags"
+msgstr "ალმების გამოტანისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1494
+msgid "[none]"
+msgstr "[არცერთი]"
+
+#: ../../src/kadmin/cli/kadmin.c:1496
+msgid " [does not exist]"
+msgstr " [არ არსებობს]"
+
+#: ../../src/kadmin/cli/kadmin.c:1497
+#, c-format
+msgid "Policy: %s%s\n"
+msgstr "პოლიტიკა: %s%s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1533
+msgid "usage: get_principals [expression]\n"
+msgstr "გამოყენება: get_principals [გამოსახულება]\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1538 ../../src/kadmin/cli/kadmin.c:1789
+msgid "while retrieving list."
+msgstr "სიის მიღებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1643
+#, c-format
+msgid "%s: parser lost count!\n"
+msgstr "%s: დამმუშავებელმა სათვალავი დაკარგა!\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1652
+#, c-format
+msgid "usage; %s [options] policy\n"
+msgstr "გამოყენება; %s [პარამეტრები] პოლიტიკა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1654
+msgid ""
+"\t\t[-maxlife time] [-minlife time] [-minlength length]\n"
+"\t\t[-minclasses number] [-history number]\n"
+"\t\t[-maxfailure number] [-failurecountinterval time]\n"
+"\t\t[-allowedkeysalts keysalts]\n"
+msgstr ""
+"\t\t[-maxlife დრო] [-minlife დრო] [-minlength სიგრძე]\n"
+"\t\t[-minclasses რიცხვი] [-history რიცხვი]\n"
+"\t\t[-maxfailure რიცხვი] [-failurecountinterval დრო]\n"
+"\t\t[-allowedkeysalts keysalts]\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1658
+msgid "\t\t[-lockoutduration time]\n"
+msgstr "\t\t[-lockoutduration დრო]\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1677
+#, c-format
+msgid "while creating policy \"%s\"."
+msgstr "პოლიტიკის (\"%s\") შექმნისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1698
+#, c-format
+msgid "while modifying policy \"%s\"."
+msgstr "პოლიტიკის (\"%s\") ცვლილებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1710
+msgid "usage: delete_policy [-force] policy\n"
+msgstr "გამოყენება: delete_policy [-force] პოლიტიკა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1714
+#, c-format
+msgid "Are you sure you want to delete the policy \"%s\"? (yes/no): "
+msgstr ""
+"დარწმუნებული ბრძანდებით რომ გნებავთ პოლიკიტიკს \"%s\" საბოლოოდ წაშლა? "
+"(yes(დიახ)/no(არა)): "
+
+#: ../../src/kadmin/cli/kadmin.c:1718
+#, c-format
+msgid "Policy \"%s\" not deleted.\n"
+msgstr "პოლიტიკა \"%s\" არ წაშლილა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1724
+#, c-format
+msgid "while deleting policy \"%s\""
+msgstr "პოლიტიკის \"%s\" წაშლისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1736
+msgid "usage: get_policy [-terse] policy\n"
+msgstr "გამოყენება: get_policy [-terse] პოლიტიკა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1741
+#, c-format
+msgid "while retrieving policy \"%s\"."
+msgstr "პოლიტიკის (\"%s\") მიღებისას."
+
+#: ../../src/kadmin/cli/kadmin.c:1746
+#, c-format
+msgid "Policy: %s\n"
+msgstr "პოლიტიკა: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1747
+#, c-format
+msgid "Maximum password life: %s\n"
+msgstr "პაროლის მაქსიმალური სიცოცხლე: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1748
+#, c-format
+msgid "Minimum password life: %s\n"
+msgstr "პაროლის მინიმალური სიცოცხლე: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1749
+#, c-format
+msgid "Minimum password length: %ld\n"
+msgstr "პაროლის მინიმალური სიგრძე: %ld\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1750
+#, c-format
+msgid "Minimum number of password character classes: %ld\n"
+msgstr "პაროლის სიმბოლოების კლასების მინიმალური რიცხვი: %ld\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1752
+#, c-format
+msgid "Number of old keys kept: %ld\n"
+msgstr "დამახსოვრებული ძველი გასაღებები: %ld\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1753
+#, c-format
+msgid "Maximum password failures before lockout: %lu\n"
+msgstr "დაბლოკვამდე პაროლის არასწორად შეყვანების რაოდენობა: %lu\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1755
+#, c-format
+msgid "Password failure count reset interval: %s\n"
+msgstr "პაროლის არასწორად შეყვანისას დაბლოკვის განბლოკვის ინტერვალი: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1757
+#, c-format
+msgid "Password lockout duration: %s\n"
+msgstr "პაროლის დაბლოკვის ხანგრძლივობა: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1760
+#, c-format
+msgid "Allowed key/salt types: %s\n"
+msgstr "მარილის/გასაღების დასაშვები ტიპები: %s\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1784
+msgid "usage: get_policies [expression]\n"
+msgstr "გამოყენება: get_policies [გამოსახულება]\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1806
+msgid "usage: get_privs\n"
+msgstr "გამოყენება: get_privs\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1811
+msgid "while retrieving privileges"
+msgstr "პრივილეგიების მიღებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1814
+#, c-format
+msgid "current privileges:"
+msgstr "მიმდინარე პრივილეგიები:"
+
+#: ../../src/kadmin/cli/kadmin.c:1840
+msgid "usage: purgekeys [-all|-keepkvno oldest_kvno_to_keep] principal\n"
+msgstr ""
+"გამოყენება: purgekeys [-all|-keepkvno უძველესი_დასატოვებელი_kvno] "
+"პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1860
+#, c-format
+msgid "while purging keys for principal \"%s\""
+msgstr "პრინციპალისთვის \"%s\" გასაღებების წაშლისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1865
+#, c-format
+msgid "All keys for principal \"%s\" removed.\n"
+msgstr "პრინციპალისთვის \"%s\" ყველა გასაღები წაშლილია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1867
+#, c-format
+msgid "Old keys for principal \"%s\" purged.\n"
+msgstr "პრინციპალისთვის \"%s\" ძველი გასაღებები წაშლილია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1884
+msgid "usage: get_strings principal\n"
+msgstr "გამოყენება: get_strings პრინციპალი\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1904
+#, c-format
+msgid "while getting attributes for principal \"%s\""
+msgstr "ატრიბუტების მიღებისას პრინციპალისთვის \"%s\""
+
+#: ../../src/kadmin/cli/kadmin.c:1909
+#, c-format
+msgid "(No string attributes.)\n"
+msgstr "(სტრიქონული ატრიბუტების გარეშე.)\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1928
+msgid "usage: set_string principal key value\n"
+msgstr "გამოყენება: set_string პრინციპალი გასაღები მნიშვნელობა\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1950
+#, c-format
+msgid "while setting attribute on principal \"%s\""
+msgstr "პრინციპალზე (\"%s\") ატრიბუტის დაყენებისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1954
+#, c-format
+msgid "Attribute set for principal \"%s\".\n"
+msgstr "პრინციპალზე (\"%s\") ატრიბუტი დაყენებულია.\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1969
+msgid "usage: del_string principal key\n"
+msgstr "გამოყენება: del_string პრინციპალი გასაღები\n"
+
+#: ../../src/kadmin/cli/kadmin.c:1990
+#, c-format
+msgid "while deleting attribute from principal \"%s\""
+msgstr "პრინციპალიდან (\"%s\") ატრიბუტის წაშლისას"
+
+#: ../../src/kadmin/cli/kadmin.c:1994
+#, c-format
+msgid "Attribute removed from principal \"%s\".\n"
+msgstr "პრინციპალიდან (\"%s\") ატრიბუტი წაშლილია\n"
+
+#: ../../src/kadmin/cli/keytab.c:55
+#, c-format
+msgid ""
+"Usage: ktadd [-k[eytab] keytab] [-q] [-e keysaltlist] [-norandkey] "
+"[principal | -glob princ-exp] [...]\n"
+msgstr ""
+"გამოყენება: ktadd [-k[eytab] keytab] [-q] [-e გასაღებისმარილებისსია] [-"
+"norandkey] [პრინციპალი | -glob princ-exp] [...]\n"
+
+#: ../../src/kadmin/cli/keytab.c:62
+#, c-format
+msgid ""
+"Usage: ktremove [-k[eytab] keytab] [-q] principal [kvno|\"all\"|\"old\"]\n"
+msgstr ""
+"გამოყენება: ktremove [-k[eytab] keytab] [-q] პრინციპალი [kvno|\"all\"(ყველა)|"
+"\"old\"(ძველი)]\n"
+
+#: ../../src/kadmin/cli/keytab.c:76 ../../src/kadmin/cli/keytab.c:97
+msgid "while creating keytab name"
+msgstr "keytab-ის სახელის შექმნისას"
+
+#: ../../src/kadmin/cli/keytab.c:81
+msgid "while opening default keytab"
+msgstr "ნაგულისხმები keytab-ის გახსნისას"
+
+#: ../../src/kadmin/cli/keytab.c:165
+#, c-format
+msgid "cannot specify keysaltlist when not changing key\n"
+msgstr "როცა გასაღბს არ ცვლით, keysaltlist-ს ვერ მიუთითებთ\n"
+
+#: ../../src/kadmin/cli/keytab.c:181
+#, c-format
+msgid "while expanding expression \"%s\"."
+msgstr "გამოსახულების (\"%s\") გაფართოებისას."
+
+#: ../../src/kadmin/cli/keytab.c:200 ../../src/kadmin/cli/keytab.c:240
+msgid "while closing keytab"
+msgstr "keytab-ის დახურვისას"
+
+#: ../../src/kadmin/cli/keytab.c:314
+#, c-format
+msgid "while parsing -add principal name %s"
+msgstr "-add პრინციპალის სახელის %s დამუშავებისას"
+
+#: ../../src/kadmin/cli/keytab.c:328
+#, c-format
+msgid "%s: Principal %s does not exist.\n"
+msgstr "%s: პრინციპალი %s არ არსებობს.\n"
+
+#: ../../src/kadmin/cli/keytab.c:331
+#, c-format
+msgid "while changing %s's key"
+msgstr "%s-ის გასაღების შეცვლისას"
+
+#: ../../src/kadmin/cli/keytab.c:343
+msgid "while adding key to keytab"
+msgstr "გასაღების keytab-ში ჩამატებისას"
+
+#: ../../src/kadmin/cli/keytab.c:348
+#, c-format
+msgid ""
+"Entry for principal %s with kvno %d, encryption type %s added to keytab %s.\n"
+msgstr ""
+"ჩანაწერი პრინციპალისთვის %s kvno-ით %d, დაშიფვრის ტიპი %s დამატებულია keytab-"
+"ში %s.\n"
+
+#: ../../src/kadmin/cli/keytab.c:396
+#, c-format
+msgid "%s: Keytab %s does not exist.\n"
+msgstr "%s: Keytab-ი %s არ არსებობს.\n"
+
+#: ../../src/kadmin/cli/keytab.c:400
+#, c-format
+msgid "%s: No entry for principal %s exists in keytab %s\n"
+msgstr "%s: პრინციპალისთვის %s keytab-ში %s ჩანაწერი არ არსებობს\n"
+
+#: ../../src/kadmin/cli/keytab.c:404
+#, c-format
+msgid "%s: No entry for principal %s with kvno %d exists in keytab %s\n"
+msgstr "%s: პრინციპალისთვის %s kvno-ით %d, keytab-ში %s ჩანაწერი არ არსებობს\n"
+
+#: ../../src/kadmin/cli/keytab.c:410
+msgid "while retrieving highest kvno from keytab"
+msgstr "keytab-დან უმაღლესი kvno-ის მიღებისას"
+
+#: ../../src/kadmin/cli/keytab.c:443
+msgid "while temporarily ending keytab scan"
+msgstr "keytab-ის სკანირების დროებით დასრულებისას"
+
+#: ../../src/kadmin/cli/keytab.c:448
+msgid "while deleting entry from keytab"
+msgstr "keytab-დან ჩანაწერის წაშლისას"
+
+#: ../../src/kadmin/cli/keytab.c:453
+msgid "while restarting keytab scan"
+msgstr "keytab-ის სკანირების თავიდან გაშვებისას"
+
+#: ../../src/kadmin/cli/keytab.c:459
+#, c-format
+msgid "Entry for principal %s with kvno %d removed from keytab %s.\n"
+msgstr "ჩანაწერი პრინციპალისთვის %s kvno-ით %d წაშლილია keytab-დან %s.\n"
+
+#: ../../src/kadmin/cli/keytab.c:481
+#, c-format
+msgid "%s: There is only one entry for principal %s in keytab %s\n"
+msgstr "%s: პრინციპალისთვის %s keytab-ში %s მხოლოდ ერთი ჩანაწერი არსებობს\n"
+
+#: ../../src/kadmin/cli/ss_wrapper.c:53 ../../src/kadmin/ktutil/ktutil.c:58
+msgid "creating invocation"
+msgstr "ჩაწოდების შექმნა"
+
+#: ../../src/kadmin/dbutil/dump.c:165
+msgid "while allocating temporary filename dump"
+msgstr "დროებითი ფაილის სახელის დამპის გამოყოფისას"
+
+#: ../../src/kadmin/dbutil/dump.c:176
+msgid "while renaming dump file into place"
+msgstr "დამპის ფაილის ადგილზე სახელის გადარქმევისას"
+
+#: ../../src/kadmin/dbutil/dump.c:196
+msgid "while allocating dump_ok filename"
+msgstr "dump_ok ფაილის სახელის გამოყოფისას"
+
+#: ../../src/kadmin/dbutil/dump.c:202
+#, c-format
+msgid "while creating 'ok' file, '%s'"
+msgstr "'ok' ფაილის შექმნისას, '%s'"
+
+#: ../../src/kadmin/dbutil/dump.c:207
+#, c-format
+msgid "while locking 'ok' file, '%s'"
+msgstr "'ok' ფაილის დაბლოკვისას. '%s'"
+
+#: ../../src/kadmin/dbutil/dump.c:260 ../../src/kadmin/dbutil/dump.c:289
+#, c-format
+msgid "%s: regular expression error: %s\n"
+msgstr "%s: რეგულარული გამოსახულების შეცდომა: %s\n"
+
+#: ../../src/kadmin/dbutil/dump.c:272
+#, c-format
+msgid "%s: regular expression match error: %s\n"
+msgstr "%s: რეგულარული გამოსახულების დამთხვევის შეცდომა: %s\n"
+
+#: ../../src/kadmin/dbutil/dump.c:373
+#, c-format
+msgid "%s: tagged data list inconsistency for %s (counted %d, stored %d)\n"
+msgstr ""
+"%s ჭდის მქონე მონაცემების სია არათანამიმდევრულია %s-სთვის (დათვლილია %d, "
+"დამახსოვრებულია %d)\n"
+
+#: ../../src/kadmin/dbutil/dump.c:495
+#, c-format
+msgid "while converting %s to new master key"
+msgstr "%s -ის ახალ მთავარ გასაღებზე გადაყვანისას"
+
+#: ../../src/kadmin/dbutil/dump.c:516
+#, c-format
+msgid "%s(%d): %s\n"
+msgstr "%s(%d): %s\n"
+
+#: ../../src/kadmin/dbutil/dump.c:559
+#, c-format
+msgid "%s(%d): ignoring trash at end of line: "
+msgstr "%s(%d): ბოლოში ნაგავი იგნორირებულია: "
+
+#: ../../src/kadmin/dbutil/dump.c:622
+msgid "cannot read tagged data type and length"
+msgstr "ჭდის მქონე მონაცემების ტიპის და სიგრძის წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:626
+msgid "data type or length overflowed"
+msgstr "მონაცემების ტიპი ან სიგრძე გადავსებულია"
+
+#: ../../src/kadmin/dbutil/dump.c:633
+msgid "cannot read tagged data contents"
+msgstr "ჭდის მქონე მონაცემების შემცველობის წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:666
+msgid "cannot match size tokens"
+msgstr "კოდის ზომები არ ემთხვევა"
+
+#: ../../src/kadmin/dbutil/dump.c:672
+msgid "cannot allocate principal (too large)"
+msgstr "პრინციპალის გამოყოფის შეცდომა (ძალიან დიდია)"
+
+#: ../../src/kadmin/dbutil/dump.c:681
+msgid "cannot allocate tl_data (too large)"
+msgstr "tl_data-ის გამოყოფის შეცდომა (ძალიან დიდია)"
+
+#: ../../src/kadmin/dbutil/dump.c:690
+msgid "invalid key_data size"
+msgstr "key_data-ის არასწორი ზომა"
+
+#: ../../src/kadmin/dbutil/dump.c:707
+msgid "cannot read name string"
+msgstr "სახელის სტრიქონის წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:712
+#, c-format
+msgid "while parsing name %s"
+msgstr "სახელის (%s) დამუშავებისას"
+
+#: ../../src/kadmin/dbutil/dump.c:720
+msgid "cannot read principal attributes"
+msgstr "პრინციპალის ატრიბუტების წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:773
+msgid "cannot read key size and version"
+msgstr "გასაღების ზომისა და ვერსიის წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:777
+msgid "unsupported key_data_ver version"
+msgstr "key_data_ver -ის მხარდაუჭერელი ვერსია"
+
+#: ../../src/kadmin/dbutil/dump.c:781
+msgid "invalid kvno"
+msgstr "არასწორი kvno"
+
+#: ../../src/kadmin/dbutil/dump.c:792
+msgid "cannot read key type and length"
+msgstr "გასაღების ტიპისა და სიგრძის წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:798
+msgid "cannot read key data"
+msgstr "გასაღების მონაცემების წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:808
+msgid "cannot read extra data"
+msgstr "დამატებითი მონაცემების წაკითხვის შეცდომა"
+
+#: ../../src/kadmin/dbutil/dump.c:817
+#, c-format
+msgid "while storing %s"
+msgstr "%s-ის შენახვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:856 ../../src/kadmin/dbutil/dump.c:895
+#: ../../src/kadmin/dbutil/dump.c:941 ../../src/kadmin/dbutil/dump.c:960
+#, c-format
+msgid "cannot parse policy (%d read)\n"
+msgstr "პოლიტიკის დამუშავების შეცდომა (%d წაკითხულია)\n"
+
+#: ../../src/kadmin/dbutil/dump.c:864 ../../src/kadmin/dbutil/dump.c:903
+#: ../../src/kadmin/dbutil/dump.c:981
+msgid "while creating policy"
+msgstr "პოლიტიკის შექმნისას"
+
+#: ../../src/kadmin/dbutil/dump.c:868
+#, c-format
+msgid "created policy %s\n"
+msgstr "შეიქმნა პოლიტიკა %s\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1018
+#, c-format
+msgid "unknown record type \"%s\"\n"
+msgstr "ჩანაწერის უცნობი ტიპი \"%s\"\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1129
+#, c-format
+msgid "%s: Unknown iprop dump version %d\n"
+msgstr "%s: iprop-ის დამპის უცნობი ვერსია %d\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1207 ../../src/kadmin/dbutil/dump.c:1443
+#, c-format
+msgid "OV dump format not supported\n"
+msgstr "OV დამპის ფორმატი მხარდაუჭერელია\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1229 ../../src/kadmin/dbutil/dump.c:1455
+#, c-format
+msgid "Iprop not enabled\n"
+msgstr "Iprop ჩართული არაა\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1266
+msgid "Conditional dump is an undocumented option for use only for iprop dumps"
+msgstr ""
+"პირობითი დამპი არადოკუმენტირებული პარამეტრია, რომელიც მხოლოდ iprop-ის "
+"დამპებისთვის გამოიყენება"
+
+#: ../../src/kadmin/dbutil/dump.c:1279
+msgid "Database not currently opened!"
+msgstr "ბაზა ამჟამად ღია არაა!"
+
+#: ../../src/kadmin/dbutil/dump.c:1293 ../../src/kadmin/dbutil/kdb5_stash.c:116
+#: ../../src/kadmin/dbutil/kdb5_util.c:445
+msgid "while reading master key"
+msgstr "მთავარი გასაღების წაკითხვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1299
+msgid "while verifying master key"
+msgstr "მთავარი გასაღების გადამოწმებისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1318 ../../src/kadmin/dbutil/dump.c:1328
+msgid "while reading new master key"
+msgstr "ახალი მთავარი გასაღების წაკითხვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1322
+#, c-format
+msgid "Please enter new master key....\n"
+msgstr "შეიყვანეთ ახალი მთავარი გასაღები...\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1346
+#, c-format
+msgid "while opening %s for writing"
+msgstr "%s-ის ჩასაწერად გახსნისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1361
+msgid "while reading update log header"
+msgstr "განახლების ჟურნალის თავსართის წაკითხვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1376 ../../src/kadmin/dbutil/dump.c:1384
+#, c-format
+msgid "performing %s dump"
+msgstr "მიმდინარეობს %s-ის დამპი"
+
+#: ../../src/kadmin/dbutil/dump.c:1414
+#, c-format
+msgid "%s: error processing line %d of %s\n"
+msgstr "%s: შეცდომა %d ხაზის დამუშავებისას, %s-დან\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1464
+msgid "while parsing options"
+msgstr "პარამეტრების დამუშავებისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1479
+#, c-format
+msgid "while opening %s"
+msgstr "\"%s\"-ის გახსნისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1484 ../../src/kadmin/dbutil/dump.c:1580
+msgid "standard input"
+msgstr "სტანდარტული შეყვანა"
+
+#: ../../src/kadmin/dbutil/dump.c:1489
+#, c-format
+msgid "%s: can't read dump header in %s\n"
+msgstr "%s: %s-ში დამპის თავსართის წაკითხვის შეცდომა\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1497 ../../src/kadmin/dbutil/dump.c:1511
+#, c-format
+msgid "%s: dump header bad in %s\n"
+msgstr "%s: დამპის არასწორი თავსართი %s-ში\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1520
+#, c-format
+msgid "Could not open iprop ulog\n"
+msgstr "შეცდომა iprop ulog-ის გახსნისას\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1525
+#, c-format
+msgid "%s: dump version %s can only be loaded with the -update flag\n"
+msgstr "%s: დამპის ვერსია %s მხოლოდ -update ალმით შეიძლება ჩაიტვირთოს\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1534 ../../src/kadmin/dbutil/dump.c:1539
+msgid "computing parameters for database"
+msgstr "ბაზისთვის პარამეტრების გამოთვლა"
+
+#: ../../src/kadmin/dbutil/dump.c:1545
+msgid "while creating database"
+msgstr "ბაზის შექმნისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1554
+msgid "while opening database"
+msgstr "ბაზის გახსნისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1564
+msgid "while permanently locking database"
+msgstr "ბაზის სამუდამოდ დაბლოკვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1582
+#, c-format
+msgid "%s: %s restore failed\n"
+msgstr "%s: %s აღდგენის შეცდომა\n"
+
+#: ../../src/kadmin/dbutil/dump.c:1587
+msgid "while unlocking database"
+msgstr "ბაზის განბლოკვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1597 ../../src/kadmin/dbutil/dump.c:1616
+msgid "while reinitializing update log"
+msgstr "განახლების ჟურნალის თავიდან ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1607
+msgid "while making newly loaded database live"
+msgstr "ახლად ჩატვირთული ბაზის სამუშაო რეჟიმში გადართვისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1623
+msgid "while writing update log header"
+msgstr "განახლების ჟურნალის თავსართის ჩაწერისას"
+
+#: ../../src/kadmin/dbutil/dump.c:1637
+#, c-format
+msgid "while deleting bad database %s"
+msgstr "ცუდი ბაზის (%s) წაშლისას"
+
+#: ../../src/kadmin/dbutil/kadm5_create.c:79
+msgid "while looking up the Kerberos configuration"
+msgstr "kerberos-ის კონფიგურაციის ძებნისას"
+
+#: ../../src/kadmin/dbutil/kadm5_create.c:105
+msgid "while initializing the Kerberos admin interface"
+msgstr "kerberos-ის ადმინისტრირების ინტერფეისის ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/kadm5_create.c:197
+msgid "while appending realm to principal"
+msgstr "რეალმის პრინციპალზე მიწერისას"
+
+#: ../../src/kadmin/dbutil/kadm5_create.c:203
+msgid "while parsing admin principal name"
+msgstr "ადმინის პრინციპალის სახელის დამუშავებისას"
+
+#: ../../src/kadmin/dbutil/kadm5_create.c:215
+#, c-format
+msgid "while creating principal %s"
+msgstr "პრინციპალი \"%s\"-ის შექმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:186
+#: ../../src/kadmin/dbutil/kdb5_util.c:389
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:574
+msgid "while setting up master key name"
+msgstr "მთავარი გასაღების სახელის დაყენებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:197
+#, c-format
+msgid ""
+"Initializing database '%s' for realm '%s',\n"
+"master key name '%s'\n"
+msgstr ""
+"ბაზის (\"%s\") ინიციალიზაცია რეალმისთვის '%s'.\n"
+"მთავარი გასაღებს სახელია '%s'\n"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:202
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:483
+#, c-format
+msgid "You will be prompted for the database Master Password.\n"
+msgstr "ბაზის მთავარ პაროლს შეგეკითხებით.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:203
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:255
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:484
+#, c-format
+msgid "It is important that you NOT FORGET this password.\n"
+msgstr "ძალიან მნიშვნელოვანია, რომ ეს პაროლი *არასდროს დაგავიწყდეთ*.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:209
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:261
+msgid "while creating new master key"
+msgstr "ახალი მთავარი გასაღების შექმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:217
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:494
+msgid "while reading master key from keyboard"
+msgstr "მთავარი გასაღების კლავიატურიდან წაკითხვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:227
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:280
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:586
+msgid "while calculating master key salt"
+msgstr "მთავარი გასაღების მარილის გამოთვლისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:235
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:289
+#: ../../src/kadmin/dbutil/kdb5_util.c:431
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:598
+msgid "while transforming master key from password"
+msgstr "მთავარი გასაღების პაროლიდან გარდაქმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:245
+msgid "while initializing random key generator"
+msgstr "შემთხვევითი რიცხვების გენერატორის ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:250
+#, c-format
+msgid "while creating database '%s'"
+msgstr "ბაზის (\"%s\") შექმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:268
+msgid "while creating update log"
+msgstr "განახლების ჟურნალის შექმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:279
+msgid "while initializing update log"
+msgstr "განახლების ჟურნალის ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:294
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:610
+msgid "while adding entries to the database"
+msgstr "ბაზაში ჩანაწერების დამატებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:322
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:333
+#: ../../src/kadmin/dbutil/kdb5_stash.c:133
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:635
+msgid "while storing key"
+msgstr "გასაღების შენახვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_create.c:323
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:334
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:636
+#, c-format
+msgid "Warning: couldn't stash master key.\n"
+msgstr "გაფრთხილება: მთავარი გასაღების მოგროვების შეცდომა.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_destroy.c:69
+#, c-format
+msgid "Deleting KDC database stored in '%s', are you sure?\n"
+msgstr ""
+"წაიშლება KDC-ის ბაზა, დამახსოვრებული '%s'-ში. დარწმუნებული ბრძანდებით?\n"
+
+#: ../../src/kadmin/dbutil/kdb5_destroy.c:71
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1111
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:360
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1442
+#, c-format
+msgid "(type 'yes' to confirm)? "
+msgstr "(დასადასტურებლად აკრიფეთ 'yes' (დიახ)? "
+
+#: ../../src/kadmin/dbutil/kdb5_destroy.c:78
+#, c-format
+msgid "OK, deleting database '%s'...\n"
+msgstr "კარგი, მიმდინარეობს ბაზის წაშლა '%s'...\n"
+
+#: ../../src/kadmin/dbutil/kdb5_destroy.c:83
+#, c-format
+msgid "deleting database '%s'"
+msgstr "ბაზის წაშლა '%s'..."
+
+#: ../../src/kadmin/dbutil/kdb5_destroy.c:92
+#, c-format
+msgid "** Database '%s' destroyed.\n"
+msgstr "** ბაზა '%s' განადგურდა.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:223
+#, c-format
+msgid "%s is an invalid enctype"
+msgstr "%s არასწორი enctype-ა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:245
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:421
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:564
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:941
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1102
+#, c-format
+msgid "while getting master key principal %s"
+msgstr "მთავარი გასაღების პრინციპალის (%s) მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:251
+#, c-format
+msgid "Creating new master key for master key principal '%s'\n"
+msgstr "ახალი მთავარი გასაღების დამატება მთავარი პრინციპალისთვის '%s'\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:254
+#, c-format
+msgid "You will be prompted for a new database Master Password.\n"
+msgstr "ბაზის ახალ მთავარ პაროლს შეგეკითხებით.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:270
+msgid "while reading new master key from keyboard"
+msgstr "ახალი მთავარი გასაღების კლავიატურიდან წაკითხვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:299
+msgid "adding new master key to master principal"
+msgstr "ახალი მთავარი გასაღების მთავარი პრინციპალისთვის დამატება"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:305
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:390
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:806
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1305
+msgid "while getting current time"
+msgstr "მიმდინარე დროის მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:312
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:522
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1312
+msgid "while updating the master key principal modification time"
+msgstr "მთავარი გასაღების პრინციპალის ცვლილების დროის განახლებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:319
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:530
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1322
+msgid "while adding master key entry to the database"
+msgstr "მთავარი გასაღების ჩანაწერის ბაზაში ჩამატებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:371
+msgid "0 is an invalid KVNO value"
+msgstr "0 KVNO-ის არასწორი მნიშვნელობაა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:382
+#, c-format
+msgid "%d is an invalid KVNO value"
+msgstr "%d KVNO-ის არასწორი მნიშვნელობაა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:398
+#, c-format
+msgid "could not parse date-time string '%s'"
+msgstr "თარითი-დროის სტრიქონის \"%s\" დამუშავების შეცდომა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:430
+msgid "while looking up active version of master key"
+msgstr "მთავარი გასაღების აქტიური ვერსიის მოძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:469
+msgid "while adding new master key"
+msgstr "ახალი მთავარი გასაღების დამატებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:507
+msgid "there must be one master key currently active"
+msgstr "მიმდინარე დროს ერთი მთავარი გასაღები ყოველთვის უნდა იყოს აქტიური"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:515
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1291
+msgid "while updating actkvno data for master principal entry"
+msgstr "მთავარი პრინციპალის ცანაწერის actkvno-ის მონაცემების განახლებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:556
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:903
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1072
+msgid "master keylist not initialized"
+msgstr "მთავარი keylist ინიციალიზებული არაა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:572
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:949
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1199
+msgid "while looking up active kvno list"
+msgstr "აქტიური kvno-ის სიის ძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:580
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:957
+msgid "while looking up active master key"
+msgstr "აქტიური მთავარი გასაღების ძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:592
+msgid "while getting enctype description"
+msgstr "enctype-ის აღწერის მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:609
+#, c-format
+msgid "KVNO: %d, Enctype: %s, Active on: %s *\n"
+msgstr "KVNO: %d, Enctype: %s, აქტიურია: %s *\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:614
+#, c-format
+msgid "KVNO: %d, Enctype: %s, Active on: %s\n"
+msgstr "KVNO: %d, Enctype: %s, აქტიურია: %s\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:618
+#, c-format
+msgid "KVNO: %d, Enctype: %s, No activate time set\n"
+msgstr "KVNO: %d, Enctype: %s, აქტივირების დრო მითითებული არაა\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:623
+msgid "asprintf could not allocate enough memory to hold output"
+msgstr ""
+"asprintf -ის შეცდომა გამოტანის შეკავებისთვის საკმარისი მეხსიერების "
+"გამოყოფისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:756
+msgid "getting string representation of principal name"
+msgstr "კლიენტის პრინციპალის სახელის სტრიქონის სახით მიღება"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:780
+#, c-format
+msgid "determining master key used for principal '%s'"
+msgstr "პრინციპალისთვის (%s) გამოყენებული მთავარი გასაღების განსაზღვრა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:786
+#, c-format
+msgid "would skip: %s\n"
+msgstr "გამოვტოვებდი: %s\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:788
+#, c-format
+msgid "skipping: %s\n"
+msgstr "გამოტოვება: %s\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:794
+#, c-format
+msgid "would update: %s\n"
+msgstr "განვაახლებდი: %s\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:798
+#, c-format
+msgid "updating: %s\n"
+msgstr "განახლება: %s\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:802
+#, c-format
+msgid "error re-encrypting key for principal '%s'"
+msgstr "შეცდომა პრინციპალისთვის ('%s') გასაღების თავიდან დაშიფვრისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:813
+#, c-format
+msgid "while updating principal '%s' modification time"
+msgstr "პრინციპალის (%s) ცვლილების დროის განახლებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:820
+#, c-format
+msgid "while updating principal '%s' key data in the database"
+msgstr "ბააში პრინციპალის (%s) გასაღების მონაცემების განახლებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:852
+#, c-format
+msgid ""
+"\n"
+"(type 'yes' to confirm)? "
+msgstr ""
+"\n"
+"(დასადასტურებლად აკრიფეთ 'yes' (დიახ)? "
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:914
+#, c-format
+msgid "converting glob pattern '%s' to regular expression"
+msgstr "გლობის შაბლონის (%s) რეგულარულ გამოსახულებად გარდაქმნა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:932
+#, c-format
+msgid "error compiling converted regexp '%s'"
+msgstr "გარდაქმნილი რეგულარული გამოსახულების (%s) კომპილაციის შეცდომა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:965
+#, c-format
+msgid "Re-encrypt all keys not using master key vno %u?"
+msgstr ""
+"გადავშიფრო ყველა გასაღები, რომელიც მთავარ გასაღებს vno %u -ს არ იყენებს?"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:967
+#, c-format
+msgid "OK, doing nothing.\n"
+msgstr "კარგი, არაფერს ვაკეთებ.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:973
+#, c-format
+msgid "Principals whose keys WOULD BE re-encrypted to master key vno %u:\n"
+msgstr ""
+"პრინციპალები, რომლის გასაღებებიც გადაშიფვრადია მთავარი გასაღებით vno %u: \n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:976
+#, c-format
+msgid ""
+"Principals whose keys are being re-encrypted to master key vno %u if "
+"necessary:\n"
+msgstr ""
+"პრინციპალები, რომლის გასაღებებიც, საჭიროების შემთხვევაში, გადაიშიფრება "
+"მთავარი გასაღებით vno %u:\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:992
+msgid "trying to process principal database"
+msgstr "პრინციპალის ბაზის დამუშავების მცდელობა"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:996
+#, c-format
+msgid "%u principals processed: %u would be updated, %u already current\n"
+msgstr "დამუშავებულია %u პრინციპალი: %u განახლებადია, %u უკვე განახლებულია\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1000
+#, c-format
+msgid "%u principals processed: %u updated, %u already current\n"
+msgstr "დამუშავებულია %u პრინციპალი: %u განახლებულია, %u უკვე მიმდინარეა\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1109
+#, c-format
+msgid ""
+"Will purge all unused master keys stored in the '%s' principal, are you "
+"sure?\n"
+msgstr ""
+"ყველა გამოუყენებელი მთავარი გასაღები, დამახსოვრებული %s პრინციპალში, "
+"წაიშლება. დარწმუნებული ბრძანდებით?\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1120
+#, c-format
+msgid "OK, purging unused master keys from '%s'...\n"
+msgstr ""
+"კარგი. მიმდინარეობს გამოუყენებელი მთავარი გასაღებების %s-დან წაშლა...\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1128
+#, c-format
+msgid "There is only one master key which can not be purged.\n"
+msgstr "არსებობს მხოლოდ ერთი მთავარი გასაღები და მისი წაშლა აკრძალულია.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1137
+msgid "while allocating args.kvnos"
+msgstr "args.kvnos -ის გამოყოფისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1153
+msgid "while finding master keys in use"
+msgstr "გამოყენებული მთავარი გასაღებების ძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1162
+#, c-format
+msgid "Would purge the following master key(s) from %s:\n"
+msgstr "%s-დან შემდეგი მთავარი გასაღებები წაიშლება:\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1165
+#, c-format
+msgid "Purging the following master key(s) from %s:\n"
+msgstr "%s-დან შემდეგი მთავარი გასაღებების წაშლა:\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1177
+msgid "master key stash file needs updating, command aborting"
+msgstr ""
+"მთავარი გასაღების შესაგროვებელ ფაილს განახლება სჭირდება. ბრძანების მუშაობის "
+"დასასრული"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1183
+#, c-format
+msgid "KVNO: %d\n"
+msgstr "KVNO: %d\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1188
+#, c-format
+msgid "All keys in use, nothing purged.\n"
+msgstr "ყველა გასაღები გამოიყენება. არაფერი წაშლილა.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1193
+#, c-format
+msgid "%d key(s) would be purged.\n"
+msgstr "წაიშლებოდა %d გასაღები.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1206
+msgid "while looking up mkey aux data list"
+msgstr "mkey-ის დამატებითი მონაცემების სიის ძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1214
+msgid "while allocating key_data"
+msgstr "key_data-ის გამოყოფისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1299
+msgid "while updating mkey_aux data for master principal entry"
+msgstr ""
+"mkey_aux-ის მონაცემების მხოლოდ მთავარი პრინციპალის ჩანაწერის განახლებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_mkey.c:1326
+#, c-format
+msgid "%d key(s) purged.\n"
+msgstr "%d გასაღები წაიშალა.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_stash.c:97
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:542
+#, c-format
+msgid "while setting up enctype %d"
+msgstr "enctype %d-ის მორგებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_stash.c:123
+msgid "while getting master key list"
+msgstr "მთავარი გასაღებების სიის მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_stash.c:127
+#, c-format
+msgid "Using existing stashed keys to update stash file.\n"
+msgstr ""
+"არშებული მოგროვებული გასაღებების გამოყენება დაგროვების ფაილის გასაახლებლად.\n"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:80
+#, c-format
+msgid ""
+"Usage: kdb5_util [-r realm] [-d dbname] [-k mkeytype] [-kv mkeyVNO]\n"
+"\t [-M mkeyname] [-m] [-sf stashfilename] [-P password]\n"
+"\t [-x db_args]* cmd [cmd_options]\n"
+"\tcreate [-s]\n"
+"\tdestroy [-f]\n"
+"\tstash [-f keyfile]\n"
+"\tdump [-b7|-r13|-r18] [-verbose]\n"
+"\t [-mkey_convert] [-new_mkey_file mkey_file]\n"
+"\t [-rev] [-recurse] [filename [princs...]]\n"
+"\tload [-b7|-r13|-r18] [-hash] [-verbose] [-update] filename\n"
+"\tark [-e etype_list] principal\n"
+"\tadd_mkey [-e etype] [-s]\n"
+"\tuse_mkey kvno [time]\n"
+"\tlist_mkeys\n"
+msgstr ""
+"გამოყენება: kdb5_util [-r რეალმი] [-d ბაზის_სახელი] [-k mkeytype] [-kv "
+"mkeyVNO]\n"
+"\t [-M mkeyname] [-m] [-sf შესაგროვებელიფაილი] [-P პაროლი]\n"
+"\t [-x ბაზის_პარამეტრები]* ბრძნბ [ბრძანების_პარამეტრები]\n"
+"\tcreate [-s]\n"
+"\tdestroy [-f]\n"
+"\tstash [-f keyfile]\n"
+"\tdump [-b7|-r13|-r18] [-verbose]\n"
+"\t [-mkey_convert] [-new_mkey_file mkey_file]\n"
+"\t [-rev] [-recurse] [ფაილსი სახელი [პრინციპალები...]]\n"
+"\tload [-b7|-r13|-r18] [-hash] [-verbose] [-update] ფაილის სახელი\n"
+"\tark [-e etype_list] პრინციპალი\n"
+"\tadd_mkey [-e etype] [-s]\n"
+"\tuse_mkey kvno [დრო]\n"
+"\tlist_mkeys\n"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:99
+#, c-format
+msgid ""
+"\tupdate_princ_encryption [-f] [-n] [-v] [princ-pattern]\n"
+"\tpurge_mkeys [-f] [-n] [-v]\n"
+"\ttabdump [-H] [-c] [-e] [-n] [-o outfile] dumptype\n"
+"\n"
+"where,\n"
+"\t[-x db_args]* - any number of database specific arguments.\n"
+"\t\t\tLook at each database documentation for supported arguments\n"
+msgstr ""
+"\tupdate_princ_encryption [-f] [-n] [-v] [princ-pattern]\n"
+"\tpurge_mkeys [-f] [-n] [-v]\n"
+"\ttabdump [-H] [-c] [-e] [-n] [-o outfile] dumptype\n"
+"\n"
+"სადაც,\n"
+"\t[-x ბაზის_არგუმენტები]* - ბაზის არგუმენტების ნებისმიერი რაოდენობა\n"
+"\t\t\tმარდაჭერილი არგუმენტების სანახავად მიმართეთ ბაზის დოკუმენტაციას\n"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:215
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:264
+msgid "while initializing Kerberos code"
+msgstr "kerberos-ის კოდის ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:221
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:271
+msgid "while creating sub-command arguments"
+msgstr "ქვებრძანების არგუმენტის შექმნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:239
+msgid "while parsing command arguments"
+msgstr "ბრძანების არგუმენტების დამუშავებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:245
+#: ../../src/kadmin/dbutil/kdb5_util.c:252
+msgid "while parsing command arguments\n"
+msgstr "ბრძანების არგუმენტების დამუშავებისას\n"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:263
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:295
+msgid "while setting default realm name"
+msgstr "ნაგულისხმები რეალმის სახელის დაყენებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:268
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:302
+#, c-format
+msgid ": %s is an invalid enctype"
+msgstr ": %s არასწორი enctype-ა"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:276
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:311
+#, c-format
+msgid ": %s is an invalid mkeyVNO"
+msgstr ": %s არასწორი mkeyVNO -ია"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:319
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:435
+msgid "while retrieving configuration parameters"
+msgstr "კონფიგურაციის პარამეტრების მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:378
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:849
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1457
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:568
+msgid "while initializing database"
+msgstr "ბაზის ინიციალიზაციისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:395
+msgid "while retrieving master entry"
+msgstr "მთავარი ჩანაწერის მიღებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:414
+msgid "while calculated master key salt"
+msgstr "მთავარი გასაღების მარილის გამოთვლისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:446
+msgid "Warning: proceeding without master key"
+msgstr "გაფრთხილება: ვაგრძელებ მთავარი გასაღების გარეშე"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:464
+msgid "while seeding random number generator"
+msgstr "შემთხვევითი რიცხვების გენერატორის თესლის გადაცემისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:474
+#, c-format
+msgid "%s: Could not map log\n"
+msgstr "%s: ჟურნალის მიბმის შეცომა\n"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:503
+msgid "while closing database"
+msgstr "ბაზის დახურვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:550
+#, c-format
+msgid "while fetching principal %s"
+msgstr "პრინციპალის (%s) გამოთხოვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:573
+msgid "while finding mkey"
+msgstr "mkey-ის ძებნისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:598
+msgid "while setting changetime"
+msgstr "changetime-ის დაყენებისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:606
+#, c-format
+msgid "while saving principal %s"
+msgstr "პრინციპალის (%s) შენახვისას"
+
+#: ../../src/kadmin/dbutil/kdb5_util.c:610
+#, c-format
+msgid "%s changed\n"
+msgstr "%s შეიცვალა\n"
+
+#: ../../src/kadmin/dbutil/tabdump.c:573
+#, c-format
+msgid "opening %s for writing"
+msgstr "%s-ის ჩასაწერად გახსნა"
+
+#: ../../src/kadmin/dbutil/tabdump.c:655
+msgid "performing tabular dump"
+msgstr "მიმდინარეობს ტაბულარული დამპი"
+
+#: ../../src/kadmin/ktutil/ktutil.c:73
+#, c-format
+msgid "%s: invalid arguments\n"
+msgstr "%s: არასწორი არგუმენტები\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:78
+msgid "while freeing ktlist"
+msgstr "ktlist-ის გათავისუფლებისას"
+
+#: ../../src/kadmin/ktutil/ktutil.c:89
+#, c-format
+msgid "%s: must specify keytab to read\n"
+msgstr "%s: წასაკითხი keytab -ის მითითება აუცილებელია\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:94
+#, c-format
+msgid "while reading keytab \"%s\""
+msgstr "keytab-ის (%s) კითხვისას"
+
+#: ../../src/kadmin/ktutil/ktutil.c:101
+#, c-format
+msgid "%s: reading srvtabs is no longer supported\n"
+msgstr "%s: srvtabs -ების წაკითხვა მხარდაჭერილი აღარაა\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:112
+#, c-format
+msgid "%s: must specify keytab to write\n"
+msgstr "%s: ჩასაწერი keytab -ის მითითება აუცილებელია\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:117
+#, c-format
+msgid "while writing keytab \"%s\""
+msgstr "keytab-ის \"%s\" ჩაწერისას"
+
+#: ../../src/kadmin/ktutil/ktutil.c:124
+#, c-format
+msgid "%s: writing srvtabs is no longer supported\n"
+msgstr "%s: srvtabs -ების ჩაწერა მხარდაჭერილი აღარაა\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:171
+#, c-format
+msgid ""
+"usage: %s (-key | -password) -p principal -k kvno [-e enctype] [-f|-s salt]\n"
+msgstr ""
+"გამოყენება: %s (-key | -პაროლი) -p პრინციპალი -k kvno [-e enctype] [-f|-s "
+"მარილი]\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:176
+#, c-format
+msgid "enctype must be specified if not using -f\n"
+msgstr "თუ -f -ს არ იყენებთ, enctype-ის მითითება აუცილებელია\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:183
+msgid "while adding new entry"
+msgstr "ახალი ჩანაწერის დამატებისას"
+
+#: ../../src/kadmin/ktutil/ktutil.c:193
+#, c-format
+msgid "%s: must specify entry to delete\n"
+msgstr "%s: წასაშლელი ჩანაწერის მითითება აუცილებელია\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:198
+#, c-format
+msgid "while deleting entry %d"
+msgstr "%d ჩანაწერის წაშლისას"
+
+#: ../../src/kadmin/ktutil/ktutil.c:226
+#, c-format
+msgid "%s: usage: %s [-t] [-k] [-e]\n"
+msgstr "%s: გამოყენება: %s [-t] [-k] [-e]\n"
+
+#: ../../src/kadmin/ktutil/ktutil.c:265
+msgid "While converting enctype to string"
+msgstr "Enctype-ის სტრიქონად გარდაქმნისას"
+
+#: ../../src/kadmin/ktutil/ktutil_funcs.c:196
+#, c-format
+msgid "Password for %.1000s"
+msgstr "პაროლი %.1000s"
+
+#: ../../src/kadmin/ktutil/ktutil_funcs.c:214
+#, c-format
+msgid "Key for %s (hex): "
+msgstr "გასაღები %s -სთვის (თექვსმეტობითი): "
+
+#: ../../src/kadmin/ktutil/ktutil_funcs.c:226
+#, c-format
+msgid "addent: Error reading key.\n"
+msgstr "addent: გასაღების წაკითხვის შეცდომა.\n"
+
+#: ../../src/kadmin/ktutil/ktutil_funcs.c:234
+#, c-format
+msgid "addent: Illegal character in key.\n"
+msgstr "addent: გასაღები დაუშვებელ სიმბოლოს შეიცავს.\n"
+
+#: ../../src/kadmin/server/auth_acl.c:240
+#, c-format
+msgid "%s: invalid restrictions: %s"
+msgstr "%s: არასწორი შეზღუდვა: %s"
+
+#: ../../src/kadmin/server/auth_acl.c:288
+#, c-format
+msgid "Unrecognized ACL operation '%c' in %s"
+msgstr "ACL -ის უცნობი ოპერაცია'%c' -ი %s-ში"
+
+#: ../../src/kadmin/server/auth_acl.c:296
+#, c-format
+msgid "Cannot parse client principal '%s'"
+msgstr "კლიენტის პრინციპალის (%s) დამუშავების შეცდომა"
+
+#: ../../src/kadmin/server/auth_acl.c:304
+#, c-format
+msgid "Cannot parse target principal '%s'"
+msgstr "სამიზნის პრინციპალის (%s) დამუშავების შეცდომა"
+
+#: ../../src/kadmin/server/auth_acl.c:400
+#, c-format
+msgid "%s while opening ACL file %s"
+msgstr "%s ACL ფაილის (%s) გახსნისას"
+
+#: ../../src/kadmin/server/auth_acl.c:403
+#, c-format
+msgid "Cannot open %s: %s"
+msgstr "%s-ის გახსნის შეცდომა: %s"
+
+#: ../../src/kadmin/server/auth_acl.c:419
+#: ../../src/kadmin/server/auth_acl.c:422
+#, c-format
+msgid "%s: syntax error at line %d <%.10s...>"
+msgstr "%s: სინტაქსის შეცდომა ხაზზე %d <%.10s...>"
+
+#: ../../src/kadmin/server/ipropd_svc.c:49
+#, c-format
+msgid "Unauthorized request: %s, client=%s, service=%s, addr=%s"
+msgstr "არაავტორიზებული მოთხოვნა: %s, კლიენტი=%s, სერვისი=%s, მისამართი=%s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:50
+#: ../../src/kadmin/server/ipropd_svc.c:224
+#, c-format
+msgid "Request: %s, %s, %s, client=%s, service=%s, addr=%s"
+msgstr "მოთხოვნა: %s, %s, %s, კლიენტი=%s, სერვისი=%s, მისამართი=%s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:164
+#: ../../src/kadmin/server/ipropd_svc.c:281
+#, c-format
+msgid "%s: server handle is NULL"
+msgstr "%s: სერვერის დამმუშავებელი ნულოვანია"
+
+#: ../../src/kadmin/server/ipropd_svc.c:174
+#: ../../src/kadmin/server/ipropd_svc.c:294
+#, c-format
+msgid "%s: setup_gss_names failed"
+msgstr "%s: setup_gss_names -ის შეცდომა"
+
+#: ../../src/kadmin/server/ipropd_svc.c:182
+#: ../../src/kadmin/server/ipropd_svc.c:303
+#, c-format
+msgid "%s: out of memory recording principal names"
+msgstr "%s: არასაკმარისი მეხსიერება პრინციპალის სახელების ჩაწერისას"
+
+#: ../../src/kadmin/server/ipropd_svc.c:207
+#, c-format
+msgid "%s; Incoming SerialNo=%lu; Outgoing SerialNo=%lu"
+msgstr "%s; შემომავალი SerialNo=%lu; გამავალი SerialNo=%lu"
+
+#: ../../src/kadmin/server/ipropd_svc.c:213
+#, c-format
+msgid "%s; Incoming SerialNo=%lu; Outgoing SerialNo=N/A"
+msgstr "%s; შემომავალი SerialNo=%lu; გამავალი SerialNo=N/A"
+
+#: ../../src/kadmin/server/ipropd_svc.c:324
+#, c-format
+msgid "%s: getclhoststr failed"
+msgstr "%s: getclhoststr -ის შეცდომა"
+
+#: ../../src/kadmin/server/ipropd_svc.c:346
+#, c-format
+msgid "%s: cannot construct kdb5 util dump string too long; out of memory"
+msgstr ""
+"%s kdb5 პროგრამის დამპის სტრიქონის აგების შეცდომა: ის ძალიან დიდია: "
+"არასაკმარისი მეხსიერება"
+
+#: ../../src/kadmin/server/ipropd_svc.c:366
+#, c-format
+msgid "%s: fork failed: %s"
+msgstr "%s: განტოტვის შეცდომა: %s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:378
+#, c-format
+msgid "%s: popen failed: %s"
+msgstr "%s: popen -ის შეცდომა: %s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:392
+#, c-format
+msgid "%s: pclose(popen) failed: %s"
+msgstr "%s: pclose(popen) -ის შეცდომა: %s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:412
+#, c-format
+msgid "%s: exec failed: %s"
+msgstr "%s: შესრულების შეცდომა: %s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:428
+#, c-format
+msgid "Request: %s, spawned resync process %d, client=%s, service=%s, addr=%s"
+msgstr ""
+"მოთხოვნა: %s, გაჩენილი რესინქრონიზაციის პროცესი %d, კლიენტი=%s, სერვისი=%s, "
+"მისამართი=%s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:490
+#: ../../src/kadmin/server/kadm_rpc_svc.c:299
+#, c-format
+msgid "check_rpcsec_auth: failed inquire_context, stat=%u"
+msgstr "check_rpcsec_auth: inquire_context-ის შეცდომა, სტატ=%u"
+
+#: ../../src/kadmin/server/ipropd_svc.c:520
+#: ../../src/kadmin/server/kadm_rpc_svc.c:328
+#, c-format
+msgid "bad service principal %.*s%s"
+msgstr "არასწორი სერვისის პრინციპალი %.*s%s"
+
+#: ../../src/kadmin/server/ipropd_svc.c:543
+#, c-format
+msgid "authentication attempt failed: %s, RPC authentication flavor %d"
+msgstr "ავთენტიკაციის მცდელობა წარუმატებელია: %s RPC ავთენტიკაციის ტიპი %d"
+
+#: ../../src/kadmin/server/ipropd_svc.c:577
+#, c-format
+msgid "RPC unknown request: %d (%s)"
+msgstr "RPC უცნობი მოთხოვნა: %d (%s)"
+
+#: ../../src/kadmin/server/ipropd_svc.c:585
+#, c-format
+msgid "RPC svc_getargs failed (%s)"
+msgstr "RPC svc_getargs -ის შეცდომა (%s)"
+
+#: ../../src/kadmin/server/ipropd_svc.c:595
+#, c-format
+msgid "RPC svc_sendreply failed (%s)"
+msgstr "RPC svc_sendreply -ის შეცდომა (%s)"
+
+#: ../../src/kadmin/server/ipropd_svc.c:601
+#, c-format
+msgid "RPC svc_freeargs failed (%s)"
+msgstr "RPC svc_freeargs -ის შეცდომა (%s)"
+
+#: ../../src/kadmin/server/kadm_rpc_svc.c:349
+#, c-format
+msgid "gss_to_krb5_name: failed display_name status %d"
+msgstr "gss_to_krb5_name: display_name -ის არასწორი სტატუსი%d"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:82
+#, c-format
+msgid ""
+"Usage: kadmind [-x db_args]* [-r realm] [-m] [-nofork] [-port port-number]\n"
+"\t\t[-proponly] [-p path-to-kdb5_util] [-F dump-file]\n"
+"\t\t[-K path-to-kprop] [-k kprop-port] [-P pid_file]\n"
+"\n"
+"where,\n"
+"\t[-x db_args]* - any number of database specific arguments.\n"
+"\t\t\tLook at each database documentation for supported arguments\n"
+msgstr ""
+"გამოყენება: kadmind [-x ბაზის_არგუმენტები]* [-r რეალმი] [-m] [-nofork] [-"
+"port პორტის-ნომერი]\n"
+"\t\t[-proponly] [-p ბილიკი kdb5_util-მდე] [-F დამპის_ფაილი]\n"
+"\t\t[-K ბილიკი-kprop-მდე] [-k kprop-ის-პორტი] [-P pid_ფაილი]\n"
+"\n"
+"სადაც,\n"
+"\t[-x ბაზის_არგუმენტები]* - ბაზის არგუმენტების ნებისმიერი რაოდენობა.\n"
+"\t\t\tთითოეული ბაზის მიერ მხარდაჭერილი არგუმენტების სანახავად იხილეთ მათი "
+"დოკუმენტაცია \n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:106
+#, c-format
+msgid "%s: %s while %s, aborting\n"
+msgstr "%s: %s-ი %s-სას, ავარიული დასასრული\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:108
+#, c-format
+msgid "%s while %s, aborting\n"
+msgstr "%s-ი %s-სას, ავარიული დასასრული\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:110
+#, c-format
+msgid "%s: %s, aborting\n"
+msgstr "%s: %s, ავარიული დასასრული\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:111
+#, c-format
+msgid "%s, aborting"
+msgstr "%s, ავარიული დასასრული"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:278
+#, c-format
+msgid ""
+"WARNING! Forged/garbled request: %s, claimed client = %.*s%s, server = %.*s"
+"%s, addr = %s"
+msgstr ""
+"გაფრთხილება! ყალბი/შექმნილი მოთხოვნა: %s, ნამტკიცები კლიენტი = %.*s%s, "
+"სერვერი = %.*s%s, მისამართი = %s"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:284
+#, c-format
+msgid ""
+"WARNING! Forged/garbled request: %d, claimed client = %.*s%s, server = %.*s"
+"%s, addr = %s"
+msgstr ""
+"გაფრთხილება! ყალბი/შექმნილი მოთხოვნა: %d, ნამტკიცები კლიენტი = %.*s%s, "
+"სერვერი = %.*s%s, მისამართი = %s"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:298
+#, c-format
+msgid "Miscellaneous RPC error: %s, %s"
+msgstr "სხვადასხვა RPC შეცდომა: %s, %s"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:314
+#, c-format
+msgid "%s Cannot decode status %d"
+msgstr "%s სტატუსის გაშიფვრა შეუძლებელია %d"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:332
+#, c-format
+msgid "Authentication attempt failed: %s, GSS-API error strings are:"
+msgstr ""
+"ავთენტიკაციის მცდელობა წარუმატებელია: %s, GSS-API-ის შეცდომის სტრიქონებია:"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:337
+msgid " GSS-API error strings complete."
+msgstr " GSS-API -ის შეცდომის სრული სტრიქონები."
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:375
+#, c-format
+msgid "%s: cannot initialize. Not enough memory\n"
+msgstr "%s: ინიციალიზაციის შეცდომა. არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:443
+#, c-format
+msgid "%s: %s while initializing context, aborting\n"
+msgstr "%s: %s კონტექსტის ინიციალიზაციისას. სამუშაოს დასრულება\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:454
+#: ../../src/kadmin/server/ovsec_kadmd.c:523
+msgid "initializing"
+msgstr "ინიციალიზაცია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:458
+msgid "getting config parameters"
+msgstr "კონფიგურაციის პარამეტრების მიღება"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:460
+msgid "Missing required realm configuration"
+msgstr "აკლია რეალმის კონფიგურაციის საჭირო პარამეტრები"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:462
+msgid "Missing required ACL file configuration"
+msgstr "აკლია ACL ფაილის აუცილებელი კონფიგურაცია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:464
+msgid "-proponly can only be used when iprop_enable is true"
+msgstr ""
+"-proponly -ის გამოყენება მხოლოდ მაშინ შეგიძლიათ, როცა iprop_enable ჭეშმარიტია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:470
+msgid "initializing network"
+msgstr "ქსელის ინიციალიზაცია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:475
+msgid "Cannot build GSSAPI auth names"
+msgstr "GSSAPI-ის ავთენტიკაციის სახელების აგება შეუძლებელია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:479
+msgid "Cannot set up KDB keytab"
+msgstr "KDB Keytab-ის მორგების შეცდომა"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:482
+msgid "Cannot set GSSAPI authentication names"
+msgstr "GSSAPI-ის ავთენტიკაციის სახელების დაყენება შეუძლებელია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:499
+msgid "Cannot initialize GSSAPI service name"
+msgstr "GSSAPI-ის სერვისის სახელის ინიციალიზაციის შეცდომა"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:504
+msgid "initializing ACL file"
+msgstr "acl ფაილის ინიციალიზაცია"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:512
+msgid "spawning daemon process"
+msgstr "დემონის პროცესის გაშვება"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:516
+msgid "creating PID file"
+msgstr "pid ფაილის შექმნა"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:530
+msgid "mapping update log"
+msgstr "განახლების ჟურნალის მიბმა"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:534
+#, c-format
+msgid "%s: create IPROP svc (PROG=%d, VERS=%d)\n"
+msgstr "%s: IPROP სერვისის შექმნა (პროგ=%d, ვერს=%d)\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:542
+msgid "starting"
+msgstr "გაშვება"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:544 ../../src/kdc/main.c:1040
+#, c-format
+msgid "%s: starting...\n"
+msgstr "%s: გაშვება...\n"
+
+#: ../../src/kadmin/server/ovsec_kadmd.c:547
+msgid "finished, exiting"
+msgstr "დასასრული. გავდივარ"
+
+#: ../../src/kadmin/server/schpw.c:273
+#, c-format
+msgid "setpw request from %s by %.*s%s for %.*s%s: %s"
+msgstr "setpw მოთხოვნა %s-ი %.*s%s-სგან %.*s%s: %s-სთვის"
+
+#: ../../src/kadmin/server/schpw.c:278
+#, c-format
+msgid "chpw request from %s for %.*s%s: %s"
+msgstr "chpw მოთხოვნა %s-ი %.*s%s: %s-სთვის"
+
+#: ../../src/kadmin/server/schpw.c:446
+#, c-format
+msgid "chpw: Couldn't open admin keytab %s"
+msgstr "chpw: ადმინის keytab-ის გახსნის შეცდომა %s"
+
+#: ../../src/kadmin/server/server_stubs.c:396
+#, c-format
+msgid ""
+"Unauthorized request: %s, %.*s%s, client=%.*s%s, service=%.*s%s, addr=%s"
+msgstr ""
+"არაავტორიზებული მოთხოვნა: %s, %.*s%s, კლიენტი=%.*s%s, სერვისი=%.*s%s, "
+"მისამართი=%s"
+
+#: ../../src/kadmin/server/server_stubs.c:417
+#: ../../src/kadmin/server/server_stubs.c:695
+#: ../../src/kadmin/server/server_stubs.c:1570
+msgid "success"
+msgstr "წარმატება"
+
+#: ../../src/kadmin/server/server_stubs.c:427
+#, c-format
+msgid "Request: %s, %.*s%s, %s, client=%.*s%s, service=%.*s%s, addr=%s"
+msgstr "მოთხოვნა: %s, %.*s%s, %s, კლიენტი=%.*s%s, სერვისი=%.*s%s, მისამართი=%s"
+
+#: ../../src/kadmin/server/server_stubs.c:675
+#, c-format
+msgid ""
+"Unauthorized request: kadm5_rename_principal, %.*s%s to %.*s%s, client=%.*s"
+"%s, service=%.*s%s, addr=%s"
+msgstr ""
+"არაავტორიზებული მოთხოვნა: kadm5_rename_principal, %.*s%s to %.*s%s, კლიენტი="
+"%.*s%s, სერვისი=%.*s%s, მისამართი=%s"
+
+#: ../../src/kadmin/server/server_stubs.c:690
+#, c-format
+msgid ""
+"Request: kadm5_rename_principal, %.*s%s to %.*s%s, %s, client=%.*s%s, "
+"service=%.*s%s, addr=%s"
+msgstr ""
+"მოთხოვნა: kadm5_rename_principal, %.*s%s to %.*s%s, %s, კლიენტი=%.*s%s, "
+"სერვისი=%.*s%s, მისამართი=%s"
+
+#: ../../src/kadmin/server/server_stubs.c:1566
+#, c-format
+msgid ""
+"Request: kadm5_init, %.*s%s, %s, client=%.*s%s, service=%.*s%s, addr=%s, "
+"vers=%d, flavor=%d"
+msgstr ""
+"მოთხოვნა: kadm5_init, %.*s%s, %s, კლიენტი=%.*s%s, სერვისი=%.*s%s, მისამართი="
+"%s, vers=%d, ტიპი=%d"
+
+#: ../../src/kdc/do_as_req.c:277
+#, c-format
+msgid "AS_REQ : handle_authdata (%d)"
+msgstr "AS_REQ : handle_authdata (%d)"
+
+#: ../../src/kdc/do_tgs_req.c:581
+msgid "not checking transit path"
+msgstr "ტრანზიტის ბილიკი არ შემოწმდება"
+
+#: ../../src/kdc/do_tgs_req.c:598
+#, c-format
+msgid "TGS_REQ : handle_authdata (%d)"
+msgstr "TGS_REQ : handle_authdata (%d)"
+
+#: ../../src/kdc/fast_util.c:56
+#, c-format
+msgid "%s while handling ap-request armor"
+msgstr "%s ap-request -ის ჯავშნის დამუშავებისას"
+
+#: ../../src/kdc/fast_util.c:65
+msgid "ap-request armor for something other than the local TGS"
+msgstr "ap-request -ის ჯავშანი რამისთვის, TGS-ის გარდა"
+
+#: ../../src/kdc/fast_util.c:74
+msgid "ap-request armor without subkey"
+msgstr "ap-request -ის ჯავშანი subkey-ის გარეშე"
+
+#: ../../src/kdc/fast_util.c:162
+msgid "Ap-request armor not permitted with TGS"
+msgstr "Ap-request -ის ჯავშანი ნებადაურთველია TGS-თან ერთად"
+
+#: ../../src/kdc/fast_util.c:169
+#, c-format
+msgid "Unknown FAST armor type %d"
+msgstr "უცნობი FAST ჯავშნის ტიპი %d"
+
+#: ../../src/kdc/fast_util.c:183
+msgid "No armor key but FAST armored request present"
+msgstr "ჯავშნის გასაღები არ არსებობს, მაგრამ FAST დაჯავშნული მოთხოვნა - კი"
+
+#: ../../src/kdc/fast_util.c:218
+msgid "FAST req_checksum invalid; request modified"
+msgstr "FAST req_checksum არასწორია. მოთხოვნა შეიცვალა"
+
+#: ../../src/kdc/fast_util.c:224
+msgid "Unkeyed checksum used in fast_req"
+msgstr "Fast_req-ში გამოყენებული საკონტროლო ჯამი გასაღების გარეშეა"
+
+#: ../../src/kdc/kdc_audit.c:110
+#, c-format
+msgid "audit plugin %s failed to open. error=%i"
+msgstr "აუდიტის დამატების %s გახსნა შეუძლებელია. შეცდომა=%i"
+
+#: ../../src/kdc/kdc_authdata.c:78
+#, c-format
+msgid "while loading authdata module %s"
+msgstr "authdata მოდულის (%s) ჩატვირთვისას"
+
+#: ../../src/kdc/kdc_log.c:83
+#, c-format
+msgid "AS_REQ (%s) %s: ISSUE: authtime %u, %s, %s for %s"
+msgstr "AS_REQ (%s) %s: პრობლემა: authtime %u, %s, %s-ი %s-სთვის"
+
+#: ../../src/kdc/kdc_log.c:91
+#, c-format
+msgid "AS_REQ (%s) %s: %s: %s for %s%s%s"
+msgstr "AS_REQ (%s) %s: %s: %s-ი %s%s%s-თვის"
+
+#: ../../src/kdc/kdc_log.c:153
+#, c-format
+msgid "TGS_REQ (%s) %s: %s: authtime %u, %s%s %s for %s%s%s"
+msgstr "TGS_REQ (%s) %s: %s: authtime %u, %s%s %s -ი %s%s%s-თვის"
+
+#: ../../src/kdc/kdc_log.c:162
+#, c-format
+msgid "... PROTOCOL-TRANSITION s4u-client=%s"
+msgstr "... PROTOCOL-TRANSITION s4u-client=%s"
+
+#: ../../src/kdc/kdc_log.c:166
+#, c-format
+msgid "... CONSTRAINED-DELEGATION s4u-client=%s"
+msgstr "... CONSTRAINED-DELEGATION s4u-client=%s"
+
+#: ../../src/kdc/kdc_log.c:170
+#, c-format
+msgid "TGS_REQ %s: %s: authtime %u, %s for %s, 2nd tkt client %s"
+msgstr "TGS_REQ %s: %s: authtime %u, %s for %s, მეორე ბილეთის კლიენტი %s"
+
+#: ../../src/kdc/kdc_log.c:203
+#, c-format
+msgid "bad realm transit path from '%s' to '%s' via '%.*s%s'"
+msgstr "არასწორი რეალმის გადაცემის ბილიკი '%s'-დან '%s'-მდე '%.*s%s'-ის გავლით"
+
+#: ../../src/kdc/kdc_log.c:209
+#, c-format
+msgid "unexpected error checking transit from '%s' to '%s' via '%.*s%s': %s"
+msgstr ""
+"შეცდომა გადაცემის შემოწმებისას: '%s' -ი '%s' -მდე '%.*s%s': %s-ის გავლით"
+
+#: ../../src/kdc/kdc_log.c:227
+msgid "TGS_REQ: issuing alternate <un-unparsable> TGT"
+msgstr "TGS_REQ: გამოიცემა ალტერნატიული <დაუმუშავებლადი> TGT"
+
+#: ../../src/kdc/kdc_log.c:230
+#, c-format
+msgid "TGS_REQ: issuing TGT %s"
+msgstr "TGS_REQ: გამოცემა: TGT %s"
+
+#: ../../src/kdc/kdc_preauth.c:215
+#, c-format
+msgid "preauth %s failed to initialize: %s"
+msgstr "პრეავტორიზაციის (%s) ინიციალიზაციის შეცდომა: %s"
+
+#: ../../src/kdc/kdc_preauth.c:226
+#, c-format
+msgid "preauth %s failed to setup loop: %s"
+msgstr "პრეავტორიზაციის (%s) შეცდომა მარყუჟის აწყობისას: %s"
+
+#: ../../src/kdc/kdc_preauth.c:903
+#, c-format
+msgid "%spreauth required but hint list is empty"
+msgstr "%sპრეავტორიზაცია აუცილებელია, მაგრამ მითითებების სია ცარიელია"
+
+#: ../../src/kdc/kdc_preauth_ec.c:74
+msgid "Encrypted Challenge used outside of FAST tunnel"
+msgstr "დაშიფრული გამოწვევა FAST გვირაბის გარეთ გამოიყენება"
+
+#: ../../src/kdc/kdc_preauth_ec.c:117
+msgid "Incorrect password in encrypted challenge"
+msgstr "დაშიფრული გამოწვევის არასწორი პაროლი"
+
+#: ../../src/kdc/kdc_util.c:182
+msgid "TGS_REQ: SESSION KEY or MUTUAL"
+msgstr "TGS_REQ: SESSION KEY ან MUTUAL"
+
+#: ../../src/kdc/kdc_util.c:380
+#, c-format
+msgid "TGS_REQ: UNKNOWN SERVER: server='%s'"
+msgstr "TGS_REQ: უცნობი სერვერი: სერვერი='%s'"
+
+#: ../../src/kdc/kdc_util.c:842
+#, c-format
+msgid "Required auth indicators not present in ticket: %s"
+msgstr "ავთენტიკაციის აუცილებელი ინდიკატორები არ არსებობს ბილეთში: %s"
+
+#: ../../src/kdc/main.c:225
+#, c-format
+msgid "Requested master password enctype %s in %s is DEPRECATED!\n"
+msgstr "მოთხოვნილი მთავარი პაროლის დაშიფვრის ტიპი %s-ი %s-ში მოძველებულია!\n"
+
+#: ../../src/kdc/main.c:241
+#, c-format
+msgid "while getting context for realm %s"
+msgstr "რეალმისთვისთვის (%s) შემცველობის მიღებისას"
+
+#: ../../src/kdc/main.c:348
+#, c-format
+msgid "while setting default realm to %s"
+msgstr "ნაგულისხმები რეალმის %s-ზე დაყენებისას"
+
+#: ../../src/kdc/main.c:356
+#, c-format
+msgid "while initializing database for realm %s"
+msgstr "რეალმისთვის (%s) ბაზის ინიციალიზაციისას"
+
+#: ../../src/kdc/main.c:365
+#, c-format
+msgid "while setting up master key name %s for realm %s"
+msgstr "მთავარი გასაღების სახელის (%s) რეალმისთვის (%s) მორგებისას"
+
+#: ../../src/kdc/main.c:378
+#, c-format
+msgid "while fetching master key %s for realm %s"
+msgstr "მთავარი გასაღების (%s) რეალმისთვის (%s) გამოთხოვისას"
+
+#: ../../src/kdc/main.c:387
+#, c-format
+msgid "Stash file %s uses DEPRECATED enctype %s!\n"
+msgstr "Stash ფაილი %s მოძველებულ enctype %s-ს იყენებს!\n"
+
+#: ../../src/kdc/main.c:394
+#, c-format
+msgid "while fetching master keys list for realm %s"
+msgstr "რეალმისთვის (%s) მთავარი გასაღებების სიის მიღებისას"
+
+#: ../../src/kdc/main.c:403
+#, c-format
+msgid "while resolving kdb keytab for realm %s"
+msgstr "რეალმისთვის (%s) kdb keytab-ის ამოხსნისას"
+
+#: ../../src/kdc/main.c:412
+#, c-format
+msgid "while building TGS name for realm %s"
+msgstr "რეალმისტვის (%s) TGS -ის სახელის აგებისას"
+
+#: ../../src/kdc/main.c:502
+#, c-format
+msgid "creating %d worker processes"
+msgstr "%d დამხმარე პროცესის შექმნა"
+
+#: ../../src/kdc/main.c:512
+msgid "Unable to reinitialize main loop"
+msgstr "მთავარი მარყუჟის თავიდან ინიციალიზაცია შეუძლებელია"
+
+#: ../../src/kdc/main.c:517
+#, c-format
+msgid "Unable to initialize signal handlers in pid %d"
+msgstr "PID-ში %d სიგნალების დამმუშავებლის ინიციალიზაციის შეცდომა"
+
+#: ../../src/kdc/main.c:547
+#, c-format
+msgid "worker %ld exited with status %d"
+msgstr "დამხმარე პროცესმა %ld მუშაობა სტატუსით %d დაასრულა"
+
+#: ../../src/kdc/main.c:571
+#, c-format
+msgid "signal %d received in supervisor"
+msgstr "სიგნალი %d მიღებულია სუპერვაიზორში"
+
+#: ../../src/kdc/main.c:583
+#, c-format
+msgid ""
+"usage: %s [-x db_args]* [-d dbpathname] [-r dbrealmname]\n"
+"\t\t[-T time_offset] [-m] [-k masterenctype]\n"
+"\t\t[-M masterkeyname] [-p port] [-P pid_file]\n"
+"\t\t[-n] [-w numworkers] [/]\n"
+"\n"
+"where,\n"
+"\t[-x db_args]* - Any number of database specific arguments.\n"
+"\t\t\tLook at each database module documentation for \t\t\tsupported "
+"arguments\n"
+msgstr ""
+"გამოყენება: %s [-x ბაზის_არგუმენტები]* [-d ბაზისბილიკისსახელი] [-r "
+"ბაზისნამდვილისახელი]\n"
+"\t\t[-T დროის_წანაცვლება] [-m] [-k მთავარიდაშიფვრისტიპი]\n"
+"\t\t[-M მთავარიგასაღებისსახელი] [-p პორტი] [-P pid_ფაილი]\n"
+"\t\t[-n] [-w დამხმ_პროცეს_რაოდენობა] [/]\n"
+"\n"
+"სადაც,\n"
+"\t[-x ბაზის_არგუმენტები]* - ბაზის არგუმენტების ნებისმიერი რაოდენობა\n"
+"\t\t\tმხარდაჭერილი არგუმენტების სიისთვის \t\t\tბაზის დოკუმენტაციას მიმართეთ\n"
+
+#: ../../src/kdc/main.c:658 ../../src/kdc/main.c:665 ../../src/kdc/main.c:780
+#, c-format
+msgid " KDC cannot initialize. Not enough memory\n"
+msgstr " KDC-ის ინიციალიზაციის შეცდომა. არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kdc/main.c:684 ../../src/kdc/main.c:727 ../../src/kdc/main.c:738
+#, c-format
+msgid "%s: KDC cannot initialize. Not enough memory\n"
+msgstr "%s: KDC-ის ინიციალიზაციის შეცდომა. არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kdc/main.c:704 ../../src/kdc/main.c:817
+#, c-format
+msgid "%s: cannot initialize realm %s - see log file for details\n"
+msgstr ""
+"%s: რეალმის %s ინიციალიზაცია შეუძლებელია- დეტალებისთვის იხილეთ ჟურნალის "
+"ფაილი\n"
+
+#: ../../src/kdc/main.c:715
+#, c-format
+msgid "%s: cannot initialize realm %s. Not enough memory\n"
+msgstr "%s: რეალმის (%s) ინიციალიზაციის შეცდომა. არასაკმარისი მეხსიერება\n"
+
+#: ../../src/kdc/main.c:766
+#, c-format
+msgid "invalid enctype %s"
+msgstr "არასწორი enctype %s"
+
+#: ../../src/kdc/main.c:805
+msgid "while attempting to retrieve default realm"
+msgstr "ნაგულისხმები რეალმის მიღების მცდელობისას"
+
+#: ../../src/kdc/main.c:807
+#, c-format
+msgid "%s: %s, attempting to retrieve default realm\n"
+msgstr "%s: %s, ნაგულისხმები რეალმის მიღების მცდელობა\n"
+
+#: ../../src/kdc/main.c:915
+#, c-format
+msgid "%s: cannot get memory for realm list\n"
+msgstr "%s: რეალმის სიისთვის მეხსიერების მიღების შეცდომა\n"
+
+#: ../../src/kdc/main.c:950
+msgid "while initializing lookaside cache"
+msgstr "გვერდზე გახედვის ქეშის ინიციალიზაციისას"
+
+#: ../../src/kdc/main.c:958
+msgid "while creating main loop"
+msgstr "მთავარი მარყუჟის შექმნისას"
+
+#: ../../src/kdc/main.c:967
+msgid "while loading KDC policy plugin"
+msgstr "kdc-ის პოლიტიკის დამატების ჩატვირთვისას"
+
+#: ../../src/kdc/main.c:992
+msgid "while initializing signal handlers"
+msgstr "სიგნალის დამმუშავებლების ინიციალიზაციისას"
+
+#: ../../src/kdc/main.c:1000
+msgid "while initializing network"
+msgstr "ქსელის ინიციალიზაციისას"
+
+#: ../../src/kdc/main.c:1010
+msgid "while detaching from tty"
+msgstr "tty-დან მოხსნისას"
+
+#: ../../src/kdc/main.c:1016
+msgid "while creating PID file"
+msgstr "pid ფაილის შექმნისას"
+
+#: ../../src/kdc/main.c:1024
+msgid "creating worker processes"
+msgstr "მიმდინარეობს დამხმარე პროცესების შექმნა"
+
+#: ../../src/kdc/main.c:1034
+msgid "while loading audit plugin module(s)"
+msgstr "აუდიტის დამატების მოდულების ჩატვირთვისას"
+
+#: ../../src/kdc/main.c:1038
+msgid "commencing operation"
+msgstr "ოპერაციის დასაწყისი"
+
+#: ../../src/kdc/main.c:1046
+msgid "shutting down"
+msgstr "მიმდინარეობს გამორთვა"
+
+#: ../../src/kdc/policy.c:230
+#, c-format
+msgid "while loading policy module %s"
+msgstr "პოლიტიკის მოდულის (%s) ჩატვირთვისას"
+
+#: ../../src/kprop/kprop.c:85
+#, c-format
+msgid ""
+"\n"
+"Usage: %s [-r realm] [-f file] [-d] [-P port] [-s keytab] replica_host\n"
+"\n"
+msgstr ""
+"\n"
+"გამოყენება: %s [-r რეალმი] [-f ფაილი] [-d] [-P პორტი] [-s keytab] "
+"რეპლიკის_ჰოსტი\n"
+"\n"
+
+#: ../../src/kprop/kprop.c:115
+#, c-format
+msgid "Database propagation to %s: SUCCEEDED\n"
+msgstr "ბაზის %s-მდე გავრცელება: წარმატებულია\n"
+
+#: ../../src/kprop/kprop.c:176
+msgid "while setting client principal name"
+msgstr "კლიენტის პრინციპალის სახელის დაყენებისას"
+
+#: ../../src/kprop/kprop.c:185
+msgid "while setting server principal name"
+msgstr "სერვერის პრინციპალის სახელის დაყენებისას"
+
+#: ../../src/kprop/kprop.c:198
+msgid "while resolving keytab"
+msgstr "keytab-ის ამოხსნისას"
+
+#: ../../src/kprop/kprop.c:206
+msgid "while getting initial credentials\n"
+msgstr "საწყისი ავტორიზაციის დეტალების მიღებისას\n"
+
+#: ../../src/kprop/kprop.c:242
+msgid "while creating socket"
+msgstr "სოკეტის შეერთებისას"
+
+#: ../../src/kprop/kprop.c:262
+msgid "while connecting to server"
+msgstr "სერვერთან მიერთებისას"
+
+#: ../../src/kprop/kprop.c:269 ../../src/kprop/kpropd.c:1195
+msgid "while getting local socket address"
+msgstr "ლოკალური სოკეტის მისამართის მიღებისას"
+
+#: ../../src/kprop/kprop.c:274
+msgid "while converting local address"
+msgstr "ლოკალური მისამართის გარდაქმნისას"
+
+#: ../../src/kprop/kprop.c:296
+msgid "in krb5_auth_con_setaddrs"
+msgstr "krb5_auth_con_setaddrs-ში"
+
+#: ../../src/kprop/kprop.c:304
+msgid "while authenticating to server"
+msgstr "სერვერთან ავთენტიკაციისას"
+
+#: ../../src/kprop/kprop.c:308 ../../src/kprop/kprop.c:506
+#: ../../src/kprop/kpropd.c:1515
+#, c-format
+msgid "Generic remote error: %s\n"
+msgstr "ზოგადი დაშორებული შეცდომა: %s\n"
+
+#: ../../src/kprop/kprop.c:314 ../../src/kprop/kprop.c:512
+msgid "signalled from server"
+msgstr "სიგნალი სერვერიდან"
+
+#: ../../src/kprop/kprop.c:316 ../../src/kprop/kprop.c:514
+#, c-format
+msgid "Error text from server: %s\n"
+msgstr "შეცდომის ტექსტი სერვერიდან: %s\n"
+
+#: ../../src/kprop/kprop.c:344
+#, c-format
+msgid "allocating database file name '%s'"
+msgstr "ბაზის ფაილის სახელის ('%s') გამოყოფა"
+
+#: ../../src/kprop/kprop.c:350
+#, c-format
+msgid "while trying to open %s"
+msgstr "%s-ის გახსნის მცდელობისას"
+
+#: ../../src/kprop/kprop.c:357
+msgid "database locked"
+msgstr "ბაზა დაბლოკილია"
+
+#: ../../src/kprop/kprop.c:360 ../../src/kprop/kpropd.c:552
+#, c-format
+msgid "while trying to lock '%s'"
+msgstr "'%s'-ის დაბლოკვისას"
+
+#: ../../src/kprop/kprop.c:364 ../../src/kprop/kprop.c:372
+#, c-format
+msgid "while trying to stat %s"
+msgstr "%s-ის აღმოჩენის მცდელობისას"
+
+#: ../../src/kprop/kprop.c:368
+msgid "while trying to malloc data_ok_fn"
+msgstr "data_ok_fn-ის malloc-ის მცდელობიას"
+
+#: ../../src/kprop/kprop.c:377
+#, c-format
+msgid "'%s' more recent than '%s'."
+msgstr "'%s' უფრო ახალია, ვიდრე '%s'."
+
+#: ../../src/kprop/kprop.c:393
+#, c-format
+msgid "while unlocking database '%s'"
+msgstr "ბაზის ('%s') განბლოკვისას"
+
+#: ../../src/kprop/kprop.c:425 ../../src/kprop/kprop.c:426
+msgid "while encoding database size"
+msgstr "ბაზის ზომის დაშიფვრისას"
+
+#: ../../src/kprop/kprop.c:434
+msgid "while sending database size"
+msgstr "ბაზის ზომის გაგზავნისას"
+
+#: ../../src/kprop/kprop.c:444
+msgid "while allocating i_vector"
+msgstr "i_vector-ის გამოყოფისას"
+
+#: ../../src/kprop/kprop.c:467
+#, c-format
+msgid "while sending database block starting at %<PRIu64>"
+msgstr "ბაზის ბლოკის, რომელიც %<PRIu64>-ზე იწყება, გაგზავნისას"
+
+#: ../../src/kprop/kprop.c:477
+msgid "Premature EOF found for database file!"
+msgstr "ბაზის ფაილში აღმოჩენილია ნაადრევი EOF!"
+
+#: ../../src/kprop/kprop.c:490
+msgid "while reading response from server"
+msgstr "შეცდომა სერვერის პასუხის წაკიხვისას"
+
+#: ../../src/kprop/kprop.c:501
+msgid "while decoding error response from server"
+msgstr "სერვერის შეცდომის შეტყობინების დეკოდირებისას"
+
+#: ../../src/kprop/kprop.c:531
+msgid "malformed sent database size message"
+msgstr "არასწორად გაგზავნილი ბაზის ზომის შეტყობინება"
+
+#: ../../src/kprop/kprop.c:535
+#, c-format
+msgid "Kpropd sent database size %<PRIu64>, expecting %<PRIu64>"
+msgstr "Kpropd გაგზავნილი ბაზის ზომა %<PRIu64>, მოველოდი %<PRIu64>"
+
+#: ../../src/kprop/kprop.c:581
+msgid "while allocating filename for update_last_prop_file"
+msgstr "update_last_prop_file-სთვის ფაილის სახელის გამოყოფისას"
+
+#: ../../src/kprop/kprop.c:586
+#, c-format
+msgid "while creating 'last_prop' file, '%s'"
+msgstr "'last_prop' ფაილის შექმნისას, '%s'"
+
+#: ../../src/kprop/kpropd.c:171
+#, c-format
+msgid ""
+"\n"
+"Usage: %s [-r realm] [-s keytab] [-d] [-D] [-S]\n"
+"\t[-f replica_file] [-F kerberos_db_file ]\n"
+"\t[-p kdb5_util_pathname] [-x db_args]* [-P port]\n"
+"\t[-a acl_file] [-A admin_server] [--pid-file=pid_file]\n"
+msgstr ""
+"\n"
+"გამოყენება: %s [-r რეალმი] [-s keytab] [-d] [-D] [-S]\n"
+"\t[-f რეპლიკის_ფაილი] [-F kerberos_ის_ბაზის_ფაილი ]\n"
+"\t[-p kdb5_პროგრამის_ბილიკი] [-x ბაზის_არგუმენტები]* [-P პორტი]\n"
+"\t[-a acl_ფაილი] [-A ადმინ_სერვერი] [--pid-file=pid_ფაილი]\n"
+
+#: ../../src/kprop/kpropd.c:231
+#, c-format
+msgid "Killing fullprop child (%d)\n"
+msgstr "Fullprop შვილის მოკვლა (%d)\n"
+
+#: ../../src/kprop/kpropd.c:260
+msgid "while checking if stdin is a socket"
+msgstr "შემოწმებისას, წარმოადგენს თუ არა stdin სოკეტს"
+
+#: ../../src/kprop/kpropd.c:278
+#, c-format
+msgid "ready\n"
+msgstr "მზადაა\n"
+
+#: ../../src/kprop/kpropd.c:284
+#, c-format
+msgid "Could not write pid file %s: %s"
+msgstr "PID ფაილში (%s) ჩაწერის შეცდომა: %s"
+
+#: ../../src/kprop/kpropd.c:296
+#, c-format
+msgid "Could not open /dev/null: %s"
+msgstr "/dev/null-ის გასნის შეცდომა: %s"
+
+#: ../../src/kprop/kpropd.c:303
+#, c-format
+msgid "Could not dup the inetd socket: %s"
+msgstr "შეცდომა inetd-ის სოკეტის გახნისას: %s"
+
+#: ../../src/kprop/kpropd.c:338 ../../src/kprop/kpropd.c:351
+msgid "do_iprop failed.\n"
+msgstr "do_iprop -ის შეცდომა.\n"
+
+#: ../../src/kprop/kpropd.c:390
+#, c-format
+msgid "getaddrinfo: %s\n"
+msgstr "getaddrinfo: %s\n"
+
+#: ../../src/kprop/kpropd.c:396
+msgid "while obtaining socket"
+msgstr "სოკეტის მიღებისას"
+
+#: ../../src/kprop/kpropd.c:402
+msgid "while setting SO_REUSEADDR option"
+msgstr "პარამეტრის SO_REUSEADDR დაყენებისას"
+
+#: ../../src/kprop/kpropd.c:410
+msgid "while unsetting IPV6_V6ONLY option"
+msgstr "პარამეტრის IPV6_V6ONLY დაყენებისას"
+
+#: ../../src/kprop/kpropd.c:415
+msgid "while binding listener socket"
+msgstr "მომსმენ სოკეტთან მიბმისას"
+
+#: ../../src/kprop/kpropd.c:426
+#, c-format
+msgid "waiting for a kprop connection\n"
+msgstr "kprop მიერთების მოლოდინი\n"
+
+#: ../../src/kprop/kpropd.c:432
+msgid "while accepting connection"
+msgstr "შერთების მიღებისას"
+
+#: ../../src/kprop/kpropd.c:438
+msgid "while forking"
+msgstr "განტოტვისას"
+
+#: ../../src/kprop/kpropd.c:453
+#, c-format
+msgid "waitpid() failed to wait for doit() (%d %s)\n"
+msgstr "waitpid() ვერ დაელოდა doit()-ს (%d %s)\n"
+
+#: ../../src/kprop/kpropd.c:457
+msgid "while waiting to receive database"
+msgstr "ბაზის მიღების მოლოდინისას"
+
+#: ../../src/kprop/kpropd.c:461
+#, c-format
+msgid "Database load process for full propagation completed.\n"
+msgstr "ბაზის ჩატვირთვის პროცესი სრულად გავრცელებისთვის დასრულებულია.\n"
+
+#: ../../src/kprop/kpropd.c:499
+#, c-format
+msgid ""
+"%s: Standard input does not appear to be a network socket.\n"
+"\t(Not run from inetd, and missing the -S option?)\n"
+msgstr ""
+"%s: სტანდარტული შეყვანა ქსელის სოკეტს არ წააგავს.\n"
+"\t(არაა გაშვებული inetd-დან და აკლია -S პარამეტრი?)\n"
+
+#: ../../src/kprop/kpropd.c:512
+msgid "while attempting setsockopt (SO_KEEPALIVE)"
+msgstr "setsockopt (SO_KEEPALIVE)-ის მცდელობისას"
+
+#: ../../src/kprop/kpropd.c:517
+#, c-format
+msgid "Connection from %s"
+msgstr "შეერთება %s -დან"
+
+#: ../../src/kprop/kpropd.c:537
+#, c-format
+msgid "Rejected connection from unauthorized principal %s\n"
+msgstr "მიერთება უარყოფილია არაავტორიზებული პრინციპალისთვის %s\n"
+
+#: ../../src/kprop/kpropd.c:541
+#, c-format
+msgid "Rejected connection from unauthorized principal %s"
+msgstr "მიერთება უარყოფილია არაავტორიზებული პრინციპალისთვის %s"
+
+#: ../../src/kprop/kpropd.c:558
+#, c-format
+msgid "while opening database file, '%s'"
+msgstr "ბაზის ფაილის, '%s', გახსნისას"
+
+#: ../../src/kprop/kpropd.c:564
+#, c-format
+msgid "while renaming %s to %s"
+msgstr "სახელის \"%s\"-დან \"%s\"-მდე გადარქმევისას"
+
+#: ../../src/kprop/kpropd.c:570
+#, c-format
+msgid "while downgrading lock on '%s'"
+msgstr "'%s'-ზე ბლოკის დაქვეითებისას"
+
+#: ../../src/kprop/kpropd.c:577
+#, c-format
+msgid "while unlocking '%s'"
+msgstr "'%s'-ის განბლოკვისას"
+
+#: ../../src/kprop/kpropd.c:589
+msgid "while sending # of received bytes"
+msgstr "მიღებული ბაიტების #-ის გაგზავნისას"
+
+#: ../../src/kprop/kpropd.c:595
+msgid "while trying to close database file"
+msgstr "ბაზის ფაილის დახურვის მცდელობისას"
+
+#: ../../src/kprop/kpropd.c:650
+#, c-format
+msgid "Incremental propagation enabled\n"
+msgstr "ინკრემენტული გავრცელება ჩართულია\n"
+
+#: ../../src/kprop/kpropd.c:659
+#, c-format
+msgid "%s: unable to get kiprop host based service name for realm %s\n"
+msgstr ""
+"%s: რეალმისთვის (%s) kipropz-ის ჰოსტზე ბაზირებული სერვისის სახელის მიღების "
+"შეცდომა\n"
+
+#: ../../src/kprop/kpropd.c:669
+msgid "while trying to construct host service principal"
+msgstr "ჰოსტის სერვისის პრინციპალის აშენების მცდელობისას"
+
+#: ../../src/kprop/kpropd.c:686
+#, c-format
+msgid "Initializing kadm5 as client %s\n"
+msgstr "Kadm5-ის, როგორც %s კლიენტის ინიციალიზაცია\n"
+
+#: ../../src/kprop/kpropd.c:700
+#, c-format
+msgid "kadm5 initialization failed!\n"
+msgstr "kadm5 -ის ინიციალიზაციის შეცდომა!\n"
+
+#: ../../src/kprop/kpropd.c:709
+msgid "while attempting to connect to primary KDC ... retrying"
+msgstr "ძირითად KDC-სთან მიერთების მცდელობისას ... თავიდან ცდა"
+
+#: ../../src/kprop/kpropd.c:713
+#, c-format
+msgid "Sleeping %d seconds to re-initialize kadm5 (RPC ERROR)\n"
+msgstr "%d -წამიანი ძილი kadm5-ის რეინიციალიზაციისთვის (RPC-ის შეცდომა)\n"
+
+#: ../../src/kprop/kpropd.c:729
+#, c-format
+msgid "while initializing %s interface, retrying"
+msgstr "%s ინტერფეისის ინიციალიზაციისას. თავიდან ცდა"
+
+#: ../../src/kprop/kpropd.c:733
+#, c-format
+msgid "Sleeping %d seconds to re-initialize kadm5 (krb5kdc not running?)\n"
+msgstr ""
+"%d -წამიანი ძილი kadm5-ის რეინიციალიზაციისთვის (გაშვებულია თუ არა krb4kdc?)\n"
+
+#: ../../src/kprop/kpropd.c:743
+#, c-format
+msgid "kadm5 initialization succeeded\n"
+msgstr "kadm5 -ის ინიციალიზაცია წარმატებულია\n"
+
+#: ../../src/kprop/kpropd.c:765
+msgid "reading update log header"
+msgstr "განახლების ჟურნალის თავსართის წაკთხვა"
+
+#: ../../src/kprop/kpropd.c:776
+#, c-format
+msgid "Calling iprop_get_updates_1 (sno=%u sec=%u usec=%u)\n"
+msgstr ""
+"მიმდინარეობს iprop_get_updates_1-ის გამოძახება (sno=%u sec=%u usec=%u)\n"
+
+#: ../../src/kprop/kpropd.c:786
+msgid "iprop_get_updates call failed"
+msgstr "iprop_get_updates -ის გამოძახების შეცდომა"
+
+#: ../../src/kprop/kpropd.c:792
+#, c-format
+msgid "Reinitializing iprop because get updates failed\n"
+msgstr ""
+"განახლებების მიღების შეცდომის გამო მიმდინარეობს iprop-ის რეინიციალიზაცია\n"
+
+#: ../../src/kprop/kpropd.c:813
+#, c-format
+msgid "Still waiting for full resync\n"
+msgstr "სრულ რესინქრონიზაციას ჯერ კიდევ ველოდები\n"
+
+#: ../../src/kprop/kpropd.c:818
+#, c-format
+msgid "Full resync needed\n"
+msgstr "საჭიროა სრული რესინქრონიზაცია\n"
+
+#: ../../src/kprop/kpropd.c:819
+msgid "kpropd: Full resync needed."
+msgstr "kpropd: საჭიროა სრული რესინქრონიზაცია."
+
+#: ../../src/kprop/kpropd.c:824
+msgid "iprop_full_resync call failed"
+msgstr "iprop_full_resync -ის გამოძახების შეცდომა"
+
+#: ../../src/kprop/kpropd.c:835
+#, c-format
+msgid "Full resync request granted\n"
+msgstr "სრული ხელახალი სინქრონიზაციის მოთხოვნა დაკმაყოფილებულია\n"
+
+#: ../../src/kprop/kpropd.c:836
+msgid "Full resync request granted."
+msgstr "სრული ხელახალი სინქრონიზაციის მოთხოვნა დაკმაყოფილებულია."
+
+#: ../../src/kprop/kpropd.c:845
+#, c-format
+msgid "Exponential backoff\n"
+msgstr "ექსპონენტური დაბრუნება\n"
+
+#: ../../src/kprop/kpropd.c:851
+#, c-format
+msgid "Full resync permission denied\n"
+msgstr "სრული რესინქრონიზაციის წვდომა აკრძალულია\n"
+
+#: ../../src/kprop/kpropd.c:852
+msgid "Full resync, permission denied."
+msgstr "სრული რესინქრონიზაცია, წვდომა აკრძალულია."
+
+#: ../../src/kprop/kpropd.c:857
+#, c-format
+msgid "Full resync error from primary\n"
+msgstr ""
+"სრული რესინქრონიზაციის შეცდომა ძირითადიდან\n"
+"\n"
+
+#: ../../src/kprop/kpropd.c:858
+msgid " Full resync, error returned from primary KDC."
+msgstr " სრული რესინქრონიზაცია, ძირითადმა KDC-მა შეცდომა დააბრუნა."
+
+#: ../../src/kprop/kpropd.c:866
+#, c-format
+msgid "Full resync invalid result from primary\n"
+msgstr "სრული რექსინქრონიზაცია. არასწორი პასუხი ძირითადიდან\n"
+
+#: ../../src/kprop/kpropd.c:868
+msgid "Full resync, invalid return from primary KDC."
+msgstr "სრული რესინქრონიზაცია. არასწორი პასუხი ძირითადი KDC-დან."
+
+#: ../../src/kprop/kpropd.c:884
+#, c-format
+msgid "Got incremental updates (sno=%u sec=%u usec=%u)\n"
+msgstr "მიღებულია ინკრემენტული განახლებები (sno=%u sec=%u usec=%u)\n"
+
+#: ../../src/kprop/kpropd.c:896
+#, c-format
+msgid "ulog_replay failed (%s), updates not registered\n"
+msgstr "ulog_replay -ის შეცდომა (%s), განახლებები არ დარეგისტრირებულა\n"
+
+#: ../../src/kprop/kpropd.c:899
+#, c-format
+msgid "ulog_replay failed (%s), updates not registered."
+msgstr "ulog_replay -ის შეცდომა (%s), განახლებები არ დარეგისტრირებულა."
+
+#: ../../src/kprop/kpropd.c:908
+#, c-format
+msgid "Incremental updates: %d updates / %lu us"
+msgstr "ინკრემენტული განახლებები: %d განახლება / %lu მწმ"
+
+#: ../../src/kprop/kpropd.c:911
+#, c-format
+msgid "Incremental updates: %d updates / %lu us\n"
+msgstr "ინკრემენტული განახლებები: %d განახლება / %lu მწმ\n"
+
+#: ../../src/kprop/kpropd.c:919
+#, c-format
+msgid "get_updates permission denied\n"
+msgstr "get_updates წვდომა აკრძალულია\n"
+
+#: ../../src/kprop/kpropd.c:920
+msgid "get_updates, permission denied."
+msgstr "get_updates წვდომა აკრძალულია."
+
+#: ../../src/kprop/kpropd.c:925
+#, c-format
+msgid "get_updates error from primary\n"
+msgstr "get_updates შეცდომა ძირითადიდან\n"
+
+#: ../../src/kprop/kpropd.c:927
+msgid "get_updates, error returned from primary KDC."
+msgstr "get_updates, ძირითადმა KDC-მა შეცდომა დააბრუნა."
+
+#: ../../src/kprop/kpropd.c:935
+#, c-format
+msgid "get_updates primary busy; backoff\n"
+msgstr "get_updates მთავარიდ აკავებულია; დაბრუნება\n"
+
+#: ../../src/kprop/kpropd.c:944
+#, c-format
+msgid "KDC is synchronized with primary.\n"
+msgstr "KDC სინქრონიზებულია ძირითადთან.\n"
+
+#: ../../src/kprop/kpropd.c:953
+#, c-format
+msgid "get_updates invalid result from primary\n"
+msgstr "get_updates არასწორი პასუხი ძირითადიდან\n"
+
+#: ../../src/kprop/kpropd.c:956
+msgid "get_updates, invalid return from primary KDC."
+msgstr "get_updates, არასწორი პასუხი ძირითადი KDC -დან."
+
+#: ../../src/kprop/kpropd.c:971
+#, c-format
+msgid "Busy signal received from primary, backoff for %d secs\n"
+msgstr "მთავარიდან მიღებულია დაკავებულობის სიგნალი. დაბრუნება %d წამით\n"
+
+#: ../../src/kprop/kpropd.c:978
+#, c-format
+msgid "Waiting for %d seconds before checking for updates again\n"
+msgstr "%d წამის მოლოდინი განახლებების თავის შემოწმებამდე\n"
+
+#: ../../src/kprop/kpropd.c:989
+#, c-format
+msgid "ERROR returned by primary, bailing\n"
+msgstr "მთავარმა შეცდომა დააბრუნა, დანებება\n"
+
+#: ../../src/kprop/kpropd.c:990
+msgid "ERROR returned by primary KDC, bailing.\n"
+msgstr "მთავარმა KDC-მა შეცდომა დააბრუნა. დანებება.\n"
+
+#: ../../src/kprop/kpropd.c:1108
+msgid "copying db args"
+msgstr "ბაზის არგუმენტების კოპირება"
+
+#: ../../src/kprop/kpropd.c:1133
+msgid "Unable to get default realm"
+msgstr "ნაგულისხმები რეალმის მიღების შეცდომა"
+
+#: ../../src/kprop/kpropd.c:1140
+msgid "Unable to set default realm"
+msgstr "ნაგულისხმები რეალმის დაყენების შეცდომა"
+
+#: ../../src/kprop/kpropd.c:1150
+msgid "while trying to construct my service name"
+msgstr "ჩემი სერვისის სახელის აწყობის მცდელობისას"
+
+#: ../../src/kprop/kpropd.c:1157
+msgid "while allocating filename for temp file"
+msgstr "დროებითი ფაილის სახელის გამოყოფისას"
+
+#: ../../src/kprop/kpropd.c:1165
+msgid "while initializing"
+msgstr "ინიციალიზაციისას"
+
+#: ../../src/kprop/kpropd.c:1173
+msgid "Unable to map log!\n"
+msgstr "ჟურნალის მიბმის შეცდომა!\n"
+
+#: ../../src/kprop/kpropd.c:1215
+#, c-format
+msgid "Error in krb5_auth_con_ini: %s"
+msgstr "შეცდომა krb5_auth_con_ini-ში: %s"
+
+#: ../../src/kprop/kpropd.c:1223
+#, c-format
+msgid "Error in krb5_auth_con_setflags: %s"
+msgstr "შეცდომა krb5_auth_con_setflags-ში: %s"
+
+#: ../../src/kprop/kpropd.c:1236
+#, c-format
+msgid "Error in krb5_auth_con_setaddrs: %s"
+msgstr "შეცდომა krb5_auth_con_setaddrs-ში: %s"
+
+#: ../../src/kprop/kpropd.c:1244
+#, c-format
+msgid "Error in krb5_kt_resolve: %s"
+msgstr "შეცდომა krb5_kt_resolve-ში: %s"
+
+#: ../../src/kprop/kpropd.c:1253
+#, c-format
+msgid "Error in krb5_recvauth: %s"
+msgstr "შეცდომა krb5_recvauth -ში: %s"
+
+#: ../../src/kprop/kpropd.c:1260
+#, c-format
+msgid "Error in krb5_copy_prinicpal: %s"
+msgstr "შეცდომა krb5_copy_prinicpal-ში: %s"
+
+#: ../../src/kprop/kpropd.c:1277
+msgid "while unparsing ticket etype"
+msgstr "ბილეთის etype-ის დამუშავების გაუქმებისას"
+
+#: ../../src/kprop/kpropd.c:1281
+#, c-format
+msgid "authenticated client: %s (etype == %s)\n"
+msgstr "კლიენტი ავტორიზებულია: %s (etype == %s)\n"
+
+#: ../../src/kprop/kpropd.c:1361
+msgid "while reading size of database from client"
+msgstr "კლიენტიდან ბაზის ზომის კითხვისას"
+
+#: ../../src/kprop/kpropd.c:1371
+msgid "while decoding database size from client"
+msgstr "კლიენტიდან ბაზის ზომის დეკოდირებისას"
+
+#: ../../src/kprop/kpropd.c:1379
+msgid "malformed database size message from client"
+msgstr "კლიენტიდან მიღებული ბაზის ზომის შეტყობინება არასწორია"
+
+#: ../../src/kprop/kpropd.c:1391
+msgid "while initializing i_vector"
+msgstr "i_vector-ის ინიციალიზაციისას"
+
+#: ../../src/kprop/kpropd.c:1396
+#, c-format
+msgid "Full propagation transfer started.\n"
+msgstr "სრული გავრცელების გადაცემა დაწყებულია.\n"
+
+#: ../../src/kprop/kpropd.c:1450
+#, c-format
+msgid "Full propagation transfer finished.\n"
+msgstr "სრული გავრცელების გადაცემა დასრულდა.\n"
+
+#: ../../src/kprop/kpropd.c:1510
+msgid "while decoding error packet from client"
+msgstr "კლიენტიდან მიღებული შეცდომის პაკეტის დეკოდირებისას"
+
+#: ../../src/kprop/kpropd.c:1519
+msgid "signaled from server"
+msgstr "სიგნალი სერვერიდან"
+
+#: ../../src/kprop/kpropd.c:1521
+#, c-format
+msgid "Error text from client: %s\n"
+msgstr "შეცდომის ტექსტი კლიენტიდან: %s\n"
+
+#: ../../src/kprop/kpropd.c:1570
+#, c-format
+msgid "while trying to fork %s"
+msgstr "%s-ის განტოტვისას"
+
+#: ../../src/kprop/kpropd.c:1574
+#, c-format
+msgid "while trying to exec %s"
+msgstr "%s-ის exec-ის მცდელობისას"
+
+#: ../../src/kprop/kpropd.c:1581
+#, c-format
+msgid "while waiting for %s"
+msgstr "%s-ის მოლოდინისას"
+
+#: ../../src/kprop/kpropd.c:1587
+#, c-format
+msgid "%s load terminated"
+msgstr "%s-ის ჩატვირთვა შეწყვეტილია"
+
+#: ../../src/kprop/kpropd.c:1593
+#, c-format
+msgid "%s returned a bad exit status (%d)"
+msgstr "%s -მა გასვლის არასწორი სტატუსი დააბრუნა (%d)"
+
+#: ../../src/kprop/kproplog.c:29
+#, c-format
+msgid ""
+"\n"
+"Usage: %s [-h] [-v] [-v] [-e num]\n"
+"\t%s -R\n"
+"\n"
+msgstr ""
+"\n"
+"გამოყენება: %s [-h] [-v] [-v] [-e რიცხვი]\n"
+"\t%s -R\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:112
+#, c-format
+msgid ""
+"\n"
+"Couldn't allocate memory"
+msgstr ""
+"\n"
+"მეხსიერების გამოყოფის შეცდომა"
+
+#: ../../src/kprop/kproplog.c:206
+#, c-format
+msgid "\t\tAttribute flags\n"
+msgstr "\t\tატრიბუტის ალმები\n"
+
+#: ../../src/kprop/kproplog.c:211
+#, c-format
+msgid "\t\tMaximum ticket life\n"
+msgstr "\t\tბილეთის მაქსიმალური სიცოცხლე\n"
+
+#: ../../src/kprop/kproplog.c:216
+#, c-format
+msgid "\t\tMaximum renewable life\n"
+msgstr "\t\tმაქსიმალური განახლებადი სიცოცხლე\n"
+
+#: ../../src/kprop/kproplog.c:221
+#, c-format
+msgid "\t\tPrincipal expiration\n"
+msgstr "\t\tპრინციპალის ვადა\n"
+
+#: ../../src/kprop/kproplog.c:226
+#, c-format
+msgid "\t\tPassword expiration\n"
+msgstr "\t\tპაროლის ვადა\n"
+
+#: ../../src/kprop/kproplog.c:231
+#, c-format
+msgid "\t\tLast successful auth\n"
+msgstr "\t\tბოლო წარმატებული ავთენტიკაცია\n"
+
+#: ../../src/kprop/kproplog.c:236
+#, c-format
+msgid "\t\tLast failed auth\n"
+msgstr "\t\tბოლო წარუმატებელი ავთენტიკაცია\n"
+
+#: ../../src/kprop/kproplog.c:241
+#, c-format
+msgid "\t\tFailed passwd attempt\n"
+msgstr "\t\tწარუმატებელი პაროლის მცდელობა\n"
+
+#: ../../src/kprop/kproplog.c:246
+#, c-format
+msgid "\t\tPrincipal\n"
+msgstr "\t\tპრინციპალი\n"
+
+#: ../../src/kprop/kproplog.c:251
+#, c-format
+msgid "\t\tKey data\n"
+msgstr "\t\tგასაღების შემცველობა\n"
+
+#: ../../src/kprop/kproplog.c:258
+#, c-format
+msgid "\t\tTL data\n"
+msgstr "\t\tTL -ის მონაცემები\n"
+
+#: ../../src/kprop/kproplog.c:265
+#, c-format
+msgid "\t\tLength\n"
+msgstr "\t\tსიგრძე\n"
+
+#: ../../src/kprop/kproplog.c:270
+#, c-format
+msgid "\t\tPassword last changed\n"
+msgstr "\t\tპაროლი ბოლოს შეიცვალა\n"
+
+#: ../../src/kprop/kproplog.c:275
+#, c-format
+msgid "\t\tModifying principal\n"
+msgstr "\t\tპრინციპალის შეცვლა\n"
+
+#: ../../src/kprop/kproplog.c:280
+#, c-format
+msgid "\t\tModification time\n"
+msgstr "\t\tცვლილების დრო\n"
+
+#: ../../src/kprop/kproplog.c:285
+#, c-format
+msgid "\t\tModified where\n"
+msgstr "\t\tცვლილების ადგილი\n"
+
+#: ../../src/kprop/kproplog.c:290
+#, c-format
+msgid "\t\tPassword policy\n"
+msgstr "\t\tპაროლის პოლიტიკა\n"
+
+#: ../../src/kprop/kproplog.c:295
+#, c-format
+msgid "\t\tPassword policy switch\n"
+msgstr "\t\tპაროლის პოლიტიკის გადართვა\n"
+
+#: ../../src/kprop/kproplog.c:300
+#, c-format
+msgid "\t\tPassword history KVNO\n"
+msgstr "\t\tპაროლის ისტორია KVNO\n"
+
+#: ../../src/kprop/kproplog.c:305
+#, c-format
+msgid "\t\tPassword history\n"
+msgstr "\t\tპაროლის ისტორია\n"
+
+#: ../../src/kprop/kproplog.c:339
+#, c-format
+msgid ""
+"Corrupt update entry\n"
+"\n"
+msgstr ""
+"დაზიანებული ჩანაწერის განახლება\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:344
+#, c-format
+msgid "Update Entry\n"
+msgstr "ჩანაწერის განახლება\n"
+
+#: ../../src/kprop/kproplog.c:346
+#, c-format
+msgid "\tUpdate serial # : %u\n"
+msgstr "\tსერიალის განახლება # : %u\n"
+
+#: ../../src/kprop/kproplog.c:350
+#, c-format
+msgid "\tDummy entry\n"
+msgstr "\tცარიელი ჩანაწერი\n"
+
+#: ../../src/kprop/kproplog.c:358
+#, c-format
+msgid ""
+"Entry data decode failure\n"
+"\n"
+msgstr ""
+"ჩანაწერის მონაცემების დეკოდირების შეცდომა\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:362
+#, c-format
+msgid "\tUpdate operation : "
+msgstr "\tოპერაციის განახლება : "
+
+#: ../../src/kprop/kproplog.c:364
+#, c-format
+msgid "Delete\n"
+msgstr "წაშლა\n"
+
+#: ../../src/kprop/kproplog.c:366
+#, c-format
+msgid "Add\n"
+msgstr "დამატება\n"
+
+#: ../../src/kprop/kproplog.c:370
+#, c-format
+msgid ""
+"Could not allocate principal name\n"
+"\n"
+msgstr ""
+"პრინციპალის სახელის გამოყოფის შეცდომა\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:376
+#, c-format
+msgid "\tUpdate principal : %s\n"
+msgstr "\tპრინციალის განახლება : %s\n"
+
+#: ../../src/kprop/kproplog.c:378
+#, c-format
+msgid "\tUpdate size : %u\n"
+msgstr "\tგანახლების ზომა : %u\n"
+
+#: ../../src/kprop/kproplog.c:379
+#, c-format
+msgid "\tUpdate committed : %s\n"
+msgstr "\tგანახლება გადაცემულია : %s\n"
+
+#: ../../src/kprop/kproplog.c:383
+#, c-format
+msgid "\tUpdate time stamp : None\n"
+msgstr "\tგანახლების დროის შტამპი : არცერთი\n"
+
+#: ../../src/kprop/kproplog.c:385
+#, c-format
+msgid "\tUpdate time stamp : %s"
+msgstr "\tგანახლების დროის შტამპი : %s"
+
+#: ../../src/kprop/kproplog.c:389
+#, c-format
+msgid "\tAttributes changed : %d\n"
+msgstr "\tატრიბუტები შეიცვალა : %d\n"
+
+#: ../../src/kprop/kproplog.c:462
+#, c-format
+msgid ""
+"Unable to initialize Kerberos\n"
+"\n"
+msgstr ""
+"Kerberos-ის ინიციალიზაციის შეცდომა\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:469
+#, c-format
+msgid ""
+"Couldn't read database_name\n"
+"\n"
+msgstr ""
+"შეცდომა database_name-ის წაკითხვისას\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:473
+#, c-format
+msgid ""
+"\n"
+"Kerberos update log (%s)\n"
+msgstr ""
+"\n"
+"Kerberos -ის განახლების ჟურნალი (%s)\n"
+
+#: ../../src/kprop/kproplog.c:477 ../../src/kprop/kproplog.c:493
+#, c-format
+msgid ""
+"Unable to map log file %s\n"
+"\n"
+msgstr ""
+"ჟურნალის ფაილის %s მიბმის შეცდომა\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:482
+#, c-format
+msgid ""
+"Couldn't reinitialize ulog file %s\n"
+"\n"
+msgstr ""
+"შეცდომა ulog ფაილის %s რეინიციალიზაციისას\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:486
+#, c-format
+msgid "Reinitialized the ulog.\n"
+msgstr "Ulog-ის რეინიციალიზაცია წარმატებულია.\n"
+
+#: ../../src/kprop/kproplog.c:499
+#, c-format
+msgid ""
+"Corrupt header log, exiting\n"
+"\n"
+msgstr ""
+"ჟურნალის თავსართი დაზიანებულია. გასვლა\n"
+"\n"
+
+#: ../../src/kprop/kproplog.c:503
+#, c-format
+msgid "Update log dump :\n"
+msgstr "განახლების ჟურნალის დამპი :\n"
+
+#: ../../src/kprop/kproplog.c:504
+#, c-format
+msgid "\tLog version # : %u\n"
+msgstr "\tჟურნალის ვერსია # : %u\n"
+
+#: ../../src/kprop/kproplog.c:505
+#, c-format
+msgid "\tLog state : "
+msgstr "\tჟურნალის მდგომარეობა : "
+
+#: ../../src/kprop/kproplog.c:508
+#, c-format
+msgid "Stable\n"
+msgstr "სტაბილური\n"
+
+#: ../../src/kprop/kproplog.c:511
+#, c-format
+msgid "Unstable\n"
+msgstr "არასტაბილური\n"
+
+#: ../../src/kprop/kproplog.c:514
+#, c-format
+msgid "Corrupt\n"
+msgstr "დაზიანებული\n"
+
+#: ../../src/kprop/kproplog.c:517
+#, c-format
+msgid "Unknown state: %d\n"
+msgstr "უცნობი მდგომარეობა: %d\n"
+
+#: ../../src/kprop/kproplog.c:520
+#, c-format
+msgid "\tEntry block size : %u\n"
+msgstr "\tჩანაწერის ბლოკის ზომა : %u\n"
+
+#: ../../src/kprop/kproplog.c:521
+#, c-format
+msgid "\tNumber of entries : %u\n"
+msgstr "\tჩანაწერების რაოდენობა : %u\n"
+
+#: ../../src/kprop/kproplog.c:524
+#, c-format
+msgid "\tLast serial # : None\n"
+msgstr "\tბოლო სერიული # : არცერთი\n"
+
+#: ../../src/kprop/kproplog.c:527
+#, c-format
+msgid "\tFirst serial # : None\n"
+msgstr "\tპირველი სერიული # : არცერთი\n"
+
+#: ../../src/kprop/kproplog.c:529
+#, c-format
+msgid "\tFirst serial # : "
+msgstr "\tპირველი სერიული # : "
+
+#: ../../src/kprop/kproplog.c:533
+#, c-format
+msgid "\tLast serial # : "
+msgstr "\tბოლო სერიული # : "
+
+#: ../../src/kprop/kproplog.c:538
+#, c-format
+msgid "\tLast time stamp : None\n"
+msgstr "\tბოლო დროის შტამპი : არცერთი\n"
+
+#: ../../src/kprop/kproplog.c:541
+#, c-format
+msgid "\tFirst time stamp : None\n"
+msgstr "\tპირველი დროის შტამპი : არცერთი\n"
+
+#: ../../src/kprop/kproplog.c:543
+#, c-format
+msgid "\tFirst time stamp : %s"
+msgstr "\tპირველი დროის შტამპი : %s"
+
+#: ../../src/kprop/kproplog.c:547
+#, c-format
+msgid "\tLast time stamp : %s\n"
+msgstr "\tბოლო დროის შტამპი : %s\n"
+
+#: ../../src/lib/apputils/net-server.c:231
+msgid "Got signal to request exit"
+msgstr "მიღებულია სიგნალი გასვლის მოთხოვნისთვის"
+
+#: ../../src/lib/apputils/net-server.c:245
+msgid "Got signal to reset"
+msgstr "მიღებულია სიგნალი საწყის მნიშვნელობებზე დასაბრუნებლად"
+
+#: ../../src/lib/apputils/net-server.c:311
+#, c-format
+msgid "Invalid port %d"
+msgstr "არასწორი პორტი %d"
+
+#: ../../src/lib/apputils/net-server.c:324
+#, c-format
+msgid "Removing address %s since wildcard address is being added"
+msgstr "მისამართი %s წაიშლება, რადგან საჭიროა ვაილდკარდი მისმართის დამატება"
+
+#: ../../src/lib/apputils/net-server.c:331
+msgid "Address already added to server"
+msgstr "მისამართი სერვერზე უკვე დამატებულია"
+
+#: ../../src/lib/apputils/net-server.c:494
+#, c-format
+msgid "closing down fd %d"
+msgstr "fd %d-ის დახურვა"
+
+#: ../../src/lib/apputils/net-server.c:508
+#, c-format
+msgid "descriptor %d closed but still in svc_fdset"
+msgstr "დესკრიპტორი %d დახურულია, მაგრამ ჯერ კიდევ svc_fdset -შია"
+
+#: ../../src/lib/apputils/net-server.c:534
+msgid "cannot create io event"
+msgstr "io მოვლენის შექმნის შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:539
+msgid "cannot save event"
+msgstr "მოვლენის შენახვის შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:559
+#, c-format
+msgid "file descriptor number %d too high"
+msgstr "ფაილის დესკრიპტორის ნომერი %d ძალიან მაღალია"
+
+#: ../../src/lib/apputils/net-server.c:566
+msgid "cannot allocate storage for connection info"
+msgstr "შეერთების ინფორმაციისთვის საცავის გამოყოფის შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:601
+#, c-format
+msgid "Cannot create TCP server socket on %s"
+msgstr "%s-ზე TCP სერვერის სოკეტის შექმნა შეუძლებელია"
+
+#: ../../src/lib/apputils/net-server.c:610
+#, c-format
+msgid "TCP socket fd number %d (for %s) too high"
+msgstr "TCP სოკეტის fd -ის ნომერი %d (%s-სთვის) ძალიან მაღალია"
+
+#: ../../src/lib/apputils/net-server.c:617
+#, c-format
+msgid "Cannot enable SO_REUSEADDR on fd %d"
+msgstr "SO_REUSEADDR-ის დაყენების შეცდომა fd-ზე %d"
+
+#: ../../src/lib/apputils/net-server.c:622
+#, c-format
+msgid "setsockopt(%d,IPV6_V6ONLY,1) failed"
+msgstr "setsockopt(%d,IPV6_V6ONLY,1) -ის შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:625
+#, c-format
+msgid "setsockopt(%d,IPV6_V6ONLY,1) worked"
+msgstr "setsockopt(%d,IPV6_V6ONLY,1) მუშაობს"
+
+#: ../../src/lib/apputils/net-server.c:628
+msgid "no IPV6_V6ONLY socket option support"
+msgstr "სოკეტს IPV6_V6ONLY პარამეტრის მხარდაჭერა არ გააჩნია"
+
+#: ../../src/lib/apputils/net-server.c:634
+#, c-format
+msgid "Cannot bind server socket on %s"
+msgstr "სერვერის სოკეტზე მიბმის შეცდომა %s-ზე"
+
+#: ../../src/lib/apputils/net-server.c:704
+#, c-format
+msgid "Setting up %s socket for address %s"
+msgstr "%s სოკეტის მორგება მისამართისთვის %s"
+
+#: ../../src/lib/apputils/net-server.c:717
+#, c-format
+msgid "Cannot listen on %s server socket on %s"
+msgstr "%s სერვერის სოკეტზე მოსმენის შეცდომა %s-ზე"
+
+#: ../../src/lib/apputils/net-server.c:726
+#, c-format
+msgid "cannot set listening %s socket on %s non-blocking"
+msgstr "მოსმენის %s სოკეტის %s არაბლოკირებადზე დაყენების შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:734
+#, c-format
+msgid "cannot set SO_LINGER on %s socket on %s"
+msgstr "%s სოკეტზე %s-ზე SO_LINGER-ის დაყენების შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:741
+#, c-format
+msgid "Setting pktinfo on socket %s"
+msgstr "სოკეტზე %s pktinfo-ის დაყენება"
+
+#: ../../src/lib/apputils/net-server.c:746
+#, c-format
+msgid "Cannot request packet info for UDP socket address %s port %d"
+msgstr ""
+"UDP სოკეტის მისამართის %s პორტის %d პაკეტის ინფორმაციის მოთხოვნის შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:748
+msgid ""
+"System does not support pktinfo yet binding to a wildcard address. Packets "
+"are not guaranteed to return on the received address."
+msgstr ""
+"სისტემას pktinfo-ის ვაილდკარდ მისამართზე მიბმის მხარდაჭერა არ გააჩნია. "
+"გარანტია, რომ პაკეტები მიმღებ მისამართზე დაბრუნდება, არ არსებობს."
+
+#: ../../src/lib/apputils/net-server.c:760
+msgid "Error attempting to add verto event"
+msgstr "შეცდომა verto მოვლენის დამატების მცდელობისას"
+
+#: ../../src/lib/apputils/net-server.c:769
+#, c-format
+msgid "Cannot create RPC service: %s"
+msgstr "RPC სერვისის შექმნის შეცდომა: %s"
+
+#: ../../src/lib/apputils/net-server.c:779
+#, c-format
+msgid "Cannot register RPC service: %s"
+msgstr "RPC სერვისის რეგისტრაციის შეცდომა: %s"
+
+#: ../../src/lib/apputils/net-server.c:823
+msgid "No addresses added to the net server"
+msgstr "Net სერვერზე მისამართი არ დამატებულა"
+
+#: ../../src/lib/apputils/net-server.c:842
+#, c-format
+msgid "Failed getting address info (for %s): %s"
+msgstr "%s-სთვის მისამართის ინფორმაციის მიღების შეცდომა: %s"
+
+#: ../../src/lib/apputils/net-server.c:872
+#, c-format
+msgid "Failed setting up a %s socket (for %s)"
+msgstr "%s სოკეტის მორგებისას (%s-სთვის)"
+
+#: ../../src/lib/apputils/net-server.c:913
+msgid "setting up network..."
+msgstr "ქსელის მორგება..."
+
+#: ../../src/lib/apputils/net-server.c:916
+msgid "Error setting up network"
+msgstr "ქსელის მორგების შეცდომა"
+
+#: ../../src/lib/apputils/net-server.c:919
+#, c-format
+msgid "set up %d sockets"
+msgstr "მორგებულია %d სოკეტი"
+
+#: ../../src/lib/apputils/net-server.c:922
+msgid "no sockets set up?"
+msgstr "სოკეტები ჩართული არაა?"
+
+#: ../../src/lib/apputils/net-server.c:985
+#: ../../src/lib/apputils/net-server.c:1039
+msgid "while dispatching (udp)"
+msgstr "გაგზავნისას (udp)"
+
+#: ../../src/lib/apputils/net-server.c:1014
+#, c-format
+msgid "while sending reply to %s/%s from %s"
+msgstr "%s/%s -სთვის %s-დან პასუხის გაგზავნისას"
+
+#: ../../src/lib/apputils/net-server.c:1019
+#, c-format
+msgid "short reply write %d vs %d\n"
+msgstr "მოკლე პასუხის ჩაწერა %d-ი %d-ის წინააღმდეგ\n"
+
+#: ../../src/lib/apputils/net-server.c:1064
+msgid "while receiving from network"
+msgstr "ქსელიდან მიღებისას"
+
+#: ../../src/lib/apputils/net-server.c:1107
+msgid "too many connections"
+msgstr "მეტისმეტად ბევრი მიერთება"
+
+#: ../../src/lib/apputils/net-server.c:1125
+#, c-format
+msgid "dropping %s fd %d from %s"
+msgstr "%s fd-ის მოცილება %d-ი %s-დან"
+
+#: ../../src/lib/apputils/net-server.c:1195
+#, c-format
+msgid "allocating buffer for new TCP session from %s"
+msgstr "%s-დან მიღებული სესიისთვის ბუფერის გამოყოფა"
+
+#: ../../src/lib/apputils/net-server.c:1227
+msgid "while dispatching (tcp)"
+msgstr "გაგზავნისას (tcp)"
+
+#: ../../src/lib/apputils/net-server.c:1259
+msgid "error allocating tcp dispatch private!"
+msgstr "tcp გასაგზავნი პირის გამოყოფის შეცდომა!"
+
+#: ../../src/lib/apputils/net-server.c:1306
+#, c-format
+msgid "TCP client %s wants %lu bytes, cap is %lu"
+msgstr "TCP კლიენტს %s სურს %lu ბაიტი, ზღვარია %lu"
+
+#: ../../src/lib/apputils/net-server.c:1314
+#, c-format
+msgid "error constructing KRB_ERR_FIELD_TOOLONG error! %s"
+msgstr "შეცდომა KRB_ERR_FIELD_TOOLONG შეცდომის აწყოებისას! %s"
+
+#: ../../src/lib/apputils/net-server.c:1353
+#, c-format
+msgid "getsockname failed: %s"
+msgstr "getsockname -ის შეცდომა: %s"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:43
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:165
+msgid "A required input parameter could not be read"
+msgstr "აუცილებელი შეყვანის პარამეტრის წაკითხვა შეუძლებელია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:44
+msgid "A required input parameter could not be written"
+msgstr "აუცილებელი შეყვანის პარამეტრის ჩაწერა შეუძლებელია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:45
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:175
+msgid "A parameter was malformed"
+msgstr "პარამეტრი არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:48
+msgid "calling error"
+msgstr "გამოძახების შეცდომა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:59
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:195
+msgid "An unsupported mechanism was requested"
+msgstr "მოთხოვნილი მექანიზმი მხარდაუჭერელია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:60
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:199
+msgid "An invalid name was supplied"
+msgstr "მიწოდებული სახელი არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:61
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:203
+msgid "A supplied name was of an unsupported type"
+msgstr "მითითებული სახელის ტიპი მხარდაუჭერელია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:62
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:208
+msgid "Incorrect channel bindings were supplied"
+msgstr "მიწოდებული არხების მიბმა არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:63
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:179
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:274
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:334
+msgid "An invalid status code was supplied"
+msgstr "მიწოდებული სტატუსის კოდი არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:64
+msgid "A token had an invalid signature"
+msgstr "კოდის ხელმოწერა არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:65
+msgid "No credentials were supplied"
+msgstr "ავტორიზაციის დეტალები მიწოდებული არაა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:66
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:223
+msgid "No context has been established"
+msgstr "კონტექსტი აწყობილი არაა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:67
+msgid "A token was invalid"
+msgstr "კოდი არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:68
+msgid "A credential was invalid"
+msgstr "ავტორიზაციის დეტალები არასწორია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:69
+msgid "The referenced credentials have expired"
+msgstr "მიმართული ავტორიზაციის დეტალები ვადაგასულია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:70
+msgid "The context has expired"
+msgstr "კონტექსტი ვადაგასულია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:71
+msgid "Miscellaneous failure"
+msgstr "სხვადასხვა შეცდომა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:72
+msgid "The quality-of-protection requested could not be provided"
+msgstr "მოთხოვნილი quality-of-protection -ის მიწოდება შეუძლებელია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:73
+msgid "The operation is forbidden by the local security policy"
+msgstr "ოპერაცია ლოკალური უსაფრთხოების პოლიტიკის მიერაა აკრძალული"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:74
+msgid "The operation or option is not available"
+msgstr "ოპერაცია ან პარამეტრი ხელმისაწვდომი არაა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:77
+msgid "routine error"
+msgstr "ქვეპროგრამის შეცდომა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:89
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:311
+msgid "The routine must be called again to complete its function"
+msgstr "მისი ფუნქციის დასასრულებლად ქვეპროგრამა კიდევ ერთხელ უნდა გამოიძახოთ"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:90
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:316
+msgid "The token was a duplicate of an earlier token"
+msgstr "ეს კოდი ძველი კოდის ასლს წარმოადგენდა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:91
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:321
+msgid "The token's validity period has expired"
+msgstr "კოდის ვარგისიანობის ვადა ამოწურულია"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:92
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:325
+msgid "A later token has already been processed"
+msgstr "უფრო ახალი კოდი უკვე დამუშავდა"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:95
+msgid "supplementary info code"
+msgstr "დამატებითი ინფორმაციის კოდი"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:106
+#: ../lib/krb5/error_tables/krb5_err.c:23
+msgid "No error"
+msgstr "შეცდომის გარეშე"
+
+#: ../../src/lib/gssapi/generic/disp_major_status.c:107
+#, c-format
+msgid "Unknown %s (field = %d)"
+msgstr "უცნობი %s (ველი = %d)"
+
+#: ../../src/lib/gssapi/krb5/acquire_cred.c:148
+#, c-format
+msgid "No key table entry found matching %s"
+msgstr "%s-ის შესაბამისი გასაღების ცხრილის ჩანაწერი არ არსებობს"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:161
+msgid "The routine completed successfully"
+msgstr "ქვეპროგრამა წარმატებით დასრულდა"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:170
+msgid "A required output parameter could not be written"
+msgstr "გამოტანის აუცილებელი პარამეტრის ჩაწერა შეუძლებელია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:212
+msgid "A token had an invalid Message Integrity Check (MIC)"
+msgstr "კოდის *შეტყობინების მთლიანობის შემოწმება\" (MIC) არასწორია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:217
+msgid ""
+"No credentials were supplied, or the credentials were unavailable or "
+"inaccessible"
+msgstr "ავტორიზაციის დეტალები მიწოდებული არაა, ან ისინი მიუწვდომელია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:227
+msgid "Invalid token was supplied"
+msgstr "მიწოდებული კოდი არასწორია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:231
+msgid "Invalid credential was supplied"
+msgstr "მიწოდებული ავტორიზაციის დეტალები არასწორია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:235
+msgid "The referenced credential has expired"
+msgstr "მიმართვის ავტორიზაციის დეტალების ვადა ამოწურულია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:239
+msgid "The referenced context has expired"
+msgstr "მიმართვის კონტექსტის ვადა ამოწურულია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:243
+msgid "Unspecified GSS failure. Minor code may provide more information"
+msgstr ""
+"GSS-ის უცნობი შეცდომა. მცირე კოდს დამატებითი ინფორმაციის მოწოდება შეუძლია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:248
+msgid "The quality-of-protection (QOP) requested could not be provided"
+msgstr "მოთხოვნილი quality-of-protection -ის (QOP) მიწოდება შეუძლებელია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:253
+msgid "The operation is forbidden by local security policy"
+msgstr "ოპერაცია ლოკალური უსაფრთხოების პოლიტიკის მიერაა აკრძალული"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:258
+msgid "The operation or option is not available or unsupported"
+msgstr "ოპერაცია ან პარამეტრი ხელმიუწვდომელი ან მხარდაუჭერელია"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:263
+msgid "The requested credential element already exists"
+msgstr "ავტორიზაციის დეტალების ელემენტი უკვე არსებობს"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:268
+msgid "The provided name was not mechanism specific (MN)"
+msgstr "მოწოდებული სახელი მექანიზმზე მიბმული (MN) არაა"
+
+#: ../../src/lib/gssapi/mechglue/g_dsp_status.c:329
+msgid "An expected per-message token was not received"
+msgstr "თითოეული შეტყობინების მოსალოდნელი კოდი მიღებული არაა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1824
+msgid "SPNEGO cannot find mechanisms to negotiate"
+msgstr "SPNEGO -მა მოსალაპარაკებელი მექანიზმები ვერ იპოვა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1826
+msgid "SPNEGO failed to acquire creds"
+msgstr "SPNEGO ავტ.დეტალების მიღების შეცდომა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1828
+msgid "SPNEGO acceptor did not select a mechanism"
+msgstr "SPNEGO აქსეპტორმა მექანიზმი არ აირჩია"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1830
+msgid "SPNEGO failed to negotiate a mechanism"
+msgstr "SPNEGO -მა მექანიზმის შეთანხმება ვერ შეძლო"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1832
+msgid "SPNEGO acceptor did not return a valid token"
+msgstr "SPNEGO აქსეპტორმა სწორი კოდი არ დააბრუნა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1834
+msgid "Invalid NegoEx signature"
+msgstr "არასწორი NegoEx ხელმოწერია"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1836
+msgid "Invalid NegoEx message type"
+msgstr "არასწორი NegoEx შეტყობინების ტიპი"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1838
+msgid "Invalid NegoEx message size"
+msgstr "არასწორი NegoEx შეტყობინების ზომა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1840
+msgid "Invalid NegoEx conversation ID"
+msgstr "არასწორი NegoEx საუბრის ID"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1842
+msgid "NegoEx authentication scheme not found"
+msgstr "NegoEx -ის ავთენტიკაციის სქემა ნაპოვნი არაა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1844
+msgid "Missing NegoEx negotiate message"
+msgstr "NegoEx-ის მოლაპარაკების შეტყობინება ვერ ვიპოვე"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1846
+msgid "Missing NegoEx authentication protocol request message"
+msgstr "NegoEx -ის ავთენტიკაციის პროტოკოლის მოთხოვნის შეტყობინება ვერ ვიპოვე"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1848
+msgid "No mutually supported NegoEx authentication schemes"
+msgstr "ორმხრივად მხარდაჭერილი NegoEx-ის ავთენტიკაციის სქემების გარეშე"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1850
+msgid "No NegoEx verify key"
+msgstr "NegoEx -ის გასაღების გადამოწმების გარეშე"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1852
+msgid "Unknown NegoEx checksum scheme"
+msgstr "NegoEx -ის საკონტროლო ჯამის უცნობი სქემა"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1854
+msgid "Invalid NegoEx checksum"
+msgstr "NegoEx -ის საკონტროლო ჯამი არასწორია"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1856
+msgid "Unsupported critical NegoEx extension"
+msgstr "მხარდაუჭერელი კრიტიკული NegoEx -ის გაფართოება"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1858
+msgid "Unsupported NegoEx version"
+msgstr "NegoEx -ის მხარდაუჭერელი ვერსია"
+
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1860
+msgid "NegoEx message out of sequence"
+msgstr "NegoEx -ის შეტყობინება მიმდევრობის გარეთაა"
+
+#: ../../src/lib/kadm5/logger.c:54
+#, c-format
+msgid "%s: cannot parse <%s>\n"
+msgstr "%s: <%s>-ის დამუშავების შეცდომა\n"
+
+#: ../../src/lib/kadm5/logger.c:55
+#, c-format
+msgid "%s: warning - logging entry syntax error\n"
+msgstr "%s: გაფრთხილება - ჟურნალის ჩანაწერის სინტაქსის შეცდომა\n"
+
+#: ../../src/lib/kadm5/logger.c:56
+#, c-format
+msgid "%s: error writing to %s\n"
+msgstr "%s: %s-ში ჩაწერის შეცდომა\n"
+
+#: ../../src/lib/kadm5/logger.c:57
+#, c-format
+msgid "%s: error writing to %s device\n"
+msgstr "%s: შეცდომა %s მოწყობილობაში ჩაწერისას\n"
+
+#: ../../src/lib/kadm5/logger.c:59
+msgid "EMERGENCY"
+msgstr "გადაუდებელი"
+
+#: ../../src/lib/kadm5/logger.c:60
+msgid "ALERT"
+msgstr "განგაში"
+
+#: ../../src/lib/kadm5/logger.c:61
+msgid "CRITICAL"
+msgstr "კრიტიკული"
+
+#: ../../src/lib/kadm5/logger.c:62
+msgid "Error"
+msgstr "შეცდომა"
+
+#: ../../src/lib/kadm5/logger.c:63
+msgid "Warning"
+msgstr "ყურადღება"
+
+#: ../../src/lib/kadm5/logger.c:64
+msgid "Notice"
+msgstr "გაფრთხილება"
+
+#: ../../src/lib/kadm5/logger.c:65
+msgid "info"
+msgstr "ინფო"
+
+#: ../../src/lib/kadm5/logger.c:66
+msgid "debug"
+msgstr "გამართვა"
+
+#: ../../src/lib/kadm5/logger.c:784
+#, c-format
+msgid "Couldn't open log file %s: %s\n"
+msgstr "ჟურნალის ფაილის (%s) გახსნის შეცდომა: %s\n"
+
+#: ../../src/lib/kadm5/srv/kadm5_hook.c:120
+#, c-format
+msgid "kadm5_hook %s failed postcommit %s: %s"
+msgstr "kadm5_hook %s postcommit-ის შეცდომა %s: %s"
+
+#: ../../src/lib/kadm5/srv/pwqual_dict.c:106
+msgid "No dictionary file specified, continuing without one."
+msgstr "ლექსიკონის ფაილი მითითებული არაა. მის გარეშე გავაგრძელებ."
+
+#: ../../src/lib/kadm5/srv/pwqual_dict.c:113
+#, c-format
+msgid "WARNING! Cannot find dictionary file %s, continuing without one."
+msgstr "გაფრთხილება! ლექსიკონი %s ვერ ვიპოვე. მის გარეშე გავაგრძელებ."
+
+#: ../../src/lib/kadm5/srv/pwqual_empty.c:42
+msgid "Empty passwords are not allowed"
+msgstr "ცარიელი პაროლები დაუშვებელია"
+
+#: ../../src/lib/kadm5/srv/pwqual_hesiod.c:114
+msgid "Password may not match user information."
+msgstr "პაროლი არ შეიძლება მომხმარებლის ინფორმაციას ემთხვეოდეს."
+
+#: ../../src/lib/kadm5/srv/pwqual_princ.c:54
+msgid "Password may not match principal name"
+msgstr "პაროლი არ შეიძლება პრინციპალის სახელს შეიცავდეს"
+
+#: ../../src/lib/kadm5/srv/server_kdb.c:197
+msgid "History entry contains no key data"
+msgstr "ისტორიის ჩანაწერი გასაღების მონაცემებს არ შეიცავს"
+
+#: ../../src/lib/kadm5/srv/server_misc.c:128
+#, c-format
+msgid "password quality module %s rejected password for %s: %s"
+msgstr "პაროლის ხარისხის მოდულმა %s %s-ის პაროლი უარყო: %s"
+
+#: ../../src/lib/kdb/kdb5.c:216
+msgid "No default realm set; cannot initialize KDB"
+msgstr "ნაგულისხმები რეალმი დაყენებული არაა. KDB-ის ინიციალიზაციის შეცდომა"
+
+#: ../../src/lib/kdb/kdb5.c:370
+#, c-format
+msgid "Unable to find requested database type: %s"
+msgstr "მოთხოვნილი ბაზის ტიპის პოვნა შეუძლებელია: %s"
+
+#: ../../src/lib/kdb/kdb5.c:450 ../lib/krb5/error_tables/kdb5_err.c:55
+msgid "Unable to find requested database type"
+msgstr "მოთხოვნილი ბაზის ტიპის პოვნა შეუძლებელია"
+
+#: ../../src/lib/kdb/kdb5.c:458
+msgid "plugin symbol 'kdb_function_table' lookup failed"
+msgstr "დამატების სიმბოლოს 'kdb_function_table' -ის მოძებნის შეცდომა"
+
+#: ../../src/lib/kdb/kdb5.c:466
+#, c-format
+msgid ""
+"Unable to load requested database module '%s': plugin symbol "
+"'kdb_function_table' not found"
+msgstr ""
+"მოთხოვნილი ბაზის მოდულის '%s' ჩატვირთვის შეცდომა: დამატების სიმბოლო "
+"'kdb_function_table' ვერ ვიპოვე"
+
+#: ../../src/lib/kdb/kdb5.c:604
+msgid "Cannot initialize database library"
+msgstr "ბაზის ბიბლიოთეკის ინიციალიზაციის შეცდომა"
+
+#: ../../src/lib/kdb/kdb5.c:1770
+#, c-format
+msgid "Illegal version number for KRB5_TL_MKEY_AUX %d\n"
+msgstr "KRB5_TL_MKEY_AUX -ის ვერსიის არასწორი ნომერი %d\n"
+
+#: ../../src/lib/kdb/kdb5.c:1942
+#, c-format
+msgid "Illegal version number for KRB5_TL_ACTKVNO %d\n"
+msgstr "KRB5_TL_ACTKVNO -ის ვერსიის არასწორი ნომერი %d\n"
+
+#: ../../src/lib/kdb/kdb_default.c:137
+#, c-format
+msgid "keyfile (%s) is not a regular file: %s"
+msgstr "keyfile (%s) ჩვეულებრივი ფაილი არაა: %s"
+
+#: ../../src/lib/kdb/kdb_default.c:150
+msgid "Could not create temp keytab file name."
+msgstr "დროებითი keytab ფაილის სახელის შექმნის შეცდომა."
+
+#: ../../src/lib/kdb/kdb_default.c:175
+#, c-format
+msgid "Temporary stash file already exists: %s."
+msgstr "დროებითი Stash ფაილი უკვე არსებობს: %s."
+
+#: ../../src/lib/kdb/kdb_default.c:203
+#, c-format
+msgid "rename of temporary keyfile (%s) to (%s) failed: %s"
+msgstr "დროებითი keyfile-ის (%s)-ის სახელის (%s)-ზე გადარქმევის შეცდომა: %s"
+
+#: ../../src/lib/kdb/kdb_default.c:388
+#, c-format
+msgid "Can not fetch master key (error: %s)."
+msgstr "მთავარი გასაღების მოთხოვნის შეცდომა (შეცდომა: %s)"
+
+#: ../../src/lib/kdb/kdb_default.c:456
+msgid "Unable to decrypt latest master key with the provided master key\n"
+msgstr ""
+"მიწოდებული მთავარი გასაღებით უახლესი მთავარი გასაღების გაშიფვრა შეუძლებელია\n"
+
+#: ../../src/lib/kdb/kdb_log.c:87
+msgid "could not sync ulog update to disk"
+msgstr "ulog-ის განახლების დისკთან სინქრონიზაციის შეცდომა"
+
+#: ../../src/lib/kdb/kdb_log.c:101
+msgid "could not sync ulog header to disk"
+msgstr "ulog-ის თავსართის დისკთან სინქრონიზაციის შეცდომა"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:122
+#, c-format
+msgid "Subsidiary cache path %s has no parent directory"
+msgstr "შვილობილი ქეშის ბილიკს %s მშობელი საქაღალდე არ გააჩნია"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:128
+#, c-format
+msgid "Subsidiary cache path %s filename does not begin with \"tkt\""
+msgstr "შვილობილი ქეშის ბილიკის %s ფაილის სახელი \"tkt\"-ით არ იწყება"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:169
+#, c-format
+msgid "%s contains invalid filename"
+msgstr "%s არასწორ ფაილის სახელს შეიცავს"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:229
+#, c-format
+msgid "Credential cache directory %s does not exist"
+msgstr "ავტორიზაციის დეტალების ქეშის საქაღალდე %s არ არსებობს"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:235
+#, c-format
+msgid "Credential cache directory %s exists but is not a directory"
+msgstr ""
+"ავტორიზაციის დეტალების ქეშის საქაღალდე %s არსებობს, მაგრამ საქაღალდე არაა"
+
+#: ../../src/lib/krb5/ccache/cc_dir.c:400
+msgid ""
+"Can't create new subsidiary cache because default cache is not a directory "
+"collection"
+msgstr ""
+"ახალი შვილობილი ქეშის შექმნა შეუძლებელია იმიტომ, რომ ნაგულისხმები ქეში "
+"საქაღალდეების კოლექციას არ წარმოადგენს"
+
+#: ../../src/lib/krb5/ccache/cc_kcm.c:908
+#, c-format
+msgid "Credentials cache 'KCM:%s' not found"
+msgstr "ავტორიზაციის დეტალების ქეში 'KCM:%s' ვერ ვიპოვე"
+
+#: ../../src/lib/krb5/ccache/cc_keyring.c:1149
+msgid ""
+"Can't create new subsidiary cache because default cache is already a "
+"subsidiary"
+msgstr ""
+"ახალი შვილობილი ქეშის შექმნა შეუძლებელია იმიტომ, რომ ნაგულისხმები ქეში უკვე "
+"შვილობილია"
+
+#: ../../src/lib/krb5/ccache/cc_keyring.c:1217
+#, c-format
+msgid "Credentials cache keyring '%s' not found"
+msgstr "ავტორიზაციის დეტალების ბრელოკი '%s' არ არსებობს"
+
+#: ../../src/lib/krb5/ccache/cccursor.c:207
+#, c-format
+msgid "Can't find client principal %s in cache collection"
+msgstr "კლიენტის პრინციპალი %s ქეშის კოლექციაში არ არსებობს"
+
+#: ../../src/lib/krb5/ccache/cccursor.c:270
+msgid "No Kerberos credentials available"
+msgstr "Kerberos-ის ავტორიზაციის დეტალები ხელმიუწვდომელია"
+
+#: ../../src/lib/krb5/ccache/cccursor.c:276
+#, c-format
+msgid "No Kerberos credentials available (default cache: %s)"
+msgstr "Kerberos-ის ავტორიზაციის დეტალები მიუწვდომელია (ნაგულისხმები ქეში: %s)"
+
+#: ../../src/lib/krb5/keytab/kt_file.c:389
+#, c-format
+msgid "No key table entry found for %s"
+msgstr "გასაღებების ცხრილის ჩანაწერი %s-სთვის არ არსებობს"
+
+#: ../../src/lib/krb5/keytab/kt_file.c:537
+#: ../../src/lib/krb5/keytab/kt_file.c:570
+msgid "Cannot change keytab with keytab iterators active"
+msgstr "Keytab-ის შეცვლა, თუ keutab-ის იტერაცია ჩართულია, შეუძლებელია"
+
+#: ../../src/lib/krb5/keytab/kt_file.c:757
+#, c-format
+msgid "Key table file '%s' not found"
+msgstr "გასაღებების ცხრილის ფაილი \"%s\" არ არსებობს"
+
+#: ../../src/lib/krb5/keytab/ktfns.c:129
+#, c-format
+msgid "Keytab %s is nonexistent or empty"
+msgstr "Keytab %s არ არსებობს ან ცარიელია"
+
+#: ../../src/lib/krb5/krb/chpw.c:250
+msgid "Malformed request error"
+msgstr "არასწორი მოთხოვნის შეცდომა"
+
+#: ../../src/lib/krb5/krb/chpw.c:253 ../lib/krb5/error_tables/kdb5_err.c:58
+msgid "Server error"
+msgstr "სერვერის შეცდომა"
+
+#: ../../src/lib/krb5/krb/chpw.c:256
+msgid "Authentication error"
+msgstr "ავთენტიკაციის შეცდომა"
+
+#: ../../src/lib/krb5/krb/chpw.c:259
+msgid "Password change rejected"
+msgstr "პაროლის შეცვლა უარყოფილია"
+
+#: ../../src/lib/krb5/krb/chpw.c:262
+msgid "Access denied"
+msgstr "წვდომა აკრძალულია"
+
+#: ../../src/lib/krb5/krb/chpw.c:265
+msgid "Wrong protocol version"
+msgstr "არასწორი პროტოკოლის ვერსია"
+
+#: ../../src/lib/krb5/krb/chpw.c:268
+msgid "Initial password required"
+msgstr "საჭიროა საწყისი პაროლი"
+
+#: ../../src/lib/krb5/krb/chpw.c:271
+msgid "Success"
+msgstr "წარმატება"
+
+#: ../../src/lib/krb5/krb/chpw.c:274 ../lib/krb5/error_tables/krb5_err.c:257
+msgid "Password change failed"
+msgstr "პაროლის შეცვლის შეცდომა"
+
+#: ../../src/lib/krb5/krb/chpw.c:431
+msgid ""
+"The password must include numbers or symbols. Don't include any part of "
+"your name in the password."
+msgstr ""
+"პაროლი რიცხვები ან სიმბოლოებს აუცილებლად უნდა შეიცავდეს. თქვენს სახელს "
+"პაროლის ნურც ერთ ნაწილს ნუ მიაწერთ."
+
+#: ../../src/lib/krb5/krb/chpw.c:437
+#, c-format
+msgid "The password must contain at least %d character."
+msgid_plural "The password must contain at least %d characters."
+msgstr[0] "პაროლი მინიმუმ %d სიმბოლოს უნდა შეიცავდეს ."
+msgstr[1] "პაროლი მინიმუმ %d სიმბოლოს უნდა შეიცავდეს ."
+
+#: ../../src/lib/krb5/krb/chpw.c:446
+#, c-format
+msgid "The password must be different from the previous password."
+msgid_plural "The password must be different from the previous %d passwords."
+msgstr[0] "ახალი პაროლი წინასგან უნდა განსხვავდებოდეს."
+msgstr[1] "ახალი პაროლი წინა %d პაროლისგან უნდა განსხვავდებოდეს."
+
+#: ../../src/lib/krb5/krb/chpw.c:458
+#, c-format
+msgid "The password can only be changed once a day."
+msgid_plural "The password can only be changed every %d days."
+msgstr[0] "პაროლი მხოლოდ დღეში ერთხელ შეგიძლიათ შეცვალოთ."
+msgstr[1] "პაროლი მხოლოდ %d დღეში ერთხელ შეგიძლიათ შეცვალოთ."
+
+#: ../../src/lib/krb5/krb/chpw.c:504
+msgid "Try a more complex password, or contact your administrator."
+msgstr "სცადეთ უფრო რთული პაროლი ან დაუკავშირდით ადმინისტრატორს."
+
+#: ../../src/lib/krb5/krb/fast.c:216
+msgid "Error constructing AP-REQ armor"
+msgstr "შეცდომა AP-REQ აბჯრის აწყობისას"
+
+#: ../../src/lib/krb5/krb/fast.c:394
+msgid "Failed to decrypt FAST reply"
+msgstr "შეცდომა FAST პასუხის გაშიფვრისას"
+
+#: ../../src/lib/krb5/krb/fast.c:400
+msgid "nonce modified in FAST response: KDC response modified"
+msgstr "მითითებულ დროს შესწორება FAST პასუხში: KDC-ის პასუხი შეიცვალა"
+
+#: ../../src/lib/krb5/krb/fast.c:466
+msgid "Expecting FX_ERROR pa-data inside FAST container"
+msgstr "FAST კონტენერში FX_ERROR pa-data-ს მოველოდი"
+
+#: ../../src/lib/krb5/krb/fast.c:537
+msgid "FAST response missing finish message in KDC reply"
+msgstr "KDC-ის გამოხმაურებაში FAST პასუხს დასრულების შეტყობინება აკლია"
+
+#: ../../src/lib/krb5/krb/fast.c:550
+msgid "Ticket modified in KDC reply"
+msgstr "KDC-ის პასუხში ბილეთი შეიცვალა"
+
+#: ../../src/lib/krb5/krb/gc_via_tkt.c:198
+#, c-format
+msgid "KDC returned error string: %.*s"
+msgstr "KDC -ის მიერ დაბრუნებული შეცდომის სტრიქონი: %.*s"
+
+#: ../../src/lib/krb5/krb/gc_via_tkt.c:207
+#, c-format
+msgid "Server %s not found in Kerberos database"
+msgstr "სერვერი %s Kerberos-ის ბაზაში არ არსებობს"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:202
+msgid "Reply has wrong form of session key for anonymous request"
+msgstr "პასუხს ანონიმური მოთხოვნისთვის სესიის გასაღების არასწორი ფორმა გააჩნია"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1570
+#, c-format
+msgid "Warning: Your password will expire in less than one hour on %s"
+msgstr "გაფრთხილება: თქვენს პაროლს ვადა ერთ საათზე ნაკლებში, %s-ზე გაუვა"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1574
+#, c-format
+msgid "Warning: Your password will expire in %d hour%s on %s"
+msgstr "გაფრთხილება: თქვენს პაროლს ვადა %d საათში%s %s-ზე გაუვა"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1578
+#, c-format
+msgid "Warning: Your password will expire in %d days on %s"
+msgstr "გაფრთხილება: თქვენს პაროლს ვადა %d დღეში, %s-ზე გაუვა"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1600
+msgid ""
+"Warning: encryption type des3-cbc-sha1 used for authentication is weak and "
+"will be disabled"
+msgstr ""
+"გაფრთხილება: ავთენტიკაციისთვის გამოყენებული დაშიფვრის ტიპი des3-cbc-sha1 "
+"სუსტია და გაითიშება"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1844
+msgid "Failed to store credentials"
+msgstr "ავტორიზაციის დეტალების დამახსოვრების შეცდომა"
+
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1939
+#, c-format
+msgid "Client '%s' not found in Kerberos database"
+msgstr "კლიენტი '%s' Kerberos-ის ბაზაში ვერ ვიპოვე"
+
+#: ../../src/lib/krb5/krb/gic_keytab.c:225
+#, c-format
+msgid "Keytab contains no suitable keys for %s"
+msgstr "Keytab-ი %s-სთვის შესაბამის გასაღებებს არ შეიცავს"
+
+#: ../../src/lib/krb5/krb/gic_pwd.c:75
+#, c-format
+msgid "Password for %s"
+msgstr "პაროლი \"%s\" -სთვის"
+
+#: ../../src/lib/krb5/krb/gic_pwd.c:301
+msgid "Password expired. You must change it now."
+msgstr "პაროლის ვადა ამოიწურა. ის ახლავე უნდა შეცვალოთ."
+
+#: ../../src/lib/krb5/krb/gic_pwd.c:320 ../../src/lib/krb5/krb/gic_pwd.c:324
+#, c-format
+msgid "%s. Please try again."
+msgstr "%s. თავიდან სცადეთ."
+
+#: ../../src/lib/krb5/krb/gic_pwd.c:365
+#, c-format
+msgid "%.*s%s%s. Please try again.\n"
+msgstr "%.*s%s%s. თავიდან სცადეთ.\n"
+
+#: ../../src/lib/krb5/krb/parse.c:202
+#, c-format
+msgid "Principal %s is missing required realm"
+msgstr "პრინციპალს %s აუცილებელი რეალმი არ გააჩნია"
+
+#: ../../src/lib/krb5/krb/parse.c:214
+#, c-format
+msgid "Principal %s has realm present"
+msgstr "პრინციპალს %s რეალმი გააჩნია"
+
+#: ../../src/lib/krb5/krb/plugin.c:169
+#, c-format
+msgid "Invalid module specifier %s"
+msgstr "მოდულის არასწორი მიმთითებელი %s"
+
+#: ../../src/lib/krb5/krb/plugin.c:416
+#, c-format
+msgid "Could not find %s plugin module named '%s'"
+msgstr "%s დამატების მოდული, სახელით '%s' ვერ ვიპოვე"
+
+#: ../../src/lib/krb5/krb/preauth2.c:309
+msgid "krb5_init_creds calls must use same library context"
+msgstr ""
+"krb5_init_creds -ის გამოძახებებმა იგივე ბიბლიოთეკის კონტექსტი უნდა გამოიყენონ"
+
+#: ../../src/lib/krb5/krb/preauth2.c:717
+msgid "Pre-authentication failed"
+msgstr "პრე-ავთენტიკაციის შეცდომა"
+
+#: ../../src/lib/krb5/krb/preauth2.c:1046
+msgid "Unable to initialize preauth context"
+msgstr "პრეავთენტიკაციის კონტექსტის ინციალიზაციის შეცდომა"
+
+#: ../../src/lib/krb5/krb/preauth2.c:1059
+#, c-format
+msgid "Preauth module %s"
+msgstr "Preauth მოდული %s"
+
+#: ../../src/lib/krb5/krb/preauth_encts.c:71
+msgid "Encrypted timestamp is disabled"
+msgstr "დაშიფრული დროის შტამპი გათიშულია"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:514
+msgid "Please choose from the following:\n"
+msgstr "აირჩიეთ შემდეგი სიიდან:\n"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:516
+msgid "Vendor:"
+msgstr "მომწოდებელი:"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:525
+msgid "Enter #"
+msgstr "შეიყვანეთ #"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:561
+msgid "OTP Challenge:"
+msgstr "OTP გამოწვევა:"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:590
+msgid "OTP Token PIN"
+msgstr "OTP კოდის PIN"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:704
+msgid "OTP value doesn't match any token formats"
+msgstr "OTP-ის მნიშვნელობა კოდის არც ერთ ფორმატს არ ემთხვევა"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:771
+msgid "Enter OTP Token Value"
+msgstr "შეიყვანეთ OTP კოდის მნიშვნელობა"
+
+#: ../../src/lib/krb5/krb/preauth_otp.c:917
+msgid "No supported tokens"
+msgstr "მხარდაჭერილი კოდების გარეშე"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:49
+msgid "Challenge for Enigma Logic mechanism"
+msgstr "გამოწვევა Enigma Logic მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:53
+msgid "Challenge for Digital Pathways mechanism"
+msgstr "გამოწვევა Digital Pathways მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:57
+msgid "Challenge for Activcard mechanism"
+msgstr "გამოწვევა Activcard მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:60
+msgid "Challenge for Enhanced S/Key mechanism"
+msgstr "გამოწვევა გაფართოებული S/Key მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:63
+msgid "Challenge for Traditional S/Key mechanism"
+msgstr "გამოწვევა ტრადიციული S/Key მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:66
+#: ../../src/lib/krb5/krb/preauth_sam2.c:69
+msgid "Challenge for Security Dynamics mechanism"
+msgstr "გამოწვევა Security Dynamics მექანიზმისთვის"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:72
+msgid "Challenge from authentication server"
+msgstr "გამოწვევა ავთენტიკაციის სერვერიდან"
+
+#: ../../src/lib/krb5/krb/preauth_sam2.c:164
+msgid "SAM Authentication"
+msgstr "SAM ავთენტიკაცია"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:146
+#, c-format
+msgid "Cannot find key for %s kvno %d in keytab"
+msgstr "შეცდომა გასაღების მოძებნისას %s kvno %d Keytab-ში"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:151
+#, c-format
+msgid "Cannot find key for %s kvno %d in keytab (request ticket server %s)"
+msgstr ""
+"Keytab-ში %s kvno %d-სთვის გასაღები ვერ ვიპოვე (მოთხოვნის ბილეთის სერვერი %s)"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:176
+#, c-format
+msgid "Cannot decrypt ticket for %s using keytab key for %s"
+msgstr ""
+"%s-სთვის ბილეთის გაშიფვრა keytab-ის %s-სთვის განკუთვნილი გასაღებით "
+"შეუძლებელია"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:198
+#, c-format
+msgid "Server principal %s does not match request ticket server %s"
+msgstr "სერვერის პრინციპალი %s ბილეთების სერვერს %s არ ემთხვევა"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:227
+msgid "No keys in keytab"
+msgstr "Keytab-ში გასაღებები არაა"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:230
+#, c-format
+msgid "Server principal %s does not match any keys in keytab"
+msgstr "სერვერის პრინციპალი %s keytab-ის არც ერთ გასაღებს არ ემთხვევა"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:237
+#, c-format
+msgid ""
+"Request ticket server %s found in keytab but does not match server principal "
+"%s"
+msgstr ""
+"მოთხოვნის ბილეთის სერვერი %s keytab-ში არსებობს, მაგრამ სერვერის პრინციპალს "
+"%s არ ემთხვევა"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:242
+#, c-format
+msgid "Request ticket server %s not found in keytab (ticket kvno %d)"
+msgstr "მოთხოვნილი ბილეთის სერვერი %s keytab-ში ვერ ვიპოვე (ბილეთის kvno %d)"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:248
+#, c-format
+msgid ""
+"Request ticket server %s kvno %d not found in keytab; ticket is likely out "
+"of date"
+msgstr ""
+"მოთხოვნის ბილეთის სერვერი %s kvno %d keytab-ში ვერ ვიპოვე. ბილეთი, როგორც "
+"ჩანს, ვადაგასულია"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:253
+#, c-format
+msgid ""
+"Request ticket server %s kvno %d not found in keytab; keytab is likely out "
+"of date"
+msgstr ""
+"მოთხოვნის ბილეთის სერვერი %s kvno %d keytab-ში ვერ ვიპოვე. keytab-ი, როგორც "
+"ჩანს, ვადაგასულია"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:262
+#, c-format
+msgid ""
+"Request ticket server %s kvno %d found in keytab but not with enctype %s"
+msgstr ""
+"მოთხოვნილი ბილეთის სერვერი %s kvno %d keytab-ში ვიპოვე, მაგრამ მისი enctype "
+"%s არაა"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:267
+#, c-format
+msgid ""
+"Request ticket server %s kvno %d enctype %s found in keytab but cannot "
+"decrypt ticket"
+msgstr ""
+"მოთხოვნის ბილეთის სერვერი %s kvno %d enctype %s keytab-ში ვიპოვე, მაგრამ "
+"ბილეთის გაშიფვრა შეუძლებელია"
+
+#: ../../src/lib/krb5/krb/rd_req_dec.c:884
+#, c-format
+msgid "Encryption type %s not permitted"
+msgstr "დაშიფვრის ტიპი %s დაუშვებელია"
+
+#: ../../src/lib/krb5/krb/s4u_creds.c:1043
+msgid "Realm specified but S4U2Proxy must use referral realm"
+msgstr ""
+"რეალმი მითითებულია, მაგრამ S4U2Proxy -მა მიმართული რეალმი უნდა გამოიყენოს"
+
+#: ../../src/lib/krb5/os/expand_path.c:316
+#, c-format
+msgid "Can't find username for uid %lu"
+msgstr "მომხმარებლის სახელის პოვნა uid %lu-სთვის შეუძლებელია"
+
+#: ../../src/lib/krb5/os/expand_path.c:405
+#: ../../src/lib/krb5/os/expand_path.c:421
+msgid "Invalid token"
+msgstr "არასწორი კოდი"
+
+#: ../../src/lib/krb5/os/expand_path.c:506
+msgid "variable missing }"
+msgstr "ცვლადს აკლია }"
+
+#: ../../src/lib/krb5/os/locate_kdc.c:818
+#, c-format
+msgid "Cannot find KDC for realm \"%.*s\""
+msgstr "შეცდომა KDC -ის ძებნისას რეალმისთვის \"%.*s\""
+
+#: ../../src/lib/krb5/os/sendto_kdc.c:519
+#, c-format
+msgid "Cannot contact any KDC for realm '%.*s'"
+msgstr "შეცდომა ყველა KDC-სთან მიერთებისას რეალმისთვის '%.*s'"
+
+#: ../../src/plugins/kdb/db2/kdb_db2.c:245
+#: ../../src/plugins/kdb/db2/kdb_db2.c:819
+#, c-format
+msgid "Unsupported argument \"%s\" for db2"
+msgstr "DB2-ის მხარდაუჭერელი არგუმენტი \"%s\""
+
+#: ../../src/plugins/kdb/db2/kdb_db2.c:387
+#, c-format
+msgid "Cannot open DB2 database '%s'"
+msgstr "შეცდომა DB2-ის ბაზის '%s' გახსნისას"
+
+#: ../../src/plugins/kdb/db2/kdb_db2.c:989
+msgid "Recursive iteration is not supported for hash databases"
+msgstr "ჰეშ-ბაზებისთვის რეკურსიული იტერაცია მხარდაუჭერელია"
+
+#: ../../src/plugins/kdb/db2/kdb_db2.c:996
+msgid "Recursive iteration not supported in this version of libdb"
+msgstr "Libdb-ის ამ ვერსიაში რეკურსიული იტერაცია მხარდაჭერილი არაა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:69
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:859
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1060
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1467
+msgid "while reading kerberos container information"
+msgstr "kerberos-ის კონტეინერის ინფორმაციის წაკითხვსას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:129
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:143
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:504
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:518
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:150
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:165
+msgid "while providing time specification"
+msgstr "დროის სპეციფიკაციის მიწოდებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:268
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:304
+msgid "while creating policy object"
+msgstr "პოლიტიკის ობიექტის შექმნისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:279
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1475
+msgid "while reading realm information"
+msgstr "რეალმის ინფორმაციის წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:348
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:407
+msgid "while destroying policy object"
+msgstr "პოლიტიკის ობიექტის განადგურებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:358
+#, c-format
+msgid "This will delete the policy object '%s', are you sure?\n"
+msgstr "ეს წაშლის პოლიტიკის ობიექტს '%s'. დარწმუნებული ბრძანდებით?\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:473
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:663
+msgid "while modifying policy object"
+msgstr "პოლიტიკის ობიექტის შეცვლისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:487
+#, c-format
+msgid "while reading information of policy '%s'"
+msgstr "პოლიტიკის \"%s\" ინფორმაციის წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:692
+msgid "while viewing policy"
+msgstr "პოლიტიკის დათვალიერებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:701
+#, c-format
+msgid "while viewing policy '%s'"
+msgstr "პოლიტიკის ('%s') დათვალიერებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:835
+msgid "while listing policy objects"
+msgstr "პოლიტიკის ობიექტების ჩამოთვლიას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:419
+#, c-format
+msgid "for subtree while creating realm '%s'"
+msgstr "ქვეხისთვის რეალმის '%s' შექმნისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:431
+#, c-format
+msgid "for container reference while creating realm '%s'"
+msgstr "კონტეინერის მიმართვისთვის რეალმის ('%s') შექმნისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:456
+#, c-format
+msgid "invalid search scope while creating realm '%s'"
+msgstr "ძებნის არასწორი დიაპაზონი რეალმის '%s' შექმნისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:471
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:795
+#, c-format
+msgid "'%s' is an invalid option\n"
+msgstr "'%s' არასწორი პარამეტრია \n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:479
+#, c-format
+msgid "Initializing database for realm '%s'\n"
+msgstr "ბაზის ინიციალიზაცია რეალმისთვის '%s'\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:503
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:664
+#, c-format
+msgid "while creating realm '%s'"
+msgstr "რეალმის \"%s\" შექმნისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:523
+#, c-format
+msgid "Enter DN of Kerberos container: "
+msgstr "შეიყვანეთ Kerberos-ის კონტეინერის DN: "
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:558
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:866
+#, c-format
+msgid "while reading information of realm '%s'"
+msgstr "რეალმის '%s' ინფორმაციის წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:702
+msgid "while reading Kerberos container information"
+msgstr "kerberos-ის კონტეინერის ინფორმაციის წაკითხვსას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:745
+#, c-format
+msgid "for subtree while modifying realm '%s'"
+msgstr "ქვეხისთვის რეალმის '%s' ცვლილებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:756
+#, c-format
+msgid "for container reference while modifying realm '%s'"
+msgstr "კონტეინერის მიმართვისთვის რეალმის ('%s') ცვლილებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:784
+#, c-format
+msgid "specified for search scope while modifying information of realm '%s'"
+msgstr "მითითებულია ძებნის დიაპაზონისთვის რეალმის '%s' ინფორმაციის შეცვლისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:823
+#, c-format
+msgid "while modifying information of realm '%s'"
+msgstr "რეალმის '%s' ინფორმაციის შეცვლისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:912
+msgid "Realm Name"
+msgstr "რეალმის სახელი"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:915
+msgid "Subtree"
+msgstr "ქვეხე"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:918
+msgid "Principal Container Reference"
+msgstr "პრინციპალის კონტეინერის მიმართვა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:923
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:925
+msgid "SearchScope"
+msgstr "ძებნისდიაპაზონი"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:923
+msgid "Invalid !"
+msgstr "არასწორია !"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:930
+msgid "KDC Services"
+msgstr "KDC სერვისები"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:945
+msgid "Admin Services"
+msgstr "ადმინის სერვისები"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:960
+msgid "Passwd Services"
+msgstr "Passwd -ის სერვისები"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:976
+msgid "Maximum Ticket Life"
+msgstr "ბილეთის მაქსიმალური სიცოცხლე"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:981
+msgid "Maximum Renewable Life"
+msgstr "მაქსიმალური განახლებადი სიცოცხლე"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:988
+msgid "Ticket flags"
+msgstr "ბილეთის ალმები"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1067
+msgid "while listing realms"
+msgstr "რეალმების სიის გამოტანისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1399
+msgid "while adding entries to database"
+msgstr "ბაზაში ჩანაწერების დამატებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1440
+#, c-format
+msgid "Deleting KDC database of '%s', are you sure?\n"
+msgstr "წაიშლება '%s'-ის KDC-ის ბაზა. დარწმუნებული ბრძანდებით?\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1451
+#, c-format
+msgid "OK, deleting database of '%s'...\n"
+msgstr "კარგი, მიმდინარეობს ბაზის წაშლა '%s'...\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1484
+#, c-format
+msgid "deleting database of '%s'"
+msgstr "%s-ის ბაზის წაშლა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1489
+#, c-format
+msgid "** Database of '%s' destroyed.\n"
+msgstr "** ბაზა '%s' განადგურდა.\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:79
+msgid "ldap_service_password_file not configured"
+msgstr "ldap_service_password_file მორგებული არაა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:124
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:131
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:141
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:169
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:239
+msgid "while setting service object password"
+msgstr "სერვისის ობიექტის პაროლის დაყენებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:148
+msgid "while getting service password filename"
+msgstr "სერვისის პაროლის ფაილის სახელის მიღებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:161
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:481
+#, c-format
+msgid "Password for \"%s\""
+msgstr "პაროლი \"%s\" -სთვის"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:164
+#, c-format
+msgid "Re-enter password for \"%s\""
+msgstr "ხელახლა შეიყვანეთ ახალი პაროლი \"%s\"-სთვის"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:175
+#, c-format
+msgid "%s: Invalid password\n"
+msgstr "%s: არასწორი პაროლი\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:185
+msgid "Failed to convert the password to hexadecimal"
+msgstr "პაროლის თექვსმეტობითში გადაყვანის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:195
+#, c-format
+msgid "Failed to open file %s: %s"
+msgstr "ფაილის (%s) გახსნა შეუძლებელია: %s"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:217
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:259
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:268
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:295
+msgid "Failed to write service object password to file"
+msgstr "სერვისის ობიექტის პაროლის ფაილში ჩაწერის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:223
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:280
+msgid "Error reading service object password file"
+msgstr "შეცდომა სერვისის ობიეტქის პაროლის ფაილის წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_services.c:248
+#, c-format
+msgid "Error creating file %s"
+msgstr "ფაილის შექმნის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:105
+#, c-format
+msgid ""
+"Usage: kdb5_ldap_util [-D user_dn [-w passwd]] [-H ldapuri] [-r realm]\n"
+"\tcmd [cmd_options]\n"
+"create [-subtrees subtree_dn_list] [-sscope search_scope]\n"
+"\t\t[-containerref container_reference_dn]\n"
+"\t\t[-m|-P password|-sf stashfilename] [-s]\n"
+"\t\t[-k mkeytype] [-kv mkeyVNO] [-M mkeyname]\n"
+"\t\t[-maxtktlife max_ticket_life]\n"
+"\t\t[-maxrenewlife max_renewable_ticket_life] [ticket_flags]\n"
+"modify [-subtrees subtree_dn_list] [-sscope search_scope]\n"
+"\t\t[-containerref container_reference_dn]\n"
+"\t\t[-maxtktlife max_ticket_life]\n"
+"\t\t[-maxrenewlife max_renewable_ticket_life] [ticket_flags]\n"
+"view\n"
+"destroy [-f]\n"
+"list\n"
+"stashsrvpw [-f filename] service_dn\n"
+"create_policy [-maxtktlife max_ticket_life]\n"
+"\t\t[-maxrenewlife max_renewable_ticket_life] [ticket_flags] policy\n"
+"modify_policy [-maxtktlife max_ticket_life]\n"
+"\t\t[-maxrenewlife max_renewable_ticket_life] [ticket_flags] policy\n"
+"view_policy policy\n"
+"destroy_policy [-force] policy\n"
+"list_policy\n"
+msgstr ""
+"გამოყენება: kdb5_ldap_util [-D მომხმარებლის_dn [-w პაროლი]] [-H ldapuri] [-r "
+"რეალმი]\n"
+"\tბრძანება [ბრძანებისპარამეტრები]\n"
+"create [-subtrees ქვეხის_dn_ის_სია\t] [-sscope ძებნის_დიაპაზონი]\n"
+"\t\t[-containerref კონტეინერის_მიმართვის_dn]\n"
+"\t\t[-m|-P პაროლი|-sf stash_ფაილისსახელი] [-s]\n"
+"\t\t[-k mkeytype] [-kv mkeyVNO] [-M mგასაღებისსახელი]\n"
+"\t\t[-maxtktlife ბილეთის_მაქს_სიცოცხლის_ხანგრძლ]\n"
+"\t\t[-maxrenewlife ბილეთის_მაქს_განახლებადი_სიცოცხლის_ხანგრძლ] "
+"[ბილეთის_ალმები]\n"
+"modify [-subtrees ქვეხის_dn_ის_სია] [-sscope ძებნის_დიაპაზონი]\n"
+"\t\t[-containerref კონტეინერის_მიმართვის_dn]\n"
+"\t\t[-maxtktlife ბილეთის_მაქს_სიცოცხლის_ხანგრძლ]\n"
+"\t\t[-maxrenewlife ბილეთის_მაქს_განახლებადი_სიცოცხლის_ხანგრძლ] "
+"[ბილეთის_ალმები]\n"
+"view\n"
+"destroy [-f]\n"
+"list\n"
+"stashsrvpw [-f ფაილისსახელი] სერვისის_dn\n"
+"create_policy [-maxtktlife ბილეთის_მაქს_სიცოცხლის_ხანგრძლ]\n"
+"\t\t[-maxrenewlife ბილეთის_მაქს_განახლებადი_სიცოცხლის_ხანგრძლ] "
+"[ბილეთის_ალმები] პოლიტიკა\n"
+"modify_policy [-maxtktlife ბილეთის_მაქს_სიცოცხლის_ხანგრძლ]\n"
+"\t\t[-maxrenewlife ბილეთის_მაქს_განახლებადი_სიცოცხლის_ხანგრძლ] "
+"[ბილეთის_ალმები] პოლიტიკა\n"
+"view_policy პოლიტიკა\n"
+"destroy_policy [-force] პოლიტიკა\n"
+"list_policy\n"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:329
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:337
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:345
+msgid "while reading ldap parameters"
+msgstr "ldap-ის პარამეტრების წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:443
+msgid "while initializing error handling"
+msgstr "შეცდომების დამუშავებლის ინიციალიზაციისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:451
+msgid "while initializing ldap handle"
+msgstr "ldap-ის დამმუშავებლის ინიციალიზაციისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:465
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:474
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:487
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:529
+msgid "while retrieving ldap configuration"
+msgstr "ldap-ის კონფიგურაციის მიღებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:504
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:511
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:520
+msgid "while initializing server list"
+msgstr "სერვერების სიის ინიციალიზაციისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:551
+msgid "while setting up lib handle"
+msgstr "ბიბლიოთეკის დამმუშავებლის მორგებისას"
+
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:560
+msgid "while reading ldap configuration"
+msgstr "ldap-ის კონფიგურაციის წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c:68
+msgid "Unable to read Kerberos container"
+msgstr "Kerberos-ის კონტეინერის წაკითხვის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c:73
+msgid "Unable to read Realm"
+msgstr "რეალმის წაკითხვის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c:214
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_create.c:71
+msgid "Error processing LDAP DB params"
+msgstr "შეცდომა LDAP DB-ის პარამეტრების დამუშავებისას"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c:220
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_create.c:77
+msgid "Error reading LDAP server params"
+msgstr "შეცდომა LDAP სერვერის პარამეტრების წაკითხვისას"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:64
+msgid "LDAP bind dn value missing"
+msgstr "LDAP-ის მისამაგრებელი DN-ის მნიშვნელობა მითითებული არაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:69
+msgid "LDAP bind password value missing"
+msgstr "LDAP-ის მისამაგრებელი პაროლის მნიშვნელობა მითითებული არაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:78
+msgid "Error reading password from stash"
+msgstr "Stash ფაილიდან პაროლის წაიკითხვის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:85
+msgid "Service password length is zero"
+msgstr "სერვისის პაროლის სიგრძე ნულოვანია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:145
+#, c-format
+msgid "Cannot bind to LDAP server '%s' with SASL mechanism '%s': %s"
+msgstr "LDAP სერვერთან '%s' SASL მექანიზმით '%s' მიბმის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:158
+#, c-format
+msgid "Cannot bind to LDAP server '%s' as '%s': %s"
+msgstr "შეცდომა LDAP სერვერთან '%s' მიბმისას, როგორც '%s': %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c:183
+#, c-format
+msgid "Cannot create LDAP handle for '%s': %s"
+msgstr "'%s'-სთვის LDAP დამმუშავებლის შექმნის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_krbcontainer.c:56
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_krbcontainer.c:67
+msgid "Error reading kerberos container location from krb5.conf"
+msgstr "Krb5.conf-დან Kerbreros-ის კონტეინერის მდებარეობის წაკითხვის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_krbcontainer.c:75
+msgid "Kerberos container location not specified"
+msgstr "Kerberos-ის კონტეინერის მდებარეობა მითითებული არაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c:56
+#, c-format
+msgid "Error reading '%s' attribute: %s"
+msgstr "შეცდომა %s ატრიბუტის წაკითხვისას: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c:219
+msgid "KDB module requires -update argument"
+msgstr "KDB მოდულისთვის -update არგუმენტი აუცილებელია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c:225
+#, c-format
+msgid "'%s' value missing"
+msgstr "'%s' მნიშვნელობა აკლია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c:283
+#, c-format
+msgid "unknown option '%s'"
+msgstr "უცნობი პარამეტრი '%s'"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c:343
+msgid "Minimum connections required per server is 2"
+msgstr "თითოეულ სერვერთან მიერთების მინიმალური რაოდენობა ორის ტოლია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c:160
+msgid "Default realm not set"
+msgstr "ნაგულისხმები რეალმი დაყენებული არაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c:264
+msgid "DN information missing"
+msgstr "DN ინფორმაცია აკლია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c:476
+msgid "dn information missing"
+msgstr "dn ინფორმაცია აკლია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:137
+msgid "Principal does not belong to realm"
+msgstr "პრინციპალი რეალმს არ ეკუთვნის"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:305
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:314
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:322
+#, c-format
+msgid "%s option not supported"
+msgstr "%s პარამეტრი მხარდაუჭერელია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:329
+#, c-format
+msgid "unknown option: %s"
+msgstr "უცნობი პარამეტრი: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:336
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:343
+#, c-format
+msgid "%s option value missing"
+msgstr "%s პარამეტრის მნიშვნელობა მითითებული არაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:676
+msgid "DN is out of the realm subtree"
+msgstr "DN რეალმის ქვეხის გარეთაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:708
+msgid "ldap object is already kerberized"
+msgstr "ldap ობიექტი უკვე kerberos-ის მართვის ქვეშაა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:803
+msgid "Principal does not belong to the default realm"
+msgstr "პრინციპალი ნაგულისხმებ რეალმს არ ეკუთვნის"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:869
+#, c-format
+msgid ""
+"operation can not continue, more than one entry with principal name \"%s\" "
+"found"
+msgstr ""
+"ოპერაციის გაგრძელება შეუძლებელია. ნაპოვნია პრინციპალის სახელის \"%s\" მქონე "
+"ერთზე მეტი ჩანაწერი"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:928
+#, c-format
+msgid "'%s' not found"
+msgstr "'%s' არ არსებობს"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:992
+#, c-format
+msgid ""
+"link information can not be set/updated as the kerberos principal belongs to "
+"an ldap object"
+msgstr ""
+"ბმულის ინფორმაციის დაყენება/განახლება შეუძლებელია, რადგან kerberos-ის "
+"პრინციპალი ldap ობიექტს ეკუთვნის"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1007
+#, c-format
+msgid "Failed getting object references"
+msgstr "ობიექტის მიმართვის მიღების შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1014
+#, c-format
+msgid "kerberos principal is already linked to a ldap object"
+msgstr "kerberos-ის პრინციპალი ldap ობიექტზე უკვე მიბმულია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1340
+msgid "ticket policy object value: "
+msgstr "ბილეტის პოლიტიკის ობიექტის მნიშვნელობა: "
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1388
+#, c-format
+msgid "Principal delete failed (trying to replace entry): %s"
+msgstr "პრინციპალის წაშლის შეცდომა (ჩანაწერის ჩანაცვლებისას): %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1398
+#, c-format
+msgid "Principal add failed: %s"
+msgstr "პრინციპალის დამატების შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1436
+#, c-format
+msgid "User modification failed: %s"
+msgstr "მომხმარებლის ცვლილების შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1510
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:294
+msgid "Error reading ticket policy"
+msgstr "ბილეტის პოლიტიკის წაკითხვის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1640
+msgid "unable to decode stored principal key data"
+msgstr "დამახსოვრებული პრინციპალის გასაღების მონაცემების გაშიფვრის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c:1698
+msgid "unable to decode stored principal pw history"
+msgstr "დამახსოვრებული პრინციპალის პაროლის ისტორიის გაშიფვრის შეცდომა"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:223
+msgid "Realm information not available"
+msgstr "რეალმის ინფორმაცია მიუწვდომელია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:306
+#, c-format
+msgid "Realm Delete FAILED: %s"
+msgstr "რეალმის წაშლის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:386
+msgid "subtree value: "
+msgstr "ქვეხის მნიშვნელობა: "
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:403
+msgid "container reference value: "
+msgstr "შემცველობის მითითების მნიშვნელობა: "
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:486
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:549
+msgid "Kerberos Container information is missing"
+msgstr "Kerberos -ის კონტეიერის ინფორმაცია არ არსებობს"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:498
+msgid "Invalid Kerberos container DN"
+msgstr "არასწორი Kerberos-ის შემცველი DN"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:514
+#, c-format
+msgid "Kerberos Container create FAILED: %s"
+msgstr "Kerberos-ის კონტეინერის შექმნის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:557
+#, c-format
+msgid "Kerberos Container delete FAILED: %s"
+msgstr "Kerberos-ის კონტეინერის წაშლის შეცდომა: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c:633
+msgid "realm object value: "
+msgstr "რეალმის ობიექტის მნიშვნელობა: "
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_service_stash.c:48
+msgid "Not a hexadecimal password"
+msgstr "თექვსმეტობით პაროლს არ წარმოადგენს"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_service_stash.c:55
+msgid "Password corrupt"
+msgstr "პაროლი დაზიანებულია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_service_stash.c:78
+#, c-format
+msgid "Cannot open LDAP password file '%s': %s"
+msgstr "შეცდომა LDAP-ის პაროლის ფაილის ('%s') გახსნისას: %s"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_service_stash.c:108
+#, c-format
+msgid "Bind DN entry '%s' missing in LDAP password file '%s'"
+msgstr "მისაბმელი DN-ის ჩანაწერი '%s' LDAP პაროლებს ფაილში '%s' ვერ ვიპოვე"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:66
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:142
+msgid "Ticket Policy Name missing"
+msgstr "აკლია ბილეთის პოლიტიკის სახელი"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:154
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:231
+msgid "ticket policy object: "
+msgstr "ბილეთის პოლიტიკის ობიექტი: "
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:219
+msgid "Ticket Policy Object information missing"
+msgstr "აკლია ბილეთის პოლიტიკის ობიექტის ინფორმაცია"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:311
+msgid "Ticket Policy Object DN missing"
+msgstr "აკლია ბილეთის პოლიტიკის ობიექტის DN"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:338
+msgid "Delete Failed: One or more Principals associated with the Ticket Policy"
+msgstr ""
+"წაშლის შეცდომა: ბილეთის პოლიტიკასთან ერთი ან მეტი პრინციპალია ასოცირებული"
+
+#: ../../src/plugins/kdb/ldap/libkdb_ldap/ldap_tkt_policy.c:447
+msgid "Error reading container object"
+msgstr "შემცველი ობიექტის გახსნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:132
+#, c-format
+msgid "%s (path: %s): %s"
+msgstr "%s (ბილიკი: %s): %s"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:164
+#, c-format
+msgid "Unsupported argument \"%s\" for LMDB"
+msgstr "LMDB-ის მხარდაუჭერელი არგუმენტი '%s'"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:294
+msgid "LMDB environment open failure"
+msgstr "LMDB გარემოს გახსნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:319
+msgid "LMDB read failure"
+msgstr "LMDB გახსნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:394
+msgid "LMDB write failure"
+msgstr "LMDB ჩაწერის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:418
+msgid "LMDB delete failure"
+msgstr "LMDB წაშლის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:521
+#, c-format
+msgid "LMDB file %s does not exist"
+msgstr "LMDB ფაილი %s არ არსებობს"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:566
+msgid "LMDB open failure"
+msgstr "LMDB გახსნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:593
+#, c-format
+msgid "LMDB file %s already exists"
+msgstr "LMDB ფაილი %s უკვე არსებობს"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:658
+msgid "LMDB create error"
+msgstr "LMDB შექმნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:676
+#, c-format
+msgid "Could not unlink %s"
+msgstr "ბმის %s მოხსნის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:760
+#, c-format
+msgid "Unsupported argument \"%s\" for lmdb"
+msgstr "მხარდაუჭერელი არგუმენტი \"%s\" lmdb-სთვის"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:806
+msgid "LMDB lockout write failure"
+msgstr "LMDB-ის ბლოკის ჩაწერის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:882
+msgid "LMDB principal iteration failure"
+msgstr "LMDB პრინციპალის იტერაციის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:985
+msgid "LMDB policy iteration failure"
+msgstr "LMDB პოლიტიკის იტერაციის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:1016
+msgid "LMDB transaction commit failure"
+msgstr "LMDB ტრანზაქციის გადაცემის შეცდომა"
+
+#: ../../src/plugins/kdb/lmdb/kdb_lmdb.c:1115
+msgid "LMDB lockout update failure"
+msgstr "LMDB -ის ბლოკის განახლების შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_clnt.c:1088
+msgid "No pkinit_anchors supplied"
+msgstr "\"pkinit_anchors\" მითითებული არაა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:957
+#, c-format
+msgid "%s: %s"
+msgstr "%s: %s"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:987
+#, c-format
+msgid "%s (depth %d): %s"
+msgstr "%s (სიღრმე %d): %s"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1230
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4180
+msgid "Pass phrase for"
+msgstr "საკვანძო ფრაზა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1516
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1526
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1784
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1794
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2271
+msgid "Failed to DER encode PKCS7"
+msgstr "PKCS7-ის DER-ით დაშიფვრის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1617
+msgid "Failed to verify own certificate"
+msgstr "საკუთარი სერტიფიკატის გადამოწმების შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1768
+msgid "Failed to add digest attribute"
+msgstr "დაიჯესტის ატრიბუტის დამატების შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1890
+msgid "Failed to decode CMS message"
+msgstr "შეცდომა CMS-შეტყობინების დეკოდირებისას"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1908
+msgid "Invalid pkinit packet: octet string expected"
+msgstr "არასწორი pkinit პაკეტი: მოველოდი ოქტეტ სტრიქონს"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1926
+msgid "wrong oid\n"
+msgstr "არასწორი oid\n"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2078
+msgid "Failed to verify received certificate"
+msgstr "მიღებული სერტიფიკატის გადამოწმება შეუძლებელია"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2114
+msgid "Failed to verify CMS message"
+msgstr "CMS შეტყობინების გადამოწმება შეუძლებელია"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2259
+msgid "Failed to encrypt PKCS7 object"
+msgstr "PKCS7 ობიექტის დაშიფვრის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2317
+msgid "Failed to decode PKCS7"
+msgstr "PKCS7-ის გაშიფვრის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2333
+msgid "Failed to decrypt PKCS7 message"
+msgstr "PKCS7 შეტყობინების გაშიფვრის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2756
+msgid "Failed to fetch SSKDF"
+msgstr "SSKDF-ის გამოთხოვის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2763
+msgid "Failed to instantiate SSKDF"
+msgstr "SSKDF-ის კონკრეტული მაგალითის მოყვანის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2776
+msgid "Failed to derive key using SSKDF"
+msgstr "შეცდომა SSKDF-ის საშუალებით გასაღების მიღებისას"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2838
+msgid "Failed to compute digest"
+msgstr "დაიჯესტის გამოთვლის შეცდომა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4300
+#, c-format
+msgid "Cannot read certificate file '%s'"
+msgstr "სერტიფიკატის ფაილის წაკითხვის შეცდომა \"%s\""
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4308
+#, c-format
+msgid "Cannot read key file '%s'"
+msgstr "გასაღების ფაილის წაკითხვის შეცდომა \"%s\""
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5165
+#, c-format
+msgid "Cannot open file '%s'"
+msgstr "ფაილის გახსნის შეცდომა: %s"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5172
+#, c-format
+msgid "Cannot read file '%s'"
+msgstr "ფაილის წაკითხვის შეცდომა \"%s\""
+
+#: ../../src/plugins/preauth/pkinit/pkinit_identity.c:415
+#, c-format
+msgid "Unsupported type while processing '%s'\n"
+msgstr "არასწორი ტიპი '%s'-ის დამუშავებისას\n"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_identity.c:451
+msgid "Internal error parsing X509_user_identity\n"
+msgstr "შიდა შეცდომა X509_user_identity-ის დამუშავებისას\n"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_identity.c:552
+msgid "No user identity options specified"
+msgstr "მომხმარებლის იდენტიფიკაციის პარამეტრები მითითებული არაა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:403
+#, c-format
+msgid "PKINIT: no freshness token, rejecting auth from %s"
+msgstr "PKINIT: კოდი მოძველებულია. ავთენტიკაცია %s -დან უარყოფილია"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:407
+#, c-format
+msgid "PKINIT: freshness token received from %s"
+msgstr "PKINIT: ახალი კოდი მიღებულია წყაროდან: %s"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:409
+#, c-format
+msgid "PKINIT: no freshness token received from %s"
+msgstr "PKINIT: %s-დან ახალი კოდი მიღებული არაა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:512
+msgid "Pkinit request not signed, but client not anonymous."
+msgstr "Pkinit მოთხოვნა ხელმოწერილი არაა, მაგრამ კლიენტი ანონიმური არაა."
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:546
+msgid "Anonymous pkinit without DH public value not supported."
+msgstr "ანონიმური pkinit-ი DH-ის საჯარო მნიშვნელობის გარეშე მხარდაუჭერელია."
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1083
+#, c-format
+msgid "No pkinit_identity supplied for realm %s"
+msgstr "\"pkinit_identity\" რეალმისთვის %s მითითებული არაა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1094
+#, c-format
+msgid "No pkinit_anchors supplied for realm %s"
+msgstr "\"pkinit_anchors\" რეალმისთვის %s მითითებული არაა"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1114
+#, c-format
+msgid "OCSP is not supported: (realm: %s)"
+msgstr "OCSP მხარდაუჭერელია: (რეალმი: %s)"
+
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1515
+msgid "No realms configured correctly for pkinit support"
+msgstr ""
+"\"pkinit\"-ის მხარდაჭერისთვის სწორად მორგებული რეალმები აღმოჩენილი არაა"
+
+#: ../../src/plugins/preauth/spake/groups.c:237
+msgid "No SPAKE preauth groups configured"
+msgstr "SPAKE პრეავთენტიკაციის ჯგუფები მითითებული არაა"
+
+#: ../../src/plugins/preauth/spake/groups.c:257
+#, c-format
+msgid "SPAKE challenge group not a permitted group: %s"
+msgstr "SPAKE გამოწვევის ჯგუფი ნებადართულ ჯგუფს არ წარმოადგენს: %s"
+
+#: ../../src/plugins/preauth/spake/spake_kdc.c:533
+msgid "Unknown SPAKE request type"
+msgstr "SPAKE-ის მოთხოვნის უცნობი ტიპი"
+
+#: ../../src/util/support/errors.c:77
+msgid "Kerberos library initialization failure"
+msgstr "Kerberos -ის ბიბლიოთეკის ინიციალიზაციის შეცდომა"
+
+#: ../../src/util/support/errors.c:83
+msgid "Error code translation unavailable"
+msgstr "შეცდომის კოდის თარგმანი მიუწვდომელია"
+
+#: ../../src/util/support/errors.c:92
+#, c-format
+msgid "error %ld"
+msgstr "შეცდომა %ld"
+
+#: ../../src/util/support/plugins.c:200
+#, c-format
+msgid "unable to find plugin [%s]: %s"
+msgstr "დამატების პოვნის შეცდომა [%s]: %s"
+
+#: ../../src/util/support/plugins.c:288
+msgid "unknown failure"
+msgstr "უცნობი შეცდომა"
+
+#: ../../src/util/support/plugins.c:291
+#, c-format
+msgid "unable to load plugin [%s]: %s"
+msgstr "დამატების ჩატვირთვის შეცდომა [%s]: %s"
+
+#: ../../src/util/support/plugins.c:314
+#, c-format
+msgid "unable to load DLL [%s]"
+msgstr "dll-ის ჩატვირთვის შეცდომა [%s]"
+
+#: ../../src/util/support/plugins.c:330
+#, c-format
+msgid "plugin unavailable: %s"
+msgstr "დამატება ხელმიუწვდომელია: %s"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:23
+msgid "No @ in SERVICE-NAME name string"
+msgstr "SERVICE-NAME სახელი-სტრიქონში @ არ არსებობს"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:24
+msgid "STRING-UID-NAME contains nondigits"
+msgstr "STRING-UID-NAME არაციფრულ მონაცემებს შეიცავს"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:25
+msgid "UID does not resolve to username"
+msgstr "UID-ი მომხმარებლის სახელში არ ითარგმნება"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:26
+msgid "Validation error"
+msgstr "შემოწმების შეცდომა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:27
+msgid "Couldn't allocate gss_buffer_t data"
+msgstr "შეცდომა gss_buffer_t-ის მონაცემების გამოყოფისას"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:28
+msgid "Message context invalid"
+msgstr "შეტყობინების კონტექსტი არასწორია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:29
+msgid "Buffer is the wrong size"
+msgstr "ბუფერს არასწორი ზომა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:30
+msgid "Credential usage type is unknown"
+msgstr "ავტორიზაციის დეტალების გამოყენების ტიპი უცნობია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:31
+msgid "Unknown quality of protection specified"
+msgstr "მითითებულია დაცვის ხარისხი უცნობია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:32
+msgid "Local host name could not be determined"
+msgstr "ლოკალური ჰოსტის სახელის დადგენა შეუძლებელია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:33
+msgid "Hostname in SERVICE-NAME string could not be canonicalized"
+msgstr "SERVICE-NAME სტრიქონში ჰოსტის სახელის კანონიკალიზება შეუძლებელია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:34
+msgid "Mechanism is incorrect"
+msgstr "მექანიზმი არასწორია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:35
+msgid "Token header is malformed or corrupt"
+msgstr "კოდის თავსართი არასწორი ან დაზიანებულია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:36
+msgid "Packet was replayed in wrong direction"
+msgstr "პაკეტის გადაცემის მისამართი არასწორია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:37
+msgid "Token is missing data"
+msgstr "კოდს მონაცემები აკლია"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:38
+msgid "Token was reflected"
+msgstr "კოდი აირეკლა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:39
+msgid "Received token ID does not match expected token ID"
+msgstr "მიღებული კოდის ID მოსალოდნელი კოდის ID-ს არ ემთხვევა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:40
+msgid "The given credential's usage does not match the requested usage"
+msgstr ""
+"მითითებული ავტორიზაციის დეტალების გამოყენება მოთხოვნილ გამოყენებას არ "
+"ემთხვევა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:41
+msgid "Storing of acceptor credentials is not supported by the mechanism"
+msgstr ""
+"აქსეპტორის ავტორიზაციის დეტალების დამახსოვრება მექანიზმის მიერ მხარდაჭერილი "
+"არაა"
+
+#: ../lib/gssapi/generic/gssapi_err_generic.c:42
+msgid "Storing of non-default credentials is not supported by the mechanism"
+msgstr ""
+"არანაგულისხმები ავტორიზაციის დეტალების დამახსოვრება მექანიზმის მიერ "
+"მხარდაჭერილი არაა"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:23
+msgid "Principal in credential cache does not match desired name"
+msgstr ""
+"ავტორიზაციის დეტალების ქეშში არსებული პრინციპალი სასურველ სახელს არ ემთხვევა"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:24
+msgid "No principal in keytab matches desired name"
+msgstr "Keytab-ში არც ერთი პრინციპალი სასურველ სახელს არ ემთხვევა"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:25
+msgid "Credential cache has no TGT"
+msgstr "ავტორიზაციის დეტალების ქეშს TGT არ გააჩნია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:26
+msgid "Authenticator has no subkey"
+msgstr "ავთენტიკატორს ქვეგასაღები არ გააჩნია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:27
+msgid "Context is already fully established"
+msgstr "კონტექსტი უკვე სრულად აწყობილია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:28
+msgid "Unknown signature type in token"
+msgstr "კოდში არსებული ხელმოწერის ტიპი უცნობია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:29
+msgid "Invalid field length in token"
+msgstr "კოდში ველის არასწორი სიგრძე"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:30
+msgid "Attempt to use incomplete security context"
+msgstr "არასრული უსაფრთხოების კონტექსტის გამოყენების მცდელობა"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:31
+msgid "Bad magic number for krb5_gss_ctx_id_t"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_gss_ctx_id_t-სთვის"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:32
+msgid "Bad magic number for krb5_gss_cred_id_t"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_gss_cred_id_t-სთვის"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:33
+msgid "Bad magic number for krb5_gss_enc_desc"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_gss_enc_desc-სთვის"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:34
+msgid "Sequence number in token is corrupt"
+msgstr "კოდში მიმდევრობის ნომერი არასწორია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:35
+msgid "Credential cache is empty"
+msgstr "ავტორიზაციის დეტალების ქეში ცარიელია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:36
+msgid "Acceptor and Initiator share no checksum types"
+msgstr "აქცეპტანტის და ინიციატორის საკონტროლო ჯამის ტიპები განსხვავდება"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:37
+msgid "Requested lucid context version not supported"
+msgstr "მოთხოვნილი lucid-ის კონტექსტის ვერსია მხარდაუჭერელია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:38
+msgid "PRF input too long"
+msgstr "PRF შეყვანა ძალიან გრძელია"
+
+#: ../lib/gssapi/krb5/gssapi_err_krb5.c:39
+msgid "Bad magic number for iakerb_ctx_id_t"
+msgstr "არასწორი ჯადოსნური რიცხვი iakerb_ctx_id_t -სთვის"
+
+#: ../lib/kadm5/chpass_util_strings.c:23
+msgid "while getting policy info."
+msgstr "პოლიტიკის ინფორმაციის მიღებისას."
+
+#: ../lib/kadm5/chpass_util_strings.c:24
+msgid "while getting principal info."
+msgstr "პრინციპალის ინფორმაციის მიღებისას."
+
+#: ../lib/kadm5/chpass_util_strings.c:25
+msgid "New passwords do not match - password not changed.\n"
+msgstr "ახალი პაროლები არ ემთხვევა - პაროლი არ შეცვლილა.\n"
+
+#: ../lib/kadm5/chpass_util_strings.c:26
+msgid "New password"
+msgstr "ახალი პაროლი"
+
+#: ../lib/kadm5/chpass_util_strings.c:27
+msgid "New password (again)"
+msgstr "ახალი პაროლი(თავიდან)"
+
+#: ../lib/kadm5/chpass_util_strings.c:28
+msgid ""
+"You must type a password. Passwords must be at least one character long.\n"
+msgstr ""
+"პაროლის აკრეფა აუცილებელია. პაროლი მინიმუმ ერთი სიმბოლოს სიგრძის უნდა იყოს.\n"
+
+#: ../lib/kadm5/chpass_util_strings.c:29
+msgid "yet no policy set! Contact your system security administrator."
+msgstr ""
+"პოლიტიკა ჯერ დაყენებული არაა! დაუკავშირდით თქვენი სისტემის უსაფრთხოების "
+"ადმინისტრატორს."
+
+#: ../lib/kadm5/chpass_util_strings.c:31
+msgid ""
+"New password was found in a dictionary of possible passwords and\n"
+"therefore may be easily guessed. Please choose another password.\n"
+"See the kpasswd man page for help in choosing a good password."
+msgstr ""
+"ახალი პაროლი შესაძლო პაროლების ლექსიკონშია აღმოჩენილი და\n"
+"ამიტომ შეიძლება ადვილად გაარტყან. აირჩიეთ სხვა პაროლი.\n"
+"კარგი პაროლის შედგენაში დასახმარებლად იხილეთ kpasswd-ის man გვერდი."
+
+#: ../lib/kadm5/chpass_util_strings.c:32
+msgid "Password not changed."
+msgstr "პაროლი არ შეცვლილა."
+
+#: ../lib/kadm5/chpass_util_strings.c:33
+#, c-format
+msgid ""
+"New password is too short.\n"
+"Please choose a password which is at least %d characters long."
+msgstr ""
+"ახალი პაროლი მეტისმეტად მოკლეა.\n"
+"გთხოვთ, აირჩიოთ პაროლი, რომელიც სულ ცოტა %d სიმბოლოს შეიცავს."
+
+#: ../lib/kadm5/chpass_util_strings.c:34
+#, c-format
+msgid ""
+"New password does not have enough character classes.\n"
+"The character classes are:\n"
+"\t- lower-case letters,\n"
+"\t- upper-case letters,\n"
+"\t- digits,\n"
+"\t- punctuation, and\n"
+"\t- all other characters (e.g., control characters).\n"
+"Please choose a password with at least %d character classes."
+msgstr ""
+"ახალ პაროლს სიმბოლოს საკმარისი კლასები არ გააჩნია.\n"
+"სიმბოლოს კლასებია:\n"
+"\t- დაბალი რეგისტრის სიმბოლოები (პატარა ასოები),\n"
+"\t- მაღალი რეგისტრის სიმბოლოები (დიდი ასოები),\n"
+"\t- ციფრები,\n"
+"\t- პუნქტუაციის ნიშნები და\n"
+"\t- სხვა ყველა სიმბოლო (მაგ: კონტროლის სიმბოლოები).\n"
+"შეიყვანეთ პაროლი, რომელიც, ყველაზე ცოტა, %d სიმბოლოს კლასს შეიცავს."
+
+#: ../lib/kadm5/chpass_util_strings.c:35
+#, c-format
+msgid ""
+"Password cannot be changed because it was changed too recently.\n"
+"Please wait until %s before you change it.\n"
+"If you need to change your password before then, contact your system\n"
+"security administrator."
+msgstr ""
+"პაროლს ვერ შეცვლით, რადგან ის სულ ცოტა ხნის წინ შეიცვალა.\n"
+"მოითმინეთ %s-მდე, სანამ მისი შეცვლის უფლება გექნებათ.\n"
+"თუ გჭირდებათ, რომ პაროლი მითითებულ თარიღამდე შეცვალოთ,\n"
+"თქვენს უსაფრთხოების ადმინისტრატორს დაუკავშირდით."
+
+#: ../lib/kadm5/chpass_util_strings.c:36
+msgid "New password was used previously. Please choose a different password."
+msgstr "ახალი პაროლი უკვე იყო გამოყენებული. აირჩიეთ სხვა პაროლი."
+
+#: ../lib/kadm5/chpass_util_strings.c:37
+msgid "while trying to change password."
+msgstr "პაროლის შეცვლის მცდელობისას."
+
+#: ../lib/kadm5/chpass_util_strings.c:38
+msgid "while reading new password."
+msgstr "ახალი პაროლის წაკითხვისას."
+
+#: ../lib/kadm5/kadm_err.c:23
+msgid "Operation failed for unspecified reason"
+msgstr "ოპერაცია მიუთითებელი მიზეზით ავარიულად დასრულდა"
+
+#: ../lib/kadm5/kadm_err.c:24
+msgid "Operation requires ``get'' privilege"
+msgstr "ოპერაციას \"get\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:25
+msgid "Operation requires ``add'' privilege"
+msgstr "ოპერაციას \"add\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:26
+msgid "Operation requires ``modify'' privilege"
+msgstr "ოპერაციას \"modify\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:27
+msgid "Operation requires ``delete'' privilege"
+msgstr "ოპერაციას \"delete\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:28
+msgid "Insufficient authorization for operation"
+msgstr "ოპერაციისთვის არასაკმარისი ავტორიზაცია"
+
+#: ../lib/kadm5/kadm_err.c:29 ../lib/kdb/adb_err.c:29
+msgid "Database inconsistency detected"
+msgstr "აღმოჩენილია ბაზის არამდგრადობა"
+
+#: ../lib/kadm5/kadm_err.c:30 ../lib/kdb/adb_err.c:24
+msgid "Principal or policy already exists"
+msgstr "პრინციპალი ან პოლიტიკა უკვე არსებობს"
+
+#: ../lib/kadm5/kadm_err.c:31
+msgid "Communication failure with server"
+msgstr "სერვერთან ურთიერთობის შეცდომა"
+
+#: ../lib/kadm5/kadm_err.c:32
+msgid "No administration server found for realm"
+msgstr "რეალმისთვის ადმინისტრირების სერვერი ვერ ვიპოვე"
+
+#: ../lib/kadm5/kadm_err.c:33
+msgid "Password history principal key version mismatch"
+msgstr "პაროლის ისტორიის პრინციპალის გასაღების ვერსია არ ემთხვევა"
+
+#: ../lib/kadm5/kadm_err.c:34
+msgid "Connection to server not initialized"
+msgstr "სერვერთან მიერთება ინიციალიზებული არაა"
+
+#: ../lib/kadm5/kadm_err.c:35
+msgid "Principal does not exist"
+msgstr "პრინციპალი არ არსებობს"
+
+#: ../lib/kadm5/kadm_err.c:36
+msgid "Policy does not exist"
+msgstr "პოლიტიკა არ არსებობს"
+
+#: ../lib/kadm5/kadm_err.c:37
+msgid "Invalid field mask for operation"
+msgstr "ველის ნიღაბი ოპერაციისთვის არასწორია"
+
+#: ../lib/kadm5/kadm_err.c:38
+msgid "Invalid number of character classes"
+msgstr "სიმბოლოს კლასების არასწორი რაოდენობა"
+
+#: ../lib/kadm5/kadm_err.c:39
+msgid "Invalid password length"
+msgstr "არასწორი პაროლის სიგრძე"
+
+#: ../lib/kadm5/kadm_err.c:40
+msgid "Illegal policy name"
+msgstr "პოლიტიკის დაუშვებელი სახელი"
+
+#: ../lib/kadm5/kadm_err.c:41
+msgid "Illegal principal name"
+msgstr "პრინციპალის დაუშვებელი სახელი"
+
+#: ../lib/kadm5/kadm_err.c:42
+msgid "Invalid auxiliary attributes"
+msgstr "არასწორი დამხმარე ატრიბუტები"
+
+#: ../lib/kadm5/kadm_err.c:43
+msgid "Invalid password history count"
+msgstr "არასწორი პაროლის ისტორიის რაოდენობა"
+
+#: ../lib/kadm5/kadm_err.c:44
+msgid "Password minimum life is greater than password maximum life"
+msgstr "პაროლის მინიმალური სიცოცხლე მაქსიმალურ სიცოცხლეზე დიდია"
+
+#: ../lib/kadm5/kadm_err.c:45
+msgid "Password is too short"
+msgstr "პაროლი ძალიან მოკლეა"
+
+#: ../lib/kadm5/kadm_err.c:46
+msgid "Password does not contain enough character classes"
+msgstr "პაროლი სიმბოლოების საკმარის კლასებს არ შეიცავს"
+
+#: ../lib/kadm5/kadm_err.c:47
+msgid "Password is in the password dictionary"
+msgstr "პაროლი პაროლების ლექსიკონშია"
+
+#: ../lib/kadm5/kadm_err.c:48
+msgid "Cannot reuse password"
+msgstr "პაროლს თავიდან ვერ გამოიყენებთ"
+
+#: ../lib/kadm5/kadm_err.c:49
+msgid "Current password's minimum life has not expired"
+msgstr "მიმდინარე პაროლის სიცოცხლის მინიმალური ვადა არ ამოწურულა"
+
+#: ../lib/kadm5/kadm_err.c:50 ../lib/krb5/error_tables/kdb5_err.c:67
+msgid "Policy is in use"
+msgstr "პოლიტიკა უკვე გამოიყენება"
+
+#: ../lib/kadm5/kadm_err.c:51
+msgid "Connection to server already initialized"
+msgstr "სერვერამდე მიერთება უკვე ინიციალიზებულია"
+
+#: ../lib/kadm5/kadm_err.c:52
+msgid "Incorrect password"
+msgstr "არასწორი პაროლი"
+
+#: ../lib/kadm5/kadm_err.c:53
+msgid "Cannot change protected principal"
+msgstr "დაცული პრინციპალის შეცვლა შეუძლებელია"
+
+#: ../lib/kadm5/kadm_err.c:54
+msgid "Programmer error! Bad Admin server handle"
+msgstr "პროგრამისტის შეცდომა! ადმინისტრირების სერვერის დამმუშავებელი არასწორია"
+
+#: ../lib/kadm5/kadm_err.c:55
+msgid "Programmer error! Bad API structure version"
+msgstr "პროგრამისტის შეცდომა! API-ის სტრუქტურის ვერსია არასწორია"
+
+#: ../lib/kadm5/kadm_err.c:56
+msgid ""
+"API structure version specified by application is no longer supported (to "
+"fix, recompile application against current KADM5 API header files and "
+"libraries)"
+msgstr ""
+"API-ის სტრუქტურის ვერსია, რომელიც აპლიკაციას სჭირდება, მხარდაჭერილი აღარაა "
+"(პრობლემის გამოსასწორებლად საჭიროა აპლიკაციის თავიდან აგება მიმდინარე KADM5 "
+"API-ის თავსართის ფაილებისა და ბიბლიოთეკების გამოყენებით.)"
+
+#: ../lib/kadm5/kadm_err.c:57
+msgid ""
+"API structure version specified by application is unknown to libraries (to "
+"fix, obtain current KADM5 API header files and libraries and recompile "
+"application)"
+msgstr ""
+"API-ის სტრუქტურის ვერსია, რომელიც აპლიკაციას სჭირდება, უცნობია (პრობლემის "
+"გამოსასწორებლად საჭიროა აპლიკაციის თავიდან აგება მიმდინარე KADM5 API-ის "
+"თავსართის ფაილებისა და ბიბლიოთეკების გამოყენებით.)"
+
+#: ../lib/kadm5/kadm_err.c:58
+msgid "Programmer error! Bad API version"
+msgstr "პროგრამისტის შეცდომა! API-ის ვერსია არასწორია"
+
+#: ../lib/kadm5/kadm_err.c:59
+msgid ""
+"API version specified by application is no longer supported by libraries (to "
+"fix, update application to adhere to current API version and recompile)"
+msgstr ""
+"API-ის ვერსია, რომელიც აპლიკაციას სჭირდება, მხარდაჭერილი აღარაა (პრობლემის "
+"გამოსასწორებლად საჭიროა აპლიკაციის თავიდან აგება მიმდინარე KADM5 API-ის "
+"თავსართის ფაილებისა და ბიბლიოთეკების გამოყენებით.)"
+
+#: ../lib/kadm5/kadm_err.c:60
+msgid ""
+"API version specified by application is no longer supported by server (to "
+"fix, update application to adhere to current API version and recompile)"
+msgstr ""
+"API-ის ვერსია, რომელიც აპლიკაციას სჭირდება, სერვერის მიერ მხარდაჭერილი "
+"აღარაა (პრობლემის გამოსასწორებლად აპლიკაციის განახლება, რომ მიმდინარე KADM5 "
+"API-ის თავსართის ფაილებისა და ბიბლიოთეკების იყენებდეს და აპლიკაციის თავიდან "
+"კომპილაციაა საჭირო)"
+
+#: ../lib/kadm5/kadm_err.c:61
+msgid ""
+"API version specified by application is unknown to libraries (to fix, obtain "
+"current KADM5 API header files and libraries and recompile application)"
+msgstr ""
+"API-ის ვერსია, რომელიც აპლიკაციას სჭირდება, უცნობია. (პრობლემის "
+"გამოსასწორებლად გადმოწერეთ მიმდინარე KADM5 API-ის თავსართის ფაილები და "
+"ბიბლიოთეკები და აპლიკაცია თავიდან დააკომპილეთ)"
+
+#: ../lib/kadm5/kadm_err.c:62
+msgid ""
+"API version specified by application is unknown to server (to fix, obtain "
+"and install newest KADM5 Admin Server)"
+msgstr ""
+"API-ს ვერსია, რომელიც აპლიკაციას სჭირდება, სერვერისთვის უცნობია (პრობლემის "
+"გამოსასწორებლად KADM5 ადმინ სერვერის უახლესი ვერსიის დაყენებაა საჭირო)"
+
+#: ../lib/kadm5/kadm_err.c:63
+msgid "Database error! Required KADM5 principal missing"
+msgstr "ბაზის შეცდომა! აუცილებელი KADM5 პრინციპალი არ არსებობს"
+
+#: ../lib/kadm5/kadm_err.c:64
+msgid "The salt type of the specified principal does not support renaming"
+msgstr ""
+"მითითებული პრინციპალის მარილის ტიპს სახელის გადარქმევის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/kadm5/kadm_err.c:65
+msgid "Illegal configuration parameter for remote KADM5 client"
+msgstr "არასწორი კონფიგურაციის პარამეტრი დაშორებული KADM5 კლიენტისთვის"
+
+#: ../lib/kadm5/kadm_err.c:66
+msgid "Illegal configuration parameter for local KADM5 client"
+msgstr "არასწორი კონფიგურაციის პარამეტრი ლოკალური KADM5 კლიენტისთვის"
+
+#: ../lib/kadm5/kadm_err.c:67
+msgid "Operation requires ``list'' privilege"
+msgstr "ოპერაციას \"list\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:68
+msgid "Operation requires ``change-password'' privilege"
+msgstr "ოპერაციას \"change-password\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:69
+msgid "GSS-API (or Kerberos) error"
+msgstr "GSS-API-ის (ან Kerberos-ის) შეცდომა"
+
+#: ../lib/kadm5/kadm_err.c:70
+msgid "Programmer error! Illegal tagged data list type"
+msgstr "პროგრამისტის შეცდომა! ჭდის მქონე მონაცემების სიის ტიპი არასწორია"
+
+#: ../lib/kadm5/kadm_err.c:71
+msgid "Required parameters in kdc.conf missing"
+msgstr "შეცდომა kdc.conf-ში საჭირო პარამეტრების ძებნისას"
+
+#: ../lib/kadm5/kadm_err.c:72
+msgid "Bad krb5 admin server hostname"
+msgstr "Krb5-ის ადმინისტრირების სერვერის არასწორი ჰოსტის სახელი"
+
+#: ../lib/kadm5/kadm_err.c:73
+msgid "Operation requires ``set-key'' privilege"
+msgstr "ოპერაციას \"set-key\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:74
+msgid "Multiple values for single or folded enctype"
+msgstr "ერთი ან დაკეცილი enctype-ის მრავალი მნიშვნელობა"
+
+#: ../lib/kadm5/kadm_err.c:75
+msgid "Invalid enctype for setv4key"
+msgstr "Setv4key-ის არასწორი enctype"
+
+#: ../lib/kadm5/kadm_err.c:76
+msgid "Mismatched enctypes for setkey3"
+msgstr "Setkey3-თვის შეუთავსებელი enctype-ები"
+
+#: ../lib/kadm5/kadm_err.c:77
+msgid "Missing parameters in krb5.conf required for kadmin client"
+msgstr "Krb5.conf-ში kadmin-ის კლიენტისთვის აუცილებელი პარამეტრები არ არსებობს"
+
+#: ../lib/kadm5/kadm_err.c:78 ../lib/kdb/adb_err.c:30
+msgid "XDR encoding error"
+msgstr "XDR კოდირების შეცდომა"
+
+#: ../lib/kadm5/kadm_err.c:79
+msgid "Cannot resolve network address for admin server in requested realm"
+msgstr ""
+"მოთხოვნის რეალმში ადმინის სერვერისთვის ქსელის მისამართის ამოხსნის შეცდომა"
+
+#: ../lib/kadm5/kadm_err.c:80
+msgid "Unspecified password quality failure"
+msgstr "პაროლის ხარისხის მიუთითებელი შეცდომა"
+
+#: ../lib/kadm5/kadm_err.c:81
+msgid "Invalid key/salt tuples"
+msgstr "არასწორი გასაღები/მარილის კორტეჟები"
+
+#: ../lib/kadm5/kadm_err.c:82
+msgid "Invalid multiple or duplicate kvnos in setkey operation"
+msgstr "Setkey ოპერაციაში არასწორი მრავალი ან დუბლირებული ოპერაციაა აღმოჩენილი"
+
+#: ../lib/kadm5/kadm_err.c:83
+msgid "Operation requires ``extract-keys'' privilege"
+msgstr "ოპერაციას \"extract-keys\" პრივილეგია ესაჭიროება"
+
+#: ../lib/kadm5/kadm_err.c:84
+msgid "Principal keys are locked down"
+msgstr "პრინციპალის გასაღებები დაბლოკილია"
+
+#: ../lib/kadm5/kadm_err.c:85
+msgid "Operation requires initial ticket"
+msgstr "ოპერაციას საწყისი გასაღები ესაჭიროება"
+
+#: ../lib/kdb/adb_err.c:23
+msgid "No Error"
+msgstr "შეცდომის გარეშე"
+
+#: ../lib/kdb/adb_err.c:25
+msgid "Principal or policy does not exist"
+msgstr "პოლიტიკა ან პრინციპალი არ არსებობს"
+
+#: ../lib/kdb/adb_err.c:26
+msgid "Database not initialized"
+msgstr "ბაზა ინიციალიზებული არაა"
+
+#: ../lib/kdb/adb_err.c:27
+msgid "Invalid policy name"
+msgstr "პოლიტიკის დაუშვებელი სახელი"
+
+#: ../lib/kdb/adb_err.c:28
+msgid "Invalid principal name"
+msgstr "პრინციპალის დაუშვებელი სახელი"
+
+#: ../lib/kdb/adb_err.c:31
+msgid "Failure!"
+msgstr "შეცდომა!"
+
+#: ../lib/kdb/adb_err.c:32
+msgid "Bad lock mode"
+msgstr "დაბლოკვის არასწორი რეჟიმი"
+
+#: ../lib/kdb/adb_err.c:33
+msgid "Cannot lock database"
+msgstr "ბაზის დაბლოკვა შეუძლებელია"
+
+#: ../lib/kdb/adb_err.c:34
+msgid "Database not locked"
+msgstr "ბაზა დაბლოკილი არაა"
+
+#: ../lib/kdb/adb_err.c:35
+msgid "KADM5 administration database lock file missing"
+msgstr "KADM5 ადმინისტრირების ბაზის ბლოკის ფაილი ვერ ვიპოვე"
+
+#: ../lib/kdb/adb_err.c:36
+msgid "Insufficient permission to lock file"
+msgstr "თქვენი წვდომები ფაილის დასაბლოკად საკმარისი არაა"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:23
+msgid "Plugin does not support interface version"
+msgstr "დამატებას ინტერფეისის ვერსიის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:24
+msgid "Invalid module specifier"
+msgstr "მოდულის არასწორი მიმთითებელი"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:25
+msgid "Plugin module name not found"
+msgstr "დამატების მოდულის სახელი ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:26
+msgid "The KDC should discard this request"
+msgstr "KDC-ს უნდა მოეცილებინა ეს მოთხოვნა"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:27
+msgid "Can't create new subsidiary cache"
+msgstr "დამხმარე ქეშის შექმნის შეცდომა"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:28
+msgid "Invalid keyring anchor name"
+msgstr "არასწორი ბრელოკის სამაგრის სახელი"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:29
+msgid "Unknown keyring collection version"
+msgstr "ბრელოკის კოლექციის უცნობი ვერსია"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:30
+msgid "Invalid UID in persistent keyring name"
+msgstr "არასწორი UID-ი მუდმივი ბრელოკის სახელში"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:31
+msgid "Malformed reply from KCM daemon"
+msgstr "KCM დემონის არასწორად ჩამოყალიბებული პასუხი"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:32
+msgid "Mach RPC error communicating with KCM daemon"
+msgstr "Mac RPC-ის შეცდომა KCM დემონთან ურთიერთობისას"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:33
+msgid "KCM daemon reply too big"
+msgstr "KCM დემონის პასუხი ძალიან დიდია"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:34
+msgid "No KCM server found"
+msgstr "KCM სერვერი ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:35
+msgid "Authorize and set hw-authent ticket flag"
+msgstr "ავტორიზაცია და hw-authent ბილეთის ალმის დაყენება"
+
+#: ../lib/krb5/error_tables/k5e1_err.c:36
+msgid "Set hw-authent ticket flag but do not authorize"
+msgstr "\"hw-authent\" ალმის დაყენება, მაგრამ ავტორიზაციის გარეშე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:24
+msgid "Client's entry in database has expired"
+msgstr "ბაზაში კლიენტის ჩანაწერი ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:25
+msgid "Server's entry in database has expired"
+msgstr "ბაზაში სერვერის ჩანაწერი ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:26
+msgid "Requested protocol version not supported"
+msgstr "მოთხოვნილი პროტოკოლის ვერსია მხარდაუჭერელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:27
+msgid "Client's key is encrypted in an old master key"
+msgstr "კლიენტის გასაღები ძველი მთავარი გასაღებია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:28
+msgid "Server's key is encrypted in an old master key"
+msgstr "სერვერის გასაღები ძველი მთავარი გასაღებია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:29
+msgid "Client not found in Kerberos database"
+msgstr "კლიენტი Kerberos-ის ბაზაში ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:30
+msgid "Server not found in Kerberos database"
+msgstr "სერვერი Kerberos-ის ბაზაში ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:31
+msgid "Principal has multiple entries in Kerberos database"
+msgstr "პრინციპალს Kerberos-ის ბაზაში ერთზე მეტი ჩანაწერი გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:32
+msgid "Client or server has a null key"
+msgstr "სერვერის ან კლიენტის გასაღები ნულოვანია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:33
+msgid "Ticket is ineligible for postdating"
+msgstr "ბილეთი მორიგი რიცხვით ჩაწერისთვის შეუფერებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:34
+msgid "Requested effective lifetime is negative or too short"
+msgstr "მოთხოვნილი ეფექტური სიცოცხლის დრო უარყოფითი ან მეტისმეტად მოკლეა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:35
+msgid "KDC policy rejects request"
+msgstr "KDC პოლიტიკა მოთხოვნას უარყოფს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:36
+msgid "KDC can't fulfill requested option"
+msgstr "KDC მოთხოვნილი პარამეტრის შევსება შეუძლებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:37
+msgid "KDC has no support for encryption type"
+msgstr "KDC -ს დაშიფვრის ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:38
+msgid "KDC has no support for checksum type"
+msgstr "KDC -ს საკონტროლო ჯამის ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:39
+msgid "KDC has no support for padata type"
+msgstr "KDC -ს padata ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:40
+msgid "KDC has no support for transited type"
+msgstr "KDC -ს transited ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:41
+msgid "Client's credentials have been revoked"
+msgstr "კლიენტის ავტორიზაციის დეტალები გაუქმდა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:42
+msgid "Credentials for server have been revoked"
+msgstr "სერვერის ავტორიზაციის დეტალები გაუქმდა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:43
+msgid "TGT has been revoked"
+msgstr "TGT გაუქმებულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:44
+msgid "Client not yet valid - try again later"
+msgstr "კლიენტი ჯერ არასწორია - მოგვიანებით სცადეთ"
+
+#: ../lib/krb5/error_tables/krb5_err.c:45
+msgid "Server not yet valid - try again later"
+msgstr "სერვერი ჯერ არასწორია - მოგვიანებით სცადეთ"
+
+#: ../lib/krb5/error_tables/krb5_err.c:46
+msgid "Password has expired"
+msgstr "პაროლს ვადა გაუვიდა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:47
+msgid "Preauthentication failed"
+msgstr "პრეავთენტიკაციის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:48
+msgid "Additional pre-authentication required"
+msgstr "დამატებითი პრე-ავთენტიკაცია აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:49
+msgid "Requested server and ticket don't match"
+msgstr "მოთხოვნილი სერვერი და ბილეთი არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:50
+msgid "Server principal valid for user2user only"
+msgstr "სერვერის პრინციპალი მხოლოდ მომხმარებლიდან მომხმარებლამდეა ძალაში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:51
+msgid "KDC policy rejects transited path"
+msgstr "KDC-ის პოლიტიკა ტრანზიტულ ბილიკს უარყოფს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:52
+msgid "A service is not available that is required to process the request"
+msgstr "მოთხოვნის დასამუშავებლად საჭირო სერვისი ხელმიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:53
+msgid "KRB5 error code 30"
+msgstr "KRB5 შეცდომის კოდი 30"
+
+#: ../lib/krb5/error_tables/krb5_err.c:54
+msgid "Decrypt integrity check failed"
+msgstr "გაშიფვრის მთლიანობის შემოწმების შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:55
+msgid "Ticket expired"
+msgstr "ბილეთი ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:56
+msgid "Ticket not yet valid"
+msgstr "ბილეთი ჯერ არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:57
+msgid "Request is a replay"
+msgstr "პასუხის მოთხოვნა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:58
+msgid "The ticket isn't for us"
+msgstr "ბილეტი ჩვენთვის არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:59
+msgid "Ticket/authenticator don't match"
+msgstr "ბილეთი/ავთენტიკატორი არ ემთხვევიან"
+
+#: ../lib/krb5/error_tables/krb5_err.c:60
+msgid "Clock skew too great"
+msgstr "საათის აცდენა მეტისმეტად დიდია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:61
+msgid "Incorrect net address"
+msgstr "არასწორი ქსელური მისამართი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:62
+msgid "Protocol version mismatch"
+msgstr "პროტოკოლის ვერსია არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:63
+msgid "Invalid message type"
+msgstr "შეტყობინების არასწორი ტიპი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:64
+msgid "Message stream modified"
+msgstr "შეტყობინების ნაკადი შეიცვალა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:65
+msgid "Message out of order"
+msgstr "შეტყობინება რიგს გარეთაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:66
+msgid "Illegal cross-realm ticket"
+msgstr "არასწორი რეალმთშორისი ბილეთი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:67
+msgid "Key version is not available"
+msgstr "გასაღების ვერსია მიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:68
+msgid "Service key not available"
+msgstr "სერვერის გასაღები ხელმიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:69
+#: ../lib/krb5/error_tables/krb5_err.c:181
+msgid "Mutual authentication failed"
+msgstr "ორმხრივი ავთენტიკაციის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:70
+msgid "Incorrect message direction"
+msgstr "შეტყობინების არასწორი მიმართულება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:71
+msgid "Alternative authentication method required"
+msgstr "ალტერნატიული ავთენტიკაციის მეთოდი აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:72
+msgid "Incorrect sequence number in message"
+msgstr "მიმდევრობის არასწორი რიცხვი შეტყობინებაში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:73
+msgid "Inappropriate type of checksum in message"
+msgstr "საკონტროლო ჯამის შეუთავსებელი ტიპი შეტყობინებაში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:74
+msgid "Policy rejects transited path"
+msgstr "პოლიტიკა ტრანზიტულ ბილიკს უარყოფს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:75
+msgid "Response too big for UDP, retry with TCP"
+msgstr "პასუხი UDP-სთვის ძალიან დიდია. TCP-ით სცადეთ"
+
+#: ../lib/krb5/error_tables/krb5_err.c:76
+msgid "KRB5 error code 53"
+msgstr "KRB5 შეცდომის კოდი 53"
+
+#: ../lib/krb5/error_tables/krb5_err.c:77
+msgid "KRB5 error code 54"
+msgstr "KRB5 შეცდომის კოდი 54"
+
+#: ../lib/krb5/error_tables/krb5_err.c:78
+msgid "KRB5 error code 55"
+msgstr "KRB5 შეცდომის კოდი 55"
+
+#: ../lib/krb5/error_tables/krb5_err.c:79
+msgid "KRB5 error code 56"
+msgstr "KRB5 შეცდომის კოდი 56"
+
+#: ../lib/krb5/error_tables/krb5_err.c:80
+msgid "KRB5 error code 57"
+msgstr "KRB5 შეცდომის კოდი 57"
+
+#: ../lib/krb5/error_tables/krb5_err.c:81
+msgid "KRB5 error code 58"
+msgstr "KRB5 შეცდომის კოდი 58"
+
+#: ../lib/krb5/error_tables/krb5_err.c:82
+msgid "KRB5 error code 59"
+msgstr "KRB5 შეცდომის კოდი 59"
+
+#: ../lib/krb5/error_tables/krb5_err.c:83
+msgid "Generic error (see e-text)"
+msgstr "ზოგადი შეცდომა (იხილეთ e-text)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:84
+msgid "Field is too long for this implementation"
+msgstr "ამ განხორციელებისთვის ველი ძალიან გრძელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:85
+msgid "Client not trusted"
+msgstr "კლიენტი სანდო არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:86
+msgid "KDC not trusted"
+msgstr "KDC სანდო არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:87
+msgid "Invalid signature"
+msgstr "არასწორი ხელმოწერა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:88
+msgid "Key parameters not accepted"
+msgstr "გასაღების პარამეტრები მიუღებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:89
+msgid "Certificate mismatch"
+msgstr "სერტიფიკატები არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:90
+msgid "No ticket granting ticket"
+msgstr "ბილეთის მიმნიჭებელი ბილეთის გარეშე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:91
+msgid "Realm not local to KDC"
+msgstr "რეალმი KDC-სთვის ლოკალური არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:92
+msgid "User to user required"
+msgstr "მომხმარებლისდან მომხმარებლამდე აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:93
+msgid "Can't verify certificate"
+msgstr "სერტიფიკატის შემოწმება შეუძლებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:94
+msgid "Invalid certificate"
+msgstr "არასწორი სერტიფიკატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:95
+msgid "Revoked certificate"
+msgstr "გაუქმებული სერტიფიკატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:96
+msgid "Revocation status unknown"
+msgstr "გაუქმების სტატუსი უცნობია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:97
+msgid "Revocation status unavailable"
+msgstr "გაუქმების სტატუსი მიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:98
+msgid "Client name mismatch"
+msgstr "კლიენტის სახელი არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:99
+msgid "KDC name mismatch"
+msgstr "KDC-ის სახელი არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:100
+msgid "Inconsistent key purpose"
+msgstr "გასაღების დანიშნულება არამდგრადია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:101
+msgid "Digest in certificate not accepted"
+msgstr "სერტიფიკატის დაიჯესტი მიუღებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:102
+msgid "Checksum must be included"
+msgstr "საკონტროლო ჯამის ქონა აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:103
+msgid "Digest in signed-data not accepted"
+msgstr "ხელმოწერილ-მონაცემებში გამოყენებული დაიჯესტი მიუღებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:104
+msgid "Public key encryption not supported"
+msgstr "საჯარო გასაღების დაშიფვრა მხარდაუჭერელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:105
+msgid "KRB5 error code 82"
+msgstr "KRB5 შეცდომის კოდი 82"
+
+#: ../lib/krb5/error_tables/krb5_err.c:106
+msgid "KRB5 error code 83"
+msgstr "KRB5 შეცდომის კოდი 83"
+
+#: ../lib/krb5/error_tables/krb5_err.c:107
+msgid "KRB5 error code 84"
+msgstr "KRB5 შეცდომის კოდი 84"
+
+#: ../lib/krb5/error_tables/krb5_err.c:108
+msgid "The IAKERB proxy could not find a KDC"
+msgstr "IAKERB პროქსიმ KDC ვერ იპოვა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:109
+msgid "The KDC did not respond to the IAKERB proxy"
+msgstr "KDC-მა IAKERB პროქსის არ უპასუხა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:110
+msgid "KRB5 error code 87"
+msgstr "KRB5 შეცდომის კოდი 87"
+
+#: ../lib/krb5/error_tables/krb5_err.c:111
+msgid "KRB5 error code 88"
+msgstr "KRB5 შეცდომის კოდი 88"
+
+#: ../lib/krb5/error_tables/krb5_err.c:112
+msgid "KRB5 error code 89"
+msgstr "KRB5 შეცდომის კოდი 89"
+
+#: ../lib/krb5/error_tables/krb5_err.c:113
+msgid "Preauthentication expired"
+msgstr "პრეავთენტიკაცია ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:114
+msgid "More preauthentication data is required"
+msgstr "აუცილებელია პრეავთენტიკაციის მონაცემები"
+
+#: ../lib/krb5/error_tables/krb5_err.c:115
+msgid "KRB5 error code 92"
+msgstr "KRB5 შეცდომის კოდი 92"
+
+#: ../lib/krb5/error_tables/krb5_err.c:116
+msgid "An unsupported critical FAST option was requested"
+msgstr "მოთხოვნილია მხარდაუჭერელი კრიტიკული FAST პარამეტრი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:117
+msgid "KRB5 error code 94"
+msgstr "KRB5 შეცდომის კოდი 94"
+
+#: ../lib/krb5/error_tables/krb5_err.c:118
+msgid "KRB5 error code 95"
+msgstr "KRB5 შეცდომის კოდი 95"
+
+#: ../lib/krb5/error_tables/krb5_err.c:119
+msgid "KRB5 error code 96"
+msgstr "KRB5 შეცდომის კოდი 96"
+
+#: ../lib/krb5/error_tables/krb5_err.c:120
+msgid "KRB5 error code 97"
+msgstr "KRB5 შეცდომის კოდი 97"
+
+#: ../lib/krb5/error_tables/krb5_err.c:121
+msgid "KRB5 error code 98"
+msgstr "KRB5 შეცდომის კოდი 98"
+
+#: ../lib/krb5/error_tables/krb5_err.c:122
+msgid "KRB5 error code 99"
+msgstr "KRB5 შეცდომის კოდი 99"
+
+#: ../lib/krb5/error_tables/krb5_err.c:123
+msgid "No acceptable KDF offered"
+msgstr "დამაკმაყოფილებელი KDF შემოთავაზებული არ ყოფილა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:124
+msgid "KRB5 error code 101"
+msgstr "KRB5 შეცდომის კოდი 101"
+
+#: ../lib/krb5/error_tables/krb5_err.c:125
+msgid "KRB5 error code 102"
+msgstr "KRB5 შეცდომის კოდი 102"
+
+#: ../lib/krb5/error_tables/krb5_err.c:126
+msgid "KRB5 error code 103"
+msgstr "KRB5 შეცდომის კოდი 103"
+
+#: ../lib/krb5/error_tables/krb5_err.c:127
+msgid "KRB5 error code 104"
+msgstr "KRB5 შეცდომის კოდი 104"
+
+#: ../lib/krb5/error_tables/krb5_err.c:128
+msgid "KRB5 error code 105"
+msgstr "KRB5 შეცდომის კოდი 105"
+
+#: ../lib/krb5/error_tables/krb5_err.c:129
+msgid "KRB5 error code 106"
+msgstr "KRB5 შეცდომის კოდი 106"
+
+#: ../lib/krb5/error_tables/krb5_err.c:130
+msgid "KRB5 error code 107"
+msgstr "KRB5 შეცდომის კოდი 107"
+
+#: ../lib/krb5/error_tables/krb5_err.c:131
+msgid "KRB5 error code 108"
+msgstr "KRB5 შეცდომის კოდი 108"
+
+#: ../lib/krb5/error_tables/krb5_err.c:132
+msgid "KRB5 error code 109"
+msgstr "KRB5 შეცდომის კოდი 109"
+
+#: ../lib/krb5/error_tables/krb5_err.c:133
+msgid "KRB5 error code 110"
+msgstr "KRB5 შეცდომის კოდი 110"
+
+#: ../lib/krb5/error_tables/krb5_err.c:134
+msgid "KRB5 error code 111"
+msgstr "KRB5 შეცდომის კოდი 111"
+
+#: ../lib/krb5/error_tables/krb5_err.c:135
+msgid "KRB5 error code 112"
+msgstr "KRB5 შეცდომის კოდი 112"
+
+#: ../lib/krb5/error_tables/krb5_err.c:136
+msgid "KRB5 error code 113"
+msgstr "KRB5 შეცდომის კოდი 113"
+
+#: ../lib/krb5/error_tables/krb5_err.c:137
+msgid "KRB5 error code 114"
+msgstr "KRB5 შეცდომის კოდი 114"
+
+#: ../lib/krb5/error_tables/krb5_err.c:138
+msgid "KRB5 error code 115"
+msgstr "KRB5 შეცდომის კოდი 115"
+
+#: ../lib/krb5/error_tables/krb5_err.c:139
+msgid "KRB5 error code 116"
+msgstr "KRB5 შეცდომის კოდი 116"
+
+#: ../lib/krb5/error_tables/krb5_err.c:140
+msgid "KRB5 error code 117"
+msgstr "KRB5 შეცდომის კოდი 117"
+
+#: ../lib/krb5/error_tables/krb5_err.c:141
+msgid "KRB5 error code 118"
+msgstr "KRB5 შეცდომის კოდი 118"
+
+#: ../lib/krb5/error_tables/krb5_err.c:142
+msgid "KRB5 error code 119"
+msgstr "KRB5 შეცდომის კოდი 119"
+
+#: ../lib/krb5/error_tables/krb5_err.c:143
+msgid "KRB5 error code 120"
+msgstr "KRB5 შეცდომის კოდი 120"
+
+#: ../lib/krb5/error_tables/krb5_err.c:144
+msgid "KRB5 error code 121"
+msgstr "KRB5 შეცდომის კოდი 121"
+
+#: ../lib/krb5/error_tables/krb5_err.c:145
+msgid "KRB5 error code 122"
+msgstr "KRB5 შეცდომის კოდი 122"
+
+#: ../lib/krb5/error_tables/krb5_err.c:146
+msgid "KRB5 error code 123"
+msgstr "KRB5 შეცდომის კოდი 123"
+
+#: ../lib/krb5/error_tables/krb5_err.c:147
+msgid "KRB5 error code 124"
+msgstr "KRB5 შეცდომის კოდი 124"
+
+#: ../lib/krb5/error_tables/krb5_err.c:148
+msgid "KRB5 error code 125"
+msgstr "KRB5 შეცდომის კოდი 125"
+
+#: ../lib/krb5/error_tables/krb5_err.c:149
+msgid "KRB5 error code 126"
+msgstr "KRB5 შეცდომის კოდი 126"
+
+#: ../lib/krb5/error_tables/krb5_err.c:150
+msgid "KRB5 error code 127"
+msgstr "KRB5 შეცდომის კოდი 127"
+
+#: ../lib/krb5/error_tables/krb5_err.c:151
+#: ../lib/krb5/error_tables/kdb5_err.c:23
+msgid "$Id$"
+msgstr "$Id$"
+
+#: ../lib/krb5/error_tables/krb5_err.c:152
+msgid "Invalid flag for file lock mode"
+msgstr "ფაილის დაბლოკვის რეჟიმის არასწორი ალამი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:153
+msgid "Cannot read password"
+msgstr "პაროლის წაკითხვის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:154
+msgid "Password mismatch"
+msgstr "პაროლი არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:155
+msgid "Password read interrupted"
+msgstr "პაროლის წაკითხვა შეწყვეტილია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:156
+msgid "Illegal character in component name"
+msgstr "კომპონენტის სახელი დაუშვებელ სიმბოლოს შეიცავს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:157
+msgid "Malformed representation of principal"
+msgstr "პრინციპალის წარმოდგენა არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:158
+msgid "Can't open/find Kerberos configuration file"
+msgstr "Kernberos-ის კონფიგურაციის ფაილის გახსნის/პოვნის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:159
+msgid "Improper format of Kerberos configuration file"
+msgstr "Kerberos-ის კონფიგურაციის ფაილის არასწორი ფორმატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:160
+msgid "Insufficient space to return complete information"
+msgstr "სრული ინფორმაციის დასაბრუნებლად ადგილი საკმარისი არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:161
+msgid "Invalid message type specified for encoding"
+msgstr "კოდირებისთვის მითითებული შეტყობინების ტიპი არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:162
+msgid "Credential cache name malformed"
+msgstr "არასწორად ფორმირებული ავტორიზაციის დეტალების ქეშის სახელი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:163
+msgid "Unknown credential cache type"
+msgstr "ავტორიზაციის დეტალების ქეშის არასწორი ტიპი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:164
+msgid "Matching credential not found"
+msgstr "შესაბამისი ავტორიზაციის დეტალები ნაპოვნი არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:165
+msgid "End of credential cache reached"
+msgstr "მივაღწიეთ ავტორიზაციის დეტალების ქეშის ბოლოს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:166
+msgid "Request did not supply a ticket"
+msgstr "მოთხოვნას ბილეთი არ მოუწოდებია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:167
+msgid "Wrong principal in request"
+msgstr "მოთხოვნაში მითითებული პრინციპალი არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:168
+msgid "Ticket has invalid flag set"
+msgstr "ბილეთზე დაყენებული ალმები არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:169
+msgid "Requested principal and ticket don't match"
+msgstr "მოთხოვნილი პრინციპალი და ბილეთი არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:170
+msgid "KDC reply did not match expectations"
+msgstr "KDC-ის პასუხი მოსალოდნელს არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:171
+msgid "Clock skew too great in KDC reply"
+msgstr "KDC-ის პასუხისთვის საათის აცდენა მეტისმეტად დიდია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:172
+msgid "Client/server realm mismatch in initial ticket request"
+msgstr ""
+"ბილეთის საწყის მოთხოვნაში კლიენტისა და სერვერის რეალმები ერთმანეთს არ "
+"ემთხვევა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:173
+msgid "Program lacks support for encryption type"
+msgstr "პროგრამას დაშიფვრის ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:174
+msgid "Program lacks support for key type"
+msgstr "პროგრამას გასაღების ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:175
+msgid "Requested encryption type not used in message"
+msgstr "შეტყობინებაში მოთხოვნილი დაშიფვრის ტიპი არ გამოიყენება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:176
+msgid "Program lacks support for checksum type"
+msgstr "პროგრამას საკონტროლო ჯამის ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:177
+msgid "Cannot find KDC for requested realm"
+msgstr "მოთხოვნილი რეალმისთვის KDC ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:178
+msgid "Kerberos service unknown"
+msgstr "Kerberos -ის უცნობი სერვისი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:179
+msgid "Cannot contact any KDC for requested realm"
+msgstr "მოთხოვნილი რეალმისთვის ვერც ერთ KDC-ს ვერ დავუკავშირდი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:180
+msgid "No local name found for principal name"
+msgstr "პრინციპალის სახელისთვის ლოკალური სახელი ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:182
+msgid "Replay cache type is already registered"
+msgstr "საპასუხო ქეშის ტიპი უკვე რეგისტრირებულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:183
+msgid "No more memory to allocate (in replay cache code)"
+msgstr "გამოსაყოფი მეხსიერება არ არსებობს (პასუხის ქეშის კოდში)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:184
+msgid "Replay cache type is unknown"
+msgstr "პასუხის ქეშის ტიპი უცნობია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:185
+msgid "Generic unknown RC error"
+msgstr "ზოგადი უცნობი RC შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:186
+msgid "Message is a replay"
+msgstr "შეტყობინება პასუხია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:187
+msgid "Replay cache I/O operation failed"
+msgstr "პასუხის ქეშთან მიმოცვლის ოპერაციის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:188
+msgid "Replay cache type does not support non-volatile storage"
+msgstr "პასუხის ქეშის ტიპს არააქროლადი საცავის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:189
+msgid "Replay cache name parse/format error"
+msgstr "პასუხის ქეშის სახელის დამუშავების/ფორმატის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:190
+msgid "End-of-file on replay cache I/O"
+msgstr "ფაილის-ბოლო პასუხის ქეშთან მიმოცვლისას"
+
+#: ../lib/krb5/error_tables/krb5_err.c:191
+msgid "No more memory to allocate (in replay cache I/O code)"
+msgstr "გამოსაყოფი მეხსიერება არ არსებობს (პასუხის ქეშთან მიმოცვლის კოდში)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:192
+msgid "Permission denied in replay cache code"
+msgstr "პასუხის ქეშის კოდის წვდომა აკრძალულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:193
+msgid "I/O error in replay cache i/o code"
+msgstr "მიმოცვლის შეცდომა პასუხის ქეშის მიმოცვლის კოდში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:194
+msgid "Generic unknown RC/IO error"
+msgstr "ზოგადი უცნობი RC/IO შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:195
+msgid "Insufficient system space to store replay information"
+msgstr "პასუხის ინფორმაციის დასამახსოვრებლად სისტემური ადგილი საკმარისი არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:196
+msgid "Can't open/find realm translation file"
+msgstr "რეალმის თარგმნის ფაილის გახსნის/პოვნის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:197
+msgid "Improper format of realm translation file"
+msgstr "რეალმის თარგმანის ფაილის არასწორი ფორმატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:198
+msgid "Can't open/find lname translation database"
+msgstr "Lname-ის თარგმანის ბაზის პოვნის/გახსნის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:199
+msgid "No translation available for requested principal"
+msgstr "მოთხოვნილი პრინციპალისთვის თარგმანი არ არსებობს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:200
+msgid "Improper format of translation database entry"
+msgstr "თარგმანის ბაზის ჩანაწერის არასწორი ფორმატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:201
+msgid "Cryptosystem internal error"
+msgstr "კრიპტოსისტემის შიდა შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:202
+msgid "Key table name malformed"
+msgstr "გასაღების ცხრილის სახელი არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:203
+msgid "Unknown Key table type"
+msgstr "გასაღების ცხრილის უცნობი ტიპი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:204
+msgid "Key table entry not found"
+msgstr "გასაღების ცხრილის ჩანაწერი ვერ ვპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:205
+msgid "End of key table reached"
+msgstr "მიღწეულია გასაღების ცხრილის ბოლო"
+
+#: ../lib/krb5/error_tables/krb5_err.c:206
+msgid "Cannot write to specified key table"
+msgstr "მითითებული გასაღების ცხრილში ჩაწერის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:207
+msgid "Error writing to key table"
+msgstr "გასაღებების ცხრილში ჩაწერის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:208
+msgid "Cannot find ticket for requested realm"
+msgstr "მოთხოვნილი რეალმისთვის ბილეთის პოვნის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:209
+msgid "DES key has bad parity"
+msgstr "DES გასაღებსი არასწორი პარიტეტი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:210
+msgid "DES key is a weak key"
+msgstr "DES გასაღები სუსტია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:211
+msgid "Bad encryption type"
+msgstr "არასწორი დაშიფვრის ტიპი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:212
+msgid "Key size is incompatible with encryption type"
+msgstr "გასაღების ზომა დაშიფვრის ტიპთან შეუთავსებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:213
+msgid "Message size is incompatible with encryption type"
+msgstr "შეტყობინების ზომა დაშიფვრის ტიპთან შეუთავსებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:214
+msgid "Credentials cache type is already registered."
+msgstr "ავტორიზაციის დეტალების ქეშის ტიპი უკვე რეგისტრირებულია."
+
+#: ../lib/krb5/error_tables/krb5_err.c:215
+msgid "Key table type is already registered."
+msgstr "გასაღებების ცხრილის ტიპი უკვე რეგისტრირებულია."
+
+#: ../lib/krb5/error_tables/krb5_err.c:216
+msgid "Credentials cache I/O operation failed"
+msgstr "ავტორიზაციის დეტალების ქეშთან მიმოცვლის ოპერაციის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:217
+msgid "Credentials cache permissions incorrect"
+msgstr "ავტორიზაციის დეტალების ქეშის წვდომები არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:218
+msgid "No credentials cache found"
+msgstr "ავტორიზაციის დეტალების ქეში არ არსებობს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:219
+msgid "Internal credentials cache error"
+msgstr "შიდა ავტორიზაციის დეტალების ქეშის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:220
+msgid "Error writing to credentials cache"
+msgstr "ავტორიზაციის დეტალების ქეშში ჩაწერის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:221
+msgid "No more memory to allocate (in credentials cache code)"
+msgstr "გამოსაყოფი მეხსიერება აღარ დარჩა (ავტორიზაციის დეტალების ქეშის კოდში)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:222
+msgid "Bad format in credentials cache"
+msgstr "არასწორი ფორმატი ავტორიზაციის დეტალების ქეშში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:223
+msgid "No credentials found with supported encryption types"
+msgstr "მხარდაჭერილი დაშიფვრის ტიპების მქონე ავტორიზაციის დეტალები ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:224
+msgid "Invalid KDC option combination (library internal error)"
+msgstr "KDC-ის პარამეტრების არასწორი კომბინაცია (ბიბლიოთეკის შიდა შეცდომა)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:225
+msgid "Request missing second ticket"
+msgstr "მოთხოვნას მეორე ბილეთი აკლია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:226
+msgid "No credentials supplied to library routine"
+msgstr "ბიბლიოთეკის ქვეპროგრამისთვის ავტორიზაციის დეტალები მიწოდებული არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:227
+msgid "Bad sendauth version was sent"
+msgstr "გაგზავნილი sendauth ვერსია არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:228
+msgid "Bad application version was sent (via sendauth)"
+msgstr "აპლიკაციის გაგზავნილი ვერსია არასწორია (sendauth-ით)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:229
+msgid "Bad response (during sendauth exchange)"
+msgstr "არასწორი პასუხი (sendauth-ით გაცვლისას)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:230
+msgid "Server rejected authentication (during sendauth exchange)"
+msgstr "სერვერმა ავტორიზაცია უარყო (sendauth-ით გაცვლისას)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:231
+msgid "Unsupported preauthentication type"
+msgstr "პრეავთენტიკაციის მხარდაუჭერელი ტიპი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:232
+msgid "Required preauthentication key not supplied"
+msgstr "პრეავთენტიკაცის გასაღების მიწოდება აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:233
+msgid "Generic preauthentication failure"
+msgstr "პრეავთენტიკაციის ზოგადი შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:234
+msgid "Unsupported replay cache format version number"
+msgstr "პასუხის ქეშის ფორმატის ვერსიის ნომერი მხარდაუჭერელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:235
+msgid "Unsupported credentials cache format version number"
+msgstr "ავტორიზაციის დეტალების ქეშის ფორმატის ვერსიის არასწორი ნომერი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:236
+msgid "Unsupported key table format version number"
+msgstr "გასაღებების ცხრილის ფორმატის ვერსიის არასწორი ნომერი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:237
+msgid "Program lacks support for address type"
+msgstr "პროგრამას მისამართის ტიპის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:238
+msgid "Message replay detection requires rcache parameter"
+msgstr "შეტყობინებაზე პასუხის აღმოჩენას rcache პარამეტრი სჭირდება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:239
+msgid "Hostname cannot be canonicalized"
+msgstr "ჰოსტის სახელის კანონიკალიზება სეუძლებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:240
+msgid "Cannot determine realm for host"
+msgstr "ჰოსტისთვის რეალმის დადგენის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:241
+msgid "Conversion to service principal undefined for name type"
+msgstr "სერვისის პრინციპალზე გარდაქმნა სახელის ტიისთვის შეუძლებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:242
+msgid "Initial Ticket response appears to be Version 4 error"
+msgstr "საწყისი ბილეთის პასუხი მეოთხე ვერსიის შეცდომას წააგავს"
+
+#: ../lib/krb5/error_tables/krb5_err.c:243
+msgid "Cannot resolve network address for KDC in requested realm"
+msgstr "მოთხოვნილ რეალმში KDC-ის ქსელური მისამართის ამოხსნის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:244
+msgid "Requesting ticket can't get forwardable tickets"
+msgstr "მომთხოვნი ბილეთები გადამისამართებადი ბილეთები ვერ იქნება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:245
+msgid "Bad principal name while trying to forward credentials"
+msgstr "ავტორიზაციის დეტალების გადაგზავნისას პრინციპალის სახელი არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:246
+msgid "Looping detected inside krb5_get_in_tkt"
+msgstr "Krb5_get_in_tkt_ის შიგნით მარყუჟი ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:247
+msgid "Configuration file does not specify default realm"
+msgstr "კონფიგურაციის ფაილში ნაგულისხმები რეალმი მითითებული არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:248
+msgid "Bad SAM flags in obtain_sam_padata"
+msgstr "არასწორი SAM ალმები obtain_sam_padata-ში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:249
+msgid "Invalid encryption type in SAM challenge"
+msgstr "არასწორი დაშიფვრის ტიპი SAM გამოწვევაში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:250
+msgid "Missing checksum in SAM challenge"
+msgstr "SAM გამოწვევაში საკონტროლო ჯამი ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:251
+msgid "Bad checksum in SAM challenge"
+msgstr "არასწორი საკონტროლო ჯამი SAM გამოწვევაში"
+
+#: ../lib/krb5/error_tables/krb5_err.c:252
+msgid "Keytab name too long"
+msgstr "Keytab -ის სახელი ძალიან გრძელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:253
+msgid "Key version number for principal in key table is incorrect"
+msgstr "პრინციპალისთვის გასაღებების ცხრილში გასაღების ვერსიის ნომერი არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:254
+msgid "This application has expired"
+msgstr "ეს აპლიკაცია ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:255
+msgid "This Krb5 library has expired"
+msgstr "ეს Krb5 ბიბლიოთეკა ვადაგასულია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:256
+msgid "New password cannot be zero length"
+msgstr "ახალი პაროლი ნულოვანი სიგრძის ვერ იქნება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:258
+msgid "Bad format in keytab"
+msgstr "Keytab-ის არასწორი ფორმატი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:259
+msgid "Encryption type not permitted"
+msgstr "დაშიფვრის ტიპი დაუშვებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:260
+msgid "No supported encryption types (config file error?)"
+msgstr "მხარდაჭერილი დაშიფვრის ტიპების გარეშე (კონფიგურაციის ფაილის შეცდომა?)"
+
+#: ../lib/krb5/error_tables/krb5_err.c:261
+msgid "Program called an obsolete, deleted function"
+msgstr "პროგრამამ მოძველებული, წაშლილი ფუნქცია გამოიძახა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:262
+msgid "unknown getaddrinfo failure"
+msgstr "getaddrinfo-ის უცნობი შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:263
+msgid "no data available for host/domain name"
+msgstr "ჰოსტის/დომენის სახელისთვის მონაცემები ხელმიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:264
+msgid "host/domain name not found"
+msgstr "ჰოსტის/დომენის სახელი ვერ ვიპოვე"
+
+#: ../lib/krb5/error_tables/krb5_err.c:265
+msgid "service name unknown"
+msgstr "სერვისის სახელი უცნობია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:266
+msgid "Cannot determine realm for numeric host address"
+msgstr "რიცხვითი ჰოსტის მისამართისთვის რეალმის განსაზღვრის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:267
+msgid "Invalid key generation parameters from KDC"
+msgstr "KDC-დან მიღებული გასაღების გენერაციის პარამეტრები არასწორია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:268
+msgid "service not available"
+msgstr "სერვისი ხელმიუწვდომელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:269
+msgid "Ccache function not supported: read-only ccache type"
+msgstr ""
+"Ccache-ის ფუნქცია განხორციელებული არაა: ccache-ის ტიპი მხოლოდ წაკითხვადია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:270
+msgid "Ccache function not supported: not implemented"
+msgstr "Ccache-ის ფუნქცია განხორციელებული არაა: განხორციელებული არაა"
+
+#: ../lib/krb5/error_tables/krb5_err.c:271
+msgid "Invalid format of Kerberos lifetime or clock skew string"
+msgstr ""
+"Kerberos-ის სიცოცხლის დროის არასწორი ფორმატი ან დროის აცდენა მეტისმეტად დიდია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:272
+msgid "Supplied data not handled by this plugin"
+msgstr "მოწოდებული მონაცემები ამ დამატების მიერ არ მუშავდება"
+
+#: ../lib/krb5/error_tables/krb5_err.c:273
+msgid "Plugin does not support the operation"
+msgstr "დამატებას ამ ოპერაციის მხარდაჭერა არ გააჩნია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:274
+msgid "Invalid UTF-8 string"
+msgstr "არასწორი UTF-8 სტრიქონი"
+
+#: ../lib/krb5/error_tables/krb5_err.c:275
+msgid "FAST protected pre-authentication required but not supported by KDC"
+msgstr ""
+"FAST-ით დაცული პრე-ავთენტიკაცია აუცილებელია, მაგრამ მხარდაუჭერელია KDC-ის "
+"მიერ"
+
+#: ../lib/krb5/error_tables/krb5_err.c:276
+msgid "Auth context must contain local address"
+msgstr "ავთენტიკაციის კონტექსტისთვის ლოკალური მისამართი აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:277
+msgid "Auth context must contain remote address"
+msgstr "ავთენტიკაციის კონტექსტისთვის დაშორებული მისამართი აუცილებელია"
+
+#: ../lib/krb5/error_tables/krb5_err.c:278
+msgid "Tracing unsupported"
+msgstr "ტრეისინგი მხარდაუჭერელია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:24
+msgid "Entry already exists in database"
+msgstr "ჩანაწერის ბაზაში უფრო არსებობს"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:25
+msgid "Database store error"
+msgstr "ბაზის შენახვის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:26
+msgid "Database read error"
+msgstr "ბაზის წაკითხვის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:27
+msgid "Insufficient access to perform requested operation"
+msgstr "არასაკმარისი წვდომები მოთხოვნილი ქმედების განსახორციელებლად"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:28
+msgid "No such entry in the database"
+msgstr "ბაზაში ასეთი ჩანაწერი არ არსებობს"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:29
+msgid "Illegal use of wildcard"
+msgstr "ვაილდ კარდის არასწორი გამოყენება"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:30
+msgid "Database is locked or in use--try again later"
+msgstr "ბაზა დაბლოკილია ან გამოიყენება--მოგვიანებით სცადეთ"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:31
+msgid "Database was modified during read"
+msgstr "ბაზა წაკითხვისას შეიცვალა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:32
+msgid "Database record is incomplete or corrupted"
+msgstr "ბაზის ჩანაწერი დაუსრულებელი ან დაზიანებულია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:33
+msgid "Attempt to lock database twice"
+msgstr "ბაზის ორჯერ დაბლოკვის მცდელობა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:34
+msgid "Attempt to unlock database when not locked"
+msgstr "ბაზის, რომელიც დაბლოკილი არაა, განბლოკვის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:35
+msgid "Invalid kdb lock mode"
+msgstr "KDB-ის ბლოკირებს არასწორი რეჟიმი"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:36
+msgid "Database has not been initialized"
+msgstr "ბაზა ინიციალიზებული არაა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:37
+msgid "Database has already been initialized"
+msgstr "ბაზა უკვე ინიციალიზებულია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:38
+msgid "Bad direction for converting keys"
+msgstr "გასაღებების გარდაქმნის არასწორი მიმართულება"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:39
+msgid "Cannot find master key record in database"
+msgstr "ბაზაში მთავარი გასაღების ჩანაწერის პოვნა შეუძლებელია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:40
+msgid "Master key does not match database"
+msgstr "მთავარი გასაღები ბაზას არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:41
+msgid "Key size in database is invalid"
+msgstr "ბაზაში ჩაწერილი გასაღების ზომა არასწორია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:42
+msgid "Cannot find/read stored master key"
+msgstr "დამახსოვრებული მთავარი გასაღების პოვნის/წაკითხვის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:43
+msgid "Stored master key is corrupted"
+msgstr "დამახსოვრებული მთავარი გასაღები დაზიანებულია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:44
+msgid "Cannot find active master key"
+msgstr "აქტიური მთავარი გასაღების პოვნა შეუძლებელია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:45
+msgid "KVNO of new master key does not match expected value"
+msgstr "ახალი მთავარი გასაღების KVNO მოსალოდნელ მნიშვნელობას არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:46
+msgid "Stored master key is not current"
+msgstr "დამახსოვერებული მთავარი გასაღები მიმდინარე არაა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:47
+msgid "Insufficient access to lock database"
+msgstr "არასაკმარისი წვდომები ბაზის დასაბლოკად"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:48
+msgid "Database format error"
+msgstr "ბაზის ფორმატის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:49
+msgid "Unsupported version in database entry"
+msgstr "ბაზის ჩანაწერის მხარდაუჭერელი ვერსია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:50
+msgid "Unsupported salt type"
+msgstr "მარილის მხარდაუჭერელი ტიპი"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:51
+msgid "Unsupported encryption type"
+msgstr "დაშიფვრის მხარდაუჭერელი ტიპი"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:52
+msgid "Bad database creation flags"
+msgstr "ბაზის შექმნის არასწორი ალმები"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:53
+msgid "No matching key in entry having a permitted enctype"
+msgstr "ჩანაწერში დაშვებული enctype-ის მქონე გასრები არ არსებობს"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:54
+msgid "No matching key in entry"
+msgstr "ჩანაწერში შესაბამისი გასაღები არ არსებობს"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:56
+msgid "Database type not supported"
+msgstr "ბაზის ტიპი მხარდაუჭერელია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:57
+msgid "Database library failed to initialize"
+msgstr "ბაზის ბიბლიოთეკის ინიციალიზაციის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:59
+msgid "Unable to access Kerberos database"
+msgstr "შეცდომა Kerberos-ის ბაზასთან წვდომისას"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:60
+msgid "Kerberos database internal error"
+msgstr "Kerberos-ის ბაზის შიდა შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:61
+msgid "Kerberos database constraints violated"
+msgstr "დარღვეულია Kerberos-ის ბაზის შეზღუდვები"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:62
+msgid "Update log conversion error"
+msgstr "განახლების ჟურნალის გარდაქმნის შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:63
+msgid "Update log is unstable"
+msgstr "განახლების ჟურნალი არასტაბილურია"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:64
+msgid "Update log is corrupt"
+msgstr "განახლების ჟურნალი დაზიანებული"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:65
+msgid "Generic update log error"
+msgstr "განახლების ჟურნალის საერთო შეცდომა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:66
+msgid "Database module does not match KDC version"
+msgstr "ბაზის მოდული KDC-ის ვერსიას არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/kdb5_err.c:68
+msgid "Too much string mapping data"
+msgstr "მეტისმეტად ბევრი სტრიქონების გადაბმის მონაცემები"
+
+#: ../lib/krb5/error_tables/asn1_err.c:23
+msgid "ASN.1 failed call to system time library"
+msgstr "ASN.1 -ის შეცდომა სისტემური დროის ბიბლიოთეკის გამოძახებისას"
+
+#: ../lib/krb5/error_tables/asn1_err.c:24
+msgid "ASN.1 structure is missing a required field"
+msgstr "ASN.1 -ის სტრუქტურას აუცილებელი ველი აკლია"
+
+#: ../lib/krb5/error_tables/asn1_err.c:25
+msgid "ASN.1 unexpected field number"
+msgstr "ASN.1 ველის მოულოდნელი ნომერი"
+
+#: ../lib/krb5/error_tables/asn1_err.c:26
+msgid "ASN.1 type numbers are inconsistent"
+msgstr "ASN.1 ტიპის ნომრები არამდგრადია"
+
+#: ../lib/krb5/error_tables/asn1_err.c:27
+msgid "ASN.1 value too large"
+msgstr "ASN.1 მნიშვნელობა ძალიან დიდია"
+
+#: ../lib/krb5/error_tables/asn1_err.c:28
+msgid "ASN.1 encoding ended unexpectedly"
+msgstr "ASN.1 დაშიფვრა მოულოდნელად დასრულდა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:29
+msgid "ASN.1 identifier doesn't match expected value"
+msgstr "ASN.1 იდენტიფიკატორი მოსალოდნელ მნიშვნელობას არ ემთხვევა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:30
+msgid "ASN.1 length doesn't match expected value"
+msgstr "ASN.1 სიგრძე მოსალოდნელ მნიშვნელობას არ ემთხევა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:31
+msgid "ASN.1 badly-formatted encoding"
+msgstr "ASN.1 ცუდი ფორმატის მქონე დაშიფვრა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:32
+msgid "ASN.1 parse error"
+msgstr "ASN.1 დამუშავების შეცდომა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:33
+msgid "ASN.1 bad return from gmtime"
+msgstr "ASN.1 არასწორი დაბრუნება gmtime-დან"
+
+#: ../lib/krb5/error_tables/asn1_err.c:34
+msgid "ASN.1 indefinite encoding"
+msgstr "ASN.1 დაუდგენელი დაშიფვრა"
+
+#: ../lib/krb5/error_tables/asn1_err.c:35
+msgid "ASN.1 missing expected EOC"
+msgstr "ASN.1 აკლია მოსალოდნელი EOC"
+
+#: ../lib/krb5/error_tables/asn1_err.c:36
+msgid "ASN.1 object omitted in sequence"
+msgstr "ASN.1 მიმდევრობაში ობიექტი ამოღებულია"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:23
+msgid "Kerberos V5 magic number table"
+msgstr "Kerberos V5 ჯადოსნური რიცხვების ცხრილი"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:24
+msgid "Bad magic number for krb5_principal structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_principal"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:25
+msgid "Bad magic number for krb5_data structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_data"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:26
+msgid "Bad magic number for krb5_keyblock structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_keyblock"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:27
+msgid "Bad magic number for krb5_checksum structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_checksum"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:28
+msgid "Bad magic number for krb5_encrypt_block structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_encrypt_block"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:29
+msgid "Bad magic number for krb5_enc_data structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_enc_data"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:30
+msgid "Bad magic number for krb5_cryptosystem_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_cryptosystem_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:31
+msgid "Bad magic number for krb5_cs_table_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_cs_table_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:32
+msgid "Bad magic number for krb5_checksum_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_checksum_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:33
+msgid "Bad magic number for krb5_authdata structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_authdata"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:34
+msgid "Bad magic number for krb5_transited structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_tansited"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:35
+msgid "Bad magic number for krb5_enc_tkt_part structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_enc_tkt_part"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:36
+msgid "Bad magic number for krb5_ticket structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_ticket"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:37
+msgid "Bad magic number for krb5_authenticator structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_authenticator"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:38
+msgid "Bad magic number for krb5_tkt_authent structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_tkt_authent"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:39
+msgid "Bad magic number for krb5_creds structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_creds"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:40
+msgid "Bad magic number for krb5_last_req_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_last_req_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:41
+msgid "Bad magic number for krb5_pa_data structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_enc_data"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:42
+msgid "Bad magic number for krb5_kdc_req structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_kdc_req"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:43
+msgid "Bad magic number for krb5_enc_kdc_rep_part structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_enc_kdc_rep_part"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:44
+msgid "Bad magic number for krb5_kdc_rep structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_kdc_rep"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:45
+msgid "Bad magic number for krb5_error structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_error"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:46
+msgid "Bad magic number for krb5_ap_req structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_ap_req"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:47
+msgid "Bad magic number for krb5_ap_rep structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_ap_rep"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:48
+msgid "Bad magic number for krb5_ap_rep_enc_part structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_ap_rep_enc_part"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:49
+msgid "Bad magic number for krb5_response structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_response"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:50
+msgid "Bad magic number for krb5_safe structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_safe"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:51
+msgid "Bad magic number for krb5_priv structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_priv"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:52
+msgid "Bad magic number for krb5_priv_enc_part structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_priv_enc_part"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:53
+msgid "Bad magic number for krb5_cred structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_cred"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:54
+msgid "Bad magic number for krb5_cred_info structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_cred_info"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:55
+msgid "Bad magic number for krb5_cred_enc_part structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_cred_enc_part"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:56
+msgid "Bad magic number for krb5_pwd_data structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_pwd_data"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:57
+msgid "Bad magic number for krb5_address structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_address"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:58
+msgid "Bad magic number for krb5_keytab_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_keytab_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:59
+msgid "Bad magic number for krb5_context structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_context"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:60
+msgid "Bad magic number for krb5_os_context structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_os_context"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:61
+msgid "Bad magic number for krb5_alt_method structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_alt_method"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:62
+msgid "Bad magic number for krb5_etype_info_entry structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_etype_info_entry"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:63
+msgid "Bad magic number for krb5_db_context structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_db_context"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:64
+msgid "Bad magic number for krb5_auth_context structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_auth_context"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:65
+msgid "Bad magic number for krb5_keytab structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_keytab"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:66
+msgid "Bad magic number for krb5_rcache structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_rcache"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:67
+msgid "Bad magic number for krb5_ccache structure"
+msgstr "არასწორი ჯადოსნური რიცხვი სტრუქტურისთვის krb5_ccache"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:68
+msgid "Bad magic number for krb5_preauth_ops"
+msgstr "არასწორი ჯადოსნური რიცხვი krb_preauth_ops -სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:69
+msgid "Bad magic number for krb5_sam_challenge"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_sam_challenge-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:70
+msgid "Bad magic number for krb5_sam_challenge_2"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_sam_challenge_2-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:71
+msgid "Bad magic number for krb5_sam_key"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_sam_key-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:72
+#: ../lib/krb5/error_tables/kv5m_err.c:73
+msgid "Bad magic number for krb5_enc_sam_response_enc"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_enc_sam_reponse_enc-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:74
+msgid "Bad magic number for krb5_sam_response"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_sam_response-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:75
+msgid "Bad magic number for krb5_sam_response 2"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_sam_response 2-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:76
+msgid "Bad magic number for krb5_predicted_sam_response"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_predicted_sam_reponse-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:77
+msgid "Bad magic number for passwd_phrase_element"
+msgstr "არასწორი ჯადოსნური რიცხვი passwd_phrase_element-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:78
+msgid "Bad magic number for GSSAPI OID"
+msgstr "არასწორი ჯადოსნური რიცხვი GSSAPI OID-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:79
+msgid "Bad magic number for GSSAPI QUEUE"
+msgstr "არასწორი ჯადოსნური რიცხვი GSSAPI QUEUE-სთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:80
+msgid "Bad magic number for fast armored request"
+msgstr "არასწორი ჯადოსნური რიცხვი სწრაფი დაჯავშნული მოთხოვნისთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:81
+msgid "Bad magic number for FAST request"
+msgstr "არასწორი ჯადოსნური რიცხვი სწრაფი მოთხოვნისთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:82
+msgid "Bad magic number for FAST response"
+msgstr "არასწორი ჯადოსნური რიცხვი სწრაფი პასუხისთვის"
+
+#: ../lib/krb5/error_tables/kv5m_err.c:83
+msgid "Bad magic number for krb5_authdata_context"
+msgstr "არასწორი ჯადოსნური რიცხვი krb5_authdata_context-სთვის"
+
+#: ../lib/krb5/error_tables/krb524_err.c:23
+msgid "Cannot convert V5 keyblock"
+msgstr "გადაყვანა შეუძლებელია V5 keyblock"
+
+#: ../lib/krb5/error_tables/krb524_err.c:24
+msgid "Cannot convert V5 address information"
+msgstr "გადაყვანა შეუძლებელია V5 მისამართის ინფორმაცია"
+
+#: ../lib/krb5/error_tables/krb524_err.c:25
+msgid "Cannot convert V5 principal"
+msgstr "გადაყვანა შეუძლებელია V5 პრინციპალი"
+
+#: ../lib/krb5/error_tables/krb524_err.c:26
+msgid "V5 realm name longer than V4 maximum"
+msgstr "V5 რეალმის სახელი V4-ის მაქსიმუმზე გრძელია"
+
+#: ../lib/krb5/error_tables/krb524_err.c:27
+msgid "Kerberos V4 error"
+msgstr "Kerberos V4 -ის შეცდომა"
+
+#: ../lib/krb5/error_tables/krb524_err.c:28
+msgid "Encoding too large"
+msgstr "დაშიფვრა ძალიან დიდია"
+
+#: ../lib/krb5/error_tables/krb524_err.c:29
+msgid "Decoding out of data"
+msgstr "დეკოდერს მონაცემები არ ყოფნის"
+
+#: ../lib/krb5/error_tables/krb524_err.c:30
+msgid "Service not responding"
+msgstr "სერვისი არ პასუხობს"
+
+#: ../lib/krb5/error_tables/krb524_err.c:31
+msgid "Kerberos version 4 support is disabled"
+msgstr "Kerberos ვერსია 4 -ის მხარდაჭერა გათიშულია"
#, fuzzy
msgid ""
msgstr ""
-"Project-Id-Version: mit-krb5 1.20.1\n"
+"Project-Id-Version: mit-krb5 1.21.2\n"
"Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2022-11-11 18:04-0500\n"
+"POT-Creation-Date: 2023-08-14 02:19-0400\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
#: ../../src/clients/kdestroy/kdestroy.c:150
#: ../../src/clients/klist/klist.c:241 ../../src/clients/ksu/main.c:135
#: ../../src/clients/ksu/main.c:141 ../../src/clients/kswitch/kswitch.c:94
-#: ../../src/kadmin/ktutil/ktutil.c:52 ../../src/kdc/main.c:929
-#: ../../src/kprop/kprop.c:103 ../../src/kprop/kpropd.c:1058
+#: ../../src/kadmin/ktutil/ktutil.c:52 ../../src/kdc/main.c:925
+#: ../../src/kprop/kprop.c:103 ../../src/kprop/kpropd.c:1059
msgid "while initializing krb5"
msgstr ""
msgstr ""
#: ../../src/clients/kdestroy/kdestroy.c:190
-#: ../../src/clients/kswitch/kswitch.c:107 ../../src/clients/kvno/kvno.c:311
-#: ../../src/clients/kvno/kvno.c:517 ../../src/kadmin/cli/keytab.c:373
+#: ../../src/clients/kswitch/kswitch.c:107 ../../src/clients/kvno/kvno.c:316
+#: ../../src/clients/kvno/kvno.c:522 ../../src/kadmin/cli/keytab.c:373
#: ../../src/kadmin/dbutil/kdb5_util.c:544
#, c-format
msgid "while parsing principal name %s"
msgid "while setting up KDB keytab for realm %s"
msgstr ""
-#: ../../src/clients/kinit/kinit.c:710 ../../src/clients/kvno/kvno.c:508
+#: ../../src/clients/kinit/kinit.c:710 ../../src/clients/kvno/kvno.c:513
#, c-format
msgid "resolving keytab %s"
msgstr ""
msgstr ""
#: ../../src/clients/klist/klist.c:674 ../../src/clients/ksu/ccache.c:440
-#: ../../src/kprop/kpropd.c:1205 ../../src/kprop/kpropd.c:1270
+#: ../../src/kprop/kpropd.c:1206 ../../src/kprop/kpropd.c:1271
msgid "while unparsing client name"
msgstr ""
msgid "Unexpected header line"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:273
+#: ../../src/clients/kvno/kvno.c:278
msgid "Invalid base64"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:319
+#: ../../src/clients/kvno/kvno.c:324
#, c-format
msgid "while formatting parsed principal name for '%s'"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:333
+#: ../../src/clients/kvno/kvno.c:338
msgid "client and server principal names must match"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:349
+#: ../../src/clients/kvno/kvno.c:354
#, c-format
msgid "while getting credentials for %s"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:356
+#: ../../src/clients/kvno/kvno.c:361
#, c-format
msgid "while decoding ticket for %s"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:367
+#: ../../src/clients/kvno/kvno.c:372
#, c-format
msgid "while decrypting ticket for %s"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:371
+#: ../../src/clients/kvno/kvno.c:376
#, c-format
msgid "%s: kvno = %d, keytab entry valid\n"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:376
+#: ../../src/clients/kvno/kvno.c:381
#, c-format
msgid "%s: kvno = %d\n"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:391
+#: ../../src/clients/kvno/kvno.c:396
#, c-format
msgid "%s: constrained delegation failed"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:474 ../../src/kadmin/cli/kadmin.c:311
+#: ../../src/clients/kvno/kvno.c:479 ../../src/kadmin/cli/kadmin.c:311
msgid "while initializing krb5 library"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:481
+#: ../../src/clients/kvno/kvno.c:486
msgid "while converting etype"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:493
+#: ../../src/clients/kvno/kvno.c:498
msgid "while opening ccache"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:500
+#: ../../src/clients/kvno/kvno.c:505
msgid "while resolving output ccache"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:525
+#: ../../src/clients/kvno/kvno.c:530
#, c-format
msgid "while reading certificate file %s"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:535
+#: ../../src/clients/kvno/kvno.c:540
#, c-format
msgid "while getting user-to-user ticket from %s"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:544
+#: ../../src/clients/kvno/kvno.c:549
msgid "while getting client principal name"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:551
+#: ../../src/clients/kvno/kvno.c:556
msgid "while creating temporary output ccache"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:565
+#: ../../src/clients/kvno/kvno.c:570
msgid "while initializing output ccache"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:575
+#: ../../src/clients/kvno/kvno.c:580
msgid "while storing creds in output ccache"
msgstr ""
-#: ../../src/clients/kvno/kvno.c:586
+#: ../../src/clients/kvno/kvno.c:591
msgid "while writing output ccache"
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_create.c:186
#: ../../src/kadmin/dbutil/kdb5_util.c:389
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:574
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:566
msgid "while setting up master key name"
msgstr ""
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_create.c:202
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:483
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:475
#, c-format
msgid "You will be prompted for the database Master Password.\n"
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_create.c:203
#: ../../src/kadmin/dbutil/kdb5_mkey.c:255
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:484
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:476
#, c-format
msgid "It is important that you NOT FORGET this password.\n"
msgstr ""
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_create.c:217
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:494
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:486
msgid "while reading master key from keyboard"
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_create.c:227
#: ../../src/kadmin/dbutil/kdb5_mkey.c:280
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:586
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:578
msgid "while calculating master key salt"
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_create.c:235
#: ../../src/kadmin/dbutil/kdb5_mkey.c:289
#: ../../src/kadmin/dbutil/kdb5_util.c:431
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:598
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:590
msgid "while transforming master key from password"
msgstr ""
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_create.c:294
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:610
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:602
msgid "while adding entries to the database"
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_create.c:322
#: ../../src/kadmin/dbutil/kdb5_mkey.c:333
#: ../../src/kadmin/dbutil/kdb5_stash.c:133
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:635
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:627
msgid "while storing key"
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_create.c:323
#: ../../src/kadmin/dbutil/kdb5_mkey.c:334
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:636
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:628
#, c-format
msgid "Warning: couldn't stash master key.\n"
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_destroy.c:71
#: ../../src/kadmin/dbutil/kdb5_mkey.c:1111
#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:360
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1442
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1434
#, c-format
msgid "(type 'yes' to confirm)? "
msgstr ""
msgstr ""
#: ../../src/kadmin/dbutil/kdb5_util.c:378
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:849
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1457
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:841
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1449
#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_util.c:568
msgid "while initializing database"
msgstr ""
msgid "starting"
msgstr ""
-#: ../../src/kadmin/server/ovsec_kadmd.c:544 ../../src/kdc/main.c:1040
+#: ../../src/kadmin/server/ovsec_kadmd.c:544 ../../src/kdc/main.c:1036
#, c-format
msgid "%s: starting...\n"
msgstr ""
"vers=%d, flavor=%d"
msgstr ""
-#: ../../src/kdc/do_as_req.c:277
+#: ../../src/kdc/do_as_req.c:278
#, c-format
msgid "AS_REQ : handle_authdata (%d)"
msgstr ""
-#: ../../src/kdc/do_tgs_req.c:581
+#: ../../src/kdc/do_tgs_req.c:938
msgid "not checking transit path"
msgstr ""
-#: ../../src/kdc/do_tgs_req.c:598
+#: ../../src/kdc/do_tgs_req.c:1045
#, c-format
msgid "TGS_REQ : handle_authdata (%d)"
msgstr ""
-#: ../../src/kdc/fast_util.c:56
+#: ../../src/kdc/fast_util.c:57
#, c-format
msgid "%s while handling ap-request armor"
msgstr ""
msgid "No armor key but FAST armored request present"
msgstr ""
-#: ../../src/kdc/fast_util.c:218
+#: ../../src/kdc/fast_util.c:216
msgid "FAST req_checksum invalid; request modified"
msgstr ""
-#: ../../src/kdc/fast_util.c:224
+#: ../../src/kdc/fast_util.c:222
msgid "Unkeyed checksum used in fast_req"
msgstr ""
msgid "AS_REQ (%s) %s: %s: %s for %s%s%s"
msgstr ""
-#: ../../src/kdc/kdc_log.c:153
+#: ../../src/kdc/kdc_log.c:154
#, c-format
msgid "TGS_REQ (%s) %s: %s: authtime %u, %s%s %s for %s%s%s"
msgstr ""
-#: ../../src/kdc/kdc_log.c:162
+#: ../../src/kdc/kdc_log.c:163
#, c-format
msgid "... PROTOCOL-TRANSITION s4u-client=%s"
msgstr ""
-#: ../../src/kdc/kdc_log.c:166
+#: ../../src/kdc/kdc_log.c:167
#, c-format
msgid "... CONSTRAINED-DELEGATION s4u-client=%s"
msgstr ""
-#: ../../src/kdc/kdc_log.c:170
+#: ../../src/kdc/kdc_log.c:171
#, c-format
msgid "TGS_REQ %s: %s: authtime %u, %s for %s, 2nd tkt client %s"
msgstr ""
-#: ../../src/kdc/kdc_log.c:203
+#: ../../src/kdc/kdc_log.c:204
#, c-format
msgid "bad realm transit path from '%s' to '%s' via '%.*s%s'"
msgstr ""
-#: ../../src/kdc/kdc_log.c:209
+#: ../../src/kdc/kdc_log.c:210
#, c-format
msgid "unexpected error checking transit from '%s' to '%s' via '%.*s%s': %s"
msgstr ""
-#: ../../src/kdc/kdc_log.c:227
+#: ../../src/kdc/kdc_log.c:228
msgid "TGS_REQ: issuing alternate <un-unparsable> TGT"
msgstr ""
-#: ../../src/kdc/kdc_log.c:230
+#: ../../src/kdc/kdc_log.c:231
#, c-format
msgid "TGS_REQ: issuing TGT %s"
msgstr ""
msgid "Incorrect password in encrypted challenge"
msgstr ""
-#: ../../src/kdc/kdc_util.c:182
+#: ../../src/kdc/kdc_util.c:179
msgid "TGS_REQ: SESSION KEY or MUTUAL"
msgstr ""
-#: ../../src/kdc/kdc_util.c:380
+#: ../../src/kdc/kdc_util.c:378
#, c-format
msgid "TGS_REQ: UNKNOWN SERVER: server='%s'"
msgstr ""
-#: ../../src/kdc/kdc_util.c:842
+#: ../../src/kdc/kdc_util.c:541
+#, c-format
+msgid "Invalid pac_privsvr_enctype value %s"
+msgstr ""
+
+#: ../../src/kdc/kdc_util.c:882
#, c-format
msgid "Required auth indicators not present in ticket: %s"
msgstr ""
"arguments\n"
msgstr ""
-#: ../../src/kdc/main.c:658 ../../src/kdc/main.c:665 ../../src/kdc/main.c:780
+#: ../../src/kdc/main.c:656 ../../src/kdc/main.c:663 ../../src/kdc/main.c:778
#, c-format
msgid " KDC cannot initialize. Not enough memory\n"
msgstr ""
-#: ../../src/kdc/main.c:684 ../../src/kdc/main.c:727 ../../src/kdc/main.c:738
+#: ../../src/kdc/main.c:682 ../../src/kdc/main.c:725 ../../src/kdc/main.c:736
#, c-format
msgid "%s: KDC cannot initialize. Not enough memory\n"
msgstr ""
-#: ../../src/kdc/main.c:704 ../../src/kdc/main.c:817
+#: ../../src/kdc/main.c:702 ../../src/kdc/main.c:815
#, c-format
msgid "%s: cannot initialize realm %s - see log file for details\n"
msgstr ""
-#: ../../src/kdc/main.c:715
+#: ../../src/kdc/main.c:713
#, c-format
msgid "%s: cannot initialize realm %s. Not enough memory\n"
msgstr ""
-#: ../../src/kdc/main.c:766
+#: ../../src/kdc/main.c:764
#, c-format
msgid "invalid enctype %s"
msgstr ""
-#: ../../src/kdc/main.c:805
+#: ../../src/kdc/main.c:803
msgid "while attempting to retrieve default realm"
msgstr ""
-#: ../../src/kdc/main.c:807
+#: ../../src/kdc/main.c:805
#, c-format
msgid "%s: %s, attempting to retrieve default realm\n"
msgstr ""
-#: ../../src/kdc/main.c:915
+#: ../../src/kdc/main.c:911
#, c-format
msgid "%s: cannot get memory for realm list\n"
msgstr ""
-#: ../../src/kdc/main.c:950
+#: ../../src/kdc/main.c:946
msgid "while initializing lookaside cache"
msgstr ""
-#: ../../src/kdc/main.c:958
+#: ../../src/kdc/main.c:954
msgid "while creating main loop"
msgstr ""
-#: ../../src/kdc/main.c:967
+#: ../../src/kdc/main.c:963
msgid "while loading KDC policy plugin"
msgstr ""
-#: ../../src/kdc/main.c:992
+#: ../../src/kdc/main.c:988
msgid "while initializing signal handlers"
msgstr ""
-#: ../../src/kdc/main.c:1000
+#: ../../src/kdc/main.c:996
msgid "while initializing network"
msgstr ""
-#: ../../src/kdc/main.c:1010
+#: ../../src/kdc/main.c:1006
msgid "while detaching from tty"
msgstr ""
-#: ../../src/kdc/main.c:1016
+#: ../../src/kdc/main.c:1012
msgid "while creating PID file"
msgstr ""
-#: ../../src/kdc/main.c:1024
+#: ../../src/kdc/main.c:1020
msgid "creating worker processes"
msgstr ""
-#: ../../src/kdc/main.c:1034
+#: ../../src/kdc/main.c:1030
msgid "while loading audit plugin module(s)"
msgstr ""
-#: ../../src/kdc/main.c:1038
+#: ../../src/kdc/main.c:1034
msgid "commencing operation"
msgstr ""
-#: ../../src/kdc/main.c:1045
+#: ../../src/kdc/main.c:1041
msgid "shutting down"
msgstr ""
msgid "while connecting to server"
msgstr ""
-#: ../../src/kprop/kprop.c:269 ../../src/kprop/kpropd.c:1195
+#: ../../src/kprop/kprop.c:269 ../../src/kprop/kpropd.c:1196
msgid "while getting local socket address"
msgstr ""
msgstr ""
#: ../../src/kprop/kprop.c:308 ../../src/kprop/kprop.c:506
-#: ../../src/kprop/kpropd.c:1515
+#: ../../src/kprop/kpropd.c:1516
#, c-format
msgid "Generic remote error: %s\n"
msgstr ""
msgid "ERROR returned by primary KDC, bailing.\n"
msgstr ""
-#: ../../src/kprop/kpropd.c:1108
+#: ../../src/kprop/kpropd.c:1109
msgid "copying db args"
msgstr ""
-#: ../../src/kprop/kpropd.c:1133
+#: ../../src/kprop/kpropd.c:1134
msgid "Unable to get default realm"
msgstr ""
-#: ../../src/kprop/kpropd.c:1140
+#: ../../src/kprop/kpropd.c:1141
msgid "Unable to set default realm"
msgstr ""
-#: ../../src/kprop/kpropd.c:1150
+#: ../../src/kprop/kpropd.c:1151
msgid "while trying to construct my service name"
msgstr ""
-#: ../../src/kprop/kpropd.c:1157
+#: ../../src/kprop/kpropd.c:1158
msgid "while allocating filename for temp file"
msgstr ""
-#: ../../src/kprop/kpropd.c:1165
+#: ../../src/kprop/kpropd.c:1166
msgid "while initializing"
msgstr ""
-#: ../../src/kprop/kpropd.c:1173
+#: ../../src/kprop/kpropd.c:1174
msgid "Unable to map log!\n"
msgstr ""
-#: ../../src/kprop/kpropd.c:1215
+#: ../../src/kprop/kpropd.c:1216
#, c-format
msgid "Error in krb5_auth_con_ini: %s"
msgstr ""
-#: ../../src/kprop/kpropd.c:1223
+#: ../../src/kprop/kpropd.c:1224
#, c-format
msgid "Error in krb5_auth_con_setflags: %s"
msgstr ""
-#: ../../src/kprop/kpropd.c:1236
+#: ../../src/kprop/kpropd.c:1237
#, c-format
msgid "Error in krb5_auth_con_setaddrs: %s"
msgstr ""
-#: ../../src/kprop/kpropd.c:1244
+#: ../../src/kprop/kpropd.c:1245
#, c-format
msgid "Error in krb5_kt_resolve: %s"
msgstr ""
-#: ../../src/kprop/kpropd.c:1253
+#: ../../src/kprop/kpropd.c:1254
#, c-format
msgid "Error in krb5_recvauth: %s"
msgstr ""
-#: ../../src/kprop/kpropd.c:1260
+#: ../../src/kprop/kpropd.c:1261
#, c-format
msgid "Error in krb5_copy_prinicpal: %s"
msgstr ""
-#: ../../src/kprop/kpropd.c:1277
+#: ../../src/kprop/kpropd.c:1278
msgid "while unparsing ticket etype"
msgstr ""
-#: ../../src/kprop/kpropd.c:1281
+#: ../../src/kprop/kpropd.c:1282
#, c-format
msgid "authenticated client: %s (etype == %s)\n"
msgstr ""
-#: ../../src/kprop/kpropd.c:1361
+#: ../../src/kprop/kpropd.c:1362
msgid "while reading size of database from client"
msgstr ""
-#: ../../src/kprop/kpropd.c:1371
+#: ../../src/kprop/kpropd.c:1372
msgid "while decoding database size from client"
msgstr ""
-#: ../../src/kprop/kpropd.c:1379
+#: ../../src/kprop/kpropd.c:1380
msgid "malformed database size message from client"
msgstr ""
-#: ../../src/kprop/kpropd.c:1391
+#: ../../src/kprop/kpropd.c:1392
msgid "while initializing i_vector"
msgstr ""
-#: ../../src/kprop/kpropd.c:1396
+#: ../../src/kprop/kpropd.c:1397
#, c-format
msgid "Full propagation transfer started.\n"
msgstr ""
-#: ../../src/kprop/kpropd.c:1450
+#: ../../src/kprop/kpropd.c:1451
#, c-format
msgid "Full propagation transfer finished.\n"
msgstr ""
-#: ../../src/kprop/kpropd.c:1510
+#: ../../src/kprop/kpropd.c:1511
msgid "while decoding error packet from client"
msgstr ""
-#: ../../src/kprop/kpropd.c:1519
+#: ../../src/kprop/kpropd.c:1520
msgid "signaled from server"
msgstr ""
-#: ../../src/kprop/kpropd.c:1521
+#: ../../src/kprop/kpropd.c:1522
#, c-format
msgid "Error text from client: %s\n"
msgstr ""
-#: ../../src/kprop/kpropd.c:1570
+#: ../../src/kprop/kpropd.c:1571
#, c-format
msgid "while trying to fork %s"
msgstr ""
-#: ../../src/kprop/kpropd.c:1574
+#: ../../src/kprop/kpropd.c:1575
#, c-format
msgid "while trying to exec %s"
msgstr ""
-#: ../../src/kprop/kpropd.c:1581
+#: ../../src/kprop/kpropd.c:1582
#, c-format
msgid "while waiting for %s"
msgstr ""
-#: ../../src/kprop/kpropd.c:1587
+#: ../../src/kprop/kpropd.c:1588
#, c-format
msgid "%s load terminated"
msgstr ""
-#: ../../src/kprop/kpropd.c:1593
+#: ../../src/kprop/kpropd.c:1594
#, c-format
msgid "%s returned a bad exit status (%d)"
msgstr ""
msgid "An expected per-message token was not received"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1824
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1750
msgid "SPNEGO cannot find mechanisms to negotiate"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1826
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1752
msgid "SPNEGO failed to acquire creds"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1828
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1754
msgid "SPNEGO acceptor did not select a mechanism"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1830
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1756
msgid "SPNEGO failed to negotiate a mechanism"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1832
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1758
msgid "SPNEGO acceptor did not return a valid token"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1834
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1760
msgid "Invalid NegoEx signature"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1836
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1762
msgid "Invalid NegoEx message type"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1838
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1764
msgid "Invalid NegoEx message size"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1840
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1766
msgid "Invalid NegoEx conversation ID"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1842
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1768
msgid "NegoEx authentication scheme not found"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1844
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1770
msgid "Missing NegoEx negotiate message"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1846
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1772
msgid "Missing NegoEx authentication protocol request message"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1848
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1774
msgid "No mutually supported NegoEx authentication schemes"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1850
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1776
msgid "No NegoEx verify key"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1852
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1778
msgid "Unknown NegoEx checksum scheme"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1854
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1780
msgid "Invalid NegoEx checksum"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1856
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1782
msgid "Unsupported critical NegoEx extension"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1858
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1784
msgid "Unsupported NegoEx version"
msgstr ""
-#: ../../src/lib/gssapi/spnego/spnego_mech.c:1860
+#: ../../src/lib/gssapi/spnego/spnego_mech.c:1786
msgid "NegoEx message out of sequence"
msgstr ""
msgid "debug"
msgstr ""
-#: ../../src/lib/kadm5/logger.c:784
+#: ../../src/lib/kadm5/logger.c:785
#, c-format
msgid "Couldn't open log file %s: %s\n"
msgstr ""
"collection"
msgstr ""
-#: ../../src/lib/krb5/ccache/cc_kcm.c:908
+#: ../../src/lib/krb5/ccache/cc_kcm.c:946
#, c-format
msgid "Credentials cache 'KCM:%s' not found"
msgstr ""
msgid "Password change failed"
msgstr ""
-#: ../../src/lib/krb5/krb/chpw.c:431
+#: ../../src/lib/krb5/krb/chpw.c:432
msgid ""
"The password must include numbers or symbols. Don't include any part of "
"your name in the password."
msgstr ""
-#: ../../src/lib/krb5/krb/chpw.c:437
+#: ../../src/lib/krb5/krb/chpw.c:438
#, c-format
msgid "The password must contain at least %d character."
msgid_plural "The password must contain at least %d characters."
msgstr[0] ""
msgstr[1] ""
-#: ../../src/lib/krb5/krb/chpw.c:446
+#: ../../src/lib/krb5/krb/chpw.c:447
#, c-format
msgid "The password must be different from the previous password."
msgid_plural "The password must be different from the previous %d passwords."
msgstr[0] ""
msgstr[1] ""
-#: ../../src/lib/krb5/krb/chpw.c:458
+#: ../../src/lib/krb5/krb/chpw.c:459
#, c-format
msgid "The password can only be changed once a day."
msgid_plural "The password can only be changed every %d days."
msgstr[0] ""
msgstr[1] ""
-#: ../../src/lib/krb5/krb/chpw.c:504
+#: ../../src/lib/krb5/krb/chpw.c:503
msgid "Try a more complex password, or contact your administrator."
msgstr ""
msgid "Reply has wrong form of session key for anonymous request"
msgstr ""
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1570
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1569
#, c-format
msgid "Warning: Your password will expire in less than one hour on %s"
msgstr ""
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1574
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1573
#, c-format
msgid "Warning: Your password will expire in %d hour%s on %s"
msgstr ""
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1578
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1577
#, c-format
msgid "Warning: Your password will expire in %d days on %s"
msgstr ""
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1600
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1607
+#, c-format
msgid ""
-"Warning: encryption type des3-cbc-sha1 used for authentication is weak and "
-"will be disabled"
+"Warning: encryption type %s used for authentication is deprecated and will "
+"be disabled"
msgstr ""
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1844
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1852
msgid "Failed to store credentials"
msgstr ""
-#: ../../src/lib/krb5/krb/get_in_tkt.c:1939
+#: ../../src/lib/krb5/krb/get_in_tkt.c:1947
#, c-format
msgid "Client '%s' not found in Kerberos database"
msgstr ""
-#: ../../src/lib/krb5/krb/gic_keytab.c:225
+#: ../../src/lib/krb5/krb/gic_keytab.c:221
#, c-format
msgid "Keytab contains no suitable keys for %s"
msgstr ""
msgid "Could not find %s plugin module named '%s'"
msgstr ""
-#: ../../src/lib/krb5/krb/preauth2.c:309
+#: ../../src/lib/krb5/krb/preauth2.c:313
msgid "krb5_init_creds calls must use same library context"
msgstr ""
-#: ../../src/lib/krb5/krb/preauth2.c:717
+#: ../../src/lib/krb5/krb/preauth2.c:721
msgid "Pre-authentication failed"
msgstr ""
-#: ../../src/lib/krb5/krb/preauth2.c:1046
+#: ../../src/lib/krb5/krb/preauth2.c:1050
msgid "Unable to initialize preauth context"
msgstr ""
-#: ../../src/lib/krb5/krb/preauth2.c:1059
+#: ../../src/lib/krb5/krb/preauth2.c:1063
#, c-format
msgid "Preauth module %s"
msgstr ""
msgid "Vendor:"
msgstr ""
-#: ../../src/lib/krb5/krb/preauth_otp.c:525
+#: ../../src/lib/krb5/krb/preauth_otp.c:526
msgid "Enter #"
msgstr ""
-#: ../../src/lib/krb5/krb/preauth_otp.c:561
+#: ../../src/lib/krb5/krb/preauth_otp.c:562
msgid "OTP Challenge:"
msgstr ""
-#: ../../src/lib/krb5/krb/preauth_otp.c:590
+#: ../../src/lib/krb5/krb/preauth_otp.c:591
msgid "OTP Token PIN"
msgstr ""
-#: ../../src/lib/krb5/krb/preauth_otp.c:704
+#: ../../src/lib/krb5/krb/preauth_otp.c:705
msgid "OTP value doesn't match any token formats"
msgstr ""
-#: ../../src/lib/krb5/krb/preauth_otp.c:771
+#: ../../src/lib/krb5/krb/preauth_otp.c:772
msgid "Enter OTP Token Value"
msgstr ""
-#: ../../src/lib/krb5/krb/preauth_otp.c:917
+#: ../../src/lib/krb5/krb/preauth_otp.c:918
msgid "No supported tokens"
msgstr ""
msgstr ""
#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:69
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:859
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1060
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1467
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:851
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1052
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1459
msgid "while reading kerberos container information"
msgstr ""
#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:143
#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:504
#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:518
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:150
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:165
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:147
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:162
msgid "while providing time specification"
msgstr ""
msgstr ""
#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_policy.c:279
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1475
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1467
msgid "while reading realm information"
msgstr ""
msgid "while listing policy objects"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:419
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:411
#, c-format
msgid "for subtree while creating realm '%s'"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:431
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:423
#, c-format
msgid "for container reference while creating realm '%s'"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:456
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:448
#, c-format
msgid "invalid search scope while creating realm '%s'"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:471
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:795
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:463
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:787
#, c-format
msgid "'%s' is an invalid option\n"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:479
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:471
#, c-format
msgid "Initializing database for realm '%s'\n"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:503
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:664
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:495
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:656
#, c-format
msgid "while creating realm '%s'"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:523
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:515
#, c-format
msgid "Enter DN of Kerberos container: "
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:558
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:866
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:550
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:858
#, c-format
msgid "while reading information of realm '%s'"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:702
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:694
msgid "while reading Kerberos container information"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:745
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:737
#, c-format
msgid "for subtree while modifying realm '%s'"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:756
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:748
#, c-format
msgid "for container reference while modifying realm '%s'"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:784
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:776
#, c-format
msgid "specified for search scope while modifying information of realm '%s'"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:823
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:815
#, c-format
msgid "while modifying information of realm '%s'"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:912
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:904
msgid "Realm Name"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:915
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:907
msgid "Subtree"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:918
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:910
msgid "Principal Container Reference"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:923
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:925
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:915
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:917
msgid "SearchScope"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:923
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:915
msgid "Invalid !"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:930
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:922
msgid "KDC Services"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:945
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:937
msgid "Admin Services"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:960
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:952
msgid "Passwd Services"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:976
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:968
msgid "Maximum Ticket Life"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:981
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:973
msgid "Maximum Renewable Life"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:988
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:980
msgid "Ticket flags"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1067
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1059
msgid "while listing realms"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1399
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1391
msgid "while adding entries to database"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1440
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1432
#, c-format
msgid "Deleting KDC database of '%s', are you sure?\n"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1451
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1443
#, c-format
msgid "OK, deleting database of '%s'...\n"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1484
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1476
#, c-format
msgid "deleting database of '%s'"
msgstr ""
-#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1489
+#: ../../src/plugins/kdb/ldap/ldap_util/kdb5_ldap_realm.c:1481
#, c-format
msgid "** Database of '%s' destroyed.\n"
msgstr ""
msgid "No pkinit_anchors supplied"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:957
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:920
#, c-format
msgid "%s: %s"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:987
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:950
#, c-format
msgid "%s (depth %d): %s"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1230
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4180
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1193
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4133
msgid "Pass phrase for"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1516
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1526
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1784
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1794
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2271
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1479
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1489
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1743
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1753
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2224
msgid "Failed to DER encode PKCS7"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1617
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1576
msgid "Failed to verify own certificate"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1768
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1727
msgid "Failed to add digest attribute"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1890
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1849
msgid "Failed to decode CMS message"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1908
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1867
msgid "Invalid pkinit packet: octet string expected"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1926
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:1885
msgid "wrong oid\n"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2078
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2037
msgid "Failed to verify received certificate"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2114
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2068
msgid "Failed to verify CMS message"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2259
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2212
msgid "Failed to encrypt PKCS7 object"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2317
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2270
msgid "Failed to decode PKCS7"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2333
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2286
msgid "Failed to decrypt PKCS7 message"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2756
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2709
msgid "Failed to fetch SSKDF"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2763
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2716
msgid "Failed to instantiate SSKDF"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2776
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2729
msgid "Failed to derive key using SSKDF"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2838
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:2791
msgid "Failed to compute digest"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4300
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4253
#, c-format
msgid "Cannot read certificate file '%s'"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4308
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:4261
#, c-format
msgid "Cannot read key file '%s'"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5165
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5112
#, c-format
msgid "Cannot open file '%s'"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5172
+#: ../../src/plugins/preauth/pkinit/pkinit_crypto_openssl.c:5119
#, c-format
msgid "Cannot read file '%s'"
msgstr ""
msgid "OCSP is not supported: (realm: %s)"
msgstr ""
-#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1514
+#: ../../src/plugins/preauth/pkinit/pkinit_srv.c:1516
msgid "No realms configured correctly for pkinit support"
msgstr ""
msgid "error %ld"
msgstr ""
-#: ../../src/util/support/plugins.c:201
-#, c-format
-msgid "unable to find plugin [%s]: %s"
-msgstr ""
-
-#: ../../src/util/support/plugins.c:291
+#: ../../src/util/support/plugins.c:94 ../../src/util/support/plugins.c:116
msgid "unknown failure"
msgstr ""
-#: ../../src/util/support/plugins.c:294
+#: ../../src/util/support/plugins.c:96
#, c-format
msgid "unable to load plugin [%s]: %s"
msgstr ""
-#: ../../src/util/support/plugins.c:317
+#: ../../src/util/support/plugins.c:142
#, c-format
msgid "unable to load DLL [%s]"
msgstr ""
-#: ../../src/util/support/plugins.c:333
+#: ../../src/util/support/plugins.c:166
#, c-format
-msgid "plugin unavailable: %s"
+msgid "unable to get DLL Symbol: %s"
+msgstr ""
+
+#: ../../src/util/support/plugins.c:190
+msgid "plugin loading unavailable"
msgstr ""
#: ../lib/gssapi/generic/gssapi_err_generic.c:23
/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
/* prototype/prototype.c - <<< One-line description of file >>> */
/*
- * Copyright (C) 2022 by the Massachusetts Institute of Technology.
+ * Copyright (C) 2023 by the Massachusetts Institute of Technology.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
/* prototype/prototype.h - <<< One-line description of file >>> */
/*
- * Copyright (C) 2022 by the Massachusetts Institute of Technology.
+ * Copyright (C) 2023 by the Massachusetts Institute of Technology.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
# Test 18: no name/ccache specified, manually acquired creds with a
# client principal not present in the client keytab. A refresh is
# attempted but fails, and an expired ticket error results.
-realm.kinit(realm.admin_princ, password('admin'), ['-l', '-1s'])
+realm.kinit(realm.admin_princ, password('admin'), ['-l', '-10s'])
msgs = ('Getting initial credentials for user/admin@KRBTEST.COM',
'/Matching credential not found')
realm.run(['./t_ccselect', phost], expected_code=1,
# These tests make assumptions about the default enctype lists, so set
# them explicitly rather than relying on the library defaults.
supp='aes256-cts:normal aes128-cts:normal des3-cbc-sha1:normal rc4-hmac:normal'
-conf = {'libdefaults': {'permitted_enctypes': 'aes des3 rc4'},
+conf = {'libdefaults': {'permitted_enctypes': 'aes des3 rc4',
+ 'allow_des3': 'true', 'allow_rc4': 'true'},
'realms': {'$realm': {'supported_enctypes': supp}}}
realm = K5Realm(krb5_conf=conf)
shutil.copyfile(realm.ccache, os.path.join(realm.testdir, 'save'))
from k5test import *
-# Load the sample KDC authdata module.
+# Load the sample KDC authdata module. Allow renewable tickets.
greet_path = os.path.join(buildtop, 'plugins', 'authdata', 'greet_server',
'greet_server.so')
-conf = {'plugins': {'kdcauthdata': {'module': 'greet:' + greet_path}}}
+conf = {'realms': {'$realm': {'max_life': '20h', 'max_renewable_life': '20h'}},
+ 'plugins': {'kdcauthdata': {'module': 'greet:' + greet_path}}}
realm = K5Realm(krb5_conf=conf)
# With no requested authdata, we expect to see PAC (128) in an
# container.
mark('baseline authdata')
out = realm.run(['./adata', realm.host_princ])
-if '?128: [6, 7, 10, 16]' not in out or '^-42: Hello' not in out:
+if '?128: [6, 7, 10, 16, 19]' not in out or '^-42: Hello' not in out:
fail('expected authdata not seen for basic request')
# Requested authdata is copied into the ticket, with KDC-only types
if '128:' not in out or '^-42: Hello' not in out or ' -3: test' not in out:
fail('expected authdata not seen for cross-realm TGT request')
+mark('pac_privsvr_enctype')
+# Change the privsvr enctype and make sure we can still verify the PAC
+# on a service ticket in a TGS request.
+realm.run([kadminl, 'setstr', realm.host_princ,
+ 'pac_privsvr_enctype', 'aes128-sha1'])
+realm.kinit(realm.user_princ, password('user'),
+ ['-S', realm.host_princ, '-r', '1h'])
+realm.kinit(realm.user_princ, None, ['-S', realm.host_princ, '-R'])
+# Remove the attribute and make sure the previously-issued service
+# ticket PAC no longer verifies.
+realm.run([kadminl, 'delstr', realm.host_princ, 'pac_privsvr_enctype'])
+realm.kinit(realm.user_princ, None, ['-S', realm.host_princ, '-R'],
+ expected_code=1, expected_msg='Message stream modified')
+
realm.stop()
if not pkinit_enabled:
if '+97: [indcl]' not in out or '[inds1]' in out:
fail('correct auth-indicator not seen for S4U2Proxy req')
# Make sure a PAC with an S4U_DELEGATION_INFO(11) buffer is included.
-if '?128: [1, 6, 7, 10, 11, 16]' not in out:
+if '?128: [1, 6, 7, 10, 11, 16, 19]' not in out:
fail('PAC with delegation info not seen for S4U2Proxy req')
# Get another S4U2Proxy ticket including request-authdata.
realm.run([klist, '-s'], expected_code=1)
realm.kinit(realm.user_princ, password('user'))
realm.run([klist, '-s'])
-realm.kinit(realm.user_princ, password('user'), ['-l', '-1s'])
+realm.kinit(realm.user_princ, password('user'), ['-l', '-10s'])
realm.run([klist, '-s'], expected_code=1)
realm.kinit(realm.user_princ, password('user'), ['-S', 'kadmin/admin'])
realm.run([klist, '-s'])
from k5test import *
supported_enctypes = 'aes128-cts des3-cbc-sha1 rc4-hmac'
-conf = {'libdefaults': {'allow_weak_crypto': 'true'},
+conf = {'libdefaults': {'allow_des3': 'true', 'allow_rc4': 'true'},
'realms': {'$realm': {'supported_enctypes': supported_enctypes}}}
realm = K5Realm(create_host=False, get_creds=False, krb5_conf=conf)
realm.run([kadminl, 'purgekeys', realm.krbtgt_princ])
# Make sure an old TGT fails after purging old TGS key.
realm.run([kvno, princ2], expected_code=1)
-et = "aes128-cts-hmac-sha256-128"
-msg = 'krbtgt/%s@%s\n\tEtype (skey, tkt): %s, %s' % \
- (realm.realm, realm.realm, et, et)
+msg = 'krbtgt/%s@%s\n\tEtype (skey, tkt): ' \
+ 'aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha256-128' % \
+ (realm.realm, realm.realm)
realm.run([klist, '-e'], expected_msg=msg)
# Check that new key actually works.
'default_tkt_enctypes': 'aes128-cts',
'default_tgs_enctypes': 'rc4-hmac,aes128-cts'}}
conf4 = {'libdefaults': {'permitted_enctypes': 'aes256-cts'}}
+conf5 = {'libdefaults': {'allow_rc4': 'true'}}
+conf6 = {'libdefaults': {'allow_des3': 'true'}}
# Test with client request and session_enctypes preferring aes128, but
# aes256 long-term key.
realm = K5Realm(krb5_conf=conf1, create_host=False, get_creds=False)
'aes128-cts,aes256-cts'])
test_kvno(realm, 'aes128-cts-hmac-sha1-96', 'aes256-cts-hmac-sha1-96')
-# 3b: Negotiate rc4-hmac session key when principal only has aes256 long-term.
+# 3b: Skip RC4 (as the KDC does not allow it for session keys by
+# default) and negotiate aes128-cts session key, with only an aes256
+# long-term service key.
realm.run([kadminl, 'setstr', 'server', 'session_enctypes',
'rc4-hmac,aes128-cts,aes256-cts'])
-test_kvno(realm, 'DEPRECATED:arcfour-hmac', 'aes256-cts-hmac-sha1-96')
+test_kvno(realm, 'aes128-cts-hmac-sha1-96', 'aes256-cts-hmac-sha1-96')
realm.stop()
# 4: Check that permitted_enctypes is a default for session key enctypes.
expected_trace=('etypes requested in TGS request: aes256-cts',))
realm.stop()
+# 5: allow_rc4 permits negotiation of rc4-hmac session key.
+realm = K5Realm(krb5_conf=conf5, create_host=False, get_creds=False)
+realm.run([kadminl, 'addprinc', '-randkey', '-e', 'aes256-cts', 'server'])
+realm.run([kadminl, 'setstr', 'server', 'session_enctypes', 'rc4-hmac'])
+test_kvno(realm, 'DEPRECATED:arcfour-hmac', 'aes256-cts-hmac-sha1-96')
+realm.stop()
+
+# 6: allow_des3 permits negotiation of des3-cbc-sha1 session key.
+realm = K5Realm(krb5_conf=conf6, create_host=False, get_creds=False)
+realm.run([kadminl, 'addprinc', '-randkey', '-e', 'aes256-cts', 'server'])
+realm.run([kadminl, 'setstr', 'server', 'session_enctypes', 'des3-cbc-sha1'])
+test_kvno(realm, 'DEPRECATED:des3-cbc-sha1', 'aes256-cts-hmac-sha1-96')
+realm.stop()
+
+# 7: default config negotiates aes256-sha1 session key for RC4-only service.
+realm = K5Realm(create_host=False, get_creds=False)
+realm.run([kadminl, 'addprinc', '-randkey', '-e', 'rc4-hmac', 'server'])
+test_kvno(realm, 'aes256-cts-hmac-sha1-96', 'DEPRECATED:arcfour-hmac')
+realm.stop()
+
success('sesskeynego')
# figure out: table_number_base=table_number*256
tab_base_low = tab_base_low * 256
- tab_base_high = (tab_base_high * 256) + \
- int(tab_base_low / mod_base)
+ tab_base_high = (tab_base_high * 256) + int(tab_base_low / mod_base)
tab_base_low = tab_base_low % mod_base
if (table_number > 128*256*256) {
print "#include <com_err.h>" > outfile
print "" > outfile
if (tab_base_high == 0) {
- print "const struct error_table et_" table_name "_error_table = { text, " \
- sprintf("%dL, %d };", tab_base_sign*tab_base_low, \
- table_item_count) > outfile
+ base = sprintf("%dL", tab_base_sign * tab_base_low)
} else {
- print "const struct error_table et_" table_name "_error_table = { text, " \
- sprintf("%d%06dL, %d };", tab_base_sign*tab_base_high, \
- tab_base_low, table_item_count) > outfile
+ base = sprintf("%d%06dL", tab_base_sign * tab_base_high, tab_base_low)
}
+ ints = sprintf("%s, %d", base, table_item_count)
+ print "const struct error_table et_" table_name "_error_table = { text, " ints " };" > outfile
print "" > outfile
print "#if !defined(_WIN32)" > outfile
print "void initialize_" table_name "_error_table (void)" > outfile
# figure out: table_number_base=table_number*256
tab_base_low = tab_base_low * 256
- tab_base_high = (tab_base_high * 256) + \
- int(tab_base_low / mod_base)
+ tab_base_high = (tab_base_high * 256) + int(tab_base_low / mod_base)
tab_base_low = tab_base_low % mod_base
if (table_number > 128*256*256) {
/^[ \t]*(error_code|ec)[ \t]+[A-Z_0-9]+,/ {
tag=substr($2,1,length($2)-1)
if (curr_high == 0) {
- printf "#define %-40s (%dL)\n", tag, \
- curr_sign*curr_low > outfile
+ printf "#define %-40s (%dL)\n", tag, curr_sign*curr_low > outfile
} else {
- printf "#define %-40s (%d%06dL)\n", tag, curr_high*curr_sign, \
- curr_low > outfile
+ printf "#define %-40s (%d%06dL)\n", tag, curr_high*curr_sign, curr_low > outfile
}
curr_low += curr_sign;
if (curr_low >= mod_base) {
exit 1
}
if (tab_base_high == 0) {
- print "#define ERROR_TABLE_BASE_" table_name " (" \
- sprintf("%d", tab_base_sign*tab_base_low) \
- "L)" > outfile
+ base = sprintf("%dL", tab_base_sign * tab_base_low)
} else {
- print "#define ERROR_TABLE_BASE_" table_name " (" \
- sprintf("%d%06d", tab_base_sign*tab_base_high, \
- tab_base_low) "L)" > outfile
+ base = sprintf("%d%06dL", tab_base_sign * tab_base_high, tab_base_low)
}
+ print "#define ERROR_TABLE_BASE_" table_name " (" base ")" > outfile
print "" > outfile
print "extern const struct error_table et_" table_name "_error_table;" > outfile
print "" > outfile
while (<NM>) {
chop;
s/^[0-9a-fA-F]+ +//;
+ s/@@.*$//;
next if /^A /;
if (!/^[TDRBGS] /) {
unlink $libfile;
print("*** Last mark: %s" % _last_mark)
if _last_cmd:
print("*** Last command (#%d): %s" % (_cmd_index - 1, _last_cmd))
- if _last_cmd_output:
+ if _failed_daemon_output:
+ print('*** Output of failed daemon:')
+ sys.stdout.write(_failed_daemon_output)
+ elif _last_cmd_output:
print("*** Output of last command:")
sys.stdout.write(_last_cmd_output)
if _current_pass:
def success(msg):
global _success
- _check_daemons()
+ _stop_daemons()
output('*** Success: %s\n' % msg)
_success = True
def skip_rest(whatmsg, whymsg):
global _success
skipped(whatmsg, whymsg)
- _check_daemons()
+ _stop_daemons()
_success = True
sys.exit(0)
sys.stdout.flush()
sys.stdin.readline()
for proc in _daemons:
- if _check_daemon(proc) is None:
- os.kill(proc.pid, signal.SIGTERM)
+ os.kill(proc.pid, signal.SIGTERM)
+ _check_daemon(proc)
if not _success:
print
if not verbose:
return proc
-# Check a daemon's status prior to terminating it. Display its return
-# code if it already exited, and display any output it has generated.
-# Return the daemon's exit status or None if it is still running.
+# Await a daemon process's exit status and display it if it isn't
+# successful. Display any output it generated after the sentinel.
+# Return the daemon's exit status (0 if it terminated with SIGTERM).
def _check_daemon(proc):
- exited = False
- code = proc.poll()
- if code is not None:
+ global _failed_daemon_output
+ code = proc.wait()
+ # If a daemon doesn't catch SIGTERM (like gss-server), treat it as
+ # a normal exit.
+ if code == -signal.SIGTERM:
+ code = 0
+ if code != 0:
output('*** Daemon pid %d exited with code %d\n' % (proc.pid, code))
- flags = fcntl.fcntl(proc.stdout, fcntl.F_GETFL)
- fcntl.fcntl(proc.stdout, fcntl.F_SETFL, flags | os.O_NONBLOCK)
- try:
- out = proc.stdout.read()
- except:
- return
-
+ out, err = proc.communicate()
+ if code != 0:
+ _failed_daemon_output = out
output('*** Daemon pid %d output:\n' % proc.pid)
output(out)
+
return code
-# Check all tracked daemon processes. If any daemons already exited,
-# remove them from the list (so we don't try to terminate them again).
-# If any daemons exited with an error, fail out.
-def _check_daemons():
- exited = []
+# Terminate all active daemon processes. Fail out if any of them
+# exited unsuccessfully.
+def _stop_daemons():
+ global _daemons
daemon_error = False
for proc in _daemons:
+ os.kill(proc.pid, signal.SIGTERM)
code = _check_daemon(proc)
- if code is not None:
- exited.append(proc)
- if code != 0:
- daemon_error = True
-
- for proc in exited:
- _daemons.remove(proc)
-
+ if code != 0:
+ daemon_error = True
+ _daemons = []
if daemon_error:
fail('One or more daemon processes exited with an error')
-def stop_daemon(proc):
- code = _check_daemon(proc)
- if code is not None:
- _daemons.remove(proc)
- if code != 0:
- fail('Daemon process %d exited early' % proc.pid)
- else:
- output('*** Terminating process %d\n' % proc.pid)
- os.kill(proc.pid, signal.SIGTERM)
- proc.wait()
- _daemons.remove(proc)
-
-
+# Wait for a daemon process to exit. Fail out if it exits
+# unsuccessfully.
def await_daemon_exit(proc):
- code = proc.wait()
+ code = _check_daemon(proc)
_daemons.remove(proc)
if code != 0:
- fail('Daemon process %d exited with status %d' % (proc.pid, code))
+ fail('Daemon exited unsuccessfully')
+
+
+# Terminate one daemon process. Fail out if it exits unsuccessfully.
+def stop_daemon(proc):
+ os.kill(proc.pid, signal.SIGTERM)
+ return await_daemon_exit(proc)
class K5Realm(object):
# Exercise the DES3 enctype.
('des3', None,
- {'libdefaults': {'permitted_enctypes': 'des3'}},
+ {'libdefaults': {'permitted_enctypes': 'des3 aes256-sha1'}},
{'realms': {'$realm': {
'supported_enctypes': 'des3-cbc-sha1:normal',
'master_key_type': 'des3-cbc-sha1'}}}),
# Exercise the arcfour enctype.
('arcfour', None,
- {'libdefaults': {'permitted_enctypes': 'rc4'}},
+ {'libdefaults': {'permitted_enctypes': 'rc4 aes256-sha1'}},
{'realms': {'$realm': {
'supported_enctypes': 'arcfour-hmac:normal',
'master_key_type': 'arcfour-hmac'}}}),
_last_mark = None
_last_cmd = None
_last_cmd_output = None
+_failed_daemon_output = None
buildtop = _find_buildtop()
srctop = _find_srctop()
plugins = os.path.join(buildtop, 'plugins')
*ret_list = list->list;
return;
} else {
- for (cp = list->list; *cp; cp++)
+ for (cp = list->list; cp && *cp; cp++)
free(*cp);
free(list->list);
}
k5_buf_free(&buf);
return ret;
}
- if (k5_buf_status(&buf) != 0)
- return ENOMEM;
- *json_out = buf.data;
- return 0;
+ *json_out = k5_buf_cstring(&buf);
+ return (*json_out == NULL) ? ENOMEM : 0;
}
/*** JSON decoding ***/
if (buf->buftype == K5BUF_ERROR)
return 0;
- if (buf->space - 1 - buf->len >= len) /* Enough room already. */
+ if (buf->space - buf->len >= len) /* Enough room already. */
return 1;
if (buf->buftype == K5BUF_FIXED) /* Can't resize a fixed buffer. */
goto error_exit;
assert(buf->buftype == K5BUF_DYNAMIC || buf->buftype == K5BUF_DYNAMIC_ZAP);
new_space = buf->space * 2;
- while (new_space - buf->len - 1 < len) {
+ while (new_space - buf->len < len) {
if (new_space > SIZE_MAX / 2)
goto error_exit;
new_space *= 2;
if (new_data == NULL)
goto error_exit;
memcpy(new_data, buf->data, buf->len);
- new_data[buf->len] = '\0';
zap(buf->data, buf->len);
free(buf->data);
} else {
}
void
-k5_buf_init_fixed(struct k5buf *buf, char *data, size_t space)
+k5_buf_init_fixed(struct k5buf *buf, void *data, size_t space)
{
assert(space > 0);
buf->buftype = K5BUF_FIXED;
buf->data = data;
buf->space = space;
buf->len = 0;
- *endptr(buf) = '\0';
}
void
return;
}
buf->len = 0;
- *endptr(buf) = '\0';
}
void
if (len > 0)
memcpy(endptr(buf), data, len);
buf->len += len;
- *endptr(buf) = '\0';
}
void
if (r >= 0) {
/* snprintf correctly told us how much space is required. */
- if (!ensure_space(buf, r))
+ if (!ensure_space(buf, r + 1))
return;
remaining = buf->space - buf->len;
r = vsnprintf(endptr(buf), remaining, fmt, ap);
return;
}
if (ensure_space(buf, r)) {
- /* Copy the temporary string into buf, including terminator. */
- memcpy(endptr(buf), tmp, r + 1);
+ /* Copy the temporary string into buf. */
+ memcpy(endptr(buf), tmp, r);
buf->len += r;
}
if (buf->buftype == K5BUF_DYNAMIC_ZAP)
va_end(ap);
}
+char *
+k5_buf_cstring(struct k5buf *buf)
+{
+ if (!ensure_space(buf, 1))
+ return NULL;
+ *endptr(buf) = '\0';
+ return buf->data;
+}
+
void *
k5_buf_get_space(struct k5buf *buf, size_t len)
{
if (!ensure_space(buf, len))
return NULL;
buf->len += len;
- *endptr(buf) = '\0';
return endptr(buf) - len;
}
return;
assert(len <= buf->len);
buf->len = len;
- *endptr(buf) = '\0';
}
int
k5_buf_add_len
k5_buf_add_fmt
k5_buf_add_vfmt
+k5_buf_cstring
k5_buf_get_space
k5_buf_truncate
k5_buf_status
krb5int_utf8_to_ucs4
krb5int_utf8_lentab
krb5int_utf8_mintab
-krb5int_utf8_next
krb5int_zap
#if USE_DLOPEN
#include <dlfcn.h>
#endif
-#include <sys/types.h>
-#ifdef HAVE_SYS_STAT_H
-#include <sys/stat.h>
-#endif
-#ifdef HAVE_SYS_PARAM_H
-#include <sys/param.h>
-#endif
-#ifdef HAVE_UNISTD_H
-#include <unistd.h>
-#endif
#if USE_DLOPEN
#ifdef RTLD_GROUP
#endif
#endif
-#if USE_DLOPEN && USE_CFBUNDLE
-#include <CoreFoundation/CoreFoundation.h>
-
-/* Currently CoreFoundation only exists on the Mac so we just use
- * pthreads directly to avoid creating empty function calls on other
- * platforms. If a thread initializer ever gets created in the common
- * plugin code, move this there */
-static pthread_mutex_t krb5int_bundle_mutex = PTHREAD_MUTEX_INITIALIZER;
-#endif
-
#include <stdarg.h>
static void Tprintf (const char *fmt, ...)
{
}
struct plugin_file_handle {
-#if USE_DLOPEN
+#if defined(USE_DLOPEN)
void *dlhandle;
-#endif
-#ifdef _WIN32
- HMODULE hinstPlugin;
-#endif
-#if !defined (USE_DLOPEN) && !defined (_WIN32)
+#elif defined(_WIN32)
+ HMODULE module;
+#else
char dummy;
#endif
};
-#ifdef _WIN32
-struct dirent {
- long d_ino; /* inode (always 1 in WIN32) */
- off_t d_off; /* offset to this dirent */
- unsigned short d_reclen; /* length of d_name */
- char d_name[_MAX_FNAME+1]; /* filename (null terminated) */
-};
-
-typedef struct {
- intptr_t handle; /* _findfirst/_findnext handle */
- short offset; /* offset into directory */
- short finished; /* 1 if there are not more files */
- struct _finddata_t fileinfo;/* from _findfirst/_findnext */
- char *dir; /* the dir we are reading */
- struct dirent dent; /* the dirent to return */
-} DIR;
+#if defined(USE_DLOPEN)
-DIR * opendir(const char *dir)
+static long
+open_plugin_dlfcn(struct plugin_file_handle *h, const char *filename,
+ struct errinfo *ep)
{
- DIR *dp;
- char *filespec;
- intptr_t handle;
- int index;
-
- filespec = malloc(strlen(dir) + 2 + 1);
- strcpy(filespec, dir);
- index = strlen(filespec) - 1;
- if (index >= 0 && (filespec[index] == '/' || filespec[index] == '\\'))
- filespec[index] = '\0';
- strcat(filespec, "/*");
-
- dp = (DIR *)malloc(sizeof(DIR));
- dp->offset = 0;
- dp->finished = 0;
- dp->dir = strdup(dir);
-
- if ((handle = _findfirst(filespec, &(dp->fileinfo))) < 0) {
- if (errno == ENOENT)
- dp->finished = 1;
- else {
- free(filespec);
- free(dp->dir);
- free(dp);
- return NULL;
- }
+ const char *e;
+
+ h->dlhandle = dlopen(filename, PLUGIN_DLOPEN_FLAGS);
+ if (h->dlhandle == NULL) {
+ e = dlerror();
+ if (e == NULL)
+ e = _("unknown failure");
+ Tprintf("dlopen(%s): %s\n", filename, e);
+ k5_set_error(ep, ENOENT, _("unable to load plugin [%s]: %s"),
+ filename, e);
+ return ENOENT;
}
-
- dp->handle = handle;
- free(filespec);
-
- return dp;
+ return 0;
}
+#define open_plugin open_plugin_dlfcn
-struct dirent * readdir(DIR *dp)
+static long
+get_sym_dlfcn(struct plugin_file_handle *h, const char *csymname,
+ void **sym_out, struct errinfo *ep)
{
- if (!dp || dp->finished) return NULL;
-
- if (dp->offset != 0) {
- if (_findnext(dp->handle, &(dp->fileinfo)) < 0) {
- dp->finished = 1;
- return NULL;
- }
+ const char *e;
+
+ if (h->dlhandle == NULL)
+ return ENOENT;
+ *sym_out = dlsym(h->dlhandle, csymname);
+ if (*sym_out == NULL) {
+ e = dlerror();
+ if (e == NULL)
+ e = _("unknown failure");
+ Tprintf("dlsym(%s): %s\n", csymname, e);
+ k5_set_error(ep, ENOENT, "%s", e);
+ return ENOENT;
}
- dp->offset++;
-
- strncpy(dp->dent.d_name, dp->fileinfo.name, _MAX_FNAME);
- dp->dent.d_ino = 1;
- dp->dent.d_reclen = (unsigned short)strlen(dp->dent.d_name);
- dp->dent.d_off = dp->offset;
-
- return &(dp->dent);
-}
-
-int closedir(DIR *dp)
-{
- if (!dp) return 0;
- _findclose(dp->handle);
- free(dp->dir);
- free(dp);
-
return 0;
}
-#endif
+#define get_sym get_sym_dlfcn
-long KRB5_CALLCONV
-krb5int_open_plugin (const char *filepath, struct plugin_file_handle **h, struct errinfo *ep)
+static void
+close_plugin_dlfcn(struct plugin_file_handle *h)
{
- long err = 0;
- struct plugin_file_handle *htmp = NULL;
- int got_plugin = 0;
-#if defined(USE_CFBUNDLE) || defined(_WIN32)
- struct stat statbuf;
-
- if (!err) {
- if (stat (filepath, &statbuf) < 0) {
- err = errno;
- Tprintf ("stat(%s): %s\n", filepath, strerror (err));
- k5_set_error(ep, err, _("unable to find plugin [%s]: %s"),
- filepath, strerror(err));
- }
- }
-#endif
-
- if (!err) {
- htmp = calloc (1, sizeof (*htmp)); /* calloc initializes ptrs to NULL */
- if (htmp == NULL) { err = ENOMEM; }
- }
-
-#if USE_DLOPEN
- if (!err
-#if USE_CFBUNDLE
- && ((statbuf.st_mode & S_IFMT) == S_IFREG
- || (statbuf.st_mode & S_IFMT) == S_IFDIR)
-#endif /* USE_CFBUNDLE */
- ) {
- void *handle = NULL;
-
-#if USE_CFBUNDLE
- char executablepath[MAXPATHLEN];
-
- if ((statbuf.st_mode & S_IFMT) == S_IFDIR) {
- int lock_err = 0;
- CFStringRef pluginString = NULL;
- CFURLRef pluginURL = NULL;
- CFBundleRef pluginBundle = NULL;
- CFURLRef executableURL = NULL;
-
- /* Lock around CoreFoundation calls since objects are refcounted
- * and the refcounts are not thread-safe. Using pthreads directly
- * because this code is Mac-specific */
- lock_err = pthread_mutex_lock(&krb5int_bundle_mutex);
- if (lock_err) { err = lock_err; }
-
- if (!err) {
- pluginString = CFStringCreateWithCString (kCFAllocatorDefault,
- filepath,
- kCFStringEncodingASCII);
- if (pluginString == NULL) { err = ENOMEM; }
- }
-
- if (!err) {
- pluginURL = CFURLCreateWithFileSystemPath (kCFAllocatorDefault,
- pluginString,
- kCFURLPOSIXPathStyle,
- true);
- if (pluginURL == NULL) { err = ENOMEM; }
- }
-
- if (!err) {
- pluginBundle = CFBundleCreate (kCFAllocatorDefault, pluginURL);
- if (pluginBundle == NULL) { err = ENOENT; } /* XXX need better error */
- }
-
- if (!err) {
- executableURL = CFBundleCopyExecutableURL (pluginBundle);
- if (executableURL == NULL) { err = ENOMEM; }
- }
-
- if (!err) {
- if (!CFURLGetFileSystemRepresentation (executableURL,
- true, /* absolute */
- (UInt8 *)executablepath,
- sizeof (executablepath))) {
- err = ENOMEM;
- }
- }
-
- if (!err) {
- /* override the path the caller passed in */
- filepath = executablepath;
- }
-
- if (executableURL != NULL) { CFRelease (executableURL); }
- if (pluginBundle != NULL) { CFRelease (pluginBundle); }
- if (pluginURL != NULL) { CFRelease (pluginURL); }
- if (pluginString != NULL) { CFRelease (pluginString); }
-
- /* unlock after CFRelease calls since they modify refcounts */
- if (!lock_err) { pthread_mutex_unlock (&krb5int_bundle_mutex); }
- }
-#endif /* USE_CFBUNDLE */
-
- if (!err) {
- handle = dlopen(filepath, PLUGIN_DLOPEN_FLAGS);
- if (handle == NULL) {
- const char *e = dlerror();
- if (e == NULL)
- e = _("unknown failure");
- Tprintf ("dlopen(%s): %s\n", filepath, e);
- err = ENOENT; /* XXX */
- k5_set_error(ep, err, _("unable to load plugin [%s]: %s"),
- filepath, e);
- }
- }
+ if (h->dlhandle != NULL)
+ dlclose(h->dlhandle);
+}
+#define close_plugin close_plugin_dlfcn
- if (!err) {
- got_plugin = 1;
- htmp->dlhandle = handle;
- handle = NULL;
- }
+#elif defined(_WIN32)
- if (handle != NULL) { dlclose (handle); }
+static long
+open_plugin_win32(struct plugin_file_handle *h, const char *filename,
+ struct errinfo *ep)
+{
+ h->module = LoadLibrary(filename);
+ if (h == NULL) {
+ Tprintf("Unable to load dll: %s\n", filename);
+ k5_set_error(ep, ENOENT, _("unable to load DLL [%s]"), filename);
+ return ENOENT;
}
-#endif /* USE_DLOPEN */
-
-#ifdef _WIN32
- if (!err && (statbuf.st_mode & S_IFMT) == S_IFREG) {
- HMODULE handle = NULL;
+ return 0;
+}
+#define open_plugin open_plugin_win32
- handle = LoadLibrary(filepath);
- if (handle == NULL) {
- Tprintf ("Unable to load dll: %s\n", filepath);
- err = ENOENT; /* XXX */
- k5_set_error(ep, err, _("unable to load DLL [%s]"), filepath);
- }
+static long
+get_sym_win32(struct plugin_file_handle *h, const char *csymname,
+ void **sym_out, struct errinfo *ep)
+{
+ LPVOID lpMsgBuf;
+ DWORD dw;
- if (!err) {
- got_plugin = 1;
- htmp->hinstPlugin = handle;
- handle = NULL;
+ if (h->module == NULL)
+ return ENOENT;
+ *sym_out = GetProcAddress(h->module, csymname);
+ if (*sym_out == NULL) {
+ Tprintf("GetProcAddress(%s): %i\n", csymname, GetLastError());
+ dw = GetLastError();
+ if (FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER |
+ FORMAT_MESSAGE_FROM_SYSTEM,
+ NULL, dw, MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
+ (LPTSTR)&lpMsgBuf, 0, NULL)) {
+ k5_set_error(ep, ENOENT, _("unable to get DLL Symbol: %s"),
+ (char *)lpMsgBuf);
+ LocalFree(lpMsgBuf);
}
-
- if (handle != NULL)
- FreeLibrary(handle);
- }
-#endif
-
- if (!err && !got_plugin) {
- err = ENOENT; /* no plugin or no way to load plugins */
- k5_set_error(ep, err, _("plugin unavailable: %s"), strerror(err));
+ return ENOENT;
}
+ return 0;
+}
+#define get_sym get_sym_win32
- if (!err) {
- *h = htmp;
- htmp = NULL; /* h takes ownership */
- }
+static void
+close_plugin_win32(struct plugin_file_handle *h)
+{
+ if (h->module != NULL)
+ FreeLibrary(h->module);
+}
+#define close_plugin close_plugin_win32
- free(htmp);
+#else
- return err;
+static long
+open_plugin_dummy(struct plugin_file_handle *h, const char *filename,
+ struct errinfo *ep)
+{
+ k5_set_error(ep, ENOENT, _("plugin loading unavailable"));
+ return ENOENT;
}
+#define open_plugin open_plugin_dummy
static long
-krb5int_get_plugin_sym (struct plugin_file_handle *h,
- const char *csymname, int isfunc, void **ptr,
- struct errinfo *ep)
+get_sym_dummy(struct plugin_file_handle *h, const char *csymname,
+ void **sym_out, struct errinfo *ep)
{
- long err = 0;
- void *sym = NULL;
+ return ENOENT;
+}
+#define get_sym get_sym_dummy
+
+static void
+close_plugin_dummy(struct plugin_file_handle *h)
+{
+}
+#define close_plugin close_plugin_dummy
-#if USE_DLOPEN
- if (!err && !sym && (h->dlhandle != NULL)) {
- /* XXX Do we need to add a leading "_" to the symbol name on any
- modern platforms? */
- sym = dlsym (h->dlhandle, csymname);
- if (sym == NULL) {
- const char *e = dlerror (); /* XXX copy and save away */
- if (e == NULL)
- e = "unknown failure";
- Tprintf ("dlsym(%s): %s\n", csymname, e);
- err = ENOENT; /* XXX */
- k5_set_error(ep, err, "%s", e);
- }
- }
#endif
-#ifdef _WIN32
- LPVOID lpMsgBuf;
- DWORD dw;
+long KRB5_CALLCONV
+krb5int_open_plugin(const char *filename,
+ struct plugin_file_handle **handle_out, struct errinfo *ep)
+{
+ long ret;
+ struct plugin_file_handle *h;
- if (!err && !sym && (h->hinstPlugin != NULL)) {
- sym = GetProcAddress(h->hinstPlugin, csymname);
- if (sym == NULL) {
- const char *e = "unable to get dll symbol"; /* XXX copy and save away */
- Tprintf ("GetProcAddress(%s): %i\n", csymname, GetLastError());
- err = ENOENT; /* XXX */
- k5_set_error(ep, err, "%s", e);
-
- dw = GetLastError();
- if (FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER |
- FORMAT_MESSAGE_FROM_SYSTEM,
- NULL,
- dw,
- MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
- (LPTSTR) &lpMsgBuf,
- 0, NULL )) {
-
- fprintf (stderr, "unable to get dll symbol, %s\n", (LPCTSTR)lpMsgBuf);
- LocalFree(lpMsgBuf);
- }
- }
- }
-#endif
+ *handle_out = NULL;
- if (!err && (sym == NULL)) {
- err = ENOENT; /* unimplemented */
- }
+ h = calloc(1, sizeof(*h));
+ if (h == NULL)
+ return ENOMEM;
- if (!err) {
- *ptr = sym;
+ ret = open_plugin(h, filename, ep);
+ if (ret) {
+ free(h);
+ return ret;
}
- return err;
+ *handle_out = h;
+ return 0;
}
long KRB5_CALLCONV
-krb5int_get_plugin_data (struct plugin_file_handle *h, const char *csymname,
- void **ptr, struct errinfo *ep)
+krb5int_get_plugin_data(struct plugin_file_handle *h, const char *csymname,
+ void **sym_out, struct errinfo *ep)
{
- return krb5int_get_plugin_sym (h, csymname, 0, ptr, ep);
+ return get_sym(h, csymname, sym_out, ep);
}
long KRB5_CALLCONV
-krb5int_get_plugin_func (struct plugin_file_handle *h, const char *csymname,
- void (**ptr)(), struct errinfo *ep)
+krb5int_get_plugin_func(struct plugin_file_handle *h, const char *csymname,
+ void (**sym_out)(), struct errinfo *ep)
{
void *dptr = NULL;
- long err = krb5int_get_plugin_sym (h, csymname, 1, &dptr, ep);
- if (!err) {
- /* Cast function pointers to avoid code duplication */
- *ptr = (void (*)()) dptr;
- }
- return err;
+ long ret = get_sym(h, csymname, &dptr, ep);
+
+ if (!ret)
+ *sym_out = (void (*)())dptr;
+ return ret;
}
void KRB5_CALLCONV
krb5int_close_plugin (struct plugin_file_handle *h)
{
-#if USE_DLOPEN
- if (h->dlhandle != NULL) { dlclose(h->dlhandle); }
-#endif
-#ifdef _WIN32
- if (h->hinstPlugin != NULL) { FreeLibrary(h->hinstPlugin); }
-#endif
- free (h);
+ close_plugin(h);
+ free(h);
}
-/* autoconf docs suggest using this preference order */
-#if HAVE_DIRENT_H || USE_DIRENT_H
-#include <dirent.h>
-#define NAMELEN(D) strlen((D)->d_name)
-#else
-#ifndef _WIN32
-#define dirent direct
-#define NAMELEN(D) ((D)->d->namlen)
-#else
-#define NAMELEN(D) strlen((D)->d_name)
-#endif
-#if HAVE_SYS_NDIR_H
-# include <sys/ndir.h>
-#elif HAVE_SYS_DIR_H
-# include <sys/dir.h>
-#elif HAVE_NDIR_H
-# include <ndir.h>
-#endif
-#endif
-
static long
krb5int_plugin_file_handle_array_init (struct plugin_file_handle ***harray)
{
if (handle != NULL) { krb5int_close_plugin (handle); }
}
} else {
- /* load all plugins in each directory */
- DIR *dir = opendir (dirnames[i]);
+ char **fnames = NULL;
+ int j;
- while (dir != NULL && !err) {
- struct dirent *d = NULL;
+ err = k5_dir_filenames(dirnames[i], &fnames);
+ for (j = 0; !err && fnames[j] != NULL; j++) {
char *filepath = NULL;
struct plugin_file_handle *handle = NULL;
- d = readdir (dir);
- if (d == NULL) { break; }
-
- if ((strcmp (d->d_name, ".") == 0) ||
- (strcmp (d->d_name, "..") == 0)) {
+ if (strcmp(fnames[j], ".") == 0 ||
+ strcmp(fnames[j], "..") == 0)
continue;
- }
- if (!err) {
- int len = NAMELEN (d);
- if (asprintf(&filepath, "%s/%*s", dirnames[i], len, d->d_name) < 0) {
- filepath = NULL;
- err = ENOMEM;
- }
+ if (asprintf(&filepath, "%s/%s", dirnames[i], fnames[j]) < 0) {
+ filepath = NULL;
+ err = ENOMEM;
}
- if (!err) {
- if (krb5int_open_plugin (filepath, &handle, ep) == 0) {
- err = krb5int_plugin_file_handle_array_add (&h, &count, handle);
- if (!err) { handle = NULL; } /* h takes ownership */
- }
+ if (!err && krb5int_open_plugin(filepath, &handle, ep) == 0) {
+ err = krb5int_plugin_file_handle_array_add(&h, &count,
+ handle);
+ if (!err)
+ handle = NULL; /* h takes ownership */
}
free(filepath);
- if (handle != NULL) { krb5int_close_plugin (handle); }
+ if (handle != NULL)
+ krb5int_close_plugin(handle);
}
- if (dir != NULL) { closedir (dir); }
+ k5_free_filenames(fnames);
}
}
} else {
fail_if(buf->space == 0, name);
fail_if(buf->len >= buf->space, name);
- fail_if(((char *)buf->data)[buf->len] != 0, name);
}
}
k5_buf_add_len(&buf, "world", 5);
check_buf(&buf, "basic fixed");
fail_if(buf.data == NULL || buf.len != 11, "basic fixed");
- fail_if(strcmp(buf.data, "Hello world") != 0, "basic fixed");
+ fail_if(memcmp(buf.data, "Hello world", 11) != 0, "basic fixed");
k5_buf_init_dynamic(&buf);
k5_buf_add_len(&buf, "Hello", 5);
k5_buf_add(&buf, " world");
check_buf(&buf, "basic dynamic");
fail_if(buf.data == NULL || buf.len != 11, "basic dynamic");
- fail_if(strcmp(buf.data, "Hello world") != 0, "basic dynamic");
+ fail_if(memcmp(buf.data, "Hello world", 11) != 0, "basic dynamic");
k5_buf_free(&buf);
}
/* Cause a fixed-sized buffer overflow. */
k5_buf_init_fixed(&buf, storage, sizeof(storage));
k5_buf_add(&buf, "12345");
- k5_buf_add(&buf, "12345");
+ k5_buf_add(&buf, "123456");
check_buf(&buf, "overflow 1");
fail_if(buf.buftype != K5BUF_ERROR, "overflow 1");
/* Cause an overflow and then perform actions afterwards. */
k5_buf_init_fixed(&buf, storage, sizeof(storage));
- k5_buf_add(&buf, "1");
+ k5_buf_add(&buf, "12");
fail_if(buf.buftype != K5BUF_ERROR, "error");
check_buf(&buf, "error");
k5_buf_add(&buf, "test");
k5_buf_truncate(&buf, 7);
check_buf(&buf, "truncate");
fail_if(buf.data == NULL || buf.len != 7, "truncate");
- fail_if(strcmp(buf.data, "abcdefg") != 0, "truncate");
+ fail_if(memcmp(buf.data, "abcdefg", 7) != 0, "truncate");
k5_buf_free(&buf);
}
k5_buf_add_fmt(&buf, " %d ", 3);
check_buf(&buf, "fmt 1");
fail_if(buf.data == NULL || buf.len != 6, "fmt 1");
- fail_if(strcmp(buf.data, "foo 3 ") != 0, "fmt 1");
+ fail_if(memcmp(buf.data, "foo 3 ", 6) != 0, "fmt 1");
/* Overflow the same buffer with formatted text. */
k5_buf_add_fmt(&buf, "%d%d%d%d", 1, 2, 3, 4);
k5_buf_add_fmt(&buf, " %d ", 3);
check_buf(&buf, "fmt 3");
fail_if(buf.data == NULL || buf.len != 6, "fmt 3");
- fail_if(strcmp(buf.data, "foo 3 ") != 0, "fmt 3");
+ fail_if(memcmp(buf.data, "foo 3 ", 6) != 0, "fmt 3");
/* Format more text into the same buffer, causing a big resize. */
k5_buf_add_fmt(&buf, "%s", data);
check_buf(&buf, "fmt 4");
fail_if(buf.space != 2048, "fmt 4");
fail_if(buf.data == NULL || buf.len != 1029, "fmt 4");
- fail_if(strcmp((char *)buf.data + 6, data) != 0, "fmt 4");
+ fail_if(memcmp((char *)buf.data + 6, data, 1023) != 0, "fmt 4");
k5_buf_free(&buf);
}
#endif
/*
- * len is 0 for invalid encoding prefixes (krb5int_utf8_charlen2() partially
+ * len is 0 for invalid encoding prefixes (KRB5_UTF8_CHARLEN2() partially
* enforces the validity of the first two bytes, based on masking the second
* byte. It doesn't check whether bit 6 is 0, though, and doesn't catch the
* range between U+110000 and U+13FFFF).
*
* ucs is 0 for invalid encodings (including ones with valid prefixes according
- * to krb5int_utf8_charlen2(); krb5int_utf8_to_ucs4() will still fail on them
+ * to KRB5_UTF8_CHARLEN2(); krb5int_utf8_to_ucs4() will still fail on them
* because it checks more things.) Code points above U+10FFFF are excluded by
* the actual test code and remain in the table for possibly testing the old
* implementation that didn't exclude them.
int len, status = 0;
krb5_ucs4 u = 0;
- len = krb5int_utf8_charlen2(t->p);
+ len = KRB5_UTF8_CHARLEN2(t->p, len);
if (len != t->len) {
printf("expected len=%d, got len=%d\n", t->len, len);
status = 1;
#include "supp-int.h"
/*
- * return the number of bytes required to hold the
- * NULL-terminated UTF-8 string NOT INCLUDING the
- * termination.
- */
-size_t krb5int_utf8_bytes(const char *p)
-{
- size_t bytes;
-
- for (bytes = 0; p[bytes]; bytes++)
- ;
-
- return bytes;
-}
-
-size_t krb5int_utf8_chars(const char *p)
-{
- /* could be optimized and could check for invalid sequences */
- size_t chars = 0;
-
- for ( ; *p ; KRB5_UTF8_INCR(p))
- chars++;
-
- return chars;
-}
-
-size_t krb5int_utf8c_chars(const char *p, size_t length)
-{
- /* could be optimized and could check for invalid sequences */
- size_t chars = 0;
- const char *end = p + length;
-
- for ( ; p < end; KRB5_UTF8_INCR(p))
- chars++;
-
- return chars;
-}
-
-/* return offset to next character */
-int krb5int_utf8_offset(const char *p)
-{
- return KRB5_UTF8_NEXT(p) - p;
-}
-
-/*
* Returns length indicated by first byte.
*/
const char krb5int_utf8_lentab[] = {
3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3,
4, 4, 4, 4, 4, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 };
-int krb5int_utf8_charlen(const char *p)
-{
- if (!(*p & 0x80))
- return 1;
-
- return krb5int_utf8_lentab[*(const unsigned char *)p ^ 0x80];
-}
-
/*
* Make sure the UTF-8 char used the shortest possible encoding
* returns charlen if valid, 0 if not.
(c)0x00, (c)0x00, (c)0x00, (c)0x00, (c)0x00, (c)0x00, (c)0x00, (c)0x00 };
#undef c
-int krb5int_utf8_charlen2(const char *p)
-{
- int i = KRB5_UTF8_CHARLEN(p);
-
- if (i > 2) {
- if (!(krb5int_utf8_mintab[*p & 0x1f] & p[1]))
- i = 0;
- }
-
- return i;
-}
-
/*
* Convert a UTF8 character to a UCS4 character. Return 0 on success,
* -1 on failure.
return 0;
}
-int krb5int_utf8_to_ucs2(const char *p, krb5_ucs2 *out)
-{
- krb5_ucs4 ch;
-
- *out = 0;
- if (krb5int_utf8_to_ucs4(p, &ch) == -1 || ch > 0xFFFF)
- return -1;
- *out = (krb5_ucs2) ch;
- return 0;
-}
-
/* conv UCS-4 to UTF-8 */
size_t krb5int_ucs4_to_utf8(krb5_ucs4 c, char *buf)
{
return len;
}
-
-size_t krb5int_ucs2_to_utf8(krb5_ucs2 c, char *buf)
-{
- return krb5int_ucs4_to_utf8((krb5_ucs4)c, buf);
-}
-
-/*
- * Advance to the next UTF-8 character
- *
- * Ignores length of multibyte character, instead rely on
- * continuation markers to find start of next character.
- * This allows for "resyncing" of when invalid characters
- * are provided provided the start of the next character
- * is appears within the 6 bytes examined.
- */
-char *krb5int_utf8_next(const char *p)
-{
- int i;
- const unsigned char *u = (const unsigned char *) p;
-
- if (KRB5_UTF8_ISASCII(u)) {
- return (char *) &p[1];
- }
-
- for (i = 1; i < 6; i++) {
- if ((u[i] & 0xc0) != 0x80) {
- return (char *) &p[i];
- }
- }
-
- return (char *) &p[i];
-}
-
-/*
- * Advance to the previous UTF-8 character
- *
- * Ignores length of multibyte character, instead rely on
- * continuation markers to find start of next character.
- * This allows for "resyncing" of when invalid characters
- * are provided provided the start of the next character
- * is appears within the 6 bytes examined.
- */
-char *krb5int_utf8_prev(const char *p)
-{
- int i;
- const unsigned char *u = (const unsigned char *) p;
-
- for (i = -1; i>-6 ; i--) {
- if ((u[i] & 0xc0 ) != 0x80) {
- return (char *) &p[i];
- }
- }
-
- return (char *) &p[i];
-}
-
-/*
- * Copy one UTF-8 character from src to dst returning
- * number of bytes copied.
- *
- * Ignores length of multibyte character, instead rely on
- * continuation markers to find start of next character.
- * This allows for "resyncing" of when invalid characters
- * are provided provided the start of the next character
- * is appears within the 6 bytes examined.
- */
-int krb5int_utf8_copy(char* dst, const char *src)
-{
- int i;
- const unsigned char *u = (const unsigned char *) src;
-
- dst[0] = src[0];
-
- if (KRB5_UTF8_ISASCII(u)) {
- return 1;
- }
-
- for (i=1; i<6; i++) {
- if ((u[i] & 0xc0) != 0x80) {
- return i;
- }
- dst[i] = src[i];
- }
-
- return i;
-}
-
-#ifndef UTF8_ALPHA_CTYPE
-/*
- * UTF-8 ctype routines
- * Only deals with characters < 0x80 (ie: US-ASCII)
- */
-
-int krb5int_utf8_isascii(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- return KRB5_ASCII(c);
-}
-
-int krb5int_utf8_isdigit(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- if (!KRB5_ASCII(c))
- return 0;
-
- return KRB5_DIGIT( c );
-}
-
-int krb5int_utf8_isxdigit(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- if (!KRB5_ASCII(c))
- return 0;
-
- return KRB5_HEX(c);
-}
-
-int krb5int_utf8_isspace(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- if (!KRB5_ASCII(c))
- return 0;
-
- switch(c) {
- case ' ':
- case '\t':
- case '\n':
- case '\r':
- case '\v':
- case '\f':
- return 1;
- }
-
- return 0;
-}
-
-/*
- * These are not needed by the C SDK and are
- * not "good enough" for general use.
- */
-int krb5int_utf8_isalpha(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- if (!KRB5_ASCII(c))
- return 0;
-
- return KRB5_ALPHA(c);
-}
-
-int krb5int_utf8_isalnum(const char * p)
-{
- unsigned c = * (const unsigned char *) p;
-
- if (!KRB5_ASCII(c))
- return 0;
-
- return KRB5_ALNUM(c);
-}
-#endif
-
-
-/*
- * UTF-8 string routines
- */
-
-/* like strchr() */
-char *krb5int_utf8_strchr(const char *str, const char *chr)
-{
- krb5_ucs4 chs, ch;
-
- if (krb5int_utf8_to_ucs4(chr, &ch) == -1)
- return NULL;
- for ( ; *str != '\0'; KRB5_UTF8_INCR(str)) {
- if (krb5int_utf8_to_ucs4(str, &chs) == 0 && chs == ch)
- return (char *)str;
- }
-
- return NULL;
-}
-
-/* like strcspn() but returns number of bytes, not characters */
-size_t krb5int_utf8_strcspn(const char *str, const char *set)
-{
- const char *cstr, *cset;
- krb5_ucs4 chstr, chset;
-
- for (cstr = str; *cstr != '\0'; KRB5_UTF8_INCR(cstr)) {
- for (cset = set; *cset != '\0'; KRB5_UTF8_INCR(cset)) {
- if (krb5int_utf8_to_ucs4(cstr, &chstr) == 0
- && krb5int_utf8_to_ucs4(cset, &chset) == 0 && chstr == chset)
- return cstr - str;
- }
- }
-
- return cstr - str;
-}
-
-/* like strspn() but returns number of bytes, not characters */
-size_t krb5int_utf8_strspn(const char *str, const char *set)
-{
- const char *cstr, *cset;
- krb5_ucs4 chstr, chset;
-
- for (cstr = str; *cstr != '\0'; KRB5_UTF8_INCR(cstr)) {
- for (cset = set; ; KRB5_UTF8_INCR(cset)) {
- if (*cset == '\0')
- return cstr - str;
- if (krb5int_utf8_to_ucs4(cstr, &chstr) == 0
- && krb5int_utf8_to_ucs4(cset, &chset) == 0 && chstr == chset)
- break;
- }
- }
-
- return cstr - str;
-}
-
-/* like strpbrk(), replaces strchr() as well */
-char *krb5int_utf8_strpbrk(const char *str, const char *set)
-{
- const char *cset;
- krb5_ucs4 chstr, chset;
-
- for ( ; *str != '\0'; KRB5_UTF8_INCR(str)) {
- for (cset = set; *cset != '\0'; KRB5_UTF8_INCR(cset)) {
- if (krb5int_utf8_to_ucs4(str, &chstr) == 0
- && krb5int_utf8_to_ucs4(cset, &chset) == 0 && chstr == chset)
- return (char *)str;
- }
- }
-
- return NULL;
-}
-
-/* like strtok_r(), not strtok() */
-char *krb5int_utf8_strtok(char *str, const char *sep, char **last)
-{
- char *begin;
- char *end;
-
- if (last == NULL)
- return NULL;
-
- begin = str ? str : *last;
-
- begin += krb5int_utf8_strspn(begin, sep);
-
- if (*begin == '\0') {
- *last = NULL;
- return NULL;
- }
-
- end = &begin[krb5int_utf8_strcspn(begin, sep)];
-
- if (*end != '\0') {
- char *next = KRB5_UTF8_NEXT(end);
- *end = '\0';
- end = next;
- }
-
- *last = end;
-
- return begin;
-}
if (in.status)
goto invalid;
- *utf8_out = buf.data;
- return 0;
+ *utf8_out = k5_buf_cstring(&buf);
+ return (*utf8_out == NULL) ? ENOMEM : 0;
invalid:
k5_buf_free(&buf);
<?define VCVer="141"?>
<?elseif $(env.VISUALSTUDIOVERSION) = "16.0"?>
<?define VCVer="142"?>
+ <?elseif $(env.VISUALSTUDIOVERSION) = "17.0"?>
+ <?define VCVer="143"?>
<?else?>
<?error Unknown MFC version?>
<?endif?>
#define K5_PRODUCT_VERSION_STRING MAJOR_MINOR MAYBE_PATCH RELTAIL "\0"
#define K5_PRODUCT_VERSION KRB5_MAJOR_RELEASE, KRB5_MINOR_RELEASE, KRB5_PATCHLEVEL, KRB5_BUILDLEVEL
-#define K5_COPYRIGHT "Copyright (C) 1997-2022 by the Massachusetts Institute of Technology\0"
+#define K5_COPYRIGHT "Copyright (C) 1997-2023 by the Massachusetts Institute of Technology\0"
#define K5_COMPANY_NAME "Massachusetts Institute of Technology.\0"
/*
projects / platform / upstream / krb5.git / commitdiff
